Total Rows: 832714 

Security Headers Grades:
A 33,177
A+ 3,646
B 35,316
C 39,952
D 150,305
E 15,244
F 554,965
R 109

Sites using strict-transport-security:
201,956

Sites using content-security-policy:
85,067

Sites using content-security-policy-report-only:
5,330

Sites using x-webkit-csp:
810

Sites using x-content-security-policy:
2,513

Sites using public-key-pins:
472

Sites using public-key-pins-report-only:
34

Sites using x-content-type-options:
196,285

Sites using x-frame-options:
212,078

Sites using x-xss-protection:
142,385

Sites using x-download-options:
21,165

Sites using x-permitted-cross-domain-policies:
21,354

Sites using access-control-allow-origin:
43,100

Sites using referrer-policy:
84,904

Sites using feature-policy:
5,721

Sites using permissions-policy:
43,771

Sites using report-to:
186,795

Sites using nel:
185,630

Sites using security.txt:
9,614

Sites redirecting to HTTPS:
611,898

Sites using Let's Encrypt certificate:
255,913

Sites using EV Certificates:
8,139

Top 10 Server headers:
cloudflare 222,635
nginx 155,223
Apache 127,466
LiteSpeed 24,463
openresty 17,375
Microsoft-IIS/10.0 17,078
Microsoft-IIS/8.5 9,441
AmazonS3 6,872
nginx/1.18.0 (Ubuntu) 6,632
Apache/2 5,932

Top 10 TLDs:
.com 396,643
.ru 47,898
.org 46,654
.net 43,653
.de 20,141
.uk 14,317
.xyz 9,982
.br 8,750
.jp 8,284
.nl 8,094

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = R3 225,903
C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 130,968
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 36,858
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 30,754
C = US, O = Let's Encrypt, CN = E1 29,906
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 19,293
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 16,766
C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1 15,529
C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G2 6,155
C = US, O = DigiCert Inc, CN = RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1 6,035

TLS Protocol Versions:
TLSv1.3 407,215
TLSv1.2 176,732
TLSv1.0 465

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 361,194
ECDHE-RSA-AES256-GCM-SHA384 89,066
ECDHE-RSA-AES128-GCM-SHA256 64,509
TLS_AES_128_GCM_SHA256 41,199
ECDHE-RSA-CHACHA20-POLY1305 7,681
ECDHE-RSA-AES256-SHA384 7,464
TLS_CHACHA20_POLY1305_SHA256 4,822
ECDHE-ECDSA-CHACHA20-POLY1305 2,400
ECDHE-ECDSA-AES256-GCM-SHA384 1,602
DHE-RSA-AES256-GCM-SHA384 1,081

Top 10 PFS Key Exchange Params:
X25519, 253 bits 448,798
ECDH, P-256, 256 bits 110,407
ECDH, P-384, 384 bits 18,587
ECDH, P-521, 521 bits 3,969
DH, 1024 bits 979
DH, 2048 bits 566
X448, 448 bits 15
DH, 4096 bits 13
DH, 3072 bits 3

Top Key Sizes:
2048 bit 370,768
256 bit 164,163
4096 bit 38,475
384 bit 6,880
3072 bit 2,849
1024 bit 177
8192 bit 18
3112 bit 2
2408 bit 1
521 bit 1

Sites using CAA:
37,857

HTTP Protocol Versions:
http/2.0 475,781
http/1.1 355,702
http/1.0 1,207