Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Cf-Request-Id
CF-RAY
CF-Cache-Status
Accept-Ranges
Link
ETag
Pragma
Expect-CT
X-Powered-By
Via
X-XSS-Protection
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Xss-Protection
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
Alt-Svc
X-UA-Compatible
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Adblock-Key
X-Runtime
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-Request-ID
X-Drupal-Cache
X-Check
X-Cache-Status
X-Generator
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
P3p
X-Content-Security-Policy
X-Iinfo
Status
X-Ua-Compatible
Feature-Policy
Content-Encoding
X-AspNetMvc-Version
X-CDN
X-Envoy-Upstream-Service-Time
Upgrade
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
Access-Control-Max-Age
X-Via
Keep-Alive
X-Dns-Prefetch-Control
X-Ws-Request-Id
Request-Context
Server-Timing
X-Robots-Tag
X-AH-Environment
X-Server
X-Hacker
X-Age
X-Turbo-Charged-By
X-Proxy-Cache
X-Server-Powered-By
X-Backend
X-Amz-Request-Id
X-Cache-Group
Host-Header
X-Amz-Id-2
EagleId
X-Nginx-Cache-Status
Report-To
X-LiteSpeed-Cache
X-Rq
X-Varnish-Cache
X-UA-Device
X-Page-Speed
Grace
X-Pingback
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-Device
EagleEye-TraceId
X-Vhost
X-OneAgent-JS-Injection
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Amz-Version-Id
NEL
Cf-Railgun
X-Dispatcher
X-Host
X-Server-Id
X-Cache-Spec
X-CST
X-Node
Allow
Request-Id
X-Backend-Server
Surrogate-Control
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-WebKit-CSP
X-Readtime
Accept-CH
X-Akam-SW-Version
X-Response-Time
X-Webkit-CSP
Xkey
X-HW
X-Ruxit-JS-Agent
X-Language
X-Country
Accept-Ch-Lifetime
X-Application-Context
X-Ac
X-Template
Content-Location
X-Cache-Lookup
MS-Author-Via
Rating
X-Cloud-Trace-Context
X-Url
X-B3-TraceId
Edge-Control
X-Mod-Pagespeed
X-Vname
X-PC
X-TtlSet
X-Clacks-Overhead
X-Varnish-TTL
X-ESI
X-Trace
X-MS-InvokeApp
X-Content-Type
Fastly-Restarts
Accept-CH-Lifetime
X-GitHub-Request-Id
X-Rack-Cache
X-Origin-Cache
X-Cnection
Accept-Ch
X-FastCGI-Cache
X-Country-Code
X-Cdn-Fetch
X-Exp-Id
X-Kinja
X-Kinja-Build
X-Kinja-Revision
X-Use-Magma
X-GoogleNews-Bot
X-Kinja-Server
X-Exp-Variant
X-Goog-Hash
X-Buckets
Verso
X-D2id
X-VARITI-CCR
Arr-Disable-Session-Affinity
X-Vcap-Request-Id
X-ORACLE-DMS-ECID
X-Cached
Cache-Tag
X-Server-Name
X-Abt-Application-Version
X-Amz-Rid
X-Server-ID
X-Client-IP
Service-Worker-Allowed
X-Navigation-Version
X-Powered-By-Plesk
RTSS
X-Px
X-Fastly-Request-ID
Access-Control-Request-Method
Public-Key-Pins
X-Element-Page-Cache
X-Powered-CMS
X-MSEdge-Ref
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Upstream
X-Dw-Request-Base-Id
X-Version
Display
Pagespeed
X-Cache-TTL
X-NF-Request-ID
X-Sol
X-Middleton-Response
Response
X-Middleton-Display
X-Ttl
S
X-Edge
X-TTL
X-Edge-Location-Klb
X-Kinsta-Cache
X-LLID
Mrf-Cache-Status
MRF-Tech
X-B3-TraceId-Primal
X-Accel-Expires
Realpath
X-Instrumentation
X-Server-Lifecycle-Phase
X-Kraken-Loop-Name
X-Kraken-Routeconfig-Destination
SPRequestGuid
X-SharePointHealthScore
X-Cache-Key
X-HP-Webp
X-Jurisdiction
SPRequestDuration
SPIisLatency
X-ECACHE
X-Correlation-Id
X-Shield-Request-Id
X-T
X-Mid
X-MCACHE
X-PressLabs-Stats
X-Litespeed-Cache
Pinterest-Generated-By
Pinterest-Version
X-Pinterest-Rid
X-Content-Security-Policy-Report-Only
X-DynaTrace
Edge-Cache-Tag
X-ORACLE-DMS-RID
X-Forwarded-Proto
Fastcgi-Cache
X-XRDS-Location
X-Mg-S
X-Amz-Server-Side-Encryption
X-Content-Digest
TP-Cache
TP-L2-Cache
X-Recruiting
Charset
Nginx-Cache
Filters
X-Id
X-Request-Received
TCN
Front-End-Https
X-Request-Processing-Time
X-Forwarded-For
Server-Node
Alternate-Protocol
X-Logged-In
X-Ezoic-Cdn
X-CACHE-GROUP
Content-MD5
X-Geo-Country
Cache-Tags
Fusion-Content-Id
Fusion-Deployment-Id
Fusion-Source
Fusion-Template-Id
Fusion-Component-Id
Fusion-Content-Source
X-ASPNET-VERSION
X-Protected-By
X-Hostname
X-Origin-Upstream-Status
X-Release
X-Amzn-Trace-Id
X-Grace
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-Goog-Generation
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-Origin-Server
X-F-Cache
X-Amz-Replication-Status
X-Oneagent-Js-Injection
Cleartype
X-Www-Served-By
X-NWS-LOG-UUID
X-Rid
X-Debug-Info
X-HS-Content-Id
Host
X-HS-Cache-Config
X-HS-Hub-Id
X-Contextid
X-LB-Cache
X-HS-Combine-CSS
X-RateLimit-Remaining
X-Activity-Id
X-Az
X-AppVersion
Server-Name
Section-Io-Cache
X-Frontend
X-Browser-Type
X-Erf-Bev-Bev-Is-Generated
X-Page-Id
X-Erf-Bev-Bev
X-Git-Hash
X-Daa-Tunnel
MicrosoftSharePointTeamServices
X-Ser
X-Respond-Thread
X-Aspnetmvc-Version
X-VCache
X-Content-Options
X-Cache-Age
X-WebKit-CSP-Report-Only
X-Ruxit-Js-Agent
Accept-Charset
X-Upgrade-Enabled
Access-Control-Allow-Method
X-Hits
X-Mobile-URL
X-Ab
X-Source
X-Kong-Upstream-Latency
X-DIS-Request-ID
X-Kong-Proxy-Latency
ServerID
X-Providence-Cookie
X-Is-Crawler
X-Flags
X-Aspnet-Duration-Ms
X-Request-Guid
X-Route-Name
X-B-Cache
X-Signature
X-Whom
X-Varnish-Backend
X-Varnish-Age
X-Varnish-Grace
X-Cache-Action
Healthy
Payment
X-FB-Debug
Viewport
X-App-Environment
Paypal-Debug-Id
X-TT
Node
X-B3-Sampled
X-AOL-HN
Fastcgi-Useragent
DynaTrace
Version
X-Seen-By
X-Load-Cache
X-Mobile
X-Yandex-Sdch-Disable
X-N
DC
X-XRDS-LOCATION
X-Type
X-Tt-Trace-Tag
X-Tt-Trace-Host
Filterid
X-HTML-Minification-Powered-By
X-Distributor
X-Tec-Api-Version
X-Tec-Api-Root
X-Tec-Api-Origin
SRV
X-Cache-Control
X-Fastcgi-Cache
Frame-Options
Retry-After
X-User-Agent
MS-CV
X-Cache-Expired-At
X-Jobs
Ar-Sid
AR-Request-ID
AR-CACHE
AR-PoweredBy
X-IPLB-Instance
X-Original-Request-Id
AR-ATIME
X-Response-Served-From
Refresh
X-UUID
X-Real-IP
X-Page-View
Amp-Access-Control-Allow-Source-Origin
X-Adobe-Loc
X-Varnish-Server
X-Cluster-Name
X-Debug-IsConnected
X-Adobe-Content
X-Instance
X-Proxy-Cache-Status
X-Region
Access-Control-Request-Headers
X-Debug-IsPreview
X-Cacheable-TTL
X-ProcessESI
X-Cache-Time
VIX-Pulpo-Node
X-RemovedCookies
NGB
VIX-Pulpo-Upstream-Status
X-B
X-Framework
X-Tumblr-User
X-Proxy
X-IPS-LoggedIn
X-Tumblr-Pixel-1
X-Tumblr-Pixel-0
X-G
X-Tumblr-Pixel
X-Content-Powered-By
X-FW-Server
X-FW-Static
X-FW-Serve
X-FW-Hash
X-RTag
X-FW-Dynamic
X-FW-Type
X-Device-Type
Uber-Trace-Id
Ms-Operation-Id
X-CDN-Forward
X-Vgn-Hpd-Reason
X-Request-Handler-Origin-Region
X-Microsite
X-Azure-Ref
X-Zen-Fury
Countrycode
X-Wix-Request-Id
X-Node-Name
X-NGENIX-Cache
Cache-Status
X-Time
X-Cache-Rule
X-Mg-Request-UUID
Section-Origin-Responded
Section-Io-Id
X-Cache-Hit
Section-Io-Origin-Time-Seconds
Section-Io-Origin-Status
X-Ms-Request-Id
X-Rendered-As
X-Is-Bot
X-Ms-Version
X-Oracle-Dms-Rid
X-Accel-Buffering
SD-X-WS
X-Debug
X-Nginx-Cache
Referer-Policy
Liferay-Portal
X-RateLimit-Limit
X-Drupal-Cache-Tags
Cache
X-App-Version
X-Aws-Lambda-Call-Status
X-EdgeConnect-Cache-Status
S-Cnection
Country
X-App-Server
CF-IPCountry
X-FireWall-Port
X-HP-Trace-Id
X-Environment-Context
X-L-Path
X-Revision
Surrogate-Key
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Parallel-Accel
X-Cache-Operation
Eomportal-Instance
X-TNCMS
X-Timing-Wait
X-Proxy-Build
Selected-Fe
Meta-Geo
X-JoinUs
X-UPSTREAM-Address
X-GG-Cache-Date
X-SaId
X-RN-RSRV
X-ES-SERVER
X-TA-CDN-Provider
X-Loop
X-Shopify-Stage
X-Cache-TTL-Remaining
X-Sorting-Hat-ShopId
X-SayCDN-TTL
X-Varnishpool
X-Adobe-Source
X-ShardId
X-Storefront-Renderer-Rendered
X-Say-TTL
X-Say-Cacheable
X-LAGOON
X-ShopId
X-Sorting-Hat-PodId
X-Request-Time
X-Endurance-Cache-Level
X-Cache-Type
X-Drupal-Cache-Contexts
From-Origin
X-Alternate-Cache-Key
X-Human
X-Be
X-Backend-Host
X-No-Session
X-NYM-Debug-Backend
X-PHP-Backend
X-Origin-Date
X-AWS-Id
Azure-InstanceId
Cache-Name
Country-Code
Azure-Version
Azure-SlotName
Azure-RegionName
Azure-SiteName
X-Proto
X-LJ-Flow-ID
X-Varnish-Hostname
X-Varnish-Beresp-Grace
X-Sql-Duration-Ms
X-Sql-Count
X-Xfnlog-Site
X-VWS-Id
X-Akamai-Edgescape
Akamai-GRN
Apigw-Requestid
X-Status
Fastly-SSL
Webcakes-App-Version
Property-Id
X-UA-Device-Type
TWC-GeoIP-Country
Cache-Tv-Group
Decoy-Debug-Key
TWC-Privacy
TWC-Connection-Speed
X-BYPASS-REASON
Decoy-Debug-TTL
Decoy-Debug-Status
Webcakes-Region
X-Cache-Server
GEO-INFO
X-PCL
X-Origin-Hint
ServedBy
X-PHP-Host
X-RCS-CacheZone
X-Pubstack
Count-Hit
X-ProxyCache-Status
X-ProxyCache-Key
X-OCL
X-S-Maxage
TWC-Device-Class
X-Handled-By
Protected
X-FB-TRIP-ID
X-Hosted-By
X-Server-W
TWC-GeoIP-LatLong
Webcakes-App-Name
X-Labrador-Cache-Channel
TWC-Locale-Group
X-R9-Blue-Green-Version
X-Hl-Ver
X-Section
X-Uri
X-Web-Node
X-Redis-Cache
X-Hyper-Cache
X-Backend-Name
X-Format
X-Access
X-Tumblr-Pixel-2
X-FW-Version
Mn-Server-Ip
X-ApacheServer
Nel
X-PERF
X-Via-Fastly
X-Cluster-Node
X-Ua-Device
X-ServerID
X-Time-Microsecs
X-Cache-PHP
X-B3-SpanId
X-ATG-Version
X-TEC-API-ROOT
X-TEC-API-VERSION
X-Servername
X-TEC-API-ORIGIN
X-APP-VERSION
OT-Force-Account-Verify
Xserver
X-CSRF-Token
X-Tumblr-Pixel-3
X-Content-Age
X-WA-Info
Cross-Origin-Opener-Policy
X-Azure-Ref-OriginShield
Backend
X-Detected-As
X-MP-GENERATED-AT
X-TT-LOGID
X-Trace-Id
Web-Mar-Node
X-Varnish-Cache-Hits
X-Rule
X-Cache-Host
X-Generation-Time
X-Datadome
X-Cache-Ttl
X-Cache-Enabled
X-Cached-By
X-Akamai-Transformed
X-Soup
X-Varnish-Hits
X-Bc-Bl
Cross-Origin-Window-Policy
Content-Secure-Policy
X-CS
Ec-Rule-Version
X-Mode
X-Edge-Location
X-Ua
X-Info
X-Amzn-Remapped-Content-Length
X-Amz-Apigw-Id
X-SRV
X-Via-JSL
X-Amzn-RequestId
X-Microcachable
X-Varnish-Beresp-Status
S-Rt
X-Cache-Grace
X-NWS-UUID-VERIFY
X-Magnolia-Registration
Url
X-B3-Traceid
X-Cache-NGX
Source
X-Air-Trace-Id
X-Ratelimit-Limit
X-Air-Source
X-Forwarded-Host
X-Dc
X-Origin-CC
X-Debug-Cache
X-Storage
X-Origin-TTL
Upgrade-Insecure-Requests
X-Locale
X-Air-Hostname
X-GEO
X-Extlb
X-Varnish-Beresp-Ttl
X-Proxied
X-Routing-Service
X-Platform
X-Tb
X-Zipkin-Id
X-BCube-Filmed-By
X-NU-AKA-ACS-Version
X-PAYTM-SRV-ID
X-NAPM-TraceId
X-Cache-Bucket
X-Orig-Expires
X-B-Cookie
X-PBS-Appsvrname
CDN-RequestCountryCode
Host-ID
M-TraceId
X-Forwarded-Path
MD5-Digest
X-A
X-A-Ccd
X-A-Dam
Fastcgi-X-Cache-Version
Fastly-SIE
Fastly-SWR
X-GoCache-CacheStatus
Meta-Geo-Continent
Rendered-Blocks
Req-Svc-Chain
Surrogated-Key
State
T-Server
Path
X-Unique-Id
Mobile-Detection-Method
X-From
Odigeo-Trace-Id
Expiry
X-A-Dcw
X-Application
BehaviorPad-Version
CDCHOST
CDN-Cache
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
X-Site-Version
A
Apple-News-Services-Handled
Apple-News-Services-Host
CDN-CachedAt
CDN-EdgeStorageId
X-A-Wwc
X-A-Dgt
DCR-Decision-By
DCR-Processing-Time-Ms
X-Aed
X-Aicache-OS
CDN-PullZone
CDN-RequestId
CDN-Uid
X-AIR-PT
X-ARC
X-Epic-Correlation-Id
X-CF-Lambda-Version
X-Connection-Hash
X-Shop-Environment
X-Developer
X-ScT
X-CF-Lambda-Fn
X-Rojux
X-S
X-S-Cookie
X-Destination
X-Vtex-Remote-Cache
X-Vdms-Version
X-SRCache-Key
X-D
X-Tenant
X-VG-WebCache
X-Clientip
X-Vtex-Processado-Em
X-External-Request-Id
X-VG-WebServer
X-Rewrite-Enabled
X-Session-Fingerprint
X-Processor
X-Request-URI
X-Ratelimit-Reset
X-Rebelmouse-Surrogate-Control
X-Cache-NE
X-Rebelmouse-Cache-Control
X-Platform-Server
User-Cache-Control
SID
X-DataDome
Fastly-Backend-Name
Fastly-Drupal-HTML
X-Cache-Debug
X-VG-TLSProxy
X-Cache-Info
DSUID
Platform
X-VServer
Esi-Enabled
X-Fastly-Cache
X-Hash
X-Forwarded-Site
X-Date
X-SVT-ORM-VERSION
UCS
NGX
X-Thanos
X-Amz-Meta-S3cmd-Attrs
X-Has-Esi
Origin
PB-PID
PB-RID
X-SVT-ORM-RULES
Is-Eu
L
X-TrackingId
Pics-Label
X-Accel-Expires-Debug
Adler-Geo
X-Conf
X-Li-Pop
X-Li-Fabric
X-Variation
X-Branch-Name
X-Request-Host
X-LI-UUID
X-Request-UUID
X-Rocket-Build-Number
X-Backend-State
X-Ftr-Request-Id
X-Var-Ttl
X-Men
X-Loc
X-Envoy-Decorator-Operation
X-Cache-Tags
X-Bip
X-Device-Os
X-Service
X-Origin-Expires
X-Core-Value
X-Fastly-Backend
X-Sigma
X-Sigma-Backend
Cache-Key
X-Is-Gdpr
C-Via
Arc-Version
X-JWT-State
Cache-Host
Server-Info
AMP-Access-Control-Allow-Source-Origin
Sever-Int
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
TDXMobile
X-Gamma-Serve
X-Cms-Context
Thinkindot-Control
X-Gen-Mode
X-Clara-WADP
X-Developers
X-FC-Vary-Parameters
X-CGP
X-Eu-Site
X-Esi-Check
X-Generated-By
X-Cache-Id
X-Block-Status
X-DPWN-IS-SECURE
X-Cluster
X-Fetched-On
VNS-Age
Vix-Hermes-Req-Id
X-Fmm-Version
VNS-Cache
We-Hiring
Wxu-Next-Region
Wxu-Next-Hostname
Wxu-Next-Commit
X-Csrf-Jwt
X-Proxy-Upstream
X-Origin
X-Old-Content-Length
X-Policy
X-RateLimit-Limit-Second
X-Scheme
X-RateLimit-Remaining-Second
X-Nginx-Cache-Key
X-Mvc-Supplant-Cachable
Cf-Device-Type
Cmsid
CacheControlHeader
Server-Hostname
X-Micro-Cache
X-Location
X-Served-From
X-SIPLIST1
X-WADP-Cache
X-EC-Lua
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-BBC-Edge-Cache-Status
X-DC
NtCoent-Length
X-Viewer-Country
X-Thinkindot-L3
X-Slack-Backend
X-VarnishDD-TTL
X-VC-Cache
X-Via-NSCOPI
X-Vdms-Path
Cmstype
X-Level-Front-Cache
X-GeoIP-City
X-GeoIP
NM-Fastcgi-Cache
Memcached
Mail-Subject
Content-Disposition
X-Gzip
X-Geo-Header
Pagetype
Server-Ext
Server-Host
X-Generated-In
Release
PFcat
X-Generated-On
Location
Locid
X-HN
X-Hnp-Log
Gh-Request-Id
Ha-Gx-Prefs
HA-Ipaddr
Fastcgi-Cache-TTL
X-Irp-Debug
Kp-EeAlive
L5d-Success-Class
IsBot
CPC-Age
CPC-Cache
X-Owner
X-Planisys-CDN-Rules
X-Sucuri-ID
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Skip-Cache
X-Planisys-CDN-TTL
X-Varnish-CookieHashed-On
X-Req
X-Varnish-Remaining-TTL
X-Varnish-CookieINHashed-On
X-Planisys-CDN-Cache
True-Client-Country-4JS
V-Age
X-Unique-ID
AKAMAI
Arc-Country
Svr
Webserver
X-DefElseHash
X-DefHash
Who
DataCenter
X-Worker
X-Ckpd-Fst-Backend
X-HS-Content-Campaign-Id
X-User
X-Qloud-Router
X-Mvc-Supplant-OutputCached
X-Srv
Cache-Hits
X-PF-Uncompressing
X-Auto-Login
X-V-Cache
X-NC
XServer
X-Ratelimit-Remaining
X-Servedbyhost
X-Tx-Id
X-Via-Popv
X-Varnish-Url
X-Via-Poph
X-Via-Popn
X-Minions-Version
X-NCache
MIME-Version
X-M-Reqid
X-Qnm-Cache
X-M-Log
X-Platform-Processor
X-LSADC-Cache
X-Platform-Router
X-Platform-Cluster
X-Render-Time
X-Vc
X-Rocket-Nginx-Serving-Static
X-ZONE
X-Zone
X-ID
Powered-By-ChinaCache
X-Wa
X-SD-PageType
My-App
X-Traceid
X-Refresh
X-Cache-Remote
WebServer
X-Varnish-Ttl
X-Internal-Host
Environment
X-Newrelic-Synthetics
X-App
X-Datadog-Trace-Id
X-LB-ID
X-Datadog-Parent-Id
Memory
Time
X-Datadog-Sampling-Priority
X-Content
X-Ua-Browser
X-Origin-Time
X-Nyt-Route
X-API-Version
X-BBC-Origin-Response-Status
X-PJAX-URL
X-Gdpr
X-Webkit-Csp
X-Pass-Why
X-TIME
Server-ID
X-Cache-Var
X-Cache-Var-Map
X-CACHE-KEY
X-NodeID
X-Cache-Config
X-TX-ID
X-Server-IP
Cluster
X-Via-Ucdn
X-VCL-Version
Candidate-Md5Url
X-Pod-Name
X-OVcl-Cache
X-OVcl
X-NewRelic-App-Data
Hostname
Datacenter
X-TraceId
Geoip-Latitude
Cf-Bgj
GeoIp-Country-Code
X-CLOUD-TRACE-CONTEXT
X-Webkit-CSP-Report-Only
X-Backend-TTL
X-LI-Proto
X-ElasticPress-Query
X-Tb-Optimization-Total-Bytes-Saved
Resin-Trace
Geo-Info
N-Cache
Magicmarker
X-Edge-Pop
HostName
X-VHOST
Web-Mar-Region
Ohc-File-Size
Tcn
X-CACHE-AGE
X-Dispatcher-Server
X-Method
X-HITS
X-Origin-Response-Time
X-Dynatrace
Onion-Location
DB-Nickname
X-Varnish-Beresp-TTL
X-Akamai-Pragma-Client-IP
X-Geo
Servername
X-Li-Proto
Ssr
X-EIG-Tracking-Id
WWW-Authenticate
X-Varnish-Cacheable
GeoIP-Latitude
X-IP
GeoIP-Country-Code
X-NODE
X-MSEdge-Flight
X-MSEdge-Features
X-Correlation-ID
X-AB
LB
Proxy-Connection
X-Wix-Viewer-Type
X-HostName
Cdn
X-Fastly-Request-Id
X-Cs
X-Node-Id
CDN
Cf-Ipcountry
CF-Cached-On
X-DynaTrace-JS-Agent
X-TIM-N
X-Dynatrace-Js-Agent
X-Tid
X-HS-Status
Redirect-Candidate
X-Trv-Group
Sid
X-Fpc
X-Vcl-Version
Server-Id
X-ND-Cache
X-Tt-Logid
X-APP
WZWS-RAY
X-Fastly-Backend-Reqs
Tracecode
Env
X-Via-CDN
X-Request-Start
X-Pjax-Url
X-MG-S
Lb
X-Cache-Date
Is-Us
Pramga
Cteonnt-Length
URI
X-NGINX-Cache
X-WA
X-Webkit-Csp-Report-Only
X-Up
X-ServerName
X-Nc
X-Via-PopH
X-Via-PopN
X-Via-PopV
X-Lb-Id
X-Reqid
X-Cdn-Origin
X-VC
X-Amz-Meta-Cb-Modifiedtime
X-Check-Cacheable
X-Sn-Servicetimems
Ohc-Cache-HIT
X-CSRF-TOKEN
X-Esi
X-Core-Mission
VivaBuild
W
X-IN-APIGATEWAY
X-IN-APIGATEWAYSSL
X-Provided-By
Rt-Fastcgi-Cache
X-SERVER-NAME
X-Cache-Backend
Viewtype
X-ECache
X-UnsetCookies
Shield-Pop
Mime-Version
X-ServedByHost
X-SN
X-Cache-Expires
CloudFront-Viewer-Country
CountryCode
Server-Ttl
X-LiteSpeed-Cache-Control
X-Cache-ASPX
X-Pf-Uncompressing
X-Contensis-Viewer-Groups
Machine
X-FORWARDED-FOR
CACHE
X-Varnish-Authentication
X-Fastly-Cache-Hits
X-RAMCache
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-Acquia-Purge-Tags
WP-Super-Cache
X-Pad
X-Acquia-Site
X-CUA
X-StackifyID
X-Hcs-Proxy-Type
X-CCDN-Origin-Time
X-RSL
X-Cache-Status-Check
X-Cdn-Request-ID
Xet-Cookie
X-Region-Sid
X-RPS
X-CCDN-CacheTTL
X-Edge-POP
X-Sucuri-Cache
X-Swift-Error
X-Yottaa-OS
X-FTR-Request-ID
X-Webstats-RespID
X-SB
X-RPM
Ohc-Response-Time
X-Dw-Trace-Id
X-DSS
X-DB
X-DI
X-Action
Vha6-Origin
X-DW
X-Cdn-Forward
X-B3-Spanid
X-Oss-Hash-Crc64ecma
X-Oss-Request-Id
FSS-Cache
X-Oss-Object-Type
X-FPC
X-UP
Xc-Version
X-Moov-Xdn-Version
X-Moov-T
X-Oss-Storage-Class
X-CF-Powered-By
X-Oss-Server-Time
Content-Script-Type
X-FTR-Backend-Server
X-FTR-Balancer
X-FTR-Cache-Status
X-FTR-Backend
X-C
ServerName
X-Country-Code-Real
X-MiniProfiler-Ids
X-FTR-DC
X-TH-Server
X-ElasticPress-Search
On-Server
X-FTR-Realm
X-FTR-Expires
Content-Style-Type
Req-ID