Threat Level: green Handler on Duty: Daniel Wesemann

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
CF-RAY
Expect-CT
Accept-Ranges
X-XSS-Protection
Pragma
X-Powered-By
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Alt-Svc
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
X-Xss-Protection
X-UA-Compatible
X-Served-By
X-Download-Options
X-Timer
X-Request-Id
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
X-Permitted-Cross-Domain-Policies
Access-Control-Allow-Credentials
Accept-CH
Content-Security-Policy-Report-Only
X-DNS-Prefetch-Control
X-Runtime
Accept-CH-Lifetime
X-AspNet-Version
X-Check
X-Drupal-Cache
X-Ua-Compatible
X-Generator
X-Cache-Status
Server-Timing
X-Cacheable
Timing-Allow-Origin
X-Envoy-Upstream-Service-Time
X-FRAME-OPTIONS
X-Iinfo
X-Request-ID
X-Drupal-Dynamic-Cache
X-Content-Security-Policy
Feature-Policy
Access-Control-Expose-Headers
Content-Encoding
X-CDN
Upgrade
Status
X-AspNetMvc-Version
CF-Ray
Access-Control-Max-Age
X-Amz-Request-Id
X-Amz-Id-2
Cf-Edge-Cache
Permissions-Policy
X-Via
Host-Header
EagleId
Keep-Alive
X-Cache-Group
Request-Context
X-Robots-Tag
X-Backend
X-UA-Device
X-Hacker
X-AH-Environment
X-Proxy-Cache
X-Server
X-Turbo-Charged-By
X-Rq
X-Age
X-Ws-Request-Id
X-Vhost
Cf-Apo-Via
X-Amz-Version-Id
Xkey
X-Dispatcher
X-Swift-SaveTime
X-Swift-CacheTime
Grace
X-Server-Powered-By
Ali-Swift-Global-Savetime
Allow
X-Varnish-Cache
P3p
X-LiteSpeed-Cache
X-OneAgent-JS-Injection
X-Page-Speed
X-Pingback
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Dns-Prefetch-Control
X-Device
X-Cache-Lookup
EagleEye-TraceId
X-WebKit-CSP
X-Host
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Backend-Server
Cf-Railgun
X-Server-Id
X-Response-Time
X-Readtime
Surrogate-Control
X-Akam-SW-Version
X-Ruxit-JS-Agent
X-HW
Request-Id
X-Cloud-Trace-Context
X-Litespeed-Cache
X-Node
X-Country
Content-Location
X-Nginx-Cache-Status
X-Application-Context
Accept-Ch-Lifetime
X-Nginx-Upstream-Cache-Status
X-ASPNET-VERSION
X-NWS-LOG-UUID
X-Country-Code
Service-Worker-Allowed
X-Content-Type
X-Trace
X-Url
Cache-Tag
X-Clacks-Overhead
X-Amz-Server-Side-Encryption
Rating
X-Times
X-Rack-Cache
X-Vname
X-TtlSet
X-PC
Cross-Origin-Opener-Policy
X-Mcache
X-Edge
X-Midtier
X-Browser-Type
X-Server-Name
X-Daa-Tunnel
Nginx-Cache
AR-SID
AR-ATIME
AR-PoweredBy
AR-Request-ID
Accept-Ch
X-Powered-By-Plesk
X-Cache-TTL
X-Cnection
X-FTR-Request-ID
X-ESI
X-Ac
X-D2id
X-Element-Page-Cache
X-GitHub-Request-Id
Edge-Control
Verso
X-Cdn-Fetch
X-Exp-Id
X-Kinja
X-GoogleNews-Bot
X-Kinja-Build
X-Kinja-Revision
X-Exp-Variant
X-Kinja-Server
X-CST
AR-CACHE
X-MS-InvokeApp
X-Ser
X-Vcap-Request-Id
X-Abt-Application-Version
X-Dw-Request-Base-Id
X-Upstream
X-Navigation-Version
Fastly-Restarts
X-B3-TraceId
X-Webkit-Csp
X-ECACHE
SPRequestDuration
SPIisLatency
X-FastCGI-Cache
X-Mod-Pagespeed
X-Amz-Rid
X-Erf-Bev-Bev
X-Kraken-Loop-Name
X-Instrumentation
X-Erf-Bev-Bev-Is-Generated
X-Server-Lifecycle-Phase
X-PDP-UNCACHING-HASH
X-Client-IP
SPRequestGuid
X-SharePointHealthScore
X-ARC
X-Goog-Hash
X-Edge-Location-Klb
X-Kinsta-Cache
Display
X-Sol
Pagespeed
X-Middleton-Display
X-Oneagent-Js-Injection
X-Powered-CMS
X-Mg-S
X-Ratelimit-Limit
X-Amzn-Trace-Id
Edge-Cache-Tag
S
Cache-Status
X-Version
Access-Control-Request-Method
Response
X-Middleton-Response
X-VARITI-CCR
X-Ratelimit-Remaining
X-NF-Request-ID
RTSS
X-Forwarded-For
Realpath
X-T
X-Cache-Key
Cross-Origin-Resource-Policy
X-Content-Digest
X-Server-ID
X-TTL
Fastcgi-Cache
X-Cached
X-Recruiting
X-Correlation-Id
X-ORACLE-DMS-RID
X-MSEdge-Ref
X-Fastly-Request-ID
X-NODE
X-Shield-Request-Id
X-TraceId
MicrosoftSharePointTeamServices
Front-End-Https
X-Ua-Browser
X-Forwarded-Proto
X-PressLabs-Stats
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Ruxit-Js-Agent
X-Request-Received
X-Request-Processing-Time
TP-Cache
X-Frontend
Payment
Arr-Disable-Session-Affinity
X-HS-Cache-Config
X-HS-Hub-Id
X-HS-Content-Id
X-LLID
Public-Key-Pins
Server-Node
Count-Hit
X-Protected-By
Content-MD5
X-Newrelic-App-Data
X-GUploader-UploadID
X-LB-Cache
X-Accel-Expires
X-HS-Combine-CSS
X-RateLimit-Remaining
X-Distributor
X-Varnish-TTL
X-TEC-API-VERSION
X-TEC-API-ROOT
MS-Author-Via
X-TEC-API-ORIGIN
X-Origin-Server
Surrogate-Key
X-Ezoic-Cdn
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-ORACLE-DMS-ECID
X-Microsite
X-Request-Handler-Origin-Region
X-Content-Security-Policy-Report-Only
X-Country-Code-Real
X-Jurisdiction
X-HP-Trace-Id
X-FTR-Cache-Status
X-FTR-Balancer
X-FTR-Backend-Server
X-FTR-Backend
X-HP-Webp
X-Www-Served-By
Accept-Charset
Mrf-Cache-Status
Host
MRF-Tech
X-Varnish-Server
X-Az
X-B3-TraceId-Primal
X-AppVersion
X-App-Server
X-Activity-Id
X-Ua-Device
X-Cluster-Name
X-Amz-Meta-S3cmd-Attrs
Cache-Tags
Cleartype
Retry-After
X-Varnish-Backend
X-Ttl
X-Unique-Id
X-Goog-Metageneration
Filterid
X-FTR-Expires
X-Debug
X-Hits
Server-Name
X-Git-Hash
X-Aspnet-Version
Access-Control-Allow-Method
X-Logged-In
X-Varnish-Ttl
X-Upgrade-Enabled
X-Load-Cache
X-Id
X-Azure-Ref
X-Envoy-Decorator-Operation
X-NGENIX-Cache
X-FB-Debug
X-CSRF-Token
X-Geo-Country
TCN
X-Amzn-RequestId
X-Amz-Apigw-Id
X-Hostname
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-Seen-By
X-B
TP-L2-Cache
X-TT
X-Proxy
Section-Io-Cache
X-Cache-Control
Viewport
Healthy
X-Request-Guid
DC
X-Type
X-Grace
X-Revision
X-B3-Sampled
X-Fb-Rlafr
X-Contextid
X-Trace-Id
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
Fastly-SIE
Fastly-SWR
X-Time
X-F-Cache
X-CCDN-CacheTTL
X-N
X-CCDN-Origin-Time
X-Hcs-Proxy-Type
X-Ratelimit-Reset
Content-Disposition
X-Mobile
Paypal-Debug-Id
X-WP-CF-Super-Cache
X-WP-CF-Super-Cache-Cache-Control
Referer-Policy
X-Nf-Request-Id
X-Varnish-Grace
X-Amz-Replication-Status
X-XRDS-LOCATION
X-Magnolia-Registration
X-Origin-Cache
X-Webkit-CSP
Pinterest-Generated-By
Pinterest-Version
X-Pinterest-Rid
X-Via-JSL
X-DIS-Request-ID
X-Debug-Info
X-Wormhole-Sdk
X-Page-Id
Version
X-Oracle-Dms-Ecid
X-Px
X-Ismobilevalue
X-Datadog-Trace-Id
X-Datadog-Sampling-Priority
X-Datadog-Parent-Id
Amp-Access-Control-Allow-Source-Origin
X-ProcessESI
X-G
X-Content-Options
X-Rid
X-RemovedCookies
X-UUID
X-Debug-IsConnected
X-Debug-IsPreview
X-Source
X-Rule
X-Tumblr-Pixel
X-Node-Name
X-Adobe-Loc
X-App-Environment
X-Tumblr-User
X-Template
X-Tumblr-Pixel-1
X-Tumblr-Pixel-0
X-Adobe-Content
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Storage
X-RTag
X-Wix-Request-Id
X-Hl-Ver
NGB
MS-CV
Cross-Origin-Window-Policy
X-Whom
SD-X-WS
VIX-Pulpo-Node
X-NYM-Debug-Backend
X-Instance
X-Datadog-Sampled
VIX-Pulpo-Upstream-Status
X-Region
Ms-Operation-Id
X-Is-Bot
X-Rendered-As
X-Signature
X-Status
X-Device-Type
X-Cacheable-TTL
GEO-INFO
X-B-Cache
X-Backend-Name
X-User-Agent
X-Proxy-Cache-Info
X-FW-Server
X-FW-Static
X-FW-Type
X-L-Path
X-FW-Serve
X-FW-Hash
Country
X-Environment-Context
X-FW-Dynamic
X-ServerID
X-FW-Version
X-Cache-Age
Charset
Countrycode
X-RM-Cache-TTL
X-IPS-LoggedIn
ServerID
Front
Akamai-GRN
SRV
X-NWS-UUID-VERIFY
X-Framework
X-Real-IP
X-EdgeConnect-Cache-Status
X-WP-CF-Super-Cache-Active
X-Cache-Grace
X-ECache
X-AB
Liferay-Portal
X-Language
X-Xrds-Location
X-Amzn-Remapped-Content-Length
X-B3-SpanId
X-Cache-Hit
X-Air-Pt
X-Oracle-Dms-Rid
X-Api-Version
X-Content-Powered-By
X-Akamai-Request-ID2
X-Fastly-Request-Id
X-DataDome
X-Air-Hostname
X-Air-Trace-Id
X-Air-Source
X-WebKit-CSP-Report-Only
OT-Force-Account-Verify
X-Servername
X-VC
Accept-Language
Xet-Cookie
X-Sucuri-ID
X-UA
X-Sucuri-Cache
X-Mode
X-VC-Cache
X-URL
From-Origin
X-Cache-Status-Check
X-Tt-Logid
LB
Refresh
Access-Control-Request-Headers
X-SRV
Backend
Webserver
X-HTML-Minification-Powered-By
X-Nginx-Cache
X-Handled-By
X-Mg-Request-UUID
Upgrade-Insecure-Requests
X-Git-Commit
X-Container-Uri
X-Rn-Rsrv
X-UPSTREAM-Address
Meta-Geo
X-Cache-Time
X-Rewrite-Enabled
X-JoinUs
X-SaId
Filters
X-RCS-CacheZone
X-PHP-Host
X-R9-Blue-Green-Version
X-S
X-Cms-Context
X-Hosted-By
TWC-Connection-Speed
TWC-GeoIP-LatLong
TWC-GeoIP-Country
TWC-Device-Class
X-Request-URI
X-Labrador-Cache-Channel
X-Provided-By
X-Origin-Hint
X-Webstats-RespID
TWC-Privacy
X-Generated-By
X-RateLimit-Limit
X-Varnish-Age
TWC-Locale-Group
X-Tumblr-Pixel-2
X-Forwarded-Host
X-Origin-Date
Webcakes-App-Version
Webcakes-Region
Xserver
Property-Id
X-Adobe-Source
Webcakes-App-Name
X-Restarts
X-Redis-Cache
X-ProxyCache-Status
X-Scope-Id
Mn-Server-Ip
X-ProxyCache-Key
X-Served-From
Section-Io-Id
Cache
Apigw-Requestid
X-Reqid
ServedBy
Atl-Traceid
X-Cache-Debug
X-Tb
X-Storefront-Renderer-Rendered
X-Locale
X-Tcp-Rtt
Url
X-Geo-Region
X-Httpd
X-Lambda-Id
X-Is-Desktop
X-Is-Supported-Browser
X-Skip-Cache
X-Is-Mobile
X-Vcl-Version
X-Xfnlog-Site
X-Site-Version
X-Logging-Id
X-Tncms
X-Browser-Name
X-BYPASS-REASON
X-Alternate-Cache-Key
X-Akamai-Edgescape
Web-Mar-Node
X-Accel-Version
X-Cache-Host
X-Web-Node
X-Fetched-On
X-Shopify-Stage
X-Format
X-Loop
X-No-Session
X-Is-Tablet
X-Optimistic-Header
X-Origin
X-Proxy-Build
Selected-Fe
X-Cluster
X-Detected-As
X-Director
X-IPLB-Instance
X-Frame-Option
X-IPLB-Request-ID
Onion-Location
X-Say-TTL
X-Say-Cacheable
X-Upstream-Ht
X-SayCDN-TTL
X-Varnish-Cache-Hits
X-Timing-Wait
X-Soup
X-Upstream-Ct
X-Varnish-Beresp-Grace
X-VCT
X-VWS-Id
X-Cloudmap
X-Edge-Location
X-RID
X-Zipkin-Id
X-Extlb
X-Cache-Operation
X-Cache-Rule
X-ShardId
X-Sorting-Hat-ShopId
X-Proxied
X-Connection-Hash
X-AWS-Id
X-Routing-Service
X-ShopId
X-LJ-Flow-ID
Expiry
X-Sorting-Hat-PodId
X-Vcache
X-Ms-Request-Id
X-Cache-Expired-At
X-Ms-Version
X-CDN-Forward
X-Endurance-Cache-Level
X-INCAP-ABP
X-Lagoon
X-Aws-Lambda-Call-Status
Frame-Options
X-GeoCode
X-GeoCountry
Source
Cdn-Requestid
WPO-Cache-Message
X-WP-CF-Super-Cache-Cookies-Bypass
WPO-Cache-Status
Priority
X-Azure-Ref-OriginShield
X-Fastcgi-Cache
Protected
Environment
X-Cache-Action
CF-IPCountry
X-Proxy-Cache-Status
Thinkindot-Control
X-Thinkindot-L3
TDXMobile
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-Generation-Time
X-Shield-Cache-Expires
Fastcgi-Useragent
X-CMSURLCustom
X-Drupal-Cache-Tags
X-PHP-Backend
Uber-Trace-Id
X-Origin-TTL
X-Origin-CC
X-Drupal-Cache-Contexts
X-Cdn-Origin
X-App-Version
X-Cluster-Node
X-Pass-Why
X-Urbn-Context-Path
Locale
X-GEO
X-Urbn-Site-Id
X-ID
X-Worker
X-Rocket-Nginx-Serving-Static
X-Aspnetmvc-Version
Azure-SiteName
Azure-InstanceId
X-Buckets
Azure-SlotName
Azure-Version
Azure-RegionName
Sid
Cache-Tv-Group
X-FB-TRIP-ID
Node
X-XRDS-Location
X-Vercel-Id
X-Vercel-Cache
X-Auth-Group-Type
CDN-EdgeStorageId
CDN-RequestPullCode
CDN-RequestPullSuccess
CDN-RequestCountryCode
CDN-CachedAt
Cache-Hits
CDN-Cache
CDN-Uid
CDN-PullZone
X-B3-Traceid
Cross-Origin-Embedder-Policy
X-Server-W
X-Tumblr-Pixel-3
X-TA-CDN-Provider
X-Pad
Alternate-Protocol
AMP-Access-Control-Allow-Source-Origin
X-A
X-Client-Ip
X-DC
X-Cache-Server
X-Tx-Id
Wxu-Next-Region
Surrogated-Key
Sslversion
T-Server
Wxu-Next-Hostname
Wxu-Next-Commit
X-Aed
X-Bc-Bl
X-BCube-Filmed-By
X-Bl-Debug
Rendered-Blocks
X-A-Wwc
X-A-Dam
X-A-Dcw
X-A-Dgt
X-A-Ccd
Lang
Cdn-Request-Time
Content-Secure-Policy
DB-Nickname
DCR-Decision-By
Cdn-Host
Candidate-Md5Url
X-LSADC-Cache
A
Cache-Provider
DCR-Processing-Time-Ms
Fastly-SSL
Ngx.Var.Host
Odigeo-Trace-Id
Origin-Agent-Cluster
Meta-Geo-Continent
MD5-Digest
Gannett-Cam-Experience-Id
X-Cache-Id
Magicmarker
PFcat
X-DefElseHash
X-Req
X-Rojux
X-ScT
X-SRCache-Key
X-Origin-Expires
X-Org
X-ND-Cache
X-NodeID
X-Op-Id-All
X-TIM-N
X-V-Cache
X-Via-Fastly
X-Viewer-Country
X-Vtex-Remote-Cache
X-Vdms-Version
X-VarnishDD-TTL
X-Varnish-CookieHashed-On
X-Varnish-CookieINHashed-On
X-Varnish-Remaining-TTL
X-Level-Front-Cache
X-Ig-Push-State
X-DefHash
X-Developer
X-Dispatcher-Server
X-Ec-Fail
X-D
X-Core-Value
X-Cache-TTL-Remaining
X-Conf
X-Content-Age
X-Ec-GeoHdr
X-Edge-Server
X-Gzip
X-HN
X-Ig-Origin-Region
X-GeoIP-City
X-Generated-On
X-Epic-Correlation-Id
X-Esi-Check
X-Fastly-Backend
X-Cache-NE
X-Custom-Header
X-Service
Mime-Version
X-LiteSpeed-Cache-Control
User-Cache-Control
X-Block-Status
Producers
X-Loc
Platform
Powered-By
X-RateLimit-Remaining-Second
Req-ID
RNT-Time
X-Bip
RNT-Machine
X-Pubstack
X-Region-Sid
X-Eu-Site
X-RateLimit-Limit-Second
X-Cache-FS-Status
X-Section
X-HS-Content-Campaign-Id
X-Server-IP
X-Hnp-Log
L5d-Success-Class
X-App-Name
X-SD-PageType
X-Scheme
Server-Host
X-Jobs
X-Cache-Info
X-Request-Time
NM-Fastcgi-Cache
X-SB
X-Cache-Bucket
X-Micro-Cache
X-Origin-Response-Time
X-Nyt-Route
X-Origin-Time
X-PAYTM-SRV-ID
X-Policy
X-Platform
X-Access
X-Acquia-Purge-Cdn-Unconfigured
X-Node-Id
X-NMSegId
X-Amz-Storage-Class
X-AK-Request-ID
X-Mvc-Supplant-Cachable
X-Aicache-OS
X-Mly-Id
X-B3-Trace-ID
True-Client-Country-4JS
X-Backend-Instance
X-Powered-By-VTEX-Cache
Ssr
L
X-Proto
Tube-Get-Contents
Tube-Got-Eval
Vix-Hermes-Req-Id
W
V-Age
Tube-Return
Tube-Got-Results
X-Men
X-CacheTTL
Apple-News-Services-Request-Url
X-Debug-Cache-Store
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
AKAMAI
Apple-News-Services-Handled
X-Debug-Cache-Fetch
X-VG-TLSProxy
Cdnsip
X-GeoIP-Country-Code
Is-Eu
X-Varnish-Hostname
X-GeoIP
CDCHOST
Adler-Geo
X-VG-WebCache
Server-Info
X-Forwarded-Site
X-Fmm-Version
X-FC-Vary-Parameters
X-Fastly-Cache
X-DPWN-IS-SECURE
XM
X-Wikidot-Static-Cache
X-Geo-Header
X-VTEX-Cache-Server
X-VTEX-Cache-Time
X-Gen-Mode
X-Wikidot-Backend
X-Gdpr
Click-Count-Action-Start
Cdncip
Fastly-Backend-Name
X-Clientip
Esi-Enabled
X-Tb-Optimization-Total-Bytes-Saved
X-GoCache-CacheStatus
Click-Count-Error
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
HA-Ipaddr
Host-ID
Ha-Gx-Prefs
X-CGP
X-Sn-Servicetimems
X-Test
Edge-Cache
X-Csrf-Jwt
Country-Code
X-Thanos
Content-Script-Type
X-GeoIP-Region-Code
Content-Style-Type
X-UA-Device-Type
X-Varnish-Director
HostName
X-HITS
X-Varnish-Beresp-Ttl
X-Dc
X-Ec-Custom-Error
X-Cs
X-Cdn-Srv
X-Hash
X-Location
X-Human
X-Contensis-Viewer-Groups
X-Cache-Aspx
X-Depends
X-Date
X-BBC-Edge-Cache-Status
X-Auto-Login
X-CUA
Req-Svc-Chain
Fastly-GeoIP-CountryCode
DSUID
X-Var-Ttl
X-Varnish-Authentication
X-Slack-Shared-Secret-Outcome
X-Nginx-Cache-Key
Mail-Subject
X-Slack-Backend
Machine
X-Varnish-Beresp-Status
Cluster
Yak-Timeinfo
X-Mvc-Supplant-OutputCached
BehaviorPad-Version
X-We-Are-Hiring
C-Via
X-Varnishpool
Canary
Cache-Key
NGX
Gh-Request-Id
On-Server
Server-Hostname
Server-Ext
Sever-Int
X-Pool
X-Accel-Expires-Debug
Web-Mar-Region
We-Hiring
Release
X-Proxied-Request
X-Request-Host
Origin-EX
X-Request-Start
Pramga
Proxy-Firewall
Origin
Origin-CC
X-AIR-PT
X-NGINX-Cache
Debug
X-Ah-Environment
Fusion-Source
X-Ad-Load-Variation
Fusion-Template-Id
Fusion-Content-Id
Fusion-Deployment-Id
Fusion-Component-Id
X-WA-Info
Fusion-Content-Source
X-Varnish-Hits
X-MP-GENERATED-AT
X-LB-ID
Redirect-Candidate
X-CLOUD-TRACE-CONTEXT
X-Device-Os
X-APP
X-Newrelic-Synthetics
X-Tec-Api-Origin
X-Tec-Api-Root
SID
X-Tec-Api-Version
X-HA-Backend
Fastly-Drupal-HTML
GeoIP-Latitude
X-Content-Length
X-Via-Popv
X-Via-Poph
Pics-Label
X-Via-Popn
X-Zone
X-RateLimit-Reset
X-VHOST
CloudFront-Viewer-Country
X-NCache
X-Up
X-Akamai-Transformed
X-From
CDN-RequestId
X-CACHE-AGE
X-Jungle-Id
X-Cache-Backend
X-Nananana
X-B3-Parentspanid
X-Servedbyhost
X-LiteSpeed-Tag
Vc-Max-Age
X-Litespeed-Tag
X-Dispatcher-Number
X-Nc
X-LB-NoCache
X-Vdms-Path
X-Refresh
X-Parent-Response-Time
X-CACHE-KEY
Fastly-Drupal-Html
X-ZONE
X-RequestId
Product
X-CDN-Cache-Status
X-Uri
X-Wa
X-Cached-By
Server-ID
WP-Super-Cache
X-DynaTrace-JS-Agent
X-PERF
X-VC-TTL
Cdn
Resin-Trace
Datacenter
X-Datadome
X-Render-Time
X-ApacheServer
X-M-Log
X-Ckpd-Fst-Backend
X-M-Reqid
X-B3-Spanid
S-Rt
GeoIp-Country-Code
X-CS
NtCoent-Length
X-Bug-Bounty
X-Origin-Cache-Key
X-Amz-Meta-Cb-Modifiedtime
X-IAuth-Set-Uid
X-Fpc
Uri
ServerName
FSS-Cache
X-Varnish-Beresp-TTL
X-HubSpot-Correlation-Id
True-Client-Ip
Locid
Serverhost
X-Esi
X-SERVER-NAME
X-HostName
X-TX-ID
X-Nf-Country
X-Nf-Ats-Version
X-Nf-Language
True-Client-IP
X-TT-LOGID
X-Akamai-Device-Characteristics
X-Vmg-Version
X-VCache
Srv
User-Agent
Tcn
X-Dynatrace-Js-Agent
GeoIP-Country-Code
X-TIME
X-Srv
ServerHost
X-Info
X-Cdn-Cache-Status
X-Old-Content-Length
X-Gamma-Serve
X-FPC
X-NewRelic-App-Data
CDN
X-Hit
X-Webkit-Csp-Report-Only
Request-ID
X-Vc
Ngx-Var-Key
X-Original-Request-Id
X-Response-Served-From
Xc-Version
X-WA
CacheControlHeader
X-Vgn-Hpd-Reason
X-APP-VERSION
X-Cdn-Forward
Server-Id
X-Moov-T
X-Moov-Xdn-Version
Expect-Staple
Hostname
X-COUNTRY
X-FL-QIT-DEBUG
X-NC
Cneonction
Srvid
X-TH-Server
X-Amz-Meta-Opti
X-V
Cf-Ipcountry
X-Presslabs-Stats
X-Dispatch
X-Lb-Nocache
X-Geo
X-Platform-Cluster
X-Platform-Processor
X-Platform-Router
X-Eligible
WZWS-RAY
X-New
X-Platform-Server
X-Rollout
Geoip-Latitude
X-ServedByHost
Permission-Policy
PICS-Label
Cloudfront-Viewer-Country
N-Cache
Cf-Device-Type
X-Oracle-DMS-ECID
X-VCL-Version
Origin-Trial
X-Via-PopH
X-Destination
X-Ha-Backend
X-Proxy-CacheRZ
X-Via-PopV
X-B-Cookie
X-Limited
X-Application
X-Via-PopN
XkeyRZ
X-User
Cross-Origin-Embedder-Policy-Report-Only
X-S-Cookie
X-External-Request-Id
Ohc-File-Size
X-Zen-Fury
X-Correlation-ID
X-Akamai-Pragma-Client-IP
X-Ua
X-ElasticPress-Query
X-Ftr-Request-Id
X-Internal-TTL
X-App
Rtss
X-Sqd-Ctime
Ms-Author-Via
X-Litespeed-Cache-Control
X-Sqd-Stime
X-Cache-Date
X-Instance-Name
X-Via-SSL
X-Via-Edge
X-Lb-Id
X-Via-CDN
X-Path
X-EC-Lua
Epwk-X-Cache
X-MSEdge-Features
X-Sigma-Backend
Edge-Copy-Time
X-MSEdge-Flight
Cl-Cache
X-Serial
X-Rocket-Build-Number
X-Check-Cacheable
X-MiniProfiler-Ids
X-VTEX-Cache-Backend-Header-Time
X-Sigma
X-VTEX-Cache-Backend-Connect-Time
X-Wp-Cf-Super-Cache
X-Wp-Cf-Super-Cache-Cache-Control
Lb
X-SIPLIST1
X-Datacenter
Timeexpire
IsBot
X-Acquia-Purge-Tags
X-Segment-20210421
X-Acquia-Application-Trace
X-Acquia-Application-UUID
X-Web-Server
X-Service-Response-Time
X-API-Version
Sm-Log-Id
X-VServer
X-Acquia-Site
Cmsid
Cmstype
X-Branch-Name
Servername
CountryCode
X-CSRF-TOKEN
X-CDN-Origin
X-LAGOON
X-DynaTrace
X-Traceid
X-Irp-Debug
X-Ramcache
Fl-Custom-Application
X-RAMCache
X-Th-Server
X-Snapshot-Date
Ngx
X-Amz-Meta-S3b-Last-Modified
Ohc-Cache-HIT
X-IN-APIGATEWAYSSL
X-Sorting-Hat-Shopid
X-Sorting-Hat-Podid
X-Shardid
X-Shopid
X-IN-APIGATEWAY
X-Dw-Trace-Id
X-Amz-Meta-Sha256
X-Origin-Upstream-Status
X-Fastly-Backend-Reqs
X-Udemy-Cache-App-Namespace
Wpo-Cache-Message
Wpo-Cache-Status
Warning