Threat Level: green Handler on Duty: Richard Porter

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
CF-RAY
ETag
X-XSS-Protection
Accept-Ranges
Expect-CT
Pragma
X-Powered-By
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Alt-Svc
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
X-UA-Compatible
X-Served-By
P3P
X-Xss-Protection
X-Download-Options
X-Request-Id
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
X-Permitted-Cross-Domain-Policies
X-FRAME-OPTIONS
Access-Control-Allow-Credentials
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
P3p
X-DNS-Prefetch-Control
Accept-CH
X-Cache-Status
X-Drupal-Cache
Accept-CH-Lifetime
X-Check
X-Generator
X-Ua-Compatible
X-Cacheable
Server-Timing
X-Envoy-Upstream-Service-Time
X-Request-ID
Timing-Allow-Origin
X-Iinfo
X-Drupal-Dynamic-Cache
Access-Control-Expose-Headers
X-Content-Security-Policy
Feature-Policy
Content-Encoding
X-CDN
Status
Upgrade
X-AspNetMvc-Version
Access-Control-Max-Age
X-Via
X-Amz-Request-Id
X-Amz-Id-2
Host-Header
CF-Ray
Allow
X-Backend
Cf-Edge-Cache
Request-Context
X-Robots-Tag
Keep-Alive
X-Cache-Group
X-Server
X-UA-Device
X-Hacker
X-AH-Environment
X-Turbo-Charged-By
X-Ws-Request-Id
X-Proxy-Cache
X-Age
Xkey
X-Rq
X-Vhost
EagleId
X-Dispatcher
X-Server-Powered-By
X-Amz-Version-Id
X-Varnish-Cache
Grace
Cf-Apo-Via
X-Dns-Prefetch-Control
X-LiteSpeed-Cache
X-Page-Speed
X-Pingback
Cf-Railgun
X-Swift-CacheTime
X-Swift-SaveTime
X-Device
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
EagleEye-TraceId
Ali-Swift-Global-Savetime
X-Aws-Lambda-Call-Status
X-WebKit-CSP
X-CST
X-OneAgent-JS-Injection
X-Backend-Server
Permissions-Policy
X-Server-Id
X-Readtime
X-Response-Time
X-Akam-SW-Version
X-Host
Request-Id
Surrogate-Control
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-HW
X-Nginx-Upstream-Cache-Status
X-Cloud-Trace-Context
X-Node
X-Nginx-Cache-Status
Accept-Ch-Lifetime
X-Litespeed-Cache
X-Application-Context
X-Cache-Lookup
X-Country-Code
X-Trace
Content-Location
X-Oneagent-Js-Injection
X-Url
Service-Worker-Allowed
X-Ruxit-JS-Agent
X-Content-Type
X-Clacks-Overhead
X-Country
X-Edge
X-ECACHE
X-Origin-Cache-Key
X-Mcache
X-Rack-Cache
X-Amz-Server-Side-Encryption
X-Mod-Pagespeed
Cross-Origin-Opener-Policy
X-Midtier
Cache-Tag
X-FTR-Request-ID
Accept-Ch
Nginx-Cache
X-MS-InvokeApp
X-Upstream
X-PC
X-TtlSet
X-Vname
X-ESI
X-Powered-By-Plesk
Rating
Edge-Control
X-Ruxit-Js-Agent
X-Browser-Type
X-Server-Name
X-D2id
X-Element-Page-Cache
X-Kinja
X-Kinja-Revision
X-Kinja-Server
X-Exp-Variant
X-GoogleNews-Bot
X-Exp-Id
X-Kinja-Build
X-Cdn-Fetch
Verso
X-Times
X-Cnection
X-Ac
SPIisLatency
SPRequestDuration
AR-ATIME
AR-PoweredBy
AR-SID
AR-Request-ID
X-Abt-Application-Version
X-Navigation-Version
X-Vcap-Request-Id
X-B3-TraceId
SPRequestGuid
X-SharePointHealthScore
X-NF-Request-ID
X-Dw-Request-Base-Id
X-GitHub-Request-Id
X-Ser
X-RateLimit-Remaining
AR-CACHE
X-VARITI-CCR
Pinterest-Version
Pinterest-Generated-By
X-Pinterest-Rid
X-Mg-S
X-NWS-LOG-UUID
S
X-Cache-Key
X-Sol
Pagespeed
X-Middleton-Display
Display
RTSS
Edge-Cache-Tag
Fastly-Restarts
X-Amzn-Trace-Id
X-Amz-Rid
X-Client-IP
X-Ttl
X-Cache-TTL
X-Powered-CMS
X-Goog-Hash
X-Erf-Bev-Bev
X-Instrumentation
X-Erf-Bev-Bev-Is-Generated
X-Server-Lifecycle-Phase
X-Kraken-Loop-Name
Origin-Trial
X-Kinsta-Cache
X-Edge-Location-Klb
X-Varnish-TTL
Cache-Status
X-Version
Access-Control-Request-Method
X-Content-Security-Policy-Report-Only
X-Server-ID
X-Recruiting
X-ARC
X-TraceId
X-Content-Digest
X-Erf-Stays-Pdp-Viaduct-Migration-Web-V2
Arr-Disable-Session-Affinity
X-Webkit-Csp
Response
X-Middleton-Response
X-T
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-MSEdge-Ref
X-Forwarded-For
Content-MD5
X-Ua-Device
X-Accel-Expires
MicrosoftSharePointTeamServices
TP-Cache
X-Shield-Request-Id
X-Hits
X-Cached
X-Id
Public-Key-Pins
X-RateLimit-Limit
X-FTR-Backend-Server
X-Country-Code-Real
X-FTR-Balancer
X-FTR-Backend
X-FTR-Cache-Status
X-FTR-Expires
MS-Author-Via
X-HS-Content-Id
X-HS-Hub-Id
X-HS-Cache-Config
X-Ua-Browser
X-HS-Combine-CSS
Cross-Origin-Resource-Policy
Server-Node
X-Request-Processing-Time
X-Request-Received
X-Daa-Tunnel
Payment
X-Frontend
Front-End-Https
X-DIS-Request-ID
X-FastCGI-Cache
X-Forwarded-Proto
X-LLID
X-HP-Webp
X-Jurisdiction
X-HP-Trace-Id
X-GUploader-UploadID
X-LB-Cache
TP-L2-Cache
Realpath
X-Protected-By
Cache-Tags
X-Fastcgi-Cache
X-Amzn-RequestId
X-Amz-Apigw-Id
X-Origin-Server
X-Distributor
X-ORACLE-DMS-RID
X-WebKit-CSP-Report-Only
X-Request-Handler-Origin-Region
X-Microsite
Count-Hit
X-Page-Id
X-TTL
X-Hostname
X-Activity-Id
X-B3-TraceId-Primal
X-Cluster-Name
X-F-Cache
Mrf-Cache-Status
X-Az
X-AppVersion
MRF-Tech
X-Varnish-Backend
X-Geo-Country
X-Debug-Info
X-Correlation-Id
Referer-Policy
Accept-Charset
X-Www-Served-By
X-Kong-Proxy-Latency
X-Kinja-CCPA
Fastcgi-Cache
X-NGENIX-Cache
X-Kong-Upstream-Latency
X-App-Server
X-PressLabs-Stats
Host
X-Varnish-Server
X-Envoy-Decorator-Operation
X-FB-Debug
X-Goog-Metageneration
X-Git-Hash
X-Oracle-Dms-Ecid
Access-Control-Allow-Method
X-RateLimit-Reset
X-Rid
Retry-After
X-ORACLE-DMS-ECID
X-Content-Options
Server-Name
X-Load-Cache
X-Upgrade-Enabled
X-Px
X-Tt-Trace-Tag
X-XRDS-LOCATION
X-Ratelimit-Limit
X-Tt-Trace-Host
X-Aspnet-Duration-Ms
DC
X-Is-Crawler
X-Revision
X-Request-Guid
X-Providence-Cookie
X-Route-Name
X-Flags
X-TEC-API-ORIGIN
X-App-Environment
X-TEC-API-VERSION
X-Contextid
Charset
X-TEC-API-ROOT
X-Grace
X-Seen-By
TCN
Paypal-Debug-Id
X-CSRF-Token
X-Type
X-Trace-Id
X-Ezoic-Cdn
X-Datadog-Parent-Id
X-B3-Sampled
X-Datadog-Trace-Id
Cleartype
X-Amz-Meta-S3cmd-Attrs
X-Cache-Control
X-Datadog-Sampling-Priority
X-B-Cache
X-Signature
Section-Io-Cache
X-Origin-Cache
X-Fastly-Request-Id
X-B
X-Fb-Rlafr
X-Mobile
X-TT
Healthy
X-Whom
X-Wix-Request-Id
Frame-Options
X-Oracle-Dms-Rid
X-ASPNET-VERSION
X-Amz-Replication-Status
X-Magnolia-Registration
X-Node-Name
X-Logged-In
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-EdgeConnect-Cache-Status
X-Fastly-Request-ID
Filterid
X-Language
X-Azure-Ref
X-Varnish-Ttl
X-Proxy
X-N
X-Air-Pt
Content-Disposition
X-Ratelimit-Remaining
X-App-Version
Backend
X-Newrelic-App-Data
Akamai-GRN
Upgrade-Insecure-Requests
X-Original-Request-Id
X-Proxy-Cache-Info
X-Response-Served-From
X-Template
NGB
Refresh
VIX-Pulpo-Node
X-Unique-Id
SD-X-WS
X-Tumblr-Pixel-1
X-Tumblr-User
VIX-Pulpo-Upstream-Status
X-Rendered-As
X-ProcessESI
X-Is-Bot
X-Tumblr-Pixel
X-RemovedCookies
X-Tumblr-Pixel-0
X-Page-View
X-Varnish-Grace
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Servername
X-RTag
Ms-Operation-Id
Viewport
X-Instance
X-Amzn-Remapped-Content-Length
MS-CV
X-WP-CF-Super-Cache-Cache-Control
X-WP-CF-Super-Cache
X-FW-Hash
X-FW-Serve
X-FW-Dynamic
X-Debug-IsConnected
X-FW-Server
X-Debug-IsPreview
X-FW-Type
X-UUID
Liferay-Portal
X-IPS-LoggedIn
X-FW-Version
X-Debug
X-FW-Static
X-Datadog-Sampled
Fastly-SIE
X-Cache-Grace
X-Adobe-Loc
X-Adobe-Content
X-User-Agent
X-Cacheable-TTL
Fastly-SWR
X-Region
X-G
X-NYM-Debug-Backend
X-Rule
From-Origin
Url
X-Jobs
X-Device-Type
X-L-Path
X-Cache-Hit
Country
X-Environment-Context
X-B3-SpanId
X-Backend-Name
X-Status
Amp-Access-Control-Allow-Source-Origin
X-Hl-Ver
X-B3-Traceid
ServerID
X-Time
Surrogate-Key
X-Hosted-By
X-Origin-CC
X-Hcs-Proxy-Type
X-Air-Source
X-Air-Trace-Id
X-Origin-TTL
X-Air-Hostname
X-CCDN-CacheTTL
X-CCDN-Origin-Time
X-VC-Cache
Alternate-Protocol
X-Webkit-CSP
X-Cache-Age
Countrycode
X-INCAP-ABP
X-Akamai-Request-ID2
X-Content-Powered-By
Version
X-Tec-Api-Origin
X-Cache-Status-Check
X-Tec-Api-Root
X-Via-JSL
X-Tec-Api-Version
X-HTML-Minification-Powered-By
Protected
WPO-Cache-Message
X-NODE
X-Http-Reason
SRV
X-XRDS-Location
WPO-Cache-Status
X-Rocket-Nginx-Serving-Static
X-Akamai-Edgescape
X-Nginx-Cache
CDN-RequestId
GEO-INFO
X-Framework
CF-IPCountry
X-CDN-Forward
X-Storage
X-Source
X-WP-CF-Super-Cache-Active
X-Accel-Version
X-Edge-Location
Access-Control-Request-Headers
X-Cache-Rule
Front
X-Mode
OT-Force-Account-Verify
X-Httpd
X-Real-IP
X-Endurance-Cache-Level
Accept-Language
X-Cache-Operation
X-Rewrite-Enabled
X-Xfnlog-Site
Webserver
Meta-Geo
X-Upstream-Ht
Filters
X-Upstream-Ct
X-UPSTREAM-Address
X-Rn-Rsrv
X-Tumblr-Pixel-2
X-SaId
X-Soup
X-JoinUs
X-Tumblr-Pixel-3
X-Director
X-Served-From
X-SayCDN-TTL
X-Varnish-Cache-Hits
X-Say-TTL
X-Use-Mantle
X-Redis-Cache
X-Detected-As
X-Worker
X-Use-Magma
X-Cache-Debug
X-Origin
X-Logging-Id
X-Say-Cacheable
X-RM-Cache-TTL
X-Origin-Hint
X-Loop
X-PHP-Host
X-Cms-Context
DB-Nickname
X-Lambda-Id
TWC-Locale-Group
TWC-GeoIP-Country
X-BYPASS-REASON
X-Adobe-Source
Azure-SlotName
TWC-Connection-Speed
TWC-Device-Class
X-ProxyCache-Status
X-Labrador-Cache-Channel
X-GeoCountry
ServedBy
X-Format
X-GeoCode
TWC-GeoIP-LatLong
X-Cache-Time
Azure-SiteName
TWC-Privacy
Azure-RegionName
X-Restarts
X-ProxyCache-Key
X-Handled-By
Web-Mar-Node
Azure-Version
Webcakes-Region
Webcakes-App-Version
Webcakes-App-Name
Property-Id
Azure-InstanceId
X-Varnish-Age
X-VC
X-Vcache
X-Tncms
X-Sql-Duration-Ms
X-Sql-Count
Xserver
X-Server-W
X-VCT
X-No-Session
X-Cache-Server
X-VWS-Id
X-Vercel-Cache
X-Vercel-Id
X-RCS-CacheZone
X-AWS-Id
Selected-Fe
X-Container-Uri
X-LJ-Flow-ID
Mn-Server-Ip
X-Proxy-Build
X-Tb
X-ServerID
X-Skip-Cache
Xet-Cookie
X-Git-Commit
X-IPLB-Request-ID
X-IPLB-Instance
Apigw-Requestid
X-DynaTrace
X-Generation-Time
X-Fetched-On
X-Timing-Wait
Section-Io-Id
X-Provided-By
X-Cache-Host
X-Frame-Option
X-Cluster
X-Web-Node
X-Varnish-Beresp-Grace
Node
X-Reqid
X-Ms-Request-Id
X-Zipkin-Id
X-Tcp-Rtt
X-Locale
X-Forwarded-Host
X-Site-Version
X-Ms-Version
X-Is-Tablet
X-Proxied
X-Is-Desktop
X-Is-Supported-Browser
X-Extlb
X-AB
X-Routing-Service
X-Browser-Name
X-Geo-Region
X-Is-Mobile
X-Platform-Processor
X-S
X-Uri
X-R9-Blue-Green-Version
X-Platform-Cluster
Cross-Origin-Embedder-Policy
X-Platform-Router
Cache-Tv-Group
X-Webstats-RespID
X-Drupal-Cache-Tags
Priority
X-FB-TRIP-ID
Fastcgi-Useragent
X-Drupal-Cache-Contexts
Source
Content-Secure-Policy
X-MP-GENERATED-AT
WP-Super-Cache
X-COUNTRY
X-Origin-Date
AMP-Access-Control-Allow-Source-Origin
CDN-RequestCountryCode
CDN-RequestPullCode
CDN-RequestPullSuccess
CDN-Uid
CDN-PullZone
CDN-CachedAt
CDN-EdgeStorageId
X-Vcl-Version
CDN-Cache
X-TT-LOGID
Onion-Location
X-Shopify-Stage
X-Generated-By
X-Storefront-Renderer-Rendered
X-Alternate-Cache-Key
X-Urbn-Site-Id
X-Sucuri-Cache
X-Urbn-Context-Path
Locale
X-Content-Age
X-Sorting-Hat-ShopId
X-ShardId
X-Sorting-Hat-PodId
X-ShopId
S-Rt
X-Sucuri-ID
X-Pass-Why
X-Cdn-Origin
WZWS-RAY
X-SRV
X-Xrds-Location
X-Newrelic-Synthetics
X-Cluster-Node
Cross-Origin-Embedder-Policy-Report-Only
Sid
X-Ua
X-DataDome
X-Varnish-Beresp-Ttl
X-Buckets
X-Proxy-Cache-Status
X-Cache-Action
TDXMobile
Thinkindot-CacheControl
X-Shield-Cache-Expires
X-Thinkindot-L3
Thinkindot-CacheControl-Type
X-Cache-Expired-At
X-Scope-Id
Cross-Origin-Window-Policy
Thinkindot-Control
X-CMSURLCustom
Cache
X-LSADC-Cache
Fastly-Drupal-HTML
X-GEO
Atl-Traceid
Edge-Copy-Time
X-Via-Edge
X-Via-SSL
X-Via-CDN
X-Request-URI
X-B-Cookie
X-Aed
X-A-Wwc
X-A-Dgt
X-Cache-Bucket
X-Bc-Bl
X-A-Dcw
X-Application
X-Bl-Debug
X-BCube-Filmed-By
Redirect-Candidate
MD5-Digest
Meta-Geo-Continent
Ngx-Var-Key
Ngx.Var.Host
Lang
Gannett-Cam-Experience-Id
CDCHOST
DCR-Decision-By
DCR-Processing-Time-Ms
Origin
Origin-Agent-Cluster
Type
X-A
X-A-Ccd
T-Server
Surrogated-Key
X-Cache-NE
Rendered-Blocks
Sslversion
X-A-Dam
X-Conf
X-Vdms-Path
X-TIM-N
X-Vdms-Version
X-Rojux
X-Viewer-Country
X-Optimistic-Header
X-SRCache-Key
X-Scheme
X-S-Cookie
X-ScT
Candidate-Md5Url
X-PAYTM-SRV-ID
X-External-Request-Id
X-WP-CF-Super-Cache-Cookies-Bypass
X-Ec-GeoHdr
X-Ec-Fail
X-Vtex-Remote-Cache
X-Ec-Custom-Error
X-Epic-Correlation-Id
X-Destination
X-Mg-Request-UUID
X-D
X-Developer
X-Aspnetmvc-Version
X-Section
X-Sigma
X-We-Are-Hiring
Pramga
X-SB
X-Sigma-Backend
X-SD-PageType
DSUID
L
Host-ID
X-VServer
Fastly-SSL
X-VG-WebCache
Environment
Fastly-GeoIP-CountryCode
X-TH-Server
X-Varnish-Director
X-Varnish-Hostname
Magicmarker
X-Request-Time
X-GeoIP-Country-Code
X-Generated-On
X-GeoIP-Region-Code
X-Human
X-Level-Front-Cache
X-Instance-Name
X-Access
X-Gdpr
X-Debug-Cache-Fetch
X-Cache-Info
X-Debug-Cache-Store
X-Dispatcher-Server
X-Fastly-Cache
X-Aicache-OS
X-Loc
X-Nyt-Route
Ssr
X-Pubstack
Sever-Int
X-Rocket-Build-Number
Server-Host
Server-Hostname
X-Proxied-Request
X-Pool
Vix-Hermes-Req-Id
X-Op-Id-All
V-Age
X-Origin-Time
X-Platform
Server-Ext
X-Clientip
Apple-News-Services-Parsed-Url
Apple-News-Services-Handled
X-Correlation-ID
X-VCache
Apple-News-Services-Request-Url
Apple-News-Services-Host
User-Cache-Control
HostName
X-Origin-Response-Time
X-TimeS
X-DC
X-TA-CDN-Provider
X-Datadome
X-Device-Os
Uber-Trace-Id
X-Esi-Check
X-Forwarded-Site
X-GeoIP
X-GeoIP-City
X-Geo-Header
X-Gen-Mode
X-Core-Value
X-FC-Vary-Parameters
X-Cache-Id
X-Auto-Login
X-B3-Trace-ID
X-ApacheServer
X-Acquia-Purge-Cdn-Unconfigured
Wxu-Next-Hostname
Wxu-Next-Region
X-BBC-Edge-Cache-Status
X-Bip
X-Cache-Date
Wxu-Next-Commit
Web-Mar-Region
X-Gzip
X-Block-Status
We-Hiring
X-Mvc-Supplant-Cachable
X-Thanos
X-UA-Device-Type
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-Request-Host
X-Request-Start
X-V-Cache
X-Varnish-Beresp-Status
X-Zen-Fury
Cluster
X-WA-Info
X-VG-TLSProxy
X-Varnishpool
X-Req
X-RateLimit-Remaining-Second
True-Client-Country-4JS
X-Mvc-Supplant-OutputCached
X-Mly-Id
X-Men
X-HS-Content-Campaign-Id
X-Irp-Debug
X-NCache
X-Nginx-Cache-Key
X-Policy
X-RateLimit-Limit-Second
X-PERF
X-Node-Id
X-NMSegId
X-Hnp-Log
X-Org
Gh-Request-Id
Req-ID
Canary
Cache-Provider
Release
Machine
On-Server
NM-Fastcgi-Cache
Mail-Subject
C-Via
Req-Svc-Chain
X-Service
Expiry
X-Connection-Hash
Content-Style-Type
X-From
Content-Script-Type
X-Micro-Cache
X-Fmm-Version
X-Hash
X-Varnish-Authentication
X-Branch-Name
X-Cache-TTL-Remaining
A
X-Cdn-Srv
X-Core-Mission
X-DPWN-IS-SECURE
IsBot
X-Fastly-Backend
Is-Eu
X-Test
Click-Count-Error
X-Server-IP
Click-Count-Action-Start
X-Up
X-Contensis-Viewer-Groups
X-GoCache-CacheStatus
X-Var-Ttl
Country-Code
AKAMAI
Esi-Enabled
X-Old-Content-Length
X-Moov-Xdn-Version
X-Proto
X-Moov-T
Adler-Geo
Platform
X-Cache-Aspx
X-SIPLIST1
Tube-Got-Results
Tube-Return
X-App-Name
W
X-Ad-Load-Variation
Producers
Tube-Got-Eval
Tube-Get-Contents
HA-Ipaddr
X-Edge-Server
Ha-Gx-Prefs
X-Eu-Site
X-ZONE
Fastly-Backend-Name
Datacenter
L5d-Success-Class
X-Sn-Servicetimems
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-Amz-Meta-Cb-Modifiedtime
Cache-Key
Cdn-Request-Time
X-Slack-Shared-Secret-Outcome
Cf-Device-Type
X-Slack-Backend
Cdn-Host
X-CGP
X-Csrf-Jwt
Proxy-Firewall
Pics-Label
X-CacheTTL
X-Parent-Response-Time
Locid
X-Via-Popn
X-Via-Popv
RNT-Time
X-Via-Poph
Cdncip
X-Region-Sid
X-HA-Backend
X-Ah-Environment
X-Date
X-Accel-Expires-Debug
X-Dc
Cdnsip
X-Qloud-Router
LB
X-Owner
RNT-Machine
X-ND-Cache
X-Tx-Id
X-AK-Request-ID
Cdn
NGX
X-LB-NoCache
X-VarnishDD-TTL
X-CF-Lambda-Fn
Expect-Staple
X-Amz-Storage-Class
X-CF-Lambda-Version
X-HN
N-Cache
PFcat
Yak-Timeinfo
X-Azure-Ref-OriginShield
X-Forwarded-Path
X-CACHE-GROUP
X-Servedbyhost
SID
X-Shop-Environment
Xc-Version
X-Refresh
X-Tb-Optimization-Total-Bytes-Saved
X-Tenant
X-Cache-Type
X-Orig-Expires
X-Backend-Instance
X-Ratelimit-Reset
X-Nc
X-Gamma-Serve
GeoIp-Country-Code
XM
X-LB-ID
X-CDN-Cache-Status
X-NGINX-Cache
X-Wa
X-VHOST
X-DynaTrace-JS-Agent
Cmstype
X-Varnish-Hits
Cmsid
X-Tt-Logid
NtCoent-Length
RATING
Server-ID
X-Origin-Expires
X-API-Version
X-Cache-Backend
Cdn-Requestid
X-NewRelic-App-Data
X-Client-Ip
X-Lagoon
CloudFront-Viewer-Country
X-Cdn-Diag
CPC-Age
CPC-Cache
X-Srv
X-Vmg-Version
X-Nananana
X-Fpc
X-Akamai-Transformed
X-TIME
Resin-Trace
X-Via-Fastly
X-B3-Parentspanid
X-TX-ID
X-LAGOON
X-Zone
X-CACHE-AGE
X-Api-Version
X-UA
Cross-Origin-Opener-Policy-Report-Only
Uri
X-Hit
CacheControlHeader
XkeyRZ
X-Nf-Request-Id
User-Agent
X-Variation
X-Proxy-CacheRZ
X-Presslabs-Stats
GeoIP-Latitude
X-URL
MIME-Version
X-Ig-Origin-Region
X-Amz-Meta-Opti
Cache-Hits
X-Fastly-Country-Code
True-Client-IP
X-Location
X-Info
X-DataCenter
X-Vc
X-LiteSpeed-Tag
X-Dynatrace-Js-Agent
Hostname
X-ECache
Tcn
True-Client-Ip
VNS-Age
X-Datacenter
Fusion-Template-Id
X-NWS-UUID-VERIFY
VNS-Cache
Lb
Fusion-Source
Fusion-Deployment-Id
Fusion-Content-Id
Fusion-Content-Source
Fusion-Component-Id
X-HostName
X-CSRF-TOKEN
X-LiteSpeed-Cache-Control
X-B3-Spanid
DataCenter
X-Geo
X-CS
X-RID
Cache-Name
Powered-By
X-Cloudmap
Origin-EX
X-Jungle-Id
X-Cached-By
Mime-Version
Origin-CC
Fastly-Drupal-Html
X-User
X-Dispatcher-Number
X-IAuth-Set-Uid
X-HOST
X-CUA
Debug
Cf-Ipcountry
X-AIR-PT
X-Segment-20210421
X-Cdn-Forward
X-Webkit-Csp-Report-Only
X-Render-Time
Cl-Cache
X-Varnish-Beresp-TTL
Load-Balancing
X-Mid
Srv
X-VTEX-Cache-Server
X-Wormhole-Sdk
X-MCACHE
X-Powered-By-VTEX-Cache
X-VTEX-Cache-Time
Edge-Cache
CDN
GeoIP-Country-Code
X-Dispatch
X-FPC
X-Auth-Group-Type
Ohc-File-Size
BehaviorPad-Version
X-Esi
X-Litespeed-Tag
CountryCode
X-Cdn-Cache-Status
X-Oracle-DMS-ECID
Server-Id
Ohc-Cache-HIT
YJS-ID
X-Cache-Enabled
X-WA
X-Ig-Push-State
X-NC
X-Lb-Id
X-ServedByHost
X-Cs
X-Cache-Ttl
X-Lb-Nocache
X-NodeID
X-Fastly-Backend-Reqs
Location
Server-Info
X-Wp-Cf-Super-Cache-Cache-Control
X-Wp-Cf-Super-Cache
My-App
Odigeo-Trace-Id
Wpo-Cache-Status
X-Litespeed-Cache-Control
X-VCL-Version
Ms-Author-Via
Wpo-Cache-Message
X-APP-VERSION
X-Vgn-Hpd-Reason
X-Proxy-Cache-La3
X-Custom-Header
Xkey-La3
Ngx
X-Cdn-Request-ID
Xkeylog
CF-Ctrl
X-MSEdge-Flight
X-MSEdge-Features
X-Akamai-Pragma-Client-IP
X-Snapshot-Date
CF-Cached-On
X-Internal-Host
X-MiniProfiler-Ids
X-Acquia-Purge-Tags
Memory
X-Acquia-Application-UUID
Time
X-Acquia-Site
FSS-Cache
X-Acquia-Application-Trace
Srvid
X-Via-PopH
X-Ha-Backend
X-Depends
X-Via-PopN
X-Via-PopV
X-FL-QIT-DEBUG
X-FL-EDGE
Memcached
X-Nitro-Cache
X-Nitro-Cache-From
Section-Origin-Responded
X-IN-APIGATEWAYSSL
X-IN-APIGATEWAY
X-Nitro-Rev
Section-Io-Origin-Status
Section-Io-Origin-Time-Seconds
X-App
OriginIP
X-Sorting-Hat-Shopid
X-Shardid
X-Shopid
X-Sorting-Hat-Podid
X-Cache-Version
X-RequestId
X-Web-Server
X-Udemy-Cache-App-Namespace
Akamai-Cache-Status
X-Service-Response-Time
X-Http-Duration-Ms
X-PHP-Backend
X-Th-Server
Geoip-Latitude
X-Sucuri-Id
X-Pad
X-Check-Cacheable
X-Serial
X-Lsadc-Cache
X-Te-Duration-Ms
X-Te-Count
X-Mg-Cache
X-Fastly-Cache-Hits
X-Http-Count
X-Cache-FS-Status
Sm-Log-Id
X-Wp-Cf-Super-Cache-Cookies-Bypass
X-Dw-Trace-Id