Threat Level: green Handler on Duty: Rick Wanner

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
Strict-Transport-Security
X-Frame-Options
X-Content-Type-Options
Last-Modified
Link
CF-Cache-Status
Cf-Request-Id
Accept-Ranges
ETag
CF-RAY
Expect-CT
Pragma
X-Powered-By
X-Cache
Via
Age
X-XSS-Protection
Content-Security-Policy
Report-To
NEL
Access-Control-Allow-Origin
Referrer-Policy
Content-Language
X-Xss-Protection
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
X-UA-Compatible
X-Served-By
X-FRAME-OPTIONS
X-Download-Options
X-Timer
X-Request-Id
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-Adblock-Key
X-AspNet-Version
X-Permitted-Cross-Domain-Policies
Alt-Svc
X-Runtime
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-DNS-Prefetch-Control
X-Check
X-Cache-Status
X-Generator
CF-Ray
X-Cacheable
X-Ua-Compatible
X-Iinfo
Timing-Allow-Origin
X-Envoy-Upstream-Service-Time
X-Request-ID
Feature-Policy
Status
X-Content-Security-Policy
X-Drupal-Dynamic-Cache
Content-Encoding
X-AspNetMvc-Version
Access-Control-Expose-Headers
X-CDN
Upgrade
X-XSS-PROTECTION
Access-Control-Max-Age
X-Via
X-Cache-Group
X-Robots-Tag
Server-Timing
X-UA-Device
Request-Context
Keep-Alive
X-AH-Environment
X-Amz-Request-Id
X-Dns-Prefetch-Control
X-Turbo-Charged-By
X-Proxy-Cache
X-Backend
X-Amz-Id-2
X-Ws-Request-Id
X-Age
Host-Header
P3p
X-Server-Powered-By
X-Hacker
X-Server
X-Rq
X-Vhost
EagleId
X-Varnish-Cache
Grace
X-Amz-Version-Id
X-Dispatcher
X-LiteSpeed-Cache
Cf-Edge-Cache
Allow
X-Akamai-Path-Stats
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Swift-SaveTime
X-Swift-CacheTime
X-Device
Ali-Swift-Global-Savetime
X-Nginx-Cache-Status
X-Page-Speed
X-WebKit-CSP
X-Aws-Lambda-Call-Status
X-Host
Accept-CH
X-Node
X-Pingback
Cf-Railgun
X-Cache-Spec
X-OneAgent-JS-Injection
Request-Id
Surrogate-Control
EagleEye-TraceId
X-Server-Id
X-Akam-SW-Version
X-Backend-Server
X-Cache-Lookup
X-Response-Time
X-Readtime
Accept-CH-Lifetime
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-HW
Content-Location
X-Content-Security-Policy-Report-Only
X-Application-Context
Rating
X-Trace
X-Cloud-Trace-Context
Fastly-Restarts
X-Country
X-Clacks-Overhead
X-Url
X-WebKit-CSP-Report-Only
X-MS-InvokeApp
X-Edge
Accept-Ch-Lifetime
X-Amz-Server-Side-Encryption
X-Rack-Cache
Edge-Control
X-Nginx-Upstream-Cache-Status
X-B3-TraceId
X-Vname
X-PC
X-TtlSet
X-Oneagent-Js-Injection
X-Content-Type
X-Mod-Pagespeed
X-ESI
X-Ruxit-JS-Agent
X-Vcap-Request-Id
X-Cdn-Fetch
X-GoogleNews-Bot
X-Kinja
X-Kinja-Build
X-Kinja-Revision
X-Use-Magma
X-Exp-Variant
X-Kinja-Server
X-D2id
X-Exp-Id
Xkey
X-Ruxit-Js-Agent
X-Mcache
Verso
X-GitHub-Request-Id
X-Amz-Rid
Cache-Tag
X-CST
X-VARITI-CCR
X-Powered-By-Plesk
X-Varnish-TTL
RTSS
X-ECACHE
Service-Worker-Allowed
X-FastCGI-Cache
X-Upstream
X-Navigation-Version
X-Abt-Application-Version
X-Version
X-Cached
X-Client-IP
X-Cnection
X-Dw-Request-Base-Id
X-Ac
X-Px
X-Element-Page-Cache
SPRequestGuid
X-Server-Name
X-SharePointHealthScore
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Instrumentation
Arr-Disable-Session-Affinity
Public-Key-Pins
X-Cache-TTL
SPRequestDuration
SPIisLatency
X-Middleton-Display
Display
Pagespeed
X-Sol
X-Ttl
X-NWS-LOG-UUID
X-Country-Code
Permissions-Policy
X-Ser
Accept-Ch
X-RateLimit-Remaining
X-Cache-Key
Response
X-Midtier
X-Middleton-Response
X-Kinsta-Cache
X-Edge-Location-Klb
X-Goog-Hash
X-Forwarded-For
Content-MD5
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Access-Control-Request-Method
X-DataDome
Front-End-Https
X-Shield-Request-Id
X-Correlation-Id
X-NF-Request-ID
X-MSEdge-Ref
Cf-Apo-Via
X-HP-Webp
X-HP-Trace-Id
X-Jurisdiction
X-Recruiting
AR-SID
TP-L2-Cache
AR-CACHE
TP-Cache
AR-Request-ID
Edge-Cache-Tag
AR-ATIME
AR-PoweredBy
X-T
Nginx-Cache
X-Accel-Expires
MicrosoftSharePointTeamServices
MRF-Tech
Mrf-Cache-Status
X-B3-TraceId-Primal
X-Daa-Tunnel
X-RateLimit-Limit
X-Powered-CMS
X-ORACLE-DMS-RID
X-ORACLE-DMS-ECID
TCN
X-Grace
X-Mg-S
X-Id
X-Content-Digest
X-Hits
Server-Node
X-HS-Content-Id
X-HS-Cache-Config
X-HS-Combine-CSS
X-HS-Hub-Id
X-Request-Received
Filters
Server-Name
X-Request-Processing-Time
X-Amzn-Trace-Id
X-Frontend
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
MS-Author-Via
X-Distributor
X-Geo-Country
X-XRDS-Location
S
X-Protected-By
Fastcgi-Cache
X-LLID
X-Language
Cache-Status
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
X-Browser-Type
X-Fastly-Request-Id
X-PressLabs-Stats
X-LB-Cache
X-Origin-Server
Count-Hit
X-Ezoic-Cdn
Cross-Origin-Opener-Policy
X-TTL
X-Fastcgi-Cache
Host
X-F-Cache
X-Forwarded-Proto
X-Request-Handler-Origin-Region
X-Microsite
X-B3-Sampled
X-FB-Debug
X-Seen-By
X-Ab
X-Git-Hash
X-Ua-Browser
Charset
X-Amz-Meta-S3cmd-Attrs
X-Page-Id
Payment
Filterid
X-Litespeed-Cache
X-Cache-Age
X-ASPNET-VERSION
X-Cluster-Name
X-VCache
X-Ratelimit-Reset
Surrogate-Key
Realpath
X-Rid
X-Origin-Cache
Accept-Charset
Cache-Tags
X-NGENIX-Cache
X-Template
Alternate-Protocol
X-Www-Served-By
Access-Control-Allow-Method
Retry-After
X-Webkit-Csp
X-Logged-In
X-AppVersion
X-Az
X-DIS-Request-ID
X-Activity-Id
Cleartype
X-DynaTrace
X-Upgrade-Enabled
X-Route-Name
X-Request-Guid
X-Aspnet-Duration-Ms
X-Providence-Cookie
X-TT
X-Varnish-Grace
X-Tb
X-Amz-Replication-Status
X-Flags
X-Varnish-Backend
X-App-Environment
X-Is-Crawler
X-B-Cache
X-Wix-Request-Id
X-Signature
X-B
X-Type
X-Source
X-Node-Name
X-Envoy-Decorator-Operation
X-Hostname
DC
Paypal-Debug-Id
ServerID
Frame-Options
X-Drupal-Cache-Tags
X-Proxy
X-Debug
X-Revision
X-Fastly-Request-ID
X-Tt-Trace-Tag
X-Tt-Trace-Host
X-Contextid
X-Mobile
X-Server-ID
X-Content-Options
Pinterest-Version
Pinterest-Generated-By
X-Pinterest-Rid
X-Load-Cache
X-Cache-Rule
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-Goog-Storage-Class
X-Goog-Metageneration
X-Goog-Generation
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-Cache-Control
X-N
Amp-Access-Control-Allow-Source-Origin
Country
Node
X-Magnolia-Registration
Refresh
X-Content
X-Original-Request-Id
X-Whom
X-Response-Served-From
X-User-Agent
Referer-Policy
X-EdgeConnect-Cache-Status
NGB
Viewport
X-Cache-TTL-Remaining
X-Cacheable-TTL
X-Debug-IsConnected
X-Environment-Context
X-Framework
X-L-Path
X-Debug-IsPreview
Access-Control-Request-Headers
X-Page-View
X-Yottaa-Metrics
X-Content-Powered-By
X-Yottaa-Optimizations
X-Unique-Id
X-Servername
X-Real-IP
X-Mid
X-Adobe-Content
VIX-Pulpo-Node
Url
Uber-Trace-Id
X-Adobe-Loc
VIX-Pulpo-Upstream-Status
X-Akamai-Request-ID2
X-Jobs
X-G
X-Is-Bot
X-Cache-Time
Content-Disposition
X-Varnish-Age
X-Varnish-Server
X-NYM-Debug-Backend
X-Rendered-As
X-Status
X-Cache-Grace
X-Instance
Akamai-GRN
X-Oracle-Dms-Ecid
Srv
X-RemovedCookies
X-ProcessESI
X-Oracle-Dms-Rid
X-Ratelimit-Remaining
Countrycode
X-Time
X-Drupal-Cache-Contexts
X-Mg-Request-UUID
Version
X-COUNTRY
X-Restarts
X-Webkit-CSP
X-CDN-Forward
X-Http-Reason
X-Cache-Expired-At
X-Via-JSL
X-App-Server
Accept-Language
X-XRDS-LOCATION
X-URL
Healthy
X-Cache-Hit
X-Debug-Info
Protected
X-APP-VERSION
X-IPLB-Instance
X-Tumblr-Pixel-1
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-User
X-Hosted-By
X-IPLB-Request-ID
X-Cache-Operation
Cross-Origin-Resource-Policy
X-Azure-Ref
X-Nginx-Cache-Key
X-Trace-Id
X-Backend-Name
X-Device-Type
X-Tt-Logid
X-Ratelimit-Limit
Section-Io-Cache
Liferay-Portal
Content-Secure-Policy
Backend
X-Akamai-Edgescape
X-FW-Dynamic
Fastcgi-Useragent
X-FW-Serve
X-FW-Static
X-FW-Type
Server-Info
X-FW-Server
X-FW-Hash
X-Cache-Action
X-Api-Version
Ms-Operation-Id
X-RTag
MS-CV
X-UPSTREAM-Address
X-RN-RSRV
X-Rule
Meta-Geo
X-Storage
X-Mobile-URL
X-Proxy-Cache-Status
Load-Balancing
X-Cache-NGX
X-VC-Cache
X-Mode
GEO-INFO
X-Content-Age
X-Varnish-Beresp-Grace
X-Skip-Cache
X-Say-Cacheable
X-Varnish-Hostname
X-Varnishpool
X-Cms-Context
X-Cache-Enabled
X-Alternate-Cache-Key
X-AWS-Id
X-Sorting-Hat-ShopId
X-Sql-Count
X-Sql-Duration-Ms
X-Handled-By
X-Sorting-Hat-PodId
X-Adobe-Source
X-Edge-Location
X-VWS-Id
CDN-Uid
X-Region
X-Site-Version
CF-IPCountry
X-LJ-Flow-ID
X-No-Session
Locale
X-UUID
X-Labrador-Cache-Channel
X-ShardId
X-OCL
X-PCL
X-Proto
CDN-EdgeStorageId
X-Urbn-Site-Id
X-PHP-Host
X-Uri
X-PHP-Backend
CDN-Cache
CDN-CachedAt
CDN-RequestId
CDN-RequestCountryCode
X-Urbn-Context-Path
X-Say-TTL
X-Redis-Cache
CDN-PullZone
X-Shopify-Stage
X-Forwarded-Host
S-Rt
X-ShopId
X-SayCDN-TTL
X-Zipkin-Id
Azure-InstanceId
Azure-RegionName
X-Access
Mn-Server-Ip
Azure-SiteName
Selected-Fe
X-GeoCode
X-ProxyCache-Key
X-Proxy-Build
X-Proxied
X-HTML-Minification-Powered-By
X-ProxyCache-Status
X-Request-Time
X-Timing-Wait
X-ServerID
X-Section
X-Routing-Service
X-Hl-Ver
X-GeoCountry
X-Cache-Server
X-BYPASS-REASON
X-Via-Fastly
X-Web-Node
X-Cache-Type
X-Detected-As
Azure-SlotName
X-Generated-By
X-FB-TRIP-ID
X-Extlb
X-Xfnlog-Site
TWC-GeoIP-Country
Web-Mar-Node
X-Locale
TWC-Privacy
TWC-Locale-Group
TWC-Device-Class
TWC-GeoIP-LatLong
X-SRV
X-Origin-Hint
Webcakes-App-Version
X-Generation-Time
Azure-Version
Webcakes-Region
X-UA-Device-Type
X-Varnish-Cache-Hits
X-Format
Webcakes-App-Name
X-Cache-Host
Onion-Location
Apigw-Requestid
DB-Nickname
Eomportal-Instance
TWC-Connection-Speed
Property-Id
X-Cache-Status-Check
X-Nginx-Cache
X-Server-W
X-Storefront-Renderer-Rendered
X-Tid
X-R9-Blue-Green-Version
X-Ms-Version
X-Ms-Request-Id
X-Origin-Date
X-SaId
X-JoinUs
WP-Super-Cache
Cache-Name
X-Datadome
Xserver
X-FireWall-Port
X-Correlation-ID
X-WP-CF-Super-Cache-Cache-Control
X-DynaTrace-JS-Agent
X-WP-CF-Super-Cache
ServedBy
X-Zen-Fury
X-App-Version
X-LSADC-Cache
X-Amzn-RequestId
X-Amz-Apigw-Id
X-ECache
X-Varnish-Ttl
X-Human
X-Ua
Source
X-TNCMS
X-TA-CDN-Provider
X-Loop
X-Debug-Cache
X-Dc
Cache
X-Cache-Tags
Xet-Cookie
X-Tec-Api-Origin
X-Tec-Api-Version
X-Reqid
X-RCS-CacheZone
X-Tec-Api-Root
X-Varnish-Hits
X-Cached-By
X-Pubstack
X-Soup
X-Aspnetmvc-Version
X-MP-GENERATED-AT
X-Newrelic-Synthetics
Cross-Origin-Window-Policy
Origin
X-Amzn-Remapped-Content-Length
SD-X-WS
X-GEO
X-Vgn-Hpd-Reason
X-Cdn
WPO-Cache-Message
WPO-Cache-Status
From-Origin
X-Origin-CC
X-Origin-TTL
X-Varnish-Beresp-Ttl
X-Tumblr-Pixel-2
X-Service
X-Provided-By
LB
X-IPS-LoggedIn
Webserver
X-AOL-HN
X-B3-SpanId
X-NewRelic-App-Data
Rip
X-Via-NSCOPI
X-Request-Host
X-FW-Version
X-Platform-Server
X-GG-Cache-Date
T-Server
X-A-Dam
X-A-Ccd
X-A
Surrogated-Key
X-A-Dgt
X-AK-Request-ID
X-Application
X-Aed
X-A-Wwc
Sslversion
X-A-Dcw
Meta-Geo-Continent
DCR-Decision-By
DCR-Processing-Time-Ms
Cdnsip
Cdncip
A
BehaviorPad-Version
Environment
Expiry
Ngx.Var.Host
Odigeo-Trace-Id
X-ARC
MD5-Digest
Host-ID
Lang
Rendered-Blocks
X-BCube-Filmed-By
X-Served-From
X-Shop-Environment
X-ScT
X-S-Cookie
X-Rojux
X-S
X-SRCache-Key
X-Tenant
X-VG-WebCache
Xc-Version
X-Vdms-Version
X-Vdms-Path
X-TIM-N
X-User
X-Rewrite-Enabled
X-Processor
X-Destination
X-Developer
X-D
X-Connection-Hash
X-Bc-Bl
X-Cache-NE
X-Ec-GeoHdr
X-External-Request-Id
X-Owner
X-PBS-Appsvrname
X-Orig-Expires
X-NAPM-TraceId
X-Forwarded-Path
X-B-Cookie
X-Ec-Fail
HostName
X-CSRF-Token
X-Cluster-Node
OT-Force-Account-Verify
X-VC
Mime-Version
X-B3-Traceid
X-Bip
X-Aicache-OS
Machine
X-Pool
X-Dispatcher-Number
X-Generated-On
X-Accel-Buffering
X-Level-Front-Cache
X-Thanos
X-Parent-Response-Time
X-Qloud-Router
Upgrade-Insecure-Requests
X-Varnish-Beresp-Status
VNS-Age
CPC-Cache
CPC-Age
VNS-Cache
Redirect-Candidate
X-Nf-Request-Id
X-WA-Info
X-TIME
X-Core-Value
X-Csrf-Jwt
X-Datadog-Parent-Id
X-Datadog-Sampling-Priority
X-Cluster
State
X-Clientip
X-Datadog-Trace-Id
X-CMSURLCustom
X-Fetched-On
X-Esi-Check
X-DPWN-IS-SECURE
X-Epic-Correlation-Id
X-Device-Os
TDXMobile
X-Ec-Custom-Error
X-DefHash
X-Eu-Site
X-DefElseHash
X-CGP
X-Ad-Defer-Variation
Wxu-Next-Region
Tube-Get-Contents
X-BBC-Edge-Cache-Status
X-Branch-Name
Wxu-Next-Hostname
Wxu-Next-Commit
Tube-Got-Results
Tube-Got-Eval
V-Age
Vix-Hermes-Req-Id
X-Cache-Bucket
X-Fmm-Version
Thinkindot-CacheControl
X-Cdn-Origin
Tube-Return
X-Ckpd-Fst-Backend
Thinkindot-CacheControl-Type
Thinkindot-Control
X-Cache-Id
X-Cache-Info
X-CacheTTL
Traceparent
X-Clara-WADP
X-Gzip
X-SIPLIST1
X-Sigma-Backend
X-Slack-Backend
X-Sn-Servicetimems
X-SplitTest
X-Sigma
X-Scale
X-Rocket-Build-Number
X-Request-URI
X-Rocket-Nginx-Serving-Static
X-S-Maxage
X-SB
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
X-VServer
X-VG-TLSProxy
X-WADP-Cache
X-Wix-Viewer-Type
X-Worker
X-Varnish-Remaining-TTL
X-Varnish-CookieINHashed-On
X-Thinkindot-L3
X-V-Cache
X-Variation
X-Varnish-CookieHashed-On
X-Region-Sid
X-RateLimit-Remaining-Second
Servername
X-GeoIP-City
X-Hash
X-Irp-Debug
X-Loc
X-GeoIP
X-Gateway-Skip-Cache
X-Gamma-Serve
X-Gateway-Cache-Key
X-Gateway-Cache-Status
X-Gateway-Request-Id
X-Minions-Version
X-Mvc-Supplant-Cachable
X-Planisys-CDN-Rules
X-Planisys-CDN-Cache
X-Planisys-CDN-TTL
X-Policy
X-RateLimit-Limit-Second
X-Origin-Response-Time
X-Origin
X-Mvc-Supplant-OutputCached
Cache-Hits
X-NodeID
X-Optimistic-Header
X-Forwarded-Site
X-Core-Mission
Memcached
Kp-EeAlive
Cmsid
NM-Fastcgi-Cache
Click-Count-Error
Click-Count-Action-Start
Ha-Gx-Prefs
Origin-EX
Origin-CC
Cmstype
Country-Code
Fastly-SWR
Fastly-SSL
Fastly-GeoIP-CountryCode
Fastly-SIE
DSUID
Decoy-Debug-TTL
NGX
Decoy-Debug-Key
Decoy-Debug-Status
Mobile-Detection-Method
HA-Ipaddr
Apple-News-Services-Parsed-Url
Apple-News-Services-Request-Url
Server-Host
IsBot
Apple-News-Services-Host
Apple-News-Services-Handled
X-Cache-Debug
L
L5d-Success-Class
Adler-Geo
Req-Svc-Chain
Cache-Host
Is-Eu
Platform
Producers
Candidate-Md5Url
Release
Canary
Web-Mar-Region
Gh-Request-Id
Mail-Subject
We-Hiring
X-Geo-Header
X-JWT-State
X-Is-Gdpr
CDCHOST
X-NCache
Ec-Rule-Version
X-Scheme
X-HS-Content-Campaign-Id
X-Hnp-Log
Cluster
Fastly-Backend-Name
X-Gen-Mode
CloudFront-Viewer-Country
X-Has-Esi
Datacenter
X-Developers
X-ZONE
X-Proxy-Cache-Info
X-Origin-Time
X-Nyt-Route
X-Auto-Login
User-Cache-Control
Server-Hostname
Svr
Server-Ext
X-Block-Status
X-Viewer-Country
Sever-Int
X-INCAP-ABP
X-Cdn-Srv
X-Gdpr
X-WP-CF-Super-Cache-Active
X-Tx-Id
X-Cache-Remote
X-Trace-ID
Cache-Tv-Group
X-LB-NoCache
X-Sucuri-Cache
X-Sucuri-ID
Fastcgi-Cache-TTL
AKAMAI
X-Udemy-Cache-App-Namespace
Memory
X-Var-Ttl
Pics-Label
X-FC-Vary-Parameters
X-ATG-Version
Fastly-Drupal-HTML
X-Presslabs-Stats
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Azure-Ref-OriginShield
X-Origin-Expires
Time
Ssr
X-Fastly-Backend
X-ND-Cache
X-Fastly-Cache
X-Session-Fingerprint
WebServer
AMP-Access-Control-Allow-Source-Origin
X-Newrelic-App-Data
Sid
X-Tb-Optimization-Total-Bytes-Saved
SID
X-Via-Popn
X-Pod-Name
X-Webkit-CSP-Report-Only
X-Via-Popv
X-Generated-In
X-Via-Poph
X-NWS-UUID-VERIFY
X-Servedbyhost
Server-ID
X-Buckets
Env
X-Refresh
X-Ig-Push-State
X-Cache-Date
X-Akamai-Transformed
X-Xrds-Location
X-Cs
X-DC
X-Pass-Why
X-Release
X-Fpc
X-Edge-Pop
X-Conf
X-Up
X-Dispatch
X-Microcachable
X-NC
X-Wa
My-App
X-MSEdge-Flight
X-EC-Lua
X-MSEdge-Features
X-Tumblr-Pixel-3
X-TRACE-ID
X-Dmc
X-Esi
X-Endurance-Cache-Level
X-RateLimit-Reset
X-Lambda-Id
Fastly-Drupal-Html
X-PX
X-MCACHE
X-ID
X-TX-ID
CDN
X-CS
X-Be
Magicmarker
X-Req
X-CACHE-AGE
GeoIp-Country-Code
X-VCL-Version
X-Zone
True-Client-IP
X-NGINX-Cache
X-LB-ID
X-Wikidot-Static-Cache
X-Srv
X-Wikidot-Backend
X-CACHE-KEY
X-Vc
X-Air-Source
X-TH-Server
CacheControlHeader
X-Air-Hostname
X-CSRF-TOKEN
Hostname
X-Air-Trace-Id
True-Client-Country-4JS
X-Hyper-Cache
X-Yandex-Sdch-Disable
X-CF-Lambda-Fn
X-CF-Lambda-Version
X-Micro-Cache
True-Client-Ip
X-Op-Id-All
X-HS-Status
X-M-Log
X-Alfa-Service
X-M-Reqid
X-App
GeoIP-Country-Code
X-Air-Pt
X-Vcl-Version
Resin-Trace
Pramga
Path
X-B3-Spanid
Tcn
X-Qnm-Cache
C-Via
N-Cache
Tracecode
X-GeoIP-Country-Code
X-GeoIP-Region-Code
X-TrackingId
X-Varnish-Beresp-TTL
X-SERVER-NAME
X-PAYTM-SRV-ID
X-Accel-Expires-Debug
On-Server
X-Datacenter
X-Vercel-Cache
X-Vercel-Id
X-Platform
X-Date
WWW-Authenticate
Fastcgi-X-Cache-Version
Esi-Enabled
X-CLOUD-TRACE-CONTEXT
X-Geo
NtCoent-Length
X-Check-Cacheable
X-Edge-Origin-Shield-Bytes
X-Edge-Origin-Shield-Region
X-Akamai-Pragma-Client-IP
Section-Io-Origin-Time-Seconds
Section-Io-Id
Proxy-Connection
Hit
Yjs-Id
Section-Origin-Responded
Section-Io-Origin-Status
X-FPC
X-Webkit-Csp-Report-Only
X-Platform-Router
X-Platform-Processor
X-Platform-Cluster
X-Via-CDN
X-Vtex-Remote-Cache
X-RAMCache
X-WA
FSS-Cache
X-Mly-Id
ENV
X-Node-Id
GeoIP-Latitude
X-Vtex-Processado-Em
X-Response-By
X-Old-Content-Length
X-Edge-POP
Server-Id
Powered-By
Lb
User-Agent
X-ServedByHost
X-Lb-Id
YJS-ID
X-LAGOON
Cdn
X-API-Version
X-Request-Start
X-SD-PageType
X-Cdn-Forward
X-UA
X-Dw-Trace-Id
X-AIR-PT
X-Via-PopN
X-Via-PopH
HIT
X-Via-PopV
X-From
X-LiteSpeed-Cache-Control
X-PERF
Cache-Key
X-ApacheServer
X-Client-Ip
X-Akamai-ERPolicy
X-Akamai-ERRuleID
X-Render-Time
X-Via-Ucdn
XkeyRZ
X-Litespeed-Cache-Control
X-Traceid
DynaTrace
X-Cache-Ttl
Server-Ttl
X-LI-Proto
X-TT-LOGID
X-FORWARDED-FOR
X-Instance-Name
X-Li-Fabric
X-Webstats-RespID
X-Li-Pop
X-Proxy-CacheRZ
X-LI-UUID
Dnion-Transfer-Encoding
X-Location
Srvid
Geoip-Latitude
X-CUA
X-FL-EDGE
Locid
X-Service-Response-Time
Sm-Log-Id
X-DSS
X-DW
X-RPM
X-RPS
PICS-Label
X-DB
DT-Hot-News
X-Proxy-Cache-Hk
XServer
X-RSL
X-CF-Powered-By
X-Contensis-Viewer-Groups
X-Varnish-Authentication
X-Director
X-Cache-ASPX
X-LiteSpeed-Tag
X-VarnishDD-TTL
Nginx-CQVIP
XM
X-HN
X-DI
X-Proxy-Upstream
PFcat
Ohc-File-Size
Location
X-Wp-Cf-Super-Cache
X-Wp-Cf-Super-Cache-Cache-Control
X-B3-ParentSpanId
X-Yottaa-OS
X-Server-IP
Vha6-Origin
X-Request-Url
Wpo-Cache-Message
X-HostName
X-Fastly-Backend-Reqs
X-Fastly-Cache-Hits
X-Cdn-Request-ID
Wpo-Cache-Status
X-Lb-Nocache
Wp-Super-Cache
Warning
X-Cache-Ngx
CountryCode
X-Ips-Loggedin
CF-Cached-On
X-Test
X-Ramcache
X-ElasticPress-Query
X-DataCenter
X-Mg-Cache
X-Moov-Xdn-Version
SRV
WZWS-RAY
Fastcgi-Cache-Ttl
X-Moov-T
Req-ID