Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
Strict-Transport-Security
X-Frame-Options
X-Content-Type-Options
Last-Modified
Link
CF-Cache-Status
Cf-Request-Id
Accept-Ranges
ETag
CF-RAY
Expect-CT
Pragma
X-Powered-By
X-Cache
Via
Age
X-XSS-Protection
Content-Security-Policy
Report-To
NEL
X-Xss-Protection
Access-Control-Allow-Origin
Referrer-Policy
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
X-UA-Compatible
X-FRAME-OPTIONS
X-Served-By
X-Download-Options
X-Timer
Access-Control-Allow-Headers
X-Request-Id
X-Varnish
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-Adblock-Key
X-AspNet-Version
X-Permitted-Cross-Domain-Policies
Alt-Svc
X-Runtime
Content-Security-Policy-Report-Only
X-Drupal-Cache
CF-Ray
X-Cache-Status
X-Check
X-Generator
X-DNS-Prefetch-Control
X-Cacheable
X-Request-ID
X-Iinfo
P3p
X-Envoy-Upstream-Service-Time
X-Ua-Compatible
Timing-Allow-Origin
Feature-Policy
X-Content-Security-Policy
Status
X-Drupal-Dynamic-Cache
Content-Encoding
Access-Control-Expose-Headers
X-AspNetMvc-Version
X-CDN
Upgrade
Access-Control-Max-Age
X-Dns-Prefetch-Control
X-Via
X-Robots-Tag
X-Cache-Group
X-UA-Device
Server-Timing
Request-Context
Keep-Alive
X-AH-Environment
X-Turbo-Charged-By
X-Amz-Request-Id
X-Proxy-Cache
X-Backend
X-Amz-Id-2
X-Age
X-Ws-Request-Id
Host-Header
X-Hacker
X-Server-Powered-By
X-Server
X-Rq
X-Vhost
X-LiteSpeed-Cache
X-Varnish-Cache
X-Amz-Version-Id
Grace
Cf-Edge-Cache
X-Dispatcher
EagleId
Allow
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Device
X-Page-Speed
Accept-CH
X-Nginx-Cache-Status
X-WebKit-CSP
X-Swift-SaveTime
X-Swift-CacheTime
X-Aws-Lambda-Call-Status
Ali-Swift-Global-Savetime
X-Node
Cf-Railgun
X-Host
X-Pingback
X-Cache-Spec
X-OneAgent-JS-Injection
X-Server-Id
X-Backend-Server
X-Akam-SW-Version
Surrogate-Control
Request-Id
X-Response-Time
EagleEye-TraceId
X-Cache-Lookup
Accept-CH-Lifetime
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Readtime
Content-Location
X-HW
X-Content-Security-Policy-Report-Only
X-Cloud-Trace-Context
X-Application-Context
Rating
X-Trace
Fastly-Restarts
X-Akamai-Path-Stats
X-Url
X-WebKit-CSP-Report-Only
X-Clacks-Overhead
X-Nginx-Upstream-Cache-Status
X-Ruxit-Js-Agent
X-CST
X-MS-InvokeApp
X-Oneagent-Js-Injection
X-Country
X-Amz-Server-Side-Encryption
X-Edge
X-Rack-Cache
X-Vname
X-TtlSet
X-PC
Edge-Control
X-Mod-Pagespeed
X-Content-Type
X-ESI
X-B3-TraceId
X-Vcap-Request-Id
Accept-Ch-Lifetime
X-FastCGI-Cache
Cf-Apo-Via
X-D2id
Verso
X-Kinja
X-Kinja-Build
X-Use-Magma
X-Exp-Id
X-Cdn-Fetch
X-Exp-Variant
X-GoogleNews-Bot
X-Kinja-Server
X-Kinja-Revision
Xkey
X-GitHub-Request-Id
Cache-Tag
X-Ttl
Service-Worker-Allowed
X-Mcache
X-Powered-By-Plesk
X-Amz-Rid
RTSS
X-Navigation-Version
X-Server-Name
X-VARITI-CCR
X-Abt-Application-Version
X-Version
X-Upstream
X-Ac
X-Varnish-TTL
X-Client-IP
X-Cnection
X-Cached
X-Ruxit-JS-Agent
X-ECACHE
X-Element-Page-Cache
Arr-Disable-Session-Affinity
X-Dw-Request-Base-Id
X-Instrumentation
X-Server-Lifecycle-Phase
Permissions-Policy
X-Kraken-Loop-Name
SPRequestGuid
X-SharePointHealthScore
X-RateLimit-Remaining
SPIisLatency
X-Px
SPRequestDuration
X-Middleton-Display
Pagespeed
X-Sol
Display
X-Cache-TTL
Public-Key-Pins
X-NWS-LOG-UUID
X-Country-Code
X-Middleton-Response
Response
X-Midtier
X-Ser
X-Cache-Key
X-Kinsta-Cache
X-Edge-Location-Klb
X-Forwarded-For
X-Goog-Hash
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-DataDome
Content-MD5
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-NF-Request-ID
X-Shield-Request-Id
X-Correlation-Id
X-MSEdge-Ref
X-RateLimit-Limit
Access-Control-Request-Method
Front-End-Https
X-Jurisdiction
X-HP-Trace-Id
X-HP-Webp
AR-SID
Mrf-Cache-Status
AR-Request-ID
X-B3-TraceId-Primal
X-Recruiting
AR-PoweredBy
AR-ATIME
X-T
MRF-Tech
AR-CACHE
Edge-Cache-Tag
TP-L2-Cache
TP-Cache
Nginx-Cache
MicrosoftSharePointTeamServices
X-Daa-Tunnel
X-Accel-Expires
X-Mg-S
X-Browser-Type
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
X-Content-Digest
X-Powered-CMS
TCN
X-Grace
X-Hits
X-Request-Processing-Time
X-Request-Received
X-Amzn-Trace-Id
X-HS-Content-Id
X-HS-Combine-CSS
X-HS-Hub-Id
X-HS-Cache-Config
Server-Node
Server-Name
Filters
X-Id
MS-Author-Via
Fastcgi-Cache
X-Geo-Country
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-TEC-API-VERSION
X-Fastly-Request-Id
X-Webkit-Csp
Accept-Ch
Count-Hit
X-Frontend
X-XRDS-Location
X-Distributor
X-Origin-Server
X-PressLabs-Stats
X-Ezoic-Cdn
X-Ua-Browser
Filterid
Cross-Origin-Opener-Policy
X-LLID
X-Protected-By
X-Language
X-ASPNET-VERSION
X-F-Cache
S
Charset
X-B3-Sampled
X-FB-Debug
X-Request-Handler-Origin-Region
X-Microsite
X-Forwarded-Proto
X-Seen-By
X-Git-Hash
X-Amz-Meta-S3cmd-Attrs
Payment
Host
X-LB-Cache
X-Page-Id
X-Ratelimit-Reset
X-VCache
Cache-Status
X-Cluster-Name
X-Ab
Surrogate-Key
X-Rid
Cache-Tags
X-Www-Served-By
X-Upgrade-Enabled
Access-Control-Allow-Method
X-Logged-In
X-Source
Retry-After
Realpath
X-Cache-Age
X-Origin-Cache
X-Varnish-Backend
X-DIS-Request-ID
Accept-Charset
Alternate-Protocol
X-NGENIX-Cache
X-Type
X-Activity-Id
X-Az
X-Template
Cleartype
X-AppVersion
DC
X-Amz-Replication-Status
Paypal-Debug-Id
X-Providence-Cookie
X-Envoy-Decorator-Operation
X-Varnish-Grace
X-B-Cache
X-Wix-Request-Id
X-Signature
X-Request-Guid
X-App-Environment
X-Route-Name
X-Aspnet-Duration-Ms
X-Is-Crawler
X-Flags
X-Tb
X-TT
X-B
ServerID
X-Revision
X-Hostname
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-DynaTrace
X-Fastcgi-Cache
Frame-Options
X-Contextid
X-COUNTRY
X-Cache-Rule
X-Node-Name
X-Drupal-Cache-Tags
X-Tt-Trace-Tag
X-Pinterest-Rid
X-Tt-Trace-Host
Pinterest-Version
Pinterest-Generated-By
X-Proxy
Refresh
Cross-Origin-Resource-Policy
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-GUploader-UploadID
X-Goog-Storage-Class
X-Goog-Metageneration
Amp-Access-Control-Allow-Source-Origin
X-Debug
X-Fastly-Request-ID
X-Trace-Id
X-Mobile
X-Load-Cache
X-Content-Options
X-EdgeConnect-Cache-Status
Referer-Policy
X-XRDS-LOCATION
X-Cache-Control
X-Response-Served-From
X-Varnish-Server
X-Original-Request-Id
X-N
NGB
Node
X-Varnish-Age
Country
Viewport
X-Debug-IsConnected
X-Magnolia-Registration
X-Whom
X-Debug-IsPreview
Akamai-GRN
X-Environment-Context
X-Content-Powered-By
X-Instance
X-Status
X-NYM-Debug-Backend
Content-Disposition
X-L-Path
Access-Control-Request-Headers
X-Cacheable-TTL
Uber-Trace-Id
X-Real-IP
X-Adobe-Loc
X-Adobe-Content
VIX-Pulpo-Upstream-Status
X-Rendered-As
X-Akamai-Request-ID2
X-Cache-Grace
X-Cache-Time
X-Is-Bot
X-Jobs
X-Servername
X-Page-View
VIX-Pulpo-Node
Url
X-Mid
X-User-Agent
X-Yottaa-Optimizations
X-RemovedCookies
X-Framework
X-ProcessESI
X-Yottaa-Metrics
X-Cache-TTL-Remaining
Srv
X-G
X-Via-JSL
X-Cache-Expired-At
X-Unique-Id
X-Cache-Hit
X-CDN-Forward
X-Tumblr-Pixel-0
X-Tumblr-User
Countrycode
X-Tumblr-Pixel
X-Tumblr-Pixel-1
X-TTL
X-Drupal-Cache-Contexts
X-Cache-Operation
Healthy
X-Rule
X-APP-VERSION
Version
Accept-Language
X-Backend-Name
X-Litespeed-Cache
X-ECache
X-Cache-Action
X-Mg-Request-UUID
X-Http-Reason
X-Akamai-Edgescape
X-Debug-Info
X-Server-ID
Content-Secure-Policy
Protected
Section-Io-Cache
X-Varnish-Ttl
X-VC-Cache
X-IPLB-Request-ID
X-IPLB-Instance
X-Hosted-By
X-Time
X-Tt-Logid
X-Azure-Ref
Server-Info
Backend
X-Generation-Time
X-Api-Version
X-HTML-Minification-Powered-By
X-App-Server
X-FW-Type
X-FW-Dynamic
X-FW-Server
X-Oracle-Dms-Ecid
X-FW-Serve
X-FW-Static
Xserver
X-Generated-By
X-FW-Hash
Meta-Geo
X-Storage
X-RN-RSRV
X-UPSTREAM-Address
X-Oracle-Dms-Rid
X-Restarts
X-Content
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Mobile-URL
X-Cache-Status-Check
CF-IPCountry
Onion-Location
X-PCL
X-FireWall-Port
X-Cms-Context
X-Access
X-Origin-Hint
X-OCL
X-Locale
X-Format
X-Handled-By
Webcakes-Region
TWC-Locale-Group
Property-Id
S-Rt
Azure-Version
Azure-SlotName
Azure-RegionName
Azure-SiteName
TWC-Connection-Speed
TWC-Device-Class
TWC-Privacy
Webcakes-App-Name
Azure-InstanceId
TWC-GeoIP-LatLong
TWC-GeoIP-Country
Webcakes-App-Version
X-Device-Type
X-Cache-Server
X-R9-Blue-Green-Version
X-SRV
GEO-INFO
X-Varnish-Cache-Hits
X-Section
Liferay-Portal
X-Say-TTL
X-AWS-Id
X-Adobe-Source
X-JoinUs
Web-Mar-Node
X-LJ-Flow-ID
X-SayCDN-TTL
X-Content-Age
X-Edge-Location
X-Forwarded-Host
X-Cache-Host
Locale
Eomportal-Instance
Ms-Operation-Id
CDN-Uid
X-SaId
X-Proxy-Cache-Status
X-Redis-Cache
X-Server-W
X-Region
X-RTag
X-Say-Cacheable
CDN-Cache
CDN-RequestId
X-No-Session
CDN-RequestCountryCode
CDN-PullZone
CDN-CachedAt
CDN-EdgeStorageId
Load-Balancing
MS-CV
X-Urbn-Context-Path
X-Sql-Count
X-Urbn-Site-Id
X-Varnish-Beresp-Grace
X-VWS-Id
X-Varnish-Hostname
X-Proto
X-Sql-Duration-Ms
X-Skip-Cache
X-Mode
X-Site-Version
X-Request-Time
X-Zipkin-Id
X-Xfnlog-Site
DB-Nickname
X-Cache-Type
Mn-Server-Ip
X-Ms-Request-Id
X-Ms-Version
X-GeoCountry
X-Shopify-Stage
Apigw-Requestid
X-PHP-Backend
Cache-Name
X-Varnishpool
X-PHP-Host
X-Routing-Service
X-Labrador-Cache-Channel
X-Alternate-Cache-Key
X-Proxied
X-Nginx-Cache-Key
X-Web-Node
X-Sorting-Hat-PodId
X-GeoCode
X-Detected-As
X-Extlb
X-FB-TRIP-ID
X-ShardId
X-Via-Fastly
X-UA-Device-Type
X-ShopId
X-Sorting-Hat-ShopId
X-BYPASS-REASON
X-Hl-Ver
X-ProxyCache-Status
X-ProxyCache-Key
X-Tid
X-Storefront-Renderer-Rendered
X-Dc
X-Provided-By
WP-Super-Cache
X-Timing-Wait
X-Proxy-Build
X-DynaTrace-JS-Agent
Selected-Fe
X-ServerID
X-Cache-Enabled
X-TNCMS
X-Cdn
X-Uri
X-WP-CF-Super-Cache
X-Amzn-Remapped-Content-Length
X-Reqid
X-Loop
X-WP-CF-Super-Cache-Cache-Control
X-Vgn-Hpd-Reason
X-LSADC-Cache
X-B3-Traceid
X-Pubstack
X-Ua
Xet-Cookie
X-TIME
X-Tumblr-Pixel-2
X-Origin-Date
X-Soup
X-Zen-Fury
X-Aspnetmvc-Version
X-Correlation-ID
X-Ratelimit-Remaining
X-Tec-Api-Origin
X-Tec-Api-Version
X-Cache-NGX
X-Tec-Api-Root
X-Newrelic-Synthetics
X-Service
Fastcgi-Useragent
From-Origin
X-Nginx-Cache
X-UUID
X-Webkit-CSP
Source
X-MP-GENERATED-AT
X-Cache-Debug
ServedBy
X-NewRelic-App-Data
Origin
X-GEO
X-Origin-TTL
X-Origin-CC
X-TA-CDN-Provider
X-URL
X-Varnish-Hits
X-App-Version
X-Human
Cache
X-Cache-Tags
X-Cached-By
Cross-Origin-Window-Policy
Fastly-Drupal-HTML
X-Varnish-Beresp-Ttl
X-Ratelimit-Limit
Rip
X-Rewrite-Enabled
Upgrade-Insecure-Requests
MD5-Digest
BehaviorPad-Version
X-ScT
Rendered-Blocks
X-RCS-CacheZone
X-Cluster
WPO-Cache-Message
Host-ID
WPO-Cache-Status
Cdncip
Cdnsip
X-Aed
Lang
X-D
X-A-Dcw
X-Destination
X-A-Wwc
Meta-Geo-Continent
T-Server
X-A-Dgt
X-External-Request-Id
Ngx.Var.Host
X-Ec-Fail
X-Developer
X-A-Ccd
X-Application
X-ARC
X-Vdms-Path
Xc-Version
X-Vdms-Version
X-SRCache-Key
X-AK-Request-ID
X-B-Cookie
X-A-Dam
X-A
X-Cache-NE
X-Shop-Environment
A
X-Forwarded-Path
X-Bc-Bl
X-BCube-Filmed-By
X-Connection-Hash
X-Ec-GeoHdr
X-Orig-Expires
X-Tenant
X-Processor
X-S-Cookie
X-TIM-N
Sslversion
Environment
X-PBS-Appsvrname
X-NAPM-TraceId
Expiry
SD-X-WS
X-Rojux
Surrogated-Key
DCR-Processing-Time-Ms
Odigeo-Trace-Id
DCR-Decision-By
X-VG-WebCache
X-S
X-User
X-Parent-Response-Time
OT-Force-Account-Verify
Mime-Version
X-FW-Version
X-Request-Host
Webserver
X-Aicache-OS
X-Gdpr
X-Nyt-Route
CPC-Age
CPC-Cache
X-Owner
X-Dispatcher-Number
Redirect-Candidate
X-Served-From
VNS-Cache
X-Accel-Buffering
X-Origin-Time
VNS-Age
X-Debug-Cache
X-Is-Gdpr
X-WP-CF-Super-Cache-Active
AKAMAI
Fastly-Backend-Name
Server-Host
X-Sucuri-ID
X-Thinkindot-L3
X-JWT-State
X-HS-Content-Campaign-Id
X-Worker
LB
X-Level-Front-Cache
X-AOL-HN
X-CMSURLCustom
X-Sucuri-Cache
X-INCAP-ABP
TDXMobile
X-Developers
X-Core-Value
WebServer
X-Cdn-Srv
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
X-Has-Esi
Thinkindot-Control
X-Auto-Login
X-Generated-On
X-Geo-Header
X-Cluster-Node
Tube-Got-Eval
Req-Svc-Chain
Servername
State
Svr
Producers
Origin-EX
Mobile-Detection-Method
NGX
X-V-Cache
Origin-CC
X-SVT-ORM-VERSION
Traceparent
We-Hiring
Web-Mar-Region
Wxu-Next-Commit
Wxu-Next-Hostname
Vix-Hermes-Req-Id
V-Age
Tube-Get-Contents
Tube-Got-Results
Tube-Return
Wxu-Next-Region
X-Cache-Bucket
X-Loc
X-Scheme
X-Scale
X-SB
X-Minions-Version
X-S-Maxage
X-Hash
X-GeoIP
X-Gateway-Cache-Key
X-Gamma-Serve
X-Gateway-Cache-Status
X-Gateway-Request-Id
X-Gateway-Skip-Cache
X-NCache
X-Origin-Response-Time
X-Qloud-Router
X-Proxy-Cache-Info
X-Request-URI
X-RateLimit-Limit-Second
X-Region-Sid
X-RateLimit-Remaining-Second
X-Pool
X-Platform-Server
X-Planisys-CDN-Rules
X-Planisys-CDN-Cache
X-Planisys-CDN-TTL
X-Rocket-Nginx-Serving-Static
X-Rocket-Build-Number
X-Fmm-Version
X-Fetched-On
X-Branch-Name
X-BBC-Edge-Cache-Status
Memcached
X-Cache-Info
X-Cdn-Origin
X-CacheTTL
X-Azure-Ref-OriginShield
X-ATG-Version
X-Sn-Servicetimems
X-SplitTest
X-Slack-Backend
X-SIPLIST1
X-Sigma-Backend
X-Sigma
X-Ckpd-Fst-Backend
X-DPWN-IS-SECURE
X-Device-Os
X-Ec-Custom-Error
X-Epic-Correlation-Id
X-Fastly-Backend
X-DefHash
X-DefElseHash
X-Core-Mission
X-Clara-WADP
X-Datadog-Parent-Id
X-Datadog-Sampling-Priority
X-Datadog-Trace-Id
X-SVT-ORM-RULES
Decoy-Debug-Key
Click-Count-Error
CloudFront-Viewer-Country
Click-Count-Action-Start
Candidate-Md5Url
Cache-Host
Cluster
Cmsid
Decoy-Debug-Status
Datacenter
Country-Code
Cmstype
X-Varnish-Remaining-TTL
Apple-News-Services-Request-Url
X-Wix-Viewer-Type
X-WADP-Cache
Gh-Request-Id
Release
X-GeoIP-City
X-VServer
X-Viewer-Country
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
Apple-News-Services-Handled
X-VG-TLSProxy
Decoy-Debug-TTL
Canary
Kp-EeAlive
Fastly-SIE
Fastly-GeoIP-CountryCode
Fastly-SSL
Fastly-SWR
X-Varnish-Beresp-Status
Machine
X-Varnish-CookieINHashed-On
X-Varnish-CookieHashed-On
Mail-Subject
IsBot
L
X-Cache-Remote
X-Optimistic-Header
X-Pass-Why
X-Tumblr-Pixel-3
HA-Ipaddr
X-Gen-Mode
Ha-Gx-Prefs
L5d-Success-Class
X-Forwarded-Site
X-Policy
X-Variation
X-Esi-Check
X-Irp-Debug
X-Eu-Site
X-Clientip
X-Mvc-Supplant-Cachable
X-Cache-Id
X-Block-Status
X-CGP
X-Csrf-Jwt
X-Bip
X-Ad-Defer-Variation
User-Cache-Control
CDCHOST
X-FC-Vary-Parameters
X-Gzip
X-Tx-Id
Server-Ext
DSUID
Sever-Int
X-NodeID
Server-Hostname
X-Var-Ttl
Platform
X-Datadome
X-Hnp-Log
NM-Fastcgi-Cache
X-Thanos
Is-Eu
Adler-Geo
X-Udemy-Cache-App-Namespace
X-IPS-LoggedIn
X-Up
X-Origin
X-LB-NoCache
X-Mvc-Supplant-OutputCached
Sid
X-CSRF-Token
Ec-Rule-Version
Memory
Time
X-Nf-Request-Id
X-Dispatch
Pics-Label
X-ZONE
HostName
X-Tb-Optimization-Total-Bytes-Saved
Ssr
X-VC
X-ND-Cache
Request-ID
X-Presslabs-Stats
X-Akamai-Transformed
X-Edge-Pop
AMP-Access-Control-Allow-Source-Origin
My-App
X-Refresh
X-Via-NSCOPI
X-WA-Info
Cache-Tv-Group
X-B3-SpanId
X-Cs
X-Via-Poph
Fastcgi-Cache-TTL
X-B3-Spanid
X-Via-Popv
X-Lambda-Id
X-GG-Cache-Date
X-Req
X-Servedbyhost
Env
X-Via-Popn
X-Newrelic-App-Data
X-Session-Fingerprint
Server-ID
X-Generated-In
X-NGINX-Cache
X-Trace-ID
GeoIp-Country-Code
X-Rebelmouse-Surrogate-Control
True-Client-Country-4JS
CacheControlHeader
X-Rebelmouse-Cache-Control
X-Wa
X-Origin-Expires
SID
X-Fastly-Cache
X-Vc
X-Pod-Name
Cache-Hits
X-Release
X-EC-Lua
X-PX
Hostname
X-Fpc
X-CACHE-AGE
X-ID
True-Client-IP
X-CSRF-TOKEN
X-Xrds-Location
X-MCACHE
X-Op-Id-All
X-LB-ID
X-Zone
X-VCL-Version
X-TX-ID
X-NWS-UUID-VERIFY
X-Webkit-CSP-Report-Only
X-GeoIP-Country-Code
X-GeoIP-Region-Code
X-DC
X-Ig-Push-State
X-MSEdge-Flight
X-MSEdge-Features
X-TH-Server
X-Cache-Date
X-Buckets
X-CACHE-KEY
WWW-Authenticate
X-Date
X-Accel-Expires-Debug
X-Conf
X-NC
CDN
X-Endurance-Cache-Level
X-HS-Status
X-Srv
X-Microcachable
X-TRACE-ID
X-RAMCache
Resin-Trace
X-Dmc
Fastly-Drupal-Html
X-CS
X-Esi
X-Old-Content-Length
X-Varnish-Beresp-TTL
X-RateLimit-Reset
Tcn
Powered-By
X-Vcl-Version
X-Check-Cacheable
Magicmarker
Path
X-Webstats-RespID
X-Location
Section-Origin-Responded
X-FPC
X-Wikidot-Backend
X-Wikidot-Static-Cache
Section-Io-Origin-Time-Seconds
X-Alfa-Service
X-Lb-Id
X-Akamai-Pragma-Client-IP
Section-Io-Id
Section-Io-Origin-Status
True-Client-Ip
X-API-Version
X-Cache-ASPX
X-Be
X-CLOUD-TRACE-CONTEXT
X-Cache-Ttl
Yjs-Id
X-LiteSpeed-Cache-Control
X-Varnish-Authentication
X-Contensis-Viewer-Groups
X-Director
Proxy-Connection
GeoIP-Country-Code
X-Vercel-Id
X-Vercel-Cache
X-Datacenter
X-DataCenter
X-WA
X-Geo
X-Mly-Id
Lb
FSS-Cache
X-Via-CDN
Server-Id
X-Micro-Cache
X-Hyper-Cache
Pramga
X-Via-PopV
X-Via-PopN
X-Via-PopH
Cdn
ENV
X-ServedByHost
User-Agent
X-M-Log
X-CF-Lambda-Fn
X-CF-Lambda-Version
X-M-Reqid
X-Response-By
X-Server-IP
X-Test
X-Dw-Trace-Id
X-Cdn-Forward
XServer
X-Client-Ip
X-Qnm-Cache
X-Akamai-ERPolicy
X-Akamai-ERRuleID
HIT
X-HA-Backend
Uri
X-App
M-TraceId
Tracecode
X-Cache-Expires
Sm-Log-Id
X-Service-Response-Time
X-Edge-POP
X-AIR-PT
YJS-ID
X-Cc-Via
Swift-Performance
X-Cache-Backend
Geoip-Latitude
Srvid
X-UA
X-Traceid
X-We-Are-Hiring
N-Cache
Locid
Dnion-Transfer-Encoding
Location
X-Air-Trace-Id
X-LI-Proto
X-Air-Source
X-Air-Hostname
X-Li-Pop
X-Li-Fabric
X-From
X-TrackingId
C-Via
X-TT-LOGID
X-FL-EDGE
X-LI-UUID
X-LiteSpeed-Tag
X-Instance-Name
X-PERF
X-ApacheServer
X-Frame-Option
X-Fastly-Backend-Reqs
X-RPM
X-RPS
X-RSL
CF-Cached-On
X-Info
X-DI
X-DW
X-DB
X-DSS
X-Platform-Router
X-Platform-Cluster
CountryCode
X-Platform
Esi-Enabled
Nginx-CQVIP
PICS-Label
X-Air-Pt
Ohc-File-Size
X-Platform-Processor
X-Wp-Cf-Super-Cache-Cache-Control
X-Wp-Cf-Super-Cache
X-Conten-Type-Options
Fastcgi-X-Cache-Version
XM
NtCoent-Length
PFcat
X-HostName
X-Lb-Nocache
X-VarnishDD-TTL
Hit
Wpo-Cache-Status
Wpo-Cache-Message
Timeexpire
X-CF-Powered-By
X-Cache-Proxy
X-PAYTM-SRV-ID
X-HN
X-Cdn-Request-ID
On-Server
X-Request-Url
X-Fastly-Cache-Hits
Vha6-Origin
X-Cache-Ngx
Warning
Wp-Super-Cache
X-Litespeed-Cache-Control
X-Ips-Loggedin
X-Newegg-Index
X-PGF-Deflate
X-NFL-Dma
X-PG-ACCESS
X-Newegg-Flow
X-MTS-Cache
X-Matome-Cached
X-Matched-Rule
X-Pver
X-NFL-Geo
X-N-OperationId
X-Nerd
X-NXG
X-OVcl-Cache
X-PageType
X-OVcl
X-Origin-Ops
X-Loadbalancer
X-Onedio-Env
X-Paywall
X-Ntj-Investigation-Id
X-Nyt-Data-Last-Modified
X-Odoo-Frontend
X-Okws-Version
X-NS-Authorization
X-Fstrz
X-Fastly-Is-Edge
X-Farm
X-R-Cache
X-Full-Ttl
X-GG-Cache-Status
X-F-Status
X-Eventloop-Lag
X-Ee-Request-Date
X-Ee-Request-Id
X-Eid
X-ETag
X-Git-Commit
X-Global-Transaction-ID
X-Ittl
X-Kebab
X-Kebabable
X-Keep
X-Is-SSL
X-IBD-SID
X-GoCache-CacheStatus
X-Group
X-Header-Sub
X-IBD-Cache
X-LbNode
X-SVR-IIS
X-WP-Bypass
X-Web-Hosting
X-WSR2
X-Xms-Page-Cache-Actions
X-YSpaceId
X-Waitingroom
X-Wag-Acs
X-Utime
X-User-Auth
X-V2-Infrastructure
X-Vary-Devices
X-Ver
XV-Cache
XV-H
X-Request-URL
X-Oss-Object-Type
X-Oss-Request-Id
X-Oss-Storage-Class
X-Ee-Origin
X-Oss-Hash-Crc64ecma
X-Ha-Backend
X-B3-Parentspanid
X-Fastly-Country-Code
Cache-Key
X-UP
X-Upstream-State
X-U-Cache
X-Server-L
X-Save-Cache
X-ServiceName
X-Sh
X-Site
X-Ruby
X-Route-Akamai
X-Render-Method
X-Redis
X-Render-Time
X-Request-Origin
X-Route
X-Slack-Shared-Secret-Outcome
X-SMP-JWT
X-Toujours-Debout-Branch
X-Timestamp
X-Toujours-Debout-Location
X-Tried-To-Kebabify
X-True-Client-Ip
X-Test-Nginx-Ingress
X-Svr-Proxy
X-Square
X-SSLProxy
X-Stack-Name
X-Oss-Server-Time
X-Reboot
Nikkei-App-Version
Ns-Ua
Ns
Ok-Cache-Status
OK-Edge-Date
Origin-Site
Ok-Edge-Key
Npm-Remaining
Npm-Cost
Is-Https
HTTPProtocol
Joe-X
NB-ESI
NLCacheNote
Panzer-Cache-Control
Proxy-Cache
SFRVia
Service-Uuid
Shieldsquare-Response
SII
Store-Cloud-Cache
Served
Selected-Route
Region
RawURL
Request-Uuid
Rt-Proxy-Cache
Scheme
HServer
H1
X-ElasticPress-Query
X-Mg-Cache
X-Yottaa-OS
X-IN-APIGATEWAY
X-IN-APIGATEWAYSSL
X-B3-ParentSpanId
WZWS-RAY
Req-ID
X-CUA
Fastcgi-Cache-Ttl
SRV
DynaTrace
Cneonction
X-Serial
Cluster-Host
Cf-Wrk
CMS-200
Deeplink
Ec-Policy-Id
Cf-Locale
Cf-Device-Type
Akamai-X-Url
X-Th-Server
Cache-Stat
Cachekey
Cdn-Country-Code
Sw
T-Request-Id
X-Cache-Reason
X-Cache-NPR
X-Cache-ReqUri
X-Cache-Response
X-CacheVersion
X-Cache-Length
X-Cache-IsMobileDevice
X-Backside-Transport
X-Backend-TTL
X-BeanStalkRole
X-BeanStalkStage
X-Cache-Cookie
X-CDN-Pop
X-CDN-Pop-IP
X-Developed-By
X-Delivery
X-Doge
X-DT-Node
X-Edge-IP
X-Dehri-Date
X-Dcm-Pdtf
X-Cms-Device
X-Cf-Node-Idx
X-Coindesk-Cache
X-Colour
X-Container-Uri
X-AspNetWebPages-Version
X-ASF-Cache
Userver
Uniqueid
Vttl
X-77-NZT
X-77-NZT-Ray
TWC-Unit
TWC-Subs
Time-Cloud-Cache
Technodrome
Ttl
TWC-AK-Req-ID
TWC-PATH-LOCALE
X-Accel-Version
X-Accepted-Fulllang
X-Apache-Server
X-Amz-Meta-Cb-Modifiedtime
X-Ar-Stats
X-Arena-Request-Id
X-ARRRG1
X-Akamai-Native
X-Akamai-DeviceType
X-Accor-Asset
X-Accepted-Language
X-AEO-Platform
X-Akamai-CacheKeyMod
X-Akamai-DeviceOS
X-Ee-Generated-By