Threat Level: green Handler on Duty: Jim Clausing

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
X-XSS-Protection
Cf-Request-Id
CF-RAY
CF-Cache-Status
Last-Modified
Accept-Ranges
Link
Pragma
Expect-CT
ETag
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
X-UA-Compatible
Alt-Svc
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Permitted-Cross-Domain-Policies
X-Check
X-Cache-Status
X-Generator
X-Request-ID
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
X-Iinfo
X-Content-Security-Policy
Content-Encoding
X-CDN
X-Envoy-Upstream-Service-Time
Status
X-Ua-Compatible
Feature-Policy
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
X-AspNetMvc-Version
Access-Control-Max-Age
X-Xss-Protection
X-Via
Upgrade
Keep-Alive
X-Ws-Request-Id
X-Age
X-Turbo-Charged-By
X-AH-Environment
X-Robots-Tag
Request-Context
X-Proxy-Cache
EagleId
X-Cache-Group
X-Backend
Server-Timing
X-Hacker
X-Amz-Request-Id
Report-To
X-Server
Host-Header
X-Amz-Id-2
X-Server-Powered-By
X-UA-Device
X-Nginx-Cache-Status
Grace
X-LiteSpeed-Cache
X-Dns-Prefetch-Control
X-Varnish-Cache
X-Rq
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-Swift-SaveTime
X-Page-Speed
Cf-Railgun
X-Pingback
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
NEL
X-Amz-Version-Id
X-OneAgent-JS-Injection
Xkey
X-WebKit-CSP
Allow
X-Cache-Spec
X-Backend-Server
X-Host
X-Vhost
X-CST
X-Device
EagleEye-TraceId
X-Server-Id
Surrogate-Control
Request-Id
X-Dispatcher
Accept-CH
X-Node
X-Kinja-Server-Push
Content-Location
X-Response-Time
X-Akam-SW-Version
Accept-CH-Lifetime
X-Ruxit-JS-Agent
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-ASPNET-VERSION
X-Template
X-Language
X-Ac
X-Application-Context
X-Readtime
X-Country
X-Cloud-Trace-Context
X-Cache-Lookup
X-Mod-Pagespeed
MS-Author-Via
X-Origin-Cache
X-B3-TraceId
Rating
X-MS-InvokeApp
X-Cnection
X-HW
X-ORACLE-DMS-ECID
X-Url
X-PC
X-TtlSet
X-Vname
Accept-Ch
X-Clacks-Overhead
X-FastCGI-Cache
Edge-Control
X-GitHub-Request-Id
X-ESI
Accept-Ch-Lifetime
X-Trace
X-Middleton-Display
Pagespeed
Response
Display
X-Middleton-Response
X-Sol
X-Content-Type
Verso
X-Kinja
X-GoogleNews-Bot
X-Exp-Variant
X-Cdn-Fetch
X-Kinja-Build
X-Exp-Id
Arr-Disable-Session-Affinity
X-D2id
X-Use-Magma
X-Kinja-Revision
X-Kinja-Server
X-Buckets
X-Vcap-Request-Id
X-Goog-Hash
X-Varnish-TTL
X-Rack-Cache
X-Server-Name
Service-Worker-Allowed
X-Country-Code
X-VARITI-CCR
X-Navigation-Version
X-Abt-Application-Version
X-Amz-Rid
X-ORACLE-DMS-RID
X-Oneagent-Js-Injection
Pinterest-Generated-By
Pinterest-Version
X-Pinterest-Rid
X-Cache-TTL
X-Client-IP
X-Powered-By-Plesk
SPRequestGuid
X-SharePointHealthScore
SPIisLatency
X-Fastly-Request-ID
SPRequestDuration
X-Release
X-MSEdge-Ref
X-Dw-Request-Base-Id
X-Element-Page-Cache
Fastly-Restarts
X-TTL
X-NF-Request-ID
X-Cached
MRF-Tech
Public-Key-Pins
Mrf-Cache-Status
X-B3-TraceId-Primal
RTSS
X-Origin-Upstream-Status
AR-PoweredBy
X-Edge
AR-ATIME
Ar-Sid
AR-CACHE
AR-Request-ID
X-Px
Access-Control-Request-Method
X-Webkit-CSP
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-LLID
Fusion-Template-Id
Fusion-Source
Fusion-Component-Id
Fusion-Deployment-Id
Fusion-Content-Id
Fusion-Content-Source
X-Powered-CMS
X-Upstream
X-Ezoic-Cdn
X-Ttl
Content-MD5
X-Pinterest-Direct
X-Jurisdiction
X-HP-Webp
X-Amz-Server-Side-Encryption
X-Mid
X-MCACHE
X-ECACHE
Charset
X-Content-Digest
X-Recruiting
S
X-Mg-S
Cache-Tag
X-PressLabs-Stats
X-Aspnetmvc-Version
MicrosoftSharePointTeamServices
X-Version
TCN
X-Debug
Front-End-Https
Fastcgi-Cache
X-XRDS-Location
X-Content-Security-Policy-Report-Only
X-T
X-Grace
Filters
Cache-Tags
X-Kinsta-Cache
Server-Node
Edge-Cache-Tag
X-Forwarded-Proto
X-Yandex-Sdch-Disable
X-Amzn-Trace-Id
X-Correlation-Id
X-Accel-Expires
X-Cache-Key
X-Logged-In
Server-Name
X-Id
Nginx-Cache
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
Surrogate-Key
X-Varnish-Age
Powered-By-ChinaCache
X-Forwarded-For
X-DynaTrace
TP-Cache
TP-L2-Cache
X-B3-Sampled
X-Hits
X-Ser
X-DIS-Request-ID
X-Request-Processing-Time
X-Request-Handler-Origin-Region
X-Microsite
X-Request-Received
X-Shield-Request-Id
X-AppVersion
X-Amz-Replication-Status
X-Activity-Id
X-Az
X-Server-ID
X-F-Cache
X-HS-Content-Id
X-HS-Combine-CSS
X-FTR-Request-ID
X-HS-Hub-Id
X-HS-Cache-Config
X-Goog-Storage-Class
Accept-Charset
X-Goog-Generation
X-Goog-Metageneration
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-Goog-Stored-Content-Encoding
X-Git-Hash
X-Origin-Server
X-Respond-Thread
X-Hostname
X-Geo-Country
X-DataDome
X-LB-Cache
Section-Io-Cache
X-Upgrade-Enabled
X-Rid
X-Frontend
X-Cache-Age
Access-Control-Allow-Method
X-Mobile-URL
Cleartype
Host
X-TEC-API-ORIGIN
Alternate-Protocol
X-TEC-API-VERSION
X-TEC-API-ROOT
X-Type
Paypal-Debug-Id
X-Cdn
Healthy
Cache
MS-CV
X-IPLB-Instance
X-Content-Options
ServerID
X-AOL-HN
X-Ruxit-Js-Agent
X-WebKit-CSP-Report-Only
Payment
X-Whom
X-App-Environment
X-Request-Guid
X-Is-Crawler
X-Cache-Action
X-Debug-Info
X-Flags
X-Providence-Cookie
X-Route-Name
X-Varnish-Backend
X-Aspnet-Duration-Ms
X-B-Cache
X-TT
X-Signature
X-Seen-By
X-VCache
Fastcgi-Useragent
X-Page-Id
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-Jobs
X-Mobile
X-Source
X-N
X-NWS-LOG-UUID
X-RateLimit-Remaining
X-Browser-Type
X-Load-Cache
X-XRDS-LOCATION
X-Cached-By
X-Via-JSL
X-Akamai-Edgescape
Version
X-Time
X-FB-Debug
Nel
X-Daa-Tunnel
DynaTrace
X-Cache-Operation
X-Litespeed-Cache
X-Cache-Rule
Viewport
X-Accel-Buffering
X-Rule
Refresh
X-Original-Request-Id
X-Response-Served-From
Realpath
DC
X-Drupal-Cache-Tags
X-Zen-Fury
X-Proxy
X-Framework
X-Tt-Trace-Tag
X-ProcessESI
X-Instance
X-RemovedCookies
X-Cacheable-TTL
Referer-Policy
X-Tt-Trace-Host
GEO-INFO
X-Fastcgi-Cache
X-RTag
Ms-Operation-Id
X-Real-IP
X-Region
Access-Control-Request-Headers
X-Contextid
X-UUID
X-Cache-Time
X-FW-Dynamic
X-FW-Hash
X-FW-Serve
X-Yottaa-Metrics
X-Page-View
X-Drupal-Cache-Contexts
X-Distributor
X-Environment-Context
X-FW-Server
X-HTML-Minification-Powered-By
X-FW-Static
X-L-Path
X-Yottaa-Optimizations
X-FW-Type
VIX-Pulpo-Upstream-Status
X-Node-Name
X-Cache-Expired-At
X-Wix-Request-Id
VIX-Pulpo-Node
Eomportal-Instance
X-B
Liferay-Portal
X-Cluster-Name
Node
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-G
X-Tumblr-Pixel-1
Countrycode
X-Tumblr-User
X-Cache-Control
X-Content-Powered-By
X-Cache-Hit
X-IPS-LoggedIn
X-Amz-Meta-S3cmd-Attrs
X-User-Agent
Webserver
X-Tumblr-Pixel-2
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
Section-Io-Id
SRV
Section-Io-Origin-Status
Server-Info
Protected
From-Origin
X-App-Server
X-Pass-Why
X-Revision
X-Protected-By
X-Ratelimit-Limit
Ec-Rule-Version
X-Backend-Name
Frame-Options
Cache-Status
X-Oracle-Dms-Rid
X-Cache-Server
X-FireWall-Port
X-Hyper-Cache
Meta-Geo
Retry-After
X-RN-RSRV
X-UPSTREAM-Address
X-Mode
X-ES-SERVER
X-Hl-Ver
X-Handled-By
X-Endurance-Cache-Level
X-Forwarded-Host
X-Storage
CF-IPCountry
X-FB-TRIP-ID
X-Locale
X-NYM-Debug-Backend
X-Adobe-Content
X-Adobe-Loc
X-Soup
X-Site-Version
X-Www-Served-By
Decoy-Debug-Key
Cache-Tv-Group
Country
X-Access
X-Web-Node
TWC-GeoIP-LatLong
TWC-Privacy
TWC-Device-Class
Webcakes-Region
X-Varnishpool
Webcakes-App-Name
X-Via-CDN
X-Human
X-Section
Property-Id
TWC-Connection-Speed
Webcakes-App-Version
X-Pubstack
Decoy-Debug-TTL
X-Format
Fastly-SSL
X-Cache-Grace
TWC-Locale-Group
X-Origin-Hint
Decoy-Debug-Status
TWC-GeoIP-Country
X-BYPASS-REASON
X-Be
X-FW-Version
X-Labrador-Cache-Channel
X-PCL
X-ApacheServer
Selected-Fe
Azure-SiteName
Azure-RegionName
Azure-SlotName
Azure-Version
Cache-Name
X-PERF
X-PHP-Host
X-SayCDN-TTL
X-Say-TTL
X-Timing-Wait
X-TT-LOGID
X-Uri
X-Say-Cacheable
X-Redis-Cache
X-Proto
X-Proxy-Build
X-ProxyCache-Key
X-ProxyCache-Status
Azure-InstanceId
X-OCL
X-FTR-Backend
X-FTR-Backend-Server
X-FTR-Balancer
X-Varnish-Ttl
X-Origin-Date
X-LAGOON
S-Cnection
X-AIR-PT
X-Country-Code-Real
X-S-Maxage
X-FTR-Cache-Status
X-FTR-DC
X-Server-W
X-FTR-Realm
X-UA-Device-Type
X-Sql-Duration-Ms
X-WA-Info
X-Via-Fastly
X-Sql-Count
X-Hosted-By
X-TNCMS
Mn-Server-Ip
X-R9-Blue-Green-Version
X-Status
X-No-Session
X-Loop
X-Qloud-Router
X-Cluster
X-LJ-Flow-ID
X-FTR-Expires
X-VWS-Id
X-AWS-Id
X-Cache-TTL-Remaining
X-Request-Time
X-Routing-Service
X-Proxied
X-ShardId
X-CCM
X-Sorting-Hat-PodId
X-Zipkin-Id
X-MP-GENERATED-AT
X-Xfnlog-Site
X-Storefront-Renderer-Rendered
X-Alternate-Cache-Key
X-Sorting-Hat-ShopId
X-Shopify-Stage
X-ShopId
Cache-Hits
X-Cache-Var
X-Cache-Var-Map
X-Is-Bot
X-Rendered-As
X-Ratelimit-Remaining
X-Dynatrace
X-Air-Hostname
X-Unique-Id
X-Detected-As
AMP-Access-Control-Allow-Source-Origin
X-SRV
Xserver
X-Device-Type
X-Amzn-Remapped-Content-Length
X-EdgeConnect-Cache-Status
X-Cache-Host
X-Amzn-RequestId
X-Amz-Apigw-Id
X-Info
X-Webkit-Csp
Apigw-Requestid
X-Nginx-Cache
X-Microcachable
SD-X-WS
X-Cache-Enabled
X-Dc
X-GEO
X-B3-Traceid
X-Tec-Api-Origin
X-Tec-Api-Root
X-Tec-Api-Version
X-Content-Age
X-ID
X-Time-Microsecs
X-Debug-IsPreview
X-Cache-Backend
X-Debug-IsConnected
Amp-Access-Control-Allow-Source-Origin
X-Varnish-Server
X-Backend-TTL
Tracecode
X-Platform
X-ServerID
X-Varnish-Grace
X-Azure-Ref
X-APP-VERSION
X-Backend-Host
X-DynaTrace-JS-Agent
Uber-Trace-Id
DSUID
X-Erf-Stays-Bingo-Pdp-Web
X-GG-Cache-Date
X-Oss-Hash-Crc64ecma
X-Oss-Object-Type
X-Oss-Request-Id
X-Oss-Storage-Class
X-NewRelic-App-Data
Akamai-GRN
X-Oss-Server-Time
X-Tb
X-Sucuri-ID
X-Proxy-Cache-Status
PB-RID
PB-PID
Arc-Version
X-BCube-Filmed-By
Backend
X-ATG-Version
X-Trace-Id
X-Akamai-Transformed
X-Origin-Response-Time
X-Magnolia-Registration
X-Correlation-ID
X-CF-Lambda-Version
X-VG-WebServer
X-Cache-NE
X-S
X-Connection-Hash
X-D
X-CF-Lambda-Fn
X-S-Cookie
X-Varnish-Cache-Hits
Mobile-Detection-Method
Meta-Geo-Continent
Odigeo-Trace-Id
Path
X-RCS-CacheZone
Pramga
MD5-Digest
Machine
DCR-Processing-Time-Ms
DCR-Decision-By
Expiry
Fastcgi-X-Cache-Version
Lfy
Instruction
Rendered-Blocks
SR-User-Adfree
X-A-Dgt
X-A-Dcw
X-A-Wwc
X-Aed
X-ARC
X-Application
X-A-Dam
X-A-Ccd
T-Server
ServedBy
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-A
Thinkindot-Control
X-B-Cookie
X-Vtex-Processado-Em
X-Generated-On
X-Generation-Time
X-Cache-Remote
X-Session-Fingerprint
X-Thinkindot-L3
X-Trv-Group
X-Origin-CC
X-Matched-Rule
X-Rojux
Xc-Version
X-Location
X-Level-Front-Cache
X-Rewrite-Enabled
X-Request-UUID
X-SRCache-Key
X-Destination
X-From
X-Origin-TTL
X-Vdms-Version
X-PBS-Appsvrname
X-ScT
X-External-Request-Id
X-Vdms-Path
X-PAYTM-SRV-ID
X-VG-WebCache
X-Fetched-On
X-Vtex-Remote-Cache
X-Device-Os
X-Processor
X-Adobe-Source
X-Cache-NGX
X-Varnish-Hostname
X-Cache-PHP
Ssr
Wxu-Next-Commit
Fastly-Backend-Name
X-Request-URI
Ha-Gx-Prefs
X-OVcl
Magicmarker
Wxu-Next-Hostname
Locid
X-OVcl-Cache
L5d-Success-Class
X-Owner
Host-ID
X-Node-Id
L
X-Wikidot-Static-Cache
HA-Ipaddr
PFcat
X-Mvc-Supplant-Cachable
X-Micro-Cache
Gh-Request-Id
X-Sn-Servicetimems
X-Cache-Date
X-Cache-Info
X-Tumblr-Pixel-3
X-GeoIP-City
X-Generated-In
X-VServer
X-Cache-Bucket
X-User
X-Cdn-Origin
X-Csrf-Jwt
X-Eu-Site
X-Developers
X-CGP
X-Request-Start
X-VarnishDD-TTL
X-FC-Vary-Parameters
X-Bip
X-Backend-State
X-HN
X-Has-Esi
X-SVT-ORM-RULES
X-Skip-Cache
X-HS-Content-Campaign-Id
X-Is-Gdpr
X-Irp-Debug
X-Geo-Header
X-SVT-ORM-VERSION
X-Swa-Ws
X-Azure-Ref-OriginShield
X-Thanos
X-Wikidot-Backend
Release
Cf-Device-Type
BehaviorPad-Version
X-JWT-State
Wxu-Next-Region
AKAMAI
Cache-Host
C-Via
DB-Nickname
CACHE
X-Ms-Request-Id
X-CSRF-Token
X-Debug-Cache
X-Ms-Version
X-Fastly-Backend
X-Varnish-Hits
X-IP
X-Var-Ttl
X-Origin-Expires
X-Method
V-Age
Cf-Bgj
Server-Ext
Pagetype
Server-Host
Server-Hostname
X-Nginx-Cache-Key
Sever-Int
X-Reqid
X-Envoy-Decorator-Operation
User-Cache-Control
X-Cms-Context
X-GeoIP
X-Core-Value
X-CUA
X-Request-Host
Content-Disposition
X-Clientip
CloudFront-Viewer-Country
X-Scheme
X-Cache-Tags
X-NWS-UUID-VERIFY
X-Developer
On-Server
X-Fastly-Cache
Apple-News-Services-Request-Url
UCS
NGX
CDCHOST
Apple-News-Services-Host
X-Generated-By
Apple-News-Services-Parsed-Url
CacheControlHeader
X-Policy
Apple-News-Services-Handled
X-NC
X-Varnish-Beresp-Grace
Fastly-SIE
X-Hnp-Log
X-DefHash
IsBot
Fastly-SWR
X-Origin
Adler-Geo
X-Variation
X-LI-UUID
X-TX-ID
X-SIPLIST1
X-Branch-Name
X-Cache-Expires
X-Cache-Debug
X-Cache-Id
X-DPWN-IS-SECURE
X-GoCache-CacheStatus
X-Clara-WADP
X-TrackingId
X-Gzip
X-Esi-Check
X-Servername
Is-Eu
X-Block-Status
Location
X-Li-Pop
X-Li-Fabric
X-NU-AKA-ACS-Version
X-B3-Spanid
X-Rebelmouse-Surrogate-Control
X-VG-TLSProxy
X-Gen-Mode
Rt-Fastcgi-Cache
X-Ratelimit-Reset
Origin
X-Fmm-Version
Platform
X-WADP-Cache
True-Client-Country-4JS
X-Rebelmouse-Cache-Control
X-Old-Content-Length
X-Host-Name
X-Varnish-CookieINHashed-On
X-Platform-Server
Web-Mar-Node
X-Loc
X-DefElseHash
X-Varnish-Remaining-TTL
X-Varnish-CookieHashed-On
Vix-Hermes-Req-Id
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Status
CDN-EdgeStorageId
X-Gamma-Serve
Fastly-Drupal-HTML
CDN-RequestCountryCode
CDN-PullZone
X-CS
NM-Fastcgi-Cache
X-NCache
CDN-Uid
CDN-RequestId
X-Slack-Backend
X-Dispatcher-Server
X-Goog-Meta-Goog-Reserved-File-Mtime
CDN-Cache
X-Varnish-Url
CDN-CachedAt
X-App-Version
X-Refresh
X-Varnish-Cacheable
Url
X-Hash
X-NAPM-TraceId
S-Rt
X-Core-Mission
X-Response-By
Xkeyi7
X-EC-Lua
X-Aicache-OS
X-PF-Uncompressing
X-Mvc-Supplant-OutputCached
X-Proxy-Cachei7
HostName
Pics-Label
X-CDN-Forward
Content-Secure-Policy
Cross-Origin-Window-Policy
X-Sucuri-Cache
N-Cache
X-BBXSRF
X-URL
X-CACHE-GROUP
X-Cache-2
X-Cdn-Forward
Ohc-File-Size
X-B3-SpanId
X-LB-ID
X-Varnish-Authentication
Cteonnt-Length
X-Esi
X-Via-Popn
X-Via-Popv
X-Via-Poph
D-Cc-Upstream
X-TIME
X-Contensis-Viewer-Groups
X-Cc-Via
X-Cc-Req-Id
X-Cache-ASPX
X-FireWall-Protection
X-DC
Sid
X-Servedbyhost
Esi-Enabled
X-Svr
X-Tb-Optimization-Total-Bytes-Saved
X-Wa
MIME-Version
X-RateLimit-Limit
X-Server-IP
X-TA-CDN-Provider
XServer
Source
X-Error
X-Epic-Correlation-Id
Hostname
X-Srv
X-FPC
X-API-Version
X-Origin-Time
X-Cache-Config
Geoip-Latitude
X-Gdpr
X-Nyt-Route
X-Unique-ID
X-TraceId
X-Webkit-CSP-Report-Only
X-Cs
X-Nc
Who
HitType
GeoIp-Country-Code
X-VC
X-SN
Req-Svc-Chain
X-LI-Proto
Ohc-Cache-HIT
Server-ID
X-VCL-Version
X-SB
X-Webstats-RespID
X-NodeID
X-Planisys-CDN-Cache
Country-Code
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
Server-Ttl
X-NGINX-Cache
X-Fastly-Request-Id
X-HS-Status
X-LiteSpeed-Cache-Control
X-SD-PageType
X-Check-Cacheable
SID
X-Ua
Geo-Info
Cmstype
Svr
Cmsid
Kp-EeAlive
X-Viewer-Country
EpKe-Alive
X-Vgn-Hpd-Reason
X-BBC-Edge-Cache-Status
X-Served-From
X-Render-Time
VivaBuild
Viewtype
X-CSRF-TOKEN
X-HOST
NtCoent-Length
Cache-Key
A
X-Ftr-Cache-Host
Request-ID
X-RAMCache
X-Auto-Login
X-Worker
X-Dynatrace-Js-Agent
X-UA
X-CACHE-KEY
X-Vcl-Version
Resin-Trace
Cache-Provider
X-RPM
ProcessTime
X-DI
X-DSS
X-DB
X-DW
X-FORWARDED-FOR
X-CCDN-CacheTTL
X-Hcs-Proxy-Type
X-TIM-N
X-RPS
M-TraceId
X-CCDN-Origin-Time
X-RSL
Upgrade-Insecure-Requests
X-Air-Source
CDN
Cross-Origin-Opener-Policy
Server-Id
X-App
TDXMobile
GeoIP-Latitude
X-CF-Powered-By
Arc-Country
X-Cluster-Node
X-Li-Proto
GeoIP-Country-Code
X-Newrelic-Synthetics
Datacenter
Processtime
X-Action
X-COUNTRY
X-Internal-Host
X-FTR-Cache-Host
Tcn
X-Vc
Filterid
X-Oss-Cdn-Auth
X-Fpc
X-CLOUD-TRACE-CONTEXT
CF-Cached-On
OT-Force-Account-Verify
WZWS-RAY
Mime-Version
X-WA
X-Geo
X-ServedByHost
X-BBC-Origin-Response-Status
Srv
X-Service
X-HITS
X-HostName
X-MSEdge-Features
X-Hello
X-MSEdge-Flight
X-ABtesting
X-Dw-Trace-Id
X-Flog
Cdn
X-Parent-Response-Time
X-Pinterest-Sli-Endpoint-Name
Proxy-Connection
X-ND-Cache
X-BACKEND-TTL
X-Pinterest-Sli-Response-Type
X-Via-PopH
X-Via-PopV
X-Pinterest-Sli-Latency-Threshold
X-Via-PopN
NGB
X-Fastly-Backend-Reqs
X-Lb-Id
X-Cache-Tag
X-Client-Ip
X-CACHE-AGE
X-Forwarded-Site
X-Via-NSCOPI
W
X-Pf-Uncompressing
FSS-Cache
X-IN-APIGATEWAY
X-IN-APIGATEWAYSSL
Dnion-Transfer-Encoding
X-Edge-Location
X-SaId
X-NGENIX-Cache
X-JoinUs
X-PHP-Backend
X-Cdn-Request-ID
URI
Vha6-Origin
DataCenter
X-Oracle-DMS-ECID
PICS-Label
X-Extlb
X-Presslabs-Stats
Media-Length
X-Acc-Rdl
X-Acc-Debug-Context
CountryCode
X-Bc-Bl
X-Accel-Expires-Debug
X-Akamai-Pragma-Client-IP
X-Akamai-Request-ID
X-Proxy-Upstream
X-PJAX-URL
X-Pad
X-Depends-On
X-Date
X-LiteSpeed-Tag
X-Swift-Error
LB
Surrogated-Key
X-Req
X-RateLimit-Remaining-Second
X-Provided-By
X-ZONE
X-Request-URL
X-Region-Sid
X-UnsetCookies
Memcached
Epwk-X-Cache
Inserted-Into-Cache-At
X-MiniProfiler-Ids
X-VC-Cache
X-RateLimit-Limit-Second
Cf-Ipcountry
X-Sigma-Backend
We-Hiring
Mail-Subject
Env
X-Rocket-Build-Number
X-Sigma
X-Request-Url
Content-Style-Type
Edge-Copy-Time
Content-Script-Type
X-Ms-Meta-Staticbatchstarttime
X-Acquia-Purge-Tags
X-Acquia-Application-UUID
X-B3-Parentspanid
X-Via-SSL
X-Akamai-ERRuleID
X-Vcache
X-Akamai-ERPolicy
X-Traceid
X-Via-Edge
X-Csrf-Token
X-Acquia-Site
X-Acquia-Application-Trace
X-Varnish-Beresp-TTL
X-ElasticPress-Search
X-ElasticPress-Query
X-Ms-Meta-Originalurl
X-Men
X-Zone
NnCoection
Ohc-Response-Time
X-APP
X-Varnish-URL
Phost
X-Snapshot-Date
Xet-Cookie
X-Tid
X-Redis-Duration-Ms
X-Debug-Cache-Fetch
X-Storefront-Renderer-Verified
Memory
X-ServerName
X-Debug-Cache-Store
X-C
Time
X-Litespeed-Cache-Control
X-Redis-Count
Environment
Akamai-Age-Ms