Threat Level: green Handler on Duty: Russ McRee

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Cf-Request-Id
CF-RAY
Last-Modified
CF-Cache-Status
X-XSS-Protection
Accept-Ranges
Link
Pragma
ETag
Expect-CT
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
X-UA-Compatible
Alt-Svc
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Permitted-Cross-Domain-Policies
X-Check
X-Xss-Protection
X-Request-ID
X-Cache-Status
X-Generator
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
X-Iinfo
X-Content-Security-Policy
Content-Encoding
X-CDN
X-Envoy-Upstream-Service-Time
Status
Feature-Policy
X-Ua-Compatible
X-AspNetMvc-Version
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
Access-Control-Max-Age
X-Via
Upgrade
Keep-Alive
X-Ws-Request-Id
X-Age
X-Turbo-Charged-By
X-AH-Environment
X-Robots-Tag
Request-Context
X-Proxy-Cache
EagleId
X-Cache-Group
Server-Timing
X-Backend
X-Hacker
X-Amz-Request-Id
Report-To
X-Server
Host-Header
X-Amz-Id-2
X-Server-Powered-By
Grace
X-Nginx-Cache-Status
X-UA-Device
X-LiteSpeed-Cache
X-Varnish-Cache
X-Rq
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-Page-Speed
X-Dns-Prefetch-Control
Cf-Railgun
X-Pingback
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
NEL
X-Amz-Version-Id
X-OneAgent-JS-Injection
X-Cache-Spec
X-WebKit-CSP
Xkey
Allow
X-Backend-Server
X-Device
X-CST
X-Host
X-Vhost
EagleEye-TraceId
X-Server-Id
Request-Id
Surrogate-Control
X-Dispatcher
X-Node
Accept-CH
Content-Location
X-Response-Time
Accept-CH-Lifetime
X-Akam-SW-Version
X-Ruxit-JS-Agent
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
P3p
X-Ac
X-ASPNET-VERSION
X-Template
X-Application-Context
X-Language
X-Country
X-Cache-Lookup
X-Mod-Pagespeed
X-Readtime
X-Cloud-Trace-Context
MS-Author-Via
X-B3-TraceId
X-Origin-Cache
Rating
X-Cnection
X-MS-InvokeApp
X-HW
X-Url
X-TtlSet
X-Kinja-Server-Push
X-PC
X-Vname
X-ORACLE-DMS-ECID
Accept-Ch
X-Clacks-Overhead
X-GitHub-Request-Id
X-FastCGI-Cache
X-ESI
Edge-Control
X-Trace
Accept-Ch-Lifetime
Display
X-Sol
X-Middleton-Display
Response
Pagespeed
X-Middleton-Response
X-Content-Type
X-Vcap-Request-Id
X-D2id
X-Kinja-Build
X-Kinja-Revision
X-Kinja
X-Exp-Variant
X-Cdn-Fetch
X-Exp-Id
Arr-Disable-Session-Affinity
X-GoogleNews-Bot
X-Kinja-Server
X-Use-Magma
Verso
X-Goog-Hash
X-Buckets
X-Rack-Cache
X-Country-Code
X-Server-Name
Service-Worker-Allowed
X-Navigation-Version
X-Varnish-TTL
X-ORACLE-DMS-RID
X-VARITI-CCR
X-Abt-Application-Version
X-Amz-Rid
X-Oneagent-Js-Injection
X-Powered-By-Plesk
Pinterest-Version
X-Pinterest-Rid
Pinterest-Generated-By
X-Client-IP
X-Fastly-Request-ID
X-Cache-TTL
X-Webkit-CSP
SPRequestGuid
X-SharePointHealthScore
X-Release
X-MSEdge-Ref
Fastly-Restarts
SPIisLatency
SPRequestDuration
X-Element-Page-Cache
X-Dw-Request-Base-Id
X-Cached
X-NF-Request-ID
X-TTL
Public-Key-Pins
MRF-Tech
X-B3-TraceId-Primal
Mrf-Cache-Status
RTSS
AR-ATIME
AR-CACHE
AR-PoweredBy
AR-Request-ID
Ar-Sid
X-Edge
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Access-Control-Request-Method
X-LLID
X-Origin-Upstream-Status
X-Powered-CMS
X-Px
X-Ezoic-Cdn
Fusion-Source
Fusion-Component-Id
Fusion-Content-Source
Fusion-Deployment-Id
Fusion-Template-Id
Fusion-Content-Id
X-Upstream
X-Ttl
Content-MD5
X-HP-Webp
X-Jurisdiction
Cache-Tag
X-Mid
X-ECACHE
X-MCACHE
X-Mg-S
X-Content-Digest
S
X-Amz-Server-Side-Encryption
X-Recruiting
Charset
X-Version
X-PressLabs-Stats
TCN
X-Pinterest-Direct
Fastcgi-Cache
MicrosoftSharePointTeamServices
X-T
X-Debug
X-Content-Security-Policy-Report-Only
Front-End-Https
X-Kinsta-Cache
X-Id
Filters
X-Grace
Cache-Tags
Edge-Cache-Tag
Server-Node
X-Accel-Expires
X-Forwarded-Proto
X-Logged-In
X-Forwarded-For
X-Amzn-Trace-Id
Nginx-Cache
Server-Name
X-Yandex-Sdch-Disable
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-DynaTrace
Surrogate-Key
X-Varnish-Age
TP-L2-Cache
TP-Cache
X-Correlation-Id
X-B3-Sampled
X-Request-Received
X-Request-Processing-Time
X-Microsite
X-Request-Handler-Origin-Region
X-XRDS-Location
X-Ser
X-Shield-Request-Id
X-Hits
X-Cache-Key
X-DIS-Request-ID
X-Az
X-Activity-Id
X-AppVersion
X-Amz-Replication-Status
X-Server-ID
X-HS-Cache-Config
X-HS-Hub-Id
X-HS-Combine-CSS
X-HS-Content-Id
X-GUploader-UploadID
X-Goog-Storage-Class
X-F-Cache
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Stored-Content-Encoding
Powered-By-ChinaCache
X-Origin-Server
Accept-Charset
X-XRDS-LOCATION
X-Git-Hash
X-Litespeed-Cache
X-Geo-Country
X-FTR-Request-ID
X-Respond-Thread
X-Hostname
X-LB-Cache
X-Upgrade-Enabled
X-Rid
X-DataDome
Cache
Section-Io-Cache
X-Frontend
Access-Control-Allow-Method
Alternate-Protocol
X-Cache-Age
Host
X-Mobile-URL
Cleartype
Paypal-Debug-Id
MS-CV
X-IPLB-Instance
Healthy
X-AOL-HN
X-Type
X-Ruxit-Js-Agent
X-Content-Options
X-Seen-By
X-Varnish-Backend
ServerID
X-VCache
X-Whom
X-WebKit-CSP-Report-Only
X-App-Environment
X-Aspnetmvc-Version
X-Aspnet-Duration-Ms
X-Cache-Action
X-Is-Crawler
X-Route-Name
Payment
X-Providence-Cookie
X-Request-Guid
X-Flags
X-TT
X-Jobs
X-B-Cache
X-Time
X-Page-Id
X-Signature
X-Debug-Info
X-NWS-LOG-UUID
Fastcgi-Useragent
X-Source
X-N
X-Mobile
X-Load-Cache
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-RateLimit-Remaining
X-Daa-Tunnel
X-Erf-Bev-Bev
X-FB-Debug
X-Erf-Bev-Bev-Is-Generated
X-Browser-Type
X-Via-JSL
X-Cached-By
Nel
X-Akamai-Edgescape
Version
X-Cache-Operation
X-Cache-Rule
Refresh
Viewport
X-Response-Served-From
X-Original-Request-Id
X-Accel-Buffering
X-Rule
DC
X-Drupal-Cache-Tags
X-Proxy
X-Framework
DynaTrace
X-Zen-Fury
Ms-Operation-Id
X-ProcessESI
X-Wix-Request-Id
X-RemovedCookies
X-Cacheable-TTL
X-RTag
X-Real-IP
Access-Control-Request-Headers
X-Fastcgi-Cache
X-Instance
X-Contextid
GEO-INFO
Realpath
X-Region
X-Cache-Time
X-HTML-Minification-Powered-By
X-UUID
X-Tt-Trace-Tag
Referer-Policy
X-Tt-Trace-Host
X-Page-View
Node
X-FW-Hash
X-FW-Server
X-FW-Static
X-FW-Dynamic
X-Drupal-Cache-Contexts
Countrycode
X-Distributor
X-FW-Type
X-FW-Serve
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Cluster-Name
Eomportal-Instance
X-B
X-Cache-Expired-At
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-Environment-Context
X-L-Path
X-Cache-Control
X-Tumblr-Pixel-1
X-G
X-Content-Powered-By
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-Cache-Hit
X-IPS-LoggedIn
Liferay-Portal
X-Node-Name
X-User-Agent
X-Ratelimit-Limit
Server-Info
Webserver
X-App-Server
X-Tumblr-Pixel-2
From-Origin
Section-Io-Origin-Status
Section-Origin-Responded
Section-Io-Id
Section-Io-Origin-Time-Seconds
X-Varnish-Ttl
X-FireWall-Port
X-Pass-Why
Protected
Ec-Rule-Version
X-Protected-By
X-Amz-Meta-S3cmd-Attrs
SRV
X-Revision
CF-IPCountry
X-Cache-Server
X-Backend-Name
Frame-Options
X-Www-Served-By
X-UPSTREAM-Address
Cache-Status
Meta-Geo
X-Mode
X-ES-SERVER
X-RN-RSRV
X-Hyper-Cache
Xserver
X-Hl-Ver
X-Handled-By
X-Endurance-Cache-Level
X-Soup
X-Site-Version
X-FB-TRIP-ID
X-Locale
Country
X-NYM-Debug-Backend
X-Cache-Grace
X-Forwarded-Host
X-Be
X-Web-Node
X-Storage
X-Human
Cache-Tv-Group
Retry-After
X-Varnishpool
X-Pubstack
Property-Id
X-Proto
Decoy-Debug-TTL
Decoy-Debug-Status
Decoy-Debug-Key
Azure-SlotName
Fastly-SSL
X-Redis-Cache
Azure-InstanceId
X-ProxyCache-Key
Selected-Fe
Webcakes-App-Version
Webcakes-Region
Azure-RegionName
Webcakes-App-Name
TWC-Privacy
X-Origin-Date
X-Origin-Hint
Azure-Version
Azure-SiteName
X-Timing-Wait
X-BYPASS-REASON
TWC-Locale-Group
TWC-GeoIP-LatLong
X-TT-LOGID
X-Labrador-Cache-Channel
X-UA-Device-Type
X-Uri
X-ProxyCache-Status
Cache-Name
TWC-GeoIP-Country
TWC-Device-Class
TWC-Connection-Speed
X-Proxy-Build
X-PHP-Host
X-FW-Version
X-Section
X-Server-W
X-SayCDN-TTL
X-Say-TTL
X-S-Maxage
X-Say-Cacheable
X-Request-Time
X-WA-Info
X-Hosted-By
X-Format
X-Loop
X-Sql-Duration-Ms
X-TNCMS
X-Sql-Count
X-AIR-PT
X-Access
X-Adobe-Loc
X-Adobe-Content
X-PERF
X-OCL
X-No-Session
X-R9-Blue-Green-Version
X-Tec-Api-Version
X-MP-GENERATED-AT
X-Via-Fastly
X-Tec-Api-Origin
X-Tec-Api-Root
X-ApacheServer
X-PCL
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Storefront-Renderer-Rendered
X-Shopify-Stage
X-ShopId
X-ShardId
Mn-Server-Ip
X-Status
X-AWS-Id
X-Alternate-Cache-Key
X-Via-CDN
X-Cluster
X-VWS-Id
X-LJ-Flow-ID
X-LAGOON
X-Ratelimit-Remaining
X-Routing-Service
X-Zipkin-Id
X-Cache-TTL-Remaining
X-Proxied
X-Qloud-Router
X-FTR-Balancer
X-FTR-Backend-Server
X-FTR-Cache-Status
X-Rendered-As
S-Cnection
X-FTR-DC
X-Country-Code-Real
X-Is-Bot
X-FTR-Backend
X-FTR-Realm
X-Nginx-Cache
Cache-Hits
X-Device-Type
X-Dc
X-FTR-Expires
X-Xfnlog-Site
X-CCM
X-Debug-IsConnected
X-Debug-IsPreview
X-Unique-Id
X-Info
X-Detected-As
X-Oracle-Dms-Rid
AMP-Access-Control-Allow-Source-Origin
Apigw-Requestid
X-Air-Hostname
X-Cache-Var-Map
X-Varnish-Grace
X-Cache-Var
X-Cache-Host
X-Amz-Apigw-Id
X-EdgeConnect-Cache-Status
X-Cdn
X-Amzn-RequestId
X-Amzn-Remapped-Content-Length
X-SRV
X-Cache-Enabled
X-Microcachable
X-Content-Age
X-Varnish-Server
X-Platform
X-GEO
SD-X-WS
X-GG-Cache-Date
X-Azure-Ref
X-Correlation-ID
X-DynaTrace-JS-Agent
X-Dynatrace
Tracecode
Amp-Access-Control-Allow-Source-Origin
X-Time-Microsecs
X-APP-VERSION
X-Backend-Host
Uber-Trace-Id
X-Backend-TTL
X-Proxy-Cache-Status
X-ServerID
X-Cache-Backend
X-CSRF-Token
Akamai-GRN
X-Erf-Stays-Bingo-Pdp-Web
DSUID
X-TA-CDN-Provider
X-Oss-Hash-Crc64ecma
Backend
X-Oss-Storage-Class
X-Oss-Request-Id
X-Oss-Object-Type
X-Tb
X-Oss-Server-Time
X-ATG-Version
X-NWS-UUID-VERIFY
X-BCube-Filmed-By
X-Trace-Id
X-Varnish-Hostname
X-NewRelic-App-Data
ServedBy
PB-PID
PB-RID
Arc-Version
X-RCS-CacheZone
X-Sucuri-ID
X-CF-Lambda-Version
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
X-D
X-A
X-Cache-PHP
Thinkindot-Control
X-Destination
X-Connection-Hash
X-A-Dam
X-Aed
X-Cache-NE
T-Server
X-Application
X-Magnolia-Registration
X-ARC
Xc-Version
SR-User-Adfree
X-B-Cookie
X-A-Ccd
X-A-Dcw
X-A-Dgt
X-CF-Lambda-Fn
X-A-Wwc
X-Varnish-Cache-Hits
X-Location
Instruction
X-Processor
X-Request-UUID
X-Rewrite-Enabled
X-Vdms-Path
X-PBS-Appsvrname
X-PAYTM-SRV-ID
X-Origin-TTL
X-Device-Os
Machine
Lfy
X-Rojux
X-S
X-Thinkindot-L3
DCR-Processing-Time-Ms
BehaviorPad-Version
X-Trv-Group
DCR-Decision-By
Expiry
Fastcgi-X-Cache-Version
X-S-Cookie
X-ScT
X-Session-Fingerprint
X-SRCache-Key
X-Origin-CC
MD5-Digest
Pramga
X-GeoIP-City
X-Vtex-Remote-Cache
X-Vtex-Processado-Em
X-Generation-Time
X-Generated-On
X-External-Request-Id
Rendered-Blocks
X-Fetched-On
Release
X-Vdms-Version
Path
X-VG-WebCache
X-Cache-NGX
Mobile-Detection-Method
Meta-Geo-Continent
X-Matched-Rule
Odigeo-Trace-Id
X-Level-Front-Cache
X-VG-WebServer
X-Akamai-Transformed
X-Origin-Response-Time
X-Debug-Cache
Pagetype
Ssr
Cf-Device-Type
Gh-Request-Id
Fastly-Backend-Name
Host-ID
X-Irp-Debug
X-Reqid
X-Skip-Cache
X-Owner
X-OVcl-Cache
X-Node-Id
X-OVcl
X-Sn-Servicetimems
X-SVT-ORM-RULES
X-Tumblr-Pixel-3
X-VServer
X-TrackingId
X-Thanos
X-SVT-ORM-VERSION
X-Swa-Ws
X-Mvc-Supplant-Cachable
X-Micro-Cache
X-FC-Vary-Parameters
X-From
X-Cdn-Origin
X-Cache-Bucket
X-Azure-Ref-OriginShield
X-Bip
X-Geo-Header
X-GeoIP
X-Is-Gdpr
X-JWT-State
CacheControlHeader
X-HS-Content-Campaign-Id
X-Has-Esi
UCS
X-Cache-Date
AKAMAI
Cache-Host
C-Via
HostName
X-Fastly-Backend
X-Cache-Info
X-Varnish-Hits
X-Eu-Site
NGX
X-B3-Traceid
Sever-Int
Location
L5d-Success-Class
Locid
X-Scheme
Magicmarker
X-Cache-Tags
X-Ms-Request-Id
X-Clientip
X-CGP
X-CUA
X-Csrf-Jwt
Server-Ext
X-Developer
Server-Hostname
L
Server-Host
X-Ms-Version
PFcat
X-Developers
On-Server
X-Generated-In
DB-Nickname
X-Var-Ttl
X-Request-Host
X-IP
X-Generated-By
CloudFront-Viewer-Country
X-Backend-State
X-Origin-Expires
X-Nginx-Cache-Key
X-Policy
X-VarnishDD-TTL
X-HN
X-Wikidot-Backend
X-User
HA-Ipaddr
X-Wikidot-Static-Cache
Wxu-Next-Commit
Wxu-Next-Region
Wxu-Next-Hostname
Ha-Gx-Prefs
X-Adobe-Source
User-Cache-Control
X-Cms-Context
X-Varnish-CookieINHashed-On
X-Cache-Expires
X-Origin
X-Branch-Name
X-Block-Status
X-Cache-Id
X-Varnish-CookieHashed-On
X-SIPLIST1
X-Rebelmouse-Surrogate-Control
X-Li-Fabric
X-Hnp-Log
X-Hash
X-Gzip
X-Li-Pop
X-Rebelmouse-Cache-Control
X-Old-Content-Length
X-Method
X-Loc
X-LI-UUID
X-Goog-Meta-Goog-Reserved-File-Mtime
X-GoCache-CacheStatus
X-Dispatcher-Server
X-DPWN-IS-SECURE
X-Slack-Backend
X-DefHash
X-DefElseHash
X-Esi-Check
X-Fastly-Cache
X-Request-URI
CDCHOST
X-Gen-Mode
X-Servername
X-Core-Value
X-Variation
X-Varnish-Remaining-TTL
X-NAPM-TraceId
Origin
Platform
X-Varnish-Beresp-Grace
Rt-Fastcgi-Cache
IsBot
Is-Eu
Content-Disposition
Cf-Bgj
Fastly-SIE
Fastly-SWR
Adler-Geo
V-Age
NM-Fastcgi-Cache
Web-Mar-Node
X-ID
X-TX-ID
X-Platform-Server
CDN-EdgeStorageId
X-Varnish-Beresp-Status
X-Fmm-Version
CDN-RequestId
X-WADP-Cache
X-Core-Mission
CDN-PullZone
X-Ratelimit-Reset
X-Envoy-Decorator-Operation
CDN-RequestCountryCode
Apple-News-Services-Request-Url
Vix-Hermes-Req-Id
X-Varnish-Beresp-Ttl
CDN-Uid
CDN-Cache
X-Cache-Remote
X-NU-AKA-ACS-Version
True-Client-Country-4JS
Apple-News-Services-Host
Apple-News-Services-Parsed-Url
X-Request-Start
X-Clara-WADP
X-Gamma-Serve
Apple-News-Services-Handled
X-Cache-Debug
Fastly-Drupal-HTML
CDN-CachedAt
X-B3-SpanId
X-App-Version
X-Cdn-Forward
X-VG-TLSProxy
X-Mvc-Supplant-OutputCached
X-NC
Sid
X-EC-Lua
X-PF-Uncompressing
X-NCache
X-B3-Spanid
X-CS
Url
X-Aicache-OS
X-LB-ID
X-Refresh
X-Varnish-Url
X-Varnish-Cacheable
X-Response-By
S-Rt
X-CACHE-GROUP
X-Host-Name
X-Proxy-Cachei7
Esi-Enabled
Xkeyi7
CACHE
X-Via-Poph
X-Via-Popn
X-Tb-Optimization-Total-Bytes-Saved
Pics-Label
N-Cache
X-Via-Popv
X-BBXSRF
X-FireWall-Protection
X-Nc
Cross-Origin-Window-Policy
Ohc-File-Size
X-Cache-2
X-Srv
Who
Content-Secure-Policy
X-Epic-Correlation-Id
Country-Code
X-Sucuri-Cache
X-TraceId
X-Cc-Via
X-CDN-Forward
X-Cc-Req-Id
Req-Svc-Chain
D-Cc-Upstream
X-Error
X-Webkit-Csp
X-Contensis-Viewer-Groups
Source
X-Cache-ASPX
X-Varnish-Authentication
Cteonnt-Length
X-Cs
X-CACHE-KEY
Server-Ttl
X-Svr
GeoIp-Country-Code
X-Unique-ID
Geoip-Latitude
X-Planisys-CDN-Rules
X-Wa
X-Planisys-CDN-TTL
X-Planisys-CDN-Cache
X-Webkit-CSP-Report-Only
X-DC
HitType
X-Servedbyhost
X-Server-IP
MIME-Version
X-RateLimit-Limit
X-FPC
X-Gdpr
X-Cache-Config
Cmsid
Kp-EeAlive
Cmstype
X-Nyt-Route
X-Origin-Time
X-HS-Status
X-API-Version
X-URL
X-SN
X-LiteSpeed-Cache-Control
X-VC
Svr
X-Served-From
Hostname
Geo-Info
Ohc-Cache-HIT
VivaBuild
X-Esi
X-SB
A
X-NodeID
X-NGINX-Cache
Cache-Key
X-Webstats-RespID
Viewtype
X-LI-Proto
Server-Id
X-SD-PageType
XServer
X-Vgn-Hpd-Reason
X-Vcl-Version
Server-ID
M-TraceId
X-VCL-Version
X-TIME
Resin-Trace
X-Check-Cacheable
X-Li-Proto
X-RAMCache
Filterid
NtCoent-Length
X-HOST
Request-ID
SID
X-Air-Source
X-Render-Time
Arc-Country
Cross-Origin-Opener-Policy
X-Viewer-Country
TDXMobile
X-Ua
X-UA
Cache-Provider
X-DW
X-RSL
X-RPS
X-CCDN-CacheTTL
X-CCDN-Origin-Time
X-TIM-N
X-Hcs-Proxy-Type
EpKe-Alive
X-RPM
X-BBC-Edge-Cache-Status
X-DSS
X-Internal-Host
X-DB
X-DI
X-Vc
GeoIP-Country-Code
GeoIP-Latitude
X-App
Mime-Version
X-CF-Powered-By
Srv
NGB
X-Worker
X-Auto-Login
X-Fastly-Request-Id
X-HostName
Upgrade-Insecure-Requests
ProcessTime
X-Ftr-Cache-Host
X-Action
X-ServedByHost
Processtime
X-Service
X-WA
X-Newrelic-Synthetics
X-FTR-Cache-Host
X-CSRF-TOKEN
X-Cluster-Node
Tcn
CDN
X-Fpc
X-Oss-Cdn-Auth
X-Dynatrace-Js-Agent
X-CLOUD-TRACE-CONTEXT
DataCenter
X-SaId
X-PHP-Backend
X-NGENIX-Cache
X-JoinUs
Proxy-Connection
X-Forwarded-Site
X-FORWARDED-FOR
X-Geo
X-Edge-Location
X-Extlb
Datacenter
FSS-Cache
X-Via-NSCOPI
X-Parent-Response-Time
X-BBC-Origin-Response-Status
X-HITS
CF-Cached-On
X-Cdn-Request-ID
X-BACKEND-TTL
X-MSEdge-Flight
X-Provided-By
X-MSEdge-Features
X-Swift-Error
X-Fastly-Backend-Reqs
X-Dw-Trace-Id
Cdn
W
X-CACHE-AGE
X-Client-Ip
Memcached
X-Hello
X-Date
Surrogated-Key
X-ND-Cache
X-Bc-Bl
X-Accel-Expires-Debug
We-Hiring
X-ABtesting
X-Flog
X-PJAX-URL
X-IN-APIGATEWAY
PICS-Label
X-Req
X-Region-Sid
X-IN-APIGATEWAYSSL
Dnion-Transfer-Encoding
X-Cache-Tag
X-Via-PopV
X-Via-PopN
X-Via-PopH
Mail-Subject
X-VC-Cache
X-Depends-On
OT-Force-Account-Verify
X-Proxy-Upstream
X-ZONE
X-Akamai-Pragma-Client-IP
WZWS-RAY
Media-Length
X-Sigma
X-Rocket-Build-Number
Memory
X-Sigma-Backend
Time
LB
Env
X-Presslabs-Stats
X-UnsetCookies
X-RateLimit-Remaining-Second
X-Lb-Id
X-Pf-Uncompressing
Vha6-Origin
X-RateLimit-Limit-Second
X-Oracle-DMS-ECID
X-MiniProfiler-Ids
Epwk-X-Cache
X-APP
X-Men
X-Pad
X-Snapshot-Date
X-LiteSpeed-Tag
X-Air-Trace-Id
Cf-Ipcountry
X-Zone
VNS-Age
VNS-Cache
X-Varnish-URL
CPC-Cache
CPC-Age
X-Request-Url
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-Acquia-Purge-Tags
X-ElasticPress-Query
X-Request-URL
URI
X-Akamai-ERPolicy
X-Csrf-Token
X-Litespeed-Cache-Control
X-B3-Parentspanid
X-Vcache
X-Akamai-ERRuleID
X-Varnish-Beresp-TTL
X-Acquia-Site
Xet-Cookie
X-Ms-Meta-Originalurl
X-Ms-Meta-Staticbatchstarttime
X-ElasticPress-Search
CountryCode
X-ServerName
X-Akamai-Request-ID
X-Amz-Meta-Cb-Modifiedtime
X-Redis-Count
X-Storefront-Renderer-Verified
X-Tx-Id
X-Nananana
Phost
Ohc-Response-Time
NnCoection
X-Debug-Cache-Fetch
Inserted-Into-Cache-At
X-Debug-Cache-Store
X-C
X-Traceid
X-Tid
Environment
X-Redis-Duration-Ms