Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
Last-Modified
X-Content-Type-Options
Accept-Ranges
Pragma
X-Powered-By
CF-RAY
Link
ETag
X-XSS-Protection
Expect-CT
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Id
X-Served-By
Referrer-Policy
X-Varnish
X-Request-Id
X-Timer
CF-Cache-Status
X-AspNet-Version
Access-Control-Allow-Headers
X-Xss-Protection
Access-Control-Allow-Methods
X-Runtime
X-Download-Options
Access-Control-Allow-Credentials
X-Drupal-Cache
X-Cacheable
Alt-Svc
X-Check
X-Generator
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Cache-Status
X-AspNetMvc-Version
Status
X-DNS-Prefetch-Control
X-Template
Timing-Allow-Origin
X-Language
X-Permitted-Cross-Domain-Policies
X-FRAME-OPTIONS
Content-Encoding
X-Iinfo
X-Content-Security-Policy
X-CDN
X-Buckets
X-Turbo-Charged-By
X-Request-ID
Upgrade
X-Type
WPE-Backend
Keep-Alive
X-Pass-Why
X-Cache-Group
X-AH-Environment
CF-Ray
Xkey
P3p
X-Backend
Access-Control-Max-Age
X-Age
Access-Control-Expose-Headers
X-Via
X-Drupal-Dynamic-Cache
EagleId
X-Pingback
X-Nginx-Cache-Status
X-Amz-Id-2
X-Amz-Request-Id
X-Server-Powered-By
X-Server
X-Kinja-Server-Push
X-Hacker
Grace
X-UA-Device
X-Swift-CacheTime
X-Swift-SaveTime
X-Varnish-Cache
Ali-Swift-Global-Savetime
X-Robots-Tag
Cf-Railgun
X-Proxy-Cache
X-Envoy-Upstream-Service-Time
X-Page-Speed
X-Ua-Compatible
X-LiteSpeed-Cache
Request-Context
X-Device
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Ac
Content-Location
X-Cache-Lookup
X-Amz-Version-Id
X-WebKit-CSP
X-Response-Time
X-Host
Surrogate-Control
X-OneAgent-JS-Injection
X-Rq
X-Cnection
X-Node
X-Backend-Server
Server-Timing
X-Readtime
Report-To
X-Rack-Cache
X-Server-Id
Request-Id
EagleEye-TraceId
X-Application-Context
Feature-Policy
X-Cloud-Trace-Context
X-ORACLE-DMS-ECID
X-Instart-Request-ID
X-CST
X-Iejgwucgyu
X-EdgeConnect-Origin-MEX-Latency
Edge-Control
X-EdgeConnect-MidMile-RTT
X-Clacks-Overhead
NEL
Rating
X-Country
X-Url
X-Server-Name
X-Varnish-TTL
X-DynaTrace
X-MS-InvokeApp
X-DataDome
Allow
X-Px
X-Country-Code
X-TTL
Pinterest-Generated-By
X-Origin-Cache
X-Vhost
X-Vname
X-TtlSet
X-PC
X-Cached
X-FTR-Request-ID
X-Server-ID
X-ESI
RTSS
X-Ruxit-JS-Agent
SPRequestGuid
X-Trace
X-Goog-Hash
X-VARITI-CCR
Charset
X-Powered-By-Plesk
X-SharePointHealthScore
Accept-CH
X-GitHub-Request-Id
X-DynaTrace-JS-Agent
X-T
X-Dispatcher
X-Powered-CMS
Public-Key-Pins
X-D2id
X-Mod-Pagespeed
X-B3-TraceId
X-Mobile-Rewrite
PB-PID
PB-RID
Arc-Version
X-F-Cache
Verso
X-Cdn-Fetch
Content-MD5
X-Exp-Variant
X-Kinja-Build
X-Kinja-Revision
X-Exp-Id
X-Kinja
X-GoogleNews-Bot
X-Kinja-Server
X-Version
SPRequestDuration
SPIisLatency
MS-Author-Via
X-Shield-Request-Id
X-Recruiting
X-Dns-Prefetch-Control
X-Oracle-Dms-Rid
X-Abt-Application-Version
X-ORACLE-DMS-RID
Nginx-Cache
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Client-IP
X-Forwarded-Proto
Accept-CH-Lifetime
X-HW
X-DIS-Request-ID
X-N
X-Navigation-Version
AR-ATIME
AR-CACHE
AR-PoweredBy
X-Upstream-Env
X-Pinterest-Rid
Pinterest-Version
X-B
X-Amz-Rid
X-Fastly-Request-ID
X-Upstream
DynaTrace
X-Origin-Upstream-Status
X-Dw-Request-Base-Id
X-Ser
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Amz-Meta-S3cmd-Attrs
X-Hits
Fastly-Restarts
TCN
Realpath
Paypal-Debug-Id
X-Wix-Server-Artifact-Id
X-Goog-Generation
X-Goog-Metageneration
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-XRDS-Location
X-Accel-Buffering
X-Content-Options
Arr-Disable-Session-Affinity
Service-Worker-Allowed
X-NF-Request-ID
X-Pad
X-Acc-Meta-Resource-Type
X-Goog-Storage-Class
S
Tracecode
Access-Control-Request-Method
X-Litespeed-Cache
X-Content-Digest
X-Varnish-Age
X-Debug
X-Use-Magma
X-Id
Front-End-Https
X-Oneagent-Js-Injection
X-Vcap-Request-Id
MRF-Tech
Mrf-Cache-Status
X-Mrf-Item-Lastmod
X-Mrf-Section-Lastmod
X-MSEdge-Ref
Edge-Cache-Tag
X-ATG-Version
X-Frontend
X-IPLB-Instance
X-FTR-Expires
X-FTR-Realm
X-PressLabs-Stats
X-FTR-DC
X-FTR-Backend
X-Country-Code-Real
X-RateLimit-Remaining
X-FTR-Backend-Server
X-FTR-Cache-Status
X-FTR-Balancer
X-Kinsta-Cache
X-Logged-In
MicrosoftSharePointTeamServices
X-Amz-Cf-Pop
X-HS-Content-Id
X-HS-Hub-Id
Surrogate-Key
X-Cache-Hit
X-B3-TraceId-Primal
Rt-Fastcgi-Cache
X-Forwarded-For
X-Request-Processing-Time
Fastcgi-Cache
X-Request-Received
Display
X-Sol
X-Middleton-Display
X-Zen-Fury
X-Edge-Location
X-Webkit-Csp
Powered-By-ChinaCache
X-Analytics
Backend-Timing
Server-Name
X-Rid
X-Debug-Info
X-Amzn-Trace-Id
Host
X-FastCGI-Cache
X-User-Agent
X-Revision
X-FTR-Cache-Host
TP-Cache
TP-L2-Cache
FilterID
X-HS-Cache-Config
X-Akam-SW-Version
AMP-Access-Control-Allow-Source-Origin
X-Fastcgi-Cache
X-CF-Powered-By
Ar-Sid
X-Middleton-Response
Response
X-TA-CDN-Provider
AR-Request-ID
X-Grace
X-Drupal-Cache-Tags
X-SS-Set-Cookie
X-Mobile
X-Cache-Key
X-Magnolia-Registration
X-SERVER
X-Newrelic-App-Data
Refresh
X-Ttl
Cache-Status
X-NewRelic-App-Data
X-Accel-Expires
X-Cached-By
Host-Header
X-GUploader-UploadID
X-B3-Sampled
X-Varnish-Backend
ServerID
X-Webkit-CSP
X-AOL-HN
X-Node-Name
X-VCache
X-NWS-LOG-UUID
X-Content-Security-Policy-Report-Only
X-Tumblr-Pixel
X-Instance
Eomportal-Instance
X-Cluster
X-Whom
X-FB-Debug
X-Tumblr-Pixel-0
X-Tumblr-User
X-Cache-2
X-Akamai-Edgescape
X-Cache-Control
X-Signature
X-B-Cache
X-Platform-Server
X-Ruxit-Js-Agent
X-Framework
X-Device-Type
X-BCube-Filmed-By
X-App-Environment
X-LB-Cache
X-Generated-By
X-Varnish-Hostname
X-Page-Id
X-Handled-By
X-Drupal-Cache-Contexts
X-Via-JSL
Cleartype
X-Request-Guid
X-Srv
X-Cache-Rule
X-AppVersion
X-Activity-Id
X-Az
X-Cache-Action
Cache-Tag
DC
Liferay-Portal
X-App-Server
Alternate-Protocol
X-Cache-Server
Source
X-Content-Powered-By
Retry-After
MS-CV
X-WPE-Loopback-Upstream-Addr
X-Hostname
X-App-Version
X-HS-Combine-CSS
X-WA-Info
X-Varnish-Grace
Public-Key-Pins-Report-Only
HostName
X-Geo-Country
X-Varnish-Server
X-Correlation-Id
X-Amz-Replication-Status
X-Esi
X-TT
X-Seen-By
X-Daa-Tunnel
X-Wix-Request-Id
ViewerVersion
Server-Node
AR-SID
Pagespeed
Accept-Charset
Webserver
X-URL
X-Cache-NE
X-Tumblr-Pixel-1
X-Tumblr-Pixel-2
X-Response-Served-From
AsisCache
X-WebKit-CSP-Report-Only
Upgrade-Insecure-Requests
SRV
X-Amz-Apigw-Id
X-Amzn-RequestId
X-GeoIP
Actual-Object-TTL
X-Locale
X-RequestSource
GEO-INFO
X-Jobs
X-Varnish-Hits
ServedBy
X-FW-Server
X-FW-Static
X-FW-Type
X-FW-Serve
X-Edge-Cache-Key
Viewport
Payment
X-Contextid
X-Edge-Cache
X-Servedby
X-FW-Hash
X-S
X-UUID
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Status
X-Varnish-IP
X-TX-ID
X-Adobe-Loc
X-XRDS-LOCATION
X-Adobe-Content
X-Cacheable-TTL
X-TT-TIMESTAMP
Cache
X-Origin-Server
X-Cache-TTL-Remaining
X-Vg-Webcache
X-Geo-Segment
X-Correlation-ID
S-Cnection
X-Hyper-Cache
X-Amz-Server-Side-Encryption
X-Cache-Operation
X-Cache-Age
X-Forwarded-Host
Server-Info
Datacenter
X-RateLimit-Limit
Served-By
X-Region
X-Real-IP
X-Mode
X-Akamai-Request-ID2
Access-Control-Allow-Method
X-CLOUD-TRACE-CONTEXT
X-Sucuri-ID
X-DataStream-Cache-Status
Healthy
X-Content-Type
X-Akamai-Transformed
CACHE
X-GRACE
Country
X-Cache-Var
Machine
X-Rendered-As
X-Cache-Var-Map
Meta-Geo
X-Cache-Config
X-Site-Version
X-JoinUs
X-L-Path
X-Proxy
X-Environment-Context
Fastcgi-X-Cache
X-Upgrade-Enabled
Fastcgi-X-Cache-Version
X-Generated
X-Is-Bot
X-Path-Route
Fastcgi-Useragent
X-Routing-Service
X-Detected-As
X-Proxied
From-Origin
X-RN-RSRV
X-Zipkin-Id
X-Ocache
X-Rule
X-Human
X-Format
X-CDN-Cache
X-Hosted-By
X-Birta-Served
X-Section
X-Amz-Meta-Surrogate-Control
X-NGENIX-Cache
X-Agile-Age
X-Access
L5d-Success-Class
X-Viewer-Country
DB-Nickname
X-Agile-Id
X-Agile
Now
X-Request-Time
X-Birta-Cache-Post
X-Via-CDN
X-Cache-Category-Id
X-EIG-Tracking-Id
X-Ezoic-Cdn
TWC-Privacy
Webcakes-App-Version
X-CCM
TWC-GeoIP-LatLong
Webcakes-Region
Webcakes-App-Name
TWC-Device-Class
X-Loop
X-Pc-Key
X-PCL
X-Labrador-Cache-Channel
X-TNCMS
X-Pc-Hit
X-Pc-Appver
X-Via-Fastly
X-Web-Node
X-OCL
Cache-Name
X-FC-Vary-Parameters
OT-Force-Account-Verify
X-ServerID
X-Origin-Hint
X-Hit
X-Grey
TWC-GeoIP-Country
Xserver
S-Rt
TWC-Connection-Speed
TWC-Locale-Group
Property-Id
X-Tb
HitType
X-ProxyCache-Key
X-RemovedCookies
X-Pubstack
X-Xfnlog-Site
X-OVcl-Cache
X-OVcl
X-Original-Request
X-Origin
X-Microcachable
X-ProxyCache-Status
Origin-Cache-Control
Origin-Edge-Control
X-IP
X-VG-TLSProxy
X-Upstream-CT
X-Upstream-HT
X-ProcessESI
X-BYPASS-REASON
HitInfo
Azure-SiteName
Azure-SlotName
Azure-Version
Azure-RegionName
X-Cdn
Azure-InstanceId
X-Geo
X-Sorting-Hat-PodId
X-Timing-Wait
X-Www-Served-By
X-Cluster-Node
X-Sorting-Hat-ShopId
X-Alternate-Cache-Key
Accept-Language
X-Shopify-Stage
Selected-FE
X-Proxy-Build
LB
X-ShardId
X-ShopId
Mn-Server-Ip
NGB
X-App-Name
X-RTag
Ms-Operation-Id
X-Rocket-Nginx-Bypass
X-Connection-Hash
X-Transaction
X-Twitter-Response-Tags
X-TWH-CORRELATION-ID
Filters
X-Cache-Enabled
X-TIME
X-Cache-Remote
X-SplitTest
X-LJ-Flow-ID
X-VWS-Id
X-AWS-Id
X-UA
X-NCache
X-Real-Ip
Time
X-Internal-Host
Access-Control-Request-Headers
IBM-Web2-Location
X-Guploader-Uploadid
X-Pc-Date
X-Tumblr-Pixel-3
X-UA-Device-Type
X-Pc-Host
Content-Script-Type
X-NodeID
X-Unique-ID
Content-Style-Type
X-Nginx-Cache
X-CACHE-KEY
X-Origin-CC
X-Source
X-Cache-TTL
X-Proto
Cache-Hits
Mail-Subject
X-PHP-Backend
X-Cdn-Forward
We-Hiring
X-MP-GENERATED-AT
X-Port
NtCoent-Length
X-Ms-Version
X-Ms-Request-Id
X-Ms-Lease-Status
X-Ms-Blob-Type
X-Vgn-Hpd-Reason
X-Edge-IP
X-Storage
X-Time-Microsecs
Backend
X-Debug-Cache
X-Varnish-Cacheable
X-Distil-CS
X-APP-VERSION
X-Webstats-RespID
X-Akamai-Request-ID
Cache-Tags
X-Backend-Name
X-CACHE-GROUP
X-Csrf-Token
X-Ua
X-Endurance-Cache-Level
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Urbn-Site-Id
PageSpeed
X-Urbn-Context-Path
Locale
X-Origin-Response-Time
X-Ratelimit-Limit
X-Redis-Cache
User-Agent
X-Varnish-Cache-Hits
X-EdgeConnect-Cache-Status
Warning
X-Croise-Owner
X-Nc
X-C
X-CACHE-AGE
X-PERF
X-ApacheServer
X-A-Ccd
X-UE-Client-Country
X-VG-WebServer
SN
X-Store
TSSecure
UCS
V-Age
X-Trv-Group
Viewtype
VivaBuild
X-Via-Edge
X-A
Rt-Proxy-Cache
HA-Geocity
HA-Cloudapp
HA-Geocountry
HA-Geolat
HA-Georegion
HA-Geolon
GMS-Ver
FSS-Proxy
Ec-Rule-Version
Content-Disposition
Fly-Cache
Fly-Request-Id
FSS-Cache
Ha-Gx-Prefs
HA-Host
Rendered-Blocks
Xc-Version
X-We-Are-Hiring
Resin-Trace
X-Via-SSL
X-A-Dam
Powered-By
Mobile-Detection-Method
HA-Servedtime
HA-Ipaddr
HA-Urlpath
MD5-Digest
Meta-Geo-Continent
Server-Host
X-Accel-Expires-Debug
X-Date
X-IN-APIGATEWAY
X-Debug-Cookies
X-Debug-Log
X-Hash
X-IN-SSL-APIGATEWAY
X-D
X-Irp-Debug
X-Logtrace-Id
X-IN-WAF
X-CF-Lambda-Version
X-CGP
Cache-Prefix
X-GeoIP-Country-Code
X-F5-Cache
X-Died
X-DPWN-IS-SECURE
X-ElasticPress-Search
X-Eu-Site
X-Fetched-On
X-From
X-Destination
X-Generated-In
X-Developer
X-G
X-CF-Lambda-Fn
X-NU-AKA-ACS-Version
X-Server-Time
X-Application
X-B-Cookie
X-Server-By
X-BB-ID
X-Amz-Meta-Cache-Control
X-Aed
X-Sn-Servicetimems
X-SRCache-Key
X-A-Dgt
Fastly-SSL
X-External-Request-Id
X-BBXSRF
X-Cache-Bucket
X-PAYTM-SRV-ID
X-Region-Sid
X-Cdn-Origin
X-Org
X-NX-Host
X-Rewrite-Enabled
X-Rojux
X-Cache-Host
X-Cache-URL
X-ScT
X-S-Cookie
X-A-Dcw
X-A-Wwc
X-CDN-Forward
BehaviorPad-Version
X-Cache-Backend
Arc-Country
Ajk
X-Mshield-Cache-Status
X-B3-Spanid
X-Varnish-Beresp-Ttl
X-Mrs-Cache-Hits
X-Mrs-Age
X-Mrs-Cache
X-Dc
Version
Cache-Key
X-Sucuri-Cache
Thinkindot-Control
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
X-Rebelmouse-Cache-Control
X-FW-Version
X-No-Session
X-Wikidot-Backend
X-Epic-Correlation-Id
Fastly-Soc-X-Request-Id
X-Rebelmouse-Surrogate-Control
X-Oss-Hash-Crc64ecma
X-Dynatrace-Js-Agent
X-Core-Value
Frame-Options
X-VServer
RNT-Time
Decoy-Debug-Key
X-Oss-Object-Type
Server-ID
X-Clientip
X-MServer
X-Wikidot-Static-Cache
X-Backend-Host
Fastly-SIE
X-Auto-Login
Fastly-SWR
X-Backend-State
X-Backend-Url
X-Hello
X-Hl-Ver
Country-Code
X-GeoIP-City
X-Cache-Id
Countrycode
X-Location
X-Matched-Rule
Www
X-ABtesting
X-Layer
X-Thinkindot-L3
X-DC
X-Key
X-Oss-Request-Id
RNT-Machine
X-Oss-Storage-Class
X-ServiceProvider
X-Var-Ttl
Heartbleed
X-Flog
Decoy-Debug-TTL
X-Developers
IsBot
X-S-Maxage
X-Dispatcher-Server
X-V
Apple-News-Services-Host
Apple-News-Services-Parsed-Url
X-User
Apple-News-Services-Handled
Apple-News-Services-Request-Url
AKAMAI
GW-Server
Memcached
Decoy-Debug-Status
X-Qloud-Router
X-Reboot
Pramga
X-SIPLIST1
Odigeo-Trace-Id
X-Via-NSCOPI
Origin
X-Trace-Id
Release
X-UnsetCookies
X-Response-By
X-Platform
X-Request-URI
X-Request-Start
X-Oss-Server-Time
X-Release
X-Datadome
Section-Io-Cache
X-Powered-By-ANYU
X-NC
X-NWS-UUID-VERIFY
WZWS-RAY
X-Swa-Ws
X-Fastly-Cache
X-Thanos
X-Gannett-Site-Version
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Up
X-TT-LOGID
Cache-Cookie-Set-From
X-Gen-Mode
X-Nginx-Cache-Key
X-RCS-CacheZone
X-Request-UUID
X-Returned-From
X-Sf
X-Policy
X-Passed-To-PostProcessResponse
X-Phone
X-Returned-From-BeforeDispatch
X-Returned-From-DLL
X-Sentry-ID
X-Served-From
X-Secret
X-Server-IP
X-Returned-From-PostProcessResponse
Cache-Cookie-Set-Idcheck
X-Passed-To-DLL
X-Passed-To-BeforeDispatch
X-Instance-Name
X-Li-Fabric
X-Newrelic-Synthetics
X-Stale
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-Li-Pop
X-LI-Proto
X-P-T
X-Passed-To
X-Node-Id
Cache-Cookie-Set-Lfrom
X-LI-UUID
X-MI-In-Market
X-Hnp-Log
X-Crawler
Fastly-Backend-Name
Web-Mar-Node
X-Cache-FS-Status
User-Cache-Control
Pagetype
Platform
X-Bip
Backend-Name
Is-Eu
X-Actual-URL
X-Info
True-Client-Country-4JS
MI-Cache-Age
MI-Cache
Magicmarker
Kp-EeAlive
On-Server
Pragrma
X-Variation
Server-Int
Request-EU
Request-Country
X-Block-Status
Uber-Trace-Id
X-WebServer
X-Core-Mission
X-Varnish-Action
X-VCT
Adler-Geo
X-CUA
X-Worker
X-Cache-Expires
Esi-Enabled
X-Distributor
X-Device-Os
X-Cache-Debug
X-Parent-Response-Time
REQUESTUUID
X-MSEdge-Flight
Proxy-Connection
X-Owner
X-Fstrz
X-MSEdge-Features
X-Cache-CFC
X-Refresh
X-HOST
Group
V-Cache
MI-API
X-Unique-Id-Primal
X-NODE
CDCHOST
X-Time
X-Page-Type
HTTPS
RequestId
Who
Cteonnt-Length
MIME-Version
X-Pjax-Url
X-Req
X-SN
Fusion-Source
X-Servername
X-Backend-TTL
X-Be
X-Kong-Proxy-Latency
Fusion-Template-Id
Fusion-Component-Id
Fusion-Content-Id
Fusion-Content-Source
X-Kong-Upstream-Latency
X-Cache-Srv
X-Oracle-Dms-Ecid
Amp-Access-Control-Allow-Source-Origin
NodeID
X-Ms-Lease-State
Memory
X-GZip
X-Origin-TTL
Cdn
ProcessTime
Cdn-Request-Time
X-Edge-Server
Cdn-Host
X-Server-Group
X-Servedbyhost
SS
X-Content-Age
Mime-Version
SD-X-WS
CF-IPCountry
X-Aicache-OS
X-Protected-By
X-BB-IP
X-Wa
X-ND-Cache
X-COUNTRY
X-Ckpd-Fst-Backend
GeoIP-Country-Code
A
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-SRV
GeoIP-Latitude
CDN
X-Origin-Expires
X-Origin-Date
PageType
X-Origin-Host
X-Varnish-Beresp-TTL
Is-Session-Tracking
Get-Access-Time
XServer
X-StackifyID
X-ID
X-B3-Traceid
X-APP
X-Pf-Uncompressing
X-Varnish-Url
X-Fastly-Country-Code
Serverid
X-Unique-Id
Geoip-Latitude
GeoIp-Country-Code
Processtime
X-Requestid
PICS-Label
X-WA
Node
X-Cache-Info
X-PHP-Host
X-Ratelimit-Remaining
X-CSRF-Token
X-Proxy-Upstream
X-RateLimit-Remaining-Second
X-Gdpr
X-Proxy-Cache-Status
Vix-Hermes-Req-Id
X-RateLimit-Limit-Second
X-Fastly-Cache-Hits
X-Generation-Time
Nel
X-Nananana
Cache-Tv-Group
X-Load-Cache
Cf-Ipcountry
X-FireWall-Port
X-ServedByHost
X-Check-Cacheable
X-RequestId
X-SERVER-NAME
DataCenter
X-BACKEND-TTL
URI
X-EC-Security-Audit
Cache-Provider
X-HS-Status
X-Planisys-CDN-Rules
X-CS
X-GZIP
X-Planisys-CDN-Cache
X-UPSTREAM-Address
X-Planisys-CDN-TTL
X-Server-W
X-B3-SpanId
Hostname
X-FORWARDED-FOR
WP-Super-Cache
X-NGINX-Cache
Request-Time
X-GEO
X-WR-MODIFICATION
X-Fastly-Backend-Reqs
NGX
Host-ID
X-Micro-Cache
X-Surge-Debug
T-Server
PFcat
X-Front
X-Debug-Cache-Store
X-GDPR
X-HTML-Minification-Powered-By
X-DataStream-MidMile-RTT
X-Debug-Cache-Fetch
X-DataStream-Origin-MEX-Latency
X-Debug-Cache-Expiry
X-Fe
X-BE
X-VG-WebCache
X-HTML-Edge-Cache
X-Atg-Version
Https
ServerName
X-M-Reqid
X-FB-TRIP-ID
X-M-Log
X-ServerName
X-PF-Uncompressing
Requestid
X-VarnPar1
X-IPS-LoggedIn
X-Qnm-Cache
RequestUuid
X-VarnCache
X-PARISIEN-Cache-Rendered
X-Svr
X-PJAX-URL
X-Vcache
X-Akamai-SSL-Client-Sid
X-Amz-Meta-S3b-Last-Modified
X-Swift-Error
Lfy
X-Alicdn-Da-Ups-Status
X-VarnPar2
Ohc-Response-Time
N-Cache
X-Level-Front-Cache
X-VC
X-From-Cache
Pics-Label
X-Cdn-Srv
X-Generated-On
Ohc-File-Size
X-SB
X-Instart-Info
X-PAGE-TYPE
X-Distil-Cs
X-Cache-Ttl
WebServer
Load-Balancing
X-Serial
X-RAMCache
X-Gen-Id
X-Skip-Cache
X-ARC
X-Grace-Duration
X-Dw-Trace-Id
Build-Number
Cdn-Src-Port
SID