Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
X-XSS-Protection
X-Powered-By
Pragma
CF-Cache-Status
CF-RAY
Link
ETag
Expect-CT
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-UA-Compatible
X-Served-By
X-Varnish
Alt-Svc
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Download-Options
X-Request-Id
X-AspNet-Version
Access-Control-Allow-Credentials
X-Runtime
X-Drupal-Cache
X-Adblock-Key
X-Check
X-Cache-Status
X-Generator
Content-Security-Policy-Report-Only
X-Permitted-Cross-Domain-Policies
X-Request-ID
X-Cacheable
X-Template
X-Language
Timing-Allow-Origin
X-Iinfo
X-DNS-Prefetch-Control
X-AspNetMvc-Version
X-Ua-Compatible
X-FRAME-OPTIONS
X-Buckets
Status
X-Content-Security-Policy
X-CDN
Content-Encoding
Upgrade
Access-Control-Expose-Headers
Access-Control-Max-Age
X-Xss-Protection
X-Kinja-Server-Push
Keep-Alive
X-Turbo-Charged-By
X-Drupal-Dynamic-Cache
P3p
Xkey
X-Pass-Why
X-Cache-Group
X-AH-Environment
X-Envoy-Upstream-Service-Time
CF-Ray
X-Backend
X-Age
X-Server
X-Via
X-Amz-Id-2
X-Amz-Request-Id
X-Server-Powered-By
X-Robots-Tag
X-Page-Speed
X-Pingback
EagleId
X-Proxy-Cache
X-Ws-Request-Id
X-Nginx-Cache-Status
X-UA-Device
X-Hacker
Request-Context
X-Varnish-Cache
Feature-Policy
Server-Timing
Grace
Cf-Railgun
X-Swift-SaveTime
X-Swift-CacheTime
X-Amz-Version-Id
Ali-Swift-Global-Savetime
X-Dns-Prefetch-Control
X-LiteSpeed-Cache
Report-To
X-Rq
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Server-Id
X-WebKit-CSP
X-Host
X-Device
EagleEye-TraceId
X-OneAgent-JS-Injection
X-Origin-Cache
X-Response-Time
Content-Location
X-Ac
X-Node
Surrogate-Control
X-Vhost
X-Readtime
Request-Id
X-Cloud-Trace-Context
X-Backend-Server
X-Dispatcher
X-Origin-Upstream-Status
X-Cnection
X-HW
X-ORACLE-DMS-ECID
X-Application-Context
X-DataDome
Fusion-Template-Id
Fusion-Source
Fusion-Content-Source
Fusion-Content-Id
Fusion-Component-Id
X-ORACLE-DMS-RID
X-Cache-Lookup
NEL
X-Mod-Pagespeed
Rating
Edge-Control
X-Rack-Cache
X-Country
X-Akam-SW-Version
X-Clacks-Overhead
Pinterest-Generated-By
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Ruxit-JS-Agent
X-DynaTrace
X-Country-Code
Allow
X-Instart-Request-ID
Accept-Ch
X-Varnish-TTL
X-Goog-Hash
X-Vname
X-TtlSet
X-PC
X-FTR-Request-ID
X-TTL
X-ESI
Verso
Accept-Ch-Lifetime
X-Powered-By-Plesk
Service-Worker-Allowed
X-Url
Content-MD5
X-B3-TraceId
X-Forwarded-Proto
X-Version
X-MS-InvokeApp
X-GitHub-Request-Id
X-Kinja-Revision
X-Kinja-Server
X-Use-Magma
X-Kinja-Build
X-Cdn-Fetch
X-Exp-Id
X-Exp-Variant
X-GoogleNews-Bot
X-Kinja
Edge-Cache-Tag
AR-ATIME
Ar-Sid
AR-CACHE
AR-PoweredBy
RTSS
AR-Request-ID
X-Px
X-D2id
X-Debug
X-Abt-Application-Version
X-Server-Name
Charset
SPRequestGuid
X-NF-Request-ID
X-Amz-Server-Side-Encryption
X-Vcache
X-Accel-Expires
X-MSEdge-Ref
X-Cached
X-Powered-CMS
X-Amz-Rid
X-Sol
Arr-Disable-Session-Affinity
X-Middleton-Display
Pagespeed
Response
X-Middleton-Response
Display
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-TEC-API-VERSION
X-Vcap-Request-Id
X-Fastcgi-Cache
X-Navigation-Version
Pinterest-Version
X-Pinterest-Rid
X-SharePointHealthScore
X-SRCache-Store-Status
X-SRCache-Fetch-Status
TCN
X-Trace
X-Cdn
X-VARITI-CCR
Realpath
Public-Key-Pins
X-Client-IP
Cache-Tag
Access-Control-Request-Method
X-Ser
X-Fastly-Request-ID
S
MS-Author-Via
X-DynaTrace-JS-Agent
X-Upstream
X-Shard
X-Id
SPRequestDuration
SPIisLatency
Nginx-Cache
X-Ezoic-Cdn
X-Hp-Webp
Mrf-Cache-Status
X-Mrf-Section-Lastmod
X-Mrf-Item-Lastmod
MRF-Tech
X-B3-TraceId-Primal
X-Content-Type
X-Forwarded-For
X-T
X-Amz-Meta-S3cmd-Attrs
X-Amzn-Trace-Id
DynaTrace
X-Grace
Nel
X-Recruiting
Front-End-Https
X-Hits
Fastcgi-Cache
X-Aspnet-Version
X-Varnish-Age
ServerID
X-Server-ID
X-Edge-O15-RID
X-DIS-Request-ID
MicrosoftSharePointTeamServices
X-Dw-Request-Base-Id
X-Mobile-URL
X-Node-Name
X-Element-Page-Cache
NR-ENABLED
X-Content-Digest
X-HS-Content-Id
X-HS-Hub-Id
X-HS-Cache-Config
X-HS-Combine-CSS
X-Country-Code-Real
X-FTR-Expires
X-FTR-Cache-Status
X-Frontend
Powered
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
X-GUploader-UploadID
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Goog-Generation
X-Cache-TTL
Server-Name
Alternate-Protocol
X-FTR-Backend-Server
X-FTR-Backend
X-FTR-Realm
X-FTR-Balancer
X-FTR-DC
TP-Cache
Server-Node
TP-L2-Cache
X-Logged-In
X-Jurisdiction
X-Correlation-Id
X-Webkit-Csp
X-Request-Received
X-Request-Processing-Time
X-Microsite
X-Request-Handler-Origin-Region
AMP-Access-Control-Allow-Source-Origin
X-ATS-Timestamp
Backend-Timing
Upgrade-Insecure-Requests
X-XRDS-LOCATION
X-Page-Id
X-Content-Options
X-Cache-Hit
X-Origin-Server
Refresh
X-Content-Security-Policy-Report-Only
X-Rid
X-Amz-Apigw-Id
X-Revision
X-Akamai-Edgescape
X-User-Agent
X-F-Cache
X-Amzn-RequestId
X-Varnish-Grace
X-Type
X-Shield-Request-Id
X-XRDS-Location
X-Webapp-Samesite-None-Activated-N
Fastly-Restarts
X-Zen-Fury
X-Content-Powered-By
X-Geo-Country
X-LB-Cache
X-B3-Sampled
X-URL
X-Activity-Id
X-AppVersion
X-Az
X-B
X-N
X-Pad
X-CST
X-Analytics
X-FTR-Cache-Host
X-Kinsta-Cache
PB-RID
PB-PID
X-Ruxit-Js-Agent
Arc-Version
X-RateLimit-Remaining
X-Mobile-Rewrite
Cache-Status
X-TT
X-Cache-Age
X-Debug-Info
X-Instance
X-AOL-HN
X-WebKit-CSP-Report-Only
X-Framework
X-Time
X-Jobs
X-Request-Guid
X-Tumblr-Pixel
X-B-Cache
X-App-Environment
DC
Actual-Object-TTL
X-Tumblr-User
Paypal-Debug-Id
X-Tumblr-Pixel-0
X-Signature
Access-Control-Allow-Method
X-FB-Debug
X-PHP-Backend
X-Cache-Action
X-Load-Cache
X-Git-Hash
Surrogate-Key
X-Varnish-Backend
X-Erf-Bev-Bev
X-Ttl
X-Erf-Bev-Bev-Is-Generated
X-Cached-By
Fastcgi-Useragent
X-Tt-Trace-Tag
Host-Header
X-Amz-Replication-Status
X-IPLB-Instance
X-Contextid
MS-CV
X-Tt-Trace-Host
FilterID
X-SS-Set-Cookie
X-Cluster
X-ATG-Version
X-Cache-Key
Tracecode
X-WA-Info
X-Accel-Buffering
NGB
X-Response-Served-From
X-Srv
Frame-Options
WPE-Backend
X-Varnish-Server
X-Cache-NE
Payment
X-FW-Static
X-FW-Server
Eomportal-Instance
X-FW-Serve
Xserver
X-Region
X-FW-Type
X-FW-Hash
X-Mobile
X-Host-Name
X-Cache-2
Filters
Host
X-Cache-Enabled
X-Cacheable-TTL
Source
X-GeoIP
X-Adobe-Loc
X-IPS-LoggedIn
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
Cache-Tv-Group
X-Adobe-Content
X-Is-Bot
X-Tumblr-Pixel-1
X-Tumblr-Pixel-2
X-Varnish-Hostname
X-Cache-Rule
X-Rendered-As
X-Cache-Operation
X-TX-ID
X-Oneagent-Js-Injection
X-NewRelic-App-Data
X-RequestSource
X-EdgeConnect-Cache-Status
Cleartype
X-Hostname
X-Origin-Response-Time
X-Via-JSL
X-Presslabs-Stats
X-Seen-By
X-ORACLE-APMCS-TAG
X-ORACLE-APMCS-REQUEST-ID
X-FastCGI-Cache
X-Cache-TTL-Remaining
Cache
X-VCache
Accept-CH
Retry-After
Server-Info
X-HTML-Minification-Powered-By
X-Cache-Control
X-B3-Traceid
Healthy
X-ProcessESI
X-RemovedCookies
Datacenter
X-UA
X-Dc
Ms-Operation-Id
X-RTag
X-NWS-LOG-UUID
Liferay-Portal
X-Source
X-RateLimit-Limit
From-Origin
X-Environment-Context
X-L-Path
X-Cache-Server
X-FireWall-Port
X-Rule
X-Trafficlayer-App-Name
X-Trafficlayer-App-Scope
X-Endurance-Cache-Level
X-Upgrade-Enabled
X-CACHE-KEY
X-PressLabs-Stats
Accept-CH-Lifetime
Version
X-Status
X-Wix-Request-Id
X-Handled-By
X-App-Server
X-Cache-Var-Map
X-Cache-Var
Meta-Geo
X-ES-SERVER
X-RN-RSRV
X-Path-Route
X-Request-Time
X-APP-VERSION
X-Timing-Wait
X-Access
Selected-Fe
X-Tb
X-Section
X-Format
X-Backend-Name
X-Proxy-Build
OT-Force-Account-Verify
X-Sorting-Hat-PodId
Mn-Server-Ip
X-Shopify-Generated-Cart-Token
X-ShopId
X-Shopify-Stage
X-BYPASS-REASON
X-EIG-Tracking-Id
X-Storage
X-PCL
X-Origin
Akamai-GRN
X-OCL
X-Content-Age
X-ShardId
X-Akamai-Request-ID
Azure-SlotName
Azure-Version
X-Human
X-Goog-Meta-Goog-Reserved-File-Mtime
Azure-SiteName
Azure-InstanceId
Azure-RegionName
Cache-Tags
X-Proto
X-ProxyCache-Key
X-Alternate-Cache-Key
X-Sorting-Hat-ShopId
X-ProxyCache-Status
NGX
Now
Node
X-Web-Node
X-Qloud-Router
DB-Nickname
X-Redis-Cache
X-Pubstack
Decoy-Debug-Key
Origin-Cache-Control
X-Proxy-Cache-Status
Decoy-Debug-Status
Ec-Rule-Version
X-AWS-Id
X-VWS-Id
X-JoinUs
X-Viewer-Country
X-LJ-Flow-ID
X-Vgn-Hpd-Reason
X-Hyper-Cache
X-Hosted-By
X-Cluster-Node
X-FC-Vary-Parameters
X-FW-Dynamic
X-Generated-By
X-Hl-Ver
X-UUID
X-Cache-Host
X-SaId
X-Debug-Cache
X-Akamai-Request-ID2
S-Rt
Origin-Edge-Control
X-ServerID
X-Cache-Config
X-Time-Microsecs
X-MP-GENERATED-AT
X-Soup
X-NYM-Debug-Backend
X-Proxy
Decoy-Debug-TTL
X-Yottaa-Metrics
X-Yottaa-Optimizations
TWC-Connection-Speed
TWC-Device-Class
TWC-GeoIP-Country
X-Detected-As
Property-Id
X-IP
X-Generated
TWC-GeoIP-LatLong
TWC-Locale-Group
X-CCM
X-BCube-Filmed-By
Webcakes-Region
Webcakes-App-Version
TWC-Privacy
Webcakes-App-Name
X-Locale
X-Site-Version
Cross-Origin-Window-Policy
X-RCS-CacheZone
X-Say-TTL
X-SayCDN-TTL
X-Www-Served-By
X-Say-Cacheable
X-Origin-Hint
X-Varnish-Hits
X-Xfnlog-Site
L5d-Success-Class
X-R9-Blue-Green-Version
GEO-INFO
X-FB-TRIP-ID
X-Amzn-Remapped-Content-Length
X-Loop
X-TNCMS
Srv
X-CS
X-Akamai-Transformed
Cache-Name
Accept-Charset
Viewport
Uber-Trace-Id
X-NCache
X-Esi
X-Drupal-Cache-Tags
Webserver
X-Unique-Id
Time
X-UA-Device-Type
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
Cache-Key
X-From
X-Cache-Remote
Mime-Version
X-Drupal-Cache-Contexts
X-TT-TIMESTAMP
X-Origin-TTL
X-Origin-CC
X-Cluster-Name
X-Edge-Location
Accept-Language
Country
X-Backend-TTL
Odigeo-Trace-Id
X-Mode
X-CDN-Forward
X-Forwarded-Host
Rt-Fastcgi-Cache
X-Microcachable
X-EC-Lua
X-Info
X-UnsetCookies
X-CLOUD-TRACE-CONTEXT
X-B3-Spanid
X-Geo
X-Whom
X-Varnish-Cache-Hits
X-Newrelic-Synthetics
X-ApacheServer
X-PERF
X-Magnolia-Registration
X-No-Session
Proxy-Connection
Ohc-Cache-HIT
ServedBy
Content-Disposition
Ohc-File-Size
X-UPSTREAM-Address
X-NGENIX-Cache
X-Proxied
Cf-Ipcountry
X-Labrador-Cache-Channel
X-PHP-Host
X-Zipkin-Id
X-Routing-Service
X-Device-Type
W
GEO-REGION-INFO
X-D
X-ARC
X-Application
X-B-Cookie
X-Date
Rendered-Blocks
X-Connection-Hash
Fastcgi-X-Cache-Version
X-Destination
Content-Script-Type
Apple-News-Services-Parsed-Url
Apple-News-Services-Request-Url
AsisCache
X-Via-Fastly
X-G
Apple-News-Services-Handled
Apple-News-Services-Host
X-External-Request-Id
X-CF-Lambda-Version
Machine
MD5-Digest
Meta-Geo-Continent
Mobile-Detection-Method
X-DPWN-IS-SECURE
BehaviorPad-Version
X-Geo-Header
X-CF-Lambda-Fn
X-GeoIP-Country-Code
Content-Style-Type
X-Rojux
X-Sigma
X-A-Ccd
Viewtype
X-Vdms-Version
X-Session-Fingerprint
T-Server
X-A-Dgt
X-ScT
X-A-Wwc
X-Sigma-Backend
X-VG-WebServer
X-VG-WebCache
X-VG-TLSProxy
X-Vtex-Processado-Em
X-Aed
X-Accel-Expires-Debug
X-SRCache-Key
X-Vtex-Remote-Cache
X-Real-IP
X-S-Cookie
X-A
X-Request-UUID
X-S
X-A-Dcw
X-Transaction
X-Region-Sid
X-Twitter-Response-Tags
X-Rewrite-Enabled
VivaBuild
X-A-Dam
Xc-Version
X-Trv-Group
X-Rocket-Build-Number
X-C
X-TA-CDN-Provider
X-Uri
X-Nc
X-Cache-Time
User-Cache-Control
X-VC-Cache
X-CGP
X-Varnish-Authentication
X-Distil-CS
Fastly-Soc-X-Request-Id
HA-Ipaddr
Ha-Gx-Prefs
X-Wikidot-Backend
X-CUA
X-Wikidot-Static-Cache
X-Contensis-Viewer-Groups
Environment
CDCHOST
X-Epic-Correlation-Id
IsBot
X-Developers
X-WebServer
Fastly-SSL
X-Eu-Site
X-TrackingId
X-SIPLIST1
Locid
X-Sucuri-Cache
X-Cache-Debug
X-Render-Time
X-Cache-ASPX
Powered-By
Gh-Request-Id
Server-Surrogate-Control
X-Bip
X-Logging-Id
X-Backend-State
X-Auto-Login
X-Agile-Id
X-Hit
Server-Cache-Control
X-App-Name
X-Tumblr-Pixel-3
X-Thanos
X-Agile-Age
X-Agile
X-App-Version
Access-Control-Request-Headers
HitType
X-GoCache-CacheStatus
Geo-Info
We-Hiring
X-Core-Mission
X-Cache-Backend
X-Clientip
X-Clara-WADP
X-AK-Request-ID
X-Cdn-Srv
X-Cache-URL
X-Cache-Info
X-Block-Status
X-Cms-Context
X-Cache-Bucket
Web-Mar-Node
X-BBXSRF
X-NodeID
X-RateLimit-Limit-Second
X-Proxy-Upstream
X-RateLimit-Remaining-Second
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Owner
X-OVcl-Cache
X-NX-Host
X-Nginx-Cache-Key
X-Origin-Date
X-Origin-Expires
X-OVcl
X-Request-URI
X-SVT-ORM-RULES
X-VServer
X-User
X-WADP-Cache
X-We-Are-Hiring
X-Webstats-RespID
X-Urbn-Site-Id
X-Urbn-Context-Path
X-Swa-Ws
X-SVT-ORM-VERSION
X-TH-Server
X-Trace-Id
X-TT-LOGID
X-Ms-Version
X-Ms-Request-Id
X-Gamma-Serve
X-FW-Version
X-Gen-Mode
X-Generated-In
X-Generation-Time
X-Fastly-Cache
X-Distributor
X-Debug-Cache-Store
X-Debug-Cache-Fetch
X-Debug-Cookies
X-Debug-Log
X-Dispatcher-Server
X-GeoIP-City
X-Hash
X-LI-Proto
X-Li-Pop
X-LI-UUID
X-Location
X-Micro-Cache
X-Li-Fabric
X-Key
X-IN-APIGATEWAY
X-Hnp-Log
X-IN-APIGATEWAYSSL
X-Instart-Isnd
X-Irp-Debug
X-Debug-Cache-Expiry
X-Azure-Ref
X-Varnish-Beresp-Ttl
Memcached
Mail-Subject
Locale
AKAMAI
X-Varnish-Beresp-Grace
RNT-Machine
Request-EU
Request-Country
Kp-EeAlive
IBM-Web2-Location
Country-Code
Cdnsip
Cdncip
Cache-Host
Countrycode
Fastly-Backend-Name
Heartbleed
Fastly-SWR
Fastly-SIE
RNT-Time
X-Varnish-Beresp-Status
X-Daa-Tunnel
Server-ID
True-Client-Country-4JS
Section-Io-Cache
Server-Int
V-Age
X-Has-Esi
Thinkindot-CacheControl
X-Core-Value
Thinkindot-Control
ServerName
Thinkindot-CacheControl-Type
Is-Eu
X-Platform-Server
Wxu-Next-Commit
X-Variation
Adler-Geo
Wxu-Next-Hostname
Wxu-Next-Region
X-Req
X-Generated-On
X-Reboot
FNAC-ModuleRouting
X-Internal-Host
X-Server-W
Platform
X-NU-AKA-ACS-Version
PFcat
X-Trafficlayer-App-Version
X-Matched-Rule
X-Service
X-Fetched-On
X-Thinkindot-L3
X-ServiceProvider
X-Nginx-Cache
X-Up
X-Is-Gdpr
X-Old-Content-Length
Server-Host
X-JWT-State
X-Cache-Tags
X-Level-Front-Cache
X-B3-Parentspanid
X-Servername
X-Response-By
X-SERVER
X-Lb-Id
Cache-Hits
X-Refresh
X-S-Maxage
RequestId
X-B3-SpanId
X-Tb-Optimization-Total-Bytes-Saved
Filterid
X-CF-Powered-By
X-Cdn-Forward
X-Server-IP
ProcessTime
X-Tec-Api-Origin
X-Tec-Api-Version
X-Tec-Api-Root
X-Parent-Response-Time
X-Air-Hostname
X-CSRF-TOKEN
X-Var-Ttl
Group
X-BACKEND-TTL
X-Pjax-Url
X-Cache-Expired-At
Pragrma
Memory
X-CSRF-Token
X-NC
Media-Length
X-Wa
User-Agent
Origin
X-Cdn-Request-ID
X-Pf-Uncompressing
TTL
Powered-By-ChinaCache
S-Cnection
Geoip-Latitude
X-Ua
SRV
X-Unique-ID
X-Correlation-ID
X-Sucuri-Id
X-Vcl-Version
GeoIp-Country-Code
X-Sucuri-ID
X-NGINX-Cache
X-COUNTRY
PICS-Label
Esi-Enabled
SN
X-Reqid
X-AIR-PT
Geoip-City
X-Rocket-Nginx-Bypass
X-Varnish-Cacheable
X-Policy
X-Servedbyhost
X-Planisys-CDN-Rules
X-Via-CDN
X-Litespeed-Cache
X-Planisys-CDN-TTL
X-Webkit-CSP
X-Planisys-CDN-Cache
X-NWS-UUID-VERIFY
X-Request-Start
X-Via-Ucdn
M-TraceId
X-Developer
X-Azure-Ref-OriginShield
X-HS-Status
Dnion-Transfer-Encoding
X-Varnish-Ttl
HostName
XServer
X-TIME
X-Cache-Grace
X-Cdn-Origin
Rt-Proxy-Cache
X-Sn-Servicetimems
X-Ocache
X-Node-Id
X-LAGOON
X-Device-Os
X-FORWARDED-FOR
On-Server
X-Fastly-Country-Code
Tcn
X-Request-Host
Cdn
X-MSEdge-Flight
X-MSEdge-Features
A
Who
X-Cache-Ttl
X-ServedByHost
Resin-Trace
X-Method
Magicmarker
X-Ftr-Cache-Host
X-VHOST
CF-Cached-On
Cloudfront-Viewer-Country
Load-Balancing
X-Cache-Status-Check
X-Beluga-Record
X-APP
X-Beluga-Trace
Hostname
Pics-Label
X-Beluga-Node
X-Beluga-Cache-Status
X-Beluga-Response-Time
X-Beluga-Status
X-Oss-Server-Time
X-Oss-Storage-Class
X-Oss-Object-Type
X-Oss-Request-Id
X-Oss-Hash-Crc64ecma
X-Zone
GeoIP-Country-Code
DSUID
X-VCL-Version
X-Bc
X-Svr
X-Be
Ohc-Response-Time
NtCoent-Length
MIME-Version
X-MServer
Release
X-Oracle-Dms-Rid
X-VCT
X-Fastly-Backend-Reqs
Host-ID
X-Varnish-Url
X-Varnish-URL
Cteonnt-Length
GeoIP-Latitude
Ttl
X-VarnishDD-TTL
Vix-Hermes-Req-Id
X-Ratelimit-Remaining
X-Hp-Ccpa-Warning
X-DC
X-LiteSpeed-Cache-Control
X-Newrelic-App-Data
GeoIP-City
X-PF-Uncompressing
X-Ftr-Request-Id
WebServer
X-Slack-Backend
Amp-Access-Control-Allow-Source-Origin
X-PJAX-URL
X-SRV
X-Configured-By
X-HostName
X-Swift-Error
X-Action
X-DB
X-Upstream-Ht
X-Upstream-Ct
Processtime
X-SD-PageType
X-Tid
X-RPS
X-DI
X-Aicache-OS
X-RSL
X-RPM
SD-X-WS
X-Dynatrace
X-DSS
X-DW
X-BE
X-Ratelimit-Limit
X-Dynatrace-Js-Agent
X-WR-MODIFICATION
Servername
X-Processor
X-FPC
L
X-Server-Time
X-Cache-Id
X-PAYTM-SRV-ID
X-Dispatch
Cache-Provider
Arc-Country
Pramga
X-Cache-FS-Status
X-Skip-Cache
X-Compress-Hint
X-ID
X-SN
CACHE
X-Frame-Option
X-ABtesting
X-StackifyID
X-Ftr-Dc
X-Ftr-Balancer
X-Ftr-Realm
X-ND-Cache
Fastly-Drupal-HTML
X-Release
CF-IPCountry
X-Via-NSCOPI
Pagetype
X-Fastly-Cache-Hits
X-ServerName
Lfy
Dynatrace
X-DevSite-Last-Modified
Requestid
X-Branch-Name
X-Ftr-Backend
CDN
X-Ftr-Backend-Server
X-Hello
X-Snapshot-Date
X-Flog
X-LB-ID
X-CACHE-AGE
Proxy-Firewall
X-WA
X-ZONE
X-Request-Url
X-Cc-Via
Cdn-Host
X-Varnish-Beresp-TTL
X-Edge-IP
LB
X-Cc-Req-Id
D-Cc-Upstream
X-Apw-Access-Object
X-Apw-Access-Action
V-Cache
N-Cache
X-Apw-Hits
X-Apw-Access-Token
X-Edge-Server
X-Scheme
Warning
X-Served-From
X-SB
Cdn-Request-Time
X-VC
X-Bc-Bl
X-Amzn-Remapped-Connection
X-Amzn-Remapped-Date
WP-Super-Cache
X-App
X-BC
Cache-Cookie-Set-From
Correlation-Id
Backend-Name
X-Node-ID
Lb
Cache-Cookie-Set-Idcheck
Cache-Cookie-Set-Lfrom
X-Request-URL
X-Check-Cacheable
X-Powered-Y
UCS
X-Worker
X-ElasticPress-Search
X-Fastly-Cache-Status