Total Rows: 387520 

Security Headers Grades:
A 21,377
A+ 2,550
B 18,202
C 16,922
D 72,149
E 11,790
F 244,476
R 54

Sites using strict-transport-security:
101,344

Sites using content-security-policy:
48,808

Sites using content-security-policy-report-only:
3,369

Sites using x-webkit-csp:
341

Sites using x-content-security-policy:
1,383

Sites using public-key-pins:
495

Sites using public-key-pins-report-only:
9

Sites using x-content-type-options:
96,002

Sites using x-frame-options:
117,798

Sites using x-xss-protection:
70,903

Sites using x-download-options:
12,523

Sites using x-permitted-cross-domain-policies:
14,847

Sites using access-control-allow-origin:
23,761

Sites using referrer-policy:
61,740

Sites using feature-policy:
2,451

Sites using permissions-policy:
21,033

Sites using report-to:
121,365

Sites using nel:
120,640

Sites using security.txt:
3,349

Sites redirecting to HTTPS:
279,351

Sites using Let's Encrypt certificate:
131,140

Sites using EV Certificates:
3,137

Top 10 Server headers:
cloudflare 146,117
nginx 58,290
Apache 35,477
LiteSpeed 9,699
Microsoft-IIS/10.0 8,666
openresty 4,528
nginx/1.18.0 (Ubuntu) 4,385
nginx/1.14.0 (Ubuntu) 3,951
AmazonS3 3,557
nginx/1.20.1 2,203

Top 10 TLDs:
.com 169,176
.ru 16,806
.net 16,189
.cn 15,215
.org 13,118
.top 8,677
.br 7,172
.de 7,111
.jp 4,968
.uk 4,723

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = R3 98,159
C = US, O = Google Trust Services LLC, CN = GTS CA 1P5 51,906
C = US, O = Let's Encrypt, CN = E1 32,972
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 12,458
C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 8,042
C = US, O = Amazon, CN = Amazon RSA 2048 M02 7,483
C = US, O = Amazon, CN = Amazon RSA 2048 M03 6,118
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 5,578
C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1 4,321
C = PL, O = Unizeto Technologies S.A., OU = Certum Certification Authority, CN = Certum Domain Validation CA SHA2 3,076

TLS Protocol Versions:
TLSv1.3 178,975
TLSv1.2 47,017
TLSv1.0 93

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 152,669
TLS_AES_128_GCM_SHA256 24,968
ECDHE-RSA-AES256-GCM-SHA384 22,704
ECDHE-RSA-AES128-GCM-SHA256 16,731
ECDHE-RSA-CHACHA20-POLY1305 3,441
TLS_CHACHA20_POLY1305_SHA256 1,338
ECDHE-RSA-AES256-SHA384 1,286
ECDHE-ECDSA-AES256-GCM-SHA384 1,048
ECDHE-ECDSA-CHACHA20-POLY1305 532
ECDHE-ECDSA-AES128-GCM-SHA256 488

Top 10 PFS Key Exchange Params:
X25519, 253 bits 190,089
ECDH, P-256, 256 bits 28,485
ECDH, P-384, 384 bits 4,507
ECDH, P-521, 521 bits 2,338
DH, 1024 bits 192
DH, 2048 bits 171
DH, 4096 bits 10
X448, 448 bits 8

Top Key Sizes:
2048 bit 163,315
256 bit 43,394
4096 bit 15,147
384 bit 2,809
3072 bit 1,096
1024 bit 32
8192 bit 5
3000 bit 2

Sites using CAA:
14,993

HTTP Protocol Versions:
http/2.0 228,836
http/1.1 158,177
http/1.0 493