Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
Strict-Transport-Security
X-Frame-Options
X-Content-Type-Options
Last-Modified
Link
CF-Cache-Status
Cf-Request-Id
Accept-Ranges
ETag
CF-RAY
Expect-CT
Pragma
X-Powered-By
X-Cache
Via
X-XSS-Protection
Age
Content-Security-Policy
Report-To
NEL
Access-Control-Allow-Origin
Referrer-Policy
Content-Language
X-Amz-Cf-Pop
X-Xss-Protection
X-Amz-Cf-Id
X-Cache-Hits
P3P
X-UA-Compatible
X-Served-By
X-FRAME-OPTIONS
X-Download-Options
X-Timer
X-Request-Id
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-Adblock-Key
X-AspNet-Version
X-Permitted-Cross-Domain-Policies
X-Runtime
Alt-Svc
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Check
X-DNS-Prefetch-Control
X-Cache-Status
X-Generator
CF-Ray
X-Cacheable
Timing-Allow-Origin
X-Iinfo
X-Request-ID
X-Envoy-Upstream-Service-Time
Feature-Policy
Status
X-Content-Security-Policy
X-Drupal-Dynamic-Cache
Content-Encoding
X-AspNetMvc-Version
X-CDN
Access-Control-Expose-Headers
Upgrade
X-XSS-PROTECTION
X-Ua-Compatible
Access-Control-Max-Age
X-Dns-Prefetch-Control
X-Via
X-Cache-Group
Server-Timing
X-Robots-Tag
X-UA-Device
Request-Context
Keep-Alive
X-AH-Environment
X-Amz-Request-Id
X-Turbo-Charged-By
X-Backend
X-Amz-Id-2
X-Proxy-Cache
X-Ws-Request-Id
P3p
X-Age
Host-Header
X-Server-Powered-By
X-Hacker
X-Server
X-Rq
X-Vhost
EagleId
X-Akamai-Path-Stats
X-Varnish-Cache
Grace
X-Amz-Version-Id
X-Dispatcher
X-LiteSpeed-Cache
Cf-Edge-Cache
Allow
X-Swift-CacheTime
X-Swift-SaveTime
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
Ali-Swift-Global-Savetime
X-Nginx-Cache-Status
X-Device
X-WebKit-CSP
X-Page-Speed
X-Aws-Lambda-Call-Status
X-Host
X-Node
X-OneAgent-JS-Injection
X-Pingback
EagleEye-TraceId
X-Server-Id
X-Cache-Spec
Request-Id
Surrogate-Control
Accept-CH
Cf-Railgun
X-Akam-SW-Version
X-Backend-Server
X-Readtime
X-Cache-Lookup
X-Response-Time
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
Accept-CH-Lifetime
X-HW
Content-Location
X-Content-Security-Policy-Report-Only
X-Application-Context
Rating
X-Trace
Fastly-Restarts
X-Cloud-Trace-Context
X-Country
X-WebKit-CSP-Report-Only
X-Url
X-Clacks-Overhead
Accept-Ch-Lifetime
X-Edge
X-B3-TraceId
X-Amz-Server-Side-Encryption
X-MS-InvokeApp
X-Rack-Cache
Edge-Control
X-Ruxit-JS-Agent
X-Vname
X-TtlSet
X-PC
X-Nginx-Upstream-Cache-Status
X-Content-Type
X-Vcap-Request-Id
X-ESI
X-Mod-Pagespeed
X-Varnish-TTL
Xkey
Accept-Ch
X-Exp-Variant
X-GoogleNews-Bot
X-Cdn-Fetch
X-D2id
X-Exp-Id
X-Kinja-Build
X-Kinja
X-Use-Magma
X-Kinja-Server
X-Kinja-Revision
X-Amz-Rid
X-Mcache
X-VARITI-CCR
X-GitHub-Request-Id
Verso
Cache-Tag
X-CST
X-Powered-By-Plesk
RTSS
X-FastCGI-Cache
X-ECACHE
X-Oneagent-Js-Injection
Service-Worker-Allowed
X-Cached
X-Upstream
X-Navigation-Version
X-Client-IP
X-Version
X-Abt-Application-Version
X-Dw-Request-Base-Id
X-Ruxit-Js-Agent
X-Px
X-Ac
X-Cnection
Public-Key-Pins
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Instrumentation
Arr-Disable-Session-Affinity
X-SharePointHealthScore
SPRequestGuid
X-Element-Page-Cache
X-Server-Name
X-Ser
X-Sol
X-Middleton-Display
Pagespeed
Display
SPIisLatency
SPRequestDuration
X-Cache-TTL
X-Country-Code
X-NWS-LOG-UUID
X-Ttl
X-RateLimit-Remaining
Permissions-Policy
X-Midtier
X-NF-Request-ID
X-Cache-Key
X-Middleton-Response
Response
X-Edge-Location-Klb
X-Kinsta-Cache
X-Goog-Hash
X-Forwarded-For
Access-Control-Request-Method
Content-MD5
X-DataDome
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Shield-Request-Id
Front-End-Https
X-MSEdge-Ref
X-Correlation-Id
X-T
X-Recruiting
TP-L2-Cache
X-Jurisdiction
X-HP-Webp
TP-Cache
Nginx-Cache
Edge-Cache-Tag
X-HP-Trace-Id
AR-SID
AR-PoweredBy
AR-CACHE
AR-ATIME
X-Accel-Expires
AR-Request-ID
X-Powered-CMS
X-RateLimit-Limit
X-Daa-Tunnel
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
MicrosoftSharePointTeamServices
TCN
MRF-Tech
X-B3-TraceId-Primal
Mrf-Cache-Status
X-Grace
X-Mg-S
X-Id
X-Hits
X-Content-Digest
X-Request-Processing-Time
X-Request-Received
Server-Node
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-HS-Content-Id
X-HS-Hub-Id
X-HS-Combine-CSS
X-HS-Cache-Config
Filters
Server-Name
X-Frontend
S
X-LLID
X-Amzn-Trace-Id
X-Distributor
X-TTL
MS-Author-Via
X-Protected-By
X-Geo-Country
Cache-Status
X-Language
Fastcgi-Cache
X-LB-Cache
Cf-Apo-Via
X-PressLabs-Stats
Cross-Origin-Opener-Policy
X-Origin-Server
X-Fastly-Request-Id
X-F-Cache
X-Ezoic-Cdn
X-Forwarded-Proto
X-Seen-By
X-FB-Debug
X-Microsite
X-B3-Sampled
X-Page-Id
Host
X-Request-Handler-Origin-Region
Filterid
Charset
X-XRDS-Location
X-Git-Hash
X-Ab
X-Ua-Browser
Count-Hit
X-Amz-Meta-S3cmd-Attrs
Payment
X-Litespeed-Cache
X-ASPNET-VERSION
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-Browser-Type
Realpath
X-Fastcgi-Cache
X-Cache-Age
X-Ratelimit-Reset
X-Cluster-Name
X-VCache
Accept-Charset
X-Template
Surrogate-Key
X-Origin-Cache
X-Rid
Alternate-Protocol
Cache-Tags
X-NGENIX-Cache
X-Webkit-Csp
X-DynaTrace
Retry-After
Cleartype
X-AppVersion
X-Activity-Id
X-Az
Access-Control-Allow-Method
X-Www-Served-By
X-Varnish-Backend
X-App-Environment
X-Providence-Cookie
X-Is-Crawler
X-Wix-Request-Id
X-Varnish-Grace
X-Request-Guid
X-Route-Name
X-TT
X-Tb
X-Signature
X-B-Cache
X-Flags
X-Node-Name
X-Aspnet-Duration-Ms
X-DIS-Request-ID
X-B
X-Amz-Replication-Status
X-Upgrade-Enabled
X-Type
ServerID
Paypal-Debug-Id
X-Drupal-Cache-Tags
X-Debug
X-Logged-In
DC
X-Proxy
X-Source
X-Fastly-Request-ID
X-Envoy-Decorator-Operation
Frame-Options
X-Hostname
X-Server-ID
X-Content
X-Tt-Trace-Tag
X-Tt-Trace-Host
X-Content-Options
X-Revision
X-Mobile
X-Load-Cache
Pinterest-Version
Pinterest-Generated-By
X-Pinterest-Rid
X-Contextid
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Metageneration
X-Goog-Storage-Class
X-GUploader-UploadID
X-Goog-Stored-Content-Length
Amp-Access-Control-Allow-Source-Origin
X-N
X-Cache-Control
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
Country
X-Magnolia-Registration
X-Cache-Rule
Referer-Policy
X-User-Agent
X-Whom
Viewport
X-Original-Request-Id
X-EdgeConnect-Cache-Status
Node
X-Response-Served-From
NGB
Refresh
X-Ratelimit-Remaining
Content-Disposition
X-L-Path
X-Framework
Access-Control-Request-Headers
X-Cacheable-TTL
X-Cache-TTL-Remaining
X-Varnish-Age
X-Debug-IsConnected
X-Environment-Context
X-Debug-IsPreview
X-NYM-Debug-Backend
X-Mid
Url
X-G
VIX-Pulpo-Node
X-Instance
X-Adobe-Content
X-Is-Bot
X-Cache-Time
X-Jobs
X-Page-View
Uber-Trace-Id
VIX-Pulpo-Upstream-Status
X-Yottaa-Optimizations
X-Adobe-Loc
X-Akamai-Request-ID2
X-Cache-Grace
X-Yottaa-Metrics
X-Servername
X-Unique-Id
X-Real-IP
X-Rendered-As
X-Mg-Request-UUID
X-Restarts
X-Status
X-Varnish-Server
X-Content-Powered-By
Akamai-GRN
X-Drupal-Cache-Contexts
X-RemovedCookies
Countrycode
X-ProcessESI
X-COUNTRY
Version
X-App-Server
Srv
X-Http-Reason
X-Debug-Info
X-Oracle-Dms-Rid
X-Time
X-Oracle-Dms-Ecid
X-XRDS-LOCATION
X-CDN-Forward
Accept-Language
Protected
X-APP-VERSION
X-IPLB-Instance
X-IPLB-Request-ID
X-Via-JSL
X-Cache-Expired-At
X-Hosted-By
Healthy
X-Nginx-Cache-Key
X-Cache-Hit
X-Ratelimit-Limit
Liferay-Portal
X-Device-Type
X-Tumblr-Pixel-0
X-Tumblr-Pixel-1
X-Tumblr-Pixel
X-Tumblr-User
X-Azure-Ref
Fastcgi-Useragent
X-Tt-Logid
X-FW-Type
X-FW-Dynamic
X-FW-Hash
X-FW-Serve
X-FW-Static
X-FW-Server
X-Cache-Operation
Section-Io-Cache
X-Backend-Name
X-Trace-Id
X-RTag
Content-Secure-Policy
Backend
X-Cache-NGX
Ms-Operation-Id
MS-CV
Server-Info
X-UUID
X-Proxy-Cache-Status
X-Mobile-URL
Meta-Geo
Load-Balancing
X-RN-RSRV
X-Storage
X-UPSTREAM-Address
X-Mode
X-Akamai-Edgescape
GEO-INFO
CF-IPCountry
X-SayCDN-TTL
X-AWS-Id
X-Cache-Host
X-Say-TTL
X-Handled-By
X-Cache-Enabled
Locale
X-Labrador-Cache-Channel
X-Adobe-Source
X-LJ-Flow-ID
X-PHP-Host
X-Content-Age
X-PHP-Backend
X-Proto
X-Alternate-Cache-Key
X-Say-Cacheable
X-Cms-Context
CDN-Cache
CDN-CachedAt
Azure-InstanceId
Azure-RegionName
Azure-Version
Azure-SlotName
Azure-SiteName
X-Edge-Location
CDN-EdgeStorageId
X-Forwarded-Host
X-Origin-Date
CDN-Uid
CDN-RequestId
X-Origin-Hint
CDN-PullZone
CDN-RequestCountryCode
X-Locale
Property-Id
TWC-Privacy
X-VC-Cache
X-Varnishpool
X-Varnish-Hostname
X-VWS-Id
TWC-Locale-Group
X-Sorting-Hat-PodId
X-URL
TWC-GeoIP-Country
TWC-GeoIP-LatLong
X-Varnish-Cache-Hits
X-Sorting-Hat-ShopId
Web-Mar-Node
X-Uri
Webcakes-App-Name
X-Urbn-Site-Id
Webcakes-Region
X-Storefront-Renderer-Rendered
X-Sql-Count
X-Sql-Duration-Ms
X-HTML-Minification-Powered-By
X-Server-W
X-Urbn-Context-Path
X-Redis-Cache
X-Shopify-Stage
X-Skip-Cache
X-ShopId
X-Region
S-Rt
X-ShardId
X-No-Session
X-Site-Version
Webcakes-App-Version
TWC-Connection-Speed
WP-Super-Cache
TWC-Device-Class
Mn-Server-Ip
Onion-Location
X-Cache-Type
X-Cache-Server
Selected-Fe
X-PCL
DB-Nickname
X-BYPASS-REASON
X-Access
Eomportal-Instance
X-GeoCode
X-Request-Time
X-ServerID
X-Varnish-Beresp-Grace
X-ProxyCache-Key
X-Section
X-JoinUs
X-Proxy-Build
Cross-Origin-Resource-Policy
X-Zipkin-Id
X-Timing-Wait
X-Datadome
X-Via-Fastly
X-ProxyCache-Status
X-Xfnlog-Site
X-Web-Node
X-Hl-Ver
X-OCL
X-Cache-Action
X-Format
X-Routing-Service
X-FB-TRIP-ID
X-Extlb
Apigw-Requestid
X-Detected-As
X-GeoCountry
X-SaId
X-Proxied
X-Generated-By
X-UA-Device-Type
X-Cache-Status-Check
X-Tid
X-Zen-Fury
X-SRV
X-Correlation-ID
X-Rule
X-Nginx-Cache
X-Generation-Time
X-Debug-Cache
ServedBy
X-Ms-Version
X-ECache
X-Ms-Request-Id
X-R9-Blue-Green-Version
X-LSADC-Cache
X-FireWall-Port
X-DynaTrace-JS-Agent
Cache-Name
X-WP-CF-Super-Cache
X-Human
X-WP-CF-Super-Cache-Cache-Control
X-Ua
Cache
Xserver
X-Dc
X-Amz-Apigw-Id
X-App-Version
X-Amzn-RequestId
X-Cache-Tags
SD-X-WS
Source
Xet-Cookie
X-Cached-By
X-RCS-CacheZone
X-Aspnetmvc-Version
Cross-Origin-Window-Policy
X-Loop
X-TNCMS
X-Varnish-Hits
X-GEO
X-Cdn
LB
WPO-Cache-Message
WPO-Cache-Status
X-Webkit-CSP
X-MP-GENERATED-AT
X-TA-CDN-Provider
Origin
X-Pubstack
X-Reqid
X-Via-NSCOPI
X-Origin-CC
X-Origin-TTL
X-Soup
X-NewRelic-App-Data
X-Amzn-Remapped-Content-Length
X-GG-Cache-Date
X-B3-SpanId
X-AOL-HN
X-Service
X-Api-Version
From-Origin
X-Tumblr-Pixel-2
X-IPS-LoggedIn
Webserver
X-Vgn-Hpd-Reason
X-FW-Version
Cache-Hits
X-Newrelic-Synthetics
X-Platform-Server
Rip
X-Varnish-Beresp-Ttl
X-Provided-By
X-Cluster-Node
X-Request-Host
DCR-Processing-Time-Ms
X-PBS-Appsvrname
X-Processor
Cdncip
X-Rewrite-Enabled
DCR-Decision-By
X-Owner
X-Orig-Expires
Cdnsip
BehaviorPad-Version
A
X-Rojux
X-ScT
X-Vdms-Path
X-User
X-Vdms-Version
X-VG-WebCache
Xc-Version
X-TIM-N
X-Tenant
Environment
X-S-Cookie
X-Served-From
X-Shop-Environment
X-SRCache-Key
X-S
Lang
X-Ec-GeoHdr
X-Ec-Fail
X-Developer
X-External-Request-Id
X-AK-Request-ID
X-A-Wwc
X-Aed
X-Destination
X-D
X-BCube-Filmed-By
X-Connection-Hash
X-Bc-Bl
Upgrade-Insecure-Requests
X-Application
X-ARC
X-A-Dgt
X-A-Dcw
Ngx.Var.Host
Odigeo-Trace-Id
Rendered-Blocks
Meta-Geo-Continent
MD5-Digest
Host-ID
X-Cache-NE
Sslversion
Surrogated-Key
X-A-Ccd
X-A-Dam
X-Forwarded-Path
X-A
T-Server
X-NAPM-TraceId
Expiry
X-B-Cookie
X-CSRF-Token
HostName
X-TIME
OT-Force-Account-Verify
X-Thanos
X-Dispatcher-Number
X-VC
X-Cluster
Fastly-SSL
X-Qloud-Router
X-Pool
Mobile-Detection-Method
X-Level-Front-Cache
Machine
X-Generated-On
Redirect-Candidate
X-Accel-Buffering
X-Bip
X-Aicache-OS
X-WA-Info
X-Origin-Response-Time
Mime-Version
X-Gateway-Cache-Status
X-Branch-Name
Release
Producers
X-Gateway-Request-Id
X-Gateway-Skip-Cache
Platform
State
X-Gateway-Cache-Key
Req-Svc-Chain
X-CGP
Servername
X-Fmm-Version
X-Forwarded-Site
Server-Host
X-Cdn-Origin
X-Gamma-Serve
X-Fetched-On
Origin-EX
X-Cache-Id
Mail-Subject
Memcached
L5d-Success-Class
L
Is-Eu
IsBot
Kp-EeAlive
X-Hash
X-CacheTTL
NM-Fastcgi-Cache
X-GeoIP
Origin-CC
X-GeoIP-City
NGX
X-Cache-Bucket
X-Gzip
X-Eu-Site
X-Epic-Correlation-Id
Wxu-Next-Hostname
Wxu-Next-Region
X-Device-Os
X-Clara-WADP
X-Auto-Login
We-Hiring
Web-Mar-Region
Wxu-Next-Commit
X-DefHash
X-DefElseHash
X-Core-Mission
X-Datadog-Parent-Id
X-Csrf-Jwt
X-Datadog-Sampling-Priority
X-Clientip
X-Datadog-Trace-Id
X-Ad-Defer-Variation
VNS-Cache
VNS-Age
X-Ec-Custom-Error
Traceparent
X-DPWN-IS-SECURE
Thinkindot-Control
Thinkindot-CacheControl-Type
X-Core-Value
TDXMobile
Thinkindot-CacheControl
Tube-Get-Contents
Tube-Got-Eval
X-BBC-Edge-Cache-Status
V-Age
Vix-Hermes-Req-Id
Tube-Return
X-Ckpd-Fst-Backend
HA-Ipaddr
Tube-Got-Results
X-Esi-Check
Ha-Gx-Prefs
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
X-RateLimit-Remaining-Second
X-RateLimit-Limit-Second
X-Region-Sid
X-Request-URI
X-S-Maxage
X-Rocket-Nginx-Serving-Static
X-Rocket-Build-Number
X-Proxy-Cache-Info
X-Policy
Apple-News-Services-Host
Apple-News-Services-Parsed-Url
Apple-News-Services-Request-Url
X-Parent-Response-Time
Apple-News-Services-Handled
X-Planisys-CDN-Cache
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
Adler-Geo
X-SB
X-Scale
X-Varnish-Remaining-TTL
X-Varnish-CookieINHashed-On
X-Varnish-CookieHashed-On
X-Variation
X-VG-TLSProxy
X-Viewer-Country
X-Wix-Viewer-Type
X-WADP-Cache
X-VServer
X-V-Cache
X-Thinkindot-L3
X-SIPLIST1
X-Sigma-Backend
X-Sigma
X-Session-Fingerprint
X-Slack-Backend
X-Sn-Servicetimems
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-SplitTest
Cache-Host
X-Xrds-Location
Decoy-Debug-Key
Decoy-Debug-Status
Decoy-Debug-TTL
X-Cache-Info
X-NodeID
Datacenter
Fastly-GeoIP-CountryCode
Gh-Request-Id
X-Loc
X-Mvc-Supplant-OutputCached
X-Mvc-Supplant-Cachable
Fastly-SWR
DSUID
X-INCAP-ABP
X-Irp-Debug
CPC-Cache
CPC-Age
X-Origin
X-Optimistic-Header
X-Origin-Expires
Candidate-Md5Url
Cache-Tv-Group
Fastly-SIE
X-Minions-Version
Click-Count-Action-Start
Cmstype
Country-Code
Click-Count-Error
Cmsid
Cluster
X-Tec-Api-Root
X-Tec-Api-Version
X-Tx-Id
X-Tec-Api-Origin
X-Varnish-Beresp-Status
X-Worker
X-Hnp-Log
X-Cdn-Srv
X-Developers
X-Gen-Mode
X-Geo-Header
X-Nyt-Route
X-HS-Content-Campaign-Id
X-Fastly-Cache
X-Origin-Time
X-Scheme
X-JWT-State
X-Has-Esi
X-NCache
X-Cache-Remote
X-Is-Gdpr
X-Gdpr
Fastly-Backend-Name
User-Cache-Control
Server-Ext
Svr
Sever-Int
Server-Hostname
CloudFront-Viewer-Country
CDCHOST
X-Block-Status
X-ZONE
X-NWS-UUID-VERIFY
X-Presslabs-Stats
X-CMSURLCustom
X-LB-NoCache
Fastcgi-Cache-TTL
AKAMAI
Canary
X-Pod-Name
X-Varnish-Ttl
X-Udemy-Cache-App-Namespace
Ec-Rule-Version
WebServer
X-Sucuri-Cache
X-Sucuri-ID
Pics-Label
SID
Ssr
X-Tb-Optimization-Total-Bytes-Saved
X-WP-CF-Super-Cache-Active
X-Cache-Debug
X-Var-Ttl
X-Cache-Date
X-ND-Cache
Memory
X-Trace-ID
X-Buckets
X-Ig-Push-State
Time
X-ATG-Version
Sid
X-Via-Poph
X-Conf
X-Microcachable
X-Via-Popv
X-Fastly-Backend
X-Azure-Ref-OriginShield
X-FC-Vary-Parameters
X-Generated-In
X-Via-Popn
AMP-Access-Control-Allow-Source-Origin
X-B3-Traceid
X-Servedbyhost
X-Newrelic-App-Data
X-TRACE-ID
X-Refresh
Server-ID
X-Akamai-Transformed
Fastly-Drupal-Html
Fastly-Drupal-HTML
X-Dmc
X-MSEdge-Features
X-MSEdge-Flight
Env
X-Release
X-Edge-Pop
X-Yandex-Sdch-Disable
X-Cs
X-NC
X-Be
X-Fpc
X-RateLimit-Reset
X-DC
X-CS
X-Esi
X-PX
X-Pass-Why
X-EC-Lua
X-Air-Source
X-Endurance-Cache-Level
X-Up
X-Air-Trace-Id
X-MCACHE
X-ID
Magicmarker
X-Air-Hostname
CDN
X-Tumblr-Pixel-3
X-CACHE-AGE
My-App
X-Wa
GeoIp-Country-Code
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Dispatch
X-Zone
X-Lambda-Id
True-Client-IP
X-VCL-Version
X-TX-ID
X-Srv
X-Webkit-CSP-Report-Only
X-Hyper-Cache
X-NGINX-Cache
X-CF-Lambda-Fn
X-CF-Lambda-Version
X-Nf-Request-Id
X-CACHE-KEY
X-Vc
X-Req
X-M-Reqid
X-Alfa-Service
X-App
X-Micro-Cache
X-M-Log
X-CSRF-TOKEN
Pramga
Hostname
X-Qnm-Cache
C-Via
X-TH-Server
X-LB-ID
X-Air-Pt
X-Varnish-Beresp-TTL
X-Vcl-Version
X-HS-Status
Resin-Trace
True-Client-Ip
N-Cache
X-TrackingId
X-Edge-Origin-Shield-Region
Tcn
X-Vercel-Id
X-PAYTM-SRV-ID
Fastcgi-X-Cache-Version
X-Vercel-Cache
GeoIP-Country-Code
CacheControlHeader
X-Platform
X-API-Version
True-Client-Country-4JS
Path
On-Server
X-Edge-Origin-Shield-Bytes
X-Op-Id-All
Esi-Enabled
Tracecode
X-B3-Spanid
X-Check-Cacheable
X-SERVER-NAME
Proxy-Connection
X-Akamai-Pragma-Client-IP
GeoIP-Latitude
X-Vtex-Remote-Cache
X-Vtex-Processado-Em
NtCoent-Length
X-AIR-PT
X-CLOUD-TRACE-CONTEXT
X-PERF
X-SD-PageType
X-Node-Id
X-FPC
Section-Io-Origin-Time-Seconds
Section-Io-Id
Section-Io-Origin-Status
X-Request-Start
Hit
X-LAGOON
Section-Origin-Responded
X-ApacheServer
X-GeoIP-Country-Code
X-GeoIP-Region-Code
X-Webkit-Csp-Report-Only
Cache-Key
X-Date
X-Via-CDN
X-Accel-Expires-Debug
X-Platform-Cluster
X-Geo
X-Platform-Router
X-Platform-Processor
WWW-Authenticate
X-Edge-POP
HIT
X-Mly-Id
Cdn
X-Datacenter
X-WA
ENV
X-Render-Time
XkeyRZ
Lb
X-Lb-Id
YJS-ID
X-ServedByHost
DynaTrace
DT-Hot-News
X-Proxy-CacheRZ
X-RAMCache
Server-Id
User-Agent
Yjs-Id
X-Dw-Trace-Id
X-Cdn-Forward
Server-Ttl
PFcat
X-Via-PopN
X-Proxy-Upstream
X-Via-PopV
X-VarnishDD-TTL
X-Traceid
X-HN
X-Via-Ucdn
X-Via-PopH
XM
X-Service-Response-Time
Sm-Log-Id
X-LI-Proto
X-Li-Pop
X-LI-UUID
FSS-Cache
X-Old-Content-Length
X-Instance-Name
X-Li-Fabric
X-Response-By
X-CF-Powered-By
X-CUA
X-TT-LOGID
X-Cache-Ttl
X-FORWARDED-FOR
X-Proxy-Cache-Hk
Dnion-Transfer-Encoding
Geoip-Latitude
X-UA
X-LiteSpeed-Cache-Control
X-RSL
X-DW
X-Fastly-Backend-Reqs
Location
Nginx-CQVIP
X-RPM
X-DI
X-DSS
X-DB
Ohc-File-Size
XServer
X-RPS
PICS-Label
X-Akamai-ERRuleID
X-Akamai-ERPolicy
Powered-By
X-LiteSpeed-Tag
X-Litespeed-Cache-Control
MIME-Version
SRV
X-Wp-Cf-Super-Cache
X-Wp-Cf-Super-Cache-Cache-Control
X-FL-EDGE
X-Nc
X-HostName
X-From
X-Webstats-RespID
X-B3-ParentSpanId
X-Location
X-Lb-Nocache
Srvid
X-Cdn-Request-ID
X-Fastly-Cache-Hits
X-Cache-Backend
M-TraceId
Locid
X-Request-Url
Wpo-Cache-Message
Wpo-Cache-Status
Vha6-Origin
X-Ftr-Request-Id
X-Ips-Loggedin
X-Cache-Ngx
CountryCode
Warning
X-Moov-T
Req-ID
X-HA-Backend
X-Moov-Xdn-Version
X-Cache-ASPX
X-Varnish-Authentication
X-DataCenter
X-Contensis-Viewer-Groups
Fastcgi-Cache-Ttl
X-Cc-Via
X-IN-APIGATEWAYSSL
X-Snapshot-Date
X-MiniProfiler-Ids
WZWS-RAY
X-IN-APIGATEWAY
X-Akamai-Request-ID
X-Httpd
X-Mg-Cache