Total Rows: 402201 

Security Headers Grades:
A 13,579
A+ 2,252
B 11,116
C 14,562
D 56,107
E 5,767
F 298,766
R 52

Sites using strict-transport-security:
69,509

Sites using content-security-policy:
27,723

Sites using content-security-policy-report-only:
7,311

Sites using x-webkit-csp:
326

Sites using x-content-security-policy:
842

Sites using public-key-pins:
249

Sites using public-key-pins-report-only:
15

Sites using x-content-type-options:
75,200

Sites using x-frame-options:
79,322

Sites using x-xss-protection:
59,110

Sites using x-download-options:
9,909

Sites using x-permitted-cross-domain-policies:
9,036

Sites using access-control-allow-origin:
17,321

Sites using referrer-policy:
22,602

Sites using feature-policy:
2,824

Sites using report-to:
69,061

Sites using nel:
68,871

Sites using security.txt:
2,205

Sites redirecting to HTTPS:
247,193

Sites using Let's Encrypt certificate:
91,063

Sites using EV Certificates:
5,656

Top 10 Server headers:
Apache 96,777
cloudflare 80,128
nginx 66,336
LiteSpeed 9,902
Microsoft-IIS/10.0 8,081
Microsoft-IIS/8.5 7,556
openresty 6,813
Microsoft-IIS/7.5 6,031
nginx/1.16.1 4,362
Apache/2 3,581

Top 10 TLDs:
.com 207,428
.org 28,098
.net 19,820
.ru 14,319
.de 10,092
.uk 7,298
.cn 5,304
.jp 4,700
.in 4,078
.tk 3,570

Top 10 Certificate Issuers:
C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 51,716
C = US, O = "Cloudflare, Inc.", CN = Cloudflare Inc ECC CA-3 50,771
C = US, O = Let's Encrypt, CN = R3 39,347
C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA 18,777
C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 11,927
C = US, O = Amazon, OU = Server CA 1B, CN = Amazon 10,976
C = US, ST = TX, L = Houston, O = "cPanel, Inc.", CN = "cPanel, Inc. Certification Authority" 8,448
C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA 5,464
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018 3,417
C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL RSA CA 2018 3,199

TLS Protocol Versions:
TLSv1.3 128,782
TLSv1.2 102,829
TLSv1.0 451

Top 10 Cipher Suites:
TLS_AES_256_GCM_SHA384 116,447
ECDHE-RSA-AES256-GCM-SHA384 52,290
ECDHE-RSA-AES128-GCM-SHA256 35,973
TLS_AES_128_GCM_SHA256 11,204
ECDHE-RSA-AES256-SHA384 5,301
ECDHE-RSA-CHACHA20-POLY1305 4,264
TLS_CHACHA20_POLY1305_SHA256 1,131
ECDHE-ECDSA-CHACHA20-POLY1305 1,036
DHE-RSA-AES256-GCM-SHA384 988
ECDHE-ECDSA-AES256-GCM-SHA384 780

Top 10 PFS Key Exchange Params:
X25519, 253 bits 151,913
ECDH, P-256, 256 bits 67,415
ECDH, P-384, 384 bits 8,414
ECDH, P-521, 521 bits 2,273
DH, 1024 bits 946
DH, 2048 bits 290
DH, 4096 bits 39
X448, 448 bits 4
DH, 3072 bits 4

Top Key Sizes:
2048 bit 164,362
256 bit 49,095
4096 bit 15,496
384 bit 1,306
3072 bit 922
1024 bit 101
8192 bit 8
3112 bit 2
4056 bit 2
2024 bit 1

Sites using CAA:
9,518

HTTP Protocol Versions:
http/1.1 224,954
http/2.0 175,902
http/1.0 1,335

