Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Cf-Request-Id
CF-RAY
CF-Cache-Status
Accept-Ranges
Link
X-XSS-Protection
Pragma
ETag
Expect-CT
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
Alt-Svc
X-Served-By
X-UA-Compatible
X-Timer
X-Download-Options
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Request-Id
X-Xss-Protection
Access-Control-Allow-Credentials
X-Runtime
X-AspNet-Version
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Permitted-Cross-Domain-Policies
X-Check
X-Request-ID
X-Cache-Status
X-Generator
X-DNS-Prefetch-Control
X-Ua-Compatible
X-Cacheable
Timing-Allow-Origin
X-Content-Security-Policy
X-Iinfo
Content-Encoding
X-CDN
Feature-Policy
Status
X-Envoy-Upstream-Service-Time
X-AspNetMvc-Version
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
X-Via
Upgrade
Access-Control-Max-Age
Keep-Alive
X-Ws-Request-Id
X-Age
X-AH-Environment
X-Turbo-Charged-By
X-Robots-Tag
Request-Context
X-Proxy-Cache
X-Cache-Group
EagleId
Server-Timing
X-Backend
X-Hacker
X-Server
Report-To
Host-Header
X-Amz-Request-Id
X-Server-Powered-By
X-Amz-Id-2
Grace
X-Nginx-Cache-Status
X-UA-Device
X-Rq
X-Varnish-Cache
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-LiteSpeed-Cache
X-Page-Speed
Cf-Railgun
X-Pingback
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
NEL
X-Dns-Prefetch-Control
X-OneAgent-JS-Injection
X-Amz-Version-Id
X-Cache-Spec
X-Device
X-CST
Allow
Xkey
X-Host
X-Vhost
X-Backend-Server
X-WebKit-CSP
X-Server-Id
EagleEye-TraceId
Request-Id
Surrogate-Control
X-Dispatcher
X-Node
Content-Location
X-Response-Time
X-Akam-SW-Version
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Ruxit-JS-Agent
P3p
X-ASPNET-VERSION
Accept-CH
X-Ac
X-Application-Context
X-Cache-Lookup
X-Country
X-Template
X-Language
Accept-CH-Lifetime
Accept-Ch
X-Mod-Pagespeed
X-Readtime
Accept-Ch-Lifetime
X-Cloud-Trace-Context
MS-Author-Via
X-B3-TraceId
Rating
X-Origin-Cache
X-MS-InvokeApp
X-HW
X-Cnection
X-Url
X-Vname
X-PC
X-TtlSet
Edge-Control
X-Clacks-Overhead
X-GitHub-Request-Id
X-ESI
X-ORACLE-DMS-ECID
X-Trace
X-Middleton-Response
X-Sol
Pagespeed
Display
Response
X-Middleton-Display
X-Content-Type
X-D2id
X-ORACLE-DMS-RID
Arr-Disable-Session-Affinity
Verso
X-Kinja
X-GoogleNews-Bot
X-Kinja-Revision
X-Vcap-Request-Id
X-Exp-Id
X-Cdn-Fetch
X-Kinja-Server
X-Exp-Variant
X-Kinja-Build
X-Use-Magma
X-Goog-Hash
X-Rack-Cache
X-Buckets
X-Country-Code
X-FastCGI-Cache
X-Varnish-TTL
X-Server-Name
X-Oneagent-Js-Injection
X-Navigation-Version
Service-Worker-Allowed
X-Powered-By-Plesk
X-VARITI-CCR
X-Amz-Rid
X-Abt-Application-Version
X-Fastly-Request-ID
X-Webkit-CSP
X-Client-IP
X-Cache-TTL
X-Pinterest-Rid
Pinterest-Generated-By
Pinterest-Version
Fastly-Restarts
X-MSEdge-Ref
SPRequestGuid
X-Release
X-SharePointHealthScore
X-Cached
X-Dw-Request-Base-Id
X-TTL
X-Element-Page-Cache
SPIisLatency
SPRequestDuration
X-NF-Request-ID
Public-Key-Pins
Mrf-Cache-Status
X-B3-TraceId-Primal
MRF-Tech
RTSS
Access-Control-Request-Method
AR-PoweredBy
AR-CACHE
Ar-Sid
AR-ATIME
AR-Request-ID
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Edge
X-LLID
X-Powered-CMS
X-Ezoic-Cdn
X-Litespeed-Cache
X-Origin-Upstream-Status
Cache-Tag
Content-MD5
X-Upstream
Fusion-Content-Source
Fusion-Content-Id
Fusion-Deployment-Id
Fusion-Source
Fusion-Component-Id
X-Px
Fusion-Template-Id
X-Jurisdiction
X-HP-Webp
X-Ttl
S
X-Version
X-Mid
X-ECACHE
X-MCACHE
X-Recruiting
X-Mg-S
Charset
X-Content-Digest
X-PressLabs-Stats
X-Amz-Server-Side-Encryption
Fastcgi-Cache
X-Kinsta-Cache
X-T
Cache-Tags
MicrosoftSharePointTeamServices
X-Id
Front-End-Https
Filters
X-Content-Security-Policy-Report-Only
X-DynaTrace
X-Logged-In
TCN
X-Accel-Expires
Edge-Cache-Tag
X-Debug
Server-Node
X-Grace
X-Forwarded-Proto
X-Forwarded-For
X-Correlation-Id
TP-Cache
Server-Name
TP-L2-Cache
Nginx-Cache
X-Pinterest-Direct
X-Amzn-Trace-Id
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
Surrogate-Key
X-Request-Processing-Time
X-Request-Received
X-XRDS-LOCATION
X-Aspnet-Version
X-Yandex-Sdch-Disable
X-Varnish-Age
X-B3-Sampled
X-Microsite
X-Ser
X-Shield-Request-Id
X-Request-Handler-Origin-Region
X-Hits
X-AppVersion
X-Az
X-Activity-Id
X-Amz-Replication-Status
X-Ruxit-Js-Agent
X-F-Cache
X-Fastcgi-Cache
X-HS-Hub-Id
X-HS-Content-Id
X-HS-Combine-CSS
X-DIS-Request-ID
X-HS-Cache-Config
X-Goog-Metageneration
X-GUploader-UploadID
X-Goog-Generation
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-Origin-Server
Accept-Charset
X-Geo-Country
Alternate-Protocol
X-Git-Hash
X-XRDS-Location
X-Respond-Thread
Cache
X-Rid
X-FTR-Request-ID
X-Time
Section-Io-Cache
X-Frontend
Host
X-Upgrade-Enabled
X-LB-Cache
X-Cache-Key
X-DataDome
X-Aspnetmvc-Version
Access-Control-Allow-Method
Powered-By-ChinaCache
X-Mobile-URL
X-Seen-By
X-NWS-LOG-UUID
X-Server-ID
MS-CV
X-VCache
Paypal-Debug-Id
X-Cache-Age
X-IPLB-Instance
X-AOL-HN
Healthy
X-TT
X-Whom
X-Varnish-Backend
X-Type
X-Content-Options
X-Hostname
ServerID
Cleartype
X-Providence-Cookie
X-Request-Guid
X-Flags
X-Route-Name
X-Is-Crawler
Payment
X-Aspnet-Duration-Ms
X-App-Environment
X-Signature
X-Cache-Action
X-B-Cache
X-Page-Id
X-Source
X-Jobs
Fastcgi-Useragent
X-Debug-Info
X-WebKit-CSP-Report-Only
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-Load-Cache
X-Daa-Tunnel
X-N
X-Mobile
X-FB-Debug
X-Erf-Bev-Bev-Is-Generated
X-Browser-Type
X-Erf-Bev-Bev
Nel
X-Via-JSL
X-RateLimit-Remaining
Realpath
Refresh
X-Contextid
Version
X-Accel-Buffering
X-Response-Served-From
X-Rule
X-Original-Request-Id
X-Wix-Request-Id
Node
X-Cached-By
X-Drupal-Cache-Tags
X-RTag
X-Zen-Fury
Ms-Operation-Id
X-Cacheable-TTL
X-Proxy
X-Akamai-Edgescape
DC
X-Cache-Operation
X-Cache-Rule
X-Framework
Viewport
Referer-Policy
X-ProcessESI
X-Real-IP
X-Cache-Time
X-RemovedCookies
X-B
X-Distributor
X-HTML-Minification-Powered-By
Access-Control-Request-Headers
X-Instance
Eomportal-Instance
X-Region
X-UUID
X-Drupal-Cache-Contexts
X-Page-View
X-Tt-Trace-Tag
X-Cache-Expired-At
X-Tt-Trace-Host
X-Yottaa-Optimizations
X-FW-Static
X-FW-Type
X-Content-Powered-By
X-FW-Serve
X-FW-Hash
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
Liferay-Portal
X-FW-Dynamic
Countrycode
X-Cluster-Name
X-FW-Server
X-Cache-Control
X-Yottaa-Metrics
X-IPS-LoggedIn
X-Cache-Hit
DynaTrace
X-L-Path
X-Environment-Context
X-G
X-Tumblr-Pixel-0
X-Tumblr-Pixel-1
X-Tumblr-User
X-Tumblr-Pixel
X-FireWall-Port
X-Pass-Why
Server-Info
X-App-Server
X-Varnish-Ttl
X-Ratelimit-Limit
X-User-Agent
Xserver
GEO-INFO
Section-Io-Origin-Status
Section-Io-Origin-Time-Seconds
Webserver
Section-Io-Id
Section-Origin-Responded
X-Tumblr-Pixel-2
X-Protected-By
CF-IPCountry
Ec-Rule-Version
From-Origin
X-Node-Name
X-Www-Served-By
SRV
X-Ratelimit-Remaining
Protected
X-Nginx-Cache
X-Cache-Server
X-Mode
X-Hl-Ver
X-Handled-By
X-ES-SERVER
X-Endurance-Cache-Level
X-Backend-Name
X-UPSTREAM-Address
Meta-Geo
X-RN-RSRV
X-Uri
X-FB-TRIP-ID
Cache-Tv-Group
Frame-Options
X-Site-Version
X-Locale
X-NYM-Debug-Backend
X-Web-Node
X-Storage
X-Varnishpool
X-PHP-Host
Cache-Status
X-Soup
X-Be
X-Debug-IsConnected
X-Debug-IsPreview
X-MP-GENERATED-AT
X-Device-Type
X-Labrador-Cache-Channel
Decoy-Debug-TTL
X-Via-Fastly
X-UA-Device-Type
Decoy-Debug-Status
Decoy-Debug-Key
X-Adobe-Loc
X-Redis-Cache
X-Pubstack
X-BYPASS-REASON
X-ProxyCache-Status
X-Request-Time
X-Timing-Wait
Selected-Fe
X-WA-Info
Fastly-SSL
X-Adobe-Content
X-ProxyCache-Key
TWC-Privacy
TWC-Device-Class
TWC-Connection-Speed
TWC-Locale-Group
X-Hyper-Cache
X-PCL
X-Origin-Hint
TWC-GeoIP-Country
X-OCL
TWC-GeoIP-LatLong
X-Human
X-Sql-Count
Cache-Name
X-Sql-Duration-Ms
Webcakes-Region
Webcakes-App-Name
Webcakes-App-Version
X-No-Session
X-Proto
Property-Id
Country
X-Proxy-Build
Azure-InstanceId
Azure-RegionName
X-Access
Retry-After
Azure-Version
X-AIR-PT
Azure-SlotName
Azure-SiteName
X-Hosted-By
X-SayCDN-TTL
X-Origin-Date
X-AWS-Id
X-LJ-Flow-ID
X-LAGOON
X-Say-TTL
X-TNCMS
X-R9-Blue-Green-Version
X-S-Maxage
X-Say-Cacheable
X-VWS-Id
X-FW-Version
X-Loop
X-Server-W
X-Forwarded-Host
X-Format
X-Cache-Grace
X-Section
X-Revision
X-TT-LOGID
X-Xfnlog-Site
X-Alternate-Cache-Key
X-CCM
X-Cache-TTL-Remaining
X-Cluster
X-PERF
X-ShardId
X-ShopId
X-Shopify-Stage
X-Sorting-Hat-PodId
X-Status
X-Sorting-Hat-ShopId
X-Storefront-Renderer-Rendered
X-ApacheServer
Mn-Server-Ip
X-Webkit-Csp
X-Zipkin-Id
X-Proxied
X-Routing-Service
AMP-Access-Control-Allow-Source-Origin
Apigw-Requestid
X-Qloud-Router
X-Varnish-Grace
X-Is-Bot
X-Amz-Meta-S3cmd-Attrs
X-Rendered-As
X-SRV
X-Dc
S-Cnection
X-Info
X-Varnish-Server
X-FTR-Balancer
X-FTR-Cache-Status
X-FTR-DC
X-FTR-Realm
X-Via-CDN
X-FTR-Backend
X-Tec-Api-Origin
X-Tec-Api-Version
X-Tec-Api-Root
X-FTR-Backend-Server
X-Country-Code-Real
X-Cdn
Cache-Hits
X-GG-Cache-Date
X-Cache-Enabled
X-Microcachable
X-Content-Age
X-FTR-Expires
X-Detected-As
X-Cache-Host
X-Platform
X-Proxy-Cache-Status
Uber-Trace-Id
X-EdgeConnect-Cache-Status
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Amzn-Remapped-Content-Length
X-Backend-Host
X-Azure-Ref
X-CSRF-Token
Tracecode
X-Air-Hostname
X-NWS-UUID-VERIFY
X-App-Version
SD-X-WS
X-Cache-Var
X-Cache-Var-Map
Amp-Access-Control-Allow-Source-Origin
Akamai-GRN
X-Time-Microsecs
X-DynaTrace-JS-Agent
X-Oss-Storage-Class
X-Oss-Request-Id
X-Oss-Server-Time
X-Oss-Object-Type
X-Oss-Hash-Crc64ecma
X-ATG-Version
X-ServerID
X-Backend-TTL
HostName
X-Unique-Id
X-Tb
X-Trace-Id
X-Correlation-ID
X-RCS-CacheZone
X-BCube-Filmed-By
X-Debug-Cache
ServedBy
Backend
X-Cache-NGX
X-Cache-PHP
X-Cdn-Forward
X-GEO
X-Varnish-Hostname
X-Sucuri-ID
X-Cache-Backend
X-Akamai-Transformed
X-B3-SpanId
DSUID
SR-User-Adfree
Rendered-Blocks
Path
T-Server
Release
MD5-Digest
Expiry
Fastcgi-X-Cache-Version
DCR-Processing-Time-Ms
DCR-Decision-By
Thinkindot-CacheControl
BehaviorPad-Version
Instruction
Lfy
DB-Nickname
X-TX-ID
Mobile-Detection-Method
Meta-Geo-Continent
Machine
Odigeo-Trace-Id
X-External-Request-Id
X-Request-UUID
X-Processor
X-Rewrite-Enabled
X-Rojux
X-S
X-PBS-Appsvrname
X-PAYTM-SRV-ID
X-NAPM-TraceId
X-Origin-CC
X-Origin-TTL
X-Owner
X-S-Cookie
X-ScT
X-VG-WebCache
X-VG-WebServer
X-Vtex-Processado-Em
X-Vtex-Remote-Cache
X-Vdms-Version
X-Vdms-Path
X-Session-Fingerprint
X-SRCache-Key
X-Thinkindot-L3
X-Trv-Group
X-Matched-Rule
X-Location
X-A-Wwc
X-Aed
X-Application
X-ARC
X-A-Dgt
X-A-Dcw
Thinkindot-Control
X-A
X-A-Ccd
X-A-Dam
X-B-Cookie
X-Cache-NE
X-Ms-Version
X-Generated-On
X-Generation-Time
X-Level-Front-Cache
X-From
X-Destination
X-CF-Lambda-Fn
Xc-Version
X-Connection-Hash
X-D
Thinkindot-CacheControl-Type
X-CF-Lambda-Version
X-Ms-Request-Id
X-TA-CDN-Provider
X-CS
X-CACHE-KEY
Pagetype
X-JWT-State
Content-Disposition
X-HS-Content-Campaign-Id
X-Irp-Debug
X-Is-Gdpr
X-Core-Value
CacheControlHeader
C-Via
PB-RID
X-Mvc-Supplant-Cachable
PB-PID
X-Micro-Cache
On-Server
X-Has-Esi
X-Magnolia-Registration
Host-ID
X-Fetched-On
X-FC-Vary-Parameters
X-Device-Os
X-Fastly-Cache
Gh-Request-Id
X-NewRelic-App-Data
Fastly-Backend-Name
UCS
X-GeoIP-City
NGX
X-Geo-Header
Arc-Version
X-Cms-Context
X-Thanos
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-Skip-Cache
X-TrackingId
X-Tumblr-Pixel-3
X-Varnish-Cache-Hits
X-B3-Traceid
Server-Host
X-Reqid
X-Bip
AKAMAI
X-Cache-Bucket
X-OVcl
X-OVcl-Cache
User-Cache-Control
X-Adobe-Source
X-Developers
X-Developer
Wxu-Next-Region
Wxu-Next-Hostname
X-Dispatcher-Server
X-DPWN-IS-SECURE
V-Age
Web-Mar-Node
X-Clientip
Wxu-Next-Commit
X-DefHash
X-Envoy-Decorator-Operation
X-Cache-Id
X-CUA
X-Block-Status
X-Branch-Name
X-Csrf-Jwt
X-Cache-Info
X-Cache-Tags
X-Backend-State
X-CGP
X-DefElseHash
X-Clara-WADP
X-Azure-Ref-OriginShield
X-GoCache-CacheStatus
X-Scheme
X-Swa-Ws
X-User
X-Var-Ttl
X-Request-Host
X-Rebelmouse-Surrogate-Control
X-Policy
X-Ratelimit-Reset
X-Rebelmouse-Cache-Control
X-Variation
X-Varnish-Beresp-Grace
X-WADP-Cache
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-VServer
X-VarnishDD-TTL
X-Varnish-CookieHashed-On
X-Varnish-CookieINHashed-On
X-Varnish-Remaining-TTL
X-Platform-Server
X-Origin-Response-Time
X-Generated-In
X-GeoIP
X-Gzip
X-Generated-By
X-Gen-Mode
X-Eu-Site
X-Fastly-Backend
X-Fmm-Version
X-HN
X-Hnp-Log
X-Node-Id
X-Old-Content-Length
X-Origin
X-EC-Lua
X-LI-UUID
X-IP
X-Li-Fabric
X-Li-Pop
X-Esi-Check
X-NU-AKA-ACS-Version
Location
Cache-Host
CDCHOST
CDN-Cache
L5d-Success-Class
Magicmarker
NM-Fastcgi-Cache
Server-Ext
CloudFront-Viewer-Country
Adler-Geo
PFcat
Is-Eu
HA-Ipaddr
CDN-RequestCountryCode
CDN-RequestId
CDN-Uid
Cf-Device-Type
Fastly-SIE
Fastly-SWR
CDN-CachedAt
Ha-Gx-Prefs
CDN-EdgeStorageId
CDN-PullZone
Server-Hostname
Platform
Ssr
Sever-Int
X-APP-VERSION
X-ID
IsBot
Pramga
X-Request-URI
X-Cdn-Origin
X-Gamma-Serve
L
X-VG-TLSProxy
Locid
X-Origin-Expires
X-Varnish-Hits
X-Nginx-Cache-Key
X-Kinja-Server-Push
X-Method
True-Client-Country-4JS
X-Varnish-Beresp-Status
Rt-Fastcgi-Cache
X-LB-ID
Cf-Bgj
X-Varnish-Beresp-Ttl
X-Hash
Vix-Hermes-Req-Id
X-Slack-Backend
X-Cache-Expires
X-Cache-Debug
X-Sn-Servicetimems
X-SIPLIST1
X-CLOUD-TRACE-CONTEXT
Apple-News-Services-Request-Url
X-Aicache-OS
X-Goog-Meta-Goog-Reserved-File-Mtime
Fastly-Drupal-HTML
Apple-News-Services-Parsed-Url
Apple-News-Services-Handled
Apple-News-Services-Host
Origin
X-Cache-Date
X-Nc
X-NCache
X-Unique-ID
X-Loc
X-Servername
X-Via-Poph
Esi-Enabled
X-Mvc-Supplant-OutputCached
X-PF-Uncompressing
X-Via-Popv
X-Via-Popn
X-Core-Mission
X-Erf-Stays-Bingo-Pdp-Web
Sid
X-Refresh
X-Request-Start
X-Varnish-Url
Who
Country-Code
Pics-Label
Geo-Info
Url
X-Epic-Correlation-Id
X-Tb-Optimization-Total-Bytes-Saved
X-FireWall-Protection
X-Cache-Remote
X-NC
X-Varnish-Cacheable
Req-Svc-Chain
X-Planisys-CDN-Cache
X-Response-By
X-Dynatrace
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
X-TraceId
Xkeyi7
X-RateLimit-Limit
X-Error
S-Rt
X-Proxy-Cachei7
Content-Secure-Policy
Source
N-Cache
X-BBXSRF
Cmsid
Cmstype
Filterid
X-Webkit-CSP-Report-Only
X-B3-Spanid
HitType
Server-Ttl
X-DC
X-Srv
X-Host-Name
Geoip-Latitude
Svr
X-HS-Status
X-Served-From
Kp-EeAlive
GeoIp-Country-Code
X-Cache-2
X-Sucuri-Cache
Cross-Origin-Window-Policy
Cache-Key
A
VivaBuild
MIME-Version
X-Cache-ASPX
X-Vcl-Version
Tcn
X-Varnish-Authentication
X-LiteSpeed-Cache-Control
Cteonnt-Length
Ohc-File-Size
X-Cc-Req-Id
X-Cc-Via
X-Contensis-Viewer-Groups
D-Cc-Upstream
Viewtype
X-URL
X-Svr
M-TraceId
X-Wa
X-Servedbyhost
X-HostName
X-Oracle-Dms-Rid
X-Air-Source
NGB
TDXMobile
X-Esi
X-Server-IP
X-Li-Proto
Cross-Origin-Opener-Policy
Arc-Country
Server-ID
CACHE
NtCoent-Length
X-CDN-Forward
SID
X-Nyt-Route
X-LI-Proto
X-Origin-Time
X-Vgn-Hpd-Reason
X-FPC
X-Cache-Config
X-API-Version
X-Gdpr
X-RAMCache
X-HOST
X-Cs
X-WA
X-VC
X-Vc
Request-ID
X-SN
X-Check-Cacheable
Resin-Trace
X-ServedByHost
X-UA
X-Geo
X-Viewer-Country
X-Webstats-RespID
X-Newrelic-Synthetics
X-Service
Server-Id
X-Internal-Host
X-DI
X-NodeID
X-DW
X-TIM-N
X-RPM
X-CCDN-Origin-Time
X-Hcs-Proxy-Type
X-DSS
X-SB
X-CCDN-CacheTTL
X-RSL
X-RPS
X-DB
X-VCL-Version
Cache-Provider
DataCenter
X-SaId
Ohc-Cache-HIT
X-NGENIX-Cache
X-PHP-Backend
Hostname
X-JoinUs
Mime-Version
GeoIP-Latitude
X-Edge-Location
Srv
GeoIP-Country-Code
X-SD-PageType
X-NGINX-Cache
XServer
X-Render-Time
X-Extlb
X-App
X-Forwarded-Site
FSS-Cache
ProcessTime
X-BBC-Edge-Cache-Status
X-Action
CF-Cached-On
X-FTR-Cache-Host
X-CF-Powered-By
X-Oss-Cdn-Auth
EpKe-Alive
X-Via-NSCOPI
X-Fpc
X-Provided-By
X-Ua
X-Dynatrace-Js-Agent
X-Bc-Bl
X-Date
X-Proxy-Upstream
X-FORWARDED-FOR
X-Req
X-Depends-On
X-PJAX-URL
Surrogated-Key
W
LB
Upgrade-Insecure-Requests
X-Worker
X-Auto-Login
Mail-Subject
Processtime
X-VC-Cache
We-Hiring
X-Region-Sid
Memcached
X-Accel-Expires-Debug
X-Swift-Error
X-HITS
X-Cdn-Request-ID
Env
X-APP
X-MSEdge-Features
CDN
X-RateLimit-Limit-Second
X-MSEdge-Flight
X-RateLimit-Remaining-Second
X-UnsetCookies
Cdn
X-Cluster-Node
X-Fastly-Backend-Reqs
X-TIME
Proxy-Connection
X-ZONE
X-CSRF-TOKEN
X-Dw-Trace-Id
X-BACKEND-TTL
X-Ftr-Cache-Host
X-Client-Ip
X-CACHE-AGE
X-Flog
X-Hello
X-ABtesting
X-Men
X-Fastly-Request-Id
X-Sigma-Backend
X-Air-Trace-Id
Memory
X-Rocket-Build-Number
X-IN-APIGATEWAY
PICS-Label
Time
Datacenter
X-Sigma
X-BBC-Origin-Response-Status
X-Parent-Response-Time
X-IN-APIGATEWAYSSL
X-Cache-Tag
Dnion-Transfer-Encoding
X-Akamai-Pragma-Client-IP
X-Acquia-Application-UUID
X-Presslabs-Stats
Media-Length
X-Acquia-Application-Trace
X-Pf-Uncompressing
X-Acquia-Purge-Tags
X-Oracle-DMS-ECID
VNS-Age
VNS-Cache
CPC-Cache
CPC-Age
X-Pad
Vha6-Origin
X-Acquia-Site
X-Zone
Epwk-X-Cache
X-Via-PopH
OT-Force-Account-Verify
X-Via-PopN
X-LiteSpeed-Tag
X-Via-PopV
Cf-Ipcountry
Xet-Cookie
X-ND-Cache
WZWS-RAY
X-Varnish-Beresp-TTL
X-MiniProfiler-Ids
X-Request-Url
X-ElasticPress-Search
X-Varnish-URL
X-Snapshot-Date
X-ElasticPress-Query
X-Request-URL
X-Csrf-Token
X-Ms-Meta-Originalurl
X-Ms-Meta-Staticbatchstarttime
X-Akamai-ERRuleID
X-Akamai-ERPolicy
X-Lb-Id
X-Vcache
X-ServerName
CountryCode
X-Debug-Cache-Fetch
X-C
X-B3-Parentspanid
Ohc-Response-Time
X-Litespeed-Cache-Control
Content-Script-Type
My-App
Fastcgi-Cache-TTL
Content-Style-Type
State
URI
Inserted-Into-Cache-At
Environment
NnCoection
X-Storefront-Renderer-Verified
X-Redis-Count
X-Redis-Duration-Ms
Phost
X-Traceid
X-Tid
X-Debug-Cache-Store
X-Amz-Meta-Cb-Modifiedtime