Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Accept-Ranges
Expect-CT
X-XSS-Protection
CF-RAY
Pragma
X-Powered-By
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Access-Control-Allow-Origin
Referrer-Policy
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
X-UA-Compatible
P3P
X-Xss-Protection
X-Served-By
X-Download-Options
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Request-ID
X-Adblock-Key
Access-Control-Allow-Credentials
CF-Ray
X-Permitted-Cross-Domain-Policies
X-AspNet-Version
X-Request-Id
Alt-Svc
Content-Security-Policy-Report-Only
X-Runtime
X-DNS-Prefetch-Control
X-Drupal-Cache
X-Check
X-Cache-Status
X-Generator
X-Cacheable
P3p
Timing-Allow-Origin
X-FRAME-OPTIONS
X-Iinfo
X-Envoy-Upstream-Service-Time
X-Content-Security-Policy
X-Drupal-Dynamic-Cache
Feature-Policy
Content-Encoding
Upgrade
Access-Control-Expose-Headers
Status
X-AspNetMvc-Version
X-CDN
Access-Control-Max-Age
X-Via
Server-Timing
X-Robots-Tag
X-UA-Device
Request-Context
X-Turbo-Charged-By
X-Cache-Group
X-Amz-Request-Id
EagleId
X-Amz-Id-2
X-Backend
Keep-Alive
X-AH-Environment
X-Proxy-Cache
X-Ws-Request-Id
X-Server
X-Age
Host-Header
X-Hacker
X-Ua-Compatible
Cf-Edge-Cache
X-Vhost
X-Server-Powered-By
X-Rq
Allow
X-Varnish-Cache
X-Dispatcher
Grace
X-Amz-Version-Id
X-LiteSpeed-Cache
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-OneAgent-JS-Injection
X-WebKit-CSP
Accept-CH
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Device
Cf-Apo-Via
X-Page-Speed
Cf-Railgun
X-Aws-Lambda-Call-Status
X-Server-Id
X-Host
X-Node
X-Pingback
X-Cache-Spec
X-Nginx-Cache-Status
X-Akam-SW-Version
Surrogate-Control
X-Dns-Prefetch-Control
EagleEye-TraceId
X-Backend-Server
Request-Id
X-Cache-Lookup
X-Readtime
X-Ruxit-JS-Agent
X-HW
X-Cloud-Trace-Context
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Content-Security-Policy-Report-Only
X-Trace
X-Application-Context
X-Response-Time
Accept-CH-Lifetime
Permissions-Policy
X-CST
X-Mod-Pagespeed
X-Nginx-Upstream-Cache-Status
Fastly-Restarts
X-Edge
Accept-Ch-Lifetime
X-WebKit-CSP-Report-Only
Content-Location
X-Country
X-Content-Type
X-Mcache
X-ECACHE
Rating
X-Clacks-Overhead
X-MS-InvokeApp
X-Vname
X-TtlSet
X-PC
X-Url
X-Midtier
X-Amz-Server-Side-Encryption
RTSS
X-VARITI-CCR
X-B3-TraceId
Cache-Tag
X-Varnish-TTL
X-Vcap-Request-Id
X-Element-Page-Cache
Verso
X-D2id
Origin-Trial
X-Ac
X-Exp-Variant
X-Cdn-Fetch
X-Kinja
X-Use-Magma
X-Kinja-Server
X-Kinja-Revision
X-Kinja-Build
X-GoogleNews-Bot
X-Exp-Id
X-Rack-Cache
X-Cnection
X-Server-Name
X-Cache-TTL
X-Powered-By-Plesk
Service-Worker-Allowed
Xkey
X-GitHub-Request-Id
X-Navigation-Version
X-Client-IP
X-Abt-Application-Version
X-NWS-LOG-UUID
X-ESI
X-SharePointHealthScore
SPRequestGuid
X-Amz-Rid
Edge-Control
X-Cached
X-Fastcgi-Cache
X-Ttl
X-Px
X-Mg-S
Arr-Disable-Session-Affinity
X-Kraken-Loop-Name
X-Instrumentation
X-Erf-Bev-Bev
X-Server-Lifecycle-Phase
X-Browser-Type
X-Erf-Bev-Bev-Is-Generated
X-Litespeed-Cache
SPIisLatency
SPRequestDuration
X-Upstream
X-Correlation-Id
X-Middleton-Display
X-Sol
Pagespeed
X-Cache-Key
Display
Content-MD5
X-Dw-Request-Base-Id
X-SRCache-Store-Status
X-SRCache-Fetch-Status
Access-Control-Request-Method
X-NF-Request-ID
Edge-Cache-Tag
X-Goog-Hash
X-XRDS-Location
X-Daa-Tunnel
Front-End-Https
X-Country-Code
Public-Key-Pins
X-Version
X-Forwarded-For
X-Powered-CMS
AR-Request-ID
AR-CACHE
AR-SID
AR-PoweredBy
AR-ATIME
X-Id
TCN
X-MSEdge-Ref
X-Recruiting
X-HP-Trace-Id
X-Jurisdiction
X-T
X-HP-Webp
X-Content-Digest
X-RateLimit-Remaining
X-Accel-Expires
Response
X-Middleton-Response
MRF-Tech
Mrf-Cache-Status
X-B3-TraceId-Primal
X-Shield-Request-Id
TP-Cache
X-Ser
TP-L2-Cache
X-Amzn-Trace-Id
Nginx-Cache
X-Fastly-Request-ID
S
X-Hits
X-Request-Processing-Time
X-Request-Received
X-HS-Hub-Id
X-HS-Cache-Config
X-HS-Content-Id
X-HS-Combine-CSS
Server-Node
Cache-Status
X-Distributor
X-Edge-Location-Klb
X-Kinsta-Cache
X-Ratelimit-Limit
Cache-Tags
MicrosoftSharePointTeamServices
X-Grace
Fastcgi-Cache
Alternate-Protocol
Server-Name
X-DataDome
X-Protected-By
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TTL
X-Ezoic-Cdn
X-DIS-Request-ID
X-Origin-Server
X-Ratelimit-Remaining
X-Geo-Country
X-Ratelimit-Reset
X-Ruxit-Js-Agent
X-Ua-Browser
X-LB-Cache
X-Microsite
X-Request-Handler-Origin-Region
X-Frontend
X-Rid
X-Debug-Info
X-Varnish-Backend
Healthy
Cleartype
X-Logged-In
X-Www-Served-By
Cross-Origin-Opener-Policy
Filterid
Payment
X-NGENIX-Cache
X-Forwarded-Proto
X-FB-Debug
X-Git-Hash
X-Page-Id
X-Load-Cache
Charset
X-B3-Sampled
Content-Disposition
X-PressLabs-Stats
X-Webkit-Csp
X-VCache
X-ASPNET-VERSION
X-Origin-Cache
X-Oracle-Dms-Ecid
X-Cluster-Name
X-Oracle-Dms-Rid
X-Kong-Upstream-Latency
DC
X-LLID
X-Kong-Proxy-Latency
X-Hostname
MS-Author-Via
X-Goog-Metageneration
X-GUploader-UploadID
X-Upgrade-Enabled
Retry-After
Accept-Charset
Access-Control-Allow-Method
X-Proxy
X-Az
X-AppVersion
X-Activity-Id
X-F-Cache
Cross-Origin-Resource-Policy
X-Type
X-B-Cache
X-Amz-Replication-Status
X-Signature
X-Contextid
X-Hosted-By
X-Is-Crawler
X-Providence-Cookie
X-Route-Name
X-Request-Guid
Accept-Ch
X-Flags
X-Amz-Meta-S3cmd-Attrs
Viewport
X-Varnish-Server
X-Aspnet-Duration-Ms
Paypal-Debug-Id
X-Revision
X-Whom
X-Wix-Request-Id
X-Seen-By
X-B
X-TT
X-Azure-Ref
X-Fb-Rlafr
X-App-Environment
Amp-Access-Control-Allow-Source-Origin
Surrogate-Key
Referer-Policy
X-DynaTrace
X-FastCGI-Cache
Realpath
X-Source
X-Aspnetmvc-Version
Count-Hit
X-Tt-Trace-Tag
X-Akamai-Edgescape
X-Tt-Trace-Host
X-Mobile
X-App-Server
X-RateLimit-Limit
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Storage-Class
X-ORACLE-DMS-RID
X-ORACLE-DMS-ECID
Host
X-Cache-Control
X-EdgeConnect-Cache-Status
X-HTML-Minification-Powered-By
X-Tumblr-Pixel-1
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Response-Served-From
X-Original-Request-Id
X-N
X-Varnish-Grace
Version
X-Cache-Rule
X-Oneagent-Js-Injection
Refresh
X-Magnolia-Registration
X-Varnish-Age
X-UUID
VIX-Pulpo-Upstream-Status
SD-X-WS
VIX-Pulpo-Node
X-Envoy-Decorator-Operation
X-URL
Ms-Operation-Id
X-Cache-Time
X-RTag
Access-Control-Request-Headers
MS-CV
X-Rule
Section-Io-Cache
X-FW-Dynamic
X-Adobe-Loc
X-FW-Hash
X-Cache-Status-Check
X-Environment-Context
X-FW-Serve
Akamai-GRN
X-Cache-Grace
X-Content-Powered-By
X-FW-Static
Protected
X-L-Path
X-Page-View
X-Adobe-Content
X-FW-Server
X-Status
X-FW-Type
X-Cache-Expired-At
X-FW-Version
NGB
GEO-INFO
X-Http-Reason
X-Framework
X-Cacheable-TTL
X-Jobs
X-ProcessESI
X-RemovedCookies
X-Servername
X-Rendered-As
X-G
X-Device-Type
X-Instance
X-Is-Bot
X-NYM-Debug-Backend
X-Backend-Name
Url
X-Akamai-Request-ID2
X-User-Agent
X-Nginx-Cache
X-Language
X-Debug-IsConnected
X-Debug-IsPreview
X-Template
X-B3-Traceid
X-CDN-Forward
X-Newrelic-App-Data
SRV
X-Drupal-Cache-Contexts
X-Cache-Age
X-Yottaa-Metrics
X-Drupal-Cache-Tags
X-Yottaa-Optimizations
CDN-RequestId
X-Cache-Hit
WPO-Cache-Message
From-Origin
WPO-Cache-Status
X-Tb
X-Trace-Id
Country
X-Pinterest-Rid
Pinterest-Generated-By
X-Region
Pinterest-Version
X-Tt-Logid
Accept-Language
Front
X-Node-Name
X-Real-IP
X-Amz-Apigw-Id
Fastly-Drupal-HTML
X-Amzn-RequestId
Backend
X-VC-Cache
Uber-Trace-Id
X-Content-Options
X-Mode
Fastly-SWR
Content-Secure-Policy
Fastly-SIE
X-DynaTrace-JS-Agent
X-Time
X-Cache-Operation
X-Unique-Id
X-Rewrite-Enabled
X-Generation-Time
X-RN-RSRV
Meta-Geo
X-UPSTREAM-Address
X-Tumblr-Pixel-2
X-COUNTRY
Filters
Webserver
X-Amzn-Remapped-Content-Length
X-Access
X-Section
X-Cache-Server
X-Cache-TTL-Remaining
X-Proxy-Cache-Info
X-Format
Onion-Location
CF-IPCountry
Azure-InstanceId
X-Zen-Fury
Azure-RegionName
Azure-SiteName
Azure-Version
Azure-SlotName
X-Web-Node
X-IPS-LoggedIn
X-Rocket-Nginx-Serving-Static
X-SayCDN-TTL
X-Adobe-Source
X-Sql-Duration-Ms
Apigw-Requestid
X-Sucuri-ID
X-Cache-Action
X-Sucuri-Cache
X-Cache-Host
X-Proxy-Cache-Status
X-Reqid
X-Say-Cacheable
X-Say-TTL
X-Cms-Context
X-Debug
X-Ua
X-Sql-Count
X-SRV
TWC-GeoIP-LatLong
X-BYPASS-REASON
X-AWS-Id
X-Origin-Hint
X-Cluster
X-Edge-Location
Webcakes-App-Name
X-Content-Age
TWC-Connection-Speed
TWC-Device-Class
TWC-GeoIP-Country
Cross-Origin-Window-Policy
X-Locale
S-Rt
Web-Mar-Node
Webcakes-Region
ServerID
Property-Id
X-Forwarded-Host
X-PHP-Host
TWC-Privacy
X-Ms-Version
X-Proto
X-ProxyCache-Key
X-TIME
X-R9-Blue-Green-Version
X-ProxyCache-Status
X-Ms-Request-Id
X-LJ-Flow-ID
X-GeoCode
X-PHP-Backend
TWC-Locale-Group
X-GeoCountry
X-IPLB-Instance
X-Labrador-Cache-Channel
X-IPLB-Request-ID
CDN-Uid
Webcakes-App-Version
X-VWS-Id
Cache-Name
CDN-Cache
X-Server-W
CDN-RequestCountryCode
X-UA-Device-Type
X-Via-Fastly
X-Skip-Cache
CDN-CachedAt
Node
CDN-PullZone
CDN-EdgeStorageId
X-LSADC-Cache
X-Detected-As
Cache-Hits
X-Xfnlog-Site
Locale
X-CACHE-AGE
X-Extlb
X-Site-Version
X-JoinUs
X-LAGOON
X-Varnish-Beresp-Grace
X-Soup
X-No-Session
X-Zipkin-Id
X-Urbn-Context-Path
X-Urbn-Site-Id
X-Proxied
X-Routing-Service
X-Cluster-Node
X-SaId
Mime-Version
X-Handled-By
X-WP-CF-Super-Cache-Cache-Control
X-Timing-Wait
X-WP-CF-Super-Cache
X-Fastly-Request-Id
Selected-Fe
WP-Super-Cache
Mn-Server-Ip
X-Proxy-Build
Fastcgi-Useragent
DB-Nickname
Liferay-Portal
X-Hl-Ver
X-FB-TRIP-ID
X-Request-Time
Xserver
X-Tec-Api-Version
X-Tumblr-Pixel-3
X-Tec-Api-Root
X-Tec-Api-Origin
X-Times
X-Redis-Cache
X-Cache-Debug
ServedBy
X-Optimistic-Header
X-Air-Hostname
X-Air-Trace-Id
X-XRDS-LOCATION
X-Air-Source
Upgrade-Insecure-Requests
X-TNCMS
X-Loop
Source
X-Origin-Date
X-GEO
X-Buckets
X-Generated-By
X-NWS-UUID-VERIFY
Countrycode
X-Esi
X-Mg-Request-UUID
X-Varnish-Hits
X-Akamai-Transformed
CF-Cached-On
X-Uri
X-Director
X-Pass-Why
X-Tid
X-Varnish-Beresp-Ttl
X-Storage
X-Cdn
X-Tx-Id
Xet-Cookie
X-TA-CDN-Provider
Frame-Options
X-ARC
X-Presslabs-Stats
X-FireWall-Port
X-Origin-CC
X-Origin-TTL
X-DC
X-Newrelic-Synthetics
X-Service
X-Varnish-Cache-Hits
X-ECache
X-Sorting-Hat-PodId
X-Trace-ID
X-Shopify-Stage
X-Sorting-Hat-ShopId
X-Storefront-Renderer-Rendered
X-Varnish-Hostname
X-ShardId
SID
X-ShopId
X-Alternate-Cache-Key
X-App-Version
X-Datadog-Sampling-Priority
X-B3-Spanid
X-Datadog-Trace-Id
Environment
X-Endurance-Cache-Level
X-Datadog-Sampled
X-Datadog-Parent-Id
Cache-Tv-Group
X-Request-Host
X-BCube-Filmed-By
X-Bc-Bl
X-D
X-Destination
X-Developer
X-Ec-Fail
X-Ec-GeoHdr
X-BBC-Edge-Cache-Status
X-Core-Value
X-Cache-NE
X-ServerID
X-CMSURLCustom
X-Cache-Info
Candidate-Md5Url
Sslversion
Req-Svc-Chain
Rendered-Blocks
Edge-Cache
Surrogated-Key
TDXMobile
T-Server
Release
Redirect-Candidate
Meta-Geo-Continent
MD5-Digest
Host-ID
Ngx.Var.Host
Odigeo-Trace-Id
Gannett-Cam-Experience-Id
Origin
Thinkindot-CacheControl
DCR-Processing-Time-Ms
X-A-Wwc
X-A-Dgt
X-A-Dcw
BehaviorPad-Version
X-Aed
X-B-Cookie
X-Application
X-A-Dam
X-Epic-Correlation-Id
Thinkindot-CacheControl-Type
DCR-Decision-By
Thinkindot-Control
WWW-Authenticate
X-A-Ccd
X-A
A
X-Gdpr
X-SRCache-Key
X-Origin-Time
X-Platform-Cluster
X-Nyt-Route
X-ScT
X-TIM-N
X-Mid
X-Thinkindot-L3
X-Platform-Processor
Server-Info
X-S
X-S-Cookie
X-S-Maxage
X-Rojux
X-External-Request-Id
X-Platform-Router
X-Processor
X-Loc
X-Mobile-URL
X-Vdms-Version
Xc-Version
X-VG-TLSProxy
X-Vdms-Path
Lang
X-Frame-Option
X-We-Are-Hiring
X-INCAP-ABP
X-Worker
X-WP-CF-Super-Cache-Active
Tube-Return
Vix-Hermes-Req-Id
X-Sigma
Magicmarker
Memcached
X-SD-PageType
Tube-Got-Results
X-Sigma-Backend
X-VServer
Server-Host
X-Test
X-Served-From
X-Varnish-Remaining-TTL
X-Varnish-CookieHashed-On
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-Varnish-CookieINHashed-On
X-WA-Info
Tube-Got-Eval
Tube-Get-Contents
X-Sn-Servicetimems
X-WADP-Cache
X-Req
X-DefElseHash
X-DefHash
X-HS-Content-Campaign-Id
X-Httpd
X-Human
X-Is-Gdpr
X-CUA
X-Has-Esi
X-Developers
X-Gamma-Serve
X-Fmm-Version
X-Pubstack
X-Geo-Header
X-Ec-Custom-Error
X-GeoIP-City
X-JWT-State
X-Core-Mission
X-Platform-Server
X-Cache-Bucket
X-Origin-Response-Time
X-Auto-Login
X-Restarts
X-Rocket-Build-Number
X-Akamai-Device-Characteristics
X-Cdn-Origin
X-Cdn-Srv
X-Generated-On
X-Location
X-NodeID
X-Level-Front-Cache
X-Clara-WADP
X-Old-Content-Length
X-SB
State
Apple-News-Services-Handled
Decoy-Debug-Key
Cluster
Apple-News-Services-Host
Fastly-GeoIP-CountryCode
X-RM-Cache-TTL
Decoy-Debug-Status
Fastly-Backend-Name
Click-Count-Error
Apple-News-Services-Request-Url
C-Via
Cache-Host
Country-Code
Click-Count-Action-Start
Decoy-Debug-TTL
DSUID
Apple-News-Services-Parsed-Url
X-AIR-PT
Section-Io-Id
Section-Origin-Responded
Section-Io-Origin-Status
Section-Io-Origin-Time-Seconds
X-Block-Status
Adler-Geo
X-Planisys-CDN-Rules
X-Slack-Backend
Cache-Provider
X-Accel-Expires-Debug
X-Ad-Defer-Variation
X-Planisys-CDN-TTL
X-Cache-Backend
X-App
Cache-Key
X-Gen-Mode
X-Scale
X-DPWN-IS-SECURE
X-Dispatcher-Number
X-Date
X-Esi-Check
X-Variation
Kp-EeAlive
X-Up
X-Var-Ttl
X-Fastly-Backend
X-Request-Start
X-GeoIP
CacheControlHeader
AKAMAI
X-Hnp-Log
X-Cache-Id
X-Cache-FS-Status
X-Bip
X-Hash
X-GeoIP-Country-Code
X-GeoIP-Region-Code
X-Gzip
X-Wix-Viewer-Type
CloudFront-Viewer-Country
X-Accel-Buffering
Ssr
Gh-Request-Id
NM-Fastcgi-Cache
X-Thanos
Server-Ext
X-Nananana
X-Node-Id
Server-Hostname
CDCHOST
X-Conf
Platform
Pics-Label
Origin-EX
Origin-CC
Producers
X-Minions-Version
X-Vmg-Version
X-Origin
Sever-Int
User-Cache-Control
Cmsid
Cmstype
X-Planisys-CDN-Cache
We-Hiring
L
Web-Mar-Region
X-Fetched-On
X-LB-NoCache
Mail-Subject
Svr
Is-Eu
X-Parent-Response-Time
X-Server-IP
X-Slack-Shared-Secret-Outcome
X-Varnish-Beresp-Status
X-VarnishDD-TTL
X-FC-Vary-Parameters
X-Varnishpool
Wxu-Next-Commit
X-Forwarded-Site
X-Ckpd-Fst-Backend
X-Dispatcher-Server
X-HN
X-Org
X-Op-Id-All
X-Platform
Datacenter
Wxu-Next-Region
Wxu-Next-Hostname
X-Region-Sid
X-Irp-Debug
NGX
On-Server
X-Pool
PFcat
X-Mvc-Supplant-Cachable
Cdn
X-Men
X-V-Cache
X-Refresh
Fastly-SSL
X-NCache
X-Cache-Tags
X-Cached-By
X-CacheTTL
X-Device-Os
X-CSRF-Token
X-Varnish-Ttl
X-Nginx-Cache-Key
X-Azure-Ref-OriginShield
Ha-Gx-Prefs
X-Owner
X-CGP
Machine
X-Via-Popv
X-Csrf-Jwt
L5d-Success-Class
X-Qloud-Router
X-Eu-Site
X-Via-Popn
HA-Ipaddr
X-Via-Poph
X-Webkit-CSP-Report-Only
Env
HostName
X-Aicache-OS
X-HA-Backend
GeoIP-Latitude
X-Servedbyhost
X-Cache-Date
Canary
X-Mvc-Supplant-OutputCached
X-Microcachable
Server-ID
X-RCS-CacheZone
Cdnsip
X-Tb-Optimization-Total-Bytes-Saved
X-AK-Request-ID
Cdncip
X-Cache-Remote
X-VC
X-Mly-Id
X-APP-VERSION
X-ZONE
X-Wa
X-Gateway-Cache-Status
X-Fpc
X-API-Version
X-Gateway-Cache-Key
X-Gateway-Request-Id
X-Gateway-Skip-Cache
X-DataCenter
X-LB-ID
Load-Balancing
X-Zone
X-Nc
X-Fastly-Cache
X-Generated-In
Cache
Time
Memory
X-Webkit-CSP
Request-ID
Eomportal-Instance
X-Origin-Expires
X-Via-NSCOPI
X-Instance-Name
X-ND-Cache
X-Check-Cacheable
X-Vgn-Hpd-Cached
X-Vgn-Hpd-Variations-Key
X-Vgn-Hpd-Ssi
X-Vc
X-Response-By
Ngx-Var-Key
X-HS-Status
X-Release
X-Micro-Cache
X-Correlation-ID
X-CS
OT-Force-Account-Verify
X-CCDN-Origin-Time
Locid
Expect-Staple
Srvid
X-Client-Ip
X-FL-EDGE
X-Hcs-Proxy-Type
X-FL-QIT-DEBUG
X-From
X-CCDN-CacheTTL
X-NewRelic-App-Data
Hostname
X-Api-Version
X-Cache-Enabled
IsBot
X-SIPLIST1
X-Via-CDN
X-Request-URI
NtCoent-Length
X-Cache-NGX
X-Edge-Pop
Edge-Copy-Time
X-Info
X-VCL-Version
X-CSRF-TOKEN
X-Via-SSL
AMP-Access-Control-Allow-Source-Origin
X-Via-Edge
X-Provided-By
X-Via-JSL
X-NGINX-Cache
Srv
GeoIp-Country-Code
X-MCACHE
Uri
True-Client-Ip
XkeyRZ
X-Proxy-CacheRZ
X-Srv
X-Air-Pt
X-Lambda-Id
X-Debug-Cache-Fetch
X-Debug-Cache-Store
X-Nf-Request-Id
X-Amz-Meta-Cb-Modifiedtime
X-Vcl-Version
True-Client-IP
Location
X-EC-Lua
X-Dc
X-B3-SpanId
VNS-Cache
X-Vtex-Remote-Cache
X-Render-Time
VNS-Age
CPC-Age
CPC-Cache
X-Edge-POP
Sid
X-Cache-Expires
GeoIP-Country-Code
Path
Servername
X-Oss-Storage-Class
X-Oss-Request-Id
Resin-Trace
X-Oss-Object-Type
X-Oss-Hash-Crc64ecma
X-SERVER-NAME
X-Oss-Server-Time
X-Server-ID
Cross-Origin-Opener-Policy-Report-Only
X-TH-Server
X-VCT
X-Fastly-Country-Code
X-Cs
X-Moov-T
X-ATG-Version
X-Moov-Xdn-Version
X-CLOUD-TRACE-CONTEXT
Traceparent
CDN
LB
Fastly-Drupal-Html
X-Cache-ASPX
X-Varnish-Authentication
X-MSEdge-Flight
X-Cdn-Request-ID
X-Viewer-Country
X-Contensis-Viewer-Groups
X-MSEdge-Features
Esi-Enabled
X-Scheme
X-Accel-Version
X-TX-ID
YJS-ID
X-ApacheServer
X-PERF
M-TraceId
Timeexpire
X-Pod-Name
X-Varnish-Beresp-TTL
X-Upstream-Ct
X-Upstream-Ht
X-Akamai-Pragma-Client-IP
X-FPC
X-Udemy-Cache-App-Namespace
X-Cdn-Cache-Status
Rip
X-Datadome
X-CF-Lambda-Version
X-CF-Lambda-Fn
FSS-Cache
X-PAYTM-SRV-ID
X-RateLimit-Limit-Second
X-NAPM-TraceId
Powered-By
X-Cache-Type
X-RateLimit-Remaining-Second
X-Datacenter
X-RateLimit-Reset
CountryCode
X-WA
HIT
X-Lb-Id
X-Service-Response-Time
Sm-Log-Id
X-Geo
XServer
X-Srcache-Fetch-Status
X-Srcache-Store-Status
X-CACHE-KEY
X-NC
N-Cache
X-Clientip
Proxy-Connection
Server-Id
X-Wikidot-Static-Cache
X-Wikidot-Backend
RNT-Time
Ohc-File-Size
RNT-Machine
V-Age
Tracecode
True-Client-Country-4JS
X-Forwarded-Path
X-LiteSpeed-Cache-Control
X-Hyper-Cache
X-Shop-Environment
X-Tenant
X-VG-WebCache
XM
X-Orig-Expires
ENV
X-ServedByHost
X-TraceId
X-CDN-Cache-Status
Epwk-X-Cache
X-Bl-Debug
X-B3-Trace-ID
Ngx
X-MP-GENERATED-AT
X-Ha-Backend
X-Cdn-Forward
Geoip-Latitude
X-B3-Parentspanid
Yjs-Id
WZWS-RAY
X-M-Reqid
X-M-Log
X-Qnm-Cache
Content-Style-Type
X-Amz-Meta-Opti
X-App-Name
X-Policy
Content-Script-Type
X-Serial
X-Vgn-Hpd-Reason
X-Rebelmouse-Surrogate-Control
X-Via-PopH
X-Via-PopV
X-Fastly-Backend-Reqs
X-Rebelmouse-Cache-Control
User-Agent
X-MiniProfiler-Ids
X-Cdn-Diag
X-B3-ParentSpanId
Inserted-Into-Cache-At
X-Swift-Error
X-Via-PopN
X-Dw-Trace-Id
X-Lb-Nocache
Ec-Rule-Version
X-TT-LOGID
X-F-Status
X-Wp-Cf-Super-Cache-Cache-Control
X-Lsadc-Cache
X-Wp-Cf-Super-Cache
Expiry
Cneonction
My-App
Pramga
X-Connection-Hash
X-Ramcache
Req-ID
MIME-Version
X-IPS-Cached-Response
X-LiteSpeed-Tag
X-UP
X-Snapshot-Date
X-Cache-Ngx
X-Request-URL
X-Mid-Debug-Cache-Key
X-Stale
X-Th-Server
X-Mid-Debug-Cache-Disk
Warning