Threat Level: green Handler on Duty: Bojan Zdrnja

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
X-XSS-Protection
X-Powered-By
Pragma
CF-Cache-Status
Link
CF-RAY
ETag
Expect-CT
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-UA-Compatible
X-Served-By
X-Varnish
Alt-Svc
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Download-Options
X-AspNet-Version
X-Request-Id
Access-Control-Allow-Credentials
X-Runtime
X-Drupal-Cache
X-Request-ID
X-Adblock-Key
X-Check
X-Cache-Status
X-Generator
Content-Security-Policy-Report-Only
X-Permitted-Cross-Domain-Policies
X-Cacheable
X-Template
X-Language
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-Iinfo
X-AspNetMvc-Version
X-Ua-Compatible
X-FRAME-OPTIONS
X-Buckets
Status
X-Content-Security-Policy
X-CDN
Content-Encoding
Upgrade
Access-Control-Expose-Headers
Access-Control-Max-Age
X-Kinja-Server-Push
Keep-Alive
X-Xss-Protection
X-Drupal-Dynamic-Cache
X-Turbo-Charged-By
Xkey
X-Pass-Why
X-Cache-Group
P3p
X-AH-Environment
X-Envoy-Upstream-Service-Time
CF-Ray
X-Backend
X-Age
X-Server
X-Via
X-Server-Powered-By
X-Robots-Tag
X-Amz-Request-Id
X-Amz-Id-2
X-Page-Speed
X-Pingback
EagleId
X-Nginx-Cache-Status
X-Proxy-Cache
X-UA-Device
X-Hacker
Request-Context
X-Ws-Request-Id
X-Varnish-Cache
Feature-Policy
Server-Timing
Grace
Cf-Railgun
X-Swift-SaveTime
X-Swift-CacheTime
X-Amz-Version-Id
Ali-Swift-Global-Savetime
X-Dns-Prefetch-Control
X-LiteSpeed-Cache
Report-To
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Rq
X-Server-Id
X-WebKit-CSP
X-Host
X-Device
EagleEye-TraceId
X-OneAgent-JS-Injection
Content-Location
X-Origin-Cache
X-Response-Time
X-Node
X-Ac
Surrogate-Control
X-Vhost
X-Readtime
Request-Id
X-Backend-Server
X-Cloud-Trace-Context
X-Dispatcher
X-Origin-Upstream-Status
X-ORACLE-DMS-ECID
X-Cnection
X-HW
X-DataDome
NEL
X-Application-Context
X-ORACLE-DMS-RID
Fusion-Template-Id
Fusion-Content-Source
Fusion-Content-Id
Fusion-Component-Id
Fusion-Source
X-Mod-Pagespeed
X-Cache-Lookup
X-Rack-Cache
Edge-Control
Rating
X-Country
Pinterest-Generated-By
X-Akam-SW-Version
X-Clacks-Overhead
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Ruxit-JS-Agent
X-DynaTrace
X-Country-Code
Allow
X-Instart-Request-ID
X-Varnish-TTL
X-Goog-Hash
X-Vname
X-TtlSet
X-PC
X-TTL
X-ESI
X-FTR-Request-ID
Accept-Ch
Verso
X-Powered-By-Plesk
X-Url
Service-Worker-Allowed
Content-MD5
X-Forwarded-Proto
X-Version
X-MS-InvokeApp
Accept-Ch-Lifetime
X-GitHub-Request-Id
X-Kinja-Revision
X-Kinja-Server
X-Use-Magma
X-Kinja
X-Cdn-Fetch
X-Exp-Id
X-Exp-Variant
X-GoogleNews-Bot
X-Kinja-Build
Edge-Cache-Tag
X-B3-TraceId
RTSS
X-Px
AR-ATIME
AR-Request-ID
Ar-Sid
AR-CACHE
AR-PoweredBy
X-D2id
X-Abt-Application-Version
X-Debug
Charset
X-NF-Request-ID
SPRequestGuid
X-Server-Name
X-Amz-Server-Side-Encryption
X-Powered-CMS
X-Accel-Expires
X-Cached
X-MSEdge-Ref
X-Amz-Rid
Arr-Disable-Session-Affinity
X-Vcache
X-Sol
X-Middleton-Display
Pagespeed
X-Vcap-Request-Id
Display
X-Middleton-Response
Response
X-Navigation-Version
X-Trace
Pinterest-Version
X-Pinterest-Rid
X-SRCache-Store-Status
X-SharePointHealthScore
X-SRCache-Fetch-Status
X-TEC-API-ROOT
X-TEC-API-VERSION
TCN
X-TEC-API-ORIGIN
Realpath
X-VARITI-CCR
Public-Key-Pins
X-Fastcgi-Cache
Cache-Tag
X-Cdn
Access-Control-Request-Method
X-Upstream
X-Client-IP
S
X-DynaTrace-JS-Agent
MS-Author-Via
X-Ser
X-Fastly-Request-ID
X-Shard
SPIisLatency
SPRequestDuration
X-Id
X-Hp-Webp
DynaTrace
X-Ezoic-Cdn
X-Forwarded-For
X-T
MRF-Tech
X-Mrf-Section-Lastmod
X-Amz-Meta-S3cmd-Attrs
X-B3-TraceId-Primal
X-Mrf-Item-Lastmod
Mrf-Cache-Status
X-Amzn-Trace-Id
X-Content-Type
X-Recruiting
Nginx-Cache
Front-End-Https
X-Grace
Fastcgi-Cache
X-Hits
X-Varnish-Age
X-DIS-Request-ID
MicrosoftSharePointTeamServices
ServerID
X-Mobile-URL
X-Dw-Request-Base-Id
NR-ENABLED
X-Server-ID
X-Node-Name
X-Content-Digest
X-HS-Hub-Id
X-HS-Content-Id
X-Element-Page-Cache
X-HS-Combine-CSS
X-HS-Cache-Config
X-Goog-Metageneration
Powered
X-Frontend
X-Goog-Generation
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-Goog-Storage-Class
Server-Name
X-Goog-Stored-Content-Encoding
X-FTR-Expires
X-FTR-Cache-Status
X-Country-Code-Real
X-Edge-O15-RID
Alternate-Protocol
X-Logged-In
X-FTR-Realm
X-FTR-Backend
X-FTR-Balancer
X-FTR-DC
X-FTR-Backend-Server
X-Correlation-Id
Server-Node
TP-L2-Cache
TP-Cache
X-Cache-TTL
X-Webapp-Samesite-None-Activated-N
X-Shield-Request-Id
X-Webkit-Csp
X-Request-Received
X-Request-Processing-Time
AMP-Access-Control-Allow-Source-Origin
X-Microsite
X-Request-Handler-Origin-Region
Upgrade-Insecure-Requests
X-Content-Options
X-XRDS-Location
Refresh
X-Content-Security-Policy-Report-Only
X-Origin-Server
X-Rid
X-Revision
X-User-Agent
Nel
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Page-Id
X-Varnish-Grace
Backend-Timing
X-Akamai-Edgescape
X-ATS-Timestamp
X-F-Cache
X-Cache-Hit
X-XRDS-LOCATION
X-Jurisdiction
X-Type
Fastly-Restarts
X-Pad
X-Analytics
X-Content-Powered-By
X-Az
X-Activity-Id
X-Geo-Country
X-AppVersion
X-N
X-B3-Sampled
X-LB-Cache
X-Zen-Fury
X-B
X-URL
X-Kinsta-Cache
X-FTR-Cache-Host
X-RateLimit-Remaining
X-TT
PB-PID
X-Cache-Age
PB-RID
X-WebKit-CSP-Report-Only
X-Mobile-Rewrite
X-App-Environment
Arc-Version
X-Ruxit-Js-Agent
X-Instance
X-Tumblr-Pixel
X-Tumblr-User
X-Framework
DC
Paypal-Debug-Id
X-Tumblr-Pixel-0
X-Request-Guid
X-AOL-HN
Actual-Object-TTL
X-B-Cache
Access-Control-Allow-Method
X-Debug-Info
X-CST
X-PHP-Backend
X-Signature
X-Jobs
Cache-Status
X-Load-Cache
X-FB-Debug
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
X-Git-Hash
Fastcgi-Useragent
X-Cache-Action
Surrogate-Key
X-Varnish-Backend
FilterID
Host-Header
Accept-CH
X-Ttl
MS-CV
X-IPLB-Instance
X-FastCGI-Cache
X-SS-Set-Cookie
X-Tt-Trace-Tag
X-Cached-By
X-Contextid
X-Amz-Replication-Status
X-B3-Traceid
X-Tt-Trace-Host
X-Cache-Key
X-Cluster
X-Srv
X-Time
X-ATG-Version
Frame-Options
NGB
X-Response-Served-From
Tracecode
X-Accel-Buffering
Accept-CH-Lifetime
WPE-Backend
Source
Payment
X-VCache
X-Trafficlayer-App-Name
X-Trafficlayer-App-Scope
Host
X-FW-Serve
X-FW-Type
X-FW-Static
X-IPS-LoggedIn
X-Tumblr-Pixel-2
X-RequestSource
X-Tumblr-Pixel-1
X-FW-Server
X-FW-Hash
Cache-Tv-Group
X-Cache-Enabled
X-Cache-2
Filters
Eomportal-Instance
X-Varnish-Server
X-WA-Info
X-TX-ID
X-Region
X-Mobile
X-Adobe-Content
X-Adobe-Loc
X-GeoIP
X-Cacheable-TTL
X-Host-Name
X-Cache-NE
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-Varnish-Hostname
X-Rendered-As
X-Is-Bot
X-NewRelic-App-Data
Cleartype
Xserver
X-Seen-By
X-Oneagent-Js-Injection
X-Cache-Operation
Cache
X-Cache-Rule
X-Hostname
Healthy
X-Via-JSL
X-EdgeConnect-Cache-Status
X-Cache-Control
X-Origin-Response-Time
X-Presslabs-Stats
X-Cache-TTL-Remaining
X-HTML-Minification-Powered-By
Datacenter
Retry-After
X-RTag
Ms-Operation-Id
X-Dc
X-RemovedCookies
X-ProcessESI
X-UA
X-ORACLE-APMCS-REQUEST-ID
X-Rule
Server-Info
X-ORACLE-APMCS-TAG
X-RateLimit-Limit
From-Origin
X-PressLabs-Stats
X-Wix-Request-Id
X-Status
X-Cache-Server
Liferay-Portal
X-Endurance-Cache-Level
X-NWS-LOG-UUID
Version
X-Upgrade-Enabled
X-Source
X-L-Path
X-Environment-Context
X-FireWall-Port
X-CACHE-KEY
X-Cache-Var
Meta-Geo
X-Cache-Var-Map
X-ES-SERVER
X-RN-RSRV
X-Path-Route
X-Timing-Wait
Selected-Fe
X-Handled-By
X-Proxy-Build
X-UUID
X-Proto
X-Hyper-Cache
X-Storage
X-Backend-Name
X-Content-Age
X-Tb
Akamai-GRN
X-ShopId
X-Cache-Config
Azure-InstanceId
Azure-RegionName
X-BYPASS-REASON
X-Akamai-Request-ID
TWC-Locale-Group
TWC-Privacy
X-Section
Webcakes-App-Name
TWC-GeoIP-LatLong
TWC-GeoIP-Country
S-Rt
TWC-Connection-Speed
TWC-Device-Class
Webcakes-App-Version
Webcakes-Region
X-ShardId
L5d-Success-Class
X-Alternate-Cache-Key
Now
X-Akamai-Request-ID2
X-Yottaa-Metrics
X-Access
X-Shopify-Generated-Cart-Token
X-Yottaa-Optimizations
X-AWS-Id
X-Soup
X-ProxyCache-Key
X-Proxy
X-FC-Vary-Parameters
X-Format
Decoy-Debug-Key
X-LJ-Flow-ID
Azure-SiteName
NGX
DB-Nickname
X-FW-Dynamic
X-Generated-By
X-Hl-Ver
Decoy-Debug-TTL
X-Human
X-OCL
X-Goog-Meta-Goog-Reserved-File-Mtime
X-PCL
X-Origin-Hint
Decoy-Debug-Status
X-ProxyCache-Status
X-Pubstack
Property-Id
X-Time-Microsecs
X-Vgn-Hpd-Reason
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Shopify-Stage
Azure-SlotName
Azure-Version
X-Debug-Cache
X-EIG-Tracking-Id
X-Redis-Cache
Node
X-Qloud-Router
X-Request-Time
Cache-Tags
X-Viewer-Country
X-VWS-Id
X-Web-Node
Ec-Rule-Version
Origin-Cache-Control
Origin-Edge-Control
Mn-Server-Ip
X-Say-TTL
X-RCS-CacheZone
X-Say-Cacheable
OT-Force-Account-Verify
X-Www-Served-By
X-Xfnlog-Site
X-Origin
X-NYM-Debug-Backend
X-Site-Version
X-CCM
X-IP
X-ServerID
X-MP-GENERATED-AT
X-SayCDN-TTL
X-Locale
X-Cache-Host
X-Hosted-By
X-Proxy-Cache-Status
X-Amzn-Remapped-Content-Length
X-BCube-Filmed-By
X-Cluster-Node
Cache-Name
X-APP-VERSION
X-R9-Blue-Green-Version
Viewport
X-Loop
X-JoinUs
X-SaId
X-TNCMS
X-FB-TRIP-ID
Webserver
Uber-Trace-Id
X-Generated
X-Varnish-Hits
X-Detected-As
X-App-Server
GEO-INFO
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
Cross-Origin-Window-Policy
Time
X-CS
Srv
X-Drupal-Cache-Tags
X-Unique-Id
X-Akamai-Transformed
X-NCache
X-From
X-Cache-Remote
X-Edge-Location
X-Esi
X-UA-Device-Type
Accept-Charset
X-TT-TIMESTAMP
X-Cluster-Name
X-Drupal-Cache-Contexts
X-Origin-TTL
X-Origin-CC
Cache-Key
Country
Mime-Version
Accept-Language
X-Mode
X-Newrelic-Synthetics
X-EC-Lua
Odigeo-Trace-Id
X-Backend-TTL
X-Microcachable
X-B3-Spanid
X-CDN-Forward
X-No-Session
X-Geo
X-Info
Ohc-Cache-HIT
X-Forwarded-Host
X-CLOUD-TRACE-CONTEXT
Ohc-File-Size
Rt-Fastcgi-Cache
Proxy-Connection
X-Magnolia-Registration
X-Real-IP
X-UPSTREAM-Address
Content-Disposition
Fastly-SSL
X-Labrador-Cache-Channel
ServedBy
X-Proxied
X-Zipkin-Id
X-Routing-Service
X-PHP-Host
X-Varnish-Cache-Hits
X-ApacheServer
Cf-Ipcountry
X-PERF
Access-Control-Request-Headers
X-A-Dam
X-A-Dcw
X-A-Ccd
X-GeoIP-Country-Code
GEO-REGION-INFO
Fastcgi-X-Cache-Version
X-Accel-Expires-Debug
X-ARC
X-Application
X-Aed
X-A-Dgt
X-UnsetCookies
X-D
X-Date
X-CF-Lambda-Fn
X-Connection-Hash
X-CF-Lambda-Version
AsisCache
BehaviorPad-Version
X-Destination
X-A
X-G
Xc-Version
X-B-Cookie
Content-Style-Type
X-External-Request-Id
X-DPWN-IS-SECURE
Content-Script-Type
X-Geo-Header
X-A-Wwc
X-S
X-S-Cookie
X-Transaction
X-Rojux
X-Trv-Group
Viewtype
X-Request-UUID
X-Rewrite-Enabled
X-App-Version
X-ScT
X-SRCache-Key
Powered-By
VivaBuild
Mobile-Detection-Method
Machine
X-Vtex-Remote-Cache
Rendered-Blocks
X-Session-Fingerprint
T-Server
Meta-Geo-Continent
MD5-Digest
X-VG-WebCache
X-Vtex-Processado-Em
X-Region-Sid
X-Twitter-Response-Tags
X-VG-WebServer
X-Cache-Time
X-Whom
X-Vdms-Version
X-Device-Type
User-Cache-Control
X-Cache-Backend
X-Cache-ASPX
X-Thanos
X-Varnish-Authentication
X-CUA
X-VC-Cache
X-Tumblr-Pixel-3
Server-Surrogate-Control
X-Via-Fastly
X-TrackingId
X-Contensis-Viewer-Groups
X-Cache-Debug
Server-Cache-Control
X-SIPLIST1
X-Logging-Id
X-VG-TLSProxy
W
X-Rocket-Build-Number
X-WebServer
X-Auto-Login
IsBot
Gh-Request-Id
X-Bip
X-Sigma
X-Sigma-Backend
X-Tec-Api-Origin
X-Tec-Api-Root
X-Tec-Api-Version
X-C
Wxu-Next-Region
X-Agile
Server-Int
X-CGP
Wxu-Next-Commit
Web-Mar-Node
Wxu-Next-Hostname
We-Hiring
X-Backend-State
X-BBXSRF
X-Cache-Bucket
True-Client-Country-4JS
X-Cache-Info
X-Cache-URL
X-Agile-Id
X-AK-Request-ID
X-Cdn-Srv
X-App-Name
X-Agile-Age
X-Gen-Mode
X-Proxy-Upstream
X-OVcl-Cache
X-RateLimit-Limit-Second
X-RateLimit-Remaining-Second
X-Render-Time
X-OVcl
X-Origin-Expires
X-Nginx-Cache-Key
X-Ms-Version
X-NodeID
X-NX-Host
X-Origin-Date
X-Req
X-Request-URI
X-TT-LOGID
X-Trace-Id
X-VServer
X-Urbn-Context-Path
X-Urbn-Site-Id
X-Swa-Ws
X-SVT-ORM-VERSION
X-We-Are-Hiring
X-Webstats-RespID
X-Sucuri-Cache
X-WADP-Cache
X-SVT-ORM-RULES
X-Ms-Request-Id
X-Location
X-Distil-CS
X-Developers
X-Eu-Site
X-Fastly-Cache
X-FW-Version
X-Debug-Log
X-Debug-Cookies
X-Cms-Context
X-Clientip
X-Debug-Cache-Expiry
X-Debug-Cache-Fetch
X-Debug-Cache-Store
X-User
X-Generated-In
X-Irp-Debug
X-Wikidot-Static-Cache
X-Wikidot-Backend
Section-Io-Cache
X-Key
X-Instart-Isnd
X-IN-APIGATEWAYSSL
X-GoCache-CacheStatus
X-Generation-Time
X-Hit
X-Hnp-Log
X-IN-APIGATEWAY
X-Clara-WADP
X-Block-Status
FNAC-ModuleRouting
Ha-Gx-Prefs
Fastly-Soc-X-Request-Id
Fastly-Backend-Name
Countrycode
Environment
Memcached
HA-Ipaddr
Locid
Locale
IBM-Web2-Location
Heartbleed
Mail-Subject
Country-Code
Cdnsip
Apple-News-Services-Host
Apple-News-Services-Parsed-Url
Apple-News-Services-Handled
RNT-Machine
AKAMAI
RNT-Time
Request-EU
Request-Country
CDCHOST
Cache-Host
Kp-EeAlive
Apple-News-Services-Request-Url
Cdncip
X-B3-Parentspanid
Geo-Info
X-Cache-Tags
Thinkindot-CacheControl-Type
X-NU-AKA-ACS-Version
X-Matched-Rule
Thinkindot-Control
X-JWT-State
X-Owner
X-Epic-Correlation-Id
X-Varnish-Beresp-Grace
X-Has-Esi
X-LI-UUID
Thinkindot-CacheControl
Adler-Geo
X-Core-Mission
X-Core-Value
X-Li-Fabric
X-Generated-On
X-Li-Pop
X-GeoIP-City
Server-ID
Server-Host
X-LI-Proto
X-Thinkindot-L3
X-Varnish-Beresp-Status
X-Level-Front-Cache
X-ServiceProvider
X-Service
X-Dispatcher-Server
X-TH-Server
X-Variation
X-Trafficlayer-App-Version
Is-Eu
X-Up
X-Uri
X-Is-Gdpr
X-Varnish-Beresp-Ttl
Platform
X-Internal-Host
V-Age
X-Reboot
X-NGENIX-Cache
X-Gamma-Serve
X-Distributor
X-Hash
X-S-Maxage
ServerName
X-Daa-Tunnel
X-Lb-Id
X-Response-By
Fastly-SWR
Fastly-SIE
X-Micro-Cache
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-NC
PFcat
X-Old-Content-Length
Cache-Hits
X-Refresh
X-Platform-Server
X-Azure-Ref
HitType
X-TA-CDN-Provider
X-Server-W
X-SERVER
X-Servername
X-Server-IP
X-Cdn-Forward
RequestId
X-Nginx-Cache
X-CF-Powered-By
X-Tb-Optimization-Total-Bytes-Saved
X-B3-SpanId
X-TIME
X-Fetched-On
Memory
X-Cdn-Request-ID
Media-Length
X-Parent-Response-Time
X-CSRF-TOKEN
X-Nc
ProcessTime
Origin
X-BACKEND-TTL
X-Pjax-Url
X-CSRF-Token
Geoip-Latitude
X-Pf-Uncompressing
User-Agent
X-Wa
Filterid
X-NGINX-Cache
Group
X-Var-Ttl
GeoIp-Country-Code
X-Air-Hostname
Pragrma
X-Reqid
X-AIR-PT
TTL
Esi-Enabled
SRV
X-Correlation-ID
X-Ua
X-Unique-ID
X-Planisys-CDN-Cache
X-Policy
X-Cache-Expired-At
X-Vcl-Version
X-Sucuri-Id
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
X-Sucuri-ID
X-Rocket-Nginx-Bypass
X-Request-Start
X-COUNTRY
S-Cnection
PICS-Label
Powered-By-ChinaCache
HostName
XServer
X-Azure-Ref-OriginShield
SN
Rt-Proxy-Cache
X-Servedbyhost
X-Webkit-CSP
X-Varnish-Cacheable
X-Litespeed-Cache
Geoip-City
M-TraceId
X-Via-Ucdn
Magicmarker
X-Method
Load-Balancing
X-Varnish-Ttl
X-NWS-UUID-VERIFY
X-Via-CDN
X-HS-Status
X-Fastly-Country-Code
X-FORWARDED-FOR
Ohc-Response-Time
DSUID
X-Developer
Dnion-Transfer-Encoding
Release
Tcn
X-VCT
X-MServer
X-Node-Id
X-Device-Os
Who
X-LAGOON
X-Be
X-Ocache
Resin-Trace
NtCoent-Length
X-Sn-Servicetimems
X-Cache-Ttl
X-Cdn-Origin
X-Cache-Grace
X-ServedByHost
X-Svr
X-Zone
X-Ftr-Cache-Host
X-Hp-Ccpa-Warning
X-VHOST
X-MSEdge-Features
On-Server
X-Bc
CF-Cached-On
X-MSEdge-Flight
Vix-Hermes-Req-Id
Cdn
X-Request-Host
Cteonnt-Length
A
X-APP
X-VCL-Version
X-Ratelimit-Remaining
Pics-Label
MIME-Version
Cloudfront-Viewer-Country
X-Configured-By
X-Oss-Object-Type
X-Oss-Request-Id
GeoIP-Country-Code
X-Oss-Server-Time
X-Oss-Hash-Crc64ecma
X-Oss-Storage-Class
Ttl
X-Oracle-Dms-Rid
X-Fastly-Backend-Reqs
X-VarnishDD-TTL
X-Beluga-Trace
X-Beluga-Status
GeoIP-Latitude
X-Beluga-Cache-Status
X-Beluga-Response-Time
X-SD-PageType
X-WR-MODIFICATION
X-Beluga-Record
SD-X-WS
X-Varnish-URL
X-Beluga-Node
X-Cache-Status-Check
X-DC
X-Compress-Hint
X-LiteSpeed-Cache-Control
X-PJAX-URL
X-PF-Uncompressing
GeoIP-City
X-Cache-Id
X-Newrelic-App-Data
X-Varnish-Url
X-Upstream-Ht
X-SN
X-Upstream-Ct
Hostname
Processtime
X-Tid
X-SRV
X-Release
L
X-Via-NSCOPI
Host-ID
X-Ftr-Request-Id
X-Ratelimit-Limit
X-HostName
LB
X-Aicache-OS
X-BE
X-Scheme
X-Dynatrace
X-Dynatrace-Js-Agent
X-Fastly-Request-Id
Servername
X-Swift-Error
UCS
CDN
Requestid
Cache-Cookie-Set-From
X-ID
Cache-Provider
CACHE
Cache-Cookie-Set-Lfrom
Cache-Cookie-Set-Idcheck
X-Fastly-Cache-Hits
X-Frame-Option
Amp-Access-Control-Allow-Source-Origin
X-StackifyID
X-RSL
X-RPS
X-RPM
X-DB
X-DI
X-DSS
X-DW
X-Slack-Backend
Lfy
Dynatrace
CF-IPCountry
X-Ftr-Realm
X-Ftr-Dc
Pagetype
X-Ftr-Balancer
X-Ftr-Backend-Server
X-ServerName
X-Branch-Name
X-LB-ID
X-Ftr-Backend
X-Varnish-Beresp-TTL
X-Snapshot-Date
X-CACHE-AGE
D-Cc-Upstream
X-Action
X-VC
X-Cc-Req-Id
Warning
WZWS-RAY
X-PAYTM-SRV-ID
X-Processor
X-Server-Time
X-Skip-Cache
X-FPC
X-Fastly-Cache-Status
X-SB
Arc-Country
Pramga
X-Dispatch
X-Cc-Via
WebServer
X-Apw-Hits
Proxy-Firewall
X-Apw-Access-Token
X-Apw-Access-Object
X-Apw-Access-Action
V-Cache
X-ZONE
X-Edge-IP
X-Node-ID
NnCoection
X-Cache-FS-Status
DataCenter
X-Worker
X-Request-Url
WP-Super-Cache
X-BC
Correlation-Id
Lb
X-Litespeed-Cache-Control
X-Check-Cacheable
X-Powered-Y
X-Amzn-Remapped-Connection
Backend-Name
X-App
X-Request-URL
X-ElasticPress-Search
X-Amzn-Remapped-Date