Threat Level: green Handler on Duty: Richard Porter

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
CF-RAY
ETag
X-XSS-Protection
Accept-Ranges
Expect-CT
Pragma
X-Powered-By
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Alt-Svc
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
X-Served-By
X-UA-Compatible
P3P
X-Xss-Protection
X-Download-Options
X-Request-Id
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
X-FRAME-OPTIONS
X-Permitted-Cross-Domain-Policies
Access-Control-Allow-Credentials
Content-Security-Policy-Report-Only
P3p
X-Runtime
X-AspNet-Version
X-DNS-Prefetch-Control
Accept-CH
X-Ua-Compatible
X-Cache-Status
X-Drupal-Cache
Accept-CH-Lifetime
X-Check
X-Generator
X-Cacheable
Server-Timing
X-Envoy-Upstream-Service-Time
Timing-Allow-Origin
X-Iinfo
X-Request-ID
X-Drupal-Dynamic-Cache
Access-Control-Expose-Headers
Feature-Policy
X-Content-Security-Policy
Content-Encoding
X-CDN
Status
Upgrade
X-AspNetMvc-Version
Access-Control-Max-Age
X-Via
X-Amz-Request-Id
CF-Ray
X-Amz-Id-2
Host-Header
Allow
X-Backend
Cf-Edge-Cache
X-Cache-Group
Request-Context
X-Robots-Tag
Keep-Alive
X-Server
X-Hacker
X-UA-Device
X-AH-Environment
X-Turbo-Charged-By
X-Ws-Request-Id
X-Proxy-Cache
Xkey
X-Age
X-Rq
X-Vhost
EagleId
X-Dispatcher
X-Server-Powered-By
X-Amz-Version-Id
X-Varnish-Cache
Grace
X-Dns-Prefetch-Control
Cf-Apo-Via
X-Page-Speed
X-Pingback
Cf-Railgun
X-LiteSpeed-Cache
X-Swift-CacheTime
X-Swift-SaveTime
X-Device
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
EagleEye-TraceId
X-WebKit-CSP
Ali-Swift-Global-Savetime
X-Aws-Lambda-Call-Status
X-CST
X-OneAgent-JS-Injection
X-Backend-Server
Permissions-Policy
X-Server-Id
X-Readtime
X-Response-Time
X-Host
X-Akam-SW-Version
Request-Id
Surrogate-Control
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Nginx-Upstream-Cache-Status
X-HW
Accept-Ch-Lifetime
X-Cloud-Trace-Context
X-Nginx-Cache-Status
X-Node
X-Litespeed-Cache
X-Application-Context
X-Country-Code
X-Cache-Lookup
X-Ruxit-JS-Agent
X-Trace
Content-Location
X-Url
Service-Worker-Allowed
X-Content-Type
X-Country
X-Clacks-Overhead
X-Oneagent-Js-Injection
X-Edge
X-ECACHE
X-Origin-Cache-Key
X-Mcache
Accept-Ch
X-Mod-Pagespeed
X-Amz-Server-Side-Encryption
X-Rack-Cache
Cross-Origin-Opener-Policy
X-Midtier
X-FTR-Request-ID
Cache-Tag
X-MS-InvokeApp
Nginx-Cache
X-Upstream
X-TtlSet
X-Vname
X-PC
X-ESI
X-Powered-By-Plesk
Rating
Edge-Control
X-Browser-Type
X-D2id
X-Server-Name
Verso
X-Element-Page-Cache
X-Exp-Id
X-Kinja-Revision
X-Kinja-Server
X-Kinja-Build
X-Kinja
X-GoogleNews-Bot
X-Exp-Variant
X-Cdn-Fetch
X-B3-TraceId
X-Times
X-Cnection
X-Ac
SPIisLatency
SPRequestDuration
AR-SID
AR-Request-ID
AR-PoweredBy
AR-ATIME
X-Abt-Application-Version
X-Vcap-Request-Id
X-Navigation-Version
X-SharePointHealthScore
SPRequestGuid
X-RateLimit-Remaining
X-NF-Request-ID
X-Dw-Request-Base-Id
X-Ruxit-Js-Agent
X-GitHub-Request-Id
X-Ser
AR-CACHE
X-VARITI-CCR
Pinterest-Generated-By
Pinterest-Version
X-Pinterest-Rid
X-Mg-S
S
X-Cache-Key
RTSS
Pagespeed
Display
X-Middleton-Display
X-Sol
X-NWS-LOG-UUID
X-Client-IP
Edge-Cache-Tag
X-Ttl
X-Cache-TTL
Fastly-Restarts
X-Amzn-Trace-Id
X-Amz-Rid
Origin-Trial
X-Powered-CMS
X-Goog-Hash
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
X-Instrumentation
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
Cache-Status
X-Version
X-Server-ID
X-Edge-Location-Klb
X-Kinsta-Cache
Access-Control-Request-Method
X-Content-Security-Policy-Report-Only
X-Varnish-TTL
X-Recruiting
X-ARC
X-TraceId
X-Content-Digest
Arr-Disable-Session-Affinity
X-Erf-Stays-Pdp-Viaduct-Migration-Web-V2
X-T
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-MSEdge-Ref
X-Middleton-Response
Response
X-Forwarded-For
X-Ua-Device
Content-MD5
X-Accel-Expires
MicrosoftSharePointTeamServices
TP-Cache
X-Shield-Request-Id
X-Hits
X-Cached
X-Id
X-FTR-Cache-Status
X-FTR-Backend
X-FTR-Balancer
X-Country-Code-Real
X-FTR-Backend-Server
Public-Key-Pins
X-FTR-Expires
MS-Author-Via
Server-Node
X-Request-Processing-Time
X-Request-Received
Payment
X-HS-Cache-Config
X-HS-Content-Id
X-Ua-Browser
X-HS-Hub-Id
X-HS-Combine-CSS
Front-End-Https
Cross-Origin-Resource-Policy
X-DIS-Request-ID
X-Frontend
X-Webkit-Csp
X-RateLimit-Limit
X-Forwarded-Proto
X-Daa-Tunnel
X-LLID
X-Jurisdiction
X-GUploader-UploadID
X-HP-Trace-Id
X-HP-Webp
X-FastCGI-Cache
X-Fastcgi-Cache
TP-L2-Cache
X-LB-Cache
Realpath
X-Protected-By
Cache-Tags
X-Amzn-RequestId
X-Amz-Apigw-Id
X-Origin-Server
X-WebKit-CSP-Report-Only
X-Distributor
X-Microsite
Count-Hit
X-Request-Handler-Origin-Region
X-Page-Id
X-ORACLE-DMS-RID
X-B3-TraceId-Primal
X-F-Cache
MRF-Tech
Mrf-Cache-Status
X-AppVersion
X-Az
X-Activity-Id
X-NGENIX-Cache
X-Www-Served-By
X-Kinja-CCPA
X-Cluster-Name
X-Varnish-Backend
Accept-Charset
X-Hostname
Referer-Policy
X-Geo-Country
X-Debug-Info
X-Envoy-Decorator-Operation
X-App-Server
X-Correlation-Id
Fastcgi-Cache
X-Kong-Upstream-Latency
X-PressLabs-Stats
Host
X-Kong-Proxy-Latency
X-Varnish-Server
X-Goog-Metageneration
X-TTL
X-FB-Debug
Access-Control-Allow-Method
X-Git-Hash
X-RateLimit-Reset
X-ORACLE-DMS-ECID
Retry-After
X-Oracle-Dms-Ecid
X-Ratelimit-Limit
X-XRDS-LOCATION
X-Rid
Server-Name
X-CSRF-Token
X-Load-Cache
X-Content-Options
X-Tt-Trace-Tag
X-Upgrade-Enabled
X-Tt-Trace-Host
X-Px
X-Contextid
X-Flags
X-Aspnet-Duration-Ms
X-Is-Crawler
X-Providence-Cookie
X-Fastly-Request-Id
X-Route-Name
X-Request-Guid
DC
X-Revision
X-Signature
X-Trace-Id
X-B-Cache
X-App-Environment
Charset
X-Origin-Cache
X-Grace
TCN
X-Cache-Control
X-B
X-Datadog-Parent-Id
Paypal-Debug-Id
X-Datadog-Sampling-Priority
X-Type
X-Datadog-Trace-Id
Cleartype
X-ASPNET-VERSION
X-Seen-By
X-B3-Sampled
X-TT
X-Ezoic-Cdn
X-Oracle-Dms-Rid
Section-Io-Cache
X-TEC-API-VERSION
X-Mobile
X-Amz-Meta-S3cmd-Attrs
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Fb-Rlafr
X-Amz-Replication-Status
Healthy
Frame-Options
X-Language
X-Varnish-Ttl
X-Wix-Request-Id
X-Whom
X-Magnolia-Registration
X-Logged-In
X-Goog-Generation
X-Node-Name
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
Filterid
X-EdgeConnect-Cache-Status
X-Azure-Ref
X-Fastly-Request-ID
X-Proxy
X-N
X-Newrelic-App-Data
X-App-Version
Content-Disposition
X-Air-Pt
Backend
Akamai-GRN
X-Template
Upgrade-Insecure-Requests
NGB
X-Proxy-Cache-Info
Refresh
X-Response-Served-From
X-Original-Request-Id
X-Is-Bot
X-Rendered-As
X-Tumblr-User
X-Yottaa-Optimizations
X-Tumblr-Pixel-1
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Page-View
VIX-Pulpo-Upstream-Status
X-Yottaa-Metrics
X-Unique-Id
SD-X-WS
VIX-Pulpo-Node
X-ProcessESI
X-RemovedCookies
X-UUID
X-Amzn-Remapped-Content-Length
Liferay-Portal
X-Varnish-Grace
X-Servername
X-Adobe-Content
Viewport
X-WP-CF-Super-Cache-Cache-Control
X-WP-CF-Super-Cache
X-Adobe-Loc
X-Debug-IsPreview
X-RTag
X-Debug-IsConnected
MS-CV
X-Instance
X-Datadog-Sampled
Ms-Operation-Id
X-IPS-LoggedIn
Fastly-SWR
X-FW-Hash
X-FW-Dynamic
X-Debug
X-FW-Serve
X-FW-Server
X-FW-Version
X-FW-Type
X-FW-Static
X-G
Fastly-SIE
X-B3-SpanId
X-Ratelimit-Remaining
X-Region
Url
X-Cache-Grace
X-Cacheable-TTL
X-Device-Type
X-NYM-Debug-Backend
X-User-Agent
X-Rule
From-Origin
X-Cache-Hit
X-L-Path
X-Jobs
X-Environment-Context
Country
X-Status
X-Backend-Name
X-Hl-Ver
ServerID
X-Webkit-CSP
Surrogate-Key
X-Air-Source
Countrycode
X-Air-Hostname
X-Cache-Age
X-Air-Trace-Id
X-Hosted-By
X-Time
X-Tec-Api-Root
X-Tec-Api-Version
X-VC-Cache
X-Origin-TTL
X-Origin-CC
X-Tec-Api-Origin
Alternate-Protocol
X-CCDN-Origin-Time
X-Hcs-Proxy-Type
X-CCDN-CacheTTL
X-Content-Powered-By
X-NODE
X-Akamai-Request-ID2
X-Http-Reason
X-Cache-Status-Check
Amp-Access-Control-Allow-Source-Origin
X-INCAP-ABP
Protected
X-HTML-Minification-Powered-By
X-Via-JSL
WPO-Cache-Message
WPO-Cache-Status
Version
X-Akamai-Edgescape
X-Rocket-Nginx-Serving-Static
GEO-INFO
X-Framework
CDN-RequestId
X-Storage
X-Edge-Location
X-Source
X-Accel-Version
X-WP-CF-Super-Cache-Active
SRV
X-CDN-Forward
Access-Control-Request-Headers
X-Cache-Rule
Front
X-XRDS-Location
X-Nginx-Cache
CF-IPCountry
X-Httpd
X-Real-IP
X-Use-Mantle
X-Mode
X-Use-Magma
OT-Force-Account-Verify
X-Xfnlog-Site
Webserver
Meta-Geo
Filters
Accept-Language
X-Rn-Rsrv
X-VC
X-Cache-Operation
X-Rewrite-Enabled
X-Upstream-Ht
X-Upstream-Ct
X-UPSTREAM-Address
X-Endurance-Cache-Level
X-Cache-Debug
Selected-Fe
X-Timing-Wait
X-Soup
X-Tumblr-Pixel-2
X-JoinUs
X-Director
X-Served-From
X-SaId
X-Tumblr-Pixel-3
X-Detected-As
X-Proxy-Build
X-Sql-Count
X-Origin
X-ProxyCache-Key
X-Cms-Context
X-Handled-By
X-Say-Cacheable
ServedBy
X-Worker
X-Logging-Id
X-ProxyCache-Status
X-Varnish-Cache-Hits
X-Say-TTL
X-Redis-Cache
X-Sql-Duration-Ms
X-BYPASS-REASON
X-SayCDN-TTL
X-Adobe-Source
Webcakes-App-Name
X-S
Azure-SiteName
Webcakes-App-Version
X-Restarts
X-Cache-Time
Azure-RegionName
Azure-SlotName
X-RM-Cache-TTL
Azure-InstanceId
Webcakes-Region
X-GeoCode
X-Tncms
X-Labrador-Cache-Channel
X-Lambda-Id
TWC-Connection-Speed
Xserver
TWC-GeoIP-Country
X-VCT
Azure-Version
X-B3-Traceid
X-Varnish-Age
TWC-Device-Class
X-Server-W
AMP-Access-Control-Allow-Source-Origin
TWC-GeoIP-LatLong
X-Format
X-Origin-Hint
Web-Mar-Node
Xet-Cookie
DB-Nickname
TWC-Privacy
X-No-Session
TWC-Locale-Group
X-Loop
X-GeoCountry
Property-Id
X-PHP-Host
X-Vercel-Id
X-Vercel-Cache
X-VWS-Id
X-Tb
X-Varnish-Beresp-Grace
X-Skip-Cache
X-RCS-CacheZone
X-LJ-Flow-ID
X-IPLB-Request-ID
X-IPLB-Instance
X-Container-Uri
X-Cache-Server
X-DynaTrace
X-Fetched-On
X-Git-Commit
X-Generation-Time
X-AWS-Id
Mn-Server-Ip
Apigw-Requestid
X-Tcp-Rtt
X-Browser-Name
X-ServerID
X-Ms-Request-Id
X-Vcache
X-Cluster
X-Ms-Version
X-Cache-Host
X-Reqid
X-AB
X-Is-Tablet
Section-Io-Id
Node
X-Frame-Option
X-Geo-Region
X-Is-Desktop
X-Is-Supported-Browser
X-Provided-By
X-Web-Node
X-Is-Mobile
X-Extlb
X-Routing-Service
X-Locale
X-Site-Version
X-Proxied
X-Zipkin-Id
X-R9-Blue-Green-Version
X-Forwarded-Host
X-Platform-Router
X-Platform-Processor
Cross-Origin-Embedder-Policy
X-Uri
X-Platform-Cluster
Cache-Tv-Group
X-COUNTRY
X-Webstats-RespID
Source
X-Drupal-Cache-Contexts
X-Drupal-Cache-Tags
X-FB-TRIP-ID
Priority
X-MP-GENERATED-AT
Fastcgi-Useragent
Content-Secure-Policy
X-Vcl-Version
WP-Super-Cache
X-Origin-Date
CDN-RequestPullSuccess
CDN-Uid
CDN-RequestCountryCode
CDN-PullZone
CDN-CachedAt
CDN-EdgeStorageId
CDN-Cache
CDN-RequestPullCode
Onion-Location
X-Alternate-Cache-Key
X-Storefront-Renderer-Rendered
X-Shopify-Stage
X-Generated-By
X-TT-LOGID
X-Xrds-Location
Locale
WZWS-RAY
X-SRV
X-Urbn-Site-Id
X-Urbn-Context-Path
X-Content-Age
X-ShardId
X-Sucuri-Cache
X-Sorting-Hat-PodId
X-ShopId
S-Rt
X-Sorting-Hat-ShopId
X-Pass-Why
X-Cdn-Origin
X-Sucuri-ID
X-Newrelic-Synthetics
Sid
X-Cluster-Node
X-Ua
X-Buckets
X-Proxy-Cache-Status
X-Varnish-Beresp-Ttl
Cross-Origin-Embedder-Policy-Report-Only
X-Cache-Action
X-Cache-Expired-At
X-DataDome
Thinkindot-Control
X-CMSURLCustom
Cross-Origin-Window-Policy
X-Scope-Id
X-Thinkindot-L3
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
TDXMobile
X-Shield-Cache-Expires
Cache
X-LSADC-Cache
X-Mg-Request-UUID
Fastly-Drupal-HTML
Atl-Traceid
HostName
X-GEO
X-Request-URI
X-Via-CDN
X-Via-SSL
X-Aspnetmvc-Version
Edge-Copy-Time
X-Via-Edge
Surrogated-Key
X-Destination
X-VCache
X-Vdms-Version
X-Developer
X-Vdms-Path
X-TIM-N
Candidate-Md5Url
X-Vtex-Remote-Cache
X-Correlation-ID
X-Scheme
Type
CDCHOST
X-D
X-Application
X-Aed
Ngx.Var.Host
X-A-Wwc
X-A-Dgt
X-External-Request-Id
X-Rojux
X-ScT
X-S-Cookie
Ngx-Var-Key
Origin
Origin-Agent-Cluster
X-A-Dcw
X-A-Dam
X-A-Ccd
X-Ec-Custom-Error
X-Ec-Fail
X-Epic-Correlation-Id
X-Ec-GeoHdr
T-Server
X-SRCache-Key
X-Cache-Bucket
X-PAYTM-SRV-ID
Environment
X-Bc-Bl
DCR-Decision-By
X-Bl-Debug
X-B-Cookie
X-BCube-Filmed-By
Sslversion
Gannett-Cam-Experience-Id
X-Optimistic-Header
Rendered-Blocks
DCR-Processing-Time-Ms
X-Cache-NE
X-A
Lang
Meta-Geo-Continent
X-Conf
Redirect-Candidate
X-Viewer-Country
MD5-Digest
X-TimeS
X-WP-CF-Super-Cache-Cookies-Bypass
X-Datadome
Host-ID
X-BBC-Edge-Cache-Status
X-We-Are-Hiring
X-VG-TLSProxy
X-SD-PageType
X-Section
L
X-B3-Trace-ID
X-Acquia-Purge-Cdn-Unconfigured
Apple-News-Services-Request-Url
X-Aicache-OS
DSUID
X-Cache-Info
X-Debug-Cache-Store
X-Clientip
X-Debug-Cache-Fetch
Magicmarker
Fastly-GeoIP-CountryCode
Fastly-SSL
Apple-News-Services-Handled
Apple-News-Services-Host
Apple-News-Services-Parsed-Url
X-Dispatcher-Server
X-Core-Value
X-Bip
X-Rocket-Build-Number
X-Mly-Id
X-VG-WebCache
Req-ID
X-Proxied-Request
Req-Svc-Chain
Release
X-Varnish-Beresp-Status
X-SB
X-Level-Front-Cache
X-Loc
X-WA-Info
X-Sigma
X-Pool
X-Op-Id-All
Server-Hostname
X-Origin-Time
Sever-Int
Server-Host
Server-Ext
X-VServer
X-Node-Id
X-Platform
X-Nyt-Route
X-Sigma-Backend
X-Varnish-Director
X-GeoIP-Country-Code
X-GeoIP-Region-Code
X-TH-Server
X-Thanos
X-Generated-On
X-Gdpr
Vix-Hermes-Req-Id
X-Fastly-Cache
X-Access
X-Forwarded-Site
X-Human
V-Age
X-Varnish-Hostname
X-Request-Start
X-Request-Time
X-Req
Ssr
X-Instance-Name
X-Pubstack
X-Varnishpool
Pramga
X-Origin-Response-Time
User-Cache-Control
Web-Mar-Region
We-Hiring
X-Ad-Load-Variation
Uber-Trace-Id
Wxu-Next-Region
Wxu-Next-Hostname
Wxu-Next-Commit
X-Hnp-Log
X-NMSegId
X-Zen-Fury
X-Old-Content-Length
X-V-Cache
X-Nginx-Cache-Key
X-NCache
Cluster
X-Mvc-Supplant-Cachable
X-Mvc-Supplant-OutputCached
X-Org
X-Up
X-UA-Device-Type
X-Server-IP
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
X-Request-Host
X-RateLimit-Remaining-Second
X-PERF
X-Policy
X-RateLimit-Limit-Second
X-Micro-Cache
X-Var-Ttl
X-DPWN-IS-SECURE
X-Esi-Check
X-FC-Vary-Parameters
X-Fmm-Version
X-Device-Os
X-Cache-TTL-Remaining
X-Block-Status
X-Cache-Date
X-Cache-Id
X-From
X-Gen-Mode
X-Irp-Debug
Tube-Return
X-Men
X-HS-Content-Campaign-Id
X-Gzip
X-Geo-Header
X-GeoIP
X-GeoIP-City
X-Auto-Login
X-ApacheServer
Machine
C-Via
Mail-Subject
Click-Count-Error
On-Server
NM-Fastcgi-Cache
Cache-Provider
Is-Eu
Country-Code
Click-Count-Action-Start
Esi-Enabled
Gh-Request-Id
Canary
Platform
Adler-Geo
Tube-Get-Contents
X-TA-CDN-Provider
True-Client-Country-4JS
Tube-Got-Results
Tube-Got-Eval
Producers
X-Service
X-Connection-Hash
Expiry
X-DC
X-Moov-Xdn-Version
Cdn-Request-Time
X-Varnish-Authentication
X-ZONE
X-Cdn-Srv
X-Core-Mission
Content-Style-Type
Content-Script-Type
X-Proto
X-SIPLIST1
X-Cache-Aspx
X-Edge-Server
X-Fastly-Backend
X-Hash
AKAMAI
X-Moov-T
X-Test
X-GoCache-CacheStatus
X-Contensis-Viewer-Groups
Cdn-Host
Cf-Device-Type
W
X-App-Name
A
X-Branch-Name
IsBot
X-Parent-Response-Time
X-Dc
X-Slack-Shared-Secret-Outcome
L5d-Success-Class
X-Sn-Servicetimems
X-Slack-Backend
X-Eu-Site
Pics-Label
Proxy-Firewall
NGX
HA-Ipaddr
Cache-Key
Ha-Gx-Prefs
X-CGP
X-Csrf-Jwt
X-Wikidot-Backend
RNT-Machine
X-Ah-Environment
Fastly-Backend-Name
X-Amz-Meta-Cb-Modifiedtime
X-CacheTTL
X-Wikidot-Static-Cache
RNT-Time
Datacenter
X-NGINX-Cache
X-Qloud-Router
LB
X-HA-Backend
X-ND-Cache
Yak-Timeinfo
X-Owner
X-Via-Poph
X-Accel-Expires-Debug
Cdncip
X-Date
X-CF-Lambda-Version
X-Region-Sid
Expect-Staple
X-AK-Request-ID
Cdnsip
N-Cache
X-Via-Popn
Locid
X-CF-Lambda-Fn
X-Via-Popv
X-Tx-Id
X-HN
X-Orig-Expires
X-VarnishDD-TTL
X-LB-NoCache
X-Amz-Storage-Class
PFcat
Xc-Version
X-Cache-Type
X-Tenant
X-Shop-Environment
X-Forwarded-Path
X-LB-ID
X-Ratelimit-Reset
Cdn
X-Backend-Instance
X-Servedbyhost
X-Refresh
X-Tb-Optimization-Total-Bytes-Saved
X-Azure-Ref-OriginShield
X-Gamma-Serve
X-VHOST
X-Varnish-Hits
SID
X-Wa
X-Tt-Logid
X-DynaTrace-JS-Agent
GeoIp-Country-Code
XM
Cmstype
Cmsid
X-CDN-Cache-Status
RATING
NtCoent-Length
X-Nc
Cdn-Requestid
X-Vmg-Version
X-Origin-Expires
Server-ID
X-Cdn-Diag
X-API-Version
CPC-Cache
CPC-Age
X-Cache-Backend
CloudFront-Viewer-Country
X-Nananana
X-Akamai-Transformed
X-Lagoon
X-TIME
X-Srv
X-Fpc
X-Via-Fastly
X-TX-ID
X-LAGOON
X-Api-Version
X-B3-Parentspanid
X-Hit
Resin-Trace
X-NewRelic-App-Data
CacheControlHeader
X-Zone
X-Variation
User-Agent
Uri
X-Nf-Request-Id
X-Proxy-CacheRZ
XkeyRZ
Cross-Origin-Opener-Policy-Report-Only
X-Client-Ip
X-UA
X-Presslabs-Stats
X-CACHE-AGE
X-URL
GeoIP-Latitude
X-Fastly-Country-Code
X-Amz-Meta-Opti
X-Info
MIME-Version
Tcn
X-LiteSpeed-Tag
X-ECache
Lb
Cache-Hits
X-DataCenter
VNS-Age
VNS-Cache
True-Client-IP
X-Ig-Origin-Region
True-Client-Ip
X-Location
X-Datacenter
X-LiteSpeed-Cache-Control
X-Dynatrace-Js-Agent
X-HostName
DataCenter
Fusion-Template-Id
Cache-Name
Fusion-Content-Id
Fusion-Component-Id
Fusion-Content-Source
Fusion-Deployment-Id
Fusion-Source
Mime-Version
X-Vc
X-Geo
X-NWS-UUID-VERIFY
X-RID
Cf-Ipcountry
Hostname
Powered-By
X-Cdn-Forward
X-CS
X-B3-Spanid
Fastly-Drupal-Html
Srv
Origin-CC
X-HOST
X-Cloudmap
X-Cached-By
X-CUA
Origin-EX
X-Jungle-Id
X-Dispatcher-Number
X-CSRF-TOKEN
X-User
X-AIR-PT
X-Segment-20210421
X-IAuth-Set-Uid
X-Webkit-Csp-Report-Only
X-Mid
X-Varnish-Beresp-TTL
Debug
X-Render-Time
X-MCACHE
Cl-Cache
Load-Balancing
X-VTEX-Cache-Time
X-VTEX-Cache-Server
GeoIP-Country-Code
X-Esi
CDN
Ohc-File-Size
X-Powered-By-VTEX-Cache
X-Dispatch
X-FPC
X-Wormhole-Sdk
BehaviorPad-Version
X-Litespeed-Tag
Edge-Cache
X-Oracle-DMS-ECID
X-Cdn-Cache-Status
X-WA
Server-Id
X-Auth-Group-Type
X-NC
Ohc-Cache-HIT
X-Lb-Id
X-Cache-Enabled
YJS-ID
X-ServedByHost
X-Lb-Nocache
X-Cs
X-Wp-Cf-Super-Cache-Cache-Control
Location
X-Wp-Cf-Super-Cache
X-Ig-Push-State
X-Fastly-Backend-Reqs
Server-Info
CountryCode
My-App
X-NodeID
Wpo-Cache-Status
Wpo-Cache-Message
Ms-Author-Via
X-Litespeed-Cache-Control
X-APP-VERSION
X-VCL-Version
Xkeylog
Xkey-La3
X-Cdn-Request-ID
X-Proxy-Cache-La3
X-Snapshot-Date
CF-Ctrl
Odigeo-Trace-Id
CF-Cached-On
X-Internal-Host
X-MSEdge-Features
X-MSEdge-Flight
X-MiniProfiler-Ids
X-Akamai-Pragma-Client-IP
Section-Io-Origin-Time-Seconds
X-IN-APIGATEWAYSSL
OriginIP
X-IN-APIGATEWAY
Section-Io-Origin-Status
Section-Origin-Responded
X-Acquia-Application-UUID
Time
X-Acquia-Purge-Tags
Memory
X-Acquia-Site
Memcached
X-Ha-Backend
FSS-Cache
X-FL-EDGE
X-FL-QIT-DEBUG
Srvid
X-Custom-Header
Ngx
X-Vgn-Hpd-Reason
X-Via-PopH
X-App
X-Via-PopN
X-Acquia-Application-Trace
X-Nitro-Cache
X-Via-PopV
X-Nitro-Rev
X-Nitro-Cache-From
X-Cache-Version
X-Sorting-Hat-Shopid
X-Shardid
X-Sorting-Hat-Podid
X-Shopid
X-Sucuri-Id
X-Udemy-Cache-App-Namespace
X-Wp-Cf-Super-Cache-Cookies-Bypass
X-Http-Duration-Ms
Akamai-Cache-Status
X-RequestId
X-Th-Server
X-PHP-Backend
X-Depends
PICS-Label
Geoip-Latitude
X-Te-Count
X-Http-Count
X-Check-Cacheable
Sm-Log-Id
X-Serial
X-Lsadc-Cache
X-Dw-Trace-Id
X-Mg-Cache
X-Web-Server
X-Pad
X-Te-Duration-Ms
X-Cache-FS-Status
X-Fastly-Cache-Hits
X-Service-Response-Time