Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Pragma
Accept-Ranges
Last-Modified
Strict-Transport-Security
X-Content-Type-Options
X-Powered-By
CF-RAY
ETag
Link
X-XSS-Protection
Expect-CT
Via
X-Cache
Age
Access-Control-Allow-Origin
Content-Security-Policy
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Served-By
X-Varnish
X-Amz-Cf-Id
Referrer-Policy
X-Request-Id
X-Timer
X-AspNet-Version
CF-Cache-Status
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Runtime
X-Xss-Protection
Access-Control-Allow-Credentials
X-Download-Options
X-Drupal-Cache
X-Cacheable
Alt-Svc
X-Generator
Content-Security-Policy-Report-Only
X-AspNetMvc-Version
Status
Timing-Allow-Origin
X-Check
X-Cache-Status
X-Adblock-Key
X-Iinfo
X-Permitted-Cross-Domain-Policies
X-Content-Security-Policy
X-DNS-Prefetch-Control
Content-Encoding
X-CDN
X-Template
X-Turbo-Charged-By
X-Language
X-Request-ID
Keep-Alive
X-Type
X-Buckets
EagleId
Xkey
X-Backend
X-AH-Environment
X-Via
WPE-Backend
X-Age
X-Pass-Why
Access-Control-Max-Age
X-Server
X-Swift-SaveTime
X-Swift-CacheTime
X-Cache-Group
Ali-Swift-Global-Savetime
X-Varnish-Cache
X-Pingback
Upgrade
X-Nginx-Cache-Status
X-Server-Powered-By
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
Grace
X-Hacker
X-UA-Device
Cf-Railgun
P3p
X-Amz-Request-Id
X-Amz-Id-2
X-Robots-Tag
X-LiteSpeed-Cache
X-Ua-Compatible
X-Proxy-Cache
X-Envoy-Upstream-Service-Time
X-Page-Speed
Request-Context
X-CST
X-Node
X-Device
X-Host
X-Ac
X-Cache-Lookup
Content-Location
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Cnection
Surrogate-Control
X-Amz-Version-Id
X-Server-Id
X-WebKit-CSP
X-Rack-Cache
X-Backend-Server
X-Dns-Prefetch-Control
X-Response-Time
X-Rq
X-Px
X-Readtime
X-Application-Context
Pinterest-Generated-By
Allow
X-OneAgent-JS-Injection
X-Cloud-Trace-Context
X-Instart-Request-ID
EagleEye-TraceId
X-Url
X-Clacks-Overhead
Server-Timing
X-HeyJason
Permitted-Cross-Domain-Policies
X-Do-Not-Hack
Request-Id
X-Country
Report-To
Rating
X-TTL
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Country-Code
Charset
X-Varnish-TTL
Edge-Control
X-ESI
X-ORACLE-DMS-ECID
X-Powered-CMS
X-Server-Name
X-TtlSet
X-Vname
X-PC
X-FTR-Request-ID
X-DataDome
X-CF-Powered-By
X-ORACLE-DMS-RID
Feature-Policy
X-Origin-Cache
X-MS-InvokeApp
X-DynaTrace-JS-Agent
X-Goog-Hash
X-Cached
NEL
Public-Key-Pins
X-Recruiting
X-Vhost
X-DynaTrace
X-VARITI-CCR
X-GoogleNews-Bot
X-Geo-Segment
X-Kinja-Revision
X-Cdn-Fetch
X-Exp-Id
X-Exp-Variant
X-Kinja-Server
X-Kinja-Build
X-Kinja
X-F-Cache
X-Version
AR-PoweredBy
AR-ATIME
AR-CACHE
X-Powered-By-Plesk
X-Mod-Pagespeed
X-Pinterest-Rid
Pinterest-Version
X-Upstream-Env
X-SRCache-Store-Status
X-SRCache-Fetch-Status
PB-RID
PB-PID
X-T
Arc-Version
X-Mobile-Rewrite
Content-MD5
Verso
X-Client-IP
X-D2id
RTSS
X-Abt-Application-Version
X-N
X-Dispatcher
SPRequestGuid
X-Amz-Rid
X-SharePointHealthScore
X-Cdn
X-GitHub-Request-Id
X-Ruxit-JS-Agent
X-Server-ID
X-Hits
X-Forwarded-Proto
Nginx-Cache
X-Navigation-Version
X-Dw-Request-Base-Id
Paypal-Debug-Id
X-B
X-Upstream
Realpath
X-Pad
X-Grace
X-Varnish-Age
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Content-Digest
X-TEC-API-VERSION
X-Shield-Request-Id
Arr-Disable-Session-Affinity
X-Id
MS-Author-Via
X-FastCGI-Cache
X-Content-Options
X-Cache-Hit
X-Ttl
TCN
X-Kinsta-Cache
X-Logged-In
Access-Control-Request-Method
X-NWS-LOG-UUID
DynaTrace
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
S
SPIisLatency
SPRequestDuration
X-Acc-Meta-Resource-Type
X-XRDS-Location
Mrf-Cache-Status
X-Mrf-Section-Lastmod
X-Mrf-Item-Lastmod
MRF-Tech
X-Trace
X-Origin-Upstream-Status
X-Vcap-Request-Id
X-VCache
X-MSEdge-Ref
X-DIS-Request-ID
X-HW
Cleartype
X-IPLB-Instance
Eomportal-Instance
X-FTR-Cache-Status
X-FTR-DC
X-FTR-Balancer
X-Country-Code-Real
X-Fastly-Request-ID
Surrogate-Key
X-FTR-Backend
X-FTR-Backend-Server
X-FTR-Realm
Cache-Status
X-Via-JSL
X-Cache-Rule
X-Zen-Fury
X-Frontend
Service-Worker-Allowed
X-FTR-Expires
X-PressLabs-Stats
X-HS-Hub-Id
X-HS-Content-Id
X-NF-Request-ID
Front-End-Https
X-SS-Set-Cookie
Server-Name
X-User-Agent
X-Forwarded-For
AR-SID
Tracecode
X-Request-Processing-Time
X-Request-Received
X-Varnish-Backend
Fastcgi-Cache
X-Hostname
X-Cache-2
X-Webkit-Csp
Rt-Fastcgi-Cache
Host
Backend-Timing
X-Analytics
FilterID
X-Wix-Server-Artifact-Id
Viewport
X-AOL-HN
TP-Cache
X-Whom
X-FTR-Cache-Host
TP-L2-Cache
X-Revision
Public-Key-Pins-Report-Only
X-Content-Powered-By
X-Srv
Alternate-Protocol
X-Proxied
X-Rid
X-Middleton-Display
X-Sol
Display
Response
X-Middleton-Response
X-Debug-Info
ServerID
AMP-Access-Control-Allow-Source-Origin
X-AppVersion
X-Activity-Id
X-Az
X-Debug
X-Ser
X-Akam-SW-Version
X-Contextid
X-Cached-By
X-Oneagent-Js-Injection
X-Daa-Tunnel
X-Cache-Control
X-Cache-Server
X-Magnolia-Registration
X-WPE-Loopback-Upstream-Addr
X-Mobile
X-Cache-Key
Ar-Sid
Server-Info
HitInfo
HitType
X-RateLimit-Remaining
X-Page-Id
X-Cache-Age
Refresh
Accept-Charset
X-B3-Traceid
X-FB-Debug
Cache-Tag
X-Amz-Meta-S3cmd-Attrs
MicrosoftSharePointTeamServices
X-Framework
X-Varnish-Grace
X-Instance
AR-Request-ID
X-LB-Cache
X-Geo-Country
X-Varnish-Hostname
X-Content-Security-Policy-Report-Only
Retry-After
X-PHP-Backend
X-Request-Guid
X-Cache-Operation
X-B-Cache
Host-Header
X-TT
X-Generated-By
X-App-Server
X-Signature
X-BCube-Filmed-By
X-App-Environment
X-Origin-Server
Upgrade-Insecure-Requests
Source
X-Tumblr-Pixel-0
Server-Node
X-Tumblr-Pixel
X-XRDS-LOCATION
X-Handled-By
X-Accel-Expires
X-Tumblr-User
X-Device-Type
X-NewRelic-App-Data
X-URL
X-Platform-Server
X-Hyper-Cache
Liferay-Portal
X-Akamai-Edgescape
Accept-CH
DC
X-Newrelic-App-Data
X-WA-Info
Powered-By-ChinaCache
X-TT-TIMESTAMP
X-GUploader-UploadID
X-APP-VERSION
X-Cache-Action
X-Correlation-Id
X-Amzn-Trace-Id
Fastly-Restarts
X-Node-Name
X-B3-Sampled
X-Fastcgi-Cache
X-CACHE-GROUP
X-Drupal-Cache-Tags
X-Cluster
X-Port
Webserver
X-TA-CDN-Provider
X-ATG-Version
X-Varnish-Server
X-Accel-Buffering
NGB
X-Edge-Location
X-S
X-Cacheable-TTL
X-Seen-By
X-Locale
X-Wix-Request-Id
X-WebKit-CSP-Report-Only
Filters
X-GeoIP
Actual-Object-TTL
ServedBy
X-FW-Server
X-FW-Static
X-FW-Serve
X-FW-Type
X-Jobs
X-Tumblr-Pixel-2
X-RequestSource
X-FW-Hash
X-Varnish-Hits
X-Tumblr-Pixel-1
X-Amz-Replication-Status
AsisCache
X-Source
X-Region
GEO-INFO
X-UA
X-Distil-CS
X-Cache-TTL-Remaining
X-Edge-Cache
X-Edge-Cache-Key
Cache
S-Cnection
MS-CV
X-RTag
X-UA-Device-Type
X-Wix-Petri-Ex
X-Adobe-Loc
X-Adobe-Content
Content-Script-Type
Content-Style-Type
X-Servedby
X-Webkit-CSP
X-Cache-Remote
X-Cache-Config
Served-By
PageSpeed
Country
X-Oracle-Dms-Rid
X-Correlation-ID
X-Vg-Webcache
X-Unique-ID
X-Guploader-Uploadid
X-Dynatrace-Js-Agent
X-Sucuri-ID
X-Ocache
HostName
Datacenter
X-Amz-Server-Side-Encryption
X-Status
X-Drupal-Cache-Contexts
X-TX-ID
X-RateLimit-Limit
X-Varnish-IP
X-UUID
X-Microcachable
Healthy
X-GZip
X-Ruxit-Js-Agent
X-Internal-Host
X-Ezoic-Cdn
X-Esi
IBM-Web2-Location
X-DataStream-Cache-Status
X-Akamai-Transformed
X-Agile-Id
X-Cache-Category-Id
X-Agile-Age
X-Rendered-As
X-App-Name
X-RN-RSRV
X-Akamai-Request-ID
X-Vgn-Hpd-Reason
X-Mode
Meta-Geo
X-Real-IP
Machine
X-Detected-As
X-BYPASS-REASON
X-Grey
User-Cache-Control
Access-Control-Allow-Method
X-Agile
X-CCM
X-JoinUs
X-ProxyCache-Status
User-Agent
X-IP
X-ProxyCache-Key
X-Is-Bot
Load-Balancing
X-Xfnlog-Site
X-Time-Microsecs
X-Timing-Wait
Mn-Server-Ip
X-ServerID
X-OVcl-Cache
X-Debug-Cache
X-Origin
X-Proxy-Build
X-OVcl
Selected-FE
X-NGENIX-Cache
X-Instance-Name
X-Backend-Name
X-CDN-Forward
X-PCL
ServerName
Backend
X-OCL
X-Human
X-ApacheServer
X-Loop
X-NodeID
X-Tb
X-FC-Vary-Parameters
DB-Nickname
X-Rocket-Nginx-Bypass
X-Varnish-Cacheable
X-Content-Type
Now
Payment
X-BB-IP
X-Hosted-By
S-Rt
Cache-Name
X-Viewer-Country
X-PERF
L5d-Success-Class
X-Varnish-Cache-Hits
X-Upgrade-Enabled
X-TNCMS
Cache-Key
Ohc-File-Size
Azure-SlotName
Azure-RegionName
X-ProcessESI
Azure-Version
Azure-InstanceId
X-NCache
X-CDN-Cache
X-Distributor
X-Generated
X-RemovedCookies
X-Original-Request
Azure-SiteName
X-Web-Node
X-Yottaa-Metrics
X-EIG-Tracking-Id
X-Via-Fastly
X-Yottaa-Optimizations
X-Site-Version
Webcakes-App-Name
Webcakes-App-Version
Webcakes-Region
X-Access
TWC-Privacy
TWC-Device-Class
TWC-GeoIP-Country
TWC-GeoIP-LatLong
TWC-Locale-Group
X-Routing-Service
Access-Control-Request-Headers
X-Www-Served-By
X-SplitTest
X-VWS-Id
TWC-Connection-Speed
X-Origin-Hint
X-LJ-Flow-ID
X-TWH-CORRELATION-ID
X-Zipkin-Id
X-Section
X-AWS-Id
X-Proxy
Property-Id
X-Format
X-Origin-CC
X-Pubstack
X-Amz-Meta-Surrogate-Control
X-PC-Hit
X-PC-AppVer
Dont-Set-Cookie
X-PC-Key
Xserver
X-Storage
Ms-Operation-Id
X-PC-Host
X-Oracle-Dms-Ecid
X-PC-Date
X-Cache-Backend
X-Environment-Context
X-L-Path
X-Oss-Storage-Class
SRV
X-Oss-Server-Time
X-Oss-Object-Type
X-Oss-Hash-Crc64ecma
X-Oss-Request-Id
X-Transaction
X-Twitter-Response-Tags
X-Connection-Hash
LB
WZWS-RAY
X-Time
X-Path-Route
Cteonnt-Length
Countrycode
X-Webstats-RespID
X-Sucuri-Cache
X-HS-Cache-Config
Edge-Cache-Tag
X-Hit
X-Labrador-Cache-Channel
X-Generation-Time
X-Proto
X-Optimization
X-B3-Spanid
X-M-Reqid
X-Cache-HT
X-Qnm-Cache
X-M-Log
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Ah-Environment
X-SERVER-NAME
Pagespeed
X-V
X-Cache-Ttl
X-Release
X-Newrelic-Synthetics
X-Real-Ip
X-Birta-Cache-Post
X-Meta-Tbi-Cache-Vertical
X-Birta-Served
NODE
XServer
X-Tumblr-Pixel-3
NnCoection
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
Fastly-SSL
X-MP-GENERATED-AT
X-Cache-Enabled
X-Rule
X-C
NtCoent-Length
From-Origin
X-EdgeConnect-Cache-Status
Apicache-Version
Apicache-Store
X-Cache-NE
Cache-Hits
X-A-Wwc
Xc-Version
MD5-Digest
Kp-EeAlive
X-A-Dgt
Host-ID
Ec-Rule-Version
Decoy-Debug-TTL
X-Application
Decoy-Debug-Status
Fly-Cache
Fly-Request-Id
X-Accel-Expires-Debug
X-Alternate-Cache-Key
X-Worker
X-Thinkindot-L3
Httpd-Identifier
X-A-Dam
True-Client-Country-4JS
Resin-Trace
V-Age
X-WebServer
Request-EU
Server-Host
Thinkindot-Control
Server-ID
SN
T-Server
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
Viewtype
VivaBuild
X-Wix-Route-ID
X-A-Ccd
MI-Cache-Age
MI-Cache
X-A-Dcw
X-A
Rendered-Blocks
Request-Country
Warning
Web-Mar-Node
Www
Meta-Geo-Continent
X-Via-Edge
X-Gen-Mode
X-G
X-Generated-In
X-Rewrite-Enabled
X-Response-By
X-Upstream-HT
X-From
X-Rojux
X-DPWN-IS-SECURE
X-Dispatcher-Server
X-Edge-Server
X-Env
X-Fetched-On
X-S-Cookie
X-Upstream-CT
X-Hl-Ver
X-RCS-CacheZone
X-Origin-Expires
X-UE-Client-Country
X-Planisys-CDN-TTL
X-Planisys-CDN-Cache
X-PAYTM-SRV-ID
X-Region-Sid
X-Origin-Date
X-Matched-Rule
X-Hnp-Log
X-MI-In-Market
X-NU-AKA-ACS-Version
X-Org
X-S-Maxage
Decoy-Debug-Key
X-ShopId
X-Shopify-Stage
X-ShardId
X-Via-SSL
X-Cache-URL
X-Planisys-CDN-Rules
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Trv-Group
X-We-Are-Hiring
X-B-Cookie
X-BB-ID
X-SRCache-Key
X-Block-Status
X-Sf
X-Via-CDN
X-Date
X-TT-LOGID
X-Destination
X-ScT
X-Died
X-Developer
X-Server-By
X-D
X-CF-Lambda-Fn
X-VG-WebServer
X-CF-Lambda-Version
X-ServiceProvider
X-Server-Time
X-ARC
GMS-Ver
X-Varnish-Beresp-Ttl
Cdn-Host
Cache-Prefix
BehaviorPad-Version
X-NC
X-SERVER
Cdn-Request-Time
Country-Code
Cneonction
Ws
X-Dc
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-Server-IP
Proxy-Connection
X-Amz-Meta-Cache-Control
X-Backend-State
Adler-Geo
X-VServer
X-Backend-Url
Release
Frame-Options
Uber-Trace-Id
X-CS
Server-Int
X-SIPLIST1
X-Request-URI
X-Response-Served-From
RNT-Machine
RNT-Time
X-Cache-CFC
X-Hash
X-GeoIP-Country-Code
X-GeoIP-City
X-Node-Id
X-Redis-Cache
X-IN-APIGATEWAY
X-Logtrace-Id
X-IN-WAF
X-IN-SSL-APIGATEWAY
X-Fstrz
X-Atg-Version
Pragrma
X-Cache-Host
X-Origin-TTL
X-No-Session
X-Clientip
X-Content-Age
X-Device-Os
Accept-CH-Lifetime
X-Crawler
X-Cache-Bucket
X-Backend-Host
Odigeo-Trace-Id
NGX
On-Server
CDCHOST
Origin-Cache-Control
Fastly-Backend-Name
MI-API
Apple-News-Services-Handled
IsBot
Is-Eu
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
Origin-Edge-Control
Ajk
Platform
PFcat
ProcessTime
X-Nc
X-ServedBy
X-ElasticPress-Search
X-VG-TLSProxy
Content-Disposition
Ha-Gx-Prefs
X-Ver
X-Developers
X-Passed-To
X-Passed-To-BeforeDispatch
X-Returned-From-BeforeDispatch
X-Passed-To-DLL
X-Passed-To-PostProcessResponse
HA-Host
X-CGP
X-Returned-From-DLL
HA-Urlpath
X-Cdn-Srv
HA-Servedtime
HA-Ipaddr
HA-Georegion
X-Phone
X-Core-Value
X-Core-Mission
X-Croise-Owner
X-Epic-Correlation-Id
Cache-Tags
X-HCF
HA-Cloudapp
HA-Geocity
X-Reboot
Esi-Enabled
X-UnsetCookies
X-Swa-Ws
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
HA-Geocountry
X-Trace-Id
X-F5-Cache
X-Eu-Site
X-Platform
HA-Geolon
X-Varnish-HitMiss
X-Fastly-Cache
HA-Geolat
X-Up
X-Returned-From-PostProcessResponse
X-FireWall-Port
X-Returned-From
X-Ckpd-Fst-Backend
Is-Session-Tracking
Who
Origin
X-NX-Host
X-Rebelmouse-Cache-Control
X-Debug-Cookies
X-Rebelmouse-Surrogate-Control
X-Wikidot-Static-Cache
AKAMAI
X-Cdn-Origin
X-Wikidot-Backend
X-Forwarded-Host
Time
X-Powered-By-ANYU
WWW-Authenticate
X-Actual-URL
X-Debug-Log
X-Skip-Cache
Heartbleed
X-Cache-FS-Status
Fastly-SWR
X-Sn-Servicetimems
X-Cache-Srv
X-Cache-TTL
Fastly-SIE
X-Cache-Expires
X-Cache-Control-Set-By
X-Backend-TTL
Request-Time
X-Server-Group
Get-Access-Time
HTTPS
X-Cache-ASPX
Backend-Name
X-HS-Combine-CSS
X-Nginx-Cache
X-Refresh
X-Location
X-GoCache-CacheStatus
X-Alicdn-Da-Ups-Status
X-Key
X-Stale
X-App-Version
X-Var-Ttl
X-From-Cache
X-Owner
RequestId
Dnion-Transfer-Encoding
X-Ms-Version
X-Ms-Blob-Type
X-Ms-Request-Id
X-Ms-Lease-Status
X-Req
MIME-Version
NodeID
Powered-By
X-CUA
We-Hiring
X-MSEdge-Flight
X-Edge-IP
X-Geo
Mail-Subject
X-Pjax-Url
X-Servername
X-P-T
X-MSEdge-Features
Fastly-Soc-X-Request-Id
X-Csrf-Token
X-Pf-Uncompressing
X-Pc-Key
X-Info
X-Pc-Hit
Ohc-Response-Time
X-Pc-Appver
X-B3-TraceId
X-Cdn-Forward
X-TIME
X-BBXSRF
Section-Io-Cache
X-Request-Time
X-Micro-Cache
X-NWS-UUID-VERIFY
X-Pc-Date
X-Pc-Host
X-GRACE
WP-Super-Cache
X-Page-Type
X-Cache-Time
X-External-Request-Id
CF-IPCountry
Dynatrace
X-Litespeed-Cache
X-WR-MODIFICATION
X-COUNTRY
X-Varnish-Url
Magicmarker
X-CSRF-Token
X-Servedbyhost
PICS-Label
X-Varnish-Action
Cdn
X-DC
X-User
X-Aicache-OS
PageType
Geoip-City
X-Ua
Mime-Version
X-LiteSpeed-Cache-Control
GeoIp-Country-Code
X-Request-UUID
Geoip-Latitude
CDN
X-CCM-LastModified
X-GEO
X-Variation
FastCGI-Cache
Pagetype
GW-Server
UCS
X-Varnish-Beresp-TTL
X-Irp-Debug
X-Cache-Handler
X-Ibm-Trace
Processtime
X-Dynatrace
Arc-Country
Sid
X-Gdpr
X-HTML-Minification-Powered-By
Version
X-GDPR
CACHE
X-Fastly-Backend-Reqs
X-Varnish-Id
X-FW-Version
X-Cache-Id
X-Layer
X-Server-W
Cartoon
COMMERCE-SERVER-SOFTWARE
Rt-Proxy-Cache
X-TId
X-CACHE-KEY
X-Shard
Memcached
X-Wa
X-Nananana
X-Bip
X-RateLimit-Remaining-Second
X-Thanos
X-RateLimit-Limit-Second
X-Nginx-Cache-Key
X-Load-Cache
GeoIP-City
If-Modified-Since
Node
GeoIP-Latitude
X-StackifyID
GeoIP-Country-Code
X-BE
X-UPSTREAM-Address
DataCenter
Memory
Hostname
X-Via-NSCOPI
X-Sentry-ID
X-ServedByHost
X-Ig-Deployment-Stage
X-Varnish-URL
Lb
X-Gannett-Site-Version
RATING
X-Varnish-Ttl
X-Akamai-Request-ID2
X-Secret
Pics-Label
X-NGINX-Cache
X-Cache-Var-Map
X-Cache-Var
X-Be
X-PAGE-TYPE
X-FORWARDED-FOR
X-Proxy-Server
URI
X-Auto-Login
Sta2Tusw
X-Datadome
X-Tid
Cf-Ipcountry
X-Gen-Id
Mobile-Detection-Method
Srv
X-Cluster-Node
X-Fastly-Cache-Hits
X-SRV
X-DataStream-Origin-MEX-Latency
X-DataStream-MidMile-RTT
X-Frame-Option
SD-X-WS
OT-Force-Account-Verify
X-Ratelimit-Remaining
X-APP
X-VCT
X-Nf-Srv-Version
Fastcgi-X-Cache-Version
Fastcgi-X-Cache
Xet-Cookie
Fastcgi-Useragent
X-PJAX-URL
X-WA
X-PF-Uncompressing
X-ID
X-Ratelimit-Limit
X-GZIP
X-Mrs-Cache-Hits
X-Mrs-Cache
X-Feature
X-Mrs-Age
X-EC-Security-Audit
X-Dw-Trace-Id
X-CacheKey
X-Policy
X-VC
X-B3-SpanId
X-Check-Cacheable
Powered
X-Litespeed-Cache-Control
V-Cache
X-Mshield-Cache-Status
X-SB
X-Store
Cache-Provider
Group
Serverid
REQUESTUUID
AGE-Hash
N-Cache
X-Akamai-ERRuleID
X-Akamai-ERPolicy
X-Fe
X-Bug-Bounty
X-RAMCache
X-Endurance-Cache-Level
Pramga
X-CDN-Pop
X-Hail-Hydra
X-CDN-Pop-IP
X-Distil-Cs
X-Unique-Id
X-VG-WebCache
X-Haproxy-Hostname
X-Cookie
X-Ratelimit-Reset
X-RateLimit-Reset
X-Haproxy-Ip
X-ServerName
X-Request-Start
X-SD-PageType
X-Public
Requestid
X-Surge-Debug
X-Grace-Duration
X-Varnish-ID