Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Accept-Ranges
Pragma
X-Powered-By
Link
ETag
CF-RAY
Expect-CT
Via
X-Cache
X-XSS-Protection
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
X-UA-Compatible
X-Cache-Hits
X-Xss-Protection
X-Amz-Cf-Id
X-Served-By
P3P
Referrer-Policy
X-Varnish
X-Request-Id
X-Timer
CF-Cache-Status
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-AspNet-Version
X-Download-Options
X-Runtime
Access-Control-Allow-Credentials
P3p
CF-Ray
X-Drupal-Cache
X-Amz-Cf-Pop
X-Check
X-Adblock-Key
Alt-Svc
X-Cacheable
X-Generator
Content-Security-Policy-Report-Only
X-Cache-Status
X-DNS-Prefetch-Control
X-AspNetMvc-Version
Status
X-Template
X-Language
Timing-Allow-Origin
Content-Encoding
X-Iinfo
X-Permitted-Cross-Domain-Policies
X-Buckets
X-Content-Security-Policy
X-Turbo-Charged-By
X-Kinja-Server-Push
Upgrade
X-CDN
X-Request-ID
X-Type
Xkey
Keep-Alive
Access-Control-Expose-Headers
Access-Control-Max-Age
WPE-Backend
X-Pass-Why
X-AH-Environment
X-Backend
X-Cache-Group
X-Server
X-Age
X-Drupal-Dynamic-Cache
X-Pingback
X-Via
X-Nginx-Cache-Status
Grace
X-Amz-Request-Id
X-Amz-Id-2
X-Server-Powered-By
EagleId
X-Hacker
X-UA-Device
X-Robots-Tag
X-LiteSpeed-Cache
X-Varnish-Cache
X-Page-Speed
X-Proxy-Cache
X-Swift-CacheTime
X-Swift-SaveTime
Request-Context
Cf-Railgun
X-Envoy-Upstream-Service-Time
Ali-Swift-Global-Savetime
X-Ua-Compatible
X-Ac
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-WebKit-CSP
X-Device
X-Cache-Lookup
X-Amz-Version-Id
Content-Location
Surrogate-Control
X-Server-Id
X-Cnection
X-Node
X-OneAgent-JS-Injection
X-Host
X-Readtime
EagleEye-TraceId
Report-To
X-Rq
X-Response-Time
Server-Timing
Feature-Policy
X-Application-Context
X-Rack-Cache
X-CST
X-Backend-Server
X-ORACLE-DMS-ECID
X-Iejgwucgyu
X-Cloud-Trace-Context
Request-Id
X-Instart-Request-ID
X-Clacks-Overhead
X-Url
NEL
Edge-Control
X-DynaTrace
Rating
Allow
X-Country
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Varnish-TTL
X-Origin-Cache
X-FTR-Request-ID
X-Country-Code
X-B3-TraceId
X-Trace
X-Px
X-Server-ID
X-DataDome
X-Vhost
X-GitHub-Request-Id
X-ESI
X-Server-Name
X-ORACLE-DMS-RID
X-VARITI-CCR
X-Ruxit-JS-Agent
Accept-CH
RTSS
X-Goog-Hash
X-MS-InvokeApp
X-Cached
Charset
X-Mod-Pagespeed
SPRequestGuid
X-PC
X-TtlSet
X-Vname
X-F-Cache
X-D2id
Public-Key-Pins
X-Cdn-Fetch
X-Use-Magma
Verso
X-Kinja-Revision
X-Exp-Variant
X-GoogleNews-Bot
X-Kinja-Build
X-Kinja
X-Exp-Id
X-Kinja-Server
PB-RID
X-Mobile-Rewrite
Arc-Version
PB-PID
Pinterest-Generated-By
X-Version
X-Dispatcher
X-TTL
X-Cdn
X-T
X-SharePointHealthScore
X-Powered-By-Plesk
Accept-CH-Lifetime
X-DIS-Request-ID
X-Abt-Application-Version
X-Powered-CMS
X-Fastly-Request-ID
X-Ser
X-DynaTrace-JS-Agent
X-Origin-Upstream-Status
X-Navigation-Version
X-B
X-Forwarded-Proto
X-Shield-Request-Id
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Upstream-Env
Pinterest-Version
X-Pinterest-Rid
X-Amz-Rid
MS-Author-Via
Realpath
X-Client-IP
X-Recruiting
DynaTrace
X-HW
SPRequestDuration
SPIisLatency
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-Upstream
X-Vcap-Request-Id
X-Ttl
X-Goog-Generation
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
Nginx-Cache
Content-MD5
X-Accel-Buffering
X-Wix-Server-Artifact-Id
X-Amz-Meta-S3cmd-Attrs
AR-PoweredBy
AR-CACHE
AR-ATIME
Arr-Disable-Session-Affinity
Edge-Cache-Tag
X-Debug
X-Varnish-Age
X-Hits
X-N
X-Mrf-Item-Lastmod
MRF-Tech
X-B3-TraceId-Primal
X-Goog-Storage-Class
X-Mrf-Section-Lastmod
X-Oracle-Dms-Rid
Mrf-Cache-Status
X-Aspnet-Version
X-MSEdge-Ref
X-NF-Request-ID
X-Via-JSL
X-Dw-Request-Base-Id
X-Acc-Meta-Resource-Type
Access-Control-Request-Method
TCN
X-XRDS-Location
S
X-NewRelic-App-Data
X-ATG-Version
X-FTR-Balancer
X-FTR-DC
X-FTR-Realm
X-Country-Code-Real
X-FTR-Cache-Status
X-FTR-Backend-Server
X-FTR-Backend
X-Id
Service-Worker-Allowed
X-FTR-Expires
X-Logged-In
X-Oneagent-Js-Injection
Alternate-Protocol
X-Forwarded-For
X-HS-Content-Id
X-HS-Hub-Id
X-Kinsta-Cache
Surrogate-Key
X-Frontend
X-PressLabs-Stats
Tracecode
Rt-Fastcgi-Cache
X-Content-Digest
AMP-Access-Control-Allow-Source-Origin
X-FastCGI-Cache
X-Cache-Key
X-Pad
X-Grace
X-FTR-Cache-Host
MicrosoftSharePointTeamServices
Fastly-Restarts
X-RateLimit-Remaining
Server-Name
X-CF-Powered-By
Fastcgi-Cache
X-Edge-Location
X-Amzn-Trace-Id
Backend-Timing
X-Analytics
X-Content-Options
X-Ruxit-Js-Agent
FilterID
TP-L2-Cache
Ar-Sid
Host
TP-Cache
X-Cache-2
X-User-Agent
X-Rid
X-Magnolia-Registration
X-Whom
X-Debug-Info
X-B3-Sampled
X-Revision
X-IPLB-Instance
Eomportal-Instance
X-Page-Id
ServerID
X-Mobile
X-Hostname
X-Request-Processing-Time
X-Request-Received
X-NWS-LOG-UUID
AR-Request-ID
X-Srv
X-VCache
X-Akam-SW-Version
X-AOL-HN
Front-End-Https
Retry-After
X-Content-Powered-By
Paypal-Debug-Id
Refresh
X-Signature
X-GUploader-UploadID
X-Litespeed-Cache
X-B-Cache
X-Request-Guid
X-LB-Cache
X-Cache-Action
Source
X-Cluster
X-Device-Type
X-Handled-By
X-Framework
X-FB-Debug
X-SS-Set-Cookie
X-Varnish-Hostname
X-App-Environment
Cleartype
X-Instance
X-WA-Info
X-BCube-Filmed-By
X-Tumblr-Pixel
X-Akamai-Edgescape
X-Cache-Hit
X-Cache-Control
X-Varnish-Grace
X-Tumblr-Pixel-0
X-Tumblr-User
X-Correlation-Id
X-Content-Security-Policy-Report-Only
X-Fastcgi-Cache
X-Platform-Server
X-HS-Cache-Config
Webserver
X-Az
X-Activity-Id
X-AppVersion
X-Zen-Fury
X-Middleton-Display
X-XRDS-LOCATION
Display
X-Sol
X-Varnish-Backend
X-Content-Type
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
Healthy
X-Cache-Server
X-Cache-Rule
X-TA-CDN-Provider
X-Middleton-Response
Response
X-Daa-Tunnel
ViewerVersion
X-Drupal-Cache-Tags
X-Cache-Age
X-Seen-By
X-Varnish-Server
X-Wix-Request-Id
X-URL
X-TT
Upgrade-Insecure-Requests
X-App-Server
X-Drupal-Cache-Contexts
X-Generated-By
X-Cached-By
X-Geo-Country
X-Origin-Server
Cache-Status
X-CACHE-GROUP
X-DataStream-Cache-Status
S-Cnection
Accept-Charset
Server-Node
X-Amz-Replication-Status
X-Amz-Apigw-Id
X-Amzn-RequestId
X-Esi
X-Accel-Expires
Payment
X-S
X-UA-Device-Type
NGB
Filters
X-Response-Served-From
X-Edge-Cache
GEO-INFO
X-Edge-Cache-Key
Access-Control-Allow-Method
X-Locale
X-Servedby
X-Adobe-Loc
X-Contextid
X-Adobe-Content
X-Cacheable-TTL
X-Varnish-IP
X-RequestSource
X-Jobs
X-Status
Actual-Object-TTL
X-Cache-NE
Viewport
X-UUID
ServedBy
X-Varnish-Hits
X-TT-TIMESTAMP
X-TX-ID
X-FW-Static
Cache-Tv-Group
X-Storage
AsisCache
X-FW-Server
Server-Info
X-FW-Serve
X-FW-Hash
X-FW-Type
X-Tumblr-Pixel-1
X-Amz-Server-Side-Encryption
X-Tumblr-Pixel-2
X-WebKit-CSP-Report-Only
X-PHP-Backend
X-GeoIP
MS-CV
X-WPE-Loopback-Upstream-Addr
X-Dns-Prefetch-Control
X-Cache-Remote
HostName
X-Node-Name
X-Cache-TTL-Remaining
X-Rendered-As
Cache
X-App-Version
X-Croise-Owner
Host-Header
From-Origin
SRV
X-Region
X-Cache-Operation
X-Vg-Webcache
X-Webkit-CSP
X-Hyper-Cache
X-Redis-Cache
X-APP-VERSION
Served-By
X-Dynatrace-Js-Agent
Liferay-Portal
Public-Key-Pins-Report-Only
Cache-Tag
X-CACHE-KEY
DC
X-Mode
X-HS-Combine-CSS
X-BACKEND-TTL
X-Agile
X-IP
X-Webstats-RespID
X-Agile-Age
X-Human
X-Is-Bot
X-Cache-Var
X-Detected-As
X-Generated
X-Hosted-By
X-Cache-Var-Map
X-RN-RSRV
X-Loop
X-NGENIX-Cache
Machine
X-Upgrade-Enabled
X-Akamai-Transformed
X-Path-Route
Meta-Geo
X-Timing-Wait
Selected-FE
X-Site-Version
X-Proxy-Build
X-TNCMS
X-Agile-Id
Pagespeed
X-Forwarded-Host
X-Cache-Category-Id
X-Pc-Key
X-Endurance-Cache-Level
X-CDN-Cache
X-BYPASS-REASON
X-Pc-Hit
X-Web-Node
X-ProxyCache-Key
X-ProxyCache-Status
X-Request-Time
Origin-Edge-Control
Now
Origin-Cache-Control
X-Pc-Appver
Xserver
Cache-Name
X-Labrador-Cache-Channel
X-Grey
X-Internal-Host
X-NCache
X-L-Path
X-JoinUs
X-Original-Request
X-Upstream-CT
X-Environment-Context
X-Vgn-Hpd-Reason
Powered-By-ChinaCache
X-Upstream-HT
X-RemovedCookies
S-Rt
X-VG-TLSProxy
X-ServerID
X-Time-Microsecs
X-Viewer-Country
X-Via-Fastly
X-Birta-Cache-Post
X-Birta-Served
X-Akamai-Request-ID
X-UA
X-Pubstack
DB-Nickname
X-Origin-Host
X-FC-Vary-Parameters
X-ProcessESI
X-Origin-Response-Time
X-Origin
Fastcgi-X-Cache-Version
Fastcgi-Useragent
X-Ocache
Fastcgi-X-Cache
X-Origin-CC
X-OCL
X-Guploader-Uploadid
X-PCL
X-Proxy
X-Backend-Name
X-Cache-Config
X-CCM
X-Rule
X-Tb
Azure-RegionName
Azure-InstanceId
X-Xfnlog-Site
Azure-SiteName
Azure-SlotName
Cache-Tags
Azure-Version
X-Www-Served-By
Mn-Server-Ip
X-Via-CDN
X-Tumblr-Pixel-3
Webcakes-App-Name
Webcakes-App-Version
Webcakes-Region
TWC-Privacy
TWC-Locale-Group
TWC-GeoIP-Country
Content-Style-Type
X-Access
X-Format
X-Yottaa-Metrics
X-Kong-Proxy-Latency
X-Yottaa-Optimizations
X-Section
TWC-Device-Class
X-Origin-Hint
X-Kong-Upstream-Latency
TWC-GeoIP-LatLong
TWC-Connection-Speed
HitType
X-Zipkin-Id
X-Routing-Service
Content-Script-Type
X-Proxied
X-Parent-Response-Time
X-App-Name
Property-Id
Cache-Key
X-B3-Spanid
X-Protected-By
Datacenter
X-Edge-IP
User-Cache-Control
X-TIME
Vix-Hermes-Req-Id
X-Cache-TTL
OT-Force-Account-Verify
X-Nginx-Cache
X-Shopify-Stage
X-ShopId
X-Sorting-Hat-ShopId
X-ShardId
X-Sorting-Hat-PodId
Ms-Operation-Id
X-Ezoic-Cdn
X-Alternate-Cache-Key
X-RTag
X-Akamai-Request-ID2
Time
X-Cdn-Forward
X-OVcl
X-OVcl-Cache
X-ApacheServer
X-RateLimit-Limit
X-FB-TRIP-ID
X-PERF
X-Cache-Backend
X-Real-IP
X-Pc-Date
X-Pc-Host
NtCoent-Length
X-Newrelic-App-Data
Accept-Language
L5d-Success-Class
X-Mrs-Cache-Hits
X-Mrs-Age
X-Mrs-Cache
X-Mshield-Cache-Status
X-Unique-Id-Primal
X-Front
X-Webkit-Csp
X-Content-Age
AR-SID
X-Correlation-ID
X-Real-Ip
Country
Load-Balancing
LB
X-Proto
X-Debug-Cache
X-Ratelimit-Limit
X-Varnish-Cacheable
X-Amz-Meta-Surrogate-Control
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
Section-Io-Cache
X-Nc
Ohc-File-Size
X-CDN-Forward
X-Hit
Fusion-Component-Id
WZWS-RAY
X-Sucuri-ID
Fusion-Content-Id
Fusion-Content-Source
X-Unique-ID
Fusion-Template-Id
Fusion-Source
X-MP-GENERATED-AT
X-Hl-Ver
We-Hiring
X-GRACE
Mail-Subject
X-Trace-Id
X-Time
Version
Warning
X-CLOUD-TRACE-CONTEXT
X-EdgeConnect-Cache-Status
X-Microcachable
User-Agent
X-C
X-Geo
X-Cache-Enabled
X-Cache-Bucket
X-Cache-Debug
X-Date
X-Cache-Expires
X-Destination
X-Cache-Host
X-Connection-Hash
X-Crawler
X-D
X-Developer
X-CF-Lambda-Version
X-Cache-Id
X-Cache-URL
X-CF-Lambda-Fn
X-CUA
X-Aed
Rt-Proxy-Cache
RNT-Time
Resin-Trace
SD-X-WS
Server-Host
Thinkindot-CacheControl
SS
Server-ID
Request-Time
Rendered-Blocks
Mobile-Detection-Method
Meta-Geo-Continent
Memcached
Node
PFcat
Release
Powered-By
Platform
Thinkindot-CacheControl-Type
Thinkindot-Control
X-Actual-URL
X-Accel-Expires-Debug
X-A-Wwc
X-Device-Os
X-Application
X-BB-ID
X-B-Cookie
X-Auto-Login
X-A-Dgt
X-A-Dcw
VivaBuild
Viewtype
V-Age
Www
X-A
X-A-Dam
X-A-Ccd
X-Bip
X-Layer
X-Trv-Group
X-Rojux
X-Rewrite-Enabled
X-Passed-To-DLL
X-Transaction
X-Thinkindot-L3
X-Rebelmouse-Surrogate-Control
X-Returned-From-PostProcessResponse
X-Reboot
X-Returned-From-DLL
X-Var-Ttl
X-User
X-UE-Client-Country
X-TT-LOGID
X-Twitter-Response-Tags
X-Passed-To-PostProcessResponse
X-PAYTM-SRV-ID
X-S-Maxage
X-Server-Time
X-SRCache-Key
X-Server-By
X-Served-From
X-Rebelmouse-Cache-Control
X-ScT
MD5-Digest
X-S-Cookie
X-PHP-Host
X-Thanos
X-Qloud-Router
X-Swa-Ws
X-RCS-CacheZone
X-Store
X-Variation
X-Returned-From-BeforeDispatch
X-Li-Fabric
X-Region-Sid
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Li-Pop
X-LI-Proto
X-Logtrace-Id
X-LI-UUID
X-Generated-In
X-G
X-DPWN-IS-SECURE
X-Dispatcher-Server
X-External-Request-Id
X-Release
X-From
X-Fetched-On
X-Matched-Rule
Xc-Version
X-Via-SSL
X-Passed-To-BeforeDispatch
X-Passed-To
X-Via-Edge
X-VG-WebServer
X-Returned-From
X-Varnish-Action
X-P-T
X-We-Are-Hiring
X-NU-AKA-ACS-Version
X-Node-Id
X-Response-By
X-Request-UUID
X-WebServer
X-Org
X-Died
RNT-Machine
Frame-Options
Ajk
Fastly-SIE
Fastly-Backend-Name
Fastly-SWR
Fly-Cache
Arc-Country
BehaviorPad-Version
Fly-Request-Id
Ec-Rule-Version
Adler-Geo
X-Via-NSCOPI
X-Ua
Is-Eu
IBM-Web2-Location
Cache-Prefix
Access-Control-Request-Headers
Pagetype
X-Rocket-Nginx-Bypass
X-Distributor
X-Clientip
X-Cache-FS-Status
AKAMAI
Cache-Cookie-Set-From
X-Backend-State
Content-Disposition
X-Amz-Meta-Cache-Control
Cache-Cookie-Set-Lfrom
X-Block-Status
X-F5-Cache
X-Cache-CFC
Cache-Cookie-Set-Idcheck
Backend
X-GeoIP-Country-Code
X-Request-Start
X-Server-Group
X-Proxy-Upstream
Kp-EeAlive
X-Origin-Expires
X-Phone
X-Server-IP
X-ServiceProvider
X-SVT-ORM-VERSION
X-UnsetCookies
X-SVT-ORM-RULES
X-Stale
X-Sf
X-Origin-Date
X-No-Session
X-Hash
X-Hnp-Log
Country-Code
X-Gen-Mode
X-FW-Version
X-IN-APIGATEWAY
X-IN-SSL-APIGATEWAY
X-Location
X-MI-In-Market
X-Key
X-Info
X-IN-WAF
X-Fstrz
X-Proxy-Cache-Status
True-Client-Country-4JS
Pramga
MI-API
Fastly-SSL
MI-Cache
GMS-Ver
Magicmarker
GW-Server
Heartbleed
Proxy-Connection
Server-Int
Decoy-Debug-TTL
Web-Mar-Node
Decoy-Debug-Key
Origin
Countrycode
On-Server
MI-Cache-Age
Decoy-Debug-Status
X-NODE
X-Be
X-Dc
X-ElasticPress-Search
X-Irp-Debug
Ha-Gx-Prefs
HA-Host
REQUESTUUID
HA-Geolon
X-Gannett-Site-Version
HA-Geocountry
Who
HA-Geolat
HA-Georegion
X-Fastly-Cache
X-Policy
X-SIPLIST1
HA-Urlpath
X-Page-Type
X-Secret
X-Request-URI
HA-Servedtime
IsBot
X-Micro-Cache
X-V
X-Up
HA-Geocity
X-Nginx-Cache-Key
HA-Ipaddr
Backend-Name
X-Core-Mission
Esi-Enabled
HA-Cloudapp
X-Svr
X-MSEdge-Flight
X-CGP
X-Epic-Correlation-Id
X-Eu-Site
X-MSEdge-Features
X-Backend-Host
X-Core-Value
X-Distil-CS
X-Backend-Url
X-DC
X-Debug-Cache-Expiry
X-Wikidot-Static-Cache
X-Platform
X-Sn-Servicetimems
X-Generated-On
X-Level-Front-Cache
X-Origin-TTL
X-NX-Host
Pragrma
X-Debug-Cookies
X-Cdn-Origin
X-Refresh
Apple-News-Services-Parsed-Url
Apple-News-Services-Host
X-Wikidot-Backend
Apple-News-Services-Handled
Apple-News-Services-Request-Url
X-Debug-Log
X-Developers
Fastly-Soc-X-Request-Id
X-Debug-Cache-Store
CDCHOST
X-Debug-Cache-Fetch
X-Instance-Name
Uber-Trace-Id
X-Servername
UCS
X-COUNTRY
X-Planisys-CDN-TTL
X-Instart-Info
Locale
X-Planisys-CDN-Rules
X-Planisys-CDN-Cache
ServerName
Request-Country
Request-EU
X-Urbn-Context-Path
Lfy
X-Urbn-Site-Id
RequestId
X-Server-Cache
Host-ID
X-NWS-UUID-VERIFY
X-VarnCache
X-PARISIEN-Cache-Rendered
X-Cdn-Srv
X-VarnPar1
Ohc-Response-Time
X-Pjax-Url
X-Cache-Info
V-Cache
PageSpeed
Group
X-GeoIP-City
X-NC
X-VCT
X-ARC
X-CACHE-AGE
X-Req
MIME-Version
X-Newrelic-Synthetics
X-Datadome
HitInfo
Cteonnt-Length
Memory
Cdn
Cache-Provider
X-BBXSRF
X-CMS-Context
X-Powered-By-ANYU
Mime-Version
PICS-Label
X-Ratelimit-Remaining
X-Servedbyhost
X-EIG-Tracking-Id
X-Gdpr
X-TWH-CORRELATION-ID
X-LAGOON
Nel
X-WR-MODIFICATION
X-Wa
X-StackifyID
NGX
X-Aicache-OS
CF-IPCountry
GeoIP-Latitude
GeoIP-Country-Code
X-HTML-Minification-Powered-By
X-B3-Traceid
X-Load-Cache
CDN
X-Fastly-Country-Code
Cf-Ipcountry
X-UPSTREAM-Address
X-Fastly-Backend-Reqs
X-FireWall-Port
XServer
X-Cluster-Node
X-CSRF-TOKEN
X-Varnish-Cache-Hits
X-WA
X-RateLimit-Limit-Second
X-NodeID
FSS-Proxy
X-Sentry-ID
X-RateLimit-Remaining-Second
FSS-Cache
X-Generation-Time
X-ID
X-VServer
X-Sedo-Request-Id
X-Flog
Amp-Access-Control-Allow-Source-Origin
X-Hello
X-ABtesting
Geoip-Latitude
Processtime
X-Check-Cacheable
X-Cache-Miss-From
GeoIp-Country-Code
X-Csrf-Token
X-SRV
X-Unique-Id
X-Cache-Grace
X-HOST
SN
X-Source
CACHE
X-Varnish-Beresp-TTL
X-Varnish-Authentication
X-Oss-Hash-Crc64ecma
X-ServedByHost
WP-Super-Cache
X-APP
X-Oss-Server-Time
X-Oss-Object-Type
Server-Cache-Control
X-Oss-Request-Id
X-CDN-Pop
X-Oss-Storage-Class
X-CDN-Pop-IP
Server-Surrogate-Control
X-Cache-ASPX
X-GZip
X-DataStream-Origin-MEX-Latency
X-IPS-LoggedIn
X-GDPR
X-Nananana
X-Dynatrace
X-DataStream-MidMile-RTT
X-RCS-Backend
X-CSRF-Token
URI
TSSecure
Pics-Label
X-Varnish-Url
Cdn-Request-Time
Cdn-Host
X-Skip-Cache
X-VC-Cache
X-Worker
X-Edge-Server
X-MServer
X-FORWARDED-FOR
DataCenter
X-B3-SpanId
X-HS-Status
X-ND-Cache
X-VG-WebCache
X-Instart-Isnd
A
Get-Access-Time
X-Sucuri-Cache
PageType
X-From-Cache
X-Fastly-Cache-Hits
Is-Session-Tracking
X-GoCache-CacheStatus
X-Swift-Error
Serverid
X-BE
Dynatrace
X-Port
HTTPS
Hostname
X-PJAX-URL
Proxy-Firewall
X-VWS-Id
X-LJ-Flow-ID
X-AWS-Id
X-SplitTest
X-Gen-Id
X-Backend-TTL
X-Amzn-Remapped-Date
X-Server-W
X-Pf-Uncompressing
Odigeo-Trace-Id
X-Bug-Bounty
Powered
X-Amzn-Remapped-Connection
X-GZIP
X-Owner
X-ORIG-AKA-EDGE
X-SN
X-NGINX-Cache
Requestid
X-Fe
X-VarnPar2
X-Cache-Ttl
X-Pc-Subdomain
Cache-Hits
X-Amz-Meta-S3b-Last-Modified
WebServer
X-ORIG-AKA-COUNTRY-CODE
X-ServerName
X-PAGE-TYPE
X-LiteSpeed-Cache-Control
X-HostName
X-RequestId
X-PF-Uncompressing
X-GEO
X-Serial
X-Alicdn-Da-Ups-Status
X-Varnish-URL
X-RAMCache
RequestUuid
X-Dw-Trace-Id
X-VC
X-SB
T-Server
Xet-Cookie
Correlation-Id
X-R9-Blue-Green-Version
X-CS
Location
X-Ms-Version
X-LiteSpeed-Tag
SID
X-HTML-Edge-Cache
X-Akamai-ERRuleID
X-Akamai-ERPolicy
X-Akamai-SSL-Client-Sid
X-Ms-Blob-Type
NnCoection
X-Ms-Lease-Status
X-Developed-By
X-Ms-Request-Id