Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
Pragma
CF-RAY
CF-Cache-Status
Link
X-Powered-By
ETag
X-XSS-Protection
Expect-CT
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Varnish
X-Request-Id
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Download-Options
X-AspNet-Version
Alt-Svc
Access-Control-Allow-Credentials
X-Runtime
X-Xss-Protection
X-Drupal-Cache
X-Adblock-Key
X-Check
Content-Security-Policy-Report-Only
X-Generator
X-Cacheable
X-Cache-Status
X-Permitted-Cross-Domain-Policies
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-Template
X-Language
X-Iinfo
Content-Encoding
Status
X-Content-Security-Policy
X-AspNetMvc-Version
X-FRAME-OPTIONS
X-Buckets
X-Kinja-Server-Push
Xkey
Upgrade
X-Request-ID
X-Via
Access-Control-Expose-Headers
X-Turbo-Charged-By
Access-Control-Max-Age
Keep-Alive
X-Drupal-Dynamic-Cache
X-Pass-Why
X-Cache-Group
X-Age
EagleId
X-Backend
X-Envoy-Upstream-Service-Time
X-Robots-Tag
X-Amz-Id-2
X-Amz-Request-Id
X-CDN
X-Page-Speed
X-Ua-Compatible
X-Pingback
X-Server-Powered-By
X-AH-Environment
X-Server
X-Proxy-Cache
X-UA-Device
X-Hacker
Request-Context
X-Nginx-Cache-Status
X-Swift-SaveTime
X-Swift-CacheTime
Grace
X-Varnish-Cache
Ali-Swift-Global-Savetime
X-Cdn
X-LiteSpeed-Cache
P3p
Cf-Railgun
Server-Timing
Feature-Policy
X-Amz-Version-Id
X-Device
X-Server-Id
X-WebKit-CSP
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-OneAgent-JS-Injection
X-Rq
X-Ac
X-Cnection
EagleEye-TraceId
Report-To
X-Cloud-Trace-Context
X-Response-Time
X-Backend-Server
Request-Id
X-Host
X-Node
Content-Location
X-Readtime
X-Origin-Cache
X-Vhost
X-Application-Context
X-Cache-Lookup
X-ORACLE-DMS-ECID
X-DataDome
X-Dispatcher
NEL
X-Ruxit-JS-Agent
X-ORACLE-DMS-RID
X-Origin-Upstream-Status
X-Rack-Cache
X-HW
Surrogate-Control
Rating
Allow
X-Country-Code
X-Dns-Prefetch-Control
X-Clacks-Overhead
X-Url
X-Country
X-FTR-Request-ID
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-DynaTrace
X-Instart-Request-ID
X-MS-InvokeApp
Fusion-Content-Id
Fusion-Component-Id
Fusion-Content-Source
Fusion-Source
Fusion-Template-Id
X-Goog-Hash
X-Vname
X-PC
X-TtlSet
X-Varnish-TTL
X-TTL
Pinterest-Generated-By
X-B3-TraceId
Verso
X-Powered-By-Plesk
Public-Key-Pins
RTSS
X-ESI
X-Px
Edge-Control
X-Mod-Pagespeed
Display
X-Sol
X-Middleton-Display
X-Middleton-Response
Response
X-VARITI-CCR
Accept-Ch-Lifetime
X-D2id
X-Kinja-Build
X-GoogleNews-Bot
X-Exp-Id
X-Cdn-Fetch
X-Exp-Variant
X-Kinja-Server
SPRequestGuid
X-Kinja
X-Kinja-Revision
X-Use-Magma
X-SharePointHealthScore
X-Recruiting
X-CST
X-Akam-SW-Version
X-Ah-Environment
Service-Worker-Allowed
X-Vcap-Request-Id
SPRequestDuration
SPIisLatency
X-Version
X-Server-Name
X-GitHub-Request-Id
X-Abt-Application-Version
X-Powered-CMS
X-Navigation-Version
TCN
MS-Author-Via
X-Trace
X-Shard
Charset
Nginx-Cache
Fastly-Restarts
X-Debug
Realpath
X-Amz-Server-Side-Encryption
X-Upstream
X-Amz-Rid
AR-CACHE
AR-ATIME
Ar-Sid
X-Aspnetmvc-Version
AR-PoweredBy
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-RateLimit-Remaining
X-Forwarded-Proto
Accept-CH
X-Ezoic-Cdn
X-VCache
X-NF-Request-ID
X-Cached
Front-End-Https
X-Goog-Generation
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-MSEdge-Ref
Pagespeed
Arr-Disable-Session-Affinity
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Shield-Request-Id
Access-Control-Request-Method
AR-Request-ID
X-Mrf-Section-Lastmod
X-B3-TraceId-Primal
MRF-Tech
Mrf-Cache-Status
X-Mrf-Item-Lastmod
DynaTrace
X-Country-Code-Real
MicrosoftSharePointTeamServices
X-FTR-Expires
X-FTR-Cache-Status
Content-MD5
S
X-T
X-Amz-Meta-S3cmd-Attrs
X-Goog-Storage-Class
X-Id
Paypal-Debug-Id
X-Fastly-Request-ID
Accept-Ch
X-XRDS-Location
X-FTR-Realm
X-FTR-Balancer
X-FTR-Backend-Server
X-FTR-DC
X-FTR-Backend
X-Varnish-Age
X-Ser
X-DynaTrace-JS-Agent
ServerID
X-Via-JSL
X-Client-IP
X-Content-Type
X-Accel-Expires
X-Grace
X-Correlation-Id
X-Dw-Request-Base-Id
X-Forwarded-For
X-Hits
Fastcgi-Cache
Edge-Cache-Tag
Powered
X-Content-Digest
X-Amzn-Trace-Id
X-DIS-Request-ID
X-Frontend
AMP-Access-Control-Allow-Source-Origin
X-N
X-Mobile-Rewrite
Arc-Version
X-FTR-Cache-Host
PB-PID
PB-RID
X-FastCGI-Cache
X-HS-Hub-Id
X-HS-Content-Id
Pinterest-Version
X-Pinterest-Rid
X-Logged-In
Server-Name
X-Fastcgi-Cache
TP-Cache
TP-L2-Cache
X-Request-Processing-Time
X-Request-Received
X-Microsite
X-GUploader-UploadID
X-Server-ID
X-Request-Handler-Origin-Region
X-Kinsta-Cache
X-Zen-Fury
X-Time
X-Webkit-CSP
X-IPLB-Instance
X-Cache-Hit
X-Type
X-Rid
X-Az
Backend-Timing
X-AppVersion
X-Analytics
X-Activity-Id
X-LB-Cache
Healthy
X-Revision
X-Vcache
Retry-After
X-Cache-Age
X-User-Agent
X-B3-Sampled
X-Whom
X-Srv
X-Node-Name
FilterID
Server-Node
X-RateLimit-Limit
X-NWS-LOG-UUID
X-Hp-Webp
Alternate-Protocol
Accept-Charset
X-F-Cache
Cache-Tag
X-Akamai-Edgescape
X-SERVER
X-Content-Options
Cache-Status
X-Cache-Rule
X-Content-Security-Policy-Report-Only
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
X-Cache-2
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
DC
X-Tumblr-User
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Tumblr-Pixel-0
X-Instance
X-Tumblr-Pixel
X-Content-Powered-By
MS-CV
X-App-Environment
Refresh
X-Varnish-Grace
X-Debug-Info
X-AOL-HN
X-Cluster
X-Jobs
Tracecode
NR-ENABLED
Surrogate-Key
X-PHP-Backend
X-Forwarded-Host
Access-Control-Allow-Method
X-Framework
X-FB-Debug
Fastcgi-Useragent
Source
X-Page-Id
X-Cache-TTL
X-Request-Guid
X-B
X-App-Server
Actual-Object-TTL
Host
X-Mobile-URL
X-Cache-Operation
X-Seen-By
X-FW-Serve
X-FW-Type
X-FW-Server
X-FW-Static
X-FW-Hash
X-Cache-Key
Frame-Options
X-Cache-Control
X-Hostname
X-Geo-Country
X-TA-CDN-Provider
Cleartype
X-Cached-By
X-Host-Name
X-Pad
X-B-Cache
X-Signature
X-BCube-Filmed-By
Upgrade-Insecure-Requests
X-Git-Hash
X-Mobile
X-Varnish-Backend
X-WebKit-CSP-Report-Only
NGB
X-Response-Served-From
X-XRDS-LOCATION
X-Presslabs-Stats
X-ATG-Version
X-Element-Page-Cache
WPE-Backend
X-TT
Filters
GEO-INFO
X-Amz-Replication-Status
X-GeoIP
X-Tumblr-Pixel-1
Webserver
Cache-Tv-Group
X-Handled-By
X-Drupal-Cache-Tags
X-Tumblr-Pixel-2
X-RequestSource
X-RemovedCookies
X-RTag
X-ProcessESI
Eomportal-Instance
Payment
Ms-Operation-Id
X-Cacheable-TTL
X-UA-Device-Type
X-Ttl
X-Adobe-Loc
From-Origin
X-Adobe-Content
X-Origin-Server
X-TT-TIMESTAMP
X-Daa-Tunnel
X-HS-Cache-Config
X-EdgeConnect-Cache-Status
X-B3-Traceid
X-TX-ID
Xserver
X-Wix-Request-Id
Liferay-Portal
X-Acc-Meta-Resource-Type
X-FW-Dynamic
X-Cache-TTL-Remaining
X-Status
X-WA-Info
X-Cache-Remote
Datacenter
X-Esi
X-Hyper-Cache
Cache
X-Edge-Location
X-Cache-Action
X-Region
X-Contextid
X-Content-Age
Viewport
Version
X-Ratelimit-Reset
X-CF-Powered-By
X-Cache-NE
X-Varnish-Hostname
X-Akamai-Transformed
X-Cache-Server
X-Storage
PageSpeed
X-Accel-Buffering
X-Tec-Api-Root
Ohc-File-Size
X-Tec-Api-Version
X-Tec-Api-Origin
X-Path-Route
X-Cache-Var
X-Varnish-Server
Load-Balancing
X-ES-SERVER
X-RN-RSRV
Meta-Geo
X-Cache-Var-Map
X-HS-Combine-CSS
Host-Header
X-IP
Accept-CH-Lifetime
X-Proxy
Cache-Tags
Vix-Hermes-Req-Id
X-Varnish-Cache-Hits
Webcakes-App-Name
Webcakes-App-Version
X-Proto
Webcakes-Region
X-Cluster-Node
X-Device-Type
Property-Id
X-TNCMS
X-Cache-Enabled
Release
TWC-Device-Class
TWC-Connection-Speed
Rt-Fastcgi-Cache
TWC-GeoIP-Country
X-Cache-Config
TWC-GeoIP-LatLong
TWC-Locale-Group
Cache-Name
X-NCache
X-Section
X-Access
X-Loop
X-Tumblr-Pixel-3
X-Origin-Hint
TWC-Privacy
X-Cache-Grace
X-Trafficlayer-App-Name
X-Backend-TTL
X-CS
X-Drupal-Cache-Contexts
X-From
X-FC-Vary-Parameters
X-Backend-Name
X-Akamai-Request-ID
Ec-Rule-Version
DSUID
Mn-Server-Ip
S-Rt
X-Trafficlayer-App-Scope
Selected-Fe
X-Human
X-NGENIX-Cache
X-Origin
X-Cache-Time
Country
X-UnsetCookies
X-Upgrade-Enabled
X-Viewer-Country
X-Via-Fastly
X-Www-Served-By
X-Vgn-Hpd-Reason
X-Proxy-Build
X-Origin-Response-Time
X-R9-Blue-Green-Version
X-Rule
X-VCT
X-Timing-Wait
Cache-Hits
X-Format
DB-Nickname
X-Web-Node
Ohc-Cache-HIT
X-Debug-Cache
Azure-Version
X-EIG-Tracking-Id
X-Trace-Id
X-Site-Version
X-NewRelic-App-Data
S-Cnection
X-Generated
X-Hit
X-Locale
X-Akamai-Request-ID2
Azure-SlotName
X-Labrador-Cache-Channel
X-PressLabs-Stats
X-OCL
X-PCL
X-Yottaa-Metrics
Azure-SiteName
X-Cache-Host
Azure-RegionName
Azure-InstanceId
X-Hosted-By
X-JoinUs
X-Yottaa-Optimizations
X-ApacheServer
X-Goog-Meta-Goog-Reserved-File-Mtime
X-FireWall-Port
X-Time-Microsecs
X-PERF
Decoy-Debug-Key
Decoy-Debug-TTL
Decoy-Debug-Status
X-CCM
X-Xfnlog-Site
Cache-Key
X-Varnish-Hits
X-Real-IP
X-OVcl-Cache
X-OVcl
X-Rendered-As
Server-Info
Time
L5d-Success-Class
X-S
X-Pubstack
X-FW-Version
X-Redis-Cache
Origin-Cache-Control
Origin-Edge-Control
X-APP-VERSION
X-SS-Set-Cookie
X-Upstream-CT
X-Upstream-HT
Fastcgi-X-Cache-Version
X-Ua
Now
OT-Force-Account-Verify
X-Litespeed-Cache
Fastly-SSL
Access-Control-Request-Headers
ServedBy
X-FB-TRIP-ID
Cteonnt-Length
Origin
X-Cluster-Name
X-UUID
X-Origin-CC
X-Upstream-Proxy
X-Origin-TTL
X-Load-Cache
X-VG-TLSProxy
X-VG-WebCache
X-ServerID
X-Shopify-Stage
NtCoent-Length
X-ShopId
X-GoCache-CacheStatus
X-Sorting-Hat-PodId
X-ShardId
X-Sorting-Hat-ShopId
X-Soup
X-Alternate-Cache-Key
Hostname
X-Rocket-Nginx-Bypass
X-Parent-Response-Time
Mime-Version
Machine
X-Tb
Accept-Language
X-B3-Spanid
X-App-Version
X-Is-Bot
Odigeo-Trace-Id
X-No-Session
IBM-Web2-Location
NGX
X-UA
X-ECACHE
Nel
CF-IPCountry
X-Uri
X-L-Path
X-MServer
X-Environment-Context
X-Tt-Trace-Tag
X-B3-Parentspanid
X-CACHE-KEY
X-DPWN-IS-SECURE
X-CF-Lambda-Version
X-A-Dcw
X-B-Cookie
X-Worker
X-Instart-Info
X-CF-Lambda-Fn
X-Rewrite-Enabled
X-A-Dgt
X-Info
X-External-Request-Id
X-Aed
X-Application
X-G
X-Accel-Expires-Debug
Xc-Version
X-ARC
X-Hl-Ver
X-A-Wwc
X-AIR-PT
X-Detected-As
Fly-Request-Id
Fly-Cache
GEO-REGION-INFO
MD5-Digest
X-Region-Sid
X-Transaction
Cross-Origin-Window-Policy
Content-Script-Type
Content-Style-Type
X-PAYTM-SRV-ID
X-Trv-Group
Memcached
X-SRCache-Key
Node
Rendered-Blocks
Rt-Proxy-Cache
X-ScT
Mobile-Detection-Method
Meta-Geo-Continent
X-Request-UUID
X-Destination
X-Date
X-Server-Time
Cache-Prefix
X-Twitter-Response-Tags
A
Apple-News-Services-Handled
X-Vtex-Processado-Em
Apple-News-Services-Host
X-Vtex-Remote-Cache
ServerName
X-A-Dam
X-A
X-Rojux
Uber-Trace-Id
X-VG-WebServer
X-S-Cookie
T-Server
Arc-Country
AsisCache
BehaviorPad-Version
Apple-News-Services-Request-Url
Viewtype
Apple-News-Services-Parsed-Url
X-D
VivaBuild
X-Connection-Hash
X-Developer
X-A-Ccd
X-NC
X-CSRF-TOKEN
Request-Time
Backend-Name
X-BYPASS-REASON
X-Oneagent-Js-Injection
X-ProxyCache-Status
X-Amzn-Remapped-Content-Length
X-ProxyCache-Key
X-SVT-ORM-VERSION
Fastly-Soc-X-Request-Id
X-SVT-ORM-RULES
X-Geo
IsBot
X-S-Maxage
X-Compress-Hint
X-Has-Esi
Akamai-GRN
X-Developers
X-Is-Gdpr
X-Cdn-Srv
SRV
X-JWT-State
X-Cache-Bucket
X-SIPLIST1
N-Cache
X-Node-Id
Proxy-Connection
X-Endurance-Cache-Level
X-Magnolia-Registration
X-Origin-Date
X-Origin-Expires
Wxu-Next-Hostname
Wxu-Next-Region
X-NX-Host
X-Azure-Ref
X-Azure-Ref-OriginShield
X-Auto-Login
X-Level-Front-Cache
X-Ratelimit-Limit
X-Location
Wxu-Next-Commit
X-Release
X-Service
Pagetype
X-Skip-Cache
X-Sn-Servicetimems
L
X-Server-IP
Pramga
X-Backend-Host
Server-Host
Served-By
X-Reqid
X-Reboot
X-BBXSRF
X-Dispatch
X-Distil-CS
X-Hash
X-Debug-Log
X-Debug-Cookies
X-Geo-Header
X-Generation-Time
X-Fastly-Cache
X-Generated-By
X-Generated-On
X-Eu-Site
X-ElasticPress-Search
X-Debug-Cache-Store
X-Debug-Cache-Fetch
X-Cache-Info
X-Cdn-Origin
X-C
X-Bip
Heartbleed
X-Irp-Debug
X-CGP
X-IN-APIGATEWAY
X-Debug-Cache-Expiry
X-CUA
X-IN-APIGATEWAYSSL
X-Clientip
X-Backend-Url
Section-Io-Cache
Content-Disposition
Mail-Subject
X-Nc
X-VC-Cache
X-Var-Ttl
X-Up
We-Hiring
Countrycode
X-We-Are-Hiring
X-Webstats-RespID
Request-Country
Request-EU
X-Via-CDN
AKAMAI
X-Cms-Context
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-Nginx-Cache
X-Dc
X-User
X-Thanos
HA-Ipaddr
X-TrackingId
Gh-Request-Id
Ha-Gx-Prefs
Srv
User-Cache-Control
X-Microcachable
X-PHP-Host
X-Owner
X-Block-Status
X-Backend-State
X-Variation
X-Guploader-Uploadid
X-Key
X-Lb-Id
CDCHOST
Cache-Provider
X-Gen-Mode
X-Li-Fabric
Adler-Geo
X-GeoIP-City
X-Hnp-Log
X-Swa-Ws
Kp-EeAlive
X-Clara-WADP
X-Cache-FS-Status
X-Amz-Meta-Cache-Control
X-Core-Mission
X-Fetched-On
Magicmarker
X-App-Name
X-Old-Content-Length
X-Epic-Correlation-Id
Is-Eu
Platform
PFcat
X-WADP-Cache
X-B3-SpanId
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Distributor
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-VServer
Thinkindot-Control
X-Request-Start
Server-Int
X-Say-TTL
X-Platform-Server
X-LI-Proto
Fastly-SWR
Fastly-SIE
X-Li-Pop
X-SayCDN-TTL
X-Qloud-Router
X-Nginx-Cache-Key
X-Thinkindot-L3
X-Servername
X-LI-UUID
X-Method
X-Proxy-Upstream
X-Device-Os
W
X-Say-Cacheable
X-Proxy-Cache-Status
X-Dispatcher-Server
X-Matched-Rule
Esi-Enabled
X-NWS-UUID-VERIFY
X-GEO
X-Generated-In
X-Request-URI
X-Svr
X-MSEdge-Features
X-Policy
X-Urbn-Site-Id
X-SD-PageType
X-RateLimit-Remaining-Second
X-Urbn-Context-Path
X-MSEdge-Flight
X-WebServer
RNT-Time
RNT-Machine
X-Internal-Host
X-Cache-Id
SD-X-WS
X-RateLimit-Limit-Second
Locale
Resin-Trace
Web-Mar-Node
X-AWS-Id
X-Cdn-Forward
X-LJ-Flow-ID
X-VWS-Id
Cdn-Request-Time
X-Instart-Isnd
X-Cache-URL
Server-ID
True-Client-Country-4JS
Memory
X-FPC
X-CACHE-GROUP
Cdn-Host
X-Edge-Server
X-ServiceProvider
X-Be
V-Age
X-Scheme
X-GDPR
REQUESTUUID
X-Mode
X-Cache-Backend
X-Org
X-Processor
X-Request-Time
X-DC
SS
X-ABtesting
X-Flog
X-Hello
X-CDN-Forward
Group
X-Wa
X-Datadome
X-IPS-LoggedIn
X-Servedbyhost
X-Response-By
Country-Code
X-Pjax-Url
X-Unique-ID
X-NodeID
X-Server-W
X-DataStream-Cache-Status
Cache-Cookie-Set-Idcheck
Cache-Cookie-Set-Lfrom
Cache-Host
Cache-Cookie-Set-From
X-EC-Lua
X-SN
X-Proxied
X-Routing-Service
X-Oss-Hash-Crc64ecma
X-Zipkin-Id
X-Oss-Request-Id
X-Oss-Server-Time
PICS-Label
X-Oss-Storage-Class
X-Page-Type
X-Oss-Object-Type
X-Ruxit-Js-Agent
X-Oracle-Dms-Rid
X-Ms-Version
X-Ms-Request-Id
UCS
X-Varnish-Beresp-Ttl
X-VCL-Version
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Ratelimit-Remaining
X-RateLimit-Reset
X-Webkit-Csp
X-Via-Ucdn
Lfy
X-SRV
X-HS-Status
X-Tb-Optimization-Total-Bytes-Saved
X-Session-Fingerprint
X-Ftr-Request-Id
X-Dynatrace
X-Zone
X-Agile-Age
X-Logtrace-Id
Ajk
XServer
X-Pf-Uncompressing
X-Agile
X-Agile-Id
Geoip-City
GeoIp-Country-Code
Geoip-Latitude
X-MP-GENERATED-AT
X-URL
X-COUNTRY
X-GRACE
ProcessTime
Proxy-Firewall
Powered-By-ChinaCache
Ttl
SN
X-Cache-Debug
X-Fastly-Country-Code
X-CSRF-Token
X-ZONE
X-Source
X-Varnish-Beresp-TTL
X-7Graus-Varnish-Cache-Control
Powered-By
X-APP
X-7Graus-Varnish-XKeys
X-Webapp-Samesite-None-Activated-N
X-HTML-Minification-Powered-By
Environment
X-PF-Uncompressing
X-Cache-Miss-From
X-Sucuri-ID
X-Newrelic-Synthetics
GeoIP-Latitude
X-Sedo-Request-Id
X-Logging-Id
GeoIP-Country-Code
GeoIP-City
X-Grey
X-Cache-Category-Id
X-DataStream-Origin-MEX-Latency
X-DataStream-MidMile-RTT
X-Unique-Id
CACHE
X-NODE
X-Sucuri-Id
X-Dynatrace-Js-Agent
X-TH-Server
X-Ftr-Cache-Host
X-Bc
X-CLOUD-TRACE-CONTEXT
Fastly-Backend-Name
Cdn
M-TraceId
X-Tt-Trace-Host
X-LiteSpeed-Cache-Control
X-Core-Value
X-Aicache-OS
X-Edge
X-Check-Cacheable
X-Vcl-Version
Pics-Label
CF-Cached-On
MIME-Version
X-Sucuri-Cache
GW-Server
X-Vdms-Version
WWW
X-Ftr-Realm
Dynatrace
X-Ftr-Balancer
X-Ftr-Backend-Server
X-Ftr-Backend
X-Ftr-Dc
HostName
X-Mid
Requestid
X-NGINX-Cache
X-Rocket-Build-Number
X-RCS-CacheZone
X-LAGOON
X-Sigma-Backend
LB
X-Fastly-Backend-Reqs
X-Sigma
Cf-Ipcountry
X-FORWARDED-FOR
X-AK-Request-ID
X-Planisys-CDN-Cache
X-Varnish-Ttl
X-MCACHE
X-Varnish-Url
X-Fstrz
X-Gannett-Site-Version
Ohc-Response-Time
Cdncip
X-Shopify-Generated-Cart-Token
Cdnsip
Pragrma
X-UPSTREAM-Address
X-Cache-Tag
X-Secret
X-BC
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
Amp-Access-Control-Allow-Source-Origin
X-TT-LOGID
X-ServedByHost
X-Litespeed-Cache-Control
URI
X-Via-NSCOPI
X-PJAX-URL
X-Swift-Error
Lb
WZWS-RAY
X-RPM
X-RPS
X-RSL
X-DW
X-Cache-Ttl
X-WA
X-DI
X-BE
X-DB
X-CDN-Cache
X-DSS
On-Server
X-Varnish-Cacheable
X-Action
DataCenter
X-ORACLE-APMCS-TAG
X-SaId
X-ORACLE-APMCS-REQUEST-ID
User-Agent
X-WR-MODIFICATION
Host-ID
X-Proxy-Cacherz
RequestUuid
Xkeyrz
TTL
X-ND-Cache
X-GeoIP-Country-Code
X-Correlation-ID
CDN
Get-Access-Time
Is-Session-Tracking
X-Flow-Id
X-Zalando-Child-Request-Id
X-Fastly-Cache-Hits
X-Page-Impression-Id
Inserted-Into-Cache-At
X-Upstream-Ct
X-Upstream-Ht
X-Fpc
X-Akamai-SSL-Client-Sid
Xkeypdq
Server-Id
X-Trafficlayer-App-Version
X-Dw-Trace-Id
X-Via-SSL
X-Served-From
X-Crawler
Warning
X-Refresh
X-Via-Edge
Correlation-Id
X-VC
X-MID
X-SB
SID
Who
X-NU-AKA-ACS-Version
X-Gen-Id
X-Nananana
X-Cf-Powered-By
X-Amzn-Remapped-Date
Locid
Gannett-Cam-Experience-Id
X-Amzn-Remapped-Connection
X-Akamai-ERRuleID
X-Akamai-ERPolicy
Thinkindot-Cache-Type
X-ECache
X-Bug-Bounty
X-ServerName
X-FE
HitType
Processtime
X-Render-Time
X-Request-URL
X-Newrelic-App-Data
X-MiniProfiler-Ids
RequestId
X-LB-ID
Xet-Cookie
V-Cache
Cneonction
X-Gdpr
X-LiteSpeed-Tag