Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Cf-Request-Id
CF-RAY
CF-Cache-Status
Accept-Ranges
Link
Pragma
ETag
Expect-CT
X-Powered-By
X-XSS-Protection
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
Alt-Svc
X-UA-Compatible
X-Served-By
X-Xss-Protection
X-Timer
X-Download-Options
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Adblock-Key
X-Runtime
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-Request-ID
X-Drupal-Cache
X-Check
X-Cache-Status
X-Generator
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
P3p
X-Content-Security-Policy
X-Iinfo
X-FRAME-OPTIONS
Status
Content-Encoding
Feature-Policy
X-AspNetMvc-Version
X-CDN
X-Envoy-Upstream-Service-Time
Upgrade
Access-Control-Expose-Headers
X-Ua-Compatible
X-Drupal-Dynamic-Cache
Access-Control-Max-Age
X-Via
Keep-Alive
X-Ws-Request-Id
Request-Context
X-Robots-Tag
Server-Timing
X-AH-Environment
X-Server
X-Hacker
X-Age
X-Turbo-Charged-By
X-Dns-Prefetch-Control
X-Proxy-Cache
X-Server-Powered-By
X-Cache-Group
X-Backend
X-Amz-Request-Id
Host-Header
EagleId
X-Nginx-Cache-Status
X-Amz-Id-2
Report-To
X-LiteSpeed-Cache
X-Rq
X-Varnish-Cache
X-UA-Device
X-Page-Speed
Grace
X-Pingback
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-Device
EagleEye-TraceId
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Vhost
NEL
X-OneAgent-JS-Injection
X-Amz-Version-Id
Cf-Railgun
X-Dispatcher
X-Host
X-CST
X-Cache-Spec
X-Server-Id
X-Node
Allow
X-Backend-Server
Surrogate-Control
Request-Id
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Readtime
X-Webkit-CSP
X-WebKit-CSP
X-Akam-SW-Version
X-Response-Time
Accept-CH
Xkey
X-HW
Accept-Ch-Lifetime
X-Country
X-Language
X-Application-Context
X-Ruxit-JS-Agent
Content-Location
X-Ac
X-Template
MS-Author-Via
X-Cloud-Trace-Context
Rating
X-Cache-Lookup
X-Url
X-Mod-Pagespeed
X-B3-TraceId
Edge-Control
X-Vname
X-PC
X-TtlSet
X-Clacks-Overhead
X-ESI
X-MS-InvokeApp
X-Trace
Accept-Ch
X-Content-Type
X-GitHub-Request-Id
Fastly-Restarts
X-Varnish-TTL
X-Rack-Cache
X-Origin-Cache
X-Cnection
Accept-CH-Lifetime
X-ASPNET-VERSION
X-FastCGI-Cache
X-Cdn-Fetch
X-Exp-Variant
X-Exp-Id
X-Kinja
X-Use-Magma
X-Kinja-Server
X-Kinja-Build
X-GoogleNews-Bot
X-Kinja-Revision
X-Country-Code
X-Goog-Hash
X-D2id
X-VARITI-CCR
Arr-Disable-Session-Affinity
Verso
X-Buckets
X-Server-ID
X-Server-Name
X-Cached
X-Vcap-Request-Id
Cache-Tag
X-ORACLE-DMS-ECID
X-Abt-Application-Version
X-Navigation-Version
X-Amz-Rid
X-Client-IP
Service-Worker-Allowed
X-Powered-By-Plesk
RTSS
X-Fastly-Request-ID
Access-Control-Request-Method
X-MSEdge-Ref
X-Powered-CMS
Public-Key-Pins
X-Element-Page-Cache
X-Px
X-SRCache-Store-Status
X-SRCache-Fetch-Status
Response
X-Middleton-Display
X-Sol
Pagespeed
X-Middleton-Response
Display
X-Dw-Request-Base-Id
X-NF-Request-ID
X-Cache-TTL
X-Version
X-Upstream
X-Ttl
S
X-Edge
X-Edge-Location-Klb
X-Kinsta-Cache
X-LLID
X-TTL
Realpath
X-B3-TraceId-Primal
MRF-Tech
Mrf-Cache-Status
X-Accel-Expires
SPRequestDuration
SPIisLatency
X-SharePointHealthScore
SPRequestGuid
X-Kraken-Loop-Name
X-HP-Webp
X-Instrumentation
X-Server-Lifecycle-Phase
X-Jurisdiction
X-Kraken-Routeconfig-Destination
X-ECACHE
X-T
X-Mid
X-MCACHE
X-Shield-Request-Id
X-Content-Security-Policy-Report-Only
X-PressLabs-Stats
Pinterest-Version
Pinterest-Generated-By
X-Pinterest-Rid
X-Cache-Key
X-Correlation-Id
X-Forwarded-Proto
Edge-Cache-Tag
X-ORACLE-DMS-RID
Fastcgi-Cache
X-DynaTrace
X-Amz-Server-Side-Encryption
X-Mg-S
X-Recruiting
Charset
TP-L2-Cache
TP-Cache
X-XRDS-Location
X-Content-Digest
Nginx-Cache
X-Id
Filters
TCN
X-Request-Processing-Time
X-Request-Received
Front-End-Https
X-Oneagent-Js-Injection
X-Logged-In
Alternate-Protocol
Server-Node
X-Ezoic-Cdn
X-Forwarded-For
X-Ruxit-Js-Agent
Content-MD5
Cache-Tags
X-Release
X-Geo-Country
Fusion-Content-Source
Fusion-Deployment-Id
Fusion-Content-Id
Fusion-Component-Id
Fusion-Source
Fusion-Template-Id
X-Origin-Upstream-Status
X-Protected-By
X-Litespeed-Cache
X-Hostname
X-Amzn-Trace-Id
X-Grace
X-Origin-Server
X-Www-Served-By
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Storage-Class
X-F-Cache
Cleartype
X-Rid
X-Amz-Replication-Status
X-Contextid
X-HS-Cache-Config
X-HS-Content-Id
Host
X-HS-Hub-Id
X-Activity-Id
X-AppVersion
X-HS-Combine-CSS
X-RateLimit-Remaining
X-Az
X-Debug-Info
Server-Name
X-LB-Cache
X-NWS-LOG-UUID
Section-Io-Cache
MicrosoftSharePointTeamServices
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-Browser-Type
X-Frontend
X-Git-Hash
X-Page-Id
X-Cache-Age
X-Ser
X-Respond-Thread
X-WebKit-CSP-Report-Only
X-Daa-Tunnel
X-Aspnetmvc-Version
Accept-Charset
X-Content-Options
X-Upgrade-Enabled
Access-Control-Allow-Method
X-VCache
X-Hits
X-Mobile-URL
X-Source
X-DIS-Request-ID
X-Signature
X-Varnish-Grace
Paypal-Debug-Id
X-Varnish-Age
X-B-Cache
X-Varnish-Backend
X-Providence-Cookie
X-Request-Guid
X-Route-Name
X-Is-Crawler
X-Flags
Payment
X-Aspnet-Duration-Ms
X-Whom
X-TT
X-FB-Debug
X-Cache-Action
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
ServerID
Viewport
Healthy
X-B3-Sampled
X-AOL-HN
Node
X-CACHE-GROUP
X-App-Environment
X-Tec-Api-Root
X-Tec-Api-Version
X-Tec-Api-Origin
Version
X-N
X-Seen-By
DynaTrace
X-Mobile
X-Load-Cache
Fastcgi-Useragent
X-Ab
DC
AR-ATIME
AR-CACHE
AR-Request-ID
AR-PoweredBy
Ar-Sid
X-Type
X-Yandex-Sdch-Disable
X-HTML-Minification-Powered-By
X-Distributor
X-Tt-Trace-Tag
MS-CV
X-XRDS-LOCATION
X-Tt-Trace-Host
X-Cache-Control
Retry-After
Filterid
Frame-Options
X-Fastcgi-Cache
X-Cache-Expired-At
X-User-Agent
SRV
X-Microsite
X-Request-Handler-Origin-Region
X-Jobs
X-Original-Request-Id
X-Response-Served-From
X-IPLB-Instance
X-Proxy-Cache-Status
Refresh
X-Adobe-Content
X-Real-IP
X-Adobe-Loc
X-UUID
X-Debug-IsConnected
Access-Control-Request-Headers
X-Debug-IsPreview
X-Cacheable-TTL
X-IPS-LoggedIn
X-Device-Type
X-Cluster-Name
X-Tumblr-Pixel-0
X-Tumblr-Pixel-1
X-Tumblr-User
X-Tumblr-Pixel
X-B
X-Cache-Time
X-Page-View
X-Varnish-Server
X-Region
X-ProcessESI
X-G
X-Instance
X-RemovedCookies
NGB
X-Framework
X-Content-Powered-By
X-RTag
Uber-Trace-Id
Ms-Operation-Id
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-Proxy
X-Vgn-Hpd-Reason
X-FW-Type
X-FW-Server
X-FW-Hash
X-FW-Serve
X-FW-Static
X-FW-Dynamic
X-NGENIX-Cache
X-Zen-Fury
Countrycode
X-Time
X-Debug
X-Azure-Ref
X-App-Version
X-RateLimit-Limit
X-Wix-Request-Id
X-Mg-Request-UUID
X-CDN-Forward
Cache-Status
Section-Io-Id
Section-Io-Origin-Status
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
X-Accel-Buffering
Cache
X-Cache-Rule
X-Node-Name
X-Nginx-Cache
X-Is-Bot
X-FireWall-Port
Amp-Access-Control-Allow-Source-Origin
X-Rendered-As
X-Ms-Version
X-Cache-Hit
X-Ms-Request-Id
X-Oracle-Dms-Rid
X-Drupal-Cache-Tags
SD-X-WS
Liferay-Portal
Referer-Policy
Surrogate-Key
X-EdgeConnect-Cache-Status
S-Cnection
Country
X-App-Server
X-Environment-Context
X-L-Path
X-Cache-Operation
X-Aws-Lambda-Call-Status
X-Yottaa-Optimizations
X-Yottaa-Metrics
Eomportal-Instance
X-TA-CDN-Provider
X-Revision
X-UPSTREAM-Address
Selected-Fe
X-SaId
Meta-Geo
CF-IPCountry
X-TNCMS
X-Loop
X-ES-SERVER
From-Origin
X-RN-RSRV
X-Timing-Wait
X-Endurance-Cache-Level
X-Proxy-Build
X-JoinUs
X-Drupal-Cache-Contexts
X-GG-Cache-Date
X-Storefront-Renderer-Rendered
X-Varnish-Beresp-Grace
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-ShopId
X-Alternate-Cache-Key
X-Request-Time
X-Adobe-Source
X-Varnishpool
X-ShardId
X-Shopify-Stage
X-Cache-TTL-Remaining
X-AWS-Id
X-Backend-Host
X-Be
X-BYPASS-REASON
X-Cache-Type
X-SayCDN-TTL
X-ProxyCache-Key
X-Varnish-Hostname
X-Human
X-PHP-Backend
X-Origin-Date
X-LJ-Flow-ID
X-No-Session
Cache-Name
X-R9-Blue-Green-Version
X-ProxyCache-Status
X-Handled-By
X-Xfnlog-Site
X-VWS-Id
X-S-Maxage
Protected
X-Say-TTL
X-Say-Cacheable
Azure-SiteName
Azure-SlotName
Azure-RegionName
Country-Code
ServedBy
Azure-InstanceId
Cache-Tv-Group
X-FB-TRIP-ID
X-Pubstack
X-PCL
X-Cache-Server
X-Proto
Azure-Version
X-Server-W
X-UA-Device-Type
X-LAGOON
X-Parallel-Accel
X-NYM-Debug-Backend
X-Akamai-Edgescape
X-OCL
Fastly-SSL
X-RCS-CacheZone
X-Hl-Ver
X-Labrador-Cache-Channel
X-Origin-Hint
X-PHP-Host
X-Sql-Count
Webcakes-App-Version
TWC-GeoIP-Country
Webcakes-App-Name
TWC-Privacy
TWC-GeoIP-LatLong
X-Tumblr-Pixel-2
X-Backend-Name
TWC-Locale-Group
X-Sql-Duration-Ms
X-Via-Fastly
TWC-Connection-Speed
TWC-Device-Class
Property-Id
Webcakes-Region
Apigw-Requestid
X-Uri
X-Access
Mn-Server-Ip
X-Status
X-Section
X-Format
X-HP-Trace-Id
X-Hosted-By
X-Web-Node
Decoy-Debug-TTL
Decoy-Debug-Key
Akamai-GRN
Decoy-Debug-Status
X-Hyper-Cache
X-Redis-Cache
X-Cache-PHP
X-ApacheServer
Xserver
Count-Hit
Nel
X-PERF
X-FW-Version
X-ATG-Version
GEO-INFO
X-Time-Microsecs
X-Ua-Device
X-ServerID
X-B3-SpanId
X-TT-LOGID
X-Trace-Id
OT-Force-Account-Verify
X-Rule
X-CSRF-Token
X-WA-Info
X-Cluster-Node
X-Servername
X-MP-GENERATED-AT
X-Tumblr-Pixel-3
X-Content-Age
X-Datadome
X-Azure-Ref-OriginShield
X-Detected-As
Backend
X-Akamai-Transformed
X-Cached-By
X-Soup
Cross-Origin-Opener-Policy
X-Varnish-Cache-Hits
X-Cache-Enabled
X-Cache-Host
X-Generation-Time
AMP-Access-Control-Allow-Source-Origin
Web-Mar-Node
X-Bc-Bl
X-Varnish-Hits
X-TEC-API-ROOT
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-Mode
X-Varnish-Ttl
X-Cache-Ttl
X-APP-VERSION
X-Varnish-Beresp-Status
X-Edge-Location
X-CS
X-Info
X-Microcachable
X-Dc
X-Amzn-RequestId
X-Amzn-Remapped-Content-Length
X-Amz-Apigw-Id
Ec-Rule-Version
X-Cache-NGX
X-SRV
X-Via-JSL
Content-Secure-Policy
X-Debug-Cache
X-Ua
SID
X-Routing-Service
X-Varnish-Beresp-Ttl
Cross-Origin-Window-Policy
X-Magnolia-Registration
X-Zipkin-Id
X-Cache-Grace
S-Rt
X-Proxied
X-Platform
Upgrade-Insecure-Requests
X-Origin-TTL
X-Extlb
Url
X-Air-Hostname
X-Origin-CC
X-Air-Trace-Id
X-Storage
X-Air-Source
Source
X-B3-Traceid
X-Locale
X-NWS-UUID-VERIFY
Fastly-SIE
Fastly-SWR
X-Forwarded-Path
X-Vtex-Processado-Em
X-From
X-Epic-Correlation-Id
DCR-Decision-By
X-Developer
X-Vdms-Version
X-External-Request-Id
Host-ID
X-CF-Lambda-Version
BehaviorPad-Version
X-Clientip
X-Destination
X-D
X-Forwarded-Host
X-Vtex-Remote-Cache
T-Server
CDN-RequestCountryCode
CDN-EdgeStorageId
State
CDN-Uid
X-NAPM-TraceId
Expiry
CDN-PullZone
Surrogated-Key
CDN-CachedAt
A
Fastcgi-X-Cache-Version
CDN-RequestId
DCR-Processing-Time-Ms
X-VG-WebServer
Cache-Host
CDN-Cache
X-Connection-Hash
X-VG-WebCache
X-CF-Lambda-Fn
X-Rewrite-Enabled
Meta-Geo-Continent
X-B-Cookie
Rendered-Blocks
X-SRCache-Key
X-BCube-Filmed-By
X-Request-URI
X-Rebelmouse-Surrogate-Control
X-Bip
Req-Svc-Chain
MD5-Digest
X-A-Dgt
X-Rojux
X-Aicache-OS
Odigeo-Trace-Id
X-Session-Fingerprint
X-Application
X-ARC
X-ScT
X-S
X-S-Cookie
Mobile-Detection-Method
X-A-Dcw
X-Shop-Environment
X-Rebelmouse-Cache-Control
M-TraceId
X-PAYTM-SRV-ID
X-PBS-Appsvrname
X-A-Dam
X-Cache-NE
X-Tenant
X-NU-AKA-ACS-Version
X-Thanos
X-Orig-Expires
X-A-Wwc
X-Cache-Bucket
X-Platform-Server
X-Unique-ID
Path
X-Ratelimit-Reset
X-Aed
X-A-Ccd
X-Processor
X-A
X-Tb
Server-Info
Platform
CDCHOST
Origin
PB-PID
Esi-Enabled
Fastly-Drupal-HTML
X-Branch-Name
Fastly-Backend-Name
X-Cms-Context
X-Cache-Tags
Is-Eu
PB-RID
C-Via
UCS
Cmstype
NGX
Content-Disposition
DSUID
Kp-EeAlive
X-Core-Value
Cmsid
X-JWT-State
X-Proxy-Upstream
X-Request-UUID
X-Rocket-Build-Number
X-Served-From
Arc-Version
X-Loc
X-Hash
X-Is-Gdpr
X-Level-Front-Cache
X-Service
X-Sigma
X-Variation
X-Vdms-Path
X-GoCache-CacheStatus
X-VG-TLSProxy
X-Var-Ttl
X-TrackingId
X-Sigma-Backend
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
X-Has-Esi
X-Origin-Expires
Apple-News-Services-Handled
Apple-News-Services-Host
Adler-Geo
X-Device-Os
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
X-DPWN-IS-SECURE
X-Generated-On
X-DataDome
DataCenter
User-Cache-Control
X-Site-Version
X-Accel-Expires-Debug
X-Li-Pop
X-Envoy-Decorator-Operation
X-SIPLIST1
X-Thinkindot-L3
X-Varnish-CookieHashed-On
Thinkindot-CacheControl-Type
Thinkindot-Control
X-Fastly-Backend
Thinkindot-CacheControl
X-WADP-Cache
X-DefHash
X-DefElseHash
X-Date
X-Varnish-CookieINHashed-On
X-Varnish-Remaining-TTL
X-VC-Cache
X-Li-Fabric
X-Fastly-Cache
TDXMobile
X-Clara-WADP
X-Men
X-Micro-Cache
X-Nginx-Cache-Key
X-Location
X-Cluster
X-Geo-Header
X-GeoIP
X-AIR-PT
X-Gamma-Serve
X-Ftr-Request-Id
X-VServer
X-Origin
X-Fetched-On
X-Request-Host
X-Backend-State
X-LI-UUID
X-GeoIP-City
X-Req
X-Fmm-Version
X-Forwarded-Site
X-Cache-Info
X-Owner
X-Policy
X-Scheme
X-Cache-Debug
X-Amz-Meta-S3cmd-Attrs
Cf-Device-Type
NM-Fastcgi-Cache
Pagetype
X-VHOST
Release
Pics-Label
Memcached
Location
Cache-Key
CacheControlHeader
Fastcgi-Cache-TTL
Gh-Request-Id
L
IsBot
Server-Ext
X-GEO
Who
X-EC-Lua
Sever-Int
Server-Host
Server-Hostname
Webserver
X-Eu-Site
X-Gen-Mode
X-FC-Vary-Parameters
X-Generated-By
AKAMAI
NtCoent-Length
X-Conf
Arc-Country
X-Developers
X-Generated-In
X-Esi-Check
X-Gzip
X-Ratelimit-Limit
X-User
X-Sucuri-ID
X-Slack-Backend
X-Qloud-Router
X-Skip-Cache
X-Unique-Id
X-Old-Content-Length
X-Hnp-Log
X-HN
X-Via-NSCOPI
X-Irp-Debug
X-Mvc-Supplant-Cachable
X-Goog-Meta-Goog-Reserved-File-Mtime
X-VarnishDD-TTL
Wxu-Next-Hostname
Wxu-Next-Commit
L5d-Success-Class
Wxu-Next-Region
Vix-Hermes-Req-Id
X-Cache-Id
Locid
X-CGP
We-Hiring
X-Block-Status
Mail-Subject
X-Csrf-Jwt
PFcat
Ha-Gx-Prefs
HA-Ipaddr
True-Client-Country-4JS
X-Srv
CPC-Cache
Svr
X-RateLimit-Limit-Second
X-Wikidot-Backend
X-BBC-Edge-Cache-Status
X-RateLimit-Remaining-Second
VNS-Cache
VNS-Age
CPC-Age
X-PF-Uncompressing
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
V-Age
X-Viewer-Country
X-Wikidot-Static-Cache
X-Planisys-CDN-TTL
X-Minions-Version
X-HS-Content-Campaign-Id
X-Via-Popn
X-Via-Popv
X-Ckpd-Fst-Backend
X-Via-Poph
X-Mvc-Supplant-OutputCached
X-Varnish-Url
X-DC
MIME-Version
X-Vc
X-Servedbyhost
Cache-Hits
X-Ratelimit-Remaining
X-Worker
X-CACHE-KEY
X-Auto-Login
X-NC
X-Zone
Powered-By-ChinaCache
X-V-Cache
My-App
XServer
X-TX-ID
X-Refresh
X-LB-ID
X-Internal-Host
X-ID
X-ZONE
X-Render-Time
Memory
X-PJAX-URL
X-Rocket-Nginx-Serving-Static
X-LSADC-Cache
X-Pass-Why
X-Traceid
X-Tx-Id
Time
X-Qnm-Cache
X-M-Log
X-M-Reqid
WebServer
X-SD-PageType
X-Newrelic-Synthetics
X-Platform-Processor
X-Platform-Router
X-NCache
X-Platform-Cluster
X-Wa
Server-ID
X-Cache-Remote
X-Datadog-Parent-Id
X-Webkit-CSP-Report-Only
Environment
X-App
X-TIME
X-Datadog-Trace-Id
X-Webkit-Csp
X-Datadog-Sampling-Priority
X-OVcl
X-OVcl-Cache
X-Gdpr
X-API-Version
HostName
Cf-Bgj
X-BBC-Origin-Response-Status
X-Nyt-Route
X-Dynatrace
X-Origin-Time
X-TraceId
X-Backend-TTL
X-Cache-Var
X-NodeID
Cluster
X-Cache-Config
Geo-Info
X-NewRelic-App-Data
Magicmarker
X-Via-Ucdn
X-Server-IP
X-Cache-Var-Map
X-VCL-Version
Hostname
Geoip-Latitude
Candidate-Md5Url
GeoIp-Country-Code
X-Tb-Optimization-Total-Bytes-Saved
X-CLOUD-TRACE-CONTEXT
DB-Nickname
X-Ua-Browser
X-Content
Datacenter
X-Edge-Pop
X-Dispatcher-Server
X-LI-Proto
Resin-Trace
X-Method
X-Pod-Name
X-Geo
X-Correlation-ID
X-ElasticPress-Query
N-Cache
Ohc-File-Size
Tcn
X-CACHE-AGE
Web-Mar-Region
X-IP
X-Origin-Response-Time
Ssr
X-HITS
X-Varnish-Beresp-TTL
X-Li-Proto
X-Akamai-Pragma-Client-IP
X-MSEdge-Features
X-MSEdge-Flight
Cf-Ipcountry
GeoIP-Country-Code
Onion-Location
X-NODE
GeoIP-Latitude
LB
X-AB
X-EIG-Tracking-Id
X-Node-Id
X-Varnish-Cacheable
WWW-Authenticate
X-ND-Cache
X-Trv-Group
X-Vcl-Version
Servername
X-Wix-Viewer-Type
X-HostName
Cdn
Proxy-Connection
X-Fastly-Request-Id
X-Via-CDN
X-APP
X-Nc
CF-Cached-On
X-DynaTrace-JS-Agent
X-Cs
Server-Id
CDN
WZWS-RAY
Lb
X-Dynatrace-Js-Agent
Env
Redirect-Candidate
X-Fpc
X-WA
X-Reqid
Sid
X-TIM-N
X-Tid
X-Pjax-Url
X-HS-Status
X-Fastly-Backend-Reqs
X-ServerName
X-MG-S
X-NGINX-Cache
Tracecode
X-Up
X-Request-Start
Cteonnt-Length
VivaBuild
Viewtype
X-Lb-Id
X-Check-Cacheable
Rt-Fastcgi-Cache
X-Cache-Date
Is-Us
Pramga
X-URL
Ohc-Cache-HIT
X-CSRF-TOKEN
X-Xrds-Location
X-Esi
X-Via-PopV
Mime-Version
X-Amz-Meta-Cb-Modifiedtime
X-Cdn-Origin
X-Sn-Servicetimems
X-ServedByHost
X-Via-PopN
URI
X-Cache-Backend
Machine
X-VC
X-Via-PopH
X-IN-APIGATEWAYSSL
X-IN-APIGATEWAY
X-Cdn-Forward
CountryCode
X-FTR-Request-ID
Server-Ttl
Shield-Pop
CloudFront-Viewer-Country
X-SN
X-Provided-By
X-Core-Mission
X-ECache
X-Tt-Logid
X-Webkit-Csp-Report-Only
X-Cache-ASPX
X-Varnish-Authentication
X-Contensis-Viewer-Groups
X-Fastly-Cache-Hits
X-Acquia-Application-Trace
W
X-RAMCache
X-Cdn-Request-ID
X-Acquia-Site
X-Acquia-Purge-Tags
X-Pad
X-Acquia-Application-UUID
X-Dw-Trace-Id
FSS-Cache
X-Air-Pt
X-LiteSpeed-Cache-Control
On-Server
X-FORWARDED-FOR
X-Yottaa-OS
CACHE
X-Vcache
X-UnsetCookies
X-FTR-Cache-Status
X-Oss-Hash-Crc64ecma
X-FTR-DC
X-StackifyID
X-Oss-Server-Time
X-Oss-Request-Id
Xet-Cookie
X-FTR-Balancer
X-FTR-Realm
X-SB
X-Cache-Expires
X-Webstats-RespID
WP-Super-Cache
X-Swa-Ws
X-Swift-Error
X-FTR-Backend-Server
X-Oss-Storage-Class
X-Oss-Object-Type
Ohc-Response-Time
X-Action
ServerName
X-Pf-Uncompressing
Vha6-Origin
X-FTR-Backend
X-DI
X-DB
X-Country-Code-Real
X-RSL
X-RPS
X-RPM
X-DW
X-DSS
Srv
X-Edge-POP
X-ElasticPress-Search
X-FPC
X-Sucuri-Cache
X-Region-Sid
Req-ID
X-Cache-Status-Check
X-B3-Spanid
X-Snapshot-Date
Warning
X-MiniProfiler-Ids
X-TH-Server
X-FTR-Expires
X-C
Content-Style-Type
Content-Script-Type
Xc-Version