Threat Level: green Handler on Duty: Daniel Wesemann

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Accept-Ranges
Expect-CT
CF-RAY
X-XSS-Protection
Pragma
X-Powered-By
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Alt-Svc
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Xss-Protection
P3P
X-Cache-Hits
X-UA-Compatible
X-Served-By
X-Download-Options
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Request-Id
X-Varnish
X-Adblock-Key
X-Permitted-Cross-Domain-Policies
Access-Control-Allow-Credentials
X-AspNet-Version
Accept-CH
Content-Security-Policy-Report-Only
X-Runtime
Accept-CH-Lifetime
X-Drupal-Cache
X-DNS-Prefetch-Control
X-Check
CF-Ray
X-Cache-Status
X-Ua-Compatible
X-Generator
Server-Timing
X-Request-ID
X-Cacheable
X-Envoy-Upstream-Service-Time
Timing-Allow-Origin
X-FRAME-OPTIONS
X-Iinfo
X-Drupal-Dynamic-Cache
X-Content-Security-Policy
Access-Control-Expose-Headers
Feature-Policy
X-CDN
Content-Encoding
Status
X-AspNetMvc-Version
Upgrade
Access-Control-Max-Age
X-Amz-Request-Id
X-Via
X-Amz-Id-2
Cf-Edge-Cache
Host-Header
EagleId
Keep-Alive
Request-Context
X-Backend
X-Cache-Group
X-UA-Device
X-AH-Environment
X-Robots-Tag
X-Server
X-Hacker
X-Dns-Prefetch-Control
X-Turbo-Charged-By
X-Proxy-Cache
X-Ws-Request-Id
Xkey
Permissions-Policy
X-Rq
X-Age
X-Vhost
X-Amz-Version-Id
Allow
X-Dispatcher
Cf-Apo-Via
X-Swift-CacheTime
X-Swift-SaveTime
X-Server-Powered-By
Grace
Ali-Swift-Global-Savetime
X-Varnish-Cache
X-LiteSpeed-Cache
X-Page-Speed
X-Pingback
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Cache-Lookup
X-OneAgent-JS-Injection
X-Device
Cf-Railgun
X-Backend-Server
EagleEye-TraceId
X-Host
X-Server-Id
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-WebKit-CSP
X-Response-Time
X-Readtime
X-Akam-SW-Version
Surrogate-Control
X-HW
Request-Id
X-Cloud-Trace-Context
X-Ruxit-JS-Agent
X-Litespeed-Cache
Content-Location
X-Application-Context
X-Node
X-Nginx-Cache-Status
P3p
X-Nginx-Upstream-Cache-Status
Accept-Ch-Lifetime
X-NWS-LOG-UUID
X-CST
X-Country
Service-Worker-Allowed
X-Country-Code
X-Content-Type
X-Url
X-Clacks-Overhead
Cache-Tag
X-Trace
X-Webkit-Csp
Rating
X-Rack-Cache
X-Amz-Server-Side-Encryption
Nginx-Cache
X-Times
X-Server-Name
X-FTR-Request-ID
X-TtlSet
X-Vname
X-PC
X-Oneagent-Js-Injection
X-Daa-Tunnel
Cross-Origin-Opener-Policy
X-Edge
X-Mcache
X-Midtier
X-Browser-Type
X-Powered-By-Plesk
X-ESI
X-Cnection
X-Upstream
X-GitHub-Request-Id
Edge-Control
X-MS-InvokeApp
X-D2id
X-Element-Page-Cache
X-Ac
Verso
X-Kinja-Revision
X-Exp-Id
X-GoogleNews-Bot
X-Cdn-Fetch
X-Exp-Variant
X-Kinja
X-Kinja-Build
X-Kinja-Server
AR-Request-ID
AR-PoweredBy
AR-ATIME
AR-SID
X-ECACHE
X-FastCGI-Cache
X-Vcap-Request-Id
X-Ser
X-Cache-TTL
X-Navigation-Version
X-Abt-Application-Version
X-Aws-Lambda-Call-Status
AR-CACHE
SPIisLatency
X-Mod-Pagespeed
SPRequestDuration
X-NF-Request-ID
X-Dw-Request-Base-Id
X-SharePointHealthScore
SPRequestGuid
X-B3-TraceId
X-Amz-Rid
Fastly-Restarts
X-Client-IP
X-Instrumentation
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
Pagespeed
Display
X-Middleton-Display
X-Sol
X-Ruxit-Js-Agent
Edge-Cache-Tag
X-Mg-S
X-Edge-Location-Klb
S
X-Kinsta-Cache
X-Powered-CMS
X-Middleton-Response
Response
Cache-Status
X-Amzn-Trace-Id
X-RateLimit-Remaining
X-Goog-Hash
X-Cache-Key
Access-Control-Request-Method
X-Version
X-VARITI-CCR
X-ARC
RTSS
X-Fastly-Request-ID
X-Content-Digest
X-Forwarded-For
X-TraceId
Cross-Origin-Resource-Policy
X-Recruiting
X-T
X-Server-ID
Realpath
X-Correlation-Id
X-MSEdge-Ref
Front-End-Https
Fastcgi-Cache
MS-Author-Via
X-Ratelimit-Limit
X-Pinterest-Rid
Pinterest-Generated-By
Pinterest-Version
X-Cached
X-Varnish-TTL
X-PDP-UNCACHING-HASH
X-Ttl
Content-MD5
X-HS-Hub-Id
X-HS-Cache-Config
X-HS-Content-Id
X-Ua-Browser
X-FTR-Cache-Status
X-FTR-Backend-Server
X-Protected-By
Payment
Server-Node
X-Country-Code-Real
X-FTR-Backend
X-FTR-Balancer
X-Request-Processing-Time
Public-Key-Pins
X-Request-Received
X-Shield-Request-Id
X-Forwarded-Proto
MicrosoftSharePointTeamServices
X-HS-Combine-CSS
TP-Cache
Arr-Disable-Session-Affinity
X-LLID
X-Frontend
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Distributor
X-HP-Trace-Id
X-HP-Webp
X-Jurisdiction
X-FTR-Expires
X-Accel-Expires
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-ORACLE-DMS-RID
X-NODE
Count-Hit
X-GUploader-UploadID
X-Origin-Server
X-Ratelimit-Remaining
X-TTL
X-LB-Cache
X-Origin-Cache-Key
Accept-Ch
X-Ezoic-Cdn
X-Hits
X-Content-Security-Policy-Report-Only
X-Request-Handler-Origin-Region
X-Microsite
X-Activity-Id
X-Az
X-AppVersion
X-PressLabs-Stats
Mrf-Cache-Status
Host
MRF-Tech
X-Ua-Device
X-B3-TraceId-Primal
X-Cluster-Name
X-Www-Served-By
X-Varnish-Backend
X-App-Server
X-Varnish-Server
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-TEC-API-VERSION
Cache-Tags
Retry-After
X-Amz-Meta-S3cmd-Attrs
Accept-Charset
Server-Name
Cleartype
X-Hostname
X-Geo-Country
X-NGENIX-Cache
X-Id
X-Envoy-Decorator-Operation
X-Goog-Metageneration
Referer-Policy
X-ORACLE-DMS-ECID
X-DIS-Request-ID
X-Upgrade-Enabled
TP-L2-Cache
X-Newrelic-App-Data
Access-Control-Allow-Method
X-Git-Hash
X-CSRF-Token
X-Seen-By
X-Azure-Ref
TCN
X-CCDN-Origin-Time
X-Hcs-Proxy-Type
X-CCDN-CacheTTL
X-Unique-Id
X-Load-Cache
X-F-Cache
X-Tt-Trace-Tag
X-Tt-Trace-Host
X-Amzn-RequestId
X-Amz-Apigw-Id
X-RateLimit-Limit
X-Proxy
Filterid
X-Trace-Id
X-Varnish-Ttl
Healthy
X-Grace
Section-Io-Cache
X-Request-Guid
X-Cache-Control
X-Revision
Paypal-Debug-Id
DC
X-TT
X-B3-Sampled
X-Contextid
X-Debug-Info
X-B
X-Px
X-FB-Debug
X-Fb-Rlafr
X-Type
X-Oracle-Dms-Ecid
X-Page-Id
X-Logged-In
X-Mobile
X-N
X-Debug
Viewport
X-WP-CF-Super-Cache-Cache-Control
X-WP-CF-Super-Cache
X-XRDS-LOCATION
X-Oracle-Dms-Rid
X-Whom
Fastly-SIE
X-Template
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
Fastly-SWR
X-Goog-Stored-Content-Encoding
X-Time
Charset
X-Datadog-Trace-Id
X-Content-Options
X-Cache-Grace
X-Webkit-CSP
X-Language
X-Datadog-Parent-Id
X-Datadog-Sampling-Priority
X-Via-JSL
Version
Content-Disposition
X-Magnolia-Registration
X-Wix-Request-Id
X-App-Environment
X-EdgeConnect-Cache-Status
X-Varnish-Grace
X-B-Cache
X-Signature
X-Origin-Cache
X-Node-Name
X-Rule
X-RemovedCookies
X-ProcessESI
SRV
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Yottaa-Optimizations
X-Backend-Name
X-Hl-Ver
X-Tumblr-User
X-RateLimit-Reset
X-Tumblr-Pixel-1
X-Yottaa-Metrics
X-Amz-Replication-Status
X-Amzn-Remapped-Content-Length
Ms-Operation-Id
SD-X-WS
X-UUID
X-Datadog-Sampled
VIX-Pulpo-Upstream-Status
X-G
X-Debug-IsConnected
VIX-Pulpo-Node
X-Debug-IsPreview
MS-CV
X-RTag
X-FW-Hash
X-Proxy-Cache-Info
ServerID
X-FW-Server
X-Device-Type
X-Instance
GEO-INFO
X-FW-Dynamic
X-FW-Static
X-FW-Version
X-FW-Type
X-FW-Serve
X-Cache-Age
X-Adobe-Loc
X-Storage
X-Adobe-Content
Country
X-NYM-Debug-Backend
Liferay-Portal
X-Cacheable-TTL
X-Rendered-As
NGB
Countrycode
X-User-Agent
X-Is-Bot
X-Region
X-Cache-Hit
X-Status
X-B3-SpanId
X-L-Path
X-Environment-Context
X-IPS-LoggedIn
Surrogate-Key
X-Real-IP
X-Source
X-Rid
X-ServerID
X-NWS-UUID-VERIFY
Akamai-GRN
X-Sucuri-ID
X-Sucuri-Cache
X-WP-CF-Super-Cache-Active
X-Servername
Cross-Origin-Window-Policy
Amp-Access-Control-Allow-Source-Origin
OT-Force-Account-Verify
X-Xrds-Location
From-Origin
X-UA
X-VC-Cache
X-WebKit-CSP-Report-Only
X-RM-Cache-TTL
Upgrade-Insecure-Requests
X-Framework
Front
Backend
X-INCAP-ABP
X-Air-Pt
X-Mode
Refresh
X-Wormhole-Sdk
X-Air-Source
X-Cache-Time
X-Air-Trace-Id
X-Air-Hostname
X-AB
X-Content-Powered-By
X-Handled-By
X-B3-Traceid
X-Akamai-Request-ID2
X-RID
X-DataDome
X-HTML-Minification-Powered-By
Xet-Cookie
Frame-Options
X-Edge-Location
X-Nginx-Cache
X-Endurance-Cache-Level
Url
X-VC
X-Buckets
X-JoinUs
ServedBy
X-Cluster
Filters
Selected-Fe
Meta-Geo
X-Reqid
X-UPSTREAM-Address
X-Origin-CC
X-Origin-TTL
X-RCS-CacheZone
X-Rewrite-Enabled
X-Rn-Rsrv
X-Webstats-RespID
X-Xfnlog-Site
X-SaId
X-Proxy-Build
X-Timing-Wait
X-Origin-Date
X-CDN-Forward
Webserver
X-No-Session
X-Provided-By
X-VWS-Id
X-Tumblr-Pixel-2
X-Git-Commit
Cache
WPO-Cache-Message
X-Azure-Ref-OriginShield
X-IPLB-Request-ID
WPO-Cache-Status
X-Cache-Status-Check
X-Cache-Rule
X-Cache-Operation
Atl-Traceid
X-VCT
TWC-Locale-Group
TWC-GeoIP-LatLong
TWC-Privacy
Webcakes-App-Name
Webcakes-Region
Webcakes-App-Version
TWC-GeoIP-Country
TWC-Device-Class
X-Drupal-Cache-Tags
Cache-Hits
X-Container-Uri
Property-Id
TWC-Connection-Speed
X-AWS-Id
X-Labrador-Cache-Channel
X-IPLB-Instance
Access-Control-Request-Headers
X-Logging-Id
X-Origin-Hint
X-Served-From
X-Vcache
X-Origin
X-R9-Blue-Green-Version
X-LJ-Flow-ID
X-PHP-Host
X-Redis-Cache
X-Drupal-Cache-Contexts
X-CMSURLCustom
X-Proxied
X-Cms-Context
X-Akamai-Edgescape
X-Extlb
X-Restarts
X-Routing-Service
X-Site-Version
X-Accel-Version
X-Fetched-On
X-Cloudmap
X-Cache-Debug
Thinkindot-Control
Thinkindot-CacheControl-Type
X-Locale
X-ProxyCache-Key
Web-Mar-Node
Thinkindot-CacheControl
TDXMobile
X-BYPASS-REASON
Mn-Server-Ip
X-SRV
Section-Io-Id
X-ProxyCache-Status
X-Generation-Time
X-Web-Node
X-Tb
X-Ms-Request-Id
X-Scope-Id
X-Ms-Version
X-Httpd
X-Shield-Cache-Expires
X-Hosted-By
X-Thinkindot-L3
X-Adobe-Source
X-Zipkin-Id
X-Upstream-Ht
X-Upstream-Ct
X-Soup
X-Varnish-Cache-Hits
X-Director
X-Varnish-Age
X-Loop
X-Varnish-Beresp-Grace
X-SayCDN-TTL
X-S
Apigw-Requestid
X-Skip-Cache
Accept-Language
X-Frame-Option
X-Lambda-Id
X-Forwarded-Host
X-Say-TTL
X-Format
X-Say-Cacheable
X-Tncms
X-Shopify-Stage
X-Is-Desktop
X-Alternate-Cache-Key
X-Sorting-Hat-PodId
X-Is-Tablet
X-Storefront-Renderer-Rendered
Xserver
X-Sorting-Hat-ShopId
X-Is-Supported-Browser
X-Is-Mobile
X-Cache-Host
X-Detected-As
X-Geo-Region
X-GeoCode
X-GeoCountry
X-Cdn-Origin
X-ShardId
X-Tcp-Rtt
X-ShopId
X-Browser-Name
X-Generated-By
X-Optimistic-Header
X-Worker
X-Lagoon
X-Vercel-Id
Source
X-Vercel-Cache
X-Rocket-Nginx-Serving-Static
Azure-RegionName
Azure-SiteName
Azure-InstanceId
LB
Azure-SlotName
Azure-Version
X-Fastly-Request-Id
Node
X-Request-URI
X-TA-CDN-Provider
X-WP-CF-Super-Cache-Cookies-Bypass
X-Ratelimit-Reset
CDN-Cache
X-URL
Fastcgi-Useragent
X-Pass-Why
CDN-EdgeStorageId
CDN-CachedAt
CDN-RequestPullSuccess
CDN-PullZone
CDN-RequestPullCode
CDN-Uid
Protected
CDN-RequestCountryCode
X-Erf-Stays-Pdp-Viaduct-Migration-Web-V2
Cross-Origin-Embedder-Policy
X-Vcl-Version
Expiry
X-Connection-Hash
X-App-Version
X-Tumblr-Pixel-3
X-Tec-Api-Origin
CDN-RequestId
X-GEO
X-Tec-Api-Root
X-Tec-Api-Version
X-ECache
X-XRDS-Location
Onion-Location
X-Cache-Expired-At
Alternate-Protocol
X-Cache-Server
AMP-Access-Control-Allow-Source-Origin
DB-Nickname
X-PHP-Backend
Priority
X-Api-Version
X-Server-W
X-Jobs
Sid
CF-IPCountry
Environment
Uber-Trace-Id
X-Proxy-Cache-Status
X-Fastcgi-Cache
X-Cluster-Node
X-Cache-Action
User-Cache-Control
X-LSADC-Cache
X-Uri
Locale
X-Urbn-Context-Path
X-Mg-Request-UUID
X-MP-GENERATED-AT
X-Urbn-Site-Id
X-Tx-Id
X-Tt-Logid
X-Original-Request-Id
X-Response-Served-From
Cdn-Requestid
HostName
X-Level-Front-Cache
X-FB-TRIP-ID
X-Hnp-Log
X-Jungle-Id
DCR-Decision-By
X-Esi-Check
X-FC-Vary-Parameters
Content-Secure-Policy
X-Gen-Mode
A
DCR-Processing-Time-Ms
X-Gzip
X-Generated-On
X-GeoIP-City
Cache-Tv-Group
X-Forwarded-Site
Candidate-Md5Url
MD5-Digest
T-Server
X-Block-Status
X-Bl-Debug
X-Bip
Surrogated-Key
Sslversion
X-Cache-NE
Rendered-Blocks
Req-ID
X-Cache-Id
X-BCube-Filmed-By
X-Bc-Bl
X-A-Dcw
X-A-Dgt
X-A-Wwc
X-Aed
X-A-Dam
X-A-Ccd
Wxu-Next-Commit
Wxu-Next-Hostname
Wxu-Next-Region
X-A
X-Clientip
X-Conf
Fusion-Deployment-Id
Fusion-Source
Fusion-Template-Id
Gannett-Cam-Experience-Id
Fusion-Content-Source
Fusion-Content-Id
Edge-Cache
X-Ec-GeoHdr
X-Ec-Fail
Fusion-Component-Id
X-Dispatcher-Server
X-Device-Os
Ngx.Var.Host
X-Content-Age
Origin
Origin-Agent-Cluster
X-D
Meta-Geo-Continent
X-Developer
Lang
Magicmarker
X-Epic-Correlation-Id
X-Ig-Origin-Region
X-Origin-Expires
X-UA-Device-Type
X-Org
X-Op-Id-All
X-Thanos
X-Vdms-Path
X-Pubstack
X-TIM-N
X-Vtex-Remote-Cache
X-Proto
X-Policy
X-Platform
X-DC
X-Rojux
X-Mvc-Supplant-Cachable
X-NCache
X-Node-Id
X-Viewer-Country
X-Vdms-Version
X-SB
X-ND-Cache
X-ScT
X-SRCache-Key
X-TT-LOGID
X-Origin-Response-Time
X-Debug-Cache-Store
X-CUA
X-Debug-Cache-Fetch
X-V-Cache
Mail-Subject
X-Csrf-Jwt
Gh-Request-Id
W
Vix-Hermes-Req-Id
We-Hiring
X-Auth-Group-Type
X-SD-PageType
X-LiteSpeed-Cache-Control
Ha-Gx-Prefs
X-Test
X-Auto-Login
Host-ID
HA-Ipaddr
L5d-Success-Class
X-Varnish-Director
X-Cache-Bucket
X-VTEX-Cache-Time
X-Cache-Info
X-Varnishpool
X-VarnishDD-TTL
Server-Ext
Server-Host
Ssr
X-VG-WebCache
Sever-Int
X-VTEX-Cache-Server
Server-Hostname
Release
X-Cache-TTL-Remaining
X-Varnish-Beresp-Status
Origin-CC
X-Backend-Instance
X-Var-Ttl
X-Core-Value
Origin-EX
X-Scheme
Powered-By
X-Cdn-Srv
X-CGP
X-Varnish-Hostname
PFcat
NM-Fastcgi-Cache
X-Ismobilevalue
X-GeoIP-Region-Code
X-GeoIP-Country-Code
Yak-Timeinfo
X-Powered-By-VTEX-Cache
X-Ig-Push-State
X-GeoIP
X-Geo-Header
Fastly-SSL
X-ID
X-Gdpr
XM
AKAMAI
X-HN
X-PAYTM-SRV-ID
X-Mvc-Supplant-OutputCached
X-Loc
X-Amz-Storage-Class
X-AK-Request-ID
WP-Super-Cache
X-Nginx-Cache-Key
X-NMSegId
X-Origin-Time
X-Service
X-HS-Content-Campaign-Id
X-Nyt-Route
X-App-Name
Cache-Provider
C-Via
X-Via-Fastly
X-Eu-Site
X-RateLimit-Limit-Second
X-Fastly-Cache
X-Edge-Server
Content-Script-Type
X-Req
X-Request-Start
X-WA-Info
Content-Style-Type
DSUID
X-Request-Time
X-Region-Sid
CDCHOST
X-RateLimit-Remaining-Second
Fastly-Backend-Name
Canary
Cdn-Host
Cdn-Request-Time
Cdnsip
X-Fmm-Version
Cdncip
X-Varnish-Beresp-Ttl
X-Newrelic-Synthetics
X-ApacheServer
X-Tb-Optimization-Total-Bytes-Saved
X-BBC-Edge-Cache-Status
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-We-Are-Hiring
X-B3-Trace-ID
Odigeo-Trace-Id
X-Ec-Custom-Error
X-GoCache-CacheStatus
X-Pool
X-Proxied-Request
X-From
X-Render-Time
X-PERF
X-Human
X-Micro-Cache
X-Mly-Id
X-Men
X-Location
X-Aicache-OS
X-Fastly-Backend
X-Request-Host
X-Varnish-Authentication
X-Contensis-Viewer-Groups
X-CacheTTL
X-Cache-Backend
X-Cache-Aspx
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-Section
X-Server-IP
X-Sn-Servicetimems
X-DPWN-IS-SECURE
X-VG-TLSProxy
X-Ad-Load-Variation
Pramga
Platform
Apple-News-Services-Handled
On-Server
Apple-News-Services-Request-Url
Click-Count-Error
RNT-Machine
Req-Svc-Chain
Redirect-Candidate
X-Dc
Cache-Key
Esi-Enabled
Country-Code
Cluster
Click-Count-Action-Start
Fastly-GeoIP-CountryCode
Adler-Geo
Machine
L
Is-Eu
RNT-Time
Producers
Tube-Return
Tube-Got-Eval
Apple-News-Services-Host
Web-Mar-Region
V-Age
Tube-Get-Contents
Tube-Got-Results
True-Client-Country-4JS
X-Access
Apple-News-Services-Parsed-Url
X-Acquia-Purge-Cdn-Unconfigured
X-Zone
X-AIR-PT
X-Slack-Shared-Secret-Outcome
X-Date
X-Hash
X-Slack-Backend
X-NGINX-Cache
X-Accel-Expires-Debug
NGX
X-NodeID
X-Custom-Header
Proxy-Firewall
X-Up
X-COUNTRY
X-Varnish-Hits
Debug
X-Pad
X-Varnish-Remaining-TTL
X-LB-ID
X-CACHE-GROUP
X-DefHash
Datacenter
X-DefElseHash
X-Cs
X-Nananana
X-Varnish-CookieHashed-On
X-Varnish-CookieINHashed-On
Mime-Version
X-Client-Ip
X-Nf-Request-Id
X-Refresh
Locid
CloudFront-Viewer-Country
X-Depends
Pics-Label
X-Akamai-Transformed
SID
Fastly-Drupal-HTML
X-VC-TTL
X-Via-Popv
X-Via-Popn
X-HA-Backend
X-Via-Poph
X-VHOST
X-Servedbyhost
X-Amz-Meta-Cb-Modifiedtime
X-Platform-Cluster
X-LiteSpeed-Tag
X-Platform-Processor
X-Platform-Router
X-M-Reqid
X-M-Log
GeoIP-Latitude
X-Datadome
X-LB-NoCache
X-Old-Content-Length
X-Parent-Response-Time
X-Cached-By
X-Cache-FS-Status
Ngx-Var-Key
X-CACHE-AGE
Fastly-Drupal-Html
X-TIME
X-CS
X-B3-Parentspanid
X-TH-Server
X-CDN-Cache-Status
X-Moov-T
Server-Info
X-Moov-Xdn-Version
X-NewRelic-App-Data
Resin-Trace
X-DynaTrace-JS-Agent
Cf-Ipcountry
GeoIp-Country-Code
Server-ID
X-Litespeed-Tag
X-Wa
X-Nc
BehaviorPad-Version
Cross-Origin-Embedder-Policy-Report-Only
X-Presslabs-Stats
Cdn
X-ZONE
X-Vgn-Hpd-Reason
NtCoent-Length
X-APP
X-HITS
X-VCache
X-B-Cookie
Cf-Device-Type
X-Application
X-S-Cookie
X-IAuth-Set-Uid
X-User
X-Destination
FSS-Cache
X-External-Request-Id
X-Varnish-Beresp-TTL
True-Client-IP
Uri
X-Fpc
X-Esi
X-Content-Length
X-Zen-Fury
X-TX-ID
CDN
X-HostName
X-Sigma-Backend
X-Instance-Name
True-Client-Ip
X-Cache-Date
X-Sigma
X-Rocket-Build-Number
X-Vc
X-Srv
X-Dynatrace-Js-Agent
Serverhost
Load-Balancing
X-API-Version
X-Route-Name
X-VServer
X-Flags
X-Providence-Cookie
X-Is-Crawler
Tcn
X-Aspnet-Duration-Ms
X-Oracle-DMS-ECID
X-DynaTrace
X-Branch-Name
S-Rt
X-HOST
X-FPC
X-Segment-20210421
X-Dispatcher-Number
X-B3-Spanid
Srv
GeoIP-Country-Code
Hostname
Request-ID
Vc-Max-Age
Product
X-Cdn-Cache-Status
X-Dispatch
X-WA
X-RequestId
X-NC
X-Page-View
X-Cdn-Forward
Ohc-File-Size
X-DataCenter
Server-Id
X-APP-VERSION
ServerName
Srvid
Geoip-Latitude
X-FL-QIT-DEBUG
X-Webkit-Csp-Report-Only
Type
X-Lb-Nocache
X-Bug-Bounty
X-Sql-Duration-Ms
X-Irp-Debug
X-Sql-Count
X-Ckpd-Fst-Backend
X-Http-Reason
X-Geo
Cl-Cache
DataCenter
X-ServedByHost
CacheControlHeader
X-VCL-Version
X-Via-PopH
X-Ha-Backend
Origin-Trial
X-SIPLIST1
Epwk-X-Cache
IsBot
X-Via-PopV
X-Via-PopN
Cloudfront-Viewer-Country
Edge-Copy-Time
X-Via-CDN
Ohc-Cache-HIT
X-Owner
X-Via-SSL
X-CACHE-KEY
X-Via-Edge
X-Cache-Ttl
X-CSRF-TOKEN
WZWS-RAY
X-App
MIME-Version
X-Correlation-ID
XkeyRZ
ServerHost
X-Ua
X-Proxy-CacheRZ
X-Core-Mission
Cross-Origin-Opener-Policy-Report-Only
X-Lb-Id
PICS-Label
Rtss
X-Srcache-Store-Status
X-Srcache-Fetch-Status
X-MSEdge-Flight
X-MSEdge-Features
X-Hit
X-Qloud-Router
X-MiniProfiler-Ids
N-Cache
Lb
X-Acquia-Application-Trace
X-Acquia-Purge-Tags
X-Acquia-Application-UUID
Sm-Log-Id
Warning
X-Amz-Meta-Opti
X-Acquia-Site
X-Sqd-Stime
X-Limited
X-Vmg-Version
X-Akamai-Device-Characteristics
User-Agent
CountryCode
Cneonction
X-Sqd-Ctime
X-Service-Response-Time
X-Fastly-Country-Code
X-Datacenter
X-Web-Server
X-Litespeed-Cache-Control
X-Nf-Ats-Version
X-HubSpot-Correlation-Id
X-Nf-Country
X-Nf-Language
X-LAGOON
X-Info
X-Check-Cacheable
X-RAMCache
Xkeylog
X-Proxy-Cache-La3
X-Requestid
Cmstype
Cmsid
X-Gamma-Serve
X-Akamai-Pragma-Client-IP
X-Th-Server
X-Amz-Meta-Sha256
X-Amz-Meta-S3b-Last-Modified
Xkey-La3
Ngx
X-Udemy-Cache-App-Namespace
X-Snapshot-Date
X-IN-APIGATEWAY
X-Dw-Trace-Id
X-Serial
X-Ramcache
X-IN-APIGATEWAYSSL