Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
CF-RAY
Cf-Request-Id
CF-Cache-Status
Accept-Ranges
Link
ETag
Pragma
Expect-CT
X-Powered-By
X-XSS-Protection
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
Alt-Svc
X-Xss-Protection
X-UA-Compatible
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Adblock-Key
X-Runtime
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Request-ID
X-Check
X-Cache-Status
X-Generator
X-Cacheable
X-DNS-Prefetch-Control
Timing-Allow-Origin
P3p
X-Content-Security-Policy
X-Iinfo
Status
X-Ua-Compatible
Feature-Policy
Content-Encoding
X-AspNetMvc-Version
X-CDN
X-Envoy-Upstream-Service-Time
Access-Control-Expose-Headers
Upgrade
X-Drupal-Dynamic-Cache
Access-Control-Max-Age
X-Via
X-Dns-Prefetch-Control
Keep-Alive
X-Ws-Request-Id
X-Robots-Tag
Request-Context
Server-Timing
X-AH-Environment
X-Hacker
X-Server
X-Age
X-Turbo-Charged-By
X-Proxy-Cache
X-Cache-Group
X-Server-Powered-By
X-Backend
X-Amz-Request-Id
Host-Header
X-Amz-Id-2
EagleId
X-Nginx-Cache-Status
Report-To
X-LiteSpeed-Cache
X-Rq
X-Varnish-Cache
X-UA-Device
X-Page-Speed
Grace
X-Pingback
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-Device
EagleEye-TraceId
X-Vhost
X-OneAgent-JS-Injection
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Amz-Version-Id
NEL
Cf-Railgun
X-Dispatcher
X-Host
X-Cache-Spec
X-CST
X-Server-Id
X-Backend-Server
Allow
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
Request-Id
Surrogate-Control
X-Node
X-WebKit-CSP
X-Readtime
X-Akam-SW-Version
Accept-CH
X-Response-Time
X-Webkit-CSP
Accept-Ch-Lifetime
X-Ruxit-JS-Agent
Xkey
X-HW
X-Language
X-Country
X-Application-Context
X-Template
X-Ac
Content-Location
X-Cache-Lookup
X-Cloud-Trace-Context
MS-Author-Via
Rating
X-Url
X-B3-TraceId
X-Mod-Pagespeed
Edge-Control
X-PC
X-Vname
X-TtlSet
X-Clacks-Overhead
X-Varnish-TTL
X-Trace
Accept-Ch
X-MS-InvokeApp
X-ESI
X-Content-Type
Fastly-Restarts
X-Rack-Cache
X-Origin-Cache
X-GitHub-Request-Id
X-Cnection
X-Buckets
X-Country-Code
X-Goog-Hash
Verso
X-D2id
X-VARITI-CCR
X-Exp-Id
X-Cdn-Fetch
X-Use-Magma
X-Exp-Variant
X-Kinja-Server
X-Kinja-Build
X-Kinja-Revision
X-GoogleNews-Bot
X-Kinja
X-Server-ID
Arr-Disable-Session-Affinity
Accept-CH-Lifetime
X-Vcap-Request-Id
X-ORACLE-DMS-ECID
X-FastCGI-Cache
Cache-Tag
X-Cached
X-Abt-Application-Version
X-Server-Name
Service-Worker-Allowed
X-Amz-Rid
X-Client-IP
X-Navigation-Version
X-Powered-By-Plesk
X-Px
RTSS
X-Fastly-Request-ID
Public-Key-Pins
Access-Control-Request-Method
X-Element-Page-Cache
X-SRCache-Fetch-Status
X-MSEdge-Ref
X-Powered-CMS
X-SRCache-Store-Status
X-Upstream
X-Dw-Request-Base-Id
X-NF-Request-ID
X-Version
X-Sol
Pagespeed
Response
X-Middleton-Display
Display
X-Middleton-Response
X-TTL
X-Cache-TTL
S
X-Kinsta-Cache
X-Edge
X-Edge-Location-Klb
X-LLID
X-Ttl
Mrf-Cache-Status
MRF-Tech
X-B3-TraceId-Primal
X-ECACHE
Realpath
X-Kraken-Routeconfig-Destination
X-Instrumentation
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Accel-Expires
X-Cache-Key
X-HP-Webp
X-Jurisdiction
X-Correlation-Id
SPRequestGuid
X-SharePointHealthScore
X-XRDS-Location
SPIisLatency
X-Shield-Request-Id
SPRequestDuration
X-T
X-Mid
X-MCACHE
X-PressLabs-Stats
Pinterest-Generated-By
Pinterest-Version
X-Pinterest-Rid
X-Content-Security-Policy-Report-Only
X-ORACLE-DMS-RID
X-DynaTrace
Edge-Cache-Tag
X-Litespeed-Cache
X-Forwarded-Proto
Fastcgi-Cache
X-Amz-Server-Side-Encryption
X-Mg-S
X-Content-Digest
TP-Cache
TP-L2-Cache
X-Recruiting
Nginx-Cache
Charset
X-Id
Filters
TCN
Front-End-Https
X-Request-Processing-Time
X-Request-Received
Alternate-Protocol
Server-Node
X-Logged-In
X-Ezoic-Cdn
X-Forwarded-For
Content-MD5
X-Geo-Country
Cache-Tags
Fusion-Content-Id
Fusion-Content-Source
Fusion-Source
Fusion-Template-Id
Fusion-Deployment-Id
Fusion-Component-Id
X-Protected-By
X-Hostname
X-Origin-Upstream-Status
X-Amzn-Trace-Id
X-ASPNET-VERSION
X-Grace
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Release
X-Origin-Server
X-Www-Served-By
X-F-Cache
Cleartype
X-NWS-LOG-UUID
X-Amz-Replication-Status
X-Rid
X-HS-Cache-Config
X-Debug-Info
X-HS-Hub-Id
X-HS-Content-Id
X-HS-Combine-CSS
Host
X-LB-Cache
X-Az
X-Activity-Id
X-AppVersion
X-Contextid
X-Oneagent-Js-Injection
X-RateLimit-Remaining
Section-Io-Cache
Server-Name
X-Page-Id
X-Git-Hash
X-Daa-Tunnel
X-Frontend
X-Browser-Type
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-VCache
X-Cache-Age
X-Ser
MicrosoftSharePointTeamServices
X-Respond-Thread
X-Content-Options
Accept-Charset
X-Fastcgi-Cache
Access-Control-Allow-Method
X-Upgrade-Enabled
X-Aspnetmvc-Version
X-Hits
X-Kong-Proxy-Latency
X-Mobile-URL
X-Kong-Upstream-Latency
X-Ruxit-Js-Agent
X-Source
X-DIS-Request-ID
ServerID
X-B-Cache
X-Is-Crawler
X-Signature
X-Route-Name
X-Request-Guid
X-Providence-Cookie
X-Flags
X-Aspnet-Duration-Ms
X-Varnish-Backend
X-Whom
X-Cache-Action
Payment
X-TT
X-Varnish-Age
X-Varnish-Grace
X-FB-Debug
Healthy
Viewport
Paypal-Debug-Id
X-Ab
X-WebKit-CSP-Report-Only
Node
X-AOL-HN
X-App-Environment
X-CACHE-GROUP
X-B3-Sampled
Fastcgi-Useragent
X-Load-Cache
DynaTrace
Version
X-Seen-By
X-Yandex-Sdch-Disable
X-Mobile
X-N
DC
X-Tt-Trace-Tag
X-Tt-Trace-Host
X-Type
X-HTML-Minification-Powered-By
X-Distributor
Filterid
SRV
Retry-After
Frame-Options
X-User-Agent
X-Cache-Control
MS-CV
X-Cache-Expired-At
X-Jobs
Refresh
X-Response-Served-From
X-Original-Request-Id
Amp-Access-Control-Allow-Source-Origin
X-IPLB-Instance
X-UUID
X-Adobe-Content
NGB
X-Tec-Api-Version
X-Real-IP
X-Adobe-Loc
X-Page-View
X-Tec-Api-Root
X-Proxy-Cache-Status
X-Tec-Api-Origin
X-Region
X-Varnish-Server
X-Debug-IsConnected
X-Debug-IsPreview
X-Cluster-Name
X-Device-Type
Access-Control-Request-Headers
X-Instance
AR-CACHE
X-Framework
X-Content-Powered-By
X-FW-Server
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-FW-Hash
X-B
X-Tumblr-User
X-ProcessESI
AR-ATIME
X-FW-Type
Ar-Sid
X-RemovedCookies
AR-Request-ID
AR-PoweredBy
X-G
X-FW-Serve
X-Cacheable-TTL
X-Tumblr-Pixel-1
X-FW-Dynamic
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-XRDS-LOCATION
X-FW-Static
X-Proxy
X-RTag
X-IPS-LoggedIn
Ms-Operation-Id
X-Cache-Time
X-CDN-Forward
X-Vgn-Hpd-Reason
X-NGENIX-Cache
X-Azure-Ref
Uber-Trace-Id
X-Zen-Fury
Countrycode
X-Microsite
X-Request-Handler-Origin-Region
X-Node-Name
X-Cache-Rule
Cache-Status
X-Wix-Request-Id
X-Cache-Hit
X-Time
X-Ms-Version
X-Ms-Request-Id
Section-Io-Id
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
X-Rendered-As
X-Is-Bot
X-Mg-Request-UUID
Section-Io-Origin-Status
X-Debug
X-RateLimit-Limit
X-App-Version
Liferay-Portal
SD-X-WS
Referer-Policy
X-Nginx-Cache
X-Aws-Lambda-Call-Status
X-Accel-Buffering
X-Drupal-Cache-Tags
X-Oracle-Dms-Rid
X-HP-Trace-Id
Cache
X-EdgeConnect-Cache-Status
S-Cnection
Country
X-App-Server
CF-IPCountry
X-L-Path
X-Environment-Context
X-Cache-Operation
X-Yottaa-Optimizations
X-Revision
X-Yottaa-Metrics
X-Parallel-Accel
Surrogate-Key
X-FireWall-Port
Eomportal-Instance
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-SaId
X-JoinUs
X-TNCMS
X-Loop
X-GG-Cache-Date
Meta-Geo
X-RN-RSRV
X-Endurance-Cache-Level
X-ES-SERVER
X-UPSTREAM-Address
X-Say-Cacheable
X-Proxy-Build
X-Say-TTL
X-LAGOON
X-Xfnlog-Site
X-Sorting-Hat-ShopId
X-Shopify-Stage
X-Sorting-Hat-PodId
X-ShopId
X-ShardId
X-Cache-TTL-Remaining
From-Origin
Selected-Fe
X-Cache-Type
X-SayCDN-TTL
X-Timing-Wait
X-Storefront-Renderer-Rendered
X-Alternate-Cache-Key
X-Drupal-Cache-Contexts
X-Adobe-Source
X-AWS-Id
Protected
X-Be
X-BYPASS-REASON
X-Human
Country-Code
Cache-Name
Azure-RegionName
Azure-InstanceId
Azure-SiteName
Azure-SlotName
Azure-Version
X-LJ-Flow-ID
X-No-Session
X-Varnish-Beresp-Grace
X-Sql-Duration-Ms
X-Varnish-Hostname
X-Varnishpool
X-VWS-Id
X-Sql-Count
X-S-Maxage
X-Proto
X-NYM-Debug-Backend
X-ProxyCache-Key
X-ProxyCache-Status
X-Request-Time
Akamai-GRN
X-Origin-Date
Count-Hit
GEO-INFO
Decoy-Debug-Key
X-Cache-Server
X-Handled-By
X-Akamai-Edgescape
ServedBy
Decoy-Debug-TTL
Fastly-SSL
X-Hosted-By
Decoy-Debug-Status
X-Labrador-Cache-Channel
X-Pubstack
X-R9-Blue-Green-Version
X-Status
X-UA-Device-Type
X-TA-CDN-Provider
X-PHP-Host
X-OCL
X-PCL
X-PHP-Backend
Cache-Tv-Group
X-RCS-CacheZone
Apigw-Requestid
X-FW-Version
TWC-GeoIP-LatLong
TWC-Locale-Group
TWC-Device-Class
X-Backend-Name
TWC-Connection-Speed
TWC-GeoIP-Country
Webcakes-App-Name
X-Hl-Ver
X-Format
X-Access
X-Hyper-Cache
Webcakes-App-Version
Webcakes-Region
TWC-Privacy
X-Origin-Hint
X-Server-W
X-Tumblr-Pixel-2
X-Uri
X-Web-Node
X-Section
X-Via-Fastly
X-Redis-Cache
Property-Id
X-Backend-Host
X-ApacheServer
X-PERF
Mn-Server-Ip
X-FB-TRIP-ID
X-B3-SpanId
X-Time-Microsecs
Nel
X-Cluster-Node
X-ServerID
X-ATG-Version
X-Servername
Xserver
X-Cache-PHP
X-Ua-Device
OT-Force-Account-Verify
X-Cache-Ttl
Cross-Origin-Opener-Policy
X-TT-LOGID
X-Tumblr-Pixel-3
X-CSRF-Token
X-Detected-As
X-Azure-Ref-OriginShield
X-APP-VERSION
X-Trace-Id
Backend
X-WA-Info
X-Content-Age
X-MP-GENERATED-AT
Web-Mar-Node
X-Cache-Host
X-Varnish-Cache-Hits
X-Generation-Time
X-Rule
X-CS
X-Cached-By
X-Datadome
Content-Secure-Policy
X-Soup
X-Akamai-Transformed
Cross-Origin-Window-Policy
X-Varnish-Hits
X-Bc-Bl
X-Ua
X-Edge-Location
X-Cache-Enabled
X-Via-JSL
X-SRV
Ec-Rule-Version
X-Info
X-Mode
X-NWS-UUID-VERIFY
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Amzn-Remapped-Content-Length
X-Cache-Grace
X-Varnish-Beresp-Ttl
X-Microcachable
X-Varnish-Beresp-Status
Source
X-Forwarded-Host
Url
X-Cache-NGX
Upgrade-Insecure-Requests
S-Rt
X-Magnolia-Registration
X-GEO
X-Locale
SID
X-Debug-Cache
X-Origin-TTL
X-DC
X-DataDome
X-Storage
X-EC-Lua
X-Origin-CC
X-B3-Traceid
X-Routing-Service
X-Site-Version
X-Tb
X-Proxied
X-Extlb
X-Zipkin-Id
Apple-News-Services-Parsed-Url
X-Processor
X-Rebelmouse-Surrogate-Control
Apple-News-Services-Host
CDCHOST
Expiry
X-Destination
X-VG-WebCache
CDN-EdgeStorageId
User-Cache-Control
CDN-CachedAt
X-Developer
X-Request-URI
Apple-News-Services-Request-Url
CDN-Cache
X-D
X-Clientip
X-AIR-PT
BehaviorPad-Version
Apple-News-Services-Handled
X-Cache-Bucket
Mobile-Detection-Method
X-Application
X-BCube-Filmed-By
Content-Disposition
X-B-Cookie
A
X-Aed
X-A-Wwc
X-Cache-NE
X-A-Dcw
X-ARC
X-Ratelimit-Reset
X-A-Dam
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-A-Dgt
Fastly-SIE
X-Rebelmouse-Cache-Control
X-Epic-Correlation-Id
X-Connection-Hash
X-Air-Trace-Id
State
Surrogated-Key
DCR-Decision-By
Odigeo-Trace-Id
X-S-Cookie
X-SRCache-Key
Fastcgi-X-Cache-Version
X-Tenant
X-A
T-Server
X-Session-Fingerprint
MD5-Digest
X-S
DCR-Processing-Time-Ms
X-Rojux
X-Shop-Environment
Fastly-SWR
X-Vtex-Processado-Em
Meta-Geo-Continent
X-Vtex-Remote-Cache
X-Orig-Expires
Req-Svc-Chain
X-NAPM-TraceId
X-NU-AKA-ACS-Version
Host-ID
X-A-Ccd
X-Aicache-OS
X-Forwarded-Path
CDN-RequestId
CDN-Uid
X-From
Path
X-Platform-Server
CDN-RequestCountryCode
X-Air-Source
X-Air-Hostname
X-External-Request-Id
CDN-PullZone
X-PBS-Appsvrname
X-Vdms-Version
X-PAYTM-SRV-ID
X-Rewrite-Enabled
X-ScT
X-GoCache-CacheStatus
M-TraceId
X-VG-WebServer
Rendered-Blocks
X-Ratelimit-Limit
X-Platform
PB-RID
Pics-Label
X-Unique-Id
Origin
Platform
PB-PID
X-Accel-Expires-Debug
NGX
X-Men
X-Request-UUID
X-Rocket-Build-Number
X-Service
X-Sigma
X-Request-Host
X-Proxy-Upstream
X-Loc
L
X-Origin-Expires
X-Sigma-Backend
X-SVT-ORM-RULES
X-VServer
X-WADP-Cache
X-Conf
X-Ftr-Request-Id
X-VG-TLSProxy
X-Variation
X-SVT-ORM-VERSION
X-Thanos
X-TrackingId
X-LI-UUID
X-Li-Pop
X-Cms-Context
X-Core-Value
X-Date
X-DPWN-IS-SECURE
X-Clara-WADP
X-Cache-Tags
X-Bip
X-Cache-Debug
X-Cache-Info
X-Envoy-Decorator-Operation
X-Fastly-Backend
X-Is-Gdpr
X-JWT-State
X-Li-Fabric
X-Hash
X-Has-Esi
X-Fastly-Cache
X-Fmm-Version
X-Forwarded-Site
X-Backend-State
UCS
Cmsid
Cmstype
DSUID
Fastly-Backend-Name
Cache-Key
Cache-Host
Adler-Geo
Arc-Version
C-Via
Fastly-Drupal-HTML
X-Amz-Meta-S3cmd-Attrs
Is-Eu
Server-Info
X-RateLimit-Remaining-Second
X-Cache-Id
X-Req
X-RateLimit-Limit-Second
HA-Ipaddr
X-Branch-Name
X-Origin
X-Cluster
X-Policy
X-CGP
X-Csrf-Jwt
X-Block-Status
Locid
IsBot
CacheControlHeader
X-Unique-ID
X-Gamma-Serve
X-Slack-Backend
X-Scheme
X-Served-From
X-SIPLIST1
L5d-Success-Class
X-Old-Content-Length
X-Nginx-Cache-Key
X-GeoIP-City
X-Gzip
X-FC-Vary-Parameters
X-HN
X-GeoIP
X-Geo-Header
X-Gen-Mode
X-Generated-By
X-Generated-In
X-Generated-On
X-Hnp-Log
X-Eu-Site
X-Developers
X-Mvc-Supplant-Cachable
X-DefHash
X-DefElseHash
X-Device-Os
X-Micro-Cache
X-Esi-Check
X-Irp-Debug
X-Level-Front-Cache
X-Location
Cf-Device-Type
Location
X-Via-NSCOPI
CPC-Age
X-Thinkindot-L3
PFcat
Mail-Subject
X-Viewer-Country
Pagetype
Thinkindot-CacheControl
TDXMobile
Fastcgi-Cache-TTL
CPC-Cache
Esi-Enabled
Server-Ext
NtCoent-Length
X-Dc
Server-Host
Server-Hostname
X-VarnishDD-TTL
Sever-Int
X-VC-Cache
Release
Thinkindot-CacheControl-Type
X-Wikidot-Static-Cache
VNS-Cache
VNS-Age
X-Wikidot-Backend
We-Hiring
X-BBC-Edge-Cache-Status
Ha-Gx-Prefs
Gh-Request-Id
NM-Fastcgi-Cache
Thinkindot-Control
Vix-Hermes-Req-Id
True-Client-Country-4JS
X-Varnish-Remaining-TTL
X-Var-Ttl
X-Varnish-CookieINHashed-On
X-Varnish-CookieHashed-On
Webserver
AMP-Access-Control-Allow-Source-Origin
X-Ratelimit-Remaining
X-Goog-Meta-Goog-Reserved-File-Mtime
Memcached
X-Fetched-On
X-Planisys-CDN-Rules
Arc-Country
AKAMAI
X-Skip-Cache
Wxu-Next-Commit
Wxu-Next-Hostname
Wxu-Next-Region
X-Sucuri-ID
X-Vdms-Path
V-Age
X-Planisys-CDN-Cache
X-Owner
Kp-EeAlive
X-Planisys-CDN-TTL
Svr
X-Worker
X-Mvc-Supplant-OutputCached
X-Qloud-Router
X-HS-Content-Campaign-Id
X-Ckpd-Fst-Backend
Who
X-Tx-Id
X-Via-Popn
X-Via-Popv
X-Auto-Login
X-Via-Poph
Cache-Hits
X-Servedbyhost
X-M-Reqid
X-M-Log
X-User
MIME-Version
X-Srv
X-Zone
X-NCache
DataCenter
X-V-Cache
X-PF-Uncompressing
X-Qnm-Cache
X-NODE
X-NC
X-Ua-Browser
X-Content
X-Traceid
X-Platform-Processor
X-Platform-Cluster
X-Varnish-Url
X-LSADC-Cache
X-Minions-Version
X-Platform-Router
X-Render-Time
X-Rocket-Nginx-Serving-Static
XServer
X-Wa
X-LB-ID
X-Vc
X-SD-PageType
X-Webkit-CSP-Report-Only
X-ID
X-Cache-Remote
Powered-By-ChinaCache
Environment
X-Datadog-Parent-Id
My-App
X-Datadog-Trace-Id
X-Refresh
Server-ID
X-Datadog-Sampling-Priority
X-App
X-Varnish-Ttl
WebServer
X-API-Version
X-Cache-Var-Map
X-Cache-Var
X-Origin-Time
Time
X-Gdpr
X-ZONE
X-VCL-Version
X-Internal-Host
X-NodeID
X-Newrelic-Synthetics
X-BBC-Origin-Response-Status
X-Nyt-Route
Memory
X-Pass-Why
Datacenter
X-PJAX-URL
X-Via-Ucdn
X-TIME
X-Server-IP
Cluster
X-Webkit-Csp
X-Cache-Config
X-CACHE-KEY
X-Pod-Name
Candidate-Md5Url
X-TX-ID
HostName
Hostname
X-NewRelic-App-Data
X-OVcl
X-OVcl-Cache
X-LI-Proto
X-CLOUD-TRACE-CONTEXT
Cf-Bgj
X-Backend-TTL
Resin-Trace
X-ElasticPress-Query
N-Cache
X-Edge-Pop
X-Tb-Optimization-Total-Bytes-Saved
Magicmarker
Geo-Info
Geoip-Latitude
X-TraceId
Web-Mar-Region
GeoIp-Country-Code
X-AB
X-VHOST
X-Origin-Response-Time
Onion-Location
Ohc-File-Size
Tcn
X-Akamai-Pragma-Client-IP
GeoIP-Country-Code
X-Dynatrace
X-Method
X-CACHE-AGE
Servername
X-HITS
X-Dispatcher-Server
DB-Nickname
WWW-Authenticate
GeoIP-Latitude
X-MSEdge-Flight
X-MSEdge-Features
X-Varnish-Cacheable
X-EIG-Tracking-Id
X-Geo
X-Esi
X-Varnish-Beresp-TTL
Proxy-Connection
Ssr
X-Li-Proto
X-IP
LB
Cdn
X-Correlation-ID
X-Wix-Viewer-Type
X-Fpc
X-HostName
CF-Cached-On
X-Tid
CDN
X-Dynatrace-Js-Agent
X-Node-Id
Redirect-Candidate
X-TIM-N
X-DynaTrace-JS-Agent
Cf-Ipcountry
X-ND-Cache
X-Trv-Group
X-Vcl-Version
Lb
X-Up
Tracecode
X-Request-Start
X-Pjax-Url
X-HS-Status
X-Cs
X-Tt-Logid
Server-Id
X-Cache-Date
X-Fastly-Backend-Reqs
WZWS-RAY
Pramga
X-Reqid
X-APP
Env
Is-Us
X-Via-CDN
Sid
X-Nc
X-MG-S
X-Sn-Servicetimems
X-Webkit-Csp-Report-Only
X-NGINX-Cache
X-Cdn-Origin
X-WA
X-ServerName
X-Amz-Meta-Cb-Modifiedtime
Cteonnt-Length
X-FORWARDED-FOR
X-Provided-By
X-Lb-Id
W
X-Core-Mission
X-VC
X-Check-Cacheable
URI
Ohc-Cache-HIT
X-CSRF-TOKEN
X-UnsetCookies
X-Cache-Expires
CloudFront-Viewer-Country
X-IN-APIGATEWAY
X-IN-APIGATEWAYSSL
X-SERVER-NAME
Rt-Fastcgi-Cache
Viewtype
VivaBuild
X-Cache-Backend
X-Fastly-Request-Id
X-Via-PopN
X-Via-PopV
X-Via-PopH
Shield-Pop
Mime-Version
X-ServedByHost
Server-Ttl
X-Pf-Uncompressing
X-SN
WP-Super-Cache
CountryCode
X-Acquia-Site
X-Acquia-Purge-Tags
X-Acquia-Application-Trace
Machine
X-Acquia-Application-UUID
X-Edge-POP
X-Region-Sid
X-Sucuri-Cache
X-Hcs-Proxy-Type
X-CCDN-Origin-Time
X-Cache-Status-Check
X-CCDN-CacheTTL
X-RAMCache
CACHE
X-Fastly-Cache-Hits
X-Contensis-Viewer-Groups
X-LiteSpeed-Cache-Control
X-Pad
X-Varnish-Authentication
X-Cache-ASPX
X-Webstats-RespID
X-SB
X-Dw-Trace-Id
EpKe-Alive
X-CF-Powered-By
Vha6-Origin
X-CUA
X-Swift-Error
X-Cdn-Request-ID
X-FTR-Request-ID
X-Action
X-Yottaa-OS
X-Moov-T
Xet-Cookie
X-DW
X-RPM
X-DSS
X-DI
X-DB
X-RSL
X-RPS
X-Moov-Xdn-Version
Xc-Version
X-StackifyID
Ohc-Response-Time
X-Cdn-Forward
Req-ID
X-FTR-Expires
X-MiniProfiler-Ids
X-Ig-Push-State
X-TH-Server
X-Country-Code-Real
X-Oss-Request-Id
On-Server
X-FTR-Realm
X-Oss-Server-Time
X-Oss-Storage-Class
FSS-Cache
X-C
ServerName
X-ElasticPress-Search
X-Oss-Object-Type
Content-Style-Type
X-FTR-Balancer
X-FTR-Cache-Status
Content-Script-Type
X-FTR-Backend-Server
X-Oss-Hash-Crc64ecma
X-FTR-Backend
X-FTR-DC