Threat Level: green Handler on Duty: Jan Kopriva

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Cf-Request-Id
CF-RAY
CF-Cache-Status
Accept-Ranges
Link
X-XSS-Protection
ETag
Pragma
Expect-CT
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
Alt-Svc
P3P
X-UA-Compatible
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Xss-Protection
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Adblock-Key
X-Runtime
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Check
X-Cache-Status
X-Generator
P3p
X-Cacheable
X-Request-ID
Timing-Allow-Origin
X-Ua-Compatible
X-DNS-Prefetch-Control
X-Content-Security-Policy
X-Iinfo
Status
Feature-Policy
Content-Encoding
X-AspNetMvc-Version
X-CDN
X-Envoy-Upstream-Service-Time
Access-Control-Expose-Headers
Upgrade
Access-Control-Max-Age
X-Drupal-Dynamic-Cache
X-Dns-Prefetch-Control
X-Via
X-Ws-Request-Id
Keep-Alive
Server-Timing
Request-Context
X-Robots-Tag
X-AH-Environment
X-Hacker
X-Server
X-Age
X-Turbo-Charged-By
X-Proxy-Cache
X-Cache-Group
X-Server-Powered-By
X-Backend
X-Amz-Request-Id
X-Amz-Id-2
Host-Header
EagleId
X-Nginx-Cache-Status
Report-To
X-LiteSpeed-Cache
X-Rq
X-Varnish-Cache
Grace
X-UA-Device
X-Page-Speed
X-Pingback
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
EagleEye-TraceId
X-Device
X-Vhost
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Amz-Version-Id
NEL
X-Dispatcher
X-OneAgent-JS-Injection
Cf-Railgun
X-WebKit-CSP
X-Host
X-Cache-Spec
X-Server-Id
X-CST
X-Node
X-Backend-Server
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
Allow
Request-Id
Surrogate-Control
Accept-CH
X-Readtime
X-Akam-SW-Version
Accept-Ch-Lifetime
X-Response-Time
Xkey
X-Language
X-HW
X-Template
X-Application-Context
X-Country
Content-Location
X-Ac
X-Cloud-Trace-Context
X-Cache-Lookup
Rating
X-Ruxit-JS-Agent
MS-Author-Via
X-Url
X-Webkit-CSP
Edge-Control
X-Clacks-Overhead
X-TtlSet
X-Vname
X-PC
X-Mod-Pagespeed
X-Varnish-TTL
X-Trace
Fastly-Restarts
X-B3-TraceId
X-Content-Type
X-Rack-Cache
X-Buckets
X-MS-InvokeApp
X-ESI
X-Origin-Cache
X-GitHub-Request-Id
X-Country-Code
X-Cnection
X-Goog-Hash
Accept-Ch
Verso
X-D2id
X-VARITI-CCR
X-ORACLE-DMS-ECID
Arr-Disable-Session-Affinity
X-Exp-Id
X-Exp-Variant
X-Cdn-Fetch
X-Kinja-Build
X-Use-Magma
X-Kinja-Server
X-Kinja-Revision
X-Kinja
X-GoogleNews-Bot
Cache-Tag
X-Vcap-Request-Id
Service-Worker-Allowed
X-Cached
X-Px
X-FastCGI-Cache
X-Abt-Application-Version
X-Server-Name
X-Client-IP
X-Amz-Rid
X-Navigation-Version
X-Cache-TTL
Accept-CH-Lifetime
X-Server-ID
Public-Key-Pins
RTSS
X-Powered-By-Plesk
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-MSEdge-Ref
Access-Control-Request-Method
X-Element-Page-Cache
X-TTL
X-Dw-Request-Base-Id
X-Powered-CMS
X-Fastly-Request-ID
X-NF-Request-ID
X-Version
X-Upstream
Pagespeed
X-Middleton-Response
Response
X-Middleton-Display
X-Sol
Display
S
X-Edge-Location-Klb
X-Kinsta-Cache
X-Edge
X-LLID
X-Kraken-Routeconfig-Destination
X-Server-Lifecycle-Phase
X-Kraken-Loop-Name
X-Instrumentation
X-Cache-Key
X-B3-TraceId-Primal
MRF-Tech
Mrf-Cache-Status
X-ECACHE
X-Accel-Expires
X-Shield-Request-Id
X-Jurisdiction
X-HP-Webp
Pinterest-Generated-By
Pinterest-Version
X-ORACLE-DMS-RID
X-Pinterest-Rid
X-Ttl
X-Correlation-Id
Realpath
X-T
X-DynaTrace
X-Mid
X-PressLabs-Stats
X-MCACHE
X-SharePointHealthScore
SPRequestGuid
X-Content-Security-Policy-Report-Only
Edge-Cache-Tag
SPIisLatency
SPRequestDuration
Fastcgi-Cache
X-Litespeed-Cache
X-Amz-Server-Side-Encryption
X-XRDS-Location
X-Mg-S
Nginx-Cache
X-Ruxit-Js-Agent
X-Content-Digest
X-Forwarded-Proto
X-Recruiting
TP-Cache
TP-L2-Cache
Charset
TCN
X-Request-Processing-Time
Front-End-Https
X-Request-Received
Alternate-Protocol
Server-Node
X-Logged-In
X-Id
X-Oneagent-Js-Injection
Filters
Content-MD5
X-Forwarded-For
X-Geo-Country
X-Protected-By
X-Ezoic-Cdn
Fusion-Content-Source
Fusion-Component-Id
Fusion-Content-Id
Fusion-Template-Id
Fusion-Source
Fusion-Deployment-Id
Cache-Tags
X-Hostname
X-ASPNET-VERSION
X-Amzn-Trace-Id
X-NWS-LOG-UUID
X-Origin-Upstream-Status
X-Grace
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Goog-Generation
X-Ab
X-Goog-Storage-Class
X-Debug-Info
Cleartype
X-Www-Served-By
X-F-Cache
X-LB-Cache
X-AppVersion
X-HS-Cache-Config
X-Az
X-Rid
X-Activity-Id
X-Amz-Replication-Status
X-HS-Hub-Id
X-Origin-Server
X-HS-Content-Id
X-HS-Combine-CSS
Host
X-Contextid
X-Daa-Tunnel
X-Git-Hash
X-Page-Id
X-RateLimit-Remaining
Section-Io-Cache
Server-Name
X-VCache
X-Erf-Bev-Bev-Is-Generated
X-Content-Options
X-Erf-Bev-Bev
X-Browser-Type
X-Frontend
X-Ser
X-Upgrade-Enabled
X-Cache-Age
MicrosoftSharePointTeamServices
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
Access-Control-Allow-Method
X-Fastcgi-Cache
X-Aspnetmvc-Version
Accept-Charset
X-Release
ServerID
X-Hits
X-Source
X-Mobile-URL
X-WebKit-CSP-Report-Only
X-DIS-Request-ID
X-Providence-Cookie
X-Varnish-Age
X-Flags
X-Aspnet-Duration-Ms
X-Is-Crawler
X-Route-Name
X-Request-Guid
X-B-Cache
X-Signature
X-Cache-Action
Viewport
X-B3-Sampled
Healthy
Paypal-Debug-Id
X-FB-Debug
X-Varnish-Backend
X-Whom
X-Varnish-Grace
Payment
X-Yandex-Sdch-Disable
Fastcgi-Useragent
X-App-Environment
X-TT
X-AOL-HN
X-CACHE-GROUP
X-Respond-Thread
X-Load-Cache
Node
DynaTrace
X-Mobile
DC
X-Tt-Trace-Host
X-Tt-Trace-Tag
Filterid
X-Seen-By
Version
X-Distributor
X-N
X-User-Agent
X-Tec-Api-Origin
SRV
X-Tec-Api-Version
X-Tec-Api-Root
X-Cache-Control
X-HTML-Minification-Powered-By
Frame-Options
Retry-After
X-Type
X-XRDS-LOCATION
X-HP-Trace-Id
X-Jobs
Refresh
MS-CV
X-FW-Dynamic
X-FW-Server
X-FW-Serve
X-FW-Hash
X-FW-Type
X-FW-Static
X-Original-Request-Id
X-Ua-Device
X-Response-Served-From
X-NGENIX-Cache
X-Cache-Expired-At
X-UUID
X-Page-View
X-Node-Name
X-Proxy-Cache-Status
NGB
X-Adobe-Loc
X-Adobe-Content
X-Azure-Ref
X-Instance
X-Real-IP
X-Varnish-Server
X-Tumblr-Pixel
VIX-Pulpo-Node
X-Tumblr-Pixel-0
X-Tumblr-User
X-Vgn-Hpd-Reason
X-IPLB-Instance
VIX-Pulpo-Upstream-Status
X-Tumblr-Pixel-1
X-Region
X-Cluster-Name
X-Debug-IsConnected
X-Debug-IsPreview
X-RemovedCookies
X-Cacheable-TTL
X-G
X-B
X-ProcessESI
X-Aws-Lambda-Call-Status
X-Content-Powered-By
X-Framework
X-RTag
X-Device-Type
X-Cache-Time
Ms-Operation-Id
Access-Control-Request-Headers
X-CDN-Forward
X-Proxy
Amp-Access-Control-Allow-Source-Origin
X-Cache-Hit
X-Zen-Fury
X-IPS-LoggedIn
X-Cache-Rule
Uber-Trace-Id
Liferay-Portal
SD-X-WS
Referer-Policy
X-Parallel-Accel
X-Drupal-Cache-Tags
Cache-Status
X-Is-Bot
X-Rendered-As
X-Ms-Version
X-Ms-Request-Id
X-Wix-Request-Id
X-EdgeConnect-Cache-Status
X-Time
Section-Io-Id
Countrycode
X-App-Server
Section-Io-Origin-Status
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
X-RateLimit-Limit
X-Oracle-Dms-Rid
X-Mg-Request-UUID
X-L-Path
X-Debug
X-Environment-Context
X-Revision
S-Cnection
Country
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Accel-Buffering
CF-IPCountry
X-B3-Traceid
Count-Hit
X-Cache-Operation
X-Nginx-Cache
X-TA-CDN-Provider
X-APP-VERSION
X-Request-Handler-Origin-Region
X-Microsite
X-Drupal-Cache-Contexts
X-FW-Version
Akamai-GRN
Cache
Ar-Sid
X-SaId
AR-PoweredBy
X-JoinUs
X-RN-RSRV
X-GG-Cache-Date
Meta-Geo
X-Endurance-Cache-Level
AR-CACHE
AR-ATIME
AR-Request-ID
X-ES-SERVER
X-UPSTREAM-Address
X-Cache-TTL-Remaining
X-LAGOON
X-Say-Cacheable
X-TNCMS
X-Cache-Type
X-SayCDN-TTL
X-Say-TTL
X-Loop
X-Human
Country-Code
X-Sql-Duration-Ms
X-Adobe-Source
From-Origin
X-PCL
X-R9-Blue-Green-Version
Azure-SiteName
Azure-Version
X-Varnish-Beresp-Grace
X-Sql-Count
X-NYM-Debug-Backend
Surrogate-Key
Fastly-SSL
X-S-Maxage
Azure-InstanceId
X-Request-Time
Azure-RegionName
Azure-SlotName
X-OCL
Decoy-Debug-TTL
X-B3-SpanId
Protected
Cache-Tv-Group
X-Be
X-AWS-Id
Decoy-Debug-Status
Apigw-Requestid
X-Alternate-Cache-Key
X-No-Session
Decoy-Debug-Key
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Shopify-Stage
X-ShardId
X-BYPASS-REASON
X-VWS-Id
X-Varnishpool
X-Storefront-Renderer-Rendered
X-Status
X-PHP-Host
X-Proto
X-Varnish-Hostname
X-Pubstack
X-ShopId
X-RCS-CacheZone
X-Labrador-Cache-Channel
X-ProxyCache-Status
X-LJ-Flow-ID
X-ProxyCache-Key
X-Hosted-By
X-Handled-By
X-Proxy-Build
Property-Id
X-Xfnlog-Site
Eomportal-Instance
X-Origin-Date
X-Cache-Server
X-Format
X-Origin-Hint
X-UA-Device-Type
Selected-Fe
ServedBy
TWC-GeoIP-LatLong
Webcakes-App-Name
TWC-Locale-Group
X-Server-W
X-Section
TWC-Privacy
Webcakes-App-Version
X-Timing-Wait
X-Via-Fastly
TWC-Connection-Speed
X-Tumblr-Pixel-2
TWC-Device-Class
X-Access
TWC-GeoIP-Country
X-Redis-Cache
Webcakes-Region
X-App-Version
Cache-Name
X-Akamai-Edgescape
X-PERF
X-ApacheServer
X-Web-Node
Mn-Server-Ip
X-Cluster-Node
X-Backend-Host
X-Hyper-Cache
X-PHP-Backend
GEO-INFO
X-FB-TRIP-ID
X-Uri
X-Time-Microsecs
X-Hl-Ver
X-Backend-Name
Nel
X-ServerID
OT-Force-Account-Verify
Cross-Origin-Opener-Policy
X-Tumblr-Pixel-3
X-ATG-Version
X-Detected-As
X-Servername
X-FireWall-Port
Cross-Origin-Window-Policy
X-Ua
Web-Mar-Node
X-Azure-Ref-OriginShield
X-Cache-Host
X-Varnish-Cache-Hits
X-Generation-Time
X-Cache-PHP
X-Datadome
X-TEC-API-ORIGIN
X-Varnish-Hits
X-TEC-API-ROOT
X-Content-Age
X-TEC-API-VERSION
Content-Secure-Policy
Ec-Rule-Version
Backend
X-TT-LOGID
X-Via-JSL
Source
X-CS
X-Trace-Id
X-MP-GENERATED-AT
X-Amzn-RequestId
X-Amz-Apigw-Id
Upgrade-Insecure-Requests
X-Air-Source
X-WA-Info
X-Air-Trace-Id
X-Air-Hostname
X-Mode
X-Microcachable
X-Content
X-SRV
X-Forwarded-Host
X-Ua-Browser
X-Akamai-Transformed
X-CSRF-Token
X-Soup
Xserver
X-Cache-Grace
X-Cache-Enabled
X-Cdn
X-Locale
X-Edge-Location
X-NWS-UUID-VERIFY
X-Amzn-Remapped-Content-Length
X-Varnish-Beresp-Ttl
X-Ratelimit-Limit
X-Bc-Bl
Url
X-Rule
X-Info
X-Dc
X-Origin-TTL
X-Site-Version
X-Origin-CC
Content-Disposition
X-Tenant
X-Ratelimit-Remaining
X-Unique-Id
X-Proxied
X-Extlb
SID
X-Zipkin-Id
X-Varnish-Beresp-Status
X-Routing-Service
S-Rt
AMP-Access-Control-Allow-Source-Origin
Meta-Geo-Continent
Odigeo-Trace-Id
Fastly-SWR
Fastly-SIE
Apple-News-Services-Host
MD5-Digest
X-Vtex-Remote-Cache
Mobile-Detection-Method
Host-ID
CDN-RequestId
X-Vdms-Version
Apple-News-Services-Request-Url
X-VG-WebServer
Apple-News-Services-Handled
CDN-CachedAt
CDN-Cache
X-Vtex-Processado-Em
CDCHOST
A
CDN-EdgeStorageId
CDN-PullZone
DCR-Decision-By
DCR-Processing-Time-Ms
Expiry
CDN-Uid
BehaviorPad-Version
X-VG-WebCache
CDN-RequestCountryCode
Apple-News-Services-Parsed-Url
Fastcgi-X-Cache-Version
X-A-Dam
X-External-Request-Id
X-Epic-Correlation-Id
X-Forwarded-Path
X-From
X-Rojux
X-S
X-Developer
X-Connection-Hash
X-D
X-Debug-Cache
X-Destination
X-Ftr-Request-Id
X-NAPM-TraceId
X-Request-URI
X-Processor
X-Ratelimit-Reset
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Platform-Server
X-PBS-Appsvrname
X-NU-AKA-ACS-Version
X-Rewrite-Enabled
X-Orig-Expires
X-PAYTM-SRV-ID
X-Conf
X-CF-Lambda-Fn
X-A-Ccd
X-Shop-Environment
X-A-Dcw
X-A-Dgt
X-A-Wwc
X-A
T-Server
Path
Rendered-Blocks
Req-Svc-Chain
Surrogated-Key
X-Aed
X-Aicache-OS
X-Cache-NE
X-Cache-Bucket
X-Session-Fingerprint
X-ScT
X-S-Cookie
X-BCube-Filmed-By
X-BBC-Edge-Cache-Status
X-AIR-PT
X-Application
X-ARC
X-B-Cookie
X-SRCache-Key
X-CF-Lambda-Version
X-GEO
User-Cache-Control
X-Storage
X-Tb
X-EC-Lua
X-Magnolia-Registration
X-Cache-NGX
X-Request-UUID
Is-Eu
L
X-Has-Esi
X-Service
X-Backend-State
X-SVT-ORM-RULES
X-M-Log
X-Men
X-Accel-Expires-Debug
Fastly-Backend-Name
X-Cached-By
X-JWT-State
Pics-Label
UCS
Platform
X-LI-UUID
State
X-Li-Pop
Origin
X-SVT-ORM-VERSION
X-Proxy-Upstream
NGX
X-Li-Fabric
X-Is-Gdpr
Fastly-Drupal-HTML
Cache-Key
X-Envoy-Decorator-Operation
X-Core-Value
X-Worker
X-Cache-Info
Cache-Host
Adler-Geo
X-VG-TLSProxy
X-Cms-Context
X-M-Reqid
X-VServer
X-DPWN-IS-SECURE
X-Fastly-Cache
X-TrackingId
X-Date
X-Cache-Debug
X-Variation
X-Micro-Cache
X-NCache
X-Tx-Id
X-DataDome
X-Qnm-Cache
XServer
X-Location
Vix-Hermes-Req-Id
Sever-Int
X-Level-Front-Cache
TDXMobile
Thinkindot-Control
X-Device-Os
True-Client-Country-4JS
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
X-Loc
X-Clientip
X-Generated-By
X-Generated-On
X-Cache-Id
X-Geo-Header
X-Auto-Login
X-Gen-Mode
X-Bip
X-Forwarded-Site
X-Gamma-Serve
X-Branch-Name
X-Gzip
X-Cache-Tags
X-Hnp-Log
X-Block-Status
VNS-Cache
X-Cluster
X-Esi-Check
X-HN
X-Fastly-Backend
X-Developers
X-Ckpd-Fst-Backend
VNS-Age
PB-RID
X-Slack-Backend
CPC-Cache
CPC-Age
Cmstype
Esi-Enabled
X-Sigma-Backend
X-Rocket-Build-Number
X-Served-From
X-Sigma
Cmsid
X-Thanos
X-Viewer-Country
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-Scheme
X-Via-NSCOPI
Arc-Version
X-Thinkindot-L3
X-VarnishDD-TTL
C-Via
X-Req
Fastcgi-Cache-TTL
X-Origin
X-Nginx-Cache-Key
X-RateLimit-Limit-Second
X-Origin-Expires
PB-PID
PFcat
Location
M-TraceId
X-Old-Content-Length
Server-Hostname
X-RateLimit-Remaining-Second
Server-Ext
Server-Host
X-Platform
X-Amz-Meta-S3cmd-Attrs
Svr
X-Varnish-Remaining-TTL
X-Varnish-CookieINHashed-On
X-Skip-Cache
X-Eu-Site
X-Varnish-CookieHashed-On
AKAMAI
Arc-Country
X-Vdms-Path
X-VC-Cache
X-Owner
X-DefHash
Webserver
X-GeoIP
X-Mvc-Supplant-Cachable
X-GeoIP-City
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Hash
X-Request-Host
X-Irp-Debug
X-Generated-In
X-SIPLIST1
X-Planisys-CDN-Cache
X-Fetched-On
X-FC-Vary-Parameters
X-Planisys-CDN-Rules
X-Sucuri-ID
X-Policy
X-Planisys-CDN-TTL
X-Var-Ttl
X-HS-Content-Campaign-Id
Pagetype
X-LSADC-Cache
NM-Fastcgi-Cache
V-Age
Mail-Subject
Release
DataCenter
Wxu-Next-Commit
We-Hiring
Wxu-Next-Hostname
Wxu-Next-Region
DSUID
Locid
Memcached
Ha-Gx-Prefs
IsBot
X-CGP
CacheControlHeader
X-Csrf-Jwt
L5d-Success-Class
X-DefElseHash
HA-Ipaddr
Cf-Device-Type
Gh-Request-Id
X-Unique-ID
X-Platform-Cluster
X-Platform-Router
X-Rocket-Nginx-Serving-Static
X-Platform-Processor
Server-Info
X-GoCache-CacheStatus
X-V-Cache
X-Qloud-Router
X-DC
X-Clara-WADP
X-Fmm-Version
NtCoent-Length
X-WADP-Cache
X-Render-Time
X-SD-PageType
MIME-Version
X-Mvc-Supplant-OutputCached
Cache-Hits
X-Cache-Remote
X-Srv
X-Cache-Var-Map
X-Cache-Var
Kp-EeAlive
X-Via-Popv
X-Via-Poph
Environment
X-Servedbyhost
X-Via-Popn
X-API-Version
X-Zone
X-PJAX-URL
X-Gdpr
X-Nyt-Route
X-Origin-Time
X-Datadog-Parent-Id
X-Datadog-Sampling-Priority
X-Datadog-Trace-Id
X-NodeID
X-Vc
X-NC
X-User
X-ID
X-Pod-Name
X-Cache-Config
X-Server-IP
Server-ID
X-PF-Uncompressing
X-Wa
Candidate-Md5Url
X-Via-Ucdn
Who
X-BBC-Origin-Response-Status
X-Varnish-Ttl
WebServer
X-Varnish-Url
Cluster
X-Refresh
Time
Memory
X-Internal-Host
X-App
X-Minions-Version
X-Traceid
X-LB-ID
HostName
X-Webkit-Csp
X-TIME
X-VCL-Version
X-CACHE-KEY
X-Pass-Why
X-ZONE
Onion-Location
GeoIp-Country-Code
X-Webkit-CSP-Report-Only
My-App
Powered-By-ChinaCache
Web-Mar-Region
Geoip-Latitude
N-Cache
Resin-Trace
X-NewRelic-App-Data
Geo-Info
X-Newrelic-Synthetics
X-Edge-Pop
X-Esi
X-Cache-Ttl
Servername
X-LI-Proto
X-ElasticPress-Query
X-CLOUD-TRACE-CONTEXT
Datacenter
X-Varnish-Cacheable
X-Tb-Optimization-Total-Bytes-Saved
X-TX-ID
X-TraceId
X-VHOST
X-Tt-Logid
X-Origin-Response-Time
X-OVcl
X-EIG-Tracking-Id
WWW-Authenticate
X-Akamai-Pragma-Client-IP
X-OVcl-Cache
Ohc-File-Size
Tcn
CDN
X-Geo
X-Dynatrace
X-HITS
X-CACHE-AGE
Cf-Bgj
X-Backend-TTL
Hostname
X-TIM-N
X-Tid
X-Fpc
Redirect-Candidate
Magicmarker
X-Li-Proto
LB
X-Up
Proxy-Connection
X-Dynatrace-Js-Agent
X-NODE
Cdn
Tracecode
X-Varnish-Beresp-TTL
X-Correlation-ID
X-AB
X-NGINX-Cache
Pramga
X-Request-Start
X-Dispatcher-Server
X-Wix-Viewer-Type
X-Method
X-Cache-Date
X-HostName
X-Amz-Meta-Cb-Modifiedtime
X-Vcl-Version
GeoIP-Country-Code
X-MSEdge-Features
X-Fastly-Request-Id
X-MSEdge-Flight
X-CSRF-TOKEN
CloudFront-Viewer-Country
Cf-Ipcountry
X-IP
X-Provided-By
W
X-Sn-Servicetimems
X-Cdn-Origin
Lb
Ssr
X-APP
X-ServerName
Is-Us
GeoIP-Latitude
X-Fastly-Backend-Reqs
DB-Nickname
X-Cs
CF-Cached-On
X-UnsetCookies
X-COUNTRY
X-Reqid
X-HS-Status
X-Lb-Id
X-WA
X-Cache-Expires
Server-Id
Sid
X-Core-Mission
X-MG-S
X-Node-Id
WP-Super-Cache
X-Webkit-Csp-Report-Only
Cteonnt-Length
X-FORWARDED-FOR
X-Nc
X-DynaTrace-JS-Agent
X-Check-Cacheable
X-Sucuri-Cache
URI
X-Cache-Status-Check
X-CCDN-Origin-Time
X-VC
X-Trv-Group
X-CCDN-CacheTTL
X-ND-Cache
X-Region-Sid
X-Hcs-Proxy-Type
Ohc-Cache-HIT
CountryCode
Env
X-Via-CDN
Xc-Version
WZWS-RAY
X-SERVER-NAME
X-Pjax-Url
X-Via-PopH
X-Via-PopN
X-Moov-T
X-Cache-Backend
X-Via-PopV
X-Moov-Xdn-Version
User-Agent
EpKe-Alive
X-Ig-Push-State
X-Pf-Uncompressing
Mime-Version
X-Pad
X-ServedByHost
X-SN
Shield-Pop
X-Amz-Meta-Opti
FSS-Cache
X-Acquia-Site
X-Acquia-Purge-Tags
X-Acquia-Application-UUID
X-TRACE-ID
CACHE
X-CUA
X-IN-APIGATEWAYSSL
X-Acquia-Application-Trace
X-LiteSpeed-Cache-Control
X-RAMCache
X-IN-APIGATEWAY
X-Edge-POP
X-Varnish-Authentication
X-Fastly-Cache-Hits
X-Contensis-Viewer-Groups
X-Cache-ASPX
X-DI
X-DSS
X-DB
X-DW
Server-Ttl
X-RPM
HIT
Viewtype
Rt-Fastcgi-Cache
X-Nginx-Upstream-Cache-Status
X-Oss-Server-Time
X-Oss-Storage-Class
X-Parent-Response-Time
X-Oss-Request-Id
X-Oss-Object-Type
X-Dispatch
X-RPS
X-Oss-Hash-Crc64ecma
On-Server
VivaBuild
X-StackifyID
X-RSL
Vha6-Origin
X-Webstats-RespID
X-Dw-Trace-Id
Xet-Cookie
Ohc-Response-Time
X-Cdn-Request-ID
X-SB
X-Action
X-Swift-Error
X-Cdn-Forward
X-Amzn-Remapped-User-Agent
X-Snapshot-Date
X-Amzn-Remapped-Host
X-Amzn-Remapped-X-Forwarded-For
X-Env-Sha256-Sig
X-Env-Stack-Name
X-ElasticPress-Search
X-Ftr-Viewer-Uri
X-Forwarded-Port
X-CF-Powered-By
Req-ID
X-Yottaa-OS
Hit
ServerName
X-MiniProfiler-Ids
Content-Script-Type
Content-Style-Type
X-TH-Server