Threat Level: green Handler on Duty: Rob VandenBrink

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
X-Powered-By
Pragma
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
Alt-Svc
X-Xss-Protection
P3P
X-Cache-Hits
X-UA-Compatible
CF-Ray
X-Served-By
X-Download-Options
X-Timer
X-Request-Id
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Generator
X-Cache-Status
X-Check
X-Cacheable
X-DNS-Prefetch-Control
X-Envoy-Upstream-Service-Time
X-FRAME-OPTIONS
X-Request-ID
Timing-Allow-Origin
X-Iinfo
X-Drupal-Dynamic-Cache
X-Dns-Prefetch-Control
Feature-Policy
X-Content-Security-Policy
Content-Encoding
Access-Control-Expose-Headers
Upgrade
X-XSS-PROTECTION
Server-Timing
Status
X-CDN
X-AspNetMvc-Version
Access-Control-Max-Age
X-Amz-Request-Id
Request-Context
X-Amz-Id-2
X-Via
X-Turbo-Charged-By
X-AH-Environment
X-Backend
X-Cache-Group
X-Robots-Tag
Cf-Edge-Cache
Keep-Alive
Host-Header
X-Hacker
X-Proxy-Cache
X-UA-Device
X-Server
X-Rq
X-Vhost
X-Server-Powered-By
Allow
X-Age
X-Varnish-Cache
X-Ws-Request-Id
X-Dispatcher
X-Amz-Version-Id
EagleId
P3p
Nel
Grace
Cf-Apo-Via
X-LiteSpeed-Cache
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Page-Speed
X-Device
Cf-Railgun
EagleEye-TraceId
X-Aws-Lambda-Call-Status
X-Swift-SaveTime
X-Swift-CacheTime
X-Pingback
X-OneAgent-JS-Injection
Ali-Swift-Global-Savetime
X-Host
X-Node
Accept-CH
X-WebKit-CSP
X-CST
X-Backend-Server
X-Server-Id
Surrogate-Control
X-Cache-Lookup
X-Nginx-Cache-Status
X-Readtime
Permissions-Policy
X-Akam-SW-Version
X-Nginx-Upstream-Cache-Status
Accept-CH-Lifetime
Request-Id
X-Application-Context
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Content-Security-Policy-Report-Only
X-Cloud-Trace-Context
X-Ua-Compatible
X-Trace
X-Response-Time
X-HW
X-Edge
Content-Location
X-Clacks-Overhead
X-Mod-Pagespeed
Xkey
X-Midtier
X-Ruxit-JS-Agent
Rating
X-ESI
X-Litespeed-Cache
X-Url
X-Amz-Server-Side-Encryption
X-Mcache
X-ECACHE
Accept-Ch-Lifetime
X-Upstream
X-Oneagent-Js-Injection
X-Vcap-Request-Id
X-Country
X-D2id
Cache-Tag
X-Ruxit-Js-Agent
X-Exp-Variant
X-Element-Page-Cache
X-MS-InvokeApp
X-Cdn-Fetch
X-Use-Magma
X-Exp-Id
X-Kinja
X-GoogleNews-Bot
X-Kinja-Revision
X-Kinja-Build
X-Kinja-Server
Verso
X-Rack-Cache
X-TtlSet
X-PC
X-Vname
Accept-Ch
X-Powered-By-Plesk
Edge-Control
RTSS
Fastly-Restarts
X-WebKit-CSP-Report-Only
X-Ac
Origin-Trial
X-VARITI-CCR
X-Cache-TTL
X-Navigation-Version
X-Abt-Application-Version
X-Country-Code
Service-Worker-Allowed
X-Goog-Hash
X-Cached
X-Ttl
Pagespeed
X-Sol
Display
X-Middleton-Display
X-GitHub-Request-Id
X-Amz-Rid
X-Browser-Type
Cross-Origin-Opener-Policy
X-Content-Type
X-Dw-Request-Base-Id
SPRequestGuid
X-SharePointHealthScore
X-Varnish-TTL
X-Server-Name
X-Mg-S
X-Amzn-Trace-Id
X-Powered-CMS
X-Middleton-Response
Arr-Disable-Session-Affinity
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
X-Kraken-Loop-Name
Response
X-Instrumentation
X-Server-Lifecycle-Phase
AR-ATIME
AR-SID
AR-PoweredBy
AR-Request-ID
SPRequestDuration
SPIisLatency
X-Cache-Key
X-Kinja-CCPA
X-ORACLE-DMS-ECID
X-NF-Request-ID
X-ORACLE-DMS-RID
X-Webkit-CSP
X-B3-TraceId
X-Times
X-B3-Traceid
AR-CACHE
X-Version
X-NWS-LOG-UUID
X-SRCache-Store-Status
X-Jurisdiction
X-HP-Trace-Id
X-HP-Webp
X-SRCache-Fetch-Status
Pinterest-Generated-By
Pinterest-Version
X-Pinterest-Rid
Cache-Tags
X-Accel-Expires
X-T
X-Fastly-Request-ID
Cache-Status
X-Cnection
Front-End-Https
Nginx-Cache
X-MSEdge-Ref
Edge-Cache-Tag
X-Hits
X-Aspnetmvc-Version
X-Client-IP
X-FastCGI-Cache
X-Ser
X-Px
Public-Key-Pins
MRF-Tech
X-B3-TraceId-Primal
Mrf-Cache-Status
Payment
X-Recruiting
X-RateLimit-Remaining
X-Frontend
X-LLID
X-Request-Received
X-Request-Processing-Time
X-Ua-Browser
Server-Node
X-Fastcgi-Cache
X-Erf-Stays-Pdp-Viaduct-Migration-Web
X-Shield-Request-Id
X-DIS-Request-ID
X-Server-ID
X-RateLimit-Limit
TP-Cache
S
X-Goog-Metageneration
X-GUploader-UploadID
Access-Control-Request-Method
X-HS-Combine-CSS
X-HS-Content-Id
X-HS-Hub-Id
X-HS-Cache-Config
MicrosoftSharePointTeamServices
X-Amz-Apigw-Id
X-Amzn-RequestId
X-LB-Cache
X-Content-Digest
X-Protected-By
X-Microsite
X-Request-Handler-Origin-Region
TP-L2-Cache
Content-MD5
X-Distributor
Access-Control-Allow-Method
X-FB-Debug
Fastcgi-Cache
X-Ezoic-Cdn
X-Page-Id
X-Ratelimit-Remaining
Realpath
X-PressLabs-Stats
X-Cluster-Name
X-Forwarded-For
X-Rid
X-Geo-Country
Accept-Charset
X-Hostname
X-B3-Sampled
X-Correlation-Id
X-Seen-By
X-Webkit-Csp
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-TEC-API-VERSION
X-Aspnet-Version
Cleartype
X-Ratelimit-Limit
X-Ua-Device
Referer-Policy
X-Envoy-Decorator-Operation
X-Goog-Generation
X-Mobile
X-Newrelic-App-Data
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
DC
TCN
Cross-Origin-Resource-Policy
X-Daa-Tunnel
X-Content-Options
X-Debug-Info
Count-Hit
X-Origin-Cache
X-Varnish-Backend
X-Varnish-Grace
X-Logged-In
X-Contextid
Surrogate-Key
X-App-Environment
X-Fb-Rlafr
X-Amz-Replication-Status
X-Git-Hash
X-Revision
X-IPS-LoggedIn
X-App-Server
X-Azure-Ref
X-Flags
X-Grace
X-Is-Crawler
X-Hosted-By
X-Request-Guid
X-Aspnet-Duration-Ms
X-Providence-Cookie
X-Route-Name
X-TTL
X-Origin-Server
X-Amz-Meta-S3cmd-Attrs
Frame-Options
X-TT
X-XRDS-Location
X-Webkit-CSP-Report-Only
X-Client-Ip
X-Forwarded-Proto
X-Kinsta-Cache
Alternate-Protocol
X-Edge-Location-Klb
X-Wix-Request-Id
X-Whom
WPO-Cache-Status
WPO-Cache-Message
Healthy
Retry-After
Charset
X-RateLimit-Reset
X-Akamai-Edgescape
Viewport
X-F-Cache
X-Backend-Name
MS-Author-Via
Section-Io-Cache
X-Magnolia-Registration
Paypal-Debug-Id
X-COUNTRY
SRV
X-Proxy-Cache-Info
X-B
X-AppVersion
X-Az
X-Activity-Id
X-ECache
Amp-Access-Control-Allow-Source-Origin
X-Language
ServerID
Akamai-GRN
X-ARC
VIX-Pulpo-Upstream-Status
X-EdgeConnect-Cache-Status
VIX-Pulpo-Node
SD-X-WS
Filterid
Host
X-Rule
X-N
X-Original-Request-Id
X-Instance
X-Http-Reason
X-Response-Served-From
X-Cache-Rule
X-App-Version
X-Id
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
Front
X-Varnish-Age
X-Akamai-Request-ID2
X-Edge-Location
X-Rocket-Nginx-Serving-Static
X-User-Agent
X-Status
X-Cache-Grace
X-FW-Type
X-FW-Version
X-Load-Cache
X-L-Path
X-FW-Static
X-Jobs
X-FW-Serve
X-Framework
X-Environment-Context
X-Cacheable-TTL
X-FW-Dynamic
Protected
From-Origin
X-FW-Hash
X-FW-Server
X-Region
Server-Name
X-Unique-Id
X-UUID
Access-Control-Request-Headers
X-Page-View
X-Cache-Time
Country
X-Rendered-As
X-Cache-Age
X-Type
X-Is-Bot
X-Varnish-Server
Fastly-SWR
Fastly-SIE
X-RemovedCookies
X-Tumblr-Pixel-0
X-Www-Served-By
X-Cache-Control
X-Tumblr-User
X-Tumblr-Pixel-1
X-Datadog-Sampling-Priority
X-Trace-Id
X-Tumblr-Pixel
X-ProcessESI
X-Datadog-Trace-Id
X-Datadog-Parent-Id
X-Adobe-Content
X-Adobe-Loc
X-DataDome
X-G
X-Proxy
Refresh
X-Vcache
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Time
X-Mg-Request-UUID
X-Datadog-Sampled
X-Amzn-Remapped-Content-Length
X-CDN-Forward
X-Source
X-Debug-IsConnected
X-Debug-IsPreview
X-Drupal-Cache-Tags
Version
X-Oracle-Dms-Ecid
Accept-Language
Content-Disposition
Countrycode
X-B-Cache
Xet-Cookie
X-WP-CF-Super-Cache
X-Oracle-Dms-Rid
X-Signature
X-WP-CF-Super-Cache-Cache-Control
X-HTML-Minification-Powered-By
X-Generated-By
Backend
X-Varnish-Ttl
X-DynaTrace-JS-Agent
Webserver
X-Erf-Web-Scheduler
X-DynaTrace
CF-IPCountry
X-ID
X-XRDS-LOCATION
X-Xrds-Location
X-Servername
X-Nginx-Cache
X-Mode
Url
X-Httpd
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-Upgrade-Enabled
X-Template
GEO-INFO
X-Content-Age
Azure-SiteName
X-LAGOON
X-NYM-Debug-Backend
X-JoinUs
X-Urbn-Site-Id
X-GeoCountry
X-Varnish-Cache-Hits
X-Proto
X-Urbn-Context-Path
X-Say-Cacheable
X-SaId
X-Say-TTL
X-SayCDN-TTL
X-UPSTREAM-Address
X-ServerID
X-GeoCode
X-Director
Azure-SlotName
Azure-Version
X-Rewrite-Enabled
Azure-RegionName
X-Storage
Azure-InstanceId
Fastcgi-Useragent
Filters
X-Cache-Action
X-Device-Type
Onion-Location
Meta-Geo
Load-Balancing
Locale
X-Cache-Operation
S-Rt
X-Tb
Xserver
X-Nf-Request-Id
Uber-Trace-Id
X-Content-Powered-By
X-PHP-Host
X-Cluster-Node
X-Soup
X-Container-Uri
X-RM-Cache-TTL
X-Labrador-Cache-Channel
X-Varnish-Hostname
X-Git-Commit
X-Forwarded-Host
X-Tt-Logid
OT-Force-Account-Verify
X-Generation-Time
X-VCT
X-VC-Cache
X-Logging-Id
X-Cache-Server
X-Served-From
Web-Mar-Node
X-Extlb
X-Detected-As
X-Debug
Webcakes-App-Version
Property-Id
TWC-Locale-Group
TWC-GeoIP-LatLong
TWC-GeoIP-Country
TWC-Device-Class
Node
TWC-Privacy
Webcakes-Region
X-Adobe-Source
X-FB-TRIP-ID
Webcakes-App-Name
Mn-Server-Ip
DB-Nickname
X-Ms-Version
X-Sucuri-Cache
X-Sql-Duration-Ms
X-Skip-Cache
X-Sucuri-ID
X-URL
X-LSADC-Cache
X-Zipkin-Id
X-Zen-Fury
X-Routing-Service
X-Sql-Count
X-RCS-CacheZone
TWC-Connection-Speed
X-Ms-Request-Id
X-Origin-Hint
X-Proxied
X-Lambda-Id
X-Format
X-Uri
X-MCACHE
X-Tumblr-Pixel-2
X-Fetched-On
X-Proxy-Build
X-Timing-Wait
X-Tumblr-Pixel-3
X-R9-Blue-Green-Version
X-Drupal-Cache-Contexts
Selected-Fe
CDN-RequestId
Liferay-Portal
X-Tec-Api-Root
X-Tec-Api-Origin
X-Tec-Api-Version
X-Tncms
X-Loop
Source
X-Cache-Hit
X-B3-SpanId
X-CCDN-Origin-Time
X-Rn-Rsrv
X-Endurance-Cache-Level
X-CCDN-CacheTTL
X-Hcs-Proxy-Type
X-Srv
Cross-Origin-Window-Policy
X-Redis-Cache
X-MP-GENERATED-AT
X-Origin-Date
X-Fastly-Request-Id
X-Ua
X-Varnish-Hits
Fastly-Drupal-HTML
X-TimeS
Section-Io-Id
Section-Io-Origin-Status
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
X-Cache-Expired-At
Upgrade-Insecure-Requests
Content-Secure-Policy
X-Ratelimit-Reset
X-Real-IP
X-Pass-Why
X-Origin-CC
X-Origin-TTL
X-UA-Device-Type
X-Node-Name
X-Cache-TTL-Remaining
X-Pubstack
X-S
X-CACHE-AGE
X-Akamai-Transformed
X-GEO
X-Server-W
X-Via-JSL
X-Hl-Ver
X-Newrelic-Synthetics
CDN-Uid
X-CSRF-Token
MS-CV
CDN-RequestCountryCode
CDN-CachedAt
CDN-EdgeStorageId
CDN-Cache
X-RTag
CDN-PullZone
CDN-RequestPullCode
CDN-RequestPullSuccess
Ms-Operation-Id
Cache-Provider
X-AIR-PT
X-TIME
X-Handled-By
X-Cache-Host
X-Parent-Response-Time
X-Cache-Type
X-S-Cookie
X-A-Ccd
X-Cache-Bucket
X-A-Dcw
X-A-Dgt
X-A
X-Cache-Info
VNS-Cache
X-ScT
W
We-Hiring
Web-Mar-Region
X-A-Wwc
X-Bl-Debug
X-BCube-Filmed-By
X-Bc-Bl
X-Reqid
X-Has-Esi
X-Request-Host
X-B-Cookie
X-Application
X-Accel-Expires-Debug
X-Aed
VNS-Age
X-App
X-IPLB-Instance
True-Client-Country-4JS
Ha-Gx-Prefs
Gh-Request-Id
HA-Ipaddr
L
Lang
L5d-Success-Class
Gannett-Cam-Experience-Id
Fastly-SSL
CPC-Cache
CPC-Age
DCR-Decision-By
DCR-Processing-Time-Ms
Fastly-GeoIP-CountryCode
Fastly-Backend-Name
Magicmarker
Mail-Subject
Server-Host
Rendered-Blocks
Sslversion
Surrogated-Key
X-Cache-NE
T-Server
Redirect-Candidate
Odigeo-Trace-Id
Meta-Geo-Continent
MD5-Digest
N-Cache
NGB
Ngx.Var.Host
Vix-Hermes-Req-Id
X-GeoIP-Country-Code
X-FC-Vary-Parameters
X-Vtex-Remote-Cache
X-Ec-GeoHdr
X-Restarts
X-VG-WebCache
X-Viewer-Country
X-Ec-Fail
X-Ec-Custom-Error
X-Developer
X-Orig-Expires
X-We-Are-Hiring
X-Dispatcher-Number
X-Forwarded-Path
X-Slack-Backend
X-Slack-Shared-Secret-Outcome
X-External-Request-Id
X-Eu-Site
X-Vdms-Path
X-Mvc-Supplant-Cachable
X-Fastly-Backend
X-Var-Ttl
X-SRCache-Key
X-Nyt-Route
X-Origin-Time
X-Vdms-Version
X-Policy
X-Epic-Correlation-Id
Candidate-Md5Url
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-CGP
X-Rojux
X-Conf
X-Cms-Context
X-Cdn-Diag
X-Shop-Environment
X-Tenant
X-GeoIP-Region-Code
X-SD-PageType
X-RateLimit-Remaining-Second
X-RateLimit-Limit-Second
X-Optimistic-Header
X-Is-Gdpr
X-Xfnlog-Site
Xc-Version
X-Worker
X-Destination
X-JWT-State
X-Debug-Cache-Store
X-Gdpr
X-D
X-Csrf-Jwt
X-IPLB-Request-ID
X-Date
X-Debug-Cache-Fetch
X-CacheTTL
X-A-Dam
Cache-Name
ServedBy
BehaviorPad-Version
Canary
X-Presslabs-Stats
Apigw-Requestid
WP-Super-Cache
X-Generated-On
X-Gzip
X-Geo-Header
X-Human
X-Loc
X-Mid
X-Irp-Debug
X-INCAP-ABP
X-Hash
X-Datadome
X-CMSURLCustom
X-ApacheServer
X-App-Name
X-Accel-Buffering
Thinkindot-Control
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-Auto-Login
X-Bip
X-Clientip
X-Core-Mission
X-Cdn-Origin
X-Cache-Id
X-BYPASS-REASON
X-Esi-Check
X-Node-Id
X-Test
X-Thanos
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-Server-IP
X-Sn-Servicetimems
X-Thinkindot-L3
X-Tx-Id
X-Wix-Viewer-Type
Origin-Agent-Cluster
X-VServer
X-Vmg-Version
X-Varnishpool
X-S-Maxage
X-Request-Time
X-PAYTM-SRV-ID
X-PERF
X-Owner
X-Org
X-No-Session
TDXMobile
X-Platform
X-Pool
Cache-Hits
X-Refresh
X-Qloud-Router
X-ProxyCache-Status
X-ProxyCache-Key
X-NGENIX-Cache
X-Level-Front-Cache
Origin
Expect-Staple
Release
Hostname
AKAMAI
Memcached
Machine
Datacenter
Host-ID
User-Cache-Control
X-Hnp-Log
CDCHOST
X-Vcl-Version
X-GeoIP
X-Gen-Mode
X-LJ-Flow-ID
X-PHP-Backend
X-WADP-Cache
X-Mvc-Supplant-OutputCached
Adler-Geo
X-Mly-Id
X-Nginx-Cache-Key
X-Fmm-Version
NM-Fastcgi-Cache
X-Core-Value
X-Cluster
X-Clara-WADP
X-Cdn-Srv
X-DefElseHash
X-DefHash
X-Nitro-Cache
X-DPWN-IS-SECURE
X-Dispatcher-Server
X-Device-Os
X-Forwarded-Site
Is-Eu
X-Sorting-Hat-ShopId
X-VG-TLSProxy
X-Sorting-Hat-PodId
X-Shopify-Stage
X-ShopId
X-Storefront-Renderer-Rendered
Cmsid
X-Varnish-CookieHashed-On
X-Varnish-CookieINHashed-On
X-Variation
X-Up
Cmstype
X-ShardId
DSUID
X-Origin-Response-Time
Cf-Device-Type
X-Origin
X-VWS-Id
X-Old-Content-Length
Apple-News-Services-Host
Apple-News-Services-Parsed-Url
X-Scale
Environment
CloudFront-Viewer-Country
Apple-News-Services-Request-Url
X-Varnish-Remaining-TTL
Apple-News-Services-Handled
Server-Hostname
X-Alternate-Cache-Key
X-Block-Status
Sever-Int
Req-Svc-Chain
Platform
X-AWS-Id
X-Akamai-Device-Characteristics
X-BBC-Edge-Cache-Status
X-Cache-Debug
Server-Ext
Producers
X-From
X-Nananana
X-Cache-Status-Check
Origin-EX
Ssr
Wxu-Next-Hostname
Origin-CC
C-Via
Country-Code
Wxu-Next-Commit
Esi-Enabled
X-WA-Info
X-Section
Server-Info
X-Instance-Name
X-NodeID
X-NCache
X-Op-Id-All
X-Access
Wxu-Next-Region
X-API-Version
X-B3-Spanid
X-Proxy-Cache-Status
X-TIM-N
Time
X-Cache-Enabled
X-Amz-Meta-Cb-Modifiedtime
Memory
Pics-Label
X-LB-NoCache
AMP-Access-Control-Allow-Source-Origin
X-Dc
X-Via-Fastly
Server-ID
X-CACHE-GROUP
X-Correlation-ID
X-Cs
X-Air-Hostname
X-Internal-Host
X-Air-Source
X-HA-Backend
X-Micro-Cache
X-Air-Trace-Id
NGX
X-Tb-Optimization-Total-Bytes-Saved
X-Wp-Cf-Super-Cache-Active
X-FTR-Request-ID
X-Platform-Cluster
X-ZONE
X-Platform-Processor
X-Azure-Ref-OriginShield
X-Vgn-Hpd-Reason
X-Platform-Router
X-Varnish-Beresp-Grace
X-AB
GeoIP-Latitude
X-Webkit-Csp-Report-Only
Location
X-Buckets
X-Geo-Region
X-Varnish-Beresp-Ttl
X-Web-Node
X-Microcachable
Cache-Host
X-Origin-Expires
X-SIPLIST1
IsBot
Cdn-Requestid
X-WP-CF-Super-Cache-Active
X-Zone
X-Backend-Instance
X-B3-Parentspanid
X-Accel-Version
Sid
XM
X-DataCenter
X-TraceId
X-DC
X-Github-Request-Id
X-Fpc
X-VarnishDD-TTL
X-Pod-Name
PFcat
Uri
X-HN
X-Browser-Name
X-Cached-By
X-Tcp-Rtt
User-Agent
X-Is-Tablet
X-Ad-Defer-Variation
X-Is-Supported-Browser
YJS-ID
X-Info
CF-Ctrl
X-Is-Desktop
X-Is-Mobile
Resin-Trace
X-TA-CDN-Provider
X-LiteSpeed-Cache-Control
Edge-Copy-Time
X-FL-QIT-DEBUG
X-Via-CDN
X-Via-SSL
Srvid
X-FL-EDGE
X-Site-Version
X-Via-Edge
Locid
A
X-Locale
XServer
X-Nitro-Cache-From
X-Nitro-Rev
X-NGINX-Cache
True-Client-Ip
GeoIp-Country-Code
X-Cache-ASPX
X-FireWall-Port
X-Hyper-Cache
X-Moov-T
GeoIP-Country-Code
Epwk-X-Cache
X-Moov-Xdn-Version
X-ATG-Version
X-Contensis-Viewer-Groups
X-VCache
X-Frame-Option
X-Varnish-Authentication
Cache-Key
X-CS
Cdn
True-Client-IP
X-NewRelic-App-Data
X-CSRF-TOKEN
SID
X-Service
X-MSEdge-Features
X-Webstats-RespID
X-Cache-Ttl
X-MSEdge-Flight
X-APP-VERSION
X-Geo
Fastly-Drupal-Html
X-Upstream-Ht
X-Upstream-Ct
X-FPC
X-TRACE-ID
NtCoent-Length
X-Datacenter
X-VC
X-HS-Content-Campaign-Id
Path
X-Planisys-CDN-TTL
X-Platform-Server
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
X-Origin-Cache-Key
State
Tcn
Lb
X-HostName
X-Vgn-Hpd-Cached
X-Vercel-Id
X-LiteSpeed-Tag
X-Vercel-Cache
X-Vgn-Hpd-Variations-Key
X-Vgn-Hpd-Ssi
X-Fastly-Cache
X-SRV
X-Release
Cf-Ipcountry
X-FTR-Expires
CountryCode
X-FTR-Cache-Status
X-FTR-Backend-Server
X-Country-Code-Real
X-FTR-Balancer
X-Api-Version
X-FTR-Backend
X-Esi
M-TraceId
X-Rocket-Build-Number
Req-ID
X-Edge-Server
X-Pad
X-Cache-Remote
LB
X-Air-Pt
X-NMSegId
X-AK-Request-ID
Cdn-Request-Time
X-Sigma-Backend
Cdnsip
WZWS-RAY
X-Generated-In
X-Sigma
Cdncip
X-Amz-Meta-Opti
Cdn-Host
X-Cdn-Request-ID
Cluster
X-Branch-Name
X-Traceid
WebServer
X-Wp-Cf-Super-Cache
X-UA
Cache
X-HS-Status
X-WP-CF-Super-Cache-Cookies-Bypass
X-Provided-By
X-Wp-Cf-Super-Cache-Cache-Control
X-Wp-Cf-Super-Cache-Cookies-Bypass
X-Rebelmouse-Surrogate-Control
CDN
X-Rebelmouse-Cache-Control
X-NWS-UUID-VERIFY
Content-Script-Type
X-Proxy-CacheRZ
X-Gamma-Serve
X-M-Reqid
Content-Style-Type
Yak-Timeinfo
X-M-Log
XkeyRZ
X-Scheme
Pramga
X-Request-Start
X-GeoIP-City
X-GoCache-CacheStatus
X-Ad-Load-Variation
Proxy-Connection
X-Scope-Id
X-RN-RSRV
X-CACHE-KEY
X-Qnm-Cache
Server-Id
X-Akamai-Pragma-Client-IP
X-Cdn-Forward
X-Ha-Backend
Geoip-Latitude
X-Shield-Cache-Expires
X-Cdn-Cache-Status
Srv
X-Varnish-Beresp-Status
X-Tim-N
X-Vc
X-Lb-Cache
Ngx
Env
X-Request-URI
CF-Cached-On
Ohc-File-Size
X-Cache-Date
Edge-Cache
Serverid
X-TT-LOGID
X-VCL-Version
X-Acquia-Purge-Tags
X-Via-Ucdn
X-Acquia-Site
Kp-EeAlive
X-CUA
X-Render-Time
X-Dw-Trace-Id
X-Acquia-Application-Trace
X-TH-Server
X-User
X-Edge-POP
PICS-Label
X-Udemy-Cache-App-Namespace
X-EC-Lua
X-Acquia-Application-UUID
X-Lb-Nocache
X-Varnish-Beresp-TTL
Yjs-Id
X-CF-Cache-Header-Cache-Control
X-CF-Cache-Header-Vary
X-Mobile-URL
X-MiniProfiler-Ids
CACHE-MISS-TO-ORIGIN
Inserted-Into-Cache-At
X-Location
X-Iauth-Set-Uid
Cache-Tv-Group
X-Edge-Pop
X-Fastly-Cache-Hits
X-Snapshot-Date
Log-Origin
X-RAMCache
X-Miniprofiler-Ids
X-Litespeed-Cache-Control
X-ElasticPress-Query
Vha6-Origin
X-Cached-Since
Cneonction