Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Accept-Ranges
Pragma
X-Powered-By
Link
ETag
CF-RAY
Expect-CT
Via
X-Cache
X-XSS-Protection
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Id
X-Xss-Protection
X-Served-By
P3P
Referrer-Policy
X-Varnish
X-Timer
CF-Cache-Status
X-Request-Id
Access-Control-Allow-Headers
X-AspNet-Version
Access-Control-Allow-Methods
X-Download-Options
X-Runtime
Access-Control-Allow-Credentials
P3p
X-Drupal-Cache
X-Check
X-Adblock-Key
Alt-Svc
X-Cacheable
X-Generator
CF-Ray
Content-Security-Policy-Report-Only
X-Cache-Status
X-Request-ID
X-AspNetMvc-Version
Status
X-DNS-Prefetch-Control
X-Amz-Cf-Pop
X-Template
X-Language
Timing-Allow-Origin
Content-Encoding
X-Permitted-Cross-Domain-Policies
X-Iinfo
X-Buckets
X-Content-Security-Policy
X-Turbo-Charged-By
Upgrade
X-Kinja-Server-Push
X-CDN
X-Type
Xkey
Keep-Alive
Access-Control-Expose-Headers
WPE-Backend
X-Pass-Why
X-AH-Environment
Access-Control-Max-Age
X-Backend
X-Cache-Group
X-Server
X-Age
X-Drupal-Dynamic-Cache
X-Pingback
X-Via
X-Nginx-Cache-Status
X-Amz-Id-2
X-Amz-Request-Id
X-Server-Powered-By
Grace
X-Hacker
EagleId
X-UA-Device
X-Robots-Tag
X-LiteSpeed-Cache
X-Varnish-Cache
X-Page-Speed
X-Swift-CacheTime
X-Swift-SaveTime
X-Proxy-Cache
Cf-Railgun
X-Envoy-Upstream-Service-Time
Request-Context
Ali-Swift-Global-Savetime
X-Ua-Compatible
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Ac
X-Device
X-WebKit-CSP
X-Cache-Lookup
Content-Location
X-Amz-Version-Id
Surrogate-Control
X-Cnection
X-Server-Id
X-Host
X-Readtime
Report-To
X-Node
X-Rq
EagleEye-TraceId
Server-Timing
X-Response-Time
X-OneAgent-JS-Injection
X-CST
Feature-Policy
X-Rack-Cache
X-Backend-Server
X-ORACLE-DMS-ECID
X-Application-Context
X-Iejgwucgyu
Request-Id
X-Instart-Request-ID
X-Cloud-Trace-Context
X-Clacks-Overhead
Edge-Control
NEL
X-Url
X-DynaTrace
Allow
Rating
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Country
X-Varnish-TTL
X-Origin-Cache
X-FTR-Request-ID
X-Country-Code
X-B3-TraceId
X-Cdn
X-Server-Name
X-Trace
X-Px
X-Vhost
X-DataDome
X-Ruxit-JS-Agent
X-ESI
X-Server-ID
X-GitHub-Request-Id
X-ORACLE-DMS-RID
X-MS-InvokeApp
RTSS
X-Cached
X-VARITI-CCR
Accept-CH
SPRequestGuid
X-Goog-Hash
Charset
X-PC
X-TtlSet
X-Vname
X-TTL
Pinterest-Generated-By
X-Mod-Pagespeed
Public-Key-Pins
X-D2id
X-F-Cache
X-Dispatcher
X-Kinja-Build
X-Exp-Variant
X-GoogleNews-Bot
X-Kinja-Revision
X-Use-Magma
X-Cdn-Fetch
X-Kinja
Verso
X-Exp-Id
X-Kinja-Server
X-SharePointHealthScore
PB-PID
PB-RID
X-Mobile-Rewrite
Arc-Version
X-T
X-DynaTrace-JS-Agent
X-Version
X-Powered-By-Plesk
X-Abt-Application-Version
Accept-CH-Lifetime
X-Powered-CMS
X-DIS-Request-ID
X-Dns-Prefetch-Control
X-Ser
X-Fastly-Request-ID
X-Pinterest-Rid
X-Upstream-Env
Pinterest-Version
X-Navigation-Version
X-Origin-Upstream-Status
X-Forwarded-Proto
X-Recruiting
X-Shield-Request-Id
X-B
DynaTrace
MS-Author-Via
X-Client-IP
X-Amz-Rid
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-HW
SPRequestDuration
SPIisLatency
Realpath
Content-MD5
X-TEC-API-ROOT
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-Oneagent-Js-Injection
X-Upstream
Nginx-Cache
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Vcap-Request-Id
X-Goog-Stored-Content-Length
Edge-Cache-Tag
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Amz-Meta-S3cmd-Attrs
AR-ATIME
AR-CACHE
AR-PoweredBy
X-N
X-Ttl
X-Hits
TCN
Arr-Disable-Session-Affinity
X-Varnish-Age
X-Debug
X-Oracle-Dms-Rid
X-NF-Request-ID
Access-Control-Request-Method
MRF-Tech
X-Mrf-Item-Lastmod
X-Mrf-Section-Lastmod
Mrf-Cache-Status
X-Goog-Storage-Class
X-B3-TraceId-Primal
X-Acc-Meta-Resource-Type
X-MSEdge-Ref
X-NewRelic-App-Data
X-Dw-Request-Base-Id
X-XRDS-Location
S
X-ATG-Version
X-Id
Service-Worker-Allowed
X-FTR-Backend
X-Via-JSL
X-FTR-Backend-Server
X-FTR-Balancer
X-FTR-DC
X-FTR-Cache-Status
X-Country-Code-Real
X-FTR-Realm
X-Logged-In
X-FTR-Expires
Tracecode
X-FastCGI-Cache
X-PressLabs-Stats
X-HS-Content-Id
X-HS-Hub-Id
Rt-Fastcgi-Cache
X-Content-Digest
Alternate-Protocol
X-Pad
X-Frontend
X-Kinsta-Cache
Surrogate-Key
Fastly-Restarts
X-RateLimit-Remaining
AMP-Access-Control-Allow-Source-Origin
X-Forwarded-For
MicrosoftSharePointTeamServices
X-Content-Options
Ar-Sid
X-FTR-Cache-Host
X-Cache-Key
Server-Name
X-Edge-Location
X-Amzn-Trace-Id
Fastcgi-Cache
Backend-Timing
X-Analytics
Host
FilterID
X-CF-Powered-By
X-Grace
TP-L2-Cache
TP-Cache
X-IPLB-Instance
X-Rid
X-User-Agent
X-Debug-Info
X-Hostname
ServerID
X-Magnolia-Registration
X-Revision
X-B3-Sampled
X-Whom
Eomportal-Instance
X-Request-Received
Paypal-Debug-Id
X-Request-Processing-Time
X-Cache-2
X-NWS-LOG-UUID
X-Page-Id
X-Ruxit-Js-Agent
X-HS-Cache-Config
X-Mobile
AR-Request-ID
X-Srv
Front-End-Https
X-Akam-SW-Version
X-AOL-HN
X-Content-Powered-By
X-Cache-Hit
X-VCache
Retry-After
X-B-Cache
X-Signature
X-Varnish-Grace
X-GUploader-UploadID
X-Litespeed-Cache
X-Cluster
Source
X-FB-Debug
X-LB-Cache
X-Handled-By
X-SS-Set-Cookie
X-Device-Type
Refresh
X-WA-Info
X-Request-Guid
X-Instance
X-Correlation-Id
Cleartype
X-App-Environment
X-Cache-Control
X-Cache-Action
X-Tumblr-Pixel-0
X-Varnish-Hostname
X-BCube-Filmed-By
X-Tumblr-User
X-Tumblr-Pixel
X-Platform-Server
X-Framework
X-Content-Security-Policy-Report-Only
X-Zen-Fury
X-TA-CDN-Provider
X-Akamai-Edgescape
Webserver
X-Varnish-Backend
X-Webkit-CSP
X-Daa-Tunnel
X-Middleton-Display
X-Sol
Display
X-Cache-Server
X-Fastcgi-Cache
X-XRDS-LOCATION
X-Drupal-Cache-Tags
X-Varnish-Server
X-Activity-Id
X-AppVersion
X-Drupal-Cache-Contexts
X-Az
Healthy
X-Cache-Rule
X-Content-Type
X-Geo-Country
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-Generated-By
X-URL
X-Seen-By
X-Wix-Request-Id
Response
X-Middleton-Response
ViewerVersion
X-App-Server
X-Cached-By
S-Cnection
X-Cache-Age
Server-Node
Cache-Status
X-Node-Name
X-Accel-Expires
X-DataStream-Cache-Status
X-CACHE-GROUP
X-Amzn-RequestId
X-Origin-Server
X-Amz-Apigw-Id
X-Amz-Replication-Status
X-Esi
X-WPE-Loopback-Upstream-Addr
Upgrade-Insecure-Requests
X-TT
NGB
Filters
Payment
X-Response-Served-From
X-S
GEO-INFO
X-RequestSource
Host-Header
X-Cacheable-TTL
HostName
X-Locale
X-UA-Device-Type
X-Edge-Cache
Actual-Object-TTL
X-GeoIP
X-Edge-Cache-Key
X-Cache-NE
X-Varnish-IP
Viewport
X-FW-Serve
X-Contextid
X-Jobs
X-FW-Type
X-FW-Static
ServedBy
X-Tumblr-Pixel-1
X-Servedby
X-Tumblr-Pixel-2
X-FW-Server
X-FW-Hash
X-Varnish-Hits
X-UUID
X-Status
AsisCache
X-WebKit-CSP-Report-Only
X-TX-ID
X-Amz-Server-Side-Encryption
Access-Control-Allow-Method
X-TT-TIMESTAMP
Server-Info
X-Adobe-Loc
Accept-Charset
X-Adobe-Content
X-Storage
X-Vg-Webcache
X-Hyper-Cache
X-HS-Combine-CSS
SRV
Cache
X-CLOUD-TRACE-CONTEXT
X-Cache-TTL-Remaining
X-Rendered-As
X-PHP-Backend
X-Cache-Remote
From-Origin
X-Croise-Owner
MS-CV
X-APP-VERSION
X-App-Version
Cache-Tag
X-Cache-Operation
Cache-Tv-Group
DC
X-Region
X-Forwarded-Host
Public-Key-Pins-Report-Only
Liferay-Portal
Served-By
X-Redis-Cache
X-Mode
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-CACHE-KEY
X-Proxy-Build
X-Request-Time
X-RN-RSRV
X-Endurance-Cache-Level
X-Path-Route
Selected-FE
X-Upgrade-Enabled
X-Webstats-RespID
X-Agile-Id
X-Agile-Age
X-Cache-Var
X-Akamai-Request-ID2
X-Site-Version
X-Detected-As
X-Agile
X-TNCMS
X-Human
Fastcgi-X-Cache-Version
X-IP
Fastcgi-X-Cache
Fastcgi-Useragent
X-Generated
X-Hosted-By
X-Is-Bot
Machine
X-Timing-Wait
X-NGENIX-Cache
X-Cache-Var-Map
X-Loop
Meta-Geo
X-Akamai-Transformed
TWC-Locale-Group
TWC-Privacy
TWC-Device-Class
Origin-Edge-Control
Origin-Cache-Control
Now
Property-Id
S-Rt
TWC-GeoIP-Country
Webcakes-App-Name
TWC-Connection-Speed
X-Routing-Service
X-Vgn-Hpd-Reason
X-BYPASS-REASON
X-NCache
X-Origin-Hint
X-Original-Request
X-Pc-Appver
X-Labrador-Cache-Channel
X-L-Path
X-Cache-Category-Id
X-Format
X-Internal-Host
X-JoinUs
X-Pc-Hit
X-Pc-Key
X-Grey
X-ProxyCache-Status
Webcakes-Region
X-CDN-Cache
X-Via-Fastly
X-Environment-Context
X-Proxied
X-ProxyCache-Key
Cache-Name
X-Zipkin-Id
Webcakes-App-Version
TWC-GeoIP-LatLong
Xserver
X-Pubstack
X-Proxy
X-RemovedCookies
X-FC-Vary-Parameters
X-Upstream-HT
X-Upstream-CT
X-Tumblr-Pixel-3
X-ProcessESI
X-Access
X-OCL
Powered-By-ChinaCache
X-UA
X-Birta-Served
X-Birta-Cache-Post
X-VG-TLSProxy
Datacenter
X-PCL
X-Section
DB-Nickname
Cache-Tags
X-Web-Node
X-Viewer-Country
X-Origin-CC
X-Origin-Response-Time
X-Time-Microsecs
X-Backend-Name
X-Akamai-Request-ID
X-Cache-Config
Pagespeed
X-RateLimit-Limit
X-Origin-Host
X-Ocache
X-Xfnlog-Site
X-Origin
X-Via-CDN
X-ServerID
X-Www-Served-By
X-Rule
Azure-RegionName
X-CCM
OT-Force-Account-Verify
X-Tb
Azure-InstanceId
Mn-Server-Ip
Azure-SlotName
Azure-SiteName
Azure-Version
X-TIME
X-Sorting-Hat-ShopId
HitType
X-Sorting-Hat-PodId
X-ShardId
X-B3-Spanid
X-ShopId
X-Alternate-Cache-Key
X-Shopify-Stage
X-Parent-Response-Time
X-App-Name
X-NODE
X-Cache-TTL
X-Nginx-Cache
X-Guploader-Uploadid
Accept-Language
X-OVcl-Cache
X-OVcl
X-Ezoic-Cdn
L5d-Success-Class
Vix-Hermes-Req-Id
Cache-Key
User-Cache-Control
X-Protected-By
X-Edge-IP
NtCoent-Length
X-Real-IP
LB
Content-Style-Type
Content-Script-Type
Time
X-Newrelic-App-Data
X-Amz-Meta-Surrogate-Control
X-Real-Ip
X-BACKEND-TTL
X-Kong-Upstream-Latency
X-Proto
X-Kong-Proxy-Latency
X-Cache-Backend
X-Webkit-Csp
X-Correlation-ID
X-RTag
X-Pc-Date
X-Pc-Host
X-GRACE
Ms-Operation-Id
X-PERF
X-ApacheServer
X-Front
X-Nc
X-Cdn-Forward
X-Mrs-Cache
X-Mrs-Age
X-Mrs-Cache-Hits
X-Mshield-Cache-Status
X-Hit
X-Unique-Id-Primal
Section-Io-Cache
X-CDN-Forward
X-Sucuri-ID
X-Varnish-Beresp-Status
AR-SID
X-Varnish-Cacheable
X-FB-TRIP-ID
X-Varnish-Beresp-Grace
WZWS-RAY
X-Debug-Cache
X-Microcachable
X-Unique-ID
X-Content-Age
Access-Control-Request-Headers
X-Dc
X-C
Version
X-Twitter-Response-Tags
X-Time
X-Cache-Enabled
X-Transaction
X-Connection-Hash
X-Varnish-Beresp-Ttl
Fusion-Content-Source
Fusion-Template-Id
Fusion-Source
X-EdgeConnect-Cache-Status
Fusion-Component-Id
X-Trace-Id
Fusion-Content-Id
Country
Warning
X-MP-GENERATED-AT
X-D
X-Date
X-Clientip
X-Cache-URL
X-CF-Lambda-Fn
X-CF-Lambda-Version
X-Cache-Id
X-Cache-Host
X-Cache-Debug
X-Crawler
X-Cache-FS-Status
X-CUA
X-Backend-State
X-A-Dam
RNT-Machine
RNT-Time
X-A-Dcw
X-A-Dgt
X-Accel-Expires-Debug
Resin-Trace
X-A-Wwc
X-A
VivaBuild
UCS
Server-ID
Uber-Trace-Id
V-Age
Server-Host
Viewtype
Rt-Proxy-Cache
SD-X-WS
Rendered-Blocks
X-Actual-URL
X-BB-ID
SS
X-B-Cookie
Memcached
X-Bip
Locale
MD5-Digest
X-Cache-Bucket
X-Auto-Login
Meta-Geo-Continent
X-Aed
Powered-By
Release
X-Application
Platform
Mobile-Detection-Method
Node
Is-Eu
X-Qloud-Router
X-S-Maxage
X-S-Cookie
X-Rojux
X-ScT
X-Served-From
X-Server-Time
X-Server-By
X-Rewrite-Enabled
X-Returned-From-PostProcessResponse
X-Release
X-Region-Sid
X-Response-By
X-Returned-From
X-Returned-From-DLL
X-Returned-From-BeforeDispatch
X-SRCache-Key
X-Store
X-Via-Edge
X-VG-WebServer
X-Varnish-Action
X-Via-SSL
X-We-Are-Hiring
Xc-Version
X-WebServer
X-Variation
X-Var-Ttl
X-Trv-Group
X-Thanos
X-UE-Client-Country
X-Urbn-Context-Path
X-User
X-Urbn-Site-Id
X-Reboot
X-Rebelmouse-Surrogate-Control
X-G
X-FW-Version
X-From
X-Generated-In
X-GeoIP-Country-Code
X-Li-Fabric
X-Layer
X-Fetched-On
X-F5-Cache
X-Device-Os
X-Developer
X-Died
X-Dispatcher-Server
X-External-Request-Id
X-DPWN-IS-SECURE
X-Li-Pop
X-LI-Proto
X-PAYTM-SRV-ID
X-Passed-To-PostProcessResponse
X-PHP-Host
IBM-Web2-Location
X-Rebelmouse-Cache-Control
X-RCS-CacheZone
X-Passed-To-DLL
X-Passed-To-BeforeDispatch
X-Logtrace-Id
X-LI-UUID
X-Node-Id
X-NU-AKA-ACS-Version
X-Passed-To
X-Org
X-Destination
X-A-Ccd
X-Ratelimit-Limit
Adler-Geo
We-Hiring
Mail-Subject
Fastly-SIE
Ajk
Fastly-SWR
Fly-Request-Id
Fly-Cache
X-Ua
Frame-Options
Arc-Country
BehaviorPad-Version
Fastly-Backend-Name
Countrycode
X-Rocket-Nginx-Bypass
Ohc-File-Size
Cache-Prefix
Ec-Rule-Version
Load-Balancing
X-Hl-Ver
X-NWS-UUID-VERIFY
Apple-News-Services-Request-Url
Backend-Name
Apple-News-Services-Parsed-Url
X-IN-APIGATEWAY
Web-Mar-Node
Who
Backend
X-Hash
Www
X-No-Session
AKAMAI
HA-Geolat
X-Core-Value
X-Request-Start
X-Swa-Ws
X-Proxy-Upstream
X-Epic-Correlation-Id
X-Eu-Site
X-Proxy-Cache-Status
X-CGP
X-Request-UUID
X-UnsetCookies
Apple-News-Services-Handled
X-Amz-Meta-Cache-Control
X-Block-Status
X-Cache-Expires
X-SVT-ORM-VERSION
X-Gen-Mode
Apple-News-Services-Host
X-Hnp-Log
Content-Disposition
HA-Ipaddr
GMS-Ver
X-SVT-ORM-RULES
X-Via-NSCOPI
HA-Geocountry
HA-Host
X-Sf
GW-Server
HA-Servedtime
X-Matched-Rule
X-Stale
HA-Geocity
Kp-EeAlive
HA-Cloudapp
X-Location
HA-Urlpath
Heartbleed
X-Server-IP
Origin
X-IN-WAF
Esi-Enabled
X-Info
HA-Geolon
X-Thinkindot-L3
Thinkindot-CacheControl
Country-Code
Thinkindot-Control
Thinkindot-CacheControl-Type
X-Server-Group
HA-Georegion
Request-Country
Pramga
Pragrma
X-IN-SSL-APIGATEWAY
Request-EU
X-Key
Ha-Gx-Prefs
User-Agent
V-Cache
Group
X-Be
MI-Cache-Age
X-Phone
On-Server
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Nginx-Cache-Key
HitInfo
X-Irp-Debug
X-Platform
X-Instance-Name
X-GeoIP-City
X-VCT
X-Fstrz
MI-Cache
X-Gannett-Site-Version
Decoy-Debug-TTL
X-Geo
X-P-T
X-Backend-Url
X-Secret
Cache-Cookie-Set-From
Cache-Cookie-Set-Idcheck
X-Backend-Host
X-Distributor
X-Cache-CFC
X-Wikidot-Static-Cache
Cache-Cookie-Set-Lfrom
CDCHOST
REQUESTUUID
Proxy-Connection
Fastly-SSL
Fastly-Soc-X-Request-Id
MI-API
Server-Int
True-Client-Country-4JS
X-Wikidot-Backend
IsBot
X-Request-URI
X-Dynatrace-Js-Agent
X-Developers
X-Distil-CS
X-Policy
X-V
X-TT-LOGID
X-Up
X-MI-In-Market
Decoy-Debug-Key
Decoy-Debug-Status
X-ServiceProvider
X-SIPLIST1
X-Sn-Servicetimems
X-MSEdge-Flight
X-MSEdge-Features
Request-Time
X-Refresh
X-Origin-TTL
X-Origin-Expires
X-NX-Host
X-Origin-Date
X-Servername
X-ElasticPress-Search
X-Debug-Log
X-Fastly-Cache
X-Debug-Cookies
X-Cdn-Origin
X-Core-Mission
Magicmarker
Pagetype
X-Planisys-CDN-Cache
X-DC
X-Page-Type
RequestId
X-Planisys-CDN-Rules
X-COUNTRY
X-Planisys-CDN-TTL
PFcat
X-EIG-Tracking-Id
X-BBXSRF
Host-ID
X-Req
X-Pjax-Url
X-Powered-By-ANYU
PageSpeed
X-NC
X-Debug-Cache-Store
X-Debug-Cache-Expiry
X-CACHE-AGE
X-VarnPar1
X-Debug-Cache-Fetch
X-Svr
X-VarnCache
X-Micro-Cache
X-PARISIEN-Cache-Rendered
X-HOST
X-Level-Front-Cache
X-Newrelic-Synthetics
X-Instart-Info
X-Generated-On
MIME-Version
Mime-Version
X-Datadome
Cache-Provider
Lfy
ServerName
Cdn
X-Cdn-Srv
Ohc-Response-Time
X-TWH-CORRELATION-ID
X-Server-Cache
X-Cache-Info
Cteonnt-Length
PICS-Label
Memory
X-Cluster-Node
X-ARC
X-Gdpr
X-Servedbyhost
Nel
CF-IPCountry
FSS-Proxy
X-NodeID
X-StackifyID
X-CMS-Context
X-Sentry-ID
FSS-Cache
X-Wa
X-ABtesting
X-VServer
X-Fastly-Country-Code
X-Hello
X-Aicache-OS
X-Flog
X-Load-Cache
GeoIP-Country-Code
CDN
SN
GeoIP-Latitude
X-WR-MODIFICATION
X-LAGOON
XServer
X-Fastly-Backend-Reqs
X-HTML-Minification-Powered-By
X-GZip
GeoIp-Country-Code
Geoip-Latitude
NGX
X-CSRF-TOKEN
X-Varnish-Beresp-TTL
CACHE
X-UPSTREAM-Address
TSSecure
X-WA
X-Check-Cacheable
X-Worker
X-Source
Amp-Access-Control-Allow-Source-Origin
Processtime
X-FORWARDED-FOR
X-APP
X-MServer
X-CSRF-Token
X-Csrf-Token
X-Unique-Id
X-DataStream-Origin-MEX-Latency
X-DataStream-MidMile-RTT
A
Cf-Ipcountry
PageType
X-VWS-Id
X-SplitTest
X-Ratelimit-Remaining
X-LJ-Flow-ID
X-AWS-Id
X-Oss-Object-Type
X-FireWall-Port
X-Oss-Server-Time
X-Oss-Hash-Crc64ecma
WP-Super-Cache
X-Oss-Storage-Class
X-CDN-Pop-IP
X-CDN-Pop
X-Oss-Request-Id
X-Varnish-Cache-Hits
X-ServedByHost
X-Port
X-Dynatrace
Cdn-Host
X-Cache-Miss-From
HTTPS
X-RateLimit-Remaining-Second
X-Generation-Time
X-GDPR
X-Nananana
Cdn-Request-Time
X-RateLimit-Limit-Second
X-Edge-Server
X-Sedo-Request-Id
Pics-Label
X-SRV
Cache-Hits
Odigeo-Trace-Id
URI
X-Sucuri-Cache
X-Skip-Cache
X-VC-Cache
X-Backend-TTL
X-ID
DataCenter
X-Owner
X-Cache-Grace
X-B3-Traceid
X-Ms-Request-Id
X-Ms-Version
X-Ms-Lease-Status
X-Ms-Blob-Type
X-Varnish-Authentication
Server-Cache-Control
X-Fastly-Cache-Hits
Server-Surrogate-Control
X-B3-SpanId
X-HS-Status
X-Cache-ASPX
X-IPS-LoggedIn
ProcessTime
X-BE
X-Swift-Error
X-Gen-Id
X-PJAX-URL
Dynatrace
X-SN
X-RCS-Backend
Hostname
X-Varnish-Url
X-GZIP
X-From-Cache
X-Amzn-Remapped-Connection
X-Bug-Bounty
X-VG-WebCache
X-GoCache-CacheStatus
X-Amzn-Remapped-Date
X-ORIG-AKA-EDGE
X-Alicdn-Da-Ups-Status
X-NGINX-Cache
X-Cache-Srv
X-Cache-Ttl
X-Fe
X-ND-Cache
X-Instart-Isnd
X-PAGE-TYPE
X-Ms-Lease-State
Requestid
X-VarnPar2
X-Amz-Meta-S3b-Last-Modified
X-Akamai-SSL-Client-Sid
Serverid
NodeID
X-LiteSpeed-Cache-Control
X-Server-W
X-Varnish-URL
X-Pf-Uncompressing
Is-Session-Tracking
X-RAMCache
Xet-Cookie
WebServer
X-Serial
X-ORIG-AKA-COUNTRY-CODE
Get-Access-Time
X-ServerName
X-SB
T-Server
X-VC
RequestUuid
X-Request-Uuid
X-PF-Uncompressing
Proxy-Firewall
X-LiteSpeed-Tag
X-CS
NnCoection
SID
X-HTML-Edge-Cache
X-Akamai-ERPolicy
X-Akamai-ERRuleID
X-Developed-By
Location
X-RequestId
X-Dw-Trace-Id