Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Cf-Request-Id
CF-RAY
CF-Cache-Status
Accept-Ranges
Link
Pragma
ETag
Expect-CT
X-XSS-Protection
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
P3P
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
Alt-Svc
X-UA-Compatible
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
X-Request-Id
X-Xss-Protection
X-Varnish
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-Runtime
X-AspNet-Version
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Permitted-Cross-Domain-Policies
X-Check
X-Cache-Status
X-Generator
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
X-FRAME-OPTIONS
X-Content-Security-Policy
X-Ua-Compatible
X-Request-ID
X-Iinfo
Content-Encoding
X-CDN
Feature-Policy
X-AspNetMvc-Version
Status
X-Envoy-Upstream-Service-Time
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
Upgrade
Access-Control-Max-Age
X-Via
Keep-Alive
X-Ws-Request-Id
X-AH-Environment
X-Robots-Tag
X-Age
Request-Context
X-Cache-Group
EagleId
X-Turbo-Charged-By
X-Proxy-Cache
Server-Timing
X-Server
X-Backend
X-Hacker
Host-Header
X-Server-Powered-By
Report-To
X-Amz-Request-Id
X-Nginx-Cache-Status
X-Amz-Id-2
Grace
X-UA-Device
X-Dns-Prefetch-Control
X-Rq
X-Varnish-Cache
P3p
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-LiteSpeed-Cache
X-Page-Speed
X-OneAgent-JS-Injection
Cf-Railgun
X-Pingback
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Device
X-CST
X-Amz-Version-Id
NEL
X-Cache-Spec
Allow
X-Vhost
X-Backend-Server
X-WebKit-CSP
X-ASPNET-VERSION
X-Host
X-Server-Id
X-Dispatcher
Surrogate-Control
EagleEye-TraceId
X-Node
Xkey
Request-Id
X-Response-Time
Content-Location
Accept-CH
X-Akam-SW-Version
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Ruxit-JS-Agent
X-Cache-Lookup
Accept-CH-Lifetime
X-Application-Context
X-Country
X-Ac
X-Mod-Pagespeed
X-Cloud-Trace-Context
X-Readtime
X-Template
X-Language
X-B3-TraceId
MS-Author-Via
X-HW
Rating
X-Url
X-Cnection
X-MS-InvokeApp
Accept-Ch-Lifetime
X-PC
X-Vname
X-TtlSet
X-Origin-Cache
Edge-Control
X-Clacks-Overhead
X-ESI
X-GitHub-Request-Id
X-Trace
Accept-Ch
X-Varnish-TTL
Pagespeed
Display
X-Middleton-Display
X-Middleton-Response
Response
X-Sol
X-D2id
X-Content-Type
Verso
Arr-Disable-Session-Affinity
X-Kinja-Build
X-Kinja
X-Kinja-Revision
X-Kinja-Server
X-Use-Magma
X-Cdn-Fetch
X-GoogleNews-Bot
X-Exp-Variant
X-Exp-Id
X-FastCGI-Cache
X-Powered-By-Plesk
X-Goog-Hash
X-Country-Code
X-Vcap-Request-Id
X-Rack-Cache
X-Webkit-CSP
X-TTL
X-VARITI-CCR
X-Navigation-Version
X-ORACLE-DMS-RID
X-Server-Name
X-Amz-Rid
X-Abt-Application-Version
X-ORACLE-DMS-ECID
Fastly-Restarts
Service-Worker-Allowed
X-Cached
X-Fastly-Request-ID
X-Client-IP
X-MSEdge-Ref
X-Buckets
X-Release
X-Element-Page-Cache
Cache-Tag
X-Dw-Request-Base-Id
X-NF-Request-ID
RTSS
Public-Key-Pins
Mrf-Cache-Status
MRF-Tech
X-Cache-TTL
X-B3-TraceId-Primal
Access-Control-Request-Method
SPRequestGuid
X-SharePointHealthScore
SPRequestDuration
SPIisLatency
X-Ezoic-Cdn
X-Edge
AR-PoweredBy
AR-CACHE
AR-Request-ID
AR-ATIME
Ar-Sid
X-Powered-CMS
X-LLID
X-Upstream
X-Version
X-Pinterest-Rid
Pinterest-Generated-By
Pinterest-Version
X-SRCache-Store-Status
X-SRCache-Fetch-Status
S
X-Jurisdiction
X-HP-Webp
Content-MD5
X-Kinsta-Cache
X-Recruiting
X-ECACHE
X-Mid
X-MCACHE
Charset
X-Mg-S
X-PressLabs-Stats
X-T
X-DynaTrace
Cache-Tags
X-Accel-Expires
X-Content-Digest
X-Origin-Upstream-Status
X-Forwarded-Proto
X-Litespeed-Cache
Fastcgi-Cache
X-Content-Security-Policy-Report-Only
Fusion-Template-Id
Fusion-Component-Id
Fusion-Deployment-Id
Fusion-Source
Fusion-Content-Source
Fusion-Content-Id
X-Id
X-Logged-In
X-Ttl
X-Px
TP-Cache
Filters
TP-L2-Cache
Server-Name
TCN
Server-Node
Edge-Cache-Tag
X-Amz-Server-Side-Encryption
X-Correlation-Id
X-Oneagent-Js-Injection
Front-End-Https
X-Forwarded-For
X-Request-Received
X-Request-Processing-Time
MicrosoftSharePointTeamServices
Nginx-Cache
X-Grace
X-Shield-Request-Id
Alternate-Protocol
X-Hits
X-Amzn-Trace-Id
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-Microsite
X-Request-Handler-Origin-Region
X-Server-ID
X-NWS-LOG-UUID
X-B3-Sampled
X-XRDS-Location
X-Az
X-AppVersion
X-Activity-Id
X-Ruxit-Js-Agent
X-Amz-Replication-Status
X-F-Cache
X-Origin-Server
X-HS-Hub-Id
X-HS-Combine-CSS
X-HS-Cache-Config
X-Varnish-Age
X-HS-Content-Id
X-Goog-Storage-Class
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-GUploader-UploadID
X-Goog-Generation
X-Goog-Stored-Content-Length
X-Debug
X-Frontend
X-Rid
Nel
X-Daa-Tunnel
Realpath
Host
Section-Io-Cache
X-Yandex-Sdch-Disable
X-RateLimit-Remaining
X-Geo-Country
X-Cache-Age
X-XRDS-LOCATION
Accept-Charset
X-Fastcgi-Cache
X-DIS-Request-ID
X-Hostname
Surrogate-Key
X-Git-Hash
X-Ser
X-VCache
X-Respond-Thread
Access-Control-Allow-Method
Cleartype
X-Mobile-URL
X-WebKit-CSP-Report-Only
X-Contextid
X-Source
X-Seen-By
ServerID
X-Type
X-AOL-HN
Paypal-Debug-Id
X-DataDome
MS-CV
X-Upgrade-Enabled
X-LB-Cache
X-Varnish-Backend
X-Route-Name
Payment
Healthy
X-Time
X-Flags
X-Request-Guid
X-Content-Options
X-TT
X-Is-Crawler
X-Providence-Cookie
X-Aspnet-Duration-Ms
X-IPLB-Instance
X-Whom
X-Debug-Info
X-Load-Cache
X-Cache-Action
X-B-Cache
X-Page-Id
X-Signature
X-N
X-Cache-Key
X-App-Environment
X-FB-Debug
Fastcgi-Useragent
Node
X-Jobs
Cache
X-Webkit-Csp
X-Rule
X-Mobile
X-Erf-Bev-Bev-Is-Generated
X-Browser-Type
X-Erf-Bev-Bev
X-Cache-Expired-At
Refresh
X-FireWall-Port
Viewport
X-Tec-Api-Version
X-Tec-Api-Origin
X-Tec-Api-Root
X-Original-Request-Id
X-Wix-Request-Id
X-Response-Served-From
X-Accel-Buffering
DC
X-Cacheable-TTL
X-Cache-Control
X-Cluster-Name
X-Instance
X-RTag
Ms-Operation-Id
Access-Control-Request-Headers
X-Content-Powered-By
X-Real-IP
X-Distributor
X-Debug-IsPreview
X-UUID
X-Debug-IsConnected
X-RemovedCookies
X-B
X-HTML-Minification-Powered-By
X-Zen-Fury
X-ProcessESI
X-Framework
Version
Referer-Policy
X-Proxy
VIX-Pulpo-Node
Eomportal-Instance
X-Cache-Time
X-Region
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-IPS-LoggedIn
X-Page-View
VIX-Pulpo-Upstream-Status
X-Drupal-Cache-Tags
X-Www-Served-By
X-FTR-Request-ID
Countrycode
X-Protected-By
X-Drupal-Cache-Contexts
X-Nginx-Cache
Xserver
X-App-Server
X-G
X-Tumblr-User
X-Tumblr-Pixel-0
X-FW-Dynamic
X-Tumblr-Pixel
X-FW-Hash
X-FW-Serve
X-FW-Static
X-FW-Type
X-Cached-By
X-Tumblr-Pixel-1
X-FW-Server
X-Varnish-Grace
X-Yottaa-Optimizations
X-Yottaa-Metrics
CF-IPCountry
X-Cache-Operation
X-Cache-Rule
Liferay-Portal
X-Via-JSL
GEO-INFO
Section-Origin-Responded
Section-Io-Origin-Time-Seconds
Section-Io-Id
Section-Io-Origin-Status
X-Pass-Why
X-Akamai-Edgescape
X-Cache-Hit
X-Device-Type
X-Environment-Context
X-L-Path
X-TA-CDN-Provider
SRV
Powered-By-ChinaCache
Server-Info
Retry-After
X-Varnish-Server
X-Adobe-Content
X-Adobe-Loc
Cache-Status
X-User-Agent
DynaTrace
Frame-Options
X-Pinterest-Direct
Ec-Rule-Version
From-Origin
X-RN-RSRV
X-Endurance-Cache-Level
Meta-Geo
X-Tumblr-Pixel-2
X-UPSTREAM-Address
X-ES-SERVER
X-Handled-By
X-Hl-Ver
Fastly-SSL
X-Mode
X-Backend-Name
Webserver
Uber-Trace-Id
X-FB-TRIP-ID
Cache-Tv-Group
X-Storage
Decoy-Debug-TTL
X-Section
Country
Decoy-Debug-Status
Apigw-Requestid
X-NYM-Debug-Backend
X-ProxyCache-Status
X-ProxyCache-Key
Property-Id
Decoy-Debug-Key
X-Varnishpool
TWC-Connection-Speed
TWC-Device-Class
X-Pubstack
X-Cache-Server
TWC-GeoIP-Country
X-OCL
X-Human
TWC-GeoIP-LatLong
Webcakes-App-Name
Webcakes-App-Version
X-Proxy-Cache-Status
X-PCL
Webcakes-Region
X-Soup
TWC-Privacy
X-Origin-Hint
X-MP-GENERATED-AT
TWC-Locale-Group
X-Format
X-BYPASS-REASON
X-Access
X-Be
X-Proxy-Build
X-PERF
X-PHP-Host
X-ApacheServer
X-Info
Cache-Name
X-R9-Blue-Green-Version
X-Request-Time
X-Labrador-Cache-Channel
Selected-Fe
X-Say-TTL
X-No-Session
X-Origin-Date
X-Loop
X-Timing-Wait
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Proto
X-Web-Node
X-TNCMS
X-Say-Cacheable
X-S-Maxage
X-SayCDN-TTL
X-Via-Fastly
X-Uri
X-WA-Info
X-LAGOON
Azure-InstanceId
Azure-Version
Azure-SlotName
Azure-SiteName
Azure-RegionName
Mn-Server-Ip
X-Server-W
X-Sql-Duration-Ms
Protected
X-AWS-Id
X-UA-Device-Type
X-GG-Cache-Date
X-LJ-Flow-ID
X-Sql-Count
X-Cache-TTL-Remaining
X-Xfnlog-Site
X-VWS-Id
X-SRV
X-Redis-Cache
X-Content-Age
X-Hosted-By
X-Status
X-NWS-UUID-VERIFY
X-Hyper-Cache
X-Alternate-Cache-Key
X-Is-Bot
X-Zipkin-Id
X-Shopify-Stage
X-ShopId
X-ShardId
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Cache-Enabled
X-Storefront-Renderer-Rendered
X-Routing-Service
Amp-Access-Control-Allow-Source-Origin
X-Rendered-As
X-Proxied
X-Locale
X-Backend-Host
X-Ratelimit-Limit
X-Site-Version
X-Azure-Ref
X-FW-Version
S-Cnection
X-Cluster
X-Microcachable
X-Cache-Grace
X-Forwarded-Host
X-TT-LOGID
X-App-Version
X-AIR-PT
X-Varnish-Ttl
X-Platform
X-Trace-Id
X-CSRF-Token
Akamai-GRN
ServedBy
X-Revision
X-Qloud-Router
X-EdgeConnect-Cache-Status
X-ATG-Version
X-Cache-NGX
X-Cache-PHP
X-Varnish-Hostname
X-Aspnetmvc-Version
AMP-Access-Control-Allow-Source-Origin
X-Debug-Cache
X-Via-CDN
Cache-Hits
X-Dc
Who
X-Akamai-Transformed
X-Detected-As
X-TX-ID
Filterid
X-RCS-CacheZone
DB-Nickname
X-RateLimit-Limit
X-CCM
Country-Code
X-Node-Name
X-B3-SpanId
X-Varnish-Beresp-Grace
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Amzn-Remapped-Content-Length
X-Adobe-Source
X-Cache-Host
SD-X-WS
X-CACHE-KEY
X-GEO
X-Ms-Version
X-Varnish-Beresp-Ttl
X-CS
X-Ms-Request-Id
X-BCube-Filmed-By
X-Varnish-Beresp-Status
X-Correlation-ID
Backend
X-Edge-Location-Klb
X-Unique-Id
Fastly-Backend-Name
Fastcgi-X-Cache-Version
X-S-Cookie
X-S
Expiry
Machine
Mobile-Detection-Method
X-Request-UUID
Meta-Geo-Continent
MD5-Digest
X-ScT
X-Rewrite-Enabled
DCR-Decision-By
X-Trv-Group
X-Vdms-Version
X-Vdms-Path
X-Varnish-Cache-Hits
X-Ratelimit-Remaining
X-SRCache-Key
X-VG-WebCache
BehaviorPad-Version
X-Session-Fingerprint
Odigeo-Trace-Id
DCR-Processing-Time-Ms
X-A
X-Origin-TTL
X-D
X-Destination
X-Connection-Hash
X-CF-Lambda-Version
X-Owner
X-CF-Lambda-Fn
X-External-Request-Id
X-Origin-CC
X-Location
X-NAPM-TraceId
X-Level-Front-Cache
X-Generation-Time
X-From
X-Generated-On
X-PAYTM-SRV-ID
X-Cache-NE
X-A-Dcw
X-A-Dgt
X-A-Dam
X-A-Ccd
T-Server
X-VG-WebServer
X-A-Wwc
X-Aed
X-Cache-Bucket
X-PBS-Appsvrname
X-Processor
X-B-Cookie
X-Application
X-ARC
Rendered-Blocks
X-Rojux
X-Vtex-Remote-Cache
X-Oss-Request-Id
X-Oss-Object-Type
X-Oss-Server-Time
X-Nc
NGB
X-Vtex-Processado-Em
X-Oss-Storage-Class
X-Oss-Hash-Crc64ecma
X-Server-Lifecycle-Phase
X-Time-Microsecs
X-Kraken-Routeconfig-Destination
HostName
X-Instrumentation
X-Kraken-Loop-Name
X-OVcl-Cache
X-Policy
Cf-Device-Type
X-Backend-State
X-Bip
Arc-Version
X-Cms-Context
X-Core-Value
X-Developers
X-Azure-Ref-OriginShield
X-OVcl
CacheControlHeader
Cache-Host
X-ServerID
Wxu-Next-Region
Release
X-Reqid
Server-Host
Ssr
Magicmarker
PB-RID
Pagetype
Path
PB-PID
Host-ID
Thinkindot-CacheControl
Wxu-Next-Commit
Wxu-Next-Hostname
X-Device-Os
Esi-Enabled
V-Age
UCS
Thinkindot-CacheControl-Type
Thinkindot-Control
Gh-Request-Id
Content-Disposition
AKAMAI
X-Var-Ttl
X-Geo-Header
X-Fetched-On
X-Tumblr-Pixel-3
X-TrackingId
X-FC-Vary-Parameters
X-GeoIP-City
X-Has-Esi
X-Magnolia-Registration
X-Backend-TTL
X-JWT-State
X-Is-Gdpr
X-IP
X-Irp-Debug
X-Thinkindot-L3
X-Generated-In
X-Thanos
X-B3-Traceid
X-APP-VERSION
X-DPWN-IS-SECURE
X-DefElseHash
X-FTR-Backend-Server
X-Li-Fabric
X-Csrf-Jwt
X-Envoy-Decorator-Operation
X-HS-Content-Campaign-Id
True-Client-Country-4JS
X-Li-Pop
X-NU-AKA-ACS-Version
X-HN
X-Node-Id
X-Micro-Cache
X-Method
X-Mvc-Supplant-Cachable
X-Developer
Origin
X-DefHash
PFcat
X-Request-Host
X-LI-UUID
X-Request-URI
Platform
NM-Fastcgi-Cache
X-Origin-Response-Time
X-Branch-Name
X-Eu-Site
X-Clientip
X-Origin
X-Ratelimit-Reset
X-Platform-Server
X-Cache-Info
X-CGP
X-Fastly-Cache
X-Fastly-Backend
X-Cache-Tags
X-Origin-Expires
X-Old-Content-Length
X-FTR-Balancer
X-Epic-Correlation-Id
X-GeoIP
X-GoCache-CacheStatus
X-FTR-Cache-Status
X-FTR-DC
X-Generated-By
X-Planisys-CDN-TTL
X-Dispatcher-Server
X-FTR-Realm
Vix-Hermes-Req-Id
X-FTR-Backend
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-Wikidot-Static-Cache
X-Scheme
X-VServer
X-User
Is-Eu
HA-Ipaddr
X-Variation
DSUID
X-Wikidot-Backend
Apple-News-Services-Request-Url
C-Via
NGX
Cf-Bgj
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
X-Skip-Cache
Adler-Geo
Apple-News-Services-Handled
X-Varnish-CookieHashed-On
Ha-Gx-Prefs
L
Locid
X-Country-Code-Real
Location
L5d-Success-Class
X-VarnishDD-TTL
X-VG-TLSProxy
X-Planisys-CDN-Cache
X-Varnish-CookieINHashed-On
X-Planisys-CDN-Rules
X-Varnish-Hits
X-Varnish-Remaining-TTL
X-Amz-Meta-S3cmd-Attrs
X-NewRelic-App-Data
User-Cache-Control
X-DynaTrace-JS-Agent
X-ID
CDN-EdgeStorageId
CDN-PullZone
X-Nginx-Cache-Key
X-Cache-Id
CDN-Cache
X-Loc
CDCHOST
X-Clara-WADP
X-LB-ID
X-Gamma-Serve
X-Cache-Debug
X-Gen-Mode
X-Hash
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Hnp-Log
X-Fmm-Version
X-Slack-Backend
X-Gzip
X-Esi-Check
X-Tb
X-SIPLIST1
CDN-CachedAt
Fastly-Drupal-HTML
Fastly-SWR
Web-Mar-Node
X-WADP-Cache
X-Rebelmouse-Cache-Control
X-Aicache-OS
Sever-Int
X-Rebelmouse-Surrogate-Control
On-Server
X-EC-Lua
Rt-Fastcgi-Cache
Server-Ext
Server-Hostname
IsBot
Cmstype
Fastly-SIE
CDN-RequestId
CDN-RequestCountryCode
X-Block-Status
CDN-Uid
Cmsid
X-Unique-ID
X-Sucuri-ID
Req-Svc-Chain
X-HOST
X-Swa-Ws
Kp-EeAlive
X-Served-From
Xc-Version
Svr
X-Servername
X-Cdn-Forward
X-Air-Hostname
X-Via-Popv
A
X-Via-Popn
X-Mvc-Supplant-OutputCached
X-Via-Poph
X-Vgn-Hpd-Reason
X-Varnish-Url
X-PF-Uncompressing
X-FTR-Expires
M-TraceId
Pics-Label
Url
VivaBuild
X-Refresh
Viewtype
X-JoinUs
X-PHP-Backend
X-SaId
X-NGENIX-Cache
X-Edge-Location
Tracecode
Instruction
Cross-Origin-Opener-Policy
Cache-Key
SR-User-Adfree
SID
X-Cache-Var
Arc-Country
TDXMobile
X-DC
X-CUA
X-Cache-Var-Map
X-NC
Lfy
Sid
X-Matched-Rule
X-Vc
X-CDN-Forward
NtCoent-Length
X-TraceId
DataCenter
X-NCache
X-Sn-Servicetimems
MIME-Version
Content-Secure-Policy
X-Tb-Optimization-Total-Bytes-Saved
X-Service
X-Cdn-Origin
X-Cache-Expires
CloudFront-Viewer-Country
X-Extlb
X-CLOUD-TRACE-CONTEXT
X-Cache-Backend
Pramga
X-Servedbyhost
X-Internal-Host
X-Cache-Date
Server-ID
X-Bc-Bl
X-Core-Mission
Geo-Info
Geoip-Latitude
GeoIp-Country-Code
X-Request-Start
Tcn
Source
X-Wa
X-Forwarded-Site
X-Newrelic-Synthetics
Memcached
X-B3-Spanid
X-Proxy-Upstream
X-Req
Surrogated-Key
X-Srv
X-Webkit-CSP-Report-Only
LB
FSS-Cache
X-Via-NSCOPI
X-VC-Cache
We-Hiring
X-Accel-Expires-Debug
X-Error
X-HS-Status
Mail-Subject
X-Esi
X-FireWall-Protection
X-LI-Proto
X-Date
Upgrade-Insecure-Requests
Hostname
X-VHOST
CACHE
X-Li-Proto
X-PJAX-URL
X-VCL-Version
X-Sigma-Backend
Env
X-Viewer-Country
X-Vcl-Version
X-RateLimit-Limit-Second
X-Sigma
X-Rocket-Build-Number
X-RateLimit-Remaining-Second
X-Response-By
X-Varnish-Cacheable
X-App
X-MSEdge-Flight
X-Cache-Ttl
Request-ID
X-Air-Source
X-MSEdge-Features
Time
Resin-Trace
X-Men
Memory
X-Hcs-Proxy-Type
Server-Ttl
X-CCDN-Origin-Time
X-CCDN-CacheTTL
X-Cs
X-ZONE
X-LiteSpeed-Cache-Control
X-Geo
X-DSS
X-DI
X-DB
X-Mg-Request-UUID
X-WA
GeoIP-Latitude
X-Proxy-Cachei7
X-BBXSRF
Xkeyi7
GeoIP-Country-Code
X-TIM-N
X-RPM
X-RPS
X-RSL
CF-Cached-On
X-DW
CPC-Age
X-ServedByHost
HitType
N-Cache
X-RAMCache
CPC-Cache
VNS-Age
X-APP
X-Zone
VNS-Cache
XServer
Server-Id
X-Action
My-App
X-Varnish-Authentication
X-Cache-2
ProcessTime
X-Air-Trace-Id
Fastcgi-Cache-TTL
State
S-Rt
X-Cache-ASPX
X-Contensis-Viewer-Groups
X-HostName
X-Minions-Version
X-UA
X-Oss-Cdn-Auth
X-Region-Sid
D-Cc-Upstream
X-FPC
X-Cc-Via
Mime-Version
X-Cc-Req-Id
X-Svr
X-TIME
X-Dynatrace-Js-Agent
X-Cache-Type
X-Swift-Error
X-Provided-By
W
X-Depends-On
X-FORWARDED-FOR
Cache-Provider
Srv
X-Cdn-Request-ID
X-Origin-Time
CDN
X-API-Version
X-Server-IP
X-Dw-Trace-Id
X-UnsetCookies
X-Cache-Config
X-Gdpr
X-CSRF-TOKEN
OT-Force-Account-Verify
X-Fpc
X-Nyt-Route
X-BACKEND-TTL
X-CF-Powered-By
X-URL
X-Xrds-Location
Cteonnt-Length
X-Client-Ip
X-ServerName
Proxy-Connection
X-Forwarded-Path
Cdn
X-Orig-Expires
X-ND-Cache
X-Fastly-Request-Id
X-Shop-Environment
X-Tenant
X-Flog
X-Parent-Response-Time
X-Hello
X-ABtesting
Cross-Origin-Window-Policy
X-Akamai-Pragma-Client-IP
Ohc-File-Size
X-Cache-Remote
X-Sucuri-Cache
WZWS-RAY
X-Pad
Media-Length
PICS-Label
X-Fastly-Backend-Reqs
X-SN
X-SD-PageType
X-Snapshot-Date
X-VC
X-Pf-Uncompressing
Dnion-Transfer-Encoding
X-Presslabs-Stats
X-Check-Cacheable
Vha6-Origin
X-Oracle-DMS-ECID
X-NodeID
X-NGINX-Cache
Ohc-Cache-HIT
X-Erf-Stays-Bingo-Pdp-Web
Datacenter
X-Ftr-Cache-Host
X-SB
X-Ftr-Request-Id
X-Traceid
X-Webstats-RespID
X-Air-Pt
X-Via-PopN
X-ElasticPress-Search
Epwk-X-Cache
X-Via-PopH
X-Via-PopV
X-LiteSpeed-Tag
Cf-Ipcountry
X-Cluster-Node
X-Host-Name
X-Varnish-URL
X-Acquia-Purge-Tags
X-Acquia-Application-Trace
X-Acquia-Application-UUID
EpKe-Alive
X-Acquia-Site
Warning
X-Vcache
Xet-Cookie
X-IN-APIGATEWAY
X-Conf
X-Lb-Id
X-Ms-Meta-Originalurl
X-IN-APIGATEWAYSSL
X-Ms-Meta-Staticbatchstarttime
X-BBC-Edge-Cache-Status
X-Pjax-Url
X-MiniProfiler-Ids
X-Akamai-ERPolicy
X-Akamai-ERRuleID
X-Yottaa-OS
X-Cache-Tag
CountryCode
X-Apw-Access-Token
X-Mg-Request-Id
X-C
X-Apw-Access-Object
X-Cache-Status-Check
X-Apw-Hits
X-Varnish-Beresp-TTL
X-Debug-Cache-Store
X-Request-URL
URI
X-Render-Time
X-Debug-Cache-Fetch
NnCoection
Phost
X-B3-Parentspanid
X-BBC-Origin-Response-Status
X-Redis-Duration-Ms
X-Redis-Count
X-Litespeed-Cache-Control
Content-Script-Type
Content-Style-Type
X-Amz-Meta-Cb-Modifiedtime
Environment
Inserted-Into-Cache-At
X-Tid
Ohc-Response-Time
X-Apw-Access-Action