Threat Level: green Handler on Duty: Rob VandenBrink

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
X-Powered-By
Pragma
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
Alt-Svc
P3P
X-Cache-Hits
X-UA-Compatible
X-Xss-Protection
X-Served-By
CF-Ray
X-Download-Options
X-Timer
Access-Control-Allow-Headers
X-Request-Id
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Generator
X-Cache-Status
X-Check
X-Cacheable
X-DNS-Prefetch-Control
X-Envoy-Upstream-Service-Time
X-FRAME-OPTIONS
X-Request-ID
Timing-Allow-Origin
X-Iinfo
X-Drupal-Dynamic-Cache
Feature-Policy
X-Dns-Prefetch-Control
X-Content-Security-Policy
X-XSS-PROTECTION
Content-Encoding
Access-Control-Expose-Headers
Upgrade
Status
X-CDN
Server-Timing
X-AspNetMvc-Version
Access-Control-Max-Age
X-Amz-Request-Id
Request-Context
X-Amz-Id-2
X-Turbo-Charged-By
X-Via
X-Backend
X-Robots-Tag
X-Cache-Group
Cf-Edge-Cache
Host-Header
Keep-Alive
X-AH-Environment
X-Hacker
X-Proxy-Cache
X-UA-Device
X-Server
X-Rq
X-Vhost
X-Server-Powered-By
Allow
X-Age
X-Varnish-Cache
X-Ws-Request-Id
X-Dispatcher
X-Amz-Version-Id
EagleId
P3p
Nel
Grace
Cf-Apo-Via
X-LiteSpeed-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Page-Speed
X-Device
Cf-Railgun
EagleEye-TraceId
X-Aws-Lambda-Call-Status
X-Swift-SaveTime
X-Swift-CacheTime
X-Pingback
Ali-Swift-Global-Savetime
X-Host
X-WebKit-CSP
X-OneAgent-JS-Injection
Accept-CH
X-Node
X-CST
X-Backend-Server
Surrogate-Control
X-Server-Id
X-Cache-Lookup
X-Nginx-Cache-Status
X-Readtime
Permissions-Policy
X-Akam-SW-Version
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
Request-Id
X-Nginx-Upstream-Cache-Status
X-Application-Context
X-Content-Security-Policy-Report-Only
X-Cloud-Trace-Context
Accept-CH-Lifetime
X-Ua-Compatible
X-Trace
X-Response-Time
X-Edge
X-HW
Content-Location
X-Clacks-Overhead
X-Mod-Pagespeed
Accept-Ch-Lifetime
Xkey
X-Litespeed-Cache
X-Midtier
Rating
X-ESI
X-Amz-Server-Side-Encryption
X-Url
X-Ruxit-JS-Agent
X-ECACHE
X-Mcache
X-Oneagent-Js-Injection
X-Upstream
X-Ruxit-Js-Agent
X-Vcap-Request-Id
Accept-Ch
X-Country
X-D2id
Cache-Tag
X-MS-InvokeApp
X-Vname
X-Exp-Id
X-Exp-Variant
X-GoogleNews-Bot
X-TtlSet
X-PC
Verso
X-Cdn-Fetch
X-Element-Page-Cache
X-Kinja-Server
X-Kinja-Revision
X-Kinja-Build
X-Kinja
X-Use-Magma
X-Rack-Cache
Edge-Control
X-Powered-By-Plesk
RTSS
X-Cache-TTL
Fastly-Restarts
X-Ac
X-VARITI-CCR
Origin-Trial
X-WebKit-CSP-Report-Only
X-Navigation-Version
X-Abt-Application-Version
X-Country-Code
X-Ttl
X-Goog-Hash
Service-Worker-Allowed
X-Cached
X-Middleton-Display
X-Sol
Pagespeed
Display
X-Amz-Rid
X-Browser-Type
X-Content-Type
X-Varnish-TTL
X-GitHub-Request-Id
Cross-Origin-Opener-Policy
X-SharePointHealthScore
X-Dw-Request-Base-Id
SPRequestGuid
X-Mg-S
X-Server-Name
X-B3-TraceId
X-Amzn-Trace-Id
X-Powered-CMS
X-Middleton-Response
Response
X-Instrumentation
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Erf-Bev-Bev-Is-Generated
Arr-Disable-Session-Affinity
X-Erf-Bev-Bev
AR-Request-ID
AR-ATIME
AR-PoweredBy
AR-SID
X-NF-Request-ID
SPRequestDuration
SPIisLatency
X-Cache-Key
X-Kinja-CCPA
X-Version
X-Times
AR-CACHE
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Jurisdiction
X-HP-Trace-Id
X-HP-Webp
Pinterest-Generated-By
X-Accel-Expires
Pinterest-Version
X-Pinterest-Rid
Cache-Tags
X-T
X-ORACLE-DMS-RID
X-ORACLE-DMS-ECID
X-NWS-LOG-UUID
Front-End-Https
Cache-Status
X-Cnection
X-Fastcgi-Cache
Edge-Cache-Tag
X-MSEdge-Ref
Nginx-Cache
X-Hits
X-Fastly-Request-ID
X-B3-Traceid
X-Webkit-CSP
X-Px
X-Client-IP
X-Ser
X-RateLimit-Remaining
Mrf-Cache-Status
X-B3-TraceId-Primal
MRF-Tech
Public-Key-Pins
Payment
X-Recruiting
X-LLID
X-Request-Processing-Time
X-Request-Received
X-Frontend
Server-Node
X-Ua-Browser
X-Erf-Stays-Pdp-Viaduct-Migration-Web
X-Server-ID
X-Shield-Request-Id
X-DIS-Request-ID
X-RateLimit-Limit
TP-Cache
X-FastCGI-Cache
S
X-GUploader-UploadID
X-Goog-Metageneration
Access-Control-Request-Method
MicrosoftSharePointTeamServices
X-HS-Content-Id
X-HS-Combine-CSS
X-HS-Hub-Id
X-HS-Cache-Config
X-Amz-Apigw-Id
X-LB-Cache
X-Amzn-RequestId
X-Content-Digest
TP-L2-Cache
X-Protected-By
X-Request-Handler-Origin-Region
X-Microsite
X-Distributor
Content-MD5
X-Ezoic-Cdn
X-Page-Id
X-FB-Debug
Access-Control-Allow-Method
Realpath
X-Correlation-Id
Accept-Charset
Fastcgi-Cache
X-Cluster-Name
X-Forwarded-For
X-Rid
X-PressLabs-Stats
X-Geo-Country
X-Hostname
X-Webkit-Csp
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Seen-By
X-B3-Sampled
X-Aspnet-Version
X-Ua-Device
X-Ratelimit-Remaining
Cleartype
X-Envoy-Decorator-Operation
Referer-Policy
X-Goog-Stored-Content-Length
X-Mobile
X-Newrelic-App-Data
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
DC
Cross-Origin-Resource-Policy
TCN
X-Ratelimit-Limit
X-Content-Options
X-Debug-Info
X-Origin-Cache
X-Varnish-Backend
X-Daa-Tunnel
X-Aspnetmvc-Version
X-Azure-Ref
X-Contextid
X-Logged-In
X-XRDS-Location
Count-Hit
X-Varnish-Grace
X-Git-Hash
X-Fb-Rlafr
X-App-Environment
Surrogate-Key
X-Grace
X-Amz-Replication-Status
X-Aspnet-Duration-Ms
X-Flags
X-Route-Name
X-IPS-LoggedIn
X-Revision
X-Request-Guid
X-Providence-Cookie
X-Is-Crawler
X-Origin-Server
X-App-Server
X-Client-Ip
X-TT
X-Hosted-By
Frame-Options
X-Amz-Meta-S3cmd-Attrs
X-Forwarded-Proto
Alternate-Protocol
X-Kinsta-Cache
X-Wix-Request-Id
X-Edge-Location-Klb
X-Whom
WPO-Cache-Message
WPO-Cache-Status
Healthy
Charset
Retry-After
X-Akamai-Edgescape
X-TTL
Viewport
X-F-Cache
X-Magnolia-Registration
MS-Author-Via
X-RateLimit-Reset
X-Backend-Name
Section-Io-Cache
X-COUNTRY
X-Webkit-CSP-Report-Only
Paypal-Debug-Id
X-B
SRV
X-Proxy-Cache-Info
X-App-Version
X-Activity-Id
X-AppVersion
X-Az
Amp-Access-Control-Allow-Source-Origin
ServerID
X-EdgeConnect-Cache-Status
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-Original-Request-Id
X-Response-Served-From
X-Rule
SD-X-WS
X-Language
X-N
Akamai-GRN
X-Cache-Rule
Host
X-ARC
X-Http-Reason
X-Instance
Filterid
X-Oracle-Dms-Ecid
X-Varnish-Age
Protected
Front
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Id
X-Rocket-Nginx-Serving-Static
X-Status
X-Akamai-Request-ID2
X-Edge-Location
X-Cache-Grace
X-User-Agent
X-Oracle-Dms-Rid
X-UUID
X-Page-View
X-L-Path
X-Jobs
X-Is-Bot
From-Origin
Fastly-SWR
X-Unique-Id
X-Environment-Context
Fastly-SIE
Server-Name
X-Region
X-Rendered-As
X-Framework
X-FW-Hash
X-FW-Serve
X-Cacheable-TTL
X-Cache-Control
X-FW-Type
X-FW-Static
X-FW-Version
X-FW-Dynamic
X-FW-Server
Access-Control-Request-Headers
X-Www-Served-By
X-Cache-Time
X-Adobe-Content
Country
X-Varnish-Server
X-Adobe-Loc
X-Type
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-Pixel-1
X-G
X-RemovedCookies
X-ProcessESI
X-Trace-Id
X-Time
X-Datadog-Sampling-Priority
X-Datadog-Parent-Id
X-Cache-Age
X-Load-Cache
X-Datadog-Trace-Id
X-Proxy
Refresh
X-DataDome
X-Vcache
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-ECache
X-Datadog-Sampled
X-CDN-Forward
X-Mg-Request-UUID
X-Source
X-Amzn-Remapped-Content-Length
X-Debug-IsPreview
X-Drupal-Cache-Tags
X-Debug-IsConnected
Version
X-Erf-Web-Scheduler
Accept-Language
X-B-Cache
Content-Disposition
Xet-Cookie
X-Signature
X-HTML-Minification-Powered-By
X-ID
Countrycode
Backend
X-Generated-By
X-Xrds-Location
X-WP-CF-Super-Cache-Cache-Control
CF-IPCountry
X-WP-CF-Super-Cache
X-DynaTrace
X-DynaTrace-JS-Agent
X-Upgrade-Enabled
X-Mode
X-Httpd
X-Nginx-Cache
Webserver
X-Servername
X-Varnish-Ttl
X-Tt-Trace-Tag
X-Tt-Trace-Host
Url
Xserver
X-Content-Age
X-Fastly-Request-Id
GEO-INFO
X-LAGOON
Load-Balancing
Locale
Onion-Location
S-Rt
X-Urbn-Site-Id
X-Tb
Meta-Geo
X-Cache-Operation
Fastcgi-Useragent
Azure-InstanceId
Azure-RegionName
X-Cache-Action
X-Storage
X-Director
X-GeoCode
X-GeoCountry
Azure-SiteName
Azure-Version
X-Device-Type
X-JoinUs
Azure-SlotName
X-Git-Commit
X-Container-Uri
Filters
X-XRDS-LOCATION
X-SaId
X-NYM-Debug-Backend
X-Rewrite-Enabled
X-Say-Cacheable
X-Say-TTL
X-ServerID
X-SayCDN-TTL
X-UPSTREAM-Address
X-URL
X-Urbn-Context-Path
X-Proto
X-Template
X-Varnish-Cache-Hits
Uber-Trace-Id
X-Cluster-Node
X-Content-Powered-By
X-Forwarded-Host
X-Varnish-Hostname
X-RM-Cache-TTL
X-B3-SpanId
CDN-RequestId
X-Labrador-Cache-Channel
X-Tt-Logid
X-PHP-Host
X-Soup
X-VC-Cache
X-MCACHE
X-Adobe-Source
X-Detected-As
X-Cache-Server
Web-Mar-Node
X-Served-From
X-Sql-Duration-Ms
X-Sql-Count
X-Sucuri-Cache
X-Sucuri-ID
X-VCT
OT-Force-Account-Verify
X-Generation-Time
X-Logging-Id
X-Ms-Version
X-Ms-Request-Id
Property-Id
DB-Nickname
Webcakes-App-Name
Webcakes-App-Version
X-Origin-Hint
X-Proxied
TWC-Privacy
Webcakes-Region
Node
X-Lambda-Id
Mn-Server-Ip
X-R9-Blue-Green-Version
X-Zen-Fury
TWC-Connection-Speed
X-Debug
TWC-Device-Class
TWC-GeoIP-Country
X-FB-TRIP-ID
X-Skip-Cache
X-Drupal-Cache-Contexts
TWC-Locale-Group
X-Zipkin-Id
X-RCS-CacheZone
X-Extlb
TWC-GeoIP-LatLong
X-Routing-Service
X-LSADC-Cache
X-Proxy-Build
X-Tumblr-Pixel-2
X-Fetched-On
X-Format
X-Uri
X-Timing-Wait
X-Tumblr-Pixel-3
Selected-Fe
Liferay-Portal
X-Loop
X-Tncms
Source
X-Endurance-Cache-Level
X-Rn-Rsrv
X-Hcs-Proxy-Type
X-Origin-Date
X-MP-GENERATED-AT
X-CCDN-CacheTTL
X-Nf-Request-Id
X-Cache-Hit
X-CCDN-Origin-Time
X-Redis-Cache
X-Tec-Api-Root
X-Tec-Api-Origin
Fastly-Drupal-HTML
Cross-Origin-Window-Policy
X-Tec-Api-Version
X-TimeS
X-Varnish-Hits
X-Ua
X-Srv
X-Pass-Why
X-Ratelimit-Reset
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
X-Cache-Expired-At
Section-Io-Origin-Status
Section-Io-Id
Content-Secure-Policy
Upgrade-Insecure-Requests
X-S
X-UA-Device-Type
X-Cache-TTL-Remaining
X-Real-IP
X-Node-Name
X-CACHE-AGE
X-Akamai-Transformed
X-Origin-CC
X-Origin-TTL
X-Pubstack
X-Newrelic-Synthetics
CDN-RequestPullSuccess
CDN-Cache
X-Server-W
CDN-EdgeStorageId
CDN-Uid
CDN-RequestPullCode
CDN-RequestCountryCode
CDN-PullZone
CDN-CachedAt
X-GEO
X-Via-JSL
X-Hl-Ver
Cache-Provider
X-Presslabs-Stats
X-RTag
X-Webkit-Csp-Report-Only
X-CSRF-Token
X-AIR-PT
MS-CV
Ms-Operation-Id
X-Handled-By
X-Parent-Response-Time
X-Cache-Host
X-A-Dgt
X-A-Dcw
X-A-Wwc
X-Is-Gdpr
X-Accel-Expires-Debug
X-Accel-Buffering
X-A-Dam
X-A-Ccd
X-Wix-Viewer-Type
W
We-Hiring
Web-Mar-Region
X-A
X-Aed
X-App
X-VG-WebCache
X-Viewer-Country
X-Vdms-Version
X-Cache-Info
X-Vdms-Path
X-Cache-NE
X-IPLB-Request-ID
X-Cache-Bucket
X-B-Cookie
X-Application
X-Bc-Bl
X-BCube-Filmed-By
X-Bl-Debug
VNS-Cache
VNS-Age
Ha-Gx-Prefs
Gh-Request-Id
HA-Ipaddr
L
Lang
L5d-Success-Class
Gannett-Cam-Experience-Id
Fastly-SSL
DCR-Decision-By
CPC-Cache
DCR-Processing-Time-Ms
Fastly-Backend-Name
Fastly-GeoIP-CountryCode
Magicmarker
Mail-Subject
Server-Host
Rendered-Blocks
Surrogated-Key
T-Server
Vix-Hermes-Req-Id
True-Client-Country-4JS
Redirect-Candidate
Odigeo-Trace-Id
Meta-Geo-Continent
MD5-Digest
N-Cache
NGB
Ngx.Var.Host
X-Vtex-Remote-Cache
X-Cache-Type
X-RateLimit-Limit-Second
X-Epic-Correlation-Id
X-Eu-Site
X-External-Request-Id
X-Policy
X-Fastly-Backend
X-Ec-GeoHdr
X-RateLimit-Remaining-Second
X-Ec-Custom-Error
X-Dispatcher-Number
CPC-Age
X-Ec-Fail
X-Reqid
X-Origin-Time
X-FC-Vary-Parameters
X-GeoIP-Region-Code
X-Nyt-Route
Xc-Version
X-Mvc-Supplant-Cachable
X-Wikidot-Backend
X-Has-Esi
X-Optimistic-Header
X-GeoIP-Country-Code
X-Worker
X-IPLB-Instance
X-Orig-Expires
X-Forwarded-Path
X-Gdpr
X-Developer
X-Destination
X-Slack-Backend
X-Slack-Shared-Secret-Outcome
X-Cdn-Diag
X-CF-Lambda-Fn
X-CGP
X-CF-Lambda-Version
X-Wikidot-Static-Cache
X-SRCache-Key
X-Var-Ttl
X-CacheTTL
X-Tx-Id
X-JWT-State
X-Tenant
X-Shop-Environment
X-Cms-Context
X-Date
X-We-Are-Hiring
X-Debug-Cache-Fetch
X-Restarts
X-Debug-Cache-Store
X-Request-Host
X-Rojux
X-D
X-SD-PageType
X-Conf
X-ScT
X-S-Cookie
X-Csrf-Jwt
X-Xfnlog-Site
Sslversion
X-Datadome
Canary
Apigw-Requestid
Cache-Name
BehaviorPad-Version
Candidate-Md5Url
Cache-Hits
ServedBy
X-TIME
WP-Super-Cache
X-Thanos
X-Esi-Check
X-Variation
X-DPWN-IS-SECURE
X-DefHash
X-Up
Cf-Device-Type
X-Thinkindot-L3
X-Gzip
X-Geo-Header
Origin-Agent-Cluster
X-DefElseHash
X-Fmm-Version
X-Hash
X-Generated-On
X-Core-Mission
X-BBC-Edge-Cache-Status
X-Bip
X-BYPASS-REASON
X-Auto-Login
X-App-Name
X-Varnishpool
X-Alternate-Cache-Key
X-ApacheServer
X-Cache-Debug
X-Cache-Id
X-CMSURLCustom
X-Human
X-Core-Value
X-Clara-WADP
X-Cdn-Origin
X-Varnish-Remaining-TTL
X-Varnish-CookieINHashed-On
X-Varnish-CookieHashed-On
X-Irp-Debug
X-Sn-Servicetimems
X-Pool
X-ProxyCache-Key
X-Platform
X-Sorting-Hat-PodId
X-PAYTM-SRV-ID
X-PERF
X-Sorting-Hat-ShopId
X-ProxyCache-Status
X-Qloud-Router
X-WADP-Cache
X-ShardId
X-Server-IP
X-S-Maxage
X-Request-Time
X-Refresh
X-Shopify-Stage
X-ShopId
X-Owner
X-Origin-Response-Time
X-SVT-ORM-RULES
X-Mid
X-Mly-Id
X-Loc
X-Level-Front-Cache
X-INCAP-ABP
X-VServer
X-SVT-ORM-VERSION
X-Storefront-Renderer-Rendered
X-Mvc-Supplant-OutputCached
X-Old-Content-Length
X-Org
X-PHP-Backend
X-Node-Id
X-No-Session
X-NGENIX-Cache
X-Nitro-Cache
X-Test
X-Clientip
Release
Producers
Origin
Memcached
Req-Svc-Chain
X-VG-TLSProxy
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
TDXMobile
X-Vmg-Version
Adler-Geo
AKAMAI
Environment
Datacenter
Cmstype
Cmsid
Expect-Staple
Host-ID
Machine
Is-Eu
Hostname
Thinkindot-Control
Platform
User-Cache-Control
X-Nananana
X-From
X-LJ-Flow-ID
X-Cluster
X-Hnp-Log
X-Cdn-Srv
X-Gen-Mode
Apple-News-Services-Host
Apple-News-Services-Handled
X-Vcl-Version
X-Dispatcher-Server
Server-Hostname
X-Akamai-Device-Characteristics
Server-Ext
NM-Fastcgi-Cache
X-Device-Os
X-GeoIP
Sever-Int
X-Ah-Environment
Apple-News-Services-Parsed-Url
X-Nginx-Cache-Key
X-VWS-Id
DSUID
Country-Code
CDCHOST
X-AWS-Id
X-WA-Info
X-Block-Status
Esi-Enabled
X-Origin
CloudFront-Viewer-Country
X-Scale
Apple-News-Services-Request-Url
X-NodeID
X-Forwarded-Site
Server-Info
Origin-EX
Wxu-Next-Region
Origin-CC
X-TIM-N
X-LB-NoCache
X-NCache
Ssr
X-Section
C-Via
X-Op-Id-All
X-Proxy-Cache-Status
Wxu-Next-Commit
Pics-Label
Wxu-Next-Hostname
X-Cache-Enabled
X-Access
X-Instance-Name
X-Cache-Status-Check
X-API-Version
AMP-Access-Control-Allow-Source-Origin
X-Github-Request-Id
Memory
X-Via-Fastly
X-CACHE-GROUP
Server-ID
X-Amz-Meta-Cb-Modifiedtime
Time
X-Tb-Optimization-Total-Bytes-Saved
NGX
X-Micro-Cache
X-HA-Backend
X-Wp-Cf-Super-Cache-Active
X-Air-Trace-Id
X-Internal-Host
X-Azure-Ref-OriginShield
X-Air-Source
X-Air-Hostname
X-Dc
X-Cs
X-Platform-Processor
X-Platform-Router
X-Vgn-Hpd-Reason
GeoIP-Latitude
X-B3-Spanid
X-AB
X-ZONE
X-Platform-Cluster
X-DC
X-Varnish-Beresp-Grace
X-Web-Node
X-Varnish-Beresp-Ttl
X-FTR-Request-ID
X-Microcachable
X-Origin-Expires
Cache-Host
X-Geo-Region
X-Buckets
Location
X-Zone
X-Correlation-ID
X-SIPLIST1
X-DataCenter
X-B3-Parentspanid
X-Fpc
XM
IsBot
PFcat
X-Backend-Instance
X-Pod-Name
X-HN
X-Accel-Version
X-VarnishDD-TTL
Cdn-Requestid
X-WP-CF-Super-Cache-Active
X-TraceId
Resin-Trace
Uri
X-Info
X-Ad-Defer-Variation
User-Agent
X-TA-CDN-Provider
X-LiteSpeed-Cache-Control
X-Is-Mobile
X-Via-CDN
X-Is-Supported-Browser
CF-Ctrl
X-Is-Tablet
X-FL-EDGE
X-FL-QIT-DEBUG
X-Site-Version
X-Browser-Name
Edge-Copy-Time
X-Is-Desktop
X-Via-Edge
A
Srvid
X-Locale
X-Via-SSL
Locid
YJS-ID
Sid
X-Tcp-Rtt
X-Cached-By
True-Client-Ip
X-Nitro-Cache-From
X-NGINX-Cache
X-Nitro-Rev
X-CS
X-Moov-T
GeoIP-Country-Code
X-Moov-Xdn-Version
GeoIp-Country-Code
X-Contensis-Viewer-Groups
X-ATG-Version
X-FireWall-Port
X-Cache-ASPX
X-VCache
X-NODE
SID
Epwk-X-Cache
X-Hyper-Cache
XServer
Cache-Key
X-Varnish-Authentication
Cdn
X-NewRelic-App-Data
X-CSRF-TOKEN
True-Client-IP
X-MSEdge-Flight
X-MSEdge-Features
X-Geo
X-Frame-Option
X-Upstream-Ht
X-Upstream-Ct
X-TRACE-ID
X-Service
X-SRV
X-Webstats-RespID
State
X-HS-Content-Campaign-Id
Fastly-Drupal-Html
X-Datacenter
NtCoent-Length
X-FPC
X-Platform-Server
X-Planisys-CDN-Rules
X-Planisys-CDN-Cache
Path
X-Planisys-CDN-TTL
X-HostName
Tcn
X-VC
X-Vgn-Hpd-Ssi
X-Vgn-Hpd-Variations-Key
WebServer
X-Fastly-Cache
X-Vgn-Hpd-Cached
X-LiteSpeed-Tag
X-Release
Cf-Ipcountry
X-APP-VERSION
X-Origin-Cache-Key
X-Api-Version
CountryCode
X-Edge-Server
X-Vercel-Cache
Cdncip
X-AK-Request-ID
X-Amz-Meta-Opti
Cdn-Request-Time
Cdnsip
X-Pad
Cdn-Host
X-Vercel-Id
X-Cache-Remote
X-Generated-In
LB
Lb
X-Air-Pt
X-Rocket-Build-Number
X-Esi
X-Sigma-Backend
X-Sigma
X-FTR-Backend-Server
X-FTR-Balancer
X-FTR-Expires
X-FTR-Cache-Status
X-FTR-Backend
X-Country-Code-Real
WZWS-RAY
X-Provided-By
X-Branch-Name
X-Cache-Ttl
X-UA
X-Traceid
Cache
X-Wp-Cf-Super-Cache
M-TraceId
Req-ID
X-NMSegId
X-Wp-Cf-Super-Cache-Cache-Control
X-HS-Status
X-Rebelmouse-Cache-Control
X-Wp-Cf-Super-Cache-Cookies-Bypass
X-Rebelmouse-Surrogate-Control
X-Cdn-Request-ID
Cluster
X-Ad-Load-Variation
Yak-Timeinfo
X-Scheme
X-Proxy-CacheRZ
Proxy-Connection
X-Akamai-Pragma-Client-IP
XkeyRZ
X-Gamma-Serve
X-GoCache-CacheStatus
X-GeoIP-City
X-RN-RSRV
X-CACHE-KEY
CDN
X-WP-CF-Super-Cache-Cookies-Bypass
Content-Script-Type
X-Vc
Srv
Geoip-Latitude
X-M-Reqid
X-M-Log
X-NWS-UUID-VERIFY
Content-Style-Type
X-Cdn-Cache-Status
X-Scope-Id
Pramga
X-Request-Start
X-Cdn-Forward
X-Lb-Cache
Ngx
Ohc-File-Size
Server-Id
X-Shield-Cache-Expires
Env
X-Tim-N
X-Varnish-Beresp-Status
X-Qnm-Cache
X-Ha-Backend
CF-Cached-On
Serverid
X-TT-LOGID
X-EC-Lua
X-Lb-Nocache
X-Request-URI
Kp-EeAlive
X-Edge-POP
X-Acquia-Site
X-Dw-Trace-Id
X-VCL-Version
PICS-Label
X-Cache-Date
X-Via-Ucdn
Edge-Cache
X-Acquia-Application-Trace
X-Acquia-Purge-Tags
X-Acquia-Application-UUID
Yjs-Id
X-Udemy-Cache-App-Namespace
X-CUA
X-TH-Server
X-CF-Cache-Header-Vary
X-Check-Cacheable
X-CF-Cache-Header-Cache-Control
X-User
X-Render-Time
X-Serial
X-ElasticPress-Query
X-Edge-Pop
Cache-Tv-Group
CACHE-MISS-TO-ORIGIN
X-Iauth-Set-Uid
X-Location
X-Mobile-URL
X-MiniProfiler-Ids
Inserted-Into-Cache-At
X-Fastly-Cache-Hits
Log-Origin
X-RAMCache
X-Miniprofiler-Ids
X-Litespeed-Cache-Control
X-Cached-Since
X-Snapshot-Date
Vha6-Origin
Cneonction