Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Accept-Ranges
Pragma
X-Powered-By
Link
ETag
CF-RAY
Expect-CT
Via
X-XSS-Protection
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Id
X-Served-By
P3P
Referrer-Policy
X-Varnish
X-Xss-Protection
X-Timer
CF-Cache-Status
X-Request-Id
Access-Control-Allow-Headers
X-AspNet-Version
Access-Control-Allow-Methods
X-Download-Options
X-Runtime
Access-Control-Allow-Credentials
P3p
X-Drupal-Cache
X-Check
X-Adblock-Key
Alt-Svc
X-Cacheable
X-Generator
CF-Ray
Content-Security-Policy-Report-Only
X-Cache-Status
X-Request-ID
X-AspNetMvc-Version
Status
X-DNS-Prefetch-Control
X-Amz-Cf-Pop
X-Template
X-Language
Timing-Allow-Origin
Content-Encoding
X-Permitted-Cross-Domain-Policies
X-Iinfo
X-Buckets
X-Content-Security-Policy
X-Turbo-Charged-By
Upgrade
X-Kinja-Server-Push
X-CDN
X-Type
Xkey
Keep-Alive
Access-Control-Expose-Headers
WPE-Backend
X-Pass-Why
X-AH-Environment
Access-Control-Max-Age
X-Backend
X-Cache-Group
X-Server
X-Age
X-Drupal-Dynamic-Cache
X-Pingback
X-Via
X-Nginx-Cache-Status
X-Amz-Request-Id
X-Amz-Id-2
X-Server-Powered-By
Grace
X-Hacker
EagleId
X-UA-Device
X-Robots-Tag
X-LiteSpeed-Cache
X-Varnish-Cache
X-Page-Speed
X-Swift-CacheTime
X-Swift-SaveTime
X-Proxy-Cache
Cf-Railgun
X-Envoy-Upstream-Service-Time
Request-Context
Ali-Swift-Global-Savetime
X-Ua-Compatible
X-Ac
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Device
X-WebKit-CSP
X-Cache-Lookup
Content-Location
X-Amz-Version-Id
Surrogate-Control
X-Cnection
X-Host
X-Server-Id
X-Readtime
Report-To
X-Node
X-Rq
EagleEye-TraceId
Server-Timing
X-Response-Time
X-OneAgent-JS-Injection
X-CST
Feature-Policy
X-Rack-Cache
X-Backend-Server
X-ORACLE-DMS-ECID
X-Application-Context
X-Iejgwucgyu
Request-Id
X-Instart-Request-ID
X-Cloud-Trace-Context
X-Clacks-Overhead
NEL
Edge-Control
X-DynaTrace
Allow
Rating
X-Url
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Country
X-Varnish-TTL
X-Origin-Cache
X-FTR-Request-ID
X-Country-Code
X-B3-TraceId
X-Cdn
X-Trace
X-Server-Name
X-Px
X-Vhost
X-DataDome
X-Ruxit-JS-Agent
X-Server-ID
X-ESI
X-GitHub-Request-Id
X-ORACLE-DMS-RID
X-MS-InvokeApp
X-VARITI-CCR
RTSS
X-Cached
Accept-CH
SPRequestGuid
X-Goog-Hash
Charset
X-TtlSet
X-Vname
X-PC
X-TTL
Pinterest-Generated-By
X-Mod-Pagespeed
X-D2id
X-F-Cache
Public-Key-Pins
X-Dispatcher
X-Cdn-Fetch
X-Exp-Id
X-Exp-Variant
X-GoogleNews-Bot
X-Kinja
X-Use-Magma
X-Kinja-Revision
X-Kinja-Server
X-Kinja-Build
Verso
X-SharePointHealthScore
Arc-Version
PB-RID
X-Mobile-Rewrite
PB-PID
X-T
X-DynaTrace-JS-Agent
X-Version
X-Powered-By-Plesk
X-Abt-Application-Version
Accept-CH-Lifetime
X-Powered-CMS
X-DIS-Request-ID
X-Dns-Prefetch-Control
X-Ser
X-Fastly-Request-ID
Pinterest-Version
X-Upstream-Env
X-Pinterest-Rid
X-Navigation-Version
X-Origin-Upstream-Status
X-Recruiting
X-Shield-Request-Id
X-Forwarded-Proto
X-B
MS-Author-Via
DynaTrace
X-Client-IP
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Amz-Rid
Realpath
SPIisLatency
SPRequestDuration
X-HW
Content-MD5
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Oneagent-Js-Injection
X-Upstream
X-Vcap-Request-Id
X-Goog-Stored-Content-Encoding
Nginx-Cache
X-Goog-Stored-Content-Length
X-Goog-Generation
X-Goog-Metageneration
Edge-Cache-Tag
X-Wix-Server-Artifact-Id
X-Amz-Meta-S3cmd-Attrs
X-Accel-Buffering
AR-CACHE
AR-ATIME
AR-PoweredBy
X-N
X-Ttl
X-Hits
Arr-Disable-Session-Affinity
TCN
X-Debug
X-Varnish-Age
X-NF-Request-ID
X-Oracle-Dms-Rid
X-Mrf-Section-Lastmod
X-Mrf-Item-Lastmod
Access-Control-Request-Method
MRF-Tech
Mrf-Cache-Status
X-B3-TraceId-Primal
X-Goog-Storage-Class
X-Acc-Meta-Resource-Type
X-MSEdge-Ref
X-NewRelic-App-Data
X-Dw-Request-Base-Id
X-XRDS-Location
X-ATG-Version
S
X-Id
Service-Worker-Allowed
X-FTR-Balancer
X-Country-Code-Real
X-FTR-Cache-Status
X-FTR-Backend
X-FTR-Backend-Server
X-FTR-DC
X-FTR-Realm
X-Via-JSL
X-FTR-Expires
X-Logged-In
Tracecode
X-FastCGI-Cache
X-PressLabs-Stats
X-HS-Hub-Id
X-Forwarded-For
X-HS-Content-Id
X-Content-Digest
Rt-Fastcgi-Cache
Alternate-Protocol
X-Pad
X-Frontend
X-Kinsta-Cache
Surrogate-Key
X-RateLimit-Remaining
Fastly-Restarts
AMP-Access-Control-Allow-Source-Origin
MicrosoftSharePointTeamServices
X-Content-Options
Ar-Sid
X-FTR-Cache-Host
X-Cache-Key
Server-Name
X-Edge-Location
X-Amzn-Trace-Id
Backend-Timing
X-Analytics
Fastcgi-Cache
FilterID
Host
X-CF-Powered-By
X-Grace
TP-Cache
X-IPLB-Instance
TP-L2-Cache
X-Rid
X-User-Agent
X-Hostname
X-Debug-Info
ServerID
X-B3-Sampled
X-Revision
X-Whom
X-Magnolia-Registration
Eomportal-Instance
Paypal-Debug-Id
X-Cache-2
X-Request-Received
X-Request-Processing-Time
X-NWS-LOG-UUID
X-Ruxit-Js-Agent
X-Page-Id
X-HS-Cache-Config
X-Mobile
AR-Request-ID
X-Srv
Front-End-Https
X-Akam-SW-Version
X-AOL-HN
X-VCache
X-Content-Powered-By
Retry-After
X-Cache-Hit
X-Signature
X-URL
X-Litespeed-Cache
X-Varnish-Grace
X-B-Cache
X-GUploader-UploadID
X-Cluster
Source
X-SS-Set-Cookie
X-FB-Debug
X-Device-Type
X-Handled-By
X-LB-Cache
X-WA-Info
Cleartype
X-Instance
X-App-Environment
X-Cache-Action
Refresh
X-Varnish-Hostname
X-Request-Guid
X-Correlation-Id
X-BCube-Filmed-By
X-Framework
X-Cache-Control
X-Platform-Server
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Content-Security-Policy-Report-Only
X-TA-CDN-Provider
X-Zen-Fury
X-Akamai-Edgescape
Webserver
X-Varnish-Backend
X-Webkit-CSP
X-Daa-Tunnel
Display
X-Middleton-Display
X-Sol
X-XRDS-LOCATION
X-Fastcgi-Cache
X-Drupal-Cache-Tags
X-Varnish-Server
X-Cache-Server
X-Az
X-AppVersion
X-Activity-Id
X-Drupal-Cache-Contexts
Healthy
X-Content-Type
X-Geo-Country
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-Cache-Rule
X-Generated-By
X-Seen-By
X-Middleton-Response
Response
X-Wix-Request-Id
ViewerVersion
X-Cache-Age
Server-Node
X-App-Server
S-Cnection
X-Cached-By
Cache-Status
X-Accel-Expires
X-Node-Name
X-DataStream-Cache-Status
X-CACHE-GROUP
X-Origin-Server
X-Amzn-RequestId
X-Amz-Replication-Status
X-Amz-Apigw-Id
X-Esi
Upgrade-Insecure-Requests
X-TT
X-Response-Served-From
X-S
X-RequestSource
Payment
NGB
Filters
GEO-INFO
X-WPE-Loopback-Upstream-Addr
Host-Header
X-UA-Device-Type
HostName
X-Cacheable-TTL
Viewport
X-Edge-Cache-Key
X-Varnish-IP
X-Locale
X-GeoIP
X-Edge-Cache
X-Cache-NE
X-FW-Server
ServedBy
X-Servedby
X-FW-Hash
Actual-Object-TTL
X-FW-Static
X-Contextid
X-FW-Type
X-Jobs
X-FW-Serve
X-Status
X-UUID
X-Tumblr-Pixel-2
X-Tumblr-Pixel-1
X-Varnish-Hits
X-TX-ID
X-TT-TIMESTAMP
AsisCache
Access-Control-Allow-Method
X-WebKit-CSP-Report-Only
X-Amz-Server-Side-Encryption
Server-Info
Accept-Charset
X-Adobe-Loc
X-Adobe-Content
X-Storage
X-Vg-Webcache
SRV
X-HS-Combine-CSS
X-Hyper-Cache
Cache
X-CLOUD-TRACE-CONTEXT
X-Cache-TTL-Remaining
X-Cache-Remote
X-PHP-Backend
X-Rendered-As
X-Croise-Owner
From-Origin
MS-CV
X-APP-VERSION
X-App-Version
X-Cache-Operation
Cache-Tag
DC
Cache-Tv-Group
X-Region
X-Forwarded-Host
Public-Key-Pins-Report-Only
Served-By
Liferay-Portal
X-Redis-Cache
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Mode
X-CACHE-KEY
X-IP
X-RN-RSRV
X-Agile-Age
Machine
Fastcgi-X-Cache-Version
Fastcgi-X-Cache
Fastcgi-Useragent
Meta-Geo
Selected-FE
X-Agile
X-Endurance-Cache-Level
X-Akamai-Transformed
X-Agile-Id
X-Path-Route
X-TNCMS
X-Akamai-Request-ID2
X-Hosted-By
X-Cache-Var
X-Loop
X-Request-Time
X-Cache-Var-Map
X-Timing-Wait
X-Is-Bot
X-Proxy-Build
X-NGENIX-Cache
X-Detected-As
X-Upgrade-Enabled
TWC-GeoIP-Country
X-Generated
X-Pc-Hit
X-Vgn-Hpd-Reason
X-ProxyCache-Status
X-Via-Fastly
X-Zipkin-Id
Now
Cache-Name
X-ProxyCache-Key
X-Proxied
Property-Id
S-Rt
X-Grey
X-Format
TWC-Connection-Speed
X-Webstats-RespID
TWC-Device-Class
X-CDN-Cache
X-Internal-Host
X-Origin-Hint
X-JoinUs
X-Pc-Appver
X-BYPASS-REASON
X-Original-Request
X-Pc-Key
X-Human
X-Cache-Category-Id
X-L-Path
X-Environment-Context
Webcakes-App-Name
TWC-Privacy
Webcakes-App-Version
Webcakes-Region
X-Labrador-Cache-Channel
X-Routing-Service
X-Site-Version
TWC-Locale-Group
TWC-GeoIP-LatLong
Xserver
X-RemovedCookies
DB-Nickname
Powered-By-ChinaCache
X-Upstream-CT
X-Access
Origin-Edge-Control
Origin-Cache-Control
X-UA
X-Section
X-Upstream-HT
Cache-Tags
X-ProcessESI
X-Pubstack
X-Viewer-Country
X-NCache
X-Birta-Served
X-VG-TLSProxy
X-Birta-Cache-Post
X-Www-Served-By
X-Backend-Name
X-Origin-Host
X-Origin-Response-Time
X-Time-Microsecs
X-FC-Vary-Parameters
X-Cache-Config
Datacenter
X-Akamai-Request-ID
X-Xfnlog-Site
X-Origin-CC
X-Tumblr-Pixel-3
X-ServerID
X-Origin
X-OCL
Pagespeed
X-Ocache
X-Proxy
X-RateLimit-Limit
X-PCL
X-Web-Node
Azure-RegionName
Azure-SiteName
Azure-SlotName
Mn-Server-Ip
OT-Force-Account-Verify
Azure-InstanceId
X-CCM
Azure-Version
X-ShardId
X-ShopId
X-Sorting-Hat-ShopId
X-Tb
X-Alternate-Cache-Key
HitType
X-TIME
X-B3-Spanid
X-Shopify-Stage
X-Sorting-Hat-PodId
X-Via-CDN
X-Rule
X-Real-IP
X-App-Name
X-Parent-Response-Time
X-Nginx-Cache
Accept-Language
X-NODE
X-Cache-TTL
X-Ezoic-Cdn
X-Guploader-Uploadid
L5d-Success-Class
Vix-Hermes-Req-Id
X-Edge-IP
X-Protected-By
Cache-Key
X-OVcl-Cache
X-OVcl
NtCoent-Length
LB
Content-Style-Type
Content-Script-Type
User-Cache-Control
X-Amz-Meta-Surrogate-Control
X-Newrelic-App-Data
Time
X-Kong-Proxy-Latency
X-Proto
X-Kong-Upstream-Latency
X-BACKEND-TTL
X-Webkit-Csp
X-Pc-Host
X-Cache-Backend
X-Pc-Date
X-RTag
Ms-Operation-Id
X-Correlation-ID
X-GRACE
X-ApacheServer
X-PERF
X-Real-Ip
X-Front
X-Nc
X-Cdn-Forward
X-Unique-Id-Primal
Section-Io-Cache
X-CDN-Forward
X-Hit
X-Mrs-Age
X-Mrs-Cache
X-Mrs-Cache-Hits
X-Mshield-Cache-Status
X-Sucuri-ID
X-Varnish-Beresp-Grace
AR-SID
X-Varnish-Beresp-Status
X-FB-TRIP-ID
X-Varnish-Cacheable
X-Debug-Cache
X-Unique-ID
WZWS-RAY
X-Microcachable
Access-Control-Request-Headers
X-Content-Age
X-Connection-Hash
X-C
Version
X-Transaction
X-Dc
X-Twitter-Response-Tags
X-Varnish-Beresp-Ttl
Fusion-Component-Id
X-EdgeConnect-Cache-Status
Fusion-Template-Id
Fusion-Source
Fusion-Content-Source
Fusion-Content-Id
X-Trace-Id
X-Time
X-MP-GENERATED-AT
X-Cache-Enabled
Warning
Country
X-CUA
X-Cache-Bucket
X-Cache-Debug
X-D
X-Destination
X-Date
X-Crawler
X-Clientip
X-Cache-Id
X-Cache-Host
X-Bip
X-Cache-URL
X-CF-Lambda-Fn
X-Cache-FS-Status
X-CF-Lambda-Version
X-WebServer
X-Application
RNT-Machine
Resin-Trace
Rendered-Blocks
RNT-Time
Rt-Proxy-Cache
Server-Host
SD-X-WS
Release
Powered-By
MD5-Digest
Locale
Is-Eu
Meta-Geo-Continent
Mobile-Detection-Method
Platform
Node
Server-ID
SS
X-Actual-URL
X-Accel-Expires-Debug
X-A-Wwc
X-Aed
X-Auto-Login
X-Backend-State
X-B-Cookie
X-A-Dgt
X-A-Dcw
Viewtype
V-Age
Uber-Trace-Id
VivaBuild
Xc-Version
X-A-Dam
X-A-Ccd
X-BB-ID
X-From
X-Passed-To-PostProcessResponse
X-Served-From
X-Server-By
X-PAYTM-SRV-ID
X-PHP-Host
X-Qloud-Router
X-ScT
X-Passed-To-DLL
X-Server-Time
X-Store
X-Thanos
X-Org
X-SRCache-Key
X-Passed-To-BeforeDispatch
X-Passed-To
X-RCS-CacheZone
IBM-Web2-Location
X-Reboot
X-Returned-From-BeforeDispatch
X-Region-Sid
X-Returned-From
X-Request-UUID
X-Response-By
X-Returned-From-DLL
X-Returned-From-PostProcessResponse
X-S-Maxage
X-Rebelmouse-Cache-Control
X-S-Cookie
X-Rebelmouse-Surrogate-Control
X-Rewrite-Enabled
X-Rojux
X-Trv-Group
X-UE-Client-Country
X-Via-SSL
X-We-Are-Hiring
X-FW-Version
X-G
X-VG-WebServer
X-Via-Edge
X-Release
X-Fetched-On
X-Died
X-Device-Os
X-Dispatcher-Server
X-DPWN-IS-SECURE
X-F5-Cache
X-External-Request-Id
X-Generated-In
X-Varnish-Action
X-LI-UUID
X-LI-Proto
X-Logtrace-Id
X-Urbn-Context-Path
X-NU-AKA-ACS-Version
X-Node-Id
X-Li-Pop
X-Urbn-Site-Id
X-Layer
X-GeoIP-Country-Code
X-Li-Fabric
X-Variation
X-User
X-Var-Ttl
X-Developer
X-A
X-Ua
Ajk
Fly-Request-Id
Frame-Options
Adler-Geo
We-Hiring
Ohc-File-Size
Fly-Cache
Fastly-SWR
Countrycode
BehaviorPad-Version
Cache-Prefix
Arc-Country
Ec-Rule-Version
Fastly-SIE
Fastly-Backend-Name
Mail-Subject
X-Ratelimit-Limit
Load-Balancing
X-Hl-Ver
X-NWS-UUID-VERIFY
X-IN-APIGATEWAY
Apple-News-Services-Request-Url
X-Sf
X-IN-SSL-APIGATEWAY
X-Server-IP
Apple-News-Services-Parsed-Url
X-IN-WAF
X-Hash
Who
X-SVT-ORM-RULES
X-Eu-Site
Www
X-Epic-Correlation-Id
Backend
Backend-Name
X-Info
Apple-News-Services-Host
X-CGP
X-Request-Start
X-SVT-ORM-VERSION
X-Rocket-Nginx-Bypass
X-Proxy-Cache-Status
HA-Geocountry
X-Cache-Expires
X-Core-Value
X-No-Session
Apple-News-Services-Handled
X-Proxy-Upstream
AKAMAI
X-Key
X-Matched-Rule
X-Location
X-Server-Group
X-Stale
GW-Server
Kp-EeAlive
HA-Cloudapp
GMS-Ver
Content-Disposition
Pragrma
Origin
X-Via-NSCOPI
HA-Geocity
Heartbleed
HA-Georegion
HA-Geolon
HA-Geolat
Ha-Gx-Prefs
HA-Host
HA-Urlpath
HA-Servedtime
HA-Ipaddr
Pramga
Memcached
X-Swa-Ws
X-UnsetCookies
UCS
Country-Code
Thinkindot-Control
Esi-Enabled
Request-EU
Request-Country
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-Thinkindot-L3
X-Be
Group
V-Cache
User-Agent
X-Instance-Name
X-SIPLIST1
X-ServiceProvider
X-Geo
Decoy-Debug-Status
X-Gannett-Site-Version
X-GeoIP-City
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Fstrz
X-Hnp-Log
Decoy-Debug-Key
X-V
HitInfo
X-VCT
MI-Cache
X-Dynatrace-Js-Agent
MI-Cache-Age
X-Up
Proxy-Connection
On-Server
X-Request-URI
MI-API
True-Client-Country-4JS
X-P-T
X-MI-In-Market
X-Secret
X-Phone
Decoy-Debug-TTL
X-TT-LOGID
X-Policy
X-Platform
X-Nginx-Cache-Key
X-Gen-Mode
CDCHOST
Web-Mar-Node
X-Block-Status
X-Developers
X-Distil-CS
Server-Int
X-Amz-Meta-Cache-Control
Cache-Cookie-Set-Lfrom
Cache-Cookie-Set-From
IsBot
Cache-Cookie-Set-Idcheck
X-Backend-Host
X-Backend-Url
X-Distributor
X-Cache-CFC
REQUESTUUID
Fastly-Soc-X-Request-Id
Fastly-SSL
X-NX-Host
X-Sn-Servicetimems
X-Wikidot-Static-Cache
X-Core-Mission
X-Origin-Date
X-Origin-TTL
X-Servername
X-Cdn-Origin
Request-Time
X-MSEdge-Flight
X-Origin-Expires
X-MSEdge-Features
X-Irp-Debug
X-Debug-Log
X-ElasticPress-Search
X-Debug-Cookies
X-Wikidot-Backend
X-Refresh
Pagetype
X-Fastly-Cache
RequestId
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
X-DC
X-Planisys-CDN-TTL
X-Page-Type
PFcat
X-COUNTRY
Magicmarker
X-Pjax-Url
Host-ID
X-Req
X-EIG-Tracking-Id
X-BBXSRF
X-Powered-By-ANYU
PageSpeed
X-CACHE-AGE
X-PARISIEN-Cache-Rendered
X-Debug-Cache-Fetch
X-Debug-Cache-Store
X-NC
X-Svr
X-Debug-Cache-Expiry
X-VarnCache
X-VarnPar1
X-HOST
X-Instart-Info
X-Generated-On
X-Micro-Cache
X-Level-Front-Cache
X-Newrelic-Synthetics
MIME-Version
Mime-Version
X-Datadome
ServerName
Cache-Provider
Cdn
X-TWH-CORRELATION-ID
X-Server-Cache
Lfy
Ohc-Response-Time
X-Cluster-Node
PICS-Label
X-ARC
X-Cache-Info
X-Gdpr
X-Cdn-Srv
Cteonnt-Length
X-Servedbyhost
Memory
Nel
CF-IPCountry
FSS-Cache
X-NodeID
X-CMS-Context
X-Sentry-ID
FSS-Proxy
X-Wa
X-StackifyID
X-Aicache-OS
X-VServer
X-Hello
X-Flog
X-Fastly-Country-Code
X-ABtesting
X-Load-Cache
SN
GeoIP-Country-Code
X-LAGOON
GeoIP-Latitude
CDN
X-WR-MODIFICATION
XServer
X-GZip
NGX
X-HTML-Minification-Powered-By
GeoIp-Country-Code
X-Fastly-Backend-Reqs
Geoip-Latitude
X-CSRF-TOKEN
X-Varnish-Beresp-TTL
CACHE
X-WA
X-UPSTREAM-Address
TSSecure
X-Check-Cacheable
X-Worker
Processtime
X-MServer
X-Source
Amp-Access-Control-Allow-Source-Origin
X-CSRF-Token
X-Csrf-Token
X-Unique-Id
X-DataStream-MidMile-RTT
A
Cf-Ipcountry
X-APP
X-DataStream-Origin-MEX-Latency
X-SplitTest
X-LJ-Flow-ID
X-AWS-Id
X-VWS-Id
PageType
X-Ratelimit-Remaining
X-Oss-Storage-Class
X-Port
WP-Super-Cache
X-Oss-Request-Id
X-Oss-Hash-Crc64ecma
X-FireWall-Port
X-CDN-Pop-IP
X-CDN-Pop
X-Oss-Object-Type
X-Oss-Server-Time
X-ServedByHost
X-Varnish-Cache-Hits
X-RateLimit-Remaining-Second
X-RateLimit-Limit-Second
X-Sedo-Request-Id
X-Dynatrace
HTTPS
Pics-Label
X-GDPR
X-Generation-Time
X-Cache-Miss-From
X-Nananana
Cdn-Request-Time
Cdn-Host
X-Edge-Server
X-SRV
Cache-Hits
X-VC-Cache
X-Backend-TTL
X-Skip-Cache
URI
X-FORWARDED-FOR
Odigeo-Trace-Id
X-Sucuri-Cache
DataCenter
X-ID
X-Cache-Grace
X-Owner
X-B3-Traceid
X-Ms-Version
X-Ms-Request-Id
X-Ms-Blob-Type
X-Ms-Lease-Status
ProcessTime
X-Varnish-Authentication
X-HS-Status
X-IPS-LoggedIn
X-B3-SpanId
X-Cache-ASPX
Server-Surrogate-Control
Server-Cache-Control
X-Swift-Error
X-BE
X-PJAX-URL
X-SN
X-Fastly-Cache-Hits
X-RCS-Backend
Hostname
Dynatrace
X-Gen-Id
X-Amzn-Remapped-Date
X-GoCache-CacheStatus
X-From-Cache
X-VG-WebCache
X-Amzn-Remapped-Connection
X-Bug-Bounty
X-GZIP
X-Varnish-Url
X-Alicdn-Da-Ups-Status
X-ND-Cache
X-ORIG-AKA-EDGE
X-Cache-Ttl
X-Instart-Isnd
X-Cache-Srv
X-Fe
X-PAGE-TYPE
X-Ms-Lease-State
X-NGINX-Cache
X-VarnPar2
Requestid
X-Akamai-SSL-Client-Sid
Serverid
X-Amz-Meta-S3b-Last-Modified
X-LiteSpeed-Cache-Control
T-Server
X-RAMCache
X-Varnish-URL
X-ORIG-AKA-COUNTRY-CODE
WebServer
X-Server-W
Get-Access-Time
X-VC
X-ServerName
X-SB
X-Serial
X-Pf-Uncompressing
RequestUuid
NodeID
Is-Session-Tracking
Xet-Cookie
X-PF-Uncompressing
Proxy-Firewall
X-App
X-LiteSpeed-Tag
X-Akamai-ERRuleID
X-HTML-Edge-Cache
SID
X-RequestId
NnCoection
X-Akamai-ERPolicy
X-Developed-By
X-CS
Location
X-Dw-Trace-Id