Threat Level: green Handler on Duty: Manuel Humberto Santander Pelaez

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
Pragma
CF-RAY
CF-Cache-Status
Link
X-Powered-By
ETag
X-XSS-Protection
Expect-CT
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Varnish
X-Request-Id
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Download-Options
X-AspNet-Version
Alt-Svc
Access-Control-Allow-Credentials
X-Runtime
X-Xss-Protection
X-FRAME-OPTIONS
X-Drupal-Cache
X-Adblock-Key
X-Check
Content-Security-Policy-Report-Only
X-Generator
X-Cacheable
X-Cache-Status
X-Permitted-Cross-Domain-Policies
Timing-Allow-Origin
X-DNS-Prefetch-Control
X-Template
X-Language
X-Iinfo
X-Content-Security-Policy
Status
Content-Encoding
X-AspNetMvc-Version
X-Buckets
X-Request-ID
X-Kinja-Server-Push
Xkey
Upgrade
X-Via
Access-Control-Expose-Headers
X-Turbo-Charged-By
Access-Control-Max-Age
Keep-Alive
X-Drupal-Dynamic-Cache
X-Cache-Group
X-Pass-Why
X-Age
EagleId
X-Backend
X-Envoy-Upstream-Service-Time
X-Robots-Tag
X-Ua-Compatible
X-Amz-Id-2
X-Amz-Request-Id
X-Page-Speed
X-CDN
X-Pingback
X-Server-Powered-By
X-AH-Environment
X-Server
X-Proxy-Cache
X-UA-Device
X-Hacker
Request-Context
X-Nginx-Cache-Status
X-Swift-SaveTime
X-Swift-CacheTime
Grace
X-Varnish-Cache
Ali-Swift-Global-Savetime
X-Cdn
P3p
X-LiteSpeed-Cache
Cf-Railgun
Server-Timing
Feature-Policy
X-Amz-Version-Id
X-Device
X-Server-Id
X-WebKit-CSP
X-OneAgent-JS-Injection
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Rq
X-Ac
EagleEye-TraceId
X-Cnection
Report-To
X-Cloud-Trace-Context
Request-Id
X-Backend-Server
X-Response-Time
X-Host
Content-Location
X-Node
X-Readtime
X-Origin-Cache
X-Vhost
X-Cache-Lookup
X-Application-Context
X-ORACLE-DMS-ECID
X-DataDome
X-Dispatcher
X-Ruxit-JS-Agent
X-ORACLE-DMS-RID
NEL
X-Origin-Upstream-Status
X-Rack-Cache
X-HW
Surrogate-Control
X-Dns-Prefetch-Control
Rating
X-Country-Code
X-Clacks-Overhead
Allow
X-Country
X-Url
X-FTR-Request-ID
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-DynaTrace
X-MS-InvokeApp
X-Instart-Request-ID
Fusion-Component-Id
Fusion-Template-Id
Fusion-Content-Source
Fusion-Source
Fusion-Content-Id
X-Goog-Hash
X-TtlSet
X-Vname
X-PC
X-TTL
X-Varnish-TTL
X-B3-TraceId
Pinterest-Generated-By
Verso
X-Powered-By-Plesk
Public-Key-Pins
X-Px
RTSS
Edge-Control
X-Mod-Pagespeed
X-ESI
X-Ah-Environment
X-VARITI-CCR
X-Sol
X-Middleton-Display
X-Middleton-Response
Display
Response
SPRequestGuid
X-Cdn-Fetch
X-D2id
X-Exp-Id
X-Kinja-Server
X-Use-Magma
X-Exp-Variant
X-Kinja-Revision
X-Kinja-Build
X-GoogleNews-Bot
X-Kinja
X-SharePointHealthScore
X-Recruiting
Accept-Ch-Lifetime
X-Akam-SW-Version
X-CST
Service-Worker-Allowed
X-Vcap-Request-Id
SPRequestDuration
SPIisLatency
X-Version
X-Server-Name
X-GitHub-Request-Id
X-Navigation-Version
X-Powered-CMS
TCN
MS-Author-Via
X-Abt-Application-Version
X-Trace
Charset
X-Debug
X-Shard
Fastly-Restarts
X-Aspnetmvc-Version
Realpath
Nginx-Cache
X-Amz-Rid
X-Amz-Server-Side-Encryption
X-Upstream
AR-ATIME
AR-PoweredBy
AR-CACHE
Ar-Sid
Accept-CH
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-RateLimit-Remaining
X-Forwarded-Proto
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-NF-Request-ID
X-Ezoic-Cdn
Front-End-Https
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Cached
X-Goog-Metageneration
X-Goog-Generation
X-MSEdge-Ref
DynaTrace
Arr-Disable-Session-Affinity
Access-Control-Request-Method
AR-Request-ID
X-Shield-Request-Id
Content-MD5
Pagespeed
X-B3-TraceId-Primal
MRF-Tech
Mrf-Cache-Status
X-Mrf-Section-Lastmod
X-Mrf-Item-Lastmod
X-VCache
X-FTR-Cache-Status
MicrosoftSharePointTeamServices
X-Country-Code-Real
X-FTR-Expires
S
X-DynaTrace-JS-Agent
X-Amz-Meta-S3cmd-Attrs
X-T
X-Goog-Storage-Class
X-Fastly-Request-ID
Paypal-Debug-Id
X-FTR-DC
X-FTR-Balancer
X-FTR-Backend
X-Id
X-FTR-Backend-Server
X-FTR-Realm
X-Ser
X-XRDS-Location
X-Varnish-Age
Accept-Ch
ServerID
X-Via-JSL
X-Grace
X-Content-Type
X-Accel-Expires
X-Client-IP
X-Correlation-Id
X-Dw-Request-Base-Id
X-Forwarded-For
Fastcgi-Cache
Edge-Cache-Tag
X-Amzn-Trace-Id
X-Hits
X-Fastcgi-Cache
X-Content-Digest
Powered
X-Frontend
X-DIS-Request-ID
AMP-Access-Control-Allow-Source-Origin
X-N
PB-RID
PB-PID
Arc-Version
X-Mobile-Rewrite
X-FTR-Cache-Host
X-HS-Hub-Id
X-HS-Content-Id
X-Pinterest-Rid
Pinterest-Version
X-Logged-In
Server-Name
X-Vcache
X-Server-ID
TP-Cache
TP-L2-Cache
X-Request-Processing-Time
X-Request-Received
X-Microsite
X-Kinsta-Cache
X-Request-Handler-Origin-Region
X-Cache-Hit
X-Zen-Fury
X-FastCGI-Cache
X-Time
X-AppVersion
X-Az
X-Activity-Id
X-Rid
X-LB-Cache
X-IPLB-Instance
X-Revision
Healthy
X-Type
X-Cache-Age
X-User-Agent
Retry-After
X-GUploader-UploadID
X-Whom
X-B3-Sampled
Backend-Timing
X-Analytics
X-Srv
X-Node-Name
FilterID
Server-Node
X-NWS-LOG-UUID
X-RateLimit-Limit
X-Hp-Webp
Alternate-Protocol
Cache-Tag
Accept-Charset
X-SERVER
X-F-Cache
X-Akamai-Edgescape
Cache-Status
X-Content-Security-Policy-Report-Only
X-Webkit-CSP
X-Content-Options
X-Cache-Rule
NR-ENABLED
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-Cache-2
X-Kong-Proxy-Latency
DC
X-Content-Powered-By
X-Kong-Upstream-Latency
X-FB-Debug
X-Cluster
X-Amzn-RequestId
X-Amz-Apigw-Id
MS-CV
X-Tumblr-Pixel
X-AOL-HN
X-Tumblr-User
X-Tumblr-Pixel-0
X-App-Environment
X-Jobs
Tracecode
VIX-Pulpo-Node
Refresh
Access-Control-Allow-Method
X-Instance
X-Varnish-Grace
VIX-Pulpo-Upstream-Status
X-B
X-Debug-Info
X-PHP-Backend
X-Page-Id
X-Framework
X-Forwarded-Host
Source
X-Cache-TTL
X-Request-Guid
Actual-Object-TTL
Surrogate-Key
X-Seen-By
X-App-Server
Fastcgi-Useragent
X-Mobile-URL
Host
X-Cache-Operation
Frame-Options
X-FW-Serve
X-Geo-Country
X-FW-Static
X-FW-Server
X-FW-Hash
X-FW-Type
X-Cache-Key
X-Cache-Control
X-TA-CDN-Provider
X-Cached-By
X-Hostname
Cleartype
X-Host-Name
X-Pad
X-Signature
X-B-Cache
X-BCube-Filmed-By
X-XRDS-LOCATION
X-Mobile
Upgrade-Insecure-Requests
X-Git-Hash
X-WebKit-CSP-Report-Only
X-Element-Page-Cache
X-Response-Served-From
NGB
X-Varnish-Backend
X-ATG-Version
Xserver
X-GeoIP
X-ProcessESI
X-RemovedCookies
X-UA-Device-Type
X-RTag
Filters
Eomportal-Instance
Cache-Tv-Group
X-Tumblr-Pixel-1
X-Tumblr-Pixel-2
X-Daa-Tunnel
X-Handled-By
Ms-Operation-Id
X-TT
Webserver
WPE-Backend
X-Amz-Replication-Status
X-HS-Cache-Config
X-Cacheable-TTL
X-Origin-Server
X-Adobe-Loc
X-Drupal-Cache-Tags
GEO-INFO
X-Adobe-Content
X-EdgeConnect-Cache-Status
From-Origin
X-RequestSource
Payment
X-TX-ID
X-Presslabs-Stats
X-TT-TIMESTAMP
X-Cache-Remote
X-Wix-Request-Id
X-Cache-TTL-Remaining
Datacenter
X-Status
X-Esi
X-FW-Dynamic
Liferay-Portal
X-WA-Info
Cache
X-Acc-Meta-Resource-Type
X-Hyper-Cache
X-Contextid
Version
X-Cache-Action
X-Edge-Location
X-Ratelimit-Reset
X-Region
X-Ttl
Viewport
X-Content-Age
X-B3-Traceid
X-Cache-NE
X-CF-Powered-By
X-Varnish-Hostname
X-Akamai-Transformed
PageSpeed
X-Storage
X-Cache-Server
Accept-CH-Lifetime
X-HS-Combine-CSS
X-Varnish-Server
Ohc-File-Size
X-ES-SERVER
X-RN-RSRV
X-Cache-Var
X-Path-Route
Meta-Geo
X-Accel-Buffering
Load-Balancing
X-Cache-Var-Map
Host-Header
X-IP
X-Via-Fastly
X-Cache-Enabled
X-Viewer-Country
Country
X-Proxy
X-PressLabs-Stats
X-Xfnlog-Site
X-TNCMS
Rt-Fastcgi-Cache
Release
DB-Nickname
X-Device-Type
X-Debug-Cache
X-Tumblr-Pixel-3
X-UnsetCookies
Cache-Tags
Cache-Name
X-Cache-Config
X-Proto
X-Cache-Time
X-NCache
X-Loop
X-CCM
X-Backend-TTL
X-Labrador-Cache-Channel
Property-Id
X-Backend-Name
X-Www-Served-By
X-OCL
X-Vgn-Hpd-Reason
Webcakes-Region
DSUID
X-Timing-Wait
X-Cluster-Node
X-Yottaa-Optimizations
X-JoinUs
X-Yottaa-Metrics
X-R9-Blue-Green-Version
Webcakes-App-Version
X-PCL
X-Proxy-Build
Ec-Rule-Version
X-Origin-Hint
TWC-Connection-Speed
TWC-Device-Class
TWC-GeoIP-Country
X-Upgrade-Enabled
X-From
X-FC-Vary-Parameters
X-Akamai-Request-ID2
X-Rule
X-CS
X-Cache-Grace
X-Hosted-By
TWC-GeoIP-LatLong
X-Cache-Host
X-Origin
S-Rt
Vix-Hermes-Req-Id
X-Human
TWC-Privacy
X-EIG-Tracking-Id
Cache-Hits
TWC-Locale-Group
Selected-Fe
X-Varnish-Cache-Hits
Webcakes-App-Name
X-Web-Node
X-Varnish-Hits
X-Trace-Id
X-Akamai-Request-ID
Decoy-Debug-Status
S-Cnection
X-VCT
Mn-Server-Ip
X-Time-Microsecs
X-NewRelic-App-Data
Decoy-Debug-TTL
X-Origin-Response-Time
Decoy-Debug-Key
X-Locale
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Drupal-Cache-Contexts
X-FireWall-Port
X-Generated
X-Site-Version
Ohc-Cache-HIT
Azure-SlotName
Azure-InstanceId
Azure-RegionName
Azure-Version
Azure-SiteName
X-Access
X-Section
X-Hit
X-ApacheServer
X-PERF
X-NGENIX-Cache
X-Format
X-OVcl-Cache
X-S
X-Rendered-As
X-Real-IP
X-OVcl
Origin-Edge-Control
Cache-Key
Time
Origin-Cache-Control
Server-Info
X-Pubstack
L5d-Success-Class
X-Trafficlayer-App-Scope
X-Trafficlayer-App-Name
X-Redis-Cache
X-FW-Version
X-Ua
Now
X-Litespeed-Cache
X-Upstream-HT
X-Upstream-CT
X-APP-VERSION
Fastcgi-X-Cache-Version
X-SS-Set-Cookie
OT-Force-Account-Verify
Fastly-SSL
X-Origin-TTL
X-Origin-CC
ServedBy
X-ServerID
X-Cluster-Name
Access-Control-Request-Headers
X-ShardId
Mime-Version
Cteonnt-Length
X-Shopify-Stage
X-Sorting-Hat-PodId
Origin
X-Alternate-Cache-Key
X-FB-TRIP-ID
X-ShopId
X-Sorting-Hat-ShopId
X-Parent-Response-Time
X-UUID
X-Tec-Api-Root
Hostname
X-Load-Cache
X-Tec-Api-Version
X-Webkit-Csp
X-Tec-Api-Origin
X-VG-WebCache
X-Soup
X-Rocket-Nginx-Bypass
X-GoCache-CacheStatus
NtCoent-Length
X-Upstream-Proxy
Accept-Language
X-VG-TLSProxy
X-App-Version
Machine
X-Is-Bot
Nel
X-Uri
NGX
IBM-Web2-Location
Odigeo-Trace-Id
X-Guploader-Uploadid
X-UA
X-No-Session
X-CACHE-KEY
X-Tb
X-Node-Id
X-Environment-Context
X-MServer
X-ECACHE
X-Info
X-L-Path
X-BYPASS-REASON
X-ProxyCache-Status
X-Tt-Trace-Tag
X-Nc
X-Oneagent-Js-Injection
X-ProxyCache-Key
X-B3-Parentspanid
Request-Time
X-B3-SpanId
X-Hl-Ver
X-CSRF-TOKEN
Proxy-Connection
X-Trv-Group
X-Twitter-Response-Tags
X-External-Request-Id
X-Application
Xc-Version
X-ARC
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
X-B-Cookie
X-DPWN-IS-SECURE
Fly-Request-Id
X-D
X-Vtex-Remote-Cache
X-Date
X-CF-Lambda-Version
Content-Style-Type
Content-Script-Type
X-G
X-Connection-Hash
X-Cms-Context
Cross-Origin-Window-Policy
X-Vtex-Processado-Em
Arc-Country
Fly-Cache
X-Transaction
X-Geo
X-CF-Lambda-Fn
BehaviorPad-Version
AsisCache
X-VG-WebServer
GEO-REGION-INFO
Memcached
Request-Country
X-Detected-As
X-Rewrite-Enabled
Request-EU
X-Rojux
Rendered-Blocks
X-ScT
X-Developer
X-S-Cookie
X-A
X-PAYTM-SRV-ID
X-Destination
X-Region-Sid
ServerName
T-Server
Viewtype
VivaBuild
X-Request-UUID
Rt-Proxy-Cache
X-A-Ccd
A
Mobile-Detection-Method
X-SRCache-Key
Node
Cache-Prefix
Meta-Geo-Continent
Apple-News-Services-Host
X-Instart-Info
MD5-Digest
X-Aed
X-A-Dcw
X-A-Dam
X-Server-Time
X-A-Dgt
Apple-News-Services-Handled
X-Accel-Expires-Debug
X-A-Wwc
X-AIR-PT
X-Endurance-Cache-Level
Uber-Trace-Id
CF-IPCountry
Backend-Name
X-SVT-ORM-RULES
X-JWT-State
X-Is-Gdpr
N-Cache
X-SVT-ORM-VERSION
X-Nginx-Cache
X-Ratelimit-Limit
X-S-Maxage
X-Device-Os
X-Amzn-Remapped-Content-Length
X-SIPLIST1
X-B3-Spanid
Mail-Subject
X-Has-Esi
X-Clara-WADP
X-WADP-Cache
X-Worker
X-Cdn-Srv
IsBot
Srv
We-Hiring
X-Cache-Bucket
X-PHP-Host
X-Generated-By
X-Cdn-Forward
User-Cache-Control
X-Irp-Debug
X-Thanos
X-ElasticPress-Search
Server-Host
X-Level-Front-Cache
X-Skip-Cache
X-TrackingId
X-Amz-Meta-Cache-Control
X-Auto-Login
X-Var-Ttl
X-Backend-Host
X-User
X-Up
X-Proxy-Cache-Status
X-IN-APIGATEWAYSSL
X-Li-Fabric
X-Li-Pop
X-Platform-Server
X-Proxy-Upstream
X-Owner
X-Request-Start
X-Reqid
X-Reboot
X-Release
X-Origin-Expires
X-Origin-Date
X-Service
X-LI-UUID
X-Location
X-Magnolia-Registration
X-Old-Content-Length
X-Server-IP
X-Backend-Url
X-Bip
X-Fastly-Cache
X-Gen-Mode
X-Cdn-Origin
X-Webstats-RespID
X-WebServer
X-Fetched-On
X-CUA
X-NX-Host
X-Distributor
X-Debug-Cache-Store
X-Dispatch
X-Debug-Cache-Fetch
X-Debug-Cache-Expiry
X-Cache-Info
X-Dispatcher-Server
X-Generated-On
X-Compress-Hint
X-Variation
X-Debug-Log
X-VC-Cache
X-Cache-FS-Status
X-Block-Status
X-Developers
X-IN-APIGATEWAY
X-Hash
X-Debug-Cookies
X-Clientip
X-Generation-Time
X-We-Are-Hiring
X-Geo-Header
X-Hnp-Log
X-GeoIP-City
X-BBXSRF
Countrycode
X-NC
AKAMAI
X-Request-URI
Pagetype
Platform
PFcat
X-Dc
Heartbleed
X-Via-CDN
Adler-Geo
X-Sn-Servicetimems
Content-Disposition
Gh-Request-Id
Fastly-Soc-X-Request-Id
Pramga
Is-Eu
RNT-Time
Section-Io-Cache
Served-By
RNT-Machine
SRV
Akamai-GRN
X-NWS-UUID-VERIFY
X-Eu-Site
X-Epic-Correlation-Id
Thinkindot-Control
X-VServer
X-Matched-Rule
X-Svr
X-Urbn-Site-Id
X-Urbn-Context-Path
True-Client-Country-4JS
X-Swa-Ws
X-Lb-Id
X-Distil-CS
Web-Mar-Node
X-SayCDN-TTL
X-Thinkindot-L3
X-Method
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Cache-Id
Locale
Kp-EeAlive
Fastly-SWR
CDCHOST
Server-Int
X-SD-PageType
Fastly-SIE
Thinkindot-CacheControl-Type
X-Nginx-Cache-Key
X-Generated-In
Thinkindot-CacheControl
X-Qloud-Router
X-LI-Proto
X-Key
Magicmarker
L
X-Policy
Esi-Enabled
X-Rebelmouse-Cache-Control
X-Say-Cacheable
X-Azure-Ref
X-Say-TTL
X-C
Ha-Gx-Prefs
HA-Ipaddr
X-Azure-Ref-OriginShield
X-CGP
X-Rebelmouse-Surrogate-Control
Wxu-Next-Region
X-RateLimit-Limit-Second
SD-X-WS
X-Core-Mission
X-RateLimit-Remaining-Second
Wxu-Next-Commit
Wxu-Next-Hostname
X-Microcachable
W
X-MSEdge-Flight
X-Internal-Host
V-Age
X-MSEdge-Features
X-Servername
X-Backend-State
X-ServiceProvider
Memory
Server-ID
X-Instart-Isnd
X-Cache-URL
Resin-Trace
X-App-Name
Cache-Provider
X-GEO
X-AWS-Id
X-LJ-Flow-ID
X-VWS-Id
X-FPC
Cdn-Request-Time
Cdn-Host
X-Scheme
X-Edge-Server
X-Cache-Backend
X-Be
X-Processor
X-GDPR
REQUESTUUID
X-DC
X-Mode
X-Org
X-Request-Time
Group
X-Pjax-Url
X-Flog
X-NodeID
X-Hello
X-ABtesting
SS
X-Datadome
X-Wa
Cache-Host
X-Servedbyhost
X-Response-By
X-IPS-LoggedIn
X-Server-W
X-Unique-ID
Country-Code
X-Ms-Version
X-Ms-Request-Id
Cache-Cookie-Set-From
Cache-Cookie-Set-Lfrom
Cache-Cookie-Set-Idcheck
X-SN
X-Oss-Hash-Crc64ecma
X-CDN-Forward
X-Oss-Storage-Class
X-Oss-Object-Type
X-Oss-Request-Id
X-Oss-Server-Time
X-Page-Type
X-Ratelimit-Remaining
X-Ruxit-Js-Agent
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-Oracle-Dms-Rid
X-VCL-Version
X-Varnish-Beresp-Ttl
X-Zone
X-EC-Lua
X-Zipkin-Id
X-Routing-Service
X-Proxied
X-Ftr-Request-Id
X-Session-Fingerprint
X-Via-Ucdn
PICS-Label
X-HS-Status
Lfy
X-Tb-Optimization-Total-Bytes-Saved
X-SRV
UCS
X-Dynatrace
X-URL
X-Cache-Debug
X-COUNTRY
X-GRACE
X-DataStream-Cache-Status
Powered-By-ChinaCache
X-Pf-Uncompressing
X-Logtrace-Id
Ttl
SN
Geoip-City
GeoIp-Country-Code
X-Agile
Ajk
X-Agile-Id
Geoip-Latitude
X-Agile-Age
X-Varnish-Beresp-TTL
X-CSRF-Token
X-RateLimit-Reset
X-MP-GENERATED-AT
Proxy-Firewall
X-Webapp-Samesite-None-Activated-N
X-7Graus-Varnish-Cache-Control
X-Fastly-Country-Code
X-7Graus-Varnish-XKeys
X-Source
ProcessTime
X-Cache-Miss-From
X-Logging-Id
X-Sedo-Request-Id
X-PF-Uncompressing
GeoIP-Country-Code
GeoIP-Latitude
Environment
GeoIP-City
X-Cache-Category-Id
X-APP
Powered-By
X-Grey
X-Bc
X-NODE
XServer
X-HTML-Minification-Powered-By
X-Sucuri-ID
X-Unique-Id
X-Newrelic-Synthetics
X-ZONE
Cdn
X-Sucuri-Id
X-Ftr-Cache-Host
X-CLOUD-TRACE-CONTEXT
X-TH-Server
X-Tt-Trace-Host
X-Vcl-Version
M-TraceId
X-Core-Value
Pics-Label
X-DataStream-MidMile-RTT
Fastly-Backend-Name
CACHE
X-Edge
X-DataStream-Origin-MEX-Latency
X-Check-Cacheable
CF-Cached-On
X-LiteSpeed-Cache-Control
Cf-Ipcountry
X-Aicache-OS
WWW
X-Vdms-Version
X-Ftr-Realm
X-Ftr-Dc
X-Ftr-Backend
X-Dynatrace-Js-Agent
X-Ftr-Balancer
X-Ftr-Backend-Server
HostName
X-Mid
X-Sucuri-Cache
X-Fastly-Backend-Reqs
GW-Server
Requestid
Cdnsip
Cdncip
X-AK-Request-ID
MIME-Version
X-Varnish-Ttl
X-Shopify-Generated-Cart-Token
Pragrma
X-FORWARDED-FOR
X-Planisys-CDN-Cache
X-Planisys-CDN-TTL
X-ServedByHost
X-RCS-CacheZone
X-MCACHE
X-Planisys-CDN-Rules
X-LAGOON
X-Fstrz
X-Sigma-Backend
LB
X-Swift-Error
X-Rocket-Build-Number
X-Sigma
X-Cache-Tag
Amp-Access-Control-Allow-Source-Origin
X-TT-LOGID
X-UPSTREAM-Address
X-WA
X-Secret
X-Gannett-Site-Version
X-Litespeed-Cache-Control
X-Via-NSCOPI
Ohc-Response-Time
X-NGINX-Cache
X-Varnish-Url
Lb
X-BC
TTL
X-Cache-Ttl
X-PJAX-URL
X-BE
X-RPS
X-DB
X-Action
URI
X-CDN-Cache
X-DI
X-RPM
X-DW
X-DSS
X-RSL
Dynatrace
X-SaId
X-ORACLE-APMCS-REQUEST-ID
X-ORACLE-APMCS-TAG
X-GeoIP-Country-Code
Host-ID
X-Varnish-Cacheable
X-WR-MODIFICATION
RequestUuid
X-ND-Cache
WZWS-RAY
On-Server
DataCenter
X-Correlation-ID
X-Zalando-Child-Request-Id
Get-Access-Time
CDN
Xkeypdq
Xkeyrz
User-Agent
X-Proxy-Cacherz
Server-Id
Inserted-Into-Cache-At
X-Upstream-Ht
X-Refresh
X-Upstream-Ct
X-Trafficlayer-App-Version
Is-Session-Tracking
X-Fpc
X-Flow-Id
X-Fastly-Cache-Hits
X-Page-Impression-Id
X-Via-SSL
X-Nananana
X-Dw-Trace-Id
X-Via-Edge
X-Served-From
X-SB
Correlation-Id
X-MID
X-VC
Warning
X-Akamai-SSL-Client-Sid
X-Cf-Powered-By
X-Akamai-ERPolicy
X-Akamai-ERRuleID
Thinkindot-Cache-Type
X-MiniProfiler-Ids
X-Req
X-Amzn-Remapped-Connection
X-Amzn-Remapped-Date
Cneonction
X-Li-Proto
Locid
Gannett-Cam-Experience-Id
X-Pod
X-Gamma-Serve
X-Crawler
RequestId
X-LB-ID
X-ServerName
X-Bug-Bounty
HitType
X-ECache
Xet-Cookie
SID
Who
V-Cache
X-NU-AKA-ACS-Version
X-Request-URL
Processtime
X-LiteSpeed-Tag
X-Gen-Id
X-Newrelic-App-Data
X-Gdpr