Total Rows: 838600 

Security Headers Grades:
A 44,935
A+ 5,032
B 39,729
C 39,176
D 165,329
E 22,222
F 522,064
R 113

Sites using strict-transport-security:
221,330

Sites using content-security-policy:
103,177

Sites using content-security-policy-report-only:
7,363

Sites using x-webkit-csp:
768

Sites using x-content-security-policy:
3,159

Sites using public-key-pins:
680

Sites using public-key-pins-report-only:
34

Sites using x-content-type-options:
216,233

Sites using x-frame-options:
257,868

Sites using x-xss-protection:
157,838

Sites using x-download-options:
27,394

Sites using x-permitted-cross-domain-policies:
31,552

Sites using access-control-allow-origin:
48,017

Sites using referrer-policy:
133,602

Sites using feature-policy:
5,574

Sites using permissions-policy:
39,416

Sites using report-to:
249,185

Sites using nel:
247,548

Sites using security.txt:
6,529

Sites redirecting to HTTPS:
645,823

Sites using Let's Encrypt certificate:
278,451

Sites using EV Certificates:
6,924

Top 10 Server headers:
cloudflare 299,760
nginx 133,159
Apache 92,307
LiteSpeed 21,553
Microsoft-IIS/10.0 18,100
openresty 12,879
nginx/1.18.0 (Ubuntu) 8,883
AmazonS3 7,287
nginx/1.20.1 5,180
Microsoft-IIS/8.5 4,722

Top 10 TLDs:
.com 370,620
.ru 42,376
.net 39,015
.org 32,795
.top 20,267
.de 16,903
.br 16,156
.jp 12,028
.uk 11,983
.xyz 9,896

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = R3 228,220
C = US, O = Google Trust Services LLC, CN = GTS CA 1P5 104,324
C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 56,531
C = US, O = Let's Encrypt, CN = E1 50,200
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 30,183
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 17,875
C = US, O = Amazon, CN = Amazon RSA 2048 M02 15,900
C = US, O = Amazon, CN = Amazon RSA 2048 M01 13,222
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 10,919
C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G4 8,232

TLS Protocol Versions:
TLSv1.3 482,310
TLSv1.2 146,244
TLSv1.0 315

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 422,701
ECDHE-RSA-AES256-GCM-SHA384 73,096
TLS_AES_128_GCM_SHA256 56,191
ECDHE-RSA-AES128-GCM-SHA256 49,946
ECDHE-RSA-CHACHA20-POLY1305 10,681
ECDHE-RSA-AES256-SHA384 4,199
TLS_CHACHA20_POLY1305_SHA256 3,418
ECDHE-ECDSA-AES256-GCM-SHA384 2,642
ECDHE-ECDSA-CHACHA20-POLY1305 1,698
ECDHE-ECDSA-AES128-GCM-SHA256 1,248

Top 10 PFS Key Exchange Params:
X25519, 253 bits 521,349
ECDH, P-256, 256 bits 85,219
ECDH, P-384, 384 bits 14,018
ECDH, P-521, 521 bits 6,210
DH, 1024 bits 627
DH, 2048 bits 508
DH, 4096 bits 22
X448, 448 bits 18
DH, 3072 bits 2

Top Key Sizes:
2048 bit 447,825
256 bit 125,020
4096 bit 44,037
384 bit 7,769
3072 bit 3,177
1024 bit 117
8192 bit 22
3112 bit 2
2096 bit 1
2408 bit 1

Sites using CAA:
47,987

HTTP Protocol Versions:
http/2.0 518,866
http/1.1 318,558
http/1.0 1,133