Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Cf-Request-Id
CF-Cache-Status
Link
Accept-Ranges
CF-RAY
ETag
X-XSS-Protection
Expect-CT
Pragma
X-Powered-By
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
Alt-Svc
X-UA-Compatible
P3P
X-Served-By
X-Xss-Protection
X-Download-Options
X-Timer
X-Request-Id
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
X-Adblock-Key
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-DNS-Prefetch-Control
X-Check
X-Cache-Status
X-Generator
X-Cacheable
Timing-Allow-Origin
P3p
X-Content-Security-Policy
X-Iinfo
Status
Feature-Policy
X-Envoy-Upstream-Service-Time
Content-Encoding
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
X-CDN
X-AspNetMvc-Version
X-Request-ID
Upgrade
X-Via
CF-Ray
X-Ws-Request-Id
Access-Control-Max-Age
Server-Timing
EagleId
Keep-Alive
X-Cache-Group
X-Turbo-Charged-By
Request-Context
X-Age
X-Server-Powered-By
X-Proxy-Cache
X-UA-Device
X-AH-Environment
X-Backend
X-Ua-Compatible
X-Hacker
X-Robots-Tag
Report-To
X-Amz-Request-Id
Host-Header
X-Server
X-Amz-Id-2
X-LiteSpeed-Cache
Grace
X-Dns-Prefetch-Control
X-Rq
X-Nginx-Cache-Status
X-Varnish-Cache
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-WebKit-CSP
X-Page-Speed
X-Vhost
EagleEye-TraceId
X-Amz-Version-Id
X-OneAgent-JS-Injection
X-Pingback
X-Dispatcher
X-Device
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
NEL
X-Cache-Spec
X-Host
X-Server-Id
Cf-Railgun
X-Node
X-Backend-Server
Accept-CH
X-Readtime
X-Akam-SW-Version
Surrogate-Control
Request-Id
X-Response-Time
X-HW
Xkey
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Application-Context
Content-Location
X-Ruxit-JS-Agent
Rating
X-Country
Accept-Ch-Lifetime
Accept-CH-Lifetime
X-B3-TraceId
X-Cache-Lookup
X-Cloud-Trace-Context
X-Trace
X-Url
X-Ac
X-Content-Type
Allow
X-PC
X-TtlSet
X-Vname
X-Varnish-TTL
X-Clacks-Overhead
X-Mod-Pagespeed
Edge-Control
X-FastCGI-Cache
X-ESI
Fastly-Restarts
X-Server-Name
Cache-Tag
X-Rack-Cache
Service-Worker-Allowed
X-VARITI-CCR
X-Element-Page-Cache
Verso
X-Language
X-MS-InvokeApp
X-GitHub-Request-Id
X-Upstream
MS-Author-Via
X-Amz-Rid
X-Vcap-Request-Id
X-Cached
Public-Key-Pins
X-Dw-Request-Base-Id
X-Aws-Lambda-Call-Status
X-Client-IP
X-Abt-Application-Version
X-D2id
X-Cache-TTL
X-Template
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-Cnection
X-Origin-Cache
X-Px
Arr-Disable-Session-Affinity
X-Country-Code
RTSS
Access-Control-Request-Method
X-Goog-Hash
X-Navigation-Version
X-Powered-By-Plesk
X-NF-Request-ID
X-Server-Lifecycle-Phase
X-Instrumentation
X-Kraken-Loop-Name
Accept-Ch
X-Kinja
X-GoogleNews-Bot
X-Kinja-Build
X-Exp-Id
X-Kinja-Server
X-Version
X-Use-Magma
X-Cdn-Fetch
X-Kinja-Revision
X-Exp-Variant
X-Powered-CMS
X-Middleton-Display
X-Sol
Pagespeed
Display
AR-PoweredBy
AR-CACHE
AR-SID
AR-Request-ID
AR-ATIME
X-Amz-Server-Side-Encryption
Response
X-Middleton-Response
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-MSEdge-Ref
X-LLID
X-Edge-Location-Klb
X-Kinsta-Cache
X-Edge
Nginx-Cache
X-TTL
Mrf-Cache-Status
X-B3-TraceId-Primal
MRF-Tech
X-RateLimit-Remaining
X-Protected-By
X-Shield-Request-Id
X-HP-Webp
X-Jurisdiction
X-HP-Trace-Id
X-T
TCN
X-Forwarded-For
X-Buckets
S
X-Content-Security-Policy-Report-Only
Content-MD5
X-Mg-S
X-Id
X-Aspnetmvc-Version
Edge-Cache-Tag
X-Mid
Fastcgi-Cache
X-CST
Realpath
SPIisLatency
SPRequestDuration
X-MCACHE
Front-End-Https
X-Recruiting
X-Request-Processing-Time
X-Request-Received
X-Ttl
Filters
Server-Node
Pinterest-Version
X-Pinterest-Rid
Pinterest-Generated-By
X-Content
X-Ua-Browser
X-Ab
X-DynaTrace
X-Correlation-Id
Server-Name
X-Frontend
X-NWS-LOG-UUID
SPRequestGuid
X-Parallel-Accel
X-SharePointHealthScore
X-HS-Cache-Config
X-HS-Content-Id
X-HS-Hub-Id
Fusion-Content-Source
Fusion-Template-Id
Fusion-Content-Id
Fusion-Deployment-Id
X-Ezoic-Cdn
Fusion-Component-Id
Fusion-Source
X-Ruxit-Js-Agent
X-HS-Combine-CSS
X-Yandex-Sdch-Disable
X-ECACHE
X-Hits
Alternate-Protocol
X-Ser
X-Cache-Key
X-Content-Options
MicrosoftSharePointTeamServices
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-Page-Id
Cleartype
Charset
X-Git-Hash
X-B3-Sampled
Cache-Tags
X-Fastly-Request-Id
Host
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Www-Served-By
X-Server-ID
X-Daa-Tunnel
X-Geo-Country
X-Accel-Expires
X-DIS-Request-ID
X-Amz-Replication-Status
X-Content-Digest
Filterid
X-Amzn-Trace-Id
X-Debug-Info
X-Varnish-Age
X-Forwarded-Proto
X-Az
X-Hostname
X-Activity-Id
X-AppVersion
TP-Cache
TP-L2-Cache
X-FB-Debug
X-VCache
X-Upgrade-Enabled
X-Rid
Access-Control-Allow-Method
X-Origin-Server
X-Grace
X-XRDS-LOCATION
X-Ratelimit-Limit
Cross-Origin-Opener-Policy
X-N
X-WebKit-CSP-Report-Only
X-Nginx-Upstream-Cache-Status
X-LB-Cache
X-F-Cache
ServerID
X-Mobile-URL
X-Aspnet-Duration-Ms
X-Flags
X-Request-Guid
X-Route-Name
X-Is-Crawler
X-Providence-Cookie
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-Whom
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Metageneration
X-Varnish-Grace
Viewport
X-Tb
X-App-Environment
X-TT
Payment
X-FW-Server
X-FW-Serve
X-FW-Static
X-FW-Type
X-Origin-Upstream-Status
X-App-Server
X-FW-Hash
X-FW-Dynamic
DC
X-Distributor
Paypal-Debug-Id
X-Seen-By
Node
X-Type
X-User-Agent
Fastcgi-Useragent
X-NGENIX-Cache
X-Cache-Control
Accept-Charset
Country
X-Logged-In
X-Oneagent-Js-Injection
X-Microsite
X-Request-Handler-Origin-Region
X-Wix-Request-Id
X-Cache-Rule
X-Litespeed-Cache
X-Cache-Age
Version
X-Via-JSL
X-Webkit-CSP
X-DataDome
Referer-Policy
X-Varnish-Backend
X-Erf-Bev-Bev-Is-Generated
X-Drupal-Cache-Tags
X-Erf-Bev-Bev
X-Browser-Type
X-Load-Cache
X-Node-Name
X-Cluster-Name
Refresh
X-Contextid
X-Signature
X-B-Cache
X-Mobile
Cache-Status
X-Tec-Api-Origin
X-Original-Request-Id
X-Tec-Api-Root
X-Tec-Api-Version
SD-X-WS
Amp-Access-Control-Allow-Source-Origin
X-Response-Served-From
X-IPLB-Instance
X-Rendered-As
X-Is-Bot
X-Cache-Expired-At
Access-Control-Request-Headers
X-Real-IP
X-Page-View
X-Cache-Action
X-Cacheable-TTL
X-Proxy-Cache-Status
X-RemovedCookies
X-ProcessESI
X-Jobs
X-Vgn-Hpd-Reason
X-UUID
X-Debug
X-Instance
X-Proxy
X-Revision
X-Yottaa-Optimizations
X-Rule
X-Yottaa-Metrics
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-Framework
Akamai-GRN
X-Drupal-Cache-Contexts
X-Fastly-Request-ID
NGB
Surrogate-Key
X-Device-Type
X-Cache-Time
X-B
X-Debug-IsPreview
X-Debug-IsConnected
X-G
X-FW-Version
X-Fastcgi-Cache
CF-IPCountry
X-Air-Trace-Id
X-Air-Hostname
X-Air-Source
DynaTrace
X-TEC-API-ROOT
X-TEC-API-VERSION
X-Ratelimit-Reset
X-TEC-API-ORIGIN
Liferay-Portal
SID
X-PressLabs-Stats
X-Azure-Ref
Healthy
X-Oracle-Dms-Rid
X-Oracle-Dms-Ecid
X-XRDS-Location
X-Presslabs-Stats
Frame-Options
X-Ms-Version
GEO-INFO
X-Ms-Request-Id
X-Source
Ms-Operation-Id
X-CDN-Forward
X-Nginx-Cache
X-RTag
MS-CV
Count-Hit
X-Cache-Operation
Uber-Trace-Id
X-APP-VERSION
X-Accel-Buffering
X-Tumblr-User
X-Cache-Hit
X-Tumblr-Pixel-1
X-EdgeConnect-Cache-Status
Countrycode
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Environment-Context
X-L-Path
X-Varnish-Server
Xserver
X-Zen-Fury
X-Region
X-Mode
X-Backend-Name
Ec-Rule-Version
Backend
Cross-Origin-Window-Policy
X-Servername
X-Forwarded-Host
X-IPS-LoggedIn
X-Content-Powered-By
X-Cache-NGX
Section-Io-Cache
X-JoinUs
X-Cache-TTL-Remaining
X-Cache-Type
X-Detected-As
X-SaId
Meta-Geo
X-RN-RSRV
X-UPSTREAM-Address
X-ShardId
X-ShopId
X-Shopify-Stage
X-Varnish-Beresp-Grace
Eomportal-Instance
X-Human
X-Hosted-By
X-Generation-Time
X-Extlb
Decoy-Debug-TTL
X-Cache-Server
X-Sorting-Hat-ShopId
X-Routing-Service
Decoy-Debug-Status
X-Sql-Count
X-Redis-Cache
Protected
X-Alternate-Cache-Key
X-Rewrite-Enabled
X-Sql-Duration-Ms
Decoy-Debug-Key
X-Zipkin-Id
X-Cache-Grace
X-Proxied
Country-Code
X-Sorting-Hat-PodId
X-Origin-Date
Url
Mn-Server-Ip
X-Via-Fastly
Fastly-SSL
X-PHP-Backend
X-PERF
X-FB-TRIP-ID
X-Uri
Cache-Name
X-Microcachable
Apigw-Requestid
X-Tid
X-Storage
X-Status
X-No-Session
X-UA-Device-Type
X-NCache
X-Soup
X-ApacheServer
X-Site-Version
Webcakes-App-Version
Webcakes-Region
Webcakes-App-Name
TWC-Device-Class
Property-Id
Cache-Tv-Group
DB-Nickname
Selected-Fe
TWC-Connection-Speed
TWC-Locale-Group
TWC-GeoIP-LatLong
TWC-GeoIP-Country
TWC-Privacy
X-PCL
X-NewRelic-App-Data
X-ProxyCache-Status
X-ProxyCache-Key
X-Web-Node
X-Say-Cacheable
X-Timing-Wait
X-SayCDN-TTL
X-Say-TTL
X-ServerID
X-Proxy-Build
X-Origin-Hint
X-BYPASS-REASON
X-Format
X-Server-W
X-OCL
X-NYM-Debug-Backend
X-Varnishpool
X-Cluster-Node
X-Access
X-R9-Blue-Green-Version
X-Cache-Host
X-Akamai-Edgescape
X-Section
X-Debug-Cache
X-Hl-Ver
X-Adobe-Content
X-Pubstack
OT-Force-Account-Verify
X-Adobe-Loc
Azure-RegionName
X-Content-Age
Azure-SiteName
Azure-InstanceId
Azure-Version
Azure-SlotName
X-Be
X-RateLimit-Limit
X-Hyper-Cache
Content-Secure-Policy
X-LSADC-Cache
SRV
X-Ua
CDN-RequestId
CDN-RequestCountryCode
CDN-Uid
X-Azure-Ref-OriginShield
X-Generated-By
CDN-CachedAt
CDN-EdgeStorageId
CDN-PullZone
CDN-Cache
Source
Content-Disposition
X-Webkit-Csp
X-Cached-By
X-TIME
LB
X-Unique-Id
X-Dc
X-Trace-Id
Cache
X-SRV
X-Nginx-Cache-Key
WPO-Cache-Status
WPO-Cache-Message
X-Bc-Bl
X-Ratelimit-Remaining
X-App-Version
X-LAGOON
X-HTML-Minification-Powered-By
Retry-After
Cache-Hits
X-Auto-Login
X-Varnish-Hits
X-Loop
X-Amz-Meta-S3cmd-Attrs
X-Origin-CC
X-TT-LOGID
X-Origin-TTL
X-Akamai-Transformed
X-Varnish-Hostname
X-TNCMS
Xet-Cookie
Onion-Location
X-GEO
X-ECache
X-Platform-Server
Mime-Version
X-S-Maxage
X-Cache-Var-Map
Web-Mar-Node
X-Tumblr-Pixel-2
X-Tumblr-Pixel-3
X-Xfnlog-Site
X-Cdn
X-Cache-Var
HostName
X-Proto
X-Cache-Tags
X-Cache-Remote
X-Time
Webserver
X-CSRF-Token
X-Edge-Location
Upgrade-Insecure-Requests
X-Varnish-Cache-Hits
X-Tenant
X-Request-Time
ServedBy
X-AWS-Id
X-LJ-Flow-ID
X-VWS-Id
X-AOL-HN
N-Cache
X-Time-Microsecs
X-EC-Lua
X-GG-Cache-Date
X-Endurance-Cache-Level
CloudFront-Viewer-Country
X-Mg-Request-UUID
X-M-Reqid
X-Request-Host
X-M-Log
X-Qnm-Cache
X-Amzn-RequestId
From-Origin
X-Amz-Apigw-Id
X-FireWall-Port
WP-Super-Cache
X-Via-NSCOPI
X-B3-SpanId
X-CF-Lambda-Version
Pramga
X-Processor
BehaviorPad-Version
X-Forwarded-Path
X-Block-Status
Redirect-Candidate
X-CF-Lambda-Fn
Rendered-Blocks
X-ARC
X-RCS-CacheZone
CDCHOST
X-B-Cookie
X-Application
X-Conf
X-External-Request-Id
DCR-Decision-By
X-PBS-Appsvrname
L
X-Cache-NE
Meta-Geo-Continent
X-Orig-Expires
X-Ig-Push-State
X-ND-Cache
Fastcgi-X-Cache-Version
X-Hnp-Log
A
X-NAPM-TraceId
Mobile-Detection-Method
X-Gen-Mode
Odigeo-Trace-Id
X-PAYTM-SRV-ID
Expiry
X-Ftr-Request-Id
X-Cache-Date
Sslversion
DSUID
DCR-Processing-Time-Ms
X-Origin-Response-Time
Origin
Xc-Version
X-Slack-Backend
X-SRCache-Key
X-Vdms-Path
X-Correlation-ID
X-CACHE-KEY
User-Cache-Control
X-Developer
X-Session-Fingerprint
X-Labrador-Cache-Channel
X-Destination
X-Aed
X-SVT-ORM-RULES
X-PHP-Host
X-TIM-N
X-A-Dgt
X-A-Dcw
X-A-Wwc
X-A-Dam
X-SVT-ORM-VERSION
X-A
X-A-Ccd
X-Vdms-Version
X-Shop-Environment
X-S
X-Vtex-Processado-Em
X-S-Cookie
Nel
X-SD-PageType
Surrogated-Key
X-Vtex-Remote-Cache
X-D
X-Rojux
X-ScT
X-VG-WebCache
X-Connection-Hash
X-MP-GENERATED-AT
X-Locale
X-Handled-By
Wxu-Next-Region
X-Device-Os
Wxu-Next-Hostname
X-Aicache-OS
Gh-Request-Id
Host-ID
X-HN
X-Core-Mission
Fastcgi-Cache-TTL
X-Accel-Expires-Debug
X-Epic-Correlation-Id
Wxu-Next-Commit
X-Hash
X-Fastly-Cache
Origin-CC
X-Ckpd-Fst-Backend
Ssr
X-Cache-Bucket
Origin-EX
X-Forwarded-Site
PFcat
Traceparent
Svr
V-Age
Release
X-Fetched-On
X-Cache-Info
State
CacheControlHeader
X-Date
X-Gdpr
X-Cdn-Srv
X-Cluster
X-Geo-Header
X-Policy
X-Skip-Cache
X-Origin-Expires
X-Storefront-Renderer-Rendered
X-Sucuri-Cache
X-Mvc-Supplant-Cachable
X-Sucuri-ID
X-Origin-Time
X-Planisys-CDN-Cache
X-Scheme
X-Rocket-Nginx-Serving-Static
X-Served-From
X-Server-IP
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
AKAMAI
X-Nyt-Route
Arc-Country
X-Varnish-Beresp-Status
X-Webstats-RespID
X-Men
X-VServer
Server-Info
X-Location
X-V-Cache
X-VarnishDD-TTL
X-VC-Cache
X-NWS-UUID-VERIFY
AMP-Access-Control-Allow-Source-Origin
Fastly-Drupal-Html
X-Core-Value
X-Viewer-Country
Thinkindot-CacheControl
X-Rocket-Build-Number
X-BBC-Edge-Cache-Status
X-Request-Start
X-ATG-Version
TDXMobile
Thinkindot-Control
Thinkindot-CacheControl-Type
X-VG-TLSProxy
X-Developers
X-Sigma
X-Adobe-Source
HA-Ipaddr
X-TH-Server
X-Thanos
X-TrackingId
X-Thinkindot-L3
Web-Mar-Region
X-CGP
Vix-Hermes-Req-Id
X-Sigma-Backend
X-Sn-Servicetimems
X-Backend-State
We-Hiring
L5d-Success-Class
True-Client-Country-4JS
X-Envoy-Decorator-Operation
X-Node-Id
Fastly-GeoIP-CountryCode
X-HS-Content-Campaign-Id
Apple-News-Services-Handled
X-NodeID
X-UnsetCookies
X-GeoIP-City
X-RateLimit-Remaining-Second
X-Cache-Enabled
X-Cache-Debug
Apple-News-Services-Host
Apple-News-Services-Parsed-Url
Cmsid
X-Li-Fabric
X-Li-Pop
X-LI-UUID
Cmstype
X-Level-Front-Cache
X-Irp-Debug
Apple-News-Services-Request-Url
X-Request-URI
Locid
Machine
Ha-Gx-Prefs
X-Eu-Site
X-RateLimit-Limit-Second
X-Proxy-Upstream
X-Region-Sid
Req-Svc-Chain
X-Fastly-Backend
X-Csrf-Jwt
X-Bip
X-Cdn-Origin
X-Cache-Config
X-Old-Content-Length
X-Generated-On
Mail-Subject
X-Reqid
X-Magnolia-Registration
X-Platform
X-Owner
X-Gamma-Serve
X-GeoIP
X-Zone
Environment
X-Response-By
X-Gzip
X-Pod-Name
X-Qloud-Router
X-Has-Esi
X-NU-AKA-ACS-Version
X-JWT-State
X-Is-Gdpr
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Datadog-Trace-Id
X-Datadog-Sampling-Priority
X-Datadog-Parent-Id
X-Loc
X-Esi-Check
X-FC-Vary-Parameters
X-Req
X-Worker
X-Branch-Name
NGX
Server-Host
Cf-Device-Type
X-Cache-Id
Memcached
Fastly-SIE
Fastly-SWR
X-Amzn-Remapped-Content-Length
X-Xrds-Location
X-DefElseHash
X-Varnish-CookieINHashed-On
X-Varnish-Remaining-TTL
X-DefHash
X-Varnish-CookieHashed-On
X-DPWN-IS-SECURE
X-Variation
X-Datadome
Platform
X-Tx-Id
X-Mvc-Supplant-OutputCached
Adler-Geo
Is-Eu
X-Backend-TTL
NM-Fastcgi-Cache
X-Origin
X-Ua-Device
X-GeoIP-Country-Code
X-NC
X-GeoIP-Region-Code
X-CLOUD-TRACE-CONTEXT
X-CS
X-API-Version
X-Varnish-Beresp-Ttl
Pics-Label
X-Up
Candidate-Md5Url
X-LB-ID
Datacenter
X-Generated-In
X-Vc
X-TraceId
CDN
S-Rt
Magicmarker
Ms-Author-Via
X-Trace-ID
X-Tb-Optimization-Total-Bytes-Saved
X-Tt-Logid
X-DynaTrace-JS-Agent
X-Restarts
Env
X-LB-NoCache
Kp-EeAlive
NtCoent-Length
WWW-Authenticate
On-Server
X-Edge-Pop
X-Via-Popv
X-Via-Popn
WebServer
X-Varnish-Ttl
X-Via-Poph
Time
GeoIp-Country-Code
Esi-Enabled
Memory
X-Optimistic-Header
X-DB
X-Http-Reason
X-TA-CDN-Provider
X-Refresh
X-Varnish-Beresp-TTL
X-DI
X-Akamai-Request-ID2
X-Action
X-RPM
X-RPS
X-DSS
X-RSL
X-DW
Edge-Cache
X-Wix-Viewer-Type
X-Cache-Backend
X-Service
X-Dynatrace
X-DC
X-CacheTTL
C-Via
X-Cs
X-Servedbyhost
X-Esi
X-Cache-PHP
X-Newrelic-Synthetics
X-Parent-Response-Time
X-Srv
X-Unique-ID
X-MSEdge-Flight
X-MSEdge-Features
X-Minions-Version
X-TX-ID
X-ZONE
Accept-Language
X-Render-Time
X-HA-Backend
Server-ID
X-Cache-Status-Check
X-VCL-Version
Locale
X-Urbn-Context-Path
X-Urbn-Site-Id
X-Cache-Ttl
X-Li-Proto
X-User
X-App
X-Ec-Fail
X-FPC
X-Ec-GeoHdr
Proxy-Connection
X-B3-Spanid
X-URL
Server-Id
X-Webkit-Csp-Report-Only
X-Info
X-AIR-PT
X-Fpc
Test
X-LI-Proto
X-Pass-Why
X-Traceid
X-LiteSpeed-Cache-Control
X-Clientip
X-Vcl-Version
X-Webkit-CSP-Report-Only
X-NODE
HIT
X-Oss-Request-Id
Geo-Info
UCS
Cache-Host
X-AK-Request-ID
X-Oss-Server-Time
X-Oss-Hash-Crc64ecma
X-Oss-Storage-Class
X-Oss-Object-Type
Cdncip
Tcn
Cdnsip
Cluster
X-WADP-Cache
S-Cnection
My-App
Geoip-Latitude
M-TraceId
X-Fmm-Version
X-Clara-WADP
X-CSRF-TOKEN
X-CUA
X-LiteSpeed-Tag
X-Var-Ttl
Tracecode
X-Ha-Backend
Fastly-Drupal-HTML
Resin-Trace
X-HostName
Cf-Int-Pingora-Origin-Digest
Hostname
X-ID
T-Server
Fastly-Backend-Name
X-From
X-ServedByHost
Lfy
X-Micro-Cache
User-Agent
X-Release
X-BBC-Origin-Response-Status
GeoIP-Country-Code
X-Pad
X-Backend-Host
Ohc-File-Size
X-Fragments
Lang
X-Via-PopV
X-B3-Traceid
Section-Io-Id
X-RAMCache
X-Via-PopH
Section-Io-Origin-Status
Hit
X-Via-PopN
Section-Origin-Responded
X-Mcache
Section-Io-Origin-Time-Seconds
X-Geo
X-NGINX-Cache
DataCenter
Lb
X-Dynatrace-Js-Agent
X-Cdn-Forward
X-BCube-Filmed-By
MIME-Version
X-Check-Cacheable
X-APP
X-Edge-POP
X-ElasticPress-Query
ENV
X-WP-CF-Super-Cache-Cache-Control
X-WP-CF-Super-Cache
Target-Params
Load-Balancing
X-HS-Status
X-Edge-Cache
X-Api-Version
CPC-Cache
X-UP
Cache-Key
X-WA
Servername
X-Amz-Meta-Cb-Modifiedtime
EpKe-Alive
X-ServerName
VNS-Cache
Path
VNS-Age
URI
X-WA-Info
X-Fastly-Backend-Reqs
CPC-Age
Uri
X-Ucs
X-VC
X-ES-SERVER
X-Httpd
X-Proxy-Cache-Info
X-Fastly-Cache-Hits
FSS-Cache
X-GoCache-CacheStatus
X-Wikidot-Backend
X-Wikidot-Static-Cache
PICS-Label
X-Lb-Nocache
X-TRACE-ID
X-Lb-Id
X-Cdn-Request-ID
X-Cms-Context
X-Akamai-ERPolicy
Pagetype
X-B3-ParentSpanId
X-Akamai-ERRuleID
Sid
ServerName
Permissions-Policy
Shield-Pop
Ohc-Cache-HIT
X-RateLimit-Reset
WZWS-RAY
Cteonnt-Length
Cneonction
Cdn
X-PJAX-URL
X-Nc
X-Provided-By
X-Dw-Trace-Id
Producers
X-Cache-CFC
Server-Ttl
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-Acquia-Purge-Tags
X-Acquia-Site
X-Pool
X-SB
X-Newrelic-App-Data
X-Apw-Access-Object
X-Apw-Access-Action
X-Apw-Access-Token
X-Apw-Hits
X-Cache-ASPX
X-Vcache
X-Swift-Error
Srv
X-Akamai-Pragma-Client-IP
X-Via-Ucdn
Cf-Ipcountry
X-Snapshot-Date
X-Contensis-Viewer-Groups
CF-Cached-On
MD5-Digest
X-Yottaa-OS
X-CCDN-CacheTTL
X-CCDN-Origin-Time
Vha6-Origin
X-Hcs-Proxy-Type
X-Cache-Ngx
X-Air-Pt
X-Platform-Cluster
X-Last-Modified
X-Platform-Processor
X-Platform-Router
Sever-Int
X-SIPLIST1
X-Udemy-Cache-App-Namespace
Server-Ext
Server-Hostname
IsBot
X-Http-Duration-Ms
X-UA
X-CacheKey
Ngx
X-Sentry-ID
CountryCode
Req-ID
X-Logging-Id
X-Varnish-Authentication
X-B3-Parentspanid
W
X-Miniprofiler-Ids
X-Te-Duration-Ms
X-Http-Count
X-Te-Count
X-VG-WebServer