Threat Level: green Handler on Duty: Russ McRee

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Cf-Request-Id
CF-RAY
CF-Cache-Status
Accept-Ranges
Link
ETag
Pragma
Expect-CT
X-Powered-By
X-XSS-Protection
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
Alt-Svc
P3P
X-UA-Compatible
X-Served-By
X-Xss-Protection
X-Timer
X-Download-Options
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Adblock-Key
X-Runtime
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Check
X-Request-ID
X-Cache-Status
X-Generator
P3p
X-Cacheable
Timing-Allow-Origin
X-DNS-Prefetch-Control
X-Content-Security-Policy
X-Iinfo
Status
X-Ua-Compatible
Feature-Policy
Content-Encoding
X-AspNetMvc-Version
X-CDN
X-Envoy-Upstream-Service-Time
X-Dns-Prefetch-Control
Access-Control-Expose-Headers
Upgrade
Access-Control-Max-Age
X-Drupal-Dynamic-Cache
X-Via
Keep-Alive
X-Ws-Request-Id
Request-Context
Server-Timing
X-Robots-Tag
X-AH-Environment
X-Hacker
X-Server
X-Age
X-Turbo-Charged-By
X-Proxy-Cache
X-Cache-Group
X-Server-Powered-By
X-Backend
X-Amz-Request-Id
Host-Header
X-Amz-Id-2
EagleId
X-Nginx-Cache-Status
Report-To
X-LiteSpeed-Cache
X-Rq
X-Varnish-Cache
X-UA-Device
Grace
X-Page-Speed
X-Pingback
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
EagleEye-TraceId
X-Device
X-Vhost
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Amz-Version-Id
NEL
X-OneAgent-JS-Injection
X-Dispatcher
Cf-Railgun
X-Host
X-Server-Id
X-Cache-Spec
X-WebKit-CSP
X-CST
X-Node
X-Backend-Server
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
Allow
Request-Id
Surrogate-Control
X-Readtime
Accept-CH
X-Akam-SW-Version
Accept-Ch-Lifetime
X-Response-Time
Xkey
X-HW
X-Language
X-Application-Context
X-Template
X-Country
X-Webkit-CSP
X-Ruxit-JS-Agent
X-Ac
Content-Location
X-Cloud-Trace-Context
X-Cache-Lookup
Rating
MS-Author-Via
X-Url
Edge-Control
X-PC
X-TtlSet
X-Vname
X-Mod-Pagespeed
X-Clacks-Overhead
X-B3-TraceId
X-Varnish-TTL
Accept-Ch
X-Trace
X-Content-Type
Fastly-Restarts
X-Rack-Cache
X-MS-InvokeApp
X-ESI
X-Origin-Cache
X-Buckets
X-GitHub-Request-Id
X-Cnection
X-Country-Code
X-Goog-Hash
Verso
X-D2id
X-VARITI-CCR
X-Cdn-Fetch
Arr-Disable-Session-Affinity
X-Exp-Id
X-GoogleNews-Bot
X-Kinja-Server
X-Use-Magma
X-Kinja-Revision
X-Kinja-Build
X-Kinja
X-Exp-Variant
Cache-Tag
X-Vcap-Request-Id
X-FastCGI-Cache
X-Cached
Service-Worker-Allowed
X-ORACLE-DMS-ECID
X-Abt-Application-Version
X-Server-Name
X-Amz-Rid
X-Client-IP
X-Navigation-Version
X-Px
X-Server-ID
Accept-CH-Lifetime
RTSS
X-Powered-By-Plesk
X-Cache-TTL
Public-Key-Pins
X-Fastly-Request-ID
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-MSEdge-Ref
X-Element-Page-Cache
Access-Control-Request-Method
X-TTL
X-Powered-CMS
X-Dw-Request-Base-Id
X-NF-Request-ID
X-Upstream
X-Version
X-Middleton-Response
X-Middleton-Display
X-Sol
Display
Response
Pagespeed
S
X-Kinsta-Cache
X-Edge-Location-Klb
X-Edge
X-LLID
X-Kraken-Routeconfig-Destination
X-Kraken-Loop-Name
X-Instrumentation
X-Server-Lifecycle-Phase
X-B3-TraceId-Primal
Mrf-Cache-Status
MRF-Tech
X-Cache-Key
X-ECACHE
X-Accel-Expires
X-HP-Webp
X-Jurisdiction
X-Correlation-Id
X-Shield-Request-Id
Realpath
Pinterest-Version
X-Pinterest-Rid
Pinterest-Generated-By
X-Ttl
X-T
X-XRDS-Location
X-DynaTrace
SPRequestGuid
X-SharePointHealthScore
X-MCACHE
X-Mid
X-PressLabs-Stats
X-Content-Security-Policy-Report-Only
SPRequestDuration
SPIisLatency
Edge-Cache-Tag
X-Litespeed-Cache
Fastcgi-Cache
X-ORACLE-DMS-RID
X-Mg-S
X-Amz-Server-Side-Encryption
X-Content-Digest
Nginx-Cache
X-Forwarded-Proto
X-Recruiting
TP-L2-Cache
TP-Cache
Charset
X-Request-Processing-Time
TCN
X-Request-Received
Front-End-Https
X-Id
Alternate-Protocol
Server-Node
X-Logged-In
Filters
X-Oneagent-Js-Injection
X-Ruxit-Js-Agent
X-Forwarded-For
Content-MD5
X-Geo-Country
X-Ezoic-Cdn
Fusion-Template-Id
Fusion-Content-Source
Fusion-Content-Id
Fusion-Component-Id
Fusion-Deployment-Id
Fusion-Source
X-Protected-By
Cache-Tags
X-Hostname
X-ASPNET-VERSION
X-Origin-Upstream-Status
X-Amzn-Trace-Id
X-Grace
X-NWS-LOG-UUID
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-Goog-Generation
X-F-Cache
Cleartype
X-Www-Served-By
X-Debug-Info
X-Amz-Replication-Status
X-Origin-Server
X-Rid
X-HS-Hub-Id
X-HS-Content-Id
X-HS-Cache-Config
X-LB-Cache
Host
X-HS-Combine-CSS
X-Az
X-AppVersion
X-Activity-Id
X-Contextid
X-RateLimit-Remaining
X-Daa-Tunnel
X-Git-Hash
Section-Io-Cache
X-Page-Id
Server-Name
X-Erf-Bev-Bev-Is-Generated
X-Browser-Type
X-Erf-Bev-Bev
X-Release
X-Ab
X-Frontend
X-VCache
X-Ser
MicrosoftSharePointTeamServices
X-Cache-Age
X-Content-Options
X-Upgrade-Enabled
Accept-Charset
Access-Control-Allow-Method
X-Fastcgi-Cache
X-Aspnetmvc-Version
X-Hits
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
ServerID
X-Mobile-URL
X-Source
X-DIS-Request-ID
X-Signature
X-Respond-Thread
X-Request-Guid
X-Aspnet-Duration-Ms
X-Flags
X-Is-Crawler
X-Providence-Cookie
X-B-Cache
X-Route-Name
X-Varnish-Age
X-Cache-Action
Healthy
X-Whom
X-Varnish-Backend
Viewport
X-FB-Debug
X-Varnish-Grace
Payment
Paypal-Debug-Id
X-TT
X-B3-Sampled
X-CACHE-GROUP
Node
X-AOL-HN
X-App-Environment
DynaTrace
X-WebKit-CSP-Report-Only
X-Yandex-Sdch-Disable
Fastcgi-Useragent
X-Load-Cache
X-Mobile
X-Tt-Trace-Tag
X-Tt-Trace-Host
DC
Version
X-Seen-By
X-N
Filterid
X-Distributor
X-HTML-Minification-Powered-By
SRV
X-User-Agent
X-Type
X-Cache-Control
Retry-After
Frame-Options
X-Jobs
MS-CV
Refresh
X-Cache-Expired-At
Amp-Access-Control-Allow-Source-Origin
X-FW-Hash
X-FW-Dynamic
X-Response-Served-From
X-FW-Type
X-Original-Request-Id
X-FW-Static
X-FW-Serve
X-FW-Server
X-UUID
X-Adobe-Loc
X-Adobe-Content
X-Tec-Api-Root
X-Tec-Api-Version
X-Page-View
X-Tec-Api-Origin
X-Proxy-Cache-Status
X-Instance
X-Debug-IsPreview
X-Debug-IsConnected
X-Real-IP
X-Region
X-Varnish-Server
X-NGENIX-Cache
X-ProcessESI
X-Node-Name
X-Azure-Ref
X-B
X-Tumblr-User
X-RemovedCookies
X-IPLB-Instance
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Tumblr-Pixel-1
X-HP-Trace-Id
X-G
X-Cacheable-TTL
X-Vgn-Hpd-Reason
VIX-Pulpo-Upstream-Status
X-XRDS-LOCATION
NGB
VIX-Pulpo-Node
X-Cluster-Name
X-Content-Powered-By
X-Device-Type
X-Proxy
X-Oracle-Dms-Rid
Access-Control-Request-Headers
X-Cache-Time
X-CDN-Forward
X-Framework
Ms-Operation-Id
X-RTag
X-Zen-Fury
X-IPS-LoggedIn
Uber-Trace-Id
X-Cache-Hit
X-Cache-Rule
X-Aws-Lambda-Call-Status
Cache-Status
Referer-Policy
Liferay-Portal
SD-X-WS
X-Rendered-As
X-RateLimit-Limit
X-Ms-Request-Id
X-Ms-Version
X-Is-Bot
X-Wix-Request-Id
X-Drupal-Cache-Tags
X-Time
X-Parallel-Accel
Section-Io-Id
X-Mg-Request-UUID
Section-Io-Origin-Time-Seconds
Section-Io-Origin-Status
Section-Origin-Responded
Countrycode
X-EdgeConnect-Cache-Status
X-Debug
X-Accel-Buffering
X-L-Path
X-Microsite
X-Revision
X-App-Server
AR-ATIME
AR-CACHE
AR-PoweredBy
X-Request-Handler-Origin-Region
AR-Request-ID
Ar-Sid
X-Environment-Context
X-Nginx-Cache
CF-IPCountry
S-Cnection
Country
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Cache-Operation
Count-Hit
Cache
X-App-Version
X-Drupal-Cache-Contexts
X-FW-Version
Akamai-GRN
X-JoinUs
GEO-INFO
X-Loop
Surrogate-Key
Meta-Geo
X-UPSTREAM-Address
X-RN-RSRV
X-GG-Cache-Date
X-TNCMS
X-ES-SERVER
X-Endurance-Cache-Level
X-SaId
X-Adobe-Source
X-Cache-Type
From-Origin
X-LAGOON
X-Say-TTL
X-SayCDN-TTL
X-Cache-TTL-Remaining
X-Say-Cacheable
X-NYM-Debug-Backend
X-APP-VERSION
Azure-RegionName
Azure-SiteName
Protected
X-Human
X-Varnish-Beresp-Grace
X-S-Maxage
X-Sql-Count
X-Request-Time
Azure-SlotName
Azure-InstanceId
Azure-Version
Country-Code
X-Sql-Duration-Ms
X-AWS-Id
X-Alternate-Cache-Key
X-Be
X-Status
Decoy-Debug-TTL
ServedBy
X-ProxyCache-Status
Decoy-Debug-Status
X-Proto
X-TA-CDN-Provider
X-ShardId
Cache-Tv-Group
Cache-Name
Apigw-Requestid
X-Pubstack
Eomportal-Instance
X-Storefront-Renderer-Rendered
X-RCS-CacheZone
Decoy-Debug-Key
X-BYPASS-REASON
X-Origin-Date
X-TEC-API-VERSION
X-ShopId
X-Hosted-By
X-PHP-Host
X-R9-Blue-Green-Version
Fastly-SSL
X-PCL
X-Shopify-Stage
X-Labrador-Cache-Channel
X-ProxyCache-Key
X-Xfnlog-Site
X-No-Session
X-Sorting-Hat-ShopId
X-OCL
X-Varnishpool
X-LJ-Flow-ID
X-VWS-Id
X-Handled-By
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Sorting-Hat-PodId
X-Varnish-Hostname
TWC-GeoIP-Country
Selected-Fe
X-Origin-Hint
TWC-Connection-Speed
TWC-Device-Class
TWC-GeoIP-LatLong
Webcakes-App-Version
X-Uri
X-Web-Node
X-UA-Device-Type
X-Format
X-Via-Fastly
X-Server-W
X-Cache-Server
X-Section
X-Akamai-Edgescape
X-Hyper-Cache
X-Timing-Wait
X-Proxy-Build
TWC-Privacy
X-Redis-Cache
X-Tumblr-Pixel-2
X-Access
Webcakes-Region
TWC-Locale-Group
Webcakes-App-Name
Property-Id
X-B3-SpanId
X-PHP-Backend
X-PERF
X-ApacheServer
Mn-Server-Ip
X-Backend-Host
X-FB-TRIP-ID
X-FireWall-Port
X-Cluster-Node
X-Hl-Ver
X-Backend-Name
X-Time-Microsecs
X-Servername
Nel
OT-Force-Account-Verify
Cross-Origin-Opener-Policy
X-ServerID
X-Ua-Device
X-ATG-Version
X-Tumblr-Pixel-3
X-Detected-As
X-B3-Traceid
X-Azure-Ref-OriginShield
Web-Mar-Node
X-Cache-PHP
X-Varnish-Cache-Hits
X-Cache-Host
Cross-Origin-Window-Policy
X-Generation-Time
Backend
X-Ua
X-Content-Age
X-Trace-Id
X-TT-LOGID
X-Varnish-Hits
Xserver
Ec-Rule-Version
Content-Secure-Policy
X-CS
X-CSRF-Token
X-MP-GENERATED-AT
X-Datadome
X-Via-JSL
X-WA-Info
Source
X-SRV
X-Akamai-Transformed
X-Soup
X-Microcachable
X-Cache-Grace
Upgrade-Insecure-Requests
X-Cache-Enabled
X-Edge-Location
X-Amz-Apigw-Id
X-Cdn
X-Bc-Bl
X-Mode
X-Amzn-Remapped-Content-Length
X-Amzn-RequestId
Url
X-Locale
X-Forwarded-Host
X-Air-Hostname
X-NWS-UUID-VERIFY
X-Air-Source
X-Varnish-Beresp-Ttl
X-Air-Trace-Id
X-Info
X-Rule
X-Origin-CC
X-Origin-TTL
X-Site-Version
S-Rt
SID
X-Varnish-Beresp-Status
X-GEO
X-Unique-Id
X-DataDome
Content-Disposition
X-Content
X-Ua-Browser
X-Tb
X-Magnolia-Registration
X-Cached-By
Mobile-Detection-Method
X-Processor
X-Proxied
X-Connection-Hash
X-Developer
Expiry
X-Platform-Server
X-VG-WebCache
X-AIR-PT
X-Ratelimit-Reset
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Aicache-OS
X-Aed
X-DC
Meta-Geo-Continent
X-Debug-Cache
Odigeo-Trace-Id
X-PBS-Appsvrname
A
DCR-Decision-By
X-NAPM-TraceId
DCR-Processing-Time-Ms
X-Epic-Correlation-Id
X-External-Request-Id
Apple-News-Services-Handled
X-Extlb
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
X-NU-AKA-ACS-Version
X-A
Fastcgi-X-Cache-Version
X-PAYTM-SRV-ID
X-Vtex-Processado-Em
X-A-Dcw
X-A-Dgt
Path
X-A-Dam
X-Orig-Expires
CDN-RequestId
X-A-Ccd
X-Vtex-Remote-Cache
X-A-Wwc
X-Request-URI
X-CF-Lambda-Fn
X-Session-Fingerprint
X-Shop-Environment
CDCHOST
CDN-Cache
Fastly-SWR
X-BCube-Filmed-By
X-D
X-ScT
X-Application
CDN-Uid
T-Server
X-Cache-Bucket
X-Tenant
State
CDN-EdgeStorageId
X-Cache-NE
Surrogated-Key
X-Forwarded-Path
X-Conf
Host-ID
X-SRCache-Key
CDN-CachedAt
X-BBC-Edge-Cache-Status
X-S-Cookie
BehaviorPad-Version
MD5-Digest
X-VG-WebServer
X-CF-Lambda-Version
X-ARC
X-Rewrite-Enabled
X-Destination
X-From
User-Cache-Control
X-Vdms-Version
CDN-PullZone
X-Storage
Fastly-SIE
X-Rojux
X-Routing-Service
Rendered-Blocks
CDN-RequestCountryCode
Req-Svc-Chain
X-Zipkin-Id
X-Ftr-Request-Id
X-B-Cookie
X-S
X-Ratelimit-Limit
X-Cache-NGX
X-EC-Lua
X-LI-UUID
UCS
Cmsid
Cmstype
X-Loc
Fastly-Backend-Name
L
Is-Eu
X-Has-Esi
M-TraceId
NGX
X-Is-Gdpr
X-JWT-State
X-Li-Fabric
Origin
Pics-Label
Fastly-Drupal-HTML
X-Li-Pop
X-Request-UUID
X-SVT-ORM-VERSION
X-Cache-Info
X-Cache-Debug
X-Service
X-Backend-State
X-TrackingId
X-Variation
X-Core-Value
X-VServer
X-VG-TLSProxy
X-Cms-Context
X-DPWN-IS-SECURE
Platform
X-SVT-ORM-RULES
Cache-Key
Cache-Host
X-Fastly-Cache
X-Men
X-Origin-Expires
Adler-Geo
X-Fastly-Backend
X-Envoy-Decorator-Operation
X-Tx-Id
Server-Host
Server-Hostname
X-Cluster
X-Gamma-Serve
X-Gen-Mode
X-Generated-By
X-DefHash
X-DefElseHash
X-Date
X-Clientip
X-Device-Os
Server-Ext
Sever-Int
Thinkindot-CacheControl
TDXMobile
X-Block-Status
X-Bip
Thinkindot-CacheControl-Type
X-Accel-Expires-Debug
X-Branch-Name
Thinkindot-Control
X-Esi-Check
X-Forwarded-Site
X-Cache-Tags
True-Client-Country-4JS
X-Cache-Id
Vix-Hermes-Req-Id
X-Ckpd-Fst-Backend
X-Origin
X-VC-Cache
X-Developers
X-VarnishDD-TTL
PFcat
X-Varnish-Remaining-TTL
X-Old-Content-Length
X-Nginx-Cache-Key
C-Via
X-Thanos
X-Micro-Cache
X-Dc
X-Proxy-Upstream
X-Varnish-CookieINHashed-On
X-Sigma-Backend
X-SIPLIST1
X-Thinkindot-L3
X-Slack-Backend
X-Sigma
X-Served-From
X-Varnish-CookieHashed-On
X-Var-Ttl
X-Rocket-Build-Number
X-Scheme
X-Location
Arc-Version
Locid
X-Hash
IsBot
X-HN
X-Gzip
X-Worker
PB-RID
PB-PID
X-Generated-On
X-Geo-Header
X-Hnp-Log
Location
Cf-Device-Type
X-Level-Front-Cache
Esi-Enabled
X-Wikidot-Backend
X-Wikidot-Static-Cache
Fastcgi-Cache-TTL
X-Ratelimit-Remaining
Server-Info
X-M-Reqid
X-Platform
X-NCache
AMP-Access-Control-Allow-Source-Origin
X-Amz-Meta-S3cmd-Attrs
X-M-Log
X-Viewer-Country
X-WADP-Cache
X-Auto-Login
X-Via-NSCOPI
X-Vdms-Path
X-Planisys-CDN-TTL
X-Irp-Debug
X-Fmm-Version
X-Fetched-On
X-FC-Vary-Parameters
X-Goog-Meta-Goog-Reserved-File-Mtime
X-GoCache-CacheStatus
X-Generated-In
X-GeoIP
X-GeoIP-City
X-Mvc-Supplant-Cachable
X-Eu-Site
X-RateLimit-Remaining-Second
X-Req
X-Request-Host
X-Skip-Cache
X-RateLimit-Limit-Second
X-Policy
X-Owner
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
X-Sucuri-ID
X-CGP
CacheControlHeader
Memcached
NM-Fastcgi-Cache
Pagetype
X-Csrf-Jwt
Release
CPC-Age
L5d-Success-Class
Webserver
Gh-Request-Id
DSUID
CPC-Cache
HA-Ipaddr
Ha-Gx-Prefs
AKAMAI
Arc-Country
VNS-Cache
VNS-Age
X-Qnm-Cache
Wxu-Next-Region
Wxu-Next-Commit
Wxu-Next-Hostname
X-Clara-WADP
V-Age
Svr
XServer
X-Unique-ID
NtCoent-Length
X-HS-Content-Campaign-Id
X-Qloud-Router
Mail-Subject
X-V-Cache
We-Hiring
Cache-Hits
X-Via-Poph
DataCenter
X-Via-Popn
X-Mvc-Supplant-OutputCached
X-Servedbyhost
X-Via-Popv
X-LSADC-Cache
X-Platform-Cluster
X-Platform-Processor
MIME-Version
X-Platform-Router
Kp-EeAlive
X-Rocket-Nginx-Serving-Static
X-Render-Time
X-Srv
X-SD-PageType
X-Cache-Remote
Environment
X-Zone
X-User
X-Cache-Var
X-Cache-Var-Map
Who
X-Cache-Ttl
X-Nyt-Route
X-Gdpr
X-Origin-Time
X-Traceid
X-Vc
X-NodeID
X-PF-Uncompressing
X-BBC-Origin-Response-Status
X-NC
X-Datadog-Parent-Id
X-Datadog-Trace-Id
X-Datadog-Sampling-Priority
X-API-Version
X-Wa
X-ID
X-Webkit-CSP-Report-Only
X-App
X-Via-Ucdn
Server-ID
X-PJAX-URL
Cluster
X-Minions-Version
X-Varnish-Url
X-Varnish-Ttl
WebServer
X-Refresh
X-Internal-Host
X-Cache-Config
X-VCL-Version
X-LB-ID
Candidate-Md5Url
X-Server-IP
X-Pod-Name
X-Webkit-Csp
Memory
Time
My-App
HostName
X-TIME
Powered-By-ChinaCache
X-Pass-Why
X-CACHE-KEY
X-ZONE
X-Newrelic-Synthetics
Datacenter
Onion-Location
Web-Mar-Region
N-Cache
Geoip-Latitude
X-NewRelic-App-Data
X-LI-Proto
X-Esi
GeoIp-Country-Code
X-Edge-Pop
X-ElasticPress-Query
X-Tb-Optimization-Total-Bytes-Saved
X-CLOUD-TRACE-CONTEXT
Geo-Info
X-OVcl
X-OVcl-Cache
Servername
X-TX-ID
Resin-Trace
X-AB
X-VHOST
X-Akamai-Pragma-Client-IP
Hostname
Cf-Bgj
X-Varnish-Cacheable
X-Origin-Response-Time
X-Backend-TTL
Ohc-File-Size
X-TraceId
Tcn
X-CACHE-AGE
X-Dynatrace
Magicmarker
X-HITS
WWW-Authenticate
X-Tt-Logid
CDN
X-EIG-Tracking-Id
X-Geo
X-Fpc
LB
X-NODE
X-Tid
Redirect-Candidate
Cdn
GeoIP-Country-Code
X-Li-Proto
X-TIM-N
X-Dispatcher-Server
X-MSEdge-Features
X-MSEdge-Flight
X-Varnish-Beresp-TTL
X-Method
X-Correlation-ID
Tracecode
X-Dynatrace-Js-Agent
X-Wix-Viewer-Type
X-Up
Proxy-Connection
DB-Nickname
X-HostName
GeoIP-Latitude
X-Request-Start
X-IP
X-Cache-Date
Pramga
Is-Us
Ssr
Cf-Ipcountry
X-Vcl-Version
Lb
X-Fastly-Backend-Reqs
X-HS-Status
X-Sn-Servicetimems
X-NGINX-Cache
X-Amz-Meta-Cb-Modifiedtime
X-Cdn-Origin
CF-Cached-On
X-Cs
X-CSRF-TOKEN
Sid
Server-Id
X-Node-Id
X-Provided-By
X-COUNTRY
X-APP
W
X-Core-Mission
X-UnsetCookies
X-Nc
X-MG-S
X-Reqid
X-Oracle-Dms-Ecid
X-WA
X-Trv-Group
X-ND-Cache
X-Webkit-Csp-Report-Only
CloudFront-Viewer-Country
X-DynaTrace-JS-Agent
X-ServerName
X-Cache-Expires
Cteonnt-Length
X-Lb-Id
X-FORWARDED-FOR
URI
X-Pjax-Url
Env
WP-Super-Cache
WZWS-RAY
X-VC
X-Via-CDN
X-Check-Cacheable
Ohc-Cache-HIT
CountryCode
X-Cache-Status-Check
X-CCDN-CacheTTL
X-CCDN-Origin-Time
X-Hcs-Proxy-Type
X-Region-Sid
X-Via-PopN
X-Cache-Backend
X-Via-PopH
X-Fastly-Request-Id
X-SERVER-NAME
X-Sucuri-Cache
X-Via-PopV
Xc-Version
X-Moov-Xdn-Version
X-Moov-T
X-IN-APIGATEWAY
X-Pf-Uncompressing
X-ServedByHost
X-IN-APIGATEWAYSSL
X-Pad
X-SN
Mime-Version
X-CUA
Shield-Pop
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-Edge-POP
X-Acquia-Purge-Tags
X-Acquia-Site
X-Cache-ASPX
EpKe-Alive
X-Ig-Push-State
X-Varnish-Authentication
X-Fastly-Cache-Hits
Viewtype
X-Contensis-Viewer-Groups
X-RAMCache
CACHE
Rt-Fastcgi-Cache
X-LiteSpeed-Cache-Control
Server-Ttl
VivaBuild
User-Agent
X-Amz-Meta-Opti
X-Cdn-Request-ID
FSS-Cache
X-SB
X-Action
X-DB
X-DI
Vha6-Origin
X-Dw-Trace-Id
X-Yottaa-OS
X-Swift-Error
X-Webstats-RespID
X-DSS
Ohc-Response-Time
Xet-Cookie
X-DW
X-StackifyID
X-RSL
X-RPS
X-RPM
X-Cdn-Forward
HIT
Hit
On-Server
X-Dispatch
Content-Style-Type
X-Nginx-Upstream-Cache-Status
X-Parent-Response-Time
X-MiniProfiler-Ids
ServerName
Req-ID
Content-Script-Type
X-CF-Powered-By
X-TH-Server
Machine
X-ElasticPress-Search