Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Cf-Request-Id
CF-RAY
CF-Cache-Status
Accept-Ranges
Link
ETag
Pragma
Expect-CT
X-Powered-By
X-XSS-Protection
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
X-Xss-Protection
Alt-Svc
X-UA-Compatible
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Adblock-Key
X-Runtime
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-Request-ID
X-Drupal-Cache
X-Check
X-Cache-Status
X-Generator
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
P3p
X-Content-Security-Policy
X-Iinfo
Status
X-Ua-Compatible
Feature-Policy
Content-Encoding
X-AspNetMvc-Version
X-CDN
X-Envoy-Upstream-Service-Time
Access-Control-Expose-Headers
Upgrade
X-Drupal-Dynamic-Cache
Access-Control-Max-Age
X-Via
Keep-Alive
X-Dns-Prefetch-Control
X-Ws-Request-Id
X-Robots-Tag
Request-Context
Server-Timing
X-AH-Environment
X-Hacker
X-Server
X-Age
X-Turbo-Charged-By
X-Proxy-Cache
X-Server-Powered-By
X-Cache-Group
X-Backend
X-Amz-Request-Id
Host-Header
X-Amz-Id-2
EagleId
X-Nginx-Cache-Status
Report-To
X-Rq
X-LiteSpeed-Cache
X-Varnish-Cache
X-Page-Speed
Grace
X-UA-Device
X-Pingback
X-Swift-CacheTime
X-Swift-SaveTime
X-Device
EagleEye-TraceId
Ali-Swift-Global-Savetime
X-Vhost
X-OneAgent-JS-Injection
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Amz-Version-Id
NEL
Cf-Railgun
X-Dispatcher
X-Host
X-Server-Id
X-Cache-Spec
X-CST
X-Node
Allow
X-Backend-Server
Request-Id
Surrogate-Control
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-WebKit-CSP
X-Readtime
Accept-CH
X-Akam-SW-Version
X-Response-Time
X-Webkit-CSP
Xkey
X-Ruxit-JS-Agent
X-HW
X-Language
X-Country
Accept-Ch-Lifetime
X-Application-Context
X-Ac
X-Template
Content-Location
X-Cache-Lookup
MS-Author-Via
X-Cloud-Trace-Context
Rating
X-Url
X-B3-TraceId
Edge-Control
X-Mod-Pagespeed
X-PC
X-Vname
X-TtlSet
X-Clacks-Overhead
X-Varnish-TTL
X-ESI
X-Trace
X-MS-InvokeApp
X-Content-Type
Fastly-Restarts
Accept-CH-Lifetime
X-Rack-Cache
X-GitHub-Request-Id
X-Origin-Cache
X-Cnection
Accept-Ch
X-FastCGI-Cache
X-Country-Code
X-Buckets
X-GoogleNews-Bot
X-Kinja
X-Cdn-Fetch
X-Goog-Hash
X-Exp-Id
X-Exp-Variant
X-Kinja-Revision
X-Kinja-Build
X-Kinja-Server
X-Use-Magma
Verso
X-D2id
X-VARITI-CCR
Arr-Disable-Session-Affinity
X-Vcap-Request-Id
X-ORACLE-DMS-ECID
X-Cached
Cache-Tag
X-Server-Name
X-Abt-Application-Version
X-Amz-Rid
Service-Worker-Allowed
X-Client-IP
X-Server-ID
X-Navigation-Version
X-Powered-By-Plesk
RTSS
X-Px
X-Fastly-Request-ID
Access-Control-Request-Method
Public-Key-Pins
X-Powered-CMS
X-Element-Page-Cache
X-MSEdge-Ref
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Upstream
X-Dw-Request-Base-Id
X-Version
X-NF-Request-ID
X-Cache-TTL
X-Sol
Response
Pagespeed
X-Middleton-Display
Display
X-Middleton-Response
S
X-Ttl
X-Edge
X-TTL
X-Kinsta-Cache
X-Edge-Location-Klb
X-LLID
MRF-Tech
X-B3-TraceId-Primal
Realpath
Mrf-Cache-Status
X-Accel-Expires
X-Kraken-Routeconfig-Destination
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Instrumentation
X-Cache-Key
X-HP-Webp
X-Jurisdiction
X-SharePointHealthScore
SPRequestGuid
SPRequestDuration
SPIisLatency
X-ECACHE
X-Shield-Request-Id
X-Mid
X-MCACHE
X-T
X-PressLabs-Stats
Pinterest-Version
X-Litespeed-Cache
X-Pinterest-Rid
Pinterest-Generated-By
X-Content-Security-Policy-Report-Only
X-DynaTrace
X-Correlation-Id
Edge-Cache-Tag
X-ORACLE-DMS-RID
X-Forwarded-Proto
Fastcgi-Cache
X-XRDS-Location
X-Mg-S
X-Amz-Server-Side-Encryption
X-Content-Digest
TP-Cache
X-Recruiting
TP-L2-Cache
Nginx-Cache
Charset
Filters
X-Id
Front-End-Https
X-Request-Received
X-Request-Processing-Time
TCN
Alternate-Protocol
Server-Node
X-Forwarded-For
X-Logged-In
X-Ezoic-Cdn
Content-MD5
Cache-Tags
X-Geo-Country
Fusion-Template-Id
Fusion-Content-Id
Fusion-Deployment-Id
Fusion-Component-Id
Fusion-Source
Fusion-Content-Source
X-ASPNET-VERSION
X-Protected-By
X-Hostname
X-Amzn-Trace-Id
X-Origin-Upstream-Status
X-Release
X-Grace
X-GUploader-UploadID
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Origin-Server
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Stored-Content-Length
X-Www-Served-By
X-F-Cache
Cleartype
X-Amz-Replication-Status
X-Oneagent-Js-Injection
X-NWS-LOG-UUID
X-Rid
X-HS-Hub-Id
Host
X-HS-Content-Id
X-HS-Cache-Config
X-LB-Cache
X-Contextid
X-Debug-Info
X-HS-Combine-CSS
X-AppVersion
X-Activity-Id
X-Az
Server-Name
Section-Io-Cache
X-RateLimit-Remaining
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-Page-Id
X-Browser-Type
X-Frontend
X-Git-Hash
X-Daa-Tunnel
X-Ser
MicrosoftSharePointTeamServices
X-VCache
X-Respond-Thread
X-Aspnetmvc-Version
X-Cache-Age
X-Content-Options
X-WebKit-CSP-Report-Only
X-Ruxit-Js-Agent
Accept-Charset
Access-Control-Allow-Method
X-Upgrade-Enabled
X-Hits
X-Mobile-URL
X-Ab
X-Source
X-DIS-Request-ID
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Signature
ServerID
X-Aspnet-Duration-Ms
X-CACHE-GROUP
X-B-Cache
X-Is-Crawler
X-Providence-Cookie
X-Request-Guid
X-Flags
X-Route-Name
Healthy
X-Cache-Action
X-Varnish-Grace
X-Varnish-Backend
X-Whom
X-Varnish-Age
X-FB-Debug
Viewport
Payment
X-TT
X-App-Environment
Paypal-Debug-Id
Node
X-B3-Sampled
X-AOL-HN
Fastcgi-Useragent
DynaTrace
Version
X-Seen-By
X-Load-Cache
X-Mobile
X-Yandex-Sdch-Disable
X-N
DC
X-Type
X-XRDS-LOCATION
X-HTML-Minification-Powered-By
X-Tt-Trace-Host
X-Tt-Trace-Tag
Filterid
X-Distributor
X-Tec-Api-Root
X-Tec-Api-Origin
X-Tec-Api-Version
SRV
Frame-Options
X-Cache-Control
Retry-After
X-Fastcgi-Cache
X-User-Agent
MS-CV
X-Cache-Expired-At
X-Jobs
X-Ua-Device
X-Response-Served-From
Ar-Sid
AR-Request-ID
AR-PoweredBy
AR-CACHE
AR-ATIME
Refresh
X-Original-Request-Id
X-IPLB-Instance
X-UUID
NGB
X-Adobe-Loc
X-Real-IP
Amp-Access-Control-Allow-Source-Origin
X-Proxy-Cache-Status
X-Adobe-Content
X-Page-View
X-Varnish-Server
X-Cluster-Name
X-Device-Type
X-Region
X-Instance
Access-Control-Request-Headers
X-Content-Powered-By
X-ProcessESI
X-Tumblr-User
X-Cacheable-TTL
X-Proxy
VIX-Pulpo-Upstream-Status
X-RemovedCookies
VIX-Pulpo-Node
X-Cache-Time
X-Debug-IsPreview
X-Tumblr-Pixel-1
X-G
X-Framework
X-B
X-Debug-IsConnected
X-Tumblr-Pixel
X-IPS-LoggedIn
X-Tumblr-Pixel-0
X-FW-Type
Uber-Trace-Id
X-FW-Server
Ms-Operation-Id
X-FW-Dynamic
X-RTag
X-FW-Static
X-FW-Serve
X-FW-Hash
X-Request-Handler-Origin-Region
X-Vgn-Hpd-Reason
X-CDN-Forward
X-Microsite
X-NGENIX-Cache
X-Zen-Fury
X-Azure-Ref
Countrycode
X-Node-Name
X-Wix-Request-Id
Cache-Status
X-Time
X-Cache-Rule
Section-Origin-Responded
Section-Io-Origin-Status
Section-Io-Origin-Time-Seconds
Section-Io-Id
X-Mg-Request-UUID
X-Oracle-Dms-Rid
X-Debug
X-Ms-Request-Id
X-Ms-Version
X-Rendered-As
X-Cache-Hit
X-Is-Bot
X-Accel-Buffering
SD-X-WS
X-Nginx-Cache
Referer-Policy
Liferay-Portal
X-RateLimit-Limit
Cache
X-App-Version
X-Aws-Lambda-Call-Status
X-Drupal-Cache-Tags
X-EdgeConnect-Cache-Status
S-Cnection
Country
X-App-Server
X-FireWall-Port
CF-IPCountry
X-L-Path
X-HP-Trace-Id
X-Revision
X-Environment-Context
X-Yottaa-Optimizations
X-Parallel-Accel
Surrogate-Key
X-Cache-Operation
X-Yottaa-Metrics
Eomportal-Instance
X-TNCMS
X-ES-SERVER
X-GG-Cache-Date
X-UPSTREAM-Address
X-SaId
X-Proxy-Build
X-JoinUs
X-Loop
X-TA-CDN-Provider
Meta-Geo
X-Endurance-Cache-Level
X-RN-RSRV
X-Timing-Wait
Selected-Fe
From-Origin
X-Say-Cacheable
X-LAGOON
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Request-Time
X-Varnishpool
X-Storefront-Renderer-Rendered
X-Shopify-Stage
X-ShardId
X-Xfnlog-Site
X-Drupal-Cache-Contexts
X-SayCDN-TTL
X-Say-TTL
X-ShopId
X-Cache-Type
X-Adobe-Source
X-Alternate-Cache-Key
X-NYM-Debug-Backend
X-No-Session
X-LJ-Flow-ID
Azure-RegionName
X-Origin-Date
Azure-SlotName
Count-Hit
Azure-InstanceId
X-Human
X-Backend-Host
X-AWS-Id
X-Be
X-BYPASS-REASON
Protected
X-Cache-TTL-Remaining
X-PHP-Backend
Azure-SiteName
X-Sql-Count
Country-Code
Azure-Version
X-Sql-Duration-Ms
X-Varnish-Beresp-Grace
X-VWS-Id
X-Varnish-Hostname
X-S-Maxage
X-Proto
X-ProxyCache-Status
X-ProxyCache-Key
Cache-Name
TWC-GeoIP-LatLong
TWC-Connection-Speed
TWC-Device-Class
TWC-GeoIP-Country
Property-Id
TWC-Locale-Group
Fastly-SSL
Decoy-Debug-TTL
ServedBy
Decoy-Debug-Status
X-FB-TRIP-ID
X-PHP-Host
X-PCL
X-Origin-Hint
X-Pubstack
X-RCS-CacheZone
X-UA-Device-Type
X-Status
X-Server-W
X-OCL
X-Labrador-Cache-Channel
Webcakes-Region
Webcakes-App-Version
Webcakes-App-Name
X-Akamai-Edgescape
X-Cache-Server
X-Hosted-By
Decoy-Debug-Key
TWC-Privacy
X-Handled-By
GEO-INFO
Apigw-Requestid
Akamai-GRN
Cache-Tv-Group
X-Hl-Ver
X-Hyper-Cache
X-Format
X-Backend-Name
X-Web-Node
X-Section
X-Uri
X-Tumblr-Pixel-2
X-Access
X-Via-Fastly
X-Redis-Cache
X-R9-Blue-Green-Version
Mn-Server-Ip
X-FW-Version
X-PERF
X-ApacheServer
Nel
X-Cluster-Node
X-Time-Microsecs
X-ServerID
Xserver
X-ATG-Version
X-Cache-PHP
X-B3-SpanId
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Servername
X-APP-VERSION
OT-Force-Account-Verify
X-Tumblr-Pixel-3
X-Trace-Id
X-Content-Age
X-CSRF-Token
X-Azure-Ref-OriginShield
Backend
Cross-Origin-Opener-Policy
X-WA-Info
X-Detected-As
X-MP-GENERATED-AT
X-TT-LOGID
Web-Mar-Node
X-Generation-Time
X-Varnish-Cache-Hits
X-Cache-Host
X-Rule
X-Datadome
X-Cache-Enabled
X-Cache-Ttl
X-Cached-By
X-Soup
X-Akamai-Transformed
X-SRV
X-Varnish-Hits
X-Bc-Bl
X-Edge-Location
Cross-Origin-Window-Policy
X-Ua
Content-Secure-Policy
Ec-Rule-Version
X-CS
X-Mode
X-Info
X-Amzn-RequestId
X-Via-JSL
X-Amz-Apigw-Id
X-Amzn-Remapped-Content-Length
X-Varnish-Beresp-Status
X-Microcachable
S-Rt
X-Cache-Grace
X-NWS-UUID-VERIFY
Url
Source
X-Cache-NGX
X-B3-Traceid
X-Magnolia-Registration
X-Debug-Cache
X-Origin-CC
X-Storage
X-GEO
X-Origin-TTL
SID
X-Forwarded-Host
X-Ratelimit-Limit
X-Air-Hostname
X-Locale
Upgrade-Insecure-Requests
X-Air-Source
X-Air-Trace-Id
X-Dc
X-Proxied
X-Tb
X-Extlb
X-Varnish-Beresp-Ttl
X-Routing-Service
X-Platform
X-Zipkin-Id
X-NAPM-TraceId
X-Connection-Hash
BehaviorPad-Version
Apple-News-Services-Parsed-Url
A
X-Site-Version
Apple-News-Services-Handled
Apple-News-Services-Host
Req-Svc-Chain
Apple-News-Services-Request-Url
X-A-Dgt
Expiry
X-Clientip
T-Server
X-NU-AKA-ACS-Version
Host-ID
X-External-Request-Id
X-Cache-Bucket
X-Forwarded-Path
X-BCube-Filmed-By
X-Unique-Id
Fastly-SWR
X-From
M-TraceId
X-Epic-Correlation-Id
X-Developer
Mobile-Detection-Method
X-Destination
X-CF-Lambda-Fn
State
Meta-Geo-Continent
X-Cache-NE
Surrogated-Key
X-CF-Lambda-Version
MD5-Digest
X-B-Cookie
Odigeo-Trace-Id
CDN-RequestCountryCode
CDN-PullZone
CDN-RequestId
CDN-Uid
X-A-Ccd
X-A-Dam
CDN-EdgeStorageId
X-A-Dcw
CDCHOST
CDN-Cache
CDN-CachedAt
X-D
DCR-Decision-By
X-Aicache-OS
X-AIR-PT
X-Application
X-ARC
Rendered-Blocks
X-Aed
DCR-Processing-Time-Ms
Fastcgi-X-Cache-Version
X-A
Fastly-SIE
Path
X-Rebelmouse-Surrogate-Control
X-Tenant
X-Request-URI
X-A-Wwc
X-Ratelimit-Reset
X-Processor
X-Vdms-Version
X-Rewrite-Enabled
X-Rojux
X-Shop-Environment
X-Session-Fingerprint
X-ScT
X-SRCache-Key
X-S
X-S-Cookie
X-VG-WebCache
X-Rebelmouse-Cache-Control
X-Vtex-Processado-Em
X-VG-WebServer
X-PBS-Appsvrname
X-Orig-Expires
X-Vtex-Remote-Cache
X-PAYTM-SRV-ID
X-Platform-Server
X-DataDome
User-Cache-Control
X-Accel-Expires-Debug
X-SVT-ORM-RULES
X-WADP-Cache
X-Amz-Meta-S3cmd-Attrs
X-DPWN-IS-SECURE
X-Envoy-Decorator-Operation
X-Fastly-Backend
X-Sigma-Backend
X-Sigma
Fastly-Drupal-HTML
X-Ftr-Request-Id
X-Fmm-Version
Is-Eu
X-Device-Os
L
X-Fastly-Cache
X-Conf
X-Ratelimit-Remaining
X-Thanos
X-Cache-Tags
X-Clara-WADP
X-Cms-Context
X-Variation
X-Bip
X-Cache-Info
UCS
X-Branch-Name
X-VG-TLSProxy
X-Cache-Debug
Platform
X-Core-Value
Origin
X-Date
X-Backend-State
X-SVT-ORM-VERSION
X-TrackingId
X-Var-Ttl
Fastly-Backend-Name
PB-RID
PB-PID
X-VServer
X-Forwarded-Site
X-Request-Host
Arc-Version
Adler-Geo
C-Via
X-GoCache-CacheStatus
X-Request-UUID
Cache-Key
Cache-Host
X-Hash
X-Proxy-Upstream
X-Loc
X-Origin-Expires
X-Men
X-LI-UUID
X-Li-Pop
X-Is-Gdpr
X-JWT-State
X-Li-Fabric
X-Rocket-Build-Number
X-Has-Esi
Cmstype
Content-Disposition
DSUID
Esi-Enabled
X-Service
Cmsid
AMP-Access-Control-Allow-Source-Origin
Server-Info
X-Level-Front-Cache
X-Policy
X-SIPLIST1
X-Block-Status
X-VC-Cache
X-Irp-Debug
X-Nginx-Cache-Key
X-Vdms-Path
X-Hnp-Log
X-Cache-Id
X-Fetched-On
X-Viewer-Country
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Origin
X-Old-Content-Length
X-BBC-Edge-Cache-Status
X-Mvc-Supplant-Cachable
X-Micro-Cache
X-Gamma-Serve
X-Via-NSCOPI
X-Slack-Backend
X-Location
X-Generated-By
X-VarnishDD-TTL
X-DefElseHash
X-DefHash
X-Generated-On
X-Generated-In
X-Gzip
X-Thinkindot-L3
X-Eu-Site
X-Geo-Header
X-Scheme
X-Developers
X-GeoIP-City
X-Esi-Check
X-Req
X-Csrf-Jwt
X-Varnish-Remaining-TTL
X-Cluster
X-RateLimit-Limit-Second
X-CGP
X-GeoIP
X-Varnish-CookieINHashed-On
X-Varnish-CookieHashed-On
X-Gen-Mode
X-FC-Vary-Parameters
X-RateLimit-Remaining-Second
X-Served-From
X-HN
True-Client-Country-4JS
Pics-Label
Fastcgi-Cache-TTL
PFcat
Pagetype
Gh-Request-Id
Release
Server-Hostname
Server-Host
Server-Ext
Ha-Gx-Prefs
NM-Fastcgi-Cache
L5d-Success-Class
Mail-Subject
Location
Memcached
Kp-EeAlive
NGX
HA-Ipaddr
IsBot
Locid
Sever-Int
VNS-Cache
VNS-Age
Vix-Hermes-Req-Id
CPC-Age
We-Hiring
CPC-Cache
Wxu-Next-Region
Wxu-Next-Hostname
Wxu-Next-Commit
X-DC
Cf-Device-Type
TDXMobile
CacheControlHeader
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
NtCoent-Length
Thinkindot-Control
X-EC-Lua
X-Goog-Meta-Goog-Reserved-File-Mtime
AKAMAI
Arc-Country
X-Skip-Cache
X-Sucuri-ID
X-Ckpd-Fst-Backend
Webserver
X-Unique-ID
Svr
V-Age
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
X-Planisys-CDN-Cache
X-Owner
Who
DataCenter
X-Worker
X-Qloud-Router
X-HS-Content-Campaign-Id
X-Mvc-Supplant-OutputCached
X-User
X-V-Cache
Cache-Hits
X-NC
X-Via-Popv
X-PF-Uncompressing
X-Via-Poph
X-Auto-Login
X-Via-Popn
X-Varnish-Url
X-NCache
X-Minions-Version
X-Servedbyhost
MIME-Version
XServer
X-M-Log
X-Tx-Id
X-M-Reqid
X-Qnm-Cache
X-Srv
X-Rocket-Nginx-Serving-Static
X-Vc
X-Render-Time
X-LSADC-Cache
X-Zone
X-ZONE
X-ID
X-Traceid
My-App
X-SD-PageType
X-Platform-Processor
X-Platform-Router
X-Refresh
X-Platform-Cluster
Powered-By-ChinaCache
X-LB-ID
X-Cache-Remote
WebServer
X-Varnish-Ttl
Time
X-App
X-Internal-Host
X-Ua-Browser
X-Newrelic-Synthetics
X-Content
Environment
Memory
X-Wa
X-Datadog-Trace-Id
X-Datadog-Sampling-Priority
X-Datadog-Parent-Id
X-TX-ID
X-Pass-Why
Server-ID
X-Gdpr
X-TIME
X-Origin-Time
X-Webkit-Csp
X-PJAX-URL
X-BBC-Origin-Response-Status
X-API-Version
X-Nyt-Route
X-NodeID
X-CACHE-KEY
X-Cache-Var-Map
X-Cache-Var
X-Server-IP
X-Cache-Config
X-Via-Ucdn
X-VCL-Version
Cluster
Candidate-Md5Url
X-Pod-Name
Hostname
X-NewRelic-App-Data
X-OVcl
X-OVcl-Cache
Datacenter
X-CLOUD-TRACE-CONTEXT
GeoIp-Country-Code
Cf-Bgj
X-TraceId
Geoip-Latitude
HostName
X-Webkit-CSP-Report-Only
X-Backend-TTL
X-Edge-Pop
Geo-Info
Magicmarker
X-Tb-Optimization-Total-Bytes-Saved
X-ElasticPress-Query
N-Cache
Resin-Trace
X-Correlation-ID
X-LI-Proto
X-VHOST
Web-Mar-Region
Ohc-File-Size
Tcn
X-Method
X-Origin-Response-Time
X-Dispatcher-Server
X-Dynatrace
X-HITS
X-CACHE-AGE
DB-Nickname
X-Varnish-Beresp-TTL
Onion-Location
X-Akamai-Pragma-Client-IP
X-Geo
X-Li-Proto
GeoIP-Latitude
X-Varnish-Cacheable
GeoIP-Country-Code
X-EIG-Tracking-Id
X-MSEdge-Flight
X-NODE
Ssr
Servername
WWW-Authenticate
X-MSEdge-Features
X-IP
X-AB
X-Wix-Viewer-Type
Proxy-Connection
Cdn
X-HostName
X-Vcl-Version
X-Cs
CDN
X-Fastly-Request-Id
X-Node-Id
LB
CF-Cached-On
X-DynaTrace-JS-Agent
Cf-Ipcountry
X-Dynatrace-Js-Agent
Redirect-Candidate
Lb
X-Fpc
Server-Id
X-ND-Cache
X-Tid
X-HS-Status
X-TIM-N
X-Trv-Group
X-Tt-Logid
X-Via-CDN
Tracecode
WZWS-RAY
Sid
X-APP
Env
X-Pjax-Url
X-Up
X-Fastly-Backend-Reqs
X-Request-Start
X-MG-S
Cteonnt-Length
X-ServerName
URI
X-Webkit-Csp-Report-Only
X-Cache-Date
X-NGINX-Cache
Pramga
X-WA
Is-Us
X-Nc
X-Reqid
X-VC
X-Cdn-Origin
X-Check-Cacheable
X-Amz-Meta-Cb-Modifiedtime
X-Lb-Id
X-Sn-Servicetimems
X-Esi
X-CSRF-TOKEN
Ohc-Cache-HIT
X-IN-APIGATEWAY
X-Via-PopN
X-Cache-Backend
X-SERVER-NAME
Rt-Fastcgi-Cache
VivaBuild
Viewtype
X-IN-APIGATEWAYSSL
Mime-Version
X-Via-PopV
X-Provided-By
X-ServedByHost
X-Core-Mission
X-Via-PopH
W
X-ECache
X-UnsetCookies
Shield-Pop
CloudFront-Viewer-Country
X-Cache-Expires
Server-Ttl
CountryCode
X-LiteSpeed-Cache-Control
X-SN
X-Acquia-Site
X-Acquia-Purge-Tags
X-RAMCache
X-Varnish-Authentication
CACHE
X-FORWARDED-FOR
WP-Super-Cache
Machine
X-Acquia-Application-Trace
X-Fastly-Cache-Hits
X-Acquia-Application-UUID
X-Contensis-Viewer-Groups
X-Pf-Uncompressing
X-Cache-ASPX
X-Pad
Xet-Cookie
X-Region-Sid
X-Sucuri-Cache
X-RPS
X-RSL
X-Hcs-Proxy-Type
X-CCDN-Origin-Time
X-Edge-POP
X-Cdn-Request-ID
X-Cache-Status-Check
X-CCDN-CacheTTL
X-RPM
X-CUA
X-StackifyID
ServerName
Vha6-Origin
X-SB
X-Webstats-RespID
X-Swift-Error
X-DW
Ohc-Response-Time
X-FTR-Request-ID
X-Yottaa-OS
X-Action
X-Dw-Trace-Id
X-DSS
X-DI
X-DB
X-Cdn-Forward
X-B3-Spanid
X-ElasticPress-Search
X-Moov-Xdn-Version
Xc-Version
FSS-Cache
X-Moov-T
X-MiniProfiler-Ids
PICS-Label
X-CF-Powered-By
X-FPC
Req-ID
X-TH-Server
Content-Script-Type
X-Oss-Object-Type
X-Oss-Hash-Crc64ecma
X-Country-Code-Real
X-Oss-Request-Id
X-Oss-Server-Time
On-Server
X-Oss-Storage-Class
X-C
X-FTR-Realm
X-FTR-Cache-Status
X-FTR-DC
Content-Style-Type
X-FTR-Balancer
X-FTR-Backend
X-FTR-Backend-Server
X-FTR-Expires