Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Cf-Request-Id
CF-RAY
CF-Cache-Status
Accept-Ranges
Link
Pragma
ETag
Expect-CT
X-Powered-By
X-XSS-Protection
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
Alt-Svc
X-UA-Compatible
X-Served-By
X-Xss-Protection
X-Timer
X-Download-Options
Access-Control-Allow-Headers
X-Request-Id
X-Varnish
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-Runtime
X-AspNet-Version
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Permitted-Cross-Domain-Policies
X-Check
X-Cache-Status
X-Generator
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
X-Content-Security-Policy
X-FRAME-OPTIONS
X-Ua-Compatible
X-Iinfo
X-Request-ID
Content-Encoding
X-CDN
Feature-Policy
X-AspNetMvc-Version
Status
X-Envoy-Upstream-Service-Time
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
Upgrade
Access-Control-Max-Age
X-Via
Keep-Alive
X-Ws-Request-Id
X-AH-Environment
X-Robots-Tag
X-Age
Request-Context
EagleId
X-Turbo-Charged-By
X-Proxy-Cache
X-Cache-Group
Server-Timing
X-Server
X-Backend
X-Hacker
X-Server-Powered-By
Host-Header
Report-To
X-Amz-Request-Id
X-Nginx-Cache-Status
X-Amz-Id-2
Grace
X-UA-Device
X-Dns-Prefetch-Control
X-Rq
X-Varnish-Cache
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-LiteSpeed-Cache
X-Page-Speed
X-OneAgent-JS-Injection
Cf-Railgun
X-Pingback
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Device
X-CST
NEL
X-Amz-Version-Id
X-Cache-Spec
Allow
X-Vhost
X-Host
X-Backend-Server
X-Server-Id
X-ASPNET-VERSION
X-Dispatcher
EagleEye-TraceId
Surrogate-Control
Xkey
X-WebKit-CSP
X-Node
Request-Id
X-Response-Time
Content-Location
X-Akam-SW-Version
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Ruxit-JS-Agent
Accept-CH
X-Cache-Lookup
P3p
X-Application-Context
X-Country
X-Ac
X-Mod-Pagespeed
X-Cloud-Trace-Context
X-Readtime
Accept-CH-Lifetime
X-Template
X-B3-TraceId
X-Language
MS-Author-Via
Accept-Ch-Lifetime
X-HW
Rating
X-Url
Accept-Ch
X-Cnection
X-MS-InvokeApp
X-Webkit-CSP
X-Vname
X-PC
X-TtlSet
X-Origin-Cache
Edge-Control
X-Clacks-Overhead
X-ESI
X-GitHub-Request-Id
X-Trace
X-Varnish-TTL
X-D2id
Display
Pagespeed
X-Middleton-Response
X-Sol
Response
X-Middleton-Display
X-Content-Type
Verso
X-GoogleNews-Bot
X-Kinja
X-Exp-Id
X-Cdn-Fetch
X-Kinja-Build
Arr-Disable-Session-Affinity
X-Exp-Variant
X-Use-Magma
X-Kinja-Server
X-Kinja-Revision
X-Powered-By-Plesk
X-Country-Code
X-Goog-Hash
X-Rack-Cache
X-Vcap-Request-Id
X-ORACLE-DMS-RID
X-VARITI-CCR
X-Navigation-Version
X-ORACLE-DMS-ECID
X-TTL
X-FastCGI-Cache
X-Abt-Application-Version
X-Amz-Rid
X-Server-Name
Service-Worker-Allowed
X-Fastly-Request-ID
Fastly-Restarts
X-Cached
X-Client-IP
X-Buckets
X-Release
X-MSEdge-Ref
Cache-Tag
X-Element-Page-Cache
X-Dw-Request-Base-Id
X-NF-Request-ID
Mrf-Cache-Status
X-B3-TraceId-Primal
MRF-Tech
SPRequestGuid
X-SharePointHealthScore
RTSS
Access-Control-Request-Method
Public-Key-Pins
SPIisLatency
SPRequestDuration
X-Cache-TTL
Ar-Sid
AR-PoweredBy
AR-ATIME
AR-CACHE
AR-Request-ID
X-Edge
X-Ezoic-Cdn
X-LLID
X-Powered-CMS
Pinterest-Generated-By
Pinterest-Version
X-Pinterest-Rid
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Upstream
X-Version
S
X-HP-Webp
X-Jurisdiction
Content-MD5
X-Kinsta-Cache
X-ECACHE
X-MCACHE
X-Mid
X-Recruiting
Charset
X-Mg-S
X-Oneagent-Js-Injection
X-PressLabs-Stats
X-DynaTrace
X-Origin-Upstream-Status
X-T
Cache-Tags
X-Ttl
X-Content-Digest
X-Accel-Expires
X-Forwarded-Proto
Fusion-Deployment-Id
Fusion-Content-Source
Fusion-Component-Id
Fusion-Source
Fusion-Template-Id
Fusion-Content-Id
Fastcgi-Cache
X-Id
X-Px
X-Logged-In
X-Content-Security-Policy-Report-Only
TP-Cache
TP-L2-Cache
X-Litespeed-Cache
Filters
Edge-Cache-Tag
Server-Node
TCN
Server-Name
X-Correlation-Id
X-Amz-Server-Side-Encryption
Front-End-Https
X-Forwarded-For
X-XRDS-Location
MicrosoftSharePointTeamServices
X-Ruxit-Js-Agent
X-Request-Processing-Time
X-Request-Received
Nginx-Cache
X-Grace
X-Shield-Request-Id
X-Hits
X-Fastcgi-Cache
Alternate-Protocol
X-B3-Sampled
X-Microsite
X-Amzn-Trace-Id
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Request-Handler-Origin-Region
X-Az
X-AppVersion
X-Activity-Id
X-HS-Combine-CSS
X-HS-Cache-Config
X-HS-Content-Id
X-HS-Hub-Id
X-F-Cache
X-Server-ID
X-Amz-Replication-Status
X-NWS-LOG-UUID
X-Varnish-Age
X-Debug
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Metageneration
X-Origin-Server
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-Goog-Stored-Content-Encoding
X-Frontend
X-Rid
X-Yandex-Sdch-Disable
X-Geo-Country
X-RateLimit-Remaining
Host
Realpath
X-Cache-Age
Surrogate-Key
Section-Io-Cache
X-DIS-Request-ID
X-Hostname
Accept-Charset
Nel
X-Daa-Tunnel
X-Ser
X-Git-Hash
X-Time
X-VCache
Access-Control-Allow-Method
X-Respond-Thread
X-Mobile-URL
X-Seen-By
MS-CV
X-Upgrade-Enabled
X-Source
X-DataDome
X-AOL-HN
X-LB-Cache
Cleartype
X-Contextid
Payment
Healthy
X-TT
X-Cache-Key
X-Type
X-Content-Options
X-Debug-Info
Paypal-Debug-Id
X-Varnish-Backend
ServerID
X-Cache-Action
X-IPLB-Instance
X-Flags
X-B-Cache
X-Providence-Cookie
X-Signature
X-Whom
X-Is-Crawler
X-Aspnet-Duration-Ms
X-Route-Name
X-Request-Guid
X-XRDS-LOCATION
X-App-Environment
X-Load-Cache
X-Page-Id
Fastcgi-Useragent
X-N
X-FB-Debug
X-WebKit-CSP-Report-Only
Cache
X-Jobs
Node
X-Rule
X-Webkit-Csp
X-Mobile
X-Cache-Expired-At
Refresh
X-Erf-Bev-Bev-Is-Generated
X-Browser-Type
X-Erf-Bev-Bev
X-Response-Served-From
X-Wix-Request-Id
X-FireWall-Port
X-Accel-Buffering
X-Original-Request-Id
Ms-Operation-Id
X-RTag
Viewport
X-FTR-Request-ID
X-Content-Powered-By
X-Cacheable-TTL
Access-Control-Request-Headers
X-Framework
X-Zen-Fury
X-Debug-IsConnected
X-ProcessESI
DC
X-B
X-Debug-IsPreview
X-Distributor
X-HTML-Minification-Powered-By
X-Real-IP
X-Cluster-Name
X-RemovedCookies
X-Drupal-Cache-Tags
Version
X-UUID
VIX-Pulpo-Upstream-Status
X-IPS-LoggedIn
Referer-Policy
X-Region
X-Cache-Control
VIX-Pulpo-Node
X-Instance
X-Tt-Trace-Tag
X-Cache-Time
Eomportal-Instance
X-Tt-Trace-Host
X-Page-View
X-Proxy
Countrycode
X-Www-Served-By
X-Drupal-Cache-Contexts
X-Nginx-Cache
X-Protected-By
X-Tec-Api-Root
Xserver
X-G
X-Tec-Api-Origin
X-Tec-Api-Version
X-Cached-By
X-FW-Dynamic
X-FW-Static
X-FW-Serve
X-FW-Type
X-App-Server
X-FW-Hash
X-FW-Server
X-Cache-Operation
Liferay-Portal
X-Cache-Rule
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Tumblr-Pixel-1
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Via-JSL
X-Akamai-Edgescape
X-Varnish-Grace
Powered-By-ChinaCache
Section-Origin-Responded
Section-Io-Id
Section-Io-Origin-Status
Section-Io-Origin-Time-Seconds
X-Cache-Hit
SRV
X-Pass-Why
X-L-Path
X-Environment-Context
X-Device-Type
GEO-INFO
X-Pinterest-Direct
CF-IPCountry
X-TA-CDN-Provider
X-TEC-API-ROOT
X-TEC-API-VERSION
Server-Info
X-TEC-API-ORIGIN
DynaTrace
X-Adobe-Content
X-User-Agent
X-Adobe-Loc
X-Varnish-Server
Cache-Status
Retry-After
Frame-Options
From-Origin
Ec-Rule-Version
X-RN-RSRV
X-Endurance-Cache-Level
Meta-Geo
X-UPSTREAM-Address
X-Hl-Ver
X-ES-SERVER
Webserver
X-Mode
X-Handled-By
X-FB-TRIP-ID
X-ProxyCache-Key
X-BYPASS-REASON
X-PCL
X-OCL
X-Backend-Name
Uber-Trace-Id
X-Request-Time
X-Tumblr-Pixel-2
X-ProxyCache-Status
X-Uri
Cache-Tv-Group
Fastly-SSL
Apigw-Requestid
X-Storage
X-Varnishpool
X-Soup
X-ApacheServer
Webcakes-Region
Cache-Name
X-AWS-Id
Webcakes-App-Version
X-Proxy-Cache-Status
Selected-Fe
X-Be
Webcakes-App-Name
TWC-GeoIP-LatLong
Country
TWC-GeoIP-Country
TWC-Device-Class
TWC-Locale-Group
TWC-Connection-Speed
TWC-Privacy
Property-Id
Mn-Server-Ip
X-MP-GENERATED-AT
X-Section
X-S-Maxage
X-R9-Blue-Green-Version
X-Pubstack
X-Timing-Wait
X-UA-Device-Type
X-Human
X-WA-Info
X-VWS-Id
X-Via-Fastly
X-Proxy-Build
X-PHP-Host
X-LJ-Flow-ID
X-Labrador-Cache-Channel
X-Info
X-Format
X-No-Session
X-NYM-Debug-Backend
X-PERF
X-Origin-Hint
X-Origin-Date
X-Cache-Server
X-Access
Decoy-Debug-Key
Decoy-Debug-Status
Decoy-Debug-TTL
X-Server-W
X-Proto
X-Cache-TTL-Remaining
X-GG-Cache-Date
X-Web-Node
X-Xfnlog-Site
X-LAGOON
X-Sql-Count
X-SayCDN-TTL
X-Sql-Duration-Ms
X-TNCMS
X-Say-Cacheable
X-Loop
X-Say-TTL
X-Hosted-By
X-Alternate-Cache-Key
X-ShardId
X-Sorting-Hat-PodId
X-Storefront-Renderer-Rendered
Protected
X-Status
X-Sorting-Hat-ShopId
X-Shopify-Stage
X-ShopId
X-Hyper-Cache
Azure-SiteName
Azure-SlotName
Azure-Version
Azure-InstanceId
Azure-RegionName
X-Redis-Cache
X-Routing-Service
X-Proxied
X-Zipkin-Id
X-App-Version
Amp-Access-Control-Allow-Source-Origin
X-Cache-Enabled
X-NWS-UUID-VERIFY
X-Content-Age
X-Locale
X-Is-Bot
X-Rendered-As
X-Site-Version
X-Microcachable
X-Azure-Ref
X-Backend-Host
X-Cluster
S-Cnection
X-FW-Version
X-SRV
X-Ratelimit-Limit
X-Forwarded-Host
X-AIR-PT
X-Cache-Grace
X-Platform
X-TT-LOGID
X-CSRF-Token
X-Qloud-Router
X-Revision
AMP-Access-Control-Allow-Source-Origin
X-Trace-Id
Akamai-GRN
X-Cache-PHP
X-Varnish-Hostname
X-Cache-NGX
X-Via-CDN
X-ATG-Version
ServedBy
X-Varnish-Ttl
X-RCS-CacheZone
Cache-Hits
X-EdgeConnect-Cache-Status
X-Debug-Cache
X-RateLimit-Limit
X-Aspnetmvc-Version
X-Node-Name
X-Akamai-Transformed
X-Dc
X-CCM
Country-Code
Who
X-B3-SpanId
DB-Nickname
X-TX-ID
X-Detected-As
X-Cache-Host
Filterid
X-CS
X-Adobe-Source
X-Amzn-Remapped-Content-Length
X-Amzn-RequestId
X-Amz-Apigw-Id
X-BCube-Filmed-By
X-Ms-Version
X-Varnish-Beresp-Grace
X-Ms-Request-Id
SD-X-WS
X-CACHE-KEY
X-Varnish-Beresp-Ttl
Backend
X-GEO
X-CF-Lambda-Version
X-Destination
X-From
X-D
X-Connection-Hash
X-Rewrite-Enabled
X-Request-UUID
X-Varnish-Beresp-Status
X-S-Cookie
X-External-Request-Id
X-PBS-Appsvrname
X-Processor
X-PAYTM-SRV-ID
X-Rojux
X-S
X-Generated-On
X-Session-Fingerprint
DCR-Decision-By
X-A
T-Server
X-Oss-Storage-Class
X-Oss-Server-Time
X-A-Ccd
X-A-Dcw
X-A-Dam
X-NAPM-TraceId
Fastcgi-X-Cache-Version
Mobile-Detection-Method
MD5-Digest
Odigeo-Trace-Id
Machine
X-Origin-TTL
X-Origin-CC
X-A-Dgt
X-SRCache-Key
X-Owner
Meta-Geo-Continent
X-Level-Front-Cache
X-Cache-NE
X-Trv-Group
X-Oss-Object-Type
X-B-Cookie
X-ARC
Expiry
X-A-Wwc
X-Aed
X-Application
DCR-Processing-Time-Ms
X-Oss-Request-Id
X-CF-Lambda-Fn
X-Oss-Hash-Crc64ecma
X-VG-WebCache
X-Vdms-Version
X-VG-WebServer
X-Nc
X-Vtex-Processado-Em
X-Vtex-Remote-Cache
X-Correlation-ID
X-Vdms-Path
X-Time-Microsecs
HostName
X-Edge-Location-Klb
X-Magnolia-Registration
V-Age
X-Core-Value
Wxu-Next-Commit
NGB
X-FC-Vary-Parameters
PB-RID
Wxu-Next-Region
BehaviorPad-Version
X-Fetched-On
X-FTR-Balancer
Arc-Version
Wxu-Next-Hostname
X-Reqid
X-FTR-Backend
X-Policy
X-Device-Os
Server-Host
Rendered-Blocks
Pagetype
Path
X-Cache-Bucket
Thinkindot-Control
Release
Thinkindot-CacheControl-Type
PB-PID
Thinkindot-CacheControl
Cache-Host
UCS
X-ScT
X-Thanos
X-Azure-Ref-OriginShield
X-Country-Code-Real
X-TrackingId
X-FTR-Cache-Status
X-ServerID
X-Bip
X-Thinkindot-L3
X-Generation-Time
X-Varnish-Cache-Hits
X-FTR-Realm
X-Location
X-Generated-In
X-GeoIP-City
Magicmarker
X-FTR-DC
X-FTR-Backend-Server
X-Unique-ID
Host-ID
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Kraken-Routeconfig-Destination
X-Ratelimit-Remaining
X-Instrumentation
X-Unique-Id
IsBot
Is-Eu
L
NGX
Locid
X-Var-Ttl
X-DynaTrace-JS-Agent
X-NU-AKA-ACS-Version
X-Node-Id
Location
L5d-Success-Class
X-Csrf-Jwt
X-Varnish-CookieHashed-On
NM-Fastcgi-Cache
Origin
True-Client-Country-4JS
X-HS-Content-Campaign-Id
X-Is-Gdpr
X-EC-Lua
X-Method
X-HN
X-LI-UUID
X-Branch-Name
X-Cache-Debug
X-Cache-Tags
X-JWT-State
X-Li-Fabric
X-Li-Pop
X-CGP
X-Clientip
Server-Hostname
X-Mvc-Supplant-Cachable
Server-Ext
X-Nginx-Cache-Key
Platform
Sever-Int
X-Micro-Cache
X-Cms-Context
X-Has-Esi
Vix-Hermes-Req-Id
X-Origin-Expires
Ssr
PFcat
Cf-Device-Type
Fastly-Backend-Name
X-Eu-Site
X-Request-URI
Esi-Enabled
X-Fastly-Backend
X-Scheme
X-Fastly-Cache
X-Backend-State
X-Rebelmouse-Surrogate-Control
X-Envoy-Decorator-Operation
HA-Ipaddr
X-DPWN-IS-SECURE
X-Epic-Correlation-Id
X-GoCache-CacheStatus
X-Rebelmouse-Cache-Control
X-Ratelimit-Reset
X-SIPLIST1
X-B3-Traceid
X-Varnish-Hits
X-Varnish-Remaining-TTL
X-Backend-TTL
X-Tumblr-Pixel-3
X-User
X-Varnish-CookieINHashed-On
X-Variation
X-VarnishDD-TTL
X-Geo-Header
X-Skip-Cache
X-VServer
X-GeoIP
X-SVT-ORM-RULES
X-VG-TLSProxy
X-SVT-ORM-VERSION
X-Dispatcher-Server
X-Platform-Server
X-Irp-Debug
Content-Disposition
X-OVcl-Cache
X-Cache-Info
X-Developers
CDN-RequestId
CDN-Uid
X-Developer
DSUID
X-OVcl
Gh-Request-Id
Ha-Gx-Prefs
Fastly-SWR
Fastly-SIE
X-DefHash
X-DefElseHash
CDN-RequestCountryCode
Cf-Bgj
Apple-News-Services-Parsed-Url
CDN-PullZone
C-Via
Apple-News-Services-Host
Apple-News-Services-Handled
Adler-Geo
AKAMAI
CacheControlHeader
Apple-News-Services-Request-Url
CDN-CachedAt
CDN-EdgeStorageId
CDN-Cache
CDCHOST
X-NewRelic-App-Data
X-Amz-Meta-S3cmd-Attrs
User-Cache-Control
X-Gzip
X-Gamma-Serve
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Hash
X-Fmm-Version
X-Esi-Check
X-Clara-WADP
X-Origin
X-Cache-Id
X-IP
X-Origin-Response-Time
Fastly-Drupal-HTML
On-Server
X-Request-Host
X-Hnp-Log
X-Generated-By
X-Tb
X-Sucuri-ID
X-WADP-Cache
Web-Mar-Node
X-Gen-Mode
X-Block-Status
Rt-Fastcgi-Cache
X-Old-Content-Length
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
X-Loc
X-Aicache-OS
X-LB-ID
X-Planisys-CDN-Cache
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-ID
Xc-Version
X-Varnish-Url
Cmsid
Cmstype
X-Servername
Req-Svc-Chain
X-Slack-Backend
X-Swa-Ws
X-FTR-Expires
X-Air-Hostname
X-Via-Popv
X-Via-Poph
X-Via-Popn
Kp-EeAlive
Pics-Label
X-PF-Uncompressing
X-Mvc-Supplant-OutputCached
Svr
X-Served-From
X-APP-VERSION
X-Vgn-Hpd-Reason
A
Url
X-Cdn-Forward
Tracecode
X-Refresh
X-DC
M-TraceId
SR-User-Adfree
VivaBuild
Instruction
Viewtype
X-SaId
X-JoinUs
X-Cache-Var
X-Cache-Var-Map
X-PHP-Backend
X-NGENIX-Cache
SID
X-CUA
Cross-Origin-Opener-Policy
Arc-Country
Cache-Key
X-Edge-Location
X-CDN-Forward
X-Tb-Optimization-Total-Bytes-Saved
Lfy
MIME-Version
X-Matched-Rule
TDXMobile
X-NC
X-Webkit-CSP-Report-Only
CloudFront-Viewer-Country
X-Sn-Servicetimems
X-Vc
X-Cdn-Origin
X-Cache-Expires
X-TraceId
NtCoent-Length
Sid
X-Cache-Backend
DataCenter
X-Service
X-NCache
Content-Secure-Policy
Pramga
Server-ID
X-Servedbyhost
X-Srv
X-Extlb
Geo-Info
X-Wa
X-CLOUD-TRACE-CONTEXT
X-Internal-Host
X-Cache-Ttl
X-Core-Mission
X-Cache-Date
X-Bc-Bl
X-Request-Start
X-LI-Proto
Tcn
Source
X-Forwarded-Site
X-Newrelic-Synthetics
Surrogated-Key
X-Via-NSCOPI
LB
FSS-Cache
X-B3-Spanid
GeoIp-Country-Code
X-FireWall-Protection
Geoip-Latitude
X-Error
X-HS-Status
Memcached
X-Esi
We-Hiring
X-Varnish-Cacheable
X-Accel-Expires-Debug
X-VCL-Version
X-VC-Cache
Resin-Trace
X-Proxy-Upstream
X-Req
Mail-Subject
X-Date
X-VHOST
Hostname
Upgrade-Insecure-Requests
CACHE
X-RateLimit-Remaining-Second
X-Vcl-Version
Server-Ttl
X-RateLimit-Limit-Second
X-Sigma
X-Rocket-Build-Number
X-Viewer-Country
Env
X-App
X-Response-By
GeoIP-Latitude
GeoIP-Country-Code
X-Sigma-Backend
X-Air-Source
X-HOST
X-Geo
X-CCDN-Origin-Time
X-Men
X-Hcs-Proxy-Type
Xkeyi7
Time
X-Proxy-Cachei7
X-ZONE
X-CCDN-CacheTTL
X-Li-Proto
X-PJAX-URL
Request-ID
Memory
X-LiteSpeed-Cache-Control
X-MSEdge-Features
X-BBXSRF
X-TIM-N
X-RSL
X-DI
X-DSS
X-DB
X-Mg-Request-UUID
N-Cache
X-MSEdge-Flight
X-DW
X-RPS
HitType
CF-Cached-On
X-RPM
X-NODE
X-RAMCache
X-WA
VNS-Age
CPC-Cache
X-Zone
X-Cache-2
X-Cs
VNS-Cache
X-APP
CPC-Age
XServer
X-Varnish-Authentication
State
X-UA
X-Svr
X-Action
D-Cc-Upstream
X-Cc-Req-Id
X-Contensis-Viewer-Groups
X-Cc-Via
X-Air-Trace-Id
X-Cache-ASPX
X-ServedByHost
ProcessTime
S-Rt
X-HostName
Server-Id
X-Oss-Cdn-Auth
X-FPC
My-App
X-Minions-Version
Fastcgi-Cache-TTL
X-Region-Sid
X-Swift-Error
X-Dynatrace-Js-Agent
X-Provided-By
X-Cache-Type
Cache-Provider
X-Cache-Config
X-API-Version
X-CF-Powered-By
X-Server-IP
X-Gdpr
Mime-Version
X-Fpc
X-FORWARDED-FOR
X-Origin-Time
X-Depends-On
W
X-Nyt-Route
X-Cdn-Request-ID
X-Cache-Remote
Srv
Cteonnt-Length
X-URL
X-Dw-Trace-Id
X-BACKEND-TTL
CDN
X-Sucuri-Cache
Cross-Origin-Window-Policy
X-TIME
X-CSRF-TOKEN
OT-Force-Account-Verify
X-UnsetCookies
X-Erf-Stays-Bingo-Pdp-Web
Ohc-File-Size
X-Xrds-Location
X-ServerName
X-Client-Ip
X-Akamai-Pragma-Client-IP
X-ABtesting
X-Check-Cacheable
Proxy-Connection
X-Flog
X-VC
X-Parent-Response-Time
X-Hello
X-Orig-Expires
X-Fastly-Request-Id
X-NodeID
X-Forwarded-Path
X-ND-Cache
Cdn
X-Shop-Environment
X-Tenant
X-SN
Ohc-Cache-HIT
X-Ftr-Cache-Host
WZWS-RAY
Media-Length
X-Pad
X-Snapshot-Date
X-Traceid
X-Cluster-Node
Vha6-Origin
Dnion-Transfer-Encoding
X-Pf-Uncompressing
Cf-Ipcountry
X-SD-PageType
X-Fastly-Backend-Reqs
X-NGINX-Cache
X-Webstats-RespID
X-SB
X-Presslabs-Stats
X-Oracle-DMS-ECID
X-Host-Name
X-LiteSpeed-Tag
X-Ftr-Request-Id
X-Air-Pt
X-Via-PopH
X-Via-PopN
X-Via-PopV
Epwk-X-Cache
PICS-Label
Datacenter
X-BBC-Edge-Cache-Status
X-ElasticPress-Search
X-Acquia-Application-UUID
X-Acquia-Site
X-Acquia-Purge-Tags
X-IN-APIGATEWAYSSL
X-Acquia-Application-Trace
X-Varnish-Beresp-TTL
X-Render-Time
X-Pjax-Url
X-BBC-Origin-Response-Status
X-Conf
X-IN-APIGATEWAY
Warning
X-Request-URL
X-Vcache
X-Akamai-ERPolicy
X-Cache-Tag
Xet-Cookie
X-MiniProfiler-Ids
X-Lb-Id
X-Akamai-ERRuleID
X-Varnish-URL
X-Ms-Meta-Staticbatchstarttime
X-Ms-Meta-Originalurl
EpKe-Alive
CountryCode
X-Debug-Cache-Store
NnCoection
X-Debug-Cache-Fetch
URI
X-C
Phost
X-Redis-Duration-Ms
X-Yottaa-OS
X-B3-Parentspanid
X-Apw-Hits
Content-Script-Type
Content-Style-Type
X-Tid
X-Litespeed-Cache-Control
X-Amz-Meta-Cb-Modifiedtime
Ohc-Response-Time
Inserted-Into-Cache-At
X-Apw-Access-Action
X-Cache-Status-Check
X-Redis-Count
Environment
X-Apw-Access-Token
X-Apw-Access-Object
X-Mg-Request-Id