Threat Level: green Handler on Duty: Rick Wanner

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Cf-Request-Id
Link
CF-Cache-Status
Accept-Ranges
CF-RAY
ETag
X-XSS-Protection
Expect-CT
Pragma
X-Powered-By
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-UA-Compatible
X-Cache-Hits
Alt-Svc
P3P
X-Served-By
X-Xss-Protection
X-Download-Options
X-Timer
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
X-Adblock-Key
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-DNS-Prefetch-Control
X-Check
X-Cache-Status
X-Generator
X-Cacheable
Timing-Allow-Origin
X-Request-ID
X-Content-Security-Policy
P3p
X-Iinfo
Status
Feature-Policy
X-Envoy-Upstream-Service-Time
Content-Encoding
Access-Control-Expose-Headers
X-CDN
X-Drupal-Dynamic-Cache
Upgrade
X-AspNetMvc-Version
X-Via
CF-Ray
Access-Control-Max-Age
X-Ws-Request-Id
Server-Timing
EagleId
Keep-Alive
X-Cache-Group
X-Turbo-Charged-By
Request-Context
X-Age
X-Proxy-Cache
X-Server-Powered-By
X-AH-Environment
X-UA-Device
X-Backend
X-Hacker
X-Robots-Tag
Report-To
X-Amz-Request-Id
Host-Header
X-LiteSpeed-Cache
X-Server
X-Amz-Id-2
Grace
X-Rq
X-Nginx-Cache-Status
X-Varnish-Cache
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-WebKit-CSP
X-Dns-Prefetch-Control
X-Page-Speed
X-Vhost
X-OneAgent-JS-Injection
EagleEye-TraceId
X-Amz-Version-Id
X-Device
X-Pingback
X-Dispatcher
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Cache-Spec
NEL
X-Server-Id
X-Host
X-Backend-Server
X-Node
Cf-Railgun
Accept-CH
X-Readtime
X-Akam-SW-Version
Surrogate-Control
Request-Id
X-Response-Time
X-HW
X-Language
Xkey
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Application-Context
Content-Location
X-Template
X-Ruxit-JS-Agent
Rating
X-Ua-Compatible
X-B3-TraceId
Accept-Ch-Lifetime
X-Country
Accept-CH-Lifetime
X-Cloud-Trace-Context
X-Cache-Lookup
X-Ac
X-Url
Allow
X-Content-Type
X-Buckets
X-Trace
X-TtlSet
X-PC
X-Vname
X-Mod-Pagespeed
X-Varnish-TTL
X-Clacks-Overhead
Edge-Control
X-FastCGI-Cache
X-ESI
Cache-Tag
Fastly-Restarts
X-Rack-Cache
Service-Worker-Allowed
X-Server-Name
X-VARITI-CCR
X-Element-Page-Cache
Verso
X-GitHub-Request-Id
X-MS-InvokeApp
X-Upstream
X-Amz-Rid
MS-Author-Via
X-Vcap-Request-Id
Public-Key-Pins
X-Dw-Request-Base-Id
X-D2id
X-Client-IP
X-Cached
X-Abt-Application-Version
X-Origin-Cache
X-Cache-TTL
X-Aspnetmvc-Version
Arr-Disable-Session-Affinity
X-ORACLE-DMS-ECID
X-Cnection
X-Country-Code
X-ORACLE-DMS-RID
X-Px
X-Goog-Hash
X-Powered-By-Plesk
X-Navigation-Version
Access-Control-Request-Method
X-NF-Request-ID
X-Aws-Lambda-Call-Status
X-Instrumentation
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Version
RTSS
Accept-Ch
X-Amz-Server-Side-Encryption
X-Powered-CMS
Pagespeed
Display
X-Middleton-Display
X-Sol
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Response
X-Middleton-Response
X-Kinja-Server
X-Use-Magma
X-Cdn-Fetch
X-Kinja-Revision
X-Exp-Id
X-Exp-Variant
X-GoogleNews-Bot
X-Kinja
X-Kinja-Build
X-MSEdge-Ref
X-LLID
X-Edge
X-Kinsta-Cache
X-Edge-Location-Klb
X-CST
Nginx-Cache
X-Shield-Request-Id
MRF-Tech
X-B3-TraceId-Primal
X-TTL
Mrf-Cache-Status
S
AR-ATIME
AR-Request-ID
AR-CACHE
AR-PoweredBy
AR-SID
X-HP-Webp
X-HP-Trace-Id
Content-MD5
X-Jurisdiction
X-T
X-RateLimit-Remaining
X-Protected-By
X-Forwarded-For
X-Content-Security-Policy-Report-Only
TCN
X-Id
X-Mg-S
X-Mid
Fastcgi-Cache
X-MCACHE
Realpath
Front-End-Https
X-Parallel-Accel
SPRequestDuration
SPIisLatency
Edge-Cache-Tag
X-Recruiting
X-Request-Received
X-Request-Processing-Time
Filters
X-Ttl
Pinterest-Generated-By
Pinterest-Version
X-Pinterest-Rid
Fusion-Content-Id
Fusion-Content-Source
Fusion-Component-Id
Fusion-Deployment-Id
Fusion-Source
Server-Node
Fusion-Template-Id
X-DynaTrace
X-Ua-Browser
X-Content
X-Ab
X-SharePointHealthScore
SPRequestGuid
X-Correlation-Id
X-Ezoic-Cdn
X-Ruxit-Js-Agent
Alternate-Protocol
Server-Name
X-NWS-LOG-UUID
X-Accel-Expires
X-Frontend
X-ECACHE
X-HS-Combine-CSS
X-HS-Cache-Config
X-HS-Content-Id
X-HS-Hub-Id
X-Yandex-Sdch-Disable
X-Hits
X-Cache-Key
X-Tt-Trace-Tag
X-Content-Options
X-Tt-Trace-Host
Cache-Tags
MicrosoftSharePointTeamServices
Host
X-Git-Hash
X-Page-Id
Charset
Cleartype
X-Fastly-Request-Id
X-Www-Served-By
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-Geo-Country
X-B3-Sampled
X-Content-Digest
X-Amz-Replication-Status
TP-L2-Cache
TP-Cache
X-Ser
X-Forwarded-Proto
Filterid
X-Hostname
X-Varnish-Age
X-Amzn-Trace-Id
X-VCache
X-Az
X-Activity-Id
X-AppVersion
X-XRDS-LOCATION
X-Daa-Tunnel
X-Debug-Info
X-Rid
X-DIS-Request-ID
X-Upgrade-Enabled
X-Origin-Server
Access-Control-Allow-Method
X-Grace
X-N
X-Microsite
X-Request-Handler-Origin-Region
X-LB-Cache
X-Origin-Upstream-Status
X-FB-Debug
X-WebKit-CSP-Report-Only
X-Nginx-Upstream-Cache-Status
ServerID
X-Mobile-URL
X-Providence-Cookie
X-Request-Guid
X-Route-Name
X-Is-Crawler
X-Aspnet-Duration-Ms
X-TT
X-Whom
X-Flags
X-F-Cache
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-NGENIX-Cache
X-Goog-Storage-Class
X-Goog-Metageneration
X-Goog-Generation
X-Varnish-Grace
Cross-Origin-Opener-Policy
X-App-Environment
Viewport
X-App-Server
X-Distributor
X-Tb
Payment
X-FW-Server
X-FW-Static
X-FW-Serve
X-FW-Dynamic
Node
Paypal-Debug-Id
X-FW-Type
DC
X-FW-Hash
X-Server-ID
X-Cache-Control
X-Logged-In
Fastcgi-Useragent
X-Seen-By
X-Type
X-PressLabs-Stats
X-User-Agent
X-Cache-Age
Country
Accept-Charset
X-Ratelimit-Limit
X-Varnish-Backend
X-Cache-Rule
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
X-Browser-Type
Version
X-Webkit-CSP
X-Load-Cache
X-DataDome
X-Wix-Request-Id
X-Node-Name
X-Tec-Api-Root
X-Cache-Action
X-Tec-Api-Origin
X-Tec-Api-Version
X-IPLB-Instance
Refresh
X-Via-JSL
X-Response-Served-From
Referer-Policy
Access-Control-Request-Headers
X-Original-Request-Id
SD-X-WS
Cache-Status
X-Real-IP
Amp-Access-Control-Allow-Source-Origin
X-Drupal-Cache-Tags
X-Cacheable-TTL
X-Jobs
X-Rendered-As
X-ProcessESI
X-RemovedCookies
X-Vgn-Hpd-Reason
NGB
X-B
X-UUID
VIX-Pulpo-Upstream-Status
X-Cluster-Name
X-Revision
X-Is-Bot
X-Page-View
VIX-Pulpo-Node
X-Contextid
X-Proxy-Cache-Status
X-Signature
X-Yottaa-Optimizations
X-Rule
X-Device-Type
X-Drupal-Cache-Contexts
X-Yottaa-Metrics
DynaTrace
X-Debug
X-Proxy
Liferay-Portal
X-Cache-Expired-At
X-B-Cache
Surrogate-Key
X-Mobile
X-Instance
Akamai-GRN
X-G
X-Cache-Time
X-Fastly-Request-ID
X-Framework
X-Debug-IsPreview
X-Debug-IsConnected
CF-IPCountry
Healthy
X-Fastcgi-Cache
X-Azure-Ref
X-FW-Version
X-Source
X-Air-Trace-Id
SID
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-Air-Source
X-Air-Hostname
X-TEC-API-ROOT
X-Ms-Request-Id
X-Ms-Version
X-Oracle-Dms-Ecid
X-XRDS-Location
X-Oracle-Dms-Rid
Frame-Options
X-Cache-Hit
Ms-Operation-Id
X-RTag
MS-CV
X-APP-VERSION
Section-Io-Cache
Countrycode
X-CDN-Forward
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-1
X-Oneagent-Js-Injection
X-Nginx-Cache
X-Environment-Context
Xserver
X-Varnish-Server
X-L-Path
Count-Hit
GEO-INFO
X-Region
X-Cache-Operation
X-Servername
Uber-Trace-Id
X-Content-Powered-By
X-EdgeConnect-Cache-Status
X-Forwarded-Host
X-Backend-Name
Cross-Origin-Window-Policy
X-IPS-LoggedIn
Backend
X-Accel-Buffering
X-Mode
X-Adobe-Loc
X-Litespeed-Cache
X-Adobe-Content
X-Zen-Fury
Ec-Rule-Version
X-SaId
X-JoinUs
X-RN-RSRV
Meta-Geo
X-UPSTREAM-Address
X-Cache-Server
X-Microcachable
X-Redis-Cache
X-Human
X-Varnish-Beresp-Grace
X-Generation-Time
X-Cache-Type
X-Hosted-By
Eomportal-Instance
X-Detected-As
X-Alternate-Cache-Key
X-Uri
X-FB-TRIP-ID
X-Sql-Duration-Ms
X-Cache-TTL-Remaining
X-Debug-Cache
X-NCache
X-ShardId
X-ProxyCache-Status
Country-Code
X-PHP-Backend
Apigw-Requestid
Cache-Name
Cache-Tv-Group
Decoy-Debug-Key
Decoy-Debug-Status
Decoy-Debug-TTL
X-ProxyCache-Key
X-Via-Fastly
X-Cache-Grace
X-No-Session
Url
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Origin-Date
X-Shopify-Stage
X-Status
X-BYPASS-REASON
X-ShopId
X-Storage
X-Sql-Count
X-ServerID
TWC-GeoIP-Country
Mn-Server-Ip
X-PCL
X-OCL
Webcakes-App-Version
TWC-Privacy
Webcakes-Region
Fastly-SSL
X-Proxy-Build
TWC-GeoIP-LatLong
TWC-Device-Class
X-Web-Node
X-Format
X-Origin-Hint
TWC-Locale-Group
X-UA-Device-Type
TWC-Connection-Speed
X-Site-Version
Protected
X-Say-TTL
X-SayCDN-TTL
X-Ratelimit-Reset
Selected-Fe
Property-Id
X-Say-Cacheable
X-Timing-Wait
X-Akamai-Edgescape
Webcakes-App-Name
X-Cache-Host
Azure-SiteName
Azure-RegionName
Azure-InstanceId
Azure-SlotName
Azure-Version
X-NYM-Debug-Backend
X-PERF
X-Section
X-Server-W
X-Pubstack
X-Access
OT-Force-Account-Verify
X-Hl-Ver
X-R9-Blue-Green-Version
X-Varnishpool
X-Azure-Ref-OriginShield
X-ApacheServer
DB-Nickname
X-Proxied
Source
X-Cluster-Node
X-Be
X-Cache-NGX
X-Tid
X-RateLimit-Limit
X-Rewrite-Enabled
X-Extlb
X-LSADC-Cache
X-Routing-Service
Content-Secure-Policy
X-Zipkin-Id
X-Soup
X-SRV
X-Ua
X-HTML-Minification-Powered-By
X-NewRelic-App-Data
X-Time
X-Cache-Var-Map
X-Cache-Var
X-Cached-By
X-Content-Age
X-Webkit-Csp
X-Amz-Meta-S3cmd-Attrs
Content-Disposition
X-Presslabs-Stats
SRV
X-Dc
X-Generated-By
X-Unique-Id
CDN-Uid
Cache
CDN-RequestId
CDN-Cache
CDN-CachedAt
CDN-EdgeStorageId
CDN-PullZone
CDN-RequestCountryCode
X-LAGOON
X-TNCMS
X-Loop
X-Varnish-Hits
X-Bc-Bl
X-Hyper-Cache
X-Varnish-Hostname
Retry-After
X-App-Version
Onion-Location
X-S-Maxage
X-Origin-CC
X-Auto-Login
X-Origin-TTL
X-Tumblr-Pixel-3
Webserver
X-GEO
X-TT-LOGID
X-Tumblr-Pixel-2
X-Trace-Id
Cache-Hits
X-Nginx-Cache-Key
X-ECache
Web-Mar-Node
X-Proto
Xet-Cookie
X-Endurance-Cache-Level
X-Time-Microsecs
X-Tenant
X-Akamai-Transformed
X-Cdn
X-Edge-Location
Mime-Version
X-LJ-Flow-ID
X-Qnm-Cache
X-GG-Cache-Date
X-AWS-Id
X-VWS-Id
LB
X-M-Reqid
X-M-Log
X-Platform-Server
CloudFront-Viewer-Country
X-CSRF-Token
X-Mg-Request-UUID
X-CACHE-KEY
X-PHP-Host
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Labrador-Cache-Channel
HostName
X-Xfnlog-Site
X-Cache-Tags
X-B3-SpanId
Upgrade-Insecure-Requests
X-Handled-By
X-Varnish-Cache-Hits
N-Cache
X-RCS-CacheZone
X-Origin-Response-Time
ServedBy
X-Request-Time
X-Adobe-Source
WPO-Cache-Message
WPO-Cache-Status
X-TIME
X-VC-Cache
X-Storefront-Renderer-Rendered
X-Locale
X-Cache-Remote
X-AOL-HN
X-SVT-ORM-VERSION
Surrogated-Key
State
X-Planisys-CDN-Cache
X-Slack-Backend
X-PBS-Appsvrname
X-SRCache-Key
X-TIM-N
X-PAYTM-SRV-ID
X-SVT-ORM-RULES
X-A
X-Vdms-Path
X-Vdms-Version
X-A-Dgt
X-VG-WebCache
X-Request-Host
X-A-Dam
X-Orig-Expires
Rendered-Blocks
X-A-Ccd
X-V-Cache
X-Session-Fingerprint
Meta-Geo-Continent
X-Processor
Mobile-Detection-Method
A
X-Rojux
BehaviorPad-Version
Fastcgi-X-Cache-Version
DCR-Decision-By
DCR-Processing-Time-Ms
DSUID
Expiry
Nel
X-S
X-Planisys-CDN-Rules
X-A-Wwc
X-Shop-Environment
Pramga
X-Planisys-CDN-TTL
Origin
X-S-Cookie
Odigeo-Trace-Id
X-ScT
X-SD-PageType
Redirect-Candidate
X-A-Dcw
X-Cluster
X-Conf
X-Connection-Hash
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-Cache-NE
X-NAPM-TraceId
X-D
X-Destination
X-ATG-Version
X-Reqid
X-Ig-Push-State
X-Ftr-Request-Id
X-Forwarded-Path
X-Developer
X-External-Request-Id
X-ND-Cache
X-Ckpd-Fst-Backend
X-ARC
X-Vtex-Remote-Cache
X-Vtex-Processado-Em
X-Application
X-Aed
Xc-Version
X-B-Cookie
X-MP-GENERATED-AT
X-Via-NSCOPI
Server-Info
X-Correlation-ID
Environment
L
Host-ID
X-Policy
X-Li-Fabric
X-Forwarded-Site
X-Fetched-On
X-Gdpr
X-Nyt-Route
X-Cache-Date
Datacenter
X-Hash
X-Geo-Header
Gh-Request-Id
X-Origin-Time
Fastcgi-Cache-TTL
X-Owner
X-Li-Pop
X-Accel-Expires-Debug
Release
X-Old-Content-Length
X-Cache-Info
X-Location
X-Cache-Bucket
X-Mvc-Supplant-Cachable
X-Men
X-LI-UUID
Wxu-Next-Commit
V-Age
X-Device-Os
Vix-Hermes-Req-Id
X-Origin-Expires
X-Date
Wxu-Next-Hostname
X-Core-Mission
Wxu-Next-Region
X-Epic-Correlation-Id
X-Proxy-Upstream
X-Skip-Cache
X-Sucuri-Cache
X-Server-IP
X-Served-From
AKAMAI
X-Scheme
X-Hnp-Log
X-Gen-Mode
X-Block-Status
User-Cache-Control
X-VServer
X-VG-TLSProxy
X-Fastly-Cache
X-Varnish-Beresp-Status
X-Rocket-Nginx-Serving-Static
X-Sucuri-ID
CacheControlHeader
From-Origin
Cmsid
Cmstype
AMP-Access-Control-Allow-Source-Origin
X-Core-Value
X-Generated-On
X-HS-Content-Campaign-Id
Candidate-Md5Url
X-Cache-Debug
X-VarnishDD-TTL
We-Hiring
X-TrackingId
X-Datadog-Trace-Id
X-Thinkindot-L3
X-Datadog-Sampling-Priority
X-Datadog-Parent-Id
Web-Mar-Region
X-Ratelimit-Remaining
X-Level-Front-Cache
X-Viewer-Country
CDCHOST
X-Cache-Config
Arc-Country
Traceparent
X-Cache-Id
Origin-EX
Req-Svc-Chain
X-Branch-Name
X-Bip
X-HN
X-Aicache-OS
X-Thanos
X-Magnolia-Registration
X-BBC-Edge-Cache-Status
X-NodeID
X-Req
X-Request-Start
True-Client-Country-4JS
X-GeoIP
X-TH-Server
Apple-News-Services-Handled
Fastly-GeoIP-CountryCode
X-Developers
PFcat
Thinkindot-Control
Mail-Subject
Machine
Apple-News-Services-Request-Url
X-GeoIP-City
X-Fastly-Backend
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
Locid
X-Esi-Check
X-Rocket-Build-Number
X-Platform
Svr
TDXMobile
X-Irp-Debug
Origin-CC
Server-Host
X-Gamma-Serve
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-Gzip
X-Sigma-Backend
X-Sigma
X-FC-Vary-Parameters
X-Eu-Site
X-Cdn-Origin
X-DefElseHash
X-CGP
X-Rebelmouse-Cache-Control
X-Envoy-Decorator-Operation
X-Webstats-RespID
X-DPWN-IS-SECURE
X-Loc
X-EC-Lua
X-Csrf-Jwt
X-Rebelmouse-Surrogate-Control
X-DefHash
X-Varnish-CookieINHashed-On
X-Sn-Servicetimems
X-Has-Esi
Ha-Gx-Prefs
X-Is-Gdpr
X-Origin
X-Qloud-Router
HA-Ipaddr
Platform
Memcached
L5d-Success-Class
X-Pod-Name
Adler-Geo
X-JWT-State
NM-Fastcgi-Cache
X-Variation
X-RateLimit-Limit-Second
X-Backend-State
X-NU-AKA-ACS-Version
Fastly-SIE
Fastly-SWR
Cf-Device-Type
NGX
X-Worker
X-Region-Sid
X-Varnish-CookieHashed-On
X-Request-URI
X-RateLimit-Remaining-Second
X-Varnish-Remaining-TTL
X-Amzn-Remapped-Content-Length
Is-Eu
Fastly-Drupal-Html
X-Xrds-Location
X-FireWall-Port
WWW-Authenticate
Sslversion
X-UnsetCookies
X-Node-Id
X-Cdn-Srv
X-Tx-Id
X-Zone
X-Varnish-Beresp-Ttl
CDN
Ssr
X-CS
X-Response-By
X-API-Version
X-NC
On-Server
Esi-Enabled
X-Mvc-Supplant-OutputCached
X-CLOUD-TRACE-CONTEXT
WP-Super-Cache
Pics-Label
X-Up
X-Vc
X-LB-ID
X-Generated-In
X-Tt-Logid
Time
Memory
X-Service
Ms-Author-Via
C-Via
X-Refresh
X-Trace-ID
X-Datadome
X-LB-NoCache
X-Cache-Enabled
X-Backend-TTL
X-Cache-PHP
X-Edge-Pop
NtCoent-Length
X-TA-CDN-Provider
X-TraceId
X-DynaTrace-JS-Agent
X-GeoIP-Region-Code
Env
GeoIp-Country-Code
X-GeoIP-Country-Code
X-Via-Popv
X-Via-Popn
X-Via-Poph
X-Tb-Optimization-Total-Bytes-Saved
X-Dynatrace
X-NWS-UUID-VERIFY
X-Varnish-Ttl
Magicmarker
X-Cache-Status-Check
X-Parent-Response-Time
X-DC
X-Render-Time
X-Optimistic-Header
X-Info
X-ZONE
X-Varnish-Beresp-TTL
X-Cs
X-Restarts
Kp-EeAlive
X-Esi
X-Ua-Device
X-CacheTTL
X-Servedbyhost
X-Unique-ID
Server-ID
X-TX-ID
WebServer
S-Rt
X-AIR-PT
X-RPS
X-Cache-Backend
Edge-Cache
X-Action
X-Srv
X-RSL
X-MSEdge-Features
X-RPM
X-DW
X-DB
X-Clientip
X-DI
X-Wix-Viewer-Type
X-MSEdge-Flight
X-DSS
X-Oss-Hash-Crc64ecma
UCS
X-Oss-Object-Type
X-VCL-Version
X-Oss-Request-Id
Cache-Host
HIT
X-Oss-Server-Time
X-Oss-Storage-Class
Proxy-Connection
S-Cnection
X-LI-Proto
X-Newrelic-Synthetics
X-Minions-Version
X-Cache-Ttl
X-Li-Proto
X-App
X-LiteSpeed-Cache-Control
Lb
Section-Io-Origin-Status
X-URL
Section-Io-Id
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
X-Webkit-Csp-Report-Only
X-HA-Backend
Test
X-FPC
X-Fpc
X-Traceid
X-Http-Reason
X-Akamai-Request-ID2
Server-Id
X-Vcl-Version
User-Agent
X-B3-Spanid
X-Micro-Cache
Fastly-Backend-Name
X-NODE
X-Webkit-CSP-Report-Only
Geo-Info
X-Backend-Host
Tcn
Accept-Language
X-User
X-Ec-GeoHdr
X-Ec-Fail
X-Pass-Why
X-Pad
X-Release
X-BCube-Filmed-By
X-ES-SERVER
X-CSRF-TOKEN
X-HostName
Cf-Int-Pingora-Origin-Digest
X-APP
X-Check-Cacheable
X-Urbn-Context-Path
X-Urbn-Site-Id
Fastly-Drupal-HTML
X-LiteSpeed-Tag
Locale
Resin-Trace
Hostname
X-Ha-Backend
EpKe-Alive
X-ServedByHost
Cache-Key
X-ID
X-BBC-Origin-Response-Status
CPC-Cache
CPC-Age
VNS-Cache
Path
X-Amz-Meta-Cb-Modifiedtime
VNS-Age
X-Dynatrace-Js-Agent
X-COUNTRY
Hit
X-Via-PopN
X-Via-PopV
Cdnsip
X-WADP-Cache
Srv
M-TraceId
X-AK-Request-ID
X-Clara-WADP
X-Via-PopH
X-Fmm-Version
X-Akamai-Pragma-Client-IP
Cdncip
X-WA
GeoIP-Country-Code
X-WA-Info
X-NGINX-Cache
Ohc-File-Size
X-Geo
X-ElasticPress-Query
Geoip-Latitude
Pagetype
X-PJAX-URL
Cluster
X-Edge-POP
My-App
X-Cdn-Forward
X-Wikidot-Static-Cache
X-Cms-Context
X-Wikidot-Backend
ENV
Shield-Pop
MIME-Version
X-Edge-Cache
X-Hcs-Proxy-Type
MD5-Digest
X-CCDN-Origin-Time
Lfy
X-Var-Ttl
X-From
Load-Balancing
X-Api-Version
X-Via-Ucdn
X-CUA
Tracecode
X-CCDN-CacheTTL
X-HS-Status
X-ServerName
T-Server
X-VG-WebServer
URI
X-Fastly-Cache-Hits
X-Ucs
Sever-Int
X-GoCache-CacheStatus
Server-Ext
X-Cache-Expires
X-Fastly-Backend-Reqs
X-Fragments
Server-Hostname
W
Servername
X-UP
X-RAMCache
X-Lb-Id
IsBot
X-SIPLIST1
WZWS-RAY
Lang
X-Mcache
X-Dw-Trace-Id
X-TRACE-ID
X-VC
X-WP-CF-Super-Cache
Target-Params
X-WP-CF-Super-Cache-Cache-Control
X-Nc
X-Provided-By
PICS-Label
X-RateLimit-Reset
Cdn
Cteonnt-Length
Cneonction
X-B3-ParentSpanId
Ohc-Cache-HIT
X-Cdn-Request-ID
X-Swift-Error
X-Newrelic-App-Data
X-Apw-Access-Action
X-Akamai-Request-ID
CF-Cached-On
X-Platform-Router
X-Acquia-Application-UUID
X-Acquia-Purge-Tags
X-Acquia-Site
X-Acquia-Application-Trace
Cf-Ipcountry
X-Platform-Processor
X-Platform-Cluster
X-Apw-Access-Object
X-Apw-Access-Token
Server-Ttl
Vha6-Origin
X-Yottaa-OS
X-Via-CDN
HitType
X-Snapshot-Date
X-Contensis-Viewer-Groups
X-Apw-Hits
X-Cc-Via
X-Last-Modified
X-Cache-ASPX
Dnion-Transfer-Encoding
X-Air-Pt
Sid
X-Cache-Ngx
X-Te-Duration-Ms
X-Akamai-ERRuleID
X-Akamai-ERPolicy
X-Http-Duration-Ms
X-Te-Count
X-Http-Count
Uri
X-Sentry-ID
X-Logging-Id
FSS-Cache
Req-ID
X-CacheKey
X-UA
CountryCode
X-Varnish-Authentication
X-B3-Parentspanid
X-Miniprofiler-Ids
Ngx
X-Lb-Nocache
X-HTML-Edge-Cache