Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
Last-Modified
X-Content-Type-Options
Accept-Ranges
Pragma
X-Powered-By
CF-RAY
Link
ETag
X-XSS-Protection
Expect-CT
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Id
X-Served-By
Referrer-Policy
X-Varnish
X-Request-Id
X-Timer
CF-Cache-Status
X-AspNet-Version
Access-Control-Allow-Headers
X-Xss-Protection
Access-Control-Allow-Methods
X-Runtime
X-Download-Options
Access-Control-Allow-Credentials
X-Drupal-Cache
X-Cacheable
Alt-Svc
X-Check
X-Generator
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Cache-Status
X-AspNetMvc-Version
Status
X-DNS-Prefetch-Control
X-Template
Timing-Allow-Origin
X-Language
X-Permitted-Cross-Domain-Policies
X-FRAME-OPTIONS
Content-Encoding
X-Iinfo
X-Content-Security-Policy
X-CDN
X-Buckets
P3p
X-Turbo-Charged-By
X-Request-ID
Upgrade
X-Type
WPE-Backend
Keep-Alive
X-Pass-Why
CF-Ray
X-AH-Environment
X-Cache-Group
Xkey
X-Backend
Access-Control-Max-Age
X-Age
Access-Control-Expose-Headers
X-Via
X-Drupal-Dynamic-Cache
EagleId
X-Pingback
X-Nginx-Cache-Status
X-Amz-Request-Id
X-Amz-Id-2
X-Server-Powered-By
X-Server
X-Kinja-Server-Push
X-Hacker
Grace
X-UA-Device
X-Swift-CacheTime
X-Swift-SaveTime
X-Varnish-Cache
Ali-Swift-Global-Savetime
X-Robots-Tag
Cf-Railgun
X-Proxy-Cache
X-Envoy-Upstream-Service-Time
X-LiteSpeed-Cache
X-Page-Speed
X-Ua-Compatible
Request-Context
X-Device
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Ac
Content-Location
X-Cache-Lookup
X-Amz-Version-Id
X-WebKit-CSP
X-Response-Time
X-Host
Surrogate-Control
X-OneAgent-JS-Injection
X-Rq
X-Cnection
X-Node
X-Backend-Server
Server-Timing
X-Readtime
Report-To
X-Rack-Cache
X-Server-Id
Request-Id
EagleEye-TraceId
X-Application-Context
Feature-Policy
X-Cloud-Trace-Context
X-ORACLE-DMS-ECID
X-Instart-Request-ID
X-CST
X-Iejgwucgyu
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Clacks-Overhead
Edge-Control
NEL
Rating
X-Country
X-Url
X-Server-Name
X-Varnish-TTL
X-DynaTrace
X-MS-InvokeApp
X-DataDome
Allow
X-Px
X-Country-Code
X-TTL
Pinterest-Generated-By
X-Origin-Cache
X-Dns-Prefetch-Control
X-Vhost
X-Vname
X-PC
X-TtlSet
X-Cached
X-FTR-Request-ID
X-Server-ID
X-ESI
RTSS
X-Ruxit-JS-Agent
SPRequestGuid
X-Goog-Hash
X-Trace
X-VARITI-CCR
Charset
X-Powered-By-Plesk
X-SharePointHealthScore
Accept-CH
X-DynaTrace-JS-Agent
X-T
X-GitHub-Request-Id
X-Dispatcher
X-Powered-CMS
Public-Key-Pins
X-D2id
X-Mod-Pagespeed
X-B3-TraceId
PB-PID
PB-RID
X-Mobile-Rewrite
Arc-Version
X-F-Cache
Verso
X-Cdn-Fetch
Content-MD5
X-Exp-Variant
X-Kinja-Build
X-Kinja-Revision
X-Kinja-Server
X-Exp-Id
X-Kinja
X-GoogleNews-Bot
X-Version
MS-Author-Via
SPIisLatency
SPRequestDuration
X-Shield-Request-Id
X-Recruiting
X-Oracle-Dms-Rid
X-Abt-Application-Version
X-ORACLE-DMS-RID
Nginx-Cache
X-TEC-API-ROOT
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-Forwarded-Proto
X-Client-IP
Accept-CH-Lifetime
X-HW
X-DIS-Request-ID
X-N
X-Navigation-Version
X-Pinterest-Rid
Pinterest-Version
X-Upstream-Env
AR-ATIME
AR-CACHE
AR-PoweredBy
X-B
X-Amz-Rid
DynaTrace
X-Upstream
X-Origin-Upstream-Status
X-Fastly-Request-ID
X-Dw-Request-Base-Id
X-Ser
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Amz-Meta-S3cmd-Attrs
X-Hits
Fastly-Restarts
TCN
Realpath
X-Goog-Generation
Paypal-Debug-Id
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-Wix-Server-Artifact-Id
X-Goog-Stored-Content-Encoding
X-XRDS-Location
X-Accel-Buffering
X-Content-Options
Arr-Disable-Session-Affinity
Service-Worker-Allowed
X-NF-Request-ID
X-Pad
X-Acc-Meta-Resource-Type
X-Goog-Storage-Class
Tracecode
S
Access-Control-Request-Method
X-Content-Digest
X-Id
X-Debug
X-Varnish-Age
X-Use-Magma
Front-End-Https
X-Oneagent-Js-Injection
X-Vcap-Request-Id
X-Mrf-Section-Lastmod
Mrf-Cache-Status
X-Mrf-Item-Lastmod
MRF-Tech
X-MSEdge-Ref
Edge-Cache-Tag
X-ATG-Version
X-Frontend
X-FTR-Backend
X-RateLimit-Remaining
X-IPLB-Instance
X-PressLabs-Stats
X-FTR-Expires
X-FTR-Realm
X-FTR-DC
X-FTR-Backend-Server
X-Country-Code-Real
X-FTR-Balancer
X-FTR-Cache-Status
X-Kinsta-Cache
X-Logged-In
X-Amz-Cf-Pop
MicrosoftSharePointTeamServices
X-HS-Content-Id
X-HS-Hub-Id
Surrogate-Key
X-Cache-Hit
X-Forwarded-For
Rt-Fastcgi-Cache
X-B3-TraceId-Primal
Fastcgi-Cache
X-Request-Received
X-Request-Processing-Time
X-FastCGI-Cache
X-Middleton-Display
X-Sol
Display
X-Zen-Fury
X-Webkit-Csp
Powered-By-ChinaCache
X-Edge-Location
Backend-Timing
X-Analytics
X-Litespeed-Cache
X-Debug-Info
X-Rid
X-Amzn-Trace-Id
Host
Server-Name
X-User-Agent
X-Revision
X-FTR-Cache-Host
FilterID
TP-L2-Cache
TP-Cache
X-HS-Cache-Config
X-Akam-SW-Version
AMP-Access-Control-Allow-Source-Origin
X-CF-Powered-By
Ar-Sid
Response
X-Middleton-Response
X-TA-CDN-Provider
AR-Request-ID
X-Grace
X-Drupal-Cache-Tags
X-SS-Set-Cookie
X-Mobile
X-Cache-Key
X-Magnolia-Registration
X-Newrelic-App-Data
X-SERVER
X-Ttl
Refresh
Cache-Status
X-Fastcgi-Cache
X-Accel-Expires
X-NewRelic-App-Data
X-Cached-By
X-GUploader-UploadID
Host-Header
X-B3-Sampled
X-AOL-HN
X-Webkit-CSP
ServerID
X-Varnish-Backend
X-VCache
X-Node-Name
X-NWS-LOG-UUID
X-FB-Debug
X-Tumblr-Pixel
X-Tumblr-User
Eomportal-Instance
X-Whom
X-Content-Security-Policy-Report-Only
X-Tumblr-Pixel-0
X-Instance
X-Signature
X-B-Cache
X-Platform-Server
X-Cache-2
X-Cache-Control
X-Cluster
X-Page-Id
X-Ruxit-Js-Agent
X-Framework
X-Device-Type
X-LB-Cache
X-Generated-By
X-Akamai-Edgescape
X-BCube-Filmed-By
X-Drupal-Cache-Contexts
X-Varnish-Hostname
Cleartype
X-Via-JSL
X-Handled-By
X-Request-Guid
X-Srv
X-App-Environment
X-AppVersion
X-Activity-Id
X-Az
X-Cache-Action
X-Cache-Rule
Cache-Tag
Liferay-Portal
X-App-Server
DC
Source
X-Cache-Server
Alternate-Protocol
X-Content-Powered-By
Retry-After
X-WPE-Loopback-Upstream-Addr
MS-CV
X-Hostname
X-HS-Combine-CSS
X-App-Version
X-WA-Info
X-Varnish-Grace
Public-Key-Pins-Report-Only
X-Geo-Country
HostName
X-Esi
X-Correlation-Id
X-Varnish-Server
X-Wix-Request-Id
X-Daa-Tunnel
X-Amz-Replication-Status
X-Seen-By
Pagespeed
X-TT
Server-Node
ViewerVersion
AR-SID
X-URL
Accept-Charset
Webserver
X-Response-Served-From
X-Cache-NE
Upgrade-Insecure-Requests
X-Tumblr-Pixel-2
X-Tumblr-Pixel-1
X-GeoIP
X-Amzn-RequestId
SRV
Actual-Object-TTL
X-Locale
X-Amz-Apigw-Id
X-WebKit-CSP-Report-Only
X-RequestSource
AsisCache
GEO-INFO
ServedBy
X-Varnish-Hits
X-Jobs
X-Edge-Cache
X-S
X-Servedby
X-FW-Serve
X-Yottaa-Optimizations
X-Yottaa-Metrics
Viewport
X-Contextid
X-Edge-Cache-Key
Payment
X-FW-Hash
X-FW-Static
X-FW-Type
X-UUID
X-FW-Server
X-Status
X-Varnish-IP
X-TX-ID
X-Adobe-Loc
X-Adobe-Content
X-XRDS-LOCATION
X-TT-TIMESTAMP
X-Cacheable-TTL
Cache
X-Origin-Server
X-Cache-TTL-Remaining
X-Vg-Webcache
X-Correlation-ID
S-Cnection
X-Geo-Segment
X-Hyper-Cache
X-Cache-Age
X-Cache-Operation
X-Forwarded-Host
X-Amz-Server-Side-Encryption
Server-Info
Datacenter
X-RateLimit-Limit
Served-By
X-Real-IP
X-Akamai-Request-ID2
X-Region
X-CLOUD-TRACE-CONTEXT
X-Mode
Access-Control-Allow-Method
X-DataStream-Cache-Status
X-Sucuri-ID
Healthy
CACHE
X-Akamai-Transformed
X-GRACE
X-Content-Type
Country
X-Generated
X-Is-Bot
X-Detected-As
X-JoinUs
X-Path-Route
X-Rendered-As
Machine
Meta-Geo
X-Ocache
Fastcgi-Useragent
X-Site-Version
Fastcgi-X-Cache-Version
X-Upgrade-Enabled
Fastcgi-X-Cache
X-RN-RSRV
X-Proxy
X-Cache-Config
From-Origin
X-Cache-Var
X-Cache-Var-Map
X-Request-Time
X-Zipkin-Id
X-Agile
X-Access
X-Format
X-Environment-Context
X-Human
X-Agile-Age
X-NGENIX-Cache
L5d-Success-Class
Now
X-Routing-Service
X-L-Path
X-Proxied
X-Agile-Id
X-Rule
X-Birta-Cache-Post
X-CDN-Cache
X-Via-CDN
X-Section
X-Birta-Served
X-Amz-Meta-Surrogate-Control
Webcakes-App-Version
X-CCM
X-FC-Vary-Parameters
X-EIG-Tracking-Id
Webcakes-App-Name
X-Ezoic-Cdn
TWC-Locale-Group
Webcakes-Region
X-Cache-Category-Id
S-Rt
X-Via-Fastly
X-Viewer-Country
OT-Force-Account-Verify
Property-Id
X-PCL
X-Web-Node
X-Loop
X-Tb
X-ServerID
DB-Nickname
Cache-Name
X-TNCMS
X-Pc-Key
X-Pc-Hit
Xserver
X-Labrador-Cache-Channel
TWC-GeoIP-LatLong
X-Hosted-By
X-Hit
TWC-GeoIP-Country
X-OCL
TWC-Privacy
X-Pc-Appver
TWC-Connection-Speed
TWC-Device-Class
X-Origin-Hint
X-Grey
X-Origin
Origin-Cache-Control
X-Upstream-CT
X-Upstream-HT
Origin-Edge-Control
X-ProxyCache-Status
X-RemovedCookies
X-Pubstack
X-Xfnlog-Site
X-ProxyCache-Key
X-Original-Request
X-Microcachable
X-IP
X-OVcl
X-OVcl-Cache
X-VG-TLSProxy
X-ProcessESI
X-BYPASS-REASON
HitType
HitInfo
X-Cdn
X-ShardId
Accept-Language
Azure-InstanceId
X-ShopId
X-Alternate-Cache-Key
X-Sorting-Hat-PodId
X-Www-Served-By
X-Timing-Wait
X-Sorting-Hat-ShopId
Azure-RegionName
X-Shopify-Stage
X-Proxy-Build
Azure-SlotName
LB
Mn-Server-Ip
Azure-SiteName
Selected-FE
Azure-Version
NGB
X-Geo
X-Cluster-Node
X-App-Name
X-RTag
Ms-Operation-Id
Filters
X-Connection-Hash
X-TWH-CORRELATION-ID
X-Twitter-Response-Tags
X-Transaction
X-TIME
X-Cache-Remote
X-LJ-Flow-ID
X-Rocket-Nginx-Bypass
X-SplitTest
X-VWS-Id
X-AWS-Id
X-NCache
X-Internal-Host
X-Cache-Enabled
X-Real-Ip
Access-Control-Request-Headers
X-UA
IBM-Web2-Location
X-Pc-Host
Content-Script-Type
Content-Style-Type
X-Unique-ID
X-Pc-Date
X-NodeID
Time
X-UA-Device-Type
X-Tumblr-Pixel-3
X-Guploader-Uploadid
X-Nginx-Cache
X-Origin-CC
X-CACHE-KEY
X-Source
X-Cache-TTL
Cache-Hits
X-Proto
We-Hiring
Mail-Subject
X-Cdn-Forward
X-PHP-Backend
X-MP-GENERATED-AT
X-Port
NtCoent-Length
X-Ms-Lease-Status
X-Ms-Request-Id
X-Ms-Version
X-Storage
X-Ms-Blob-Type
X-Vgn-Hpd-Reason
X-Time-Microsecs
X-Distil-CS
X-Debug-Cache
X-Edge-IP
X-Varnish-Cacheable
X-APP-VERSION
X-Akamai-Request-ID
Backend
X-Backend-Name
X-Webstats-RespID
Cache-Tags
X-CACHE-GROUP
X-Csrf-Token
X-Ua
Locale
X-Urbn-Context-Path
X-Urbn-Site-Id
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Endurance-Cache-Level
X-Origin-Response-Time
X-Ratelimit-Limit
Warning
User-Agent
X-Varnish-Cache-Hits
X-B3-Spanid
X-Redis-Cache
X-Nc
X-Croise-Owner
X-Dc
X-C
X-EdgeConnect-Cache-Status
X-CACHE-AGE
Ec-Rule-Version
Fly-Cache
VivaBuild
X-A-Dam
TSSecure
X-A
Viewtype
Content-Disposition
Cache-Prefix
V-Age
BehaviorPad-Version
Xc-Version
X-A-Ccd
FSS-Cache
Powered-By
HA-Ipaddr
HA-Host
Ha-Gx-Prefs
HA-Georegion
HA-Servedtime
HA-Urlpath
Meta-Geo-Continent
MD5-Digest
Mobile-Detection-Method
X-A-Dcw
HA-Geolon
HA-Geolat
FSS-Proxy
Rt-Proxy-Cache
Server-Host
Fly-Request-Id
GMS-Ver
HA-Cloudapp
Rendered-Blocks
Resin-Trace
HA-Geocountry
HA-Geocity
SN
X-D
X-IN-WAF
X-IN-SSL-APIGATEWAY
X-Irp-Debug
X-Logtrace-Id
X-NU-AKA-ACS-Version
X-UE-Client-Country
X-IN-APIGATEWAY
X-Hash
X-From
X-Fetched-On
X-G
X-Generated-In
X-GeoIP-Country-Code
X-NX-Host
X-Org
X-Sn-Servicetimems
X-Server-Time
X-SRCache-Key
X-Store
X-Trv-Group
X-Server-By
X-ScT
X-Region-Sid
X-PAYTM-SRV-ID
X-Rewrite-Enabled
X-Rojux
X-S-Cookie
X-External-Request-Id
X-Eu-Site
X-Cache-Host
X-BBXSRF
X-Via-SSL
X-Cache-URL
X-Via-Edge
X-BB-ID
X-B-Cookie
X-We-Are-Hiring
X-Accel-Expires-Debug
X-Aed
X-Amz-Meta-Cache-Control
X-Application
X-VG-WebServer
X-Cdn-Origin
X-Developer
X-Destination
X-Died
X-DPWN-IS-SECURE
X-ElasticPress-Search
X-Debug-Log
Arc-Country
X-CF-Lambda-Version
X-CF-Lambda-Fn
X-CGP
X-Date
X-Debug-Cookies
X-A-Dgt
X-A-Wwc
Fastly-SSL
X-CDN-Forward
X-Varnish-Beresp-Ttl
Ajk
PageSpeed
X-Mshield-Cache-Status
X-Mrs-Age
X-Mrs-Cache
X-Mrs-Cache-Hits
X-Cache-Backend
X-PERF
X-Sucuri-Cache
X-ApacheServer
Cache-Key
Version
X-FW-Version
Www
X-Flog
X-F5-Cache
X-Epic-Correlation-Id
UCS
X-GeoIP-City
X-Hl-Ver
X-Hello
Thinkindot-CacheControl-Type
X-Dispatcher-Server
Thinkindot-Control
X-ABtesting
X-Key
X-Cache-Id
X-Cache-Bucket
X-Backend-Url
X-Backend-Host
X-Clientip
X-Backend-State
X-Auto-Login
X-Dynatrace-Js-Agent
X-Core-Value
X-Developers
X-No-Session
X-User
X-V
X-Var-Ttl
X-UnsetCookies
X-Trace-Id
X-SIPLIST1
X-Thinkindot-L3
X-Via-NSCOPI
X-VServer
Fastly-SWR
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
Fastly-SIE
Country-Code
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-ServiceProvider
X-S-Maxage
X-Oss-Object-Type
X-Oss-Request-Id
X-Platform
X-Oss-Hash-Crc64ecma
Thinkindot-CacheControl
X-Matched-Rule
Apple-News-Services-Request-Url
X-Qloud-Router
X-Reboot
X-Response-By
X-Oss-Storage-Class
X-Request-URI
X-Request-Start
X-Oss-Server-Time
X-Release
X-Location
X-MServer
Apple-News-Services-Handled
RNT-Time
Decoy-Debug-TTL
Decoy-Debug-Status
Countrycode
Decoy-Debug-Key
RNT-Machine
Fastly-Soc-X-Request-Id
Release
GW-Server
Heartbleed
Frame-Options
Origin
AKAMAI
Apple-News-Services-Host
IsBot
Apple-News-Services-Parsed-Url
Server-ID
Odigeo-Trace-Id
WZWS-RAY
X-NWS-UUID-VERIFY
X-NC
Section-Io-Cache
X-Datadome
X-Powered-By-ANYU
X-Passed-To-BeforeDispatch
X-P-T
X-Passed-To-DLL
X-Passed-To
X-Gen-Mode
X-Gannett-Site-Version
X-Request-UUID
X-Node-Id
X-RCS-CacheZone
X-Policy
X-Passed-To-PostProcessResponse
X-Hnp-Log
X-Returned-From
X-MI-In-Market
Kp-EeAlive
X-LI-UUID
X-LI-Proto
X-Li-Fabric
X-Layer
Magicmarker
X-Li-Pop
Memcached
X-Newrelic-Synthetics
X-Instance-Name
X-Nginx-Cache-Key
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Sf
Backend-Name
Cache-Cookie-Set-Lfrom
Adler-Geo
X-Worker
X-VCT
X-WebServer
Is-Eu
Platform
Cache-Cookie-Set-From
X-Variation
Cache-Cookie-Set-Idcheck
X-Info
Uber-Trace-Id
X-Cache-FS-Status
X-Varnish-Action
Esi-Enabled
X-Server-IP
MI-Cache
X-Served-From
X-Sentry-ID
X-Returned-From-PostProcessResponse
X-Secret
X-Stale
X-SVT-ORM-RULES
X-Up
Fastly-Backend-Name
X-TT-LOGID
X-Thanos
X-SVT-ORM-VERSION
X-Swa-Ws
X-Returned-From-DLL
X-Returned-From-BeforeDispatch
Pramga
X-Core-Mission
X-Cache-Expires
X-Cache-Debug
X-Crawler
X-CUA
On-Server
X-Device-Os
Pragrma
Request-Country
X-Block-Status
Server-Int
User-Cache-Control
True-Client-Country-4JS
Pagetype
Web-Mar-Node
X-Bip
MI-Cache-Age
X-Actual-URL
X-Distributor
Request-EU
X-Fastly-Cache
X-Parent-Response-Time
CDCHOST
Proxy-Connection
X-Unique-Id-Primal
X-HOST
X-NODE
MI-API
REQUESTUUID
V-Cache
X-Fstrz
X-Phone
Group
X-Refresh
X-Owner
X-Cache-CFC
X-MSEdge-Features
X-DC
X-MSEdge-Flight
X-Page-Type
HTTPS
Cteonnt-Length
X-Time
RequestId
Who
Fusion-Source
X-Be
X-Backend-TTL
X-Pjax-Url
X-Servername
X-SN
X-Req
MIME-Version
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
Fusion-Content-Source
X-Cache-Srv
Fusion-Content-Id
Fusion-Template-Id
Fusion-Component-Id
X-Oracle-Dms-Ecid
Amp-Access-Control-Allow-Source-Origin
X-Ms-Lease-State
NodeID
X-Origin-TTL
X-GZip
Cdn
Memory
Cdn-Host
X-Edge-Server
ProcessTime
Cdn-Request-Time
X-Server-Group
X-Servedbyhost
Mime-Version
SS
SD-X-WS
X-Aicache-OS
X-Content-Age
CF-IPCountry
X-Protected-By
X-BB-IP
X-ND-Cache
X-Ckpd-Fst-Backend
X-COUNTRY
X-Wa
A
GeoIP-Country-Code
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-Origin-Expires
CDN
GeoIP-Latitude
X-SRV
X-Origin-Date
X-Origin-Host
PageType
X-Varnish-Beresp-TTL
Is-Session-Tracking
Get-Access-Time
XServer
X-B3-Traceid
X-StackifyID
X-Pf-Uncompressing
X-APP
Geoip-Latitude
X-Fastly-Country-Code
GeoIp-Country-Code
X-Varnish-Url
X-Unique-Id
Serverid
Processtime
X-WA
PICS-Label
X-Requestid
Node
X-PHP-Host
X-CSRF-Token
X-Ratelimit-Remaining
X-Generation-Time
X-Cache-Info
Vix-Hermes-Req-Id
X-Fastly-Cache-Hits
X-Proxy-Upstream
X-Proxy-Cache-Status
X-RateLimit-Limit-Second
X-Gdpr
X-RateLimit-Remaining-Second
Cache-Tv-Group
X-Nananana
Nel
Cf-Ipcountry
X-FireWall-Port
X-Load-Cache
X-ID
DataCenter
X-SERVER-NAME
X-ServedByHost
X-RequestId
X-Check-Cacheable
X-BACKEND-TTL
X-EC-Security-Audit
URI
X-HS-Status
X-CS
X-UPSTREAM-Address
Cache-Provider
X-GZIP
X-Planisys-CDN-TTL
X-Server-W
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
Hostname
X-FORWARDED-FOR
X-NGINX-Cache
WP-Super-Cache
Request-Time
X-GEO
X-WR-MODIFICATION
X-Micro-Cache
NGX
PFcat
X-Surge-Debug
T-Server
Host-ID
X-Fastly-Backend-Reqs
X-B3-SpanId
X-Front
X-Debug-Cache-Fetch
X-DataStream-Origin-MEX-Latency
X-Debug-Cache-Expiry
X-Debug-Cache-Store
X-Fe
X-HTML-Edge-Cache
X-GDPR
X-DataStream-MidMile-RTT
X-BE
X-HTML-Minification-Powered-By
X-VG-WebCache
X-Atg-Version
X-PJAX-URL
X-M-Log
X-M-Reqid
X-Qnm-Cache
Https
X-VarnPar1
X-FB-TRIP-ID
X-ServerName
ServerName
Requestid
X-PF-Uncompressing
X-Svr
X-PARISIEN-Cache-Rendered
X-VarnCache
RequestUuid
X-IPS-LoggedIn
X-Swift-Error
X-Vcache
X-Amz-Meta-S3b-Last-Modified
X-Akamai-SSL-Client-Sid
Lfy
Ohc-File-Size
X-Instart-Info
X-Generated-On
X-Cdn-Srv
Ohc-Response-Time
X-VarnPar2
X-Level-Front-Cache
Pics-Label
X-Alicdn-Da-Ups-Status
X-VC
X-PAGE-TYPE
WebServer
X-SB
X-Distil-Cs
X-Cache-Ttl
N-Cache
X-From-Cache
Load-Balancing
Build-Number
X-Serial
X-Grace-Duration
X-Skip-Cache
X-ARC
X-Gen-Id
X-Dw-Trace-Id
SID
X-RAMCache
Cdn-Src-Port