Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
Pragma
X-Powered-By
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
P3P
Alt-Svc
X-Cache-Hits
X-UA-Compatible
X-Xss-Protection
X-Served-By
CF-Ray
X-Download-Options
X-Timer
Access-Control-Allow-Headers
X-Request-Id
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Generator
X-Cache-Status
X-Check
X-Cacheable
X-Envoy-Upstream-Service-Time
X-DNS-Prefetch-Control
X-Request-ID
Timing-Allow-Origin
X-Iinfo
X-FRAME-OPTIONS
X-Dns-Prefetch-Control
X-Drupal-Dynamic-Cache
Feature-Policy
X-Content-Security-Policy
Content-Encoding
Access-Control-Expose-Headers
Upgrade
Status
X-CDN
X-AspNetMvc-Version
Server-Timing
X-XSS-PROTECTION
Access-Control-Max-Age
X-Amz-Request-Id
Request-Context
X-Amz-Id-2
X-Turbo-Charged-By
X-AH-Environment
X-Via
X-Robots-Tag
X-Backend
X-Cache-Group
Cf-Edge-Cache
Keep-Alive
Host-Header
X-Proxy-Cache
X-Hacker
X-UA-Device
X-Server
X-Rq
X-Server-Powered-By
X-Age
Allow
X-Vhost
X-Varnish-Cache
X-Ws-Request-Id
EagleId
X-Dispatcher
X-Amz-Version-Id
X-LiteSpeed-Cache
Grace
Cf-Apo-Via
P3p
Nel
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Page-Speed
X-Device
Cf-Railgun
EagleEye-TraceId
X-Aws-Lambda-Call-Status
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
Accept-CH
X-Pingback
X-Host
X-Node
X-WebKit-CSP
X-Server-Id
X-OneAgent-JS-Injection
Surrogate-Control
X-Backend-Server
X-CST
X-Nginx-Cache-Status
X-Readtime
X-Akam-SW-Version
X-Cache-Lookup
Permissions-Policy
X-Content-Security-Policy-Report-Only
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
Request-Id
X-Application-Context
X-Nginx-Upstream-Cache-Status
X-Cloud-Trace-Context
X-Trace
X-Response-Time
X-Edge
Accept-CH-Lifetime
X-HW
Accept-Ch-Lifetime
X-Ua-Compatible
Content-Location
X-Mod-Pagespeed
X-Clacks-Overhead
X-Oneagent-Js-Injection
X-Midtier
X-ECACHE
X-Url
X-ESI
Rating
X-Amz-Server-Side-Encryption
X-Mcache
Xkey
X-Country
X-Ruxit-JS-Agent
X-Upstream
X-Ruxit-Js-Agent
X-Litespeed-Cache
X-Vcap-Request-Id
X-Vname
X-PC
X-TtlSet
Cache-Tag
X-D2id
X-Rack-Cache
X-MS-InvokeApp
X-Exp-Variant
X-Element-Page-Cache
X-Exp-Id
X-Kinja-Server
X-Cdn-Fetch
Verso
X-Use-Magma
X-Kinja-Revision
X-Kinja
X-Kinja-Build
X-GoogleNews-Bot
Edge-Control
X-Cache-TTL
Fastly-Restarts
RTSS
X-Powered-By-Plesk
X-VARITI-CCR
Origin-Trial
X-Ac
X-Navigation-Version
X-Abt-Application-Version
X-Content-Type
X-Cached
X-Goog-Hash
Service-Worker-Allowed
Accept-Ch
X-Country-Code
X-GitHub-Request-Id
Pagespeed
Display
X-Middleton-Display
X-Amz-Rid
X-Sol
X-Browser-Type
X-Ttl
X-Mg-S
X-Dw-Request-Base-Id
X-WebKit-CSP-Report-Only
X-Server-Name
X-SharePointHealthScore
SPRequestGuid
Cross-Origin-Opener-Policy
X-Varnish-TTL
Arr-Disable-Session-Affinity
X-Erf-Bev-Bev
X-Instrumentation
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Webkit-CSP
X-Erf-Bev-Bev-Is-Generated
X-Powered-CMS
X-Amzn-Trace-Id
X-Middleton-Response
Response
AR-Request-ID
AR-SID
AR-PoweredBy
AR-ATIME
X-B3-TraceId
SPIisLatency
SPRequestDuration
X-Cache-Key
AR-CACHE
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Fastly-Request-ID
X-Fastcgi-Cache
X-HP-Trace-Id
X-Version
X-HP-Webp
X-Jurisdiction
X-Cnection
X-ORACLE-DMS-RID
X-ORACLE-DMS-ECID
X-Accel-Expires
Cache-Tags
X-T
Cache-Status
Front-End-Https
X-Client-IP
Edge-Cache-Tag
X-MSEdge-Ref
X-Pinterest-Rid
Pinterest-Version
Pinterest-Generated-By
X-Px
X-Ser
X-B3-Traceid
X-Hits
X-Times
Nginx-Cache
X-NWS-LOG-UUID
X-NF-Request-ID
Public-Key-Pins
X-Recruiting
X-B3-TraceId-Primal
X-RateLimit-Remaining
MRF-Tech
Mrf-Cache-Status
X-LLID
X-Frontend
X-Request-Processing-Time
X-Request-Received
Server-Node
Payment
X-Kinja-CCPA
X-Shield-Request-Id
X-Webkit-CSP-Report-Only
X-Ua-Browser
X-Ua-Device
Access-Control-Request-Method
X-DIS-Request-ID
X-Erf-Stays-Pdp-Viaduct-Migration-Web
TP-Cache
X-RateLimit-Limit
X-Goog-Metageneration
S
X-HS-Combine-CSS
X-HS-Hub-Id
X-HS-Cache-Config
X-HS-Content-Id
MicrosoftSharePointTeamServices
X-LB-Cache
TP-L2-Cache
X-Content-Digest
X-PressLabs-Stats
Content-MD5
X-Distributor
Realpath
X-Microsite
X-Request-Handler-Origin-Region
X-Ezoic-Cdn
X-Hostname
X-Forwarded-For
X-FastCGI-Cache
Access-Control-Allow-Method
X-FB-Debug
Fastcgi-Cache
Accept-Charset
X-GUploader-UploadID
X-Geo-Country
X-Cluster-Name
X-Page-Id
X-Protected-By
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Rid
X-Seen-By
X-Envoy-Decorator-Operation
X-Ratelimit-Remaining
X-B3-Sampled
Cleartype
TCN
X-TTL
X-Correlation-Id
DC
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-Newrelic-App-Data
Referer-Policy
X-TEC-API-VERSION
X-TEC-API-ROOT
X-Mobile
X-TEC-API-ORIGIN
X-Origin-Server
X-Debug-Info
X-Origin-Cache
Cross-Origin-Resource-Policy
X-Ratelimit-Limit
X-Varnish-Backend
X-Git-Hash
X-Logged-In
X-XRDS-Location
X-Webkit-Csp
X-Contextid
X-Azure-Ref
X-Kinsta-Cache
X-Edge-Location-Klb
X-Varnish-Grace
X-Amz-Replication-Status
Surrogate-Key
X-App-Environment
X-Fb-Rlafr
X-Revision
X-Route-Name
X-Aspnet-Version
X-Request-Guid
X-Providence-Cookie
X-Grace
X-Is-Crawler
X-Aspnet-Duration-Ms
X-Flags
X-Content-Options
Count-Hit
X-TT
Alternate-Protocol
X-Amz-Meta-S3cmd-Attrs
X-IPS-LoggedIn
Healthy
X-Server-ID
X-Forwarded-Proto
X-Wix-Request-Id
X-App-Server
Frame-Options
X-Hosted-By
X-Whom
Charset
MS-Author-Via
WPO-Cache-Status
WPO-Cache-Message
X-Akamai-Edgescape
Viewport
X-Daa-Tunnel
X-Id
Filterid
Retry-After
Paypal-Debug-Id
X-B
X-Magnolia-Registration
X-Backend-Name
Section-Io-Cache
X-F-Cache
X-Cache-Age
X-Kong-Proxy-Latency
X-Client-Ip
X-Kong-Upstream-Latency
X-Az
X-AppVersion
SRV
X-Trace-Id
X-Activity-Id
X-Proxy-Cache-Info
X-Cache-Control
X-Www-Served-By
Server-Name
X-Time
X-Type
X-RateLimit-Reset
X-Nf-Request-Id
X-App-Version
X-Varnish-Server
X-Response-Served-From
X-Instance
X-ARC
SD-X-WS
X-Http-Reason
X-Rule
Refresh
X-Original-Request-Id
VIX-Pulpo-Node
X-Cache-Rule
Host
Akamai-GRN
X-Proxy
VIX-Pulpo-Upstream-Status
X-Rocket-Nginx-Serving-Static
Protected
X-Edge-Location
Front
X-Varnish-Age
X-User-Agent
X-Status
X-Akamai-Request-ID2
X-UUID
X-Cache-Grace
X-Unique-Id
Fastly-SIE
Fastly-SWR
X-FW-Dynamic
X-Framework
X-Cacheable-TTL
From-Origin
X-FW-Hash
X-Environment-Context
X-FW-Server
X-FW-Serve
X-Region
X-L-Path
Version
X-Jobs
X-FW-Type
X-FW-Version
X-FW-Static
X-Page-View
Amp-Access-Control-Allow-Source-Origin
X-Adobe-Loc
X-Oracle-Dms-Ecid
X-Cache-Time
X-N
X-Adobe-Content
X-EdgeConnect-Cache-Status
Access-Control-Request-Headers
X-RemovedCookies
X-Is-Bot
X-Tumblr-Pixel-0
X-Oracle-Dms-Rid
X-Tumblr-Pixel
X-Rendered-As
X-G
X-Tumblr-Pixel-1
X-ProcessESI
X-Tumblr-User
X-Language
X-Load-Cache
X-COUNTRY
ServerID
X-Source
Country
X-Datadog-Sampling-Priority
X-Vcache
Content-Disposition
X-Datadog-Parent-Id
X-Datadog-Trace-Id
X-Upgrade-Enabled
X-CDN-Forward
X-Varnish-Ttl
X-Xrds-Location
X-Drupal-Cache-Tags
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-HTML-Minification-Powered-By
X-Datadog-Sampled
Countrycode
X-Amzn-Remapped-Content-Length
Accept-Language
X-Mg-Request-UUID
X-Debug-IsConnected
X-Debug-IsPreview
X-DynaTrace
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-Generated-By
X-DynaTrace-JS-Agent
X-Signature
Backend
X-B-Cache
Xet-Cookie
X-ID
CF-IPCountry
X-Nginx-Cache
X-WP-CF-Super-Cache-Cache-Control
Webserver
X-WP-CF-Super-Cache
Liferay-Portal
Xserver
X-DataDome
X-ECache
X-Tt-Logid
X-Httpd
X-Servername
X-NYM-Debug-Backend
X-Device-Type
X-Mode
X-Tec-Api-Origin
X-Tec-Api-Root
Url
X-Content-Powered-By
X-Drupal-Cache-Contexts
X-Tec-Api-Version
X-Zen-Fury
X-B3-SpanId
X-Content-Age
X-Erf-Web-Scheduler
Azure-SlotName
Azure-RegionName
GEO-INFO
X-Tb
Filters
Load-Balancing
Azure-SiteName
Meta-Geo
Azure-InstanceId
Locale
Azure-Version
Fastcgi-Useragent
X-GeoCode
X-Urbn-Site-Id
X-Proto
X-Urbn-Context-Path
X-UPSTREAM-Address
Onion-Location
X-Sucuri-ID
X-Varnish-Cache-Hits
X-Rewrite-Enabled
X-SayCDN-TTL
X-Say-TTL
X-Cache-Operation
X-ServerID
X-SaId
X-Say-Cacheable
X-LAGOON
X-Sucuri-Cache
X-Git-Commit
X-JoinUs
X-GeoCountry
X-Cache-Action
S-Rt
X-Container-Uri
X-RM-Cache-TTL
X-Varnish-Hostname
Uber-Trace-Id
X-VC-Cache
X-Director
X-Cluster-Node
X-Forwarded-Host
X-Labrador-Cache-Channel
X-PHP-Host
X-Adobe-Source
X-VCT
X-Ms-Request-Id
X-Served-From
X-Storage
X-Ms-Version
X-Sql-Duration-Ms
X-Soup
X-Generation-Time
X-Sql-Count
X-Logging-Id
X-Cache-Server
Web-Mar-Node
TWC-GeoIP-LatLong
TWC-Locale-Group
TWC-Privacy
Webcakes-App-Name
TWC-GeoIP-Country
TWC-Device-Class
Mn-Server-Ip
Node
Property-Id
TWC-Connection-Speed
Webcakes-App-Version
Webcakes-Region
X-R9-Blue-Green-Version
X-Routing-Service
X-Skip-Cache
X-Zipkin-Id
X-Proxied
X-Origin-Hint
X-Debug
X-Extlb
X-FB-TRIP-ID
DB-Nickname
X-RCS-CacheZone
X-Uri
X-Timing-Wait
X-Tumblr-Pixel-2
X-Tumblr-Pixel-3
Selected-Fe
X-Proxy-Build
X-Fetched-On
X-LSADC-Cache
X-Format
X-Detected-As
X-Template
X-Lambda-Id
X-TimeS
Fastly-Drupal-HTML
OT-Force-Account-Verify
Source
X-Origin-Date
X-MP-GENERATED-AT
CDN-RequestId
X-URL
X-Loop
X-Srv
X-Ratelimit-Reset
X-Tncms
X-Cache-Expired-At
X-Cache-Hit
X-XRDS-LOCATION
X-Pass-Why
X-MCACHE
X-Varnish-Hits
X-Endurance-Cache-Level
X-Redis-Cache
X-Ua
Content-Secure-Policy
X-Cache-TTL-Remaining
X-UA-Device-Type
Upgrade-Insecure-Requests
X-NGENIX-Cache
X-Via-JSL
Cross-Origin-Window-Policy
X-Real-IP
X-Datadome
X-AIR-PT
X-Pubstack
X-CCDN-CacheTTL
X-Hcs-Proxy-Type
X-Origin-CC
X-Origin-TTL
X-Node-Name
Section-Io-Id
X-CCDN-Origin-Time
Section-Io-Origin-Time-Seconds
Section-Io-Origin-Status
Section-Origin-Responded
X-Server-W
X-Fastly-Request-Id
X-S
NGB
Cache-Hits
X-Rn-Rsrv
X-Cache-Host
Cache-Provider
X-CSRF-Token
CDN-PullZone
CDN-RequestCountryCode
CDN-Uid
CDN-EdgeStorageId
CDN-RequestPullSuccess
X-RTag
Cache-Name
Ms-Operation-Id
MS-CV
X-PHP-Backend
CDN-Cache
CDN-CachedAt
CDN-RequestPullCode
X-IPLB-Instance
X-IPLB-Request-ID
Apigw-Requestid
X-Reqid
X-Restarts
X-Cms-Context
X-Akamai-Transformed
X-Xfnlog-Site
X-Cache-Type
X-Hl-Ver
X-Optimistic-Header
X-GEO
X-Newrelic-Synthetics
X-ProxyCache-Status
X-BYPASS-REASON
X-Parent-Response-Time
X-ProxyCache-Key
X-Aspnetmvc-Version
X-No-Session
X-Correlation-ID
Fastly-Backend-Name
N-Cache
X-SRCache-Key
DCR-Processing-Time-Ms
X-A-Ccd
X-A
Meta-Geo-Continent
Fastly-SSL
Fastly-GeoIP-CountryCode
Web-Mar-Region
X-A-Dcw
DCR-Decision-By
Canary
Ngx.Var.Host
Redirect-Candidate
Odigeo-Trace-Id
Candidate-Md5Url
Rendered-Blocks
CPC-Cache
CPC-Age
Server-Host
We-Hiring
W
Mail-Subject
T-Server
X-Slack-Shared-Secret-Outcome
True-Client-Country-4JS
Surrogated-Key
Magicmarker
L5d-Success-Class
Sslversion
L
X-A-Dgt
MD5-Digest
VNS-Age
Gh-Request-Id
VNS-Cache
Gannett-Cam-Experience-Id
X-Shop-Environment
Ha-Gx-Prefs
Vix-Hermes-Req-Id
HA-Ipaddr
X-Slack-Backend
Lang
X-Cache-Info
X-Rojux
X-Ec-GeoHdr
X-Ec-Fail
X-Request-Host
X-Epic-Correlation-Id
X-External-Request-Id
X-Eu-Site
X-S-Cookie
X-Wikidot-Static-Cache
X-Vtex-Remote-Cache
X-Developer
X-Wix-Viewer-Type
X-Dispatcher-Number
X-ScT
X-Ec-Custom-Error
X-Fastly-Backend
X-FC-Vary-Parameters
X-Is-Gdpr
X-We-Are-Hiring
X-JWT-State
X-Mvc-Supplant-Cachable
X-Orig-Expires
X-Nyt-Route
X-Wikidot-Backend
X-Policy
X-RateLimit-Remaining-Second
X-Forwarded-Path
X-Gdpr
X-Has-Esi
X-RateLimit-Limit-Second
X-Irp-Debug
X-Worker
BehaviorPad-Version
X-Origin-Time
X-Cache-Bucket
X-Bl-Debug
X-Cache-NE
X-CacheTTL
X-Var-Ttl
X-SD-PageType
X-Tenant
X-BCube-Filmed-By
X-Accel-Expires-Debug
X-Accel-Buffering
X-Aed
X-Application
X-Bc-Bl
X-B-Cookie
X-Vdms-Path
X-Vdms-Version
Xc-Version
X-Date
X-Debug-Cache-Fetch
X-Debug-Cache-Store
X-Viewer-Country
X-Destination
X-D
X-Csrf-Jwt
X-CF-Lambda-Fn
X-Cdn-Diag
X-VG-WebCache
X-CF-Lambda-Version
X-Conf
X-CGP
X-A-Wwc
X-A-Dam
X-Handled-By
X-LJ-Flow-ID
X-AWS-Id
X-Cluster
X-Via-Fastly
X-CACHE-AGE
X-VWS-Id
X-Section
X-Access
Thinkindot-CacheControl-Type
X-Forwarded-Site
X-Fmm-Version
X-Esi-Check
Thinkindot-Control
X-Generated-On
X-DPWN-IS-SECURE
X-Geo-Header
X-Human
X-INCAP-ABP
AKAMAI
X-Hash
X-Gzip
X-GeoIP-Region-Code
Thinkindot-CacheControl
X-GeoIP-Country-Code
X-DefHash
X-Bip
X-Cache-Id
X-Cdn-Origin
X-BBC-Edge-Cache-Status
X-Auto-Login
X-ApacheServer
X-App-Name
X-Clara-WADP
X-Clientip
X-DefElseHash
X-Alternate-Cache-Key
X-Loc
X-Core-Value
X-CMSURLCustom
X-Core-Mission
X-Proxy-Cache-Status
X-Nitro-Cache
X-Test
X-Thanos
X-Thinkindot-L3
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Storefront-Renderer-Rendered
X-Up
X-Variation
X-Vmg-Version
X-VServer
X-WADP-Cache
X-VG-TLSProxy
X-Varnishpool
X-Varnish-CookieHashed-On
X-Varnish-CookieINHashed-On
X-Varnish-Remaining-TTL
X-Sn-Servicetimems
X-Shopify-Stage
X-Origin-Response-Time
X-Owner
X-PAYTM-SRV-ID
X-Org
X-Old-Content-Length
X-Mly-Id
TDXMobile
X-Node-Id
X-PERF
X-Platform
X-Server-IP
X-ShardId
X-ShopId
X-S-Maxage
X-Request-Time
X-Pool
X-Qloud-Router
X-Mid
X-Level-Front-Cache
Memcached
Machine
Origin
Platform
Release
Producers
Is-Eu
Host-ID
Cmsid
Adler-Geo
Cmstype
Datacenter
Expect-Staple
ServedBy
Req-Svc-Chain
Environment
User-Cache-Control
AMP-Access-Control-Allow-Source-Origin
X-Device-Os
Apple-News-Services-Host
Apple-News-Services-Parsed-Url
NM-Fastcgi-Cache
X-Akamai-Device-Characteristics
X-WA-Info
DSUID
Apple-News-Services-Request-Url
Apple-News-Services-Handled
Country-Code
CloudFront-Viewer-Country
X-Block-Status
Sever-Int
X-Cache-Debug
X-Cdn-Srv
X-TA-CDN-Provider
CDCHOST
Server-Ext
X-TIM-N
X-Scale
X-Dispatcher-Server
Server-Hostname
X-Origin
X-Hnp-Log
X-NodeID
X-Mvc-Supplant-OutputCached
X-Nginx-Cache-Key
X-Gen-Mode
X-GeoIP
X-App
X-Nananana
Esi-Enabled
X-From
X-Vcl-Version
X-Tx-Id
X-Instance-Name
X-NCache
X-Cs
Pics-Label
C-Via
X-Op-Id-All
Server-Info
X-LB-NoCache
Ssr
X-Refresh
X-Presslabs-Stats
Origin-EX
Origin-CC
Wxu-Next-Hostname
Wxu-Next-Region
WP-Super-Cache
Wxu-Next-Commit
X-Cache-Enabled
X-Air-Source
X-Air-Trace-Id
X-Air-Hostname
X-Web-Node
X-Cache-Status-Check
Time
X-Amz-Meta-Cb-Modifiedtime
Memory
Server-ID
X-TIME
Hostname
X-HA-Backend
X-ZONE
X-Azure-Ref-OriginShield
X-API-Version
Cf-Device-Type
X-Dc
GeoIP-Latitude
Origin-Agent-Cluster
NGX
X-Tb-Optimization-Total-Bytes-Saved
X-Platform-Processor
X-Platform-Cluster
Cache-Host
X-Microcachable
X-Origin-Expires
X-Platform-Router
X-VHOST
X-Varnish-Beresp-Ttl
XM
X-Varnish-Beresp-Grace
X-CACHE-GROUP
X-Site-Version
Cdn-Requestid
X-Locale
X-VarnishDD-TTL
X-HN
PFcat
X-Fpc
X-Wp-Cf-Super-Cache-Active
X-DC
Resin-Trace
X-Ad-Defer-Variation
X-Vgn-Hpd-Reason
X-Micro-Cache
X-Internal-Host
Srvid
Locid
X-Webkit-Csp-Report-Only
X-FL-QIT-DEBUG
X-FL-EDGE
X-Via-Edge
Edge-Copy-Time
X-Via-CDN
A
X-Via-SSL
YJS-ID
X-TraceId
Sid
X-B3-Spanid
X-WP-CF-Super-Cache-Active
X-Zone
X-AB
X-Pod-Name
X-Upstream-Ht
True-Client-Ip
X-Cached-By
X-Upstream-Ct
X-ATG-Version
X-FireWall-Port
X-Github-Request-Id
X-Contensis-Viewer-Groups
X-Cache-ASPX
Location
X-Buckets
Cache-Key
X-B3-Parentspanid
X-Moov-Xdn-Version
X-Varnish-Authentication
User-Agent
X-Moov-T
X-DataCenter
GeoIP-Country-Code
X-Geo-Region
Uri
X-LiteSpeed-Cache-Control
X-Backend-Instance
IsBot
X-SIPLIST1
X-Info
X-FTR-Request-ID
X-Accel-Version
X-Nitro-Rev
X-Planisys-CDN-Cache
X-Platform-Server
State
X-NGINX-Cache
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
X-Nitro-Cache-From
CF-Ctrl
X-HS-Content-Campaign-Id
X-Datacenter
X-Is-Mobile
X-Tcp-Rtt
X-LiteSpeed-Tag
X-Is-Supported-Browser
X-Is-Tablet
X-Browser-Name
X-Is-Desktop
Lb
X-Provided-By
X-Geo
X-MSEdge-Features
X-Fastly-Cache
NtCoent-Length
GeoIp-Country-Code
X-Release
X-MSEdge-Flight
X-VC
X-VCache
SID
X-Rocket-Build-Number
Cdn
X-Sigma
X-Cache-Remote
X-Sigma-Backend
X-CS
X-RN-RSRV
XServer
X-NewRelic-App-Data
X-CSRF-TOKEN
X-Vgn-Hpd-Variations-Key
X-Vgn-Hpd-Cached
Cache
X-Vgn-Hpd-Ssi
Epwk-X-Cache
Path
True-Client-IP
X-Hyper-Cache
X-Api-Version
X-HS-Status
X-GeoIP-City
X-TRACE-ID
X-Gamma-Serve
X-Generated-In
X-Scheme
X-Service
Fastly-Drupal-Html
X-FPC
X-Frame-Option
X-Webstats-RespID
X-HostName
Tcn
X-GoCache-CacheStatus
Ohc-File-Size
Cache-Tv-Group
X-SRV
X-UA
Cf-Ipcountry
CountryCode
Serverid
X-Rebelmouse-Surrogate-Control
X-APP-VERSION
X-Rebelmouse-Cache-Control
Kp-EeAlive
X-Esi
X-Pad
Cdncip
Cdnsip
X-EC-Lua
X-Air-Pt
X-AK-Request-ID
X-Amz-Meta-Opti
X-Guploader-Uploadid
Srv
X-Wp-Cf-Super-Cache
Cdn-Host
X-Wp-Cf-Super-Cache-Cache-Control
X-Vercel-Id
X-Mobile-URL
X-Vercel-Cache
X-Location
Cdn-Request-Time
X-Branch-Name
X-Cache-Ttl
WebServer
HostName
X-Origin-Cache-Key
X-Edge-Server
X-Traceid
X-Wp-Cf-Super-Cache-Cookies-Bypass
M-TraceId
X-Cdn-Cache-Status
Req-ID
Env
X-FTR-Balancer
Yak-Timeinfo
X-Men
X-NMSegId
X-Proxy-CacheRZ
XkeyRZ
X-Country-Code-Real
X-Vc
X-FTR-Expires
WZWS-RAY
Proxy-Connection
X-Region-Sid
X-Developers
X-Cache-Tags
X-FTR-Cache-Status
Ohc-Cache-HIT
X-Aicache-OS
X-FTR-Backend-Server
On-Server
X-FTR-Backend
CacheControlHeader
X-VCL-Version
CDN
X-CACHE-KEY
X-Cdn-Request-ID
X-TX-ID
X-CDN-Cache-Status
Tube-Got-Results
X-Via-Popn
X-Via-Popv
X-Via-Poph
X-Akamai-Pragma-Client-IP
Click-Count-Error
X-V-Cache
X-LB-ID
Geoip-Latitude
X-Nc
X-Cache-FS-Status
Click-Count-Action-Start
Cluster
Tube-Get-Contents
X-Ad-Load-Variation
X-Servedbyhost
X-Edge-Pop
RNT-Time
X-Minions-Version
Ngx
X-Req
Tube-Got-Eval
X-SB
X-B3-Trace-ID
V-Age
X-Wa
LB
X-NWS-UUID-VERIFY
X-Cdn-Forward
RNT-Machine
X-Acquia-Purge-Cdn-Unconfigured
Tube-Return
Mime-Version
X-Lb-Cache
Server-Id
Pramga
X-Request-Start
X-Scope-Id
X-M-Reqid
X-M-Log
ENV
X-Fastly-Country-Code
X-WP-CF-Super-Cache-Cookies-Bypass
WWW-Authenticate
CF-Cached-On
Content-Style-Type
Content-Script-Type
X-Ha-Backend
X-TT-LOGID
X-IN-APIGATEWAY
X-User
X-Dw-Trace-Id
X-Via-Ucdn
X-Edge-POP
X-Check-Cacheable
X-IN-APIGATEWAYSSL
X-Snapshot-Date
X-MiniProfiler-Ids
X-Lb-Nocache
X-Acquia-Purge-Tags
X-Acquia-Site
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-Varnish-Beresp-Status
X-Shield-Cache-Expires
X-Tim-N
PICS-Label
X-Qnm-Cache
X-Request-URI
Yjs-Id
X-APP
X-TH-Server
X-Processor
X-Ckpd-Fst-Backend
X-Miniprofiler-Ids
X-Cached-Since
Vha6-Origin
X-ElasticPress-Query
X-Litespeed-Cache-Control
Log-Origin
X-Fastly-Cache-Hits
Inserted-Into-Cache-At
Cneonction
X-Iauth-Set-Uid
CACHE-MISS-TO-ORIGIN
X-RAMCache
X-Fastly-Backend-Reqs