Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
CF-RAY
CF-Cache-Status
Pragma
Link
X-Powered-By
ETag
Expect-CT
X-XSS-Protection
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Xss-Protection
X-Varnish
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
Alt-Svc
X-Download-Options
X-Request-Id
X-AspNet-Version
Access-Control-Allow-Credentials
X-Runtime
X-FRAME-OPTIONS
X-Drupal-Cache
X-Adblock-Key
X-Request-ID
X-Check
Content-Security-Policy-Report-Only
X-Generator
X-Cache-Status
X-Cacheable
X-Permitted-Cross-Domain-Policies
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-Iinfo
X-Template
X-Language
Status
X-Content-Security-Policy
X-AspNetMvc-Version
X-Buckets
Content-Encoding
Access-Control-Expose-Headers
Upgrade
Xkey
Access-Control-Max-Age
Keep-Alive
X-Kinja-Server-Push
X-Drupal-Dynamic-Cache
X-CDN
X-Turbo-Charged-By
X-Via
X-AH-Environment
X-Cache-Group
X-Age
X-Pass-Why
X-Backend
X-Ua-Compatible
X-Envoy-Upstream-Service-Time
EagleId
X-Amz-Id-2
X-Amz-Request-Id
X-Robots-Tag
X-Server
X-Page-Speed
X-Pingback
X-Server-Powered-By
X-UA-Device
X-Proxy-Cache
X-Swift-CacheTime
X-Swift-SaveTime
X-Hacker
X-Nginx-Cache-Status
Ali-Swift-Global-Savetime
Request-Context
Grace
X-Varnish-Cache
Server-Timing
Feature-Policy
Cf-Railgun
X-Amz-Version-Id
X-Device
X-LiteSpeed-Cache
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Rq
X-WebKit-CSP
Report-To
X-Cdn
EagleEye-TraceId
X-Server-Id
X-Ac
X-Response-Time
X-OneAgent-JS-Injection
X-Host
Request-Id
X-Cnection
X-Backend-Server
X-DataDome
X-Node
Content-Location
X-Origin-Cache
X-Cloud-Trace-Context
X-Readtime
X-Cache-Lookup
NEL
X-Ws-Request-Id
X-Vhost
X-Application-Context
X-Dispatcher
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-HW
Allow
X-Clacks-Overhead
X-Rack-Cache
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Dns-Prefetch-Control
X-Origin-Upstream-Status
X-DynaTrace
Surrogate-Control
Rating
X-FTR-Request-ID
Fusion-Template-Id
X-Country-Code
Fusion-Source
Fusion-Content-Id
Fusion-Component-Id
Fusion-Content-Source
X-Akam-SW-Version
X-Country
X-Goog-Hash
Pinterest-Generated-By
X-Varnish-TTL
X-Ruxit-JS-Agent
X-Instart-Request-ID
X-Vname
X-PC
X-TtlSet
X-MS-InvokeApp
Edge-Control
X-B3-TraceId
X-Mod-Pagespeed
SPRequestGuid
X-Url
Verso
X-Powered-By-Plesk
X-D2id
X-Sol
X-Middleton-Response
Pagespeed
Response
X-Trace
X-Middleton-Display
Display
X-SharePointHealthScore
X-VARITI-CCR
RTSS
Service-Worker-Allowed
X-Server-Name
X-Exp-Id
X-Kinja-Build
X-Kinja
X-Cdn-Fetch
X-Kinja-Revision
X-GoogleNews-Bot
X-Kinja-Server
X-Exp-Variant
X-Use-Magma
X-GitHub-Request-Id
Accept-Ch
Content-MD5
SPRequestDuration
SPIisLatency
X-Server-ID
X-Navigation-Version
X-Vcache
X-TTL
X-Powered-CMS
X-Debug
X-Abt-Application-Version
X-Vcap-Request-Id
X-ESI
X-Amz-Server-Side-Encryption
Public-Key-Pins
Charset
MS-Author-Via
X-CST
X-Upstream
X-Forwarded-Proto
X-Cached
X-NF-Request-ID
X-Amz-Rid
X-Version
Realpath
Edge-Cache-Tag
X-Px
DynaTrace
X-Aspnetmvc-Version
X-Shard
MicrosoftSharePointTeamServices
TCN
Arr-Disable-Session-Affinity
Accept-Ch-Lifetime
X-Ezoic-Cdn
X-XRDS-Location
X-TEC-API-ROOT
Fastly-Restarts
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-Shield-Request-Id
Pinterest-Version
X-MSEdge-Ref
X-Pinterest-Rid
Access-Control-Request-Method
X-SRCache-Fetch-Status
X-Ser
X-SRCache-Store-Status
S
X-Fastly-Request-ID
X-Recruiting
X-DynaTrace-JS-Agent
X-Trafficlayer-App-Name
X-Trafficlayer-App-Scope
X-Accel-Expires
X-Goog-Generation
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-DIS-Request-ID
X-Goog-Stored-Content-Length
Front-End-Https
X-Client-IP
X-Amz-Meta-S3cmd-Attrs
Nginx-Cache
X-Goog-Storage-Class
X-T
X-Id
X-Varnish-Age
X-Element-Page-Cache
MRF-Tech
X-Mrf-Item-Lastmod
X-B3-TraceId-Primal
Mrf-Cache-Status
X-Mrf-Section-Lastmod
X-FTR-DC
X-FTR-Cache-Status
X-FTR-Backend
X-Country-Code-Real
X-FTR-Realm
X-FTR-Backend-Server
X-FTR-Balancer
X-FTR-Expires
X-Amzn-Trace-Id
X-Dw-Request-Base-Id
Cache-Tag
X-Ttl
Fastcgi-Cache
X-Frontend
X-HS-Hub-Id
X-HS-Cache-Config
X-HS-Content-Id
X-Content-Digest
X-Webapp-Samesite-None-Activated-N
NR-ENABLED
Powered
X-Hits
X-Correlation-Id
X-RateLimit-Remaining
X-Fastcgi-Cache
Accept-CH-Lifetime
X-Kinsta-Cache
X-FTR-Cache-Host
Alternate-Protocol
X-Litespeed-Cache
X-Hp-Webp
Accept-CH
ServerID
X-N
X-Grace
X-Cache-Hit
X-Request-Received
X-Request-Processing-Time
TP-L2-Cache
TP-Cache
PB-RID
PB-PID
X-Node-Name
X-Request-Handler-Origin-Region
Server-Name
X-Microsite
X-Mobile-Rewrite
Arc-Version
X-Webkit-Csp
X-HS-Combine-CSS
AMP-Access-Control-Allow-Source-Origin
X-User-Agent
X-Content-Type
Healthy
X-Zen-Fury
X-Rid
X-Analytics
Backend-Timing
X-Revision
X-Akamai-Edgescape
Server-Node
X-Content-Security-Policy-Report-Only
X-SERVER
X-Logged-In
X-LB-Cache
AR-ATIME
AR-CACHE
AR-PoweredBy
X-AppVersion
X-Az
X-Activity-Id
X-Amzn-RequestId
Cache-Status
X-Amz-Apigw-Id
X-GUploader-UploadID
X-Pad
X-IPLB-Instance
X-Cached-By
X-Forwarded-For
X-FastCGI-Cache
X-Varnish-Grace
X-NWS-LOG-UUID
X-Mobile-URL
Retry-After
Ar-Sid
X-Oneagent-Js-Injection
X-Type
X-B3-Sampled
X-Content-Options
X-F-Cache
Refresh
X-Esi
Paypal-Debug-Id
X-Geo-Country
FilterID
Upgrade-Insecure-Requests
X-Srv
X-Ruxit-Js-Agent
X-App-Environment
X-Via-JSL
X-FB-Debug
X-Instance
X-Jobs
X-Tumblr-Pixel-0
X-Debug-Info
X-Tumblr-User
X-Tumblr-Pixel
X-Request-Guid
X-PHP-Backend
X-B
DC
Host
Source
Accept-Charset
X-AOL-HN
X-Varnish-Backend
X-Cluster
Actual-Object-TTL
Access-Control-Allow-Method
X-Cache-Age
X-Framework
X-Page-Id
X-Cache-Key
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
X-ATG-Version
X-WebKit-CSP-Report-Only
X-Seen-By
Fastcgi-Useragent
AR-Request-ID
X-Cache-2
X-TT
X-Git-Hash
MS-CV
X-Content-Powered-By
X-Cache-TTL
X-Whom
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-PressLabs-Stats
Cache
X-UA
X-Cache-Control
X-Amz-Replication-Status
X-B-Cache
X-Signature
X-Host-Name
Surrogate-Key
X-Wix-Request-Id
Host-Header
X-TA-CDN-Provider
Frame-Options
NGB
X-Response-Served-From
X-Daa-Tunnel
X-Mobile
X-RequestSource
X-Origin-Server
X-FW-Hash
X-FW-Type
X-FW-Serve
X-FW-Static
X-FW-Server
X-Cache-Enabled
Cache-Tv-Group
X-Cache-Operation
WPE-Backend
X-Cache-Rule
X-GeoIP
X-Drupal-Cache-Tags
X-Cache-NE
X-Handled-By
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-TX-ID
X-Tumblr-Pixel-2
X-Cacheable-TTL
X-Cache-Action
Eomportal-Instance
X-Tumblr-Pixel-1
X-Region
Filters
X-Hyper-Cache
X-Adobe-Loc
X-Adobe-Content
Payment
Cleartype
Webserver
X-EdgeConnect-Cache-Status
From-Origin
Xserver
X-Forwarded-Host
X-RemovedCookies
X-ProcessESI
X-Time
X-UA-Device-Type
Datacenter
X-Hostname
X-Akamai-Transformed
X-RTag
Ms-Operation-Id
X-Cache-TTL-Remaining
X-Load-Cache
X-App-Server
X-NewRelic-App-Data
X-Cache-Server
X-Edge-Location
X-Status
Liferay-Portal
X-ATS-Timestamp
X-Contextid
Tracecode
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Varnish-Hostname
X-Varnish-Server
X-BCube-Filmed-By
X-URL
X-TT-TIMESTAMP
X-Rule
Odigeo-Trace-Id
Country
X-ES-SERVER
Meta-Geo
X-Path-Route
X-Cache-Var
X-Cache-Var-Map
Load-Balancing
X-RN-RSRV
X-Upgrade-Enabled
X-Viewer-Country
X-FW-Dynamic
DSUID
X-Debug-Cache
X-Xfnlog-Site
X-RateLimit-Limit
X-Origin-Hint
X-OCL
X-EIG-Tracking-Id
X-PCL
X-Via-Fastly
X-VCT
X-Varnish-Cache-Hits
X-R9-Blue-Green-Version
X-Pubstack
X-Cache-Host
Release
TWC-Connection-Speed
TWC-Device-Class
Property-Id
DB-Nickname
Cache-Tags
Version
TWC-GeoIP-Country
TWC-GeoIP-LatLong
Webcakes-Region
Server-Info
Webcakes-App-Version
Webcakes-App-Name
TWC-Locale-Group
TWC-Privacy
X-CCM
Mn-Server-Ip
X-Oss-Request-Id
X-Oss-Object-Type
X-Oss-Server-Time
X-Oss-Storage-Class
X-Oss-Hash-Crc64ecma
Fastly-SSL
X-Cache-Config
Azure-InstanceId
X-Cache-Time
X-Drupal-Cache-Contexts
X-Hosted-By
X-Human
X-From
Azure-SiteName
S-Rt
Origin-Edge-Control
Origin-Cache-Control
NGX
Cache-Name
X-Akamai-Request-ID
X-Labrador-Cache-Channel
Azure-SlotName
Azure-Version
X-Akamai-Request-ID2
Azure-RegionName
X-IP
X-TNCMS
X-Soup
X-Redis-Cache
X-Rocket-Nginx-Bypass
X-Web-Node
X-UUID
X-Origin-Response-Time
X-Origin
X-Loop
X-Site-Version
X-ServerID
X-Access
X-Section
S-Cnection
X-Www-Served-By
L5d-Success-Class
X-Real-IP
X-PERF
X-FC-Vary-Parameters
X-FireWall-Port
X-Generated
X-Content-Age
X-Proto
X-Locale
X-ApacheServer
X-Proxy
X-Rendered-As
X-Format
Decoy-Debug-TTL
Decoy-Debug-Key
Decoy-Debug-Status
X-NWS-UUID-VERIFY
Ec-Rule-Version
X-ORACLE-APMCS-REQUEST-ID
X-ORACLE-APMCS-TAG
X-Time-Microsecs
X-Vgn-Hpd-Reason
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Varnish-Hits
X-JoinUs
Viewport
X-Is-Bot
X-Proxy-Build
X-Info
Selected-Fe
X-Timing-Wait
X-XRDS-LOCATION
X-Backend-Name
X-Cluster-Name
X-Storage
X-VCache
Uber-Trace-Id
X-ProxyCache-Key
X-ProxyCache-Status
X-BYPASS-REASON
X-Origin-TTL
X-Generated-By
X-Origin-CC
Rt-Fastcgi-Cache
X-Cache-Backend
X-PHP-Host
Cteonnt-Length
X-Accel-Buffering
X-App-Version
Cache-Key
X-Amzn-Remapped-Content-Length
X-WA-Info
Akamai-GRN
Time
X-Presslabs-Stats
X-SS-Set-Cookie
X-Webkit-CSP
X-GoCache-CacheStatus
Cache-Hits
X-Nginx-Cache-Key
Origin
X-NCache
X-CF-Powered-By
Vix-Hermes-Req-Id
GEO-INFO
X-Hit
X-Cache-Remote
X-Guploader-Uploadid
X-Backend-TTL
X-FB-TRIP-ID
X-No-Session
X-Trace-Id
X-SaId
Accept-Language
X-MServer
X-Environment-Context
X-L-Path
X-Tb
X-CDN-Forward
X-Geo
X-APP-VERSION
X-CS
X-Tumblr-Pixel-3
X-Device-Type
Access-Control-Request-Headers
X-Cache-Grace
X-B3-SpanId
X-Say-Cacheable
X-Say-TTL
X-SayCDN-TTL
X-Unique-Id
X-B3-Traceid
Srv
X-OVcl
X-OVcl-Cache
X-COUNTRY
X-S
X-CSRF-TOKEN
User-Cache-Control
X-Cluster-Node
OT-Force-Account-Verify
X-Uri
X-Shopify-Stage
X-Sorting-Hat-ShopId
Fastcgi-X-Cache-Version
X-Sorting-Hat-PodId
X-ShopId
ServedBy
X-Alternate-Cache-Key
X-ShardId
Xc-Version
Node
Apple-News-Services-Handled
Apple-News-Services-Host
Cross-Origin-Window-Policy
Content-Style-Type
MD5-Digest
Machine
IsBot
Content-Script-Type
BehaviorPad-Version
X-Vtex-Remote-Cache
Apple-News-Services-Request-Url
Arc-Country
Meta-Geo-Continent
AsisCache
Apple-News-Services-Parsed-Url
X-Trv-Group
X-Rewrite-Enabled
X-Rojux
X-B-Cookie
X-CF-Lambda-Fn
X-CF-Lambda-Version
X-ARC
X-S-Cookie
X-Aed
X-ScT
X-AIR-PT
X-Application
X-Connection-Hash
X-D
X-G
X-External-Request-Id
X-Hl-Ver
X-Processor
X-PAYTM-SRV-ID
X-DPWN-IS-SECURE
X-Detected-As
X-Date
X-Request-UUID
X-Region-Sid
X-Destination
X-Server-Time
X-Accel-Expires-Debug
X-VG-WebCache
X-VG-WebServer
X-Twitter-Response-Tags
Viewtype
X-Transaction
X-Vtex-Processado-Em
T-Server
Request-Country
Request-EU
Rt-Proxy-Cache
Server-Host
VivaBuild
X-A
X-Session-Fingerprint
X-A-Dgt
X-Service
X-A-Wwc
X-A-Dcw
X-SIPLIST1
X-Svr
X-A-Ccd
X-A-Dam
X-SRCache-Key
Rendered-Blocks
Mobile-Detection-Method
X-Tec-Api-Root
X-Tec-Api-Origin
X-CACHE-KEY
X-Tec-Api-Version
X-Via-CDN
ServerName
X-Shopify-Generated-Cart-Token
Wxu-Next-Hostname
Wxu-Next-Region
X-RateLimit-Limit-Second
Wxu-Next-Commit
Web-Mar-Node
Thinkindot-Control
Thinkindot-CacheControl-Type
X-S-Maxage
X-Ah-Environment
X-EC-Lua
X-Thinkindot-L3
X-Request-URI
RNT-Machine
X-Reboot
Server-Int
Served-By
RNT-Time
Thinkindot-CacheControl
X-Ms-Request-Id
X-Dispatcher-Server
X-Dispatch
X-Level-Front-Cache
X-CUA
X-Instart-Isnd
X-Endurance-Cache-Level
X-Generated-On
X-Gen-Mode
X-Hash
X-Hnp-Log
X-Core-Value
X-Cms-Context
X-Cache-Bucket
X-Block-Status
X-Varnish-Beresp-Grace
X-Ms-Version
X-Cache-Debug
X-Cache-Info
X-Clara-WADP
X-Location
X-Matched-Rule
X-FW-Version
X-RateLimit-Remaining-Second
We-Hiring
X-Varnish-Beresp-Ttl
Mail-Subject
X-Webstats-RespID
CDCHOST
X-Varnish-Beresp-Status
Proxy-Connection
X-WADP-Cache
Mime-Version
Cache-Host
X-Dc
X-NC
Now
X-B3-Parentspanid
X-NX-Host
X-Old-Content-Length
X-App-Name
X-BBXSRF
X-VServer
X-Backend-State
X-Azure-Ref-OriginShield
X-Azure-Ref
X-Agile
X-Proxy-Upstream
X-Proxy-Cache-Status
X-Qloud-Router
Adler-Geo
X-VC-Cache
AKAMAI
X-VG-TLSProxy
X-Platform-Server
X-Agile-Id
X-Origin-Date
X-Agile-Age
X-Owner
Hostname
X-Amz-Meta-Cache-Control
X-Cache-Id
X-Is-Gdpr
X-IN-APIGATEWAYSSL
X-Distributor
X-JWT-State
X-Wikidot-Static-Cache
X-Developers
X-Vdms-Version
X-Epic-Correlation-Id
X-GeoIP-City
X-Generation-Time
X-Has-Esi
X-Fastly-Cache
X-IN-APIGATEWAY
X-Debug-Log
X-Debug-Cookies
X-Logging-Id
X-Cdn-Srv
X-Cache-URL
X-Method
X-Cache-FS-Status
W
X-We-Are-Hiring
X-LI-UUID
X-Li-Pop
X-Li-Fabric
X-Wikidot-Backend
X-Core-Mission
X-Compress-Hint
X-C
X-Origin-Expires
X-Reqid
X-Sucuri-Cache
Magicmarker
X-SVT-ORM-RULES
Content-Disposition
X-Skip-Cache
X-Up
Memcached
X-Server-IP
Pramga
Platform
PFcat
X-Scheme
X-SD-PageType
Is-Eu
Heartbleed
IBM-Web2-Location
X-Release
SD-X-WS
X-Geo-Header
X-User
Kp-EeAlive
X-Variation
True-Client-Country-4JS
Esi-Enabled
Section-Io-Cache
X-SVT-ORM-VERSION
Fastly-Soc-X-Request-Id
X-UnsetCookies
X-Swa-Ws
L
Cache-Provider
X-Parent-Response-Time
X-SRV
X-Magnolia-Registration
NtCoent-Length
X-Sigma-Backend
X-LI-Proto
X-Distil-CS
X-Internal-Host
X-Irp-Debug
X-Eu-Site
X-Thanos
X-Generated-In
X-TrackingId
X-Clientip
Gh-Request-Id
X-Debug-Cache-Store
X-Debug-Cache-Fetch
HA-Ipaddr
Ha-Gx-Prefs
X-RCS-CacheZone
X-Key
X-Debug-Cache-Expiry
Locale
X-NodeID
X-Rocket-Build-Number
Cdncip
X-MSEdge-Flight
X-Urbn-Site-Id
X-Policy
X-Request-Start
X-Urbn-Context-Path
Countrycode
X-Auto-Login
X-AK-Request-ID
X-MSEdge-Features
V-Age
X-ServiceProvider
X-CGP
X-WebServer
Cdnsip
X-Bip
X-Sigma
X-Source
X-Nc
X-Planisys-CDN-TTL
X-Upstream-Ct
X-Via-NSCOPI
X-7Graus-Varnish-Cache-Control
X-7Graus-Varnish-XKeys
Server-ID
X-Planisys-CDN-Cache
Powered-By-ChinaCache
X-Upstream-Ht
X-Planisys-CDN-Rules
CF-IPCountry
X-Servername
X-B3-Spanid
X-ND-Cache
A
X-FORWARDED-FOR
GEO-REGION-INFO
X-Developer
Environment
X-Cdn-Forward
X-Sucuri-Id
X-Nginx-Cache
X-GRACE
X-Trafficlayer-App-Version
X-Sn-Servicetimems
X-Device-Os
X-Be
X-FPC
X-Cdn-Origin
Geo-Info
X-Req
X-TIME
X-Servedbyhost
X-Lb-Id
X-Node-Id
Locid
X-Microcachable
X-Newrelic-Synthetics
X-Gamma-Serve
X-VHOST
FNAC-ModuleRouting
X-Served-From
X-Refresh
ProcessTime
Tcn
X-Sucuri-ID
X-HTML-Minification-Powered-By
X-Edge-O15-RID
Request-Time
X-IPS-LoggedIn
X-Zone
X-AWS-Id
X-VWS-Id
X-Render-Time
Memory
X-Pjax-Url
Resin-Trace
X-Tb-Optimization-Total-Bytes-Saved
X-VCL-Version
X-LJ-Flow-ID
XServer
X-Pf-Uncompressing
X-NU-AKA-ACS-Version
X-DC
Group
Gannett-Cam-Experience-Id
X-GeoIP-Country-Code
X-ECACHE
X-Instart-Info
X-ElasticPress-Search
X-Correlation-ID
CF-Cached-On
MIME-Version
Geoip-City
X-ZONE
X-NGENIX-Cache
X-Var-Ttl
Amp-Access-Control-Allow-Source-Origin
X-Backend-Host
X-Backend-Url
X-Ratelimit-Remaining
X-MP-GENERATED-AT
Geoip-Latitude
X-Mode
GeoIp-Country-Code
Pics-Label
GeoIP-Latitude
Cf-Ipcountry
Backend-Name
GeoIP-City
Ttl
M-TraceId
X-Pod
GeoIP-Country-Code
TTL
PICS-Label
X-Unique-ID
X-CSRF-Token
REQUESTUUID
Lfy
X-Via-Edge
X-Via-SSL
X-Check-Cacheable
Cdn
N-Cache
Pagetype
X-Dynatrace-Js-Agent
X-Zipkin-Id
Cache-Prefix
HostName
X-Bc
X-GEO
Fly-Cache
Fly-Request-Id
X-Proxied
X-APP
Ohc-File-Size
X-Routing-Service
Ohc-Cache-HIT
Host-ID
X-CLOUD-TRACE-CONTEXT
X-Via-Ucdn
Cache-Cookie-Set-From
X-BC
X-Vcl-Version
Cache-Cookie-Set-Idcheck
X-Fstrz
X-PF-Uncompressing
X-Worker
Cache-Cookie-Set-Lfrom
X-HS-Status
HitType
X-Sedo-Request-Id
X-LiteSpeed-Cache-Control
X-PJAX-URL
X-Cache-Miss-From
X-Cdn-Request-ID
X-Ratelimit-Limit
X-Swift-Error
X-Fastly-Country-Code
X-Upstream-HT
X-TH-Server
X-Upstream-CT
X-Fetched-On
X-Server-W
SRV
X-Rebelmouse-Cache-Control
On-Server
X-Rebelmouse-Surrogate-Control
Pragrma
User-Agent
Fastly-SWR
X-Cache-Tag
URI
X-Tt-Trace-Tag
Fastly-SIE
X-Request-Time
X-Wa
X-HostName
X-ServedByHost
X-Aicache-OS
CDN
X-WR-MODIFICATION
X-NGINX-Cache
Powered-By
X-UPSTREAM-Address
Who
X-BE
Media-Length
X-TT-LOGID
X-WA
X-RateLimit-Reset
CACHE
X-GDPR
X-LB-ID
Dynatrace
Cdn-Request-Time
X-Fastly-Backend-Reqs
X-Edge-Server
X-Fpc
X-LAGOON
AR-SID
X-Varnish-URL
Cdn-Host
X-Varnish-Cacheable
DataCenter
X-Cf-Powered-By
X-Tt-Trace-Host
FSS-Cache
FSS-Proxy
Debug
X-ServerName
SS
X-Flog
X-SN
X-ABtesting
LB
Get-Access-Time
Is-Session-Tracking
Server-Id
X-Hello
X-Akamai-ERPolicy
X-Akamai-ERRuleID
X-Ftr-Cache-Host
X-Ua
X-DB
X-Varnish-Beresp-TTL
X-DSS
X-DW
SN
Xet-Cookie
UCS
X-Protected-By
X-Org
X-Action
X-DI
X-RSL
X-Response-By
X-RPS
X-Gen-Id
X-RPM
X-Hp-Ccpa-Warning
X-Cache-Tags
Cneonction
XxX-Cache-Status
SID
Warning
X-VC
X-LiteSpeed-Tag
X-Li-Proto
X-SB
X-Fastly-Cache-Hits
RequestId
X-Amzn-Remapped-Connection
Product
X-Request-Url
Thinkindot-Cache-Type
NnCoection
Application
X-Amzn-Remapped-Date
X-Nananana
Requestid
X-Dw-Trace-Id