Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
CF-RAY
Cf-Request-Id
CF-Cache-Status
Accept-Ranges
Link
X-XSS-Protection
Pragma
ETag
Expect-CT
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
Referrer-Policy
P3P
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
Alt-Svc
X-UA-Compatible
X-Served-By
X-Timer
X-Request-Id
X-Download-Options
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Xss-Protection
Access-Control-Allow-Credentials
X-Runtime
X-AspNet-Version
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Permitted-Cross-Domain-Policies
X-Check
X-Cache-Status
X-Generator
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
X-FRAME-OPTIONS
X-Content-Security-Policy
X-Ua-Compatible
X-Iinfo
Content-Encoding
X-CDN
X-Request-ID
Feature-Policy
X-AspNetMvc-Version
Status
X-Envoy-Upstream-Service-Time
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
Upgrade
Access-Control-Max-Age
X-Via
Keep-Alive
X-Ws-Request-Id
X-AH-Environment
X-Age
X-Robots-Tag
Request-Context
X-Turbo-Charged-By
EagleId
X-Cache-Group
X-Proxy-Cache
Server-Timing
X-Server
X-Backend
X-Hacker
Host-Header
X-Server-Powered-By
Report-To
X-Amz-Request-Id
X-Nginx-Cache-Status
Grace
X-Amz-Id-2
X-UA-Device
X-Dns-Prefetch-Control
X-Rq
P3p
X-Varnish-Cache
X-Swift-SaveTime
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-LiteSpeed-Cache
X-Page-Speed
X-OneAgent-JS-Injection
Cf-Railgun
X-Pingback
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Device
X-CST
X-Amz-Version-Id
NEL
X-Cache-Spec
Allow
X-Vhost
X-Host
X-Backend-Server
X-WebKit-CSP
X-ASPNET-VERSION
X-Server-Id
X-Dispatcher
Surrogate-Control
X-Node
EagleEye-TraceId
Xkey
Request-Id
X-Response-Time
Content-Location
X-Akam-SW-Version
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
Accept-CH
X-Ruxit-JS-Agent
X-Cache-Lookup
X-Application-Context
X-Country
X-Ac
Accept-CH-Lifetime
X-Mod-Pagespeed
X-Cloud-Trace-Context
X-Template
X-Readtime
X-Language
X-B3-TraceId
MS-Author-Via
X-HW
Rating
Accept-Ch-Lifetime
X-Url
X-Cnection
X-MS-InvokeApp
Accept-Ch
X-Origin-Cache
X-TtlSet
X-Vname
X-PC
Edge-Control
X-Clacks-Overhead
X-ESI
X-GitHub-Request-Id
X-Trace
X-Varnish-TTL
Display
X-D2id
Pagespeed
Response
X-Sol
X-Middleton-Display
X-Middleton-Response
X-Content-Type
Verso
Arr-Disable-Session-Affinity
X-Kinja-Revision
X-Use-Magma
X-Kinja-Server
X-Kinja-Build
X-Exp-Id
X-Kinja
X-GoogleNews-Bot
X-Exp-Variant
X-Cdn-Fetch
X-Powered-By-Plesk
X-Vcap-Request-Id
X-Country-Code
X-Goog-Hash
X-Rack-Cache
X-ORACLE-DMS-RID
X-TTL
X-FastCGI-Cache
X-Webkit-CSP
X-ORACLE-DMS-ECID
X-Navigation-Version
X-VARITI-CCR
X-Server-Name
X-Abt-Application-Version
X-Amz-Rid
Service-Worker-Allowed
Fastly-Restarts
X-Fastly-Request-ID
X-Client-IP
X-Cached
X-Buckets
X-MSEdge-Ref
X-Release
X-Cache-TTL
X-Element-Page-Cache
Cache-Tag
X-Dw-Request-Base-Id
X-NF-Request-ID
MRF-Tech
Mrf-Cache-Status
X-B3-TraceId-Primal
X-SharePointHealthScore
Access-Control-Request-Method
SPRequestGuid
Public-Key-Pins
RTSS
SPIisLatency
SPRequestDuration
AR-ATIME
AR-PoweredBy
AR-CACHE
AR-Request-ID
Ar-Sid
X-Edge
X-Ezoic-Cdn
X-LLID
X-Powered-CMS
X-Pinterest-Rid
Pinterest-Version
Pinterest-Generated-By
X-Upstream
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Version
S
Content-MD5
X-HP-Webp
X-Jurisdiction
X-Recruiting
X-Oneagent-Js-Injection
X-ECACHE
X-MCACHE
X-Kinsta-Cache
X-Mid
Charset
X-Mg-S
X-PressLabs-Stats
X-DynaTrace
X-Origin-Upstream-Status
X-T
Cache-Tags
X-Content-Digest
X-Accel-Expires
Fusion-Deployment-Id
Fusion-Component-Id
Fusion-Template-Id
Fusion-Content-Id
Fusion-Source
Fusion-Content-Source
X-Forwarded-Proto
Fastcgi-Cache
X-Px
X-Litespeed-Cache
X-Id
X-Content-Security-Policy-Report-Only
X-Logged-In
Filters
X-Ttl
TP-L2-Cache
TP-Cache
Server-Node
Edge-Cache-Tag
Server-Name
TCN
X-Amz-Server-Side-Encryption
X-Ruxit-Js-Agent
Front-End-Https
X-Forwarded-For
X-Request-Processing-Time
MicrosoftSharePointTeamServices
X-Request-Received
Nginx-Cache
X-Grace
X-Correlation-Id
X-Shield-Request-Id
X-Hits
X-B3-Sampled
X-Amzn-Trace-Id
Alternate-Protocol
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Microsite
X-Request-Handler-Origin-Region
X-Server-ID
X-Az
X-AppVersion
X-Activity-Id
X-F-Cache
X-NWS-LOG-UUID
X-Amz-Replication-Status
X-Varnish-Age
X-HS-Hub-Id
X-HS-Combine-CSS
X-Fastcgi-Cache
X-HS-Cache-Config
X-HS-Content-Id
X-XRDS-Location
X-Debug
X-Origin-Server
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-Goog-Generation
X-Frontend
X-Yandex-Sdch-Disable
X-Rid
Nel
Host
Surrogate-Key
X-Geo-Country
Section-Io-Cache
X-Cache-Age
X-RateLimit-Remaining
X-DIS-Request-ID
X-XRDS-LOCATION
X-Daa-Tunnel
Accept-Charset
X-Ser
Realpath
X-Git-Hash
X-Hostname
X-VCache
Access-Control-Allow-Method
X-Source
X-Mobile-URL
X-Respond-Thread
X-Seen-By
MS-CV
X-Upgrade-Enabled
X-DataDome
ServerID
X-Type
X-AOL-HN
Cleartype
Paypal-Debug-Id
X-Time
X-LB-Cache
Payment
Healthy
X-Contextid
X-Varnish-Backend
X-IPLB-Instance
X-TT
X-Signature
X-Content-Options
X-B-Cache
X-Cache-Action
X-Debug-Info
X-Is-Crawler
X-Providence-Cookie
X-Route-Name
X-Whom
X-Flags
X-Request-Guid
X-Aspnet-Duration-Ms
X-WebKit-CSP-Report-Only
X-Cache-Key
X-App-Environment
X-Load-Cache
X-Page-Id
X-N
Fastcgi-Useragent
X-FB-Debug
Cache
X-Jobs
Node
X-Webkit-Csp
X-Rule
X-Mobile
X-Cache-Expired-At
X-Tec-Api-Version
X-Tec-Api-Root
Refresh
X-Browser-Type
X-Erf-Bev-Bev-Is-Generated
X-FTR-Request-ID
X-Tec-Api-Origin
X-Erf-Bev-Bev
X-FireWall-Port
X-Response-Served-From
X-Original-Request-Id
X-Accel-Buffering
Viewport
X-Wix-Request-Id
X-RTag
Ms-Operation-Id
DC
X-Cacheable-TTL
X-Cluster-Name
Access-Control-Request-Headers
X-Content-Powered-By
X-Distributor
X-B
X-Debug-IsPreview
X-ProcessESI
X-Framework
Referer-Policy
X-Instance
X-Zen-Fury
X-HTML-Minification-Powered-By
X-RemovedCookies
X-Real-IP
X-Debug-IsConnected
X-Drupal-Cache-Tags
VIX-Pulpo-Node
Eomportal-Instance
Version
VIX-Pulpo-Upstream-Status
X-IPS-LoggedIn
X-Cache-Time
X-Cache-Control
X-UUID
X-Region
X-Proxy
X-Page-View
X-Tt-Trace-Tag
X-Tt-Trace-Host
Countrycode
X-Drupal-Cache-Contexts
X-Www-Served-By
X-FW-Serve
X-FW-Hash
X-Nginx-Cache
X-App-Server
X-FW-Server
X-FW-Static
X-FW-Type
X-FW-Dynamic
X-G
X-Protected-By
X-Tumblr-Pixel-0
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-1
Xserver
X-Cached-By
X-Cache-Operation
Liferay-Portal
X-Yottaa-Metrics
X-Cache-Rule
X-Yottaa-Optimizations
X-Via-JSL
Powered-By-ChinaCache
X-Akamai-Edgescape
X-Environment-Context
X-L-Path
X-Cache-Hit
X-Pinterest-Direct
SRV
Section-Io-Origin-Status
Section-Origin-Responded
X-Varnish-Grace
Section-Io-Id
X-Pass-Why
Section-Io-Origin-Time-Seconds
X-Device-Type
GEO-INFO
CF-IPCountry
Server-Info
X-TA-CDN-Provider
DynaTrace
X-User-Agent
X-Adobe-Content
X-Varnish-Server
X-Adobe-Loc
Cache-Status
Retry-After
Frame-Options
From-Origin
X-Mode
X-Tumblr-Pixel-2
Ec-Rule-Version
X-Endurance-Cache-Level
Meta-Geo
X-Handled-By
X-Hl-Ver
X-RN-RSRV
X-UPSTREAM-Address
X-ES-SERVER
Webserver
X-FB-TRIP-ID
Cache-Tv-Group
X-Backend-Name
TWC-Privacy
TWC-Locale-Group
Webcakes-App-Name
Webcakes-App-Version
Webcakes-Region
X-Access
TWC-GeoIP-Country
Apigw-Requestid
X-TEC-API-ORIGIN
X-TEC-API-ROOT
Country
Property-Id
X-Be
TWC-Device-Class
TWC-Connection-Speed
TWC-GeoIP-LatLong
X-Cache-Server
X-Soup
X-Section
X-Request-Time
X-Storage
X-Uri
Fastly-SSL
X-Varnishpool
X-Pubstack
X-ProxyCache-Status
X-MP-GENERATED-AT
X-Format
X-TEC-API-VERSION
X-OCL
X-Origin-Hint
X-ProxyCache-Key
X-PCL
X-BYPASS-REASON
X-NYM-Debug-Backend
X-No-Session
X-LJ-Flow-ID
X-Origin-Date
X-PERF
X-PHP-Host
X-Labrador-Cache-Channel
X-Info
Mn-Server-Ip
Cache-Name
Selected-Fe
X-ApacheServer
X-AWS-Id
X-Proto
X-Proxy-Build
Decoy-Debug-Status
Decoy-Debug-Key
Decoy-Debug-TTL
X-Human
X-WA-Info
X-VWS-Id
X-Via-Fastly
X-R9-Blue-Green-Version
X-Server-W
X-Timing-Wait
X-UA-Device-Type
X-Proxy-Cache-Status
X-S-Maxage
Uber-Trace-Id
Azure-SlotName
Azure-Version
Azure-SiteName
Azure-InstanceId
Azure-RegionName
X-SayCDN-TTL
X-Routing-Service
X-Sql-Duration-Ms
X-Ratelimit-Limit
X-Sql-Count
X-TNCMS
Protected
X-Say-TTL
X-Xfnlog-Site
X-Say-Cacheable
X-GG-Cache-Date
X-Cache-TTL-Remaining
X-LAGOON
X-Zipkin-Id
X-Web-Node
X-Proxied
X-Loop
X-ShopId
X-Shopify-Stage
X-ShardId
X-Hosted-By
X-Hyper-Cache
X-Alternate-Cache-Key
X-Status
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Storefront-Renderer-Rendered
X-Redis-Cache
X-NWS-UUID-VERIFY
X-Cache-Enabled
X-Locale
X-Content-Age
X-Rendered-As
X-Backend-Host
X-Is-Bot
X-Microcachable
X-FW-Version
X-Site-Version
X-Azure-Ref
X-Cluster
Amp-Access-Control-Allow-Source-Origin
S-Cnection
X-Cache-Grace
X-Forwarded-Host
X-AIR-PT
X-SRV
AMP-Access-Control-Allow-Source-Origin
X-TT-LOGID
X-Qloud-Router
X-Dc
X-Platform
X-CSRF-Token
X-App-Version
X-Varnish-Ttl
Akamai-GRN
X-Trace-Id
ServedBy
X-Aspnetmvc-Version
X-Revision
X-Via-CDN
X-Cache-PHP
X-EdgeConnect-Cache-Status
X-ATG-Version
X-Varnish-Hostname
Cache-Hits
X-Cache-NGX
X-Correlation-ID
X-RCS-CacheZone
X-Debug-Cache
X-CCM
X-Node-Name
Who
X-Akamai-Transformed
X-Cache-Host
Country-Code
X-Detected-As
DB-Nickname
X-Amz-Apigw-Id
X-Amzn-RequestId
X-B3-SpanId
X-Amzn-Remapped-Content-Length
Filterid
X-Adobe-Source
X-CACHE-KEY
X-RateLimit-Limit
X-CS
X-BCube-Filmed-By
X-TX-ID
X-Nc
HostName
X-Varnish-Beresp-Grace
X-Oss-Object-Type
X-Oss-Server-Time
X-Oss-Storage-Class
SD-X-WS
X-Oss-Request-Id
X-Oss-Hash-Crc64ecma
X-Ms-Version
X-Ms-Request-Id
BehaviorPad-Version
Machine
DCR-Processing-Time-Ms
Fastcgi-X-Cache-Version
Expiry
X-Varnish-Beresp-Ttl
X-GEO
DCR-Decision-By
X-A-Wwc
X-A
X-A-Ccd
X-A-Dam
T-Server
X-Varnish-Cache-Hits
X-FTR-Cache-Status
X-ARC
X-A-Dcw
Rendered-Blocks
Mobile-Detection-Method
Meta-Geo-Continent
Odigeo-Trace-Id
X-Application
X-A-Dgt
X-Aed
MD5-Digest
X-B-Cookie
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-Vdms-Path
X-D
X-Destination
X-Origin-CC
X-Origin-TTL
X-Vtex-Processado-Em
X-VG-WebServer
X-VG-WebCache
X-Vdms-Version
X-Trv-Group
X-NAPM-TraceId
X-S-Cookie
X-From
X-Generated-On
X-Generation-Time
X-ScT
X-External-Request-Id
X-Location
X-SRCache-Key
X-Level-Front-Cache
X-Session-Fingerprint
X-Owner
X-Connection-Hash
X-FTR-Balancer
X-Rewrite-Enabled
X-Time-Microsecs
X-Processor
X-Request-UUID
X-FTR-DC
X-FTR-Backend
X-Cache-NE
X-S
X-PBS-Appsvrname
X-FTR-Realm
X-Country-Code-Real
X-Rojux
X-PAYTM-SRV-ID
X-Vtex-Remote-Cache
X-FTR-Backend-Server
X-Varnish-Beresp-Status
Backend
X-Unique-Id
X-Magnolia-Registration
X-Ratelimit-Remaining
X-ServerID
Cache-Host
X-JWT-State
X-Policy
X-Device-Os
Pagetype
X-Has-Esi
X-GeoIP-City
Magicmarker
CacheControlHeader
Content-Disposition
X-Generated-In
Host-ID
Gh-Request-Id
X-Fetched-On
X-FC-Vary-Parameters
Cf-Device-Type
X-Geo-Header
X-Reqid
X-Cache-Bucket
Server-Host
X-Cms-Context
V-Age
Thinkindot-Control
X-Azure-Ref-OriginShield
Thinkindot-CacheControl-Type
Wxu-Next-Commit
Wxu-Next-Hostname
Fastly-Backend-Name
X-OVcl-Cache
Arc-Version
X-OVcl
Wxu-Next-Region
X-Core-Value
X-Bip
X-Thinkindot-L3
Release
PB-RID
X-Thanos
PB-PID
X-TrackingId
Ssr
X-Is-Gdpr
Thinkindot-CacheControl
X-Tumblr-Pixel-3
X-Developers
Path
UCS
X-B3-Traceid
X-Backend-TTL
AKAMAI
X-Unique-ID
X-EC-Lua
X-APP-VERSION
X-Scheme
Vix-Hermes-Req-Id
X-SIPLIST1
Apple-News-Services-Handled
X-Request-URI
X-Platform-Server
X-Origin-Expires
X-Ratelimit-Reset
X-Rebelmouse-Cache-Control
X-Skip-Cache
X-Rebelmouse-Surrogate-Control
X-DynaTrace-JS-Agent
X-SVT-ORM-VERSION
Server-Ext
X-Varnish-CookieINHashed-On
X-Varnish-Hits
X-Varnish-Remaining-TTL
X-VarnishDD-TTL
Server-Hostname
X-Varnish-CookieHashed-On
X-Origin
X-SVT-ORM-RULES
X-User
Sever-Int
X-Fastly-Backend
True-Client-Country-4JS
X-Branch-Name
X-GeoIP
X-DefElseHash
X-GoCache-CacheStatus
X-Csrf-Jwt
X-Clientip
X-HN
X-DefHash
X-Developer
X-Fastly-Cache
X-Eu-Site
X-Epic-Correlation-Id
X-Envoy-Decorator-Operation
X-Dispatcher-Server
X-DPWN-IS-SECURE
X-HS-Content-Campaign-Id
X-CGP
X-Cache-Debug
X-Micro-Cache
X-Mvc-Supplant-Cachable
X-Nginx-Cache-Key
Platform
X-Node-Id
X-Cache-Info
X-Method
X-Li-Fabric
NGB
X-Li-Pop
X-LI-UUID
X-Cache-Tags
X-NU-AKA-ACS-Version
X-Variation
Fastly-SIE
Fastly-SWR
DSUID
X-Var-Ttl
Cf-Bgj
PFcat
Ha-Gx-Prefs
IsBot
Is-Eu
X-IP
HA-Ipaddr
CDN-Uid
CDN-RequestId
Adler-Geo
C-Via
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
CDCHOST
CDN-Cache
CDN-RequestCountryCode
CDN-PullZone
CDN-EdgeStorageId
CDN-CachedAt
L
X-Irp-Debug
On-Server
Origin
NM-Fastcgi-Cache
X-Backend-State
Esi-Enabled
NGX
Location
Locid
L5d-Success-Class
X-VServer
X-VG-TLSProxy
X-NewRelic-App-Data
X-ID
User-Cache-Control
X-Amz-Meta-S3cmd-Attrs
X-Tb
X-Hash
X-Esi-Check
X-Planisys-CDN-Rules
X-Swa-Ws
X-Clara-WADP
X-Fmm-Version
X-Goog-Meta-Goog-Reserved-File-Mtime
X-WADP-Cache
X-Gamma-Serve
X-Planisys-CDN-Cache
Xc-Version
X-Planisys-CDN-TTL
Rt-Fastcgi-Cache
X-Gzip
X-Wikidot-Static-Cache
X-Old-Content-Length
X-LB-ID
X-Block-Status
X-Sucuri-ID
X-Hnp-Log
X-Gen-Mode
X-Aicache-OS
X-Generated-By
Fastly-Drupal-HTML
X-Origin-Response-Time
Web-Mar-Node
X-Loc
X-Cache-Id
X-Wikidot-Backend
X-Request-Host
X-Air-Hostname
X-FTR-Expires
Req-Svc-Chain
X-Varnish-Url
Cmsid
X-Slack-Backend
X-Edge-Location-Klb
Cmstype
X-Instrumentation
X-Kraken-Routeconfig-Destination
X-Kraken-Loop-Name
X-Server-Lifecycle-Phase
X-Servername
Tracecode
X-Cdn-Forward
Pics-Label
Svr
Kp-EeAlive
X-PF-Uncompressing
X-Mvc-Supplant-OutputCached
X-Served-From
Url
A
SR-User-Adfree
X-Via-Popn
X-Refresh
X-Vgn-Hpd-Reason
Instruction
X-Via-Poph
X-Via-Popv
X-Cache-Var
X-Cache-Var-Map
VivaBuild
M-TraceId
Viewtype
X-CUA
X-Matched-Rule
Cache-Key
X-SaId
Cross-Origin-Opener-Policy
Lfy
X-PHP-Backend
Arc-Country
Sid
X-JoinUs
X-NGENIX-Cache
X-Edge-Location
X-TraceId
CloudFront-Viewer-Country
TDXMobile
X-Cache-Expires
X-Tb-Optimization-Total-Bytes-Saved
X-Cdn-Origin
X-Sn-Servicetimems
DataCenter
SID
X-CDN-Forward
MIME-Version
X-DC
X-Vc
Pramga
X-Srv
X-Cache-Backend
X-NCache
X-NC
Geo-Info
X-Extlb
NtCoent-Length
X-CLOUD-TRACE-CONTEXT
X-Cache-Date
X-Servedbyhost
X-Webkit-CSP-Report-Only
X-Service
Content-Secure-Policy
X-Core-Mission
Server-ID
X-Request-Start
X-Wa
X-Internal-Host
Geoip-Latitude
Source
GeoIp-Country-Code
X-Bc-Bl
Tcn
X-Forwarded-Site
X-Error
X-B3-Spanid
X-HS-Status
FSS-Cache
X-FireWall-Protection
X-Proxy-Upstream
X-Esi
LB
X-Varnish-Cacheable
X-Via-NSCOPI
X-LI-Proto
X-Req
Memcached
Surrogated-Key
X-Newrelic-Synthetics
X-VHOST
CACHE
X-VCL-Version
X-VC-Cache
X-Air-Source
Resin-Trace
X-Vcl-Version
X-Response-By
X-Li-Proto
X-PJAX-URL
Mail-Subject
X-Date
We-Hiring
X-Accel-Expires-Debug
X-HOST
Upgrade-Insecure-Requests
X-Geo
X-CCDN-Origin-Time
X-Rocket-Build-Number
X-Proxy-Cachei7
X-Sigma-Backend
X-Sigma
Xkeyi7
X-Hcs-Proxy-Type
Hostname
X-Viewer-Country
X-RateLimit-Remaining-Second
X-CCDN-CacheTTL
X-App
X-RateLimit-Limit-Second
Env
Request-ID
X-Cs
X-LiteSpeed-Cache-Control
X-RSL
X-RPS
Server-Ttl
CF-Cached-On
HitType
X-BBXSRF
X-MSEdge-Flight
GeoIP-Latitude
GeoIP-Country-Code
X-Men
Time
Memory
X-DW
X-TIM-N
X-DSS
X-RPM
X-DI
X-DB
N-Cache
X-MSEdge-Features
X-ZONE
X-WA
X-APP
X-RAMCache
X-Cache-2
X-Zone
XServer
X-UA
D-Cc-Upstream
X-Varnish-Authentication
X-Air-Trace-Id
X-Mg-Request-UUID
X-Action
X-ServedByHost
X-Cc-Via
X-Cc-Req-Id
CPC-Age
CPC-Cache
Server-Id
X-Cache-ASPX
X-Contensis-Viewer-Groups
S-Rt
X-Svr
ProcessTime
VNS-Age
VNS-Cache
X-HostName
X-TIME
X-FPC
X-Oss-Cdn-Auth
Mime-Version
X-Region-Sid
State
Fastcgi-Cache-TTL
My-App
X-Swift-Error
X-Provided-By
X-Dynatrace-Js-Agent
X-Minions-Version
W
X-API-Version
X-FORWARDED-FOR
X-Server-IP
X-Origin-Time
X-Nyt-Route
Cache-Provider
X-Gdpr
X-Cache-Config
X-Fpc
X-CF-Powered-By
X-Depends-On
Cteonnt-Length
Srv
X-Cache-Remote
X-Cdn-Request-ID
X-Akamai-Pragma-Client-IP
X-Sucuri-Cache
CDN
Ohc-File-Size
X-UnsetCookies
X-Cache-Ttl
X-URL
X-BACKEND-TTL
X-Dw-Trace-Id
X-CSRF-TOKEN
X-Cache-Type
X-Erf-Stays-Bingo-Pdp-Web
Cross-Origin-Window-Policy
X-ServerName
X-Client-Ip
X-Xrds-Location
OT-Force-Account-Verify
X-Parent-Response-Time
X-VC
X-ABtesting
X-Flog
X-SN
X-NodeID
X-Hello
Cdn
X-Check-Cacheable
X-Fastly-Request-Id
Proxy-Connection
X-Ftr-Cache-Host
Ohc-Cache-HIT
X-Forwarded-Path
X-SD-PageType
Cf-Ipcountry
X-Snapshot-Date
Dnion-Transfer-Encoding
X-ND-Cache
X-Orig-Expires
X-Webstats-RespID
X-Pad
Media-Length
X-NGINX-Cache
X-Via-PopN
X-Fastly-Backend-Reqs
X-Presslabs-Stats
X-Via-PopH
X-Tenant
X-SB
X-Pf-Uncompressing
X-Oracle-DMS-ECID
X-Via-PopV
X-Shop-Environment
Vha6-Origin
X-Host-Name
X-ElasticPress-Search
Epwk-X-Cache
X-LiteSpeed-Tag
X-Cluster-Node
WZWS-RAY
PICS-Label
X-Air-Pt
X-BBC-Edge-Cache-Status
X-Acquia-Application-UUID
X-Acquia-Site
X-Varnish-URL
X-Ftr-Request-Id
Warning
X-Render-Time
EpKe-Alive
X-Acquia-Purge-Tags
X-Lb-Id
X-Request-URL
X-Traceid
X-Akamai-ERRuleID
X-Varnish-Beresp-TTL
X-Akamai-ERPolicy
X-Vcache
X-Cache-Tag
X-MiniProfiler-Ids
Xet-Cookie
X-Acquia-Application-Trace
X-Ms-Meta-Originalurl
X-Ms-Meta-Staticbatchstarttime
X-BBC-Origin-Response-Status
X-Tx-Id
Datacenter
CountryCode
X-Apw-Hits
X-Apw-Access-Token
X-Cache-Status-Check
X-Conf
X-Pjax-Url
X-C
X-Yottaa-OS
X-Mg-Request-Id
Phost
NnCoection
X-B3-Parentspanid
Ohc-Response-Time
Environment
URI
X-Redis-Count
X-Redis-Duration-Ms
X-Debug-Cache-Fetch
X-Debug-Cache-Store
Content-Script-Type
Content-Style-Type
X-Apw-Access-Action
X-Litespeed-Cache-Control
X-Amz-Meta-Cb-Modifiedtime
Inserted-Into-Cache-At
X-Tid
X-Apw-Access-Object