Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
X-Powered-By
Pragma
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
Alt-Svc
P3P
X-Cache-Hits
X-UA-Compatible
X-Xss-Protection
X-Served-By
CF-Ray
X-Download-Options
X-Request-Id
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Cache-Status
X-Generator
X-Check
X-Cacheable
X-DNS-Prefetch-Control
X-Envoy-Upstream-Service-Time
X-FRAME-OPTIONS
Timing-Allow-Origin
X-Iinfo
X-Drupal-Dynamic-Cache
X-Dns-Prefetch-Control
Feature-Policy
X-Content-Security-Policy
Server-Timing
Access-Control-Expose-Headers
Content-Encoding
X-XSS-PROTECTION
Status
X-CDN
Upgrade
X-Request-ID
X-AspNetMvc-Version
Access-Control-Max-Age
X-Amz-Request-Id
X-Amz-Id-2
Request-Context
X-Via
X-Turbo-Charged-By
X-Backend
X-Cache-Group
X-AH-Environment
X-Robots-Tag
Cf-Edge-Cache
Keep-Alive
Host-Header
X-Hacker
X-UA-Device
X-Proxy-Cache
X-Vhost
X-Server
X-Rq
X-Server-Powered-By
Allow
X-Ws-Request-Id
X-Age
X-Varnish-Cache
X-Dispatcher
EagleId
X-Amz-Version-Id
X-LiteSpeed-Cache
P3p
Nel
Grace
Cf-Apo-Via
Cf-Railgun
X-Page-Speed
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Device
EagleEye-TraceId
X-Aws-Lambda-Call-Status
X-Swift-SaveTime
X-Swift-CacheTime
X-OneAgent-JS-Injection
Ali-Swift-Global-Savetime
X-Pingback
X-Host
X-Node
Accept-CH
X-CST
X-WebKit-CSP
X-Cache-Lookup
X-Backend-Server
X-Server-Id
Surrogate-Control
X-Readtime
X-Nginx-Cache-Status
Permissions-Policy
X-Nginx-Upstream-Cache-Status
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Akam-SW-Version
Request-Id
X-Application-Context
Accept-CH-Lifetime
X-Content-Security-Policy-Report-Only
X-Cloud-Trace-Context
X-Response-Time
X-Ua-Compatible
X-HW
X-Trace
Xkey
X-Edge
Content-Location
X-Clacks-Overhead
X-Ruxit-JS-Agent
X-Mod-Pagespeed
Rating
X-ESI
X-Midtier
X-Amz-Server-Side-Encryption
X-ECACHE
X-Url
X-Mcache
Accept-Ch-Lifetime
X-Country
Cache-Tag
X-Upstream
X-MS-InvokeApp
X-Rack-Cache
X-Vcap-Request-Id
X-D2id
X-Powered-By-Plesk
Verso
X-Exp-Id
X-Use-Magma
X-Cdn-Fetch
X-Kinja
X-Kinja-Revision
X-Kinja-Server
X-GoogleNews-Bot
X-Kinja-Build
X-Exp-Variant
X-Element-Page-Cache
Edge-Control
Accept-Ch
X-PC
X-TtlSet
X-Vname
RTSS
X-Ruxit-Js-Agent
X-Oneagent-Js-Injection
Service-Worker-Allowed
X-Ac
X-Webkit-CSP
X-Country-Code
Origin-Trial
X-VARITI-CCR
Fastly-Restarts
X-Navigation-Version
X-Goog-Hash
X-Abt-Application-Version
X-Cache-TTL
X-WebKit-CSP-Report-Only
X-GitHub-Request-Id
X-Varnish-TTL
X-Cached
X-Browser-Type
X-Amz-Rid
X-Litespeed-Cache
X-Aspnetmvc-Version
Display
Cross-Origin-Opener-Policy
X-Middleton-Display
X-Sol
Pagespeed
X-Kinja-CCPA
X-Dw-Request-Base-Id
X-Server-Name
X-SharePointHealthScore
X-Amzn-Trace-Id
SPRequestGuid
X-NWS-LOG-UUID
X-Content-Type
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-Powered-CMS
SPIisLatency
SPRequestDuration
X-Mg-S
AR-PoweredBy
AR-SID
AR-Request-ID
AR-ATIME
X-Kraken-Loop-Name
X-Erf-Bev-Bev-Is-Generated
X-Server-Lifecycle-Phase
X-Erf-Bev-Bev
X-Instrumentation
X-Cache-Key
X-Ttl
Arr-Disable-Session-Affinity
Pinterest-Version
Response
X-Middleton-Response
Pinterest-Generated-By
X-Pinterest-Rid
X-Times
X-Client-IP
X-Fastly-Request-ID
X-Version
X-B3-TraceId
X-B3-Traceid
X-Jurisdiction
X-HP-Webp
X-Cnection
X-HP-Trace-Id
AR-CACHE
X-FastCGI-Cache
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Accel-Expires
Cache-Tags
X-T
X-Ser
Nginx-Cache
Cache-Status
Edge-Cache-Tag
Front-End-Https
X-MSEdge-Ref
X-RateLimit-Remaining
X-Hits
X-Px
X-NF-Request-ID
Public-Key-Pins
X-Recruiting
Payment
X-LLID
X-Frontend
Mrf-Cache-Status
X-Request-Received
MRF-Tech
X-B3-TraceId-Primal
X-Request-Processing-Time
Server-Node
X-RateLimit-Limit
X-Ua-Browser
S
X-Shield-Request-Id
X-Server-ID
X-TTL
X-DIS-Request-ID
Content-MD5
X-GUploader-UploadID
X-Goog-Metageneration
MicrosoftSharePointTeamServices
X-PressLabs-Stats
Access-Control-Request-Method
TP-Cache
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Content-Digest
X-Daa-Tunnel
X-Protected-By
X-HS-Hub-Id
X-HS-Cache-Config
X-HS-Combine-CSS
X-HS-Content-Id
X-Fastcgi-Cache
Realpath
X-Request-Handler-Origin-Region
Fastcgi-Cache
X-Distributor
X-Microsite
X-FB-Debug
Access-Control-Allow-Method
X-LB-Cache
X-Forwarded-For
X-Page-Id
X-Rid
X-Cluster-Name
Accept-Charset
X-Erf-Stays-Pdp-Viaduct-Migration-Web
TP-L2-Cache
X-Geo-Country
X-Hostname
X-Ratelimit-Remaining
X-B3-Sampled
X-Webkit-CSP-Report-Only
X-Ezoic-Cdn
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Aspnet-Version
X-Seen-By
X-Ua-Device
Cross-Origin-Resource-Policy
Count-Hit
X-Newrelic-App-Data
Cleartype
TCN
Referer-Policy
X-Mobile
X-App-Server
DC
X-Varnish-Backend
X-Ratelimit-Limit
X-Kinsta-Cache
X-Logged-In
X-Correlation-Id
X-Content-Options
X-Edge-Location-Klb
X-Origin-Cache
X-Git-Hash
X-Hosted-By
X-Debug-Info
X-Contextid
X-Is-Crawler
X-Providence-Cookie
X-Request-Guid
X-Aspnet-Duration-Ms
X-Amz-Replication-Status
X-Fb-Rlafr
X-Flags
X-Route-Name
X-Envoy-Decorator-Operation
X-IPS-LoggedIn
Surrogate-Key
X-Revision
X-Grace
X-TT
X-App-Environment
X-Varnish-Grace
Frame-Options
X-Amz-Meta-S3cmd-Attrs
X-Id
Retry-After
X-Forwarded-Proto
X-Xrds-Location
X-Azure-Ref
X-F-Cache
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Wix-Request-Id
X-RateLimit-Reset
Section-Io-Cache
X-Magnolia-Registration
X-Origin-Server
X-Whom
Healthy
Alternate-Protocol
Charset
X-Akamai-Edgescape
MS-Author-Via
Viewport
X-Proxy-Cache-Info
X-App-Version
X-Nf-Request-Id
X-Backend-Name
X-COUNTRY
WPO-Cache-Status
WPO-Cache-Message
X-Www-Served-By
X-B
X-Az
X-AppVersion
X-Activity-Id
Paypal-Debug-Id
X-Language
X-Webkit-Csp
SRV
Filterid
X-Varnish-Server
VIX-Pulpo-Upstream-Status
Host
VIX-Pulpo-Node
X-Http-Reason
X-Response-Served-From
X-Original-Request-Id
X-Cache-Rule
SD-X-WS
X-UUID
Akamai-GRN
Country
X-Akamai-Request-ID2
X-User-Agent
Server-Name
X-Cache-Grace
X-Rule
X-Edge-Location
X-Datadog-Trace-Id
X-Datadog-Sampling-Priority
X-Datadog-Parent-Id
X-Instance
Front
ServerID
X-EdgeConnect-Cache-Status
X-ARC
X-Varnish-Age
X-Region
X-N
X-Status
X-Environment-Context
X-Cacheable-TTL
From-Origin
X-Page-View
X-Jobs
Protected
Amp-Access-Control-Allow-Source-Origin
X-Time
X-L-Path
X-Unique-Id
X-FW-Version
X-Adobe-Content
Fastly-SIE
X-Rocket-Nginx-Serving-Static
X-FW-Hash
X-FW-Server
X-Framework
X-Tumblr-User
X-Adobe-Loc
X-Tumblr-Pixel-0
X-FW-Static
X-Rendered-As
X-FW-Type
X-Tumblr-Pixel-1
X-FW-Serve
X-Is-Bot
X-Tumblr-Pixel
X-FW-Dynamic
Fastly-SWR
X-Load-Cache
X-Type
X-Trace-Id
X-RemovedCookies
X-Tec-Api-Origin
X-G
X-ProcessESI
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-Tec-Api-Version
X-Vcache
X-Tec-Api-Root
X-DataDome
X-Cache-Time
X-Client-Ip
Access-Control-Request-Headers
X-Yottaa-Metrics
X-Proxy
X-Yottaa-Optimizations
X-Datadog-Sampled
Content-Disposition
X-Mg-Request-UUID
X-Debug-IsPreview
X-Amzn-Remapped-Content-Length
X-Cache-Control
X-Cache-Age
X-Signature
X-Debug-IsConnected
X-B-Cache
X-CDN-Forward
X-XRDS-Location
X-URL
X-ECache
Backend
Refresh
Countrycode
X-Drupal-Cache-Tags
X-WP-CF-Super-Cache
X-WP-CF-Super-Cache-Cache-Control
Accept-Language
X-DynaTrace
Xet-Cookie
X-Erf-Web-Scheduler
X-Nginx-Cache
X-Source
X-Httpd
X-Generated-By
CF-IPCountry
X-Servername
Url
X-HTML-Minification-Powered-By
X-Tt-Trace-Host
X-DynaTrace-JS-Agent
Webserver
X-Tt-Trace-Tag
Version
X-Mode
X-Template
X-NYM-Debug-Backend
Xserver
X-Device-Type
X-Content-Powered-By
X-Storage
X-Content-Age
GEO-INFO
X-Urbn-Context-Path
X-GeoCountry
OT-Force-Account-Verify
X-Urbn-Site-Id
X-JoinUs
X-Cache-Action
X-Director
X-Rewrite-Enabled
Filters
Meta-Geo
Onion-Location
S-Rt
Locale
X-GeoCode
Load-Balancing
X-Cache-Operation
X-LAGOON
X-Rn-Rsrv
X-Say-Cacheable
X-ServerID
X-SaId
X-Say-TTL
X-UPSTREAM-Address
X-SayCDN-TTL
X-Tt-Logid
X-Cluster-Node
X-Git-Commit
X-Varnish-Cache-Hits
X-Soup
X-Container-Uri
X-Varnish-Hostname
X-Forwarded-Host
X-Generation-Time
X-Adobe-Source
Azure-SiteName
Azure-InstanceId
X-Detected-As
Web-Mar-Node
Azure-RegionName
X-Cache-Server
Azure-SlotName
Azure-Version
X-Tb
X-Lambda-Id
X-Served-From
X-VCT
X-Sql-Duration-Ms
X-RM-Cache-TTL
X-Ms-Request-Id
X-Proto
X-PHP-Host
X-Ms-Version
X-Sql-Count
X-VC-Cache
X-Labrador-Cache-Channel
X-XRDS-LOCATION
X-CCDN-CacheTTL
X-CCDN-Origin-Time
X-Routing-Service
X-Extlb
X-RCS-CacheZone
Mn-Server-Ip
X-Proxied
X-R9-Blue-Green-Version
X-FB-TRIP-ID
DB-Nickname
X-Format
X-Logging-Id
X-Loop
Node
X-Tncms
X-Skip-Cache
X-Tumblr-Pixel-3
X-Tumblr-Pixel-2
X-Zipkin-Id
X-Hcs-Proxy-Type
Selected-Fe
X-Origin-Hint
X-Proxy-Build
X-Timing-Wait
Property-Id
X-Fetched-On
TWC-GeoIP-Country
X-Debug
TWC-Privacy
Webcakes-App-Version
Webcakes-App-Name
TWC-GeoIP-LatLong
X-Uri
TWC-Device-Class
Uber-Trace-Id
Webcakes-Region
TWC-Connection-Speed
TWC-Locale-Group
X-MCACHE
X-TimeS
Fastcgi-Useragent
X-Cache-Hit
X-Zen-Fury
X-LSADC-Cache
Cross-Origin-Window-Policy
Source
X-Ua
X-Srv
X-Endurance-Cache-Level
X-Sucuri-Cache
X-Redis-Cache
X-Sucuri-ID
X-B3-SpanId
X-Upgrade-Enabled
X-Drupal-Cache-Contexts
CDN-RequestId
Section-Origin-Responded
Section-Io-Origin-Status
Section-Io-Id
Section-Io-Origin-Time-Seconds
X-Oracle-Dms-Ecid
X-Oracle-Dms-Rid
X-Origin-Date
X-MP-GENERATED-AT
X-Newrelic-Synthetics
X-NGENIX-Cache
Liferay-Portal
X-S
Fastly-Drupal-HTML
X-Varnish-Hits
X-Ratelimit-Reset
X-Cache-Expired-At
X-Pass-Why
Upgrade-Insecure-Requests
X-Origin-CC
X-Origin-TTL
X-ID
X-Akamai-Transformed
X-Real-IP
NGB
X-Handled-By
X-Cache-TTL-Remaining
X-FTR-Request-ID
X-CACHE-AGE
X-UA-Device-Type
X-Node-Name
X-Via-JSL
Apigw-Requestid
X-Hl-Ver
X-Pubstack
X-Optimistic-Header
X-Correlation-ID
X-Reqid
X-Cache-Type
X-Cms-Context
X-Xfnlog-Site
X-RTag
MS-CV
CDN-CachedAt
ServedBy
X-CSRF-Token
CDN-Cache
Ms-Operation-Id
X-Restarts
X-GEO
CDN-RequestCountryCode
CDN-PullZone
CDN-EdgeStorageId
CDN-RequestPullCode
CDN-RequestPullSuccess
CDN-Uid
X-No-Session
X-Varnish-Ttl
X-ProxyCache-Status
X-BYPASS-REASON
X-Server-W
X-Cache-Host
X-ProxyCache-Key
X-Parent-Response-Time
Content-Secure-Policy
WP-Super-Cache
X-A-Dgt
X-A-Wwc
X-Aed
X-App
X-Orig-Expires
X-SRCache-Key
Fastly-SSL
X-Nyt-Route
Redirect-Candidate
Sslversion
X-SD-PageType
X-IPLB-Instance
Server-Host
True-Client-Country-4JS
X-ScT
T-Server
X-AWS-Id
X-Cluster
Surrogated-Key
X-Rojux
X-S-Cookie
X-IPLB-Request-ID
Rendered-Blocks
Web-Mar-Region
W
X-A
X-A-Ccd
X-A-Dam
X-External-Request-Id
X-Slack-Shared-Secret-Outcome
Vix-Hermes-Req-Id
X-Shop-Environment
X-LJ-Flow-ID
X-Slack-Backend
X-A-Dcw
X-Eu-Site
X-Ec-GeoHdr
L5d-Success-Class
X-Csrf-Jwt
X-Fastly-Backend
X-Viewer-Country
X-D
Lang
Magicmarker
X-Vdms-Path
X-Epic-Correlation-Id
X-Conf
X-FC-Vary-Parameters
X-Vdms-Version
L
X-Debug-Cache-Fetch
X-Destination
HA-Ipaddr
X-We-Are-Hiring
X-Developer
X-Dispatcher-Number
X-Vtex-Remote-Cache
X-Request-Host
X-Debug-Cache-Store
X-Ec-Fail
Xc-Version
X-Ec-Custom-Error
X-Worker
X-Application
X-Origin-Time
Ha-Gx-Prefs
Odigeo-Trace-Id
DCR-Processing-Time-Ms
DCR-Decision-By
BehaviorPad-Version
X-Bl-Debug
X-Tenant
Origin-Agent-Cluster
X-B-Cookie
Gannett-Cam-Experience-Id
X-Bc-Bl
X-BCube-Filmed-By
Ngx.Var.Host
N-Cache
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-CGP
Canary
Candidate-Md5Url
MD5-Digest
Meta-Geo-Continent
X-Forwarded-Path
X-Cache-NE
X-CacheTTL
X-VWS-Id
X-Gdpr
X-Datadome
X-Tx-Id
X-Owner
Mail-Subject
Origin
Gh-Request-Id
Is-Eu
Host-ID
X-Org
Fastly-GeoIP-CountryCode
Req-Svc-Chain
Release
Producers
Platform
X-Old-Content-Length
X-BBC-Edge-Cache-Status
X-Core-Value
X-Mid
X-Date
X-DefElseHash
X-Core-Mission
X-Mly-Id
X-Cdn-Origin
X-Clientip
X-CMSURLCustom
X-DefHash
X-DPWN-IS-SECURE
X-GeoIP-Country-Code
X-GeoIP-Region-Code
X-Hash
X-Geo-Header
X-Generated-On
X-Loc
X-Level-Front-Cache
X-Irp-Debug
X-Cdn-Diag
X-Mvc-Supplant-Cachable
X-Nitro-Cache
VNS-Age
VNS-Cache
X-Node-Id
X-NodeID
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
Thinkindot-Control
We-Hiring
X-Accel-Buffering
X-Cache-Bucket
X-Cache-Debug
X-Cache-Info
X-Nananana
X-Bip
X-Accel-Expires-Debug
X-Alternate-Cache-Key
Fastly-Backend-Name
TDXMobile
Adler-Geo
X-Wikidot-Backend
X-Server-IP
X-Wikidot-Static-Cache
X-ShardId
X-ShopId
X-VServer
X-Sn-Servicetimems
X-Shopify-Stage
X-S-Maxage
X-Request-Time
X-RateLimit-Limit-Second
X-Qloud-Router
X-Pool
X-App-Name
X-Wix-Viewer-Type
X-Proxy-Cache-Status
X-RateLimit-Remaining-Second
X-Vmg-Version
X-VG-WebCache
X-SVT-ORM-RULES
X-Var-Ttl
X-Variation
X-SVT-ORM-VERSION
X-Up
X-Thanos
X-Test
X-Thinkindot-L3
Expect-Staple
X-Storefront-Renderer-Rendered
X-Varnish-Remaining-TTL
X-Varnishpool
X-VG-TLSProxy
X-Varnish-CookieINHashed-On
X-Sorting-Hat-PodId
X-Varnish-CookieHashed-On
X-Sorting-Hat-ShopId
X-Policy
X-Refresh
Cmstype
Cmsid
Cf-Device-Type
CPC-Age
CPC-Cache
Environment
X-PAYTM-SRV-ID
Datacenter
Cache-Provider
X-Platform
X-Human
AKAMAI
X-Cache-Status-Check
X-Vcl-Version
User-Cache-Control
Cache-Name
X-TIME
AMP-Access-Control-Allow-Source-Origin
X-AB
Server-Hostname
X-Akamai-Device-Characteristics
X-Esi-Check
CloudFront-Viewer-Country
X-Nginx-Cache-Key
X-Hnp-Log
X-Cdn-Srv
X-Block-Status
X-Mvc-Supplant-OutputCached
X-Fmm-Version
Esi-Enabled
X-Cache-Id
DSUID
Server-Ext
X-PERF
Country-Code
X-Auto-Login
X-Forwarded-Site
X-ApacheServer
Machine
Apple-News-Services-Request-Url
NM-Fastcgi-Cache
X-WADP-Cache
X-Origin-Response-Time
X-Device-Os
X-Origin
X-Gen-Mode
Apple-News-Services-Host
Apple-News-Services-Parsed-Url
X-GeoIP
X-WA-Info
X-INCAP-ABP
Sever-Int
CDCHOST
Apple-News-Services-Handled
X-Dispatcher-Server
X-Gzip
X-AIR-PT
X-From
X-Micro-Cache
X-Clara-WADP
X-Cache-Enabled
X-Fastly-Request-Id
X-Instance-Name
X-LB-NoCache
X-Amz-Meta-Cb-Modifiedtime
Wxu-Next-Commit
Wxu-Next-Region
C-Via
Pics-Label
X-Section
Server-Info
X-Op-Id-All
Ssr
NGX
Wxu-Next-Hostname
X-Access
X-NCache
X-Dc
X-B3-Spanid
X-Geo-Region
X-API-Version
X-JWT-State
Memcached
X-Via-Fastly
X-Has-Esi
Server-ID
X-Is-Gdpr
X-TraceId
X-Vgn-Hpd-Reason
X-ZONE
Hostname
X-Accel-Version
X-CACHE-GROUP
X-HA-Backend
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
Cache-Hits
Time
Memory
Origin-EX
Origin-CC
Cdn-Requestid
X-Scale
X-Wp-Cf-Super-Cache-Active
X-PHP-Backend
X-Buckets
X-Is-Mobile
X-Is-Tablet
X-SIPLIST1
X-Is-Desktop
X-Platform-Cluster
X-TIM-N
X-Browser-Name
X-Platform-Processor
X-Is-Supported-Browser
X-Platform-Router
Sid
IsBot
X-Tcp-Rtt
X-Air-Hostname
X-Air-Source
Location
X-Air-Trace-Id
X-Presslabs-Stats
X-Tb-Optimization-Total-Bytes-Saved
Resin-Trace
X-Internal-Host
YJS-ID
CF-Ctrl
X-Fpc
X-Backend-Instance
X-Cached-By
X-B3-Parentspanid
X-Azure-Ref-OriginShield
X-WP-CF-Super-Cache-Active
X-Cs
X-Zone
GeoIP-Latitude
X-DC
Epwk-X-Cache
X-Microcachable
X-Frame-Option
X-TA-CDN-Provider
X-Hyper-Cache
Cache-Host
X-Origin-Expires
X-Site-Version
True-Client-Ip
Uri
XM
X-Info
X-DataCenter
X-Web-Node
X-LiteSpeed-Cache-Control
X-Origin-Cache-Key
PFcat
X-Nitro-Rev
X-Nitro-Cache-From
X-NGINX-Cache
GeoIP-Country-Code
X-VC
X-Service
X-Webstats-RespID
X-Locale
X-VarnishDD-TTL
X-Pod-Name
X-HN
Cdn
GeoIp-Country-Code
X-Ad-Defer-Variation
User-Agent
X-FTR-Expires
X-FTR-Backend-Server
X-Country-Code-Real
X-FTR-Cache-Status
X-FTR-Backend
X-VCache
X-FTR-Balancer
X-Geo
X-CS
XServer
X-Cache-Ttl
X-Via-CDN
X-Via-SSL
Edge-Copy-Time
Locid
Srvid
X-Datacenter
X-FL-EDGE
X-FL-QIT-DEBUG
X-Via-Edge
A
LB
X-CSRF-TOKEN
X-NewRelic-App-Data
NtCoent-Length
X-Edge-Server
Cdn-Request-Time
Cdn-Host
True-Client-IP
X-Contensis-Viewer-Groups
X-Moov-Xdn-Version
X-Moov-T
X-NMSegId
X-Webkit-Csp-Report-Only
X-TRACE-ID
Req-ID
X-FireWall-Port
X-ATG-Version
X-Varnish-Authentication
M-TraceId
WZWS-RAY
X-Vercel-Id
X-Vercel-Cache
X-Cache-ASPX
Cache-Key
X-FPC
X-Pad
X-Ad-Load-Variation
SID
Fastly-Drupal-Html
X-MSEdge-Features
X-MSEdge-Flight
X-HostName
Tcn
WebServer
Content-Style-Type
X-M-Reqid
Path
Cluster
Pramga
X-Scope-Id
X-M-Log
X-LiteSpeed-Tag
X-SRV
Content-Script-Type
X-Request-Start
X-APP-VERSION
CountryCode
Cf-Ipcountry
X-Api-Version
X-Cdn-Request-ID
Cdnsip
Cdncip
X-AK-Request-ID
X-NWS-UUID-VERIFY
X-Varnish-Beresp-Status
X-Shield-Cache-Expires
X-Qnm-Cache
X-Amz-Meta-Opti
X-Esi
X-Request-URI
X-Air-Pt
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
X-Branch-Name
X-Upstream-Ht
X-Platform-Server
X-Wp-Cf-Super-Cache
HostName
State
X-Wp-Cf-Super-Cache-Cache-Control
X-Planisys-CDN-Cache
X-Cache-Date
X-Github-Request-Id
X-Upstream-Ct
Edge-Cache
X-HS-Content-Campaign-Id
Lb
X-Wp-Cf-Super-Cache-Cookies-Bypass
X-Release
X-Fastly-Cache
Ohc-File-Size
Yak-Timeinfo
X-TH-Server
X-Vgn-Hpd-Cached
X-Proxy-CacheRZ
X-Vgn-Hpd-Ssi
XkeyRZ
X-Vgn-Hpd-Variations-Key
Cache-Tv-Group
X-WP-CF-Super-Cache-Cookies-Bypass
X-Rebelmouse-Cache-Control
CDN
X-Rebelmouse-Surrogate-Control
X-CACHE-KEY
X-Generated-In
X-Tim-N
Srv
X-HS-Status
X-Cdn-Forward
X-Cache-Remote
X-Rocket-Build-Number
X-Sigma
X-V-Cache
X-Servedbyhost
X-Req
X-SB
X-Render-Time
Tube-Return
Tube-Got-Results
X-Acquia-Purge-Cdn-Unconfigured
X-Aicache-OS
X-Cache-FS-Status
X-B3-Trace-ID
Tube-Got-Eval
Tube-Get-Contents
X-Traceid
Geoip-Latitude
X-LB-ID
Click-Count-Action-Start
Click-Count-Error
X-Nc
X-Sigma-Backend
Proxy-Connection
X-Akamai-Pragma-Client-IP
Wpo-Cache-Message
X-Via-Popn
X-Wa
X-Via-Poph
Wpo-Cache-Status
X-Via-Popv
X-Lb-Cache
X-VCL-Version
X-Fastly-Backend-Reqs
X-User
X-Vary
CF-Cached-On
Server-Id
X-Men
On-Server
Cache
V-Age
X-UA
X-Ha-Backend
Ohc-Cache-HIT
X-Dw-Trace-Id
X-TT-LOGID
Ngx-Var-Key
X-CUA
MIME-Version
X-Acquia-Purge-Tags
X-Acquia-Site
X-Via-Ucdn
X-Gamma-Serve
X-Scheme
X-Lb-Nocache
PICS-Label
X-GoCache-CacheStatus
X-GeoIP-City
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-EC-Lua
X-Provided-By
X-Iplb-Request-Id
X-TX-ID
Yjs-Id
X-Iplb-Instance
Mime-Version
X-RAMCache
X-Vc
Vha6-Origin
X-Cached-Since
X-Snapshot-Date
X-Fastly-Cache-Hits
CACHE-MISS-TO-ORIGIN
Inserted-Into-Cache-At
X-ElasticPress-Query
X-Litespeed-Cache-Control
X-Cdn-Cache-Status
X-CF-Cache-Header-Cache-Control
X-CF-Cache-Header-Vary
Cneonction
X-Miniprofiler-Ids
Ngx
Log-Origin
X-Udemy-Cache-App-Namespace