Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
CF-RAY
CF-Cache-Status
Pragma
Link
X-Powered-By
ETag
Expect-CT
X-XSS-Protection
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Xss-Protection
X-Varnish
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
Alt-Svc
X-Download-Options
X-Request-Id
X-AspNet-Version
Access-Control-Allow-Credentials
X-Runtime
X-FRAME-OPTIONS
X-Drupal-Cache
X-Adblock-Key
X-Request-ID
X-Check
X-Generator
Content-Security-Policy-Report-Only
X-Cache-Status
X-Cacheable
X-Permitted-Cross-Domain-Policies
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-Template
X-Iinfo
X-Language
X-AspNetMvc-Version
X-Content-Security-Policy
Status
Content-Encoding
X-Buckets
Access-Control-Expose-Headers
Upgrade
Xkey
Access-Control-Max-Age
X-CDN
X-Kinja-Server-Push
Keep-Alive
X-Drupal-Dynamic-Cache
X-Turbo-Charged-By
X-Via
X-Cache-Group
X-Age
X-AH-Environment
X-Pass-Why
X-Backend
X-Ua-Compatible
X-Envoy-Upstream-Service-Time
EagleId
X-Server
X-Amz-Id-2
X-Amz-Request-Id
X-Robots-Tag
X-Page-Speed
X-Pingback
X-Server-Powered-By
X-UA-Device
X-Swift-CacheTime
X-Swift-SaveTime
X-Proxy-Cache
X-Hacker
Ali-Swift-Global-Savetime
X-Nginx-Cache-Status
Request-Context
Grace
X-Varnish-Cache
Server-Timing
Feature-Policy
Cf-Railgun
X-Amz-Version-Id
X-Device
X-LiteSpeed-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Rq
X-WebKit-CSP
Report-To
EagleEye-TraceId
X-Ac
X-Server-Id
X-OneAgent-JS-Injection
X-Response-Time
X-Host
Request-Id
X-Cnection
X-Backend-Server
X-Cdn
X-DataDome
Content-Location
X-Node
X-Cloud-Trace-Context
X-Origin-Cache
X-Readtime
X-Cache-Lookup
NEL
X-Vhost
X-Ws-Request-Id
X-Application-Context
X-Dispatcher
X-ORACLE-DMS-ECID
X-HW
X-ORACLE-DMS-RID
Allow
X-Clacks-Overhead
X-Rack-Cache
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Dns-Prefetch-Control
X-Origin-Upstream-Status
Surrogate-Control
X-DynaTrace
Rating
X-Country
X-FTR-Request-ID
Fusion-Content-Source
X-Country-Code
Fusion-Template-Id
Fusion-Source
Fusion-Content-Id
Fusion-Component-Id
X-Akam-SW-Version
X-Goog-Hash
X-Varnish-TTL
X-Ruxit-JS-Agent
Pinterest-Generated-By
X-Vname
X-TtlSet
X-PC
X-Instart-Request-ID
X-MS-InvokeApp
Edge-Control
X-Url
X-B3-TraceId
X-Mod-Pagespeed
Verso
X-Powered-By-Plesk
SPRequestGuid
X-D2id
X-Trace
Pagespeed
X-Middleton-Response
Response
X-Sol
X-Middleton-Display
X-SharePointHealthScore
Display
X-VARITI-CCR
RTSS
Service-Worker-Allowed
X-Server-Name
X-GoogleNews-Bot
X-Exp-Variant
X-Exp-Id
X-Kinja
X-GitHub-Request-Id
X-Use-Magma
X-Kinja-Server
X-Kinja-Revision
X-Kinja-Build
X-Cdn-Fetch
Accept-Ch
X-Vcache
X-Server-ID
SPRequestDuration
SPIisLatency
X-Navigation-Version
Content-MD5
X-Powered-CMS
X-Debug
X-Abt-Application-Version
X-Vcap-Request-Id
X-ESI
X-Amz-Server-Side-Encryption
Public-Key-Pins
X-TTL
X-CST
Charset
MS-Author-Via
X-Upstream
X-Forwarded-Proto
X-Cached
X-NF-Request-ID
X-Amz-Rid
X-Version
X-Px
DynaTrace
Accept-Ch-Lifetime
Realpath
Edge-Cache-Tag
X-Shard
TCN
MicrosoftSharePointTeamServices
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
Arr-Disable-Session-Affinity
Fastly-Restarts
X-Ezoic-Cdn
X-XRDS-Location
X-Shield-Request-Id
Access-Control-Request-Method
X-DynaTrace-JS-Agent
X-MSEdge-Ref
X-Pinterest-Rid
X-Ser
Pinterest-Version
X-Recruiting
X-SRCache-Store-Status
X-SRCache-Fetch-Status
S
X-Fastly-Request-ID
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-DIS-Request-ID
X-Accel-Expires
Front-End-Https
Nginx-Cache
X-Trafficlayer-App-Name
X-Trafficlayer-App-Scope
X-Amz-Meta-S3cmd-Attrs
X-Client-IP
X-Goog-Storage-Class
X-Element-Page-Cache
X-Varnish-Age
X-Id
X-T
MRF-Tech
Mrf-Cache-Status
X-B3-TraceId-Primal
X-Mrf-Item-Lastmod
X-Mrf-Section-Lastmod
X-Ttl
X-FTR-DC
X-FTR-Realm
X-FTR-Balancer
X-Country-Code-Real
X-FTR-Backend-Server
X-FTR-Backend
X-FTR-Cache-Status
X-FTR-Expires
X-Amzn-Trace-Id
X-Dw-Request-Base-Id
Cache-Tag
Fastcgi-Cache
X-HS-Hub-Id
X-HS-Content-Id
X-Frontend
NR-ENABLED
X-Content-Digest
X-HS-Cache-Config
X-Correlation-Id
Powered
X-Hits
X-RateLimit-Remaining
X-Fastcgi-Cache
X-Webapp-Samesite-None-Activated-N
X-Kinsta-Cache
X-FTR-Cache-Host
X-Grace
ServerID
X-Litespeed-Cache
Accept-CH
Alternate-Protocol
X-Hp-Webp
Accept-CH-Lifetime
TP-L2-Cache
TP-Cache
X-N
X-Cache-Hit
X-Request-Processing-Time
X-Request-Received
X-Aspnetmvc-Version
X-Microsite
X-Node-Name
X-Request-Handler-Origin-Region
X-Webkit-Csp
PB-RID
PB-PID
Server-Name
Arc-Version
X-Mobile-Rewrite
AMP-Access-Control-Allow-Source-Origin
X-User-Agent
X-Zen-Fury
X-Rid
X-Content-Type
Healthy
X-Analytics
X-Revision
X-HS-Combine-CSS
Backend-Timing
Server-Node
AR-CACHE
AR-ATIME
X-Akamai-Edgescape
AR-PoweredBy
X-Content-Security-Policy-Report-Only
X-Logged-In
X-LB-Cache
X-Forwarded-For
Ar-Sid
Cache-Status
X-GUploader-UploadID
X-Amzn-RequestId
X-AppVersion
X-Activity-Id
X-FastCGI-Cache
X-Az
X-Amz-Apigw-Id
X-Pad
X-IPLB-Instance
X-NWS-LOG-UUID
Retry-After
X-Cached-By
X-Varnish-Grace
X-Type
X-Oneagent-Js-Injection
X-Mobile-URL
X-Esi
X-B3-Sampled
X-Srv
Paypal-Debug-Id
Refresh
X-Content-Options
X-F-Cache
X-Via-JSL
FilterID
Upgrade-Insecure-Requests
X-Ruxit-Js-Agent
Accept-Charset
X-Debug-Info
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-FB-Debug
X-Cache-Age
X-Instance
X-Jobs
X-Request-Guid
X-Page-Id
X-Geo-Country
X-Varnish-Backend
Source
X-Cluster
Access-Control-Allow-Method
Host
X-App-Environment
X-AOL-HN
Actual-Object-TTL
X-B
X-PHP-Backend
X-Framework
DC
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
AR-Request-ID
X-Seen-By
X-Cache-Key
X-WebKit-CSP-Report-Only
X-ATG-Version
X-PressLabs-Stats
MS-CV
X-Content-Powered-By
VIX-Pulpo-Upstream-Status
Fastcgi-Useragent
VIX-Pulpo-Node
X-TT
X-Whom
X-Git-Hash
X-Cache-2
X-Cache-TTL
Cache
X-Cache-Control
X-Amz-Replication-Status
X-Host-Name
X-TA-CDN-Provider
X-UA
X-B-Cache
X-Wix-Request-Id
X-Signature
Surrogate-Key
Host-Header
Frame-Options
NGB
X-Response-Served-From
X-Cache-Operation
X-Cache-Rule
X-FW-Static
X-FW-Hash
X-FW-Serve
X-FW-Type
X-FW-Server
X-Origin-Server
X-Daa-Tunnel
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
Cache-Tv-Group
X-Tumblr-Pixel-2
X-Tumblr-Pixel-1
X-Cache-Action
Cleartype
X-Region
WPE-Backend
X-RequestSource
X-Drupal-Cache-Tags
Payment
X-TX-ID
Webserver
X-Cache-NE
X-Hyper-Cache
X-GeoIP
X-Mobile
Xserver
X-Adobe-Loc
X-Cache-Enabled
X-Cacheable-TTL
X-Adobe-Content
X-Handled-By
Eomportal-Instance
X-Forwarded-Host
X-Time
X-Ah-Environment
X-UA-Device-Type
X-EdgeConnect-Cache-Status
From-Origin
Filters
X-ProcessESI
X-RemovedCookies
X-SERVER
Datacenter
X-Hostname
X-RTag
Ms-Operation-Id
X-Akamai-Transformed
X-Cache-TTL-Remaining
X-NewRelic-App-Data
X-Load-Cache
X-App-Server
Tracecode
X-Cache-Server
X-Edge-Location
X-Status
X-Contextid
Liferay-Portal
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Varnish-Hostname
X-BCube-Filmed-By
X-ATS-Timestamp
X-Varnish-Server
X-TT-TIMESTAMP
X-Rule
Odigeo-Trace-Id
Country
X-Cache-Var
X-FW-Dynamic
Load-Balancing
X-Cache-Var-Map
X-RN-RSRV
Meta-Geo
X-ES-SERVER
X-Path-Route
X-Viewer-Country
X-RateLimit-Limit
X-Xfnlog-Site
Server-Info
X-Rocket-Nginx-Bypass
X-Upgrade-Enabled
Version
Cache-Tags
DB-Nickname
X-Cache-Config
X-Debug-Cache
X-OCL
X-Via-Fastly
X-CCM
X-PCL
X-UUID
X-Redis-Cache
X-Web-Node
Webcakes-App-Version
Azure-InstanceId
Webcakes-Region
X-ServerID
L5d-Success-Class
X-FC-Vary-Parameters
X-Origin-Response-Time
X-Drupal-Cache-Contexts
X-From
X-Origin
X-IP
X-Hosted-By
X-Loop
X-Cache-Time
X-Akamai-Request-ID
Azure-Version
Azure-SlotName
Azure-SiteName
X-Real-IP
X-Proxy
X-Proto
S-Rt
Azure-RegionName
X-TNCMS
X-R9-Blue-Green-Version
TWC-Locale-Group
X-Varnish-Cache-Hits
TWC-GeoIP-LatLong
X-Labrador-Cache-Channel
X-Cache-Host
TWC-GeoIP-Country
X-EIG-Tracking-Id
X-Origin-Hint
X-Pubstack
TWC-Connection-Speed
Property-Id
Mn-Server-Ip
Webcakes-App-Name
TWC-Privacy
TWC-Device-Class
X-Backend-Name
X-PERF
X-ApacheServer
Viewport
Ec-Rule-Version
X-Rendered-As
Fastly-SSL
S-Cnection
Selected-Fe
X-Section
X-VCT
X-Access
X-Content-Age
X-JoinUs
X-Human
X-Proxy-Build
Origin-Cache-Control
NGX
DSUID
Cache-Name
X-Timing-Wait
X-Goog-Meta-Goog-Reserved-File-Mtime
Release
X-Cluster-Name
Origin-Edge-Control
X-Akamai-Request-ID2
X-FireWall-Port
X-Generated
X-Format
X-Info
Decoy-Debug-TTL
X-Oss-Request-Id
X-Oss-Object-Type
X-Oss-Server-Time
X-Oss-Storage-Class
X-Time-Microsecs
X-Oss-Hash-Crc64ecma
X-Www-Served-By
X-Varnish-Hits
Decoy-Debug-Status
X-Soup
Decoy-Debug-Key
X-Vgn-Hpd-Reason
X-NWS-UUID-VERIFY
X-XRDS-LOCATION
X-Storage
X-Origin-CC
X-Is-Bot
X-Locale
X-Origin-TTL
X-Site-Version
X-VCache
X-ProxyCache-Key
X-BYPASS-REASON
Uber-Trace-Id
X-ProxyCache-Status
X-ORACLE-APMCS-REQUEST-ID
X-ORACLE-APMCS-TAG
X-B3-Traceid
Cache-Key
Rt-Fastcgi-Cache
X-URL
X-PHP-Host
X-WA-Info
X-App-Version
X-Generated-By
X-Cache-Backend
X-Accel-Buffering
X-Amzn-Remapped-Content-Length
Akamai-GRN
Time
X-Webkit-CSP
Vix-Hermes-Req-Id
Cteonnt-Length
X-GoCache-CacheStatus
X-SS-Set-Cookie
Cache-Hits
X-Cache-Remote
X-NCache
X-Hit
X-Nginx-Cache-Key
X-CF-Powered-By
X-Backend-TTL
X-Guploader-Uploadid
Origin
GEO-INFO
Accept-Language
X-FB-TRIP-ID
X-SaId
X-Device-Type
X-CS
X-Cache-Grace
X-Trace-Id
X-Environment-Context
X-L-Path
X-APP-VERSION
X-Tumblr-Pixel-3
X-No-Session
X-Presslabs-Stats
X-Tb
X-MServer
Access-Control-Request-Headers
X-OVcl
X-B3-SpanId
X-OVcl-Cache
X-Say-TTL
X-Say-Cacheable
X-S
X-Geo
X-SayCDN-TTL
X-CDN-Forward
X-Cluster-Node
X-Uri
X-CSRF-TOKEN
Srv
Fastcgi-X-Cache-Version
X-Unique-Id
User-Cache-Control
X-D
Node
Rendered-Blocks
X-CF-Lambda-Fn
X-Connection-Hash
X-CF-Lambda-Version
Mobile-Detection-Method
X-Aed
X-A
X-A-Ccd
X-A-Dam
X-A-Dcw
Request-Country
VivaBuild
Rt-Proxy-Cache
T-Server
Request-EU
Viewtype
X-A-Dgt
X-A-Wwc
X-B-Cookie
X-Tec-Api-Origin
X-Tec-Api-Root
X-Tec-Api-Version
X-ARC
X-Application
X-Accel-Expires-Debug
X-Date
X-AIR-PT
Mime-Version
MD5-Digest
X-Svr
Arc-Country
NtCoent-Length
X-Transaction
X-SRCache-Key
X-SIPLIST1
AsisCache
Apple-News-Services-Handled
X-Server-Time
X-Session-Fingerprint
X-Trv-Group
X-Twitter-Response-Tags
Xc-Version
Now
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
Apple-News-Services-Request-Url
X-Vtex-Remote-Cache
X-VG-WebCache
X-VG-WebServer
X-Vtex-Processado-Em
X-S-Cookie
X-ScT
Meta-Geo-Continent
X-Hl-Ver
Machine
X-Rojux
X-CACHE-KEY
X-G
X-Destination
X-Detected-As
X-DPWN-IS-SECURE
X-External-Request-Id
Cross-Origin-Window-Policy
IsBot
BehaviorPad-Version
X-Request-UUID
X-Rewrite-Enabled
X-PAYTM-SRV-ID
X-Region-Sid
Content-Style-Type
Content-Script-Type
X-Processor
ServerName
Hostname
X-FW-Version
X-Endurance-Cache-Level
X-Via-CDN
RNT-Machine
CDCHOST
RNT-Time
X-Debug-Cookies
X-Proxy-Cache-Status
X-Proxy-Upstream
X-NX-Host
X-Matched-Rule
X-Location
X-Reboot
X-Request-URI
Server-Host
X-Service
X-WADP-Cache
X-Thinkindot-L3
X-S-Maxage
X-Hnp-Log
X-Gen-Mode
Web-Mar-Node
X-Block-Status
Thinkindot-Control
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
X-Cache-Bucket
X-Cache-Debug
X-Core-Value
X-Cms-Context
X-Clara-WADP
X-Cache-Info
Server-Int
X-Debug-Log
ServedBy
X-Alternate-Cache-Key
X-ShardId
X-EC-Lua
OT-Force-Account-Verify
X-UnsetCookies
Mail-Subject
We-Hiring
X-ShopId
X-NC
X-Sorting-Hat-PodId
X-Shopify-Stage
X-Sorting-Hat-ShopId
X-Parent-Response-Time
X-B3-Parentspanid
X-GeoIP-City
X-Reqid
X-Geo-Header
X-Fastly-Cache
X-Generated-In
X-Generation-Time
X-User
X-Has-Esi
X-Is-Gdpr
X-LI-UUID
X-Magnolia-Registration
X-Method
X-Li-Pop
X-Li-Fabric
X-Eu-Site
X-JWT-State
X-Key
X-Irp-Debug
X-Distributor
X-Cache-URL
X-Cdn-Srv
X-CGP
X-Varnish-Beresp-Grace
X-Cache-Id
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Status
X-Cache-FS-Status
X-Clientip
X-Compress-Hint
X-Developers
X-Distil-CS
X-Old-Content-Length
X-Webstats-RespID
X-Debug-Cache-Store
X-Core-Mission
X-Debug-Cache-Expiry
X-Debug-Cache-Fetch
X-Epic-Correlation-Id
X-Origin-Expires
Wxu-Next-Hostname
Wxu-Next-Region
X-CUA
Wxu-Next-Commit
Served-By
X-Wikidot-Static-Cache
Cache-Host
Kp-EeAlive
X-Dispatch
X-Dispatcher-Server
X-IN-APIGATEWAYSSL
X-Instart-Isnd
X-Level-Front-Cache
X-IN-APIGATEWAY
X-Ms-Version
X-Generated-On
X-Hash
X-RateLimit-Limit-Second
X-RateLimit-Remaining-Second
X-Wikidot-Backend
AKAMAI
X-SD-PageType
X-Skip-Cache
X-C
X-Request-Start
X-Ms-Request-Id
X-Platform-Server
X-Policy
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
X-VServer
X-We-Are-Hiring
X-WebServer
X-VG-TLSProxy
X-VC-Cache
X-TrackingId
X-Up
X-Variation
X-Origin-Date
X-Scheme
Countrycode
Platform
Content-Disposition
W
Fastly-Soc-X-Request-Id
Gh-Request-Id
PFcat
X-Shopify-Generated-Cart-Token
Proxy-Connection
X-7Graus-Varnish-XKeys
X-7Graus-Varnish-Cache-Control
Adler-Geo
True-Client-Country-4JS
SD-X-WS
Section-Io-Cache
X-Amz-Meta-Cache-Control
Esi-Enabled
HA-Ipaddr
Ha-Gx-Prefs
X-Azure-Ref-OriginShield
X-Auto-Login
L
X-Azure-Ref
Is-Eu
Magicmarker
X-Backend-State
Memcached
IBM-Web2-Location
X-App-Name
X-Sigma-Backend
X-Sucuri-Cache
X-MSEdge-Flight
X-Swa-Ws
X-Sigma
X-Internal-Host
X-LI-Proto
Heartbleed
X-Thanos
V-Age
X-Qloud-Router
X-BBXSRF
X-Bip
Pramga
X-Agile-Id
X-Agile-Age
X-Urbn-Site-Id
X-Agile
Locale
Cdnsip
X-Release
X-Rocket-Build-Number
X-Urbn-Context-Path
X-Owner
Cdncip
X-Logging-Id
X-Server-IP
X-MSEdge-Features
X-AK-Request-ID
X-Vdms-Version
Cache-Provider
X-Dc
X-Nc
X-Planisys-CDN-TTL
Server-ID
X-ServiceProvider
X-NodeID
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
X-RCS-CacheZone
CF-IPCountry
X-Servername
Powered-By-ChinaCache
X-Developer
X-Via-NSCOPI
X-B3-Spanid
X-Source
A
X-COUNTRY
X-Cdn-Forward
X-Sucuri-Id
X-SRV
X-Upstream-Ct
X-ND-Cache
X-Cdn-Origin
X-Sn-Servicetimems
GEO-REGION-INFO
X-Upstream-Ht
Environment
X-GRACE
X-Nginx-Cache
X-Node-Id
X-FPC
X-Device-Os
X-Trafficlayer-App-Version
Geo-Info
X-Be
X-Servedbyhost
X-Lb-Id
X-VHOST
X-Newrelic-Synthetics
X-FORWARDED-FOR
X-Req
Locid
Tcn
X-Gamma-Serve
X-Microcachable
X-Served-From
FNAC-ModuleRouting
X-TIME
X-Zone
X-Refresh
ProcessTime
X-Tb-Optimization-Total-Bytes-Saved
Resin-Trace
Request-Time
X-Sucuri-ID
X-VCL-Version
X-HTML-Minification-Powered-By
CF-Cached-On
X-DC
X-Pjax-Url
Memory
X-IPS-LoggedIn
X-LJ-Flow-ID
X-ElasticPress-Search
X-Render-Time
X-Instart-Info
X-VWS-Id
X-Pf-Uncompressing
X-AWS-Id
X-ECACHE
X-NGENIX-Cache
Group
Gannett-Cam-Experience-Id
X-NU-AKA-ACS-Version
X-Edge-O15-RID
X-Backend-Url
X-Backend-Host
X-Correlation-ID
X-GeoIP-Country-Code
Amp-Access-Control-Allow-Source-Origin
XServer
Pics-Label
X-Ratelimit-Remaining
X-Var-Ttl
Backend-Name
X-Mode
X-Unique-ID
Geoip-Latitude
X-Pod
TTL
GeoIP-City
GeoIP-Latitude
GeoIP-Country-Code
GeoIp-Country-Code
Geoip-City
Ttl
Cf-Ipcountry
N-Cache
X-GEO
PICS-Label
MIME-Version
X-ZONE
X-MP-GENERATED-AT
Fly-Cache
X-Via-SSL
X-CSRF-Token
Fly-Request-Id
REQUESTUUID
Pagetype
Lfy
Cache-Prefix
X-Via-Edge
Cdn
X-APP
X-Check-Cacheable
X-Bc
M-TraceId
X-Worker
X-CLOUD-TRACE-CONTEXT
Host-ID
X-Sedo-Request-Id
X-Via-Ucdn
Ohc-File-Size
Ohc-Cache-HIT
HostName
X-Fstrz
X-PF-Uncompressing
X-Cache-Miss-From
X-Vcl-Version
X-Proxied
X-Zipkin-Id
SRV
X-Routing-Service
X-Upstream-CT
X-BC
X-Upstream-HT
X-Fetched-On
Cache-Cookie-Set-Lfrom
Cache-Cookie-Set-From
HitType
Cache-Cookie-Set-Idcheck
X-LiteSpeed-Cache-Control
X-Server-W
X-Swift-Error
X-Ratelimit-Limit
X-HS-Status
X-PJAX-URL
X-Cdn-Request-ID
X-Cache-Tag
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Fastly-Country-Code
Fastly-SIE
Fastly-SWR
X-Wa
X-Dynatrace-Js-Agent
URI
User-Agent
On-Server
Pragrma
X-Oracle-Dms-Rid
X-TH-Server
X-Tt-Trace-Tag
X-HostName
X-Dynatrace
X-WR-MODIFICATION
X-Aicache-OS
X-ServedByHost
X-NGINX-Cache
X-UPSTREAM-Address
Powered-By
X-Request-Time
CDN
X-BE
X-TT-LOGID
X-GDPR
X-WA
Who
CACHE
X-RateLimit-Reset
Cdn-Host
Cdn-Request-Time
X-Fastly-Backend-Reqs
X-Edge-Server
X-LB-ID
X-Ua
Dynatrace
X-Varnish-URL
X-LAGOON
X-Varnish-Cacheable
X-Fpc
Media-Length
X-ABtesting
X-Hello
X-Flog
X-SN
X-Cf-Powered-By
DataCenter
SN
Is-Session-Tracking
Get-Access-Time
X-RPM
X-DI
Server-Id
LB
SS
X-Org
Debug
X-RSL
X-RPS
X-DW
FSS-Proxy
X-Action
X-DSS
X-Response-By
FSS-Cache
X-DB
X-ServerName
X-Cache-Ttl
X-Ftr-Cache-Host
X-Gen-Id
X-Varnish-Beresp-TTL
AR-SID
X-Protected-By
X-Tt-Trace-Host
X-Upstream-Proxy
X-Nananana
X-VC
Cneonction
NnCoection
UCS
XxX-Cache-Status
X-SB
Warning
X-Amzn-Remapped-Connection
X-Akamai-ERRuleID
X-Amzn-Remapped-Date
X-Li-Proto
X-Dw-Trace-Id
Thinkindot-Cache-Type
SID
X-Akamai-ERPolicy
Product
X-Request-Url
X-LiteSpeed-Tag
Application
RequestId
X-Fastly-Cache-Hits
Requestid