Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Strict-Transport-Security
Content-Length
X-Content-Type-Options
Link
Last-Modified
Cf-Request-Id
CF-Cache-Status
ETag
Expect-CT
Accept-Ranges
Pragma
X-Powered-By
X-XSS-Protection
CF-RAY
X-Cache
Via
Age
Content-Security-Policy
Report-To
NEL
Referrer-Policy
Access-Control-Allow-Origin
Content-Language
X-Amz-Cf-Pop
X-Amz-Cf-Id
P3P
Alt-Svc
X-Cache-Hits
X-UA-Compatible
X-Xss-Protection
X-Served-By
CF-Ray
X-Download-Options
X-Timer
Access-Control-Allow-Headers
X-Request-Id
Access-Control-Allow-Methods
X-Varnish
X-Adblock-Key
Access-Control-Allow-Credentials
X-Permitted-Cross-Domain-Policies
Content-Security-Policy-Report-Only
X-AspNet-Version
X-Runtime
X-Drupal-Cache
X-Generator
X-Cache-Status
X-Check
X-Cacheable
X-Envoy-Upstream-Service-Time
X-Request-ID
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-FRAME-OPTIONS
X-Iinfo
X-Dns-Prefetch-Control
X-Drupal-Dynamic-Cache
Feature-Policy
X-Content-Security-Policy
Content-Encoding
Access-Control-Expose-Headers
Upgrade
Status
X-CDN
X-AspNetMvc-Version
X-XSS-PROTECTION
Server-Timing
Access-Control-Max-Age
X-Amz-Request-Id
Request-Context
X-Amz-Id-2
X-Turbo-Charged-By
X-AH-Environment
X-Via
X-Robots-Tag
X-Backend
X-Cache-Group
Cf-Edge-Cache
Keep-Alive
Host-Header
X-Hacker
X-Proxy-Cache
X-Server
X-Rq
X-UA-Device
X-Server-Powered-By
X-Age
Allow
X-Vhost
X-Varnish-Cache
X-Ws-Request-Id
EagleId
X-Dispatcher
X-Amz-Version-Id
Grace
X-LiteSpeed-Cache
P3p
Cf-Apo-Via
Nel
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Device
X-Page-Speed
Cf-Railgun
EagleEye-TraceId
X-Aws-Lambda-Call-Status
X-Swift-CacheTime
X-Swift-SaveTime
X-WebKit-CSP
Ali-Swift-Global-Savetime
X-Pingback
X-Node
X-Host
Accept-CH
X-Server-Id
X-OneAgent-JS-Injection
Surrogate-Control
X-Backend-Server
X-CST
X-Readtime
X-Nginx-Cache-Status
X-Akam-SW-Version
X-Cache-Lookup
Permissions-Policy
X-Content-Security-Policy-Report-Only
Request-Id
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Application-Context
X-Nginx-Upstream-Cache-Status
X-Cloud-Trace-Context
X-Trace
Accept-Ch-Lifetime
X-Response-Time
X-Edge
X-HW
X-Ua-Compatible
Content-Location
X-Mod-Pagespeed
Accept-CH-Lifetime
X-Clacks-Overhead
X-Ruxit-JS-Agent
X-Url
X-Midtier
X-Oneagent-Js-Injection
X-ECACHE
Rating
X-Amz-Server-Side-Encryption
X-Mcache
X-ESI
X-Country
Xkey
X-Litespeed-Cache
X-Upstream
X-TtlSet
X-Vname
X-PC
X-Vcap-Request-Id
Accept-Ch
X-MS-InvokeApp
Cache-Tag
X-Rack-Cache
X-D2id
X-Exp-Id
X-Kinja-Server
X-Use-Magma
Verso
X-Kinja-Build
X-Element-Page-Cache
X-GoogleNews-Bot
X-Cdn-Fetch
X-Exp-Variant
X-Kinja
X-Kinja-Revision
RTSS
X-Cache-TTL
Fastly-Restarts
Edge-Control
X-Powered-By-Plesk
X-VARITI-CCR
Origin-Trial
X-Ac
X-Content-Type
X-Navigation-Version
X-Abt-Application-Version
X-Cached
X-Ruxit-Js-Agent
X-Goog-Hash
Service-Worker-Allowed
X-WebKit-CSP-Report-Only
X-Country-Code
X-Ttl
X-GitHub-Request-Id
X-Amz-Rid
Pagespeed
X-Sol
X-Middleton-Display
Display
X-Mg-S
X-Browser-Type
X-Dw-Request-Base-Id
X-B3-TraceId
X-SharePointHealthScore
SPRequestGuid
X-Server-Name
Cross-Origin-Opener-Policy
X-Varnish-TTL
Arr-Disable-Session-Affinity
X-Erf-Bev-Bev-Is-Generated
X-Instrumentation
X-Server-Lifecycle-Phase
X-Erf-Bev-Bev
X-Kraken-Loop-Name
X-Powered-CMS
AR-PoweredBy
AR-ATIME
AR-Request-ID
AR-SID
X-Amzn-Trace-Id
X-Middleton-Response
Response
SPRequestDuration
SPIisLatency
X-Ua-Device
X-Cache-Key
AR-CACHE
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Version
X-Fastly-Request-ID
X-Cnection
X-Times
X-T
X-NF-Request-ID
X-Accel-Expires
Cache-Tags
Front-End-Https
Cache-Status
X-HP-Webp
X-Jurisdiction
X-HP-Trace-Id
X-Fastcgi-Cache
X-MSEdge-Ref
Edge-Cache-Tag
X-Pinterest-Rid
Pinterest-Version
Pinterest-Generated-By
X-ORACLE-DMS-RID
X-ORACLE-DMS-ECID
X-Px
X-Ser
X-Hits
Public-Key-Pins
Nginx-Cache
X-Client-IP
X-Recruiting
X-NWS-LOG-UUID
X-B3-TraceId-Primal
Mrf-Cache-Status
MRF-Tech
X-Request-Received
X-Request-Processing-Time
X-LLID
Server-Node
X-Frontend
Payment
X-Ua-Browser
X-Webkit-CSP
X-Shield-Request-Id
Access-Control-Request-Method
X-Kinja-CCPA
X-DIS-Request-ID
TP-Cache
X-Erf-Stays-Pdp-Viaduct-Migration-Web
X-B3-Traceid
X-RateLimit-Remaining
MicrosoftSharePointTeamServices
X-Ratelimit-Remaining
X-Goog-Metageneration
S
X-HS-Hub-Id
X-HS-Cache-Config
X-HS-Content-Id
X-HS-Combine-CSS
TP-L2-Cache
X-LB-Cache
X-FastCGI-Cache
X-Content-Digest
X-Distributor
Content-MD5
Realpath
X-PressLabs-Stats
X-Request-Handler-Origin-Region
X-Microsite
X-Geo-Country
X-Webkit-CSP-Report-Only
X-Forwarded-For
X-Hostname
X-FB-Debug
X-Page-Id
X-Ezoic-Cdn
Fastcgi-Cache
Accept-Charset
Access-Control-Allow-Method
X-RateLimit-Limit
X-Cluster-Name
X-GUploader-UploadID
X-Correlation-Id
X-Rid
X-Protected-By
X-Amzn-RequestId
X-Amz-Apigw-Id
X-Envoy-Decorator-Operation
X-Seen-By
X-Ratelimit-Limit
X-TEC-API-ROOT
X-TEC-API-VERSION
X-TEC-API-ORIGIN
Cleartype
X-B3-Sampled
TCN
X-XRDS-Location
DC
X-Goog-Stored-Content-Length
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Newrelic-App-Data
Referer-Policy
X-Origin-Server
X-Mobile
X-Debug-Info
X-Webkit-Csp
Cross-Origin-Resource-Policy
X-Logged-In
X-Aspnet-Version
X-Varnish-Backend
X-TTL
X-Git-Hash
X-Origin-Cache
X-Azure-Ref
X-Contextid
X-Edge-Location-Klb
X-Server-ID
X-Kinsta-Cache
X-Providence-Cookie
X-Request-Guid
X-Route-Name
X-Is-Crawler
X-Aspnet-Duration-Ms
Surrogate-Key
X-Fb-Rlafr
X-Flags
Alternate-Protocol
X-Varnish-Grace
X-Grace
X-Revision
X-Amz-Replication-Status
X-Content-Options
X-App-Environment
X-TT
X-Amz-Meta-S3cmd-Attrs
X-IPS-LoggedIn
Healthy
X-Wix-Request-Id
Count-Hit
X-Client-Ip
X-Forwarded-Proto
X-Whom
X-App-Server
Frame-Options
X-Hosted-By
Charset
WPO-Cache-Message
MS-Author-Via
WPO-Cache-Status
X-Akamai-Edgescape
Viewport
X-Daa-Tunnel
Filterid
Paypal-Debug-Id
X-B
X-Magnolia-Registration
X-Id
X-Oracle-Dms-Ecid
X-Oracle-Dms-Rid
X-Backend-Name
Section-Io-Cache
Retry-After
Amp-Access-Control-Allow-Source-Origin
X-F-Cache
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-Az
X-AppVersion
X-Trace-Id
SRV
X-Activity-Id
X-Www-Served-By
X-Cache-Control
X-Cache-Age
Server-Name
X-Proxy-Cache-Info
X-Type
X-App-Version
Refresh
X-Varnish-Server
X-Response-Served-From
SD-X-WS
VIX-Pulpo-Node
X-Instance
X-Original-Request-Id
Akamai-GRN
X-Cache-Rule
X-Http-Reason
X-Proxy
X-ARC
Host
X-Rule
VIX-Pulpo-Upstream-Status
X-EdgeConnect-Cache-Status
Protected
X-Cache-Grace
X-Time
X-Edge-Location
Version
Front
X-Varnish-Age
X-UUID
X-Status
X-Rocket-Nginx-Serving-Static
X-Environment-Context
X-N
X-Akamai-Request-ID2
X-Framework
X-Cacheable-TTL
X-FW-Server
X-Is-Bot
X-Page-View
X-Rendered-As
X-User-Agent
X-FW-Version
X-FW-Type
X-FW-Hash
X-FW-Serve
X-COUNTRY
X-FW-Static
X-FW-Dynamic
X-L-Path
X-Region
Access-Control-Request-Headers
X-Jobs
X-Adobe-Loc
X-Adobe-Content
Fastly-SIE
Fastly-SWR
From-Origin
X-Cache-Time
X-ProcessESI
X-Tumblr-Pixel-1
X-Unique-Id
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-RemovedCookies
X-G
X-Tumblr-User
ServerID
X-Load-Cache
X-Source
X-Upgrade-Enabled
X-Varnish-Ttl
X-RateLimit-Reset
X-Language
X-Datadog-Sampling-Priority
X-Datadog-Parent-Id
Country
X-Datadog-Trace-Id
Content-Disposition
X-CDN-Forward
X-Vcache
X-Drupal-Cache-Tags
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-DataDome
Accept-Language
X-HTML-Minification-Powered-By
X-Datadog-Sampled
X-Tt-Trace-Tag
Countrycode
X-Mg-Request-UUID
X-Tt-Trace-Host
X-Debug-IsPreview
X-Debug-IsConnected
X-Amzn-Remapped-Content-Length
X-ID
X-DynaTrace
X-Nf-Request-Id
X-Generated-By
X-DynaTrace-JS-Agent
X-ECache
Backend
X-B3-SpanId
Xet-Cookie
X-WP-CF-Super-Cache
X-B-Cache
X-WP-CF-Super-Cache-Cache-Control
CF-IPCountry
Liferay-Portal
X-Signature
Xserver
X-Nginx-Cache
X-Tt-Logid
X-NYM-Debug-Backend
X-Device-Type
X-Erf-Web-Scheduler
X-Mode
Webserver
X-Servername
X-Content-Powered-By
X-Zen-Fury
X-Content-Age
X-Httpd
X-Drupal-Cache-Contexts
Url
X-Xrds-Location
X-Tb
X-Proto
X-Cache-Operation
Locale
Load-Balancing
GEO-INFO
Filters
Meta-Geo
X-Director
X-Container-Uri
S-Rt
Onion-Location
Fastcgi-Useragent
Azure-Version
X-GeoCountry
X-Git-Commit
X-JoinUs
X-GeoCode
Azure-InstanceId
Azure-SlotName
Azure-SiteName
Azure-RegionName
X-LAGOON
X-Rewrite-Enabled
X-SaId
X-Urbn-Context-Path
X-Varnish-Cache-Hits
X-Sucuri-ID
X-Say-Cacheable
X-UPSTREAM-Address
X-Cache-Action
X-SayCDN-TTL
X-Say-TTL
X-Sucuri-Cache
X-ServerID
X-Urbn-Site-Id
X-VC-Cache
X-Varnish-Hostname
X-Labrador-Cache-Channel
X-PHP-Host
X-Forwarded-Host
X-Soup
Uber-Trace-Id
X-RM-Cache-TTL
X-Detected-As
CDN-RequestId
Web-Mar-Node
X-Served-From
X-Sql-Count
X-Adobe-Source
X-Ratelimit-Reset
X-Storage
X-Sql-Duration-Ms
X-Logging-Id
X-Generation-Time
X-Extlb
X-Debug
X-Routing-Service
X-Cache-Server
X-R9-Blue-Green-Version
X-Skip-Cache
X-Proxied
X-VCT
X-Zipkin-Id
Webcakes-App-Version
TWC-Connection-Speed
TWC-GeoIP-Country
X-Format
Mn-Server-Ip
Property-Id
Webcakes-Region
Node
X-Cluster-Node
TWC-GeoIP-LatLong
X-Tumblr-Pixel-3
TWC-Device-Class
X-Origin-Hint
X-Uri
Webcakes-App-Name
X-LSADC-Cache
X-Tumblr-Pixel-2
TWC-Privacy
TWC-Locale-Group
X-Ms-Version
X-Proxy-Build
X-Lambda-Id
X-Timing-Wait
Selected-Fe
X-Ms-Request-Id
DB-Nickname
X-FB-TRIP-ID
X-RCS-CacheZone
X-Fetched-On
Fastly-Drupal-HTML
Source
OT-Force-Account-Verify
X-Template
X-Origin-Date
X-MP-GENERATED-AT
X-XRDS-LOCATION
X-MCACHE
X-Cache-Hit
X-Loop
X-Tncms
X-Cache-Expired-At
X-Tec-Api-Origin
X-Tec-Api-Root
X-Tec-Api-Version
X-Varnish-Hits
X-Via-JSL
X-Pass-Why
X-Endurance-Cache-Level
Content-Secure-Policy
X-Cache-TTL-Remaining
X-Srv
X-NGENIX-Cache
X-UA-Device-Type
X-Ua
X-Redis-Cache
Upgrade-Insecure-Requests
X-Node-Name
X-Pubstack
X-Real-IP
X-AIR-PT
X-Fastly-Request-Id
X-Origin-TTL
Cross-Origin-Window-Policy
X-Origin-CC
X-CCDN-CacheTTL
Section-Io-Id
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
Section-Io-Origin-Status
X-Hcs-Proxy-Type
X-CCDN-Origin-Time
X-GEO
NGB
X-Server-W
X-PHP-Backend
X-S
X-CACHE-AGE
X-Cache-Host
X-Rn-Rsrv
Cache-Provider
CDN-Cache
CDN-Uid
Ms-Operation-Id
X-RTag
CDN-CachedAt
CDN-RequestPullCode
CDN-RequestPullSuccess
MS-CV
Cache-Name
Cache-Hits
CDN-EdgeStorageId
CDN-PullZone
CDN-RequestCountryCode
X-TimeS
X-Cache-Type
X-URL
X-Hl-Ver
X-Restarts
X-Cms-Context
X-Xfnlog-Site
X-IPLB-Request-ID
X-CSRF-Token
X-Aspnetmvc-Version
X-Optimistic-Header
X-IPLB-Instance
Apigw-Requestid
X-Datadome
X-Akamai-Transformed
X-TA-CDN-Provider
X-Reqid
X-No-Session
X-ProxyCache-Key
X-ProxyCache-Status
X-BYPASS-REASON
X-Parent-Response-Time
X-Newrelic-Synthetics
Magicmarker
Meta-Geo-Continent
Rendered-Blocks
Odigeo-Trace-Id
Ngx.Var.Host
Redirect-Candidate
X-Orig-Expires
X-Origin-Time
MD5-Digest
Fastly-SSL
X-Policy
Canary
Candidate-Md5Url
X-GeoIP-Country-Code
BehaviorPad-Version
X-RateLimit-Limit-Second
X-S-Cookie
X-Rojux
X-Request-Host
X-RateLimit-Remaining-Second
CPC-Cache
DCR-Decision-By
Ha-Gx-Prefs
HA-Ipaddr
L
L5d-Success-Class
Gh-Request-Id
Gannett-Cam-Experience-Id
DCR-Processing-Time-Ms
Fastly-Backend-Name
Fastly-GeoIP-CountryCode
Server-Host
Lang
X-A-Dgt
X-Date
X-D
X-Debug-Cache-Fetch
X-Debug-Cache-Store
X-Destination
X-Csrf-Jwt
X-Conf
X-Irp-Debug
X-CacheTTL
X-CF-Lambda-Fn
X-CF-Lambda-Version
X-CGP
X-Developer
X-Dispatcher-Number
X-FC-Vary-Parameters
X-Has-Esi
X-Forwarded-Path
X-Gdpr
X-GeoIP-Region-Code
X-Fastly-Backend
X-External-Request-Id
X-Ec-Fail
X-Ec-Custom-Error
X-Ec-GeoHdr
X-Epic-Correlation-Id
X-Eu-Site
X-Is-Gdpr
X-JWT-State
X-A
Web-Mar-Region
X-A-Ccd
X-A-Dam
X-A-Dcw
VNS-Cache
VNS-Age
T-Server
Surrogated-Key
True-Client-Country-4JS
X-Nyt-Route
Vix-Hermes-Req-Id
X-ScT
X-A-Wwc
X-Bl-Debug
X-BCube-Filmed-By
X-Cache-Bucket
X-Cache-Info
X-Cache-NE
X-Bc-Bl
X-B-Cookie
X-Accel-Expires-Debug
X-Accel-Buffering
X-Mvc-Supplant-Cachable
X-Aed
X-Application
Sslversion
CPC-Age
X-SD-PageType
X-Vdms-Path
X-Vdms-Version
X-TIM-N
X-Via-Fastly
X-SRCache-Key
X-Tenant
X-VG-WebCache
X-Viewer-Country
X-Wix-Viewer-Type
X-Worker
Xc-Version
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Vtex-Remote-Cache
X-We-Are-Hiring
X-Slack-Shared-Secret-Outcome
X-Var-Ttl
X-Slack-Backend
X-Shop-Environment
X-Section
X-Handled-By
X-Access
X-Loc
X-Shopify-Stage
We-Hiring
W
X-BBC-Edge-Cache-Status
X-VG-TLSProxy
X-Auto-Login
X-Alternate-Cache-Key
X-ApacheServer
X-Varnish-Remaining-TTL
X-App-Name
X-Mly-Id
X-Mid
X-Nitro-Cache
Req-Svc-Chain
X-Pool
X-Old-Content-Length
X-Thinkindot-L3
Release
Producers
X-Thanos
X-Up
TDXMobile
X-Variation
X-Node-Id
X-Qloud-Router
Thinkindot-Control
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-Varnish-CookieHashed-On
X-ShopId
X-DefElseHash
X-DefHash
X-DPWN-IS-SECURE
X-App
X-Human
X-Core-Value
X-LJ-Flow-ID
X-Esi-Check
X-Cluster
X-Generated-On
X-Geo-Header
X-AWS-Id
X-Gzip
X-Fmm-Version
X-Forwarded-Site
X-Core-Mission
X-INCAP-ABP
X-Cache-Id
X-VServer
X-WADP-Cache
X-Level-Front-Cache
X-Cache-Debug
Platform
X-Proxy-Cache-Status
X-ShardId
X-Cdn-Diag
X-Clientip
X-CMSURLCustom
X-Clara-WADP
X-S-Maxage
X-Cdn-Origin
X-Server-IP
X-Bip
X-Varnish-CookieINHashed-On
Is-Eu
Host-ID
X-SVT-ORM-RULES
X-Storefront-Renderer-Rendered
X-Owner
X-SVT-ORM-VERSION
N-Cache
Mail-Subject
Machine
Expect-Staple
Environment
X-Sorting-Hat-PodId
X-Sn-Servicetimems
Adler-Geo
AKAMAI
X-Platform
Cmsid
X-PERF
X-Sorting-Hat-ShopId
Cmstype
X-VWS-Id
X-PAYTM-SRV-ID
X-Origin-Response-Time
Origin
ServedBy
User-Cache-Control
X-Origin
X-Varnishpool
CloudFront-Viewer-Country
X-Mvc-Supplant-OutputCached
CDCHOST
Server-Hostname
Country-Code
X-WA-Info
Sever-Int
X-Request-Time
DSUID
Datacenter
X-Presslabs-Stats
X-Cdn-Srv
X-Org
X-Hnp-Log
Apple-News-Services-Parsed-Url
X-NodeID
Memcached
X-Test
Apple-News-Services-Host
X-Gen-Mode
Apple-News-Services-Handled
Apple-News-Services-Request-Url
X-Nginx-Cache-Key
X-Dispatcher-Server
Server-Ext
X-Akamai-Device-Characteristics
X-Vmg-Version
X-Block-Status
X-Hash
X-Nananana
X-Scale
X-Vcl-Version
X-Tx-Id
Origin-EX
C-Via
Pics-Label
X-Device-Os
X-From
Esi-Enabled
X-Instance-Name
X-GeoIP
Origin-CC
X-LB-NoCache
X-Op-Id-All
X-NCache
X-Web-Node
NM-Fastcgi-Cache
X-Refresh
WP-Super-Cache
X-TIME
Ssr
X-Azure-Ref-OriginShield
Wxu-Next-Region
Wxu-Next-Commit
Wxu-Next-Hostname
Server-Info
X-Cs
X-Amz-Meta-Cb-Modifiedtime
Server-ID
X-Cache-Enabled
X-Cache-Status-Check
X-Air-Source
X-Air-Hostname
X-Air-Trace-Id
X-HA-Backend
Memory
Time
X-API-Version
X-ZONE
X-Microcachable
X-Platform-Processor
NGX
X-Platform-Router
Cache-Host
GeoIP-Latitude
Cf-Device-Type
X-Origin-Expires
X-Platform-Cluster
Hostname
Origin-Agent-Cluster
X-VHOST
AMP-Access-Control-Allow-Source-Origin
X-Tb-Optimization-Total-Bytes-Saved
X-Correlation-ID
XM
X-CACHE-GROUP
X-Locale
X-DC
X-Site-Version
X-VarnishDD-TTL
X-HN
X-Dc
PFcat
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-Wp-Cf-Super-Cache-Active
Resin-Trace
X-Ad-Defer-Variation
X-Fpc
X-Via-SSL
Locid
X-Via-CDN
X-Webkit-Csp-Report-Only
Edge-Copy-Time
X-FL-QIT-DEBUG
A
X-Internal-Host
X-Vgn-Hpd-Reason
X-FL-EDGE
X-Micro-Cache
X-Via-Edge
Srvid
YJS-ID
Cdn-Requestid
X-WP-CF-Super-Cache-Active
X-Zone
X-Pod-Name
X-DataCenter
X-Cache-ASPX
X-ATG-Version
X-Upstream-Ct
X-Upstream-Ht
X-Github-Request-Id
X-Contensis-Viewer-Groups
X-TraceId
X-FireWall-Port
Sid
IsBot
X-Moov-T
Uri
X-Cached-By
User-Agent
X-Varnish-Authentication
X-AB
X-Moov-Xdn-Version
X-SIPLIST1
Cache-Key
Location
X-Buckets
X-LiteSpeed-Cache-Control
X-B3-Parentspanid
X-Info
True-Client-Ip
X-Geo-Region
X-B3-Spanid
GeoIP-Country-Code
X-Backend-Instance
X-Esi
X-Accel-Version
X-Planisys-CDN-Cache
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
X-HS-Content-Campaign-Id
State
X-Nitro-Cache-From
X-NGINX-Cache
X-Platform-Server
X-FTR-Request-ID
X-Nitro-Rev
X-Provided-By
X-LiteSpeed-Tag
SID
X-Fastly-Cache
CF-Ctrl
X-Release
X-MSEdge-Features
X-MSEdge-Flight
GeoIp-Country-Code
X-CS
X-VCache
X-Is-Tablet
X-Is-Supported-Browser
X-Tcp-Rtt
Cdn
X-Rocket-Build-Number
X-Is-Mobile
X-Is-Desktop
X-Sigma-Backend
X-VC
XServer
X-Browser-Name
X-Sigma
X-RN-RSRV
X-Datacenter
NtCoent-Length
X-Cache-Remote
X-CSRF-TOKEN
X-NewRelic-App-Data
X-Vgn-Hpd-Cached
X-Vgn-Hpd-Variations-Key
Cache
True-Client-IP
Path
X-Vgn-Hpd-Ssi
X-Geo
X-Api-Version
Lb
X-Hyper-Cache
X-Generated-In
X-HS-Status
X-SRV
X-Gamma-Serve
X-GeoIP-City
Epwk-X-Cache
X-TRACE-ID
X-Scheme
X-FPC
Fastly-Drupal-Html
X-HostName
Tcn
Ohc-File-Size
Cache-Tv-Group
WebServer
X-GoCache-CacheStatus
X-Service
X-Frame-Option
X-Webstats-RespID
X-Rebelmouse-Surrogate-Control
Cf-Ipcountry
CountryCode
Serverid
X-APP-VERSION
X-Rebelmouse-Cache-Control
X-UA
X-Air-Pt
Cdncip
X-AK-Request-ID
Kp-EeAlive
Cdnsip
X-Amz-Meta-Opti
X-Guploader-Uploadid
Srv
HostName
X-Branch-Name
X-Location
X-Traceid
X-Wp-Cf-Super-Cache
X-Mobile-URL
X-Wp-Cf-Super-Cache-Cache-Control
X-Cache-Ttl
X-Wp-Cf-Super-Cache-Cookies-Bypass
LB
X-EC-Lua
X-Pad
X-Proxy-CacheRZ
X-Cdn-Cache-Status
X-Developers
X-Vercel-Cache
X-Region-Sid
X-Cache-Tags
Proxy-Connection
X-Vc
X-Men
X-Aicache-OS
Cdn-Request-Time
X-Vercel-Id
Env
Ohc-Cache-HIT
Yak-Timeinfo
Cdn-Host
CacheControlHeader
On-Server
XkeyRZ
WZWS-RAY
X-Edge-Server
X-TX-ID
CDN
X-Origin-Cache-Key
X-VCL-Version
X-CACHE-KEY
X-FTR-Cache-Status
X-FTR-Expires
X-LB-ID
X-FTR-Backend
Req-ID
M-TraceId
Geoip-Latitude
X-Akamai-Pragma-Client-IP
X-Country-Code-Real
X-FTR-Balancer
X-FTR-Backend-Server
X-CDN-Cache-Status
X-B3-Trace-ID
Mime-Version
X-Nc
RNT-Machine
X-Wa
V-Age
Click-Count-Error
X-Edge-Pop
X-Cdn-Forward
X-V-Cache
Tube-Return
Tube-Got-Eval
X-Via-Poph
Tube-Got-Results
Tube-Get-Contents
X-Via-Popn
X-Via-Popv
RNT-Time
Click-Count-Action-Start
X-Acquia-Purge-Cdn-Unconfigured
X-Servedbyhost
X-SB
X-NWS-UUID-VERIFY
Ngx
X-Cache-FS-Status
X-Req
X-Cdn-Request-ID
X-Minions-Version
X-Lb-Cache
X-WP-CF-Super-Cache-Cookies-Bypass
Content-Style-Type
Server-Id
X-Ad-Load-Variation
X-Ha-Backend
Content-Script-Type
X-Fastly-Country-Code
ENV
CF-Cached-On
WWW-Authenticate
X-NMSegId
Cluster
X-TT-LOGID
X-Scope-Id
X-User
X-Request-Start
PICS-Label
X-Lb-Nocache
Pramga
X-M-Log
X-M-Reqid
X-Acquia-Application-Trace
X-Dw-Trace-Id
X-IN-APIGATEWAYSSL
X-Check-Cacheable
X-MiniProfiler-Ids
X-Snapshot-Date
X-Edge-POP
X-Acquia-Site
X-IN-APIGATEWAY
X-Via-Ucdn
X-Acquia-Purge-Tags
X-Acquia-Application-UUID
Yjs-Id
X-Varnish-Beresp-Status
Log-Origin
X-RAMCache
X-Fastly-Backend-Reqs
X-Iauth-Set-Uid
X-Qnm-Cache
X-Shield-Cache-Expires
X-Ckpd-Fst-Backend
X-Request-URI
X-APP
Vha6-Origin
X-TH-Server
X-Miniprofiler-Ids
X-Cached-Since
X-Fastly-Cache-Hits
Cneonction
CACHE-MISS-TO-ORIGIN
X-Processor
X-Litespeed-Cache-Control
Inserted-Into-Cache-At
X-ElasticPress-Query