Threat Level: green Handler on Duty: Jan Kopriva

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
CF-RAY
Expect-CT
Accept-Ranges
X-XSS-Protection
Pragma
X-Powered-By
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Alt-Svc
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
X-UA-Compatible
X-Served-By
X-Xss-Protection
X-Download-Options
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Request-Id
X-Varnish
X-Adblock-Key
X-Permitted-Cross-Domain-Policies
Access-Control-Allow-Credentials
Content-Security-Policy-Report-Only
X-DNS-Prefetch-Control
X-AspNet-Version
X-Runtime
Accept-CH
Accept-CH-Lifetime
X-Drupal-Cache
X-Check
X-Cache-Status
X-Generator
Server-Timing
X-Request-ID
X-Cacheable
X-Ua-Compatible
Timing-Allow-Origin
X-Envoy-Upstream-Service-Time
X-FRAME-OPTIONS
X-Iinfo
X-Drupal-Dynamic-Cache
X-Content-Security-Policy
Access-Control-Expose-Headers
Feature-Policy
Content-Encoding
X-CDN
Status
Upgrade
X-AspNetMvc-Version
CF-Ray
Access-Control-Max-Age
X-Amz-Request-Id
X-Amz-Id-2
Cf-Edge-Cache
X-Via
Host-Header
EagleId
Keep-Alive
Request-Context
X-Cache-Group
X-Backend
Permissions-Policy
X-Robots-Tag
X-AH-Environment
X-Hacker
X-UA-Device
X-Server
X-Proxy-Cache
X-Turbo-Charged-By
Xkey
X-Rq
X-Ws-Request-Id
X-Age
X-Vhost
X-Amz-Version-Id
Cf-Apo-Via
X-Dispatcher
X-LiteSpeed-Cache
X-Swift-SaveTime
X-Swift-CacheTime
X-Server-Powered-By
Allow
Grace
Ali-Swift-Global-Savetime
X-Varnish-Cache
P3p
X-OneAgent-JS-Injection
X-Page-Speed
X-Pingback
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Cache-Lookup
X-Device
EagleEye-TraceId
Cf-Railgun
X-Host
X-WebKit-CSP
X-Backend-Server
X-Server-Id
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Dns-Prefetch-Control
X-Response-Time
X-Readtime
X-Ruxit-JS-Agent
X-Akam-SW-Version
Surrogate-Control
X-HW
Request-Id
X-Cloud-Trace-Context
X-Node
Accept-Ch
Content-Location
X-Country
X-Application-Context
X-Nginx-Cache-Status
X-Nginx-Upstream-Cache-Status
Accept-Ch-Lifetime
X-NWS-LOG-UUID
X-Country-Code
Service-Worker-Allowed
X-Content-Type
X-Trace
X-Url
X-Clacks-Overhead
Cache-Tag
Rating
X-Amz-Server-Side-Encryption
X-Rack-Cache
X-Times
X-FTR-Request-ID
X-TtlSet
X-Vname
X-PC
X-CST
X-Daa-Tunnel
X-Litespeed-Cache
Cross-Origin-Opener-Policy
Nginx-Cache
X-Mcache
X-Edge
X-Server-Name
X-Browser-Type
X-Midtier
X-Powered-By-Plesk
X-Cnection
X-Webkit-Csp
AR-SID
AR-Request-ID
AR-PoweredBy
AR-ATIME
X-ESI
X-Ac
X-GitHub-Request-Id
X-Element-Page-Cache
X-Cache-TTL
X-D2id
Edge-Control
Verso
X-Kinja-Revision
X-Kinja-Server
X-Kinja-Build
X-Kinja
X-Exp-Variant
X-GoogleNews-Bot
X-Exp-Id
X-Cdn-Fetch
X-MS-InvokeApp
X-ECACHE
X-Upstream
X-Vcap-Request-Id
AR-CACHE
X-Ser
X-Abt-Application-Version
X-B3-TraceId
X-Navigation-Version
X-Dw-Request-Base-Id
X-FastCGI-Cache
SPRequestDuration
SPIisLatency
X-NF-Request-ID
Fastly-Restarts
X-Mod-Pagespeed
X-SharePointHealthScore
SPRequestGuid
X-Amz-Rid
X-Erf-Bev-Bev
X-Server-Lifecycle-Phase
X-Instrumentation
X-Erf-Bev-Bev-Is-Generated
X-Kraken-Loop-Name
X-Client-IP
X-Edge-Location-Klb
X-Kinsta-Cache
X-Oneagent-Js-Injection
X-Goog-Hash
X-Mg-S
Edge-Cache-Tag
S
X-Powered-CMS
X-ARC
Display
X-Sol
Pagespeed
X-Middleton-Display
X-PDP-UNCACHING-HASH
Cache-Status
X-Amzn-Trace-Id
X-Ratelimit-Limit
X-Version
Access-Control-Request-Method
X-VARITI-CCR
Response
X-Middleton-Response
X-Cache-Key
X-TTL
X-Fastly-Request-ID
RTSS
X-TraceId
X-Content-Digest
X-Ua-Device
Realpath
X-T
Cross-Origin-Resource-Policy
X-Forwarded-For
X-Ratelimit-Remaining
X-Recruiting
Fastcgi-Cache
X-ORACLE-DMS-RID
X-Cached
X-Varnish-TTL
X-Correlation-Id
Front-End-Https
X-RateLimit-Remaining
X-MSEdge-Ref
X-Shield-Request-Id
MS-Author-Via
Content-MD5
MicrosoftSharePointTeamServices
X-Protected-By
X-HS-Content-Id
X-HS-Hub-Id
X-HS-Cache-Config
X-FTR-Cache-Status
X-FTR-Backend
X-Country-Code-Real
X-FTR-Backend-Server
X-Ruxit-Js-Agent
X-Ua-Browser
X-FTR-Balancer
X-Forwarded-Proto
X-Request-Received
X-Request-Processing-Time
TP-Cache
Server-Node
Payment
Public-Key-Pins
X-Frontend
X-LLID
X-PressLabs-Stats
Arr-Disable-Session-Affinity
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-HS-Combine-CSS
X-FTR-Expires
X-Server-ID
Count-Hit
X-Kong-Proxy-Latency
X-GUploader-UploadID
X-Accel-Expires
X-Kong-Upstream-Latency
X-Distributor
X-NODE
X-Origin-Server
X-LB-Cache
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-HP-Webp
X-Jurisdiction
X-HP-Trace-Id
X-Ezoic-Cdn
X-Aws-Lambda-Call-Status
X-Request-Handler-Origin-Region
X-Microsite
X-Www-Served-By
X-Varnish-Server
X-Newrelic-App-Data
X-Az
X-Activity-Id
X-AppVersion
X-App-Server
X-Cluster-Name
MRF-Tech
Mrf-Cache-Status
Accept-Charset
X-B3-TraceId-Primal
Host
X-Varnish-Backend
X-ORACLE-DMS-ECID
Cache-Tags
Retry-After
X-Content-Security-Policy-Report-Only
X-Amz-Meta-S3cmd-Attrs
Cleartype
Server-Name
Pinterest-Version
X-Pinterest-Rid
Pinterest-Generated-By
X-Goog-Metageneration
X-ASPNET-VERSION
X-Hits
Filterid
X-Unique-Id
X-Envoy-Decorator-Operation
X-Git-Hash
Access-Control-Allow-Method
X-CSRF-Token
X-Hostname
X-Azure-Ref
X-Geo-Country
X-Upgrade-Enabled
X-NGENIX-Cache
X-Load-Cache
X-Debug
X-Ttl
Referer-Policy
X-Logged-In
X-Id
TP-L2-Cache
X-Time
X-Tt-Trace-Tag
X-Tt-Trace-Host
X-Seen-By
X-Proxy
X-FB-Debug
X-B
X-CCDN-Origin-Time
X-CCDN-CacheTTL
X-Hcs-Proxy-Type
X-TT
Section-Io-Cache
X-B3-Sampled
X-Grace
X-Amzn-RequestId
X-Amz-Apigw-Id
X-F-Cache
Surrogate-Key
X-Request-Guid
X-Trace-Id
DC
X-Revision
X-Cache-Control
X-Fb-Rlafr
X-Type
Healthy
X-Contextid
X-XRDS-LOCATION
TCN
Viewport
X-DIS-Request-ID
X-Mobile
X-N
Paypal-Debug-Id
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Storage-Class
X-WP-CF-Super-Cache
X-WP-CF-Super-Cache-Cache-Control
Fastly-SIE
Fastly-SWR
X-Page-Id
X-Varnish-Ttl
X-Debug-Info
Content-Disposition
X-Px
X-Webkit-CSP
X-Whom
X-Via-JSL
X-Origin-Cache
X-Varnish-Grace
Version
X-Magnolia-Registration
X-Datadog-Sampling-Priority
X-Datadog-Parent-Id
X-Datadog-Trace-Id
X-Oracle-Dms-Ecid
X-Template
X-Content-Options
Charset
X-Amz-Replication-Status
X-Wix-Request-Id
X-UUID
X-ProcessESI
X-G
X-Cache-Grace
X-RemovedCookies
X-Rule
X-Adobe-Content
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-RTag
X-App-Environment
X-Debug-IsPreview
X-Debug-IsConnected
X-Node-Name
X-Tumblr-Pixel-1
X-Adobe-Loc
X-Tumblr-User
MS-CV
Ms-Operation-Id
X-Signature
X-NWS-UUID-VERIFY
X-Datadog-Sampled
NGB
X-B-Cache
X-Hl-Ver
SD-X-WS
X-Yottaa-Metrics
X-EdgeConnect-Cache-Status
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-Source
X-Storage
X-Yottaa-Optimizations
X-FW-Dynamic
ServerID
X-FW-Hash
X-FW-Serve
X-Environment-Context
X-Backend-Name
X-FW-Server
X-Device-Type
X-Cacheable-TTL
X-FW-Type
X-NYM-Debug-Backend
X-L-Path
X-Proxy-Cache-Info
X-Rendered-As
X-FW-Static
X-Region
X-Is-Bot
X-FW-Version
X-User-Agent
X-Instance
GEO-INFO
X-ServerID
X-Status
X-Cache-Hit
Country
X-Real-IP
X-Cache-Age
X-B3-SpanId
Cross-Origin-Window-Policy
X-Language
Countrycode
X-IPS-LoggedIn
X-Rid
SRV
Liferay-Portal
X-Amzn-Remapped-Content-Length
Akamai-GRN
X-Ratelimit-Reset
X-Wormhole-Sdk
X-RM-Cache-TTL
X-WP-CF-Super-Cache-Active
Front
X-Sucuri-ID
X-Sucuri-Cache
OT-Force-Account-Verify
X-Framework
X-Oracle-Dms-Rid
X-Servername
X-AB
X-UA
From-Origin
X-VC-Cache
X-RateLimit-Limit
X-Content-Powered-By
X-Air-Source
Xet-Cookie
X-Air-Trace-Id
X-VC
Amp-Access-Control-Allow-Source-Origin
X-WebKit-CSP-Report-Only
X-Air-Hostname
X-Mode
Backend
X-Akamai-Request-ID2
X-Air-Pt
Upgrade-Insecure-Requests
X-Xrds-Location
X-URL
Refresh
X-SRV
X-Origin-Cache-Key
X-Cache-Time
X-RID
X-Handled-By
X-INCAP-ABP
X-Nginx-Cache
X-Ismobilevalue
Accept-Language
X-Endurance-Cache-Level
X-Rn-Rsrv
Filters
Cache
X-JoinUs
X-Rewrite-Enabled
X-Edge-Location
Meta-Geo
X-RCS-CacheZone
X-Xfnlog-Site
X-UPSTREAM-Address
X-SaId
X-HTML-Minification-Powered-By
Webserver
Access-Control-Request-Headers
X-No-Session
X-Webstats-RespID
X-Labrador-Cache-Channel
X-Origin-Date
X-LJ-Flow-ID
X-Lambda-Id
X-PHP-Host
X-R9-Blue-Green-Version
X-Cache-Rule
X-Cache-Operation
X-VWS-Id
LB
X-Hosted-By
X-Provided-By
X-Proxied
X-Origin-Hint
X-Git-Commit
X-Cloudmap
X-AWS-Id
X-Adobe-Source
Webcakes-Region
X-Cluster
X-Cms-Context
X-Extlb
X-Generated-By
X-Container-Uri
Webcakes-App-Version
Webcakes-App-Name
TWC-Connection-Speed
ServedBy
Property-Id
TWC-Device-Class
TWC-GeoIP-Country
TWC-Privacy
TWC-Locale-Group
TWC-GeoIP-LatLong
X-Reqid
X-Cache-Status-Check
X-Zipkin-Id
X-Varnish-Age
X-S
X-Routing-Service
X-Tumblr-Pixel-2
X-Locale
X-Logging-Id
X-Is-Tablet
X-Api-Version
X-Is-Mobile
X-Loop
X-Ms-Request-Id
X-Fetched-On
Atl-Traceid
X-Cache-Debug
X-Ms-Version
X-BYPASS-REASON
X-Is-Desktop
X-IPLB-Request-ID
Web-Mar-Node
Url
X-Accel-Version
X-Akamai-Edgescape
X-Geo-Region
X-Forwarded-Host
Section-Io-Id
X-Httpd
X-IPLB-Instance
Apigw-Requestid
X-Scope-Id
Mn-Server-Ip
X-Browser-Name
X-Is-Supported-Browser
X-Site-Version
X-Web-Node
X-Redis-Cache
X-Served-From
X-Tb
X-DataDome
X-Skip-Cache
X-ProxyCache-Status
X-Restarts
X-ProxyCache-Key
X-Tcp-Rtt
X-Tncms
X-SayCDN-TTL
X-Say-Cacheable
X-Say-TTL
X-Varnish-Cache-Hits
X-VCT
X-Detected-As
X-Director
X-Frame-Option
X-Format
X-Cache-Host
X-Azure-Ref-OriginShield
X-Shopify-Stage
X-Timing-Wait
X-Alternate-Cache-Key
X-Upstream-Ct
Selected-Fe
X-Proxy-Build
X-Storefront-Renderer-Rendered
Frame-Options
X-Upstream-Ht
X-Soup
X-Origin
X-Varnish-Beresp-Grace
WPO-Cache-Status
Xserver
X-GeoCode
WPO-Cache-Message
X-Optimistic-Header
X-GeoCountry
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-ShopId
X-ShardId
X-Request-URI
X-Drupal-Cache-Tags
X-Thinkindot-L3
X-CMSURLCustom
X-Origin-CC
X-Shield-Cache-Expires
X-Generation-Time
X-Vcache
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
TDXMobile
Cache-Hits
Thinkindot-Control
X-RateLimit-Reset
X-Tt-Logid
X-Origin-TTL
X-Lagoon
Onion-Location
X-Drupal-Cache-Contexts
Cdn-Requestid
Source
X-Cdn-Origin
X-Connection-Hash
Expiry
Protected
X-CDN-Forward
X-WP-CF-Super-Cache-Cookies-Bypass
X-TA-CDN-Provider
X-Fastly-Request-Id
X-Mg-Request-UUID
X-Fastcgi-Cache
AMP-Access-Control-Allow-Source-Origin
X-Vercel-Cache
X-Buckets
X-Vcl-Version
Fastcgi-Useragent
X-Worker
X-Vercel-Id
X-Cache-Expired-At
X-Pass-Why
X-PHP-Backend
Azure-RegionName
Azure-SiteName
Azure-SlotName
Azure-InstanceId
X-Rocket-Nginx-Serving-Static
Azure-Version
X-ECache
Environment
X-App-Version
Node
Priority
X-Proxy-Cache-Status
X-Cache-Action
X-ID
Sid
CDN-CachedAt
CDN-Cache
Uber-Trace-Id
CDN-PullZone
CDN-EdgeStorageId
CDN-Uid
X-Aspnetmvc-Version
CDN-RequestPullSuccess
Cross-Origin-Embedder-Policy
CDN-RequestPullCode
CDN-RequestCountryCode
X-GEO
X-XRDS-Location
X-Tumblr-Pixel-3
X-Cluster-Node
X-Urbn-Context-Path
Locale
X-Urbn-Site-Id
X-Cache-Server
X-Server-W
DB-Nickname
Cache-Tv-Group
X-B3-Traceid
HostName
X-FB-TRIP-ID
User-Cache-Control
Alternate-Protocol
CF-IPCountry
X-Auth-Group-Type
Fusion-Content-Id
Fusion-Content-Source
Fusion-Deployment-Id
Fusion-Component-Id
X-Pad
Fusion-Source
Fusion-Template-Id
X-Nf-Request-Id
X-A
X-Jobs
X-Client-Ip
X-Ig-Push-State
X-Developer
Odigeo-Trace-Id
X-Hnp-Log
Sslversion
X-Edge-Server
X-Esi-Check
X-Generated-On
Meta-Geo-Continent
X-Fastly-Backend
Ngx.Var.Host
T-Server
X-DefHash
Surrogated-Key
X-Cache-NE
X-Epic-Correlation-Id
X-Ec-Fail
X-Dispatcher-Server
X-Level-Front-Cache
Candidate-Md5Url
Rendered-Blocks
Origin-Agent-Cluster
X-ND-Cache
X-Service
A
X-Op-Id-All
X-Org
X-Origin-Expires
X-Device-Os
Cdn-Host
X-Ec-GeoHdr
Origin
Cdn-Request-Time
X-ScT
X-Varnish-CookieHashed-On
X-Dc
X-Varnish-CookieINHashed-On
X-Conf
X-Varnish-Remaining-TTL
Lang
X-Content-Age
X-UA-Device-Type
X-TIM-N
DCR-Processing-Time-Ms
X-Req
X-Core-Value
Edge-Cache
X-GeoIP-City
Gannett-Cam-Experience-Id
X-Block-Status
X-Cache-TTL-Remaining
X-Cache-Id
X-Gen-Mode
X-Vtex-Remote-Cache
X-Bl-Debug
X-Bc-Bl
X-Vdms-Version
X-BCube-Filmed-By
X-Via-Fastly
X-Viewer-Country
DCR-Decision-By
X-V-Cache
X-Rojux
X-SB
Wxu-Next-Hostname
X-Aed
Wxu-Next-Commit
X-D
X-DefElseHash
X-Gzip
MD5-Digest
Content-Secure-Policy
Wxu-Next-Region
X-Ig-Origin-Region
X-A-Dam
X-A-Dcw
X-AIR-PT
X-A-Ccd
X-A-Wwc
Magicmarker
X-Custom-Header
X-SRCache-Key
X-A-Dgt
X-LSADC-Cache
X-Tx-Id
Mime-Version
Origin-EX
PFcat
X-FC-Vary-Parameters
X-Forwarded-Site
X-Gdpr
NM-Fastcgi-Cache
X-Fmm-Version
X-Fastly-Cache
Origin-CC
Host-ID
Is-Eu
Tube-Got-Results
X-Amz-Storage-Class
X-App-Name
X-Auto-Login
X-AK-Request-ID
X-Ad-Load-Variation
X-Debug-Cache-Fetch
X-Acquia-Purge-Cdn-Unconfigured
X-B3-Trace-ID
X-Backend-Instance
X-Cache-Bucket
X-Cache-Info
X-CacheTTL
X-Cdn-Srv
X-Clientip
X-Bip
Vix-Hermes-Req-Id
V-Age
RNT-Machine
RNT-Time
Server-Ext
X-DPWN-IS-SECURE
Req-ID
Powered-By
Producers
Server-Host
Server-Hostname
Tube-Return
X-Debug-Cache-Store
Tube-Got-Eval
Tube-Get-Contents
Sever-Int
Ssr
Platform
X-Micro-Cache
X-Proto
X-Powered-By-VTEX-Cache
X-VTEX-Cache-Time
X-Geo-Header
X-VTEX-Cache-Server
X-RateLimit-Limit-Second
X-Pubstack
X-Policy
X-Platform
X-Node-Id
X-NMSegId
X-NodeID
X-Origin-Response-Time
X-PAYTM-SRV-ID
X-Origin-Time
X-RateLimit-Remaining-Second
X-Region-Sid
X-Varnish-Director
X-SVT-ORM-RULES
X-Sn-Servicetimems
X-SVT-ORM-VERSION
X-Tb-Optimization-Total-Bytes-Saved
X-Thanos
X-Test
X-Varnish-Hostname
X-Server-IP
X-VG-TLSProxy
X-VG-WebCache
X-Request-Time
X-Scheme
X-VarnishDD-TTL
X-SD-PageType
X-Nginx-Cache-Key
X-Nyt-Route
X-GeoIP-Country-Code
X-WA-Info
X-HN
Cdnsip
CDCHOST
Cdncip
X-GeoIP-Region-Code
Click-Count-Action-Start
Country-Code
Content-Script-Type
Click-Count-Error
X-GoCache-CacheStatus
XM
X-HS-Content-Campaign-Id
Cache-Provider
X-Mly-Id
X-Men
Fastly-Backend-Name
X-Mvc-Supplant-Cachable
Fastly-SSL
X-GeoIP
Content-Style-Type
Esi-Enabled
X-Loc
C-Via
X-Wikidot-Backend
AKAMAI
Adler-Geo
X-Wikidot-Static-Cache
X-DC
X-Tec-Api-Root
X-Tec-Api-Origin
X-Tec-Api-Version
X-Varnish-Beresp-Ttl
X-HITS
X-CGP
X-Contensis-Viewer-Groups
X-Varnish-Beresp-Status
X-Aicache-OS
X-We-Are-Hiring
Yak-Timeinfo
X-Varnish-Authentication
X-Varnishpool
X-Depends
X-Ec-Custom-Error
X-Mvc-Supplant-OutputCached
X-NCache
X-Pool
X-Location
X-Human
X-From
X-Hash
X-Eu-Site
X-Proxied-Request
X-Request-Host
X-CUA
X-Csrf-Jwt
X-Up
X-Slack-Shared-Secret-Outcome
X-Slack-Backend
X-Request-Start
X-Date
X-Section
X-Var-Ttl
X-Cache-Aspx
Machine
L5d-Success-Class
L
HA-Ipaddr
Mail-Subject
NGX
Release
Proxy-Firewall
Pramga
On-Server
Ha-Gx-Prefs
Gh-Request-Id
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
X-MP-GENERATED-AT
X-LiteSpeed-Cache-Control
Apple-News-Services-Request-Url
Cache-Key
Fastly-GeoIP-CountryCode
DSUID
Cluster
Canary
Req-Svc-Chain
Apple-News-Services-Handled
X-Access
X-Accel-Expires-Debug
Web-Mar-Region
True-Client-Country-4JS
W
We-Hiring
X-BBC-Edge-Cache-Status
X-NGINX-Cache
X-Jungle-Id
X-Cs
X-Zone
X-Cache-Backend
X-Cache-FS-Status
X-Vdms-Path
X-Varnish-Hits
X-LB-ID
X-Akamai-Transformed
WP-Super-Cache
Debug
X-Uri
CDN-RequestId
X-Datadome
X-Via-Popv
X-HA-Backend
X-Via-Poph
X-Via-Popn
Redirect-Candidate
Pics-Label
Server-Info
X-Refresh
X-ApacheServer
X-Newrelic-Synthetics
BehaviorPad-Version
CloudFront-Viewer-Country
X-Render-Time
X-PERF
X-Nananana
X-VHOST
Fastly-Drupal-HTML
SID
X-CACHE-AGE
X-VC-TTL
X-Servedbyhost
X-M-Reqid
X-M-Log
X-APP
Fastly-Drupal-Html
X-Parent-Response-Time
GeoIP-Latitude
X-B3-Parentspanid
X-Response-Served-From
X-Original-Request-Id
X-LB-NoCache
Datacenter
Locid
X-Content-Length
X-Cached-By
X-Litespeed-Tag
X-DynaTrace-JS-Agent
X-TT-LOGID
X-CDN-Cache-Status
Resin-Trace
Server-ID
Cf-Ipcountry
X-CS
X-Nc
GeoIp-Country-Code
X-LiteSpeed-Tag
X-Amz-Meta-Cb-Modifiedtime
X-Wa
X-IAuth-Set-Uid
X-Old-Content-Length
NtCoent-Length
Cdn
X-ZONE
X-VCache
Vc-Max-Age
Ngx-Var-Key
Tcn
X-TX-ID
FSS-Cache
Uri
X-Dispatcher-Number
X-NewRelic-App-Data
X-Varnish-Beresp-TTL
CDN
X-Platform-Processor
X-Esi
X-Platform-Cluster
X-RequestId
True-Client-Ip
X-Fpc
X-Platform-Router
X-Vgn-Hpd-Reason
Product
X-SERVER-NAME
X-HostName
Srv
X-Moov-Xdn-Version
X-TH-Server
X-Moov-T
True-Client-IP
Serverhost
X-Erf-Stays-Pdp-Viaduct-Migration-Web-V2
X-Cdn-Forward
X-Nf-Language
X-Ckpd-Fst-Backend
X-Nf-Ats-Version
X-Nf-Country
X-FPC
X-Srv
X-B3-Spanid
X-Oracle-DMS-ECID
X-TIME
X-Bug-Bounty
X-NC
X-WA
X-Dynatrace-Js-Agent
ServerName
Cross-Origin-Embedder-Policy-Report-Only
Cf-Device-Type
GeoIP-Country-Code
S-Rt
Request-ID
X-HubSpot-Correlation-Id
X-Application
X-Cdn-Cache-Status
X-Vc
X-User
CacheControlHeader
X-External-Request-Id
X-S-Cookie
X-B-Cookie
X-Dispatch
X-Destination
X-CACHE-KEY
X-Zen-Fury
Geoip-Latitude
Server-Id
Hostname
X-APP-VERSION
X-Geo
X-COUNTRY
X-Cache-Date
X-Rocket-Build-Number
Srvid
X-Correlation-ID
X-Webkit-Csp-Report-Only
X-FL-QIT-DEBUG
X-Sigma
X-Instance-Name
X-Sigma-Backend
X-Presslabs-Stats
X-API-Version
ServerHost
X-ServedByHost
X-Lb-Nocache
X-Vmg-Version
X-Segment-20210421
X-VServer
X-Akamai-Device-Characteristics
Ohc-File-Size
User-Agent
X-Branch-Name
X-Via-PopN
X-Info
X-Gamma-Serve
X-Via-PopV
X-Via-PopH
Cloudfront-Viewer-Country
X-Ha-Backend
Origin-Trial
X-VCL-Version
PICS-Label
Xc-Version
Cneonction
Epwk-X-Cache
Load-Balancing
DataCenter
X-DynaTrace
X-Ua
Expect-Staple
X-App
X-Limited
X-DataCenter
X-Srcache-Store-Status
X-Srcache-Fetch-Status
Rtss
Type
X-Lb-Id
X-Amz-Meta-Opti
X-MSEdge-Features
X-MSEdge-Flight
X-MiniProfiler-Ids
X-Hit
X-Akamai-Pragma-Client-IP
Ohc-Cache-HIT
X-Check-Cacheable
X-Serial
Lb
X-Acquia-Site
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-Sqd-Ctime
Timeexpire
X-Owner
Cmstype
Cmsid
X-Web-Server
Warning
X-Sqd-Stime
X-Acquia-Purge-Tags
X-Irp-Debug
X-Requestid
X-Datacenter
X-Service-Response-Time
Sm-Log-Id
Cross-Origin-Opener-Policy-Report-Only
X-Litespeed-Cache-Control
X-LAGOON
X-CSRF-TOKEN
Servername
CountryCode
X-Shardid
X-Origin-Upstream-Status
X-Via-Edge
X-Via-CDN
X-Shopid
N-Cache
WZWS-RAY
X-Platform-Server
X-Qloud-Router
X-Ramcache
X-Sorting-Hat-Podid
X-Sorting-Hat-Shopid
X-Via-SSL
X-RAMCache
X-Dw-Trace-Id
X-IN-APIGATEWAY
X-Amz-Meta-Sha256
X-Th-Server
X-Udemy-Cache-App-Namespace
X-IN-APIGATEWAYSSL
X-Amz-Meta-S3b-Last-Modified
Ngx
Edge-Copy-Time
X-Core-Mission
Cl-Cache
X-Snapshot-Date