Threat Level: green Handler on Duty: Jan Kopriva

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Accept-Ranges
Cf-Request-Id
CF-Cache-Status
Pragma
X-Powered-By
ETag
Link
Expect-CT
X-XSS-Protection
Via
Age
CF-RAY
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
X-UA-Compatible
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
P3P
Alt-Svc
X-Served-By
CF-Ray
X-Xss-Protection
X-Timer
X-Varnish
X-Download-Options
Access-Control-Allow-Methods
Access-Control-Allow-Headers
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Adblock-Key
X-Check
X-Permitted-Cross-Domain-Policies
X-Cache-Status
X-Generator
X-Request-ID
X-Cacheable
P3p
X-DNS-Prefetch-Control
X-Kinja-Server-Push
Timing-Allow-Origin
X-Iinfo
X-Content-Security-Policy
Status
X-AspNetMvc-Version
Upgrade
Content-Encoding
X-CDN
X-Template
X-Language
X-Drupal-Dynamic-Cache
Access-Control-Max-Age
Access-Control-Expose-Headers
X-Envoy-Upstream-Service-Time
Keep-Alive
X-Via
X-Ws-Request-Id
Feature-Policy
X-Age
X-Backend
X-AH-Environment
X-Hacker
X-Cache-Group
X-Buckets
X-Robots-Tag
X-Server
X-UA-Device
X-Amz-Request-Id
EagleId
X-Amz-Id-2
X-Proxy-Cache
X-Turbo-Charged-By
X-Server-Powered-By
Request-Context
X-Dns-Prefetch-Control
Server-Timing
Host-Header
X-Nginx-Cache-Status
Grace
Report-To
Xkey
X-Page-Speed
X-Rq
X-OneAgent-JS-Injection
X-Pingback
Cf-Bgj
X-Varnish-Cache
X-LiteSpeed-Cache
X-Swift-SaveTime
X-Swift-CacheTime
Cf-Railgun
Ali-Swift-Global-Savetime
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Amz-Version-Id
X-Vhost
NEL
X-WebKit-CSP
X-Host
X-Dispatcher
X-Device
X-Backend-Server
X-Node
Surrogate-Control
X-Cache-Lookup
X-Ruxit-JS-Agent
X-Response-Time
X-Origin-Cache
Content-Location
X-Akam-SW-Version
Request-Id
X-Ac
X-ASPNET-VERSION
X-Server-Id
X-Country
X-Mod-Pagespeed
EagleEye-TraceId
X-HW
Rating
X-Readtime
Accept-CH
Accept-CH-Lifetime
X-ORACLE-DMS-ECID
X-ORACLE-DMS-RID
X-Cloud-Trace-Context
Pinterest-Generated-By
X-Application-Context
X-DataDome
Edge-Control
X-Country-Code
X-Vname
X-PC
X-TtlSet
X-Url
X-Origin-Upstream-Status
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Varnish-TTL
Fusion-Deployment-Id
Fusion-Content-Source
Fusion-Component-Id
Fusion-Template-Id
Fusion-Source
Fusion-Content-Id
X-Cnection
X-D2id
X-GitHub-Request-Id
Akamai-Age-Ms
X-ESI
X-MS-InvokeApp
X-Content-Type
X-Clacks-Overhead
X-Server-Name
Allow
X-Abt-Application-Version
X-Navigation-Version
X-FTR-Request-ID
X-Pinterest-Rid
Pinterest-Version
X-Vcap-Request-Id
X-Trace
X-Sol
Verso
X-Middleton-Response
X-Middleton-Display
Response
Pagespeed
Display
X-B3-TraceId
X-Px
X-DynaTrace
X-Cached
X-Server-ID
X-Element-Page-Cache
X-Rack-Cache
Accept-Ch
X-Fastly-Request-ID
X-Webkit-CSP
Service-Worker-Allowed
X-Client-IP
MS-Author-Via
X-Cache-TTL
Arr-Disable-Session-Affinity
X-Version
X-Upstream
Accept-Ch-Lifetime
X-Powered-By-Plesk
X-Dw-Request-Base-Id
X-Forwarded-Proto
Content-MD5
X-T
X-TTL
X-NF-Request-ID
AR-ATIME
AR-Request-ID
Ar-Sid
AR-CACHE
AR-PoweredBy
X-Debug
SPRequestGuid
X-SharePointHealthScore
Fastly-Restarts
X-VARITI-CCR
X-XRDS-Location
X-Jurisdiction
X-Exp-Id
X-Use-Magma
X-Kinja
X-Kinja-Server
X-Kinja-Build
X-Exp-Variant
X-GoogleNews-Bot
X-Cdn-Fetch
X-Kinja-Revision
TP-L2-Cache
TP-Cache
Access-Control-Request-Method
X-Powered-CMS
X-Content-Digest
X-Goog-Hash
X-Edge
X-Release
X-MSEdge-Ref
X-NWS-LOG-UUID
X-Ttl
TCN
S
X-PressLabs-Stats
SPIisLatency
SPRequestDuration
RTSS
Cache-Tag
Fastcgi-Cache
X-FastCGI-Cache
X-Request-Received
X-Amz-Rid
X-Request-Processing-Time
X-Yandex-Sdch-Disable
X-Pinterest-Direct
Public-Key-Pins
X-Ezoic-Cdn
Server-Node
X-Mid
X-MCACHE
X-Node-Name
X-Accel-Expires
X-Cache-Key
X-Ratelimit-Remaining
X-CST
X-Amzn-Trace-Id
X-Logged-In
X-Cache-Hit
ServerID
Front-End-Https
X-Microsite
X-Request-Handler-Origin-Region
X-Ser
Alternate-Protocol
X-Page-Id
X-Recruiting
X-Origin-Server
X-Kinsta-Cache
X-B
Host
Accept-Charset
X-Ratelimit-Limit
X-Mobile-URL
X-Hostname
X-FireWall-Port
X-FTR-Realm
X-FTR-DC
X-FTR-Expires
X-FTR-Balancer
X-ECACHE
X-FTR-Backend
X-FTR-Cache-Status
X-Country-Code-Real
X-FTR-Backend-Server
X-Varnish-Age
Nginx-Cache
X-Forwarded-For
X-SRCache-Store-Status
X-SRCache-Fetch-Status
MRF-Tech
X-B3-TraceId-Primal
Mrf-Cache-Status
X-Seen-By
X-Content-Security-Policy-Report-Only
Filterid
X-Id
X-DIS-Request-ID
Realpath
X-Load-Cache
X-Content-Options
X-Jobs
X-Shield-Request-Id
X-Daa-Tunnel
X-F-Cache
X-Varnish-Backend
X-App-Environment
X-Type
X-LB-Cache
Paypal-Debug-Id
X-Git-Hash
X-N
X-Activity-Id
Edge-Cache-Tag
X-Rid
X-Az
X-AppVersion
X-Varnish-Grace
X-Correlation-ID
X-Hits
X-Request-Guid
X-Mg-S
Fastcgi-Useragent
X-Zen-Fury
X-FB-Debug
X-Proxy
X-Grace
DynaTrace
Access-Control-Allow-Method
X-TEC-API-ORIGIN
X-Upgrade-Enabled
X-App-Server
X-TEC-API-ROOT
X-TEC-API-VERSION
Cache-Tags
DC
Content-Disposition
X-Amz-Server-Side-Encryption
X-Content-Powered-By
Cleartype
X-Akamai-Edgescape
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
AMP-Access-Control-Allow-Source-Origin
X-Cache-Operation
X-HP-Webp
X-Cache-Rule
X-Geo-Country
MicrosoftSharePointTeamServices
X-WebKit-CSP-Report-Only
X-Wix-Request-Id
X-Fastcgi-Cache
X-Endurance-Cache-Level
X-Cached-By
X-VCache
X-Original-Request-Id
X-Response-Served-From
X-Accel-Buffering
X-Host-Name
X-IPLB-Instance
NGB
Refresh
X-Ua
X-B3-Sampled
X-Distributor
X-Is-Bot
X-User-Agent
X-UUID
X-Cacheable-TTL
Payment
Healthy
X-Rendered-As
X-FW-Type
X-FW-Hash
X-FW-Serve
X-FW-Server
X-FW-Static
X-Signature
X-FW-Dynamic
X-AOL-HN
X-HTML-Minification-Powered-By
X-B-Cache
X-Cache-Time
X-Rule
X-Region
X-Instance
X-HS-Content-Id
X-Amzn-RequestId
X-Whom
Datacenter
X-HS-Combine-CSS
X-Amz-Apigw-Id
MS-CV
X-HS-Hub-Id
X-HS-Cache-Config
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-Pixel-2
X-Goog-Generation
X-Amz-Meta-S3cmd-Attrs
X-Tumblr-User
X-Goog-Metageneration
X-Tumblr-Pixel-1
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
Countrycode
Powered-By-ChinaCache
X-Debug-Info
X-Hp-Webp
Arc-Version
X-Mobile
PB-PID
PB-RID
X-App-Version
X-Varnish-Server
X-Frontend
X-XRDS-LOCATION
X-PHP-Backend
Powered
X-Respond-Thread
S-Cnection
Surrogate-Key
X-Backend-Name
X-Tec-Api-Version
X-Tec-Api-Root
X-Tec-Api-Origin
Cache
X-NewRelic-App-Data
X-Oneagent-Js-Injection
X-Protected-By
X-Cache-Server
X-Azure-Ref
X-Via-JSL
Liferay-Portal
X-DynaTrace-JS-Agent
X-Hyper-Cache
X-Cache-Age
X-Time
X-WA-Info
Viewport
X-Litespeed-Cache
X-Cache-Expired-At
X-Proxy-Cache-Status
X-Acc-Debug-Context
Referer-Policy
X-Cache-Control
X-FTR-Cache-Host
X-EdgeConnect-Cache-Status
X-CSRF-Token
Retry-After
X-FB-TRIP-ID
Webserver
X-Sucuri-ID
X-Mode
Filters
X-Cache-Var-Map
Meta-Geo
X-RN-RSRV
X-Debug-Cache
X-Source
X-ES-SERVER
X-Cache-Var
Section-Io-Cache
X-R9-Blue-Green-Version
X-Real-IP
X-Qloud-Router
X-Device-Type
X-RemovedCookies
X-ProcessESI
X-From
X-GeoIP
X-Site-Version
X-Time-Microsecs
Mn-Server-Ip
Eomportal-Instance
X-BYPASS-REASON
X-LJ-Flow-ID
X-Locale
X-AWS-Id
X-ProxyCache-Status
X-Cache-Host
X-Server-W
X-Via-Fastly
X-VWS-Id
X-Xfnlog-Site
X-ProxyCache-Key
X-Ratelimit-Reset
Cross-Origin-Window-Policy
X-Loop
TWC-Connection-Speed
X-Routing-Service
X-Cache-Action
TWC-GeoIP-Country
X-Zipkin-Id
X-FW-Version
Webcakes-App-Name
X-Framework
X-Amz-Replication-Status
TWC-Device-Class
Cache-Tv-Group
X-Proxy-Build
Webcakes-App-Version
X-OCL
X-TNCMS
X-Handled-By
X-Hl-Ver
TWC-Locale-Group
TWC-GeoIP-LatLong
X-Timing-Wait
X-Proxied
TWC-Privacy
X-Cluster
X-Origin-Hint
X-Human
Ec-Rule-Version
X-PCL
Webcakes-Region
Selected-Fe
Property-Id
DB-Nickname
Charset
X-Generated-By
X-Be
X-SaId
X-Environment-Context
X-NYM-Debug-Backend
X-Hosted-By
X-ServerID
X-Detected-As
X-PHP-Host
X-Status
X-BCube-Filmed-By
From-Origin
X-JoinUs
X-Amzn-Remapped-Content-Length
X-L-Path
X-Labrador-Cache-Channel
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Proto
X-Redis-Cache
X-RTag
X-Format
X-Cache-TTL-Remaining
X-Revision
X-Access
X-Section
Uber-Trace-Id
X-Ruxit-Js-Agent
Ms-Operation-Id
FSS-Cache
Version
X-Varnish-Cache-Hits
X-Air-Hostname
X-No-Session
Frame-Options
X-Cache-PHP
X-ATG-Version
X-Drupal-Cache-Contexts
X-NWS-UUID-VERIFY
X-Sucuri-Cache
X-Origin
X-CACHE-AGE
X-NCache
X-TA-CDN-Provider
X-EIG-Tracking-Id
X-URL
X-Drupal-Cache-Tags
X-Contextid
CF-Cached-On
X-EC-Lua
GEO-INFO
Server-Name
X-IPS-LoggedIn
X-Unique-Id
X-Tt-Trace-Tag
OT-Force-Account-Verify
X-Tt-Trace-Host
X-Bc-Bl
X-IP
X-Akamai-Transformed
X-Cache-Enabled
X-Varnish-Ttl
X-Vgn-Hpd-Cached
X-Vgn-Hpd-Variations-Key
X-GoCache-CacheStatus
X-Cache-Backend
X-Adobe-Loc
X-Backend-Host
X-Adobe-Content
X-Oss-Server-Time
X-AIR-PT
Time
X-Oss-Storage-Class
X-Oss-Request-Id
X-Oss-Object-Type
X-Tumblr-Pixel-3
X-Oss-Hash-Crc64ecma
Azure-Version
Azure-SlotName
Azure-SiteName
Azure-RegionName
Azure-InstanceId
X-TT
Now
X-CDN-Forward
X-ECache
X-RCS-CacheZone
X-Correlation-Id
Access-Control-Request-Headers
X-Cdn
X-Instart-Request-ID
X-Cache-2
X-TIME
X-VG-WebServer
X-VG-WebCache
X-Vtex-Processado-Em
X-Accel-Expires-Debug
CloudFront-Viewer-Country
X-Vtex-Remote-Cache
X-NGENIX-Cache
Meta-Geo-Continent
X-Vdms-Path
X-Application
X-Aed
X-Minions-Version
X-Vdms-Version
X-Connection-Hash
Apple-News-Services-Host
X-Destination
X-CCM
X-Cache-NE
X-Date
X-D
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-External-Request-Id
Apple-News-Services-Handled
X-G
Apple-News-Services-Request-Url
X-B-Cookie
X-Worker
Xc-Version
X-A-Wwc
Apple-News-Services-Parsed-Url
X-ARC
X-Adobe-Source
X-Twitter-Response-Tags
Host-ID
Rendered-Blocks
X-Up
X-S
X-Rojux
Fastcgi-X-Cache-Version
SD-X-WS
X-Trv-Group
VIX-Pulpo-Upstream-Status
X-S-Cookie
X-ScT
Surrogated-Key
X-Transaction
X-A-Dgt
Machine
X-A
DCR-Processing-Time-Ms
X-Processor
DCR-Decision-By
X-A-Dcw
X-PAYTM-SRV-ID
X-PBS-Appsvrname
Mobile-Detection-Method
X-A-Dam
MD5-Digest
X-Request-UUID
X-Rewrite-Enabled
X-A-Ccd
VIX-Pulpo-Node
X-APP-VERSION
Node
Adler-Geo
Platform
HostName
NM-Fastcgi-Cache
Mail-Subject
Is-Eu
We-Hiring
CDN-CachedAt
Wxu-Next-Region
Wxu-Next-Hostname
CDN-EdgeStorageId
CDN-PullZone
CDN-Uid
CDN-RequestId
CDN-RequestCountryCode
CDN-Cache
Wxu-Next-Commit
Fastly-SWR
Ufe-Result
X-Bip
Fastly-SIE
X-Backend-TTL
X-Alternate-Cache-Key
X-ApacheServer
X-Cache-Bucket
X-Envoy-Decorator-Operation
X-Hash
X-Rebelmouse-Cache-Control
X-Variation
X-Generation-Time
X-Rebelmouse-Surrogate-Control
X-Servername
X-Thanos
X-Req
X-Pubstack
X-VG-TLSProxy
X-OVcl-Cache
X-Owner
X-PERF
X-Varnishpool
X-OVcl
X-Method
X-Microcachable
X-Storefront-Renderer-Rendered
X-Forwarded-Host
X-CUA
X-DPWN-IS-SECURE
X-Shopify-Stage
X-Skip-Cache
X-SN
X-Sorting-Hat-ShopId
X-Soup
X-Core-Value
X-ShopId
X-Dispatcher-Server
X-Sorting-Hat-PodId
X-ShardId
X-Edge-Location
X-UA
X-TX-ID
X-Storage
X-Reqid
X-Request-Start
X-Policy
X-Platform
X-Proxy-Upstream
Rt-Fastcgi-Cache
X-Render-Time
X-Varnish-Cacheable
X-VarnishDD-TTL
PFcat
Origin
X-LI-UUID
X-Cache-NGX
X-Cache-Tags
X-Cache-Date
X-Eu-Site
X-Fastly-Backend
X-Cache-Config
X-Csrf-Jwt
X-CGP
X-Cluster-Name
X-Cms-Context
X-Clientip
X-Ms-Version
X-Clara-WADP
X-Fastly-Cache
X-Fmm-Version
X-Level-Front-Cache
X-Viewer-Country
X-Li-Fabric
X-Li-Pop
X-Core-Mission
X-WADP-Cache
X-HN
X-Webstats-RespID
X-Ms-Request-Id
X-Gamma-Serve
X-Generated-On
X-Auto-Login
X-Micro-Cache
X-Cache-Grace
Fastly-Drupal-HTML
CacheControlHeader
Gh-Request-Id
Group
X-NC
Country-Code
Cache-Status
C-Via
AKAMAI
Ha-Gx-Prefs
Fastly-SSL
L
HA-Ipaddr
L5d-Success-Class
X-Cdn-Forward
X-Location
X-Cache-URL
X-Old-Content-Length
X-CS
X-Cdn-Srv
X-Varnish-Beresp-Status
Backend
X-Geo-Header
X-Backend-State
X-Gzip
X-Varnish-Beresp-Ttl
X-Cache-Id
X-Content-Age
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-VHOST
X-Varnish-Beresp-Grace
X-Esi-Check
X-HS-Content-Campaign-Id
X-Irp-Debug
X-JWT-State
X-Web-Node
X-Is-Gdpr
X-Developers
X-Has-Esi
X-Request-Host
Akamai-GRN
Decoy-Debug-Status
X-Amz-Meta-Cb-Modifiedtime
Decoy-Debug-Key
Country
X-Slack-Backend
X-Say-Cacheable
X-Say-TTL
Memcached
Pagetype
X-SayCDN-TTL
UCS
X-Agile
Decoy-Debug-TTL
X-Agile-Age
X-Agile-Id
X-Mvc-Supplant-Cachable
X-Esi
X-Wa
FSS-Proxy
Fastly-Backend-Name
X-PF-Uncompressing
X-Dc
Nel
M-TraceId
X-LB-ID
X-Refresh
X-Aicache-OS
X-Platform-Server
Upgrade-Insecure-Requests
X-NODE
X-DefHash
X-Varnish-Remaining-TTL
X-DefElseHash
X-Via-Popn
X-Varnish-CookieINHashed-On
X-LAGOON
X-Varnish-CookieHashed-On
X-Via-Poph
X-UPSTREAM-Address
X-BC
X-ZONE
X-B3-Spanid
X-RateLimit-Remaining
X-Branch-Name
Arc-Country
X-Servedbyhost
X-Cache-Debug
X-LI-Proto
VivaBuild
X-Session-Fingerprint
Viewtype
X-Aspnet-Duration-Ms
X-Route-Name
X-Flags
X-Unique-ID
X-Providence-Cookie
Geo-Info
X-Is-Crawler
X-Mvc-Supplant-OutputCached
Actual-Object-TTL
X-ORACLE-APMCS-REQUEST-ID
X-RunCloud-Cache
X-Ua-Device
NGX
X-Via-Ucdn
Srv
X-Zone
X-Request-Time
X-Debug-Cache-Fetch
X-Bc
X-Debug-Cache-Store
CACHE
Cdn-Host
Cdn-Request-Time
X-Edge-Server
X-SERVER
X-Nginx-Cache
Memory
X-Varnish-Hostname
Xserver
X-Vgn-Hpd-Ssi
X-HS-Status
X-Ftr-Cache-Host
X-Srv
X-Page-View
X-DC
X-GEO
X-Action
Sid
X-APP
X-RPM
X-DSS
X-DW
X-CF-Powered-By
X-Akamai-Request-ID2
X-RSL
X-RPS
X-DI
X-B3-Traceid
X-DB
X-FPC
X-Check-Cacheable
X-LiteSpeed-Cache-Control
X-MP-GENERATED-AT
X-Cs
X-Via-Popv
WWW-Authenticate
X-Nc
X-Geo
X-NGINX-Cache
GeoIP-Latitude
X-Webkit-CSP-Report-Only
GeoIP-Country-Code
X-NU-AKA-ACS-Version
X-Cluster-Node
NtCoent-Length
X-Epic-Correlation-Id
SRV
X-Oss-Cdn-Auth
X-FC-Vary-Parameters
X-Vcache
X-Mobile-Rewrite
Hostname
X-Hit
GeoIp-Country-Code
Geoip-Latitude
X-VCL-Version
X-Dynatrace-Js-Agent
Server-Info
ProcessTime
X-CSRF-TOKEN
X-Sql-Count
User-Agent
X-Sql-Duration-Ms
Apigw-Requestid
XServer
X-Vcl-Version
Edge-Copy-Time
X-Via-SSL
X-Via-Edge
X-UnsetCookies
X-Fpc
W
X-Via-CDN
X-SERVER-NAME
Processtime
X-FORWARDED-FOR
S-Rt
X-We-Are-Hiring
On-Server
X-Svr
LB
WebServer
X-HOST
SID
X-Www-Served-By
Esi-Enabled
Accept-Language
X-Envoy-Upstream-Healthchecked-Cluster
Origin-Edge-Control
Origin-Cache-Control
X-Fastly-Country-Code
X-Key
X-Presslabs-Stats
X-Pinterest-Sli-Latency-Threshold
X-Pinterest-Sli-Endpoint-Name
X-HITS
Ohc-File-Size
X-S-Maxage
Amp-Access-Control-Allow-Source-Origin
X-SRV
X-Pinterest-Sli-Response-Type
X-Cache-Hm
Proxy-Firewall
Cdn
CF-IPCountry
X-Cache-Hfrom
ServedBy
T-Server
X-Dispatch
Cache-Hits
X-Pjax-Url
X-Tb
X-Cache-Remote
N-Cache
X-MSEdge-Flight
A
Cteonnt-Length
Server-Host
X-MSEdge-Features
X-CACHE-KEY
HitType
X-COUNTRY
X-Pass-Why
X-Geo-Region
Lb
CDN
Pics-Label
Magicmarker
X-App
X-Generated
X-Amzn-Remapped-Connection
Fastcgi-Cache-TTL
X-Newrelic-App-Data
X-RAMCache
X-VC
X-SB
X-Amzn-Remapped-Date
Powered-By
X-Varnish-Hits
X-Instart-Info
BehaviorPad-Version
WZWS-RAY
Ohc-Cache-HIT
X-Path-Route
X-Info
X-Newrelic-Synthetics
X-ServedByHost
X-TrackingId
X-Li-Proto
X-Cache-Tag
X-Datadome
X-Dynatrace
Protected
X-B3-SpanId
X-TH-Server
Xet-Cookie
X-Served-From
Cache-Key
X-Akamai-Pragma-Client-IP
X-StackifyID
X-Via-PopV
X-LiteSpeed-Tag
X-Via-PopN
X-Lb-Id
X-Via-PopH
X-Uri
Cache-Provider
X-Batcache
Server-Ttl
Dnion-Transfer-Encoding
X-Via-NSCOPI
X-WA
X-Varnish-Beresp-TTL
X-Tt-Logid
Ssr
X-TT-LOGID
Tracecode
X-Agile-Brick-Ok
Content-Script-Type
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
X-Origin-Response-Time
Cf-Alt-Svc
Content-Style-Type
X-Planisys-CDN-Cache
User-Cache-Control
Tcn
X-Vgn-Hpd-Reason
X-Pf-Uncompressing
X-Scheme
Lfy
X-Pad
X-Tid
X-HostName
X-Yottaa-OS
X-RateLimit-Limit
X-Men
X-Region-Sid
X-Cc-Via
X-Cc-Req-Id
Inserted-Into-Cache-At
D-Cc-Upstream
Who
X-Cache-Spec
CountryCode
X-Selected-Host-Header
X-Selected-Name
X-Selected-Scheme
X-Apw-Hits
Source
X-Snapshot-Date
X-Request-URL
Vha6-Origin
X-Dw-Trace-Id
X-MiniProfiler-Ids
Cneonction
X-Proxy-Cachei7
X-Nananana
X-DevSite-Last-Modified
Mime-Version
X-C
X-Apw-Access-Action
X-Apw-Access-Object
PICS-Label
X-PJAX-URL
X-Magnolia-Registration
Pragrma
X-Apw-Access-Token