Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
CF-RAY
Cf-Request-Id
CF-Cache-Status
X-XSS-Protection
Accept-Ranges
Link
Pragma
ETag
Expect-CT
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
Alt-Svc
X-Served-By
X-UA-Compatible
X-Timer
X-Download-Options
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Permitted-Cross-Domain-Policies
X-Check
X-Xss-Protection
X-Ua-Compatible
X-Cache-Status
X-Request-ID
X-Generator
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
X-Content-Security-Policy
X-Iinfo
Content-Encoding
X-CDN
X-AspNetMvc-Version
Feature-Policy
Status
X-Envoy-Upstream-Service-Time
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
Upgrade
X-Via
Access-Control-Max-Age
Keep-Alive
X-Ws-Request-Id
X-Age
X-Robots-Tag
X-AH-Environment
X-Turbo-Charged-By
Request-Context
X-Cache-Group
X-Proxy-Cache
EagleId
Server-Timing
X-Backend
X-Hacker
X-Server
Host-Header
Report-To
X-Amz-Request-Id
X-Server-Powered-By
X-Amz-Id-2
Grace
X-Nginx-Cache-Status
X-UA-Device
X-Rq
X-Varnish-Cache
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-Page-Speed
X-Dns-Prefetch-Control
X-LiteSpeed-Cache
Cf-Railgun
X-Pingback
X-OneAgent-JS-Injection
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Amz-Version-Id
X-Cache-Spec
NEL
X-Device
X-CST
X-WebKit-CSP
Allow
Xkey
X-Host
X-Vhost
X-Backend-Server
X-Server-Id
EagleEye-TraceId
Surrogate-Control
Request-Id
X-Dispatcher
X-Node
Content-Location
X-Response-Time
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Akam-SW-Version
X-Ruxit-JS-Agent
P3p
X-ASPNET-VERSION
X-Ac
X-Application-Context
X-Country
X-Cache-Lookup
Accept-Ch
X-Template
Accept-CH
X-Language
X-Mod-Pagespeed
X-Readtime
Accept-Ch-Lifetime
Accept-CH-Lifetime
MS-Author-Via
X-B3-TraceId
X-Cloud-Trace-Context
Rating
X-Origin-Cache
X-HW
X-MS-InvokeApp
X-Cnection
X-Url
X-TtlSet
X-Vname
X-PC
X-Clacks-Overhead
Edge-Control
X-GitHub-Request-Id
X-ESI
X-ORACLE-DMS-ECID
X-Trace
Pagespeed
Display
X-Content-Type
X-Middleton-Response
X-Sol
X-Middleton-Display
Response
X-D2id
X-Exp-Variant
X-Kinja-Build
X-Kinja-Server
Arr-Disable-Session-Affinity
X-Cdn-Fetch
X-Kinja-Revision
X-Use-Magma
X-Kinja
X-Exp-Id
X-GoogleNews-Bot
X-ORACLE-DMS-RID
Verso
X-Vcap-Request-Id
X-Rack-Cache
X-Goog-Hash
X-Country-Code
X-Buckets
X-Varnish-TTL
X-Navigation-Version
X-Server-Name
Service-Worker-Allowed
X-Powered-By-Plesk
X-Amz-Rid
X-VARITI-CCR
X-Abt-Application-Version
X-FastCGI-Cache
X-TTL
X-Fastly-Request-ID
X-Client-IP
X-Cache-TTL
X-Webkit-CSP
X-Pinterest-Rid
Fastly-Restarts
Pinterest-Generated-By
Pinterest-Version
X-Cached
X-Release
SPRequestGuid
X-MSEdge-Ref
X-Dw-Request-Base-Id
X-SharePointHealthScore
X-Element-Page-Cache
X-Litespeed-Cache
X-NF-Request-ID
SPRequestDuration
SPIisLatency
X-Oneagent-Js-Injection
RTSS
Mrf-Cache-Status
X-B3-TraceId-Primal
MRF-Tech
Public-Key-Pins
Access-Control-Request-Method
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Ar-Sid
AR-ATIME
AR-PoweredBy
AR-Request-ID
AR-CACHE
X-Edge
X-LLID
X-Powered-CMS
X-Ezoic-Cdn
Cache-Tag
X-Upstream
Content-MD5
X-Origin-Upstream-Status
Fusion-Component-Id
Fusion-Content-Id
Fusion-Deployment-Id
Fusion-Content-Source
Fusion-Template-Id
Fusion-Source
X-Px
X-HP-Webp
X-Jurisdiction
S
X-Version
X-Recruiting
X-MCACHE
X-ECACHE
X-Mid
X-Mg-S
Charset
X-Content-Digest
X-PressLabs-Stats
X-Kinsta-Cache
X-Amz-Server-Side-Encryption
Fastcgi-Cache
X-T
X-Ttl
Cache-Tags
X-Id
MicrosoftSharePointTeamServices
Filters
Front-End-Https
X-Content-Security-Policy-Report-Only
X-Logged-In
X-DynaTrace
Server-Node
Edge-Cache-Tag
X-Debug
X-Accel-Expires
X-Correlation-Id
X-Forwarded-Proto
X-Grace
X-Forwarded-For
TP-Cache
TP-L2-Cache
Server-Name
X-XRDS-LOCATION
Nginx-Cache
X-Amzn-Trace-Id
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
TCN
X-Request-Received
X-Request-Processing-Time
X-Fastcgi-Cache
Surrogate-Key
X-Pinterest-Direct
X-Shield-Request-Id
X-Varnish-Age
X-Microsite
X-B3-Sampled
X-Yandex-Sdch-Disable
X-Request-Handler-Origin-Region
X-Ser
X-Activity-Id
X-Az
X-Hits
X-AppVersion
X-Amz-Replication-Status
X-F-Cache
X-HS-Hub-Id
X-DIS-Request-ID
X-HS-Cache-Config
X-HS-Content-Id
X-HS-Combine-CSS
X-Ruxit-Js-Agent
X-Origin-Server
X-Goog-Metageneration
X-Goog-Generation
X-GUploader-UploadID
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
Accept-Charset
X-Geo-Country
Alternate-Protocol
X-Git-Hash
X-Rid
X-Respond-Thread
Cache
X-Time
X-Frontend
Nel
Section-Io-Cache
X-FTR-Request-ID
X-XRDS-Location
X-LB-Cache
Host
X-Upgrade-Enabled
X-DataDome
Access-Control-Allow-Method
X-Seen-By
X-Mobile-URL
MS-CV
X-NWS-LOG-UUID
X-Cache-Key
X-Cache-Age
Paypal-Debug-Id
X-VCache
X-TT
X-IPLB-Instance
Healthy
ServerID
X-Whom
X-Content-Options
X-AOL-HN
X-Type
Cleartype
Powered-By-ChinaCache
X-Varnish-Backend
X-Providence-Cookie
X-Request-Guid
X-Route-Name
X-Aspnet-Duration-Ms
Payment
X-Flags
X-App-Environment
X-Is-Crawler
X-Signature
X-Server-ID
X-B-Cache
X-Source
X-Page-Id
Fastcgi-Useragent
X-Jobs
X-Cache-Action
X-WebKit-CSP-Report-Only
X-Hostname
X-Load-Cache
X-Debug-Info
X-Daa-Tunnel
X-N
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-FB-Debug
X-Mobile
X-Browser-Type
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
Realpath
X-Via-JSL
X-Contextid
Refresh
Node
Version
X-Response-Served-From
X-Wix-Request-Id
X-Cached-By
X-Accel-Buffering
X-RateLimit-Remaining
X-Original-Request-Id
X-Rule
X-Drupal-Cache-Tags
X-Akamai-Edgescape
X-Framework
DC
X-Cacheable-TTL
X-RTag
X-Proxy
X-Zen-Fury
Ms-Operation-Id
Viewport
X-RemovedCookies
X-ProcessESI
X-Cache-Operation
X-Instance
X-HTML-Minification-Powered-By
X-B
X-Distributor
X-Cache-Time
X-Cache-Rule
X-Real-IP
Access-Control-Request-Headers
X-Page-View
X-Drupal-Cache-Contexts
X-Region
Referer-Policy
Eomportal-Instance
X-Tt-Trace-Tag
X-UUID
X-Tt-Trace-Host
X-Cache-Expired-At
X-FW-Dynamic
X-FW-Hash
X-Cache-Control
X-Content-Powered-By
X-FW-Serve
X-Cluster-Name
X-FW-Type
Countrycode
Liferay-Portal
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-FW-Server
X-FW-Static
X-Yottaa-Optimizations
X-Cache-Hit
X-G
X-Yottaa-Metrics
X-IPS-LoggedIn
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-1
X-Tumblr-Pixel-0
X-FireWall-Port
X-L-Path
X-Environment-Context
X-Pass-Why
DynaTrace
X-App-Server
Server-Info
Xserver
X-Ratelimit-Limit
X-Protected-By
CF-IPCountry
X-User-Agent
X-Varnish-Ttl
Webserver
Ec-Rule-Version
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
Section-Io-Id
X-Tumblr-Pixel-2
Section-Io-Origin-Status
From-Origin
X-Ratelimit-Remaining
GEO-INFO
SRV
X-Www-Served-By
X-Node-Name
Protected
X-Cache-Server
X-Nginx-Cache
X-Mode
X-RN-RSRV
Meta-Geo
X-UPSTREAM-Address
X-ES-SERVER
X-Debug-IsPreview
X-Hl-Ver
X-Debug-IsConnected
X-Endurance-Cache-Level
X-Handled-By
X-Backend-Name
X-Locale
X-Device-Type
X-Adobe-Loc
X-Uri
Cache-Tv-Group
X-Adobe-Content
X-Site-Version
Frame-Options
X-FB-TRIP-ID
X-Be
X-MP-GENERATED-AT
X-Web-Node
X-PHP-Host
X-Labrador-Cache-Channel
X-Storage
Cache-Status
X-NYM-Debug-Backend
X-UA-Device-Type
X-Varnishpool
X-PCL
Selected-Fe
Property-Id
TWC-Connection-Speed
X-Timing-Wait
X-OCL
TWC-Device-Class
X-Origin-Date
X-Origin-Hint
X-Pubstack
TWC-Privacy
X-Proto
Cache-Name
Webcakes-App-Name
Webcakes-App-Version
Decoy-Debug-Key
X-Proxy-Build
Fastly-SSL
Decoy-Debug-TTL
Decoy-Debug-Status
Webcakes-Region
X-Redis-Cache
TWC-GeoIP-Country
X-Soup
TWC-GeoIP-LatLong
X-Sql-Count
X-Via-Fastly
X-No-Session
TWC-Locale-Group
X-Sql-Duration-Ms
X-WA-Info
X-Hyper-Cache
X-Server-W
X-VWS-Id
Country
X-Hosted-By
X-Human
X-TNCMS
X-Format
X-FW-Version
X-LJ-Flow-ID
X-R9-Blue-Green-Version
X-Say-Cacheable
X-Loop
X-AIR-PT
X-Request-Time
X-BYPASS-REASON
X-Say-TTL
Retry-After
X-SayCDN-TTL
X-Section
X-Access
X-ProxyCache-Key
X-ProxyCache-Status
X-LAGOON
X-AWS-Id
X-ShardId
X-Alternate-Cache-Key
X-ShopId
X-Shopify-Stage
X-Sorting-Hat-PodId
X-PERF
X-Forwarded-Host
X-Cache-Grace
X-ApacheServer
X-Cache-TTL-Remaining
X-CCM
X-Cluster
Azure-Version
X-S-Maxage
Azure-SlotName
X-Storefront-Renderer-Rendered
X-Xfnlog-Site
X-Sorting-Hat-ShopId
X-Status
Azure-RegionName
Azure-InstanceId
Azure-SiteName
Mn-Server-Ip
X-TT-LOGID
AMP-Access-Control-Allow-Source-Origin
X-Varnish-Grace
X-SRV
X-Proxied
X-Zipkin-Id
X-Revision
X-Routing-Service
X-Dc
Apigw-Requestid
X-Webkit-Csp
X-Tec-Api-Version
X-Rendered-As
X-Tec-Api-Root
X-Tec-Api-Origin
X-Is-Bot
X-Varnish-Server
X-Qloud-Router
X-Amz-Meta-S3cmd-Attrs
S-Cnection
X-Info
X-Country-Code-Real
X-FTR-Balancer
X-FTR-DC
X-FTR-Backend
X-FTR-Cache-Status
X-FTR-Realm
X-FTR-Backend-Server
X-Cache-Enabled
X-Microcachable
X-Content-Age
X-Via-CDN
X-Platform
X-Proxy-Cache-Status
Cache-Hits
Uber-Trace-Id
X-Cdn
X-Detected-As
X-GG-Cache-Date
X-Cache-Host
X-TA-CDN-Provider
X-Azure-Ref
X-EdgeConnect-Cache-Status
X-CSRF-Token
X-Backend-Host
X-Amz-Apigw-Id
X-Amzn-RequestId
X-FTR-Expires
X-Amzn-Remapped-Content-Length
X-NWS-UUID-VERIFY
X-App-Version
X-Air-Hostname
X-Aspnetmvc-Version
Akamai-GRN
Tracecode
X-CLOUD-TRACE-CONTEXT
SD-X-WS
X-ATG-Version
X-Time-Microsecs
X-Cache-Var
X-Oss-Storage-Class
X-Oss-Request-Id
X-Oss-Object-Type
X-Oss-Server-Time
HostName
X-Cache-Var-Map
X-Oss-Hash-Crc64ecma
X-ServerID
Amp-Access-Control-Allow-Source-Origin
X-Backend-TTL
X-CACHE-KEY
X-Tb
ServedBy
X-RCS-CacheZone
X-DynaTrace-JS-Agent
X-Trace-Id
X-Debug-Cache
X-BCube-Filmed-By
X-Cache-PHP
X-Cdn-Forward
X-Cache-NGX
X-Unique-Id
X-Varnish-Hostname
Backend
X-CS
X-B3-SpanId
X-Correlation-ID
DSUID
X-TX-ID
X-Sucuri-ID
DB-Nickname
X-D
X-Destination
X-Connection-Hash
DCR-Decision-By
X-Magnolia-Registration
X-CF-Lambda-Version
DCR-Processing-Time-Ms
X-CF-Lambda-Fn
X-Cache-NE
Meta-Geo-Continent
X-A-Dam
X-A-Ccd
Path
Odigeo-Trace-Id
X-Ms-Version
X-A-Dcw
X-A
Thinkindot-Control
Release
SR-User-Adfree
T-Server
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-Ms-Request-Id
X-A-Dgt
X-Application
Instruction
Fastcgi-X-Cache-Version
X-ARC
Expiry
Machine
BehaviorPad-Version
Rendered-Blocks
Mobile-Detection-Method
MD5-Digest
X-A-Wwc
X-Aed
X-B-Cookie
X-Level-Front-Cache
X-Rewrite-Enabled
X-Device-Os
X-Rojux
X-S
X-S-Cookie
X-Processor
X-PBS-Appsvrname
X-Origin-CC
X-Origin-TTL
X-Owner
X-PAYTM-SRV-ID
X-GEO
X-ScT
X-VG-WebServer
X-VG-WebCache
X-Vtex-Processado-Em
X-Vtex-Remote-Cache
Xc-Version
X-Vdms-Version
X-Vdms-Path
X-Session-Fingerprint
X-SRCache-Key
X-Thinkindot-L3
X-Trv-Group
X-NAPM-TraceId
X-Request-UUID
X-Generated-On
X-GeoIP-City
X-Fetched-On
X-Location
X-From
X-External-Request-Id
X-Generation-Time
X-Adobe-Source
X-Akamai-Transformed
X-Cache-Backend
X-NewRelic-App-Data
Pagetype
X-VServer
On-Server
X-FC-Vary-Parameters
X-Fastly-Cache
X-Thanos
Content-Disposition
Fastly-Backend-Name
X-TrackingId
PB-PID
X-Cms-Context
X-Tumblr-Pixel-3
Host-ID
NGX
Gh-Request-Id
X-Core-Value
X-SVT-ORM-RULES
X-JWT-State
X-Is-Gdpr
X-Irp-Debug
X-Reqid
Cf-Device-Type
X-OVcl-Cache
X-Node-Id
X-Micro-Cache
X-OVcl
X-Azure-Ref-OriginShield
UCS
X-Skip-Cache
Server-Host
X-Mvc-Supplant-Cachable
PB-RID
X-Geo-Header
X-GeoIP
X-HS-Content-Campaign-Id
X-Has-Esi
X-Bip
X-SVT-ORM-VERSION
X-Cache-Bucket
AKAMAI
Arc-Version
C-Via
CacheControlHeader
User-Cache-Control
Wxu-Next-Region
X-Varnish-Cache-Hits
X-Envoy-Decorator-Operation
Wxu-Next-Hostname
X-Variation
X-IP
X-User
Wxu-Next-Commit
X-Var-Ttl
X-Esi-Check
V-Age
X-Policy
X-NU-AKA-ACS-Version
X-Varnish-Remaining-TTL
Server-Hostname
X-Nginx-Cache-Key
X-Varnish-CookieINHashed-On
X-Varnish-CookieHashed-On
X-Eu-Site
X-Varnish-Beresp-Grace
X-Old-Content-Length
X-Fastly-Backend
Web-Mar-Node
X-Dispatcher-Server
X-CUA
X-Rebelmouse-Surrogate-Control
X-Cache-Tags
X-Cache-Info
X-Cache-Id
X-Csrf-Jwt
X-Rebelmouse-Cache-Control
X-Clientip
X-Platform-Server
X-Clara-WADP
X-Ratelimit-Reset
X-CGP
X-Origin-Response-Time
X-DefElseHash
X-Backend-State
X-Scheme
X-Developers
X-Origin
Server-Ext
X-Developer
X-Block-Status
X-Request-Host
X-DefHash
X-Origin-Expires
X-Branch-Name
X-DPWN-IS-SECURE
Sever-Int
X-GoCache-CacheStatus
Magicmarker
Locid
Fastly-SIE
X-Li-Pop
X-HN
X-Generated-In
X-B3-Traceid
X-LI-UUID
Fastly-SWR
Location
CDCHOST
HA-Ipaddr
Ha-Gx-Prefs
Is-Eu
X-Li-Fabric
Lfy
L5d-Success-Class
X-Gzip
X-Generated-By
NM-Fastcgi-Cache
Platform
X-Matched-Rule
PFcat
X-Gen-Mode
CDN-RequestCountryCode
CDN-RequestId
CDN-Uid
X-VarnishDD-TTL
X-Fmm-Version
X-Hnp-Log
CDN-PullZone
X-Wikidot-Static-Cache
CDN-EdgeStorageId
Adler-Geo
X-Wikidot-Backend
CDN-CachedAt
X-WADP-Cache
CDN-Cache
X-Request-URI
CloudFront-Viewer-Country
X-Cache-Debug
Cf-Bgj
X-LB-ID
X-Hash
X-Slack-Backend
Cache-Host
Vix-Hermes-Req-Id
X-Varnish-Beresp-Status
True-Client-Country-4JS
Ssr
X-Varnish-Beresp-Ttl
X-Swa-Ws
X-Method
X-VG-TLSProxy
X-EC-Lua
IsBot
X-SIPLIST1
Rt-Fastcgi-Cache
X-Gamma-Serve
X-Nc
X-APP-VERSION
Sid
X-ID
X-Kinja-Server-Push
X-Unique-ID
X-Sn-Servicetimems
Pramga
Apple-News-Services-Host
Apple-News-Services-Handled
X-Varnish-Hits
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
L
X-Cache-Expires
X-Cdn-Origin
Origin
Fastly-Drupal-HTML
X-PF-Uncompressing
X-Via-Popv
X-NCache
Esi-Enabled
X-Via-Poph
X-Via-Popn
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Loc
X-Cache-Date
X-Aicache-OS
X-Mvc-Supplant-OutputCached
Who
Geo-Info
Tcn
X-Varnish-Url
X-Refresh
X-Servername
X-Core-Mission
Country-Code
X-Erf-Stays-Bingo-Pdp-Web
X-Request-Start
Pics-Label
X-Tb-Optimization-Total-Bytes-Saved
Url
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
X-Epic-Correlation-Id
X-TraceId
X-FireWall-Protection
X-Cache-Remote
X-NC
X-Dynatrace
X-Response-By
X-Varnish-Cacheable
Filterid
Req-Svc-Chain
Xkeyi7
X-Error
Source
S-Rt
Cmstype
Cmsid
X-RateLimit-Limit
X-Proxy-Cachei7
Svr
Content-Secure-Policy
X-Served-From
Geoip-Latitude
N-Cache
X-BBXSRF
GeoIp-Country-Code
X-B3-Spanid
X-Webkit-CSP-Report-Only
X-HostName
X-Cache-2
X-Host-Name
X-Srv
Server-Ttl
X-HS-Status
A
Cache-Key
VivaBuild
Viewtype
X-Vcl-Version
HitType
Kp-EeAlive
X-DC
Cross-Origin-Window-Policy
X-Sucuri-Cache
D-Cc-Upstream
Cteonnt-Length
Ohc-File-Size
NGB
MIME-Version
X-LiteSpeed-Cache-Control
M-TraceId
X-Cc-Via
X-Cache-ASPX
X-Cc-Req-Id
X-Contensis-Viewer-Groups
X-Varnish-Authentication
X-URL
X-Svr
TDXMobile
X-Li-Proto
Cross-Origin-Opener-Policy
X-Air-Source
X-Servedbyhost
X-Wa
Arc-Country
NtCoent-Length
X-Oracle-Dms-Rid
X-Esi
X-Vgn-Hpd-Reason
X-Server-IP
Server-ID
CACHE
X-CDN-Forward
X-Cache-Config
X-Gdpr
X-LI-Proto
X-Geo
X-WA
X-Origin-Time
X-Nyt-Route
X-Vc
X-ServedByHost
X-RAMCache
X-FPC
X-API-Version
X-Cs
X-HOST
X-PHP-Backend
SID
X-VC
X-SaId
X-Viewer-Country
Resin-Trace
X-JoinUs
X-Check-Cacheable
DataCenter
X-SN
Request-ID
X-NGENIX-Cache
X-Service
X-UA
X-Edge-Location
X-DI
Cache-Provider
X-Webstats-RespID
X-Internal-Host
X-VCL-Version
X-DB
X-DW
X-Newrelic-Synthetics
X-RSL
X-NodeID
X-RPS
X-DSS
X-CCDN-CacheTTL
X-TIM-N
X-Hcs-Proxy-Type
X-CCDN-Origin-Time
X-RPM
X-SB
Server-Id
Hostname
Ohc-Cache-HIT
Srv
Mime-Version
GeoIP-Country-Code
GeoIP-Latitude
X-Forwarded-Site
X-SD-PageType
X-Via-NSCOPI
FSS-Cache
X-Extlb
CF-Cached-On
X-NGINX-Cache
XServer
X-Bc-Bl
X-Action
X-Render-Time
ProcessTime
X-App
X-BBC-Edge-Cache-Status
X-FTR-Cache-Host
X-PJAX-URL
X-Oss-Cdn-Auth
X-Req
X-Fpc
Mail-Subject
LB
X-Depends-On
EpKe-Alive
X-VC-Cache
Memcached
X-Date
X-Region-Sid
X-Accel-Expires-Debug
We-Hiring
X-Proxy-Upstream
Surrogated-Key
X-CF-Powered-By
X-Ua
X-ZONE
X-Dynatrace-Js-Agent
X-Provided-By
W
X-RateLimit-Remaining-Second
Processtime
X-UnsetCookies
X-Worker
Upgrade-Insecure-Requests
X-APP
X-FORWARDED-FOR
X-Auto-Login
X-RateLimit-Limit-Second
Env
X-HITS
X-Cdn-Request-ID
X-Swift-Error
Cdn
CDN
X-CSRF-TOKEN
X-Air-Trace-Id
X-BACKEND-TTL
X-TIME
Time
X-Cluster-Node
X-Ftr-Cache-Host
X-Fastly-Backend-Reqs
X-Dw-Trace-Id
X-MSEdge-Features
X-MSEdge-Flight
Proxy-Connection
Memory
X-Men
X-Client-Ip
X-CACHE-AGE
CPC-Cache
CPC-Age
X-Flog
X-Sigma-Backend
X-ABtesting
VNS-Age
X-Hello
VNS-Cache
X-Rocket-Build-Number
X-Sigma
Dnion-Transfer-Encoding
X-Parent-Response-Time
X-Cache-Tag
Datacenter
X-IN-APIGATEWAYSSL
X-BBC-Origin-Response-Status
PICS-Label
X-IN-APIGATEWAY
X-Fastly-Request-Id
X-Akamai-Pragma-Client-IP
X-Acquia-Purge-Tags
X-Acquia-Site
X-Acquia-Application-UUID
X-Pad
X-Oracle-DMS-ECID
Media-Length
X-Zone
X-Presslabs-Stats
X-Acquia-Application-Trace
X-Pf-Uncompressing
Vha6-Origin
X-Via-PopV
X-Via-PopN
X-Via-PopH
Epwk-X-Cache
X-LiteSpeed-Tag
OT-Force-Account-Verify
Cf-Ipcountry
WZWS-RAY
X-Csrf-Token
Xet-Cookie
X-Akamai-ERRuleID
X-Snapshot-Date
X-Lb-Id
X-ElasticPress-Search
X-Varnish-URL
My-App
State
Fastcgi-Cache-TTL
X-MiniProfiler-Ids
X-ND-Cache
X-Vcache
X-Akamai-ERPolicy
X-Request-Url
X-Varnish-Beresp-TTL
X-ElasticPress-Query
X-Request-URL
X-Ms-Meta-Originalurl
X-Ms-Meta-Staticbatchstarttime
X-ServerName
CountryCode
X-B3-Parentspanid
X-Redis-Count
Content-Script-Type
X-Storefront-Renderer-Verified
Content-Style-Type
X-Litespeed-Cache-Control
X-Redis-Duration-Ms
Ohc-Response-Time
X-Traceid
Phost
X-Debug-Cache-Store
X-C
Inserted-Into-Cache-At
X-Debug-Cache-Fetch
Environment
X-Tid
NnCoection
URI
X-Amz-Meta-Cb-Modifiedtime