Threat Level: green Handler on Duty: Daniel Wesemann

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
Pragma
X-Powered-By
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
P3P
X-Cache-Hits
X-UA-Compatible
Alt-Svc
X-Xss-Protection
X-Served-By
CF-Ray
X-Download-Options
X-Timer
X-Request-Id
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Generator
X-Cache-Status
X-Check
X-Cacheable
X-Envoy-Upstream-Service-Time
X-Request-ID
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-FRAME-OPTIONS
X-Dns-Prefetch-Control
X-Iinfo
X-Drupal-Dynamic-Cache
Feature-Policy
X-Content-Security-Policy
Content-Encoding
Access-Control-Expose-Headers
Upgrade
Status
X-CDN
X-AspNetMvc-Version
X-XSS-PROTECTION
Server-Timing
Access-Control-Max-Age
X-Amz-Request-Id
Request-Context
X-Amz-Id-2
X-Turbo-Charged-By
X-AH-Environment
X-Via
X-Robots-Tag
X-Backend
X-Cache-Group
Cf-Edge-Cache
Host-Header
Keep-Alive
X-Proxy-Cache
X-Hacker
X-Server
X-Rq
X-Age
X-Server-Powered-By
Allow
X-Vhost
X-UA-Device
X-Varnish-Cache
X-Ws-Request-Id
EagleId
X-Dispatcher
X-Amz-Version-Id
Grace
Cf-Apo-Via
P3p
Nel
X-LiteSpeed-Cache
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Page-Speed
X-Device
Cf-Railgun
EagleEye-TraceId
X-Swift-CacheTime
X-Swift-SaveTime
X-Aws-Lambda-Call-Status
Ali-Swift-Global-Savetime
X-Pingback
X-Node
X-Host
Accept-CH
X-WebKit-CSP
X-Server-Id
Surrogate-Control
X-OneAgent-JS-Injection
X-Backend-Server
X-CST
X-Readtime
X-Nginx-Cache-Status
X-Akam-SW-Version
X-Content-Security-Policy-Report-Only
Permissions-Policy
X-Cache-Lookup
Request-Id
X-Application-Context
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Nginx-Upstream-Cache-Status
X-Cloud-Trace-Context
X-Trace
Accept-Ch-Lifetime
X-Response-Time
X-Edge
X-HW
X-Litespeed-Cache
X-Ua-Compatible
X-Mod-Pagespeed
X-Url
Content-Location
X-Clacks-Overhead
X-Ruxit-JS-Agent
Accept-CH-Lifetime
X-Oneagent-Js-Injection
X-Midtier
X-ECACHE
X-ESI
Rating
X-Amz-Server-Side-Encryption
X-Country
X-Mcache
X-Upstream
X-TtlSet
X-PC
X-Vname
Xkey
X-Vcap-Request-Id
X-MS-InvokeApp
X-D2id
Cache-Tag
Verso
X-Rack-Cache
X-Element-Page-Cache
Fastly-Restarts
X-Cache-TTL
Edge-Control
X-Exp-Variant
X-Exp-Id
RTSS
X-GoogleNews-Bot
X-Kinja
X-Kinja-Server
X-Use-Magma
X-Kinja-Revision
X-Kinja-Build
X-Cdn-Fetch
Accept-Ch
X-Content-Type
X-Powered-By-Plesk
X-VARITI-CCR
X-Ac
X-Navigation-Version
X-Cached
Origin-Trial
X-Goog-Hash
X-WebKit-CSP-Report-Only
X-Abt-Application-Version
X-GitHub-Request-Id
Service-Worker-Allowed
X-Country-Code
X-Ruxit-Js-Agent
Display
Pagespeed
X-Sol
X-Amz-Rid
X-Middleton-Display
X-Ua-Device
X-Mg-S
X-Ttl
X-B3-TraceId
X-Dw-Request-Base-Id
X-SharePointHealthScore
SPRequestGuid
X-Server-Name
X-Browser-Type
Arr-Disable-Session-Affinity
Cross-Origin-Opener-Policy
X-Varnish-TTL
X-Powered-CMS
X-Middleton-Response
Response
X-Amzn-Trace-Id
AR-SID
AR-PoweredBy
AR-ATIME
AR-Request-ID
SPIisLatency
SPRequestDuration
X-Server-Lifecycle-Phase
X-Instrumentation
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-Kraken-Loop-Name
X-Cache-Key
AR-CACHE
X-Fastly-Request-ID
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-Jurisdiction
X-Version
X-HP-Trace-Id
X-HP-Webp
X-Cnection
X-NF-Request-ID
X-T
X-Accel-Expires
Cache-Tags
Cache-Status
Front-End-Https
X-Ser
Edge-Cache-Tag
X-Client-IP
X-MSEdge-Ref
X-Px
X-Times
X-Pinterest-Rid
Pinterest-Version
Pinterest-Generated-By
X-Webkit-Csp
X-Fastcgi-Cache
Public-Key-Pins
X-Hits
Nginx-Cache
X-Recruiting
X-RateLimit-Remaining
Mrf-Cache-Status
X-B3-TraceId-Primal
MRF-Tech
X-Shield-Request-Id
X-Request-Received
X-Frontend
X-Request-Processing-Time
Access-Control-Request-Method
Server-Node
X-NWS-LOG-UUID
X-Ua-Browser
X-LLID
Payment
X-Webkit-CSP
X-DIS-Request-ID
TP-Cache
X-FastCGI-Cache
X-RateLimit-Limit
X-HS-Combine-CSS
X-HS-Hub-Id
X-HS-Content-Id
X-HS-Cache-Config
MicrosoftSharePointTeamServices
S
X-Goog-Metageneration
X-B3-Traceid
X-Content-Digest
TP-L2-Cache
X-LB-Cache
Content-MD5
X-PressLabs-Stats
X-Distributor
Realpath
X-Request-Handler-Origin-Region
X-Microsite
X-Ezoic-Cdn
X-Geo-Country
X-Page-Id
Access-Control-Allow-Method
Accept-Charset
X-Forwarded-For
X-Erf-Stays-Pdp-Viaduct-Migration-Web
Fastcgi-Cache
X-FB-Debug
X-Kinja-CCPA
X-Envoy-Decorator-Operation
X-GUploader-UploadID
X-Webkit-CSP-Report-Only
X-Hostname
X-Cluster-Name
X-Protected-By
X-Correlation-Id
X-Ratelimit-Remaining
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Seen-By
X-Rid
Cleartype
TCN
X-B3-Sampled
DC
X-Origin-Server
X-TTL
X-Origin-Cache
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
X-Goog-Generation
X-Debug-Info
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Mobile
X-TEC-API-VERSION
Referer-Policy
X-Logged-In
X-Ratelimit-Limit
X-Newrelic-App-Data
X-Git-Hash
X-Varnish-Backend
X-Edge-Location-Klb
X-Kinsta-Cache
X-XRDS-Location
X-Azure-Ref
Cross-Origin-Resource-Policy
Alternate-Protocol
X-Contextid
X-Varnish-Grace
Healthy
X-App-Environment
X-Fb-Rlafr
X-Aspnet-Version
Surrogate-Key
X-Revision
X-Is-Crawler
X-Providence-Cookie
X-Grace
X-Flags
X-Aspnet-Duration-Ms
X-Request-Guid
X-Amz-Replication-Status
X-Route-Name
Count-Hit
X-Amz-Meta-S3cmd-Attrs
X-Content-Options
X-Server-ID
X-TT
X-Whom
X-IPS-LoggedIn
X-Forwarded-Proto
Charset
MS-Author-Via
X-Wix-Request-Id
Filterid
Viewport
Frame-Options
X-Akamai-Edgescape
X-App-Server
X-Id
WPO-Cache-Message
WPO-Cache-Status
X-B
Paypal-Debug-Id
X-Hosted-By
X-Cache-Age
X-Kong-Upstream-Latency
X-Magnolia-Registration
X-Kong-Proxy-Latency
X-Trace-Id
X-Backend-Name
X-Activity-Id
X-Az
X-Daa-Tunnel
X-AppVersion
X-Cache-Control
X-Www-Served-By
Retry-After
X-Client-Ip
Server-Name
Section-Io-Cache
X-Type
Refresh
X-F-Cache
X-Proxy-Cache-Info
Version
X-Upgrade-Enabled
X-Varnish-Ttl
X-Varnish-Server
X-Proxy
X-Time
VIX-Pulpo-Node
SD-X-WS
X-Rule
X-App-Version
X-Response-Served-From
Host
X-Cache-Rule
Akamai-GRN
VIX-Pulpo-Upstream-Status
X-Original-Request-Id
X-ARC
X-Http-Reason
Front
X-Rocket-Nginx-Serving-Static
X-Instance
X-Status
X-Akamai-Request-ID2
X-User-Agent
X-UUID
Protected
X-Region
X-Rendered-As
X-L-Path
X-Environment-Context
X-Cacheable-TTL
X-Edge-Location
X-N
X-Is-Bot
SRV
Amp-Access-Control-Allow-Source-Origin
X-Varnish-Age
X-Unique-Id
Access-Control-Request-Headers
X-Jobs
X-Cache-Grace
X-Cache-Time
X-Framework
X-Oracle-Dms-Ecid
X-EdgeConnect-Cache-Status
X-Source
X-FW-Type
X-FW-Server
X-FW-Dynamic
X-Page-View
X-FW-Serve
X-FW-Hash
X-FW-Static
X-FW-Version
Fastly-SWR
From-Origin
X-Oracle-Dms-Rid
Fastly-SIE
X-Adobe-Loc
X-Load-Cache
X-ProcessESI
X-Adobe-Content
X-Tumblr-User
X-Tumblr-Pixel-1
X-Tumblr-Pixel-0
X-RemovedCookies
X-Tumblr-Pixel
X-G
X-COUNTRY
ServerID
Content-Disposition
Country
X-Drupal-Cache-Tags
X-CDN-Forward
X-Datadog-Trace-Id
X-Datadog-Parent-Id
X-Datadog-Sampling-Priority
X-Language
X-RateLimit-Reset
X-HTML-Minification-Powered-By
X-Tt-Trace-Host
X-Tt-Trace-Tag
Accept-Language
Countrycode
X-Yottaa-Metrics
X-DynaTrace
X-Datadog-Sampled
X-Yottaa-Optimizations
Liferay-Portal
X-Amzn-Remapped-Content-Length
X-Vcache
X-DynaTrace-JS-Agent
X-Debug-IsConnected
X-B3-SpanId
X-Debug-IsPreview
X-Generated-By
Xet-Cookie
X-XRDS-LOCATION
X-ID
X-Nf-Request-Id
Backend
X-DataDome
X-Mg-Request-UUID
CF-IPCountry
X-Tt-Logid
X-Drupal-Cache-Contexts
X-Mode
X-ECache
X-Nginx-Cache
Webserver
X-WP-CF-Super-Cache
X-WP-CF-Super-Cache-Cache-Control
X-Content-Powered-By
Xserver
X-NYM-Debug-Backend
X-Signature
X-Device-Type
X-B-Cache
X-Tec-Api-Version
X-Tec-Api-Origin
X-Tec-Api-Root
GEO-INFO
X-Zen-Fury
X-Httpd
X-Content-Age
X-MCACHE
Url
X-Ratelimit-Reset
X-Erf-Web-Scheduler
Load-Balancing
X-Urbn-Context-Path
X-UPSTREAM-Address
X-Urbn-Site-Id
X-Varnish-Cache-Hits
X-Container-Uri
X-Director
X-Sucuri-ID
X-ServerID
X-JoinUs
X-Git-Commit
X-Rewrite-Enabled
X-Sucuri-Cache
X-Cache-Operation
X-Cache-Action
Azure-SiteName
Azure-SlotName
Azure-RegionName
Azure-InstanceId
X-Servername
Azure-Version
Filters
Onion-Location
S-Rt
Meta-Geo
Locale
X-LAGOON
X-SaId
X-Cluster-Node
X-Soup
Uber-Trace-Id
X-Storage
Web-Mar-Node
X-Xrds-Location
X-Served-From
X-Ms-Version
X-Ms-Request-Id
X-Generation-Time
X-Logging-Id
X-Varnish-Hostname
X-Detected-As
X-VCT
X-Say-Cacheable
X-Tb
X-Proto
X-Say-TTL
X-SayCDN-TTL
Webcakes-App-Name
Node
Mn-Server-Ip
Webcakes-App-Version
TWC-Privacy
Webcakes-Region
TWC-GeoIP-Country
TWC-Connection-Speed
TWC-GeoIP-LatLong
Property-Id
TWC-Locale-Group
TWC-Device-Class
X-RCS-CacheZone
X-Labrador-Cache-Channel
X-Forwarded-Host
X-PHP-Host
X-RM-Cache-TTL
X-VC-Cache
X-Zipkin-Id
X-Uri
X-Origin-Hint
X-Extlb
DB-Nickname
X-Routing-Service
X-Skip-Cache
X-Cache-Server
X-Proxied
X-Sql-Duration-Ms
X-Sql-Count
X-Adobe-Source
X-Format
X-Tumblr-Pixel-2
X-Tumblr-Pixel-3
X-Proxy-Build
Selected-Fe
X-Timing-Wait
X-R9-Blue-Green-Version
X-Debug
X-Fetched-On
X-LSADC-Cache
X-FB-TRIP-ID
X-GeoCountry
Fastcgi-Useragent
X-GeoCode
X-MP-GENERATED-AT
X-Lambda-Id
X-Cache-Expired-At
Fastly-Drupal-HTML
OT-Force-Account-Verify
CDN-RequestId
X-Via-JSL
X-NGENIX-Cache
X-Origin-Date
Source
X-Cache-Hit
X-Template
X-Node-Name
X-Varnish-Hits
Content-Secure-Policy
X-AIR-PT
X-Tncms
X-Cache-TTL-Remaining
X-Loop
X-Endurance-Cache-Level
X-Ua
X-Pass-Why
Upgrade-Insecure-Requests
X-Srv
X-UA-Device-Type
X-Pubstack
X-Redis-Cache
Cross-Origin-Window-Policy
NGB
X-Server-W
X-PHP-Backend
X-Real-IP
X-Fastly-Request-Id
X-Origin-CC
X-Origin-TTL
X-CCDN-CacheTTL
X-Datadome
Cache-Hits
X-CCDN-Origin-Time
X-TimeS
X-Hcs-Proxy-Type
X-Cache-Host
X-RTag
MS-CV
Ms-Operation-Id
Cache-Name
Section-Io-Origin-Time-Seconds
Section-Io-Origin-Status
Section-Origin-Responded
Section-Io-Id
Cache-Provider
X-Xfnlog-Site
X-Restarts
Apigw-Requestid
X-CSRF-Token
X-Cms-Context
X-S
X-Optimistic-Header
X-IPLB-Instance
X-Reqid
X-IPLB-Request-ID
CDN-RequestCountryCode
X-Cache-Type
CDN-RequestPullCode
CDN-Cache
CDN-CachedAt
CDN-PullZone
CDN-EdgeStorageId
CDN-RequestPullSuccess
CDN-Uid
X-No-Session
X-ProxyCache-Key
X-BYPASS-REASON
X-ProxyCache-Status
X-Hl-Ver
X-GEO
X-VWS-Id
X-Aspnetmvc-Version
X-Via-Fastly
X-LJ-Flow-ID
X-Cluster
X-Newrelic-Synthetics
X-AWS-Id
X-Section
X-Rn-Rsrv
X-Access
Gh-Request-Id
Gannett-Cam-Experience-Id
Fastly-GeoIP-CountryCode
Ha-Gx-Prefs
HA-Ipaddr
Lang
L5d-Success-Class
L
Fastly-Backend-Name
DCR-Processing-Time-Ms
X-A-Dgt
Candidate-Md5Url
Canary
CPC-Age
CPC-Cache
Web-Mar-Region
DCR-Decision-By
X-A-Dcw
Magicmarker
Mail-Subject
Server-Host
X-A-Ccd
Rendered-Blocks
Sslversion
X-A
T-Server
Surrogated-Key
VNS-Age
Redirect-Candidate
Odigeo-Trace-Id
We-Hiring
Meta-Geo-Continent
MD5-Digest
N-Cache
Ngx.Var.Host
VNS-Cache
W
Vix-Hermes-Req-Id
X-Cache-Bucket
X-Eu-Site
X-Epic-Correlation-Id
X-Ec-GeoHdr
X-Slack-Backend
X-Shop-Environment
X-SD-PageType
X-External-Request-Id
X-Ec-Fail
X-Ec-Custom-Error
X-Slack-Shared-Secret-Outcome
X-Debug-Cache-Fetch
X-Debug-Cache-Store
X-Destination
X-Dispatcher-Number
X-Developer
X-ScT
X-S-Cookie
X-Irp-Debug
X-GeoIP-Region-Code
X-GeoIP-Country-Code
X-Mvc-Supplant-Cachable
X-Nyt-Route
X-Origin-Time
X-Orig-Expires
X-Gdpr
X-RateLimit-Limit-Second
X-Fastly-Backend
X-Rojux
X-FC-Vary-Parameters
X-Request-Host
X-RateLimit-Remaining-Second
X-Forwarded-Path
X-SRCache-Key
X-Tenant
X-Bc-Bl
X-B-Cookie
X-Application
X-BCube-Filmed-By
X-Bl-Debug
X-Cache-Info
X-Policy
X-Aed
X-Viewer-Country
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-We-Are-Hiring
X-Vtex-Remote-Cache
X-Accel-Expires-Debug
X-A-Wwc
X-Cache-NE
X-CacheTTL
X-TIM-N
X-Var-Ttl
X-Conf
X-Csrf-Jwt
X-Date
X-D
X-Vdms-Path
X-CGP
X-Cdn-Diag
X-VG-WebCache
X-CF-Lambda-Fn
X-Vdms-Version
BehaviorPad-Version
X-CF-Lambda-Version
Xc-Version
X-A-Dam
X-CACHE-AGE
X-Akamai-Transformed
X-Proxy-Cache-Status
X-Fmm-Version
X-Esi-Check
X-Forwarded-Site
X-Generated-On
X-Hash
X-Human
X-Handled-By
X-Gzip
X-Geo-Header
X-Core-Value
X-Clara-WADP
X-ApacheServer
X-App-Name
X-Alternate-Cache-Key
Req-Svc-Chain
Release
X-Auto-Login
X-BBC-Edge-Cache-Status
X-Level-Front-Cache
X-Cache-Id
X-Cache-Debug
X-Bip
X-Clientip
X-Mly-Id
X-Storefront-Renderer-Rendered
X-Test
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Shopify-Stage
X-Thanos
X-Up
Fastly-SSL
X-WADP-Cache
X-VG-TLSProxy
X-Varnishpool
X-ShopId
X-ShardId
X-Org
X-Origin-Response-Time
X-Old-Content-Length
X-Node-Id
Origin
X-PAYTM-SRV-ID
X-PERF
X-Server-IP
X-Request-Time
X-Pool
X-Platform
X-Mid
X-Owner
Datacenter
Machine
Host-ID
Memcached
AKAMAI
Cmstype
Cmsid
Environment
WP-Super-Cache
X-Vcl-Version
AMP-Access-Control-Allow-Source-Origin
X-Web-Node
User-Cache-Control
X-Has-Esi
X-Wix-Viewer-Type
X-Worker
X-Scale
Apple-News-Services-Handled
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
CDCHOST
True-Client-Country-4JS
X-Cdn-Srv
X-Accel-Buffering
X-Block-Status
X-Cs
X-Mvc-Supplant-OutputCached
X-Nananana
X-Nginx-Cache-Key
X-Hnp-Log
Esi-Enabled
X-Is-Gdpr
X-JWT-State
X-INCAP-ABP
X-Gen-Mode
X-NodeID
X-Thinkindot-L3
X-Core-Mission
X-CMSURLCustom
X-Dispatcher-Server
Apple-News-Services-Parsed-Url
X-From
DSUID
X-Origin
Country-Code
X-S-Maxage
TDXMobile
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-WA-Info
ServedBy
Apple-News-Services-Request-Url
Sever-Int
Server-Hostname
Server-Ext
Expect-Staple
Apple-News-Services-Host
Thinkindot-Control
NM-Fastcgi-Cache
X-Parent-Response-Time
X-Air-Trace-Id
X-Air-Source
X-Air-Hostname
Ssr
X-Vmg-Version
X-DefElseHash
Producers
X-DPWN-IS-SECURE
X-DefHash
X-VServer
X-Cdn-Origin
X-LB-NoCache
Wxu-Next-Region
Platform
X-Varnish-CookieHashed-On
X-Variation
X-Presslabs-Stats
X-Varnish-CookieINHashed-On
Wxu-Next-Commit
Adler-Geo
X-Sn-Servicetimems
Wxu-Next-Hostname
X-Varnish-Remaining-TTL
X-Qloud-Router
X-Instance-Name
C-Via
Is-Eu
X-Loc
Pics-Label
X-App
X-NCache
X-Op-Id-All
X-Azure-Ref-OriginShield
X-Nitro-Cache
CloudFront-Viewer-Country
X-Device-Os
Memory
X-Amz-Meta-Cb-Modifiedtime
X-TA-CDN-Provider
Server-ID
Server-Info
X-Cache-Enabled
Time
X-Akamai-Device-Characteristics
X-GeoIP
X-Refresh
Origin-CC
Origin-EX
X-Tx-Id
X-TIME
X-Microcachable
X-HA-Backend
X-Platform-Router
X-Cache-Status-Check
X-Platform-Processor
Cache-Host
X-Platform-Cluster
X-Locale
X-Site-Version
X-Dc
NGX
X-Correlation-ID
XM
X-Origin-Expires
PFcat
X-HN
Hostname
Resin-Trace
X-VarnishDD-TTL
X-VHOST
X-API-Version
GeoIP-Latitude
Origin-Agent-Cluster
X-CACHE-GROUP
X-ZONE
Cf-Device-Type
Cdn-Requestid
X-Tb-Optimization-Total-Bytes-Saved
Edge-Copy-Time
X-Via-CDN
Srvid
X-Via-Edge
X-FL-EDGE
X-Via-SSL
A
X-FL-QIT-DEBUG
Locid
X-Ad-Defer-Variation
X-Zone
X-Wp-Cf-Super-Cache-Active
X-Varnish-Beresp-Grace
X-DC
X-Upstream-Ht
X-Upstream-Ct
X-Varnish-Beresp-Ttl
X-Vgn-Hpd-Reason
Sid
YJS-ID
X-Fpc
X-FireWall-Port
X-Webkit-Csp-Report-Only
X-ATG-Version
Cache-Key
X-Cache-ASPX
X-Contensis-Viewer-Groups
X-Internal-Host
Uri
X-Micro-Cache
X-Varnish-Authentication
X-Moov-Xdn-Version
X-Pod-Name
X-Moov-T
True-Client-Ip
X-Github-Request-Id
X-Cached-By
X-WP-CF-Super-Cache-Active
X-LiteSpeed-Cache-Control
X-TraceId
X-DataCenter
User-Agent
X-VCache
X-Provided-By
X-Info
State
X-HS-Content-Campaign-Id
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
X-SIPLIST1
IsBot
X-Planisys-CDN-Cache
X-AB
X-URL
X-B3-Spanid
X-Buckets
Location
X-Fastly-Cache
X-B3-Parentspanid
GeoIP-Country-Code
X-RN-RSRV
X-Platform-Server
X-NewRelic-App-Data
X-VC
X-NGINX-Cache
X-Sigma-Backend
X-Nitro-Rev
X-Geo-Region
X-Nitro-Cache-From
X-Cache-Remote
X-Rocket-Build-Number
X-Datacenter
X-Sigma
X-Release
X-LiteSpeed-Tag
X-Api-Version
X-Geo
X-Backend-Instance
GeoIp-Country-Code
Cache
Cdn
X-MSEdge-Features
X-MSEdge-Flight
X-Accel-Version
SID
X-FTR-Request-ID
CF-Ctrl
X-Generated-In
X-CS
X-Gamma-Serve
XServer
X-CSRF-TOKEN
Srv
Lb
X-HostName
X-GeoIP-City
Cache-Tv-Group
NtCoent-Length
Tcn
True-Client-IP
X-Vgn-Hpd-Cached
X-Vgn-Hpd-Variations-Key
X-Vgn-Hpd-Ssi
X-Is-Tablet
X-Is-Supported-Browser
X-Is-Desktop
X-Is-Mobile
X-Browser-Name
X-Tcp-Rtt
X-Rebelmouse-Surrogate-Control
X-Scheme
X-TRACE-ID
Path
Fastly-Drupal-Html
X-HS-Status
X-Rebelmouse-Cache-Control
X-SRV
X-FPC
Kp-EeAlive
Epwk-X-Cache
HostName
X-Frame-Option
X-Hyper-Cache
X-GoCache-CacheStatus
Ohc-File-Size
X-Location
X-Service
X-Amz-Meta-Opti
X-Mobile-URL
X-UA
X-TX-ID
CountryCode
Cf-Ipcountry
X-APP-VERSION
Serverid
X-Region-Sid
X-Men
X-Developers
X-AK-Request-ID
X-Esi
X-Aicache-OS
On-Server
CacheControlHeader
Cdncip
X-Air-Pt
Cdnsip
X-Guploader-Uploadid
Tube-Get-Contents
RNT-Time
RNT-Machine
X-Traceid
Mime-Version
Tube-Got-Eval
Tube-Return
V-Age
X-Acquia-Purge-Cdn-Unconfigured
X-Cache-FS-Status
Tube-Got-Results
X-CDN-Cache-Status
X-B3-Trace-ID
X-Cache-Ttl
X-Webstats-RespID
Click-Count-Error
Click-Count-Action-Start
X-Branch-Name
X-SB
X-Req
Proxy-Connection
X-V-Cache
WebServer
X-Wp-Cf-Super-Cache-Cache-Control
X-Via-Popv
X-Via-Popn
X-Via-Poph
X-EC-Lua
X-Cache-Tags
X-Minions-Version
X-LB-ID
X-Wp-Cf-Super-Cache
X-Wp-Cf-Super-Cache-Cookies-Bypass
X-Pad
Env
XkeyRZ
X-Cdn-Cache-Status
X-Vc
X-Nc
WZWS-RAY
X-Proxy-CacheRZ
CF-Cached-On
Ohc-Cache-HIT
Yak-Timeinfo
WWW-Authenticate
X-Servedbyhost
X-Wa
ENV
X-VCL-Version
CDN
X-CACHE-KEY
Geoip-Latitude
Cdn-Request-Time
LB
Cdn-Host
X-Edge-Server
X-Cdn-Forward
X-NWS-UUID-VERIFY
X-Fastly-Country-Code
Ngx
X-Edge-Pop
X-User
X-Akamai-Pragma-Client-IP
X-Check-Cacheable
X-Lb-Cache
X-TH-Server
X-Processor
Server-Id
X-Ha-Backend
Content-Style-Type
Content-Script-Type
X-Origin-Cache-Key
M-TraceId
X-Ckpd-Fst-Backend
X-FTR-Cache-Status
X-FTR-Balancer
X-Vercel-Cache
X-FTR-Expires
X-NMSegId
X-FTR-Backend-Server
X-Vercel-Id
Req-ID
X-FTR-Backend
X-Country-Code-Real
X-RID
X-TT-LOGID
X-Acquia-Application-UUID
X-Cdn-Request-ID
X-Acquia-Purge-Tags
X-Acquia-Site
X-Acquia-Application-Trace
X-Lb-Nocache
PICS-Label
HIT
X-CUA
Cluster
X-Via-Ucdn
X-Render-Time
X-IN-APIGATEWAYSSL
X-IN-APIGATEWAY
X-APP
X-Litespeed-Cache-Control
X-WP-CF-Super-Cache-Cookies-Bypass
X-Dw-Trace-Id
X-MiniProfiler-Ids
X-Snapshot-Date
X-Edge-POP
Yjs-Id
Cneonction
Sm-Log-Id
X-Ad-Load-Variation
CACHE-MISS-TO-ORIGIN
Inserted-Into-Cache-At
X-Fastly-Backend-Reqs
X-Udemy-Cache-App-Namespace
X-Miniprofiler-Ids
X-M-Log
X-M-Reqid
X-ElasticPress-Query
Edge-Cache
Log-Origin
X-Iauth-Set-Uid
X-Cached-Since
Vha6-Origin
X-Service-Response-Time
X-Fastly-Cache-Hits
X-Serial
X-Response-By
X-RAMCache
X-Cache-Date