Threat Level: green Handler on Duty: Russ McRee

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
CF-RAY
Cf-Request-Id
CF-Cache-Status
Last-Modified
X-XSS-Protection
Accept-Ranges
Link
Pragma
ETag
Expect-CT
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
X-UA-Compatible
Alt-Svc
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Permitted-Cross-Domain-Policies
X-Check
X-Xss-Protection
X-Cache-Status
X-Generator
X-Request-ID
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
X-Iinfo
X-Content-Security-Policy
Content-Encoding
X-CDN
X-Ua-Compatible
X-Envoy-Upstream-Service-Time
Feature-Policy
Status
X-AspNetMvc-Version
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
Access-Control-Max-Age
X-Via
Upgrade
Keep-Alive
X-Ws-Request-Id
X-Age
X-Turbo-Charged-By
X-AH-Environment
X-Robots-Tag
Request-Context
X-Proxy-Cache
EagleId
X-Cache-Group
Server-Timing
X-Backend
X-Hacker
X-Amz-Request-Id
Report-To
X-Server
Host-Header
X-Amz-Id-2
X-Server-Powered-By
Grace
X-Nginx-Cache-Status
X-UA-Device
X-LiteSpeed-Cache
X-Varnish-Cache
X-Rq
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-Dns-Prefetch-Control
X-Page-Speed
Cf-Railgun
X-Pingback
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Amz-Version-Id
NEL
X-OneAgent-JS-Injection
X-WebKit-CSP
X-Cache-Spec
Xkey
Allow
X-Backend-Server
X-Host
X-Device
X-Vhost
X-CST
EagleEye-TraceId
X-Server-Id
Surrogate-Control
Request-Id
X-Dispatcher
X-Node
Content-Location
X-Response-Time
X-Akam-SW-Version
Accept-CH
X-Ruxit-JS-Agent
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
Accept-CH-Lifetime
X-ASPNET-VERSION
X-Ac
X-Template
X-Language
X-Application-Context
X-Country
X-Cache-Lookup
X-Cloud-Trace-Context
X-Readtime
X-Mod-Pagespeed
MS-Author-Via
X-B3-TraceId
X-Origin-Cache
Accept-Ch
Rating
X-Cnection
X-MS-InvokeApp
X-Kinja-Server-Push
X-Url
Accept-Ch-Lifetime
X-HW
X-TtlSet
X-PC
X-Vname
X-ORACLE-DMS-ECID
X-Clacks-Overhead
X-ESI
Edge-Control
X-GitHub-Request-Id
X-FastCGI-Cache
X-Trace
Pagespeed
Response
X-Middleton-Display
Display
X-Middleton-Response
X-Sol
X-Content-Type
X-D2id
X-Vcap-Request-Id
Verso
Arr-Disable-Session-Affinity
X-Kinja
X-GoogleNews-Bot
X-Exp-Id
X-Kinja-Build
X-Exp-Variant
X-Kinja-Server
X-Kinja-Revision
X-Use-Magma
X-Cdn-Fetch
X-Goog-Hash
X-Buckets
X-Rack-Cache
X-Server-Name
X-Country-Code
X-Oneagent-Js-Injection
Service-Worker-Allowed
X-Navigation-Version
X-ORACLE-DMS-RID
X-Varnish-TTL
X-Amz-Rid
X-Abt-Application-Version
X-VARITI-CCR
X-Powered-By-Plesk
X-Client-IP
X-Cache-TTL
Pinterest-Version
X-Pinterest-Rid
Pinterest-Generated-By
X-Fastly-Request-ID
SPRequestGuid
X-SharePointHealthScore
X-MSEdge-Ref
X-Release
SPIisLatency
SPRequestDuration
Fastly-Restarts
X-Element-Page-Cache
X-Dw-Request-Base-Id
X-Cached
X-NF-Request-ID
Public-Key-Pins
Mrf-Cache-Status
MRF-Tech
X-B3-TraceId-Primal
X-Webkit-CSP
RTSS
X-TTL
X-Origin-Upstream-Status
Access-Control-Request-Method
X-SRCache-Fetch-Status
X-SRCache-Store-Status
AR-ATIME
X-Edge
AR-Request-ID
Ar-Sid
AR-PoweredBy
AR-CACHE
X-Px
X-LLID
X-Ttl
X-Powered-CMS
Fusion-Content-Id
Fusion-Source
Fusion-Template-Id
Fusion-Deployment-Id
Fusion-Content-Source
Fusion-Component-Id
X-Ezoic-Cdn
X-Upstream
Content-MD5
X-HP-Webp
X-Jurisdiction
Cache-Tag
Charset
X-MCACHE
X-Recruiting
X-Mid
X-ECACHE
S
X-Content-Digest
X-Mg-S
X-Amz-Server-Side-Encryption
X-Version
X-Pinterest-Direct
X-PressLabs-Stats
TCN
Fastcgi-Cache
MicrosoftSharePointTeamServices
X-Debug
Front-End-Https
X-Content-Security-Policy-Report-Only
X-T
X-Server-ID
X-Kinsta-Cache
Filters
X-Grace
Cache-Tags
Edge-Cache-Tag
Server-Node
X-Id
X-Forwarded-Proto
X-Accel-Expires
X-XRDS-Location
X-Logged-In
X-Correlation-Id
X-Amzn-Trace-Id
Server-Name
X-Forwarded-For
X-Yandex-Sdch-Disable
Nginx-Cache
Surrogate-Key
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-Varnish-Age
X-DynaTrace
TP-Cache
X-Cache-Key
TP-L2-Cache
X-Request-Handler-Origin-Region
X-B3-Sampled
X-Microsite
X-Request-Processing-Time
X-Request-Received
X-Hits
X-Ser
X-DIS-Request-ID
X-Activity-Id
X-Shield-Request-Id
Powered-By-ChinaCache
X-AppVersion
X-Az
X-HS-Combine-CSS
X-HS-Content-Id
X-Amz-Replication-Status
X-F-Cache
X-HS-Cache-Config
X-HS-Hub-Id
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
X-GUploader-UploadID
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Stored-Content-Encoding
Accept-Charset
X-Origin-Server
X-Git-Hash
X-FTR-Request-ID
X-Geo-Country
X-Hostname
X-Respond-Thread
X-LB-Cache
X-DataDome
X-Frontend
X-Upgrade-Enabled
Section-Io-Cache
Cache
Nel
X-Rid
Access-Control-Allow-Method
X-Ruxit-Js-Agent
Alternate-Protocol
X-Aspnetmvc-Version
X-Mobile-URL
X-Cache-Age
Cleartype
X-XRDS-LOCATION
MS-CV
Host
X-IPLB-Instance
X-AOL-HN
Paypal-Debug-Id
X-Varnish-Backend
X-Type
X-Seen-By
Healthy
X-Content-Options
Payment
X-App-Environment
X-VCache
X-WebKit-CSP-Report-Only
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-Whom
X-TEC-API-ROOT
X-B-Cache
X-Aspnet-Duration-Ms
ServerID
X-Cache-Action
X-Providence-Cookie
X-Signature
X-TT
X-Request-Guid
X-Is-Crawler
X-Flags
X-Debug-Info
X-Route-Name
X-Page-Id
X-Jobs
Fastcgi-Useragent
X-NWS-LOG-UUID
X-Time
X-Source
X-N
X-Load-Cache
X-Mobile
X-RateLimit-Remaining
X-Erf-Bev-Bev
X-Browser-Type
X-Erf-Bev-Bev-Is-Generated
X-Daa-Tunnel
X-FB-Debug
X-Litespeed-Cache
X-Via-JSL
X-Cached-By
X-Akamai-Edgescape
Version
X-Cache-Rule
X-Cache-Operation
X-Fastcgi-Cache
X-Original-Request-Id
Viewport
X-Response-Served-From
X-Accel-Buffering
X-Rule
X-Zen-Fury
Refresh
X-Drupal-Cache-Tags
DynaTrace
X-Framework
Ms-Operation-Id
X-Instance
X-RTag
X-Wix-Request-Id
GEO-INFO
DC
X-Cacheable-TTL
Access-Control-Request-Headers
X-Real-IP
X-Tt-Trace-Host
X-Tt-Trace-Tag
X-UUID
X-Cache-Time
X-ProcessESI
Referer-Policy
X-RemovedCookies
X-Yottaa-Metrics
X-HTML-Minification-Powered-By
X-Region
X-Contextid
X-Drupal-Cache-Contexts
X-Proxy
Realpath
X-Page-View
Node
X-Yottaa-Optimizations
Eomportal-Instance
X-FW-Type
X-FW-Dynamic
X-FW-Static
Countrycode
X-Distributor
X-FW-Server
X-FW-Hash
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-FW-Serve
X-L-Path
X-B
X-Environment-Context
X-Cluster-Name
X-Cache-Expired-At
X-Cache-Control
X-IPS-LoggedIn
X-Content-Powered-By
X-G
Liferay-Portal
X-Tumblr-Pixel
X-Tumblr-Pixel-1
X-Tumblr-User
X-Tumblr-Pixel-0
X-Cache-Hit
X-Node-Name
X-User-Agent
Server-Info
X-Varnish-Ttl
Webserver
X-Pass-Why
X-Tumblr-Pixel-2
X-App-Server
Section-Io-Origin-Status
Section-Io-Id
Section-Io-Origin-Time-Seconds
From-Origin
Section-Origin-Responded
Protected
X-Amz-Meta-S3cmd-Attrs
SRV
Ec-Rule-Version
X-Ratelimit-Limit
X-Protected-By
X-FireWall-Port
X-Revision
X-Backend-Name
Frame-Options
CF-IPCountry
X-Cache-Server
X-RN-RSRV
Meta-Geo
X-Endurance-Cache-Level
X-Hyper-Cache
X-UPSTREAM-Address
Cache-Status
X-Hl-Ver
X-ES-SERVER
X-Handled-By
X-NYM-Debug-Backend
X-Mode
X-Storage
X-Www-Served-By
X-Forwarded-Host
X-Be
Decoy-Debug-TTL
Cache-Tv-Group
Decoy-Debug-Status
X-Soup
Fastly-SSL
Decoy-Debug-Key
X-Web-Node
Country
Xserver
Azure-SlotName
Azure-InstanceId
Azure-RegionName
Azure-SiteName
Azure-Version
X-Format
X-Say-Cacheable
X-Pubstack
X-TT-LOGID
X-Say-TTL
X-OCL
X-SayCDN-TTL
X-Human
X-UA-Device-Type
X-ProxyCache-Status
X-PHP-Host
X-PCL
X-Origin-Date
X-Uri
X-ProxyCache-Key
X-Proto
X-Section
X-Labrador-Cache-Channel
X-BYPASS-REASON
X-Cache-Grace
Retry-After
X-Adobe-Loc
X-Adobe-Content
X-Access
X-WA-Info
TWC-Locale-Group
X-Redis-Cache
TWC-GeoIP-LatLong
TWC-Privacy
TWC-Device-Class
X-Proxy-Build
Webcakes-App-Name
Cache-Name
X-AIR-PT
Webcakes-App-Version
X-Timing-Wait
X-Hosted-By
X-Site-Version
TWC-Connection-Speed
X-FB-TRIP-ID
X-Origin-Hint
X-Server-W
Selected-Fe
TWC-GeoIP-Country
Property-Id
X-Sql-Duration-Ms
X-FW-Version
X-Sql-Count
X-Loop
X-LAGOON
X-Locale
X-TNCMS
Webcakes-Region
X-MP-GENERATED-AT
X-Varnishpool
X-LJ-Flow-ID
X-AWS-Id
X-Request-Time
X-ApacheServer
X-VWS-Id
X-No-Session
X-Via-CDN
X-S-Maxage
X-PERF
X-Cluster
X-Alternate-Cache-Key
X-ShardId
X-Status
X-Storefront-Renderer-Rendered
X-R9-Blue-Green-Version
Mn-Server-Ip
X-ShopId
X-Sorting-Hat-PodId
X-Shopify-Stage
X-Sorting-Hat-ShopId
X-Cache-TTL-Remaining
X-CCM
X-FTR-Realm
X-FTR-Backend
X-FTR-Cache-Status
X-FTR-DC
X-FTR-Backend-Server
X-FTR-Balancer
X-Via-Fastly
X-Country-Code-Real
X-Rendered-As
X-Qloud-Router
X-Is-Bot
X-Zipkin-Id
X-Xfnlog-Site
X-Routing-Service
X-Proxied
S-Cnection
X-FTR-Expires
X-Oracle-Dms-Rid
X-Device-Type
Cache-Hits
X-Ratelimit-Remaining
X-Nginx-Cache
X-Detected-As
X-Cdn
Apigw-Requestid
X-Cache-Var-Map
X-Cache-Var
X-Unique-Id
X-Debug-IsConnected
X-Air-Hostname
X-Info
X-EdgeConnect-Cache-Status
X-SRV
X-Debug-IsPreview
X-Cache-Host
X-Dc
X-Amz-Apigw-Id
X-Amzn-Remapped-Content-Length
X-Amzn-RequestId
AMP-Access-Control-Allow-Source-Origin
X-Tec-Api-Origin
X-Tec-Api-Version
X-Tec-Api-Root
X-Dynatrace
Amp-Access-Control-Allow-Source-Origin
X-Varnish-Grace
X-Microcachable
X-Content-Age
X-GEO
X-Varnish-Server
SD-X-WS
X-Platform
X-GG-Cache-Date
X-Cache-Enabled
Tracecode
X-Azure-Ref
X-Time-Microsecs
Uber-Trace-Id
X-Cache-Backend
X-DynaTrace-JS-Agent
X-ServerID
X-Backend-Host
X-Erf-Stays-Bingo-Pdp-Web
X-Backend-TTL
X-APP-VERSION
X-Proxy-Cache-Status
X-ID
X-BCube-Filmed-By
Akamai-GRN
X-Oss-Request-Id
X-Tb
X-CSRF-Token
X-Oss-Hash-Crc64ecma
DSUID
X-Oss-Object-Type
X-Oss-Server-Time
X-Oss-Storage-Class
X-Correlation-ID
X-ATG-Version
X-NewRelic-App-Data
Backend
X-Trace-Id
X-Sucuri-ID
Arc-Version
PB-RID
PB-PID
X-Vdms-Version
ServedBy
X-Trv-Group
X-ScT
X-Vdms-Path
X-Application
Odigeo-Trace-Id
X-Magnolia-Registration
X-RCS-CacheZone
X-Request-UUID
Rendered-Blocks
X-Cache-NGX
X-Location
X-Thinkindot-L3
X-CF-Lambda-Version
X-Matched-Rule
X-VG-WebCache
X-S-Cookie
X-CF-Lambda-Fn
X-PAYTM-SRV-ID
X-Varnish-Cache-Hits
DCR-Decision-By
X-Session-Fingerprint
X-Cache-PHP
Release
X-B-Cookie
X-PBS-Appsvrname
DCR-Processing-Time-Ms
X-SRCache-Key
X-Processor
X-Origin-CC
Path
Fastcgi-X-Cache-Version
Expiry
X-ARC
X-Cache-NE
X-Origin-TTL
X-Aed
X-Rewrite-Enabled
X-D
X-Connection-Hash
X-Destination
Machine
X-GeoIP-City
Mobile-Detection-Method
X-S
Meta-Geo-Continent
MD5-Digest
Xc-Version
X-Rojux
Thinkindot-CacheControl
T-Server
X-From
X-Generation-Time
BehaviorPad-Version
Lfy
X-External-Request-Id
X-A-Dgt
Thinkindot-CacheControl-Type
SR-User-Adfree
X-VG-WebServer
X-A-Wwc
X-A-Dcw
X-A-Dam
X-A
X-Vtex-Processado-Em
Thinkindot-Control
X-A-Ccd
Instruction
X-Vtex-Remote-Cache
X-Origin-Response-Time
X-Varnish-Hostname
X-NWS-UUID-VERIFY
X-Akamai-Transformed
Ssr
X-User
X-Azure-Ref-OriginShield
C-Via
X-SVT-ORM-RULES
X-SVT-ORM-VERSION
X-TrackingId
Cf-Device-Type
X-Tumblr-Pixel-3
UCS
CacheControlHeader
X-CGP
X-Irp-Debug
X-Generated-In
HA-Ipaddr
X-Backend-State
X-JWT-State
X-Is-Gdpr
X-HS-Content-Campaign-Id
X-Csrf-Jwt
X-GeoIP
L5d-Success-Class
X-Has-Esi
X-B3-Traceid
X-VServer
X-Level-Front-Cache
Ha-Gx-Prefs
X-Cache-Info
X-Reqid
X-FC-Vary-Parameters
X-Cache-Bucket
X-Eu-Site
Pramga
Fastly-Backend-Name
X-Fetched-On
X-Mvc-Supplant-Cachable
Gh-Request-Id
X-Device-Os
Pagetype
X-Node-Id
X-Generated-On
X-Adobe-Source
X-Debug-Cache
Server-Ext
Magicmarker
PFcat
On-Server
Server-Host
NGX
X-Cache-Date
X-Core-Value
X-IP
X-Cms-Context
X-Micro-Cache
X-Clientip
X-Request-URI
X-HN
X-CUA
X-Fastly-Cache
X-Fastly-Backend
X-Developers
X-Geo-Header
X-Developer
X-Nginx-Cache-Key
X-Request-Host
X-Policy
X-Bip
X-Skip-Cache
V-Age
Sever-Int
X-Owner
X-OVcl-Cache
X-Cdn-Origin
X-Origin-Expires
X-Cache-Tags
X-OVcl
X-Envoy-Decorator-Operation
Server-Hostname
AKAMAI
DB-Nickname
X-Ms-Version
X-Wikidot-Backend
Content-Disposition
Locid
Cache-Host
X-VarnishDD-TTL
X-TA-CDN-Provider
X-Sn-Servicetimems
X-Ms-Request-Id
X-Thanos
X-Wikidot-Static-Cache
X-Var-Ttl
L
Location
X-Swa-Ws
Host-ID
User-Cache-Control
X-Li-Pop
X-Cache-Id
X-Cache-Expires
X-Fmm-Version
X-LI-UUID
X-Varnish-CookieINHashed-On
X-Servername
X-Request-Start
X-Block-Status
X-Branch-Name
X-Varnish-CookieHashed-On
X-Loc
X-Variation
X-Clara-WADP
X-WADP-Cache
X-DefHash
X-DefElseHash
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Dispatcher-Server
X-Esi-Check
X-GoCache-CacheStatus
X-DPWN-IS-SECURE
X-Gzip
X-NAPM-TraceId
X-Scheme
X-Varnish-Remaining-TTL
X-Varnish-Hits
X-VG-TLSProxy
X-Cache-Remote
X-Hash
X-Hnp-Log
X-Li-Fabric
X-TX-ID
X-Generated-By
X-Slack-Backend
Origin
CDCHOST
True-Client-Country-4JS
Apple-News-Services-Request-Url
X-Gen-Mode
X-NU-AKA-ACS-Version
Fastly-SWR
CloudFront-Viewer-Country
Rt-Fastcgi-Cache
Platform
X-Platform-Server
Fastly-SIE
X-Ratelimit-Reset
Vix-Hermes-Req-Id
NM-Fastcgi-Cache
Apple-News-Services-Handled
IsBot
X-Origin
Adler-Geo
X-SIPLIST1
X-Old-Content-Length
Apple-News-Services-Host
X-Rebelmouse-Surrogate-Control
Wxu-Next-Hostname
Wxu-Next-Commit
Web-Mar-Node
Apple-News-Services-Parsed-Url
X-Rebelmouse-Cache-Control
Wxu-Next-Region
Is-Eu
HostName
X-Core-Mission
X-B3-SpanId
Fastly-Drupal-HTML
CDN-CachedAt
X-Varnish-Beresp-Grace
CDN-Cache
X-Cache-Debug
X-Method
X-NC
Cf-Bgj
CDN-EdgeStorageId
CDN-Uid
CDN-RequestId
CDN-RequestCountryCode
CDN-PullZone
X-App-Version
X-CS
X-Gamma-Serve
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Status
X-NCache
X-Cdn-Forward
X-Mvc-Supplant-OutputCached
X-EC-Lua
Url
X-Varnish-Url
X-PF-Uncompressing
X-Aicache-OS
X-Response-By
X-LB-ID
X-Host-Name
S-Rt
X-CACHE-GROUP
X-Varnish-Cacheable
X-B3-Spanid
X-Refresh
Sid
Xkeyi7
X-Proxy-Cachei7
Pics-Label
X-Via-Poph
Esi-Enabled
X-BBXSRF
X-FireWall-Protection
X-Via-Popv
N-Cache
CACHE
X-Via-Popn
Cross-Origin-Window-Policy
X-Epic-Correlation-Id
Ohc-File-Size
Content-Secure-Policy
X-Cache-2
X-Sucuri-Cache
X-CDN-Forward
X-Tb-Optimization-Total-Bytes-Saved
X-Webkit-Csp
X-DC
X-Varnish-Authentication
X-Nc
X-Error
D-Cc-Upstream
X-Cc-Via
X-Cc-Req-Id
X-Contensis-Viewer-Groups
X-Cache-ASPX
X-Srv
Who
X-RateLimit-Limit
Cteonnt-Length
X-Svr
MIME-Version
Country-Code
X-Servedbyhost
X-Wa
Req-Svc-Chain
X-TraceId
X-Unique-ID
X-Webkit-CSP-Report-Only
X-Cs
HitType
X-LiteSpeed-Cache-Control
X-Planisys-CDN-TTL
Server-Ttl
X-Planisys-CDN-Cache
Source
X-Planisys-CDN-Rules
X-Server-IP
X-HS-Status
X-Cache-Config
GeoIp-Country-Code
Geoip-Latitude
Hostname
X-API-Version
X-FPC
X-Gdpr
X-Nyt-Route
X-Origin-Time
X-URL
X-VC
X-SN
Cmstype
Cmsid
Kp-EeAlive
X-LI-Proto
Ohc-Cache-HIT
X-CACHE-KEY
Geo-Info
Svr
X-SB
VivaBuild
X-Esi
Server-ID
X-NodeID
X-NGINX-Cache
Viewtype
X-Webstats-RespID
X-VCL-Version
SID
A
XServer
X-SD-PageType
Cache-Key
X-TIME
X-Served-From
X-Check-Cacheable
X-HOST
NtCoent-Length
X-Vgn-Hpd-Reason
X-Render-Time
X-CCDN-CacheTTL
X-Viewer-Country
X-Vcl-Version
X-Hcs-Proxy-Type
Request-ID
M-TraceId
X-CCDN-Origin-Time
X-Ua
X-UA
X-DW
X-Li-Proto
X-Air-Source
X-RAMCache
GeoIP-Latitude
GeoIP-Country-Code
Cache-Provider
Resin-Trace
X-DSS
X-DI
X-DB
Server-Id
X-RPS
X-TIM-N
EpKe-Alive
X-BBC-Edge-Cache-Status
TDXMobile
X-CF-Powered-By
X-RPM
X-RSL
Cross-Origin-Opener-Policy
Filterid
X-App
Arc-Country
X-Internal-Host
X-Auto-Login
X-Fastly-Request-Id
X-Worker
X-Newrelic-Synthetics
Srv
Processtime
X-Ftr-Cache-Host
X-Action
ProcessTime
X-CSRF-TOKEN
Upgrade-Insecure-Requests
Datacenter
X-FTR-Cache-Host
X-Dynatrace-Js-Agent
X-ServedByHost
X-Vc
X-WA
Tcn
X-Oss-Cdn-Auth
Mime-Version
X-Fpc
X-Cluster-Node
NGB
CDN
X-CLOUD-TRACE-CONTEXT
X-Service
X-BBC-Origin-Response-Status
X-Geo
X-FORWARDED-FOR
Proxy-Connection
CF-Cached-On
X-HostName
X-HITS
X-MSEdge-Flight
X-Forwarded-Site
X-MSEdge-Features
X-Via-NSCOPI
FSS-Cache
X-Dw-Trace-Id
X-JoinUs
X-BACKEND-TTL
X-SaId
X-Akamai-Pragma-Client-IP
X-Fastly-Backend-Reqs
X-PHP-Backend
X-NGENIX-Cache
Cdn
X-Edge-Location
X-Cdn-Request-ID
X-Client-Ip
X-CACHE-AGE
X-Via-PopN
X-Via-PopH
X-Via-PopV
OT-Force-Account-Verify
X-Parent-Response-Time
PICS-Label
X-IN-APIGATEWAY
X-Cache-Tag
X-Hello
W
X-ND-Cache
Dnion-Transfer-Encoding
X-Flog
X-ABtesting
X-Extlb
X-IN-APIGATEWAYSSL
DataCenter
WZWS-RAY
X-Provided-By
Mail-Subject
Epwk-X-Cache
X-LiteSpeed-Tag
X-Pf-Uncompressing
Vha6-Origin
X-Swift-Error
LB
Media-Length
X-Oracle-DMS-ECID
X-RateLimit-Limit-Second
X-Proxy-Upstream
X-Presslabs-Stats
X-RateLimit-Remaining-Second
X-Region-Sid
X-VC-Cache
X-UnsetCookies
X-Req
X-Depends-On
X-Pad
X-Date
X-Lb-Id
Memcached
We-Hiring
Surrogated-Key
X-Accel-Expires-Debug
X-Bc-Bl
X-Sigma
X-Sigma-Backend
X-Rocket-Build-Number
Env
X-PJAX-URL
Time
Memory
X-ZONE
X-MiniProfiler-Ids
Xet-Cookie
X-Zone
Cf-Ipcountry
X-Acquia-Application-UUID
X-B3-Parentspanid
X-Acquia-Purge-Tags
X-Snapshot-Date
X-APP
X-Request-Url
X-Vcache
X-Csrf-Token
X-Acquia-Site
X-Request-URL
X-Varnish-Beresp-TTL
X-Akamai-ERRuleID
X-Acquia-Application-Trace
X-Air-Trace-Id
X-Varnish-URL
X-Amz-Meta-Cb-Modifiedtime
X-Ms-Meta-Originalurl
X-Ms-Meta-Staticbatchstarttime
X-Akamai-ERPolicy
X-ElasticPress-Search
X-Men
X-ElasticPress-Query
URI
CountryCode
X-ServerName
Inserted-Into-Cache-At
X-Tid
X-Debug-Cache-Fetch
X-Akamai-Request-ID
NnCoection
Ohc-Response-Time
X-Litespeed-Cache-Control
Phost
X-Traceid
X-Redis-Duration-Ms
X-Storefront-Renderer-Verified
Environment
X-Debug-Cache-Store
X-Redis-Count
X-C