Threat Level: green Handler on Duty: Bojan Zdrnja

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
X-XSS-Protection
X-Powered-By
Pragma
CF-Cache-Status
Link
CF-RAY
ETag
Expect-CT
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-UA-Compatible
X-Served-By
X-Varnish
Alt-Svc
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Download-Options
X-AspNet-Version
X-Request-Id
Access-Control-Allow-Credentials
X-Runtime
X-Drupal-Cache
X-Request-ID
X-Adblock-Key
X-Check
X-Cache-Status
X-Generator
Content-Security-Policy-Report-Only
X-Permitted-Cross-Domain-Policies
X-Cacheable
X-Template
X-Language
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-Iinfo
X-AspNetMvc-Version
X-Ua-Compatible
X-FRAME-OPTIONS
X-Buckets
Status
X-Content-Security-Policy
X-CDN
Content-Encoding
Upgrade
Access-Control-Expose-Headers
Access-Control-Max-Age
X-Kinja-Server-Push
Keep-Alive
X-Xss-Protection
X-Drupal-Dynamic-Cache
X-Turbo-Charged-By
Xkey
X-Pass-Why
P3p
X-AH-Environment
X-Envoy-Upstream-Service-Time
X-Cache-Group
CF-Ray
X-Backend
X-Age
X-Server
X-Via
X-Robots-Tag
X-Server-Powered-By
X-Amz-Id-2
X-Amz-Request-Id
X-Page-Speed
X-Pingback
EagleId
X-Proxy-Cache
X-Nginx-Cache-Status
X-UA-Device
X-Hacker
Request-Context
X-Ws-Request-Id
X-Varnish-Cache
Feature-Policy
Server-Timing
Grace
Cf-Railgun
X-Swift-CacheTime
X-Swift-SaveTime
X-Amz-Version-Id
Ali-Swift-Global-Savetime
X-Dns-Prefetch-Control
X-LiteSpeed-Cache
Report-To
X-Server-Id
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Rq
X-WebKit-CSP
X-Host
X-Device
EagleEye-TraceId
X-OneAgent-JS-Injection
Content-Location
X-Response-Time
X-Origin-Cache
X-Ac
X-Node
Surrogate-Control
X-Vhost
X-Readtime
Request-Id
X-Backend-Server
X-Cloud-Trace-Context
X-Dispatcher
X-Origin-Upstream-Status
X-ORACLE-DMS-ECID
X-Cnection
X-HW
NEL
X-DataDome
X-Application-Context
X-ORACLE-DMS-RID
Fusion-Content-Source
Fusion-Component-Id
Fusion-Template-Id
Fusion-Source
Fusion-Content-Id
X-Mod-Pagespeed
X-Cache-Lookup
Rating
Edge-Control
X-Rack-Cache
X-Country
Pinterest-Generated-By
X-Akam-SW-Version
X-Clacks-Overhead
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Ruxit-JS-Agent
X-DynaTrace
X-Country-Code
X-Varnish-TTL
X-Instart-Request-ID
X-Goog-Hash
X-TtlSet
Allow
X-PC
X-Vname
Accept-Ch
X-ESI
X-FTR-Request-ID
X-TTL
Verso
X-Url
X-Powered-By-Plesk
Accept-Ch-Lifetime
Service-Worker-Allowed
Content-MD5
X-Forwarded-Proto
X-Version
X-MS-InvokeApp
X-B3-TraceId
X-GitHub-Request-Id
X-Kinja-Server
X-Kinja-Revision
X-Cdn-Fetch
X-Exp-Id
X-Kinja-Build
X-GoogleNews-Bot
X-Kinja
X-Exp-Variant
X-Use-Magma
Edge-Cache-Tag
RTSS
X-Px
AR-ATIME
AR-Request-ID
AR-PoweredBy
AR-CACHE
Ar-Sid
X-D2id
X-Abt-Application-Version
X-Debug
X-NF-Request-ID
SPRequestGuid
X-Server-Name
Charset
X-Powered-CMS
X-Amz-Server-Side-Encryption
X-Accel-Expires
X-MSEdge-Ref
X-Cached
X-Amz-Rid
Arr-Disable-Session-Affinity
X-Vcache
X-Vcap-Request-Id
Display
X-Middleton-Display
X-Sol
X-Navigation-Version
Pagespeed
Response
X-Middleton-Response
X-Trace
X-Pinterest-Rid
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Pinterest-Version
X-SharePointHealthScore
X-TEC-API-ROOT
X-TEC-API-ORIGIN
TCN
X-TEC-API-VERSION
X-VARITI-CCR
Realpath
Public-Key-Pins
X-Fastcgi-Cache
X-Cdn
Cache-Tag
X-Client-IP
X-Upstream
S
Access-Control-Request-Method
X-DynaTrace-JS-Agent
X-Fastly-Request-ID
MS-Author-Via
X-Ser
SPIisLatency
SPRequestDuration
X-Shard
X-Id
X-Hp-Webp
DynaTrace
X-Ezoic-Cdn
X-Forwarded-For
X-T
X-Content-Type
X-Amzn-Trace-Id
Nginx-Cache
X-Mrf-Section-Lastmod
X-Mrf-Item-Lastmod
X-B3-TraceId-Primal
Mrf-Cache-Status
MRF-Tech
X-Amz-Meta-S3cmd-Attrs
X-Recruiting
Front-End-Https
X-Grace
X-Hits
X-Varnish-Age
Fastcgi-Cache
X-DIS-Request-ID
ServerID
MicrosoftSharePointTeamServices
X-Mobile-URL
X-Dw-Request-Base-Id
NR-ENABLED
X-Element-Page-Cache
X-Node-Name
X-Content-Digest
X-Goog-Storage-Class
X-Goog-Metageneration
X-Goog-Generation
Powered
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-GUploader-UploadID
X-Frontend
X-HS-Hub-Id
X-HS-Content-Id
X-HS-Combine-CSS
X-HS-Cache-Config
X-Country-Code-Real
X-FTR-Expires
Server-Name
X-Edge-O15-RID
X-FTR-Cache-Status
Alternate-Protocol
X-Logged-In
X-FTR-Backend
X-FTR-Realm
X-FTR-DC
X-FTR-Backend-Server
X-FTR-Balancer
TP-L2-Cache
TP-Cache
X-Correlation-Id
Server-Node
X-Webapp-Samesite-None-Activated-N
X-Shield-Request-Id
X-Cache-TTL
X-XRDS-LOCATION
X-Webkit-Csp
X-Request-Processing-Time
X-Request-Received
AMP-Access-Control-Allow-Source-Origin
X-Request-Handler-Origin-Region
X-Microsite
Upgrade-Insecure-Requests
X-Content-Options
X-Origin-Server
X-Rid
X-Revision
X-Akamai-Edgescape
X-Content-Security-Policy-Report-Only
Refresh
X-Varnish-Grace
X-User-Agent
X-Amz-Apigw-Id
X-Page-Id
Backend-Timing
X-Amzn-RequestId
Nel
X-Server-ID
X-F-Cache
X-ATS-Timestamp
X-Cache-Hit
X-Jurisdiction
X-Type
Fastly-Restarts
X-XRDS-Location
X-Pad
X-Analytics
X-Geo-Country
X-Activity-Id
X-AppVersion
X-Content-Powered-By
X-Az
X-N
X-B3-Sampled
X-LB-Cache
X-Zen-Fury
X-B
X-URL
X-Kinsta-Cache
X-RateLimit-Remaining
X-FTR-Cache-Host
X-Ttl
X-Cache-Age
PB-RID
X-TT
X-AOL-HN
PB-PID
X-Instance
X-Tumblr-Pixel-0
X-WebKit-CSP-Report-Only
X-Jobs
Paypal-Debug-Id
Actual-Object-TTL
X-Ruxit-Js-Agent
X-Tumblr-Pixel
X-App-Environment
X-Request-Guid
X-Framework
DC
X-Tumblr-User
X-Mobile-Rewrite
Arc-Version
X-FB-Debug
X-PHP-Backend
X-CST
Access-Control-Allow-Method
X-B-Cache
X-Debug-Info
X-Signature
Cache-Status
X-Load-Cache
X-Varnish-Backend
X-Erf-Bev-Bev
X-Cache-Action
X-Erf-Bev-Bev-Is-Generated
X-Git-Hash
Surrogate-Key
Fastcgi-Useragent
FilterID
Host-Header
X-FastCGI-Cache
X-Cached-By
MS-CV
X-IPLB-Instance
X-Tt-Trace-Tag
X-SS-Set-Cookie
X-Time
X-Contextid
X-Amz-Replication-Status
X-Cluster
X-Tt-Trace-Host
X-Cache-Key
X-Srv
X-ATG-Version
NGB
Tracecode
X-Response-Served-From
X-Accel-Buffering
Frame-Options
Source
WPE-Backend
X-VCache
Host
Payment
Eomportal-Instance
X-Trafficlayer-App-Scope
X-Trafficlayer-App-Name
X-Varnish-Server
X-FW-Serve
X-RequestSource
Accept-CH
X-Cacheable-TTL
X-Varnish-Hostname
X-Region
X-Cache-Enabled
X-FW-Type
X-GeoIP
X-IPS-LoggedIn
X-FW-Static
Cache-Tv-Group
X-FW-Server
X-FW-Hash
Filters
X-Tumblr-Pixel-1
X-Tumblr-Pixel-2
X-Adobe-Content
X-Cache-2
X-Adobe-Loc
X-Cache-NE
X-Mobile
Cleartype
X-Kong-Upstream-Latency
X-Host-Name
X-Kong-Proxy-Latency
X-WA-Info
X-B3-Traceid
X-NewRelic-App-Data
X-Rendered-As
X-Is-Bot
X-TX-ID
X-Seen-By
Xserver
X-Oneagent-Js-Injection
Healthy
Cache
X-Cache-Rule
X-Cache-Operation
X-Via-JSL
X-Hostname
X-EdgeConnect-Cache-Status
X-Cache-Control
X-Origin-Response-Time
X-Presslabs-Stats
X-Cache-TTL-Remaining
Datacenter
X-HTML-Minification-Powered-By
X-Dc
Accept-CH-Lifetime
Ms-Operation-Id
Retry-After
X-RTag
X-RemovedCookies
X-ProcessESI
X-ORACLE-APMCS-TAG
X-ORACLE-APMCS-REQUEST-ID
X-Rule
Server-Info
X-UA
X-RateLimit-Limit
Version
X-Wix-Request-Id
X-PressLabs-Stats
X-Status
From-Origin
Liferay-Portal
X-Cache-Server
X-FireWall-Port
X-Environment-Context
X-Upgrade-Enabled
X-L-Path
X-Source
X-NWS-LOG-UUID
X-Endurance-Cache-Level
X-CACHE-KEY
X-Path-Route
X-ES-SERVER
X-RN-RSRV
X-Cache-Var-Map
X-Cache-Var
Meta-Geo
X-UUID
X-Hyper-Cache
OT-Force-Account-Verify
X-Timing-Wait
X-Handled-By
Selected-Fe
X-Proxy-Build
X-Sorting-Hat-ShopId
X-ShopId
X-EIG-Tracking-Id
X-Alternate-Cache-Key
X-Proto
X-Sorting-Hat-PodId
X-Content-Age
X-ShardId
X-Shopify-Stage
X-Shopify-Generated-Cart-Token
X-Backend-Name
X-Goog-Meta-Goog-Reserved-File-Mtime
NGX
Ec-Rule-Version
Node
L5d-Success-Class
Azure-SlotName
Azure-InstanceId
Akamai-GRN
Azure-RegionName
Azure-SiteName
Origin-Cache-Control
Azure-Version
TWC-Connection-Speed
Webcakes-App-Version
Webcakes-App-Name
Webcakes-Region
X-Access
X-Akamai-Request-ID
TWC-Privacy
TWC-Locale-Group
S-Rt
Property-Id
TWC-Device-Class
TWC-GeoIP-Country
TWC-GeoIP-LatLong
Origin-Edge-Control
X-Generated-By
X-ServerID
X-Section
X-Cache-Host
X-Soup
X-Origin
X-Origin-Hint
X-Vgn-Hpd-Reason
X-Web-Node
X-Redis-Cache
X-Request-Time
X-Qloud-Router
X-SaId
X-Proxy
X-JoinUs
X-Tb
X-Format
X-Hosted-By
X-FW-Dynamic
X-FC-Vary-Parameters
X-Hl-Ver
X-Human
X-ProxyCache-Key
X-CCM
X-Say-Cacheable
X-PCL
X-Debug-Cache
Mn-Server-Ip
X-ProxyCache-Status
X-BCube-Filmed-By
X-Cache-Config
Decoy-Debug-TTL
Decoy-Debug-Status
X-Www-Served-By
X-BYPASS-REASON
Now
X-RCS-CacheZone
X-Pubstack
X-AWS-Id
X-OCL
X-Site-Version
X-NYM-Debug-Backend
X-MP-GENERATED-AT
X-LJ-Flow-ID
X-Locale
X-Generated
X-Time-Microsecs
X-IP
X-VWS-Id
Decoy-Debug-Key
X-SayCDN-TTL
X-Akamai-Request-ID2
X-Varnish-Hits
X-Say-TTL
Cache-Tags
DB-Nickname
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Loop
X-APP-VERSION
X-TNCMS
X-Storage
X-Amzn-Remapped-Content-Length
Cache-Name
X-App-Server
X-Proxy-Cache-Status
X-R9-Blue-Green-Version
X-Viewer-Country
X-Detected-As
X-Cluster-Node
Viewport
X-FB-TRIP-ID
X-Xfnlog-Site
Cross-Origin-Window-Policy
Uber-Trace-Id
X-CS
GEO-INFO
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
Webserver
Time
X-Akamai-Transformed
Srv
Accept-Charset
X-Unique-Id
X-Drupal-Cache-Tags
X-NCache
X-Cache-Remote
X-From
X-Esi
X-Edge-Location
X-TT-TIMESTAMP
X-UA-Device-Type
X-Cluster-Name
X-Origin-CC
X-Drupal-Cache-Contexts
X-Origin-TTL
Cache-Key
Mime-Version
Country
Odigeo-Trace-Id
X-Mode
X-EC-Lua
X-Newrelic-Synthetics
X-Microcachable
Ohc-Cache-HIT
Ohc-File-Size
Accept-Language
X-Backend-TTL
X-B3-Spanid
X-CDN-Forward
Rt-Fastcgi-Cache
X-CLOUD-TRACE-CONTEXT
X-Info
X-Forwarded-Host
X-No-Session
X-Geo
X-PHP-Host
X-Labrador-Cache-Channel
X-Real-IP
Proxy-Connection
X-Magnolia-Registration
X-UPSTREAM-Address
X-Zipkin-Id
X-Proxied
X-Routing-Service
X-Cache-Time
X-Whom
Fastly-SSL
Content-Disposition
X-Varnish-Cache-Hits
Cf-Ipcountry
ServedBy
X-Session-Fingerprint
X-VG-WebCache
X-Date
X-DPWN-IS-SECURE
X-PERF
X-ARC
X-Destination
X-Aed
X-A-Wwc
X-A-Dgt
Mobile-Detection-Method
X-Accel-Expires-Debug
X-Vdms-Version
X-SRCache-Key
AsisCache
Access-Control-Request-Headers
Powered-By
X-CF-Lambda-Fn
X-CF-Lambda-Version
Meta-Geo-Continent
Xc-Version
Rendered-Blocks
BehaviorPad-Version
X-B-Cookie
Content-Script-Type
X-Application
X-Trv-Group
X-Connection-Hash
X-D
X-G
X-App-Version
X-Vtex-Processado-Em
X-Rewrite-Enabled
X-Rojux
Viewtype
X-UnsetCookies
VivaBuild
T-Server
X-Transaction
X-Twitter-Response-Tags
X-Region-Sid
X-ApacheServer
X-VG-WebServer
X-Request-UUID
X-Vtex-Remote-Cache
Content-Style-Type
X-S
X-A-Ccd
X-ScT
X-Geo-Header
Machine
X-A-Dam
X-External-Request-Id
X-A-Dcw
MD5-Digest
X-A
X-S-Cookie
GEO-REGION-INFO
Fastcgi-X-Cache-Version
X-GeoIP-Country-Code
X-Cache-Backend
X-Device-Type
X-Cache-ASPX
X-Auto-Login
X-Tumblr-Pixel-3
X-Bip
W
X-Varnish-Authentication
Server-Cache-Control
X-VC-Cache
Server-Surrogate-Control
IsBot
X-TrackingId
X-Rocket-Build-Number
X-SIPLIST1
X-Sigma-Backend
X-Sigma
X-Thanos
Gh-Request-Id
X-Logging-Id
X-CUA
X-Contensis-Viewer-Groups
X-VG-TLSProxy
Environment
X-Via-Fastly
User-Cache-Control
X-C
True-Client-Country-4JS
X-User
X-App-Name
Request-Country
X-Agile-Age
X-Agile-Id
Section-Io-Cache
Wxu-Next-Hostname
Wxu-Next-Commit
Wxu-Next-Region
Server-Int
X-Agile
X-Uri
Request-EU
X-Debug-Cookies
X-LI-Proto
X-Li-Pop
X-LI-UUID
X-Location
X-Nginx-Cache-Key
X-Li-Fabric
X-Key
X-IN-APIGATEWAY
X-Hit
X-IN-APIGATEWAYSSL
X-Instart-Isnd
X-Irp-Debug
X-NX-Host
X-Origin-Date
X-TH-Server
X-Trace-Id
X-Sucuri-Cache
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
X-Request-URI
X-Render-Time
X-Origin-Expires
X-OVcl
X-OVcl-Cache
X-Owner
X-Hash
X-GoCache-CacheStatus
X-TT-LOGID
X-Clientip
X-Core-Mission
X-Debug-Cache-Expiry
X-Debug-Cache-Fetch
X-CGP
X-Cdn-Srv
X-Cache-Bucket
X-BBXSRF
X-Cache-Debug
X-Cache-Info
X-Cache-URL
X-Debug-Cache-Store
X-Debug-Log
X-FW-Version
X-Fastly-Cache
X-Gamma-Serve
X-Generation-Time
X-GeoIP-City
X-Eu-Site
X-Epic-Correlation-Id
X-Developers
X-Dispatcher-Server
X-Distil-CS
X-Distributor
X-Backend-State
HA-Ipaddr
Countrycode
X-Tec-Api-Version
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
Fastly-Backend-Name
Fastly-Soc-X-Request-Id
Heartbleed
X-Swa-Ws
Ha-Gx-Prefs
Apple-News-Services-Handled
AKAMAI
X-Wikidot-Static-Cache
X-Tec-Api-Origin
X-Tec-Api-Root
X-Wikidot-Backend
X-Webstats-RespID
X-VServer
X-We-Are-Hiring
X-WebServer
IBM-Web2-Location
Apple-News-Services-Request-Url
Kp-EeAlive
Memcached
X-B3-Parentspanid
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
Geo-Info
Thinkindot-CacheControl
X-RateLimit-Remaining-Second
Mail-Subject
X-Cache-Tags
X-Level-Front-Cache
X-NGENIX-Cache
X-Reboot
X-WADP-Cache
V-Age
X-S-Maxage
X-Ms-Version
X-Ms-Request-Id
X-Block-Status
X-Matched-Rule
Thinkindot-Control
X-JWT-State
X-Core-Value
X-Generated-On
X-Generated-In
X-Gen-Mode
X-Service
PFcat
X-Has-Esi
X-Hnp-Log
X-Is-Gdpr
X-Clara-WADP
X-Cms-Context
X-Thinkindot-L3
X-Internal-Host
Thinkindot-CacheControl-Type
X-RateLimit-Limit-Second
X-Urbn-Site-Id
Server-Host
X-Old-Content-Length
Locid
Cdncip
Country-Code
Server-ID
FNAC-ModuleRouting
X-Proxy-Upstream
Locale
X-Platform-Server
We-Hiring
Web-Mar-Node
CDCHOST
Cdnsip
X-Up
Cache-Host
X-AK-Request-ID
RNT-Time
RNT-Machine
X-Azure-Ref
X-Trafficlayer-App-Version
X-NodeID
X-Urbn-Context-Path
X-NU-AKA-ACS-Version
X-Req
X-Daa-Tunnel
ServerName
X-Lb-Id
X-NC
X-ServiceProvider
Fastly-SWR
X-Rebelmouse-Surrogate-Control
X-Refresh
X-Response-By
X-Rebelmouse-Cache-Control
X-Micro-Cache
Fastly-SIE
Platform
Adler-Geo
X-Variation
Is-Eu
Cache-Hits
X-CACHE-GROUP
HitType
X-TA-CDN-Provider
X-SERVER
X-Server-W
X-Servername
X-Server-IP
X-Cdn-Forward
X-CF-Powered-By
X-Nginx-Cache
RequestId
X-Tb-Optimization-Total-Bytes-Saved
X-Fetched-On
X-B3-SpanId
X-Parent-Response-Time
X-Cdn-Request-ID
Memory
Media-Length
X-Nc
ProcessTime
X-CSRF-Token
Origin
X-BACKEND-TTL
X-CSRF-TOKEN
User-Agent
X-Pjax-Url
X-TIME
X-Wa
X-Pf-Uncompressing
Geoip-Latitude
X-NGINX-Cache
Filterid
X-Air-Hostname
TTL
GeoIp-Country-Code
Esi-Enabled
X-Cache-Expired-At
X-AIR-PT
X-Reqid
X-Var-Ttl
X-Correlation-ID
X-Ua
X-Unique-ID
SRV
X-Planisys-CDN-Rules
X-Policy
X-Planisys-CDN-TTL
X-Planisys-CDN-Cache
X-Vcl-Version
X-Sucuri-Id
X-Sucuri-ID
Group
Pragrma
X-Rocket-Nginx-Bypass
X-Request-Start
Powered-By-ChinaCache
S-Cnection
PICS-Label
X-COUNTRY
HostName
SN
X-Azure-Ref-OriginShield
Rt-Proxy-Cache
X-Webkit-CSP
X-Servedbyhost
X-Litespeed-Cache
XServer
X-Varnish-Cacheable
X-Via-Ucdn
X-Method
Geoip-City
Load-Balancing
Magicmarker
X-Varnish-Ttl
X-Via-CDN
X-Fastly-Country-Code
M-TraceId
X-HS-Status
X-NWS-UUID-VERIFY
X-FORWARDED-FOR
Ohc-Response-Time
DSUID
Release
Dnion-Transfer-Encoding
Tcn
X-Developer
X-VCT
X-MServer
X-Cdn-Origin
Who
X-Sn-Servicetimems
X-Node-Id
X-Cache-Grace
X-Ocache
Resin-Trace
X-Device-Os
X-Be
X-Cache-Ttl
NtCoent-Length
X-ServedByHost
X-Svr
X-Ftr-Cache-Host
X-Hp-Ccpa-Warning
X-Zone
X-VHOST
Vix-Hermes-Req-Id
X-Bc
X-MSEdge-Features
X-MSEdge-Flight
Cdn
X-LAGOON
CF-Cached-On
X-Oss-Storage-Class
X-Oss-Server-Time
X-Oss-Hash-Crc64ecma
X-Oss-Object-Type
X-Oss-Request-Id
X-APP
A
X-Request-Host
On-Server
Cteonnt-Length
Pics-Label
X-Ratelimit-Remaining
MIME-Version
Cloudfront-Viewer-Country
X-VarnishDD-TTL
X-VCL-Version
GeoIP-Country-Code
X-Configured-By
X-Oracle-Dms-Rid
SD-X-WS
X-WR-MODIFICATION
GeoIP-Latitude
X-SD-PageType
Ttl
X-DC
X-Cache-Status-Check
X-Beluga-Cache-Status
X-Beluga-Record
X-Beluga-Response-Time
X-Beluga-Node
GeoIP-City
X-Fastly-Backend-Reqs
X-PF-Uncompressing
X-Compress-Hint
X-Beluga-Status
X-Upstream-Ht
X-SN
X-Upstream-Ct
X-Cache-Id
X-Varnish-URL
X-Beluga-Trace
X-Varnish-Url
X-LiteSpeed-Cache-Control
X-Newrelic-App-Data
Hostname
X-Via-NSCOPI
X-SRV
X-Tid
X-PJAX-URL
Host-ID
X-Release
X-Ftr-Request-Id
L
X-HostName
X-Ratelimit-Limit
X-Scheme
X-Aicache-OS
X-Dynatrace
Processtime
LB
X-BE
Servername
X-Dynatrace-Js-Agent
UCS
WebServer
Cache-Cookie-Set-Lfrom
X-ID
Cache-Cookie-Set-Idcheck
Cache-Cookie-Set-From
X-Swift-Error
Cache-Provider
X-Fastly-Cache-Hits
CACHE
X-Slack-Backend
X-Frame-Option
Amp-Access-Control-Allow-Source-Origin
X-LB-ID
X-StackifyID
X-Snapshot-Date
Requestid
X-Branch-Name
X-Action
X-DW
X-Ftr-Realm
X-Ftr-Dc
CDN
Dynatrace
Lfy
X-Ftr-Balancer
X-Ftr-Backend-Server
CF-IPCountry
X-Varnish-Beresp-TTL
X-Ftr-Backend
X-ServerName
X-RSL
Pagetype
X-DI
X-DB
X-DSS
X-RPS
X-RPM
X-CACHE-AGE
X-Fastly-Cache-Status
Warning
X-PAYTM-SRV-ID
X-Skip-Cache
X-Cc-Via
X-FPC
X-Dispatch
Pramga
X-VC
D-Cc-Upstream
X-Cache-FS-Status
X-Cc-Req-Id
X-Processor
Arc-Country
X-Server-Time
X-Apw-Access-Action
X-Apw-Access-Object
WZWS-RAY
X-Edge-IP
X-Apw-Access-Token
X-Node-ID
V-Cache
X-ZONE
Proxy-Firewall
X-SB
X-Apw-Hits
NnCoection
X-Flog
X-Hello
Lb
X-ABtesting
X-Amzn-Remapped-Connection
X-Amzn-Remapped-Date
X-Litespeed-Cache-Control
Correlation-Id
X-ElasticPress-Search
X-Powered-Y
X-Check-Cacheable
X-Request-URL
WP-Super-Cache
X-Request-Url
X-App
X-BC
X-Worker
Backend-Name