Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
Link
CF-Cache-Status
X-Powered-By
Pragma
ETag
CF-RAY
Expect-CT
X-XSS-Protection
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
Referrer-Policy
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Xss-Protection
X-UA-Compatible
X-Served-By
Alt-Svc
X-Request-Id
X-Varnish
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Download-Options
X-AspNet-Version
Access-Control-Allow-Credentials
X-Runtime
X-Drupal-Cache
X-Check
Content-Security-Policy-Report-Only
X-Adblock-Key
X-Permitted-Cross-Domain-Policies
X-Generator
X-Cache-Status
CF-Ray
X-Cacheable
X-Kinja-Server-Push
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-Template
X-Language
X-FRAME-OPTIONS
X-AspNetMvc-Version
X-Ua-Compatible
X-Iinfo
X-Buckets
Status
X-Content-Security-Policy
X-CDN
Content-Encoding
Upgrade
Access-Control-Expose-Headers
X-Envoy-Upstream-Service-Time
Access-Control-Max-Age
Keep-Alive
X-Via
X-Drupal-Dynamic-Cache
X-Ws-Request-Id
X-AH-Environment
X-Server
X-Turbo-Charged-By
X-Backend
P3p
X-Age
X-Cache-Group
X-Robots-Tag
Feature-Policy
X-Proxy-Cache
Xkey
X-Request-ID
Request-Context
X-Amz-Request-Id
X-Amz-Id-2
EagleId
X-Page-Speed
X-Hacker
X-UA-Device
X-Server-Powered-By
X-Nginx-Cache-Status
X-Pingback
Grace
Server-Timing
X-Varnish-Cache
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
Report-To
X-LiteSpeed-Cache
X-Amz-Version-Id
X-Dns-Prefetch-Control
X-WebKit-CSP
Cf-Railgun
X-Server-Id
X-Rq
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Origin-Cache
EagleEye-TraceId
X-Host
X-OneAgent-JS-Injection
Surrogate-Control
X-Device
X-Response-Time
X-Vhost
X-Backend-Server
X-Cache-Lookup
X-Ac
X-Readtime
X-Node
NEL
X-Origin-Upstream-Status
X-Dispatcher
X-HW
Fusion-Template-Id
Fusion-Component-Id
Fusion-Content-Id
Fusion-Source
Fusion-Content-Source
X-Mod-Pagespeed
Content-Location
Request-Id
X-DataDome
X-Application-Context
X-ORACLE-DMS-ECID
X-Akam-SW-Version
Fusion-Deployment-Id
X-ORACLE-DMS-RID
X-Country
Allow
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Cloud-Trace-Context
X-Ruxit-JS-Agent
Rating
X-Country-Code
X-Cnection
Edge-Control
X-Clacks-Overhead
X-Rack-Cache
X-Url
X-Px
RTSS
MS-Author-Via
X-FTR-Request-ID
Accept-CH
X-Pass-Why
X-Goog-Hash
X-TtlSet
X-PC
X-Vname
X-Powered-By-Plesk
Verso
Service-Worker-Allowed
X-B3-TraceId
X-Varnish-TTL
Public-Key-Pins
Accept-CH-Lifetime
X-Use-Magma
X-Kinja-Revision
X-Kinja-Server
X-Kinja
X-Cdn-Fetch
X-Exp-Id
X-Exp-Variant
X-Kinja-Build
X-GoogleNews-Bot
X-MS-InvokeApp
X-GitHub-Request-Id
Arr-Disable-Session-Affinity
X-Sol
X-Forwarded-Proto
X-Middleton-Response
X-Middleton-Display
Display
X-DynaTrace
Pagespeed
Response
X-Amz-Server-Side-Encryption
X-Cache-TTL
Accept-Ch
X-D2id
X-Ttl
X-Amz-Rid
X-NF-Request-ID
X-CST
TCN
X-Abt-Application-Version
Pinterest-Generated-By
X-Content-Type
X-Vcap-Request-Id
X-Cached
X-VARITI-CCR
Accept-Ch-Lifetime
AR-Request-ID
AR-PoweredBy
AR-ATIME
X-Navigation-Version
Cache-Tag
AR-CACHE
Ar-Sid
X-Fastly-Request-ID
X-Version
X-Server-Name
X-Instart-Request-ID
X-Powered-CMS
X-Upstream
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-ESI
X-Debug
X-Grace
X-MSEdge-Ref
Host-Header
X-Oneagent-Js-Injection
Access-Control-Request-Method
X-Accel-Expires
Charset
Nginx-Cache
X-XRDS-Location
Content-MD5
SPIisLatency
SPRequestDuration
X-Mrf-Section-Lastmod
Mrf-Cache-Status
X-Mrf-Item-Lastmod
X-B3-TraceId-Primal
MRF-Tech
Realpath
S
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Ezoic-Cdn
X-SharePointHealthScore
SPRequestGuid
X-Element-Page-Cache
X-Client-IP
X-DynaTrace-JS-Agent
X-Pinterest-Rid
Pinterest-Version
X-Shield-Request-Id
X-Hp-Webp
X-Jurisdiction
X-FastCGI-Cache
X-Dw-Request-Base-Id
X-Amz-Meta-S3cmd-Attrs
X-Recruiting
X-Id
X-Trace
X-T
X-Node-Name
X-Kinsta-Cache
Fastcgi-Cache
X-Content-Digest
X-Server-ID
X-Logged-In
X-Cache-Key
X-TTL
X-NWS-LOG-UUID
X-Mobile-URL
TP-Cache
TP-L2-Cache
Server-Node
X-Cache-Hit
X-Request-Processing-Time
X-Request-Received
X-Cache-Age
X-Frontend
ServerID
X-Hostname
X-Amzn-Trace-Id
X-Ruxit-Js-Agent
X-FTR-Backend
X-FTR-Backend-Server
X-FTR-Balancer
Front-End-Https
Edge-Cache-Tag
X-FTR-Realm
X-FTR-DC
X-FTR-Cache-Status
X-Country-Code-Real
X-FTR-Expires
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-GUploader-UploadID
Server-Name
X-Forwarded-For
Fastly-Restarts
X-Goog-Stored-Content-Length
X-Goog-Generation
X-Goog-Metageneration
Arc-Version
PB-PID
X-Yandex-Sdch-Disable
PB-RID
Powered
X-Request-Handler-Origin-Region
X-Microsite
DynaTrace
X-Zen-Fury
Filters
X-Revision
X-DIS-Request-ID
X-User-Agent
X-Content-Security-Policy-Report-Only
X-F-Cache
X-Akamai-Edgescape
X-Page-Id
X-Jobs
X-Hits
X-Mobile-Rewrite
X-LB-Cache
X-ORACLE-APMCS-REQUEST-ID
X-ORACLE-APMCS-TAG
X-HS-Combine-CSS
Accept-Charset
X-HS-Content-Id
X-HS-Cache-Config
X-HS-Hub-Id
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Content-Powered-By
AMP-Access-Control-Allow-Source-Origin
X-Geo-Country
X-Origin-Server
X-Cdn
X-Esi
X-Varnish-Age
Backend-Timing
X-ATS-Timestamp
Alternate-Protocol
X-N
X-B
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
X-Via-JSL
X-FTR-Cache-Host
X-Daa-Tunnel
MicrosoftSharePointTeamServices
X-Varnish-Backend
Cache-Tags
X-Litespeed-Cache
X-Rid
X-Correlation-Id
X-Fastcgi-Cache
DC
X-Type
X-Az
X-Activity-Id
X-AppVersion
X-RateLimit-Remaining
X-Amz-Replication-Status
Paypal-Debug-Id
Surrogate-Key
Retry-After
X-WebKit-CSP-Report-Only
X-Git-Hash
Section-Io-Cache
X-ATG-Version
X-Whom
X-Debug-Info
X-Varnish-Grace
X-B-Cache
X-Signature
X-TT
X-App-Environment
X-FB-Debug
X-Status
X-Ser
Host
X-Edge
X-Content-Options
Frame-Options
Actual-Object-TTL
X-Request-Guid
X-App-Server
Fastcgi-Useragent
X-Amzn-RequestId
X-Contextid
Healthy
X-IPLB-Instance
Nel
X-AOL-HN
X-Endurance-Cache-Level
X-HTML-Minification-Powered-By
X-Cache-Action
X-Seen-By
Srv
X-ECACHE
X-B3-Sampled
X-Pinterest-Direct
X-Host-Name
Refresh
From-Origin
X-Upgrade-Enabled
X-Amz-Apigw-Id
X-Drupal-Cache-Tags
Source
Access-Control-Allow-Method
X-Cache-Rule
X-Tumblr-Pixel
X-Instance
X-Tumblr-Pixel-0
X-ProcessESI
X-RemovedCookies
X-Accel-Buffering
X-Response-Served-From
X-Tumblr-User
X-Cache-Operation
X-PressLabs-Stats
X-Protected-By
VIX-Pulpo-Upstream-Status
Odigeo-Trace-Id
VIX-Pulpo-Node
X-L-Path
X-MCACHE
X-Mid
X-Cacheable-TTL
X-UUID
X-Environment-Context
Eomportal-Instance
X-Region
X-Rule
X-Is-Bot
X-Rendered-As
X-FW-Static
X-FW-Dynamic
X-FW-Hash
X-FW-Serve
Payment
X-FW-Type
X-FW-Server
Datacenter
X-Varnish-Server
X-Cache-Time
X-WA-Info
X-Adobe-Loc
X-Adobe-Content
Cache-Status
MS-CV
Content-Disposition
X-Time
Countrycode
X-VCache
X-Cache-Control
X-Correlation-ID
X-URL
X-Cache-Server
Xserver
X-Akamai-Request-ID2
X-GeoIP
X-Proxy
Uber-Trace-Id
X-Cached-By
X-Akamai-Transformed
X-UnsetCookies
X-EdgeConnect-Cache-Status
X-SERVER-NAME
X-Mobile
X-Yottaa-Optimizations
X-Release
X-Wix-Request-Id
X-Yottaa-Metrics
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-Origin-Response-Time
X-Load-Cache
X-PHP-Backend
Access-Control-Request-Headers
X-Mode
Version
X-Azure-Ref
X-Handled-By
X-Cluster
NGB
X-NWS-UUID-VERIFY
Accept-Language
X-IPS-LoggedIn
X-NGENIX-Cache
X-Air-Hostname
X-NewRelic-App-Data
X-APP-VERSION
X-Cache-Remote
X-Cache-NGX
X-Tumblr-Pixel-1
X-Tumblr-Pixel-2
X-Backend-Name
Liferay-Portal
X-Cache-Var
X-Cache-Var-Map
X-CCM
X-Cache-Status-Check
X-ES-SERVER
Load-Balancing
X-LJ-Flow-ID
Meta-Geo
X-Adobe-Source
X-FireWall-Port
X-AWS-Id
X-Zipkin-Id
X-ApacheServer
X-RN-RSRV
X-PERF
X-Routing-Service
X-Proxied
X-VWS-Id
X-UA-Device-Type
X-UPSTREAM-Address
X-Via-Fastly
X-Path-Route
X-No-Session
Mn-Server-Ip
X-Www-Served-By
X-Viewer-Country
Filterid
X-R9-Blue-Green-Version
X-Ua
X-Framework
X-Storage
X-Qloud-Router
X-RequestSource
X-MP-GENERATED-AT
X-OCL
X-Locale
ServedBy
X-TX-ID
X-PCL
Decoy-Debug-Status
Section-Io-Id
Decoy-Debug-TTL
Section-Io-Origin-Status
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
X-Pubstack
X-Bc-Bl
DSUID
Cache-Name
Akamai-GRN
X-Format
X-Site-Version
Cache-Hits
X-Access
X-Section
Decoy-Debug-Key
X-Varnish-Cache-Hits
Ms-Operation-Id
Now
X-Info
TWC-Privacy
Webserver
Webcakes-Region
Webcakes-App-Version
X-Origin-Hint
X-Cache-Config
X-EIG-Tracking-Id
X-Device-Type
Webcakes-App-Name
X-FW-Version
TWC-Connection-Speed
Property-Id
TWC-Device-Class
TWC-GeoIP-Country
TWC-Locale-Group
TWC-GeoIP-LatLong
X-RTag
Cross-Origin-Window-Policy
X-NCache
X-Human
X-Real-IP
X-SayCDN-TTL
Cache
X-Redis-Cache
X-Web-Node
Fastly-SSL
X-Say-Cacheable
X-Say-TTL
X-Time-Microsecs
X-Detected-As
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
Cache-Tv-Group
X-PHP-Host
X-Shopify-Stage
X-ShopId
X-BCube-Filmed-By
X-NYM-Debug-Backend
X-Origin
X-ProxyCache-Key
X-Labrador-Cache-Channel
X-ProxyCache-Status
X-From
X-ServerID
X-BYPASS-REASON
X-CS
X-FB-TRIP-ID
X-ShardId
X-Alternate-Cache-Key
X-CSRF-Token
S-Rt
X-Cache-Enabled
Cleartype
DB-Nickname
X-FC-Vary-Parameters
X-IP
X-Content-Age
X-Amzn-Remapped-Content-Length
X-Loop
X-Hl-Ver
X-TNCMS
X-Cache-Host
X-Proxy-Build
Azure-SiteName
Azure-SlotName
Azure-InstanceId
X-Xfnlog-Site
X-Hyper-Cache
X-JoinUs
X-XRDS-LOCATION
Azure-Version
Azure-RegionName
X-RateLimit-Limit
X-Hosted-By
Selected-Fe
X-SaId
X-Timing-Wait
X-Generated
Origin-Edge-Control
Origin-Cache-Control
Ec-Rule-Version
X-Geo
X-Drupal-Cache-Contexts
Country
Geo-Info
X-Cache-2
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Unique-Id
User-Agent
SD-X-WS
X-Pad
Server-Info
X-Urbn-Site-Id
Time
X-Source
X-Cache-TTL-Remaining
Locale
X-Urbn-Context-Path
X-Cache-NE
X-Cluster-Node
X-Varnish-Hostname
X-Old-Content-Length
FilterID
Apigw-Requestid
X-EC-Lua
X-Parent-Response-Time
Upgrade-Insecure-Requests
X-RCS-CacheZone
NR-ENABLED
WPE-Backend
X-Debug-Cache
X-Akamai-Request-ID
X-Cache-Backend
X-Webkit-CSP
X-Soup
X-Presslabs-Stats
Proxy-Connection
X-Cache-Grace
X-CDN-Forward
X-Proxy-Cache-Status
X-Srv
X-Backend-TTL
X-App-Version
X-Forwarded-Host
X-Tb
X-Proto
X-FORWARDED-FOR
X-Cache-PHP
X-Tumblr-Pixel-3
S-Cnection
X-Nc
X-Newrelic-Synthetics
X-Session-Fingerprint
T-Server
Thinkindot-CacheControl
ServerName
Server-Host
Rendered-Blocks
Mobile-Detection-Method
X-Vdms-Version
Pagetype
Thinkindot-CacheControl-Type
X-ServiceProvider
X-Vtex-Remote-Cache
Xc-Version
X-Vtex-Processado-Em
X-VG-WebServer
Thinkindot-Control
X-VG-WebCache
True-Client-Country-4JS
Meta-Geo-Continent
MD5-Digest
AsisCache
BehaviorPad-Version
X-Transaction
Content-Script-Type
Arc-Country
X-Trace-Id
X-SRCache-Key
X-Swa-Ws
X-Thinkindot-L3
Content-Style-Type
Fastcgi-X-Cache-Version
X-SIPLIST1
M-TraceId
X-Vdms-Path
Machine
X-Twitter-Response-Tags
X-Trv-Group
FNAC-ModuleRouting
GEO-REGION-INFO
IsBot
X-ScT
X-S-Cookie
X-D
X-Connection-Hash
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-Date
Who
VivaBuild
X-Developer
X-Destination
X-B-Cookie
X-ARC
X-A-Dam
X-A-Wwc
X-A-Dgt
X-Accel-Expires-Debug
X-Aed
X-A
X-A-Ccd
X-Application
X-DevSite-Last-Modified
X-Dispatch
X-Region-Sid
X-Processor
X-PAYTM-SRV-ID
X-Reqid
X-Rewrite-Enabled
X-A-Dcw
X-S
X-Rojux
X-NodeID
X-Nginx-Cache-Key
Viewtype
X-G
X-External-Request-Id
X-Generated-On
X-Geo-Header
X-Method
X-Matched-Rule
X-Level-Front-Cache
X-Scheme
NGX
X-Uri
X-Vcache
X-AIR-PT
Cache-Key
OT-Force-Account-Verify
X-DC
X-Be
Wxu-Next-Commit
Magicmarker
Mail-Subject
We-Hiring
Wxu-Next-Hostname
Wxu-Next-Region
X-Agile-Id
X-Agile-Age
X-Agile
Vix-Hermes-Req-Id
NM-Fastcgi-Cache
Server-Hostname
RNT-Machine
Server-Ext
Sever-Int
On-Server
V-Age
UCS
X-Branch-Name
RNT-Time
X-Cms-Context
X-User
X-Skip-Cache
X-RateLimit-Remaining-Second
X-RateLimit-Limit-Second
X-Varnish-Cacheable
X-VC-Cache
X-SD-PageType
X-Response-By
N-Cache
X-Worker
X-Owner
X-Node-Id
X-Developers
X-Core-Value
X-Compress-Hint
Kp-EeAlive
X-Device-Os
X-Dispatcher-Server
X-Logging-Id
X-Location
X-LAGOON
X-Generation-Time
X-Cache-FS-Status
X-Req
Apple-News-Services-Parsed-Url
CDCHOST
Apple-News-Services-Host
Apple-News-Services-Handled
AKAMAI
CacheControlHeader
Apple-News-Services-Request-Url
Cache-Cookie-Set-From
Cache-Cookie-Set-Idcheck
Cache-Cookie-Set-Lfrom
Cf-Ipcountry
User-Cache-Control
X-Cluster-Name
X-Envoy-Decorator-Operation
X-SRV
X-Generated-In
X-JWT-State
Adler-Geo
X-Is-Gdpr
X-Hash
X-Has-Esi
X-NC
X-Epic-Correlation-Id
X-CGP
X-Cache-Tags
X-Storefront-Renderer-Rendered
Node
X-Bip
X-Cache-Debug
X-Distributor
X-Eu-Site
X-Rebelmouse-Surrogate-Control
X-Fmm-Version
X-Gen-Mode
X-Clara-WADP
X-Cache-URL
X-Cache-Bucket
X-Cache-Info
X-Hnp-Log
X-Loc
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-WADP-Cache
X-Servername
X-Micro-Cache
X-Block-Status
X-Backend-State
X-SN
X-TH-Server
X-Server-W
X-Request-UUID
X-Microcachable
X-Thanos
Is-Eu
X-VG-TLSProxy
Web-Mar-Node
X-Variation
X-Var-Ttl
X-TA-CDN-Provider
X-Rebelmouse-Cache-Control
X-Policy
W
Fastly-SWR
Ha-Gx-Prefs
Viewport
L5d-Success-Class
Fastly-SIE
Release
Platform
Fastly-Drupal-HTML
HA-Ipaddr
Sid
X-Origin-CC
X-App
X-Varnish-Beresp-Status
X-Dc
X-Varnish-Beresp-Ttl
X-Origin-TTL
X-Varnish-Beresp-Grace
X-Hit
X-Cache-Id
X-VServer
X-We-Are-Hiring
X-Core-Mission
X-Magnolia-Registration
Rt-Fastcgi-Cache
X-Slack-Backend
X-Varnish-Authentication
X-Reboot
X-Instart-Info
X-Distil-CS
X-Fastly-Cache
X-Gzip
X-Contensis-Viewer-Groups
Gh-Request-Id
X-Origin-Expires
X-Cache-ASPX
C-Via
X-Backend-Host
X-Esi-Check
X-Origin-Date
X-Clientip
X-Webstats-RespID
X-Auto-Login
X-BBXSRF
X-COUNTRY
X-Mvc-Supplant-Cachable
X-Via-PopH
X-Irp-Debug
X-LI-Proto
X-Li-Pop
X-LI-UUID
Memcached
X-Li-Fabric
X-Configured-By
X-Platform-Server
X-TrackingId
X-Wa
X-Request-Host
X-GoCache-CacheStatus
X-Via-PopV
LB
X-Cdn-Forward
X-NU-AKA-ACS-Version
HostName
X-Ms-Version
X-Key
X-Envoy-Upstream-Healthchecked-Cluster
X-TT-TIMESTAMP
X-Edge-Location
X-SVT-ORM-RULES
X-Ms-Request-Id
X-SVT-ORM-VERSION
Referer-Policy
X-Varnish-URL
Pragrma
NtCoent-Length
X-BC
X-UA
X-ZONE
MIME-Version
X-Servedbyhost
Esi-Enabled
X-Refresh
Tracecode
X-Vgn-Hpd-Reason
X-Ua-Device
L
CACHE
X-Via-CDN
X-App-Name
X-TIME
Fastly-Backend-Name
Server-ID
Ohc-File-Size
GEO-INFO
X-B3-Traceid
X-BACKEND-TTL
X-MSEdge-Flight
X-Up
X-MSEdge-Features
X-Server-IP
Cache-Host
X-Mvc-Supplant-OutputCached
X-Bc
X-Zone
Memory
X-Nginx-Cache
X-Minions-Version
X-Batcache
X-Unique-ID
X-Svr
X-ElasticPress-Query
X-ND-Cache
X-Cdn-Srv
X-VCL-Version
X-Sucuri-ID
X-Debug-Panamera-Host
Server-Surrogate-Control
Server-Cache-Control
X-Debug-Panamera-Sitecode
X-S-Maxage
X-Oss-Storage-Class
X-Oss-Server-Time
X-Oss-Object-Type
X-Oss-Request-Id
X-Oss-Hash-Crc64ecma
X-GEO
X-VCT
X-Aicache-OS
X-FPC
Ohc-Response-Time
X-Generated-By
X-Pjax-Url
X-CF-Powered-By
FSS-Cache
DCR-Processing-Time-Ms
X-Rocket-Nginx-Bypass
Resin-Trace
GeoIP-Country-Code
DCR-Decision-By
X-PF-Uncompressing
Request-EU
X-Azure-Ref-OriginShield
GeoIP-Latitude
Locid
Powered-By-ChinaCache
X-Fastly-Cache-Status
Request-Country
Pramga
Heartbleed
Location
Hostname
X-Varnish-Hits
X-Request-URI
X-Varnish-Ttl
X-Check-Cacheable
Cteonnt-Length
X-BE
X-Newrelic-App-Data
HitType
Lfy
Cdn-Host
X-Edge-Server
X-Fastly-Country-Code
Cdn-Request-Time
X-Gamma-Serve
X-Varnishpool
X-CSRF-TOKEN
X-VarnishDD-TTL
X-Sucuri-Cache
X-LB-ID
X-Shopify-Generated-Cart-Token
X-PJAX-URL
PFcat
X-Ratelimit-Reset
X-VHOST
GeoIp-Country-Code
X-OVcl
Geoip-Latitude
X-Fpc
X-OVcl-Cache
CF-Cached-On
WZWS-RAY
X-WebServer
X-Vgn-Hpd-Variations-Key
X-Vgn-Hpd-Cached
X-Vgn-Hpd-Ssi
X-Fastly-Backend-Reqs
X-Instart-Isnd
X-HS-Status
Amp-Access-Control-Allow-Source-Origin
SRV
X-Pf-Uncompressing
Mime-Version
X-Ratelimit-Remaining
X-Vcl-Version
Product
X-Proxy-Upstream
X-Platform
X-Sn-Servicetimems
X-CACHE-AGE
X-Cdn-Origin
X-Render-Time
X-Fetched-On
SN
X-Cache-Expired-At
My-App
X-Ftr-Cache-Host
X-CLOUD-TRACE-CONTEXT
X-Oracle-Dms-Rid
X-Original-Request-Id
XServer
Ohc-Cache-HIT
X-ECache
X-Amzn-Remapped-Date
X-NGINX-Cache
X-CUA
X-GeoIP-Country-Code
X-Amzn-Remapped-Connection
WWW-Authenticate
X-CACHE-KEY
X-Varnish-Url
X-ServedByHost
Pics-Label
Epwk-X-Cache
Dt-Cache-Category
X-Oss-Cdn-Auth
X-Ratelimit-Limit
URI
X-StackifyID
X-Tec-Api-Origin
X-Tec-Api-Root
X-Tec-Api-Version
X-Request-Start
X-B3-SpanId
X-Cache-Tag
Lb
A
CloudFront-Viewer-Country
X-Client-Ip
X-Swift-Error
X-Debug-Cache-Store
X-Debug-Cache-Fetch
Cdn
X-RunCloud-Cache
Backend-Name
X-B3-Spanid
Group
X-Served-From
X-WR-MODIFICATION
Cloudfront-Viewer-Country
X-LiteSpeed-Cache-Control
X-Csrf-Jwt
X-Debug-Do-Not-Cache-Uri
X-Apw-Access-Action
Backend
X-Apw-Access-Token
X-Apw-Access-Object
Cf-Alt-Svc
PICS-Label
X-Apw-Hits
SID
X-Debug-Cache-Bypass
X-Debug-Cache-Status
X-Debug-Cache-String
X-Tb-Optimization-Total-Bytes-Saved
X-Debug-Ysi-Auth
X-Nananana
X-Debug-Xas-Auth
Server-Ttl
X-Cache-Version
X-Acquia-Application-Trace
Proxy-Firewall
Origin
X-WA
X-Acquia-Application-UUID
X-Request-Time
X-Via-Popv
X-Cache-Hfrom
X-Acquia-Purge-Tags
X-Varnish-Beresp-TTL
Cneonction
X-Via-Ucdn
X-Cache-Hm
X-Via-Poph
X-Acquia-Site
X-APP
X-Sigma
X-Rocket-Build-Number
X-Sigma-Backend
CF-IPCountry
Inserted-Into-Cache-At
X-Snapshot-Date
Warning
CountryCode
X-B3-Parentspanid
X-SB
X-VC
X-ElasticPress-Search
X-Dw-Trace-Id
X-Request-URL
X-Varnish-ID
Req-ID
X-Html-Edge-Cache
Country-Code
X-IN-APIGATEWAY
X-IN-APIGATEWAYSSL
X-Via-NSCOPI
NnCoection