Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Link
Cf-Request-Id
CF-Cache-Status
Accept-Ranges
CF-RAY
ETag
Expect-CT
Pragma
X-Powered-By
X-XSS-Protection
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
X-UA-Compatible
Alt-Svc
P3P
X-Served-By
X-Xss-Protection
X-Download-Options
X-Timer
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
X-Adblock-Key
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-DNS-Prefetch-Control
X-Check
X-Cache-Status
X-Generator
X-Cacheable
Timing-Allow-Origin
X-Request-ID
P3p
X-Content-Security-Policy
X-Iinfo
Status
Feature-Policy
X-Envoy-Upstream-Service-Time
Content-Encoding
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
X-CDN
X-AspNetMvc-Version
Upgrade
X-Via
CF-Ray
Access-Control-Max-Age
X-Ws-Request-Id
Server-Timing
EagleId
Keep-Alive
X-Cache-Group
X-Turbo-Charged-By
Request-Context
X-Age
X-Server-Powered-By
X-Proxy-Cache
X-UA-Device
X-AH-Environment
X-Backend
X-Hacker
X-Robots-Tag
Report-To
X-Amz-Request-Id
Host-Header
X-LiteSpeed-Cache
X-Server
X-Amz-Id-2
Grace
X-Rq
X-Nginx-Cache-Status
X-Varnish-Cache
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-Dns-Prefetch-Control
X-WebKit-CSP
X-Page-Speed
X-Vhost
X-Ua-Compatible
EagleEye-TraceId
X-Amz-Version-Id
X-OneAgent-JS-Injection
X-Pingback
X-Dispatcher
X-Device
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Cache-Spec
NEL
X-Server-Id
X-Host
X-Backend-Server
X-Node
Cf-Railgun
X-Readtime
Accept-CH
X-Akam-SW-Version
Surrogate-Control
Request-Id
X-Response-Time
X-HW
X-Language
Xkey
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
Accept-Ch-Lifetime
X-Template
X-Application-Context
Content-Location
Rating
X-Ruxit-JS-Agent
X-Country
X-B3-TraceId
X-Cloud-Trace-Context
X-Cache-Lookup
X-Buckets
X-Ac
X-Url
X-Content-Type
Allow
X-Trace
X-PC
X-TtlSet
X-Vname
Accept-CH-Lifetime
X-Mod-Pagespeed
X-Varnish-TTL
X-Clacks-Overhead
Edge-Control
Cache-Tag
X-ESI
X-FastCGI-Cache
Fastly-Restarts
X-Rack-Cache
X-Server-Name
Service-Worker-Allowed
X-VARITI-CCR
X-Element-Page-Cache
Verso
X-MS-InvokeApp
X-GitHub-Request-Id
X-Upstream
X-Amz-Rid
Public-Key-Pins
MS-Author-Via
X-Vcap-Request-Id
X-Dw-Request-Base-Id
X-Cached
X-D2id
X-Client-IP
X-Abt-Application-Version
X-Origin-Cache
X-Cache-TTL
Arr-Disable-Session-Affinity
X-Cnection
Accept-Ch
X-ORACLE-DMS-ECID
X-Country-Code
X-ORACLE-DMS-RID
X-Px
X-Powered-By-Plesk
X-Goog-Hash
X-Aws-Lambda-Call-Status
Access-Control-Request-Method
X-NF-Request-ID
X-Navigation-Version
X-Server-Lifecycle-Phase
X-Instrumentation
X-Version
X-Kraken-Loop-Name
RTSS
X-Amz-Server-Side-Encryption
X-Powered-CMS
X-Sol
X-Middleton-Display
Pagespeed
Display
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Middleton-Response
Response
X-Use-Magma
X-Kinja-Revision
X-Kinja-Server
X-Cdn-Fetch
X-Exp-Variant
X-Exp-Id
X-GoogleNews-Bot
X-Kinja-Build
X-Kinja
X-MSEdge-Ref
X-LLID
X-Edge
X-Kinsta-Cache
X-Edge-Location-Klb
X-TTL
Nginx-Cache
AR-PoweredBy
AR-CACHE
AR-Request-ID
AR-ATIME
AR-SID
Mrf-Cache-Status
MRF-Tech
X-B3-TraceId-Primal
X-Shield-Request-Id
S
X-T
Content-MD5
X-HP-Trace-Id
X-Jurisdiction
X-HP-Webp
X-CST
X-Protected-By
X-RateLimit-Remaining
X-Forwarded-For
TCN
X-Content-Security-Policy-Report-Only
X-Aspnetmvc-Version
X-Mg-S
X-Id
X-Mid
Fastcgi-Cache
X-MCACHE
Realpath
Edge-Cache-Tag
SPRequestDuration
SPIisLatency
Front-End-Https
X-Parallel-Accel
X-Recruiting
X-Request-Processing-Time
X-Request-Received
Filters
X-Correlation-Id
Fusion-Template-Id
Fusion-Content-Id
Fusion-Deployment-Id
Fusion-Source
Server-Node
Fusion-Component-Id
Fusion-Content-Source
X-Pinterest-Rid
Pinterest-Version
Pinterest-Generated-By
X-Content
X-Ua-Browser
X-DynaTrace
X-Ab
SPRequestGuid
X-Ruxit-Js-Agent
X-SharePointHealthScore
X-Ezoic-Cdn
X-Ttl
X-ECACHE
Server-Name
Alternate-Protocol
X-NWS-LOG-UUID
X-Frontend
X-HS-Content-Id
X-HS-Combine-CSS
X-HS-Hub-Id
X-HS-Cache-Config
X-Accel-Expires
X-Hits
X-Yandex-Sdch-Disable
X-Tt-Trace-Host
X-Content-Options
X-Tt-Trace-Tag
X-Cache-Key
MicrosoftSharePointTeamServices
Cache-Tags
X-Page-Id
Host
X-Git-Hash
X-Kong-Upstream-Latency
Charset
Cleartype
X-Kong-Proxy-Latency
X-Www-Served-By
X-B3-Sampled
X-Geo-Country
X-Ser
X-Content-Digest
X-Amz-Replication-Status
TP-Cache
TP-L2-Cache
X-Forwarded-Proto
Filterid
X-XRDS-LOCATION
X-Amzn-Trace-Id
X-Varnish-Age
X-VCache
X-Az
X-Hostname
X-Daa-Tunnel
X-Activity-Id
X-AppVersion
X-DIS-Request-ID
X-Debug-Info
X-Rid
X-Fastly-Request-Id
X-Upgrade-Enabled
X-Origin-Server
Access-Control-Allow-Method
X-Grace
X-Origin-Upstream-Status
X-Microsite
X-N
X-Request-Handler-Origin-Region
X-LB-Cache
X-FB-Debug
X-Nginx-Upstream-Cache-Status
X-WebKit-CSP-Report-Only
ServerID
X-Mobile-URL
X-Request-Guid
X-Is-Crawler
X-Route-Name
X-Aspnet-Duration-Ms
X-Providence-Cookie
X-Flags
X-Whom
X-F-Cache
X-TT
X-Server-ID
X-Goog-Storage-Class
X-Goog-Generation
Cross-Origin-Opener-Policy
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-NGENIX-Cache
X-GUploader-UploadID
X-App-Server
X-Varnish-Grace
X-Tb
X-App-Environment
X-Distributor
Viewport
Payment
X-FW-Serve
X-FW-Server
X-FW-Type
X-FW-Static
X-FW-Hash
X-FW-Dynamic
Node
Paypal-Debug-Id
DC
X-Cache-Control
X-Oneagent-Js-Injection
X-PressLabs-Stats
X-Logged-In
X-Seen-By
X-Type
Fastcgi-Useragent
X-User-Agent
X-Cache-Age
X-Fastcgi-Cache
Accept-Charset
Country
X-Webkit-CSP
X-Fastly-Request-ID
X-Cache-Rule
X-Varnish-Backend
X-Load-Cache
Version
X-Erf-Bev-Bev
X-Wix-Request-Id
X-Browser-Type
X-Erf-Bev-Bev-Is-Generated
X-Node-Name
X-Cache-Action
X-IPLB-Instance
Refresh
X-Via-JSL
Referer-Policy
X-Response-Served-From
X-Vgn-Hpd-Reason
X-Original-Request-Id
SD-X-WS
Access-Control-Request-Headers
X-Drupal-Cache-Tags
Cache-Status
X-Page-View
X-Jobs
X-DataDome
X-Proxy-Cache-Status
X-Cacheable-TTL
X-Is-Bot
X-Rendered-As
X-UUID
X-Real-IP
VIX-Pulpo-Node
NGB
X-B-Cache
X-Tec-Api-Version
VIX-Pulpo-Upstream-Status
X-Signature
X-Revision
X-RemovedCookies
X-ProcessESI
X-Tec-Api-Root
X-Debug
X-Cluster-Name
X-Contextid
X-Cache-Expired-At
X-B
X-Ratelimit-Limit
X-Tec-Api-Origin
Liferay-Portal
X-Mobile
X-Drupal-Cache-Contexts
X-Rule
X-Yottaa-Optimizations
X-Yottaa-Metrics
DynaTrace
X-Proxy
X-Device-Type
X-Cache-Time
Surrogate-Key
X-Debug-IsConnected
X-Debug-IsPreview
X-Instance
X-Framework
Akamai-GRN
X-G
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-FW-Version
Healthy
Amp-Access-Control-Allow-Source-Origin
X-Azure-Ref
SID
X-Air-Trace-Id
X-Air-Source
X-Air-Hostname
X-Oracle-Dms-Rid
X-Oracle-Dms-Ecid
X-Source
CF-IPCountry
X-Ms-Request-Id
X-Ms-Version
Frame-Options
X-RTag
MS-CV
X-Cache-Hit
Ms-Operation-Id
X-Nginx-Cache
Section-Io-Cache
X-CDN-Forward
Countrycode
X-Tumblr-Pixel-1
X-Tumblr-User
X-Environment-Context
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-L-Path
X-XRDS-Location
Xserver
X-Varnish-Server
X-RateLimit-Limit
Count-Hit
X-Cache-Operation
X-Region
Uber-Trace-Id
X-EdgeConnect-Cache-Status
X-Servername
X-APP-VERSION
X-Forwarded-Host
X-Content-Powered-By
X-Backend-Name
X-Litespeed-Cache
X-Mode
X-Accel-Buffering
X-IPS-LoggedIn
GEO-INFO
Cross-Origin-Window-Policy
Backend
X-Adobe-Content
X-Adobe-Loc
X-Zen-Fury
Ec-Rule-Version
X-Shopify-Stage
X-Ratelimit-Reset
X-ShopId
Meta-Geo
X-JoinUs
X-Alternate-Cache-Key
X-Sorting-Hat-ShopId
X-RN-RSRV
X-SaId
X-ShardId
X-Sorting-Hat-PodId
X-Detected-As
X-UPSTREAM-Address
Eomportal-Instance
X-Debug-Cache
X-Generation-Time
X-Microcachable
X-Sql-Count
X-Cache-TTL-Remaining
Country-Code
X-Human
X-Uri
X-Sql-Duration-Ms
X-Redis-Cache
X-Cache-Type
X-Hosted-By
X-Cache-Grace
X-Cache-Server
X-Varnish-Beresp-Grace
Apigw-Requestid
Mn-Server-Ip
X-No-Session
X-Tid
X-UA-Device-Type
X-NCache
X-Site-Version
Url
X-BYPASS-REASON
X-ProxyCache-Status
Cache-Name
X-Via-Fastly
X-Status
X-PHP-Backend
Cache-Tv-Group
X-Storage
Decoy-Debug-Key
X-ProxyCache-Key
X-ServerID
Decoy-Debug-TTL
X-FB-TRIP-ID
X-Cache-Host
Decoy-Debug-Status
X-Origin-Date
Protected
Fastly-SSL
X-OCL
Property-Id
X-Proxy-Build
X-Say-TTL
X-Timing-Wait
X-SayCDN-TTL
DB-Nickname
X-Origin-Hint
X-Say-Cacheable
X-R9-Blue-Green-Version
X-PCL
X-Format
X-Web-Node
X-Akamai-Edgescape
TWC-GeoIP-Country
TWC-Device-Class
TWC-Connection-Speed
TWC-GeoIP-LatLong
TWC-Locale-Group
Webcakes-Region
Webcakes-App-Version
TWC-Privacy
Selected-Fe
Webcakes-App-Name
X-Time
X-Hl-Ver
X-Azure-Ref-OriginShield
X-Extlb
X-ApacheServer
X-Cache-NGX
X-Access
X-NYM-Debug-Backend
X-PERF
X-Server-W
X-Varnishpool
X-Rewrite-Enabled
X-Section
X-Routing-Service
X-Proxied
X-Pubstack
OT-Force-Account-Verify
X-Zipkin-Id
Azure-SiteName
Azure-SlotName
Azure-Version
Azure-InstanceId
Azure-RegionName
Content-Secure-Policy
X-Be
X-Cluster-Node
X-Soup
X-LSADC-Cache
Source
X-Ua
X-App-Version
X-Webkit-Csp
X-Content-Age
X-HTML-Minification-Powered-By
X-NewRelic-App-Data
CDN-RequestCountryCode
CDN-EdgeStorageId
Content-Disposition
X-Cache-Var
X-Cache-Var-Map
X-Cached-By
CDN-RequestId
CDN-Cache
CDN-PullZone
CDN-CachedAt
CDN-Uid
X-TT-LOGID
X-Dc
X-Amz-Meta-S3cmd-Attrs
X-LAGOON
X-SRV
X-Generated-By
SRV
Cache
X-Hyper-Cache
X-Bc-Bl
X-Varnish-Hostname
X-TNCMS
X-Loop
X-Varnish-Hits
X-Unique-Id
Webserver
Onion-Location
X-Presslabs-Stats
X-S-Maxage
X-Nginx-Cache-Key
X-Auto-Login
Retry-After
X-Tumblr-Pixel-2
X-Tumblr-Pixel-3
X-Origin-CC
X-Trace-Id
Cache-Hits
X-Origin-TTL
Web-Mar-Node
Xet-Cookie
X-Proto
X-Cdn
LB
X-Akamai-Transformed
X-Tenant
X-Qnm-Cache
X-M-Reqid
X-Endurance-Cache-Level
X-GEO
X-Time-Microsecs
X-M-Log
X-Platform-Server
X-CSRF-Token
X-Edge-Location
X-GG-Cache-Date
X-CACHE-KEY
X-VWS-Id
X-AWS-Id
X-LJ-Flow-ID
HostName
CloudFront-Viewer-Country
X-B3-SpanId
Mime-Version
X-Mg-Request-UUID
X-ECache
X-Amz-Apigw-Id
AMP-Access-Control-Allow-Source-Origin
X-Labrador-Cache-Channel
N-Cache
X-Xfnlog-Site
X-PHP-Host
X-Amzn-RequestId
X-Cache-Tags
WPO-Cache-Message
WPO-Cache-Status
Upgrade-Insecure-Requests
X-Storefront-Renderer-Rendered
X-Cache-Remote
X-Varnish-Cache-Hits
X-RCS-CacheZone
X-Origin-Response-Time
X-Request-Time
ServedBy
X-Locale
X-Handled-By
Nel
X-AOL-HN
X-Adobe-Source
X-Hnp-Log
User-Cache-Control
Redirect-Candidate
X-A-Dam
X-A-Dcw
X-A-Ccd
X-A
X-NAPM-TraceId
State
X-A-Dgt
X-A-Wwc
X-Aed
Surrogated-Key
Pramga
Rendered-Blocks
X-ND-Cache
X-Ig-Push-State
X-Fastly-Cache
Mobile-Detection-Method
Meta-Geo-Continent
X-Connection-Hash
X-B-Cookie
Odigeo-Trace-Id
Fastcgi-X-Cache-Version
X-Block-Status
X-Conf
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-Ckpd-Fst-Backend
X-Cluster
X-Cache-Date
X-Cache-NE
Expiry
X-ARC
X-External-Request-Id
BehaviorPad-Version
X-Forwarded-Path
A
X-Gen-Mode
X-Ftr-Request-Id
X-Developer
X-Destination
DSUID
X-D
DCR-Processing-Time-Ms
Origin
DCR-Decision-By
X-Application
X-Via-NSCOPI
X-SRCache-Key
X-Slack-Backend
X-Request-Host
X-S-Cookie
X-SVT-ORM-VERSION
X-V-Cache
X-TIM-N
X-Processor
X-Shop-Environment
X-Rojux
X-Vtex-Remote-Cache
X-SD-PageType
X-ScT
Xc-Version
X-S
X-Vtex-Processado-Em
X-Session-Fingerprint
X-Planisys-CDN-TTL
X-SVT-ORM-RULES
X-PBS-Appsvrname
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
X-VC-Cache
X-Vdms-Version
X-Orig-Expires
X-VG-WebCache
X-Vdms-Path
X-PAYTM-SRV-ID
X-TIME
Server-Info
Environment
X-Reqid
X-MP-GENERATED-AT
X-ATG-Version
Wxu-Next-Commit
X-Core-Value
V-Age
X-Core-Mission
Vix-Hermes-Req-Id
X-Varnish-Beresp-Status
Fastcgi-Cache-TTL
X-Old-Content-Length
X-Scheme
Traceparent
X-VG-TLSProxy
Req-Svc-Chain
X-Served-From
X-Server-IP
X-VServer
X-BBC-Edge-Cache-Status
X-Sucuri-Cache
X-Accel-Expires-Debug
X-Sucuri-ID
Wxu-Next-Region
Origin-CC
X-TH-Server
X-Cache-Bucket
X-Cache-Debug
Host-ID
Origin-EX
Gh-Request-Id
X-Skip-Cache
Release
L
X-Cache-Info
Wxu-Next-Hostname
X-Date
X-Proxy-Upstream
X-Policy
X-Li-Fabric
X-Hash
Cmstype
X-Ratelimit-Remaining
X-Gdpr
X-Li-Pop
X-LI-UUID
X-Mvc-Supplant-Cachable
X-Origin-Expires
X-Nyt-Route
X-Men
X-Origin-Time
X-Location
X-Owner
X-Forwarded-Site
X-Geo-Header
CacheControlHeader
X-Device-Os
X-Epic-Correlation-Id
X-Fetched-On
AKAMAI
Arc-Country
X-Rocket-Nginx-Serving-Static
Cmsid
CDCHOST
From-Origin
X-Platform
X-Envoy-Decorator-Operation
X-Esi-Check
X-Thinkindot-L3
X-Level-Front-Cache
X-Irp-Debug
X-TrackingId
True-Client-Country-4JS
Web-Mar-Region
We-Hiring
X-Developers
X-NodeID
X-Datadog-Trace-Id
X-Datadog-Sampling-Priority
X-Webstats-RespID
X-Datadog-Parent-Id
X-Thanos
X-VarnishDD-TTL
X-HS-Content-Campaign-Id
X-Req
X-Region-Sid
X-Cache-Config
X-Generated-On
X-Cache-Id
X-Gamma-Serve
X-Sigma-Backend
X-Cdn-Origin
X-Rocket-Build-Number
X-Request-Start
X-Branch-Name
X-Sn-Servicetimems
X-Fastly-Backend
X-HN
X-Sigma
X-Viewer-Country
X-Gzip
X-GeoIP-City
X-Rebelmouse-Surrogate-Control
X-Bip
X-Rebelmouse-Cache-Control
X-GeoIP
X-Aicache-OS
Mail-Subject
Apple-News-Services-Handled
Fastly-SWR
Locid
Machine
PFcat
NGX
Fastly-SIE
Fastly-GeoIP-CountryCode
Datacenter
Candidate-Md5Url
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
Server-Host
X-Magnolia-Registration
Thinkindot-CacheControl-Type
X-EC-Lua
TDXMobile
Svr
Thinkindot-Control
Thinkindot-CacheControl
X-CS
X-FireWall-Port
X-Xrds-Location
X-Is-Gdpr
HA-Ipaddr
X-CGP
X-Loc
Is-Eu
X-NU-AKA-ACS-Version
X-Cdn-Srv
X-Has-Esi
X-JWT-State
Adler-Geo
X-Csrf-Jwt
X-Node-Id
X-DPWN-IS-SECURE
X-DefElseHash
X-Varnish-Remaining-TTL
X-Eu-Site
X-DefHash
X-FC-Vary-Parameters
Ha-Gx-Prefs
L5d-Success-Class
Platform
X-Pod-Name
X-Backend-State
NM-Fastcgi-Cache
X-Qloud-Router
X-RateLimit-Limit-Second
X-Request-URI
X-Amzn-Remapped-Content-Length
X-RateLimit-Remaining-Second
X-Varnish-CookieHashed-On
Sslversion
X-UnsetCookies
X-Variation
X-Origin
X-Varnish-CookieINHashed-On
X-Worker
Memcached
Cf-Device-Type
X-Zone
X-Varnish-Beresp-Ttl
X-Correlation-ID
X-Datadome
Ssr
X-Mvc-Supplant-OutputCached
WWW-Authenticate
X-CLOUD-TRACE-CONTEXT
X-Up
On-Server
X-Response-By
X-Tx-Id
X-API-Version
X-LB-ID
Fastly-Drupal-Html
Esi-Enabled
X-NC
Pics-Label
WP-Super-Cache
CDN
X-Generated-In
Ms-Author-Via
X-Trace-ID
X-Vc
C-Via
Memory
Time
X-Backend-TTL
X-Service
X-Refresh
X-LB-NoCache
NtCoent-Length
X-Cache-Enabled
X-DynaTrace-JS-Agent
X-TA-CDN-Provider
X-Cache-PHP
X-Via-Popv
X-Via-Popn
X-Edge-Pop
X-GeoIP-Country-Code
X-GeoIP-Region-Code
X-Via-Poph
X-Varnish-Ttl
X-NWS-UUID-VERIFY
X-Dynatrace
X-TraceId
X-Tb-Optimization-Total-Bytes-Saved
GeoIp-Country-Code
Magicmarker
X-Tt-Logid
X-Render-Time
Env
X-DC
X-Optimistic-Header
X-Cache-Status-Check
X-Parent-Response-Time
X-Srv
Kp-EeAlive
X-Restarts
X-Esi
X-CacheTTL
X-Info
S-Rt
X-Servedbyhost
Server-ID
X-TX-ID
X-Unique-ID
X-ZONE
X-Varnish-Beresp-TTL
X-MSEdge-Features
Edge-Cache
X-AIR-PT
X-DSS
X-RPS
X-RSL
X-Cache-Backend
X-DB
X-Wix-Viewer-Type
X-Action
X-DW
X-MSEdge-Flight
X-RPM
X-DI
X-Cs
Proxy-Connection
WebServer
X-Clientip
X-Cache-Ttl
X-App
X-Newrelic-Synthetics
X-Minions-Version
X-HA-Backend
UCS
HIT
Cache-Host
X-VCL-Version
X-Oss-Hash-Crc64ecma
X-Li-Proto
X-Oss-Request-Id
X-Oss-Server-Time
X-Oss-Object-Type
X-Oss-Storage-Class
Geo-Info
X-URL
X-Webkit-Csp-Report-Only
S-Cnection
X-FPC
X-Fpc
Test
X-LI-Proto
X-Traceid
X-Http-Reason
Section-Io-Id
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
Section-Io-Origin-Status
X-Akamai-Request-ID2
X-Vcl-Version
Lb
X-NODE
X-Webkit-CSP-Report-Only
X-LiteSpeed-Cache-Control
User-Agent
Server-Id
Tcn
X-Micro-Cache
Accept-Language
Fastly-Backend-Name
X-B3-Spanid
Fastly-Drupal-HTML
X-Ec-GeoHdr
X-Ec-Fail
X-Pass-Why
X-Backend-Host
X-Pad
X-User
Locale
Cf-Int-Pingora-Origin-Digest
X-BCube-Filmed-By
X-HostName
X-Urbn-Context-Path
X-Release
X-LiteSpeed-Tag
X-Urbn-Site-Id
Resin-Trace
X-APP
X-Check-Cacheable
X-CSRF-TOKEN
X-BBC-Origin-Response-Status
X-ServedByHost
X-Geo
X-ID
X-ES-SERVER
MIME-Version
Hostname
X-WADP-Cache
ENV
Cdncip
X-Ha-Backend
Hit
Cdnsip
M-TraceId
GeoIP-Country-Code
X-Clara-WADP
X-AK-Request-ID
X-Fmm-Version
X-Amz-Meta-Cb-Modifiedtime
EpKe-Alive
Path
VNS-Age
CPC-Cache
Cache-Key
Srv
Ohc-File-Size
VNS-Cache
CPC-Age
X-WA-Info
X-WA
X-Dynatrace-Js-Agent
My-App
Geoip-Latitude
X-ElasticPress-Query
X-Cdn-Forward
Cluster
X-Via-PopN
X-Via-PopH
X-Edge-POP
X-Via-PopV
Shield-Pop
Lfy
X-NGINX-Cache
X-Api-Version
Tracecode
X-Wikidot-Backend
Load-Balancing
X-PJAX-URL
X-Wikidot-Static-Cache
X-HS-Status
X-Edge-Cache
X-Var-Ttl
X-From
Pagetype
X-Cms-Context
X-CUA
X-Akamai-Pragma-Client-IP
MD5-Digest
X-ServerName
X-CCDN-Origin-Time
X-Via-Ucdn
X-Ucs
X-CCDN-CacheTTL
X-Hcs-Proxy-Type
T-Server
URI
X-Fragments
X-GoCache-CacheStatus
X-Fastly-Cache-Hits
Servername
X-Fastly-Backend-Reqs
Lang
X-Mcache
IsBot
Sever-Int
Cf-Ipcountry
X-SIPLIST1
Server-Ext
Server-Hostname
X-UP
X-VG-WebServer
X-RAMCache
X-Dw-Trace-Id
X-TRACE-ID
X-Cdn-Request-ID
WZWS-RAY
X-VC
X-Lb-Id
Cdn
X-RateLimit-Reset
Ohc-Cache-HIT
X-B3-ParentSpanId
X-Nc
Target-Params
X-WP-CF-Super-Cache-Cache-Control
X-Cache-Expires
Cneonction
W
X-WP-CF-Super-Cache
X-Swift-Error
X-Akamai-Request-ID
X-Apw-Hits
X-Newrelic-App-Data
X-Apw-Access-Object
X-Acquia-Application-UUID
X-Acquia-Purge-Tags
X-Acquia-Site
X-Acquia-Application-Trace
X-Platform-Router
X-Apw-Access-Action
X-Platform-Cluster
X-Platform-Processor
X-Apw-Access-Token
X-Provided-By
X-Cache-ASPX
Uri
Vha6-Origin
CF-Cached-On
HitType
Dnion-Transfer-Encoding
Cteonnt-Length
X-Snapshot-Date
PICS-Label
X-Yottaa-OS
X-Contensis-Viewer-Groups
X-Air-Pt
Sid
X-Cache-Ngx
DataCenter
X-Akamai-ERRuleID
X-Http-Count
X-Te-Count
X-Last-Modified
Server-Ttl
X-Te-Duration-Ms
X-Http-Duration-Ms
X-Akamai-ERPolicy
X-CacheKey
X-Lb-Nocache
X-Cc-Via
X-Miniprofiler-Ids
X-B3-Parentspanid
X-Via-CDN
X-Varnish-Authentication
X-Logging-Id
X-Sentry-ID
CountryCode
Req-ID
X-UA
Ngx