Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
CF-Cache-Status
Pragma
Link
CF-RAY
X-Powered-By
ETag
Expect-CT
X-XSS-Protection
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Xss-Protection
X-Varnish
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
Alt-Svc
X-Download-Options
X-Request-Id
X-AspNet-Version
Access-Control-Allow-Credentials
X-Runtime
X-FRAME-OPTIONS
X-Drupal-Cache
X-Adblock-Key
X-Request-ID
X-Check
X-Generator
Content-Security-Policy-Report-Only
X-Cache-Status
X-Permitted-Cross-Domain-Policies
X-Cacheable
Timing-Allow-Origin
X-DNS-Prefetch-Control
X-Iinfo
X-Template
X-Language
X-AspNetMvc-Version
Status
X-Content-Security-Policy
X-Buckets
Content-Encoding
Access-Control-Expose-Headers
X-CDN
Upgrade
Xkey
Access-Control-Max-Age
Keep-Alive
X-Drupal-Dynamic-Cache
X-Kinja-Server-Push
CF-Ray
X-Turbo-Charged-By
X-AH-Environment
X-Via
X-Ua-Compatible
X-Age
X-Cache-Group
X-Pass-Why
X-Backend
X-Envoy-Upstream-Service-Time
EagleId
X-Server
X-Amz-Id-2
X-Amz-Request-Id
X-Robots-Tag
X-Page-Speed
X-Pingback
X-Server-Powered-By
X-UA-Device
X-Proxy-Cache
X-Swift-CacheTime
X-Swift-SaveTime
X-Hacker
X-Nginx-Cache-Status
Ali-Swift-Global-Savetime
Request-Context
X-Varnish-Cache
Grace
Server-Timing
Feature-Policy
Cf-Railgun
X-Amz-Version-Id
X-LiteSpeed-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Device
X-Rq
X-Server-Id
Report-To
X-WebKit-CSP
X-Dns-Prefetch-Control
EagleEye-TraceId
X-Response-Time
X-Ac
X-Host
Request-Id
X-Ws-Request-Id
X-OneAgent-JS-Injection
X-Cnection
X-Backend-Server
X-Node
X-DataDome
Content-Location
X-Origin-Cache
X-Cache-Lookup
NEL
X-Cloud-Trace-Context
X-Readtime
X-Vhost
P3p
X-Application-Context
X-HW
X-Dispatcher
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-Cdn
Allow
X-Clacks-Overhead
X-Rack-Cache
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
Surrogate-Control
X-Origin-Upstream-Status
X-DynaTrace
Rating
X-Country
Fusion-Content-Id
Fusion-Component-Id
Fusion-Template-Id
Fusion-Content-Source
Fusion-Source
X-FTR-Request-ID
X-Akam-SW-Version
X-Country-Code
X-Goog-Hash
X-Varnish-TTL
X-Instart-Request-ID
Pinterest-Generated-By
Edge-Control
X-Vname
X-TtlSet
X-PC
X-B3-TraceId
X-Mod-Pagespeed
X-MS-InvokeApp
X-Url
X-Ruxit-JS-Agent
Verso
SPRequestGuid
Accept-Ch
X-Powered-By-Plesk
X-D2id
X-ESI
X-Trace
X-VARITI-CCR
X-SharePointHealthScore
X-Server-Name
Service-Worker-Allowed
X-Middleton-Response
Response
X-GitHub-Request-Id
Pagespeed
X-Sol
Display
X-Middleton-Display
X-GoogleNews-Bot
X-Kinja-Revision
X-Kinja-Server
X-Use-Magma
X-Kinja-Build
X-Kinja
X-Exp-Id
X-Exp-Variant
X-Cdn-Fetch
Content-MD5
RTSS
SPRequestDuration
X-Navigation-Version
SPIisLatency
X-Powered-CMS
X-Vcache
X-Abt-Application-Version
X-TTL
X-Debug
Accept-Ch-Lifetime
X-Forwarded-Proto
X-Amz-Server-Side-Encryption
X-Upstream
Charset
X-Cached
X-Vcap-Request-Id
Public-Key-Pins
MS-Author-Via
X-CST
X-NF-Request-ID
DynaTrace
X-Version
X-Amz-Rid
Realpath
Edge-Cache-Tag
X-Px
MicrosoftSharePointTeamServices
X-Shard
Arr-Disable-Session-Affinity
X-DynaTrace-JS-Agent
X-Ezoic-Cdn
X-Trafficlayer-App-Scope
X-Trafficlayer-App-Name
X-Shield-Request-Id
Access-Control-Request-Method
X-MSEdge-Ref
X-Pinterest-Rid
X-Server-ID
Pinterest-Version
TCN
X-Ser
X-SRCache-Fetch-Status
S
X-SRCache-Store-Status
X-Fastly-Request-ID
Fastly-Restarts
X-Accel-Expires
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-DIS-Request-ID
X-XRDS-Location
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Goog-Generation
X-Client-IP
Front-End-Https
X-Recruiting
X-Amz-Meta-S3cmd-Attrs
X-T
X-Id
X-Goog-Storage-Class
X-Element-Page-Cache
Nginx-Cache
X-Varnish-Age
X-Webapp-Samesite-None-Activated-N
Cache-Tag
X-B3-TraceId-Primal
X-FTR-Backend-Server
X-FTR-Balancer
X-FTR-Cache-Status
X-FTR-DC
X-FTR-Backend
X-Country-Code-Real
MRF-Tech
X-FTR-Realm
X-Mrf-Item-Lastmod
X-Mrf-Section-Lastmod
Mrf-Cache-Status
X-Amzn-Trace-Id
X-FTR-Expires
X-Webkit-Csp
X-Dw-Request-Base-Id
X-Ttl
Fastcgi-Cache
X-Fastcgi-Cache
X-HS-Hub-Id
X-Frontend
X-HS-Content-Id
X-HS-Cache-Config
X-Content-Digest
NR-ENABLED
Powered
X-Hits
X-Correlation-Id
X-Kinsta-Cache
Alternate-Protocol
X-Hp-Webp
X-FTR-Cache-Host
X-Oneagent-Js-Injection
X-Aspnetmvc-Version
X-Request-Processing-Time
X-Request-Received
ServerID
X-N
X-HS-Combine-CSS
X-Content-Type
Server-Name
X-Microsite
X-RateLimit-Remaining
X-Request-Handler-Origin-Region
X-Cache-Hit
X-Grace
PB-PID
PB-RID
X-Mobile-Rewrite
Arc-Version
TP-Cache
X-Node-Name
X-User-Agent
TP-L2-Cache
X-Rid
Healthy
X-Revision
X-Akamai-Edgescape
X-Ruxit-Js-Agent
Backend-Timing
X-Content-Security-Policy-Report-Only
X-Analytics
X-Forwarded-For
X-Zen-Fury
AMP-Access-Control-Allow-Source-Origin
Server-Node
X-Logged-In
X-Pad
X-LB-Cache
X-Amzn-RequestId
X-Amz-Apigw-Id
X-Mobile-URL
X-Activity-Id
X-AppVersion
X-Az
X-Varnish-Grace
Cache-Status
X-NWS-LOG-UUID
Accept-CH-Lifetime
X-Cached-By
Accept-CH
X-B3-Sampled
X-IPLB-Instance
X-Content-Options
X-F-Cache
Refresh
Retry-After
X-Type
X-Geo-Country
Upgrade-Insecure-Requests
X-GUploader-UploadID
X-FastCGI-Cache
X-Varnish-Backend
FilterID
X-App-Environment
Paypal-Debug-Id
X-Tumblr-Pixel
X-Srv
X-Tumblr-Pixel-0
X-Tumblr-User
X-Instance
X-FB-Debug
Source
AR-PoweredBy
AR-CACHE
AR-ATIME
X-Framework
X-PHP-Backend
DC
Access-Control-Allow-Method
X-Cluster
X-Request-Guid
X-Jobs
X-Debug-Info
X-Page-Id
Accept-Charset
Actual-Object-TTL
X-WebKit-CSP-Report-Only
Host
X-AOL-HN
X-Cache-2
X-B
X-ATG-Version
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
Cache
X-Cache-Key
X-Cache-Age
X-TT
X-Seen-By
Fastcgi-Useragent
X-PressLabs-Stats
Ar-Sid
X-Git-Hash
MS-CV
X-Via-JSL
VIX-Pulpo-Upstream-Status
X-Content-Powered-By
VIX-Pulpo-Node
X-Cache-TTL
X-B-Cache
X-Whom
X-Signature
X-Amz-Replication-Status
Host-Header
X-UA
X-Daa-Tunnel
X-Cache-Control
X-Wix-Request-Id
NGB
X-Cache-Enabled
Surrogate-Key
X-Response-Served-From
X-Host-Name
X-Origin-Server
X-Mobile
X-TA-CDN-Provider
X-RequestSource
X-GeoIP
Cache-Tv-Group
X-Tumblr-Pixel-1
X-Tumblr-Pixel-2
WPE-Backend
X-Hyper-Cache
Frame-Options
X-Region
X-Handled-By
X-TX-ID
AR-Request-ID
X-FW-Type
X-FW-Hash
Cleartype
Eomportal-Instance
Payment
Filters
X-FW-Serve
X-FW-Server
X-FW-Static
X-Cache-Action
X-Cacheable-TTL
X-Drupal-Cache-Tags
Xserver
X-Litespeed-Cache
X-EdgeConnect-Cache-Status
X-Adobe-Content
X-Adobe-Loc
X-SERVER
X-Cache-NE
X-ATS-Timestamp
Webserver
X-Kong-Proxy-Latency
X-Cache-Rule
X-Cache-Operation
X-Esi
X-Kong-Upstream-Latency
Datacenter
X-NewRelic-App-Data
From-Origin
X-Akamai-Transformed
X-Load-Cache
X-RemovedCookies
X-ProcessESI
X-UA-Device-Type
X-Hostname
X-Edge-Location
X-Forwarded-Host
Ms-Operation-Id
X-RTag
X-Cache-TTL-Remaining
Liferay-Portal
X-Cache-Server
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-XRDS-LOCATION
X-Varnish-Server
X-Varnish-Hostname
X-Status
X-Rule
X-Contextid
X-App-Server
X-Oss-Hash-Crc64ecma
X-Oss-Storage-Class
X-Oss-Object-Type
X-Oss-Server-Time
X-Oss-Request-Id
X-ORACLE-APMCS-TAG
X-ORACLE-APMCS-REQUEST-ID
Country
Odigeo-Trace-Id
X-Upgrade-Enabled
Meta-Geo
Load-Balancing
X-TT-TIMESTAMP
X-ES-SERVER
X-Cache-Var
X-Cache-Var-Map
X-RN-RSRV
X-Path-Route
X-BCube-Filmed-By
X-UUID
X-Xfnlog-Site
X-Time
DSUID
Release
TWC-Privacy
Webcakes-App-Name
TWC-GeoIP-LatLong
TWC-Locale-Group
TWC-Connection-Speed
X-Viewer-Country
X-CCM
TWC-GeoIP-Country
X-Debug-Cache
X-From
Cache-Tags
X-VCT
X-R9-Blue-Green-Version
X-Rocket-Nginx-Bypass
Webcakes-Region
X-Pubstack
X-PCL
Webcakes-App-Version
Mn-Server-Ip
TWC-Device-Class
X-OCL
X-Origin-Hint
X-Cache-Config
Property-Id
X-Loop
X-IP
Azure-InstanceId
X-Origin-Response-Time
X-Proto
X-Real-IP
X-Proxy-Build
X-Proxy
Azure-RegionName
Azure-SiteName
X-Goog-Meta-Goog-Reserved-File-Mtime
X-FW-Dynamic
X-Drupal-Cache-Contexts
Cache-Name
X-Hosted-By
Azure-SlotName
Azure-Version
X-Human
X-FC-Vary-Parameters
Fastly-SSL
X-EIG-Tracking-Id
X-Cache-Host
X-Akamai-Request-ID2
Tracecode
X-Redis-Cache
S-Rt
Selected-Fe
NGX
DB-Nickname
X-Akamai-Request-ID
X-Vgn-Hpd-Reason
X-TNCMS
X-Timing-Wait
X-Soup
L5d-Success-Class
X-Via-Fastly
X-Web-Node
X-Access
X-Backend-Name
X-Content-Age
Viewport
X-Locale
X-FireWall-Port
X-Cache-Time
X-Labrador-Cache-Channel
X-Origin
X-ServerID
Origin-Edge-Control
Origin-Cache-Control
S-Cnection
X-Generated
X-Section
X-Site-Version
X-Www-Served-By
X-Format
X-Varnish-Cache-Hits
Decoy-Debug-Key
Server-Info
Decoy-Debug-TTL
Ec-Rule-Version
X-NWS-UUID-VERIFY
Decoy-Debug-Status
X-Cluster-Name
Version
Uber-Trace-Id
X-BYPASS-REASON
X-ApacheServer
X-Time-Microsecs
X-ProxyCache-Key
X-Rendered-As
X-Is-Bot
X-ProxyCache-Status
X-PERF
X-JoinUs
X-Storage
X-Cache-Backend
X-Accel-Buffering
X-Varnish-Hits
X-VCache
X-Generated-By
X-Info
X-Guploader-Uploadid
X-PHP-Host
X-Amzn-Remapped-Content-Length
X-App-Version
X-Origin-TTL
X-URL
X-Origin-CC
Akamai-GRN
Rt-Fastcgi-Cache
X-SaId
X-Geo
X-Nginx-Cache-Key
X-WA-Info
Time
X-CF-Powered-By
Cache-Key
Cteonnt-Length
X-RateLimit-Limit
X-No-Session
X-Tec-Api-Version
X-Tec-Api-Root
X-Environment-Context
X-MServer
X-L-Path
Origin
X-Tec-Api-Origin
GEO-INFO
Accept-Language
Cache-Hits
X-Tb
X-GoCache-CacheStatus
X-Cache-Remote
Vix-Hermes-Req-Id
X-FB-TRIP-ID
Access-Control-Request-Headers
X-Presslabs-Stats
X-NCache
X-Say-Cacheable
X-Say-TTL
X-B3-SpanId
X-Trace-Id
X-SayCDN-TTL
X-Hit
X-Backend-TTL
Srv
X-Unique-Id
X-B3-Traceid
X-SS-Set-Cookie
X-Device-Type
X-ShardId
X-ShopId
X-Sorting-Hat-PodId
X-Shopify-Stage
X-APP-VERSION
X-Shopify-Generated-Cart-Token
X-Alternate-Cache-Key
X-Tumblr-Pixel-3
X-Sorting-Hat-ShopId
X-EC-Lua
X-CS
X-CDN-Forward
X-OVcl-Cache
X-CACHE-KEY
X-OVcl
X-Dc
X-RCS-CacheZone
User-Cache-Control
ServedBy
X-S
X-Parent-Response-Time
X-Cluster-Node
X-TIME
X-Source
NtCoent-Length
X-Service
X-Rewrite-Enabled
X-Session-Fingerprint
X-A-Dcw
X-Rojux
X-S-Cookie
X-A-Dam
X-Server-Time
X-ScT
MD5-Digest
X-A-Dgt
X-A-Wwc
X-Application
X-ARC
X-B-Cookie
Machine
X-Request-UUID
X-SRCache-Key
X-Accel-Expires-Debug
X-Aed
X-SIPLIST1
X-AIR-PT
X-A-Ccd
X-A
Rendered-Blocks
Request-Country
Request-EU
Rt-Proxy-Cache
Node
Content-Script-Type
Meta-Geo-Continent
Cross-Origin-Window-Policy
Mobile-Detection-Method
Content-Style-Type
Server-Host
T-Server
Apple-News-Services-Handled
Viewtype
X-Svr
VivaBuild
Apple-News-Services-Host
Apple-News-Services-Parsed-Url
BehaviorPad-Version
AsisCache
Arc-Country
Apple-News-Services-Request-Url
Fastcgi-X-Cache-Version
X-Region-Sid
X-External-Request-Id
X-PAYTM-SRV-ID
X-G
X-CF-Lambda-Fn
X-DPWN-IS-SECURE
X-Detected-As
X-Destination
X-Trv-Group
X-Processor
Mime-Version
X-Hl-Ver
X-Ah-Environment
X-Vtex-Processado-Em
X-VG-WebServer
X-VG-WebCache
X-Vdms-Version
Xc-Version
IsBot
X-Vtex-Remote-Cache
OT-Force-Account-Verify
X-Twitter-Response-Tags
X-Transaction
X-Date
X-D
X-CF-Lambda-Version
X-Connection-Hash
X-Endurance-Cache-Level
X-Cache-Grace
X-Magnolia-Registration
ServerName
X-CSRF-TOKEN
X-Via-NSCOPI
X-Cache-Bucket
Served-By
Server-Int
X-Hnp-Log
X-IN-APIGATEWAY
X-Matched-Rule
X-IN-APIGATEWAYSSL
X-Instart-Isnd
X-Level-Front-Cache
X-RateLimit-Remaining-Second
X-RateLimit-Limit-Second
Thinkindot-CacheControl
X-Location
X-Proxy-Upstream
X-Webstats-RespID
X-Reboot
X-Cache-Info
X-Gen-Mode
X-Core-Value
Wxu-Next-Region
Wxu-Next-Hostname
X-Thinkindot-L3
X-CUA
X-Debug-Log
X-Debug-Cookies
X-Dispatch
Wxu-Next-Commit
Web-Mar-Node
X-Ms-Request-Id
X-Generated-On
X-Hash
X-Proxy-Cache-Status
Thinkindot-Control
X-NX-Host
X-Ms-Version
X-Block-Status
Thinkindot-CacheControl-Type
X-Upstream-Ht
CDCHOST
Proxy-Connection
X-Nc
X-Upstream-Ct
X-SRV
Now
X-Uri
X-Developers
X-Eu-Site
X-Distil-CS
X-Fastly-Cache
X-Generated-In
X-Has-Esi
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-GeoIP-City
X-Geo-Header
X-Varnish-Beresp-Ttl
X-Generation-Time
X-FW-Version
X-Debug-Cache-Fetch
X-Cache-Debug
X-Cache-URL
X-Cdn-Srv
X-C
X-Bip
X-B3-Parentspanid
X-Backend-State
X-BBXSRF
X-CGP
X-Clara-WADP
We-Hiring
Mail-Subject
X-Debug-Cache-Expiry
X-Core-Mission
X-Compress-Hint
X-Clientip
X-Cms-Context
X-Debug-Cache-Store
X-Is-Gdpr
X-TrackingId
X-Up
X-User
X-Thanos
X-Swa-Ws
X-Sucuri-Cache
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
X-VC-Cache
X-VG-TLSProxy
X-Dispatcher-Server
X-Request-URI
X-ND-Cache
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-VServer
X-WADP-Cache
X-We-Are-Hiring
X-Skip-Cache
X-Sigma-Backend
X-Origin-Expires
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
X-Origin-Date
X-Logging-Id
X-Azure-Ref-OriginShield
X-JWT-State
X-Key
X-Planisys-CDN-TTL
X-Policy
X-Scheme
X-Server-IP
X-Sigma
X-Rocket-Build-Number
X-Reqid
X-Qloud-Router
X-Release
X-Irp-Debug
X-Method
Pramga
PFcat
Content-Disposition
X-Azure-Ref
RNT-Machine
RNT-Time
AKAMAI
Cache-Host
Section-Io-Cache
Esi-Enabled
Memcached
Heartbleed
HA-Ipaddr
Ha-Gx-Prefs
Gh-Request-Id
IBM-Web2-Location
Kp-EeAlive
Magicmarker
Fastly-Soc-X-Request-Id
L
W
Countrycode
X-Agile-Id
X-Agile
X-Agile-Age
X-App-Name
X-Auto-Login
X-Via-CDN
Cache-Provider
X-Owner
Cdncip
Cdnsip
X-MSEdge-Flight
X-Old-Content-Length
X-S-Maxage
X-Internal-Host
X-Variation
X-SD-PageType
X-LI-UUID
X-Platform-Server
X-Request-Start
X-MSEdge-Features
X-Li-Fabric
X-ServiceProvider
Is-Eu
Platform
Adler-Geo
Locale
X-Urbn-Site-Id
X-Urbn-Context-Path
X-AK-Request-ID
SD-X-WS
X-Epic-Correlation-Id
X-WebServer
X-Distributor
X-Cache-Id
X-Amz-Meta-Cache-Control
X-Cache-FS-Status
X-Li-Pop
X-NodeID
True-Client-Country-4JS
X-Cdn-Forward
X-Trafficlayer-App-Version
Tcn
X-LI-Proto
V-Age
Server-ID
Hostname
Powered-By-ChinaCache
X-NC
Environment
X-Sucuri-Id
X-GRACE
X-UnsetCookies
X-Be
X-Lb-Id
X-Req
X-Served-From
FNAC-ModuleRouting
Locid
X-7Graus-Varnish-XKeys
X-7Graus-Varnish-Cache-Control
X-Servername
GEO-REGION-INFO
X-B3-Spanid
CF-IPCountry
X-HTML-Minification-Powered-By
X-Nginx-Cache
X-FPC
X-Refresh
Geo-Info
X-Newrelic-Synthetics
X-Gamma-Serve
X-VHOST
A
X-Developer
X-Zone
X-Servedbyhost
X-Edge-O15-RID
X-Sn-Servicetimems
X-Render-Time
X-Device-Os
X-Cdn-Origin
X-Microcachable
ProcessTime
X-IPS-LoggedIn
X-Webkit-CSP
X-NU-AKA-ACS-Version
X-Node-Id
X-Tb-Optimization-Total-Bytes-Saved
X-Sucuri-ID
X-Mode
X-Pjax-Url
X-MP-GENERATED-AT
X-GeoIP-Country-Code
X-Ratelimit-Remaining
Request-Time
X-VWS-Id
X-AWS-Id
Memory
X-Pf-Uncompressing
X-LJ-Flow-ID
X-FORWARDED-FOR
X-COUNTRY
Gannett-Cam-Experience-Id
X-Correlation-ID
Geoip-Latitude
X-Routing-Service
X-DC
Cf-Ipcountry
GeoIp-Country-Code
X-Zipkin-Id
X-VCL-Version
X-Proxied
Resin-Trace
Pics-Label
Amp-Access-Control-Allow-Source-Origin
TTL
XServer
X-Unique-ID
CF-Cached-On
X-CSRF-Token
X-Bc
X-Pod
Group
Geoip-City
X-Via-SSL
X-Via-Edge
M-TraceId
GeoIP-Latitude
GeoIP-Country-Code
GeoIP-City
Cache-Cookie-Set-Lfrom
MIME-Version
X-Instart-Info
X-ZONE
PICS-Label
Cache-Cookie-Set-From
Cache-Cookie-Set-Idcheck
X-ECACHE
X-ElasticPress-Search
Cdn
X-Var-Ttl
X-Backend-Url
Host-ID
HostName
X-Vcl-Version
X-Backend-Host
X-CLOUD-TRACE-CONTEXT
X-Request-Time
X-Ratelimit-Limit
Ttl
Backend-Name
X-Cdn-Request-ID
X-APP
X-NGENIX-Cache
X-Swift-Error
HitType
X-BC
X-Check-Cacheable
REQUESTUUID
X-PF-Uncompressing
Pagetype
Ohc-File-Size
X-HostName
Ohc-Cache-HIT
N-Cache
X-TH-Server
Lfy
Cache-Prefix
URI
Fly-Request-Id
X-Fstrz
Fly-Cache
X-PJAX-URL
X-NGINX-Cache
X-UPSTREAM-Address
X-Fastly-Country-Code
X-ServedByHost
On-Server
User-Agent
X-Worker
X-Via-Ucdn
Powered-By
X-Tt-Trace-Tag
X-Cache-Tag
Media-Length
X-WR-MODIFICATION
CDN
X-Sedo-Request-Id
Pragrma
X-Cache-Miss-From
X-LiteSpeed-Cache-Control
SRV
X-Fetched-On
Who
X-GEO
X-Server-W
X-HS-Status
X-Aicache-OS
X-WA
AR-SID
X-Rebelmouse-Cache-Control
X-BE
X-Rebelmouse-Surrogate-Control
X-Tt-Trace-Host
Fastly-SIE
Fastly-SWR
X-Wa
X-Hp-Ccpa-Warning
X-Upstream-CT
X-Upstream-HT
X-LAGOON
X-Varnish-URL
FSS-Proxy
X-Varnish-Cacheable
FSS-Cache
UCS
X-LB-ID
X-Dynatrace-Js-Agent
X-Fpc
X-ServerName
X-Cf-Powered-By
X-TT-LOGID
Debug
X-Fastly-Backend-Reqs
X-NYM-Debug-Backend
X-Cache-Tags
Processtime
X-Store
X-Ftr-Cache-Host
X-Ua
X-Varnish-Beresp-TTL
X-Protected-By
X-GDPR
Server-Id
X-Akamai-ERPolicy
X-Cache-ASPX
X-Akamai-ERRuleID
X-Contensis-Viewer-Groups
Server-Surrogate-Control
Server-Cache-Control
Country-Code
X-Varnish-Authentication
DataCenter
X-BACKEND-TTL
Location
Cdn-Host
Cdn-Request-Time
X-VC
WP-Super-Cache
Xet-Cookie
X-SB
Fastly-Backend-Name
X-Nananana
X-Request-Url
X-Li-Proto
Thinkindot-Cache-Type
SID
Product
X-Fastly-Cache-Hits
X-Gen-Id
X-Dw-Trace-Id
X-Amzn-Remapped-Date
X-Edge-Server
XxX-Cache-Status
Application
NnCoection
X-Amzn-Remapped-Connection
X-SN
Cneonction