Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
CF-RAY
Expect-CT
Accept-Ranges
X-XSS-Protection
Pragma
X-Powered-By
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Alt-Svc
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
X-Xss-Protection
X-UA-Compatible
X-Served-By
X-Download-Options
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Request-Id
X-Varnish
X-Adblock-Key
X-Permitted-Cross-Domain-Policies
Access-Control-Allow-Credentials
X-DNS-Prefetch-Control
Content-Security-Policy-Report-Only
Accept-CH
X-Runtime
Accept-CH-Lifetime
X-AspNet-Version
X-Check
X-Drupal-Cache
X-Generator
X-Ua-Compatible
X-Cache-Status
Server-Timing
X-Cacheable
Timing-Allow-Origin
X-Envoy-Upstream-Service-Time
X-FRAME-OPTIONS
X-Request-ID
X-Iinfo
X-Drupal-Dynamic-Cache
X-Content-Security-Policy
Feature-Policy
Access-Control-Expose-Headers
Content-Encoding
X-CDN
Upgrade
Status
X-AspNetMvc-Version
CF-Ray
Access-Control-Max-Age
X-Amz-Request-Id
Cf-Edge-Cache
X-Amz-Id-2
X-Via
Host-Header
Permissions-Policy
EagleId
Keep-Alive
Request-Context
X-Cache-Group
X-Robots-Tag
X-Backend
X-UA-Device
X-AH-Environment
X-Hacker
X-Proxy-Cache
X-Server
X-Turbo-Charged-By
X-Rq
X-Age
X-Ws-Request-Id
X-Vhost
Cf-Apo-Via
X-Amz-Version-Id
Xkey
X-Dispatcher
X-Swift-SaveTime
X-Swift-CacheTime
Grace
X-Server-Powered-By
X-LiteSpeed-Cache
Ali-Swift-Global-Savetime
Allow
X-Varnish-Cache
X-OneAgent-JS-Injection
P3p
X-Page-Speed
X-Pingback
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Device
X-Cache-Lookup
X-WebKit-CSP
EagleEye-TraceId
X-Host
X-Backend-Server
Cf-Railgun
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Server-Id
X-Dns-Prefetch-Control
X-Response-Time
X-Readtime
X-Ruxit-JS-Agent
Surrogate-Control
X-Akam-SW-Version
X-HW
X-Node
Request-Id
X-Cloud-Trace-Context
X-Country
Content-Location
X-Nginx-Cache-Status
X-Application-Context
X-Nginx-Upstream-Cache-Status
Accept-Ch-Lifetime
X-Litespeed-Cache
X-NWS-LOG-UUID
X-Country-Code
X-ASPNET-VERSION
Service-Worker-Allowed
X-Content-Type
X-Url
X-Trace
Cache-Tag
X-Clacks-Overhead
X-Amz-Server-Side-Encryption
Rating
X-Times
X-Rack-Cache
X-PC
X-Vname
X-TtlSet
Cross-Origin-Opener-Policy
X-Edge
X-Mcache
X-Midtier
X-Browser-Type
X-Server-Name
X-Daa-Tunnel
Nginx-Cache
AR-SID
AR-ATIME
AR-Request-ID
AR-PoweredBy
X-Powered-By-Plesk
X-Cache-TTL
X-Cnection
Accept-Ch
X-FTR-Request-ID
X-Ac
X-ESI
X-GitHub-Request-Id
X-D2id
X-Element-Page-Cache
Edge-Control
X-CST
Verso
X-Exp-Variant
X-Cdn-Fetch
X-GoogleNews-Bot
X-Exp-Id
X-Kinja-Build
X-Kinja-Server
X-Kinja-Revision
X-Kinja
X-MS-InvokeApp
AR-CACHE
X-Ser
X-Vcap-Request-Id
X-Abt-Application-Version
X-Upstream
X-Dw-Request-Base-Id
X-Navigation-Version
Fastly-Restarts
X-B3-TraceId
X-ECACHE
X-FastCGI-Cache
SPIisLatency
SPRequestDuration
X-Webkit-Csp
X-Mod-Pagespeed
X-Amz-Rid
X-PDP-UNCACHING-HASH
X-Server-Lifecycle-Phase
X-Instrumentation
X-Erf-Bev-Bev-Is-Generated
X-Kraken-Loop-Name
X-Erf-Bev-Bev
X-SharePointHealthScore
SPRequestGuid
X-Client-IP
X-ARC
X-Goog-Hash
X-Kinsta-Cache
X-Edge-Location-Klb
Display
Pagespeed
X-Middleton-Display
X-Sol
X-Powered-CMS
X-Ratelimit-Limit
X-Mg-S
X-Amzn-Trace-Id
X-Oneagent-Js-Injection
Edge-Cache-Tag
S
Cache-Status
X-Version
Access-Control-Request-Method
X-Middleton-Response
Response
X-VARITI-CCR
X-NF-Request-ID
RTSS
Realpath
X-Ratelimit-Remaining
X-Forwarded-For
X-Cache-Key
X-T
X-Content-Digest
Cross-Origin-Resource-Policy
X-Recruiting
X-ORACLE-DMS-RID
X-Correlation-Id
X-Cached
Fastcgi-Cache
X-Fastly-Request-ID
X-Server-ID
X-TTL
X-MSEdge-Ref
X-Shield-Request-Id
X-TraceId
Front-End-Https
MicrosoftSharePointTeamServices
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-PressLabs-Stats
X-Ua-Browser
X-Request-Processing-Time
X-Forwarded-Proto
X-Request-Received
TP-Cache
X-Frontend
Payment
X-HS-Hub-Id
X-HS-Cache-Config
X-HS-Content-Id
Arr-Disable-Session-Affinity
X-LLID
X-Protected-By
Server-Node
X-RateLimit-Remaining
Public-Key-Pins
Count-Hit
X-Ruxit-Js-Agent
X-Varnish-TTL
Content-MD5
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-HS-Combine-CSS
X-Newrelic-App-Data
X-Accel-Expires
X-GUploader-UploadID
X-Distributor
MS-Author-Via
X-LB-Cache
X-Origin-Server
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-ORACLE-DMS-ECID
Surrogate-Key
X-Ezoic-Cdn
X-NODE
X-HP-Webp
X-Jurisdiction
X-Microsite
X-Request-Handler-Origin-Region
X-Ttl
X-HP-Trace-Id
X-FTR-Backend
X-Content-Security-Policy-Report-Only
X-Country-Code-Real
X-FTR-Balancer
X-FTR-Cache-Status
X-FTR-Backend-Server
X-Www-Served-By
Host
X-Activity-Id
X-Az
X-App-Server
X-AppVersion
Accept-Charset
X-Varnish-Server
Mrf-Cache-Status
X-Cluster-Name
Cache-Tags
X-B3-TraceId-Primal
MRF-Tech
Cleartype
X-Amz-Meta-S3cmd-Attrs
X-Varnish-Backend
Retry-After
X-Goog-Metageneration
X-FTR-Expires
Filterid
X-Unique-Id
X-Ua-Device
X-Debug
X-Git-Hash
Server-Name
Access-Control-Allow-Method
X-Hits
X-Logged-In
X-Load-Cache
X-Aspnet-Version
X-Id
X-Azure-Ref
X-Envoy-Decorator-Operation
X-NGENIX-Cache
X-Upgrade-Enabled
X-Geo-Country
X-Varnish-Ttl
X-CSRF-Token
X-FB-Debug
X-Amz-Apigw-Id
X-Hostname
X-Amzn-RequestId
TCN
X-Tt-Trace-Tag
X-Tt-Trace-Host
Section-Io-Cache
X-TT
X-B
TP-L2-Cache
X-Proxy
X-Cache-Control
X-Seen-By
Viewport
X-Request-Guid
X-Grace
X-Revision
Healthy
X-Type
X-Contextid
X-Fb-Rlafr
X-B3-Sampled
X-Trace-Id
DC
X-Time
X-Hcs-Proxy-Type
X-F-Cache
X-CCDN-CacheTTL
X-CCDN-Origin-Time
X-Goog-Storage-Class
X-Goog-Generation
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
Fastly-SWR
Fastly-SIE
X-Mobile
X-N
Content-Disposition
X-XRDS-LOCATION
X-Ratelimit-Reset
X-WP-CF-Super-Cache-Cache-Control
X-WP-CF-Super-Cache
Paypal-Debug-Id
Referer-Policy
Pinterest-Version
X-Varnish-Grace
X-Pinterest-Rid
Pinterest-Generated-By
X-Origin-Cache
X-Amz-Replication-Status
X-DIS-Request-ID
X-Nf-Request-Id
X-Magnolia-Registration
X-Via-JSL
X-Debug-Info
X-Page-Id
X-Webkit-CSP
X-Wormhole-Sdk
X-Px
Version
X-Datadog-Parent-Id
X-Datadog-Sampling-Priority
X-Datadog-Trace-Id
X-ProcessESI
X-RemovedCookies
X-G
X-UUID
X-Tumblr-Pixel-0
X-Oracle-Dms-Ecid
X-Adobe-Loc
X-Tumblr-Pixel
X-Adobe-Content
X-App-Environment
X-Tumblr-User
X-Rule
X-Content-Options
X-Whom
X-Tumblr-Pixel-1
Ms-Operation-Id
X-Source
X-Hl-Ver
X-Node-Name
X-Yottaa-Optimizations
X-RTag
X-Yottaa-Metrics
X-Debug-IsPreview
X-Debug-IsConnected
SD-X-WS
NGB
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-Datadog-Sampled
MS-CV
X-Ismobilevalue
X-Template
X-Storage
Cross-Origin-Window-Policy
X-Instance
X-Region
X-NYM-Debug-Backend
X-Signature
X-Rendered-As
X-Backend-Name
X-B-Cache
X-Cacheable-TTL
X-Device-Type
X-Proxy-Cache-Info
X-Is-Bot
X-Wix-Request-Id
X-User-Agent
X-FW-Hash
X-FW-Dynamic
X-FW-Type
X-FW-Serve
X-Cache-Age
X-FW-Static
X-ServerID
X-FW-Server
X-L-Path
X-Environment-Context
X-Rid
Amp-Access-Control-Allow-Source-Origin
X-Status
GEO-INFO
Country
X-FW-Version
Countrycode
Charset
X-RM-Cache-TTL
X-NWS-UUID-VERIFY
X-IPS-LoggedIn
X-EdgeConnect-Cache-Status
Akamai-GRN
ServerID
Front
X-Real-IP
X-Framework
X-WP-CF-Super-Cache-Active
X-Cache-Grace
SRV
X-AB
Liferay-Portal
X-Amzn-Remapped-Content-Length
X-B3-SpanId
X-Cache-Hit
X-Air-Pt
X-ECache
X-Language
X-Content-Powered-By
X-Akamai-Request-ID2
X-Oracle-Dms-Rid
X-WebKit-CSP-Report-Only
X-Api-Version
X-Air-Hostname
X-Fastly-Request-Id
X-Air-Trace-Id
X-VC
X-Servername
X-Air-Source
OT-Force-Account-Verify
X-UA
X-DataDome
X-Sucuri-ID
Xet-Cookie
X-Sucuri-Cache
From-Origin
X-VC-Cache
X-Mode
Accept-Language
Backend
X-SRV
Refresh
Access-Control-Request-Headers
X-Cache-Status-Check
LB
X-URL
X-Xrds-Location
X-HTML-Minification-Powered-By
Upgrade-Insecure-Requests
X-Handled-By
X-Aws-Lambda-Call-Status
X-Tt-Logid
X-Cache-Time
X-SaId
X-Rn-Rsrv
X-RCS-CacheZone
X-Rewrite-Enabled
X-UPSTREAM-Address
Filters
Meta-Geo
X-RID
X-Mg-Request-UUID
X-JoinUs
Webserver
X-Adobe-Source
X-Webstats-RespID
Webcakes-Region
X-Cms-Context
X-Git-Commit
X-Nginx-Cache
X-Labrador-Cache-Channel
X-Generated-By
Webcakes-App-Version
Webcakes-App-Name
TWC-Connection-Speed
Property-Id
X-Varnish-Age
TWC-Device-Class
TWC-GeoIP-Country
TWC-Privacy
TWC-Locale-Group
TWC-GeoIP-LatLong
X-Origin-Date
X-Hosted-By
X-Tumblr-Pixel-2
X-Container-Uri
X-Origin-Hint
X-Provided-By
X-Request-URI
X-S
X-PHP-Host
X-R9-Blue-Green-Version
X-Scope-Id
X-Cache-Debug
X-BYPASS-REASON
X-Redis-Cache
ServedBy
Url
Cache
X-Browser-Name
X-ProxyCache-Status
X-ProxyCache-Key
X-Accel-Version
X-Vcl-Version
X-Fetched-On
X-Akamai-Edgescape
X-Site-Version
X-Web-Node
X-Tncms
X-Locale
X-Lambda-Id
X-Is-Tablet
X-Is-Supported-Browser
X-Logging-Id
X-Loop
X-Reqid
X-Served-From
X-No-Session
X-Is-Mobile
X-Xfnlog-Site
Atl-Traceid
X-Geo-Region
Web-Mar-Node
Section-Io-Id
X-Forwarded-Host
X-Tcp-Rtt
X-Is-Desktop
X-Skip-Cache
X-Httpd
X-Tb
Selected-Fe
X-Varnish-Beresp-Grace
X-Say-TTL
X-Say-Cacheable
X-Cluster
X-IPLB-Instance
X-IPLB-Request-ID
X-Optimistic-Header
X-Origin
X-Frame-Option
X-Timing-Wait
X-Proxy-Build
X-Detected-As
X-Director
X-Upstream-Ct
X-Upstream-Ht
X-SayCDN-TTL
X-Alternate-Cache-Key
X-VCT
X-Shopify-Stage
X-Restarts
X-Storefront-Renderer-Rendered
X-Format
X-Soup
Mn-Server-Ip
X-Cache-Host
X-Varnish-Cache-Hits
Apigw-Requestid
X-LJ-Flow-ID
X-AWS-Id
X-RateLimit-Limit
X-VWS-Id
X-Cloudmap
Xserver
X-Routing-Service
X-Extlb
X-Cache-Operation
X-Cache-Rule
Onion-Location
X-Zipkin-Id
X-Proxied
X-ShopId
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Ms-Request-Id
X-Endurance-Cache-Level
X-Edge-Location
X-ShardId
X-Ms-Version
X-INCAP-ABP
X-Vcache
X-Lagoon
Frame-Options
X-GeoCountry
Expiry
X-GeoCode
X-Azure-Ref-OriginShield
X-Cache-Expired-At
Priority
X-Connection-Hash
X-CDN-Forward
X-WP-CF-Super-Cache-Cookies-Bypass
Source
Protected
Environment
Cdn-Requestid
WPO-Cache-Message
WPO-Cache-Status
X-Generation-Time
X-Thinkindot-L3
Thinkindot-Control
X-Cache-Action
X-Proxy-Cache-Status
Thinkindot-CacheControl-Type
X-CMSURLCustom
TDXMobile
Thinkindot-CacheControl
X-Shield-Cache-Expires
Fastcgi-Useragent
X-Fastcgi-Cache
X-XRDS-Location
X-Drupal-Cache-Contexts
X-Drupal-Cache-Tags
CF-IPCountry
X-Cdn-Origin
Uber-Trace-Id
X-Origin-TTL
X-PHP-Backend
X-Origin-CC
X-Pass-Why
X-GEO
X-App-Version
X-Rocket-Nginx-Serving-Static
Locale
X-Worker
X-Cluster-Node
X-Urbn-Site-Id
X-Urbn-Context-Path
Sid
Azure-InstanceId
Azure-RegionName
Azure-Version
Azure-SlotName
Azure-SiteName
X-ID
Node
X-Aspnetmvc-Version
X-Vercel-Id
X-Vercel-Cache
X-FB-TRIP-ID
Cache-Tv-Group
X-Buckets
Cache-Hits
X-Auth-Group-Type
CDN-RequestPullSuccess
CDN-RequestPullCode
CDN-Cache
CDN-RequestCountryCode
CDN-PullZone
CDN-Uid
CDN-CachedAt
CDN-EdgeStorageId
AMP-Access-Control-Allow-Source-Origin
X-Tumblr-Pixel-3
X-TA-CDN-Provider
X-Server-W
X-HITS
Alternate-Protocol
Cross-Origin-Embedder-Policy
X-B3-Traceid
X-Pad
X-Cache-Server
X-A
DB-Nickname
X-Custom-Header
X-Fastly-Backend
Gannett-Cam-Experience-Id
Candidate-Md5Url
X-Bc-Bl
X-BCube-Filmed-By
X-Org
X-Origin-Expires
X-Esi-Check
X-Epic-Correlation-Id
X-Req
X-A-Dgt
X-GeoIP-City
Lang
X-A-Wwc
X-Aed
X-Edge-Server
Cdn-Host
X-Bl-Debug
X-Ig-Origin-Region
X-Ig-Push-State
Content-Secure-Policy
X-Content-Age
X-Cache-NE
X-Conf
X-Cache-TTL-Remaining
X-Gzip
X-Level-Front-Cache
X-Cache-Id
DCR-Decision-By
X-ND-Cache
DCR-Processing-Time-Ms
Cdn-Request-Time
X-Core-Value
X-Service
X-Generated-On
Magicmarker
X-Rojux
X-Via-Fastly
X-Viewer-Country
X-Dispatcher-Server
X-D
X-Ec-Fail
X-A-Dcw
X-Varnish-Remaining-TTL
X-Vdms-Version
X-Developer
X-Vtex-Remote-Cache
Rendered-Blocks
A
X-DefElseHash
Sslversion
X-DefHash
X-LSADC-Cache
T-Server
Surrogated-Key
X-Ec-GeoHdr
Origin-Agent-Cluster
X-SRCache-Key
X-A-Ccd
Ngx.Var.Host
X-LiteSpeed-Cache-Control
X-A-Dam
X-ScT
MD5-Digest
Meta-Geo-Continent
X-Varnish-CookieINHashed-On
Wxu-Next-Region
X-V-Cache
X-Varnish-CookieHashed-On
Wxu-Next-Hostname
Wxu-Next-Commit
Odigeo-Trace-Id
X-TIM-N
X-DC
X-Tx-Id
User-Cache-Control
Mime-Version
X-Client-Ip
X-App-Name
Tube-Return
V-Age
Vix-Hermes-Req-Id
X-Acquia-Purge-Cdn-Unconfigured
Tube-Got-Results
Tube-Got-Eval
RNT-Time
Server-Host
Ssr
Tube-Get-Contents
X-Aicache-OS
X-AK-Request-ID
X-Cache-Bucket
X-Cache-FS-Status
X-Cache-Info
X-CacheTTL
X-Block-Status
X-Bip
X-Debug-Cache-Fetch
X-B3-Trace-ID
X-Backend-Instance
X-Clientip
X-GeoIP
X-SVT-ORM-RULES
X-Sn-Servicetimems
X-SVT-ORM-VERSION
X-Tb-Optimization-Total-Bytes-Saved
X-Thanos
X-Test
X-Server-IP
X-SD-PageType
X-RateLimit-Remaining-Second
X-RateLimit-Limit-Second
X-Region-Sid
X-Request-Time
X-Scheme
X-SB
X-UA-Device-Type
X-Varnish-Director
Fastly-SSL
Cache-Provider
PFcat
X-HN
X-VarnishDD-TTL
X-NodeID
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-VG-TLSProxy
X-Varnish-Hostname
X-VG-WebCache
X-VTEX-Cache-Server
X-VTEX-Cache-Time
X-Pubstack
X-Proto
X-GeoIP-Region-Code
X-GeoIP-Country-Code
X-GoCache-CacheStatus
X-Hnp-Log
X-Jobs
X-HS-Content-Campaign-Id
RNT-Machine
X-Geo-Header
X-Fastly-Cache
X-DPWN-IS-SECURE
X-FC-Vary-Parameters
X-Fmm-Version
X-Gdpr
X-Forwarded-Site
X-Loc
X-Men
X-Origin-Time
X-Origin-Response-Time
X-PAYTM-SRV-ID
X-Platform
X-Powered-By-VTEX-Cache
X-Policy
X-Op-Id-All
X-Nyt-Route
X-Mly-Id
X-Micro-Cache
X-Mvc-Supplant-Cachable
X-NMSegId
X-Node-Id
X-Debug-Cache-Store
X-Gen-Mode
Adler-Geo
Fastly-Backend-Name
Esi-Enabled
Click-Count-Error
Is-Eu
HostName
NM-Fastcgi-Cache
Edge-Cache
Cdncip
Content-Style-Type
Content-Script-Type
Country-Code
X-Dc
Cdnsip
Click-Count-Action-Start
X-NGINX-Cache
Host-ID
Platform
Producers
Req-ID
Powered-By
X-Cs
X-Proxied-Request
X-Mvc-Supplant-OutputCached
Canary
Cache-Key
X-Date
AKAMAI
X-Pool
X-CUA
X-Nginx-Cache-Key
X-Varnish-Beresp-Status
X-Section
X-Cdn-Srv
X-Contensis-Viewer-Groups
X-Request-Host
X-Eu-Site
XM
Server-Info
X-Depends
X-Access
W
True-Client-Country-4JS
X-Hash
X-Location
X-Csrf-Jwt
X-Human
Apple-News-Services-Handled
X-Slack-Backend
X-Request-Start
Ha-Gx-Prefs
X-Var-Ttl
X-CGP
HA-Ipaddr
X-Ec-Custom-Error
X-Slack-Shared-Secret-Outcome
L5d-Success-Class
L
X-Varnish-Authentication
C-Via
X-Accel-Expires-Debug
Sever-Int
Machine
Mail-Subject
Gh-Request-Id
Server-Hostname
Server-Ext
Apple-News-Services-Parsed-Url
X-We-Are-Hiring
NGX
Release
Proxy-Firewall
Origin-EX
Pramga
Apple-News-Services-Host
Origin-CC
Origin
On-Server
Web-Mar-Region
We-Hiring
Req-Svc-Chain
Yak-Timeinfo
DSUID
X-Cache-Aspx
X-BBC-Edge-Cache-Status
X-Auto-Login
CDCHOST
X-Varnishpool
Cluster
Fastly-GeoIP-CountryCode
Apple-News-Services-Request-Url
X-Amz-Storage-Class
X-Varnish-Beresp-Ttl
Debug
BehaviorPad-Version
X-AIR-PT
Fusion-Content-Source
Fusion-Component-Id
Fusion-Content-Id
Fusion-Template-Id
X-WA-Info
Fusion-Deployment-Id
X-Ad-Load-Variation
X-RateLimit-Reset
Fusion-Source
Redirect-Candidate
X-LB-ID
X-Varnish-Hits
X-APP
X-Device-Os
X-HA-Backend
X-Zone
X-CLOUD-TRACE-CONTEXT
X-Via-Popv
X-Via-Popn
X-Via-Poph
X-Newrelic-Synthetics
X-MP-GENERATED-AT
X-Tec-Api-Version
SID
CDN-RequestId
X-Tec-Api-Origin
X-Tec-Api-Root
X-Akamai-Transformed
Fastly-Drupal-HTML
X-NCache
Pics-Label
GeoIP-Latitude
X-Up
X-Content-Length
X-From
X-LiteSpeed-Tag
X-Jungle-Id
CloudFront-Viewer-Country
X-B3-Parentspanid
X-VHOST
X-CACHE-AGE
X-Cache-Backend
X-Vdms-Path
X-Servedbyhost
X-Refresh
X-Nananana
X-Origin-Cache-Key
X-Parent-Response-Time
Fastly-Drupal-Html
X-Litespeed-Tag
Vc-Max-Age
X-LB-NoCache
X-Dispatcher-Number
X-Nc
WP-Super-Cache
X-CDN-Cache-Status
X-Datadome
X-Cached-By
Product
X-CACHE-KEY
X-ZONE
X-RequestId
X-Uri
X-DynaTrace-JS-Agent
Resin-Trace
X-ApacheServer
X-PERF
Datacenter
X-VC-TTL
X-Wa
X-M-Log
X-Render-Time
Server-ID
X-M-Reqid
X-Ckpd-Fst-Backend
X-Amz-Meta-Cb-Modifiedtime
GeoIp-Country-Code
NtCoent-Length
Cdn
S-Rt
X-B3-Spanid
X-Varnish-Beresp-TTL
X-Bug-Bounty
X-CS
X-IAuth-Set-Uid
X-TX-ID
FSS-Cache
ServerName
Uri
Locid
X-Fpc
X-TT-LOGID
X-HubSpot-Correlation-Id
Serverhost
X-VCache
True-Client-IP
True-Client-Ip
X-Esi
X-SERVER-NAME
X-HostName
Srv
X-Nf-Ats-Version
X-Nf-Country
X-Nf-Language
GeoIP-Country-Code
X-Dynatrace-Js-Agent
X-Original-Request-Id
X-FPC
CDN
X-Vmg-Version
X-Akamai-Device-Characteristics
X-Old-Content-Length
X-Response-Served-From
Tcn
User-Agent
X-TIME
X-Srv
X-Info
Ngx-Var-Key
ServerHost
X-Cdn-Cache-Status
X-NewRelic-App-Data
X-WA
X-Gamma-Serve
X-Cdn-Forward
X-Webkit-Csp-Report-Only
Request-ID
X-Hit
CacheControlHeader
Xc-Version
Server-Id
X-APP-VERSION
X-Vc
X-Vgn-Hpd-Reason
Cf-Ipcountry
X-Moov-T
X-NC
X-TH-Server
X-Moov-Xdn-Version
Expect-Staple
X-COUNTRY
Hostname
X-Platform-Processor
Cneonction
X-Platform-Router
X-Dispatch
X-Platform-Cluster
X-Amz-Meta-Opti
X-FL-QIT-DEBUG
X-Lb-Nocache
Srvid
X-V
X-Presslabs-Stats
Cloudfront-Viewer-Country
Geoip-Latitude
Cf-Device-Type
X-ServedByHost
X-Geo
PICS-Label
X-S-Cookie
WZWS-RAY
X-User
X-Destination
Permission-Policy
N-Cache
X-Eligible
X-B-Cookie
X-Platform-Server
X-Application
X-External-Request-Id
X-New
Cross-Origin-Embedder-Policy-Report-Only
X-Rollout
X-VCL-Version
X-Oracle-DMS-ECID
Origin-Trial
X-Proxy-CacheRZ
XkeyRZ
X-Zen-Fury
X-Via-PopN
X-Via-PopH
X-Via-PopV
X-Limited
X-Ha-Backend
X-Cache-Date
X-Rocket-Build-Number
X-Instance-Name
X-Correlation-ID
X-Ftr-Request-Id
Epwk-X-Cache
X-Akamai-Pragma-Client-IP
X-Sigma
X-Internal-TTL
X-ElasticPress-Query
X-Sigma-Backend
X-Ua
Ohc-File-Size
X-App
Rtss
X-API-Version
X-Sqd-Stime
X-Lb-Id
X-Sqd-Ctime
Cl-Cache
X-MiniProfiler-Ids
X-MSEdge-Features
X-MSEdge-Flight
X-Via-Edge
Ms-Author-Via
X-Via-SSL
X-VServer
X-Segment-20210421
X-VTEX-Cache-Backend-Connect-Time
X-Via-CDN
Edge-Copy-Time
X-VTEX-Cache-Backend-Header-Time
X-Branch-Name
X-Litespeed-Cache-Control
X-EC-Lua
X-Check-Cacheable
X-Path
X-Serial
Lb
X-Wp-Cf-Super-Cache-Cache-Control
X-Wp-Cf-Super-Cache
X-SIPLIST1
Timeexpire
IsBot
X-Service-Response-Time
X-Acquia-Application-UUID
X-Acquia-Purge-Tags
X-Acquia-Application-Trace
X-Web-Server
Sm-Log-Id
Cmsid
X-Acquia-Site
X-Datacenter
Cmstype
WebServer
CountryCode
X-CSRF-TOKEN
X-CDN-Origin
X-LAGOON
Servername
X-Irp-Debug
X-Traceid
Warning
X-Ramcache
Ngx
X-Th-Server
X-DynaTrace
X-Snapshot-Date
X-RAMCache
X-Amz-Meta-Sha256
Ohc-Cache-HIT
X-IN-APIGATEWAYSSL
X-Origin-Upstream-Status
X-Shardid
X-Sorting-Hat-Podid
X-Sorting-Hat-Shopid
X-IN-APIGATEWAY
X-Dw-Trace-Id
X-Shopid
X-Amz-Meta-S3b-Last-Modified
X-Udemy-Cache-App-Namespace
X-Fastly-Backend-Reqs
Wpo-Cache-Message
Wpo-Cache-Status
Fl-Custom-Application