Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Accept-Ranges
X-XSS-Protection
Expect-CT
Pragma
X-Powered-By
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Access-Control-Allow-Origin
Referrer-Policy
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
X-UA-Compatible
X-Served-By
X-Xss-Protection
X-Download-Options
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
CF-Ray
X-Adblock-Key
Access-Control-Allow-Credentials
X-FRAME-OPTIONS
X-Request-ID
X-Request-Id
X-Permitted-Cross-Domain-Policies
X-AspNet-Version
Alt-Svc
X-Runtime
Content-Security-Policy-Report-Only
X-DNS-Prefetch-Control
X-Drupal-Cache
X-Check
X-Cache-Status
X-Generator
X-Cacheable
Timing-Allow-Origin
X-Iinfo
X-Envoy-Upstream-Service-Time
X-Content-Security-Policy
X-Drupal-Dynamic-Cache
Feature-Policy
Content-Encoding
Access-Control-Expose-Headers
Upgrade
Status
X-CDN
X-AspNetMvc-Version
P3p
Access-Control-Max-Age
X-Via
Server-Timing
X-UA-Device
X-Robots-Tag
Request-Context
X-Turbo-Charged-By
X-Cache-Group
X-Amz-Request-Id
EagleId
X-Amz-Id-2
X-Backend
X-AH-Environment
Keep-Alive
X-Proxy-Cache
X-Ua-Compatible
X-Server
X-Ws-Request-Id
X-Age
Host-Header
X-Hacker
Cf-Edge-Cache
X-Vhost
X-Server-Powered-By
X-Rq
X-Varnish-Cache
Allow
X-Dispatcher
X-Amz-Version-Id
Grace
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-OneAgent-JS-Injection
X-LiteSpeed-Cache
X-Dns-Prefetch-Control
X-WebKit-CSP
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Page-Speed
Accept-CH
Cf-Apo-Via
X-Device
Cf-Railgun
X-Aws-Lambda-Call-Status
X-Server-Id
X-Node
X-Host
X-Pingback
X-Cache-Spec
X-Nginx-Cache-Status
X-Akam-SW-Version
Surrogate-Control
EagleEye-TraceId
X-Ruxit-JS-Agent
X-Backend-Server
Request-Id
X-Readtime
X-Cache-Lookup
X-HW
X-Cloud-Trace-Context
X-Content-Security-Policy-Report-Only
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Trace
X-Application-Context
X-Response-Time
Fastly-Restarts
Permissions-Policy
X-Nginx-Upstream-Cache-Status
Accept-CH-Lifetime
X-Mod-Pagespeed
Accept-Ch-Lifetime
X-Edge
X-WebKit-CSP-Report-Only
X-CST
Content-Location
X-Content-Type
X-Url
X-Mcache
X-MS-InvokeApp
X-Clacks-Overhead
X-Country
Rating
X-Midtier
X-Vname
X-Amz-Server-Side-Encryption
X-PC
X-TtlSet
X-Litespeed-Cache
X-ECACHE
RTSS
X-VARITI-CCR
Cache-Tag
X-ESI
X-D2id
X-Vcap-Request-Id
X-Element-Page-Cache
X-Server-Name
Origin-Trial
Verso
X-Kinja-Revision
X-Use-Magma
X-Kinja-Build
X-Kinja-Server
X-Exp-Variant
X-Cdn-Fetch
X-Exp-Id
X-GoogleNews-Bot
X-Kinja
X-Ac
X-Ttl
X-Rack-Cache
X-Powered-By-Plesk
X-Cnection
Service-Worker-Allowed
X-GitHub-Request-Id
Xkey
X-Varnish-TTL
SPRequestGuid
X-SharePointHealthScore
X-B3-TraceId
X-Navigation-Version
X-Client-IP
X-Abt-Application-Version
X-Amz-Rid
X-Cache-TTL
Edge-Control
X-NWS-LOG-UUID
SPIisLatency
SPRequestDuration
X-Cached
Arr-Disable-Session-Affinity
X-Upstream
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Instrumentation
X-Erf-Bev-Bev
X-Browser-Type
X-Mg-S
X-Erf-Bev-Bev-Is-Generated
X-Px
X-Cache-Key
X-Dw-Request-Base-Id
X-Correlation-Id
X-Middleton-Display
Pagespeed
Display
X-Sol
Content-MD5
X-SRCache-Store-Status
X-SRCache-Fetch-Status
Access-Control-Request-Method
X-NF-Request-ID
Edge-Cache-Tag
X-Goog-Hash
X-Country-Code
X-Forwarded-For
X-XRDS-Location
Front-End-Https
X-Version
X-Daa-Tunnel
X-Powered-CMS
TCN
X-Id
Public-Key-Pins
AR-PoweredBy
AR-Request-ID
AR-SID
AR-ATIME
AR-CACHE
X-Jurisdiction
X-HP-Trace-Id
X-Fastcgi-Cache
X-HP-Webp
X-T
X-MSEdge-Ref
X-Recruiting
X-Content-Digest
X-RateLimit-Remaining
X-Accel-Expires
Response
X-Middleton-Response
X-Ser
X-Amzn-Trace-Id
TP-L2-Cache
TP-Cache
X-Shield-Request-Id
X-B3-TraceId-Primal
MRF-Tech
Mrf-Cache-Status
X-FastCGI-Cache
Nginx-Cache
X-Webkit-Csp
S
X-Ratelimit-Limit
X-Request-Received
X-Request-Processing-Time
MicrosoftSharePointTeamServices
X-HS-Cache-Config
X-HS-Combine-CSS
X-HS-Hub-Id
Server-Node
X-HS-Content-Id
Cache-Status
X-Distributor
X-Hits
Cache-Tags
Accept-Ch
X-Edge-Location-Klb
X-Kinsta-Cache
Fastcgi-Cache
X-Grace
X-Ratelimit-Remaining
Server-Name
Alternate-Protocol
X-Ezoic-Cdn
X-LB-Cache
X-Origin-Server
X-Ratelimit-Reset
X-DIS-Request-ID
X-Ua-Browser
X-Geo-Country
X-DataDome
X-Protected-By
Cross-Origin-Opener-Policy
X-Fastly-Request-ID
X-Request-Handler-Origin-Region
X-Microsite
Filterid
X-Rid
X-Frontend
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Debug-Info
Healthy
X-Varnish-Backend
X-Git-Hash
X-Logged-In
Payment
X-FB-Debug
Cleartype
X-Forwarded-Proto
X-Page-Id
X-Www-Served-By
X-Load-Cache
X-LLID
X-Hostname
X-NGENIX-Cache
X-ASPNET-VERSION
X-Origin-Cache
Charset
X-Cluster-Name
DC
X-PressLabs-Stats
X-B3-Sampled
Content-Disposition
MS-Author-Via
X-Goog-Metageneration
X-GUploader-UploadID
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-VCache
X-Kong-Proxy-Latency
Access-Control-Allow-Method
X-Kong-Upstream-Latency
X-Upgrade-Enabled
X-Proxy
X-F-Cache
Retry-After
Realpath
X-Az
X-Activity-Id
X-AppVersion
Accept-Charset
X-Amz-Replication-Status
X-Contextid
X-Seen-By
Cross-Origin-Resource-Policy
X-TTL
Paypal-Debug-Id
X-Type
X-Amz-Meta-S3cmd-Attrs
X-Revision
X-Signature
X-B-Cache
X-Flags
X-Azure-Ref
X-Aspnet-Duration-Ms
X-Hosted-By
X-Is-Crawler
X-Route-Name
X-Request-Guid
X-Providence-Cookie
Viewport
X-Fb-Rlafr
X-App-Environment
Surrogate-Key
X-Varnish-Server
X-Aspnetmvc-Version
X-Whom
X-Wix-Request-Id
X-B3-Traceid
X-DynaTrace
Amp-Access-Control-Allow-Source-Origin
Count-Hit
X-TT
X-B
X-Akamai-Edgescape
X-Oracle-Dms-Rid
X-Oracle-Dms-Ecid
X-Language
X-Source
Referer-Policy
X-Ruxit-Js-Agent
X-App-Server
X-Mobile
X-RateLimit-Limit
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-Cache-Control
X-Tt-Trace-Host
X-COUNTRY
X-Tt-Trace-Tag
X-Template
Host
X-Magnolia-Registration
X-Varnish-Grace
Version
X-HTML-Minification-Powered-By
X-N
X-EdgeConnect-Cache-Status
X-Cache-Age
X-Cache-Rule
X-Fastly-Request-Id
X-Tumblr-User
SRV
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Tumblr-Pixel-1
X-Original-Request-Id
X-Response-Served-From
X-Rule
X-UUID
X-RTag
MS-CV
X-Varnish-Age
Ms-Operation-Id
VIX-Pulpo-Node
X-Cache-Expired-At
X-Envoy-Decorator-Operation
Section-Io-Cache
VIX-Pulpo-Upstream-Status
Access-Control-Request-Headers
X-Framework
X-Cache-Status-Check
X-Cache-Time
SD-X-WS
X-User-Agent
X-FW-Type
X-Content-Powered-By
Akamai-GRN
X-Cacheable-TTL
X-ECache
X-Backend-Name
X-RemovedCookies
X-ProcessESI
X-Page-View
X-FW-Version
X-FW-Static
X-Trace-Id
X-Cache-Grace
X-FW-Serve
X-FW-Dynamic
X-FW-Server
X-FW-Hash
Url
Refresh
X-Instance
X-Http-Reason
Protected
X-Is-Bot
X-Rendered-As
X-Servername
X-Adobe-Loc
GEO-INFO
X-L-Path
X-Jobs
X-Environment-Context
X-Akamai-Request-ID2
X-Status
X-Adobe-Content
X-Device-Type
X-NYM-Debug-Backend
X-Drupal-Cache-Contexts
NGB
X-G
X-Drupal-Cache-Tags
X-CDN-Forward
CDN-RequestId
From-Origin
X-Debug-IsPreview
WPO-Cache-Status
X-Debug-IsConnected
WPO-Cache-Message
X-Region
Front
X-Times
Accept-Language
X-Cache-Hit
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Amz-Apigw-Id
X-Amzn-RequestId
Country
X-Tb
X-Nginx-Cache
Backend
X-Newrelic-App-Data
X-Unique-Id
X-Content-Options
Fastly-SIE
Fastly-SWR
X-Node-Name
X-Tt-Logid
X-Zen-Fury
X-TIME
X-Tec-Api-Origin
X-Tec-Api-Version
X-Real-IP
X-Tec-Api-Root
X-Air-Hostname
X-Mode
X-Air-Source
X-Air-Trace-Id
X-Pinterest-Rid
Pinterest-Generated-By
X-Cache-Operation
Content-Secure-Policy
X-VC-Cache
Pinterest-Version
X-DynaTrace-JS-Agent
Uber-Trace-Id
X-Buckets
X-RN-RSRV
X-Tumblr-Pixel-2
X-Rewrite-Enabled
X-Proxy-Cache-Info
X-Ms-Version
X-Ms-Request-Id
X-Cache-Server
X-Generation-Time
X-UPSTREAM-Address
Webserver
Meta-Geo
Filters
X-Amzn-Remapped-Content-Length
Azure-Version
Azure-RegionName
X-Section
Azure-SiteName
Azure-InstanceId
X-Format
Azure-SlotName
Cache-Hits
CF-IPCountry
X-Content-Age
X-Web-Node
Onion-Location
X-Rocket-Nginx-Serving-Static
X-Access
X-Reqid
X-Cluster
X-R9-Blue-Green-Version
X-Cluster-Node
X-Debug
X-Say-TTL
Liferay-Portal
TWC-Privacy
ServedBy
X-Cache-TTL-Remaining
X-Proto
X-PHP-Backend
X-Origin-Hint
X-Adobe-Source
X-Locale
Webcakes-App-Name
Webcakes-App-Version
Webcakes-Region
X-SayCDN-TTL
X-Say-Cacheable
X-Sql-Count
X-Soup
TWC-Device-Class
X-UA-Device-Type
X-Sql-Duration-Ms
X-Sucuri-Cache
Property-Id
X-Sucuri-ID
TWC-Connection-Speed
X-IPS-LoggedIn
Fastly-Drupal-HTML
TWC-GeoIP-Country
X-Server-W
TWC-GeoIP-LatLong
TWC-Locale-Group
X-Via-Fastly
Cache-Name
X-No-Session
S-Rt
X-LJ-Flow-ID
ServerID
X-Ua
X-VWS-Id
Web-Mar-Node
X-AWS-Id
DB-Nickname
X-ProxyCache-Status
X-IPLB-Instance
X-BYPASS-REASON
X-IPLB-Request-ID
X-Site-Version
X-Forwarded-Host
X-Skip-Cache
X-Varnish-Beresp-Grace
X-Cms-Context
X-Cache-Action
X-Cache-Host
X-Proxy-Cache-Status
X-Handled-By
X-ProxyCache-Key
Apigw-Requestid
X-GeoCountry
X-GeoCode
X-JoinUs
X-Edge-Location
X-LAGOON
X-Labrador-Cache-Channel
X-Detected-As
X-Extlb
X-FB-TRIP-ID
Cross-Origin-Window-Policy
X-Urbn-Context-Path
X-Urbn-Site-Id
X-Proxy-Build
Selected-Fe
X-Routing-Service
X-SaId
X-Server-ID
X-Zipkin-Id
X-Timing-Wait
X-PHP-Host
X-Proxied
Locale
X-LSADC-Cache
Mn-Server-Ip
X-Xfnlog-Site
WP-Super-Cache
Node
X-WP-CF-Super-Cache-Cache-Control
X-WP-CF-Super-Cache
CDN-PullZone
CDN-RequestCountryCode
CDN-Uid
CDN-EdgeStorageId
CDN-CachedAt
CDN-Cache
Fastcgi-Useragent
Mime-Version
X-SRV
X-XRDS-LOCATION
X-Origin-Date
X-Tumblr-Pixel-3
X-Time
X-Hl-Ver
X-Optimistic-Header
X-Varnish-Ttl
Source
X-Oneagent-Js-Injection
X-Request-Time
X-Uri
X-Redis-Cache
Countrycode
X-Cache-Debug
CF-Cached-On
Upgrade-Insecure-Requests
X-Mg-Request-UUID
X-Varnish-Hits
X-Generated-By
X-Director
X-Loop
X-App-Version
X-TNCMS
X-GEO
Xet-Cookie
X-ARC
X-Akamai-Transformed
X-CACHE-AGE
X-Tx-Id
X-Pass-Why
Cache-Tv-Group
Frame-Options
X-FireWall-Port
X-URL
X-Presslabs-Stats
X-Origin-TTL
X-Origin-CC
Xserver
X-NWS-UUID-VERIFY
X-Varnish-Cache-Hits
X-Service
X-Alternate-Cache-Key
X-Shopify-Stage
X-ShopId
X-ShardId
X-Sorting-Hat-PodId
X-Varnish-Hostname
X-Varnish-Beresp-Ttl
X-Storefront-Renderer-Rendered
X-Sorting-Hat-ShopId
X-RM-Cache-TTL
X-ServerID
X-Newrelic-Synthetics
X-Storage
X-Tid
X-Datadog-Sampled
X-TA-CDN-Provider
X-Datadog-Trace-Id
X-Datadog-Sampling-Priority
X-Endurance-Cache-Level
X-Datadog-Parent-Id
X-B3-Spanid
DCR-Processing-Time-Ms
Edge-Cache
X-Gdpr
X-Httpd
A
X-Generated-On
X-INCAP-ABP
X-Level-Front-Cache
X-Request-Host
X-Loc
BehaviorPad-Version
Cache-Host
X-Epic-Correlation-Id
X-Ec-GeoHdr
X-External-Request-Id
X-Frame-Option
X-Ec-Fail
Candidate-Md5Url
DCR-Decision-By
Memcached
Surrogated-Key
T-Server
TDXMobile
Sslversion
X-Application
X-Bc-Bl
X-BBC-Edge-Cache-Status
X-B-Cookie
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-A-Dam
X-A-Ccd
X-A
X-A-Dcw
X-A-Dgt
Thinkindot-Control
X-Aed
X-A-Wwc
Req-Svc-Chain
Rendered-Blocks
X-Core-Value
MD5-Digest
X-Conf
Lang
X-D
X-Developer
X-Destination
Host-ID
Meta-Geo-Continent
X-CMSURLCustom
X-BCube-Filmed-By
Redirect-Candidate
Release
X-Cache-Info
X-Cache-NE
Ngx.Var.Host
Odigeo-Trace-Id
Origin
Gannett-Cam-Experience-Id
X-Rocket-Build-Number
X-S
X-S-Maxage
X-ScT
X-Served-From
X-Rojux
WWW-Authenticate
X-Platform-Cluster
X-Platform-Processor
X-Platform-Router
X-Processor
X-Sigma
X-Sigma-Backend
X-Vdms-Version
X-VG-TLSProxy
X-We-Are-Hiring
Xc-Version
X-Vdms-Path
X-TIM-N
X-SRCache-Key
X-Test
X-Thinkindot-L3
X-Origin-Time
X-S-Cookie
X-Location
X-Mobile-URL
X-Mid
X-Nyt-Route
X-Pubstack
X-CUA
X-VServer
X-SD-PageType
X-DC
DSUID
X-Vmg-Version
X-WA-Info
X-Core-Mission
X-JWT-State
Gh-Request-Id
X-Developers
Fastly-GeoIP-CountryCode
X-Is-Gdpr
Magicmarker
Fastly-Backend-Name
X-SB
X-WADP-Cache
X-Sn-Servicetimems
X-Bip
X-Cache-Bucket
X-Thanos
Server-Info
Environment
X-Auto-Login
X-Varnish-Beresp-Status
Ssr
X-Cdn-Origin
X-SVT-ORM-RULES
NGX
Decoy-Debug-TTL
X-Clara-WADP
X-SVT-ORM-VERSION
State
X-Cdn-Srv
Mail-Subject
X-Ec-Custom-Error
C-Via
X-Org
Apple-News-Services-Request-Url
Cache-Key
Decoy-Debug-Status
X-Pool
X-Platform-Server
CacheControlHeader
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
X-Geo-Header
X-GeoIP
X-GeoIP-City
X-HS-Content-Campaign-Id
X-Origin-Response-Time
Apple-News-Services-Handled
AKAMAI
X-Human
Vix-Hermes-Req-Id
X-WP-CF-Super-Cache-Active
We-Hiring
X-Fmm-Version
Country-Code
X-Has-Esi
X-Worker
X-Restarts
X-Old-Content-Length
X-Fetched-On
Decoy-Debug-Key
X-Cache-Date
CloudFront-Viewer-Country
X-Hash
Cluster
Section-Io-Origin-Status
X-Parent-Response-Time
Section-Io-Origin-Time-Seconds
Section-Io-Id
Section-Origin-Responded
X-App
X-Azure-Ref-OriginShield
Wxu-Next-Commit
X-Varnishpool
Wxu-Next-Region
X-Wix-Viewer-Type
X-VarnishDD-TTL
X-Accel-Buffering
X-Accel-Expires-Debug
X-Akamai-Device-Characteristics
X-Mvc-Supplant-Cachable
Wxu-Next-Hostname
X-NodeID
X-Region-Sid
X-Qloud-Router
X-Req
X-Irp-Debug
X-Device-Os
X-Dispatcher-Number
X-Fastly-Backend
X-FC-Vary-Parameters
X-GeoIP-Region-Code
X-HN
X-GeoIP-Country-Code
X-Op-Id-All
X-Gamma-Serve
X-Gen-Mode
X-DefHash
X-DefElseHash
X-Block-Status
X-Cache-Tags
X-LB-NoCache
X-Var-Ttl
X-Varnish-CookieINHashed-On
X-Varnish-CookieHashed-On
X-CacheTTL
X-NCache
X-Hnp-Log
X-Date
X-Node-Id
X-Nginx-Cache-Key
X-Slack-Shared-Secret-Outcome
X-Slack-Backend
X-Varnish-Remaining-TTL
Tube-Got-Results
Datacenter
Pics-Label
Server-Ext
Server-Hostname
Click-Count-Error
Sever-Int
PFcat
Kp-EeAlive
NM-Fastcgi-Cache
Machine
On-Server
Origin-CC
L
Origin-EX
Click-Count-Action-Start
Server-Host
Tube-Got-Eval
Tube-Get-Contents
Cache-Provider
Canary
CDCHOST
Tube-Return
User-Cache-Control
Web-Mar-Region
Is-Eu
Adler-Geo
X-Origin
HA-Ipaddr
X-Csrf-Jwt
L5d-Success-Class
X-Gzip
Load-Balancing
X-Owner
X-Men
X-Eu-Site
Cmstype
Cmsid
X-Minions-Version
X-Esi-Check
X-Nananana
Fastly-SSL
X-Forwarded-Site
X-Dispatcher-Server
X-DPWN-IS-SECURE
X-Mly-Id
Ha-Gx-Prefs
X-Planisys-CDN-Cache
X-Ad-Defer-Variation
X-Cache-Backend
Platform
X-Cache-FS-Status
Producers
X-Refresh
X-Request-Start
X-V-Cache
X-Variation
X-Cache-Id
X-Scale
X-Platform
X-Planisys-CDN-Rules
X-CGP
X-Ckpd-Fst-Backend
X-Server-IP
X-Planisys-CDN-TTL
X-Webkit-CSP-Report-Only
SID
X-Api-Version
X-Mvc-Supplant-OutputCached
X-Microcachable
X-Up
X-Cache-Remote
Svr
X-Tb-Optimization-Total-Bytes-Saved
X-Aicache-OS
X-Fastly-Cache
Env
GeoIP-Latitude
X-Servedbyhost
X-CSRF-Token
X-AIR-PT
X-ND-Cache
X-Origin-Expires
X-RCS-CacheZone
X-Instance-Name
X-NGINX-Cache
X-Trace-ID
HostName
X-Release
X-Via-Popn
X-Via-Popv
X-Via-Poph
X-Response-By
Time
X-Cached-By
Memory
Cdn
X-Zone
X-NewRelic-App-Data
Srvid
X-HA-Backend
X-From
Locid
X-VC
X-Vc
X-Generated-In
X-FL-QIT-DEBUG
X-DataCenter
X-FL-EDGE
X-Nc
X-HS-Status
Expect-Staple
X-ZONE
Cache
X-Webkit-CSP
Cdnsip
X-Air-Pt
X-Wa
X-Provided-By
X-AK-Request-ID
X-Edge-Pop
X-Cache-Enabled
Server-ID
Cdncip
NtCoent-Length
X-Via-CDN
X-Gateway-Request-Id
X-Gateway-Cache-Status
X-Esi
X-Gateway-Skip-Cache
X-Gateway-Cache-Key
X-Via-NSCOPI
Hostname
X-Dc
X-Check-Cacheable
X-Correlation-ID
X-Via-SSL
X-Client-Ip
X-Via-Edge
Edge-Copy-Time
X-CCDN-Origin-Time
X-Hcs-Proxy-Type
GeoIp-Country-Code
X-API-Version
X-CCDN-CacheTTL
X-Fpc
X-Vcl-Version
X-Debug-Cache-Fetch
X-LB-ID
X-Debug-Cache-Store
X-Lambda-Id
X-Vgn-Hpd-Cached
X-CSRF-TOKEN
X-Vgn-Hpd-Variations-Key
X-Vgn-Hpd-Ssi
X-CS
X-Srv
Sid
AMP-Access-Control-Allow-Source-Origin
Eomportal-Instance
True-Client-IP
X-Proxy-CacheRZ
XkeyRZ
VNS-Cache
X-Vtex-Remote-Cache
X-MCACHE
VNS-Age
X-Render-Time
CPC-Age
CPC-Cache
X-Amz-Meta-Cb-Modifiedtime
Ngx-Var-Key
X-Via-JSL
X-Micro-Cache
X-Cs
X-APP-VERSION
X-Nf-Request-Id
Fastly-Drupal-Html
X-VCT
X-SIPLIST1
IsBot
X-Request-URI
OT-Force-Account-Verify
X-EC-Lua
X-B3-SpanId
X-ATG-Version
X-TH-Server
X-VCL-Version
True-Client-Ip
Path
Uri
X-Cache-NGX
X-Info
Srv
X-Contensis-Viewer-Groups
X-Cache-ASPX
X-Upstream-Ct
Esi-Enabled
X-Varnish-Authentication
X-MSEdge-Flight
X-Upstream-Ht
X-MSEdge-Features
X-Fastly-Country-Code
Request-ID
X-Cache-Type
Location
Resin-Trace
M-TraceId
X-Datadome
X-Varnish-Beresp-TTL
X-CF-Lambda-Fn
GeoIP-Country-Code
X-RateLimit-Remaining-Second
XServer
X-Cdn-Request-ID
X-FPC
X-CLOUD-TRACE-CONTEXT
CDN
X-RateLimit-Limit-Second
X-CF-Lambda-Version
X-PAYTM-SRV-ID
YJS-ID
X-Lb-Id
X-Accel-Version
X-Oss-Hash-Crc64ecma
X-Oss-Server-Time
X-Cache-Expires
Servername
X-Oss-Request-Id
X-Oss-Storage-Class
Cross-Origin-Opener-Policy-Report-Only
X-Oss-Object-Type
X-TX-ID
X-Udemy-Cache-App-Namespace
N-Cache
Sm-Log-Id
X-Service-Response-Time
X-Edge-POP
X-Wikidot-Backend
X-Pod-Name
X-Wikidot-Static-Cache
X-CDN-Cache-Status
X-Akamai-Pragma-Client-IP
RNT-Machine
X-MP-GENERATED-AT
X-Forwarded-Path
X-Orig-Expires
X-RateLimit-Reset
Timeexpire
X-Datacenter
X-Tenant
X-Shop-Environment
LB
X-Bl-Debug
Server-Id
RNT-Time
X-Ha-Backend
X-Cdn-Cache-Status
X-Scheme
X-Moov-Xdn-Version
X-Moov-T
HIT
Traceparent
X-WA
X-SERVER-NAME
X-Geo
X-Cache-Ttl
X-App-Name
X-Policy
X-ApacheServer
X-Srcache-Store-Status
X-B3-Trace-ID
X-CACHE-KEY
X-Srcache-Fetch-Status
X-Via-PopV
Ohc-File-Size
X-NC
CountryCode
X-Viewer-Country
X-Via-PopH
X-Via-PopN
X-PERF
FSS-Cache
Epwk-X-Cache
X-Snapshot-Date
X-ServedByHost
X-LiteSpeed-Cache-Control
X-TraceId
ENV
Yjs-Id
Proxy-Connection
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
Hit
X-Serial
X-Amz-Meta-Opti
Lb
X-Hyper-Cache
Geoip-Latitude
X-NAPM-TraceId
X-Cdn-Forward
WZWS-RAY
X-Dw-Trace-Id
Powered-By
X-M-Reqid
X-MiniProfiler-Ids
X-M-Log
X-UP
Cneonction
X-Vgn-Hpd-Reason
Content-Style-Type
Content-Script-Type
User-Agent
X-B3-Parentspanid
X-Acquia-Purge-Tags
X-Acquia-Site
X-Lb-Nocache
X-RAMCache
X-Qnm-Cache
X-Acquia-Application-UUID
X-Fastly-Backend-Reqs
X-Acquia-Application-Trace
X-Swift-Error
Ec-Rule-Version
X-TT-LOGID
X-F-Status
X-Lsadc-Cache
X-Wp-Cf-Super-Cache
X-Wp-Cf-Super-Cache-Cache-Control
X-Fastly-Cache-Hits
V-Age
X-B3-ParentSpanId
Ngx
X-LiteSpeed-Tag
Rip
X-Webstats-RespID
X-Ctl-Mach
X-Cdn-Diag
Req-ID
Pramga
X-Th-Server
X-Stale
My-App
X-Mid-Debug-Cache-Disk
X-Clientip
Tracecode
True-Client-Country-4JS
X-Mid-Debug-Cache-Key
MIME-Version
X-IPS-Cached-Response
Inserted-Into-Cache-At
X-Request-URL
Warning
X-Cache-Ngx