Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
X-Powered-By
Pragma
X-XSS-Protection
X-Cache
CF-RAY
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
Alt-Svc
P3P
X-Cache-Hits
X-UA-Compatible
X-Xss-Protection
CF-Ray
X-Served-By
X-Download-Options
X-Timer
X-Request-Id
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-FRAME-OPTIONS
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Generator
X-Cache-Status
X-Check
X-Cacheable
X-Envoy-Upstream-Service-Time
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-Iinfo
X-Request-ID
X-Dns-Prefetch-Control
X-Drupal-Dynamic-Cache
Feature-Policy
X-Content-Security-Policy
X-XSS-PROTECTION
Content-Encoding
Access-Control-Expose-Headers
Server-Timing
Upgrade
X-CDN
Status
X-AspNetMvc-Version
Access-Control-Max-Age
X-Amz-Request-Id
Request-Context
X-Amz-Id-2
X-Via
X-Turbo-Charged-By
X-Backend
X-AH-Environment
X-Cache-Group
X-Robots-Tag
Cf-Edge-Cache
Keep-Alive
Host-Header
X-Hacker
X-Proxy-Cache
X-UA-Device
X-Server
X-Vhost
X-Rq
X-Server-Powered-By
Allow
X-Age
X-Ws-Request-Id
X-Varnish-Cache
X-Dispatcher
X-Amz-Version-Id
EagleId
P3p
Nel
Grace
X-LiteSpeed-Cache
Cf-Apo-Via
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
Cf-Railgun
X-Page-Speed
X-Device
EagleEye-TraceId
X-OneAgent-JS-Injection
X-Aws-Lambda-Call-Status
X-Swift-CacheTime
X-Swift-SaveTime
X-Pingback
Ali-Swift-Global-Savetime
X-Host
X-Node
Accept-CH
X-CST
X-Backend-Server
X-WebKit-CSP
X-Cache-Lookup
X-Server-Id
Surrogate-Control
X-Nginx-Cache-Status
X-Readtime
Permissions-Policy
X-Akam-SW-Version
X-Nginx-Upstream-Cache-Status
Request-Id
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Application-Context
X-Content-Security-Policy-Report-Only
Accept-CH-Lifetime
X-Cloud-Trace-Context
X-Ua-Compatible
X-Trace
X-HW
X-Response-Time
X-Edge
Content-Location
X-Clacks-Overhead
Xkey
X-Mod-Pagespeed
X-Ruxit-JS-Agent
Rating
X-Midtier
Accept-Ch
X-Amz-Server-Side-Encryption
X-ESI
X-ECACHE
Accept-Ch-Lifetime
X-Url
X-Mcache
X-Litespeed-Cache
X-Upstream
X-Country
Cache-Tag
X-Vcap-Request-Id
X-D2id
X-MS-InvokeApp
X-Rack-Cache
Verso
X-Element-Page-Cache
X-Kinja
X-Cdn-Fetch
X-Powered-By-Plesk
X-Kinja-Server
X-Use-Magma
X-Kinja-Build
X-Kinja-Revision
X-Exp-Variant
X-Exp-Id
X-GoogleNews-Bot
Edge-Control
X-WebKit-CSP-Report-Only
X-PC
X-TtlSet
X-Vname
X-Ruxit-Js-Agent
RTSS
X-Cache-TTL
Fastly-Restarts
X-Ac
X-VARITI-CCR
Origin-Trial
X-Country-Code
X-Navigation-Version
Service-Worker-Allowed
X-Goog-Hash
X-Abt-Application-Version
X-Varnish-TTL
X-Cached
X-GitHub-Request-Id
X-Aspnetmvc-Version
X-Oneagent-Js-Injection
X-Browser-Type
X-Amz-Rid
X-Webkit-CSP
X-Middleton-Display
Display
X-Sol
Pagespeed
Cross-Origin-Opener-Policy
X-Dw-Request-Base-Id
SPRequestGuid
X-SharePointHealthScore
X-Server-Name
X-Amzn-Trace-Id
X-Mg-S
X-Ttl
X-Kinja-CCPA
X-B3-TraceId
X-Powered-CMS
X-Content-Type
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Instrumentation
Arr-Disable-Session-Affinity
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
AR-PoweredBy
AR-Request-ID
AR-ATIME
X-Middleton-Response
Response
AR-SID
SPRequestDuration
SPIisLatency
X-NWS-LOG-UUID
X-Cache-Key
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-Times
X-NF-Request-ID
Pinterest-Version
Pinterest-Generated-By
X-Pinterest-Rid
X-Version
X-Jurisdiction
X-Fastly-Request-ID
X-HP-Webp
X-HP-Trace-Id
X-SRCache-Store-Status
X-SRCache-Fetch-Status
AR-CACHE
X-Cnection
X-Accel-Expires
X-T
Cache-Tags
Nginx-Cache
Cache-Status
X-RateLimit-Remaining
X-FastCGI-Cache
Front-End-Https
X-Ser
Edge-Cache-Tag
X-MSEdge-Ref
X-Hits
X-B3-Traceid
X-Px
X-Client-IP
Public-Key-Pins
X-RateLimit-Limit
X-Recruiting
Mrf-Cache-Status
X-B3-TraceId-Primal
MRF-Tech
Payment
X-LLID
X-Request-Processing-Time
X-Frontend
X-Request-Received
X-Ua-Browser
Server-Node
X-Server-ID
X-Shield-Request-Id
S
X-DIS-Request-ID
X-Fastcgi-Cache
X-Goog-Metageneration
X-GUploader-UploadID
TP-Cache
Content-MD5
Access-Control-Request-Method
X-Amzn-RequestId
X-Amz-Apigw-Id
X-Erf-Stays-Pdp-Viaduct-Migration-Web
MicrosoftSharePointTeamServices
X-TTL
X-Content-Digest
X-HS-Cache-Config
X-HS-Hub-Id
X-HS-Combine-CSS
X-HS-Content-Id
X-PressLabs-Stats
X-Microsite
X-Request-Handler-Origin-Region
X-Protected-By
X-Distributor
X-LB-Cache
Realpath
X-FB-Debug
X-Page-Id
Access-Control-Allow-Method
Accept-Charset
Fastcgi-Cache
X-Cluster-Name
TP-L2-Cache
X-Geo-Country
X-Forwarded-For
X-Rid
X-Ezoic-Cdn
X-Webkit-Csp
X-Hostname
X-Aspnet-Version
X-B3-Sampled
X-Daa-Tunnel
X-Ua-Device
X-Seen-By
X-Goog-Stored-Content-Length
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
Cleartype
Cross-Origin-Resource-Policy
X-Newrelic-App-Data
X-Correlation-Id
Referer-Policy
TCN
X-Ratelimit-Remaining
X-Mobile
Count-Hit
DC
X-Content-Options
X-Envoy-Decorator-Operation
X-TEC-API-VERSION
X-Varnish-Backend
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-App-Server
X-Logged-In
X-Origin-Cache
X-Hosted-By
X-Debug-Info
X-Contextid
X-Varnish-Grace
X-Git-Hash
X-IPS-LoggedIn
X-Route-Name
X-Is-Crawler
X-Providence-Cookie
X-Aspnet-Duration-Ms
X-Flags
X-Request-Guid
X-Grace
X-Fb-Rlafr
X-App-Environment
X-Amz-Replication-Status
X-Edge-Location-Klb
X-Kinsta-Cache
X-Client-Ip
Surrogate-Key
X-Revision
X-Azure-Ref
Frame-Options
X-TT
X-Ratelimit-Limit
X-Amz-Meta-S3cmd-Attrs
X-Forwarded-Proto
X-Origin-Server
X-RateLimit-Reset
Retry-After
X-F-Cache
X-XRDS-Location
X-Wix-Request-Id
WPO-Cache-Message
WPO-Cache-Status
Alternate-Protocol
Healthy
X-Magnolia-Registration
X-Id
X-Whom
Section-Io-Cache
Charset
X-Akamai-Edgescape
X-COUNTRY
X-Backend-Name
Viewport
MS-Author-Via
X-Proxy-Cache-Info
X-App-Version
Paypal-Debug-Id
X-B
SRV
X-Activity-Id
X-AppVersion
X-Az
Amp-Access-Control-Allow-Source-Origin
X-Language
ServerID
X-Webkit-CSP-Report-Only
X-Www-Served-By
X-N
X-DataDome
SD-X-WS
VIX-Pulpo-Node
X-Response-Served-From
X-Cache-Rule
VIX-Pulpo-Upstream-Status
X-ARC
Host
X-Http-Reason
X-Original-Request-Id
Akamai-GRN
X-Instance
Country
X-Edge-Location
X-Rule
X-Akamai-Request-ID2
X-Cache-Grace
X-Rocket-Nginx-Serving-Static
X-UUID
X-Varnish-Age
Filterid
X-Varnish-Server
X-User-Agent
X-Status
Protected
Front
X-FW-Serve
X-FW-Dynamic
X-Framework
Fastly-SWR
X-FW-Server
Fastly-SIE
X-FW-Hash
X-Datadog-Sampling-Priority
X-Cacheable-TTL
From-Origin
X-Datadog-Trace-Id
X-FW-Static
X-Datadog-Parent-Id
X-Environment-Context
X-FW-Version
X-Jobs
X-Is-Bot
X-L-Path
X-FW-Type
X-Rendered-As
X-Region
X-Unique-Id
X-Page-View
X-EdgeConnect-Cache-Status
X-Cache-Time
X-Type
Access-Control-Request-Headers
Server-Name
X-Adobe-Content
X-Tumblr-Pixel
X-Load-Cache
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Tumblr-Pixel-0
X-Tumblr-Pixel-1
X-Tumblr-User
X-Adobe-Loc
X-ProcessESI
X-G
X-RemovedCookies
X-Trace-Id
X-Proxy
X-Vcache
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Cache-Control
X-Xrds-Location
X-Datadog-Sampled
X-Mg-Request-UUID
X-ECache
X-Amzn-Remapped-Content-Length
X-Debug-IsConnected
X-Debug-IsPreview
X-CDN-Forward
Refresh
X-URL
Content-Disposition
X-B-Cache
X-Time
X-Signature
X-Cache-Age
X-Erf-Web-Scheduler
X-Source
X-Drupal-Cache-Tags
Backend
X-WP-CF-Super-Cache
Accept-Language
X-WP-CF-Super-Cache-Cache-Control
Xet-Cookie
X-DynaTrace
X-Generated-By
X-HTML-Minification-Powered-By
CF-IPCountry
Countrycode
Version
X-Nginx-Cache
Webserver
X-DynaTrace-JS-Agent
X-Servername
X-Httpd
X-Tec-Api-Origin
X-Tec-Api-Root
X-Tec-Api-Version
Url
X-Tt-Trace-Host
X-Mode
X-Tt-Trace-Tag
Xserver
X-Nf-Request-Id
X-Template
GEO-INFO
X-Storage
X-NYM-Debug-Backend
X-Oracle-Dms-Ecid
X-Content-Age
X-Device-Type
X-Content-Powered-By
X-Oracle-Dms-Rid
X-GeoCountry
X-JoinUs
X-GeoCode
X-SayCDN-TTL
X-SaId
X-Director
X-Cache-Action
X-Say-Cacheable
X-Say-TTL
Azure-InstanceId
X-LAGOON
X-Cache-Operation
OT-Force-Account-Verify
X-Varnish-Cache-Hits
X-Rewrite-Enabled
Locale
X-UPSTREAM-Address
S-Rt
X-Urbn-Context-Path
X-Urbn-Site-Id
Load-Balancing
Filters
Meta-Geo
Azure-Version
Onion-Location
Azure-SiteName
X-Tb
Azure-RegionName
X-XRDS-LOCATION
Azure-SlotName
X-Cluster-Node
X-Proto
X-ServerID
X-MCACHE
X-Generation-Time
X-Container-Uri
X-VC-Cache
X-Soup
X-Labrador-Cache-Channel
X-Forwarded-Host
X-PHP-Host
X-Git-Commit
X-Varnish-Hostname
Uber-Trace-Id
X-RM-Cache-TTL
Web-Mar-Node
X-Adobe-Source
X-LSADC-Cache
X-Cache-Server
X-Ms-Request-Id
X-Sql-Duration-Ms
X-Served-From
X-Sql-Count
X-Upgrade-Enabled
X-VCT
X-Detected-As
X-Ms-Version
X-Tt-Logid
X-Skip-Cache
X-Proxied
X-RCS-CacheZone
X-Tumblr-Pixel-3
X-Lambda-Id
X-Zen-Fury
Mn-Server-Ip
Node
Property-Id
X-Rn-Rsrv
X-Tumblr-Pixel-2
TWC-Device-Class
Webcakes-App-Name
X-Logging-Id
X-Routing-Service
Webcakes-App-Version
Webcakes-Region
X-Extlb
X-FB-TRIP-ID
X-Zipkin-Id
TWC-GeoIP-Country
X-Debug
X-Origin-Hint
TWC-Locale-Group
X-Format
TWC-Privacy
TWC-Connection-Speed
TWC-GeoIP-LatLong
DB-Nickname
X-Timing-Wait
Selected-Fe
X-Tncms
X-Sucuri-Cache
X-Uri
X-Proxy-Build
X-R9-Blue-Green-Version
X-Loop
X-Fetched-On
Fastcgi-Useragent
X-CCDN-CacheTTL
X-Cache-Hit
X-B3-SpanId
X-Sucuri-ID
X-Hcs-Proxy-Type
X-CCDN-Origin-Time
X-Drupal-Cache-Contexts
Source
X-ID
X-Ua
X-Endurance-Cache-Level
Cross-Origin-Window-Policy
CDN-RequestId
X-Redis-Cache
Liferay-Portal
X-Srv
X-MP-GENERATED-AT
X-TimeS
X-CACHE-AGE
Fastly-Drupal-HTML
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
Section-Io-Origin-Status
Section-Io-Id
X-Origin-Date
X-Varnish-Hits
X-Pass-Why
X-Cache-Expired-At
X-S
Upgrade-Insecure-Requests
X-Akamai-Transformed
X-Real-IP
X-Newrelic-Synthetics
X-Origin-CC
X-Origin-TTL
X-Ratelimit-Reset
X-Cache-TTL-Remaining
X-UA-Device-Type
X-Fastly-Request-Id
X-Node-Name
Content-Secure-Policy
X-NGENIX-Cache
X-Pubstack
X-TIME
X-GEO
X-Handled-By
X-Via-JSL
X-Varnish-Ttl
X-Hl-Ver
NGB
X-Server-W
CDN-RequestPullSuccess
CDN-Uid
CDN-RequestPullCode
CDN-Cache
CDN-CachedAt
CDN-EdgeStorageId
CDN-PullZone
CDN-RequestCountryCode
X-Xfnlog-Site
X-Reqid
X-Optimistic-Header
X-Restarts
X-Cache-Type
Apigw-Requestid
X-Parent-Response-Time
Ms-Operation-Id
X-Cms-Context
MS-CV
X-RTag
ServedBy
X-IPLB-Request-ID
X-IPLB-Instance
WP-Super-Cache
X-Vcl-Version
X-A-Wwc
X-D
X-Ec-Custom-Error
X-A-Dcw
X-SRCache-Key
Candidate-Md5Url
X-Var-Ttl
X-Date
X-A-Dgt
BehaviorPad-Version
X-Tx-Id
X-Destination
X-Aed
X-A-Dam
X-App
X-Vdms-Path
X-Developer
X-Accel-Expires-Debug
X-Debug-Cache-Store
X-Dispatcher-Number
X-Vdms-Version
X-Debug-Cache-Fetch
DCR-Processing-Time-Ms
Ngx.Var.Host
VNS-Age
Vix-Hermes-Req-Id
X-Tenant
N-Cache
Meta-Geo-Continent
X-Ec-Fail
Magicmarker
Mail-Subject
MD5-Digest
X-Bl-Debug
Odigeo-Trace-Id
Rendered-Blocks
X-Bc-Bl
T-Server
Surrogated-Key
Redirect-Candidate
True-Client-Country-4JS
X-B-Cookie
Origin-Agent-Cluster
X-Cache-NE
X-Cache-Host
X-Cdn-Diag
Lang
X-Application
Web-Mar-Region
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-A
Server-Host
CPC-Age
X-A-Ccd
CPC-Cache
DCR-Decision-By
X-Rojux
Fastly-Backend-Name
Sslversion
W
L
VNS-Cache
Gh-Request-Id
We-Hiring
X-BCube-Filmed-By
Fastly-GeoIP-CountryCode
Fastly-SSL
Gannett-Cam-Experience-Id
X-Conf
X-Ec-GeoHdr
X-Slack-Shared-Secret-Outcome
X-Gdpr
X-Origin-Time
X-Vtex-Remote-Cache
X-SD-PageType
X-Forwarded-Path
X-We-Are-Hiring
X-Orig-Expires
X-Shop-Environment
Xc-Version
X-Worker
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Nyt-Route
X-ScT
X-Slack-Backend
X-Viewer-Country
X-Fastly-Backend
X-Epic-Correlation-Id
X-S-Cookie
X-Request-Host
X-RateLimit-Remaining-Second
X-External-Request-Id
X-RateLimit-Limit-Second
X-BYPASS-REASON
X-No-Session
Cache-Provider
X-ProxyCache-Status
X-ProxyCache-Key
X-CSRF-Token
Origin
X-Server-IP
Is-Eu
X-SVT-ORM-RULES
X-Thinkindot-L3
X-Thanos
Producers
X-Test
Platform
X-Nitro-Cache
X-Correlation-ID
X-Cache-Id
X-Cache-Info
L5d-Success-Class
Memcached
X-Storefront-Renderer-Rendered
X-Level-Front-Cache
X-Mid
X-Loc
X-Mly-Id
X-Node-Id
X-ShardId
X-CacheTTL
X-ApacheServer
Machine
Cache-Name
X-Cache-Bucket
X-BBC-Edge-Cache-Status
X-PAYTM-SRV-ID
X-Owner
X-Refresh
Thinkindot-CacheControl-Type
Thinkindot-Control
X-Auto-Login
X-PERF
X-Policy
X-Pool
X-S-Maxage
X-Platform
X-Qloud-Router
Thinkindot-CacheControl
TDXMobile
X-Request-Time
X-Accel-Buffering
X-Cache-Debug
Req-Svc-Chain
X-NodeID
X-App-Name
X-SVT-ORM-VERSION
X-Org
Host-ID
X-Old-Content-Length
X-Bip
X-AIR-PT
Release
X-INCAP-ABP
X-Geo-Header
HA-Ipaddr
AKAMAI
Adler-Geo
X-Generated-On
X-Csrf-Jwt
X-Core-Value
X-Up
Canary
X-GeoIP-Country-Code
X-Sorting-Hat-PodId
X-Core-Mission
X-FC-Vary-Parameters
X-Varnishpool
X-Vmg-Version
X-VServer
X-Cluster
X-AWS-Id
X-DefHash
X-LJ-Flow-ID
X-Varnish-CookieINHashed-On
X-VWS-Id
X-Sn-Servicetimems
X-Variation
X-Varnish-Remaining-TTL
X-DefElseHash
X-Varnish-CookieHashed-On
X-GeoIP-Region-Code
X-ShopId
X-Human
X-Eu-Site
Expect-Staple
X-Wix-Viewer-Type
Environment
X-Alternate-Cache-Key
X-Esi-Check
X-Irp-Debug
Ha-Gx-Prefs
X-Sorting-Hat-ShopId
X-VG-WebCache
X-Cdn-Origin
X-Shopify-Stage
X-CGP
X-Hash
X-VG-TLSProxy
X-CMSURLCustom
Cmstype
Cf-Device-Type
X-Gzip
X-Clientip
Datacenter
X-DPWN-IS-SECURE
Cmsid
User-Cache-Control
Hostname
X-Dispatcher-Server
X-Device-Os
X-Block-Status
X-Has-Esi
X-Mvc-Supplant-Cachable
X-Hnp-Log
X-Cdn-Srv
X-Is-Gdpr
X-JWT-State
X-Nginx-Cache-Key
X-Clara-WADP
X-From
X-Forwarded-Site
X-Gen-Mode
X-Origin-Response-Time
X-GeoIP
X-Origin
X-Fmm-Version
Esi-Enabled
Server-Hostname
X-Nananana
CDCHOST
Sever-Int
Server-Ext
CloudFront-Viewer-Country
NM-Fastcgi-Cache
X-FTR-Request-ID
DSUID
Country-Code
Apple-News-Services-Parsed-Url
Apple-News-Services-Request-Url
Apple-News-Services-Handled
X-Proxy-Cache-Status
X-Datadome
X-Akamai-Device-Characteristics
X-WADP-Cache
Apple-News-Services-Host
X-WA-Info
X-Cache-Status-Check
X-Section
X-Mvc-Supplant-OutputCached
X-Instance-Name
C-Via
X-LB-NoCache
X-Presslabs-Stats
Memory
Wxu-Next-Commit
X-Micro-Cache
X-Op-Id-All
NGX
Wxu-Next-Hostname
Wxu-Next-Region
X-Amz-Meta-Cb-Modifiedtime
Cache-Hits
X-Access
Ssr
Time
X-NCache
X-Cache-Enabled
Pics-Label
Server-Info
AMP-Access-Control-Allow-Source-Origin
X-API-Version
Origin-CC
X-Dc
X-AB
X-CACHE-GROUP
Origin-EX
X-Scale
Server-ID
X-Via-Fastly
X-PHP-Backend
X-B3-Spanid
X-TIM-N
X-Vgn-Hpd-Reason
X-HA-Backend
X-Wp-Cf-Super-Cache-Active
X-Tb-Optimization-Total-Bytes-Saved
X-Geo-Region
Location
X-Buckets
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-ZONE
Cdn-Requestid
X-Internal-Host
X-Accel-Version
X-Webkit-Csp-Report-Only
X-Air-Trace-Id
X-Air-Source
X-Air-Hostname
X-Platform-Cluster
X-Platform-Router
X-Platform-Processor
X-TraceId
X-Cs
X-Azure-Ref-OriginShield
X-SIPLIST1
IsBot
X-Zone
X-Is-Desktop
X-Backend-Instance
X-Browser-Name
X-Fpc
X-B3-Parentspanid
X-Is-Mobile
X-Tcp-Rtt
X-Is-Tablet
X-Is-Supported-Browser
GeoIP-Latitude
X-WP-CF-Super-Cache-Active
Sid
X-DataCenter
Cache-Host
X-Origin-Expires
Resin-Trace
CF-Ctrl
X-Microcachable
YJS-ID
X-Web-Node
X-DC
X-Info
Uri
XM
X-Cached-By
X-TA-CDN-Provider
PFcat
X-Pod-Name
X-HN
X-VarnishDD-TTL
X-LiteSpeed-Cache-Control
GeoIp-Country-Code
X-Ad-Defer-Variation
X-NGINX-Cache
X-Hyper-Cache
X-Nitro-Rev
X-Nitro-Cache-From
User-Agent
Epwk-X-Cache
X-Esi
X-Frame-Option
X-FL-EDGE
X-FL-QIT-DEBUG
Srvid
X-Locale
X-Via-Edge
A
X-Via-CDN
X-CSRF-TOKEN
Locid
Edge-Copy-Time
X-Site-Version
True-Client-Ip
X-Via-SSL
X-VCache
True-Client-IP
X-Webstats-RespID
GeoIP-Country-Code
XServer
X-Service
Cdn
X-CS
X-Github-Request-Id
SID
X-NewRelic-App-Data
X-Varnish-Authentication
X-ATG-Version
X-FireWall-Port
X-Contensis-Viewer-Groups
X-VC
X-Moov-Xdn-Version
X-Moov-T
X-Cache-ASPX
X-Geo
X-Origin-Cache-Key
X-TRACE-ID
Cache-Key
LB
X-Datacenter
X-SRV
X-MSEdge-Features
X-MSEdge-Flight
X-FTR-Cache-Status
X-FTR-Backend
X-Country-Code-Real
X-FTR-Expires
X-FTR-Backend-Server
X-FTR-Balancer
Path
X-Vercel-Id
X-Edge-Server
Cdn-Host
Fastly-Drupal-Html
NtCoent-Length
X-FPC
X-Vercel-Cache
Cdn-Request-Time
Tcn
X-HostName
X-LiteSpeed-Tag
Req-ID
X-NMSegId
M-TraceId
WZWS-RAY
X-Pad
X-Api-Version
X-Upstream-Ht
X-Cdn-Request-ID
CountryCode
Cf-Ipcountry
X-Upstream-Ct
WebServer
X-APP-VERSION
Cluster
X-Ad-Load-Variation
X-Amz-Meta-Opti
Cdncip
X-Air-Pt
Cdnsip
X-AK-Request-ID
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
X-HS-Content-Campaign-Id
State
X-Platform-Server
X-Planisys-CDN-Cache
Content-Style-Type
Content-Script-Type
X-Scope-Id
X-M-Reqid
X-M-Log
X-Fastly-Cache
X-Wp-Cf-Super-Cache-Cache-Control
X-Wp-Cf-Super-Cache
X-Vgn-Hpd-Variations-Key
X-WP-CF-Super-Cache-Cookies-Bypass
Pramga
X-Release
X-Branch-Name
X-Cache-Ttl
X-Request-Start
X-Vgn-Hpd-Ssi
X-Vgn-Hpd-Cached
X-Wp-Cf-Super-Cache-Cookies-Bypass
X-Varnish-Beresp-Status
X-Rocket-Build-Number
X-NWS-UUID-VERIFY
Yak-Timeinfo
X-Sigma-Backend
X-Cache-Remote
X-Qnm-Cache
X-Shield-Cache-Expires
X-Sigma
XkeyRZ
X-Proxy-CacheRZ
X-Generated-In
Lb
X-Traceid
Proxy-Connection
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
CDN
X-CACHE-KEY
X-Request-URI
Srv
Edge-Cache
X-HS-Status
Geoip-Latitude
X-Cdn-Forward
X-Tim-N
X-Cache-Date
Ohc-File-Size
X-Akamai-Pragma-Client-IP
Cache
X-Lb-Cache
X-GeoIP-City
X-Provided-By
X-GoCache-CacheStatus
X-User
X-Scheme
X-UA
X-Ha-Backend
X-Render-Time
Server-Id
X-Gamma-Serve
CF-Cached-On
X-TH-Server
X-Dw-Trace-Id
X-TT-LOGID
X-CUA
Cache-Tv-Group
Tube-Got-Eval
X-Servedbyhost
X-SB
X-Req
X-Nc
X-V-Cache
X-Via-Poph
X-Wa
X-Via-Popv
X-Via-Popn
X-LB-ID
X-Cache-FS-Status
Tube-Got-Results
Tube-Get-Contents
Click-Count-Error
Tube-Return
V-Age
X-B3-Trace-ID
X-Aicache-OS
X-Acquia-Purge-Cdn-Unconfigured
Click-Count-Action-Start
X-Vc
X-Acquia-Site
PICS-Label
X-Acquia-Purge-Tags
X-Acquia-Application-UUID
X-Via-Ucdn
X-Lb-Nocache
X-Acquia-Application-Trace
X-Cdn-Cache-Status
X-EC-Lua
X-RN-RSRV
Yjs-Id
HostName
X-Snapshot-Date
Vha6-Origin
X-Cached-Since
X-ElasticPress-Query
X-Litespeed-Cache-Control
X-Edge-POP
On-Server
X-Men
Ohc-Cache-HIT
MIME-Version
X-Sucuri-Id
X-Fastly-Cache-Hits
Env
Cneonction
X-Udemy-Cache-App-Namespace
X-RAMCache
X-Miniprofiler-Ids
CACHE-MISS-TO-ORIGIN
X-CF-Cache-Header-Vary
Ngx
X-Fastly-Backend-Reqs
X-CF-Cache-Header-Cache-Control
Log-Origin
Inserted-Into-Cache-At