Total Rows: 419751 

Security Headers Grades:
A 23,185
A+ 2,667
B 18,468
C 18,262
D 77,071
E 12,411
F 267,631
R 56

Sites using strict-transport-security:
107,868

Sites using content-security-policy:
52,548

Sites using content-security-policy-report-only:
3,605

Sites using x-webkit-csp:
375

Sites using x-content-security-policy:
1,508

Sites using public-key-pins:
356

Sites using public-key-pins-report-only:
8

Sites using x-content-type-options:
102,541

Sites using x-frame-options:
124,755

Sites using x-xss-protection:
75,438

Sites using x-download-options:
13,898

Sites using x-permitted-cross-domain-policies:
16,342

Sites using access-control-allow-origin:
23,412

Sites using referrer-policy:
65,409

Sites using feature-policy:
2,551

Sites using permissions-policy:
22,067

Sites using report-to:
130,385

Sites using nel:
129,579

Sites using security.txt:
3,466

Sites redirecting to HTTPS:
297,300

Sites using Let's Encrypt certificate:
140,734

Sites using EV Certificates:
3,446

Top 10 Server headers:
cloudflare 156,647
nginx 63,920
Apache 38,857
LiteSpeed 10,256
Microsoft-IIS/10.0 9,557
nginx/1.14.0 (Ubuntu) 6,041
openresty 5,182
nginx/1.18.0 (Ubuntu) 4,838
AmazonS3 3,833
nginx/1.20.1 2,378

Top 10 TLDs:
.com 183,726
.ru 18,439
.net 17,834
.cn 16,669
.org 14,231
.top 9,526
.br 8,037
.de 7,835
.jp 5,872
.uk 5,048

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = R3 107,609
C = US, O = Google Trust Services LLC, CN = GTS CA 1P5 53,934
C = US, O = Let's Encrypt, CN = E1 33,112
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 13,485
C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 9,245
C = US, O = Amazon, CN = Amazon RSA 2048 M02 7,927
C = US, O = Amazon, CN = Amazon RSA 2048 M03 6,441
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 6,162
C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1 4,606
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1 3,073

TLS Protocol Versions:
TLSv1.3 195,407
TLSv1.2 52,781
TLSv1.0 126

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 166,511
TLS_AES_128_GCM_SHA256 27,484
ECDHE-RSA-AES256-GCM-SHA384 25,866
ECDHE-RSA-AES128-GCM-SHA256 18,647
ECDHE-RSA-CHACHA20-POLY1305 3,764
TLS_CHACHA20_POLY1305_SHA256 1,412
ECDHE-RSA-AES256-SHA384 1,373
ECDHE-ECDSA-AES256-GCM-SHA384 1,143
ECDHE-ECDSA-CHACHA20-POLY1305 605
ECDHE-ECDSA-AES128-GCM-SHA256 538

Top 10 PFS Key Exchange Params:
X25519, 253 bits 208,185
ECDH, P-256, 256 bits 31,997
ECDH, P-384, 384 bits 5,024
ECDH, P-521, 521 bits 2,385
DH, 1024 bits 209
DH, 2048 bits 185
DH, 4096 bits 8
X448, 448 bits 7

Top Key Sizes:
2048 bit 180,142
256 bit 46,752
4096 bit 16,664
384 bit 3,150
3072 bit 1,246
1024 bit 39
8192 bit 5
3000 bit 1
3112 bit 1

Sites using CAA:
16,526

HTTP Protocol Versions:
http/2.0 242,367
http/1.1 176,850
http/1.0 509