Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
X-Powered-By
Pragma
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
Alt-Svc
X-Xss-Protection
P3P
X-Cache-Hits
X-UA-Compatible
CF-Ray
X-Served-By
X-Download-Options
X-Request-Id
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Cache-Status
X-Generator
X-Check
X-DNS-Prefetch-Control
X-Cacheable
X-Envoy-Upstream-Service-Time
X-FRAME-OPTIONS
Timing-Allow-Origin
X-Iinfo
X-Drupal-Dynamic-Cache
Feature-Policy
X-Content-Security-Policy
Server-Timing
Content-Encoding
Access-Control-Expose-Headers
X-Dns-Prefetch-Control
X-XSS-PROTECTION
Upgrade
X-CDN
Status
X-Request-ID
X-AspNetMvc-Version
Access-Control-Max-Age
X-Amz-Request-Id
Request-Context
X-Amz-Id-2
X-Via
X-Turbo-Charged-By
X-Backend
X-AH-Environment
X-Cache-Group
X-Robots-Tag
Cf-Edge-Cache
Keep-Alive
Host-Header
X-Hacker
X-Proxy-Cache
X-UA-Device
X-Server
X-Vhost
X-Rq
X-Server-Powered-By
Allow
X-Age
X-Ws-Request-Id
X-Varnish-Cache
X-Dispatcher
EagleId
X-Amz-Version-Id
P3p
Nel
Grace
X-LiteSpeed-Cache
Cf-Apo-Via
X-Styx-Req-Id
Cf-Railgun
X-Pantheon-Styx-Hostname
X-Page-Speed
X-Device
X-OneAgent-JS-Injection
EagleEye-TraceId
X-Aws-Lambda-Call-Status
X-Swift-CacheTime
X-Swift-SaveTime
X-Pingback
Ali-Swift-Global-Savetime
X-Host
X-Node
Accept-CH
X-CST
X-Backend-Server
X-Cache-Lookup
Surrogate-Control
X-WebKit-CSP
X-Server-Id
X-Readtime
X-Nginx-Cache-Status
Accept-CH-Lifetime
Permissions-Policy
X-Akam-SW-Version
X-Nginx-Upstream-Cache-Status
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
Request-Id
X-Application-Context
X-Content-Security-Policy-Report-Only
X-Cloud-Trace-Context
X-Ua-Compatible
X-Response-Time
X-Trace
X-HW
X-Edge
Xkey
Content-Location
X-Clacks-Overhead
X-Mod-Pagespeed
X-Ruxit-JS-Agent
X-Midtier
Rating
X-ESI
X-Url
X-Amz-Server-Side-Encryption
X-ECACHE
X-Mcache
X-Aspnetmvc-Version
X-Ruxit-Js-Agent
X-Country
X-Upstream
Cache-Tag
X-Vcap-Request-Id
X-MS-InvokeApp
X-Rack-Cache
X-D2id
Verso
X-Kinja-Revision
X-Element-Page-Cache
X-Exp-Id
X-GoogleNews-Bot
X-Use-Magma
X-Kinja
X-Cdn-Fetch
X-Exp-Variant
X-Kinja-Build
X-Kinja-Server
X-Powered-By-Plesk
X-Litespeed-Cache
Accept-Ch
Edge-Control
X-PC
X-Vname
X-TtlSet
RTSS
X-Cache-TTL
Accept-Ch-Lifetime
Fastly-Restarts
X-Ac
Service-Worker-Allowed
X-Webkit-CSP
X-VARITI-CCR
Origin-Trial
X-Country-Code
X-Navigation-Version
X-Goog-Hash
X-Abt-Application-Version
X-Varnish-TTL
X-WebKit-CSP-Report-Only
X-Cached
X-GitHub-Request-Id
X-Amz-Rid
X-Browser-Type
Display
X-Middleton-Display
Pagespeed
X-Sol
X-Oneagent-Js-Injection
Cross-Origin-Opener-Policy
X-Dw-Request-Base-Id
X-Server-Name
X-SharePointHealthScore
SPRequestGuid
X-Amzn-Trace-Id
X-Kinja-CCPA
X-ORACLE-DMS-RID
X-ORACLE-DMS-ECID
X-Mg-S
X-Powered-CMS
X-NWS-LOG-UUID
SPRequestDuration
X-Server-ID
X-Ttl
SPIisLatency
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
X-Instrumentation
X-Server-Lifecycle-Phase
X-Kraken-Loop-Name
Arr-Disable-Session-Affinity
AR-PoweredBy
AR-ATIME
AR-SID
AR-Request-ID
X-Content-Type
X-Cache-Key
X-Middleton-Response
Response
X-B3-TraceId
X-Times
X-FastCGI-Cache
Pinterest-Generated-By
Pinterest-Version
X-Pinterest-Rid
X-Version
X-Jurisdiction
X-HP-Webp
X-HP-Trace-Id
X-SRCache-Store-Status
X-Cnection
X-Fastly-Request-ID
X-SRCache-Fetch-Status
AR-CACHE
X-Client-IP
X-Accel-Expires
Cache-Tags
X-T
Nginx-Cache
X-Ser
Cache-Status
X-NF-Request-ID
X-B3-Traceid
Edge-Cache-Tag
Front-End-Https
X-MSEdge-Ref
X-Hits
X-Px
Public-Key-Pins
X-Recruiting
Payment
MRF-Tech
Mrf-Cache-Status
X-B3-TraceId-Primal
X-LLID
X-RateLimit-Remaining
X-Request-Processing-Time
X-Frontend
X-Request-Received
Server-Node
X-Ua-Browser
S
X-Shield-Request-Id
X-DIS-Request-ID
X-TTL
X-GUploader-UploadID
X-Goog-Metageneration
X-RateLimit-Limit
TP-Cache
MicrosoftSharePointTeamServices
Content-MD5
X-Amz-Apigw-Id
Access-Control-Request-Method
X-Amzn-RequestId
X-Content-Digest
X-PressLabs-Stats
X-HS-Hub-Id
X-HS-Combine-CSS
X-HS-Cache-Config
X-Ratelimit-Remaining
X-HS-Content-Id
Realpath
X-Protected-By
X-Request-Handler-Origin-Region
X-Microsite
X-Distributor
Fastcgi-Cache
X-Erf-Stays-Pdp-Viaduct-Migration-Web
X-LB-Cache
X-FB-Debug
Access-Control-Allow-Method
X-Page-Id
X-Daa-Tunnel
X-Rid
X-Cluster-Name
Accept-Charset
X-Forwarded-For
X-Geo-Country
TP-L2-Cache
X-Hostname
X-Ezoic-Cdn
X-B3-Sampled
X-Fastcgi-Cache
X-Webkit-Csp
X-Seen-By
X-Ratelimit-Limit
X-Goog-Stored-Content-Length
X-Aspnet-Version
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-Goog-Generation
X-Ua-Device
X-Newrelic-App-Data
Cleartype
Cross-Origin-Resource-Policy
TCN
Referer-Policy
Count-Hit
X-Mobile
DC
X-Correlation-Id
X-Content-Options
X-Varnish-Backend
X-App-Server
X-Envoy-Decorator-Operation
X-Webkit-CSP-Report-Only
X-Logged-In
X-Hosted-By
X-Debug-Info
X-Kinsta-Cache
X-Contextid
X-Git-Hash
X-Edge-Location-Klb
X-Is-Crawler
X-Grace
X-IPS-LoggedIn
X-Providence-Cookie
X-Flags
X-Fb-Rlafr
X-Amz-Replication-Status
X-Request-Guid
X-Aspnet-Duration-Ms
X-Origin-Cache
X-Route-Name
X-Varnish-Grace
X-Revision
Surrogate-Key
X-App-Environment
X-TT
X-Azure-Ref
Frame-Options
X-Amz-Meta-S3cmd-Attrs
X-Forwarded-Proto
Retry-After
X-Origin-Server
X-F-Cache
X-Id
X-Wix-Request-Id
X-Magnolia-Registration
X-Whom
X-TEC-API-ROOT
Alternate-Protocol
X-TEC-API-VERSION
WPO-Cache-Message
WPO-Cache-Status
X-TEC-API-ORIGIN
Healthy
Section-Io-Cache
Charset
X-Akamai-Edgescape
X-Xrds-Location
MS-Author-Via
Viewport
X-Backend-Name
X-Proxy-Cache-Info
X-Client-Ip
X-App-Version
X-RateLimit-Reset
X-COUNTRY
X-B
Paypal-Debug-Id
X-Activity-Id
X-Az
X-AppVersion
SRV
Amp-Access-Control-Allow-Source-Origin
X-Www-Served-By
X-DataDome
X-Language
ServerID
X-Cache-Rule
X-ARC
VIX-Pulpo-Node
Host
X-Http-Reason
X-Original-Request-Id
X-XRDS-Location
X-Instance
X-Response-Served-From
SD-X-WS
X-Varnish-Server
Filterid
X-N
VIX-Pulpo-Upstream-Status
X-Akamai-Request-ID2
X-Cache-Grace
Front
Protected
X-UUID
X-Rule
X-Edge-Location
X-User-Agent
Akamai-GRN
Country
X-Varnish-Age
X-Status
X-Datadog-Parent-Id
X-Datadog-Trace-Id
X-Datadog-Sampling-Priority
From-Origin
X-Unique-Id
X-Region
X-FW-Serve
X-FW-Server
X-FW-Static
X-FW-Hash
X-FW-Dynamic
X-EdgeConnect-Cache-Status
X-Cacheable-TTL
X-Environment-Context
X-FW-Version
X-FW-Type
X-L-Path
X-Jobs
X-Page-View
Server-Name
Access-Control-Request-Headers
X-Cache-Time
X-Adobe-Loc
X-Adobe-Content
X-Rendered-As
X-Framework
X-Tumblr-Pixel-0
Fastly-SWR
X-Tumblr-User
X-Is-Bot
X-Rocket-Nginx-Serving-Static
Fastly-SIE
X-Type
X-Tumblr-Pixel-1
X-Tumblr-Pixel
X-Kong-Proxy-Latency
X-Trace-Id
X-Time
X-Load-Cache
X-Kong-Upstream-Latency
X-Tec-Api-Origin
X-Nf-Request-Id
X-RemovedCookies
X-ProcessESI
X-Tec-Api-Root
X-G
X-Tec-Api-Version
X-Proxy
X-Vcache
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Cache-Age
X-Cache-Control
X-Datadog-Sampled
X-Mg-Request-UUID
Content-Disposition
X-Amzn-Remapped-Content-Length
X-B-Cache
X-Signature
X-Debug-IsPreview
X-Debug-IsConnected
X-CDN-Forward
Refresh
X-ECache
X-Drupal-Cache-Tags
Backend
X-DynaTrace
X-WP-CF-Super-Cache
Accept-Language
X-WP-CF-Super-Cache-Cache-Control
Countrycode
X-Source
Webserver
Xet-Cookie
X-Generated-By
X-Erf-Web-Scheduler
CF-IPCountry
X-Nginx-Cache
X-HTML-Minification-Powered-By
Version
X-Servername
X-Httpd
X-DynaTrace-JS-Agent
X-Tt-Trace-Tag
Url
X-Tt-Trace-Host
X-Mode
Xserver
X-Device-Type
X-NYM-Debug-Backend
X-Storage
X-Content-Powered-By
X-Content-Age
X-Template
GEO-INFO
X-Director
X-Cache-Operation
OT-Force-Account-Verify
X-Cache-Action
X-UPSTREAM-Address
X-Urbn-Site-Id
X-Urbn-Context-Path
X-Varnish-Cache-Hits
Meta-Geo
X-Rewrite-Enabled
X-SaId
X-Say-Cacheable
Filters
Load-Balancing
X-Proto
X-GeoCountry
Locale
X-LAGOON
X-Say-TTL
X-JoinUs
S-Rt
X-GeoCode
X-ServerID
X-SayCDN-TTL
Onion-Location
Azure-Version
X-Cluster-Node
X-Container-Uri
X-Git-Commit
Azure-SiteName
Azure-InstanceId
X-Tt-Logid
X-Tb
X-Soup
X-Generation-Time
Azure-RegionName
X-Varnish-Hostname
Azure-SlotName
X-Forwarded-Host
X-Cache-Server
Web-Mar-Node
X-Adobe-Source
X-Sql-Count
X-RM-Cache-TTL
X-Sql-Duration-Ms
X-VC-Cache
X-VCT
X-Served-From
X-PHP-Host
X-Labrador-Cache-Channel
X-Detected-As
X-Ms-Version
X-Ms-Request-Id
X-Rn-Rsrv
Node
X-Lambda-Id
X-Routing-Service
Mn-Server-Ip
X-Format
X-Origin-Hint
X-R9-Blue-Green-Version
Property-Id
X-RCS-CacheZone
X-Proxied
X-Logging-Id
X-Zen-Fury
Webcakes-Region
Webcakes-App-Version
Webcakes-App-Name
X-Tumblr-Pixel-3
X-Tumblr-Pixel-2
X-Extlb
X-FB-TRIP-ID
TWC-Privacy
TWC-Locale-Group
X-Debug
TWC-Connection-Speed
X-Zipkin-Id
TWC-Device-Class
DB-Nickname
TWC-GeoIP-LatLong
TWC-GeoIP-Country
X-Skip-Cache
Uber-Trace-Id
X-URL
X-XRDS-LOCATION
X-Tncms
X-Uri
X-LSADC-Cache
X-MCACHE
X-Loop
X-Fetched-On
Selected-Fe
X-Timing-Wait
X-Proxy-Build
X-CCDN-Origin-Time
X-Upgrade-Enabled
X-CCDN-CacheTTL
X-Hcs-Proxy-Type
X-Cache-Hit
Fastcgi-Useragent
X-Endurance-Cache-Level
X-Ua
X-Sucuri-Cache
Cross-Origin-Window-Policy
X-Srv
Source
X-Drupal-Cache-Contexts
X-B3-SpanId
X-Sucuri-ID
X-Ratelimit-Reset
X-Redis-Cache
X-ID
X-Oracle-Dms-Ecid
CDN-RequestId
X-Oracle-Dms-Rid
Liferay-Portal
X-MP-GENERATED-AT
X-Origin-Date
Section-Origin-Responded
Section-Io-Origin-Status
Section-Io-Id
Section-Io-Origin-Time-Seconds
Fastly-Drupal-HTML
X-Pass-Why
X-Varnish-Hits
X-S
X-TimeS
X-Cache-Expired-At
Upgrade-Insecure-Requests
X-Newrelic-Synthetics
X-Real-IP
X-NGENIX-Cache
X-Origin-TTL
X-Origin-CC
X-Akamai-Transformed
X-UA-Device-Type
X-Cache-TTL-Remaining
X-Node-Name
X-CACHE-AGE
X-Handled-By
NGB
X-GEO
X-Pubstack
X-Fastly-Request-Id
X-Via-JSL
X-Hl-Ver
Content-Secure-Policy
X-Correlation-ID
X-Restarts
X-Reqid
X-Xfnlog-Site
X-Server-W
X-Cache-Type
CDN-RequestPullSuccess
CDN-EdgeStorageId
CDN-CachedAt
CDN-Cache
CDN-PullZone
CDN-RequestCountryCode
X-Cms-Context
CDN-RequestPullCode
Apigw-Requestid
X-Optimistic-Header
CDN-Uid
X-CSRF-Token
Ms-Operation-Id
MS-CV
X-RTag
X-Varnish-Ttl
ServedBy
X-Parent-Response-Time
WP-Super-Cache
X-ProxyCache-Status
X-ProxyCache-Key
X-BYPASS-REASON
X-No-Session
X-CGP
Xc-Version
X-Worker
X-CF-Lambda-Fn
X-BCube-Filmed-By
X-Bc-Bl
Canary
BehaviorPad-Version
X-Bl-Debug
X-CacheTTL
X-Cache-NE
X-Cache-Host
X-CF-Lambda-Version
X-Conf
X-Ec-GeoHdr
X-We-Are-Hiring
X-Epic-Correlation-Id
X-Eu-Site
X-Fastly-Backend
X-External-Request-Id
X-Ec-Fail
X-Ec-Custom-Error
X-D
X-Csrf-Jwt
X-Debug-Cache-Fetch
X-Destination
X-Dispatcher-Number
X-Developer
Candidate-Md5Url
X-Application
MD5-Digest
T-Server
Meta-Geo-Continent
Magicmarker
Lang
True-Client-Country-4JS
L
L5d-Success-Class
N-Cache
Surrogated-Key
Origin-Agent-Cluster
Rendered-Blocks
Redirect-Candidate
Server-Host
Odigeo-Trace-Id
Ngx.Var.Host
Sslversion
Vix-Hermes-Req-Id
HA-Ipaddr
X-A-Wwc
X-A-Dgt
X-A-Dcw
DCR-Processing-Time-Ms
DCR-Decision-By
X-FC-Vary-Parameters
X-App
X-Aed
X-A-Dam
X-A-Ccd
W
Gh-Request-Id
Ha-Gx-Prefs
Gannett-Cam-Experience-Id
Fastly-SSL
X-A
Web-Mar-Region
X-B-Cookie
X-Debug-Cache-Store
X-Forwarded-Path
X-Slack-Shared-Secret-Outcome
X-Rojux
X-Vdms-Version
X-Viewer-Country
X-SRCache-Key
X-Request-Host
X-Tenant
X-Nyt-Route
X-FTR-Request-ID
X-S-Cookie
X-Slack-Backend
X-Gdpr
X-Shop-Environment
X-Origin-Time
X-Vdms-Path
X-SD-PageType
X-Orig-Expires
X-Vtex-Remote-Cache
X-ScT
X-Vcl-Version
X-Cluster
X-AWS-Id
Cache-Provider
X-LJ-Flow-ID
X-VWS-Id
X-Policy
We-Hiring
X-SVT-ORM-VERSION
X-Pool
X-Thanos
X-Accel-Expires-Debug
X-Thinkindot-L3
X-Alternate-Cache-Key
X-Owner
X-Accel-Buffering
X-Qloud-Router
X-Platform
X-PERF
X-PAYTM-SRV-ID
X-Test
X-RateLimit-Remaining-Second
X-Shopify-Stage
TDXMobile
X-Sn-Servicetimems
Thinkindot-CacheControl
X-ShopId
X-S-Maxage
Producers
X-ShardId
Release
Req-Svc-Chain
Thinkindot-CacheControl-Type
Thinkindot-Control
X-Sorting-Hat-ShopId
X-RateLimit-Limit-Second
VNS-Cache
X-Storefront-Renderer-Rendered
VNS-Age
X-App-Name
X-Request-Time
X-Sorting-Hat-PodId
X-Refresh
X-SVT-ORM-RULES
X-Variation
X-Date
X-VG-WebCache
X-Vmg-Version
X-Server-IP
X-DefElseHash
X-Wikidot-Backend
X-Core-Value
X-Core-Mission
X-Wix-Viewer-Type
X-Wikidot-Static-Cache
X-Loc
X-DefHash
X-VServer
X-GeoIP-Region-Code
X-GeoIP-Country-Code
X-Geo-Header
X-Generated-On
X-Hash
X-Human
X-Level-Front-Cache
X-Irp-Debug
X-INCAP-ABP
X-DPWN-IS-SECURE
X-Mid
X-Mly-Id
X-Cache-Debug
X-Cache-Bucket
X-NodeID
X-Cache-Info
X-Node-Id
X-Old-Content-Length
X-Bip
X-Up
X-Var-Ttl
X-BBC-Edge-Cache-Status
X-Org
X-Varnish-CookieHashed-On
X-Cdn-Diag
X-Nitro-Cache
X-Mvc-Supplant-Cachable
X-CMSURLCustom
X-VG-TLSProxy
Platform
X-Clientip
X-Cdn-Origin
X-Varnish-CookieINHashed-On
X-Varnish-Remaining-TTL
X-Varnishpool
X-Auto-Login
X-ApacheServer
Fastly-GeoIP-CountryCode
Fastly-Backend-Name
Adler-Geo
Host-ID
Cmstype
X-Tx-Id
AKAMAI
Expect-Staple
CPC-Age
Cmsid
Cf-Device-Type
CPC-Cache
Environment
Datacenter
Mail-Subject
Is-Eu
Cache-Name
Origin
X-AIR-PT
User-Cache-Control
X-TIME
X-Proxy-Cache-Status
X-IPLB-Request-ID
X-IPLB-Instance
Apple-News-Services-Host
X-Cache-Id
Apple-News-Services-Handled
Apple-News-Services-Parsed-Url
Apple-News-Services-Request-Url
CloudFront-Viewer-Country
X-WA-Info
X-WADP-Cache
CDCHOST
X-Nananana
X-Block-Status
X-Origin
X-GeoIP
X-Dispatcher-Server
X-Cache-Status-Check
X-Esi-Check
X-Forwarded-Site
X-Fmm-Version
X-Device-Os
X-Gzip
X-Nginx-Cache-Key
X-From
X-Cdn-Srv
X-Mvc-Supplant-OutputCached
X-Hnp-Log
X-Clara-WADP
X-Origin-Response-Time
X-Gen-Mode
Machine
DSUID
Esi-Enabled
NM-Fastcgi-Cache
Server-Hostname
Sever-Int
Country-Code
X-Akamai-Device-Characteristics
Server-Ext
X-Instance-Name
X-Is-Gdpr
X-Micro-Cache
Memcached
NGX
Ssr
X-LB-NoCache
Server-Info
X-Op-Id-All
X-Datadome
X-NCache
X-Section
Pics-Label
X-Amz-Meta-Cb-Modifiedtime
X-JWT-State
X-Has-Esi
Wxu-Next-Region
X-Cache-Enabled
C-Via
X-Access
Wxu-Next-Hostname
Wxu-Next-Commit
X-Dc
X-B3-Spanid
X-AB
X-API-Version
Hostname
Cache-Hits
X-Presslabs-Stats
X-Via-Fastly
Server-ID
AMP-Access-Control-Allow-Source-Origin
Memory
X-HA-Backend
X-Scale
Origin-EX
X-Vgn-Hpd-Reason
X-PHP-Backend
X-CACHE-GROUP
X-Geo-Region
Time
Origin-CC
X-TIM-N
X-Varnish-Beresp-Grace
Cdn-Requestid
X-Varnish-Beresp-Ttl
X-Accel-Version
Location
X-Wp-Cf-Super-Cache-Active
X-TraceId
X-Platform-Processor
X-Platform-Router
X-Air-Trace-Id
X-Air-Hostname
X-Air-Source
X-Platform-Cluster
X-Tb-Optimization-Total-Bytes-Saved
X-Buckets
X-Internal-Host
IsBot
X-Zone
X-ZONE
Sid
X-Webkit-Csp-Report-Only
X-SIPLIST1
X-Is-Supported-Browser
X-Cs
X-Is-Tablet
X-Browser-Name
X-Is-Mobile
X-Tcp-Rtt
X-Is-Desktop
X-Azure-Ref-OriginShield
X-Fpc
X-WP-CF-Super-Cache-Active
X-TA-CDN-Provider
X-B3-Parentspanid
CF-Ctrl
Resin-Trace
X-Backend-Instance
GeoIP-Latitude
YJS-ID
X-Origin-Expires
Cache-Host
X-Cached-By
X-Microcachable
X-Web-Node
X-DC
X-Info
Uri
XM
X-DataCenter
X-Pod-Name
Epwk-X-Cache
X-Locale
X-Hyper-Cache
X-Site-Version
True-Client-Ip
X-VarnishDD-TTL
X-HN
PFcat
X-LiteSpeed-Cache-Control
X-Frame-Option
X-Ad-Defer-Variation
User-Agent
GeoIP-Country-Code
X-NGINX-Cache
X-Nitro-Rev
X-Nitro-Cache-From
GeoIp-Country-Code
Cdn
X-Via-Edge
X-Service
X-Via-SSL
Srvid
X-FL-QIT-DEBUG
X-FL-EDGE
Locid
A
X-Webstats-RespID
Edge-Copy-Time
X-Via-CDN
X-VCache
X-VC
X-Datacenter
X-CS
X-Github-Request-Id
X-Origin-Cache-Key
XServer
X-NewRelic-App-Data
LB
X-CSRF-TOKEN
X-Country-Code-Real
X-ATG-Version
X-FTR-Balancer
X-FTR-Backend-Server
X-Moov-T
X-FTR-Backend
X-Varnish-Authentication
X-Moov-Xdn-Version
True-Client-IP
X-Contensis-Viewer-Groups
X-FireWall-Port
X-FTR-Cache-Status
X-Cache-ASPX
X-FTR-Expires
X-Geo
X-Edge-Server
Cdn-Host
X-TRACE-ID
Cdn-Request-Time
X-Vercel-Cache
X-MSEdge-Features
X-MSEdge-Flight
Cache-Key
SID
X-Pad
NtCoent-Length
X-Vercel-Id
Path
Fastly-Drupal-Html
X-FPC
M-TraceId
WZWS-RAY
Req-ID
X-NMSegId
Tcn
X-HostName
X-Cdn-Request-ID
X-LiteSpeed-Tag
Cluster
X-Ad-Load-Variation
X-SRV
X-Upstream-Ct
X-APP-VERSION
CountryCode
Cf-Ipcountry
X-Upstream-Ht
X-Api-Version
X-Amz-Meta-Opti
X-M-Reqid
Content-Style-Type
Cdnsip
Cdncip
X-Request-Start
X-AK-Request-ID
Content-Script-Type
Pramga
X-Scope-Id
X-M-Log
X-Esi
X-Planisys-CDN-TTL
X-Platform-Server
X-Planisys-CDN-Cache
State
X-HS-Content-Campaign-Id
X-Air-Pt
X-Planisys-CDN-Rules
X-Qnm-Cache
X-Cache-Ttl
X-Release
X-WP-CF-Super-Cache-Cookies-Bypass
X-Vgn-Hpd-Cached
X-Vgn-Hpd-Variations-Key
X-Vgn-Hpd-Ssi
WebServer
X-Branch-Name
X-Fastly-Cache
X-Shield-Cache-Expires
X-Wp-Cf-Super-Cache
X-Varnish-Beresp-Status
X-Wp-Cf-Super-Cache-Cache-Control
X-Wp-Cf-Super-Cache-Cookies-Bypass
X-Cache-Date
X-Sigma-Backend
Yak-Timeinfo
X-Cache-Remote
Proxy-Connection
X-NWS-UUID-VERIFY
X-Traceid
X-Generated-In
Ohc-File-Size
X-Rocket-Build-Number
XkeyRZ
X-Request-URI
Edge-Cache
X-Sigma
Lb
X-Proxy-CacheRZ
HostName
X-Rebelmouse-Surrogate-Control
X-CACHE-KEY
CDN
X-Rebelmouse-Cache-Control
X-HS-Status
X-Render-Time
X-Tim-N
X-Dw-Trace-Id
Srv
X-Akamai-Pragma-Client-IP
Geoip-Latitude
X-TH-Server
Cache
X-Cdn-Forward
X-User
X-Lb-Cache
Tube-Return
Tube-Got-Results
Cache-Tv-Group
Tube-Got-Eval
X-Iplb-Instance
Tube-Get-Contents
Click-Count-Error
Click-Count-Action-Start
X-Iplb-Request-Id
X-SB
X-Via-Popn
X-Via-Poph
X-V-Cache
X-Servedbyhost
X-Via-Popv
X-Wa
X-Provided-By
CF-Cached-On
X-Scheme
X-UA
X-GeoIP-City
X-GoCache-CacheStatus
X-Ha-Backend
X-B3-Trace-ID
X-Gamma-Serve
Server-Id
X-Acquia-Purge-Cdn-Unconfigured
X-Cache-FS-Status
X-Aicache-OS
X-LB-ID
X-Req
X-Nc
X-TT-LOGID
X-CUA
X-Vary
X-Men
On-Server
Ohc-Cache-HIT
V-Age
X-Lb-Nocache
X-Acquia-Site
PICS-Label
X-Via-Ucdn
X-Cdn-Cache-Status
X-Vc
X-EC-Lua
X-Acquia-Application-Trace
X-Acquia-Purge-Tags
X-Acquia-Application-UUID
Yjs-Id
X-VCL-Version
X-TX-ID
X-RN-RSRV
X-Cached-Since
Vha6-Origin
X-Fastly-Cache-Hits
X-Snapshot-Date
MIME-Version
X-Sucuri-Id
Mime-Version
CACHE-MISS-TO-ORIGIN
Inserted-Into-Cache-At
X-ElasticPress-Query
X-Fastly-Backend-Reqs
Cneonction
Env
X-Udemy-Cache-App-Namespace
X-CF-Cache-Header-Cache-Control
X-Miniprofiler-Ids
X-Edge-POP
Ngx
Log-Origin
X-CF-Cache-Header-Vary
X-RAMCache
X-Litespeed-Cache-Control