Threat Level: green Handler on Duty: Manuel Humberto Santander Pelaez

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
Pragma
CF-RAY
CF-Cache-Status
Link
X-Powered-By
ETag
X-XSS-Protection
Expect-CT
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Varnish
X-Request-Id
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Download-Options
X-AspNet-Version
Alt-Svc
Access-Control-Allow-Credentials
X-Runtime
X-Xss-Protection
X-FRAME-OPTIONS
X-Drupal-Cache
X-Adblock-Key
X-Check
Content-Security-Policy-Report-Only
X-Generator
X-Cacheable
X-Cache-Status
X-Permitted-Cross-Domain-Policies
Timing-Allow-Origin
X-DNS-Prefetch-Control
X-Template
X-Language
X-Iinfo
Content-Encoding
Status
X-Content-Security-Policy
X-AspNetMvc-Version
X-Buckets
X-Kinja-Server-Push
Xkey
Upgrade
X-Request-ID
X-Via
Access-Control-Expose-Headers
X-Turbo-Charged-By
Access-Control-Max-Age
Keep-Alive
X-Drupal-Dynamic-Cache
X-Cache-Group
X-Pass-Why
X-Age
EagleId
P3p
X-Backend
X-Envoy-Upstream-Service-Time
X-Robots-Tag
X-CDN
X-Amz-Id-2
X-Amz-Request-Id
X-Page-Speed
X-Ua-Compatible
X-Pingback
X-Server-Powered-By
X-AH-Environment
X-Server
X-Proxy-Cache
X-UA-Device
X-Hacker
Request-Context
X-Nginx-Cache-Status
X-Swift-SaveTime
X-Swift-CacheTime
Grace
X-Varnish-Cache
Ali-Swift-Global-Savetime
X-Cdn
X-LiteSpeed-Cache
Cf-Railgun
Server-Timing
Feature-Policy
X-Amz-Version-Id
X-Device
X-WebKit-CSP
X-Server-Id
X-OneAgent-JS-Injection
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Rq
X-Ac
EagleEye-TraceId
X-Cnection
Report-To
X-Cloud-Trace-Context
Request-Id
X-Response-Time
X-Backend-Server
X-Host
Content-Location
X-Node
X-Readtime
X-Origin-Cache
X-Vhost
X-Cache-Lookup
X-Application-Context
X-DataDome
X-ORACLE-DMS-ECID
X-Dispatcher
X-Ruxit-JS-Agent
NEL
X-ORACLE-DMS-RID
X-Rack-Cache
X-Origin-Upstream-Status
X-HW
Surrogate-Control
Rating
X-Clacks-Overhead
X-Country-Code
Allow
X-Dns-Prefetch-Control
X-Country
X-Url
X-FTR-Request-ID
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-DynaTrace
X-MS-InvokeApp
X-Instart-Request-ID
Fusion-Source
Fusion-Content-Source
Fusion-Component-Id
Fusion-Template-Id
X-Goog-Hash
Fusion-Content-Id
X-PC
X-Vname
X-TtlSet
X-Varnish-TTL
X-TTL
X-B3-TraceId
Pinterest-Generated-By
Verso
X-Powered-By-Plesk
X-Px
Public-Key-Pins
RTSS
Edge-Control
X-ESI
X-Mod-Pagespeed
SPRequestGuid
X-VARITI-CCR
X-Middleton-Display
Response
Display
X-Sol
X-Middleton-Response
X-Kinja-Revision
X-Kinja-Server
X-Use-Magma
X-Kinja-Build
X-Exp-Id
X-Exp-Variant
X-Kinja
X-GoogleNews-Bot
X-Cdn-Fetch
X-D2id
X-SharePointHealthScore
X-Akam-SW-Version
X-Recruiting
X-Ah-Environment
X-CST
Service-Worker-Allowed
X-Vcap-Request-Id
SPIisLatency
Accept-Ch-Lifetime
SPRequestDuration
X-Server-Name
X-Version
X-GitHub-Request-Id
TCN
X-Powered-CMS
X-Navigation-Version
MS-Author-Via
X-Abt-Application-Version
X-Trace
Charset
X-Debug
X-Shard
Accept-CH
Realpath
Nginx-Cache
Fastly-Restarts
X-Amz-Rid
X-Amz-Server-Side-Encryption
X-Upstream
X-Aspnetmvc-Version
AR-ATIME
AR-CACHE
AR-PoweredBy
Ar-Sid
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-RateLimit-Remaining
X-Forwarded-Proto
X-NF-Request-ID
X-Ezoic-Cdn
Front-End-Https
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Metageneration
X-Goog-Stored-Content-Length
X-Cached
X-MSEdge-Ref
DynaTrace
Access-Control-Request-Method
Arr-Disable-Session-Affinity
Pagespeed
Content-MD5
X-VCache
X-Shield-Request-Id
AR-Request-ID
X-B3-TraceId-Primal
Mrf-Cache-Status
X-Mrf-Item-Lastmod
X-Mrf-Section-Lastmod
MRF-Tech
MicrosoftSharePointTeamServices
X-Country-Code-Real
X-FTR-Cache-Status
X-FTR-Expires
S
X-Goog-Storage-Class
X-T
X-Fastly-Request-ID
X-Amz-Meta-S3cmd-Attrs
X-Ser
X-XRDS-Location
X-FTR-DC
X-FTR-Realm
X-FTR-Balancer
X-FTR-Backend
X-Id
X-FTR-Backend-Server
Paypal-Debug-Id
X-DynaTrace-JS-Agent
X-Varnish-Age
ServerID
X-Via-JSL
Accept-Ch
X-Grace
X-Server-ID
X-Accel-Expires
X-Content-Type
X-Client-IP
X-Dw-Request-Base-Id
X-Correlation-Id
X-Forwarded-For
Edge-Cache-Tag
Fastcgi-Cache
X-Hits
X-Amzn-Trace-Id
X-Content-Digest
Powered
X-Frontend
X-DIS-Request-ID
AMP-Access-Control-Allow-Source-Origin
X-N
X-Fastcgi-Cache
X-FTR-Cache-Host
Arc-Version
X-Mobile-Rewrite
X-Pinterest-Rid
PB-RID
Pinterest-Version
PB-PID
X-HS-Hub-Id
X-HS-Content-Id
Server-Name
X-Logged-In
X-Vcache
X-FastCGI-Cache
X-Request-Received
X-Request-Processing-Time
TP-L2-Cache
TP-Cache
X-Microsite
X-Cache-Hit
X-Request-Handler-Origin-Region
X-Kinsta-Cache
X-Zen-Fury
X-Time
X-AppVersion
X-Az
X-Activity-Id
X-IPLB-Instance
X-LB-Cache
X-Rid
X-Revision
Healthy
X-GUploader-UploadID
X-User-Agent
X-Type
X-Cache-Age
Retry-After
X-Srv
X-Whom
Backend-Timing
X-Analytics
X-Node-Name
X-B3-Sampled
Server-Node
FilterID
X-NWS-LOG-UUID
X-Hp-Webp
Alternate-Protocol
X-RateLimit-Limit
Cache-Tag
Accept-Charset
X-F-Cache
X-Akamai-Edgescape
X-SERVER
X-Content-Security-Policy-Report-Only
Cache-Status
NR-ENABLED
X-Content-Options
X-Cache-Rule
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
DC
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-FB-Debug
X-Cache-2
X-Content-Powered-By
X-Cluster
X-Tumblr-Pixel
MS-CV
X-Tumblr-User
X-Tumblr-Pixel-0
X-Webkit-CSP
Access-Control-Allow-Method
Refresh
X-Amz-Apigw-Id
X-Amzn-RequestId
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-App-Environment
X-Varnish-Grace
X-Instance
X-AOL-HN
X-Framework
X-PHP-Backend
X-Jobs
Tracecode
X-Page-Id
Source
X-Debug-Info
X-Cache-TTL
X-Request-Guid
X-Forwarded-Host
Actual-Object-TTL
X-B
Surrogate-Key
X-Seen-By
X-App-Server
X-Mobile-URL
Fastcgi-Useragent
X-Cache-Operation
Host
X-Cache-Key
Frame-Options
X-FW-Static
X-Geo-Country
X-FW-Type
X-FW-Server
X-FW-Hash
X-FW-Serve
X-Cache-Control
X-Pad
X-Cached-By
X-TA-CDN-Provider
Cleartype
X-Hostname
X-Host-Name
X-B-Cache
X-Signature
X-Element-Page-Cache
Upgrade-Insecure-Requests
X-Git-Hash
X-Mobile
X-WebKit-CSP-Report-Only
X-BCube-Filmed-By
NGB
X-ATG-Version
X-Response-Served-From
X-Varnish-Backend
X-XRDS-LOCATION
X-HS-Cache-Config
X-UA-Device-Type
X-ProcessESI
X-GeoIP
X-RemovedCookies
X-Presslabs-Stats
WPE-Backend
X-Amz-Replication-Status
X-RTag
Cache-Tv-Group
Eomportal-Instance
Filters
X-Handled-By
Webserver
X-Tumblr-Pixel-1
X-TT
X-Tumblr-Pixel-2
Ms-Operation-Id
X-Daa-Tunnel
X-Origin-Server
GEO-INFO
X-Ttl
X-EdgeConnect-Cache-Status
X-Drupal-Cache-Tags
X-RequestSource
From-Origin
Xserver
X-Adobe-Content
X-Cacheable-TTL
Payment
X-Adobe-Loc
X-TX-ID
X-TT-TIMESTAMP
X-Wix-Request-Id
X-Cache-TTL-Remaining
X-B3-Traceid
X-Status
Liferay-Portal
X-Cache-Remote
X-FW-Dynamic
Cache
X-WA-Info
Datacenter
X-Esi
X-Hyper-Cache
Accept-CH-Lifetime
X-Acc-Meta-Resource-Type
X-Contextid
X-Region
X-Cache-Action
X-Edge-Location
Version
X-Content-Age
Viewport
X-Ratelimit-Reset
X-CF-Powered-By
X-HS-Combine-CSS
X-Cache-NE
X-Varnish-Hostname
X-Akamai-Transformed
X-Cache-Server
X-Storage
PageSpeed
X-Varnish-Server
X-ES-SERVER
Meta-Geo
X-Cache-Var
X-Cache-Var-Map
X-Path-Route
Load-Balancing
Host-Header
X-RN-RSRV
X-Accel-Buffering
X-IP
X-Cache-Enabled
X-Xfnlog-Site
Country
X-Viewer-Country
Ohc-File-Size
X-Via-Fastly
X-Proxy
X-CCM
X-Cache-Config
X-Debug-Cache
X-Tumblr-Pixel-3
X-Device-Type
Cache-Tags
X-TNCMS
X-Proto
X-Loop
Rt-Fastcgi-Cache
Release
Cache-Name
DB-Nickname
X-NCache
DSUID
Ec-Rule-Version
TWC-GeoIP-LatLong
X-Akamai-Request-ID2
Webcakes-Region
Vix-Hermes-Req-Id
X-CS
X-Hosted-By
X-OCL
X-Cache-Grace
X-EIG-Tracking-Id
Cache-Hits
X-Rule
X-Www-Served-By
X-UnsetCookies
X-Varnish-Cache-Hits
X-Backend-TTL
X-Cache-Time
X-Timing-Wait
X-Backend-Name
X-PCL
X-Yottaa-Metrics
X-Human
TWC-GeoIP-Country
X-Vgn-Hpd-Reason
TWC-Device-Class
TWC-Connection-Speed
S-Rt
Selected-Fe
TWC-Locale-Group
TWC-Privacy
X-Yottaa-Optimizations
X-Proxy-Build
X-R9-Blue-Green-Version
Webcakes-App-Version
X-FC-Vary-Parameters
X-Origin-Hint
X-From
Property-Id
Webcakes-App-Name
X-NewRelic-App-Data
X-Locale
X-JoinUs
X-Web-Node
X-Origin
X-Generated
X-PressLabs-Stats
Mn-Server-Ip
X-Akamai-Request-ID
X-Cluster-Node
X-Trace-Id
X-Origin-Response-Time
X-Cache-Host
Decoy-Debug-Key
Decoy-Debug-Status
Decoy-Debug-TTL
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Labrador-Cache-Channel
X-Time-Microsecs
X-Site-Version
X-Upgrade-Enabled
X-VCT
Azure-Version
X-Drupal-Cache-Contexts
S-Cnection
Azure-RegionName
Azure-InstanceId
Azure-SlotName
Azure-SiteName
X-FireWall-Port
X-PERF
X-Access
X-Hit
X-ApacheServer
X-Section
X-Varnish-Hits
X-Real-IP
X-OVcl-Cache
X-OVcl
X-Format
X-Rendered-As
X-S
Cache-Key
Ohc-Cache-HIT
Time
Server-Info
X-Pubstack
Origin-Cache-Control
Origin-Edge-Control
X-Redis-Cache
X-NGENIX-Cache
L5d-Success-Class
X-Tec-Api-Root
X-Tec-Api-Version
X-Tec-Api-Origin
X-Trafficlayer-App-Name
X-Trafficlayer-App-Scope
X-FW-Version
X-APP-VERSION
Now
Fastcgi-X-Cache-Version
X-Ua
X-Litespeed-Cache
Fastly-SSL
OT-Force-Account-Verify
X-SS-Set-Cookie
X-Upstream-HT
X-Upstream-CT
X-Origin-TTL
X-Origin-CC
Cteonnt-Length
Access-Control-Request-Headers
ServedBy
X-ServerID
X-Cluster-Name
X-Sorting-Hat-ShopId
X-Load-Cache
X-ShopId
X-Alternate-Cache-Key
Origin
X-ShardId
X-UUID
X-Sorting-Hat-PodId
Hostname
X-FB-TRIP-ID
X-Shopify-Stage
X-GoCache-CacheStatus
X-Soup
X-Parent-Response-Time
X-Rocket-Nginx-Bypass
X-VG-WebCache
Mime-Version
NtCoent-Length
X-Webkit-Csp
Accept-Language
X-VG-TLSProxy
X-Upstream-Proxy
Machine
X-Is-Bot
X-UA
Odigeo-Trace-Id
X-App-Version
NGX
IBM-Web2-Location
X-Tb
X-No-Session
X-Info
X-Uri
Nel
X-ProxyCache-Key
X-BYPASS-REASON
X-ProxyCache-Status
X-MServer
X-L-Path
X-ECACHE
X-Environment-Context
X-Node-Id
X-Guploader-Uploadid
X-CACHE-KEY
X-Geo
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
Apple-News-Services-Handled
CF-IPCountry
Proxy-Connection
X-External-Request-Id
X-D
X-Date
X-Destination
Uber-Trace-Id
X-G
X-B3-Parentspanid
Request-Time
X-Connection-Hash
X-Instart-Info
A
X-Hl-Ver
X-Detected-As
X-DPWN-IS-SECURE
X-Developer
X-Rojux
X-A-Dgt
X-A-Wwc
X-A-Dcw
X-B3-Spanid
X-CSRF-TOKEN
X-A-Dam
X-Accel-Expires-Debug
X-Aed
X-Application
Apple-News-Services-Request-Url
X-AIR-PT
X-VG-WebServer
X-Vtex-Remote-Cache
X-Vtex-Processado-Em
Xc-Version
X-A-Ccd
ServerName
T-Server
Rt-Proxy-Cache
Rendered-Blocks
Request-EU
Request-Country
Node
Mobile-Detection-Method
VivaBuild
X-A
MD5-Digest
Memcached
Meta-Geo-Continent
Viewtype
GEO-REGION-INFO
X-ARC
X-CF-Lambda-Fn
X-S-Cookie
X-ScT
X-Twitter-Response-Tags
BehaviorPad-Version
X-Rewrite-Enabled
X-Request-UUID
X-Cms-Context
X-Region-Sid
Cache-Prefix
X-CF-Lambda-Version
X-PAYTM-SRV-ID
X-Server-Time
X-Transaction
Arc-Country
X-B-Cookie
Fly-Cache
Cross-Origin-Window-Policy
X-SRCache-Key
X-Trv-Group
AsisCache
Content-Script-Type
Content-Style-Type
Fly-Request-Id
Backend-Name
X-Endurance-Cache-Level
Srv
X-Oneagent-Js-Injection
X-Tt-Trace-Tag
X-Nc
X-Cdn-Srv
X-Generated-By
X-Cache-Bucket
IsBot
N-Cache
X-Clara-WADP
X-JWT-State
X-Is-Gdpr
Mail-Subject
X-SIPLIST1
X-Worker
X-WADP-Cache
X-Has-Esi
X-SVT-ORM-RULES
We-Hiring
X-SVT-ORM-VERSION
X-Device-Os
X-B3-SpanId
X-Amzn-Remapped-Content-Length
X-NC
X-PHP-Host
User-Cache-Control
X-Dc
X-Via-CDN
X-Webstats-RespID
X-WebServer
X-VC-Cache
X-Up
X-TrackingId
X-Auto-Login
X-User
X-Block-Status
X-Var-Ttl
X-We-Are-Hiring
X-Debug-Cookies
Section-Io-Cache
Served-By
Server-Host
X-Proxy-Upstream
RNT-Time
X-Sn-Servicetimems
X-Request-URI
X-Proxy-Cache-Status
X-NX-Host
X-Thanos
X-Cdn-Origin
X-Debug-Log
X-ElasticPress-Search
X-Hnp-Log
X-Gen-Mode
X-Cache-Info
X-Skip-Cache
X-Hash
X-GeoIP-City
X-Debug-Cache-Expiry
X-IN-APIGATEWAY
X-CUA
X-Compress-Hint
X-IN-APIGATEWAYSSL
X-Debug-Cache-Fetch
X-Debug-Cache-Store
X-Fastly-Cache
X-Dispatch
X-Fetched-On
X-Generated-On
X-Geo-Header
X-Generation-Time
X-Irp-Debug
RNT-Machine
X-Server-IP
X-S-Maxage
X-Reqid
X-Service
X-Developers
X-Backend-Url
X-BBXSRF
X-Release
X-Reboot
X-Location
X-Level-Front-Cache
X-Magnolia-Registration
X-Origin-Date
X-Clientip
X-Origin-Expires
X-Backend-Host
X-Bip
AKAMAI
Pagetype
Heartbleed
Fastly-Soc-X-Request-Id
Countrycode
Content-Disposition
X-Ratelimit-Limit
Gh-Request-Id
X-Nginx-Cache
Pramga
PFcat
X-Cdn-Forward
Akamai-GRN
X-NWS-UUID-VERIFY
X-Owner
X-Svr
X-Qloud-Router
X-Request-Start
X-Platform-Server
X-Method
X-Distil-CS
X-Distributor
X-Dispatcher-Server
Adler-Geo
X-Core-Mission
X-Eu-Site
X-Key
X-VServer
X-Nginx-Cache-Key
X-LI-UUID
X-Li-Fabric
X-Lb-Id
X-Old-Content-Length
X-Swa-Ws
Thinkindot-CacheControl
Server-Int
X-Policy
Locale
Thinkindot-CacheControl-Type
Thinkindot-Control
X-Generated-In
X-Matched-Rule
Web-Mar-Node
True-Client-Country-4JS
Kp-EeAlive
CDCHOST
X-Variation
X-SayCDN-TTL
X-Thinkindot-L3
X-Urbn-Context-Path
X-Say-TTL
X-Say-Cacheable
X-RateLimit-Limit-Second
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-RateLimit-Remaining-Second
X-Urbn-Site-Id
X-Li-Pop
Ha-Gx-Prefs
X-CGP
Magicmarker
HA-Ipaddr
Is-Eu
Wxu-Next-Region
Wxu-Next-Commit
L
Wxu-Next-Hostname
X-Amz-Meta-Cache-Control
X-Cache-FS-Status
X-Azure-Ref-OriginShield
Platform
X-Azure-Ref
Esi-Enabled
X-C
SRV
X-Microcachable
X-Rebelmouse-Surrogate-Control
X-Backend-State
X-MSEdge-Flight
X-ServiceProvider
X-Instart-Isnd
X-Servername
X-App-Name
X-LI-Proto
X-SD-PageType
X-Internal-Host
X-MSEdge-Features
X-Rebelmouse-Cache-Control
W
X-Cache-URL
Memory
Resin-Trace
X-Cache-Id
Fastly-SWR
X-Epic-Correlation-Id
Fastly-SIE
SD-X-WS
Server-ID
X-FPC
X-Scheme
V-Age
X-Cache-Backend
Cache-Provider
X-Be
X-GEO
X-VWS-Id
X-Processor
Cdn-Host
X-Edge-Server
X-LJ-Flow-ID
X-AWS-Id
Cdn-Request-Time
REQUESTUUID
X-GDPR
X-Mode
Group
X-DC
X-Org
X-NodeID
X-Request-Time
X-Flog
X-ABtesting
SS
X-Pjax-Url
X-Servedbyhost
X-Wa
X-Hello
Cache-Host
X-Datadome
X-Server-W
X-Response-By
X-CDN-Forward
X-IPS-LoggedIn
X-Ms-Request-Id
X-Ms-Version
X-Unique-ID
Country-Code
X-Page-Type
X-Varnish-Beresp-Ttl
Cache-Cookie-Set-Lfrom
X-VCL-Version
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-Webapp-Samesite-None-Activated-N
X-Oss-Hash-Crc64ecma
Cache-Cookie-Set-Idcheck
X-Oss-Server-Time
X-Oss-Storage-Class
X-SN
Cache-Cookie-Set-From
X-Oss-Request-Id
X-Oss-Object-Type
X-Ratelimit-Remaining
X-Ruxit-Js-Agent
X-EC-Lua
X-Session-Fingerprint
X-Oracle-Dms-Rid
X-Via-Ucdn
PICS-Label
Lfy
X-Zone
X-Routing-Service
X-Zipkin-Id
X-Proxied
X-Ftr-Request-Id
X-HS-Status
X-Cache-Debug
X-Tb-Optimization-Total-Bytes-Saved
X-SRV
UCS
X-Dynatrace
Ttl
X-COUNTRY
X-URL
X-Agile
X-Agile-Age
GeoIp-Country-Code
X-Pf-Uncompressing
Geoip-City
X-Agile-Id
Geoip-Latitude
Powered-By-ChinaCache
X-GRACE
X-DataStream-Cache-Status
XServer
X-Logtrace-Id
Ajk
X-7Graus-Varnish-Cache-Control
SN
X-7Graus-Varnish-XKeys
X-Varnish-Beresp-TTL
X-RateLimit-Reset
X-CSRF-Token
X-MP-GENERATED-AT
X-Cache-Miss-From
X-Sucuri-ID
X-Sedo-Request-Id
Environment
Proxy-Firewall
X-Fastly-Country-Code
X-Logging-Id
ProcessTime
X-Source
X-Unique-Id
X-APP
Powered-By
X-Cache-Category-Id
X-PF-Uncompressing
GeoIP-City
X-Newrelic-Synthetics
X-Dynatrace-Js-Agent
GeoIP-Country-Code
GeoIP-Latitude
X-Grey
X-ZONE
X-Bc
X-NODE
X-HTML-Minification-Powered-By
X-Sucuri-Id
Cdn
X-Ftr-Cache-Host
X-CLOUD-TRACE-CONTEXT
X-TH-Server
X-Core-Value
X-Vcl-Version
X-Tt-Trace-Host
X-Vdms-Version
X-Edge
CF-Cached-On
M-TraceId
X-DataStream-Origin-MEX-Latency
X-DataStream-MidMile-RTT
CACHE
Pics-Label
Fastly-Backend-Name
X-Check-Cacheable
X-Aicache-OS
X-LiteSpeed-Cache-Control
Cdnsip
X-AK-Request-ID
Cf-Ipcountry
Cdncip
MIME-Version
X-Sucuri-Cache
WWW
HostName
X-Ftr-Backend
X-Ftr-Backend-Server
X-Ftr-Balancer
X-Swift-Error
X-Ftr-Realm
X-Ftr-Dc
X-Planisys-CDN-Cache
X-Sigma-Backend
X-Rocket-Build-Number
X-Fastly-Backend-Reqs
X-Planisys-CDN-Rules
X-Mid
GW-Server
X-Fstrz
Pragrma
X-Sigma
Requestid
X-RCS-CacheZone
X-Planisys-CDN-TTL
X-Shopify-Generated-Cart-Token
LB
X-FORWARDED-FOR
X-MCACHE
X-Via-NSCOPI
X-Varnish-Ttl
X-Cache-Tag
X-ServedByHost
X-NGINX-Cache
X-LAGOON
Amp-Access-Control-Allow-Source-Origin
X-Secret
X-TT-LOGID
X-PJAX-URL
Ohc-Response-Time
X-BC
X-Gannett-Site-Version
X-ORACLE-APMCS-TAG
X-ORACLE-APMCS-REQUEST-ID
X-Varnish-Url
X-WA
X-Litespeed-Cache-Control
X-UPSTREAM-Address
X-SaId
Lb
X-Action
X-DI
X-Cache-Ttl
X-RPM
X-DB
X-DW
X-RSL
URI
DataCenter
X-CDN-Cache
X-BE
TTL
X-RPS
X-ND-Cache
X-DSS
Dynatrace
X-Upstream-Ct
X-Upstream-Ht
X-Varnish-Cacheable
Server-Id
X-Refresh
RequestUuid
X-GeoIP-Country-Code
X-Trafficlayer-App-Version
CDN
On-Server
X-WR-MODIFICATION
Host-ID
WZWS-RAY
X-Correlation-ID
X-Served-From
Is-Session-Tracking
Get-Access-Time
X-Via-Edge
X-Via-SSL
X-Zalando-Child-Request-Id
X-Flow-Id
X-Proxy-Cacherz
User-Agent
Xkeypdq
X-Fpc
X-Fastly-Cache-Hits
Xkeyrz
Inserted-Into-Cache-At
X-Page-Impression-Id
X-VC
X-Req
X-Nananana
X-MID
Warning
X-SB
X-Pod
Correlation-Id
Gannett-Cam-Experience-Id
X-Gamma-Serve
X-Dw-Trace-Id
Locid
X-Akamai-SSL-Client-Sid
X-Cf-Powered-By
FNAC-ModuleRouting
X-Akamai-ERPolicy
X-Akamai-ERRuleID
Thinkindot-Cache-Type
Processtime
X-Amzn-Remapped-Date
X-Amzn-Remapped-Connection
X-Li-Proto
X-LiteSpeed-Tag
Cneonction
X-MiniProfiler-Ids
RequestId
X-Gdpr
V-Cache
SID
Xet-Cookie
Who
X-LB-ID
X-Crawler
X-Request-URL
X-Bug-Bounty
HitType
X-ServerName
X-Gen-Id
X-Newrelic-App-Data
X-NU-AKA-ACS-Version
X-ECache