Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
Pragma
X-Powered-By
Link
ETag
CF-RAY
X-XSS-Protection
Expect-CT
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Varnish
CF-Cache-Status
X-Timer
Access-Control-Allow-Headers
X-Request-Id
Access-Control-Allow-Methods
X-AspNet-Version
X-Download-Options
Access-Control-Allow-Credentials
X-Runtime
X-Xss-Protection
X-Drupal-Cache
X-Adblock-Key
Alt-Svc
X-Check
X-Cacheable
X-Request-ID
Content-Security-Policy-Report-Only
X-Cache-Status
X-Generator
CF-Ray
X-Permitted-Cross-Domain-Policies
X-DNS-Prefetch-Control
X-AspNetMvc-Version
X-Template
X-Language
Status
X-Iinfo
Content-Encoding
Timing-Allow-Origin
X-FRAME-OPTIONS
X-Buckets
X-Content-Security-Policy
Upgrade
X-CDN
Xkey
X-Turbo-Charged-By
X-Kinja-Server-Push
Keep-Alive
Access-Control-Expose-Headers
X-Backend
X-Cache-Group
X-Pass-Why
Access-Control-Max-Age
X-AH-Environment
P3p
X-Drupal-Dynamic-Cache
X-Age
X-Ua-Compatible
X-Pingback
X-Server
X-Via
X-Proxy-Cache
Grace
X-Amz-Id-2
X-Amz-Request-Id
X-Hacker
WPE-Backend
X-Robots-Tag
X-Varnish-Cache
X-Server-Powered-By
X-Nginx-Cache-Status
X-Page-Speed
EagleId
X-UA-Device
Request-Context
X-Envoy-Upstream-Service-Time
Cf-Railgun
X-Amz-Version-Id
X-LiteSpeed-Cache
X-WebKit-CSP
X-Swift-CacheTime
X-Swift-SaveTime
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-OneAgent-JS-Injection
X-Device
Ali-Swift-Global-Savetime
Allow
Server-Timing
X-Ac
X-Rq
X-Node
X-Host
X-CST
Content-Location
Feature-Policy
X-Cnection
X-Response-Time
X-Server-Id
Report-To
X-Type
X-Backend-Server
X-Cloud-Trace-Context
X-Application-Context
EagleEye-TraceId
Surrogate-Control
X-Iejgwucgyu
X-ORACLE-DMS-ECID
X-Url
X-Readtime
X-Origin-Cache
Request-Id
X-Rack-Cache
X-Country
X-FTR-Request-ID
X-Clacks-Overhead
X-Cache-Lookup
X-Country-Code
Rating
NEL
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Instart-Request-ID
X-Ruxit-JS-Agent
X-Vhost
X-DynaTrace
Pinterest-Generated-By
X-Mod-Pagespeed
X-Origin-Upstream-Status
X-DataDome
X-Px
X-Upstream-Env
Edge-Control
X-Goog-Hash
Verso
X-Server-Name
Accept-CH
X-ESI
X-HW
X-Dispatcher
MS-Author-Via
X-VARITI-CCR
AR-PoweredBy
AR-CACHE
AR-ATIME
X-GitHub-Request-Id
X-DataStream-Cache-Status
X-MS-InvokeApp
Arc-Version
PB-RID
PB-PID
X-Mobile-Rewrite
X-ORACLE-DMS-RID
X-Exp-Variant
X-Exp-Id
X-Cdn-Fetch
X-GoogleNews-Bot
X-Kinja-Revision
X-Cached
X-Use-Magma
X-Kinja-Server
X-Kinja
X-Kinja-Build
X-Version
Charset
Content-MD5
X-Powered-By-Plesk
Public-Key-Pins
X-Server-ID
X-Recruiting
X-Dns-Prefetch-Control
Service-Worker-Allowed
AR-Request-ID
Accept-CH-Lifetime
RTSS
Ar-Sid
X-D2id
X-Navigation-Version
X-Abt-Application-Version
X-PC
X-TtlSet
X-Vname
X-Ser
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-TTL
X-Amz-Server-Side-Encryption
X-Vcap-Request-Id
X-Trace
X-Varnish-TTL
X-Client-IP
X-Forwarded-Proto
SPRequestGuid
X-DynaTrace-JS-Agent
Nginx-Cache
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Country-Code-Real
X-FTR-Balancer
X-FTR-Backend
X-FTR-Backend-Server
X-FTR-Cache-Status
X-FTR-DC
X-FTR-Realm
X-FTR-Expires
X-Amz-Rid
X-Fastly-Request-ID
X-SharePointHealthScore
S
X-XRDS-Location
X-Amz-Meta-S3cmd-Attrs
X-Debug
X-Oracle-Dms-Rid
TCN
Arr-Disable-Session-Affinity
X-VCache
X-Shield-Request-Id
X-Hits
DynaTrace
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-Dw-Request-Base-Id
SPIisLatency
X-Upstream-Proxy
SPRequestDuration
Pinterest-Version
X-Pinterest-Rid
X-Ttl
X-Akam-SW-Version
Access-Control-Request-Method
X-Goog-Storage-Class
X-T
X-B3-TraceId
X-Powered-CMS
X-FTR-Cache-Host
Front-End-Https
X-SERVER
X-NF-Request-ID
X-Acc-Meta-Resource-Type
Tracecode
Realpath
X-Id
X-MSEdge-Ref
X-Amzn-Trace-Id
X-Aspnet-Version
X-N
Fastcgi-Cache
Paypal-Debug-Id
X-Varnish-Age
X-Forwarded-For
X-Content-Type
X-Upstream
Alternate-Protocol
MRF-Tech
Mrf-Cache-Status
X-Mrf-Section-Lastmod
X-B3-TraceId-Primal
X-Mrf-Item-Lastmod
X-RateLimit-Remaining
X-Frontend
X-Logged-In
X-PressLabs-Stats
X-HS-Content-Id
X-Fastcgi-Cache
X-HS-Hub-Id
X-Sol
Fusion-Content-Id
Fusion-Content-Source
X-Middleton-Display
Fusion-Template-Id
Display
Fusion-Source
Fusion-Component-Id
X-Content-Digest
Response
X-Middleton-Response
X-Hostname
X-Litespeed-Cache
AMP-Access-Control-Allow-Source-Origin
X-Srv
X-Pad
X-Accel-Expires
X-Cache-Key
X-Kinsta-Cache
MicrosoftSharePointTeamServices
Server-Name
X-Accel-Buffering
Host
X-DataStream-MidMile-RTT
X-DataStream-Origin-MEX-Latency
X-Analytics
Backend-Timing
X-Content-Options
X-User-Agent
X-Correlation-Id
X-B3-Traceid
X-Revision
X-LB-Cache
X-Activity-Id
X-Debug-Info
X-Az
X-AppVersion
X-Rid
X-Cdn
FilterID
X-Amz-Apigw-Id
Accept-Charset
X-Amzn-RequestId
Refresh
X-B3-Sampled
X-IPLB-Instance
X-Cache-2
X-Cache-Hit
Surrogate-Key
Powered-By-ChinaCache
X-DIS-Request-ID
X-B
X-CF-Powered-By
X-Grace
ServerID
X-Page-Id
X-Whom
Server-Info
TP-Cache
TP-L2-Cache
X-Request-Processing-Time
X-PHP-Backend
MS-CV
Host-Header
X-Request-Received
X-FastCGI-Cache
X-Cached-By
X-Content-Security-Policy-Report-Only
VIX-Pulpo-Node
Source
VIX-Pulpo-Upstream-Status
X-Amz-Replication-Status
X-TT
X-Varnish-Backend
X-Origin-Server
Cache-Status
X-App-Environment
X-Framework
X-UA-Device-Type
X-Kong-Proxy-Latency
X-Cache-Action
X-Kong-Upstream-Latency
X-Akamai-Edgescape
X-Cluster
X-Mobile
X-Webkit-CSP
X-Content-Powered-By
X-Request-Guid
X-Tumblr-Pixel
X-FW-Static
X-FW-Serve
X-FW-Server
X-FW-Hash
X-Tumblr-User
X-FW-Type
X-Tumblr-Pixel-0
X-Platform-Server
X-Ruxit-Js-Agent
X-Drupal-Cache-Tags
X-Varnish-Grace
Access-Control-Allow-Method
X-F-Cache
X-Instance
X-Zen-Fury
X-Shard
X-FB-Debug
X-Ezoic-Cdn
X-RateLimit-Limit
X-GUploader-UploadID
X-Handled-By
X-Forwarded-Host
X-Cache-TTL
X-Geo-Country
X-Magnolia-Registration
X-SS-Set-Cookie
Edge-Cache-Tag
X-Node-Name
X-ATG-Version
From-Origin
X-Cache-Age
X-Varnish-Hostname
X-App-Server
X-Varnish-Server
Cleartype
DC
Cache-Tags
PageSpeed
X-BCube-Filmed-By
X-AOL-HN
X-Cache-Control
Healthy
Upgrade-Insecure-Requests
Payment
Filters
X-Response-Served-From
X-Region
X-RequestSource
X-Generated-By
X-WebKit-CSP-Report-Only
CACHE
X-Adobe-Content
X-Adobe-Loc
Server-Node
Ms-Operation-Id
Country
Cache-Tv-Group
NGB
X-RTag
X-TX-ID
Webserver
X-GeoIP
X-Cache-Rule
X-Redis-Cache
Fastly-Restarts
X-Jobs
X-FW-Dynamic
X-Storage
X-TT-TIMESTAMP
Actual-Object-TTL
Retry-After
X-VG-WebCache
X-UUID
X-B-Cache
X-Cacheable-TTL
X-Locale
X-Tumblr-Pixel-2
X-Tumblr-Pixel-1
X-Drupal-Cache-Contexts
X-Content-Age
X-Signature
X-Varnish-Hits
GEO-INFO
ServedBy
X-TA-CDN-Provider
X-XRDS-LOCATION
Powered
Liferay-Portal
X-Contextid
Frame-Options
X-Seen-By
X-Wix-Server-Artifact-Id
HitType
X-Rendered-As
X-Cache-TTL-Remaining
X-Via-JSL
X-Oneagent-Js-Injection
X-Guploader-Uploadid
X-Varnish-IP
X-WA-Info
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Real-IP
X-BACKEND-TTL
Viewport
S-Cnection
X-ProcessESI
X-RemovedCookies
Eomportal-Instance
X-Time
X-Upgrade-Enabled
X-Cache-NE
NtCoent-Length
X-Cache-Server
Content-Style-Type
Content-Script-Type
Xserver
X-Mode
X-Esi
Datacenter
X-GRACE
X-Akamai-Transformed
Load-Balancing
Cache-Key
Machine
Meta-Geo
Mn-Server-Ip
Cache-Hits
X-Cache-Var
X-From
X-Varnish-Cache-Hits
X-ES-SERVER
X-Detected-As
X-Cache-Var-Map
X-Hl-Ver
X-Is-Bot
X-Zipkin-Id
X-Proxied
X-Path-Route
X-Routing-Service
X-RN-RSRV
X-Proto
X-Cache-Config
X-S
TWC-GeoIP-Country
X-Hosted-By
TWC-GeoIP-LatLong
X-Device-Type
TWC-Device-Class
Property-Id
X-Tb
X-Environment-Context
X-Cache-Operation
Access-Control-Request-Headers
Webcakes-Region
TWC-Connection-Speed
TWC-Locale-Group
Mail-Subject
X-Viewer-Country
TWC-Privacy
X-VWS-Id
Vix-Hermes-Req-Id
Webcakes-App-Name
We-Hiring
X-Cache-Enabled
X-Origin-Hint
X-LJ-Flow-ID
L5d-Success-Class
Webcakes-App-Version
X-L-Path
OT-Force-Account-Verify
X-AWS-Id
X-VG-TLSProxy
Azure-Version
X-ServerID
X-Endurance-Cache-Level
X-Backend-Name
X-Debug-Cache
X-Time-Microsecs
Azure-SiteName
Azure-RegionName
Azure-InstanceId
Origin-Edge-Control
Azure-SlotName
X-Format
S-Rt
X-FW-Version
X-EIG-Tracking-Id
Origin-Cache-Control
X-FC-Vary-Parameters
X-Section
X-Labrador-Cache-Channel
X-Access
X-Proxy
X-Origin-Response-Time
X-Birta-Served
DB-Nickname
X-JoinUs
X-Loop
X-NCache
X-Web-Node
Now
X-FB-TRIP-ID
X-OCL
X-Via-Fastly
X-Via-CDN
X-Birta-Cache-Post
X-Proxy-Build
X-TNCMS
X-ProxyCache-Status
X-Timing-Wait
X-CCM
X-Akamai-Request-ID
NGX
X-Trace-Id
X-Varnish-Cacheable
X-Human
X-PCL
Selected-FE
X-BYPASS-REASON
X-ProxyCache-Key
X-Xfnlog-Site
X-Status
X-Www-Served-By
Cache-Tag
X-IP
X-Tumblr-Pixel-3
X-Vgn-Hpd-Reason
Decoy-Debug-TTL
X-Grey
Decoy-Debug-Key
Decoy-Debug-Status
X-Site-Version
X-Cache-Category-Id
X-Generated
X-Rocket-Nginx-Bypass
X-Wix-Request-Id
X-NWS-LOG-UUID
X-MP-GENERATED-AT
ViewerVersion
Uber-Trace-Id
X-RCS-CacheZone
X-VC-Cache
X-CDN-Cache
Served-By
X-EdgeConnect-Cache-Status
X-R9-Blue-Green-Version
X-Internal-Host
X-Newrelic-App-Data
X-Dynatrace-Js-Agent
X-NewRelic-App-Data
X-Cache-Remote
X-Rule
LB
X-UnsetCookies
AsisCache
X-Origin-Host
Release
Pagespeed
X-Sucuri-ID
X-UA
X-Cluster-Node
Rt-Fastcgi-Cache
Nel
X-Ua
X-App-Name
X-PERF
X-ApacheServer
User-Agent
X-Source
X-App-Version
X-Nginx-Cache
X-TIME
X-Varnish-Ttl
X-Agile-Id
X-Agile
X-Agile-Age
X-B3-Spanid
X-Datadome
X-Request-Time
Cache-Name
Hostname
X-APP-VERSION
X-Hit
X-OVcl-Cache
X-OVcl
X-Edge-Location
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Origin
X-VCT
X-Pubstack
Warning
X-Origin-CC
X-Cdn-Forward
X-Origin-TTL
X-Edge-IP
X-Generated-In
X-ScT
Fly-Cache
X-S-Cookie
Fly-Request-Id
MD5-Digest
Origin
X-Request-UUID
X-Instart-Isnd
Node
Meta-Geo-Continent
Ec-Rule-Version
Cross-Origin-Window-Policy
Arc-Country
X-IN-APIGATEWAY
X-Gannett-Site-Version
Ajk
X-Developer
BehaviorPad-Version
Cache-Prefix
X-Sucuri-Cache
X-Ocache
X-Destination
X-Hp-Webp
X-IN-WAF
X-Rojux
Thinkindot-CacheControl
X-Application
X-ARC
X-Debug-Cache-Fetch
X-Debug-Cache-Expiry
X-DPWN-IS-SECURE
X-Aed
X-A-Dgt
X-A-Wwc
X-Accel-Expires-Debug
X-B-Cookie
X-BB-ID
X-CF-Lambda-Version
X-Connection-Hash
X-Core-Value
X-D
X-CF-Lambda-Fn
X-Cache-Grace
Xc-Version
X-Cache-ASPX
X-Cache-Expires
X-Debug-Cache-Store
X-A-Dcw
Server-Surrogate-Control
X-Region-Sid
X-Date
Thinkindot-CacheControl-Type
Server-Cache-Control
X-G
Request-Country
Request-EU
Request-Time
Thinkindot-Control
UCS
X-A
X-A-Ccd
X-A-Dam
X-Debug-Cookies
X-Debug-Log
X-External-Request-Id
X-Secret
Www
Rendered-Blocks
X-Rewrite-Enabled
X-Twitter-Response-Tags
X-Trv-Group
X-Thinkindot-L3
X-Varnish-Authentication
X-Up
X-Logtrace-Id
X-Matched-Rule
X-Mobile-URL
X-SRCache-Key
X-Protected-By
X-PAYTM-SRV-ID
X-VG-WebServer
X-Platform
X-Processor
X-NX-Host
X-NodeID
X-NU-AKA-ACS-Version
X-Var-Ttl
X-Transaction
X-Server-Group
X-ElasticPress-Search
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Cache-Backend
Web-Mar-Node
User-Cache-Control
True-Client-Country-4JS
Memcached
X-Refresh
X-SN
X-Origin-Date
X-Eu-Site
X-LAGOON
X-No-Session
X-RateLimit-Remaining-Second
SRV
X-WPE-Loopback-Upstream-Addr
X-Nginx-Cache-Key
X-Sedo-Request-Id
Proxy-Connection
Pramga
X-Request-URI
RNT-Machine
X-Reboot
X-Epic-Correlation-Id
Server-Int
RNT-Time
X-Swa-Ws
X-Amzn-Remapped-Connection
X-Cache-Id
X-Cache-Miss-From
X-Cache-Host
X-Key
X-Cache-Debug
X-Page-Type
X-CGP
X-Developers
X-Irp-Debug
X-Device-Os
X-Crawler
X-PHP-Host
X-Proxy-Cache-Status
X-C
X-Origin-Expires
X-Distributor
X-SIPLIST1
X-Amzn-Remapped-Date
Pagetype
X-RateLimit-Limit-Second
X-Distil-CS
X-Block-Status
X-Proxy-Upstream
X-Qloud-Router
X-Dispatcher-Server
Lfy
Server-Host
Apple-News-Services-Request-Url
X-Policy
Backend
X-Geo-Header
X-F5-Cache
Ha-Gx-Prefs
Apple-News-Services-Host
X-Hash
HA-Ipaddr
Apple-News-Services-Parsed-Url
Cache-Cookie-Set-From
Cache-Cookie-Set-Idcheck
Fastly-Backend-Name
X-Sf
X-Hnp-Log
Country-Code
CDCHOST
X-Varnish-Url
X-LI-Proto
Cache-Cookie-Set-Lfrom
X-ServiceProvider
X-Li-Pop
Heartbleed
X-Li-Fabric
Magicmarker
X-LI-UUID
N-Cache
On-Server
X-Webstats-RespID
Kp-EeAlive
X-Cache-Info
Apple-News-Services-Handled
X-Gen-Mode
IsBot
X-FireWall-Port
DSUID
X-ShopId
X-Core-Mission
X-Shopify-Stage
X-Ah-Environment
X-Location
X-ShardId
X-Servername
X-Backend-State
X-BBXSRF
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-S-Maxage
X-Via-Edge
X-Cache-FS-Status
X-Via-SSL
X-Bip
X-Cms-Context
AKAMAI
X-Alternate-Cache-Key
X-Rebelmouse-Surrogate-Control
X-TrackingId
X-Thanos
HTTPS
X-Fetched-On
X-GeoIP-Country-Code
SD-X-WS
X-Level-Front-Cache
X-Cache-Bucket
X-TT-LOGID
X-Gateway-Cache-Status
X-Gateway-Skip-Cache
X-MSEdge-Flight
X-MSEdge-Features
X-Gateway-Cache-Key
X-CACHE-KEY
Fastly-SSL
Fastly-SWR
Fastly-Soc-X-Request-Id
Fastly-SIE
X-Skip-Cache
X-Amz-Meta-Cache-Control
X-Generated-On
X-Sorting-Hat-PodId
X-Fastly-Cache
X-Server-IP
X-GeoIP-City
X-Info
X-Micro-Cache
X-Sorting-Hat-ShopId
X-Rebelmouse-Cache-Control
Cteonnt-Length
X-Real-Ip
X-Planisys-CDN-TTL
X-Node-Id
X-Owner
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
Is-Eu
Content-Disposition
FNAC-ModuleRouting
X-Variation
X-Server-Time
X-User
Platform
X-Cdn-Srv
X-Backend-Url
ServerName
Adler-Geo
X-Backend-Host
X-Auto-Login
X-Amzn-Remapped-Content-Length
Cache
X-GZip
X-RateLimit-Reset
Server-ID
X-Varnish-Beresp-Ttl
X-CUA
Gh-Request-Id
Powered-By
X-Org
Section-Io-Cache
X-Nc
X-Cdn-Origin
X-Pjax-Url
X-Load-Cache
MIME-Version
X-Sn-Servicetimems
V-Age
Pragrma
VivaBuild
Viewtype
REQUESTUUID
X-NC
X-Dc
X-Geo
X-Original-Request
X-Svr
X-Parent-Response-Time
X-ND-Cache
X-Passed-To
X-Actual-URL
X-Aicache-OS
X-Exp-Se
X-Passed-To-PostProcessResponse
X-Passed-To-DLL
X-CDN-Forward
X-Passed-To-BeforeDispatch
Rt-Proxy-Cache
X-Stale
X-Apm-App-Name
X-Apm-Inst-Hash
X-Apm-Svc-Key
X-FPC
X-Server-By
X-Returned-From-PostProcessResponse
X-Returned-From-DLL
Fastcgi-Useragent
X-Returned-From-BeforeDispatch
X-Returned-From
X-HS-Cache-Config
X-CSRF-TOKEN
X-Croise-Owner
X-Served-From
Host-ID
X-VServer
X-Gdpr
Cdn-Host
X-Unique-ID
X-Edge-Server
Cdn-Request-Time
X-Ua-Device
HostName
X-B3-Parentspanid
Memory
X-Microcachable
Time
Mime-Version
X-DC
ProcessTime
X-Servedbyhost
X-Git-Hash
X-Wa
Wxu-Next-Region
PICS-Label
Resin-Trace
X-Oss-Storage-Class
Wxu-Next-Hostname
SID
X-Oss-Request-Id
Wxu-Next-Commit
X-Oss-Object-Type
X-Oss-Hash-Crc64ecma
X-Oss-Server-Time
X-Tb-Optimization-Total-Bytes-Saved
X-V
X-Newrelic-Synthetics
X-From-Cache
CF-IPCountry
X-Req
X-Optimization
Cf-Ipcountry
X-ID
AR-SID
X-Cache-HT
X-Release
Cdn
X-Lb-Id
Odigeo-Trace-Id
X-Host-Name
X-TH-Server
X-WebServer
X-HTML-Minification-Powered-By
X-Varnish-Beresp-TTL
X-Phone
CF-Cached-On
X-Fstrz
X-Atg-Version
X-Vcache
X-Daa-Tunnel
Proxy-Firewall
X-Instart-Info
XServer
X-APP
X-Response-By
Public-Key-Pins-Report-Only
X-Upstream-CT
X-Upstream-HT
X-LB-ID
X-Vcl-Version
X-WR-MODIFICATION
GMS-Ver
Processtime
X-Ratelimit-Remaining
X-Check-Cacheable
X-Fastly-Backend-Reqs
WZWS-RAY
X-Ratelimit-Limit
Backend-Name
X-Worker
Fastcgi-X-Cache-Version
X-Zone
X-CACHE-AGE
X-CLOUD-TRACE-CONTEXT
X-GEO
409pxxline
286prxHost
355prline
Xxline
219prxHost
225prxHost
X-Server-W
X-B3-SpanId
352pxline
178proxuri
188prxHost
189phosttRef
X-NGINX-Cache
X-Backend-TTL
X-Nananana
X-IPS-LoggedIn
X-Amz-Meta-Surrogate-Control
Pics-Label
Version
X-Ratelimit-Reset
Mobile-Detection-Method
X-Clientip
X-WA
X-We-Are-Hiring
X-HS-Status
X-UE-Client-Country
Countrycode
GW-Server
X-URL
Lb
SN
X-UPSTREAM-Address
SS
X-Hyper-Cache
Geoip-Latitude
Esi-Enabled
X-ServedByHost
X-Fastly-Country-Code
WP-Super-Cache
GeoIp-Country-Code
X-CSRF-Token
DataCenter
Ohc-File-Size
X-AssetVersion
X-Contensis-Viewer-Groups
X-Akamai-Request-ID2
X-SERVER-NAME
Geoip-City
X-VCL-Version
X-Dynatrace
Amp-Access-Control-Allow-Source-Origin
X-SRV
X-GZIP
Accept-Language
X-PF-Uncompressing
FSS-Cache
X-BE
X-Be
X-Request-Start
X-HS-Combine-CSS
FSS-Proxy
GeoIP-Latitude
URI
GeoIP-City
X-Render-Time
GeoIP-Country-Code
Serverid
X-CS
X-Vtex-Remote-Cache
X-RequestId
X-LiteSpeed-Cache-Control
X-NWS-UUID-VERIFY
X-GDPR
X-Vtex-Processado-Em
X-Via-Ucdn
X-Unique-Id
X-Reqid
X-Urbn-Site-Id
X-Fpc
X-Urbn-Context-Path
X-Gen-Id
X-Via-NSCOPI
CDN
X-PJAX-URL
X-ZONE
Ohc-Cache-HIT
Locale
FastCGI-Cache
X-FORWARDED-FOR
X-HostName
Dynatrace
X-Pf-Uncompressing
X-ABtesting
X-UCC
RequestUuid
X-Html-Edge-Cache
X-Hello
X-Fastly-Cache-Hits
Cneonction
X-Flog
X-Cdn-Cache
X-Cache-Ttl
Who
X-LiteSpeed-Tag
X-Request-Url
X-ServerName
Server-Id
A
X-Generation-Time
X-Store
X-Varnish-Action
Dnion-Transfer-Encoding
Accept-Ch
IBM-Web2-Location
X-Akamai-SSL-Client-Sid
X-Cache-URL
X-Dw-Trace-Id
Ohc-Response-Time
NnCoection
X-Cdn-Request-ID
Frontcache
X-Serial
X-HTML-Edge-Cache
Get-Access-Time
Is-Session-Tracking
X-EC-Lua
X-Port