Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
Pragma
X-Powered-By
CF-RAY
ETag
Link
Expect-CT
X-XSS-Protection
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Xss-Protection
X-Varnish
X-Request-Id
CF-Cache-Status
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-AspNet-Version
X-Download-Options
X-Runtime
Access-Control-Allow-Credentials
X-Drupal-Cache
X-Adblock-Key
X-Check
Alt-Svc
X-Cacheable
X-Generator
Content-Security-Policy-Report-Only
X-DNS-Prefetch-Control
X-Cache-Status
X-AspNetMvc-Version
X-Permitted-Cross-Domain-Policies
X-Iinfo
X-Template
Status
X-Language
Timing-Allow-Origin
X-Buckets
X-Content-Security-Policy
Content-Encoding
X-CDN
X-Kinja-Server-Push
Xkey
X-Turbo-Charged-By
Upgrade
X-Type
Access-Control-Expose-Headers
Keep-Alive
WPE-Backend
X-Pass-Why
Access-Control-Max-Age
X-Backend
X-AH-Environment
CF-Ray
X-Cache-Group
X-Drupal-Dynamic-Cache
X-Age
X-Server
X-Ua-Compatible
X-Via
X-Request-ID
X-Proxy-Cache
Grace
X-Pingback
X-Nginx-Cache-Status
X-Amz-Request-Id
X-Amz-Id-2
X-Server-Powered-By
X-Robots-Tag
X-Hacker
X-UA-Device
X-Varnish-Cache
EagleId
X-Page-Speed
Request-Context
X-LiteSpeed-Cache
Cf-Railgun
X-Envoy-Upstream-Service-Time
X-Swift-SaveTime
X-Swift-CacheTime
X-CST
Ali-Swift-Global-Savetime
X-WebKit-CSP
X-Server-Id
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Device
X-Amz-Version-Id
X-Ac
X-OneAgent-JS-Injection
X-Node
Server-Timing
Feature-Policy
X-Cnection
X-Iejgwucgyu
X-Response-Time
X-Rq
Allow
X-Cache-Lookup
Content-Location
Report-To
X-Backend-Server
EagleEye-TraceId
X-Readtime
Surrogate-Control
X-Host
X-Application-Context
Request-Id
X-Url
X-ORACLE-DMS-ECID
X-Rack-Cache
P3p
X-Origin-Cache
X-Clacks-Overhead
X-Country
NEL
Rating
X-FTR-Request-ID
X-Cloud-Trace-Context
X-Country-Code
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-DataDome
X-Instart-Request-ID
X-Px
X-MS-InvokeApp
X-Vhost
Charset
X-Ruxit-JS-Agent
X-VARITI-CCR
X-Mod-Pagespeed
Edge-Control
Accept-CH
X-Varnish-TTL
X-Goog-Hash
X-GitHub-Request-Id
X-DynaTrace
Verso
X-ESI
Arc-Version
PB-PID
PB-RID
X-Mobile-Rewrite
X-Version
X-Server-Name
X-PC
X-Vname
X-TtlSet
Pinterest-Generated-By
X-Cdn
X-Powered-By-Plesk
X-D2id
X-GoogleNews-Bot
X-Kinja
X-Kinja-Build
X-Kinja-Revision
X-Exp-Variant
X-Cdn-Fetch
X-Kinja-Server
X-Use-Magma
X-Exp-Id
X-Cached
X-B3-TraceId
X-TTL
SPRequestGuid
X-Origin-Upstream-Status
X-Dispatcher
X-Upstream-Env
X-Powered-CMS
X-Abt-Application-Version
X-ORACLE-DMS-RID
X-SharePointHealthScore
X-T
RTSS
Accept-CH-Lifetime
MS-Author-Via
X-Recruiting
X-Trace
Public-Key-Pins
X-Navigation-Version
X-Shield-Request-Id
Content-MD5
X-SRCache-Store-Status
X-SRCache-Fetch-Status
AR-PoweredBy
X-Amz-Rid
AR-CACHE
SPIisLatency
X-DIS-Request-ID
SPRequestDuration
AR-ATIME
X-HW
X-Fastly-Request-ID
X-Client-IP
Realpath
Arr-Disable-Session-Affinity
X-Oracle-Dms-Rid
X-Accel-Buffering
X-Wix-Server-Artifact-Id
X-F-Cache
X-Forwarded-Proto
X-B
X-DynaTrace-JS-Agent
X-Upstream
X-Ser
X-Goog-Generation
X-Goog-Metageneration
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Amz-Meta-S3cmd-Attrs
X-Via-JSL
X-Pinterest-Rid
Service-Worker-Allowed
Pinterest-Version
X-Ttl
X-Dw-Request-Base-Id
X-Id
X-FTR-Realm
X-FTR-Backend-Server
X-FTR-Cache-Status
X-Country-Code-Real
X-FTR-Backend
X-FTR-Balancer
X-FTR-DC
X-Vcap-Request-Id
X-FTR-Expires
X-Varnish-Age
Front-End-Https
Paypal-Debug-Id
X-Dns-Prefetch-Control
AR-Request-ID
X-Server-ID
Nginx-Cache
X-Goog-Storage-Class
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Acc-Meta-Resource-Type
X-Debug
X-Aspnet-Version
X-MSEdge-Ref
X-Hits
X-Kinsta-Cache
X-XRDS-Location
Ar-Sid
X-NF-Request-ID
X-NewRelic-App-Data
X-N
X-Logged-In
X-FTR-Cache-Host
X-Mrf-Item-Lastmod
MRF-Tech
X-B3-TraceId-Primal
Mrf-Cache-Status
X-Mrf-Section-Lastmod
S
X-Frontend
X-Akam-SW-Version
X-Grace
X-HS-Content-Id
X-HS-Hub-Id
X-Forwarded-For
X-PressLabs-Stats
Alternate-Protocol
AMP-Access-Control-Allow-Source-Origin
X-User-Agent
X-Cache-Key
Tracecode
DynaTrace
X-DataStream-Cache-Status
X-Pad
X-TA-CDN-Provider
X-Amzn-Trace-Id
X-CACHE-GROUP
X-FastCGI-Cache
X-Content-Digest
Server-Name
Refresh
X-Analytics
Backend-Timing
X-Content-Options
MicrosoftSharePointTeamServices
Fastcgi-Cache
Accept-Charset
X-CF-Powered-By
X-Middleton-Display
X-Activity-Id
Access-Control-Request-Method
X-Sol
Display
X-Debug-Info
X-Az
X-AppVersion
FilterID
X-Rid
X-Page-Id
Powered-By-ChinaCache
Host
X-LB-Cache
MS-CV
X-IPLB-Instance
X-Zen-Fury
X-Content-Type
X-Magnolia-Registration
ServerID
TP-L2-Cache
TP-Cache
Response
X-Middleton-Response
TCN
X-ATG-Version
Cache-Status
X-Mobile
X-Cache-Hit
Surrogate-Key
X-Hostname
X-Content-Powered-By
X-Srv
X-VCache
X-Fastcgi-Cache
X-Ruxit-Js-Agent
Rt-Fastcgi-Cache
X-WA-Info
X-Seen-By
X-RateLimit-Remaining
X-B3-Sampled
X-XRDS-LOCATION
X-Cached-By
X-Request-Received
X-Request-Processing-Time
X-Revision
X-Varnish-Backend
X-GUploader-UploadID
X-Cache-Age
X-Cluster
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-Signature
X-B-Cache
X-SS-Set-Cookie
X-Edge-Location
X-Tumblr-Pixel
X-Content-Security-Policy-Report-Only
X-Cache-Action
X-Instance
X-Platform-Server
X-Tumblr-Pixel-0
X-Whom
X-Tumblr-User
Source
X-PHP-Backend
Cleartype
X-Akamai-Edgescape
X-TT
X-Request-Guid
X-Framework
X-Handled-By
X-Drupal-Cache-Tags
X-App-Environment
X-Origin-Server
X-Cache-Control
ViewerVersion
X-Wix-Request-Id
Server-Info
Host-Header
X-BCube-Filmed-By
X-NWS-LOG-UUID
X-Cache-Rule
X-AOL-HN
X-Cache-2
X-Generated-By
DC
X-Varnish-Hostname
Retry-After
X-App-Server
X-Amzn-RequestId
Eomportal-Instance
X-Geo-Country
X-Amz-Apigw-Id
X-Varnish-Server
X-FW-Static
X-FW-Hash
X-FW-Serve
X-FW-Type
X-FW-Server
Server-Node
X-Correlation-Id
Fusion-Content-Id
Fusion-Source
Fusion-Content-Source
Fusion-Template-Id
Fusion-Component-Id
X-FB-Debug
X-Device-Type
Webserver
X-Real-IP
Payment
X-Response-Served-From
Edge-Cache-Tag
Actual-Object-TTL
X-Amz-Server-Side-Encryption
X-TT-TIMESTAMP
X-Tumblr-Pixel-2
X-Tumblr-Pixel-1
ServedBy
AsisCache
X-Varnish-Hits
Access-Control-Allow-Method
Content-Script-Type
Ms-Operation-Id
X-Varnish-Grace
NGB
X-WebKit-CSP-Report-Only
Content-Style-Type
X-Cacheable-TTL
Filters
X-RTag
X-Region
X-UUID
X-Drupal-Cache-Contexts
X-Servedby
Healthy
GEO-INFO
X-Contextid
X-Amz-Replication-Status
X-TX-ID
Viewport
X-Varnish-IP
X-Adobe-Loc
X-Jobs
X-Adobe-Content
From-Origin
Country
Cache
X-Rendered-As
X-Locale
X-Accel-Expires
Upgrade-Insecure-Requests
Cache-Tv-Group
X-UA-Device-Type
X-Cache-Config
X-RequestSource
X-WPE-Loopback-Upstream-Addr
X-Cache-TTL-Remaining
X-Cache-Server
X-BACKEND-TTL
HitType
X-Cache-Operation
X-VG-WebCache
X-Ezoic-Cdn
X-Cache-Remote
X-APP-VERSION
Pagespeed
Fastly-Restarts
X-Cache-TTL
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-Storage
X-Oneagent-Js-Injection
X-Content-Age
Fastcgi-Useragent
X-Upgrade-Enabled
X-Hit
Cache-Tags
X-Daa-Tunnel
X-Redis-Cache
X-Esi
X-S
X-FW-Dynamic
Served-By
Cache-Tag
X-RateLimit-Limit
Datacenter
X-Cache-NE
X-Internal-Host
X-Generated
X-Is-Bot
X-Backend-Name
Origin-Cache-Control
Meta-Geo
Machine
Load-Balancing
Origin-Edge-Control
SRV
X-Detected-As
X-Cache-Var-Map
X-Cache-Var
X-Status
X-Hl-Ver
X-RN-RSRV
X-NGENIX-Cache
X-JoinUs
X-Mode
X-NCache
X-Path-Route
X-Rule
X-Birta-Served
X-Birta-Cache-Post
X-Tb
X-TNCMS
X-BYPASS-REASON
Now
X-Timing-Wait
X-L-Path
X-Akamai-Request-ID
Vix-Hermes-Req-Id
X-Proxy
X-Proxy-Build
X-Agile
X-Agile-Id
X-Agile-Age
X-ProxyCache-Key
X-Time-Microsecs
X-FC-Vary-Parameters
X-Environment-Context
X-Www-Served-By
X-Web-Node
X-Hosted-By
X-Source
X-Origin-Host
X-Origin-Response-Time
X-CDN-Cache
Cache-Key
X-Loop
Selected-FE
X-Edge-IP
X-ProxyCache-Status
X-Pubstack
X-RemovedCookies
X-ServerID
X-OCL
X-Original-Request
X-Pc-Hit
X-Grey
X-Human
X-IP
X-Labrador-Cache-Channel
X-Viewer-Country
X-Pc-Key
X-ApacheServer
X-PERF
X-Varnish-Cacheable
X-PCL
X-Cache-Category-Id
X-Via-Fastly
X-ProcessESI
X-Pc-Appver
X-Varnish-Cache-Hits
X-GeoIP
Cache-Name
X-Format
X-Debug-Cache
X-CCM
Public-Key-Pins-Report-Only
X-Site-Version
X-VG-TLSProxy
X-Guploader-Uploadid
X-Akamai-Transformed
DB-Nickname
X-Xfnlog-Site
X-App-Version
X-Origin
X-Access
X-MP-GENERATED-AT
Azure-InstanceId
S-Rt
Azure-RegionName
Azure-SiteName
Azure-Version
Azure-SlotName
X-Section
TWC-GeoIP-LatLong
TWC-Locale-Group
Xserver
TWC-GeoIP-Country
TWC-Device-Class
TWC-Connection-Speed
We-Hiring
Webcakes-App-Name
TWC-Privacy
Webcakes-App-Version
Webcakes-Region
Mail-Subject
X-Origin-Hint
NtCoent-Length
Property-Id
User-Cache-Control
X-UA
X-Ocache
Fastcgi-X-Cache-Version
X-Cache-Enabled
S-Cnection
Liferay-Portal
X-Routing-Service
X-Request-Time
X-Proxied
X-App-Name
X-Zipkin-Id
X-Sucuri-ID
X-Protected-By
X-Microcachable
Access-Control-Request-Headers
X-Nginx-Cache
X-Cdn-Forward
X-EdgeConnect-Cache-Status
X-CACHE-KEY
X-Tumblr-Pixel-3
X-Webstats-RespID
X-FW-Version
X-GEO
X-Origin-CC
X-FB-TRIP-ID
X-DataStream-MidMile-RTT
User-Agent
X-DataStream-Origin-MEX-Latency
X-GRACE
X-Upstream-CT
X-Upstream-HT
X-Upstream-Proxy
X-Proto
AR-SID
PageSpeed
X-Trace-Id
X-Yottaa-Metrics
X-Yottaa-Optimizations
LB
X-Node-Name
X-Correlation-ID
X-TIME
Ohc-File-Size
Powered
X-Forwarded-Host
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
Cache-Hits
X-Nc
X-Edge-Cache-Key
X-Edge-Cache
X-Pc-Host
X-Pc-Date
X-Endurance-Cache-Level
X-Cache-Backend
X-ES-SERVER
X-ElasticPress-Search
X-OVcl-Cache
Frame-Options
X-OVcl
X-Unique-ID
X-B3-Traceid
X-Origin-TTL
X-Server-Cache
Section-Io-Cache
X-Vgn-Hpd-Reason
L5d-Success-Class
X-Ua
X-Dynatrace-Js-Agent
X-Varnish-Beresp-Ttl
IBM-Web2-Location
Fastcgi-X-Cache
Nel
X-Rocket-Nginx-Bypass
OT-Force-Account-Verify
X-Parent-Response-Time
HostName
X-V
Ec-Rule-Version
Decoy-Debug-TTL
Decoy-Debug-Key
Decoy-Debug-Status
Fastly-SIE
Fastly-SWR
X-DPWN-IS-SECURE
X-Distil-CS
GMS-Ver
Fly-Request-Id
CACHE
Fly-Cache
X-External-Request-Id
BehaviorPad-Version
X-LI-UUID
X-TT-LOGID
X-Li-Pop
X-Li-Fabric
X-Twitter-Response-Tags
X-Gen-Mode
X-S-Cookie
X-Trv-Group
Cache-Prefix
X-S-Maxage
X-Transaction
Arc-Country
X-From
X-Fetched-On
Country-Code
X-Developer
Www
X-ServiceProvider
X-Accel-Expires-Debug
VivaBuild
Viewtype
X-Cache-Info
X-Cache-Host
X-Cache-FS-Status
X-Aed
X-Amz-Meta-Cache-Control
X-B-Cookie
X-BB-ID
X-Block-Status
X-Auto-Login
X-ARC
X-Cache-Bucket
X-Application
X-Cache-URL
Resin-Trace
Meta-Geo-Continent
Mobile-Detection-Method
Node
X-Date
Memcached
X-UE-Client-Country
X-Destination
MD5-Digest
X-Connection-Hash
X-Server-By
Rendered-Blocks
X-CF-Lambda-Fn
X-Cdn-Srv
X-CF-Lambda-Version
X-SRCache-Key
X-Server-Group
Powered-By
X-Died
X-ScT
X-Rebelmouse-Surrogate-Control
X-Origin-Expires
X-Region-Sid
X-IN-WAF
X-Request-UUID
X-Reboot
X-Hnp-Log
X-Rojux
X-IN-APIGATEWAY
X-LI-Proto
X-Irp-Debug
X-Origin-Date
Xc-Version
X-Goog-Meta-Goog-Reserved-File-Mtime
X-NU-AKA-ACS-Version
X-IN-SSL-APIGATEWAY
X-Rebelmouse-Cache-Control
X-PAYTM-SRV-ID
X-Generated-In
X-VG-WebServer
X-User
X-We-Are-Hiring
X-Pc-Subdomain
X-Rewrite-Enabled
X-Micro-Cache
X-Info
X-Via-CDN
X-Dc
Mn-Server-Ip
X-Sorting-Hat-ShopId
Request-Time
X-Sorting-Hat-PodId
Proxy-Connection
X-Passed-To-BeforeDispatch
On-Server
X-Passed-To
X-Crawler
X-Passed-To-DLL
X-Stale
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-Proxy-Cache-Status
X-Croise-Owner
Server-Host
X-Cache-Expires
X-Returned-From-PostProcessResponse
Web-Mar-Node
X-Cache-Debug
X-Server-Time
X-A
X-A-Ccd
X-A-Wwc
X-Proxy-Upstream
X-A-Dgt
X-A-Dcw
X-A-Dam
X-Sf
X-ShardId
X-Alternate-Cache-Key
X-Cache-Id
SD-X-WS
X-Shopify-Stage
X-Server-IP
X-ShopId
X-Cache-Grace
True-Client-Country-4JS
Thinkindot-Control
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
X-Passed-To-PostProcessResponse
X-Svr
Backend
X-Hash
X-FireWall-Port
X-Var-Ttl
X-Returned-From-DLL
X-Varnish-Action
X-Secret
X-Backend-Url
X-Via-NSCOPI
Content-Disposition
X-Bip
X-G
X-Platform
X-Location
X-Generated-On
X-Level-Front-Cache
X-Matched-Rule
X-LAGOON
Ajk
X-Gannett-Site-Version
Warning
X-GeoIP-Country-Code
Fastly-Backend-Name
X-Fastly-Cache
X-Actual-URL
X-PHP-Host
X-Debug-Cookies
X-Debug-Log
X-Policy
Lfy
Magicmarker
X-Logtrace-Id
X-D
X-Response-By
X-Returned-From
X-Node-Id
X-Backend-Host
X-Returned-From-BeforeDispatch
X-Swa-Ws
X-Thanos
X-Thinkindot-L3
X-Epic-Correlation-Id
X-Distributor
X-NX-Host
X-Time
X-HS-Cache-Config
X-Sucuri-Cache
X-R9-Blue-Green-Version
X-Cache-ASPX
X-C
X-Request-URI
X-CUA
X-Eu-Site
X-Dispatcher-Server
X-Device-Os
X-No-Session
X-Key
X-Generation-Time
X-Fstrz
X-Debug-Cache-Store
X-Debug-Cache-Fetch
X-RateLimit-Limit-Second
X-Instart-Isnd
X-RateLimit-Remaining-Second
X-CGP
X-Debug-Cache-Expiry
X-Clientip
X-Qloud-Router
X-Varnish-Authentication
Countrycode
CDCHOST
AKAMAI
Adler-Geo
Fastly-Soc-X-Request-Id
GW-Server
Is-Eu
Heartbleed
HA-Ipaddr
Ha-Gx-Prefs
X-UnsetCookies
X-Up
Origin
X-SIPLIST1
X-Core-Mission
X-Nginx-Cache-Key
IsBot
X-SERVER
X-VWS-Id
X-Backend-State
X-AWS-Id
X-Variation
Kp-EeAlive
X-LJ-Flow-ID
RNT-Machine
RNT-Time
Who
Pagetype
Release
Platform
Pramga
Version
Server-Cache-Control
X-Amz-Meta-Surrogate-Control
SS
Server-Surrogate-Control
Cache-Cookie-Set-From
Apple-News-Services-Handled
X-MSEdge-Features
REQUESTUUID
Apple-News-Services-Host
Fastly-SSL
Cache-Cookie-Set-Lfrom
Server-Int
Cache-Cookie-Set-Idcheck
Apple-News-Services-Parsed-Url
PFcat
X-Developers
X-Servername
X-F5-Cache
Apple-News-Services-Request-Url
X-MSEdge-Flight
X-Core-Value
X-Cluster-Node
NGX
X-Pjax-Url
Server-ID
X-Varnish-Url
X-Page-Type
X-Ratelimit-Remaining
X-Be
Esi-Enabled
X-Refresh
RequestId
X-Store
X-Sedo-Request-Id
X-TrackingId
X-Cache-Miss-From
X-CDN-Forward
Time
X-Cache-CFC
X-EIG-Tracking-Id
X-Newrelic-App-Data
MI-API
X-RCS-CacheZone
MI-Cache-Age
X-MI-In-Market
X-Layer
MI-Cache
MIME-Version
X-NC
X-Real-Ip
X-B3-SpanId
X-URL
HA-Geolat
HA-Georegion
HA-Geolon
X-IPS-LoggedIn
HA-Servedtime
HA-Geocountry
HA-Urlpath
HA-Host
HA-Geocity
X-SN
HA-Cloudapp
X-Mshield-Cache-Status
X-Unique-Id-Primal
X-Mrs-Cache-Hits
X-Mrs-Age
X-Mrs-Cache
SID
X-Oss-Object-Type
X-Oss-Hash-Crc64ecma
X-From-Cache
Cteonnt-Length
X-Owner
X-Geo
X-Ratelimit-Limit
X-Oss-Storage-Class
PICS-Label
X-Oss-Request-Id
X-Oss-Server-Time
X-Hyper-Cache
X-Servedbyhost
Odigeo-Trace-Id
X-RequestId
Mime-Version
Cdn
Backend-Name
X-CMS-Context
X-Litespeed-Cache
FastCGI-Cache
Memory
X-FPC
CF-IPCountry
X-Req
X-Webkit-Csp
X-Webkit-CSP
X-WebServer
X-Instart-Info
HTTPS
Processtime
X-B3-Spanid
X-CLOUD-TRACE-CONTEXT
CDN
X-CSRF-TOKEN
X-Edge-Server
X-Request-Start
Cdn-Host
Cdn-Request-Time
X-Phone
Hostname
X-Pf-Uncompressing
X-Release
X-Wa
Cf-Ipcountry
X-Aicache-OS
Ohc-Response-Time
XServer
X-WR-MODIFICATION
X-DC
GeoIP-Country-Code
X-Newrelic-Synthetics
X-Varnish-Beresp-TTL
X-Load-Cache
X-Amzn-Remapped-Connection
X-HS-Combine-CSS
GeoIP-Latitude
X-Mobile-URL
X-Amzn-Remapped-Date
ProcessTime
X-ND-Cache
X-Server-W
Cross-Origin-Window-Policy
X-Served-From
X-WA
URI
X-NodeID
X-Fastly-Country-Code
Rt-Proxy-Cache
X-GZip
X-Atg-Version
X-VServer
X-Varnish-Ttl
X-HTML-Minification-Powered-By
X-Lb-Id
X-Unique-Id
Accept-Ch-Lifetime
X-FORWARDED-FOR
X-Skip-Cache
X-PF-Uncompressing
X-GoCache-CacheStatus
X-Nananana
T-Server
X-CSRF-Token
X-Sn-Servicetimems
X-Cdn-Origin
X-Oracle-Dms-Ecid
V-Age
X-Tb-Optimization-Total-Bytes-Saved
Proxy-Firewall
X-SVT-ORM-RULES
X-COUNTRY
X-VC-Cache
X-LB-ID
X-MServer
X-SVT-ORM-VERSION
X-ServedByHost
Ohc-Cache-HIT
X-P-T
Pics-Label
X-Datadome
X-APP
X-Cms-Context
X-UPSTREAM-Address
X-SRV
X-Worker
Get-Access-Time
Is-Session-Tracking
X-Fastly-Cache-Hits
X-Gateway-Cache-Key
X-UCC
X-Gateway-Cache-Status
X-LiteSpeed-Cache-Control
X-Gateway-Skip-Cache
A
ServerName
Uber-Trace-Id
X-HS-Status
N-Cache
X-Check-Cacheable
Amp-Access-Control-Allow-Source-Origin
X-SERVER-NAME
X-CACHE-AGE
DataCenter
X-Requestid
X-RCS-Backend
X-Processor
Geoip-Latitude
X-GZIP
X-NGINX-Cache
X-BBXSRF
X-Varnish-URL
X-Hp-Webp
Dnion-Transfer-Encoding
X-Optimization
X-BE
X-Cache-HT
X-ID
X-Org
WZWS-RAY
X-StackifyID
GeoIp-Country-Code
X-Backend-TTL
X-Vg-Webcache
X-Port
X-Fe
X-GDPR
X-Via-Edge
WP-Super-Cache
X-Csrf-Token
X-PJAX-URL
X-Via-SSL
Server-Id
Cneonction
X-PAGE-TYPE
Cache-Provider
Requestid
Serverid
X-NWS-UUID-VERIFY
X-Planisys-CDN-Cache
Pragrma
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
X-Git-Hash
X-HostName
X-LiteSpeed-Tag
X-ServerName
RequestUuid
X-Gdpr
X-Dw-Trace-Id
X-Instance-Name
X-Front
Xxline
X-PARISIEN-Cache-Rendered
219prxHost
189phosttRef
225prxHost
286prxHost
X-VCT
409pxxline
X-RAMCache
352pxline
188prxHost
X-Akamai-Request-ID2
355prline
X-VarnPar1
Accept-Language
X-CS
Correlation-Id
X-Request-Url
178proxuri
Request-EU
Request-Country
DSUID
X-VarnCache