Threat Level: green Handler on Duty: Jan Kopriva

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
CF-RAY
Cf-Request-Id
CF-Cache-Status
Accept-Ranges
Link
X-XSS-Protection
ETag
Pragma
Expect-CT
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
Alt-Svc
P3P
X-UA-Compatible
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Xss-Protection
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Adblock-Key
X-Runtime
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Check
X-Cache-Status
X-Generator
P3p
X-Cacheable
X-Request-ID
Timing-Allow-Origin
X-DNS-Prefetch-Control
X-Content-Security-Policy
X-Iinfo
Status
X-Ua-Compatible
Feature-Policy
Content-Encoding
X-AspNetMvc-Version
X-CDN
X-Envoy-Upstream-Service-Time
X-Dns-Prefetch-Control
Access-Control-Expose-Headers
Upgrade
Access-Control-Max-Age
X-Drupal-Dynamic-Cache
X-Via
X-Ws-Request-Id
Keep-Alive
Request-Context
Server-Timing
X-Robots-Tag
X-AH-Environment
X-Hacker
X-Server
X-Age
X-Turbo-Charged-By
X-Proxy-Cache
X-Cache-Group
X-Server-Powered-By
X-Backend
X-Amz-Request-Id
Host-Header
X-Amz-Id-2
EagleId
X-Nginx-Cache-Status
Report-To
X-LiteSpeed-Cache
X-Rq
X-Varnish-Cache
Grace
X-UA-Device
X-Page-Speed
X-Pingback
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
EagleEye-TraceId
X-Device
X-Vhost
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Amz-Version-Id
NEL
X-Dispatcher
X-OneAgent-JS-Injection
Cf-Railgun
X-Host
X-WebKit-CSP
X-Cache-Spec
X-CST
X-Server-Id
X-Node
X-Backend-Server
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
Allow
Request-Id
Surrogate-Control
X-Readtime
Accept-CH
X-Akam-SW-Version
Accept-Ch-Lifetime
X-Response-Time
Xkey
X-Language
X-HW
X-Template
X-Application-Context
X-Country
Content-Location
X-Ac
X-Cloud-Trace-Context
X-Cache-Lookup
X-Ruxit-JS-Agent
Rating
MS-Author-Via
X-Url
X-Webkit-CSP
Edge-Control
X-Clacks-Overhead
X-TtlSet
X-PC
X-Vname
X-Varnish-TTL
X-Mod-Pagespeed
X-Trace
Fastly-Restarts
X-B3-TraceId
Accept-Ch
X-Content-Type
X-Rack-Cache
X-Buckets
X-MS-InvokeApp
X-Origin-Cache
X-ESI
X-GitHub-Request-Id
X-Country-Code
X-Cnection
X-Goog-Hash
Verso
X-D2id
X-Server-ID
X-VARITI-CCR
X-FastCGI-Cache
X-ORACLE-DMS-ECID
Arr-Disable-Session-Affinity
X-GoogleNews-Bot
X-Kinja-Server
X-Kinja
X-Cdn-Fetch
X-Kinja-Build
X-Exp-Variant
X-Exp-Id
X-Kinja-Revision
X-Use-Magma
Cache-Tag
X-Vcap-Request-Id
X-Cached
Service-Worker-Allowed
X-Px
X-Server-Name
X-Abt-Application-Version
X-Amz-Rid
X-Client-IP
X-Navigation-Version
X-Cache-TTL
Accept-CH-Lifetime
X-TTL
Public-Key-Pins
RTSS
X-Powered-By-Plesk
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-MSEdge-Ref
Access-Control-Request-Method
X-Dw-Request-Base-Id
X-Powered-CMS
X-Fastly-Request-ID
X-Element-Page-Cache
X-NF-Request-ID
X-Version
X-Upstream
Display
Pagespeed
X-Sol
X-Middleton-Response
X-Middleton-Display
Response
S
X-Kinsta-Cache
X-Edge-Location-Klb
X-Edge
X-LLID
X-Cache-Key
X-Kraken-Routeconfig-Destination
X-Instrumentation
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
Mrf-Cache-Status
MRF-Tech
X-B3-TraceId-Primal
X-ECACHE
X-Accel-Expires
X-Shield-Request-Id
X-HP-Webp
X-Jurisdiction
Pinterest-Version
X-Pinterest-Rid
Pinterest-Generated-By
Realpath
X-ORACLE-DMS-RID
X-T
X-XRDS-Location
X-DynaTrace
SPRequestGuid
X-MCACHE
X-SharePointHealthScore
X-Mid
X-PressLabs-Stats
X-Correlation-Id
Edge-Cache-Tag
X-Content-Security-Policy-Report-Only
SPRequestDuration
SPIisLatency
X-Litespeed-Cache
Fastcgi-Cache
X-Amz-Server-Side-Encryption
Nginx-Cache
X-Ruxit-Js-Agent
X-Ttl
X-Forwarded-Proto
X-Content-Digest
X-Mg-S
TP-L2-Cache
X-Recruiting
TP-Cache
TCN
X-Request-Processing-Time
X-Request-Received
Front-End-Https
Charset
Alternate-Protocol
Server-Node
X-Id
X-Logged-In
Filters
X-Oneagent-Js-Injection
Content-MD5
X-Geo-Country
X-Forwarded-For
Fusion-Component-Id
Fusion-Deployment-Id
Fusion-Content-Id
Fusion-Source
X-Protected-By
Fusion-Content-Source
Fusion-Template-Id
X-Ezoic-Cdn
Cache-Tags
X-Hostname
X-ASPNET-VERSION
X-Amzn-Trace-Id
X-NWS-LOG-UUID
X-Origin-Upstream-Status
X-Grace
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Metageneration
X-Debug-Info
X-Goog-Stored-Content-Encoding
X-F-Cache
X-Www-Served-By
Cleartype
X-LB-Cache
X-Origin-Server
X-HS-Hub-Id
X-Activity-Id
X-HS-Content-Id
X-Amz-Replication-Status
X-AppVersion
X-Az
X-Rid
X-HS-Cache-Config
X-HS-Combine-CSS
Host
X-Ab
X-Daa-Tunnel
X-Contextid
X-Git-Hash
X-Page-Id
Section-Io-Cache
X-RateLimit-Remaining
Server-Name
X-Erf-Bev-Bev
X-Browser-Type
X-Erf-Bev-Bev-Is-Generated
X-VCache
X-Content-Options
X-Ser
X-Frontend
X-Cache-Age
X-Upgrade-Enabled
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
MicrosoftSharePointTeamServices
X-Release
Access-Control-Allow-Method
X-Aspnetmvc-Version
Accept-Charset
ServerID
X-Hits
X-Mobile-URL
X-Source
X-DIS-Request-ID
X-Request-Guid
X-Providence-Cookie
X-Is-Crawler
X-Flags
X-Varnish-Age
X-Aspnet-Duration-Ms
X-Route-Name
X-Signature
X-B3-Sampled
X-B-Cache
Viewport
X-Cache-Action
Healthy
X-Whom
X-Varnish-Grace
Paypal-Debug-Id
Payment
X-FB-Debug
X-Varnish-Backend
X-TT
X-AOL-HN
X-Yandex-Sdch-Disable
Fastcgi-Useragent
Node
X-CACHE-GROUP
X-Respond-Thread
X-Load-Cache
X-WebKit-CSP-Report-Only
X-App-Environment
DynaTrace
X-Mobile
X-Fastcgi-Cache
X-Tt-Trace-Host
X-Tt-Trace-Tag
DC
Filterid
X-Seen-By
Version
X-Distributor
X-N
X-User-Agent
X-Tec-Api-Version
X-Tec-Api-Origin
X-Tec-Api-Root
SRV
X-HTML-Minification-Powered-By
X-Cache-Control
Frame-Options
X-Type
Retry-After
X-HP-Trace-Id
X-Jobs
MS-CV
Refresh
X-FW-Serve
X-FW-Dynamic
X-FW-Type
X-FW-Hash
X-FW-Static
X-FW-Server
Amp-Access-Control-Allow-Source-Origin
X-Response-Served-From
X-Ua-Device
X-Original-Request-Id
X-NGENIX-Cache
X-Cache-Expired-At
X-UUID
X-Adobe-Content
NGB
X-Node-Name
X-Proxy-Cache-Status
X-Adobe-Loc
X-Page-View
X-Azure-Ref
X-Debug-IsConnected
X-Debug-IsPreview
X-Instance
X-Real-IP
X-Varnish-Server
X-XRDS-LOCATION
X-Tumblr-Pixel
X-RemovedCookies
X-IPLB-Instance
VIX-Pulpo-Node
X-Tumblr-Pixel-1
X-Tumblr-Pixel-0
X-Tumblr-User
X-Region
X-Cacheable-TTL
X-G
X-B
X-ProcessESI
X-Cluster-Name
X-Vgn-Hpd-Reason
VIX-Pulpo-Upstream-Status
X-Aws-Lambda-Call-Status
X-Content-Powered-By
Access-Control-Request-Headers
X-RTag
X-CDN-Forward
X-Device-Type
Ms-Operation-Id
X-Cache-Time
X-Proxy
X-Framework
X-Zen-Fury
X-Cache-Hit
X-IPS-LoggedIn
Referer-Policy
Uber-Trace-Id
SD-X-WS
Liferay-Portal
X-Cache-Rule
X-Parallel-Accel
X-Drupal-Cache-Tags
X-Rendered-As
X-Is-Bot
Cache-Status
X-Ms-Version
X-Ms-Request-Id
X-Wix-Request-Id
X-EdgeConnect-Cache-Status
X-Time
Section-Io-Origin-Status
X-App-Server
Countrycode
Section-Io-Id
Section-Io-Origin-Time-Seconds
X-Mg-Request-UUID
Section-Origin-Responded
X-Oracle-Dms-Rid
X-RateLimit-Limit
X-Debug
X-Environment-Context
X-L-Path
S-Cnection
X-Revision
X-Yottaa-Optimizations
CF-IPCountry
Country
X-Yottaa-Metrics
X-Accel-Buffering
X-B3-Traceid
X-Cache-Operation
Count-Hit
X-TA-CDN-Provider
X-Nginx-Cache
X-APP-VERSION
X-Drupal-Cache-Contexts
X-Microsite
X-Request-Handler-Origin-Region
X-FW-Version
Akamai-GRN
Cache
X-RN-RSRV
X-UPSTREAM-Address
X-SaId
X-ES-SERVER
X-JoinUs
Ar-Sid
X-GG-Cache-Date
AR-Request-ID
Meta-Geo
AR-CACHE
AR-PoweredBy
X-Endurance-Cache-Level
AR-ATIME
X-Say-TTL
X-Say-Cacheable
From-Origin
GEO-INFO
X-TNCMS
X-Cache-TTL-Remaining
X-SayCDN-TTL
X-Cache-Type
Surrogate-Key
X-Adobe-Source
X-Loop
X-LAGOON
X-R9-Blue-Green-Version
Azure-SlotName
Azure-SiteName
Azure-RegionName
X-OCL
Azure-InstanceId
Azure-Version
X-PCL
Fastly-SSL
X-Sql-Count
X-S-Maxage
X-Sql-Duration-Ms
X-Request-Time
X-Varnish-Beresp-Grace
X-NYM-Debug-Backend
Country-Code
X-Human
X-Handled-By
X-Varnish-Hostname
X-LJ-Flow-ID
X-No-Session
Cache-Name
Protected
Decoy-Debug-Key
X-Varnishpool
X-AWS-Id
X-Alternate-Cache-Key
X-Be
X-BYPASS-REASON
X-VWS-Id
Apigw-Requestid
X-Proto
X-Origin-Date
Decoy-Debug-Status
Decoy-Debug-TTL
Cache-Tv-Group
X-ShardId
X-ShopId
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Shopify-Stage
X-Storefront-Renderer-Rendered
X-Status
X-Pubstack
X-ProxyCache-Key
X-ProxyCache-Status
X-RCS-CacheZone
Property-Id
TWC-Privacy
TWC-GeoIP-LatLong
TWC-Locale-Group
TWC-GeoIP-Country
ServedBy
TWC-Connection-Speed
Selected-Fe
TWC-Device-Class
Eomportal-Instance
Webcakes-App-Version
X-Format
X-Tumblr-Pixel-2
X-PHP-Host
X-Origin-Hint
X-Proxy-Build
X-Timing-Wait
X-Server-W
X-Section
X-UA-Device-Type
X-Labrador-Cache-Channel
X-Akamai-Edgescape
X-Access
X-Xfnlog-Site
X-Cache-Server
X-Hosted-By
X-Web-Node
Webcakes-Region
Webcakes-App-Name
X-B3-SpanId
X-Via-Fastly
X-PHP-Backend
X-Hyper-Cache
X-Cluster-Node
X-App-Version
Mn-Server-Ip
X-Backend-Host
X-PERF
X-ApacheServer
X-Redis-Cache
X-FB-TRIP-ID
X-Time-Microsecs
X-Hl-Ver
X-Servername
X-Backend-Name
Cross-Origin-Opener-Policy
X-ServerID
OT-Force-Account-Verify
Nel
X-Uri
X-Tumblr-Pixel-3
X-ATG-Version
X-Detected-As
X-FireWall-Port
X-Azure-Ref-OriginShield
Web-Mar-Node
X-Ua
Cross-Origin-Window-Policy
X-Varnish-Cache-Hits
X-Generation-Time
X-Cache-Host
X-Cache-PHP
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-TEC-API-VERSION
Ec-Rule-Version
X-Content-Age
X-Varnish-Hits
Content-Secure-Policy
X-Via-JSL
X-TT-LOGID
Source
X-CS
X-Datadome
Backend
X-MP-GENERATED-AT
X-Trace-Id
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Air-Source
X-Air-Trace-Id
X-Forwarded-Host
X-Akamai-Transformed
Upgrade-Insecure-Requests
X-WA-Info
X-Air-Hostname
X-Content
X-Microcachable
X-SRV
X-Mode
X-CSRF-Token
X-Ua-Browser
X-Cache-Grace
X-Soup
Xserver
X-Locale
X-NWS-UUID-VERIFY
X-Amzn-Remapped-Content-Length
X-Edge-Location
X-Cdn
X-Bc-Bl
X-Varnish-Beresp-Ttl
X-Ratelimit-Limit
Url
X-Origin-TTL
X-Origin-CC
X-Info
X-Site-Version
X-Cache-Enabled
Content-Disposition
X-Dc
X-GEO
X-Tenant
X-Rule
X-Ratelimit-Remaining
X-Proxied
X-Routing-Service
X-Zipkin-Id
SID
X-Varnish-Beresp-Status
X-Extlb
X-Unique-Id
X-DataDome
X-Tb
S-Rt
X-Magnolia-Registration
CDN-Uid
DCR-Decision-By
CDN-RequestId
CDN-RequestCountryCode
CDN-CachedAt
CDN-PullZone
DCR-Processing-Time-Ms
Expiry
Host-ID
X-CF-Lambda-Version
Fastly-SWR
Fastly-SIE
Fastcgi-X-Cache-Version
CDN-Cache
CDCHOST
X-NAPM-TraceId
X-SRCache-Key
X-NU-AKA-ACS-Version
X-Orig-Expires
X-PAYTM-SRV-ID
X-Destination
X-Developer
A
Apple-News-Services-Request-Url
BehaviorPad-Version
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
Apple-News-Services-Handled
X-CF-Lambda-Fn
MD5-Digest
X-Aed
X-Aicache-OS
X-A-Wwc
X-A-Dgt
X-A-Dam
X-A-Dcw
X-AIR-PT
X-Epic-Correlation-Id
X-BBC-Edge-Cache-Status
X-BCube-Filmed-By
X-B-Cookie
X-ARC
X-Application
X-A-Ccd
X-A
Path
Rendered-Blocks
Odigeo-Trace-Id
Mobile-Detection-Method
Meta-Geo-Continent
X-Cache-NE
Req-Svc-Chain
X-Ftr-Request-Id
X-Forwarded-Path
X-External-Request-Id
T-Server
Surrogated-Key
X-From
X-PBS-Appsvrname
CDN-EdgeStorageId
X-Shop-Environment
X-S
X-Vdms-Version
X-Session-Fingerprint
X-S-Cookie
X-Tx-Id
X-VG-WebServer
X-Connection-Hash
X-Rewrite-Enabled
X-Debug-Cache
X-Processor
X-Rojux
X-VG-WebCache
X-Vtex-Remote-Cache
X-D
User-Cache-Control
X-Storage
X-Conf
X-Vtex-Processado-Em
X-Ratelimit-Reset
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
X-Request-URI
X-Platform-Server
X-ScT
X-EC-Lua
State
X-Li-Fabric
X-VServer
X-Has-Esi
Platform
X-Core-Value
Fastly-Backend-Name
UCS
Fastly-Drupal-HTML
X-Request-UUID
X-Is-Gdpr
X-Worker
X-JWT-State
Is-Eu
X-Cached-By
X-Cache-Debug
X-Cache-Bucket
X-DPWN-IS-SECURE
L
X-Date
NGX
Origin
X-Service
X-SVT-ORM-RULES
X-Accel-Expires-Debug
X-TrackingId
X-Backend-State
Pics-Label
X-Cms-Context
X-Envoy-Decorator-Operation
X-Origin-Expires
X-VG-TLSProxy
X-SVT-ORM-VERSION
Cache-Host
Cache-Key
X-Li-Pop
X-Variation
X-LI-UUID
X-Proxy-Upstream
X-Loc
X-M-Log
Adler-Geo
X-M-Reqid
X-Cache-NGX
XServer
X-Micro-Cache
X-Qnm-Cache
X-NCache
Server-Host
X-VC-Cache
X-Varnish-CookieHashed-On
Server-Ext
Server-Hostname
X-Auto-Login
X-Generated-By
X-Bip
X-Gen-Mode
X-Varnish-Remaining-TTL
X-VarnishDD-TTL
X-Gamma-Serve
X-Via-NSCOPI
TDXMobile
VNS-Age
Vix-Hermes-Req-Id
True-Client-Country-4JS
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
VNS-Cache
X-Fastly-Cache
Sever-Int
X-Branch-Name
X-Forwarded-Site
X-Viewer-Country
X-Fastly-Backend
Thinkindot-Control
IsBot
Arc-Version
C-Via
X-Location
X-Men
X-DefElseHash
X-RateLimit-Limit-Second
X-RateLimit-Remaining-Second
Cmstype
Cmsid
Cf-Device-Type
X-Varnish-CookieINHashed-On
X-Thanos
X-Thinkindot-L3
X-Clientip
X-Sigma-Backend
X-Sigma
X-Block-Status
X-Cluster
X-Origin
X-Old-Content-Length
X-Slack-Backend
X-Nginx-Cache-Key
X-Scheme
X-SIPLIST1
PFcat
CPC-Age
X-Cache-Tags
X-Geo-Header
X-Wikidot-Backend
X-Wikidot-Static-Cache
M-TraceId
X-Generated-On
X-Rocket-Build-Number
PB-RID
PB-PID
X-Served-From
X-Cache-Info
Locid
Location
Fastcgi-Cache-TTL
X-Developers
Esi-Enabled
X-Level-Front-Cache
X-Req
X-Ckpd-Fst-Backend
X-Hnp-Log
X-DefHash
CPC-Cache
X-HN
X-Device-Os
AMP-Access-Control-Allow-Source-Origin
X-Platform
X-Var-Ttl
X-Policy
X-Request-Host
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
X-Planisys-CDN-Cache
X-Sucuri-ID
X-Vdms-Path
X-Skip-Cache
Svr
Arc-Country
AKAMAI
X-Owner
X-Irp-Debug
X-Generated-In
X-Fetched-On
X-FC-Vary-Parameters
X-Eu-Site
X-GeoIP
X-GeoIP-City
X-HS-Content-Campaign-Id
X-Hash
X-Gzip
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Esi-Check
Webserver
Memcached
Mail-Subject
NM-Fastcgi-Cache
Pagetype
Server-Info
Release
HA-Ipaddr
Ha-Gx-Prefs
X-LSADC-Cache
X-Csrf-Jwt
CacheControlHeader
DSUID
Gh-Request-Id
DataCenter
V-Age
L5d-Success-Class
Wxu-Next-Commit
Wxu-Next-Hostname
Wxu-Next-Region
X-CGP
We-Hiring
X-Cache-Id
X-Amz-Meta-S3cmd-Attrs
X-Unique-ID
X-Platform-Router
X-Mvc-Supplant-Cachable
X-Render-Time
X-Fmm-Version
X-Platform-Cluster
X-Rocket-Nginx-Serving-Static
X-Qloud-Router
X-V-Cache
X-DC
X-WADP-Cache
X-Clara-WADP
X-Platform-Processor
X-GoCache-CacheStatus
NtCoent-Length
Cache-Hits
X-SD-PageType
X-Servedbyhost
MIME-Version
X-Cache-Remote
X-Cache-Var
X-Cache-Var-Map
X-Srv
X-Mvc-Supplant-OutputCached
X-Via-Popn
X-Via-Poph
Environment
X-Via-Popv
Kp-EeAlive
X-API-Version
X-Gdpr
X-Origin-Time
X-Nyt-Route
X-Datadog-Sampling-Priority
X-Datadog-Parent-Id
X-PJAX-URL
X-Datadog-Trace-Id
X-Zone
X-NodeID
X-User
X-Vc
X-Via-Ucdn
X-Wa
X-Webkit-CSP-Report-Only
X-ID
X-App
Server-ID
X-Pod-Name
X-Cache-Config
X-BBC-Origin-Response-Status
X-PF-Uncompressing
X-Traceid
Candidate-Md5Url
X-Server-IP
X-NC
Who
WebServer
X-Varnish-Ttl
X-Refresh
X-Varnish-Url
Memory
Cluster
Time
X-Minions-Version
X-Internal-Host
X-TIME
X-Webkit-Csp
X-VCL-Version
X-LB-ID
HostName
X-CACHE-KEY
X-Pass-Why
Onion-Location
X-ZONE
Web-Mar-Region
My-App
Powered-By-ChinaCache
Geoip-Latitude
GeoIp-Country-Code
X-LI-Proto
X-Newrelic-Synthetics
N-Cache
Resin-Trace
X-Edge-Pop
X-NewRelic-App-Data
X-Cache-Ttl
X-Esi
X-ElasticPress-Query
Datacenter
Servername
X-CLOUD-TRACE-CONTEXT
X-Tb-Optimization-Total-Bytes-Saved
Geo-Info
X-Varnish-Cacheable
X-TraceId
X-VHOST
X-AB
X-Correlation-ID
X-Tt-Logid
X-Origin-Response-Time
X-EIG-Tracking-Id
X-Akamai-Pragma-Client-IP
X-OVcl
WWW-Authenticate
X-OVcl-Cache
Tcn
X-TX-ID
CDN
Ohc-File-Size
Cf-Bgj
X-Dynatrace
X-HITS
X-CACHE-AGE
X-Fpc
X-Backend-TTL
Hostname
LB
Redirect-Candidate
X-TIM-N
X-Geo
Magicmarker
X-Tid
X-NODE
Tracecode
X-Li-Proto
Proxy-Connection
X-Up
Cdn
X-Varnish-Beresp-TTL
X-Dynatrace-Js-Agent
GeoIP-Country-Code
X-Wix-Viewer-Type
X-Cache-Date
Pramga
X-Request-Start
X-Dispatcher-Server
X-Method
X-NGINX-Cache
X-HostName
X-MSEdge-Flight
X-Fastly-Request-Id
X-Cdn-Origin
X-MSEdge-Features
X-Sn-Servicetimems
X-Amz-Meta-Cb-Modifiedtime
CloudFront-Viewer-Country
X-CSRF-TOKEN
Cf-Ipcountry
Lb
Ssr
Is-Us
X-Vcl-Version
DB-Nickname
X-IP
GeoIP-Latitude
X-Provided-By
W
X-Fastly-Backend-Reqs
X-Cs
CF-Cached-On
X-UnsetCookies
X-COUNTRY
X-APP
X-Lb-Id
X-Cache-Expires
X-Core-Mission
X-Reqid
Sid
X-HS-Status
Server-Id
X-Nc
X-MG-S
X-WA
WP-Super-Cache
X-ServerName
X-Webkit-Csp-Report-Only
Cteonnt-Length
X-Node-Id
X-FORWARDED-FOR
X-CCDN-Origin-Time
X-Hcs-Proxy-Type
X-Region-Sid
X-Check-Cacheable
X-CCDN-CacheTTL
X-Cache-Status-Check
X-Trv-Group
X-ND-Cache
X-VC
X-Sucuri-Cache
X-DynaTrace-JS-Agent
URI
CountryCode
Ohc-Cache-HIT
WZWS-RAY
Env
X-Cache-Backend
X-Via-PopN
X-Via-PopH
X-Via-PopV
X-Moov-Xdn-Version
X-SERVER-NAME
X-Moov-T
X-Pjax-Url
Xc-Version
X-Via-CDN
X-Pf-Uncompressing
Shield-Pop
X-SN
X-Ig-Push-State
User-Agent
X-Pad
Mime-Version
EpKe-Alive
X-ServedByHost
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-Amz-Meta-Opti
X-Acquia-Site
X-RAMCache
X-Edge-POP
FSS-Cache
X-TRACE-ID
X-LiteSpeed-Cache-Control
X-CUA
X-Acquia-Purge-Tags
X-Contensis-Viewer-Groups
X-Fastly-Cache-Hits
X-IN-APIGATEWAYSSL
X-IN-APIGATEWAY
CACHE
X-Varnish-Authentication
X-Cache-ASPX
VivaBuild
X-Dw-Trace-Id
X-SB
Viewtype
Rt-Fastcgi-Cache
X-StackifyID
Xet-Cookie
X-RPM
HIT
On-Server
X-Oss-Server-Time
X-Oss-Storage-Class
X-Parent-Response-Time
X-Oss-Request-Id
X-Oss-Object-Type
X-Dispatch
X-Nginx-Upstream-Cache-Status
X-Oss-Hash-Crc64ecma
X-RSL
Server-Ttl
X-RPS
X-Action
X-Webstats-RespID
X-DI
X-DSS
X-Swift-Error
X-DW
X-Cdn-Request-ID
X-DB
Ohc-Response-Time
Vha6-Origin
X-Cdn-Forward
X-Amzn-Remapped-User-Agent
X-Amzn-Remapped-Host
X-Amzn-Remapped-X-Forwarded-For
X-Env-Sha256-Sig
X-Forwarded-Port
X-Env-Stack-Name
X-Snapshot-Date
X-Ftr-Viewer-Uri
X-TH-Server
Req-ID
X-ElasticPress-Search
Hit
X-Yottaa-OS
ServerName
Content-Script-Type
Content-Style-Type
X-CF-Powered-By
X-MiniProfiler-Ids