Threat Level: green Handler on Duty: Jim Clausing

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
X-XSS-Protection
CF-RAY
Cf-Request-Id
CF-Cache-Status
Last-Modified
Accept-Ranges
Link
Pragma
Expect-CT
ETag
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
X-UA-Compatible
Alt-Svc
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Permitted-Cross-Domain-Policies
X-Check
X-Cache-Status
X-Generator
X-Request-ID
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
X-Iinfo
X-Content-Security-Policy
Content-Encoding
X-CDN
X-Envoy-Upstream-Service-Time
Status
X-Ua-Compatible
Feature-Policy
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
X-AspNetMvc-Version
Access-Control-Max-Age
X-Xss-Protection
X-Via
Upgrade
Keep-Alive
X-Ws-Request-Id
X-Turbo-Charged-By
X-Age
X-AH-Environment
X-Robots-Tag
Request-Context
X-Proxy-Cache
EagleId
X-Cache-Group
X-Backend
Server-Timing
X-Hacker
X-Amz-Request-Id
Report-To
X-Server
Host-Header
X-Amz-Id-2
X-Server-Powered-By
X-UA-Device
X-Nginx-Cache-Status
Grace
X-LiteSpeed-Cache
X-Dns-Prefetch-Control
X-Varnish-Cache
X-Rq
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-Swift-CacheTime
X-Page-Speed
Cf-Railgun
X-Pingback
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Amz-Version-Id
NEL
X-OneAgent-JS-Injection
Xkey
X-WebKit-CSP
Allow
X-Cache-Spec
X-Backend-Server
X-Vhost
X-CST
X-Device
EagleEye-TraceId
X-Host
X-Server-Id
Surrogate-Control
Request-Id
X-Dispatcher
Accept-CH
X-Kinja-Server-Push
X-Node
Content-Location
X-Response-Time
X-Akam-SW-Version
Accept-CH-Lifetime
X-Ruxit-JS-Agent
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-ASPNET-VERSION
X-Template
X-Language
X-Ac
X-Application-Context
X-Country
X-Readtime
X-Cloud-Trace-Context
X-Cache-Lookup
X-Mod-Pagespeed
MS-Author-Via
X-Origin-Cache
X-B3-TraceId
Rating
X-Cnection
X-MS-InvokeApp
X-HW
X-Url
X-ORACLE-DMS-ECID
X-PC
X-Vname
X-TtlSet
Accept-Ch
X-ESI
X-Clacks-Overhead
Edge-Control
X-GitHub-Request-Id
X-FastCGI-Cache
X-Trace
Accept-Ch-Lifetime
X-Sol
X-Middleton-Display
X-Middleton-Response
Display
Response
Pagespeed
X-Content-Type
X-D2id
X-Buckets
Verso
X-Exp-Variant
X-Kinja-Server
X-GoogleNews-Bot
X-Kinja
X-Cdn-Fetch
X-Exp-Id
X-Kinja-Revision
X-Use-Magma
X-Kinja-Build
X-Vcap-Request-Id
Arr-Disable-Session-Affinity
X-Goog-Hash
X-Server-Name
X-Rack-Cache
X-Country-Code
Service-Worker-Allowed
X-Navigation-Version
X-VARITI-CCR
X-Varnish-TTL
X-Abt-Application-Version
X-Amz-Rid
X-Oneagent-Js-Injection
X-ORACLE-DMS-RID
Pinterest-Generated-By
Pinterest-Version
X-Pinterest-Rid
X-Cache-TTL
X-Client-IP
X-Powered-By-Plesk
X-TTL
X-SharePointHealthScore
SPRequestGuid
X-Fastly-Request-ID
X-Release
SPIisLatency
SPRequestDuration
X-Dw-Request-Base-Id
X-MSEdge-Ref
X-Element-Page-Cache
Fastly-Restarts
X-Cached
X-NF-Request-ID
Public-Key-Pins
RTSS
X-B3-TraceId-Primal
Mrf-Cache-Status
MRF-Tech
X-Origin-Upstream-Status
X-Edge
AR-CACHE
AR-ATIME
AR-PoweredBy
AR-Request-ID
Ar-Sid
X-Webkit-CSP
X-Px
X-LLID
X-SRCache-Store-Status
Access-Control-Request-Method
X-SRCache-Fetch-Status
X-Powered-CMS
Fusion-Content-Id
Fusion-Content-Source
Fusion-Template-Id
Fusion-Component-Id
Fusion-Deployment-Id
Fusion-Source
X-Ezoic-Cdn
X-Upstream
Content-MD5
X-Pinterest-Direct
X-HP-Webp
X-Jurisdiction
X-Amz-Server-Side-Encryption
X-ECACHE
X-MCACHE
X-Mid
Charset
X-Recruiting
X-Content-Digest
S
X-Mg-S
X-Ttl
Cache-Tag
X-PressLabs-Stats
X-Aspnetmvc-Version
X-Version
TCN
MicrosoftSharePointTeamServices
X-Debug
Front-End-Https
Fastcgi-Cache
X-Content-Security-Policy-Report-Only
X-T
X-Grace
Filters
Cache-Tags
X-Kinsta-Cache
X-XRDS-Location
X-Id
Edge-Cache-Tag
Server-Node
X-Forwarded-Proto
X-Amzn-Trace-Id
X-Accel-Expires
X-Yandex-Sdch-Disable
X-Cache-Key
X-Logged-In
Server-Name
Nginx-Cache
X-Forwarded-For
Surrogate-Key
X-Kong-Upstream-Latency
X-Varnish-Age
X-Kong-Proxy-Latency
Powered-By-ChinaCache
X-Correlation-Id
X-DynaTrace
X-Microsite
X-Request-Received
X-Request-Handler-Origin-Region
X-Ser
X-DIS-Request-ID
TP-L2-Cache
X-Request-Processing-Time
X-Hits
TP-Cache
X-B3-Sampled
X-Shield-Request-Id
X-Amz-Replication-Status
X-Az
X-AppVersion
X-Activity-Id
X-Server-ID
X-F-Cache
X-FTR-Request-ID
X-HS-Content-Id
X-HS-Combine-CSS
X-HS-Cache-Config
X-HS-Hub-Id
X-Goog-Storage-Class
X-Goog-Generation
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-GUploader-UploadID
Accept-Charset
X-Git-Hash
X-Origin-Server
X-Respond-Thread
X-Hostname
X-Geo-Country
X-LB-Cache
X-DataDome
Section-Io-Cache
X-Upgrade-Enabled
X-Rid
X-Frontend
X-Cache-Age
Nel
Access-Control-Allow-Method
X-Mobile-URL
Cleartype
Host
Alternate-Protocol
Paypal-Debug-Id
Healthy
X-Type
ServerID
Cache
X-Content-Options
X-IPLB-Instance
MS-CV
X-AOL-HN
X-Ruxit-Js-Agent
X-WebKit-CSP-Report-Only
X-App-Environment
Payment
X-Varnish-Backend
X-Whom
X-Debug-Info
X-VCache
X-Cache-Action
X-TT
X-Request-Guid
X-Route-Name
X-Signature
X-Providence-Cookie
X-XRDS-LOCATION
X-Is-Crawler
X-Flags
X-B-Cache
X-Aspnet-Duration-Ms
X-Seen-By
Fastcgi-Useragent
X-TEC-API-VERSION
X-TEC-API-ROOT
X-Page-Id
X-TEC-API-ORIGIN
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
X-Jobs
X-Mobile
X-N
X-Source
X-NWS-LOG-UUID
X-Load-Cache
X-Browser-Type
X-Cached-By
X-Time
X-Via-JSL
X-Akamai-Edgescape
Version
X-FB-Debug
X-RateLimit-Remaining
X-Daa-Tunnel
DynaTrace
X-Litespeed-Cache
Viewport
X-Cache-Operation
X-Cache-Rule
Refresh
X-Rule
X-Response-Served-From
X-Original-Request-Id
X-Accel-Buffering
DC
X-Proxy
X-Framework
GEO-INFO
X-RemovedCookies
X-Instance
X-Cacheable-TTL
X-ProcessESI
X-Zen-Fury
Realpath
X-Tt-Trace-Tag
X-Tt-Trace-Host
Referer-Policy
X-Drupal-Cache-Tags
X-Region
X-Real-IP
X-Fastcgi-Cache
Access-Control-Request-Headers
X-UUID
X-Cache-Time
X-RTag
Ms-Operation-Id
X-Contextid
X-Yottaa-Metrics
X-Distributor
X-Yottaa-Optimizations
X-HTML-Minification-Powered-By
X-FW-Serve
X-FW-Hash
X-Wix-Request-Id
X-Drupal-Cache-Contexts
X-Environment-Context
X-FW-Server
X-FW-Dynamic
X-Page-View
X-FW-Static
Eomportal-Instance
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-Node-Name
X-L-Path
X-FW-Type
X-B
X-Cache-Expired-At
Node
Liferay-Portal
X-Cluster-Name
Countrycode
X-G
X-Tumblr-Pixel-1
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Cache-Control
X-Content-Powered-By
X-IPS-LoggedIn
X-Amz-Meta-S3cmd-Attrs
X-Cache-Hit
X-User-Agent
X-Tumblr-Pixel-2
Webserver
X-Ratelimit-Limit
Section-Io-Id
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
Section-Io-Origin-Status
Server-Info
X-Varnish-Ttl
Protected
From-Origin
X-App-Server
X-Pass-Why
X-Revision
X-Protected-By
SRV
Ec-Rule-Version
X-Backend-Name
Frame-Options
Cache-Status
X-Cache-Server
X-FireWall-Port
X-Oracle-Dms-Rid
X-Hyper-Cache
X-RN-RSRV
Meta-Geo
Retry-After
X-Handled-By
X-ES-SERVER
X-UPSTREAM-Address
X-Hl-Ver
X-Endurance-Cache-Level
X-Locale
X-Adobe-Content
X-Adobe-Loc
X-Forwarded-Host
X-Ratelimit-Remaining
X-Storage
X-FB-TRIP-ID
X-NYM-Debug-Backend
X-Site-Version
X-Soup
CF-IPCountry
X-Www-Served-By
Cache-Tv-Group
Webcakes-App-Name
X-Human
TWC-Privacy
Property-Id
TWC-Connection-Speed
X-Varnishpool
Country
X-Format
Decoy-Debug-Key
TWC-Device-Class
TWC-GeoIP-LatLong
Decoy-Debug-Status
Decoy-Debug-TTL
Fastly-SSL
X-Pubstack
TWC-Locale-Group
X-Via-CDN
X-Access
Webcakes-Region
Webcakes-App-Version
X-Be
X-Section
X-Origin-Hint
X-Cache-Grace
X-Web-Node
TWC-GeoIP-Country
X-PHP-Host
X-Proto
X-PERF
X-PCL
X-Origin-Date
X-Proxy-Build
X-ProxyCache-Key
X-Mode
X-Say-TTL
X-Say-Cacheable
X-ProxyCache-Status
X-OCL
X-Labrador-Cache-Channel
X-FW-Version
X-BYPASS-REASON
X-ApacheServer
Selected-Fe
Cache-Name
Azure-Version
Azure-InstanceId
Azure-RegionName
Azure-SiteName
Azure-SlotName
X-SayCDN-TTL
X-Redis-Cache
X-Timing-Wait
X-Via-Fastly
X-Uri
X-Country-Code-Real
X-TT-LOGID
X-UA-Device-Type
X-WA-Info
X-LAGOON
X-FTR-DC
X-FTR-Realm
X-FTR-Cache-Status
X-FTR-Balancer
X-FTR-Backend
X-FTR-Backend-Server
X-AIR-PT
X-No-Session
X-S-Maxage
S-Cnection
X-Loop
X-Server-W
X-Status
X-Sql-Duration-Ms
X-Hosted-By
X-Sql-Count
X-TNCMS
X-Qloud-Router
X-Cache-TTL-Remaining
X-FTR-Expires
X-LJ-Flow-ID
X-VWS-Id
X-R9-Blue-Green-Version
X-AWS-Id
Mn-Server-Ip
X-Alternate-Cache-Key
X-MP-GENERATED-AT
X-Cluster
X-CCM
Cache-Hits
X-Request-Time
X-Sorting-Hat-ShopId
X-Shopify-Stage
X-ShopId
X-ShardId
X-Xfnlog-Site
X-Sorting-Hat-PodId
X-Storefront-Renderer-Rendered
Xserver
X-Cache-Var
X-Rendered-As
X-Cache-Var-Map
X-Is-Bot
X-Routing-Service
X-Zipkin-Id
X-Dynatrace
X-Air-Hostname
X-Proxied
X-Tec-Api-Version
X-Tec-Api-Origin
X-Detected-As
X-Tec-Api-Root
AMP-Access-Control-Allow-Source-Origin
X-SRV
X-Unique-Id
X-Cache-Host
X-Amzn-Remapped-Content-Length
X-Amz-Apigw-Id
X-EdgeConnect-Cache-Status
X-Device-Type
X-Amzn-RequestId
Apigw-Requestid
X-Info
X-Dc
X-Webkit-Csp
X-Nginx-Cache
X-Cdn
X-Microcachable
X-APP-VERSION
SD-X-WS
X-Cache-Enabled
X-GEO
X-B3-Traceid
X-Content-Age
X-Time-Microsecs
X-Debug-IsPreview
X-Debug-IsConnected
X-Varnish-Server
X-Backend-TTL
Tracecode
X-Cache-Backend
X-Correlation-ID
X-Platform
X-ServerID
X-Varnish-Grace
Amp-Access-Control-Allow-Source-Origin
X-Azure-Ref
X-Backend-Host
X-DynaTrace-JS-Agent
Uber-Trace-Id
DSUID
X-Erf-Stays-Bingo-Pdp-Web
X-GG-Cache-Date
X-Oss-Object-Type
X-Sucuri-ID
X-Tb
X-Oss-Storage-Class
X-Oss-Server-Time
X-Oss-Hash-Crc64ecma
X-Oss-Request-Id
Akamai-GRN
X-BCube-Filmed-By
Arc-Version
PB-RID
PB-PID
Backend
X-ID
X-NewRelic-App-Data
X-Proxy-Cache-Status
X-ATG-Version
X-Origin-Response-Time
X-Magnolia-Registration
X-Trace-Id
X-Akamai-Transformed
X-ScT
X-Varnish-Cache-Hits
X-S-Cookie
X-Session-Fingerprint
X-Vtex-Remote-Cache
Expiry
X-Thinkindot-L3
DCR-Decision-By
X-Vdms-Version
ServedBy
X-VG-WebCache
X-Vdms-Path
X-Trv-Group
DCR-Processing-Time-Ms
X-Vtex-Processado-Em
X-VG-WebServer
X-SRCache-Key
X-Origin-TTL
SR-User-Adfree
X-Connection-Hash
T-Server
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-D
Rendered-Blocks
X-Device-Os
Path
X-Destination
Pramga
Thinkindot-CacheControl
X-Cache-NE
X-A-Dgt
X-A-Wwc
X-Aed
X-Application
X-A-Dcw
X-A-Dam
X-B-Cookie
Thinkindot-CacheControl-Type
Thinkindot-Control
X-A-Ccd
X-External-Request-Id
Odigeo-Trace-Id
X-PBS-Appsvrname
X-PAYTM-SRV-ID
Lfy
X-ARC
X-Processor
Instruction
X-Rojux
Fastcgi-X-Cache-Version
X-Rewrite-Enabled
X-Request-UUID
X-Origin-CC
X-Matched-Rule
X-Generated-On
Mobile-Detection-Method
X-From
X-Fetched-On
Meta-Geo-Continent
MD5-Digest
X-Location
X-Level-Front-Cache
X-Generation-Time
Machine
X-S
X-A
X-CSRF-Token
X-Cache-Remote
X-RCS-CacheZone
X-Cache-PHP
X-Varnish-Hostname
X-Adobe-Source
X-Cache-NGX
X-Irp-Debug
Gh-Request-Id
X-Is-Gdpr
X-Micro-Cache
X-Mvc-Supplant-Cachable
X-Azure-Ref-OriginShield
X-JWT-State
Fastly-Backend-Name
X-Node-Id
Wxu-Next-Commit
Wxu-Next-Hostname
X-Reqid
CacheControlHeader
X-Cache-Info
X-OVcl-Cache
X-Cdn-Origin
Cf-Device-Type
X-OVcl
X-CGP
Ha-Gx-Prefs
X-Eu-Site
X-FC-Vary-Parameters
X-Generated-In
Magicmarker
X-Csrf-Jwt
Pagetype
DB-Nickname
CACHE
X-Developers
PFcat
X-Geo-Header
Locid
X-HN
X-HS-Content-Campaign-Id
Host-ID
HA-Ipaddr
X-Has-Esi
L
X-GeoIP
Ssr
L5d-Success-Class
Cache-Host
X-Owner
C-Via
X-Cache-Date
X-Cache-Bucket
X-Tumblr-Pixel-3
X-Thanos
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
X-Swa-Ws
X-VarnishDD-TTL
X-VServer
Release
X-GeoIP-City
X-Backend-State
BehaviorPad-Version
Xc-Version
X-Bip
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-Sn-Servicetimems
X-User
Wxu-Next-Region
X-Request-URI
AKAMAI
X-Request-Start
X-Skip-Cache
X-Debug-Cache
X-Ms-Version
X-Ms-Request-Id
V-Age
X-Cache-Tags
X-Fastly-Backend
X-Fastly-Cache
X-Core-Value
NGX
Apple-News-Services-Handled
X-Generated-By
Apple-News-Services-Host
Rt-Fastcgi-Cache
Apple-News-Services-Request-Url
Server-Host
Apple-News-Services-Parsed-Url
X-Developer
X-NC
X-CUA
UCS
X-Envoy-Decorator-Operation
Cf-Bgj
Content-Disposition
X-Request-Host
X-IP
X-NWS-UUID-VERIFY
X-Clientip
X-Scheme
X-Cms-Context
X-Var-Ttl
X-Method
X-Origin-Expires
X-Varnish-Hits
X-Varnish-Beresp-Grace
X-Branch-Name
X-Clara-WADP
X-DefHash
X-Cache-Debug
X-DefElseHash
X-Cache-Expires
X-Cache-Id
X-Loc
X-Servername
X-TX-ID
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
X-Ratelimit-Reset
X-Variation
X-Varnish-CookieHashed-On
X-WADP-Cache
X-TrackingId
X-VG-TLSProxy
X-Varnish-Remaining-TTL
X-Varnish-CookieINHashed-On
X-Policy
X-Platform-Server
X-GoCache-CacheStatus
X-Gzip
X-Fmm-Version
X-Esi-Check
X-DPWN-IS-SECURE
X-Li-Fabric
X-Li-Pop
X-Origin
X-Old-Content-Length
X-Nginx-Cache-Key
X-LI-UUID
X-Dispatcher-Server
X-NU-AKA-ACS-Version
Sever-Int
Server-Hostname
CloudFront-Viewer-Country
Vix-Hermes-Req-Id
Adler-Geo
CDCHOST
Server-Ext
Fastly-SIE
NM-Fastcgi-Cache
Location
Is-Eu
On-Server
Fastly-SWR
Platform
X-Host-Name
True-Client-Country-4JS
User-Cache-Control
X-B3-Spanid
X-Goog-Meta-Goog-Reserved-File-Mtime
CDN-Uid
CDN-RequestId
Origin
X-NCache
Fastly-Drupal-HTML
X-Hash
X-Hnp-Log
IsBot
CDN-PullZone
X-Block-Status
CDN-RequestCountryCode
CDN-Cache
CDN-EdgeStorageId
X-SIPLIST1
X-Slack-Backend
CDN-CachedAt
Web-Mar-Node
X-Gamma-Serve
X-Gen-Mode
X-Varnish-Beresp-Ttl
HostName
X-Varnish-Beresp-Status
X-Varnish-Url
X-Response-By
X-Refresh
X-NAPM-TraceId
X-PF-Uncompressing
Url
S-Rt
X-HOST
X-Varnish-Cacheable
X-CS
Xkeyi7
X-Core-Mission
X-Proxy-Cachei7
X-EC-Lua
X-Cdn-Forward
X-Mvc-Supplant-OutputCached
X-Aicache-OS
Content-Secure-Policy
Cross-Origin-Window-Policy
X-URL
N-Cache
Pics-Label
X-App-Version
X-CACHE-GROUP
X-Sucuri-Cache
X-BBXSRF
X-Cache-2
X-FireWall-Protection
Sid
X-CDN-Forward
X-LB-ID
X-B3-SpanId
Ohc-File-Size
X-Via-Poph
X-Contensis-Viewer-Groups
X-Cc-Via
X-Via-Popn
D-Cc-Upstream
X-Via-Popv
X-Cc-Req-Id
Cteonnt-Length
X-Cache-ASPX
X-Varnish-Authentication
Esi-Enabled
X-Tb-Optimization-Total-Bytes-Saved
X-Svr
Source
X-Wa
X-Cs
MIME-Version
X-Server-IP
X-Servedbyhost
X-Epic-Correlation-Id
X-DC
X-TA-CDN-Provider
X-Error
X-Srv
X-Cache-Config
X-TIME
X-API-Version
X-Unique-ID
X-Origin-Time
Geoip-Latitude
X-Gdpr
X-FPC
X-Nyt-Route
GeoIp-Country-Code
X-TraceId
X-Webkit-CSP-Report-Only
X-Nc
XServer
X-SN
X-VC
Hostname
HitType
Req-Svc-Chain
Who
Ohc-Cache-HIT
X-RateLimit-Limit
Server-Ttl
X-SB
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
X-Planisys-CDN-Cache
X-Webstats-RespID
X-LI-Proto
X-NodeID
X-Fastly-Request-Id
X-NGINX-Cache
Server-ID
X-VCL-Version
Country-Code
X-SD-PageType
X-LiteSpeed-Cache-Control
X-Check-Cacheable
X-HS-Status
X-Ua
Geo-Info
Svr
Cmsid
Kp-EeAlive
Cmstype
X-Esi
NtCoent-Length
X-Render-Time
X-Served-From
Viewtype
SID
VivaBuild
X-BBC-Edge-Cache-Status
X-Viewer-Country
EpKe-Alive
X-Vcl-Version
Cache-Key
X-Ftr-Cache-Host
X-Worker
X-Vgn-Hpd-Reason
X-Auto-Login
Request-ID
X-UA
X-Dynatrace-Js-Agent
X-RAMCache
Server-Id
X-CSRF-TOKEN
ProcessTime
Resin-Trace
X-Li-Proto
X-DB
X-CCDN-CacheTTL
M-TraceId
X-CCDN-Origin-Time
X-Hcs-Proxy-Type
X-TIM-N
A
X-RSL
X-DSS
X-DI
X-DW
X-RPM
X-RPS
X-CACHE-KEY
Cache-Provider
Upgrade-Insecure-Requests
TDXMobile
GeoIP-Country-Code
X-Air-Source
Cross-Origin-Opener-Policy
X-CF-Powered-By
X-Cluster-Node
GeoIP-Latitude
CDN
X-Newrelic-Synthetics
Processtime
X-Action
X-App
X-Internal-Host
Arc-Country
X-FTR-Cache-Host
Srv
X-Fpc
Mime-Version
Filterid
X-ServedByHost
X-Oss-Cdn-Auth
Tcn
Datacenter
X-WA
X-Vc
X-CLOUD-TRACE-CONTEXT
OT-Force-Account-Verify
CF-Cached-On
X-FORWARDED-FOR
X-BBC-Origin-Response-Status
WZWS-RAY
X-Service
X-Geo
X-HostName
X-HITS
X-Dw-Trace-Id
X-Via-PopH
X-BACKEND-TTL
X-Parent-Response-Time
X-Cache-Tag
Cdn
Proxy-Connection
X-Flog
X-MSEdge-Features
X-Via-PopN
X-MSEdge-Flight
X-Lb-Id
X-Pinterest-Sli-Endpoint-Name
X-Fastly-Backend-Reqs
X-ABtesting
X-Hello
X-ND-Cache
X-Pinterest-Sli-Response-Type
NGB
X-Via-PopV
X-Pinterest-Sli-Latency-Threshold
X-CACHE-AGE
X-Client-Ip
DataCenter
X-Via-NSCOPI
Dnion-Transfer-Encoding
W
FSS-Cache
PICS-Label
X-Forwarded-Site
X-IN-APIGATEWAY
X-IN-APIGATEWAYSSL
X-PHP-Backend
X-Edge-Location
X-NGENIX-Cache
X-JoinUs
X-SaId
X-Cdn-Request-ID
X-Presslabs-Stats
Vha6-Origin
Media-Length
X-Pf-Uncompressing
X-Oracle-DMS-ECID
URI
X-Acc-Rdl
X-Acc-Debug-Context
CountryCode
X-Region-Sid
X-LiteSpeed-Tag
X-Accel-Expires-Debug
X-RateLimit-Remaining-Second
X-Request-URL
X-Provided-By
X-PJAX-URL
Epwk-X-Cache
X-MiniProfiler-Ids
X-UnsetCookies
X-Akamai-Request-ID
X-RateLimit-Limit-Second
X-VC-Cache
X-Proxy-Upstream
X-Pad
X-Req
X-Akamai-Pragma-Client-IP
Surrogated-Key
X-Varnish-Beresp-TTL
Inserted-Into-Cache-At
LB
Mail-Subject
We-Hiring
Memcached
X-Bc-Bl
X-Date
X-Depends-On
X-Extlb
Cf-Ipcountry
X-ZONE
Env
X-Sigma-Backend
X-Tid
X-Rocket-Build-Number
X-Sigma
X-B3-Parentspanid
X-Via-Edge
X-Traceid
X-Via-SSL
X-Request-Url
X-Acquia-Purge-Tags
X-Acquia-Application-Trace
X-Csrf-Token
X-Akamai-ERPolicy
X-Akamai-ERRuleID
X-Vcache
Edge-Copy-Time
Content-Style-Type
Content-Script-Type
X-Acquia-Site
X-Acquia-Application-UUID
X-Ms-Meta-Originalurl
X-ElasticPress-Search
X-Ms-Meta-Staticbatchstarttime
X-ElasticPress-Query
X-Swift-Error
X-Zone
Akamai-Age-Ms
NnCoection
Ohc-Response-Time
X-Varnish-URL
Xet-Cookie
X-Snapshot-Date
X-APP
X-Redis-Duration-Ms
X-Debug-Cache-Fetch
Phost
Memory
X-ServerName
X-Debug-Cache-Store
X-Storefront-Renderer-Verified
X-Redis-Count
X-Litespeed-Cache-Control
Environment
X-C
Time