Threat Level: green Handler on Duty: Yee Ching Tok

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
X-Frame-Options
Expires
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Accept-CH
Last-Modified
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
X-XSS-Protection
X-Cache
X-Powered-By
Via
Pragma
CF-RAY
Age
Content-Security-Policy
Report-To
Alt-Svc
NEL
Referrer-Policy
Access-Control-Allow-Origin
X-Amz-Cf-Pop
X-Amz-Cf-Id
Content-Language
X-Cache-Hits
P3P
X-UA-Compatible
X-Served-By
X-Download-Options
X-Xss-Protection
X-Request-Id
X-Timer
CF-Ray
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
X-Permitted-Cross-Domain-Policies
Access-Control-Allow-Credentials
X-DNS-Prefetch-Control
Content-Security-Policy-Report-Only
Accept-CH-Lifetime
X-AspNet-Version
X-Runtime
Permissions-Policy
X-Drupal-Cache
Server-Timing
X-Envoy-Upstream-Service-Time
X-Generator
X-FRAME-OPTIONS
X-Cache-Status
X-Ua-Compatible
X-Cacheable
X-CONTENT-TYPE-OPTIONS
X-Iinfo
X-Drupal-Dynamic-Cache
Accept-Ch
Timing-Allow-Origin
X-XSS-PROTECTION
Feature-Policy
X-Content-Security-Policy
Xkey
Upgrade
Access-Control-Expose-Headers
X-CDN
Content-Encoding
Status
X-AspNetMvc-Version
Access-Control-Max-Age
X-Amz-Request-Id
X-Amz-Id-2
Host-Header
X-Age
Request-Context
X-Backend
Cf-Edge-Cache
X-Amz-Version-Id
X-Hacker
X-Robots-Tag
Keep-Alive
Cf-Apo-Via
X-Via
X-Turbo-Charged-By
CONTENT-SECURITY-POLICY
X-Vhost
X-AH-Environment
X-Rq
X-Server
X-Dispatcher
X-Request-ID
X-Cache-Group
X-Proxy-Cache
X-Ws-Request-Id
EagleId
X-UA-Device
X-Varnish-Cache
X-Litespeed-Cache
Pantheon-Trace-Id
Grace
X-WebKit-CSP
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Server-Powered-By
X-OneAgent-JS-Injection
X-Pingback
X-Page-Speed
Allow
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Swift-CacheTime
X-Swift-SaveTime
X-Cache-Lookup
X-Dns-Prefetch-Control
X-Device
X-FTR-Request-ID
Ali-Swift-Global-Savetime
X-Node
X-Host
EagleEye-TraceId
X-Backend-Server
X-Server-Id
X-Country-Code
Surrogate-Control
X-Cloud-Trace-Context
P3p
Cf-Railgun
X-Ruxit-JS-Agent
X-Readtime
X-Akam-SW-Version
X-HW
X-Response-Time
Cache-Tag
X-Amz-Server-Side-Encryption
Accept-Ch-Lifetime
X-Ua-Device
Content-Location
X-Content-Type
X-LiteSpeed-Cache
Cross-Origin-Opener-Policy
X-Nginx-Cache-Status
X-Nginx-Upstream-Cache-Status
Request-Id
X-Rack-Cache
X-Trace
X-Application-Context
X-Element-Page-Cache
Service-Worker-Allowed
X-D2id
X-TraceId
Fastly-Restarts
X-Oneagent-Js-Injection
X-Nf-Request-Id
X-Times
X-PC
X-TtlSet
X-Vname
Rating
X-Navigation-Version
X-Clacks-Overhead
X-Cnection
X-Country
X-Mcache
X-Edge
X-Midtier
X-Vcap-Request-Id
X-Browser-Type
Origin-Trial
X-FTR-Backend
X-Country-Code-Real
X-FTR-Backend-Server
X-FTR-Cache-Status
X-FTR-Balancer
Edge-Control
X-FTR-Expires
X-ESI
X-Cache-TTL
X-Url
Surrogate-Key
X-NWS-LOG-UUID
X-Kinja-Build
X-Kinja
X-Kinja-Revision
X-Cdn-Fetch
X-GoogleNews-Bot
X-FastCGI-Cache
X-Exp-Variant
X-Kinja-Server
X-Exp-Id
X-Powered-By-Plesk
X-Ac
X-Abt-Application-Version
X-Upstream
X-Mod-Pagespeed
X-Amz-Rid
X-ECACHE
Verso
X-B3-TraceId
X-ORACLE-DMS-RID
X-Request-Device-Id
X-Language
X-MS-InvokeApp
Pinterest-Version
Pinterest-Generated-By
Nginx-Cache
X-Pinterest-Rid
X-GitHub-Request-Id
Pagespeed
Display
X-Sol
X-Middleton-Display
S
X-Kraken-Loop-Name
X-Amzn-Trace-Id
Akamai-GRN
X-Server-Lifecycle-Phase
X-PDP-UNCACHING-HASH
X-Erf-Bev-Bev
X-Instrumentation
X-Erf-Bev-Bev-Is-Generated
X-Meli-Trace-Platform
X-Meli-Trace-Bu
X-Meli-Trace-Site
X-Envoy-Decorator-Operation
X-T
AR-ATIME
SPIisLatency
SPRequestGuid
X-SharePointHealthScore
AR-Request-ID
AR-PoweredBy
SPRequestDuration
Response
X-Middleton-Response
Edge-Cache-Tag
X-Distributor
X-Ruxit-Js-Agent
X-Goog-Hash
X-Ratelimit-Limit
X-Resp-Is-Stale
X-Ser
X-Kinsta-Cache
X-Edge-Location-Klb
X-ARC
Access-Control-Request-Method
X-NGENIX-Cache
Front-End-Https
X-Shield-Request-Id
X-Request-Received
X-Request-Processing-Time
X-Dw-Request-Base-Id
RTSS
X-Client-IP
X-Ezoic-Cdn
X-Content-Digest
X-Recruiting
X-Cache-Key
X-Varnish-TTL
Cache-Status
Ar-SID
X-Version
YJS-ID
X-Mg-S
X-Ttl
X-Amz-Replication-Status
X-Newrelic-App-Data
X-Ismobilevalue
Public-Key-Pins
X-HS-Hub-Id
X-HS-Content-Id
X-Powered-CMS
TP-Cache
X-HS-Cache-Config
X-Accel-Expires
Fastcgi-Cache
X-MSEdge-Ref
AR-CACHE
X-Fastly-Request-ID
Cache-Tags
X-Correlation-Id
X-Cached
X-Cluster-Name
Arr-Disable-Session-Affinity
Realpath
X-Id
X-Content-Security-Policy-Report-Only
X-Daa-Tunnel
Content-MD5
X-Server-Name
X-RateLimit-Remaining
X-HS-Combine-CSS
X-Azure-Ref
X-HP-Webp
X-HP-Trace-Id
X-Jurisdiction
X-Ua-Browser
Payment
X-Cambria-Cache-Control
X-DIS-Request-ID
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-TTL
X-Xrds-Location
X-HS-Prerendered
X-HS-CF-Cache-Status
X-GUploader-UploadID
MicrosoftSharePointTeamServices
X-Forwarded-For
X-Amz-Apigw-Id
X-Amzn-RequestId
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Content-Disposition
X-Px
X-Protected-By
Count-Hit
X-Ratelimit-Reset
X-Activity-Id
X-AppVersion
X-Az
X-Unique-Id
X-Page-Id
X-Origin-Server
X-Rid
X-Logged-In
Cross-Origin-Resource-Policy
Accept-Charset
Cleartype
X-Amz-Meta-S3cmd-Attrs
X-TEC-API-ORIGIN
X-Proxy
X-Git-Hash
X-TEC-API-ROOT
X-TEC-API-VERSION
Cross-Origin-Embedder-Policy
X-Request-Handler-Origin-Region
X-Microsite
X-FB-Debug
X-VARITI-CCR
X-Www-Served-By
X-Hits
X-Ratelimit-Remaining
Version
X-Load-Cache
X-ORACLE-DMS-ECID
X-Geo-Country
X-LLID
X-Goog-Metageneration
X-Forwarded-Proto
X-Template
X-COUNTRY
X-Varnish-Backend
X-Upgrade-Enabled
X-PressLabs-Stats
X-WebKit-CSP-Report-Only
Server-Node
AKAMAI-GRN
X-B3-Sampled
X-App-Server
X-Requestid
Server-Name
Healthy
X-Hostname
X-Content-Options
Access-Control-Allow-Method
X-Frontend
X-TT
X-B
Viewport
X-RemovedCookies
X-Varnish-Grace
X-Grace
X-ProcessESI
Section-Io-Cache
X-Device-Type
X-Fb-Rlafr
X-Request-Guid
Fastly-SWR
Fastly-SIE
Alternate-Protocol
X-Varnish-Server
X-Cache-Age
X-Contextid
X-B3-TraceId-Primal
Mrf-Cache-Status
MRF-Tech
X-CSRF-Token
X-Status
DC
X-Hl-Ver
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Goog-Generation
X-SERVER-NAME
X-Amzn-Remapped-Content-Length
X-Magnolia-Registration
Upgrade-Insecure-Requests
X-EdgeConnect-Cache-Status
TCN
X-CST
MS-Author-Via
X-App-Version
Frame-Options
Host
X-Cache-Control
X-Yandex-Req-Id
Retry-After
X-Varnish-Ttl
X-Oracle-Dms-Ecid
Xet-Cookie
X-Origin-CC
X-Origin-TTL
X-Type
X-Response-Served-From
X-Revision
X-Original-Request-Id
VIX-Pulpo-Node
X-G
X-ServerID
VIX-Pulpo-Upstream-Status
X-AB
SD-X-WS
X-Debug
X-Mobile
X-Buckets
X-INCAP-ABP
X-Seen-By
X-Instance
X-N
X-Adobe-Content
X-Adobe-Loc
X-UUID
X-Backend-Name
X-Akamai-Edgescape
X-Yottaa-Optimizations
X-Tumblr-Pixel-1
X-Debug-IsPreview
X-Debug-IsConnected
X-Is-Bot
X-Lambda-Id
X-Rendered-As
X-NYM-Debug-Backend
X-Cache-Status-Check
X-Akamai-Request-ID2
Cache
Access-Control-Request-Headers
Cross-Origin-Embedder-Policy-Report-Only
Cross-Origin-Opener-Policy-Report-Only
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Tumblr-User
X-Yottaa-Metrics
X-Content-Powered-By
X-WP-CF-Super-Cache-Cache-Control
Section-Io-Id
X-Framework
X-Trace-Id
X-Tt-Trace-Host
NGB
X-Tt-Trace-Tag
Ms-Operation-Id
MS-CV
X-Mg-Request-UUID
X-WP-CF-Super-Cache
X-Server-W
X-RTag
X-RM-Cache-TTL
Charset
X-Storage
X-Dc
YJS-CacheStatus
Amp-Access-Control-Allow-Source-Origin
X-Fastcgi-Cache
X-Cacheable-TTL
Paypal-Debug-Id
Selected-Fe
X-Proxy-Build
Webserver
X-Timing-Wait
X-B3-SpanId
X-BYPASS-REASON
Filterid
X-ProxyCache-Status
X-VC-Cache
X-ProxyCache-Key
Accept-Language
X-Ms-Version
X-Ms-Request-Id
Onion-Location
X-Vcl-Version
X-DataDome
X-Cache-Time
Refresh
X-User-Agent
Front
SRV
X-Cache-Hit
X-F-Cache
X-VC
X-Time
X-Tec-Api-Version
Apigw-Requestid
X-Tec-Api-Root
X-Tec-Api-Origin
X-Real-IP
X-Node-Name
X-Region
X-Server-ID
X-Origin-Cache
Priority
Liferay-Portal
X-L-Path
X-Request-Platform
GEO-INFO
X-Environment-Context
X-Request-Bu
X-Request-Site
X-Mly-Id
X-Service
X-CCDN-CacheTTL
X-CCDN-Origin-Time
X-Hcs-Proxy-Type
X-HTML-Minification-Powered-By
X-Mode
X-Rocket-Nginx-Serving-Static
X-Origin
X-CLOUD-TRACE-CONTEXT
X-LB-Cache
X-Rule
X-Webkit-Csp
CDN-RequestId
X-Optimistic-Header
X-VCT
Backend
X-Rn-Rsrv
X-Drupal-Cache-Tags
X-Tt-Logid
X-Rewrite-Enabled
Country
X-SaId
Meta-Geo
X-Tb
X-JoinUs
X-UPSTREAM-Address
X-IPS-LoggedIn
X-Api-Version
X-Is-Desktop
X-Handled-By
X-Is-Mobile
X-Browser-Name
X-Adobe-Source
X-Geo-Region
X-Is-Tablet
X-Cache-Expired-At
X-Is-Modern-Browser
X-Is-Supported-Browser
X-Wix-Request-Id
X-Is-Mobile-Only
X-Tcp-Rtt
X-Datadog-Parent-Id
X-Datadog-Sampling-Priority
X-Datadog-Trace-Id
X-Datadog-Sampled
X-Whom
X-Web-Node
X-Provided-By
AMP-Access-Control-Allow-Source-Origin
X-Pass-Why
Cross-Origin-Window-Policy
Mn-Server-Ip
X-Generation-Time
X-HITS
TWC-Connection-Speed
X-Cloudmap
X-WP-CF-Super-Cache-Active
X-Storefront-Renderer-Rendered
Uber-Trace-Id
X-Detected-As
X-Connection-Hash
Webcakes-Region
Web-Mar-Node
Webcakes-App-Name
X-S
Webcakes-App-Version
X-RCS-CacheZone
X-Alternate-Cache-Key
TWC-GeoIP-DMA
X-Platform
TWC-Device-Class
X-Shopify-Stage
Url
X-Extlb
X-Cache-Action
X-Servername
X-Cdn-Origin
X-FB-TRIP-ID
TWC-GeoIP-Country
X-Proxied
X-Tncms
X-Httpd
X-Varnish-Beresp-Grace
OT-Force-Account-Verify
X-Origin-Hint
TWC-GeoIP-Region
X-Routing-Service
TWC-GeoIP-LatLong
X-Loop
X-Origin-Date
TWC-Locale-Group
X-Hit
Fastcgi-Useragent
ServerID
X-RateLimit-Limit-Second
Expiry
X-RateLimit-Remaining-Second
Property-Id
X-Proxy-Cache-Info
X-Vcache
X-Forwarded-Host
X-Zipkin-Id
TWC-Privacy
TWC-GeoIP-City
X-Skip-Cache
X-Tumblr-Pixel-2
X-Soup
X-Redis-Cache
X-MP-GENERATED-AT
X-Tumblr-Pixel-3
X-Urbn-Context-Path
Node
X-Cms-Context
X-Urbn-Site-Id
X-Logging-Id
X-Locale
X-Cache-Host
X-Cache-Debug
X-Auth-Group-Type
X-Cluster
X-Director
X-Hosted-By
X-Format
X-Fetched-On
X-App-Environment
DB-Nickname
Countrycode
Protected
Environment
Cache-Hits
Locale
Atl-Traceid
ServedBy
X-FW-Hash
X-FW-Server
X-PHP-Host
X-Labrador-Cache-Channel
X-FW-Type
X-Debug-Info
X-FW-Version
X-Cluster-Node
X-Restarts
X-Edge-Location
X-Say-Cacheable
X-XRDS-Location
X-Endurance-Cache-Level
X-FW-Dynamic
X-FW-Static
X-FW-Serve
X-Served-From
X-SayCDN-TTL
X-Scope-Id
X-Say-TTL
X-IPLB-Instance
X-IPLB-Request-ID
X-Drupal-Cache-Contexts
Filters
X-CDN-Forward
X-R9-Blue-Green-Version
LB
Xserver
X-Client-Ip
X-CDN-Cache-Status
WPO-Cache-Status
X-GEO
X-Ua
Request-ID
X-ECache
X-Presslabs-Stats
X-No-Session
X-NWS-UUID-VERIFY
X-WP-CF-Super-Cache-Cookies-Bypass
X-ShopId
X-Sorting-Hat-ShopId
X-ShardId
X-Varnish-Age
X-Sorting-Hat-PodId
X-Varnish-Beresp-Ttl
X-Varnish-Cache-Hits
X-Generated-By
X-Clientip
X-Lagoon
X-Signature
Cache-Tv-Group
X-SRCache-Key
X-B-Cache
Expect-Staple
X-Upstream-Ct
X-Upstream-Ht
X-Cache-FS-Status
Referer-Policy
We-Hiring
Mail-Subject
CloudFront-Viewer-Country
X-TA-CDN-Provider
X-PHP-Backend
X-Azure-Ref-OriginShield
X-Cache-Rule
X-Cache-Operation
X-B3-Traceid
X-SRV
X-IsAdmin
X-UA
X-Webstats-RespID
X-Cs
X-FORWARDED-FOR
X-Site-Version
From-Origin
Location
X-Worker
X-Auto-Login
Fl-Custom-Application
X-Bc-Bl
Cache-Provider
X-Server-IP
X-LSADC-Cache
X-Vtex-Remote-Cache
Xc-Version
Host-ID
DCR-Processing-Time-Ms
Source
S-Rt
Origin-Agent-Cluster
Candidate-Md5Url
X-Vdms-Version
DCR-Decision-By
X-Tb-Optimization-Total-Bytes-Saved
MD5-Digest
X-B-Cookie
X-Ig-Origin-Region
X-GeoCountry
X-GeoCode
X-Application
X-ApacheServer
X-A-Dcw
X-A-Wwc
X-Aed
X-BCube-Filmed-By
X-Bl-Debug
X-Developer
X-Destination
X-D
X-Ec-Fail
X-Ec-GeoHdr
X-Cache-NE
X-External-Request-Id
X-Conf
X-A-Dam
X-Ig-Push-State
X-PERF
N-Cache
Ngx.Var.Host
Meta-Geo-Continent
X-Content-Age
X-S-Cookie
X-Rojux
Lang
Origin
X-Org
X-Loc
X-A
X-A-Ccd
X-ND-Cache
Sslversion
Pragrma
Redirect-Candidate
Rendered-Blocks
X-ScT
X-A-Dgt
Mime-Version
X-VWS-Id
X-AWS-Id
WPO-Cache-Message
X-LJ-Flow-ID
X-Accel-Version
Sid
X-Xfnlog-Site
X-CGP
X-Cms-Device
X-Contensis-Viewer-Groups
X-CacheTTL
X-Cache-Aspx
X-Bug-Bounty
X-AK-Request-ID
X-Core-Value
X-DefElseHash
X-Ee-Request-Date
X-Ee-Request-Id
X-Epic-Correlation-Id
X-Eu-Site
X-Ee-Origin
X-Ee-Generated-By
X-CUA
X-Aicache-OS
X-DefHash
X-Depends
X-Csrf-Jwt
Wxu-Next-Region
Origin-Site
Powered-By
X-Litespeed-Cache-Control
RNT-Machine
Odigeo-Trace-Id
NM-Fastcgi-Cache
Ha-Gx-Prefs
IsBot
L5d-Success-Class
Log-Origin
RNT-Time
Server-Host
Wxu-Next-Commit
Wxu-Next-Hostname
X-Fastly-Backend
X-Access
Web-Mar-Region
Vix-Hermes-Req-Id
ServerName
Store-Cloud-Cache
Time-Cloud-Cache
X-Action
X-Gamma-Serve
X-Slack-Backend
X-Slack-Shared-Secret-Outcome
X-Sn-Servicetimems
X-Up
X-SIPLIST1
X-Sigma-Backend
X-Save-Cache
X-SD-PageType
X-Section
X-Sigma
X-V-Cache
X-Varnish-Authentication
X-Varnish-Remaining-TTL
X-Vary-Devices
X-VG-TLSProxy
X-VG-WebCache
X-Varnish-Hostname
X-Varnish-Director
X-Varnish-Beresp-Status
X-Varnish-CookieHashed-On
X-Varnish-CookieINHashed-On
X-Rocket-Build-Number
X-Req
X-GeoIP-Country-Code
X-GeoIP-Region-Code
X-GoCache-CacheStatus
X-Hash
X-GeoIP-City
Gh-Request-Id
X-Fmm-Version
X-Forwarded-Site
X-From
X-HS-Content-Campaign-Id
X-Internal-TTL
X-Old-Content-Length
X-Origin-Expires
X-PAYTM-SRV-ID
X-Policy
X-Node-Id
X-NMSegId
X-Men
X-Micro-Cache
X-Mvc-Supplant-Cachable
X-FC-Vary-Parameters
X-Dispatcher-Server
CDN-RequestPullSuccess
Load-Balancing
Cdnsip
CDN-Cache
CDN-Uid
Apple-News-Services-Request-Url
X-VC-TTL
Cluster
Canary
Cdncip
CDN-CachedAt
CDN-RequestPullCode
CDN-EdgeStorageId
CDN-PullZone
CDN-RequestCountryCode
Country-Code
Gannett-Cam-Experience-Id
Apple-News-Services-Host
Apple-News-Services-Handled
Fastly-SSL
Apple-News-Services-Parsed-Url
X-Tx-Id
X-Cached-By
X-Parent-Response-Time
X-CACHE-AGE
Azure-Version
Azure-SlotName
X-Frame-Option
Azure-InstanceId
X-Esi-Check
Azure-RegionName
Azure-SiteName
X-Date
X-Cache-Id
Cdn-Host
X-Content-Length
X-Cache-Date
Cdn-Request-Time
X-Bip
X-Block-Status
CDCHOST
X-Gdpr
X-DPWN-IS-SECURE
X-Ec-Custom-Error
Cache-Contol
CacheControlHeader
X-Debug-Cache-Fetch
X-Debug-Cache-Store
X-Edge-Server
X-HN
X-Thinkindot-L3
X-UA-Device-Type
X-Uri
X-ZONE
X-Thinkindot-L1
X-Thanos
X-Sucuri-Cache
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
X-URL
X-VarnishDD-TTL
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-Via-Fastly
X-We-Are-Hiring
X-Vmg-Version
X-Vercel-Cache
X-Vercel-Id
X-Viewer-Country
X-Shield-Cache-Expires
X-SB
X-Ion-Healthy
X-Ion-Hop
X-Level-Front-Cache
X-Mvc-Supplant-OutputCached
X-Human
X-Hnp-Log
X-Generated-On
X-Gzip
X-BBC-Edge-Cache-Status
X-Nyt-Route
X-Op-Id-All
X-Render-Time
X-Reqid
X-Request-URI
X-Region-Sid
X-Pubstack
X-Origin-Time
X-Path
X-Proto
X-Gen-Mode
X-Jungle-Id
X-Accel-Expires-Debug
RewriteTeamHook
X-AB-Test
Content-Script-Type
X-Acquia-Purge-Cdn-Unconfigured
X-Akamai-Device-Characteristics
L
RewriteTestHook
TDXMobile
User-Cache-Control
Cmstype
V-Age
Content-Style-Type
Cmsid
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
DSUID
Req-Svc-Chain
X-App-Name
PFcat
Pics-Label
Fastly-Backend-Name
Nord-Request-ID
Origin-EX
X-Backend-Instance
Origin-CC
Machine
Platform
Producers
Release
X-Amz-Storage-Class
X-NF-Request-ID
X-NewRelic-App-Data
X-Moov-Xdn-Version
X-Proxied-Request
Fastly-GeoIP-CountryCode
Tube-Return
Tube-Got-Results
CF-IPCountry
X-Location
X-Moov-T
Cookie
Click-Count-Action-Start
Tube-Got-Eval
Tube-Get-Contents
Click-Count-Error
X-Moov-Xdn-Caching-Status
X-B3-Trace-ID
X-NGINX-Cache
C-Via
X-ElasticPress-Query
X-Pad
X-Fastly-Request-Id
X-Via-Popn
X-Via-Poph
X-Datadome
X-Debug-Service
X-Origin-Response-Time
X-Sucuri-ID
X-Via-Popv
X-Nginx-Cache-Key
XM
Fastly-Drupal-HTML
True-Client-Country-4JS
X-Varnish-Hits
X-AIR-PT
X-Srv
NGX
Server-Hostname
X-HA-Backend
Server-Ext
Sever-Int
X-Webkit-CSP
X-Refresh
AR-SID
Debug
Show-Do-Not-Sell-Link
Traceparent
X-Air-Pt
X-Ez-Minify-Html
X-APP
X-Cache-Backend
X-TH-Server
X-Servedbyhost
Server-ID
HostName
X-Nananana
X-DynaTrace-JS-Agent
X-Unity-Cache
X-LB-ID
GeoIp-Country-Code
GeoIP-Latitude
X-Fpc
WZWS-RAY
DataCenter
Product
HA-Ipaddr
Tcn
Cdn
Fastly-Drupal-Html
X-Amz-Meta-Cb-Modifiedtime
X-Zone
X-B3-Parentspanid
X-VCL-Version
X-Litespeed-Tag
X-Cdn-Forward
X-Wormhole-Sdk
X-Cache-VC
Lb
X-AC
X-CDN-Provider
X-Nc
X-Wa
X-Newrelic-Synthetics
X-GeoIP
X-Nginx-Cache
X-Source
SID
A
X-User
Xkey-La3
Serverhost
Edge-Cache
X-Proxy-Cache-La3
Xkeylog
XkeyR9
X-Proxy-CacheR9
X-Vc
CountryCode
X-TX-ID
X-Datacenter
Cs
NtCoent-Length
Resin-Trace
X-RateLimit-Limit
X-Request-Start
X-B3-Spanid
X-WA
Esi-Enabled
X-LB-NoCache
CDN
Sm-Log-Id
X-LiteSpeed-Tag
Cdn-Requestid
X-Service-Response-Time
Akamai-Mon-Iucid-Del
X-API-Version
X-LiteSpeed-Cache-Control
X-TT-LOGID
MIME-Version
X-Aspnet-Version
X-NC
X-ID
Wsr-Cache
X-Dynatrace-Js-Agent
X-HubSpot-Correlation-Id
X-VC-Age
X-Scheme
X-Lsadc-Cache
Content-Secure-Policy
X-TIM-N
X-Styx-Origin-Id
Proxy-Firewall
X-Udemy-Cache-App-Namespace
Uri
Datacenter
X-FPC
Cr
X-Styx-Info
X-HA-Application-Name
X-Html-Minification-Powered-By
X-HA-Device-Type
X-HA-Bot-Classification
Pramga
X-Lb-Id
X-Request-Host
X-Srcache-Fetch-Status
Geoip-Latitude
Hostname
X-Srcache-Store-Status
ServerHost
X-Ez-Minify-Js
X-TimeS
X-Var-Ttl
Server-Id
RATING
GeoIP-Country-Code
X-Via-JSL
X-NodeID
X-Fastly-Backend-Reqs
X-Pool
Yjs-Id
Cloudfront-Viewer-Country
From-Cache
Srv
X-Akamai-Pragma-Client-IP
X-ServedByHost
X-Stale
W
X-Lb-Nocache
X-Wp-Cf-Super-Cache-Cache-Control
Surrogated-Key
X-Wp-Cf-Super-Cache
X-Oracle-DMS-ECID
X-Aspnetmvc-Version
X-RequestId
X-App
X-DynaTrace
X-MSEdge-Flight
X-Cache-Grace
X-CS
X-CACHE-KEY
X-Vgn-Hpd-Reason
X-Swift-Error
X-MSEdge-Features
X-NODE
T-Server
X-Sorting-Hat-Podid
X-Air-Trace-Id
X-Air-Source
X-Shopid
X-Wp-Cf-Super-Cache-Active
X-Shardid
X-Wp-Cf-Super-Cache-Cookies-Bypass
X-Sorting-Hat-Shopid
X-LAGOON
X-Varnish-Beresp-TTL
X-Air-Hostname
Ohc-Cache-HIT
X-ByteArk-Cache
X-DataCenter
X-Correlation-ID
X-Key
X-VServer
Yak-Timeinfo
X-Proxy-Cache-LA2
Ohc-File-Size
X-ByteArk-ReqID
X-Ssense-Shipping-Surcharge-Enabled
X-Ramcache
X-Ssense-Gql
Edge-Copy-Time
Ngx
X-Elasticpress-Query
X-Via-CDN
X-Jobs
CF-Cached-On
X-Ha-Backend
Cl-Cache
X-Webkit-Csp-Report-Only
N1-Cache
X-Via-SSL
X-Cdn-Cache-Status
Req-ID
X-Via-Edge
X-Geo
X-CSRF-TOKEN
X-Sucuri-Id
X-PageType
X-Web-Server
WebServer
X-Via-PopH
X-Via-PopN
X-Geolocation
X-DC
X-Check-Cacheable
X-Zen-Fury
X-Via-PopV
Akamai-X-True-TTL
X-ATG-Version
X-Th-Server
X-Iplb-Instance
X-Iplb-Request-Id
Cf-Ipcountry
X-Limited
FSS-Cache
Warning
True-Client-IP
My-App
X-MiniProfiler-Ids
X-Beacon
X-Serial
Host-Name
X-Env
X-Request-Url
X-Mg-Cache
User-Agent
Xkey-G-Jp
X-Fastly-Cache-Status
WP-Super-Cache