Threat Level: green Handler on Duty: Jan Kopriva

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Accept-Ranges
Expect-CT
X-XSS-Protection
Pragma
X-Powered-By
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Access-Control-Allow-Origin
Referrer-Policy
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
X-UA-Compatible
X-Xss-Protection
X-Served-By
CF-Ray
X-Download-Options
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Request-Id
X-Adblock-Key
Access-Control-Allow-Credentials
X-FRAME-OPTIONS
X-Permitted-Cross-Domain-Policies
X-AspNet-Version
Alt-Svc
X-Request-ID
X-Runtime
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-DNS-Prefetch-Control
X-Generator
X-Cache-Status
X-Check
X-Cacheable
Timing-Allow-Origin
X-Envoy-Upstream-Service-Time
X-Iinfo
X-Content-Security-Policy
X-Drupal-Dynamic-Cache
Feature-Policy
Content-Encoding
Access-Control-Expose-Headers
Upgrade
Status
X-CDN
X-AspNetMvc-Version
Access-Control-Max-Age
X-Via
Server-Timing
Request-Context
X-Robots-Tag
X-Turbo-Charged-By
X-UA-Device
X-Amz-Request-Id
X-Cache-Group
X-Dns-Prefetch-Control
X-Amz-Id-2
EagleId
X-Backend
X-AH-Environment
X-Proxy-Cache
P3p
Keep-Alive
X-Server
X-Ws-Request-Id
X-Age
Cf-Edge-Cache
Host-Header
X-Hacker
X-Vhost
X-Server-Powered-By
X-Rq
X-Varnish-Cache
X-Dispatcher
X-Amz-Version-Id
Grace
Allow
X-OneAgent-JS-Injection
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-LiteSpeed-Cache
X-Page-Speed
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Ua-Compatible
Cf-Apo-Via
X-Device
X-WebKit-CSP
Cf-Railgun
Accept-CH
X-Aws-Lambda-Call-Status
X-Node
X-Pingback
X-Host
EagleEye-TraceId
X-Ruxit-JS-Agent
X-Server-Id
Surrogate-Control
X-Nginx-Cache-Status
X-Akam-SW-Version
X-Readtime
Request-Id
X-Backend-Server
Accept-Ch-Lifetime
X-Content-Security-Policy-Report-Only
X-HW
X-Cache-Lookup
X-Cloud-Trace-Context
X-Cache-Spec
X-Litespeed-Cache
X-Trace
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Response-Time
X-Application-Context
Permissions-Policy
X-Nginx-Upstream-Cache-Status
Fastly-Restarts
X-Edge
X-Mod-Pagespeed
X-WebKit-CSP-Report-Only
X-Country
Content-Location
X-Mcache
X-MS-InvokeApp
X-Content-Type
X-Url
X-Clacks-Overhead
X-PC
X-Vname
X-TtlSet
X-Midtier
X-Amz-Server-Side-Encryption
X-CST
Rating
Accept-CH-Lifetime
RTSS
Cache-Tag
X-ESI
X-Vcap-Request-Id
X-D2id
X-Rack-Cache
X-Element-Page-Cache
X-Kinja-Revision
X-Exp-Variant
X-GoogleNews-Bot
X-Kinja-Server
X-Kinja-Build
X-Cdn-Fetch
X-Kinja
Verso
Origin-Trial
X-Use-Magma
X-Exp-Id
X-VARITI-CCR
X-Server-Name
X-GitHub-Request-Id
X-ECACHE
X-Ac
Service-Worker-Allowed
X-Powered-By-Plesk
X-Amz-Rid
X-Cnection
X-SharePointHealthScore
SPRequestGuid
X-Client-IP
X-Navigation-Version
Xkey
Edge-Control
SPIisLatency
SPRequestDuration
X-Abt-Application-Version
X-Upstream
X-Cache-TTL
X-Ttl
Accept-Ch
Arr-Disable-Session-Affinity
X-Cached
X-Dw-Request-Base-Id
X-Mg-S
X-Varnish-TTL
X-Kraken-Loop-Name
X-Erf-Bev-Bev
X-Server-Lifecycle-Phase
X-Instrumentation
X-Browser-Type
X-Erf-Bev-Bev-Is-Generated
X-B3-TraceId
X-NWS-LOG-UUID
X-Webkit-Csp
X-Px
Pagespeed
Display
X-Middleton-Display
X-Sol
X-NF-Request-ID
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-FastCGI-Cache
Access-Control-Request-Method
Edge-Cache-Tag
X-Cache-Key
X-Forwarded-For
X-Correlation-Id
X-Country-Code
X-Goog-Hash
X-Ser
X-Powered-CMS
X-Id
AR-CACHE
AR-SID
AR-Request-ID
Content-MD5
AR-PoweredBy
AR-ATIME
Front-End-Https
Public-Key-Pins
TCN
X-RateLimit-Remaining
X-Amzn-Trace-Id
X-Jurisdiction
X-HP-Trace-Id
X-HP-Webp
X-Version
X-T
X-Recruiting
X-MSEdge-Ref
X-Content-Digest
Response
X-Middleton-Response
X-Accel-Expires
X-Ratelimit-Limit
TP-Cache
TP-L2-Cache
X-Shield-Request-Id
MicrosoftSharePointTeamServices
S
Cache-Status
Nginx-Cache
X-Fastcgi-Cache
X-Request-Processing-Time
X-Request-Received
X-HS-Hub-Id
X-HS-Cache-Config
X-HS-Content-Id
X-HS-Combine-CSS
Cross-Origin-Opener-Policy
Server-Node
X-XRDS-Location
X-Fastly-Request-ID
Cache-Tags
X-Daa-Tunnel
Mrf-Cache-Status
MRF-Tech
X-B3-TraceId-Primal
X-Hits
X-ORACLE-DMS-ECID
X-Distributor
X-ORACLE-DMS-RID
X-PressLabs-Stats
X-LB-Cache
X-Edge-Location-Klb
X-Kinsta-Cache
X-Origin-Server
X-Ua-Browser
X-Ezoic-Cdn
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-TEC-API-ROOT
X-Ratelimit-Reset
Fastcgi-Cache
Filterid
Alternate-Protocol
X-Ratelimit-Remaining
X-Frontend
X-LLID
X-Grace
X-Request-Handler-Origin-Region
X-Microsite
X-Rid
X-Hostname
Realpath
X-Logged-In
Healthy
X-DIS-Request-ID
X-Varnish-Backend
Server-Name
X-FB-Debug
X-Git-Hash
X-Geo-Country
Cleartype
X-NGENIX-Cache
X-Www-Served-By
X-Cluster-Name
X-Debug-Info
X-Page-Id
Payment
DC
MS-Author-Via
X-Load-Cache
X-TTL
X-Protected-By
X-Forwarded-Proto
X-Origin-Cache
Access-Control-Allow-Method
X-ASPNET-VERSION
X-ECache
Content-Disposition
X-Upgrade-Enabled
X-B3-Traceid
Charset
X-Goog-Metageneration
X-B3-Sampled
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-GUploader-UploadID
X-Activity-Id
X-AppVersion
X-Az
X-Proxy
X-DataDome
X-Seen-By
X-Server-ID
Count-Hit
X-Cache-Age
X-Amz-Meta-S3cmd-Attrs
Paypal-Debug-Id
X-Amz-Replication-Status
X-Fb-Rlafr
X-Whom
X-F-Cache
X-Azure-Ref
X-Times
Cross-Origin-Resource-Policy
X-Revision
X-Contextid
Surrogate-Key
X-Akamai-Edgescape
X-B
Accept-Charset
X-Varnish-Server
X-App-Environment
X-Type
Viewport
X-Aspnet-Duration-Ms
X-Flags
X-Request-Guid
X-Providence-Cookie
X-Is-Crawler
X-Route-Name
X-TT
Retry-After
X-Wix-Request-Id
X-Hosted-By
X-Aspnetmvc-Version
X-Envoy-Decorator-Operation
X-Language
X-DynaTrace
X-B-Cache
X-Cache-Control
X-Signature
X-Varnish-Grace
X-Magnolia-Registration
X-App-Server
X-Mobile
X-Source
X-Goog-Stored-Content-Length
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
Version
Amp-Access-Control-Allow-Source-Origin
WPO-Cache-Message
X-VCache
WPO-Cache-Status
Host
Refresh
X-Amzn-RequestId
X-N
X-Amz-Apigw-Id
X-HTML-Minification-Powered-By
X-Cache-Rule
X-RateLimit-Limit
Referer-Policy
X-Varnish-Age
X-Tumblr-Pixel
X-Cache-Time
X-Tumblr-Pixel-0
X-XRDS-LOCATION
X-Response-Served-From
X-Original-Request-Id
Access-Control-Request-Headers
X-Tumblr-Pixel-1
X-Tumblr-User
X-Rule
X-Content-Powered-By
X-UUID
X-Framework
X-Cacheable-TTL
X-User-Agent
X-EdgeConnect-Cache-Status
X-RTag
MS-CV
Protected
SD-X-WS
X-Trace-Id
Ms-Operation-Id
X-G
X-Oracle-Dms-Rid
X-Oracle-Dms-Ecid
X-Backend-Name
X-Cache-Grace
X-Jobs
X-RemovedCookies
X-ProcessESI
VIX-Pulpo-Upstream-Status
X-Environment-Context
NGB
From-Origin
Section-Io-Cache
VIX-Pulpo-Node
X-FW-Dynamic
X-FW-Static
X-FW-Serve
X-L-Path
GEO-INFO
X-FW-Type
X-FW-Version
X-Device-Type
X-Region
X-FW-Hash
Akamai-GRN
X-FW-Server
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-Status
X-Cache-Status-Check
X-Page-View
Front
X-Rendered-As
X-Varnish-Ttl
X-Akamai-Request-ID2
X-Http-Reason
X-Is-Bot
X-NYM-Debug-Backend
X-Drupal-Cache-Tags
X-Cache-Expired-At
X-Instance
X-Adobe-Content
X-Drupal-Cache-Contexts
X-Adobe-Loc
CDN-RequestId
X-Unique-Id
Url
Pinterest-Version
X-Pinterest-Rid
X-Nginx-Cache
Pinterest-Generated-By
X-Fastly-Request-Id
X-Servername
Liferay-Portal
Accept-Language
X-Content-Options
X-Template
X-Time
Fastly-SWR
Fastly-SIE
X-Zen-Fury
X-CDN-Forward
X-Air-Hostname
X-Air-Trace-Id
X-Debug-IsPreview
Backend
X-Air-Source
X-Debug-IsConnected
X-Cache-Hit
SRV
X-DynaTrace-JS-Agent
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Newrelic-App-Data
Country
X-Mode
X-Rocket-Nginx-Serving-Static
Content-Secure-Policy
X-Uri
X-Cache-Operation
Node
X-Edge-Location
X-ARC
X-Generation-Time
X-Cache-Server
X-Tumblr-Pixel-3
Filters
X-RN-RSRV
X-COUNTRY
X-UPSTREAM-Address
X-Amzn-Remapped-Content-Length
Webserver
X-Rewrite-Enabled
S-Rt
Meta-Geo
X-Tumblr-Pixel-2
X-App-Version
X-IPS-LoggedIn
Onion-Location
Uber-Trace-Id
X-PHP-Backend
X-Timing-Wait
X-Proxy-Build
X-Proxy-Cache-Info
Countrycode
Selected-Fe
X-Locale
X-Content-Age
Azure-InstanceId
Azure-RegionName
Azure-SlotName
Cache-Hits
CF-IPCountry
Azure-Version
Azure-SiteName
X-Via-Fastly
X-Web-Node
X-Ua
X-Server-W
WP-Super-Cache
Cache-Name
X-BYPASS-REASON
X-Ms-Request-Id
X-Ms-Version
X-ProxyCache-Key
X-ProxyCache-Status
X-Skip-Cache
X-Site-Version
X-Cms-Context
X-Sucuri-ID
X-Tb
X-Reqid
X-Sucuri-Cache
X-Soup
X-SayCDN-TTL
X-Say-TTL
X-PHP-Host
Cache-Tv-Group
X-Say-Cacheable
X-VWS-Id
X-Extlb
X-Labrador-Cache-Channel
X-AWS-Id
X-Format
X-LJ-Flow-ID
ServerID
X-IPLB-Request-ID
X-Access
Webcakes-Region
TWC-GeoIP-LatLong
TWC-Locale-Group
TWC-Privacy
X-Section
TWC-GeoIP-Country
Webcakes-App-Version
Webcakes-App-Name
X-Origin-Date
X-IPLB-Instance
X-Proto
X-Zipkin-Id
X-Cache-Action
TWC-Connection-Speed
X-Routing-Service
Property-Id
X-UA-Device-Type
X-Proxy-Cache-Status
X-Cluster-Node
X-Proxied
X-Origin-Hint
TWC-Device-Class
X-SaId
X-No-Session
X-JoinUs
X-Cache-Host
X-LAGOON
DB-Nickname
Cross-Origin-Window-Policy
X-VC-Cache
X-Cluster
X-Debug
X-Forwarded-Host
X-Optimistic-Header
X-R9-Blue-Green-Version
Web-Mar-Node
X-Sql-Duration-Ms
X-Sql-Count
X-Adobe-Source
X-Urbn-Site-Id
Locale
X-Real-IP
X-FB-TRIP-ID
X-Varnish-Beresp-Grace
X-Detected-As
X-Cache-TTL-Remaining
X-Urbn-Context-Path
Mn-Server-Ip
Apigw-Requestid
X-Handled-By
X-Director
X-LSADC-Cache
ServedBy
X-Node-Name
X-Ruxit-Js-Agent
X-Xfnlog-Site
X-WP-CF-Super-Cache-Cache-Control
X-WP-CF-Super-Cache
Fastcgi-Useragent
X-Tec-Api-Root
X-Tec-Api-Origin
X-Tec-Api-Version
X-GeoCountry
X-GeoCode
Frame-Options
Upgrade-Insecure-Requests
Mime-Version
X-Tt-Logid
Source
X-Varnish-Hits
X-Oneagent-Js-Injection
X-Api-Version
CDN-CachedAt
CDN-Cache
Load-Balancing
CDN-EdgeStorageId
CDN-PullZone
X-Generated-By
X-Hl-Ver
CDN-Uid
CDN-RequestCountryCode
X-Varnish-Cache-Hits
X-GEO
X-Buckets
Fastly-Drupal-HTML
Xet-Cookie
X-Request-Time
X-TIME
X-Varnish-Hostname
X-FireWall-Port
X-Datadog-Sampling-Priority
X-Datadog-Parent-Id
X-RM-Cache-TTL
X-Datadog-Sampled
X-Mg-Request-UUID
X-ServerID
X-Datadog-Trace-Id
X-Redis-Cache
X-Origin-CC
X-SRV
X-Origin-TTL
CF-Cached-On
X-TA-CDN-Provider
X-Cache-Debug
X-URL
X-Loop
X-Storage
X-Akamai-Transformed
X-Served-From
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Storefront-Renderer-Rendered
X-Shopify-Stage
X-Pubstack
X-ShardId
X-ShopId
X-Alternate-Cache-Key
X-Provided-By
X-Tx-Id
X-Endurance-Cache-Level
X-Restarts
X-Pass-Why
X-Request-Host
X-Newrelic-Synthetics
X-Location
Xserver
X-Level-Front-Cache
Surrogated-Key
Sslversion
X-CMSURLCustom
X-Origin
NM-Fastcgi-Cache
X-Mobile-URL
X-Mid
X-Aed
X-Cache-Date
MD5-Digest
Memcached
X-Men
X-Generated-On
DCR-Processing-Time-Ms
Origin
X-Developer
DCR-Decision-By
X-Ec-Fail
Candidate-Md5Url
X-Ec-GeoHdr
X-Destination
DSUID
X-CUA
Host-ID
Gannett-Cam-Experience-Id
X-D
Edge-Cache
Odigeo-Trace-Id
X-Epic-Correlation-Id
Cache-Host
Redirect-Candidate
X-Conf
X-Gdpr
Release
Rendered-Blocks
X-Hash
Server-Host
X-Cache-Info
X-Cache-NE
A
BehaviorPad-Version
X-External-Request-Id
X-Fetched-On
Lang
X-Core-Mission
X-INCAP-ABP
X-Nyt-Route
Thinkindot-Control
X-TIM-N
X-Bc-Bl
X-Vdms-Path
X-Vdms-Version
X-Thinkindot-L3
X-Thanos
X-SRCache-Key
X-Sigma-Backend
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
X-Test
X-B-Cookie
X-We-Are-Hiring
X-A-Wwc
X-A-Dgt
X-Application
Meta-Geo-Continent
X-CSRF-Token
X-A-Dcw
X-A-Dam
Ngx.Var.Host
Xc-Version
WWW-Authenticate
X-A
X-A-Ccd
X-Sigma
X-BCube-Filmed-By
X-Rojux
X-S
X-S-Cookie
T-Server
X-Rocket-Build-Number
X-Processor
TDXMobile
X-Response-By
X-S-Maxage
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-ScT
X-Origin-Time
X-Bip
X-Service
Server-Info
Click-Count-Error
Click-Count-Action-Start
CloudFront-Viewer-Country
X-Date
Cmsid
X-Ec-Custom-Error
X-Platform-Cluster
X-Platform-Processor
Cache-Key
C-Via
CacheControlHeader
X-Platform-Router
Fastly-Backend-Name
Cmstype
Country-Code
Gh-Request-Id
X-Cdn-Origin
X-Accel-Expires-Debug
Fastly-GeoIP-CountryCode
X-CacheTTL
X-Org
X-Auto-Login
X-Dispatcher-Number
X-Dispatcher-Server
X-Akamai-Device-Characteristics
X-Cache-Bucket
X-Platform
X-Scale
X-Fastly-Backend
Req-Svc-Chain
X-Gzip
X-HS-Content-Campaign-Id
X-Req
X-Mvc-Supplant-Cachable
X-Var-Ttl
X-Geo-Header
X-Httpd
X-Human
X-Loc
X-Server-IP
Magicmarker
X-Slack-Backend
X-Sn-Servicetimems
X-Slack-Shared-Secret-Outcome
X-Origin-Response-Time
X-Node-Id
X-SD-PageType
X-Fastly-Cache
X-BBC-Edge-Cache-Status
X-Pool
Mail-Subject
X-Esi-Check
We-Hiring
Tube-Return
Tube-Got-Results
X-Cache-Id
X-Gamma-Serve
Tube-Get-Contents
Tube-Got-Eval
X-Region-Sid
X-Varnishpool
AKAMAI
Section-Io-Origin-Time-Seconds
Section-Io-Origin-Status
Section-Io-Id
HostName
Section-Origin-Responded
X-Vcl-Version
X-WP-CF-Super-Cache-Active
Environment
X-Via-CDN
X-Cache-FS-Status
X-Azure-Ref-OriginShield
X-Irp-Debug
X-VServer
X-WA-Info
X-WADP-Cache
X-Worker
X-Vmg-Version
X-Varnish-Remaining-TTL
X-V-Cache
X-Variation
X-Varnish-CookieHashed-On
X-Varnish-CookieINHashed-On
Locid
On-Server
X-FL-EDGE
X-FL-QIT-DEBUG
X-Instance-Name
X-Nginx-Cache-Key
X-Developers
X-Cdn-Srv
Origin-CC
Origin-EX
Srvid
X-SB
X-Planisys-CDN-TTL
X-Forwarded-Site
X-Frame-Option
X-GeoIP
X-GeoIP-City
X-FC-Vary-Parameters
X-Device-Os
X-Clara-WADP
X-Core-Value
X-DefElseHash
X-DefHash
X-GeoIP-Country-Code
X-GeoIP-Region-Code
X-Origin-Expires
X-Owner
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
X-NodeID
X-Mly-Id
X-Has-Esi
X-Is-Gdpr
X-JWT-State
X-Ckpd-Fst-Backend
X-Fmm-Version
Kp-EeAlive
Machine
Ssr
Is-Eu
Adler-Geo
Datacenter
Canary
Expect-Staple
State
Platform
Vix-Hermes-Req-Id
Web-Mar-Region
X-TNCMS
X-Ad-Defer-Variation
X-Via-SSL
X-Air-Pt
X-Varnish-Beresp-Ttl
Edge-Copy-Time
X-Via-Edge
X-VarnishDD-TTL
X-Qloud-Router
PFcat
X-Block-Status
X-VG-TLSProxy
Server-Ext
X-DPWN-IS-SECURE
Server-Hostname
L
X-Old-Content-Length
Cache-Provider
X-Op-Id-All
X-Minions-Version
X-NCache
X-Release
Sever-Int
X-HN
X-From
Apple-News-Services-Request-Url
X-Cache-Tags
Apple-News-Services-Parsed-Url
NGX
X-Accel-Buffering
X-Hnp-Log
Wxu-Next-Commit
X-Aicache-OS
Wxu-Next-Region
Producers
Wxu-Next-Hostname
Apple-News-Services-Host
X-Gen-Mode
X-VC
X-Wix-Viewer-Type
User-Cache-Control
X-App
Apple-News-Services-Handled
X-Varnish-Beresp-Status
X-Platform-Server
Ha-Gx-Prefs
CDCHOST
HA-Ipaddr
X-Ua-Device
X-Request-Start
X-Mvc-Supplant-OutputCached
L5d-Success-Class
X-Cache-Remote
X-Microcachable
X-Nananana
X-Csrf-Jwt
X-RCS-CacheZone
X-CGP
X-Eu-Site
X-Webkit-CSP-Report-Only
X-Zone
X-B3-Spanid
X-CACHE-AGE
X-Parent-Response-Time
X-Dc
X-Debug-Cache-Store
X-Lambda-Id
X-VCT
X-Debug-Cache-Fetch
X-Cache-Enabled
X-LB-NoCache
Fastly-SSL
AMP-Access-Control-Allow-Source-Origin
X-Up
X-Tb-Optimization-Total-Bytes-Saved
Sid
Pics-Label
X-Correlation-ID
X-Cs
X-Refresh
CPC-Age
X-Generated-In
X-Vtex-Remote-Cache
Env
X-Via-Poph
X-Via-Popv
X-Via-Popn
X-Cache-Backend
X-Cached-By
X-Render-Time
CPC-Cache
X-Upstream-Ct
VNS-Age
VNS-Cache
X-Upstream-Ht
X-B3-SpanId
NtCoent-Length
X-DC
X-Trace-ID
X-CCDN-Origin-Time
X-CCDN-CacheTTL
X-Hcs-Proxy-Type
X-ND-Cache
Decoy-Debug-Key
GeoIP-Latitude
Memory
Decoy-Debug-Status
Decoy-Debug-TTL
Time
Cache
Cluster
X-Cache-Type
X-TH-Server
Fastly-Drupal-Html
X-AIR-PT
X-HA-Backend
X-Tid
X-Webkit-CSP
X-NWS-UUID-VERIFY
X-Edge-Pop
X-HS-Status
X-ATG-Version
SID
Srv
X-Servedbyhost
X-NewRelic-App-Data
X-LB-ID
X-Via-JSL
X-Wa
X-Esi
X-Nc
X-Presslabs-Stats
X-DataCenter
X-ZONE
X-Srv
Cdn
Svr
GeoIp-Country-Code
X-Varnish-Authentication
Uri
X-Cache-ASPX
Server-ID
X-Client-Ip
X-Contensis-Viewer-Groups
X-MP-GENERATED-AT
X-Check-Cacheable
X-Vgn-Hpd-Cached
X-CF-Lambda-Fn
X-Vgn-Hpd-Ssi
Esi-Enabled
X-RateLimit-Remaining-Second
X-CF-Lambda-Version
X-PAYTM-SRV-ID
X-Vgn-Hpd-Variations-Key
X-RateLimit-Limit-Second
X-Amz-Meta-Cb-Modifiedtime
X-Vc
True-Client-IP
X-Proxy-CacheRZ
XkeyRZ
X-Datadome
X-Wikidot-Static-Cache
X-Wikidot-Backend
Lb
YJS-ID
N-Cache
X-Udemy-Cache-App-Namespace
X-NGINX-Cache
X-Fpc
Hostname
X-CDN-Cache-Status
XServer
X-Varnish-Beresp-TTL
Resin-Trace
X-Forwarded-Path
X-Orig-Expires
X-Shop-Environment
X-Tenant
X-Bl-Debug
RNT-Time
X-CACHE-KEY
X-CSRF-TOKEN
M-TraceId
RNT-Machine
X-Nf-Request-Id
X-TX-ID
X-CS
X-FPC
X-Gateway-Cache-Key
X-Gateway-Skip-Cache
X-MSEdge-Features
X-Gateway-Request-Id
X-MSEdge-Flight
X-AK-Request-ID
OT-Force-Account-Verify
Cdnsip
Cdncip
True-Client-Ip
X-Gateway-Cache-Status
X-EC-Lua
X-Fastly-Country-Code
X-API-Version
X-B3-Trace-ID
X-Via-NSCOPI
X-App-Name
X-Policy
X-Logging-Id
Eomportal-Instance
Sm-Log-Id
X-Service-Response-Time
Server-Id
CDN
GeoIP-Country-Code
Hit
Path
X-Container-Uri
X-Git-Commit
X-Cache-Ttl
X-Lb-Id
X-Micro-Cache
X-Datacenter
X-Cdn-Diag
X-Vcache
X-APP-VERSION
X-WA
Ngx-Var-Key
X-Accel-Version
X-CLOUD-TRACE-CONTEXT
X-Cache-NGX
X-NC
IsBot
X-VCL-Version
X-SIPLIST1
X-Ha-Backend
X-MCACHE
X-ServedByHost
X-RateLimit-Reset
X-Geo
LB
X-Edge-POP
HIT
X-Request-URI
X-Akamai-Pragma-Client-IP
X-Cdn-Forward
X-Cdn-Cache-Status
V-Age
X-Acquia-Purge-Cdn-Unconfigured
RATING
X-SERVER-NAME
X-Info
X-VG-WebCache
X-Tncms
XM
Pramga
X-Xrds-Location
Cross-Origin-Opener-Policy-Report-Only
X-Snapshot-Date
Location
ENV
FSS-Cache
X-Rebelmouse-Cache-Control
CDN-RequestPullCode
Timeexpire
CDN-RequestPullSuccess
X-Clientip
X-Srcache-Fetch-Status
Geoip-Latitude
X-Srcache-Store-Status
X-Rebelmouse-Surrogate-Control
X-Via-PopV
X-Via-PopN
X-Via-PopH
X-TT-LOGID
Tcn
Ohc-File-Size
Epwk-X-Cache
Yjs-Id
True-Client-Country-4JS
X-Pod-Name
X-Ctl-Mach
X-Lb-Nocache
Req-ID
X-TimeS
X-Wp-Cf-Super-Cache
X-HostName
X-Wp-Cf-Super-Cache-Cache-Control
X-LiteSpeed-Cache-Control
X-Iauth-Set-Uid
X-Hyper-Cache
W
X-Amz-Meta-Opti
X-Dw-Trace-Id
X-Serial
X-M-Log
X-M-Reqid
X-LiteSpeed-Tag
Warning
X-UP
Proxy-Connection
X-User
X-Cdn-Request-ID
X-Litespeed-Cache-Control
X-Vgn-Hpd-Reason
Cneonction
X-Oss-Storage-Class
WZWS-RAY
Cdn-Requestid
X-Oss-Server-Time
X-Oss-Request-Id
X-Oss-Hash-Crc64ecma
X-Oss-Object-Type
X-Fastly-Backend-Reqs
X-PERF
Content-Style-Type
X-ApacheServer
X-Acquia-Application-Trace
Servername
X-Viewer-Country
Content-Script-Type
X-Cache-Expires
X-Acquia-Application-UUID
X-Qnm-Cache
Ec-Rule-Version
X-Acquia-Purge-Tags
X-RAMCache
X-Acquia-Site
X-Lsadc-Cache
CountryCode
X-MiniProfiler-Ids
X-Akamai-ERPolicy
Inserted-Into-Cache-At
PICS-Label
X-WP-CF-Super-Cache-Cookies-Bypass
X-Akamai-ERRuleID
Ngx
My-App
MIME-Version
X-Swift-Error
X-IPS-Cached-Response
X-B3-Parentspanid
X-B3-ParentSpanId
X-Mg-Cache
X-Webstats-RespID
X-Fastly-Cache-Hits
X-Th-Server
Ohc-Cache-HIT