Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
X-Powered-By
Pragma
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
Alt-Svc
P3P
X-Cache-Hits
X-Xss-Protection
X-UA-Compatible
X-Served-By
CF-Ray
X-Request-Id
X-Download-Options
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Cache-Status
X-Check
X-Generator
X-Cacheable
X-FRAME-OPTIONS
X-Envoy-Upstream-Service-Time
Timing-Allow-Origin
X-Dns-Prefetch-Control
X-Iinfo
X-DNS-Prefetch-Control
Server-Timing
X-Drupal-Dynamic-Cache
Feature-Policy
X-Content-Security-Policy
Access-Control-Expose-Headers
Content-Encoding
X-XSS-PROTECTION
Status
X-CDN
Upgrade
X-AspNetMvc-Version
Access-Control-Max-Age
X-Via
X-Amz-Request-Id
X-Ua-Compatible
X-Amz-Id-2
Request-Context
X-Backend
X-Cache-Group
X-Turbo-Charged-By
X-Robots-Tag
Cf-Edge-Cache
Keep-Alive
Host-Header
X-AH-Environment
X-Vhost
X-UA-Device
X-Hacker
X-Proxy-Cache
Allow
X-Server
X-Rq
X-Server-Powered-By
X-Ws-Request-Id
EagleId
X-Dispatcher
X-Age
X-Request-ID
X-Varnish-Cache
X-Amz-Version-Id
P3p
Nel
X-LiteSpeed-Cache
Grace
Cf-Apo-Via
Cf-Railgun
X-Page-Speed
EagleEye-TraceId
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Swift-SaveTime
X-Swift-CacheTime
X-Device
X-OneAgent-JS-Injection
X-Aws-Lambda-Call-Status
Ali-Swift-Global-Savetime
X-Pingback
X-Host
X-CST
X-Cache-Lookup
Accept-CH
X-Node
X-WebKit-CSP
X-Backend-Server
Surrogate-Control
Permissions-Policy
X-Server-Id
X-Nginx-Upstream-Cache-Status
X-Readtime
X-Akam-SW-Version
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Nginx-Cache-Status
Accept-CH-Lifetime
Xkey
X-Application-Context
Request-Id
X-Cloud-Trace-Context
X-Response-Time
X-Content-Security-Policy-Report-Only
X-HW
X-Ruxit-JS-Agent
X-Trace
Content-Location
X-Edge
X-Clacks-Overhead
X-Mod-Pagespeed
Rating
X-Url
X-Midtier
X-ESI
X-Amz-Server-Side-Encryption
Cache-Tag
X-ECACHE
X-Powered-By-Plesk
X-Rack-Cache
X-Mcache
X-Country
X-Oneagent-Js-Injection
Service-Worker-Allowed
X-MS-InvokeApp
Accept-Ch
X-D2id
X-Kinja-Server
X-Use-Magma
X-Cdn-Fetch
X-Kinja
X-Kinja-Revision
X-GoogleNews-Bot
X-Exp-Id
X-Exp-Variant
X-Kinja-Build
X-Kinja-CCPA
X-Vcap-Request-Id
Verso
Edge-Control
X-Upstream
X-Element-Page-Cache
X-Country-Code
Accept-Ch-Lifetime
Origin-Trial
X-Ac
RTSS
X-Vname
X-PC
X-TtlSet
X-Goog-Hash
X-Navigation-Version
X-Abt-Application-Version
X-VARITI-CCR
X-Browser-Type
X-NWS-LOG-UUID
X-Cache-TTL
X-Amz-Rid
Fastly-Restarts
X-Ruxit-Js-Agent
X-Aspnetmvc-Version
Cross-Origin-Opener-Policy
X-Varnish-TTL
X-Litespeed-Cache
X-Webkit-CSP
X-GitHub-Request-Id
X-Server-Name
X-Cached
X-Amzn-Trace-Id
X-Times
X-Dw-Request-Base-Id
Pinterest-Generated-By
X-Server-ID
X-Pinterest-Rid
Pinterest-Version
Pagespeed
X-Middleton-Display
Display
X-Sol
SPRequestGuid
X-SharePointHealthScore
X-Ttl
SPIisLatency
SPRequestDuration
X-Erf-Bev-Bev-Is-Generated
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Instrumentation
X-Erf-Bev-Bev
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-Cache-Key
AR-Request-ID
X-Content-Type
AR-ATIME
AR-PoweredBy
AR-SID
X-WebKit-CSP-Report-Only
X-Client-IP
X-Powered-CMS
Arr-Disable-Session-Affinity
X-Cnection
X-Version
X-B3-Traceid
X-Ser
X-FastCGI-Cache
Nginx-Cache
Response
X-Middleton-Response
X-Mg-S
X-HP-Trace-Id
X-HP-Webp
X-Jurisdiction
X-Accel-Expires
Cache-Tags
X-T
X-SRCache-Store-Status
X-SRCache-Fetch-Status
AR-CACHE
X-NF-Request-ID
Cache-Status
X-Fastly-Request-ID
X-B3-TraceId
Edge-Cache-Tag
X-Hits
X-Daa-Tunnel
Public-Key-Pins
X-Px
S
X-MSEdge-Ref
X-Recruiting
X-RateLimit-Remaining
Front-End-Https
X-Shield-Request-Id
Payment
X-Frontend
X-LLID
Server-Node
Content-MD5
X-Ua-Browser
X-Request-Processing-Time
X-Request-Received
X-RateLimit-Limit
X-GUploader-UploadID
X-Goog-Metageneration
Mrf-Cache-Status
X-Content-Digest
MRF-Tech
X-B3-TraceId-Primal
X-Amzn-RequestId
X-Amz-Apigw-Id
MicrosoftSharePointTeamServices
Access-Control-Request-Method
X-DIS-Request-ID
X-Webkit-CSP-Report-Only
X-Forwarded-For
X-Protected-By
X-TTL
Realpath
X-Ratelimit-Remaining
TP-Cache
X-Id
X-Microsite
X-Request-Handler-Origin-Region
X-Distributor
X-FB-Debug
Access-Control-Allow-Method
X-PressLabs-Stats
Fastcgi-Cache
X-Page-Id
X-Cluster-Name
Count-Hit
X-HS-Content-Id
Accept-Charset
X-HS-Combine-CSS
X-HS-Cache-Config
X-HS-Hub-Id
X-Rid
X-LB-Cache
X-Fastcgi-Cache
X-Edge-Location-Klb
X-Kinsta-Cache
X-Xrds-Location
X-Aspnet-Version
X-Ua-Device
Cross-Origin-Resource-Policy
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Storage-Class
X-B3-Sampled
X-Geo-Country
X-Hostname
X-App-Server
X-TEC-API-ORIGIN
TP-L2-Cache
X-Ratelimit-Limit
X-TEC-API-ROOT
X-TEC-API-VERSION
X-Correlation-Id
X-Logged-In
X-Varnish-Backend
X-Seen-By
TCN
X-Git-Hash
X-Hosted-By
Cleartype
Retry-After
X-Ezoic-Cdn
X-Content-Options
X-Mobile
Referer-Policy
DC
X-F-Cache
X-Contextid
X-Fb-Rlafr
X-Newrelic-App-Data
X-Grace
X-Providence-Cookie
X-Flags
X-Aspnet-Duration-Ms
X-App-Environment
X-Request-Guid
X-Is-Crawler
X-Revision
X-Forwarded-Proto
X-Origin-Cache
X-Route-Name
Surrogate-Key
X-Amz-Replication-Status
X-TT
X-Erf-Stays-Pdp-Viaduct-Migration-Web
X-Debug-Info
Frame-Options
X-IPS-LoggedIn
X-Amz-Meta-S3cmd-Attrs
X-Varnish-Grace
MS-Author-Via
X-Azure-Ref
X-Envoy-Decorator-Operation
X-Trace-Id
Section-Io-Cache
X-Magnolia-Registration
X-Www-Served-By
X-Proxy-Cache-Info
X-RateLimit-Reset
Filterid
X-App-Version
X-COUNTRY
X-Activity-Id
X-AppVersion
X-Az
X-Wix-Request-Id
X-Language
X-Webkit-Csp
X-Whom
Healthy
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Akamai-Edgescape
Charset
Server-Name
WPO-Cache-Status
X-Varnish-Server
WPO-Cache-Message
X-Origin-Server
X-Datadog-Parent-Id
Viewport
X-Datadog-Sampling-Priority
X-Datadog-Trace-Id
Amp-Access-Control-Allow-Source-Origin
Alternate-Protocol
X-Backend-Name
X-EdgeConnect-Cache-Status
Paypal-Debug-Id
X-Response-Served-From
X-Http-Reason
X-Original-Request-Id
X-N
X-Akamai-Request-ID2
X-User-Agent
X-Cache-Rule
X-B-Cache
VIX-Pulpo-Node
X-Unique-Id
X-Signature
VIX-Pulpo-Upstream-Status
Host
Content-Disposition
X-Cacheable-TTL
X-Cache-Grace
X-Nf-Request-Id
From-Origin
Front
X-Edge-Location
X-Jobs
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-UUID
X-Region
X-Mg-Request-UUID
X-Instance
Country
X-B
SD-X-WS
SRV
X-Page-View
X-Load-Cache
X-DataDome
X-Framework
X-Datadog-Sampled
X-ARC
Protected
Fastly-SWR
Fastly-SIE
X-Vcache
X-Environment-Context
X-L-Path
X-Rule
X-FW-Hash
X-FW-Dynamic
X-WP-CF-Super-Cache
X-Adobe-Content
X-FW-Serve
X-FW-Version
X-Is-Bot
X-FW-Static
X-FW-Server
X-FW-Type
X-Status
X-RemovedCookies
X-Rendered-As
X-Rocket-Nginx-Serving-Static
X-WP-CF-Super-Cache-Cache-Control
X-Adobe-Loc
X-ProcessESI
Akamai-GRN
X-Cache-Time
X-Amzn-Remapped-Content-Length
X-Type
X-Varnish-Age
X-Tumblr-User
X-Tumblr-Pixel-1
X-Proxy
X-Tumblr-Pixel
X-G
X-Debug-IsConnected
X-Time
X-Debug-IsPreview
X-Tumblr-Pixel-0
X-ECache
Access-Control-Request-Headers
X-CDN-Forward
X-Client-Ip
X-Tec-Api-Root
X-Tec-Api-Version
Backend
X-Tec-Api-Origin
ServerID
X-FTR-Request-ID
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-Nginx-Cache
X-Servername
Url
X-Httpd
Refresh
Xet-Cookie
X-Cache-Age
Countrycode
X-Cache-Control
X-DynaTrace
X-Template
CF-IPCountry
X-Device-Type
Accept-Language
X-Drupal-Cache-Tags
X-NYM-Debug-Backend
X-Content-Powered-By
Webserver
X-DynaTrace-JS-Agent
X-Mode
X-URL
X-Generated-By
X-Cache-Hit
X-Erf-Web-Scheduler
Xserver
X-Hcs-Proxy-Type
X-HTML-Minification-Powered-By
X-NGENIX-Cache
X-CCDN-CacheTTL
X-CCDN-Origin-Time
X-Storage
Version
Cross-Origin-Window-Policy
X-Tt-Logid
GEO-INFO
X-Soup
Filters
X-Rewrite-Enabled
X-Cache-Operation
DB-Nickname
X-ServerID
X-SayCDN-TTL
Load-Balancing
X-Say-Cacheable
X-Urbn-Site-Id
X-Cluster-Node
X-GeoCode
X-GeoCountry
X-Say-TTL
Meta-Geo
X-FB-TRIP-ID
X-Tncms
X-SaId
OT-Force-Account-Verify
X-JoinUs
X-Content-Age
Locale
X-Loop
X-Rn-Rsrv
S-Rt
X-Director
X-Urbn-Context-Path
X-LAGOON
X-XRDS-LOCATION
X-UPSTREAM-Address
Onion-Location
X-Cache-Action
X-Git-Commit
X-Ms-Version
X-RM-Cache-TTL
X-Varnish-Cache-Hits
X-Container-Uri
X-MCACHE
X-Ms-Request-Id
X-Fetched-On
X-Served-From
X-Forwarded-Host
X-RCS-CacheZone
X-Skip-Cache
X-Redis-Cache
X-Tb
X-R9-Blue-Green-Version
Mn-Server-Ip
Azure-SiteName
Azure-SlotName
Azure-RegionName
X-Sql-Count
Azure-Version
Azure-InstanceId
X-Sql-Duration-Ms
X-VC-Cache
X-Lambda-Id
X-PHP-Host
X-Adobe-Source
X-Labrador-Cache-Channel
Web-Mar-Node
X-VCT
X-Detected-As
X-Routing-Service
Webcakes-Region
Node
X-Origin-Hint
X-Logging-Id
X-Extlb
X-Cache-Server
Webcakes-App-Version
Property-Id
X-Proxy-Build
X-Proxied
TWC-Privacy
X-Varnish-Hostname
TWC-Locale-Group
TWC-Device-Class
TWC-Connection-Speed
X-Timing-Wait
TWC-GeoIP-LatLong
Webcakes-App-Name
Selected-Fe
X-Zipkin-Id
TWC-GeoIP-Country
X-Source
X-Uri
X-Tumblr-Pixel-2
X-Tumblr-Pixel-3
X-Generation-Time
X-B3-SpanId
X-Endurance-Cache-Level
Fastcgi-Useragent
X-Debug
X-Format
X-Proto
Source
Uber-Trace-Id
X-LSADC-Cache
CDN-RequestId
X-Zen-Fury
X-Ua
X-S
X-XRDS-Location
NGB
X-Ratelimit-Reset
X-Sucuri-ID
X-Sucuri-Cache
Section-Io-Origin-Status
Section-Origin-Responded
Section-Io-Id
Section-Io-Origin-Time-Seconds
X-TraceId
X-TimeS
X-Newrelic-Synthetics
X-Origin-CC
Upgrade-Insecure-Requests
X-Origin-TTL
X-Real-IP
X-Akamai-Transformed
X-Pass-Why
X-Oracle-Dms-Ecid
X-Oracle-Dms-Rid
X-AB
X-Handled-By
X-Varnish-Hits
X-MP-GENERATED-AT
X-Origin-Date
X-RTag
X-Drupal-Cache-Contexts
Ms-Operation-Id
MS-CV
Fastly-Drupal-HTML
X-Cms-Context
Apigw-Requestid
X-Reqid
X-No-Session
X-Optimistic-Header
X-Xfnlog-Site
X-Cache-Expired-At
X-Restarts
ServedBy
X-Geo-Region
X-ProxyCache-Key
X-ProxyCache-Status
X-LJ-Flow-ID
X-VWS-Id
X-BYPASS-REASON
X-AWS-Id
X-Cache-Host
X-Tx-Id
Liferay-Portal
X-GEO
WP-Super-Cache
X-IPLB-Instance
X-Hl-Ver
X-Srv
X-Varnish-Ttl
X-CACHE-AGE
X-Cluster
X-IPLB-Request-ID
CDN-Uid
X-Fastly-Request-Id
CDN-EdgeStorageId
CDN-CachedAt
CDN-Cache
CDN-RequestPullSuccess
CDN-RequestPullCode
X-Cache-Type
CDN-RequestCountryCode
CDN-PullZone
Cache-Provider
X-Proxy-Cache-Status
X-Cache-TTL-Remaining
X-Cache-Status-Check
X-UA-Device-Type
X-Parent-Response-Time
Canary
Candidate-Md5Url
Datacenter
X-Level-Front-Cache
MD5-Digest
Cache-Name
Xc-Version
X-Worker
X-Debug-Cache-Fetch
DCR-Decision-By
Magicmarker
HA-Ipaddr
Ha-Gx-Prefs
Gannett-Cam-Experience-Id
X-Hash
L
L5d-Success-Class
X-Generated-On
DCR-Processing-Time-Ms
Lang
Fastly-SSL
Odigeo-Trace-Id
X-Dispatcher-Number
X-B-Cookie
X-Bc-Bl
X-BCube-Filmed-By
X-Bip
X-Application
X-App
X-A-Wwc
X-Ec-Fail
X-Aed
X-Ec-Custom-Error
X-Bl-Debug
X-Developer
X-Conf
X-Csrf-Jwt
X-D
X-Debug-Cache-Store
X-CGP
X-CF-Lambda-Version
X-Destination
X-Cache-NE
X-CacheTTL
X-CF-Lambda-Fn
X-A-Dgt
X-A-Dcw
X-FC-Vary-Parameters
Server-Host
X-Fastly-Backend
Sslversion
X-External-Request-Id
Rendered-Blocks
Redirect-Candidate
N-Cache
Ngx.Var.Host
Origin
Origin-Agent-Cluster
Surrogated-Key
T-Server
Web-Mar-Region
X-A
X-A-Ccd
X-A-Dam
W
Vix-Hermes-Req-Id
X-Eu-Site
True-Client-Country-4JS
X-Epic-Correlation-Id
X-Ec-GeoHdr
Meta-Geo-Continent
BehaviorPad-Version
X-Tcp-Rtt
X-SRCache-Key
X-ScT
X-Is-Desktop
X-Browser-Name
X-Micro-Cache
X-Vgn-Hpd-Reason
X-Request-Host
X-Is-Tablet
X-S-Cookie
X-Is-Mobile
X-Is-Supported-Browser
X-Thanos
X-Rojux
X-Slack-Shared-Secret-Outcome
X-Viewer-Country
X-Pool
X-CSRF-Token
X-Slack-Backend
X-Pubstack
X-PAYTM-SRV-ID
X-Vdms-Path
X-Owner
X-Qloud-Router
X-Vdms-Version
X-Vtex-Remote-Cache
X-We-Are-Hiring
X-Via-JSL
X-Accel-Version
X-Node-Name
X-TIME
X-Origin-Cache-Key
NM-Fastcgi-Cache
X-Org
Is-Eu
X-GeoIP
X-Request-Time
X-Gdpr
X-Refresh
Machine
Mail-Subject
X-Vmg-Version
X-From
X-BBC-Edge-Cache-Status
X-Device-Os
X-Geo-Header
X-Shopify-Stage
X-Var-Ttl
Thinkindot-CacheControl-Type
Thinkindot-Control
Thinkindot-CacheControl
TDXMobile
X-Server-IP
X-ShardId
X-VG-WebCache
X-VG-TLSProxy
VNS-Cache
X-Varnishpool
VNS-Age
X-Shop-Environment
X-Varnish-Remaining-TTL
X-Server-W
X-Alternate-Cache-Key
X-Accel-Expires-Debug
Release
Producers
Platform
X-Forwarded-Path
X-Dispatcher-Server
X-GeoIP-Country-Code
Req-Svc-Chain
X-DPWN-IS-SECURE
X-SD-PageType
X-ApacheServer
X-Correlation-ID
X-App-Name
X-Sn-Servicetimems
Fastly-Backend-Name
X-Variation
X-Policy
X-Clientip
X-Nitro-Cache
X-NodeID
X-CMSURLCustom
X-Nananana
X-Mvc-Supplant-Cachable
X-Test
X-Irp-Debug
X-Loc
X-Mid
X-Mly-Id
X-Nyt-Route
X-Old-Content-Length
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
X-Date
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Orig-Expires
X-Core-Value
X-Core-Mission
X-Platform
X-Tenant
X-DefElseHash
X-PERF
X-Origin-Time
Adler-Geo
AKAMAI
Esi-Enabled
Expect-Staple
Environment
X-Varnish-CookieINHashed-On
CPC-Age
CPC-Cache
We-Hiring
Fastly-GeoIP-CountryCode
Gh-Request-Id
X-VServer
X-GeoIP-Region-Code
X-ShopId
X-Up
X-Sorting-Hat-PodId
Cmstype
X-Thinkindot-L3
X-Cache-Info
X-Storefront-Renderer-Rendered
X-DefHash
X-Cdn-Origin
X-Cdn-Diag
X-Varnish-CookieHashed-On
X-Human
CloudFront-Viewer-Country
Cmsid
X-Sorting-Hat-ShopId
X-Cache-Bucket
X-Cache-Debug
Host-ID
X-Upgrade-Enabled
X-Buckets
X-Cache-Id
X-Clara-WADP
X-Block-Status
X-Datadome
X-Accel-Buffering
X-Auto-Login
X-Ah-Environment
CDCHOST
X-INCAP-ABP
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
X-Hnp-Log
Cf-Device-Type
X-Gzip
X-WA-Info
Wxu-Next-Region
Country-Code
Apple-News-Services-Host
Apple-News-Services-Handled
X-Op-Id-All
X-Wix-Viewer-Type
X-Origin-Response-Time
X-Origin
X-WADP-Cache
X-Node-Id
X-Mvc-Supplant-OutputCached
X-NCache
X-Nginx-Cache-Key
X-RateLimit-Limit-Second
DSUID
X-RateLimit-Remaining-Second
Server-Info
Server-Hostname
Ssr
X-Esi-Check
Wxu-Next-Hostname
Wxu-Next-Commit
User-Cache-Control
Server-Ext
Sever-Int
X-Forwarded-Site
X-Fmm-Version
X-Gen-Mode
X-Vcl-Version
X-B3-Spanid
X-AIR-PT
X-Instance-Name
X-Access
NGX
X-Section
Pics-Label
C-Via
X-S-Maxage
X-Via-Fastly
X-LB-NoCache
X-Cdn-Srv
X-Cache-Enabled
X-Varnish-Beresp-Grace
AMP-Access-Control-Allow-Source-Origin
X-Varnish-Beresp-Ttl
X-SIPLIST1
Server-ID
X-Zone
IsBot
X-Dc
X-CACHE-GROUP
X-Presslabs-Stats
X-Amz-Meta-Cb-Modifiedtime
Content-Secure-Policy
X-API-Version
CF-Ctrl
X-HA-Backend
X-WP-CF-Super-Cache-Active
YJS-ID
X-Akamai-Device-Characteristics
X-Frame-Option
X-FTR-Backend
X-Country-Code-Real
X-FTR-Backend-Server
X-FTR-Balancer
X-FTR-Cache-Status
X-FTR-Expires
X-Platform-Cluster
Memcached
X-Platform-Processor
Cache-Hits
X-B3-Parentspanid
X-Platform-Router
X-Cached-By
Cdn-Requestid
Sid
X-Has-Esi
X-JWT-State
X-Is-Gdpr
Location
Memory
Hostname
Time
X-Air-Trace-Id
X-Air-Source
X-Air-Hostname
X-Fpc
X-Internal-Host
X-Webstats-RespID
X-TIM-N
X-Hyper-Cache
X-SRV
X-Tb-Optimization-Total-Bytes-Saved
X-Scale
X-Wp-Cf-Super-Cache-Active
Origin-EX
X-Service
Origin-CC
X-LiteSpeed-Cache-Control
X-Cs
X-VC
X-DC
X-Backend-Instance
X-ZONE
X-TA-CDN-Provider
LB
Epwk-X-Cache
X-NewRelic-App-Data
True-Client-Ip
X-DataCenter
X-PHP-Backend
X-Webkit-Csp-Report-Only
X-Edge-Server
X-Site-Version
Resin-Trace
GeoIP-Country-Code
X-NGINX-Cache
Req-ID
Cdn-Host
WZWS-RAY
X-Esi
X-NMSegId
Cdn-Request-Time
X-Ad-Load-Variation
X-CSRF-TOKEN
X-NODE
X-Locale
X-Request-URI
GeoIp-Country-Code
Uri
X-Azure-Ref-OriginShield
X-ID
X-VCache
X-Cache-Ttl
X-Nitro-Cache-From
X-Scope-Id
HostName
X-Nitro-Rev
X-M-Log
XServer
X-Microcachable
GeoIP-Latitude
Pramga
X-Request-Start
X-M-Reqid
SID
True-Client-IP
Content-Script-Type
X-Shield-Cache-Expires
X-Datacenter
X-Varnish-Beresp-Status
Cache-Host
Cdn
Cluster
X-Origin-Expires
X-Vercel-Cache
X-Vercel-Id
Content-Style-Type
NtCoent-Length
X-Qnm-Cache
M-TraceId
X-Geo
Cache-Tv-Group
X-Github-Request-Id
X-WP-CF-Super-Cache-Cookies-Bypass
XM
X-Cache-Date
X-Pad
X-Info
X-VarnishDD-TTL
X-FPC
Fastly-Drupal-Html
X-HN
X-TH-Server
PFcat
X-Pod-Name
X-HostName
Tcn
Click-Count-Action-Start
X-Servedbyhost
Tube-Return
X-Acquia-Purge-Cdn-Unconfigured
Tube-Get-Contents
X-Nc
X-LB-ID
X-Cache-FS-Status
X-B3-Trace-ID
X-Aicache-OS
X-V-Cache
X-Via-Popv
X-Wa
User-Agent
X-Ad-Defer-Variation
X-Via-Popn
Tube-Got-Results
WebServer
Click-Count-Error
X-Via-Poph
Tube-Got-Eval
Priority
X-Api-Version
X-Web-Node
CountryCode
X-Cdn-Request-ID
Cf-Ipcountry
X-APP-VERSION
Edge-Cache
Locid
X-Via-CDN
Edge-Copy-Time
X-FL-QIT-DEBUG
Srvid
X-Amz-Meta-Opti
On-Server
MIME-Version
X-Via-Edge
X-FL-EDGE
A
X-MSEdge-Flight
Cdncip
X-Men
X-Vary
X-Req
Cdnsip
X-MSEdge-Features
V-Age
X-SB
X-Via-SSL
X-AK-Request-ID
X-NWS-UUID-VERIFY
X-LiteSpeed-Tag
X-CS
X-Branch-Name
Ngx-Var-Key
X-Wp-Cf-Super-Cache-Cookies-Bypass
X-VCL-Version
My-App
XkeyRZ
X-Proxy-CacheRZ
X-ATG-Version
X-Moov-Xdn-Version
X-Varnish-Authentication
Path
X-Moov-T
X-FireWall-Port
Cache-Key
X-Cache-ASPX
Yak-Timeinfo
X-Contensis-Viewer-Groups
X-Akamai-Pragma-Client-IP
X-CACHE-KEY
X-Air-Pt
CDN
X-Provided-By
X-UA
Wpo-Cache-Message
Geoip-Latitude
Proxy-Connection
X-Cdn-Forward
X-Tim-N
Wpo-Cache-Status
X-Render-Time
X-Acquia-Purge-Tags
X-Fastly-Backend-Reqs
Srv
X-Acquia-Application-Trace
X-Acquia-Application-UUID
X-Fastly-Country-Code
X-Varnish-Director
X-Acquia-Site
X-Lb-Cache
Cache
Lb
X-User
X-Generated-In
X-Ha-Backend
Server-Id
X-Cdn-Cache-Status
X-TT-LOGID
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
X-Via-Ucdn
PICS-Label
X-GeoIP-City
X-GoCache-CacheStatus
X-Dw-Trace-Id
CF-Cached-On
Ohc-Cache-HIT
Ohc-File-Size
Type
X-Gamma-Serve
Cross-Origin-Embedder-Policy-Report-Only
X-Lb-Nocache
X-CUA
X-EC-Lua
Yjs-Id
X-Iplb-Instance
X-Upstream-Ht
X-Upstream-Ct
X-Iplb-Request-Id
X-Litespeed-Tag
Fusion-Template-Id
X-Litespeed-Cache-Control
Fusion-Source
Fusion-Content-Source
Fusion-Content-Id
X-Cache-Remote
Fusion-Deployment-Id
X-Check-Cacheable
X-Serial
X-Mg-Cache
X-Scheme
X-Miniprofiler-Ids
Log-Origin
Fusion-Component-Id
Ngx
Cneonction
X-Cached-Since
X-CF-Cache-Header-Vary
X-CF-Cache-Header-Cache-Control
X-Udemy-Cache-App-Namespace
X-HS-Content-Campaign-Id
State
X-HS-Status
X-RAMCache
X-Planisys-CDN-Cache
Vha6-Origin
Warning
X-Release
X-Platform-Server
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
X-ElasticPress-Query