Threat Level: green Handler on Duty: Rick Wanner

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
Strict-Transport-Security
X-Frame-Options
X-Content-Type-Options
Last-Modified
Link
CF-Cache-Status
Cf-Request-Id
Accept-Ranges
ETag
CF-RAY
Expect-CT
Pragma
X-Powered-By
X-Cache
Via
Age
X-XSS-Protection
Content-Security-Policy
Report-To
NEL
Access-Control-Allow-Origin
Referrer-Policy
Content-Language
X-Xss-Protection
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
X-UA-Compatible
X-Served-By
X-FRAME-OPTIONS
X-Download-Options
X-Timer
X-Request-Id
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-Adblock-Key
X-AspNet-Version
X-Permitted-Cross-Domain-Policies
Alt-Svc
X-Runtime
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-DNS-Prefetch-Control
X-Check
X-Cache-Status
CF-Ray
X-Generator
X-Cacheable
X-Iinfo
Timing-Allow-Origin
X-Envoy-Upstream-Service-Time
Feature-Policy
Status
X-Content-Security-Policy
X-Request-ID
X-Drupal-Dynamic-Cache
Content-Encoding
X-AspNetMvc-Version
Access-Control-Expose-Headers
X-CDN
Upgrade
X-XSS-PROTECTION
X-Ua-Compatible
Access-Control-Max-Age
X-Via
X-Cache-Group
X-Robots-Tag
Server-Timing
X-UA-Device
Request-Context
X-Dns-Prefetch-Control
Keep-Alive
X-Amz-Request-Id
X-AH-Environment
X-Turbo-Charged-By
X-Proxy-Cache
X-Amz-Id-2
X-Backend
X-Ws-Request-Id
P3p
X-Age
Host-Header
X-Server-Powered-By
X-Hacker
X-Server
X-Rq
X-Vhost
EagleId
X-Varnish-Cache
Grace
X-Amz-Version-Id
X-Dispatcher
X-LiteSpeed-Cache
Cf-Edge-Cache
X-Akamai-Path-Stats
Allow
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-Device
X-WebKit-CSP
X-Nginx-Cache-Status
X-Page-Speed
X-Aws-Lambda-Call-Status
X-Host
X-Node
Accept-CH
X-Pingback
X-OneAgent-JS-Injection
X-Server-Id
Cf-Railgun
X-Cache-Spec
Request-Id
EagleEye-TraceId
Surrogate-Control
X-Akam-SW-Version
X-Backend-Server
X-Cache-Lookup
X-Response-Time
X-Readtime
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
Accept-CH-Lifetime
X-HW
Content-Location
X-Content-Security-Policy-Report-Only
X-Application-Context
X-Trace
Rating
X-Cloud-Trace-Context
Fastly-Restarts
X-Clacks-Overhead
X-Url
X-WebKit-CSP-Report-Only
Accept-Ch-Lifetime
X-Country
X-MS-InvokeApp
X-Edge
X-Amz-Server-Side-Encryption
X-Rack-Cache
Edge-Control
X-Nginx-Upstream-Cache-Status
X-B3-TraceId
X-Vname
X-PC
X-TtlSet
X-Content-Type
X-ESI
X-Mod-Pagespeed
X-Vcap-Request-Id
X-Oneagent-Js-Injection
X-Ruxit-JS-Agent
X-Ruxit-Js-Agent
X-Exp-Id
X-Kinja-Revision
X-Kinja-Server
X-Use-Magma
Xkey
X-Kinja
X-Kinja-Build
X-D2id
X-Cdn-Fetch
X-GoogleNews-Bot
X-Exp-Variant
Verso
X-Amz-Rid
X-Varnish-TTL
X-GitHub-Request-Id
X-Mcache
Cache-Tag
X-VARITI-CCR
X-Powered-By-Plesk
X-FastCGI-Cache
RTSS
X-CST
Service-Worker-Allowed
X-ECACHE
X-Upstream
X-Navigation-Version
X-Client-IP
X-Version
X-Abt-Application-Version
X-Cached
X-Cnection
X-Dw-Request-Base-Id
X-Ac
X-Px
X-Server-Name
X-Instrumentation
X-Ttl
X-Element-Page-Cache
Public-Key-Pins
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
Arr-Disable-Session-Affinity
X-SharePointHealthScore
SPRequestGuid
X-Cache-TTL
SPIisLatency
SPRequestDuration
X-Sol
Accept-Ch
Display
X-Middleton-Display
Pagespeed
X-NWS-LOG-UUID
X-Country-Code
X-Ser
Permissions-Policy
X-Cache-Key
X-Midtier
X-RateLimit-Remaining
Response
X-Middleton-Response
X-Kinsta-Cache
X-Edge-Location-Klb
X-Goog-Hash
X-Forwarded-For
Access-Control-Request-Method
Content-MD5
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Correlation-Id
X-NF-Request-ID
X-DataDome
X-Shield-Request-Id
Front-End-Https
X-MSEdge-Ref
X-T
TP-L2-Cache
Edge-Cache-Tag
X-Jurisdiction
X-HP-Webp
X-Recruiting
X-HP-Trace-Id
TP-Cache
Nginx-Cache
X-Accel-Expires
AR-PoweredBy
AR-ATIME
AR-CACHE
AR-Request-ID
AR-SID
MicrosoftSharePointTeamServices
X-B3-TraceId-Primal
Mrf-Cache-Status
X-Daa-Tunnel
X-Powered-CMS
MRF-Tech
X-RateLimit-Limit
Cf-Apo-Via
TCN
X-Grace
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-Mg-S
X-Id
X-Hits
X-Content-Digest
X-Request-Received
Filters
X-Request-Processing-Time
X-HS-Content-Id
X-HS-Hub-Id
X-HS-Combine-CSS
X-HS-Cache-Config
Server-Node
Server-Name
X-Amzn-Trace-Id
X-Frontend
X-Distributor
MS-Author-Via
X-Geo-Country
S
X-Protected-By
Fastcgi-Cache
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-TEC-API-ROOT
X-LLID
X-Language
Cache-Status
X-Erf-Bev-Bev
X-Browser-Type
X-LB-Cache
X-Erf-Bev-Bev-Is-Generated
X-PressLabs-Stats
X-Origin-Server
Cross-Origin-Opener-Policy
X-Ezoic-Cdn
X-Amz-Meta-S3cmd-Attrs
Count-Hit
X-Fastly-Request-Id
X-F-Cache
X-Microsite
X-Forwarded-Proto
X-FB-Debug
X-B3-Sampled
X-Request-Handler-Origin-Region
Charset
Host
X-Litespeed-Cache
X-Git-Hash
X-Ua-Browser
X-Ab
X-Seen-By
X-Page-Id
X-XRDS-Location
Payment
Filterid
X-ASPNET-VERSION
X-Ratelimit-Reset
X-TTL
X-Fastcgi-Cache
X-VCache
X-Cluster-Name
Surrogate-Key
Realpath
X-Origin-Cache
X-Rid
X-Cache-Age
Cache-Tags
Accept-Charset
X-Template
X-NGENIX-Cache
X-Webkit-Csp
Alternate-Protocol
X-Www-Served-By
Retry-After
Access-Control-Allow-Method
X-Activity-Id
X-Az
X-AppVersion
X-DynaTrace
X-Logged-In
X-Upgrade-Enabled
Cleartype
X-Amz-Replication-Status
X-DIS-Request-ID
X-Flags
X-Aspnet-Duration-Ms
X-Varnish-Backend
X-Is-Crawler
X-App-Environment
X-Route-Name
X-Varnish-Grace
X-Tb
X-Request-Guid
X-Providence-Cookie
X-TT
X-Signature
X-B-Cache
X-Type
X-B
X-Wix-Request-Id
X-Node-Name
X-Source
X-Envoy-Decorator-Operation
Paypal-Debug-Id
DC
ServerID
X-Hostname
X-Drupal-Cache-Tags
X-Fastly-Request-ID
Frame-Options
X-Debug
X-Proxy
X-Revision
X-Mobile
X-Content-Options
X-Contextid
X-Tt-Trace-Tag
X-Tt-Trace-Host
X-COUNTRY
Pinterest-Generated-By
X-Pinterest-Rid
X-Load-Cache
Pinterest-Version
X-Goog-Stored-Content-Length
Amp-Access-Control-Allow-Source-Origin
X-GUploader-UploadID
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Storage-Class
X-Cache-Rule
X-Goog-Stored-Content-Encoding
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-N
X-Content
X-Cache-Control
Country
X-Magnolia-Registration
Node
Refresh
X-Original-Request-Id
Referer-Policy
X-EdgeConnect-Cache-Status
X-Whom
X-Response-Served-From
X-User-Agent
X-Oracle-Dms-Ecid
NGB
X-Oracle-Dms-Rid
Viewport
X-Debug-IsConnected
X-Debug-IsPreview
X-Environment-Context
X-Cache-TTL-Remaining
X-Framework
X-Ratelimit-Remaining
X-L-Path
Access-Control-Request-Headers
X-Cacheable-TTL
X-Mid
X-Real-IP
X-Page-View
X-Yottaa-Metrics
Uber-Trace-Id
X-Content-Powered-By
X-Servername
Content-Disposition
Akamai-GRN
X-NYM-Debug-Backend
X-Jobs
X-Adobe-Content
VIX-Pulpo-Node
Url
X-Yottaa-Optimizations
X-Adobe-Loc
X-Varnish-Server
X-Unique-Id
X-G
X-Status
VIX-Pulpo-Upstream-Status
X-Akamai-Request-ID2
X-Is-Bot
X-Varnish-Age
X-Cache-Time
X-Rendered-As
X-Cache-Grace
Srv
X-RemovedCookies
X-ProcessESI
X-Server-ID
X-Instance
Countrycode
X-Drupal-Cache-Contexts
X-Mg-Request-UUID
X-APP-VERSION
Version
X-Restarts
X-Trace-Id
X-Http-Reason
X-CDN-Forward
X-XRDS-LOCATION
X-App-Server
Accept-Language
X-Via-JSL
X-Time
X-Cache-Expired-At
X-Debug-Info
Protected
X-IPLB-Instance
X-Tumblr-User
X-Cache-Hit
X-Tumblr-Pixel-1
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-IPLB-Request-ID
Healthy
X-Hosted-By
X-Ratelimit-Limit
X-Cache-Operation
X-Nginx-Cache-Key
X-Device-Type
X-Azure-Ref
Cross-Origin-Resource-Policy
Section-Io-Cache
Liferay-Portal
X-Backend-Name
X-Tt-Logid
X-Akamai-Edgescape
X-FW-Type
X-FW-Server
X-FW-Serve
Backend
X-FW-Static
X-FW-Dynamic
Server-Info
Content-Secure-Policy
X-FW-Hash
Fastcgi-Useragent
Ms-Operation-Id
X-Rule
X-RTag
MS-CV
X-RN-RSRV
Load-Balancing
X-Storage
X-Cache-Action
X-Proxy-Cache-Status
Meta-Geo
X-Mobile-URL
X-UPSTREAM-Address
GEO-INFO
X-SRV
X-Mode
X-VC-Cache
X-Handled-By
X-Api-Version
X-Content-Age
X-UUID
X-Cache-NGX
X-Varnish-Beresp-Grace
CDN-Cache
X-PHP-Backend
CDN-CachedAt
CDN-RequestCountryCode
CDN-RequestId
CDN-PullZone
CDN-EdgeStorageId
X-PHP-Host
X-Say-Cacheable
X-Say-TTL
X-SayCDN-TTL
CF-IPCountry
X-Region
X-Proto
X-Redis-Cache
CDN-Uid
X-PCL
X-Edge-Location
X-Alternate-Cache-Key
X-Forwarded-Host
X-AWS-Id
X-Cms-Context
X-Cache-Server
X-Cache-Enabled
X-Adobe-Source
X-Access
X-No-Session
X-OCL
Eomportal-Instance
Locale
S-Rt
X-Labrador-Cache-Channel
X-LJ-Flow-ID
X-Section
Onion-Location
X-URL
X-Uri
X-Varnish-Hostname
X-Varnishpool
X-VWS-Id
X-Site-Version
X-Urbn-Site-Id
X-Urbn-Context-Path
X-Sql-Duration-Ms
X-Format
X-Sql-Count
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Shopify-Stage
X-Skip-Cache
X-ShopId
X-ShardId
X-Origin-Hint
Azure-SlotName
X-HTML-Minification-Powered-By
TWC-Device-Class
X-Hl-Ver
Selected-Fe
X-Datadome
TWC-GeoIP-LatLong
TWC-GeoIP-Country
Mn-Server-Ip
X-GeoCountry
Webcakes-Region
X-UA-Device-Type
X-Detected-As
X-ServerID
X-Timing-Wait
X-BYPASS-REASON
X-Cache-Host
X-Extlb
TWC-Privacy
X-Storefront-Renderer-Rendered
X-Generated-By
Azure-SiteName
X-FB-TRIP-ID
X-GeoCode
Azure-InstanceId
X-Proxied
X-Proxy-Build
X-Zipkin-Id
TWC-Connection-Speed
Apigw-Requestid
X-ProxyCache-Key
X-ProxyCache-Status
X-Xfnlog-Site
X-Request-Time
TWC-Locale-Group
Property-Id
X-Web-Node
X-Locale
X-Generation-Time
X-Routing-Service
X-Cache-Type
DB-Nickname
Webcakes-App-Version
Web-Mar-Node
Webcakes-App-Name
X-Via-Fastly
Azure-RegionName
X-Varnish-Cache-Hits
X-Server-W
Azure-Version
X-Origin-Date
X-Tid
X-R9-Blue-Green-Version
X-Cache-Status-Check
WP-Super-Cache
X-SaId
X-JoinUs
X-Ms-Request-Id
X-Ms-Version
Cache-Name
Xserver
X-FireWall-Port
X-ECache
X-WP-CF-Super-Cache
X-WP-CF-Super-Cache-Cache-Control
ServedBy
X-Zen-Fury
X-DynaTrace-JS-Agent
X-LSADC-Cache
X-Nginx-Cache
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Ua
X-Dc
X-Debug-Cache
X-Human
X-Tec-Api-Version
X-Tec-Api-Root
Xet-Cookie
X-Tec-Api-Origin
X-TA-CDN-Provider
Cache
X-Loop
X-MP-GENERATED-AT
X-Cache-Tags
X-TNCMS
X-Correlation-ID
X-Aspnetmvc-Version
X-RCS-CacheZone
Source
X-Reqid
X-GEO
X-Cached-By
X-Cdn
X-Varnish-Hits
SD-X-WS
X-Webkit-CSP
Cross-Origin-Window-Policy
X-Pubstack
Origin
X-Soup
X-Newrelic-Synthetics
X-Amzn-Remapped-Content-Length
X-App-Version
WPO-Cache-Message
WPO-Cache-Status
LB
X-Tumblr-Pixel-2
X-Origin-TTL
X-Provided-By
X-Origin-CC
X-Vgn-Hpd-Reason
From-Origin
X-Varnish-Beresp-Ttl
X-Service
X-IPS-LoggedIn
X-Varnish-Ttl
X-TIME
X-AOL-HN
X-B3-SpanId
Webserver
X-Via-NSCOPI
X-NewRelic-App-Data
X-GG-Cache-Date
Rip
X-FW-Version
X-B3-Traceid
X-Request-Host
X-Platform-Server
X-ARC
Rendered-Blocks
X-Application
X-External-Request-Id
X-Forwarded-Path
Environment
Expiry
Sslversion
X-VG-WebCache
X-A-Dam
X-A-Ccd
X-A-Dcw
X-A-Dgt
X-Aed
Ngx.Var.Host
X-A-Wwc
X-AK-Request-ID
X-Rojux
Cdncip
Cdnsip
Xc-Version
X-D
A
X-Connection-Hash
BehaviorPad-Version
X-User
X-Cache-NE
X-BCube-Filmed-By
X-Bc-Bl
X-Ec-Fail
X-Ec-GeoHdr
X-S-Cookie
X-S
X-B-Cookie
DCR-Processing-Time-Ms
X-Destination
X-Developer
DCR-Decision-By
X-A
X-Rewrite-Enabled
X-ScT
X-TIM-N
X-Cluster-Node
X-Tenant
X-Served-From
Odigeo-Trace-Id
Host-ID
X-SRCache-Key
Lang
X-Vdms-Path
X-Processor
Meta-Geo-Continent
MD5-Digest
X-Orig-Expires
X-Owner
Surrogated-Key
X-PBS-Appsvrname
X-Shop-Environment
X-Vdms-Version
T-Server
X-NAPM-TraceId
Mime-Version
OT-Force-Account-Verify
X-Dispatcher-Number
VNS-Cache
X-Pool
Cache-Hits
Machine
CPC-Age
X-Thanos
Redirect-Candidate
VNS-Age
X-Generated-On
X-Accel-Buffering
X-Varnish-Beresp-Status
X-Aicache-OS
X-Parent-Response-Time
X-Bip
X-Level-Front-Cache
Upgrade-Insecure-Requests
CPC-Cache
X-Qloud-Router
X-WA-Info
X-Branch-Name
X-Cdn-Origin
X-Cdn-Srv
Traceparent
X-Cache-Info
Thinkindot-Control
X-Cache-Id
X-Cache-Bucket
Tube-Return
X-Ad-Defer-Variation
Vix-Hermes-Req-Id
Servername
TDXMobile
Wxu-Next-Commit
State
Wxu-Next-Region
Wxu-Next-Hostname
V-Age
X-Variation
X-BBC-Edge-Cache-Status
Tube-Got-Results
Tube-Got-Eval
X-Varnish-CookieHashed-On
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
X-V-Cache
Tube-Get-Contents
X-Fmm-Version
X-SVT-ORM-VERSION
X-Mvc-Supplant-OutputCached
X-Mvc-Supplant-Cachable
X-NodeID
X-Optimistic-Header
X-Origin-Response-Time
X-Origin
X-Minions-Version
X-Loc
X-Thinkindot-L3
X-Hash
X-Has-Esi
X-HS-Content-Campaign-Id
X-Irp-Debug
X-JWT-State
X-Is-Gdpr
X-SVT-ORM-RULES
X-Slack-Backend
X-Sn-Servicetimems
X-SB
X-Region-Sid
X-Request-URI
X-Rocket-Build-Number
X-S-Maxage
X-Rocket-Nginx-Serving-Static
X-Scale
X-RateLimit-Remaining-Second
X-Planisys-CDN-Rules
X-Planisys-CDN-Cache
X-Planisys-CDN-TTL
X-Policy
X-RateLimit-Limit-Second
X-SplitTest
X-Gzip
X-GeoIP-City
X-Datadog-Trace-Id
X-Datadog-Sampling-Priority
X-Datadog-Parent-Id
X-DefElseHash
X-DefHash
X-Device-Os
X-Developers
X-Csrf-Jwt
X-Core-Value
X-Clara-WADP
X-Ckpd-Fst-Backend
X-Clientip
X-Cluster
X-Core-Mission
X-CMSURLCustom
X-DPWN-IS-SECURE
X-Ec-Custom-Error
Server-Host
X-Gateway-Skip-Cache
X-Gateway-Request-Id
X-Sigma-Backend
X-Sigma
X-GeoIP
X-Geo-Header
X-Gateway-Cache-Status
X-Gateway-Cache-Key
X-Esi-Check
X-Epic-Correlation-Id
X-Eu-Site
X-Fetched-On
X-Gamma-Serve
X-Forwarded-Site
X-CGP
Fastly-GeoIP-CountryCode
Decoy-Debug-Status
Decoy-Debug-TTL
Decoy-Debug-Key
Country-Code
Cmsid
Cmstype
DSUID
X-Nyt-Route
Fastly-SWR
X-VG-TLSProxy
Fastly-SSL
Fastly-SIE
X-Origin-Time
X-Gdpr
Click-Count-Error
Apple-News-Services-Parsed-Url
Apple-News-Services-Request-Url
Apple-News-Services-Host
Apple-News-Services-Handled
X-Worker
Adler-Geo
X-Wix-Viewer-Type
Cache-Host
X-VServer
Click-Count-Action-Start
Candidate-Md5Url
Canary
X-WADP-Cache
Ha-Gx-Prefs
Fastly-Backend-Name
X-Varnish-Remaining-TTL
HostName
X-CSRF-Token
HA-Ipaddr
NM-Fastcgi-Cache
Origin-CC
Platform
X-Varnish-CookieINHashed-On
Req-Svc-Chain
X-SIPLIST1
Release
X-Xrds-Location
Producers
NGX
Origin-EX
Mobile-Detection-Method
L5d-Success-Class
Kp-EeAlive
Is-Eu
Memcached
IsBot
L
X-Cache-Debug
X-Tx-Id
X-VC
Cache-Tv-Group
Cluster
Gh-Request-Id
Ec-Rule-Version
Datacenter
X-NCache
X-Viewer-Country
X-Auto-Login
X-Scheme
X-Hnp-Log
Web-Mar-Region
X-INCAP-ABP
X-Proxy-Cache-Info
We-Hiring
Server-Ext
X-Gen-Mode
Mail-Subject
Fastcgi-Cache-TTL
Server-Hostname
CloudFront-Viewer-Country
X-Block-Status
Svr
User-Cache-Control
CDCHOST
AKAMAI
Sever-Int
X-CacheTTL
X-WP-CF-Super-Cache-Active
X-Presslabs-Stats
X-Cache-Remote
X-LB-NoCache
X-Sucuri-Cache
X-Fastly-Cache
X-Origin-Expires
X-Sucuri-ID
X-Rebelmouse-Surrogate-Control
X-ND-Cache
X-Rebelmouse-Cache-Control
X-Session-Fingerprint
WebServer
X-Udemy-Cache-App-Namespace
X-Fastly-Backend
X-Var-Ttl
X-ZONE
Time
X-Azure-Ref-OriginShield
Ssr
X-ATG-Version
Memory
Pics-Label
X-FC-Vary-Parameters
SID
X-Nf-Request-Id
X-Tb-Optimization-Total-Bytes-Saved
Fastly-Drupal-HTML
X-Pod-Name
X-Trace-ID
X-NWS-UUID-VERIFY
X-Newrelic-App-Data
Sid
X-Via-Poph
X-Via-Popv
X-Via-Popn
X-Generated-In
X-Akamai-Transformed
AMP-Access-Control-Allow-Source-Origin
X-Cache-Date
X-Buckets
Env
Server-ID
X-Servedbyhost
X-Ig-Push-State
X-Refresh
X-Conf
X-Edge-Pop
X-Release
X-Cs
X-CACHE-AGE
X-Microcachable
X-Fpc
X-Up
X-NC
X-MSEdge-Flight
X-MSEdge-Features
X-EC-Lua
X-DC
X-Pass-Why
X-Dmc
X-Dispatch
X-Esi
My-App
X-Wa
X-Tumblr-Pixel-3
Fastly-Drupal-Html
X-PX
GeoIp-Country-Code
X-Endurance-Cache-Level
X-Lambda-Id
X-ID
X-MCACHE
X-Zone
CDN
X-CS
X-NGINX-Cache
True-Client-IP
X-Be
X-VCL-Version
Magicmarker
X-TRACE-ID
X-TX-ID
X-Vc
X-RateLimit-Reset
X-Req
X-Webkit-CSP-Report-Only
X-CSRF-TOKEN
Hostname
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-CACHE-KEY
CacheControlHeader
X-Air-Trace-Id
X-Air-Hostname
X-Air-Source
X-Hyper-Cache
X-Yandex-Sdch-Disable
X-CF-Lambda-Fn
X-TH-Server
X-LB-ID
True-Client-Country-4JS
X-CF-Lambda-Version
X-Srv
X-Micro-Cache
X-HS-Status
X-M-Log
X-Air-Pt
X-Op-Id-All
X-M-Reqid
Pramga
X-App
X-Alfa-Service
Resin-Trace
X-B3-Spanid
X-Vcl-Version
C-Via
Path
X-Qnm-Cache
True-Client-Ip
Tcn
X-Varnish-Beresp-TTL
X-TrackingId
Tracecode
N-Cache
GeoIP-Country-Code
X-SERVER-NAME
X-Vercel-Id
On-Server
X-GeoIP-Region-Code
Proxy-Connection
X-GeoIP-Country-Code
X-Platform
Esi-Enabled
Fastcgi-X-Cache-Version
X-Vercel-Cache
X-PAYTM-SRV-ID
NtCoent-Length
X-Check-Cacheable
X-CLOUD-TRACE-CONTEXT
X-Edge-Origin-Shield-Region
X-Edge-Origin-Shield-Bytes
X-FPC
X-Datacenter
X-Accel-Expires-Debug
Hit
X-Date
Section-Io-Origin-Status
Section-Io-Id
WWW-Authenticate
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
X-Akamai-Pragma-Client-IP
X-Webkit-Csp-Report-Only
X-Vtex-Remote-Cache
X-Via-CDN
GeoIP-Latitude
X-Platform-Processor
X-Vtex-Processado-Em
X-Platform-Router
X-WA
X-Geo
X-Lb-Id
X-Platform-Cluster
X-Mly-Id
X-RAMCache
X-Node-Id
Yjs-Id
Lb
Server-Id
YJS-ID
X-ServedByHost
X-SD-PageType
FSS-Cache
X-LAGOON
X-API-Version
ENV
X-Response-By
X-Edge-POP
X-Old-Content-Length
X-Request-Start
User-Agent
X-Dw-Trace-Id
X-Cdn-Forward
X-AIR-PT
Cdn
Cache-Key
HIT
X-Via-PopN
X-Via-PopV
Powered-By
X-PERF
X-ApacheServer
X-LiteSpeed-Cache-Control
X-Via-PopH
X-Location
X-Traceid
X-From
X-FL-EDGE
X-Instance-Name
Locid
Srvid
X-FORWARDED-FOR
X-Akamai-ERRuleID
X-Proxy-CacheRZ
X-CUA
X-Akamai-ERPolicy
Dnion-Transfer-Encoding
XkeyRZ
X-UA
Server-Ttl
X-TT-LOGID
X-Render-Time
DynaTrace
Geoip-Latitude
X-Via-Ucdn
X-LI-UUID
X-Cache-Ttl
X-Li-Pop
X-LI-Proto
X-Li-Fabric
X-Service-Response-Time
Sm-Log-Id
X-Proxy-Upstream
X-DI
X-DW
Nginx-CQVIP
X-DSS
X-LiteSpeed-Tag
X-Webstats-RespID
Ohc-File-Size
XServer
X-RPM
X-VarnishDD-TTL
Location
PFcat
X-HN
XM
X-CF-Powered-By
PICS-Label
X-Proxy-Cache-Hk
X-RSL
DT-Hot-News
X-RPS
X-DB
X-Cache-Ngx
X-Litespeed-Cache-Control
X-Wp-Cf-Super-Cache-Cache-Control
X-Wp-Cf-Super-Cache
X-Fastly-Cache-Hits
X-Cache-ASPX
X-Request-Url
X-HostName
X-B3-ParentSpanId
X-Contensis-Viewer-Groups
X-Varnish-Authentication
X-Cdn-Request-ID
Vha6-Origin
Wpo-Cache-Status
X-Lb-Nocache
Wpo-Cache-Message
X-ElasticPress-Query
X-Director
X-Fastly-Backend-Reqs
Warning
X-Ips-Loggedin
CountryCode
Wp-Super-Cache
Req-ID
X-DataCenter
X-Yottaa-OS
Fastcgi-Cache-Ttl
X-Moov-T
WZWS-RAY
SRV
X-Mg-Cache
X-Moov-Xdn-Version