Threat Level: green Handler on Duty: Russ McRee

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
X-Powered-By
Pragma
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
Alt-Svc
P3P
X-Cache-Hits
X-UA-Compatible
X-Xss-Protection
CF-Ray
X-Served-By
X-Download-Options
X-Request-Id
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Generator
X-Cache-Status
X-Check
X-DNS-Prefetch-Control
X-Cacheable
X-Envoy-Upstream-Service-Time
X-FRAME-OPTIONS
Timing-Allow-Origin
X-Iinfo
X-Drupal-Dynamic-Cache
Feature-Policy
X-Content-Security-Policy
Content-Encoding
Access-Control-Expose-Headers
X-Dns-Prefetch-Control
Server-Timing
Upgrade
X-XSS-PROTECTION
X-CDN
Status
X-Request-ID
X-AspNetMvc-Version
Access-Control-Max-Age
X-Amz-Request-Id
X-Amz-Id-2
Request-Context
X-Via
X-Turbo-Charged-By
X-AH-Environment
X-Backend
X-Cache-Group
X-Robots-Tag
Cf-Edge-Cache
Keep-Alive
Host-Header
X-Hacker
X-Proxy-Cache
X-UA-Device
X-Server
X-Vhost
X-Rq
X-Server-Powered-By
Allow
X-Age
X-Ws-Request-Id
X-Varnish-Cache
X-Dispatcher
X-Amz-Version-Id
EagleId
P3p
Nel
Grace
X-LiteSpeed-Cache
Cf-Apo-Via
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Page-Speed
Cf-Railgun
X-Device
EagleEye-TraceId
X-Aws-Lambda-Call-Status
X-OneAgent-JS-Injection
X-Swift-SaveTime
X-Swift-CacheTime
X-Pingback
Ali-Swift-Global-Savetime
X-Host
X-Node
Accept-CH
X-Backend-Server
X-CST
Surrogate-Control
X-Cache-Lookup
X-WebKit-CSP
X-Server-Id
X-Nginx-Cache-Status
Accept-CH-Lifetime
X-Readtime
Permissions-Policy
X-Akam-SW-Version
X-Nginx-Upstream-Cache-Status
Request-Id
X-Application-Context
X-Content-Security-Policy-Report-Only
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Cloud-Trace-Context
X-Ua-Compatible
X-Trace
X-Response-Time
X-HW
X-Edge
Content-Location
X-Clacks-Overhead
Xkey
X-Mod-Pagespeed
Rating
X-Midtier
X-ESI
X-Amz-Server-Side-Encryption
X-ECACHE
X-Ruxit-Js-Agent
X-Ruxit-JS-Agent
X-Url
X-Mcache
X-Country
X-Upstream
X-Vcap-Request-Id
Cache-Tag
X-MS-InvokeApp
X-D2id
X-Rack-Cache
X-Kinja-Build
X-Kinja-Revision
X-Kinja-Server
X-Use-Magma
X-Kinja
X-GoogleNews-Bot
X-Element-Page-Cache
X-Exp-Id
X-Exp-Variant
X-Cdn-Fetch
Verso
X-Powered-By-Plesk
X-Litespeed-Cache
Accept-Ch
Edge-Control
X-PC
X-TtlSet
X-Vname
RTSS
X-Cache-TTL
Fastly-Restarts
Accept-Ch-Lifetime
X-Ac
Origin-Trial
X-Webkit-CSP
X-VARITI-CCR
X-Navigation-Version
Service-Worker-Allowed
X-Oneagent-Js-Injection
X-Country-Code
X-Abt-Application-Version
X-Goog-Hash
X-WebKit-CSP-Report-Only
X-Cached
X-Varnish-TTL
X-Browser-Type
X-Amz-Rid
X-Sol
X-GitHub-Request-Id
Pagespeed
X-Middleton-Display
Display
X-Aspnetmvc-Version
Cross-Origin-Opener-Policy
X-Dw-Request-Base-Id
SPRequestGuid
X-SharePointHealthScore
X-Server-Name
X-B3-TraceId
X-Ttl
X-Mg-S
X-Amzn-Trace-Id
X-Content-Type
X-Powered-CMS
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-Kinja-CCPA
X-Instrumentation
Arr-Disable-Session-Affinity
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
AR-ATIME
AR-PoweredBy
AR-SID
AR-Request-ID
Response
X-Middleton-Response
SPIisLatency
SPRequestDuration
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-Cache-Key
X-NWS-LOG-UUID
Pinterest-Version
X-Version
X-Pinterest-Rid
Pinterest-Generated-By
X-HP-Webp
X-Jurisdiction
AR-CACHE
X-HP-Trace-Id
X-NF-Request-ID
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Times
X-Accel-Expires
X-T
X-Cnection
Cache-Tags
X-Fastly-Request-ID
Cache-Status
Nginx-Cache
Front-End-Https
X-Server-ID
Edge-Cache-Tag
X-MSEdge-Ref
X-Ser
X-Client-IP
X-Hits
X-RateLimit-Remaining
X-FastCGI-Cache
X-Px
Public-Key-Pins
X-B3-TraceId-Primal
Mrf-Cache-Status
MRF-Tech
X-B3-Traceid
X-Recruiting
Payment
X-LLID
X-Request-Received
X-Request-Processing-Time
X-Frontend
Server-Node
X-RateLimit-Limit
X-Ua-Browser
X-Fastcgi-Cache
X-Shield-Request-Id
S
X-DIS-Request-ID
X-Erf-Stays-Pdp-Viaduct-Migration-Web
X-GUploader-UploadID
X-Goog-Metageneration
TP-Cache
MicrosoftSharePointTeamServices
Access-Control-Request-Method
Content-MD5
X-Amz-Apigw-Id
X-Amzn-RequestId
X-HS-Hub-Id
X-Content-Digest
X-HS-Combine-CSS
X-HS-Cache-Config
X-HS-Content-Id
X-Request-Handler-Origin-Region
X-LB-Cache
X-Distributor
X-Protected-By
X-Microsite
Realpath
Access-Control-Allow-Method
X-TTL
X-Page-Id
X-FB-Debug
Fastcgi-Cache
Accept-Charset
TP-L2-Cache
X-Forwarded-For
X-Cluster-Name
X-Geo-Country
X-Rid
X-PressLabs-Stats
X-Ezoic-Cdn
X-Hostname
X-B3-Sampled
X-Seen-By
X-Webkit-Csp
X-Ratelimit-Remaining
X-Daa-Tunnel
X-Aspnet-Version
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-Goog-Generation
X-Ua-Device
Cleartype
Referer-Policy
Cross-Origin-Resource-Policy
X-Newrelic-App-Data
X-Mobile
TCN
X-Envoy-Decorator-Operation
DC
X-Webkit-CSP-Report-Only
Count-Hit
X-Content-Options
X-Correlation-Id
X-Varnish-Backend
X-Logged-In
X-Debug-Info
X-Ratelimit-Limit
X-Origin-Cache
X-App-Server
X-Contextid
X-Varnish-Grace
X-Hosted-By
X-App-Environment
X-Aspnet-Duration-Ms
X-Fb-Rlafr
X-Git-Hash
X-Amz-Replication-Status
X-Grace
X-IPS-LoggedIn
X-Is-Crawler
X-Request-Guid
X-Route-Name
Surrogate-Key
X-Providence-Cookie
X-Flags
X-Revision
Frame-Options
X-TT
X-Azure-Ref
X-Amz-Meta-S3cmd-Attrs
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-Edge-Location-Klb
X-Kinsta-Cache
X-TEC-API-ROOT
X-Origin-Server
X-Forwarded-Proto
X-Client-Ip
Retry-After
X-Wix-Request-Id
WPO-Cache-Status
Alternate-Protocol
X-F-Cache
WPO-Cache-Message
X-Whom
Healthy
X-RateLimit-Reset
Charset
X-Magnolia-Registration
X-Akamai-Edgescape
Section-Io-Cache
MS-Author-Via
Viewport
X-Backend-Name
X-XRDS-Location
X-Id
X-Proxy-Cache-Info
X-App-Version
Paypal-Debug-Id
X-B
X-COUNTRY
SRV
X-AppVersion
X-Activity-Id
X-Az
ServerID
X-N
X-Language
X-Www-Served-By
X-Xrds-Location
X-Instance
Host
X-Response-Served-From
X-Original-Request-Id
X-Http-Reason
X-Cache-Rule
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
SD-X-WS
X-ARC
Akamai-GRN
Filterid
Front
X-Status
X-Rule
X-Rocket-Nginx-Serving-Static
X-Varnish-Server
X-User-Agent
X-Cache-Grace
X-Varnish-Age
X-UUID
Protected
X-Akamai-Request-ID2
X-Jobs
X-L-Path
X-Page-View
X-Unique-Id
Country
X-Is-Bot
X-Rendered-As
X-Region
X-FW-Static
X-Cacheable-TTL
X-Edge-Location
From-Origin
Fastly-SWR
Fastly-SIE
X-Environment-Context
X-Framework
X-FW-Server
X-FW-Type
X-FW-Serve
X-FW-Hash
X-FW-Dynamic
X-FW-Version
X-Kong-Proxy-Latency
Amp-Access-Control-Allow-Source-Origin
X-Kong-Upstream-Latency
X-Load-Cache
Access-Control-Request-Headers
X-Cache-Time
X-Adobe-Content
X-Datadog-Trace-Id
X-Time
X-Datadog-Parent-Id
X-Type
X-Datadog-Sampling-Priority
Server-Name
X-Adobe-Loc
X-Trace-Id
X-EdgeConnect-Cache-Status
X-Tumblr-User
X-G
X-Tumblr-Pixel
X-RemovedCookies
X-ProcessESI
X-Tumblr-Pixel-0
X-Tumblr-Pixel-1
X-Proxy
X-Cache-Control
X-Cache-Age
X-DataDome
X-Vcache
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Datadog-Sampled
Refresh
X-Mg-Request-UUID
X-CDN-Forward
X-Amzn-Remapped-Content-Length
X-Debug-IsPreview
X-Debug-IsConnected
Content-Disposition
X-Signature
X-B-Cache
X-ECache
X-URL
X-WP-CF-Super-Cache
X-Source
X-WP-CF-Super-Cache-Cache-Control
X-Drupal-Cache-Tags
Backend
X-Nf-Request-Id
X-Tec-Api-Origin
Accept-Language
Countrycode
X-Tec-Api-Version
X-Tec-Api-Root
X-Generated-By
Webserver
Xet-Cookie
X-DynaTrace
Version
X-HTML-Minification-Powered-By
CF-IPCountry
X-Erf-Web-Scheduler
X-Nginx-Cache
X-Httpd
X-DynaTrace-JS-Agent
X-Servername
X-Tt-Trace-Host
X-Tt-Trace-Tag
Url
X-Mode
Xserver
X-Upgrade-Enabled
X-Storage
GEO-INFO
X-NYM-Debug-Backend
X-Device-Type
X-Content-Powered-By
X-Content-Age
X-Oracle-Dms-Ecid
X-Template
Azure-Version
Filters
Meta-Geo
Locale
X-Tb
Load-Balancing
X-Cache-Operation
Azure-InstanceId
S-Rt
Onion-Location
X-Director
Azure-RegionName
Azure-SiteName
X-GeoCode
Azure-SlotName
X-LAGOON
X-GeoCountry
X-SaId
X-Say-TTL
X-SayCDN-TTL
X-UPSTREAM-Address
X-Urbn-Context-Path
X-Varnish-Cache-Hits
X-Oracle-Dms-Rid
X-Urbn-Site-Id
X-Say-Cacheable
X-Proto
X-Rewrite-Enabled
X-ServerID
X-JoinUs
X-ID
X-RM-Cache-TTL
X-Container-Uri
X-Soup
X-Cluster-Node
X-Varnish-Hostname
X-Cache-Action
Uber-Trace-Id
X-PHP-Host
X-Labrador-Cache-Channel
Fastcgi-Useragent
X-Tt-Logid
OT-Force-Account-Verify
X-Forwarded-Host
X-Git-Commit
X-VC-Cache
X-Generation-Time
X-VCT
Web-Mar-Node
X-Cache-Server
X-LSADC-Cache
X-Detected-As
X-Served-From
X-Ms-Request-Id
X-Sql-Duration-Ms
X-Sql-Count
X-Ms-Version
X-Adobe-Source
Mn-Server-Ip
TWC-Connection-Speed
Node
Property-Id
X-Skip-Cache
Webcakes-Region
X-Proxied
X-R9-Blue-Green-Version
X-RCS-CacheZone
X-Origin-Hint
X-Extlb
X-Lambda-Id
X-FB-TRIP-ID
X-Logging-Id
X-Zipkin-Id
X-Debug
X-Zen-Fury
TWC-GeoIP-LatLong
TWC-GeoIP-Country
TWC-Privacy
Webcakes-App-Name
X-Routing-Service
Webcakes-App-Version
TWC-Device-Class
TWC-Locale-Group
X-XRDS-LOCATION
DB-Nickname
X-Uri
Selected-Fe
X-Tumblr-Pixel-2
X-Tumblr-Pixel-3
X-Fetched-On
X-Sucuri-Cache
X-Format
X-Timing-Wait
X-B3-SpanId
X-MCACHE
X-Proxy-Build
X-Loop
X-Tncms
X-TimeS
X-Sucuri-ID
X-Drupal-Cache-Contexts
X-Rn-Rsrv
X-CCDN-Origin-Time
X-Hcs-Proxy-Type
X-Cache-Hit
X-CCDN-CacheTTL
Liferay-Portal
Source
X-Endurance-Cache-Level
X-Srv
Cross-Origin-Window-Policy
X-Ua
X-Redis-Cache
X-MP-GENERATED-AT
X-Origin-Date
CDN-RequestId
X-Fastly-Request-Id
Fastly-Drupal-HTML
X-Varnish-Ttl
Section-Io-Origin-Status
Section-Io-Id
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
X-Varnish-Hits
X-Cache-Expired-At
X-S
X-Ratelimit-Reset
Upgrade-Insecure-Requests
X-Pass-Why
X-Real-IP
X-Origin-TTL
X-Origin-CC
X-Akamai-Transformed
X-UA-Device-Type
X-Cache-TTL-Remaining
Content-Secure-Policy
X-Newrelic-Synthetics
X-Node-Name
X-CACHE-AGE
X-NGENIX-Cache
X-Pubstack
X-Via-JSL
X-Server-W
X-Hl-Ver
X-Correlation-ID
NGB
CDN-RequestPullSuccess
X-RTag
CDN-Uid
CDN-CachedAt
X-CSRF-Token
Ms-Operation-Id
MS-CV
CDN-RequestPullCode
X-Handled-By
CDN-Cache
CDN-RequestCountryCode
CDN-PullZone
CDN-EdgeStorageId
X-GEO
X-Reqid
X-IPLB-Request-ID
X-Optimistic-Header
X-Restarts
X-Cms-Context
X-Cache-Type
X-IPLB-Instance
Apigw-Requestid
X-Xfnlog-Site
WP-Super-Cache
ServedBy
Redirect-Candidate
Rendered-Blocks
Server-Host
Sslversion
Surrogated-Key
Lang
CPC-Cache
CPC-Age
DCR-Decision-By
Fastly-Backend-Name
Fastly-SSL
Fastly-GeoIP-CountryCode
Candidate-Md5Url
Canary
X-ProxyCache-Key
X-No-Session
X-ProxyCache-Status
BehaviorPad-Version
X-Tenant
Gannett-Cam-Experience-Id
Gh-Request-Id
N-Cache
Meta-Geo-Continent
X-SRCache-Key
Ngx.Var.Host
Odigeo-Trace-Id
MD5-Digest
Mail-Subject
HA-Ipaddr
Ha-Gx-Prefs
L
L5d-Success-Class
Magicmarker
Origin-Agent-Cluster
X-Aed
X-Ec-Fail
X-Ec-Custom-Error
X-Ec-GeoHdr
X-Epic-Correlation-Id
X-External-Request-Id
X-Eu-Site
X-Dispatcher-Number
X-Developer
X-D
X-Csrf-Jwt
X-Date
X-Debug-Cache-Fetch
X-Destination
X-Debug-Cache-Store
X-Fastly-Backend
X-Shop-Environment
X-Nyt-Route
X-Request-Host
X-Orig-Expires
X-Origin-Time
X-RateLimit-Limit-Second
X-RateLimit-Remaining-Second
X-Rojux
X-S-Cookie
X-Forwarded-Path
X-FC-Vary-Parameters
X-Gdpr
X-SD-PageType
X-ScT
X-Conf
X-CGP
X-A-Ccd
X-A
X-A-Dam
X-A-Dcw
X-A-Wwc
X-A-Dgt
Web-Mar-Region
We-Hiring
Vix-Hermes-Req-Id
True-Client-Country-4JS
VNS-Age
VNS-Cache
W
X-Accel-Expires-Debug
X-App
X-Slack-Backend
X-Cache-NE
X-CacheTTL
X-Cdn-Diag
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-Cache-Host
X-Slack-Shared-Secret-Outcome
X-B-Cookie
X-Application
X-Bc-Bl
X-BCube-Filmed-By
X-Bl-Debug
T-Server
DCR-Processing-Time-Ms
Xc-Version
X-BYPASS-REASON
X-Presslabs-Stats
X-Datadome
X-Vdms-Version
X-Worker
X-Wikidot-Static-Cache
X-Vtex-Remote-Cache
X-Viewer-Country
X-We-Are-Hiring
X-Parent-Response-Time
X-Wikidot-Backend
X-Vdms-Path
X-AIR-PT
Cache-Provider
X-Var-Ttl
X-Vcl-Version
Cache-Name
X-App-Name
X-Owner
X-PAYTM-SRV-ID
X-PERF
Producers
X-Alternate-Cache-Key
X-Auto-Login
X-BBC-Edge-Cache-Status
X-Cache-Bucket
X-Cache-Debug
X-NodeID
X-Old-Content-Length
X-Org
X-Bip
X-Wix-Viewer-Type
X-Accel-Buffering
X-Qloud-Router
TDXMobile
X-Sn-Servicetimems
X-VServer
X-Policy
X-Sorting-Hat-PodId
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-Cache-Id
X-Refresh
Release
X-Platform
Thinkindot-Control
Req-Svc-Chain
X-Cache-Info
X-S-Maxage
X-Human
X-INCAP-ABP
X-Hash
X-Gzip
X-GeoIP-Country-Code
X-GeoIP-Region-Code
X-Irp-Debug
X-Level-Front-Cache
X-Mvc-Supplant-Cachable
X-Nitro-Cache
X-Request-Time
X-Mly-Id
X-Loc
X-Mid
X-Geo-Header
X-Generated-On
X-Core-Mission
X-Core-Value
X-Shopify-Stage
X-CMSURLCustom
X-Cdn-Origin
X-Clientip
Platform
X-DefElseHash
X-ShardId
X-Server-IP
X-Esi-Check
X-ShopId
X-DefHash
X-DPWN-IS-SECURE
X-Node-Id
X-ApacheServer
Expect-Staple
Memcached
X-VG-TLSProxy
Environment
X-SVT-ORM-RULES
X-Pool
X-Varnish-CookieINHashed-On
X-VG-WebCache
X-Varnish-CookieHashed-On
Is-Eu
Machine
X-LJ-Flow-ID
Host-ID
X-Thinkindot-L3
X-Variation
X-Up
X-Varnishpool
Datacenter
X-Vmg-Version
X-Cluster
X-Sorting-Hat-ShopId
Origin
Adler-Geo
AKAMAI
X-SVT-ORM-VERSION
X-AWS-Id
X-Test
X-Varnish-Remaining-TTL
Cmsid
Cmstype
X-Thanos
X-VWS-Id
X-Storefront-Renderer-Rendered
Cf-Device-Type
X-Tx-Id
X-TIME
AMP-Access-Control-Allow-Source-Origin
User-Cache-Control
Server-Hostname
X-Dispatcher-Server
X-Nginx-Cache-Key
CloudFront-Viewer-Country
Server-Ext
X-Device-Os
Country-Code
Apple-News-Services-Handled
Esi-Enabled
X-Origin
X-Cdn-Srv
DSUID
X-Clara-WADP
X-Nananana
X-Mvc-Supplant-OutputCached
Apple-News-Services-Request-Url
X-Hnp-Log
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
X-JWT-State
X-Is-Gdpr
X-Has-Esi
X-GeoIP
X-Fmm-Version
NM-Fastcgi-Cache
X-Forwarded-Site
X-From
X-Gen-Mode
CDCHOST
X-Origin-Response-Time
Sever-Int
X-WA-Info
X-WADP-Cache
X-Proxy-Cache-Status
X-Block-Status
X-Akamai-Device-Characteristics
X-Cache-Status-Check
Cache-Hits
Time
Server-Info
X-Access
Hostname
Pics-Label
Wxu-Next-Hostname
Wxu-Next-Commit
X-LB-NoCache
Wxu-Next-Region
X-Instance-Name
Origin-EX
C-Via
Origin-CC
X-Section
X-NCache
Ssr
X-Op-Id-All
Memory
X-FTR-Request-ID
X-Cache-Enabled
X-API-Version
X-Dc
X-PHP-Backend
Server-ID
NGX
X-Micro-Cache
X-Via-Fastly
X-Scale
X-Amz-Meta-Cb-Modifiedtime
X-CACHE-GROUP
X-TIM-N
X-AB
X-HA-Backend
X-Tb-Optimization-Total-Bytes-Saved
X-B3-Spanid
X-Cs
X-Vgn-Hpd-Reason
X-Internal-Host
Cdn-Requestid
X-Varnish-Beresp-Ttl
X-Wp-Cf-Super-Cache-Active
X-Geo-Region
X-Air-Hostname
X-Air-Trace-Id
X-Varnish-Beresp-Grace
X-Air-Source
X-Platform-Cluster
X-Platform-Router
X-Platform-Processor
Location
X-Buckets
X-ZONE
X-Accel-Version
X-Zone
X-Azure-Ref-OriginShield
X-Webkit-Csp-Report-Only
X-TraceId
X-WP-CF-Super-Cache-Active
X-Backend-Instance
X-SIPLIST1
GeoIP-Latitude
IsBot
X-Fpc
Sid
X-Browser-Name
X-B3-Parentspanid
X-Microcachable
X-Is-Mobile
X-Is-Tablet
X-Tcp-Rtt
X-Github-Request-Id
Cache-Host
X-Origin-Expires
X-Is-Desktop
X-Is-Supported-Browser
X-Web-Node
X-DataCenter
CF-Ctrl
YJS-ID
XM
X-DC
X-Cached-By
X-HN
X-Info
Uri
Resin-Trace
X-Pod-Name
PFcat
X-VarnishDD-TTL
X-LiteSpeed-Cache-Control
X-TA-CDN-Provider
X-Ad-Defer-Variation
True-Client-Ip
User-Agent
Epwk-X-Cache
GeoIP-Country-Code
X-Via-CDN
X-Locale
Locid
X-Via-Edge
X-Site-Version
Srvid
X-FL-QIT-DEBUG
X-FL-EDGE
X-NGINX-Cache
X-Nitro-Rev
X-Nitro-Cache-From
X-Hyper-Cache
X-Via-SSL
Edge-Copy-Time
A
X-Frame-Option
Cdn
GeoIp-Country-Code
X-VCache
X-Webstats-RespID
X-ATG-Version
X-Moov-T
X-Moov-Xdn-Version
X-Service
X-Cache-ASPX
X-Contensis-Viewer-Groups
X-FireWall-Port
X-Geo
XServer
X-CS
X-CSRF-TOKEN
X-NewRelic-App-Data
SID
True-Client-IP
X-VC
X-Varnish-Authentication
Cache-Key
X-Datacenter
X-MSEdge-Features
X-MSEdge-Flight
X-Origin-Cache-Key
X-TRACE-ID
NtCoent-Length
X-FTR-Cache-Status
X-FTR-Expires
X-FTR-Backend
X-Country-Code-Real
X-FTR-Backend-Server
X-FTR-Balancer
X-Upstream-Ht
X-FPC
X-Vercel-Cache
X-Upstream-Ct
Cdn-Host
Path
Fastly-Drupal-Html
Cdn-Request-Time
X-Pad
X-Vercel-Id
X-Edge-Server
Tcn
X-HostName
LB
M-TraceId
X-Planisys-CDN-Rules
X-HS-Content-Campaign-Id
Req-ID
X-Planisys-CDN-TTL
X-NMSegId
X-Planisys-CDN-Cache
X-Platform-Server
State
X-LiteSpeed-Tag
WZWS-RAY
X-SRV
X-Api-Version
X-Cdn-Request-ID
X-APP-VERSION
Cf-Ipcountry
X-WP-CF-Super-Cache-Cookies-Bypass
CountryCode
Lb
X-Ad-Load-Variation
X-Release
X-Esi
X-Air-Pt
X-Amz-Meta-Opti
X-Vgn-Hpd-Variations-Key
X-Vgn-Hpd-Cached
X-AK-Request-ID
Cdncip
Cdnsip
X-Vgn-Hpd-Ssi
Cluster
X-Fastly-Cache
X-Cache-Remote
WebServer
Pramga
X-Scope-Id
X-Sigma-Backend
X-Wp-Cf-Super-Cache
X-Wp-Cf-Super-Cache-Cache-Control
X-Sigma
X-Generated-In
X-Request-Start
Content-Script-Type
Content-Style-Type
X-Cache-Ttl
X-Traceid
X-Rocket-Build-Number
X-Branch-Name
X-NWS-UUID-VERIFY
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Wp-Cf-Super-Cache-Cookies-Bypass
X-M-Reqid
X-Shield-Cache-Expires
XkeyRZ
Cache
X-Varnish-Beresp-Status
X-HS-Status
Yak-Timeinfo
Proxy-Connection
X-Proxy-CacheRZ
X-M-Log
CDN
X-CACHE-KEY
X-UA
X-Provided-By
Edge-Cache
X-Cache-Date
X-GoCache-CacheStatus
X-Tim-N
X-Scheme
X-Request-URI
X-Gamma-Serve
X-Akamai-Pragma-Client-IP
X-Cdn-Forward
Srv
X-Qnm-Cache
Geoip-Latitude
X-GeoIP-City
X-Lb-Cache
X-Ha-Backend
CF-Cached-On
Ohc-File-Size
X-Vc
X-Cdn-Cache-Status
HostName
X-User
X-RN-RSRV
Server-Id
X-TH-Server
X-Render-Time
X-TT-LOGID
Tube-Got-Eval
Tube-Get-Contents
Tube-Got-Results
X-Cache-FS-Status
Tube-Return
V-Age
Click-Count-Error
Cache-Tv-Group
X-EC-Lua
X-CUA
Click-Count-Action-Start
X-Aicache-OS
X-B3-Trace-ID
X-Dw-Trace-Id
X-Via-Popn
X-Via-Poph
X-V-Cache
X-Fastly-Backend-Reqs
X-Via-Popv
X-Wa
X-Edge-POP
Ngx
Env
X-Acquia-Purge-Cdn-Unconfigured
X-SB
X-Servedbyhost
X-Via-Ucdn
X-Lb-Nocache
X-Nc
X-LB-ID
X-Acquia-Site
PICS-Label
X-Acquia-Purge-Tags
X-Acquia-Application-Trace
X-Req
X-Acquia-Application-UUID
X-TX-ID
Yjs-Id
Mime-Version
X-Sucuri-Id
Inserted-Into-Cache-At
X-Snapshot-Date
Vha6-Origin
X-Cached-Since
X-Fastly-Cache-Hits
CACHE-MISS-TO-ORIGIN
Kp-EeAlive
X-VCL-Version
X-ElasticPress-Query
X-Litespeed-Cache-Control
X-CF-Cache-Header-Cache-Control
X-CF-Cache-Header-Vary
Cneonction
X-Miniprofiler-Ids
Log-Origin
X-RAMCache
X-Udemy-Cache-App-Namespace