Threat Level: green Handler on Duty: Jim Clausing

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
Pragma
X-Powered-By
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
P3P
X-Cache-Hits
X-UA-Compatible
Alt-Svc
X-Xss-Protection
X-Served-By
CF-Ray
X-Download-Options
X-Timer
Access-Control-Allow-Headers
X-Request-Id
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Generator
X-Cache-Status
X-Check
X-Cacheable
X-Envoy-Upstream-Service-Time
X-Request-ID
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-FRAME-OPTIONS
X-Iinfo
X-Dns-Prefetch-Control
X-Drupal-Dynamic-Cache
Feature-Policy
X-Content-Security-Policy
Content-Encoding
Access-Control-Expose-Headers
Upgrade
Status
X-CDN
X-AspNetMvc-Version
X-XSS-PROTECTION
Server-Timing
Access-Control-Max-Age
X-Amz-Request-Id
Request-Context
X-Amz-Id-2
X-Turbo-Charged-By
X-AH-Environment
X-Via
X-Robots-Tag
X-Backend
X-Cache-Group
Cf-Edge-Cache
Host-Header
Keep-Alive
X-Proxy-Cache
X-Hacker
X-Server
X-Rq
X-Age
X-UA-Device
X-Server-Powered-By
Allow
X-Vhost
X-Varnish-Cache
X-Ws-Request-Id
EagleId
X-Dispatcher
X-Amz-Version-Id
Grace
P3p
Cf-Apo-Via
X-LiteSpeed-Cache
Nel
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Page-Speed
X-Device
Cf-Railgun
EagleEye-TraceId
X-Swift-SaveTime
X-Swift-CacheTime
X-Aws-Lambda-Call-Status
Ali-Swift-Global-Savetime
Accept-CH
X-Pingback
X-Node
X-Host
X-WebKit-CSP
X-Server-Id
Surrogate-Control
X-Backend-Server
X-OneAgent-JS-Injection
X-CST
X-Readtime
X-Nginx-Cache-Status
X-Akam-SW-Version
X-Content-Security-Policy-Report-Only
X-Cache-Lookup
Permissions-Policy
Request-Id
X-Application-Context
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Nginx-Upstream-Cache-Status
X-Cloud-Trace-Context
X-Trace
X-Response-Time
X-Edge
X-HW
Accept-CH-Lifetime
Accept-Ch-Lifetime
X-Ua-Compatible
X-Mod-Pagespeed
Content-Location
X-Url
X-Oneagent-Js-Injection
X-Clacks-Overhead
X-Litespeed-Cache
X-Ruxit-JS-Agent
X-Midtier
X-ECACHE
X-ESI
Rating
X-Amz-Server-Side-Encryption
X-Mcache
X-Country
X-Upstream
X-PC
X-TtlSet
X-Vname
Xkey
X-Vcap-Request-Id
X-Rack-Cache
Cache-Tag
X-D2id
X-MS-InvokeApp
Verso
X-Cdn-Fetch
X-Use-Magma
X-Kinja
X-Kinja-Server
X-Element-Page-Cache
X-GoogleNews-Bot
X-Kinja-Revision
X-Kinja-Build
X-Exp-Id
X-Exp-Variant
X-Cache-TTL
Fastly-Restarts
Edge-Control
RTSS
X-Content-Type
X-Powered-By-Plesk
X-VARITI-CCR
Origin-Trial
X-Ac
X-Navigation-Version
Accept-Ch
X-Cached
X-Abt-Application-Version
X-Goog-Hash
X-Ruxit-Js-Agent
Service-Worker-Allowed
X-Country-Code
X-GitHub-Request-Id
X-Amz-Rid
X-Ttl
X-Middleton-Display
Pagespeed
Display
X-Sol
X-WebKit-CSP-Report-Only
X-Mg-S
X-Dw-Request-Base-Id
X-Browser-Type
X-B3-TraceId
SPRequestGuid
X-SharePointHealthScore
X-Server-Name
Cross-Origin-Opener-Policy
Arr-Disable-Session-Affinity
X-Kraken-Loop-Name
X-Instrumentation
X-Erf-Bev-Bev-Is-Generated
X-Server-Lifecycle-Phase
X-Erf-Bev-Bev
X-Ua-Device
X-Powered-CMS
AR-ATIME
AR-PoweredBy
AR-Request-ID
AR-SID
Response
X-Varnish-TTL
X-Middleton-Response
X-Amzn-Trace-Id
SPRequestDuration
SPIisLatency
X-Cache-Key
AR-CACHE
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Webkit-CSP
X-Fastly-Request-ID
X-Times
X-Cnection
X-HP-Webp
X-Jurisdiction
X-Version
X-HP-Trace-Id
X-Accel-Expires
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
Front-End-Https
X-T
Cache-Tags
Cache-Status
Edge-Cache-Tag
X-Client-IP
X-Ser
X-MSEdge-Ref
X-Px
X-Pinterest-Rid
Pinterest-Generated-By
X-NF-Request-ID
Pinterest-Version
Public-Key-Pins
X-Hits
Nginx-Cache
X-Fastcgi-Cache
X-Recruiting
Mrf-Cache-Status
X-B3-TraceId-Primal
MRF-Tech
X-Shield-Request-Id
X-LLID
X-Request-Received
X-Request-Processing-Time
X-Frontend
Server-Node
X-NWS-LOG-UUID
X-Ua-Browser
Payment
Access-Control-Request-Method
X-FastCGI-Cache
X-Webkit-CSP-Report-Only
X-DIS-Request-ID
TP-Cache
X-B3-Traceid
X-RateLimit-Remaining
MicrosoftSharePointTeamServices
X-Goog-Metageneration
X-HS-Hub-Id
X-HS-Cache-Config
X-HS-Combine-CSS
X-HS-Content-Id
X-Ratelimit-Remaining
S
X-Erf-Stays-Pdp-Viaduct-Migration-Web
TP-L2-Cache
X-Content-Digest
X-LB-Cache
X-Kinja-CCPA
X-Distributor
Content-MD5
X-Geo-Country
Realpath
X-PressLabs-Stats
X-Microsite
X-Request-Handler-Origin-Region
X-Hostname
X-Server-ID
X-Ezoic-Cdn
X-FB-Debug
Access-Control-Allow-Method
X-Forwarded-For
X-Page-Id
X-GUploader-UploadID
Fastcgi-Cache
Accept-Charset
X-RateLimit-Limit
X-Cluster-Name
X-Rid
X-Envoy-Decorator-Operation
X-Seen-By
X-Protected-By
X-Amzn-RequestId
X-Amz-Apigw-Id
X-Ratelimit-Limit
TCN
Cleartype
X-B3-Sampled
X-Correlation-Id
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
DC
X-Origin-Server
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Newrelic-App-Data
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
X-Debug-Info
Referer-Policy
X-Mobile
X-Origin-Cache
X-XRDS-Location
X-Varnish-Backend
X-Webkit-Csp
X-TTL
X-Logged-In
X-Git-Hash
Cross-Origin-Resource-Policy
X-Aspnet-Version
X-Edge-Location-Klb
X-Kinsta-Cache
X-Azure-Ref
Alternate-Protocol
X-Contextid
X-Varnish-Grace
X-Is-Crawler
X-Grace
X-Fb-Rlafr
X-Providence-Cookie
X-Flags
X-Request-Guid
X-App-Environment
Surrogate-Key
X-Amz-Replication-Status
X-Aspnet-Duration-Ms
X-Route-Name
X-Revision
Healthy
X-TT
X-Content-Options
X-Amz-Meta-S3cmd-Attrs
Count-Hit
X-Wix-Request-Id
X-IPS-LoggedIn
X-Whom
X-Forwarded-Proto
Charset
Frame-Options
MS-Author-Via
X-Akamai-Edgescape
X-App-Server
Viewport
WPO-Cache-Message
WPO-Cache-Status
Filterid
X-Hosted-By
X-Aspnetmvc-Version
X-Id
X-B
Paypal-Debug-Id
X-Magnolia-Registration
X-Client-Ip
X-Cache-Age
X-Backend-Name
X-Daa-Tunnel
X-Kong-Proxy-Latency
Section-Io-Cache
X-Kong-Upstream-Latency
X-Trace-Id
X-Cache-Control
Retry-After
Amp-Access-Control-Allow-Source-Origin
X-Az
X-Activity-Id
X-AppVersion
X-Varnish-Ttl
X-Www-Served-By
X-F-Cache
Server-Name
X-Proxy-Cache-Info
X-Type
Refresh
Version
X-Varnish-Server
SRV
X-Proxy
X-Oracle-Dms-Ecid
VIX-Pulpo-Upstream-Status
X-ARC
VIX-Pulpo-Node
SD-X-WS
X-Http-Reason
Host
X-Response-Served-From
X-Rule
X-Time
X-Original-Request-Id
X-App-Version
X-Cache-Rule
X-Oracle-Dms-Rid
X-Instance
Akamai-GRN
X-Status
X-UUID
Protected
X-Varnish-Age
Front
X-User-Agent
X-Akamai-Request-ID2
X-EdgeConnect-Cache-Status
X-Rocket-Nginx-Serving-Static
X-Cache-Grace
X-Upgrade-Enabled
X-Edge-Location
Fastly-SWR
From-Origin
X-FW-Hash
X-L-Path
X-Jobs
X-Is-Bot
X-Page-View
X-Region
X-Unique-Id
X-Rendered-As
X-FW-Version
X-FW-Type
X-Framework
X-Environment-Context
X-FW-Dynamic
X-FW-Serve
X-FW-Static
X-FW-Server
X-Cacheable-TTL
Fastly-SIE
X-COUNTRY
X-N
X-Adobe-Content
Access-Control-Request-Headers
X-Cache-Time
X-Adobe-Loc
X-Tumblr-Pixel
X-G
X-Tumblr-Pixel-1
X-ProcessESI
X-RemovedCookies
X-Tumblr-Pixel-0
X-Tumblr-User
X-Source
X-Load-Cache
ServerID
X-Nf-Request-Id
Content-Disposition
X-Drupal-Cache-Tags
Country
X-Datadog-Parent-Id
X-Language
X-Datadog-Sampling-Priority
X-CDN-Forward
X-Datadog-Trace-Id
X-Vcache
X-HTML-Minification-Powered-By
X-Yottaa-Optimizations
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-Yottaa-Metrics
X-DataDome
X-RateLimit-Reset
Accept-Language
X-Datadog-Sampled
Countrycode
X-DynaTrace
X-Amzn-Remapped-Content-Length
X-Xrds-Location
X-Debug-IsConnected
X-Debug-IsPreview
X-ID
X-Mg-Request-UUID
Liferay-Portal
X-Generated-By
X-DynaTrace-JS-Agent
X-ECache
X-B3-SpanId
Backend
Xet-Cookie
X-WP-CF-Super-Cache
X-WP-CF-Super-Cache-Cache-Control
CF-IPCountry
X-Drupal-Cache-Contexts
X-B-Cache
X-Tt-Logid
Webserver
Xserver
X-Signature
X-Httpd
X-NYM-Debug-Backend
X-Ratelimit-Reset
X-Mode
X-Nginx-Cache
X-Device-Type
X-Erf-Web-Scheduler
X-Content-Powered-By
X-Zen-Fury
X-Content-Age
X-Servername
GEO-INFO
Url
X-Rewrite-Enabled
Locale
Filters
Fastcgi-Useragent
X-Director
Onion-Location
Meta-Geo
X-Urbn-Context-Path
X-Tb
X-LAGOON
X-UPSTREAM-Address
X-Sucuri-Cache
Azure-SlotName
X-Container-Uri
X-Cache-Action
X-Urbn-Site-Id
Azure-Version
Load-Balancing
X-Sucuri-ID
X-Cache-Operation
X-SayCDN-TTL
Azure-InstanceId
Azure-RegionName
X-GeoCode
X-Proto
X-Say-TTL
X-Say-Cacheable
X-Varnish-Cache-Hits
X-ServerID
X-Git-Commit
X-SaId
X-GeoCountry
S-Rt
Azure-SiteName
X-JoinUs
X-Labrador-Cache-Channel
X-VC-Cache
X-PHP-Host
X-Forwarded-Host
X-Soup
X-RM-Cache-TTL
Uber-Trace-Id
X-Varnish-Hostname
X-Cluster-Node
Web-Mar-Node
X-VCT
X-Storage
X-Generation-Time
X-Ms-Version
X-Logging-Id
X-Ms-Request-Id
X-Sql-Duration-Ms
X-Sql-Count
X-Adobe-Source
X-Detected-As
X-Cache-Server
X-Served-From
Mn-Server-Ip
Property-Id
Node
X-RCS-CacheZone
X-Zipkin-Id
X-Proxied
X-R9-Blue-Green-Version
DB-Nickname
X-Origin-Hint
X-FB-TRIP-ID
X-Extlb
X-Skip-Cache
X-Routing-Service
X-Debug
TWC-Locale-Group
TWC-GeoIP-LatLong
TWC-Device-Class
TWC-Privacy
Webcakes-App-Name
Webcakes-Region
Webcakes-App-Version
TWC-Connection-Speed
TWC-GeoIP-Country
X-Tec-Api-Root
X-Tec-Api-Origin
X-Tec-Api-Version
X-Proxy-Build
Selected-Fe
X-Uri
X-Tumblr-Pixel-3
X-Tumblr-Pixel-2
X-Format
X-Timing-Wait
X-LSADC-Cache
X-Fetched-On
X-Lambda-Id
CDN-RequestId
Fastly-Drupal-HTML
X-Origin-Date
X-MP-GENERATED-AT
OT-Force-Account-Verify
Source
X-XRDS-LOCATION
X-Cache-Expired-At
X-Via-JSL
X-MCACHE
X-Template
X-Cache-Hit
X-Tncms
X-NGENIX-Cache
X-Loop
X-Varnish-Hits
X-Srv
Content-Secure-Policy
X-Pass-Why
X-Node-Name
X-Cache-TTL-Remaining
X-Endurance-Cache-Level
X-UA-Device-Type
X-Ua
X-AIR-PT
X-Pubstack
Upgrade-Insecure-Requests
X-Redis-Cache
X-Fastly-Request-Id
Cross-Origin-Window-Policy
X-Origin-CC
X-Real-IP
X-Server-W
X-Origin-TTL
Section-Io-Origin-Status
NGB
Section-Io-Id
X-PHP-Backend
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
X-CCDN-CacheTTL
X-Hcs-Proxy-Type
X-CCDN-Origin-Time
X-GEO
Cache-Hits
X-Cache-Host
Cache-Provider
X-S
X-RTag
Ms-Operation-Id
MS-CV
Cache-Name
CDN-CachedAt
CDN-EdgeStorageId
Apigw-Requestid
CDN-Cache
X-Optimistic-Header
X-Restarts
CDN-Uid
X-Reqid
X-Cms-Context
CDN-RequestPullSuccess
CDN-RequestPullCode
CDN-RequestCountryCode
X-Xfnlog-Site
CDN-PullZone
X-IPLB-Instance
X-IPLB-Request-ID
X-CSRF-Token
X-Cache-Type
X-Hl-Ver
X-Rn-Rsrv
X-ProxyCache-Status
X-BYPASS-REASON
X-ProxyCache-Key
X-No-Session
X-CACHE-AGE
X-Akamai-Transformed
X-Datadome
X-Newrelic-Synthetics
X-LJ-Flow-ID
X-Cluster
X-AWS-Id
X-Via-Fastly
X-VWS-Id
X-Accel-Buffering
Vix-Hermes-Req-Id
X-Accel-Expires-Debug
X-Wikidot-Static-Cache
X-A-Wwc
X-Aed
X-Wikidot-Backend
X-A-Dgt
X-A-Ccd
W
X-Wix-Viewer-Type
We-Hiring
X-A-Dam
X-Worker
X-A-Dcw
VNS-Age
VNS-Cache
Web-Mar-Region
Server-Host
Gannett-Cam-Experience-Id
Fastly-SSL
Gh-Request-Id
Ha-Gx-Prefs
L
HA-Ipaddr
Fastly-GeoIP-CountryCode
Fastly-Backend-Name
CPC-Age
Candidate-Md5Url
CPC-Cache
DCR-Decision-By
DCR-Processing-Time-Ms
L5d-Success-Class
Lang
Redirect-Candidate
Odigeo-Trace-Id
Rendered-Blocks
Sslversion
T-Server
Surrogated-Key
Ngx.Var.Host
N-Cache
Xc-Version
Magicmarker
Mail-Subject
MD5-Digest
Meta-Geo-Continent
True-Client-Country-4JS
X-Vtex-Remote-Cache
X-Epic-Correlation-Id
X-Ec-GeoHdr
X-Eu-Site
X-External-Request-Id
X-Fastly-Backend
X-Rojux
X-S-Cookie
X-Ec-Fail
X-Destination
X-Debug-Cache-Store
X-Developer
Canary
X-Ec-Custom-Error
X-Dispatcher-Number
X-FC-Vary-Parameters
X-Forwarded-Path
X-JWT-State
X-RateLimit-Limit-Second
X-Mvc-Supplant-Cachable
X-Nyt-Route
X-Policy
X-Orig-Expires
X-Is-Gdpr
X-Irp-Debug
X-GeoIP-Country-Code
X-Gdpr
X-Request-Host
X-GeoIP-Region-Code
X-Has-Esi
X-RateLimit-Remaining-Second
X-Debug-Cache-Fetch
X-ScT
X-VG-WebCache
X-Cache-Info
X-Cache-NE
X-CacheTTL
X-CF-Lambda-Fn
X-Cdn-Diag
X-Viewer-Country
X-Origin-Time
X-B-Cookie
X-Application
X-Bc-Bl
X-BCube-Filmed-By
X-Cache-Bucket
X-Bl-Debug
X-CF-Lambda-Version
X-Vdms-Version
X-D
X-Csrf-Jwt
X-Slack-Backend
X-Shop-Environment
X-SD-PageType
X-Date
X-Slack-Shared-Secret-Outcome
X-SRCache-Key
X-CGP
X-Vdms-Path
X-Var-Ttl
X-TIM-N
X-Conf
X-Tenant
X-We-Are-Hiring
X-A
BehaviorPad-Version
X-Section
X-Access
X-Proxy-Cache-Status
X-Esi-Check
X-DefHash
X-DefElseHash
X-Fmm-Version
X-DPWN-IS-SECURE
X-Forwarded-Site
X-INCAP-ABP
X-Level-Front-Cache
X-Loc
X-Human
X-Hash
X-Generated-On
X-Geo-Header
X-Handled-By
X-TA-CDN-Provider
X-Core-Mission
X-ApacheServer
X-App-Name
X-Auto-Login
X-Alternate-Cache-Key
X-Parent-Response-Time
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
Thinkindot-Control
X-BBC-Edge-Cache-Status
X-Bip
X-Clientip
X-CMSURLCustom
X-Mid
X-Clara-WADP
X-Cdn-Origin
X-Cache-Debug
X-Cache-Id
X-Core-Value
X-Node-Id
X-Thanos
X-Thinkindot-L3
X-Up
X-Test
X-SVT-ORM-VERSION
X-Sorting-Hat-ShopId
X-Storefront-Renderer-Rendered
X-SVT-ORM-RULES
X-Variation
X-Varnish-CookieHashed-On
X-Vmg-Version
X-VServer
X-WADP-Cache
X-VG-TLSProxy
X-Varnishpool
X-Varnish-CookieINHashed-On
X-Varnish-Remaining-TTL
X-Sorting-Hat-PodId
X-Sn-Servicetimems
X-Owner
X-PAYTM-SRV-ID
X-PERF
X-Origin-Response-Time
X-Org
TDXMobile
X-Old-Content-Length
X-Platform
X-Pool
X-ShardId
X-ShopId
X-Shopify-Stage
X-Server-IP
X-S-Maxage
X-Qloud-Router
X-Request-Time
X-Mly-Id
X-Gzip
Environment
Memcached
Cmsid
Adler-Geo
Release
Machine
Req-Svc-Chain
AKAMAI
Origin
Expect-Staple
Is-Eu
Cmstype
Producers
Host-ID
Datacenter
Platform
User-Cache-Control
X-Correlation-ID
X-Web-Node
X-Nitro-Cache
X-Vcl-Version
X-Mvc-Supplant-OutputCached
ServedBy
Country-Code
X-Nananana
X-Origin
X-WA-Info
NM-Fastcgi-Cache
X-Nginx-Cache-Key
X-Presslabs-Stats
X-Cdn-Srv
X-NodeID
X-Device-Os
X-Dispatcher-Server
Sever-Int
CDCHOST
X-App
X-Block-Status
X-Akamai-Device-Characteristics
Apple-News-Services-Host
Apple-News-Services-Handled
X-Gen-Mode
X-From
X-GeoIP
Esi-Enabled
Apple-News-Services-Request-Url
Server-Hostname
Apple-News-Services-Parsed-Url
DSUID
Server-Ext
X-Hnp-Log
CloudFront-Viewer-Country
X-Scale
WP-Super-Cache
X-Cs
X-Azure-Ref-OriginShield
X-NCache
X-Refresh
X-Instance-Name
Server-Info
X-Op-Id-All
Origin-CC
Ssr
X-Air-Trace-Id
X-Cache-Enabled
Wxu-Next-Region
X-Air-Source
Pics-Label
X-Air-Hostname
Origin-EX
Wxu-Next-Hostname
C-Via
X-LB-NoCache
Wxu-Next-Commit
X-TIME
X-TimeS
X-Tx-Id
X-Amz-Meta-Cb-Modifiedtime
Server-ID
Memory
Time
Cache-Host
X-Microcachable
X-HA-Backend
X-Platform-Processor
X-Origin-Expires
X-Cache-Status-Check
X-Platform-Cluster
X-Platform-Router
X-Locale
NGX
X-Site-Version
GeoIP-Latitude
Hostname
XM
X-VHOST
X-Dc
X-Tb-Optimization-Total-Bytes-Saved
AMP-Access-Control-Allow-Source-Origin
X-API-Version
X-CACHE-GROUP
X-ZONE
X-HN
X-VarnishDD-TTL
Origin-Agent-Cluster
Cf-Device-Type
PFcat
Resin-Trace
X-Ad-Defer-Variation
X-Wp-Cf-Super-Cache-Active
X-Varnish-Beresp-Grace
X-Via-CDN
X-Varnish-Beresp-Ttl
X-Fpc
X-DC
X-FL-QIT-DEBUG
X-FL-EDGE
X-Via-SSL
Edge-Copy-Time
A
Locid
X-Via-Edge
Srvid
Cdn-Requestid
X-Zone
X-Webkit-Csp-Report-Only
X-Internal-Host
X-Vgn-Hpd-Reason
YJS-ID
X-Upstream-Ct
X-Upstream-Ht
X-Micro-Cache
Sid
X-FireWall-Port
X-Cache-ASPX
X-ATG-Version
X-Contensis-Viewer-Groups
X-WP-CF-Super-Cache-Active
Cache-Key
X-Pod-Name
X-Varnish-Authentication
X-Moov-Xdn-Version
X-Moov-T
X-Github-Request-Id
X-TraceId
User-Agent
X-Cached-By
X-DataCenter
Uri
True-Client-Ip
X-LiteSpeed-Cache-Control
X-Info
IsBot
X-SIPLIST1
GeoIP-Country-Code
X-AB
X-B3-Spanid
X-Buckets
Location
X-URL
State
X-Planisys-CDN-TTL
X-Planisys-CDN-Cache
X-B3-Parentspanid
X-Platform-Server
X-Planisys-CDN-Rules
X-Provided-By
X-HS-Content-Campaign-Id
X-Release
X-Geo-Region
X-Nitro-Rev
X-Backend-Instance
X-Fastly-Cache
X-Nitro-Cache-From
X-NGINX-Cache
X-RN-RSRV
X-LiteSpeed-Tag
X-Datacenter
X-MSEdge-Flight
Cdn
X-Sigma
X-Accel-Version
X-Sigma-Backend
X-MSEdge-Features
GeoIp-Country-Code
X-Rocket-Build-Number
X-Cache-Remote
X-VC
SID
X-VCache
X-Api-Version
X-CS
CF-Ctrl
XServer
Cache
X-FTR-Request-ID
X-NewRelic-App-Data
X-CSRF-TOKEN
True-Client-IP
X-Gamma-Serve
X-Vgn-Hpd-Cached
X-Vgn-Hpd-Variations-Key
Path
NtCoent-Length
X-GeoIP-City
X-Generated-In
X-Vgn-Hpd-Ssi
X-Tcp-Rtt
X-Is-Tablet
X-Browser-Name
X-Is-Desktop
X-Is-Supported-Browser
X-Geo
X-Is-Mobile
X-Scheme
Lb
X-TRACE-ID
X-HS-Status
Cache-Tv-Group
Fastly-Drupal-Html
Epwk-X-Cache
X-FPC
Srv
X-Hyper-Cache
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
Tcn
X-HostName
X-GoCache-CacheStatus
Ohc-File-Size
X-SRV
Kp-EeAlive
X-Frame-Option
HostName
X-APP-VERSION
Cf-Ipcountry
Serverid
X-UA
CountryCode
X-Esi
Cdncip
Cdnsip
X-Mobile-URL
X-Location
X-Webstats-RespID
X-AK-Request-ID
X-Amz-Meta-Opti
X-Service
X-Air-Pt
X-Guploader-Uploadid
X-Region-Sid
WebServer
X-EC-Lua
X-Men
X-Wp-Cf-Super-Cache-Cache-Control
On-Server
X-Cache-Tags
X-Traceid
X-Aicache-OS
Proxy-Connection
X-Cache-Ttl
X-TX-ID
CacheControlHeader
X-Developers
X-Wp-Cf-Super-Cache
X-Branch-Name
X-Wp-Cf-Super-Cache-Cookies-Bypass
Tube-Got-Results
X-CDN-Cache-Status
Tube-Get-Contents
Env
X-Via-Poph
X-Acquia-Purge-Cdn-Unconfigured
X-Req
X-Cdn-Cache-Status
X-Cache-FS-Status
RNT-Time
X-Proxy-CacheRZ
Tube-Got-Eval
RNT-Machine
XkeyRZ
Tube-Return
X-Vc
X-B3-Trace-ID
WZWS-RAY
X-Via-Popn
X-SB
Mime-Version
V-Age
Click-Count-Error
Ohc-Cache-HIT
X-LB-ID
X-Minions-Version
X-Servedbyhost
X-Wa
Yak-Timeinfo
Click-Count-Action-Start
X-Nc
X-V-Cache
X-Via-Popv
X-Pad
X-VCL-Version
CDN
X-CACHE-KEY
LB
Geoip-Latitude
X-Vercel-Id
WWW-Authenticate
X-Vercel-Cache
X-NWS-UUID-VERIFY
Ngx
X-Edge-Pop
X-Akamai-Pragma-Client-IP
ENV
X-Edge-Server
X-Cdn-Forward
Cdn-Request-Time
Cdn-Host
X-Lb-Cache
Content-Style-Type
CF-Cached-On
X-Origin-Cache-Key
Content-Script-Type
Server-Id
X-FTR-Balancer
X-FTR-Cache-Status
X-Ha-Backend
X-FTR-Backend-Server
X-Fastly-Country-Code
Req-ID
X-NMSegId
M-TraceId
X-Country-Code-Real
X-FTR-Backend
X-User
X-FTR-Expires
X-WP-CF-Super-Cache-Cookies-Bypass
X-TT-LOGID
X-Cdn-Request-ID
X-Acquia-Purge-Tags
X-Acquia-Site
Cluster
X-Acquia-Application-UUID
X-Lb-Nocache
X-Ad-Load-Variation
PICS-Label
X-APP
X-IN-APIGATEWAYSSL
X-Processor
X-TH-Server
X-Edge-POP
X-IN-APIGATEWAY
X-Acquia-Application-Trace
X-Ckpd-Fst-Backend
X-Via-Ucdn
X-MiniProfiler-Ids
X-Dw-Trace-Id
X-Snapshot-Date
X-Check-Cacheable
Yjs-Id
X-Render-Time
X-Request-Start
X-Scope-Id
HIT
X-CUA
Cneonction
X-Udemy-Cache-App-Namespace
X-Miniprofiler-Ids
X-Cached-Since
X-M-Log
X-ElasticPress-Query
X-Litespeed-Cache-Control
Log-Origin
X-M-Reqid
Vha6-Origin
CACHE-MISS-TO-ORIGIN
X-Iauth-Set-Uid
X-RAMCache
Inserted-Into-Cache-At
X-Fastly-Cache-Hits
X-Fastly-Backend-Reqs