Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Cf-Request-Id
CF-Cache-Status
Link
Accept-Ranges
CF-RAY
ETag
X-XSS-Protection
Expect-CT
Pragma
X-Powered-By
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
Alt-Svc
X-UA-Compatible
X-Served-By
X-Xss-Protection
X-Download-Options
X-Request-Id
X-Timer
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
X-Adblock-Key
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-DNS-Prefetch-Control
X-Drupal-Cache
X-Cache-Status
X-Check
X-Generator
X-Cacheable
Timing-Allow-Origin
X-Content-Security-Policy
X-Iinfo
Feature-Policy
Status
X-Envoy-Upstream-Service-Time
Content-Encoding
Access-Control-Expose-Headers
P3p
X-Drupal-Dynamic-Cache
X-AspNetMvc-Version
X-CDN
Upgrade
X-Via
CF-Ray
X-Ws-Request-Id
Access-Control-Max-Age
X-Request-ID
Server-Timing
EagleId
X-Cache-Group
Report-To
X-Turbo-Charged-By
Keep-Alive
X-UA-Device
Request-Context
X-Age
X-Backend
X-Server-Powered-By
X-Proxy-Cache
X-AH-Environment
X-Robots-Tag
X-Hacker
X-Server
X-Amz-Request-Id
Host-Header
X-Amz-Id-2
Grace
X-Rq
X-LiteSpeed-Cache
X-Swift-CacheTime
X-Swift-SaveTime
X-Nginx-Cache-Status
X-Varnish-Cache
Ali-Swift-Global-Savetime
X-WebKit-CSP
NEL
X-Page-Speed
X-Vhost
EagleEye-TraceId
X-Ua-Compatible
X-Amz-Version-Id
X-Pingback
X-OneAgent-JS-Injection
X-Dispatcher
X-Device
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Cache-Spec
X-Host
X-Server-Id
Accept-CH
X-Dns-Prefetch-Control
Cf-Railgun
X-Node
X-Backend-Server
X-Readtime
Surrogate-Control
X-Akam-SW-Version
Request-Id
X-Response-Time
X-HW
Xkey
X-Application-Context
Content-Location
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
Rating
Accept-Ch-Lifetime
X-Country
X-B3-TraceId
X-Cloud-Trace-Context
X-Ruxit-JS-Agent
X-Cache-Lookup
Accept-CH-Lifetime
X-Trace
X-Url
Allow
X-Content-Type
X-Ac
X-PC
X-Vname
X-TtlSet
X-Varnish-TTL
X-Aws-Lambda-Call-Status
X-Clacks-Overhead
Edge-Control
X-Server-Name
X-Mod-Pagespeed
Fastly-Restarts
Cache-Tag
X-ESI
Service-Worker-Allowed
X-FastCGI-Cache
X-Rack-Cache
X-VARITI-CCR
Verso
X-Element-Page-Cache
MS-Author-Via
X-Upstream
X-Vcap-Request-Id
X-MS-InvokeApp
X-Amz-Rid
X-GitHub-Request-Id
Public-Key-Pins
X-Dw-Request-Base-Id
X-Cached
X-Client-IP
X-Abt-Application-Version
X-Cache-TTL
X-D2id
X-Cnection
RTSS
X-Px
X-Exp-Id
X-Cdn-Fetch
X-Exp-Variant
X-Kinja-Build
X-Use-Magma
X-Kinja-Server
X-Kinja-Revision
X-GoogleNews-Bot
X-Kinja
X-Navigation-Version
Arr-Disable-Session-Affinity
X-Country-Code
Access-Control-Request-Method
X-Goog-Hash
X-Powered-By-Plesk
X-NF-Request-ID
X-ORACLE-DMS-RID
X-ORACLE-DMS-ECID
X-Kraken-Loop-Name
X-Instrumentation
X-Server-Lifecycle-Phase
X-TTL
AR-SID
AR-PoweredBy
AR-Request-ID
AR-CACHE
X-Powered-CMS
AR-ATIME
Pagespeed
Display
X-Sol
X-Middleton-Display
X-Version
X-Origin-Cache
X-Middleton-Response
Response
X-LLID
X-MSEdge-Ref
X-Amz-Server-Side-Encryption
Nginx-Cache
TCN
X-Kinsta-Cache
X-Edge-Location-Klb
X-RateLimit-Remaining
X-Edge
MRF-Tech
Mrf-Cache-Status
X-B3-TraceId-Primal
X-Protected-By
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-CST
X-T
X-HP-Trace-Id
X-HP-Webp
X-Jurisdiction
X-Forwarded-For
X-Shield-Request-Id
X-Content-Security-Policy-Report-Only
X-Aspnetmvc-Version
X-Id
X-Mg-S
Accept-Ch
Edge-Cache-Tag
S
Content-MD5
X-Language
SPRequestDuration
SPIisLatency
X-Ruxit-Js-Agent
Fastcgi-Cache
Front-End-Https
X-Mid
Realpath
X-Request-Processing-Time
X-Request-Received
Server-Node
Filters
X-Recruiting
X-Frontend
X-Pinterest-Rid
Pinterest-Version
Pinterest-Generated-By
X-DynaTrace
X-Ua-Browser
X-Ab
X-Content
Server-Name
X-MCACHE
X-Correlation-Id
X-Ser
X-Cache-Key
X-NWS-LOG-UUID
X-HS-Cache-Config
X-HS-Hub-Id
X-HS-Content-Id
X-Yandex-Sdch-Disable
X-Template
X-HS-Combine-CSS
X-Ezoic-Cdn
X-ECACHE
X-SharePointHealthScore
SPRequestGuid
X-Hits
X-Parallel-Accel
X-Ttl
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
MicrosoftSharePointTeamServices
Cache-Tags
Cleartype
X-B3-Sampled
Charset
Host
Alternate-Protocol
X-Page-Id
X-Git-Hash
X-Www-Served-By
X-Geo-Country
X-Content-Options
Fusion-Deployment-Id
Fusion-Source
Fusion-Content-Source
Fusion-Content-Id
X-Debug-Info
Fusion-Template-Id
Fusion-Component-Id
X-Daa-Tunnel
X-DIS-Request-ID
X-Hostname
X-Amzn-Trace-Id
X-Content-Digest
X-Amz-Replication-Status
Cross-Origin-Opener-Policy
X-Varnish-Age
X-Ratelimit-Limit
Filterid
X-AppVersion
X-Activity-Id
X-Az
X-FB-Debug
X-Upgrade-Enabled
X-N
X-F-Cache
X-VCache
ServerID
X-Nginx-Upstream-Cache-Status
X-Grace
X-Accel-Expires
X-Origin-Server
X-Forwarded-Proto
X-Rid
X-WebKit-CSP-Report-Only
X-Mobile-URL
X-Fastly-Request-ID
Access-Control-Allow-Method
X-Is-Crawler
X-Providence-Cookie
X-Route-Name
X-Request-Guid
X-Aspnet-Duration-Ms
X-Flags
X-Server-ID
X-Type
X-DataDome
X-TT
X-App-Environment
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-Seen-By
Viewport
X-LB-Cache
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Whom
X-Goog-Storage-Class
X-Goog-Metageneration
X-Tb
X-FW-Static
X-FW-Type
X-FW-Server
X-FW-Hash
Payment
X-FW-Serve
TP-Cache
TP-L2-Cache
X-Varnish-Grace
X-Distributor
X-FW-Dynamic
Paypal-Debug-Id
DC
Node
X-User-Agent
Accept-Charset
Country
X-App-Server
X-XRDS-LOCATION
X-Wix-Request-Id
X-Fastly-Request-Id
Fastcgi-Useragent
X-Ratelimit-Reset
X-Oneagent-Js-Injection
X-Litespeed-Cache
X-Cache-Rule
X-NGENIX-Cache
X-Cache-Control
X-Fastcgi-Cache
X-Webkit-Csp
X-Origin-Upstream-Status
Version
X-Drupal-Cache-Tags
X-Via-JSL
Referer-Policy
X-Microsite
X-Request-Handler-Origin-Region
X-Cluster-Name
X-Buckets
Amp-Access-Control-Allow-Source-Origin
X-Tec-Api-Root
X-Tec-Api-Origin
X-Cache-Age
X-Tec-Api-Version
X-B-Cache
X-Signature
X-Contextid
X-Logged-In
Cache-Status
X-Oracle-Dms-Ecid
Refresh
X-Oracle-Dms-Rid
X-Node-Name
X-Mobile
X-Browser-Type
X-Response-Served-From
VIX-Pulpo-Upstream-Status
X-Original-Request-Id
X-Erf-Bev-Bev
VIX-Pulpo-Node
SD-X-WS
X-Erf-Bev-Bev-Is-Generated
X-Real-IP
X-Is-Bot
X-Cache-Expired-At
X-Page-View
X-Rendered-As
X-Vgn-Hpd-Reason
X-Revision
X-Debug
X-Varnish-Backend
X-Cacheable-TTL
X-Jobs
NGB
X-B
Access-Control-Request-Headers
X-Load-Cache
X-Proxy-Cache-Status
X-Cache-Action
X-IPLB-Instance
X-UUID
X-ProcessESI
X-Proxy
X-Yottaa-Metrics
X-RemovedCookies
X-Instance
X-Yottaa-Optimizations
Akamai-GRN
X-Rule
X-Drupal-Cache-Contexts
X-Device-Type
Surrogate-Key
X-Debug-IsPreview
X-Debug-IsConnected
X-Cache-Time
X-FW-Version
X-G
X-Framework
CF-IPCountry
SID
X-Accel-Buffering
GEO-INFO
X-XRDS-Location
X-Air-Source
X-Air-Hostname
X-Air-Trace-Id
X-TEC-API-ROOT
X-TEC-API-VERSION
X-TEC-API-ORIGIN
DynaTrace
X-Cache-NGX
X-PressLabs-Stats
X-Nginx-Cache
Count-Hit
X-Azure-Ref
X-APP-VERSION
X-Cache-Operation
X-Presslabs-Stats
Uber-Trace-Id
X-Source
Liferay-Portal
X-Ms-Version
X-Ms-Request-Id
X-RateLimit-Limit
X-Zen-Fury
X-EdgeConnect-Cache-Status
Ms-Operation-Id
X-RTag
MS-CV
X-CDN-Forward
Protected
Frame-Options
Healthy
X-Cache-Hit
X-Mode
Cross-Origin-Window-Policy
X-IPS-LoggedIn
Ec-Rule-Version
X-L-Path
Xserver
X-Environment-Context
X-Tumblr-Pixel-1
X-Cache-TTL-Remaining
X-Hyper-Cache
X-Tumblr-Pixel
X-Varnish-Server
X-Tumblr-User
X-Tumblr-Pixel-0
X-Servername
WPO-Cache-Message
X-Backend-Name
X-Ratelimit-Remaining
WPO-Cache-Status
LB
Backend
Countrycode
X-Adobe-Content
X-Adobe-Loc
X-RN-RSRV
X-Detected-As
X-JoinUs
X-Tid
X-Content-Age
X-SaId
Content-Disposition
Meta-Geo
X-Region
X-UPSTREAM-Address
X-Rewrite-Enabled
X-Sql-Count
X-Sql-Duration-Ms
X-Format
X-Forwarded-Host
X-Sorting-Hat-PodId
X-ShopId
Decoy-Debug-TTL
Eomportal-Instance
Decoy-Debug-Status
Decoy-Debug-Key
Country-Code
Apigw-Requestid
X-ShardId
X-Shopify-Stage
X-Debug-Cache
X-Routing-Service
X-Alternate-Cache-Key
X-Cache-Grace
X-Extlb
X-Sorting-Hat-ShopId
X-Hosted-By
X-Redis-Cache
X-Uri
X-Generation-Time
X-Proxied
X-Zipkin-Id
X-Access
X-PCL
X-ApacheServer
Cache-Name
Url
Fastly-SSL
X-NCache
X-Via-Fastly
X-PHP-Backend
X-Cache-Server
X-Section
X-PERF
X-Microcachable
CDN-EdgeStorageId
X-Site-Version
CDN-CachedAt
X-OCL
CDN-RequestCountryCode
CDN-PullZone
X-Status
CDN-RequestId
CDN-Cache
CDN-Uid
X-FB-TRIP-ID
X-Varnish-Beresp-Grace
X-TIME
X-Human
X-No-Session
X-Origin-Hint
X-Generated-By
Property-Id
X-Proxy-Build
Mn-Server-Ip
X-Origin-Date
X-NYM-Debug-Backend
X-Cache-Type
X-Cache-Host
X-Say-Cacheable
X-Say-TTL
X-Timing-Wait
X-Web-Node
X-SayCDN-TTL
Webcakes-Region
Webcakes-App-Version
TWC-GeoIP-Country
TWC-Device-Class
TWC-Connection-Speed
TWC-GeoIP-LatLong
TWC-Locale-Group
X-Storage
Webcakes-App-Name
TWC-Privacy
X-Pubstack
Selected-Fe
X-Trace-Id
Cache-Tv-Group
Section-Io-Cache
X-Soup
X-R9-Blue-Green-Version
X-Content-Powered-By
X-Akamai-Edgescape
X-BYPASS-REASON
X-UA-Device-Type
X-Varnishpool
X-ProxyCache-Status
X-Cluster-Node
X-Server-W
X-ProxyCache-Key
X-Be
Azure-SiteName
Azure-RegionName
Azure-InstanceId
X-ServerID
Azure-SlotName
Azure-Version
Content-Secure-Policy
X-Ua
X-LSADC-Cache
Retry-After
X-Webkit-CSP
DB-Nickname
X-NewRelic-App-Data
X-Hl-Ver
X-Nginx-Cache-Key
OT-Force-Account-Verify
X-Azure-Ref-OriginShield
X-Cached-By
X-Unique-Id
X-Cache-Remote
X-TT-LOGID
X-Bc-Bl
Source
X-Akamai-Transformed
X-Platform-Server
X-Dc
Cache
X-Auto-Login
X-Xfnlog-Site
SRV
X-GEO
X-EC-Lua
X-LAGOON
X-Cdn
ServedBy
X-Origin-TTL
Upgrade-Insecure-Requests
Mime-Version
X-Cache-Tags
X-Origin-CC
X-Varnish-Cache-Hits
X-SRV
X-Varnish-Hits
HostName
Cache-Hits
From-Origin
X-Loop
X-TNCMS
X-HTML-Minification-Powered-By
X-Request-Time
X-S-Maxage
X-AOL-HN
Onion-Location
X-Varnish-Hostname
X-Request-Host
WP-Super-Cache
Xet-Cookie
X-NWS-UUID-VERIFY
X-CSRF-Token
X-ECache
X-Tumblr-Pixel-3
Web-Mar-Node
X-Tumblr-Pixel-2
Webserver
X-App-Version
N-Cache
X-Cache-Enabled
X-B3-SpanId
X-Endurance-Cache-Level
X-Handled-By
X-FireWall-Port
X-Time
X-Correlation-ID
X-Tenant
Nel
X-Proto
X-Origin-Response-Time
X-Amz-Meta-S3cmd-Attrs
Fastcgi-X-Cache-Version
X-S-Cookie
X-Vtex-Processado-Em
Expiry
X-S
X-Vtex-Remote-Cache
Meta-Geo-Continent
Pramga
Redirect-Candidate
X-Processor
Odigeo-Trace-Id
X-Rojux
DCR-Processing-Time-Ms
Mobile-Detection-Method
Xc-Version
X-VG-WebCache
X-SRCache-Key
X-Slack-Backend
Rendered-Blocks
X-RCS-CacheZone
X-Adobe-Source
X-TIM-N
X-V-Cache
A
BehaviorPad-Version
X-Vdms-Version
X-SD-PageType
DCR-Decision-By
X-Session-Fingerprint
X-Shop-Environment
X-Vdms-Path
X-ScT
X-Planisys-CDN-Cache
X-NAPM-TraceId
X-Ig-Push-State
X-Cluster
X-Hnp-Log
X-CF-Lambda-Version
X-ND-Cache
X-PAYTM-SRV-ID
X-CF-Lambda-Fn
X-Orig-Expires
X-Conf
X-GG-Cache-Date
X-D
X-Epic-Correlation-Id
X-Developer
X-Connection-Hash
X-External-Request-Id
X-Gen-Mode
X-Ftr-Request-Id
X-Forwarded-Path
X-Cache-NE
X-Block-Status
X-Destination
Vix-Hermes-Req-Id
X-A
X-PBS-Appsvrname
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
Surrogated-Key
User-Cache-Control
V-Age
X-A-Ccd
X-A-Dam
X-ARC
X-B-Cookie
X-Backend-TTL
X-Application
X-Aed
X-A-Dcw
X-A-Dgt
X-A-Wwc
Sslversion
X-Ckpd-Fst-Backend
X-Time-Microsecs
S-Rt
X-Reqid
X-Mg-Request-UUID
X-AWS-Id
X-LJ-Flow-ID
X-VWS-Id
X-Edge-Location
X-Nyt-Route
X-LI-UUID
Host-ID
X-NodeID
X-Men
X-Location
X-Old-Content-Length
X-Origin-Time
Cmstype
Cmsid
CDCHOST
X-Rocket-Nginx-Serving-Static
X-Request-URI
DSUID
X-Li-Pop
Wxu-Next-Region
X-Proxy-Upstream
X-Origin
X-GeoIP-Region-Code
X-Cache-Date
True-Client-Country-4JS
Svr
X-Cache-Bucket
X-Aicache-OS
Wxu-Next-Hostname
Wxu-Next-Commit
X-Accel-Expires-Debug
X-Cache-Info
State
X-Geo-Header
X-GeoIP-Country-Code
Origin
X-Gdpr
X-Forwarded-Site
X-Cdn-Srv
X-Date
X-Fastly-Cache
X-Li-Fabric
Fastcgi-Cache-TTL
X-VG-TLSProxy
X-Server-IP
X-Origin-Expires
X-Http-Reason
X-Sucuri-Cache
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-Sucuri-ID
Apple-News-Services-Handled
AKAMAI
X-Webstats-RespID
Apple-News-Services-Request-Url
Arc-Country
X-Scheme
X-Viewer-Country
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
X-Magnolia-Registration
X-Cache-Var
X-Via-NSCOPI
X-Amz-Apigw-Id
X-MP-GENERATED-AT
X-Amzn-RequestId
Environment
X-Cache-Var-Map
CloudFront-Viewer-Country
X-Labrador-Cache-Channel
X-Akamai-Request-ID2
X-PHP-Host
Origin-CC
Origin-EX
X-Envoy-Decorator-Operation
X-Developers
X-Core-Value
X-Fetched-On
X-VServer
X-Backend-State
X-Cdn-Origin
X-Fastly-Backend
X-Sn-Servicetimems
X-BBC-Edge-Cache-Status
X-GeoIP-City
X-Cache-Id
X-Core-Mission
X-Cache-Debug
X-Device-Os
X-Esi-Check
Traceparent
X-Gzip
X-Skip-Cache
X-Mvc-Supplant-Cachable
X-Storefront-Renderer-Rendered
X-Locale
X-Served-From
X-Owner
X-Region-Sid
X-RateLimit-Remaining-Second
X-RateLimit-Limit-Second
X-Policy
X-Level-Front-Cache
X-HS-Content-Campaign-Id
X-Varnish-Beresp-Status
X-VarnishDD-TTL
X-Generated-On
X-Gamma-Serve
X-UnsetCookies
X-TrackingId
X-HN
X-TH-Server
X-Hash
Locid
X-Req
X-Varnish-Beresp-Ttl
Fastly-GeoIP-CountryCode
L
CacheControlHeader
Server-Info
Req-Svc-Chain
Fastly-Drupal-Html
Machine
Gh-Request-Id
Server-Host
Web-Mar-Region
PFcat
Release
X-Xrds-Location
X-Tx-Id
X-Sigma-Backend
X-Irp-Debug
TDXMobile
Thinkindot-CacheControl
X-Sigma
X-Rocket-Build-Number
HA-Ipaddr
Mail-Subject
L5d-Success-Class
Ha-Gx-Prefs
Thinkindot-CacheControl-Type
Magicmarker
X-Pod-Name
X-Platform
NGX
X-GeoIP
X-Qloud-Router
X-Rebelmouse-Cache-Control
X-NU-AKA-ACS-Version
X-Loc
X-JWT-State
X-Rebelmouse-Surrogate-Control
X-Restarts
X-Varnish-Remaining-TTL
X-Worker
X-Varnish-CookieINHashed-On
X-Varnish-CookieHashed-On
X-Variation
X-Is-Gdpr
X-Has-Esi
Cf-Device-Type
Fastly-SIE
Adler-Geo
X-Thinkindot-L3
X-Node-Id
Fastly-SWR
Is-Eu
X-DPWN-IS-SECURE
X-DefHash
X-DefElseHash
Platform
X-ATG-Version
Thinkindot-Control
X-Datadog-Parent-Id
X-Datadog-Sampling-Priority
X-Amzn-Remapped-Content-Length
X-Csrf-Jwt
X-Branch-Name
X-CGP
Ssr
We-Hiring
X-Datadog-Trace-Id
X-Eu-Site
X-Ua-Device
X-CS
X-Trace-ID
X-Response-By
Memcached
X-FC-Vary-Parameters
NM-Fastcgi-Cache
AMP-Access-Control-Allow-Source-Origin
X-VC-Cache
X-Request-Start
X-Zone
Kp-EeAlive
Edge-Cache
X-Bip
X-M-Log
X-Qnm-Cache
X-Cache-Backend
X-Esi
X-Wix-Viewer-Type
X-Up
X-NC
X-Thanos
CDN
X-RPS
X-M-Reqid
X-DW
X-Action
X-RPM
X-DB
X-DSS
X-RSL
X-DI
X-API-Version
Accept-Language
X-Mvc-Supplant-OutputCached
X-LB-ID
Ms-Author-Via
X-TraceId
X-LB-NoCache
Pics-Label
X-Tb-Optimization-Total-Bytes-Saved
Env
X-Cache-Config
X-Generated-In
X-Optimistic-Header
X-Minions-Version
X-Srv
X-Via-Poph
Time
Memory
X-DC
X-Varnish-Ttl
X-CacheTTL
X-Via-Popv
X-Refresh
WebServer
X-Via-Popn
Datacenter
Locale
X-Urbn-Site-Id
X-Urbn-Context-Path
X-Tt-Logid
X-Edge-Pop
X-HA-Backend
NtCoent-Length
Candidate-Md5Url
GeoIp-Country-Code
X-CACHE-KEY
X-Datadome
X-ZONE
X-Ec-Fail
X-Ec-GeoHdr
Server-ID
X-TA-CDN-Provider
X-Servedbyhost
X-User
X-DynaTrace-JS-Agent
X-Parent-Response-Time
X-MSEdge-Features
X-Vc
X-MSEdge-Flight
WWW-Authenticate
On-Server
X-CLOUD-TRACE-CONTEXT
X-Cs
Esi-Enabled
X-TX-ID
X-Unique-ID
X-Varnish-Beresp-TTL
X-AK-Request-ID
Cdncip
Cdnsip
X-VCL-Version
X-Service
X-Fpc
My-App
X-LI-Proto
X-Cache-PHP
X-WADP-Cache
X-Traceid
X-Fmm-Version
C-Via
X-App
Cluster
X-Cache-Ttl
X-Clara-WADP
X-URL
X-Dynatrace
X-Newrelic-Synthetics
Tracecode
Geoip-Latitude
X-Li-Proto
X-Webkit-Csp-Report-Only
X-Var-Ttl
X-CUA
X-Pass-Why
X-B3-Spanid
Test
T-Server
X-From
X-FPC
Lfy
X-Webkit-CSP-Report-Only
X-NODE
Proxy-Connection
Cf-Int-Pingora-Origin-Digest
X-Cache-Status-Check
Lang
X-Vcl-Version
X-Fragments
X-Render-Time
DataCenter
Fastly-Drupal-HTML
X-VC
X-LiteSpeed-Cache-Control
X-Mcache
Geo-Info
X-CSRF-TOKEN
Target-Params
M-TraceId
Resin-Trace
Server-Id
X-WP-CF-Super-Cache
X-WP-CF-Super-Cache-Cache-Control
X-RAMCache
X-Provided-By
X-Ha-Backend
X-ID
Hostname
MIME-Version
Permissions-Policy
X-Edge-POP
X-Httpd
X-Proxy-Cache-Info
X-ServedByHost
Hit
X-Clientip
GeoIP-Country-Code
X-Dynatrace-Js-Agent
X-Geo
X-Via-PopN
WZWS-RAY
X-Via-PopV
Servername
X-Oss-Storage-Class
Cache-Host
X-Oss-Object-Type
X-Oss-Hash-Crc64ecma
HIT
Producers
X-Oss-Request-Id
X-Cdn-Forward
X-Via-PopH
UCS
X-Oss-Server-Time
X-Pad
X-LiteSpeed-Tag
X-AIR-PT
X-Info
X-SB
X-NGINX-Cache
Section-Io-Origin-Time-Seconds
S-Cnection
X-Api-Version
Section-Origin-Responded
ENV
X-Check-Cacheable
X-Edge-Cache
FSS-Cache
X-Fastly-Backend-Reqs
Section-Io-Id
Section-Io-Origin-Status
X-Udemy-Cache-App-Namespace
X-ElasticPress-Query
X-Ucs
Ohc-File-Size
X-Pool
X-Platform-Router
X-Platform-Processor
X-Platform-Cluster
X-Cache-CFC
Fastly-Backend-Name
X-Acquia-Application-Trace
X-Ec-Custom-Error
X-Micro-Cache
Uri
X-GoCache-CacheStatus
User-Agent
PICS-Label
X-Acquia-Purge-Tags
X-HS-Status
X-Lb-Nocache
X-Acquia-Site
ServerName
X-BBC-Origin-Response-Status
URI
X-Acquia-Application-UUID
X-UP
X-Scale
X-Srcache-Fetch-Status
X-Srcache-Store-Status
X-Release
Cneonction
X-SIPLIST1
Server-Ext
X-RateLimit-Reset
X-ServerName
Tcn
Server-Ttl
Load-Balancing
Cteonnt-Length
X-Lb-Id
IsBot
MD5-Digest
Sever-Int
X-Fastly-Cache-Hits
Server-Hostname
X-Swift-Error
X-Cdn-Request-ID
X-Cache-Expires
X-Nc
X-Dispatcher-Number
X-Backend-Host
X-Dw-Trace-Id
X-Akamai-ERPolicy
X-Akamai-ERRuleID
X-Cache-ASPX
X-Snapshot-Date
X-Newrelic-App-Data
X-Vcache
Vha6-Origin
EpKe-Alive
X-Contensis-Viewer-Groups
X-Via-Ucdn
X-TRACE-ID
Cf-Ipcountry
Shield-Pop
Wpo-Cache-Status
Wpo-Cache-Message
X-BCube-Filmed-By
X-APP
X-Yottaa-OS
CF-Cached-On
X-B3-ParentSpanId
Sid
X-Cache-Ngx
Cdn
X-Air-Pt
X-HostName
X-Litespeed-Cache-Control
GeoIP-Latitude
X-B3-Parentspanid
X-Shopify-Generated-Cart-Token
X-IN-APIGATEWAYSSL
X-IN-APIGATEWAY
X-Apw-Hits
X-Apw-Access-Token
X-Logging-Id
X-CacheKey
X-UA
X-Apw-Access-Object
X-Apw-Access-Action
Path
Ohc-Cache-HIT
X-Varnish-Authentication
X-Akamai-Pragma-Client-IP
Req-ID
X-Te-Count
X-Te-Duration-Ms
X-Last-Modified
X-Http-Duration-Ms
X-Http-Count
CountryCode
X-Sentry-ID
Ngx
X-Akamai-Request-ID