Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
Pragma
CF-RAY
CF-Cache-Status
Link
X-Powered-By
ETag
X-XSS-Protection
Expect-CT
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Varnish
X-Request-Id
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Download-Options
X-AspNet-Version
Alt-Svc
Access-Control-Allow-Credentials
X-Runtime
X-Xss-Protection
X-Drupal-Cache
X-Adblock-Key
X-Check
Content-Security-Policy-Report-Only
X-Generator
X-Cacheable
X-Cache-Status
X-Permitted-Cross-Domain-Policies
Timing-Allow-Origin
X-DNS-Prefetch-Control
X-Template
X-Language
X-Iinfo
Content-Encoding
Status
X-Content-Security-Policy
X-AspNetMvc-Version
X-FRAME-OPTIONS
X-Buckets
X-Kinja-Server-Push
Xkey
Upgrade
X-Request-ID
X-Via
Access-Control-Expose-Headers
X-Turbo-Charged-By
Access-Control-Max-Age
Keep-Alive
X-Drupal-Dynamic-Cache
X-Cache-Group
X-Pass-Why
X-Age
EagleId
X-Backend
X-Envoy-Upstream-Service-Time
X-Robots-Tag
X-Amz-Id-2
X-Amz-Request-Id
X-Page-Speed
X-Ua-Compatible
X-Pingback
X-Server-Powered-By
X-Server
X-CDN
X-Proxy-Cache
X-UA-Device
X-Hacker
X-AH-Environment
Request-Context
X-Nginx-Cache-Status
X-Swift-CacheTime
X-Swift-SaveTime
Grace
X-Varnish-Cache
Ali-Swift-Global-Savetime
X-Cdn
X-LiteSpeed-Cache
P3p
Cf-Railgun
Server-Timing
Feature-Policy
X-Amz-Version-Id
X-Device
X-WebKit-CSP
X-Server-Id
X-OneAgent-JS-Injection
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Rq
X-Ac
X-Cnection
EagleEye-TraceId
Report-To
X-Cloud-Trace-Context
X-Response-Time
Request-Id
X-Backend-Server
X-Host
X-Node
Content-Location
X-Readtime
X-Origin-Cache
X-Vhost
X-Cache-Lookup
X-Application-Context
X-ORACLE-DMS-ECID
X-DataDome
X-Dispatcher
X-Ruxit-JS-Agent
NEL
X-ORACLE-DMS-RID
X-Origin-Upstream-Status
X-Rack-Cache
X-HW
Surrogate-Control
Rating
X-Country-Code
Allow
X-Dns-Prefetch-Control
X-Clacks-Overhead
X-Country
X-Url
X-FTR-Request-ID
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-DynaTrace
X-Instart-Request-ID
X-MS-InvokeApp
Fusion-Template-Id
Fusion-Content-Id
Fusion-Content-Source
Fusion-Component-Id
Fusion-Source
X-Goog-Hash
X-Vname
X-PC
X-TtlSet
X-Ah-Environment
X-Varnish-TTL
X-TTL
Pinterest-Generated-By
X-B3-TraceId
Verso
X-Powered-By-Plesk
Public-Key-Pins
RTSS
X-Px
Edge-Control
X-Mod-Pagespeed
X-Sol
X-Middleton-Response
Display
X-Middleton-Display
Response
X-VARITI-CCR
SPRequestGuid
X-D2id
X-GoogleNews-Bot
X-Kinja
X-Kinja-Build
X-Kinja-Revision
X-Exp-Variant
X-Exp-Id
X-Kinja-Server
X-Cdn-Fetch
X-Use-Magma
X-SharePointHealthScore
X-ESI
X-Recruiting
X-CST
X-Akam-SW-Version
Service-Worker-Allowed
X-Vcap-Request-Id
Accept-Ch-Lifetime
SPRequestDuration
SPIisLatency
X-Version
X-Server-Name
X-GitHub-Request-Id
TCN
X-Abt-Application-Version
X-Navigation-Version
X-Powered-CMS
MS-Author-Via
X-Trace
X-Shard
Charset
X-Debug
Fastly-Restarts
Accept-CH
Nginx-Cache
Realpath
X-Amz-Server-Side-Encryption
X-Amz-Rid
X-Upstream
X-RateLimit-Remaining
Ar-Sid
AR-PoweredBy
AR-ATIME
AR-CACHE
X-Aspnetmvc-Version
X-SRCache-Store-Status
X-Forwarded-Proto
X-SRCache-Fetch-Status
X-Ezoic-Cdn
X-NF-Request-ID
Front-End-Https
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Cached
X-TEC-API-VERSION
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-MSEdge-Ref
Pagespeed
Access-Control-Request-Method
Arr-Disable-Session-Affinity
X-VCache
X-Shield-Request-Id
MRF-Tech
X-Mrf-Item-Lastmod
X-Mrf-Section-Lastmod
Mrf-Cache-Status
X-B3-TraceId-Primal
AR-Request-ID
Content-MD5
DynaTrace
X-FTR-Cache-Status
X-Country-Code-Real
X-FTR-Expires
MicrosoftSharePointTeamServices
X-XRDS-Location
S
X-T
X-Amz-Meta-S3cmd-Attrs
Paypal-Debug-Id
X-Id
X-Goog-Storage-Class
X-Fastly-Request-ID
X-FTR-Backend
X-FTR-Backend-Server
X-FTR-DC
X-FTR-Balancer
X-FTR-Realm
X-Ser
X-Varnish-Age
X-DynaTrace-JS-Agent
ServerID
X-Via-JSL
X-Client-IP
Accept-Ch
X-Grace
X-Content-Type
X-Accel-Expires
X-Dw-Request-Base-Id
X-Correlation-Id
X-Forwarded-For
X-Hits
Edge-Cache-Tag
Fastcgi-Cache
X-Amzn-Trace-Id
X-Content-Digest
Powered
X-Frontend
X-DIS-Request-ID
AMP-Access-Control-Allow-Source-Origin
X-N
X-Mobile-Rewrite
X-FTR-Cache-Host
PB-RID
PB-PID
Arc-Version
X-HS-Content-Id
X-HS-Hub-Id
X-FastCGI-Cache
Pinterest-Version
X-Pinterest-Rid
X-Logged-In
Server-Name
X-Vcache
X-Fastcgi-Cache
TP-L2-Cache
TP-Cache
X-Request-Received
X-Request-Processing-Time
X-Server-ID
X-GUploader-UploadID
X-Request-Handler-Origin-Region
X-Microsite
X-Kinsta-Cache
X-Time
X-Cache-Hit
X-Zen-Fury
X-Type
X-Rid
X-IPLB-Instance
X-Az
X-Activity-Id
X-AppVersion
X-LB-Cache
X-Analytics
Backend-Timing
X-Revision
Healthy
X-User-Agent
Retry-After
X-Cache-Age
X-B3-Sampled
X-Whom
X-Srv
X-Node-Name
X-RateLimit-Limit
FilterID
Server-Node
X-NWS-LOG-UUID
Alternate-Protocol
X-Hp-Webp
Cache-Tag
X-F-Cache
Accept-Charset
X-Akamai-Edgescape
X-SERVER
Cache-Status
X-Content-Security-Policy-Report-Only
X-Content-Options
X-Cache-Rule
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-Kong-Upstream-Latency
X-Cache-2
X-Kong-Proxy-Latency
DC
X-Amzn-RequestId
X-Amz-Apigw-Id
X-Tumblr-Pixel
X-Tumblr-User
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-Instance
X-Tumblr-Pixel-0
MS-CV
X-Content-Powered-By
X-App-Environment
X-Varnish-Grace
Access-Control-Allow-Method
X-Debug-Info
Refresh
X-Webkit-CSP
X-Jobs
X-Cluster
Tracecode
X-AOL-HN
NR-ENABLED
X-PHP-Backend
Surrogate-Key
X-Framework
X-Forwarded-Host
Fastcgi-Useragent
Source
X-Page-Id
X-FB-Debug
X-Request-Guid
X-Cache-TTL
X-B
Actual-Object-TTL
Host
X-App-Server
X-Mobile-URL
X-Cache-Operation
X-Seen-By
X-FW-Type
X-FW-Server
X-FW-Hash
X-FW-Serve
X-FW-Static
Frame-Options
X-Cache-Key
X-Cache-Control
X-Geo-Country
X-Hostname
X-TA-CDN-Provider
Cleartype
X-Cached-By
X-Host-Name
X-Pad
X-B-Cache
X-Signature
X-BCube-Filmed-By
Upgrade-Insecure-Requests
X-Git-Hash
X-Mobile
X-Varnish-Backend
X-WebKit-CSP-Report-Only
NGB
X-Response-Served-From
X-Esi
X-Element-Page-Cache
X-ATG-Version
X-TT
X-Amz-Replication-Status
WPE-Backend
Cache-Tv-Group
Filters
Ms-Operation-Id
Webserver
GEO-INFO
X-UA-Device-Type
X-Tumblr-Pixel-1
X-RTag
X-Tumblr-Pixel-2
X-RequestSource
X-RemovedCookies
X-ProcessESI
X-GeoIP
X-Drupal-Cache-Tags
X-Handled-By
Xserver
Payment
Eomportal-Instance
From-Origin
X-Ttl
X-Origin-Server
X-Daa-Tunnel
X-Adobe-Content
X-Adobe-Loc
X-Cacheable-TTL
X-HS-Cache-Config
X-TT-TIMESTAMP
X-EdgeConnect-Cache-Status
X-TX-ID
X-B3-Traceid
X-Presslabs-Stats
X-Acc-Meta-Resource-Type
Liferay-Portal
X-Wix-Request-Id
X-FW-Dynamic
X-Cache-TTL-Remaining
X-Status
X-WA-Info
X-Cache-Remote
X-XRDS-LOCATION
Datacenter
Cache
X-Hyper-Cache
Accept-CH-Lifetime
X-Edge-Location
X-Region
X-Cache-Action
X-Contextid
Viewport
X-Content-Age
Version
X-Ratelimit-Reset
X-Cache-NE
X-CF-Powered-By
X-Storage
X-Varnish-Hostname
X-Cache-Server
X-Akamai-Transformed
PageSpeed
X-PressLabs-Stats
X-Accel-Buffering
Ohc-File-Size
X-HS-Combine-CSS
Load-Balancing
Meta-Geo
X-Path-Route
X-ES-SERVER
X-Cache-Var
Host-Header
X-Cache-Var-Map
X-Varnish-Server
X-RN-RSRV
X-IP
Cache-Tags
X-Cache-Enabled
X-Proxy
X-NCache
X-Device-Type
TWC-GeoIP-LatLong
TWC-Locale-Group
X-Viewer-Country
Webcakes-App-Name
Webcakes-App-Version
X-Access
TWC-Privacy
Cache-Name
TWC-GeoIP-Country
X-Loop
TWC-Device-Class
X-TNCMS
X-Section
X-Cache-Config
X-Tumblr-Pixel-3
X-Varnish-Cache-Hits
Property-Id
Webcakes-Region
X-Proto
Rt-Fastcgi-Cache
TWC-Connection-Speed
X-Origin-Hint
X-Via-Fastly
Release
Country
Vix-Hermes-Req-Id
X-Format
X-From
X-FC-Vary-Parameters
X-Drupal-Cache-Contexts
X-CS
X-Human
X-NGENIX-Cache
X-Rule
X-R9-Blue-Green-Version
X-Proxy-Build
X-Origin-Response-Time
X-Cluster-Node
X-Cache-Grace
Mn-Server-Ip
Cache-Hits
Ec-Rule-Version
DSUID
S-Rt
Selected-Fe
X-Backend-TTL
X-Backend-Name
X-Akamai-Request-ID2
X-Akamai-Request-ID
S-Cnection
X-NewRelic-App-Data
X-Debug-Cache
X-Cache-Time
DB-Nickname
X-Xfnlog-Site
X-Upgrade-Enabled
X-UnsetCookies
X-Origin
X-Www-Served-By
X-OCL
X-Yottaa-Optimizations
X-Timing-Wait
X-VCT
X-Yottaa-Metrics
X-Vgn-Hpd-Reason
X-PCL
Decoy-Debug-Status
Decoy-Debug-TTL
X-Labrador-Cache-Channel
X-ApacheServer
X-Cache-Host
X-EIG-Tracking-Id
X-PERF
X-Trace-Id
Decoy-Debug-Key
X-Time-Microsecs
X-Locale
X-Web-Node
X-Hosted-By
X-Site-Version
X-Hit
X-JoinUs
X-Generated
Azure-SiteName
Azure-SlotName
Ohc-Cache-HIT
Azure-RegionName
Azure-InstanceId
Azure-Version
X-CCM
X-FireWall-Port
X-Goog-Meta-Goog-Reserved-File-Mtime
Cache-Key
X-Varnish-Hits
X-OVcl-Cache
X-Real-IP
X-OVcl
X-Rendered-As
X-Ua
Server-Info
Time
X-Trafficlayer-App-Name
X-Tec-Api-Origin
X-Trafficlayer-App-Scope
X-Tec-Api-Version
X-Tec-Api-Root
X-S
L5d-Success-Class
X-Pubstack
Origin-Edge-Control
X-Redis-Cache
Origin-Cache-Control
X-FW-Version
Now
X-Upstream-CT
X-SS-Set-Cookie
X-Upstream-HT
Fastcgi-X-Cache-Version
X-Litespeed-Cache
OT-Force-Account-Verify
Fastly-SSL
X-APP-VERSION
Access-Control-Request-Headers
ServedBy
X-FB-TRIP-ID
Cteonnt-Length
X-Cluster-Name
X-UUID
X-Upstream-Proxy
Origin
X-Load-Cache
X-Origin-CC
X-Origin-TTL
X-VG-WebCache
NtCoent-Length
X-VG-TLSProxy
Hostname
Mime-Version
X-ServerID
X-Soup
X-GoCache-CacheStatus
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Alternate-Cache-Key
X-ShopId
X-ShardId
X-App-Version
X-Shopify-Stage
X-Rocket-Nginx-Bypass
X-Parent-Response-Time
Machine
Accept-Language
X-Is-Bot
X-Tb
X-ECACHE
Odigeo-Trace-Id
IBM-Web2-Location
NGX
X-No-Session
CF-IPCountry
Nel
X-CSRF-TOKEN
X-Uri
X-MServer
X-B3-Spanid
X-Environment-Context
X-L-Path
X-Tt-Trace-Tag
X-CACHE-KEY
X-NC
X-B3-Parentspanid
X-VG-WebServer
X-Twitter-Response-Tags
X-ProxyCache-Status
Xc-Version
X-Worker
X-Trv-Group
X-Vtex-Processado-Em
Uber-Trace-Id
X-BYPASS-REASON
X-Info
X-Vtex-Remote-Cache
X-ProxyCache-Key
X-Server-Time
VivaBuild
X-DPWN-IS-SECURE
X-A
X-A-Dam
X-A-Dgt
X-A-Dcw
Viewtype
T-Server
X-Instart-Info
X-PAYTM-SRV-ID
X-Hl-Ver
ServerName
X-External-Request-Id
X-G
X-A-Wwc
X-Accel-Expires-Debug
X-D
X-Connection-Hash
X-Date
X-Destination
X-Detected-As
X-Developer
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-AIR-PT
X-Aed
X-Application
X-ARC
X-B-Cookie
X-Node-Id
X-Region-Sid
BehaviorPad-Version
AsisCache
Cache-Prefix
Content-Script-Type
X-S-Cookie
X-ScT
X-SRCache-Key
Arc-Country
Apple-News-Services-Host
Apple-News-Services-Handled
X-Transaction
Apple-News-Services-Parsed-Url
Apple-News-Services-Request-Url
X-Rojux
Content-Style-Type
Mobile-Detection-Method
Meta-Geo-Continent
Node
Rendered-Blocks
Rt-Proxy-Cache
X-Request-UUID
Memcached
MD5-Digest
X-Rewrite-Enabled
Cross-Origin-Window-Policy
Fly-Cache
Fly-Request-Id
GEO-REGION-INFO
A
X-A-Ccd
X-UA
Proxy-Connection
Request-Time
X-Amzn-Remapped-Content-Length
X-Endurance-Cache-Level
Backend-Name
X-Oneagent-Js-Injection
X-Compress-Hint
X-SVT-ORM-VERSION
Fastly-Soc-X-Request-Id
X-Geo
X-B3-SpanId
Request-Country
We-Hiring
Mail-Subject
X-SVT-ORM-RULES
X-SIPLIST1
X-Has-Esi
X-Cdn-Srv
Akamai-GRN
X-Developers
X-Is-Gdpr
X-JWT-State
IsBot
Request-EU
X-S-Maxage
N-Cache
X-Cache-Bucket
SRV
X-Cms-Context
X-Nginx-Cache
User-Cache-Control
X-Magnolia-Registration
X-IN-APIGATEWAY
X-Hnp-Log
X-Irp-Debug
X-Hash
X-IN-APIGATEWAYSSL
Wxu-Next-Region
X-Generation-Time
X-Generated-On
X-Geo-Header
X-Level-Front-Cache
Wxu-Next-Hostname
Wxu-Next-Commit
X-NX-Host
X-Proxy-Upstream
X-Proxy-Cache-Status
Pramga
X-Reboot
X-Release
X-Origin-Expires
X-Origin-Date
X-Generated-By
Server-Host
Served-By
Section-Io-Cache
X-Location
X-Fastly-Cache
X-Block-Status
X-C
X-Bip
X-Debug-Cache-Fetch
X-BBXSRF
X-WADP-Cache
X-Cache-Info
X-CGP
X-Clientip
X-CUA
X-Debug-Cache-Expiry
X-Cdn-Origin
X-Backend-Url
X-Debug-Cache-Store
X-Distil-CS
X-Dispatch
X-ElasticPress-Search
X-Eu-Site
X-Reqid
X-Debug-Log
X-Auto-Login
X-Backend-Host
X-Debug-Cookies
X-Azure-Ref-OriginShield
X-Azure-Ref
X-Gen-Mode
Pagetype
Content-Disposition
CDCHOST
X-User
X-Var-Ttl
X-Up
Countrycode
X-Sn-Servicetimems
Srv
X-TrackingId
X-VC-Cache
X-Nc
AKAMAI
X-Clara-WADP
X-Via-CDN
X-Wikidot-Static-Cache
X-Device-Os
X-We-Are-Hiring
X-Webstats-RespID
X-Wikidot-Backend
X-Skip-Cache
X-Thanos
Heartbleed
Ha-Gx-Prefs
Gh-Request-Id
X-Service
L
X-Server-IP
HA-Ipaddr
X-PHP-Host
X-Microcachable
X-Rebelmouse-Cache-Control
X-RateLimit-Remaining-Second
X-Amz-Meta-Cache-Control
X-Variation
X-Qloud-Router
X-VServer
X-Dispatcher-Server
X-RateLimit-Limit-Second
X-Say-TTL
X-Cache-FS-Status
Platform
RNT-Machine
RNT-Time
X-Request-URI
X-WebServer
X-Say-Cacheable
X-SayCDN-TTL
Adler-Geo
Is-Eu
PFcat
X-Old-Content-Length
X-Urbn-Site-Id
X-Servername
X-Platform-Server
X-Li-Fabric
X-GeoIP-City
X-Owner
X-Key
X-Method
X-Matched-Rule
X-Li-Pop
X-Lb-Id
X-Fetched-On
X-Swa-Ws
X-Urbn-Context-Path
X-Nginx-Cache-Key
X-LI-Proto
X-Request-Start
X-Policy
X-Generated-In
X-LI-UUID
X-Thinkindot-L3
X-Epic-Correlation-Id
X-Distributor
X-Core-Mission
X-Rebelmouse-Surrogate-Control
Server-Int
Locale
Kp-EeAlive
X-App-Name
Esi-Enabled
Fastly-SWR
Fastly-SIE
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
Magicmarker
Web-Mar-Node
W
X-Backend-State
Thinkindot-Control
X-Guploader-Uploadid
X-Ratelimit-Limit
X-GEO
X-NWS-UUID-VERIFY
X-Dc
X-Svr
X-MSEdge-Flight
X-Internal-Host
X-MSEdge-Features
Server-ID
Resin-Trace
X-ServiceProvider
X-SD-PageType
Cache-Provider
True-Client-Country-4JS
X-Cache-Id
SD-X-WS
X-VWS-Id
X-AWS-Id
X-LJ-Flow-ID
X-Cdn-Forward
Cdn-Host
X-Cache-URL
Cdn-Request-Time
X-Instart-Isnd
V-Age
Memory
X-Edge-Server
X-FPC
X-Scheme
X-GDPR
X-Mode
X-DC
X-Cache-Backend
X-Be
X-Processor
X-Org
REQUESTUUID
X-Request-Time
SS
X-Flog
X-ABtesting
X-Wa
X-Hello
X-CDN-Forward
Group
X-NodeID
X-Pjax-Url
X-Servedbyhost
X-Datadome
X-IPS-LoggedIn
X-Response-By
Cache-Host
X-Server-W
X-Unique-ID
Country-Code
X-DataStream-Cache-Status
Cache-Cookie-Set-Lfrom
Cache-Cookie-Set-From
Cache-Cookie-Set-Idcheck
X-Page-Type
X-Routing-Service
X-Proxied
X-Oss-Hash-Crc64ecma
X-VCL-Version
PICS-Label
X-Oss-Object-Type
X-Oss-Request-Id
X-Ms-Request-Id
X-Ms-Version
X-Zipkin-Id
X-Oss-Server-Time
X-Oss-Storage-Class
X-SN
X-Ruxit-Js-Agent
X-EC-Lua
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Oracle-Dms-Rid
X-HS-Status
UCS
X-Varnish-Beresp-Ttl
X-Webkit-Csp
X-RateLimit-Reset
X-Session-Fingerprint
X-Tb-Optimization-Total-Bytes-Saved
X-SRV
X-Via-Ucdn
Lfy
X-Ftr-Request-Id
X-Dynatrace
X-Zone
X-Cache-Debug
Ttl
Ajk
X-MP-GENERATED-AT
Powered-By-ChinaCache
X-Agile-Id
X-COUNTRY
X-Agile
X-Agile-Age
X-Logtrace-Id
X-URL
X-GRACE
Geoip-Latitude
SN
Proxy-Firewall
ProcessTime
X-Pf-Uncompressing
GeoIp-Country-Code
Geoip-City
XServer
X-Source
X-Ratelimit-Remaining
X-Varnish-Beresp-TTL
X-ZONE
X-Fastly-Country-Code
X-APP
GeoIP-Latitude
GeoIP-City
X-7Graus-Varnish-XKeys
Powered-By
X-PF-Uncompressing
X-7Graus-Varnish-Cache-Control
X-Webapp-Samesite-None-Activated-N
GeoIP-Country-Code
X-HTML-Minification-Powered-By
X-Sucuri-Id
X-Grey
Environment
X-Newrelic-Synthetics
X-Sedo-Request-Id
X-Logging-Id
X-Cache-Category-Id
X-CSRF-Token
X-Cache-Miss-From
X-DataStream-Origin-MEX-Latency
CACHE
X-NODE
X-Unique-Id
X-DataStream-MidMile-RTT
X-Ftr-Cache-Host
Cdn
X-Dynatrace-Js-Agent
X-TH-Server
X-Bc
X-CLOUD-TRACE-CONTEXT
X-Sucuri-ID
X-Tt-Trace-Host
Fastly-Backend-Name
X-LiteSpeed-Cache-Control
X-Core-Value
X-Vcl-Version
X-Edge
CF-Cached-On
X-Check-Cacheable
M-TraceId
Pics-Label
X-Aicache-OS
WWW
X-Vdms-Version
GW-Server
X-Sucuri-Cache
HostName
X-Ftr-Backend
X-Ftr-Dc
Dynatrace
X-Ftr-Realm
X-Ftr-Balancer
X-Ftr-Backend-Server
MIME-Version
X-Rocket-Build-Number
X-Sigma
X-Sigma-Backend
X-AK-Request-ID
Cdncip
Requestid
X-LAGOON
Cdnsip
X-Mid
X-Fastly-Backend-Reqs
X-RCS-CacheZone
LB
Cf-Ipcountry
X-Varnish-Ttl
X-Planisys-CDN-Cache
X-Varnish-Url
Ohc-Response-Time
X-Shopify-Generated-Cart-Token
X-MCACHE
X-FORWARDED-FOR
X-BC
X-Gannett-Site-Version
X-Cache-Tag
X-NGINX-Cache
Pragrma
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
X-UPSTREAM-Address
X-Secret
X-Fstrz
Amp-Access-Control-Allow-Source-Origin
X-TT-LOGID
X-BE
X-Via-NSCOPI
X-ServedByHost
X-Litespeed-Cache-Control
X-PJAX-URL
X-Swift-Error
Lb
WZWS-RAY
X-DB
URI
X-CDN-Cache
On-Server
RequestUuid
X-Action
X-DI
X-RSL
X-Cache-Ttl
X-Varnish-Cacheable
X-WA
X-DSS
X-RPS
DataCenter
X-DW
X-RPM
X-ORACLE-APMCS-TAG
X-ORACLE-APMCS-REQUEST-ID
X-SaId
User-Agent
X-GeoIP-Country-Code
X-Proxy-Cacherz
TTL
Host-ID
Xkeyrz
X-WR-MODIFICATION
X-ND-Cache
X-Correlation-ID
X-Nananana
X-Dw-Trace-Id
X-Fpc
X-Upstream-Ct
X-Trafficlayer-App-Version
Get-Access-Time
Inserted-Into-Cache-At
Is-Session-Tracking
X-Akamai-SSL-Client-Sid
X-Upstream-Ht
X-Flow-Id
X-Zalando-Child-Request-Id
X-Page-Impression-Id
X-Fastly-Cache-Hits
Xkeypdq
CDN
Server-Id
X-Gen-Id
X-Via-SSL
X-Via-Edge
Warning
X-Served-From
X-Crawler
Who
X-SB
X-MID
Locid
Correlation-Id
X-VC
X-Refresh
SID
X-NU-AKA-ACS-Version
X-Cf-Powered-By
X-Pod
X-Req
X-Akamai-ERRuleID
Thinkindot-Cache-Type
Gannett-Cam-Experience-Id
X-Akamai-ERPolicy
X-Amzn-Remapped-Connection
X-Amzn-Remapped-Date
X-Newrelic-App-Data
HitType
X-Bug-Bounty
X-ServerName
X-Render-Time
X-ECache
X-Request-URL
Processtime
X-FE
X-MiniProfiler-Ids
RequestId
X-LB-ID
Xet-Cookie
V-Cache
Cneonction
X-Gdpr
X-LiteSpeed-Tag