Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
Pragma
X-Powered-By
CF-RAY
ETag
Link
Expect-CT
X-XSS-Protection
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Xss-Protection
X-Varnish
X-Request-Id
CF-Cache-Status
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-AspNet-Version
X-Download-Options
X-Runtime
Access-Control-Allow-Credentials
X-Drupal-Cache
X-Adblock-Key
X-Check
Alt-Svc
X-Cacheable
X-Generator
Content-Security-Policy-Report-Only
X-DNS-Prefetch-Control
X-Cache-Status
X-AspNetMvc-Version
X-Permitted-Cross-Domain-Policies
X-Iinfo
X-Template
X-Language
Status
Timing-Allow-Origin
X-Buckets
X-Content-Security-Policy
Content-Encoding
X-CDN
X-Kinja-Server-Push
Xkey
X-Turbo-Charged-By
X-Ua-Compatible
Upgrade
X-Type
Keep-Alive
Access-Control-Expose-Headers
X-Request-ID
WPE-Backend
X-Pass-Why
X-Backend
Access-Control-Max-Age
X-AH-Environment
CF-Ray
X-Cache-Group
X-Age
X-Drupal-Dynamic-Cache
X-Server
X-Via
X-Proxy-Cache
Grace
X-Pingback
X-Nginx-Cache-Status
X-Server-Powered-By
X-Amz-Request-Id
X-Robots-Tag
X-Amz-Id-2
X-Hacker
X-UA-Device
X-Varnish-Cache
X-Page-Speed
EagleId
Request-Context
X-LiteSpeed-Cache
Cf-Railgun
X-Envoy-Upstream-Service-Time
X-CST
X-Swift-SaveTime
X-Swift-CacheTime
X-WebKit-CSP
Ali-Swift-Global-Savetime
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Device
X-Amz-Version-Id
X-Server-Id
X-Ac
X-Node
Server-Timing
Feature-Policy
Allow
X-Iejgwucgyu
X-Cnection
X-Response-Time
X-OneAgent-JS-Injection
X-Rq
Content-Location
X-Backend-Server
X-Cache-Lookup
Report-To
EagleEye-TraceId
Surrogate-Control
X-Readtime
X-Host
X-Application-Context
Request-Id
X-Url
X-ORACLE-DMS-ECID
P3p
X-Rack-Cache
X-Origin-Cache
X-Clacks-Overhead
X-Country
NEL
X-FTR-Request-ID
Rating
X-Country-Code
X-Cloud-Trace-Context
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-DataDome
X-Instart-Request-ID
X-Px
X-Vhost
X-Mod-Pagespeed
X-MS-InvokeApp
Charset
X-VARITI-CCR
X-Ruxit-JS-Agent
Accept-CH
Edge-Control
Pinterest-Generated-By
X-Goog-Hash
X-GitHub-Request-Id
Verso
Arc-Version
PB-RID
PB-PID
X-Mobile-Rewrite
X-TTL
X-ESI
X-DynaTrace
X-TtlSet
X-PC
X-Vname
X-Version
X-Server-Name
X-B3-TraceId
X-Cdn
X-Powered-By-Plesk
X-D2id
X-Varnish-TTL
X-Exp-Variant
X-Cdn-Fetch
X-Exp-Id
X-GoogleNews-Bot
X-Kinja
X-Kinja-Build
X-Kinja-Revision
X-Use-Magma
X-Kinja-Server
X-Cached
X-Upstream-Env
X-Origin-Upstream-Status
X-Dispatcher
SPRequestGuid
X-SharePointHealthScore
X-Powered-CMS
X-Abt-Application-Version
MS-Author-Via
X-Recruiting
X-T
X-Server-ID
Accept-CH-Lifetime
RTSS
X-Navigation-Version
Public-Key-Pins
X-Shield-Request-Id
X-ORACLE-DMS-RID
X-Oracle-Dms-Rid
X-Trace
Content-MD5
AR-PoweredBy
AR-ATIME
AR-CACHE
X-Client-IP
X-Amz-Rid
X-SRCache-Fetch-Status
X-SRCache-Store-Status
SPRequestDuration
SPIisLatency
X-Fastly-Request-ID
X-HW
X-Forwarded-Proto
X-DIS-Request-ID
X-Accel-Buffering
Arr-Disable-Session-Affinity
X-Wix-Server-Artifact-Id
Realpath
X-B
X-F-Cache
X-Upstream
X-Goog-Stored-Content-Length
X-Goog-Generation
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Amz-Meta-S3cmd-Attrs
X-DynaTrace-JS-Agent
X-Ser
Service-Worker-Allowed
X-Via-JSL
X-Pinterest-Rid
Pinterest-Version
X-FTR-Cache-Status
X-FTR-DC
X-FTR-Realm
X-Id
X-FTR-Balancer
X-FTR-Backend-Server
X-Country-Code-Real
X-FTR-Backend
Front-End-Https
X-Dw-Request-Base-Id
X-FTR-Expires
Paypal-Debug-Id
AR-Request-ID
X-Vcap-Request-Id
X-Varnish-Age
X-Dns-Prefetch-Control
X-Debug
X-Goog-Storage-Class
X-Acc-Meta-Resource-Type
Ar-Sid
X-MSEdge-Ref
X-N
Nginx-Cache
X-Kinsta-Cache
X-Hits
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-NF-Request-ID
X-NewRelic-App-Data
X-FTR-Cache-Host
X-Logged-In
X-Ttl
Mrf-Cache-Status
S
X-Mrf-Item-Lastmod
X-B3-TraceId-Primal
MRF-Tech
X-Mrf-Section-Lastmod
X-Akam-SW-Version
X-XRDS-Location
X-Forwarded-For
X-Grace
X-Frontend
X-PressLabs-Stats
X-HS-Content-Id
X-HS-Hub-Id
Alternate-Protocol
X-User-Agent
X-DataStream-Cache-Status
Tracecode
X-Amzn-Trace-Id
DynaTrace
X-CACHE-GROUP
Server-Name
X-Pad
X-Content-Digest
AMP-Access-Control-Allow-Source-Origin
Refresh
X-Content-Options
MicrosoftSharePointTeamServices
X-TA-CDN-Provider
Backend-Timing
Powered-By-ChinaCache
X-Analytics
Fastcgi-Cache
X-Zen-Fury
X-Content-Type
Accept-Charset
X-AppVersion
X-LB-Cache
X-Fastcgi-Cache
X-Activity-Id
X-Az
X-IPLB-Instance
FilterID
TCN
X-Rid
Host
X-Page-Id
Display
X-Sol
X-Debug-Info
X-Middleton-Display
Access-Control-Request-Method
X-FastCGI-Cache
X-Cache-Key
MS-CV
X-CF-Powered-By
ServerID
X-Magnolia-Registration
TP-L2-Cache
TP-Cache
Cache-Status
Response
X-XRDS-LOCATION
X-Middleton-Response
X-Oneagent-Js-Injection
X-Cache-Hit
X-Ruxit-Js-Agent
X-ATG-Version
X-Mobile
X-Content-Powered-By
X-Seen-By
X-Srv
Surrogate-Key
X-Hostname
X-WA-Info
X-B3-Sampled
X-Revision
X-Cached-By
Rt-Fastcgi-Cache
X-Varnish-Backend
X-Request-Received
X-Request-Processing-Time
X-SS-Set-Cookie
VIX-Pulpo-Node
X-Cluster
X-RateLimit-Remaining
X-Cache-Action
X-B-Cache
VIX-Pulpo-Upstream-Status
X-Signature
X-Cache-Age
X-Tumblr-Pixel-0
X-Content-Security-Policy-Report-Only
X-Tumblr-Pixel
X-Instance
X-Tumblr-User
X-Whom
X-Drupal-Cache-Tags
X-VCache
X-Request-Guid
Cleartype
X-PHP-Backend
Source
X-Platform-Server
X-Wix-Request-Id
Host-Header
X-TT
X-Framework
ViewerVersion
X-Akamai-Edgescape
X-Handled-By
X-Origin-Server
X-App-Environment
X-Edge-Location
Server-Info
X-GUploader-UploadID
X-Cache-Control
DC
X-BCube-Filmed-By
X-Generated-By
X-Amz-Apigw-Id
X-Amzn-RequestId
X-App-Server
X-Geo-Country
X-FW-Serve
X-FW-Hash
X-Real-IP
X-FW-Server
X-FW-Static
X-NWS-LOG-UUID
X-FW-Type
X-AOL-HN
X-Varnish-Hostname
X-Cache-Rule
Server-Node
X-Varnish-Server
Retry-After
X-Cache-2
Fusion-Source
Fusion-Template-Id
Fusion-Content-Source
Fusion-Component-Id
Fusion-Content-Id
Eomportal-Instance
X-Correlation-Id
X-FB-Debug
Cache
Payment
X-WPE-Loopback-Upstream-Addr
Webserver
X-Varnish-Grace
X-TT-TIMESTAMP
X-Response-Served-From
X-Amz-Server-Side-Encryption
Access-Control-Allow-Method
Actual-Object-TTL
AsisCache
ServedBy
X-Device-Type
X-Tumblr-Pixel-1
X-Varnish-Hits
X-Tumblr-Pixel-2
X-RTag
Content-Script-Type
X-Cacheable-TTL
Content-Style-Type
X-Region
GEO-INFO
X-WebKit-CSP-Report-Only
Ms-Operation-Id
NGB
X-TX-ID
X-UUID
Filters
X-Jobs
X-Contextid
Viewport
X-Varnish-IP
X-Adobe-Loc
X-Adobe-Content
X-Amz-Replication-Status
X-Servedby
Upgrade-Insecure-Requests
Healthy
X-RequestSource
Country
X-Locale
X-Rendered-As
X-Cache-Config
X-Drupal-Cache-Contexts
Cache-Tv-Group
X-UA-Device-Type
X-Accel-Expires
From-Origin
X-Cache-TTL-Remaining
Edge-Cache-Tag
HitType
X-Ezoic-Cdn
X-BACKEND-TTL
Pagespeed
X-Cache-Remote
X-Cache-Server
X-VG-WebCache
X-Cache-TTL
Fastcgi-Useragent
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-FW-Dynamic
Fastly-Restarts
X-Content-Age
X-Cache-Operation
Cache-Tags
X-Upgrade-Enabled
X-Hit
X-App-Version
X-Redis-Cache
X-Storage
X-S
X-Guploader-Uploadid
X-Esi
X-CACHE-KEY
Datacenter
X-APP-VERSION
X-Mode
X-Source
Cache-Tag
X-Upstream-Proxy
Served-By
NtCoent-Length
X-GeoIP
X-NGENIX-Cache
X-JoinUs
X-Origin-Response-Time
X-NCache
X-RN-RSRV
X-Rule
Xserver
X-Is-Bot
X-Path-Route
X-Internal-Host
Machine
X-Akamai-Request-ID
SRV
Meta-Geo
Origin-Edge-Control
Load-Balancing
X-Cache-Var
X-Hl-Ver
X-Generated
X-Detected-As
X-Cache-Var-Map
Origin-Cache-Control
X-Backend-Name
X-Birta-Cache-Post
X-Agile-Id
X-Birta-Served
X-BYPASS-REASON
X-Cache-Category-Id
X-ServerID
X-Agile-Age
X-Agile
X-Web-Node
X-Www-Served-By
Now
X-Timing-Wait
X-Time-Microsecs
Selected-FE
X-CDN-Cache
X-Edge-IP
X-Proxy
X-Proxy-Build
X-L-Path
X-Labrador-Cache-Channel
X-Origin-Host
X-Loop
X-ProxyCache-Key
X-Hosted-By
X-Environment-Context
X-Pubstack
X-FC-Vary-Parameters
X-Grey
X-ProxyCache-Status
Vix-Hermes-Req-Id
X-TNCMS
X-Akamai-Transformed
X-Tb
X-ApacheServer
X-Status
X-Via-Fastly
X-Viewer-Country
Webcakes-App-Name
X-RemovedCookies
Property-Id
X-Varnish-Cacheable
TWC-Locale-Group
TWC-Privacy
Webcakes-App-Version
TWC-GeoIP-LatLong
TWC-GeoIP-Country
Webcakes-Region
TWC-Connection-Speed
TWC-Device-Class
X-Varnish-Cache-Hits
Cache-Name
X-PERF
X-ProcessESI
X-Cache-NE
X-IP
X-Pc-Key
X-RateLimit-Limit
X-Pc-Appver
X-Pc-Hit
X-Origin-Hint
X-PCL
S-Rt
X-OCL
X-Site-Version
X-Format
Cache-Key
Azure-Version
X-Debug-Cache
Fastcgi-X-Cache-Version
X-Daa-Tunnel
Azure-SlotName
Azure-SiteName
Azure-InstanceId
X-CCM
X-Human
Azure-RegionName
DB-Nickname
X-VG-TLSProxy
X-MP-GENERATED-AT
X-DataStream-Origin-MEX-Latency
X-Proxied
X-Cache-Enabled
X-DataStream-MidMile-RTT
X-Routing-Service
We-Hiring
X-Access
X-Zipkin-Id
X-Section
Public-Key-Pins-Report-Only
X-Xfnlog-Site
Mail-Subject
X-App-Name
X-Original-Request
Access-Control-Request-Headers
X-Microcachable
X-UA
X-Sucuri-ID
X-Cdn-Forward
User-Cache-Control
X-Ocache
X-Origin
S-Cnection
X-Protected-By
X-EdgeConnect-Cache-Status
Liferay-Portal
X-Nginx-Cache
User-Agent
X-FW-Version
X-Request-Time
X-Webstats-RespID
X-Tumblr-Pixel-3
LB
X-GEO
Cache-Hits
X-Proto
X-Yottaa-Optimizations
X-Yottaa-Metrics
Ohc-File-Size
X-FB-TRIP-ID
X-GRACE
X-Origin-CC
X-Trace-Id
X-Nc
X-ES-SERVER
X-Node-Name
Powered
X-Time
X-Correlation-ID
X-Dynatrace-Js-Agent
X-Endurance-Cache-Level
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Unique-ID
X-Pc-Date
X-Pc-Host
PageSpeed
X-Upstream-CT
X-Forwarded-Host
Frame-Options
X-Upstream-HT
X-Parent-Response-Time
L5d-Success-Class
X-Pc-Subdomain
X-V
X-Cache-Backend
Section-Io-Cache
IBM-Web2-Location
X-OVcl-Cache
X-ElasticPress-Search
X-OVcl
X-Rocket-Nginx-Bypass
X-Ua
X-Origin-TTL
AR-SID
X-Varnish-Beresp-Ttl
OT-Force-Account-Verify
X-VWS-Id
X-AWS-Id
Nel
X-LJ-Flow-ID
X-Vgn-Hpd-Reason
X-R9-Blue-Green-Version
Decoy-Debug-TTL
Decoy-Debug-Status
X-From
Country-Code
Decoy-Debug-Key
Ec-Rule-Version
X-Fetched-On
Fastly-SWR
Fly-Cache
X-DPWN-IS-SECURE
X-External-Request-Id
Fastly-SIE
Cache-Prefix
BehaviorPad-Version
X-Li-Fabric
X-Info
X-ServiceProvider
X-Li-Pop
X-LI-UUID
X-LI-Proto
X-IN-WAF
X-IN-SSL-APIGATEWAY
Fly-Request-Id
X-Generated-In
X-Goog-Meta-Goog-Reserved-File-Mtime
Arc-Country
X-IN-APIGATEWAY
X-Hnp-Log
X-Gen-Mode
GMS-Ver
X-Block-Status
Resin-Trace
X-BB-ID
X-Cache-Bucket
Rendered-Blocks
Powered-By
X-Cache-FS-Status
X-B-Cookie
X-Auto-Login
X-Accel-Expires-Debug
Viewtype
VivaBuild
X-Aed
X-Amz-Meta-Cache-Control
X-ARC
X-Application
X-Cache-Host
X-Cache-Id
MD5-Digest
Memcached
Meta-Geo-Continent
X-Date
X-Destination
X-Edge-Cache-Key
X-Developer
X-Connection-Hash
X-CF-Lambda-Version
X-Cache-URL
X-Cache-Info
X-Cdn-Srv
X-CF-Lambda-Fn
Mobile-Detection-Method
Node
X-Distil-CS
X-Irp-Debug
X-S-Maxage
X-ScT
X-Transaction
X-S-Cookie
X-PHP-Host
X-VG-WebServer
X-PAYTM-SRV-ID
X-Wikidot-Static-Cache
X-Origin-Expires
X-Server-By
X-Wikidot-Backend
X-We-Are-Hiring
X-Rewrite-Enabled
X-User
Www
X-TT-LOGID
X-Region-Sid
X-Reboot
X-Trv-Group
Xc-Version
X-SRCache-Key
X-Varnish-Ttl
X-UE-Client-Country
X-Request-UUID
Fastcgi-X-Cache
X-Twitter-Response-Tags
X-Origin-Date
X-Rojux
X-Rebelmouse-Surrogate-Control
X-Server-Cache
X-Server-Group
X-Rebelmouse-Cache-Control
X-NU-AKA-ACS-Version
X-Micro-Cache
X-Edge-Cache
X-Cluster-Node
X-Dc
X-Nginx-Cache-Key
X-Returned-From
X-Bip
X-Backend-Url
X-Proxy-Cache-Status
X-Policy
X-Sorting-Hat-ShopId
X-Response-By
X-Request-URI
X-Cache-Debug
X-Sorting-Hat-PodId
X-Backend-Host
X-C
X-Cache-Grace
X-Cache-Expires
X-Proxy-Upstream
X-A-Dam
X-A-Dcw
X-A-Dgt
X-Location
X-Logtrace-Id
X-A
X-A-Ccd
X-A-Wwc
X-RateLimit-Remaining-Second
X-Stale
X-Shopify-Stage
X-Sf
X-RateLimit-Limit-Second
X-Actual-URL
X-Alternate-Cache-Key
X-Server-IP
X-Returned-From-PostProcessResponse
X-Hash
X-Fastly-Cache
X-Passed-To-PostProcessResponse
X-Node-Id
X-Distributor
X-Svr
X-Dispatcher-Server
X-Passed-To-DLL
X-NX-Host
X-Passed-To
X-G
X-Generated-On
X-ShopId
X-FireWall-Port
X-Passed-To-BeforeDispatch
X-Thinkindot-L3
X-Matched-Rule
X-Debug-Log
X-Clientip
X-Level-Front-Cache
X-Var-Ttl
X-Swa-Ws
X-ShardId
X-Returned-From-DLL
X-Thanos
X-Core-Mission
X-Variation
X-SIPLIST1
X-Debug-Cookies
X-D
X-CUA
X-Varnish-Action
X-Crawler
X-Returned-From-BeforeDispatch
Mn-Server-Ip
On-Server
Magicmarker
IsBot
Origin
Platform
X-Via-NSCOPI
Proxy-Connection
Is-Eu
Fastly-Soc-X-Request-Id
Backend
Ajk
Adler-Geo
CDCHOST
Content-Disposition
Fastly-Backend-Name
Countrycode
Request-Time
Lfy
Thinkindot-CacheControl
Server-Host
Thinkindot-CacheControl-Type
Thinkindot-Control
True-Client-Country-4JS
Who
Web-Mar-Node
SD-X-WS
X-Via-CDN
X-Sucuri-Cache
Warning
X-Device-Os
X-Developers
X-Fstrz
X-F5-Cache
Cache-Cookie-Set-Lfrom
X-CGP
Fastly-SSL
X-MSEdge-Flight
X-Backend-State
X-UnsetCookies
X-Instart-Isnd
X-Key
X-SERVER
X-Varnish-Authentication
Ha-Gx-Prefs
HA-Ipaddr
X-Generation-Time
Cache-Cookie-Set-From
GW-Server
AKAMAI
X-MSEdge-Features
Cache-Cookie-Set-Idcheck
X-Died
Heartbleed
X-TIME
X-Platform
Server-Int
X-LAGOON
Server-Surrogate-Control
X-Secret
Pramga
RNT-Machine
RNT-Time
X-Cache-ASPX
Release
Server-Cache-Control
X-GeoIP-Country-Code
Pagetype
X-Qloud-Router
SS
X-No-Session
X-Core-Value
X-Croise-Owner
X-Epic-Correlation-Id
X-Gannett-Site-Version
X-Eu-Site
HostName
X-Ratelimit-Remaining
X-HS-Cache-Config
Apple-News-Services-Handled
X-TrackingId
CACHE
X-EIG-Tracking-Id
Apple-News-Services-Host
REQUESTUUID
X-Page-Type
Server-ID
X-Varnish-Url
X-Amz-Meta-Surrogate-Control
Apple-News-Services-Request-Url
Apple-News-Services-Parsed-Url
X-Server-Time
X-Pjax-Url
X-Sedo-Request-Id
X-Debug-Cache-Expiry
X-Debug-Cache-Store
Kp-EeAlive
X-Up
Version
X-Debug-Cache-Fetch
X-Cache-Miss-From
X-Be
NGX
PFcat
RequestId
X-Refresh
X-B3-Traceid
X-Newrelic-App-Data
SID
X-Servername
X-Owner
X-Cache-CFC
X-Store
Esi-Enabled
Time
X-URL
X-CDN-Forward
MI-Cache-Age
MIME-Version
Odigeo-Trace-Id
MI-Cache
X-From-Cache
X-Layer
X-MI-In-Market
MI-API
X-RCS-CacheZone
X-SN
X-NC
X-B3-SpanId
X-Ratelimit-Limit
Cdn
X-FPC
Cteonnt-Length
X-Oss-Request-Id
X-Oss-Storage-Class
PICS-Label
X-Oss-Server-Time
X-IPS-LoggedIn
X-RequestId
X-Oss-Object-Type
Mime-Version
X-Oss-Hash-Crc64ecma
Hostname
X-Geo
HA-Geolon
HA-Cloudapp
HA-Geolat
HTTPS
HA-Geocity
HA-Geocountry
HA-Urlpath
HA-Servedtime
HA-Georegion
HA-Host
X-Hyper-Cache
FastCGI-Cache
Backend-Name
X-Servedbyhost
X-Edge-Server
Cdn-Request-Time
Cdn-Host
X-Mrs-Age
X-Mrs-Cache
X-Unique-Id-Primal
X-Mshield-Cache-Status
X-Mrs-Cache-Hits
Memory
X-Real-Ip
X-Webkit-CSP
X-Req
X-Webkit-Csp
X-CSRF-TOKEN
X-Load-Cache
X-CMS-Context
CF-IPCountry
X-CLOUD-TRACE-CONTEXT
ProcessTime
Cf-Ipcountry
Processtime
X-B3-Spanid
X-WebServer
Ohc-Response-Time
X-Wa
X-Mobile-URL
X-Instart-Info
X-Amzn-Remapped-Date
X-Amzn-Remapped-Connection
X-Phone
CDN
X-Newrelic-Synthetics
X-VServer
Cross-Origin-Window-Policy
X-HS-Combine-CSS
X-NodeID
GeoIP-Country-Code
X-Varnish-Beresp-TTL
X-Request-Start
X-GZip
X-DC
Amp-Access-Control-Allow-Source-Origin
X-WR-MODIFICATION
X-Aicache-OS
X-Pf-Uncompressing
GeoIP-Latitude
X-HTML-Minification-Powered-By
X-PF-Uncompressing
X-Lb-Id
X-Release
XServer
X-Skip-Cache
X-WA
X-Fastly-Country-Code
X-Atg-Version
X-Server-W
URI
Ohc-Cache-HIT
X-VC-Cache
Rt-Proxy-Cache
X-Nananana
X-FORWARDED-FOR
X-Served-From
Accept-Ch-Lifetime
T-Server
X-ND-Cache
X-Cms-Context
X-Tb-Optimization-Total-Bytes-Saved
X-ServedByHost
Uber-Trace-Id
X-APP
X-Oracle-Dms-Ecid
X-GoCache-CacheStatus
N-Cache
X-LB-ID
X-Gateway-Skip-Cache
X-UCC
X-Gateway-Cache-Key
X-MServer
X-Gateway-Cache-Status
X-Unique-Id
X-COUNTRY
X-Vcache
X-Datadome
X-CSRF-Token
X-Worker
V-Age
Pics-Label
X-SRV
X-Cdn-Origin
X-Sn-Servicetimems
X-HS-Status
X-Fastly-Cache-Hits
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
A
X-Processor
Proxy-Firewall
X-LiteSpeed-Cache-Control
X-UPSTREAM-Address
X-SERVER-NAME
Get-Access-Time
X-CACHE-AGE
DataCenter
X-BBXSRF
Is-Session-Tracking
X-P-T
X-Hp-Webp
ServerName
X-GZIP
X-Check-Cacheable
Cneonction
X-Requestid
X-NGINX-Cache
X-RCS-Backend
X-Cache-HT
X-Optimization
Dnion-Transfer-Encoding
X-HostName
Geoip-Latitude
X-ID
X-ServerName
X-BE
X-Vg-Webcache
X-Shard
X-Backend-TTL
X-Fe
X-PAGE-TYPE
GeoIp-Country-Code
X-Geo-Header
X-GeoIP-City
X-Amzn-Remapped-Content-Length
Host-ID
X-Csrf-Token
X-Varnish-URL
X-GDPR
X-StackifyID
X-VCT
X-PJAX-URL
X-Port
Requestid
X-NWS-UUID-VERIFY
Serverid
Server-Id
Inserted-Into-Cache-At
X-LiteSpeed-Tag
X-Org
WZWS-RAY
X-Fastly-Backend-Reqs
UCS
Cache-Provider
WP-Super-Cache
X-Dw-Trace-Id
RequestUuid
X-Git-Hash
X-RAMCache
355prline
189phosttRef
219prxHost
188prxHost
178proxuri
X-Via-Edge
DSUID
225prxHost
286prxHost
Xxline
X-Request-Url
409pxxline
X-Via-SSL
352pxline
X-CS