Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
Pragma
X-Powered-By
CF-RAY
ETag
Link
Expect-CT
X-XSS-Protection
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Xss-Protection
X-Varnish
X-Request-Id
CF-Cache-Status
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-AspNet-Version
X-Download-Options
X-Runtime
Access-Control-Allow-Credentials
X-Drupal-Cache
X-Adblock-Key
X-Check
Alt-Svc
X-Cacheable
X-Generator
Content-Security-Policy-Report-Only
X-AspNetMvc-Version
X-Cache-Status
X-DNS-Prefetch-Control
X-Permitted-Cross-Domain-Policies
X-Template
X-Iinfo
X-Language
Status
Timing-Allow-Origin
X-Buckets
X-FRAME-OPTIONS
X-Content-Security-Policy
Content-Encoding
X-Kinja-Server-Push
Xkey
X-CDN
X-Turbo-Charged-By
Upgrade
X-Type
Keep-Alive
Access-Control-Expose-Headers
WPE-Backend
X-Pass-Why
X-AH-Environment
X-Backend
Access-Control-Max-Age
X-Age
X-Cache-Group
X-Drupal-Dynamic-Cache
X-Server
X-Proxy-Cache
X-Via
X-Request-ID
Grace
X-Pingback
X-Nginx-Cache-Status
X-Server-Powered-By
X-Robots-Tag
X-Amz-Id-2
X-Amz-Request-Id
X-Hacker
X-Varnish-Cache
X-UA-Device
X-Page-Speed
EagleId
Request-Context
X-LiteSpeed-Cache
X-Envoy-Upstream-Service-Time
Cf-Railgun
X-CST
X-Ua-Compatible
X-Swift-CacheTime
X-Swift-SaveTime
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Server-Id
Ali-Swift-Global-Savetime
X-Device
X-Amz-Version-Id
X-WebKit-CSP
Server-Timing
X-Ac
Allow
X-Node
X-OneAgent-JS-Injection
X-Response-Time
Feature-Policy
X-Rq
X-Cnection
X-Iejgwucgyu
Content-Location
X-Backend-Server
X-Cache-Lookup
Report-To
EagleEye-TraceId
Surrogate-Control
X-Host
X-Readtime
X-Application-Context
Request-Id
X-ORACLE-DMS-ECID
P3p
X-Rack-Cache
X-Url
X-Origin-Cache
X-Clacks-Overhead
X-Country
NEL
X-FTR-Request-ID
Rating
X-Country-Code
X-Cloud-Trace-Context
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-DataDome
X-Ruxit-JS-Agent
X-Cdn
X-Px
X-Instart-Request-ID
X-Mod-Pagespeed
Charset
X-Vhost
X-VARITI-CCR
X-MS-InvokeApp
Pinterest-Generated-By
Accept-CH
X-Goog-Hash
Edge-Control
X-GitHub-Request-Id
Verso
X-Upstream-Env
X-PC
X-TtlSet
X-Vname
X-Server-Name
X-Mobile-Rewrite
PB-RID
Arc-Version
PB-PID
X-ESI
X-Version
X-DynaTrace
X-Origin-Upstream-Status
X-TTL
X-B3-TraceId
X-Dns-Prefetch-Control
X-Powered-By-Plesk
X-D2id
X-Kinja-Server
X-Kinja-Build
X-Exp-Id
X-Kinja-Revision
X-Exp-Variant
X-Kinja
X-GoogleNews-Bot
X-Use-Magma
X-Cdn-Fetch
X-Cached
X-Dispatcher
SPRequestGuid
X-Recruiting
X-SharePointHealthScore
MS-Author-Via
X-ORACLE-DMS-RID
X-Abt-Application-Version
X-Varnish-TTL
X-Powered-CMS
Accept-CH-Lifetime
X-Navigation-Version
RTSS
Content-MD5
AR-CACHE
AR-ATIME
AR-PoweredBy
X-Shield-Request-Id
X-T
Public-Key-Pins
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Trace
X-Forwarded-Proto
X-Amz-Rid
X-Fastly-Request-ID
X-HW
Arr-Disable-Session-Affinity
X-Client-IP
X-DynaTrace-JS-Agent
X-Wix-Server-Artifact-Id
X-Accel-Buffering
SPRequestDuration
SPIisLatency
Realpath
X-Oracle-Dms-Rid
X-DIS-Request-ID
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Goog-Generation
Service-Worker-Allowed
AR-Request-ID
Paypal-Debug-Id
X-Amz-Meta-S3cmd-Attrs
Front-End-Https
X-Upstream
X-Ser
X-B
X-FTR-DC
X-FTR-Cache-Status
X-Pinterest-Rid
X-Country-Code-Real
X-FTR-Backend-Server
Pinterest-Version
X-FTR-Backend
X-FTR-Balancer
X-FTR-Realm
X-FTR-Expires
X-F-Cache
X-Via-JSL
X-Id
X-Dw-Request-Base-Id
X-Vcap-Request-Id
Ar-Sid
X-Debug
X-Goog-Storage-Class
X-XRDS-Location
X-Varnish-Age
X-Ttl
X-Acc-Meta-Resource-Type
X-Kinsta-Cache
X-MSEdge-Ref
X-Server-ID
X-N
Nginx-Cache
X-Hits
X-NF-Request-ID
X-DataStream-Cache-Status
X-FTR-Cache-Host
S
X-Logged-In
X-NewRelic-App-Data
X-Akam-SW-Version
X-Mrf-Item-Lastmod
MRF-Tech
X-B3-TraceId-Primal
X-TEC-API-ROOT
X-TEC-API-ORIGIN
Mrf-Cache-Status
X-Mrf-Section-Lastmod
X-TEC-API-VERSION
X-Forwarded-For
Tracecode
Alternate-Protocol
X-Frontend
X-User-Agent
X-Grace
X-HS-Hub-Id
X-HS-Content-Id
X-Amzn-Trace-Id
X-PressLabs-Stats
AMP-Access-Control-Allow-Source-Origin
TCN
Server-Name
X-Content-Digest
X-Content-Options
X-CACHE-GROUP
X-FastCGI-Cache
Refresh
Powered-By-ChinaCache
X-Content-Type
Display
X-Middleton-Display
X-Sol
Access-Control-Request-Method
X-Pad
DynaTrace
Backend-Timing
MicrosoftSharePointTeamServices
X-Analytics
Accept-Charset
X-LB-Cache
X-AppVersion
X-Activity-Id
X-IPLB-Instance
X-Rid
X-Zen-Fury
X-Az
X-Page-Id
FilterID
X-CF-Powered-By
Fastcgi-Cache
Response
Host
X-Debug-Info
X-Middleton-Response
X-Cache-Key
X-VCache
X-Fastcgi-Cache
MS-CV
ServerID
X-Cache-Hit
TP-L2-Cache
TP-Cache
X-Magnolia-Registration
X-Hostname
Cache-Status
X-Srv
X-Content-Powered-By
X-Seen-By
X-RateLimit-Remaining
X-ATG-Version
X-Mobile
X-Revision
X-WA-Info
X-Cached-By
X-Varnish-Backend
X-Request-Processing-Time
X-GUploader-UploadID
X-Request-Received
Surrogate-Key
Host-Header
X-Whom
Server-Info
X-Instance
X-B3-Sampled
X-Cluster
X-Cache-Action
X-SS-Set-Cookie
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Tumblr-User
X-Content-Security-Policy-Report-Only
DC
Source
X-Request-Guid
X-Handled-By
X-Real-IP
X-Drupal-Cache-Tags
X-B-Cache
X-PHP-Backend
Cleartype
X-Signature
X-Platform-Server
X-TT
X-Framework
X-Akamai-Edgescape
X-Cache-Age
Fusion-Component-Id
Fusion-Template-Id
X-Amz-Apigw-Id
X-Amzn-RequestId
Fusion-Source
Fusion-Content-Source
Fusion-Content-Id
X-Origin-Server
X-Wix-Request-Id
ViewerVersion
X-App-Environment
X-XRDS-LOCATION
X-Geo-Country
X-App-Server
Rt-Fastcgi-Cache
X-Generated-By
X-AOL-HN
X-Varnish-Server
X-FW-Hash
X-FW-Type
X-FW-Server
X-FW-Serve
X-BCube-Filmed-By
X-FW-Static
X-Cache-Control
X-Edge-Location
Server-Node
X-Oneagent-Js-Injection
X-TA-CDN-Provider
X-Varnish-Hostname
X-NWS-LOG-UUID
X-Ruxit-Js-Agent
Retry-After
X-Cache-Rule
X-Upstream-Proxy
X-Correlation-Id
X-Varnish-Grace
Payment
X-Amz-Server-Side-Encryption
X-Cache-2
Access-Control-Allow-Method
X-Amz-Replication-Status
X-Response-Served-From
X-FB-Debug
Eomportal-Instance
X-Varnish-Hits
Actual-Object-TTL
AsisCache
X-Cacheable-TTL
X-Cache-Config
X-Tumblr-Pixel-2
X-Tumblr-Pixel-1
Webserver
ServedBy
X-TT-TIMESTAMP
X-UA-Device-Type
Ms-Operation-Id
X-RTag
GEO-INFO
Filters
X-Contextid
Pagespeed
X-Ezoic-Cdn
X-Region
Healthy
X-Jobs
X-WebKit-CSP-Report-Only
Content-Script-Type
NGB
Content-Style-Type
X-Varnish-IP
Upgrade-Insecure-Requests
Viewport
X-TX-ID
X-UUID
X-Drupal-Cache-Contexts
X-Adobe-Content
X-Adobe-Loc
HitType
X-Cache-TTL
X-Locale
Cache-Tv-Group
X-Rendered-As
Country
X-VG-WebCache
X-Accel-Expires
From-Origin
X-RequestSource
X-Cache-TTL-Remaining
X-Device-Type
X-BACKEND-TTL
X-FW-Dynamic
X-Cache-Server
Fastcgi-Useragent
X-Servedby
Edge-Cache-Tag
X-Content-Age
X-Kong-Upstream-Latency
X-WPE-Loopback-Upstream-Addr
X-Kong-Proxy-Latency
Cache
Cache-Tags
X-Redis-Cache
X-Cache-Remote
X-Upgrade-Enabled
X-Source
Datacenter
X-APP-VERSION
X-Hit
X-DataStream-Origin-MEX-Latency
X-Cache-Operation
X-DataStream-MidMile-RTT
X-Storage
X-Webkit-Csp
X-Esi
X-CACHE-KEY
Fastly-Restarts
X-GeoIP
X-RateLimit-Limit
Cache-Tag
X-S
NtCoent-Length
X-Cache-Var-Map
X-RN-RSRV
Load-Balancing
X-Hl-Ver
Meta-Geo
X-Time-Microsecs
X-NGENIX-Cache
Machine
X-JoinUs
X-Backend-Name
X-Loop
X-Path-Route
Served-By
X-Labrador-Cache-Channel
X-Agile
X-Is-Bot
X-Mode
X-Cache-Var
X-Agile-Id
X-Pubstack
X-Agile-Age
X-Internal-Host
X-TNCMS
X-Detected-As
X-Origin-Response-Time
X-FC-Vary-Parameters
X-Origin-Host
X-ProxyCache-Key
X-Birta-Cache-Post
X-Grey
X-Status
X-CDN-Cache
X-Proxy
Cache-Key
X-Birta-Served
X-ProxyCache-Status
X-ServerID
Now
X-Environment-Context
X-Www-Served-By
Origin-Edge-Control
X-Hosted-By
X-Akamai-Request-ID
X-Rule
X-Generated
X-Proxy-Build
Selected-FE
X-Timing-Wait
X-Edge-IP
X-BYPASS-REASON
X-Cache-Category-Id
X-NCache
X-L-Path
Vix-Hermes-Req-Id
Origin-Cache-Control
Xserver
X-RemovedCookies
Cache-Name
X-ProcessESI
X-Cache-Enabled
SRV
X-Varnish-Cacheable
X-Guploader-Uploadid
X-Tb
X-IP
X-Microcachable
X-Web-Node
X-Viewer-Country
X-Via-Fastly
X-Varnish-Cache-Hits
X-ApacheServer
DB-Nickname
X-Human
X-MP-GENERATED-AT
X-VG-TLSProxy
X-CCM
S-Rt
X-PERF
X-Akamai-Transformed
User-Agent
Cache-Hits
Public-Key-Pins-Report-Only
X-PCL
X-OCL
X-Debug-Cache
X-Site-Version
X-App-Version
Azure-InstanceId
Mail-Subject
We-Hiring
Azure-SlotName
Azure-RegionName
Azure-Version
Access-Control-Request-Headers
Azure-SiteName
X-Format
TWC-Privacy
X-Daa-Tunnel
Webcakes-App-Version
X-Xfnlog-Site
X-Origin-Hint
Webcakes-Region
TWC-GeoIP-LatLong
Webcakes-App-Name
TWC-Locale-Group
Property-Id
TWC-GeoIP-Country
TWC-Connection-Speed
TWC-Device-Class
Liferay-Portal
X-ES-SERVER
X-Varnish-Ttl
X-Access
Fastcgi-X-Cache-Version
X-Section
X-App-Name
X-Proxied
X-Node-Name
X-GEO
X-Zipkin-Id
X-Routing-Service
S-Cnection
X-Protected-By
X-FW-Version
X-Original-Request
X-EdgeConnect-Cache-Status
X-Origin
X-Sucuri-ID
X-Pc-Hit
X-Pc-Appver
X-Pc-Key
X-Cache-NE
LB
X-Nginx-Cache
X-Cdn-Forward
X-Proto
X-Ocache
CACHE
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Request-Time
User-Cache-Control
X-Trace-Id
Powered
X-Ua
X-AWS-Id
X-VWS-Id
X-UA
X-LJ-Flow-ID
X-Forwarded-Host
X-Tumblr-Pixel-3
X-GRACE
X-Time
X-Endurance-Cache-Level
Ohc-File-Size
X-Nc
Frame-Options
X-Webstats-RespID
X-Cluster-Node
L5d-Success-Class
Section-Io-Cache
X-Correlation-ID
X-FB-TRIP-ID
X-V
X-Unique-ID
X-Origin-CC
OT-Force-Account-Verify
PageSpeed
X-EIG-Tracking-Id
X-URL
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-OVcl-Cache
X-OVcl
X-Origin-TTL
AR-SID
Nel
X-ElasticPress-Search
Decoy-Debug-TTL
X-Cache-Backend
X-From
Decoy-Debug-Status
Decoy-Debug-Key
X-Rocket-Nginx-Bypass
X-R9-Blue-Green-Version
Fly-Cache
X-Date
Fastly-SWR
X-Destination
Fly-Request-Id
Arc-Country
X-Developer
BehaviorPad-Version
X-CF-Lambda-Fn
Ec-Rule-Version
X-BB-ID
X-Node-Id
X-CF-Lambda-Version
Country-Code
X-Cdn-Srv
X-Cache-URL
Fastly-SIE
Cache-Prefix
X-Li-Pop
X-Generated-In
X-Irp-Debug
X-NU-AKA-ACS-Version
X-Cache-Grace
X-Goog-Meta-Goog-Reserved-File-Mtime
X-IN-APIGATEWAY
X-Info
X-Cache-FS-Status
X-Cache-Host
GMS-Ver
X-IN-WAF
X-LI-Proto
X-LI-UUID
X-DPWN-IS-SECURE
X-External-Request-Id
X-Fetched-On
X-Li-Fabric
X-Cache-Id
X-Cache-Info
X-Rebelmouse-Surrogate-Control
X-Request-UUID
X-Connection-Hash
Mobile-Detection-Method
X-Response-By
X-Aed
X-Region-Sid
X-Amz-Meta-Cache-Control
X-Rebelmouse-Cache-Control
X-User
X-Reboot
MD5-Digest
X-ServiceProvider
X-S-Cookie
X-S-Maxage
X-ScT
X-Server-By
X-UE-Client-Country
X-Rojux
Memcached
X-Accel-Expires-Debug
Meta-Geo-Continent
X-Rewrite-Enabled
Node
X-Twitter-Response-Tags
X-B-Cookie
Powered-By
VivaBuild
Www
X-SRCache-Key
Viewtype
X-Transaction
X-Origin-Date
X-Origin-Expires
Xc-Version
X-Trv-Group
X-Auto-Login
X-PAYTM-SRV-ID
X-PHP-Host
SD-X-WS
X-ARC
X-Application
X-Server-Group
On-Server
X-We-Are-Hiring
X-TT-LOGID
Rendered-Blocks
X-VG-WebServer
X-Dc
IBM-Web2-Location
Thinkindot-CacheControl
X-A
X-Cache-Bucket
Thinkindot-CacheControl-Type
Server-Host
X-Backend-Host
X-Bip
X-Backend-State
X-Block-Status
X-A-Dam
X-A-Dcw
X-A-Dgt
X-A-Wwc
X-Cache-Expires
X-Backend-Url
X-Alternate-Cache-Key
Thinkindot-Control
X-Cache-Debug
True-Client-Country-4JS
X-Actual-URL
X-Policy
X-ShardId
X-Sf
X-ShopId
X-Shopify-Stage
X-SIPLIST1
X-Server-IP
X-Returned-From-PostProcessResponse
X-Request-URI
X-RateLimit-Remaining-Second
X-Returned-From
X-Returned-From-BeforeDispatch
X-Returned-From-DLL
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Varnish-Action
X-Variation
X-Vgn-Hpd-Reason
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-Var-Ttl
X-Thinkindot-L3
X-Stale
X-Svr
X-Swa-Ws
X-Thanos
X-RateLimit-Limit-Second
X-Proxy-Upstream
X-Fastly-Cache
X-Distributor
X-G
X-Gen-Mode
X-Generated-On
X-Distil-CS
X-Dispatcher-Server
X-CUA
X-Crawler
X-D
X-Debug-Cookies
X-Debug-Log
X-Hash
X-Hnp-Log
X-Passed-To-BeforeDispatch
X-Passed-To
X-Passed-To-DLL
X-Passed-To-PostProcessResponse
X-Proxy-Cache-Status
X-NX-Host
X-Micro-Cache
X-Level-Front-Cache
X-Location
X-Logtrace-Id
X-Matched-Rule
X-Core-Mission
X-A-Ccd
Proxy-Connection
Backend
X-Via-CDN
Is-Eu
Adler-Geo
IsBot
Platform
Ajk
Request-Time
Fastly-Backend-Name
X-Varnish-Beresp-Ttl
Lfy
Magicmarker
Fastly-SSL
Content-Disposition
X-Sucuri-Cache
Hostname
X-HS-Cache-Config
Mn-Server-Ip
X-Parent-Response-Time
Warning
X-Secret
Countrycode
X-CGP
X-UnsetCookies
X-TrackingId
GW-Server
X-Croise-Owner
X-Clientip
X-Epic-Correlation-Id
X-GeoIP-Country-Code
X-Platform
X-Gannett-Site-Version
X-SERVER
X-Instart-Isnd
X-Nginx-Cache-Key
X-LAGOON
X-No-Session
X-Fstrz
X-FireWall-Port
X-Debug-Cache-Store
X-Debug-Cache-Fetch
X-Debug-Cache-Expiry
X-Device-Os
X-Up
AKAMAI
X-Eu-Site
CDCHOST
Fastly-Soc-X-Request-Id
Server-Cache-Control
SID
Server-Surrogate-Control
Heartbleed
Server-Int
Origin
Pramga
Web-Mar-Node
Who
X-Cache-ASPX
X-Varnish-Authentication
X-C
Ha-Gx-Prefs
Release
SS
HA-Ipaddr
X-Upstream-CT
X-Upstream-HT
X-Pc-Host
X-Pc-Subdomain
X-Pc-Date
Apple-News-Services-Host
Apple-News-Services-Handled
X-F5-Cache
X-Qloud-Router
X-Page-Type
RNT-Machine
X-MSEdge-Flight
X-MSEdge-Features
RNT-Time
X-Key
Apple-News-Services-Request-Url
REQUESTUUID
Server-ID
Apple-News-Services-Parsed-Url
X-Amz-Meta-Surrogate-Control
X-Server-Time
X-Owner
NGX
X-SN
Cache-Cookie-Set-Lfrom
Pagetype
Cache-Cookie-Set-Idcheck
X-Varnish-Url
Kp-EeAlive
Resin-Trace
X-Core-Value
Cache-Cookie-Set-From
X-Developers
X-Be
X-Pjax-Url
X-Server-Cache
X-TIME
X-IN-SSL-APIGATEWAY
Odigeo-Trace-Id
X-Servername
X-Sedo-Request-Id
X-Cache-Miss-From
X-Generation-Time
X-B3-Traceid
HTTPS
Fastcgi-X-Cache
X-Newrelic-App-Data
X-Via-NSCOPI
X-Died
X-Refresh
X-Oss-Hash-Crc64ecma
Cdn-Request-Time
Cdn-Host
X-Edge-Server
X-Oss-Server-Time
X-Oss-Request-Id
X-Oss-Storage-Class
X-Oss-Object-Type
X-Dynatrace-Js-Agent
X-From-Cache
RequestId
X-CDN-Forward
X-Edge-Cache-Key
X-Edge-Cache
Version
MIME-Version
HostName
X-NC
X-B3-SpanId
Cdn
Mime-Version
PFcat
ProcessTime
X-Servedbyhost
X-FPC
Time
Cteonnt-Length
PICS-Label
X-Req
X-Mobile-URL
X-Ratelimit-Remaining
FastCGI-Cache
X-Amzn-Remapped-Date
X-CSRF-TOKEN
X-Amzn-Remapped-Connection
Esi-Enabled
X-NodeID
X-VServer
X-Cache-CFC
X-Load-Cache
X-Store
Cross-Origin-Window-Policy
X-GZip
MI-API
Memory
MI-Cache-Age
MI-Cache
X-Webkit-CSP
X-Hyper-Cache
X-MI-In-Market
X-RCS-CacheZone
X-HS-Combine-CSS
X-Layer
Processtime
X-CLOUD-TRACE-CONTEXT
CF-IPCountry
HA-Geocity
HA-Georegion
HA-Cloudapp
HA-Geocountry
X-IPS-LoggedIn
HA-Geolat
HA-Geolon
Cf-Ipcountry
X-RequestId
HA-Host
X-Wa
X-Skip-Cache
X-Ratelimit-Limit
HA-Servedtime
HA-Urlpath
X-Geo
X-Varnish-Beresp-TTL
Uber-Trace-Id
X-Lb-Id
X-HTML-Minification-Powered-By
CDN
Ohc-Cache-HIT
Backend-Name
X-B3-Spanid
X-DC
X-VC-Cache
X-Fastly-Country-Code
X-Cms-Context
X-Aicache-OS
X-Real-Ip
X-Pf-Uncompressing
X-CMS-Context
X-Newrelic-Synthetics
XServer
X-Instart-Info
X-Atg-Version
X-Mrs-Age
X-PF-Uncompressing
X-Unique-Id-Primal
X-Mrs-Cache
X-Mrs-Cache-Hits
X-WA
X-WR-MODIFICATION
X-Tb-Optimization-Total-Bytes-Saved
X-Mshield-Cache-Status
X-Gateway-Cache-Status
X-Gateway-Skip-Cache
X-Gateway-Cache-Key
N-Cache
X-WebServer
X-Phone
Ohc-Response-Time
X-UCC
Amp-Access-Control-Allow-Source-Origin
X-Shard
X-Request-Start
T-Server
X-Processor
Accept-Ch-Lifetime
X-Nananana
X-LB-ID
X-Release
URI
GeoIP-Country-Code
Pics-Label
X-Server-W
X-BBXSRF
X-Hp-Webp
X-Oracle-Dms-Ecid
GeoIP-Latitude
X-COUNTRY
X-MServer
X-Unique-Id
X-CSRF-Token
X-SRV
X-Datadome
X-FORWARDED-FOR
X-Worker
X-ServedByHost
X-APP
X-VCT
X-VHOST
X-GeoIP-City
X-GoCache-CacheStatus
X-Served-From
X-ND-Cache
X-LiteSpeed-Cache-Control
A
Rt-Proxy-Cache
Host-ID
X-Geo-Header
X-Amzn-Remapped-Content-Length
X-SERVER-NAME
DataCenter
UCS
X-HS-Status
X-CACHE-AGE
X-Check-Cacheable
X-GZIP
Request-EU
Request-Country
X-Fastly-Cache-Hits
X-UPSTREAM-Address
X-Optimization
X-Cache-HT
X-Requestid
X-NGINX-Cache
X-BE
Dnion-Transfer-Encoding
X-Planisys-CDN-Cache
Pragrma
Cneonction
X-Fastly-Backend-Reqs
X-ID
Geoip-Latitude
V-Age
X-Planisys-CDN-Rules
X-Vcache
X-Sn-Servicetimems
X-Planisys-CDN-TTL
X-Cdn-Origin
FSS-Cache
X-Fpc
FSS-Proxy
X-Backend-TTL
X-PAGE-TYPE
WZWS-RAY
X-SVT-ORM-VERSION
X-Varnish-URL
X-ServerName
X-Csrf-Token
WP-Super-Cache
Proxy-Firewall
X-Port
X-Org
X-PJAX-URL
X-SVT-ORM-RULES
X-Git-Hash
Requestid
X-Dw-Trace-Id
GeoIp-Country-Code
Serverid
RequestUuid
X-LiteSpeed-Tag
Is-Session-Tracking
X-Gen-Id
X-P-T
X-Via-SSL
X-Via-Edge
Get-Access-Time
Server-Id
Cache-Provider
X-HostName
X-NWS-UUID-VERIFY
DSUID
X-Html-Edge-Cache
355prline
409pxxline
X-StackifyID
ServerName
X-Fe
X-Request-Url
Xxline
Inserted-Into-Cache-At
219prxHost
225prxHost
286prxHost
189phosttRef
X-RAMCache
352pxline
178proxuri
188prxHost
X-CS