Threat Level: green Handler on Duty: Rob VandenBrink

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
X-Powered-By
Pragma
CF-RAY
X-XSS-Protection
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
Alt-Svc
X-Xss-Protection
P3P
X-Cache-Hits
X-UA-Compatible
X-Served-By
CF-Ray
X-Download-Options
X-Timer
Access-Control-Allow-Headers
X-Request-Id
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Generator
X-Cache-Status
X-Check
X-Cacheable
X-Envoy-Upstream-Service-Time
X-FRAME-OPTIONS
X-DNS-Prefetch-Control
X-Request-ID
Timing-Allow-Origin
X-Iinfo
X-Dns-Prefetch-Control
X-Drupal-Dynamic-Cache
Feature-Policy
X-Content-Security-Policy
Content-Encoding
X-XSS-PROTECTION
Access-Control-Expose-Headers
Upgrade
Status
X-CDN
Server-Timing
X-AspNetMvc-Version
Access-Control-Max-Age
X-Amz-Request-Id
Request-Context
X-Amz-Id-2
X-Turbo-Charged-By
X-Via
X-AH-Environment
X-Backend
X-Cache-Group
X-Robots-Tag
Cf-Edge-Cache
Host-Header
Keep-Alive
X-Hacker
X-Proxy-Cache
X-UA-Device
X-Server
X-Rq
X-Vhost
X-Server-Powered-By
Allow
X-Age
X-Varnish-Cache
X-Ws-Request-Id
X-Dispatcher
X-Amz-Version-Id
EagleId
P3p
Nel
Grace
X-LiteSpeed-Cache
Cf-Apo-Via
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Page-Speed
X-Device
Cf-Railgun
EagleEye-TraceId
X-Aws-Lambda-Call-Status
X-Swift-SaveTime
X-Swift-CacheTime
X-Pingback
Ali-Swift-Global-Savetime
X-Host
X-Node
X-WebKit-CSP
Accept-CH
X-OneAgent-JS-Injection
X-Server-Id
X-CST
X-Backend-Server
Surrogate-Control
X-Cache-Lookup
X-Nginx-Cache-Status
X-Readtime
Permissions-Policy
X-Akam-SW-Version
X-EdgeConnect-Origin-MEX-Latency
Request-Id
X-EdgeConnect-MidMile-RTT
X-Nginx-Upstream-Cache-Status
X-Application-Context
X-Content-Security-Policy-Report-Only
X-Cloud-Trace-Context
Accept-CH-Lifetime
X-Ua-Compatible
X-Trace
X-Response-Time
X-Edge
X-HW
Content-Location
X-Clacks-Overhead
X-Mod-Pagespeed
X-Oneagent-Js-Injection
Accept-Ch-Lifetime
Xkey
X-Midtier
Rating
X-Ruxit-Js-Agent
X-ESI
X-Amz-Server-Side-Encryption
X-Url
X-ECACHE
X-Mcache
X-Upstream
X-Litespeed-Cache
X-Vcap-Request-Id
Accept-Ch
X-Country
X-D2id
Cache-Tag
X-Ruxit-JS-Agent
X-MS-InvokeApp
Verso
X-PC
X-Vname
X-TtlSet
X-Element-Page-Cache
X-Kinja-Build
X-Kinja-Revision
X-Kinja-Server
X-Use-Magma
X-Kinja
X-GoogleNews-Bot
X-Cdn-Fetch
X-Exp-Id
X-Exp-Variant
X-Rack-Cache
Edge-Control
X-Powered-By-Plesk
RTSS
Fastly-Restarts
X-VARITI-CCR
X-Ac
Origin-Trial
X-Cache-TTL
X-WebKit-CSP-Report-Only
X-Navigation-Version
X-Abt-Application-Version
X-Country-Code
X-Ttl
X-Goog-Hash
Service-Worker-Allowed
X-Cached
X-Middleton-Display
Display
Pagespeed
X-Sol
X-GitHub-Request-Id
X-Amz-Rid
X-Browser-Type
X-Content-Type
X-Varnish-TTL
Cross-Origin-Opener-Policy
X-SharePointHealthScore
SPRequestGuid
X-Dw-Request-Base-Id
X-Mg-S
X-Server-Name
X-Amzn-Trace-Id
X-Powered-CMS
Response
X-Middleton-Response
X-Kraken-Loop-Name
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
Arr-Disable-Session-Affinity
X-Server-Lifecycle-Phase
X-Instrumentation
AR-SID
AR-ATIME
AR-PoweredBy
AR-Request-ID
SPIisLatency
SPRequestDuration
X-Cache-Key
X-B3-TraceId
X-Kinja-CCPA
X-NF-Request-ID
AR-CACHE
X-Times
X-Version
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-HP-Trace-Id
X-Jurisdiction
X-HP-Webp
Pinterest-Generated-By
Pinterest-Version
X-Pinterest-Rid
X-B3-Traceid
X-Accel-Expires
Cache-Tags
X-T
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-NWS-LOG-UUID
Front-End-Https
Cache-Status
X-Cnection
X-Fastly-Request-ID
X-Fastcgi-Cache
X-MSEdge-Ref
Edge-Cache-Tag
Nginx-Cache
X-Hits
X-Px
X-Client-IP
X-Webkit-CSP
X-RateLimit-Remaining
X-Ser
MRF-Tech
X-B3-TraceId-Primal
Mrf-Cache-Status
Public-Key-Pins
Payment
X-Recruiting
X-LLID
X-Frontend
X-Request-Received
X-Request-Processing-Time
Server-Node
X-Ua-Browser
X-Erf-Stays-Pdp-Viaduct-Migration-Web
X-Shield-Request-Id
X-DIS-Request-ID
X-RateLimit-Limit
TP-Cache
S
X-FastCGI-Cache
X-Goog-Metageneration
X-GUploader-UploadID
Access-Control-Request-Method
MicrosoftSharePointTeamServices
X-HS-Content-Id
X-HS-Cache-Config
X-HS-Combine-CSS
X-HS-Hub-Id
X-Amzn-RequestId
X-Amz-Apigw-Id
X-LB-Cache
TP-L2-Cache
X-Microsite
X-Protected-By
X-Content-Digest
X-Request-Handler-Origin-Region
Content-MD5
X-Distributor
Access-Control-Allow-Method
X-Page-Id
X-Ezoic-Cdn
X-FB-Debug
Realpath
Accept-Charset
X-Correlation-Id
Fastcgi-Cache
X-Cluster-Name
X-Geo-Country
X-Forwarded-For
X-Rid
X-PressLabs-Stats
X-Hostname
X-Webkit-Csp
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-TEC-API-ROOT
X-B3-Sampled
X-Aspnet-Version
X-Seen-By
X-Ratelimit-Remaining
X-Ua-Device
X-Server-ID
Cleartype
X-Envoy-Decorator-Operation
Referer-Policy
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-Mobile
X-Newrelic-App-Data
X-Goog-Generation
X-Goog-Stored-Content-Encoding
DC
TCN
Cross-Origin-Resource-Policy
X-Ratelimit-Limit
X-Content-Options
X-Debug-Info
X-Origin-Cache
X-Varnish-Backend
X-XRDS-Location
X-Varnish-Grace
X-Daa-Tunnel
X-Contextid
X-Aspnetmvc-Version
Count-Hit
X-Azure-Ref
X-Logged-In
X-Aspnet-Duration-Ms
X-App-Environment
Surrogate-Key
X-Fb-Rlafr
X-Amz-Replication-Status
X-Flags
X-Request-Guid
X-Is-Crawler
X-IPS-LoggedIn
X-Grace
X-Git-Hash
X-Revision
X-Providence-Cookie
X-Route-Name
X-App-Server
X-Origin-Server
X-Webkit-CSP-Report-Only
X-Hosted-By
X-TT
X-Client-Ip
X-Amz-Meta-S3cmd-Attrs
Frame-Options
X-Forwarded-Proto
X-Edge-Location-Klb
X-Wix-Request-Id
Alternate-Protocol
X-Kinsta-Cache
X-Whom
WPO-Cache-Message
Healthy
WPO-Cache-Status
Retry-After
Charset
X-TTL
X-Akamai-Edgescape
X-F-Cache
Viewport
X-Backend-Name
MS-Author-Via
X-Magnolia-Registration
X-RateLimit-Reset
Section-Io-Cache
X-COUNTRY
Paypal-Debug-Id
X-B
SRV
X-Proxy-Cache-Info
X-App-Version
X-Az
X-Activity-Id
X-AppVersion
Amp-Access-Control-Allow-Source-Origin
ServerID
X-EdgeConnect-Cache-Status
X-Oracle-Dms-Ecid
X-Language
X-ARC
X-Rule
Filterid
X-Http-Reason
X-Original-Request-Id
X-Instance
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
Akamai-GRN
X-Cache-Rule
X-Response-Served-From
X-N
SD-X-WS
Host
X-Kong-Upstream-Latency
X-UUID
X-Oracle-Dms-Rid
X-Varnish-Age
X-User-Agent
X-Kong-Proxy-Latency
X-Edge-Location
Front
X-Akamai-Request-ID2
X-Cache-Grace
X-Rocket-Nginx-Serving-Static
X-Status
Protected
X-Id
X-L-Path
X-Jobs
X-Page-View
X-FW-Hash
X-Region
X-Is-Bot
Server-Name
X-FW-Static
X-FW-Version
X-FW-Server
X-FW-Serve
X-FW-Dynamic
X-Rendered-As
Fastly-SWR
X-Cache-Control
From-Origin
X-FW-Type
Fastly-SIE
X-Framework
X-Environment-Context
X-Cacheable-TTL
X-Unique-Id
X-Adobe-Loc
X-Cache-Time
X-Adobe-Content
Access-Control-Request-Headers
Country
X-Type
X-Varnish-Server
X-Www-Served-By
X-Tumblr-Pixel-0
X-Time
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-1
X-Cache-Age
X-G
X-Datadog-Parent-Id
X-Datadog-Sampling-Priority
X-Load-Cache
X-ProcessESI
X-Datadog-Trace-Id
X-RemovedCookies
X-Trace-Id
X-Proxy
X-DataDome
Refresh
X-Yottaa-Metrics
X-Vcache
X-Yottaa-Optimizations
X-ECache
X-Source
X-Datadog-Sampled
X-CDN-Forward
X-Mg-Request-UUID
X-Amzn-Remapped-Content-Length
X-Drupal-Cache-Tags
X-Debug-IsPreview
X-Debug-IsConnected
Version
Accept-Language
X-Erf-Web-Scheduler
X-B-Cache
X-Signature
Content-Disposition
Xet-Cookie
Backend
X-HTML-Minification-Powered-By
X-ID
X-Generated-By
Countrycode
X-Xrds-Location
X-WP-CF-Super-Cache
CF-IPCountry
X-WP-CF-Super-Cache-Cache-Control
X-DynaTrace-JS-Agent
X-DynaTrace
X-Upgrade-Enabled
X-Mode
X-Nginx-Cache
X-Servername
Webserver
X-Httpd
X-Tt-Trace-Tag
Url
X-Varnish-Ttl
X-Tt-Trace-Host
Xserver
X-Content-Age
X-Nf-Request-Id
GEO-INFO
X-GeoCountry
X-Say-Cacheable
X-GeoCode
X-Director
X-Cache-Operation
X-Git-Commit
X-ServerID
X-URL
X-Say-TTL
X-Proto
X-Template
X-JoinUs
X-SayCDN-TTL
X-LAGOON
X-Storage
X-Cache-Action
Azure-Version
Fastcgi-Useragent
Meta-Geo
Load-Balancing
Filters
Azure-SlotName
Azure-SiteName
Locale
S-Rt
Onion-Location
X-Container-Uri
Azure-RegionName
Azure-InstanceId
X-Device-Type
X-Rewrite-Enabled
X-Urbn-Site-Id
X-Tb
X-XRDS-LOCATION
X-SaId
X-Varnish-Cache-Hits
X-NYM-Debug-Backend
X-Urbn-Context-Path
X-UPSTREAM-Address
X-Soup
X-VC-Cache
X-RM-Cache-TTL
Uber-Trace-Id
X-Varnish-Hostname
X-Content-Powered-By
X-Tt-Logid
X-PHP-Host
X-Cluster-Node
X-Forwarded-Host
X-B3-SpanId
X-MCACHE
X-Labrador-Cache-Channel
CDN-RequestId
X-Ms-Version
X-VCT
X-Sucuri-Cache
X-Sql-Duration-Ms
OT-Force-Account-Verify
X-Logging-Id
Web-Mar-Node
X-Ms-Request-Id
X-Adobe-Source
X-Sucuri-ID
X-Detected-As
X-Cache-Server
X-Sql-Count
X-Served-From
X-Generation-Time
Webcakes-App-Version
X-LSADC-Cache
DB-Nickname
TWC-GeoIP-Country
X-Routing-Service
Mn-Server-Ip
Property-Id
TWC-GeoIP-LatLong
X-R9-Blue-Green-Version
Node
Webcakes-App-Name
Webcakes-Region
X-Zipkin-Id
TWC-Locale-Group
X-Extlb
X-Proxied
X-Origin-Hint
X-Debug
X-Zen-Fury
TWC-Device-Class
X-FB-TRIP-ID
X-Lambda-Id
X-Skip-Cache
X-Drupal-Cache-Contexts
TWC-Connection-Speed
X-RCS-CacheZone
TWC-Privacy
X-Tumblr-Pixel-3
X-Tumblr-Pixel-2
X-Uri
X-Timing-Wait
X-Proxy-Build
X-Format
X-Fetched-On
Selected-Fe
Liferay-Portal
X-Loop
X-Tncms
Source
X-Rn-Rsrv
X-Endurance-Cache-Level
X-Fastly-Request-Id
X-Srv
X-MP-GENERATED-AT
X-Cache-Hit
X-CCDN-Origin-Time
X-Origin-Date
X-CCDN-CacheTTL
X-Hcs-Proxy-Type
X-Redis-Cache
X-Tec-Api-Origin
X-Tec-Api-Version
Fastly-Drupal-HTML
Cross-Origin-Window-Policy
X-Tec-Api-Root
X-TimeS
X-Varnish-Hits
X-Ratelimit-Reset
X-Pass-Why
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
Section-Io-Origin-Status
X-Ua
Section-Io-Id
X-Cache-Expired-At
Upgrade-Insecure-Requests
Content-Secure-Policy
X-Real-IP
X-Cache-TTL-Remaining
X-S
X-UA-Device-Type
X-Akamai-Transformed
X-Node-Name
X-Origin-TTL
X-CACHE-AGE
X-Origin-CC
X-Pubstack
X-Newrelic-Synthetics
CDN-PullZone
CDN-RequestPullSuccess
CDN-RequestCountryCode
X-Server-W
X-GEO
CDN-EdgeStorageId
CDN-RequestPullCode
CDN-Uid
CDN-Cache
CDN-CachedAt
X-Hl-Ver
X-Via-JSL
Cache-Provider
X-RTag
X-AIR-PT
X-CSRF-Token
X-Presslabs-Stats
Ms-Operation-Id
MS-CV
X-Cache-Host
X-Parent-Response-Time
X-Handled-By
X-Cache-Info
X-Bc-Bl
X-Cache-NE
X-Cdn-Diag
X-BCube-Filmed-By
X-Bl-Debug
X-App
X-CacheTTL
X-Application
X-B-Cookie
X-Accel-Expires-Debug
X-Cache-Bucket
X-Aed
W
Magicmarker
Lang
L5d-Success-Class
L
Mail-Subject
MD5-Digest
NGB
N-Cache
Meta-Geo-Continent
HA-Ipaddr
Ha-Gx-Prefs
DCR-Processing-Time-Ms
DCR-Decision-By
CPC-Cache
Fastly-Backend-Name
Fastly-GeoIP-CountryCode
Gh-Request-Id
Gannett-Cam-Experience-Id
Fastly-SSL
Ngx.Var.Host
Odigeo-Trace-Id
X-A
Web-Mar-Region
We-Hiring
X-A-Ccd
X-A-Dam
X-A-Wwc
X-A-Dgt
X-A-Dcw
VNS-Cache
VNS-Age
Server-Host
Rendered-Blocks
Redirect-Candidate
Sslversion
Surrogated-Key
Vix-Hermes-Req-Id
True-Client-Country-4JS
T-Server
X-Accel-Buffering
X-Ec-Fail
X-ScT
X-S-Cookie
X-Rojux
X-SD-PageType
X-Shop-Environment
X-Slack-Shared-Secret-Outcome
X-Slack-Backend
X-Restarts
X-Request-Host
X-Origin-Time
X-Orig-Expires
X-Policy
X-RateLimit-Limit-Second
X-Reqid
X-RateLimit-Remaining-Second
X-SRCache-Key
X-Tenant
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Wix-Viewer-Type
X-Worker
Xc-Version
X-Xfnlog-Site
X-We-Are-Hiring
X-Vtex-Remote-Cache
X-Var-Ttl
X-Tx-Id
X-Vdms-Path
X-Vdms-Version
X-Viewer-Country
X-VG-WebCache
X-Optimistic-Header
X-Nyt-Route
X-Destination
X-Debug-Cache-Store
X-Developer
X-Dispatcher-Number
CPC-Age
X-Ec-Custom-Error
X-Debug-Cache-Fetch
X-Date
X-CGP
X-CF-Lambda-Version
X-Cms-Context
X-Conf
X-D
X-Csrf-Jwt
X-Ec-GeoHdr
X-Epic-Correlation-Id
X-IPLB-Instance
X-Has-Esi
X-IPLB-Request-ID
X-Is-Gdpr
X-Mvc-Supplant-Cachable
X-JWT-State
X-GeoIP-Region-Code
X-GeoIP-Country-Code
X-External-Request-Id
X-Eu-Site
X-Fastly-Backend
X-FC-Vary-Parameters
X-Gdpr
X-Forwarded-Path
X-CF-Lambda-Fn
X-Cache-Type
BehaviorPad-Version
Candidate-Md5Url
Cache-Name
Apigw-Requestid
Cache-Hits
X-Datadome
Canary
ServedBy
WP-Super-Cache
X-TIME
X-Node-Id
X-CMSURLCustom
X-Hash
X-Clientip
X-Mvc-Supplant-OutputCached
X-Test
X-Storefront-Renderer-Rendered
X-Varnishpool
X-VG-TLSProxy
X-Clara-WADP
X-Core-Mission
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
TDXMobile
X-Gzip
Thinkindot-Control
X-No-Session
X-NGENIX-Cache
X-Core-Value
X-Nitro-Cache
X-Server-IP
Origin-Agent-Cluster
X-Mly-Id
X-Irp-Debug
X-Sn-Servicetimems
X-BBC-Edge-Cache-Status
X-Human
X-Level-Front-Cache
X-Bip
X-Vmg-Version
X-INCAP-ABP
X-Cache-Debug
X-WADP-Cache
X-BYPASS-REASON
X-VServer
X-Qloud-Router
X-Auto-Login
X-Mid
X-Alternate-Cache-Key
X-ShopId
X-Sorting-Hat-ShopId
X-DefElseHash
X-Cdn-Origin
X-ApacheServer
X-Sorting-Hat-PodId
X-Loc
X-App-Name
X-Shopify-Stage
X-ShardId
X-DefHash
Host-ID
Hostname
X-Generated-On
X-PERF
X-Request-Time
Is-Eu
X-PAYTM-SRV-ID
X-Cache-Id
Machine
X-Up
X-Thinkindot-L3
X-Thanos
X-PHP-Backend
X-Platform
X-ProxyCache-Status
Datacenter
Cf-Device-Type
Cmstype
Cmsid
X-ProxyCache-Key
Environment
X-Refresh
X-Pool
Expect-Staple
X-Fmm-Version
X-Variation
X-Owner
X-SVT-ORM-VERSION
AKAMAI
X-Geo-Header
Origin
X-DPWN-IS-SECURE
Platform
Req-Svc-Chain
Release
X-Old-Content-Length
Producers
X-Varnish-CookieINHashed-On
X-Varnish-Remaining-TTL
X-Varnish-CookieHashed-On
X-Origin-Response-Time
Memcached
Adler-Geo
X-S-Maxage
X-Org
X-SVT-ORM-RULES
X-Esi-Check
User-Cache-Control
X-Device-Os
X-Dispatcher-Server
X-VWS-Id
X-From
X-GeoIP
X-Hnp-Log
X-Cluster
X-Cdn-Srv
X-Gen-Mode
X-Forwarded-Site
CloudFront-Viewer-Country
Apple-News-Services-Handled
Apple-News-Services-Host
X-NodeID
Apple-News-Services-Parsed-Url
X-Origin
X-Nananana
Sever-Int
X-Scale
X-Nginx-Cache-Key
NM-Fastcgi-Cache
Apple-News-Services-Request-Url
Server-Ext
CDCHOST
Country-Code
X-Block-Status
X-WA-Info
DSUID
X-AWS-Id
Server-Hostname
Esi-Enabled
X-LJ-Flow-ID
X-Akamai-Device-Characteristics
Pics-Label
X-Op-Id-All
X-TIM-N
X-Proxy-Cache-Status
C-Via
X-Vcl-Version
Origin-CC
Origin-EX
Server-Info
X-Access
Wxu-Next-Region
X-NCache
Wxu-Next-Hostname
Ssr
X-Section
X-LB-NoCache
Wxu-Next-Commit
X-Cache-Enabled
X-Instance-Name
X-API-Version
AMP-Access-Control-Allow-Source-Origin
X-Cache-Status-Check
Time
X-Amz-Meta-Cb-Modifiedtime
X-Via-Fastly
Server-ID
X-CACHE-GROUP
Memory
X-Tb-Optimization-Total-Bytes-Saved
NGX
X-HA-Backend
X-Micro-Cache
X-Wp-Cf-Super-Cache-Active
X-Cs
X-Azure-Ref-OriginShield
X-Air-Source
X-Air-Hostname
X-Internal-Host
X-Air-Trace-Id
X-Dc
X-AB
X-Platform-Router
X-Platform-Processor
X-B3-Spanid
X-Platform-Cluster
X-Vgn-Hpd-Reason
GeoIP-Latitude
X-ZONE
X-Webkit-Csp-Report-Only
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-DC
X-Web-Node
X-FTR-Request-ID
X-Microcachable
X-Origin-Expires
Cache-Host
Location
X-Correlation-ID
X-Buckets
X-Geo-Region
X-Zone
X-Github-Request-Id
IsBot
XM
X-B3-Parentspanid
X-Fpc
X-SIPLIST1
X-DataCenter
X-Accel-Version
PFcat
X-VarnishDD-TTL
X-Pod-Name
X-HN
X-Backend-Instance
Sid
Cdn-Requestid
X-TraceId
X-WP-CF-Super-Cache-Active
X-Info
X-Ad-Defer-Variation
User-Agent
Uri
Resin-Trace
X-TA-CDN-Provider
X-LiteSpeed-Cache-Control
X-Cached-By
X-Browser-Name
X-Is-Desktop
X-Via-SSL
X-Site-Version
X-Via-Edge
CF-Ctrl
Edge-Copy-Time
YJS-ID
X-Via-CDN
Srvid
X-Is-Mobile
X-FL-EDGE
X-Is-Tablet
X-Tcp-Rtt
X-FL-QIT-DEBUG
A
X-Locale
X-Is-Supported-Browser
Locid
X-Nitro-Rev
X-Nitro-Cache-From
X-NGINX-Cache
True-Client-Ip
GeoIp-Country-Code
X-Moov-Xdn-Version
X-Contensis-Viewer-Groups
X-Cache-ASPX
X-ATG-Version
X-FireWall-Port
X-Moov-T
GeoIP-Country-Code
X-VCache
XServer
Cdn
Cache-Key
X-CS
X-Varnish-Authentication
X-Hyper-Cache
Epwk-X-Cache
X-CSRF-TOKEN
X-Cache-Ttl
X-NewRelic-App-Data
X-MSEdge-Flight
SID
X-MSEdge-Features
True-Client-IP
X-Upstream-Ht
X-Upstream-Ct
X-Geo
X-Frame-Option
X-Datacenter
X-TRACE-ID
X-Webstats-RespID
X-Service
X-Planisys-CDN-TTL
NtCoent-Length
Path
X-Planisys-CDN-Rules
X-Platform-Server
X-FPC
X-HS-Content-Campaign-Id
Fastly-Drupal-Html
State
X-Planisys-CDN-Cache
X-HostName
Tcn
WebServer
X-Vgn-Hpd-Cached
X-Release
X-Vgn-Hpd-Ssi
X-Vgn-Hpd-Variations-Key
X-Fastly-Cache
X-LiteSpeed-Tag
X-VC
X-SRV
X-Origin-Cache-Key
X-Api-Version
CountryCode
X-UA
Cf-Ipcountry
X-APP-VERSION
Lb
LB
X-Vercel-Id
Cdncip
Cdnsip
X-AK-Request-ID
X-Amz-Meta-Opti
X-Pad
X-Edge-Server
Cdn-Request-Time
Cdn-Host
X-Vercel-Cache
X-Cache-Remote
X-Sigma
X-Air-Pt
X-Sigma-Backend
X-Rocket-Build-Number
X-Esi
X-Generated-In
X-FTR-Backend
X-FTR-Backend-Server
X-FTR-Cache-Status
X-FTR-Expires
X-Country-Code-Real
X-FTR-Balancer
X-Wp-Cf-Super-Cache
X-Provided-By
X-Wp-Cf-Super-Cache-Cache-Control
X-Branch-Name
Cache
X-HS-Status
Req-ID
M-TraceId
X-NMSegId
X-Traceid
WZWS-RAY
X-Rebelmouse-Cache-Control
X-Cdn-Request-ID
X-Wp-Cf-Super-Cache-Cookies-Bypass
X-Rebelmouse-Surrogate-Control
XkeyRZ
X-Ad-Load-Variation
Yak-Timeinfo
Cluster
X-Scheme
X-Proxy-CacheRZ
X-GeoIP-City
X-GoCache-CacheStatus
X-Gamma-Serve
Proxy-Connection
X-RN-RSRV
X-WP-CF-Super-Cache-Cookies-Bypass
CDN
X-CACHE-KEY
X-M-Reqid
X-NWS-UUID-VERIFY
X-M-Log
Content-Style-Type
Content-Script-Type
X-Akamai-Pragma-Client-IP
X-Request-Start
X-Cdn-Cache-Status
Geoip-Latitude
Srv
X-Scope-Id
X-Cdn-Forward
Pramga
X-Vc
X-Lb-Cache
Server-Id
X-Shield-Cache-Expires
X-Varnish-Beresp-Status
X-Tim-N
X-Qnm-Cache
Ohc-File-Size
Ngx
Env
X-VCL-Version
X-Ha-Backend
CF-Cached-On
Serverid
X-TT-LOGID
Kp-EeAlive
X-Dw-Trace-Id
X-Edge-POP
Edge-Cache
X-EC-Lua
X-Cache-Date
PICS-Label
X-Acquia-Purge-Tags
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-Acquia-Site
X-Via-Ucdn
X-Lb-Nocache
X-Request-URI
Yjs-Id
X-Location
X-CF-Cache-Header-Vary
X-TH-Server
X-Udemy-Cache-App-Namespace
X-User
X-Render-Time
X-CUA
X-Mobile-URL
X-CF-Cache-Header-Cache-Control
X-MiniProfiler-Ids
Cneonction
X-RAMCache
Cache-Tv-Group
Vha6-Origin
X-Cached-Since
X-Litespeed-Cache-Control
X-ElasticPress-Query
X-Snapshot-Date
X-Fastly-Cache-Hits
Log-Origin
X-Edge-Pop
CACHE-MISS-TO-ORIGIN
X-Miniprofiler-Ids
Inserted-Into-Cache-At
X-Iauth-Set-Uid