Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
CF-RAY
Cf-Request-Id
CF-Cache-Status
Last-Modified
X-XSS-Protection
Accept-Ranges
Link
Pragma
Expect-CT
ETag
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
X-UA-Compatible
Alt-Svc
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Request-Id
Access-Control-Allow-Credentials
X-Runtime
X-AspNet-Version
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Permitted-Cross-Domain-Policies
X-Check
X-Xss-Protection
X-Cache-Status
X-Generator
X-Request-ID
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
X-Iinfo
X-Content-Security-Policy
Content-Encoding
X-CDN
X-Ua-Compatible
X-Envoy-Upstream-Service-Time
Status
Feature-Policy
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
X-AspNetMvc-Version
Access-Control-Max-Age
X-Via
Upgrade
Keep-Alive
X-Ws-Request-Id
X-Age
X-Turbo-Charged-By
X-AH-Environment
X-Robots-Tag
Request-Context
X-Proxy-Cache
EagleId
X-Cache-Group
X-Backend
Server-Timing
X-Hacker
X-Amz-Request-Id
Report-To
X-Server
Host-Header
X-Amz-Id-2
X-Server-Powered-By
Grace
X-UA-Device
X-Nginx-Cache-Status
X-Dns-Prefetch-Control
X-LiteSpeed-Cache
X-Varnish-Cache
X-Rq
Ali-Swift-Global-Savetime
X-Swift-SaveTime
X-Swift-CacheTime
X-Page-Speed
Cf-Railgun
X-Pingback
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
NEL
X-Amz-Version-Id
X-OneAgent-JS-Injection
Xkey
X-Cache-Spec
X-WebKit-CSP
Allow
X-Backend-Server
X-Host
X-Vhost
X-CST
X-Device
EagleEye-TraceId
X-ASPNET-VERSION
X-Server-Id
Surrogate-Control
Request-Id
X-Dispatcher
X-Node
Accept-CH
Content-Location
X-Response-Time
X-Akam-SW-Version
Accept-CH-Lifetime
X-Ruxit-JS-Agent
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Kinja-Server-Push
X-Template
X-Language
X-Ac
X-Application-Context
X-Country
X-Readtime
X-Cache-Lookup
X-Cloud-Trace-Context
X-Mod-Pagespeed
MS-Author-Via
X-B3-TraceId
X-Origin-Cache
Rating
X-Cnection
X-MS-InvokeApp
X-Url
X-HW
Accept-Ch
X-ORACLE-DMS-ECID
X-TtlSet
X-PC
X-Vname
X-Clacks-Overhead
X-ESI
X-GitHub-Request-Id
Edge-Control
Accept-Ch-Lifetime
X-FastCGI-Cache
X-Trace
X-Sol
Display
X-Middleton-Response
Pagespeed
Response
X-Middleton-Display
X-Content-Type
X-D2id
X-Vcap-Request-Id
X-GoogleNews-Bot
X-Exp-Variant
X-Exp-Id
X-Cdn-Fetch
X-Kinja
X-Kinja-Build
X-Use-Magma
X-Kinja-Server
X-Kinja-Revision
Verso
Arr-Disable-Session-Affinity
X-Buckets
X-Goog-Hash
X-Server-Name
X-Rack-Cache
X-Country-Code
Service-Worker-Allowed
X-Oneagent-Js-Injection
X-Navigation-Version
X-VARITI-CCR
X-Abt-Application-Version
X-Varnish-TTL
X-Amz-Rid
Pinterest-Version
X-ORACLE-DMS-RID
Pinterest-Generated-By
X-Pinterest-Rid
X-Powered-By-Plesk
X-Cache-TTL
X-Client-IP
SPRequestGuid
X-SharePointHealthScore
SPRequestDuration
SPIisLatency
X-Fastly-Request-ID
X-Release
X-MSEdge-Ref
X-Dw-Request-Base-Id
X-Element-Page-Cache
Fastly-Restarts
X-NF-Request-ID
X-Cached
X-TTL
Mrf-Cache-Status
MRF-Tech
X-B3-TraceId-Primal
Public-Key-Pins
X-Webkit-CSP
RTSS
X-Origin-Upstream-Status
AR-PoweredBy
Ar-Sid
AR-ATIME
AR-Request-ID
AR-CACHE
X-Edge
X-Px
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Access-Control-Request-Method
X-LLID
Fusion-Deployment-Id
Fusion-Content-Source
Fusion-Source
Fusion-Component-Id
Fusion-Content-Id
Fusion-Template-Id
X-Ttl
X-Powered-CMS
X-Ezoic-Cdn
Content-MD5
X-Upstream
X-HP-Webp
X-Jurisdiction
X-Pinterest-Direct
X-Amz-Server-Side-Encryption
X-ECACHE
X-Mid
X-MCACHE
Charset
X-Recruiting
X-Content-Digest
X-Mg-S
X-Aspnetmvc-Version
S
Cache-Tag
X-PressLabs-Stats
X-Version
MicrosoftSharePointTeamServices
TCN
X-Debug
Fastcgi-Cache
Front-End-Https
X-Content-Security-Policy-Report-Only
X-T
X-Grace
Filters
X-Id
X-Kinsta-Cache
Cache-Tags
Server-Node
Edge-Cache-Tag
X-Forwarded-Proto
X-XRDS-Location
X-Yandex-Sdch-Disable
X-Accel-Expires
X-Amzn-Trace-Id
X-Logged-In
X-Correlation-Id
X-Forwarded-For
Nginx-Cache
Server-Name
Surrogate-Key
X-Varnish-Age
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-Cache-Key
Powered-By-ChinaCache
TP-Cache
X-B3-Sampled
TP-L2-Cache
X-Hits
X-Request-Handler-Origin-Region
X-Ser
X-Request-Received
X-Request-Processing-Time
X-Microsite
X-Server-ID
X-DIS-Request-ID
X-DynaTrace
X-Az
X-AppVersion
X-Shield-Request-Id
X-Activity-Id
X-Amz-Replication-Status
X-HS-Hub-Id
X-F-Cache
X-HS-Cache-Config
X-HS-Combine-CSS
X-HS-Content-Id
Accept-Charset
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-GUploader-UploadID
X-Goog-Metageneration
X-FTR-Request-ID
X-Goog-Generation
X-Goog-Stored-Content-Length
X-Git-Hash
X-Origin-Server
X-Respond-Thread
X-Hostname
X-Geo-Country
X-LB-Cache
X-Upgrade-Enabled
X-DataDome
Section-Io-Cache
X-Rid
X-Frontend
Cache
X-Ruxit-Js-Agent
Access-Control-Allow-Method
X-Cache-Age
X-Mobile-URL
Alternate-Protocol
Cleartype
Host
MS-CV
Paypal-Debug-Id
X-XRDS-LOCATION
Healthy
X-IPLB-Instance
X-Content-Options
X-Type
ServerID
X-AOL-HN
X-Whom
X-WebKit-CSP-Report-Only
X-Varnish-Backend
Payment
X-App-Environment
X-Cache-Action
X-Seen-By
X-Signature
X-Aspnet-Duration-Ms
X-B-Cache
X-Debug-Info
X-Providence-Cookie
X-Request-Guid
X-Route-Name
X-TT
X-Is-Crawler
X-Flags
X-VCache
Fastcgi-Useragent
X-Page-Id
X-Jobs
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Source
X-Mobile
X-NWS-LOG-UUID
X-N
X-Time
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-Browser-Type
X-Load-Cache
X-Cached-By
X-RateLimit-Remaining
X-Via-JSL
Nel
X-Litespeed-Cache
X-Akamai-Edgescape
Version
X-FB-Debug
X-Daa-Tunnel
X-Cache-Rule
X-Cache-Operation
Viewport
X-Fastcgi-Cache
DynaTrace
X-Accel-Buffering
Refresh
X-Rule
X-Response-Served-From
X-Original-Request-Id
DC
X-Drupal-Cache-Tags
X-Zen-Fury
X-Proxy
X-Framework
X-RemovedCookies
X-Cacheable-TTL
Ms-Operation-Id
X-Instance
X-RTag
X-ProcessESI
X-Real-IP
Access-Control-Request-Headers
X-Tt-Trace-Tag
GEO-INFO
Realpath
X-Tt-Trace-Host
X-HTML-Minification-Powered-By
X-Cache-Time
X-Contextid
Referer-Policy
X-Region
X-UUID
X-Yottaa-Metrics
X-Page-View
X-Drupal-Cache-Contexts
X-Distributor
X-Wix-Request-Id
X-Yottaa-Optimizations
X-Environment-Context
VIX-Pulpo-Node
Countrycode
Eomportal-Instance
X-Cache-Expired-At
X-FW-Hash
X-FW-Dynamic
X-FW-Serve
X-FW-Server
X-FW-Type
VIX-Pulpo-Upstream-Status
X-FW-Static
X-L-Path
X-B
Node
X-Node-Name
X-Cluster-Name
Liferay-Portal
X-G
X-Cache-Control
X-Tumblr-Pixel-1
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Content-Powered-By
X-IPS-LoggedIn
X-Cache-Hit
X-User-Agent
X-Tumblr-Pixel-2
Server-Info
Webserver
X-Amz-Meta-S3cmd-Attrs
X-Varnish-Ttl
X-Ratelimit-Limit
Section-Io-Id
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
From-Origin
Section-Io-Origin-Status
X-App-Server
X-Pass-Why
Protected
SRV
X-Revision
X-Oracle-Dms-Rid
Ec-Rule-Version
X-Protected-By
X-FireWall-Port
X-Backend-Name
X-Cache-Server
Frame-Options
Cache-Status
X-UPSTREAM-Address
X-Hl-Ver
CF-IPCountry
X-Mode
X-Endurance-Cache-Level
Meta-Geo
X-Hyper-Cache
X-ES-SERVER
X-RN-RSRV
X-Handled-By
X-Soup
Retry-After
X-Locale
X-Www-Served-By
X-Site-Version
X-Forwarded-Host
X-Storage
X-NYM-Debug-Backend
X-FB-TRIP-ID
X-Web-Node
X-Adobe-Content
X-Varnishpool
Country
Cache-Tv-Group
X-Cache-Grace
X-Human
X-Adobe-Loc
Decoy-Debug-Key
Decoy-Debug-Status
Fastly-SSL
X-Pubstack
X-Be
Decoy-Debug-TTL
Cache-Name
Webcakes-Region
X-Format
Webcakes-App-Name
TWC-Privacy
Azure-InstanceId
X-Access
X-PCL
Azure-SiteName
Azure-RegionName
Azure-Version
Azure-SlotName
X-Labrador-Cache-Channel
TWC-Locale-Group
TWC-GeoIP-Country
X-Origin-Hint
X-Origin-Date
X-OCL
X-ProxyCache-Status
Property-Id
Selected-Fe
TWC-Device-Class
X-Proxy-Build
X-ProxyCache-Key
TWC-Connection-Speed
X-Redis-Cache
X-Say-Cacheable
X-Proto
X-Timing-Wait
X-SayCDN-TTL
X-Section
X-TT-LOGID
X-UA-Device-Type
X-Say-TTL
X-Uri
TWC-GeoIP-LatLong
X-PHP-Host
X-BYPASS-REASON
Webcakes-App-Version
X-Via-CDN
X-Sql-Duration-Ms
X-LAGOON
X-Server-W
X-FW-Version
X-Via-Fastly
X-ApacheServer
X-AIR-PT
X-WA-Info
X-No-Session
X-Sql-Count
X-PERF
X-S-Maxage
X-TNCMS
X-FTR-DC
X-Request-Time
X-FTR-Realm
X-Hosted-By
X-AWS-Id
S-Cnection
X-Loop
X-FTR-Cache-Status
X-Ratelimit-Remaining
X-Country-Code-Real
X-FTR-Backend
X-LJ-Flow-ID
X-R9-Blue-Green-Version
X-Qloud-Router
X-FTR-Backend-Server
X-VWS-Id
X-FTR-Balancer
Mn-Server-Ip
Xserver
X-Status
X-MP-GENERATED-AT
X-Cluster
X-Alternate-Cache-Key
X-ShopId
X-Sorting-Hat-PodId
X-Dynatrace
X-Routing-Service
X-Proxied
X-ShardId
Cache-Hits
X-Shopify-Stage
X-CCM
X-Sorting-Hat-ShopId
X-Storefront-Renderer-Rendered
X-Zipkin-Id
X-FTR-Expires
X-Cache-TTL-Remaining
X-Tec-Api-Root
X-Tec-Api-Version
X-Tec-Api-Origin
X-Xfnlog-Site
X-Cache-Var
X-Cache-Var-Map
X-Rendered-As
X-Is-Bot
AMP-Access-Control-Allow-Source-Origin
X-Webkit-Csp
X-Air-Hostname
X-Dc
X-Device-Type
X-Detected-As
X-Unique-Id
X-Cdn
Apigw-Requestid
X-Info
X-Cache-Host
X-EdgeConnect-Cache-Status
X-Amz-Apigw-Id
X-Amzn-RequestId
X-SRV
X-Amzn-Remapped-Content-Length
X-Nginx-Cache
X-Microcachable
SD-X-WS
X-Debug-IsConnected
X-Cache-Enabled
X-Debug-IsPreview
X-GEO
X-Content-Age
Tracecode
X-APP-VERSION
X-Time-Microsecs
X-Cache-Backend
X-Platform
X-Varnish-Grace
X-Backend-TTL
X-Varnish-Server
X-DynaTrace-JS-Agent
X-Azure-Ref
X-ServerID
X-Backend-Host
X-GG-Cache-Date
X-Erf-Stays-Bingo-Pdp-Web
Amp-Access-Control-Allow-Source-Origin
Uber-Trace-Id
DSUID
X-Tb
X-Oss-Server-Time
X-Oss-Object-Type
X-Oss-Storage-Class
X-Oss-Request-Id
X-Oss-Hash-Crc64ecma
X-BCube-Filmed-By
X-NewRelic-App-Data
Akamai-GRN
X-Correlation-ID
X-Proxy-Cache-Status
Backend
PB-PID
Arc-Version
X-CSRF-Token
X-ATG-Version
X-Sucuri-ID
PB-RID
X-Magnolia-Registration
X-Akamai-Transformed
X-Trace-Id
ServedBy
Rendered-Blocks
SR-User-Adfree
X-B-Cookie
X-Trv-Group
T-Server
X-Thinkindot-L3
X-GeoIP-City
Release
Pramga
X-CF-Lambda-Fn
Path
X-SRCache-Key
Expiry
X-Cache-NE
DCR-Processing-Time-Ms
X-Origin-Response-Time
Thinkindot-CacheControl
X-ARC
X-A-Dcw
X-Varnish-Cache-Hits
X-Vtex-Processado-Em
X-Vtex-Remote-Cache
X-A-Dam
DCR-Decision-By
X-A
X-A-Ccd
X-A-Dgt
X-A-Wwc
Thinkindot-Control
Thinkindot-CacheControl-Type
X-Application
X-Vdms-Path
X-Vdms-Version
X-Aed
X-VG-WebServer
X-VG-WebCache
X-ScT
X-Session-Fingerprint
X-D
X-Destination
X-Device-Os
Lfy
Machine
X-Origin-TTL
X-Origin-CC
X-S-Cookie
BehaviorPad-Version
Fastcgi-X-Cache-Version
X-From
X-Level-Front-Cache
X-Generated-On
X-Fetched-On
X-Location
X-External-Request-Id
Instruction
X-Matched-Rule
MD5-Digest
X-Connection-Hash
X-Request-UUID
X-Processor
X-Rojux
X-S
X-Generation-Time
Xc-Version
X-CF-Lambda-Version
X-Rewrite-Enabled
Mobile-Detection-Method
Meta-Geo-Continent
Odigeo-Trace-Id
X-PAYTM-SRV-ID
X-PBS-Appsvrname
X-RCS-CacheZone
X-Varnish-Hostname
X-Cache-NGX
X-Cache-PHP
Fastly-Backend-Name
Gh-Request-Id
Ha-Gx-Prefs
Pagetype
Host-ID
L5d-Success-Class
Ssr
HA-Ipaddr
X-Cache-Date
X-Eu-Site
X-Mvc-Supplant-Cachable
X-FC-Vary-Parameters
X-Csrf-Jwt
X-Node-Id
X-OVcl-Cache
X-OVcl
X-Micro-Cache
X-JWT-State
X-HS-Content-Campaign-Id
X-Has-Esi
X-GeoIP
X-Irp-Debug
X-Is-Gdpr
X-Generated-In
Cf-Device-Type
X-Owner
X-CGP
X-Backend-State
X-Thanos
X-Cache-Bucket
X-Azure-Ref-OriginShield
X-Tumblr-Pixel-3
X-VServer
X-User
X-Swa-Ws
X-Geo-Header
X-Cdn-Origin
X-Skip-Cache
X-Reqid
X-Sn-Servicetimems
X-Cache-Info
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
UCS
X-Bip
C-Via
Cache-Host
X-Adobe-Source
X-B3-Traceid
AKAMAI
X-Ms-Version
X-Ms-Request-Id
X-Cache-Remote
CacheControlHeader
X-NWS-UUID-VERIFY
X-Debug-Cache
DB-Nickname
X-CUA
X-Cache-Tags
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Clientip
X-Core-Value
X-TrackingId
X-Cms-Context
Wxu-Next-Hostname
Server-Hostname
Server-Host
Sever-Int
V-Age
X-Developer
Wxu-Next-Commit
Wxu-Next-Region
X-VarnishDD-TTL
X-Origin-Expires
X-Nginx-Cache-Key
X-IP
X-Policy
User-Cache-Control
X-Request-Start
X-Request-Host
X-HN
X-Generated-By
X-Fastly-Backend
X-Envoy-Decorator-Operation
X-Request-URI
X-Varnish-Hits
X-Var-Ttl
X-Fastly-Cache
Server-Ext
X-Developers
X-Scheme
On-Server
PFcat
L
Locid
Magicmarker
Content-Disposition
NGX
CloudFront-Viewer-Country
X-ID
X-NC
Is-Eu
IsBot
X-Esi-Check
CDCHOST
X-Gen-Mode
X-Hnp-Log
X-Gzip
X-GoCache-CacheStatus
X-DPWN-IS-SECURE
X-Fmm-Version
X-Dispatcher-Server
Apple-News-Services-Host
Cf-Bgj
Apple-News-Services-Handled
X-Clara-WADP
Location
X-DefElseHash
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
X-DefHash
X-Cache-Id
X-Li-Fabric
X-Servername
X-SIPLIST1
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
X-Ratelimit-Reset
X-TX-ID
Platform
X-Varnish-Remaining-TTL
X-Varnish-CookieINHashed-On
X-Varnish-CookieHashed-On
X-Varnish-Beresp-Grace
X-Platform-Server
X-Origin
X-Cache-Expires
X-Loc
X-LI-UUID
X-Li-Pop
X-Method
Fastly-SWR
X-Old-Content-Length
X-WADP-Cache
X-NU-AKA-ACS-Version
Fastly-SIE
X-VG-TLSProxy
X-Variation
X-Block-Status
Adler-Geo
NM-Fastcgi-Cache
True-Client-Country-4JS
Origin
Web-Mar-Node
Rt-Fastcgi-Cache
X-Branch-Name
Vix-Hermes-Req-Id
HostName
X-Host-Name
CDN-Uid
X-Hash
X-Goog-Meta-Goog-Reserved-File-Mtime
CACHE
X-Gamma-Serve
Fastly-Drupal-HTML
X-Varnish-Beresp-Ttl
X-Cache-Debug
CDN-RequestId
X-Varnish-Beresp-Status
CDN-PullZone
X-Slack-Backend
CDN-Cache
X-NAPM-TraceId
CDN-CachedAt
CDN-RequestCountryCode
CDN-EdgeStorageId
X-EC-Lua
Url
X-Varnish-Url
X-PF-Uncompressing
X-Cdn-Forward
X-Response-By
X-NCache
X-B3-Spanid
X-Varnish-Cacheable
S-Rt
X-Core-Mission
X-B3-SpanId
Xkeyi7
X-App-Version
X-TA-CDN-Provider
X-Aicache-OS
X-Refresh
X-Proxy-Cachei7
X-CS
X-Mvc-Supplant-OutputCached
X-CACHE-GROUP
Cross-Origin-Window-Policy
N-Cache
X-LB-ID
Sid
X-BBXSRF
Pics-Label
X-Cache-2
X-FireWall-Protection
Content-Secure-Policy
X-Sucuri-Cache
Ohc-File-Size
X-Cc-Req-Id
X-Via-Poph
X-Cc-Via
X-Via-Popv
Esi-Enabled
X-Via-Popn
X-CDN-Forward
X-Cache-ASPX
Cteonnt-Length
D-Cc-Upstream
X-Varnish-Authentication
X-Contensis-Viewer-Groups
X-Tb-Optimization-Total-Bytes-Saved
X-Epic-Correlation-Id
X-Svr
X-Error
X-Cs
X-Srv
X-Servedbyhost
Source
X-Server-IP
X-Unique-ID
X-Wa
MIME-Version
X-Webkit-CSP-Report-Only
X-TraceId
X-DC
GeoIp-Country-Code
X-API-Version
X-Cache-Config
HitType
Req-Svc-Chain
Who
X-Nyt-Route
Geoip-Latitude
X-Gdpr
X-FPC
X-Origin-Time
X-Nc
X-RateLimit-Limit
Country-Code
X-VC
X-SN
Server-Ttl
X-HS-Status
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
X-Planisys-CDN-Cache
X-NGINX-Cache
Hostname
X-Fastly-Request-Id
Ohc-Cache-HIT
X-URL
X-TIME
XServer
X-LI-Proto
X-NodeID
X-Webstats-RespID
X-LiteSpeed-Cache-Control
X-SB
X-CACHE-KEY
Geo-Info
Kp-EeAlive
Svr
Server-ID
X-Esi
Cmstype
Cmsid
X-VCL-Version
X-Check-Cacheable
X-SD-PageType
X-Ua
X-Served-From
VivaBuild
X-Render-Time
Viewtype
NtCoent-Length
X-HOST
X-BBC-Edge-Cache-Status
A
EpKe-Alive
SID
X-Vgn-Hpd-Reason
X-Viewer-Country
X-Vcl-Version
Request-ID
Cache-Key
X-UA
X-Worker
X-RAMCache
X-DB
Cache-Provider
X-DI
X-RPS
X-Hcs-Proxy-Type
X-CCDN-Origin-Time
X-TIM-N
Server-Id
Resin-Trace
X-CCDN-CacheTTL
M-TraceId
X-RPM
X-DW
X-Auto-Login
X-RSL
X-Li-Proto
X-DSS
X-Ftr-Cache-Host
X-CF-Powered-By
Cross-Origin-Opener-Policy
Arc-Country
GeoIP-Latitude
TDXMobile
ProcessTime
GeoIP-Country-Code
X-Air-Source
X-CSRF-TOKEN
X-Dynatrace-Js-Agent
X-App
CDN
Processtime
X-Internal-Host
Upgrade-Insecure-Requests
X-Cluster-Node
X-Action
Srv
X-Newrelic-Synthetics
X-FTR-Cache-Host
X-Oss-Cdn-Auth
Filterid
X-WA
X-Fpc
Tcn
X-ServedByHost
X-Vc
Mime-Version
CF-Cached-On
X-CLOUD-TRACE-CONTEXT
X-Geo
X-BBC-Origin-Response-Status
X-FORWARDED-FOR
X-Service
Datacenter
Proxy-Connection
OT-Force-Account-Verify
X-HITS
X-HostName
Cdn
X-Via-PopN
X-MSEdge-Flight
NGB
X-Via-PopH
X-Dw-Trace-Id
X-ND-Cache
X-MSEdge-Features
WZWS-RAY
X-Via-PopV
X-Fastly-Backend-Reqs
X-BACKEND-TTL
DataCenter
X-Client-Ip
X-CACHE-AGE
X-Flog
X-ABtesting
X-Parent-Response-Time
X-IN-APIGATEWAYSSL
X-Forwarded-Site
X-IN-APIGATEWAY
X-Via-NSCOPI
FSS-Cache
PICS-Label
X-Hello
X-Cache-Tag
X-Lb-Id
Dnion-Transfer-Encoding
X-SaId
X-Akamai-Pragma-Client-IP
X-NGENIX-Cache
X-JoinUs
X-PHP-Backend
X-Extlb
X-Presslabs-Stats
X-Oracle-DMS-ECID
W
Vha6-Origin
X-Pf-Uncompressing
X-Cdn-Request-ID
X-Edge-Location
X-Provided-By
Media-Length
X-LiteSpeed-Tag
Mail-Subject
X-Swift-Error
X-VC-Cache
Epwk-X-Cache
LB
X-MiniProfiler-Ids
X-ZONE
X-UnsetCookies
We-Hiring
X-PJAX-URL
X-Proxy-Upstream
X-Accel-Expires-Debug
X-Bc-Bl
X-Date
X-Pad
URI
X-RateLimit-Limit-Second
X-Req
Memcached
X-Region-Sid
X-RateLimit-Remaining-Second
X-Depends-On
Surrogated-Key
Cf-Ipcountry
Memory
Time
X-APP
X-Rocket-Build-Number
X-Sigma
Env
X-Sigma-Backend
X-Varnish-URL
X-Akamai-Request-ID
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-Varnish-Beresp-TTL
X-Request-Url
X-Request-URL
X-Acquia-Purge-Tags
X-ElasticPress-Query
X-Acquia-Site
X-Akamai-ERRuleID
X-B3-Parentspanid
X-Csrf-Token
X-Akamai-ERPolicy
X-Vcache
Xet-Cookie
X-Ms-Meta-Originalurl
X-Ms-Meta-Staticbatchstarttime
X-ElasticPress-Search
CountryCode
X-Amz-Meta-Cb-Modifiedtime
X-Men
X-Zone
X-ServerName
Edge-Copy-Time
X-Litespeed-Cache-Control
Inserted-Into-Cache-At
X-Tid
X-C
X-Air-Trace-Id
X-Debug-Cache-Store
Content-Script-Type
X-Acc-Debug-Context
X-Via-Edge
X-Acc-Rdl
Content-Style-Type
Ohc-Response-Time
NnCoection
X-Traceid
X-Snapshot-Date
Phost
X-Storefront-Renderer-Verified
X-Debug-Cache-Fetch
Environment
X-Redis-Duration-Ms
X-Redis-Count
X-Via-SSL