Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Link
Cf-Request-Id
CF-Cache-Status
Accept-Ranges
CF-RAY
ETag
X-XSS-Protection
Expect-CT
Pragma
X-Powered-By
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-UA-Compatible
X-Cache-Hits
Alt-Svc
P3P
X-Served-By
X-Xss-Protection
X-Download-Options
X-Timer
Access-Control-Allow-Headers
X-Request-Id
X-Varnish
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
X-Adblock-Key
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-DNS-Prefetch-Control
X-Check
X-Cache-Status
X-Generator
X-Cacheable
Timing-Allow-Origin
X-Request-ID
X-Content-Security-Policy
P3p
X-Iinfo
Status
Feature-Policy
X-Envoy-Upstream-Service-Time
Content-Encoding
Access-Control-Expose-Headers
X-CDN
X-Drupal-Dynamic-Cache
Upgrade
X-AspNetMvc-Version
X-Via
CF-Ray
Access-Control-Max-Age
X-Ws-Request-Id
Server-Timing
EagleId
Keep-Alive
X-Cache-Group
X-Turbo-Charged-By
Request-Context
X-Age
X-Server-Powered-By
X-Proxy-Cache
X-AH-Environment
X-UA-Device
X-Backend
X-Hacker
X-Robots-Tag
Report-To
X-Amz-Request-Id
Host-Header
X-Server
X-LiteSpeed-Cache
X-Amz-Id-2
Grace
X-Rq
X-Nginx-Cache-Status
X-Varnish-Cache
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-WebKit-CSP
X-Dns-Prefetch-Control
X-Page-Speed
X-Vhost
X-OneAgent-JS-Injection
EagleEye-TraceId
X-Amz-Version-Id
X-Pingback
X-Device
X-Dispatcher
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Cache-Spec
NEL
X-Server-Id
X-Host
X-Backend-Server
Cf-Railgun
X-Node
Accept-CH
X-Readtime
X-Akam-SW-Version
Surrogate-Control
Request-Id
X-Response-Time
X-HW
X-Language
Xkey
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Application-Context
Content-Location
X-Template
X-Ruxit-JS-Agent
Rating
X-B3-TraceId
X-Ua-Compatible
Accept-Ch-Lifetime
X-Country
Accept-CH-Lifetime
X-Cloud-Trace-Context
X-Cache-Lookup
X-Url
X-Ac
X-Content-Type
Allow
X-Trace
X-Buckets
X-Vname
X-TtlSet
X-PC
X-Mod-Pagespeed
X-Varnish-TTL
X-Clacks-Overhead
Edge-Control
X-FastCGI-Cache
X-ESI
Cache-Tag
Fastly-Restarts
X-Server-Name
X-Rack-Cache
Service-Worker-Allowed
X-VARITI-CCR
X-Element-Page-Cache
Verso
X-MS-InvokeApp
X-GitHub-Request-Id
X-Upstream
X-Amz-Rid
MS-Author-Via
Public-Key-Pins
X-Vcap-Request-Id
X-Dw-Request-Base-Id
X-Cached
X-Client-IP
X-D2id
X-Abt-Application-Version
X-Origin-Cache
X-Cache-TTL
Arr-Disable-Session-Affinity
X-ORACLE-DMS-RID
X-ORACLE-DMS-ECID
X-Cnection
X-Aspnetmvc-Version
X-Px
X-Country-Code
Access-Control-Request-Method
X-Goog-Hash
X-Powered-By-Plesk
X-Aws-Lambda-Call-Status
X-NF-Request-ID
X-Navigation-Version
X-Server-Lifecycle-Phase
X-Instrumentation
X-Kraken-Loop-Name
X-Version
RTSS
Accept-Ch
X-Powered-CMS
X-Amz-Server-Side-Encryption
X-Middleton-Display
Display
Pagespeed
X-Sol
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Use-Magma
X-Exp-Id
X-Cdn-Fetch
X-Exp-Variant
X-Kinja-Server
X-GoogleNews-Bot
X-Kinja-Revision
X-Kinja
X-Kinja-Build
Response
X-Middleton-Response
X-MSEdge-Ref
X-LLID
X-Edge
X-Edge-Location-Klb
X-Kinsta-Cache
Nginx-Cache
AR-ATIME
AR-PoweredBy
AR-SID
AR-CACHE
AR-Request-ID
Mrf-Cache-Status
X-B3-TraceId-Primal
MRF-Tech
X-Shield-Request-Id
X-TTL
X-RateLimit-Remaining
S
X-Jurisdiction
X-CST
X-HP-Webp
X-HP-Trace-Id
Content-MD5
X-Protected-By
X-T
X-Forwarded-For
TCN
X-Content-Security-Policy-Report-Only
X-Mg-S
X-Id
Fastcgi-Cache
X-Mid
Realpath
X-MCACHE
Edge-Cache-Tag
SPIisLatency
SPRequestDuration
Front-End-Https
X-Parallel-Accel
X-Recruiting
X-Request-Received
X-Request-Processing-Time
Filters
Fusion-Content-Id
Fusion-Content-Source
Server-Node
Pinterest-Generated-By
Fusion-Template-Id
Pinterest-Version
Fusion-Source
X-Pinterest-Rid
Fusion-Deployment-Id
Fusion-Component-Id
X-Ttl
X-Content
X-Ab
X-DynaTrace
X-Ua-Browser
SPRequestGuid
X-SharePointHealthScore
X-Correlation-Id
X-Ezoic-Cdn
Server-Name
X-Ruxit-Js-Agent
Alternate-Protocol
X-NWS-LOG-UUID
X-HS-Hub-Id
X-HS-Combine-CSS
X-Frontend
X-HS-Cache-Config
X-HS-Content-Id
X-ECACHE
X-Hits
X-Yandex-Sdch-Disable
X-Accel-Expires
X-Cache-Key
X-Content-Options
MicrosoftSharePointTeamServices
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-Page-Id
Cache-Tags
Host
X-Git-Hash
X-Fastly-Request-Id
Charset
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
Cleartype
X-Www-Served-By
X-B3-Sampled
X-Ser
X-Content-Digest
X-Amz-Replication-Status
Filterid
X-Geo-Country
TP-L2-Cache
TP-Cache
X-Forwarded-Proto
X-Amzn-Trace-Id
X-Daa-Tunnel
X-VCache
X-Varnish-Age
X-Hostname
X-Activity-Id
X-AppVersion
X-Az
X-DIS-Request-ID
X-Debug-Info
X-Rid
X-XRDS-LOCATION
X-Origin-Server
X-N
X-Upgrade-Enabled
Access-Control-Allow-Method
X-Grace
X-Origin-Upstream-Status
X-LB-Cache
X-FB-Debug
X-Nginx-Upstream-Cache-Status
X-WebKit-CSP-Report-Only
ServerID
X-Request-Handler-Origin-Region
X-Microsite
X-Mobile-URL
X-Aspnet-Duration-Ms
X-Is-Crawler
X-Flags
X-Providence-Cookie
X-Route-Name
X-Request-Guid
X-F-Cache
Cross-Origin-Opener-Policy
X-Whom
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-Goog-Metageneration
X-Goog-Generation
X-NGENIX-Cache
X-GUploader-UploadID
X-TT
X-App-Environment
X-Varnish-Grace
X-Tb
Viewport
X-App-Server
X-FW-Dynamic
X-Distributor
X-FW-Serve
X-FW-Server
X-FW-Type
X-FW-Static
X-FW-Hash
Payment
Paypal-Debug-Id
DC
Node
X-Server-ID
X-Cache-Control
X-Logged-In
X-Seen-By
Fastcgi-Useragent
X-Type
X-Ratelimit-Limit
X-User-Agent
X-Cache-Age
Accept-Charset
Country
X-PressLabs-Stats
X-Litespeed-Cache
X-Cache-Rule
X-Varnish-Backend
X-Wix-Request-Id
X-Browser-Type
X-Erf-Bev-Bev
X-DataDome
X-Webkit-CSP
X-Erf-Bev-Bev-Is-Generated
X-Load-Cache
Version
X-Node-Name
X-Cache-Action
X-Tec-Api-Origin
X-Via-JSL
X-Tec-Api-Root
X-Tec-Api-Version
X-IPLB-Instance
Refresh
Referer-Policy
X-Drupal-Cache-Tags
Access-Control-Request-Headers
SD-X-WS
X-Response-Served-From
Amp-Access-Control-Allow-Source-Origin
Cache-Status
X-Original-Request-Id
X-Rendered-As
X-Vgn-Hpd-Reason
X-Real-IP
X-Jobs
X-Is-Bot
X-Cacheable-TTL
X-Page-View
X-Proxy-Cache-Status
VIX-Pulpo-Node
X-Signature
X-Cache-Expired-At
NGB
X-B-Cache
X-Cluster-Name
X-UUID
VIX-Pulpo-Upstream-Status
X-ProcessESI
X-Revision
X-Mobile
X-RemovedCookies
X-B
X-Contextid
X-Yottaa-Metrics
X-Proxy
X-Rule
X-Device-Type
X-Debug
X-Yottaa-Optimizations
Akamai-GRN
DynaTrace
X-Cache-Time
Surrogate-Key
X-Framework
X-Instance
X-Fastly-Request-ID
X-Drupal-Cache-Contexts
X-G
Liferay-Portal
X-Debug-IsPreview
X-Debug-IsConnected
X-FW-Version
CF-IPCountry
X-Fastcgi-Cache
X-Air-Hostname
X-Air-Source
Healthy
X-Air-Trace-Id
X-Azure-Ref
SID
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-Source
X-XRDS-Location
X-Oracle-Dms-Ecid
X-Ms-Version
X-Oracle-Dms-Rid
X-Ms-Request-Id
Frame-Options
Ms-Operation-Id
MS-CV
X-RTag
X-Cache-Hit
X-APP-VERSION
X-Oneagent-Js-Injection
X-CDN-Forward
X-Nginx-Cache
X-Environment-Context
X-L-Path
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-Pixel-1
Countrycode
X-Varnish-Server
Xserver
Count-Hit
Section-Io-Cache
GEO-INFO
X-Cache-Operation
Uber-Trace-Id
X-Region
X-Servername
X-EdgeConnect-Cache-Status
X-Forwarded-Host
X-Content-Powered-By
X-Backend-Name
X-Accel-Buffering
X-Ratelimit-Reset
Cross-Origin-Window-Policy
X-IPS-LoggedIn
X-Zen-Fury
Ec-Rule-Version
Backend
X-Mode
X-JoinUs
X-Adobe-Content
X-SaId
X-RN-RSRV
X-Detected-As
X-Adobe-Loc
X-UPSTREAM-Address
Meta-Geo
X-Varnish-Beresp-Grace
X-Sql-Duration-Ms
Country-Code
X-Cache-Grace
X-Sorting-Hat-ShopId
X-Generation-Time
X-Sorting-Hat-PodId
Eomportal-Instance
X-Redis-Cache
X-Shopify-Stage
X-Human
X-Alternate-Cache-Key
X-ShardId
X-Cache-Type
X-ShopId
X-Sql-Count
X-Uri
X-Hosted-By
X-Cache-Server
X-Tid
Cache-Tv-Group
Decoy-Debug-Key
X-Site-Version
X-Origin-Date
X-Status
X-Debug-Cache
X-Via-Fastly
X-PHP-Backend
X-No-Session
X-FB-TRIP-ID
X-ProxyCache-Status
X-NCache
X-UA-Device-Type
X-Cache-TTL-Remaining
X-BYPASS-REASON
X-Microcachable
Url
X-ProxyCache-Key
Apigw-Requestid
Mn-Server-Ip
Decoy-Debug-Status
X-ServerID
Decoy-Debug-TTL
Cache-Name
X-PCL
X-Proxy-Build
X-OCL
Webcakes-App-Name
TWC-Privacy
TWC-Locale-Group
Webcakes-App-Version
Webcakes-Region
X-Cache-Host
X-Akamai-Edgescape
TWC-GeoIP-LatLong
TWC-GeoIP-Country
Property-Id
Fastly-SSL
Protected
Selected-Fe
TWC-Device-Class
TWC-Connection-Speed
X-Origin-Hint
X-Timing-Wait
X-Say-Cacheable
X-Format
X-Cache-NGX
DB-Nickname
X-Web-Node
X-Say-TTL
X-Presslabs-Stats
X-Storage
X-SayCDN-TTL
Azure-Version
X-Section
X-Server-W
X-Rewrite-Enabled
X-Hl-Ver
X-ApacheServer
X-Access
X-NYM-Debug-Backend
Azure-SlotName
OT-Force-Account-Verify
X-Pubstack
X-R9-Blue-Green-Version
X-Varnishpool
Azure-SiteName
X-PERF
Azure-InstanceId
Azure-RegionName
Content-Secure-Policy
X-RateLimit-Limit
X-Azure-Ref-OriginShield
X-LSADC-Cache
X-Routing-Service
X-Be
X-Zipkin-Id
X-Cluster-Node
X-Proxied
X-Soup
X-Extlb
Source
X-Ua
X-NewRelic-App-Data
X-Content-Age
Content-Disposition
X-Webkit-Csp
X-HTML-Minification-Powered-By
CDN-RequestId
X-Dc
CDN-RequestCountryCode
CDN-Uid
CDN-EdgeStorageId
X-Cached-By
X-SRV
CDN-CachedAt
CDN-Cache
CDN-PullZone
X-Time
X-Generated-By
X-Amz-Meta-S3cmd-Attrs
Cache
X-LAGOON
X-Hyper-Cache
X-Cache-Var
X-Cache-Var-Map
SRV
X-Unique-Id
X-Loop
X-Bc-Bl
X-App-Version
X-TNCMS
X-Varnish-Hits
X-Varnish-Hostname
X-Trace-Id
Onion-Location
X-Nginx-Cache-Key
X-S-Maxage
Retry-After
X-Auto-Login
X-Origin-CC
X-Origin-TTL
X-GEO
X-TT-LOGID
Cache-Hits
X-Tumblr-Pixel-2
X-Tumblr-Pixel-3
Web-Mar-Node
Xet-Cookie
LB
X-ECache
X-Proto
Webserver
X-Time-Microsecs
X-Tenant
X-Cdn
X-Endurance-Cache-Level
Mime-Version
X-Akamai-Transformed
X-Platform-Server
X-Edge-Location
X-M-Reqid
X-M-Log
X-VWS-Id
X-Qnm-Cache
X-LJ-Flow-ID
X-GG-Cache-Date
X-AWS-Id
X-CSRF-Token
CloudFront-Viewer-Country
X-TIME
WPO-Cache-Status
WPO-Cache-Message
X-CACHE-KEY
X-Mg-Request-UUID
X-Xfnlog-Site
HostName
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Labrador-Cache-Channel
X-Cache-Tags
X-PHP-Host
X-Cache-Remote
X-Varnish-Cache-Hits
X-B3-SpanId
Upgrade-Insecure-Requests
X-RCS-CacheZone
ServedBy
N-Cache
X-Request-Time
X-Handled-By
X-Origin-Response-Time
X-AOL-HN
X-Locale
X-Storefront-Renderer-Rendered
X-Via-NSCOPI
X-A-Dam
A
X-A-Dcw
X-A-Wwc
X-B-Cookie
X-Block-Status
X-ARC
X-Application
X-Aed
X-A-Dgt
X-A-Ccd
Pramga
Redirect-Candidate
X-Cache-Date
Origin
Odigeo-Trace-Id
Fastcgi-X-Cache-Version
Mobile-Detection-Method
Expiry
Rendered-Blocks
X-A
DCR-Decision-By
BehaviorPad-Version
DCR-Processing-Time-Ms
User-Cache-Control
Surrogated-Key
DSUID
Meta-Geo-Continent
X-Hnp-Log
X-SD-PageType
X-Session-Fingerprint
X-Shop-Environment
X-Slack-Backend
X-ScT
X-S-Cookie
X-Request-Host
X-Rojux
X-S
X-SRCache-Key
X-SVT-ORM-RULES
X-VG-WebCache
X-Vtex-Processado-Em
X-Vtex-Remote-Cache
Xc-Version
X-Vdms-Version
X-Vdms-Path
X-SVT-ORM-VERSION
X-TIM-N
X-V-Cache
X-Processor
X-Planisys-CDN-TTL
X-D
X-Destination
X-Developer
X-External-Request-Id
X-Connection-Hash
X-Cluster
X-CF-Lambda-Fn
X-CF-Lambda-Version
X-Ckpd-Fst-Backend
X-Forwarded-Path
X-Ftr-Request-Id
X-PAYTM-SRV-ID
X-PBS-Appsvrname
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
X-Orig-Expires
X-ND-Cache
X-Gen-Mode
X-Ig-Push-State
X-NAPM-TraceId
X-Cache-NE
X-Conf
X-Correlation-ID
Nel
X-VC-Cache
X-ATG-Version
X-MP-GENERATED-AT
Server-Info
X-Reqid
X-Adobe-Source
X-Origin-Time
Origin-EX
X-Old-Content-Length
State
X-Location
X-Men
X-Mvc-Supplant-Cachable
Release
X-Nyt-Route
X-Origin-Expires
Origin-CC
X-Rocket-Nginx-Serving-Static
Fastcgi-Cache-TTL
X-Scheme
X-Served-From
Gh-Request-Id
Host-ID
X-Policy
X-Proxy-Upstream
L
Traceparent
V-Age
X-Fastly-Cache
X-Cache-Bucket
X-Fetched-On
X-Forwarded-Site
X-Cache-Info
X-Epic-Correlation-Id
X-Core-Mission
X-Date
X-Device-Os
X-Gdpr
X-Geo-Header
Vix-Hermes-Req-Id
X-Server-IP
X-Li-Fabric
X-Li-Pop
Wxu-Next-Commit
Wxu-Next-Hostname
X-Accel-Expires-Debug
X-Hash
Wxu-Next-Region
X-LI-UUID
X-Owner
X-VServer
Cmsid
Cmstype
Arc-Country
X-Varnish-Beresp-Status
X-Sucuri-ID
X-Skip-Cache
AKAMAI
CDCHOST
CacheControlHeader
X-Sucuri-Cache
Environment
From-Origin
Datacenter
AMP-Access-Control-Allow-Source-Origin
X-HS-Content-Campaign-Id
Thinkindot-CacheControl
TDXMobile
X-HN
X-Magnolia-Registration
Thinkindot-CacheControl-Type
Svr
Thinkindot-Control
X-Sigma
X-TrackingId
X-Level-Front-Cache
We-Hiring
X-Irp-Debug
Web-Mar-Region
X-Gzip
X-GeoIP
X-Esi-Check
X-Cdn-Origin
X-Fastly-Backend
X-Cache-Id
X-Cache-Debug
X-Webstats-RespID
X-Developers
X-Core-Value
X-Datadog-Parent-Id
X-Datadog-Sampling-Priority
X-Datadog-Trace-Id
X-Cache-Config
X-Branch-Name
X-VG-TLSProxy
Apple-News-Services-Handled
X-GeoIP-City
X-Aicache-OS
X-Generated-On
X-Viewer-Country
X-Bip
X-BBC-Edge-Cache-Status
X-Gamma-Serve
X-Ratelimit-Remaining
X-VarnishDD-TTL
True-Client-Country-4JS
X-Request-Start
X-Platform
X-TH-Server
X-Thanos
X-Req
X-Region-Sid
Locid
Machine
Mail-Subject
Apple-News-Services-Host
X-Thinkindot-L3
PFcat
Apple-News-Services-Request-Url
Req-Svc-Chain
X-Rocket-Build-Number
Server-Host
X-NodeID
X-Sigma-Backend
X-Sn-Servicetimems
Fastly-GeoIP-CountryCode
Apple-News-Services-Parsed-Url
X-EC-Lua
X-FireWall-Port
Cf-Device-Type
X-Node-Id
X-Cdn-Srv
Is-Eu
X-Worker
X-FC-Vary-Parameters
X-Eu-Site
Fastly-SIE
Fastly-SWR
X-CGP
X-DefHash
X-DefElseHash
X-Request-URI
X-DPWN-IS-SECURE
HA-Ipaddr
Sslversion
Ha-Gx-Prefs
X-Envoy-Decorator-Operation
Fastly-Drupal-Html
Memcached
Platform
X-Is-Gdpr
X-Csrf-Jwt
X-Varnish-CookieHashed-On
X-Pod-Name
X-JWT-State
X-Variation
X-NU-AKA-ACS-Version
X-Loc
Adler-Geo
X-Origin
L5d-Success-Class
X-Varnish-CookieINHashed-On
X-Amzn-Remapped-Content-Length
X-RateLimit-Remaining-Second
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Backend-State
X-RateLimit-Limit-Second
NGX
X-Varnish-Remaining-TTL
X-Qloud-Router
Candidate-Md5Url
NM-Fastcgi-Cache
X-Has-Esi
X-Xrds-Location
X-Tx-Id
Ssr
X-Response-By
X-UnsetCookies
X-Mvc-Supplant-OutputCached
WP-Super-Cache
X-Ua-Device
X-Varnish-Beresp-Ttl
X-Up
On-Server
X-CS
X-NC
X-CLOUD-TRACE-CONTEXT
CDN
X-API-Version
WWW-Authenticate
X-Zone
X-Vc
Esi-Enabled
X-LB-ID
X-Generated-In
Pics-Label
Memory
X-Trace-ID
NtCoent-Length
X-Refresh
Ms-Author-Via
X-Cache-Enabled
Time
X-Backend-TTL
X-Tt-Logid
X-Datadome
X-NWS-UUID-VERIFY
X-Service
X-LB-NoCache
X-GeoIP-Region-Code
X-GeoIP-Country-Code
C-Via
X-TraceId
X-Edge-Pop
X-TA-CDN-Provider
X-DynaTrace-JS-Agent
X-Via-Poph
X-Via-Popv
X-Cache-PHP
GeoIp-Country-Code
Env
X-Tb-Optimization-Total-Bytes-Saved
X-Via-Popn
Magicmarker
X-Parent-Response-Time
X-Dynatrace
X-Varnish-Ttl
X-ZONE
X-Optimistic-Header
WebServer
X-Render-Time
X-Restarts
X-DC
X-Cache-Status-Check
Kp-EeAlive
X-CacheTTL
S-Rt
X-Varnish-Beresp-TTL
X-Servedbyhost
X-Cs
X-Esi
X-Srv
X-Info
X-RSL
X-RPS
Edge-Cache
X-Cache-Backend
X-Wix-Viewer-Type
X-MSEdge-Flight
X-RPM
X-DW
X-Action
Server-ID
X-DB
X-DI
X-DSS
X-Unique-ID
X-MSEdge-Features
X-TX-ID
Proxy-Connection
X-AIR-PT
X-VCL-Version
X-Clientip
X-Minions-Version
X-Http-Reason
X-Akamai-Request-ID2
X-Fpc
X-Oss-Object-Type
X-LI-Proto
X-Cache-Ttl
X-Oss-Request-Id
X-Oss-Hash-Crc64ecma
X-Oss-Storage-Class
Cache-Host
X-Newrelic-Synthetics
UCS
X-Li-Proto
HIT
X-App
X-Oss-Server-Time
X-URL
X-Webkit-Csp-Report-Only
Test
X-HA-Backend
X-FPC
Accept-Language
S-Cnection
Section-Io-Id
Section-Origin-Responded
X-Traceid
Section-Io-Origin-Status
Section-Io-Origin-Time-Seconds
X-B3-Spanid
X-Vcl-Version
Lb
Server-Id
X-Webkit-CSP-Report-Only
X-LiteSpeed-Cache-Control
X-NODE
Tcn
X-Micro-Cache
Geo-Info
User-Agent
Fastly-Backend-Name
X-Ec-GeoHdr
X-User
X-Ec-Fail
X-Urbn-Site-Id
Locale
X-Urbn-Context-Path
X-Pass-Why
X-Backend-Host
X-Pad
X-CSRF-TOKEN
Fastly-Drupal-HTML
Resin-Trace
Hostname
X-APP
X-Ha-Backend
X-LiteSpeed-Tag
X-Release
Cf-Int-Pingora-Origin-Digest
X-HostName
X-BCube-Filmed-By
X-Check-Cacheable
X-BBC-Origin-Response-Status
X-ServedByHost
M-TraceId
X-AK-Request-ID
Cdnsip
Cdncip
X-ID
X-ES-SERVER
X-Dynatrace-Js-Agent
X-COUNTRY
My-App
Geoip-Latitude
X-WADP-Cache
X-Fmm-Version
X-Amz-Meta-Cb-Modifiedtime
Cluster
EpKe-Alive
GeoIP-Country-Code
Hit
Ohc-File-Size
Path
X-Via-PopH
X-Via-PopV
X-Via-PopN
X-Clara-WADP
X-NGINX-Cache
CPC-Age
CPC-Cache
X-WA-Info
X-WA
Cache-Key
VNS-Cache
Srv
VNS-Age
X-Geo
Tracecode
X-Edge-POP
ENV
X-Cdn-Forward
X-ElasticPress-Query
X-Var-Ttl
X-CUA
MIME-Version
X-Cms-Context
X-Edge-Cache
X-PJAX-URL
Shield-Pop
Pagetype
T-Server
X-Api-Version
X-From
Load-Balancing
X-Wikidot-Static-Cache
Lfy
X-HS-Status
X-Wikidot-Backend
X-Akamai-Pragma-Client-IP
X-CCDN-Origin-Time
X-Ucs
X-Hcs-Proxy-Type
MD5-Digest
Lang
X-Via-Ucdn
URI
X-RAMCache
X-ServerName
X-CCDN-CacheTTL
X-Fragments
Servername
X-WP-CF-Super-Cache-Cache-Control
Server-Ext
X-Lb-Id
X-UP
Target-Params
X-GoCache-CacheStatus
X-Fastly-Backend-Reqs
X-WP-CF-Super-Cache
IsBot
X-Mcache
X-SIPLIST1
X-Fastly-Cache-Hits
X-VG-WebServer
Server-Hostname
Sever-Int
X-TRACE-ID
X-Dw-Trace-Id
WZWS-RAY
Uri
PICS-Label
X-Cache-Expires
X-RateLimit-Reset
X-B3-ParentSpanId
W
Cneonction
Ohc-Cache-HIT
X-Cdn-Request-ID
Cdn
X-VC
X-Nc
X-Provided-By
Dnion-Transfer-Encoding
X-Acquia-Application-Trace
X-Swift-Error
X-Platform-Cluster
X-Platform-Router
X-Newrelic-App-Data
X-Yottaa-OS
X-Akamai-Request-ID
HitType
X-Platform-Processor
X-Apw-Access-Action
X-Apw-Access-Object
Cteonnt-Length
X-Snapshot-Date
X-Acquia-Purge-Tags
Vha6-Origin
X-Acquia-Site
Cf-Ipcountry
X-Contensis-Viewer-Groups
X-Acquia-Application-UUID
CF-Cached-On
X-Apw-Hits
X-Apw-Access-Token
X-Cache-ASPX
Sid
DataCenter
X-Cache-Ngx
X-Air-Pt
X-Http-Duration-Ms
Server-Ttl
X-Akamai-ERRuleID
X-Last-Modified
X-Akamai-ERPolicy
X-Http-Count
X-Te-Duration-Ms
X-Te-Count
Ngx
X-Lb-Nocache
X-UA
CountryCode
X-Varnish-Authentication
Req-ID
X-Miniprofiler-Ids
X-Sentry-ID
X-Via-CDN
X-Cc-Via
X-CacheKey
X-B3-Parentspanid
X-Logging-Id