Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
X-Powered-By
Pragma
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
Alt-Svc
P3P
X-Cache-Hits
X-UA-Compatible
X-Xss-Protection
CF-Ray
X-Served-By
X-Download-Options
X-Request-Id
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Cache-Status
X-Generator
X-Check
X-Cacheable
X-DNS-Prefetch-Control
X-Envoy-Upstream-Service-Time
X-FRAME-OPTIONS
Timing-Allow-Origin
X-Iinfo
X-Drupal-Dynamic-Cache
X-Dns-Prefetch-Control
Feature-Policy
X-Content-Security-Policy
Server-Timing
Content-Encoding
Access-Control-Expose-Headers
X-XSS-PROTECTION
Upgrade
X-CDN
Status
X-Request-ID
X-AspNetMvc-Version
Access-Control-Max-Age
X-Amz-Request-Id
Request-Context
X-Amz-Id-2
X-Via
X-Turbo-Charged-By
X-Backend
X-Cache-Group
X-AH-Environment
X-Robots-Tag
Cf-Edge-Cache
Host-Header
Keep-Alive
X-Hacker
X-Proxy-Cache
X-Server
X-Vhost
X-Rq
X-UA-Device
X-Server-Powered-By
Allow
X-Age
X-Ws-Request-Id
X-Varnish-Cache
X-Dispatcher
EagleId
X-Amz-Version-Id
P3p
Nel
Grace
Cf-Apo-Via
X-LiteSpeed-Cache
Cf-Railgun
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Page-Speed
X-Device
X-OneAgent-JS-Injection
EagleEye-TraceId
X-Aws-Lambda-Call-Status
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-Pingback
X-Host
X-Node
Accept-CH
X-CST
X-Backend-Server
X-Cache-Lookup
Surrogate-Control
X-WebKit-CSP
X-Server-Id
X-Nginx-Cache-Status
X-Readtime
Permissions-Policy
Accept-CH-Lifetime
X-Akam-SW-Version
X-Nginx-Upstream-Cache-Status
X-EdgeConnect-Origin-MEX-Latency
Request-Id
X-EdgeConnect-MidMile-RTT
X-Application-Context
X-Content-Security-Policy-Report-Only
X-Cloud-Trace-Context
X-Ua-Compatible
X-Response-Time
X-Trace
X-HW
X-Edge
Xkey
Content-Location
X-Ruxit-JS-Agent
X-Clacks-Overhead
X-Mod-Pagespeed
X-Midtier
X-ESI
Rating
X-Url
X-Litespeed-Cache
X-Amz-Server-Side-Encryption
X-ECACHE
Accept-Ch
X-Country
X-Upstream
X-Mcache
Cache-Tag
X-Vcap-Request-Id
X-MS-InvokeApp
X-D2id
Verso
X-Rack-Cache
X-Element-Page-Cache
X-Powered-By-Plesk
Edge-Control
X-Use-Magma
X-GoogleNews-Bot
X-Exp-Variant
X-Kinja-Revision
X-Kinja-Build
X-Kinja-Server
X-Kinja
X-Exp-Id
X-Cdn-Fetch
X-TtlSet
X-Vname
X-PC
RTSS
Accept-Ch-Lifetime
X-Cache-TTL
X-Ac
Fastly-Restarts
X-Ruxit-Js-Agent
X-WebKit-CSP-Report-Only
Service-Worker-Allowed
X-VARITI-CCR
X-Country-Code
X-Navigation-Version
X-Goog-Hash
Origin-Trial
X-Abt-Application-Version
X-Varnish-TTL
X-Cached
X-GitHub-Request-Id
X-Amz-Rid
Pagespeed
X-Middleton-Display
X-Aspnetmvc-Version
Display
X-Browser-Type
X-Sol
X-Oneagent-Js-Injection
X-Webkit-CSP
Cross-Origin-Opener-Policy
X-Dw-Request-Base-Id
X-Server-Name
X-SharePointHealthScore
SPRequestGuid
X-Amzn-Trace-Id
X-Kinja-CCPA
X-ORACLE-DMS-RID
X-ORACLE-DMS-ECID
X-Mg-S
X-Powered-CMS
X-NWS-LOG-UUID
X-Ttl
SPIisLatency
SPRequestDuration
Arr-Disable-Session-Affinity
X-Content-Type
X-Middleton-Response
Response
X-B3-TraceId
AR-SID
AR-PoweredBy
AR-Request-ID
AR-ATIME
X-Cache-Key
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-Instrumentation
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-FastCGI-Cache
Pinterest-Generated-By
Pinterest-Version
X-Pinterest-Rid
X-Version
X-Times
X-HP-Webp
X-HP-Trace-Id
X-Jurisdiction
X-Fastly-Request-ID
X-NF-Request-ID
X-SRCache-Store-Status
AR-CACHE
X-SRCache-Fetch-Status
X-Cnection
Cache-Tags
X-T
X-Accel-Expires
X-Client-IP
Nginx-Cache
X-Ser
X-Server-ID
Cache-Status
X-B3-Traceid
Edge-Cache-Tag
X-MSEdge-Ref
Front-End-Https
X-RateLimit-Remaining
X-Hits
X-Px
X-Ua-Device
Public-Key-Pins
X-Recruiting
Payment
MRF-Tech
Mrf-Cache-Status
X-B3-TraceId-Primal
X-Webkit-Csp
X-Request-Processing-Time
X-Request-Received
X-Frontend
Server-Node
X-LLID
X-Ua-Browser
X-RateLimit-Limit
S
X-Shield-Request-Id
X-DIS-Request-ID
X-Goog-Metageneration
X-GUploader-UploadID
X-TTL
MicrosoftSharePointTeamServices
Access-Control-Request-Method
X-Amzn-RequestId
X-Amz-Apigw-Id
TP-Cache
Content-MD5
X-Content-Digest
X-HS-Hub-Id
X-PressLabs-Stats
X-HS-Combine-CSS
X-HS-Content-Id
X-HS-Cache-Config
X-Protected-By
X-Request-Handler-Origin-Region
X-Microsite
X-Distributor
Realpath
Fastcgi-Cache
X-Erf-Stays-Pdp-Viaduct-Migration-Web
X-LB-Cache
Access-Control-Allow-Method
X-Page-Id
X-FB-Debug
Accept-Charset
X-Cluster-Name
X-Forwarded-For
X-Daa-Tunnel
X-Geo-Country
X-Ezoic-Cdn
TP-L2-Cache
X-Rid
X-Fastcgi-Cache
X-Ratelimit-Remaining
X-B3-Sampled
X-Hostname
X-Aspnet-Version
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Storage-Class
X-Seen-By
Cleartype
Cross-Origin-Resource-Policy
Referer-Policy
X-Correlation-Id
Count-Hit
X-Mobile
DC
X-Newrelic-App-Data
X-Content-Options
X-Varnish-Backend
X-Logged-In
TCN
X-Envoy-Decorator-Operation
X-Ratelimit-Limit
X-App-Server
X-Debug-Info
X-Contextid
X-Is-Crawler
X-Providence-Cookie
X-Route-Name
X-IPS-LoggedIn
X-Request-Guid
X-Git-Hash
X-Fb-Rlafr
X-Flags
X-Edge-Location-Klb
X-Aspnet-Duration-Ms
X-Kinsta-Cache
X-Hosted-By
X-Revision
X-Grace
X-Amz-Replication-Status
X-Varnish-Grace
Surrogate-Key
X-App-Environment
X-Origin-Cache
Frame-Options
X-Azure-Ref
X-TT
X-Amz-Meta-S3cmd-Attrs
X-Forwarded-Proto
Retry-After
X-Origin-Server
X-F-Cache
X-Id
WPO-Cache-Status
WPO-Cache-Message
X-TEC-API-ROOT
X-TEC-API-VERSION
X-Webkit-CSP-Report-Only
X-Magnolia-Registration
X-TEC-API-ORIGIN
X-Whom
X-RateLimit-Reset
Healthy
Alternate-Protocol
X-Wix-Request-Id
Charset
Section-Io-Cache
MS-Author-Via
Viewport
X-Akamai-Edgescape
X-Backend-Name
X-Proxy-Cache-Info
X-Client-Ip
X-App-Version
X-COUNTRY
X-B
Paypal-Debug-Id
X-Activity-Id
SRV
X-AppVersion
X-Az
X-Www-Served-By
ServerID
X-Language
X-N
Host
X-XRDS-Location
X-Original-Request-Id
X-Xrds-Location
X-Http-Reason
X-Varnish-Server
X-Instance
X-Cache-Rule
VIX-Pulpo-Upstream-Status
SD-X-WS
X-Response-Served-From
Filterid
X-ARC
VIX-Pulpo-Node
X-User-Agent
X-UUID
Country
X-Akamai-Request-ID2
Protected
Front
X-Rule
Akamai-GRN
X-Datadog-Parent-Id
Amp-Access-Control-Allow-Source-Origin
X-Varnish-Age
X-Environment-Context
X-Edge-Location
X-Datadog-Trace-Id
X-Cacheable-TTL
X-L-Path
X-Datadog-Sampling-Priority
X-Unique-Id
X-Status
X-EdgeConnect-Cache-Status
X-Cache-Grace
X-Page-View
X-Region
X-Rendered-As
Access-Control-Request-Headers
X-FW-Dynamic
From-Origin
X-Cache-Time
X-Rocket-Nginx-Serving-Static
X-Type
Server-Name
X-FW-Hash
X-FW-Static
X-FW-Type
X-Is-Bot
X-FW-Server
X-FW-Serve
X-Jobs
X-FW-Version
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Trace-Id
X-Tec-Api-Root
Fastly-SIE
X-Framework
X-Tumblr-Pixel
X-DataDome
X-Adobe-Loc
Fastly-SWR
X-Time
X-Tumblr-Pixel-0
X-Tec-Api-Version
X-Tumblr-User
X-Adobe-Content
X-Tec-Api-Origin
X-Tumblr-Pixel-1
X-Load-Cache
X-RemovedCookies
X-ProcessESI
X-Proxy
X-G
X-Yottaa-Metrics
X-Cache-Control
X-Yottaa-Optimizations
X-Cache-Age
X-Datadog-Sampled
X-Amzn-Remapped-Content-Length
X-CDN-Forward
Content-Disposition
X-Vcache
X-Debug-IsPreview
X-Debug-IsConnected
X-Signature
X-B-Cache
Refresh
X-Mg-Request-UUID
X-ECache
Backend
X-Drupal-Cache-Tags
X-Nf-Request-Id
X-WP-CF-Super-Cache-Cache-Control
Accept-Language
X-WP-CF-Super-Cache
X-Source
Countrycode
Xet-Cookie
X-DynaTrace
Webserver
CF-IPCountry
X-MCACHE
X-Erf-Web-Scheduler
X-Generated-By
X-HTML-Minification-Powered-By
X-Nginx-Cache
X-XRDS-LOCATION
X-Httpd
X-Servername
Version
X-Tt-Trace-Tag
X-DynaTrace-JS-Agent
Url
X-Tt-Trace-Host
X-Mode
Xserver
X-Storage
X-NYM-Debug-Backend
X-Content-Powered-By
X-Device-Type
X-Template
X-Content-Age
GEO-INFO
Filters
X-UPSTREAM-Address
Locale
X-Cache-Action
X-Cache-Operation
S-Rt
Meta-Geo
Onion-Location
Load-Balancing
OT-Force-Account-Verify
X-Director
X-Varnish-Cache-Hits
X-JoinUs
X-ServerID
X-Urbn-Site-Id
X-LAGOON
X-Rewrite-Enabled
X-Urbn-Context-Path
X-SaId
X-Soup
X-Container-Uri
X-Cluster-Node
X-Generation-Time
X-SayCDN-TTL
X-Say-TTL
X-Say-Cacheable
Azure-InstanceId
X-Git-Commit
Azure-Version
X-Proto
Azure-SlotName
Azure-SiteName
X-Tt-Logid
Azure-RegionName
Web-Mar-Node
X-Forwarded-Host
X-Cache-Server
X-Served-From
X-Tb
X-VCT
X-Varnish-Hostname
X-Detected-As
X-Ms-Version
X-Sql-Duration-Ms
X-Ms-Request-Id
X-Sql-Count
X-Proxied
Property-Id
X-GeoCode
TWC-Connection-Speed
X-R9-Blue-Green-Version
Node
X-Logging-Id
Mn-Server-Ip
X-Labrador-Cache-Channel
X-PHP-Host
X-GeoCountry
X-RM-Cache-TTL
X-Zipkin-Id
X-Skip-Cache
X-Lambda-Id
X-Rn-Rsrv
DB-Nickname
X-Extlb
X-Tumblr-Pixel-2
X-Origin-Hint
X-Tumblr-Pixel-3
X-VC-Cache
X-Format
X-Adobe-Source
TWC-Locale-Group
TWC-GeoIP-LatLong
TWC-GeoIP-Country
X-RCS-CacheZone
Uber-Trace-Id
Webcakes-App-Name
X-Routing-Service
Webcakes-Region
Webcakes-App-Version
TWC-Device-Class
TWC-Privacy
X-URL
X-TimeS
X-Zen-Fury
X-Uri
X-Debug
X-FB-TRIP-ID
X-Proxy-Build
Selected-Fe
X-Timing-Wait
X-Tncms
X-Loop
X-Upgrade-Enabled
X-Fetched-On
X-CCDN-Origin-Time
X-Hcs-Proxy-Type
X-CCDN-CacheTTL
X-Cache-Hit
X-LSADC-Cache
X-Sucuri-ID
X-Sucuri-Cache
X-Ua
Cross-Origin-Window-Policy
Fastcgi-Useragent
X-Endurance-Cache-Level
Source
X-Drupal-Cache-Contexts
X-Redis-Cache
X-B3-SpanId
X-ID
X-Srv
X-Oracle-Dms-Ecid
X-Oracle-Dms-Rid
CDN-RequestId
X-MP-GENERATED-AT
Liferay-Portal
Section-Io-Origin-Time-Seconds
X-Pass-Why
Section-Io-Id
Section-Origin-Responded
Section-Io-Origin-Status
X-Origin-Date
X-Cache-Expired-At
X-S
X-Ratelimit-Reset
Fastly-Drupal-HTML
X-Akamai-Transformed
X-Newrelic-Synthetics
Upgrade-Insecure-Requests
X-Origin-CC
X-Real-IP
X-NGENIX-Cache
X-Origin-TTL
X-Varnish-Hits
X-Cache-TTL-Remaining
NGB
X-Node-Name
X-CACHE-AGE
X-Handled-By
X-Via-JSL
X-Pubstack
X-Fastly-Request-Id
X-UA-Device-Type
X-Hl-Ver
Content-Secure-Policy
Ms-Operation-Id
CDN-RequestPullSuccess
X-Restarts
X-Xfnlog-Site
X-RTag
CDN-Uid
X-Reqid
X-Cache-Type
X-Cms-Context
Apigw-Requestid
MS-CV
X-Server-W
CDN-RequestPullCode
CDN-CachedAt
X-CSRF-Token
X-Optimistic-Header
CDN-Cache
CDN-EdgeStorageId
X-GEO
CDN-RequestCountryCode
CDN-PullZone
X-Varnish-Ttl
X-Parent-Response-Time
ServedBy
X-ProxyCache-Key
X-No-Session
X-ProxyCache-Status
X-BYPASS-REASON
WP-Super-Cache
X-A-Dcw
X-Gdpr
X-CF-Lambda-Fn
X-Application
X-FC-Vary-Parameters
X-Forwarded-Path
X-App
X-Fastly-Backend
X-Eu-Site
X-A-Dgt
X-D
X-Debug-Cache-Fetch
X-Debug-Cache-Store
X-Bc-Bl
X-BCube-Filmed-By
X-Bl-Debug
X-A-Wwc
X-Cache-Host
X-Conf
X-CGP
X-Destination
X-Developer
X-Cache-NE
X-B-Cookie
X-CacheTTL
X-Epic-Correlation-Id
X-Csrf-Jwt
X-Aed
X-Ec-GeoHdr
X-CF-Lambda-Version
X-Dispatcher-Number
X-Ec-Custom-Error
X-Ec-Fail
X-External-Request-Id
Canary
X-Slack-Shared-Secret-Outcome
X-Slack-Backend
N-Cache
Meta-Geo-Continent
MD5-Digest
X-SRCache-Key
Ngx.Var.Host
DCR-Processing-Time-Ms
X-ScT
X-S-Cookie
X-SD-PageType
DCR-Decision-By
X-Shop-Environment
X-Tenant
Magicmarker
X-Vtex-Remote-Cache
X-Viewer-Country
X-We-Are-Hiring
Gh-Request-Id
Xc-Version
Ha-Gx-Prefs
L
Gannett-Cam-Experience-Id
L5d-Success-Class
Lang
Fastly-SSL
X-Vdms-Path
X-Vdms-Version
X-Rojux
Odigeo-Trace-Id
X-Orig-Expires
X-Origin-Time
Candidate-Md5Url
Surrogated-Key
X-A
Web-Mar-Region
Vix-Hermes-Req-Id
X-Nyt-Route
W
T-Server
BehaviorPad-Version
X-Datadome
X-A-Dam
Origin-Agent-Cluster
X-Request-Host
X-FTR-Request-ID
Sslversion
Redirect-Candidate
Server-Host
HA-Ipaddr
Rendered-Blocks
X-A-Ccd
X-Cluster
X-LJ-Flow-ID
X-AWS-Id
Cache-Provider
X-Vcl-Version
X-VWS-Id
Req-Svc-Chain
Release
X-Accel-Expires-Debug
VNS-Cache
Host-ID
Mail-Subject
X-ApacheServer
We-Hiring
Origin
VNS-Age
True-Client-Country-4JS
X-GeoIP-Region-Code
X-Server-IP
X-Request-Time
X-ShardId
X-ShopId
X-Shopify-Stage
X-Refresh
X-RateLimit-Remaining-Second
X-Platform
X-PERF
X-Policy
X-Pool
X-RateLimit-Limit-Second
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-VG-WebCache
X-VG-TLSProxy
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-Worker
X-Varnishpool
X-Var-Ttl
X-Storefront-Renderer-Rendered
X-Test
X-Thanos
X-Up
X-PAYTM-SRV-ID
X-Owner
X-Core-Value
X-Clientip
X-Date
X-Generated-On
X-Geo-Header
X-Cdn-Diag
X-Cache-Info
X-BBC-Edge-Cache-Status
X-Auto-Login
X-Bip
X-Cache-Bucket
X-Cache-Debug
X-GeoIP-Country-Code
X-Hash
X-Node-Id
X-Nitro-Cache
X-NodeID
X-Old-Content-Length
X-Org
X-Mvc-Supplant-Cachable
X-Mly-Id
X-Human
X-Irp-Debug
X-Level-Front-Cache
X-Mid
X-App-Name
X-Alternate-Cache-Key
CPC-Age
Expect-Staple
Environment
CPC-Cache
X-Tx-Id
Datacenter
Cmstype
Cf-Device-Type
AKAMAI
Cmsid
X-AIR-PT
Cache-Name
Fastly-GeoIP-CountryCode
Fastly-Backend-Name
X-TIME
AMP-Access-Control-Allow-Source-Origin
X-IPLB-Instance
X-Proxy-Cache-Status
X-IPLB-Request-ID
User-Cache-Control
X-DPWN-IS-SECURE
X-Esi-Check
X-Cdn-Origin
X-Cdn-Srv
X-S-Maxage
Apple-News-Services-Parsed-Url
X-Core-Mission
Apple-News-Services-Request-Url
X-Qloud-Router
Apple-News-Services-Host
Apple-News-Services-Handled
X-Forwarded-Site
X-Gen-Mode
X-Loc
X-Mvc-Supplant-OutputCached
X-Block-Status
X-Gzip
X-Hnp-Log
X-INCAP-ABP
X-From
X-Cache-Id
X-Origin-Response-Time
X-Correlation-ID
Adler-Geo
X-Origin
Thinkindot-Control
X-Nginx-Cache-Key
X-Accel-Buffering
X-Fmm-Version
X-Sn-Servicetimems
X-VServer
NM-Fastcgi-Cache
DSUID
X-Vmg-Version
X-DefHash
Thinkindot-CacheControl-Type
X-Varnish-Remaining-TTL
X-CMSURLCustom
X-WA-Info
Machine
Is-Eu
X-Nananana
Esi-Enabled
X-DefElseHash
X-WADP-Cache
X-Wix-Viewer-Type
X-Clara-WADP
X-Varnish-CookieINHashed-On
X-SVT-ORM-VERSION
X-Thinkindot-L3
Platform
X-SVT-ORM-RULES
X-Cache-Status-Check
Thinkindot-CacheControl
TDXMobile
CDCHOST
X-Dispatcher-Server
Sever-Int
X-Varnish-CookieHashed-On
Country-Code
Producers
Server-Ext
X-Variation
Server-Hostname
X-Has-Esi
X-GeoIP
X-Device-Os
X-Cache-Enabled
X-Micro-Cache
C-Via
Wxu-Next-Hostname
X-Instance-Name
Wxu-Next-Region
Wxu-Next-Commit
Pics-Label
Server-Info
Ssr
X-Section
NGX
X-Op-Id-All
X-LB-NoCache
X-JWT-State
X-Is-Gdpr
X-Amz-Meta-Cb-Modifiedtime
Memcached
X-Access
X-NCache
X-Akamai-Device-Characteristics
CloudFront-Viewer-Country
X-AB
X-API-Version
X-B3-Spanid
X-Dc
Cache-Hits
X-Via-Fastly
X-Presslabs-Stats
Server-ID
Hostname
X-Geo-Region
Origin-EX
Origin-CC
X-Vgn-Hpd-Reason
X-HA-Backend
X-CACHE-GROUP
X-PHP-Backend
X-Scale
Time
Memory
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-TIM-N
Cdn-Requestid
Location
X-Wp-Cf-Super-Cache-Active
X-TraceId
X-Accel-Version
X-Air-Hostname
X-Air-Trace-Id
X-Platform-Processor
X-Platform-Router
X-Platform-Cluster
X-Air-Source
X-Tb-Optimization-Total-Bytes-Saved
X-Buckets
Sid
X-Webkit-Csp-Report-Only
X-Internal-Host
IsBot
X-ZONE
X-SIPLIST1
X-Zone
X-Browser-Name
X-Tcp-Rtt
X-Is-Tablet
X-Cs
X-Is-Desktop
X-Is-Mobile
X-Is-Supported-Browser
X-Azure-Ref-OriginShield
X-TA-CDN-Provider
X-WP-CF-Super-Cache-Active
X-Backend-Instance
X-B3-Parentspanid
Resin-Trace
YJS-ID
CF-Ctrl
GeoIP-Latitude
X-Fpc
X-Microcachable
Cache-Host
X-Cached-By
X-Origin-Expires
X-DC
X-Web-Node
XM
X-DataCenter
X-Info
Uri
X-NewRelic-App-Data
X-VarnishDD-TTL
Epwk-X-Cache
X-Hyper-Cache
X-Site-Version
X-VCache
True-Client-Ip
X-Pod-Name
PFcat
X-HN
X-Locale
X-LiteSpeed-Cache-Control
X-Frame-Option
X-Nitro-Cache-From
X-NGINX-Cache
GeoIp-Country-Code
User-Agent
X-Nitro-Rev
X-Ad-Defer-Variation
X-FL-QIT-DEBUG
A
X-Service
Locid
GeoIP-Country-Code
X-FL-EDGE
X-Via-SSL
X-Via-CDN
Edge-Copy-Time
X-Via-Edge
Srvid
X-VC
X-Datacenter
X-Webstats-RespID
X-Geo
Cdn
X-CS
X-Github-Request-Id
XServer
X-Origin-Cache-Key
X-CSRF-TOKEN
X-FTR-Backend-Server
X-FTR-Balancer
X-Moov-Xdn-Version
X-FTR-Backend
X-Cache-ASPX
X-FireWall-Port
True-Client-IP
X-FTR-Cache-Status
X-Moov-T
X-ATG-Version
X-Varnish-Authentication
Tcn
X-FTR-Expires
X-Contensis-Viewer-Groups
X-Country-Code-Real
X-HostName
LB
SID
X-MSEdge-Flight
Fastly-Drupal-Html
X-Pad
Cache-Key
X-TRACE-ID
Cdn-Request-Time
Cdn-Host
NtCoent-Length
X-Edge-Server
X-MSEdge-Features
X-SRV
X-Vercel-Cache
X-NMSegId
X-Vercel-Id
Req-ID
Path
M-TraceId
X-FPC
Cluster
X-LiteSpeed-Tag
WZWS-RAY
X-Cdn-Request-ID
X-Api-Version
X-Upstream-Ct
X-Upstream-Ht
Cf-Ipcountry
X-APP-VERSION
CountryCode
X-HS-Content-Campaign-Id
State
X-Ad-Load-Variation
Pramga
X-Request-Start
X-Esi
X-AK-Request-ID
Cdnsip
Cdncip
Content-Script-Type
X-Amz-Meta-Opti
X-Air-Pt
X-Platform-Server
X-M-Log
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
X-M-Reqid
Content-Style-Type
X-Planisys-CDN-Cache
Lb
X-Varnish-Beresp-Status
X-Qnm-Cache
X-Branch-Name
X-Scope-Id
X-Fastly-Cache
X-Vgn-Hpd-Cached
X-Vgn-Hpd-Ssi
X-Wp-Cf-Super-Cache
X-Wp-Cf-Super-Cache-Cache-Control
WebServer
X-Release
X-Vgn-Hpd-Variations-Key
X-Cache-Ttl
X-WP-CF-Super-Cache-Cookies-Bypass
X-Wp-Cf-Super-Cache-Cookies-Bypass
Yak-Timeinfo
X-Cache-Date
X-Generated-In
X-Traceid
X-NWS-UUID-VERIFY
Edge-Cache
X-Request-URI
X-Proxy-CacheRZ
XkeyRZ
X-Rocket-Build-Number
Proxy-Connection
X-Sigma-Backend
X-Shield-Cache-Expires
X-Sigma
X-Cache-Remote
Ohc-File-Size
X-CACHE-KEY
HostName
X-Rebelmouse-Surrogate-Control
CDN
X-Rebelmouse-Cache-Control
X-Akamai-Pragma-Client-IP
X-HS-Status
Srv
Cache
X-Dw-Trace-Id
X-Cdn-Forward
Geoip-Latitude
X-Render-Time
X-Tim-N
X-User
X-TH-Server
X-Lb-Cache
Cache-Tv-Group
X-Req
CF-Cached-On
Tube-Return
Tube-Got-Eval
Tube-Get-Contents
X-B3-Trace-ID
Tube-Got-Results
X-UA
X-Iplb-Instance
X-Aicache-OS
X-Cache-FS-Status
X-Acquia-Purge-Cdn-Unconfigured
X-Iplb-Request-Id
X-LB-ID
Click-Count-Action-Start
Click-Count-Error
X-SB
X-Via-Poph
X-GeoIP-City
Server-Id
X-Ha-Backend
X-V-Cache
X-Via-Popn
X-GoCache-CacheStatus
X-Gamma-Serve
X-Scheme
X-Via-Popv
X-Provided-By
X-TT-LOGID
X-RID
X-Via-Ucdn
X-CUA
X-Wa
V-Age
Ohc-Cache-HIT
X-Nc
On-Server
X-Men
X-Acquia-Application-UUID
X-EC-Lua
PICS-Label
X-Vc
X-Vary
X-Lb-Nocache
X-Acquia-Site
X-Acquia-Application-Trace
X-Acquia-Purge-Tags
X-Cdn-Cache-Status
X-Servedbyhost
Yjs-Id
X-RN-RSRV
X-VCL-Version
X-TX-ID
X-Fastly-Backend-Reqs
Mime-Version
MIME-Version
X-Edge-POP
X-Snapshot-Date
Vha6-Origin
X-Cached-Since
X-Fastly-Cache-Hits
Inserted-Into-Cache-At
Env
CACHE-MISS-TO-ORIGIN
X-ElasticPress-Query
X-Litespeed-Cache-Control
Cneonction
X-CF-Cache-Header-Cache-Control
X-CF-Cache-Header-Vary
X-Miniprofiler-Ids
X-RAMCache
Ngx
Log-Origin
X-Udemy-Cache-App-Namespace