Threat Level: green Handler on Duty: Tom Webb

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
Last-Modified
X-Content-Type-Options
Accept-Ranges
Pragma
X-Powered-By
CF-RAY
ETag
Link
Expect-CT
Via
X-XSS-Protection
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Id
X-Served-By
Referrer-Policy
X-Xss-Protection
X-Varnish
X-Request-Id
X-Timer
CF-Cache-Status
X-AspNet-Version
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Runtime
X-Download-Options
Access-Control-Allow-Credentials
X-Drupal-Cache
X-Cacheable
Alt-Svc
X-Generator
X-Check
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Cache-Status
X-AspNetMvc-Version
Status
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-Template
X-Language
X-Permitted-Cross-Domain-Policies
X-FRAME-OPTIONS
X-Iinfo
Content-Encoding
X-Content-Security-Policy
X-CDN
X-Buckets
X-Turbo-Charged-By
X-Request-ID
X-Type
Upgrade
WPE-Backend
X-Pass-Why
Keep-Alive
X-Cache-Group
X-AH-Environment
Xkey
P3p
X-Backend
Access-Control-Max-Age
X-Age
Access-Control-Expose-Headers
X-Via
EagleId
X-Drupal-Dynamic-Cache
X-Nginx-Cache-Status
X-Pingback
X-Amz-Request-Id
X-Amz-Id-2
X-Server-Powered-By
X-Server
X-Swift-SaveTime
X-Swift-CacheTime
X-Hacker
X-UA-Device
Grace
Ali-Swift-Global-Savetime
X-Varnish-Cache
X-Robots-Tag
Cf-Railgun
X-Proxy-Cache
X-Envoy-Upstream-Service-Time
X-LiteSpeed-Cache
X-Page-Speed
X-Kinja-Server-Push
Request-Context
X-Device
X-Ac
Content-Location
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Cache-Lookup
X-Amz-Version-Id
X-Host
X-Response-Time
X-OneAgent-JS-Injection
Surrogate-Control
X-Rq
X-Cnection
X-Backend-Server
X-WebKit-CSP
X-Node
X-Server-Id
X-Readtime
Server-Timing
X-Rack-Cache
Report-To
EagleEye-TraceId
X-Application-Context
Request-Id
X-Cloud-Trace-Context
Feature-Policy
X-ORACLE-DMS-ECID
X-Ua-Compatible
X-Instart-Request-ID
X-Iejgwucgyu
X-CST
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Clacks-Overhead
Edge-Control
NEL
X-Country
Rating
Pinterest-Generated-By
X-Url
X-Server-Name
X-Px
X-Country-Code
X-DataDome
X-TTL
Allow
X-Varnish-TTL
X-MS-InvokeApp
X-Origin-Cache
X-DynaTrace
X-Vhost
X-TtlSet
X-Vname
X-PC
X-Cached
X-FTR-Request-ID
X-Ruxit-JS-Agent
RTSS
X-ESI
X-Goog-Hash
Charset
X-Powered-CMS
X-VARITI-CCR
X-Powered-By-Plesk
X-DynaTrace-JS-Agent
X-Server-ID
X-Trace
SPRequestGuid
Accept-CH
X-Oracle-Dms-Rid
X-Dispatcher
Public-Key-Pins
X-GitHub-Request-Id
X-D2id
X-Mod-Pagespeed
X-SharePointHealthScore
X-Mobile-Rewrite
PB-RID
Arc-Version
PB-PID
X-F-Cache
X-T
X-Cdn-Fetch
X-GoogleNews-Bot
X-Kinja
X-Exp-Id
X-Exp-Variant
X-Kinja-Build
X-Kinja-Revision
X-Kinja-Server
Content-MD5
Verso
MS-Author-Via
X-Version
X-Recruiting
SPIisLatency
SPRequestDuration
X-Dns-Prefetch-Control
X-Shield-Request-Id
X-B3-TraceId
X-Abt-Application-Version
Nginx-Cache
X-Client-IP
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Forwarded-Proto
X-HW
Accept-CH-Lifetime
X-N
X-Navigation-Version
X-DIS-Request-ID
Pinterest-Version
X-Pinterest-Rid
X-Upstream-Env
X-Amz-Rid
X-Dw-Request-Base-Id
AR-ATIME
AR-PoweredBy
AR-CACHE
X-B
X-Upstream
X-XRDS-Location
X-Origin-Upstream-Status
Fastly-Restarts
X-Fastly-Request-ID
X-SRCache-Store-Status
X-SRCache-Fetch-Status
Paypal-Debug-Id
X-ORACLE-DMS-RID
X-Amz-Meta-S3cmd-Attrs
DynaTrace
X-Hits
X-Wix-Server-Artifact-Id
X-Accel-Buffering
Realpath
X-Ser
TCN
Arr-Disable-Session-Affinity
X-Content-Options
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
Service-Worker-Allowed
X-Pad
X-NF-Request-ID
X-Acc-Meta-Resource-Type
X-Goog-Storage-Class
X-Content-Digest
Tracecode
Access-Control-Request-Method
X-Id
S
Front-End-Https
X-Varnish-Age
X-Amz-Cf-Pop
X-Debug
X-Mrf-Item-Lastmod
MRF-Tech
Mrf-Cache-Status
X-Mrf-Section-Lastmod
X-Webkit-Csp
X-MSEdge-Ref
X-Vcap-Request-Id
X-Frontend
X-PressLabs-Stats
X-FTR-DC
X-Country-Code-Real
X-FTR-Backend
X-FTR-Expires
X-FTR-Backend-Server
X-FTR-Balancer
X-FTR-Cache-Status
Display
X-Sol
X-Middleton-Display
X-FTR-Realm
X-IPLB-Instance
X-Kinsta-Cache
X-ATG-Version
X-RateLimit-Remaining
X-FastCGI-Cache
X-Cache-Hit
X-HS-Hub-Id
X-HS-Content-Id
Surrogate-Key
X-Forwarded-For
X-Logged-In
Fastcgi-Cache
Rt-Fastcgi-Cache
Powered-By-ChinaCache
X-Zen-Fury
Edge-Cache-Tag
X-Oneagent-Js-Injection
X-Edge-Location
X-Request-Processing-Time
X-Request-Received
X-Grace
Server-Name
X-Middleton-Response
Response
X-Litespeed-Cache
X-Analytics
MicrosoftSharePointTeamServices
Backend-Timing
X-Amzn-Trace-Id
X-Debug-Info
X-Rid
X-FTR-Cache-Host
X-User-Agent
X-Akam-SW-Version
FilterID
X-Revision
Host
X-CF-Powered-By
TP-L2-Cache
TP-Cache
X-Mobile
X-Cache-Key
AMP-Access-Control-Allow-Source-Origin
X-SS-Set-Cookie
X-Use-Magma
Ar-Sid
X-TA-CDN-Provider
X-NewRelic-App-Data
Cache-Status
X-Drupal-Cache-Tags
X-B3-TraceId-Primal
X-Ttl
X-SERVER
X-Cached-By
X-Newrelic-App-Data
Host-Header
X-Magnolia-Registration
Refresh
X-HS-Cache-Config
X-Accel-Expires
X-Geo-Segment
ServerID
X-Webkit-CSP
AR-Request-ID
X-Node-Name
X-B3-Sampled
X-Varnish-Backend
Liferay-Portal
X-FB-Debug
X-Content-Security-Policy-Report-Only
X-Tumblr-Pixel
X-Tumblr-Pixel-0
Cache-Tag
DC
X-Cache-Rule
X-GUploader-UploadID
X-Tumblr-User
X-AOL-HN
X-Cluster
X-Fastcgi-Cache
X-Cache-2
X-Signature
X-Instance
X-B-Cache
X-Platform-Server
X-Akamai-Edgescape
X-App-Environment
X-Framework
X-Page-Id
X-Varnish-Hostname
X-Device-Type
X-LB-Cache
X-Cache-Control
X-BCube-Filmed-By
Cleartype
X-Handled-By
X-Whom
X-Generated-By
X-Srv
X-Request-Guid
Eomportal-Instance
X-Az
X-Activity-Id
X-AppVersion
X-WPE-Loopback-Upstream-Addr
X-NWS-LOG-UUID
Public-Key-Pins-Report-Only
X-Cache-Action
X-Drupal-Cache-Contexts
X-App-Server
Accept-Charset
X-Cache-Server
X-App-Version
MS-CV
Source
X-Wix-Request-Id
X-Seen-By
X-TT
X-VCache
X-Via-JSL
X-Content-Powered-By
Retry-After
ViewerVersion
X-Amz-Replication-Status
X-Correlation-Id
X-Esi
X-Hostname
HostName
Alternate-Protocol
X-Ruxit-Js-Agent
X-HS-Combine-CSS
X-Varnish-Server
X-Varnish-Grace
Upgrade-Insecure-Requests
X-WA-Info
Webserver
X-Geo-Country
X-URL
Server-Node
X-Response-Served-From
X-Tumblr-Pixel-2
X-Tumblr-Pixel-1
X-Cache-NE
AsisCache
X-WebKit-CSP-Report-Only
Actual-Object-TTL
X-GeoIP
X-Amz-Apigw-Id
SRV
X-Locale
X-Amzn-RequestId
AR-SID
X-RequestSource
GEO-INFO
X-FW-Server
X-FW-Serve
X-Varnish-Hits
X-FW-Hash
ServedBy
X-FW-Static
X-FW-Type
X-Jobs
X-Edge-Cache-Key
X-Contextid
X-Servedby
X-Yottaa-Metrics
Viewport
X-Edge-Cache
X-S
X-Yottaa-Optimizations
Payment
X-UUID
X-Status
X-Cache-TTL-Remaining
X-Varnish-IP
X-TX-ID
X-Daa-Tunnel
X-Adobe-Loc
X-Adobe-Content
X-TT-TIMESTAMP
X-Origin-Server
Cache
Pagespeed
X-Cacheable-TTL
X-Correlation-ID
X-Cache-Operation
X-Vg-Webcache
X-Sucuri-ID
X-Hyper-Cache
Datacenter
X-Amz-Server-Side-Encryption
X-Forwarded-Host
Server-Info
Served-By
X-Cache-Age
Country
S-Cnection
X-RateLimit-Limit
CACHE
PageSpeed
X-Region
X-TIME
X-Mode
X-Akamai-Request-ID2
X-CLOUD-TRACE-CONTEXT
From-Origin
X-Ezoic-Cdn
X-DataStream-Cache-Status
X-Real-IP
Access-Control-Allow-Method
X-Generated
X-Cache-Config
X-Detected-As
X-Proxied
X-Zipkin-Id
X-Routing-Service
X-Upgrade-Enabled
X-RN-RSRV
X-Environment-Context
X-Rule
X-Rendered-As
X-Site-Version
X-Proxy
Fastcgi-X-Cache-Version
Machine
X-Is-Bot
X-Ocache
Fastcgi-X-Cache
X-L-Path
X-Path-Route
X-Cache-Var
X-JoinUs
X-Cache-Var-Map
Meta-Geo
Webcakes-App-Version
X-Format
Fastcgi-Useragent
X-Microcachable
Healthy
X-Agile
X-Access
Webcakes-Region
DB-Nickname
TWC-Privacy
TWC-Device-Class
TWC-Connection-Speed
X-Agile-Age
Property-Id
TWC-GeoIP-Country
LB
Webcakes-App-Name
Now
TWC-Locale-Group
TWC-GeoIP-LatLong
X-Akamai-Transformed
X-Birta-Cache-Post
X-EIG-Tracking-Id
X-Cache-Category-Id
X-Request-Time
X-Agile-Id
X-CDN-Cache
X-NGENIX-Cache
X-Origin-Hint
X-Viewer-Country
X-Hosted-By
X-Section
X-Amz-Meta-Surrogate-Control
HitInfo
Xserver
X-Grey
X-Birta-Served
HitType
X-Content-Type
X-CCM
X-Labrador-Cache-Channel
Azure-RegionName
X-Loop
Azure-SlotName
Azure-Version
Azure-SiteName
X-FC-Vary-Parameters
X-Pc-Hit
X-Via-Fastly
X-Hit
X-TNCMS
X-ServerID
Azure-InstanceId
S-Rt
X-Human
X-Pc-Appver
OT-Force-Account-Verify
X-Pc-Key
L5d-Success-Class
Cache-Name
X-XRDS-LOCATION
X-OCL
X-Origin
X-OVcl
X-OVcl-Cache
X-Original-Request
X-IP
X-BYPASS-REASON
Content-Style-Type
X-Cluster-Node
Content-Script-Type
X-PCL
X-Guploader-Uploadid
X-Upstream-CT
X-Upstream-HT
X-Xfnlog-Site
X-Cdn
X-Tb
X-Rocket-Nginx-Bypass
X-Source
X-ProxyCache-Key
X-ProxyCache-Status
X-Pubstack
X-ProcessESI
X-RemovedCookies
Mn-Server-Ip
X-Ms-Request-Id
X-Ms-Lease-Status
X-AWS-Id
X-Www-Served-By
X-VWS-Id
Accept-Language
X-Ms-Version
X-Via-CDN
X-LJ-Flow-ID
X-Web-Node
Cache-Hits
X-Cache-Enabled
X-Ms-Blob-Type
X-VG-TLSProxy
X-Alternate-Cache-Key
X-Proxy-Build
X-Shopify-Stage
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Timing-Wait
X-SplitTest
X-ShopId
Selected-FE
X-ShardId
Access-Control-Request-Headers
X-Transaction
X-GRACE
X-Connection-Hash
IBM-Web2-Location
X-Twitter-Response-Tags
X-RTag
X-App-Name
X-TWH-CORRELATION-ID
Origin-Edge-Control
Origin-Cache-Control
X-NodeID
X-Real-Ip
Ms-Operation-Id
X-Distil-CS
X-UA
X-Port
Time
X-Cdn-Forward
X-Cache-Remote
NtCoent-Length
X-MP-GENERATED-AT
X-Origin-CC
X-Unique-ID
X-Nginx-Cache
X-Geo
X-Edge-IP
Backend
NGB
Mail-Subject
We-Hiring
X-Internal-Host
X-NCache
X-Pc-Host
X-Pc-Date
X-Tumblr-Pixel-3
Filters
X-Debug-Cache
X-Varnish-Cacheable
X-Cache-TTL
X-Proto
User-Agent
X-Sucuri-Cache
X-APP-VERSION
X-Storage
X-Ratelimit-Limit
X-Vgn-Hpd-Reason
X-Time-Microsecs
X-CACHE-GROUP
X-Varnish-Cache-Hits
X-Newrelic-Synthetics
X-Webstats-RespID
X-Ua
X-Csrf-Token
X-Mshield-Cache-Status
X-Akamai-Request-ID
Locale
Cache-Tags
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Mrs-Cache
X-Urbn-Context-Path
X-ApacheServer
X-Urbn-Site-Id
X-Mrs-Cache-Hits
X-Mrs-Age
X-PERF
X-CACHE-KEY
X-Backend-Name
X-UA-Device-Type
X-ElasticPress-Search
Fastly-SSL
X-C
X-PHP-Backend
Warning
X-Dc
X-Dynatrace-Js-Agent
X-EdgeConnect-Cache-Status
Cache-Key
X-CACHE-AGE
X-B3-Spanid
X-Nc
X-Aed
X-Hash
X-Amz-Meta-Cache-Control
X-Application
X-DPWN-IS-SECURE
FSS-Proxy
X-CF-Lambda-Version
X-CF-Lambda-Fn
Content-Disposition
X-Backend-Url
Cache-Prefix
X-Date
X-D
X-Cdn-Origin
FSS-Cache
Fastly-Soc-X-Request-Id
X-BBXSRF
Fly-Cache
X-Cache-Bucket
X-Cache-Host
Ec-Rule-Version
X-BB-ID
BehaviorPad-Version
X-Debug-Cookies
X-F5-Cache
X-External-Request-Id
X-Backend-Host
X-Fetched-On
X-B-Cookie
X-G
X-From
GMS-Ver
X-Endurance-Cache-Level
X-Destination
X-Debug-Log
Arc-Country
X-Developer
X-Developers
Ajk
X-Died
X-Generated-In
X-NX-Host
Meta-Geo-Continent
TSSecure
X-Rewrite-Enabled
X-Rojux
X-S-Cookie
MD5-Digest
X-VG-WebServer
X-Cache-Backend
UCS
X-Via-SSL
X-Via-Edge
X-Region-Sid
X-ScT
X-Server-By
X-Store
X-SRCache-Key
Server-Host
X-Trv-Group
X-UE-Client-Country
X-Sn-Servicetimems
Mobile-Detection-Method
Rt-Proxy-Cache
Odigeo-Trace-Id
X-Server-Time
SN
V-Age
Resin-Trace
X-Logtrace-Id
X-A-Dgt
X-A-Dcw
X-A-Dam
X-Wikidot-Backend
X-NU-AKA-ACS-Version
Xc-Version
X-A-Wwc
X-IN-APIGATEWAY
X-Accel-Expires-Debug
X-IN-SSL-APIGATEWAY
X-IN-WAF
X-Irp-Debug
X-A-Ccd
X-Org
X-Varnish-Beresp-Ttl
X-PAYTM-SRV-ID
Rendered-Blocks
Fly-Request-Id
VivaBuild
X-A
Viewtype
X-Wikidot-Static-Cache
X-Backend-TTL
Server-ID
Www
RNT-Time
Thinkindot-Control
X-Auto-Login
Thinkindot-CacheControl
RNT-Machine
X-ABtesting
X-No-Session
X-Request-URI
X-Response-By
X-S-Maxage
X-Server-IP
X-Request-Start
X-Release
X-Rebelmouse-Surrogate-Control
X-Reboot
X-Redis-Cache
X-ServiceProvider
X-SIPLIST1
X-Var-Ttl
X-We-Are-Hiring
X-Worker
X-V
X-User
X-Thinkindot-L3
X-Trace-Id
X-UnsetCookies
X-Rebelmouse-Cache-Control
X-Qloud-Router
X-Eu-Site
X-Flog
X-FW-Version
X-GeoIP-City
X-Epic-Correlation-Id
X-Dispatcher-Server
X-Cache-URL
X-CGP
X-Clientip
X-GeoIP-Country-Code
X-Hello
Release
X-Owner
X-Platform
X-Matched-Rule
X-Location
X-Hl-Ver
X-Key
X-Layer
X-Cache-Id
Thinkindot-CacheControl-Type
HA-Geocountry
HA-Geolat
HA-Geocity
HA-Cloudapp
GW-Server
HA-Geolon
HA-Georegion
HA-Servedtime
HA-Urlpath
HA-Ipaddr
HA-Host
Ha-Gx-Prefs
Frame-Options
Fastly-SWR
Apple-News-Services-Host
Apple-News-Services-Parsed-Url
Apple-News-Services-Handled
AKAMAI
X-Powered-By-ANYU
Apple-News-Services-Request-Url
Backend-Name
Decoy-Debug-TTL
Fastly-SIE
Decoy-Debug-Key
Countrycode
Country-Code
Heartbleed
Decoy-Debug-Status
Pramga
Memcached
WZWS-RAY
Origin
User-Cache-Control
IsBot
X-NC
X-Datadome
X-VServer
X-Fastly-Cache
X-Phone
X-Gannett-Site-Version
X-Policy
X-RCS-CacheZone
X-Request-UUID
X-WebServer
X-Distributor
Request-EU
X-Thanos
Web-Mar-Node
Request-Country
X-Device-Os
X-Gen-Mode
Adler-Geo
Pragrma
X-Returned-From
X-Passed-To
X-MI-In-Market
X-Instance-Name
X-Info
X-MSEdge-Features
X-Core-Value
X-Li-Fabric
X-LI-UUID
X-LI-Proto
X-Li-Pop
X-MSEdge-Flight
X-Nginx-Cache-Key
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Passed-To-DLL
X-Goog-Meta-Goog-Reserved-File-Mtime
X-P-T
X-Hnp-Log
X-Node-Id
Powered-By
X-Passed-To-PostProcessResponse
CDCHOST
Server-Int
X-Varnish-Action
X-Variation
X-Backend-State
X-Swa-Ws
X-Served-From
X-CUA
X-Cache-Debug
X-Block-Status
X-Bip
MI-Cache-Age
X-Sf
Magicmarker
Kp-EeAlive
X-Up
Is-Eu
Uber-Trace-Id
True-Client-Country-4JS
MI-Cache
X-Stale
X-Actual-URL
Fastly-Backend-Name
X-Cache-Expires
X-VCT
Platform
On-Server
X-Returned-From-PostProcessResponse
X-Core-Mission
X-Returned-From-DLL
X-Croise-Owner
X-Crawler
X-Cache-Srv
X-Secret
Esi-Enabled
X-Sentry-ID
X-CDN-Forward
Cache-Cookie-Set-From
X-NODE
Cache-Cookie-Set-Lfrom
X-DC
REQUESTUUID
X-Cache-CFC
Cache-Cookie-Set-Idcheck
X-Ms-Lease-State
X-Via-NSCOPI
X-HOST
X-Fstrz
X-TT-LOGID
Section-Io-Cache
Proxy-Connection
NodeID
X-Origin-Response-Time
Pagetype
X-Refresh
X-MServer
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-Page-Type
X-SN
HTTPS
RequestId
MI-API
Version
X-Oss-Hash-Crc64ecma
X-Pjax-Url
ProcessTime
X-Oss-Object-Type
X-Req
X-Be
X-Oss-Request-Id
X-Oss-Storage-Class
X-Oss-Server-Time
Cteonnt-Length
X-NWS-UUID-VERIFY
X-BB-IP
MIME-Version
X-Cache-FS-Status
X-Kong-Upstream-Latency
X-Parent-Response-Time
X-Servername
X-Kong-Proxy-Latency
X-Oracle-Dms-Ecid
Memory
X-Unique-Id-Primal
Group
Who
X-Origin-TTL
X-GZip
V-Cache
Amp-Access-Control-Allow-Source-Origin
Cdn
X-Ckpd-Fst-Backend
Fusion-Source
Mime-Version
Fusion-Template-Id
Fusion-Content-Source
Fusion-Content-Id
Fusion-Component-Id
SS
X-Content-Age
X-Servedbyhost
CF-IPCountry
X-Aicache-OS
X-ND-Cache
X-COUNTRY
X-Protected-By
X-Wa
PageType
X-Edge-Server
X-Varnish-Url
Cdn-Request-Time
Cdn-Host
GeoIP-Country-Code
X-Time
CDN
GeoIP-Latitude
X-Server-Group
X-SRV
X-Varnish-Beresp-TTL
X-Ratelimit-Remaining
X-Vcache
Is-Session-Tracking
SD-X-WS
X-APP
Get-Access-Time
X-RateLimit-Remaining-Second
X-RateLimit-Limit-Second
X-Pf-Uncompressing
X-Generation-Time
X-GEO
XServer
X-Unique-Id
X-B3-Traceid
X-FireWall-Port
X-Cache-Info
Geoip-Latitude
X-Fastly-Cache-Hits
GeoIp-Country-Code
A
X-WA
Serverid
X-Requestid
X-Origin-Date
X-EC-Security-Audit
X-CS
X-Origin-Expires
X-CSRF-Token
X-StackifyID
PICS-Label
Nel
Cf-Ipcountry
X-Server-W
T-Server
X-Gdpr
X-Surge-Debug
NGX
X-Qnm-Cache
X-M-Log
X-Fastly-Country-Code
X-M-Reqid
X-ID
X-Nananana
X-Origin-Host
X-Check-Cacheable
X-RequestId
X-Load-Cache
DataCenter
X-ServedByHost
X-HTML-Minification-Powered-By
X-SERVER-NAME
Load-Balancing
Processtime
VIX-Pulpo-Upstream-Status
X-PHP-Host
URI
ServerName
VIX-Pulpo-Node
Node
X-FORWARDED-FOR
Hostname
X-HS-Status
X-PF-Uncompressing
X-NGINX-Cache
X-GZIP
X-Proxy-Cache-Status
X-Feature
X-UPSTREAM-Address
X-Proxy-Upstream
WP-Super-Cache
X-ARC
X-VG-WebCache
X-DataStream-Origin-MEX-Latency
X-Skip-Cache
X-DataStream-MidMile-RTT
X-B3-SpanId
X-Proxy-Server
X-Fe
X-BE
X-Alicdn-Da-Ups-Status
Cache-Provider
Vix-Hermes-Req-Id
X-ServerName
X-Akamai-SSL-Client-Sid
X-Atg-Version
X-Fastly-Backend-Reqs
X-IPS-LoggedIn
X-Planisys-CDN-Cache
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
X-PJAX-URL
Requestid
X-HTML-Edge-Cache
RequestUuid
Https
X-SB
X-VC
X-Distil-Cs
X-PAGE-TYPE
X-WR-MODIFICATION
Cache-Tv-Group
N-Cache
X-From-Cache
Request-Time
X-Cache-Ttl
X-BACKEND-TTL
X-Micro-Cache
Host-ID
X-Grace-Duration
PFcat
Cneonction
Powered
Cdn-Src-Port
X-RAMCache
Build-Number
Lfy
X-Dw-Trace-Id
X-Gen-Id
X-Cdn-Srv
X-CSRF-TOKEN