Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Accept-Ranges
X-XSS-Protection
Expect-CT
Pragma
X-Powered-By
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Access-Control-Allow-Origin
Referrer-Policy
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
X-UA-Compatible
X-Served-By
X-Xss-Protection
X-Download-Options
CF-Ray
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-FRAME-OPTIONS
X-Request-ID
X-Request-Id
X-Permitted-Cross-Domain-Policies
X-AspNet-Version
Alt-Svc
X-Runtime
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-DNS-Prefetch-Control
X-Check
X-Generator
X-Cache-Status
X-Cacheable
Timing-Allow-Origin
X-Iinfo
X-Envoy-Upstream-Service-Time
X-Content-Security-Policy
X-Drupal-Dynamic-Cache
Feature-Policy
Content-Encoding
Access-Control-Expose-Headers
Upgrade
Status
X-CDN
X-AspNetMvc-Version
P3p
Access-Control-Max-Age
X-Via
Server-Timing
X-UA-Device
Request-Context
X-Robots-Tag
X-Turbo-Charged-By
X-Amz-Request-Id
X-Cache-Group
EagleId
X-Amz-Id-2
X-Backend
X-AH-Environment
X-Proxy-Cache
Keep-Alive
X-Server
X-Ua-Compatible
X-Ws-Request-Id
X-Age
Host-Header
X-Hacker
Cf-Edge-Cache
X-Vhost
X-Server-Powered-By
X-Rq
X-Dns-Prefetch-Control
X-Varnish-Cache
X-Dispatcher
X-Amz-Version-Id
Allow
Grace
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-OneAgent-JS-Injection
X-LiteSpeed-Cache
X-WebKit-CSP
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Page-Speed
X-Device
Cf-Apo-Via
Accept-CH
Cf-Railgun
X-Aws-Lambda-Call-Status
X-Node
X-Host
X-Pingback
X-Ruxit-JS-Agent
X-Server-Id
X-Nginx-Cache-Status
EagleEye-TraceId
X-Cache-Spec
X-Akam-SW-Version
Surrogate-Control
X-Backend-Server
Request-Id
X-Readtime
X-Cache-Lookup
X-HW
Accept-Ch-Lifetime
X-Content-Security-Policy-Report-Only
X-Cloud-Trace-Context
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Trace
X-Application-Context
X-Response-Time
Fastly-Restarts
Permissions-Policy
X-Nginx-Upstream-Cache-Status
X-Mod-Pagespeed
X-Edge
X-WebKit-CSP-Report-Only
X-CST
Content-Location
X-Mcache
X-Content-Type
X-Url
X-MS-InvokeApp
Accept-CH-Lifetime
X-Clacks-Overhead
X-Country
Rating
X-Midtier
X-TtlSet
X-Amz-Server-Side-Encryption
X-PC
X-Vname
X-Litespeed-Cache
RTSS
X-ECACHE
Cache-Tag
X-VARITI-CCR
X-ESI
X-Vcap-Request-Id
X-D2id
X-Element-Page-Cache
Origin-Trial
Verso
X-Server-Name
X-Kinja-Server
X-Exp-Variant
X-Use-Magma
X-GoogleNews-Bot
X-Kinja-Revision
X-Kinja
X-Cdn-Fetch
X-Kinja-Build
X-Exp-Id
X-Ac
X-Rack-Cache
X-B3-TraceId
X-Cnection
X-Powered-By-Plesk
X-GitHub-Request-Id
Service-Worker-Allowed
SPRequestGuid
X-SharePointHealthScore
X-Amz-Rid
X-Client-IP
Xkey
X-Navigation-Version
X-Cache-TTL
X-Ttl
X-Abt-Application-Version
Edge-Control
X-Varnish-TTL
X-NWS-LOG-UUID
SPIisLatency
SPRequestDuration
X-Upstream
Arr-Disable-Session-Affinity
X-Cached
X-Server-Lifecycle-Phase
X-Browser-Type
X-Instrumentation
X-Kraken-Loop-Name
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-Mg-S
X-Px
X-Dw-Request-Base-Id
X-Cache-Key
Pagespeed
Display
X-Sol
X-Middleton-Display
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Correlation-Id
Access-Control-Request-Method
Content-MD5
Edge-Cache-Tag
X-Forwarded-For
X-Goog-Hash
X-Country-Code
X-Webkit-Csp
X-NF-Request-ID
X-FastCGI-Cache
Front-End-Https
X-Id
TCN
X-Powered-CMS
X-Version
Public-Key-Pins
X-XRDS-Location
AR-SID
AR-CACHE
AR-ATIME
AR-PoweredBy
AR-Request-ID
X-HP-Webp
X-Jurisdiction
Accept-Ch
X-HP-Trace-Id
X-RateLimit-Remaining
X-T
X-Recruiting
X-MSEdge-Ref
X-Content-Digest
X-Daa-Tunnel
X-Accel-Expires
X-Amzn-Trace-Id
X-Ser
Response
X-Middleton-Response
TP-Cache
TP-L2-Cache
X-Shield-Request-Id
S
MicrosoftSharePointTeamServices
Nginx-Cache
Mrf-Cache-Status
X-B3-TraceId-Primal
MRF-Tech
X-Fastcgi-Cache
Cache-Status
X-Ratelimit-Limit
X-Request-Processing-Time
X-Request-Received
X-HS-Hub-Id
X-HS-Content-Id
X-HS-Combine-CSS
X-HS-Cache-Config
Server-Node
X-Distributor
Cache-Tags
X-Hits
X-Edge-Location-Klb
X-Kinsta-Cache
Fastcgi-Cache
X-LB-Cache
X-Ratelimit-Remaining
X-DataDome
X-Grace
X-Origin-Server
Server-Name
Alternate-Protocol
X-Ua-Browser
Cross-Origin-Opener-Policy
X-Ezoic-Cdn
X-DIS-Request-ID
X-Ratelimit-Reset
X-PressLabs-Stats
Filterid
X-Protected-By
X-Microsite
X-Geo-Country
X-Request-Handler-Origin-Region
X-Rid
Healthy
X-Www-Served-By
X-Logged-In
X-Frontend
X-Varnish-Backend
X-Debug-Info
X-LLID
Payment
X-Git-Hash
Cleartype
X-Hostname
X-NGENIX-Cache
X-FB-Debug
X-Forwarded-Proto
X-Load-Cache
X-Page-Id
X-Fastly-Request-ID
X-Origin-Cache
X-TEC-API-ORIGIN
X-ASPNET-VERSION
X-TEC-API-ROOT
X-TEC-API-VERSION
X-Cluster-Name
DC
Charset
MS-Author-Via
Content-Disposition
X-TTL
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-B3-Sampled
Realpath
Access-Control-Allow-Method
X-GUploader-UploadID
X-Goog-Metageneration
X-Proxy
X-Upgrade-Enabled
X-Kong-Proxy-Latency
X-F-Cache
X-Kong-Upstream-Latency
X-Activity-Id
X-AppVersion
X-Az
Retry-After
X-VCache
X-Seen-By
X-Amz-Replication-Status
Cross-Origin-Resource-Policy
Paypal-Debug-Id
X-Contextid
X-Server-ID
X-Amz-Meta-S3cmd-Attrs
Accept-Charset
X-Type
X-Revision
X-Request-Guid
X-Route-Name
X-Signature
X-Providence-Cookie
X-Whom
X-Flags
X-B-Cache
X-Azure-Ref
X-Fb-Rlafr
Viewport
X-Hosted-By
X-Is-Crawler
X-Aspnet-Duration-Ms
Count-Hit
X-Varnish-Server
X-TT
Surrogate-Key
X-Wix-Request-Id
X-App-Environment
X-Aspnetmvc-Version
X-B
Amp-Access-Control-Allow-Source-Origin
X-Akamai-Edgescape
X-DynaTrace
X-Oracle-Dms-Ecid
X-Oracle-Dms-Rid
X-Language
X-Cache-Age
X-Source
X-RateLimit-Limit
X-ECache
Referer-Policy
X-App-Server
X-Fastly-Request-Id
X-Cache-Control
X-Mobile
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
X-COUNTRY
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Magnolia-Registration
Host
X-Tt-Trace-Host
X-Varnish-Grace
X-Tt-Trace-Tag
X-B3-Traceid
Version
X-Times
X-HTML-Minification-Powered-By
X-Envoy-Decorator-Operation
X-N
X-Cache-Rule
X-Tumblr-Pixel-0
X-UUID
X-Tumblr-Pixel
X-Tumblr-Pixel-1
X-Tumblr-User
SRV
X-Original-Request-Id
X-Response-Served-From
MS-CV
Ms-Operation-Id
X-RTag
X-Rule
Access-Control-Request-Headers
X-Cache-Time
X-Varnish-Age
SD-X-WS
X-EdgeConnect-Cache-Status
X-Cache-Expired-At
X-Framework
X-Content-Powered-By
Section-Io-Cache
X-Cache-Status-Check
Akamai-GRN
GEO-INFO
WPO-Cache-Message
X-Backend-Name
X-FW-Type
X-FW-Static
X-FW-Server
X-FW-Version
X-Page-View
X-RemovedCookies
X-ProcessESI
X-FW-Serve
X-FW-Hash
X-Adobe-Loc
X-Adobe-Content
Refresh
X-Cache-Grace
X-Cacheable-TTL
X-FW-Dynamic
X-Device-Type
Protected
WPO-Cache-Status
X-Template
X-User-Agent
X-Status
X-G
VIX-Pulpo-Upstream-Status
X-Servername
VIX-Pulpo-Node
X-Instance
NGB
X-Jobs
X-Is-Bot
X-Rendered-As
X-Drupal-Cache-Contexts
X-Trace-Id
X-NYM-Debug-Backend
Url
X-L-Path
X-Environment-Context
X-Http-Reason
X-Akamai-Request-ID2
X-Drupal-Cache-Tags
CDN-RequestId
From-Origin
X-CDN-Forward
X-Amz-Apigw-Id
X-Region
X-Amzn-RequestId
Front
X-Debug-IsConnected
X-Debug-IsPreview
Accept-Language
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Nginx-Cache
X-Cache-Hit
X-Tec-Api-Version
X-Tec-Api-Origin
X-Tec-Api-Root
X-Unique-Id
X-Content-Options
Country
Backend
Fastly-SIE
Fastly-SWR
X-Zen-Fury
X-Tb
X-Varnish-Ttl
X-Air-Hostname
X-Air-Trace-Id
X-Air-Source
Liferay-Portal
X-DynaTrace-JS-Agent
X-Pinterest-Rid
X-Tt-Logid
X-Node-Name
X-Mode
Pinterest-Generated-By
Pinterest-Version
Content-Secure-Policy
X-Cache-Operation
X-Real-IP
X-Ms-Request-Id
Webserver
X-Generation-Time
Meta-Geo
X-Cache-Server
Uber-Trace-Id
X-UPSTREAM-Address
X-Tumblr-Pixel-2
X-VC-Cache
X-Proxy-Cache-Info
X-Rewrite-Enabled
X-RN-RSRV
Filters
X-Ms-Version
X-Amzn-Remapped-Content-Length
X-Content-Age
X-Format
X-Section
X-TIME
Azure-InstanceId
X-Rocket-Nginx-Serving-Static
X-Reqid
X-Proxy-Build
CF-IPCountry
X-IPS-LoggedIn
X-Access
X-PHP-Backend
X-Time
Azure-RegionName
Selected-Fe
X-Web-Node
Onion-Location
X-Timing-Wait
Cache-Hits
Azure-SlotName
X-Newrelic-App-Data
Azure-Version
Azure-SiteName
Webcakes-App-Version
Webcakes-Region
X-BYPASS-REASON
X-AWS-Id
X-Adobe-Source
TWC-Device-Class
TWC-Connection-Speed
ServedBy
Property-Id
X-Cache-TTL-Remaining
TWC-GeoIP-Country
TWC-Privacy
TWC-Locale-Group
TWC-GeoIP-LatLong
Webcakes-App-Name
X-LJ-Flow-ID
X-Sql-Duration-Ms
X-Sucuri-Cache
X-Soup
X-Server-W
X-SayCDN-TTL
X-Sucuri-ID
X-Ua
X-R9-Blue-Green-Version
X-VWS-Id
X-Via-Fastly
X-UA-Device-Type
X-Say-TTL
X-Say-Cacheable
X-IPLB-Instance
X-IPLB-Request-ID
X-Debug
X-Cms-Context
X-Cluster-Node
X-Locale
X-Origin-Hint
X-ProxyCache-Status
X-ProxyCache-Key
X-Proxy-Cache-Status
X-Proto
X-Cluster
X-Sql-Count
Cache-Name
Node
X-Cache-Action
X-Cache-Host
Web-Mar-Node
Apigw-Requestid
ServerID
X-Skip-Cache
X-Site-Version
X-Handled-By
X-Labrador-Cache-Channel
X-Buckets
X-Forwarded-Host
X-No-Session
X-PHP-Host
X-Varnish-Beresp-Grace
DB-Nickname
S-Rt
X-Extlb
Mn-Server-Ip
X-Edge-Location
X-WP-CF-Super-Cache
X-Detected-As
X-SaId
X-Routing-Service
X-Ruxit-Js-Agent
X-FB-TRIP-ID
X-Xfnlog-Site
X-Proxied
X-JoinUs
X-WP-CF-Super-Cache-Cache-Control
Cross-Origin-Window-Policy
X-Optimistic-Header
X-Zipkin-Id
X-LAGOON
X-App-Version
Locale
X-Tumblr-Pixel-3
X-Urbn-Context-Path
X-Urbn-Site-Id
WP-Super-Cache
X-Origin-Date
Countrycode
Fastcgi-Useragent
X-GeoCountry
X-GeoCode
X-Uri
Fastly-Drupal-HTML
X-LSADC-Cache
X-XRDS-LOCATION
CDN-EdgeStorageId
CDN-RequestCountryCode
CDN-Uid
Source
CDN-Cache
CDN-PullZone
CDN-CachedAt
Mime-Version
X-Oneagent-Js-Injection
X-Hl-Ver
X-ARC
X-Director
X-Request-Time
CF-Cached-On
Cache-Tv-Group
X-Mg-Request-UUID
Upgrade-Insecure-Requests
X-GEO
X-Generated-By
X-Varnish-Hits
X-Redis-Cache
X-Tx-Id
X-Cache-Debug
X-SRV
X-Loop
X-Webkit-CSP-Report-Only
X-TNCMS
Xet-Cookie
X-Pass-Why
X-Akamai-Transformed
X-Origin-CC
Frame-Options
X-FireWall-Port
X-URL
X-Origin-TTL
X-TA-CDN-Provider
X-Varnish-Cache-Hits
X-Varnish-Hostname
X-RM-Cache-TTL
X-Storefront-Renderer-Rendered
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Alternate-Cache-Key
X-ShardId
X-ShopId
X-Shopify-Stage
X-ServerID
X-Newrelic-Synthetics
Xserver
X-Datadog-Sampled
X-Datadog-Sampling-Priority
X-Datadog-Parent-Id
X-Datadog-Trace-Id
X-NWS-UUID-VERIFY
X-Varnish-Beresp-Ttl
X-Service
X-CACHE-AGE
X-Endurance-Cache-Level
X-Request-Host
X-Served-From
X-B3-Spanid
X-Pubstack
X-Storage
X-External-Request-Id
X-A-Dgt
Req-Svc-Chain
X-Epic-Correlation-Id
Sslversion
Surrogated-Key
X-Ec-GeoHdr
X-Destination
X-D
X-Developer
X-B-Cookie
X-Ec-Fail
BehaviorPad-Version
MD5-Digest
DCR-Decision-By
X-Frame-Option
DSUID
X-Gdpr
X-A-Dcw
X-A-Wwc
Candidate-Md5Url
Edge-Cache
Cache-Host
X-Application
X-Aed
T-Server
X-A-Ccd
Lang
X-CUA
Thinkindot-Control
Thinkindot-CacheControl
DCR-Processing-Time-Ms
Origin
X-A
Odigeo-Trace-Id
X-Bip
WWW-Authenticate
Release
X-BBC-Edge-Cache-Status
Redirect-Candidate
Rendered-Blocks
X-BCube-Filmed-By
A
X-A-Dam
Meta-Geo-Continent
Ngx.Var.Host
X-CMSURLCustom
X-Conf
Memcached
X-Core-Value
Gannett-Cam-Experience-Id
Host-ID
TDXMobile
Thinkindot-CacheControl-Type
X-Cache-Date
X-Cache-Info
X-Cache-NE
X-Bc-Bl
X-Origin-Time
X-Rocket-Build-Number
X-S-Maxage
X-Nyt-Route
X-TIM-N
Xc-Version
X-VG-TLSProxy
X-Mobile-URL
X-Thinkindot-L3
X-WA-Info
X-Generated-On
X-Platform-Router
X-Vdms-Path
X-Vdms-Version
X-Platform-Processor
X-Platform-Cluster
X-Api-Version
X-S-Cookie
X-Processor
X-Mid
X-ScT
X-Httpd
X-Thanos
X-S
X-Sigma-Backend
X-We-Are-Hiring
X-Sigma
X-INCAP-ABP
Load-Balancing
X-Loc
X-Location
X-Level-Front-Cache
X-Test
X-Rojux
X-SRCache-Key
Server-Info
X-VServer
X-Vmg-Version
Tube-Return
We-Hiring
Tube-Got-Results
Tube-Got-Eval
Tube-Get-Contents
Ssr
NM-Fastcgi-Cache
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
NGX
Mail-Subject
X-Sn-Servicetimems
X-SD-PageType
X-SB
X-Varnish-CookieINHashed-On
X-Varnish-Remaining-TTL
X-Varnish-CookieHashed-On
X-Varnish-Beresp-Status
Server-Host
X-Var-Ttl
X-Varnishpool
X-Mly-Id
X-Ec-Custom-Error
X-JWT-State
X-Is-Gdpr
X-Developers
X-Mvc-Supplant-Cachable
X-DefElseHash
X-DefHash
X-Node-Id
X-Fetched-On
X-Human
X-GeoIP-City
X-GeoIP
X-Geo-Header
X-Has-Esi
X-Fmm-Version
X-HS-Content-Campaign-Id
X-Hash
X-NodeID
X-Old-Content-Length
X-Restarts
X-Req
X-Pool
X-Auto-Login
X-WP-CF-Super-Cache-Active
X-Worker
Magicmarker
X-Akamai-Device-Characteristics
X-Platform-Server
X-Cache-Bucket
X-Origin
X-Org
X-Core-Mission
X-Origin-Response-Time
X-Clara-WADP
X-Cdn-Origin
X-Cdn-Srv
X-WADP-Cache
State
Decoy-Debug-Key
Country-Code
CloudFront-Viewer-Country
Decoy-Debug-Status
Decoy-Debug-TTL
Gh-Request-Id
Fastly-Backend-Name
Environment
Fastly-GeoIP-CountryCode
Click-Count-Error
Apple-News-Services-Request-Url
Cache-Key
C-Via
Click-Count-Action-Start
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
CacheControlHeader
Apple-News-Services-Handled
AKAMAI
Section-Io-Id
Section-Io-Origin-Status
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
X-Tid
X-Parent-Response-Time
X-Cache-Tags
X-Request-Start
X-Cache-Id
X-CacheTTL
X-Region-Sid
X-Device-Os
X-Qloud-Router
X-Date
X-Cache-Backend
X-Ckpd-Fst-Backend
Adler-Geo
X-Azure-Ref-OriginShield
X-Variation
X-VarnishDD-TTL
X-Wix-Viewer-Type
X-Slack-Shared-Secret-Outcome
X-Slack-Backend
X-Dispatcher-Number
X-Scale
X-Server-IP
X-Block-Status
X-DPWN-IS-SECURE
X-Men
X-Minions-Version
X-Nananana
X-App
X-LB-NoCache
X-Irp-Debug
X-HN
X-Gzip
X-GeoIP-Region-Code
X-GeoIP-Country-Code
X-Gen-Mode
X-NCache
X-Fastly-Backend
Machine
X-Esi-Check
X-Hnp-Log
X-FC-Vary-Parameters
X-Forwarded-Site
X-Nginx-Cache-Key
X-Op-Id-All
X-Gamma-Serve
X-Dispatcher-Server
X-Platform
Cmsid
Cmstype
Datacenter
Sever-Int
Cluster
User-Cache-Control
Wxu-Next-Commit
Web-Mar-Region
Vix-Hermes-Req-Id
Server-Hostname
Server-Ext
On-Server
Is-Eu
Kp-EeAlive
L
Origin-CC
Origin-EX
Producers
Platform
PFcat
Wxu-Next-Hostname
Pics-Label
X-Accel-Buffering
X-Accel-Expires-Debug
Cache-Provider
X-Ad-Defer-Variation
CDCHOST
Canary
Wxu-Next-Region
X-Presslabs-Stats
Ha-Gx-Prefs
Fastly-SSL
X-Refresh
X-Fastly-Cache
HA-Ipaddr
X-Planisys-CDN-Rules
X-Owner
X-Planisys-CDN-Cache
X-Eu-Site
X-Planisys-CDN-TTL
X-CGP
L5d-Success-Class
X-Csrf-Jwt
X-V-Cache
X-Cache-Remote
X-CSRF-Token
X-NewRelic-App-Data
X-Mvc-Supplant-OutputCached
X-Cache-FS-Status
X-DC
X-Instance-Name
X-Origin-Expires
X-Microcachable
X-Zone
GeoIP-Latitude
X-Aicache-OS
X-Release
X-Tb-Optimization-Total-Bytes-Saved
X-Response-By
X-Up
SID
X-Correlation-ID
X-Servedbyhost
HostName
X-FL-EDGE
Srvid
X-FL-QIT-DEBUG
X-AIR-PT
Time
Memory
Locid
X-Via-CDN
X-ND-Cache
Expect-Staple
X-From
X-Provided-By
X-RCS-CacheZone
Env
Svr
X-VC
X-Trace-ID
X-Generated-In
X-Nc
X-Via-Edge
Edge-Copy-Time
X-Via-SSL
X-Cache-Enabled
X-Dc
X-Air-Pt
NtCoent-Length
X-Cached-By
X-Wa
X-Vcl-Version
X-Via-Popv
X-Via-Poph
X-Via-Popn
X-Edge-Pop
X-Webkit-CSP
Cdn
Cache
X-DataCenter
X-HA-Backend
X-NGINX-Cache
X-Srv
X-Vc
X-HS-Status
X-Debug-Cache-Store
Server-ID
X-Esi
X-Nf-Request-Id
X-Lambda-Id
X-Debug-Cache-Fetch
X-ZONE
X-AK-Request-ID
Sid
Cdnsip
X-CCDN-Origin-Time
X-Hcs-Proxy-Type
X-CCDN-CacheTTL
X-Vgn-Hpd-Variations-Key
X-Vgn-Hpd-Cached
X-Client-Ip
Cdncip
X-Vgn-Hpd-Ssi
Hostname
X-Check-Cacheable
X-Cs
X-Gateway-Cache-Status
VNS-Age
X-Gateway-Cache-Key
GeoIp-Country-Code
X-LB-ID
X-Vtex-Remote-Cache
X-Gateway-Request-Id
X-Fpc
X-Render-Time
X-Via-NSCOPI
VNS-Cache
CPC-Cache
CPC-Age
X-Gateway-Skip-Cache
X-VCT
AMP-Access-Control-Allow-Source-Origin
X-CSRF-TOKEN
X-Amz-Meta-Cb-Modifiedtime
X-API-Version
XkeyRZ
X-Proxy-CacheRZ
X-Via-JSL
True-Client-IP
Fastly-Drupal-Html
X-TH-Server
X-B3-SpanId
X-CS
X-Upstream-Ct
X-Upstream-Ht
Eomportal-Instance
X-ATG-Version
X-EC-Lua
X-Cache-Type
Esi-Enabled
X-Cache-ASPX
Uri
X-Varnish-Authentication
X-Micro-Cache
Ngx-Var-Key
True-Client-Ip
X-Contensis-Viewer-Groups
X-MSEdge-Flight
X-MSEdge-Features
M-TraceId
Srv
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-Fastly-Country-Code
OT-Force-Account-Verify
Resin-Trace
Path
X-Varnish-Beresp-TTL
X-PAYTM-SRV-ID
IsBot
X-Cache-NGX
X-RateLimit-Remaining-Second
X-SIPLIST1
X-RateLimit-Limit-Second
X-Request-URI
X-Udemy-Cache-App-Namespace
Request-ID
XServer
X-FPC
GeoIP-Country-Code
X-VCL-Version
X-APP-VERSION
X-Info
X-Lb-Id
X-RateLimit-Reset
YJS-ID
X-Wikidot-Static-Cache
X-CDN-Cache-Status
RNT-Time
RNT-Machine
X-Wikidot-Backend
N-Cache
CDN
X-MP-GENERATED-AT
X-CLOUD-TRACE-CONTEXT
X-Bl-Debug
X-Shop-Environment
X-Forwarded-Path
X-Orig-Expires
X-Tenant
LB
X-Accel-Version
Location
X-TX-ID
X-Datacenter
X-MCACHE
X-Pod-Name
Sm-Log-Id
X-Service-Response-Time
Server-Id
X-B3-Trace-ID
X-Cdn-Request-ID
X-App-Name
X-Oss-Server-Time
X-Oss-Storage-Class
X-Policy
X-Oss-Request-Id
X-Oss-Object-Type
Servername
HIT
X-Ha-Backend
X-Cache-Expires
X-Edge-POP
X-Oss-Hash-Crc64ecma
X-Datadome
Cross-Origin-Opener-Policy-Report-Only
X-Akamai-Pragma-Client-IP
X-WA
X-SERVER-NAME
X-Cdn-Cache-Status
X-Via-PopV
X-Via-PopH
X-Via-PopN
X-Xrds-Location
X-Geo
ENV
X-Srcache-Store-Status
Timeexpire
Ohc-File-Size
X-CACHE-KEY
X-NC
Lb
X-Srcache-Fetch-Status
FSS-Cache
Proxy-Connection
Hit
Traceparent
Epwk-X-Cache
X-Snapshot-Date
Yjs-Id
X-Moov-Xdn-Version
X-Moov-T
X-TraceId
X-ServedByHost
X-Scheme
Geoip-Latitude
X-PERF
X-Serial
X-LiteSpeed-Cache-Control
X-ApacheServer
X-Hyper-Cache
X-Amz-Meta-Opti
X-Cdn-Forward
X-Cdn-Diag
X-UP
Pramga
Req-ID
X-Viewer-Country
WZWS-RAY
X-Dw-Trace-Id
X-Ctl-Mach
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Logging-Id
X-M-Reqid
X-M-Log
X-MiniProfiler-Ids
MIME-Version
X-Qnm-Cache
X-Acquia-Site
X-RAMCache
X-Acquia-Purge-Tags
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-Swift-Error
Ec-Rule-Version
X-Vcache
X-Fastly-Backend-Reqs
Cneonction
X-Lb-Nocache
Content-Script-Type
X-B3-Parentspanid
Content-Style-Type
CountryCode
X-Lsadc-Cache
X-TT-LOGID
X-Wp-Cf-Super-Cache
X-Wp-Cf-Super-Cache-Cache-Control
X-F-Status
X-Webstats-RespID
X-Vgn-Hpd-Reason
X-Litespeed-Cache-Control
X-Tncms
X-Mg-Cache
X-Fastly-Cache-Hits
X-Cache-Ngx
My-App
X-Mid-Debug-Cache-Disk
X-IPS-Cached-Response
Powered-By
X-Th-Server
X-B3-ParentSpanId
X-Request-URL
Ngx
Warning
Inserted-Into-Cache-At
X-NAPM-TraceId
X-Mid-Debug-Cache-Key
X-LiteSpeed-Tag