Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
CF-RAY
Accept-Ranges
Expect-CT
X-XSS-Protection
Pragma
X-Powered-By
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Alt-Svc
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Xss-Protection
X-Cache-Hits
P3P
X-Served-By
X-UA-Compatible
X-Download-Options
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Request-Id
X-Varnish
X-Adblock-Key
X-Permitted-Cross-Domain-Policies
Access-Control-Allow-Credentials
Accept-CH
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
Accept-CH-Lifetime
X-Ua-Compatible
X-DNS-Prefetch-Control
X-Drupal-Cache
X-Check
X-Cache-Status
X-Generator
Server-Timing
X-Request-ID
X-Cacheable
X-Envoy-Upstream-Service-Time
Timing-Allow-Origin
X-FRAME-OPTIONS
X-Iinfo
X-Drupal-Dynamic-Cache
X-Content-Security-Policy
Access-Control-Expose-Headers
Feature-Policy
X-CDN
Content-Encoding
Status
X-AspNetMvc-Version
Upgrade
CF-Ray
Access-Control-Max-Age
X-Via
X-Amz-Request-Id
X-Amz-Id-2
Cf-Edge-Cache
Host-Header
EagleId
Keep-Alive
Request-Context
X-Backend
X-Cache-Group
X-UA-Device
X-AH-Environment
X-Robots-Tag
X-Server
X-Hacker
X-Turbo-Charged-By
X-Proxy-Cache
X-Ws-Request-Id
Xkey
X-Rq
X-Age
Permissions-Policy
X-Vhost
X-Amz-Version-Id
Allow
X-Dns-Prefetch-Control
X-Dispatcher
Cf-Apo-Via
X-Swift-CacheTime
X-Swift-SaveTime
X-Server-Powered-By
Grace
Ali-Swift-Global-Savetime
X-Varnish-Cache
P3p
X-LiteSpeed-Cache
X-Page-Speed
X-Pingback
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Cache-Lookup
X-Device
X-OneAgent-JS-Injection
Cf-Railgun
X-Backend-Server
EagleEye-TraceId
X-Host
X-Server-Id
X-WebKit-CSP
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Response-Time
X-Readtime
X-Akam-SW-Version
Surrogate-Control
X-HW
X-Litespeed-Cache
Request-Id
X-Cloud-Trace-Context
X-Node
Content-Location
X-Application-Context
X-Ruxit-JS-Agent
X-Nginx-Cache-Status
X-Nginx-Upstream-Cache-Status
X-CST
X-NWS-LOG-UUID
X-Country
Service-Worker-Allowed
X-Country-Code
X-Url
X-Content-Type
X-Clacks-Overhead
Cache-Tag
X-Trace
X-Oneagent-Js-Injection
Rating
X-Rack-Cache
X-Amz-Server-Side-Encryption
Nginx-Cache
X-Times
X-Server-Name
X-FTR-Request-ID
X-Vname
X-PC
X-TtlSet
X-Daa-Tunnel
Cross-Origin-Opener-Policy
X-Webkit-Csp
X-Mcache
X-Edge
X-Midtier
X-Browser-Type
X-Powered-By-Plesk
X-Cnection
X-ESI
X-Upstream
Edge-Control
X-MS-InvokeApp
X-GitHub-Request-Id
X-D2id
X-Element-Page-Cache
X-Ac
Verso
X-Aws-Lambda-Call-Status
X-Kinja-Server
X-Cdn-Fetch
X-Kinja-Build
X-Exp-Id
X-Kinja-Revision
X-Kinja
X-GoogleNews-Bot
X-Exp-Variant
AR-ATIME
AR-Request-ID
AR-SID
AR-PoweredBy
X-ECACHE
Accept-Ch-Lifetime
X-FastCGI-Cache
X-Ser
X-Vcap-Request-Id
X-Navigation-Version
X-Cache-TTL
X-B3-TraceId
X-Abt-Application-Version
X-Mod-Pagespeed
SPIisLatency
SPRequestDuration
AR-CACHE
X-Ruxit-Js-Agent
X-Dw-Request-Base-Id
X-SharePointHealthScore
SPRequestGuid
X-Amz-Rid
Fastly-Restarts
X-NF-Request-ID
X-Client-IP
X-Kraken-Loop-Name
X-Instrumentation
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-Server-Lifecycle-Phase
Pagespeed
X-Middleton-Display
X-Sol
Display
X-RateLimit-Remaining
Edge-Cache-Tag
X-Mg-S
S
X-Edge-Location-Klb
X-Kinsta-Cache
X-Powered-CMS
Response
X-Middleton-Response
X-Amzn-Trace-Id
Cache-Status
X-VARITI-CCR
Access-Control-Request-Method
X-Cache-Key
X-Version
X-Goog-Hash
X-ARC
RTSS
X-Content-Digest
X-Fastly-Request-ID
X-TraceId
X-Forwarded-For
X-Recruiting
Cross-Origin-Resource-Policy
X-T
Realpath
X-Varnish-TTL
X-Pinterest-Rid
Pinterest-Version
Pinterest-Generated-By
X-Ttl
X-Correlation-Id
X-MSEdge-Ref
MS-Author-Via
Front-End-Https
X-Ratelimit-Limit
X-Cached
Fastcgi-Cache
Content-MD5
X-HS-Cache-Config
X-HS-Hub-Id
X-HS-Content-Id
X-Ua-Browser
X-FTR-Balancer
Payment
X-FTR-Backend-Server
X-FTR-Cache-Status
X-FTR-Backend
X-Country-Code-Real
X-Protected-By
Server-Node
Arr-Disable-Session-Affinity
Public-Key-Pins
X-Request-Processing-Time
X-PDP-UNCACHING-HASH
X-Request-Received
X-Frontend
X-Shield-Request-Id
X-Forwarded-Proto
X-LLID
X-HS-Combine-CSS
MicrosoftSharePointTeamServices
TP-Cache
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Origin-Cache-Key
X-Distributor
X-Accel-Expires
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Jurisdiction
X-HP-Webp
X-HP-Trace-Id
X-FTR-Expires
X-Server-ID
Count-Hit
X-GUploader-UploadID
X-Hits
X-Origin-Server
X-LB-Cache
X-Ezoic-Cdn
X-ORACLE-DMS-RID
X-Microsite
X-Request-Handler-Origin-Region
X-Content-Security-Policy-Report-Only
X-Az
X-AppVersion
X-Activity-Id
Host
X-Www-Served-By
X-PressLabs-Stats
Mrf-Cache-Status
X-Cluster-Name
MRF-Tech
X-B3-TraceId-Primal
X-Ua-Device
X-Varnish-Backend
X-TTL
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-TEC-API-VERSION
Cache-Tags
Retry-After
X-Varnish-Server
X-Ratelimit-Remaining
X-App-Server
Accept-Charset
X-Amz-Meta-S3cmd-Attrs
X-Id
Server-Name
X-Hostname
X-NGENIX-Cache
X-Geo-Country
X-ASPNET-VERSION
Cleartype
X-NODE
X-Envoy-Decorator-Operation
Referer-Policy
X-DIS-Request-ID
X-Newrelic-App-Data
X-Goog-Metageneration
X-Upgrade-Enabled
TP-L2-Cache
X-CSRF-Token
X-Seen-By
X-Oracle-Dms-Ecid
Access-Control-Allow-Method
X-Amzn-RequestId
X-Amz-Apigw-Id
X-Azure-Ref
X-Git-Hash
X-RateLimit-Limit
TCN
X-Load-Cache
X-CCDN-Origin-Time
X-CCDN-CacheTTL
X-Hcs-Proxy-Type
X-F-Cache
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-Unique-Id
X-Proxy
X-Grace
X-ORACLE-DMS-ECID
X-Debug-Info
Healthy
X-Px
X-Revision
Filterid
X-Cache-Control
Section-Io-Cache
X-Request-Guid
X-Trace-Id
X-XRDS-LOCATION
Paypal-Debug-Id
X-B3-Sampled
X-TT
X-FB-Debug
X-B
DC
X-Page-Id
X-Contextid
X-Type
X-Fb-Rlafr
X-Oracle-Dms-Rid
X-N
X-Logged-In
X-Mobile
Viewport
X-WP-CF-Super-Cache-Cache-Control
X-WP-CF-Super-Cache
X-Debug
X-Whom
X-Varnish-Ttl
X-Template
Charset
Fastly-SWR
Fastly-SIE
X-Language
X-Datadog-Parent-Id
X-Time
X-Goog-Stored-Content-Length
X-Datadog-Sampling-Priority
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Datadog-Trace-Id
X-Content-Options
X-Cache-Grace
X-Webkit-CSP
Version
X-Via-JSL
X-Magnolia-Registration
Content-Disposition
X-RateLimit-Reset
X-Wix-Request-Id
X-EdgeConnect-Cache-Status
X-App-Environment
X-Varnish-Grace
X-B-Cache
X-Signature
X-Node-Name
X-Origin-Cache
X-RemovedCookies
X-Amzn-Remapped-Content-Length
VIX-Pulpo-Upstream-Status
X-ProcessESI
VIX-Pulpo-Node
X-Yottaa-Metrics
X-Tumblr-Pixel-1
X-Rule
X-Yottaa-Optimizations
X-Tumblr-Pixel-0
X-Tumblr-User
X-Datadog-Sampled
X-Debug-IsConnected
X-Tumblr-Pixel
X-Debug-IsPreview
X-G
MS-CV
Ms-Operation-Id
X-Hl-Ver
X-RTag
X-Backend-Name
X-Amz-Replication-Status
SD-X-WS
X-UUID
ServerID
X-FW-Static
X-FW-Server
X-Proxy-Cache-Info
X-FW-Hash
X-FW-Serve
X-Storage
X-Adobe-Content
X-Device-Type
X-Adobe-Loc
X-FW-Version
X-FW-Type
GEO-INFO
X-FW-Dynamic
X-Instance
X-Cache-Age
Country
X-Region
X-Is-Bot
X-IPS-LoggedIn
Liferay-Portal
X-NYM-Debug-Backend
SRV
X-Rendered-As
X-Cacheable-TTL
NGB
X-User-Agent
X-Status
X-B3-SpanId
X-Environment-Context
X-Cache-Hit
X-L-Path
X-NWS-UUID-VERIFY
X-Real-IP
X-Source
Countrycode
X-Rid
X-ServerID
Akamai-GRN
Surrogate-Key
X-Sucuri-Cache
X-Servername
X-Sucuri-ID
Cross-Origin-Window-Policy
X-WP-CF-Super-Cache-Active
OT-Force-Account-Verify
From-Origin
X-VC-Cache
X-UA
X-WebKit-CSP-Report-Only
X-RM-Cache-TTL
Upgrade-Insecure-Requests
Backend
Amp-Access-Control-Allow-Source-Origin
Front
X-Framework
X-INCAP-ABP
X-Mode
Refresh
X-Air-Pt
X-Xrds-Location
Frame-Options
X-AB
X-Cache-Time
X-DataDome
X-Air-Trace-Id
X-HTML-Minification-Powered-By
X-Air-Source
X-Air-Hostname
X-Buckets
Xet-Cookie
X-Akamai-Request-ID2
X-Content-Powered-By
X-RID
Url
X-Edge-Location
X-Handled-By
X-Wormhole-Sdk
X-Endurance-Cache-Level
Webserver
X-VC
X-JoinUs
X-No-Session
X-AWS-Id
Filters
X-Cluster
Meta-Geo
Selected-Fe
X-LJ-Flow-ID
X-Azure-Ref-OriginShield
X-Origin-TTL
X-Rewrite-Enabled
X-Rn-Rsrv
X-Vcache
X-Reqid
X-Origin-CC
X-SaId
X-Akamai-Edgescape
X-UPSTREAM-Address
X-VWS-Id
X-Timing-Wait
X-Xfnlog-Site
X-RCS-CacheZone
X-Webstats-RespID
X-Origin-Date
X-Proxy-Build
Access-Control-Request-Headers
X-Origin-Hint
X-Cache-Rule
X-IPLB-Instance
Webcakes-Region
X-VCT
X-Git-Commit
X-Cache-Operation
X-Origin
X-Provided-By
ServedBy
X-PHP-Host
WPO-Cache-Message
WPO-Cache-Status
Atl-Traceid
X-Generation-Time
TWC-Device-Class
Webcakes-App-Version
TWC-GeoIP-Country
TWC-GeoIP-LatLong
TWC-Privacy
TWC-Locale-Group
TWC-Connection-Speed
Property-Id
X-Labrador-Cache-Channel
X-Fetched-On
X-Drupal-Cache-Tags
X-Container-Uri
Mn-Server-Ip
Webcakes-App-Name
X-IPLB-Request-ID
X-SRV
X-R9-Blue-Green-Version
X-Served-From
X-Logging-Id
X-Tumblr-Pixel-2
X-Ms-Request-Id
X-Ms-Version
X-Httpd
X-Thinkindot-L3
Section-Io-Id
X-Redis-Cache
X-BYPASS-REASON
X-Cache-Debug
X-Cloudmap
X-Varnish-Cache-Hits
X-Drupal-Cache-Contexts
X-Extlb
X-Routing-Service
X-CMSURLCustom
X-Scope-Id
Cache
X-Cms-Context
X-Hosted-By
X-Shield-Cache-Expires
X-ProxyCache-Status
X-Restarts
X-ProxyCache-Key
X-Zipkin-Id
Web-Mar-Node
X-Tb
X-Adobe-Source
X-Accel-Version
X-CDN-Forward
X-Proxied
X-Locale
Thinkindot-Control
TDXMobile
X-Site-Version
X-Cache-Status-Check
X-Web-Node
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-Say-Cacheable
X-S
X-Director
X-Varnish-Age
X-Loop
X-Upstream-Ct
X-Upstream-Ht
X-Cdn-Origin
X-Browser-Name
X-Say-TTL
X-Tncms
X-Is-Tablet
X-Skip-Cache
X-Is-Supported-Browser
X-Format
X-Is-Mobile
X-Is-Desktop
X-Tcp-Rtt
X-SayCDN-TTL
X-Frame-Option
X-Geo-Region
X-Lambda-Id
X-Soup
X-Forwarded-Host
Apigw-Requestid
X-Storefront-Renderer-Rendered
Cache-Hits
X-Sorting-Hat-ShopId
X-Varnish-Beresp-Grace
X-Sorting-Hat-PodId
X-Alternate-Cache-Key
Xserver
X-ShardId
Accept-Language
X-GeoCountry
X-GeoCode
X-Detected-As
X-Erf-Stays-Pdp-Viaduct-Migration-Web-V2
X-Cache-Host
X-ShopId
X-Nginx-Cache
X-Shopify-Stage
X-Generated-By
X-Worker
CDN-RequestId
X-Lagoon
X-Optimistic-Header
X-Vercel-Cache
X-Rocket-Nginx-Serving-Static
X-Vercel-Id
Azure-InstanceId
Azure-SlotName
Azure-SiteName
Azure-Version
Azure-RegionName
Source
X-B3-Traceid
Node
X-Fastly-Request-Id
X-Request-URI
CDN-PullZone
CDN-RequestCountryCode
CDN-CachedAt
CDN-Cache
CDN-RequestPullCode
X-WP-CF-Super-Cache-Cookies-Bypass
LB
CDN-EdgeStorageId
CDN-RequestPullSuccess
CDN-Uid
Protected
X-Pass-Why
AMP-Access-Control-Allow-Source-Origin
Fastcgi-Useragent
Cross-Origin-Embedder-Policy
X-Vcl-Version
X-Tumblr-Pixel-3
X-App-Version
X-XRDS-Location
Alternate-Protocol
X-GEO
Expiry
X-Connection-Hash
X-Tec-Api-Version
X-Tec-Api-Root
X-Tec-Api-Origin
X-Cache-Server
X-Ratelimit-Reset
X-ECache
X-TA-CDN-Provider
X-Jobs
Onion-Location
DB-Nickname
X-Cache-Expired-At
X-Server-W
Sid
CF-IPCountry
Environment
X-PHP-Backend
X-Api-Version
X-Original-Request-Id
X-Response-Served-From
X-Fastcgi-Cache
Uber-Trace-Id
Priority
X-Proxy-Cache-Status
X-LSADC-Cache
User-Cache-Control
X-Cache-Action
X-Cluster-Node
HostName
X-Uri
X-MP-GENERATED-AT
Locale
X-Urbn-Context-Path
X-LiteSpeed-Cache-Control
X-Urbn-Site-Id
X-TT-LOGID
X-Mg-Request-UUID
X-Tx-Id
X-Nf-Request-Id
WP-Super-Cache
X-FB-TRIP-ID
X-A-Ccd
T-Server
X-A
X-A-Dam
X-Jungle-Id
X-A-Dgt
X-Origin-Expires
Sslversion
Surrogated-Key
A
X-Ig-Origin-Region
X-A-Dcw
X-Forwarded-Site
X-Ec-GeoHdr
X-Powered-By-VTEX-Cache
X-Proto
Wxu-Next-Commit
Wxu-Next-Hostname
X-Epic-Correlation-Id
X-Level-Front-Cache
Vix-Hermes-Req-Id
X-Platform
X-Viewer-Country
X-Esi-Check
Wxu-Next-Region
Cache-Tv-Group
Magicmarker
Lang
Fusion-Component-Id
MD5-Digest
X-NMSegId
Meta-Geo-Continent
Edge-Cache
Fusion-Content-Id
Fusion-Content-Source
X-ND-Cache
X-NCache
Gannett-Cam-Experience-Id
Fusion-Template-Id
Fusion-Deployment-Id
Fusion-Source
DCR-Processing-Time-Ms
DCR-Decision-By
Rendered-Blocks
X-Org
X-FC-Vary-Parameters
Candidate-Md5Url
X-Dispatcher-Server
Req-ID
X-Op-Id-All
Origin-Agent-Cluster
X-Mvc-Supplant-Cachable
X-Node-Id
Ngx.Var.Host
Content-Secure-Policy
Origin
NM-Fastcgi-Cache
Server-Host
X-Ec-Fail
X-TIM-N
X-Thanos
X-UA-Device-Type
X-Content-Age
X-Gzip
X-Test
X-Block-Status
X-BCube-Filmed-By
X-Bc-Bl
X-SRCache-Key
X-A-Wwc
X-Bl-Debug
X-Cache-Id
X-Conf
X-VTEX-Cache-Time
X-Vdms-Version
X-Generated-On
X-VTEX-Cache-Server
X-Clientip
X-Vdms-Path
X-GeoIP
X-Cache-NE
X-DC
X-Vtex-Remote-Cache
X-GeoIP-City
X-Varnish-Hostname
X-Gen-Mode
X-Bip
X-D
X-Device-Os
X-SB
X-Hnp-Log
X-Developer
X-ScT
X-Request-Start
X-Rojux
X-Aed
X-Origin-Response-Time
X-URL
X-NGINX-Cache
X-GeoIP-Region-Code
X-Mvc-Supplant-OutputCached
X-Cache-TTL-Remaining
X-Cache-Info
We-Hiring
X-From
Host-ID
X-HS-Content-Campaign-Id
X-GeoIP-Country-Code
X-AK-Request-ID
L5d-Success-Class
X-Amz-Storage-Class
X-Cdn-Srv
X-Cache-Bucket
X-ApacheServer
X-CGP
Mail-Subject
X-Geo-Header
Origin-CC
X-Fastly-Cache
Ssr
X-CUA
Sever-Int
Server-Hostname
X-Backend-Instance
X-HN
X-Fmm-Version
X-Core-Value
X-Auth-Group-Type
X-Auto-Login
X-Csrf-Jwt
X-Eu-Site
Server-Ext
X-Debug-Cache-Store
PFcat
X-Edge-Server
Origin-EX
HA-Ipaddr
Powered-By
Release
X-Loc
X-Gdpr
X-Debug-Cache-Fetch
W
X-App-Name
CDCHOST
Cdn-Host
Canary
X-Varnishpool
X-VarnishDD-TTL
Cdn-Request-Time
X-Scheme
Cdncip
X-WA-Info
X-Via-Fastly
X-VG-WebCache
X-SD-PageType
X-Varnish-Director
X-Origin-Time
X-PERF
X-PAYTM-SRV-ID
X-Service
AKAMAI
X-Newrelic-Synthetics
Cache-Provider
C-Via
X-Var-Ttl
X-V-Cache
X-RateLimit-Limit-Second
X-Zone
Esi-Enabled
DSUID
Cdnsip
X-Policy
X-Nginx-Cache-Key
Fastly-Backend-Name
Ha-Gx-Prefs
Fastly-SSL
X-Req
X-Tt-Logid
X-Pubstack
X-Nyt-Route
X-Render-Time
X-Request-Time
X-RateLimit-Remaining-Second
X-Region-Sid
XM
Content-Style-Type
Yak-Timeinfo
Content-Script-Type
X-Aicache-OS
X-B3-Trace-ID
X-Varnish-Beresp-Ttl
X-BBC-Edge-Cache-Status
X-Server-IP
X-Section
X-Human
X-Hash
X-CacheTTL
Gh-Request-Id
X-Dc
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Varnish-Beresp-Status
X-Ig-Push-State
X-Fastly-Backend
X-Ec-Custom-Error
X-DPWN-IS-SECURE
X-We-Are-Hiring
X-Contensis-Viewer-Groups
X-Cache-Aspx
X-Tb-Optimization-Total-Bytes-Saved
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-Cache-Backend
X-GoCache-CacheStatus
X-VG-TLSProxy
X-Request-Host
X-Varnish-Authentication
X-Sn-Servicetimems
X-Access
RNT-Machine
X-Ad-Load-Variation
X-Location
Req-Svc-Chain
RNT-Time
Cache-Key
Apple-News-Services-Handled
Country-Code
Apple-News-Services-Parsed-Url
Apple-News-Services-Request-Url
Redirect-Candidate
Producers
Cluster
On-Server
X-Micro-Cache
X-Mly-Id
Click-Count-Error
Click-Count-Action-Start
Pramga
Platform
X-Men
Adler-Geo
Apple-News-Services-Host
True-Client-Country-4JS
X-Pool
V-Age
Is-Eu
L
X-Proxied-Request
Web-Mar-Region
X-Acquia-Purge-Cdn-Unconfigured
Tube-Return
Machine
Tube-Got-Eval
Tube-Got-Results
Fastly-GeoIP-CountryCode
Tube-Get-Contents
X-AIR-PT
NGX
Odigeo-Trace-Id
X-Date
X-Accel-Expires-Debug
Cdn-Requestid
X-Slack-Shared-Secret-Outcome
X-Up
X-Slack-Backend
Proxy-Firewall
Datacenter
Debug
X-Custom-Header
X-NodeID
X-Varnish-Hits
X-COUNTRY
X-LB-ID
X-Ismobilevalue
X-Refresh
X-Akamai-Transformed
X-Cs
X-CACHE-GROUP
X-ID
Locid
X-Nananana
X-Pad
X-Varnish-CookieINHashed-On
X-Varnish-Remaining-TTL
X-Varnish-CookieHashed-On
X-DefHash
X-DefElseHash
X-Amz-Meta-Cb-Modifiedtime
X-Platform-Processor
X-LiteSpeed-Tag
X-Platform-Cluster
X-Platform-Router
CloudFront-Viewer-Country
X-Client-Ip
Fastly-Drupal-HTML
Mime-Version
SID
X-Via-Popn
X-VHOST
X-Via-Popv
Pics-Label
X-HA-Backend
X-Via-Poph
X-M-Log
X-M-Reqid
X-Servedbyhost
X-Depends
X-Datadome
Ngx-Var-Key
X-Cached-By
X-Old-Content-Length
X-VC-TTL
GeoIP-Latitude
X-Cache-FS-Status
X-Parent-Response-Time
X-CACHE-AGE
X-Moov-T
X-CS
X-Moov-Xdn-Version
X-TH-Server
X-B3-Parentspanid
Fastly-Drupal-Html
X-CDN-Cache-Status
X-LB-NoCache
X-TIME
Cross-Origin-Embedder-Policy-Report-Only
X-DynaTrace-JS-Agent
Resin-Trace
GeoIp-Country-Code
Cf-Ipcountry
Server-ID
Server-Info
X-Nc
NtCoent-Length
Cdn
X-Presslabs-Stats
X-B-Cookie
X-S-Cookie
X-Application
X-User
X-VCache
BehaviorPad-Version
X-Wa
X-Destination
Cf-Device-Type
Uri
X-External-Request-Id
X-Vgn-Hpd-Reason
X-Litespeed-Tag
X-Zen-Fury
X-ZONE
X-NewRelic-App-Data
X-IAuth-Set-Uid
X-APP
True-Client-IP
FSS-Cache
X-Providence-Cookie
X-Varnish-Beresp-TTL
X-Flags
X-Is-Crawler
X-Route-Name
CDN
X-Aspnet-Duration-Ms
X-Rocket-Build-Number
X-Sigma
X-Sigma-Backend
X-Cache-Date
X-Fpc
X-Instance-Name
X-Esi
X-HostName
X-TX-ID
True-Client-Ip
Srv
X-Srv
X-Content-Length
X-DynaTrace
X-Vc
X-API-Version
X-VServer
Tcn
Load-Balancing
X-Segment-20210421
X-Dynatrace-Js-Agent
X-Branch-Name
X-HITS
X-Page-View
X-Oracle-DMS-ECID
Serverhost
S-Rt
GeoIP-Country-Code
X-FPC
X-HOST
X-B3-Spanid
X-Cdn-Forward
X-WA
X-APP-VERSION
Ohc-File-Size
Request-ID
X-Dispatch
X-DataCenter
X-Cdn-Cache-Status
X-Dispatcher-Number
X-NC
Hostname
Product
Type
X-RequestId
Vc-Max-Age
Server-Id
X-Sql-Count
X-Http-Reason
X-Sql-Duration-Ms
X-Irp-Debug
X-FL-QIT-DEBUG
Geoip-Latitude
X-Lb-Nocache
Srvid
X-Webkit-Csp-Report-Only
ServerName
Cl-Cache
X-Geo
X-Ckpd-Fst-Backend
X-ServedByHost
WZWS-RAY
X-Bug-Bounty
X-Via-CDN
DataCenter
X-Via-SSL
IsBot
X-Via-Edge
X-SIPLIST1
X-Owner
X-CSRF-TOKEN
Edge-Copy-Time
X-VCL-Version
PICS-Label
X-Cst
Cloudfront-Viewer-Country
Epwk-X-Cache
Cross-Origin-Opener-Policy-Report-Only
X-Proxy-CacheRZ
X-CACHE-KEY
X-Via-PopN
X-Via-PopV
X-Via-PopH
Origin-Trial
X-Core-Mission
CacheControlHeader
XkeyRZ
Ohc-Cache-HIT
X-Ha-Backend
MIME-Version
X-Cache-Ttl
X-Hit
X-Ua
X-Qloud-Router
X-App
ServerHost
X-Correlation-ID
CountryCode
N-Cache
Rtss
X-Srcache-Store-Status
X-Srcache-Fetch-Status
X-Amz-Meta-Opti
X-MSEdge-Flight
X-MiniProfiler-Ids
X-MSEdge-Features
X-Lb-Id
X-Fastly-Country-Code
Lb
X-Acquia-Application-Trace
X-Sqd-Ctime
X-Acquia-Purge-Tags
X-Acquia-Application-UUID
X-Sqd-Stime
X-Acquia-Site
Warning
X-Datacenter
Sm-Log-Id
X-Web-Server
X-Service-Response-Time
X-LAGOON
X-Forwarded-Path
X-Amz-Meta-Sha256
X-Udemy-Cache-App-Namespace
X-Amz-Meta-S3b-Last-Modified
X-IN-APIGATEWAY
X-Akamai-Device-Characteristics
X-Limited
X-Vmg-Version
User-Agent
Cneonction
X-Proxy-Cache-La3
X-IN-APIGATEWAYSSL
X-Dw-Trace-Id
X-Cdn-Request-ID
X-Check-Cacheable
Expect-Staple
X-Serial
X-Shop-Environment
X-RAMCache
Akamai-Cache-Status
X-Orig-Expires
X-Akamai-Pragma-Client-IP
X-Th-Server
X-Ramcache
X-Cache-Type
X-Requestid
X-CF-Lambda-Fn
Xkey-La3
Xkeylog
X-Snapshot-Date
X-Tenant
Ngx
X-CF-Lambda-Version