Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Accept-Ranges
Expect-CT
X-XSS-Protection
CF-RAY
Pragma
X-Powered-By
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Access-Control-Allow-Origin
Referrer-Policy
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
X-UA-Compatible
P3P
X-Xss-Protection
X-Served-By
X-Download-Options
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Request-ID
X-Adblock-Key
Access-Control-Allow-Credentials
CF-Ray
X-Permitted-Cross-Domain-Policies
X-AspNet-Version
X-Request-Id
Alt-Svc
Content-Security-Policy-Report-Only
X-Runtime
X-DNS-Prefetch-Control
X-Drupal-Cache
X-Check
X-Cache-Status
X-Generator
X-Cacheable
P3p
Timing-Allow-Origin
X-FRAME-OPTIONS
X-Iinfo
X-Envoy-Upstream-Service-Time
X-Content-Security-Policy
X-Drupal-Dynamic-Cache
Feature-Policy
Content-Encoding
Upgrade
Access-Control-Expose-Headers
Status
X-AspNetMvc-Version
X-CDN
Access-Control-Max-Age
X-Via
Server-Timing
X-UA-Device
X-Robots-Tag
Request-Context
X-Turbo-Charged-By
X-Cache-Group
X-Amz-Request-Id
EagleId
X-Amz-Id-2
X-Backend
Keep-Alive
X-AH-Environment
X-Proxy-Cache
X-Ws-Request-Id
X-Server
X-Age
Host-Header
X-Hacker
X-Ua-Compatible
Cf-Edge-Cache
X-Vhost
X-Server-Powered-By
X-Rq
Allow
X-Varnish-Cache
X-Dispatcher
Grace
X-Amz-Version-Id
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-LiteSpeed-Cache
X-OneAgent-JS-Injection
X-WebKit-CSP
Accept-CH
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Device
Cf-Apo-Via
X-Page-Speed
Cf-Railgun
X-Aws-Lambda-Call-Status
X-Server-Id
X-Host
X-Node
X-Pingback
X-Cache-Spec
X-Nginx-Cache-Status
X-Akam-SW-Version
Surrogate-Control
X-Dns-Prefetch-Control
X-Backend-Server
EagleEye-TraceId
Request-Id
X-Cache-Lookup
X-Readtime
X-Ruxit-JS-Agent
X-HW
X-Cloud-Trace-Context
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Content-Security-Policy-Report-Only
X-Trace
X-Application-Context
X-Response-Time
Accept-CH-Lifetime
Permissions-Policy
X-CST
X-Mod-Pagespeed
X-Nginx-Upstream-Cache-Status
Fastly-Restarts
X-Edge
Accept-Ch-Lifetime
Content-Location
X-Country
X-Content-Type
X-WebKit-CSP-Report-Only
X-Mcache
X-ECACHE
Rating
X-Clacks-Overhead
X-MS-InvokeApp
X-Url
X-TtlSet
X-Vname
X-PC
X-Midtier
X-Amz-Server-Side-Encryption
X-VARITI-CCR
RTSS
X-B3-TraceId
Cache-Tag
X-Vcap-Request-Id
X-D2id
X-Element-Page-Cache
Verso
X-Ac
Origin-Trial
X-Kinja-Revision
X-Kinja-Server
X-Use-Magma
X-Kinja-Build
X-Exp-Variant
X-Cdn-Fetch
X-Exp-Id
X-Server-Name
X-GoogleNews-Bot
X-Kinja
X-Rack-Cache
X-Varnish-TTL
X-Cnection
X-Litespeed-Cache
X-Cache-TTL
X-Powered-By-Plesk
Service-Worker-Allowed
X-ESI
Xkey
X-Navigation-Version
X-Abt-Application-Version
X-NWS-LOG-UUID
X-SharePointHealthScore
SPRequestGuid
X-Ttl
X-Amz-Rid
X-GitHub-Request-Id
Edge-Control
X-Client-IP
X-Cached
X-Fastcgi-Cache
X-Px
X-Mg-S
X-Kraken-Loop-Name
X-Erf-Bev-Bev-Is-Generated
X-Instrumentation
Arr-Disable-Session-Affinity
X-Browser-Type
X-Erf-Bev-Bev
X-Server-Lifecycle-Phase
X-Upstream
SPIisLatency
SPRequestDuration
X-Correlation-Id
X-Middleton-Display
Display
Pagespeed
X-Cache-Key
X-Sol
Content-MD5
X-Dw-Request-Base-Id
X-SRCache-Store-Status
X-SRCache-Fetch-Status
Access-Control-Request-Method
X-NF-Request-ID
Edge-Cache-Tag
X-XRDS-Location
X-Goog-Hash
X-Daa-Tunnel
Front-End-Https
X-Country-Code
X-RateLimit-Remaining
Public-Key-Pins
X-Version
X-Forwarded-For
X-Powered-CMS
AR-ATIME
AR-PoweredBy
AR-CACHE
AR-SID
AR-Request-ID
TCN
X-MSEdge-Ref
X-T
X-Jurisdiction
X-HP-Trace-Id
X-HP-Webp
X-Recruiting
X-Content-Digest
X-Id
X-Accel-Expires
Response
X-Middleton-Response
Mrf-Cache-Status
X-B3-TraceId-Primal
MRF-Tech
X-Shield-Request-Id
X-Ser
TP-Cache
TP-L2-Cache
X-Amzn-Trace-Id
Nginx-Cache
S
X-Hits
X-Request-Processing-Time
X-Request-Received
X-HS-Content-Id
X-HS-Hub-Id
X-HS-Combine-CSS
X-HS-Cache-Config
Cache-Status
Server-Node
X-Distributor
X-Kinsta-Cache
X-Edge-Location-Klb
X-Fastly-Request-ID
Cache-Tags
MicrosoftSharePointTeamServices
Fastcgi-Cache
X-Grace
Alternate-Protocol
Server-Name
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-DataDome
X-Protected-By
X-TEC-API-VERSION
X-Ratelimit-Limit
X-Ezoic-Cdn
X-DIS-Request-ID
X-Origin-Server
X-Geo-Country
X-Ua-Browser
X-LB-Cache
X-Ruxit-Js-Agent
X-Frontend
X-Microsite
X-Request-Handler-Origin-Region
X-Rid
X-Debug-Info
X-Varnish-Backend
X-Ratelimit-Reset
X-Www-Served-By
Healthy
Cross-Origin-Opener-Policy
Cleartype
X-Logged-In
X-NGENIX-Cache
X-Forwarded-Proto
Payment
Filterid
X-Git-Hash
X-FB-Debug
X-TTL
X-Page-Id
X-Load-Cache
X-Ratelimit-Remaining
Charset
X-B3-Sampled
Content-Disposition
X-Webkit-Csp
X-VCache
X-ASPNET-VERSION
X-Origin-Cache
X-LLID
X-Oracle-Dms-Rid
X-Oracle-Dms-Ecid
X-Cluster-Name
DC
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Hostname
MS-Author-Via
X-PressLabs-Stats
X-GUploader-UploadID
X-Goog-Metageneration
X-Upgrade-Enabled
Retry-After
Access-Control-Allow-Method
Accept-Charset
X-Proxy
X-Az
X-Activity-Id
X-AppVersion
X-F-Cache
Cross-Origin-Resource-Policy
X-Type
X-Signature
X-Contextid
X-Amz-Replication-Status
X-B-Cache
X-Flags
Accept-Ch
X-Varnish-Server
X-Request-Guid
X-Hosted-By
X-Aspnet-Duration-Ms
X-Amz-Meta-S3cmd-Attrs
Paypal-Debug-Id
X-Is-Crawler
Viewport
X-Revision
X-Providence-Cookie
X-Route-Name
X-Azure-Ref
X-Seen-By
X-B
X-Wix-Request-Id
X-TT
X-Whom
X-RateLimit-Limit
X-Fb-Rlafr
Amp-Access-Control-Allow-Source-Origin
Surrogate-Key
X-App-Environment
X-DynaTrace
Referer-Policy
Realpath
X-FastCGI-Cache
X-Source
X-Aspnetmvc-Version
Count-Hit
X-Akamai-Edgescape
X-Tt-Trace-Tag
X-Tt-Trace-Host
X-Mobile
X-App-Server
X-Goog-Stored-Content-Length
X-Goog-Generation
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-Cache-Control
Host
X-N
X-EdgeConnect-Cache-Status
X-HTML-Minification-Powered-By
X-Tumblr-Pixel-1
X-Original-Request-Id
X-Response-Served-From
X-Tumblr-Pixel
X-Tumblr-User
X-Cache-Rule
Version
X-Varnish-Grace
X-Tumblr-Pixel-0
Refresh
X-Magnolia-Registration
X-Oneagent-Js-Injection
X-Varnish-Age
X-UUID
X-Cache-Time
Ms-Operation-Id
MS-CV
Access-Control-Request-Headers
Section-Io-Cache
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-RTag
X-Envoy-Decorator-Operation
X-Rule
SD-X-WS
X-Environment-Context
X-Page-View
X-FW-Static
X-L-Path
X-FW-Version
X-FW-Serve
X-FW-Hash
X-FW-Dynamic
X-Content-Powered-By
X-Status
Protected
X-FW-Type
X-FW-Server
X-Adobe-Content
X-Adobe-Loc
X-Cache-Grace
X-Cache-Expired-At
X-Cache-Status-Check
Akamai-GRN
X-Device-Type
GEO-INFO
NGB
X-Cache-Age
X-G
X-Framework
X-Cacheable-TTL
X-Jobs
X-ProcessESI
X-RemovedCookies
X-Template
X-Servername
X-Instance
X-Language
X-Http-Reason
X-Is-Bot
X-NYM-Debug-Backend
X-Rendered-As
Url
X-Akamai-Request-ID2
X-Backend-Name
X-User-Agent
X-Debug-IsConnected
X-Debug-IsPreview
X-Nginx-Cache
X-B3-Traceid
X-CDN-Forward
X-Newrelic-App-Data
SRV
X-Drupal-Cache-Contexts
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Drupal-Cache-Tags
CDN-RequestId
WPO-Cache-Status
From-Origin
X-Cache-Hit
WPO-Cache-Message
X-Tb
X-Trace-Id
Pinterest-Generated-By
X-Region
X-Pinterest-Rid
Country
Pinterest-Version
X-Tt-Logid
Accept-Language
Front
X-Node-Name
X-URL
X-Real-IP
X-Amz-Apigw-Id
Fastly-Drupal-HTML
X-Amzn-RequestId
Backend
X-Fastly-Request-Id
X-VC-Cache
Uber-Trace-Id
X-Content-Options
X-Mode
Content-Secure-Policy
Fastly-SIE
Fastly-SWR
X-DynaTrace-JS-Agent
X-Cache-Operation
X-Unique-Id
X-RN-RSRV
X-Rewrite-Enabled
X-COUNTRY
X-Tumblr-Pixel-2
Meta-Geo
X-Generation-Time
X-Time
X-UPSTREAM-Address
Filters
Azure-SiteName
X-IPS-LoggedIn
Azure-RegionName
Azure-InstanceId
Azure-SlotName
X-Web-Node
X-Cache-Server
X-Amzn-Remapped-Content-Length
CF-IPCountry
X-Cache-TTL-Remaining
Azure-Version
X-Format
X-Proxy-Cache-Info
X-Access
Onion-Location
X-Rocket-Nginx-Serving-Static
X-Section
X-Zen-Fury
Webserver
X-Adobe-Source
X-Cache-Action
X-Proxy-Cache-Status
Apigw-Requestid
X-Reqid
X-Cache-Host
X-Say-Cacheable
X-SRV
X-Sql-Count
X-Sql-Duration-Ms
X-Debug
X-Sucuri-Cache
X-Say-TTL
X-Sucuri-ID
X-Cms-Context
X-SayCDN-TTL
X-AWS-Id
Cache-Name
X-PHP-Host
X-Ms-Version
Webcakes-App-Version
X-Locale
TWC-Privacy
CDN-Cache
Webcakes-App-Name
X-Forwarded-Host
CDN-RequestCountryCode
X-GeoCode
X-Ms-Request-Id
X-GeoCountry
Web-Mar-Node
S-Rt
Webcakes-Region
Cross-Origin-Window-Policy
CDN-EdgeStorageId
CDN-PullZone
X-Proto
CDN-Uid
CDN-CachedAt
X-BYPASS-REASON
TWC-GeoIP-LatLong
TWC-GeoIP-Country
TWC-Locale-Group
X-TIME
X-R9-Blue-Green-Version
X-Varnish-Beresp-Grace
TWC-Device-Class
TWC-Connection-Speed
X-LJ-Flow-ID
X-Via-Fastly
Property-Id
X-Cluster
X-Labrador-Cache-Channel
X-UA-Device-Type
X-Content-Age
X-Soup
X-ProxyCache-Key
X-VWS-Id
X-Origin-Hint
X-PHP-Backend
X-Edge-Location
X-Skip-Cache
X-ProxyCache-Status
X-Server-W
Node
X-LAGOON
X-Extlb
X-Detected-As
X-JoinUs
X-Xfnlog-Site
X-SaId
X-Routing-Service
X-Zipkin-Id
Cache-Hits
X-Urbn-Context-Path
X-Urbn-Site-Id
X-Site-Version
X-Proxied
X-Handled-By
X-LSADC-Cache
X-No-Session
Locale
X-Cluster-Node
X-Proxy-Build
X-WP-CF-Super-Cache-Cache-Control
X-Ua
WP-Super-Cache
Mime-Version
X-Timing-Wait
Mn-Server-Ip
X-WP-CF-Super-Cache
Selected-Fe
X-IPLB-Request-ID
X-IPLB-Instance
Fastcgi-Useragent
DB-Nickname
ServerID
X-FB-TRIP-ID
X-Hl-Ver
Liferay-Portal
X-Tumblr-Pixel-3
Xserver
X-Tec-Api-Version
X-Tec-Api-Origin
ServedBy
X-Request-Time
X-Tec-Api-Root
X-Times
X-Optimistic-Header
X-Redis-Cache
X-Cache-Debug
X-XRDS-LOCATION
X-Air-Source
X-Air-Hostname
X-Air-Trace-Id
X-Buckets
Upgrade-Insecure-Requests
X-TNCMS
Source
X-CACHE-AGE
X-Loop
X-Origin-Date
X-NWS-UUID-VERIFY
X-GEO
X-Generated-By
Countrycode
X-Akamai-Transformed
X-Mg-Request-UUID
X-Presslabs-Stats
X-Varnish-Hits
X-Uri
CF-Cached-On
X-Director
X-Pass-Why
X-Varnish-Beresp-Ttl
X-Tid
X-TA-CDN-Provider
X-Tx-Id
X-Storage
X-Cdn
X-Webkit-CSP-Report-Only
Xet-Cookie
Frame-Options
X-ARC
X-Origin-TTL
X-Origin-CC
X-FireWall-Port
X-Newrelic-Synthetics
X-DC
X-Varnish-Ttl
X-Service
X-Varnish-Cache-Hits
X-ECache
SID
X-Sorting-Hat-ShopId
X-ShardId
X-Alternate-Cache-Key
X-ShopId
X-Shopify-Stage
X-Storefront-Renderer-Rendered
X-Sorting-Hat-PodId
X-Esi
X-Varnish-Hostname
X-Trace-ID
X-App-Version
X-B3-Spanid
X-Datadog-Sampling-Priority
Environment
X-Datadog-Sampled
X-Datadog-Trace-Id
X-Datadog-Parent-Id
X-Endurance-Cache-Level
X-AIR-PT
X-Request-Host
Cache-Tv-Group
X-Mid
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
X-S-Cookie
Thinkindot-Control
Host-ID
X-S-Maxage
Gannett-Cam-Experience-Id
X-Platform-Cluster
X-Vdms-Version
X-VG-TLSProxy
X-Vdms-Path
X-Platform-Processor
DCR-Decision-By
X-Platform-Router
X-Processor
Candidate-Md5Url
X-Thinkindot-L3
T-Server
Release
Redirect-Candidate
X-TIM-N
Rendered-Blocks
Req-Svc-Chain
X-ServerID
Surrogated-Key
X-ScT
X-SRCache-Key
A
TDXMobile
MD5-Digest
Edge-Cache
X-S
DCR-Processing-Time-Ms
Sslversion
Meta-Geo-Continent
BehaviorPad-Version
Origin
Odigeo-Trace-Id
Ngx.Var.Host
X-Rojux
Lang
X-Cache-Info
X-CMSURLCustom
X-Core-Value
X-D
X-Origin-Time
X-Cache-NE
X-Bc-Bl
X-BCube-Filmed-By
X-INCAP-ABP
WWW-Authenticate
X-Gdpr
X-Epic-Correlation-Id
X-Frame-Option
X-External-Request-Id
X-Ec-GeoHdr
X-Ec-Fail
X-Destination
X-Developer
X-Nyt-Route
X-BBC-Edge-Cache-Status
Server-Info
X-A-Dgt
Xc-Version
X-Loc
X-Mobile-URL
X-A-Wwc
X-Application
X-A-Dcw
X-B-Cookie
X-Aed
X-A
X-A-Ccd
X-A-Dam
X-We-Are-Hiring
X-Gamma-Serve
DSUID
X-Rocket-Build-Number
Magicmarker
X-NodeID
X-Geo-Header
X-Old-Content-Length
Fastly-Backend-Name
Fastly-GeoIP-CountryCode
X-Is-Gdpr
X-SB
X-Human
X-Httpd
X-GeoIP-City
X-Has-Esi
X-JWT-State
X-HS-Content-Campaign-Id
X-Location
X-DefElseHash
X-Platform-Server
Tube-Get-Contents
X-Cache-Bucket
Decoy-Debug-TTL
X-Cdn-Origin
Tube-Got-Eval
Tube-Got-Results
Vix-Hermes-Req-Id
X-Akamai-Device-Characteristics
X-Auto-Login
Tube-Return
X-Cdn-Srv
X-Clara-WADP
Server-Host
X-Ec-Custom-Error
X-Req
X-Restarts
X-Developers
State
X-Origin-Response-Time
X-Core-Mission
X-CUA
X-DefHash
X-Fmm-Version
Click-Count-Error
X-SVT-ORM-RULES
X-Sn-Servicetimems
X-SVT-ORM-VERSION
X-Test
X-Varnish-CookieHashed-On
X-Sigma-Backend
X-Sigma
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
Apple-News-Services-Handled
X-RM-Cache-TTL
X-Varnish-CookieINHashed-On
X-Generated-On
Memcached
X-Level-Front-Cache
X-Served-From
X-Pubstack
X-WP-CF-Super-Cache-Active
Decoy-Debug-Status
X-Varnish-Remaining-TTL
X-VServer
X-WA-Info
X-WADP-Cache
C-Via
X-Worker
X-SD-PageType
Cache-Host
Decoy-Debug-Key
Country-Code
Click-Count-Action-Start
Cluster
Section-Origin-Responded
Section-Io-Origin-Status
Section-Io-Id
Section-Io-Origin-Time-Seconds
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
Ssr
X-Planisys-CDN-Cache
X-Cache-Id
X-Cache-Backend
X-Wix-Viewer-Type
X-Ad-Defer-Variation
X-Accel-Expires-Debug
X-Accel-Buffering
X-App
Cmstype
Svr
X-Block-Status
Cache-Key
AKAMAI
CloudFront-Viewer-Country
X-Bip
X-Gzip
X-Varnish-Beresp-Status
X-GeoIP-Region-Code
X-GeoIP-Country-Code
X-GeoIP
X-Hash
X-Hnp-Log
X-Minions-Version
X-LB-NoCache
X-Conf
X-Vmg-Version
X-Thanos
X-Gen-Mode
X-Fetched-On
X-Scale
X-DPWN-IS-SECURE
X-Dispatcher-Number
Cmsid
X-Origin
X-Esi-Check
X-Nananana
X-Node-Id
X-Pool
X-Fastly-Backend
X-Date
X-Cache-FS-Status
X-Variation
X-Request-Start
Producers
Sever-Int
Pics-Label
Gh-Request-Id
Origin-EX
X-Var-Ttl
X-Up
Kp-EeAlive
Server-Hostname
Server-Ext
Is-Eu
L
X-Slack-Backend
Origin-CC
Platform
CDCHOST
CacheControlHeader
We-Hiring
Web-Mar-Region
Cache-Provider
NM-Fastcgi-Cache
Adler-Geo
Mail-Subject
User-Cache-Control
X-Parent-Response-Time
X-NCache
X-Org
X-FC-Vary-Parameters
X-Slack-Shared-Secret-Outcome
X-Men
Cdn
X-Nginx-Cache-Key
X-Refresh
X-Qloud-Router
X-Server-IP
X-Varnishpool
X-V-Cache
PFcat
X-Mvc-Supplant-Cachable
X-Region-Sid
X-Op-Id-All
X-Owner
X-Irp-Debug
X-HN
X-Forwarded-Site
X-Dispatcher-Server
X-Cached-By
X-CacheTTL
NGX
Fastly-SSL
X-Cache-Tags
Machine
X-VarnishDD-TTL
X-Platform
Datacenter
Wxu-Next-Commit
On-Server
X-Azure-Ref-OriginShield
X-Ckpd-Fst-Backend
Wxu-Next-Hostname
X-Device-Os
Wxu-Next-Region
X-CSRF-Token
X-Server-ID
HA-Ipaddr
X-Via-Popv
Canary
Ha-Gx-Prefs
X-CGP
X-Via-Popn
L5d-Success-Class
X-Eu-Site
X-Via-Poph
X-Csrf-Jwt
GeoIP-Latitude
X-Aicache-OS
HostName
X-Cache-Date
X-Mvc-Supplant-OutputCached
Env
X-HA-Backend
X-Servedbyhost
X-Client-Ip
Cdncip
X-Cache-Remote
Server-ID
X-Microcachable
X-AK-Request-ID
X-Tb-Optimization-Total-Bytes-Saved
Cdnsip
X-RCS-CacheZone
X-VC
X-Mly-Id
X-Wa
X-DataCenter
X-Gateway-Cache-Status
X-APP-VERSION
X-Gateway-Cache-Key
X-Fpc
X-ZONE
X-Gateway-Skip-Cache
X-Gateway-Request-Id
X-API-Version
X-LB-ID
Load-Balancing
X-Zone
X-Nc
Time
Memory
Cache
X-Fastly-Cache
X-Generated-In
X-Webkit-CSP
Request-ID
X-Via-NSCOPI
X-Instance-Name
X-Origin-Expires
X-ND-Cache
X-Check-Cacheable
Eomportal-Instance
X-Vgn-Hpd-Variations-Key
X-Vgn-Hpd-Cached
X-Vc
X-Vgn-Hpd-Ssi
Ngx-Var-Key
X-Micro-Cache
X-Response-By
X-Release
X-HS-Status
X-Correlation-ID
OT-Force-Account-Verify
Expect-Staple
X-NewRelic-App-Data
X-CCDN-CacheTTL
X-CCDN-Origin-Time
X-Hcs-Proxy-Type
X-From
X-FL-EDGE
Locid
Srvid
X-FL-QIT-DEBUG
Hostname
X-Api-Version
X-VCL-Version
X-Via-CDN
IsBot
X-Cache-Enabled
X-Request-URI
X-CS
X-SIPLIST1
NtCoent-Length
Edge-Copy-Time
X-Cache-NGX
X-CSRF-TOKEN
X-Via-SSL
X-Edge-Pop
AMP-Access-Control-Allow-Source-Origin
X-Info
X-Via-Edge
X-Via-JSL
Srv
X-Provided-By
X-NGINX-Cache
Uri
GeoIp-Country-Code
True-Client-Ip
X-MCACHE
XkeyRZ
X-Proxy-CacheRZ
X-Srv
X-Nf-Request-Id
X-Amz-Meta-Cb-Modifiedtime
X-Debug-Cache-Fetch
X-Lambda-Id
X-Debug-Cache-Store
True-Client-IP
Location
X-EC-Lua
X-Dc
X-B3-SpanId
X-Cache-Expires
X-Air-Pt
X-Edge-POP
Servername
VNS-Age
CPC-Cache
CPC-Age
Path
VNS-Cache
Sid
X-Vtex-Remote-Cache
GeoIP-Country-Code
X-Render-Time
X-Vcl-Version
X-Cs
X-Oss-Server-Time
X-Oss-Request-Id
Resin-Trace
X-Oss-Object-Type
X-Oss-Hash-Crc64ecma
X-Oss-Storage-Class
X-VCT
X-Fastly-Country-Code
Cross-Origin-Opener-Policy-Report-Only
X-TH-Server
X-RateLimit-Reset
X-ATG-Version
Traceparent
Fastly-Drupal-Html
X-CLOUD-TRACE-CONTEXT
X-Moov-Xdn-Version
X-Moov-T
CDN
Esi-Enabled
X-MSEdge-Features
X-Cdn-Request-ID
X-Viewer-Country
X-Contensis-Viewer-Groups
X-Cache-ASPX
X-MSEdge-Flight
LB
X-Varnish-Authentication
X-Scheme
X-TX-ID
X-Accel-Version
X-Pod-Name
M-TraceId
Timeexpire
X-ApacheServer
X-PERF
YJS-ID
X-Akamai-Pragma-Client-IP
X-Varnish-Beresp-TTL
X-Upstream-Ht
X-Upstream-Ct
X-NAPM-TraceId
X-PAYTM-SRV-ID
X-RateLimit-Remaining-Second
X-Datadome
X-FPC
X-RateLimit-Limit-Second
Powered-By
X-Cache-Type
X-Udemy-Cache-App-Namespace
X-Cdn-Cache-Status
Rip
X-Datacenter
X-CF-Lambda-Version
X-CF-Lambda-Fn
FSS-Cache
CountryCode
Sm-Log-Id
X-Github-Request-Id
X-SERVER-NAME
X-Service-Response-Time
X-WA
HIT
X-Lb-Id
X-Geo
XServer
X-Clientip
X-CACHE-KEY
X-NC
Server-Id
Tracecode
X-Wikidot-Backend
True-Client-Country-4JS
RNT-Time
V-Age
N-Cache
RNT-Machine
Ohc-File-Size
X-Srcache-Fetch-Status
Proxy-Connection
X-Srcache-Store-Status
X-Wikidot-Static-Cache
X-ID
X-Bl-Debug
XM
ENV
X-VG-WebCache
X-Hyper-Cache
X-Forwarded-Path
X-Shop-Environment
X-Tenant
X-ServedByHost
X-CDN-Cache-Status
Epwk-X-Cache
X-TraceId
X-Orig-Expires
X-LiteSpeed-Cache-Control
X-Ha-Backend
Yjs-Id
WZWS-RAY
X-B3-Parentspanid
X-MP-GENERATED-AT
X-B3-Trace-ID
Geoip-Latitude
Ngx
X-Cdn-Forward
X-M-Reqid
X-M-Log
X-Policy
X-App-Name
Content-Style-Type
Content-Script-Type
X-Amz-Meta-Opti
X-Qnm-Cache
X-B3-ParentSpanId
X-Via-PopH
X-Via-PopN
X-Via-PopV
X-Fastly-Backend-Reqs
X-Vgn-Hpd-Reason
X-Rebelmouse-Surrogate-Control
X-MiniProfiler-Ids
X-Cdn-Diag
Inserted-Into-Cache-At
User-Agent
X-Serial
X-Rebelmouse-Cache-Control
X-Lb-Nocache
X-Swift-Error
Ec-Rule-Version
X-Dw-Trace-Id
X-Wp-Cf-Super-Cache
X-TT-LOGID
X-Wp-Cf-Super-Cache-Cache-Control
Serverid
X-F-Status
X-UA
X-Lsadc-Cache
X-Cache-Ngx
Lb
X-Connection-Hash
My-App
Req-ID
X-Acquia-Application-Trace
X-Acquia-Application-UUID
X-Iplb-Request-Id
X-Ramcache
X-Iplb-Instance
X-Acquia-Site
X-Acquia-Purge-Tags
Expiry
X-UP
MIME-Version
Pramga
Cneonction
X-Stale
X-LiteSpeed-Tag
X-IPS-Cached-Response
X-Th-Server
X-Snapshot-Date
X-Request-URL
X-Mid-Debug-Cache-Key
X-Mid-Debug-Cache-Disk
Warning