Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Cf-Request-Id
Link
CF-Cache-Status
Accept-Ranges
CF-RAY
ETag
X-XSS-Protection
Expect-CT
Pragma
X-Powered-By
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-UA-Compatible
X-Cache-Hits
Alt-Svc
P3P
X-Served-By
X-Xss-Protection
X-Download-Options
X-Timer
X-Request-Id
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
X-Adblock-Key
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-DNS-Prefetch-Control
X-Check
X-Cache-Status
X-Generator
X-Cacheable
Timing-Allow-Origin
P3p
X-Content-Security-Policy
X-Iinfo
Status
Feature-Policy
X-Envoy-Upstream-Service-Time
Content-Encoding
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
X-Request-ID
X-AspNetMvc-Version
X-CDN
Upgrade
X-Via
CF-Ray
X-Ws-Request-Id
Access-Control-Max-Age
Server-Timing
EagleId
Keep-Alive
X-Cache-Group
X-Turbo-Charged-By
Request-Context
X-Age
X-Server-Powered-By
X-Proxy-Cache
X-AH-Environment
X-UA-Device
X-Backend
X-Hacker
X-Robots-Tag
Report-To
X-Amz-Request-Id
Host-Header
X-Server
X-Amz-Id-2
X-LiteSpeed-Cache
Grace
X-Rq
X-Nginx-Cache-Status
X-Varnish-Cache
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-Dns-Prefetch-Control
X-WebKit-CSP
X-Page-Speed
X-Vhost
EagleEye-TraceId
X-OneAgent-JS-Injection
X-Amz-Version-Id
X-Pingback
X-Dispatcher
X-Device
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Cache-Spec
NEL
X-Host
X-Server-Id
Cf-Railgun
X-Backend-Server
X-Node
X-Readtime
Accept-CH
X-Akam-SW-Version
Surrogate-Control
Request-Id
X-Response-Time
X-HW
Xkey
Accept-Ch-Lifetime
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Ruxit-JS-Agent
X-Application-Context
Content-Location
Rating
X-Ua-Compatible
X-Country
X-B3-TraceId
X-Cache-Lookup
X-Cloud-Trace-Context
X-Url
X-Trace
X-Ac
X-Content-Type
Accept-CH-Lifetime
X-Varnish-TTL
X-TtlSet
X-PC
X-Vname
Allow
X-Mod-Pagespeed
X-Clacks-Overhead
Edge-Control
X-FastCGI-Cache
X-ESI
Cache-Tag
X-Server-Name
Fastly-Restarts
Service-Worker-Allowed
X-VARITI-CCR
X-Rack-Cache
X-Element-Page-Cache
Verso
X-Language
X-MS-InvokeApp
X-GitHub-Request-Id
X-Upstream
Accept-Ch
MS-Author-Via
X-Amz-Rid
X-Vcap-Request-Id
Public-Key-Pins
X-Cached
X-Dw-Request-Base-Id
X-Client-IP
X-D2id
X-Abt-Application-Version
X-Aws-Lambda-Call-Status
X-Template
X-Cache-TTL
X-Origin-Cache
X-Cnection
X-ORACLE-DMS-ECID
X-Px
X-ORACLE-DMS-RID
Arr-Disable-Session-Affinity
X-Country-Code
Access-Control-Request-Method
X-Goog-Hash
X-Powered-By-Plesk
X-Navigation-Version
RTSS
X-NF-Request-ID
X-Server-Lifecycle-Phase
X-Kraken-Loop-Name
X-Instrumentation
X-Version
X-Powered-CMS
X-Kinja-Revision
X-Exp-Variant
X-Exp-Id
X-Kinja-Server
X-Kinja-Build
X-GoogleNews-Bot
X-Cdn-Fetch
X-Use-Magma
X-Kinja
Display
X-Sol
X-Middleton-Display
Pagespeed
AR-CACHE
AR-ATIME
AR-PoweredBy
AR-SID
AR-Request-ID
X-Amz-Server-Side-Encryption
X-Middleton-Response
Response
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-MSEdge-Ref
X-LLID
X-Kinsta-Cache
X-Edge
X-Edge-Location-Klb
X-TTL
Nginx-Cache
Mrf-Cache-Status
MRF-Tech
X-B3-TraceId-Primal
X-Protected-By
X-Shield-Request-Id
X-Jurisdiction
X-Buckets
X-HP-Webp
X-HP-Trace-Id
X-T
X-RateLimit-Remaining
S
X-Forwarded-For
X-Content-Security-Policy-Report-Only
X-Aspnetmvc-Version
Content-MD5
X-Id
X-Mg-S
TCN
X-MCACHE
X-Mid
Realpath
Fastcgi-Cache
Edge-Cache-Tag
SPRequestDuration
SPIisLatency
Front-End-Https
X-CST
X-Recruiting
X-Request-Processing-Time
X-Request-Received
Pinterest-Version
X-Pinterest-Rid
Pinterest-Generated-By
Filters
Server-Node
X-Ab
X-Content
X-Ua-Browser
X-Correlation-Id
X-DynaTrace
X-Parallel-Accel
Server-Name
X-Frontend
Fusion-Deployment-Id
Fusion-Component-Id
Fusion-Source
Fusion-Content-Id
Fusion-Content-Source
X-Ttl
Fusion-Template-Id
SPRequestGuid
X-SharePointHealthScore
X-NWS-LOG-UUID
X-ECACHE
X-Ezoic-Cdn
X-HS-Hub-Id
X-HS-Cache-Config
X-HS-Content-Id
X-HS-Combine-CSS
X-Yandex-Sdch-Disable
Alternate-Protocol
X-Hits
X-Ser
X-Content-Options
X-Cache-Key
MicrosoftSharePointTeamServices
X-Tt-Trace-Host
Cache-Tags
X-Tt-Trace-Tag
X-Kong-Proxy-Latency
Host
X-Page-Id
X-B3-Sampled
X-Ruxit-Js-Agent
X-Kong-Upstream-Latency
X-Git-Hash
Cleartype
Charset
X-Www-Served-By
X-Fastly-Request-Id
X-Accel-Expires
X-Daa-Tunnel
X-Geo-Country
X-DIS-Request-ID
X-Amz-Replication-Status
X-Content-Digest
X-Amzn-Trace-Id
Filterid
X-VCache
X-Varnish-Age
X-Debug-Info
TP-Cache
TP-L2-Cache
X-Forwarded-Proto
X-Activity-Id
X-Az
X-AppVersion
X-XRDS-LOCATION
X-Upgrade-Enabled
X-Rid
X-FB-Debug
X-Origin-Server
X-N
Access-Control-Allow-Method
X-Hostname
X-Grace
X-Nginx-Upstream-Cache-Status
Cross-Origin-Opener-Policy
X-LB-Cache
ServerID
X-WebKit-CSP-Report-Only
X-Mobile-URL
X-F-Cache
X-Aspnet-Duration-Ms
X-Route-Name
X-Providence-Cookie
X-Flags
X-Is-Crawler
X-Request-Guid
X-Server-ID
X-Whom
X-Goog-Metageneration
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-Ratelimit-Limit
X-TT
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Origin-Upstream-Status
X-Goog-Generation
X-Varnish-Grace
X-App-Environment
Viewport
X-Tb
X-Cdn
X-App-Server
X-Distributor
X-FW-Serve
X-FW-Hash
X-FW-Server
X-FW-Type
Node
X-FW-Dynamic
X-FW-Static
Payment
X-NGENIX-Cache
DC
Paypal-Debug-Id
X-Type
X-Seen-By
X-User-Agent
Fastcgi-Useragent
X-Cache-Control
X-Request-Handler-Origin-Region
X-Microsite
Accept-Charset
Country
X-Litespeed-Cache
X-Logged-In
X-Wix-Request-Id
X-Cache-Rule
X-Cache-Age
X-Webkit-CSP
Version
X-Via-JSL
Referer-Policy
X-Erf-Bev-Bev
X-Varnish-Backend
X-Browser-Type
X-Erf-Bev-Bev-Is-Generated
X-Drupal-Cache-Tags
X-Node-Name
Refresh
X-Load-Cache
X-Cluster-Name
X-DataDome
Cache-Status
X-B-Cache
X-Cache-Action
X-Original-Request-Id
X-Signature
Access-Control-Request-Headers
X-Contextid
X-Response-Served-From
X-Mobile
SD-X-WS
X-Fastly-Request-ID
X-Cache-Expired-At
X-Cacheable-TTL
X-Jobs
X-Rendered-As
X-PressLabs-Stats
X-Vgn-Hpd-Reason
X-Real-IP
X-Proxy-Cache-Status
X-Is-Bot
X-Page-View
X-IPLB-Instance
X-Debug
X-Revision
X-UUID
X-RemovedCookies
X-ProcessESI
VIX-Pulpo-Node
X-B
NGB
VIX-Pulpo-Upstream-Status
Amp-Access-Control-Allow-Source-Origin
X-Fastcgi-Cache
X-Yottaa-Optimizations
X-Yottaa-Metrics
Akamai-GRN
X-Rule
X-Proxy
X-Instance
X-Device-Type
X-Drupal-Cache-Contexts
X-G
X-Framework
X-Tec-Api-Root
Surrogate-Key
X-Tec-Api-Origin
X-Tec-Api-Version
X-Cache-Time
X-TEC-API-ROOT
X-Debug-IsPreview
X-TEC-API-VERSION
X-Debug-IsConnected
X-TEC-API-ORIGIN
X-Air-Trace-Id
X-Air-Source
CF-IPCountry
X-FW-Version
X-Air-Hostname
DynaTrace
SID
X-Oracle-Dms-Rid
X-Oracle-Dms-Ecid
Liferay-Portal
X-Azure-Ref
Healthy
X-Ratelimit-Reset
X-Nginx-Cache
X-Oneagent-Js-Injection
X-CDN-Forward
Frame-Options
X-Ms-Request-Id
X-Ms-Version
X-Source
Ms-Operation-Id
MS-CV
X-RTag
Count-Hit
X-Cache-Operation
X-XRDS-Location
Xserver
X-Accel-Buffering
Uber-Trace-Id
X-Varnish-Server
X-Tumblr-Pixel-1
X-Environment-Context
X-Tumblr-Pixel-0
X-Cache-Hit
X-Tumblr-User
Countrycode
X-EdgeConnect-Cache-Status
X-L-Path
X-Tumblr-Pixel
GEO-INFO
X-Presslabs-Stats
X-Region
X-Mode
X-APP-VERSION
X-Zen-Fury
X-Backend-Name
X-Servername
X-Forwarded-Host
Ec-Rule-Version
Cross-Origin-Window-Policy
Backend
X-Content-Powered-By
X-IPS-LoggedIn
Section-Io-Cache
X-Cache-NGX
X-SaId
X-Cache-TTL-Remaining
X-UPSTREAM-Address
Meta-Geo
X-RN-RSRV
X-JoinUs
X-Cache-Type
X-Detected-As
Apigw-Requestid
X-Generation-Time
Eomportal-Instance
Decoy-Debug-TTL
Decoy-Debug-Key
Decoy-Debug-Status
X-ApacheServer
X-Extlb
X-Cache-Grace
X-Debug-Cache
Mn-Server-Ip
Protected
X-Alternate-Cache-Key
X-Cache-Server
X-Hosted-By
X-Sql-Duration-Ms
X-Tid
X-Proxied
X-PERF
X-Sorting-Hat-ShopId
X-Rewrite-Enabled
X-Zipkin-Id
X-Redis-Cache
X-Status
X-Varnish-Beresp-Grace
X-Uri
Country-Code
X-Routing-Service
X-Sorting-Hat-PodId
X-Sql-Count
X-ShopId
X-Shopify-Stage
X-Human
X-NCache
X-ShardId
TWC-GeoIP-LatLong
X-Origin-Date
TWC-GeoIP-Country
Webcakes-App-Name
Url
TWC-Device-Class
TWC-Privacy
TWC-Locale-Group
X-UA-Device-Type
DB-Nickname
Cache-Name
Cache-Tv-Group
X-Via-Fastly
X-Soup
Property-Id
X-ProxyCache-Status
X-FB-TRIP-ID
TWC-Connection-Speed
X-Site-Version
Fastly-SSL
X-Microcachable
X-No-Session
X-BYPASS-REASON
X-ProxyCache-Key
X-PHP-Backend
X-Format
X-ServerID
Webcakes-Region
Webcakes-App-Version
X-Origin-Hint
X-RateLimit-Limit
X-Storage
X-NYM-Debug-Backend
X-Web-Node
X-Proxy-Build
X-OCL
X-PCL
X-Say-Cacheable
X-Akamai-Edgescape
X-Server-W
X-Adobe-Loc
X-Timing-Wait
X-Access
Selected-Fe
X-Say-TTL
X-Cache-Host
X-Section
X-SayCDN-TTL
X-Adobe-Content
OT-Force-Account-Verify
X-Pubstack
X-R9-Blue-Green-Version
X-Cluster-Node
X-Varnishpool
X-NewRelic-App-Data
X-Content-Age
Azure-SlotName
Azure-Version
Azure-RegionName
Azure-SiteName
X-Hl-Ver
Azure-InstanceId
X-Be
SRV
Content-Secure-Policy
X-LSADC-Cache
X-Webkit-Csp
X-App-Version
X-Ua
CDN-RequestCountryCode
CDN-RequestId
CDN-PullZone
CDN-CachedAt
CDN-Cache
X-Azure-Ref-OriginShield
CDN-EdgeStorageId
CDN-Uid
X-Hyper-Cache
Source
X-Generated-By
X-Cached-By
Content-Disposition
LB
Cache
X-Unique-Id
X-Ratelimit-Remaining
X-Trace-Id
X-SRV
X-Dc
X-Nginx-Cache-Key
X-LAGOON
WPO-Cache-Status
WPO-Cache-Message
X-Bc-Bl
X-HTML-Minification-Powered-By
X-TT-LOGID
X-Auto-Login
Cache-Hits
X-Varnish-Hits
X-Time
X-TNCMS
X-Origin-TTL
X-Origin-CC
X-Amz-Meta-S3cmd-Attrs
X-TIME
X-Loop
X-Varnish-Hostname
X-Akamai-Transformed
Retry-After
X-S-Maxage
X-GEO
Xet-Cookie
Onion-Location
X-Cache-Var
Mime-Version
X-Cache-Var-Map
HostName
X-Platform-Server
Web-Mar-Node
X-Xfnlog-Site
X-Tumblr-Pixel-3
X-Tumblr-Pixel-2
X-Proto
X-CSRF-Token
X-Edge-Location
X-Cache-Tags
X-Time-Microsecs
X-Tenant
X-Cache-Remote
X-Endurance-Cache-Level
Webserver
X-B3-SpanId
X-VWS-Id
X-Varnish-Cache-Hits
X-LJ-Flow-ID
X-AWS-Id
Upgrade-Insecure-Requests
X-M-Log
X-GG-Cache-Date
X-Request-Time
X-Qnm-Cache
ServedBy
X-ECache
X-M-Reqid
N-Cache
CloudFront-Viewer-Country
X-AOL-HN
X-EC-Lua
X-Mg-Request-UUID
X-Correlation-ID
X-Amz-Apigw-Id
X-Labrador-Cache-Channel
X-Request-Host
Nel
X-RCS-CacheZone
X-PHP-Host
X-CACHE-KEY
X-Amzn-RequestId
X-FireWall-Port
X-Via-NSCOPI
X-D
Origin
X-Application
X-Origin-Response-Time
X-Orig-Expires
From-Origin
X-PBS-Appsvrname
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
Redirect-Candidate
Xc-Version
Pramga
X-Planisys-CDN-Cache
X-PAYTM-SRV-ID
Rendered-Blocks
X-Connection-Hash
X-Processor
X-Conf
X-ND-Cache
X-Hnp-Log
Fastcgi-X-Cache-Version
X-Ftr-Request-Id
X-Ig-Push-State
BehaviorPad-Version
CDCHOST
Expiry
DCR-Decision-By
DCR-Processing-Time-Ms
DSUID
X-Gen-Mode
X-Forwarded-Path
L
X-NAPM-TraceId
Mobile-Detection-Method
X-Cluster
X-Developer
X-Destination
Meta-Geo-Continent
X-ARC
A
X-External-Request-Id
WP-Super-Cache
X-TIM-N
Odigeo-Trace-Id
X-Aed
X-Slack-Backend
X-B-Cookie
X-SRCache-Key
Wxu-Next-Commit
Wxu-Next-Hostname
X-Block-Status
V-Age
X-Cache-Date
User-Cache-Control
X-Ckpd-Fst-Backend
X-Shop-Environment
Wxu-Next-Region
X-A
X-Vdms-Path
X-Vdms-Version
X-A-Dgt
X-A-Wwc
X-V-Cache
X-A-Dcw
X-A-Dam
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
X-A-Ccd
AMP-Access-Control-Allow-Source-Origin
X-SD-PageType
X-Session-Fingerprint
X-Vtex-Remote-Cache
X-S
X-S-Cookie
X-Rojux
Surrogated-Key
X-CF-Lambda-Version
X-CF-Lambda-Fn
Sslversion
X-Cache-NE
X-Vtex-Processado-Em
X-ScT
X-VG-WebCache
X-MP-GENERATED-AT
X-Handled-By
X-Locale
X-Aicache-OS
X-Forwarded-Site
State
Release
True-Client-Country-4JS
X-Gdpr
Fastcgi-Cache-TTL
X-Geo-Header
X-Accel-Expires-Debug
Origin-CC
X-Core-Mission
Traceparent
Gh-Request-Id
Ssr
Host-ID
X-Developers
PFcat
Svr
X-Cdn-Srv
Vix-Hermes-Req-Id
X-Cache-Bucket
X-Device-Os
X-Epic-Correlation-Id
X-Fastly-Cache
X-Cache-Info
X-Date
X-Cache-Debug
Origin-EX
Locid
X-Fetched-On
X-Men
X-Old-Content-Length
X-Origin-Expires
X-Sucuri-Cache
X-Storefront-Renderer-Rendered
X-Sucuri-ID
X-NodeID
X-LI-UUID
X-Location
X-Mvc-Supplant-Cachable
X-Origin-Time
X-Owner
X-Served-From
X-Rocket-Nginx-Serving-Static
X-VServer
X-Scheme
X-Server-IP
X-Webstats-RespID
X-Skip-Cache
X-Policy
X-Proxy-Upstream
X-Li-Pop
X-Nyt-Route
Apple-News-Services-Host
X-Hash
Apple-News-Services-Handled
Apple-News-Services-Parsed-Url
Apple-News-Services-Request-Url
Cmsid
Arc-Country
CacheControlHeader
AKAMAI
X-VarnishDD-TTL
X-Li-Fabric
X-HN
X-Varnish-Beresp-Status
Cmstype
X-VC-Cache
X-Zone
Server-Info
Environment
X-Sigma
X-ATG-Version
X-Thinkindot-L3
X-Sigma-Backend
X-Thanos
X-VG-TLSProxy
X-Sn-Servicetimems
X-TH-Server
X-RateLimit-Limit-Second
X-Cache-Id
X-Csrf-Jwt
X-Eu-Site
X-TrackingId
X-BBC-Edge-Cache-Status
X-RateLimit-Remaining-Second
X-Branch-Name
X-CGP
X-Envoy-Decorator-Operation
X-Cache-Config
X-Backend-State
X-Esi-Check
X-Level-Front-Cache
X-Node-Id
HA-Ipaddr
Ha-Gx-Prefs
X-Datadog-Trace-Id
X-Irp-Debug
X-Fastly-Backend
X-Generated-On
X-GeoIP-City
X-Gzip
X-Gamma-Serve
X-HS-Content-Campaign-Id
X-Datadog-Sampling-Priority
X-Datadog-Parent-Id
X-Req
X-UnsetCookies
X-Reqid
X-Request-Start
X-Cdn-Origin
X-Rocket-Build-Number
X-Request-URI
X-Region-Sid
X-Platform
L5d-Success-Class
X-Pod-Name
X-Core-Value
X-GeoIP
X-Viewer-Country
X-Bip
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
Web-Mar-Region
We-Hiring
Thinkindot-Control
TDXMobile
Fastly-GeoIP-CountryCode
Machine
Mail-Subject
Req-Svc-Chain
Server-Host
Fastly-Drupal-Html
X-Adobe-Source
X-Cache-Enabled
X-Magnolia-Registration
X-NWS-UUID-VERIFY
X-CS
X-Xrds-Location
NM-Fastcgi-Cache
X-FC-Vary-Parameters
X-Varnish-CookieINHashed-On
Fastly-SWR
Fastly-SIE
Is-Eu
X-Varnish-Remaining-TTL
X-DPWN-IS-SECURE
X-Worker
NGX
X-Varnish-CookieHashed-On
Memcached
X-Has-Esi
X-Rebelmouse-Surrogate-Control
X-Response-By
X-NU-AKA-ACS-Version
X-Origin
X-Rebelmouse-Cache-Control
X-DefHash
X-Loc
Adler-Geo
X-Qloud-Router
X-Is-Gdpr
X-Datadome
X-JWT-State
Cf-Device-Type
X-Variation
X-Amzn-Remapped-Content-Length
X-DefElseHash
Platform
X-Ua-Device
X-Backend-TTL
X-Mvc-Supplant-OutputCached
X-CLOUD-TRACE-CONTEXT
X-Tx-Id
Datacenter
X-Varnish-Beresp-Ttl
X-Up
X-API-Version
X-NC
Pics-Label
X-LB-ID
X-GeoIP-Country-Code
Candidate-Md5Url
X-GeoIP-Region-Code
X-Trace-ID
Magicmarker
Ms-Author-Via
CDN
X-Generated-In
X-DynaTrace-JS-Agent
X-Vc
WWW-Authenticate
X-TraceId
On-Server
X-Tb-Optimization-Total-Bytes-Saved
S-Rt
Memory
WebServer
X-Via-Popn
X-Via-Popv
X-Restarts
X-Via-Poph
Kp-EeAlive
Esi-Enabled
NtCoent-Length
Env
X-LB-NoCache
X-Edge-Pop
Time
X-Tt-Logid
X-Optimistic-Header
X-TA-CDN-Provider
GeoIp-Country-Code
X-Refresh
X-Dynatrace
X-Service
X-Wix-Viewer-Type
X-Cache-Backend
X-RPS
X-DSS
X-RPM
X-DC
C-Via
Edge-Cache
X-DW
X-DI
X-CacheTTL
X-Action
X-RSL
X-DB
X-Varnish-Beresp-TTL
X-Akamai-Request-ID2
X-Http-Reason
X-Parent-Response-Time
X-Cache-PHP
X-Esi
X-Srv
X-Unique-ID
X-TX-ID
X-Servedbyhost
X-Minions-Version
X-MSEdge-Flight
X-MSEdge-Features
X-Newrelic-Synthetics
Server-ID
X-Render-Time
X-Cache-Status-Check
X-HA-Backend
X-Cs
Accept-Language
X-ZONE
Tcn
X-Varnish-Ttl
X-VCL-Version
X-Li-Proto
X-Cache-Ttl
X-App
Geo-Info
X-URL
Locale
X-Urbn-Site-Id
X-Urbn-Context-Path
Proxy-Connection
X-Ec-GeoHdr
X-Webkit-Csp-Report-Only
X-Fpc
X-LI-Proto
X-Info
X-AIR-PT
X-Ec-Fail
X-FPC
Test
X-User
X-Traceid
X-LiteSpeed-Cache-Control
X-Vcl-Version
Server-Id
X-Clientip
X-Webkit-CSP-Report-Only
X-HostName
X-NODE
X-Pass-Why
HIT
X-Oss-Server-Time
X-Oss-Storage-Class
X-B3-Spanid
X-Oss-Request-Id
X-Oss-Object-Type
UCS
Cache-Host
X-Oss-Hash-Crc64ecma
M-TraceId
X-AK-Request-ID
Cdnsip
Cdncip
S-Cnection
X-Clara-WADP
My-App
Fastly-Drupal-HTML
Geoip-Latitude
X-LiteSpeed-Tag
X-WADP-Cache
Cluster
Cf-Int-Pingora-Origin-Digest
X-Fmm-Version
X-CSRF-TOKEN
X-Micro-Cache
X-ServedByHost
Resin-Trace
X-Var-Ttl
Tracecode
User-Agent
X-ID
X-CUA
X-Ha-Backend
Fastly-Backend-Name
Hostname
Section-Io-Origin-Status
Ohc-File-Size
X-Release
Section-Io-Id
Lfy
X-Backend-Host
X-Pad
T-Server
X-From
GeoIP-Country-Code
Section-Io-Origin-Time-Seconds
Hit
Section-Origin-Responded
X-Geo
X-Dynatrace-Js-Agent
Lb
X-BBC-Origin-Response-Status
X-BCube-Filmed-By
X-Fragments
Lang
X-RAMCache
X-Via-PopH
MIME-Version
X-Check-Cacheable
ENV
X-Edge-POP
X-Via-PopV
X-Via-PopN
X-APP
X-ElasticPress-Query
Load-Balancing
X-WP-CF-Super-Cache
DataCenter
X-WP-CF-Super-Cache-Cache-Control
X-NGINX-Cache
Target-Params
X-HS-Status
X-Api-Version
X-Edge-Cache
X-Cdn-Forward
X-Fastly-Backend-Reqs
X-Ucs
X-WA-Info
EpKe-Alive
Cache-Key
URI
X-WA
X-ServerName
X-Amz-Meta-Cb-Modifiedtime
VNS-Cache
VNS-Age
CPC-Cache
CPC-Age
Path
X-ES-SERVER
X-VC
Uri
X-GoCache-CacheStatus
X-Wikidot-Static-Cache
X-UP
Servername
X-Fastly-Cache-Hits
X-Lb-Nocache
X-Mcache
X-Wikidot-Backend
X-TRACE-ID
X-Lb-Id
ServerName
X-Httpd
X-Proxy-Cache-Info
X-Cms-Context
Cdn
Cteonnt-Length
Pagetype
Permissions-Policy
FSS-Cache
Shield-Pop
PICS-Label
X-RateLimit-Reset
WZWS-RAY
X-PJAX-URL
Ohc-Cache-HIT
X-Nc
Cneonction
X-Cdn-Request-ID
X-B3-ParentSpanId
X-Dw-Trace-Id
X-Yottaa-OS
X-Akamai-ERRuleID
X-Apw-Access-Action
X-Apw-Hits
X-Newrelic-App-Data
X-Snapshot-Date
X-Contensis-Viewer-Groups
X-Cache-ASPX
X-Acquia-Application-Trace
X-Acquia-Application-UUID
X-Apw-Access-Token
MD5-Digest
X-Apw-Access-Object
Server-Ttl
X-Akamai-ERPolicy
X-Acquia-Purge-Tags
X-Acquia-Site
X-Hcs-Proxy-Type
Cf-Ipcountry
Srv
X-Swift-Error
X-CCDN-CacheTTL
X-Via-Ucdn
X-CCDN-Origin-Time
Vha6-Origin
CF-Cached-On
Producers
X-Akamai-Pragma-Client-IP
X-Air-Pt
X-Cache-Ngx
X-Provided-By
Sid
X-Varnish-Authentication
X-SB
X-Udemy-Cache-App-Namespace
X-B3-Parentspanid
X-Cache-CFC
X-Pool
X-Last-Modified
X-SIPLIST1
X-Sentry-ID
Ngx
X-Logging-Id
Sever-Int
X-CacheKey
CountryCode
X-UA
X-VG-WebServer
X-Miniprofiler-Ids
Server-Hostname
X-Http-Count
X-Http-Duration-Ms
X-Te-Count
IsBot
W
Req-ID
Server-Ext
X-Te-Duration-Ms