Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Accept-Ranges
X-XSS-Protection
Expect-CT
Pragma
X-Powered-By
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Access-Control-Allow-Origin
Referrer-Policy
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
X-UA-Compatible
X-Served-By
X-Xss-Protection
X-Download-Options
CF-Ray
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
X-Request-Id
Access-Control-Allow-Credentials
X-FRAME-OPTIONS
X-Permitted-Cross-Domain-Policies
X-Request-ID
X-AspNet-Version
Alt-Svc
X-Runtime
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-DNS-Prefetch-Control
X-Check
X-Generator
X-Cache-Status
X-Cacheable
Timing-Allow-Origin
X-Envoy-Upstream-Service-Time
X-Iinfo
X-Content-Security-Policy
X-Drupal-Dynamic-Cache
Feature-Policy
Content-Encoding
Access-Control-Expose-Headers
Upgrade
Status
X-CDN
X-AspNetMvc-Version
Access-Control-Max-Age
X-Via
Server-Timing
X-UA-Device
Request-Context
X-Robots-Tag
X-Turbo-Charged-By
X-Amz-Request-Id
X-Cache-Group
EagleId
X-Amz-Id-2
X-Backend
X-AH-Environment
P3p
X-Proxy-Cache
Keep-Alive
X-Ua-Compatible
X-Server
X-Ws-Request-Id
X-Age
Host-Header
Cf-Edge-Cache
X-Hacker
X-Vhost
X-Server-Powered-By
X-Rq
X-Dns-Prefetch-Control
X-Varnish-Cache
X-Dispatcher
X-Amz-Version-Id
Grace
Allow
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-OneAgent-JS-Injection
X-LiteSpeed-Cache
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Page-Speed
Cf-Apo-Via
X-Device
X-WebKit-CSP
Accept-CH
Cf-Railgun
X-Aws-Lambda-Call-Status
X-Node
X-Pingback
X-Host
X-Ruxit-JS-Agent
X-Server-Id
EagleEye-TraceId
X-Nginx-Cache-Status
Surrogate-Control
X-Akam-SW-Version
X-Readtime
X-Backend-Server
Request-Id
X-Cache-Spec
X-Cache-Lookup
X-HW
X-Content-Security-Policy-Report-Only
Accept-Ch-Lifetime
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Cloud-Trace-Context
X-Trace
X-Application-Context
X-Response-Time
Permissions-Policy
Fastly-Restarts
X-Nginx-Upstream-Cache-Status
X-Edge
X-Mod-Pagespeed
X-WebKit-CSP-Report-Only
X-Country
X-Mcache
X-Content-Type
Content-Location
X-MS-InvokeApp
X-Url
Accept-CH-Lifetime
X-CST
X-Clacks-Overhead
X-PC
X-TtlSet
X-Vname
X-Amz-Server-Side-Encryption
Rating
X-Midtier
X-Litespeed-Cache
RTSS
Cache-Tag
X-ESI
X-Vcap-Request-Id
X-D2id
X-Element-Page-Cache
X-VARITI-CCR
X-Kinja-Build
X-Kinja-Revision
X-Exp-Id
X-Cdn-Fetch
Origin-Trial
X-Exp-Variant
X-Kinja
X-GoogleNews-Bot
X-Kinja-Server
X-Use-Magma
Verso
X-Rack-Cache
X-Server-Name
X-Ac
X-Powered-By-Plesk
X-GitHub-Request-Id
Service-Worker-Allowed
X-Cnection
X-ECACHE
X-Amz-Rid
SPRequestGuid
X-SharePointHealthScore
X-Client-IP
X-Navigation-Version
Xkey
X-Ttl
X-Abt-Application-Version
Edge-Control
SPRequestDuration
SPIisLatency
X-NWS-LOG-UUID
X-Cache-TTL
X-B3-TraceId
X-Upstream
Arr-Disable-Session-Affinity
X-Webkit-Csp
X-Cached
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Erf-Bev-Bev-Is-Generated
X-Instrumentation
X-Erf-Bev-Bev
X-Browser-Type
X-Mg-S
X-Dw-Request-Base-Id
X-FastCGI-Cache
X-Varnish-TTL
X-Px
X-Cache-Key
X-Middleton-Display
Display
X-Sol
Pagespeed
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Access-Control-Request-Method
Edge-Cache-Tag
X-Forwarded-For
X-Country-Code
X-Goog-Hash
Content-MD5
X-Correlation-Id
X-NF-Request-ID
TCN
X-Powered-CMS
Front-End-Https
AR-SID
AR-CACHE
X-Id
AR-ATIME
AR-PoweredBy
AR-Request-ID
X-Version
Public-Key-Pins
X-RateLimit-Remaining
X-HP-Webp
Accept-Ch
X-Jurisdiction
X-HP-Trace-Id
X-T
X-MSEdge-Ref
X-Recruiting
X-Ser
X-Content-Digest
X-Ratelimit-Limit
X-Amzn-Trace-Id
Response
X-Middleton-Response
X-Accel-Expires
X-Daa-Tunnel
TP-L2-Cache
TP-Cache
X-Shield-Request-Id
X-XRDS-Location
MicrosoftSharePointTeamServices
S
Nginx-Cache
Cache-Status
Mrf-Cache-Status
MRF-Tech
X-B3-TraceId-Primal
X-HS-Combine-CSS
X-HS-Content-Id
X-Request-Processing-Time
X-HS-Hub-Id
X-HS-Cache-Config
Server-Node
X-Request-Received
Cache-Tags
X-Distributor
X-Hits
X-PressLabs-Stats
Cross-Origin-Opener-Policy
X-Edge-Location-Klb
X-Kinsta-Cache
X-LB-Cache
X-Origin-Server
X-Ratelimit-Remaining
X-Ua-Browser
X-Ezoic-Cdn
Fastcgi-Cache
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
Alternate-Protocol
X-Fastcgi-Cache
X-Grace
Server-Name
X-Ratelimit-Reset
Filterid
X-DIS-Request-ID
X-Frontend
X-Request-Handler-Origin-Region
X-Microsite
X-Protected-By
X-Rid
X-Geo-Country
X-Hostname
X-LLID
Healthy
X-Fastly-Request-ID
X-FB-Debug
X-Varnish-Backend
X-Git-Hash
Cleartype
X-Logged-In
Payment
X-Debug-Info
X-Page-Id
X-Load-Cache
X-Forwarded-Proto
X-Www-Served-By
X-DataDome
X-Cluster-Name
X-NGENIX-Cache
DC
X-ASPNET-VERSION
X-ECache
X-Origin-Cache
MS-Author-Via
Realpath
Content-Disposition
Charset
X-TTL
Access-Control-Allow-Method
X-B3-Sampled
X-GUploader-UploadID
X-Goog-Metageneration
X-Upgrade-Enabled
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-F-Cache
X-Proxy
X-AppVersion
X-Activity-Id
X-Az
X-B3-Traceid
X-Seen-By
X-Amz-Replication-Status
X-Amz-Meta-S3cmd-Attrs
X-Fb-Rlafr
Paypal-Debug-Id
X-Cache-Age
Retry-After
X-Server-ID
X-Azure-Ref
Cross-Origin-Resource-Policy
X-Type
X-Whom
Count-Hit
X-Revision
X-Request-Guid
Viewport
X-Aspnet-Duration-Ms
Surrogate-Key
X-Contextid
X-Flags
X-Is-Crawler
X-Providence-Cookie
X-Route-Name
X-Aspnetmvc-Version
X-Varnish-Server
X-Wix-Request-Id
X-App-Environment
X-B
X-Hosted-By
X-B-Cache
X-Signature
Accept-Charset
X-Akamai-Edgescape
Amp-Access-Control-Allow-Source-Origin
X-TT
X-VCache
X-DynaTrace
X-Language
X-Times
X-App-Server
X-Source
X-Cache-Control
X-Fastly-Request-Id
X-Mobile
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
Referer-Policy
X-Goog-Storage-Class
X-Goog-Generation
X-Magnolia-Registration
X-Varnish-Grace
X-Envoy-Decorator-Operation
Host
Version
X-Varnish-Ttl
X-N
X-HTML-Minification-Powered-By
X-Cache-Rule
X-Oracle-Dms-Ecid
WPO-Cache-Status
X-Oracle-Dms-Rid
WPO-Cache-Message
X-Original-Request-Id
X-Response-Served-From
X-Tumblr-User
X-Tumblr-Pixel
X-EdgeConnect-Cache-Status
X-Tumblr-Pixel-1
X-Varnish-Age
X-Tt-Trace-Tag
X-Tt-Trace-Host
X-Tumblr-Pixel-0
Refresh
MS-CV
X-Rule
Access-Control-Request-Headers
X-Cache-Time
Ms-Operation-Id
X-RTag
X-Cache-Status-Check
SD-X-WS
X-Cache-Grace
X-UUID
X-User-Agent
X-Framework
SRV
X-FW-Hash
X-FW-Serve
X-FW-Server
X-Content-Powered-By
X-FW-Static
GEO-INFO
X-Backend-Name
Akamai-GRN
X-FW-Type
Protected
X-Cacheable-TTL
X-Jobs
X-Status
X-RemovedCookies
X-FW-Version
X-Page-View
X-ProcessESI
Section-Io-Cache
X-FW-Dynamic
X-Is-Bot
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-Instance
X-Drupal-Cache-Tags
X-Cache-Expired-At
X-Device-Type
X-L-Path
X-Rendered-As
X-G
From-Origin
X-Environment-Context
X-Amz-Apigw-Id
Url
X-Drupal-Cache-Contexts
X-Http-Reason
X-Akamai-Request-ID2
X-RateLimit-Limit
X-Amzn-RequestId
X-Servername
X-NYM-Debug-Backend
X-Adobe-Content
X-Adobe-Loc
X-Region
X-Trace-Id
NGB
CDN-RequestId
X-Nginx-Cache
Front
X-Template
X-CDN-Forward
X-Unique-Id
Accept-Language
X-Debug-IsConnected
X-Debug-IsPreview
X-XRDS-LOCATION
X-Content-Options
X-Yottaa-Optimizations
X-Cache-Hit
X-Yottaa-Metrics
Backend
Fastly-SWR
Fastly-SIE
Country
X-Zen-Fury
Liferay-Portal
X-Air-Hostname
X-Air-Source
X-Air-Trace-Id
X-Newrelic-App-Data
X-DynaTrace-JS-Agent
X-Mode
Pinterest-Version
Pinterest-Generated-By
X-Pinterest-Rid
X-Tb
X-COUNTRY
X-Cache-Operation
Content-Secure-Policy
X-Real-IP
X-RN-RSRV
X-UPSTREAM-Address
X-Rocket-Nginx-Serving-Static
X-Amzn-Remapped-Content-Length
Filters
S-Rt
Meta-Geo
Webserver
X-Generation-Time
X-Cache-Server
Uber-Trace-Id
X-Rewrite-Enabled
X-Tt-Logid
X-Proxy-Cache-Info
X-Tumblr-Pixel-2
Onion-Location
X-Content-Age
X-PHP-Backend
X-Proxy-Build
X-IPS-LoggedIn
X-Format
Cache-Hits
Azure-Version
X-Section
X-Locale
X-Time
CF-IPCountry
X-Timing-Wait
X-Web-Node
X-Access
Azure-SlotName
X-Node-Name
Azure-SiteName
Selected-Fe
Azure-InstanceId
Azure-RegionName
ServedBy
TWC-GeoIP-LatLong
TWC-GeoIP-Country
TWC-Device-Class
Property-Id
Cache-Name
Webcakes-App-Name
Webcakes-App-Version
X-Cluster-Node
Webcakes-Region
X-Forwarded-Host
X-Debug
X-Uri
TWC-Privacy
TWC-Connection-Speed
TWC-Locale-Group
X-Site-Version
X-Ms-Request-Id
X-Say-TTL
X-Sql-Count
X-Soup
X-Skip-Cache
X-Say-Cacheable
X-R9-Blue-Green-Version
X-Sucuri-ID
X-UA-Device-Type
X-Sucuri-Cache
X-Sql-Duration-Ms
X-Varnish-Beresp-Grace
X-Server-W
X-SayCDN-TTL
X-Origin-Hint
Node
X-Proto
X-Ms-Version
X-BYPASS-REASON
Web-Mar-Node
X-Labrador-Cache-Channel
X-Cache-Host
X-Cache-TTL-Remaining
X-Cache-Action
ServerID
X-Ua
X-Routing-Service
X-Zipkin-Id
DB-Nickname
X-Reqid
Cross-Origin-Window-Policy
X-Cms-Context
X-ProxyCache-Status
X-Proxy-Cache-Status
X-ProxyCache-Key
X-VC-Cache
X-Extlb
X-Edge-Location
X-Via-Fastly
X-Proxied
X-Origin-Date
X-PHP-Host
X-Tumblr-Pixel-3
X-TIME
X-Handled-By
X-LJ-Flow-ID
X-VWS-Id
X-WP-CF-Super-Cache
X-SaId
X-IPLB-Request-ID
X-FB-TRIP-ID
X-IPLB-Instance
X-Cluster
X-AWS-Id
X-WP-CF-Super-Cache-Cache-Control
X-JoinUs
X-Adobe-Source
X-LAGOON
X-Detected-As
X-Ruxit-Js-Agent
Mn-Server-Ip
X-Urbn-Context-Path
Locale
X-No-Session
X-App-Version
X-Urbn-Site-Id
X-Optimistic-Header
Countrycode
X-Xfnlog-Site
Apigw-Requestid
X-Tec-Api-Origin
X-GeoCode
X-GeoCountry
X-Tec-Api-Root
X-Tec-Api-Version
X-LSADC-Cache
X-ARC
Fastcgi-Useragent
WP-Super-Cache
X-Buckets
Source
Cache-Tv-Group
X-Oneagent-Js-Injection
X-Director
Mime-Version
Upgrade-Insecure-Requests
X-Varnish-Hits
X-Hl-Ver
CDN-Uid
CDN-RequestCountryCode
CDN-PullZone
CDN-CachedAt
CDN-Cache
CDN-EdgeStorageId
X-Generated-By
X-GEO
X-Mg-Request-UUID
Fastly-Drupal-HTML
X-Request-Time
X-Tx-Id
X-Redis-Cache
X-Cache-Debug
Frame-Options
X-Loop
X-Webkit-CSP-Report-Only
X-FireWall-Port
CF-Cached-On
Xet-Cookie
X-URL
X-Varnish-Cache-Hits
X-Origin-TTL
X-Origin-CC
X-Varnish-Hostname
X-RM-Cache-TTL
X-Pass-Why
X-Sorting-Hat-ShopId
X-Storefront-Renderer-Rendered
X-Shopify-Stage
X-Alternate-Cache-Key
X-ShardId
X-Sorting-Hat-PodId
X-ShopId
X-TA-CDN-Provider
X-Api-Version
X-ServerID
X-SRV
X-TNCMS
X-Datadog-Trace-Id
X-Datadog-Sampling-Priority
X-Datadog-Sampled
Load-Balancing
X-Datadog-Parent-Id
X-Akamai-Transformed
X-Newrelic-Synthetics
X-Service
X-Served-From
X-Pubstack
X-Endurance-Cache-Level
X-Location
X-Request-Host
Server-Info
Xserver
X-Correlation-ID
Gannett-Cam-Experience-Id
Ngx.Var.Host
Edge-Cache
Thinkindot-CacheControl
Meta-Geo-Continent
Thinkindot-Control
Thinkindot-CacheControl-Type
Memcached
Lang
X-A-Ccd
X-A-Dam
MD5-Digest
X-A
Xc-Version
WWW-Authenticate
TDXMobile
T-Server
BehaviorPad-Version
Origin
Host-ID
Cache-Host
DCR-Decision-By
Redirect-Candidate
Release
Candidate-Md5Url
Odigeo-Trace-Id
A
Sslversion
Surrogated-Key
Country-Code
Req-Svc-Chain
X-A-Dcw
DCR-Processing-Time-Ms
Rendered-Blocks
DSUID
X-We-Are-Hiring
X-Loc
X-Level-Front-Cache
X-Mid
X-SRCache-Key
X-Mobile-URL
X-Sn-Servicetimems
X-INCAP-ABP
X-Httpd
X-External-Request-Id
X-Epic-Correlation-Id
X-Gdpr
X-Generated-On
X-Hash
X-Nyt-Route
X-Origin-Time
X-S-Maxage
X-S-Cookie
X-ScT
X-Sigma
X-Sigma-Backend
X-S
X-Rojux
X-Platform-Processor
X-Platform-Cluster
X-Platform-Router
X-Processor
X-Rocket-Build-Number
X-Ec-GeoHdr
X-Ec-Fail
X-Cache-Date
X-Bip
X-Cache-Info
X-Cache-NE
X-CMSURLCustom
X-BCube-Filmed-By
X-Bc-Bl
X-Aed
X-A-Wwc
X-Application
X-B-Cookie
X-BBC-Edge-Cache-Status
X-Vdms-Version
X-Vdms-Path
X-Test
X-Destination
X-Developer
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-Thanos
X-D
X-TIM-N
X-Conf
X-Thinkindot-L3
X-Core-Mission
X-CUA
X-A-Dgt
X-Cdn-Origin
X-CSRF-Token
X-Storage
X-Restarts
X-Date
X-Ec-Custom-Error
X-Dispatcher-Number
X-Developers
X-Fastly-Backend
X-Fastly-Cache
X-GeoIP
X-GeoIP-City
X-Geo-Header
X-Gamma-Serve
X-Fmm-Version
X-Fetched-On
X-Cdn-Srv
Section-Io-Origin-Status
Section-Io-Id
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
Mail-Subject
We-Hiring
X-Varnish-Beresp-Ttl
X-CacheTTL
X-Has-Esi
X-Cache-Bucket
X-Auto-Login
X-Accel-Expires-Debug
X-Clara-WADP
X-Human
X-VServer
X-WADP-Cache
X-Vmg-Version
X-Varnishpool
X-Varnish-Beresp-Status
X-Worker
X-WP-CF-Super-Cache-Active
X-Men
X-Origin
X-Akamai-Device-Characteristics
Server-Host
NM-Fastcgi-Cache
X-Var-Ttl
X-B3-Spanid
X-Mvc-Supplant-Cachable
X-Node-Id
X-JWT-State
X-Is-Gdpr
Magicmarker
X-Org
X-Pool
X-Slack-Backend
X-Slack-Shared-Secret-Outcome
X-Server-IP
X-SD-PageType
X-Region-Sid
X-HS-Content-Campaign-Id
X-Origin-Response-Time
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
Apple-News-Services-Handled
Gh-Request-Id
C-Via
Fastly-Backend-Name
Fastly-GeoIP-CountryCode
CloudFront-Viewer-Country
CacheControlHeader
AKAMAI
Cache-Key
X-Parent-Response-Time
X-Instance-Name
Click-Count-Action-Start
X-Dispatcher-Server
X-GeoIP-Country-Code
X-Gen-Mode
X-Frame-Option
X-HN
X-Irp-Debug
Canary
CDCHOST
X-Hnp-Log
X-Forwarded-Site
X-GeoIP-Region-Code
Cmsid
X-Block-Status
X-Cache-Tags
X-Esi-Check
X-Azure-Ref-OriginShield
X-Gzip
X-Core-Value
X-DefElseHash
X-FC-Vary-Parameters
Cmstype
Datacenter
X-Device-Os
X-DefHash
X-LB-NoCache
X-Mly-Id
X-Varnish-CookieINHashed-On
X-Varnish-Remaining-TTL
X-Varnish-CookieHashed-On
Adler-Geo
X-Origin-Expires
Is-Eu
X-VarnishDD-TTL
X-VG-TLSProxy
X-WA-Info
X-Wix-Viewer-Type
X-Request-Start
X-Scale
X-Variation
Platform
X-NodeID
Cache-Provider
X-Op-Id-All
X-Nginx-Cache-Key
X-NCache
X-Cache-Id
X-App
X-NWS-UUID-VERIFY
Kp-EeAlive
Vix-Hermes-Req-Id
X-Req
X-Ad-Defer-Variation
X-Qloud-Router
X-Platform
Click-Count-Error
Tube-Got-Results
Tube-Got-Eval
Tube-Get-Contents
State
Tube-Return
User-Cache-Control
Wxu-Next-Hostname
Wxu-Next-Commit
Web-Mar-Region
Sever-Int
Server-Hostname
NGX
Machine
L
On-Server
Origin-CC
Server-Ext
PFcat
Origin-EX
Wxu-Next-Region
Ssr
X-Accel-Buffering
HA-Ipaddr
X-Release
X-DPWN-IS-SECURE
X-SB
X-Cache-Remote
X-V-Cache
X-Old-Content-Length
X-Eu-Site
X-Planisys-CDN-Rules
X-Planisys-CDN-Cache
X-Owner
Environment
X-Planisys-CDN-TTL
X-Response-By
X-Platform-Server
X-Minions-Version
X-Cache-FS-Status
Producers
L5d-Success-Class
X-CGP
X-Ckpd-Fst-Backend
Fastly-SSL
X-Csrf-Jwt
Ha-Gx-Prefs
X-Provided-By
X-Air-Pt
X-CACHE-AGE
HostName
Expect-Staple
Cluster
X-Tb-Optimization-Total-Bytes-Saved
X-Nananana
X-Mvc-Supplant-OutputCached
Locid
X-FL-QIT-DEBUG
Decoy-Debug-TTL
X-Cache-Backend
X-FL-EDGE
Decoy-Debug-Status
Decoy-Debug-Key
X-Aicache-OS
Srvid
X-Refresh
Pics-Label
X-Microcachable
X-Via-CDN
X-Dc
X-Tid
GeoIP-Latitude
X-Via-SSL
X-Vcl-Version
X-Via-Edge
Edge-Copy-Time
Env
X-Cache-Enabled
X-Zone
X-ND-Cache
X-From
X-RCS-CacheZone
X-DC
X-VC
X-Trace-ID
Memory
X-Servedbyhost
X-Generated-In
X-Up
Time
NtCoent-Length
X-Srv
SID
Svr
X-Edge-Pop
Sid
X-Debug-Cache-Store
X-Cached-By
X-Lambda-Id
X-Debug-Cache-Fetch
Cache
X-Cs
X-Webkit-CSP
X-Via-Poph
X-AIR-PT
X-ZONE
X-DataCenter
X-Via-Popv
X-HS-Status
X-Nc
X-Via-Popn
X-Nf-Request-Id
X-NewRelic-App-Data
X-VCT
X-Esi
X-Vtex-Remote-Cache
VNS-Cache
X-Render-Time
X-Wa
CPC-Age
CPC-Cache
VNS-Age
Fastly-Drupal-Html
X-Vgn-Hpd-Cached
X-HA-Backend
X-Presslabs-Stats
X-Vgn-Hpd-Variations-Key
X-Vgn-Hpd-Ssi
Cdn
X-Vc
X-LB-ID
X-Hcs-Proxy-Type
X-CCDN-Origin-Time
X-CCDN-CacheTTL
Server-ID
X-CLOUD-TRACE-CONTEXT
X-Client-Ip
X-Upstream-Ht
X-TH-Server
X-Upstream-Ct
GeoIp-Country-Code
X-Check-Cacheable
X-B3-SpanId
X-Cache-Type
X-Gateway-Skip-Cache
AMP-Access-Control-Allow-Source-Origin
X-Gateway-Request-Id
X-AK-Request-ID
Cdncip
Cdnsip
Hostname
X-Gateway-Cache-Status
X-Fpc
X-Amz-Meta-Cb-Modifiedtime
X-ATG-Version
X-Gateway-Cache-Key
X-Via-JSL
X-Proxy-CacheRZ
XkeyRZ
True-Client-IP
X-Varnish-Authentication
Uri
X-Via-NSCOPI
X-Contensis-Viewer-Groups
X-NGINX-Cache
X-Cache-ASPX
M-TraceId
X-API-Version
XServer
X-Varnish-Beresp-TTL
X-EC-Lua
X-CS
X-CSRF-TOKEN
Esi-Enabled
X-CF-Lambda-Fn
X-PAYTM-SRV-ID
True-Client-Ip
Eomportal-Instance
X-RateLimit-Limit-Second
X-RateLimit-Remaining-Second
X-CF-Lambda-Version
X-Udemy-Cache-App-Namespace
Resin-Trace
X-FPC
X-MSEdge-Features
X-MSEdge-Flight
X-MP-GENERATED-AT
OT-Force-Account-Verify
X-Datadome
Srv
X-Wikidot-Static-Cache
N-Cache
X-Wikidot-Backend
X-Micro-Cache
Ngx-Var-Key
CDN
X-CDN-Cache-Status
Request-ID
YJS-ID
X-Orig-Expires
GeoIP-Country-Code
RNT-Time
X-Shop-Environment
X-Forwarded-Path
X-Fastly-Country-Code
X-Bl-Debug
X-Tenant
RNT-Machine
X-APP-VERSION
Path
X-RateLimit-Reset
Server-Id
IsBot
X-Cache-Ttl
X-Request-URI
X-SIPLIST1
X-Cache-NGX
X-Info
X-Ha-Backend
X-VCL-Version
Sm-Log-Id
X-Service-Response-Time
X-Accel-Version
X-App-Name
X-Policy
X-Lb-Id
X-B3-Trace-ID
Lb
LB
X-TX-ID
X-Datacenter
X-WA
X-MCACHE
Cross-Origin-Opener-Policy-Report-Only
HIT
Location
X-Edge-POP
X-Pod-Name
Hit
Ohc-File-Size
X-Vcache
X-Via-PopV
X-NC
X-Cdn-Cache-Status
X-Via-PopH
X-SERVER-NAME
X-Via-PopN
X-Geo
X-Akamai-Pragma-Client-IP
X-Xrds-Location
X-Logging-Id
Servername
X-Oss-Hash-Crc64ecma
Timeexpire
X-Srcache-Store-Status
X-Srcache-Fetch-Status
X-Snapshot-Date
X-Cdn-Request-ID
X-Cdn-Diag
X-CACHE-KEY
X-Cache-Expires
X-Oss-Object-Type
Proxy-Connection
FSS-Cache
Pramga
X-Oss-Request-Id
X-Oss-Storage-Class
ENV
X-Oss-Server-Time
X-Git-Commit
X-Container-Uri
Req-ID
X-Ctl-Mach
X-ServedByHost
Yjs-Id
Epwk-X-Cache
Warning
X-Fastly-Backend-Reqs
X-Hyper-Cache
X-UP
XM
X-Tncms
X-VG-WebCache
X-Cdn-Forward
X-Serial
X-Amz-Meta-Opti
X-Scheme
X-Dw-Trace-Id
Geoip-Latitude
WZWS-RAY
X-LiteSpeed-Cache-Control
X-MiniProfiler-Ids
X-Rebelmouse-Cache-Control
MIME-Version
X-M-Reqid
X-M-Log
X-Rebelmouse-Surrogate-Control
Cneonction
X-Lb-Nocache
X-Qnm-Cache
True-Client-Country-4JS
X-Iauth-Set-Uid
X-Moov-Xdn-Version
Traceparent
X-Acquia-Purge-Cdn-Unconfigured
V-Age
Content-Script-Type
X-Acquia-Site
X-Moov-T
X-Swift-Error
X-RAMCache
Ec-Rule-Version
X-B3-Parentspanid
X-Acquia-Application-UUID
X-TraceId
Content-Style-Type
X-Acquia-Purge-Tags
X-Acquia-Application-Trace
X-Wp-Cf-Super-Cache
X-F-Status
X-Wp-Cf-Super-Cache-Cache-Control
X-TT-LOGID
X-Lsadc-Cache
Cdn-Requestid
CountryCode
Ohc-Cache-HIT
X-Clientip
CDN-RequestPullSuccess
CDN-RequestPullCode
X-Mg-Cache
X-Litespeed-Cache-Control
X-ApacheServer
X-Mid-Debug-Cache-Disk
My-App
X-Mid-Debug-Cache-Key
X-IPS-Cached-Response
X-B3-ParentSpanId
X-PERF
X-LiteSpeed-Tag
Ngx
Inserted-Into-Cache-At
X-Fastly-Cache-Hits
X-Viewer-Country
X-Request-URL
X-Th-Server
X-Cache-Ngx
X-Webstats-RespID