Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
Last-Modified
X-Content-Type-Options
Accept-Ranges
Pragma
X-Powered-By
CF-RAY
Link
ETag
X-XSS-Protection
Expect-CT
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Id
X-Served-By
Referrer-Policy
X-Varnish
X-Timer
X-Request-Id
CF-Cache-Status
X-AspNet-Version
Access-Control-Allow-Headers
X-Xss-Protection
Access-Control-Allow-Methods
X-Runtime
X-Download-Options
Access-Control-Allow-Credentials
X-Drupal-Cache
X-Cacheable
Alt-Svc
X-Check
X-Generator
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Cache-Status
X-AspNetMvc-Version
Status
X-DNS-Prefetch-Control
X-Template
Timing-Allow-Origin
X-Language
X-Permitted-Cross-Domain-Policies
X-Request-ID
X-FRAME-OPTIONS
Content-Encoding
X-Iinfo
X-Content-Security-Policy
X-CDN
X-Buckets
X-Turbo-Charged-By
Upgrade
X-Type
WPE-Backend
Keep-Alive
X-Pass-Why
X-Cache-Group
X-AH-Environment
CF-Ray
Xkey
P3p
X-Backend
Access-Control-Max-Age
X-Age
Access-Control-Expose-Headers
X-Via
X-Drupal-Dynamic-Cache
EagleId
X-Pingback
X-Nginx-Cache-Status
X-Amz-Request-Id
X-Amz-Id-2
X-Server-Powered-By
X-Server
X-Kinja-Server-Push
X-Hacker
Grace
X-UA-Device
X-Swift-SaveTime
X-Swift-CacheTime
X-Varnish-Cache
Ali-Swift-Global-Savetime
X-Robots-Tag
Cf-Railgun
X-Proxy-Cache
X-Envoy-Upstream-Service-Time
X-LiteSpeed-Cache
X-Page-Speed
X-Ua-Compatible
Request-Context
X-Device
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Ac
Content-Location
X-Cache-Lookup
X-Amz-Version-Id
X-WebKit-CSP
X-Response-Time
X-Host
Surrogate-Control
X-OneAgent-JS-Injection
X-Rq
X-Cnection
X-Node
X-Backend-Server
Server-Timing
X-Readtime
Report-To
X-Rack-Cache
X-Server-Id
Request-Id
EagleEye-TraceId
X-Application-Context
Feature-Policy
X-Cloud-Trace-Context
X-ORACLE-DMS-ECID
X-Instart-Request-ID
X-CST
X-Iejgwucgyu
X-EdgeConnect-Origin-MEX-Latency
Edge-Control
X-EdgeConnect-MidMile-RTT
X-Clacks-Overhead
NEL
Rating
X-Country
X-Url
X-Server-Name
X-Varnish-TTL
X-DynaTrace
X-MS-InvokeApp
X-DataDome
Allow
X-Px
X-Country-Code
X-TTL
Pinterest-Generated-By
X-Origin-Cache
X-Vhost
X-Vname
X-TtlSet
X-PC
X-Cached
X-FTR-Request-ID
X-ESI
X-Server-ID
RTSS
X-Ruxit-JS-Agent
SPRequestGuid
X-Trace
X-Goog-Hash
X-VARITI-CCR
Charset
X-Powered-By-Plesk
X-SharePointHealthScore
Accept-CH
X-GitHub-Request-Id
X-DynaTrace-JS-Agent
X-T
X-Dispatcher
X-Powered-CMS
Public-Key-Pins
X-D2id
X-Mod-Pagespeed
X-B3-TraceId
X-Mobile-Rewrite
PB-PID
PB-RID
Arc-Version
X-F-Cache
Verso
X-Cdn-Fetch
Content-MD5
X-Exp-Variant
X-Kinja-Build
X-Kinja-Revision
X-Exp-Id
X-Kinja
X-GoogleNews-Bot
X-Kinja-Server
X-Version
SPRequestDuration
SPIisLatency
MS-Author-Via
X-Shield-Request-Id
X-Recruiting
X-Dns-Prefetch-Control
X-Oracle-Dms-Rid
X-Abt-Application-Version
X-ORACLE-DMS-RID
Nginx-Cache
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Client-IP
X-Forwarded-Proto
Accept-CH-Lifetime
X-HW
X-DIS-Request-ID
X-N
X-Navigation-Version
AR-ATIME
AR-CACHE
AR-PoweredBy
X-Upstream-Env
X-Pinterest-Rid
Pinterest-Version
X-B
X-Amz-Rid
X-Fastly-Request-ID
X-Upstream
DynaTrace
X-Origin-Upstream-Status
X-Dw-Request-Base-Id
X-Ser
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Amz-Meta-S3cmd-Attrs
X-Hits
Fastly-Restarts
TCN
Realpath
Paypal-Debug-Id
X-Wix-Server-Artifact-Id
X-Goog-Generation
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-XRDS-Location
X-Accel-Buffering
X-Content-Options
Arr-Disable-Session-Affinity
Service-Worker-Allowed
X-NF-Request-ID
X-Pad
X-Acc-Meta-Resource-Type
X-Goog-Storage-Class
Tracecode
S
Access-Control-Request-Method
X-Id
X-Content-Digest
X-Debug
X-Varnish-Age
X-Use-Magma
Front-End-Https
X-Oneagent-Js-Injection
X-Vcap-Request-Id
MRF-Tech
Mrf-Cache-Status
X-Mrf-Section-Lastmod
X-Mrf-Item-Lastmod
X-MSEdge-Ref
Edge-Cache-Tag
X-ATG-Version
X-Frontend
X-IPLB-Instance
X-FTR-DC
X-FTR-Realm
X-PressLabs-Stats
X-FTR-Expires
X-FTR-Balancer
X-RateLimit-Remaining
X-FTR-Cache-Status
X-Country-Code-Real
X-FTR-Backend-Server
X-FTR-Backend
X-Kinsta-Cache
X-Logged-In
MicrosoftSharePointTeamServices
X-Amz-Cf-Pop
X-HS-Hub-Id
X-HS-Content-Id
Surrogate-Key
X-Forwarded-For
X-Cache-Hit
X-B3-TraceId-Primal
X-Request-Received
Rt-Fastcgi-Cache
X-Request-Processing-Time
X-FastCGI-Cache
Display
Fastcgi-Cache
X-Middleton-Display
X-Sol
X-Webkit-Csp
X-Edge-Location
X-Zen-Fury
Powered-By-ChinaCache
Backend-Timing
X-Analytics
X-Litespeed-Cache
Server-Name
X-Amzn-Trace-Id
Host
X-Debug-Info
X-Revision
X-Rid
X-User-Agent
TP-L2-Cache
TP-Cache
X-FTR-Cache-Host
X-HS-Cache-Config
FilterID
AMP-Access-Control-Allow-Source-Origin
X-Akam-SW-Version
X-CF-Powered-By
Ar-Sid
Response
X-Middleton-Response
X-TA-CDN-Provider
X-Grace
AR-Request-ID
X-SS-Set-Cookie
X-Drupal-Cache-Tags
X-Cache-Key
X-Mobile
X-Magnolia-Registration
X-SERVER
X-Newrelic-App-Data
X-Ttl
Cache-Status
Refresh
X-Fastcgi-Cache
X-NewRelic-App-Data
X-Accel-Expires
X-Cached-By
Host-Header
X-GUploader-UploadID
X-B3-Sampled
ServerID
X-Varnish-Backend
X-AOL-HN
X-Webkit-CSP
X-VCache
X-Node-Name
X-NWS-LOG-UUID
X-Content-Security-Policy-Report-Only
X-Whom
X-Instance
Eomportal-Instance
X-FB-Debug
X-Cluster
X-Signature
X-Tumblr-Pixel-0
X-Cache-Control
X-Cache-2
X-Akamai-Edgescape
X-Tumblr-Pixel
X-B-Cache
X-Tumblr-User
X-Platform-Server
X-Device-Type
X-Varnish-Hostname
X-Generated-By
X-BCube-Filmed-By
X-App-Environment
X-Framework
X-Page-Id
X-Ruxit-Js-Agent
X-LB-Cache
X-Drupal-Cache-Contexts
X-Handled-By
Cleartype
X-Via-JSL
X-Request-Guid
X-Srv
X-AppVersion
X-Az
X-Cache-Rule
X-Activity-Id
Cache-Tag
X-Cache-Action
DC
X-App-Server
Liferay-Portal
Source
X-Cache-Server
Alternate-Protocol
X-Content-Powered-By
Retry-After
X-WPE-Loopback-Upstream-Addr
X-Hostname
MS-CV
X-App-Version
X-HS-Combine-CSS
X-WA-Info
X-Varnish-Grace
X-Geo-Country
HostName
Public-Key-Pins-Report-Only
X-Varnish-Server
X-Correlation-Id
X-Esi
X-Amz-Replication-Status
Pagespeed
X-Wix-Request-Id
X-Daa-Tunnel
X-TT
X-Seen-By
Server-Node
ViewerVersion
AR-SID
Webserver
Accept-Charset
X-URL
X-Response-Served-From
X-Cache-NE
AsisCache
Upgrade-Insecure-Requests
X-WebKit-CSP-Report-Only
X-GeoIP
SRV
X-Amz-Apigw-Id
X-Tumblr-Pixel-2
X-Locale
Actual-Object-TTL
X-Amzn-RequestId
X-Tumblr-Pixel-1
GEO-INFO
X-RequestSource
X-Varnish-Hits
ServedBy
X-Jobs
X-FW-Server
X-UUID
X-FW-Static
X-FW-Type
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-FW-Serve
X-Contextid
Viewport
X-Servedby
X-Edge-Cache
X-FW-Hash
X-Edge-Cache-Key
X-S
Payment
X-Status
X-TX-ID
X-Varnish-IP
X-Adobe-Loc
X-XRDS-LOCATION
X-Adobe-Content
X-Cacheable-TTL
X-TT-TIMESTAMP
Cache
X-Origin-Server
X-Vg-Webcache
X-Cache-TTL-Remaining
X-Correlation-ID
X-Geo-Segment
S-Cnection
X-Hyper-Cache
X-Amz-Server-Side-Encryption
X-Cache-Operation
X-Cache-Age
X-Forwarded-Host
Server-Info
Datacenter
X-RateLimit-Limit
X-Region
Served-By
X-Real-IP
X-Akamai-Request-ID2
X-Mode
Access-Control-Allow-Method
X-CLOUD-TRACE-CONTEXT
X-DataStream-Cache-Status
X-Sucuri-ID
Healthy
CACHE
X-GRACE
X-Akamai-Transformed
X-Content-Type
Country
X-JoinUs
Fastcgi-Useragent
X-RN-RSRV
X-L-Path
X-Path-Route
Fastcgi-X-Cache
Machine
X-Rendered-As
Fastcgi-X-Cache-Version
X-Is-Bot
X-Site-Version
X-Environment-Context
X-Proxied
Meta-Geo
From-Origin
X-Generated
X-Ocache
X-Zipkin-Id
X-Cache-Config
X-Cache-Var
X-Routing-Service
X-Cache-Var-Map
X-Detected-As
X-Upgrade-Enabled
X-Rule
X-Format
X-Birta-Served
X-Access
X-Agile
Now
L5d-Success-Class
DB-Nickname
X-Agile-Age
X-Agile-Id
X-Hosted-By
X-Birta-Cache-Post
X-Amz-Meta-Surrogate-Control
X-Ezoic-Cdn
X-CDN-Cache
X-Section
X-Request-Time
X-NGENIX-Cache
X-Viewer-Country
X-Via-CDN
X-Proxy
X-Human
TWC-Locale-Group
TWC-Privacy
Webcakes-App-Name
Webcakes-App-Version
Webcakes-Region
X-Loop
X-Web-Node
TWC-GeoIP-LatLong
X-OCL
TWC-Connection-Speed
X-Origin-Hint
Cache-Name
X-Pc-Appver
X-Pc-Hit
X-Via-Fastly
OT-Force-Account-Verify
TWC-Device-Class
Xserver
S-Rt
Property-Id
TWC-GeoIP-Country
X-Pc-Key
X-FC-Vary-Parameters
X-EIG-Tracking-Id
X-TNCMS
X-ServerID
X-Grey
X-PCL
X-Hit
X-CCM
X-Labrador-Cache-Channel
X-Cache-Category-Id
X-Microcachable
X-ProxyCache-Key
X-Original-Request
Origin-Edge-Control
X-Upstream-CT
X-VG-TLSProxy
X-Upstream-HT
X-BYPASS-REASON
X-Xfnlog-Site
X-ProcessESI
X-Tb
HitInfo
X-ProxyCache-Status
X-Origin
X-Pubstack
X-IP
X-RemovedCookies
Origin-Cache-Control
HitType
Azure-RegionName
Azure-Version
Azure-SiteName
Azure-SlotName
X-Cdn
Azure-InstanceId
X-Sorting-Hat-PodId
X-Geo
Accept-Language
X-Cluster-Node
X-Www-Served-By
X-Alternate-Cache-Key
X-OVcl
X-Timing-Wait
X-Shopify-Stage
X-Sorting-Hat-ShopId
X-ShopId
X-Proxy-Build
LB
X-ShardId
X-OVcl-Cache
Selected-FE
Mn-Server-Ip
NGB
Ms-Operation-Id
X-App-Name
X-RTag
X-Rocket-Nginx-Bypass
X-Connection-Hash
X-TWH-CORRELATION-ID
X-Twitter-Response-Tags
X-Transaction
Filters
X-Cache-Enabled
X-TIME
X-Cache-Remote
X-SplitTest
X-LJ-Flow-ID
X-VWS-Id
X-AWS-Id
X-UA
X-Real-Ip
X-Internal-Host
Access-Control-Request-Headers
Time
IBM-Web2-Location
X-NodeID
X-Unique-ID
Content-Style-Type
Content-Script-Type
X-UA-Device-Type
X-Pc-Host
X-Pc-Date
X-NCache
X-Guploader-Uploadid
X-CACHE-KEY
X-Tumblr-Pixel-3
X-Nginx-Cache
X-Origin-CC
X-Source
Cache-Hits
X-Cache-TTL
X-Proto
X-PHP-Backend
Mail-Subject
X-Cdn-Forward
We-Hiring
X-Port
NtCoent-Length
X-MP-GENERATED-AT
X-Ms-Blob-Type
X-Ms-Lease-Status
X-Storage
X-Ms-Request-Id
X-Edge-IP
X-Ms-Version
X-Vgn-Hpd-Reason
Backend
X-Time-Microsecs
X-Varnish-Cacheable
X-Debug-Cache
X-Distil-CS
X-Akamai-Request-ID
X-APP-VERSION
X-Webstats-RespID
X-Backend-Name
Cache-Tags
X-CACHE-GROUP
X-Csrf-Token
X-Ua
X-Endurance-Cache-Level
Locale
X-Urbn-Context-Path
X-Urbn-Site-Id
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-Origin-Response-Time
X-Ratelimit-Limit
X-B3-Spanid
X-Redis-Cache
X-Varnish-Cache-Hits
X-EdgeConnect-Cache-Status
X-Dc
Warning
X-Nc
X-Croise-Owner
X-PERF
X-ApacheServer
User-Agent
X-CACHE-AGE
X-C
TSSecure
X-Via-Edge
X-A-Dcw
X-A-Dam
X-VG-WebServer
UCS
Viewtype
VivaBuild
SN
X-A
V-Age
X-UE-Client-Country
X-A-Ccd
X-We-Are-Hiring
HA-Geocity
HA-Cloudapp
HA-Geocountry
HA-Geolat
HA-Georegion
HA-Geolon
GMS-Ver
FSS-Proxy
Ec-Rule-Version
Content-Disposition
Fly-Cache
Fly-Request-Id
FSS-Cache
Ha-Gx-Prefs
HA-Host
Xc-Version
Rendered-Blocks
Resin-Trace
X-Trv-Group
Server-Host
Rt-Proxy-Cache
Powered-By
Mobile-Detection-Method
HA-Servedtime
HA-Ipaddr
HA-Urlpath
MD5-Digest
Meta-Geo-Continent
X-Via-SSL
X-Aed
X-IN-WAF
X-Debug-Log
X-IN-SSL-APIGATEWAY
X-Destination
X-Developer
X-Debug-Cookies
X-Date
X-D
X-NX-Host
X-NU-AKA-ACS-Version
X-Logtrace-Id
X-Irp-Debug
X-Died
X-IN-APIGATEWAY
X-Eu-Site
X-G
X-From
X-External-Request-Id
X-F5-Cache
X-Generated-In
X-ElasticPress-Search
Cache-Prefix
X-Hash
X-DPWN-IS-SECURE
X-GeoIP-Country-Code
X-Org
X-PAYTM-SRV-ID
X-BB-ID
X-B-Cookie
X-Sn-Servicetimems
X-BBXSRF
X-Server-Time
X-Application
X-Amz-Meta-Cache-Control
X-A-Wwc
Fastly-SSL
X-SRCache-Key
X-Accel-Expires-Debug
X-Fetched-On
X-Cache-Bucket
X-Cache-Host
X-Rojux
X-S-Cookie
X-Rewrite-Enabled
X-Region-Sid
X-CGP
X-ScT
X-CF-Lambda-Version
X-Cache-URL
X-Cdn-Origin
X-Server-By
X-CF-Lambda-Fn
X-Store
X-A-Dgt
PageSpeed
Arc-Country
BehaviorPad-Version
X-Mrs-Cache-Hits
Ajk
X-CDN-Forward
X-Mrs-Cache
X-Cache-Backend
X-Varnish-Beresp-Ttl
X-Mrs-Age
X-Mshield-Cache-Status
Version
X-Sucuri-Cache
Cache-Key
Thinkindot-CacheControl
Server-ID
X-Oss-Server-Time
X-Layer
X-Oss-Request-Id
X-Hl-Ver
X-Key
RNT-Machine
X-Oss-Storage-Class
RNT-Time
Thinkindot-CacheControl-Type
X-Core-Value
Thinkindot-Control
X-Flog
X-S-Maxage
X-ServiceProvider
X-SIPLIST1
X-Response-By
X-Backend-State
X-Backend-Host
X-Platform
X-Auto-Login
X-Backend-Url
X-Oss-Hash-Crc64ecma
X-No-Session
X-Cache-Id
X-MServer
X-Dynatrace-Js-Agent
X-Qloud-Router
X-Matched-Rule
X-ABtesting
Release
X-Clientip
X-Location
X-Request-URI
X-Request-Start
X-Reboot
X-Oss-Object-Type
X-Release
Www
X-Thinkindot-L3
Apple-News-Services-Handled
GW-Server
Apple-News-Services-Host
X-Epic-Correlation-Id
AKAMAI
Fastly-SWR
IsBot
Heartbleed
X-GeoIP-City
Fastly-SIE
Apple-News-Services-Parsed-Url
Apple-News-Services-Request-Url
Countrycode
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-FW-Version
Decoy-Debug-Key
Decoy-Debug-Status
Frame-Options
Fastly-Soc-X-Request-Id
Decoy-Debug-TTL
X-Wikidot-Static-Cache
Country-Code
X-User
X-Wikidot-Backend
X-V
X-Var-Ttl
Odigeo-Trace-Id
Pramga
Origin
X-Developers
X-Hello
X-UnsetCookies
X-Dispatcher-Server
X-VServer
Memcached
X-Trace-Id
X-Via-NSCOPI
X-Datadome
WZWS-RAY
X-NWS-UUID-VERIFY
X-Powered-By-ANYU
Section-Io-Cache
X-NC
Cache-Cookie-Set-Lfrom
X-Instance-Name
X-Hnp-Log
X-Li-Pop
X-Newrelic-Synthetics
X-Node-Id
X-Goog-Meta-Goog-Reserved-File-Mtime
X-LI-UUID
X-LI-Proto
X-Gannett-Site-Version
X-Gen-Mode
X-Li-Fabric
X-MI-In-Market
X-Secret
X-Varnish-Action
X-VCT
X-WebServer
X-Up
X-TT-LOGID
X-SVT-ORM-VERSION
X-Swa-Ws
X-Thanos
X-Worker
Adler-Geo
X-Cache-FS-Status
X-Info
X-Variation
Uber-Trace-Id
Platform
Backend-Name
Is-Eu
X-SVT-ORM-RULES
X-Stale
X-Phone
X-Policy
X-RCS-CacheZone
X-Passed-To-PostProcessResponse
X-Passed-To-DLL
X-Passed-To
X-Passed-To-BeforeDispatch
X-Request-UUID
X-Returned-From
X-Served-From
X-Server-IP
X-Sf
X-Sentry-ID
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Returned-From-DLL
X-P-T
X-Nginx-Cache-Key
Cache-Cookie-Set-From
Esi-Enabled
Cache-Cookie-Set-Idcheck
X-Actual-URL
X-Device-Os
X-Cache-Debug
Fastly-Backend-Name
X-Core-Mission
Kp-EeAlive
X-Bip
Magicmarker
X-Block-Status
X-Crawler
Pagetype
MI-Cache
Request-Country
True-Client-Country-4JS
Server-Int
Request-EU
X-Cache-Expires
X-CUA
Pragrma
Web-Mar-Node
MI-Cache-Age
On-Server
User-Cache-Control
X-Distributor
X-Parent-Response-Time
X-DC
X-Owner
X-HOST
Proxy-Connection
REQUESTUUID
X-Unique-Id-Primal
X-MSEdge-Flight
X-Refresh
X-NODE
MI-API
X-Cache-CFC
X-MSEdge-Features
Group
CDCHOST
X-Fstrz
X-Fastly-Cache
V-Cache
X-Time
Who
X-Page-Type
HTTPS
RequestId
X-Pjax-Url
X-Be
X-Backend-TTL
X-Req
X-Servername
X-SN
Cteonnt-Length
Fusion-Source
MIME-Version
Fusion-Component-Id
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
Fusion-Content-Id
X-Cache-Srv
Fusion-Content-Source
Fusion-Template-Id
Amp-Access-Control-Allow-Source-Origin
X-Oracle-Dms-Ecid
X-Ms-Lease-State
NodeID
Memory
X-GZip
X-Origin-TTL
Cdn
Cdn-Host
X-Edge-Server
Cdn-Request-Time
ProcessTime
Mime-Version
X-Servedbyhost
X-Server-Group
X-Protected-By
X-Content-Age
X-Aicache-OS
SS
CF-IPCountry
SD-X-WS
X-BB-IP
X-Ckpd-Fst-Backend
X-COUNTRY
X-Wa
X-ND-Cache
GeoIP-Country-Code
A
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-SRV
GeoIP-Latitude
CDN
X-Origin-Expires
X-Origin-Date
PageType
X-Varnish-Beresp-TTL
X-Origin-Host
Is-Session-Tracking
Get-Access-Time
XServer
X-Pf-Uncompressing
X-APP
X-StackifyID
X-B3-Traceid
GeoIp-Country-Code
Geoip-Latitude
X-Unique-Id
Serverid
X-Varnish-Url
X-Fastly-Country-Code
Processtime
X-PHP-Host
Node
PICS-Label
X-WA
X-Requestid
X-Cache-Info
X-Ratelimit-Remaining
X-CSRF-Token
X-Proxy-Cache-Status
Vix-Hermes-Req-Id
X-Proxy-Upstream
X-Fastly-Cache-Hits
X-RateLimit-Remaining-Second
X-Generation-Time
X-Gdpr
X-Load-Cache
X-RateLimit-Limit-Second
X-Nananana
Nel
Cache-Tv-Group
X-FireWall-Port
X-ID
Cf-Ipcountry
X-RequestId
X-SERVER-NAME
X-Check-Cacheable
DataCenter
X-ServedByHost
X-BACKEND-TTL
X-Server-W
X-HS-Status
URI
X-EC-Security-Audit
X-UPSTREAM-Address
X-Planisys-CDN-Rules
X-Planisys-CDN-Cache
Cache-Provider
X-CS
X-Planisys-CDN-TTL
Hostname
X-FORWARDED-FOR
WP-Super-Cache
X-NGINX-Cache
Request-Time
X-GZIP
X-GEO
Host-ID
X-Fastly-Backend-Reqs
PFcat
NGX
T-Server
X-Surge-Debug
X-WR-MODIFICATION
X-Front
X-B3-SpanId
X-DataStream-MidMile-RTT
X-VG-WebCache
X-DataStream-Origin-MEX-Latency
X-Debug-Cache-Expiry
X-GDPR
X-Debug-Cache-Store
X-Debug-Cache-Fetch
X-Micro-Cache
X-HTML-Minification-Powered-By
X-HTML-Edge-Cache
X-BE
X-Fe
X-Atg-Version
Requestid
X-Qnm-Cache
X-IPS-LoggedIn
X-M-Log
X-PF-Uncompressing
Https
X-FB-TRIP-ID
X-VarnPar1
X-VarnCache
X-Svr
X-PARISIEN-Cache-Rendered
RequestUuid
X-M-Reqid
X-ServerName
ServerName
X-PJAX-URL
X-Akamai-SSL-Client-Sid
X-Vcache
X-Swift-Error
X-Amz-Meta-S3b-Last-Modified
N-Cache
X-Generated-On
X-VC
Pics-Label
X-Alicdn-Da-Ups-Status
WebServer
X-Instart-Info
X-Cache-Ttl
X-PAGE-TYPE
X-VarnPar2
X-Distil-Cs
X-SB
X-From-Cache
X-Level-Front-Cache
Load-Balancing
Ohc-File-Size
Ohc-Response-Time
X-Serial
X-Cdn-Srv
SID
X-Grace-Duration
X-Skip-Cache
X-RAMCache
X-Dw-Trace-Id
Build-Number
Cdn-Src-Port
X-Gen-Id
X-ARC
Lfy