Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Accept-Ranges
Pragma
X-Powered-By
CF-RAY
ETag
Link
Expect-CT
X-XSS-Protection
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Xss-Protection
X-Varnish
X-Request-Id
CF-Cache-Status
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-AspNet-Version
X-Download-Options
X-Runtime
Access-Control-Allow-Credentials
X-Drupal-Cache
X-Adblock-Key
X-Check
Alt-Svc
X-Cacheable
X-Generator
Content-Security-Policy-Report-Only
X-DNS-Prefetch-Control
X-Cache-Status
X-AspNetMvc-Version
X-Permitted-Cross-Domain-Policies
X-Iinfo
X-Template
Status
X-Language
Timing-Allow-Origin
X-Content-Security-Policy
X-Buckets
Content-Encoding
X-Kinja-Server-Push
X-CDN
Xkey
X-Turbo-Charged-By
Upgrade
X-Type
Access-Control-Expose-Headers
Keep-Alive
WPE-Backend
X-Pass-Why
Access-Control-Max-Age
X-Backend
X-AH-Environment
CF-Ray
X-Cache-Group
X-Drupal-Dynamic-Cache
X-Age
X-Ua-Compatible
X-Server
X-Via
X-Request-ID
X-Proxy-Cache
Grace
X-Pingback
X-Nginx-Cache-Status
X-Amz-Id-2
X-Amz-Request-Id
X-Server-Powered-By
X-Robots-Tag
X-Hacker
X-UA-Device
X-Varnish-Cache
EagleId
X-Page-Speed
Request-Context
X-LiteSpeed-Cache
Cf-Railgun
X-Envoy-Upstream-Service-Time
X-Swift-CacheTime
X-Swift-SaveTime
X-CST
Ali-Swift-Global-Savetime
X-WebKit-CSP
X-Server-Id
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Device
X-Amz-Version-Id
X-Ac
X-OneAgent-JS-Injection
X-Node
Server-Timing
Feature-Policy
X-Cnection
X-Iejgwucgyu
X-Response-Time
X-Rq
Allow
X-Cache-Lookup
Content-Location
Report-To
X-Backend-Server
EagleEye-TraceId
X-Readtime
Surrogate-Control
X-Host
X-Application-Context
Request-Id
X-Url
X-ORACLE-DMS-ECID
X-Rack-Cache
P3p
X-Origin-Cache
X-Clacks-Overhead
NEL
Rating
X-FTR-Request-ID
X-Country
X-Cloud-Trace-Context
X-Country-Code
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-DataDome
X-Instart-Request-ID
X-Cdn
X-Px
X-Vhost
X-MS-InvokeApp
X-VARITI-CCR
Charset
X-Mod-Pagespeed
X-Ruxit-JS-Agent
Accept-CH
X-Varnish-TTL
Edge-Control
X-Goog-Hash
Arc-Version
PB-PID
PB-RID
X-Mobile-Rewrite
X-DynaTrace
X-GitHub-Request-Id
Verso
X-Version
X-ESI
X-PC
X-Vname
X-TtlSet
X-Server-Name
Pinterest-Generated-By
X-TTL
X-D2id
X-Powered-By-Plesk
X-Kinja-Server
X-Kinja-Revision
X-Exp-Variant
X-Cdn-Fetch
X-GoogleNews-Bot
X-Kinja
X-Exp-Id
X-Kinja-Build
X-Use-Magma
X-B3-TraceId
X-Cached
X-Origin-Upstream-Status
SPRequestGuid
X-Dispatcher
X-Powered-CMS
X-Upstream-Env
X-Abt-Application-Version
X-T
X-SharePointHealthScore
X-ORACLE-DMS-RID
RTSS
MS-Author-Via
Accept-CH-Lifetime
X-Recruiting
X-Trace
Public-Key-Pins
X-Navigation-Version
X-Shield-Request-Id
Content-MD5
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Amz-Rid
SPRequestDuration
SPIisLatency
X-DIS-Request-ID
AR-ATIME
X-Fastly-Request-ID
AR-PoweredBy
AR-CACHE
X-HW
X-Client-IP
X-Oracle-Dms-Rid
Realpath
X-Wix-Server-Artifact-Id
Arr-Disable-Session-Affinity
X-Accel-Buffering
X-F-Cache
X-Forwarded-Proto
X-B
X-Upstream
X-DynaTrace-JS-Agent
X-Goog-Generation
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Ser
X-Amz-Meta-S3cmd-Attrs
X-Via-JSL
Pinterest-Version
X-Pinterest-Rid
Service-Worker-Allowed
X-Dw-Request-Base-Id
X-Id
X-FTR-Balancer
X-FTR-DC
X-FTR-Backend-Server
X-FTR-Cache-Status
X-Country-Code-Real
X-FTR-Realm
X-FTR-Backend
X-Vcap-Request-Id
X-FTR-Expires
X-Varnish-Age
Front-End-Https
Paypal-Debug-Id
X-Dns-Prefetch-Control
Nginx-Cache
X-Server-ID
AR-Request-ID
X-Debug
X-Goog-Storage-Class
X-Ttl
X-Acc-Meta-Resource-Type
X-Aspnet-Version
X-TEC-API-VERSION
X-MSEdge-Ref
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Hits
X-Kinsta-Cache
X-NF-Request-ID
X-XRDS-Location
X-N
X-Logged-In
X-FTR-Cache-Host
X-B3-TraceId-Primal
MRF-Tech
Mrf-Cache-Status
X-Mrf-Item-Lastmod
X-Mrf-Section-Lastmod
X-NewRelic-App-Data
Ar-Sid
S
X-Frontend
X-Akam-SW-Version
AMP-Access-Control-Allow-Source-Origin
X-HS-Content-Id
X-Grace
Alternate-Protocol
X-HS-Hub-Id
X-PressLabs-Stats
X-User-Agent
X-Forwarded-For
DynaTrace
X-Cache-Key
Tracecode
X-DataStream-Cache-Status
X-TA-CDN-Provider
X-Amzn-Trace-Id
X-CACHE-GROUP
X-FastCGI-Cache
X-Pad
Server-Name
X-Content-Digest
Refresh
X-Analytics
Backend-Timing
X-Content-Options
Display
MicrosoftSharePointTeamServices
X-Middleton-Display
Fastcgi-Cache
X-Sol
X-CF-Powered-By
X-Debug-Info
Accept-Charset
Access-Control-Request-Method
X-Az
X-Activity-Id
X-AppVersion
X-Rid
Host
X-IPLB-Instance
Powered-By-ChinaCache
X-Page-Id
FilterID
X-LB-Cache
X-Content-Type
MS-CV
X-Zen-Fury
X-Magnolia-Registration
TP-Cache
TP-L2-Cache
ServerID
Response
X-Middleton-Response
TCN
Cache-Status
X-Mobile
X-Cache-Hit
Surrogate-Key
X-Hostname
X-Content-Powered-By
X-VCache
X-Fastcgi-Cache
X-ATG-Version
X-Ruxit-Js-Agent
X-Seen-By
Rt-Fastcgi-Cache
X-WA-Info
X-RateLimit-Remaining
X-B3-Sampled
X-XRDS-LOCATION
X-Srv
X-Cached-By
X-Request-Received
X-Request-Processing-Time
X-GUploader-UploadID
X-Varnish-Backend
X-Revision
X-Cache-Age
X-Signature
X-SS-Set-Cookie
X-B-Cache
X-Cache-Action
X-Platform-Server
X-Instance
X-Cluster
X-Whom
X-PHP-Backend
X-Tumblr-Pixel-0
VIX-Pulpo-Node
X-Content-Security-Policy-Report-Only
X-Tumblr-Pixel
VIX-Pulpo-Upstream-Status
X-Tumblr-User
X-Edge-Location
X-Handled-By
Source
Cleartype
X-Request-Guid
X-App-Environment
X-Akamai-Edgescape
X-Framework
X-TT
X-Cache-Control
X-Wix-Request-Id
ViewerVersion
X-Drupal-Cache-Tags
X-Origin-Server
X-BCube-Filmed-By
X-NWS-LOG-UUID
Host-Header
Server-Info
X-Cache-Rule
X-Cache-2
X-AOL-HN
X-Generated-By
DC
X-Varnish-Hostname
X-App-Server
X-Geo-Country
Retry-After
X-Amzn-RequestId
X-Amz-Apigw-Id
Eomportal-Instance
X-Varnish-Server
X-FW-Hash
X-FW-Type
X-FW-Server
Server-Node
X-FW-Static
X-FW-Serve
X-Correlation-Id
X-FB-Debug
Fusion-Source
Fusion-Content-Source
Fusion-Content-Id
Fusion-Component-Id
Fusion-Template-Id
X-Device-Type
Webserver
Payment
X-Response-Served-From
Actual-Object-TTL
X-Amz-Server-Side-Encryption
X-TT-TIMESTAMP
AsisCache
ServedBy
Access-Control-Allow-Method
X-Varnish-Hits
X-Cacheable-TTL
NGB
X-Region
GEO-INFO
X-Tumblr-Pixel-2
Filters
X-Tumblr-Pixel-1
Ms-Operation-Id
X-Servedby
X-Adobe-Loc
X-Amz-Replication-Status
X-TX-ID
X-WebKit-CSP-Report-Only
X-Varnish-IP
X-Jobs
X-Varnish-Grace
X-RTag
X-UUID
X-Contextid
X-Adobe-Content
Edge-Cache-Tag
X-Real-IP
Viewport
Healthy
From-Origin
Content-Script-Type
X-Drupal-Cache-Contexts
X-Rendered-As
Cache
X-Locale
Content-Style-Type
Upgrade-Insecure-Requests
Cache-Tv-Group
Country
X-Accel-Expires
X-WPE-Loopback-Upstream-Addr
X-RequestSource
X-Cache-Config
X-Cache-TTL-Remaining
X-Cache-Server
X-UA-Device-Type
X-Cache-Operation
X-BACKEND-TTL
HitType
X-VG-WebCache
X-Esi
X-Ezoic-Cdn
X-Cache-Remote
Pagespeed
Fastly-Restarts
X-APP-VERSION
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Cache-TTL
X-Storage
X-Oneagent-Js-Injection
Fastcgi-Useragent
X-S
X-Upgrade-Enabled
X-Content-Age
X-Daa-Tunnel
Cache-Tags
X-Hit
X-Redis-Cache
X-FW-Dynamic
Served-By
X-Cache-NE
X-RateLimit-Limit
Cache-Tag
Datacenter
X-Mode
SRV
X-Is-Bot
X-Path-Route
Meta-Geo
Machine
X-NGENIX-Cache
Load-Balancing
Origin-Cache-Control
Origin-Edge-Control
X-RN-RSRV
X-NCache
X-Cache-Var
X-Cache-Var-Map
X-Detected-As
X-Internal-Host
X-Status
X-Generated
X-Grey
X-Origin-Response-Time
X-Loop
X-Hosted-By
X-Labrador-Cache-Channel
X-L-Path
X-JoinUs
Cache-Key
X-Agile-Age
X-TNCMS
X-Time-Microsecs
X-Birta-Served
X-Agile
X-Birta-Cache-Post
X-Www-Served-By
X-Web-Node
X-Tb
X-Agile-Id
X-Pubstack
X-Environment-Context
X-CDN-Cache
X-Rule
X-Cache-Category-Id
X-Akamai-Request-ID
Vix-Hermes-Req-Id
X-ApacheServer
X-BYPASS-REASON
Cache-Name
X-Edge-IP
X-Human
X-FC-Vary-Parameters
Now
X-IP
X-OCL
X-Original-Request
X-ProxyCache-Key
X-ProxyCache-Status
X-RemovedCookies
X-Pc-Appver
X-Pc-Key
X-Pc-Hit
X-Origin-Host
X-PERF
X-Viewer-Country
X-Proxy
X-Via-Fastly
X-ProcessESI
X-Varnish-Cacheable
X-Origin
X-PCL
X-CCM
Public-Key-Pins-Report-Only
X-VG-TLSProxy
X-Site-Version
DB-Nickname
X-Guploader-Uploadid
X-Backend-Name
X-ServerID
X-Hl-Ver
X-Akamai-Transformed
X-Source
X-GeoIP
X-Format
X-Proxy-Build
X-App-Version
X-Timing-Wait
NtCoent-Length
Selected-FE
S-Rt
X-Xfnlog-Site
X-Section
X-MP-GENERATED-AT
X-Varnish-Cache-Hits
X-Access
X-Debug-Cache
Azure-Version
Azure-InstanceId
Azure-SlotName
Azure-RegionName
Azure-SiteName
TWC-GeoIP-Country
TWC-Connection-Speed
TWC-GeoIP-LatLong
TWC-Device-Class
TWC-Locale-Group
Webcakes-App-Version
Webcakes-App-Name
X-Origin-Hint
Property-Id
Xserver
TWC-Privacy
Webcakes-Region
X-Cache-Enabled
User-Cache-Control
Liferay-Portal
X-Ocache
S-Cnection
Fastcgi-X-Cache-Version
X-Sucuri-ID
X-Zipkin-Id
X-UA
X-Routing-Service
X-Request-Time
X-Proxied
We-Hiring
Mail-Subject
X-App-Name
Access-Control-Request-Headers
X-Protected-By
X-Microcachable
AR-SID
X-Cdn-Forward
X-Nginx-Cache
X-EdgeConnect-Cache-Status
X-Tumblr-Pixel-3
X-CACHE-KEY
X-Webstats-RespID
X-GEO
X-FW-Version
X-DataStream-Origin-MEX-Latency
X-Origin-CC
X-FB-TRIP-ID
X-DataStream-MidMile-RTT
User-Agent
X-Upstream-Proxy
X-Upstream-CT
X-Upstream-HT
X-GRACE
PageSpeed
X-Trace-Id
X-Yottaa-Optimizations
LB
X-Proto
X-Yottaa-Metrics
X-Node-Name
X-Correlation-ID
X-TIME
Powered
X-Forwarded-Host
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-Nc
Ohc-File-Size
Cache-Hits
X-Cache-Backend
X-Edge-Cache
X-Pc-Date
X-Pc-Host
X-Edge-Cache-Key
X-Endurance-Cache-Level
X-Varnish-Beresp-Ttl
X-ES-SERVER
X-ElasticPress-Search
X-B3-Traceid
X-Unique-ID
X-OVcl-Cache
X-OVcl
HostName
Frame-Options
Section-Io-Cache
X-Origin-TTL
X-Ua
X-Server-Cache
X-Dynatrace-Js-Agent
X-Vgn-Hpd-Reason
IBM-Web2-Location
Fastcgi-X-Cache
L5d-Success-Class
X-Rocket-Nginx-Bypass
Nel
X-V
OT-Force-Account-Verify
X-Parent-Response-Time
X-UE-Client-Country
VivaBuild
Viewtype
X-User
X-Twitter-Response-Tags
X-Rewrite-Enabled
Arc-Country
X-Goog-Meta-Goog-Reserved-File-Mtime
X-External-Request-Id
X-Generated-In
Powered-By
GMS-Ver
Fly-Cache
Fly-Request-Id
X-SRCache-Key
X-Gen-Mode
X-S-Cookie
Meta-Geo-Continent
X-Fetched-On
Memcached
X-S-Maxage
X-ScT
Node
Mobile-Detection-Method
X-From
Fastly-SWR
Fastly-SIE
X-IN-APIGATEWAY
X-Rojux
Www
X-IN-SSL-APIGATEWAY
X-IN-WAF
X-Died
X-Trv-Group
Resin-Trace
X-Transaction
BehaviorPad-Version
Decoy-Debug-TTL
Ec-Rule-Version
Rendered-Blocks
Decoy-Debug-Status
Decoy-Debug-Key
Cache-Prefix
X-DPWN-IS-SECURE
X-Hnp-Log
X-TT-LOGID
X-VG-WebServer
X-Rebelmouse-Surrogate-Control
X-NU-AKA-ACS-Version
X-Cdn-Srv
X-B-Cookie
X-ServiceProvider
X-CF-Lambda-Fn
X-ARC
X-Aed
Xc-Version
X-Amz-Meta-Cache-Control
X-Application
X-BB-ID
X-Region-Sid
X-Cache-Host
X-Cache-Id
X-Cache-Info
X-PAYTM-SRV-ID
X-Request-UUID
X-PHP-Host
X-Block-Status
X-Cache-Bucket
X-Cache-URL
X-Cache-FS-Status
X-Developer
X-CF-Lambda-Version
X-Reboot
X-Connection-Hash
X-Server-By
X-LI-UUID
X-LI-Proto
X-Pc-Subdomain
X-Li-Pop
MD5-Digest
X-Rebelmouse-Cache-Control
X-Date
X-Accel-Expires-Debug
X-Micro-Cache
X-We-Are-Hiring
X-Li-Fabric
X-Server-Group
X-Destination
Mn-Server-Ip
X-Via-CDN
CACHE
X-CUA
X-Epic-Correlation-Id
X-D
X-Secret
On-Server
X-Sorting-Hat-ShopId
X-Stale
Proxy-Connection
X-Server-IP
Platform
X-Fastly-Cache
X-Backend-Url
X-A-Dcw
Thinkindot-Control
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
X-A-Dgt
True-Client-Country-4JS
X-ShardId
X-A
Web-Mar-Node
X-A-Ccd
X-A-Dam
X-Sf
X-A-Wwc
X-Actual-URL
X-Distributor
X-Backend-Host
X-Cache-Expires
Request-Time
X-Sorting-Hat-PodId
X-Auto-Login
X-Shopify-Stage
X-Server-Time
X-ShopId
X-Alternate-Cache-Key
X-Distil-CS
SD-X-WS
X-Cache-Grace
Ajk
X-Logtrace-Id
X-Location
X-Matched-Rule
X-Wikidot-Backend
X-Returned-From-DLL
X-Wikidot-Static-Cache
X-Time
Magicmarker
X-Returned-From-PostProcessResponse
X-Info
X-Irp-Debug
X-Var-Ttl
X-LAGOON
X-Variation
X-Returned-From-BeforeDispatch
X-Origin-Date
X-Via-NSCOPI
X-Request-URI
X-Proxy-Cache-Status
X-Proxy-Upstream
X-RateLimit-Remaining-Second
X-RateLimit-Limit-Second
X-Passed-To-PostProcessResponse
X-Passed-To-DLL
X-Origin-Expires
X-Croise-Owner
X-Returned-From
X-Response-By
X-Passed-To-BeforeDispatch
X-Passed-To
Adler-Geo
X-Level-Front-Cache
Fastly-Backend-Name
Country-Code
Backend
Is-Eu
X-G
X-Thinkindot-L3
X-Swa-Ws
X-GeoIP-Country-Code
X-Generated-On
X-Gannett-Site-Version
X-Svr
Content-Disposition
X-FireWall-Port
X-Sucuri-Cache
X-R9-Blue-Green-Version
Warning
X-SERVER
X-Generation-Time
X-Cache-Debug
Pagetype
X-C
X-Debug-Cookies
X-Debug-Log
X-Bip
X-SIPLIST1
X-Dc
X-Fstrz
Heartbleed
X-Platform
X-Policy
Origin
X-Backend-State
X-Crawler
X-Qloud-Router
IsBot
X-Core-Mission
Lfy
X-Node-Id
Version
AKAMAI
CDCHOST
Who
X-Hash
X-Varnish-Action
RNT-Machine
RNT-Time
X-Dispatcher-Server
Server-Host
SS
X-UnsetCookies
X-Up
GW-Server
X-Nginx-Cache-Key
X-Amz-Meta-Surrogate-Control
X-No-Session
X-NX-Host
Fastly-Soc-X-Request-Id
Pramga
X-Device-Os
X-Thanos
X-HS-Cache-Config
X-F5-Cache
X-Debug-Cache-Store
X-Eu-Site
X-MSEdge-Features
X-Developers
X-Page-Type
X-MSEdge-Flight
X-Instart-Isnd
X-Key
Kp-EeAlive
X-Core-Value
Countrycode
HA-Ipaddr
Server-Int
Fastly-SSL
Cache-Cookie-Set-From
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
X-Varnish-Authentication
X-Varnish-Url
X-Debug-Cache-Fetch
X-Newrelic-App-Data
Apple-News-Services-Host
Apple-News-Services-Handled
Cache-Cookie-Set-Lfrom
Ha-Gx-Prefs
X-Servername
Server-Surrogate-Control
Server-ID
X-Cache-ASPX
X-CGP
X-Debug-Cache-Expiry
X-Clientip
Server-Cache-Control
REQUESTUUID
PFcat
Release
Cache-Cookie-Set-Idcheck
X-VWS-Id
X-LJ-Flow-ID
X-AWS-Id
X-Cluster-Node
NGX
X-Real-Ip
X-Ratelimit-Remaining
X-TrackingId
X-Store
X-Refresh
RequestId
X-Sedo-Request-Id
X-Be
Esi-Enabled
X-Pjax-Url
X-Cache-Miss-From
X-CDN-Forward
Time
X-MI-In-Market
X-Cache-CFC
X-RCS-CacheZone
X-Layer
X-EIG-Tracking-Id
MI-Cache
MI-API
MI-Cache-Age
MIME-Version
X-NC
X-B3-SpanId
X-URL
X-Mrs-Cache
X-Mshield-Cache-Status
X-Mrs-Age
X-Mrs-Cache-Hits
HA-Geolat
HA-Georegion
HA-Geolon
HA-Host
HA-Servedtime
X-IPS-LoggedIn
HA-Geocountry
X-Unique-Id-Primal
X-Oss-Storage-Class
X-Oss-Server-Time
X-Oss-Request-Id
SID
HA-Cloudapp
X-Oss-Object-Type
X-Oss-Hash-Crc64ecma
HA-Urlpath
HA-Geocity
PICS-Label
X-Owner
X-Geo
X-Ratelimit-Limit
X-From-Cache
X-SN
Cteonnt-Length
X-RequestId
X-Servedbyhost
Odigeo-Trace-Id
Mime-Version
Cdn
X-CMS-Context
Backend-Name
X-Hyper-Cache
FastCGI-Cache
Memory
CF-IPCountry
X-FPC
X-Webkit-CSP
X-CSRF-TOKEN
X-Instart-Info
HTTPS
X-WebServer
X-Webkit-Csp
X-Req
X-B3-Spanid
X-COUNTRY
X-CLOUD-TRACE-CONTEXT
CDN
X-Edge-Server
Cdn-Request-Time
Cdn-Host
X-Wa
X-Request-Start
X-Phone
X-DC
Processtime
X-Pf-Uncompressing
Cf-Ipcountry
X-Atg-Version
X-Release
Ohc-Response-Time
X-Aicache-OS
XServer
X-WR-MODIFICATION
X-Newrelic-Synthetics
GeoIP-Country-Code
X-FORWARDED-FOR
Hostname
X-Amzn-Remapped-Connection
X-Amzn-Remapped-Date
X-Mobile-URL
GeoIP-Latitude
X-Load-Cache
X-Varnish-Beresp-TTL
X-ND-Cache
ProcessTime
X-HS-Combine-CSS
X-Served-From
X-Server-W
URI
X-Fastly-Country-Code
Cross-Origin-Window-Policy
X-GZip
X-VServer
X-NodeID
Rt-Proxy-Cache
X-HTML-Minification-Powered-By
X-WA
X-Varnish-Ttl
T-Server
Accept-Ch-Lifetime
X-PF-Uncompressing
X-Lb-Id
X-Skip-Cache
X-Unique-Id
X-GoCache-CacheStatus
X-Nananana
X-Cdn-Origin
X-Sn-Servicetimems
X-Oracle-Dms-Ecid
X-SRV
V-Age
X-CSRF-Token
X-Tb-Optimization-Total-Bytes-Saved
X-MServer
Ohc-Cache-HIT
X-SVT-ORM-RULES
Proxy-Firewall
X-LB-ID
X-ServedByHost
X-VC-Cache
X-SVT-ORM-VERSION
X-Worker
X-P-T
X-Fastly-Cache-Hits
X-UPSTREAM-Address
Pics-Label
X-Cms-Context
X-Datadome
X-APP
Get-Access-Time
Is-Session-Tracking
N-Cache
Uber-Trace-Id
X-Gateway-Cache-Key
X-Gateway-Cache-Status
X-UCC
ServerName
X-HS-Status
A
X-Gateway-Skip-Cache
X-Check-Cacheable
X-LiteSpeed-Cache-Control
Amp-Access-Control-Allow-Source-Origin
X-SERVER-NAME
X-RCS-Backend
X-CACHE-AGE
X-Requestid
DataCenter
Geoip-Latitude
X-Processor
X-GZIP
X-NGINX-Cache
X-Hp-Webp
GeoIp-Country-Code
X-Org
WZWS-RAY
X-StackifyID
X-BBXSRF
X-BE
Dnion-Transfer-Encoding
X-Optimization
X-Cache-HT
X-ID
X-Vg-Webcache
X-Backend-TTL
Cache-Provider
X-Varnish-URL
X-PAGE-TYPE
X-PJAX-URL
WP-Super-Cache
X-Port
Requestid
X-Fe
Cneonction
X-GDPR
X-Via-SSL
X-Via-Edge
X-Csrf-Token
X-NWS-UUID-VERIFY
Serverid
X-Git-Hash
Pragrma
X-Gdpr
X-Planisys-CDN-TTL
X-ServerName
X-HostName
X-Planisys-CDN-Cache
X-Dw-Trace-Id
RequestUuid
Server-Id
X-LiteSpeed-Tag
X-Planisys-CDN-Rules
X-Instance-Name
X-Front
X-VarnPar1
Correlation-Id
X-GeoIP-City
X-RAMCache
188prxHost
355prline
352pxline
286prxHost
Accept-Language
409pxxline
X-PARISIEN-Cache-Rendered
X-VarnCache
Xxline
225prxHost
219prxHost
X-CS
Request-EU
178proxuri
X-Request-Url
Request-Country
X-Akamai-Request-ID2
189phosttRef
DSUID