CC Lint Report

Severity	Responses	%
BAD	44,810,982	36.5%
WARN	72,363,474	58.9%
INFO	5,700,030	4.6%

Category	Occurrences	%	Note types fired
Caching	417,568,883	29.1%	43
Browser security	462,830,307	32.2%	57
Cookies	83,744,289	5.8%	20
Cross-origin resource sharing	7,667,974	0.5%	3
Content negotiation	2,324,466	0.2%	2
Partial content	30,919	0.0%	4
Connection	19,237	0.0%	1
General	461,903,409	32.2%	50

Notes

Caching 417,568,883 occurrences across 43 note types (29.1% of occurrences)

BADCC_BAD_VALUE_TYPE~713 sites (1.4%)879,749

The %(directive)s cache directive's value is incorrect.

Samples (5)

https://n8n.io/integrations/airbrake/and/cloudinary/field_name=Cache-Control, directive=stale-while-revalidate, expected_type=integer, value=None
https://www.eclipse.org/forums/index.php/t/1090684/field_name=Cache-Control, directive=max-age, expected_type=integer, value=8m
https://www.zerohedge.com/news/2014-06-18/yellen-no-bubble-herefield_name=Cache-Control, directive=stale-while-revalidate, expected_type=integer, value=None
https://quran.com/yusuf/36-41field_name=Cache-Control, directive=stale-while-revalidate, expected_type=integer, value=None
https://miro.com/ar/templates/venn-diagram/field_name=Cache-Control, directive=stale-while-revalidate, expected_type=integer, value=None

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nextjs	513,514	58.4%	6.2%
cloudflare	250,209	28.4%	0.8%
nginx	191,925	21.8%	0.7%
cloudfront	167,818	19.1%	1.0%
nuxt	48,625	5.5%	4.7%
apache	38,101	4.3%	0.3%
fastly	37,139	4.2%	0.4%
akamai	34,982	4.0%	0.3%
azure-front-door	32,036	3.6%	2.2%
envoy	30,885	3.5%	0.6%
… 1 more layers not shown …

BADSTORE_PRIVATE_PUBLIC_CONFLICT~202 sites (0.4%)180,770

This response contains both the `public` and `private` Cache-Control directives.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	42,318	23.4%	0.2%
fastly	28,732	15.9%	0.3%
cloudflare	27,846	15.4%	0.1%
cloudfront	25,223	14.0%	0.1%
akamai	20,834	11.5%	0.2%
envoy	19,485	10.8%	0.4%
azure-front-door	17,799	9.8%	1.2%
apache	3,985	2.2%	0.0%
nextjs	110	0.1%	0.0%
nuxt	28	0.0%	0.0%

BADDATE_CLOCKLESS_BAD_HDR~36 sites (0.1%)14,718

This response has an Expires or Last-Modified header, but no Date.

Samples (5)

BADAGE_NEGATIVE~16 sites (0.0%)574

The Age headers' value must be a positive integer.

Samples (5)

BADAGE_NOT_INT~5 sites (0.0%)5,351

The Age header's value should be an integer.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	3,589	67.1%	0.0%
akamai	1,640	30.6%	0.0%
cloudflare	107	2.0%	0.0%

BADCC_SHOULD_NOT_HAVE_VALUE~2 sites (0.0%)46,908

The %(directive)s cache directive does not accept a value.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	46,899	100.0%	0.2%
cloudflare	9	0.0%	0.0%

WARNFRESHNESS_HEURISTIC~25,243 sites (51.2%)31,377,664

This response allows caches to assign their own freshness lifetimes to it.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	7,444,247	23.7%	28.1%
cloudflare	7,410,172	23.6%	24.2%
apache	4,653,154	14.8%	35.2%
cloudfront	3,585,751	11.4%	21.3%
akamai	1,395,820	4.4%	10.9%
fastly	1,328,086	4.2%	13.4%
envoy	753,256	2.4%	15.7%
nuxt	430,991	1.4%	42.1%
nextjs	303,795	1.0%	3.7%
azure-front-door	283,350	0.9%	19.8%
… 1 more layers not shown …

WARNCC_CONFLICTING~17,901 sites (36.3%)35,857,883

The %(directive)s cache directive overrides other directives.

Samples (5)

http://www.google.co.uk/url?sa=t&url=https%3A%2F%2Fyasta.irfield_name=Cache-Control, directive=no-cache, conflicts=- `must-revalidate`
http://www.sbrf.ru/moscow/ru/legal/partner_drkk/regperson/field_name=Cache-Control, directive=no-store, conflicts=- `no-cache` - `must-revalidate`
http://www.sch.gr/sites/sch-units/index?page=10&SchUnitsSearch%5Bunit_type%5D=%CE%9D%CE%97%CE%A0%CE%99%CE%91%CE%93%CE%A9%CE%93%CE%95%CE%99%CE%9F&SchUnitsSearch%5Bprefecture%5D=%CE%91%CE%99%CE%A4%CE%A9%CE%9B%CE%9F%CE%91%CE%9A%CE%91%CE%A1%CE%9D%CE%91%CE%9D%CE%99%CE%91%CE%A3field_name=Cache-Control, directive=no-store, conflicts=- `no-cache` - `must-revalidate`
https://adevarul.ro/stiri-externe/rusia/dosarele-epstein-exploatate-de-conturi-2507901.htmlfield_name=Cache-Control, directive=must-revalidate, conflicts=- `stale-if-error`
https://clickup.com/p/crm-software/ambulance-driverfield_name=Cache-Control, directive=no-store, conflicts=- `private` - `no-cache` - `must-revalidate` - `max-age`

directive_conflicts: long tail elided during shuffle; only the retained head is shown.

Directive → conflicts

Value	Note fires
no-store → - `no-cache` - `must-revalidate`	5,011,627
no-store → - `must-revalidate` - `no-cache`	4,053,809
no-store → - `no-cache`	2,900,068
no-cache → - `must-revalidate`	1,986,710
no-store → - `max-age` - `no-cache`	1,811,138
no-store → - `no-cache` - `max-age`	1,556,511
no-cache → - `max-age`	1,398,765
no-store → - `private`	981,213
no-store → - `no-cache` - `must-revalidate` - `max-age`	486,764
no-store → - `no-cache` - `max-age` - `must-revalidate`	460,957
no-store → - `max-age` - `no-cache` - `must-revalidate`	445,723
no-store → - `must-revalidate` - `no-cache` - `max-age`	391,113
no-store → - `max-age` - `must-revalidate` - `no-cache`	356,763
no-store → - `no-cache` - `max-age` - `must-revalidate` - `private`	332,868
no-store → - `must-revalidate` - `max-age` - `no-cache`	330,243
no-store → - `no-cache` - `private` - `max-age` - `must-revalidate`	294,887
no-store → - `max-age` - `private` - `must-revalidate` - `no-cache`	291,038
no-store → - `no-cache` - `must-revalidate` - `private` - `max-age`	286,813
no-store → - `no-cache` - `private` - `must-revalidate` - `max-age`	286,115
no-store → - `max-age`	284,071
no-store → - `must-revalidate` - `max-age` - `no-cache` - `private`	281,059
no-store → - `max-age` - `no-cache` - `must-revalidate` - `private`	279,047
no-store → - `no-cache` - `must-revalidate` - `max-age` - `private`	278,177
no-store → - `private` - `no-cache` - `must-revalidate` - `max-age`	275,189
no-cache → - `max-age` - `must-revalidate`	273,073
… 1975 more values not shown …

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	8,111,895	22.6%	26.5%
nginx	6,809,298	19.0%	25.7%
akamai	5,463,476	15.2%	42.7%
apache	4,208,586	11.7%	31.9%
nextjs	3,869,982	10.8%	46.7%
cloudfront	3,748,486	10.5%	22.2%
fastly	2,544,968	7.1%	25.7%
envoy	1,941,960	5.4%	40.4%
vercel	699,137	1.9%	36.9%
azure-front-door	379,102	1.1%	26.5%
… 1 more layers not shown …

WARNSTORE_PUBLIC_UNNECESSARY~10,700 sites (21.7%)21,911,361

Cache-Control: public is probably not necessary.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	7,049,760	32.2%	23.0%
nginx	4,459,480	20.4%	16.8%
cloudfront	4,194,016	19.1%	24.9%
fastly	3,497,573	16.0%	35.3%
nextjs	2,361,513	10.8%	28.5%
akamai	1,454,697	6.6%	11.4%
apache	1,130,853	5.2%	8.6%
vercel	1,111,915	5.1%	58.6%
envoy	1,079,149	4.9%	22.4%
azure-front-door	413,502	1.9%	29.0%
… 1 more layers not shown …

WARNFRESHNESS_NO_CACHE_NO_VALIDATOR~5,720 sites (11.6%)8,737,826

This response cannot be served from cache without validation, and doesn't have a validator.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	2,128,387	24.4%	8.0%
cloudflare	1,719,048	19.7%	5.6%
apache	1,175,090	13.4%	8.9%
cloudfront	833,150	9.5%	4.9%
akamai	801,911	9.2%	6.3%
fastly	419,820	4.8%	4.2%
envoy	291,406	3.3%	6.1%
nextjs	62,268	0.7%	0.8%
azure-front-door	53,700	0.6%	3.8%
nuxt	50,012	0.6%	4.9%
… 1 more layers not shown …

WARNVARY_DUPLICATE~3,554 sites (7.2%)5,833,157

The Vary header contains duplicate values.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	2,083,312	35.7%	7.9%
cloudflare	1,852,616	31.8%	6.0%
fastly	1,759,158	30.2%	17.7%
cloudfront	519,143	8.9%	3.1%
nextjs	214,021	3.7%	2.6%
nuxt	169,867	2.9%	16.6%
akamai	116,856	2.0%	0.9%
envoy	95,994	1.6%	2.0%
apache	32,637	0.6%	0.2%
azure-front-door	24,193	0.4%	1.7%
… 1 more layers not shown …

WARNVARY_COMPLEX~2,929 sites (5.9%)6,155,546

This resource varies in %(vary_count)s ways.

Samples (5)

https://giphy.com/clips/dance-party-frieza-dancing-FdkG6La1GoRmZLlNONfield_name=Vary, vary_count=8
https://github.com/LJWatsonfield_name=Vary, vary_count=8
https://mastodon.social/@bxawfield_name=Vary, vary_count=5
https://unsplash.com/s/photos/sleepingbag?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyTextfield_name=Vary, vary_count=7
https://www.audible.com/search?searchNarrator=%E5%88%9D%E6%9D%91-%E5%81%A5%E7%9F%A2field_name=Vary, vary_count=4

vary_count

Value	Note fires
5	2,641,393
4	2,358,021
6	696,521
8	241,620
7	93,029
9	64,101
10	22,184
23	12,379
46	9,821
11	5,175
18	3,493
47	2,452
14	1,815
13	1,765
45	1,043
12	662
19	68
20	2
24	2

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nextjs	2,518,373	40.9%	30.4%
cloudflare	1,590,213	25.8%	5.2%
fastly	1,518,621	24.7%	15.3%
vercel	870,309	14.1%	45.9%
nginx	733,418	11.9%	2.8%
cloudfront	593,802	9.6%	3.5%
envoy	284,354	4.6%	5.9%
apache	202,423	3.3%	1.5%
akamai	176,255	2.9%	1.4%
azure-front-door	82,499	1.3%	5.8%
… 1 more layers not shown …

WARNVARY_USER_AGENT~2,878 sites (5.8%)7,573,150

Vary: User-Agent can cause cache inefficiency.

Samples (5)

https://kidshealth.org/NortonChildrens/en/kids/rsmovie.htmlfield_name=Vary
https://kriesi.at/support/profile/mohammadkhataan/replies/field_name=Vary
https://mixi.jp/word/k/%E9%9F%93%E3%81%AE%E6%B3%95%E5%89%87field_name=Vary
https://suumo.jp/tochi/niigata/sc_niigatashichuo/oz_15103321/field_name=Vary
https://www.abebooks.com/9781032607597/Managing-Gaming-Social-Media-Habits-1032607599/plpfield_name=Vary

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
apache	1,962,735	25.9%	14.9%
cloudflare	1,686,739	22.3%	5.5%
nginx	1,155,899	15.3%	4.4%
cloudfront	987,173	13.0%	5.9%
akamai	537,280	7.1%	4.2%
fastly	335,737	4.4%	3.4%
envoy	303,407	4.0%	6.3%
nextjs	165,793	2.2%	2.0%
azure-front-door	25,829	0.3%	1.8%
nuxt	8,241	0.1%	0.8%
… 1 more layers not shown …

WARNCHECK_ALL_ZERO~2,015 sites (4.1%)2,520,826

The pre-check and post-check cache directives are both '0'.

Samples (5)

https://mixnews.lv/culture/2026/02/07/spice-girls-vossoedinilis-v-dome-viktorii-bekhem-i-speli-horom-legendarnuyu-viva-forever/field_name=Cache-Control
https://p-bandai.jp/item/item-1000246613/field_name=Cache-Control
https://www.islamweb.net/ar/library/index.php?page=listing&bk_no=-1&ID=26039&order=?pageno=136?pageno=7?pageno=7&pageno=153field_name=Cache-Control
http://www.mediafire.com/file/wuzmntydk1q/J%27viens+de+m%27reveiller.mp3field_name=Cache-Control
https://www.cinemagia.ro/actori/steve-o-52882/field_name=Cache-Control

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	816,222	32.4%	3.1%
apache	672,277	26.7%	5.1%
cloudflare	508,538	20.2%	1.7%
fastly	125,816	5.0%	1.3%
cloudfront	114,318	4.5%	0.7%
akamai	102,313	4.1%	0.8%
envoy	58,423	2.3%	1.2%
azure-front-door	255	0.0%	0.0%
nuxt	34	0.0%	0.0%

WARNCC_DUP~1,381 sites (2.8%)2,119,181

The %(directive)s cache directive appears more than once.

Samples (5)

https://www.privateinternetaccess.com/reseller-program?locale=enfield_name=Cache-Control, directive=max-age
https://www.ss.com/msg/en/entertainment/tourism/foreign-tours/docex.htmlfield_name=Cache-Control, directive=no-cache
https://rapidgator.net/file/faaea5015f83fe0d88415f865eab682ffield_name=Cache-Control, directive=no-cache
https://www.aa.com.tr/ar/info/%D8%A5%D9%86%D9%81%D9%88%D8%AC%D8%B1%D8%A7%D9%81%D9%8A%D9%83/31216field_name=Cache-Control, directive=no-cache
https://www.hornbach.de/projekte/?WT.z_navi=ddfield_name=Cache-Control, directive=no-store

directive

Value	Note fires
no-cache	720,208
must-revalidate	421,142
no-store	349,750
max-age	325,606
private	183,291
public	87,316
s-maxage	21,972
stale-while-revalidate	4,522
pre-check	1,813
post-check	1,813
no-transform	1,654
stale-if-error	47
proxy-revalidate	37
immutable	10

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	672,205	31.7%	2.5%
cloudflare	435,734	20.6%	1.4%
apache	314,843	14.9%	2.4%
cloudfront	229,090	10.8%	1.4%
envoy	103,819	4.9%	2.2%
nextjs	99,418	4.7%	1.2%
akamai	94,312	4.5%	0.7%
fastly	46,564	2.2%	0.5%
azure-front-door	3,373	0.2%	0.2%
vercel	1,798	0.1%	0.1%

WARNVARY_ASTERISK~310 sites (0.6%)430,052

Vary: * effectively makes this response uncacheable.

Samples (5)

https://biletinial.com/tr-tr/mekan/mersin-yenisehir-ataturk-kultur-merkezifield_name=Vary
https://ioh.co.id/portal/en/ioh-qos-detail/psvoltefield_name=Vary
https://www.4shared.com/u/DEOxoMWp/fb107532743801151.htmlfield_name=Vary
https://www.infojobs.com.br/empresa-construtora-maui__-10873483.aspxfield_name=Vary
https://www.scirp.org/journal/paperinformation?paperid=77493field_name=Vary

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	135,440	31.5%	0.4%
akamai	51,003	11.9%	0.4%
azure-front-door	16,921	3.9%	1.2%
nginx	4,722	1.1%	0.0%
cloudfront	1,352	0.3%	0.0%
fastly	1,330	0.3%	0.0%
nextjs	16	0.0%	0.0%
apache	5	0.0%	0.0%
envoy	5	0.0%	0.0%

WARNVARY_HOST~101 sites (0.2%)270,019

Vary: Host is not necessary.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
apache	100,992	37.4%	0.8%
fastly	55,112	20.4%	0.6%
cloudflare	49,451	18.3%	0.2%
nginx	38,705	14.3%	0.1%
cloudfront	27,729	10.3%	0.2%
akamai	16,245	6.0%	0.1%
envoy	12,963	4.8%	0.3%
nextjs	11,053	4.1%	0.1%
azure-front-door	2,504	0.9%	0.2%

WARNCC_MISCAP~80 sites (0.2%)94,152

The %(directive)s cache directive has non-lowercase characters.

Samples (5)

https://rentry.co/2zopnfield_name=Cache-Control, directive_lower=vary, directive=Vary
https://baomoi.com/tag/r%E1%BA%A3nh-ch%C3%A2n.epifield_name=Cache-Control, directive_lower=private, directive=Private
https://www.smashingmagazine.com/2017/05/robots-game-ios-fuzzy-logic/field_name=Cache-Control, directive_lower=no-cache, directive=No-Cache
https://www.angelone.in/signup/register?rne_source=B2B_NXT&btype=SVRQ&referrer=KCYB&utm_source=Hyperlocal&utm_medium=Web&utm_campaign=Hyperlocal_B2B_organicfield_name=Cache-Control, directive_lower=no-store, directive=No-Store
https://www.juntadeandalucia.es/presidencia/portavoz/infraestructuras/206005/ConsejeriadeFomento/metrodeGranada/transportepublico/carrilbici/Alhendin/Armillafield_name=Cache-Control, directive_lower=public, directive=PUBLIC

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
apache	20,877	22.2%	0.2%
nextjs	18,924	20.1%	0.2%
cloudflare	18,215	19.3%	0.1%
cloudfront	13,079	13.9%	0.1%
nginx	2,178	2.3%	0.0%
vercel	165	0.2%	0.0%
fastly	165	0.2%	0.0%
azure-front-door	60	0.1%	0.0%
envoy	39	0.0%	0.0%
akamai	35	0.0%	0.0%
… 1 more layers not shown …

WARNCC_WRONG_MESSAGE~39 sites (0.1%)93,605

The %(directive)s cache directive has no meaning in a %(message_type)s.

Samples (5)

https://www.breitbart.com/tech/2020/03/09/report-twitter-strikes-deal-with-activist-investors-to-keep-jack-dorsey-as-ceo/field_name=Cache-Control, directive=max-stale, other_message=request
https://www.walgreens.com/storelocator/lab-services/red-bluff-cafield_name=Cache-Control, directive=max-stale, other_message=request
https://unstoppabledomains.com/d/rosaselvagembrasil.comfield_name=Cache-Control, directive=max-stale, other_message=request
https://www.sicredi.com.br/teste-todos-os-plugins/video-texto-0042/field_name=Cache-Control, directive=max-stale, other_message=request
https://www.kaltura.com/index.php/kwidget/cache_st/1323221399/wid/_594231/uiconf_id/5394821/entry_id/1_wjnunsxefield_name=Cache-Control, directive=max-stale, other_message=request

other_message

Value	Note fires
request	93,605

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
fastly	44,926	48.0%	0.5%
akamai	13,195	14.1%	0.1%
cloudfront	13,169	14.1%	0.1%
envoy	13,166	14.1%	0.3%
apache	2,071	2.2%	0.0%
nginx	1,455	1.6%	0.0%
azure-front-door	1,260	1.3%	0.1%
cloudflare	846	0.9%	0.0%
nuxt	34	0.0%	0.0%

WARNCHECK_SINGLE~18 sites (0.0%)6,058

Only one of the pre-check and post-check cache directives is present.

Samples (1)

https://www.hm.com/entrance.ahtml?orguri=%2Ffield_name=Cache-Control

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	2,836	46.8%	0.0%
apache	1,397	23.1%	0.0%
akamai	76	1.3%	0.0%
nginx	27	0.4%	0.0%

WARNCC_MAX_AGE_TOO_LARGE~5 sites (0.0%)57

The %(directive)s cache directive is very large.

Samples (1)

https://tinder.com/?ref=www.invitation.appfield_name=Cache-Control, directive=max-age

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	38	66.7%	0.0%
nginx	17	29.8%	0.0%
cloudfront	17	29.8%	0.0%
fastly	1	1.8%	0.0%
apache	1	1.8%	0.0%

WARNCACHE_STATUS_BAD_PARAM_VAL~2 sites (0.0%)1,083

The Cache-Status header has an unknown value for '%(param)s'.

Samples (1)

https://www.zdf.de/rss/podcast/audio/zdf/gesellschaft/prechtfield_name=Cache-Status, param=ttl, value=41.435

WARNCHECK_POST_BIGGER~1 sites (0.0%)65

The post-check cache directive's value is larger than pre-check's.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	65	100.0%	0.0%

INFOSTORE_STORABLE~38,573 sites (78.2%)73,791,789

This response allows all caches to store it.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	18,898,678	25.6%	61.7%
nginx	16,661,103	22.6%	62.9%
cloudfront	12,011,594	16.3%	71.2%
apache	8,296,785	11.2%	62.8%
fastly	7,237,936	9.8%	73.0%
akamai	6,195,166	8.4%	48.4%
nextjs	4,224,689	5.7%	51.0%
envoy	2,750,738	3.7%	57.2%
vercel	1,173,195	1.6%	61.9%
nuxt	925,591	1.3%	90.3%
… 1 more layers not shown …

INFOCURRENT_AGE~34,393 sites (69.7%)17,918,892

This response has already been cached for %(age)s.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	3,898,230	21.8%	14.7%
cloudfront	3,279,637	18.3%	19.4%
cloudflare	2,929,673	16.3%	9.6%
apache	2,718,700	15.2%	20.6%
fastly	1,700,486	9.5%	17.1%
nextjs	1,120,109	6.3%	13.5%
vercel	684,600	3.8%	36.1%
envoy	473,161	2.6%	9.8%
akamai	302,795	1.7%	2.4%
nuxt	182,247	1.0%	17.8%
… 1 more layers not shown …

INFOSTALE_SERVABLE~33,734 sites (68.4%)57,744,207

In exceptional circumstances, caches can serve this response stale.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	13,703,652	23.7%	44.7%
nginx	13,130,599	22.7%	49.6%
cloudfront	7,444,776	12.9%	44.1%
apache	7,034,622	12.2%	53.3%
akamai	5,337,942	9.2%	41.7%
fastly	5,291,111	9.2%	53.3%
envoy	1,983,493	3.4%	41.2%
nextjs	1,235,429	2.1%	14.9%
azure-front-door	729,732	1.3%	51.1%
nuxt	613,780	1.1%	59.9%
… 1 more layers not shown …

INFOSTORE_NO_STORE~17,109 sites (34.7%)32,320,663

This response can't be stored by caches.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	7,723,491	23.9%	25.2%
nginx	6,352,104	19.7%	24.0%
akamai	4,870,783	15.1%	38.1%
nextjs	3,776,167	11.7%	45.6%
apache	3,678,922	11.4%	27.9%
cloudfront	3,421,490	10.6%	20.3%
fastly	2,120,891	6.6%	21.4%
envoy	1,816,449	5.6%	37.7%
vercel	695,812	2.2%	36.7%
azure-front-door	367,132	1.1%	25.7%
… 1 more layers not shown …

INFOCC_AND_EXPIRES~9,052 sites (18.3%)17,043,554

Cache-Control: max-age and Expires are both present.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	4,517,793	26.5%	14.7%
nginx	3,700,970	21.7%	14.0%
akamai	3,561,386	20.9%	27.8%
apache	2,127,850	12.5%	16.1%
fastly	1,784,452	10.5%	18.0%
cloudfront	1,358,175	8.0%	8.0%
nextjs	448,353	2.6%	5.4%
envoy	394,250	2.3%	8.2%
azure-front-door	184,255	1.1%	12.9%
vercel	39,793	0.2%	2.1%
… 1 more layers not shown …

INFOSTORE_PRIVATE_CC~8,893 sites (18.0%)16,331,982

This response allows only private caches to store it.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	3,885,690	23.8%	12.7%
nginx	3,439,355	21.1%	13.0%
akamai	1,673,498	10.2%	13.1%
cloudfront	1,415,682	8.7%	8.4%
apache	1,227,970	7.5%	9.3%
fastly	558,089	3.4%	5.6%
nextjs	282,029	1.7%	3.4%
envoy	244,807	1.5%	5.1%
azure-front-door	146,915	0.9%	10.3%
vercel	27,206	0.2%	1.4%
… 1 more layers not shown …

INFOFRESHNESS_STALE_ALREADY~8,297 sites (16.8%)11,115,586

This response is stale.

Samples (5)

https://almalinux.org/fa/blog/almalinux-for-azure-hpc-now-available/freshness_lifetime=0 seconds, freshness_left=0 seconds, current_age=0 seconds
https://github.com/airbrake/airbrakefreshness_lifetime=0 seconds, freshness_left=0 seconds, current_age=0 seconds
https://gitlab.com/explore/projects/topics/docfx?language=11&sort=created_descfreshness_lifetime=0 seconds, freshness_left=0 seconds, current_age=0 seconds
https://lenta.ru/news/2008/04/15/ambassy/freshness_lifetime=0 seconds, freshness_left=0 seconds, current_age=0 seconds
https://ria.ru/20130510/661309210.htmlfreshness_lifetime=44 years, freshness_left=44 years, current_age=0 seconds

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	2,896,133	26.1%	9.5%
nginx	2,340,439	21.1%	8.8%
cloudfront	1,301,995	11.7%	7.7%
fastly	1,098,713	9.9%	11.1%
apache	1,040,288	9.4%	7.9%
vercel	934,078	8.4%	49.3%
nextjs	877,040	7.9%	10.6%
envoy	486,361	4.4%	10.1%
akamai	483,103	4.3%	3.8%
azure-front-door	69,638	0.6%	4.9%
… 1 more layers not shown …

INFOSTALE_MUST_REVALIDATE~4,557 sites (9.2%)6,225,507

This response cannot be served by a cache now that it is stale.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	1,774,345	28.5%	5.8%
nginx	1,445,977	23.2%	5.5%
vercel	888,991	14.3%	46.9%
cloudfront	861,020	13.8%	5.1%
nextjs	731,680	11.8%	8.8%
apache	424,095	6.8%	3.2%
fastly	255,731	4.1%	2.6%
akamai	143,762	2.3%	1.1%
envoy	92,810	1.5%	1.9%
nuxt	54,532	0.9%	5.3%
… 1 more layers not shown …

INFOFRESH_PROXY_REVALIDATE~3,331 sites (6.8%)6,014,659

This response cannot be served by a shared cache once it becomes stale.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	2,143,879	35.6%	7.0%
cloudfront	1,659,333	27.6%	9.8%
nextjs	1,609,744	26.8%	19.4%
nginx	722,854	12.0%	2.7%
akamai	488,801	8.1%	3.8%
fastly	464,375	7.7%	4.7%
apache	324,420	5.4%	2.5%
envoy	242,254	4.0%	5.0%
azure-front-door	183,200	3.0%	12.8%
nuxt	72,391	1.2%	7.1%
… 1 more layers not shown …

INFOFRESH_MUST_REVALIDATE~3,010 sites (6.1%)4,426,585

This response cannot be served by a cache once it becomes stale.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	1,803,423	40.7%	5.9%
nginx	1,473,982	33.3%	5.6%
akamai	660,366	14.9%	5.2%
nextjs	354,379	8.0%	4.3%
cloudfront	303,905	6.9%	1.8%
fastly	237,731	5.4%	2.4%
apache	156,676	3.5%	1.2%
nuxt	99,670	2.3%	9.7%
envoy	47,607	1.1%	1.0%
vercel	36,820	0.8%	1.9%
… 1 more layers not shown …

INFOFRESHNESS_NO_CACHE~1,989 sites (4.0%)2,461,482

This response cannot be served from cache without validation.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	428,376	17.4%	1.6%
cloudflare	391,783	15.9%	1.3%
cloudfront	382,610	15.5%	2.3%
fastly	327,168	13.3%	3.3%
akamai	325,797	13.2%	2.5%
apache	181,453	7.4%	1.4%
nextjs	90,940	3.7%	1.1%
envoy	86,418	3.5%	1.8%
vercel	1,840	0.1%	0.1%
nuxt	1,797	0.1%	0.2%
… 1 more layers not shown …

INFOSTALE_WHILE_REVALIDATE~1,943 sites (3.9%)6,269,158

This response can be served stale from a cache while it is being revalidated.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudfront	2,614,601	41.7%	15.5%
cloudflare	1,722,764	27.5%	5.6%
nextjs	1,298,883	20.7%	15.7%
nginx	1,007,627	16.1%	3.8%
fastly	960,574	15.3%	9.7%
envoy	358,991	5.7%	7.5%
apache	226,487	3.6%	1.7%
akamai	172,980	2.8%	1.4%
azure-front-door	118,534	1.9%	8.3%
nuxt	104,858	1.7%	10.2%
… 1 more layers not shown …

INFOSTALE_IF_ERROR~1,069 sites (2.2%)3,959,757

If an error occurs, caches can serve this response stale.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudfront	1,834,243	46.3%	10.9%
cloudflare	1,094,435	27.6%	3.6%
fastly	778,772	19.7%	7.9%
nginx	643,441	16.2%	2.4%
nextjs	368,112	9.3%	4.4%
envoy	219,220	5.5%	4.6%
apache	207,890	5.3%	1.6%
akamai	58,376	1.5%	0.5%
nuxt	35,152	0.9%	3.4%
azure-front-door	25,039	0.6%	1.8%
… 1 more layers not shown …

INFOSTALE_PROXY_REVALIDATE~665 sites (1.3%)387,807

This response cannot be served by a shared cache now that it is stale.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudfront	105,899	27.3%	0.6%
cloudflare	89,830	23.2%	0.3%
nginx	67,582	17.4%	0.3%
akamai	51,025	13.2%	0.4%
nextjs	50,363	13.0%	0.6%
envoy	31,399	8.1%	0.7%
fastly	20,911	5.4%	0.2%
vercel	19,066	4.9%	1.0%
apache	12,967	3.3%	0.1%
nuxt	2,870	0.7%	0.3%
… 1 more layers not shown …

INFOCACHE_STATUS~456 sites (0.9%)649,683

Detailed information about caching is available.

Samples (5)

https://launchdarkly.com/blog/author/john-cook-heap/field_name=Cache-Status, status=**Netlify Edge**: * The cache did not contain a response.
https://www.eufy.com/nl/collections/wired-camerafield_name=Cache-Status, status=**Netlify Durable**: * The response was served from the cache. * The response's remaining time-to-live was 148 seconds. **Next.js**: * The cache did not contain a response. **Netlify Edge**: * The cache did not contain a response.
https://www.walmart.com/blocked?url=L2lwL0dyZWF0LVZhbHVlLUNhbm5lZC1EaWNlZC1Qb3RhdG9lcy1HbHV0ZW4tRnJlZS0xNS1vei1DYW4vMTA0NTE0OTk=&uuid=b713ec9c-215d-11f1-af66-c9914dd884e3&vid=&g=bfield_name=Cache-Status, status=**Hit**:
https://www.anker.com/products/a8633?variant=40405244543126&collections_for-iphone-lightning&Sort_by=Recommendedfield_name=Cache-Status, status=**Netlify Durable**: * The response was served from the cache. * The response's remaining time-to-live was -205 seconds. **Next.js**: * The cache did not contain a response. **Netlify Edge**: * The cache did not contain a response.
https://www.klaviyo.com/customers/case-studies/svenfishfield_name=Cache-Status, status=**Netlify Edge**: * The cache did not contain a response.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nextjs	234,090	36.0%	2.8%
akamai	91,266	14.0%	0.7%
cloudfront	72,340	11.1%	0.4%
cloudflare	72,258	11.1%	0.2%
nginx	35,986	5.5%	0.1%
nuxt	22,941	3.5%	2.2%
fastly	16,208	2.5%	0.2%
envoy	13,751	2.1%	0.3%
apache	4,213	0.6%	0.0%
vercel	577	0.1%	0.0%
… 1 more layers not shown …

INFOCDN_CACHE_CONTROL_PRESENT~202 sites (0.4%)356,633

This response targets cache directives to Content Delivery Networks.

Samples (5)

https://www.ifixit.com/products/delonghi-remote-control-5515110111field_name=CDN-Cache-Control
https://syndigo.com/legal/terms-of-use/field_name=CDN-Cache-Control
https://www.dlsite.com/soft/work/=/product_id/VJ01002044.htmlfield_name=CDN-Cache-Control
https://www.news-medical.net/news/20240712/Over-the-counter-nasal-sprays-cut-respiratory-infections-by-2025-study-finds.aspxfield_name=CDN-Cache-Control
https://bustimes.org/stops/2500RAWT01field_name=CDN-Cache-Control

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	269,449	75.6%	0.9%
nextjs	86,032	24.1%	1.0%
vercel	81,500	22.9%	4.3%
nuxt	28,211	7.9%	2.8%
cloudfront	16,899	4.7%	0.1%
nginx	13,693	3.8%	0.1%
envoy	13,012	3.6%	0.3%
fastly	6,891	1.9%	0.1%
azure-front-door	5,456	1.5%	0.4%
akamai	4,929	1.4%	0.0%
… 1 more layers not shown …

INFOCHECK_POST_PRE~26 sites (0.1%)3,580

This response may be refreshed in the background by Internet Explorer.

Samples (1)

https://www.ilpost.it/altrecose/per-parlare-di-israele/field_name=Cache-Control, pre_check=300, post_check=37

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
apache	1,011	28.2%	0.0%
cloudflare	574	16.0%	0.0%
akamai	106	3.0%	0.0%
nginx	38	1.1%	0.0%
nextjs	1	0.0%	0.0%
cloudfront	1	0.0%	0.0%

INFOPROXY_STATUS~3 sites (0.0%)6,391

Information about intermediaries is available.

Samples (1)

https://www.douyin.com/qishui/song/7438820326798821392field_name=Proxy-Status, status=**201502005108**:

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	5,752	90.0%	0.0%

GOODFRESHNESS_FRESH~14,980 sites (30.4%)29,224,248

This response is fresh for %(freshness_left)s.

Samples (5)

https://as.com/meristation/2002/07/17/noticias/1026885600_051220.htmlfreshness_lifetime=60 seconds, freshness_left=60 seconds, current_age=0 seconds
https://cadenaser.com/tag/elecciones_real_madrid/a/audios/freshness_lifetime=60 seconds, freshness_left=60 seconds, current_age=0 seconds
https://elpais.com/diario/2007/06/18/paisvasco/1182195607_850215.htmlfreshness_lifetime=60 seconds, freshness_left=59 seconds, current_age=1 second
https://indianexpress.com/article/explained/explained-what-is-the-new-organ-scientists-have-discovered-in-the-throat-6836306/freshness_lifetime=5 minutes, freshness_left=5 minutes, current_age=0 seconds
https://ipinfo.io/ips/206.134.148.0/24freshness_lifetime=60 minutes, freshness_left=60 minutes, current_age=0 seconds

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	7,791,022	26.7%	25.4%
nginx	6,671,034	22.8%	25.2%
cloudfront	5,048,428	17.3%	29.9%
akamai	4,398,666	15.1%	34.4%
fastly	3,942,780	13.5%	39.8%
apache	2,163,711	7.4%	16.4%
nextjs	1,572,259	5.4%	19.0%
envoy	1,041,181	3.6%	21.6%
azure-front-door	460,604	1.6%	32.3%
nuxt	226,553	0.8%	22.1%
… 1 more layers not shown …

GOODFRESHNESS_SHARED_PRIVATE~3,951 sites (8.0%)7,206,965

This response is %(private_status)s for %(fresh_left)s (%(shared_status)s for %(share_left)s in shared caches).

Samples (5)

https://kurier.at/kultur/otto-schenk-heinz-marecek-nachruf-anekdoten/402997553fresh_lifetime=30 seconds, fresh_left=23 hours, share_lifetime=12 months, share_left=12 months, private_status=stale, shared_status=fresh
https://www.archives.gov/research/jfk/release-2023?page=10&sort=asc&order=NARA%20Release%20Datefresh_lifetime=60 seconds, fresh_left=60 seconds, share_lifetime=24 hours, share_left=24 hours, private_status=fresh, shared_status=fresh
https://www.datacamp.com/tutorial/nlp-project-ideas-for-all-levelsfresh_lifetime=0 seconds, fresh_left=3 days, share_lifetime=7 days, share_left=4 days, private_status=stale, shared_status=fresh
https://www.digitaljournal.com/world/in-gaza-displaced-women-recount-lives-upended-by-war/articlefresh_lifetime=0 seconds, fresh_left=0 seconds, share_lifetime=4 weeks, share_left=4 weeks, private_status=stale, shared_status=fresh
https://www.elconfidencial.com/espana/madrid/2023-10-13/kitchen-154-restaurante-comida-callejera-sudeste-asiatico-madrid_3753371/fresh_lifetime=60 seconds, fresh_left=2 weeks, share_lifetime=4 weeks, share_left=2 weeks, private_status=stale, shared_status=fresh

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	2,576,210	35.7%	8.4%
cloudfront	2,275,342	31.6%	13.5%
nextjs	1,600,416	22.2%	19.3%
nginx	1,087,975	15.1%	4.1%
fastly	679,458	9.4%	6.9%
akamai	463,367	6.4%	3.6%
envoy	336,923	4.7%	7.0%
apache	311,059	4.3%	2.4%
nuxt	178,504	2.5%	17.4%
azure-front-door	175,481	2.4%	12.3%
… 1 more layers not shown …

Browser security 462,830,307 occurrences across 57 note types (32.2% of occurrences)

BADHSTS_PRELOAD_NOT_SUITABLE~973 sites (2.0%)3,062,354

Browser preloading is allowed, but this policy isn't suitable for it.

Samples (5)

https://audiomack.com/rygel-1field_name=Strict-Transport-Security
https://pantip.com/login?redirect=aHR0cHM6Ly9wYW50aXAuY29tL3RvcGljLzM4ODc1ODY5field_name=Strict-Transport-Security
https://www.acehardware.com/brands/masterbuiltfield_name=Strict-Transport-Security
https://www.att.com/local/cell-phones/massachusetts/medfordfield_name=Strict-Transport-Security
https://www.dlsite.com/maniax/dlaf/=/t/i/link/work/aid/doujin_english/id/RJ325324.htmlfield_name=Strict-Transport-Security

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	1,082,266	35.3%	3.5%
akamai	790,256	25.8%	6.2%
nginx	734,441	24.0%	2.8%
cloudfront	264,924	8.7%	1.6%
fastly	264,137	8.6%	2.7%
apache	263,873	8.6%	2.0%
nextjs	190,385	6.2%	2.3%
envoy	58,627	1.9%	1.2%
nuxt	43,720	1.4%	4.3%
azure-front-door	14,883	0.5%	1.0%
… 1 more layers not shown …

BADHSTS_INVALID~726 sites (1.5%)430,377

This response's Strict Transport Security (HSTS) header is invalid.

Samples (5)

https://www.cnbcindonesia.com/tech/20210611131356-37-252381/ini-skema-insentif-gosend-sameday-yang-bikin-driver-ngamukfield_name=Strict-Transport-Security
http://www.prnewswire.com/news-releases/sumeru-equity-partners-acquires-mdsl-637543693.htmlfield_name=Strict-Transport-Security
http://www.sch.gr/sites/sch-units/index?page=9&SchUnitsSearch%5Bunit_type%5D=%CE%93%CE%95%CE%9D%CE%99%CE%9A%CE%9F+%CE%91%CE%A1%CE%A7%CE%95%CE%99%CE%9F+%CE%9A%CE%A1%CE%91%CE%A4%CE%9F%CE%A5%CE%A3&SchUnitsSearch%5Bprefecture%5D=%CE%9A%CE%95%CE%A1%CE%9A%CE%A5%CE%A1%CE%91%CE%A3field_name=Strict-Transport-Security
https://ahrefs.com/blog/pt/marketing-ciclo-de-vida/field_name=Strict-Transport-Security
http://www.afrinic.net/ar/20211019-mastering-ipv6-transition-mechanisms-ecoursefield_name=Strict-Transport-Security

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	86,771	20.2%	0.3%
apache	76,838	17.9%	0.6%
nginx	76,239	17.7%	0.3%
fastly	68,305	15.9%	0.7%
akamai	45,832	10.6%	0.4%
cloudfront	39,194	9.1%	0.2%
nextjs	7,092	1.6%	0.1%
azure-front-door	3,527	0.8%	0.2%
envoy	648	0.2%	0.0%
nuxt	230	0.1%	0.0%
… 1 more layers not shown …

BADHSTS_NO_MAX_AGE~72 sites (0.1%)150,960

There is no max-age directive.

Samples (5)

https://www.cnnindonesia.com/gaya-hidup/20150824083021-255-73995/depresi-tingkatkan-risiko-jantung-pasien-rheumatoid-arthritisfield_name=Strict-Transport-Security
https://www.churchofjesuschrist.org/media/video/8e1ae543826b11ef8bff02d0ea859845630b5e23?lang=eng&alang=engfield_name=Strict-Transport-Security
https://www.cnbcindonesia.com/lifestyle/20251114101733-33-685180/menkes-bgs-soroti-masalah-kesehatan-lansia-aktivitas-fisiknya-kurangfield_name=Strict-Transport-Security
https://www.parallels.com/blogs/author/giorgio-bonuccellifield_name=Strict-Transport-Security
https://ich-tanke.de/tankstellen/super-e5/region/landkreis-biberach/field_name=Strict-Transport-Security

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
akamai	40,580	26.9%	0.3%
apache	37,270	24.7%	0.3%
cloudflare	36,731	24.3%	0.1%
fastly	26,068	17.3%	0.3%
cloudfront	15,449	10.2%	0.1%
nginx	7,586	5.0%	0.0%
nextjs	113	0.1%	0.0%
envoy	24	0.0%	0.0%
nuxt	6	0.0%	0.0%

BADHSTS_BAD_MAX_AGE~41 sites (0.1%)85,977

The max-age directive in the HSTS header is invalid.

Samples (5)

https://www.proofpoint.com/us/resources/awareness-materials/tax-scam-awareness-kitfield_name=Strict-Transport-Security, max_age=31536000, includeSubDomains, preload
https://www.papercut.com/blog/print_tips/tech_and_dev/boost-powershell-performance-with-the-public-web-services-api/field_name=Strict-Transport-Security, max_age=expireTime
https://www.westerndigital.com/fr-ca/searchfield_name=Strict-Transport-Security, max_age="31536000"
https://wpengine.com/field_name=Strict-Transport-Security, max_age=31536000, max-age=31536000
https://www.itu.int/women-and-girls/girls-in-ict/es/dia-internacional-de-las-ninas-en-las-tic-de-2023/dia-internacional-de-las-ninas-en-las-tic-de-2023-calendario-de-los-principales-eventos-de-la-uit/field_name=Strict-Transport-Security, max_age=

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
fastly	24,182	28.1%	0.2%
cloudflare	20,647	24.0%	0.1%
nginx	12,545	14.6%	0.0%
cloudfront	6,750	7.9%	0.0%
apache	1,420	1.7%	0.0%
nextjs	620	0.7%	0.0%
akamai	161	0.2%	0.0%
azure-front-door	92	0.1%	0.0%
envoy	56	0.1%	0.0%

BADCROSS_ORIGIN_OPENER_POLICY_BAD_VALUE~21 sites (0.0%)40,515

This response's %(field_name)s has an invalid value.

Samples (1)

https://www.veed.io/strumenti/lettore-video/visualizzatore-di-video-onlinefield_name=Cross-Origin-Opener-Policy, value=same-site, report_only=

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	16,436	40.6%	0.1%
nginx	4,029	9.9%	0.0%
azure-front-door	463	1.1%	0.0%
envoy	172	0.4%	0.0%
nuxt	133	0.3%	0.0%
akamai	39	0.1%	0.0%
apache	18	0.0%	0.0%
cloudfront	2	0.0%	0.0%

BADCROSS_ORIGIN_EMBEDDER_POLICY_BAD_VALUE~21 sites (0.0%)30,697

This response's %(field_name)s has an invalid value.

Samples (1)

https://www.britishairways.com/travel/home/public/en_us/field_name=Cross-Origin-Embedder-Policy, value=same-origin, report_only=

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudfront	17,526	57.1%	0.1%
akamai	14,624	47.6%	0.1%
cloudflare	6,676	21.7%	0.0%
nextjs	5,025	16.4%	0.1%
apache	3,300	10.8%	0.0%
envoy	491	1.6%	0.0%

WARNHSTS_NO_SUBDOMAINS~12,236 sites (24.8%)28,963,605

HSTS doesn't apply to subdomains.

Samples (5)

https://anchor.fm/s/412d71d4/podcast/rssfield_name=Strict-Transport-Security
https://awin1.com/closedMerchant.html?b=965221&u=1796552&m=69907&urllink=honeybeestamps.com%2Fproducts%2Fshimmer-shine-enamel-stickers-135-count&afftrack=&originalPath=%2Fr.cfm&source=sas-clickfield_name=Strict-Transport-Security
https://diamond.jp/educate/room/d01203/field_name=Strict-Transport-Security
https://giphy.com/search/ar12field_name=Strict-Transport-Security
https://gitlab.com/explore/projects/topics/microg?language=19&sort=latest_activity_ascfield_name=Strict-Transport-Security

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	6,270,526	21.6%	20.5%
nginx	6,141,107	21.2%	23.2%
fastly	4,827,344	16.7%	48.7%
akamai	4,047,955	14.0%	31.6%
cloudfront	3,178,092	11.0%	18.8%
apache	2,435,368	8.4%	18.4%
nextjs	2,426,439	8.4%	29.3%
vercel	1,358,246	4.7%	71.6%
envoy	837,395	2.9%	17.4%
azure-front-door	252,398	0.9%	17.7%
… 1 more layers not shown …

WARNCSP_UNSAFE_INLINE~6,979 sites (14.1%)17,944,607

Inline scripts are allowed.

Samples (5)

https://audiomack.com/micothebest/playlist/kigalifield_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `script-src` * `style-src` * `connect-src`
https://faphouse.com/studios/mistresslandfield_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `script-src` * `style-src` * `font-src`
https://gitlab.com/Crowdedlight/busylight.rsfield_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `script-src` * `style-src`
https://metamask.io/converter/ladys/tokefield_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `style-src`
https://opensea.io/0xa33ba5acecd5f4a65a67a1a2ed3b790f34ff8139/createdfield_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `script-src` * `style-src`

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	3,939,135	22.0%	12.9%
nginx	2,815,163	15.7%	10.6%
cloudfront	2,772,451	15.5%	16.4%
akamai	2,163,965	12.1%	16.9%
fastly	1,754,145	9.8%	17.7%
nextjs	1,292,884	7.2%	15.6%
apache	1,263,848	7.0%	9.6%
envoy	881,409	4.9%	18.3%
vercel	402,856	2.2%	21.2%
azure-front-door	335,313	1.9%	23.5%
… 1 more layers not shown …

WARNCSP_UNSAFE_EVAL~6,237 sites (12.6%)14,952,570

Unsafe script evaluation is allowed.

Samples (5)

https://bitwarden.com/blog/enable-passkeys-with-bitwarden-passwordless-dev/field_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `script-src`
https://boe.es/buscar/doc.php?lang=es&id=BOE-A-1960-3890field_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `script-src`
https://globalnews.ca/video/11656713/lake-erie-nearly-frozen-over-as-cold-weather-alert-returns-to-southern-ontario/field_name=Content-Security-Policy-Report-Only, report_only= for reporting only, report_only_text= Browsers will only report violations of this policy, not enforce it., directives_list=* `script-src`
https://meshok.net/item/353253201_985_%D0%97%D0%95%D0%A0%D0%9A%D0%90%D0%9B%D0%AC%D0%9D%D0%AB%D0%99_%D0%97%D0%9D%D0%90%D0%A7%D0%9E%D0%9A_%D0%93%D0%9E%D0%A0%D0%9E%D0%94_%D0%93%D0%95%D0%A0%D0%9E%D0%99_%D0%A1%D0%A1%D0%A1%D0%A0_%D0%A1%D0%95%D0%92%D0%90%D0%A1%D0%A2%D0%9E%D0%9F%D0%9E%D0%9B%D0%AC?from_recommended=item_bot_name_actfield_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `script-src` * `script-src`
https://monday.com/blog/rnd/jira-alternatives/field_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `script-src`

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	3,339,309	22.3%	10.9%
nginx	2,393,322	16.0%	9.0%
cloudfront	2,192,561	14.7%	13.0%
akamai	2,009,851	13.4%	15.7%
fastly	1,524,858	10.2%	15.4%
apache	1,072,445	7.2%	8.1%
nextjs	1,006,324	6.7%	12.1%
envoy	752,628	5.0%	15.6%
vercel	304,313	2.0%	16.0%
azure-front-door	267,341	1.8%	18.7%
… 1 more layers not shown …

WARNCSP_DEPRECATED_REPORT_URI~2,567 sites (5.2%)7,330,903

The deprecated report-uri directive is used.

Samples (5)

http://archive.org/details/nta021field_name=Content-Security-Policy, report_only=, report_only_text=
http://www.google.nu/url?q=https://ahrefsdr.shop/l238field_name=Content-Security-Policy, report_only=, report_only_text=
https://miro.com/marketplace/voting-export/?previous_category=new-apps&utm_source=product-design-ebookfield_name=Content-Security-Policy, report_only=, report_only_text=
https://poshmark.com/listing/Vintage-Blue-and-White-Chinoiserie-Koi-Vase-Blue-Willow-Style-Hollywood-Regency-698e775e2981af5d3dd0d37afield_name=Content-Security-Policy, report_only=, report_only_text=
https://wise.com/gb/send-money/send-money-to-australia?utm_source=bank-codes-it&utm_medium=affiliate&utm_content=australia_bsb_number%2F332_184&utm_campaign=australia_bsb_numberfield_name=Content-Security-Policy, report_only=, report_only_text=

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	1,423,202	19.4%	4.6%
nginx	1,142,773	15.6%	4.3%
cloudfront	993,409	13.6%	5.9%
akamai	810,016	11.0%	6.3%
fastly	666,341	9.1%	6.7%
envoy	540,676	7.4%	11.2%
apache	439,487	6.0%	3.3%
nextjs	304,264	4.2%	3.7%
vercel	75,327	1.0%	4.0%
azure-front-door	49,495	0.7%	3.5%
… 1 more layers not shown …

WARNHSTS_SHORT_MAX_AGE~1,886 sites (3.8%)5,655,148

The max-age is less than one year.

Samples (5)

https://issuu.com/foodanddrinkmatters/docs/inu260?fr=xKAE9_zU1NQfield_name=Strict-Transport-Security
https://tenki.jp/kouyou/7/34/36655.htmlfield_name=Strict-Transport-Security
https://wordpress.org/plugins/viking-bookings/field_name=Strict-Transport-Security
https://www.angelone.in/knowledge-center/online-share-trading/error-in-sl-orders-if-limit-and-trigger-prices-beyond-allowed-range-telugufield_name=Strict-Transport-Security
https://www.asos.com/dk/the-frolic/the-frolic-lyserdt-pyjamasst-med-croptop-med-flsekant-og-shorts-med-blomstermnster-og-gingham-tern-i-rynket-satin-kun-hos-asos/grp/208574006field_name=Strict-Transport-Security

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
fastly	1,824,353	32.3%	18.4%
nginx	1,771,930	31.3%	6.7%
akamai	1,306,830	23.1%	10.2%
cloudflare	1,055,266	18.7%	3.4%
cloudfront	373,766	6.6%	2.2%
nextjs	353,955	6.3%	4.3%
apache	338,992	6.0%	2.6%
envoy	153,260	2.7%	3.2%
nuxt	42,198	0.7%	4.1%
vercel	38,064	0.7%	2.0%
… 1 more layers not shown …

WARNFRAME_OPTIONS_UNKNOWN~807 sites (1.6%)1,955,158

The X-Frame-Options header contains an unknown value.

Samples (5)

https://t.me/+keOouoyeT99hNjA9field_name=X-Frame-Options
https://www.hku.hk/press/press-invitations/2025/6/c_index.htmlfield_name=X-Frame-Options
https://www.iq.com/play/astral-sutra-season-2-episode-1-1zo488bnv6s?lang=en_usfield_name=X-Frame-Options
https://www.uber.com/ca/en/r/cities/car-rentals/sierra-vista-az-us/field_name=X-Frame-Options
https://coub.com/exar-coubfield_name=X-Frame-Options

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	822,519	42.1%	3.1%
akamai	467,595	23.9%	3.7%
cloudflare	391,651	20.0%	1.3%
fastly	296,574	15.2%	3.0%
cloudfront	236,779	12.1%	1.4%
envoy	121,141	6.2%	2.5%
apache	107,423	5.5%	0.8%
nextjs	93,991	4.8%	1.1%
vercel	33,215	1.7%	1.8%
azure-front-door	5,778	0.3%	0.4%
… 1 more layers not shown …

WARNCSP_HTTP_URI~773 sites (1.6%)2,620,252

Loading from insecure HTTP sources is allowed.

Samples (5)

https://bitbucket.org/AceAttorneyOnline/aao-game-creation-engine/pull-requests/76field_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `script-src`
https://tabor.ru/search/znakomstva-onlajn-dneprorudnoe-devushki-s-fotofield_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `default-src`
https://www.bain.com/de/ueber-uns/presse/pressemitteilungen/germany/2013/quo-vadis-sales-organization/field_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `script-src`
https://www.browserstack.com/blog/introducing-browserstack-test-failure-analysis-agent/field_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `script-src` * `worker-src` * `style-src` * `img-src` * `font-src` * `connect-src` * `object-src`
https://www.deccanherald.com/entertainment/pamela-anderson-on-the-naked-gun-i-feel-like-ive-just-started-my-career-now-3644072field_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `default-src` * `script-src` * `style-src` * `img-src` * `font-src` * `connect-src` * `media-src` * `object-src` * `child-src` * `form-action`

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	604,991	23.1%	2.0%
nginx	260,074	9.9%	1.0%
fastly	226,859	8.7%	2.3%
cloudfront	218,421	8.3%	1.3%
nextjs	139,065	5.3%	1.7%
apache	77,947	3.0%	0.6%
envoy	71,062	2.7%	1.5%
akamai	66,987	2.6%	0.5%
azure-front-door	33,136	1.3%	2.3%
vercel	30,007	1.1%	1.6%
… 1 more layers not shown …

WARNREFERRER_POLICY_MULTIPLE~678 sites (1.4%)1,092,847

Multiple Referrer-Policy values found; only '%(effective)s' is used.

Samples (5)

https://www.kupi.cz/magazin/clanek/26148-recepty-na-domaci-energitakyfield_name=Referrer-Policy, effective=strict-origin-when-cross-origin
https://klickpin.com/az/en1/video-tutorial-klickpinfield_name=Referrer-Policy, effective=no-referrer-when-downgrade
https://kolesa.kz/reviews/?reviewId=67ec0e05a5c3b898798c6b28&mark-id=changan&model-id=uni-v&generation-id=110531field_name=Referrer-Policy, effective=origin-when-cross-origin
https://www.chanel.com/dk/storelocator/store/chanel-mall-of-asia-130531/field_name=Referrer-Policy, effective=strict-origin-when-cross-origin
https://www.gate.com/vi/announcements/article/41285field_name=Referrer-Policy, effective=strict-origin-when-cross-origin

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	344,256	31.5%	1.1%
nginx	220,740	20.2%	0.8%
akamai	107,229	9.8%	0.8%
cloudfront	93,591	8.6%	0.6%
nextjs	83,937	7.7%	1.0%
apache	55,734	5.1%	0.4%
fastly	48,564	4.4%	0.5%
envoy	38,992	3.6%	0.8%
azure-front-door	10,883	1.0%	0.8%
vercel	4,187	0.4%	0.2%
… 1 more layers not shown …

WARNCSP_WIDE_OPEN~640 sites (1.3%)1,426,537

All sources are allowed in one or more directives.

Samples (5)

https://faphouse.com/videos/loading-condom-buyer-DXq22kfield_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `style-src`
https://ok.ru/music/artist/122899793031707field_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `object-src`
https://www.carwale.com/tata-cars/safari/price-in-indore/field_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `style-src` * `script-src`
https://www.gucci.com/de/de/pr/children/baby/newborn/baby-gg-nylon-dress-p-844927ZATWS4001field_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `script-src` * `style-src`
https://www.aajtak.in/bihar/story/world-largest-shivling-installation-virat-ramayan-temple-motihari-lcla-strc-2434668-2026-01-09field_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `script-src` * `style-src`

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudfront	307,832	21.6%	1.8%
cloudflare	303,945	21.3%	1.0%
akamai	263,667	18.5%	2.1%
nginx	195,574	13.7%	0.7%
nextjs	122,942	8.6%	1.5%
apache	110,804	7.8%	0.8%
fastly	100,160	7.0%	1.0%
envoy	70,711	5.0%	1.5%
vercel	58,746	4.1%	3.1%
azure-front-door	28,089	2.0%	2.0%
… 1 more layers not shown …

WARNHSTS_OVER_HTTP~605 sites (1.2%)180,746

The HSTS header is sent over HTTP.

Samples (5)

http://archive.org/download/travelsintonorth03inkalmfield_name=Strict-Transport-Security
http://www.cvent.com/Pub/eMarketing/Pages/WebEmail.aspx?emstub=8A2C8792-7415-4252-9BC5-114561DA32D9field_name=Strict-Transport-Security
http://afrinic.net/ipv6-and-the-iot?catid=88&Itemid=167field_name=Strict-Transport-Security
http://www.sch.gr/sites/sch-units/index?page=9&SchUnitsSearch%5Bunit_type%5D=%CE%95%CE%9D%CE%99%CE%91%CE%99%CE%9F+%CE%95%CE%99%CE%94%CE%99%CE%9A%CE%9F+%CE%95%CE%A0%CE%91%CE%93%CE%93%CE%95%CE%9B%CE%9C%CE%91%CE%A4%CE%99%CE%9A%CE%9F+%CE%93%CE%A5%CE%9C%CE%9D%CE%91%CE%A3%CE%99%CE%9F-%CE%9B%CE%A5%CE%9A%CE%95%CE%99%CE%9F&SchUnitsSearch%5Bprefecture%5D=%CE%91%CE%A1%CE%9A%CE%91%CE%94%CE%99%CE%91%CE%A3field_name=Strict-Transport-Security
http://moneta.ru/info/d/ru/public/users/nko-supervisor.htmfield_name=Strict-Transport-Security

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	56,001	31.0%	0.2%
apache	38,158	21.1%	0.3%
cloudflare	21,252	11.8%	0.1%
fastly	18,114	10.0%	0.2%
cloudfront	15,578	8.6%	0.1%
akamai	5,055	2.8%	0.0%
nextjs	4,080	2.3%	0.0%
envoy	568	0.3%	0.0%
nuxt	224	0.1%	0.0%
azure-front-door	125	0.1%	0.0%
… 1 more layers not shown …

WARNCOOP_UNSAFE_NONE~428 sites (0.9%)318,293

This response allows sharing the browsing context with cross-origin documents%(report_only)s.

Samples (5)

https://www.urbandictionary.com/author.php?author=EdgyDabsfield_name=Cross-Origin-Opener-Policy, report_only=, report_only_text=
https://opensea.io/item/polygon/0x2953399124f0cbb46d2cbacd8a89cf0599974963/76810900429690770804383099095071373648234848731471368047050109506180125556737field_name=Cross-Origin-Opener-Policy, report_only=, report_only_text=
https://www.google.de/maps/d/embed?mid=1LSNRXcbR0GMi6q19ctPeSQ7F8XMfield_name=Cross-Origin-Opener-Policy, report_only=, report_only_text=
https://www.youtube.com/redirect?q=https://www.bing.com/SEARCH?q=https://www.privacyshield.gov/participant?id=a2zt0000000TdMXAA0field_name=Cross-Origin-Opener-Policy, report_only=, report_only_text=
https://yandex.uz/games/app/starship-survivor-500962field_name=Cross-Origin-Opener-Policy, report_only=, report_only_text=

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	141,389	44.4%	0.5%
nginx	56,598	17.8%	0.2%
fastly	46,155	14.5%	0.5%
nextjs	36,255	11.4%	0.4%
vercel	31,211	9.8%	1.6%
akamai	19,350	6.1%	0.2%
envoy	19,214	6.0%	0.4%
cloudfront	11,739	3.7%	0.1%
azure-front-door	6,556	2.1%	0.5%
apache	6,106	1.9%	0.0%
… 1 more layers not shown …

WARNHSTS_MAX_AGE_ZERO~398 sites (0.8%)1,083,198

The max-age is 0.

Samples (5)

https://www.deloitte.com/fr/fr/services/deloitte-private/perspectives/trois-questions-a-alexandre-rocco.htmlfield_name=Strict-Transport-Security
https://tawk.to/chat/5ef0e9bd9e5f69442291169d/defaultfield_name=Strict-Transport-Security
https://www.gobiernodecanarias.org/buscador/search?dataOrigin=WEB&fqtr=odt&ambitos=san,optv,hpae,ece,telccpt,apjs,gobcan,dsidjfield_name=Strict-Transport-Security
https://www.techtarget.com/contributor/Danny-Apontefield_name=Strict-Transport-Security
https://elfsight.com/blog/ai-assistant-vs-chatbot/field_name=Strict-Transport-Security

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	534,726	49.4%	1.7%
nginx	128,769	11.9%	0.5%
apache	92,936	8.6%	0.7%
akamai	86,672	8.0%	0.7%
nextjs	55,483	5.1%	0.7%
cloudfront	47,726	4.4%	0.3%
nuxt	40,368	3.7%	3.9%
envoy	30,682	2.8%	0.6%
vercel	16,446	1.5%	0.9%
fastly	10,871	1.0%	0.1%
… 1 more layers not shown …

WARNCSP_REPORT_TO_MISSING~393 sites (0.8%)727,619

The report-to endpoint '%(endpoint)s' is not defined.

Samples (5)

https://www.sofi.com/learn/content/do-i-need-estate-planning/field_name=Content-Security-Policy, report_only=, report_only_text=, endpoint=cf-kiwqmyxtyezzicio
https://www.airbnb.com/cedynia-poland/stays/monthlyfield_name=Content-Security-Policy, report_only=, report_only_text=, endpoint=/tracking/csp?controller=seo-loop&action=%2Fcedynia-poland%2Fstays%2Fmonthly&req_uuid=93acbac1-29c6-4a3a-838d-e85a43501c3c&version=sha%3D2b6ce44b9b37&report_only=false
https://quillbot.com/es/traductor/panyabi-asamesfield_name=Content-Security-Policy, report_only=, report_only_text=, endpoint=https://sentry-webapp.quillbot.com/api/2/security/?sentry_key=5743ef12f4887fc460c7968ebb2de54d
https://www.siemens.com/da-dk/products/fonds-invest/siemens-weltinvest-aktien/field_name=Content-Security-Policy-Report-Only, report_only= for reporting only, report_only_text= Browsers will only report violations of this policy, not enforce it., endpoint=commscloud
https://www.asos.com/de/herren/sale/a-to-z-of-brands/hair-by-sam-mcknight/cat/?cid=51836field_name=Content-Security-Policy-Report-Only, report_only= for reporting only, report_only_text= Browsers will only report violations of this policy, not enforce it., endpoint=csp

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	244,810	33.6%	0.9%
envoy	219,961	30.2%	4.6%
cloudflare	218,222	30.0%	0.7%
akamai	193,055	26.5%	1.5%
fastly	81,256	11.2%	0.8%
cloudfront	62,840	8.6%	0.4%
nextjs	39,136	5.4%	0.5%
apache	23,918	3.3%	0.2%
azure-front-door	12,145	1.7%	0.9%
vercel	7,527	1.0%	0.4%
… 1 more layers not shown …

WARNPERMISSIONS_POLICY_WILDCARD~282 sites (0.6%)893,926

The '%(feature)s' feature is allowed for all origins.

Samples (5)

https://www.olx.ro/oferta/loc-de-munca/vino-in-echipa-pepco-angajam-casier-cluj-10-zorilor-IDjGFxU.html?reason=seller_listing%7Colx_shop_premiumfield_name=Permissions-Policy, feature=camera
https://www.olx.ua/uk/elektronika/kompyutery-i-komplektuyuschie/vneshnie-nakopiteli/galich/field_name=Permissions-Policy, feature=camera
https://coda.io/@dmdan/nanowrimo-progress-trackerfield_name=Permissions-Policy, feature=geolocation
https://www.hu-berlin.de/forschung-lehre/forschungsinformationssystem/projekt-details/das-bedingungslose-grundeinkommen-und-seine-normativen-grundierungen-kontexte-modelle-debattenfield_name=Permissions-Policy, feature=camera
https://faphouse.com/videos/huge-cumshot-blindfolded-5S8chC?slug=huge-cumshot-blindfolded-&hash=5S8chC&utm_campaign=tQZ&utm_content=videosection&utm_medium=fapcash&utm_source=directfield_name=Permissions-Policy, feature=camera

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudfront	290,857	32.5%	1.7%
nginx	274,043	30.7%	1.0%
cloudflare	232,109	26.0%	0.8%
akamai	97,149	10.9%	0.8%
apache	81,210	9.1%	0.6%
azure-front-door	59,759	6.7%	4.2%
envoy	41,909	4.7%	0.9%
fastly	30,434	3.4%	0.3%
nextjs	16,587	1.9%	0.2%
vercel	4,521	0.5%	0.2%
… 1 more layers not shown …

WARNCOEP_UNSAFE_NONE~256 sites (0.5%)741,603

This response allows loading cross-origin resources without restriction%(report_only)s.

Samples (5)

https://www.mdpi.com/1660-4601/21/1/103field_name=Cross-Origin-Embedder-Policy, report_only=, report_only_text=
https://www.cve.org/CVERecord?id=CVE-2025-69259field_name=Cross-Origin-Embedder-Policy, report_only=, report_only_text=
https://www.klarna.com/ie/shopping/pl/cl456/3202268195/Pets/Exo-Terra-TERRARIUM-20x20x20CM-NANO-WIDE/field_name=Cross-Origin-Embedder-Policy, report_only=, report_only_text=
https://www.maxpreps.com/ca/la-mesa/helix-highlanders/beach-volleyball/field_name=Cross-Origin-Embedder-Policy, report_only=, report_only_text=
https://ubuntu.com/security/notices/USN-7610-2field_name=Cross-Origin-Embedder-Policy, report_only=, report_only_text=

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	200,821	27.1%	0.7%
cloudfront	197,582	26.6%	1.2%
fastly	96,791	13.1%	1.0%
nginx	91,568	12.3%	0.3%
akamai	88,751	12.0%	0.7%
envoy	84,502	11.4%	1.8%
apache	43,480	5.9%	0.3%
nextjs	6,235	0.8%	0.1%
azure-front-door	4,785	0.6%	0.3%
vercel	4,494	0.6%	0.2%
… 1 more layers not shown …

WARNPERMISSIONS_POLICY_INVALID_VALUE~193 sites (0.4%)703,031

The value for '%(feature)s' should be an Inner List or the token '*'.

Samples (5)

https://www.modaselvim.com/znefield_name=Permissions-Policy, feature=geolocation
https://www.dell.com/da-dk/lp/dt/customer-storiesfield_name=Permissions-Policy, feature=ch-dpr
https://www.joyn.de/bts/serien/germanys-next-topmodel/kandidaten/gntm-kandidatin-juna-53875field_name=Permissions-Policy, feature=none
https://kolesa.kz/a/show/205295927field_name=Permissions-Policy, feature=browsing-topics
https://unctad.org/news/stylegenie-thinks-out-box-how-fashion-and-data-meet-trendy-outcomefield_name=Permissions-Policy, feature=accelerometer

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
akamai	282,482	40.2%	2.2%
cloudflare	158,437	22.5%	0.5%
nginx	91,763	13.1%	0.3%
fastly	35,578	5.1%	0.4%
apache	29,079	4.1%	0.2%
azure-front-door	15,974	2.3%	1.1%
cloudfront	14,146	2.0%	0.1%
nextjs	13,635	1.9%	0.2%
vercel	10,445	1.5%	0.6%
envoy	3,989	0.6%	0.1%

WARNENDPOINT_NOT_SECURE~193 sites (0.4%)86,376

The %(name)s reporting endpoint is not secure.

Samples (5)

http://www.google.cat/url?q=https://bota.nhzdor.rufield_name=Reporting-Endpoints, name=default, url=//www.google.com/httpservice/retry/jserror?ei=38mzafOcN7Ce5NoPmPaWkA0&cad=crash&error=Page%20Crash&jsel=1&bver=2396&dpf=qtijFbrbH-aWQnUe5zcJoosTzPoKr5q_Tx78JDV44lM
http://www.google.cz/url?q=https://onglessaphirsmontreal-nord.ca/field_name=Reporting-Endpoints, name=default, url=//www.google.com/httpservice/retry/jserror?ei=As6zaaPvF_2g5NoP5sPs6QY&cad=crash&error=Page%20Crash&jsel=1&bver=2396&dpf=qtijFbrbH-aWQnUe5zcJoosTzPoKr5q_Tx78JDV44lM
http://www.google.gp/url?q=https://chototvieclam.com/viec-lam/viec-tim-nguoi/lai-xe-taicontainer/can-tuyen-2-tai-xe-cho-sep-han-quoc-quan-2-di-nhon-trach-dong-nai_i92001field_name=Reporting-Endpoints, name=default, url=//www.google.com/httpservice/retry/jserror?ei=xsmzaYzxNt-g5NoPwtP2-QM&cad=crash&error=Page%20Crash&jsel=1&bver=2396&dpf=qtijFbrbH-aWQnUe5zcJoosTzPoKr5q_Tx78JDV44lM
http://www.google.co.vi/url?q=http://b.funow.ru/index.php?wayfor5071field_name=Reporting-Endpoints, name=default, url=//www.google.com/httpservice/retry/jserror?ei=N8SzaZL-M_iu5NoP2IehgQI&cad=crash&error=Page%20Crash&jsel=1&bver=2396&dpf=qtijFbrbH-aWQnUe5zcJoosTzPoKr5q_Tx78JDV44lM
http://www.google.es/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cts=1331755563973&ved=0CCIQtwIwAA&url=http%3A%2F%2Fvimeo.com%2F3912593&ei=JfpgT_y3GMuYhQf81KXNBw&usg=AFQjCNGYqENQ_dFouiSVzsEi_jv8NnMULw&sig2=hPhGo_27S-BoXUiIeQ1Guwfield_name=Reporting-Endpoints, name=default, url=//www.google.com/httpservice/retry/jserror?ei=mc-zace8E8npiLMPyrnPSA&cad=crash&error=Page%20Crash&jsel=1&bver=2396&dpf=qtijFbrbH-aWQnUe5zcJoosTzPoKr5q_Tx78JDV44lM

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudfront	4,741	5.5%	0.0%
cloudflare	510	0.6%	0.0%

WARNREFERRER_POLICY_UNSAFE~147 sites (0.3%)409,498

This response's Referrer-Policy allows unsafe URLs.

Samples (5)

https://musicbrainz.org/artist/88d91937-fe8b-4630-813a-0f0eb80f7c77/releases?va=1field_name=Referrer-Policy
https://taplink.cc/kristinalogoshfield_name=Referrer-Policy
https://www.rogers.com/business/blog/future-of-work/five-tech-trends-enabling-a-hybrid-working-modelfield_name=Referrer-Policy
https://www.tmz.com/watch/2022-11-15-111522-blue-face-1517963-539/field_name=Referrer-Policy
https://www.webtoons.com/en/canvas/puddlemunch/winning/viewer?title_no=286801&episode_no=23field_name=Referrer-Policy

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	118,327	28.9%	0.4%
cloudflare	77,608	19.0%	0.3%
apache	52,521	12.8%	0.4%
cloudfront	38,569	9.4%	0.2%
nextjs	30,348	7.4%	0.4%
envoy	21,545	5.3%	0.4%
fastly	20,865	5.1%	0.2%
akamai	15,715	3.8%	0.1%
azure-front-door	11,303	2.8%	0.8%
nuxt	1,318	0.3%	0.1%

WARNCOOP_REPORT_TO_MISSING~131 sites (0.3%)429,467

The report-to endpoint '%(endpoint)s' is not defined%(report_only)s.

Samples (5)

https://www.youtube.com/live/S-Y0yri08QQfield_name=Cross-Origin-Opener-Policy, endpoint=youtube_main, report_only=
https://www.youtube-nocookie.com/embed/9kKQ50u7JWc?enablejsapi=1&rel=0field_name=Cross-Origin-Opener-Policy-Report-Only, endpoint=youtube_other, report_only= (for reporting only)
https://www.google.de/intl/de/chrome/dev/other-platforms/field_name=Cross-Origin-Opener-Policy-Report-Only, endpoint=uxe-owners-acl/chrome, report_only= (for reporting only)
https://www.google.fr/earth/versions/field_name=Cross-Origin-Opener-Policy-Report-Only, endpoint=static-on-bigtable, report_only= (for reporting only)
https://www.synology.com/en-af/security/advisory/Synology_SA_18_65field_name=Cross-Origin-Opener-Policy, endpoint=default, report_only=

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	19,667	4.6%	0.1%
nginx	7,875	1.8%	0.0%
cloudfront	7,696	1.8%	0.0%
fastly	85	0.0%	0.0%
envoy	7	0.0%	0.0%

WARNPERMISSIONS_POLICY_UNKNOWN_TOKEN~125 sites (0.3%)1,000,449

'%(token)s' is not valid in an allowlist.

Samples (5)

https://www.halodoc.com/artikel/harus-tahu-bolehkah-bayi-pakai-perhiasanfield_name=Permissions-Policy, token=https://www.halodoc.com, feature=sync-xhr
https://www.muni.cz/en/research/publications/1684500field_name=Permissions-Policy, token=*, feature=autoplay
https://www.flaticon.com/ru/free-icon/brainstorming_16330569field_name=Permissions-Policy, token=https://pay.google.com, feature=payment
https://www.bikewale.com/service-centers/jawa/saharanpur/field_name=Permissions-Policy, token=http://*.carwale.com, feature=camera
https://www.carwale.com/hi/maruti-suzuki-cars/victoris/price-in-sitamarhi/field_name=Permissions-Policy, token=http://*.carwale.com, feature=camera

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudfront	279,046	27.9%	1.7%
cloudflare	183,055	18.3%	0.6%
envoy	119,365	11.9%	2.5%
akamai	67,226	6.7%	0.5%
apache	40,439	4.0%	0.3%
nginx	32,604	3.3%	0.1%
fastly	18,177	1.8%	0.2%
vercel	10,149	1.0%	0.5%
azure-front-door	6,124	0.6%	0.4%
nextjs	5,441	0.5%	0.1%

WARNCONTENT_TYPE_OPTIONS_UNKNOWN~90 sites (0.2%)108,048

X-Content-Type-Options contains an unknown value.

Samples (5)

https://ubuntu.com/security/notices/USN-1373-1field_name=X-Content-Type-Options
https://cloudinary.com/guides/wordpress-plugin/optimizing-wordpress-images-a-comprehensive-guide-to-converting-images-to-webpfield_name=X-Content-Type-Options
https://www.telekom.de/shop/geraet/apple/apple-iphone-16e/weiss-128-gb?confPage=true&accFamily=fmla1900004&ssb_block=block_accessory_details_popup_container&hardwareOnlySale=true&categoryId=smartphonesfield_name=X-Content-Type-Options
https://www.microsoft.com/en-us/wdsi/threats/threat-search?query=ammyratfield_name=X-Content-Type-Options
https://snapcraft.io/install/commands-manager/kde-neonfield_name=X-Content-Type-Options

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
akamai	27,191	25.2%	0.2%
nginx	23,505	21.8%	0.1%
cloudflare	13,591	12.6%	0.0%
azure-front-door	2,821	2.6%	0.2%
apache	2,644	2.4%	0.0%
cloudfront	1,264	1.2%	0.0%
nextjs	911	0.8%	0.0%
fastly	871	0.8%	0.0%
envoy	725	0.7%	0.0%
vercel	32	0.0%	0.0%

WARNCSP_DUPLICATE_DIRECTIVE~26 sites (0.1%)65,402

Duplicate directives are present.

Samples (5)

https://www.accenture.com/sg-en/insights/cloud/beyond-uptime-fueling-innovation-infrastructure-managementfield_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `img-src`
https://www.gucci.com/ch/fr/pr/men/ready-to-wear-for-men/leather-for-men/leather-tops-for-men/embossed-gg-leather-bomber-jacket-p-793171XNA271000field_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `worker-src`
https://www.greenpeace.org/canada/en/about-us/our-board/field_name=Content-Security-Policy, report_only=, report_only_text=, directives_list=* `worker-src` * `child-src` * `img-src`
https://www.dell.com/community/es/users/647bcbb4f17bba783c37f488field_name=Content-Security-Policy-Report-Only, report_only= for reporting only, report_only_text= Browsers will only report violations of this policy, not enforce it., directives_list=* `report-uri`
https://www.hepsiburada.com/magaza/xrjixi-gapfield_name=Content-Security-Policy-Report-Only, report_only= for reporting only, report_only_text= Browsers will only report violations of this policy, not enforce it., directives_list=* `script-src`

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
akamai	45,942	70.2%	0.4%
nextjs	19,772	30.2%	0.2%
cloudfront	17,876	27.3%	0.1%
fastly	16,435	25.1%	0.2%
cloudflare	15,498	23.7%	0.1%
nginx	471	0.7%	0.0%
apache	207	0.3%	0.0%

WARNREFERRER_POLICY_UNKNOWN~23 sites (0.0%)23,203

The Referrer-Policy value '%(policy)s' is unknown.

Samples (1)

https://www.myfritz.net/devices/field_name=Referrer-Policy, policy=never

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
apache	10,250	44.2%	0.1%
cloudfront	693	3.0%	0.0%
nginx	589	2.5%	0.0%
azure-front-door	276	1.2%	0.0%
akamai	41	0.2%	0.0%
cloudflare	40	0.2%	0.0%
envoy	32	0.1%	0.0%
fastly	1	0.0%	0.0%

WARNCROSS_ORIGIN_RESOURCE_POLICY_BAD_VALUE~19 sites (0.0%)53,905

Cross-Origin-Resource-Policy has an invalid value.

value

Value	Note fires
*	19,447
same-origin-allow-popups	12,948
same-origin;	9,816
cross-origin media.hbkworl.com js.stripe.com js.hubspot.com .livechatinc.com .typesense.net 'no-referrer-when-downgrade';	3,708
unsafe-none	3,401
cross-site	2,607
same?site	1,714
cross-origin;	183
same-site \| same-origin	80
same-site www.youtube.com	1

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	18,724	34.7%	0.1%
fastly	7,789	14.4%	0.1%
cloudflare	5,960	11.1%	0.0%
apache	80	0.1%	0.0%

WARNHSTS_DUPLICATE_DIRECTIVE~18 sites (0.0%)13,097

The HSTS header contains a duplicate directive.

Samples (3)

https://ahrefs.com/blog/zh/bounce-rate/field_name=Strict-Transport-Security, directive=includesubdomains
https://www.freenet.de/digitalrepublic/smartphones/samsung-galaxy-s24-vs-s25field_name=Strict-Transport-Security, directive=includesubdomains
https://www.spokeo.com/compass/how-technology-plays-a-role-in-the-increase-in-human-trafficking-prosecutions/field_name=Strict-Transport-Security, directive=includesubdomains

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	8,382	64.0%	0.0%
azure-front-door	3,310	25.3%	0.2%
nextjs	2,279	17.4%	0.0%
cloudfront	1,477	11.3%	0.0%
nginx	118	0.9%	0.0%
akamai	36	0.3%	0.0%

WARNCOEP_REPORT_TO_MISSING~13 sites (0.0%)137,339

The report-to endpoint '%(endpoint)s' is not defined%(report_only)s.

Samples (2)

https://www.youtube-nocookie.com/embed/6py14bTIBWQ?html5=1&autoplay=1&wmode=transparent&controls=1&modestbranding=1&rel=0&showinfo=0&autohide=1&color=white&iv_load_policy=3&theme=light&playsinline=1&origin=https%3A%5Cwww.013.nl&mute=0&enablejsapi=1&widgetid=3field_name=Cross-Origin-Embedder-Policy-Report-Only, endpoint=youtube_other, report_only= (for reporting only)
https://www.youtube.com/embed/iL8KH7s9vm4?rel=0&showinfo=0&start=0&autoplay=0&loop=0&muted=0&controls=1field_name=Cross-Origin-Embedder-Policy-Report-Only, endpoint=youtube_main, report_only= (for reporting only)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	20,182	14.7%	0.1%
nginx	7,868	5.7%	0.0%

WARNSPECULATION_RULE_NOT_SECURE~10 sites (0.0%)1,737

The speculation rule URL is not secure.

Samples (2)

http://www.sexneka.com/tag/%D8%B3%D9%83%D8%B3-%D9%85%D8%AC%D8%A7%D9%86%D9%8A-%D9%85%D9%81%D8%AA%D9%88%D8%AD/?filter=randomfield_name=Speculation-Rules, url=/cdn-cgi/speculation
http://www.crealitycloud.com/post-tags/creality-cloud-app?tagName=creality+cloud+appfield_name=Speculation-Rules, url=/cdn-cgi/speculation

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	1,737	100.0%	0.0%
nextjs	6	0.3%	0.0%

WARNPERMISSIONS_POLICY_QUOTED_KEYWORD~5 sites (0.0%)17,780

The value '%(value)s' looks like a keyword but is a string.

Samples (1)

https://superbet.ro/joc/speed-vip-blackjack-3/icore_s2c632zwwyaaciwifield_name=Permissions-Policy, value=*, feature=sync-xhr

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
apache	9,268	52.1%	0.1%
fastly	6,762	38.0%	0.1%
cloudfront	1,738	9.8%	0.0%
cloudflare	12	0.1%	0.0%

WARNCOEP_REPORT_ONLY_DUPLICATE~5 sites (0.0%)10,326

This response has both enforcing and report-only COEP headers.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	10,311	99.9%	0.0%

WARNCOOP_REPORT_ONLY_DUPLICATE~4 sites (0.0%)84,566

This response has both enforcing and report-only COOP headers.

Samples (1)

https://stripe.com/en-fr/resources/more/what-types-of-business-organizations-are-therefield_name=Cross-Origin-Opener-Policy-Report-Only

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	74,598	88.2%	0.3%
cloudflare	9,968	11.8%	0.0%

INFOHSTS_NO_PRELOAD~18,372 sites (37.2%)46,840,767

Browser preloading isn't allowed.

Samples (5)

https://archive.org/details/mobot31753002894886/mobot31753002894886field_name=Strict-Transport-Security
https://bash.com/boys-tiger-printed-t-shirt-white-000003acll0/pfield_name=Strict-Transport-Security
https://booth.pm/ja/items/2907985field_name=Strict-Transport-Security
https://civitai.com/models/35127/reviews?modelVersionId=76520&dialog=resourceReview&dialog=resourceReview&dialog=resourceReview&dialog=resourceReview&reviewId=63868480field_name=Strict-Transport-Security
https://cointelegraph.com/news/why-is-bitcoin-rising-amid-collapsing-banks-watch-the-market-reportfield_name=Strict-Transport-Security

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	10,093,459	21.5%	32.9%
nginx	8,898,812	19.0%	33.6%
fastly	6,810,994	14.5%	68.7%
akamai	6,685,158	14.3%	52.3%
cloudfront	6,006,726	12.8%	35.6%
apache	3,933,535	8.4%	29.8%
nextjs	3,449,575	7.4%	41.6%
envoy	2,493,749	5.3%	51.8%
vercel	1,501,920	3.2%	79.2%
azure-front-door	731,683	1.6%	51.2%
… 1 more layers not shown …

INFOHSTS_SUBDOMAINS~13,978 sites (28.3%)40,664,972

HSTS applies to subdomains.

Samples (5)

http://www.blurb.com/user/staffan_t?filter=bookstore&page=3field_name=Strict-Transport-Security
https://buymeacoffee.com/travelusion/spanish-childhood-views-first-concentration-camp-spain-tour-tomorrowfield_name=Strict-Transport-Security
https://discord.com/invite/stuTH6rBptfield_name=Strict-Transport-Security
https://github.com/justindujardin/mathy/commit/02b11eebfb3043ad5d46212a1d7b578a28e66de7field_name=Strict-Transport-Security
https://gov.uz/ru/news/1777field_name=Strict-Transport-Security

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	10,203,950	25.1%	33.3%
nginx	7,134,220	17.5%	26.9%
cloudfront	6,699,478	16.5%	39.7%
akamai	5,875,731	14.4%	45.9%
fastly	3,683,424	9.1%	37.1%
apache	3,302,301	8.1%	25.0%
envoy	2,863,745	7.0%	59.5%
nextjs	2,574,105	6.3%	31.1%
azure-front-door	854,506	2.1%	59.8%
vercel	534,800	1.3%	28.2%
… 1 more layers not shown …

INFOHSTS_TRAILING_SEMICOLON~1,742 sites (3.5%)3,465,948

The Strict-Transport-Security header has a trailing semicolon.

Samples (5)

https://www.honor.com/co/phones/honor-x7/field_name=Strict-Transport-Security
https://www.lachainemeteo.com/meteo-france/ville-245814/previsions-meteo-ars-sur-formans-samedifield_name=Strict-Transport-Security
https://www.teamviewer.com/ru-cis/global/support/knowledge-base/teamviewer-classic/security/multi-factor-authentication/faq-on-sms-validation/field_name=Strict-Transport-Security
https://matomo.org/get/matomo-analytics-3/field_name=Strict-Transport-Security
https://www.ria.com/detskaya-zubnaya-pasta-aquafresh-splash-50-ml-224647484.htmlfield_name=Strict-Transport-Security

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	1,013,022	29.2%	3.8%
cloudflare	602,681	17.4%	2.0%
apache	545,053	15.7%	4.1%
cloudfront	342,489	9.9%	2.0%
akamai	243,830	7.0%	1.9%
fastly	242,566	7.0%	2.4%
envoy	237,139	6.8%	4.9%
nextjs	73,721	2.1%	0.9%
azure-front-door	48,651	1.4%	3.4%
vercel	11,415	0.3%	0.6%
… 1 more layers not shown …

INFOCORP_CROSS_ORIGIN~616 sites (1.2%)1,089,984

This response is available for reading to requests from all origins.

Samples (5)

https://www.bbb.org/us/va/category/merchandise-warehouse/accreditedfield_name=Cross-Origin-Resource-Policy, report_only_text=
https://www.mdpi.com/2073-4360/15/9/2009field_name=Cross-Origin-Resource-Policy, report_only_text=
https://www.youtube-nocookie.com/embed/BlNGwbwooB8?wmode=opaquefield_name=Cross-Origin-Resource-Policy, report_only_text=
https://ich-tanke.de/tankstelle/57cfc6a605a4a79102ea49d8a3377357/field_name=Cross-Origin-Resource-Policy, report_only_text=
https://mangadex.org/chapter/0c8e1a36-6caf-446b-977e-018596295ec1field_name=Cross-Origin-Resource-Policy, report_only_text=

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	261,323	24.0%	0.9%
nginx	225,365	20.7%	0.9%
cloudfront	197,385	18.1%	1.2%
fastly	108,961	10.0%	1.1%
akamai	79,821	7.3%	0.6%
envoy	79,052	7.3%	1.6%
apache	54,054	5.0%	0.4%
nextjs	34,975	3.2%	0.4%
vercel	7,269	0.7%	0.4%
azure-front-door	1,555	0.1%	0.1%
… 1 more layers not shown …

INFOREFERRER_POLICY_EMPTY~59 sites (0.1%)62,983

No valid Referrer-Policy found.

Samples (2)

https://www.ub.edu/InfoBBAA/beca-arts-visuals-fundacio-guell-2022/field_name=Referrer-Policy
https://www.postman.com/collections/61e432cbddbb59a38072field_name=Referrer-Policy

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
apache	22,078	35.1%	0.2%
nginx	11,523	18.3%	0.0%
cloudflare	10,860	17.2%	0.0%
cloudfront	4,397	7.0%	0.0%
azure-front-door	337	0.5%	0.0%
envoy	46	0.1%	0.0%
akamai	42	0.1%	0.0%

INFOCSD_UNQUOTED~23 sites (0.0%)52,116

Clear-Site-Data contains unquoted values.

Samples (2)

https://www.digilocker.gov.in/field_name=Clear-Site-Data, values=cache, cookies, storage
https://www.elcorteingles.es/sicor/ca/grup-sicor-triomfa-als-premis-prever-2023-per-la-seva-excellencia-en-prevencio-de-riscos-laborals/field_name=Clear-Site-Data, values=cookies, cache

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	29,651	56.9%	0.1%
nginx	19,805	38.0%	0.1%
akamai	561	1.1%	0.0%
apache	560	1.1%	0.0%
nextjs	88	0.2%	0.0%
nuxt	15	0.0%	0.0%
cloudfront	8	0.0%	0.0%

GOODHSTS_VALID~25,417 sites (51.5%)69,198,200

Strict Transport Security (HSTS) is enabled.

Samples (5)

https://archive.org/details/zemljopis_i_poviestnica_bosne-1851-slavoljub_bosnjak/mode/2upfield_name=Strict-Transport-Security
https://bsky.app/intent/compose?text=Quick%20Fixes%20to%20Speed%20Healing%20of%20Cracked%20Fingertips%0A%0Ahttps%3A%2F%2Fwww.peoplespharmacy.com%2Farticles%2Fspeed-healing-of-cracked-fingertipsfield_name=Strict-Transport-Security
https://coinmarketcap.com/el/currencies/nest-protocol/field_name=Strict-Transport-Security
https://ddnavi.com/article/1257570/a/field_name=Strict-Transport-Security
https://discord.com/invite/N32tS6wN2tfield_name=Strict-Transport-Security

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	16,387,705	23.7%	53.5%
nginx	13,199,088	19.1%	49.8%
akamai	9,877,854	14.3%	77.2%
cloudfront	9,838,376	14.2%	58.3%
fastly	8,442,463	12.2%	85.1%
apache	5,660,831	8.2%	42.9%
nextjs	4,993,452	7.2%	60.3%
envoy	3,700,492	5.3%	76.9%
vercel	1,893,031	2.7%	99.8%
azure-front-door	1,103,377	1.6%	77.3%
… 1 more layers not shown …

GOODCONTENT_TYPE_OPTIONS~20,811 sites (42.2%)57,705,711

This response instructs browsers not to 'sniff' its media type.

Samples (5)

http://www.sch.gr/sites/sch-units/index?page=8&sort=-unitName&SchUnitsSearch%5Bprefecture%5D=%CE%A4%CE%97%CE%9D%CE%9F%CE%A5&SchUnitsSearch%5Bunit_type%5D=%CE%94%CE%97%CE%9C%CE%9F%CE%A4%CE%99%CE%9A%CE%9Ffield_name=X-Content-Type-Options
https://ameblo.jp/miraiju33/field_name=X-Content-Type-Options
https://bustimes.org/stops/2900E178field_name=X-Content-Type-Options
https://dev.to/joashxu/handling-temporal-data-in-sql-5k6field_name=X-Content-Type-Options
https://discord.com/invite/sgc-network-472411471863742476field_name=X-Content-Type-Options

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	14,412,390	25.0%	47.0%
nginx	11,063,985	19.2%	41.8%
cloudfront	8,667,880	15.0%	51.4%
akamai	7,967,575	13.8%	62.3%
fastly	5,691,346	9.9%	57.4%
apache	5,549,034	9.6%	42.0%
envoy	3,228,764	5.6%	67.1%
nextjs	3,205,362	5.6%	38.7%
azure-front-door	840,844	1.5%	58.9%
vercel	723,558	1.3%	38.2%
… 1 more layers not shown …

GOODFRAME_OPTIONS_SAMEORIGIN~18,300 sites (37.1%)47,743,530

This response prevents browsers from rendering it within a frame on another site.

Samples (5)

https://buymeacoffee.com/ailookbooktnw/medicine-melancholyfield_name=X-Frame-Options
https://cutt.ly/bio/Ofhlv/?2025-1368field_name=X-Frame-Options
https://feedly.com/cve/CVE-2017-2590field_name=X-Frame-Options
https://habr.com/en/companies/ruvds/articles/710248/comments/field_name=X-Frame-Options
https://hotmart.com/pt-br/marketplace/produtos/15-dias-teamcruz/H61754301Lfield_name=X-Frame-Options

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	10,990,583	23.0%	35.9%
nginx	10,634,534	22.3%	40.1%
cloudfront	6,674,948	14.0%	39.6%
akamai	6,641,604	13.9%	51.9%
fastly	5,201,027	10.9%	52.4%
apache	4,881,901	10.2%	37.0%
nextjs	2,366,634	5.0%	28.6%
envoy	2,331,304	4.9%	48.4%
azure-front-door	726,304	1.5%	50.9%
vercel	510,534	1.1%	26.9%
… 1 more layers not shown …

GOODCONTENT_SECURITY_POLICY~15,878 sites (32.2%)40,423,036

This response sets a Content Security Policy%(report_only)s.

Samples (5)

http://kremlin.ru/events/president/news/65377field_name=Content-Security-Policy, report_only=, report_only_text=
http://www.sch.gr/sites/sch-units/index?page=9&sort=-unitName&SchUnitsSearch%5Bprefecture%5D=%CE%9B%CE%95%CE%A3%CE%92%CE%9F%CE%A5&SchUnitsSearch%5Bunit_type%5D=%CE%9A%CE%95%CE%A3%CE%A5field_name=Content-Security-Policy, report_only=, report_only_text=
https://ameblo.jp/energyofsmile/entry-12892070455.htmlfield_name=Content-Security-Policy, report_only=, report_only_text=
https://archive.org/details/rmg-enterprises/Clone%20manualfield_name=Content-Security-Policy, report_only=, report_only_text=
https://audiomack.com/kasmosfield_name=Content-Security-Policy, report_only=, report_only_text=

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	8,811,129	21.8%	28.8%
cloudfront	6,518,707	16.1%	38.6%
akamai	6,405,590	15.8%	50.1%
nginx	6,328,650	15.7%	23.9%
fastly	4,594,802	11.4%	46.3%
apache	2,993,667	7.4%	22.7%
nextjs	2,566,880	6.4%	31.0%
envoy	2,104,715	5.2%	43.7%
vercel	750,295	1.9%	39.6%
azure-front-door	532,514	1.3%	37.3%
… 1 more layers not shown …

GOODREFERRER_POLICY_STRICT~8,256 sites (16.7%)19,244,804

This response's Referrer-Policy ('%(policy)s') restricts referrer leakage.

Samples (5)

https://bitwarden.com/sv-se/help/update-billing-info/field_name=Referrer-Policy, policy=strict-origin-when-cross-origin
https://expireddomains.com/domain/iteapoke.comfield_name=Referrer-Policy, policy=strict-origin
https://feedly.com/cve/CVE-2025-21688field_name=Referrer-Policy, policy=same-origin
https://flippingbook.com/pdf-online?from=mobile-menufield_name=Referrer-Policy, policy=strict-origin-when-cross-origin
https://infogram.com/cynthia_biruwr3field_name=Referrer-Policy, policy=no-referrer

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	4,963,493	25.8%	16.2%
cloudfront	4,028,741	20.9%	23.9%
nginx	3,592,336	18.7%	13.6%
akamai	2,039,724	10.6%	15.9%
fastly	1,372,145	7.1%	13.8%
apache	1,372,144	7.1%	10.4%
nextjs	1,316,467	6.8%	15.9%
envoy	1,131,369	5.9%	23.5%
vercel	380,450	2.0%	20.1%
azure-front-door	360,466	1.9%	25.2%
… 1 more layers not shown …

GOODHSTS_PRELOAD~6,981 sites (14.1%)19,725,456

Browser preloading is allowed.

Samples (5)

https://beebom.com/fix-universal-clipboard-not-working-iphone-mac/field_name=Strict-Transport-Security
https://boosty.to/maglipogoda/posts/bca63903-d7a7-4b66-a621-b42443758f81field_name=Strict-Transport-Security
https://byjus.com/bank-exam/idbi-assistant-manager-exam-date/field_name=Strict-Transport-Security
https://discord.com/invite/flybusfield_name=Strict-Transport-Security
https://expireddomains.com/domain/captureitphotographyva.comfield_name=Strict-Transport-Security

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	5,298,751	26.9%	17.3%
nginx	3,642,074	18.5%	13.7%
cloudfront	3,605,920	18.3%	21.4%
akamai	2,448,272	12.4%	19.1%
apache	1,540,261	7.8%	11.7%
fastly	1,435,637	7.3%	14.5%
nextjs	1,360,584	6.9%	16.4%
envoy	1,148,764	5.8%	23.9%
vercel	382,594	1.9%	20.2%
azure-front-door	360,338	1.8%	25.2%
… 1 more layers not shown …

GOODFRAME_OPTIONS_DENY~4,229 sites (8.6%)8,024,175

This response prevents browsers from rendering it within a frame.

Samples (5)

http://gree.jp/takechan_g/blog/entry/660357054field_name=X-Frame-Options
https://civitai.com/models/1092466/reviews?modelVersionId=1294744&dialog=resourceReview&dialog=resourceReview&reviewId=59921684field_name=X-Frame-Options
https://discord.com/invite/JVjbNGtRAGfield_name=X-Frame-Options
https://github.com/xieliaing/SASfield_name=X-Frame-Options
https://imgur.com/a/bmn66s9field_name=X-Frame-Options

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	1,969,106	24.5%	6.4%
nginx	1,549,601	19.3%	5.9%
cloudfront	1,342,250	16.7%	8.0%
akamai	1,045,035	13.0%	8.2%
nextjs	654,489	8.2%	7.9%
apache	585,348	7.3%	4.4%
fastly	561,720	7.0%	5.7%
envoy	423,993	5.3%	8.8%
vercel	182,378	2.3%	9.6%
azure-front-door	88,450	1.1%	6.2%
… 1 more layers not shown …

GOODPERMISSIONS_POLICY_PRESENT~4,210 sites (8.5%)10,139,713

This response sets a Permissions Policy.

Samples (5)

https://ameblo.jp/ske48official/entry-11987487041.htmlfield_name=Permissions-Policy
https://cointelegraph.com/news/sanae-token-27m-japan-pm-denies-links-fsa-probefield_name=Permissions-Policy
https://expireddomains.com/domain/solidcoppermugs.com?utm_source=redifield_name=Permissions-Policy
https://gamebanana.com/mods/105427field_name=Permissions-Policy
https://gitlab.com/ymd_h/cpprbfield_name=Permissions-Policy

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	2,485,567	24.5%	8.1%
nginx	1,715,238	16.9%	6.5%
cloudfront	1,561,514	15.4%	9.3%
akamai	997,007	9.8%	7.8%
fastly	883,567	8.7%	8.9%
apache	841,866	8.3%	6.4%
nextjs	620,307	6.1%	7.5%
envoy	332,164	3.3%	6.9%
azure-front-door	288,114	2.8%	20.2%
vercel	209,228	2.1%	11.0%
… 1 more layers not shown …

GOODCOOP_SAME_ORIGIN~1,132 sites (2.3%)2,717,076

This response isolates the browsing context to the same origin%(report_only)s.

Samples (5)

https://miro.com/app/board/uXjVO_YODIc=/?invite_link_id=308607207455field_name=Cross-Origin-Opener-Policy-Report-Only, report_only= (for reporting only), report_only_text= Browsers will only report violations of this policy, not enforce it.
https://www.afternic.com/forsale/flowerspring.com?utm_source=TDFS_DASLNC&utm_medium=parkedpages&utm_campaign=x_corp_tdfs-daslnc_base&traffic_type=TDFS_DASLNC&traffic_id=daslnc&field_name=Cross-Origin-Opener-Policy, report_only=, report_only_text=
https://www.consumerfinance.gov/about-us/blog/joining-the-financial-literacy-and-education-commission/field_name=Cross-Origin-Opener-Policy, report_only=, report_only_text=
https://www.dm.de/tipps-und-trends/trendfarben-weihnachten-3191306field_name=Cross-Origin-Opener-Policy-Report-Only, report_only= (for reporting only), report_only_text= Browsers will only report violations of this policy, not enforce it.
https://www.openstreetmap.org/user/rolldabeats/notesfield_name=Cross-Origin-Opener-Policy, report_only=, report_only_text=

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
akamai	485,367	17.9%	3.8%
nginx	448,397	16.5%	1.7%
cloudflare	419,119	15.4%	1.4%
cloudfront	377,179	13.9%	2.2%
envoy	310,995	11.4%	6.5%
fastly	301,748	11.1%	3.0%
apache	216,055	8.0%	1.6%
nextjs	60,569	2.2%	0.7%
vercel	11,666	0.4%	0.6%
azure-front-door	6,390	0.2%	0.4%
… 1 more layers not shown …

GOODCOOP_SAME_ORIGIN_ALLOW_POPUPS~462 sites (0.9%)1,525,541

This response isolates the browsing context but allows popups%(report_only)s.

Samples (5)

https://coinmarketcap.com/currencies/jeffrey-epstain/historical-data/field_name=Cross-Origin-Opener-Policy, report_only=, report_only_text=
https://stripe.com/en-ch/customers/wordpressfield_name=Cross-Origin-Opener-Policy, report_only=, report_only_text=
https://www.tradingview.com/chart/MRK/HQaWKNq5-Citadel-Advisors-invested-in-Merck-to-drive-growth/field_name=Cross-Origin-Opener-Policy, report_only=, report_only_text=
https://www.xing.com/profile/HalimKadir_Goecmenfield_name=Cross-Origin-Opener-Policy, report_only=, report_only_text=
https://www.youtube.com/channel/UCfccQH5sU-EZAQNWCTgdIQA?fbclid=IwAR3SdBC3Q0c4OWIG1BxKvQZDWjsK2jQdsx_kyJx6jQfbmY13hdNTCZv5dBMfield_name=Cross-Origin-Opener-Policy, report_only=, report_only_text=

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	360,165	23.6%	1.2%
nginx	300,472	19.7%	1.1%
cloudfront	253,287	16.6%	1.5%
akamai	150,456	9.9%	1.2%
envoy	96,022	6.3%	2.0%
apache	82,168	5.4%	0.6%
fastly	65,762	4.3%	0.7%
nextjs	60,183	3.9%	0.7%
azure-front-door	15,654	1.0%	1.1%
vercel	9,594	0.6%	0.5%
… 1 more layers not shown …

GOODCORP_SAME_ORIGIN~439 sites (0.9%)929,056

This response is only available for reading to requests from the same origin.

Samples (5)

https://www.afternic.com/forsale/YL4C.COM?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_GoDaddy_DLS&traffic_type=TDFS&traffic_id=GoDaddy_DLSfield_name=Cross-Origin-Resource-Policy, report_only_text=
https://www.gigabyte.com/pl/Mouse/Aivia-M8600-V2/otfield_name=Cross-Origin-Resource-Policy, report_only_text=
https://www.purestorage.com/tw/disk-replacement.htmlfield_name=Cross-Origin-Resource-Policy, report_only_text=
https://www.lenovo.com/my/en/knowledgebase/comprehensive-guide-to-choosing-the-perfect-computer-desk/field_name=Cross-Origin-Resource-Policy, report_only_text=
https://www.tenable.com/plugins/nessus/230394field_name=Cross-Origin-Resource-Policy, report_only_text=

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
akamai	343,963	37.0%	2.7%
envoy	254,071	27.3%	5.3%
cloudfront	162,256	17.5%	1.0%
cloudflare	142,506	15.3%	0.5%
fastly	96,133	10.3%	1.0%
nginx	81,048	8.7%	0.3%
nextjs	34,174	3.7%	0.4%
apache	20,587	2.2%	0.2%
vercel	5,226	0.6%	0.3%
azure-front-door	5,017	0.5%	0.4%
… 1 more layers not shown …

GOODCORP_SAME_SITE~140 sites (0.3%)169,329

This response is available for reading to requests from the same site.

Samples (5)

https://www.google.nl/travel/flights/unsupported?ucpp=CiRodHRwczovL3d3dy5nb29nbGUubmwvdHJhdmVsL2ZsaWdodHMfield_name=Cross-Origin-Resource-Policy, report_only_text=
https://www.blogger.com/profile/01697764262179748822field_name=Cross-Origin-Resource-Policy, report_only_text=
https://www.veed.io/sv-SE/skapa/text-video-skaparefield_name=Cross-Origin-Resource-Policy, report_only_text=
https://www.vam.ac.uk/dundee/whatson/events/designing-resilience-with-dundee-civic-trustfield_name=Cross-Origin-Resource-Policy, report_only_text=
https://www.hcaptcha.com/plans?ref=docs.getourchive.iofield_name=Cross-Origin-Resource-Policy, report_only_text=

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	70,195	41.5%	0.2%
cloudfront	41,725	24.6%	0.2%
nginx	28,586	16.9%	0.1%
akamai	24,894	14.7%	0.2%
envoy	18,549	11.0%	0.4%
nextjs	6,300	3.7%	0.1%
azure-front-door	5,168	3.1%	0.4%
fastly	4,460	2.6%	0.0%
apache	3,225	1.9%	0.0%
vercel	451	0.3%	0.0%

GOODCOEP_REQUIRE_CORP~109 sites (0.2%)230,205

This response requires resources to have a CORP header%(report_only)s.

Samples (5)

https://fb.watch/nitG95LIxB/field_name=Cross-Origin-Embedder-Policy-Report-Only, report_only= (for reporting only), report_only_text= Browsers will only report violations of this policy, not enforce it.
https://www.messenger.com/?locale=zh_HKfield_name=Cross-Origin-Embedder-Policy-Report-Only, report_only= (for reporting only), report_only_text= Browsers will only report violations of this policy, not enforce it.
https://www.youtube-nocookie.com/embed/sZ7YXLcMqf0field_name=Cross-Origin-Embedder-Policy-Report-Only, report_only= (for reporting only), report_only_text= Browsers will only report violations of this policy, not enforce it.
https://www.youtube.com/embed/43MzZIckvwU?rel=0field_name=Cross-Origin-Embedder-Policy-Report-Only, report_only= (for reporting only), report_only_text= Browsers will only report violations of this policy, not enforce it.
https://lichess.org/I4wmCTlnfield_name=Cross-Origin-Embedder-Policy, report_only=, report_only_text=

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	38,120	16.6%	0.1%
apache	16,898	7.3%	0.1%
fastly	3,247	1.4%	0.0%
cloudfront	2,824	1.2%	0.0%
cloudflare	2,405	1.0%	0.0%
azure-front-door	132	0.1%	0.0%
akamai	35	0.0%	0.0%
vercel	19	0.0%	0.0%
nextjs	17	0.0%	0.0%
envoy	1	0.0%	0.0%

GOODCOEP_CREDENTIALLESS~21 sites (0.0%)45,582

This response loads cross-origin resources without credentials%(report_only)s.

Samples (4)

https://www.bajajfinserv.in/bmall/elica-black-finish-wall-mounted-1200-cmh-chimney-black-autosense-ismart-spot-fl-hac-90-ltw-nero/p/29185field_name=Cross-Origin-Embedder-Policy, report_only=, report_only_text=
https://miro.com/app/live-embed/uXjVNUG3Lbk=/?moveToViewport=-7092,-9015,18375,14853&embedId=99292449160field_name=Cross-Origin-Embedder-Policy-Report-Only, report_only= (for reporting only), report_only_text= Browsers will only report violations of this policy, not enforce it.
https://lichess.org/study/embed/59WlAweu/TGlF2tY0field_name=Cross-Origin-Embedder-Policy, report_only=, report_only_text=
https://www.queensu.ca/info/supercomputingfield_name=Cross-Origin-Embedder-Policy, report_only=, report_only_text=

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
akamai	23,648	51.9%	0.2%
nextjs	11,640	25.5%	0.1%
cloudfront	10,191	22.4%	0.1%
envoy	1,741	3.8%	0.0%
apache	507	1.1%	0.0%
vercel	368	0.8%	0.0%
nginx	192	0.4%	0.0%
cloudflare	115	0.3%	0.0%
azure-front-door	1	0.0%	0.0%

GOODCSD_PRESENT~1 sites (0.0%)7

This response clears browser-side data for this origin.

Cookies 83,744,289 occurrences across 20 note types (5.8% of occurrences)

BADSET_COOKIE_NO_NAME~37 sites (0.1%)108,919

This response has a Set-Cookie header without a cookie-name.

Samples (5)

https://www.ravelry.com/yarns/library/alize-superlana-midi-mosaicfield_name=Set-Cookie
https://www.hepsiburada.com/vegefield_name=Set-Cookie
https://www.dunelm.com/product/charnwood-check-occasional-armchair-1000265845?defaultSkuId=31004832field_name=Set-Cookie
https://www.lonelyplanet.com/points-of-interest/museu-antoniano/1410588field_name=Set-Cookie
https://www.kasikornbank.com/th/kwealth/Pages/blog.aspx?articleTag=%20KUSARMfield_name=Set-Cookie

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	38,253	35.1%	0.1%
cloudfront	28,863	26.5%	0.2%
akamai	24,346	22.4%	0.2%
fastly	13,833	12.7%	0.1%
apache	2,498	2.3%	0.0%
cloudflare	1,668	1.5%	0.0%
azure-front-door	4	0.0%	0.0%
nextjs	1	0.0%	0.0%

BADSET_COOKIE_TOO_LARGE~5 sites (0.0%)9,727

The %(cookie_name)s Set-Cookie header is too large.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	10	0.1%	0.0%

BADSET_COOKIE_PREFIX_SECURE_MISSING~3 sites (0.0%)13,385

The %(cookie_name)s Set-Cookie header requires the Secure attribute.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nextjs	10,063	75.2%	0.1%
cloudflare	10,039	75.0%	0.0%
envoy	3,342	25.0%	0.1%
fastly	4	0.0%	0.0%

BADSET_COOKIE_PREFIX_HOST_BAD_PATH~2 sites (0.0%)3,346

The %(cookie_name)s Set-Cookie header has a __Host- prefix but does not set Path=/.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
envoy	3,342	99.9%	0.1%
nextjs	24	0.7%	0.0%
fastly	4	0.1%	0.0%

BADSET_COOKIE_PREFIX_HOST_BAD_DOMAIN~2 sites (0.0%)1,564

The %(cookie_name)s Set-Cookie header has a __Host- prefix but sets a Domain.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
vercel	1,560	99.7%	0.1%
fastly	4	0.3%	0.0%

WARNSET_COOKIE_NAME_DUP~3,882 sites (7.9%)6,721,657

This response sets duplicate cookies.

Samples (5)

https://elementor.com/de/domains/field_name=Set-Cookie, cookie_names=__cf_bm
https://metamask.io/en-GB/sitemapfield_name=Set-Cookie, cookie_names=NEXT_LOCALE
https://p-bandai.jp/item/item-1000202473/field_name=Set-Cookie, cookie_names=_TSTD
https://www.dailymotion.com/video/x5kz0efield_name=Set-Cookie, cookie_names=ff
https://www.expedia.com/es/Lewes.dx4676field_name=Set-Cookie, cookie_names=DUAID, MC1

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	1,450,514	21.6%	4.7%
akamai	1,319,713	19.6%	10.3%
nginx	1,220,086	18.2%	4.6%
envoy	732,947	10.9%	15.2%
apache	723,480	10.8%	5.5%
cloudfront	636,504	9.5%	3.8%
nextjs	362,061	5.4%	4.4%
fastly	295,993	4.4%	3.0%
azure-front-door	130,269	1.9%	9.1%
vercel	80,244	1.2%	4.2%
… 1 more layers not shown …

WARNSET_COOKIE_LIFETIME_TOO_LONG~3,318 sites (6.7%)20,167,066

The %(cookie_name)s Set-Cookie header has a lifetime that is too long.

Samples (5)

http://youdao.com/w/eng/fa_file_allocation_problem/field_name=Set-Cookie, cookie_name=OUTFOX_SEARCH_USER_ID, duration=30 years
https://epicentrk.ua/ua/shop/mplc-dezodorant-blyskavka-dla-nig-ta-vzutta-antisepticnij-100-ml-1eff2ac1-7e35-68e4-97ed-9f4eb04b4fa3.htmlfield_name=Set-Cookie, cookie_name=BITRIX_SM_SALE_UID, duration=5 years
https://gumroad.com/checkout?product=ektxz&quantity=1field_name=Set-Cookie, cookie_name=_gumroad_guid, duration=10 years
https://imgur.com/WPhJRrNfield_name=Set-Cookie, cookie_name=postpagebeta, duration=65 years
https://justpaste.it/ls/drcai/qj5j1j5g1b32vyawfield_name=Set-Cookie, cookie_name=userData, duration=5 years

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	4,003,995	19.9%	15.1%
akamai	3,752,156	18.6%	29.3%
cloudflare	3,464,339	17.2%	11.3%
envoy	3,158,432	15.7%	65.6%
cloudfront	2,875,808	14.3%	17.0%
apache	1,650,829	8.2%	12.5%
nextjs	1,069,784	5.3%	12.9%
fastly	675,507	3.3%	6.8%
azure-front-door	273,881	1.4%	19.2%
vercel	129,416	0.6%	6.8%
… 1 more layers not shown …

WARNSET_COOKIE_ATTRIBUTE_DUP~727 sites (1.5%)2,566,973

The %(cookie_name)s Set-Cookie header has duplicate '%(attribute)s' attributes.

Samples (5)

https://www.oracle.com/tw/corporate/accessibility/templates/t2-15608.htmlfield_name=Set-Cookie, cookie_name=JSESSIONID, attribute=Secure
https://www.superonline.net/kurumsal/yardim/turkcell-bulut/turkcell-e-fatura/zorunluluk-kapsaminda-olmasina-ragmen-fatura-kesecegim-firma-e-fatura-uygulamasina-dahil-olmamis-ise-bu-firmaya-kagit-fatufield_name=Set-Cookie, cookie_name=SOLSH_Session, attribute=HttpOnly
https://wise.com/ar/currency-converter/crc-to-uyu-rate?amount=50field_name=Set-Cookie, cookie_name=gid, attribute=SameSite
https://www.ss.com/msg/ru/entertainment/music/accessories/bcbfbc.htmlfield_name=Set-Cookie, cookie_name=PHPSESSID, attribute=secure
https://www.wolterskluwer.com/en-au/solutions/ovid/parietal-lobe--the-4948field_name=Set-Cookie, cookie_name=shell#lang, attribute=SameSite

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
akamai	845,969	33.0%	6.6%
cloudflare	650,152	25.3%	2.1%
apache	499,391	19.5%	3.8%
nginx	441,302	17.2%	1.7%
cloudfront	93,330	3.6%	0.6%
envoy	62,123	2.4%	1.3%
fastly	35,130	1.4%	0.4%
vercel	23,484	0.9%	1.2%
nextjs	22,829	0.9%	0.3%
azure-front-door	22,053	0.9%	1.5%
… 1 more layers not shown …

WARNSET_COOKIE_PRIORITY~658 sites (1.3%)363,361

The 'Priority' Set-Cookie attribute is deprecated.

Samples (5)

https://www.made-in-china.com/products-search/hot-china-products/Stainless_Steel_Large_Pipe.htmlfield_name=Set-Cookie, cookie_name=pid
https://www.kohls.com/product/prd-7121380/mens-nike-dri-fit-5-mesh-basketball-shorts.jsp?color=Game%20Royalfield_name=Set-Cookie, cookie_name=narvar_experiment
https://www.cvs.com/store-locator/landingfield_name=Set-Cookie, cookie_name=mca1
https://www.wyze.com/products/indoor-home-monitoring-starter-kitfield_name=Set-Cookie, cookie_name=_shopify_essential
https://www.blesk.cz/clanek/celebrity-ceske-celebrity/804697/filip-blazek-slavi-spolecnych-25-let-s-jolanou-ale-proc-smazala-laskyplne-vyznani.htmlfield_name=Set-Cookie, cookie_name=PHPSESSID

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	229,674	63.2%	0.7%
fastly	36,592	10.1%	0.4%
akamai	31,762	8.7%	0.2%
nginx	17,507	4.8%	0.1%
cloudfront	15,868	4.4%	0.1%
envoy	13,701	3.8%	0.3%
apache	10,170	2.8%	0.1%
nextjs	9,133	2.5%	0.1%
vercel	3,501	1.0%	0.2%
nuxt	4	0.0%	0.0%

WARNSET_COOKIE_UNKNOWN_ATTRIBUTE~605 sites (1.2%)1,672,362

The %(cookie_name)s cookie has an unknown attribute, '%(attribute)s'.

Samples (5)

https://www.marksandspencer.com/vn/heatgen%E2%84%A2-maximum-thermal-short-sleeve-top/p/P60465907.htmlfield_name=Set-Cookie, cookie_name=dwanonymous_1cb58b269223fbc31a670f29b400d0c0, attribute=Comment
https://www.belkin.com/jp/p/thunderbolt-3%E3%82%B1%E3%83%BC%E3%83%96%E3%83%AB-usb-c-to-usb-c-100w-2m/F2CD085bt2M-BLK.htmlfield_name=Set-Cookie, cookie_name=dwanonymous_0bcb3068fab05607f5d7b4ba1700710a, attribute=Comment
https://mrush.mobi/recover_pw?PHPSESSID=511df2c61ccba32340d33fa97bf8e0df.1752203150.65952555field_name=Set-Cookie, cookie_name=PHPSESSID, attribute=
https://belluna.jp/on/demandware.store/Sites-belluna-Site/ja_JP/Product-ShowQuickView?pid=147126field_name=Set-Cookie, cookie_name=dwanonymous_181aa3a2056486c6eb9f892d097bfc5c, attribute=Comment
https://www.nike.com/ch/it/w/black-friday-calcio-maglie-e-t-shirt-1gdj0z2phlmz9om13field_name=Set-Cookie, cookie_name=kndctr_F0935E09512D2C270A490D4D_AdobeOrg_identity, attribute=$x-enc

attribute: long tail elided during shuffle; only the retained head is shown.

attribute

Value	Note fires
Comment	1,018,142
	331,510
host	150,126
$x-enc	32,400
""	18,098
maxAge	13,573
e-country	10,745
HttpOnly, HTTPOnly, Secure	9,889
"	8,889
Category	8,423
AETN-Country-Code	6,345
MaxAge	5,481
secure,_helpkit_session	4,087
secure,__cf_bm	4,087
,bbsession	3,409
Discard	3,225
CAMPAIGN_CODE	2,966
expiry	2,619
SmaeSite	2,284
HttpOnly"	2,271
HASH_SameSite	1,583
HttpOnly,MISCGCs	1,355
Secure/g	1,284
ANYTHING	885
same-site	600
… 1975 more values not shown …

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	1,093,472	65.4%	3.6%
akamai	407,862	24.4%	3.2%
cloudfront	118,106	7.1%	0.7%
apache	49,600	3.0%	0.4%
nginx	49,042	2.9%	0.2%
nextjs	43,138	2.6%	0.5%
fastly	37,534	2.2%	0.4%
azure-front-door	28,748	1.7%	2.0%
envoy	8,940	0.5%	0.2%
vercel	7,004	0.4%	0.4%
… 1 more layers not shown …

WARNSET_COOKIE_VERSION~566 sites (1.1%)1,581,209

The 'Version Set-Cookie attribute is deprecated.

Samples (5)

https://www.audible.com/pd/Kiss-My-Boots-Audiobook/B072QCFDPWfield_name=Set-Cookie, cookie_name=currentSourceCode
https://www.belkin.com/on/demandware.store/Sites-BELKKR-Site/ko_KR/Product-GetPDPSupportArticles?pid=G3H0001btWHTfield_name=Set-Cookie, cookie_name=dwanonymous_99a4527ff8e159e538a2e9685c6e0414
https://www.idealista.pt/arrendar-lojas_ou_armazens/porto-distrito/field_name=Set-Cookie, cookie_name=contact5e28089a-9509-42c0-80b8-48fbd3da1ea3
https://www.navitime.co.jp/en/air/diagram/result?departure=SDJ&arrival=ITM_UKB&date=20260216&provCode=99999999field_name=Set-Cookie, cookie_name=seq
https://www.idealista.com/it/venta-viviendas/ciudad-real/la-mancha/con-chalets,de-un-dormitorio/field_name=Set-Cookie, cookie_name=contacte755bcf2-f6ab-4a21-909c-1a1ed40fac74

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	1,105,058	69.9%	3.6%
akamai	436,721	27.6%	3.4%
cloudfront	181,207	11.5%	1.1%
apache	144,502	9.1%	1.1%
nginx	73,169	4.6%	0.3%
fastly	45,300	2.9%	0.5%
envoy	15,818	1.0%	0.3%
azure-front-door	2,983	0.2%	0.2%
nextjs	733	0.0%	0.0%
vercel	50	0.0%	0.0%

WARNSET_COOKIE_NOT_SECURE~163 sites (0.3%)290,740

The %(cookie_name)s cookie is missing the Secure attribute.

Samples (5)

https://www.intercom.com/intercom-link?company=Bulk+Bunny&solution=customer-support&utm_campaign=intercom-link&utm_content=We+run+on+Intercom&utm_medium=help-center&utm_referrer=https%3A%2F%2Fhelp.bulkbunny.app%2Fen%2Farticles%2F6837366-how-to-create-a-discount-in-shopify-admin&utm_source=desktop-webfield_name=Set-Cookie, cookie_name=gtm_id
https://www.jal.co.jp/jp/ja/relations/jalmaas/?moduleType=flightModule&flightArrFlg=false&flightVia=FDA923&boardingDate=202603051045&intDom=domfield_name=Set-Cookie, cookie_name=AWSALBTGCORS
https://www.dlink.com/gr/el/support/faq/cameras-and-surveillance/mydlink/troubleshooting/app/i-cant-hear-audio-from-my-cloud-camera-in-the-mobile-appfield_name=Set-Cookie, cookie_name=AWSALBCORS
https://www.fda.gov/drugs/drug-approvals-and-databases/drug-trials-snapshot-avmapki-fakzynja-co-packfield_name=Set-Cookie, cookie_name=AWSALBCORS
https://www.se.com/jp/ja/download/document/FD-SOFT-A-033/field_name=Set-Cookie, cookie_name=AWSALBCORS

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudfront	156,002	53.7%	0.9%
nginx	79,065	27.2%	0.3%
apache	78,045	26.8%	0.6%
akamai	42,496	14.6%	0.3%
cloudflare	32,328	11.1%	0.1%
nextjs	14,054	4.8%	0.2%
envoy	8,911	3.1%	0.2%
nuxt	216	0.1%	0.0%
azure-front-door	6	0.0%	0.0%
fastly	6	0.0%	0.0%

WARNSET_COOKIE_NON_DIGIT_MAX_AGE~115 sites (0.2%)1,550,350

The %(cookie_name)s cookie has a non-numeric Max-Age.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
envoy	700,933	45.2%	14.6%
cloudflare	624,832	40.3%	2.0%
akamai	259,744	16.8%	2.0%
nextjs	214,035	13.8%	2.6%
nginx	50,651	3.3%	0.2%
cloudfront	45,742	3.0%	0.3%
fastly	37,741	2.4%	0.4%
apache	3,887	0.3%	0.0%
vercel	1,596	0.1%	0.1%

WARNSET_COOKIE_BAD_DATE~61 sites (0.1%)244,663

The %(cookie_name)s cookie has an invalid Expires date.

Samples (5)

https://www.monster.com/jobs/q-contractor-legal-jobs-l-bellingham-wafield_name=Set-Cookie, why=didn't have a: time,month,year, cookie_name=mn_geo
https://www.target.com/s/footie+pajamas+size+7field_name=Set-Cookie, why=didn't have a: time,day,month,year, cookie_name=TealeafAkaSid
https://www.dynadot.com/hi/domain/co?utm_source=Homepage%20TLDs&utm_campaign=Home%20TLD%20Carousel&utm_medium=co&drefid=2225&h_adsId=236field_name=Set-Cookie, why=didn't have a: time, cookie_name=session_id
https://www.trendyol.com/kuhn-rikon-duduklu-tencere-x-b162063-c101506field_name=Set-Cookie, why=didn't have a: time,day,month,year, cookie_name=hvtb
https://www.spotify.com/us/signup?flow_id=11298e3f-6738-4240-aa1a-94eb79f9f280%3A1772863795field_name=Set-Cookie, why=didn't have a: month, cookie_name=__Host-sp_csrf_sid

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
fastly	119,050	48.7%	1.2%
akamai	52,137	21.3%	0.4%
cloudflare	18,365	7.5%	0.1%
cloudfront	12,668	5.2%	0.1%
envoy	12,128	5.0%	0.3%
nginx	4,781	2.0%	0.0%
nextjs	2,506	1.0%	0.0%
apache	2,396	1.0%	0.0%
azure-front-door	593	0.2%	0.0%

WARNSET_COOKIE_UNKNOWN_ATTRIBUTE_VALUE~27 sites (0.1%)67,935

The %(cookie_name)s cookie has an unknown '%(attribute_name)s' attribute value.

Samples (5)

https://www.macys.com/shop/product/colosseum-mens-scarlet-ohio-state-buckeyes-athletic-machine-fashion-hockey-jersey?ID=20646528field_name=Set-Cookie, cookie_name=visitor_fpid_id, attribute_name=SameSite, attribute_value=Lax,shippingCountry=US
https://www.chanel.com/it/moda/servizi/boutique-saks-fifth-avenue-troy/field_name=Set-Cookie, cookie_name=boutiqueApp, attribute_name=SameSite, attribute_value=Noneit
https://www.kgirls.net/issue/1225259field_name=Set-Cookie, cookie_name=PHPSESSID, attribute_name=SameSite, attribute_value=1
https://theqoo.net/nmixxfield_name=Set-Cookie, cookie_name=PHPSESSID, attribute_name=SameSite, attribute_value=1
https://www.toprecepty.cz/tipy-triky/jak-pripravit-fenykl-oblibene-recepty/field_name=Set-Cookie, cookie_name=webpSupport, attribute_name=SameSite, attribute_value=1

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	15,437	22.7%	0.1%
akamai	12,887	19.0%	0.1%
cloudflare	11,985	17.6%	0.0%
vercel	9,832	14.5%	0.5%
nextjs	2,004	2.9%	0.0%
azure-front-door	1,786	2.6%	0.1%
cloudfront	1,483	2.2%	0.0%
apache	311	0.5%	0.0%
fastly	131	0.2%	0.0%

WARNSET_COOKIE_EMPTY_DOMAIN~13 sites (0.0%)20,237

The %(cookie_name)s cookie has an empty domain.

Samples (2)

https://www.a1.net/ueber-a1/verantwortungfield_name=Set-Cookie, cookie_name=vnsh-cdn-ct
https://guard.io/lp?n=WEIRDDARKNESS&coupon_code=WEIRDDARKNESS&utm_source=podcast&utm_campaign=weirddarkness&utm_adgroup_id=107field_name=Set-Cookie, cookie_name=utm_source

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
akamai	14,090	69.6%	0.1%
cloudfront	3,646	18.0%	0.0%
nginx	3,391	16.8%	0.0%
envoy	1,443	7.1%	0.0%
cloudflare	326	1.6%	0.0%
fastly	163	0.8%	0.0%
nextjs	2	0.0%	0.0%

WARNSET_COOKIE_PARTITIONED_NO_SECURE~1 sites (0.0%)52,632

The %(cookie_name)s cookie has the Partitioned attribute but is missing the Secure attribute.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
apache	52,632	100.0%	0.4%

WARNSET_COOKIE_EMPTY_MAX_AGE~1 sites (0.0%)1,603

The %(cookie_name)s cookie has an empty Max-Age.

Samples (1)

https://matchtv.ru/football/segunda/matchtvvideo_NI2294234_translation_Seuta___Granada_Chempionat_Ispanii_Segunda_Tur_27field_name=Set-Cookie, cookie_name=app_upstream_v4

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	1,603	100.0%	0.0%

INFOSET_COOKIE_VALUE_TOO_LARGE~10,152 sites (20.6%)38,496,726

The %(cookie_name)s Set-Cookie value is large.

Samples (5)

https://booth.pm/en/browse/Acrylic%20Block?in_stock=true&sort=new&tags%5B%5D=%E7%A2%A7%E8%93%9D%E8%88%AA%E7%BA%BFfield_name=Set-Cookie, cookie_name=_plaza_session_nktz7u, set_cookie_value_length=796 bytes
https://cafef.vn/chong-ba-pham-minh-huong-lam-pho-chu-tich-vndirect-188241013104517439.chnfield_name=Set-Cookie, cookie_name=laravel_session, set_cookie_value_length=342 bytes
https://luma.com/0bdes55ofield_name=Set-Cookie, cookie_name=__cf_bm, set_cookie_value_length=199 bytes
https://naurok.com.ua/robochiy-arkush-vulkanizm-ta-vulkani-dlya-6-klasu-436223.htmlfield_name=Set-Cookie, cookie_name=_csrf, set_cookie_value_length=166 bytes
https://nld.com.vn/nhung-ngoi-nha-cho-nang-nghia-tinh-196250408211148004.htmfield_name=Set-Cookie, cookie_name=laravel_session, set_cookie_value_length=342 bytes

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	13,301,005	34.6%	43.4%
akamai	12,855,004	33.4%	100.5%
nginx	5,529,164	14.4%	20.9%
envoy	4,157,029	10.8%	86.4%
cloudfront	3,302,372	8.6%	19.6%
nextjs	2,482,201	6.4%	30.0%
apache	2,397,955	6.2%	18.2%
fastly	1,187,697	3.1%	12.0%
vercel	614,512	1.6%	32.4%
nuxt	224,096	0.6%	21.9%
… 1 more layers not shown …

GOODSET_COOKIE_HARDENED~5,223 sites (10.6%)9,809,834

This response sets cookies restricted with Secure, HttpOnly, and SameSite.

Samples (5)

https://buymeacoffee.com/swatia/landscape-tutorial-only-primary-colors-detailed-instructionfield_name=Set-Cookie, cookie_names=`buymeacoffee_v2_session`
https://discord.com/invite/hz5QjrvHgUfield_name=Set-Cookie, cookie_names=`__dcfduid`, `__sdcfduid`
https://github.com/fontra/fontra-pak/releases/tag/2025.12.0field_name=Set-Cookie, cookie_names=`_gh_sess`, `logged_in`
https://p-bandai.jp/item/item-1000159523/field_name=Set-Cookie, cookie_names=`TS01dc4fc6`, `TS01fbc48b`, `TS012bda86`
https://uni-tuebingen.de/login/?redirect_url=https%3A%2F%2Funi-tuebingen.de%2Fsecuredl%2Fsdl-eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzA4NDU3ODEsImV4cCI6MTc3MDkzNTc4MSwidXNlciI6MCwiZ3JvdXBzIjpbMCwtMV0sImZpbGUiOiJmaWxlYWRtaW4vVW5pX1R1ZWJpbmdlbi9GYWt1bHRhZXRlbi9QaGlsb0dlc2NoaWNodGUvSGlzdG9yaXNjaGVzX1NlbWluYXIvRGVrYW5hdC9QSS9HcnVuZG1vZHVsLTEtU2NoZWluX0d5bVBPLnBkZiIsInBhZ2UiOjEzNDk3N30.KSeAyS1LYLvwvRETr53C71LaMS6Dq_JltpK0lb2mRM0%2FGrundmodul-1-Schein_GymPO.pdf&cHash=2f2909f19623e283b814606e1ac47da6field_name=Set-Cookie, cookie_names=`__Secure-typo3nonce_fC3KVpYYEAqmMS1a9HVNNw`

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	2,859,176	29.1%	9.3%
nginx	1,737,247	17.7%	6.6%
cloudfront	1,239,213	12.6%	7.3%
akamai	848,663	8.7%	6.6%
envoy	806,030	8.2%	16.8%
apache	660,887	6.7%	5.0%
nextjs	459,708	4.7%	5.6%
fastly	379,105	3.9%	3.8%
azure-front-door	187,700	1.9%	13.1%
vercel	139,604	1.4%	7.4%
… 1 more layers not shown …

Cross-origin resource sharing 7,667,974 occurrences across 3 note types (0.5% of occurrences)

BADCORS_PREFLIGHT_ONLY~3,583 sites (7.3%)7,279,124

CORS headers are only allowed in preflight responses.

Samples (5)

https://www.accuweather.com/de/km/national/satellite-enhancedheaders=Access-Control-Allow-Headers, Access-Control-Allow-Methods
https://www.aliexpress.com/star/en/d-article-4000032563432817.htmlheaders=Access-Control-Allow-Methods
https://www.em.com.br/app/noticia/economia/2023/02/19/internas_economia,1459684/carnaval-de-bh-folioes-levam-bebidas-para-nao-comprar-de-ambulantes.shtmlheaders=Access-Control-Allow-Headers, Access-Control-Allow-Methods
https://www.forrester.com/report/Social-Technographics-Reveals-Who-Your-Social-Audience-Is-And-How-To-Approach-Them/RES128037headers=Access-Control-Allow-Headers, Access-Control-Allow-Methods, Access-Control-Max-Age
https://www.foxnews.com/politics/arizona-democrat-latest-official-tying-roe-wade-economyheaders=Access-Control-Allow-Headers, Access-Control-Allow-Methods, Access-Control-Max-Age

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	1,852,772	25.5%	6.0%
nginx	1,405,818	19.3%	5.3%
akamai	1,172,246	16.1%	9.2%
cloudfront	756,617	10.4%	4.5%
apache	685,244	9.4%	5.2%
fastly	623,040	8.6%	6.3%
nextjs	491,716	6.8%	5.9%
envoy	241,417	3.3%	5.0%
azure-front-door	114,358	1.6%	8.0%
nuxt	79,401	1.1%	7.7%
… 1 more layers not shown …

BADACAO_MULTIPLE_VALUES~130 sites (0.3%)388,388

Access-Control-Allow-Origin should not have multiple values.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	259,547	66.8%	0.8%
akamai	76,758	19.8%	0.6%
apache	42,389	10.9%	0.3%
nginx	31,043	8.0%	0.1%
envoy	23,869	6.1%	0.5%
nextjs	18,385	4.7%	0.2%
vercel	6,968	1.8%	0.4%
azure-front-door	4,096	1.1%	0.3%
cloudfront	3,770	1.0%	0.0%
fastly	1,943	0.5%	0.0%
… 1 more layers not shown …

BADCORS_MAX_AGE_INVALID~3 sites (0.0%)462

Access-Control-Max-Age must be an integer.

Samples (1)

https://selectel.ru/onboarding/field_name=Access-Control-Max-Age, ref_uri=https://fetch.spec.whatwg.org/#http-access-control-max-age

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	264	57.1%	0.0%
nuxt	52	11.3%	0.0%
envoy	7	1.5%	0.0%
akamai	7	1.5%	0.0%

Content negotiation 2,324,466 occurrences across 2 note types (0.2% of occurrences)

WARNACCEPT_CH_MISSING_VARY~842 sites (1.7%)2,295,705

Accept-CH lists fields that are missing from Vary.

Samples (5)

https://ameblo.jp/energyofsmile/image-12926646818-15663145556.htmlfield_name=Accept-CH, missing_fields=Sec-CH-UA-Full
https://cadenaser.com/audio/ser_caceres_hoyporhoycaceres_20260213_130538_140000/field_name=Accept-CH, missing_fields=Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-Device-Memory
https://elpais.com/deportes/2003/09/03/actualidad/1062573714_850215.htmlfield_name=Accept-CH, missing_fields=Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-Device-Memory
https://www.foxnews.com/video/6308038251112field_name=Accept-CH, missing_fields=Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness
https://www.google.bj/url?q=http://aurelie-news.blogspot.com-2-2-2-2-2-2-2-2-2-2-2-2-2-2field_name=Accept-CH, missing_fields=Sec-CH-Prefers-Color-Scheme

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudfront	352,395	15.4%	2.1%
akamai	297,374	13.0%	2.3%
cloudflare	264,466	11.5%	0.9%
fastly	205,679	9.0%	2.1%
envoy	204,090	8.9%	4.2%
apache	121,055	5.3%	0.9%
nginx	117,231	5.1%	0.4%
nextjs	107,666	4.7%	1.3%
azure-front-door	77,311	3.4%	5.4%
vercel	27,140	1.2%	1.4%
… 1 more layers not shown …

INFOVARY_NEGOTIATE~131 sites (0.3%)28,761

Transparent Content Negotiation is not widely supported.

Samples (5)

https://www.debian.org/legal/debian-community-sitefield_name=Vary
https://www.uh.edu/ehs/commons/bloodborne-pathogens/indexfield_name=Vary
https://www.w3.org/html/wg/tracker/issues/90field_name=Vary
https://www.wolfram.com/field_name=Vary
https://meshok.net/faq/index.php?sid=78172608&lang=ru&action=artikel&cat=6&id=28&artlang=rufield_name=Vary

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
apache	23,464	81.6%	0.2%
cloudflare	3,941	13.7%	0.0%
nginx	840	2.9%	0.0%
fastly	52	0.2%	0.0%
akamai	32	0.1%	0.0%
cloudfront	5	0.0%	0.0%
envoy	2	0.0%	0.0%

Partial content 30,919 occurrences across 4 note types (0.0% of occurrences)

BADCONTENT_RANGE_MISSING_UNIT~3 sites (0.0%)13,166

The Content-Range header is missing a unit (e.g., 'bytes').

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	10,205	77.5%	0.0%
envoy	84	0.6%	0.0%

BADRANGE_INVALID~1 sites (0.0%)1

The Range header is invalid.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	1	100.0%	0.0%

WARNCONTENT_RANGE_MEANINGLESS~37 sites (0.1%)17,674

This response shouldn't have a Content-Range header.

Samples (1)

https://www.pitc.com.pk/index.php/tenders-procurements?download=501:rfp-no-pitc-g-224-105-09-2024-support-and-maintenance-of-meter-data-management-mdm-software&start=25field_name=Content-Range

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	10,889	61.6%	0.0%
apache	2,486	14.1%	0.0%
azure-front-door	1,010	5.7%	0.1%
vercel	583	3.3%	0.0%
envoy	109	0.6%	0.0%
cloudflare	33	0.2%	0.0%
cloudfront	6	0.0%	0.0%
nextjs	5	0.0%	0.0%

WARNUNKNOWN_RANGE~3 sites (0.0%)78

This response advertises support for non-standard range-units.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	3	3.8%	0.0%
apache	1	1.3%	0.0%
cloudfront	1	1.3%	0.0%

Connection 19,237 occurrences across 1 note types (0.0% of occurrences)

BADALTSVC_CLEAR_LIST~7 sites (0.0%)19,237

The Alt-Svc 'clear' token cannot be used with other values.

Samples (2)

https://mixpanel.com/home/?utm_source=MaxMart&utm_medium=referral&utm_campaign=product_reviewsfield_name=Alt-Svc
https://www.papercut.com/blog/print_tips/managing-legacy-print-infrastructure-when-acquiring-a-new-business/field_name=Alt-Svc

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nextjs	1,845	9.6%	0.0%
cloudflare	748	3.9%	0.0%
nginx	365	1.9%	0.0%
fastly	317	1.6%	0.0%

General 461,903,409 occurrences across 50 note types (32.2% of occurrences)

BADREQUEST_HDR_IN_RESPONSE~14,690 sites (29.8%)28,349,539

"%(field_name)s" isn't valid in a response.

Samples (5)

https://gitee.com/alchemystar/Lancercategory=categories.CACHING, field_name=Pragma
https://ndtv.in/bollywood/pakistan-people-liking-dhurandhar-film-actor-naveen-kaushik-said-humne-muslims-ko-gaali-nahi-di-9956494category=categories.CACHING, field_name=Pragma
https://padlet.com/hasmatag98/intro-to-padlet-ybl4qehfusmeoeu7category=categories.CACHING, field_name=Pragma
https://pastelink.net/report?url=gtv2t20pcategory=categories.CACHING, field_name=Pragma
https://rapidgator.net/file/b784405f20940d3ba77ad1fc74098cb5/z6fbs.Blend.Any.Picture.To.Any.Surface.In.Photoshop.By.Mastering.Displacement.Maps.part1.rar.htmlcategory=categories.CACHING, field_name=Pragma

field_name

Value	Note fires	Header occurrences	Fires per occurrence
Pragma Samples (15) https://gitee.com/alchemystar/Lancer`['must-revalidate, no-cache, private']` https://ndtv.in/bollywood/pakistan-people-liking-dhurandhar-film-actor-naveen-kaushik-said-humne-muslims-ko-gaali-nahi-di-9956494`['public']` https://padlet.com/hasmatag98/intro-to-padlet-ybl4qehfusmeoeu7`['no-cache']` https://pastelink.net/report?url=gtv2t20p`['no-cache']` https://rapidgator.net/file/b784405f20940d3ba77ad1fc74098cb5/z6fbs.Blend.Any.Picture.To.Any.Surface.In.Photoshop.By.Mastering.Displacement.Maps.part1.rar.html`['no-cache', 'no-cache']` https://ria.ru/20191013/1559727503.html`['no-cache']` https://sway.com/s/OxJhmeCsAogVVRRY/embed`['no-cache']` https://t.me/enter_to_ai/529`['no-cache']` https://www.acer.com/au-en/support/product-support/LiquidZ130/downloads`['no-cache']` https://www.airtel.in/plans/postpaid/mirzapur/jalalpur-mafi/`['no-cache']` https://www.alibaba.com/product-detail/Easy-Cleaning-Kitchen-Folding-Windproof-Broom_50046077573.html?spm=a2793.11769229.0.0.197b3e5fjVXxtc`['no-cache']` https://www.allstate.com/lps/business-quote?product=BI&intcid=/underwriting-companies%7CNavigationHeader%7Cquote_button`['no-cache']` https://www.att.com/device-support/article/wireless/KM1385901/Samsung/GalaxySIIII747`['no-cache']` https://www.betterhelp.com/therapists/ks/bird-city/`['no-cache']` https://www.blogger.com/profile/12711924166033819956`['no-cache']`	27,337,916	27,337,916	100.00%
User-Agent Samples (15) https://www.bigbasket.com/pd/40217420/too-yumm-potato-chips-classic-salted-130-g/?nc=sis-prod-list&t_pos_sec=1&t_pos_item=24&t_s=Classic%2520Salted%2520Potato%2520Chips`['CCBot/2.0 (https://commoncrawl.org/faq/)']` https://www.lg.com/es/business/display-profesional/commercial-tv/servidores/`['Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36']` https://www.thairath.co.th/sport/eurofootball/premierleague/2675505`['CCBot/2.0 (https://commoncrawl.org/faq/)']` https://www.kiabi.com/?pn=67`['CCBot/2.0 (https://commoncrawl.org/faq/)']` https://www.immobiliare.it/agenzie-immobiliari/monte-argentario/`['CCBot/2.0 (https://commoncrawl.org/faq/)']` https://doodle.com/group-poll/participate/bkXKXD5d`['CCBot/2.0 (https://commoncrawl.org/faq/)']` https://www.verizon.com/connected-smartwatches/apple-watch-ultra-2/?CMP=ini_m_x_pr_oth_pr1_24_09_nr_ap16`['meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)']` https://www.sbicard.com/en/personal/benefits/easy-access-channels/mobile-app.page`['CCBot/2.0 (https://commoncrawl.org/faq/)']` https://www.falabella.com/falabella-cl`['Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36']` https://www.nerdwallet.com/business/loans/reviews/fora-financial`['CCBot/2.0 (https://commoncrawl.org/faq/)']` https://sprig.com/customers/ramp`['Amazon CloudFront']` https://www.ubisoft.com/legal/export/documents/sv-SE-ubisoftplusterms-2.1.pdf`['CCBot/2.0 (https://commoncrawl.org/faq/)']` https://www.sodimac.cl/sodimac-cl`['Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)']` https://www.sports.ru/hockey/blogs/3149027.html`['CCBot/2.0 (https://commoncrawl.org/faq/)']` https://www.psychologytoday.com/sg/quizzes/dating-red-flags-test`['CCBot/2.0 (https://commoncrawl.org/faq/)']`	217,568	217,568	100.00%
Accept-Language Samples (11) https://www.bigbasket.com/pd/40217420/too-yumm-potato-chips-classic-salted-130-g/?nc=sis-prod-list&t_pos_sec=1&t_pos_item=24&t_s=Classic%2520Salted%2520Potato%2520Chips`['en-US,en;q=0.5']` https://www.lg.com/es/business/display-profesional/commercial-tv/servidores/`['en-US,en;q=0.5']` https://www.thairath.co.th/sport/eurofootball/premierleague/2675505`['en-US,en;q=0.5']` https://www.thermofisher.com/us/en/home/industrial/spectroscopy-elemental-isotope-analysis/molecular-spectroscopy/raman-microscopy/resources/raman-spectroscopy-academy.html`['en']` https://www.immobiliare.it/agenzie-immobiliari/monte-argentario/`['en-US,en;q=0.5']` https://doodle.com/group-poll/participate/bkXKXD5d`['en-US,en;q=0.5']` https://www.ubisoft.com/legal/export/documents/sv-SE-ubisoftplusterms-2.1.pdf`['en-US,en;q=0.5']` https://www.sports.ru/hockey/blogs/3149027.html`['en-US,en;q=0.5']` https://www.psychologytoday.com/sg/quizzes/dating-red-flags-test`['en-US,en;q=0.5']` https://zaloapp.com/qr/p/1pvj8g8lj8mb9`['en-US,en;q=0.5']` https://www.jetblue.com/?utm_source=www.bookeditonpoints.com&utm_medium=referral&utm_campaign=get-the-most-value-from-your-points-miles-by-doing-this`['en-US,en;q=0.5']`	195,478	195,478	100.00%
Accept Samples (13) https://www.bigbasket.com/pd/40217420/too-yumm-potato-chips-classic-salted-130-g/?nc=sis-prod-list&t_pos_sec=1&t_pos_item=24&t_s=Classic%2520Salted%2520Potato%2520Chips`['text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8']` https://www.lg.com/es/business/display-profesional/commercial-tv/servidores/`['text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8']` https://www.thairath.co.th/sport/eurofootball/premierleague/2675505`['text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8']` https://www.immobiliare.it/agenzie-immobiliari/monte-argentario/`['text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8']` https://www.tate.org.uk/art/research-publications/jmw-turner/joseph-mallord-william-turner-a-stormy-landscape-with-an-obelisk-or-tower-above-a-r1183690`['text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8,text/html']` https://doodle.com/group-poll/participate/bkXKXD5d`['text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8']` https://www.energy.gov/edf/articles/fy-2023-apsr-overview-slide-deck`['application/pdf']` https://www.ubisoft.com/legal/export/documents/sv-SE-ubisoftplusterms-2.1.pdf`['text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8']` https://www.sports.ru/hockey/blogs/3149027.html`['text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8']` https://www.coral.co.uk/en/sports/competitions/football/football-england/the-central-league`['text/html;charset=utf-8']` https://www.psychologytoday.com/sg/quizzes/dating-red-flags-test`['text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8']` https://zaloapp.com/qr/p/1pvj8g8lj8mb9`['text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8']` https://www.jetblue.com/?utm_source=www.bookeditonpoints.com&utm_medium=referral&utm_campaign=get-the-most-value-from-your-points-miles-by-doing-this`['text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8']`	179,953	179,953	100.00%
Accept-Encoding Samples (7) https://www.accenture.com/us-en/insights/technology/generative-ai?c=acn_glb_generativeai-lagoogle_13620192&n=psgs_0423&gclid=Cj0KCQjw6cKiBhD5ARIsAKXUdyaj7diSl4OrnyeMf5tS1S3wcaNUnunmz2XDC2DNYF6LN0df_qEsUbQaAjBMEALw_wcB&gclsrc=aw.ds`['br']` https://www.autodesk.com/community/gallery/project/102915/iot-plant-soil-monitor`['gzip']` https://www.invisalign.com/privacy-statement`['gzip, deflate, br']` https://www.sports.ru/hockey/blogs/3149027.html`['gzip']` https://www.sky.com/shop/mobile/phones/nokia/nokia-105-(2019)`['gzip, compress, br']` https://zaloapp.com/qr/p/1pvj8g8lj8mb9`['zstd, br, gzip']` https://mailchimp.com/givewhereyoulive/programs/`['br;q=1.0, gzip;q=0.8, *;q=0.1']`	103,253	103,253	100.00%
Access-Control-Request-Method Samples (6) https://fantia.jp/fanclubs/216301`['']` https://www.porsche.com/usa/accessoriesandservice/porschefinancialservices/protectionplan/gap/`['GET,HEAD,OPTIONS,POST,PUT']` https://adapty.io/llms.txt`['GET']` https://www.zoom.com/ko/`['GET']` https://zoom.us/wb/doc/MvjoZtWCRV6Wwqjc8oG__Q`['GET']` https://www.appfolio.com/case-studies/somak-property-management`['']`	83,074	83,074	100.00%
If-Modified-Since Samples (10) https://www.indiatoday.in/visualstories/entertainment/5-police-k-dramas-as-addictive-as-good-boy-251348-24-07-2025?utm_source=rss`['Thu, 24 Jul 2025 14:48:09 GMT']` https://www.lg.com/cz/podpora/produktova-podpora/cs-49UF695V.AEU/`['Wed, 26 Mar 2025 08:29:06 GMT']` https://www.bigbasket.com/pb/tata-gofit/?nc=fa`['Wed, 12 Feb 2025 18:27:52 GMT']` https://www.aajtak.in/live-score/cricket/usa-south-africa-live-cricket-scorecard-239643`['Sat, 14 Mar 2026 20:26:29 GMT']` https://www.immobiliare.it/agenzie-immobiliari/monte-argentario/`['Sun, 23 Mar 2025 05:37:13 GMT']` https://doodle.com/group-poll/participate/bkXKXD5d`['Sun, 09 Nov 2025 01:25:01 GMT']` https://sprig.com/customers/ramp`['Wed, 10 Dec 2025 23:25:24 GMT']` https://www.psychologytoday.com/ca/tests/career/burnout-at-work`['Sat, 19 Apr 2025 03:37:52 GMT']` https://zaloapp.com/qr/p/um53q6rg6vdp?src=qr`['Thu, 28 Sep 2023 04:53:32 GMT']` https://www.sports.ru/football/blogs/3157759.html`['Mon, 09 Aug 2010 20:26:38 GMT']`	82,586	82,102	100.59%
Origin Samples (3) https://www.iol.pt/fotos/e-o-paraiso-para-quem-adora-ceramica-ha-pecas-a-partir-de-1-euro/68a2f70ad34ef72ee4498869`['iol']` https://www.yoox.com/vn/Footer/Countries?hasAbsoluteUrl=False`['yoox-head-prd-01']` https://www.lg.com/hk/monitors/gaming/32gs75q-b/`['https://www.lg.com']`	45,149	45,149	100.00%
Access-Control-Request-Headers Samples (2) https://www.u-tokyo.ac.jp/biblioplaza/ja/L_00104.html`['*']` https://iz.ru/news`[': Origin, X-Requested-With, Content-Type, Accept, If-None-Match']`	38,232	38,232	100.00%
Host Samples (1) https://www.mango-office.ru/journal/for-marketing/osnovy/kpi-dlya-marketologa/`['www.mango-office.ru']`	34,365	34,365	100.00%
Cookie Samples (9) https://www.thermofisher.com/order/catalog/product/10091148 https://www.kwai.com/discover/Me_siga- https://prosv.ru/catalog/audioprilozheniya-gabrielyan-oleg-sargisovich/ https://www.lg.com/hu/projektorok/cinebeam-q/ https://www.immobiliare.it/vendita-case/udine-provincia/ https://www.ubisoft.com/legal/documents/privacypolicy/en-US https://snackvideo.com/foryou https://www.se.com/fr/fr/work/services/formation/ https://www.sports.ru/football/blogs/3146183.html	18,673	18,673	100.00%
From Samples (4) https://www.lg.com/de/business/ess/ueber-lg-energiespeichersysteme/`['oai-searchbot(at)openai.com']` https://www.immobiliare.it/mercato-immobiliare/sicilia/torretta/`['googlebot(at)googlebot.com']` https://sprig.com/blog/customer-needs-analysis`['crawler-support@perplexity.ai']` https://www.thairath.co.th/sport/thaifootball/changsuek/2596996`['oai-searchbot(at)openai.com']`	6,277	6,277	100.00%
Max-Forwards	3,698	3,698	100.00%
Authorization Samples (2) https://www.checkpoint.com/resources/items/datasheet-1-day-android-hacking-course-by-payatu https://www.lg.com/hk/monitors/gaming/32gs75q-b/	2,379	0	—
Referer Samples (8) https://www.myworkday.com/wisconsin/learning/course/40465ee041ec1001c0de3245b14f0007?type=9882927d138b100019b928e75843018d&record=6ecbab1ce5901001a4f5825bd3670001&metadataEntryPoint=%2Fwisconsin%2Flearning%2Fmylearning`['/wisconsin/learning/course/40465ee041ec1001c0de3245b14f0007?type=9882927d138b100019b928e75843018d&record=6ecbab1ce5901001a4f5825bd3670001&metadataEntryPoint=%2Fwisconsin%2Flearning%2Fmylearning']` https://www.lg.com/hu/projektorok/cinebeam-q/`['https://www.lg.com/hu/projektorok/lg-PW800-led-projektor']` https://www.immobiliare.it/vendita-case/udine-provincia/`['https://www.immobiliare.it/vendita-case/udine-provincia/']` https://www.usf.edu/business/desrist/program.aspx`['no-referrer-when-downgrade']` https://sprig.com/blog/product-adoption-metrics`['https://www.google.com/']` https://www.ubisoft.com/legal/documents/privacypolicy/en-US`['https://connect.ubisoft.com/']` https://www.sodimac.cl/sodimac-cl/articulo/110318486/Pino-Dimensionado-Verde-1x4-3,2-m/110318491`['https://www.google.com/']` https://www.santander.com.br/amigodevalor/recibos/`['https://www.santander.com.br']`	707	0	—
Range	222	0	—
If-None-Match Samples (1) https://www.immobiliare.it/agenzie-immobiliari/gruppi/frimm/`['force-revalidate']`	9	0	—

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	6,336,305	22.4%	20.7%
nginx	6,033,310	21.3%	22.8%
akamai	4,699,436	16.6%	36.7%
apache	4,158,854	14.7%	31.5%
cloudfront	1,774,834	6.3%	10.5%
fastly	851,997	3.0%	8.6%
envoy	755,539	2.7%	15.7%
nextjs	610,284	2.2%	7.4%
azure-front-door	319,659	1.1%	22.4%
vercel	277,925	1.0%	14.7%
… 1 more layers not shown …

BADDATE_INCORRECT~8,900 sites (18.0%)2,874,575

The server's clock is %(clock_skew_string)s.

Samples (5)

https://www.energy.gov/eere/fuelcells/articles/electrocat-lab-consortium-overview-webinarfield_name=Date, clock_skew_string=10 hours behind
https://www.fresha.com/lvp/the-royale-barber-tulkara-street-manly-west-wrVwJ3field_name=Date, clock_skew_string=3 days behind
https://www.indiamart.com/karsh-biotech/pharmaceutical-injection.htmlfield_name=Date, clock_skew_string=4 weeks behind
https://www.psu.edu/news/academics/story/new-executive-director-eager-continue-reimagining-information-technologyfield_name=Date, clock_skew_string=4 weeks behind
https://www.salon.com/topic/adnan-latiffield_name=Date, clock_skew_string=14 hours behind

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudfront	1,246,827	43.4%	7.4%
nginx	792,031	27.6%	3.0%
apache	571,744	19.9%	4.3%
nextjs	193,733	6.7%	2.3%
vercel	103,393	3.6%	5.5%
envoy	94,227	3.3%	2.0%
fastly	32,039	1.1%	0.3%
cloudflare	14,862	0.5%	0.0%
akamai	7,756	0.3%	0.1%
nuxt	3,357	0.1%	0.3%
… 1 more layers not shown …

BADBAD_DATE_SYNTAX~4,190 sites (8.5%)6,584,123

The %(field_name)s header's value isn't a valid date.

Samples (5)

https://preply.com/zh/tutor/4017180category=categories.CACHING, field_name=Expires
https://tengrinews.kz/story/transportnye-policeiskie-kazaxstana-prinimaiut-zaloby-277787/category=categories.CACHING, field_name=Expires
https://web.dev/articles/ps-on-the-web?authuser=0category=categories.CACHING, field_name=Expires
https://www.bing.com/videos/search?cc=cn&q=Trump+signs+first+major+cryptocurrency+bill&qft=+filterui:duration-long+filterui:site-sina.com.cn+filterui:price-paid+filterui:videoage-lt1440&FORM=VRFLTRcategory=categories.CACHING, field_name=Expires
https://www.geocaching.com/geocache/GC4XT02category=categories.CACHING, field_name=Expires

field_name

Value	Note fires	Header occurrences	Fires per occurrence
Expires Samples (15) https://preply.com/zh/tutor/4017180`['0']` https://tengrinews.kz/story/transportnye-policeiskie-kazaxstana-prinimaiut-zaloby-277787/`['-1']` https://web.dev/articles/ps-on-the-web?authuser=0`['0']` https://www.bing.com/videos/search?cc=cn&q=Trump+signs+first+major+cryptocurrency+bill&qft=+filterui:duration-long+filterui:site-sina.com.cn+filterui:price-paid+filterui:videoage-lt1440&FORM=VRFLTR`['-1']` https://www.geocaching.com/geocache/GC4XT02`['-1']` https://www.kleinanzeigen.de/s-anzeige/greif-zu-zu-verschenken/3324476526-192-2542`['0']` https://www.netshoes.com.br/bermudas/trinys`['0']` https://www.wolterskluwer.com/ko-kr/solutions/ovid/master-techniques-in-orthopaedic-surgery-the-spine-5075`['-1']` https://korrespondent.net/sport/football/3987531-slezy-brazylyy-schaste-pobedytelei-luchshye-foto-dnia-na-chm-2018`['-1']` https://nld.com.vn/tinh-yeu-hon-nhan/toi-thay-minh-chang-khac-gi-mot-nguoi-giup-viec-20131223075519767.htm`['-1']` https://www.aruba.it/magazine/fatturazione-elettronica/e-fattura-e-consumatore-finale-consultazione-nel-cassetto-fiscale-senza-richiesta.aspx`['-1']` https://www.boursorama.com/cours/3tGL/`['0']` https://www.cargurus.com/Cars/l-Used-2024-Nissan-Ariya-Santa-Barbara-c33266_L2546`['0']` https://www.magicbricks.com/residential-projects-tirukazhukundram-in-chennai-nprid`['0']` https://www.mediafire.com/file/25n2s73kksy54fh/Dein+bus+2+Travego+17+.png`['0']`	5,748,980	44,968,544	12.78%
Last-Modified Samples (15) https://www.indiatoday.in/education-today/gk-current-affairs/story/quote-of-the-day-by-dr-zakir-husain-the-quality-of-its-education-is-inescapably-2864730-2026-02-08`['Sun Feb 08 2026 07:30:23 GMT+0530 (India Standard Time)']` https://www.vedomosti.ru/opinion/articles/2019/04/09/798618-zachem-rossii-studenti`['Tue, 09 Apr 2019 09:40:32 GMT+3']` https://www.berlin.de/sen/verbraucherschutz/aufgaben/tierschutz/tierseuchen/2025-06-03-bvd-steglitz-zehlendorf.pdf?ts=1753252907`['Wed, 23 Jul 2025 08:41:47 +0200']` https://www.cnr.it/it/trasparenza/bandi-gara-contratti/contratto/2023-22266`['Tuesday, 10-Mar-2026 10:37:18 UTC']` https://www.livemint.com/market/ipo/prizor-viztech-ipo-subscription-to-start-from-july-12-price-band-set-at-rs-82-87-apiece-11720523688716.html`['Tue, 9 Jul 2024 12:13:12 GMT']` https://topwar.ru/86619-prohodit-ispytaniya-kolesnyy-variant-koalicii.html`['Sat, 08 Mar 2025 14:09:20 +0300 GMT']` https://www.ukr.net/news/details/sport/116260418.html`['Mon, 02 Mar 2026 08:12:16 +0000']` https://www.hubspot.com/pricing/marketing?hubs_content=ecosystem.hubspot.com/marketplace/modules/mega-menu-module-by-syngrid-technologies&hubs_content-cta=nav-pricing`['Mon, 09 Mar 2026 19:04:31 UTC']` https://www.hindustantimes.com/videos/india/pdp-slams-farooq-s-kashmiris-are-thieves-remark/video-cZNBzOBCe15A6dHGxjbtcO.html`['Mon, 3 Mar 2014 07:44:50 GMT']` https://feedly.com/i/subscription/feed/http:/feeds.feedburner.com/hawk-eye/Qamb`['Fri, 06 Mar 2026 02:11:06 -0800']` https://cointelegraph.com/news/tether-stablecoin-usdt-profits-us-treasury-holdings-annual-report?utm_source=CryptoNews&utm_medium=app`['Wednesday, 11-Mar-2026 11:05:36 UTC']` https://www.kp.ru/daily/27762.5/5209885/`['Fri, 13 Feb 2026 16:19:21 UTC']` https://videa.hu/player?f=6.22612.51571.0&enableJsApi=1&videoFinishedEvent=1&versionChangeCompleteEvent=1&enableAnimGif=1&enableSnapshotApi=1&lang=en&s=%7B%22loc%22%3A1%7D`['Wed, 11 Mar 2026 16:29:00GMT']` https://www.verizon.com/business/service_guide/reg/cp_national_unified_messaging_service.htm`['Thu Jun 06 2024 19:21:43 GMT+0000 (Coordinated Universal Time)']` https://www.abplive.com/videos/states/up-uk-badrinath-dham-kapaat-opens-for-devotees-2687399/amp`['Sun, 12 05 2024 07:07:32 GMT']`	757,806	25,956,008	2.92%
Date Samples (3) https://vietjack.com/de-kiem-tra-lop-1/de-thi-tieng-viet-lop-1-giua-hoc-ki-1-2021.jsp`['Tue, 10 Mar 2026 04:54:40 CDT']` https://www.francetravail.fr/actualites/le-dossier.html`['Wed, 11 Mar 2026 12:00:13 CET']` https://www.cdnvideo.ru/solutions/iskusstvennyy-intellekt-ai/`['Fry, 13 Mar 2026 22:4629 GMT']`	77,337	122,298,911	0.06%

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	1,686,368	25.6%	5.5%
nginx	1,314,247	20.0%	5.0%
apache	588,564	8.9%	4.5%
cloudfront	521,867	7.9%	3.1%
akamai	407,741	6.2%	3.2%
envoy	201,525	3.1%	4.2%
fastly	195,749	3.0%	2.0%
azure-front-door	188,610	2.9%	13.2%
nextjs	52,578	0.8%	0.6%
nuxt	46,233	0.7%	4.5%
… 1 more layers not shown …

BADSINGLE_HEADER_REPEAT~3,397 sites (6.9%)4,551,532

Only one %(field_name)s field is allowed in a message.

Samples (5)

https://robinhood.com/us/en/stocks/NUVA/field_name=Strict-Transport-Security
https://www.accenture.com/in-en/careers/jobdetails?id=ATCI-5224533-S1917588_enfield_name=X-Frame-Options
https://www.acer.com/au-en/support/product-support/R856TN/downloadsfield_name=Strict-Transport-Security
https://www.ecwid.com/es/blog/start-online-shoe-store.htmlfield_name=X-Frame-Options
https://www.groupon.com/local/belle-glade-fl/massagefield_name=X-Frame-Options

field_name

Value	Note fires	Header occurrences	Fires per occurrence
X-Frame-Options Samples (15) https://www.accenture.com/in-en/careers/jobdetails?id=ATCI-5224533-S1917588_en`['SAMEORIGIN', 'SAMEORIGIN']` https://www.ecwid.com/es/blog/start-online-shoe-store.html`['SAMEORIGIN', 'SAMEORIGIN']` https://www.groupon.com/local/belle-glade-fl/massage`['DENY', 'SAMEORIGIN']` https://www.okx.com/en-us/price/detextify-detx`['SAMEORIGIN', 'DENY']` https://www.wipo.int/publications/fr/search.jsp?&pubYear=2023&sort=pubDate&lang=ES`['ALLOW-FROM https://wipo-world.wipo.int/ https://ip-sdgs.wipo.int/ https://traditional-knowledge.wipo.int/', 'DENY']` https://www.argentina.gob.ar/justicia/chicosextraviados/51633-norma-marquez`['SAMEORIGIN', 'SAMEORIGIN']` https://www.emarketer.com/content/global-media-intelligence-2024-middle-east-and-africa`['SAMEORIGIN', 'SAMEORIGIN']` https://www.hp.com/in-en/shop/printers.html?color-bw=color&connect=mopria%E2%84%A2&offer-type=offers`['SAMEORIGIN', 'SAMEORIGIN', 'SAMEORIGIN', 'SAMEORIGIN']` https://www.noon.com/uae-ar/make-m5-3d-printer-fdm-3d-printer-5x-faster-and-extra-intelligent-cut-print-time-by-70-smooth-0-1-mm-detail-error-detection-with-ai-camera-auto-leveling-integrated-die-cast-aluminum-alloy-gray-green/N53407230A/p/?o=b7794c578876868b`['DENY', 'DENY']` https://www.dndbeyond.com/forums/off-topic/adohands-kitchen/166611-anything-but-whatever-dumb-ass-wotc-has-recently?page=280`['SAMEORIGIN', 'SAMEORIGIN']` https://www.va.gov/education/gi-bill-comparison-tool/institution/14986410`['SAMEORIGIN', 'deny']` https://www.bellemaison.jp/shop/app/catalog/list/?categoryList=130204`['SAMEORIGIN', 'SAMEORIGIN']` https://www.geocaching.com/p/?guid=a58c7c9f-a944-4803-8902-b7e826659982&wid=0ba92013-6fb1-4ef5-914d-e66b19a3f3f3&ds=2`['SAMEORIGIN', 'SAMEORIGIN']` https://www.mundodeportivo.com/futbol/laliga/20240915/1002316002/girona-barca-mejores-imagenes-partido.html`['SAMEORIGIN', 'SAMEORIGIN']` https://www.starmakerstudios.com/pt-BR/song/chefin-oficial%2Flb-unico-principios-de-um-campeao-lyrics/611752105039367537`['SAMEORIGIN', 'SAMEORIGIN']`	2,440,469	60,521,378	4.03%
Strict-Transport-Security Samples (15) https://robinhood.com/us/en/stocks/NUVA/`['max-age=31536000', 'max-age=31536000']` https://www.acer.com/au-en/support/product-support/R856TN/downloads`['max-age=31536000', 'max-age=31536000; includeSubDomains']` https://www.indiatimes.com/news/india/pm-narendra-modi-hugged-vladimir-putin-in-july-and-some-are-still-miffed-about-it/articleshow/122628616.html`['max-age=15552000; includeSubDomains', 'max-age=25920000; includeSubdomains']` https://www.juntadeandalucia.es/boja/2005/130/s2.2`['max-age=31536000', 'max-age=31536000']` https://www.redhat.com/zh-cn/blog/red-hat-contributes-towards-innovative-optical-wireless-network-technologies`['max-age=31536000', 'max-age=31536000']` https://www.synology.com/zh-hk/dsm/feature/domain_privilege`['max-age=15768000; includeSubDomains', 'max-age=63072000']` https://www.aliexpress.com/star/en/d-article-8000029167976009.html`['max-age=31536000 ; includeSubDomains', 'max-age=0']` https://www.vodafone.de/featured/article/sechs-filme-die-deine-gehirnzellen-anregen-110539`['max-age=63072000', 'max-age=31536000']` https://www.ugr.es/personal/juan-manuel-pleguezuelos-gomez`['max-age=31536000; includeSubDomains', 'max-age=63072000; includeSubDomains; preload']` https://www.westerndigital.com/en-kw/products/accessories/cases?filterByBrandName=G-DRIVE`['max-age=31557600', 'max-age="31536000"; includeSubDomains; preload']` https://www.magicbricks.com/residential-projects-muthanallur-in-bangalore-nprid`['max-age=31536000 ; includeSubDomains', 'max-age=31536000; includeSubdomains']` https://www.mailerlite.com/es/templates/landing-pages/personal-trainer`['max-age=63072000', 'max-age=63072000']` https://www.yeastar.com/yeastar-day-2023/`['max-age=15552000', 'max-age=63072000']` https://www.adidas.com/us/boys-blue-running`['max-age=31536000 ; includeSubDomains ; preload', 'max-age=15552000; includeSubDomains']` https://coinmarketcap.com/academy/de/glossary/staking?%3Bamp%3Bamp%3Bapp=%20HTTP%2F5.1%0D%0AX%3A%20x%3Famp`['max-age=15552000; includeSubDomains', 'max-age=31536000; includeSubdomains']`	1,637,765	71,294,722	2.30%
Access-Control-Allow-Origin Samples (15) https://www.forrester.com/report/Dont-Ignore-Security-In-LowCode-Development/RES163077?objectid=RES163077`['', 'https://www.forrester.com']` https://www.eset.com/jp/blog/welivesecurity/connecting-dots-exposing-arsenal-methods-winnti/`['https://www.eset.com', 'https://www.eset.com']` https://sendpulse.com/br/blog/primeiros-passos-seo`['', 'sendpulse.com', '']` https://www.climatempo.com.br/climatologia/4330/tresbarrasdoparana-pr`['', '']` https://www.mundodeportivo.com/temas/isabel-diaz-ayuso`['https://www.mundodeportivo.com', 'https://stories.mundodeportivo.com', 'https://topics.mdstories.com']` https://playmods.net/apps/life-beauty-meria%28%E3%83%A1%E3%83%AA%E3%82%A2%29%E3%82%B5%E3%83%AD%E3%83%B3%E3%82%A2%E3%83%97%E3%83%AA/jp.co.dalia.EN0000154/download`['', '']` https://paytm.com/devotion/shri-kedarnath-temple`['https://paytm.com', 'https://paytm.com']` https://pajak.go.id/id/visi-misi-tujuan-dan-maklumat-pelayanan`['pajak.go.id', 'chathost.pajak.go.id', 'chatcobrowse.pajak.go.id', 'chatcontext.pajak.go.id']` https://www.elcorteingles.es/entradas/conciertos/cordoba/rancheras/`['', '']` https://www.sofi.com/invite/invest?gcp=1f641495-84cf-4c83-bdb0-bd557f45ac3d&isAliasGcp=false`['https://sofi.com', 'https://sofi.com']` https://www.paychex.com/es/worx/guide/7-questions-when-hiring-employees`['', '']` https://cleantalk.org/blacklists/as213386`['https://cleantalk.org', 'https://www.cleantalk.org']` https://www.brandbucket.com/names/wannasmile`['https://js.stripe.com/', 'https://get.brandbucket.com/']` https://www.digi24.ro/amphtml/stiri/actualitate/educatie/inscrierea-in-clasa-pregatitoare-pentru-2025-2026-potrivit-ministerului-educatiei-conditii-pentru-copiii-care-nu-au-fost-la-gradinita-3010543`['', 'https://www.digi24.ro']` https://www.discover.com/personal-loans/resources/consolidate-debt/credit-card-refinancing/`['https://labs.discover.com', 'https://portal.discover.com']`	181,922	16,045,895	1.13%
Expires Samples (15) http://www.elcorteingles.es/ocio/search?Ndpto=5&Ntt=9788497455015`['0', 'Mon, 09 Mar 2026 15:27:39 GMT']` https://www.profesia.sk/praca/erni-slovakia/O5231678`['Thu, 19 Nov 1981 08:52:00 GMT', 'Tue, 10 Mar 2026 13:00:48 GMT']` https://www.juntadeandalucia.es/educacion/portales/web/cep-algeciras-la-linea`['Thu, 01 Jan 1970 00:00:00 GMT', '0']` https://www.onamae.com/campaign/auction/`['0', 'Thu, 19 Nov 1981 08:52:00 GMT']` https://hoster.ru/news/my-prekrawaem-podderzhku-domenov-eu-de-cn-pe`['Thu, 19 Nov 1981 08:52:00 GMT', '-1']` https://vkusvill.ru/media/journal/pervoe-vtoroe-i-kompot-kak-slozhilas-formula-obeda-i-chto-govorit-nutritsiolog.html`['Thu, 19 Nov 1981 08:52:00 GMT', '0']` https://tengrinews.kz/around-the-world/meteorit-kotoryiy-syel-10-milliardov-dollarov-samyie-391261/`['Sat, 21 Dec 2024 11:09:01 GMT', '-1']` https://www.tv-asahi.co.jp/beautv_2016/sphone/onair/?f=140314`['Thu, 19 Nov 1981 08:52:00 GMT', 'Mon, 21 Sep 2009 04:52:34 GMT']` https://www.signupgenius.com/index.cfm?go=s.signup&urlid=70a094dada72aa02-john13&useFullSite=true`['Sat, 07 Mar 2026 02:26:44 GMT', 'Mon, 01 Jan 1990 00:00:01 GMT', 'Sat, 07 Mar 2026 02:26:45 GMT']` https://b7510.com/5/9353294/?oo=1&js_build=iclick-v1.1671.0&userId=0802b8942a984e8df5f7afcc213fbcf7&dmn=bvtpk.com&tt=2&ix=1`['Tue, 11 Jan 1994 10:00:00 GMT', 'Mon, 26 Jul 1997 05:00:00 GMT']` https://www.ub.edu/llulldb/login?back=catalegs/DUCH`['Thu, 19 Nov 1981 08:52:00 GMT', '0']` https://fotostrana.ru/znakomstva/kolomna/`['Thu, 01 Jan 1970 00:00:01 GMT', 'Thu, 01 Jan 1970 00:00:01 GMT']` https://www.uline.com/product/AdvSearchResult?Ref=Pwrshp&Source=ALL&keywords=xyznew`['0', 'Thu, 05 Mar 2026 07:55:24 GMT']` https://www.sicredi.com.br/promocao/juntossomosmais/`['Thu, 19 Nov 1981 08:52:00 GMT', '0']` https://preply.com/en/subscription`['Thu, 05 Mar 2026 23:31:02 GMT', '0']`	124,411	44,968,544	0.28%
P3P Samples (15) https://www.google.co.in/maps/d/viewer?mid=1s-ddu4BhqrwF9M7E2icrSXxSd0iTaU78&ll=20.92713130000001,70.46113730000002&z=17`['CP="This is not a P3P policy! See g.co/p3phelp for more info."', 'CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://lenta.ru/news/2000/11/30/p4/`['CP="This Is Potato!"', 'CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"']` https://www.google.fr/maps/d/viewer?mid=1DXXdHTy0kC8f2vtHBYiY0eFr5w7smYU&ll=47.79770638954463%2C0.6733414996258702&z=8`['CP="This is not a P3P policy! See g.co/p3phelp for more info."', 'CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.google.de/maps/d/embed?mid=1EPbMifnAzbfAAP90iUeJav2go8yAt62V&ehbc=2E312F`['CP="This is not a P3P policy! See g.co/p3phelp for more info."', 'CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.google.co.uk/maps/d/embed?mid=1guMgFQN1oDa4WLo3FnKmilF8pbnbtrNs`['CP="This is not a P3P policy! See g.co/p3phelp for more info."', 'CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.google.com.hk/maps/d/view?mid=1JC_YKWP2lgnOzzWEoe5HYX-M6ltEMJw&ll=15.503337709929273%2C105.80356199999997&z=5`['CP="This is not a P3P policy! See g.co/p3phelp for more info."', 'CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.google.li/maps/d/view?mid=1TecP0MPF9JtefVH4PMz-vJP8DeySQhI&ll=15.503337709929273%2C105.80356199999997&z=5`['CP="This is not a P3P policy! See g.co/p3phelp for more info."', 'CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.google.com.sv/maps/d/viewer?mid=17kBAYqm5YggZqGpBTDiOXR9XU69uM3A&usp=sharing`['CP="This is not a P3P policy! See g.co/p3phelp for more info."', 'CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.google.com.af/maps/d/view?mid=1TecP0MPF9JtefVH4PMz-vJP8DeySQhI&ll=15.503337709929273%2C105.80356199999997&z=5`['CP="This is not a P3P policy! See g.co/p3phelp for more info."', 'CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.google.pl/maps/d/embed?mid=1GBRwKE-jdJG7BqeWaNfiu04kY1BOuPc&ll=53.88290394738169%2C13.913871180220543&z=10`['CP="This is not a P3P policy! See g.co/p3phelp for more info."', 'CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.championat.ru/football/news-6362464-eks-igrok-manchester-yunajted-marsyal-poluchil-vyvih-plecha.html`['CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"', 'CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"']` https://www.google.com.cu/maps/d/viewer?mid=12Xj4-VoMEXM1g4G4ESLspyLCHDFe5fI&ll=16.083766985141864%2C105.80356199999997&z=5`['CP="This is not a P3P policy! See g.co/p3phelp for more info."', 'CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.google.so/maps/d/viewer?mid=12Xj4-VoMEXM1g4G4ESLspyLCHDFe5fI&ll=16.083766985141864%2C105.80356199999997&z=5`['CP="This is not a P3P policy! See g.co/p3phelp for more info."', 'CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.google.tm/maps/d/viewer?mid=1Td_IsB81RkuIhkMO6P-60u0A-FaI6R0&usp=sharing`['CP="This is not a P3P policy! See g.co/p3phelp for more info."', 'CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.google.sn/maps/d/viewer?mid=1J1O6lVPVK_v09s9rvnKoO6dAo5ekbU8&ll=16.083766985141864%2C105.80356199999997&z=5`['CP="This is not a P3P policy! See g.co/p3phelp for more info."', 'CP="This is not a P3P policy! See g.co/p3phelp for more info."']`	74,012	3,999,717	1.85%
Content-Type Samples (11) https://zenodo.org/records/159419/files/Report_JelenaBanjac.pdf?download=1`['application/octet-stream', 'application/octet-stream']` https://www.navy.mil/Press-Office/News-Stories/display-news/Article/2303502/pandemic-fails-to-dampen-stem-outreach-summer-camps-at-niwc-atlantic/`['text/html', 'text/html']` http://www.sberbank.ru/ru/person/investments/sbinvestor`['text/html; charset=utf-8', 'text/html']` https://ya.ru/video/preview/18383044943596052224`['text/html; charset=utf-8', 'text/html; charset=utf-8', 'text/html; charset=utf-8']` https://yandex.ru/video/preview/3471438053484705626`['text/html; charset=utf-8', 'text/html; charset=utf-8', 'text/html; charset=utf-8']` http://sbrf.ru/tatarstan/ru`['text/html; charset=utf-8', 'text/html']` https://yandex.kz/images/search?text=%D0%B2%D0%B8%D0%B4%D1%8B%20%D1%84%D0%BE%D1%80%D0%BC%20%D0%B3%D1%80%D1%83%D0%B4%D0%B8%20%D0%B4%D0%B5%D0%B2%D1%83%D1%88%D0%B5%D0%BA&noreask=1&pos=0&rpt=simage&lr=10298&img_url=http%3A%2F%2F3tagebart.files.wordpress.com%2F2010%2F04%2F899497.jpg`['text/html; charset=utf-8', 'text/html; charset=utf-8']` https://www.yandex.com.tr/gorsel/`['text/html; charset=utf-8', 'text/html; charset=utf-8']` https://b7510.com/`['application/octet-stream', 'text/html']` https://asana.com/fr/community`['text/html', 'text/html; charset=utf-8']` https://yandex.com/images?parent-reqid=1772606205168143-3686215464834415165-balancer-l7leveler-kubr-yp-vla-92-BAL`['text/html; charset=utf-8', 'text/html; charset=utf-8']`	33,753	122,848,015	0.03%
Retry-After Samples (1) https://www.marriott.com/es/hotels/cphdk-copenhagen-marriott-hotel/overview/`['28800', '28800']`	25,814	114,728	22.50%
Date	14,814	122,298,911	0.01%
Access-Control-Allow-Credentials Samples (6) https://playmods.net/apps/life-beauty-meria%28%E3%83%A1%E3%83%AA%E3%82%A2%29%E3%82%B5%E3%83%AD%E3%83%B3%E3%82%A2%E3%83%97%E3%83%AA/jp.co.dalia.EN0000154/download`['true', 'true']` https://www.foxbusiness.com/video/1159542622001`['false', 'false']` https://www.bajajfinserv.in/?utm_source=autoworldclp_CPR&utm_medium=autoworldclp_cpr_icon&utm_campaign=autoworldclp_cpr_icon`['false', 'false']` https://www.sofi.com/invite/invest?gcp=1f641495-84cf-4c83-bdb0-bd557f45ac3d&isAliasGcp=false`['true', 'true']` https://www.playtime.ph/`['true', 'true']` http://www.gate.com/pt/shop`['true', 'true']`	10,530	4,608,418	0.23%
Cross-Origin-Resource-Policy Samples (2) https://www.ub.edu/drogodependencies/el-master-de-drogodependencies-ub-rep-el-guardo-impuls-per-la-seva-trajectoria/`['cross-origin', 'cross-origin']` https://www.klevu.com/audit/?utm_campaign=Ecommerce+Discovery+Index+UK&utm_source=PR&utm_content=uk-report-press-release`['cross-origin', 'cross-origin']`	3,004	2,245,278	0.13%
Age	1,396	17,943,691	0.01%
Last-Modified Samples (1) https://fotostrana.ru/znakomstva/kolomna/`['Fri, 06 Mar 2026 09:02:21 GMT', 'Fri, 06 Mar 2026 09:02:21 GMT']`	1,225	25,956,008	0.00%
ETag Samples (1) https://www.iq.com/actor-info/chen-shu-206712005?lang=vi_vn`['W/"b61aa-GEm6AsBL0tp6cBgc0licZSoSYI0"', 'Fv6hpWdG2ASJrZH01j3vN5o9wEgZ']`	1,173	27,061,042	0.00%
Content-Length	1,107	122,875,593	0.00%
Content-Disposition Samples (1) https://uwaterloo.ca/waterloo-mechanical-systems-control-lab/bibcite/export/bibtex/bibcite_reference/20`['attachment; filename="bibcite_reference-20-BibTeX.bib";', 'attachment; filename="bibcite_reference-20-BibTeX.bib";']`	132	907,172	0.01%
Access-Control-Max-Age Samples (1) https://www.bajajfinserv.in/?utm_source=autoworldclp_CPR&utm_medium=autoworldclp_cpr_icon&utm_campaign=autoworldclp_cpr_icon`['86400', '86400']`	5	1,420,929	0.00%

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	1,159,144	25.5%	4.4%
cloudflare	962,981	21.2%	3.1%
akamai	707,294	15.5%	5.5%
apache	474,637	10.4%	3.6%
fastly	417,351	9.2%	4.2%
cloudfront	376,215	8.3%	2.2%
envoy	185,873	4.1%	3.9%
nextjs	162,647	3.6%	2.0%
azure-front-door	80,367	1.8%	5.6%
vercel	9,055	0.2%	0.5%
… 1 more layers not shown …

BADBAD_SYNTAX_DETAILED~975 sites (2.0%)6,466,831

The %(field_name)s field value doesn't conform to its specified syntax.

Samples (5)

https://www.autotrader.com/cars-for-sale/vehicle/768040742?fuelTypeGroup=PIH&listingType=NEW&makeCode=FORD&modelCode=ESCAPE&trimCode=ESCAPE%7CSE&clickType=listingcategory=categories.GENERAL, field_name=Link, ref_uri=http://httpwg.org/specs/rfc8288#header.link, value=</cars-for-sale/_next/static/media/AXLcons.788d2f40.woff2>; as=font; rel=preload; type=font/woff2; crossorigin=anonymous, problem=The invalid character '/' was found at position 92: l=preload; type=font/woff2; crossorigin= ^
https://www.bloomberght.com/ebrd-den-yesil-yatirimi-artirma-hedefi-2266094category=categories.GENERAL, field_name=Via, ref_uri=http://httpwg.org/specs/rfc9110#field.via, value=HTTP/2.0 Merlin CDN, problem=The invalid character ' ' was found at position 16: HTTP/2.0 Merlin CDN ^
https://www.expiredwixdomain.com/?redirectedFor=chelseamarchand.comcategory=categories.GENERAL, field_name=Link, ref_uri=http://httpwg.org/specs/rfc8288#header.link, value=<https://static.parastorage.com/>; rel=preconnect; crossorigin;, problem=The invalid character ';' was found at position 63: connect; crossorigin; ^
https://www.hurriyet.com.tr/avrupa/50-milyon-ffp2-tipi-maske-ucretsiz-dagitilacak-41727471category=categories.GENERAL, field_name=Via, ref_uri=http://httpwg.org/specs/rfc9110#field.via, value=HTTP/2.0 Merlin CDN, problem=The invalid character ' ' was found at position 16: HTTP/2.0 Merlin CDN ^
https://www.iq.com/play/%E7%B6%9C%E8%97%9D%E5%A4%A7%E7%86%B1%E9%96%80-2019-3-7-19rqv6wqdk?lang=zh_cncategory=categories.GENERAL, field_name=Server, ref_uri=http://httpwg.org/specs/rfc9110#field.server, value=Skywalker/2.0/45011, problem=The invalid character '/' was found at position 14: Skywalker/2.0/45011 ^

field_name

Value	Note fires	Header occurrences	Fires per occurrence
Link Samples (15) https://www.autotrader.com/cars-for-sale/vehicle/768040742?fuelTypeGroup=PIH&listingType=NEW&makeCode=FORD&modelCode=ESCAPE&trimCode=ESCAPE%7CSE&clickType=listing`['</cars-for-sale/_next/static/media/AXLcons.788d2f40.woff2>; as=font; rel=preload; type=font/woff2; crossorigin=anonymous, </cars-for-sale/assets/fonts/atc/roboto-v30-latin-regular.woff2>; as=font; rel=preload; type=font/woff2; crossorigin=anonymous, </cars-for-sale/assets/fonts/atc/roboto-v30-latin-…[truncated]']` https://www.expiredwixdomain.com/?redirectedFor=chelseamarchand.com`['<https://static.parastorage.com/>; rel=preconnect; crossorigin;,<https://static.parastorage.com/>; rel=preconnect;,<https://static.wixstatic.com/>; rel=preconnect; crossorigin;,<https://static.wixstatic.com/>; rel=preconnect;,<https://siteassets.parastorage.com>; rel=preconnect; crossorigin;,']` https://www.kbb.com/cars-for-sale/certified/2025/bmw/m440i-xdrive`['</cars-for-sale/_next/static/media/AXLcons.788d2f40.woff2>; as=font; rel=preload; type=font/woff2; crossorigin=anonymous, </cars-for-sale/assets/fonts/kbb/open-sans-v29-latin-regular.woff2>; as=font; rel=preload; type=font/woff2; crossorigin=anonymous, </cars-for-sale/assets/fonts/kbb/open-sans-v29-…[truncated]']` https://www.wix.com/templatesfr/law-firm-fr/droit-du-travail`['<https://static.parastorage.com/>; rel=preconnect; crossorigin;,<https://static.parastorage.com/>; rel=preconnect;,<https://static.wixstatic.com/>; rel=preconnect; crossorigin;,<https://static.wixstatic.com/>; rel=preconnect;,<https://siteassets.parastorage.com>; rel=preconnect; crossorigin;,']` https://padlet.com/caitlinandscout/my-life-g73rchjwtwv3`['<https://v1.padlet.pics/1/image?t=c_scale,dpr_1,e_blur:1000,f_jpg,h_60,w_60&url=https%3A%2F%2Fpadlet-assets.s3.amazonaws.com%2Fwallpapers%2Fphoenix_rising.jpg>; rel=preload; as=image; fetchpriority=high,<https://padlet.net/fonts/inter/subset/inter-latin.woff2>;rel="preload";as="font";crossorigin,<ht…[truncated]']` https://www.auchan.fr/elseve-color-vive-masque-protection-couleur-cheveux-colores-ou-meches/pr-C1306336`['</asset-server/webjars/requirejs/2.3.6/require.min.js>; rel="preload"; as="script"; nopush; crossorigin,</asset-server/sav_2025.04.16-0/webjars/a_styleguide2/dist/main.min.css>; rel="preload"; as="style"; nopush;,</asset-server/sav_2025.04.16-0/webjars/a_carousel3/dist/main.min.css>; rel="preload"; …[truncated]']` https://www.deccanherald.com/sports/chatterjee-ton-lifts-bengal-2154344`['<https://fea.assettype.com/deccanherald/assets/app-c3a030dc4ed0f1b4d575.js>; rel=preload; as=script;']` https://www.mpg.de/en/newsroom?category=physics-and-astrophysics&year=2024`['</assets/roboto-v20-latin-ext_latin_greek-ext_greek_cyrillic-ext_cyrillic-700-8d2872cf0efbd26ce09519f2ebe27fb09f148125cf65964890cc98562e8d7aa3.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous']` https://www.prothomalo.com/lifestyle/health/hyj0rqlae6`['<https://assets.prothomalo.com/prothomalo/assets/app-2b94bf17069b604ab5f4.js>; rel=preload; as=script;']` https://www.theregister.com/Author/Email/corrections?message=re:%20https%3A%2F%2Fwww.theregister.com/2018/07/30/who_me/`['<https://pagead2.googlesyndication.com/tag/js/gpt.js>; rel=preload; as=script;,</design_picker/ac38e3d7875b747243d324cc6fad1f4f6563acff/javascript/_.js>; rel=preload; as=script;,</css/dd4871fd6132318747b720148044f42594c41776/scaffolding.css>; rel=preload; as=style;,</css/dd4871fd6132318747b720148044…[truncated]']` https://wolt.com/en/hun/sarvar/stores`['<https://wolt-com-static-assets.wolt.com/>; rel=preconnect; crossorigin=anonymous, <https://consumer-static-assets.wolt.com>; rel=preconnect; crossorigin=anonymous, <https://imageproxy.wolt.com>; rel=preconnect; crossorigin=anonymous, <https://restaurant-api.wolt.com>; rel=preconnect; crossorigin=an…[truncated]']` https://www.airbnb.com/experiences/743995`['<https://a0.muscache.com/airbnb/static/packages/web/common/frontend/core-guest-loop/apps/core-guest-spa/client.eb5f417499.css>;rel=preload;as=style;crossorigin=anonymous;media=print,<https://a0.muscache.com/airbnb/static/airbnb-dls-web/build/fonts/cereal-variable/AirbnbCerealVF_W_Wght.8816d9e5c3b6a8…[truncated]']` https://www.lifo.gr/now/world/ollandia-paraiteitai-i-kybernisi-royte-gia-metanasteytiko`['<https://www.lifo.gr/now/world/ollandia-paraiteitai-i-kybernisi-royte-gia-metanasteytiko?amp> rel="amphtml"']` https://www.esakal.com/premier/actor-vicky-kaushal-announces-visit-to-raigad-fort-on-shiv-jayanti-entertainment-news-amk08`['<https://fea.assettype.com/quintype-ace/assets/app-3472891dbae934ee6771.js>; rel=preload; as=script;']` https://zenodo.org/records/3778587`['<https://doi.org/10.5281/zenodo.3778587> ; rel="cite-as" , <https://zenodo.org/api/records/3778587> ; rel="describedby" ; type="application/dcat+xml" , <https://zenodo.org/api/records/3778587> ; rel="describedby" ; type="application/json" , <https://zenodo.org/api/records/3778587> ; rel="describedby…[truncated]']`	4,627,966	43,505,576	10.64%
Via Samples (15) https://www.bloomberght.com/ebrd-den-yesil-yatirimi-artirma-hedefi-2266094`['HTTP/2.0 Merlin CDN']` https://www.hurriyet.com.tr/avrupa/50-milyon-ffp2-tipi-maske-ucretsiz-dagitilacak-41727471`['HTTP/2.0 Merlin CDN']` https://www.mynet.com/magazin/melis-isiten-in-mavi-saclari-sosyal-medyada-gundem-oldu-yorum-yagdi-130100384941`['HTTP/2.0 Merlin CDN']` https://www.tutu.ru/poezda/view_times.php?np=2bb15b`['1.1 front-proxy front-proxy']` https://www.tjk.org/EN/YarisSever/Info/Page/GunlukYarisSonuclari?QueryParameter_Tarih=14/06/2020&Era=past&sehir-id=88`['HTTP/2.0 Merlin CDN']` https://www.milliyet.com.tr/gundem/antalyayi-sel-vurdu-7537957`['HTTP/2.0 Merlin CDN']` https://www.kanald.com.tr/yildiz-de-bana/bolumler`['HTTP/2.0 Merlin CDN']` https://www.tff.org/Default.aspx?pageID=1249&grupID=1755&hafta=15`['HTTP/2.0 Merlin CDN']` https://www.showroomprive.com/market/catalog/productp.aspx?produit=m-7445580`['1.1 kong/3.10.0.1-enterprise-edition']` https://www.haberturk.com/kocaelispor-fenerbahce-maci-ne-zaman-saat-kacta-hangi-kanalda-canli-yayinlanacak-3858319-spor`['HTTP/2.0 Merlin CDN']` https://www.10086.cn/zzxx/he/`['1.1 ID-0407037500334760 uproxy-10']` https://www.fanatik.com.tr/ramazan/hacet-namazi-nedir-kac-rekat-ve-nasil-kilinir-hacet-namazina-nasil-niyet-edilir-diyanet-mirac-kandili-gecesi-hacet-namazi-kilinisi-2570863`['HTTP/2.0 Merlin CDN']` https://www.gbnews.com/celebrity/bbc-strictly-fans-tv-licence-refund-plea-shakeup?rebelltitem=1`['1.1 rebelmouse-gbnews-rev,1.1 talaria@1.34.0 cluster-gbnews, 1.1 ingress@dev, 1.1 varnish']` https://icbc.com.cn/column/1438058319784067108.html`['1.1 ID-7203207600102654 uproxy-13']` https://www.egnyte.com/blog/post/storage-sync-11`['Acquia Platform CDN 1.236']`	811,722	30,429,667	2.67%
Server Samples (15) https://www.iq.com/play/%E7%B6%9C%E8%97%9D%E5%A4%A7%E7%86%B1%E9%96%80-2019-3-7-19rqv6wqdk?lang=zh_cn`['Skywalker/2.0/45011', 'Skywalker/2.0/16987', 'nginx']` https://musicbrainz.org/artist/f92f4318-3ba6-4332-938c-a939f93428f5?va=1`['Plack::Handler::Starlet']` https://starlink.com/ae/roam/marketing`['whydoyoucare?']` https://wordunscrambler.me/dictionary/wizen`['nginx/1.14.2 + Phusion Passenger(R) 6.0.8']` https://www.zalando.it/adidas-originals-firebird-shorts-mineral-green-white-ad121s0bx-m12.html`['rendering-engine/pdp-stackset/main-5097']` https://jmty.jp/all/eve-kw-%E3%81%8A%E3%81%B2%E3%81%A8%E3%82%8A%E3%81%95%E3%81%BE`['nginx + Phusion Passenger(R)']` https://aliexpress.ru/item/1005006861807675.html`['Tengine/AServer-Ingress/3.0.42']` https://www.archdaily.com/catalog/us/products/33402/porcelain-rain-channels-serapool/409737?ad_source=neufert&ad_medium=gallery&ad_name=open-gallery`['nginx/1.18.0 + Phusion Passenger(R) 6.0.12']` https://www.zalando.pl/outfits/5SDQijm2R_e/`['rendering-engine/main-stackset/main-5109']` https://www.serpro.gov.br/menu/noticias/noticias-2024/seminarios-novos-gestores-CNM`['Zope/(2.13.24, python 2.7.12, linux2) ZServer/1.1']` https://www.zalando.es/les-deux-half-zip-sudadera-turkish-coffee-brown-lep22s087-o11.html`['rendering-engine/pdp-stackset/main-5122']` https://licindia.in/web/guest/advertisement-in-newspaper-and-uploading-the-documents-enclosed-in-the-website-for-appointing-agency-for-supply-of-ppis-meal-cards-to-the-employees-of-the-corporation`['v/7.0.2/6.6.7/v100nyc1-www']` https://www.zalando.nl/outfits/YJ3XnYFxT6C/`['rendering-engine/main-stackset/main-5118']` https://www.zalando.fr/outfits/oJ_v-W-dQzW/`['rendering-engine/main-stackset/main-5118']` https://www.zalando.de/zalando-impressum/`['rendering-engine/main-stackset/main-5118']`	324,252	94,787,332	0.34%
Cache-Control Samples (15) https://www.rightmove.co.uk/press-centre/rightmove-launches-major-updates-to-its-agent-qualification-cela/`['max-age = 1300']` https://www.ilfattoquotidiano.it/elezioni-politiche-2018/risultati/camera/comune/45/volta-mantovana.html`['public, s-maxage: 120']` https://www.ionos.com/?kwk=10328662&ac=OM.US.USf11K406769T7073a`['public, max-age=600 must-revalidate']` https://www.rbc.ua/ukr/news/belgiya-anonsuvala-masshtabniy-paket-dopomogi-1744115697.html`['public, max-age 604800']` https://www.sueddeutsche.de/autoren/lara-fritzsche-li.3371166?page=2`['public, max-age: 120']` https://www.ionos.de/?kwk=582886252&ac=OM.PU.PUf11K406770T7073a`['public, max-age=600 must-revalidate']` https://www.queensu.ca/english/people-list/jacob-guy-aubut`['no-cache, must revalidate']` https://www.inmotionhosting.com/support/questions/users/6891-mark`['no-store no-cache must-revalidate']` https://www.cbs.com/`['max-age=30;stale-if-error=120']` https://www.dominos.com/en?type=order_delivery&utm_content=PDOT&storeid=8029&zipcode=78009`['public, max-age=0, s-maxage=600 must-revalidate']` https://keirin.jp/pc/racerprofile?snum=014076`['no-store no-cache']` https://www.experian.com/business/solutions/fraud-management/account-takeover-fraud?intcmp=Insightsblog-042224-what-is-multi-factor-authentication`['no-cache;']` https://www.ucoz.ru/bot/onlayn-prodazha-tovarov-na-kanalakh-i-gruppakh/`['public max-age=600']` https://www.alchemy.com/university`['public; max-age=86400']` https://www.ushmm.org/outreach-programs`['stale-while-revalidate=600 max-age=600']`	214,998	98,177,840	0.22%
Content-Language Samples (12) https://www.fussball.de/mannschaft/sv-kerkingen-sv-kerkingen-wuerttemberg/-/saison/2526/team-id/011MI9HHBK000000VTVG0001VTR8C1K7`['de-']` https://www.rei.com/product/C02842/terry-gravel-cycling-shorts-womens`['en-']` https://www.gutenberg.org/ebooks/38480`['en_US']` https://www.avon.com/category/hair-care?facets=145&sortBy=popularity_desc`['en_US']` https://www.juegosonce.es/login/resultados-mi-dia-once-14-mayo-2023`['es-']` https://www.tesla.com/en_pr/safety`['en_pr']` https://www.netgear.com/support/zh-CN/product/csm4316`['zh-CN-#Hans']` https://www.indianrail.gov.in/enquiry/StaticPages/StaticEnquiry.jsp?locale=hi&StaticPage=index.html`['hi-']` https://www.juntadeandalucia.es/educacion/apl/portalautenticacion/login/inicio.ced?clave=RDBC2025&z=01CC6BA3`['es-x-lvariant-ES']` https://www.redbull.com/foxhunt`['undefined']` https://www.oracle.com/il-en/customers/infrastructure/mestec/`['en-x-IL']` https://www.radissonhotels.com/en-us/corporate/about-us/our-brands`['en-US-u-ms-metric-mu-celsius']`	151,503	12,220,507	1.24%
Alt-Svc Samples (3) https://www.kcl.ac.uk/study/postgraduate-taught/courses/clinical-nursing-singapore`['h3=":443";ma=60;']` https://www.lse.ac.uk/study-at-lse/Undergraduate/widening-participation/LSE-students/?entryId=2319c173-7bdc-45d3-9a69-d12fd54340d7&nodeId=e2e64854-5d30-44fa-a289-a5ef76104f3e`['h3=":443";ma=60;']` https://www.michelin.com/en/publications/regulated-information/financial-information-for-the-year-ended-december-31-2019`['h3=":8443";ma=60;']`	141,166	32,351,074	0.44%
Content-Security-Policy Samples (5) https://www.rudderstack.com/integration/cruncher/`["default-src 'self' 'unsafe-inline' rudderstack.com .rudderstack.com bugsnag.com .bugsnag.com usebasin.com .usebasin.com sanity.io .sanity.io www.sanity.io .www.sanity.io rudderstack.sanity.studio .rudderstack.sanity.studio arcade.software .arcade.software demo.arcade.software .demo.arcade.so…[truncated]"]` https://web.de/kuendigungsformular`['js.ui-portal.de img.ui-portal.de uim.tifbs.net']` https://pixlr.com/hr/education/featured-school/`['Strict-Transport-Security: max-age=31556952; includeSubDomains; preload']` https://www.cpsc.gov/cgibin/neissquery/Data/Highlights/2023/2023%20NEISS%20Data%20Highlights.pdf`["default-src: https:; frame-ancestors 'self' X-Frame-Options: sameorgin"]` https://www.gmx.net/kuendigungsformular?mc=85000002`['js.ui-portal.de img.ui-portal.de uim.tifbs.net']`	78,029	38,270,592	0.20%
Server-Timing Samples (11) https://www.gauthmath.com/solution/1813731876912374/What-was-the-purpose-of-spraying-cold-water-into-the-steam-filled-drum-To-create`['inner; dur=439,bd-edenx-server-loader-layout; dur=92.999935, bd-edenx-server-loader-solution/(questionID)/(questionKey$)/page; dur=297.00017, bd-edenx-server-loader;decs="SSR"; dur=302.999974, bd-edenx-ssr-render-html;decs="SSR"; dur=51.000118, bd-edenx-server-handle-request; dur=424.999952', 'cdn-cache; desc=MISS, edge; dur=2, origin; dur=661']` https://housing.com/in/buy/resale/page/18494370-1-bhk-apartment-in-rangraj-nagar-for-rs-2800000`["firstByte;dur=175.1816635131836;desc='Total Execution Time'"]` https://www.larksuite.com/en_us/topics/business-communication`['inner; dur=81,bd-edenx-server-loader-(lang)_topics_(cluster)_page; dur=50.000191, bd-edenx-server-loader;decs="SSR"; dur=51.000119, bd-edenx-ssr-render-html;decs="SSR"; dur=0, bd-edenx-server-handle-request; dur=67.000151', 'cdn-cache; desc=MISS, edge; dur=6, origin; dur=309']` https://www.district.in/play/ark-sportify-powerplay-arena-sector-64-gurugram-slots-booking`['cdn-cache; desc=MISS', 'edge; dur=204', 'origin; dur=541', 'ssr=0.032,fetch_data=0.471', 'ak_p; desc="1773595058983_400219984_249205604_74516_11355_1_0_15";dur=1']` https://www.aliexpress.com/p/error/404.html?isRU=false&mobileDevice=false&transferSite=glo&memberSeq=0`['dur=18,ace-gateway']` https://www.doubao.com/chat/2823228542038786`['inner; dur=350, cdn-cache;desc=MISS, origin;dur=414, edge;dur=307, cdn-cache;desc=MISS, cdn-cache;desc=MISS, cdn-cache;desc=MISS, bd-edenx-server-loader-chat_(id)/page; dur=64.999819, bd-edenx-server-loader;decs="SSR"; dur=106.999874, bd-edenx-server-handle-request; dur=319.999933, bd-edenx-server-h…[truncated]']` https://linklist.bio/?utm_source=linklist&utm_medium=biolink&utm_content=P43B1C3-04`['app;desc="Framework";dur=4649 ms,', 'cfCacheStatus;desc="DYNAMIC"', 'cfEdge;dur=7,cfOrigin;dur=4749']` https://www.chanel.com/puls-img/1765210249219-social-sustainability-in-the-value-chain-policy-final.pdf`['cld-fastly;mitm=a;dur=104;cpu=0;start=2026-02-26T21:15:41.987Z;desc=hit,rtt;dur=7,content-info;desc="width=595,height=841,bytes=95845,format=\\"pdf\\",o=1,crt=1765210250,ef=(17)"']` https://newrelic.com/signup?utm_source=refactoring&utm_medium=community&utm_campaign=global-fy-24-q1-sign-up-refactoring`['variant;desc=one,is_us?desc=true']` https://www.capcut.com/template/calendar`['cdn-cache; desc=MISS, edge; dur=2, origin; dur=404', 'inner; dur=396,bd-edenx-server-loader-template_(child-tag)_page; dur=304.00014, bd-edenx-server-loader; dur=305.999994, bd-edenx-ssr-render-html; dur=55.999994']` https://www.qatarairways.com/content/dam/documents/annual-reports/2022/financial-statement-en.pdf`['cdn-cache; desc=HIT', 'edge; dur=304', 'clientrtt; dur=0, clienttt; dur=8, origin; dur=, cdntime; dur=8', 'ak_p; desc="1773344885352_389047515_673002412_30315_9559_1_0_15";dur=1']`	43,423	55,581,820	0.08%
Vary	37,159	112,681,471	0.03%
X-Content-Type-Options	17,068	60,244,519	0.03%
Access-Control-Allow-Headers Samples (1) https://crypto.com/privacy/en/canada`['https://document-hub.crypto.com']`	14,370	6,316,158	0.23%
Access-Control-Allow-Methods	4,614	5,681,593	0.08%
Upgrade	271	264,816	0.10%
Content-Security-Policy-Report-Only Samples (2) https://doubleverify.com/lp/report/ctv/verify/du-lieu-toan-cau-tu-dv-cac-xu-huong-noi-bat-trong-boi-canh-phat-truc-tuyen-hien-dai`["default-src 'self'; script-src 'self' hubapi.com .hubapi.com hubspot.com .hubspot.com app.hubspot.com hubspotusercontent-na1.net .hubspotusercontent-na1.net hsappstatic.net .hsappstatic.net hs-banner.com .hs-banner.com hsforms.com .hsforms.com forms.hsforms.com *googletagmanager.com https://mu…[truncated]"]` https://www.livejournal.com/support/faq/206.html`['ARRAY(0x55bb680fe9e0)']`	256	3,458,084	0.01%
Referrer-Policy	30	28,948,190	0.00%
Warning	2	60,781	0.00%
WWW-Authenticate	2	13,409	0.01%

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	1,814,407	28.1%	5.9%
nginx	1,391,466	21.5%	5.3%
fastly	1,053,100	16.3%	10.6%
akamai	869,226	13.4%	6.8%
envoy	667,170	10.3%	13.9%
cloudfront	488,311	7.6%	2.9%
apache	349,532	5.4%	2.6%
nuxt	242,938	3.8%	23.7%
nextjs	232,428	3.6%	2.8%
azure-front-door	82,488	1.3%	5.8%
… 1 more layers not shown …

BADLM_FUTURE~890 sites (1.8%)376,093

The Last-Modified time is in the future.

Samples (5)

https://www.yorku.ca/research/tag/bronwen-wallace-award-for-poetry/field_name=Last-Modified
https://www.marvel.com/comics/issue/16956/rawhide_kid_1955_129field_name=Last-Modified
https://www.nationalgeographic.com/culture/article/130614-scotland-whisky-waste-to-biofuelfield_name=Last-Modified
https://tsc.go.ke/index.php/pension-status/file/2135-claims-submitted-to-treasury-on-30th-august-2024?start=45field_name=Last-Modified
https://www.emol.com/fotos/6332/field_name=Last-Modified

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
apache	122,419	32.6%	0.9%
nginx	111,938	29.8%	0.4%
cloudfront	84,606	22.5%	0.5%
cloudflare	19,640	5.2%	0.1%
envoy	9,543	2.5%	0.2%
fastly	7,127	1.9%	0.1%
akamai	4,969	1.3%	0.0%
azure-front-door	3,176	0.8%	0.2%
nuxt	712	0.2%	0.1%
vercel	467	0.1%	0.0%

BADSTRUCTURED_FIELD_PARSE_ERROR~398 sites (0.8%)700,732

The %(field_name)s field value isn't a valid Structured Field.

Samples (5)

https://fas.org/publication/no-fly-transparency/category=categories.SECURITY, field_name=Cross-Origin-Embedder-Policy, problem=Strings must be double-quoted, context= unsafe-none; report-to='default' ^
https://www.zdf.de/video/dokus/collection-index-page-artede-collection-artede-rc-013956-14874/page-video-artede-re-das-einfache-leben-als-wahrer-luxus-100category=categories.CACHING, field_name=Cache-Status, problem=Strings must be double-quoted, context= ingress-cache; fwd=miss; detail='now:Thu, 12 Mar 2026 17:23:05 GMT' ^
https://www.waze.com/discuss/t/topic/395213category=categories.SECURITY, field_name=Cross-Origin-Opener-Policy, problem=Trailing characters after value (missing comma?), context= same-origin-allow-popups, same-origin-allow-popups ^
https://www.f5.com/company/blogcategory=categories.SECURITY, field_name=Permissions-Policy, problem=Key cannot begin with an uppercase character, context= Permissions-Policy: geolocation=(), ^
https://www.credit-agricole.fr/ca-pca/association.htmlcategory=categories.SECURITY, field_name=Permissions-Policy, problem=Strings must be double-quoted, context= sync-xhr=('https://*.credit-agricole.fr') ^

Field → parse error

Field	Errors
Permissions-Policy 216,269	Strings must be double-quoted (81,679) Inner Lists are not valid here (34,556) Trailing delimiter (26,406) 'layout-animations' should be followed by '=', not ''' (16,595) Key cannot begin with an uppercase character (8,428) 'midi' should be followed by '=', not ''' (7,894) 'geolocation' should be followed by '=', not '=' (7,742) 'geolocation' should be followed by '=', not ''' (6,273) 'fullscreen' has trailing characters after the value (3,633) There is no Structured Field item starting with ',' (3,352) 'geolocation' has trailing characters after the value (3,017) 'camera' has trailing characters after the value (2,946) 'default' should be followed by '=', not ''' (1,950) 'accelerometer' should be followed by '=', not ''' (1,785) Key does not begin with lcalpha or * (1,629) There is no Structured Field item starting with '\' (1,477) 'accelerometer' has trailing characters after the value (1,426) No Boolean value found (1,094) 'camera' should be followed by '=', not '(' (812) There is no Structured Field item starting with ' ' (635) 'microphone' should be followed by '=', not ''' (582) Dictionary has trailing comma (509) 'vibrate' should be followed by '=', not ''' (480) 'no-geolocation' should be followed by '=', not ''' (450) 'allow' should be followed by '=', not 'T' (303) 'gamepad' should be followed by '=', not '(' (165) 'accelerometer' should be followed by '=', not '(' (127) Backslash before disallowed character ' ' (81) 'microphone' has trailing characters after the value (75) 'geolocation' should be followed by '=', not 's' (42) Inner list bad delimitation (40) 'notifications' has trailing characters after the value (32) 'fullscreen' should be followed by '=', not ''' (22) 'microphone' should be followed by '=', not '(' (18) 'autoplay' should be followed by '=', not ''' (13) 'document-domain' should be followed by '=', not ''' (1)
Cross-Origin-Opener-Policy 133,992	Trailing delimiter (59,474) Trailing characters after value (missing comma?) (46,206) Strings must be double-quoted (27,984) Binary Sequence didn't contain ending ':' (328)
Cross-Origin-Embedder-Policy 129,084	Strings must be double-quoted (55,701) Trailing delimiter (42,000) Trailing characters after value (missing comma?) (31,098) Binary Sequence didn't contain ending ':' (281) Empty item (4)
Cross-Origin-Embedder-Policy-Report-Only 57,640	Strings must be double-quoted (55,737) Trailing characters after value (missing comma?) (1,903)
Cross-Origin-Opener-Policy-Report-Only 52,231	Strings must be double-quoted (46,517) Trailing delimiter (3,811) Trailing characters after value (missing comma?) (1,903)
Reporting-Endpoints 49,451	Strings must be double-quoted (28,174) 'umms-report' should be followed by '=', not 'T' (5,475) 'csp' has trailing characters after the value (3,777) 'https' should be followed by '=', not ':' (3,652) Key does not begin with lcalpha or * (3,367) There is no Structured Field item starting with '/' (3,324) Reached end of input without finding a closing DQUOTE (811) There is no Structured Field item starting with '\' (314) 'csp-endpoint' has trailing characters after the value (285) 'comet' should be followed by '=', not ':' (257) 'csp-endpoint' should be followed by '=', not 'h' (7) 'default' should be followed by '=', not '/' (5) 'concat' should be followed by '=', not '(' (1) Trailing delimiter (1) Key cannot begin with an uppercase character (1)
Cache-Status 44,312	Strings must be double-quoted (37,643) Trailing text after item in list (6,437) Key cannot begin with an uppercase character (232)
Accept-CH 14,098	Trailing text after item in list (14,094) Trailing delimiter (4)
Proxy-Status 1,489	Integer outside allowed range (1,489)
CDN-Cache-Control 1,126	'max-age' should be followed by '=', not ':' (1,068) Trailing delimiter (55) 'stale-while-revalidate' has trailing characters after the value (3)
Speculation-Rules 1,040	There is no Structured Field item starting with '/' (1,040)

field_name

Value	Note fires	Header occurrences	Fires per occurrence
Permissions-Policy Samples (14) https://www.f5.com/company/blog`['Permissions-Policy: geolocation=(), microphone=(), camera=(), gyroscope=(), magnetometer=(), payment=(), fullscreen=(self), autoplay=(self)']` https://www.credit-agricole.fr/ca-pca/association.html`["sync-xhr=('https://*.credit-agricole.fr')"]` https://www.citrix.com/downloads/`["microphone 'none'; camera 'none'; usb 'none'", 'geolocation=(), microphone=(), camera=(), usb=(), midi=(), payment=(), fullscreen=(self), autoplay=(self), accelerometer=(), gyroscope=(), magnetometer=(), ambient-light-sensor=(), clipboard-read=(), clipboard-write=(self)']` https://cloud.ru/marketplace/products/n8n`["accelerometer=(), ambient-light-sensor=(), autoplay=(), camera=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=('self'), midi=(), usb=()"]` https://www.ziggo.nl/entertainment/series/grote-gezinnen-emigreren/seizoen-2`['geolocation=();midi=();notifications=();push=();sync-xhr=();microphone=();camera=();magnetometer=();gyroscope=();speaker=(self);vibrate=();fullscreen=(self);payment=();']` https://www.ec-lyon.fr/zh-hant/search?page=5`["accelerometer=(), geolocation=('self'), fullscreen=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=('self')"]` https://web.de/?mc=021158`["microphone 'none'; camera 'none'; geolocation 'none'; usb 'none'"]` https://www.bt.com/tech-tips?gclid=Cj0KCQjwy6T1BRDXARIsAIqCTXr4qL3d7cc2vm0JR-mv-RLWXOyunv4faUhQEpQivWtmAZH8g_M6LfcaAlYlEALw_wcB`["geolocation 'self'"]` https://www.telkomsel.com/enterprise/product-list-iot`['geolocation=();midi=();notifications=();push=();sync-xhr=();microphone=();camera=();magnetometer=();gyroscope=();speaker=(self);vibrate=();fullscreen=(self);payment=();']` https://www.gmx.net/`["microphone 'none'; camera 'none'; geolocation 'none'; usb 'none'"]` https://www.churchofjesuschrist.org/learn/history/sites/historic-nauvoo/performing-missionary-common-questions?lang=eng`['fullscreen=(self, https://history-local.churchofjesuschrist.org, https://history-dev.churchofjesuschrist.org, https://history-test.churchofjesuschrist.org, https://history-stage.churchofjesuschrist.org, https://history.churchofjesuschrist.org);']` https://www.cloud.com/?ref=todobi.com`["microphone 'none'; camera 'none'; usb 'none'"]` https://www.elcorteingles.es/centroscomerciales/eu/hipercor/centros/hipercor-arroyo-de-la-encomienda/catalogo-de-servicios`['geolocation=(self, https://example.com)']` https://www.zus.pl/ezus/logowanie%EF%BF%BC`['microphone=(); geolocation=(); camera=()']`	216,269	10,508,143	2.06%
Cross-Origin-Opener-Policy Samples (6) https://www.waze.com/discuss/t/topic/395213`['same-origin-allow-popups', 'same-origin-allow-popups']` https://www.ub.edu/drogodependencies/el-master-de-drogodependencies-ub-rep-el-guardo-impuls-per-la-seva-trajectoria/`['unsafe-none', 'unsafe-none']` https://userway.org/pt/blog/leitor-de-tela/`['same-origin', 'same-origin']` https://www.sofi.com/invite/invest?gcp=07606a7b-92ea-4b60-8246-11b5bb258cdb&isAliasGcp=false`['same-origin', 'same-origin']` https://www.bajajfinserv.in/insta-emi-card?utm_source=website&utm_medium=referral&utm_campaign=smartwatches`['same-origin', 'same-origin']` https://www.klevu.com/audit/?utm_campaign=Ecommerce+Discovery+Index+UK&utm_source=PR&utm_content=uk-report-press-release`['unsafe-none', 'unsafe-none']`	133,992	4,425,144	3.03%
Cross-Origin-Embedder-Policy Samples (11) https://fas.org/publication/no-fly-transparency/`["unsafe-none; report-to='default'"]` https://www.itu.int/women-and-girls/girls-in-ict/es/dia-internacional-de-las-ninas-en-las-tic-de-2022/`["unsafe-none; report-to='default'"]` https://www.sueddeutsche.de/deutschland-favorit/en/favourite/beurer-shiatsu-massage-chair-mc-3800/`["unsafe-none; report-to='default'"]` https://www.ub.edu/drogodependencies/el-master-de-drogodependencies-ub-rep-el-guardo-impuls-per-la-seva-trajectoria/`["unsafe-none; report-to='default'", "unsafe-none; report-to='default'"]` https://www.chileatiende.gob.cl/fichas/132925-consultas-reclamos-felicitaciones-o-sugerencias-al-servicio-nacional-de-reinsercion-social-juvenil`['unsafe-none,require-corp']` https://lichess.org/embed/broadcast/prague-international-chess-festival-2026--masters/round-6/su8Pe1B4/4LOSPDOm?bg=system`['require-corp', 'credentialless']` https://www.stanford.edu/`["unsafe-none; report-to='default'"]` https://www.bajajfinserv.in/insta-emi-card?utm_source=website&utm_medium=referral&utm_campaign=smartwatches`['credentialless', 'credentialless']` https://www.klevu.com/terms-of-service/`["unsafe-none; report-to='default'"]` https://www.hcaptcha.com/privacy`['require-corp; report-to="default";']` https://pubnative.net/tos/`["unsafe-none; report-to='default'"]`	129,084	986,895	13.08%
Cross-Origin-Embedder-Policy-Report-Only Samples (7) https://fas.org/publication/no-fly-transparency/`["unsafe-none; report-to='default'"]` https://www.itu.int/women-and-girls/girls-in-ict/es/dia-internacional-de-las-ninas-en-las-tic-de-2022/`["unsafe-none; report-to='default'"]` https://www.sueddeutsche.de/deutschland-favorit/en/favourite/beurer-shiatsu-massage-chair-mc-3800/`["unsafe-none; report-to='default'"]` https://www.ub.edu/drogodependencies/el-master-de-drogodependencies-ub-rep-el-guardo-impuls-per-la-seva-trajectoria/`["unsafe-none; report-to='default'", "unsafe-none; report-to='default'"]` https://www.stanford.edu/`["unsafe-none; report-to='default'"]` https://www.klevu.com/terms-of-service/`["unsafe-none; report-to='default'"]` https://pubnative.net/tos/`["unsafe-none; report-to='default'"]`	57,640	280,435	20.55%
Cross-Origin-Opener-Policy-Report-Only Samples (7) https://fas.org/publication/no-fly-transparency/`["unsafe-none; report-to='default'"]` https://www.itu.int/women-and-girls/girls-in-ict/es/dia-internacional-de-las-ninas-en-las-tic-de-2022/`["unsafe-none; report-to='default'"]` https://www.sueddeutsche.de/deutschland-favorit/en/favourite/beurer-shiatsu-massage-chair-mc-3800/`["unsafe-none; report-to='default'"]` https://www.ub.edu/drogodependencies/el-master-de-drogodependencies-ub-rep-el-guardo-impuls-per-la-seva-trajectoria/`["unsafe-none; report-to='default'", "unsafe-none; report-to='default'"]` https://www.stanford.edu/`["unsafe-none; report-to='default'"]` https://www.klevu.com/terms-of-service/`["unsafe-none; report-to='default'"]` https://pubnative.net/tos/`["unsafe-none; report-to='default'"]`	52,231	411,336	12.70%
Reporting-Endpoints Samples (2) https://www.amazon.jobs/en-US/applicant/login?job=2704969&relay=%2Fen-US%2Fapplicant%2Fjobs%2F2704969%2Fapply`['csp-endpoint=/api/reporting/csp']` https://www.logicmonitor.com/support/lm-logs/lm-logs-overview`["csp_report='https://www.logicmonitor.com/wp-json/lm/v1/csp-report'"]`	49,451	3,012,499	1.64%
Cache-Status Samples (1) https://www.zdf.de/video/dokus/collection-index-page-artede-collection-artede-rc-013956-14874/page-video-artede-re-das-einfache-leben-als-wahrer-luxus-100`["ingress-cache; fwd=miss; detail='now:Thu, 12 Mar 2026 17:23:05 GMT'"]`	44,312	1,083,519	4.09%
Accept-CH	14,098	3,776,034	0.37%
Proxy-Status Samples (1) https://www.capcut.com/template-detail/bahome-teri-meri/7278921125252353282`['9999999502005052']`	1,489	7,880	18.90%
CDN-Cache-Control	1,126	357,759	0.31%
Speculation-Rules	1,040	2,165,738	0.05%

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	236,797	33.8%	0.8%
nginx	166,084	23.7%	0.6%
cloudfront	89,401	12.8%	0.5%
fastly	83,144	11.9%	0.8%
envoy	75,142	10.7%	1.6%
apache	56,748	8.1%	0.4%
akamai	37,910	5.4%	0.3%
nextjs	10,089	1.4%	0.1%
azure-front-door	9,022	1.3%	0.6%
vercel	2,096	0.3%	0.1%

BADBAD_JSON~25 sites (0.1%)122,947

The %(field_name)s header value isn't valid JSON.

Samples (5)

https://www.newegg.com/p/0UP-000F-00N84category=categories.GENERAL, field_name=NEL, error=Expecting ',' delimiter: line 1 column 46 (char 45)
https://www.amnesty.org/en/documents/asa13/7829/2024/en/category=categories.GENERAL, field_name=NEL, error=Expecting value: line 1 column 2 (char 1)
https://dns.google/category=categories.GENERAL, field_name=Report-To, error=Expecting property name enclosed in double quotes: line 1 column 140 (char 139)
https://1password.com/blog/introducing-travel-mode-protect-your-data-when-crossing-borderscategory=categories.GENERAL, field_name=Report-To, error=Expecting ':' delimiter: line 1 column 72 (char 71)
https://www.google-analytics.com/j/collect?v=1&_v=j101&a=339906575&t=pageview&_s=1&dl=https%3A%2F%2Fbiz.chosun.com%2Fstock%2Fstock_general%2F2024%2F05%2F01%2FRONMJBBNOJGW3EVO3JYLLQIIAI%2F&ul=en-us&de=UTF-8&dt=%EB%AF%B8%EB%9E%98%EC%97%90%EC%85%8B%EC%9E%90%EC%82%B0%EC%9A%B4%EC%9A%A9%2C%203%EC%A1%B0%EC%9B%90%20%EA%B7%9C%EB%AA%A8%20%EC%84%B1%EC%88%98%EB%8F%99%20%EB%B6%80%EB%8F%99%EC%82%B0%20%EC%82%AC%EC%97%85%20%EC%B6%94%EC%A7%84%20-%20%EC%A1%B0%EC%84%A0%EB%B9%84%EC%A6%88&sd=24-bit&sr=1600x1200&vp=1600x1200&je=0&_u=YADAAEABAAAAACAAI~&jid=1084555840&gjid=431977370&cid=1099900850.1735088607&tid=UA-162513088-1&_gid=2115852506.1735088608&_r=1&_slc=1&gtm=45He4cc1n815TKJT5Dv839774940za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=1289101341category=categories.GENERAL, field_name=Report-To, error=Expecting property name enclosed in double quotes: line 1 column 142 (char 141)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	90,886	73.9%	0.3%
fastly	15,887	12.9%	0.2%
nextjs	15,515	12.6%	0.2%
akamai	6,583	5.4%	0.1%
nginx	3,064	2.5%	0.0%
apache	2,906	2.4%	0.0%
cloudfront	2,301	1.9%	0.0%

BADBAD_REPORTING_ENDPOINT_SYNTAX~4 sites (0.0%)9,063

The %(name)s reporting endpoint is invalid.

Samples (2)

https://www.dropbox.com/request/tWQZDPhdJZrkzfrD9FBefield_name=Reporting-Endpoints, name=max_age, value=10886400, found_type=int
https://grafana.com/grafana/download/11.6.1?edition=oss&pg=oss-graf&platform=mac&plcmt=resourcesfield_name=Reporting-Endpoints, name=csp-endpoint, value=https://grafana.com/api/csp-reports, found_type=Token

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	870	9.6%	0.0%
cloudfront	20	0.2%	0.0%

BADREPORT_TO_BAD_STRUCTURE~3 sites (0.0%)2,631

The Report-To header value has an invalid structure.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	1,079	41.0%	0.0%
cloudfront	1	0.0%	0.0%

BADPARAM_STAR_QUOTED~3 sites (0.0%)11

The '%(param)s' parameter's value cannot be quoted.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
akamai	8	72.7%	0.0%

BADPARAM_STAR_ERROR~2 sites (0.0%)4

The %(param)s parameter's value is invalid.

BADFIELD_NAME_BAD_SYNTAX~1 sites (0.0%)24

"%(field_name)s" is not a valid field name.

WARNFIELD_DEPRECATED~23,890 sites (48.4%)82,940,943

The %(field_name)s header is deprecated.

Samples (5)

http://www.cvent.com/Pub/eMarketing/Pages/WebEmail.aspx?emstub=C66E5C97-A062-4298-8B2C-C5728764986Ecategory=categories.SECURITY, field_name=X-XSS-Protection, deprecation_ref=https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-XSS-Protection
http://www.google.ru/url?q=https://all-andorra.com/fr/category/blog-fr/engins-militaires-equipement/category=categories.GENERAL, field_name=P3P, deprecation_ref=http://www.w3.org/TR/P3P/#syntax_ext
http://www.kremlin.ru/events/president/news/51283category=categories.GENERAL, field_name=Keep-Alive, deprecation_ref=https://www.rfc-editor.org/rfc/rfc2068.html#section-19.7.1
https://arenascan.com/manga/three-months-of-summer/category=categories.GENERAL, field_name=Report-To, deprecation_ref=https://w3c.github.io/reporting/#header
https://biblehub.com/nlt/vmenus/joshua/9-21.htmcategory=categories.GENERAL, field_name=Keep-Alive, deprecation_ref=https://www.rfc-editor.org/rfc/rfc2068.html#section-19.7.1

field_name

Value	Note fires	Header occurrences	Fires per occurrence
X-XSS-Protection Samples (15) http://www.cvent.com/Pub/eMarketing/Pages/WebEmail.aspx?emstub=C66E5C97-A062-4298-8B2C-C5728764986E`['1; mode=block']` http://www.google.ru/url?q=https://all-andorra.com/fr/category/blog-fr/engins-militaires-equipement/`['0']` https://coub.com/tags/%D0%B4%D0%BC%D0%B8%D1%82%D1%80%D0%B8%D0%B9%20%D1%88%D1%83%D0%B1%D0%B8%D0%BD`['0']` https://cutt.ly/bio/offSe/?2025-6484`['1; mode=block']` https://dev.to/crhistianramirez`['0']` https://disqus.com/by/disqus_PXtRfK1PUg/`['1; mode=block']` https://dzen.ru/list/art/artem-shkrabak-rostov-teatr`['1; mode=block']` https://fantia.jp/posts/3426351`['1; mode=block']` https://fas.org/publication/lrso-mission/`['1; mode=block']` https://feedly.com/cve/CVE-2023-0676`['1; mode=block']` https://github.com/ilastik/ilastik`['0']` https://groww.in/stocks/suryo-foods-industries-ltd/share-holding`['1;mode = block']` https://habr.com/en/news/937464/comments/`['1; mode=block']` https://hackernoon.com/lang/fi/mit%C3%A4-ai-tekee-datatieteelle`['1; mode=block']` https://hotmart.com/pt-br/marketplace/produtos/guia-lunar-para-cultivo/C96833753W`['1; mode=block']`	41,103,756	41,103,756	100.00%
Report-To Samples (15) https://arenascan.com/manga/three-months-of-summer/`['{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=[redacted]']` https://catchthemes.com/support-forum/users/cappellanova/engagements/`['{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=[redacted]']` https://dev.to/crhistianramirez`['{"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=[redacted]']` https://hackernoon.com/lang/fi/mit%C3%A4-ai-tekee-datatieteelle`['{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=[redacted]']` https://n8n.io/integrations/microsoft-to-do/and/teachable/`['{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=[redacted]']` https://stripe.com/en-es/resources/more/immediate-supply-information-vat-processing-spain`['{"group":"wsp_coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report?s=[redacted]']` https://www.elbalad.news/6092115`['{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=[redacted]']` https://www.freejobalert.com/articles/administration-of-dadra-and-nagar-haveli-and-daman-diu-school-teachers-recruitment-2025-3002277`['{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=[redacted]']` https://www.lexmark.com/zh_tw/printers/accessory/14832/CX522-6-Years-Total-1-5-Onsite-Service`['{"group":"lxk-report","endpoints":[{"url":"/content/csp/csp-report"}]}']` https://www.prosport.ro/fotbal-intern/nationala/gica-hagi-din-nou-selectionerul-romaniei-razvan-burleanu-a-lamurit-lucrurile-va-asigur-20377721`['{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=[redacted]']` https://www.shopify.com/ng/partners/blog/shopify-unite-2017-announcing-track-sessions`['{"endpoints":[{"url":"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=[redacted]']` https://www.theepochtimes.com/us/california-has-9-national-parks-more-than-any-other-state-5625597`['{"endpoints":[{"url":"https:\\/\\/v4.cf-nel.com\\/report"}],"group":"cf-nel-endpoint","max_age":604800},{"endpoints":[{"url":"https:\\/\\/v4.cf-nel.com\\/report"}],"group":"default","max_age":604800}']` https://www.twitch.tv/lobosjr`['{"group":"nel","max_age":86400,"include_subdomains":true,"endpoints":[{"url":"https://nel.twitch.tv/nel"}]}']` https://www.wikidata.org/wiki/Q58021015`['{ "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] }']` https://www.youtube-nocookie.com/embed/iu6CSPqgOWM?rel=0`['{"group":"youtube_other","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_other"}]}']`	14,955,375	14,955,363	100.00%
Keep-Alive Samples (15) http://www.kremlin.ru/events/president/news/51283`['timeout=10']` https://biblehub.com/nlt/vmenus/joshua/9-21.htm`['timeout=5, max=100']` https://jin115.com/archives/51937808.html`['timeout=3']` https://kidshealth.org/Hackensack/en/parents/blood-test-hemoglobin.html`['timeout=5, max=22']` https://taz.de/Unternehmenskriminalitaet/!t5620296/`['timeout=5, max=100']` https://twitcasting.tv/kyuusyoku_girl`['timeout=10, max=100']` https://warwick.ac.uk/fac/arts/applyingtostudy/currentstudents/careersfocus/`['timeout=5']` https://www.donga.com/news/Society/article/all/20260219/133380793/1`['timeout=5, max=88']` https://www.gobiernodecanarias.org/buscador/search?dataOrigin=WEB&fqtr=odt&ambitos=eucd,ece,apjs,dsidj,hpae,gobcan,telccpt&p.page=249&p.size=10`['timeout=5, max=500']` https://www.hawaii.edu/calendar/uh/2026/02/18/45096.html?et_id=58702`['timeout=5, max=100']` https://www.jst.go.jp/sis/scienceagora/2025/booth/101.html`['timeout=5, max=100']` https://www.ucm.es/estudios/2023-24/master-auditoriaycontabilidad2020-estudios-competencias`['timeout=10, max=98']` https://www.1tv.ru/news/2021-08-06/411018-glave_minoborony_na_krasmashe_pokazali_tseha_gde_proizvodyat_noveyshuyu_raketu_sarmat`['timeout=15']` https://www.in.gov/jaspercountypubliclibrary/`['timeout=5, max=55']` https://www.nuro.jp/lp/980/?SmRcid=lis_lis_gg_bd001-KANTO_all_MCRY_tid10130&gclid=Cj0KCQiAieWOBhCYARIsANcOw0ygWDm0RnxWmx_iA1GTvJGzg5a5WHQCbUdBN2X1XDGMsV-9m0kyvRgaAqbmEALw_wcB`['timeout=5, max=100']`	6,182,623	6,182,623	100.00%
X-Download-Options Samples (15) https://coub.com/tags/%D0%B4%D0%BC%D0%B8%D1%82%D1%80%D0%B8%D0%B9%20%D1%88%D1%83%D0%B1%D0%B8%D0%BD`['noopen']` https://dev.to/crhistianramirez`['noopen']` https://groww.in/stocks/suryo-foods-industries-ltd/share-holding`['noopen']` https://habr.com/en/news/937464/comments/`['noopen']` https://hotmart.com/pt-br/marketplace/produtos/guia-lunar-para-cultivo/C96833753W`['noopen']` https://qiita.com/tags/tableaudesktop`['noopen']` https://unstoppabledomains.com/d/9898.ltc`['noopen']` https://www.afternic.com/forsale/brandspankingnew.com?utm_source=TDFS_DASLNC&utm_medium=parkedpages&utm_campaign=x_corp_tdfs-daslnc_base&traffic_type=TDFS_DASLNC&traffic_id=daslnc&`['noopen']` https://www.buzzsprout.com/2228864/episodes/13637252-the-road-to-thriving-nonprofits-exploring-outcome-measures-and-data-systems`['noopen']` https://www.expedia.com/Cane-Garden-Bay-Hotels-The-Lighthouse-Villas.h9518695.Hotel-Information`['noopen']` https://www.gettyimages.com/detail/news-photo/american-actor-and-singer-bing-crosby-presents-the-bing-news-photo/73904846?et=IkdwaZ2bSrBNpxjQDf12fg`['noopen']` https://www.ghostery.com/whotracksme/websites/fcupdate.nl?utm_campaign=%C4%B0nfodemi+B%C3%BClteni&utm_source=Revue+newsletterfavicon.icofavicon.icofavicon.icofavicon.ico`['noopen']` https://www.gigabyte.com/ua/Motherboard/Z890-AI-TOP/support`['noopen']` https://www.istockphoto.com/pt/vetorial/arrows-black-icon-set-vector-arrow-collection-of-different-arrows-icons-arrow-gm1357170852-431147513`['noopen']` https://www.nordstrom.com/browse/sale/women/shoes/heels?filterByBrand=kenneth-cole`['noopen']`	6,169,336	6,169,336	100.00%
X-UA-Compatible Samples (15) http://www.kremlin.ru/events/president/news/51283`['IE=edge']` https://knowyourmeme.com/sensitive/photos/2865939-minus8`['IE=Edge,chrome=1']` https://www.aaa.com/autorepair/locations/parsippany-nj`['IE=edge']` https://www.bibliaon.com/versiculo/1_corintios_9_2/`['IE=edge']` https://www.christies.com/en/lot/lot-5411990`['IE=Edge']` https://www.lexmark.com/zh_tw/printers/accessory/14832/CX522-6-Years-Total-1-5-Onsite-Service`['IE=Edge']` https://www.tbank.ru/business/contractor/legal/1023602619281/`['IE=Edge']` https://clinicaltrials.gov/study/NCT03976765`['IE=Edge']` https://mailchimp.com/resources/email-marketing-benchmarks/?ref=ericlbarnes.com`['IE=edge,chrome=1']` https://www.newsmax.com/newsmax-tv/rudy-reyes-benghazi-hearings-house/2015/10/26/id/699113/`['IE=Edge', 'IE=edge']` https://www.rug.nl/rechten/organisatie/vakgroepen/transboundary-legal-studies/nieuwsbrief/`['IE=edge']` https://www.ub.edu/ubtv/video/beat-launch-event-2017`['IE=edge']` https://www.xing.com/profile/Carina_Brehl`['IE=edge']` http://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&url=https%3A%2F%2Fonlinecustomworkout.wordpress.com&cc=in&setlang=hi&sid=0FEF1B2CE68266B70C170C2EE78A675F`['IE=edge']` https://uwaterloo.ca/intelligent-technologies-wellness-independent-living/bibcite/export/bibtex/bibcite_reference/58`['IE=edge']`	5,210,198	5,210,198	100.00%
P3P Samples (15) http://www.google.ru/url?q=https://all-andorra.com/fr/category/blog-fr/engins-militaires-equipement/`['CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://disqus.com/by/disqus_PXtRfK1PUg/`['CP="DSP IDC CUR ADM DELi STP NAV COM UNI INT PHY DEM"']` https://jin115.com/archives/51937808.html`['CP="BUS OUR PHY STP ADM CUR DEV PSA PSD"']` https://www.championat.com/football/news-15061-longevka-krylja-mogut-dognat-cska-do-letnej-pauzy.html`['CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"']` https://www.google.co.th/url?sa=i&rct=j&q=&esrc=s&source=images&cd=&cad=rja&uact=8&ved=0CAcQjRw&url=https://pensiuneacoral.ro/fr.php?cid=30%26kys=jupe+pliss%C3%A9e+avec+ceinture%26g=9`['CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.google.com.qa/url?q=https://nangcuc.in/`['CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.google.com.sa/url?q=https://todaybriefwire.com`['CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.google.com.sl/url?q=https://birkenstocksandalsoutlet.us.com/`['CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.google.tn/url?q=https://acewave.us`['CP="This is not a P3P policy! See g.co/p3phelp for more info."']` https://www.jotform.com/pdf-templates/video-release-consent-letter`['CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"']` https://www.pearltrees.com/jatoy/resume/id11794841`['policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa OUR NOR NAV"']` https://www.uu.se/en/collaboration-innovation/ama/news/archive/2026-01-19-aimday-materials-2026`['CP="This is not a P3P policy!"']` https://www.youtube.com/embed/Nhiomp1yNRw`['CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."']` https://runsignup.com/Race/Register/?raceId=183130`['CP="CAO PSA OUR"']` https://www.bls.gov/oes/2021/may/474071se.htm`['CP="NOI DSP COR NID CURaADMa OUR STP"']`	3,999,717	3,999,717	100.00%
Expect-CT Samples (15) https://feedly.com/cve/CVE-2023-0676`['max-age=86400, enforce']` https://www.lance.com.br/corinthians/corinthians-prepara-homenagens-para-cassio-antes-de-reencontro-com-idolo.html`['max-age=86400, enforce']` https://www.nordstrom.com/browse/sale/women/shoes/heels?filterByBrand=kenneth-cole`['max-age=0']` https://www.homedepot.com/p/4-in-x-4-in-Pressure-Treated-Unfinished-Pine-Ball-Top-Finial-102615/100051746`['max-age=0']` https://www.marmiton.org/recettes/index/categorie/entree/72`['max-age=3600']` https://www.salesforce.com/uk/news/stories/tableau-einstein-gpt-user-insights/?bc=OTH`['max-age=0']` https://yoomoney.ru/oplata/tsj-chaiekovskogo-6-4`['max-age=0']` https://www.intercom.com/intercom-link?company=Jetty&solution=customer-support&utm_campaign=intercom-link&utm_content=We+run+on+Intercom&utm_medium=help-center&utm_referrer=http%3A%2F%2Fayuda.jetty.mx%2Fes%2Fcollections%2F757920-aplicacion&utm_source=desktop-web`['max-age=0']` https://www.thairath.co.th/money/economics/thai_economics/2107237`['max-age=86400, enforce']` https://www.emirates.com/hu/hungarian/help/faq-topics/emirates-skywards/faq/what-is-the-conversion-rate-that-applies-for-cash-miles-tickets/`['max-age=0']` https://www.louvre.fr/en/what-s-on/events-activities?type=80,59,15,100&age=6&date=w2024-03-10`['max-age=0']` https://www.mlb.com/stories/player/670329?storylocal=player-page-header-embed`['max-age=0']` https://www.adidas.com/us/regular_fit-women-tiro-t_shirts`['max-age=0']` https://www.open.ac.uk/Arts/reading/UK/record_details.php?id=10288`['max-age=86400, enforce']` https://mailchimp.com/find-an-expert/jala-design`['max-age=0']`	1,752,802	1,752,802	100.00%
Feature-Policy Samples (15) https://wolt.com/fi/fin/espoo/restaurant/uuno-niittykumpu/uuno-dipit-itemid-675c285e0edfd5e8a887d8dc`["camera 'none';microphone 'none';"]` https://www.ilgiornale.it/news/samp-studia-formula-almiron.html`["fullscreen 'self'; autoplay 'self'; payment 'self'"]` https://coda.io/@malcolm/transformation-toolkit/part-4-shaping-22`["fullscreen ; autoplay 'self'; geolocation "]` https://www.eset.com/pl/business/request-business-trial-efde/`["accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'; ambient-light-sensor 'none'; autoplay 'none'; encrypted-media 'none'; fullscreen 'self' https://www.youtube.com; midi 'none'; picture-in-picture 'none'; spea…[truncated]"]` https://www.finanzen.net/offene-stellen`["geolocation 'none'; midi 'none'; camera 'none'; usb 'none'; magnetometer 'none'; accelerometer 'none'; gyroscope 'none'; microphone 'none'; payment 'none'"]` https://www.wetteronline.de/reisen/story/tirol-winter-achensee?gid=z5236`["geolocation 'self'"]` https://www.amnesty.org/es/documents/afr16/5968/2022/en/`["accelerometer 'self' https://www.youtube-nocookie.com https://www.youtube.com https://youtu.be, encrypted-media 'self' https://www.youtube-nocookie.com https://www.youtube.com https://youtu.be, fullscreen 'self' https://www.youtube-nocookie.com https://www.youtube.com https://youtu.be https://viewer…[truncated]"]` https://www.getresponse.com/help/can-i-forward-subscriber-data-to-a-custom-thank-you-page-in-legacy-forms.html`['accelerometer ; autoplay ; camera ; encrypted-media ; fullscreen ; geolocation ; gyroscope ; magnetometer ; microphone ; midi ; payment ; picture-in-picture ; sync-xhr ; usb ']` https://www.kayak.com/?http://www.kayak.com/=`["camera 'none'; microphone 'none'; midi 'none'; usb 'none'; geolocation 'self'"]` https://www.louvre.fr/en/what-s-on/events-activities?type=80,59,15,100&age=6&date=w2024-03-10`["geolocation 'none'", "clipboard-read 'none'", "payment 'none'", "document-domain 'none'", "camera 'none'", "microphone 'none'", "usb 'none'", "serial 'none'"]` https://www.weforum.org/organizations/cruise/`['']` https://www.dish.com/availability/me/wiscasset`["vibrate 'none'"]` https://www.opentext.com/es/products/electronically-stored-information-discovery`["accelerometer 'none'; gyroscope 'none'; payment 'none'; usb 'none'; geolocation 'self'; camera 'self'; microphone 'self'", "accelerometer 'none'; gyroscope 'none'; payment 'none'; usb 'none'; geolocation 'self'; camera 'self'; microphone 'self'"]` https://www.sumup.com/de-at/small-businesses/?share_source=a052p00001NAbuV&share_campaign=0-60k_automation-pt-PT&utm_campaign=0-60k_automation-el-GR&partner=PSCGF34V&utm_source=a052p00001NAbuV&partner_code=PSCGF34V`["geolocation 'self'; microphone 'none'; camera 'none'; payment 'none'"]` https://www.ubs.com/no/en/assetmanagement/funds/etf/ie00b50xjx92-ubs-etf-ie-cmci-composite-sf-ucits-etf-hedged-to-gbp-a-acc-pd001.html`["camera 'self'; microphone 'self'"]`	1,494,279	1,494,279	100.00%
X-Content-Security-Policy Samples (15) https://fas.org/publication/lrso-mission/`["default-src 'self'; img-src ; media-src data:;"]` https://packagist.org/packages/tfrommen/external-content`["default-src 'self'; base-uri 'none'; block-all-mixed-content; connect-src 'self' https://.algolia.net https://.algolianet.com; frame-src https://www.google.com/recaptcha/; img-src 'self' https: data:; object-src 'none'; script-src 'unsafe-eval' https://www.gstatic.com/recaptcha/ 'strict-dynamic' '…[truncated]"]` https://reliefweb.int/report/central-african-republic/d-claration-la-presse-faite-par-le-conseil-de-s-curit-sur-l-0`["default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com www.gstatic.com https://.google.com https://.googletagmanager.com .google-analytics.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.popupsmar…[truncated]"]` https://www.postman.com/material-engineer-28604391/api-testing/overview`["default-src 'self' .postman.co .postman.com .pstmn.io; base-uri 'self'; font-src 'self' data: .getpostman.com .postman.co .cdn.postman.com fonts.gstatic.com www.postman.com fonts.googleapis.com cdnjs.cloudflare.com; frame-ancestors .postman.co www.postman.com; frame-src looker.postman.co dl-p…[truncated]"]` https://www.thetrainline.com/de/fernbus/civitanova-marche-montegranaro-nach-firenze`["frame-ancestors 'self'"]` https://www.uber.com/global/es-es/r/cities/tigery-idf-fr/`["frame-ancestors 'self' 'self' blob: d1a3f4spazzrp4.cloudfront.net d1w2poirtb3as9.cloudfront.net d3i4yxtzktqr9n.cloudfront.net d1nyezh1ys8wfo.cloudfront.net d3i4yxtzktqr9n.cloudfront.net .altrulabs.com .doubleclick.net .facebook.com .facebook.net .google-analytics.com .google.com .hotjar.com …[truncated]", 'report-uri https://csp.uber.com/csp?a=uber-sites&ro=false']` https://www.w3schools.com/jsreF/jsref_regexp_exec.asp`["frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;"]` https://www.weather.gov/ict/event_20190223`["default-src 'self' 'unsafe-inline' 'unsafe-eval' "]` https://www.chase.com/es/locator/banking/us/ca/granada-hills/17900-chatsworth-st`["frame-ancestors 'none'"]` https://www.hp.com/id-id/shop/laptops-tablets/personal-laptops/hp-essential-laptops.html?colour=silver&offer-type=offers&subbrand=hp-essentials`['']` https://www.ubereats.com/pl/category/poznan-wielkopolskie/brazilian`["block-all-mixed-content; frame-src 'self' https://.uber.com https://.ubereats.com http://.cdn-net.com https://tr.snapchat.com https://payments.uber.com https://payments-guest.uber.com https://payments.ubereats.com https://payments.postmates.com https://payments.order.store https://wpe-breeze.uber…[truncated]"]` https://www.ntv.ru/embed/1697306/?amp`["frame-ancestors 'self' yastatic.net https://.yandex.ru yandex.ru ya.ru .ya.ru .turbopages.org ntv-ru.turbopages.org .cdn.ampproject.org .ntv.ru .google.com .google.ru google.ru .wi-fi.ru wi-fi.ru https://.iframe-toloka.com;"]` https://www.boursorama.com/actualite-economique/actualites/entretien-des-barrages-francais-ce-litige-avec-bruxelles-qui-bloque-les-investissements-dans-l-hydroelectrique-tricolore-2752adbd3011315fc5b202e24ff18c33`["frame-ancestors 'self' .boursorama.com *.boursobank.com"]` https://www.wattpad.com/search/%D0%A2%D0%B2%D0%BE%D1%80%D0%B8%20%D0%B2%20%D1%88%D0%B5%D1%81%D1%82%D0%B8%20%D1%82%D0%BE%D0%BC%D0%B0%D1%85`["frame-ancestors 'self'"]` https://www.hpe.com/psnow/generateDDS/HPE%2025Gb%20SFP28%20to%20SFP28%207m%20Active%20Optical%20Cable%20data%20sheet-PSN1009449915GREN.pdf?oid=1009449915&cc=GR&lc=EN&softroll=0&prelaunch=false&print=&section=&prelaunchSection=&softrollSection=&deepLink=&utm_source=&utm_medium=&utm_campaign=&utm_content=&utm_term=&isLinearized=false&contentDisposition=attachment`['frame-ancestors https://partner.hpe.com https://partner.hpe.com:8443 https://psnow.ext.hpe.com https://partner-itg.itcs.hpe.com https://partner-itg.itcs.hpe.com:8443 https://hc9t06952.itcs.hpe.com https://hpe.lookbookhq.com https://prp-dxp.it.hpe.com https://paths.ext.hpe.com https://www-qa-west.ext…[truncated]']`	980,283	980,283	100.00%
X-Webkit-CSP Samples (15) https://www.postman.com/material-engineer-28604391/api-testing/overview`["default-src 'self' .postman.co .postman.com .pstmn.io; base-uri 'self'; font-src 'self' data: .getpostman.com .postman.co .cdn.postman.com fonts.gstatic.com www.postman.com fonts.googleapis.com cdnjs.cloudflare.com; frame-ancestors .postman.co www.postman.com; frame-src looker.postman.co dl-p…[truncated]"]` https://www.thetrainline.com/de/fernbus/civitanova-marche-montegranaro-nach-firenze`["frame-ancestors 'self'"]` https://www.uber.com/global/es-es/r/cities/tigery-idf-fr/`["frame-ancestors 'self' 'self' blob: d1a3f4spazzrp4.cloudfront.net d1w2poirtb3as9.cloudfront.net d3i4yxtzktqr9n.cloudfront.net d1nyezh1ys8wfo.cloudfront.net d3i4yxtzktqr9n.cloudfront.net .altrulabs.com .doubleclick.net .facebook.com .facebook.net .google-analytics.com .google.com .hotjar.com …[truncated]", 'report-uri https://csp.uber.com/csp?a=uber-sites&ro=false']` https://www.hp.com/id-id/shop/laptops-tablets/personal-laptops/hp-essential-laptops.html?colour=silver&offer-type=offers&subbrand=hp-essentials`['']` https://www.ubereats.com/pl/category/poznan-wielkopolskie/brazilian`["block-all-mixed-content; frame-src 'self' https://.uber.com https://.ubereats.com http://.cdn-net.com https://tr.snapchat.com https://payments.uber.com https://payments-guest.uber.com https://payments.ubereats.com https://payments.postmates.com https://payments.order.store https://wpe-breeze.uber…[truncated]"]` https://www.wattpad.com/search/%D0%A2%D0%B2%D0%BE%D1%80%D0%B8%20%D0%B2%20%D1%88%D0%B5%D1%81%D1%82%D0%B8%20%D1%82%D0%BE%D0%BC%D0%B0%D1%85`["frame-ancestors 'self'"]` https://www.boticario.com.br/make-b/maquiagem/rosto/po?acabamento=luminoso`["default-src 'self' data: * blob:; img-src 'self' blob: data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self' ; style-src 'unsafe-inline' ;"]` https://www.sonyliv.com/shows/good-night-india-1700000853/a-mother-s-antics-1000159580`["frame-ancestors 'self'"]` https://www.esri.com/training/catalog/5cf6d5842845f65b2cca2e67/spacetime-analysis-finding-temporal-trends/`['frame-ancestors .esri.com; upgrade-insecure-requests']` https://robinhood.com/login/?category=racing&id=bass-pro-shops-night-race-winner-dec-31-1969`["base-uri 'self'; block-all-mixed-content; connect-src robinhood.com fp.robinhood.net 'self' .robinhood.com www.google-analytics.com https://analytics.google.com https://googletagmanager.com https://.analytics.google.com https://.googletagmanager.com wss://tsock.us1.twilio.com https://media.us1.tw…[truncated]"]` https://www.splunk.com/en_us/resources/videos/master-it-ot-convergence-with-splunk.html`['frame-ancestors .splunk.com .touchcast.com .salesforce.com .cisco.com']` https://www.tchibo.de/kaffeeakademie/wiki/balance`["base-uri 'self'; default-src 'self'; form-action 'self'; frame-ancestors 'self'; require-sri-for script style"]` https://www.zappos.com/p/womens-vionic-willa-ii-cream-tumbled-leather/product/9549311/color/669730`['frame-ancestors na.amzheimdall.com delorean-na.amazon.com delorean-prod.corp.amazon.com delorean-na.sandbox.amazon.com delorean-sandbox.corp.amazon.com delorean-preprod.corp.amazon.com delorean-beta.corp.amazon.com delorean-alpha.corp.amazon.com potserviceui-gamma.zappos.com potserviceui-gamma.6pm.c…[truncated]']` https://www.shein.com.mx/Decorative-Bells-Dinner-Bell-p-308712803.html?mallCode=2&pageListType=4`['frame-ancestors .shein.com https://www.shein.com.hk https://www.shein.com.vn https://www.shein.com.mx https://www.shein.co.uk https://www.shein.tw https://www.shein.se https://co.shein.com https://www.shein.com.co']` https://www.nseindia.com/static/resources/nse-and-government-of-odisha-sign-mou`["default-src 'self'; font-src 'self' https://.googleapis.com https://.gstatic.com https://.youtube.com https://.bootstrapcdn.com https://.highcharts.com https://.nse.co.in https://.nseindia.com https://.nseroot.com; img-src 'self' data: https://www.google-analytics.com https://analytics.googl…[truncated]"]`	459,328	459,328	100.00%
Accept-CH-Lifetime Samples (15) https://www.deviantart.com/kalebmay14/art/La-La-and-Dipsy-drawing-on-a-whiteboard-1181401307`['86400']` https://www.airbnb.com/rooms/39256516?source_impression_id=p3_1705578242_Fn9TrD6vYChxoza3`['31536000']` https://www.tokopedia.com/p/pertukangan/alat-ukur-industri/pengukur-arus-air`['86400']` https://www.audible.com/es_US/search?searchAuthor=Immersion-Language-Audiobooks`['86400']` https://yandex.com.tr/games/app/merge-fnaf-animatronik-savasi-490614?utm_source=similar_games`['2592000']` https://www.meta.com/experiences/fugitive-3d/3172007812900383/`['4838400']` https://yandex.uz/games/app/96697`['2592000']` https://yandex.kz/games/app/ugadai-slovo-po-emodzi-soberi-kollektsiiu-devushek-495102`['2592000']` https://www.gmx.net/magazine/unicef/united-internet-unicef-ukrainische-kinder-krieg-schuetzen-35292534`['60']` https://playhop.com/tk/app/251988`['2592000']` https://yandex.by/games/app/ul-tra-evoliutsiia-stil-breinrot-388133?utm_source=similar_games`['2592000']` https://www.messenger.com/help/1042937270223572/?cms_platform=ipad-app&helpref=platform_switcher`['4838400']` https://web.de/wetter/de/brandenburg/falkensee/`['60']` https://yandex.ru/games/app/104082`['2592000']` https://yandex.com/games/vi/developer/60027`['2592000']`	223,048	223,048	100.00%
Public-Key-Pins Samples (3) https://www.vodafone.com.tr/faturaya-ek/marshall-minor-iv/p/aksesuarlar`['pin-sha256=WrVO/NVwDzspUoFoRGbR0vR7gEj25C/saZilznWAQlM=;pin-sha256=5kJvNEMw0KjrCAu7eXY5HZdvyCS13BbA0VJG1RSP91w=;pin-sha256=r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E=;max-age=5184000;includeSubDomains']` https://www.gsa.gov/real-estate/use-it-act-and-occupancy-data/reporting-guidelines`['pin-sha256="1xL8YPVTZM6qofJqJj181/eAOOUQzgWi4Jw+gE8xQ8M="; max-age=3600;']` https://www.inmarsat.com/safety/inmarsat-c/`['max-age=1296000; pin-sha256="cvv+hcZ+EP7Do1cnMVIRLqJHXFl7tjgRqpSm34h/DTk="; pin-sha256="I92nqKO6cgS1Gx4O4s+YbHuyyF6IX3n894ph9mpYSYQ=";']`	85,735	85,735	100.00%
Content-MD5 Samples (15) https://www.imf.org/-/media/files/publications/cr/2019/1jamea2019001.pdf`['JfzG9hUviev9IUTSHApF8Q==']` https://www.deloitte.com/content/dam/assets-zone1/jp/ja/docs/perspectives/audit-assurance/2024/jp-atc-kaikeijyoho-202401-03.pdf`['EWoCPRDT8Vx3j7xyOX6+hA==']` https://www.walmart.ca/blocked?url=L2VuL2Mva3AvYmxhY2stdmVzdC13b21lbg==&uuid=9e4cdfe9-1e49-11f1-835f-9b7e37cb04c6&vid=&g=b`['K+7HWCuycNh5zJ65ak/s5w==']` https://www.ets.org/pdfs/patl/patl-loe-task-3-preliminary-activity.pdf`['wUf2fGnV7RTPMmSKAb+qHQ==']` https://www.analog.com/media/en/technical-documentation/data-sheets/MAX11203-MAX11213.pdf`['GuiUs8PpDljJB/pZXHmtcw==']` https://www.nobelprize.org/uploads/2018/06/advanced-chemistryprize2009-2.pdf`['MgeJceO3sy1WCQmWd6EFlg==']` https://www.thomsonreuters.com/content/dam/helpandsupp/en-us/Topics/sureprep-family/files/2023-medical-expenses.pdf`['PXhcgrytkUmNR/1vhSSRdQ==']` https://www.mcdonalds.com/content/dam/sites/au/nfl/competitions/Fridayz-Live-2025-Winners.pdf`['TKAuZP49HGVeE7qUn5NhNw==']` https://www.panasonic.com/content/dam/common/Global/Learn-More/air-solutions/case-study/pdf-my/Mead%27s%20Business%20Centre.pdf.html`['/kBt5HWVHSdGGOmWr8wsnA==']` https://www.webex.com/content/dam/webex/eopi/assets/healthcare/AdministrativePreparePatientsForTelehealtht.pdf`['dOM5KWb9HoLKquw+lxobxg==']` https://www.nato.int/content/dam/nato/webready/documents/deep/Hybrid-threats-and-hybrid-warfare-ENGLISH.pdf`['a1Rv7kbZJIN6ZzFQehE25w==']` https://www.splunk.com/de_de/pdfs/gated/whitepapers/splunk-why-cyber-resilience-is-the-foundation-for-business-resilience.pdf`['F+WP55o24lHVNcUZlY1eaQ==']` https://www.gmx.net/handy/aktion/`['87MiJq5xMIWAyeIrZxUPvQ==']` https://www.lexmark.com/content/dam/lexmark/collateral/brochures/na/en_ca/CX943adtse-Brochure.pdf`['qdKq6q/qE6PmVCijM3UiTQ==']` https://www.crowdstrike.com/content/dam/crowdstrike/www/en-us/wp/2023/02/2022_05_09_SEC-Cybersecurity-Risk-Mgmt.pdf`['aDgrMu/4GLvhBYqPDe40Bg==']`	67,177	67,177	100.00%
Warning Samples (8) https://www.ispot.tv/brands/ZKJ/donald-j-trump-for-president`['214 huckabuy "Response is optimized for indexing." "Fri, 13 Mar 2026 02:46:33 GMT"']` https://www.creditkarma.com/credit-cards/insights/wells-fargo-active-cash-card`['214 UploadServer gunzipped']` https://www.fastly.com/blog/election-day-2016`['214 UploadServer gunzipped']` https://www.clover.com/online-ordering/plaza-del-mariachi-zebulon`['214 UploadServer gunzipped']` https://bash.com/the-fix-women-s-white-motorsport-girl-graphic-top-170800abqy9/p`['110 kube-router "Response is Stale"']` https://www.losandes.com.ar/temas/municipalidad-de-capital`['110 Response is stale']` https://www.gog.com/en/games?query=Cronos:%20The%20New%20Dawn&order=desc:score`['110 varnish "Response is Stale"']` https://www.superonline.net/ev-interneti/fiber-internet?from=turkcell`['110 Response is stale']`	60,781	60,781	100.00%
Content-Script-Type Samples (6) https://www.news-medical.net/condition/Arthritis`['text/javascript']` https://moodle.org/user/view.php?id=1501539&course=23&lang=fr`['text/javascript']` https://l-tike.com/event/jojofes/`['text/javascript']` https://www.tjsp.jus.br/moodle/sgp/`['text/javascript']` https://trueconf.com/academy/course/view.php?id=3&section=13`['text/javascript']` https://azbyka.ru/pravkurs/mod/forum/discuss.php?d=37558`['text/javascript']`	51,014	51,014	100.00%
Content-Style-Type Samples (7) https://www.news-medical.net/condition/Arthritis`['text/css']` https://moodle.org/user/view.php?id=1501539&course=23&lang=fr`['text/css']` https://l-tike.com/event/jojofes/`['text/css']` https://www.tjsp.jus.br/moodle/sgp/`['text/css']` https://trueconf.com/academy/course/view.php?id=3&section=13`['text/css']` https://azbyka.ru/pravkurs/mod/forum/discuss.php?d=37558`['text/css']` http://www.ibiblio.org/xml/`['text/css']`	50,993	50,993	100.00%
Content-Transfer-Encoding Samples (15) https://www.ucm.es/file/informe-de-verificacion-2009_1_2_3_4_5_6_7_8_9_10_11_12_13_14_15_16_17_18_19`['binary']` https://www.ilmeteo.it/portale/archivio-meteo/Sant'Antioco/2002/Ottobre?format=csv`['binary']` http://pitc.com.pk/index.php/tenders-procurements?download=534:technical-evaluation-rfp-identification-no-pitc-g-224-118-04-2025`['binary']` https://www.overleaf.com/latex/templates/nit-patna-resume/xyvwfkrvwwng.pdf`['binary']` https://www.cnr.it/en/eventi/allegato/13261`['binary']` https://www.mpg.de/21738533/S001_Inhalt_004-005.pdf`['binary']` https://www.paho.org/es/file/86057/download?token=W_Qhi6QO`['binary']` https://www.iubenda.com/privacy-policy/69634854/cookie-policy.pdf`['binary']` https://www.fu-berlin.de/sites/gwp/informationen/dokumente/Handreichung-fuer-Ombudspersonen_FUB.pdf`['binary']` https://www.ecwid.com/fi/downloads/privacy-policy-template-for-online-stores/`['binary']` https://www.zscaler.com/mx/resources/data-sheets/zscaler-privileged-remote-access.pdf`['binary']` https://www.uni-hamburg.de/en/internationales/studierende/incoming/studium-mit-abschluss/waehrend-des-studiums/finanzierung/stipendien-ukraine/en-ukr-motivation.pdf`['binary']` https://www.cancer.gov/node/1199021/icalendar`['binary']` https://www.uvm.edu/femc/CI4/data/archive/project/ithica_new_york_street_tree_inventory/dataset/ithaca-new-york-street-tree-inventory/download_eml`['binary']` https://www.adelaide.edu.au/policies/3143/?dsn=policy.document;field=data;id=5322;m=view`['binary']`	32,000	32,000	100.00%
Protocol Samples (1) https://www.toyota.com/espanol/deals-incentives/missouri/powersville/`['https']`	21,803	21,803	100.00%
Set-Cookie2 Samples (1) https://www.bancsabadell.com/cs/Satellite/SabAtl/bs/1191332197099/ca/segmento%253DEmpresas%2526prefijoruta%253Dtxempbs%252F%2526contentId%253D1191332197099%2526mapa%253Dtrue%2526nivel%253D1?segmento=Empresas	17,387	17,387	100.00%
PICS-Label	8,114	8,114	100.00%
MIME-Version Samples (9) http://www.elcorteingles.es/ocio/search?Ndpto=5&Ntt=9782881245114`['1.0']` https://www.uline.com/product/AdvSearchResult?Ref=Pwrshp&Source=ALL&keywords=xyzbub`['1.0']` https://www.hp.com/ch-de/shop/product.aspx?id=7P402EA&opt=UUZ&sel=NTB&lang=de-CH`['1.0']` https://www.dnb.com/de-de/upik/`['1.0']` http://www.nature.org/media/design/index.html`['1.0']` https://www.ibm.com/search`['1.0']` https://www.myntra.com/kurta-sets/kalini/kalini-women-pink-floral-printed-kurta-with-trousers--with-dupatta/17741474/buy?af_xp=custom&af_force_deeplink=true&af_pmod_priority=equal&pid=paisawapas_int&is_retargeting=true&af_click_lookback=1d&utm_source=gh_haulpack&utm_medium=inf_vid&utm_campaign=gh_hp_vid_HPHC1489337_1299_Q5Ifxe&deep_link_value=myntra%3A%2F%2Fmyntra.com%2Fkurta-sets%2Fkalini%2Fkalini-women-pink-floral-printed-kurta-with-trousers--with-dupatta%2F17741474%2Fbuy&c=gh_hp_vid_HPHC1489337_1299_Q5Ifxe`['1.0']` https://www.fda.gov/search?s=WA+0859+3970+0884+Jasa+Design+Interior+Minimalis+Modern+Terpercaya+Laweyan+Solo`['1.0']` https://www.metoffice.gov.uk/pub/data/weather/uk/climate/stationdata/braemardata.txt`['1.0']`	4,410	4,410	100.00%
Public-Key-Pins-Report-Only Samples (1) https://proton.me/fr/mail`['pin-sha256="CT56BhOTmj5ZIPgb/xD5mH8rY3BLo/MlhP7oPyJUEDo="; pin-sha256="35Dx28/uzN3LeltkCBQ8RHK0tlNSa2kCpCRGNp34Gxc="; report-uri="https://reports.proton.me/reports/tls"']`	2,897	2,897	100.00%
DNT Samples (12) https://www.kayak.com/Lucknow-Amausi-Airport.LKO.ap.html`['1']` https://www.dior.com/en_us/beauty/products/dior-prestige-le-sucre-de-gommage-Y0996292.html`['1']` https://www.vam.ac.uk/shop/new-arrivals/gromit-enamel-pin-badge-171700.html`['1']` https://www.skechers.com/arch-fit-arcade--%C2%A0gem-steps/177221_WSL.html`['1']` https://www.belkin.com/uk/products/audio/`['1']` https://www.lg.com/ca_en/tv-soundbars/oled/`['1']` https://belluna.jp/women/tops/cutsew/`['1']` https://www.felissimo.co.jp/fashion/shoeshop_ffn/shoe_category_ffn/sandals_ffn`['1']` https://www.redcross.org/local/iowa/take-a-class/cpr-cedar-rapids-ia`['1']` https://www.marksandspencer.com/fr/l/lingerie/tous-les-v%C3%AAtements-de-nuit/nuisettes-et-chemises-de-nuit/`['1']` https://www.orange.es/?d=`['1']` https://www.asics.com/it/it-it/running-advice/healing-your-heel-plantar/`['1']`	2,452	0	—
Digest	2,114	0	—
Accept-Charset Samples (2) https://www.immobiliare.it/de/`['utf-8;q=0.7,iso-8859-1;q=0.2,;q=0.1']` https://www.lg.com/au/monitors/full-hd-qhd/27ea33v/`['utf-8;q=0.7,;q=0.3']`	1,572	0	—
… 5 more values not shown …

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	26,906,050	32.4%	87.8%
nginx	12,679,519	15.3%	47.9%
apache	9,753,946	11.8%	73.9%
cloudfront	9,563,036	11.5%	56.7%
akamai	8,735,124	10.5%	68.3%
fastly	6,182,849	7.5%	62.3%
envoy	4,406,617	5.3%	91.6%
nextjs	3,302,331	4.0%	39.9%
azure-front-door	748,396	0.9%	52.4%
vercel	682,108	0.8%	36.0%
… 1 more layers not shown …

WARNNEL_REPORT_TO_MISSING~9,215 sites (18.7%)12,981,431

The reporting endpoint '%(value)s' is not defined.

Samples (5)

https://teletype.in/@imed3/1207297.htmlfield_name=NEL, key=report_to, value=cf-nel
https://tsn.ua/ru/video/video-novini/v-nikolaeve-vodolazy-prodolzhayut-iskat-telo-fotografa-yuriya-pershina.htmlfield_name=NEL, key=report_to, value=cf-nel
https://www.alchemer.com/chatmeter/2025-review-generation/field_name=NEL, key=report_to, value=cf-nel
https://www.freejobalert.com/article/what-happened-to-stephen-colbert-show-why-is-the-stephen-colbert-late-show-being-cancelled-12835field_name=NEL, key=report_to, value=cf-nel
https://www.hugedomains.com/domain_profile.cfm?d=airsoftpanda.comfield_name=NEL, key=report_to, value=cf-nel

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	12,507,607	96.3%	40.8%
nextjs	671,436	5.2%	8.1%
fastly	313,622	2.4%	3.2%
cloudfront	268,123	2.1%	1.6%
vercel	207,589	1.6%	10.9%
nuxt	104,738	0.8%	10.2%
envoy	101,672	0.8%	2.1%
nginx	56,531	0.4%	0.2%
akamai	25,721	0.2%	0.2%
apache	5,745	0.0%	0.0%
… 1 more layers not shown …

WARNBAD_SYNTAX~3,482 sites (7.1%)10,697,525

The %(field_name)s field value doesn't conform to its specified syntax.

Samples (5)

https://coub.com/tags/matt%20damonfield_name=X-Frame-Options, ref_uri=https://www.rfc-editor.org/rfc/rfc7034
https://imgur.com/gallery/V3uespnfield_name=Access-Control-Allow-Credentials, ref_uri=https://fetch.spec.whatwg.org/#http-access-control-allow-credentials
https://qiita.com/plateau-academy/following_tagscategory=categories.GENERAL, field_name=Link, ref_uri=http://httpwg.org/specs/rfc8288#header.link
https://reliefweb.int/organizations?search=country.exact%3A%22Brazil%22category=categories.GENERAL, field_name=Link, ref_uri=http://httpwg.org/specs/rfc8288#header.link
https://tienphong.vn/thu-phi-duong-bo-bang-cong-nghe-ve-tinh-tai-bi-post1118753.tpofield_name=ETag, ref_uri=http://httpwg.org/specs/rfc9110#field.etag

field_name

Value	Note fires	Header occurrences	Fires per occurrence
Via Samples (15) https://www.163.com/dy/article/KL9IF2H50556IHQX.html?f=post1603_tab_news`['ens-cache38.l2nu20-20[142,142,200-0,M], ens-cache24.l2nu20-20[144,0], ens-cache35.l2hk11[175,175,200-0,M], ens-cache43.l2hk11[177,0], ens-cache25.l2us5[426,426,200-0,M], ens-cache35.l2us5[427,0], ens-cache7.us33[429,429,200-0,M], ens-cache22.us33[433,0]']` https://www.1tv.ru/sport/final-kubka-rossii-po-figurnomu-kataniyu-sredi-yuniorov-2024/raspisanie`['nginx']` https://www.douyin.com/qishui/song/7033798106365822990`['ens-cache3.l2nm125-7[622,0], ens-cache43.l2us4[764,0], ens-cache4.us25[803,0]']` https://www.toutiao.com/zixun/7518165602444347446/`['n172-108-142.szmp04-peer.Creative,n62-197-024.CN-HKG3.Creative,n098-096-213-027.oversea-US-MIO2.Creative']` https://razorpay.com/ifsc-code/hdfc-bank/uttar-pradesh/ghaziabad/citizen-co-operative-bank-ltd.noida/HDFC0CCBL05/`['rws, 1.1 9be9efa555fb3981d71671e41c8c568e.cloudfront.net (CloudFront)']` https://www.21vek.by/nonfiction_books/sigmund_freud/region:kobrin/`['kong/3.7.1']` https://slack.com/intl/es-es/blog/transformation/leadership-lessons-from-ed-catmulls-creativity-inc`['1.1 slack-prod.tinyspeck.com, envoy-www-iad-mlppimlb,envoy-edge-iad-pihstkve']` https://tu-dresden.de/gsw/slk/lsk/die-einrichtung/news/reading-in-sorbian-and-german-with-music?set_language=de`['waitress', '1.1 varnish (Varnish/7.1)']` https://www.military.com/base-guide/robins-air-force-base/contact/hospital/7302`['varnish']` https://www.peacocktv.com/plans/all-monthly?successRedirect=/watch/asset/tv/dame-chocolate/7475127030084826112/seasons/1/episodes/la-doble-moral-episode-133/9e3727cc-33ac-3d5e-9dc4-58acef81c791`['fastly']` https://www.nimo.tv/live/1824898221?_lang=1124`['cache06.oversea-SG-SIN16,cache02.CN-HK-HKG8,cache05.oversea-US-SJC3,cache01.oversea-US-SJC2']` https://www.kth.se/k-ulf/aktuellt/nyheter-fran-k-ulf/forskarskolan-rocit-1.1125629`['CACHE-NS', 'HTTP/1.1 PageCache']` https://www.datacamp.com/portfolio/jagtapanuj`['kong/2.6.1']` https://www.nist.gov/news-events/news/2017/11/new-cyberseek-features`['varnish']` https://wayground.com/join?gc=68579894`['kong/3.3.0, 1.1 420b04515afbec0c45b59617f13f792a.cloudfront.net (CloudFront)']`	5,093,924	30,429,667	16.74%
Link Samples (15) https://qiita.com/plateau-academy/following_tags`['<https://cdn.qiita.com/assets/public/style-e433b80667a154ec0945c625c57dca6a.min.css>; rel=preload; as=style; nopush,<https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@24,500,0..1,-25..0>; rel=preload; as=style; nopush']` https://reliefweb.int/organizations?search=country.exact%3A%22Brazil%22['<https://fonts.googleapis.com>; rel="preconnect"', '<https://fonts.gstatic.com>; rel="preconnect"; crossorigin="1"', '<https://fonts.googleapis.com/css2?family=Roboto:ital,wght@0,300;0,400;0,500;0,700;0,900;1,400;1,700&display=swap>; rel="preload"; as="style"; onload="this.onload=null;this.setAttribute(`rel`, `stylesheet`);"'] https://www.theregister.com/2024/08/14/microsoft_services_agreement_update_warns/?utm_source=newsletter.geekflare.com&utm_medium=referral&utm_campaign=microsoft-just-admitted-their-ai-is-useless`['<https://pagead2.googlesyndication.com/tag/js/gpt.js>; rel=preload; as=script;,</design_picker/ac38e3d7875b747243d324cc6fad1f4f6563acff/javascript/_.js>; rel=preload; as=script;,</css/dd4871fd6132318747b720148044f42594c41776/scaffolding.css>; rel=preload; as=style;,</css/dd4871fd6132318747b720148044…[truncated]']` https://padlet.com/willmcculloch/somalia-ul3ykv7qk5n0xwtg`['<https://v1.padlet.pics/1/image?t=c_scale,dpr_1,e_blur:1000,f_jpg,h_60,w_60&url=https%3A%2F%2Fpadlet-uploads.storage.googleapis.com%2F1881148463%2Fb4887cb9bfa9958f1bd66f3637ebc560%2FWHITE.png>; rel=preload; as=image; fetchpriority=high,<https://padlet.net/fonts/inter/subset/inter-latin.woff2>;rel="p…[truncated]']` https://www.legislation.gov.uk/aep/WillandMar/4/10/section/II/enacted/data.xht?view=snippet&wrap=true`['<>; rel="canonical"']` https://www.bing.com/maps?cp=51.517467~-0.150679&style=c&lvl=15&rtp=~pos.51.517467_-0.150679_Union+Cafe,+W1U+2QA`['<https://r.bing.com/rs/39/9W/cir3,cc,nc/nLboXMWTRormz119x6lavZa4D_A.css?or=w>; rel=preload; as=style,<https://r.bing.com/rs/39/9G/cir3,cc,nc/uOMQ0B-3MPDq5Xv82ekcjG7MPyk.css?or=w>; rel=preload; as=style,</rp/-zGrxRM3NOSQdoYYfcDDgg7TIbA.br.js>; rel=preload; as=script; crossorigin=anonymous; nonce=JkG4…[truncated]']` https://www.cars.com/articles/luxury-doesnt-dilute-power-of-2019-ford-f-150-limited-452696/`['<?w=828&q=20>; rel=preload; fetchpriority=high; as=image; media="(max-width: 740px) and (-webkit-min-device-pixel-ratio: 1.25), (max-width: 740px) and (min-resolution: 120dpi)",<>; rel=preload; fetchpriority=high; as=image; media="(min-width: 741px)",<https://securepubads.g.doubleclick.net/tag/js/gp…[truncated]']` https://www.dell.com/en-ie/shop/dell-laptops/scr/laptops?showMessage=2`['<//i.dell.com/is/image/DellContent/content/dam/ss2/product-images/page/category/laptop/merged-category/plp-banner-all-laptops-2560-235.png?fmt=jpg&wid=690&hei=150>; rel=preload; as=image; media=(max-width: 767px); fetchpriority=high,<//i.dell.com/is/image/DellContent/content/dam/ss2/product-images/p…[truncated]']` https://www.blic.rs/bbc/mol-i-gaspromnjeft-dogovorili-prodaju-nis-a-ministarka-energetike-srbije/mk52yk0['<https://fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900&family=Merriweather+Sans:ital,wght@0,300..800;1,300..800&family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900&family=Roboto:ital,wght@0,100..900;1,100..900&display=swap>; rel=preloa…[truncated]', '<https://ocdn.eu/ucs/static/blicperun/a1fa9cd3393beca977a083c3c1355a5f/v4/build/css/desktop.css>; rel=preload; as=style', '<https://events.ocdn.eu>; rel=preconnect', '<https://ocdn.eu>; rel=preconnect'] https://www.zalando.pl/dzieci-bikini/['<https://mosaic02.ztat.net/zds/assets/fonts/ZalandoSans[wdth,wght].ba6fc11d.woff2>; rel="preload"; as="font"; crossorigin; type="font/woff2"; nopush', '<https://mosaic01.ztat.net/zds/assets/fonts/867e79d.woff2>; rel="preload"; as="font"; crossorigin; type="font/woff2"; nopush', '<https://mosaic01.ztat.net/base-assets/9-1-0/require-2.1.22.min.js>; rel="preload"; as="script"; crossorigin; nopush', '<https://mosaic01.ztat.net/base-assets/9-1-0/assets/bundle.js>; rel="preload"; as="script"; crossorigin; nopush'] https://www.nutanix.com/company/customers/edward-jones`['</etc.clientlibs/ntx-commons/clientlibs/clientlib-base.lc-8be5fc16a1b2627113ed1c4f8eb6d318-lc.min.css>; as=style; rel=preload, <https://cdn.cookielaw.org/scripttemplates/otSDKStub.js>; as=script; rel=preload, <https://cdn.cookielaw.org/consent/5b082e91-0f6a-4969-9e13-6495beff4402/5b082e91-0f6a-4969-…[truncated]']` https://www.fool.com/money/cryptocurrency/uniswap-review/`['<https://g.foolcdn.com>; rel="preconnect", <https://m.foolcdn.com>; rel="preconnect", <https://cdn.segment.com>; rel="preconnect", <https://cdn-4.convertexperiments.com; rel="preconnect", <https://www.googletagmanager.com>; rel="preconnect", <https://cdn.userway.org>; rel="preconnect"']` https://www.bitdefender.com/en-us/blog/businessinsights/author/theodor-porutiu`['<https://assets.adobedtm.com>; rel=dns-prefetch, <https://assets.adobedtm.com>; rel=preconnect, <https://sstats.bitdefender.com >; rel=dns-prefetch, <https://sstats.bitdefender.com >; rel=preconnect, <https://esm.sh>; rel=dns-prefetch, <https://esm.sh>; rel=preconnect, /content/dam/launch/8a93f8486b…[truncated]']` https://www.zalando.fr/outfits/gJf_AHvdSoi/['<https://mosaic02.ztat.net/zds/assets/fonts/ZalandoSans[wdth,wght].ba6fc11d.woff2>; rel="preload"; as="font"; crossorigin; type="font/woff2"; nopush', '<https://mosaic01.ztat.net/zds/assets/fonts/867e79d.woff2>; rel="preload"; as="font"; crossorigin; type="font/woff2"; nopush', '<https://mosaic01.ztat.net/base-assets/9-1-0/require-2.1.22.min.js>; rel="preload"; as="script"; crossorigin; nopush', '<https://mosaic01.ztat.net/base-assets/9-1-0/assets/bundle.js>; rel="preload"; as="script"; crossorigin; nopush'] https://www.zalando.nl/under-armour-unstoppable-hoodie-black-un242g0he-q11.html['<https://mosaic02.ztat.net/zds/assets/fonts/ZalandoSans[wdth,wght].ba6fc11d.woff2>; rel="preload"; as="font"; crossorigin; type="font/woff2"; nopush', '<https://mosaic01.ztat.net/zds/assets/fonts/867e79d.woff2>; rel="preload"; as="font"; crossorigin; type="font/woff2"; nopush', '<https://mosaic01.ztat.net/base-assets/9-1-0/require-2.1.22.min.js>; rel="preload"; as="script"; crossorigin; nopush', '<https://mosaic01.ztat.net/base-assets/9-1-0/assets/bundle.js>; rel="preload"; as="script"; crossorigin; nopush']	1,794,894	43,505,576	4.13%
X-Frame-Options Samples (15) https://coub.com/tags/matt%20damon`['ALLOWALL']` https://www.nuget.org/packages/Crossroads.Microservice.Logging/`['SAMEORIGIN,deny']` https://www.redcross.org/local/dc-va-md-de/about-us/news-and-events/news/world-smile-day-keeping-the-warmth-after-ida.html`['ALLOW-FROM https://adobe.com/', 'ALLOW-FROM https://redcross.org/']` https://www.uv.es/persona/carper2`['SAMEORIGIN, ALLOW-FROM https://esdeveniments.uv.es/']` https://www.aliexpress.com/star/ru/d-article-10006722327160.html`['ALLOW-FROM DENY']` https://www.justice.gov/archives/usao-ma/meet-us-attorney-Lelling`['ALLOW-FROM https://doj365.sharepoint.us/']` https://www.thumbtack.com/md/upper-marlboro/djs/heartrhythm-entertainments/service/506482427728322573`['allow-from https://staging-thumbtack.cs96.force.com https://help.thumbtack.com']` https://www.wipo.int/amc/en/domains/search/case.jsp?case_id=3728`['ALLOW-FROM https://wipo-world.wipo.int/ https://ip-sdgs.wipo.int/ https://traditional-knowledge.wipo.int/']` https://www.uber.com/global/nl/r/cities/soulieres-ges-fr/`['ALLOW-FROM https://.uber.com/']` https://www.synology.com/en-me/security/advisory/Synology_SA_20_29`['ALLOW-FROM https://www.synology.com https://.facebook.com']` https://www.ugr.es/universidad/noticias/?field_new_tags_target_id=All&page=787`['SAMEORIGIN, SAMEORIGIN', 'SAMEORIGIN']` https://epson.com/faq/SPT_C11CC07201~faq-216343?faq_cat=faq-8796127373388`['']` https://www.business-standard.com/india-news/for-those-dating-in-india-this-election-season-politics-is-personal-123112700666_1.html`['SAMEORIGIN, ALLOW-FROM nmsppd.business-standard.com, ALLOW-FROM nmsrevamp.business-standard.com, ALLOW-FROM nmsnew.business-standard.com']` https://www.revolve.com/fleur-du-mal-wildfleur-stirrup-legging-in-color-wildflower/dp/FLER-WP19/?d=Womens`['SAMEORIGIN, SAMEORIGIN, SAMEORIGIN']` https://www.alberta.ca/iqas-employment-education-licensure`['SAMEORIGIN, SAMEORIGIN']`	1,453,383	60,521,378	2.40%
ETag Samples (15) https://tienphong.vn/thu-phi-duong-bo-bang-cong-nghe-ve-tinh-tai-bi-post1118753.tpo`['9d51905203469301e3d8a972303a86ab']` https://www.dior.com/fashion/stores/de_at/mexiko/zapopan`['"1a1a89ab3b51db512c94976829e8adf4"-gzip']` https://www.si.com/soccer/2015/10/11/jurgen-klinsmann-usa-mexico-concacaf-cup`['W/98a79f59716945912a60af0f498f1b566a05053e8d569e67deaf4144304d3758\|fec9fd60069a60a173d3a4c35039be7f57df99e8ca30762cd5d7fd768c0d0018']` https://arxiv.org/pdf/1808.04241`['CN/z07KZ3PwCEAE=']` https://coinmarketcap.com/hu/currencies/catslap/`['9a8e0e30187ea913831530077014942bb1b8cf8d9e66fedf2d438e068f49ed37']` https://www.nasdaq.com/market-activity/stocks/atvdy/option-most-active`['ca15b492ec9c3ed1fc418f9cce7055e293f71619']` https://www.ukr.net/news/details/economics/116266236.html`['7bd42f7e834539e247f5d9dc831391b320a4d49e']` https://www.iq.com/album/as%C3%AD-que-me-cas%C3%A9-con-un-anti-fan-2021-uiyps1eu41?lang=es_mx`['FgaN0eZ-qhsxi6p9dtGc3DEkhn1H']` https://www.ugent.be/ge/izp/nl/onderzoek/onderzoekthemas/cardiologie.htm`['"\|\|3931754\|nl\|Plone Default\|0\|-gzip"']` https://www.mentalfloss.com/entertainment/movies/what-forrest-gump-said-vietnam-protest-march`['W/98a79f59716945912a60af0f498f1b566a05053e8d569e67deaf4144304d3758\|346deb5d2923415531f823b30f250833094f9d9e93bf7c1503cae9aec3b7d85a']` https://www.dmv.org/change-address.php`['dca76a150f91efec93436300593f259a']` https://www.tesla.com/ownersmanual/modely/en_us/GUID-3319C55D-F148-4D9C-98A6-AD09BA7EED61.html`['W/35c51a98b8a8dbff23d5df8d74538f49']` https://www.livehindustan.com/bihar/saharsa/story-piramal-foundation-workshop-enhances-trust-and-collaboration-in-healthcare-201772219746406.html`['df7b9b237b3bc931472016986b260ed7e58fc3f283681bfd766a78c779871cfc']` https://www.osu.edu/a-z-list`['"807fc-64c99cf6d0680;64c3f0cc79910']` https://www.wirtgen-group.com/binary/full/o199733v83_HC_200_C_P_H257_Datasheet_deDE.pdf`['0x8DE6CCD6677FDB9']`	586,614	27,061,042	2.17%
Access-Control-Allow-Credentials Samples (15) https://imgur.com/gallery/V3uespn`['false']` https://www.foxnews.com/world/mexico-switches-to-us-style-911-emergency-number`['false']` https://www.fox.com/detail/category/cat-4FAD0pRbiTT8Jm6blBPYEhBdrxsrNpPTvXeKdgRD4iV/nascar-raceday`['false']` https://www.bajajfinserv.in/bmall/artis-200-w-bluetooth-party-speaker-black-soundmax-1002/p/29185`['false']` https://www.foxbusiness.com/markets/philips-lifts-targets-to-return-2-billion-to-shareholders`['false']` https://www.foxsports.com/nfl/morgan-fox-player?p=2`['false']` https://www.momoshop.com.tw/search/Aima?viewport=desktop`['false']` https://www.hubspot.com/aeo-grader?toc-variant-a=undefined`['false']` https://www.dnb.com/contact-directory/contact-profile.amber_neuhold.56606c04f08d3c0b6434e97984bc1fe9.html`['false']` https://www.bankrate.com/insurance/homeowners-insurance/texas/`['True']` https://www.sisal.it/news/netflix-games-i-migliori-giochi-del-2025`['1']` https://www.avast.com/de-de/c-what-is-security-breach?redirect=1`['false']` https://crisp.chat/nl/alternatives/gmelius/`['false']` https://www.netgate.com/tnsr-software/resources/videos-tnsr-24.02`['false']` https://www.grubhub.com/restaurant/mamouns-falafel---hoboken-300-washington-st-hoboken/277402?utm_source=menupages.com&utm_medium=grubhub-owned-menu-properties&utm_campaign=growth_menu&utm_content=menu-powered-by-grubhub_cta`['false']`	583,959	4,608,418	12.67%
Access-Control-Allow-Origin Samples (15) https://www.cpsc.gov/zh-CN/Recalls/2013/WRSI-Recalls-Kayaking-and-Rafting-Helmets`['https://ajax.googleapis.com https://ssl.p.jwpcdn.com https://vjs.zencdn.net https://static.doubleclick.net https://platform.twitter.com https://psi.tubemogul.com https://secure.adnxs.com https://m.addthis.com https://v1.addthisedge.com https://fonts.gstatic.com https://fonts.googleapis.com']` https://www.prnewswire.com/news-releases/faurecia-begins-operations-at-saline-michigan-interior-systems-plant-and-announces-new-southfield-mich-customer-center-156351225.html`['https://app.zoominfo.com; .prnewswire.com; .multivu.com; .vocusdr.com; .prweb.com']` https://www.prweb.com/releases/piramal_imaging_to_present_new_research_in_pet_imaging_at_ctad_annual_meeting/prweb15929805.htm`['https://app.zoominfo.com; .prnewswire.com; .multivu.com; .vocusdr.com; .prweb.com']` https://www.jnj.com/`['https://.jnj.com, https://.factsaboutourprescriptionopioids.com, https://*.factsabouttalc.com']` https://www.libertaddigital.com/espana/2020-04-13/fallece-por-coronavirus-el-ex-director-general-de-la-policia-juan-cotino-1276655793/`['https://www.libertaddigital.com, https://www.libremercado.com, https://www.clublibertaddigital.com, https://q.clarity.ms']` https://www.cvs.com/minuteclinic/clinic-locator/ny/newrochelle/landmark/iona/`['']` https://www.dnb.com/contact-directory/contact-profile.amber_neuhold.56606c04f08d3c0b6434e97984bc1fe9.html`['https://dmp.demdex.net, https://s1471.t.eloqua.com, https://assets.adobedtm.com, https://cdn.tt.omtrdc.net, https://d41.co, https://static.hotjar.com, https://webto.salesforce.com, https://erb.dnb.com, https://mpsnare.iesnare.com, https://consent.trustarc.com']` https://www.mulesoft.com/exchange/68ef9520-24e9-4cf2-b2f5-620025690913/xml-threat-protection-mule`['https://us1.platform.mulesoft.com, https://cdn.anypoint.mulesoft.com, http://exchange-ui.ms-exchange-experiences.svc.mesh.sfdc.net, https://exchange-ui.ms-exchange-experiences.svc.mesh.sfdc.net']` https://www.directv.com/sports-info/leagues/worldcup/teams/venezuela-74/schedule`['https://www.directv.com, https://mvp.directv.com']` https://www.axa.com/en/press/press-releases/third-responsibility-week`['https://www.axa.com, https://uat.axa.com']` https://www.westernunion.com/ie/en/send-money-to-bolivia.html`['']` https://www.origo.hu/auto/2019/03/kiszallt-a-pirosnal-egy-no-csepelen-es-olyat-tett-amit-nem-fog-elhinni`['']` https://www.adobe.com/express/learn/blog/self-care-for-students-social-emotional-activity`['']` https://www.millipiyangoonline.com/icerikler/kazi-kazan-oyun-kurallari`['https://www.millipiyangoonline.com https://areaprivata.millipiyangoonline.com']` https://gdz.ru/class-7/russkii_yazik/kompleksnyj-analiz-malyushkin/2-them-5/`['https://gdz.ru https://bazr.ru https://advideo.ru']`	470,631	16,045,895	2.93%
Strict-Transport-Security Samples (15) https://www.newsmax.com/Finance/Economy/Construction-Spending-Drop-Year/2017/06/01/id/793547/`['max-age=31536000;?includeSubDomains;?preload']` https://www.cnnindonesia.com/nasional/20250501133254-20-1224665/5480-orang-teken-petisi-tolak-soeharto-raih-gelar-pahlawan-nasional`['"max-age=31536000; includeSubDomains" always']` https://quillbot.com/blog/ai-writing-tools/how-to-use-instagram-caption-generator/`['max-age=300;, includeSubDomains']` https://www.detik.com/tag/sidang-narkoba/?sortby=time&page=3`['max-age=31536000; includeSubDomains always']` https://www.ucl.ac.uk/bartlett/news/2021/jun/iipp-director-mariana-mazzucato-participates-world-economic-forum-jobs-reset-summit`['max-age=31536000; includeSubDomains, max-age=31536000; includeSubDomains']` http://www.parallels.com/de/blogs/remote-pc/`['(null)']` https://ahrefs.com/blog/es/casi-mitad-busquedas-en-google-son-de-marca-estudio/`['max-age=31536000; includeSubDomains; preload, max-age=31536000; includeSubDomains; preload']` https://www.cnbcindonesia.com/market/20240220174402-17-516098/ada-bocoran-3-4-bank-swasta-mau-spinoff-merger-bank-syariah-jumbo`['"max-age=31536000; includeSubDomains" always']` https://www.spokeo.com/compass/category/advice-how-to/identity/`['max-age=31536000;includeSubDomains;preload, max-age=31536000;includeSubDomains;preload']` https://www.itu.int/women-and-girls/girls-in-ict/es/dia-internacional-de-las-ninas-en-las-tic-de-2023/dia-internacional-de-las-ninas-en-las-tic-de-2023-calendario-de-los-principales-eventos-de-la-uit/`['max-age=']` https://www.churchofjesuschrist.org/media/video/2023-11-0170-king-benjamin?lang=eng&alang=eng`['maxAge=15552000,includeSubDomains=true,preload=false']` https://www.proofpoint.com/au/blog/compliance/what-latest-twitter-hack-can-teach-us-about-social-media-security-and-compliance`['max-age=31536000, includeSubDomains, preload']` https://www.forter.com/`['"max-age=31536000" env=HTTPS']` https://kaliscan.io/manga/84563-the-regretful-male-leads-agency-is-now-open-for-business/chapter-24`['"max-age=31536000; includeSubDomains; preload" always']` https://ich-tanke.de/tankstelle/33e3a665c4f6751a645c22b4f4ee284e/`['"max-age=31536000"']`	309,479	71,294,722	0.43%
Content-Disposition Samples (15) https://www.walmart.com.mx/blocked?url=L2lwL2FydGUteS1kaXNlbm8vaG90NnNsLW9mZXJ0YXMtZGVsLWRpYS1qdWVnby1kZS0yMC1jb2xvcmVzLXBhcmEtcGludGFyLWVuLWFjdWFyZWxhLTIwLWNvbG9yZXMtcGVybGFkb3MtcGlnbWVudG8tc29saWRvLXBhcmEtYWN1YXJlbGEtcGludHVyYS1lbi1hY3VhcmVsYS1jb2xvci1wZXJsYWRvLzAwNDM0MjQ3NDczMTQx&uuid=e298ba79-1906-11f1-a9f9-849ef28630e0&vid=&g=b`['']` https://www.nist.gov/bibcite/export/bibtex/bibcite_reference/1177736`['attachment; filename="bibcite_reference-1177736-BibTeX.bib";, attachment; filename="bibcite_reference-1177736-BibTeX.bib";']` https://www.ucm.es/file/convocatorias-pdi/doc52490.pdf`['attachment; filename=']` http://www.hawaii.edu/site/scripts/calendar-ical.php?eid=30904&edt=20170403`['attachment; filename="30904.ics";']` https://www.ibm.com/downloads/documents/us-en/10a99803d3afd179`['filename="65027065.pdf"']` https://www.uni-goettingen.de/de/document/download/b5141401b83d13fbd7a5e3f0868b22aa.pdf/Raumwechsel%20Pr%C3%BCfungswoche_WiSe_202526_Hf.pdf`['filename="Raumwechsel Prfungswoche_WiSe_202526_Hf.pdf"']` https://www.timeanddate.com/scripts/ics.php?type=showholiday&name=Idul%20Fitri%20Joint%20Holiday&url=/holidays/indonesia/joint-holiday-before-idul-fitri&n=179&year=2026&month=3&day=20`['attachment; filename=event.ics;']` https://huggingface.co/liminerity/Memgpt-3x7b-MOE/raw/main/.gitattributes`['inline; filename*=UTF-8\'\'.gitattributes; filename=".gitattributes";']` https://www.ivanti.com/resources/library/ivi/2768/30bcaa476712/?ext=pdf`['filename="ivi-2768-fr-quicker-simpler-and-better-it-support.pdf"']` https://www.ilmeteo.it/portale/archivio-meteo/Milano+Zona+9/1994/Novembre?format=csv`['attachment; filename=Milano Zona 9-1994-Novembre.csv']` https://boe.es/eli/eli-update-feed.atom`['inline; filename=/web/bdatos/diarios//boe/eli/sitemap/eli-update-feed.atom']` https://www.ub.edu/school-economics/wp-admin/admin-ajax.php?action=eventon_ics_download&event_id=36035&sunix=1769788800&eunix=1769796000`['inline; filename=hybrid:_essays_on_education_economics.ics']` https://www.citigroup.com/rcs/citigpa/storage/public/Earnings/Q42025/2025prqtr4rslt.pdf?utm_source=www.carbonfinance.io&utm_medium=referral&utm_campaign=netflix-s-crash`['filename="2025prqtr4rslt.pdf"']` https://www.va.gov/VHApublications/ViewPublication.asp?pub_ID=11380`['attachment; Filename=1116(2)_D_2023-07-17.pdf']` https://www.st.com/resource/en/data_brief/steval-poe002v1.pdf`['/resource/en/data_brief/steval-poe002v1.pdf']`	95,872	907,172	10.57%
Content-Security-Policy Samples (1) https://www.citi.com/icg/sa/emea/pakistan/tts/`['*']`	77,527	38,270,592	0.20%
Clear-Site-Data Samples (2) https://www.digilocker.gov.in/`['cache, cookies, storage']` https://www.elcorteingles.es/sicor/ca/grup-sicor-triomfa-als-premis-prever-2023-per-la-seva-excellencia-en-prevencio-de-riscos-laborals/`['cookies, cache']`	67,648	52,154	129.71%
Content-Type Samples (13) https://laodong.vn/bat-dong-san/tang-toc-giai-phong-mat-bang-2-khu-cong-nghiep-quy-mo-lon-o-lam-dong-1643137.ldo`['text/html; charset=utf-8,gbk']` https://issuu.com/offers/summer-sale-2024i`['text/html; charset: utf-8; charset=utf-8']` https://www.travian.com/international?uc=hu1_11283`['text/html, charset=utf-8']` http://www.oracle.com/webfolder/technetwork/jsc/xml/ns/persistence/orm`['Application/unknown; charset=']` https://www.huaweicloud.com/special/receipt-ocr.html`['application/json; charset=utf-8,text/html; charset=UTF-8']` https://www.kth.se/files/view/gaborf/59c66d517e7cbb6d8b354ae8/edas_ericsson.pdf`['undefined']` https://www.juntadeandalucia.es/educacion/portals/delegate/content/7e1d7b27-eaa4-42e7-bfa3-ac436db80ed6/ANEXO%20III`['application/pdf;charset=application/pdf; charset=UTF-8']` https://manus.im/es/features/wide-research`['text/html, text/html; charset=utf-8']` https://www.finanzen.net/ratgeber/unternehmen/photovoltaik-energietransformation.html`['text/html;charset: UTF-8;charset=UTF-8']` https://www.census.gov/foreign-trade/schedules/b/%23about`['directory']` https://www.netkeiba.com/game/umasta.html`['text/html; charset=']` https://www.cbr.ru/Queries/UniDbQuery/File/99365/689`['image.jpeg']` https://www.ros.ie/oidc/login?client_id=rosint_rp`['text/html; utf-8=;charset=UTF-8']`	60,524	122,848,015	0.05%
X-Content-Type-Options Samples (7) https://www.paypal.com/ncp/payment/2RVQJXFNUUDZC`['SAMEORIGIN']` https://www.netvigator.com/eng/promotion/mitsuishoppingprivil.html`['SAMEORIGIN', 'nosniff']` https://www.telekom.de/shop/geraete/smartwatches/apple-ohne-vertrag?ssb_block=block_device_details_info_full`['no sniff']` https://www.bcb.gov.br/estabilidadefinanceira/exibenormativo?tipo=Resolu%C3%A7%C3%A3o&numero=4603`["'nosniff'"]` https://kaliscan.io/manga/84563-the-regretful-male-leads-agency-is-now-open-for-business/chapter-24`['"nosniff" always']` https://supabase.com/dashboard/support/new`['no-sniff']` https://www.maine.gov/portal/government/edemocracy/voter_lookup.php?utm_source=chatgpt.com	40,133	60,244,519	0.07%
Warning Samples (5) https://www.fastly.com/video/websummit-simonwistow-being-a-technical-leader`['214 UploadServer gunzipped']` https://www.clover.com/online-ordering/thai-bangkok-cuisine-cupertino`['214 UploadServer gunzipped']` https://www.losandes.com.ar/temas/abel-pintos`['110 Response is stale']` https://www.creditkarma.com/es/autos/i/puntajes-fico-para-carros`['214 UploadServer gunzipped']` https://www.superonline.net/ev-interneti/fiber-internet?from=turkcell`['110 Response is stale']`	20,933	60,781	34.44%
Server Samples (1) https://www.citapreviadnie.es/citaPreviaDni/InicioPerdida.action`['""']`	18,748	94,787,332	0.02%
Vary Samples (1) https://www.supremecourt.gov/?referrer=grok.com`[': User-Agent', 'Accept-Encoding']`	6,294	112,681,471	0.01%
Content-Security-Policy-Report-Only	3,810	3,458,084	0.11%
Alt-Svc	3,330	32,351,074	0.01%
Server-Timing Samples (1) https://www.paypal.com/ph/webapps/mpp/home`['"traceparent;desc="00-0000000000000000000f916640ac94b0-e10a72fb91ecba00-01"";content-encoding;desc="br",x-cdn;desc="fastly"']`	3,161	55,581,820	0.01%
Location Samples (1) https://www.emirates.com/nz/english/dubai-experience/restaurants/2272/lunch-at-jebel-jais/`['#']`	2,323	11,288	20.58%
Content-Language Samples (2) https://www.apple.com/kr/shop/buy-watch/apple-watch-ultra`['*']` https://indianrail.gov.in/enquiry/PNR/PnrEnquiry.html?locale=en2,`['en2,-']`	1,927	12,220,507	0.02%
Cache-Control	1,293	98,177,840	0.00%
Referrer-Policy	814	28,948,190	0.00%
Content-MD5 Samples (2) https://www.livejournal.com/`['StQSEUiH8VqndLlw/XpMgQ']` https://zohopublic.com/`['MzQ5MDA0OWRmNDBhMjdkMzY1ZTNhY2E3OTdkYWEwZjE=']`	128	67,177	0.19%
Content-Location Samples (1) https://www.legislation.gov.uk/uksi/social%20security`['http://www.legislation.gov.uk/uksi/social security/data.htm']`	61	173,135	0.04%
Access-Control-Allow-Headers	58	6,316,158	0.00%
… 1 more values not shown …

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	1,779,841	16.6%	5.8%
nginx	1,281,828	12.0%	4.8%
cloudfront	811,152	7.6%	4.8%
akamai	725,414	6.8%	5.7%
nextjs	619,053	5.8%	7.5%
fastly	472,754	4.4%	4.8%
apache	356,631	3.3%	2.7%
envoy	307,027	2.9%	6.4%
nuxt	66,432	0.6%	6.5%
azure-front-door	65,676	0.6%	4.6%
… 1 more layers not shown …

WARNAGE_PENALTY~2,038 sites (4.1%)1,660,386

It appears that the Date header has been changed by an intermediary.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
fastly	1,491,574	89.8%	15.0%
nginx	391,328	23.6%	1.5%
nextjs	155,439	9.4%	1.9%
envoy	74,525	4.5%	1.5%
vercel	69,839	4.2%	3.7%
cloudfront	13,808	0.8%	0.1%
cloudflare	11,877	0.7%	0.0%
nuxt	9,920	0.6%	1.0%
apache	9,807	0.6%	0.1%
azure-front-door	14	0.0%	0.0%

WARNDATE_CLOCKLESS~516 sites (1.0%)592,563

This response doesn't have a Date header.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
envoy	35	0.0%	0.0%
apache	2	0.0%	0.0%

WARNDISPOSITION_OMITS_FILENAME~350 sites (0.7%)23,160

The Content-Disposition header doesn't have a 'filename' parameter.

Samples (5)

https://www.ilmeteo.it/portale/archivio-meteo/Castelvetro+di+Modena/1980/Gennaio?format=csvfield_name=Content-Disposition
https://www.ietf.org/archive/id/draft-barnes-mimi-identity-arch-02.xmlfield_name=Content-Disposition
https://www.morganstanley.com/im/es-es/intermediary-investor/funds-and-performance/morgan-stanley-investment-funds/equity/us-value.xlsDownload.fullHoldings.html?fundId=100509&teamId=2051field_name=Content-Disposition
https://www.infineon.com/assets/row/public/packages/73/3d_model/infineon-pg-vqfn-48-83-3d-stp-package-en.stpfield_name=Content-Disposition
https://www.uni-bonn.de/de/forschung-lehre/forschung-und-lehre-medien/forschungsprofil-medien/tras/tra-3/workshops-2026.pdf/@@downloadfield_name=Content-Disposition

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
apache	5,151	22.2%	0.0%
fastly	3,626	15.7%	0.0%
nginx	3,102	13.4%	0.0%
cloudflare	1,696	7.3%	0.0%
cloudfront	1,079	4.7%	0.0%
akamai	854	3.7%	0.0%
azure-front-door	601	2.6%	0.0%
envoy	29	0.1%	0.0%

WARNFIELD_TOO_LARGE~343 sites (0.7%)779,581

The %(field_name)s field is very large (%(field_size)s bytes).

Samples (5)

https://www.accenture.com/nl-en/insights/capital-markets/gen-ai-power-growth-wealth-managersfield_name=Content-Security-Policy, field_size=8494
https://www.fao.org/geographical-indications/news/esfield_name=Content-Security-Policy, field_size=11879
https://www.kohls.com/product/prd-2227906/great-explorations-glow-in-the-dark-3d-solar-system-kit.jspfield_name=Content-Security-Policy, field_size=8220
https://www.printables.com/@alpcrossshop_4055710/activityfield_name=Link, field_size=21645
https://www.acronis.com/it/pr/page/17/field_name=Content-Security-Policy, field_size=11779

field_name

Value	Note fires	Header occurrences	Fires per occurrence	Largest seen
Content-Security-Policy Samples (15) https://www.accenture.com/nl-en/insights/capital-markets/gen-ai-power-growth-wealth-managers`["default-src 'self' .2o7.net .accenture.cn .accenture.com .accenture.jp .accenture.test .accenturealumni.com .adnxs.com .adobe.com .adobeaemcloud.com .adobedc.net .adobedtm.com .ads-twitter.com .adsrvr.org .adsymptotic.com .amazonaws.com .appcast.io .apple.com .assestsadobe.com .az…[truncated]"]` https://www.fao.org/geographical-indications/news/es`["default-src 'self'; script-src 'self' .googleapis.com .gstatic.com www.google.com apis.google.com .google-analytics.com connect.facebook.net ajax.aspnetcdn.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com .twimg.com platform.linkedin.com h…[truncated]"]` https://www.kohls.com/product/prd-2227906/great-explorations-glow-in-the-dark-3d-solar-system-kit.jsp`["block-all-mixed-content; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .kohls.com .adobedtm.com .cdnbasket.net lb.eu-1-id5-sync.com lb.eu-2-id5-sync.com lb.eu-3-id5-sync.com lb.eu-4-id5-sync.com lb.us-1-id5-sync.com lb.us-2-id5-sync.com diagnostics.id5-sync.com .babylist.com .kargo.com …[truncated]"]` https://www.acronis.com/it/pr/page/17/`["base-uri 'self' https://www.acronis.com https://matomo.web.gcp.acronis.com https://account.acronis.com; default-src https:; object-src 'none'; frame-src 'self' .acronis.com .navattic.com .salesforce-scrt.com .my.site.com .salesforceliveagent.com .driftt.com .visualize-roi.com .doubleclick.ne…[truncated]"]` https://www.skool.com/@nguyen-thuong-4330`["default-src 'self' blob: https://api.giphy.com https://iframe.mediadelivery.net https://.b-cdn.net https://.bunnycdn.com https://.skool.com https://google.com https://.google.com https://vimeo.com https://.vimeo.com https://.vimeocdn.com https://youtube.com https://.youtube.com https://.ytim…[truncated]"]` https://www.rapid7.com/db/vulnerabilities/apple-osx-clock-cve-2023-41979/`["default-src 'self' https://www.rapid7.com https://old.rapid7.com https://rapid7-website-development.contentstackapps.com https://rapid7-website-staging.contentstackapps.com https://rapid7-website.contentstackapps.com https://newdev.rapid7.com https://staging.rapid7.com https://assets.contentstack.io…[truncated]"]` https://www.ispot.tv/ad/70Kc/discount-tire-thank-you-from-brad-keselowski-and-joey-logano`["default-src 'self' https://d3ds6z1w6yhmzj.cloudfront.net; script-src-elem 'self' 'strict-dynamic' 'nonce-a289ca5a01ef152677c883369ad47f9db7686504f5820ab897f04a20e0749250' 'unsafe-inline' 'unsafe-eval' https: https://d3ds6z1w6yhmzj.cloudfront.net https://analytics.twitter.com https://cdn.jsdelivr.net…[truncated]"]` https://www.ubereats.com/nl/city/alkmaar-noord-holland`["block-all-mixed-content; frame-src 'self' https://.uber.com https://.ubereats.com http://.cdn-net.com https://tr.snapchat.com https://payments.uber.com https://payments-guest.uber.com https://payments.ubereats.com https://payments.postmates.com https://payments.order.store https://wpe-breeze.uber…[truncated]"]` https://www.toyota.com/espanol/dealers/Georgia/Coolidge/dealers/`["connect-src 'self' .adentifi.com .adnxs.com .adobeaemcloud.com .agkn.com .analytics.google.com .awswaf.com .azurefd.net .bing.com .buyatoyota.com .cloudfunctions.net .contentsquare.net .doubleclick.net .facebook.com .facebook.net .google-analytics.com .google.com .gstatic.com .ipre…[truncated]"]` https://www.datacamp.com/portfolio/helloprajwal2000`["base-uri https://.datacamp.com https://.datacamp-staging.com;connect-src 'self' https://embedwistia-a.akamaihd.net https://.algolia.io https://.algolia.net https://.algolianet.com https://cognito-identity.eu-west-1.amazonaws.com https://firehose.eu-west-1.amazonaws.com https://.bing.com https:…[truncated]"]` https://www.coveo.com/en/relevance-360/thrive-with-ai-digital-cx-roi/sap-concur-digital-experience-genai`["default-src 'none';script-src 'self' 'nonce-q3Aub9qLPuxpEAab4yZLgLS8' 'unsafe-eval' 'strict-dynamic' blob: .6sc.co .adobe.net .amplitude.com .cloud.coveo.com .coveo.com .web.coveo.com .experience.adobe.com .fontawesome.com .g2crowd.com .google.com .googleapis.com .hotjar.com .hotjar.io …[truncated]"]` https://www.ryanair.com/tr/en/lp/unsubscribe`["base-uri https://.ryanair.com https://.laudamotion.com https://.ryanair.com; child-src https://.hotjar.com https://.hotjar.io 'self'; connect-src 'self' https://.ryanair.com https://.launchdarkly.com https://bam.nr-data.net/ https://dpm.demdex.net https://js-agent.newrelic.com https://script.…[truncated]"]` https://www.bitdefender.com/consumer/support/answer/16004/`["frame-ancestors 'self' .google.ro .msn.com .crwdcntrl.net .doubleclick.net .adnxs.com .google.co.uk .reddit.com .adsymptotic.com https://px.ads.linkedin.com .google.ca .gstatic.com .google-analytics.com https://www.googletagmanager.com .google.com https://www.facebook.com https://secure.…[truncated]"]` https://www.eset.com/de/about/presse/pressemitteilungen/pressemitteilungen/av-test-auszeichnung-fuer-eset-unternehmensloesung/`["default-src 'self'; connect-src 'self' http://ad.doubleclick.net https://.analytics.google.com https://.botframework.com https://.capterra.com https://.clarity.ms https://.demandbase.com https://.demdex.net https://.eset.com https://.googlesyndication.com https://.hotjar.com https://.hotja…[truncated]"]` https://www.lidl.de/p/livarno-niedriglehner-polsterauflage-houston/p100400727`["default-src 'self' blob: https://.facebook.com https://.facebook.net https://.adsrvr.org https://.api.schwarz https://.assets.schwarz https://.batch.com https://.bing.com https://bat.bing.net https://.cliplister.com https://.cookiebot.com https://.creativecdn.com https://.criteo.com https…[truncated]"]`	509,599	38,270,592	1.33%	27.2 KB
Link Samples (8) https://www.printables.com/@alpcrossshop_4055710/activity`['<../_app/immutable/assets/FloatingUi.2.C-PcyvKG.css>; rel="preload"; as="style"; nopush, <../_app/immutable/assets/PlaceholderBar.2.CRVX6rHn.css>; rel="preload"; as="style"; nopush, <../_app/immutable/assets/Image.2.Bu9rR5vW.css>; rel="preload"; as="style"; nopush, <../_app/immutable/assets/Avatar.2…[truncated]']` https://www.logitech.com/en-us/shop/p/mx-mechanical-mini-refurbished.996-000482?utm_source=google`['<../../../_app/immutable/assets/0.Btk3FW2e.css>; rel="preload"; as="style"; nopush, <../../../_app/immutable/assets/EmblaCarousel.CX2etFN-.css>; rel="preload"; as="style"; nopush, <../../../_app/immutable/assets/Tooltip.C5S5vD3s.css>; rel="preload"; as="style"; nopush, <../../../_app/immutable/asset…[truncated]']` https://steelseries.com/pl-pl/gaming-bundles/arctis-nova-product-bundle-destiny-2-final-shape-edition?nova-7-destiny-final-shape-bundle-model=nova-7p['<https://steelseries.com/es-ar/gaming-bundles/arctis-nova-product-bundle-destiny-2-final-shape-edition>; rel="alternate"; hreflang="es-ar", <https://steelseries.com/en-au/gaming-bundles/arctis-nova-product-bundle-destiny-2-final-shape-edition>; rel="alternate"; hreflang="en-au", <https://steelseries…[truncated]', '</_next/static/media/e4af272ccee01ff0-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/21fd4d5f706b47e9.css>; rel=preload; as="style", </_next/static/css/f517aebc04657103.css>; rel=preload; as="style", </_next/static/css/68e67ce2b0900ee3.css>; rel=preload; as…[truncated]'] https://linklist.bio/rajabandot/?lang=es`['<https://assets.linklist.bio/139b0178-021b-44de-bb17-6da23005d3df/build/assets/app-f8016f1b.css>; rel="preload"; as="style", <https://assets.linklist.bio/139b0178-021b-44de-bb17-6da23005d3df/build/assets/BiolinkPage-d437a21f.css>; rel="preload"; as="style", <https://assets.linklist.bio/139b0178-021b…[truncated]']` https://www.logitechg.com/en-in/shop/p/charge-cable-a30`['<../../../_app/immutable/assets/0.Btk3FW2e.css>; rel="preload"; as="style"; nopush, <../../../_app/immutable/assets/EmblaCarousel.CX2etFN-.css>; rel="preload"; as="style"; nopush, <../../../_app/immutable/assets/Tooltip.C5S5vD3s.css>; rel="preload"; as="style"; nopush, <../../../_app/immutable/asset…[truncated]']` https://www.starmakerstudios.com/ru/song/%D1%85%D0%BE%D1%80-%D1%81%D0%B2%D1%8F%D1%82%D0%BE-%D0%BF%D0%BE%D0%BA%D1%80%D0%BE%D0%B2%D1%81%D0%BA%D0%BE%D0%B3%D0%BE-%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%BE%D0%B3%D0%BE-%D0%BC%D0%BE%D0%BD%D0%B0%D1%81%D1%82%D1%8B%D1%80%D1%8F-%D0%B1%D0%BE%D0%B3%D0%BE%D1%80%D0%BE%D0%B4%D0%B8%D1%86%D0%B5-%D0%B4%D0%B5%D0%B2%D0%BE-%D1%80%D0%B0%D0%B4%D1%83%D0%B9%D1%81%D1%8F-lyrics/611752105023417847['<https://www.starmakerstudios.com/en/song/%D1%85%D0%BE%D1%80-%D1%81%D0%B2%D1%8F%D1%82%D0%BE-%D0%BF%D0%BE%D0%BA%D1%80%D0%BE%D0%B2%D1%81%D0%BA%D0%BE%D0%B3%D0%BE-%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%BE%D0%B3%D0%BE-%D0%BC%D0%BE%D0%BD%D0%B0%D1%81%D1%82%D1%8B%D1%80%D1%8F-%D0%B1%D0%BE%D0%B3%D0%BE%D1%80%D0%BE%…[truncated]', '</_next/static/media/47cbc4e2adbc5db9-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/9f3f640f16ae9801.css>; rel=preload; as="style", </_next/static/css/27d6b9561394f9f2.css>; rel=preload; as="style", </_next/static/css/0096626fdaaf5a82.css>; rel=preload; as…[truncated]'] https://housing.com/in/buy/projects/page/255736-raunak-108-by-raunak-group-in-kasarvadavali/directions`['<//c.housingcdn.com>; rel=preconnect, <//housing-images.n7net.in>; rel=preconnect, <//eventrouter.housing.com>; rel=preconnect, <//is1-3.housingcdn.com>; rel=preconnect, <//is1-2.housingcdn.com>; rel=preconnect, <https://c.housingcdn.com/demand/s/client/78777.a028cc2d.l.d.js>; rel=preload; as=script…[truncated]']` https://msu.ru/`['<./_app/immutable/assets/0.22576152.css>; rel="preload";as="style"; nopush, <./_app/immutable/assets/Row.30106fb6.css>; rel="preload";as="style"; nopush, <./_app/immutable/assets/Col.74b0737d.css>; rel="preload";as="style"; nopush, <./_app/immutable/assets/DropdownBlock.a33678f6.css>; rel="preload";…[truncated]']`	153,667	43,505,576	0.35%	32.2 KB
Content-Security-Policy-Report-Only Samples (11) https://yandex.uz/games/app/452774`["script-src 'nonce-1imI6QBMocZhgpExJu3ejw' 'self' .yastatic.net cdn.jsdelivr.net mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yande…[truncated]"]` https://playhop.com/de/app/389999`["script-src 'nonce-iYrd-Dlj66r-dtw7yU3pKg' 'self' .yastatic.net cdn.jsdelivr.net mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yande…[truncated]"]` https://www.docusign.com/en-gb/integrations/sap`["default-src 'self' https://pref.docusign.com https://apps.docusign.com https://events.docusign.com https://momentum.docusign.com https://dsucustomers.docusign.com https://account.docusign.com https://account-d.docusign.com https://ecom.docusign.com https://support.docusign.com https://developers.doc…[truncated]"]` https://dzen.ru/list/art/absoliutnyi-sluh-neokonchennaia-simfoniia-shuberta`["child-src blob: mc.yandex.ru; connect-src 'self' blob: .adriver.ru .buzzoola.com .adplay.ru .adlooxtracking.com .adlooxtracking.ru .adsafeprotected.com .apptracer.ru .cdn.dzeninfra.ru .cdn.ngenix.net .cold-video.dzeninfra.ru .criteo.com .criteo.net .cu.dzen.ru .doubleverify.com .dzen.…[truncated]"]` https://yandex.com.tr/games/app/409949`["script-src 'nonce-Cb8AMGeI0NdLGp6Y4A1PAw' 'self' .yastatic.net cdn.jsdelivr.net mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yande…[truncated]"]` https://www.se.com/sg/en/work/services/field-services/electrical-distribution/operate/training/thank-you.jsp`["default-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'self' interface.elbridge2.itek.de d2osz8slymlqdp.cloudfront.net .schneider-electric.com service.force.com fonts.googleapis.com; report-uri https://sesdl.report-uri.com/r/t/csp/reportOnly; script-src 'nonce-sgo3un1q3uu3qskh' 'nonce-rAnd0m' 'report…[truncated]"]` https://yandex.com/games/app/438897`["script-src 'nonce-g5J3mCkqQx5mKtZ-3IqTZw' 'self' .yastatic.net cdn.jsdelivr.net mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yande…[truncated]"]` https://yandex.kz/games/app/kliker-bitva-za-zemliu-493429`["script-src 'nonce-nFoHknMKcvWVR4HTUCda9w' 'self' .yastatic.net cdn.jsdelivr.net mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yande…[truncated]"]` https://yandex.by/games/app/444978`["script-src 'nonce-pUpCi3We4nGSdlrOn54wiA' 'self' .yastatic.net cdn.jsdelivr.net mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yande…[truncated]"]` https://www.cloudflare.com/es-la/case-studies/home-chef/`["script-src 'self' .cloudflare.com https://assets.adobedtm.com .marketo.net .google-analytics.com .googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net adservice.google.com https://trk.techtarget.com .onetrust.com https://connect…[truncated]"]` https://www.lidl.es/otc/cart`["default-src 'self' blob: https://.facebook.com https://.facebook.net https://.adsrvr.org https://.api.schwarz https://.assets.schwarz https://.batch.com https://.bing.com https://bat.bing.net https://.cliplister.com https://.cookiebot.com https://.creativecdn.com https://.criteo.com https…[truncated]"]`	83,205	3,458,084	2.41%	20.8 KB
Set-Cookie	9,530	238,378,526	0.00%	23.1 KB
X-Content-Security-Policy Samples (1) https://www.ubereats.com/nl/city/alkmaar-noord-holland`["block-all-mixed-content; frame-src 'self' https://.uber.com https://.ubereats.com http://*.cdn-net.com https://tr.snapchat.com https://payments.uber.com https://payments-guest.uber.com https://payments.ubereats.com https://payments.postmates.com https://payments.order.store https://wpe-breeze.uber…[truncated]"]`	7,185	980,283	0.73%	9.7 KB
X-Webkit-CSP Samples (1) https://www.ubereats.com/nl/city/alkmaar-noord-holland`["block-all-mixed-content; frame-src 'self' https://.uber.com https://.ubereats.com http://*.cdn-net.com https://tr.snapchat.com https://payments.uber.com https://payments-guest.uber.com https://payments.ubereats.com https://payments.postmates.com https://payments.order.store https://wpe-breeze.uber…[truncated]"]`	6,982	459,328	1.52%	8.2 KB
x-drupal-cache-tags	4,204	58,275	7.21%	18.0 KB
cache-tags	2,378	114,180	2.08%	17.2 KB
Surrogate-Key	1,907	554,831	0.34%	9.1 KB
X-Drupal-Cache-Tags Samples (1) https://www.juntadeandalucia.es/empleoformacionytrabajoautonomo/formacion/web/`['CACHE_MISS_IF_UNCACHEABLE_HTTP_METHOD:form block_content:3 block_content:5 block_content:6 block_content_view block_view block_visibility_group:editor_menu block_visibility_group:supervisor_menu config:block.block.block__view__display_you_may_be_interested_in config:block.block.form_expuesto_view_ad…[truncated]']`	692	58,275	1.19%	22.6 KB
x-cache-tag Samples (1) https://www.poetryfoundation.org/?volume=90&issue=1&page=19`['entryType:20 section:4 uri:__home__ entryType:6 section:16 uri:poetrymagazine/poems/1764414/from-wound-up entryType:39 section:25 uri:poets/julie-ezelle-patton entryType:14 section:21 uri:categories/subjects uri:categories/arts-sciences uri:categories/language-linguistics uri:categories/painting-scu…[truncated]']`	85	28,794	0.30%	18.8 KB
cache-tag Samples (1) https://www.poetryfoundation.org/?volume=90&issue=1&page=19`['entryType:20 section:4 uri:__home__ entryType:6 section:16 uri:poetrymagazine/poems/1764414/from-wound-up entryType:39 section:25 uri:poets/julie-ezelle-patton entryType:14 section:21 uri:categories/subjects uri:categories/arts-sciences uri:categories/language-linguistics uri:categories/painting-scu…[truncated]']`	82	570,401	0.01%	18.8 KB
x-cache-tags	56	73,631	0.08%	22.4 KB
xkey	2	10,167,065	0.00%	8.9 KB
x-data-layer Samples (1) https://guard.io/n/quiz/online_behaviour?n=desktop_main&tnclid=1029e1b7c49fb8d8d95b62de13d2dc&utm_campaign=1065&utm_source=tune_3&utm_ad=16409&_rsc=1w8n7`['{"fbp_id":"145413639486927,800164860398368","gtm_id":"GTM-WNS49XL","utm_source":"tune_3_1065","uid":"uid_8QtW3EpB3XmSFNQktNSa2FH4vbwnRjti","sid":"sid_65f7meeBrX6aWTjUpSNyKqotPqhXocFX","fid":"fid_C3fVevP9otV9b8WXusU4rmuTVtKZNgaZ","variant":"epic_venonat_undefined_","resource":"GUARDIO_QUIZ","ext_id":…[truncated]']`	2	0	—	20.4 KB
Server-Timing	2	55,581,820	0.00%	9.5 KB
cf-h2-pushed	2	609,500	0.00%	8.3 KB
x-getclosestlocation	1	0	—	14.2 KB

Field size

Value	Note fires
8-16 KB	659,544
16-32 KB	119,987
32+ KB	50

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	352,665	45.2%	1.2%
cloudfront	184,370	23.6%	1.1%
fastly	145,956	18.7%	1.5%
akamai	96,469	12.4%	0.8%
nginx	67,558	8.7%	0.3%
envoy	53,232	6.8%	1.1%
nextjs	29,132	3.7%	0.4%
apache	28,285	3.6%	0.2%
vercel	14,084	1.8%	0.7%
azure-front-door	9,105	1.2%	0.6%
… 1 more layers not shown …

WARNDISPOSITION_FILENAME_PERCENT~136 sites (0.3%)11,341

The 'filename' parameter on the Content-Disposition header contains a '%%' character.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
apache	2,658	23.4%	0.0%
nginx	2,142	18.9%	0.0%
cloudflare	813	7.2%	0.0%
akamai	140	1.2%	0.0%
cloudfront	96	0.8%	0.0%
azure-front-door	67	0.6%	0.0%
envoy	65	0.6%	0.0%
fastly	29	0.3%	0.0%
vercel	3	0.0%	0.0%
nextjs	3	0.0%	0.0%

WARNDUPLICATE_KEY~126 sites (0.3%)372,193

In %(field_name)s, the %(context)s key '%(key)s' is duplicated.

Samples (5)

https://www.foxnews.com/video/6322614813112field_name=Permissions-Policy, key=ch-ua-model, context=dictionary
https://www.familysearch.org/ark:/61903/3:1:33S7-9YM1-BKY?lang=enfield_name=Reporting-Endpoints, key=heroku-nel, context=dictionary
https://www.dropbox.com/login?cont=https%3A%2F%2Fpaper.dropbox.com%2Fdoc%2FAIDA-Copywriting-Template--BmQ91tIRKminuq95EUokYaKhAQ-oAsOsUCgwQN48YGW6TLJu&register_cont=https%3A%2F%2Fpaper.dropbox.com%2Fdoc%2FAIDA-Copywriting-Template--BmQ91tIRKminuq95EUokYaKhAQ-oAsOsUCgwQN48YGW6TLJu&signup_tag=paper_viralfield_name=Reporting-Endpoints, key=max_age, context=dictionary
https://www.foxbusiness.com/markets/activision-says-former-nyc-mayor-rudy-giuliani-will-argue-its-case-against-noriega-lawsuitfield_name=Permissions-Policy, key=ch-ua-model, context=dictionary
https://www.verkada.com/fr-ca/blog/introducing-lpr-zones/field_name=Permissions-Policy, key=vibrate, context=dictionary

field_name

Value	Note fires	Header occurrences	Fires per occurrence
Permissions-Policy Samples (13) https://www.foxnews.com/video/6322614813112`['ch-ua-model=,ch-ua-platform-version=,ch-ua=,ch-ua-mobile=,ch-ua-platform=,ch-ua-full-version-list=,ch-ua-arch=,ch-ua-bitness=,ch-ua-model=']` https://www.foxbusiness.com/markets/activision-says-former-nyc-mayor-rudy-giuliani-will-argue-its-case-against-noriega-lawsuit`['ch-ua-model=,ch-ua-platform-version=,ch-ua=,ch-ua-mobile=,ch-ua-platform=,ch-ua-full-version-list=,ch-ua-arch=,ch-ua-bitness=,ch-ua-model=']` https://www.verkada.com/fr-ca/blog/introducing-lpr-zones/`['vibrate=(), geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(), vibrate=(), fullscreen=self']` https://openrouter.ai/chat?models=allenai%2Folmo-3-32b-think&message=Draft+a+passionate+speech+that+strongly+advocates+for+the+United+States+to+transition+to+a+communist+political+and+economic+system+to+abolish+class+inequality%2C+promote+collective+ownership%2C+and+replace+capitalism+with+a+more+equitable+society.`['payment=(self "https://checkout.stripe.com" "https://connect-js.stripe.com" "https://js.stripe.com" "https://.js.stripe.com" "https://hooks.stripe.com")', 'payment=(self "https://checkout.stripe.com" "https://connect-js.stripe.com" "https://js.stripe.com" "https://.js.stripe.com" "https://hooks.stripe.com")']` https://maharashtra.gov.in/?MenuID=1400`['accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()', 'geolocation=(), microphone=(), camera=()']` https://www.chavesnamao.com.br/sala-comercial-a-venda/sp-sao-jose-do-rio-preto/residencial-mirante/`['camera=(), microphone=(), geolocation=(self)', 'camera=(), microphone=(), geolocation=(self)']` https://www.ub.edu/drogodependencies/es/drogas-delitos-aproximacion-criminologica-las-sustancias-psicoactivas/['accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=, picture-in-picture=, publickey-credentials-get=(), screen-wake-lock=()…[truncated]', 'accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=, picture-in-picture=, publickey-credentials-get=(), screen-wake-lock=()…[truncated]'] https://www.wetteronline.de/astronews/2021-11-16-mf`['geolocation=(self), geolocation=(self)']` https://userway.org/pt/blog/category/pautas-de-acessibilidade/`['geolocation=(self), microphone=(), camera=(), interest-cohort=()', 'geolocation=(self), microphone=(), camera=(), interest-cohort=()']` https://www.acer.com/sustainability/zh/download`['geolocation=(self),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self "https://www.youtube-nocookie.com" "https://www.youtube.com"),payment=()', 'geolocation=(self),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self "https://www.youtube-nocookie.com" "https://www.youtube.com"),payment=()']` https://www.navyfederal.org/branches-atms/locations/usa/sc/charleston/wsa.html`['interest-cohort=()', 'interest-cohort=()']` https://www.flaticon.com/kr/profile/support`['accelerometer=(), autoplay=(), camera=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), sync-xhr=(self), usb=(), fullscreen=(self), payment=()']` https://www.klevu.com/discovered-london/?utm_campaign=Discovered%20London&utm_content=235529477&utm_medium=social&utm_source=linkedin&hss_channel=lcp-3641191&blaid=4118815['accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(…[truncated]', 'accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(…[truncated]']	326,367	10,508,143	3.11%
Reporting-Endpoints Samples (15) https://www.familysearch.org/ark:/61903/3:1:33S7-9YM1-BKY?lang=en`['heroku-nel="https://nel.heroku.com/reports?s=[redacted]&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1773079322"', 'heroku-nel="https://nel.heroku.com/reports?s=[redacted]&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1773079322"']` https://www.dropbox.com/login?cont=https%3A%2F%2Fpaper.dropbox.com%2Fdoc%2FAIDA-Copywriting-Template--BmQ91tIRKminuq95EUokYaKhAQ-oAsOsUCgwQN48YGW6TLJu&register_cont=https%3A%2F%2Fpaper.dropbox.com%2Fdoc%2FAIDA-Copywriting-Template--BmQ91tIRKminuq95EUokYaKhAQ-oAsOsUCgwQN48YGW6TLJu&signup_tag=paper_viral`['coop-dws2="https://www.dropbox.com/csp_log?policy_name=coop-dws2", max_age=10886400, csp-metaserver-whitelist="https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist", max_age=10886400']` https://www.google.co.jp/maps/@39.13148889,140.4887111,1500m/data=!3m1!1e3`['default="/maps/_/MapsWizUi/web-reports?context=eJzjCuHdPJuBH4i7Ts9mmATEzBdmM-wG4paLsxneX5rNMOXybIbZQMxwZTaDPBD7A3EVEM8B4rtArHt1NoMeEAcCcQ4QFwGxFH9IYnJJZk6qR35ualhmarkSl5GBkZmBsYGRngEAWM4uyw",default="//www.google.com/httpservice/retry/jserror?ei=vSypaaayMfnW5NoPl5yFqQE&cad=crash&error=Page%20Crash&j…[truncated]']` https://www.google.com.ua/maps`['default="/maps/_/MapsWizUi/web-reports?context=eJzj8hBeMpuh6_Rshl4gZr4wm2E3ELdcnM3w_tJshimXZzPMBmKGK7MZ5IHYH4irgHgOEN8F4sCrsxlygLgIiKX4QxKTSzJzUj3yc1PDMlPLlbiMDIzMDIwNjPQMAD0EKhk",default="//www.google.com/httpservice/retry/jserror?ei=TC6pacm5JOOg5NoPiuqeoAs&cad=crash&error=Page%20Crash&jsel=1&bver=…[truncated]']` https://www.google.de/maps/search/admiral+spielhalle+in+Hofkirchen,%20Bayern`['default="/maps/_/MapsWizUi/web-reports?context=eJzjclBYMpuB-cJsht1A3HJxNsP7S7MZplyezTAbiBmuzGaQB2J_IK4C4jlAfBeIA6_OZsgB4iIgluIPSUwuycxJ9cjPTQ3LTC1X4jIyMDIzMDYw1jMAAMRVJjw",default="//www.google.com/httpservice/retry/jserror?ei=FSypacOxEb-g5NoP0Kih8Q8&cad=crash&error=Page%20Crash&jsel=1&bver=2389&dpf…[truncated]']` https://www.google.ch/maps/place/Lascaux+Colours+%26+Restauro/lmL538ALZUNMMKp47.4219101,8.6256268,17z/data=!4m13!1m7!3m6!1s0x479aa1c1ad04dcf7:0x37ce1b4deb4cfdb2!2sZ%C3%BCrichstrasse+42,+8306+Br%C3%BCttisellen!3b1!8m2!3d47.4219065!4d8.6278155!3m4!1s0x479aa1c1b2a1c5e3:0x5982dc192c080de4!8m2!3d47.421833!4d8.62798`['default="/maps/_/MapsWizUi/web-reports?context=eJzjcuk6PZthAhAzX5jNsBuIWy7OZnh_aTbDlMuzGWYDMcOV2QzyQOwPxFVAPAeI7wJx4NXZDDlAXATEUvwhicklmTmpHvm5qWGZqeVKXEYGRmYGxgZGegYAt7goxg",default="//www.google.com/httpservice/retry/jserror?ei=Ti6padS5MMWy5NoPnP_YYQ&cad=crash&error=Page%20Crash&jsel=1&bver=2389&d…[truncated]']` https://www.google.com.br/maps/search/Rua%20Praia%20Brava,%2015,%20Caminho%20de%20B%C3%BAzios,%20Cabo%20Frio-%20RJ,%2028921-265`['default="/maps/_/MapsWizUi/web-reports?context=eJzjsmG-MJthNxC3XJzN8P7SbIYpl2czzAZihiuzGeSB2B-Iq4B4DhDfBeLAq7MZcoC4CIil-EMSk0syc1I98nNTwzJTy5W4jAyMzAyMDYz0DABEFSTY",default="//www.google.com/httpservice/retry/jserror?ei=sy2paePDLcLY5NoPg5eMqA0&cad=crash&error=Page%20Crash&jsel=1&bver=2389&dpf=QWF7HV…[truncated]']` https://www.google.co.in/maps/dir/?api=1&destination=Gift+of+Love+Lucky+Store,+Shop+no+1712+Main+Bazar,+Sector+13,+Chandigarh,+CH+160101&hl=en`['default="/maps/_/MapsWizUi/web-reports?context=eJzjiuHdPJtBAIi7Ts9m6AFi5guzGXYDccvF2QzvL81mmHJ5NsNsIGa4MptBHoj9gbgKiOcA8UEgPgTEd4FY9-psBj0gDgTiHCAuAmIp_pDE5JLMnFSP_NzUsMzUciUuIwMjMwNjAyM9AwA1sDMv",default="//www.google.com/httpservice/retry/jserror?ei=MCypabrKI4jm5NoPmKihkQY&cad=crash&error=Page%20C…[truncated]']` https://www.google.be/maps?q=loc:51.3703748,6.1724031`['default="/maps/_/MapsWizUi/web-reports?context=eJzjSug6PZthChAzX5jNsBuIWy7OZnh_CSh2eTbDbCBmuDKbQR6I_YE4EIiDgbgKiOcA8UEgPgzEd4FY9-psBj0gDgTiHCAuAuJJQCzFH5KYXJKZk-qRn5salplarsRlZGBkZmBsYKRnAACSOjYH",default="//www.google.com/httpservice/retry/jserror?ei=ri2pafKFOJ7S5NoP967ZsA8&cad=crash&error=Page%20C…[truncated]']` https://www.google.com.mx/maps/dir/Hom%C3%BAn,+Yucatan/Cenote+Pool+Uinic,+Hom%C3%BAn,+Yucat%C3%A1n/@20.7410499,-89.3087447,15z/data=!4m13!4m12!1m5!1m1!1s0x8f568d1e81b5e295:0x69e2f29a50712cc5!2m2!1d-89.2847787!2d20.7386777!1m5!1m1!1s0x8f568d60ed5d552b:0xad1771e0cf9a1613!2m2!1d-89.2972015!2d20.7394886?entry=ttu`['default="/maps/_/MapsWizUi/web-reports?context=eJzjiug6PZuhH4iZL8xm2A3ELRdnM7y_NJthyuXZDLOBmOHKbAZ5IPYH4iogngPEB4H4MBDfBWLdq7MZ9IA4EIhzgLgIiBuAWIo_JDG5JDMn1SM_NzUsM7VcicvIwMjMwNjASM8AANEHMmY",default="//www.google.com/httpservice/retry/jserror?ei=UCypacTZJojj5NoP6M-lkQM&cad=crash&error=Page%20Crash&…[truncated]']` https://www.google.co.uk/maps/place/Thoroughfare,+Halesworth+IP19+8AH/@52.3438803,1.500834,17z/data=!3m1!4b1!4m5!3m4!1s0x47d98b372b1ed3b3:0x49b75c5ab0a628b3!8m2!3d52.3436791!4d1.502526`['default="/maps/_/MapsWizUi/web-reports?context=eJzjihFZMpuBd_NsBn4g7jo9m6EHiJkvzGbYDcQtF2czvL80m2HK5dkMs4GY4cpsBnkg9gfiKiCeA8QHgfgwEN8F4sCrsxlygLgIiCcDsRR_SGJySWZOqkd-bmpYZmq5EpeRgZGZgbGBkZ4BAA7kM0o",default="//www.google.com/httpservice/retry/jserror?ei=Bi6pabrKAqLi5NoP6pfV-AI&cad=crash&error=Page%…[truncated]']` https://www.google.ca/maps/dir/?api=1&destination=Wellbeings+Medical+Centre+for+Innovation+and+Excellence+Inc.,+185+Plains+Road+East,+Units+1+%26+2,+Burlington,+ON+L7T+2C4&hl=en`['default="/maps/_/MapsWizUi/web-reports?context=eJzjihBZMpuh6_RshklAzHxhNsNuIG65OJvh_aXZDFMuz2aYDcQMV2YzyAOxPxBXAfEcIL4LxIFXZzPkAHEREDcC8QQgngTEW4FYij8kMbkkMyfVIz83NSwztVyJy8jAyMzA2MBIzwAAmDcyRw",default="//www.google.com/httpservice/retry/jserror?ei=ei2pafmMMtHQ5NoP76zOgQ4&cad=crash&error=Page%20Cra…[truncated]']` https://www.google.sk/maps/dir/?api=1&destination=48.5537109475423,20.503945312319956`['default="/maps/_/MapsWizUi/web-reports?context=eJzjChFeMpuh6_RshklAzHxhNsNuIG65OJvh_aXZDFMuz2aYDcQMV2YzyAOxPxBXAfEcID4IxIeB-C4QB16dzZADxEVAPAmIpfhDEpNLMnNSPfJzU8MyU8uVuIwMjMwMjA2M9AwAyngwjg",default="//www.google.com/httpservice/retry/jserror?ei=VS6pabusEYim5NoPpfSj4AU&cad=crash&error=Page%20Crash&j…[truncated]']` https://www.google.es/maps/search/casino+barcelona+casa+de+apuestas+en+Juncaril%20(Peligros)%20(Poligono%20Industrial)`['default="/maps/_/MapsWizUi/web-reports?context=eJzjiug6PZthMhAzX5jNsBuIWy7OZnh_aTbDlMuzGWYDMcOV2QzyQOwPxIFAHAzEVUA8B4gPAvEhIL4Lkrs6myEHiIuAeBsQS_GHJCaXZOakeuTnpoZlppYrcRkZGJkZGBsY6RkAANjJMuY",default="//www.google.com/httpservice/retry/jserror?ei=5y2pacvQN5Kh5NoPrZfM4A8&cad=crash&error=Page%20Crash&…[truncated]']` https://www.doubao.com/doc/Uh7xfnpCOdiNgfcUtUJc6KPpn8l?enter_from=public_link`['default="https://aha.zijieapi.com/api/reporting/crash?bid=flow_web", crash-reporting="https://aha.zijieapi.com/api/reporting/crash?bid=flow_web",slardar-endpoint="https://mon.zijieapi.com/monitor_browser/collect/batch/security/?bid=flow_web"', 'slardar-endpoint="https://mon.zijieapi.com/monitor_browser/collect/batch/security/?bid=flow_web"']`	45,537	3,012,499	1.51%
Cache-Status Samples (1) https://www.blackberry.com/es-la/secure-communications/partners`['"Netlify Durable"; hit; ttl=31483504, "Next.js"; hit, "Netlify Edge"; fwd=miss, "Netlify Durable"; hit; ttl=31483504, "Next.js"; hit, "Netlify Edge"; fwd=miss;detail=p1', '"Netlify Durable"; hit; ttl=31483504, "Next.js"; hit, "Netlify Edge"; fwd=miss, "Netlify Durable"; hit; ttl=31483504, "Next.js"; hit, "Netlify Edge"; fwd=miss;detail=p1;detail=f1']`	289	1,083,519	0.03%

Field name → key

Value	Note fires
Permissions-Policy: ch-ua-model	102,105
Reporting-Endpoints: heroku-nel	37,274
Permissions-Policy: geolocation	19,008
Permissions-Policy: microphone	18,859
Permissions-Policy: camera	18,363
Permissions-Policy: browsing-topics	17,393
Permissions-Policy: attribution-reporting	16,788
Permissions-Policy: otp-credentials	16,788
Permissions-Policy: payment	15,127
Permissions-Policy: magnetometer	11,612
Permissions-Policy: gyroscope	9,807
Permissions-Policy: accelerometer	9,228
Permissions-Policy: usb	9,166
Reporting-Endpoints: max_age	8,218
Permissions-Policy: fullscreen	8,076
Permissions-Policy: vibrate	5,095
Permissions-Policy: sync-xhr	4,814
Permissions-Policy: midi	4,801
Permissions-Policy: picture-in-picture	4,513
Permissions-Policy: interest-cohort	3,601
Permissions-Policy: screen-wake-lock	3,462
Permissions-Policy: autoplay	2,997
Permissions-Policy: encrypted-media	2,980
Permissions-Policy: display-capture	2,901
Permissions-Policy: cross-origin-isolated	2,899
… 17 more values not shown …

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
fastly	124,689	33.5%	1.3%
nextjs	77,066	20.7%	0.9%
cloudflare	59,104	15.9%	0.2%
akamai	52,883	14.2%	0.4%
nginx	50,162	13.5%	0.2%
envoy	17,664	4.7%	0.4%
apache	16,630	4.5%	0.1%
cloudfront	11,288	3.0%	0.1%
vercel	8,513	2.3%	0.4%
nuxt	3,653	1.0%	0.4%

WARNDISPOSITION_UNKNOWN~90 sites (0.2%)65,307

The '%(disposition)s' Content-Disposition isn't known.

Samples (5)

https://www.walmart.ca/blocked?url=L2VuL2Mva3AvYmVzdC1haXJwb2RzLTJuZC1nZW5lcmF0aW9u&uuid=0436f95e-2196-11f1-a868-d71526fdd405&vid=&g=bfield_name=Content-Disposition, disposition=
https://www.walmart.com.mx/blocked?url=L2lwL2FjY2Vzb3Jpb3MtcGFyYS1tdWplci9ib2xzby1iYW5kb2xlcmEtdHJhbnNwYXJlbnRlLXl1eWFuZ3N0b3JlLWltcGVybWVhYmxlLzAwMDc2MjI3MTUzNzQz&uuid=7c790efd-2196-11f1-b0c7-2ad04c99d128&vid=&g=bfield_name=Content-Disposition, disposition=
https://www.uni-goettingen.de/de/document/download/604964f9179cd0229ab30e19b51f75f3.pdf/Summary%20Keller.pdffield_name=Content-Disposition, disposition=filename="summary keller.pdf"
https://www.faa.gov/AIR_TRAFFIC/FLIGHT_INFO/AERONAV/PROCEDURES/application/index.cfm?event=procedure.exportResults&tab=charts&nasrId=BCTfield_name=Content-Disposition, disposition=filename=results.csv
https://www.ibm.com/downloads/documents/us-en/107a02f5d048f2defield_name=Content-Disposition, disposition=filename="wm027_whitepaper_ipaas_in_manufacturing_final.pdf"

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
akamai	36,059	55.2%	0.3%
apache	5,746	8.8%	0.0%
nginx	4,155	6.4%	0.0%
cloudflare	1,106	1.7%	0.0%
fastly	249	0.4%	0.0%
cloudfront	68	0.1%	0.0%
envoy	44	0.1%	0.0%
azure-front-door	1	0.0%	0.0%

WARNPARAM_SINGLE_QUOTED~64 sites (0.1%)107,564

The '%(param)s' parameter on the %(field_name)s header is single-quoted.

Samples (5)

https://arxiv.org/pdf/1708.07242field_name=Link, param=rel, param_val='canonical', param_val_unquoted=canonical
https://www.uni-hamburg.de/en/newsroom/presse/2015/pm48.htmlfield_name=Link, param=rel, param_val='canonical', param_val_unquoted=canonical
https://moz.com/blog/5-actionable-metrics-to-track-on-your-marketing-dashboardfield_name=Link, param=rel, param_val='canonical', param_val_unquoted=canonical
https://www.edmentum.com/resources/videos/high-school-cte-pathways/field_name=Link, param=rel, param_val='canonical', param_val_unquoted=canonical
https://umd.edu/privacyfield_name=Link, param=rel, param_val='canonical', param_val_unquoted=canonical

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	48,435	45.0%	0.2%
fastly	29,074	27.0%	0.3%
nginx	19,871	18.5%	0.1%
apache	5,996	5.6%	0.0%
cloudfront	3,338	3.1%	0.0%

WARNLOCATION_UNDEFINED~64 sites (0.1%)11,288

This status code doesn't define any meaning for the Location header.

Samples (5)

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
akamai	3,323	29.4%	0.0%
apache	3,303	29.3%	0.0%
cloudfront	3,239	28.7%	0.0%
nginx	2,606	23.1%	0.0%
cloudflare	44	0.4%	0.0%
fastly	20	0.2%	0.0%
envoy	19	0.2%	0.0%
azure-front-door	1	0.0%	0.0%

WARNSERVER_TIMING_BAD_PARAM~38 sites (0.1%)151,469

The '%(param)s' parameter on the '%(metric)s' metric has a non-numeric value.

Samples (5)

https://www.tokopedia.com/carolinawatchfield_name=Server-Timing, metric=1--Batch, param=dur, value=39.833668ms
https://www.airbnb.com/vesta-va/staysfield_name=Server-Timing, metric=origin, param=dur, value=UNSET
https://www.southwest.com/rapid-rewards/?ref=newrapidrewards.comfield_name=Server-Timing, metric=origin, param=dur, value=UNSET
https://www.dominos.com/en/menu/sandwich/S_CHIKP/chicken_parmfield_name=Server-Timing, metric=DocumentRender, param=dur, value=43.106241000816226ms
https://www.detran.sp.gov.br/session_timeout.dofield_name=Server-Timing, metric=br, param=dur, value=null

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
akamai	125,221	82.7%	1.0%
nginx	24,795	16.4%	0.1%
cloudflare	17,558	11.6%	0.1%
envoy	17,080	11.3%	0.4%
nextjs	8,855	5.8%	0.1%
cloudfront	124	0.1%	0.0%

WARNPARAM_REPEATS~31 sites (0.1%)176,634

The '%(param)s' parameter repeats in the %(field_name)s header.

Samples (5)

https://www.microsoft.com/en-us/research/group/msr-asia-shanghai/opportunities/field_name=Link, param=rel
https://www.nist.gov/bibcite/export/ris/bibcite_reference/816731field_name=Content-Disposition, param=filename
https://www.rakuten-sec.co.jp/web/fund/detail/?ID=JP90C000LUQ5field_name=Content-Type, param=charset
https://cash.app/$bedstuystrongfield_name=Content-Type, param=charset
https://justpaste.it/u/5mbbzcomfield_name=Link, param=rel

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	117,121	66.3%	0.4%
cloudflare	42,394	24.0%	0.1%
cloudfront	7,631	4.3%	0.0%
akamai	3,484	2.0%	0.0%
azure-front-door	1,563	0.9%	0.1%
apache	96	0.1%	0.0%
fastly	6	0.0%	0.0%

WARNDISPOSITION_FILENAME_PATH_CHAR~31 sites (0.1%)3,842

The filename in the Content-Disposition header contains a path character.

Samples (5)

https://wise.com/imaginary-v2/images/3900b51fb13d2ef9d6c343ce7be10f6f-Wise_Assets_Europe_Interim_Report_HY25.pdffield_name=Content-Disposition
https://www.legislation.gov.uk/changes/affecting/uksi/2007/2376/data.feed?results-count=50&sort=affected-year-numberfield_name=Content-Disposition
https://www.nokia.com/asset/f/214971/field_name=Content-Disposition
https://www.federalreserve.gov/apps/reportingforms/Download/DownloadAttachment?guid=ee63363a-871b-4b3b-84e2-ad7205d2e9c6field_name=Content-Disposition
https://www.ons.gov.uk/generator?uri=/peoplepopulationandcommunity/personalandhouseholdfinances/incomeandwealth/articles/earlyindicatorestimatesfromthewealthandassetssurvey/attitudestowardssavingforretirementcreditcommitmentsanddebtburdenjuly2014tojune2016/d48259a4&format=csvfield_name=Content-Disposition

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	3,575	93.1%	0.0%
cloudflare	75	2.0%	0.0%
apache	22	0.6%	0.0%
fastly	21	0.5%	0.0%
cloudfront	11	0.3%	0.0%
azure-front-door	6	0.2%	0.0%
akamai	2	0.1%	0.0%
envoy	1	0.0%	0.0%

WARNREPORT_TO_MISSING_KEY~8 sites (0.0%)58,863

The Report-To header value is missing the '%(key)s' key.

Samples (2)

https://www.lexmark.com/es_es/printers/supply/7786/Cartucho-de-toner-cian-retornable-de-4000-paginas-para-Lexmafield_name=Report-To, key=max_age
https://tsyndicate.com/iframes2/87e0202a22204731bd33e2e726fc54dc.html?extid=%7Bextid%7D&categories=%7Binterracial%20,pussy%20%7D&subid=%7Bsubid3%7Dfield_name=Report-To, key=endpoints

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	21,507	36.5%	0.1%
fastly	17,247	29.3%	0.2%
cloudfront	13,298	22.6%	0.1%
nextjs	13,146	22.3%	0.2%
apache	152	0.3%	0.0%
cloudflare	13	0.0%	0.0%

WARNNEL_MISSING_KEY~6 sites (0.0%)67,929

The NEL policy is missing the '%(key)s' key.

Samples (1)

https://gitlab.com/explore/projects/topics/simpy?archived=true&language=25&sort=created_ascfield_name=NEL, key=report_to

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	31,663	46.6%	0.1%
nginx	30,662	45.1%	0.1%
cloudfront	14,692	21.6%	0.1%

WARNFIELD_SECTION_TOO_LARGE~6 sites (0.0%)194

The %(field_type)s section is very large (%(section_size)s bytes).

Samples (4)

https://www.poetryfoundation.org/?volume=112&issue=4&page=49section_size=35715
https://yandex.kz/games/app/bego-maniia-494204section_size=45077
https://playhop.com/de/app/memnyi-kliker-487996section_size=44472
https://yandex.uz/games/app/krestiki-noliki-novye-502370section_size=45038

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	172	88.7%	0.0%
nuxt	82	42.3%	0.0%

WARNLINK_BAD_HINT_TARGET~3 sites (0.0%)137

The %(rel)s Link target uses an unsupported scheme.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	133	97.1%	0.0%
cloudflare	4	2.9%	0.0%

WARNLINK_REV~2 sites (0.0%)14,056

The 'rev' parameter on the Link header is deprecated.

WARNDATE_OBSOLETE~2 sites (0.0%)2,671

The %(field_name)s header's value uses an obsolete format.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	2,670	100.0%	0.0%

WARNDEPRECATION_PAST~2 sites (0.0%)24

The resource has been deprecated.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
nginx	24	100.0%	0.0%

WARNNEL_BAD_TYPE~1 sites (0.0%)1,139

The NEL policy has an invalid type for '%(key)s'.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
azure-front-door	1,139	100.0%	0.1%

WARNREPORT_TO_BAD_TYPE~1 sites (0.0%)1,139

The Report-To header has an invalid type for '%(key)s'.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
azure-front-door	1,139	100.0%	0.1%

WARNLINK_BAD_TYPE~1 sites (0.0%)386

The 'type' parameter on the %(link)s Link header isn't a media type.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	386	100.0%	0.0%

WARNPARAM_STAR_CHARSET~1 sites (0.0%)80

The %(param)s parameter's value uses an encoding other than UTF-8.

INFOLM_PRESENT~27,343 sites (55.4%)24,805,515

The resource last changed %(last_modified_string)s.

Samples (5)

https://arxiv.org/abs/2103.01420field_name=Last-Modified, last_modified_string=5 years ago
https://cadenaser.com/andalucia/2026/01/17/nijar-llora-a-maria-isabel-el-alma-de-la-pizzeria-el-mirador-ser-almeria/?primarySection=/deportes/futbolfield_name=Last-Modified, last_modified_string=in 0 seconds
https://elcomercio.pe/deporte-total/champions-league/apuestas-real-madrid-vs-manchester-city-en-vivo-hoy-pronostico-predicciones-cuotas-online-resultado-partido-de-champions-league-cuanto-paga-madrid-city-gol-goles-bet365-betsson-te-apuesto-betfair-lbposting-noticia/field_name=Last-Modified, last_modified_string=in 0 seconds
https://elpais.com/noticias/frank-zappa/field_name=Last-Modified, last_modified_string=in 0 seconds
https://kpmg.com/jp/ja/media/press-releases/2018/09/cyber-security-survey2018.htmlfield_name=Last-Modified, last_modified_string=in 0 seconds

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	9,174,489	37.0%	29.9%
nginx	3,834,339	15.5%	14.5%
fastly	3,505,938	14.1%	35.3%
akamai	2,949,375	11.9%	23.1%
apache	2,782,922	11.2%	21.1%
cloudfront	2,686,776	10.8%	15.9%
envoy	283,521	1.1%	5.9%
nextjs	244,116	1.0%	2.9%
azure-front-door	215,356	0.9%	15.1%
nuxt	123,043	0.5%	12.0%
… 1 more layers not shown …

INFOUNNECESSARY_HEADER~16,837 sites (34.1%)44,688,718

The %(header_name)s header can probably be removed.

Samples (5)

https://ankergames.net/game/ship-graveyard-simulator-2field_name=x-powered-by, header_name=x-powered-by
https://cafef.vn/du-lieu/otc/futa-ctcp-dau-tu-phuong-trang.chnfield_name=x-aspnet-version, header_name=x-aspnet-version
https://crex.com/player/rohan-prem-AVTfield_name=x-powered-by, header_name=x-powered-by
https://goldprice.org/gold-price-charts/30-year-gold-price-history-in-chinese-yuan-per-ouncefield_name=x-generator, header_name=x-generator
https://hotmart.com/en/marketplace/products/30-tekstow-z-nagraniami-dla-poczatkujacych/C84174894Ffield_name=x-powered-by, header_name=x-powered-by

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	12,372,127	27.7%	40.4%
nginx	11,102,462	24.8%	41.9%
nextjs	7,889,844	17.7%	95.3%
cloudfront	6,430,225	14.4%	38.1%
apache	3,521,441	7.9%	26.7%
fastly	3,135,013	7.0%	31.6%
akamai	2,612,131	5.8%	20.4%
envoy	1,625,576	3.6%	33.8%
vercel	1,353,348	3.0%	71.4%
nuxt	1,093,958	2.4%	106.7%
… 1 more layers not shown …

INFOSERVER_TIMING_MISSING_DESC~9,004 sites (18.2%)44,166,399

The '%(metric)s' metric is missing the 'desc' parameter.

Samples (5)

https://character.ai/character/MM02nghr/ancient-egypt-scholarfield_name=Server-Timing, metric=cfOrigin
https://hackernoon.com/u/hobbitdrakarisfield_name=Server-Timing, metric=cfEdge
https://huggingface.co/s42chen/activity/upvotesfield_name=Server-Timing, metric=mongo1-1
https://korrespondent.net/sport/other/4089861-harsyia-otkazalsia-ot-tytula-WBC-v-lehkom-vesefield_name=Server-Timing, metric=cfEdge
https://me-qr.com/zh/page/instructions/step-by-step-instructions-qr-code-for-presentation?srsltid=AfmBOoqOwMvRDAysYKtRBWB7_KIfeoC-cYdq6IUBZE0Y0sPnzi0VFOsPfield_name=Server-Timing, metric=cfEdge

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	28,330,114	64.1%	92.5%
akamai	13,578,925	30.7%	106.2%
nextjs	3,133,611	7.1%	37.8%
cloudfront	2,751,883	6.2%	16.3%
envoy	2,527,236	5.7%	52.5%
nginx	2,013,980	4.6%	7.6%
fastly	1,851,285	4.2%	18.7%
apache	1,242,016	2.8%	9.4%
vercel	774,891	1.8%	40.9%
nuxt	498,660	1.1%	48.7%
… 1 more layers not shown …

INFOSERVER_TIMING_MISSING_DUR~8,573 sites (17.4%)25,652,558

The '%(metric)s' metric is missing the 'dur' parameter.

Samples (5)

https://imgflip.com/m/IcA_Bandi_MakesMemesfield_name=Server-Timing, metric=cfCacheStatus
https://kuruma-news.jp/ex/mazda/post/13431field_name=Server-Timing, metric=cfCacheStatus
https://naurok.com.ua/profile/165236field_name=Server-Timing, metric=cfCacheStatus
https://teletype.in/@jennifer-kimfield_name=Server-Timing, metric=cfCacheStatus
https://www.academy.com/p/wincraft-houston-astros-team-color-license-plate-framefield_name=Server-Timing, metric=dtSInfo

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	15,034,640	58.6%	49.1%
akamai	8,374,708	32.6%	65.5%
nextjs	1,714,650	6.7%	20.7%
fastly	1,682,539	6.6%	17.0%
cloudfront	1,609,292	6.3%	9.5%
nginx	1,467,849	5.7%	5.5%
envoy	1,072,676	4.2%	22.3%
apache	766,282	3.0%	5.8%
nuxt	501,646	2.0%	48.9%
vercel	411,898	1.6%	21.7%
… 1 more layers not shown …

INFOVIA_PRESENT~8,457 sites (17.1%)30,180,949

One or more intermediaries are present.

Samples (5)

https://audiomack.com/liam-bates-2field_name=Via, via_list=<ul><li><code>1.1 30d6f4710afb1ead3ea9ccb915b8bc7c.cloudfront.net (CloudFront)</code></li></ul>
https://dev.to/chalermporn/test-2c5nfield_name=Via, via_list=<ul><li><code>1.1 heroku-router</code></li> <li><code>1.1 varnish</code></li> <li><code>1.1 varnish</code></li></ul>
https://hotmart.com/pt-br/marketplace/produtos/tortas-de-geladas-sucesso-garantido/U97036233Bfield_name=Via, via_list=<ul><li><code>1.1 c25b8f71d5570bd277ed77587bc945f4.cloudfront.net (CloudFront)</code></li></ul>
https://issuu.com/morningtonnews/docs/mn_31_january_2017field_name=Via, via_list=<ul><li><code>1.1 varnish</code></li></ul>
https://jmty.jp/chiba/rec-lig/article-rec_ks_keibi63427field_name=Via, via_list=<ul><li><code>1.1 40c1e5c4b3789c2ca411f57891da3fe4.cloudfront.net (CloudFront)</code></li></ul>

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudfront	16,345,181	54.2%	96.9%
nginx	7,503,049	24.9%	28.3%
fastly	6,019,270	19.9%	60.7%
cloudflare	3,856,268	12.8%	12.6%
nextjs	3,123,326	10.3%	37.7%
apache	2,671,117	8.9%	20.2%
envoy	1,840,797	6.1%	38.3%
nuxt	221,417	0.7%	21.6%
vercel	147,456	0.5%	7.8%
azure-front-door	113,308	0.4%	7.9%
… 1 more layers not shown …

INFOSERVER_TOO_LONG~120 sites (0.2%)157,860

The Server header is long.

Samples (5)

https://kidshealth.org/AetnaBetterHealthKentucky/es/parents/eating-pregnancy.htmlfield_name=Server, server_string=Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k Communique/4.3.6 mod_jk/1.2.48, server_length=86 bytes
https://cygwin.com/setup/setup-2.929.x86_64.exe.sigfield_name=Server, server_string=Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k mod_qos/11.74 mod_wsgi/4.6.4 Python/3.6 mod_perl/2.0.12 Perl/v5.26.3, server_length=124 bytes
https://www.buffalo.edu/ctsi/ctsi-news.host.html/content/shared/www/ctsi/articles/academic_articles/btc-research-awards-recognize-ub-and-roswell-park-investigators.detail.htmlfield_name=Server, server_string=Apache/2.4.37 (Oracle Linux Server) Communique/4.3.3 OpenSSL/1.1.1k, server_length=67 bytes
https://www.justice.gov/archive/opa/pr/2004/January/04_enrd_040.htmfield_name=Server, server_string=Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k PHP/7.4.33, server_length=66 bytes
https://uwo.ca/sci/research/biotron/environmental_chambers/biomes/index.htmlfield_name=Server, server_string=Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k mod_perl/2.0.12 Perl/v5.26.3, server_length=84 bytes

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
apache	136,638	86.6%	1.0%
akamai	8,220	5.2%	0.1%
cloudfront	6,185	3.9%	0.0%
envoy	5,417	3.4%	0.1%
fastly	67	0.0%	0.0%

INFOLOCATION_NOT_ABSOLUTE~23 sites (0.0%)6,782

The Location header contains a relative URI.

Samples (3)

https://www.emirates.com/kw/english/dubai-experience/hotels/317/carlton-downtown/field_name=Location, full_uri=https://www.emirates.com/kw/english/dubai-experience/hotels/317/carlton-downtown/
https://www.reg.ru/domain/shop/lot/field_name=Location, full_uri=https://www.reg.ru/domain/shop/lot
https://go.dev/dl/go1.23rc2field_name=Location, full_uri=https://go.dev/dl/#go1.23rc2

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
akamai	3,246	47.9%	0.0%
nginx	2,606	38.4%	0.0%
cloudflare	13	0.2%	0.0%
fastly	1	0.0%	0.0%

INFOCONTENT_LANGUAGE_DUP~5 sites (0.0%)2,207

The %(lang)s language tag appears more than once.

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
akamai	1,801	81.6%	0.0%
fastly	1,801	81.6%	0.0%
nginx	251	11.4%	0.0%
apache	155	7.0%	0.0%

GOODDATE_CORRECT~46,944 sites (95.1%)117,701,006

The server's clock is correct.

Samples (5)

http://fanfox.net/manga/kakuriyo_no_yadomeshi_ayakashi_o_yado_ni_yomeiri_shimasu/v05/c029/4.htmlfield_name=Date
http://www.wikidot.com/user:info/pantelispsfield_name=Date
https://about.me/rotaractvalsesia?fbclid=IwY2xjawIW3m9leHRuA2FlbQIxMAABHbtRv9_Sp-9w2IUljLYLEFXqkke_qmg_mew3ALMeHHA2zIKTfL2jljNlVQ_aem_jn61NTsuIP8S7-Mmmga7cAfield_name=Date
https://aif.ru/culture/movie/stoyanov_obyasnil_pochemu_segodnya_snimaetsya_malo_filmov_o_sovremennostifield_name=Date
https://ameblo.jp/yurukonasu/imagelist.htmlfield_name=Date

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	30,616,560	26.0%	99.9%
nginx	25,294,480	21.5%	95.5%
cloudfront	15,611,278	13.3%	92.5%
akamai	12,782,694	10.9%	99.9%
apache	12,609,545	10.7%	95.5%
fastly	8,394,633	7.1%	84.6%
nextjs	7,933,729	6.7%	95.8%
envoy	4,643,212	3.9%	96.5%
vercel	1,722,981	1.5%	90.9%
azure-front-door	1,427,422	1.2%	100.0%
… 1 more layers not shown …

GOODLINK_RESOURCE_HINTS~5,629 sites (11.4%)13,107,075

This response provides resource hints (%(hints)s).

Samples (5)

https://booth.pm/en/items/7565757field_name=Link, hints=preload, detail_lines=- `preload`: `https://www.google.com/recaptcha/enterprise.js?render=6LfF1dcZAAAAAOHQX8v16MX5SktDwmQINVD_6mBF`
https://bulbagarden.net/threads/miss-printed-cards.158677/field_name=Link, hints=preload, detail_lines=- `preload`: `/js/xf/preamble.min.js?_v=724d9c53`, `/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=[redacted]&l=1&d=1772891729&k=4679676895d9f8445592cca071342dfcd46f8a53`, `/js/xf/lightbox-compiled.js?_v=724d9c53`, `/js/sv/lazyimageloader/xf/lightbox.min.js?_v=724d9c53`, `/js/xf/notice.min.js?_v=724d9c53`, `/js/vendor/jquery/jquery-3.5.1.min.js?_v=724d9c53`, `/js/vendor/vendor-compiled.js?_v=724d9c53`, `/js/xf/core-compiled.js?_v=724d9c53`, `/css.php?css=public%3Alightbox.less%2Cpublic%3Amessage.less%2Cpublic%3Anotices.less%2Cpublic%3Aozzmodz_badges.less%2Cpublic%3Aozzmodz_badges_featured_badges.less%2Cpublic%3Ashare_controls.less%2Cpublic%3Axb.less%2Cpublic%3Aextra.less&s=[redacted]&l=1&d=1772891729&k=38ed3a92cf7f2b74e1e94a1265c142ba7467d7da`
https://dev.to/lakincoder/microservices-may-not-always-be-the-answer-lessons-from-amazon-prime-video-io7field_name=Link, hints=preload, detail_lines=- `preload`: `https://assets.dev.to/assets/minimal-0fc929d1ccc988e72db65eda2b632bef0131b6061166da6bb212e4d21ee48615.css`, `https://assets.dev.to/assets/views-74f3309309223c1b8c78dc48a749f36eb4225dacb55e059f80260c160cda91e8.css`, `https://assets.dev.to/assets/crayons-d092ef52ec81e940080fcf1efd5084de70bba806dfe75815b05972b58897cdb0.css`
https://flippingbook.com/fr?src=1field_name=Link, hints=preload, detail_lines=- `preload`: `https://d1qwl4ymp6qhug.cloudfront.net/Release/R10181/icons/common/logo-full-white.svg`, `https://d1qwl4ymp6qhug.cloudfront.net/Release/R10181/4514-bundle.css`, `https://d1qwl4ymp6qhug.cloudfront.net/Release/R10181/5949-bundle.css`, `https://d1qwl4ymp6qhug.cloudfront.net/Release/R10181/5908-bundle.css`, `https://d1qwl4ymp6qhug.cloudfront.net/Release/R10181/2577-bundle.css`, `https://d1qwl4ymp6qhug.cloudfront.net/Release/R10181/4272-bundle.css`, `https://d1qwl4ymp6qhug.cloudfront.net/Release/R10181/5552-bundle.css`, `https://d1qwl4ymp6qhug.cloudfront.net/Release/R10181/6335-bundle.css`
https://giphy.com/clips/cartoon-ggkt-ggktworld-mF3ZqvnItlq38eAQRTfield_name=Link, hints=preload, preconnect, detail_lines=- `preload`: `/_next/static/media/019b6917686f8f6b-s.p.woff2`, `/_next/static/media/212c0c0077b7c84d-s.p.woff2`, `/_next/static/media/3bce2c0df22c7261-s.p.woff2`, `/_next/static/media/98ed29ff2bc362f9-s.p.woff2` - `preconnect`: `https://i.giphy.com`, `https://media.giphy.com`, `https://media0.giphy.com`, `https://media1.giphy.com`, `https://media2.giphy.com`, `https://media3.giphy.com`, `https://media4.giphy.com`

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	4,083,328	31.2%	13.3%
akamai	3,311,906	25.3%	25.9%
nextjs	2,409,368	18.4%	29.1%
nginx	1,918,884	14.6%	7.2%
cloudfront	1,836,823	14.0%	10.9%
fastly	1,336,463	10.2%	13.5%
envoy	978,124	7.5%	20.3%
vercel	579,506	4.4%	30.6%
apache	491,733	3.8%	3.7%
azure-front-door	117,037	0.9%	8.2%
… 1 more layers not shown …

GOODNEL_CONFIGURED~216 sites (0.4%)674,390

Network Error Logging is configured for this response.

Samples (5)

https://www.familysearch.org/et/surname/directory/surnames/exyfield_name=NEL, endpoints=`heroku-nel`, `heroku-nel`
https://www.theepochtimes.com/bright/design-recipes-decorating-with-white-5503100field_name=NEL, endpoints=`cf-nel-endpoint`
https://dev.to/syncfusion/getting-started-with-the-aspnet-core-autocomplete-control-gljfield_name=NEL, endpoints=`heroku-nel`
https://about.me/tarmolovfield_name=NEL, endpoints=`heroku-nel`
https://vk.com/video_ext.php?oid=178432646&id=164178974&hash=10719b3c61183f66field_name=NEL, endpoints=`default`

By infrastructure

Layer	Note fires	Share of occurrences	Of layer's traffic
cloudflare	329,116	48.8%	1.1%
fastly	141,851	21.0%	1.4%
nextjs	73,773	10.9%	0.9%
cloudfront	65,492	9.7%	0.4%
akamai	4,379	0.6%	0.0%
vercel	1,947	0.3%	0.1%
azure-front-door	1,113	0.2%	0.1%
nginx	1,067	0.2%	0.0%
apache	195	0.0%	0.0%
nuxt	189	0.0%	0.0%
… 1 more layers not shown …

Cluster	Responses	% of responses	Sites
FRESHNESS_HEURISTIC	8,449,278	6.87%	~7,539
(none)	5,700,030	4.64%	~3,235
STORE_PUBLIC_UNNECESSARY	3,571,285	2.91%	~2,132
FIELD_DEPRECATED, FRESHNESS_HEURISTIC	3,480,099	2.83%	~3,451
FIELD_DEPRECATED, FRESHNESS_HEURISTIC, NEL_REPORT_TO_MISSING	2,467,254	2.01%	~2,591
FIELD_DEPRECATED	2,462,600	2.00%	~1,490
CC_CONFLICTING, REQUEST_HDR_IN_RESPONSE	2,438,705	1.98%	~1,736
CC_CONFLICTING	2,088,894	1.70%	~1,546
FIELD_DEPRECATED, STORE_PUBLIC_UNNECESSARY	1,731,636	1.41%	~1,263
CC_CONFLICTING, FIELD_DEPRECATED, REQUEST_HDR_IN_RESPONSE	1,641,448	1.34%	~1,189
FRESHNESS_HEURISTIC, HSTS_NO_SUBDOMAINS	1,293,900	1.05%	~1,602
FIELD_DEPRECATED, NEL_REPORT_TO_MISSING	1,263,474	1.03%	~1,387
FRESHNESS_NO_CACHE_NO_VALIDATOR	1,253,893	1.02%	~871
HSTS_NO_SUBDOMAINS, STORE_PUBLIC_UNNECESSARY	1,220,034	0.99%	~851
HSTS_NO_SUBDOMAINS	1,208,569	0.98%	~896
CC_CONFLICTING, FIELD_DEPRECATED	1,139,675	0.93%	~600
FIELD_DEPRECATED, NEL_REPORT_TO_MISSING, STORE_PUBLIC_UNNECESSARY	1,066,991	0.87%	~1,004
FIELD_DEPRECATED, HSTS_NO_SUBDOMAINS	808,574	0.66%	~500
CC_CONFLICTING, FIELD_DEPRECATED, NEL_REPORT_TO_MISSING, REQUEST_HDR_IN_RESPONSE	697,580	0.57%	~758
VARY_DUPLICATE	691,048	0.56%	~670
FIELD_DEPRECATED, FRESHNESS_HEURISTIC, HSTS_NO_SUBDOMAINS	652,614	0.53%	~887
CC_CONFLICTING, VARY_COMPLEX	602,594	0.49%	~480
ACCEPT_CH_MISSING_VARY, CC_CONFLICTING, CSP_DEPRECATED_REPORT_URI, CSP_HTTP_URI, CSP_UNSAFE_EVAL, CSP_UNSAFE_INLINE, FIELD_DEPRECATED, FRESHNESS_NO_CACHE_NO_VALIDATOR, REQUEST_HDR_IN_RESPONSE	560,099	0.46%	~213
FIELD_DEPRECATED, HSTS_NO_SUBDOMAINS, STORE_PUBLIC_UNNECESSARY	555,386	0.45%	~388
FRESHNESS_HEURISTIC, SET_COOKIE_LIFETIME_TOO_LONG	508,184	0.41%	~293
… 1975 more clusters not shown …

Finding A	Finding B	Co-occurrences	P(A\|B)	P(B\|A)	Lift
CC_CONFLICTING	REQUEST_HDR_IN_RESPONSE	21,313,554	77.6%	59.4%	2.7×
CC_CONFLICTING	FIELD_DEPRECATED	18,328,380	30.7%	51.1%	1.1×
FIELD_DEPRECATED	REQUEST_HDR_IN_RESPONSE	15,021,054	54.7%	25.1%	1.1×
CSP_UNSAFE_EVAL	CSP_UNSAFE_INLINE	14,525,758	82.5%	99.2%	6.9×
FIELD_DEPRECATED	FRESHNESS_HEURISTIC	14,283,814	45.5%	23.9%	0.9×
FIELD_DEPRECATED	HSTS_NO_SUBDOMAINS	14,250,907	49.2%	23.8%	1.0×
FIELD_DEPRECATED	NEL_REPORT_TO_MISSING	12,981,322	100.0%	21.7%	2.1×
CSP_UNSAFE_INLINE	FIELD_DEPRECATED	12,433,329	20.8%	70.6%	1.5×
FIELD_DEPRECATED	STORE_PUBLIC_UNNECESSARY	10,608,645	48.4%	17.7%	1.0×
CSP_UNSAFE_EVAL	FIELD_DEPRECATED	10,194,577	17.1%	69.6%	1.4×
CC_CONFLICTING	HSTS_NO_SUBDOMAINS	8,651,522	29.9%	24.1%	1.0×
CC_CONFLICTING	CSP_UNSAFE_INLINE	6,658,085	37.8%	18.6%	1.3×
HSTS_NO_SUBDOMAINS	STORE_PUBLIC_UNNECESSARY	6,585,444	30.1%	22.7%	1.3×
HSTS_NO_SUBDOMAINS	REQUEST_HDR_IN_RESPONSE	6,319,870	23.0%	21.8%	1.0×
FRESHNESS_HEURISTIC	HSTS_NO_SUBDOMAINS	6,080,851	21.0%	19.4%	0.8×
CSP_DEPRECATED_REPORT_URI	CSP_UNSAFE_INLINE	5,911,673	33.6%	84.2%	5.9×
FIELD_DEPRECATED	SET_COOKIE_LIFETIME_TOO_LONG	5,755,847	54.2%	9.6%	1.1×
CC_CONFLICTING	CSP_UNSAFE_EVAL	5,751,149	39.3%	16.0%	1.3×
CSP_DEPRECATED_REPORT_URI	FIELD_DEPRECATED	5,529,937	9.3%	78.8%	1.6×
CSP_UNSAFE_INLINE	HSTS_NO_SUBDOMAINS	5,412,245	18.7%	30.7%	1.3×
BAD_DATE_SYNTAX	REQUEST_HDR_IN_RESPONSE	5,265,149	19.2%	81.5%	3.6×
CSP_DEPRECATED_REPORT_URI	CSP_UNSAFE_EVAL	5,013,264	34.2%	71.4%	6.0×
CSP_UNSAFE_INLINE	REQUEST_HDR_IN_RESPONSE	4,766,413	17.3%	27.1%	1.2×
CSP_UNSAFE_EVAL	HSTS_NO_SUBDOMAINS	4,701,268	16.2%	32.1%	1.4×
FIELD_DEPRECATED	FRESHNESS_NO_CACHE_NO_VALIDATOR	4,700,717	53.8%	7.9%	1.1×

Header	Count	% of responses
set-cookie	238,378,526	194.0%
content-length	122,875,593	100.0%
content-type	122,848,015	100.0%
date	122,298,911	99.5%
vary	112,681,471	91.7%
cache-control	98,177,840	79.9%
server	94,787,332	77.1%
strict-transport-security	71,294,722	58.0%
x-frame-options	60,521,378	49.2%
x-content-type-options	60,244,519	49.0%
server-timing	55,581,820	45.2%
expires	44,968,544	36.6%
link	43,505,576	35.4%
x-xss-protection	41,103,756	33.4%
content-security-policy	38,270,592	31.1%
x-cache	32,362,559	26.3%
alt-svc	32,351,074	26.3%
cf-ray	30,599,767	24.9%
via	30,429,667	24.8%
cf-cache-status	30,131,520	24.5%
referrer-policy	28,948,190	23.6%
x-powered-by	27,941,512	22.7%
pragma	27,337,916	22.2%
etag	27,061,042	22.0%
last-modified	25,956,008	21.1%
accept-ranges	21,869,020	17.8%
age	17,943,691	14.6%
x-amz-cf-pop	17,267,002	14.0%
x-amz-cf-id	16,825,393	13.7%
access-control-allow-origin	16,045,895	13.1%
connection	15,389,562	12.5%
report-to	14,955,363	12.2%
nel	13,808,649	11.2%
content-language	12,220,507	9.9%
permissions-policy	10,508,143	8.5%
xkey	10,167,065	8.3%
x-served-by	8,411,512	6.8%
x-akamai-transformed	8,229,609	6.7%
x-cache-hits	7,908,507	6.4%
x-request-id	7,618,476	6.2%
x-permitted-cross-domain-policies	7,282,295	5.9%
x-timer	6,897,853	5.6%
access-control-allow-headers	6,316,158	5.1%
keep-alive	6,182,623	5.0%
x-download-options	6,169,336	5.0%
access-control-allow-methods	5,681,593	4.6%
x-ua-compatible	5,210,198	4.2%
x-envoy-upstream-service-time	4,811,999	3.9%
access-control-allow-credentials	4,608,418	3.7%
cross-origin-opener-policy	4,425,144	3.6%

Layer	Role	Responses	% of responses
cloudflare	cdn	30,643,299	24.9%
nginx	server	26,488,665	21.6%
cloudfront	cdn	16,873,790	13.7%
apache	server	13,203,682	10.7%
akamai	cdn	12,790,450	10.4%
fastly	cdn	9,918,246	8.1%
nextjs	framework	8,282,901	6.7%
envoy	mesh	4,811,999	3.9%
vercel	platform	1,896,213	1.5%
azure-front-door	cdn	1,427,985	1.2%
nuxt	framework	1,024,818	0.8%

Header	Layers (share of this header's occurrences)
set-cookie	cloudflare 25% akamai 25% nginx 16% cloudfront 10% apache 9% envoy 8%
date	cloudflare 25% nginx 22% cloudfront 14% apache 11% akamai 10% fastly 8%
content-length	cloudflare 25% nginx 22% cloudfront 14% apache 11% akamai 10% fastly 8%
content-type	cloudflare 25% nginx 22% cloudfront 14% apache 11% akamai 10% fastly 8%
vary	cloudflare 29% nginx 20% cloudfront 15% akamai 11% apache 10% fastly 8%
server	cloudflare 32% nginx 28% apache 14% cloudfront 13% akamai 7% nextjs 6%
cache-control	cloudflare 25% nginx 21% cloudfront 14% akamai 12% apache 9% fastly 9%
strict-transport-security	cloudflare 23% nginx 19% akamai 14% cloudfront 14% fastly 12% apache 8%
server-timing	cloudflare 51% akamai 48% nextjs 7% fastly 6% nginx 5% envoy 5%
x-frame-options	cloudflare 23% nginx 22% akamai 14% cloudfront 14% fastly 10% apache 10%
x-content-type-options	cloudflare 25% nginx 19% cloudfront 15% akamai 14% apache 10% fastly 10%
link	cloudflare 30% nginx 28% akamai 12% fastly 12% cloudfront 11% nextjs 9%
x-cache	cloudfront 51% nginx 26% fastly 23% cloudflare 13% nextjs 8% apache 7%
expires	cloudflare 23% nginx 21% akamai 18% apache 15% cloudfront 7% fastly 6%
x-xss-protection	cloudflare 22% nginx 20% cloudfront 16% akamai 14% fastly 9% apache 9%
via	cloudfront 54% nginx 25% fastly 20% cloudflare 13% nextjs 10% apache 9%
content-security-policy	cloudflare 22% akamai 16% cloudfront 16% nginx 15% fastly 11% apache 8%
cf-ray	cloudflare 100% nextjs 7% cloudfront 4% fastly 4% envoy 3% vercel 2%
cf-cache-status	cloudflare 100% nextjs 7% cloudfront 4% fastly 3% envoy 3% vercel 2%
alt-svc	cloudflare 53% cloudfront 16% nginx 10% fastly 8% akamai 8% nextjs 8%
x-powered-by	cloudflare 30% nextjs 28% nginx 23% cloudfront 16% apache 7% akamai 6%
etag	nginx 24% cloudfront 23% akamai 19% nextjs 14% fastly 13% apache 8%
referrer-policy	cloudflare 26% nginx 19% cloudfront 18% akamai 10% fastly 8% apache 8%

ASN	Operator	Layer	Responses	% of responses
AS16509	Amazon (AWS)		14,911,433	12.1%
AS54113	Fastly	fastly	5,307,181	4.3%
AS13335	Cloudflare	cloudflare	4,249,461	3.5%
AS16625		akamai	4,131,612	3.4%
AS20940	Akamai	akamai	3,203,015	2.6%
AS396982			2,343,247	1.9%
AS14618	Amazon (AWS)		2,339,738	1.9%
AS16276	OVH		1,700,907	1.4%
AS24940	Hetzner		1,617,162	1.3%
AS8075	Microsoft		1,352,030	1.1%
AS19551			1,275,196	1.0%
AS209242			920,211	0.7%
AS2635			853,113	0.7%
AS51115			804,455	0.7%
AS14061	DigitalOcean		675,367	0.5%
AS57724			535,141	0.4%
AS63949			472,824	0.4%
AS680			461,243	0.4%
AS49505			342,428	0.3%
AS2497			329,559	0.3%
AS50340			282,155	0.2%
AS24429			262,565	0.2%
AS30148			259,008	0.2%
AS60068			258,706	0.2%
AS52580			248,788	0.2%
AS31898			203,342	0.2%
AS200350			184,480	0.2%
AS35280			183,107	0.1%
AS197695			181,718	0.1%
AS8560			176,616	0.1%
AS36351			166,438	0.1%
AS135905			162,588	0.1%
AS201706			158,338	0.1%
AS786			156,702	0.1%
AS137			151,415	0.1%
AS54994			148,740	0.1%
AS60781			141,316	0.1%
AS43298			140,502	0.1%
AS32244			137,817	0.1%
AS36459			130,989	0.1%
AS12876			122,891	0.1%
AS37963			122,579	0.1%
AS24638			122,284	0.1%
AS57352			120,584	0.1%
AS135354			120,466	0.1%
AS4694			118,569	0.1%
AS7941			116,029	0.1%
AS15830			115,586	0.1%
AS45899			113,087	0.1%
AS139341			112,597	0.1%

Recipe	Responses	% of Vary	Sites	Synthetic tokens
accept-encoding	74,080,755	71.96%	~37,460	—
accept-encoding, cookie	5,622,613	5.46%	~3,212	—
accept-encoding, user-agent	5,465,497	5.31%	~2,674	—
accept-encoding, origin	2,259,001	2.19%	~1,625	—
accept-encoding, next-router-prefetch, next-router-segment-prefetch, next-router-state-tree, rsc	2,094,758	2.03%	~1,034	4
accept-encoding, next-router-prefetch, next-router-state-tree, rsc	720,701	0.70%	~565	3
origin	614,755	0.60%	~613	—
next-router-prefetch, next-router-segment-prefetch, next-router-state-tree, rsc	612,375	0.59%	~356	4
user-agent	543,460	0.53%	~530	—
accept-encoding, x-country-code, x-ftr-abtest-group, x-ftr-kiosq-server-side-entitlements, x-ftr-kiosq-server-side-user-status, x-ftr-kiosq-user-status	520,908	0.51%	~44	5
cookie	480,902	0.47%	~533	—
accept-encoding, cookie, user-agent	424,276	0.41%	~163	—
accept-encoding, cookie, origin	333,814	0.32%	~133	—
*	332,898	0.32%	~267	—
accept, accept-encoding, content-type	330,320	0.32%	~81	—
accept-encoding, x-forwarded-proto	277,215	0.27%	~175	1
accept-encoding, access-control-request-headers, access-control-request-method, origin	269,910	0.26%	~167	—
accept-encoding, accept-language	255,111	0.25%	~97	—
accept, accept-encoding	249,257	0.24%	~669	—
accept-encoding, accept-language, cookie	223,998	0.22%	~118	—
accept-encoding, origin, x-nfl-geo	206,148	0.20%	~30	1
device-memory, sec-ch-dpr, sec-ch-viewport-width	185,052	0.18%	~1	3
accept-language, cookie	144,955	0.14%	~55	—
accept-encoding, host	140,657	0.14%	~46	—
accept-encoding, origin, user-agent	139,948	0.14%	~77	—
… 1001 more recipes not shown …

Recipe	Responses	% of Vary	Sites	Synthetic tokens
(accept-encoding only)	74,080,755	71.96%	~37,460	—
cookie	6,103,515	5.93%	~3,515	—
user-agent	6,008,957	5.84%	~2,834	—
origin	2,873,756	2.79%	~1,793	—
next-router-prefetch, next-router-segment-prefetch, next-router-state-tree, rsc	2,707,133	2.63%	~1,360	4
next-router-prefetch, next-router-state-tree, rsc	844,311	0.82%	~715	3
x-country-code, x-ftr-abtest-group, x-ftr-kiosq-server-side-entitlements, x-ftr-kiosq-server-side-user-status, x-ftr-kiosq-user-status	520,908	0.51%	~44	5
cookie, user-agent	472,472	0.46%	~179	—
*	418,063	0.41%	~334	—
cookie, origin	413,249	0.40%	~184	—
access-control-request-headers, access-control-request-method, origin	406,506	0.39%	~243	—
accept-language, cookie	368,953	0.36%	~170	—
accept	363,586	0.35%	~732	—
accept, content-type	336,970	0.33%	~92	—
x-forwarded-proto	288,244	0.28%	~195	1
accept-language	266,068	0.26%	~102	—
origin, x-nfl-geo	206,179	0.20%	~30	1
device-memory, sec-ch-dpr, sec-ch-viewport-width	185,052	0.18%	~1	3
origin, user-agent	183,683	0.18%	~81	—
host	148,429	0.14%	~68	—
x-requested-with	126,616	0.12%	~65	1
accept, sec-fetch-site, turbo-frame, turbo-visit, x-pjax, x-pjax-container, x-requested-with	123,804	0.12%	~1	6
https	122,130	0.12%	~112	1
next-router-prefetch, next-router-state-tree, next-url, rsc	117,850	0.11%	~107	4
x-ua-device	114,159	0.11%	~35	1
… 859 more recipes not shown …

Field-name	Responses	% of Vary	Sites
accept-encoding	98,824,092	95.99%	~37,141
cookie	8,503,390	8.26%	~4,560
user-agent	7,573,150	7.36%	~2,878
accept-language	967,418	0.94%	~450

Field-name	Responses	% of Vary	Sites
rsc	4,052,191	3.94%	~2,239
next-router-prefetch	4,006,255	3.89%	~2,219
next-router-state-tree	3,995,845	3.88%	~2,206
next-router-segment-prefetch	2,882,150	2.80%	~1,477
x-country-code	528,739	0.51%	~61
x-ftr-kiosq-user-status	520,908	0.51%	~44
x-ftr-kiosq-server-side-user-status	520,908	0.51%	~44
x-ftr-kiosq-server-side-entitlements	520,908	0.51%	~44
x-ftr-abtest-group	520,908	0.51%	~44
x-forwarded-proto	504,313	0.49%	~304
x-ua-device	348,494	0.34%	~51
x-requested-with	339,399	0.33%	~104
x-device	269,837	0.26%	~43
x-nfl-geo	206,511	0.20%	~28
x-consumer-id	206,462	0.20%	~77
sec-ch-viewport-width	190,070	0.18%	~10
sec-fetch-site	187,559	0.18%	~94
sec-ch-dpr	185,052	0.18%	~1
device-memory	185,052	0.18%	~1
x-vary-tcdn	184,955	0.18%	~21
fastly-ssl	182,153	0.18%	~23
next-url	156,763	0.15%	~112
x-pjax	131,408	0.13%	~2
x-pjax-container	130,983	0.13%	~1
turbo-visit	130,983	0.13%	~1
… 732 more not shown …

Recipe	Responses	% of Cache-Control	Sites	Non-standard
max-age=N, public	11,162,264	11.67%	~6,571	—
max-age=N	9,887,726	10.34%	~6,222	—
must-revalidate, no-cache, no-store	9,023,064	9.43%	~6,224	—
max-age=N, must-revalidate, no-cache, no-store, private	6,237,941	6.52%	~3,537	—
private	4,511,362	4.72%	~3,395	—
max-age=N, must-revalidate, private	3,885,230	4.06%	~1,575	—
no-cache	3,598,355	3.76%	~2,745	—
max-age=N, no-cache, no-store	3,326,020	3.48%	~1,408	—
max-age=N, must-revalidate	2,959,694	3.09%	~2,948	—
no-cache, no-store	2,859,856	2.99%	~1,857	—
max-age=N, private	2,754,864	2.88%	~1,247	—
no-cache, private	2,546,648	2.66%	~1,813	—
max-age=N, must-revalidate, no-cache, no-store	2,456,801	2.57%	~2,110	—
max-age=N, public, s-maxage=N	2,327,755	2.43%	~1,178	—
max-age=N, must-revalidate, public	1,964,142	2.05%	~2,069	—
must-revalidate, no-cache, no-store, post-check=N, pre-check=N	1,720,931	1.80%	~1,930	—
no-store	1,666,370	1.74%	~894	—
must-revalidate, no-cache	1,348,322	1.41%	~620	—
must-revalidate, no-cache, no-store, private	1,287,027	1.35%	~625	—
max-age=N, public, s-maxage=N, stale-if-error=N, stale-while-revalidate=N	1,218,685	1.27%	~297	—
no-store, private	981,213	1.03%	~379	—
max-age=N, no-cache	954,009	1.00%	~357	—
max-age=N, public, stale-if-error=N, stale-while-revalidate=N	887,240	0.93%	~235	—
max-age=N, s-maxage=N	799,210	0.84%	~902	—
s-maxage=N	743,169	0.78%	~905	—
… 1138 more recipes not shown …

Directive	Responses	% of Cache-Control	Sites	Standard?
max-age	59,506,235	62.20%	~24,588	yes
no-cache	39,775,437	41.57%	~20,652	yes
must-revalidate	36,271,952	37.91%	~18,799	yes
no-store	32,425,774	33.89%	~17,109	yes
private	25,951,332	27.13%	~12,822	yes
public	22,989,446	24.03%	~11,018	yes
s-maxage	10,358,681	10.83%	~4,803	yes
stale-while-revalidate	6,556,969	6.85%	~2,055	yes
stale-if-error	4,266,667	4.46%	~1,168	yes
pre-check	2,528,324	2.64%	~2,061	yes
post-check	2,526,676	2.64%	~2,061	yes
proxy-revalidate	930,375	0.97%	~695	yes
no-transform	829,232	0.87%	~413	yes
immutable	155,042	0.16%	~279	yes
max-stale	93,076	0.10%	~41	yes
s-max-age	88,366	0.09%	~33	no
store	55,904	0.06%	~30	no
stale-while-error	47,196	0.05%	~3	no
maxage	34,593	0.04%	~25	no
cache	32,289	0.03%	~12	no
v-stale-while-revalidate	31,795	0.03%	~2	no
v-maxage	31,795	0.03%	~2	no
off	31,606	0.03%	~7	no
public; max-age	31,319	0.03%	~11	no
nocache	24,210	0.03%	~9	no
min-age	16,340	0.02%	~1	no
private no-store	16,333	0.02%	~4	no
300	15,761	0.02%	~1	no
min-fresh:2000000	14,583	0.02%	~1	no
vary	13,669	0.01%	~2	no
… 577 more not shown …

Value	Occurrences	%
negative	14,387	0.0%
0	25,750,237	43.0%
<1 min	3,008,730	5.0%
1-10 min	12,977,402	21.7%
10-60 min	5,743,992	9.6%
1-24 hours	6,319,429	10.6%
1-7 days	3,070,242	5.1%
7-30 days	984,257	1.6%
30-365 days	1,215,685	2.0%
1-10 years	720,422	1.2%
>10 years	14,349	0.0%

Value	Occurrences	%
negative	80	0.0%
0	791,871	7.6%
<1 min	704,261	6.8%
1-10 min	2,543,715	24.5%
10-60 min	1,715,458	16.5%
1-24 hours	1,859,584	17.9%
1-7 days	872,310	8.4%
7-30 days	562,574	5.4%
30-365 days	734,859	7.1%
1-10 years	578,414	5.6%
>10 years	17,527	0.2%

Value	Occurrences	%
negative	0	0.0%
0	11,384,429	63.5%
<1 min	578,406	3.2%
1-10 min	359,194	2.0%
10-60 min	511,613	2.9%
1-24 hours	2,772,349	15.5%
1-7 days	1,831,884	10.2%
7-30 days	445,025	2.5%
30-365 days	53,001	0.3%
1-10 years	354	0.0%
>10 years	0	0.0%

Value	Occurrences	%
negative	3,524	0.0%
0	1,083,198	1.6%
<1 min	84,232	0.1%
1-10 min	1,908,613	2.8%
10-60 min	776,992	1.1%
1-24 hours	473,531	0.7%
1-7 days	2,047,910	3.0%
7-30 days	372,508	0.5%
30-365 days	12,808,666	18.5%
1-10 years	49,651,119	71.6%
>10 years	157,666	0.2%

Value	Occurrences	%
negative	8,607,822	5.6%
0	6,550,114	4.2%
<1 min	554,122	0.4%
1-10 min	1,282,426	0.8%
10-60 min	15,708,579	10.2%
1-24 hours	21,732,811	14.1%
1-7 days	11,699,569	7.6%
7-30 days	11,335,544	7.3%
30-365 days	29,211,561	18.9%
1-10 years	36,256,202	23.5%
>10 years	11,415,639	7.4%

Value	Occurrences	%
negative	4,881,784	9.0%
0	15,051,258	27.9%
<1 min	3,054,769	5.7%
1-10 min	13,044,899	24.1%
10-60 min	5,765,382	10.7%
1-24 hours	6,294,887	11.6%
1-7 days	3,043,655	5.6%
7-30 days	957,826	1.8%
30-365 days	1,222,049	2.3%
1-10 years	708,607	1.3%
>10 years	14,627	0.0%

Value	Occurrences	%
negative	19,633,825	50.2%
0	7,214,354	18.5%
<1 min	874,295	2.2%
1-10 min	4,835,350	12.4%
10-60 min	1,778,801	4.6%
1-24 hours	2,320,175	5.9%
1-7 days	1,291,539	3.3%
7-30 days	370,898	0.9%
30-365 days	584,923	1.5%
1-10 years	172,342	0.4%
>10 years	16,411	0.0%

Bundle	Responses	% of responses	Sites
(none)	24,688,674	20.09%	~15,835
strict-transport-security	9,812,078	7.98%	~5,786
strict-transport-security, x-content-type-options, x-frame-options, x-xss-protection	4,742,146	3.86%	~1,992
nel, report-to	4,715,488	3.84%	~4,219
x-frame-options	4,042,631	3.29%	~2,162
content-security-policy, strict-transport-security, x-content-type-options, x-frame-options, x-xss-protection	3,780,009	3.08%	~1,501
content-security-policy, referrer-policy, strict-transport-security, x-content-type-options, x-frame-options, x-xss-protection	3,306,030	2.69%	~1,582
strict-transport-security, x-frame-options	3,290,199	2.68%	~1,267
strict-transport-security, x-content-type-options, x-frame-options	3,216,720	2.62%	~1,432
referrer-policy, strict-transport-security, x-content-type-options, x-frame-options, x-xss-protection	2,660,498	2.16%	~1,446
content-security-policy	2,539,384	2.07%	~888
content-security-policy, strict-transport-security	2,073,691	1.69%	~856
content-security-policy, strict-transport-security, x-content-type-options, x-frame-options	1,913,810	1.56%	~726
content-security-policy, strict-transport-security, x-frame-options	1,838,410	1.50%	~880
x-content-type-options, x-frame-options, x-xss-protection	1,688,310	1.37%	~1,028
strict-transport-security, x-content-type-options	1,563,874	1.27%	~1,158
content-security-policy, strict-transport-security, x-content-type-options	1,486,813	1.21%	~634
x-content-type-options, x-frame-options	1,455,156	1.18%	~1,347
strict-transport-security, x-content-type-options, x-xss-protection	1,424,989	1.16%	~626
content-security-policy, permissions-policy, referrer-policy, strict-transport-security, x-content-type-options, x-frame-options, x-xss-protection	1,210,784	0.99%	~923
content-security-policy, x-frame-options	1,185,561	0.96%	~496
nel, report-to, strict-transport-security	1,057,601	0.86%	~546
referrer-policy, strict-transport-security, x-content-type-options, x-frame-options, x-permitted-cross-domain-policies, x-xss-protection	996,099	0.81%	~359
content-security-policy, referrer-policy, strict-transport-security, x-content-type-options, x-frame-options	917,338	0.75%	~496
content-security-policy, strict-transport-security, x-content-type-options, x-xss-protection	913,857	0.74%	~384
… 1339 more bundles not shown …

Response health

Findings by category

Notes

Caching 417,568,883 occurrences across 43 note types (29.1% of occurrences)

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

Directive → conflicts

By infrastructure

By infrastructure

By infrastructure

By infrastructure

vary_count

By infrastructure

By infrastructure

By infrastructure

directive

By infrastructure

By infrastructure

By infrastructure

By infrastructure

other_message

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

Browser security 462,830,307 occurrences across 57 note types (32.2% of occurrences)

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

By infrastructure

value

By infrastructure

Header A	Header B	Co-occurrences	P(A\|B)	P(B\|A)	Lift
strict-transport-security	x-content-type-options	47,031,347	81.3%	67.6%	1.4×
x-content-type-options	x-frame-options	43,264,076	75.0%	74.8%	1.6×
strict-transport-security	x-frame-options	43,248,426	74.9%	62.1%	1.3×
x-content-type-options	x-xss-protection	36,959,641	91.8%	63.9%	2.0×
strict-transport-security	x-xss-protection	32,449,509	80.6%	46.6%	1.4×
x-frame-options	x-xss-protection	31,216,059	77.6%	54.1%	1.7×
content-security-policy	strict-transport-security	29,272,395	42.1%	78.6%	1.4×
content-security-policy	x-content-type-options	26,152,429	45.2%	70.2%	1.5×
referrer-policy	x-content-type-options	25,302,069	43.8%	89.3%	1.9×
content-security-policy	x-frame-options	23,960,024	41.5%	64.3%	1.4×
referrer-policy	strict-transport-security	23,737,436	34.1%	83.8%	1.5×
referrer-policy	x-frame-options	21,537,548	37.3%	76.0%	1.6×
referrer-policy	x-xss-protection	18,886,973	46.9%	66.7%	2.0×
content-security-policy	x-xss-protection	18,818,429	46.8%	50.5%	1.5×
content-security-policy	referrer-policy	14,416,206	50.9%	38.7%	1.7×
nel	report-to	13,712,592	92.2%	99.6%	8.2×
permissions-policy	x-content-type-options	8,901,824	15.4%	86.0%	1.8×
permissions-policy	strict-transport-security	8,836,999	12.7%	85.3%	1.5×
permissions-policy	x-frame-options	7,483,810	13.0%	72.3%	1.5×
permissions-policy	referrer-policy	7,047,325	24.9%	68.1%	3.0×
x-content-type-options	x-permitted-cross-domain-policies	7,036,920	97.8%	12.2%	2.1×
report-to	strict-transport-security	6,909,925	9.9%	46.4%	0.8×
report-to	x-content-type-options	6,763,050	11.7%	45.5%	1.0×
x-permitted-cross-domain-policies	x-xss-protection	6,441,795	16.0%	89.5%	2.7×
content-security-policy	permissions-policy	6,368,114	61.5%	17.1%	2.0×

Header	Responses	% of responses	Sites
strict-transport-security	69,604,896	56.63%	~25,470
x-content-type-options	57,813,603	47.04%	~20,883
x-frame-options	57,719,354	46.96%	~21,610
x-xss-protection	40,251,037	32.75%	~14,168
content-security-policy	37,256,807	30.31%	~15,178
referrer-policy	28,322,526	23.04%	~11,669
report-to	14,876,493	12.10%	~10,066
nel	13,771,426	11.20%	~9,532
permissions-policy	10,355,982	8.43%	~4,443
x-permitted-cross-domain-policies	7,198,491	5.86%	~2,999
cross-origin-opener-policy	4,379,265	3.56%	~1,797
content-security-policy-report-only	3,333,330	2.71%	~1,422
reporting-endpoints	2,970,219	2.42%	~858
cross-origin-resource-policy	2,242,274	1.82%	~1,094
origin-agent-cluster	1,290,004	1.05%	~403
cross-origin-embedder-policy	957,329	0.78%	~488

CSP size	Sites	% of sites
No CSP header	33,788	69.1%
1-99 B	7,608	15.6%
100-499 B	3,135	6.4%
500-999 B	1,090	2.2%
1000-1999 B	1,090	2.2%
2000-4999 B	1,505	3.1%
5000-9999 B	524	1.1%
10000+ B	156	0.3%

Pair (legacy → modern)	Both	Modern only	Legacy only	Modern share	Sites both
Expires → Cache-Control: max-age	25,451,914 (20.71%)	34,054,321	19,389,979	57.0%	~12,482
X-Frame-Options → CSP frame-ancestors	16,601,858 (13.51%)	8,794,928	41,117,496	30.6%	~7,682
Pragma: no-cache → Cache-Control: no-cache	22,265,740 (18.12%)	17,509,697	3,276,585	60.9%	~12,693
X-XSS-Protection → (no replacement)	0 (0.00%)	0	40,251,037	n/a (no replacement)	—
Report-To → Reporting-Endpoints	1,358,229 (1.11%)	1,611,990	13,518,264	16.6%	~358
Feature-Policy → Permissions-Policy	457,143 (0.37%)	9,898,839	1,001,890	87.7%	~259

Pair (legacy → modern)	Legacy sites	Modern sites	Modern share (sites)
Expires → Cache-Control: max-age	~21,291	~24,588	53.6%
X-Frame-Options → CSP frame-ancestors	~21,610	~9,730	31.0%
Pragma: no-cache → Cache-Control: no-cache	~13,866	~20,652	59.8%
X-XSS-Protection → (no replacement)	~14,168	—	n/a (no replacement)
Report-To → Reporting-Endpoints	~10,066	~858	7.9%
Feature-Policy → Permissions-Policy	~675	~4,443	86.8%