Total Rows: 813624 

Security Headers Grades:
A 43,880
A+ 7,662
B 65,984
C 48,019
D 171,535
E 20,318
F 454,943
R 1,283

Sites using strict-transport-security:
243,203

Sites using content-security-policy:
118,036

Sites using content-security-policy-report-only:
7,861

Sites using x-webkit-csp:
697

Sites using x-content-security-policy:
3,673

Sites using public-key-pins:
911

Sites using public-key-pins-report-only:
12

Sites using x-content-type-options:
267,604

Sites using x-frame-options:
283,481

Sites using x-xss-protection:
175,135

Sites using x-download-options:
39,828

Sites using x-permitted-cross-domain-policies:
47,598

Sites using access-control-allow-origin:
53,389

Sites using referrer-policy:
167,076

Sites using feature-policy:
5,343

Sites using permissions-policy:
82,220

Sites using report-to:
230,920

Sites using nel:
228,408

Sites using security.txt:
9,565

Sites redirecting to HTTPS:
647,961

Sites using Let's Encrypt certificate:
239,606

Sites using EV Certificates:
5,459

Top 10 Server headers:
cloudflare 301,975
nginx 128,154
Apache 76,114
LiteSpeed 23,721
Microsoft-IIS/10.0 16,954
AmazonS3 9,328
nginx/1.18.0 (Ubuntu) 8,311
openresty 6,150
Vercel 6,087
CloudFront 5,040

Top 10 TLDs:
.com 369,654
.net 36,906
.org 35,544
.ru 35,538
.de 18,058
.br 15,094
.uk 14,664
.jp 10,642
.in 9,331
.nl 8,450

Top 10 Certificate Issuers:
C = US, O = Google Trust Services, CN = WE1 224,042
C = US, O = Let's Encrypt, CN = R10 91,321
C = US, O = Let's Encrypt, CN = R11 90,278
C = US, O = Let's Encrypt, CN = E6 28,927
C = US, O = Let's Encrypt, CN = E5 28,836
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 23,477
C = US, O = Amazon, CN = Amazon RSA 2048 M02 17,101
C = US, O = Amazon, CN = Amazon RSA 2048 M03 16,773
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 10,810
C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1 9,456

TLS Protocol Versions:
TLSv1.3 538,247
TLSv1.2 99,159
TLSv1.0 209

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 454,965
TLS_AES_128_GCM_SHA256 79,413
ECDHE-RSA-AES256-GCM-SHA384 46,980
ECDHE-RSA-AES128-GCM-SHA256 32,810
ECDHE-ECDSA-CHACHA20-POLY1305 6,284
ECDHE-RSA-CHACHA20-POLY1305 4,795
TLS_CHACHA20_POLY1305_SHA256 3,869
ECDHE-ECDSA-AES256-GCM-SHA384 3,204
ECDHE-RSA-AES256-SHA384 2,267
ECDHE-ECDSA-AES128-GCM-SHA256 1,324

Top 10 PFS Key Exchange Params:
X25519, 253 bits 555,272
ECDH, P-256, 256 bits 59,522
ECDH, P-384, 384 bits 15,551
ECDH, P-521, 521 bits 6,021
DH, 1024 bits 392
DH, 2048 bits 275
DH, 4096 bits 21
X448, 448 bits 18
DH, 3072 bits 1

Top Key Sizes:
2048 bit 308,110
256 bit 274,015
4096 bit 42,092
384 bit 8,944
3072 bit 3,788
1024 bit 98
8192 bit 22
2056 bit 2
521 bit 1

Sites using CAA:
59,115

HTTP Protocol Versions:
http/2.0 550,452
http/1.1 262,366
http/1.0 760