Total Rows: 779524 

Security Headers Grades:
A 46,663
A+ 8,451
B 63,104
C 50,431
D 162,835
E 17,854
F 429,062
R 1,124

Sites using strict-transport-security:
237,062

Sites using content-security-policy:
122,415

Sites using content-security-policy-report-only:
8,618

Sites using x-webkit-csp:
594

Sites using x-content-security-policy:
3,284

Sites using public-key-pins:
692

Sites using public-key-pins-report-only:
14

Sites using x-content-type-options:
263,376

Sites using x-frame-options:
274,224

Sites using x-xss-protection:
163,947

Sites using x-download-options:
39,996

Sites using x-permitted-cross-domain-policies:
49,116

Sites using access-control-allow-origin:
49,288

Sites using referrer-policy:
178,828

Sites using feature-policy:
4,888

Sites using permissions-policy:
95,825

Sites using report-to:
241,947

Sites using nel:
239,359

Sites using security.txt:
9,398

Sites redirecting to HTTPS:
627,397

Sites using Let's Encrypt certificate:
233,440

Sites using EV Certificates:
4,465

Top 10 Server headers:
cloudflare 311,971
nginx 112,789
Apache 69,942
LiteSpeed 25,470
Microsoft-IIS/10.0 14,735
openresty 8,415
AmazonS3 8,367
Vercel 6,892
nginx/1.18.0 (Ubuntu) 6,366
ddos-guard 5,949

Top 10 TLDs:
.com 353,040
.net 35,645
.org 33,486
.ru 32,385
.de 19,241
.uk 15,016
.br 13,771
.jp 10,449
.in 9,616
.nl 8,804

Top 10 Certificate Issuers:
C = US, O = Google Trust Services, CN = WE1 232,826
C = US, O = Let's Encrypt, CN = R13 85,025
C = US, O = Let's Encrypt, CN = R12 84,748
C = US, O = Let's Encrypt, CN = E8 31,897
C = US, O = Let's Encrypt, CN = E7 31,231
C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA DV R36 14,326
C = US, O = Amazon, CN = Amazon RSA 2048 M04 14,133
C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1 8,879
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 8,677
C = US, O = Amazon, CN = Amazon RSA 2048 M01 8,672

TLS Protocol Versions:
TLSv1.3 539,353
TLSv1.2 78,707
TLSv1.0 113

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 457,983
TLS_AES_128_GCM_SHA256 77,686
ECDHE-RSA-AES256-GCM-SHA384 36,298
ECDHE-RSA-AES128-GCM-SHA256 25,472
ECDHE-ECDSA-CHACHA20-POLY1305 6,256
TLS_CHACHA20_POLY1305_SHA256 3,684
ECDHE-RSA-CHACHA20-POLY1305 3,634
ECDHE-ECDSA-AES256-GCM-SHA384 2,978
ECDHE-RSA-AES256-SHA384 1,654
ECDHE-ECDSA-AES128-GCM-SHA256 1,203

Top 10 PFS Key Exchange Params:
X25519, 253 bits 555,993
ECDH, P-256, 256 bits 42,357
ECDH, P-384, 384 bits 13,621
ECDH, P-521, 521 bits 5,228
DH, 1024 bits 309
DH, 2048 bits 202
DH, 4096 bits 20
X448, 448 bits 18

Top Key Sizes:
256 bit 287,343
2048 bit 277,210
4096 bit 40,375
384 bit 9,174
3072 bit 3,563
1024 bit 69
8192 bit 11
2056 bit 2

Sites using CAA:
58,253

HTTP Protocol Versions:
http/2.0 541,537
http/1.1 237,306
http/1.0 649