Threat Level: green Handler on Duty: Daniel Wesemann

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
Pragma
X-Powered-By
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
P3P
X-Cache-Hits
X-UA-Compatible
Alt-Svc
X-Xss-Protection
X-Served-By
X-Download-Options
CF-Ray
X-Timer
Access-Control-Allow-Headers
X-Request-Id
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Generator
X-Cache-Status
X-Check
X-Cacheable
X-Envoy-Upstream-Service-Time
X-Request-ID
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-FRAME-OPTIONS
X-Iinfo
X-Dns-Prefetch-Control
X-Drupal-Dynamic-Cache
Feature-Policy
X-Content-Security-Policy
Content-Encoding
Access-Control-Expose-Headers
Upgrade
Status
X-CDN
X-AspNetMvc-Version
X-XSS-PROTECTION
Server-Timing
Access-Control-Max-Age
X-Amz-Request-Id
Request-Context
X-Amz-Id-2
X-Turbo-Charged-By
X-AH-Environment
X-Robots-Tag
X-Via
X-Backend
X-Cache-Group
Cf-Edge-Cache
Host-Header
Keep-Alive
X-Proxy-Cache
X-Hacker
X-Server
X-Rq
X-Age
X-UA-Device
X-Server-Powered-By
Allow
X-Vhost
X-Varnish-Cache
X-Ws-Request-Id
EagleId
X-Dispatcher
X-Amz-Version-Id
Grace
P3p
Cf-Apo-Via
Nel
X-LiteSpeed-Cache
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Page-Speed
X-Device
Cf-Railgun
EagleEye-TraceId
X-Swift-CacheTime
X-Swift-SaveTime
X-Aws-Lambda-Call-Status
Ali-Swift-Global-Savetime
X-WebKit-CSP
Accept-CH
X-Pingback
X-Node
X-Host
X-Server-Id
X-OneAgent-JS-Injection
Surrogate-Control
X-Backend-Server
X-CST
X-Readtime
X-Nginx-Cache-Status
X-Akam-SW-Version
X-Content-Security-Policy-Report-Only
Permissions-Policy
Request-Id
X-Application-Context
X-Cache-Lookup
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Nginx-Upstream-Cache-Status
X-Cloud-Trace-Context
X-Trace
X-Response-Time
X-Edge
Accept-Ch-Lifetime
X-HW
X-Litespeed-Cache
X-Ua-Compatible
X-Mod-Pagespeed
Content-Location
X-Url
Accept-CH-Lifetime
X-Clacks-Overhead
X-Ruxit-JS-Agent
X-Midtier
X-ECACHE
X-Oneagent-Js-Injection
X-ESI
X-Mcache
Rating
X-Amz-Server-Side-Encryption
X-Country
X-Upstream
X-TtlSet
X-PC
X-Vname
X-Vcap-Request-Id
Xkey
X-MS-InvokeApp
X-Rack-Cache
X-D2id
Cache-Tag
Verso
Fastly-Restarts
X-Content-Type
X-Element-Page-Cache
X-Cache-TTL
X-Kinja-Revision
X-Exp-Variant
X-Use-Magma
X-Kinja-Build
X-Kinja-Server
X-GoogleNews-Bot
X-Kinja
X-Cdn-Fetch
X-Exp-Id
Edge-Control
RTSS
X-Powered-By-Plesk
X-VARITI-CCR
X-Ac
Origin-Trial
X-Cached
X-WebKit-CSP-Report-Only
X-Navigation-Version
Accept-Ch
X-Abt-Application-Version
X-Ruxit-Js-Agent
X-Goog-Hash
Service-Worker-Allowed
X-GitHub-Request-Id
X-Amz-Rid
X-Country-Code
X-Ttl
X-Middleton-Display
Display
Pagespeed
X-Sol
X-Mg-S
X-Dw-Request-Base-Id
X-SharePointHealthScore
SPRequestGuid
X-Browser-Type
X-Server-Name
X-Varnish-TTL
Arr-Disable-Session-Affinity
Cross-Origin-Opener-Policy
X-B3-TraceId
X-Ua-Device
X-Erf-Bev-Bev-Is-Generated
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Erf-Bev-Bev
AR-PoweredBy
AR-SID
AR-Request-ID
X-Powered-CMS
X-Instrumentation
AR-ATIME
Response
X-Middleton-Response
SPRequestDuration
SPIisLatency
X-Amzn-Trace-Id
X-Cache-Key
AR-CACHE
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-NF-Request-ID
X-Fastly-Request-ID
X-Times
X-Cnection
X-ORACLE-DMS-ECID
X-HP-Webp
X-HP-Trace-Id
X-Jurisdiction
X-Version
X-ORACLE-DMS-RID
X-Accel-Expires
X-T
Front-End-Https
Cache-Tags
Cache-Status
X-Ser
Edge-Cache-Tag
X-Px
X-Fastcgi-Cache
X-MSEdge-Ref
X-Pinterest-Rid
Pinterest-Generated-By
Pinterest-Version
Public-Key-Pins
X-Hits
Nginx-Cache
X-Recruiting
X-Client-IP
MRF-Tech
Mrf-Cache-Status
X-B3-TraceId-Primal
X-B3-Traceid
X-Shield-Request-Id
X-Request-Received
X-Request-Processing-Time
X-Frontend
Access-Control-Request-Method
X-LLID
X-RateLimit-Remaining
Server-Node
X-Ua-Browser
Payment
X-NWS-LOG-UUID
TP-Cache
X-DIS-Request-ID
X-Webkit-Csp
X-HS-Content-Id
X-HS-Combine-CSS
X-HS-Cache-Config
X-HS-Hub-Id
MicrosoftSharePointTeamServices
S
TP-L2-Cache
X-Content-Digest
X-LB-Cache
X-Goog-Metageneration
X-RateLimit-Limit
X-FastCGI-Cache
X-Distributor
Content-MD5
Realpath
X-Geo-Country
X-Hostname
X-Erf-Stays-Pdp-Viaduct-Migration-Web
X-Correlation-Id
X-Microsite
X-Request-Handler-Origin-Region
X-Forwarded-For
X-Ezoic-Cdn
X-Envoy-Decorator-Operation
X-Page-Id
Access-Control-Allow-Method
Accept-Charset
X-Ratelimit-Remaining
X-FB-Debug
Fastcgi-Cache
X-Cluster-Name
X-GUploader-UploadID
X-Rid
X-Kinja-CCPA
X-PressLabs-Stats
X-Protected-By
X-Seen-By
TCN
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Webkit-CSP
Cleartype
X-XRDS-Location
X-Webkit-CSP-Report-Only
X-Newrelic-App-Data
X-B3-Sampled
X-Origin-Server
DC
X-Debug-Info
X-Ratelimit-Limit
X-Goog-Storage-Class
X-Origin-Cache
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Stored-Content-Length
X-Mobile
Referer-Policy
X-Logged-In
X-Varnish-Backend
X-Git-Hash
X-TTL
X-Aspnet-Version
X-Kinsta-Cache
X-Edge-Location-Klb
X-Azure-Ref
Cross-Origin-Resource-Policy
Alternate-Protocol
X-Server-ID
Healthy
X-Varnish-Grace
X-Contextid
X-Revision
X-Fb-Rlafr
Surrogate-Key
X-App-Environment
X-Request-Guid
X-Route-Name
X-Providence-Cookie
X-Grace
X-Amz-Replication-Status
X-Is-Crawler
X-Aspnet-Duration-Ms
X-Flags
X-TT
X-Amz-Meta-S3cmd-Attrs
X-Content-Options
Count-Hit
X-Whom
X-Wix-Request-Id
X-Client-Ip
X-Forwarded-Proto
Charset
X-IPS-LoggedIn
Filterid
MS-Author-Via
X-Akamai-Edgescape
Viewport
Frame-Options
WPO-Cache-Message
WPO-Cache-Status
X-App-Server
X-Id
X-Hosted-By
Paypal-Debug-Id
X-B
X-Backend-Name
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-Cache-Control
X-Trace-Id
X-Magnolia-Registration
X-Activity-Id
X-AppVersion
X-Az
X-Www-Served-By
Amp-Access-Control-Allow-Source-Origin
X-Cache-Age
Section-Io-Cache
Retry-After
Server-Name
X-Daa-Tunnel
Refresh
X-Upgrade-Enabled
X-Type
Version
X-Varnish-Server
X-Proxy-Cache-Info
X-F-Cache
X-Proxy
X-Oracle-Dms-Ecid
Host
X-Oracle-Dms-Rid
X-Rule
X-Http-Reason
X-Original-Request-Id
SD-X-WS
Akamai-GRN
X-Cache-Rule
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-Response-Served-From
X-ARC
X-App-Version
X-Edge-Location
Front
Protected
X-Akamai-Request-ID2
X-EdgeConnect-Cache-Status
X-Rocket-Nginx-Serving-Static
X-User-Agent
X-UUID
X-Varnish-Age
X-Status
X-Instance
X-Is-Bot
X-Jobs
X-Framework
X-COUNTRY
X-Cache-Grace
X-Source
X-Cacheable-TTL
SRV
X-L-Path
X-Rendered-As
X-Environment-Context
X-Unique-Id
X-Region
X-FW-Server
X-FW-Static
X-FW-Serve
X-FW-Hash
Fastly-SIE
X-FW-Type
X-Cache-Time
X-FW-Version
From-Origin
Fastly-SWR
X-Page-View
Access-Control-Request-Headers
X-N
X-Load-Cache
X-FW-Dynamic
X-RemovedCookies
X-ProcessESI
X-Tumblr-Pixel-1
X-G
X-Adobe-Content
X-Tumblr-User
X-Adobe-Loc
X-Tumblr-Pixel-0
X-Tumblr-Pixel
ServerID
X-Varnish-Ttl
X-Time
Content-Disposition
X-Drupal-Cache-Tags
X-CDN-Forward
Country
X-Datadog-Sampling-Priority
X-Datadog-Trace-Id
X-Datadog-Parent-Id
X-Vcache
X-HTML-Minification-Powered-By
X-Language
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-DataDome
Accept-Language
X-RateLimit-Reset
Liferay-Portal
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Datadog-Sampled
X-DynaTrace
X-ID
X-Amzn-Remapped-Content-Length
X-DynaTrace-JS-Agent
X-Debug-IsConnected
X-Mg-Request-UUID
X-Debug-IsPreview
Countrycode
X-Generated-By
X-B3-SpanId
X-ECache
Xet-Cookie
X-Drupal-Cache-Contexts
Backend
CF-IPCountry
X-WP-CF-Super-Cache-Cache-Control
X-WP-CF-Super-Cache
X-Tt-Logid
X-Device-Type
X-Content-Powered-By
X-Mode
Webserver
Xserver
X-NYM-Debug-Backend
X-Ratelimit-Reset
X-Erf-Web-Scheduler
X-Nginx-Cache
X-Zen-Fury
X-B-Cache
X-Signature
GEO-INFO
X-Httpd
X-Content-Age
X-Xrds-Location
Meta-Geo
Locale
Load-Balancing
X-ServerID
X-Container-Uri
X-Git-Commit
X-JoinUs
X-Director
Onion-Location
X-Rewrite-Enabled
X-LAGOON
X-Sucuri-ID
X-SaId
X-Sucuri-Cache
S-Rt
Azure-SiteName
Azure-InstanceId
X-Servername
X-UPSTREAM-Address
X-Cache-Action
Azure-Version
X-Varnish-Cache-Hits
Filters
Azure-SlotName
X-Cache-Operation
Url
X-Urbn-Context-Path
X-Urbn-Site-Id
Azure-RegionName
X-Cache-Server
X-Proto
X-Varnish-Hostname
X-Tb
X-Soup
X-Say-Cacheable
X-SayCDN-TTL
X-Say-TTL
X-Cluster-Node
Uber-Trace-Id
X-Nf-Request-Id
X-Storage
X-Ms-Version
X-Forwarded-Host
X-Detected-As
X-VCT
Web-Mar-Node
X-Served-From
X-Generation-Time
CDN-RequestId
X-Ms-Request-Id
X-VC-Cache
X-RM-Cache-TTL
X-Logging-Id
X-Labrador-Cache-Channel
X-PHP-Host
Webcakes-Region
X-Extlb
Webcakes-App-Version
TWC-Locale-Group
Property-Id
Node
DB-Nickname
TWC-Connection-Speed
TWC-Device-Class
TWC-Privacy
TWC-GeoIP-LatLong
TWC-GeoIP-Country
Webcakes-App-Name
X-RCS-CacheZone
X-Adobe-Source
Fastcgi-Useragent
X-Zipkin-Id
X-GeoCode
X-GeoCountry
X-Sql-Duration-Ms
X-Sql-Count
X-Origin-Hint
X-Uri
Mn-Server-Ip
X-Routing-Service
X-Skip-Cache
X-Proxied
X-LSADC-Cache
X-R9-Blue-Green-Version
Selected-Fe
X-Debug
X-Timing-Wait
X-Tumblr-Pixel-3
X-Fetched-On
X-Format
X-Tumblr-Pixel-2
X-FB-TRIP-ID
X-Proxy-Build
Fastly-Drupal-HTML
X-MP-GENERATED-AT
X-Via-JSL
X-Lambda-Id
X-Cache-Expired-At
X-Origin-Date
X-NGENIX-Cache
OT-Force-Account-Verify
Source
X-XRDS-LOCATION
X-MCACHE
X-Cache-Hit
X-Node-Name
X-Tec-Api-Origin
X-Tec-Api-Root
X-Tec-Api-Version
X-Template
X-Varnish-Hits
Content-Secure-Policy
X-Cache-TTL-Remaining
X-AIR-PT
X-Srv
X-UA-Device-Type
X-Loop
X-Pass-Why
X-Tncms
X-Ua
X-Pubstack
X-Endurance-Cache-Level
X-PHP-Backend
NGB
X-Redis-Cache
X-Fastly-Request-Id
X-Server-W
Upgrade-Insecure-Requests
Cross-Origin-Window-Policy
X-Origin-TTL
X-Origin-CC
X-Real-IP
Cache-Hits
X-RTag
X-CCDN-Origin-Time
X-CCDN-CacheTTL
MS-CV
Ms-Operation-Id
X-Hcs-Proxy-Type
X-GEO
X-Cache-Host
Section-Io-Origin-Status
Section-Io-Origin-Time-Seconds
Section-Io-Id
Cache-Name
X-CACHE-AGE
Section-Origin-Responded
X-Reqid
Cache-Provider
X-Restarts
X-Xfnlog-Site
X-Optimistic-Header
X-IPLB-Instance
Apigw-Requestid
X-Cms-Context
X-IPLB-Request-ID
X-Akamai-Transformed
CDN-PullZone
CDN-RequestPullSuccess
CDN-RequestPullCode
X-Cache-Type
CDN-Uid
CDN-RequestCountryCode
CDN-CachedAt
X-S
CDN-Cache
CDN-EdgeStorageId
X-Aspnetmvc-Version
X-Presslabs-Stats
X-Hl-Ver
X-BYPASS-REASON
X-ProxyCache-Status
X-No-Session
X-ProxyCache-Key
X-Via-Fastly
X-AWS-Id
X-VWS-Id
X-CSRF-Token
X-Cluster
X-LJ-Flow-ID
X-Access
X-Section
HA-Ipaddr
Gh-Request-Id
L
Ha-Gx-Prefs
CPC-Cache
X-A-Dgt
Candidate-Md5Url
X-A-Wwc
Canary
Xc-Version
CPC-Age
L5d-Success-Class
Fastly-GeoIP-CountryCode
Fastly-Backend-Name
DCR-Processing-Time-Ms
DCR-Decision-By
Gannett-Cam-Experience-Id
Meta-Geo-Continent
N-Cache
Sslversion
Surrogated-Key
T-Server
Server-Host
Ngx.Var.Host
X-Accel-Expires-Debug
Odigeo-Trace-Id
Redirect-Candidate
Rendered-Blocks
Vix-Hermes-Req-Id
VNS-Age
Mail-Subject
X-A-Ccd
Magicmarker
X-A-Dam
MD5-Digest
X-A
VNS-Cache
W
We-Hiring
Web-Mar-Region
Lang
X-CacheTTL
X-Dispatcher-Number
X-Developer
X-Ec-Custom-Error
X-Ec-Fail
X-Epic-Correlation-Id
X-Ec-GeoHdr
X-Rojux
X-Destination
X-SD-PageType
X-Shop-Environment
X-Debug-Cache-Fetch
X-Debug-Cache-Store
X-S-Cookie
X-ScT
X-Eu-Site
X-External-Request-Id
X-Gdpr
X-Orig-Expires
X-Nyt-Route
X-GeoIP-Country-Code
X-Irp-Debug
X-GeoIP-Region-Code
X-Forwarded-Path
X-Origin-Time
X-Request-Host
X-Fastly-Backend
X-RateLimit-Remaining-Second
X-FC-Vary-Parameters
X-Policy
X-RateLimit-Limit-Second
X-Date
X-Slack-Backend
X-BCube-Filmed-By
X-Bc-Bl
X-Bl-Debug
X-Cache-Bucket
X-Cache-NE
X-Cache-Info
X-B-Cookie
X-VG-WebCache
X-Wikidot-Static-Cache
X-Application
X-Wikidot-Backend
X-We-Are-Hiring
X-Viewer-Country
X-Vtex-Remote-Cache
X-Mvc-Supplant-Cachable
X-Cdn-Diag
X-Conf
X-SRCache-Key
X-Csrf-Jwt
X-Slack-Shared-Secret-Outcome
BehaviorPad-Version
X-D
X-CGP
X-Tenant
X-Vdms-Path
X-Vdms-Version
X-CF-Lambda-Fn
X-Var-Ttl
X-CF-Lambda-Version
X-TIM-N
X-Aed
X-A-Dcw
X-Proxy-Cache-Status
X-Newrelic-Synthetics
X-Rn-Rsrv
X-TIME
X-Datadome
X-Web-Node
X-Forwarded-Site
X-Core-Value
X-Fmm-Version
X-Esi-Check
X-Generated-On
X-Gzip
X-Human
X-INCAP-ABP
X-Hash
X-Handled-By
X-CMSURLCustom
X-Geo-Header
X-Clientip
X-Alternate-Cache-Key
X-ApacheServer
X-App-Name
Thinkindot-Control
Thinkindot-CacheControl-Type
TDXMobile
Thinkindot-CacheControl
X-Auto-Login
X-Worker
X-Cache-Id
X-Clara-WADP
X-Cache-Debug
X-Wix-Viewer-Type
X-BBC-Edge-Cache-Status
X-Bip
X-Level-Front-Cache
X-Is-Gdpr
X-Sorting-Hat-ShopId
X-Storefront-Renderer-Rendered
X-SVT-ORM-RULES
X-Sorting-Hat-PodId
X-Shopify-Stage
X-ShardId
X-ShopId
X-SVT-ORM-VERSION
X-Test
X-VG-TLSProxy
Fastly-SSL
X-WADP-Cache
X-Varnishpool
X-Up
X-Thanos
X-Thinkindot-L3
True-Client-Country-4JS
X-Server-IP
X-Old-Content-Length
X-Org
X-Origin-Response-Time
X-Node-Id
X-Mly-Id
X-Has-Esi
X-Mid
X-Owner
X-PAYTM-SRV-ID
X-S-Maxage
X-Accel-Buffering
X-Request-Time
X-Pool
X-PERF
X-Platform
X-JWT-State
X-Core-Mission
Datacenter
Cmstype
Cmsid
AKAMAI
Release
Origin
Memcached
Machine
Host-ID
Environment
Req-Svc-Chain
X-Vcl-Version
WP-Super-Cache
User-Cache-Control
X-NodeID
Esi-Enabled
X-Nginx-Cache-Key
X-Varnish-Remaining-TTL
X-Varnish-CookieINHashed-On
X-Vmg-Version
X-Nananana
X-VServer
DSUID
X-Azure-Ref-OriginShield
Apple-News-Services-Parsed-Url
Expect-Staple
X-Cdn-Srv
X-Block-Status
X-Origin
X-Mvc-Supplant-OutputCached
X-Device-Os
X-Gen-Mode
X-Dispatcher-Server
Server-Ext
X-From
X-Qloud-Router
Server-Hostname
X-Sn-Servicetimems
NM-Fastcgi-Cache
Adler-Geo
X-Loc
X-TA-CDN-Provider
X-Hnp-Log
X-Variation
X-Varnish-CookieHashed-On
Sever-Int
Country-Code
X-DefHash
X-DPWN-IS-SECURE
X-DefElseHash
X-Cdn-Origin
X-Parent-Response-Time
X-Scale
CDCHOST
CloudFront-Viewer-Country
Producers
Apple-News-Services-Handled
Platform
Is-Eu
Apple-News-Services-Host
X-WA-Info
ServedBy
Apple-News-Services-Request-Url
X-Air-Source
X-Air-Trace-Id
X-Air-Hostname
X-Instance-Name
X-GeoIP
Wxu-Next-Commit
X-App
X-LB-NoCache
C-Via
X-NCache
Wxu-Next-Hostname
X-Op-Id-All
Origin-CC
Origin-EX
Pics-Label
X-Nitro-Cache
Ssr
X-Akamai-Device-Characteristics
Wxu-Next-Region
X-Cs
X-Platform-Processor
X-Platform-Cluster
Cache-Host
Server-Info
X-Refresh
X-Platform-Router
Memory
X-Cache-Status-Check
Server-ID
X-Cache-Enabled
X-Amz-Meta-Cb-Modifiedtime
X-Microcachable
Time
X-Site-Version
X-Locale
X-Tx-Id
X-HA-Backend
X-Origin-Expires
XM
X-TimeS
PFcat
NGX
X-VarnishDD-TTL
X-HN
AMP-Access-Control-Allow-Source-Origin
X-VHOST
Resin-Trace
Hostname
X-ZONE
X-CACHE-GROUP
GeoIP-Latitude
X-API-Version
X-DC
X-Tb-Optimization-Total-Bytes-Saved
Srvid
Locid
X-FL-EDGE
X-Via-SSL
Origin-Agent-Cluster
Edge-Copy-Time
X-FL-QIT-DEBUG
X-Dc
A
X-Via-CDN
X-Via-Edge
Cf-Device-Type
X-Ad-Defer-Variation
X-Correlation-ID
X-Wp-Cf-Super-Cache-Active
X-Upstream-Ct
X-Upstream-Ht
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-Webkit-Csp-Report-Only
X-ATG-Version
X-Vgn-Hpd-Reason
X-Fpc
X-Zone
YJS-ID
X-FireWall-Port
Cache-Key
X-Cache-ASPX
X-Internal-Host
X-Contensis-Viewer-Groups
Sid
Cdn-Requestid
X-Moov-T
X-Moov-Xdn-Version
Uri
X-Varnish-Authentication
X-Pod-Name
X-DataCenter
X-Github-Request-Id
X-Micro-Cache
X-Cached-By
User-Agent
X-WP-CF-Super-Cache-Active
X-LiteSpeed-Cache-Control
X-Provided-By
X-TraceId
X-HS-Content-Campaign-Id
True-Client-Ip
X-Planisys-CDN-TTL
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
State
X-Info
X-B3-Spanid
X-URL
X-Fastly-Cache
X-RN-RSRV
X-SIPLIST1
X-B3-Parentspanid
X-Platform-Server
IsBot
Location
X-Buckets
X-Nitro-Rev
X-Release
X-Nitro-Cache-From
X-Cache-Remote
GeoIp-Country-Code
X-Rocket-Build-Number
GeoIP-Country-Code
X-AB
X-NGINX-Cache
X-Sigma
X-Sigma-Backend
SID
X-Api-Version
X-LiteSpeed-Tag
X-MSEdge-Flight
X-CSRF-TOKEN
X-CS
Cdn
X-MSEdge-Features
Cache
X-Backend-Instance
X-VC
X-Geo-Region
X-Gamma-Serve
X-Generated-In
XServer
True-Client-IP
X-Datacenter
X-Accel-Version
X-VCache
Srv
X-Vgn-Hpd-Cached
Cache-Tv-Group
X-GeoIP-City
Lb
X-Vgn-Hpd-Ssi
NtCoent-Length
X-Vgn-Hpd-Variations-Key
CF-Ctrl
X-Geo
X-HS-Status
X-Rebelmouse-Surrogate-Control
Path
X-Scheme
X-FTR-Request-ID
X-Rebelmouse-Cache-Control
X-TRACE-ID
CountryCode
X-Is-Desktop
X-Browser-Name
Fastly-Drupal-Html
X-Is-Mobile
X-Tcp-Rtt
X-FPC
HostName
X-Is-Tablet
X-Is-Supported-Browser
Kp-EeAlive
X-HostName
X-NewRelic-App-Data
Tcn
X-GoCache-CacheStatus
X-Mobile-URL
Epwk-X-Cache
X-Location
X-Hyper-Cache
Ohc-File-Size
X-SRV
X-Frame-Option
X-TX-ID
X-UA
Serverid
Cf-Ipcountry
X-APP-VERSION
X-AK-Request-ID
CacheControlHeader
Cdncip
X-Developers
X-Aicache-OS
X-Amz-Meta-Opti
X-Esi
X-Air-Pt
Cdnsip
X-Men
X-Service
X-Region-Sid
On-Server
X-Guploader-Uploadid
X-Acquia-Purge-Cdn-Unconfigured
X-Traceid
X-Proxy-CacheRZ
X-Branch-Name
X-Pad
Click-Count-Error
X-B3-Trace-ID
V-Age
X-Cache-FS-Status
X-Webstats-RespID
RNT-Machine
Tube-Get-Contents
X-CDN-Cache-Status
X-Wp-Cf-Super-Cache
Click-Count-Action-Start
Tube-Got-Eval
RNT-Time
XkeyRZ
Mime-Version
Tube-Return
Tube-Got-Results
Proxy-Connection
X-Cache-Tags
X-Req
X-LB-ID
X-SB
X-EC-Lua
X-Minions-Version
X-Cache-Ttl
X-Via-Poph
X-V-Cache
WebServer
X-Wp-Cf-Super-Cache-Cache-Control
X-Via-Popn
X-Via-Popv
X-Wp-Cf-Super-Cache-Cookies-Bypass
Env
ENV
X-Servedbyhost
X-Vc
Yak-Timeinfo
Ohc-Cache-HIT
X-Cdn-Cache-Status
WZWS-RAY
X-Nc
WWW-Authenticate
X-Wa
CDN
X-CACHE-KEY
X-VCL-Version
CF-Cached-On
Geoip-Latitude
X-User
X-Cdn-Forward
LB
X-NWS-UUID-VERIFY
Ngx
X-Edge-Pop
X-Fastly-Country-Code
X-Akamai-Pragma-Client-IP
X-Check-Cacheable
X-Lb-Cache
X-Ckpd-Fst-Backend
X-Edge-Server
Cdn-Request-Time
Content-Script-Type
Server-Id
X-Ha-Backend
Content-Style-Type
Cdn-Host
X-TH-Server
X-Processor
X-Vercel-Id
X-Vercel-Cache
X-TT-LOGID
X-Acquia-Purge-Tags
X-Acquia-Application-Trace
X-Via-Ucdn
X-Acquia-Site
X-Acquia-Application-UUID
X-Edge-POP
X-Snapshot-Date
X-Lb-Nocache
X-FTR-Balancer
PICS-Label
X-CUA
X-Render-Time
X-FTR-Cache-Status
X-FTR-Expires
X-IN-APIGATEWAY
X-Country-Code-Real
Req-ID
X-NMSegId
X-Litespeed-Cache-Control
X-APP
M-TraceId
X-FTR-Backend-Server
X-FTR-Backend
X-IN-APIGATEWAYSSL
X-WP-CF-Super-Cache-Cookies-Bypass
X-MiniProfiler-Ids
HIT
X-Dw-Trace-Id
X-Origin-Cache-Key
Yjs-Id
X-Miniprofiler-Ids
X-Ad-Load-Variation
Cneonction
Sm-Log-Id
X-Fastly-Backend-Reqs
X-Iauth-Set-Uid
CACHE-MISS-TO-ORIGIN
X-Cache-Date
X-Udemy-Cache-App-Namespace
X-Service-Response-Time
X-Serial
X-Response-By
Edge-Cache
Inserted-Into-Cache-At
Log-Origin
X-M-Log
X-M-Reqid
X-ElasticPress-Query
X-Cached-Since
X-Fastly-Cache-Hits
Vha6-Origin
X-RAMCache