Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Accept-Ranges
Expect-CT
X-XSS-Protection
Pragma
X-Powered-By
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Access-Control-Allow-Origin
Referrer-Policy
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
X-UA-Compatible
X-Served-By
X-Xss-Protection
X-Download-Options
CF-Ray
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
X-Request-ID
Access-Control-Allow-Credentials
X-FRAME-OPTIONS
X-Request-Id
X-Permitted-Cross-Domain-Policies
X-AspNet-Version
Alt-Svc
X-Runtime
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-DNS-Prefetch-Control
X-Check
X-Generator
X-Cache-Status
X-Cacheable
Timing-Allow-Origin
X-Iinfo
X-Envoy-Upstream-Service-Time
X-Content-Security-Policy
X-Drupal-Dynamic-Cache
Feature-Policy
Content-Encoding
Access-Control-Expose-Headers
Upgrade
Status
X-CDN
X-AspNetMvc-Version
P3p
Access-Control-Max-Age
X-Via
Server-Timing
X-UA-Device
Request-Context
X-Robots-Tag
X-Turbo-Charged-By
X-Amz-Request-Id
X-Cache-Group
EagleId
X-Amz-Id-2
X-Backend
X-AH-Environment
X-Proxy-Cache
Keep-Alive
X-Server
X-Ws-Request-Id
X-Age
X-Dns-Prefetch-Control
X-Ua-Compatible
Host-Header
X-Hacker
Cf-Edge-Cache
X-Vhost
X-Server-Powered-By
X-Rq
X-Varnish-Cache
X-Dispatcher
X-Amz-Version-Id
Allow
Grace
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-OneAgent-JS-Injection
X-LiteSpeed-Cache
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Page-Speed
Cf-Apo-Via
X-Device
X-WebKit-CSP
Accept-CH
Cf-Railgun
X-Aws-Lambda-Call-Status
X-Node
X-Pingback
X-Host
X-Ruxit-JS-Agent
X-Server-Id
EagleEye-TraceId
X-Nginx-Cache-Status
X-Akam-SW-Version
Surrogate-Control
X-Cache-Spec
X-Backend-Server
Request-Id
X-Readtime
X-Cache-Lookup
X-HW
X-Content-Security-Policy-Report-Only
X-Cloud-Trace-Context
X-Trace
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Application-Context
X-Response-Time
Accept-Ch-Lifetime
Fastly-Restarts
Permissions-Policy
X-Nginx-Upstream-Cache-Status
X-Mod-Pagespeed
X-Edge
X-WebKit-CSP-Report-Only
Accept-CH-Lifetime
Content-Location
X-Content-Type
X-CST
X-Url
X-MS-InvokeApp
X-Mcache
X-Clacks-Overhead
Rating
X-Midtier
X-Amz-Server-Side-Encryption
X-TtlSet
X-PC
X-Vname
X-Country
X-Litespeed-Cache
RTSS
Cache-Tag
X-ESI
X-Vcap-Request-Id
X-D2id
X-ECACHE
X-VARITI-CCR
X-Element-Page-Cache
Origin-Trial
Verso
X-Server-Name
X-Use-Magma
X-Exp-Id
X-Exp-Variant
X-GoogleNews-Bot
X-Cdn-Fetch
X-Kinja-Build
X-Kinja-Revision
X-Kinja
X-Kinja-Server
X-Rack-Cache
X-Ttl
X-Ac
X-Powered-By-Plesk
X-Cnection
X-GitHub-Request-Id
Service-Worker-Allowed
X-B3-TraceId
X-SharePointHealthScore
SPRequestGuid
X-Client-IP
X-Amz-Rid
X-Navigation-Version
Xkey
X-Abt-Application-Version
Edge-Control
X-Cache-TTL
X-NWS-LOG-UUID
SPIisLatency
SPRequestDuration
X-Upstream
X-Varnish-TTL
Arr-Disable-Session-Affinity
X-Erf-Bev-Bev
X-Instrumentation
X-Browser-Type
X-Server-Lifecycle-Phase
X-Kraken-Loop-Name
X-Erf-Bev-Bev-Is-Generated
X-Cached
X-Mg-S
X-Webkit-Csp
X-Px
X-Dw-Request-Base-Id
X-Cache-Key
X-Correlation-Id
Display
X-Sol
Pagespeed
X-Middleton-Display
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-NF-Request-ID
Access-Control-Request-Method
Edge-Cache-Tag
X-FastCGI-Cache
Content-MD5
X-Forwarded-For
X-Country-Code
X-Goog-Hash
Front-End-Https
TCN
X-Powered-CMS
X-Version
X-Id
X-XRDS-Location
Public-Key-Pins
AR-CACHE
AR-PoweredBy
AR-Request-ID
AR-SID
AR-ATIME
X-Jurisdiction
X-HP-Webp
X-HP-Trace-Id
X-MSEdge-Ref
X-T
X-Content-Digest
X-Recruiting
Accept-Ch
X-Daa-Tunnel
X-Amzn-Trace-Id
X-RateLimit-Remaining
X-Ser
X-Accel-Expires
Response
X-Middleton-Response
X-Ratelimit-Limit
TP-Cache
TP-L2-Cache
X-Shield-Request-Id
S
Nginx-Cache
MicrosoftSharePointTeamServices
MRF-Tech
X-B3-TraceId-Primal
Mrf-Cache-Status
Cache-Status
X-Request-Processing-Time
X-Request-Received
X-HS-Hub-Id
X-HS-Content-Id
X-HS-Cache-Config
X-HS-Combine-CSS
Server-Node
X-Fastcgi-Cache
Cache-Tags
X-Distributor
X-Ratelimit-Remaining
X-Hits
X-Kinsta-Cache
X-Edge-Location-Klb
Fastcgi-Cache
X-LB-Cache
X-Origin-Server
Cross-Origin-Opener-Policy
Alternate-Protocol
X-Ratelimit-Reset
X-Ua-Browser
Server-Name
X-Ezoic-Cdn
X-Grace
X-DIS-Request-ID
X-DataDome
X-Geo-Country
Filterid
X-TEC-API-ROOT
X-Request-Handler-Origin-Region
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-Microsite
X-Protected-By
X-Fastly-Request-ID
X-Rid
Healthy
X-Frontend
X-LLID
X-Varnish-Backend
Payment
X-Git-Hash
X-Logged-In
X-Debug-Info
X-Hostname
Cleartype
X-FB-Debug
X-PressLabs-Stats
X-Page-Id
X-Www-Served-By
X-Forwarded-Proto
X-Origin-Cache
X-Load-Cache
X-NGENIX-Cache
X-Cluster-Name
DC
MS-Author-Via
Charset
X-ASPNET-VERSION
Content-Disposition
X-B3-Sampled
Access-Control-Allow-Method
Realpath
X-Goog-Metageneration
X-ORACLE-DMS-RID
X-GUploader-UploadID
X-ORACLE-DMS-ECID
X-Upgrade-Enabled
X-Proxy
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-F-Cache
X-Activity-Id
X-Az
X-AppVersion
X-Seen-By
Retry-After
X-Amz-Replication-Status
Cross-Origin-Resource-Policy
Paypal-Debug-Id
X-Contextid
X-Oracle-Dms-Ecid
X-Type
X-Oracle-Dms-Rid
X-Amz-Meta-S3cmd-Attrs
X-Revision
X-Whom
X-Request-Guid
X-Route-Name
X-Aspnet-Duration-Ms
X-Azure-Ref
Viewport
X-Fb-Rlafr
X-Flags
X-Is-Crawler
X-Providence-Cookie
X-Hosted-By
Accept-Charset
X-ECache
X-VCache
X-App-Environment
Surrogate-Key
X-Signature
X-B-Cache
X-Wix-Request-Id
Count-Hit
Amp-Access-Control-Allow-Source-Origin
X-Varnish-Server
X-B
X-Server-ID
X-COUNTRY
X-TT
X-TTL
X-Akamai-Edgescape
X-DynaTrace
X-Aspnetmvc-Version
X-Language
X-Source
X-B3-Traceid
X-App-Server
Referer-Policy
X-Cache-Control
X-Mobile
X-Cache-Age
X-Goog-Storage-Class
X-Goog-Generation
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Fastly-Request-Id
X-Varnish-Grace
Host
X-Magnolia-Registration
Version
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-Envoy-Decorator-Operation
X-Times
X-N
X-HTML-Minification-Powered-By
X-Cache-Rule
X-Tumblr-User
X-Tumblr-Pixel-0
SRV
X-Tumblr-Pixel-1
X-Tumblr-Pixel
X-Original-Request-Id
X-Response-Served-From
X-Cache-Time
X-Varnish-Age
MS-CV
Ms-Operation-Id
X-UUID
Refresh
Section-Io-Cache
X-RTag
X-Rule
X-RateLimit-Limit
WPO-Cache-Message
WPO-Cache-Status
Access-Control-Request-Headers
SD-X-WS
X-Cache-Status-Check
X-Framework
X-Cacheable-TTL
X-EdgeConnect-Cache-Status
X-FW-Static
X-Cache-Expired-At
X-Page-View
X-FW-Server
X-RemovedCookies
X-FW-Dynamic
X-FW-Hash
X-FW-Serve
X-Content-Powered-By
X-ProcessESI
Akamai-GRN
X-User-Agent
X-Backend-Name
GEO-INFO
X-Cache-Grace
X-FW-Version
X-FW-Type
X-Is-Bot
X-Servername
X-Status
VIX-Pulpo-Upstream-Status
X-Instance
X-Rendered-As
Protected
X-G
X-Jobs
VIX-Pulpo-Node
X-Device-Type
Url
X-Trace-Id
X-Adobe-Loc
X-Akamai-Request-ID2
X-Adobe-Content
X-NYM-Debug-Backend
X-Environment-Context
X-Drupal-Cache-Contexts
X-Drupal-Cache-Tags
X-Http-Reason
X-L-Path
From-Origin
NGB
CDN-RequestId
X-Template
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Region
X-CDN-Forward
Front
X-Debug-IsConnected
X-Debug-IsPreview
X-Varnish-Ttl
X-Yottaa-Optimizations
Accept-Language
X-Yottaa-Metrics
X-Cache-Hit
X-Unique-Id
X-Content-Options
X-Nginx-Cache
Backend
Fastly-SWR
Fastly-SIE
Country
X-Zen-Fury
X-Tb
X-TIME
Liferay-Portal
X-Air-Hostname
X-Air-Source
X-Air-Trace-Id
Pinterest-Generated-By
X-DynaTrace-JS-Agent
X-Pinterest-Rid
Pinterest-Version
X-Tt-Logid
X-Mode
X-Node-Name
X-Cache-Operation
Content-Secure-Policy
X-Real-IP
X-Tec-Api-Origin
X-Tec-Api-Root
X-Tec-Api-Version
X-XRDS-LOCATION
X-Tumblr-Pixel-2
X-Rewrite-Enabled
Webserver
X-RN-RSRV
X-Generation-Time
X-Cache-Server
X-Amzn-Remapped-Content-Length
X-Proxy-Cache-Info
Meta-Geo
Filters
X-UPSTREAM-Address
Uber-Trace-Id
X-Access
X-PHP-Backend
Azure-Version
Selected-Fe
X-Ms-Request-Id
X-Ms-Version
CF-IPCountry
X-Proxy-Build
X-Format
X-Timing-Wait
X-Content-Age
X-VC-Cache
X-IPS-LoggedIn
X-Newrelic-App-Data
X-Section
Azure-RegionName
X-Web-Node
Cache-Hits
Azure-SlotName
Azure-SiteName
Onion-Location
Azure-InstanceId
X-Rocket-Nginx-Serving-Static
Cache-Name
Webcakes-Region
Property-Id
X-Cluster-Node
TWC-Privacy
Webcakes-App-Version
TWC-Locale-Group
TWC-Connection-Speed
TWC-GeoIP-Country
TWC-Device-Class
Webcakes-App-Name
ServedBy
TWC-GeoIP-LatLong
X-Sql-Duration-Ms
X-SayCDN-TTL
X-UA-Device-Type
X-Server-W
X-Debug
X-Locale
X-Say-TTL
X-Sucuri-ID
X-Sucuri-Cache
X-Proto
X-Sql-Count
X-Soup
X-Origin-Hint
X-Say-Cacheable
X-Reqid
Node
X-Handled-By
X-Cluster
X-Site-Version
X-IPLB-Instance
X-Cache-TTL-Remaining
X-Proxy-Cache-Status
X-Skip-Cache
S-Rt
X-Cms-Context
X-PHP-Host
X-Forwarded-Host
X-Ua
ServerID
X-Cache-Host
X-R9-Blue-Green-Version
X-BYPASS-REASON
X-AWS-Id
X-Labrador-Cache-Channel
X-LJ-Flow-ID
X-VWS-Id
X-IPLB-Request-ID
X-Varnish-Beresp-Grace
Web-Mar-Node
X-ProxyCache-Key
X-Via-Fastly
X-ProxyCache-Status
X-Adobe-Source
X-Cache-Action
DB-Nickname
X-JoinUs
X-LAGOON
X-FB-TRIP-ID
X-Extlb
X-Detected-As
X-Edge-Location
X-No-Session
Apigw-Requestid
X-WP-CF-Super-Cache
X-WP-CF-Super-Cache-Cache-Control
Mn-Server-Ip
X-SaId
X-Routing-Service
X-Zipkin-Id
X-Proxied
Cross-Origin-Window-Policy
X-Uri
Locale
X-Urbn-Site-Id
WP-Super-Cache
X-Urbn-Context-Path
X-Optimistic-Header
X-Xfnlog-Site
X-Tumblr-Pixel-3
X-Origin-Date
X-Buckets
Mime-Version
Fastcgi-Useragent
X-LSADC-Cache
X-Ruxit-Js-Agent
X-GeoCountry
X-GeoCode
X-App-Version
Source
CDN-CachedAt
Countrycode
CDN-Uid
Fastly-Drupal-HTML
CDN-Cache
CDN-EdgeStorageId
CDN-RequestCountryCode
CDN-PullZone
X-ARC
X-Hl-Ver
X-Time
Upgrade-Insecure-Requests
X-Director
X-Oneagent-Js-Injection
Cache-Tv-Group
X-Varnish-Hits
X-Request-Time
X-GEO
X-Generated-By
X-Tx-Id
X-Mg-Request-UUID
X-Redis-Cache
CF-Cached-On
X-Cache-Debug
X-Loop
Xet-Cookie
X-SRV
X-Origin-CC
Frame-Options
X-Origin-TTL
X-FireWall-Port
X-Varnish-Cache-Hits
X-TNCMS
X-Pass-Why
X-Akamai-Transformed
X-URL
X-Varnish-Hostname
X-RM-Cache-TTL
X-CACHE-AGE
X-ShardId
X-Alternate-Cache-Key
X-ServerID
X-ShopId
X-Sorting-Hat-PodId
X-Storefront-Renderer-Rendered
X-TA-CDN-Provider
X-Shopify-Stage
X-Sorting-Hat-ShopId
X-Newrelic-Synthetics
X-Datadog-Parent-Id
X-Datadog-Sampled
X-Datadog-Trace-Id
X-Datadog-Sampling-Priority
X-Service
Xserver
X-Api-Version
X-B3-Spanid
X-Pubstack
X-Endurance-Cache-Level
X-Request-Host
X-Served-From
X-Varnish-Beresp-Ttl
X-Presslabs-Stats
X-NWS-UUID-VERIFY
Load-Balancing
X-Conf
X-Nyt-Route
X-CMSURLCustom
Lang
X-D
X-INCAP-ABP
X-Httpd
X-CUA
X-Gdpr
Host-ID
X-Ec-GeoHdr
Cache-Host
Server-Info
BehaviorPad-Version
X-External-Request-Id
Candidate-Md5Url
X-Level-Front-Cache
X-Loc
X-Location
X-Origin-Time
X-Mid
X-Mobile-URL
Edge-Cache
X-Developer
X-Destination
Gannett-Cam-Experience-Id
A
DCR-Processing-Time-Ms
X-Epic-Correlation-Id
X-Ec-Fail
DCR-Decision-By
X-Generated-On
X-Sigma
Surrogated-Key
X-Aed
T-Server
TDXMobile
Thinkindot-CacheControl
Sslversion
X-Application
X-Test
X-B-Cookie
X-Thanos
X-Thinkindot-L3
X-TIM-N
X-Vdms-Path
X-Vdms-Version
X-A-Ccd
X-A-Dam
X-A
Xc-Version
WWW-Authenticate
X-We-Are-Hiring
X-A-Dcw
Thinkindot-CacheControl-Type
Thinkindot-Control
X-A-Wwc
X-A-Dgt
Req-Svc-Chain
X-SRCache-Key
Odigeo-Trace-Id
Ngx.Var.Host
X-Cache-Info
X-Rocket-Build-Number
X-Rojux
X-Cache-NE
X-Processor
X-Platform-Processor
X-Platform-Cluster
X-Platform-Router
Memcached
Meta-Geo-Continent
MD5-Digest
X-S
X-BBC-Edge-Cache-Status
X-Sigma-Backend
Redirect-Candidate
Release
Rendered-Blocks
X-S-Cookie
X-BCube-Filmed-By
Origin
X-S-Maxage
X-Cache-Date
X-ScT
X-Bip
X-Restarts
Section-Io-Origin-Status
X-Storage
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
Section-Io-Id
X-Cdn-Srv
X-Origin-Response-Time
X-Clara-WADP
X-Cdn-Origin
Mail-Subject
X-Origin
X-Pool
Magicmarker
X-Core-Mission
X-Node-Id
X-Developers
DSUID
Fastly-Backend-Name
Fastly-GeoIP-CountryCode
NM-Fastcgi-Cache
Gh-Request-Id
X-Org
X-Cache-Bucket
X-Vmg-Version
X-VG-TLSProxy
X-Varnishpool
X-VServer
X-WADP-Cache
We-Hiring
X-WP-CF-Super-Cache-Active
X-Worker
X-Akamai-Device-Characteristics
X-Varnish-Beresp-Status
X-Sn-Servicetimems
X-Bc-Bl
X-SD-PageType
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
X-Auto-Login
X-Var-Ttl
Server-Host
X-Mvc-Supplant-Cachable
X-Core-Value
X-Hash
X-Is-Gdpr
X-Geo-Header
X-HS-Content-Campaign-Id
X-Human
X-Fetched-On
X-Fmm-Version
C-Via
X-JWT-State
Cache-Key
CacheControlHeader
X-GeoIP-City
X-GeoIP
Apple-News-Services-Parsed-Url
Country-Code
X-Ec-Custom-Error
Apple-News-Services-Handled
Apple-News-Services-Host
X-Has-Esi
AKAMAI
X-Frame-Option
CloudFront-Viewer-Country
Apple-News-Services-Request-Url
X-Parent-Response-Time
X-Hnp-Log
X-Gen-Mode
X-Irp-Debug
X-Gamma-Serve
X-App
X-Variation
X-Varnish-Remaining-TTL
X-GeoIP-Country-Code
X-Wix-Viewer-Type
Wxu-Next-Region
X-GeoIP-Region-Code
X-Mly-Id
Wxu-Next-Hostname
X-WA-Info
X-Accel-Buffering
X-Ad-Defer-Variation
X-Varnish-CookieINHashed-On
X-Slack-Shared-Secret-Outcome
X-VarnishDD-TTL
X-Accel-Expires-Debug
X-HN
X-Varnish-CookieHashed-On
X-Cache-Id
X-NodeID
X-Men
X-Date
X-Old-Content-Length
X-Op-Id-All
X-Fastly-Backend
X-Gzip
X-DefElseHash
X-DefHash
X-Device-Os
X-Dispatcher-Number
X-NCache
X-Nginx-Cache-Key
X-Esi-Check
Wxu-Next-Commit
X-FC-Vary-Parameters
X-LB-NoCache
X-SB
X-Request-Start
X-Dispatcher-Server
X-Scale
X-Server-IP
X-Block-Status
X-Req
X-Region-Sid
X-Platform
X-Forwarded-Site
X-Platform-Server
X-CacheTTL
X-Qloud-Router
X-Cache-Tags
X-Slack-Backend
X-Azure-Ref-OriginShield
PFcat
Click-Count-Action-Start
Origin-EX
CDCHOST
Canary
Server-Hostname
Server-Ext
Cache-Provider
Click-Count-Error
Origin-CC
L
Kp-EeAlive
Is-Eu
Environment
Machine
On-Server
Datacenter
NGX
Adler-Geo
Platform
Tube-Get-Contents
State
Tube-Got-Results
Tube-Got-Eval
User-Cache-Control
Tube-Return
Sever-Int
Web-Mar-Region
Vix-Hermes-Req-Id
X-Tid
Decoy-Debug-Key
X-DPWN-IS-SECURE
Ha-Gx-Prefs
Decoy-Debug-Status
Decoy-Debug-TTL
Fastly-SSL
Cmsid
X-Nananana
X-Owner
X-Minions-Version
HA-Ipaddr
X-V-Cache
X-Refresh
Cluster
Cmstype
X-Fastly-Cache
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
X-Planisys-CDN-Cache
X-Eu-Site
Ssr
X-CGP
X-Csrf-Jwt
X-Cache-Backend
Producers
Pics-Label
X-Ckpd-Fst-Backend
X-Cache-Remote
L5d-Success-Class
X-DC
X-Origin-Expires
X-Instance-Name
X-Cache-FS-Status
X-Microcachable
X-CSRF-Token
X-NewRelic-App-Data
X-Air-Pt
X-Webkit-CSP-Report-Only
X-Response-By
GeoIP-Latitude
X-Tb-Optimization-Total-Bytes-Saved
X-Release
X-Aicache-OS
X-Mvc-Supplant-OutputCached
Env
X-Zone
X-Provided-By
SID
X-Up
X-RCS-CacheZone
X-FL-QIT-DEBUG
X-FL-EDGE
Memory
Time
Expect-Staple
X-Servedbyhost
Locid
Srvid
X-Via-CDN
X-Generated-In
X-ND-Cache
Svr
X-From
HostName
NtCoent-Length
X-Via-SSL
X-Via-Edge
X-Trace-ID
Edge-Copy-Time
X-NGINX-Cache
X-DataCenter
X-Edge-Pop
X-Nc
X-Cache-Enabled
X-Cached-By
X-Vc
X-Vcl-Version
Cache
X-Dc
X-AIR-PT
X-VC
X-Via-Poph
X-Wa
X-Via-Popn
X-Via-Popv
X-HS-Status
X-Srv
X-Webkit-CSP
Cdn
X-HA-Backend
Hostname
X-Lambda-Id
X-Debug-Cache-Store
X-Debug-Cache-Fetch
Sid
X-ZONE
Server-ID
GeoIp-Country-Code
X-Vgn-Hpd-Variations-Key
X-Esi
X-Vgn-Hpd-Ssi
X-Vgn-Hpd-Cached
X-Correlation-ID
X-Render-Time
X-Vtex-Remote-Cache
CPC-Age
X-CCDN-CacheTTL
VNS-Cache
VNS-Age
CPC-Cache
X-Client-Ip
Cdnsip
X-AK-Request-ID
X-CCDN-Origin-Time
X-Hcs-Proxy-Type
Cdncip
X-Cs
X-Check-Cacheable
X-CSRF-TOKEN
True-Client-IP
X-Gateway-Skip-Cache
X-Gateway-Cache-Status
X-Via-NSCOPI
X-VCT
X-Amz-Meta-Cb-Modifiedtime
X-Gateway-Request-Id
X-Gateway-Cache-Key
X-Via-JSL
X-Fpc
Fastly-Drupal-Html
X-API-Version
X-LB-ID
X-CS
AMP-Access-Control-Allow-Source-Origin
X-TH-Server
X-Proxy-CacheRZ
XkeyRZ
X-Upstream-Ct
X-Upstream-Ht
X-ATG-Version
X-Cache-Type
X-B3-SpanId
Uri
X-Varnish-Authentication
Eomportal-Instance
X-Cache-ASPX
X-Nf-Request-Id
X-MCACHE
X-Contensis-Viewer-Groups
X-EC-Lua
Ngx-Var-Key
X-Micro-Cache
Esi-Enabled
OT-Force-Account-Verify
M-TraceId
X-Varnish-Beresp-TTL
X-APP-VERSION
True-Client-Ip
X-RateLimit-Remaining-Second
X-CF-Lambda-Version
X-CF-Lambda-Fn
XServer
X-MSEdge-Flight
X-PAYTM-SRV-ID
X-MSEdge-Features
X-RateLimit-Limit-Second
Resin-Trace
X-Udemy-Cache-App-Namespace
Srv
X-Cache-NGX
X-Request-URI
Path
X-SIPLIST1
X-FPC
X-Lb-Id
X-Fastly-Country-Code
IsBot
X-MP-GENERATED-AT
YJS-ID
Request-ID
X-CDN-Cache-Status
CDN
X-Wikidot-Static-Cache
X-Info
X-Wikidot-Backend
N-Cache
X-VCL-Version
X-Shop-Environment
X-CLOUD-TRACE-CONTEXT
X-Forwarded-Path
X-Datadome
X-Bl-Debug
X-Tenant
X-Orig-Expires
GeoIP-Country-Code
RNT-Time
RNT-Machine
Location
X-Accel-Version
Sm-Log-Id
Server-Id
X-Service-Response-Time
LB
X-TX-ID
X-App-Name
X-Policy
X-B3-Trace-ID
X-Ha-Backend
X-Pod-Name
X-Cdn-Request-ID
X-Cache-Expires
Servername
HIT
X-Edge-POP
X-Datacenter
X-WA
X-RateLimit-Reset
Lb
Cross-Origin-Opener-Policy-Report-Only
X-Oss-Object-Type
X-Oss-Hash-Crc64ecma
X-Oss-Storage-Class
X-Oss-Request-Id
X-Oss-Server-Time
X-Akamai-Pragma-Client-IP
X-SERVER-NAME
X-Via-PopV
X-Snapshot-Date
X-Via-PopH
X-Via-PopN
Ohc-File-Size
X-Cdn-Cache-Status
X-Geo
X-NC
X-Srcache-Fetch-Status
X-Srcache-Store-Status
X-CACHE-KEY
Hit
Timeexpire
X-Cache-Ttl
FSS-Cache
X-Vcache
Pramga
X-Moov-T
Yjs-Id
Epwk-X-Cache
X-Scheme
X-Moov-Xdn-Version
Req-ID
X-TraceId
Traceparent
X-Ctl-Mach
X-ServedByHost
Proxy-Connection
ENV
X-Cdn-Diag
X-Logging-Id
X-Hyper-Cache
X-Cdn-Forward
X-UP
X-Serial
X-ApacheServer
Geoip-Latitude
WZWS-RAY
X-Container-Uri
X-LiteSpeed-Cache-Control
X-PERF
X-Dw-Trace-Id
X-Amz-Meta-Opti
X-Viewer-Country
X-Git-Commit
X-Rebelmouse-Surrogate-Control
X-M-Reqid
X-MiniProfiler-Ids
CountryCode
X-M-Log
X-Rebelmouse-Cache-Control
X-Qnm-Cache
X-Acquia-Purge-Tags
X-Swift-Error
X-Lb-Nocache
X-Fastly-Backend-Reqs
Ec-Rule-Version
XM
Content-Style-Type
X-Acquia-Site
X-RAMCache
X-Acquia-Application-Trace
X-Mg-Cache
Cneonction
Content-Script-Type
X-Acquia-Application-UUID
X-VG-WebCache
X-B3-Parentspanid
X-Tncms
X-Wp-Cf-Super-Cache-Cache-Control
X-Lsadc-Cache
X-TT-LOGID
X-F-Status
X-Wp-Cf-Super-Cache
X-Webstats-RespID
X-Iauth-Set-Uid
Ohc-Cache-HIT
X-Litespeed-Cache-Control
X-Fastly-Cache-Hits
X-Vgn-Hpd-Reason
X-Request-URL
X-Mid-Debug-Cache-Key
X-IPS-Cached-Response
X-B3-ParentSpanId
X-Cache-Ngx
Inserted-Into-Cache-At
Warning
X-Mid-Debug-Cache-Disk
Ngx
X-Th-Server
X-LiteSpeed-Tag
My-App
Powered-By
MIME-Version
X-NAPM-TraceId