Threat Level: green Handler on Duty: Russ McRee

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
X-Powered-By
Pragma
X-XSS-Protection
X-Cache
CF-RAY
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
Alt-Svc
P3P
X-Cache-Hits
X-UA-Compatible
X-Xss-Protection
CF-Ray
X-Served-By
X-Download-Options
X-Timer
X-Request-Id
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Generator
X-Cache-Status
X-Check
X-Cacheable
X-DNS-Prefetch-Control
X-FRAME-OPTIONS
X-Envoy-Upstream-Service-Time
Timing-Allow-Origin
X-Iinfo
X-Request-ID
X-Drupal-Dynamic-Cache
Feature-Policy
X-Content-Security-Policy
X-Dns-Prefetch-Control
Content-Encoding
X-XSS-PROTECTION
Access-Control-Expose-Headers
Upgrade
Server-Timing
X-CDN
Status
X-AspNetMvc-Version
Access-Control-Max-Age
X-Amz-Request-Id
Request-Context
X-Amz-Id-2
X-Via
X-Turbo-Charged-By
X-Backend
X-Robots-Tag
X-Cache-Group
Cf-Edge-Cache
Host-Header
Keep-Alive
X-AH-Environment
X-Hacker
X-Proxy-Cache
X-UA-Device
X-Server
X-Vhost
X-Rq
X-Server-Powered-By
Allow
X-Age
X-Varnish-Cache
X-Ws-Request-Id
X-Dispatcher
X-Amz-Version-Id
EagleId
P3p
Nel
Grace
Cf-Apo-Via
X-LiteSpeed-Cache
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Page-Speed
Cf-Railgun
X-Device
EagleEye-TraceId
X-Aws-Lambda-Call-Status
X-Swift-CacheTime
X-Swift-SaveTime
X-OneAgent-JS-Injection
X-Pingback
Ali-Swift-Global-Savetime
X-Host
Accept-CH
X-Node
X-WebKit-CSP
X-CST
X-Backend-Server
Surrogate-Control
X-Cache-Lookup
X-Server-Id
X-Readtime
X-Nginx-Cache-Status
Permissions-Policy
X-Akam-SW-Version
X-Nginx-Upstream-Cache-Status
Request-Id
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Application-Context
X-Content-Security-Policy-Report-Only
Accept-CH-Lifetime
X-Cloud-Trace-Context
X-Ua-Compatible
X-Trace
X-Response-Time
X-HW
X-Edge
Content-Location
X-Clacks-Overhead
X-Mod-Pagespeed
Xkey
X-Litespeed-Cache
Rating
X-Midtier
X-ESI
X-Ruxit-JS-Agent
X-Url
X-Amz-Server-Side-Encryption
X-ECACHE
Accept-Ch-Lifetime
X-Mcache
X-Upstream
X-Ruxit-Js-Agent
Accept-Ch
X-Vcap-Request-Id
X-Country
Cache-Tag
X-D2id
X-MS-InvokeApp
Verso
X-Exp-Id
X-Rack-Cache
X-Exp-Variant
X-Cdn-Fetch
X-Kinja
X-Kinja-Server
X-Kinja-Revision
X-Kinja-Build
X-GoogleNews-Bot
X-Use-Magma
X-TtlSet
X-PC
X-Vname
X-Element-Page-Cache
X-Powered-By-Plesk
Edge-Control
RTSS
X-Cache-TTL
X-Oneagent-Js-Injection
Fastly-Restarts
X-Ac
X-VARITI-CCR
Origin-Trial
X-WebKit-CSP-Report-Only
X-Navigation-Version
X-Abt-Application-Version
X-Country-Code
Service-Worker-Allowed
X-Goog-Hash
X-Cached
X-Varnish-TTL
X-Ttl
X-Middleton-Display
Pagespeed
X-Amz-Rid
X-Browser-Type
Display
X-Sol
Cross-Origin-Opener-Policy
X-GitHub-Request-Id
X-Dw-Request-Base-Id
SPRequestGuid
X-SharePointHealthScore
X-Content-Type
X-Mg-S
X-Server-Name
X-Amzn-Trace-Id
X-B3-TraceId
X-Powered-CMS
X-Erf-Bev-Bev
X-Kraken-Loop-Name
X-Erf-Bev-Bev-Is-Generated
X-Instrumentation
X-Server-Lifecycle-Phase
Response
X-Middleton-Response
Arr-Disable-Session-Affinity
SPIisLatency
SPRequestDuration
AR-Request-ID
AR-ATIME
X-Kinja-CCPA
AR-PoweredBy
AR-SID
X-NF-Request-ID
X-Webkit-CSP
X-Cache-Key
X-Times
X-ORACLE-DMS-RID
X-ORACLE-DMS-ECID
X-NWS-LOG-UUID
X-Version
X-Pinterest-Rid
Pinterest-Version
Pinterest-Generated-By
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-HP-Trace-Id
X-HP-Webp
X-Jurisdiction
AR-CACHE
X-Accel-Expires
Cache-Tags
X-Server-ID
X-T
X-Cnection
Cache-Status
X-Aspnetmvc-Version
Front-End-Https
Nginx-Cache
Edge-Cache-Tag
X-MSEdge-Ref
X-Hits
X-B3-Traceid
X-Fastly-Request-ID
X-Client-IP
X-Px
X-Ser
X-RateLimit-Remaining
X-B3-TraceId-Primal
MRF-Tech
Mrf-Cache-Status
Public-Key-Pins
X-Fastcgi-Cache
X-Recruiting
Payment
X-FastCGI-Cache
X-LLID
X-Frontend
Server-Node
X-Request-Received
X-Request-Processing-Time
X-Ua-Browser
X-Erf-Stays-Pdp-Viaduct-Migration-Web
X-Shield-Request-Id
X-RateLimit-Limit
X-DIS-Request-ID
S
TP-Cache
X-GUploader-UploadID
X-Goog-Metageneration
MicrosoftSharePointTeamServices
Access-Control-Request-Method
X-Amz-Apigw-Id
Content-MD5
X-HS-Hub-Id
X-HS-Combine-CSS
X-Amzn-RequestId
X-HS-Cache-Config
X-HS-Content-Id
X-Content-Digest
X-Distributor
X-Request-Handler-Origin-Region
X-Microsite
X-Protected-By
X-LB-Cache
Realpath
X-Page-Id
TP-L2-Cache
X-FB-Debug
Access-Control-Allow-Method
Accept-Charset
Fastcgi-Cache
X-Ezoic-Cdn
X-Geo-Country
X-Cluster-Name
X-Forwarded-For
X-Webkit-Csp
X-Rid
X-PressLabs-Stats
X-Ratelimit-Remaining
X-Hostname
X-Aspnet-Version
X-B3-Sampled
X-Ua-Device
X-Seen-By
X-Correlation-Id
Cleartype
Referer-Policy
X-Daa-Tunnel
X-Goog-Generation
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-Newrelic-App-Data
X-TEC-API-ORIGIN
X-Ratelimit-Limit
X-TEC-API-ROOT
X-TEC-API-VERSION
Cross-Origin-Resource-Policy
X-Envoy-Decorator-Operation
X-Mobile
TCN
DC
X-Content-Options
Count-Hit
X-Debug-Info
X-TTL
X-Varnish-Backend
X-Logged-In
X-Origin-Cache
X-App-Server
X-Contextid
Surrogate-Key
X-Hosted-By
X-App-Environment
X-Aspnet-Duration-Ms
X-Request-Guid
X-Revision
X-Providence-Cookie
X-Grace
X-IPS-LoggedIn
X-Is-Crawler
X-Route-Name
X-Varnish-Grace
X-Flags
X-Amz-Replication-Status
X-Fb-Rlafr
X-Git-Hash
X-Azure-Ref
X-TT
X-Client-Ip
Frame-Options
X-Amz-Meta-S3cmd-Attrs
X-Origin-Server
X-Forwarded-Proto
X-Edge-Location-Klb
X-Kinsta-Cache
X-Wix-Request-Id
Retry-After
Alternate-Protocol
X-XRDS-Location
X-Whom
WPO-Cache-Message
WPO-Cache-Status
Healthy
X-F-Cache
Charset
X-Magnolia-Registration
X-Akamai-Edgescape
Section-Io-Cache
X-Backend-Name
X-RateLimit-Reset
Viewport
X-COUNTRY
MS-Author-Via
X-B
X-Id
X-Proxy-Cache-Info
X-Webkit-CSP-Report-Only
Paypal-Debug-Id
ServerID
SRV
X-App-Version
X-Activity-Id
X-Az
X-AppVersion
Amp-Access-Control-Allow-Source-Origin
X-Language
X-N
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-Response-Served-From
X-Cache-Rule
X-Http-Reason
X-ARC
X-Instance
X-Original-Request-Id
X-Rule
Akamai-GRN
X-Edge-Location
X-Akamai-Request-ID2
X-Status
Front
X-Cache-Grace
X-User-Agent
Host
X-UUID
Filterid
Protected
X-Page-View
X-FW-Version
X-FW-Type
X-FW-Serve
X-FW-Dynamic
X-FW-Static
X-FW-Hash
X-Load-Cache
X-L-Path
Fastly-SWR
From-Origin
Fastly-SIE
X-Region
X-Jobs
X-Is-Bot
X-FW-Server
X-Kong-Proxy-Latency
X-Varnish-Age
X-Varnish-Server
X-Kong-Upstream-Latency
X-Unique-Id
X-Rocket-Nginx-Serving-Static
X-Environment-Context
X-Rendered-As
X-Www-Served-By
SD-X-WS
Country
X-Datadog-Sampling-Priority
X-Adobe-Content
X-Datadog-Parent-Id
Access-Control-Request-Headers
X-Datadog-Trace-Id
X-Type
X-Cacheable-TTL
X-Framework
X-DataDome
X-Cache-Time
X-EdgeConnect-Cache-Status
X-Adobe-Loc
Server-Name
X-G
X-Cache-Control
X-Trace-Id
X-Proxy
X-Time
X-Tumblr-Pixel-1
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Vcache
X-Cache-Age
X-RemovedCookies
X-Xrds-Location
X-ProcessESI
Refresh
X-Datadog-Sampled
X-ECache
X-CDN-Forward
X-Mg-Request-UUID
X-Amzn-Remapped-Content-Length
X-Debug-IsPreview
X-Debug-IsConnected
X-Source
X-Oracle-Dms-Ecid
X-Oracle-Dms-Rid
Content-Disposition
X-Signature
X-B-Cache
X-Drupal-Cache-Tags
X-Erf-Web-Scheduler
Accept-Language
Xet-Cookie
X-WP-CF-Super-Cache-Cache-Control
Backend
X-WP-CF-Super-Cache
X-Generated-By
Countrycode
Version
X-HTML-Minification-Powered-By
X-DynaTrace
CF-IPCountry
X-DynaTrace-JS-Agent
X-Httpd
Webserver
X-Nginx-Cache
X-Servername
X-Mode
Url
X-Tt-Trace-Tag
X-Tt-Trace-Host
X-Upgrade-Enabled
Xserver
X-ID
GEO-INFO
X-Content-Age
X-Device-Type
X-Storage
X-NYM-Debug-Backend
X-Template
X-Tb
Azure-InstanceId
Meta-Geo
X-URL
X-Director
X-Proto
X-Rewrite-Enabled
Azure-SlotName
S-Rt
X-Cache-Operation
Onion-Location
X-Varnish-Cache-Hits
Azure-RegionName
Azure-SiteName
Locale
X-GeoCountry
Load-Balancing
X-Fastly-Request-Id
X-JoinUs
X-XRDS-LOCATION
Filters
Fastcgi-Useragent
X-SayCDN-TTL
X-ServerID
X-Content-Powered-By
X-LAGOON
X-GeoCode
X-UPSTREAM-Address
X-SaId
X-Urbn-Context-Path
X-Urbn-Site-Id
X-Say-Cacheable
Azure-Version
X-Say-TTL
X-Container-Uri
X-Git-Commit
X-MCACHE
X-Cluster-Node
X-Forwarded-Host
X-RM-Cache-TTL
X-Cache-Action
X-VC-Cache
OT-Force-Account-Verify
X-PHP-Host
X-Labrador-Cache-Channel
Uber-Trace-Id
X-Generation-Time
Web-Mar-Node
X-Adobe-Source
X-Sql-Count
X-Logging-Id
X-Detected-As
X-VCT
X-Tt-Logid
X-Varnish-Hostname
X-Sql-Duration-Ms
X-Ms-Request-Id
X-Ms-Version
X-Soup
TWC-Device-Class
Node
Mn-Server-Ip
Property-Id
X-Lambda-Id
X-RCS-CacheZone
X-R9-Blue-Green-Version
X-Proxied
X-Origin-Hint
X-Routing-Service
X-Zipkin-Id
DB-Nickname
X-Sucuri-Cache
X-Sucuri-ID
X-Zen-Fury
X-LSADC-Cache
X-Served-From
Webcakes-App-Name
TWC-Privacy
TWC-Locale-Group
TWC-GeoIP-LatLong
Webcakes-App-Version
Webcakes-Region
X-FB-TRIP-ID
X-Extlb
X-Debug
X-Cache-Server
TWC-GeoIP-Country
TWC-Connection-Speed
X-Tec-Api-Root
X-Tec-Api-Version
X-Tec-Api-Origin
X-Fetched-On
X-Proxy-Build
X-Skip-Cache
X-Format
X-Timing-Wait
Selected-Fe
X-Uri
X-Tncms
X-Loop
CDN-RequestId
X-B3-SpanId
X-Drupal-Cache-Contexts
X-Rn-Rsrv
Liferay-Portal
X-Tumblr-Pixel-2
X-Tumblr-Pixel-3
Source
X-Cache-Hit
X-Nf-Request-Id
X-Endurance-Cache-Level
X-Hcs-Proxy-Type
X-CCDN-CacheTTL
X-CCDN-Origin-Time
X-Ua
X-Varnish-Ttl
Cross-Origin-Window-Policy
X-Redis-Cache
X-Origin-Date
X-MP-GENERATED-AT
X-Srv
Fastly-Drupal-HTML
X-TimeS
X-Ratelimit-Reset
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
Section-Io-Id
Section-Io-Origin-Status
X-Cache-Expired-At
X-Varnish-Hits
X-S
Upgrade-Insecure-Requests
X-Pass-Why
Content-Secure-Policy
X-Cache-TTL-Remaining
X-Akamai-Transformed
X-Real-IP
X-UA-Device-Type
X-Origin-CC
X-Origin-TTL
X-CACHE-AGE
X-Newrelic-Synthetics
X-Pubstack
CDN-RequestPullSuccess
CDN-PullZone
CDN-Cache
CDN-CachedAt
CDN-EdgeStorageId
CDN-RequestCountryCode
CDN-RequestPullCode
CDN-Uid
X-Node-Name
X-GEO
X-Server-W
X-Hl-Ver
X-Via-JSL
X-NGENIX-Cache
Cache-Provider
X-CSRF-Token
X-RTag
NGB
X-Handled-By
X-Presslabs-Stats
Ms-Operation-Id
MS-CV
X-Xfnlog-Site
X-Restarts
X-Cms-Context
X-Optimistic-Header
X-IPLB-Request-ID
X-IPLB-Instance
X-Reqid
Apigw-Requestid
X-Cache-Type
WP-Super-Cache
X-Bl-Debug
X-BCube-Filmed-By
X-Bc-Bl
X-Cdn-Diag
X-CacheTTL
X-B-Cookie
X-Cache-Bucket
Candidate-Md5Url
X-CF-Lambda-Fn
X-Cache-NE
BehaviorPad-Version
X-Cache-Info
X-Cache-Host
Canary
X-Conf
X-Dispatcher-Number
X-Developer
X-Ec-Custom-Error
X-Ec-GeoHdr
ServedBy
X-Epic-Correlation-Id
X-Destination
X-Debug-Cache-Store
X-Csrf-Jwt
X-CGP
X-D
X-Date
X-Debug-Cache-Fetch
X-CF-Lambda-Version
DCR-Processing-Time-Ms
VNS-Cache
Meta-Geo-Continent
N-Cache
VNS-Age
W
MD5-Digest
Web-Mar-Region
We-Hiring
Magicmarker
Mail-Subject
Ngx.Var.Host
Vix-Hermes-Req-Id
Sslversion
Redirect-Candidate
Server-Host
Rendered-Blocks
Surrogated-Key
T-Server
True-Client-Country-4JS
Odigeo-Trace-Id
Origin-Agent-Cluster
Lang
L5d-Success-Class
X-Accel-Expires-Debug
Fastly-Backend-Name
Fastly-GeoIP-CountryCode
Fastly-SSL
X-Aed
X-App
CPC-Cache
X-Application
DCR-Decision-By
X-Eu-Site
Gannett-Cam-Experience-Id
X-A-Wwc
X-A-Dam
X-A-Ccd
X-A
L
X-A-Dcw
HA-Ipaddr
X-A-Dgt
Gh-Request-Id
Ha-Gx-Prefs
CPC-Age
X-Ec-Fail
X-Parent-Response-Time
X-Tenant
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Var-Ttl
X-Vdms-Version
X-Worker
X-Is-Gdpr
X-Shop-Environment
X-We-Are-Hiring
X-AIR-PT
X-Rojux
X-Viewer-Country
X-Request-Host
X-Nyt-Route
X-VG-WebCache
X-S-Cookie
X-Vtex-Remote-Cache
X-ScT
X-Mvc-Supplant-Cachable
X-Orig-Expires
X-JWT-State
X-GeoIP-Country-Code
X-Slack-Shared-Secret-Outcome
X-Gdpr
X-Has-Esi
Xc-Version
X-SRCache-Key
X-GeoIP-Region-Code
X-Policy
X-FC-Vary-Parameters
X-Vdms-Path
X-Origin-Time
X-External-Request-Id
X-Forwarded-Path
X-Fastly-Backend
X-Webkit-Csp-Report-Only
X-Slack-Backend
X-ProxyCache-Status
X-ProxyCache-Key
X-BYPASS-REASON
X-Vcl-Version
X-TIME
X-Varnish-CookieHashed-On
X-Pool
X-RateLimit-Limit-Second
X-Tx-Id
X-RateLimit-Remaining-Second
X-Variation
X-Qloud-Router
X-Up
X-SVT-ORM-VERSION
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-Shopify-Stage
TDXMobile
X-Storefront-Renderer-Rendered
X-Sn-Servicetimems
X-Sorting-Hat-ShopId
Thinkindot-Control
X-ShopId
X-Test
X-Thinkindot-L3
X-Request-Time
X-SD-PageType
X-Server-IP
X-SVT-ORM-RULES
X-ShardId
X-Refresh
X-Old-Content-Length
X-Mid
X-Loc
X-Core-Mission
X-Core-Value
X-CMSURLCustom
X-Mly-Id
X-Wix-Viewer-Type
Req-Svc-Chain
X-Clientip
X-Irp-Debug
X-INCAP-ABP
X-DPWN-IS-SECURE
X-Sorting-Hat-PodId
X-Fmm-Version
X-DefHash
X-DefElseHash
X-Human
X-Hash
X-Gzip
X-Clara-WADP
X-WADP-Cache
X-Varnishpool
X-VG-TLSProxy
X-Org
X-BBC-Edge-Cache-Status
X-App-Name
X-Varnish-Remaining-TTL
X-Platform
X-Varnish-CookieINHashed-On
X-Alternate-Cache-Key
X-Esi-Check
X-NodeID
X-Mvc-Supplant-OutputCached
X-VServer
X-Cdn-Origin
X-Nitro-Cache
X-Cache-Id
X-Vmg-Version
X-Cache-Debug
X-No-Session
X-Accel-Buffering
X-Auto-Login
Expect-Staple
Is-Eu
Machine
Origin
Environment
Cmstype
Adler-Geo
Cf-Device-Type
Cmsid
Platform
Datacenter
Producers
Release
X-AWS-Id
X-LJ-Flow-ID
X-VWS-Id
User-Cache-Control
X-Cluster
Cache-Name
Cache-Hits
X-Device-Os
X-Nananana
Server-Hostname
X-Bip
Country-Code
X-PERF
DSUID
X-PAYTM-SRV-ID
X-Origin-Response-Time
X-Owner
X-Block-Status
Apple-News-Services-Request-Url
X-Nginx-Cache-Key
Apple-News-Services-Parsed-Url
Apple-News-Services-Handled
X-Cdn-Srv
X-Node-Id
X-Origin
CDCHOST
AKAMAI
X-Thanos
X-ApacheServer
X-Geo-Header
X-GeoIP
X-Hnp-Log
X-Ah-Environment
X-Generated-On
X-Gen-Mode
NM-Fastcgi-Cache
X-From
X-Datadome
Memcached
Hostname
X-Forwarded-Site
X-WA-Info
Esi-Enabled
Apple-News-Services-Host
Sever-Int
X-Akamai-Device-Characteristics
Host-ID
X-Level-Front-Cache
X-S-Maxage
Server-Ext
X-Proxy-Cache-Status
X-PHP-Backend
X-Cache-Status-Check
X-LB-NoCache
CloudFront-Viewer-Country
X-Access
Ssr
X-Section
X-Scale
Wxu-Next-Hostname
Wxu-Next-Region
Wxu-Next-Commit
X-Dispatcher-Server
X-Cache-Enabled
C-Via
Origin-EX
Pics-Label
Origin-CC
Server-Info
X-API-Version
AMP-Access-Control-Allow-Source-Origin
X-Micro-Cache
X-TIM-N
NGX
X-Op-Id-All
X-Amz-Meta-Cb-Modifiedtime
X-CACHE-GROUP
X-NCache
X-Instance-Name
X-Github-Request-Id
Memory
Time
Server-ID
X-B3-Spanid
X-Correlation-ID
X-Via-Fastly
X-Dc
X-FTR-Request-ID
X-HA-Backend
X-Wp-Cf-Super-Cache-Active
X-AB
X-Internal-Host
X-Vgn-Hpd-Reason
X-Air-Source
X-Tb-Optimization-Total-Bytes-Saved
X-Air-Trace-Id
X-Air-Hostname
X-Geo-Region
X-Platform-Router
X-Cs
X-Platform-Processor
X-Azure-Ref-OriginShield
X-ZONE
X-Platform-Cluster
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
X-Buckets
Location
IsBot
X-SIPLIST1
GeoIP-Latitude
X-Zone
X-Accel-Version
Cdn-Requestid
X-Fpc
X-B3-Parentspanid
Cache-Host
X-Origin-Expires
X-Microcachable
X-DC
X-Web-Node
X-Backend-Instance
X-DataCenter
X-WP-CF-Super-Cache-Active
X-TraceId
XM
X-Is-Mobile
X-Is-Desktop
X-Is-Tablet
X-Is-Supported-Browser
X-Browser-Name
X-Tcp-Rtt
CF-Ctrl
X-VarnishDD-TTL
Resin-Trace
PFcat
Uri
X-Info
X-Pod-Name
YJS-ID
X-HN
X-TA-CDN-Provider
X-LiteSpeed-Cache-Control
Sid
User-Agent
X-Ad-Defer-Variation
X-Cached-By
X-FL-EDGE
X-FL-QIT-DEBUG
X-Locale
X-Nitro-Cache-From
X-Via-Edge
Srvid
Locid
X-Via-CDN
X-Nitro-Rev
X-Via-SSL
X-Site-Version
True-Client-Ip
A
X-NGINX-Cache
Edge-Copy-Time
GeoIP-Country-Code
GeoIp-Country-Code
X-CS
X-VCache
SID
X-NODE
X-Frame-Option
X-FireWall-Port
XServer
X-Contensis-Viewer-Groups
X-ATG-Version
X-Moov-Xdn-Version
X-Hyper-Cache
Epwk-X-Cache
X-Cache-ASPX
Cdn
X-Moov-T
X-NewRelic-App-Data
X-CSRF-TOKEN
X-Varnish-Authentication
True-Client-IP
Cache-Key
X-MSEdge-Flight
X-MSEdge-Features
X-Webstats-RespID
X-Geo
X-SRV
X-TRACE-ID
X-Service
NtCoent-Length
X-FPC
Fastly-Drupal-Html
X-VC
X-Datacenter
X-Origin-Cache-Key
X-Upstream-Ct
Path
X-Upstream-Ht
X-HostName
Tcn
LB
X-FTR-Balancer
X-Platform-Server
Cdn-Request-Time
X-FTR-Backend
X-FTR-Backend-Server
State
X-HS-Content-Campaign-Id
X-Edge-Server
Cdn-Host
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
X-FTR-Cache-Status
X-Planisys-CDN-TTL
X-LiteSpeed-Tag
X-Country-Code-Real
WebServer
X-Vercel-Id
X-FTR-Expires
X-Vercel-Cache
Cf-Ipcountry
X-Api-Version
X-APP-VERSION
CountryCode
X-Amz-Meta-Opti
M-TraceId
X-Esi
Cdnsip
X-AK-Request-ID
X-Pad
Cdncip
Req-ID
X-Air-Pt
X-Fastly-Cache
X-NMSegId
X-Vgn-Hpd-Variations-Key
WZWS-RAY
X-Vgn-Hpd-Ssi
X-Vgn-Hpd-Cached
X-Release
X-Cdn-Request-ID
X-Ad-Load-Variation
X-Branch-Name
X-Wp-Cf-Super-Cache-Cache-Control
X-Sigma-Backend
Lb
X-Cache-Remote
X-Rocket-Build-Number
X-Cache-Ttl
X-Traceid
X-Sigma
X-Wp-Cf-Super-Cache
X-WP-CF-Super-Cache-Cookies-Bypass
X-Generated-In
X-Wp-Cf-Super-Cache-Cookies-Bypass
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
X-Scope-Id
X-Proxy-CacheRZ
XkeyRZ
X-Request-Start
X-HS-Status
Yak-Timeinfo
X-M-Reqid
Proxy-Connection
X-M-Log
Cluster
Cache
Content-Style-Type
Pramga
Content-Script-Type
X-NWS-UUID-VERIFY
CDN
X-CACHE-KEY
X-Provided-By
X-UA
X-Cdn-Forward
X-Akamai-Pragma-Client-IP
X-GeoIP-City
X-GoCache-CacheStatus
X-Scheme
X-Qnm-Cache
X-Tim-N
X-Shield-Cache-Expires
X-Gamma-Serve
Srv
X-Varnish-Beresp-Status
Geoip-Latitude
X-Lb-Cache
Server-Id
X-Ha-Backend
X-Cdn-Cache-Status
Ohc-File-Size
X-Vc
X-RN-RSRV
CF-Cached-On
X-Request-URI
X-TT-LOGID
X-CUA
Edge-Cache
X-EC-Lua
X-Cache-Date
X-Edge-POP
X-Render-Time
X-TH-Server
X-Acquia-Purge-Tags
Ngx
X-Via-Ucdn
X-Dw-Trace-Id
Env
Inserted-Into-Cache-At
X-Acquia-Application-UUID
X-Acquia-Application-Trace
PICS-Label
X-Lb-Nocache
X-Acquia-Site
Yjs-Id
HostName
X-Acquia-Purge-Cdn-Unconfigured
Tube-Get-Contents
V-Age
MIME-Version
X-Via-Popv
Tube-Got-Results
Tube-Got-Eval
Tube-Return
X-V-Cache
X-LB-ID
X-Fastly-Backend-Reqs
X-Aicache-OS
X-B3-Trace-ID
X-Nc
X-Servedbyhost
X-Via-Popn
X-Via-Poph
X-Cache-FS-Status
X-Wa
X-VCL-Version
X-Cached-Since
X-ElasticPress-Query
X-Litespeed-Cache-Control
Vha6-Origin
X-Snapshot-Date
Kp-EeAlive
CACHE-MISS-TO-ORIGIN
X-Fastly-Cache-Hits
Log-Origin
X-RAMCache
X-Udemy-Cache-App-Namespace
X-User
Click-Count-Action-Start
X-CF-Cache-Header-Vary
X-CF-Cache-Header-Cache-Control
X-Miniprofiler-Ids
Cneonction
Click-Count-Error