Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
Pragma
CF-RAY
CF-Cache-Status
Link
X-Powered-By
ETag
X-XSS-Protection
Expect-CT
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Varnish
X-Request-Id
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Download-Options
X-AspNet-Version
Alt-Svc
Access-Control-Allow-Credentials
X-Runtime
X-Xss-Protection
X-Drupal-Cache
X-Adblock-Key
X-Check
Content-Security-Policy-Report-Only
X-Generator
X-Cacheable
X-Cache-Status
X-Permitted-Cross-Domain-Policies
Timing-Allow-Origin
X-DNS-Prefetch-Control
X-Template
X-Language
X-Iinfo
Content-Encoding
Status
X-Content-Security-Policy
X-FRAME-OPTIONS
X-Buckets
X-AspNetMvc-Version
X-Kinja-Server-Push
Xkey
Upgrade
X-Request-ID
X-Via
Access-Control-Expose-Headers
X-Turbo-Charged-By
Access-Control-Max-Age
Keep-Alive
X-Drupal-Dynamic-Cache
X-Cache-Group
X-Pass-Why
X-Age
EagleId
X-Backend
X-Envoy-Upstream-Service-Time
X-Robots-Tag
X-Amz-Request-Id
X-Amz-Id-2
X-Page-Speed
X-Ua-Compatible
X-Pingback
X-Server-Powered-By
X-Server
X-CDN
X-Proxy-Cache
X-UA-Device
X-Hacker
X-AH-Environment
Request-Context
X-Nginx-Cache-Status
X-Swift-CacheTime
X-Swift-SaveTime
Grace
X-Varnish-Cache
Ali-Swift-Global-Savetime
X-Cdn
X-LiteSpeed-Cache
P3p
Cf-Railgun
Server-Timing
Feature-Policy
X-Amz-Version-Id
X-Device
X-WebKit-CSP
X-Server-Id
X-OneAgent-JS-Injection
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Rq
X-Ac
X-Cnection
EagleEye-TraceId
Report-To
X-Cloud-Trace-Context
X-Response-Time
Request-Id
X-Backend-Server
X-Host
X-Node
Content-Location
X-Readtime
X-Origin-Cache
X-Vhost
X-Application-Context
X-Cache-Lookup
X-ORACLE-DMS-ECID
X-DataDome
X-Dispatcher
X-Ruxit-JS-Agent
NEL
X-ORACLE-DMS-RID
X-Origin-Upstream-Status
X-Rack-Cache
X-HW
Surrogate-Control
Rating
Allow
X-Country-Code
X-Dns-Prefetch-Control
X-Clacks-Overhead
X-Country
X-Url
X-FTR-Request-ID
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-DynaTrace
X-Instart-Request-ID
X-MS-InvokeApp
Fusion-Content-Source
Fusion-Source
Fusion-Template-Id
Fusion-Content-Id
Fusion-Component-Id
X-Goog-Hash
X-Vname
X-TtlSet
X-PC
X-Ah-Environment
X-Varnish-TTL
X-TTL
Pinterest-Generated-By
X-B3-TraceId
Verso
X-Powered-By-Plesk
X-Aspnetmvc-Version
Public-Key-Pins
RTSS
X-Px
Edge-Control
X-Mod-Pagespeed
X-Middleton-Response
X-Middleton-Display
Display
Response
X-Sol
X-VARITI-CCR
SPRequestGuid
X-Kinja-Revision
X-GoogleNews-Bot
X-Kinja
X-Kinja-Build
X-Use-Magma
X-Exp-Variant
X-Exp-Id
X-Kinja-Server
X-Cdn-Fetch
X-D2id
X-SharePointHealthScore
X-Recruiting
X-ESI
X-CST
X-Akam-SW-Version
Service-Worker-Allowed
X-Vcap-Request-Id
Accept-Ch-Lifetime
SPIisLatency
SPRequestDuration
X-Version
X-Server-Name
X-GitHub-Request-Id
TCN
X-Abt-Application-Version
X-Navigation-Version
X-Powered-CMS
MS-Author-Via
X-Trace
X-Shard
Charset
Accept-CH
Fastly-Restarts
X-Debug
Nginx-Cache
Realpath
X-Amz-Server-Side-Encryption
X-Upstream
X-Amz-Rid
X-RateLimit-Remaining
AR-PoweredBy
Ar-Sid
AR-CACHE
AR-ATIME
X-Forwarded-Proto
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Ezoic-Cdn
X-NF-Request-ID
Front-End-Https
X-TEC-API-ROOT
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-Cached
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Stored-Content-Length
Pagespeed
X-MSEdge-Ref
Arr-Disable-Session-Affinity
Access-Control-Request-Method
X-VCache
X-Shield-Request-Id
Mrf-Cache-Status
MRF-Tech
X-B3-TraceId-Primal
X-Mrf-Item-Lastmod
X-Mrf-Section-Lastmod
AR-Request-ID
Content-MD5
DynaTrace
X-FTR-Expires
X-FTR-Cache-Status
X-Country-Code-Real
MicrosoftSharePointTeamServices
X-XRDS-Location
S
X-T
X-Amz-Meta-S3cmd-Attrs
Paypal-Debug-Id
X-Id
X-Fastly-Request-ID
X-Goog-Storage-Class
X-FTR-Backend-Server
X-FTR-Backend
X-FTR-Balancer
X-FTR-DC
X-FTR-Realm
X-Ser
X-Varnish-Age
ServerID
X-DynaTrace-JS-Agent
X-Via-JSL
X-Client-IP
Accept-Ch
X-Grace
X-Content-Type
X-Accel-Expires
X-Correlation-Id
X-Dw-Request-Base-Id
X-Forwarded-For
X-Hits
Fastcgi-Cache
Edge-Cache-Tag
X-Amzn-Trace-Id
X-Content-Digest
Powered
X-Frontend
X-DIS-Request-ID
AMP-Access-Control-Allow-Source-Origin
X-N
X-Mobile-Rewrite
X-FTR-Cache-Host
PB-RID
Arc-Version
PB-PID
X-HS-Content-Id
X-HS-Hub-Id
X-FastCGI-Cache
X-Pinterest-Rid
Pinterest-Version
X-Logged-In
Server-Name
X-Vcache
X-Fastcgi-Cache
TP-Cache
TP-L2-Cache
X-Request-Received
X-Request-Processing-Time
X-Request-Handler-Origin-Region
X-GUploader-UploadID
X-Server-ID
X-Microsite
X-Kinsta-Cache
X-Time
X-Cache-Hit
X-Zen-Fury
X-IPLB-Instance
X-Type
X-Az
X-AppVersion
X-Rid
X-Activity-Id
Backend-Timing
X-LB-Cache
X-Revision
X-Analytics
Healthy
X-Cache-Age
Retry-After
X-User-Agent
X-Whom
X-B3-Sampled
X-Srv
X-Node-Name
X-RateLimit-Limit
FilterID
Server-Node
X-NWS-LOG-UUID
X-Hp-Webp
Alternate-Protocol
Cache-Tag
Accept-Charset
X-F-Cache
X-Akamai-Edgescape
Cache-Status
X-SERVER
X-Content-Security-Policy-Report-Only
X-Cache-Rule
X-Content-Options
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
X-Kong-Upstream-Latency
X-Cache-2
X-Kong-Proxy-Latency
DC
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Tumblr-Pixel
MS-CV
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-Tumblr-Pixel-0
X-Instance
X-Content-Powered-By
X-Tumblr-User
X-Debug-Info
X-App-Environment
Refresh
X-Webkit-CSP
X-Varnish-Grace
Access-Control-Allow-Method
X-Cluster
X-Jobs
Tracecode
X-Forwarded-Host
X-Framework
X-PHP-Backend
X-AOL-HN
Surrogate-Key
NR-ENABLED
Fastcgi-Useragent
X-FB-Debug
X-Page-Id
Source
X-Cache-TTL
X-Request-Guid
X-B
Actual-Object-TTL
Host
X-App-Server
X-Seen-By
X-Cache-Operation
X-Mobile-URL
X-FW-Type
X-FW-Server
X-FW-Serve
X-FW-Hash
X-FW-Static
X-Cache-Key
Frame-Options
X-Cache-Control
X-Geo-Country
X-Hostname
X-TA-CDN-Provider
Cleartype
X-Cached-By
X-Host-Name
X-Pad
X-B-Cache
X-Signature
X-BCube-Filmed-By
Upgrade-Insecure-Requests
X-Git-Hash
X-Mobile
X-Varnish-Backend
X-WebKit-CSP-Report-Only
NGB
X-Response-Served-From
X-Esi
X-Element-Page-Cache
X-ATG-Version
X-TT
X-Amz-Replication-Status
WPE-Backend
Cache-Tv-Group
Filters
Ms-Operation-Id
Webserver
GEO-INFO
X-UA-Device-Type
X-Tumblr-Pixel-1
X-RTag
X-Tumblr-Pixel-2
X-RequestSource
X-RemovedCookies
X-ProcessESI
X-GeoIP
X-Drupal-Cache-Tags
X-Handled-By
Xserver
Payment
Eomportal-Instance
From-Origin
X-Ttl
X-Origin-Server
X-Daa-Tunnel
X-Adobe-Content
X-Adobe-Loc
X-Cacheable-TTL
X-HS-Cache-Config
X-TT-TIMESTAMP
X-EdgeConnect-Cache-Status
X-TX-ID
X-B3-Traceid
X-Presslabs-Stats
X-Acc-Meta-Resource-Type
Liferay-Portal
X-Wix-Request-Id
X-FW-Dynamic
X-Cache-TTL-Remaining
X-Status
X-WA-Info
X-Cache-Remote
X-XRDS-LOCATION
Datacenter
Cache
X-Hyper-Cache
Accept-CH-Lifetime
X-Edge-Location
X-Region
X-Cache-Action
X-Contextid
Viewport
X-Content-Age
Version
X-Ratelimit-Reset
X-Cache-NE
X-CF-Powered-By
X-Storage
X-Varnish-Hostname
X-Cache-Server
X-Akamai-Transformed
PageSpeed
X-PressLabs-Stats
X-Accel-Buffering
Ohc-File-Size
X-HS-Combine-CSS
Load-Balancing
Meta-Geo
X-Path-Route
X-ES-SERVER
X-Varnish-Server
Host-Header
X-Cache-Var-Map
X-Cache-Var
X-RN-RSRV
X-IP
Cache-Tags
X-Cache-Enabled
X-Proxy
X-Device-Type
TWC-Locale-Group
TWC-GeoIP-Country
TWC-GeoIP-LatLong
X-Viewer-Country
Webcakes-App-Name
Webcakes-App-Version
X-Access
TWC-Privacy
Cache-Name
X-NCache
X-Loop
TWC-Device-Class
X-Cache-Config
X-Section
X-TNCMS
X-Tumblr-Pixel-3
X-Varnish-Cache-Hits
Property-Id
Webcakes-Region
X-Proto
Rt-Fastcgi-Cache
TWC-Connection-Speed
X-Origin-Hint
X-Via-Fastly
Release
Country
Vix-Hermes-Req-Id
X-Format
X-From
X-FC-Vary-Parameters
X-Drupal-Cache-Contexts
X-CS
X-Human
X-NGENIX-Cache
X-Rule
X-R9-Blue-Green-Version
X-Proxy-Build
X-Origin-Response-Time
X-Cluster-Node
X-Cache-Grace
Mn-Server-Ip
Cache-Hits
Ec-Rule-Version
DSUID
S-Rt
Selected-Fe
X-Backend-TTL
X-Backend-Name
X-Akamai-Request-ID2
X-Akamai-Request-ID
S-Cnection
X-NewRelic-App-Data
X-Debug-Cache
X-Cache-Time
DB-Nickname
X-Xfnlog-Site
X-Upgrade-Enabled
X-UnsetCookies
X-Origin
X-Www-Served-By
X-OCL
X-Yottaa-Optimizations
X-Timing-Wait
X-VCT
X-Yottaa-Metrics
X-Vgn-Hpd-Reason
X-PCL
Decoy-Debug-Status
Decoy-Debug-TTL
X-Labrador-Cache-Channel
X-ApacheServer
X-Cache-Host
X-EIG-Tracking-Id
X-PERF
X-Trace-Id
Decoy-Debug-Key
X-Time-Microsecs
X-Locale
X-Web-Node
X-Hosted-By
X-Site-Version
X-Hit
X-JoinUs
X-Generated
Azure-SiteName
Azure-SlotName
Ohc-Cache-HIT
Azure-RegionName
Azure-InstanceId
Azure-Version
X-CCM
X-FireWall-Port
X-Goog-Meta-Goog-Reserved-File-Mtime
Cache-Key
X-Varnish-Hits
X-OVcl-Cache
X-Real-IP
X-OVcl
X-Rendered-As
X-Ua
Server-Info
Time
X-Trafficlayer-App-Name
X-Tec-Api-Origin
X-Trafficlayer-App-Scope
X-Tec-Api-Version
X-Tec-Api-Root
X-S
L5d-Success-Class
X-Pubstack
Origin-Edge-Control
X-Redis-Cache
Origin-Cache-Control
X-FW-Version
Now
X-Upstream-CT
X-SS-Set-Cookie
X-Upstream-HT
Fastcgi-X-Cache-Version
X-Litespeed-Cache
OT-Force-Account-Verify
Fastly-SSL
X-APP-VERSION
Access-Control-Request-Headers
ServedBy
X-FB-TRIP-ID
Cteonnt-Length
X-Cluster-Name
X-UUID
X-Upstream-Proxy
Origin
X-Load-Cache
X-Origin-CC
X-Origin-TTL
X-VG-WebCache
NtCoent-Length
X-VG-TLSProxy
Hostname
Mime-Version
X-ServerID
X-Soup
X-GoCache-CacheStatus
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Alternate-Cache-Key
X-ShopId
X-ShardId
X-App-Version
X-Shopify-Stage
X-Rocket-Nginx-Bypass
X-Parent-Response-Time
Machine
Accept-Language
X-Is-Bot
X-Tb
X-ECACHE
Odigeo-Trace-Id
IBM-Web2-Location
NGX
X-No-Session
CF-IPCountry
Nel
X-CSRF-TOKEN
X-Uri
X-MServer
X-B3-Spanid
X-Environment-Context
X-L-Path
X-Tt-Trace-Tag
X-CACHE-KEY
X-NC
X-B3-Parentspanid
X-VG-WebServer
X-Twitter-Response-Tags
X-ProxyCache-Status
Xc-Version
X-Worker
X-Trv-Group
X-Vtex-Processado-Em
Uber-Trace-Id
X-BYPASS-REASON
X-Info
X-Vtex-Remote-Cache
X-ProxyCache-Key
X-Server-Time
VivaBuild
X-DPWN-IS-SECURE
X-A
X-A-Dam
X-A-Dgt
X-A-Dcw
Viewtype
T-Server
X-Instart-Info
X-PAYTM-SRV-ID
X-Hl-Ver
ServerName
X-External-Request-Id
X-G
X-A-Wwc
X-Accel-Expires-Debug
X-D
X-Connection-Hash
X-Date
X-Destination
X-Detected-As
X-Developer
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-AIR-PT
X-Aed
X-Application
X-ARC
X-B-Cookie
X-Node-Id
X-Region-Sid
BehaviorPad-Version
AsisCache
Cache-Prefix
Content-Script-Type
X-S-Cookie
X-ScT
X-SRCache-Key
Arc-Country
Apple-News-Services-Host
Apple-News-Services-Handled
X-Transaction
Apple-News-Services-Parsed-Url
Apple-News-Services-Request-Url
X-Rojux
Content-Style-Type
Mobile-Detection-Method
Meta-Geo-Continent
Node
Rendered-Blocks
Rt-Proxy-Cache
X-Request-UUID
Memcached
MD5-Digest
X-Rewrite-Enabled
Cross-Origin-Window-Policy
Fly-Cache
Fly-Request-Id
GEO-REGION-INFO
A
X-A-Ccd
X-UA
Proxy-Connection
Request-Time
X-Amzn-Remapped-Content-Length
X-Endurance-Cache-Level
Backend-Name
X-Oneagent-Js-Injection
X-Compress-Hint
X-SVT-ORM-VERSION
Fastly-Soc-X-Request-Id
X-Geo
X-B3-SpanId
Request-Country
We-Hiring
Mail-Subject
X-SVT-ORM-RULES
X-SIPLIST1
X-Has-Esi
X-Cdn-Srv
Akamai-GRN
X-Developers
X-Is-Gdpr
X-JWT-State
IsBot
Request-EU
X-S-Maxage
N-Cache
X-Cache-Bucket
SRV
X-Cms-Context
X-Nginx-Cache
User-Cache-Control
X-Magnolia-Registration
X-IN-APIGATEWAY
X-Hnp-Log
X-Irp-Debug
X-Hash
X-IN-APIGATEWAYSSL
Wxu-Next-Region
X-Generation-Time
X-Generated-On
X-Geo-Header
X-Level-Front-Cache
Wxu-Next-Hostname
Wxu-Next-Commit
X-NX-Host
X-Proxy-Upstream
X-Proxy-Cache-Status
Pramga
X-Reboot
X-Release
X-Origin-Expires
X-Origin-Date
X-Generated-By
Server-Host
Served-By
Section-Io-Cache
X-Location
X-Fastly-Cache
X-Block-Status
X-C
X-Bip
X-Debug-Cache-Fetch
X-BBXSRF
X-WADP-Cache
X-Cache-Info
X-CGP
X-Clientip
X-CUA
X-Debug-Cache-Expiry
X-Cdn-Origin
X-Backend-Url
X-Debug-Cache-Store
X-Distil-CS
X-Dispatch
X-ElasticPress-Search
X-Eu-Site
X-Reqid
X-Debug-Log
X-Auto-Login
X-Backend-Host
X-Debug-Cookies
X-Azure-Ref-OriginShield
X-Azure-Ref
X-Gen-Mode
Pagetype
Content-Disposition
CDCHOST
X-User
X-Var-Ttl
X-Up
Countrycode
X-Sn-Servicetimems
Srv
X-TrackingId
X-VC-Cache
X-Nc
AKAMAI
X-Clara-WADP
X-Via-CDN
X-Wikidot-Static-Cache
X-Device-Os
X-We-Are-Hiring
X-Webstats-RespID
X-Wikidot-Backend
X-Skip-Cache
X-Thanos
Heartbleed
Ha-Gx-Prefs
Gh-Request-Id
X-Service
L
X-Server-IP
HA-Ipaddr
X-PHP-Host
X-Microcachable
X-Rebelmouse-Cache-Control
X-RateLimit-Remaining-Second
X-Amz-Meta-Cache-Control
X-Variation
X-Qloud-Router
X-VServer
X-Dispatcher-Server
X-RateLimit-Limit-Second
X-Say-TTL
X-Cache-FS-Status
Platform
RNT-Machine
RNT-Time
X-Request-URI
X-WebServer
X-Say-Cacheable
X-SayCDN-TTL
Adler-Geo
Is-Eu
PFcat
X-Old-Content-Length
X-Urbn-Site-Id
X-Servername
X-Platform-Server
X-Li-Fabric
X-GeoIP-City
X-Owner
X-Key
X-Method
X-Matched-Rule
X-Li-Pop
X-Lb-Id
X-Fetched-On
X-Swa-Ws
X-Urbn-Context-Path
X-Nginx-Cache-Key
X-LI-Proto
X-Request-Start
X-Policy
X-Generated-In
X-LI-UUID
X-Thinkindot-L3
X-Epic-Correlation-Id
X-Distributor
X-Core-Mission
X-Rebelmouse-Surrogate-Control
Server-Int
Locale
Kp-EeAlive
X-App-Name
Esi-Enabled
Fastly-SWR
Fastly-SIE
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
Magicmarker
Web-Mar-Node
W
X-Backend-State
Thinkindot-Control
X-Guploader-Uploadid
X-Ratelimit-Limit
X-GEO
X-NWS-UUID-VERIFY
X-Dc
X-Svr
X-MSEdge-Flight
X-Internal-Host
X-MSEdge-Features
Server-ID
Resin-Trace
X-ServiceProvider
X-SD-PageType
Cache-Provider
True-Client-Country-4JS
X-Cache-Id
SD-X-WS
X-VWS-Id
X-AWS-Id
X-LJ-Flow-ID
X-Cdn-Forward
Cdn-Host
X-Cache-URL
Cdn-Request-Time
X-Instart-Isnd
V-Age
Memory
X-Edge-Server
X-FPC
X-Scheme
X-GDPR
X-Mode
X-DC
X-Cache-Backend
X-Be
X-Processor
X-Org
REQUESTUUID
X-Request-Time
SS
X-Flog
X-ABtesting
X-Wa
X-Hello
X-CDN-Forward
Group
X-NodeID
X-Pjax-Url
X-Servedbyhost
X-Datadome
X-IPS-LoggedIn
X-Response-By
Cache-Host
X-Server-W
X-Unique-ID
Country-Code
X-DataStream-Cache-Status
Cache-Cookie-Set-Lfrom
Cache-Cookie-Set-From
Cache-Cookie-Set-Idcheck
X-Page-Type
X-Routing-Service
X-Proxied
X-Oss-Hash-Crc64ecma
X-VCL-Version
PICS-Label
X-Oss-Object-Type
X-Oss-Request-Id
X-Ms-Request-Id
X-Ms-Version
X-Zipkin-Id
X-Oss-Server-Time
X-Oss-Storage-Class
X-SN
X-Ruxit-Js-Agent
X-EC-Lua
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Oracle-Dms-Rid
X-HS-Status
UCS
X-Varnish-Beresp-Ttl
X-Webkit-Csp
X-RateLimit-Reset
X-Session-Fingerprint
X-Tb-Optimization-Total-Bytes-Saved
X-SRV
X-Via-Ucdn
Lfy
X-Ftr-Request-Id
X-Dynatrace
X-Zone
X-Cache-Debug
Ttl
Ajk
X-MP-GENERATED-AT
Powered-By-ChinaCache
X-Agile-Id
X-COUNTRY
X-Agile
X-Agile-Age
X-Logtrace-Id
X-URL
X-GRACE
Geoip-Latitude
SN
Proxy-Firewall
ProcessTime
X-Pf-Uncompressing
GeoIp-Country-Code
Geoip-City
XServer
X-Source
X-Ratelimit-Remaining
X-Varnish-Beresp-TTL
X-ZONE
X-Fastly-Country-Code
X-APP
GeoIP-Latitude
GeoIP-City
X-7Graus-Varnish-XKeys
Powered-By
X-PF-Uncompressing
X-7Graus-Varnish-Cache-Control
X-Webapp-Samesite-None-Activated-N
GeoIP-Country-Code
X-HTML-Minification-Powered-By
X-Sucuri-Id
X-Grey
Environment
X-Newrelic-Synthetics
X-Sedo-Request-Id
X-Logging-Id
X-Cache-Category-Id
X-CSRF-Token
X-Cache-Miss-From
X-DataStream-Origin-MEX-Latency
CACHE
X-NODE
X-Unique-Id
X-DataStream-MidMile-RTT
X-Ftr-Cache-Host
Cdn
X-Dynatrace-Js-Agent
X-TH-Server
X-Bc
X-CLOUD-TRACE-CONTEXT
X-Sucuri-ID
X-Tt-Trace-Host
Fastly-Backend-Name
X-LiteSpeed-Cache-Control
X-Core-Value
X-Vcl-Version
X-Edge
CF-Cached-On
X-Check-Cacheable
M-TraceId
Pics-Label
X-Aicache-OS
WWW
X-Vdms-Version
GW-Server
X-Sucuri-Cache
HostName
X-Ftr-Backend
X-Ftr-Dc
Dynatrace
X-Ftr-Realm
X-Ftr-Balancer
X-Ftr-Backend-Server
MIME-Version
X-Rocket-Build-Number
X-Sigma
X-Sigma-Backend
X-AK-Request-ID
Cdncip
Requestid
X-LAGOON
Cdnsip
X-Mid
X-Fastly-Backend-Reqs
X-RCS-CacheZone
LB
Cf-Ipcountry
X-Varnish-Ttl
X-Planisys-CDN-Cache
X-Varnish-Url
Ohc-Response-Time
X-Shopify-Generated-Cart-Token
X-MCACHE
X-FORWARDED-FOR
X-BC
X-Gannett-Site-Version
X-Cache-Tag
X-NGINX-Cache
Pragrma
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
X-UPSTREAM-Address
X-Secret
X-Fstrz
Amp-Access-Control-Allow-Source-Origin
X-TT-LOGID
X-BE
X-Via-NSCOPI
X-ServedByHost
X-Litespeed-Cache-Control
X-PJAX-URL
X-Swift-Error
Lb
WZWS-RAY
X-DB
URI
X-CDN-Cache
On-Server
RequestUuid
X-Action
X-DI
X-RSL
X-Cache-Ttl
X-Varnish-Cacheable
X-WA
X-DSS
X-RPS
DataCenter
X-DW
X-RPM
X-ORACLE-APMCS-TAG
X-ORACLE-APMCS-REQUEST-ID
X-SaId
User-Agent
X-GeoIP-Country-Code
X-Proxy-Cacherz
TTL
Host-ID
Xkeyrz
X-WR-MODIFICATION
X-ND-Cache
X-Correlation-ID
X-Nananana
X-Dw-Trace-Id
X-Fpc
X-Upstream-Ct
X-Trafficlayer-App-Version
Get-Access-Time
Inserted-Into-Cache-At
Is-Session-Tracking
X-Akamai-SSL-Client-Sid
X-Upstream-Ht
X-Flow-Id
X-Zalando-Child-Request-Id
X-Page-Impression-Id
X-Fastly-Cache-Hits
Xkeypdq
CDN
Server-Id
X-Gen-Id
X-Via-SSL
X-Via-Edge
Warning
X-Served-From
X-Crawler
Who
X-SB
X-MID
Locid
Correlation-Id
X-VC
X-Refresh
SID
X-NU-AKA-ACS-Version
X-Cf-Powered-By
X-Pod
X-Req
X-Akamai-ERRuleID
Thinkindot-Cache-Type
Gannett-Cam-Experience-Id
X-Akamai-ERPolicy
X-Amzn-Remapped-Connection
X-Amzn-Remapped-Date
X-Newrelic-App-Data
HitType
X-Bug-Bounty
X-ServerName
X-Render-Time
X-ECache
X-Request-URL
Processtime
X-FE
X-MiniProfiler-Ids
RequestId
X-LB-ID
Xet-Cookie
V-Cache
Cneonction
X-Gdpr
X-LiteSpeed-Tag