Threat Level: green Handler on Duty: Russell Eubanks

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
X-XSS-Protection
X-Powered-By
Pragma
CF-Cache-Status
CF-RAY
Link
ETag
Expect-CT
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Varnish
Alt-Svc
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Download-Options
X-Request-Id
X-AspNet-Version
Access-Control-Allow-Credentials
X-Runtime
X-Drupal-Cache
X-Adblock-Key
X-Check
X-Cache-Status
Content-Security-Policy-Report-Only
X-Generator
X-Request-ID
X-Permitted-Cross-Domain-Policies
X-Cacheable
X-DNS-Prefetch-Control
X-Template
X-Language
Timing-Allow-Origin
X-Iinfo
X-AspNetMvc-Version
X-FRAME-OPTIONS
X-Buckets
Status
Upgrade
X-Content-Security-Policy
Content-Encoding
X-CDN
Access-Control-Expose-Headers
Access-Control-Max-Age
X-Kinja-Server-Push
X-Xss-Protection
Keep-Alive
X-Turbo-Charged-By
X-Drupal-Dynamic-Cache
X-Pass-Why
X-Cache-Group
Xkey
X-AH-Environment
X-Envoy-Upstream-Service-Time
CF-Ray
X-Via
X-Backend
X-Server
X-Age
X-Amz-Id-2
X-Amz-Request-Id
X-Robots-Tag
X-Ws-Request-Id
X-Server-Powered-By
X-Page-Speed
X-Pingback
EagleId
X-Proxy-Cache
X-Hacker
X-UA-Device
X-Nginx-Cache-Status
Request-Context
X-Varnish-Cache
Feature-Policy
Server-Timing
P3p
Cf-Railgun
Grace
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-Amz-Version-Id
X-Ua-Compatible
Report-To
X-LiteSpeed-Cache
X-Rq
X-OneAgent-JS-Injection
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-WebKit-CSP
X-Server-Id
X-Device
X-Host
X-Origin-Cache
X-Response-Time
EagleEye-TraceId
X-Node
X-Ac
Surrogate-Control
Content-Location
X-Cloud-Trace-Context
X-Vhost
X-Readtime
X-Backend-Server
Request-Id
X-Dispatcher
X-Origin-Upstream-Status
X-Cnection
X-Application-Context
X-Cache-Lookup
X-HW
X-Ruxit-JS-Agent
Fusion-Source
Fusion-Template-Id
Fusion-Content-Source
Fusion-Content-Id
Fusion-Component-Id
X-ORACLE-DMS-ECID
NEL
X-Mod-Pagespeed
X-DataDome
X-ORACLE-DMS-RID
X-Dns-Prefetch-Control
X-Rack-Cache
Rating
Edge-Control
X-Country
X-Clacks-Overhead
X-Akam-SW-Version
Pinterest-Generated-By
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
Allow
X-TTL
X-Country-Code
Accept-Ch
X-FTR-Request-ID
X-Instart-Request-ID
X-DynaTrace
X-Varnish-TTL
X-Goog-Hash
X-Vname
X-PC
X-TtlSet
Verso
Content-MD5
Accept-Ch-Lifetime
X-ESI
Service-Worker-Allowed
X-Powered-By-Plesk
X-Url
X-Forwarded-Proto
X-Version
X-MS-InvokeApp
X-Exp-Variant
X-GoogleNews-Bot
X-GitHub-Request-Id
X-Cdn-Fetch
X-Exp-Id
X-Kinja-Server
X-Kinja-Revision
X-Kinja
X-Use-Magma
X-Kinja-Build
X-B3-TraceId
RTSS
Edge-Cache-Tag
X-Vcache
X-Server-Name
X-D2id
X-Debug
X-Abt-Application-Version
X-Px
AR-PoweredBy
AR-Request-ID
AR-ATIME
AR-CACHE
Ar-Sid
X-Amz-Server-Side-Encryption
SPRequestGuid
Charset
X-NF-Request-ID
X-Cached
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-Middleton-Response
Response
Display
X-Sol
Pagespeed
X-Middleton-Display
X-Accel-Expires
X-Vcap-Request-Id
X-MSEdge-Ref
X-Navigation-Version
X-Amz-Rid
Arr-Disable-Session-Affinity
X-Pinterest-Rid
Pinterest-Version
TCN
X-SharePointHealthScore
X-Fastcgi-Cache
X-Powered-CMS
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-VARITI-CCR
X-Cdn
Public-Key-Pins
X-Trace
X-Fastly-Request-ID
Cache-Tag
Realpath
X-Client-IP
Nginx-Cache
MS-Author-Via
X-Edge-O15-RID
Access-Control-Request-Method
X-Ser
X-Server-ID
X-DynaTrace-JS-Agent
X-Shard
X-Mrf-Section-Lastmod
X-Mrf-Item-Lastmod
Mrf-Cache-Status
MRF-Tech
X-B3-TraceId-Primal
SPIisLatency
X-Content-Type
SPRequestDuration
S
X-Id
X-Ezoic-Cdn
X-Upstream
X-Amzn-Trace-Id
X-Hp-Webp
X-Grace
X-Forwarded-For
X-T
X-Amz-Meta-S3cmd-Attrs
X-Jurisdiction
Nel
X-Hits
Front-End-Https
Fastcgi-Cache
X-Recruiting
DynaTrace
X-Aspnet-Version
X-Cache-TTL
X-Varnish-Age
ServerID
X-Element-Page-Cache
X-Node-Name
MicrosoftSharePointTeamServices
X-Content-Digest
X-Mobile-URL
X-FTR-DC
X-FTR-Expires
X-FTR-Backend
X-Country-Code-Real
X-FTR-Backend-Server
X-FTR-Realm
X-FTR-Balancer
X-FTR-Cache-Status
X-Dw-Request-Base-Id
X-DIS-Request-ID
Server-Node
NR-ENABLED
X-HS-Hub-Id
X-HS-Content-Id
X-HS-Cache-Config
X-HS-Combine-CSS
X-Goog-Metageneration
X-GUploader-UploadID
X-Goog-Generation
Powered
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Frontend
X-Goog-Storage-Class
TP-Cache
TP-L2-Cache
Alternate-Protocol
X-Logged-In
Server-Name
X-CST
X-Correlation-Id
AMP-Access-Control-Allow-Source-Origin
X-XRDS-Location
X-Amz-Apigw-Id
X-Amzn-RequestId
Upgrade-Insecure-Requests
X-Request-Received
X-Request-Processing-Time
X-Request-Handler-Origin-Region
X-Microsite
X-ATS-Timestamp
Backend-Timing
X-Cache-Hit
Fastly-Restarts
X-Content-Options
Refresh
X-Origin-Server
X-F-Cache
X-Content-Security-Policy-Report-Only
X-User-Agent
X-Rid
X-Page-Id
X-Akamai-Edgescape
X-Zen-Fury
X-Revision
X-Varnish-Grace
X-Type
X-FTR-Cache-Host
X-Content-Powered-By
X-LB-Cache
X-B
X-XRDS-LOCATION
X-B3-Sampled
X-Geo-Country
PB-RID
PB-PID
X-URL
Arc-Version
X-Mobile-Rewrite
X-Activity-Id
X-Az
X-AppVersion
Cache-Status
X-Kinsta-Cache
X-N
X-Cache-Age
X-Cache-Action
X-TT
X-AOL-HN
X-Instance
X-Signature
X-B-Cache
X-WebKit-CSP-Report-Only
X-Debug-Info
X-Tumblr-User
X-Time
X-Framework
X-Tumblr-Pixel
X-Load-Cache
Access-Control-Allow-Method
X-Tumblr-Pixel-0
Actual-Object-TTL
Paypal-Debug-Id
X-Jobs
X-FB-Debug
X-App-Environment
X-Cached-By
X-Pad
X-PHP-Backend
X-Shield-Request-Id
X-Request-Guid
X-Git-Hash
DC
Fastcgi-Useragent
X-Tt-Trace-Tag
X-Tt-Trace-Host
X-RateLimit-Remaining
X-Webkit-Csp
X-Amz-Replication-Status
X-Varnish-Backend
Surrogate-Key
Host-Header
X-IPLB-Instance
X-Contextid
MS-CV
X-Erf-Bev-Bev-Is-Generated
X-ATG-Version
X-Erf-Bev-Bev
X-WA-Info
Host
X-NWS-LOG-UUID
X-Webapp-Samesite-None-Activated-N
X-SS-Set-Cookie
X-Analytics
X-FastCGI-Cache
X-ORACLE-APMCS-REQUEST-ID
X-Cache-Key
X-ORACLE-APMCS-TAG
FilterID
X-Mobile
X-Via-JSL
NGB
X-Response-Served-From
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-Accel-Buffering
X-Host-Name
Tracecode
X-Cluster
Payment
X-Cache-NE
X-B3-Traceid
X-FW-Serve
X-Cache-2
WPE-Backend
Source
Eomportal-Instance
Xserver
Frame-Options
X-Varnish-Server
X-FW-Type
X-FW-Hash
X-FW-Static
X-Origin-Response-Time
X-Region
X-FW-Server
X-GeoIP
X-Varnish-Hostname
Filters
Cache-Tv-Group
X-Tumblr-Pixel-1
X-IPS-LoggedIn
X-Tumblr-Pixel-2
X-Cacheable-TTL
X-Adobe-Content
X-Cache-Enabled
X-Adobe-Loc
X-RequestSource
X-Seen-By
X-Rendered-As
X-EdgeConnect-Cache-Status
X-Cache-Operation
X-Cache-Rule
X-Srv
Retry-After
X-Hostname
X-Is-Bot
X-NewRelic-App-Data
X-TX-ID
X-Presslabs-Stats
Server-Info
X-Cache-TTL-Remaining
X-ProcessESI
X-RemovedCookies
Liferay-Portal
Cleartype
Accept-CH
X-App-Server
X-Environment-Context
X-L-Path
X-RTag
Ms-Operation-Id
X-FireWall-Port
X-Source
X-Endurance-Cache-Level
X-Dc
X-Cache-Server
X-HTML-Minification-Powered-By
X-Handled-By
X-Upgrade-Enabled
Datacenter
From-Origin
X-VCache
X-UA
X-CACHE-KEY
X-APP-VERSION
X-Backend-Name
X-Esi
Accept-CH-Lifetime
Srv
X-PressLabs-Stats
Accept-Charset
Cache
X-Cache-Control
X-ES-SERVER
X-Cache-Var
Meta-Geo
X-Wix-Request-Id
X-Path-Route
X-Cache-Var-Map
X-RN-RSRV
X-Proxy-Build
X-Access
Selected-Fe
X-UUID
OT-Force-Account-Verify
X-Tb
X-Format
X-Timing-Wait
X-Section
Akamai-GRN
X-Status
X-Akamai-Request-ID
X-Alternate-Cache-Key
X-Cache-Config
X-Content-Age
Mn-Server-Ip
Azure-Version
X-Sorting-Hat-ShopId
X-Proto
X-PCL
Azure-SlotName
Cache-Tags
X-Request-Time
X-Sorting-Hat-PodId
Healthy
X-ShardId
X-ShopId
X-Shopify-Generated-Cart-Token
X-Shopify-Stage
X-OCL
X-Origin
Azure-RegionName
Azure-InstanceId
X-Goog-Meta-Goog-Reserved-File-Mtime
Azure-SiteName
X-NYM-Debug-Backend
X-EIG-Tracking-Id
X-FC-Vary-Parameters
Version
Origin-Edge-Control
Ec-Rule-Version
NGX
DB-Nickname
Origin-Cache-Control
Decoy-Debug-Key
Decoy-Debug-Status
Now
Node
X-SayCDN-TTL
X-SaId
X-Say-Cacheable
X-Redis-Cache
X-Qloud-Router
X-ProxyCache-Status
X-Pubstack
X-Say-TTL
X-ServerID
X-VWS-Id
X-Web-Node
X-Viewer-Country
X-Vgn-Hpd-Reason
X-Soup
X-Time-Microsecs
X-ProxyCache-Key
X-Proxy-Cache-Status
X-FW-Dynamic
X-Generated-By
X-Debug-Cache
X-Cluster-Node
X-AWS-Id
X-BYPASS-REASON
X-Hl-Ver
X-Hosted-By
X-LJ-Flow-ID
X-Proxy
X-JoinUs
X-Hyper-Cache
X-Human
X-Akamai-Request-ID2
Decoy-Debug-TTL
X-Yottaa-Metrics
X-Yottaa-Optimizations
TWC-Device-Class
TWC-Connection-Speed
X-Loop
X-MP-GENERATED-AT
X-BCube-Filmed-By
Webcakes-Region
Property-Id
X-CCM
X-RateLimit-Limit
X-FB-TRIP-ID
X-Origin-Hint
X-Generated
TWC-GeoIP-Country
X-Site-Version
X-Varnish-Hits
Webcakes-App-Version
X-TNCMS
X-Storage
Cross-Origin-Window-Policy
X-Www-Served-By
TWC-Locale-Group
TWC-Privacy
Webcakes-App-Name
X-Amzn-Remapped-Content-Length
TWC-GeoIP-LatLong
S-Rt
X-Akamai-Transformed
X-R9-Blue-Green-Version
X-RCS-CacheZone
X-NCache
X-Xfnlog-Site
X-Locale
GEO-INFO
X-Rule
X-Cache-Host
X-IP
X-Detected-As
X-Unique-Id
X-Ttl
L5d-Success-Class
Cache-Key
X-Drupal-Cache-Tags
X-CS
Cache-Name
Webserver
Uber-Trace-Id
Time
Viewport
X-UA-Device-Type
X-Mode
X-UnsetCookies
X-Whom
X-Backend-TTL
X-Forwarded-Host
X-Daa-Tunnel
Mime-Version
X-NGENIX-Cache
X-CDN-Forward
X-Origin-CC
X-Origin-TTL
Rt-Fastcgi-Cache
X-Info
Accept-Language
Content-Disposition
X-B3-Spanid
Country
X-Cache-Remote
X-Varnish-Cache-Hits
X-From
Odigeo-Trace-Id
X-PERF
X-ApacheServer
ServedBy
X-Magnolia-Registration
Section-Io-Cache
X-Newrelic-Synthetics
X-CLOUD-TRACE-CONTEXT
X-Cluster-Name
X-Drupal-Cache-Contexts
VIX-Pulpo-Upstream-Status
X-Microcachable
X-Routing-Service
VIX-Pulpo-Node
X-Proxied
X-Zipkin-Id
X-Geo
X-Device-Type
X-Via-Fastly
X-TT-TIMESTAMP
Proxy-Connection
X-Uri
X-EC-Lua
Cf-Ipcountry
Geo-Info
Ohc-File-Size
HitType
X-Nc
X-Destination
GEO-REGION-INFO
X-DPWN-IS-SECURE
X-A-Dgt
Machine
Content-Script-Type
Content-Style-Type
X-External-Request-Id
Fastcgi-X-Cache-Version
AsisCache
X-B-Cookie
X-GeoIP-Country-Code
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
X-Geo-Header
Apple-News-Services-Handled
MD5-Digest
X-D
Access-Control-Request-Headers
Meta-Geo-Continent
X-CF-Lambda-Fn
X-Date
X-G
X-CF-Lambda-Version
BehaviorPad-Version
Mobile-Detection-Method
Apple-News-Services-Request-Url
X-Connection-Hash
Rendered-Blocks
X-ARC
W
VivaBuild
X-Transaction
X-Twitter-Response-Tags
X-Aed
Viewtype
X-SRCache-Key
X-ScT
X-Session-Fingerprint
X-Sigma
X-Sigma-Backend
X-Accel-Expires-Debug
X-A-Wwc
X-A-Ccd
X-Vtex-Remote-Cache
X-A-Dam
X-A-Dcw
Xc-Version
X-Vtex-Processado-Em
X-A
X-Vdms-Version
X-VG-TLSProxy
X-VG-WebCache
X-VG-WebServer
X-S-Cookie
X-Trv-Group
X-Rewrite-Enabled
X-Rojux
X-Region-Sid
X-Application
X-Request-UUID
X-S
X-Rocket-Build-Number
T-Server
X-UPSTREAM-Address
X-Varnish-Beresp-Ttl
X-Edge-Location
User-Cache-Control
X-No-Session
Ohc-Cache-HIT
X-Varnish-Beresp-Grace
X-C
X-Varnish-Beresp-Status
X-CUA
Fastly-SIE
X-Real-IP
CDCHOST
Countrycode
X-Agile
Fastly-Soc-X-Request-Id
X-Auto-Login
X-Eu-Site
X-Varnish-Authentication
X-Hit
Environment
X-Rebelmouse-Cache-Control
X-Cache-ASPX
X-WebServer
X-VC-Cache
X-Bip
X-Rebelmouse-Surrogate-Control
Server-Cache-Control
X-Wikidot-Static-Cache
Ha-Gx-Prefs
Gh-Request-Id
X-Agile-Id
Powered-By
X-SIPLIST1
X-Logging-Id
X-Cache-Debug
X-App-Name
X-Developers
HA-Ipaddr
X-Thanos
X-CGP
X-Agile-Age
X-Wikidot-Backend
X-Tumblr-Pixel-3
Fastly-SWR
Locid
X-Clientip
X-TrackingId
IsBot
X-Distil-CS
Server-Surrogate-Control
X-Contensis-Viewer-Groups
Fastly-SSL
X-GoCache-CacheStatus
X-Cache-Time
X-Cache-Backend
X-Cache-Bucket
X-Clara-WADP
X-Debug-Cookies
X-Cdn-Srv
X-Air-Hostname
X-Cache-Info
X-Cache-Tags
X-Cache-URL
X-Cms-Context
X-BBXSRF
X-Azure-Ref
X-Debug-Cache-Fetch
X-Block-Status
X-Debug-Cache-Store
X-Debug-Log
X-Backend-State
X-Core-Mission
X-Debug-Cache-Expiry
X-NodeID
X-RateLimit-Limit-Second
X-Proxy-Upstream
X-RateLimit-Remaining-Second
X-Render-Time
X-Server-W
X-Request-URI
X-Platform-Server
X-PHP-Host
X-Origin-Expires
X-Origin-Date
X-OVcl
X-OVcl-Cache
X-Owner
X-Servername
X-SVT-ORM-RULES
X-Variation
X-Urbn-Site-Id
X-VServer
X-WADP-Cache
X-Webstats-RespID
X-We-Are-Hiring
X-Urbn-Context-Path
X-Up
X-Swa-Ws
X-SVT-ORM-VERSION
X-TH-Server
X-Trace-Id
X-TT-LOGID
X-NX-Host
X-NU-AKA-ACS-Version
X-Generation-Time
X-Generated-In
X-GeoIP-City
X-Has-Esi
X-Hnp-Log
X-Hash
X-Gen-Mode
X-Gamma-Serve
X-Epic-Correlation-Id
X-Distributor
X-Fastly-Cache
X-Fetched-On
X-FW-Version
X-IN-APIGATEWAY
X-IN-APIGATEWAYSSL
X-LI-UUID
X-LI-Proto
X-Micro-Cache
X-Ms-Request-Id
X-Nginx-Cache-Key
X-Ms-Version
X-Li-Pop
X-Li-Fabric
X-Irp-Debug
X-Instart-Isnd
X-Is-Gdpr
X-JWT-State
X-Labrador-Cache-Channel
X-Dispatcher-Server
X-AK-Request-ID
Memcached
Mail-Subject
Kp-EeAlive
Platform
Request-Country
RNT-Time
RNT-Machine
Request-EU
Is-Eu
IBM-Web2-Location
Cache-Host
AKAMAI
Adler-Geo
Cdncip
Cdnsip
Heartbleed
Country-Code
Server-ID
Locale
We-Hiring
Server-Int
V-Age
True-Client-Country-4JS
Web-Mar-Node
X-Trafficlayer-App-Scope
X-Trafficlayer-App-Name
Group
Fastly-Backend-Name
X-Var-Ttl
X-User
X-Matched-Rule
X-Thinkindot-L3
X-Cache-Expired-At
X-Trafficlayer-App-Version
X-Service
X-Generated-On
Wxu-Next-Hostname
Wxu-Next-Commit
ServerName
X-Old-Content-Length
X-Level-Front-Cache
X-ServiceProvider
FNAC-ModuleRouting
Wxu-Next-Region
Thinkindot-Control
X-Reboot
Thinkindot-CacheControl-Type
X-Core-Value
Server-Host
X-Req
PFcat
Thinkindot-CacheControl
Filterid
X-Nginx-Cache
X-Internal-Host
X-Lb-Id
Cache-Hits
Pragrma
X-S-Maxage
X-SERVER
X-App-Version
S-Cnection
X-VHOST
X-Sucuri-Cache
RequestId
X-Refresh
X-Response-By
X-Key
X-CSRF-TOKEN
X-Ruxit-Js-Agent
Powered-By-ChinaCache
X-Location
X-Ua
X-CF-Powered-By
X-Tb-Optimization-Total-Bytes-Saved
X-NC
X-Parent-Response-Time
X-Tec-Api-Root
X-Tec-Api-Origin
X-TA-CDN-Provider
X-Tec-Api-Version
X-Wa
X-Sucuri-ID
X-Varnish-Cacheable
X-Pjax-Url
ProcessTime
Origin
X-Cdn-Forward
X-B3-Parentspanid
X-BACKEND-TTL
X-Pf-Uncompressing
Memory
User-Agent
X-Via-CDN
X-CSRF-Token
X-Node-Id
X-Developer
SRV
X-NWS-UUID-VERIFY
X-Cache-Grace
PICS-Label
Geoip-City
X-LAGOON
X-Device-Os
Geoip-Latitude
X-Ocache
X-Cdn-Origin
X-Server-IP
X-Correlation-ID
TTL
X-Sn-Servicetimems
X-B3-SpanId
X-Oss-Storage-Class
X-Oss-Server-Time
X-Oss-Request-Id
X-Oss-Object-Type
X-Oss-Hash-Crc64ecma
GeoIp-Country-Code
X-Vcl-Version
X-COUNTRY
X-NGINX-Cache
On-Server
X-Cache-Status-Check
X-Oracle-Dms-Rid
Hostname
X-Unique-ID
X-Request-Host
X-MSEdge-Features
A
X-MSEdge-Flight
X-Servedbyhost
Cloudfront-Viewer-Country
X-Webkit-CSP
X-Cdn-Request-ID
Media-Length
X-Litespeed-Cache
X-Rocket-Nginx-Bypass
Dnion-Transfer-Encoding
SN
X-Varnish-Ttl
X-TIME
XServer
X-Via-Ucdn
M-TraceId
Tcn
Cdn
X-FORWARDED-FOR
Host-ID
X-Varnish-URL
X-HS-Status
Resin-Trace
X-Sucuri-Id
X-Ratelimit-Remaining
X-ServedByHost
Who
Esi-Enabled
X-Beluga-Response-Time
X-Beluga-Trace
X-Beluga-Status
X-Beluga-Node
X-Beluga-Cache-Status
X-AIR-PT
X-Cache-Ttl
X-Reqid
X-Beluga-Record
HostName
X-Fastly-Country-Code
X-Slack-Backend
CF-Cached-On
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
X-Policy
X-Planisys-CDN-Cache
X-Action
X-Request-Start
GeoIP-Country-Code
X-VCL-Version
CACHE
X-Azure-Ref-OriginShield
X-DC
X-Dispatch
X-Cache-FS-Status
GeoIP-City
Pramga
GeoIP-Latitude
Ttl
Arc-Country
X-RPS
X-RPM
X-DB
Rt-Proxy-Cache
X-RSL
Pics-Label
X-PAYTM-SRV-ID
X-DSS
X-DW
X-Processor
X-DI
X-Server-Time
MIME-Version
X-LiteSpeed-Cache-Control
X-ND-Cache
X-Fastly-Backend-Reqs
X-ABtesting
X-Flog
X-Skip-Cache
X-Hello
X-Zone
X-Varnish-Url
NtCoent-Length
X-Bc
X-Edge-Server
Magicmarker
X-Served-From
Cdn-Host
X-APP
Fastly-Drupal-HTML
X-VarnishDD-TTL
X-Method
X-PF-Uncompressing
X-Ratelimit-Limit
X-FPC
X-Newrelic-App-Data
Cdn-Request-Time
X-HostName
X-DevSite-Last-Modified
X-Bc-Bl
X-SRV
Amp-Access-Control-Allow-Source-Origin
N-Cache
WebServer
Cteonnt-Length
X-PJAX-URL
X-Ftr-Cache-Host
Section-Io-Origin-Time-Seconds
Section-Io-Id
X-Swift-Error
Trailer
Section-Origin-Responded
Section-Io-Origin-Status
Processtime
X-Amzn-Remapped-Date
X-Dynatrace
X-Backend-Host
X-Amzn-Remapped-Connection
X-BE
X-Dynatrace-Js-Agent
Servername
Ohc-Response-Time
X-ID
X-Svr
X-WA
Cache-Provider
X-Be
X-Frame-Option
X-WR-MODIFICATION
X-Branch-Name
X-LB-ID
X-Snapshot-Date
Cache-Cookie-Set-From
Dynatrace
CDN
X-ZONE
Cache-Cookie-Set-Idcheck
Load-Balancing
Cache-Cookie-Set-Lfrom
X-Aicache-OS
X-BC
CF-IPCountry
Vix-Hermes-Req-Id
X-StackifyID
X-Fmm-Version
Lfy
FSS-Proxy
FSS-Cache
X-Adobe-Source
Requestid
Fusion-Deployment-Id
X-CACHE-AGE
Proxy-Firewall
X-Fastly-Cache-Hits
X-Tid
WZWS-RAY
Pagetype
X-Apw-Hits
D-Cc-Upstream
V-Cache
X-Request-Url
Warning
X-SB
X-VC
X-Scheme
X-Cc-Req-Id
X-Apw-Access-Action
X-Apw-Access-Object
X-Apw-Access-Token
X-Cc-Via
DSUID
X-Litespeed-Cache-Control
X-MServer
Cneonction
X-WPE-Loopback-Upstream-Addr
X-Fpc
Backend-Name
X-Check-Cacheable
X-Worker
WP-Super-Cache
X-ElasticPress-Search
X-Powered-Y
X-Request-URL
X-Varnish-Beresp-TTL
X-App
X-Hp-Ccpa-Warning
X-Configured-By
X-VCT
Correlation-Id
X-Fastly-Cache-Status
Release