Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
X-Powered-By
Pragma
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
Alt-Svc
P3P
X-Cache-Hits
X-UA-Compatible
X-Xss-Protection
X-Served-By
CF-Ray
X-Download-Options
X-Request-Id
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Cache-Status
X-Generator
X-Check
X-Cacheable
X-DNS-Prefetch-Control
X-FRAME-OPTIONS
X-Envoy-Upstream-Service-Time
Timing-Allow-Origin
X-Iinfo
X-Drupal-Dynamic-Cache
Feature-Policy
X-Content-Security-Policy
X-Dns-Prefetch-Control
Server-Timing
X-XSS-PROTECTION
Content-Encoding
Access-Control-Expose-Headers
Upgrade
X-CDN
Status
X-AspNetMvc-Version
Access-Control-Max-Age
X-Amz-Request-Id
X-Request-ID
X-Amz-Id-2
Request-Context
X-Via
X-Turbo-Charged-By
X-Backend
X-Cache-Group
X-AH-Environment
X-Robots-Tag
Cf-Edge-Cache
Keep-Alive
Host-Header
X-Hacker
X-Proxy-Cache
X-UA-Device
X-Vhost
X-Server
X-Rq
X-Server-Powered-By
Allow
X-Age
X-Ws-Request-Id
X-Varnish-Cache
X-Dispatcher
EagleId
X-Amz-Version-Id
P3p
Nel
X-LiteSpeed-Cache
Grace
Cf-Apo-Via
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
Cf-Railgun
X-Page-Speed
X-Device
EagleEye-TraceId
X-OneAgent-JS-Injection
X-Aws-Lambda-Call-Status
X-Swift-CacheTime
X-Swift-SaveTime
X-Pingback
Ali-Swift-Global-Savetime
X-Host
X-Node
Accept-CH
X-WebKit-CSP
X-CST
X-Backend-Server
X-Cache-Lookup
Surrogate-Control
X-Server-Id
X-Readtime
X-Nginx-Cache-Status
Permissions-Policy
Accept-CH-Lifetime
X-Nginx-Upstream-Cache-Status
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Akam-SW-Version
Request-Id
X-Application-Context
X-Content-Security-Policy-Report-Only
X-Cloud-Trace-Context
X-Ua-Compatible
X-Response-Time
X-HW
X-Trace
X-Edge
Xkey
X-Ruxit-JS-Agent
Content-Location
X-Clacks-Overhead
X-Mod-Pagespeed
Rating
X-Midtier
X-Amz-Server-Side-Encryption
X-ESI
X-ECACHE
X-Url
X-Mcache
Accept-Ch
X-Country
X-Upstream
Cache-Tag
X-Vcap-Request-Id
X-MS-InvokeApp
X-D2id
X-Rack-Cache
Verso
X-Powered-By-Plesk
X-Cdn-Fetch
X-Kinja-Build
X-Kinja
X-Kinja-Revision
X-Kinja-Server
X-Use-Magma
X-Element-Page-Cache
X-GoogleNews-Bot
X-Exp-Id
X-Exp-Variant
Edge-Control
Accept-Ch-Lifetime
X-WebKit-CSP-Report-Only
X-Vname
X-PC
X-TtlSet
RTSS
X-Cache-TTL
X-Ac
Service-Worker-Allowed
Fastly-Restarts
Origin-Trial
X-VARITI-CCR
X-Country-Code
X-Navigation-Version
X-Abt-Application-Version
X-Goog-Hash
X-Ruxit-Js-Agent
X-Varnish-TTL
X-Litespeed-Cache
X-Cached
X-Aspnetmvc-Version
X-GitHub-Request-Id
X-Browser-Type
X-Amz-Rid
X-Oneagent-Js-Injection
X-Webkit-CSP
Pagespeed
X-Sol
X-Middleton-Display
Display
Cross-Origin-Opener-Policy
X-Kinja-CCPA
X-Dw-Request-Base-Id
X-Server-Name
X-SharePointHealthScore
SPRequestGuid
X-Amzn-Trace-Id
X-NWS-LOG-UUID
X-Powered-CMS
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-Mg-S
SPRequestDuration
SPIisLatency
X-Server-Lifecycle-Phase
X-Instrumentation
X-Kraken-Loop-Name
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
AR-ATIME
AR-PoweredBy
AR-Request-ID
AR-SID
Response
X-Middleton-Response
X-Cache-Key
X-Content-Type
Arr-Disable-Session-Affinity
X-Times
X-Ttl
X-Pinterest-Rid
Pinterest-Generated-By
Pinterest-Version
X-B3-TraceId
X-FastCGI-Cache
X-Client-IP
X-Version
X-HP-Trace-Id
X-HP-Webp
X-Jurisdiction
X-Server-ID
X-Cnection
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Fastly-Request-ID
AR-CACHE
Cache-Tags
X-NF-Request-ID
X-Accel-Expires
X-T
X-B3-Traceid
Nginx-Cache
X-Ser
Cache-Status
Edge-Cache-Tag
Front-End-Https
X-MSEdge-Ref
X-Hits
X-Px
Public-Key-Pins
X-RateLimit-Remaining
X-Recruiting
Payment
Mrf-Cache-Status
MRF-Tech
X-B3-TraceId-Primal
X-Request-Processing-Time
X-Request-Received
X-LLID
X-Frontend
Server-Node
X-Ua-Browser
X-TTL
S
X-Shield-Request-Id
X-RateLimit-Limit
X-DIS-Request-ID
X-GUploader-UploadID
X-Goog-Metageneration
Content-MD5
X-PressLabs-Stats
X-Amzn-RequestId
X-Amz-Apigw-Id
MicrosoftSharePointTeamServices
TP-Cache
Access-Control-Request-Method
X-Content-Digest
X-HS-Cache-Config
X-Protected-By
X-HS-Content-Id
X-HS-Combine-CSS
X-HS-Hub-Id
X-Erf-Stays-Pdp-Viaduct-Migration-Web
Realpath
X-Distributor
X-Microsite
X-Request-Handler-Origin-Region
X-Daa-Tunnel
Fastcgi-Cache
X-LB-Cache
Access-Control-Allow-Method
X-FB-Debug
X-Cluster-Name
X-Page-Id
X-Rid
X-Ratelimit-Remaining
Accept-Charset
X-Forwarded-For
X-Fastcgi-Cache
TP-L2-Cache
X-Geo-Country
X-Ezoic-Cdn
X-Aspnet-Version
X-Hostname
X-Ua-Device
X-B3-Sampled
X-Seen-By
X-Goog-Storage-Class
X-Goog-Generation
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
Cross-Origin-Resource-Policy
Cleartype
Count-Hit
X-Correlation-Id
X-Ratelimit-Limit
TCN
Referer-Policy
X-Mobile
DC
X-Varnish-Backend
X-Content-Options
X-App-Server
X-Logged-In
X-Newrelic-App-Data
X-Hosted-By
X-Kinsta-Cache
X-Origin-Cache
X-Edge-Location-Klb
X-Debug-Info
X-Contextid
X-Envoy-Decorator-Operation
X-IPS-LoggedIn
X-Is-Crawler
X-Providence-Cookie
X-Request-Guid
X-Grace
X-Git-Hash
X-Amz-Replication-Status
X-Aspnet-Duration-Ms
X-Flags
X-Route-Name
X-Fb-Rlafr
X-Varnish-Grace
Surrogate-Key
X-Revision
Frame-Options
X-TT
X-App-Environment
X-Amz-Meta-S3cmd-Attrs
X-Azure-Ref
X-TEC-API-ORIGIN
Retry-After
X-TEC-API-ROOT
X-Forwarded-Proto
X-TEC-API-VERSION
X-Id
X-F-Cache
X-Webkit-CSP-Report-Only
X-Origin-Server
X-Wix-Request-Id
Section-Io-Cache
X-Magnolia-Registration
X-Whom
Healthy
Alternate-Protocol
Charset
X-RateLimit-Reset
X-COUNTRY
X-Akamai-Edgescape
WPO-Cache-Status
X-Backend-Name
Viewport
WPO-Cache-Message
X-Proxy-Cache-Info
MS-Author-Via
X-App-Version
X-Webkit-Csp
X-B
X-Xrds-Location
Paypal-Debug-Id
X-XRDS-Location
X-Www-Served-By
X-Az
X-Activity-Id
X-AppVersion
X-Language
SRV
Amp-Access-Control-Allow-Source-Origin
X-DataDome
Host
ServerID
Filterid
X-ARC
VIX-Pulpo-Upstream-Status
X-Response-Served-From
X-Original-Request-Id
X-Http-Reason
X-Instance
X-Cache-Rule
VIX-Pulpo-Node
SD-X-WS
X-Varnish-Server
X-UUID
X-Varnish-Age
X-Datadog-Parent-Id
X-Datadog-Trace-Id
X-Rule
X-Datadog-Sampling-Priority
X-User-Agent
X-N
X-Edge-Location
X-Client-Ip
Protected
Front
X-Cache-Grace
Akamai-GRN
Country
X-Akamai-Request-ID2
X-Unique-Id
From-Origin
X-Region
X-Status
X-Page-View
X-FW-Type
X-FW-Static
X-FW-Hash
X-FW-Server
X-FW-Version
X-FW-Dynamic
X-L-Path
X-Jobs
X-Environment-Context
X-FW-Serve
Server-Name
X-EdgeConnect-Cache-Status
X-Adobe-Content
X-Tumblr-Pixel-0
X-Adobe-Loc
X-Is-Bot
X-Framework
X-Cache-Time
Fastly-SWR
X-Rendered-As
Fastly-SIE
X-Tumblr-Pixel-1
X-Tumblr-Pixel
X-Tumblr-User
X-Type
X-Load-Cache
X-Cacheable-TTL
X-Rocket-Nginx-Serving-Static
X-Time
X-Kong-Proxy-Latency
X-ProcessESI
X-RemovedCookies
X-Trace-Id
X-G
X-Kong-Upstream-Latency
Access-Control-Request-Headers
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Vcache
X-Proxy
X-Datadog-Sampled
X-Amzn-Remapped-Content-Length
X-Cache-Control
X-Mg-Request-UUID
X-Debug-IsConnected
X-B-Cache
X-URL
X-Debug-IsPreview
X-Signature
Content-Disposition
X-ECache
X-CDN-Forward
X-Tec-Api-Origin
X-Tec-Api-Root
X-Tec-Api-Version
X-Nf-Request-Id
Refresh
X-Erf-Web-Scheduler
Backend
X-Cache-Age
X-Drupal-Cache-Tags
X-DynaTrace
Accept-Language
Xet-Cookie
Countrycode
X-WP-CF-Super-Cache
X-Source
X-WP-CF-Super-Cache-Cache-Control
X-Generated-By
CF-IPCountry
X-HTML-Minification-Powered-By
X-DynaTrace-JS-Agent
X-Httpd
X-Servername
X-Nginx-Cache
Webserver
Url
X-Tt-Trace-Tag
X-Tt-Trace-Host
Version
X-Mode
Xserver
X-Template
X-Device-Type
X-NYM-Debug-Backend
X-Storage
X-Content-Powered-By
GEO-INFO
X-Content-Age
Onion-Location
Locale
Meta-Geo
X-Cache-Operation
Load-Balancing
X-Director
X-GeoCode
OT-Force-Account-Verify
X-Cache-Action
X-GeoCountry
X-JoinUs
S-Rt
Filters
X-UPSTREAM-Address
X-Rewrite-Enabled
X-LAGOON
X-Urbn-Context-Path
X-XRDS-LOCATION
X-Rn-Rsrv
X-Varnish-Cache-Hits
X-SayCDN-TTL
X-ServerID
X-Say-TTL
X-Say-Cacheable
X-SaId
X-Urbn-Site-Id
X-Container-Uri
X-MCACHE
Azure-SlotName
Azure-Version
Azure-SiteName
Azure-RegionName
Azure-InstanceId
X-Proto
X-Cluster-Node
X-Varnish-Hostname
X-Forwarded-Host
X-Git-Commit
X-Generation-Time
X-Served-From
X-Tb
Web-Mar-Node
X-Soup
X-Ms-Version
X-Sql-Count
X-PHP-Host
X-Adobe-Source
X-RM-Cache-TTL
X-Sql-Duration-Ms
X-Ms-Request-Id
X-Lambda-Id
X-Labrador-Cache-Channel
X-Detected-As
X-VCT
X-Tt-Logid
X-Cache-Server
X-VC-Cache
X-Skip-Cache
X-Tumblr-Pixel-3
X-Loop
X-Extlb
Property-Id
X-Tumblr-Pixel-2
X-Zipkin-Id
X-RCS-CacheZone
X-R9-Blue-Green-Version
X-Proxied
Mn-Server-Ip
Node
X-FB-TRIP-ID
TWC-Device-Class
X-Logging-Id
X-Format
Webcakes-App-Name
X-Debug
Webcakes-Region
Webcakes-App-Version
Uber-Trace-Id
TWC-Privacy
X-Routing-Service
TWC-Connection-Speed
TWC-GeoIP-Country
X-Tncms
TWC-Locale-Group
X-Origin-Hint
TWC-GeoIP-LatLong
DB-Nickname
Selected-Fe
X-Proxy-Build
X-LSADC-Cache
X-Fetched-On
X-CCDN-CacheTTL
X-Hcs-Proxy-Type
X-Timing-Wait
X-Zen-Fury
X-Ua
X-CCDN-Origin-Time
X-Uri
Fastcgi-Useragent
X-Cache-Hit
X-Endurance-Cache-Level
Cross-Origin-Window-Policy
X-Sucuri-Cache
X-Upgrade-Enabled
X-Sucuri-ID
Source
X-Redis-Cache
X-Drupal-Cache-Contexts
CDN-RequestId
X-Oracle-Dms-Ecid
X-Oracle-Dms-Rid
X-B3-SpanId
X-Srv
X-Ratelimit-Reset
Section-Io-Origin-Status
Section-Io-Id
X-Origin-Date
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
X-MP-GENERATED-AT
X-TimeS
X-CACHE-AGE
X-Newrelic-Synthetics
Liferay-Portal
X-ID
Fastly-Drupal-HTML
X-S
X-Pass-Why
X-Varnish-Hits
X-Cache-Expired-At
X-Origin-CC
X-Origin-TTL
X-NGENIX-Cache
Upgrade-Insecure-Requests
X-Akamai-Transformed
X-Real-IP
X-Handled-By
X-Cache-TTL-Remaining
X-UA-Device-Type
NGB
X-Fastly-Request-Id
X-GEO
X-Node-Name
X-Hl-Ver
X-Varnish-Ttl
X-Via-JSL
X-Pubstack
CDN-CachedAt
X-Reqid
X-Restarts
X-Xfnlog-Site
X-Optimistic-Header
X-Cms-Context
Apigw-Requestid
X-Cache-Type
CDN-Uid
CDN-RequestPullSuccess
CDN-PullZone
CDN-EdgeStorageId
Content-Secure-Policy
CDN-RequestCountryCode
CDN-Cache
CDN-RequestPullCode
X-Server-W
MS-CV
ServedBy
Ms-Operation-Id
X-FTR-Request-ID
X-CSRF-Token
X-RTag
X-ProxyCache-Status
X-Tx-Id
X-Cache-Host
X-Parent-Response-Time
X-ProxyCache-Key
WP-Super-Cache
X-No-Session
X-BYPASS-REASON
MD5-Digest
Meta-Geo-Continent
Ha-Gx-Prefs
HA-Ipaddr
Magicmarker
L
X-Request-Host
L5d-Success-Class
Lang
Redirect-Candidate
Ngx.Var.Host
Odigeo-Trace-Id
X-Nyt-Route
N-Cache
X-Orig-Expires
X-Gdpr
Origin-Agent-Cluster
Gh-Request-Id
X-Origin-Time
Candidate-Md5Url
X-SD-PageType
X-ScT
X-S-Cookie
X-IPLB-Request-ID
X-IPLB-Instance
X-Slack-Shared-Secret-Outcome
X-Slack-Backend
X-Shop-Environment
X-Rojux
X-SRCache-Key
DCR-Processing-Time-Ms
Fastly-SSL
X-Vdms-Path
DCR-Decision-By
X-Forwarded-Path
BehaviorPad-Version
X-Tenant
Canary
Gannett-Cam-Experience-Id
X-External-Request-Id
X-Debug-Cache-Fetch
X-D
X-Application
X-Csrf-Jwt
X-Vdms-Version
X-Aed
X-A-Dgt
X-A-Wwc
X-Destination
X-Debug-Cache-Store
X-B-Cookie
X-Bc-Bl
X-Conf
X-Viewer-Country
X-CF-Lambda-Fn
X-CGP
X-CacheTTL
X-Cache-NE
X-BCube-Filmed-By
X-We-Are-Hiring
X-Bl-Debug
X-Vtex-Remote-Cache
X-Worker
X-Developer
Server-Host
Sslversion
Surrogated-Key
X-Ec-Fail
Rendered-Blocks
X-Ec-GeoHdr
X-Fastly-Backend
X-CF-Lambda-Version
X-Eu-Site
X-Epic-Correlation-Id
T-Server
True-Client-Country-4JS
X-Dispatcher-Number
X-A-Ccd
X-A-Dam
X-A-Dcw
X-Ec-Custom-Error
Xc-Version
Vix-Hermes-Req-Id
W
Web-Mar-Region
X-A
X-FC-Vary-Parameters
X-App
X-VWS-Id
X-LJ-Flow-ID
X-Vcl-Version
X-Cluster
X-AWS-Id
X-TIME
X-Level-Front-Cache
X-Request-Time
Thinkindot-Control
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-Loc
VNS-Cache
X-RateLimit-Limit-Second
X-Qloud-Router
X-Pool
X-RateLimit-Remaining-Second
We-Hiring
TDXMobile
X-Refresh
VNS-Age
Req-Svc-Chain
X-Sn-Servicetimems
X-Shopify-Stage
Origin
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
Mail-Subject
X-Storefront-Renderer-Rendered
X-Irp-Debug
X-ShopId
X-Server-IP
X-GeoIP-Region-Code
X-Policy
Release
X-ShardId
Producers
X-S-Maxage
X-DPWN-IS-SECURE
X-Node-Id
X-Clientip
X-CMSURLCustom
X-NodeID
X-Cdn-Origin
X-Old-Content-Length
X-Cdn-Diag
X-Nitro-Cache
X-Core-Mission
X-DefElseHash
X-DefHash
X-Mvc-Supplant-Cachable
X-Date
X-Core-Value
X-Nananana
X-Correlation-ID
X-Cache-Info
X-ApacheServer
X-Platform
X-PERF
X-Alternate-Cache-Key
X-SVT-ORM-RULES
X-Accel-Expires-Debug
X-Mid
X-Auto-Login
X-PAYTM-SRV-ID
X-Cache-Bucket
X-Cache-Debug
X-Org
X-Bip
X-BBC-Edge-Cache-Status
X-Mly-Id
X-Accel-Buffering
Platform
X-Var-Ttl
Cf-Device-Type
X-Variation
Cache-Provider
X-Varnish-CookieINHashed-On
X-Varnish-CookieHashed-On
Cmsid
Cmstype
X-Thinkindot-L3
X-Thanos
X-Hash
Datacenter
CPC-Age
CPC-Cache
X-Varnish-Remaining-TTL
AKAMAI
X-Wix-Viewer-Type
X-Wikidot-Static-Cache
X-Generated-On
X-Geo-Header
X-GeoIP-Country-Code
X-App-Name
X-Wikidot-Backend
X-VServer
X-Varnishpool
Adler-Geo
X-VG-TLSProxy
X-VG-WebCache
X-Vmg-Version
Environment
X-Up
Fastly-Backend-Name
Expect-Staple
Fastly-GeoIP-CountryCode
X-Human
X-Test
X-SVT-ORM-VERSION
Is-Eu
Host-ID
X-INCAP-ABP
X-Proxy-Cache-Status
User-Cache-Control
Cache-Name
X-Gzip
X-Origin-Response-Time
NM-Fastcgi-Cache
X-Origin
X-Forwarded-Site
X-Owner
X-Dispatcher-Server
Apple-News-Services-Request-Url
Apple-News-Services-Host
Apple-News-Services-Handled
X-Hnp-Log
X-Block-Status
Machine
X-GeoIP
X-Gen-Mode
X-WADP-Cache
X-Cdn-Srv
X-Fmm-Version
X-WA-Info
X-Cache-Status-Check
X-Nginx-Cache-Key
X-Cache-Id
X-Datadome
X-Mvc-Supplant-OutputCached
X-Clara-WADP
Apple-News-Services-Parsed-Url
CDCHOST
X-Akamai-Device-Characteristics
X-AIR-PT
Server-Hostname
X-Esi-Check
Server-Ext
DSUID
X-Micro-Cache
X-Device-Os
CloudFront-Viewer-Country
Esi-Enabled
Sever-Int
X-From
Country-Code
X-B3-Spanid
X-AB
Ssr
Server-Info
X-Section
X-LB-NoCache
X-NCache
Memcached
X-JWT-State
Wxu-Next-Commit
X-Instance-Name
Wxu-Next-Region
X-Op-Id-All
Wxu-Next-Hostname
X-Has-Esi
Pics-Label
X-Is-Gdpr
NGX
X-Amz-Meta-Cb-Modifiedtime
X-Cache-Enabled
C-Via
X-Access
X-API-Version
AMP-Access-Control-Allow-Source-Origin
Server-ID
X-Dc
X-Vgn-Hpd-Reason
Hostname
X-Via-Fastly
X-CACHE-GROUP
X-Geo-Region
Cache-Hits
X-HA-Backend
X-Scale
Origin-CC
Memory
Origin-EX
Time
X-Accel-Version
X-Wp-Cf-Super-Cache-Active
X-ZONE
X-PHP-Backend
X-TraceId
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-TIM-N
X-Buckets
X-Presslabs-Stats
X-Platform-Processor
X-SIPLIST1
X-Platform-Router
IsBot
Cdn-Requestid
X-Platform-Cluster
Location
X-Is-Desktop
X-Air-Hostname
X-Air-Source
X-Air-Trace-Id
X-Browser-Name
X-Is-Mobile
X-Tcp-Rtt
X-Is-Tablet
X-Is-Supported-Browser
X-Tb-Optimization-Total-Bytes-Saved
X-Internal-Host
Sid
CF-Ctrl
YJS-ID
X-B3-Parentspanid
Resin-Trace
X-Fpc
X-Backend-Instance
X-Azure-Ref-OriginShield
X-Cs
X-WP-CF-Super-Cache-Active
X-Zone
X-Cached-By
GeoIP-Latitude
X-TA-CDN-Provider
X-DC
X-Origin-Expires
X-DataCenter
Cache-Host
X-Microcachable
XM
X-Web-Node
X-Info
X-Hyper-Cache
X-NewRelic-App-Data
Epwk-X-Cache
Uri
X-Frame-Option
X-LiteSpeed-Cache-Control
X-Pod-Name
X-VarnishDD-TTL
X-Site-Version
X-Nitro-Rev
True-Client-Ip
X-HN
X-NGINX-Cache
X-Locale
X-Nitro-Cache-From
PFcat
X-Esi
X-Service
X-Webstats-RespID
GeoIp-Country-Code
GeoIP-Country-Code
User-Agent
X-Ad-Defer-Variation
X-VC
X-VCache
X-Origin-Cache-Key
X-CS
Srvid
X-Via-CDN
X-Via-Edge
X-Via-SSL
X-FL-EDGE
A
Locid
Edge-Copy-Time
Cdn
XServer
X-FL-QIT-DEBUG
X-CSRF-TOKEN
LB
X-FTR-Balancer
X-FTR-Expires
X-FTR-Cache-Status
X-Datacenter
X-Country-Code-Real
True-Client-IP
X-FTR-Backend-Server
X-FTR-Backend
X-Github-Request-Id
SID
X-Geo
X-Pad
NtCoent-Length
X-ATG-Version
X-Cache-ASPX
X-FireWall-Port
X-SRV
X-Varnish-Authentication
X-Contensis-Viewer-Groups
X-TRACE-ID
X-Moov-Xdn-Version
X-Edge-Server
Cdn-Host
X-Moov-T
X-Webkit-Csp-Report-Only
Cdn-Request-Time
X-NMSegId
X-Vercel-Cache
X-Vercel-Id
Cache-Key
X-FPC
WZWS-RAY
X-MSEdge-Features
Fastly-Drupal-Html
Req-ID
M-TraceId
X-MSEdge-Flight
X-HostName
Tcn
WebServer
X-LiteSpeed-Tag
Cluster
Path
X-Ad-Load-Variation
CountryCode
X-Api-Version
X-APP-VERSION
Cf-Ipcountry
X-Cdn-Request-ID
X-Air-Pt
Content-Script-Type
X-Amz-Meta-Opti
X-M-Reqid
Pramga
X-Request-Start
X-Scope-Id
Cdncip
X-M-Log
X-AK-Request-ID
Cdnsip
Content-Style-Type
X-Qnm-Cache
X-Varnish-Beresp-Status
X-Shield-Cache-Expires
X-NWS-UUID-VERIFY
X-Wp-Cf-Super-Cache
X-HS-Content-Campaign-Id
X-Wp-Cf-Super-Cache-Cache-Control
X-Branch-Name
X-Upstream-Ht
X-Platform-Server
X-Upstream-Ct
X-Planisys-CDN-TTL
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
State
X-Cache-Ttl
X-Request-URI
X-Wp-Cf-Super-Cache-Cookies-Bypass
Edge-Cache
X-Proxy-CacheRZ
X-Release
X-Cache-Date
XkeyRZ
X-WP-CF-Super-Cache-Cookies-Bypass
Yak-Timeinfo
X-Fastly-Cache
X-Vgn-Hpd-Variations-Key
X-Vgn-Hpd-Ssi
X-Vgn-Hpd-Cached
X-CACHE-KEY
CDN
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
HostName
X-Render-Time
X-Generated-In
X-TH-Server
X-Akamai-Pragma-Client-IP
X-Sigma
X-Rocket-Build-Number
X-Tim-N
Srv
Ohc-File-Size
X-Sigma-Backend
X-Cdn-Forward
Geoip-Latitude
Lb
X-Cache-Remote
Proxy-Connection
X-HS-Status
X-Traceid
X-Lb-Cache
Cache-Tv-Group
X-Via-Popn
X-Nc
X-Via-Popv
X-LB-ID
X-Cache-FS-Status
X-Via-Poph
Cache
Tube-Got-Eval
X-SB
X-Servedbyhost
X-Ha-Backend
X-V-Cache
X-B3-Trace-ID
X-Wa
Server-Id
X-User
Click-Count-Action-Start
Click-Count-Error
Tube-Get-Contents
Tube-Got-Results
Tube-Return
X-Dw-Trace-Id
CF-Cached-On
X-Aicache-OS
X-Acquia-Purge-Cdn-Unconfigured
X-Req
X-TT-LOGID
V-Age
X-CUA
Ohc-Cache-HIT
PICS-Label
On-Server
X-Men
X-Acquia-Purge-Tags
X-Acquia-Site
X-Gamma-Serve
X-Vary
MIME-Version
X-Lb-Nocache
X-Scheme
X-Fastly-Backend-Reqs
Wpo-Cache-Message
X-Acquia-Application-Trace
X-EC-Lua
X-GoCache-CacheStatus
X-Acquia-Application-UUID
X-GeoIP-City
Wpo-Cache-Status
X-Via-Ucdn
X-Iplb-Request-Id
X-VCL-Version
Yjs-Id
X-Provided-By
X-Iplb-Instance
X-UA
X-RAMCache
Log-Origin
Vha6-Origin
X-Litespeed-Cache-Control
Ngx-Var-Key
X-Miniprofiler-Ids
X-ElasticPress-Query
X-Cached-Since
X-Vc
CACHE-MISS-TO-ORIGIN
Ngx
X-CF-Cache-Header-Cache-Control
X-CF-Cache-Header-Vary
Inserted-Into-Cache-At
X-Fastly-Cache-Hits
Cneonction
X-Udemy-Cache-App-Namespace
X-Snapshot-Date
X-Cdn-Cache-Status