Threat Level: green Handler on Duty: Tom Webb

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
Last-Modified
X-Content-Type-Options
Accept-Ranges
Pragma
X-Powered-By
CF-RAY
ETag
Link
Expect-CT
Via
X-XSS-Protection
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Id
X-Served-By
Referrer-Policy
X-Varnish
X-Xss-Protection
X-Request-Id
X-Timer
CF-Cache-Status
X-AspNet-Version
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Runtime
X-Download-Options
Access-Control-Allow-Credentials
X-Drupal-Cache
X-Cacheable
Alt-Svc
X-Generator
X-Check
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Cache-Status
X-AspNetMvc-Version
Status
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-Template
X-Language
X-Permitted-Cross-Domain-Policies
X-FRAME-OPTIONS
X-Iinfo
Content-Encoding
X-Content-Security-Policy
X-CDN
X-Buckets
X-Turbo-Charged-By
X-Request-ID
X-Type
Upgrade
WPE-Backend
X-Pass-Why
Keep-Alive
X-Cache-Group
X-AH-Environment
Xkey
P3p
X-Backend
Access-Control-Max-Age
X-Age
Access-Control-Expose-Headers
X-Via
EagleId
X-Drupal-Dynamic-Cache
X-Nginx-Cache-Status
X-Pingback
X-Amz-Request-Id
X-Amz-Id-2
X-Server-Powered-By
X-Server
X-Swift-SaveTime
X-Swift-CacheTime
X-Hacker
X-UA-Device
Grace
Ali-Swift-Global-Savetime
X-Varnish-Cache
X-Robots-Tag
Cf-Railgun
X-Proxy-Cache
X-Envoy-Upstream-Service-Time
X-LiteSpeed-Cache
X-Page-Speed
X-Kinja-Server-Push
Request-Context
X-Device
X-Ac
Content-Location
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Cache-Lookup
X-Amz-Version-Id
X-Host
X-Response-Time
Surrogate-Control
X-Rq
X-OneAgent-JS-Injection
X-Cnection
X-Backend-Server
X-WebKit-CSP
X-Node
X-Server-Id
X-Readtime
Server-Timing
X-Rack-Cache
Report-To
EagleEye-TraceId
X-Application-Context
Request-Id
X-Cloud-Trace-Context
Feature-Policy
X-ORACLE-DMS-ECID
X-Instart-Request-ID
X-Ua-Compatible
X-Iejgwucgyu
X-CST
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Clacks-Overhead
Edge-Control
NEL
X-Country
Rating
Pinterest-Generated-By
X-Url
X-Server-Name
X-Px
X-Country-Code
X-DataDome
X-TTL
Allow
X-Varnish-TTL
X-MS-InvokeApp
X-Origin-Cache
X-DynaTrace
X-Vhost
X-TtlSet
X-Vname
X-PC
X-Cached
X-FTR-Request-ID
X-Ruxit-JS-Agent
RTSS
X-ESI
X-Goog-Hash
Charset
X-Powered-CMS
X-VARITI-CCR
X-Powered-By-Plesk
X-DynaTrace-JS-Agent
X-Server-ID
X-Trace
SPRequestGuid
Accept-CH
X-Oracle-Dms-Rid
X-Dispatcher
Public-Key-Pins
X-GitHub-Request-Id
X-D2id
X-Mod-Pagespeed
X-SharePointHealthScore
X-Mobile-Rewrite
PB-RID
Arc-Version
PB-PID
X-F-Cache
X-T
X-Cdn-Fetch
X-GoogleNews-Bot
X-Kinja
X-Exp-Id
X-Exp-Variant
X-Kinja-Build
X-Kinja-Revision
X-Kinja-Server
Content-MD5
Verso
MS-Author-Via
X-Version
X-Recruiting
SPIisLatency
X-Shield-Request-Id
SPRequestDuration
X-Dns-Prefetch-Control
X-B3-TraceId
X-Abt-Application-Version
Nginx-Cache
X-Client-IP
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Forwarded-Proto
X-HW
Accept-CH-Lifetime
X-N
X-Navigation-Version
X-DIS-Request-ID
Pinterest-Version
X-Pinterest-Rid
X-Upstream-Env
X-Amz-Rid
X-Dw-Request-Base-Id
AR-ATIME
AR-PoweredBy
AR-CACHE
X-B
X-Upstream
X-XRDS-Location
X-Origin-Upstream-Status
Fastly-Restarts
X-Fastly-Request-ID
X-SRCache-Store-Status
X-SRCache-Fetch-Status
Paypal-Debug-Id
X-ORACLE-DMS-RID
X-Amz-Meta-S3cmd-Attrs
DynaTrace
X-Hits
X-Wix-Server-Artifact-Id
X-Accel-Buffering
Realpath
X-Ser
TCN
Arr-Disable-Session-Affinity
X-Content-Options
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
Service-Worker-Allowed
X-Pad
X-NF-Request-ID
X-Acc-Meta-Resource-Type
X-Goog-Storage-Class
X-Content-Digest
Tracecode
Access-Control-Request-Method
X-Id
S
Front-End-Https
X-Varnish-Age
X-Amz-Cf-Pop
X-Debug
MRF-Tech
Mrf-Cache-Status
X-Mrf-Section-Lastmod
X-Mrf-Item-Lastmod
X-Oneagent-Js-Injection
X-Webkit-Csp
X-MSEdge-Ref
X-Vcap-Request-Id
X-Frontend
X-PressLabs-Stats
X-Country-Code-Real
X-FTR-Backend
X-FTR-DC
X-FTR-Backend-Server
X-FTR-Balancer
X-FTR-Cache-Status
X-FTR-Realm
X-FTR-Expires
Display
X-Sol
X-Middleton-Display
X-IPLB-Instance
X-Kinsta-Cache
X-ATG-Version
X-RateLimit-Remaining
X-FastCGI-Cache
X-Cache-Hit
X-HS-Content-Id
X-HS-Hub-Id
Surrogate-Key
X-Forwarded-For
X-Logged-In
Fastcgi-Cache
Powered-By-ChinaCache
Rt-Fastcgi-Cache
X-Zen-Fury
Edge-Cache-Tag
X-Grace
Server-Name
X-Edge-Location
X-Request-Processing-Time
X-Request-Received
X-Middleton-Response
Response
X-Analytics
MicrosoftSharePointTeamServices
Backend-Timing
X-Litespeed-Cache
X-Amzn-Trace-Id
X-Debug-Info
X-Rid
X-FTR-Cache-Host
Host
X-User-Agent
FilterID
X-Revision
X-Akam-SW-Version
TP-Cache
TP-L2-Cache
X-CF-Powered-By
X-Mobile
X-Cache-Key
AMP-Access-Control-Allow-Source-Origin
X-SS-Set-Cookie
X-Use-Magma
Ar-Sid
X-NewRelic-App-Data
X-TA-CDN-Provider
X-Drupal-Cache-Tags
Cache-Status
X-SERVER
X-Ttl
X-Cached-By
X-B3-TraceId-Primal
Refresh
X-Magnolia-Registration
X-Accel-Expires
X-Newrelic-App-Data
Host-Header
X-HS-Cache-Config
X-Geo-Segment
ServerID
X-Webkit-CSP
AR-Request-ID
X-Node-Name
X-B3-Sampled
X-Varnish-Backend
Liferay-Portal
X-Content-Security-Policy-Report-Only
X-FB-Debug
X-Tumblr-Pixel
X-AOL-HN
DC
Cache-Tag
X-Tumblr-Pixel-0
X-Cluster
X-GUploader-UploadID
X-Cache-Rule
X-Tumblr-User
X-Cache-2
X-Fastcgi-Cache
X-Platform-Server
X-Instance
X-B-Cache
X-Akamai-Edgescape
X-Signature
X-App-Environment
X-Framework
X-Page-Id
X-Varnish-Hostname
X-Device-Type
X-LB-Cache
X-Cache-Control
X-BCube-Filmed-By
Cleartype
X-Handled-By
X-Whom
X-Generated-By
X-Srv
X-Request-Guid
Eomportal-Instance
X-Az
X-Activity-Id
X-AppVersion
X-WPE-Loopback-Upstream-Addr
X-NWS-LOG-UUID
Public-Key-Pins-Report-Only
X-Drupal-Cache-Contexts
X-Cache-Action
X-App-Server
Accept-Charset
X-Cache-Server
X-App-Version
MS-CV
Source
X-Wix-Request-Id
X-Seen-By
X-TT
X-VCache
X-Via-JSL
X-Content-Powered-By
Retry-After
ViewerVersion
X-Amz-Replication-Status
X-Correlation-Id
X-Esi
X-Ruxit-Js-Agent
X-Hostname
X-HS-Combine-CSS
Alternate-Protocol
HostName
X-Varnish-Server
Upgrade-Insecure-Requests
X-Varnish-Grace
X-WA-Info
X-Geo-Country
Webserver
X-URL
Server-Node
X-Response-Served-From
X-Tumblr-Pixel-1
X-Tumblr-Pixel-2
X-Cache-NE
AsisCache
X-WebKit-CSP-Report-Only
Actual-Object-TTL
X-GeoIP
X-Amz-Apigw-Id
SRV
X-Locale
X-Amzn-RequestId
AR-SID
X-RequestSource
GEO-INFO
X-FW-Server
X-FW-Serve
X-Varnish-Hits
X-FW-Hash
ServedBy
X-FW-Static
X-FW-Type
X-Jobs
X-Edge-Cache-Key
X-Contextid
X-Servedby
X-Yottaa-Metrics
Viewport
X-Edge-Cache
X-S
X-Yottaa-Optimizations
Payment
X-UUID
X-Status
X-Cache-TTL-Remaining
X-Varnish-IP
X-TX-ID
X-Daa-Tunnel
X-Adobe-Loc
X-Adobe-Content
X-TT-TIMESTAMP
X-Origin-Server
Cache
Pagespeed
X-Cacheable-TTL
X-Correlation-ID
X-Cache-Operation
X-Vg-Webcache
X-Sucuri-ID
X-Hyper-Cache
Datacenter
X-Amz-Server-Side-Encryption
X-Forwarded-Host
Server-Info
Served-By
X-Cache-Age
Country
S-Cnection
X-RateLimit-Limit
CACHE
PageSpeed
X-Region
X-Mode
X-Akamai-Request-ID2
X-CLOUD-TRACE-CONTEXT
From-Origin
X-TIME
X-Ezoic-Cdn
X-DataStream-Cache-Status
X-Real-IP
Access-Control-Allow-Method
X-Cache-Config
X-Proxy
X-Proxied
X-Site-Version
Meta-Geo
X-Environment-Context
X-Zipkin-Id
Machine
X-Generated
X-RN-RSRV
X-Rule
X-Routing-Service
X-Upgrade-Enabled
X-Rendered-As
X-Ocache
Fastcgi-X-Cache-Version
X-Detected-As
X-Cache-Var
X-JoinUs
Fastcgi-X-Cache
X-Path-Route
X-Is-Bot
X-Cache-Var-Map
X-L-Path
DB-Nickname
Webcakes-App-Version
X-Akamai-Transformed
X-Format
Webcakes-Region
X-Agile
X-Agile-Age
Healthy
X-Access
Webcakes-App-Name
X-Microcachable
TWC-GeoIP-LatLong
Property-Id
LB
X-Agile-Id
Now
TWC-Connection-Speed
TWC-Device-Class
Fastcgi-Useragent
TWC-Locale-Group
TWC-GeoIP-Country
TWC-Privacy
X-Birta-Cache-Post
X-Birta-Served
X-Hosted-By
X-Viewer-Country
X-Request-Time
X-Cache-Category-Id
X-EIG-Tracking-Id
X-Grey
HitType
X-Origin-Hint
X-Section
Xserver
X-NGENIX-Cache
X-Amz-Meta-Surrogate-Control
X-CDN-Cache
HitInfo
X-Content-Type
X-CCM
Azure-SlotName
Azure-SiteName
Azure-RegionName
L5d-Success-Class
Azure-Version
X-Labrador-Cache-Channel
X-Loop
Azure-InstanceId
X-Hit
X-Via-Fastly
X-TNCMS
X-Tb
X-ServerID
X-Human
S-Rt
X-Pc-Hit
X-Pc-Key
OT-Force-Account-Verify
X-FC-Vary-Parameters
X-Pc-Appver
Cache-Name
X-XRDS-LOCATION
X-Origin
X-Original-Request
X-OVcl
X-OVcl-Cache
X-OCL
X-IP
Content-Style-Type
X-Cluster-Node
Content-Script-Type
X-PCL
X-BYPASS-REASON
X-ProcessESI
X-Upstream-CT
X-Upstream-HT
X-Xfnlog-Site
X-Cdn
X-Rocket-Nginx-Bypass
X-Pubstack
X-Guploader-Uploadid
X-ProxyCache-Key
X-ProxyCache-Status
X-Source
X-RemovedCookies
Mn-Server-Ip
X-Proxy-Build
X-Via-CDN
X-LJ-Flow-ID
X-Ms-Lease-Status
X-Alternate-Cache-Key
X-ShardId
X-Cache-Enabled
X-VG-TLSProxy
X-Ms-Request-Id
X-Web-Node
X-Ms-Version
X-Ms-Blob-Type
X-VWS-Id
X-Www-Served-By
X-ShopId
X-AWS-Id
X-Shopify-Stage
Cache-Hits
X-SplitTest
Accept-Language
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
Selected-FE
X-Timing-Wait
X-Transaction
X-Twitter-Response-Tags
X-RTag
IBM-Web2-Location
X-GRACE
Access-Control-Request-Headers
X-Connection-Hash
Origin-Edge-Control
Origin-Cache-Control
X-TWH-CORRELATION-ID
X-App-Name
X-Real-Ip
Ms-Operation-Id
X-NodeID
X-Distil-CS
Time
X-UA
X-Port
X-Cdn-Forward
NtCoent-Length
X-Cache-Remote
X-Unique-ID
X-Origin-CC
X-MP-GENERATED-AT
X-Edge-IP
X-Nginx-Cache
X-Geo
NGB
Backend
X-Varnish-Cacheable
X-NCache
X-Internal-Host
X-Pc-Date
X-Pc-Host
We-Hiring
Mail-Subject
X-Debug-Cache
X-Tumblr-Pixel-3
Filters
X-Cache-TTL
User-Agent
X-Proto
X-Sucuri-Cache
X-Storage
X-Ratelimit-Limit
X-APP-VERSION
X-Vgn-Hpd-Reason
X-Time-Microsecs
X-CACHE-GROUP
X-Varnish-Cache-Hits
X-Newrelic-Synthetics
X-Webstats-RespID
X-Csrf-Token
X-Ua
X-ApacheServer
X-Mrs-Cache
Locale
X-Mshield-Cache-Status
X-Urbn-Context-Path
X-Varnish-Beresp-Grace
X-Mrs-Cache-Hits
Cache-Tags
X-PERF
X-CACHE-KEY
X-Akamai-Request-ID
X-Mrs-Age
X-Backend-Name
X-Varnish-Beresp-Status
X-Urbn-Site-Id
Fastly-SSL
X-ElasticPress-Search
X-UA-Device-Type
X-C
X-PHP-Backend
X-Dc
Warning
X-Dynatrace-Js-Agent
X-CACHE-AGE
X-Nc
X-B3-Spanid
Cache-Key
X-EdgeConnect-Cache-Status
X-Aed
X-Application
X-Hash
X-Amz-Meta-Cache-Control
X-DPWN-IS-SECURE
FSS-Proxy
X-CF-Lambda-Version
X-CF-Lambda-Fn
Content-Disposition
X-Backend-Url
Cache-Prefix
X-Date
X-D
X-Cdn-Origin
FSS-Cache
Fastly-Soc-X-Request-Id
X-BBXSRF
Fly-Cache
X-Cache-Bucket
X-Cache-Host
Ec-Rule-Version
X-BB-ID
BehaviorPad-Version
X-Debug-Cookies
X-F5-Cache
X-External-Request-Id
X-Backend-Host
X-Fetched-On
X-B-Cookie
X-G
X-From
GMS-Ver
X-Endurance-Cache-Level
X-Destination
X-Debug-Log
Arc-Country
X-Developer
X-Developers
Ajk
X-Died
X-Generated-In
X-Org
Meta-Geo-Continent
TSSecure
X-Rewrite-Enabled
X-Rojux
X-S-Cookie
X-VG-WebServer
X-Via-Edge
X-Cache-Backend
X-Region-Sid
Resin-Trace
X-Via-SSL
MD5-Digest
X-ScT
X-Server-By
X-Store
X-SRCache-Key
Server-Host
X-Trv-Group
X-UE-Client-Country
X-Sn-Servicetimems
Mobile-Detection-Method
Rt-Proxy-Cache
X-Server-Time
Odigeo-Trace-Id
SN
UCS
X-Wikidot-Backend
X-Logtrace-Id
X-A-Dgt
X-A-Dcw
X-A-Dam
X-Wikidot-Static-Cache
Xc-Version
X-A-Wwc
X-IN-APIGATEWAY
X-Accel-Expires-Debug
X-IN-SSL-APIGATEWAY
X-IN-WAF
X-Irp-Debug
X-NX-Host
X-NU-AKA-ACS-Version
Rendered-Blocks
Fly-Request-Id
VivaBuild
X-A
X-Varnish-Beresp-Ttl
V-Age
X-A-Ccd
Viewtype
X-PAYTM-SRV-ID
Server-ID
X-Backend-TTL
Www
RNT-Machine
Thinkindot-CacheControl
RNT-Time
X-Auto-Login
Thinkindot-CacheControl-Type
X-ABtesting
X-No-Session
X-Request-URI
X-Response-By
X-S-Maxage
X-Server-IP
X-Request-Start
X-Release
X-Rebelmouse-Surrogate-Control
X-Reboot
X-Redis-Cache
X-ServiceProvider
X-SIPLIST1
X-Var-Ttl
X-We-Are-Hiring
X-Worker
X-V
X-User
X-Thinkindot-L3
X-Trace-Id
X-UnsetCookies
X-Rebelmouse-Cache-Control
X-Qloud-Router
X-Eu-Site
X-Flog
X-FW-Version
X-GeoIP-City
X-Epic-Correlation-Id
X-Dispatcher-Server
X-Cache-URL
X-CGP
X-Clientip
X-GeoIP-Country-Code
X-Hello
Release
X-Owner
X-Platform
X-Matched-Rule
X-Location
X-Hl-Ver
X-Key
X-Layer
X-Cache-Id
Thinkindot-Control
HA-Geocountry
HA-Geolat
HA-Geocity
HA-Cloudapp
GW-Server
HA-Geolon
HA-Georegion
HA-Servedtime
HA-Urlpath
HA-Ipaddr
HA-Host
Ha-Gx-Prefs
Frame-Options
Fastly-SWR
Apple-News-Services-Host
Apple-News-Services-Parsed-Url
Apple-News-Services-Handled
AKAMAI
X-Powered-By-ANYU
Apple-News-Services-Request-Url
Backend-Name
Decoy-Debug-TTL
Fastly-SIE
Decoy-Debug-Key
Countrycode
Country-Code
Heartbleed
Decoy-Debug-Status
Memcached
WZWS-RAY
Pramga
User-Cache-Control
Origin
IsBot
X-Datadome
X-NC
X-WebServer
X-Returned-From
Request-EU
X-RCS-CacheZone
X-Fastly-Cache
X-Gannett-Site-Version
X-Phone
X-Policy
X-VServer
X-Request-UUID
Web-Mar-Node
Pragrma
X-Device-Os
X-Gen-Mode
Adler-Geo
X-Thanos
X-Distributor
Request-Country
X-Passed-To-BeforeDispatch
X-MI-In-Market
X-Instance-Name
X-Info
X-MSEdge-Features
X-Core-Value
X-Li-Fabric
X-LI-UUID
X-LI-Proto
X-Li-Pop
X-MSEdge-Flight
X-Nginx-Cache-Key
X-Passed-To
X-CUA
X-Passed-To-DLL
X-Goog-Meta-Goog-Reserved-File-Mtime
X-P-T
X-Hnp-Log
X-Node-Id
Powered-By
X-Passed-To-PostProcessResponse
CDCHOST
X-Served-From
X-Varnish-Action
X-Backend-State
MI-Cache-Age
Server-Int
X-Swa-Ws
X-Block-Status
X-Bip
X-Sentry-ID
X-Variation
MI-Cache
X-Up
Kp-EeAlive
X-Sf
Is-Eu
Magicmarker
Uber-Trace-Id
X-Stale
X-Actual-URL
True-Client-Country-4JS
X-Returned-From-BeforeDispatch
X-Cache-Debug
Esi-Enabled
Fastly-Backend-Name
X-Secret
X-Cache-Srv
On-Server
Platform
X-VCT
X-Returned-From-PostProcessResponse
X-Croise-Owner
X-Crawler
X-Cache-Expires
X-Returned-From-DLL
X-Core-Mission
X-CDN-Forward
X-NODE
X-Ms-Lease-State
REQUESTUUID
X-Via-NSCOPI
NodeID
X-Cache-CFC
X-DC
X-Fstrz
Cache-Cookie-Set-Idcheck
Cache-Cookie-Set-From
X-TT-LOGID
Cache-Cookie-Set-Lfrom
Section-Io-Cache
Proxy-Connection
X-HOST
X-Origin-Response-Time
Pagetype
X-MServer
MI-API
X-SVT-ORM-VERSION
X-Page-Type
HTTPS
X-SVT-ORM-RULES
X-SN
X-Refresh
RequestId
Version
X-Be
X-Oss-Hash-Crc64ecma
X-Oss-Request-Id
X-Oss-Server-Time
X-Oss-Storage-Class
ProcessTime
X-Oss-Object-Type
X-Req
X-Pjax-Url
Cteonnt-Length
X-NWS-UUID-VERIFY
X-BB-IP
MIME-Version
X-Parent-Response-Time
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-Cache-FS-Status
X-Servername
X-Oracle-Dms-Ecid
X-GZip
V-Cache
Group
X-Unique-Id-Primal
X-Origin-TTL
Who
Memory
Amp-Access-Control-Allow-Source-Origin
Cdn
X-Ckpd-Fst-Backend
Fusion-Source
Mime-Version
Fusion-Content-Id
Fusion-Template-Id
Fusion-Component-Id
Fusion-Content-Source
X-Time
SS
CF-IPCountry
X-Aicache-OS
X-Servedbyhost
X-ND-Cache
X-Content-Age
X-COUNTRY
GeoIP-Country-Code
Cdn-Request-Time
X-Protected-By
Cdn-Host
X-Wa
X-Edge-Server
PageType
X-Varnish-Url
X-Server-Group
CDN
GeoIP-Latitude
X-SRV
X-Varnish-Beresp-TTL
X-Vcache
X-Ratelimit-Remaining
SD-X-WS
Get-Access-Time
X-APP
Is-Session-Tracking
X-RateLimit-Remaining-Second
X-Pf-Uncompressing
X-RateLimit-Limit-Second
X-Generation-Time
XServer
X-GEO
X-Unique-Id
X-B3-Traceid
X-Cache-Info
GeoIp-Country-Code
Geoip-Latitude
X-Fastly-Cache-Hits
X-FireWall-Port
A
Serverid
X-WA
X-Requestid
X-Origin-Date
X-EC-Security-Audit
X-CS
X-Origin-Expires
X-CSRF-Token
X-StackifyID
PICS-Label
Nel
Cf-Ipcountry
X-Server-W
T-Server
X-Gdpr
X-Surge-Debug
NGX
X-ID
X-M-Log
X-Fastly-Country-Code
X-M-Reqid
X-Qnm-Cache
X-Nananana
X-Origin-Host
X-Check-Cacheable
X-RequestId
X-Load-Cache
DataCenter
X-ServedByHost
X-HTML-Minification-Powered-By
X-SERVER-NAME
Load-Balancing
Processtime
VIX-Pulpo-Upstream-Status
X-PHP-Host
ServerName
URI
VIX-Pulpo-Node
Node
X-FORWARDED-FOR
Hostname
X-HS-Status
X-GZIP
X-Proxy-Cache-Status
X-NGINX-Cache
X-PF-Uncompressing
X-Feature
X-UPSTREAM-Address
X-Proxy-Upstream
WP-Super-Cache
X-ARC
X-Skip-Cache
X-VG-WebCache
X-DataStream-Origin-MEX-Latency
X-DataStream-MidMile-RTT
X-B3-SpanId
Cache-Provider
X-BE
X-Fe
X-Proxy-Server
X-Alicdn-Da-Ups-Status
X-ServerName
Vix-Hermes-Req-Id
X-Atg-Version
X-Akamai-SSL-Client-Sid
X-Fastly-Backend-Reqs
X-IPS-LoggedIn
X-Planisys-CDN-Rules
X-PJAX-URL
X-Planisys-CDN-TTL
X-Planisys-CDN-Cache
Requestid
RequestUuid
X-HTML-Edge-Cache
Https
X-VC
Cache-Tv-Group
X-PAGE-TYPE
N-Cache
X-From-Cache
Request-Time
X-WR-MODIFICATION
X-SB
X-Cache-Ttl
X-Distil-Cs
X-BACKEND-TTL
X-RAMCache
Cdn-Src-Port
Host-ID
PFcat
X-Micro-Cache
X-GDPR
X-Grace-Duration
Powered
Cneonction
X-CSRF-TOKEN
X-Gen-Id
X-Cdn-Srv
Build-Number
Lfy
X-Dw-Trace-Id