Threat Level: green Handler on Duty: Russ McRee

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Cf-Request-Id
CF-RAY
CF-Cache-Status
Accept-Ranges
Link
X-XSS-Protection
Pragma
ETag
Expect-CT
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
X-UA-Compatible
Alt-Svc
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Request-Id
X-Xss-Protection
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Permitted-Cross-Domain-Policies
X-Check
X-Request-ID
X-Cache-Status
X-Generator
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
X-Iinfo
X-Content-Security-Policy
Content-Encoding
X-CDN
X-Envoy-Upstream-Service-Time
Status
Feature-Policy
X-Ua-Compatible
Access-Control-Expose-Headers
X-AspNetMvc-Version
X-Drupal-Dynamic-Cache
Access-Control-Max-Age
X-Via
Upgrade
Keep-Alive
X-Ws-Request-Id
X-Age
X-Turbo-Charged-By
X-AH-Environment
X-Robots-Tag
Request-Context
X-Proxy-Cache
EagleId
X-Cache-Group
Server-Timing
X-Backend
X-Hacker
Report-To
X-Amz-Request-Id
X-Server
Host-Header
X-Amz-Id-2
X-Server-Powered-By
Grace
X-Nginx-Cache-Status
X-UA-Device
X-Dns-Prefetch-Control
X-LiteSpeed-Cache
X-Rq
X-Varnish-Cache
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-Page-Speed
Cf-Railgun
X-Pingback
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
NEL
X-Amz-Version-Id
X-Cache-Spec
X-OneAgent-JS-Injection
X-WebKit-CSP
Xkey
Allow
X-Backend-Server
X-Device
X-CST
X-Vhost
X-Host
EagleEye-TraceId
X-Server-Id
Surrogate-Control
Request-Id
X-Dispatcher
X-Node
Content-Location
X-Response-Time
Accept-CH
X-Akam-SW-Version
X-Ruxit-JS-Agent
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
Accept-CH-Lifetime
P3p
X-Ac
X-ASPNET-VERSION
X-Application-Context
X-Template
X-Language
X-Country
X-Cache-Lookup
X-Mod-Pagespeed
X-Cloud-Trace-Context
X-Readtime
X-B3-TraceId
MS-Author-Via
X-Origin-Cache
Rating
X-Cnection
X-MS-InvokeApp
Accept-Ch
X-HW
X-Url
X-Kinja-Server-Push
X-PC
X-TtlSet
X-Vname
Accept-Ch-Lifetime
X-ORACLE-DMS-ECID
X-Clacks-Overhead
Edge-Control
X-GitHub-Request-Id
X-ESI
X-FastCGI-Cache
X-Trace
Display
Pagespeed
X-Middleton-Display
X-Middleton-Response
X-Sol
Response
X-Content-Type
X-Oneagent-Js-Injection
X-Vcap-Request-Id
X-D2id
X-Cdn-Fetch
X-Exp-Id
X-Kinja
X-Use-Magma
X-Kinja-Server
X-Kinja-Revision
X-Kinja-Build
X-Exp-Variant
X-GoogleNews-Bot
Arr-Disable-Session-Affinity
Verso
X-Goog-Hash
X-Buckets
X-Rack-Cache
X-Country-Code
X-Server-Name
Service-Worker-Allowed
X-Navigation-Version
X-Varnish-TTL
X-ORACLE-DMS-RID
X-Abt-Application-Version
X-VARITI-CCR
X-Amz-Rid
X-Powered-By-Plesk
X-Fastly-Request-ID
Pinterest-Version
X-Cache-TTL
X-Client-IP
X-Pinterest-Rid
Pinterest-Generated-By
X-Webkit-CSP
X-SharePointHealthScore
SPRequestGuid
X-Release
X-MSEdge-Ref
Fastly-Restarts
SPIisLatency
X-Dw-Request-Base-Id
SPRequestDuration
X-Element-Page-Cache
X-Cached
X-NF-Request-ID
Public-Key-Pins
MRF-Tech
Mrf-Cache-Status
X-B3-TraceId-Primal
RTSS
X-Ttl
X-Edge
AR-Request-ID
AR-CACHE
AR-ATIME
Access-Control-Request-Method
Ar-Sid
AR-PoweredBy
X-TTL
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Origin-Upstream-Status
X-LLID
X-Powered-CMS
X-Px
X-Ezoic-Cdn
Fusion-Content-Source
Fusion-Component-Id
Fusion-Content-Id
Fusion-Template-Id
Fusion-Deployment-Id
Fusion-Source
X-Upstream
Content-MD5
X-HP-Webp
X-Jurisdiction
Cache-Tag
X-Mid
X-ECACHE
X-MCACHE
X-Recruiting
S
X-Content-Digest
X-Mg-S
X-Amz-Server-Side-Encryption
Charset
X-Version
X-PressLabs-Stats
TCN
X-Aspnetmvc-Version
X-Pinterest-Direct
Fastcgi-Cache
MicrosoftSharePointTeamServices
X-T
X-Content-Security-Policy-Report-Only
X-Kinsta-Cache
X-Debug
Front-End-Https
X-Id
Filters
Cache-Tags
X-Grace
Edge-Cache-Tag
X-Server-ID
Server-Node
X-Accel-Expires
X-Forwarded-Proto
X-Logged-In
X-Forwarded-For
X-Correlation-Id
X-Amzn-Trace-Id
X-XRDS-Location
Server-Name
Nginx-Cache
X-Yandex-Sdch-Disable
X-DynaTrace
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
Surrogate-Key
X-Varnish-Age
TP-L2-Cache
TP-Cache
X-B3-Sampled
X-Request-Received
X-Request-Processing-Time
X-Microsite
X-Request-Handler-Origin-Region
X-Hits
X-Cache-Key
X-Shield-Request-Id
X-DIS-Request-ID
X-Ser
X-AppVersion
X-Activity-Id
X-Az
X-Amz-Replication-Status
X-HS-Cache-Config
X-HS-Hub-Id
X-HS-Combine-CSS
X-HS-Content-Id
X-Goog-Metageneration
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-F-Cache
X-GUploader-UploadID
X-Goog-Stored-Content-Length
Powered-By-ChinaCache
X-Origin-Server
Accept-Charset
X-Git-Hash
X-Litespeed-Cache
X-Geo-Country
X-FTR-Request-ID
X-Respond-Thread
X-LB-Cache
Section-Io-Cache
X-Upgrade-Enabled
X-Hostname
X-Rid
X-DataDome
X-Frontend
X-XRDS-LOCATION
Cache
Alternate-Protocol
Access-Control-Allow-Method
Host
X-Cache-Age
X-Mobile-URL
Cleartype
Paypal-Debug-Id
MS-CV
X-IPLB-Instance
Healthy
X-AOL-HN
X-Content-Options
X-Ruxit-Js-Agent
X-Seen-By
X-Varnish-Backend
X-Type
X-VCache
X-App-Environment
ServerID
X-WebKit-CSP-Report-Only
X-Cache-Action
X-Flags
Payment
X-Is-Crawler
X-Providence-Cookie
X-Route-Name
X-Request-Guid
X-Whom
X-Aspnet-Duration-Ms
X-Debug-Info
X-B-Cache
X-Page-Id
X-Signature
X-TT
X-Time
X-Jobs
Fastcgi-Useragent
X-NWS-LOG-UUID
X-Source
X-Load-Cache
X-Mobile
X-N
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Daa-Tunnel
X-RateLimit-Remaining
X-Browser-Type
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
X-FB-Debug
X-Via-JSL
X-Cached-By
Version
Nel
X-Akamai-Edgescape
X-Cache-Rule
X-Cache-Operation
Refresh
Viewport
X-Accel-Buffering
X-Original-Request-Id
X-Rule
X-Response-Served-From
X-Drupal-Cache-Tags
X-Proxy
X-Framework
DC
X-RemovedCookies
Ms-Operation-Id
X-Cacheable-TTL
X-Zen-Fury
X-ProcessESI
X-RTag
DynaTrace
X-Contextid
X-Instance
Access-Control-Request-Headers
X-Real-IP
X-Wix-Request-Id
X-Fastcgi-Cache
X-Tt-Trace-Host
X-Region
Realpath
X-HTML-Minification-Powered-By
X-Tt-Trace-Tag
X-UUID
GEO-INFO
X-Drupal-Cache-Contexts
X-Cache-Time
Referer-Policy
X-Page-View
X-Yottaa-Optimizations
X-Distributor
X-Yottaa-Metrics
X-FW-Static
X-FW-Server
Eomportal-Instance
X-Cache-Expired-At
X-FW-Type
Countrycode
X-FW-Dynamic
X-FW-Hash
X-FW-Serve
Node
X-Cluster-Name
X-Environment-Context
X-L-Path
X-Cache-Control
X-B
Liferay-Portal
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-Content-Powered-By
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel-1
X-Tumblr-Pixel
X-Cache-Hit
X-IPS-LoggedIn
X-G
X-Node-Name
X-Ratelimit-Limit
X-User-Agent
Server-Info
Webserver
X-Tumblr-Pixel-2
X-App-Server
Section-Io-Origin-Status
Section-Io-Id
Section-Io-Origin-Time-Seconds
From-Origin
Section-Origin-Responded
X-FireWall-Port
X-Varnish-Ttl
X-Pass-Why
Ec-Rule-Version
Protected
X-Amz-Meta-S3cmd-Attrs
X-Protected-By
SRV
CF-IPCountry
X-Cache-Server
X-Revision
X-Backend-Name
Frame-Options
X-Mode
Meta-Geo
X-Www-Served-By
X-Hyper-Cache
Cache-Status
X-ES-SERVER
X-Hl-Ver
X-UPSTREAM-Address
X-RN-RSRV
X-Handled-By
X-FB-TRIP-ID
X-Soup
X-Endurance-Cache-Level
X-Locale
X-Site-Version
X-Human
X-Web-Node
Country
X-NYM-Debug-Backend
X-Storage
X-Varnishpool
X-Forwarded-Host
Retry-After
X-Cache-Grace
X-Be
Decoy-Debug-TTL
Decoy-Debug-Status
Property-Id
Cache-Tv-Group
Fastly-SSL
X-Redis-Cache
Decoy-Debug-Key
X-Uri
Selected-Fe
X-Origin-Date
X-Pubstack
TWC-Connection-Speed
X-Origin-Hint
TWC-Device-Class
X-Timing-Wait
TWC-Privacy
TWC-Locale-Group
TWC-GeoIP-LatLong
Azure-InstanceId
Webcakes-App-Name
Webcakes-App-Version
X-Proto
X-Proxy-Build
Webcakes-Region
Azure-RegionName
Azure-SiteName
Cache-Name
X-TT-LOGID
X-UA-Device-Type
Azure-Version
TWC-GeoIP-Country
Azure-SlotName
X-WA-Info
X-ProxyCache-Key
X-ProxyCache-Status
X-Loop
X-Hosted-By
X-Labrador-Cache-Channel
X-Sql-Duration-Ms
X-Sql-Count
X-FW-Version
X-PHP-Host
X-BYPASS-REASON
X-Request-Time
X-Format
X-Server-W
X-TNCMS
X-Section
X-SayCDN-TTL
X-Say-TTL
X-PCL
X-Via-Fastly
X-AIR-PT
X-No-Session
X-OCL
X-Say-Cacheable
X-Access
X-Adobe-Content
X-Adobe-Loc
X-LJ-Flow-ID
X-LAGOON
X-ApacheServer
X-R9-Blue-Green-Version
X-AWS-Id
X-S-Maxage
X-VWS-Id
X-MP-GENERATED-AT
X-Tec-Api-Origin
X-Tec-Api-Root
X-Tec-Api-Version
Xserver
X-PERF
X-Shopify-Stage
Mn-Server-Ip
X-ShopId
X-ShardId
X-Alternate-Cache-Key
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Storefront-Renderer-Rendered
X-Status
X-Via-CDN
X-Cluster
X-Proxied
X-Routing-Service
X-Zipkin-Id
X-Cache-TTL-Remaining
X-Ratelimit-Remaining
X-Qloud-Router
X-FTR-Balancer
X-FTR-Cache-Status
X-FTR-DC
X-FTR-Backend-Server
X-Rendered-As
X-CCM
X-Country-Code-Real
X-Is-Bot
X-FTR-Realm
X-FTR-Backend
S-Cnection
X-Xfnlog-Site
X-Nginx-Cache
Cache-Hits
X-Dc
X-FTR-Expires
X-Device-Type
X-Unique-Id
X-Info
X-Detected-As
X-Debug-IsPreview
X-Oracle-Dms-Rid
X-SRV
AMP-Access-Control-Allow-Source-Origin
Apigw-Requestid
X-Debug-IsConnected
X-Air-Hostname
X-Cache-Var-Map
X-Cache-Host
X-EdgeConnect-Cache-Status
X-Cache-Var
X-Amz-Apigw-Id
X-Cdn
X-Amzn-RequestId
X-Varnish-Grace
X-Amzn-Remapped-Content-Length
X-Cache-Enabled
X-Microcachable
X-Content-Age
X-Varnish-Server
X-Platform
SD-X-WS
X-GG-Cache-Date
X-GEO
X-Azure-Ref
Tracecode
Amp-Access-Control-Allow-Source-Origin
X-Dynatrace
Uber-Trace-Id
X-Backend-Host
X-Backend-TTL
X-DynaTrace-JS-Agent
X-Proxy-Cache-Status
X-Time-Microsecs
X-Cache-Backend
Akamai-GRN
X-Erf-Stays-Bingo-Pdp-Web
X-ServerID
Backend
X-TA-CDN-Provider
X-Tb
X-Oss-Storage-Class
X-Oss-Object-Type
X-ATG-Version
X-Oss-Request-Id
X-Oss-Server-Time
X-APP-VERSION
X-Oss-Hash-Crc64ecma
DSUID
X-CSRF-Token
X-Trace-Id
X-BCube-Filmed-By
X-NWS-UUID-VERIFY
X-Varnish-Hostname
X-Sucuri-ID
ServedBy
Arc-Version
PB-PID
X-Correlation-ID
X-Akamai-Transformed
PB-RID
X-RCS-CacheZone
X-NewRelic-App-Data
Thinkindot-Control
X-Trv-Group
X-CF-Lambda-Version
X-Cache-NGX
X-D
X-Connection-Hash
X-CF-Lambda-Fn
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-A-Dam
X-B-Cookie
SR-User-Adfree
X-Vtex-Remote-Cache
X-Magnolia-Registration
T-Server
X-Application
X-ARC
X-A-Wwc
X-A-Dgt
Rendered-Blocks
X-A-Ccd
X-Varnish-Cache-Hits
X-Aed
X-Cache-NE
Xc-Version
X-A-Dcw
X-A
X-VG-WebServer
X-Vdms-Version
MD5-Digest
Machine
Lfy
X-PAYTM-SRV-ID
X-Origin-TTL
X-Origin-CC
X-Destination
Odigeo-Trace-Id
Mobile-Detection-Method
Meta-Geo-Continent
X-PBS-Appsvrname
X-Processor
X-S
X-S-Cookie
X-ScT
X-Session-Fingerprint
X-Rojux
BehaviorPad-Version
Instruction
X-Request-UUID
X-Rewrite-Enabled
X-Vdms-Path
X-Matched-Rule
X-Cache-PHP
DCR-Decision-By
X-Generation-Time
Pramga
X-GeoIP-City
X-Thinkindot-L3
X-Generated-On
X-From
X-Device-Os
X-External-Request-Id
Release
X-Fetched-On
X-SRCache-Key
DCR-Processing-Time-Ms
X-Location
Expiry
X-Level-Front-Cache
Fastcgi-X-Cache-Version
Path
X-VG-WebCache
X-Vtex-Processado-Em
X-Debug-Cache
X-Origin-Response-Time
Gh-Request-Id
Host-ID
Fastly-Backend-Name
Cf-Device-Type
Pagetype
Ssr
X-HS-Content-Campaign-Id
X-Skip-Cache
X-Sn-Servicetimems
X-Reqid
X-Owner
X-OVcl
X-OVcl-Cache
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
X-Tumblr-Pixel-3
X-VServer
X-TrackingId
X-Thanos
X-Swa-Ws
X-Node-Id
X-Mvc-Supplant-Cachable
X-FC-Vary-Parameters
X-Geo-Header
X-Cdn-Origin
X-Cache-Bucket
X-Azure-Ref-OriginShield
X-Bip
X-GeoIP
X-Has-Esi
X-JWT-State
X-Micro-Cache
X-Is-Gdpr
X-Irp-Debug
CacheControlHeader
UCS
X-Cache-Date
X-Ms-Request-Id
Cache-Host
AKAMAI
C-Via
X-Ms-Version
X-Adobe-Source
On-Server
X-Scheme
X-Request-Host
X-Backend-State
X-VarnishDD-TTL
X-Policy
Wxu-Next-Region
Wxu-Next-Hostname
X-Var-Ttl
Sever-Int
Server-Hostname
X-User
X-Origin-Expires
PFcat
X-Varnish-Hits
Server-Ext
X-Cache-Info
X-B3-Traceid
X-Eu-Site
X-Developers
X-Fastly-Backend
X-Fastly-Cache
X-Generated-In
X-Generated-By
X-HN
X-Developer
X-IP
X-CGP
X-Nginx-Cache-Key
X-Cache-Tags
X-Clientip
X-Cms-Context
X-CUA
X-Csrf-Jwt
X-Core-Value
NGX
Wxu-Next-Commit
Location
Content-Disposition
CloudFront-Viewer-Country
L5d-Success-Class
L
HA-Ipaddr
Ha-Gx-Prefs
Magicmarker
Locid
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-App-Version
User-Cache-Control
X-Loc
X-Request-URI
X-Hnp-Log
X-Clara-WADP
X-Cache-Expires
X-SIPLIST1
X-Servername
X-Fmm-Version
X-Hash
X-NU-AKA-ACS-Version
Fastly-SIE
X-Varnish-Beresp-Grace
X-Method
HostName
X-Envoy-Decorator-Operation
X-Ratelimit-Reset
X-Platform-Server
X-Block-Status
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
Fastly-SWR
Web-Mar-Node
Rt-Fastcgi-Cache
DB-Nickname
X-Slack-Backend
X-NAPM-TraceId
CDCHOST
X-WADP-Cache
Cf-Bgj
Origin
IsBot
Server-Host
X-Goog-Meta-Goog-Reserved-File-Mtime
V-Age
X-Gen-Mode
X-GoCache-CacheStatus
X-ID
X-TX-ID
Apple-News-Services-Handled
X-LI-UUID
X-Origin
X-Old-Content-Length
Apple-News-Services-Host
X-Esi-Check
X-Dispatcher-Server
Apple-News-Services-Parsed-Url
X-Core-Mission
Apple-News-Services-Request-Url
X-DPWN-IS-SECURE
X-Li-Fabric
X-Li-Pop
X-DefElseHash
X-DefHash
X-Request-Start
X-Variation
X-Varnish-CookieHashed-On
Is-Eu
X-Gzip
X-Gamma-Serve
X-Varnish-CookieINHashed-On
Platform
X-VG-TLSProxy
NM-Fastcgi-Cache
X-Varnish-Remaining-TTL
Fastly-Drupal-HTML
X-Cache-Id
X-Cache-Remote
X-Cache-Debug
Adler-Geo
X-Branch-Name
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Cdn-Forward
X-B3-SpanId
CDN-PullZone
CDN-EdgeStorageId
CDN-RequestCountryCode
CDN-Cache
CDN-CachedAt
X-PF-Uncompressing
CDN-RequestId
Vix-Hermes-Req-Id
Sid
True-Client-Country-4JS
X-NC
X-EC-Lua
X-Mvc-Supplant-OutputCached
X-NCache
CDN-Uid
X-CS
X-B3-Spanid
Url
X-Varnish-Url
X-Refresh
X-Aicache-OS
X-Varnish-Cacheable
X-Host-Name
X-LB-ID
X-Response-By
X-CACHE-GROUP
S-Rt
X-Proxy-Cachei7
Pics-Label
Esi-Enabled
Xkeyi7
X-Via-Popn
X-Via-Poph
X-Tb-Optimization-Total-Bytes-Saved
N-Cache
X-BBXSRF
X-Via-Popv
CACHE
X-FireWall-Protection
Cross-Origin-Window-Policy
X-Nc
X-Cache-2
Content-Secure-Policy
Ohc-File-Size
X-Epic-Correlation-Id
Who
X-TraceId
Country-Code
X-Sucuri-Cache
X-CDN-Forward
D-Cc-Upstream
X-Cc-Req-Id
Req-Svc-Chain
Source
X-Error
X-Varnish-Authentication
X-Cache-ASPX
X-Cc-Via
X-Webkit-Csp
X-Contensis-Viewer-Groups
Cteonnt-Length
X-Srv
X-Cs
X-Planisys-CDN-Rules
X-Planisys-CDN-Cache
GeoIp-Country-Code
Server-Ttl
X-CACHE-KEY
X-Unique-ID
X-Wa
X-Svr
X-Planisys-CDN-TTL
X-Servedbyhost
Geoip-Latitude
X-Webkit-CSP-Report-Only
MIME-Version
X-DC
HitType
X-Server-IP
X-RateLimit-Limit
X-Nyt-Route
X-API-Version
X-Gdpr
X-Cache-Config
X-HS-Status
X-Origin-Time
Kp-EeAlive
X-FPC
X-URL
Hostname
XServer
X-LiteSpeed-Cache-Control
Svr
Cmstype
X-VC
Cmsid
X-SN
X-Served-From
Ohc-Cache-HIT
Geo-Info
X-VCL-Version
X-Esi
A
X-NodeID
Cache-Key
X-Webstats-RespID
X-LI-Proto
VivaBuild
Viewtype
X-NGINX-Cache
X-SB
X-SD-PageType
X-Check-Cacheable
X-TIME
X-Vcl-Version
X-Vgn-Hpd-Reason
M-TraceId
Server-ID
Resin-Trace
X-RAMCache
Server-Id
X-HOST
Filterid
NtCoent-Length
X-Air-Source
Cross-Origin-Opener-Policy
X-Li-Proto
SID
Request-ID
X-Viewer-Country
Arc-Country
TDXMobile
X-Render-Time
X-UA
X-Ua
Cache-Provider
X-TIM-N
X-Internal-Host
X-RPM
X-BBC-Edge-Cache-Status
EpKe-Alive
X-RPS
X-RSL
X-DB
X-CCDN-CacheTTL
X-DSS
X-DI
X-DW
X-Hcs-Proxy-Type
X-CCDN-Origin-Time
GeoIP-Latitude
GeoIP-Country-Code
Srv
X-App
X-Auto-Login
X-CF-Powered-By
NGB
X-Fastly-Request-Id
X-Worker
X-Vc
Upgrade-Insecure-Requests
X-HostName
X-Newrelic-Synthetics
X-CSRF-TOKEN
Processtime
X-Action
X-Ftr-Cache-Host
X-ServedByHost
X-Service
X-WA
Mime-Version
ProcessTime
X-FTR-Cache-Host
X-Oss-Cdn-Auth
X-Cluster-Node
Tcn
CDN
X-Fpc
X-CLOUD-TRACE-CONTEXT
DataCenter
X-NGENIX-Cache
X-PHP-Backend
X-JoinUs
X-SaId
X-Dynatrace-Js-Agent
X-Forwarded-Site
FSS-Cache
X-Via-NSCOPI
X-Parent-Response-Time
X-Extlb
Datacenter
X-Edge-Location
X-BBC-Origin-Response-Status
X-Geo
Proxy-Connection
X-FORWARDED-FOR
CF-Cached-On
X-Cdn-Request-ID
X-HITS
X-Via-PopH
X-Via-PopN
X-Via-PopV
Cdn
X-Provided-By
X-Dw-Trace-Id
W
X-MSEdge-Flight
X-BACKEND-TTL
X-Swift-Error
X-MSEdge-Features
X-Fastly-Backend-Reqs
X-Client-Ip
X-CACHE-AGE
X-Accel-Expires-Debug
Surrogated-Key
X-IN-APIGATEWAY
We-Hiring
Memcached
X-IN-APIGATEWAYSSL
LB
X-Cache-Tag
X-ABtesting
X-Flog
X-ND-Cache
Dnion-Transfer-Encoding
X-Hello
Mail-Subject
PICS-Label
X-Proxy-Upstream
OT-Force-Account-Verify
X-Region-Sid
X-PJAX-URL
X-Depends-On
X-VC-Cache
X-Date
X-Bc-Bl
X-Akamai-Pragma-Client-IP
WZWS-RAY
X-ZONE
X-Oracle-DMS-ECID
X-Rocket-Build-Number
X-UnsetCookies
X-Sigma
X-Sigma-Backend
X-RateLimit-Remaining-Second
Memory
Time
X-RateLimit-Limit-Second
Media-Length
X-Req
X-Presslabs-Stats
X-Lb-Id
Vha6-Origin
X-Pf-Uncompressing
X-Air-Trace-Id
Epwk-X-Cache
X-Pad
X-APP
Env
X-Snapshot-Date
X-LiteSpeed-Tag
X-Men
X-MiniProfiler-Ids
X-Zone
Cf-Ipcountry
X-Varnish-URL
X-Ms-Meta-Staticbatchstarttime
X-ElasticPress-Search
X-Litespeed-Cache-Control
X-Ms-Meta-Originalurl
X-Request-URL
X-Varnish-Beresp-TTL
X-Acquia-Application-UUID
X-Akamai-ERPolicy
X-Akamai-ERRuleID
X-Vcache
Xet-Cookie
VNS-Age
X-B3-Parentspanid
X-Acquia-Site
CPC-Age
CPC-Cache
VNS-Cache
X-ElasticPress-Query
X-Request-Url
URI
X-Acquia-Purge-Tags
X-Acquia-Application-Trace
X-Csrf-Token
X-Tx-Id
CountryCode
Environment
X-Nananana
X-Amz-Meta-Cb-Modifiedtime
X-Tid
X-Storefront-Renderer-Verified
X-C
Ohc-Response-Time
Phost
NnCoection
X-ServerName
X-Akamai-Request-ID
X-Debug-Cache-Fetch
X-Redis-Count
X-Redis-Duration-Ms
X-Traceid
X-Debug-Cache-Store
Inserted-Into-Cache-At