Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Cf-Request-Id
CF-Cache-Status
Link
Accept-Ranges
CF-RAY
ETag
X-XSS-Protection
Expect-CT
Pragma
X-Powered-By
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
Alt-Svc
X-UA-Compatible
X-Served-By
X-Xss-Protection
X-Download-Options
X-Timer
X-Request-Id
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
X-Adblock-Key
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-DNS-Prefetch-Control
X-Drupal-Cache
X-Cache-Status
X-Check
X-Generator
X-Cacheable
Timing-Allow-Origin
X-Content-Security-Policy
X-Iinfo
Feature-Policy
Status
X-Envoy-Upstream-Service-Time
Content-Encoding
Access-Control-Expose-Headers
P3p
X-Drupal-Dynamic-Cache
X-CDN
X-AspNetMvc-Version
X-Request-ID
Upgrade
X-Via
CF-Ray
X-Ws-Request-Id
Access-Control-Max-Age
Server-Timing
EagleId
X-Cache-Group
Report-To
X-Turbo-Charged-By
Keep-Alive
Request-Context
X-Age
X-Backend
X-UA-Device
X-Proxy-Cache
X-Server-Powered-By
X-AH-Environment
X-Robots-Tag
X-Hacker
X-Amz-Request-Id
X-Server
Host-Header
X-Amz-Id-2
Grace
X-Rq
X-LiteSpeed-Cache
X-Swift-CacheTime
X-Swift-SaveTime
X-Varnish-Cache
X-Nginx-Cache-Status
Ali-Swift-Global-Savetime
X-WebKit-CSP
NEL
X-Page-Speed
X-Vhost
EagleEye-TraceId
X-Ua-Compatible
X-Amz-Version-Id
X-OneAgent-JS-Injection
X-Pingback
X-Dispatcher
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Device
X-Cache-Spec
Accept-CH
X-Host
X-Server-Id
X-Dns-Prefetch-Control
Cf-Railgun
X-Node
X-Backend-Server
X-Readtime
Surrogate-Control
X-Akam-SW-Version
Request-Id
X-Response-Time
X-HW
Xkey
X-Application-Context
Content-Location
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
Rating
Accept-CH-Lifetime
X-B3-TraceId
X-Cloud-Trace-Context
X-Country
X-Ruxit-JS-Agent
Accept-Ch-Lifetime
X-Cache-Lookup
X-Trace
X-Url
Allow
X-Ac
X-Content-Type
X-PC
X-TtlSet
X-Vname
X-Varnish-TTL
X-Aws-Lambda-Call-Status
X-Clacks-Overhead
Edge-Control
X-Server-Name
X-Mod-Pagespeed
X-ESI
Fastly-Restarts
Cache-Tag
Service-Worker-Allowed
X-Rack-Cache
X-FastCGI-Cache
X-VARITI-CCR
Verso
X-Element-Page-Cache
MS-Author-Via
X-Upstream
X-Vcap-Request-Id
X-MS-InvokeApp
X-Amz-Rid
X-GitHub-Request-Id
Public-Key-Pins
X-Dw-Request-Base-Id
X-Cached
X-Client-IP
X-Abt-Application-Version
X-Cache-TTL
X-D2id
RTSS
X-Cnection
X-Navigation-Version
X-Kinja
X-Exp-Variant
X-Exp-Id
X-GoogleNews-Bot
X-Kinja-Revision
X-Kinja-Server
X-Use-Magma
X-Kinja-Build
X-Cdn-Fetch
Arr-Disable-Session-Affinity
X-Px
X-Country-Code
Access-Control-Request-Method
X-Powered-By-Plesk
X-NF-Request-ID
X-Goog-Hash
X-ORACLE-DMS-RID
X-ORACLE-DMS-ECID
X-Server-Lifecycle-Phase
X-Instrumentation
X-Kraken-Loop-Name
X-Powered-CMS
AR-SID
AR-CACHE
AR-ATIME
AR-PoweredBy
AR-Request-ID
X-Sol
X-Middleton-Display
Pagespeed
Display
X-Version
X-Origin-Cache
Response
X-Middleton-Response
X-TTL
X-LLID
X-MSEdge-Ref
X-Amz-Server-Side-Encryption
Nginx-Cache
TCN
X-Edge-Location-Klb
X-Kinsta-Cache
X-RateLimit-Remaining
X-Edge
Mrf-Cache-Status
X-B3-TraceId-Primal
MRF-Tech
X-Protected-By
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-CST
X-T
X-Jurisdiction
X-HP-Webp
X-HP-Trace-Id
X-Forwarded-For
X-Content-Security-Policy-Report-Only
X-Shield-Request-Id
X-Aspnetmvc-Version
X-Id
X-Mg-S
S
Content-MD5
Edge-Cache-Tag
X-Language
X-Ruxit-Js-Agent
SPIisLatency
SPRequestDuration
Front-End-Https
Fastcgi-Cache
X-Mid
Realpath
X-Request-Received
X-Request-Processing-Time
Server-Node
Pinterest-Version
Filters
Pinterest-Generated-By
X-Pinterest-Rid
X-Recruiting
X-DynaTrace
X-Frontend
Server-Name
X-Content
X-Ua-Browser
X-Ab
X-MCACHE
X-Correlation-Id
X-Ttl
X-Cache-Key
X-Ser
X-HS-Hub-Id
X-HS-Content-Id
X-HS-Cache-Config
Accept-Ch
X-NWS-LOG-UUID
X-HS-Combine-CSS
X-Yandex-Sdch-Disable
X-Template
X-Ezoic-Cdn
X-ECACHE
SPRequestGuid
X-SharePointHealthScore
X-Hits
X-Parallel-Accel
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
MicrosoftSharePointTeamServices
Cache-Tags
X-Tt-Trace-Tag
X-Tt-Trace-Host
X-Page-Id
Charset
Host
Cleartype
X-B3-Sampled
Alternate-Protocol
X-Git-Hash
X-Www-Served-By
X-Geo-Country
X-Content-Options
X-Debug-Info
Fusion-Content-Id
Fusion-Component-Id
Fusion-Deployment-Id
Fusion-Template-Id
Fusion-Source
Fusion-Content-Source
X-DIS-Request-ID
X-Ratelimit-Limit
X-Daa-Tunnel
X-Hostname
X-Amzn-Trace-Id
X-Content-Digest
X-Amz-Replication-Status
Cross-Origin-Opener-Policy
Filterid
X-Varnish-Age
X-Activity-Id
X-Az
X-AppVersion
X-Upgrade-Enabled
X-FB-Debug
ServerID
X-N
X-Grace
X-F-Cache
X-Nginx-Upstream-Cache-Status
X-Accel-Expires
X-VCache
X-WebKit-CSP-Report-Only
X-Forwarded-Proto
X-Origin-Server
X-Rid
X-Mobile-URL
X-Fastly-Request-Id
X-Is-Crawler
X-Flags
X-Aspnet-Duration-Ms
Access-Control-Allow-Method
X-Route-Name
X-Providence-Cookie
X-Request-Guid
X-Server-ID
X-Type
X-Whom
X-LB-Cache
X-TT
X-DataDome
X-App-Environment
X-Varnish-Grace
X-Seen-By
Viewport
X-Tb
X-Goog-Generation
X-GUploader-UploadID
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
Payment
X-Goog-Stored-Content-Length
TP-Cache
TP-L2-Cache
Node
X-Distributor
X-FW-Hash
X-FW-Serve
X-FW-Dynamic
X-User-Agent
X-FW-Static
X-FW-Type
X-FW-Server
DC
Paypal-Debug-Id
X-XRDS-LOCATION
Accept-Charset
X-Wix-Request-Id
X-Fastly-Request-ID
X-App-Server
Fastcgi-Useragent
Country
X-Ratelimit-Reset
X-Litespeed-Cache
X-Cache-Rule
X-Cache-Control
X-Tec-Api-Version
X-Tec-Api-Origin
X-NGENIX-Cache
X-Tec-Api-Root
X-Webkit-Csp
X-Fastcgi-Cache
Version
X-Via-JSL
X-Origin-Upstream-Status
X-Drupal-Cache-Tags
Referer-Policy
X-Cluster-Name
X-Buckets
X-Microsite
X-Request-Handler-Origin-Region
X-Contextid
X-Logged-In
Amp-Access-Control-Allow-Source-Origin
X-Cache-Age
Cache-Status
X-Signature
X-B-Cache
X-Oracle-Dms-Ecid
X-Oracle-Dms-Rid
X-Node-Name
Refresh
X-Mobile
X-Browser-Type
X-Erf-Bev-Bev
X-Response-Served-From
VIX-Pulpo-Node
X-Erf-Bev-Bev-Is-Generated
X-Original-Request-Id
SD-X-WS
VIX-Pulpo-Upstream-Status
X-Page-View
X-Real-IP
X-Load-Cache
X-Is-Bot
X-Vgn-Hpd-Reason
X-Cache-Expired-At
X-Rendered-As
X-Varnish-Backend
X-Proxy-Cache-Status
NGB
X-IPLB-Instance
X-Cacheable-TTL
X-B
X-Revision
Access-Control-Request-Headers
X-Yottaa-Metrics
X-RemovedCookies
X-UUID
X-Rule
X-Device-Type
X-Cache-Action
X-Instance
X-Debug
X-Proxy
X-Jobs
X-Yottaa-Optimizations
X-ProcessESI
Surrogate-Key
Akamai-GRN
X-Drupal-Cache-Contexts
X-Cache-Time
X-Debug-IsConnected
X-Framework
X-Debug-IsPreview
X-FW-Version
X-G
CF-IPCountry
X-Presslabs-Stats
X-Accel-Buffering
SID
X-Air-Hostname
X-Air-Trace-Id
X-Air-Source
GEO-INFO
X-Oneagent-Js-Injection
X-Cache-NGX
DynaTrace
X-Ua-Device
Count-Hit
X-Azure-Ref
X-APP-VERSION
Uber-Trace-Id
X-Cache-Operation
X-Ms-Version
X-Source
X-Ms-Request-Id
Liferay-Portal
X-XRDS-Location
X-Nginx-Cache
X-Zen-Fury
X-EdgeConnect-Cache-Status
X-PressLabs-Stats
Frame-Options
Ms-Operation-Id
X-TEC-API-ROOT
MS-CV
X-CDN-Forward
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-RTag
Protected
Healthy
X-Cache-Hit
X-Backend-Name
X-L-Path
X-Environment-Context
Xserver
Countrycode
X-IPS-LoggedIn
X-Mode
Ec-Rule-Version
X-Tumblr-User
WPO-Cache-Message
Cross-Origin-Window-Policy
X-Cache-TTL-Remaining
X-Varnish-Server
WPO-Cache-Status
X-Tumblr-Pixel-1
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Ratelimit-Remaining
X-Hyper-Cache
X-Servername
X-Trace-Id
Backend
X-Adobe-Content
LB
X-Adobe-Loc
X-RN-RSRV
X-SaId
Meta-Geo
X-JoinUs
X-Content-Age
X-Detected-As
Content-Disposition
X-UPSTREAM-Address
X-Tid
X-RateLimit-Limit
X-Rewrite-Enabled
X-Region
Decoy-Debug-TTL
Decoy-Debug-Status
X-Redis-Cache
Apigw-Requestid
Eomportal-Instance
X-Hosted-By
Country-Code
X-Cache-Grace
Decoy-Debug-Key
X-Forwarded-Host
X-Sql-Duration-Ms
X-Format
X-Uri
X-Sorting-Hat-ShopId
X-Sql-Count
X-Sorting-Hat-PodId
X-Alternate-Cache-Key
X-ShopId
X-Cache-Server
X-Generation-Time
X-Shopify-Stage
X-ShardId
X-Debug-Cache
X-PCL
X-ApacheServer
X-Access
X-Proxied
X-PERF
X-OCL
X-Microcachable
CDN-PullZone
CDN-EdgeStorageId
CDN-RequestCountryCode
CDN-RequestId
CDN-Uid
CDN-CachedAt
CDN-Cache
X-NCache
X-Extlb
Fastly-SSL
Mn-Server-Ip
X-Human
X-No-Session
X-PHP-Backend
X-ServerID
X-Origin-Date
Cache-Name
X-FB-TRIP-ID
X-Zipkin-Id
X-Via-Fastly
X-Status
X-Varnish-Beresp-Grace
X-Site-Version
X-Routing-Service
X-Section
X-TIME
X-Timing-Wait
X-Server-W
TWC-Privacy
X-Origin-Hint
X-UA-Device-Type
TWC-Device-Class
Webcakes-App-Version
Webcakes-App-Name
X-Content-Powered-By
Section-Io-Cache
X-Pubstack
TWC-GeoIP-Country
Selected-Fe
TWC-Connection-Speed
Property-Id
TWC-GeoIP-LatLong
X-Proxy-Build
TWC-Locale-Group
X-ProxyCache-Key
X-Cache-Host
Webcakes-Region
X-SayCDN-TTL
X-Storage
X-ProxyCache-Status
X-Cluster-Node
X-NYM-Debug-Backend
X-Say-Cacheable
X-BYPASS-REASON
X-Generated-By
Cache-Tv-Group
Url
X-Web-Node
X-Akamai-Edgescape
X-Say-TTL
X-Cache-Type
X-Soup
X-Varnishpool
X-Hl-Ver
X-R9-Blue-Green-Version
X-Be
Azure-Version
Azure-SlotName
Azure-RegionName
Content-Secure-Policy
Azure-InstanceId
Azure-SiteName
X-LSADC-Cache
X-Ua
Retry-After
X-Webkit-CSP
X-NewRelic-App-Data
DB-Nickname
X-Nginx-Cache-Key
OT-Force-Account-Verify
X-Cached-By
X-Cache-Remote
X-Unique-Id
X-Dc
X-Azure-Ref-OriginShield
X-Bc-Bl
Source
X-Akamai-Transformed
X-Platform-Server
Cache
X-Auto-Login
X-GEO
X-TT-LOGID
X-EC-Lua
SRV
X-Xfnlog-Site
X-LAGOON
X-Cache-Tags
X-Cdn
ServedBy
Upgrade-Insecure-Requests
X-Origin-TTL
X-Origin-CC
Mime-Version
From-Origin
X-SRV
X-Varnish-Cache-Hits
X-Varnish-Hits
Cache-Hits
X-HTML-Minification-Powered-By
X-Varnish-Hostname
X-Request-Time
Xet-Cookie
X-AOL-HN
Onion-Location
X-S-Maxage
HostName
X-Loop
X-Request-Host
X-TNCMS
WP-Super-Cache
X-CSRF-Token
Webserver
X-Tumblr-Pixel-3
X-ECache
Web-Mar-Node
X-NWS-UUID-VERIFY
X-Tumblr-Pixel-2
X-App-Version
X-Cache-Enabled
X-Proto
X-Xrds-Location
X-Time
X-Amz-Meta-S3cmd-Attrs
X-FireWall-Port
X-B3-SpanId
X-Handled-By
X-Endurance-Cache-Level
N-Cache
Nel
X-Correlation-ID
X-Tenant
X-AWS-Id
X-Origin-Response-Time
X-LJ-Flow-ID
X-VWS-Id
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
Mobile-Detection-Method
X-Processor
X-Connection-Hash
X-PBS-Appsvrname
X-Planisys-CDN-TTL
Fastcgi-X-Cache-Version
X-Hnp-Log
X-Gen-Mode
X-Ig-Push-State
X-Ftr-Request-Id
DCR-Decision-By
BehaviorPad-Version
X-Adobe-Source
A
X-RCS-CacheZone
X-GG-Cache-Date
X-Reqid
DCR-Processing-Time-Ms
X-Forwarded-Path
X-Developer
X-Orig-Expires
X-Destination
X-D
Meta-Geo-Continent
X-Epic-Correlation-Id
X-External-Request-Id
Expiry
Odigeo-Trace-Id
X-NAPM-TraceId
X-ND-Cache
X-PAYTM-SRV-ID
Pramga
X-TIM-N
X-A-Ccd
X-Backend-TTL
User-Cache-Control
V-Age
X-Block-Status
X-A-Dam
X-Slack-Backend
X-A-Dcw
Sslversion
Surrogated-Key
X-A
X-V-Cache
X-Application
X-VG-WebCache
X-Vtex-Remote-Cache
X-Vtex-Processado-Em
X-Vdms-Version
X-Vdms-Path
Vix-Hermes-Req-Id
X-B-Cookie
Xc-Version
X-ARC
X-A-Dgt
X-SRCache-Key
X-Rojux
X-CF-Lambda-Version
X-S
X-Time-Microsecs
X-CF-Lambda-Fn
Rendered-Blocks
Redirect-Candidate
X-Conf
X-Cluster
X-Aed
X-Ckpd-Fst-Backend
X-ScT
X-S-Cookie
X-Session-Fingerprint
X-Shop-Environment
X-SD-PageType
X-Cache-NE
X-A-Wwc
X-Magnolia-Registration
X-Edge-Location
S-Rt
X-MP-GENERATED-AT
Wxu-Next-Hostname
X-Accel-Expires-Debug
Wxu-Next-Region
CacheControlHeader
Apple-News-Services-Request-Url
Apple-News-Services-Host
Arc-Country
Apple-News-Services-Handled
Apple-News-Services-Parsed-Url
Fastcgi-Cache-TTL
X-Cache-Date
X-Cache-Bucket
Host-ID
X-Cache-Info
X-Date
Origin
AKAMAI
X-Cdn-Srv
Gh-Request-Id
State
DSUID
CDCHOST
Wxu-Next-Commit
X-Forwarded-Site
X-Fastly-Cache
Svr
True-Client-Country-4JS
X-Gdpr
X-Mg-Request-UUID
X-VG-TLSProxy
X-Origin
X-Origin-Time
X-Old-Content-Length
X-Nyt-Route
X-Aicache-OS
X-Mvc-Supplant-Cachable
X-Viewer-Country
X-Http-Reason
X-Akamai-Request-ID2
X-Sucuri-ID
X-Geo-Header
X-Sucuri-Cache
X-Proxy-Upstream
X-Policy
X-Request-URI
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-Men
X-NodeID
X-Rocket-Nginx-Serving-Static
X-Scheme
X-Location
X-Server-IP
X-Li-Pop
X-Li-Fabric
X-GeoIP-Country-Code
X-Webstats-RespID
X-LI-UUID
X-GeoIP-Region-Code
X-Origin-Expires
X-Amz-Apigw-Id
X-Cache-Var-Map
X-Amzn-RequestId
X-Cache-Var
Server-Info
X-PHP-Host
CloudFront-Viewer-Country
X-Labrador-Cache-Channel
Environment
X-Skip-Cache
X-Branch-Name
X-Cache-Debug
X-Sigma-Backend
X-Storefront-Renderer-Rendered
X-Cache-Id
X-VarnishDD-TTL
Traceparent
Locid
Origin-CC
Origin-EX
X-Sigma
X-Varnish-Beresp-Status
X-TH-Server
X-TrackingId
X-Backend-State
X-BBC-Edge-Cache-Status
X-RateLimit-Remaining-Second
X-Eu-Site
X-Locale
X-Esi-Check
X-Envoy-Decorator-Operation
X-GeoIP-City
X-Developers
X-Level-Front-Cache
X-Gamma-Serve
X-Hash
X-Gzip
X-Generated-On
X-HN
X-Irp-Debug
X-HS-Content-Campaign-Id
X-GeoIP
X-Datadog-Trace-Id
X-Device-Os
X-Region-Sid
X-VServer
X-Req
X-Rocket-Build-Number
X-CGP
X-RateLimit-Limit-Second
X-Core-Value
X-Datadog-Parent-Id
X-Datadog-Sampling-Priority
X-Fetched-On
X-Owner
X-Csrf-Jwt
X-Platform
X-Served-From
PFcat
Cmstype
Release
Ssr
Mail-Subject
Cmsid
Fastly-Drupal-Html
Req-Svc-Chain
X-Cdn-Origin
Server-Host
X-Sn-Servicetimems
X-Varnish-Beresp-Ttl
Web-Mar-Region
Ha-Gx-Prefs
Fastly-GeoIP-CountryCode
HA-Ipaddr
We-Hiring
L
Magicmarker
Machine
L5d-Success-Class
X-Fastly-Backend
X-Via-NSCOPI
X-Rebelmouse-Cache-Control
X-JWT-State
X-Is-Gdpr
X-Rebelmouse-Surrogate-Control
X-Loc
X-NU-AKA-ACS-Version
X-Qloud-Router
X-Varnish-CookieHashed-On
X-UnsetCookies
X-Core-Mission
Thinkindot-CacheControl-Type
X-ATG-Version
Thinkindot-Control
Thinkindot-CacheControl
TDXMobile
X-Pod-Name
X-Node-Id
X-Variation
X-Restarts
X-Varnish-CookieINHashed-On
X-Amzn-Remapped-Content-Length
X-Tx-Id
X-Worker
X-Response-By
X-Varnish-Remaining-TTL
Adler-Geo
X-DPWN-IS-SECURE
X-FC-Vary-Parameters
X-DefHash
Cf-Device-Type
Platform
Fastly-SIE
Fastly-SWR
X-Thinkindot-L3
X-DefElseHash
Memcached
NGX
NM-Fastcgi-Cache
X-Has-Esi
Is-Eu
Kp-EeAlive
AMP-Access-Control-Allow-Source-Origin
X-VC-Cache
X-Request-Start
X-TraceId
X-CS
X-Zone
X-M-Reqid
X-DB
X-M-Log
X-Up
X-DI
X-Thanos
X-DSS
X-Qnm-Cache
X-Bip
X-API-Version
X-Wix-Viewer-Type
X-NC
X-Action
X-DW
X-Cache-Backend
CDN
Edge-Cache
X-RSL
X-RPS
X-RPM
Accept-Language
X-Mvc-Supplant-OutputCached
X-Trace-ID
X-LB-NoCache
Pics-Label
Ms-Author-Via
X-Generated-In
X-LB-ID
X-Tb-Optimization-Total-Bytes-Saved
Env
X-Optimistic-Header
Time
X-Tt-Logid
X-Minions-Version
X-Cache-Config
Memory
X-CacheTTL
X-Srv
X-Refresh
X-Edge-Pop
WebServer
X-Varnish-Ttl
X-Urbn-Context-Path
Locale
X-Urbn-Site-Id
Datacenter
GeoIp-Country-Code
X-Via-Popn
X-Via-Poph
X-Via-Popv
X-HA-Backend
Candidate-Md5Url
X-CACHE-KEY
NtCoent-Length
X-DC
X-Datadome
X-ZONE
X-Vc
X-TA-CDN-Provider
X-Ec-GeoHdr
Server-ID
X-Servedbyhost
X-User
X-Ec-Fail
X-Esi
X-Parent-Response-Time
X-DynaTrace-JS-Agent
WWW-Authenticate
X-MSEdge-Flight
On-Server
X-MSEdge-Features
X-CLOUD-TRACE-CONTEXT
X-Cs
Esi-Enabled
X-TX-ID
X-AK-Request-ID
X-Unique-ID
Cdnsip
Cdncip
X-Varnish-Beresp-TTL
X-VCL-Version
X-Cache-PHP
X-Fpc
X-LI-Proto
C-Via
X-Service
X-Fmm-Version
Cluster
X-App
X-WADP-Cache
Geoip-Latitude
X-Cache-Ttl
My-App
X-Clara-WADP
X-URL
X-Newrelic-Synthetics
X-CUA
X-Li-Proto
X-Var-Ttl
X-Dynatrace
Tracecode
X-Webkit-Csp-Report-Only
Proxy-Connection
X-Traceid
X-Pass-Why
X-From
X-FPC
Lfy
X-B3-Spanid
Test
T-Server
X-Webkit-CSP-Report-Only
X-NODE
Cf-Int-Pingora-Origin-Digest
X-Render-Time
X-Cache-Status-Check
Lang
Fastly-Drupal-HTML
X-Vcl-Version
X-Fragments
DataCenter
X-LiteSpeed-Cache-Control
Geo-Info
X-Mcache
Target-Params
M-TraceId
Resin-Trace
X-VC
X-CSRF-TOKEN
X-Ha-Backend
Server-Id
X-WP-CF-Super-Cache-Cache-Control
X-WP-CF-Super-Cache
Hostname
X-Provided-By
X-ID
X-RAMCache
X-COUNTRY
MIME-Version
X-Via-PopN
X-Httpd
Permissions-Policy
GeoIP-Country-Code
X-Proxy-Cache-Info
X-Clientip
X-Via-PopH
X-Via-PopV
X-NGINX-Cache
X-ServedByHost
Hit
X-Geo
X-Dynatrace-Js-Agent
Producers
X-Edge-POP
WZWS-RAY
Servername
X-Cdn-Forward
X-Oss-Request-Id
X-Oss-Storage-Class
Cache-Host
X-Oss-Hash-Crc64ecma
X-Oss-Object-Type
X-Oss-Server-Time
UCS
X-LiteSpeed-Tag
HIT
X-Pad
X-AIR-PT
X-Info
FSS-Cache
S-Cnection
X-PX
X-Check-Cacheable
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
Section-Io-Id
Section-Io-Origin-Status
X-Edge-Cache
X-Fastly-Backend-Reqs
X-SB
ENV
X-Api-Version
X-Udemy-Cache-App-Namespace
X-ElasticPress-Query
X-Platform-Processor
X-Platform-Cluster
X-Pool
X-Ucs
X-Platform-Router
Ohc-File-Size
X-Scale
X-BBC-Origin-Response-Status
X-Lb-Nocache
Uri
User-Agent
X-Cache-CFC
URI
Fastly-Backend-Name
X-Lb-Id
ServerName
X-Acquia-Site
X-Ec-Custom-Error
X-HS-Status
X-Acquia-Purge-Tags
X-UP
X-Micro-Cache
PICS-Label
X-Acquia-Application-Trace
X-Acquia-Application-UUID
X-GoCache-CacheStatus
X-Srcache-Fetch-Status
X-Srcache-Store-Status
MD5-Digest
X-Backend-Host
X-Release
Cneonction
Server-Ext
X-RateLimit-Reset
IsBot
X-Nc
Server-Ttl
X-Fastly-Cache-Hits
X-Cdn-Request-ID
X-SIPLIST1
Load-Balancing
Server-Hostname
X-ServerName
Sever-Int
Tcn
X-Cache-Expires
X-Swift-Error
Cteonnt-Length
X-Dw-Trace-Id
X-Snapshot-Date
X-Akamai-ERRuleID
X-Akamai-ERPolicy
Cf-Ipcountry
CF-Cached-On
X-Contensis-Viewer-Groups
Vha6-Origin
X-Dispatcher-Number
X-Vcache
Wpo-Cache-Message
X-B3-ParentSpanId
X-Via-Ucdn
Wpo-Cache-Status
EpKe-Alive
X-Newrelic-App-Data
X-Yottaa-OS
X-APP
X-BCube-Filmed-By
Shield-Pop
X-Cache-ASPX
X-TRACE-ID
X-Cache-Ngx
Cdn
Sid
X-HostName
X-Air-Pt
X-IN-APIGATEWAY
X-Shopify-Generated-Cart-Token
X-Akamai-Request-ID
X-B3-Parentspanid
X-IN-APIGATEWAYSSL
X-Litespeed-Cache-Control
X-Apw-Access-Action
Req-ID
Path
CountryCode
Ohc-Cache-HIT
X-Akamai-Pragma-Client-IP
X-Logging-Id
X-CacheKey
X-UA
X-Apw-Hits
X-Apw-Access-Token
X-Http-Duration-Ms
X-Te-Count
X-Te-Duration-Ms
X-Http-Count
X-Varnish-Authentication
X-Apw-Access-Object
X-Sentry-ID
Ngx
X-Last-Modified