Threat Level: green Handler on Duty: Jim Clausing

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
X-XSS-Protection
Cf-Request-Id
CF-RAY
CF-Cache-Status
Last-Modified
Accept-Ranges
Link
Pragma
Expect-CT
ETag
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
X-UA-Compatible
Alt-Svc
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Permitted-Cross-Domain-Policies
X-Check
X-Cache-Status
X-Generator
X-Request-ID
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
X-Iinfo
X-Content-Security-Policy
Content-Encoding
X-CDN
X-Envoy-Upstream-Service-Time
Status
Feature-Policy
Access-Control-Expose-Headers
X-AspNetMvc-Version
X-Drupal-Dynamic-Cache
X-Xss-Protection
Access-Control-Max-Age
X-Via
Upgrade
Keep-Alive
X-Ws-Request-Id
X-Ua-Compatible
X-Turbo-Charged-By
X-Age
X-AH-Environment
X-Robots-Tag
Request-Context
X-Proxy-Cache
EagleId
X-Cache-Group
X-Backend
Server-Timing
X-Hacker
X-Amz-Request-Id
Report-To
X-Server
Host-Header
X-Amz-Id-2
X-Server-Powered-By
X-UA-Device
X-Nginx-Cache-Status
Grace
X-Dns-Prefetch-Control
X-LiteSpeed-Cache
X-Varnish-Cache
X-Rq
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-Swift-CacheTime
X-Page-Speed
Cf-Railgun
X-Pingback
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Amz-Version-Id
NEL
X-OneAgent-JS-Injection
Xkey
X-WebKit-CSP
X-Cache-Spec
X-Backend-Server
Allow
X-Host
X-Vhost
EagleEye-TraceId
X-CST
X-Device
X-Server-Id
Surrogate-Control
Request-Id
X-Dispatcher
X-Kinja-Server-Push
X-Node
Content-Location
X-Response-Time
X-Akam-SW-Version
Accept-CH
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Ruxit-JS-Agent
Accept-CH-Lifetime
X-Template
X-Language
X-Ac
X-Application-Context
X-Country
X-Readtime
X-Mod-Pagespeed
X-Cache-Lookup
X-Cloud-Trace-Context
MS-Author-Via
X-Origin-Cache
Accept-Ch
X-B3-TraceId
Rating
X-Cnection
X-MS-InvokeApp
Accept-Ch-Lifetime
X-ORACLE-DMS-ECID
X-HW
X-Vname
X-TtlSet
X-PC
X-Url
X-Clacks-Overhead
X-ESI
Edge-Control
X-GitHub-Request-Id
X-ASPNET-VERSION
X-Middleton-Response
Pagespeed
X-Sol
Response
X-Trace
X-Middleton-Display
Display
X-Content-Type
X-FastCGI-Cache
X-Buckets
X-D2id
X-Vcap-Request-Id
Verso
X-GoogleNews-Bot
X-Kinja
X-Kinja-Build
X-Exp-Id
X-Use-Magma
X-Exp-Variant
Arr-Disable-Session-Affinity
X-Cdn-Fetch
X-Kinja-Revision
X-Kinja-Server
X-Varnish-TTL
X-Goog-Hash
X-Server-Name
X-Rack-Cache
Service-Worker-Allowed
X-Country-Code
X-Oneagent-Js-Injection
X-Navigation-Version
X-VARITI-CCR
X-Abt-Application-Version
X-Amz-Rid
X-ORACLE-DMS-RID
Pinterest-Generated-By
Pinterest-Version
X-Pinterest-Rid
X-TTL
X-Cache-TTL
X-Client-IP
X-Powered-By-Plesk
SPRequestGuid
X-SharePointHealthScore
SPRequestDuration
SPIisLatency
X-Fastly-Request-ID
X-Release
X-Dw-Request-Base-Id
X-MSEdge-Ref
X-Element-Page-Cache
Fastly-Restarts
X-NF-Request-ID
X-Cached
X-Origin-Upstream-Status
X-Webkit-CSP
Public-Key-Pins
X-B3-TraceId-Primal
Mrf-Cache-Status
MRF-Tech
RTSS
X-Px
AR-PoweredBy
AR-CACHE
Ar-Sid
AR-Request-ID
AR-ATIME
X-Edge
Fusion-Component-Id
Fusion-Deployment-Id
Fusion-Template-Id
Fusion-Source
Fusion-Content-Id
Fusion-Content-Source
Access-Control-Request-Method
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-LLID
X-Powered-CMS
X-Upstream
X-Ezoic-Cdn
X-Pinterest-Direct
Content-MD5
X-Jurisdiction
X-Amz-Server-Side-Encryption
X-HP-Webp
X-Content-Digest
Charset
X-Mid
X-MCACHE
X-ECACHE
X-Recruiting
S
X-Mg-S
X-Aspnetmvc-Version
Cache-Tag
X-PressLabs-Stats
MicrosoftSharePointTeamServices
X-Debug
X-Version
X-Ttl
Front-End-Https
Fastcgi-Cache
TCN
X-Grace
X-Content-Security-Policy-Report-Only
X-XRDS-Location
X-T
Filters
Cache-Tags
X-Kinsta-Cache
Server-Node
Edge-Cache-Tag
X-Forwarded-Proto
X-Yandex-Sdch-Disable
X-Id
X-Amzn-Trace-Id
X-Cache-Key
X-Accel-Expires
Powered-By-ChinaCache
Surrogate-Key
X-Correlation-Id
Nginx-Cache
X-Logged-In
X-Forwarded-For
Server-Name
X-Varnish-Age
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-B3-Sampled
X-DIS-Request-ID
X-Ruxit-Js-Agent
X-Hits
X-Microsite
X-DynaTrace
X-Ser
X-Request-Handler-Origin-Region
X-Server-ID
TP-Cache
X-Request-Received
X-Request-Processing-Time
TP-L2-Cache
X-Az
X-Activity-Id
X-Amz-Replication-Status
X-AppVersion
X-Shield-Request-Id
X-FTR-Request-ID
X-F-Cache
X-HS-Combine-CSS
X-HS-Content-Id
X-HS-Hub-Id
X-HS-Cache-Config
Accept-Charset
X-Goog-Generation
X-Goog-Metageneration
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-Git-Hash
X-Origin-Server
X-Respond-Thread
X-Hostname
Nel
X-Geo-Country
X-DataDome
X-LB-Cache
Section-Io-Cache
X-Upgrade-Enabled
X-Rid
X-Frontend
X-Cache-Age
Access-Control-Allow-Method
Cleartype
X-Mobile-URL
Host
Paypal-Debug-Id
Alternate-Protocol
X-Type
Cache
Healthy
X-TEC-API-VERSION
ServerID
MS-CV
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-IPLB-Instance
X-Content-Options
X-AOL-HN
X-App-Environment
Payment
X-Whom
X-Varnish-Backend
X-WebKit-CSP-Report-Only
X-Signature
X-TT
X-Route-Name
X-Providence-Cookie
X-B-Cache
X-Cache-Action
X-Flags
X-Is-Crawler
X-Request-Guid
X-Aspnet-Duration-Ms
X-VCache
X-Erf-Bev-Bev
Fastcgi-Useragent
X-Seen-By
X-Debug-Info
X-Erf-Bev-Bev-Is-Generated
X-Page-Id
X-Jobs
X-Mobile
X-Fastcgi-Cache
X-Source
X-XRDS-LOCATION
X-N
X-Cached-By
X-Load-Cache
X-NWS-LOG-UUID
X-Browser-Type
X-Akamai-Edgescape
X-Time
X-Via-JSL
X-RateLimit-Remaining
X-Litespeed-Cache
Version
X-FB-Debug
Viewport
DynaTrace
X-Response-Served-From
X-Accel-Buffering
X-Rule
X-Original-Request-Id
X-Daa-Tunnel
X-Cache-Rule
Refresh
X-Proxy
X-Zen-Fury
X-Drupal-Cache-Tags
DC
X-Cache-Operation
X-Framework
Realpath
X-ProcessESI
X-RemovedCookies
X-Tt-Trace-Host
X-Instance
X-Cacheable-TTL
X-Tt-Trace-Tag
Referer-Policy
Ms-Operation-Id
X-Region
X-RTag
X-Real-IP
X-HTML-Minification-Powered-By
X-Cache-Time
X-Node-Name
Access-Control-Request-Headers
X-Distributor
X-Drupal-Cache-Contexts
X-Contextid
X-Environment-Context
X-L-Path
X-FW-Dynamic
X-Page-View
X-FW-Serve
X-FW-Static
X-Yottaa-Optimizations
X-FW-Hash
X-Yottaa-Metrics
X-FW-Type
X-FW-Server
X-UUID
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
Eomportal-Instance
X-Cache-Expired-At
X-B
X-Wix-Request-Id
GEO-INFO
Liferay-Portal
Node
X-Tumblr-Pixel-1
X-Tumblr-Pixel-0
X-Tumblr-Pixel
Countrycode
X-Cluster-Name
X-G
X-Tumblr-User
X-Cache-Control
X-Amz-Meta-S3cmd-Attrs
X-Content-Powered-By
X-IPS-LoggedIn
X-User-Agent
SRV
X-Cache-Hit
X-Tumblr-Pixel-2
Webserver
Section-Io-Id
Server-Info
Section-Origin-Responded
Section-Io-Origin-Status
Section-Io-Origin-Time-Seconds
Protected
From-Origin
X-Ratelimit-Limit
X-App-Server
X-Revision
X-Protected-By
X-Oracle-Dms-Rid
X-Pass-Why
Ec-Rule-Version
X-Cache-Server
X-Backend-Name
Frame-Options
Cache-Status
X-FireWall-Port
X-Hyper-Cache
X-UPSTREAM-Address
X-Endurance-Cache-Level
X-RN-RSRV
Meta-Geo
X-Hl-Ver
X-Handled-By
X-Mode
X-ES-SERVER
Retry-After
X-Storage
X-NYM-Debug-Backend
X-FB-TRIP-ID
X-Adobe-Content
X-Adobe-Loc
X-Forwarded-Host
X-Site-Version
X-Soup
X-Locale
X-Via-CDN
Webcakes-App-Name
Decoy-Debug-Status
X-Web-Node
Decoy-Debug-Key
Country
Cache-Tv-Group
Decoy-Debug-TTL
Fastly-SSL
X-Section
X-Pubstack
X-Origin-Hint
X-Varnishpool
X-Www-Served-By
Property-Id
Webcakes-Region
X-Access
TWC-GeoIP-Country
Webcakes-App-Version
TWC-GeoIP-LatLong
X-Be
X-Cache-Grace
X-Format
TWC-Connection-Speed
CF-IPCountry
TWC-Privacy
TWC-Locale-Group
TWC-Device-Class
X-FW-Version
X-ApacheServer
X-Human
X-Labrador-Cache-Channel
X-Origin-Date
Selected-Fe
Cache-Name
Azure-RegionName
Azure-SiteName
Azure-SlotName
Azure-Version
X-PCL
X-PERF
X-Timing-Wait
X-SayCDN-TTL
X-TT-LOGID
X-UA-Device-Type
X-Uri
X-Say-TTL
X-Say-Cacheable
X-PHP-Host
X-Proto
X-Proxy-Build
X-Redis-Cache
Azure-InstanceId
X-OCL
X-FTR-Cache-Status
S-Cnection
X-FTR-Balancer
X-FTR-Backend
X-FTR-Backend-Server
X-Country-Code-Real
X-FTR-Realm
X-FTR-DC
X-AIR-PT
X-BYPASS-REASON
X-No-Session
X-LAGOON
X-S-Maxage
X-Via-Fastly
X-WA-Info
X-Sql-Duration-Ms
X-Sql-Count
X-ProxyCache-Status
X-Server-W
X-ProxyCache-Key
X-Qloud-Router
X-Hosted-By
X-LJ-Flow-ID
X-R9-Blue-Green-Version
X-Status
X-Loop
X-TNCMS
Mn-Server-Ip
X-FTR-Expires
X-VWS-Id
X-AWS-Id
X-Cluster
X-Cache-Var-Map
Cache-Hits
X-Cache-Var
X-Cache-TTL-Remaining
X-ShardId
X-Routing-Service
X-Request-Time
X-ShopId
X-CCM
X-Alternate-Cache-Key
X-Dynatrace
X-Proxied
X-Ratelimit-Remaining
X-Xfnlog-Site
X-MP-GENERATED-AT
X-Storefront-Renderer-Rendered
X-Zipkin-Id
X-Shopify-Stage
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Rendered-As
X-Air-Hostname
AMP-Access-Control-Allow-Source-Origin
Xserver
X-Is-Bot
X-Webkit-Csp
X-Detected-As
X-EdgeConnect-Cache-Status
X-Amzn-RequestId
X-Amzn-Remapped-Content-Length
X-Cache-Host
X-Cdn
X-Amz-Apigw-Id
X-SRV
Apigw-Requestid
X-Device-Type
X-Info
X-Dc
X-B3-Traceid
X-Microcachable
SD-X-WS
X-Unique-Id
X-Varnish-Ttl
X-Tec-Api-Root
X-Tec-Api-Version
X-Tec-Api-Origin
X-Cache-Backend
X-Nginx-Cache
X-Cache-Enabled
X-Time-Microsecs
Tracecode
X-Backend-TTL
X-Content-Age
X-Platform
X-ServerID
X-GEO
X-Varnish-Server
X-Debug-IsPreview
X-Debug-IsConnected
X-Azure-Ref
X-Erf-Stays-Bingo-Pdp-Web
Amp-Access-Control-Allow-Source-Origin
X-DynaTrace-JS-Agent
X-Backend-Host
X-Varnish-Grace
DSUID
X-APP-VERSION
X-Oss-Hash-Crc64ecma
X-Sucuri-ID
X-NewRelic-App-Data
X-Tb
X-GG-Cache-Date
X-Oss-Object-Type
X-ID
X-Oss-Storage-Class
X-Oss-Server-Time
X-Oss-Request-Id
Uber-Trace-Id
PB-PID
Backend
Arc-Version
PB-RID
X-Correlation-ID
Akamai-GRN
X-BCube-Filmed-By
X-Cache-Remote
X-Proxy-Cache-Status
X-Akamai-Transformed
X-Magnolia-Registration
X-ATG-Version
X-Origin-Response-Time
X-Destination
Meta-Geo-Continent
Odigeo-Trace-Id
Mobile-Detection-Method
Pramga
X-Device-Os
X-D
MD5-Digest
Fastcgi-X-Cache-Version
Expiry
DCR-Processing-Time-Ms
Instruction
Lfy
X-External-Request-Id
Rendered-Blocks
Machine
X-Varnish-Cache-Hits
Thinkindot-CacheControl
X-Aed
X-CF-Lambda-Version
X-A
X-A-Ccd
X-A-Dam
X-A-Wwc
X-A-Dgt
X-A-Dcw
Thinkindot-Control
X-B-Cookie
X-Connection-Hash
X-CF-Lambda-Fn
T-Server
X-ARC
Thinkindot-CacheControl-Type
X-Application
X-Cache-NE
X-Trace-Id
SR-User-Adfree
X-Vdms-Path
X-Matched-Rule
X-Origin-CC
X-Origin-TTL
X-PAYTM-SRV-ID
X-Location
X-Level-Front-Cache
DCR-Decision-By
X-Thinkindot-L3
Xc-Version
X-PBS-Appsvrname
X-Processor
X-S-Cookie
X-ScT
X-Session-Fingerprint
X-SRCache-Key
X-S
X-Vtex-Remote-Cache
X-Request-UUID
X-Rewrite-Enabled
X-Rojux
X-Trv-Group
CACHE
X-Vtex-Processado-Em
X-VG-WebServer
X-VG-WebCache
X-Vdms-Version
X-Generation-Time
X-Generated-On
X-Fetched-On
X-From
X-Adobe-Source
X-RCS-CacheZone
X-CSRF-Token
ServedBy
Wxu-Next-Commit
X-Skip-Cache
X-Generated-In
PFcat
X-Eu-Site
X-Developers
X-Sn-Servicetimems
X-Request-Start
Path
X-Request-URI
X-Reqid
Pagetype
Ha-Gx-Prefs
Locid
L5d-Success-Class
L
HA-Ipaddr
Gh-Request-Id
X-VServer
X-Wikidot-Backend
X-SVT-ORM-VERSION
Fastly-Backend-Name
Wxu-Next-Hostname
Magicmarker
Host-ID
X-Owner
X-Cache-Bucket
X-Cache-Date
X-Cache-Info
X-Bip
X-Thanos
X-Is-Gdpr
X-Irp-Debug
X-HS-Content-Campaign-Id
X-HN
X-GeoIP
Release
BehaviorPad-Version
X-CGP
X-Cdn-Origin
X-Has-Esi
X-JWT-State
X-Backend-State
X-Csrf-Jwt
X-Node-Id
X-Mvc-Supplant-Cachable
X-GeoIP-City
X-OVcl
X-Tumblr-Pixel-3
X-OVcl-Cache
X-Wikidot-Static-Cache
X-Swa-Ws
X-Geo-Header
X-User
X-Azure-Ref-OriginShield
X-VarnishDD-TTL
X-Micro-Cache
X-FC-Vary-Parameters
X-SVT-ORM-RULES
Wxu-Next-Region
Cf-Device-Type
Cache-Host
X-Cache-NGX
AKAMAI
DB-Nickname
C-Via
CacheControlHeader
X-Cache-PHP
X-Varnish-Hostname
X-NC
X-Ms-Request-Id
X-Ms-Version
X-Cms-Context
X-Debug-Cache
Apple-News-Services-Handled
X-Host-Name
On-Server
Apple-News-Services-Host
X-Generated-By
X-Fastly-Backend
Ssr
UCS
X-Var-Ttl
X-CUA
X-Developer
User-Cache-Control
X-Envoy-Decorator-Operation
Sever-Int
Rt-Fastcgi-Cache
NGX
Server-Ext
Server-Host
X-Core-Value
Server-Hostname
X-Fastly-Cache
Apple-News-Services-Request-Url
X-Request-Host
X-Varnish-Hits
Apple-News-Services-Parsed-Url
X-Nginx-Cache-Key
X-Origin-Expires
Cf-Bgj
X-Policy
Content-Disposition
CloudFront-Viewer-Country
X-Method
X-Cache-Tags
X-Scheme
CDCHOST
V-Age
X-Clientip
X-IP
X-Varnish-Beresp-Grace
X-Cache-Debug
X-Branch-Name
X-Varnish-CookieHashed-On
X-DefElseHash
X-Cache-Id
X-Clara-WADP
X-Varnish-CookieINHashed-On
X-Variation
X-Varnish-Url
X-Varnish-Remaining-TTL
X-Gen-Mode
X-CS
X-NU-AKA-ACS-Version
X-Loc
X-LI-UUID
X-NWS-UUID-VERIFY
X-Old-Content-Length
X-Origin
X-Platform-Server
X-Ratelimit-Reset
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Li-Pop
X-Li-Fabric
X-Esi-Check
X-DPWN-IS-SECURE
X-Dispatcher-Server
X-TX-ID
X-Fmm-Version
X-Block-Status
X-SIPLIST1
X-Hnp-Log
X-Gzip
X-GoCache-CacheStatus
X-DefHash
X-Cache-Expires
Adler-Geo
Platform
True-Client-Country-4JS
Vix-Hermes-Req-Id
Web-Mar-Node
NM-Fastcgi-Cache
Location
Fastly-SWR
Is-Eu
IsBot
Fastly-SIE
X-WADP-Cache
X-TrackingId
X-VG-TLSProxy
X-App-Version
X-B3-Spanid
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
CDN-RequestId
X-Slack-Backend
X-Response-By
X-Gamma-Serve
CDN-EdgeStorageId
X-Servername
CDN-CachedAt
CDN-Uid
CDN-PullZone
CDN-RequestCountryCode
Origin
X-Varnish-Cacheable
X-Hash
X-NCache
S-Rt
X-Goog-Meta-Goog-Reserved-File-Mtime
CDN-Cache
X-Refresh
X-Proxy-Cachei7
X-EC-Lua
X-NAPM-TraceId
Fastly-Drupal-HTML
HostName
Xkeyi7
Pics-Label
Url
X-Core-Mission
X-PF-Uncompressing
Cross-Origin-Window-Policy
X-URL
X-Aicache-OS
X-Mvc-Supplant-OutputCached
N-Cache
X-BBXSRF
X-CACHE-GROUP
X-Sucuri-Cache
X-Cdn-Forward
X-Cache-2
Ohc-File-Size
X-CDN-Forward
X-B3-SpanId
Content-Secure-Policy
D-Cc-Upstream
X-Varnish-Authentication
Cteonnt-Length
X-Cache-ASPX
X-LB-ID
X-Cc-Via
X-Cc-Req-Id
X-Contensis-Viewer-Groups
X-FireWall-Protection
Sid
X-Via-Popn
MIME-Version
X-Svr
X-Via-Poph
X-Via-Popv
X-Unique-ID
Esi-Enabled
X-Wa
X-DC
X-Tb-Optimization-Total-Bytes-Saved
X-Error
X-TA-CDN-Provider
X-Server-IP
X-Servedbyhost
X-Srv
X-Origin-Time
X-Nyt-Route
X-Gdpr
Source
X-API-Version
X-Cache-Config
X-TIME
X-FPC
X-Webkit-CSP-Report-Only
X-CLOUD-TRACE-CONTEXT
Geo-Info
X-VC
Hostname
X-Epic-Correlation-Id
GeoIp-Country-Code
Geoip-Latitude
HitType
XServer
X-SN
X-RateLimit-Limit
Ohc-Cache-HIT
X-Cs
X-SB
X-Webstats-RespID
X-TraceId
Req-Svc-Chain
Server-Ttl
X-LI-Proto
Server-ID
X-NodeID
X-Fastly-Request-Id
X-NGINX-Cache
Who
X-VCL-Version
X-LiteSpeed-Cache-Control
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
X-Check-Cacheable
X-SD-PageType
X-Nc
X-HS-Status
Country-Code
X-Ua
X-Esi
Svr
Kp-EeAlive
X-BBC-Edge-Cache-Status
EpKe-Alive
X-Render-Time
Cmsid
Cmstype
SID
X-HOST
X-Vgn-Hpd-Reason
Viewtype
X-Ftr-Cache-Host
VivaBuild
X-Worker
X-Served-From
Request-ID
X-Auto-Login
Tcn
X-Viewer-Country
NtCoent-Length
X-Dynatrace-Js-Agent
X-UA
X-DW
X-Vcl-Version
X-CSRF-TOKEN
ProcessTime
A
X-RSL
X-DI
Cache-Key
Resin-Trace
X-RPS
Cache-Provider
X-DB
X-CACHE-KEY
X-RPM
X-DSS
GeoIP-Country-Code
X-CCDN-CacheTTL
X-Li-Proto
M-TraceId
X-RAMCache
GeoIP-Latitude
CDN
X-CCDN-Origin-Time
X-TIM-N
X-Cluster-Node
X-Hcs-Proxy-Type
Upgrade-Insecure-Requests
X-Newrelic-Synthetics
Server-Id
X-Action
X-Air-Source
Arc-Country
X-App
Cross-Origin-Opener-Policy
TDXMobile
X-Internal-Host
Processtime
X-FTR-Cache-Host
X-Geo
Datacenter
X-Fpc
X-CF-Powered-By
X-Oss-Cdn-Auth
CF-Cached-On
OT-Force-Account-Verify
X-WA
X-ServedByHost
X-Vc
WZWS-RAY
X-BBC-Origin-Response-Status
X-FORWARDED-FOR
X-HITS
X-HostName
X-Dw-Trace-Id
Cdn
X-Service
X-Via-PopV
X-Lb-Id
X-Via-PopH
X-Via-PopN
X-Pinterest-Sli-Response-Type
X-BACKEND-TTL
X-Pinterest-Sli-Endpoint-Name
X-Pinterest-Sli-Latency-Threshold
X-MSEdge-Flight
X-ND-Cache
X-Cache-Tag
Proxy-Connection
Mime-Version
X-MSEdge-Features
X-Fastly-Backend-Reqs
X-CACHE-AGE
Filterid
X-Client-Ip
X-IN-APIGATEWAYSSL
X-IN-APIGATEWAY
Srv
X-Hello
Dnion-Transfer-Encoding
X-ABtesting
X-Parent-Response-Time
X-Flog
FSS-Cache
DataCenter
X-Via-NSCOPI
URI
X-Oracle-DMS-ECID
X-Pf-Uncompressing
Vha6-Origin
NGB
X-Forwarded-Site
X-Presslabs-Stats
W
X-Acc-Debug-Context
X-Acc-Rdl
CountryCode
X-NGENIX-Cache
X-Cdn-Request-ID
Media-Length
X-SaId
PICS-Label
X-Request-URL
X-LiteSpeed-Tag
X-PHP-Backend
X-Akamai-Request-ID
X-MiniProfiler-Ids
X-Edge-Location
X-Akamai-Pragma-Client-IP
X-JoinUs
Cf-Ipcountry
X-Extlb
X-Ms-Meta-Originalurl
X-Ms-Meta-Staticbatchstarttime
X-Bc-Bl
X-RateLimit-Limit-Second
X-Proxy-Upstream
X-PJAX-URL
X-RateLimit-Remaining-Second
X-Region-Sid
X-VC-Cache
X-UnsetCookies
X-Req
X-Pad
X-Depends-On
Memcached
Mail-Subject
LB
Surrogated-Key
We-Hiring
X-Date
X-Accel-Expires-Debug
Epwk-X-Cache
Inserted-Into-Cache-At
Content-Script-Type
X-Akamai-ERPolicy
X-Acquia-Application-Trace
X-Acquia-Application-UUID
X-Acquia-Purge-Tags
X-Traceid
Edge-Copy-Time
X-Via-Edge
X-Via-SSL
X-Csrf-Token
X-Request-Url
X-ElasticPress-Search
X-B3-Parentspanid
X-Acquia-Site
X-Swift-Error
X-Akamai-ERRuleID
Content-Style-Type
X-Varnish-Beresp-TTL
X-ElasticPress-Query
X-Vcache
X-Provided-By
X-ZONE
X-Tid
X-Sigma-Backend
X-APP
X-Zone
Env
X-Rocket-Build-Number
X-Sigma
Time
Phost
X-Redis-Count
Environment
X-Redis-Duration-Ms
X-Snapshot-Date
Xet-Cookie
NnCoection
X-Storefront-Renderer-Verified
Ohc-Response-Time
X-Litespeed-Cache-Control
X-Debug-Cache-Fetch
Akamai-Age-Ms
Memory
X-ServerName
X-C
X-Debug-Cache-Store