Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Accept-Ranges
Expect-CT
X-XSS-Protection
Pragma
CF-RAY
X-Powered-By
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Access-Control-Allow-Origin
Referrer-Policy
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
X-UA-Compatible
P3P
X-Xss-Protection
X-Served-By
X-Download-Options
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
X-Request-ID
Access-Control-Allow-Credentials
X-Request-Id
CF-Ray
X-Permitted-Cross-Domain-Policies
X-AspNet-Version
Alt-Svc
Content-Security-Policy-Report-Only
X-Runtime
X-DNS-Prefetch-Control
X-Drupal-Cache
X-Check
X-Cache-Status
X-Generator
X-Cacheable
P3p
Timing-Allow-Origin
X-FRAME-OPTIONS
X-Iinfo
X-Envoy-Upstream-Service-Time
X-Content-Security-Policy
X-Drupal-Dynamic-Cache
Feature-Policy
Content-Encoding
Upgrade
Access-Control-Expose-Headers
Status
X-AspNetMvc-Version
X-CDN
Access-Control-Max-Age
X-Via
Server-Timing
X-UA-Device
X-Robots-Tag
Request-Context
X-Turbo-Charged-By
X-Amz-Request-Id
X-Cache-Group
EagleId
X-Amz-Id-2
X-Backend
Keep-Alive
X-AH-Environment
X-Proxy-Cache
X-Ws-Request-Id
X-Server
X-Age
Host-Header
X-Hacker
X-Ua-Compatible
Cf-Edge-Cache
X-Vhost
X-Server-Powered-By
X-Rq
Allow
X-Dispatcher
X-Varnish-Cache
Grace
X-Amz-Version-Id
X-LiteSpeed-Cache
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-OneAgent-JS-Injection
X-WebKit-CSP
Accept-CH
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Device
Cf-Apo-Via
X-Page-Speed
Cf-Railgun
X-Aws-Lambda-Call-Status
X-Server-Id
X-Host
X-Pingback
X-Node
X-Cache-Spec
X-Nginx-Cache-Status
X-Akam-SW-Version
Surrogate-Control
X-Dns-Prefetch-Control
X-Backend-Server
EagleEye-TraceId
X-Cache-Lookup
Request-Id
X-Readtime
X-Ruxit-JS-Agent
X-HW
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Cloud-Trace-Context
X-Content-Security-Policy-Report-Only
X-Trace
X-Application-Context
X-Response-Time
X-CST
Permissions-Policy
Accept-Ch-Lifetime
X-Mod-Pagespeed
X-Nginx-Upstream-Cache-Status
Fastly-Restarts
Accept-CH-Lifetime
X-Edge
X-Country
Content-Location
X-WebKit-CSP-Report-Only
X-Content-Type
X-Mcache
X-ECACHE
Rating
X-Clacks-Overhead
X-MS-InvokeApp
X-Url
X-Vname
X-PC
X-TtlSet
X-Midtier
X-Amz-Server-Side-Encryption
X-VARITI-CCR
RTSS
Cache-Tag
X-Varnish-TTL
X-Vcap-Request-Id
X-Ac
X-Element-Page-Cache
Verso
Origin-Trial
X-B3-TraceId
X-Kinja-Build
X-D2id
X-Kinja-Server
X-Kinja-Revision
X-GoogleNews-Bot
X-Use-Magma
X-Kinja
X-Exp-Variant
X-Exp-Id
X-Cdn-Fetch
X-Rack-Cache
X-Cnection
X-Server-Name
X-Cache-TTL
X-Powered-By-Plesk
Service-Worker-Allowed
Xkey
X-GitHub-Request-Id
X-Abt-Application-Version
X-Client-IP
X-Fastcgi-Cache
X-Navigation-Version
X-NWS-LOG-UUID
X-ESI
X-SharePointHealthScore
SPRequestGuid
Edge-Control
X-Amz-Rid
X-Cached
X-Px
X-Mg-S
X-Erf-Bev-Bev-Is-Generated
X-Browser-Type
X-Server-Lifecycle-Phase
X-Instrumentation
X-Kraken-Loop-Name
X-Erf-Bev-Bev
Arr-Disable-Session-Affinity
X-Ttl
SPIisLatency
SPRequestDuration
X-Upstream
X-Correlation-Id
X-Cache-Key
Display
X-Middleton-Display
X-Sol
Pagespeed
X-Litespeed-Cache
Content-MD5
X-Dw-Request-Base-Id
X-SRCache-Store-Status
X-SRCache-Fetch-Status
Access-Control-Request-Method
Edge-Cache-Tag
X-Goog-Hash
X-XRDS-Location
X-Daa-Tunnel
Front-End-Https
X-NF-Request-ID
X-Country-Code
Public-Key-Pins
X-Version
X-RateLimit-Remaining
X-Forwarded-For
AR-ATIME
X-Powered-CMS
AR-PoweredBy
AR-Request-ID
AR-SID
AR-CACHE
X-Id
X-HP-Trace-Id
TCN
X-HP-Webp
X-Jurisdiction
X-MSEdge-Ref
X-Recruiting
X-T
X-Content-Digest
X-Accel-Expires
Response
X-Middleton-Response
MRF-Tech
X-B3-TraceId-Primal
Mrf-Cache-Status
X-Ser
X-Shield-Request-Id
TP-L2-Cache
TP-Cache
X-Fastly-Request-ID
S
X-Hits
Nginx-Cache
X-Amzn-Trace-Id
X-Kinsta-Cache
X-Request-Received
Cache-Status
X-Edge-Location-Klb
X-Request-Processing-Time
X-HS-Hub-Id
Server-Node
X-HS-Content-Id
X-HS-Combine-CSS
X-HS-Cache-Config
X-Distributor
X-TTL
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-TEC-API-VERSION
X-Grace
Cache-Tags
MicrosoftSharePointTeamServices
Alternate-Protocol
Fastcgi-Cache
Server-Name
X-Protected-By
X-DataDome
X-Ratelimit-Limit
X-DIS-Request-ID
X-Ezoic-Cdn
X-Geo-Country
X-Ruxit-Js-Agent
X-Origin-Server
X-LB-Cache
X-Request-Handler-Origin-Region
X-Frontend
X-Microsite
X-Ua-Browser
X-Debug-Info
X-Rid
Cross-Origin-Opener-Policy
X-Ratelimit-Reset
Healthy
Payment
X-Www-Served-By
Filterid
X-Varnish-Backend
X-Forwarded-Proto
X-NGENIX-Cache
X-Logged-In
X-Git-Hash
X-FB-Debug
X-Page-Id
Cleartype
X-PressLabs-Stats
X-Load-Cache
X-B3-Sampled
Charset
Content-Disposition
X-Ratelimit-Remaining
X-VCache
X-Webkit-Csp
X-ASPNET-VERSION
X-Origin-Cache
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Cluster-Name
X-LLID
MS-Author-Via
X-Oracle-Dms-Rid
X-Oracle-Dms-Ecid
X-Hostname
DC
X-GUploader-UploadID
X-Goog-Metageneration
X-Upgrade-Enabled
Accept-Charset
Access-Control-Allow-Method
Retry-After
Cross-Origin-Resource-Policy
X-Proxy
X-Activity-Id
X-Az
X-AppVersion
X-F-Cache
X-Contextid
X-Seen-By
X-Route-Name
X-Hosted-By
X-Is-Crawler
X-Flags
X-Signature
X-Type
X-Providence-Cookie
X-Request-Guid
Accept-Ch
X-B-Cache
X-Amz-Replication-Status
X-Aspnet-Duration-Ms
X-Revision
X-Varnish-Server
X-B
X-TT
X-Wix-Request-Id
X-Amz-Meta-S3cmd-Attrs
X-Whom
Referer-Policy
X-Azure-Ref
X-App-Environment
Paypal-Debug-Id
Surrogate-Key
Viewport
Amp-Access-Control-Allow-Source-Origin
X-DynaTrace
X-RateLimit-Limit
Count-Hit
X-Source
X-Aspnetmvc-Version
X-Fb-Rlafr
Realpath
X-Tt-Trace-Tag
X-Tt-Trace-Host
X-Akamai-Edgescape
X-Mobile
X-App-Server
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-ORACLE-DMS-ECID
X-B3-Traceid
X-ORACLE-DMS-RID
X-FastCGI-Cache
Host
X-Cache-Control
X-EdgeConnect-Cache-Status
X-HTML-Minification-Powered-By
Version
X-Original-Request-Id
Refresh
X-Response-Served-From
X-Nginx-Cache
X-Varnish-Grace
X-URL
X-Tumblr-Pixel-0
X-Tumblr-Pixel-1
X-Tumblr-Pixel
X-Tumblr-User
X-N
X-Cache-Rule
X-Oneagent-Js-Injection
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
SD-X-WS
Access-Control-Request-Headers
X-Envoy-Decorator-Operation
X-Magnolia-Registration
Section-Io-Cache
X-Varnish-Age
X-Cache-Time
X-Newrelic-App-Data
X-RTag
X-Adobe-Content
X-UUID
Ms-Operation-Id
MS-CV
X-Cache-Status-Check
X-L-Path
X-Cache-Expired-At
X-Page-View
X-Environment-Context
X-Adobe-Loc
X-Servername
X-Framework
X-Jobs
X-RemovedCookies
X-Rendered-As
X-G
X-Cacheable-TTL
NGB
X-Cache-Grace
X-ProcessESI
X-Content-Powered-By
X-Rule
Protected
GEO-INFO
X-Status
X-Device-Type
X-Is-Bot
X-FW-Hash
X-FW-Serve
X-FW-Dynamic
Akamai-GRN
X-Akamai-Request-ID2
X-FW-Server
X-FW-Static
X-Cache-Age
X-Http-Reason
X-FW-Version
X-FW-Type
Url
X-NYM-Debug-Backend
X-Backend-Name
X-Instance
X-User-Agent
X-Debug-IsConnected
X-Debug-IsPreview
X-CDN-Forward
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Tb
CDN-RequestId
X-Drupal-Cache-Contexts
X-Cache-Hit
X-Drupal-Cache-Tags
Pinterest-Version
X-Pinterest-Rid
Pinterest-Generated-By
X-Tt-Logid
SRV
WPO-Cache-Status
WPO-Cache-Message
Country
From-Origin
X-Region
X-Node-Name
Accept-Language
Front
X-Trace-Id
X-Real-IP
X-VC-Cache
X-Time
Backend
Fastly-Drupal-HTML
Uber-Trace-Id
X-Mode
X-Template
X-Content-Options
X-Language
X-Rewrite-Enabled
X-Generation-Time
X-UPSTREAM-Address
X-RN-RSRV
X-Cache-Operation
Fastly-SIE
Meta-Geo
Fastly-SWR
Filters
X-Web-Node
Cross-Origin-Window-Policy
X-Tumblr-Pixel-2
X-Cache-TTL-Remaining
CDN-Uid
CDN-RequestCountryCode
CDN-Cache
Content-Secure-Policy
Webserver
X-Amz-Apigw-Id
CDN-CachedAt
X-DynaTrace-JS-Agent
X-Amzn-RequestId
CDN-EdgeStorageId
CDN-PullZone
X-Proxy-Cache-Status
X-Sql-Duration-Ms
X-Say-TTL
X-Rocket-Nginx-Serving-Static
X-Cms-Context
Apigw-Requestid
X-Sql-Count
X-SayCDN-TTL
X-Cache-Action
X-IPS-LoggedIn
X-Say-Cacheable
X-Adobe-Source
X-Access
Azure-InstanceId
Azure-RegionName
X-Section
Azure-Version
X-Format
CF-IPCountry
Azure-SiteName
Azure-SlotName
X-Proxy-Cache-Info
X-WP-CF-Super-Cache-Cache-Control
X-WP-CF-Super-Cache
X-Cache-Server
X-Ms-Version
Cache-Name
X-Zen-Fury
X-PHP-Backend
X-Ms-Request-Id
X-PHP-Host
X-VWS-Id
X-Sucuri-ID
X-GeoCode
X-BYPASS-REASON
X-AWS-Id
X-Cluster
X-Edge-Location
X-Content-Age
X-Forwarded-Host
ServerID
X-Reqid
X-Labrador-Cache-Channel
X-GeoCountry
X-ProxyCache-Status
X-LJ-Flow-ID
X-ProxyCache-Key
X-Sucuri-Cache
X-Debug
X-Skip-Cache
X-UA-Device-Type
X-Cache-Host
X-Unique-Id
X-Via-Fastly
Node
X-Site-Version
Webcakes-App-Name
TWC-Connection-Speed
TWC-Device-Class
X-Amzn-Remapped-Content-Length
X-JoinUs
X-Urbn-Context-Path
X-Soup
S-Rt
Onion-Location
X-Xfnlog-Site
X-Zipkin-Id
Web-Mar-Node
Property-Id
TWC-Privacy
X-Extlb
Webcakes-App-Version
TWC-GeoIP-Country
X-Routing-Service
TWC-GeoIP-LatLong
X-Origin-Hint
X-Proto
X-IPLB-Request-ID
X-Proxied
X-IPLB-Instance
X-Server-W
X-SaId
Webcakes-Region
X-Varnish-Beresp-Grace
X-Urbn-Site-Id
TWC-Locale-Group
X-No-Session
X-Detected-As
X-R9-Blue-Green-Version
X-Locale
X-LAGOON
X-Cluster-Node
Locale
X-Timing-Wait
X-LSADC-Cache
Mn-Server-Ip
Mime-Version
Selected-Fe
WP-Super-Cache
X-Fastly-Request-Id
X-Ua
X-Proxy-Build
X-Handled-By
DB-Nickname
Fastcgi-Useragent
X-SRV
X-FB-TRIP-ID
X-Request-Time
X-Hl-Ver
Cache-Hits
Xserver
X-Redis-Cache
X-Cache-Debug
Liferay-Portal
X-Tumblr-Pixel-3
X-TIME
X-NWS-UUID-VERIFY
X-TNCMS
X-XRDS-LOCATION
X-Optimistic-Header
Upgrade-Insecure-Requests
ServedBy
X-Loop
X-CACHE-AGE
Countrycode
X-Generated-By
X-GEO
Source
X-Origin-Date
X-Esi
X-Mg-Request-UUID
X-Air-Source
X-Air-Hostname
X-Air-Trace-Id
X-Varnish-Hits
X-Tid
CF-Cached-On
X-Storage
X-Tec-Api-Origin
X-Tec-Api-Version
X-Tec-Api-Root
X-Times
X-Uri
X-Akamai-Transformed
X-Director
Xet-Cookie
X-Varnish-Beresp-Ttl
X-Tx-Id
X-Cdn
X-COUNTRY
X-TA-CDN-Provider
X-Trace-ID
Frame-Options
X-Pass-Why
X-Newrelic-Synthetics
X-Origin-TTL
X-Origin-CC
X-ARC
X-DC
X-B3-Spanid
X-Service
X-FireWall-Port
X-ECache
X-App-Version
X-Varnish-Hostname
X-Sorting-Hat-PodId
X-Shopify-Stage
X-Storefront-Renderer-Rendered
X-Sorting-Hat-ShopId
X-ShardId
X-Alternate-Cache-Key
X-Varnish-Cache-Hits
X-Datadog-Parent-Id
SID
X-Datadog-Sampled
X-Datadog-Sampling-Priority
Environment
X-Datadog-Trace-Id
X-ShopId
X-Presslabs-Stats
Server-Info
X-Bc-Bl
X-BCube-Filmed-By
X-A-Dam
X-A-Dcw
X-BBC-Edge-Cache-Status
X-Nyt-Route
A
X-Mid
X-Mobile-URL
X-Loc
X-A-Wwc
X-Application
X-B-Cookie
X-Ec-Fail
X-D
X-Aed
X-Endurance-Cache-Level
X-Developer
X-Ec-GeoHdr
X-Epic-Correlation-Id
X-Request-Host
X-Gdpr
X-Cache-Info
X-Destination
X-External-Request-Id
X-Cache-NE
X-A-Dgt
T-Server
X-Vdms-Version
X-VG-TLSProxy
Rendered-Blocks
Release
X-Vdms-Path
Req-Svc-Chain
X-A-Ccd
X-TIM-N
Sslversion
Redirect-Candidate
Origin
DCR-Decision-By
DCR-Processing-Time-Ms
Lang
Gannett-Cam-Experience-Id
MD5-Digest
Meta-Geo-Continent
Xc-Version
Odigeo-Trace-Id
Ngx.Var.Host
Surrogated-Key
Candidate-Md5Url
Edge-Cache
WWW-Authenticate
X-Rojux
X-SRCache-Key
X-Processor
X-A
X-Origin-Time
X-Platform-Cluster
X-Platform-Processor
X-Platform-Router
X-S-Cookie
X-S
X-S-Maxage
BehaviorPad-Version
X-ScT
X-ServerID
X-AIR-PT
Magicmarker
Tube-Get-Contents
Fastly-GeoIP-CountryCode
Tube-Got-Eval
Memcached
X-Akamai-Device-Characteristics
Tube-Return
Tube-Got-Results
State
X-Req
X-VServer
X-WA-Info
X-WADP-Cache
X-WP-CF-Super-Cache-Active
X-Varnish-Remaining-TTL
X-Varnish-CookieINHashed-On
X-Sn-Servicetimems
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
X-Varnish-CookieHashed-On
Host-ID
TDXMobile
X-Frame-Option
X-INCAP-ABP
X-Thinkindot-L3
X-We-Are-Hiring
X-Core-Value
X-CMSURLCustom
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
Thinkindot-Control
X-Sigma-Backend
X-Sigma
X-DefHash
X-Ec-Custom-Error
X-Fmm-Version
X-Gamma-Serve
X-DefElseHash
X-CUA
X-Cdn-Origin
X-Clara-WADP
X-Core-Mission
X-GeoIP-City
X-Httpd
X-Rocket-Build-Number
X-SB
X-SD-PageType
X-Served-From
X-Platform-Server
X-Origin-Response-Time
X-Human
X-NodeID
X-Old-Content-Length
X-Cache-Bucket
Vix-Hermes-Req-Id
Cache-Tv-Group
Click-Count-Error
X-Pubstack
Country-Code
Decoy-Debug-Key
Click-Count-Action-Start
Apple-News-Services-Handled
C-Via
Cache-Host
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
Decoy-Debug-Status
Cluster
DSUID
Decoy-Debug-TTL
X-Parent-Response-Time
Section-Io-Origin-Time-Seconds
Section-Io-Origin-Status
Section-Io-Id
Section-Origin-Responded
X-Var-Ttl
X-Date
X-Cache-Id
X-Up
Adler-Geo
We-Hiring
X-LB-NoCache
X-Hnp-Log
Cache-Key
User-Cache-Control
X-Esi-Check
X-Minions-Version
X-Thanos
X-GeoIP
X-Variation
X-Accel-Buffering
X-Block-Status
X-Hash
X-App
X-CSRF-Token
X-Planisys-CDN-TTL
X-Planisys-CDN-Cache
X-Bip
X-Planisys-CDN-Rules
X-Gzip
X-GeoIP-Region-Code
X-Ad-Defer-Variation
X-Accel-Expires-Debug
X-Origin
X-Slack-Backend
X-GeoIP-Country-Code
X-Request-Start
X-Scale
X-Node-Id
X-Cache-FS-Status
Cache-Provider
X-HS-Content-Campaign-Id
X-Is-Gdpr
Mail-Subject
X-JWT-State
X-Has-Esi
X-Geo-Header
Origin-CC
Cmsid
NM-Fastcgi-Cache
Cmstype
X-Location
L
X-DPWN-IS-SECURE
X-Generated-On
X-Level-Front-Cache
X-Fastly-Backend
X-Worker
X-Test
Kp-EeAlive
Is-Eu
X-Restarts
X-Vmg-Version
Origin-EX
Ssr
Sever-Int
Server-Host
X-Developers
CDCHOST
Fastly-Backend-Name
X-Wix-Viewer-Type
X-Gen-Mode
Svr
Server-Hostname
X-Fetched-On
CloudFront-Viewer-Country
Producers
X-Buckets
Platform
Server-Ext
X-Cdn-Srv
X-Auto-Login
X-Dispatcher-Number
Pics-Label
X-RM-Cache-TTL
Cdn
X-Forwarded-Site
X-FC-Vary-Parameters
X-HN
X-VarnishDD-TTL
Gh-Request-Id
CacheControlHeader
X-Varnishpool
Web-Mar-Region
X-Cache-Backend
X-Conf
AKAMAI
X-Nananana
X-Varnish-Beresp-Status
X-V-Cache
X-Platform
X-Op-Id-All
X-NCache
X-Pool
X-Refresh
X-Slack-Shared-Secret-Outcome
X-Server-IP
X-Region-Sid
X-Irp-Debug
X-Mvc-Supplant-Cachable
X-CacheTTL
X-Cache-Tags
X-Aicache-OS
PFcat
Fastly-SSL
X-Ckpd-Fst-Backend
X-Device-Os
Datacenter
Wxu-Next-Hostname
Wxu-Next-Commit
X-Dispatcher-Server
Wxu-Next-Region
HostName
X-Cached-By
X-Cache-Remote
X-Csrf-Jwt
X-Men
X-CGP
Machine
X-Owner
X-Qloud-Router
X-Azure-Ref-OriginShield
On-Server
X-Via-Popn
X-Via-Popv
X-Nginx-Cache-Key
X-Tb-Optimization-Total-Bytes-Saved
X-Eu-Site
X-Via-Poph
Ha-Gx-Prefs
NGX
L5d-Success-Class
X-Org
HA-Ipaddr
X-Varnish-Ttl
X-Webkit-CSP-Report-Only
X-Mvc-Supplant-OutputCached
Env
Cdnsip
X-AK-Request-ID
X-Servedbyhost
X-VC
X-HA-Backend
Canary
GeoIP-Latitude
Cdncip
X-Cache-Date
Server-ID
X-RCS-CacheZone
X-Gateway-Cache-Key
X-Gateway-Request-Id
X-Gateway-Skip-Cache
X-LB-ID
X-Microcachable
X-Gateway-Cache-Status
X-API-Version
X-Wa
X-APP-VERSION
X-ZONE
Cache
X-Fpc
X-Mly-Id
X-Zone
X-Vgn-Hpd-Variations-Key
X-Server-ID
X-DataCenter
Memory
X-Vgn-Hpd-Cached
X-Generated-In
X-Vgn-Hpd-Ssi
Time
Request-ID
X-Webkit-CSP
X-Nc
Load-Balancing
Ngx-Var-Key
X-Via-NSCOPI
Eomportal-Instance
X-Micro-Cache
OT-Force-Account-Verify
X-Fastly-Cache
X-ND-Cache
X-HS-Status
X-Origin-Expires
X-Instance-Name
X-Correlation-ID
IsBot
X-Vc
X-SIPLIST1
X-Client-Ip
X-Release
X-Request-URI
X-Check-Cacheable
X-Response-By
Srv
X-Via-JSL
X-Nf-Request-Id
X-CCDN-CacheTTL
X-CCDN-Origin-Time
X-VCL-Version
X-Hcs-Proxy-Type
X-From
X-FL-EDGE
X-CS
X-FL-QIT-DEBUG
X-Cache-NGX
Expect-Staple
X-Info
Locid
Srvid
NtCoent-Length
True-Client-Ip
X-Cache-Enabled
X-Srv
X-Via-CDN
X-NewRelic-App-Data
Hostname
AMP-Access-Control-Allow-Source-Origin
Edge-Copy-Time
X-Edge-Pop
X-Via-SSL
X-MCACHE
X-Via-Edge
X-Api-Version
X-CSRF-TOKEN
GeoIp-Country-Code
X-Provided-By
XkeyRZ
X-Proxy-CacheRZ
Location
X-Debug-Cache-Store
X-Lambda-Id
X-Cache-Expires
X-Debug-Cache-Fetch
X-NGINX-Cache
Uri
X-Amz-Meta-Cb-Modifiedtime
Path
GeoIP-Country-Code
X-EC-Lua
X-Dc
X-Oss-Storage-Class
Sid
Resin-Trace
True-Client-IP
X-Oss-Hash-Crc64ecma
X-Oss-Object-Type
X-Oss-Request-Id
X-Oss-Server-Time
X-Edge-POP
X-Air-Pt
X-Vcl-Version
Servername
X-Render-Time
Cross-Origin-Opener-Policy-Report-Only
X-SERVER-NAME
CPC-Age
VNS-Cache
CPC-Cache
VNS-Age
X-Fastly-Country-Code
X-Vtex-Remote-Cache
X-B3-SpanId
X-NODE
X-Moov-Xdn-Version
X-Moov-T
X-Cs
Traceparent
LB
X-CLOUD-TRACE-CONTEXT
X-Scheme
X-Viewer-Country
CDN
X-TH-Server
X-VCT
Fastly-Drupal-Html
X-RateLimit-Reset
X-ApacheServer
X-ATG-Version
X-PERF
X-Cdn-Request-ID
X-Akamai-Pragma-Client-IP
Rip
X-TX-ID
X-MSEdge-Flight
X-Pod-Name
X-Contensis-Viewer-Groups
X-MSEdge-Features
X-Varnish-Authentication
Timeexpire
X-Cache-ASPX
Powered-By
X-NAPM-TraceId
FSS-Cache
Esi-Enabled
X-Varnish-Beresp-TTL
CountryCode
X-FPC
X-Accel-Version
M-TraceId
X-Datacenter
X-Cdn-Cache-Status
X-Datadome
YJS-ID
X-WA
X-CF-Lambda-Version
X-CF-Lambda-Fn
Sm-Log-Id
X-PAYTM-SRV-ID
X-Service-Response-Time
X-RateLimit-Remaining-Second
X-RateLimit-Limit-Second
X-Udemy-Cache-App-Namespace
X-Clientip
Tracecode
True-Client-Country-4JS
V-Age
X-Upstream-Ht
X-Upstream-Ct
XServer
X-Geo
X-Cache-Type
X-LiteSpeed-Cache-Control
XM
Proxy-Connection
HIT
X-Srcache-Fetch-Status
X-Lb-Id
X-CACHE-KEY
X-Srcache-Store-Status
X-VG-WebCache
Server-Id
X-NC
Ohc-File-Size
X-Wikidot-Static-Cache
ENV
RNT-Time
Ngx
N-Cache
X-B3-Parentspanid
X-ServedByHost
X-TraceId
X-Wikidot-Backend
RNT-Machine
X-Rebelmouse-Surrogate-Control
X-Bl-Debug
X-Rebelmouse-Cache-Control
Epwk-X-Cache
X-Ha-Backend
X-CDN-Cache-Status
X-Hyper-Cache
X-Shop-Environment
X-Forwarded-Path
X-Tenant
Geoip-Latitude
X-Cdn-Forward
WZWS-RAY
X-Orig-Expires
Yjs-Id
Content-Style-Type
X-Via-PopN
Expiry
Pramga
X-Via-PopV
X-MP-GENERATED-AT
Content-Script-Type
X-Via-PopH
Req-ID
X-Cdn-Diag
X-MiniProfiler-Ids
User-Agent
X-B3-ParentSpanId
X-Swift-Error
X-Vgn-Hpd-Reason
X-Lb-Nocache
X-Dw-Trace-Id
X-B3-Trace-ID
X-Fastly-Backend-Reqs
X-Connection-Hash
X-Serial
Ec-Rule-Version
Inserted-Into-Cache-At
X-Lsadc-Cache
X-F-Status
X-TT-LOGID
X-M-Log
X-M-Reqid
X-Qnm-Cache
X-Akamai-ERRuleID
X-Cache-Ngx
X-Stale
X-IPS-Cached-Response
X-UP
X-Mid-Debug-Cache-Disk
X-Request-URL
X-Mid-Debug-Cache-Key
Warning
X-Yottaa-OS
X-Akamai-ERPolicy
X-LiteSpeed-Tag
X-Th-Server
My-App
MIME-Version
X-Webstats-RespID
Cneonction
X-Snapshot-Date