Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
X-Powered-By
Pragma
CF-RAY
X-XSS-Protection
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
Alt-Svc
X-Xss-Protection
P3P
X-Cache-Hits
X-UA-Compatible
X-Served-By
CF-Ray
X-Download-Options
X-Timer
X-Request-Id
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Cache-Status
X-Generator
X-Check
X-Cacheable
X-Envoy-Upstream-Service-Time
X-FRAME-OPTIONS
Timing-Allow-Origin
X-Iinfo
X-Dns-Prefetch-Control
X-DNS-Prefetch-Control
X-Request-ID
X-Drupal-Dynamic-Cache
Feature-Policy
Server-Timing
X-Content-Security-Policy
Nel
Access-Control-Expose-Headers
Content-Encoding
X-XSS-PROTECTION
X-CDN
Status
Upgrade
X-AspNetMvc-Version
Access-Control-Max-Age
X-Amz-Request-Id
X-Via
X-Amz-Id-2
Request-Context
X-Turbo-Charged-By
X-Backend
X-Cache-Group
X-Robots-Tag
X-AH-Environment
Cf-Edge-Cache
Host-Header
Keep-Alive
X-Hacker
X-Proxy-Cache
X-Vhost
X-Server
X-Rq
X-UA-Device
Allow
X-Server-Powered-By
X-Ws-Request-Id
X-Age
X-Dispatcher
X-Varnish-Cache
EagleId
X-Amz-Version-Id
X-LiteSpeed-Cache
P3p
Grace
Cf-Apo-Via
Cf-Railgun
X-Page-Speed
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Device
EagleEye-TraceId
X-OneAgent-JS-Injection
X-Swift-SaveTime
X-Swift-CacheTime
X-Aws-Lambda-Call-Status
Ali-Swift-Global-Savetime
X-Pingback
X-Host
X-Node
X-Cache-Lookup
X-CST
Accept-CH
X-WebKit-CSP
X-Backend-Server
X-Server-Id
Surrogate-Control
X-Readtime
Permissions-Policy
X-Nginx-Cache-Status
X-Nginx-Upstream-Cache-Status
X-Akam-SW-Version
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
Request-Id
X-Application-Context
Accept-CH-Lifetime
X-Content-Security-Policy-Report-Only
X-Cloud-Trace-Context
X-Ruxit-JS-Agent
X-Response-Time
X-Ua-Compatible
X-HW
X-Trace
Xkey
X-Edge
Content-Location
X-Clacks-Overhead
X-Mod-Pagespeed
Rating
X-Url
X-ESI
X-Midtier
X-Amz-Server-Side-Encryption
X-ECACHE
Accept-Ch
X-Mcache
Accept-Ch-Lifetime
X-Country
Cache-Tag
X-MS-InvokeApp
X-D2id
X-Upstream
X-Rack-Cache
X-Powered-By-Plesk
X-Vcap-Request-Id
Verso
X-Element-Page-Cache
Edge-Control
X-Cdn-Fetch
X-Kinja-Build
X-Exp-Id
X-Use-Magma
X-Kinja-Revision
X-Kinja-Server
X-Kinja
X-GoogleNews-Bot
X-Exp-Variant
Service-Worker-Allowed
X-PC
X-Vname
X-TtlSet
RTSS
X-Oneagent-Js-Injection
X-Country-Code
X-Ac
X-WebKit-CSP-Report-Only
X-Goog-Hash
X-VARITI-CCR
X-Navigation-Version
Origin-Trial
Fastly-Restarts
X-Cache-TTL
X-Abt-Application-Version
X-GitHub-Request-Id
X-Varnish-TTL
X-Cached
X-Amz-Rid
X-Browser-Type
X-Kinja-CCPA
X-Aspnetmvc-Version
X-Litespeed-Cache
Cross-Origin-Opener-Policy
X-Webkit-CSP
Display
X-Middleton-Display
Pagespeed
X-Sol
X-Server-Name
X-Ruxit-Js-Agent
X-NWS-LOG-UUID
X-Dw-Request-Base-Id
X-Amzn-Trace-Id
SPRequestGuid
X-SharePointHealthScore
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-Content-Type
X-Times
SPIisLatency
SPRequestDuration
X-Powered-CMS
X-Cache-Key
AR-Request-ID
AR-SID
X-Ttl
AR-PoweredBy
AR-ATIME
X-Mg-S
Pinterest-Generated-By
Pinterest-Version
X-Pinterest-Rid
X-Erf-Bev-Bev
X-Server-Lifecycle-Phase
X-Kraken-Loop-Name
X-Erf-Bev-Bev-Is-Generated
X-Instrumentation
Arr-Disable-Session-Affinity
Response
X-Middleton-Response
X-FastCGI-Cache
X-Fastly-Request-ID
X-Client-IP
X-Version
X-Ser
X-HP-Webp
X-B3-Traceid
X-Jurisdiction
X-HP-Trace-Id
X-Cnection
X-B3-TraceId
Nginx-Cache
AR-CACHE
Cache-Tags
X-Accel-Expires
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-T
Cache-Status
X-NF-Request-ID
Edge-Cache-Tag
X-Hits
X-MSEdge-Ref
X-RateLimit-Remaining
Front-End-Https
Public-Key-Pins
X-Px
X-Ua-Device
X-Recruiting
Payment
S
X-LLID
X-Frontend
X-Ua-Browser
X-B3-TraceId-Primal
Server-Node
X-RateLimit-Limit
Mrf-Cache-Status
MRF-Tech
X-Shield-Request-Id
X-Request-Processing-Time
X-Request-Received
X-Server-ID
X-GUploader-UploadID
X-Goog-Metageneration
X-Daa-Tunnel
Content-MD5
X-TTL
X-DIS-Request-ID
Access-Control-Request-Method
MicrosoftSharePointTeamServices
X-PressLabs-Stats
X-Amzn-RequestId
X-Amz-Apigw-Id
X-Content-Digest
TP-Cache
Realpath
X-Protected-By
X-Microsite
X-Request-Handler-Origin-Region
X-HS-Cache-Config
X-HS-Hub-Id
X-HS-Combine-CSS
X-HS-Content-Id
X-Distributor
X-Forwarded-For
Fastcgi-Cache
X-Page-Id
Access-Control-Allow-Method
X-FB-Debug
X-LB-Cache
Accept-Charset
X-Cluster-Name
X-Webkit-Csp
X-Ratelimit-Remaining
X-Rid
X-Geo-Country
TP-L2-Cache
X-Erf-Stays-Pdp-Viaduct-Migration-Web
X-Goog-Stored-Content-Length
X-Webkit-CSP-Report-Only
X-Goog-Generation
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-B3-Sampled
X-Aspnet-Version
Count-Hit
X-Fastcgi-Cache
X-Ezoic-Cdn
X-Hostname
Cross-Origin-Resource-Policy
X-Seen-By
Cleartype
X-Newrelic-App-Data
X-Correlation-Id
X-App-Server
X-Kinsta-Cache
X-Edge-Location-Klb
Referer-Policy
X-Mobile
X-Logged-In
X-Ratelimit-Limit
DC
X-Content-Options
X-Varnish-Backend
TCN
X-Id
X-Git-Hash
X-Contextid
X-Hosted-By
X-Origin-Cache
X-Aspnet-Duration-Ms
X-Fb-Rlafr
X-Providence-Cookie
X-Is-Crawler
X-Flags
X-Request-Guid
X-Route-Name
X-Amz-Replication-Status
X-Debug-Info
Surrogate-Key
X-Revision
X-Grace
Retry-After
X-App-Environment
X-Varnish-Grace
Frame-Options
X-IPS-LoggedIn
X-Amz-Meta-S3cmd-Attrs
X-TT
X-Forwarded-Proto
X-Xrds-Location
X-Envoy-Decorator-Operation
X-F-Cache
X-Azure-Ref
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-TEC-API-VERSION
Section-Io-Cache
X-RateLimit-Reset
X-Magnolia-Registration
X-Whom
X-Wix-Request-Id
X-Proxy-Cache-Info
Healthy
Charset
MS-Author-Via
X-Origin-Server
Alternate-Protocol
Viewport
X-App-Version
X-Akamai-Edgescape
X-Www-Served-By
X-Backend-Name
X-COUNTRY
WPO-Cache-Status
WPO-Cache-Message
X-Language
X-Az
X-Activity-Id
X-AppVersion
Filterid
Paypal-Debug-Id
X-B
X-Varnish-Server
SRV
SD-X-WS
X-Datadog-Trace-Id
X-Http-Reason
X-Datadog-Parent-Id
X-Original-Request-Id
X-Response-Served-From
X-Datadog-Sampling-Priority
Server-Name
VIX-Pulpo-Upstream-Status
X-Cache-Rule
Host
VIX-Pulpo-Node
X-Akamai-Request-ID2
X-UUID
X-User-Agent
X-Rule
X-Instance
Akamai-GRN
Front
X-L-Path
X-Page-View
X-Status
X-Unique-Id
X-Environment-Context
X-Edge-Location
Country
Protected
X-ARC
X-Cache-Grace
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-EdgeConnect-Cache-Status
Amp-Access-Control-Allow-Source-Origin
X-N
X-Rendered-As
X-Jobs
From-Origin
X-Cacheable-TTL
X-Is-Bot
X-Varnish-Age
X-Region
X-Rocket-Nginx-Serving-Static
X-FW-Dynamic
X-FW-Hash
X-FW-Serve
X-FW-Static
X-FW-Server
X-Framework
X-DataDome
ServerID
Fastly-SIE
Fastly-SWR
X-Adobe-Content
X-Adobe-Loc
X-FW-Type
X-FW-Version
X-Trace-Id
X-Load-Cache
X-Client-Ip
X-Type
X-Time
X-Nf-Request-Id
X-Tumblr-Pixel
X-Yottaa-Optimizations
X-Tumblr-Pixel-0
X-Yottaa-Metrics
X-RemovedCookies
X-ProcessESI
X-Proxy
X-Tumblr-User
X-Tumblr-Pixel-1
X-Cache-Time
X-Tec-Api-Origin
X-Tec-Api-Version
X-Tec-Api-Root
X-G
Content-Disposition
Access-Control-Request-Headers
X-Datadog-Sampled
X-Signature
X-B-Cache
X-Amzn-Remapped-Content-Length
X-Vcache
X-Debug-IsConnected
X-Debug-IsPreview
X-CDN-Forward
X-Mg-Request-UUID
X-Cache-Control
X-Cache-Age
X-ECache
Backend
X-WP-CF-Super-Cache
X-WP-CF-Super-Cache-Cache-Control
Countrycode
Refresh
X-DynaTrace
X-Nginx-Cache
X-Drupal-Cache-Tags
X-Httpd
Xet-Cookie
X-Erf-Web-Scheduler
X-Servername
Accept-Language
CF-IPCountry
X-Tt-Trace-Host
X-Tt-Trace-Tag
Url
X-DynaTrace-JS-Agent
X-XRDS-LOCATION
X-HTML-Minification-Powered-By
X-Generated-By
X-Source
X-Template
X-XRDS-Location
Webserver
X-Mode
X-Device-Type
X-Content-Powered-By
Xserver
X-NYM-Debug-Backend
Version
GEO-INFO
X-Storage
X-Content-Age
X-Rewrite-Enabled
X-Director
X-ServerID
S-Rt
X-Urbn-Site-Id
OT-Force-Account-Verify
X-JoinUs
X-SaId
X-Urbn-Context-Path
Locale
X-LAGOON
X-Rn-Rsrv
Meta-Geo
Filters
X-UPSTREAM-Address
X-Cache-Action
Load-Balancing
X-Cache-Operation
X-SayCDN-TTL
X-Tt-Logid
X-Container-Uri
X-Git-Commit
X-Say-TTL
X-Say-Cacheable
X-Soup
Onion-Location
X-Varnish-Cache-Hits
X-Cluster-Node
X-Detected-As
Azure-SlotName
X-Forwarded-Host
Azure-Version
X-Ms-Version
X-Ms-Request-Id
Web-Mar-Node
X-Lambda-Id
X-Sql-Count
X-Varnish-Hostname
Azure-InstanceId
X-Served-From
X-Tncms
Azure-SiteName
Azure-RegionName
X-Loop
X-Sql-Duration-Ms
X-Cache-Server
X-Cache-Hit
DB-Nickname
Mn-Server-Ip
Node
Cross-Origin-Window-Policy
X-Adobe-Source
X-R9-Blue-Green-Version
X-Hcs-Proxy-Type
X-Proxied
X-Proto
X-PHP-Host
X-Tb
X-RCS-CacheZone
X-URL
X-Skip-Cache
X-Routing-Service
X-RM-Cache-TTL
X-VCT
X-Zipkin-Id
X-VC-Cache
X-Extlb
X-CCDN-CacheTTL
X-CCDN-Origin-Time
X-GeoCode
X-Generation-Time
X-Labrador-Cache-Channel
X-GeoCountry
X-Timing-Wait
X-Tumblr-Pixel-3
TWC-Device-Class
X-Uri
Selected-Fe
X-Tumblr-Pixel-2
TWC-Connection-Speed
X-Proxy-Build
X-Logging-Id
Webcakes-Region
X-Format
X-FB-TRIP-ID
Webcakes-App-Name
X-Origin-Hint
TWC-GeoIP-LatLong
TWC-Locale-Group
TWC-Privacy
TWC-GeoIP-Country
Webcakes-App-Version
X-MCACHE
Property-Id
X-Fetched-On
X-Debug
Uber-Trace-Id
X-Endurance-Cache-Level
X-Ua
X-Redis-Cache
Fastcgi-Useragent
X-B3-SpanId
X-Zen-Fury
X-LSADC-Cache
Source
X-Sucuri-ID
X-Sucuri-Cache
X-NGENIX-Cache
CDN-RequestId
X-Drupal-Cache-Contexts
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
Section-Io-Id
Section-Io-Origin-Status
X-Oracle-Dms-Rid
X-Oracle-Dms-Ecid
X-S
X-Srv
X-Ratelimit-Reset
X-MP-GENERATED-AT
X-Upgrade-Enabled
X-TimeS
X-Pass-Why
X-FTR-Request-ID
X-Origin-TTL
X-Origin-CC
X-Origin-Date
Liferay-Portal
X-Cache-Expired-At
X-Real-IP
X-Varnish-Hits
Upgrade-Insecure-Requests
NGB
X-Newrelic-Synthetics
Fastly-Drupal-HTML
X-Handled-By
X-Akamai-Transformed
X-CACHE-AGE
X-Reqid
Apigw-Requestid
X-Xfnlog-Site
X-Optimistic-Header
X-Cache-TTL-Remaining
X-Cms-Context
X-Node-Name
X-Hl-Ver
X-Restarts
ServedBy
X-No-Session
MS-CV
Ms-Operation-Id
X-RTag
CDN-RequestPullCode
X-UA-Device-Type
X-Cache-Type
X-BYPASS-REASON
X-CSRF-Token
CDN-PullZone
CDN-RequestPullSuccess
CDN-Cache
CDN-Uid
X-Cache-Host
X-Via-JSL
X-ProxyCache-Key
CDN-CachedAt
X-ProxyCache-Status
X-GEO
CDN-EdgeStorageId
X-Pubstack
CDN-RequestCountryCode
X-Varnish-Ttl
X-ID
X-AWS-Id
X-Server-W
X-Parent-Response-Time
X-VWS-Id
X-Cluster
X-LJ-Flow-ID
WP-Super-Cache
X-IPLB-Request-ID
X-IPLB-Instance
N-Cache
Ngx.Var.Host
DCR-Processing-Time-Ms
DCR-Decision-By
Odigeo-Trace-Id
Fastly-SSL
Candidate-Md5Url
Canary
X-Tx-Id
BehaviorPad-Version
Gannett-Cam-Experience-Id
Ha-Gx-Prefs
Magicmarker
MD5-Digest
Lang
L5d-Success-Class
HA-Ipaddr
L
Meta-Geo-Continent
X-A-Dgt
X-Epic-Correlation-Id
X-Ec-GeoHdr
X-Eu-Site
X-External-Request-Id
X-FC-Vary-Parameters
X-Fastly-Backend
X-Ec-Fail
X-Ec-Custom-Error
X-Debug-Cache-Store
X-Debug-Cache-Fetch
X-Destination
X-Developer
X-Dispatcher-Number
X-Request-Host
X-Rojux
X-Viewer-Country
X-Vdms-Version
X-Vtex-Remote-Cache
X-We-Are-Hiring
Xc-Version
X-Vdms-Path
X-SRCache-Key
X-ScT
X-S-Cookie
X-SD-PageType
X-Slack-Backend
X-Slack-Shared-Secret-Outcome
X-D
X-Csrf-Jwt
Web-Mar-Region
W
X-A
X-A-Ccd
X-A-Dcw
X-A-Dam
Vix-Hermes-Req-Id
T-Server
Rendered-Blocks
Redirect-Candidate
Server-Host
Sslversion
Surrogated-Key
X-A-Wwc
X-Aed
X-CF-Lambda-Fn
X-CacheTTL
X-CF-Lambda-Version
X-CGP
X-Conf
X-Cache-NE
X-Bl-Debug
X-App-Name
X-App
X-Application
X-Bc-Bl
X-BCube-Filmed-By
Origin-Agent-Cluster
X-B-Cookie
Cache-Provider
X-Datadome
X-AB
X-GeoIP-Region-Code
X-Hash
X-GeoIP-Country-Code
X-Geo-Header
X-Forwarded-Path
X-Gdpr
X-Generated-On
X-Human
X-Level-Front-Cache
X-Node-Id
X-NodeID
X-Nitro-Cache
X-Nananana
X-Mly-Id
X-Mvc-Supplant-Cachable
X-Date
X-Clientip
VNS-Cache
We-Hiring
X-Accel-Expires-Debug
VNS-Age
True-Client-Country-4JS
Origin
Req-Svc-Chain
X-Alternate-Cache-Key
X-BBC-Edge-Cache-Status
X-Cdn-Diag
X-Nyt-Route
X-Cache-Info
X-Cache-Debug
X-Bip
X-Cache-Bucket
X-Core-Value
X-Old-Content-Length
X-Test
X-Thanos
X-Up
X-Tenant
X-Storefront-Renderer-Rendered
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Var-Ttl
X-Varnishpool
X-Worker
Content-Secure-Policy
Host-ID
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-VG-TLSProxy
X-VG-WebCache
X-Shopify-Stage
X-ShopId
X-PAYTM-SRV-ID
X-Platform
X-Policy
X-Owner
X-Origin-Time
X-Org
X-Orig-Expires
X-Pool
X-RateLimit-Limit-Second
X-ShardId
X-Shop-Environment
X-Server-IP
X-Request-Time
X-RateLimit-Remaining-Second
X-Refresh
Mail-Subject
X-Irp-Debug
Fastly-Backend-Name
Expect-Staple
Gh-Request-Id
Cf-Device-Type
X-Micro-Cache
CPC-Cache
X-Proxy-Cache-Status
CPC-Age
X-Cache-Status-Check
Fastly-GeoIP-CountryCode
Environment
Datacenter
Cmstype
Cmsid
AKAMAI
AMP-Access-Control-Allow-Source-Origin
User-Cache-Control
X-TIME
X-Sn-Servicetimems
X-CMSURLCustom
X-Block-Status
X-Clara-WADP
Apple-News-Services-Handled
X-Nginx-Cache-Key
X-Core-Mission
Country-Code
X-Cache-Id
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-Mvc-Supplant-OutputCached
X-S-Maxage
Apple-News-Services-Request-Url
Esi-Enabled
X-PERF
X-ApacheServer
X-Origin-Response-Time
X-Auto-Login
X-Correlation-ID
X-Origin
Apple-News-Services-Parsed-Url
X-Mid
X-Accel-Buffering
Adler-Geo
Apple-News-Services-Host
X-From
X-Cdn-Origin
X-Cdn-Srv
X-Qloud-Router
Thinkindot-CacheControl
X-WA-Info
X-Esi-Check
NM-Fastcgi-Cache
X-WADP-Cache
X-VServer
X-Vmg-Version
Thinkindot-Control
X-Hnp-Log
X-Varnish-Remaining-TTL
X-Gzip
CDCHOST
X-Fmm-Version
X-Forwarded-Site
Is-Eu
Cache-Name
Machine
X-Gen-Mode
X-Geo-Region
X-Wix-Viewer-Type
Producers
Platform
Sever-Int
X-Varnish-CookieINHashed-On
X-Dispatcher-Server
TDXMobile
X-DefElseHash
X-Loc
X-Thinkindot-L3
X-DefHash
Server-Hostname
Thinkindot-CacheControl-Type
Release
X-Varnish-CookieHashed-On
X-Variation
X-DPWN-IS-SECURE
Server-Ext
X-TraceId
X-Vcl-Version
X-Cache-Enabled
X-NCache
X-INCAP-ABP
X-Device-Os
X-GeoIP
CloudFront-Viewer-Country
X-LB-NoCache
X-Access
Wxu-Next-Commit
Wxu-Next-Hostname
Wxu-Next-Region
Ssr
Server-Info
X-Instance-Name
Pics-Label
X-Section
X-AIR-PT
DSUID
X-Akamai-Device-Characteristics
X-Op-Id-All
X-Dc
X-B3-Spanid
X-Vgn-Hpd-Reason
X-Fastly-Request-Id
NGX
X-Via-Fastly
X-Amz-Meta-Cb-Modifiedtime
Server-ID
C-Via
X-API-Version
X-Accel-Version
X-Varnish-Beresp-Ttl
X-JWT-State
X-Is-Gdpr
X-Has-Esi
X-CACHE-GROUP
Memcached
X-Varnish-Beresp-Grace
X-HA-Backend
X-Buckets
X-Is-Tablet
X-Browser-Name
X-Tcp-Rtt
X-Is-Mobile
X-Is-Desktop
X-Is-Supported-Browser
Time
IsBot
X-SIPLIST1
Memory
Cdn-Requestid
Hostname
Sid
X-Platform-Processor
X-Scale
X-Platform-Router
Cache-Hits
X-Platform-Cluster
Origin-EX
Origin-CC
X-PHP-Backend
X-Zone
X-TIM-N
X-ZONE
X-Wp-Cf-Super-Cache-Active
X-Air-Hostname
YJS-ID
X-Air-Trace-Id
Location
CF-Ctrl
X-Air-Source
X-Presslabs-Stats
X-WP-CF-Super-Cache-Active
X-B3-Parentspanid
X-Tb-Optimization-Total-Bytes-Saved
X-Cached-By
X-Internal-Host
X-Backend-Instance
X-Fpc
X-Azure-Ref-OriginShield
X-Origin-Cache-Key
Resin-Trace
X-Frame-Option
X-Hyper-Cache
X-Cs
X-DC
Uri
GeoIP-Latitude
X-TA-CDN-Provider
X-VC
X-Origin-Expires
Epwk-X-Cache
X-Service
X-Site-Version
True-Client-Ip
X-Microcachable
X-DataCenter
Cache-Host
X-VCache
X-LiteSpeed-Cache-Control
X-FTR-Balancer
X-FTR-Cache-Status
X-FTR-Backend
X-Webstats-RespID
X-FTR-Expires
X-Nitro-Cache-From
X-Nitro-Rev
GeoIp-Country-Code
XM
X-Country-Code-Real
X-FTR-Backend-Server
X-Locale
X-Info
X-NGINX-Cache
X-Web-Node
GeoIP-Country-Code
X-Pod-Name
PFcat
X-HN
X-VarnishDD-TTL
LB
Cdn-Request-Time
X-Datacenter
X-Cache-Ttl
NtCoent-Length
X-CS
Cdn-Host
XServer
Cdn
X-Edge-Server
X-Geo
User-Agent
X-Ad-Defer-Variation
X-CSRF-TOKEN
X-SRV
X-NewRelic-App-Data
Tcn
X-Via-Edge
True-Client-IP
M-TraceId
Req-ID
A
X-Via-CDN
Srvid
X-NMSegId
Edge-Copy-Time
X-HostName
X-FL-QIT-DEBUG
X-FL-EDGE
Locid
X-Via-SSL
X-TRACE-ID
WebServer
WZWS-RAY
Fastly-Drupal-Html
SID
X-Moov-Xdn-Version
Pramga
X-Varnish-Authentication
X-Vercel-Cache
X-Ad-Load-Variation
X-Request-Start
X-Moov-T
X-Vercel-Id
X-M-Reqid
X-MSEdge-Flight
X-FPC
X-Pad
X-Cache-ASPX
X-FireWall-Port
X-MSEdge-Features
Cluster
X-Contensis-Viewer-Groups
X-M-Log
X-ATG-Version
X-Request-URI
X-NWS-UUID-VERIFY
Cache-Key
X-Qnm-Cache
X-LiteSpeed-Tag
X-Scope-Id
X-Varnish-Beresp-Status
Cf-Ipcountry
HostName
CountryCode
X-Api-Version
X-Cdn-Request-ID
X-APP-VERSION
Cdncip
Path
X-Esi
Cdnsip
X-AK-Request-ID
Edge-Cache
X-Shield-Cache-Expires
X-Amz-Meta-Opti
Content-Script-Type
X-Air-Pt
Content-Style-Type
Cache-Tv-Group
X-Branch-Name
X-TH-Server
X-Cache-Date
X-Wp-Cf-Super-Cache-Cookies-Bypass
X-LB-ID
X-SB
X-B3-Trace-ID
X-Aicache-OS
X-Cache-FS-Status
X-Render-Time
X-Via-Popn
X-Via-Poph
X-V-Cache
X-Acquia-Purge-Cdn-Unconfigured
Yak-Timeinfo
XkeyRZ
X-Planisys-CDN-TTL
Click-Count-Error
Click-Count-Action-Start
X-Planisys-CDN-Rules
X-Planisys-CDN-Cache
X-Platform-Server
Tube-Get-Contents
X-Via-Popv
X-Proxy-CacheRZ
X-Github-Request-Id
Tube-Got-Results
Tube-Got-Eval
Tube-Return
X-Req
X-HS-Content-Campaign-Id
State
X-WP-CF-Super-Cache-Cookies-Bypass
X-VCL-Version
X-Upstream-Ht
CDN
X-Rebelmouse-Cache-Control
X-CACHE-KEY
X-Upstream-Ct
Lb
X-Rebelmouse-Surrogate-Control
Geoip-Latitude
Proxy-Connection
V-Age
X-Wp-Cf-Super-Cache
X-Servedbyhost
Srv
X-Wp-Cf-Super-Cache-Cache-Control
X-Release
X-Vary
X-Men
X-Cdn-Forward
X-Vgn-Hpd-Variations-Key
Wpo-Cache-Status
X-Vgn-Hpd-Ssi
X-Wa
X-Nc
Wpo-Cache-Message
X-Fastly-Cache
X-Vgn-Hpd-Cached
X-Akamai-Pragma-Client-IP
X-Tim-N
X-Lb-Cache
X-User
X-Sigma
X-Sigma-Backend
Ngx-Var-Key
X-Generated-In
X-UA
CF-Cached-On
Server-Id
MIME-Version
X-Dw-Trace-Id
X-Cache-Remote
X-Traceid
Ohc-File-Size
X-Rocket-Build-Number
X-HS-Status
X-Ha-Backend
On-Server
X-RID
X-TT-LOGID
My-App
X-Fastly-Backend-Reqs
Ohc-Cache-HIT
PICS-Label
X-Acquia-Purge-Tags
X-Acquia-Site
X-Acquia-Application-UUID
X-CUA
Cache
X-Via-Ucdn
X-Lb-Nocache
X-Acquia-Application-Trace
X-EC-Lua
Yjs-Id
X-Iplb-Instance
X-TX-ID
X-Iplb-Request-Id
Inserted-Into-Cache-At
X-Fastly-Cache-Hits
X-Snapshot-Date
X-GeoIP-City
X-GoCache-CacheStatus
CACHE-MISS-TO-ORIGIN
Warning
X-Gamma-Serve
Vha6-Origin
Mime-Version
X-CF-Cache-Header-Vary
X-Litespeed-Cache-Control
X-CF-Cache-Header-Cache-Control
Cneonction
X-RAMCache
X-Scheme
Log-Origin
X-Udemy-Cache-App-Namespace
X-ElasticPress-Query
X-Miniprofiler-Ids
Ngx
X-Cached-Since