Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
X-Powered-By
Pragma
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
Alt-Svc
P3P
X-Cache-Hits
X-UA-Compatible
X-Xss-Protection
X-Served-By
CF-Ray
X-Download-Options
X-Request-Id
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Cache-Status
X-Generator
X-Check
X-Cacheable
X-DNS-Prefetch-Control
X-Envoy-Upstream-Service-Time
X-FRAME-OPTIONS
Timing-Allow-Origin
X-Iinfo
X-Drupal-Dynamic-Cache
X-Dns-Prefetch-Control
Feature-Policy
X-Content-Security-Policy
Server-Timing
Access-Control-Expose-Headers
Content-Encoding
X-XSS-PROTECTION
Status
X-CDN
Upgrade
X-Request-ID
X-AspNetMvc-Version
Access-Control-Max-Age
X-Amz-Request-Id
X-Amz-Id-2
Request-Context
X-Via
X-Turbo-Charged-By
X-Backend
X-Cache-Group
X-AH-Environment
X-Robots-Tag
Cf-Edge-Cache
Keep-Alive
Host-Header
X-Hacker
X-UA-Device
X-Proxy-Cache
X-Vhost
X-Server
X-Rq
X-Server-Powered-By
Allow
X-Ws-Request-Id
X-Age
X-Varnish-Cache
X-Dispatcher
EagleId
X-Amz-Version-Id
X-LiteSpeed-Cache
P3p
Nel
Grace
Cf-Apo-Via
Cf-Railgun
X-Page-Speed
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Device
EagleEye-TraceId
X-Aws-Lambda-Call-Status
X-Swift-SaveTime
X-Swift-CacheTime
X-OneAgent-JS-Injection
Ali-Swift-Global-Savetime
X-Pingback
X-Host
X-Node
Accept-CH
X-CST
X-WebKit-CSP
X-Cache-Lookup
X-Backend-Server
X-Server-Id
Surrogate-Control
X-Readtime
X-Nginx-Cache-Status
Permissions-Policy
X-Nginx-Upstream-Cache-Status
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Akam-SW-Version
Request-Id
X-Application-Context
Accept-CH-Lifetime
X-Content-Security-Policy-Report-Only
X-Cloud-Trace-Context
X-Response-Time
X-Ua-Compatible
X-HW
X-Trace
Xkey
X-Edge
Content-Location
X-Clacks-Overhead
X-Ruxit-JS-Agent
X-Mod-Pagespeed
Rating
X-ESI
X-Midtier
X-Amz-Server-Side-Encryption
X-ECACHE
X-Url
X-Mcache
Accept-Ch-Lifetime
X-Country
Cache-Tag
X-Upstream
X-MS-InvokeApp
X-Rack-Cache
X-Vcap-Request-Id
X-D2id
X-Powered-By-Plesk
Verso
X-Exp-Id
X-Use-Magma
X-Cdn-Fetch
X-Kinja
X-Kinja-Revision
X-Kinja-Server
X-GoogleNews-Bot
X-Kinja-Build
X-Exp-Variant
X-Element-Page-Cache
Edge-Control
Accept-Ch
X-PC
X-TtlSet
X-Vname
RTSS
X-Ruxit-Js-Agent
X-Oneagent-Js-Injection
Service-Worker-Allowed
X-Ac
X-Webkit-CSP
X-Country-Code
Origin-Trial
X-VARITI-CCR
Fastly-Restarts
X-Navigation-Version
X-Goog-Hash
X-Abt-Application-Version
X-Cache-TTL
X-WebKit-CSP-Report-Only
X-GitHub-Request-Id
X-Varnish-TTL
X-Cached
X-Browser-Type
X-Amz-Rid
X-Litespeed-Cache
X-Aspnetmvc-Version
Display
Cross-Origin-Opener-Policy
X-Middleton-Display
X-Sol
Pagespeed
X-Kinja-CCPA
X-Dw-Request-Base-Id
X-Server-Name
X-SharePointHealthScore
X-Amzn-Trace-Id
SPRequestGuid
X-NWS-LOG-UUID
X-Content-Type
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-Powered-CMS
SPIisLatency
SPRequestDuration
X-Mg-S
AR-PoweredBy
AR-SID
AR-Request-ID
AR-ATIME
X-Kraken-Loop-Name
X-Erf-Bev-Bev-Is-Generated
X-Server-Lifecycle-Phase
X-Erf-Bev-Bev
X-Instrumentation
X-Cache-Key
X-Ttl
Arr-Disable-Session-Affinity
Pinterest-Version
Response
X-Middleton-Response
Pinterest-Generated-By
X-Pinterest-Rid
X-Times
X-Client-IP
X-Fastly-Request-ID
X-Version
X-B3-TraceId
X-Jurisdiction
X-HP-Webp
X-HP-Trace-Id
X-B3-Traceid
X-Cnection
AR-CACHE
X-FastCGI-Cache
X-T
X-SRCache-Store-Status
X-SRCache-Fetch-Status
Cache-Tags
X-Accel-Expires
Nginx-Cache
X-Ser
Cache-Status
Edge-Cache-Tag
Front-End-Https
X-MSEdge-Ref
X-Hits
X-RateLimit-Remaining
X-Px
Public-Key-Pins
X-NF-Request-ID
X-Recruiting
Payment
X-LLID
X-Request-Processing-Time
Mrf-Cache-Status
X-B3-TraceId-Primal
MRF-Tech
X-Frontend
X-Request-Received
Server-Node
X-RateLimit-Limit
X-Ua-Browser
S
X-Shield-Request-Id
X-Server-ID
X-DIS-Request-ID
X-Goog-Metageneration
X-GUploader-UploadID
X-TTL
Content-MD5
Access-Control-Request-Method
MicrosoftSharePointTeamServices
X-PressLabs-Stats
X-Amz-Apigw-Id
X-Amzn-RequestId
TP-Cache
X-Content-Digest
X-Daa-Tunnel
X-Protected-By
X-HS-Hub-Id
X-HS-Cache-Config
X-HS-Combine-CSS
X-Fastcgi-Cache
X-HS-Content-Id
Realpath
X-Request-Handler-Origin-Region
X-Distributor
Fastcgi-Cache
X-Microsite
X-LB-Cache
X-FB-Debug
Access-Control-Allow-Method
X-Forwarded-For
X-Page-Id
Accept-Charset
X-Rid
X-Cluster-Name
X-Erf-Stays-Pdp-Viaduct-Migration-Web
TP-L2-Cache
X-Geo-Country
X-Hostname
X-Ratelimit-Remaining
X-B3-Sampled
X-Ezoic-Cdn
X-Webkit-CSP-Report-Only
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-Goog-Generation
X-Aspnet-Version
X-Seen-By
X-Ua-Device
Cross-Origin-Resource-Policy
Count-Hit
X-Newrelic-App-Data
Cleartype
TCN
Referer-Policy
X-Mobile
X-App-Server
DC
X-Varnish-Backend
X-Content-Options
X-Ratelimit-Limit
X-Logged-In
X-Kinsta-Cache
X-Edge-Location-Klb
X-Correlation-Id
X-Origin-Cache
X-Git-Hash
X-Hosted-By
X-Contextid
X-Debug-Info
X-Envoy-Decorator-Operation
X-Fb-Rlafr
X-Aspnet-Duration-Ms
X-Amz-Replication-Status
X-Flags
X-Route-Name
X-Providence-Cookie
X-Request-Guid
X-Is-Crawler
X-IPS-LoggedIn
X-Grace
X-Revision
Surrogate-Key
X-Varnish-Grace
X-TT
X-App-Environment
Frame-Options
X-Id
X-Amz-Meta-S3cmd-Attrs
X-Forwarded-Proto
Retry-After
X-Xrds-Location
X-Azure-Ref
X-F-Cache
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
Section-Io-Cache
X-Wix-Request-Id
X-RateLimit-Reset
X-Whom
X-Origin-Server
X-Magnolia-Registration
Healthy
Alternate-Protocol
Charset
MS-Author-Via
X-Akamai-Edgescape
X-Proxy-Cache-Info
Viewport
X-App-Version
X-Backend-Name
X-Nf-Request-Id
X-COUNTRY
WPO-Cache-Message
X-Www-Served-By
WPO-Cache-Status
Paypal-Debug-Id
X-Az
X-AppVersion
X-Activity-Id
X-B
X-Language
X-Webkit-Csp
SRV
X-Varnish-Server
SD-X-WS
VIX-Pulpo-Node
X-Response-Served-From
X-Cache-Rule
VIX-Pulpo-Upstream-Status
Filterid
Host
X-Original-Request-Id
X-Http-Reason
X-Cache-Grace
X-UUID
X-Edge-Location
X-Rule
X-Akamai-Request-ID2
X-User-Agent
X-Datadog-Sampling-Priority
Server-Name
Akamai-GRN
Country
Front
X-Instance
X-Datadog-Trace-Id
X-Datadog-Parent-Id
ServerID
From-Origin
X-Environment-Context
Protected
X-ARC
X-Jobs
X-Cacheable-TTL
X-N
X-Status
X-EdgeConnect-Cache-Status
X-L-Path
Amp-Access-Control-Allow-Source-Origin
X-Page-View
X-Unique-Id
X-Time
X-Region
X-Varnish-Age
X-FW-Static
X-FW-Server
X-Adobe-Loc
X-FW-Version
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-FW-Serve
X-Tumblr-Pixel-1
Fastly-SIE
Fastly-SWR
X-Framework
X-FW-Dynamic
X-Rendered-As
X-Adobe-Content
X-FW-Hash
X-FW-Type
X-Is-Bot
X-Rocket-Nginx-Serving-Static
X-Tumblr-User
X-Load-Cache
X-RemovedCookies
X-Tec-Api-Origin
X-DataDome
X-Kong-Proxy-Latency
X-ProcessESI
X-Vcache
X-Trace-Id
X-Type
X-Kong-Upstream-Latency
X-G
X-Tec-Api-Root
X-Tec-Api-Version
X-Cache-Time
X-Yottaa-Optimizations
Access-Control-Request-Headers
X-Proxy
X-Yottaa-Metrics
X-Client-Ip
X-Datadog-Sampled
X-Mg-Request-UUID
Content-Disposition
X-Amzn-Remapped-Content-Length
X-B-Cache
X-Signature
X-Debug-IsPreview
X-Debug-IsConnected
X-Cache-Control
X-Cache-Age
X-CDN-Forward
X-XRDS-Location
X-URL
X-ECache
Refresh
Backend
X-Drupal-Cache-Tags
Countrycode
X-WP-CF-Super-Cache
Xet-Cookie
X-DynaTrace
Accept-Language
X-WP-CF-Super-Cache-Cache-Control
X-Source
X-Nginx-Cache
X-Erf-Web-Scheduler
X-Servername
X-Generated-By
X-Httpd
CF-IPCountry
X-Tt-Trace-Tag
X-HTML-Minification-Powered-By
Webserver
Url
X-Tt-Trace-Host
X-DynaTrace-JS-Agent
X-Mode
Version
X-Device-Type
Xserver
X-NYM-Debug-Backend
X-Template
X-Storage
X-Content-Powered-By
X-Content-Age
GEO-INFO
X-UPSTREAM-Address
X-GeoCountry
Locale
S-Rt
Meta-Geo
X-JoinUs
Onion-Location
Load-Balancing
OT-Force-Account-Verify
X-Director
X-Cache-Operation
X-Urbn-Site-Id
X-LAGOON
Filters
X-Urbn-Context-Path
X-Cache-Action
X-GeoCode
X-SayCDN-TTL
X-ServerID
X-Say-TTL
X-Say-Cacheable
X-Rewrite-Enabled
X-SaId
X-Rn-Rsrv
X-Soup
X-Forwarded-Host
X-Varnish-Hostname
X-Varnish-Cache-Hits
X-Cluster-Node
X-Container-Uri
X-Generation-Time
X-Tt-Logid
X-Git-Commit
Web-Mar-Node
X-RM-Cache-TTL
X-Sql-Count
X-Labrador-Cache-Channel
X-Cache-Server
Azure-InstanceId
Azure-SiteName
X-PHP-Host
X-Ms-Version
X-Ms-Request-Id
X-Proto
Azure-Version
X-Detected-As
Azure-SlotName
Azure-RegionName
X-Adobe-Source
X-Lambda-Id
X-Sql-Duration-Ms
X-Served-From
X-VCT
X-Tb
X-VC-Cache
X-CCDN-Origin-Time
X-Format
X-Proxied
DB-Nickname
X-Logging-Id
Mn-Server-Ip
X-Skip-Cache
X-Zipkin-Id
X-RCS-CacheZone
X-R9-Blue-Green-Version
X-Tumblr-Pixel-2
X-Tncms
X-Routing-Service
X-Tumblr-Pixel-3
X-XRDS-LOCATION
X-Loop
X-Hcs-Proxy-Type
X-CCDN-CacheTTL
Node
X-FB-TRIP-ID
X-Extlb
Uber-Trace-Id
X-Origin-Hint
X-Timing-Wait
X-Debug
X-Uri
Webcakes-App-Name
Property-Id
Webcakes-Region
Selected-Fe
TWC-Privacy
Webcakes-App-Version
X-Fetched-On
TWC-GeoIP-Country
TWC-Device-Class
X-Proxy-Build
TWC-Connection-Speed
TWC-GeoIP-LatLong
TWC-Locale-Group
X-MCACHE
X-TimeS
Fastcgi-Useragent
X-Cache-Hit
X-Zen-Fury
X-LSADC-Cache
Cross-Origin-Window-Policy
Source
X-Ua
X-Srv
X-Endurance-Cache-Level
X-Sucuri-Cache
X-Redis-Cache
X-Sucuri-ID
X-B3-SpanId
X-Upgrade-Enabled
X-Drupal-Cache-Contexts
CDN-RequestId
Section-Origin-Responded
Section-Io-Origin-Status
Section-Io-Id
Section-Io-Origin-Time-Seconds
X-Oracle-Dms-Ecid
X-Oracle-Dms-Rid
X-Origin-Date
X-MP-GENERATED-AT
X-Newrelic-Synthetics
X-NGENIX-Cache
Liferay-Portal
X-S
Fastly-Drupal-HTML
X-Varnish-Hits
X-Ratelimit-Reset
X-Cache-Expired-At
X-Pass-Why
Upgrade-Insecure-Requests
X-Origin-CC
X-Origin-TTL
X-ID
X-Akamai-Transformed
X-Real-IP
NGB
X-Handled-By
X-Cache-TTL-Remaining
X-FTR-Request-ID
X-CACHE-AGE
X-UA-Device-Type
X-Node-Name
X-Via-JSL
Apigw-Requestid
X-Hl-Ver
X-Pubstack
X-Optimistic-Header
X-Correlation-ID
X-Reqid
X-Cache-Type
X-Cms-Context
X-Xfnlog-Site
X-RTag
MS-CV
CDN-CachedAt
ServedBy
X-CSRF-Token
CDN-Cache
Ms-Operation-Id
X-Restarts
X-GEO
CDN-RequestCountryCode
CDN-PullZone
CDN-EdgeStorageId
CDN-RequestPullCode
CDN-RequestPullSuccess
CDN-Uid
X-No-Session
X-Varnish-Ttl
X-ProxyCache-Status
X-BYPASS-REASON
X-Server-W
X-Cache-Host
X-ProxyCache-Key
X-Parent-Response-Time
Content-Secure-Policy
WP-Super-Cache
X-A-Dgt
X-A-Wwc
X-Aed
X-App
X-Orig-Expires
X-SRCache-Key
Fastly-SSL
X-Nyt-Route
Redirect-Candidate
Sslversion
X-SD-PageType
X-IPLB-Instance
Server-Host
True-Client-Country-4JS
X-ScT
T-Server
X-AWS-Id
X-Cluster
Surrogated-Key
X-Rojux
X-S-Cookie
X-IPLB-Request-ID
Rendered-Blocks
Web-Mar-Region
W
X-A
X-A-Ccd
X-A-Dam
X-External-Request-Id
X-Slack-Shared-Secret-Outcome
Vix-Hermes-Req-Id
X-Shop-Environment
X-LJ-Flow-ID
X-Slack-Backend
X-A-Dcw
X-Eu-Site
X-Ec-GeoHdr
L5d-Success-Class
X-Csrf-Jwt
X-Fastly-Backend
X-Viewer-Country
X-D
Lang
Magicmarker
X-Vdms-Path
X-Epic-Correlation-Id
X-Conf
X-FC-Vary-Parameters
X-Vdms-Version
L
X-Debug-Cache-Fetch
X-Destination
HA-Ipaddr
X-We-Are-Hiring
X-Developer
X-Dispatcher-Number
X-Vtex-Remote-Cache
X-Request-Host
X-Debug-Cache-Store
X-Ec-Fail
Xc-Version
X-Ec-Custom-Error
X-Worker
X-Application
X-Origin-Time
Ha-Gx-Prefs
Odigeo-Trace-Id
DCR-Processing-Time-Ms
DCR-Decision-By
BehaviorPad-Version
X-Bl-Debug
X-Tenant
Origin-Agent-Cluster
X-B-Cookie
Gannett-Cam-Experience-Id
X-Bc-Bl
X-BCube-Filmed-By
Ngx.Var.Host
N-Cache
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-CGP
Canary
Candidate-Md5Url
MD5-Digest
Meta-Geo-Continent
X-Forwarded-Path
X-Cache-NE
X-CacheTTL
X-VWS-Id
X-Gdpr
X-Datadome
X-Tx-Id
X-Owner
Mail-Subject
Origin
Gh-Request-Id
Is-Eu
Host-ID
X-Org
Fastly-GeoIP-CountryCode
Req-Svc-Chain
Release
Producers
Platform
X-Old-Content-Length
X-BBC-Edge-Cache-Status
X-Core-Value
X-Mid
X-Date
X-DefElseHash
X-Core-Mission
X-Mly-Id
X-Cdn-Origin
X-Clientip
X-CMSURLCustom
X-DefHash
X-DPWN-IS-SECURE
X-GeoIP-Country-Code
X-GeoIP-Region-Code
X-Hash
X-Geo-Header
X-Generated-On
X-Loc
X-Level-Front-Cache
X-Irp-Debug
X-Cdn-Diag
X-Mvc-Supplant-Cachable
X-Nitro-Cache
VNS-Age
VNS-Cache
X-Node-Id
X-NodeID
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
Thinkindot-Control
We-Hiring
X-Accel-Buffering
X-Cache-Bucket
X-Cache-Debug
X-Cache-Info
X-Nananana
X-Bip
X-Accel-Expires-Debug
X-Alternate-Cache-Key
Fastly-Backend-Name
TDXMobile
Adler-Geo
X-Wikidot-Backend
X-Server-IP
X-Wikidot-Static-Cache
X-ShardId
X-ShopId
X-VServer
X-Sn-Servicetimems
X-Shopify-Stage
X-S-Maxage
X-Request-Time
X-RateLimit-Limit-Second
X-Qloud-Router
X-Pool
X-App-Name
X-Wix-Viewer-Type
X-Proxy-Cache-Status
X-RateLimit-Remaining-Second
X-Vmg-Version
X-VG-WebCache
X-SVT-ORM-RULES
X-Var-Ttl
X-Variation
X-SVT-ORM-VERSION
X-Up
X-Thanos
X-Test
X-Thinkindot-L3
Expect-Staple
X-Storefront-Renderer-Rendered
X-Varnish-Remaining-TTL
X-Varnishpool
X-VG-TLSProxy
X-Varnish-CookieINHashed-On
X-Sorting-Hat-PodId
X-Varnish-CookieHashed-On
X-Sorting-Hat-ShopId
X-Policy
X-Refresh
Cmstype
Cmsid
Cf-Device-Type
CPC-Age
CPC-Cache
Environment
X-PAYTM-SRV-ID
Datacenter
Cache-Provider
X-Platform
X-Human
AKAMAI
X-Cache-Status-Check
X-Vcl-Version
User-Cache-Control
Cache-Name
X-TIME
AMP-Access-Control-Allow-Source-Origin
X-AB
Server-Hostname
X-Akamai-Device-Characteristics
X-Esi-Check
CloudFront-Viewer-Country
X-Nginx-Cache-Key
X-Hnp-Log
X-Cdn-Srv
X-Block-Status
X-Mvc-Supplant-OutputCached
X-Fmm-Version
Esi-Enabled
X-Cache-Id
DSUID
Server-Ext
X-PERF
Country-Code
X-Auto-Login
X-Forwarded-Site
X-ApacheServer
Machine
Apple-News-Services-Request-Url
NM-Fastcgi-Cache
X-WADP-Cache
X-Origin-Response-Time
X-Device-Os
X-Origin
X-Gen-Mode
Apple-News-Services-Host
Apple-News-Services-Parsed-Url
X-GeoIP
X-WA-Info
X-INCAP-ABP
Sever-Int
CDCHOST
Apple-News-Services-Handled
X-Dispatcher-Server
X-Gzip
X-AIR-PT
X-From
X-Micro-Cache
X-Clara-WADP
X-Cache-Enabled
X-Fastly-Request-Id
X-Instance-Name
X-LB-NoCache
X-Amz-Meta-Cb-Modifiedtime
Wxu-Next-Commit
Wxu-Next-Region
C-Via
Pics-Label
X-Section
Server-Info
X-Op-Id-All
Ssr
NGX
Wxu-Next-Hostname
X-Access
X-NCache
X-Dc
X-B3-Spanid
X-Geo-Region
X-API-Version
X-JWT-State
Memcached
X-Via-Fastly
X-Has-Esi
Server-ID
X-Is-Gdpr
X-TraceId
X-Vgn-Hpd-Reason
X-ZONE
Hostname
X-Accel-Version
X-CACHE-GROUP
X-HA-Backend
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
Cache-Hits
Time
Memory
Origin-EX
Origin-CC
Cdn-Requestid
X-Scale
X-Wp-Cf-Super-Cache-Active
X-PHP-Backend
X-Buckets
X-Is-Mobile
X-Is-Tablet
X-SIPLIST1
X-Is-Desktop
X-Platform-Cluster
X-TIM-N
X-Browser-Name
X-Platform-Processor
X-Is-Supported-Browser
X-Platform-Router
Sid
IsBot
X-Tcp-Rtt
X-Air-Hostname
X-Air-Source
Location
X-Air-Trace-Id
X-Presslabs-Stats
X-Tb-Optimization-Total-Bytes-Saved
Resin-Trace
X-Internal-Host
YJS-ID
CF-Ctrl
X-Fpc
X-Backend-Instance
X-Cached-By
X-B3-Parentspanid
X-Azure-Ref-OriginShield
X-WP-CF-Super-Cache-Active
X-Cs
X-Zone
GeoIP-Latitude
X-DC
Epwk-X-Cache
X-Microcachable
X-Frame-Option
X-TA-CDN-Provider
X-Hyper-Cache
Cache-Host
X-Origin-Expires
X-Site-Version
True-Client-Ip
Uri
XM
X-Info
X-DataCenter
X-Web-Node
X-LiteSpeed-Cache-Control
X-Origin-Cache-Key
PFcat
X-Nitro-Rev
X-Nitro-Cache-From
X-NGINX-Cache
GeoIP-Country-Code
X-VC
X-Service
X-Webstats-RespID
X-Locale
X-VarnishDD-TTL
X-Pod-Name
X-HN
Cdn
GeoIp-Country-Code
X-Ad-Defer-Variation
User-Agent
X-FTR-Expires
X-FTR-Backend-Server
X-Country-Code-Real
X-FTR-Cache-Status
X-FTR-Backend
X-VCache
X-FTR-Balancer
X-Geo
X-CS
XServer
X-Cache-Ttl
X-Via-CDN
X-Via-SSL
Edge-Copy-Time
Locid
Srvid
X-Datacenter
X-FL-EDGE
X-FL-QIT-DEBUG
X-Via-Edge
A
LB
X-CSRF-TOKEN
X-NewRelic-App-Data
NtCoent-Length
X-Edge-Server
Cdn-Request-Time
Cdn-Host
True-Client-IP
X-Contensis-Viewer-Groups
X-Moov-Xdn-Version
X-Moov-T
X-NMSegId
X-Webkit-Csp-Report-Only
X-TRACE-ID
Req-ID
X-FireWall-Port
X-ATG-Version
X-Varnish-Authentication
M-TraceId
WZWS-RAY
X-Vercel-Id
X-Vercel-Cache
X-Cache-ASPX
Cache-Key
X-FPC
X-Pad
X-Ad-Load-Variation
SID
Fastly-Drupal-Html
X-MSEdge-Features
X-MSEdge-Flight
X-HostName
Tcn
WebServer
Content-Style-Type
X-M-Reqid
Path
Cluster
Pramga
X-Scope-Id
X-M-Log
X-LiteSpeed-Tag
X-SRV
Content-Script-Type
X-Request-Start
X-APP-VERSION
CountryCode
Cf-Ipcountry
X-Api-Version
X-Cdn-Request-ID
Cdnsip
Cdncip
X-AK-Request-ID
X-NWS-UUID-VERIFY
X-Varnish-Beresp-Status
X-Shield-Cache-Expires
X-Qnm-Cache
X-Amz-Meta-Opti
X-Esi
X-Request-URI
X-Air-Pt
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
X-Branch-Name
X-Upstream-Ht
X-Platform-Server
X-Wp-Cf-Super-Cache
HostName
State
X-Wp-Cf-Super-Cache-Cache-Control
X-Planisys-CDN-Cache
X-Cache-Date
X-Github-Request-Id
X-Upstream-Ct
Edge-Cache
X-HS-Content-Campaign-Id
Lb
X-Wp-Cf-Super-Cache-Cookies-Bypass
X-Release
X-Fastly-Cache
Ohc-File-Size
Yak-Timeinfo
X-TH-Server
X-Vgn-Hpd-Cached
X-Proxy-CacheRZ
X-Vgn-Hpd-Ssi
XkeyRZ
X-Vgn-Hpd-Variations-Key
Cache-Tv-Group
X-WP-CF-Super-Cache-Cookies-Bypass
X-Rebelmouse-Cache-Control
CDN
X-Rebelmouse-Surrogate-Control
X-CACHE-KEY
X-Generated-In
X-Tim-N
Srv
X-HS-Status
X-Cdn-Forward
X-Cache-Remote
X-Rocket-Build-Number
X-Sigma
X-V-Cache
X-Servedbyhost
X-Req
X-SB
X-Render-Time
Tube-Return
Tube-Got-Results
X-Acquia-Purge-Cdn-Unconfigured
X-Aicache-OS
X-Cache-FS-Status
X-B3-Trace-ID
Tube-Got-Eval
Tube-Get-Contents
X-Traceid
Geoip-Latitude
X-LB-ID
Click-Count-Action-Start
Click-Count-Error
X-Nc
X-Sigma-Backend
Proxy-Connection
X-Akamai-Pragma-Client-IP
Wpo-Cache-Message
X-Via-Popn
X-Wa
X-Via-Poph
Wpo-Cache-Status
X-Via-Popv
X-Lb-Cache
X-VCL-Version
X-Fastly-Backend-Reqs
X-User
X-Vary
CF-Cached-On
Server-Id
X-Men
On-Server
Cache
V-Age
X-UA
X-Ha-Backend
Ohc-Cache-HIT
X-Dw-Trace-Id
X-TT-LOGID
Ngx-Var-Key
X-CUA
MIME-Version
X-Acquia-Purge-Tags
X-Acquia-Site
X-Via-Ucdn
X-Gamma-Serve
X-Scheme
X-Lb-Nocache
PICS-Label
X-GoCache-CacheStatus
X-GeoIP-City
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-EC-Lua
X-Provided-By
X-Iplb-Request-Id
X-TX-ID
Yjs-Id
X-Iplb-Instance
Mime-Version
X-RAMCache
X-Vc
Vha6-Origin
X-Cached-Since
X-Snapshot-Date
X-Fastly-Cache-Hits
CACHE-MISS-TO-ORIGIN
Inserted-Into-Cache-At
X-ElasticPress-Query
X-Litespeed-Cache-Control
X-Cdn-Cache-Status
X-CF-Cache-Header-Cache-Control
X-CF-Cache-Header-Vary
Cneonction
X-Miniprofiler-Ids
Ngx
Log-Origin
X-Udemy-Cache-App-Namespace