Threat Level: green Handler on Duty: Jan Kopriva

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
X-Powered-By
Pragma
CF-Cache-Status
Link
ETag
Expect-CT
Via
X-XSS-Protection
Age
X-Cache
CF-RAY
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-Cache-Hits
X-Xss-Protection
X-Amz-Cf-Pop
Referrer-Policy
X-Amz-Cf-Id
CF-Ray
X-UA-Compatible
X-Served-By
X-Request-Id
Alt-Svc
X-Varnish
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Download-Options
X-AspNet-Version
Access-Control-Allow-Credentials
X-Runtime
X-FRAME-OPTIONS
X-Drupal-Cache
X-Check
X-Adblock-Key
Content-Security-Policy-Report-Only
X-DNS-Prefetch-Control
X-Cacheable
X-Permitted-Cross-Domain-Policies
X-Cache-Status
X-Generator
Timing-Allow-Origin
X-Iinfo
X-Template
X-Language
X-AspNetMvc-Version
Status
Upgrade
X-CDN
X-Ua-Compatible
X-Content-Security-Policy
Content-Encoding
X-Buckets
Access-Control-Expose-Headers
P3p
Access-Control-Max-Age
X-Kinja-Server-Push
X-Via
Keep-Alive
X-Turbo-Charged-By
X-AH-Environment
X-Drupal-Dynamic-Cache
X-Pass-Why
X-Envoy-Upstream-Service-Time
X-Cache-Group
X-Server
X-Ws-Request-Id
X-Backend
X-Age
EagleId
X-Proxy-Cache
X-Amz-Request-Id
X-Amz-Id-2
Xkey
X-Robots-Tag
X-Page-Speed
X-Hacker
X-Pingback
X-Server-Powered-By
Server-Timing
X-Swift-CacheTime
X-Swift-SaveTime
Feature-Policy
Ali-Swift-Global-Savetime
Request-Context
X-Nginx-Cache-Status
X-Varnish-Cache
Grace
X-UA-Device
X-Request-ID
X-Amz-Version-Id
Cf-Railgun
Report-To
X-LiteSpeed-Cache
X-OneAgent-JS-Injection
X-Rq
X-Device
X-Server-Id
X-Pantheon-Styx-Hostname
X-Origin-Cache
X-Styx-Req-Id
EagleEye-TraceId
X-Host
X-Backend-Server
X-Node
X-Vhost
X-Response-Time
NEL
X-Ac
X-Dispatcher
X-Cache-Lookup
X-Readtime
Surrogate-Control
X-Origin-Upstream-Status
X-WebKit-CSP
Content-Location
Request-Id
X-Ruxit-JS-Agent
X-Application-Context
Fusion-Component-Id
Fusion-Source
Fusion-Template-Id
Fusion-Content-Id
Fusion-Content-Source
X-HW
X-Cnection
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-Country
X-Cloud-Trace-Context
X-Mod-Pagespeed
X-DataDome
X-Akam-SW-Version
X-Rack-Cache
X-Url
Edge-Control
Rating
X-Clacks-Overhead
RTSS
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-FTR-Request-ID
X-PC
X-TtlSet
X-Goog-Hash
X-Vname
Allow
X-DynaTrace
X-Instart-Request-ID
X-Country-Code
Content-MD5
X-ASPNET-VERSION
Service-Worker-Allowed
Verso
X-GitHub-Request-Id
X-Varnish-TTL
X-Webkit-Csp
X-ESI
X-Server-Name
Pinterest-Generated-By
X-D2id
X-Exp-Id
X-Exp-Variant
X-GoogleNews-Bot
X-Kinja
X-Kinja-Build
X-Kinja-Revision
X-Kinja-Server
X-Use-Magma
X-Cdn-Fetch
X-MS-InvokeApp
X-Vcache
SPRequestGuid
X-Powered-By-Plesk
X-Navigation-Version
X-Cached
X-B3-TraceId
X-Amz-Server-Side-Encryption
X-Forwarded-Proto
X-Debug
X-Abt-Application-Version
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Amz-Rid
X-Trace
X-Fastly-Request-ID
X-MSEdge-Ref
Public-Key-Pins
X-SharePointHealthScore
Nginx-Cache
X-Vcap-Request-Id
X-VARITI-CCR
MS-Author-Via
X-Fastcgi-Cache
X-Server-ID
Accept-Ch
Charset
TCN
Arr-Disable-Session-Affinity
X-Px
X-NF-Request-ID
X-Cache-TTL
X-Accel-Expires
X-Ttl
Edge-Cache-Tag
Display
X-Middleton-Response
X-Middleton-Display
Pagespeed
Response
Realpath
SPRequestDuration
SPIisLatency
Accept-CH
Fusion-Deployment-Id
X-Sol
X-Content-Type
X-Version
X-Ser
X-Client-IP
Accept-Ch-Lifetime
Cache-Tag
X-SRCache-Fetch-Status
X-SRCache-Store-Status
AR-PoweredBy
AR-Request-ID
AR-ATIME
X-DynaTrace-JS-Agent
X-Pinterest-Rid
Pinterest-Version
Front-End-Https
X-Powered-CMS
Access-Control-Request-Method
X-Id
NR-ENABLED
Accept-CH-Lifetime
X-Hp-Webp
X-Jurisdiction
X-B3-TraceId-Primal
X-Grace
Mrf-Cache-Status
X-Mrf-Item-Lastmod
X-Mrf-Section-Lastmod
MRF-Tech
X-Upstream
X-Forwarded-For
Ar-Sid
AR-CACHE
X-Dns-Prefetch-Control
X-T
X-Content-Digest
X-Hits
X-Amz-Meta-S3cmd-Attrs
X-Element-Page-Cache
S
DynaTrace
X-Dw-Request-Base-Id
Fastcgi-Cache
ServerID
X-Mobile-URL
X-Node-Name
PB-RID
X-Amzn-Trace-Id
PB-PID
X-FTR-Backend-Server
X-FTR-Cache-Status
X-Country-Code-Real
X-FTR-Realm
X-FTR-DC
X-FTR-Backend
X-FTR-Balancer
X-XRDS-LOCATION
X-Cache-Hit
X-TTL
X-Recruiting
X-Goog-Metageneration
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Storage-Class
X-Mobile-Rewrite
Arc-Version
Powered
X-HS-Hub-Id
X-HS-Content-Id
X-HS-Cache-Config
Server-Node
X-FTR-Expires
X-Frontend
X-Shard
X-Ezoic-Cdn
TP-L2-Cache
X-Shield-Request-Id
TP-Cache
X-DIS-Request-ID
AMP-Access-Control-Allow-Source-Origin
Fastly-Restarts
X-NWS-LOG-UUID
Upgrade-Insecure-Requests
X-Request-Processing-Time
X-Request-Received
X-HS-Combine-CSS
Alternate-Protocol
Refresh
X-Logged-In
X-Varnish-Age
WPE-Backend
X-Correlation-Id
X-Request-Handler-Origin-Region
X-Microsite
Server-Name
X-FTR-Cache-Host
MicrosoftSharePointTeamServices
X-B
X-Page-Id
X-Content-Security-Policy-Report-Only
X-LB-Cache
X-Akamai-Edgescape
X-F-Cache
Backend-Timing
X-ATS-Timestamp
X-Rid
X-User-Agent
X-Geo-Country
X-N
X-Via-JSL
Host
X-Zen-Fury
Cache-Status
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-ORACLE-APMCS-REQUEST-ID
Host-Header
X-Origin-Server
X-ORACLE-APMCS-TAG
X-Content-Options
X-Varnish-Grace
X-Kinsta-Cache
X-Revision
X-B3-Sampled
X-Amz-Apigw-Id
X-AOL-HN
X-Amz-Replication-Status
X-ATG-Version
X-TT
X-Jobs
Actual-Object-TTL
X-Tumblr-Pixel
X-Instance
X-Tumblr-Pixel-0
X-Type
X-WebKit-CSP-Report-Only
X-XRDS-Location
X-App-Environment
X-Tumblr-User
X-FB-Debug
Paypal-Debug-Id
Access-Control-Allow-Method
X-Request-Guid
X-Cache-Action
X-Signature
X-B-Cache
X-Git-Hash
X-Varnish-Backend
X-Content-Powered-By
Fastcgi-Useragent
X-Debug-Info
Liferay-Portal
Frame-Options
Healthy
X-Whom
Section-Io-Cache
X-Srv
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-Cache-Key
X-Cluster
X-Cached-By
X-Seen-By
X-Daa-Tunnel
X-Cache-Rule
X-Hostname
X-Az
X-PHP-Backend
X-AppVersion
X-Activity-Id
X-Cache-Operation
X-CST
X-Framework
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-FireWall-Port
X-Cache-Age
Tracecode
X-WA-Info
X-Contextid
X-Endurance-Cache-Level
X-Mobile
X-Presslabs-Stats
X-Amzn-Requestid
Retry-After
X-IPLB-Instance
Xserver
X-Host-Name
Source
NGB
X-Accel-Buffering
X-Response-Served-From
Accept-Charset
X-ProcessESI
X-Upgrade-Enabled
X-RemovedCookies
DC
Eomportal-Instance
Surrogate-Key
X-Adobe-Content
X-Adobe-Loc
X-Cache-NE
Filters
Payment
X-FW-Serve
X-Region
X-L-Path
X-Rendered-As
X-Tumblr-Pixel-1
X-Tumblr-Pixel-2
X-GeoIP
X-FW-Type
X-Environment-Context
X-FW-Hash
X-FW-Server
X-FW-Static
X-Varnish-Hostname
X-Is-Bot
X-Handled-By
X-Origin-Response-Time
X-Cacheable-TTL
X-Varnish-Server
X-UUID
Srv
X-RequestSource
Trailer
X-EdgeConnect-Cache-Status
X-UA-Device-Type
From-Origin
X-Cache-2
Server-Info
X-Cache-TTL-Remaining
X-Backend-Name
X-Proxy
X-Time-Microsecs
X-APP-VERSION
Cache-Tv-Group
X-Wix-Request-Id
X-Edge-O15-RID
X-Cache-Server
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
MS-CV
X-Oss-Object-Type
X-Oss-Storage-Class
X-Oss-Server-Time
X-Oss-Request-Id
X-RateLimit-Remaining
X-Oss-Hash-Crc64ecma
X-FastCGI-Cache
X-Akamai-Transformed
X-Dc
X-Cache-Enabled
Version
X-NGENIX-Cache
Datacenter
X-Status
X-Unique-Id
X-TIME
X-Mode
X-IPS-LoggedIn
GEO-INFO
S-Cnection
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-RN-RSRV
FilterID
X-Path-Route
X-CCM
Meta-Geo
X-ES-SERVER
X-Cache-Var-Map
X-Cache-Var
X-TX-ID
Decoy-Debug-Status
X-Pad
Cache-Tags
X-Hl-Ver
X-Cache-Time
X-Forwarded-Host
X-Cache-Status-Check
X-NewRelic-App-Data
Decoy-Debug-Key
Country
Cleartype
X-Redis-Cache
Decoy-Debug-TTL
X-Via-Fastly
ServedBy
X-R9-Blue-Green-Version
X-PERF
X-ApacheServer
X-Debug-Cache
OT-Force-Account-Verify
X-Hosted-By
Now
Akamai-GRN
Origin-Cache-Control
Origin-Edge-Control
X-Varnish-Hits
X-FW-Dynamic
X-Proto
X-Akamai-Request-ID2
X-Cache-Control
X-FC-Vary-Parameters
X-Alternate-Cache-Key
X-LJ-Flow-ID
X-Device-Type
X-Goog-Meta-Goog-Reserved-File-Mtime
X-EIG-Tracking-Id
X-Vgn-Hpd-Reason
X-Tb
X-Pubstack
NGX
X-ServerID
X-Shopify-Generated-Cart-Token
X-ShardId
X-Origin
X-ShopId
X-Shopify-Stage
X-VWS-Id
X-AWS-Id
X-Sorting-Hat-ShopId
DB-Nickname
X-Sorting-Hat-PodId
Content-Disposition
X-Cache-Config
Webserver
Cross-Origin-Window-Policy
X-Access
Cache-Key
X-Format
X-BYPASS-REASON
X-Detected-As
X-Amzn-Remapped-Content-Length
Mn-Server-Ip
Ec-Rule-Version
Selected-Fe
X-IP
X-Section
X-Site-Version
X-Viewer-Country
X-Soup
X-Web-Node
X-Www-Served-By
X-Generated
X-Zipkin-Id
X-NCache
X-ProxyCache-Status
X-Origin-Hint
Webcakes-App-Name
TWC-Privacy
X-Proxied
X-Proxy-Cache-Status
TWC-Locale-Group
X-ProxyCache-Key
Webcakes-Region
Webcakes-App-Version
TWC-Connection-Speed
Property-Id
TWC-GeoIP-LatLong
X-Human
X-Proxy-Build
X-Say-TTL
X-TNCMS
X-SayCDN-TTL
TWC-Device-Class
TWC-GeoIP-Country
X-Timing-Wait
X-Loop
X-Routing-Service
X-Locale
X-SaId
X-JoinUs
X-Say-Cacheable
X-FB-TRIP-ID
X-Generated-By
X-RCS-CacheZone
X-NYM-Debug-Backend
X-MP-GENERATED-AT
X-Content-Age
X-Akamai-Request-ID
X-Xfnlog-Site
S-Rt
Azure-SlotName
Azure-RegionName
Azure-Version
X-Ua-Device
X-SS-Set-Cookie
Azure-SiteName
Filterid
Azure-InstanceId
X-BCube-Filmed-By
X-Request-Time
Access-Control-Request-Headers
X-HTML-Minification-Powered-By
X-Real-IP
X-Geo
X-Cache-Remote
Node
Cache-Hits
Section-Io-Origin-Status
Section-Origin-Responded
Section-Io-Id
X-Amzn-RequestId
Section-Io-Origin-Time-Seconds
X-App-Server
X-EC-Lua
X-B3-Traceid
Accept-Language
Nel
X-Drupal-Cache-Tags
X-Adobe-Source
X-No-Session
X-Uri
X-PressLabs-Stats
X-Rule
X-Microcachable
Odigeo-Trace-Id
X-OCL
X-PCL
X-CACHE-KEY
Cf-Ipcountry
X-UA
X-Qloud-Router
X-RTag
X-NWS-UUID-VERIFY
Ms-Operation-Id
X-Varnish-Ttl
Time
X-Varnish-Cache-Hits
X-Source
X-From
X-Azure-Ref
X-Hyper-Cache
X-Esi
User-Agent
X-Nc
X-Info
X-Labrador-Cache-Channel
X-PHP-Host
Proxy-Connection
X-Cache-NGX
X-Time
X-Storage
X-Load-Cache
X-Cluster-Node
X-Old-Content-Length
X-GoCache-CacheStatus
X-RateLimit-Limit
X-CF-Powered-By
X-Nginx-Cache
X-DPWN-IS-SECURE
True-Client-Country-4JS
X-B-Cookie
X-Processor
X-PAYTM-SRV-ID
X-OVcl-Cache
X-Drupal-Cache-Contexts
X-Application
X-OVcl
X-Region-Sid
X-ARC
X-Request-URI
X-Rojux
X-Varnish-Beresp-Grace
X-S
X-S-Cookie
MD5-Digest
X-Varnish-Beresp-Status
Machine
X-External-Request-Id
X-Request-UUID
X-Rewrite-Enabled
ServerName
T-Server
Cache-Name
X-A-Wwc
X-A-Dgt
X-G
X-Accel-Expires-Debug
X-Aed
Content-Script-Type
Content-Style-Type
X-A
Fastcgi-X-Cache-Version
X-A-Ccd
X-A-Dam
X-A-Dcw
VivaBuild
BehaviorPad-Version
Viewtype
GEO-REGION-INFO
A
X-Cache-Grace
Uber-Trace-Id
Apple-News-Services-Handled
Apple-News-Services-Host
AsisCache
Arc-Country
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
X-ScT
Xc-Version
X-Transaction
X-Trv-Group
X-UnsetCookies
Request-Country
Request-EU
X-Connection-Hash
Mobile-Detection-Method
X-SRCache-Key
X-Developer
X-Vtex-Remote-Cache
X-TA-CDN-Provider
X-VG-WebServer
X-GeoIP-Country-Code
X-Twitter-Response-Tags
Powered-By-ChinaCache
Rendered-Blocks
X-Destination
X-Date
X-VG-WebCache
X-D
X-Vdms-Version
X-CF-Lambda-Version
X-Vtex-Processado-Em
X-Cdn-Srv
X-Session-Fingerprint
X-Magnolia-Registration
Meta-Geo-Continent
X-CF-Lambda-Fn
X-Backend-TTL
X-Cluster-Name
Rt-Fastcgi-Cache
PFcat
X-Core-Value
X-Geo-Header
X-Rocket-Nginx-Bypass
Viewport
X-Level-Front-Cache
X-VG-TLSProxy
X-Served-From
X-Matched-Rule
X-CS
X-Newrelic-Synthetics
X-GeoIP-City
X-Service
Server-Host
X-Trafficlayer-App-Version
X-Edge-Location
X-Reboot
X-Sn-Servicetimems
X-Trafficlayer-App-Scope
Thinkindot-Control
Thinkindot-CacheControl-Type
X-IN-APIGATEWAYSSL
Thinkindot-CacheControl
X-IN-APIGATEWAY
X-Cache-Expired-At
X-Cdn-Origin
X-Thinkindot-L3
X-Trafficlayer-App-Name
X-ServiceProvider
X-Generated-On
X-Ratelimit-Remaining
Server-Surrogate-Control
V-Age
RNT-Machine
RNT-Time
User-Cache-Control
W
X-Gamma-Serve
Server-ID
X-Generated-In
We-Hiring
X-Gen-Mode
Server-Cache-Control
X-Backend-State
X-Cache-Info
X-Cache-URL
X-CGP
X-Cache-FS-Status
X-Developers
X-C
X-Cache-ASPX
X-Cache-Bucket
X-Clara-WADP
X-Cms-Context
X-Debug-Cache-Fetch
X-Debug-Cache-Store
X-Debug-Cookies
X-Debug-Cache-Expiry
X-CUA
X-Contensis-Viewer-Groups
X-Core-Mission
X-Block-Status
X-Bip
X-Fastly-Cache
X-Eu-Site
X-App-Name
X-Fetched-On
X-Agile-Id
X-FW-Version
X-Agile
X-Agile-Age
X-Auto-Login
X-Generation-Time
X-Dispatcher-Server
X-Dispatch
X-Device-Os
X-Distil-CS
X-Distributor
X-BBXSRF
X-Bc-Bl
Web-Mar-Node
X-Li-Fabric
X-Rocket-Build-Number
X-Request-Host
X-RateLimit-Remaining-Second
X-Varnish-Beresp-Ttl
X-Wikidot-Static-Cache
X-WebServer
X-Webstats-RespID
X-Wikidot-Backend
X-RateLimit-Limit-Second
X-Proxy-Upstream
X-Debug-Log
X-NX-Host
X-NodeID
Pramga
X-Origin-Expires
Mime-Version
X-Owner
X-Server-W
X-WADP-Cache
X-Tumblr-Pixel-3
X-TT-TIMESTAMP
X-BACKEND-TTL
X-VC-Cache
X-Varnish-Cacheable
X-Urbn-Site-Id
X-Urbn-Context-Path
X-Varnish-Authentication
X-VServer
X-TrackingId
X-SIPLIST1
X-Sigma-Backend
X-Sigma
X-Slack-Backend
X-Swa-Ws
X-Trace-Id
X-Thanos
AKAMAI
X-Origin-Date
HA-Ipaddr
Heartbleed
X-Instart-Isnd
IsBot
Ha-Gx-Prefs
Group
X-JWT-State
X-Is-Gdpr
X-Irp-Debug
Gh-Request-Id
Kp-EeAlive
L5d-Success-Class
N-Cache
On-Server
X-Hash
X-Has-Esi
Memcached
Mail-Subject
Locale
Locid
X-Hnp-Log
Cache-Host
X-LAGOON
X-Ms-Request-Id
X-Ms-Version
X-LI-Proto
X-Micro-Cache
X-Logging-Id
X-LI-UUID
Country-Code
X-Li-Pop
X-Nginx-Cache-Key
CDCHOST
X-ND-Cache
X-S-Maxage
X-Epic-Correlation-Id
X-Variation
X-Platform-Server
X-Hit
X-Req
X-Skip-Cache
Wxu-Next-Hostname
X-DevSite-Last-Modified
Wxu-Next-Commit
X-Lb-Id
FNAC-ModuleRouting
Wxu-Next-Region
X-We-Are-Hiring
X-Backend-Host
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Servername
X-Var-Ttl
X-Cache-Tags
Countrycode
Cloudfront-Viewer-Country
Adler-Geo
Fastly-Drupal-HTML
Fastly-SIE
Is-Eu
Fastly-SWR
Platform
HitType
X-Clientip
X-Node-Id
X-Sucuri-ID
Cache-Cookie-Set-From
Cache-Cookie-Set-Idcheck
Environment
Geo-Info
Cache-Cookie-Set-Lfrom
X-Response-By
X-VHOST
X-Fmm-Version
X-VCT
Hostname
X-RESPONSE-TIME
X-Cdn-Forward
X-NC
X-Refresh
X-Scheme
X-CLOUD-TRACE-CONTEXT
X-Parent-Response-Time
Cache
X-B3-Spanid
X-Pjax-Url
X-CSRF-Token
X-Origin-TTL
X-Origin-CC
Fastly-Backend-Name
X-VCache
X-SN
X-Varnish-URL
X-Up
X-APP
X-Instart-Info
SD-X-WS
Geoip-Latitude
Geoip-City
Origin
X-Server-Time
X-Edge
Proxy-Firewall
X-MCACHE
X-FPC
X-App-Version
X-CDN-Forward
M-TraceId
X-Correlation-ID
Vix-Hermes-Req-Id
Pragrma
Cdn-Host
X-TT-LOGID
PICS-Label
X-Edge-Server
X-MSEdge-Features
Cdn-Request-Time
GeoIp-Country-Code
X-MSEdge-Flight
Request-Time
X-Cache-PHP
X-Vcl-Version
TTL
X-CSRF-TOKEN
X-ECache
Cdnsip
X-Wix-Viewer-Type
X-AK-Request-ID
X-Vdms-Path
CF-Cached-On
Cdncip
CACHE
NM-Fastcgi-Cache
X-Cache-Host
X-Be
X-HS-Status
X-SVT-ORM-VERSION
X-Wa
X-SVT-ORM-RULES
X-Ratelimit-Limit
Ohc-File-Size
X-Mid
NtCoent-Length
Sever-Int
Pagetype
X-NU-AKA-ACS-Version
Server-Ext
Server-Hostname
X-Air-Hostname
X-URL
X-ECACHE
X-ServedByHost
Cdn
X-Myra-Origin2
HostName
SRV
X-Ua
X-Pf-Uncompressing
RequestId
Magicmarker
Resin-Trace
X-Method
X-Zone
Memory
X-Cache-Debug
X-Bc
X-Cache-Metadata
X-TH-Server
Cteonnt-Length
Ohc-Cache-HIT
X-Via-PopV
X-Via-PopH
X-Worker
Tcn
X-BC
X-ZONE
X-Newrelic-App-Data
X-Swift-Error
X-Dynatrace-Js-Agent
X-FORWARDED-FOR
X-Branch-Name
Release
X-Referer
X-Oneagent-Js-Injection
X-Protected-By
X-Request-Start
X-Envoy-Upstream-Healthchecked-Cluster
IBM-Web2-Location
X-NGINX-Cache
X-GEO
Dnion-Transfer-Encoding
X-Azure-Ref-OriginShield
X-Policy
Dt-Cache-Category
X-Servedbyhost
Server-Int
Load-Balancing
XServer
X-Unique-ID
X-Planisys-CDN-Rules
X-WA
X-Fastly-Country-Code
X-Tb-Optimization-Total-Bytes-Saved
X-Planisys-CDN-Cache
X-Ocache
Lb
X-Planisys-CDN-TTL
Powered-By
X-Esi-Check
Esi-Enabled
X-Configured-By
X-AIR-PT
X-Reqid
X-C-Key
X-C-Zone
X-Tec-Api-Version
X-Cache-Id
X-Tec-Api-Root
X-Tec-Api-Origin
X-Ruxit-Js-Agent
X-DC
X-B3-SpanId
X-VCL-Version
X-Datadome
X-COUNTRY
Fastly-Soc-X-Request-Id
Ttl
Pics-Label
X-Gzip
Who
X-Node-ID
Fastly-SSL
X-Action
X-SRV
X-Via-Ucdn
GeoIP-Country-Code
MIME-Version
X-DSS
X-DW
X-DB
X-DI
X-Country-IP
UCS
X-Flog
X-RSL
X-RPS
GeoIP-Latitude
X-RPM
X-VarnishDD-TTL
X-ABtesting
X-Hello
GeoIP-City
X-HostName
X-Varnish-Url
X-RAMCache
Host-ID
X-SERVER-NAME
X-Svr
X-Powered-Y
X-WPE-Loopback-Upstream-Addr
FSS-Cache
X-PF-Uncompressing
LB
Product
X-Fpc
X-Cache-Backend
Lfy
X-Fastly-Request-Id
X-Amzn-Remapped-Date
X-PJAX-URL
X-Fastly-Backend-Reqs
X-Render-Time
X-Via-CDN
X-Amzn-Remapped-Connection
ProcessTime
X-Pinterest-Direct
X-Varnish-Beresp-TTL
X-MID
X-UPSTREAM-Address
X-User
X-SD-PageType
X-Server-IP
FSS-Proxy
Sid
X-Beluga-Status
X-Beluga-Trace
X-Key
X-Zalando-Child-Request-Id
X-LiteSpeed-Cache-Control
X-Page-Impression-Id
X-Flow-Id
Amp-Access-Control-Allow-Source-Origin
X-Agile-Brick-Ok
X-Internal-Host
X-Apw-Access-Token
X-Apw-Hits
X-Apw-Access-Object
X-Apw-Access-Action
X-Beluga-Cache-Status
X-Beluga-Node
Xet-Cookie
X-Beluga-Record
Cneonction
X-Beluga-Response-Time
Requestid
CF-IPCountry
X-Aicache-OS
X-B3-Parentspanid
CDN
X-Debug-Controller
X-Tid
X-BE
WZWS-RAY
L
SN
X-Compress-Hint
X-Debug-Revision
X-Sucuri-Cache
X-Check-Cacheable
X-Litespeed-Cache-Control
X-Sucuri-Id
X-Request-Url
X-App
C-Via
X-Fastly-Cache-Hits
X-Nananana
CloudFront-Viewer-Country
X-Dw-Trace-Id
X-Request-URL
X-Location
X-MiniProfiler-Ids
X-ElasticPress-Search
X-LB-ID
DataCenter