Threat Level: green Handler on Duty: Daniel Wesemann

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
Pragma
X-Powered-By
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
P3P
X-Cache-Hits
X-UA-Compatible
Alt-Svc
X-Xss-Protection
X-Served-By
CF-Ray
X-Download-Options
X-Timer
Access-Control-Allow-Headers
X-Request-Id
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Generator
X-Cache-Status
X-Check
X-Cacheable
X-Envoy-Upstream-Service-Time
X-Request-ID
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-FRAME-OPTIONS
X-Iinfo
X-Dns-Prefetch-Control
X-Drupal-Dynamic-Cache
Feature-Policy
X-Content-Security-Policy
Content-Encoding
Access-Control-Expose-Headers
Upgrade
Status
X-CDN
X-AspNetMvc-Version
X-XSS-PROTECTION
Server-Timing
Access-Control-Max-Age
X-Amz-Request-Id
Request-Context
X-Amz-Id-2
X-Turbo-Charged-By
X-AH-Environment
X-Robots-Tag
X-Via
X-Backend
X-Cache-Group
Cf-Edge-Cache
Host-Header
Keep-Alive
X-Proxy-Cache
X-Hacker
X-Server
X-Rq
X-Age
X-UA-Device
X-Server-Powered-By
Allow
X-Vhost
X-Varnish-Cache
X-Ws-Request-Id
EagleId
X-Dispatcher
X-Amz-Version-Id
Grace
P3p
Cf-Apo-Via
Nel
X-LiteSpeed-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Page-Speed
X-Device
Cf-Railgun
EagleEye-TraceId
X-Swift-SaveTime
X-Swift-CacheTime
X-Aws-Lambda-Call-Status
Ali-Swift-Global-Savetime
Accept-CH
X-Pingback
X-Node
X-Host
X-WebKit-CSP
X-Server-Id
Surrogate-Control
X-Backend-Server
X-OneAgent-JS-Injection
X-CST
X-Readtime
X-Nginx-Cache-Status
X-Akam-SW-Version
X-Content-Security-Policy-Report-Only
Permissions-Policy
Request-Id
X-Application-Context
X-Cache-Lookup
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Nginx-Upstream-Cache-Status
X-Cloud-Trace-Context
X-Trace
X-Response-Time
X-Edge
Accept-Ch-Lifetime
X-HW
X-Litespeed-Cache
X-Ua-Compatible
X-Mod-Pagespeed
Content-Location
X-Url
Accept-CH-Lifetime
X-Oneagent-Js-Injection
X-Clacks-Overhead
X-Ruxit-JS-Agent
X-Midtier
X-ECACHE
X-ESI
X-Mcache
Rating
X-Amz-Server-Side-Encryption
X-Country
X-Upstream
X-Vname
X-TtlSet
X-PC
X-Vcap-Request-Id
Xkey
X-MS-InvokeApp
X-Rack-Cache
X-D2id
Cache-Tag
Verso
X-Element-Page-Cache
X-Content-Type
Fastly-Restarts
X-Cache-TTL
X-Cdn-Fetch
X-Exp-Id
X-Exp-Variant
X-Kinja-Server
X-Use-Magma
X-Kinja-Build
X-Kinja-Revision
X-GoogleNews-Bot
X-Kinja
RTSS
Edge-Control
X-Powered-By-Plesk
X-VARITI-CCR
X-Ac
X-Cached
Origin-Trial
X-Navigation-Version
Accept-Ch
X-Abt-Application-Version
X-Ruxit-Js-Agent
X-Goog-Hash
X-WebKit-CSP-Report-Only
Service-Worker-Allowed
X-GitHub-Request-Id
X-Country-Code
X-Amz-Rid
X-Ttl
X-Sol
X-Middleton-Display
Display
Pagespeed
X-Mg-S
X-Dw-Request-Base-Id
SPRequestGuid
X-SharePointHealthScore
X-B3-TraceId
X-Browser-Type
X-Server-Name
Arr-Disable-Session-Affinity
Cross-Origin-Opener-Policy
X-Ua-Device
X-Varnish-TTL
AR-ATIME
AR-Request-ID
AR-PoweredBy
X-Powered-CMS
X-Instrumentation
X-Erf-Bev-Bev-Is-Generated
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Erf-Bev-Bev
AR-SID
X-Middleton-Response
Response
SPRequestDuration
SPIisLatency
X-Amzn-Trace-Id
X-Cache-Key
AR-CACHE
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Fastly-Request-ID
X-Cnection
X-HP-Trace-Id
X-HP-Webp
X-Jurisdiction
X-ORACLE-DMS-ECID
X-Version
X-ORACLE-DMS-RID
X-Accel-Expires
Front-End-Https
X-T
Cache-Status
Cache-Tags
X-NF-Request-ID
X-Times
X-Ser
Edge-Cache-Tag
X-Fastcgi-Cache
X-Px
X-MSEdge-Ref
X-Client-IP
Pinterest-Generated-By
X-Pinterest-Rid
Pinterest-Version
Public-Key-Pins
X-Hits
X-Recruiting
Nginx-Cache
X-B3-TraceId-Primal
MRF-Tech
Mrf-Cache-Status
X-Shield-Request-Id
X-Webkit-CSP
X-Request-Received
X-Frontend
Access-Control-Request-Method
X-Request-Processing-Time
X-LLID
X-RateLimit-Remaining
Server-Node
X-Ua-Browser
Payment
X-NWS-LOG-UUID
X-DIS-Request-ID
TP-Cache
X-B3-Traceid
X-Webkit-Csp
MicrosoftSharePointTeamServices
X-HS-Content-Id
X-HS-Combine-CSS
X-HS-Cache-Config
X-HS-Hub-Id
S
TP-L2-Cache
X-LB-Cache
X-Content-Digest
X-Goog-Metageneration
X-RateLimit-Limit
Content-MD5
X-FastCGI-Cache
X-Distributor
X-PressLabs-Stats
X-Webkit-CSP-Report-Only
Realpath
X-Hostname
X-Geo-Country
X-Erf-Stays-Pdp-Viaduct-Migration-Web
X-Microsite
X-Request-Handler-Origin-Region
X-Forwarded-For
X-Ezoic-Cdn
X-Envoy-Decorator-Operation
X-Page-Id
Access-Control-Allow-Method
X-Ratelimit-Remaining
X-FB-Debug
Fastcgi-Cache
Accept-Charset
X-Cluster-Name
X-Kinja-CCPA
X-Rid
X-GUploader-UploadID
X-Correlation-Id
X-Seen-By
X-Protected-By
TCN
X-Amz-Apigw-Id
X-Amzn-RequestId
Cleartype
X-B3-Sampled
DC
X-Origin-Server
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Debug-Info
X-Origin-Cache
X-Ratelimit-Limit
X-Newrelic-App-Data
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Mobile
Referer-Policy
X-XRDS-Location
X-Logged-In
X-Varnish-Backend
X-Git-Hash
X-TTL
X-Aspnet-Version
X-Kinsta-Cache
X-Edge-Location-Klb
X-Azure-Ref
Alternate-Protocol
Cross-Origin-Resource-Policy
Healthy
X-Server-ID
X-Varnish-Grace
X-Contextid
Surrogate-Key
X-App-Environment
X-Fb-Rlafr
X-Revision
X-Route-Name
X-Request-Guid
X-Providence-Cookie
X-Grace
X-Flags
X-Amz-Replication-Status
X-Aspnet-Duration-Ms
X-Is-Crawler
X-TT
X-Amz-Meta-S3cmd-Attrs
Count-Hit
X-Content-Options
X-Whom
X-Wix-Request-Id
X-Forwarded-Proto
Filterid
Charset
X-IPS-LoggedIn
MS-Author-Via
X-Akamai-Edgescape
Viewport
Frame-Options
WPO-Cache-Message
WPO-Cache-Status
X-App-Server
X-Id
Paypal-Debug-Id
X-Hosted-By
X-B
X-Cache-Age
X-Client-Ip
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-Backend-Name
X-Cache-Control
X-Magnolia-Registration
X-Trace-Id
X-Www-Served-By
X-Az
X-AppVersion
X-Activity-Id
X-Varnish-Ttl
Retry-After
Section-Io-Cache
Server-Name
X-Upgrade-Enabled
Refresh
X-Daa-Tunnel
Version
X-Type
X-Varnish-Server
X-F-Cache
X-Proxy-Cache-Info
Amp-Access-Control-Allow-Source-Origin
X-Proxy
X-Oracle-Dms-Ecid
X-Response-Served-From
X-Original-Request-Id
X-Oracle-Dms-Rid
X-Rule
X-Http-Reason
X-Time
VIX-Pulpo-Upstream-Status
SD-X-WS
X-ARC
Akamai-GRN
X-Cache-Rule
VIX-Pulpo-Node
Host
X-UUID
X-Akamai-Request-ID2
X-User-Agent
X-Varnish-Age
X-Status
X-Rocket-Nginx-Serving-Static
X-App-Version
Front
X-Edge-Location
X-Instance
Protected
X-Region
X-Rendered-As
X-L-Path
X-Jobs
X-Framework
X-Environment-Context
X-Is-Bot
X-Unique-Id
X-Cache-Grace
X-Source
SRV
X-Cacheable-TTL
X-COUNTRY
X-EdgeConnect-Cache-Status
X-FW-Type
X-FW-Static
X-Load-Cache
X-N
X-FW-Server
X-Cache-Time
X-FW-Hash
Fastly-SWR
Fastly-SIE
From-Origin
Access-Control-Request-Headers
X-Page-View
X-FW-Dynamic
X-FW-Serve
X-FW-Version
X-Adobe-Loc
X-Tumblr-User
X-G
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Adobe-Content
X-RemovedCookies
X-ProcessESI
X-Tumblr-Pixel-1
ServerID
Content-Disposition
X-Drupal-Cache-Tags
Country
X-CDN-Forward
X-Datadog-Trace-Id
X-Datadog-Parent-Id
X-Datadog-Sampling-Priority
X-HTML-Minification-Powered-By
X-Language
X-Tt-Trace-Tag
X-Tt-Trace-Host
Accept-Language
X-RateLimit-Reset
X-Yottaa-Metrics
Liferay-Portal
X-Vcache
Countrycode
X-Yottaa-Optimizations
X-Datadog-Sampled
X-DynaTrace
X-ID
X-Amzn-Remapped-Content-Length
X-DynaTrace-JS-Agent
X-Nf-Request-Id
X-Debug-IsPreview
X-Debug-IsConnected
X-DataDome
X-Mg-Request-UUID
X-Generated-By
X-ECache
X-B3-SpanId
Xet-Cookie
Backend
X-Drupal-Cache-Contexts
X-WP-CF-Super-Cache-Cache-Control
X-Tt-Logid
CF-IPCountry
X-WP-CF-Super-Cache
Webserver
Xserver
X-Mode
X-NYM-Debug-Backend
X-Device-Type
X-Content-Powered-By
X-Nginx-Cache
X-Erf-Web-Scheduler
X-Ratelimit-Reset
X-Signature
X-B-Cache
X-Zen-Fury
GEO-INFO
X-Httpd
X-Content-Age
X-Xrds-Location
X-XRDS-LOCATION
X-Cache-Operation
Url
X-Rewrite-Enabled
X-ServerID
X-Sucuri-ID
X-Sucuri-Cache
X-Servername
Azure-RegionName
Meta-Geo
Locale
Load-Balancing
Onion-Location
S-Rt
X-Container-Uri
X-Director
Filters
X-Git-Commit
X-Varnish-Cache-Hits
Azure-InstanceId
Azure-SiteName
Azure-SlotName
X-JoinUs
Azure-Version
X-LAGOON
X-SaId
X-Cache-Action
X-UPSTREAM-Address
X-Urbn-Site-Id
X-Urbn-Context-Path
X-Soup
X-Storage
X-Tb
X-Proto
X-Say-Cacheable
X-Say-TTL
Uber-Trace-Id
X-SayCDN-TTL
X-Varnish-Hostname
X-Cluster-Node
X-Served-From
X-PHP-Host
X-Detected-As
X-Forwarded-Host
X-Cache-Server
X-Ms-Version
X-VCT
X-Generation-Time
X-VC-Cache
Web-Mar-Node
X-RM-Cache-TTL
X-Logging-Id
X-Labrador-Cache-Channel
X-Ms-Request-Id
Mn-Server-Ip
Fastcgi-Useragent
DB-Nickname
TWC-GeoIP-Country
TWC-Privacy
TWC-Locale-Group
Webcakes-App-Name
Webcakes-App-Version
Webcakes-Region
TWC-GeoIP-LatLong
X-Adobe-Source
Property-Id
X-Extlb
TWC-Connection-Speed
TWC-Device-Class
Node
X-GeoCountry
X-Sql-Duration-Ms
X-Sql-Count
X-Origin-Hint
X-GeoCode
X-Skip-Cache
X-Tec-Api-Origin
X-Uri
X-Zipkin-Id
X-Tec-Api-Version
X-Tec-Api-Root
X-RCS-CacheZone
X-Routing-Service
X-Proxied
Selected-Fe
X-Fetched-On
X-Proxy-Build
X-Timing-Wait
X-LSADC-Cache
X-Tumblr-Pixel-3
X-Format
X-Tumblr-Pixel-2
X-Debug
X-R9-Blue-Green-Version
X-FB-TRIP-ID
X-Via-JSL
X-MP-GENERATED-AT
Fastly-Drupal-HTML
CDN-RequestId
X-Origin-Date
X-Cache-Expired-At
X-Lambda-Id
X-NGENIX-Cache
Source
OT-Force-Account-Verify
X-MCACHE
X-Node-Name
X-Cache-Hit
X-Template
X-Varnish-Hits
Content-Secure-Policy
X-AIR-PT
X-Cache-TTL-Remaining
X-UA-Device-Type
X-Srv
X-Loop
X-Tncms
X-Pass-Why
X-Pubstack
X-Endurance-Cache-Level
X-Ua
X-PHP-Backend
Upgrade-Insecure-Requests
Cross-Origin-Window-Policy
X-Server-W
X-Fastly-Request-Id
NGB
X-Redis-Cache
X-Origin-TTL
X-Origin-CC
X-Real-IP
Cache-Hits
X-Hcs-Proxy-Type
X-CCDN-Origin-Time
X-RTag
Ms-Operation-Id
X-CCDN-CacheTTL
MS-CV
X-Cache-Host
Cache-Name
Section-Io-Origin-Status
Section-Io-Id
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
X-Reqid
X-Cms-Context
Apigw-Requestid
Cache-Provider
X-IPLB-Request-ID
X-Xfnlog-Site
X-Optimistic-Header
X-Restarts
X-IPLB-Instance
X-CSRF-Token
X-Datadome
X-GEO
CDN-Cache
X-Cache-Type
X-S
CDN-EdgeStorageId
CDN-CachedAt
CDN-PullZone
CDN-RequestCountryCode
CDN-Uid
CDN-RequestPullSuccess
CDN-RequestPullCode
X-BYPASS-REASON
X-Hl-Ver
X-No-Session
X-ProxyCache-Key
X-ProxyCache-Status
X-Aspnetmvc-Version
X-Cluster
X-LJ-Flow-ID
X-AWS-Id
X-Newrelic-Synthetics
X-Via-Fastly
X-CACHE-AGE
X-VWS-Id
X-Akamai-Transformed
X-Section
X-Access
Canary
X-Ec-Fail
X-CacheTTL
X-Cdn-Diag
X-Ec-Custom-Error
X-Ec-GeoHdr
Candidate-Md5Url
X-Fastly-Backend
X-FC-Vary-Parameters
X-External-Request-Id
X-Eu-Site
X-CF-Lambda-Fn
X-Epic-Correlation-Id
X-Cache-NE
Sslversion
X-Csrf-Jwt
X-D
X-Debug-Cache-Store
X-Date
X-Destination
X-Developer
X-CGP
X-CF-Lambda-Version
BehaviorPad-Version
X-Dispatcher-Number
X-Conf
X-Debug-Cache-Fetch
X-Bc-Bl
Mail-Subject
MD5-Digest
Redirect-Candidate
X-A-Dam
Magicmarker
X-A-Dcw
L5d-Success-Class
Lang
X-A-Wwc
X-A-Dgt
Vix-Hermes-Req-Id
X-A-Ccd
VNS-Age
We-Hiring
W
Odigeo-Trace-Id
Ngx.Var.Host
Web-Mar-Region
Meta-Geo-Continent
X-A
N-Cache
Rendered-Blocks
L
VNS-Cache
DCR-Decision-By
DCR-Processing-Time-Ms
X-B-Cookie
CPC-Cache
CPC-Age
X-Cache-Bucket
X-Bl-Debug
X-BCube-Filmed-By
X-Application
Fastly-Backend-Name
Ha-Gx-Prefs
HA-Ipaddr
X-Aed
X-Accel-Expires-Debug
T-Server
Gh-Request-Id
Fastly-GeoIP-CountryCode
Surrogated-Key
Gannett-Cam-Experience-Id
X-Cache-Info
X-Irp-Debug
X-Shop-Environment
X-Forwarded-Path
X-Slack-Backend
X-Slack-Shared-Secret-Outcome
X-SRCache-Key
X-ScT
X-S-Cookie
X-RateLimit-Limit-Second
X-Policy
X-RateLimit-Remaining-Second
X-Request-Host
X-Rojux
X-Tenant
X-TIM-N
X-We-Are-Hiring
X-Vtex-Remote-Cache
X-Wikidot-Backend
X-Wikidot-Static-Cache
Xc-Version
X-Viewer-Country
X-VG-WebCache
X-Var-Ttl
X-Vdms-Path
X-Proxy-Cache-Status
X-Vdms-Version
X-Origin-Time
X-SD-PageType
Server-Host
X-GeoIP-Country-Code
X-TimeS
X-Nyt-Route
X-Gdpr
X-Mvc-Supplant-Cachable
X-GeoIP-Region-Code
X-Orig-Expires
X-Rn-Rsrv
X-Web-Node
X-Fmm-Version
X-VG-TLSProxy
X-Gzip
X-Varnishpool
X-Test
X-INCAP-ABP
X-SVT-ORM-VERSION
X-Thanos
X-Thinkindot-L3
X-Hash
X-Up
X-Human
X-Handled-By
X-Generated-On
TDXMobile
X-Has-Esi
Thinkindot-CacheControl
X-Is-Gdpr
X-JWT-State
X-Worker
X-Wix-Viewer-Type
Thinkindot-CacheControl-Type
Thinkindot-Control
X-Alternate-Cache-Key
X-Geo-Header
X-Forwarded-Site
Fastly-SSL
X-Accel-Buffering
True-Client-Country-4JS
X-WADP-Cache
X-Sorting-Hat-ShopId
X-Old-Content-Length
X-Pool
X-Org
X-Request-Time
X-Cache-Id
X-Node-Id
X-Cache-Debug
X-Platform
X-PERF
X-Core-Mission
X-Core-Value
X-CMSURLCustom
X-Owner
X-PAYTM-SRV-ID
X-Clara-WADP
X-S-Maxage
X-Bip
X-ApacheServer
X-App-Name
X-Level-Front-Cache
X-Sorting-Hat-PodId
X-Origin-Response-Time
X-Storefront-Renderer-Rendered
X-Esi-Check
X-Auto-Login
X-Shopify-Stage
X-Server-IP
X-Mly-Id
X-ShardId
X-Mid
X-BBC-Edge-Cache-Status
X-ShopId
X-SVT-ORM-RULES
X-Clientip
Memcached
Req-Svc-Chain
Machine
Cmstype
Cmsid
Origin
AKAMAI
Datacenter
Release
Host-ID
Environment
X-Vcl-Version
WP-Super-Cache
User-Cache-Control
Expect-Staple
X-DefHash
Producers
Platform
Is-Eu
CloudFront-Viewer-Country
X-DefElseHash
X-Cdn-Origin
Country-Code
X-Cdn-Srv
X-Azure-Ref-OriginShield
DSUID
X-Block-Status
Apple-News-Services-Host
X-Gen-Mode
X-NodeID
X-From
X-Origin
X-Nginx-Cache-Key
X-Nananana
X-Mvc-Supplant-OutputCached
X-Hnp-Log
X-Parent-Response-Time
X-Presslabs-Stats
X-Scale
Esi-Enabled
Apple-News-Services-Parsed-Url
Apple-News-Services-Request-Url
Apple-News-Services-Handled
X-WA-Info
ServedBy
X-Dispatcher-Server
X-Device-Os
Adler-Geo
CDCHOST
X-Variation
NM-Fastcgi-Cache
Server-Hostname
X-Qloud-Router
X-Varnish-CookieHashed-On
X-Varnish-CookieINHashed-On
X-VServer
Sever-Int
X-Vmg-Version
X-Varnish-Remaining-TTL
Server-Ext
X-Sn-Servicetimems
X-Loc
X-Cs
X-DPWN-IS-SECURE
X-Air-Trace-Id
X-Air-Hostname
X-Air-Source
X-TA-CDN-Provider
Origin-CC
C-Via
Wxu-Next-Region
X-Akamai-Device-Characteristics
X-GeoIP
Ssr
Pics-Label
X-NCache
X-Op-Id-All
Wxu-Next-Hostname
X-Nitro-Cache
Wxu-Next-Commit
X-LB-NoCache
X-App
X-Instance-Name
Origin-EX
AMP-Access-Control-Allow-Source-Origin
X-TIME
Time
X-Amz-Meta-Cb-Modifiedtime
X-Cache-Enabled
X-Refresh
X-Platform-Router
Memory
X-Cache-Status-Check
Cache-Host
X-Platform-Processor
X-Platform-Cluster
Server-Info
X-Microcachable
Server-ID
X-Locale
X-Tx-Id
X-Site-Version
X-Origin-Expires
XM
X-HA-Backend
X-Correlation-ID
X-HN
X-VarnishDD-TTL
PFcat
NGX
X-Dc
X-VHOST
X-ZONE
GeoIP-Latitude
Resin-Trace
Hostname
X-CACHE-GROUP
X-API-Version
X-Tb-Optimization-Total-Bytes-Saved
A
Origin-Agent-Cluster
X-Ad-Defer-Variation
Edge-Copy-Time
Locid
X-Via-Edge
X-Via-SSL
Srvid
X-FL-EDGE
Cf-Device-Type
X-Via-CDN
X-FL-QIT-DEBUG
X-Wp-Cf-Super-Cache-Active
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-Upstream-Ct
X-Upstream-Ht
X-DC
Cdn-Requestid
X-FireWall-Port
X-Vgn-Hpd-Reason
YJS-ID
X-Zone
X-ATG-Version
X-Webkit-Csp-Report-Only
X-Fpc
Sid
X-Cache-ASPX
X-Contensis-Viewer-Groups
Cache-Key
X-Internal-Host
X-Pod-Name
Uri
X-Github-Request-Id
X-Moov-Xdn-Version
X-Moov-T
X-Varnish-Authentication
X-Micro-Cache
User-Agent
X-Cached-By
True-Client-Ip
X-DataCenter
X-WP-CF-Super-Cache-Active
X-Provided-By
X-LiteSpeed-Cache-Control
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
X-Info
State
X-HS-Content-Campaign-Id
X-TraceId
X-Planisys-CDN-Cache
X-B3-Spanid
X-URL
X-B3-Parentspanid
X-RN-RSRV
IsBot
GeoIP-Country-Code
X-Platform-Server
X-SIPLIST1
X-Fastly-Cache
Location
X-Buckets
X-Sigma
X-AB
X-Nitro-Cache-From
X-VCache
X-Nitro-Rev
X-Release
X-Sigma-Backend
X-Cache-Remote
X-Rocket-Build-Number
X-NGINX-Cache
X-LiteSpeed-Tag
X-Api-Version
X-Backend-Instance
Cdn
X-MSEdge-Features
X-MSEdge-Flight
Cache
X-Datacenter
GeoIp-Country-Code
X-VC
SID
X-Geo-Region
X-Geo
XServer
X-Accel-Version
X-Gamma-Serve
X-Generated-In
X-CS
Srv
X-NewRelic-App-Data
X-CSRF-TOKEN
Lb
X-GeoIP-City
X-Vgn-Hpd-Cached
X-Vgn-Hpd-Ssi
X-Vgn-Hpd-Variations-Key
Cache-Tv-Group
NtCoent-Length
CF-Ctrl
True-Client-IP
X-Rebelmouse-Surrogate-Control
X-HS-Status
X-Rebelmouse-Cache-Control
X-TRACE-ID
X-FTR-Request-ID
X-Scheme
Path
HostName
X-Is-Desktop
Fastly-Drupal-Html
X-Is-Supported-Browser
X-Browser-Name
X-FPC
X-Tcp-Rtt
X-Is-Tablet
Kp-EeAlive
X-Is-Mobile
X-HostName
Tcn
X-Location
X-SRV
Epwk-X-Cache
Ohc-File-Size
X-Hyper-Cache
X-Mobile-URL
X-Frame-Option
X-GoCache-CacheStatus
Serverid
X-TX-ID
X-APP-VERSION
X-UA
Cf-Ipcountry
CountryCode
Cdnsip
On-Server
X-Aicache-OS
X-Region-Sid
CacheControlHeader
X-AK-Request-ID
Cdncip
X-Amz-Meta-Opti
X-Men
X-Service
X-Air-Pt
X-Esi
X-Developers
X-Guploader-Uploadid
X-Traceid
RNT-Time
X-Branch-Name
Tube-Got-Eval
Tube-Get-Contents
Tube-Got-Results
Tube-Return
RNT-Machine
X-Webstats-RespID
V-Age
X-Acquia-Purge-Cdn-Unconfigured
X-SB
X-Cache-Ttl
Click-Count-Action-Start
X-Cache-FS-Status
X-Cache-Tags
X-B3-Trace-ID
Proxy-Connection
X-CDN-Cache-Status
X-Via-Popv
X-Via-Popn
X-Via-Poph
X-Req
X-Wp-Cf-Super-Cache-Cache-Control
X-V-Cache
Click-Count-Error
X-LB-ID
X-Minions-Version
Mime-Version
X-EC-Lua
WebServer
X-Wp-Cf-Super-Cache
X-Wp-Cf-Super-Cache-Cookies-Bypass
WWW-Authenticate
X-Vc
Env
X-Cdn-Cache-Status
X-Nc
X-Wa
XkeyRZ
ENV
Yak-Timeinfo
X-Pad
X-Servedbyhost
WZWS-RAY
X-Proxy-CacheRZ
Ohc-Cache-HIT
X-CACHE-KEY
X-VCL-Version
CDN
LB
X-User
X-Cdn-Forward
X-NWS-UUID-VERIFY
Geoip-Latitude
CF-Cached-On
X-Edge-Pop
X-Akamai-Pragma-Client-IP
Ngx
X-Fastly-Country-Code
X-Check-Cacheable
X-Lb-Cache
Cdn-Request-Time
X-Edge-Server
Content-Style-Type
X-Ha-Backend
X-Processor
Content-Script-Type
Server-Id
Cdn-Host
X-TH-Server
X-Vercel-Cache
X-Ckpd-Fst-Backend
X-Vercel-Id
X-TT-LOGID
X-Lb-Nocache
X-IN-APIGATEWAYSSL
X-IN-APIGATEWAY
X-NMSegId
PICS-Label
X-Acquia-Application-UUID
X-Acquia-Purge-Tags
X-Acquia-Site
X-APP
HIT
X-FTR-Cache-Status
X-FTR-Backend
X-FTR-Backend-Server
X-Country-Code-Real
X-FTR-Expires
M-TraceId
X-Acquia-Application-Trace
Req-ID
X-FTR-Balancer
X-MiniProfiler-Ids
X-WP-CF-Super-Cache-Cookies-Bypass
X-Litespeed-Cache-Control
X-Render-Time
X-Edge-POP
X-Dw-Trace-Id
X-Snapshot-Date
X-CUA
X-Via-Ucdn
X-Origin-Cache-Key
Yjs-Id
X-Response-By
X-Cdn-Request-ID
X-Serial
Vha6-Origin
X-Service-Response-Time
Cluster
X-Ad-Load-Variation
Cneonction
Inserted-Into-Cache-At
X-Fastly-Cache-Hits
X-Cached-Since
X-M-Log
X-M-Reqid
X-Fastly-Backend-Reqs
CACHE-MISS-TO-ORIGIN
Log-Origin
Sm-Log-Id
X-Iauth-Set-Uid
X-Miniprofiler-Ids
Edge-Cache
X-Cache-Date
X-ElasticPress-Query
X-RAMCache
X-Udemy-Cache-App-Namespace