Threat Level: green Handler on Duty: Jan Kopriva

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
CF-RAY
Cf-Request-Id
CF-Cache-Status
Accept-Ranges
Link
X-XSS-Protection
ETag
Pragma
Expect-CT
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
Alt-Svc
P3P
X-UA-Compatible
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Xss-Protection
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Adblock-Key
X-Runtime
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Check
X-Cache-Status
X-Generator
P3p
X-Cacheable
X-Request-ID
Timing-Allow-Origin
X-DNS-Prefetch-Control
X-Content-Security-Policy
X-Iinfo
Status
X-Ua-Compatible
Feature-Policy
Content-Encoding
X-AspNetMvc-Version
X-CDN
X-Envoy-Upstream-Service-Time
Access-Control-Expose-Headers
Upgrade
X-Drupal-Dynamic-Cache
Access-Control-Max-Age
X-Dns-Prefetch-Control
X-Via
Keep-Alive
X-Ws-Request-Id
Server-Timing
Request-Context
X-Robots-Tag
X-AH-Environment
X-Hacker
X-Server
X-Age
X-Proxy-Cache
X-Turbo-Charged-By
X-Cache-Group
X-Server-Powered-By
X-Backend
X-Amz-Request-Id
X-Amz-Id-2
EagleId
Host-Header
X-Nginx-Cache-Status
Report-To
X-Rq
X-Varnish-Cache
X-LiteSpeed-Cache
Grace
X-UA-Device
X-Page-Speed
X-Pingback
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
EagleEye-TraceId
X-Device
X-Vhost
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Amz-Version-Id
X-Dispatcher
X-OneAgent-JS-Injection
NEL
Cf-Railgun
X-Host
X-WebKit-CSP
X-Cache-Spec
X-Server-Id
X-CST
X-Node
X-Backend-Server
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
Allow
Request-Id
Surrogate-Control
X-Readtime
Accept-CH
X-Akam-SW-Version
X-Response-Time
Accept-Ch-Lifetime
Xkey
X-Language
X-HW
X-Template
X-Application-Context
X-Country
Content-Location
X-Ac
X-Cloud-Trace-Context
X-Cache-Lookup
Rating
X-Ruxit-JS-Agent
MS-Author-Via
X-Url
X-Webkit-CSP
Edge-Control
X-Clacks-Overhead
X-Vname
X-TtlSet
X-PC
X-Varnish-TTL
X-Mod-Pagespeed
X-Trace
Fastly-Restarts
X-B3-TraceId
X-Content-Type
X-Rack-Cache
X-Buckets
X-MS-InvokeApp
X-Origin-Cache
X-ESI
X-GitHub-Request-Id
X-Country-Code
X-Cnection
X-Goog-Hash
Accept-Ch
Verso
X-VARITI-CCR
X-ORACLE-DMS-ECID
X-FastCGI-Cache
X-D2id
Arr-Disable-Session-Affinity
X-Kinja-Build
X-Kinja-Revision
X-Use-Magma
X-Kinja
X-Exp-Id
X-Exp-Variant
X-Cdn-Fetch
X-GoogleNews-Bot
X-Kinja-Server
Accept-CH-Lifetime
Cache-Tag
X-Vcap-Request-Id
X-Cached
Service-Worker-Allowed
X-Px
X-Server-Name
X-Abt-Application-Version
X-Client-IP
X-Amz-Rid
X-Server-ID
X-Navigation-Version
X-Cache-TTL
Public-Key-Pins
RTSS
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Powered-By-Plesk
X-MSEdge-Ref
Access-Control-Request-Method
X-Element-Page-Cache
X-TTL
X-Dw-Request-Base-Id
X-Powered-CMS
X-Fastly-Request-ID
X-NF-Request-ID
X-Version
X-Upstream
X-Litespeed-Cache
X-Middleton-Response
X-Sol
Display
Pagespeed
Response
X-Middleton-Display
S
X-Kinsta-Cache
X-Edge-Location-Klb
X-Edge
X-LLID
X-Server-Lifecycle-Phase
X-Instrumentation
X-Kraken-Routeconfig-Destination
X-Cache-Key
X-Kraken-Loop-Name
Mrf-Cache-Status
MRF-Tech
X-B3-TraceId-Primal
X-ECACHE
X-Accel-Expires
X-Jurisdiction
X-HP-Webp
X-Shield-Request-Id
X-Correlation-Id
Pinterest-Generated-By
X-ORACLE-DMS-RID
Pinterest-Version
X-Pinterest-Rid
Realpath
X-T
X-Ttl
X-XRDS-Location
X-DynaTrace
SPRequestGuid
X-SharePointHealthScore
X-PressLabs-Stats
X-Mid
X-MCACHE
X-Content-Security-Policy-Report-Only
Edge-Cache-Tag
X-Aspnetmvc-Version
SPRequestDuration
SPIisLatency
X-Amz-Server-Side-Encryption
Fastcgi-Cache
X-Mg-S
X-Ruxit-Js-Agent
X-Forwarded-Proto
Nginx-Cache
X-Content-Digest
TP-L2-Cache
TP-Cache
X-Recruiting
X-Request-Processing-Time
TCN
X-Request-Received
Front-End-Https
Charset
Alternate-Protocol
X-Id
Server-Node
Filters
X-Oneagent-Js-Injection
X-Logged-In
Content-MD5
X-Forwarded-For
X-Geo-Country
X-Ezoic-Cdn
X-Protected-By
Fusion-Content-Id
Fusion-Source
Fusion-Content-Source
Fusion-Deployment-Id
Fusion-Template-Id
Fusion-Component-Id
Cache-Tags
X-Hostname
X-ASPNET-VERSION
X-Amzn-Trace-Id
X-NWS-LOG-UUID
X-Grace
X-Origin-Upstream-Status
X-Debug-Info
X-Ab
X-Goog-Storage-Class
X-Goog-Generation
X-Goog-Metageneration
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-GUploader-UploadID
X-Www-Served-By
Cleartype
X-F-Cache
X-Amz-Replication-Status
X-LB-Cache
X-HS-Hub-Id
X-HS-Cache-Config
X-HS-Content-Id
X-Origin-Server
X-Rid
X-HS-Combine-CSS
X-Activity-Id
X-Az
Host
X-AppVersion
X-Daa-Tunnel
X-Contextid
X-Git-Hash
X-Page-Id
Section-Io-Cache
X-RateLimit-Remaining
Server-Name
X-Content-Options
X-Browser-Type
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-VCache
X-Frontend
X-Cache-Age
X-Ser
X-Upgrade-Enabled
MicrosoftSharePointTeamServices
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Release
Access-Control-Allow-Method
Accept-Charset
X-Hits
ServerID
X-Mobile-URL
X-Source
X-DIS-Request-ID
X-Flags
X-Aspnet-Duration-Ms
X-Varnish-Age
X-Is-Crawler
X-Route-Name
X-Request-Guid
X-Providence-Cookie
X-Signature
X-B-Cache
X-Cache-Action
X-B3-Sampled
Viewport
Paypal-Debug-Id
Healthy
Payment
X-Whom
X-Varnish-Grace
X-TT
X-Varnish-Backend
X-Yandex-Sdch-Disable
X-FB-Debug
Fastcgi-Useragent
X-App-Environment
X-Respond-Thread
Node
X-AOL-HN
X-CACHE-GROUP
X-Load-Cache
X-WebKit-CSP-Report-Only
DynaTrace
X-Mobile
X-Fastcgi-Cache
DC
X-Tt-Trace-Tag
Filterid
X-Tt-Trace-Host
X-Seen-By
Version
X-N
X-Distributor
SRV
X-HTML-Minification-Powered-By
X-User-Agent
Frame-Options
X-Cache-Control
X-Type
Retry-After
X-Tec-Api-Origin
X-Tec-Api-Root
X-Tec-Api-Version
X-HP-Trace-Id
Refresh
X-Jobs
X-FW-Hash
MS-CV
X-FW-Static
X-FW-Type
X-FW-Serve
X-FW-Dynamic
X-FW-Server
X-Ua-Device
Amp-Access-Control-Allow-Source-Origin
X-Response-Served-From
X-Original-Request-Id
X-Cache-Expired-At
X-NGENIX-Cache
X-Adobe-Content
X-Adobe-Loc
X-Proxy-Cache-Status
X-Node-Name
X-UUID
X-Page-View
NGB
X-Azure-Ref
X-Varnish-Server
X-Real-IP
X-Instance
X-IPLB-Instance
X-B
VIX-Pulpo-Node
X-XRDS-LOCATION
VIX-Pulpo-Upstream-Status
X-Debug-IsPreview
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Region
X-G
X-Tumblr-Pixel-1
X-Tumblr-User
X-Cacheable-TTL
X-Vgn-Hpd-Reason
X-Cluster-Name
X-Debug-IsConnected
X-Cache-Time
X-Aws-Lambda-Call-Status
X-RemovedCookies
Access-Control-Request-Headers
X-ProcessESI
X-Device-Type
X-CDN-Forward
X-Framework
X-Proxy
X-Content-Powered-By
Ms-Operation-Id
X-RTag
Nel
X-Zen-Fury
X-Cache-Hit
X-IPS-LoggedIn
SD-X-WS
X-Cache-Rule
Referer-Policy
Uber-Trace-Id
Liferay-Portal
X-Parallel-Accel
Cache-Status
X-Is-Bot
X-Rendered-As
X-Drupal-Cache-Tags
X-Ms-Version
X-Ms-Request-Id
X-Wix-Request-Id
X-Time
X-EdgeConnect-Cache-Status
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
Countrycode
Section-Io-Id
Section-Io-Origin-Status
X-RateLimit-Limit
X-Mg-Request-UUID
X-App-Server
X-Oracle-Dms-Rid
X-Environment-Context
X-Revision
X-Debug
X-L-Path
S-Cnection
Country
X-Yottaa-Optimizations
X-Yottaa-Metrics
CF-IPCountry
X-Accel-Buffering
X-B3-Traceid
X-Cache-Operation
Count-Hit
X-APP-VERSION
X-TA-CDN-Provider
X-Nginx-Cache
X-Request-Handler-Origin-Region
X-Microsite
X-Drupal-Cache-Contexts
X-FW-Version
Akamai-GRN
Cache
X-ES-SERVER
Ar-Sid
Meta-Geo
X-RN-RSRV
AR-PoweredBy
AR-ATIME
X-JoinUs
X-UPSTREAM-Address
AR-CACHE
X-SaId
X-GG-Cache-Date
AR-Request-ID
X-SayCDN-TTL
GEO-INFO
X-LAGOON
X-Cache-Type
X-Loop
X-Say-Cacheable
X-Cache-TTL-Remaining
X-Say-TTL
X-Adobe-Source
X-Endurance-Cache-Level
X-TNCMS
Surrogate-Key
Azure-Version
Azure-SlotName
X-Request-Time
From-Origin
X-S-Maxage
Country-Code
Azure-SiteName
X-Human
X-Varnish-Beresp-Grace
X-Sql-Count
X-NYM-Debug-Backend
X-OCL
Azure-RegionName
X-Sql-Duration-Ms
X-PCL
Azure-InstanceId
Fastly-SSL
Decoy-Debug-Key
Decoy-Debug-Status
X-BYPASS-REASON
Decoy-Debug-TTL
Cache-Name
X-Alternate-Cache-Key
Apigw-Requestid
ServedBy
X-B3-SpanId
Cache-Tv-Group
X-Be
X-AWS-Id
Protected
X-LJ-Flow-ID
X-R9-Blue-Green-Version
X-Pubstack
X-RCS-CacheZone
X-ProxyCache-Key
X-VWS-Id
X-Storefront-Renderer-Rendered
X-ProxyCache-Status
X-Origin-Date
X-Varnishpool
X-Status
X-Varnish-Hostname
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-No-Session
X-Hosted-By
X-Labrador-Cache-Channel
X-Proto
X-ShardId
X-Handled-By
X-Shopify-Stage
X-ShopId
X-PHP-Host
Property-Id
X-Tumblr-Pixel-2
Selected-Fe
X-Timing-Wait
X-Proxy-Build
X-Origin-Hint
X-UA-Device-Type
TWC-Locale-Group
Webcakes-Region
Webcakes-App-Version
X-Redis-Cache
X-Akamai-Edgescape
X-Server-W
X-Format
X-Section
Webcakes-App-Name
X-Via-Fastly
TWC-GeoIP-LatLong
TWC-GeoIP-Country
TWC-Device-Class
X-Web-Node
X-Xfnlog-Site
TWC-Privacy
X-Cache-Server
TWC-Connection-Speed
X-Access
X-App-Version
Eomportal-Instance
X-ApacheServer
X-Hyper-Cache
X-Cluster-Node
X-PERF
Mn-Server-Ip
X-PHP-Backend
X-Backend-Host
X-FB-TRIP-ID
X-Uri
X-Time-Microsecs
X-Servername
Cross-Origin-Opener-Policy
X-Backend-Name
OT-Force-Account-Verify
X-Hl-Ver
X-ServerID
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-TEC-API-VERSION
X-Tumblr-Pixel-3
X-FireWall-Port
X-ATG-Version
X-Detected-As
Cross-Origin-Window-Policy
X-Azure-Ref-OriginShield
Web-Mar-Node
X-Varnish-Cache-Hits
X-Cache-Host
X-Generation-Time
X-Cache-PHP
X-Ua
X-Content-Age
X-Varnish-Hits
Ec-Rule-Version
Content-Secure-Policy
Backend
Source
X-SRV
X-Via-JSL
X-TT-LOGID
X-CS
X-Trace-Id
X-MP-GENERATED-AT
X-Datadome
Upgrade-Insecure-Requests
X-WA-Info
X-Air-Trace-Id
X-Air-Source
X-Air-Hostname
X-Akamai-Transformed
X-Forwarded-Host
X-CSRF-Token
X-Microcachable
X-Cache-Grace
X-Amzn-RequestId
X-Mode
X-Content
X-Amz-Apigw-Id
X-Ua-Browser
X-Soup
Xserver
X-Unique-Id
X-Cdn
X-Edge-Location
X-Locale
X-Cache-Enabled
X-Bc-Bl
Url
X-Ratelimit-Limit
X-Varnish-Beresp-Ttl
X-Rule
X-Origin-CC
X-Amzn-Remapped-Content-Length
X-Origin-TTL
X-Site-Version
X-Info
Content-Disposition
X-Ratelimit-Remaining
X-NWS-UUID-VERIFY
X-GEO
X-Tenant
X-Proxied
X-Zipkin-Id
X-Extlb
X-Varnish-Beresp-Status
X-Routing-Service
SID
X-Tb
X-DataDome
X-Magnolia-Registration
S-Rt
CDN-PullZone
CDN-Cache
CDCHOST
X-Epic-Correlation-Id
Surrogated-Key
CDN-EdgeStorageId
BehaviorPad-Version
CDN-CachedAt
A
X-A-Ccd
X-A-Dam
X-Ftr-Request-Id
X-A
X-VG-WebServer
X-Forwarded-Path
CDN-RequestCountryCode
Apple-News-Services-Parsed-Url
Apple-News-Services-Request-Url
T-Server
Apple-News-Services-Host
Apple-News-Services-Handled
X-External-Request-Id
X-Destination
Path
X-BBC-Edge-Cache-Status
X-B-Cookie
X-BCube-Filmed-By
Odigeo-Trace-Id
Meta-Geo-Continent
Mobile-Detection-Method
X-ARC
Rendered-Blocks
X-Aed
X-A-Wwc
X-A-Dgt
X-Aicache-OS
X-AIR-PT
Req-Svc-Chain
X-Application
X-Cache-Bucket
MD5-Digest
DCR-Processing-Time-Ms
X-Debug-Cache
Expiry
DCR-Decision-By
X-A-Dcw
CDN-Uid
X-Developer
X-D
Fastcgi-X-Cache-Version
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-Cache-NE
X-Conf
X-Connection-Hash
Fastly-SIE
Fastly-SWR
CDN-RequestId
X-From
X-Processor
X-Vtex-Remote-Cache
X-Vdms-Version
X-Ratelimit-Reset
X-Platform-Server
X-PBS-Appsvrname
X-NU-AKA-ACS-Version
X-Orig-Expires
X-PAYTM-SRV-ID
User-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Request-URI
X-ScT
X-Session-Fingerprint
X-Shop-Environment
X-SRCache-Key
X-S-Cookie
X-Storage
X-Tx-Id
X-Rewrite-Enabled
X-Rojux
X-S
X-NAPM-TraceId
X-Rebelmouse-Cache-Control
X-VG-WebCache
X-Dc
X-Vtex-Processado-Em
X-EC-Lua
L
X-Cache-Info
X-Has-Esi
X-Li-Pop
X-Cache-Debug
Is-Eu
Host-ID
Fastly-Backend-Name
X-Date
X-Li-Fabric
Fastly-Drupal-HTML
X-Request-UUID
X-Men
X-Cache-NGX
NGX
X-Service
X-M-Log
X-SVT-ORM-RULES
X-JWT-State
State
X-SVT-ORM-VERSION
UCS
X-Variation
X-Accel-Expires-Debug
X-Cached-By
X-Is-Gdpr
X-VServer
X-Backend-State
X-M-Reqid
Platform
Pics-Label
Origin
X-Cms-Context
X-VG-TLSProxy
X-Loc
X-LI-UUID
X-Origin-Expires
Adler-Geo
X-Proxy-Upstream
X-Micro-Cache
X-Envoy-Decorator-Operation
Cache-Host
X-TrackingId
X-Fastly-Cache
Cache-Key
X-DPWN-IS-SECURE
X-NCache
X-Qnm-Cache
XServer
X-Auto-Login
X-Scheme
X-Esi-Check
X-Varnish-Remaining-TTL
X-Old-Content-Length
X-Origin
X-Varnish-CookieHashed-On
X-Thanos
X-Viewer-Country
VNS-Cache
VNS-Age
Vix-Hermes-Req-Id
X-Forwarded-Site
X-Fastly-Backend
X-SIPLIST1
X-Sigma-Backend
X-Varnish-CookieINHashed-On
X-Slack-Backend
X-Nginx-Cache-Key
X-Sigma
X-Block-Status
X-Developers
X-Generated-By
X-Core-Value
X-Device-Os
X-Geo-Header
X-RateLimit-Limit-Second
X-RateLimit-Remaining-Second
X-DefHash
X-Wikidot-Backend
X-Gen-Mode
X-Req
X-Wikidot-Static-Cache
X-Cluster
X-Gamma-Serve
X-Branch-Name
X-Hnp-Log
X-Served-From
X-DefElseHash
X-Bip
X-Cache-Id
X-Worker
X-Rocket-Build-Number
X-Clientip
X-Gzip
X-Cache-Tags
X-Via-NSCOPI
X-VC-Cache
X-Ckpd-Fst-Backend
Locid
Arc-Version
M-TraceId
CPC-Cache
Server-Ext
PB-RID
IsBot
C-Via
Esi-Enabled
CPC-Age
Fastcgi-Cache-TTL
Cmstype
Cf-Device-Type
Cmsid
Server-Hostname
PB-PID
True-Client-Country-4JS
Sever-Int
X-DC
AMP-Access-Control-Allow-Source-Origin
X-Platform
X-Amz-Meta-S3cmd-Attrs
X-LSADC-Cache
X-Generated-In
X-GeoIP
X-Generated-On
X-FC-Vary-Parameters
X-Planisys-CDN-Cache
X-Policy
X-Request-Host
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
X-Thinkindot-L3
CacheControlHeader
X-Eu-Site
X-GeoIP-City
AKAMAI
X-Level-Front-Cache
Arc-Country
Webserver
X-Location
X-VarnishDD-TTL
X-Mvc-Supplant-Cachable
X-Var-Ttl
Svr
X-Hash
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Vdms-Path
X-HN
X-HS-Content-Campaign-Id
X-Irp-Debug
X-Skip-Cache
X-Owner
X-Fetched-On
L5d-Success-Class
Location
PFcat
Wxu-Next-Commit
Server-Info
Wxu-Next-Hostname
Server-Host
Mail-Subject
DSUID
Release
V-Age
NM-Fastcgi-Cache
Memcached
Thinkindot-Control
X-CGP
We-Hiring
TDXMobile
Ha-Gx-Prefs
Wxu-Next-Region
Gh-Request-Id
Thinkindot-CacheControl
HA-Ipaddr
X-Csrf-Jwt
Thinkindot-CacheControl-Type
Pagetype
X-Render-Time
X-Qloud-Router
X-V-Cache
X-WADP-Cache
X-Sucuri-ID
X-GoCache-CacheStatus
X-Platform-Router
X-Platform-Processor
X-Rocket-Nginx-Serving-Static
X-Clara-WADP
X-Fmm-Version
X-Platform-Cluster
NtCoent-Length
DataCenter
X-SD-PageType
Cache-Hits
X-Mvc-Supplant-OutputCached
X-Servedbyhost
MIME-Version
X-Unique-ID
X-Cache-Var
X-Cache-Var-Map
X-Via-Popv
X-Via-Popn
X-Via-Poph
Kp-EeAlive
Environment
X-Cache-Remote
X-Zone
X-Datadog-Trace-Id
X-Datadog-Sampling-Priority
X-Datadog-Parent-Id
X-NodeID
X-Srv
X-Origin-Time
X-Nyt-Route
X-Wa
X-PJAX-URL
X-Via-Ucdn
X-NC
X-User
X-Gdpr
X-Vc
X-API-Version
X-Cache-Ttl
X-ID
Candidate-Md5Url
X-Server-IP
X-BBC-Origin-Response-Status
X-Pod-Name
X-PF-Uncompressing
X-App
Who
X-Traceid
Server-ID
X-Varnish-Ttl
WebServer
X-Cache-Config
Memory
Cluster
X-VCL-Version
Time
X-Varnish-Url
X-Internal-Host
X-Minions-Version
X-LB-ID
X-Refresh
X-Webkit-Csp
X-TIME
HostName
X-ZONE
X-CACHE-KEY
X-Pass-Why
Web-Mar-Region
Onion-Location
X-Webkit-CSP-Report-Only
Powered-By-ChinaCache
My-App
Datacenter
X-LI-Proto
X-Newrelic-Synthetics
X-ElasticPress-Query
X-NewRelic-App-Data
Geoip-Latitude
Resin-Trace
GeoIp-Country-Code
N-Cache
X-Esi
X-Edge-Pop
X-CLOUD-TRACE-CONTEXT
Servername
Geo-Info
X-Tb-Optimization-Total-Bytes-Saved
X-Varnish-Cacheable
X-Tt-Logid
X-VHOST
X-TraceId
X-OVcl
X-Akamai-Pragma-Client-IP
X-OVcl-Cache
X-EIG-Tracking-Id
WWW-Authenticate
Tcn
CDN
X-TX-ID
Ohc-File-Size
Cf-Bgj
X-Dynatrace
X-Fpc
X-CACHE-AGE
X-HITS
X-Origin-Response-Time
X-Backend-TTL
Hostname
X-Dynatrace-Js-Agent
Magicmarker
X-Geo
Redirect-Candidate
LB
X-TIM-N
X-Tid
Proxy-Connection
X-Varnish-Beresp-TTL
Tracecode
X-NODE
X-Li-Proto
X-Up
Cdn
X-Correlation-ID
X-AB
X-Request-Start
Pramga
GeoIP-Country-Code
X-Wix-Viewer-Type
X-Cache-Date
X-Dispatcher-Server
X-Method
X-NGINX-Cache
X-HostName
X-Webkit-Csp-Report-Only
X-Fastly-Request-Id
X-Sn-Servicetimems
X-MSEdge-Features
X-Amz-Meta-Cb-Modifiedtime
X-Cdn-Origin
X-MSEdge-Flight
X-CSRF-TOKEN
Cf-Ipcountry
CloudFront-Viewer-Country
X-IP
Ssr
X-Provided-By
X-Vcl-Version
X-Fastly-Backend-Reqs
Is-Us
DB-Nickname
GeoIP-Latitude
W
Lb
X-Cs
CF-Cached-On
X-UnsetCookies
X-HS-Status
X-Core-Mission
X-Cache-Expires
X-APP
X-Reqid
X-COUNTRY
X-Lb-Id
Sid
Server-Id
X-MG-S
X-ServerName
WP-Super-Cache
X-Node-Id
X-WA
Cteonnt-Length
X-FORWARDED-FOR
X-Nc
X-Region-Sid
X-ND-Cache
X-VC
X-Check-Cacheable
X-Trv-Group
X-Hcs-Proxy-Type
X-CCDN-CacheTTL
X-Pjax-Url
X-Cache-Status-Check
URI
X-CCDN-Origin-Time
CountryCode
Ohc-Cache-HIT
X-SERVER-NAME
X-Via-PopH
X-Moov-Xdn-Version
Xc-Version
X-Via-PopN
X-Via-PopV
X-DynaTrace-JS-Agent
X-Via-CDN
Env
X-Moov-T
X-Cache-Backend
X-Sucuri-Cache
WZWS-RAY
X-ServedByHost
EpKe-Alive
X-Edge-POP
User-Agent
X-Ig-Push-State
Mime-Version
X-SN
X-Pf-Uncompressing
X-Pad
Shield-Pop
X-Amz-Meta-Opti
X-Acquia-Site
FSS-Cache
X-RAMCache
X-CUA
X-Acquia-Purge-Tags
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-Fastly-Cache-Hits
X-LiteSpeed-Cache-Control
CACHE
X-Varnish-Authentication
X-Contensis-Viewer-Groups
X-TRACE-ID
X-Cache-ASPX
X-IN-APIGATEWAY
X-IN-APIGATEWAYSSL
Xet-Cookie
X-Oss-Request-Id
X-Oss-Server-Time
X-SB
X-Webstats-RespID
X-Oss-Storage-Class
X-Oss-Object-Type
X-Oss-Hash-Crc64ecma
Viewtype
Hit
X-Parent-Response-Time
X-Dispatch
X-Swift-Error
X-Nginx-Upstream-Cache-Status
On-Server
Rt-Fastcgi-Cache
X-DSS
X-DI
X-DB
X-Action
X-DW
X-RPM
X-StackifyID
X-RSL
Server-Ttl
X-RPS
VivaBuild
Vha6-Origin
X-Dw-Trace-Id
X-Cdn-Request-ID
Ohc-Response-Time
X-Cdn-Forward
X-Forwarded-Port
X-Env-Sha256-Sig
X-Env-Stack-Name
X-Amzn-Remapped-X-Forwarded-For
X-Snapshot-Date
X-Amzn-Remapped-User-Agent
X-Amzn-Remapped-Host
X-Ftr-Viewer-Uri
X-UA
X-TH-Server
ServerName
Content-Style-Type
Content-Script-Type
Req-ID
X-Yottaa-OS
X-MiniProfiler-Ids
X-CF-Powered-By
X-ElasticPress-Search
HIT