Threat Level: green Handler on Duty: Jan Kopriva

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
CF-RAY
Cf-Request-Id
CF-Cache-Status
Accept-Ranges
Link
ETag
Pragma
Expect-CT
X-Powered-By
X-XSS-Protection
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
Alt-Svc
P3P
X-UA-Compatible
X-Served-By
X-Xss-Protection
X-Timer
X-Download-Options
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Adblock-Key
X-Runtime
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Check
X-Cache-Status
X-Generator
P3p
X-Request-ID
X-Cacheable
Timing-Allow-Origin
X-DNS-Prefetch-Control
X-Content-Security-Policy
X-Iinfo
Status
X-Ua-Compatible
Feature-Policy
Content-Encoding
X-AspNetMvc-Version
X-CDN
X-Envoy-Upstream-Service-Time
Access-Control-Expose-Headers
Upgrade
X-Drupal-Dynamic-Cache
Access-Control-Max-Age
X-Dns-Prefetch-Control
X-Via
Keep-Alive
X-Ws-Request-Id
Server-Timing
Request-Context
X-Robots-Tag
X-AH-Environment
X-Hacker
X-Server
X-Age
X-Turbo-Charged-By
X-Proxy-Cache
X-Cache-Group
X-Server-Powered-By
X-Backend
X-Amz-Request-Id
X-Amz-Id-2
Host-Header
EagleId
X-Nginx-Cache-Status
Report-To
X-LiteSpeed-Cache
X-Rq
X-Varnish-Cache
Grace
X-UA-Device
X-Page-Speed
X-Pingback
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
EagleEye-TraceId
X-Device
X-Vhost
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Amz-Version-Id
NEL
X-Dispatcher
X-OneAgent-JS-Injection
Cf-Railgun
X-Host
X-WebKit-CSP
X-Cache-Spec
X-Server-Id
X-CST
X-Backend-Server
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
Allow
X-Node
Request-Id
Surrogate-Control
X-Readtime
Accept-CH
X-Akam-SW-Version
Accept-Ch-Lifetime
X-Response-Time
Xkey
X-Language
X-HW
X-Template
X-Application-Context
X-Country
X-Ac
Content-Location
X-Cache-Lookup
X-Cloud-Trace-Context
Rating
X-Ruxit-JS-Agent
MS-Author-Via
X-Url
X-Webkit-CSP
Edge-Control
X-Clacks-Overhead
X-Vname
X-PC
X-TtlSet
X-Mod-Pagespeed
X-Varnish-TTL
X-Trace
Fastly-Restarts
X-B3-TraceId
Accept-Ch
X-Content-Type
X-Rack-Cache
X-Buckets
X-MS-InvokeApp
X-Origin-Cache
X-ESI
X-GitHub-Request-Id
X-Cnection
X-Country-Code
X-Goog-Hash
X-D2id
X-VARITI-CCR
Verso
Arr-Disable-Session-Affinity
X-Kinja-Server
X-Kinja-Build
X-Use-Magma
X-Kinja
X-GoogleNews-Bot
X-Exp-Id
X-Exp-Variant
X-Cdn-Fetch
X-Kinja-Revision
Cache-Tag
X-Cached
X-Vcap-Request-Id
X-ORACLE-DMS-ECID
Service-Worker-Allowed
X-FastCGI-Cache
X-Px
X-Abt-Application-Version
X-Server-Name
X-Amz-Rid
X-Client-IP
X-Navigation-Version
Accept-CH-Lifetime
X-Server-ID
X-TTL
Public-Key-Pins
X-Cache-TTL
RTSS
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Powered-By-Plesk
Access-Control-Request-Method
X-Dw-Request-Base-Id
X-MSEdge-Ref
X-Fastly-Request-ID
X-Element-Page-Cache
X-Powered-CMS
X-Version
X-NF-Request-ID
X-Upstream
Response
X-Middleton-Display
X-Middleton-Response
X-Sol
Pagespeed
Display
S
X-Edge-Location-Klb
X-Kinsta-Cache
X-Edge
X-LLID
X-Kraken-Routeconfig-Destination
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Instrumentation
Mrf-Cache-Status
MRF-Tech
X-B3-TraceId-Primal
X-Cache-Key
X-ECACHE
X-Accel-Expires
X-Shield-Request-Id
X-HP-Webp
X-Jurisdiction
X-Pinterest-Rid
Pinterest-Version
Pinterest-Generated-By
X-Correlation-Id
Realpath
X-XRDS-Location
X-DynaTrace
X-T
X-MCACHE
X-Mid
X-SharePointHealthScore
SPRequestGuid
X-PressLabs-Stats
Edge-Cache-Tag
X-Content-Security-Policy-Report-Only
SPIisLatency
SPRequestDuration
X-ORACLE-DMS-RID
X-Litespeed-Cache
Fastcgi-Cache
X-Amz-Server-Side-Encryption
X-Mg-S
X-Ruxit-Js-Agent
X-Ttl
X-Content-Digest
Nginx-Cache
X-Forwarded-Proto
TP-Cache
TP-L2-Cache
X-Recruiting
Front-End-Https
TCN
Charset
Alternate-Protocol
X-Request-Processing-Time
X-Request-Received
X-Id
Server-Node
X-Logged-In
X-Oneagent-Js-Injection
Content-MD5
X-Geo-Country
Filters
X-Forwarded-For
X-Ezoic-Cdn
X-Protected-By
Fusion-Content-Id
Fusion-Template-Id
Fusion-Source
Fusion-Deployment-Id
Fusion-Component-Id
Fusion-Content-Source
X-Hostname
Cache-Tags
X-ASPNET-VERSION
X-NWS-LOG-UUID
X-Amzn-Trace-Id
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-GUploader-UploadID
X-Goog-Generation
X-Grace
X-Goog-Metageneration
X-Goog-Storage-Class
X-Origin-Upstream-Status
X-Debug-Info
X-Www-Served-By
X-LB-Cache
X-F-Cache
X-Amz-Replication-Status
Cleartype
X-HS-Content-Id
X-HS-Hub-Id
X-HS-Cache-Config
X-Az
X-Origin-Server
X-HS-Combine-CSS
X-Activity-Id
Host
X-Rid
X-AppVersion
X-Ab
X-Daa-Tunnel
X-Contextid
X-Git-Hash
X-Page-Id
Section-Io-Cache
X-RateLimit-Remaining
Server-Name
X-Browser-Type
X-VCache
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-Content-Options
X-Cache-Age
X-Ser
X-Frontend
X-Upgrade-Enabled
MicrosoftSharePointTeamServices
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
Access-Control-Allow-Method
X-Release
X-Aspnetmvc-Version
Accept-Charset
X-Hits
X-Fastcgi-Cache
X-Source
X-Mobile-URL
X-DIS-Request-ID
ServerID
X-Request-Guid
X-Providence-Cookie
X-Flags
X-Route-Name
X-Is-Crawler
X-Aspnet-Duration-Ms
X-Cache-Action
X-B3-Sampled
X-Varnish-Age
X-Signature
Healthy
X-B-Cache
X-Whom
X-Varnish-Grace
X-FB-Debug
Payment
X-Varnish-Backend
Viewport
Fastcgi-Useragent
X-TT
X-AOL-HN
X-Yandex-Sdch-Disable
X-Respond-Thread
Node
X-App-Environment
X-CACHE-GROUP
X-WebKit-CSP-Report-Only
Paypal-Debug-Id
X-Load-Cache
DynaTrace
X-Mobile
X-Tt-Trace-Tag
X-Tt-Trace-Host
Filterid
X-Seen-By
DC
Version
X-Distributor
X-N
SRV
X-HTML-Minification-Powered-By
X-Cache-Control
X-User-Agent
Frame-Options
Retry-After
X-Type
X-Tec-Api-Root
X-Tec-Api-Origin
X-Tec-Api-Version
X-HP-Trace-Id
Refresh
MS-CV
X-Jobs
X-Original-Request-Id
X-FW-Static
X-FW-Hash
X-FW-Type
X-FW-Serve
X-Response-Served-From
Amp-Access-Control-Allow-Source-Origin
X-FW-Dynamic
X-Ua-Device
X-FW-Server
X-UUID
X-NGENIX-Cache
X-Cache-Expired-At
X-Node-Name
X-Adobe-Loc
NGB
X-Page-View
X-Azure-Ref
X-Adobe-Content
X-Proxy-Cache-Status
X-Debug-IsPreview
X-Real-IP
X-Debug-IsConnected
X-G
VIX-Pulpo-Node
X-Cacheable-TTL
X-B
VIX-Pulpo-Upstream-Status
X-ProcessESI
X-Varnish-Server
X-Region
X-RemovedCookies
X-Vgn-Hpd-Reason
X-XRDS-LOCATION
Access-Control-Request-Headers
X-IPLB-Instance
Ms-Operation-Id
X-Framework
X-RTag
X-Instance
X-Aws-Lambda-Call-Status
X-Device-Type
X-Cluster-Name
X-Content-Powered-By
X-Tumblr-Pixel-1
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Cache-Time
X-Oracle-Dms-Rid
X-CDN-Forward
X-Proxy
X-Cache-Hit
X-Zen-Fury
X-IPS-LoggedIn
Referer-Policy
Uber-Trace-Id
SD-X-WS
Liferay-Portal
X-Cache-Rule
X-Parallel-Accel
X-Drupal-Cache-Tags
X-Rendered-As
Cache-Status
X-Is-Bot
X-Ms-Version
X-Ms-Request-Id
X-Wix-Request-Id
X-Time
X-EdgeConnect-Cache-Status
Countrycode
X-App-Server
Section-Io-Id
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
Section-Io-Origin-Status
X-Mg-Request-UUID
X-RateLimit-Limit
X-Environment-Context
X-L-Path
X-Revision
S-Cnection
X-Debug
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Accel-Buffering
CF-IPCountry
Country
X-B3-Traceid
Count-Hit
X-Cache-Operation
X-APP-VERSION
X-Nginx-Cache
X-TA-CDN-Provider
X-Microsite
X-Drupal-Cache-Contexts
X-Request-Handler-Origin-Region
Cache
X-FW-Version
X-GG-Cache-Date
X-UPSTREAM-Address
X-ES-SERVER
X-JoinUs
AR-CACHE
AR-ATIME
AR-PoweredBy
AR-Request-ID
Ar-Sid
X-RN-RSRV
X-SaId
Meta-Geo
X-Endurance-Cache-Level
GEO-INFO
X-LAGOON
Akamai-GRN
X-Cache-TTL-Remaining
X-SayCDN-TTL
X-Adobe-Source
X-Say-Cacheable
X-Say-TTL
X-Cache-Type
From-Origin
X-Loop
X-TNCMS
Surrogate-Key
X-Human
X-Sql-Count
X-S-Maxage
Fastly-SSL
X-Sql-Duration-Ms
X-R9-Blue-Green-Version
Country-Code
X-Varnish-Beresp-Grace
X-Request-Time
X-ShopId
X-ShardId
X-Varnish-Hostname
X-PCL
X-Varnishpool
X-Shopify-Stage
Azure-Version
Azure-SiteName
Azure-RegionName
Azure-InstanceId
Azure-SlotName
X-PHP-Host
X-B3-SpanId
Cache-Name
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
Apigw-Requestid
X-ProxyCache-Status
X-Hosted-By
X-Storefront-Renderer-Rendered
X-VWS-Id
X-RCS-CacheZone
X-Status
X-LJ-Flow-ID
X-No-Session
X-Labrador-Cache-Channel
X-NYM-Debug-Backend
X-BYPASS-REASON
X-OCL
X-AWS-Id
X-Alternate-Cache-Key
X-ProxyCache-Key
X-Origin-Date
Protected
X-Proto
Selected-Fe
X-Via-Fastly
X-Akamai-Edgescape
X-Web-Node
X-Pubstack
X-UA-Device-Type
ServedBy
X-Proxy-Build
Decoy-Debug-Key
Decoy-Debug-Status
X-Timing-Wait
X-Be
Decoy-Debug-TTL
X-Handled-By
Cache-Tv-Group
X-Redis-Cache
X-Xfnlog-Site
X-App-Version
TWC-Privacy
Webcakes-App-Name
Webcakes-App-Version
TWC-Locale-Group
TWC-GeoIP-LatLong
TWC-Connection-Speed
TWC-Device-Class
TWC-GeoIP-Country
Webcakes-Region
X-Access
X-Server-W
X-Section
X-PHP-Backend
X-Hyper-Cache
X-Format
Property-Id
X-Origin-Hint
X-Cache-Server
X-PERF
X-ApacheServer
Eomportal-Instance
Mn-Server-Ip
X-Cluster-Node
X-Backend-Host
X-Uri
X-FB-TRIP-ID
X-Time-Microsecs
X-Tumblr-Pixel-2
Cross-Origin-Opener-Policy
X-Hl-Ver
X-Servername
X-Backend-Name
OT-Force-Account-Verify
Nel
X-ServerID
X-ATG-Version
X-Detected-As
X-FireWall-Port
X-Azure-Ref-OriginShield
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
Cross-Origin-Window-Policy
X-Tumblr-Pixel-3
X-Ua
Web-Mar-Node
X-Varnish-Cache-Hits
X-Generation-Time
X-Cache-PHP
X-Cache-Host
X-Content-Age
Ec-Rule-Version
X-Varnish-Hits
Backend
X-Via-JSL
Source
X-TT-LOGID
X-Datadome
X-Trace-Id
X-CS
Content-Secure-Policy
X-Forwarded-Host
X-WA-Info
X-Air-Source
X-Air-Trace-Id
X-Air-Hostname
X-Akamai-Transformed
X-Mode
X-Cache-Grace
X-Amz-Apigw-Id
X-MP-GENERATED-AT
X-SRV
X-Microcachable
Upgrade-Insecure-Requests
X-CSRF-Token
X-Amzn-RequestId
X-Soup
Xserver
X-Content
X-Locale
X-Ua-Browser
X-Edge-Location
X-Cache-Enabled
X-Cdn
X-NWS-UUID-VERIFY
X-Bc-Bl
X-Rule
X-Varnish-Beresp-Ttl
X-Ratelimit-Limit
Url
X-Info
X-Origin-TTL
X-Origin-CC
X-Amzn-Remapped-Content-Length
X-Site-Version
X-GEO
X-Tenant
X-Ratelimit-Remaining
Content-Disposition
X-Zipkin-Id
X-Varnish-Beresp-Status
X-Extlb
X-DataDome
X-Routing-Service
X-Unique-Id
X-Proxied
X-Magnolia-Registration
S-Rt
X-Tb
SID
Odigeo-Trace-Id
X-From
X-Forwarded-Path
CDN-PullZone
Path
CDN-CachedAt
X-Ftr-Request-Id
X-Vdms-Version
CDCHOST
X-Epic-Correlation-Id
CDN-Cache
X-Vtex-Remote-Cache
CDN-RequestCountryCode
X-External-Request-Id
Rendered-Blocks
Req-Svc-Chain
X-Session-Fingerprint
X-SRCache-Key
Fastly-SIE
Fastly-SWR
Host-ID
Apple-News-Services-Request-Url
Fastcgi-X-Cache-Version
Expiry
Apple-News-Services-Parsed-Url
Apple-News-Services-Handled
DCR-Processing-Time-Ms
A
DCR-Decision-By
MD5-Digest
X-Shop-Environment
CDN-Uid
X-Request-URI
X-Rebelmouse-Cache-Control
Apple-News-Services-Host
BehaviorPad-Version
X-VG-WebCache
Meta-Geo-Continent
X-Rebelmouse-Surrogate-Control
Mobile-Detection-Method
CDN-RequestId
T-Server
X-Aicache-OS
X-Aed
X-D
X-AIR-PT
X-Application
X-Rojux
CDN-EdgeStorageId
X-PAYTM-SRV-ID
X-A-Dcw
X-Vtex-Processado-Em
X-VG-WebServer
X-A-Wwc
X-Storage
X-ARC
X-B-Cookie
X-Cache-NE
X-Connection-Hash
X-Platform-Server
X-CF-Lambda-Fn
X-CF-Lambda-Version
X-Orig-Expires
X-Cache-Bucket
X-BBC-Edge-Cache-Status
X-NAPM-TraceId
X-BCube-Filmed-By
X-Processor
X-NU-AKA-ACS-Version
X-Debug-Cache
X-A-Dgt
X-Conf
X-S
X-ScT
X-Tx-Id
X-S-Cookie
X-Ratelimit-Reset
User-Cache-Control
X-Dc
Surrogated-Key
X-Rewrite-Enabled
X-A-Ccd
X-A-Dam
X-Developer
X-Destination
X-PBS-Appsvrname
X-A
X-EC-Lua
X-Service
X-Core-Value
State
X-Envoy-Decorator-Operation
X-Cache-Info
X-Cache-Debug
UCS
X-DPWN-IS-SECURE
X-Accel-Expires-Debug
Origin
Is-Eu
L
NGX
X-Date
Fastly-Drupal-HTML
X-Backend-State
X-Fastly-Cache
Platform
Pics-Label
X-Request-UUID
X-SVT-ORM-VERSION
X-Cache-NGX
X-Loc
X-Cached-By
X-Proxy-Upstream
X-SVT-ORM-RULES
X-LI-UUID
X-Worker
X-Li-Fabric
X-VG-TLSProxy
X-Variation
X-Li-Pop
X-TrackingId
X-Micro-Cache
X-Men
X-Origin-Expires
Cache-Host
Adler-Geo
X-VServer
Cache-Key
XServer
X-NCache
X-M-Log
X-M-Reqid
True-Client-Country-4JS
X-Cluster
Thinkindot-Control
X-Fastly-Backend
X-Clientip
Thinkindot-CacheControl
Sever-Int
X-Req
Server-Hostname
Server-Host
X-Served-From
X-Wikidot-Static-Cache
X-Viewer-Country
TDXMobile
X-Via-NSCOPI
Thinkindot-CacheControl-Type
X-Ckpd-Fst-Backend
X-Cache-Id
X-Scheme
X-DC
X-DefElseHash
X-Nginx-Cache-Key
X-Rocket-Build-Number
X-Block-Status
X-Bip
X-Old-Content-Length
X-DefHash
X-RateLimit-Limit-Second
X-Branch-Name
VNS-Cache
VNS-Age
X-Esi-Check
X-Device-Os
X-RateLimit-Remaining-Second
X-Cms-Context
X-Cache-Tags
Vix-Hermes-Req-Id
Server-Ext
CPC-Age
X-Generated-On
X-Thanos
CPC-Cache
Location
Locid
X-HN
M-TraceId
Cmstype
Arc-Version
IsBot
X-Has-Esi
Fastly-Backend-Name
X-Slack-Backend
Esi-Enabled
X-Gzip
X-SIPLIST1
X-Qnm-Cache
X-Hnp-Log
X-Sigma-Backend
X-Sigma
Cmsid
X-Varnish-CookieINHashed-On
PFcat
PB-RID
PB-PID
X-Varnish-Remaining-TTL
X-VarnishDD-TTL
X-VC-Cache
X-Wikidot-Backend
C-Via
X-Varnish-CookieHashed-On
X-Forwarded-Site
X-Is-Gdpr
X-Generated-By
X-Thinkindot-L3
X-JWT-State
X-Gen-Mode
X-Level-Front-Cache
X-Gamma-Serve
AMP-Access-Control-Allow-Source-Origin
X-Platform
X-Amz-Meta-S3cmd-Attrs
X-Csrf-Jwt
X-Policy
X-Planisys-CDN-TTL
X-Developers
Webserver
Arc-Country
X-Eu-Site
X-Generated-In
X-Planisys-CDN-Rules
X-FC-Vary-Parameters
X-Fetched-On
Svr
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Owner
X-GeoIP-City
X-GeoIP
X-Geo-Header
X-Hash
Wxu-Next-Hostname
X-Var-Ttl
Memcached
Mail-Subject
NM-Fastcgi-Cache
Pagetype
V-Age
X-Vdms-Path
Release
L5d-Success-Class
X-Irp-Debug
X-Sucuri-ID
DSUID
Cf-Device-Type
Fastcgi-Cache-TTL
X-LSADC-Cache
HA-Ipaddr
Ha-Gx-Prefs
X-Request-Host
We-Hiring
Server-Info
Wxu-Next-Region
X-Location
X-Mvc-Supplant-Cachable
Wxu-Next-Commit
X-Skip-Cache
X-Auto-Login
X-Planisys-CDN-Cache
X-CGP
X-Origin
X-Qloud-Router
X-HS-Content-Campaign-Id
X-GoCache-CacheStatus
Gh-Request-Id
X-Rocket-Nginx-Serving-Static
X-Platform-Processor
X-Fmm-Version
X-Unique-ID
X-Clara-WADP
CacheControlHeader
X-Platform-Router
AKAMAI
X-V-Cache
X-Platform-Cluster
X-WADP-Cache
DataCenter
NtCoent-Length
X-Mvc-Supplant-OutputCached
Cache-Hits
X-Render-Time
X-SD-PageType
X-Servedbyhost
MIME-Version
X-Cache-Var
X-Cache-Var-Map
X-Cache-Remote
X-Via-Popv
X-Srv
Environment
Kp-EeAlive
X-Via-Poph
X-Via-Popn
X-NODE
X-Datadog-Trace-Id
X-Datadog-Parent-Id
X-Zone
X-NodeID
X-Datadog-Sampling-Priority
X-Gdpr
X-Origin-Time
X-API-Version
X-Wa
X-Nyt-Route
X-Via-Ucdn
X-PJAX-URL
X-User
X-Vc
X-Cache-Ttl
X-ID
X-PF-Uncompressing
X-NC
Candidate-Md5Url
X-Cache-Config
X-Server-IP
Who
Server-ID
X-Traceid
X-App
X-BBC-Origin-Response-Status
X-Varnish-Ttl
WebServer
X-Webkit-CSP-Report-Only
Memory
Time
X-Varnish-Url
X-VCL-Version
X-Pod-Name
Cluster
X-Internal-Host
X-Minions-Version
HostName
X-Refresh
X-TIME
X-LB-ID
X-Webkit-Csp
X-ZONE
X-CACHE-KEY
My-App
Powered-By-ChinaCache
Onion-Location
Datacenter
X-Pass-Why
X-NewRelic-App-Data
Resin-Trace
Web-Mar-Region
X-LI-Proto
Geoip-Latitude
GeoIp-Country-Code
N-Cache
X-Newrelic-Synthetics
X-Esi
X-CLOUD-TRACE-CONTEXT
X-Edge-Pop
X-ElasticPress-Query
Servername
X-Tb-Optimization-Total-Bytes-Saved
Geo-Info
X-Varnish-Cacheable
X-VHOST
X-TraceId
X-Tt-Logid
X-OVcl
X-EIG-Tracking-Id
X-OVcl-Cache
X-Origin-Response-Time
X-Akamai-Pragma-Client-IP
WWW-Authenticate
X-AB
Tcn
Ohc-File-Size
CDN
X-TX-ID
X-Dynatrace
Cf-Bgj
X-Fpc
X-CACHE-AGE
X-HITS
X-Backend-TTL
Hostname
Magicmarker
Redirect-Candidate
X-Geo
X-Tid
X-TIM-N
LB
X-Up
Proxy-Connection
X-Varnish-Beresp-TTL
X-Dynatrace-Js-Agent
X-Li-Proto
Cdn
Tracecode
X-Correlation-ID
X-Wix-Viewer-Type
X-Cache-Date
X-Dispatcher-Server
X-Method
X-NGINX-Cache
GeoIP-Country-Code
Pramga
X-Request-Start
X-HostName
X-MSEdge-Flight
X-Fastly-Request-Id
X-Sn-Servicetimems
X-MSEdge-Features
X-Cdn-Origin
Cf-Ipcountry
X-CSRF-TOKEN
CloudFront-Viewer-Country
W
Ssr
DB-Nickname
Is-Us
X-Provided-By
X-Fastly-Backend-Reqs
X-Vcl-Version
X-Amz-Meta-Cb-Modifiedtime
X-IP
GeoIP-Latitude
Lb
X-UnsetCookies
CF-Cached-On
X-Cs
Sid
Server-Id
X-Cache-Expires
X-HS-Status
X-Core-Mission
X-Reqid
X-COUNTRY
X-APP
X-Lb-Id
X-MG-S
X-WA
WP-Super-Cache
X-ServerName
X-Webkit-Csp-Report-Only
X-Node-Id
Cteonnt-Length
X-Oracle-Dms-Ecid
X-Nc
X-FORWARDED-FOR
X-CCDN-Origin-Time
X-Trv-Group
X-VC
X-Sucuri-Cache
X-CCDN-CacheTTL
X-Check-Cacheable
X-Region-Sid
X-Hcs-Proxy-Type
URI
X-Pjax-Url
X-ND-Cache
X-Cache-Status-Check
CountryCode
Ohc-Cache-HIT
X-SERVER-NAME
X-DynaTrace-JS-Agent
X-Moov-T
Xc-Version
X-Moov-Xdn-Version
X-Via-CDN
X-Via-PopN
X-Cache-Backend
Env
WZWS-RAY
X-Via-PopH
X-Via-PopV
User-Agent
X-Ig-Push-State
EpKe-Alive
X-Pf-Uncompressing
Shield-Pop
X-Pad
Mime-Version
X-ServedByHost
X-SN
FSS-Cache
X-CUA
X-Acquia-Application-Trace
X-Acquia-Purge-Tags
X-Edge-POP
X-LiteSpeed-Cache-Control
X-Acquia-Site
X-Acquia-Application-UUID
X-TRACE-ID
X-Varnish-Authentication
X-IN-APIGATEWAYSSL
X-RAMCache
X-Amz-Meta-Opti
X-IN-APIGATEWAY
X-Fastly-Cache-Hits
X-Cache-ASPX
CACHE
X-Contensis-Viewer-Groups
X-Parent-Response-Time
X-Oss-Storage-Class
X-Cdn-Request-ID
X-Oss-Object-Type
On-Server
X-Dispatch
X-Oss-Hash-Crc64ecma
X-Oss-Request-Id
X-Oss-Server-Time
Viewtype
X-DI
X-DB
X-DSS
X-DW
X-RPM
Vha6-Origin
Ohc-Response-Time
X-Webstats-RespID
X-SB
X-Dw-Trace-Id
X-Swift-Error
X-RPS
X-Action
Rt-Fastcgi-Cache
Server-Ttl
Xet-Cookie
VivaBuild
X-StackifyID
X-RSL
X-Cdn-Forward
X-Amzn-Remapped-X-Forwarded-For
X-Amzn-Remapped-User-Agent
X-Amzn-Remapped-Host
X-Env-Sha256-Sig
Content-Style-Type
X-Env-Stack-Name
X-Ftr-Viewer-Uri
X-Forwarded-Port
Content-Script-Type
X-Snapshot-Date
X-Yottaa-OS
HIT
Hit
Req-ID
ServerName
X-Nginx-Upstream-Cache-Status
X-TH-Server
X-MiniProfiler-Ids
X-CF-Powered-By
X-ElasticPress-Search