Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Cf-Request-Id
CF-RAY
CF-Cache-Status
Accept-Ranges
Link
Pragma
ETag
X-XSS-Protection
Expect-CT
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
X-UA-Compatible
Alt-Svc
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Xss-Protection
Access-Control-Allow-Credentials
X-Request-Id
X-AspNet-Version
X-Adblock-Key
X-Runtime
X-Request-ID
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Check
X-Cache-Status
X-Generator
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
P3p
X-FRAME-OPTIONS
X-Content-Security-Policy
X-Iinfo
Status
Content-Encoding
Feature-Policy
X-AspNetMvc-Version
X-CDN
X-Envoy-Upstream-Service-Time
Upgrade
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
Access-Control-Max-Age
X-Via
Keep-Alive
Request-Context
X-Robots-Tag
Server-Timing
X-Ws-Request-Id
X-AH-Environment
X-Server
X-Ua-Compatible
X-Hacker
X-Age
X-Dns-Prefetch-Control
X-Turbo-Charged-By
X-Server-Powered-By
X-Proxy-Cache
X-Cache-Group
X-Backend
Host-Header
X-Nginx-Cache-Status
X-Amz-Request-Id
EagleId
X-Amz-Id-2
Report-To
X-LiteSpeed-Cache
X-Rq
X-UA-Device
X-Varnish-Cache
X-Page-Speed
Grace
X-Swift-SaveTime
X-Swift-CacheTime
X-Pingback
Ali-Swift-Global-Savetime
X-Device
EagleEye-TraceId
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Vhost
Cf-Railgun
X-Amz-Version-Id
NEL
X-Host
X-OneAgent-JS-Injection
X-Dispatcher
X-Server-Id
X-CST
X-Node
Allow
Surrogate-Control
X-Cache-Spec
Request-Id
X-Backend-Server
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
Accept-CH
X-WebKit-CSP
X-Readtime
X-Response-Time
X-Akam-SW-Version
X-Webkit-CSP
Xkey
X-HW
Accept-Ch-Lifetime
X-Country
X-Ac
X-Application-Context
Content-Location
X-Language
X-Ruxit-JS-Agent
MS-Author-Via
X-Template
X-Cloud-Trace-Context
Rating
X-Cache-Lookup
X-Url
X-Mod-Pagespeed
X-B3-TraceId
Edge-Control
X-Vname
X-PC
X-TtlSet
X-Clacks-Overhead
X-ESI
X-MS-InvokeApp
X-Trace
X-Varnish-TTL
X-GitHub-Request-Id
X-Content-Type
Fastly-Restarts
X-ASPNET-VERSION
X-Origin-Cache
X-Cnection
X-Rack-Cache
X-D2id
X-Country-Code
X-Exp-Variant
X-Kinja-Build
X-GoogleNews-Bot
X-Use-Magma
X-Kinja-Server
X-Exp-Id
X-Kinja
X-Kinja-Revision
X-Cdn-Fetch
Verso
Arr-Disable-Session-Affinity
X-Goog-Hash
X-VARITI-CCR
Accept-CH-Lifetime
X-FastCGI-Cache
X-Server-Name
X-Cached
X-Vcap-Request-Id
X-Navigation-Version
Cache-Tag
X-Buckets
X-Client-IP
X-Amz-Rid
X-Powered-By-Plesk
X-Abt-Application-Version
Service-Worker-Allowed
X-ORACLE-DMS-ECID
Accept-Ch
X-Fastly-Request-ID
RTSS
X-Cache-TTL
X-Sol
Access-Control-Request-Method
Display
X-Middleton-Response
Pagespeed
Response
X-Middleton-Display
X-MSEdge-Ref
X-Powered-CMS
X-Element-Page-Cache
X-Ttl
Public-Key-Pins
X-NF-Request-ID
X-Dw-Request-Base-Id
X-Upstream
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Version
X-Px
S
X-Edge
X-Kinsta-Cache
X-LLID
X-Edge-Location-Klb
Realpath
MRF-Tech
Mrf-Cache-Status
X-B3-TraceId-Primal
X-TTL
X-Oneagent-Js-Injection
X-Server-ID
X-Accel-Expires
SPIisLatency
SPRequestDuration
X-ECACHE
X-SharePointHealthScore
SPRequestGuid
X-T
X-Jurisdiction
X-HP-Webp
X-MCACHE
X-Mid
X-PressLabs-Stats
X-Forwarded-Proto
X-Content-Security-Policy-Report-Only
X-Server-Lifecycle-Phase
X-Kraken-Routeconfig-Destination
X-Kraken-Loop-Name
X-Instrumentation
X-Shield-Request-Id
X-Correlation-Id
X-DynaTrace
X-Ruxit-Js-Agent
Edge-Cache-Tag
X-Recruiting
Charset
Pinterest-Version
Pinterest-Generated-By
X-Pinterest-Rid
Fastcgi-Cache
X-Cache-Key
X-Amz-Server-Side-Encryption
TP-L2-Cache
TP-Cache
X-Mg-S
X-Content-Digest
X-Ezoic-Cdn
X-Release
Nginx-Cache
Filters
X-ORACLE-DMS-RID
X-Request-Received
X-Id
X-Request-Processing-Time
TCN
X-Logged-In
Front-End-Https
Alternate-Protocol
Server-Node
Cache-Tags
X-Forwarded-For
X-XRDS-Location
Content-MD5
X-Litespeed-Cache
X-Origin-Upstream-Status
Fusion-Source
Fusion-Deployment-Id
Fusion-Content-Id
Fusion-Component-Id
Fusion-Template-Id
Fusion-Content-Source
X-Amzn-Trace-Id
Server-Name
X-Geo-Country
X-Grace
X-Origin-Server
X-Hostname
X-Protected-By
Cleartype
X-Amz-Replication-Status
X-Contextid
X-F-Cache
X-RateLimit-Remaining
X-Rid
X-Www-Served-By
X-Activity-Id
X-AppVersion
X-Az
Host
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-HS-Hub-Id
X-HS-Content-Id
X-HS-Cache-Config
X-HS-Combine-CSS
X-Debug-Info
Section-Io-Cache
X-Frontend
X-WebKit-CSP-Report-Only
X-LB-Cache
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
MicrosoftSharePointTeamServices
X-Browser-Type
X-NWS-LOG-UUID
X-Ser
X-Aspnetmvc-Version
X-Page-Id
X-Git-Hash
X-Cache-Age
Accept-Charset
AR-PoweredBy
X-VCache
AR-Request-ID
Ar-Sid
AR-ATIME
AR-CACHE
X-Upgrade-Enabled
X-Varnish-Age
X-Respond-Thread
X-Content-Options
X-DIS-Request-ID
X-Source
X-Hits
X-Mobile-URL
X-Fastcgi-Cache
Paypal-Debug-Id
X-Varnish-Backend
X-Tec-Api-Origin
X-Tec-Api-Version
ServerID
X-Daa-Tunnel
X-Tec-Api-Root
Access-Control-Allow-Method
X-B-Cache
X-Signature
X-CACHE-GROUP
X-Varnish-Grace
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
Viewport
Payment
X-Is-Crawler
X-Cache-Action
X-Flags
X-FB-Debug
X-Route-Name
X-Aspnet-Duration-Ms
X-Request-Guid
Healthy
X-Providence-Cookie
X-Whom
X-TT
X-B3-Sampled
Node
X-XRDS-LOCATION
X-AOL-HN
X-App-Environment
X-N
Version
X-Seen-By
X-Request-Handler-Origin-Region
X-Microsite
X-Type
DynaTrace
X-Load-Cache
X-Mobile
Fastcgi-Useragent
DC
MS-CV
X-Yandex-Sdch-Disable
X-Cache-Expired-At
X-Ab
X-HTML-Minification-Powered-By
X-Distributor
SRV
X-Cache-Control
Retry-After
Filterid
X-Tt-Trace-Host
X-Tt-Trace-Tag
Frame-Options
X-IPLB-Instance
X-User-Agent
X-Response-Served-From
X-Original-Request-Id
X-Instance
X-UUID
X-Real-IP
X-ProcessESI
X-Jobs
X-Varnish-Server
X-IPS-LoggedIn
X-RemovedCookies
X-Tumblr-User
X-Tumblr-Pixel-1
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Debug-IsPreview
X-Device-Type
X-Debug-IsConnected
X-Adobe-Content
Ms-Operation-Id
X-Adobe-Loc
X-Content-Powered-By
X-RTag
X-Proxy-Cache-Status
X-Cluster-Name
X-Region
Access-Control-Request-Headers
Nel
VIX-Pulpo-Node
NGB
VIX-Pulpo-Upstream-Status
Refresh
X-B
Uber-Trace-Id
X-Cache-Time
X-Cacheable-TTL
X-Page-View
X-Proxy
X-Framework
X-G
X-FireWall-Port
X-Debug
X-Accel-Buffering
Cache
X-FW-Serve
X-FW-Server
X-FW-Dynamic
X-FW-Type
X-Vgn-Hpd-Reason
X-RateLimit-Limit
X-Zen-Fury
X-FW-Static
X-FW-Hash
Section-Io-Origin-Time-Seconds
Section-Io-Origin-Status
Section-Io-Id
Section-Origin-Responded
X-Wix-Request-Id
Countrycode
X-Time
X-NGENIX-Cache
X-Oracle-Dms-Rid
X-Mg-Request-UUID
X-CDN-Forward
X-Nginx-Cache
Cache-Status
X-Azure-Ref
X-App-Version
Surrogate-Key
X-Is-Bot
X-Rendered-As
X-Ms-Request-Id
X-Drupal-Cache-Tags
X-Ms-Version
Country
X-Cache-Rule
X-Cache-Hit
S-Cnection
X-EdgeConnect-Cache-Status
X-Node-Name
X-App-Server
SD-X-WS
Eomportal-Instance
Amp-Access-Control-Allow-Source-Origin
Referer-Policy
Liferay-Portal
X-TA-CDN-Provider
X-L-Path
X-Environment-Context
X-Cache-Operation
X-ES-SERVER
X-Drupal-Cache-Contexts
Selected-Fe
X-UPSTREAM-Address
X-Yottaa-Metrics
X-SaId
X-Varnishpool
X-Yottaa-Optimizations
From-Origin
X-Proxy-Build
Meta-Geo
X-Tumblr-Pixel-2
X-RN-RSRV
X-Timing-Wait
X-JoinUs
X-Sorting-Hat-PodId
X-Request-Time
Protected
X-Sorting-Hat-ShopId
X-ShardId
X-Pubstack
X-R9-Blue-Green-Version
X-Handled-By
X-Shopify-Stage
X-ShopId
ServedBy
X-Storefront-Renderer-Rendered
X-PHP-Backend
X-Alternate-Cache-Key
X-Varnish-Beresp-Grace
CF-IPCountry
X-TNCMS
X-GG-Cache-Date
X-Endurance-Cache-Level
X-Cache-Server
X-Backend-Host
X-Varnish-Hostname
X-S-Maxage
X-Loop
X-Cache-TTL-Remaining
X-Xfnlog-Site
Azure-SlotName
X-Server-W
Azure-Version
Azure-SiteName
Fastly-SSL
Cache-Tv-Group
Cache-Name
Azure-InstanceId
Azure-RegionName
X-No-Session
X-ProxyCache-Status
X-Be
Webcakes-Region
Webcakes-App-Version
X-AWS-Id
Webcakes-App-Name
Property-Id
X-Human
X-LAGOON
X-ProxyCache-Key
X-Via-Fastly
X-LJ-Flow-ID
X-Adobe-Source
X-Origin-Hint
X-BYPASS-REASON
TWC-Privacy
TWC-Device-Class
X-NYM-Debug-Backend
TWC-Connection-Speed
X-Proto
TWC-GeoIP-Country
TWC-Locale-Group
TWC-GeoIP-LatLong
X-OCL
X-VWS-Id
X-PCL
X-Backend-Name
Country-Code
X-Hl-Ver
Apigw-Requestid
Akamai-GRN
X-Access
Decoy-Debug-Key
X-Say-TTL
X-SayCDN-TTL
X-Section
X-Origin-Date
X-Say-Cacheable
X-Format
Decoy-Debug-Status
X-RCS-CacheZone
Decoy-Debug-TTL
Mn-Server-Ip
X-Akamai-Edgescape
X-Sql-Count
X-PHP-Host
X-UA-Device-Type
X-Labrador-Cache-Channel
X-Revision
X-Status
X-FB-TRIP-ID
X-Sql-Duration-Ms
X-ApacheServer
X-PERF
X-Hyper-Cache
X-Uri
Xserver
X-Cache-PHP
X-Hosted-By
X-Redis-Cache
X-Rule
X-Ua-Device
X-Cache-Type
X-Web-Node
X-B3-SpanId
X-Aws-Lambda-Call-Status
X-Trace-Id
X-WA-Info
X-ATG-Version
AMP-Access-Control-Allow-Source-Origin
X-MP-GENERATED-AT
X-FW-Version
X-ServerID
X-Content-Age
X-Time-Microsecs
X-Cached-By
X-CSRF-Token
X-Tumblr-Pixel-3
X-Parallel-Accel
X-Soup
Backend
X-Cache-Enabled
X-Edge-Location
Count-Hit
GEO-INFO
X-Dc
X-Akamai-Transformed
X-Mode
X-TT-LOGID
X-Datadome
X-Cluster-Node
OT-Force-Account-Verify
X-Detected-As
X-CS
X-Azure-Ref-OriginShield
X-APP-VERSION
X-Varnish-Cache-Hits
X-Info
X-Cache-Host
X-Varnish-Beresp-Status
X-Microcachable
X-Bc-Bl
Web-Mar-Node
X-Generation-Time
X-Varnish-Hits
Cross-Origin-Opener-Policy
X-Servername
X-Cache-NGX
X-Amzn-RequestId
X-Debug-Cache
X-Amz-Apigw-Id
X-Amzn-Remapped-Content-Length
X-Varnish-Beresp-Ttl
X-Platform
X-Zipkin-Id
X-Proxied
X-SRV
X-Routing-Service
X-Storage
Who
X-HP-Trace-Id
SID
X-Extlb
X-Unique-ID
X-B3-Traceid
DataCenter
X-Origin-CC
X-Origin-TTL
X-DataDome
Mobile-Detection-Method
Odigeo-Trace-Id
Rendered-Blocks
Meta-Geo-Continent
MD5-Digest
M-TraceId
X-A-Wwc
Req-Svc-Chain
State
Host-ID
T-Server
X-A
X-A-Dgt
X-A-Dcw
Surrogated-Key
X-A-Dam
X-A-Ccd
DCR-Processing-Time-Ms
BehaviorPad-Version
Cache-Host
CDCHOST
CDN-Cache
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
A
Apple-News-Services-Handled
Apple-News-Services-Host
CDN-CachedAt
CDN-EdgeStorageId
DCR-Decision-By
X-Aed
Expiry
Fastcgi-X-Cache-Version
Content-Disposition
CDN-Uid
CDN-PullZone
CDN-RequestCountryCode
CDN-RequestId
Fastly-Backend-Name
X-B-Cookie
X-Rojux
X-S
X-S-Cookie
X-ScT
X-Rewrite-Enabled
X-Request-URI
X-PBS-Appsvrname
X-Processor
X-Ratelimit-Reset
X-Service
X-Session-Fingerprint
X-VG-WebServer
X-Vtex-Processado-Em
X-Vtex-Remote-Cache
X-VG-WebCache
X-Vdms-Version
X-SRCache-Key
X-Thanos
X-Vdms-Path
X-PAYTM-SRV-ID
X-NAPM-TraceId
X-Cache-NE
X-CF-Lambda-Fn
X-CF-Lambda-Version
X-Cms-Context
X-Cache-Bucket
X-Bip
X-Application
X-ARC
X-BCube-Filmed-By
X-Connection-Hash
X-Core-Value
X-From
X-Level-Front-Cache
X-Location
X-External-Request-Id
X-Epic-Correlation-Id
X-D
X-Destination
X-Developer
X-Aicache-OS
X-Generated-On
X-Air-Source
X-Magnolia-Registration
X-Air-Hostname
X-Air-Trace-Id
Server-Info
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-TEC-API-VERSION
S-Rt
X-Ua
Upgrade-Insecure-Requests
L
Kp-EeAlive
X-Rocket-Build-Number
Path
Gh-Request-Id
Location
X-Served-From
X-Envoy-Decorator-Operation
X-Clientip
Esi-Enabled
Fastly-Drupal-HTML
Fastly-SIE
X-Request-UUID
Fastly-SWR
X-Developers
X-Sigma-Backend
Pics-Label
PFcat
X-TrackingId
X-Var-Ttl
Server-Host
UCS
X-VG-TLSProxy
X-VarnishDD-TTL
Pagetype
Origin
Cmstype
X-Sigma
Memcached
X-Cache-Debug
X-Branch-Name
X-Sucuri-ID
X-Backend-State
Ec-Rule-Version
Fastcgi-Cache-TTL
X-Proxy-Upstream
X-HN
X-Gamma-Serve
X-Is-Gdpr
CacheControlHeader
Cmsid
X-Hash
X-Has-Esi
X-Locale
X-GoCache-CacheStatus
X-VHOST
X-Geo-Header
Source
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Varnish-Ttl
X-Platform-Server
X-Origin
X-Cache-Grace
X-Via-JSL
X-NU-AKA-ACS-Version
X-JWT-State
Url
X-AIR-PT
X-NWS-UUID-VERIFY
X-Tb
Cross-Origin-Window-Policy
User-Cache-Control
X-LI-UUID
X-Loc
X-Minions-Version
X-Origin-Expires
Wxu-Next-Hostname
Wxu-Next-Commit
X-Owner
Wxu-Next-Region
X-Varnish-Url
X-Variation
X-Micro-Cache
X-Li-Pop
X-Accel-Expires-Debug
X-Men
X-Clara-WADP
X-Request-Host
X-VC-Cache
X-DPWN-IS-SECURE
X-Req
X-EC-Lua
X-Forwarded-Site
X-Fastly-Cache
X-Fastly-Backend
X-Eu-Site
X-Fmm-Version
NtCoent-Length
X-Generated-By
X-CGP
X-Cache-Tags
X-Cache-Info
X-Policy
X-Cluster
Content-Secure-Policy
X-Date
X-Scheme
X-Csrf-Jwt
X-Generated-In
X-Li-Fabric
Vix-Hermes-Req-Id
L5d-Success-Class
Is-Eu
HA-Ipaddr
Ha-Gx-Prefs
NGX
DSUID
X-Orig-Expires
X-Amz-Meta-S3cmd-Attrs
C-Via
X-Forwarded-Path
TDXMobile
Thinkindot-CacheControl
X-Thinkindot-L3
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
Arc-Version
X-Device-Os
Cf-Device-Type
Thinkindot-CacheControl-Type
Thinkindot-Control
Adler-Geo
AKAMAI
NM-Fastcgi-Cache
X-Forwarded-Host
True-Client-Country-4JS
X-WADP-Cache
PB-PID
PB-RID
Platform
X-Shop-Environment
X-Tenant
X-GeoIP
We-Hiring
X-Fetched-On
X-FC-Vary-Parameters
X-Esi-Check
X-Mvc-Supplant-Cachable
Svr
X-Irp-Debug
X-GeoIP-City
X-RateLimit-Remaining-Second
V-Age
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Gzip
Arc-Country
X-Old-Content-Length
X-Hnp-Log
X-Site-Version
X-RateLimit-Limit-Second
Cache-Key
X-Gen-Mode
X-Nginx-Cache-Key
Sever-Int
Mail-Subject
X-VServer
Locid
Server-Hostname
X-User
X-Wikidot-Static-Cache
X-Cache-Id
X-Block-Status
X-Slack-Backend
X-SIPLIST1
X-Wikidot-Backend
Release
X-Qloud-Router
X-Varnish-CookieINHashed-On
X-Varnish-CookieHashed-On
X-DefHash
X-DefElseHash
X-Varnish-Remaining-TTL
Server-Ext
IsBot
X-Viewer-Country
Webserver
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
X-PF-Uncompressing
X-Ftr-Request-Id
X-Planisys-CDN-Cache
X-Unique-Id
X-Via-NSCOPI
X-HS-Content-Campaign-Id
CPC-Cache
My-App
X-Srv
X-CACHE-KEY
VNS-Cache
VNS-Age
CPC-Age
Powered-By-ChinaCache
X-Skip-Cache
Cache-Hits
X-Zone
X-Via-Popv
X-Mvc-Supplant-OutputCached
X-Conf
MIME-Version
X-Via-Poph
X-Via-Popn
X-Refresh
X-Ratelimit-Limit
X-GEO
X-TX-ID
X-Pass-Why
X-Cache-Ttl
X-BBC-Edge-Cache-Status
X-Vc
XServer
X-PJAX-URL
X-Worker
X-Servedbyhost
X-Internal-Host
X-Ckpd-Fst-Backend
X-NC
X-ID
Geo-Info
X-OVcl
X-Auto-Login
X-OVcl-Cache
X-DC
Memory
Time
X-LB-ID
WebServer
Server-ID
Cf-Bgj
X-LSADC-Cache
X-V-Cache
X-Ratelimit-Remaining
X-Backend-TTL
X-NewRelic-App-Data
X-TIME
X-Traceid
X-Webkit-Csp
X-Render-Time
X-TraceId
Magicmarker
X-Rocket-Nginx-Serving-Static
X-NCache
X-ZONE
DB-Nickname
X-Tx-Id
X-M-Log
HostName
X-Platform-Router
X-Platform-Processor
X-M-Reqid
X-Qnm-Cache
X-Platform-Cluster
X-Wa
X-Geo
X-Cache-Remote
X-Newrelic-Synthetics
GeoIp-Country-Code
Geoip-Latitude
X-SD-PageType
Hostname
X-App
X-Dispatcher-Server
X-Method
X-CLOUD-TRACE-CONTEXT
Environment
X-Datadog-Trace-Id
X-Datadog-Parent-Id
X-Datadog-Sampling-Priority
X-API-Version
X-Cache-Config
Ssr
X-VCL-Version
X-BBC-Origin-Response-Status
X-IP
Resin-Trace
X-NodeID
X-Tb-Optimization-Total-Bytes-Saved
X-Gdpr
X-Nyt-Route
X-Origin-Time
X-Correlation-ID
Cluster
X-Via-Ucdn
X-Pod-Name
X-Server-IP
Ohc-File-Size
Tcn
X-Edge-Pop
X-HITS
Candidate-Md5Url
X-Webkit-CSP-Report-Only
LB
X-CACHE-AGE
X-LI-Proto
X-Dynatrace
X-MSEdge-Features
X-Li-Proto
X-Origin-Response-Time
X-MSEdge-Flight
X-Cache-Var-Map
X-Cache-Var
X-Nc
X-ElasticPress-Query
X-Trv-Group
Datacenter
X-Akamai-Pragma-Client-IP
Cf-Ipcountry
X-DynaTrace-JS-Agent
X-Node-Id
X-Varnish-Beresp-TTL
X-Vcl-Version
Web-Mar-Region
N-Cache
X-Via-CDN
X-APP
X-ND-Cache
Env
X-Wix-Viewer-Type
X-ServerName
X-HostName
GeoIP-Country-Code
GeoIP-Latitude
X-Reqid
Onion-Location
CDN
X-WA
Proxy-Connection
X-Dynatrace-Js-Agent
X-HS-Status
Servername
CF-Cached-On
X-Cs
WWW-Authenticate
X-Content
Rt-Fastcgi-Cache
Sid
Viewtype
VivaBuild
Server-Id
X-AB
X-EIG-Tracking-Id
X-Ua-Browser
Cdn
X-Varnish-Cacheable
X-MG-S
X-NGINX-Cache
X-Fastly-Backend-Reqs
WZWS-RAY
Machine
X-FTR-Request-ID
X-Lb-Id
X-URL
X-Pjax-Url
X-Fpc
X-Check-Cacheable
X-Cdn-Forward
X-VC
X-CSRF-TOKEN
Ohc-Cache-HIT
X-Esi
X-Xrds-Location
X-Via-PopN
X-Via-PopH
X-Via-PopV
Cteonnt-Length
X-Fastly-Request-Id
On-Server
X-IN-APIGATEWAYSSL
X-Tid
X-TIM-N
X-ServedByHost
FSS-Cache
Redirect-Candidate
X-IN-APIGATEWAY
X-Cache-Backend
URI
Server-Ttl
X-Up
X-Swa-Ws
X-SN
X-Request-Start
CountryCode
Mime-Version
Shield-Pop
X-Webkit-Csp-Report-Only
X-Tt-Logid
X-Varnish-Authentication
X-Cache-Date
X-Amz-Meta-Cb-Modifiedtime
Is-Us
X-Pad
X-Cache-ASPX
X-Contensis-Viewer-Groups
X-Pf-Uncompressing
X-FTR-Realm
Lb
CACHE
X-Oss-Storage-Class
X-Air-Pt
Xc-Version
X-FTR-Backend
X-FTR-Backend-Server
X-FTR-Balancer
X-FTR-Cache-Status
X-FTR-DC
X-FORWARDED-FOR
X-Country-Code-Real
X-Oss-Request-Id
X-Oss-Hash-Crc64ecma
X-Swift-Error
X-LiteSpeed-Cache-Control
X-Oss-Server-Time
Tracecode
X-Oss-Object-Type
X-Acquia-Application-Trace
X-RPS
X-RPM
X-Sn-Servicetimems
X-DSS
X-DW
X-Cdn-Origin
Pramga
X-StackifyID
X-Acquia-Purge-Tags
X-Acquia-Application-UUID
X-DI
X-RSL
Xet-Cookie
X-Acquia-Site
X-Action
X-DB
X-Fastly-Cache-Hits
X-SB
X-Dw-Trace-Id
Ohc-Response-Time
X-Webstats-RespID
WP-Super-Cache
Warning
X-ElasticPress-Search
Vha6-Origin
X-Yottaa-OS
X-CCM
Content-Script-Type
CloudFront-Viewer-Country
X-RAMCache
Content-Style-Type
X-Provided-By
W
X-Edge-POP
X-Core-Mission
X-C
X-Hcs-Proxy-Type
X-Snapshot-Date
X-CUA
ServerName
X-CCDN-Origin-Time
X-FTR-Expires
X-MiniProfiler-Ids
X-Mg-Request-Id
X-TH-Server
X-CCDN-CacheTTL