Threat Level: green Handler on Duty: Russ McRee

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
X-XSS-Protection
X-Powered-By
Pragma
CF-Cache-Status
CF-RAY
Link
ETag
Expect-CT
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-Cache-Hits
X-UA-Compatible
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Varnish
Alt-Svc
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Request-Id
X-Download-Options
X-AspNet-Version
Access-Control-Allow-Credentials
X-Runtime
X-Drupal-Cache
X-Adblock-Key
X-Check
X-Cache-Status
X-Generator
Content-Security-Policy-Report-Only
X-Permitted-Cross-Domain-Policies
X-Cacheable
X-Request-ID
X-Template
X-Language
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-Iinfo
X-AspNetMvc-Version
X-Buckets
X-FRAME-OPTIONS
Status
X-Content-Security-Policy
X-CDN
Upgrade
Content-Encoding
P3p
Access-Control-Expose-Headers
X-Ua-Compatible
Access-Control-Max-Age
X-Kinja-Server-Push
Keep-Alive
X-Xss-Protection
X-Turbo-Charged-By
X-Drupal-Dynamic-Cache
Xkey
X-Pass-Why
X-Cache-Group
X-AH-Environment
X-Envoy-Upstream-Service-Time
X-Backend
CF-Ray
X-Via
X-Age
X-Server
X-Amz-Id-2
X-Amz-Request-Id
X-Robots-Tag
X-Server-Powered-By
X-Page-Speed
X-Pingback
X-Ws-Request-Id
EagleId
X-Proxy-Cache
X-Nginx-Cache-Status
X-Hacker
X-UA-Device
Request-Context
X-Varnish-Cache
Feature-Policy
Server-Timing
Grace
Cf-Railgun
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-Amz-Version-Id
X-LiteSpeed-Cache
Report-To
X-Rq
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Server-Id
X-Dns-Prefetch-Control
X-Host
X-WebKit-CSP
X-Device
X-OneAgent-JS-Injection
EagleEye-TraceId
X-Origin-Cache
X-Response-Time
X-Node
Content-Location
X-Ac
Surrogate-Control
X-Vhost
X-Readtime
Request-Id
X-Backend-Server
X-Dispatcher
X-Cloud-Trace-Context
X-Origin-Upstream-Status
X-Cnection
X-HW
X-Application-Context
X-ORACLE-DMS-ECID
Fusion-Template-Id
Fusion-Component-Id
Fusion-Source
Fusion-Content-Source
Fusion-Content-Id
X-Cache-Lookup
X-DataDome
X-ORACLE-DMS-RID
NEL
X-Mod-Pagespeed
X-Rack-Cache
Rating
Edge-Control
X-Country
X-Ruxit-JS-Agent
X-Akam-SW-Version
X-Clacks-Overhead
Pinterest-Generated-By
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
Allow
X-DynaTrace
X-Country-Code
Accept-Ch
X-Instart-Request-ID
X-Varnish-TTL
X-TTL
X-Goog-Hash
X-TtlSet
X-PC
X-Vname
X-FTR-Request-ID
X-ESI
Verso
Accept-Ch-Lifetime
X-Powered-By-Plesk
Service-Worker-Allowed
X-Url
Content-MD5
X-B3-TraceId
X-Forwarded-Proto
X-Version
X-MS-InvokeApp
X-GitHub-Request-Id
X-Kinja-Build
X-Exp-Id
X-Kinja
X-GoogleNews-Bot
X-Kinja-Server
X-Exp-Variant
X-Kinja-Revision
X-Cdn-Fetch
X-Use-Magma
Edge-Cache-Tag
RTSS
AR-ATIME
AR-CACHE
AR-Request-ID
Ar-Sid
AR-PoweredBy
X-Px
X-D2id
X-Debug
X-Abt-Application-Version
X-Server-Name
SPRequestGuid
X-Vcache
X-Amz-Server-Side-Encryption
Charset
X-NF-Request-ID
X-Accel-Expires
X-Cached
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-MSEdge-Ref
X-TEC-API-ROOT
X-Middleton-Display
X-Middleton-Response
Pagespeed
Response
Display
X-Sol
X-Amz-Rid
X-Vcap-Request-Id
Arr-Disable-Session-Affinity
X-Navigation-Version
X-Powered-CMS
X-SharePointHealthScore
X-Pinterest-Rid
Pinterest-Version
TCN
X-Fastcgi-Cache
X-Trace
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-VARITI-CCR
Realpath
X-Client-IP
Cache-Tag
Public-Key-Pins
X-Cdn
Access-Control-Request-Method
X-Ser
X-Fastly-Request-ID
MS-Author-Via
S
X-DynaTrace-JS-Agent
X-Upstream
X-Shard
Nginx-Cache
SPIisLatency
SPRequestDuration
X-Id
MRF-Tech
X-B3-TraceId-Primal
X-Mrf-Item-Lastmod
X-Mrf-Section-Lastmod
Mrf-Cache-Status
X-Ezoic-Cdn
X-Hp-Webp
X-Content-Type
X-Forwarded-For
X-Amzn-Trace-Id
X-Grace
X-T
X-Amz-Meta-S3cmd-Attrs
DynaTrace
X-Recruiting
Front-End-Https
X-Hits
X-Edge-O15-RID
Fastcgi-Cache
Nel
X-Varnish-Age
X-Aspnet-Version
ServerID
MicrosoftSharePointTeamServices
X-Dw-Request-Base-Id
X-DIS-Request-ID
X-Mobile-URL
X-Node-Name
X-Element-Page-Cache
NR-ENABLED
X-Cache-TTL
X-Server-ID
X-Content-Digest
X-Country-Code-Real
X-FTR-Cache-Status
X-FTR-Expires
X-HS-Cache-Config
X-HS-Combine-CSS
X-HS-Content-Id
X-HS-Hub-Id
Powered
X-Frontend
X-GUploader-UploadID
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-FTR-Backend-Server
X-FTR-Realm
X-FTR-Backend
X-Jurisdiction
X-FTR-DC
X-FTR-Balancer
Alternate-Protocol
Server-Node
Server-Name
TP-Cache
TP-L2-Cache
X-Logged-In
X-Correlation-Id
X-XRDS-LOCATION
AMP-Access-Control-Allow-Source-Origin
X-Request-Processing-Time
X-Request-Received
X-Request-Handler-Origin-Region
X-Microsite
Upgrade-Insecure-Requests
Backend-Timing
X-ATS-Timestamp
X-Cache-Hit
X-Amz-Apigw-Id
X-Content-Options
X-Webkit-Csp
X-Page-Id
X-Amzn-RequestId
Refresh
X-Origin-Server
X-Content-Security-Policy-Report-Only
X-User-Agent
X-Revision
X-Akamai-Edgescape
X-Rid
X-F-Cache
X-Varnish-Grace
X-Type
X-CST
Fastly-Restarts
X-Zen-Fury
X-XRDS-Location
X-Content-Powered-By
X-Shield-Request-Id
X-B3-Sampled
X-Geo-Country
X-LB-Cache
X-B
X-Activity-Id
X-AppVersion
X-Az
X-N
X-FTR-Cache-Host
X-Webapp-Samesite-None-Activated-N
X-URL
PB-PID
PB-RID
X-Mobile-Rewrite
X-Kinsta-Cache
Arc-Version
Cache-Status
X-Pad
X-TT
X-Instance
X-WebKit-CSP-Report-Only
X-Cache-Age
X-Time
X-AOL-HN
X-Debug-Info
X-B-Cache
Actual-Object-TTL
Paypal-Debug-Id
X-Framework
X-App-Environment
X-Jobs
X-Tumblr-Pixel
X-Tumblr-User
X-Signature
X-Tumblr-Pixel-0
X-Request-Guid
Access-Control-Allow-Method
X-Cache-Action
X-PHP-Backend
X-RateLimit-Remaining
DC
X-FB-Debug
X-Analytics
X-Load-Cache
X-Cached-By
X-Git-Hash
X-Varnish-Backend
Surrogate-Key
X-Erf-Bev-Bev-Is-Generated
X-Tt-Trace-Tag
Fastcgi-Useragent
X-Erf-Bev-Bev
Host-Header
X-Tt-Trace-Host
X-Amz-Replication-Status
FilterID
X-Contextid
X-IPLB-Instance
MS-CV
X-SS-Set-Cookie
X-ATG-Version
X-Ruxit-Js-Agent
X-WA-Info
X-Cluster
Tracecode
NGB
X-Accel-Buffering
X-Response-Served-From
X-Srv
WPE-Backend
X-FastCGI-Cache
X-Mobile
Host
Payment
X-Varnish-Server
Xserver
X-Host-Name
Frame-Options
X-Cache-NE
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
Source
X-Cache-Key
X-FW-Server
X-FW-Static
X-FW-Type
X-Cache-Operation
Eomportal-Instance
X-Cache-Rule
X-FW-Serve
X-Region
X-Cache-2
X-FW-Hash
Cache-Tv-Group
X-Cacheable-TTL
X-Cache-Enabled
X-Via-JSL
X-Rendered-As
Filters
X-Tumblr-Pixel-1
X-Tumblr-Pixel-2
X-Varnish-Hostname
X-GeoIP
X-ORACLE-APMCS-REQUEST-ID
X-IPS-LoggedIn
X-Is-Bot
X-ORACLE-APMCS-TAG
X-TX-ID
X-Presslabs-Stats
X-Adobe-Loc
X-Adobe-Content
X-NewRelic-App-Data
X-RequestSource
X-Ttl
X-Hostname
X-Origin-Response-Time
X-EdgeConnect-Cache-Status
X-Seen-By
X-NWS-LOG-UUID
Cleartype
Retry-After
X-Cache-TTL-Remaining
Server-Info
Cache
X-ProcessESI
X-RemovedCookies
X-UA
X-VCache
X-HTML-Minification-Powered-By
Liferay-Portal
Accept-CH
X-Dc
Datacenter
X-Cache-Control
Ms-Operation-Id
X-B3-Traceid
X-RTag
Healthy
X-CACHE-KEY
X-Source
X-L-Path
X-Environment-Context
X-FireWall-Port
X-Upgrade-Enabled
X-Endurance-Cache-Level
X-App-Server
From-Origin
X-Cache-Server
X-RateLimit-Limit
X-CLOUD-TRACE-CONTEXT
X-Handled-By
Version
X-Rule
X-Status
X-Backend-Name
X-APP-VERSION
X-Wix-Request-Id
X-PressLabs-Stats
Accept-CH-Lifetime
X-Path-Route
X-Cache-Var
X-Cache-Var-Map
X-ES-SERVER
Meta-Geo
X-RN-RSRV
X-Tb
X-Request-Time
OT-Force-Account-Verify
X-Section
X-Proxy-Build
X-Format
Selected-Fe
X-Access
X-Timing-Wait
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Content-Age
Mn-Server-Ip
Akamai-GRN
X-Akamai-Request-ID
X-Alternate-Cache-Key
X-BYPASS-REASON
X-Storage
X-Shopify-Stage
X-ShardId
X-Proto
X-EIG-Tracking-Id
X-PCL
Azure-SiteName
X-OCL
Azure-SlotName
Azure-RegionName
X-ProxyCache-Key
X-Origin
X-ShopId
Azure-InstanceId
Azure-Version
X-ProxyCache-Status
X-Human
X-Shopify-Generated-Cart-Token
Cache-Tags
X-Cache-Host
X-AWS-Id
X-Akamai-Request-ID2
S-Rt
X-Cluster-Node
X-Debug-Cache
X-Generated-By
X-FW-Dynamic
X-FC-Vary-Parameters
Origin-Edge-Control
Origin-Cache-Control
Decoy-Debug-Status
Decoy-Debug-Key
DB-Nickname
Decoy-Debug-TTL
Ec-Rule-Version
Now
Node
NGX
X-Hl-Ver
X-Hosted-By
X-Time-Microsecs
X-Soup
X-ServerID
X-SaId
X-UUID
X-Vgn-Hpd-Reason
X-Web-Node
X-VWS-Id
X-Viewer-Country
X-Redis-Cache
X-Qloud-Router
X-LJ-Flow-ID
X-JoinUs
X-Hyper-Cache
X-MP-GENERATED-AT
X-NYM-Debug-Backend
X-Pubstack
X-Proxy-Cache-Status
X-Proxy
GEO-INFO
X-Cache-Config
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Varnish-Hits
Webcakes-Region
X-BCube-Filmed-By
X-Site-Version
TWC-Device-Class
X-CCM
TWC-Connection-Speed
Webcakes-App-Version
TWC-Locale-Group
TWC-GeoIP-LatLong
Property-Id
TWC-Privacy
X-Detected-As
Webcakes-App-Name
TWC-GeoIP-Country
X-Www-Served-By
X-Say-TTL
X-Say-Cacheable
X-RCS-CacheZone
X-IP
X-Generated
X-Origin-Hint
Cross-Origin-Window-Policy
X-Trafficlayer-App-Name
X-Trafficlayer-App-Scope
X-SayCDN-TTL
X-Locale
X-R9-Blue-Green-Version
X-Loop
X-Amzn-Remapped-Content-Length
X-FB-TRIP-ID
Accept-Charset
X-Akamai-Transformed
X-Xfnlog-Site
X-TNCMS
L5d-Success-Class
Srv
X-CS
X-Oneagent-Js-Injection
Cache-Name
X-NCache
Viewport
Uber-Trace-Id
X-Unique-Id
X-Drupal-Cache-Tags
Webserver
Time
X-Esi
Cache-Key
X-UA-Device-Type
X-Cache-Remote
Mime-Version
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-From
Accept-Language
X-Mode
X-Backend-TTL
X-Forwarded-Host
X-Origin-TTL
X-CDN-Forward
X-Origin-CC
X-Drupal-Cache-Contexts
Country
X-UnsetCookies
X-Cluster-Name
X-TT-TIMESTAMP
Rt-Fastcgi-Cache
X-Info
Odigeo-Trace-Id
X-Edge-Location
X-Whom
X-Microcachable
X-Newrelic-Synthetics
X-Varnish-Cache-Hits
X-B3-Spanid
X-ApacheServer
X-Magnolia-Registration
X-PERF
X-Daa-Tunnel
X-Geo
ServedBy
Content-Disposition
X-NGENIX-Cache
X-UPSTREAM-Address
X-EC-Lua
X-Webkit-CSP
Proxy-Connection
Ohc-File-Size
Ohc-Cache-HIT
X-Device-Type
X-Zipkin-Id
X-Routing-Service
X-Proxied
X-No-Session
X-Via-Fastly
X-TA-CDN-Provider
X-Uri
Apple-News-Services-Request-Url
X-VG-WebServer
X-Vtex-Remote-Cache
Xc-Version
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
AsisCache
Apple-News-Services-Handled
X-Vtex-Processado-Em
X-Trv-Group
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-ScT
X-Connection-Hash
X-S-Cookie
X-B-Cookie
X-ARC
X-SRCache-Key
X-Application
X-Sigma-Backend
X-Sigma
X-Session-Fingerprint
X-S
X-Rojux
X-Geo-Header
X-G
X-GeoIP-Country-Code
X-Region-Sid
X-Request-UUID
X-External-Request-Id
X-Rocket-Build-Number
X-D
X-Date
X-Destination
X-DPWN-IS-SECURE
X-Aed
X-Accel-Expires-Debug
Machine
X-Vdms-Version
MD5-Digest
Meta-Geo-Continent
Mobile-Detection-Method
X-VG-TLSProxy
GEO-REGION-INFO
BehaviorPad-Version
Content-Script-Type
Content-Style-Type
Fastcgi-X-Cache-Version
X-Twitter-Response-Tags
X-Rewrite-Enabled
X-Transaction
X-A-Dam
X-A-Dcw
X-A-Dgt
X-A-Wwc
X-A
W
Rendered-Blocks
T-Server
Viewtype
VivaBuild
X-VG-WebCache
X-A-Ccd
X-Labrador-Cache-Channel
X-PHP-Host
Cf-Ipcountry
HitType
X-Real-IP
X-C
User-Cache-Control
X-Cache-Time
X-Distil-CS
Fastly-Soc-X-Request-Id
X-Epic-Correlation-Id
X-Render-Time
X-Cache-Debug
Gh-Request-Id
Server-Surrogate-Control
X-Nc
X-CGP
X-Logging-Id
Powered-By
X-Contensis-Viewer-Groups
Server-Cache-Control
X-SIPLIST1
Environment
X-Developers
CDCHOST
Locid
X-Eu-Site
X-Agile-Id
X-VC-Cache
X-Varnish-Authentication
X-App-Name
X-Agile-Age
X-WebServer
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Agile
X-Auto-Login
IsBot
X-Bip
X-CUA
X-Cache-ASPX
HA-Ipaddr
X-Thanos
X-Hit
X-Tumblr-Pixel-3
X-Backend-State
X-TrackingId
Ha-Gx-Prefs
Fastly-SSL
X-GoCache-CacheStatus
Section-Io-Cache
X-Cache-Backend
X-Block-Status
X-Cache-Bucket
X-Cache-Info
X-BBXSRF
X-Fastly-Cache
X-Gamma-Serve
X-AK-Request-ID
X-FW-Version
X-Fetched-On
X-Azure-Ref
X-Cache-URL
X-Distributor
X-Core-Mission
X-Cms-Context
X-Debug-Cookies
X-Debug-Cache-Store
X-Debug-Cache-Fetch
X-Clientip
X-Debug-Log
X-Debug-Cache-Expiry
X-Cdn-Srv
X-Dispatcher-Server
X-Clara-WADP
Geo-Info
X-Irp-Debug
X-Request-URI
X-Server-W
X-Sucuri-Cache
X-SVT-ORM-RULES
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
X-Owner
X-Proxy-Upstream
X-RateLimit-Limit-Second
X-RateLimit-Remaining-Second
X-SVT-ORM-VERSION
X-Swa-Ws
X-VServer
X-WADP-Cache
X-We-Are-Hiring
X-Webstats-RespID
X-User
X-Urbn-Site-Id
X-TH-Server
X-Trace-Id
X-TT-LOGID
X-Urbn-Context-Path
X-OVcl-Cache
X-OVcl
X-IN-APIGATEWAYSSL
X-Instart-Isnd
X-Key
X-Li-Fabric
X-IN-APIGATEWAY
X-Hnp-Log
X-Generated-In
X-Generation-Time
X-GeoIP-City
X-Hash
X-Li-Pop
X-LI-Proto
X-NodeID
X-NX-Host
X-Origin-Date
X-Origin-Expires
X-Nginx-Cache-Key
X-Varnish-Beresp-Status
X-LI-UUID
X-Micro-Cache
X-Ms-Request-Id
X-Gen-Mode
X-Ms-Version
Mail-Subject
Memcached
Locale
Kp-EeAlive
IBM-Web2-Location
Request-Country
Request-EU
Server-Int
Server-ID
RNT-Time
RNT-Machine
Fastly-SWR
Fastly-SIE
Cdncip
Cache-Host
AKAMAI
Access-Control-Request-Headers
Cdnsip
X-Varnish-Beresp-Grace
Fastly-Backend-Name
Countrycode
Country-Code
X-Varnish-Beresp-Ttl
True-Client-Country-4JS
Heartbleed
V-Age
Web-Mar-Node
We-Hiring
X-App-Version
X-JWT-State
X-Servername
X-Level-Front-Cache
X-Matched-Rule
X-Is-Gdpr
FNAC-ModuleRouting
X-Has-Esi
Is-Eu
Wxu-Next-Hostname
X-Internal-Host
X-Generated-On
X-NU-AKA-ACS-Version
X-Service
X-Up
X-ServiceProvider
X-Trafficlayer-App-Version
ServerName
X-Thinkindot-L3
X-Variation
X-Req
X-Old-Content-Length
PFcat
X-Platform-Server
Adler-Geo
X-Reboot
Wxu-Next-Region
Wxu-Next-Commit
Platform
Thinkindot-Control
X-Cache-Tags
Thinkindot-CacheControl-Type
Server-Host
Thinkindot-CacheControl
X-Core-Value
X-Lb-Id
X-S-Maxage
X-Nginx-Cache
Cache-Hits
X-Location
X-Response-By
RequestId
X-SERVER
X-B3-Parentspanid
X-Refresh
X-Air-Hostname
X-Tb-Optimization-Total-Bytes-Saved
X-Parent-Response-Time
X-Var-Ttl
Group
Pragrma
X-Cache-Expired-At
ProcessTime
Filterid
X-Cdn-Forward
X-B3-SpanId
X-CF-Powered-By
X-Pjax-Url
X-Tec-Api-Version
X-Tec-Api-Root
X-NC
X-CSRF-Token
Memory
S-Cnection
X-Tec-Api-Origin
X-BACKEND-TTL
X-CSRF-TOKEN
SRV
Powered-By-ChinaCache
Origin
X-Wa
X-Server-IP
User-Agent
X-Pf-Uncompressing
TTL
Geoip-Latitude
X-Cdn-Request-ID
GeoIp-Country-Code
Media-Length
X-Vcl-Version
X-Correlation-ID
X-Ua
X-NGINX-Cache
X-Sucuri-ID
X-Unique-ID
X-Sucuri-Id
X-Varnish-Cacheable
Geoip-City
PICS-Label
X-NWS-UUID-VERIFY
X-Via-CDN
X-COUNTRY
X-Rocket-Nginx-Bypass
X-Developer
Dnion-Transfer-Encoding
X-Device-Os
X-Sn-Servicetimems
SN
X-AIR-PT
X-Node-Id
Esi-Enabled
X-Reqid
X-Cdn-Origin
X-Ocache
X-LAGOON
X-Cache-Grace
X-Servedbyhost
X-Litespeed-Cache
X-Via-Ucdn
X-Varnish-Ttl
HostName
X-Planisys-CDN-Rules
X-Planisys-CDN-Cache
X-Planisys-CDN-TTL
X-Policy
On-Server
XServer
X-TIME
X-Azure-Ref-OriginShield
X-Fastly-Country-Code
X-Request-Start
M-TraceId
X-MSEdge-Flight
A
X-MSEdge-Features
X-HS-Status
X-Request-Host
Tcn
X-Cache-Status-Check
X-FORWARDED-FOR
Rt-Proxy-Cache
Cloudfront-Viewer-Country
X-ServedByHost
X-Oss-Request-Id
X-Oss-Storage-Class
X-Oss-Object-Type
X-Oss-Hash-Crc64ecma
X-Oss-Server-Time
Cdn
X-Cache-Ttl
Who
Resin-Trace
X-Beluga-Trace
X-Beluga-Cache-Status
X-Beluga-Node
X-Beluga-Record
X-Beluga-Response-Time
X-Beluga-Status
X-VHOST
Hostname
X-Ftr-Cache-Host
NtCoent-Length
X-Method
Magicmarker
X-APP
Host-ID
X-Zone
Pics-Label
X-Bc
X-Ratelimit-Remaining
CF-Cached-On
Load-Balancing
X-Varnish-Url
X-Varnish-URL
GeoIP-Country-Code
X-VCL-Version
X-Oracle-Dms-Rid
MIME-Version
X-LiteSpeed-Cache-Control
X-Fastly-Backend-Reqs
X-Be
GeoIP-Latitude
Ttl
X-Svr
X-Slack-Backend
Cteonnt-Length
Ohc-Response-Time
X-DC
DSUID
GeoIP-City
X-Newrelic-App-Data
X-PF-Uncompressing
X-DI
X-VarnishDD-TTL
X-RSL
X-VCT
X-DSS
X-Action
X-DB
X-MServer
X-RPS
Release
X-DW
X-RPM
Vix-Hermes-Req-Id
X-Hp-Ccpa-Warning
X-Server-Time
Amp-Access-Control-Allow-Source-Origin
X-PJAX-URL
X-Skip-Cache
X-Processor
X-Dispatch
X-SRV
X-Ratelimit-Limit
Arc-Country
X-HostName
X-Tid
Pramga
WebServer
X-PAYTM-SRV-ID
X-FPC
X-Cache-FS-Status
X-Ftr-Request-Id
CACHE
X-Hello
X-Configured-By
X-ND-Cache
Fastly-Drupal-HTML
X-Flog
X-DevSite-Last-Modified
X-ABtesting
Processtime
X-Swift-Error
X-Dynatrace
X-BE
Servername
X-Dynatrace-Js-Agent
X-WR-MODIFICATION
CF-IPCountry
N-Cache
Cdn-Request-Time
SD-X-WS
X-Aicache-OS
Cache-Provider
X-Edge-Server
Cdn-Host
X-Served-From
X-Upstream-Ct
X-SD-PageType
X-Upstream-Ht
X-ID
X-Frame-Option
X-Ftr-Backend
X-SN
X-Cache-Id
X-Ftr-Backend-Server
X-StackifyID
L
X-Compress-Hint
X-Ftr-Balancer
X-Fastly-Cache-Hits
CDN
X-Bc-Bl
X-Branch-Name
X-LB-ID
X-Snapshot-Date
Requestid
Pagetype
X-Amzn-Remapped-Date
X-Ftr-Realm
Dynatrace
Lfy
X-Amzn-Remapped-Connection
X-Ftr-Dc
X-WA
X-CACHE-AGE
X-Backend-Host
X-ServerName
X-Release
X-Via-NSCOPI
X-Apw-Access-Object
X-Varnish-Beresp-TTL
X-SB
X-Cc-Via
X-Edge-IP
X-Apw-Access-Action
Proxy-Firewall
X-ZONE
V-Cache
X-Apw-Access-Token
D-Cc-Upstream
X-Cc-Req-Id
X-Request-Url
Warning
X-Apw-Hits
X-VC
X-App
X-ElasticPress-Search
X-BC
WP-Super-Cache
Lb
X-Check-Cacheable
X-Scheme
X-Worker
X-Fastly-Cache-Status
LB
Backend-Name
X-Powered-Y
X-Request-URL
Correlation-Id