Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
X-Powered-By
Pragma
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
Alt-Svc
P3P
X-Cache-Hits
X-UA-Compatible
X-Xss-Protection
X-Served-By
CF-Ray
X-Download-Options
X-Request-Id
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Cache-Status
X-Generator
X-Check
X-Cacheable
X-DNS-Prefetch-Control
X-FRAME-OPTIONS
X-Envoy-Upstream-Service-Time
Timing-Allow-Origin
X-Iinfo
X-Drupal-Dynamic-Cache
Feature-Policy
X-Content-Security-Policy
X-Dns-Prefetch-Control
Server-Timing
X-XSS-PROTECTION
Content-Encoding
Access-Control-Expose-Headers
Upgrade
X-CDN
Status
X-AspNetMvc-Version
Access-Control-Max-Age
X-Amz-Request-Id
X-Request-ID
Request-Context
X-Amz-Id-2
X-Via
X-Turbo-Charged-By
X-Backend
X-Cache-Group
X-AH-Environment
X-Robots-Tag
Cf-Edge-Cache
Keep-Alive
Host-Header
X-Hacker
X-Proxy-Cache
X-UA-Device
X-Vhost
X-Server
X-Rq
X-Server-Powered-By
Allow
X-Age
X-Ws-Request-Id
X-Varnish-Cache
X-Dispatcher
EagleId
X-Amz-Version-Id
P3p
Nel
X-LiteSpeed-Cache
Grace
Cf-Apo-Via
Cf-Railgun
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Page-Speed
X-Device
EagleEye-TraceId
X-OneAgent-JS-Injection
X-Aws-Lambda-Call-Status
X-Swift-CacheTime
X-Swift-SaveTime
X-Pingback
Ali-Swift-Global-Savetime
X-Host
X-Node
Accept-CH
X-WebKit-CSP
X-CST
X-Backend-Server
X-Cache-Lookup
Surrogate-Control
X-Server-Id
X-Readtime
X-Nginx-Cache-Status
Permissions-Policy
Accept-CH-Lifetime
X-Nginx-Upstream-Cache-Status
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Akam-SW-Version
Request-Id
X-Application-Context
X-Content-Security-Policy-Report-Only
X-Cloud-Trace-Context
X-Ua-Compatible
X-Response-Time
X-HW
X-Trace
X-Edge
Xkey
X-Ruxit-JS-Agent
Content-Location
X-Clacks-Overhead
X-Mod-Pagespeed
Rating
X-Midtier
X-Amz-Server-Side-Encryption
X-ESI
X-ECACHE
X-Url
X-Mcache
Accept-Ch
Cache-Tag
X-Upstream
X-Country
X-Vcap-Request-Id
X-MS-InvokeApp
X-Rack-Cache
X-D2id
Verso
X-Kinja-Server
X-Kinja-Revision
X-Cdn-Fetch
X-GoogleNews-Bot
X-Powered-By-Plesk
X-Kinja-Build
X-Element-Page-Cache
X-Exp-Id
X-Use-Magma
X-Exp-Variant
X-Kinja
Edge-Control
Accept-Ch-Lifetime
X-WebKit-CSP-Report-Only
X-TtlSet
X-PC
X-Vname
RTSS
X-Cache-TTL
X-Ac
Service-Worker-Allowed
Fastly-Restarts
X-Country-Code
Origin-Trial
X-VARITI-CCR
X-Navigation-Version
X-Goog-Hash
X-Abt-Application-Version
X-Ruxit-Js-Agent
X-Varnish-TTL
X-Litespeed-Cache
X-Cached
X-Aspnetmvc-Version
X-GitHub-Request-Id
X-Browser-Type
X-Oneagent-Js-Injection
X-Amz-Rid
X-Webkit-CSP
X-Sol
Pagespeed
X-Middleton-Display
Display
Cross-Origin-Opener-Policy
X-Kinja-CCPA
X-Dw-Request-Base-Id
X-Server-Name
SPRequestGuid
X-SharePointHealthScore
X-Amzn-Trace-Id
X-NWS-LOG-UUID
X-ORACLE-DMS-RID
X-Powered-CMS
X-ORACLE-DMS-ECID
X-Mg-S
SPRequestDuration
SPIisLatency
X-Erf-Bev-Bev-Is-Generated
X-Instrumentation
X-Server-Lifecycle-Phase
X-Erf-Bev-Bev
X-Kraken-Loop-Name
AR-SID
AR-PoweredBy
AR-ATIME
AR-Request-ID
X-Middleton-Response
Response
X-Cache-Key
X-Content-Type
Arr-Disable-Session-Affinity
X-Times
X-Ttl
Pinterest-Version
X-Pinterest-Rid
Pinterest-Generated-By
X-B3-TraceId
X-FastCGI-Cache
X-Client-IP
X-Version
X-Server-ID
X-HP-Webp
X-HP-Trace-Id
X-Jurisdiction
X-Cnection
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Fastly-Request-ID
AR-CACHE
X-Accel-Expires
X-T
X-NF-Request-ID
Cache-Tags
X-B3-Traceid
Nginx-Cache
X-Ser
Cache-Status
Edge-Cache-Tag
Front-End-Https
X-MSEdge-Ref
X-Hits
X-Px
Public-Key-Pins
X-RateLimit-Remaining
X-Recruiting
Payment
MRF-Tech
Mrf-Cache-Status
X-B3-TraceId-Primal
X-Request-Received
X-Request-Processing-Time
X-LLID
X-Frontend
Server-Node
X-Ua-Browser
X-TTL
S
X-Shield-Request-Id
X-RateLimit-Limit
X-DIS-Request-ID
X-Goog-Metageneration
X-GUploader-UploadID
Content-MD5
X-PressLabs-Stats
TP-Cache
X-Amzn-RequestId
MicrosoftSharePointTeamServices
X-Amz-Apigw-Id
Access-Control-Request-Method
X-Content-Digest
X-Protected-By
X-HS-Hub-Id
X-HS-Combine-CSS
X-HS-Content-Id
X-HS-Cache-Config
X-Erf-Stays-Pdp-Viaduct-Migration-Web
X-Request-Handler-Origin-Region
X-Microsite
Realpath
X-Distributor
Fastcgi-Cache
X-Daa-Tunnel
X-FB-Debug
X-LB-Cache
Access-Control-Allow-Method
X-Cluster-Name
X-Page-Id
X-Forwarded-For
Accept-Charset
X-Rid
X-Ratelimit-Remaining
X-Fastcgi-Cache
X-Geo-Country
TP-L2-Cache
X-Ezoic-Cdn
X-Aspnet-Version
X-Hostname
X-Ua-Device
X-B3-Sampled
X-Seen-By
X-Goog-Generation
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
Cross-Origin-Resource-Policy
Cleartype
X-Ratelimit-Limit
X-Correlation-Id
Count-Hit
TCN
Referer-Policy
X-Mobile
DC
X-Varnish-Backend
X-Content-Options
X-App-Server
X-Newrelic-App-Data
X-Logged-In
X-Hosted-By
X-Kinsta-Cache
X-Origin-Cache
X-Edge-Location-Klb
X-Git-Hash
X-Debug-Info
X-Contextid
X-Envoy-Decorator-Operation
X-Grace
X-IPS-LoggedIn
X-Flags
X-Fb-Rlafr
X-Amz-Replication-Status
X-Aspnet-Duration-Ms
X-Is-Crawler
X-Providence-Cookie
X-Request-Guid
X-Route-Name
X-Varnish-Grace
X-Revision
Surrogate-Key
Frame-Options
X-TT
X-App-Environment
X-Amz-Meta-S3cmd-Attrs
X-Azure-Ref
X-Id
X-Forwarded-Proto
Retry-After
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-Webkit-CSP-Report-Only
X-F-Cache
X-Origin-Server
X-Wix-Request-Id
Section-Io-Cache
X-Whom
X-Magnolia-Registration
Alternate-Protocol
Healthy
X-RateLimit-Reset
Charset
X-COUNTRY
X-Akamai-Edgescape
WPO-Cache-Message
X-Backend-Name
WPO-Cache-Status
MS-Author-Via
Viewport
X-Proxy-Cache-Info
X-App-Version
X-Webkit-Csp
Paypal-Debug-Id
X-Xrds-Location
X-XRDS-Location
X-B
SRV
X-Az
X-Activity-Id
X-Www-Served-By
X-Language
X-AppVersion
Amp-Access-Control-Allow-Source-Origin
X-DataDome
X-Original-Request-Id
SD-X-WS
X-Cache-Rule
ServerID
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-Instance
Filterid
X-Varnish-Server
X-Response-Served-From
X-ARC
Host
X-Http-Reason
X-UUID
X-Edge-Location
X-Client-Ip
X-Akamai-Request-ID2
X-Datadog-Trace-Id
X-N
X-Cache-Grace
X-Datadog-Sampling-Priority
X-Datadog-Parent-Id
Country
Akamai-GRN
X-Varnish-Age
Front
X-User-Agent
X-Rule
Protected
X-FW-Version
X-Status
X-Page-View
X-Jobs
X-EdgeConnect-Cache-Status
X-FW-Hash
X-Unique-Id
X-FW-Dynamic
X-Region
X-FW-Type
X-FW-Server
X-FW-Serve
From-Origin
Server-Name
X-Cacheable-TTL
X-L-Path
X-Environment-Context
X-FW-Static
X-Rendered-As
X-Framework
X-Tumblr-Pixel
X-Is-Bot
X-Tumblr-Pixel-0
X-Rocket-Nginx-Serving-Static
X-Adobe-Loc
X-Type
Fastly-SIE
X-Cache-Time
Fastly-SWR
X-Load-Cache
X-Adobe-Content
X-Tumblr-Pixel-1
X-Tumblr-User
Access-Control-Request-Headers
X-RemovedCookies
X-G
X-Kong-Proxy-Latency
X-Time
X-Kong-Upstream-Latency
X-ProcessESI
X-Trace-Id
X-Yottaa-Optimizations
X-Proxy
X-Yottaa-Metrics
X-Vcache
X-Datadog-Sampled
X-Mg-Request-UUID
X-Amzn-Remapped-Content-Length
X-Cache-Control
X-B-Cache
Content-Disposition
X-Signature
X-ECache
X-URL
X-Debug-IsPreview
X-Debug-IsConnected
X-CDN-Forward
X-Tec-Api-Version
X-Tec-Api-Root
X-Tec-Api-Origin
X-Nf-Request-Id
Refresh
X-Erf-Web-Scheduler
Backend
X-Drupal-Cache-Tags
X-Cache-Age
Xet-Cookie
X-DynaTrace
Accept-Language
X-WP-CF-Super-Cache-Cache-Control
X-WP-CF-Super-Cache
X-Source
Countrycode
X-Generated-By
CF-IPCountry
X-HTML-Minification-Powered-By
X-Servername
X-Httpd
X-DynaTrace-JS-Agent
X-Nginx-Cache
Webserver
Url
X-Tt-Trace-Tag
X-Tt-Trace-Host
X-Mode
Version
X-Device-Type
X-NYM-Debug-Backend
X-Template
Xserver
X-Storage
X-Content-Powered-By
GEO-INFO
X-Content-Age
X-JoinUs
X-Urbn-Context-Path
X-LAGOON
X-UPSTREAM-Address
X-GeoCode
OT-Force-Account-Verify
X-GeoCountry
X-Cache-Action
Onion-Location
Meta-Geo
Load-Balancing
S-Rt
X-XRDS-LOCATION
X-Director
Locale
X-Cache-Operation
X-ServerID
Filters
X-SaId
X-Say-TTL
X-Rewrite-Enabled
X-Urbn-Site-Id
X-Rn-Rsrv
X-SayCDN-TTL
X-Say-Cacheable
X-Varnish-Cache-Hits
X-Generation-Time
Azure-SlotName
X-Git-Commit
X-MCACHE
X-Cluster-Node
Azure-InstanceId
X-Varnish-Hostname
X-Proto
X-Forwarded-Host
Azure-Version
Azure-SiteName
X-Soup
Azure-RegionName
X-Container-Uri
X-Ms-Version
X-Cache-Server
X-Lambda-Id
X-RM-Cache-TTL
Web-Mar-Node
X-PHP-Host
X-Adobe-Source
X-VCT
X-Tt-Logid
X-Labrador-Cache-Channel
X-Ms-Request-Id
X-Served-From
X-Tb
X-VC-Cache
X-Detected-As
X-Sql-Duration-Ms
X-Sql-Count
X-Format
X-Proxied
X-R9-Blue-Green-Version
X-RCS-CacheZone
Property-Id
Mn-Server-Ip
X-Zipkin-Id
Node
X-Origin-Hint
X-Tumblr-Pixel-3
TWC-Connection-Speed
X-Tncms
X-Skip-Cache
Webcakes-App-Name
X-FB-TRIP-ID
Webcakes-App-Version
X-Extlb
X-Routing-Service
Webcakes-Region
X-Tumblr-Pixel-2
Uber-Trace-Id
X-Debug
TWC-GeoIP-Country
X-Logging-Id
TWC-Locale-Group
TWC-Privacy
X-Loop
TWC-Device-Class
TWC-GeoIP-LatLong
DB-Nickname
Selected-Fe
X-Proxy-Build
X-LSADC-Cache
X-Fetched-On
X-CCDN-CacheTTL
X-Hcs-Proxy-Type
X-Timing-Wait
X-Zen-Fury
X-Ua
X-CCDN-Origin-Time
X-Uri
Fastcgi-Useragent
X-Cache-Hit
X-Endurance-Cache-Level
Cross-Origin-Window-Policy
X-Sucuri-Cache
X-Upgrade-Enabled
X-Sucuri-ID
Source
X-Redis-Cache
X-Drupal-Cache-Contexts
CDN-RequestId
X-Oracle-Dms-Ecid
X-Oracle-Dms-Rid
X-B3-SpanId
X-Srv
X-Ratelimit-Reset
Section-Io-Origin-Status
Section-Io-Id
X-Origin-Date
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
X-MP-GENERATED-AT
X-TimeS
X-CACHE-AGE
X-Newrelic-Synthetics
Liferay-Portal
X-ID
Fastly-Drupal-HTML
X-S
X-Pass-Why
X-Varnish-Hits
X-Cache-Expired-At
X-Origin-CC
X-Origin-TTL
X-NGENIX-Cache
Upgrade-Insecure-Requests
X-Akamai-Transformed
X-Real-IP
X-Handled-By
X-Cache-TTL-Remaining
X-UA-Device-Type
NGB
X-Fastly-Request-Id
X-GEO
X-Node-Name
X-Hl-Ver
X-Varnish-Ttl
X-Via-JSL
X-Pubstack
CDN-CachedAt
X-Reqid
X-Restarts
X-Xfnlog-Site
X-Optimistic-Header
X-Cms-Context
Apigw-Requestid
X-Cache-Type
CDN-Uid
CDN-RequestPullSuccess
CDN-PullZone
CDN-EdgeStorageId
Content-Secure-Policy
CDN-RequestCountryCode
CDN-Cache
CDN-RequestPullCode
X-Server-W
MS-CV
ServedBy
Ms-Operation-Id
X-FTR-Request-ID
X-CSRF-Token
X-RTag
X-ProxyCache-Status
X-Tx-Id
X-Cache-Host
X-Parent-Response-Time
X-ProxyCache-Key
WP-Super-Cache
X-No-Session
X-BYPASS-REASON
MD5-Digest
Meta-Geo-Continent
Ha-Gx-Prefs
HA-Ipaddr
Magicmarker
L
X-Request-Host
L5d-Success-Class
Lang
Redirect-Candidate
Ngx.Var.Host
Odigeo-Trace-Id
X-Nyt-Route
N-Cache
X-Orig-Expires
X-Gdpr
Origin-Agent-Cluster
Gh-Request-Id
X-Origin-Time
Candidate-Md5Url
X-SD-PageType
X-ScT
X-S-Cookie
X-IPLB-Request-ID
X-IPLB-Instance
X-Slack-Shared-Secret-Outcome
X-Slack-Backend
X-Shop-Environment
X-Rojux
X-SRCache-Key
DCR-Processing-Time-Ms
Fastly-SSL
X-Vdms-Path
DCR-Decision-By
X-Forwarded-Path
BehaviorPad-Version
X-Tenant
Canary
Gannett-Cam-Experience-Id
X-External-Request-Id
X-Debug-Cache-Fetch
X-D
X-Application
X-Csrf-Jwt
X-Vdms-Version
X-Aed
X-A-Dgt
X-A-Wwc
X-Destination
X-Debug-Cache-Store
X-B-Cookie
X-Bc-Bl
X-Conf
X-Viewer-Country
X-CF-Lambda-Fn
X-CGP
X-CacheTTL
X-Cache-NE
X-BCube-Filmed-By
X-We-Are-Hiring
X-Bl-Debug
X-Vtex-Remote-Cache
X-Worker
X-Developer
Server-Host
Sslversion
Surrogated-Key
X-Ec-Fail
Rendered-Blocks
X-Ec-GeoHdr
X-Fastly-Backend
X-CF-Lambda-Version
X-Eu-Site
X-Epic-Correlation-Id
T-Server
True-Client-Country-4JS
X-Dispatcher-Number
X-A-Ccd
X-A-Dam
X-A-Dcw
X-Ec-Custom-Error
Xc-Version
Vix-Hermes-Req-Id
W
Web-Mar-Region
X-A
X-FC-Vary-Parameters
X-App
X-LJ-Flow-ID
X-TIME
X-Cluster
X-VWS-Id
X-AWS-Id
X-Vcl-Version
X-Request-Time
X-Loc
X-Level-Front-Cache
Thinkindot-Control
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-Refresh
X-Qloud-Router
X-Pool
X-Policy
X-RateLimit-Limit-Second
X-RateLimit-Remaining-Second
VNS-Cache
TDXMobile
We-Hiring
VNS-Age
X-Server-IP
X-Sn-Servicetimems
X-Shopify-Stage
Origin
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
Mail-Subject
X-Storefront-Renderer-Rendered
X-Irp-Debug
X-ShopId
X-Accel-Buffering
X-GeoIP-Region-Code
Req-Svc-Chain
Release
X-ShardId
Producers
X-S-Maxage
X-DPWN-IS-SECURE
X-Node-Id
X-Clientip
X-CMSURLCustom
X-NodeID
X-Cdn-Origin
X-Old-Content-Length
X-Cdn-Diag
X-Nitro-Cache
X-Core-Mission
X-DefElseHash
X-DefHash
X-Mvc-Supplant-Cachable
X-Date
X-Core-Value
X-Nananana
X-Correlation-ID
X-Cache-Info
X-Platform
X-PERF
X-Auto-Login
X-ApacheServer
X-Alternate-Cache-Key
X-Mid
X-SVT-ORM-RULES
X-PAYTM-SRV-ID
X-Owner
X-Cache-Bucket
X-Cache-Debug
X-Org
X-Bip
X-BBC-Edge-Cache-Status
X-Mly-Id
X-Accel-Expires-Debug
Platform
X-Var-Ttl
Cf-Device-Type
X-Variation
Cache-Provider
X-Varnish-CookieINHashed-On
X-Varnish-CookieHashed-On
Cmsid
Cmstype
X-Thinkindot-L3
X-Thanos
X-Hash
Datacenter
CPC-Age
CPC-Cache
X-Varnish-Remaining-TTL
AKAMAI
X-Wix-Viewer-Type
X-Wikidot-Static-Cache
X-Generated-On
X-Geo-Header
X-GeoIP-Country-Code
X-App-Name
X-Wikidot-Backend
X-VServer
X-Varnishpool
Adler-Geo
X-VG-TLSProxy
X-VG-WebCache
X-Vmg-Version
Environment
X-Up
Fastly-Backend-Name
Expect-Staple
X-Human
X-Test
Host-ID
Fastly-GeoIP-CountryCode
X-SVT-ORM-VERSION
Is-Eu
X-INCAP-ABP
Cache-Name
User-Cache-Control
X-Proxy-Cache-Status
X-Dispatcher-Server
X-Cache-Status-Check
X-Origin
X-Block-Status
Apple-News-Services-Host
NM-Fastcgi-Cache
X-Origin-Response-Time
Apple-News-Services-Handled
X-Forwarded-Site
Apple-News-Services-Parsed-Url
X-WA-Info
X-GeoIP
X-Fmm-Version
X-Mvc-Supplant-OutputCached
X-Gzip
Machine
X-Nginx-Cache-Key
X-Clara-WADP
X-Akamai-Device-Characteristics
X-Datadome
X-Gen-Mode
X-WADP-Cache
X-Cdn-Srv
X-Cache-Id
Apple-News-Services-Request-Url
Server-Hostname
Esi-Enabled
CDCHOST
DSUID
Server-Ext
Country-Code
CloudFront-Viewer-Country
X-Esi-Check
X-AIR-PT
X-Device-Os
Sever-Int
X-Hnp-Log
X-Micro-Cache
X-From
X-AB
X-B3-Spanid
X-Section
Ssr
Memcached
C-Via
X-LB-NoCache
X-NCache
NGX
X-Instance-Name
X-Cache-Enabled
Wxu-Next-Region
X-Op-Id-All
Wxu-Next-Hostname
Pics-Label
X-Access
X-Amz-Meta-Cb-Modifiedtime
X-JWT-State
X-Is-Gdpr
Wxu-Next-Commit
Server-Info
X-Has-Esi
AMP-Access-Control-Allow-Source-Origin
X-API-Version
X-Dc
X-CACHE-GROUP
X-Vgn-Hpd-Reason
Hostname
X-Geo-Region
X-Via-Fastly
Server-ID
Cache-Hits
X-HA-Backend
X-Scale
Origin-CC
Memory
Origin-EX
Time
X-Accel-Version
X-Wp-Cf-Super-Cache-Active
X-ZONE
X-PHP-Backend
X-TraceId
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-TIM-N
X-Buckets
X-Presslabs-Stats
X-Platform-Processor
X-SIPLIST1
X-Platform-Router
IsBot
Cdn-Requestid
X-Platform-Cluster
Location
X-Is-Desktop
X-Air-Hostname
X-Air-Source
X-Air-Trace-Id
X-Browser-Name
X-Is-Mobile
X-Tcp-Rtt
X-Is-Tablet
X-Is-Supported-Browser
X-Tb-Optimization-Total-Bytes-Saved
X-Internal-Host
Sid
CF-Ctrl
YJS-ID
X-B3-Parentspanid
Resin-Trace
X-Fpc
X-Backend-Instance
X-Azure-Ref-OriginShield
X-Cs
X-WP-CF-Super-Cache-Active
X-Zone
X-Cached-By
GeoIP-Latitude
X-TA-CDN-Provider
X-DC
X-Origin-Expires
X-DataCenter
Cache-Host
X-Microcachable
XM
X-Web-Node
X-Info
X-Hyper-Cache
X-NewRelic-App-Data
Epwk-X-Cache
Uri
X-Frame-Option
X-LiteSpeed-Cache-Control
X-Pod-Name
X-VarnishDD-TTL
X-Site-Version
X-Nitro-Rev
True-Client-Ip
X-HN
X-NGINX-Cache
X-Locale
X-Nitro-Cache-From
PFcat
X-Esi
X-Service
X-Webstats-RespID
GeoIp-Country-Code
GeoIP-Country-Code
User-Agent
X-Ad-Defer-Variation
X-VC
X-VCache
X-Origin-Cache-Key
X-CS
Srvid
X-Via-CDN
X-Via-Edge
X-Via-SSL
X-FL-EDGE
A
Locid
Edge-Copy-Time
Cdn
XServer
X-FL-QIT-DEBUG
X-CSRF-TOKEN
LB
X-FTR-Balancer
X-FTR-Expires
X-FTR-Cache-Status
X-Datacenter
X-Country-Code-Real
True-Client-IP
X-FTR-Backend-Server
X-FTR-Backend
X-Github-Request-Id
SID
X-Geo
X-Pad
NtCoent-Length
X-ATG-Version
X-Cache-ASPX
X-FireWall-Port
X-SRV
X-Varnish-Authentication
X-Contensis-Viewer-Groups
X-TRACE-ID
X-Moov-Xdn-Version
X-Edge-Server
Cdn-Host
X-Moov-T
X-Webkit-Csp-Report-Only
Cdn-Request-Time
X-NMSegId
X-Vercel-Cache
X-Vercel-Id
Cache-Key
X-FPC
WZWS-RAY
X-MSEdge-Features
Fastly-Drupal-Html
Req-ID
M-TraceId
X-MSEdge-Flight
X-HostName
Tcn
WebServer
X-LiteSpeed-Tag
Cluster
Path
X-Ad-Load-Variation
CountryCode
X-Api-Version
X-APP-VERSION
Cf-Ipcountry
X-Cdn-Request-ID
X-Air-Pt
Content-Script-Type
X-Amz-Meta-Opti
X-M-Reqid
Pramga
X-Request-Start
X-Scope-Id
Cdncip
X-M-Log
X-AK-Request-ID
Cdnsip
Content-Style-Type
X-Qnm-Cache
X-Varnish-Beresp-Status
X-Shield-Cache-Expires
X-NWS-UUID-VERIFY
X-Wp-Cf-Super-Cache
X-HS-Content-Campaign-Id
X-Wp-Cf-Super-Cache-Cache-Control
X-Branch-Name
X-Upstream-Ht
X-Platform-Server
X-Upstream-Ct
X-Planisys-CDN-TTL
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
State
X-Cache-Ttl
X-Request-URI
X-Wp-Cf-Super-Cache-Cookies-Bypass
Edge-Cache
X-Proxy-CacheRZ
X-Release
X-Cache-Date
XkeyRZ
X-WP-CF-Super-Cache-Cookies-Bypass
Yak-Timeinfo
X-Fastly-Cache
X-Vgn-Hpd-Variations-Key
X-Vgn-Hpd-Ssi
X-Vgn-Hpd-Cached
X-CACHE-KEY
CDN
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
HostName
X-Render-Time
X-Generated-In
X-TH-Server
X-Akamai-Pragma-Client-IP
X-Sigma
X-Rocket-Build-Number
X-Tim-N
Srv
Ohc-File-Size
X-Sigma-Backend
X-Cdn-Forward
Geoip-Latitude
Lb
X-Cache-Remote
Proxy-Connection
X-HS-Status
X-Traceid
X-Lb-Cache
Cache-Tv-Group
X-Via-Popn
X-Nc
X-Via-Popv
X-LB-ID
X-Cache-FS-Status
X-Via-Poph
Cache
Tube-Got-Eval
X-SB
X-Servedbyhost
X-Ha-Backend
X-V-Cache
X-B3-Trace-ID
X-Wa
Server-Id
X-User
Click-Count-Action-Start
Click-Count-Error
Tube-Get-Contents
Tube-Got-Results
Tube-Return
X-Dw-Trace-Id
CF-Cached-On
X-Aicache-OS
X-Acquia-Purge-Cdn-Unconfigured
X-Req
X-TT-LOGID
V-Age
X-CUA
Ohc-Cache-HIT
PICS-Label
On-Server
X-Men
X-Acquia-Purge-Tags
X-Acquia-Site
X-Gamma-Serve
X-Vary
MIME-Version
X-Lb-Nocache
X-Scheme
X-Fastly-Backend-Reqs
Wpo-Cache-Message
X-Acquia-Application-Trace
X-EC-Lua
X-GoCache-CacheStatus
X-Acquia-Application-UUID
X-GeoIP-City
Wpo-Cache-Status
X-Via-Ucdn
X-Iplb-Request-Id
X-VCL-Version
Yjs-Id
X-Provided-By
X-Iplb-Instance
X-UA
X-RAMCache
Log-Origin
Vha6-Origin
X-Litespeed-Cache-Control
Ngx-Var-Key
X-Miniprofiler-Ids
X-ElasticPress-Query
X-Cached-Since
X-Vc
CACHE-MISS-TO-ORIGIN
Ngx
X-CF-Cache-Header-Cache-Control
X-CF-Cache-Header-Vary
Inserted-Into-Cache-At
X-Fastly-Cache-Hits
Cneonction
X-Udemy-Cache-App-Namespace
X-Snapshot-Date
X-Cdn-Cache-Status