Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
Last-Modified
X-Content-Type-Options
Accept-Ranges
Pragma
X-Powered-By
CF-RAY
Link
ETag
X-XSS-Protection
Expect-CT
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Id
X-Served-By
Referrer-Policy
X-Varnish
X-Request-Id
X-Timer
CF-Cache-Status
X-AspNet-Version
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Xss-Protection
X-Runtime
X-Download-Options
Access-Control-Allow-Credentials
X-Drupal-Cache
X-Cacheable
Alt-Svc
X-Check
X-Generator
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Cache-Status
X-AspNetMvc-Version
Status
X-DNS-Prefetch-Control
X-Template
X-Language
Timing-Allow-Origin
X-Permitted-Cross-Domain-Policies
Content-Encoding
X-Iinfo
X-FRAME-OPTIONS
X-Content-Security-Policy
X-CDN
X-Buckets
X-Turbo-Charged-By
X-Request-ID
Upgrade
X-Type
WPE-Backend
Keep-Alive
X-Pass-Why
X-Cache-Group
X-AH-Environment
Xkey
CF-Ray
X-Backend
Access-Control-Max-Age
P3p
X-Age
Access-Control-Expose-Headers
X-Via
X-Drupal-Dynamic-Cache
EagleId
X-Pingback
X-Nginx-Cache-Status
X-Amz-Request-Id
X-Amz-Id-2
X-Server-Powered-By
X-Kinja-Server-Push
X-Server
X-Hacker
Grace
X-UA-Device
X-Swift-CacheTime
X-Swift-SaveTime
X-Varnish-Cache
Ali-Swift-Global-Savetime
X-Robots-Tag
Cf-Railgun
X-Proxy-Cache
X-Envoy-Upstream-Service-Time
X-LiteSpeed-Cache
X-Page-Speed
X-Ua-Compatible
Request-Context
X-Device
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Ac
Content-Location
X-Cache-Lookup
X-Amz-Version-Id
X-Host
X-Response-Time
Surrogate-Control
X-OneAgent-JS-Injection
X-WebKit-CSP
X-Rq
X-Cnection
X-Node
X-Server-Id
X-Backend-Server
Server-Timing
X-Readtime
Report-To
X-Rack-Cache
Request-Id
EagleEye-TraceId
X-Application-Context
X-Cloud-Trace-Context
Feature-Policy
X-ORACLE-DMS-ECID
X-Instart-Request-ID
X-Iejgwucgyu
X-CST
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Clacks-Overhead
Edge-Control
NEL
X-Country
X-Server-Name
Rating
X-DynaTrace
X-Varnish-TTL
X-Url
X-MS-InvokeApp
X-TTL
X-DataDome
Allow
X-Px
X-Country-Code
X-Origin-Cache
Pinterest-Generated-By
X-Vhost
X-Vname
X-TtlSet
X-PC
X-Cached
X-FTR-Request-ID
X-Ruxit-JS-Agent
X-ESI
RTSS
X-Trace
SPRequestGuid
X-Goog-Hash
X-VARITI-CCR
Charset
X-Powered-By-Plesk
X-SharePointHealthScore
X-GitHub-Request-Id
X-DynaTrace-JS-Agent
Accept-CH
X-T
X-Dispatcher
X-Powered-CMS
Public-Key-Pins
X-D2id
X-B3-TraceId
X-Mod-Pagespeed
X-Server-ID
PB-PID
PB-RID
X-Mobile-Rewrite
Arc-Version
X-F-Cache
Verso
X-GoogleNews-Bot
X-Exp-Id
X-Exp-Variant
X-Kinja
X-Kinja-Server
X-Kinja-Revision
X-Cdn-Fetch
X-Kinja-Build
Content-MD5
X-Oracle-Dms-Rid
X-Version
SPIisLatency
SPRequestDuration
MS-Author-Via
X-Shield-Request-Id
X-Recruiting
X-Abt-Application-Version
X-Dns-Prefetch-Control
X-TEC-API-VERSION
X-TEC-API-ROOT
Nginx-Cache
X-TEC-API-ORIGIN
X-Forwarded-Proto
X-Client-IP
Accept-CH-Lifetime
X-HW
X-N
X-ORACLE-DMS-RID
X-DIS-Request-ID
X-Navigation-Version
X-Upstream-Env
Pinterest-Version
X-Pinterest-Rid
AR-CACHE
AR-PoweredBy
X-B
AR-ATIME
X-Amz-Rid
X-Fastly-Request-ID
DynaTrace
X-Origin-Upstream-Status
X-Upstream
X-Ser
X-Dw-Request-Base-Id
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Amz-Meta-S3cmd-Attrs
X-Hits
TCN
Realpath
Fastly-Restarts
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Metageneration
X-Wix-Server-Artifact-Id
X-Accel-Buffering
Paypal-Debug-Id
X-Content-Options
Arr-Disable-Session-Affinity
X-XRDS-Location
Service-Worker-Allowed
X-NF-Request-ID
X-Pad
X-Acc-Meta-Resource-Type
X-Goog-Storage-Class
Tracecode
S
Access-Control-Request-Method
X-Id
X-Content-Digest
X-Use-Magma
X-Debug
X-Varnish-Age
X-Vcap-Request-Id
Edge-Cache-Tag
MRF-Tech
Mrf-Cache-Status
X-Mrf-Section-Lastmod
Front-End-Https
X-Mrf-Item-Lastmod
X-Webkit-Csp
X-MSEdge-Ref
X-Oneagent-Js-Injection
X-ATG-Version
X-Frontend
X-IPLB-Instance
X-FTR-Backend
X-RateLimit-Remaining
X-Country-Code-Real
X-PressLabs-Stats
X-FTR-Realm
X-FTR-Cache-Status
X-FTR-Balancer
X-FTR-DC
X-FTR-Backend-Server
X-FTR-Expires
X-Kinsta-Cache
X-Logged-In
MicrosoftSharePointTeamServices
X-HS-Hub-Id
X-HS-Content-Id
Surrogate-Key
X-B3-TraceId-Primal
X-Forwarded-For
Rt-Fastcgi-Cache
X-Amz-Cf-Pop
X-Request-Processing-Time
X-Cache-Hit
X-Request-Received
Fastcgi-Cache
X-Middleton-Display
X-Sol
Display
X-Edge-Location
X-Zen-Fury
X-Analytics
Backend-Timing
X-Amzn-Trace-Id
X-Debug-Info
Server-Name
Powered-By-ChinaCache
X-Fastcgi-Cache
X-Revision
Host
X-Rid
X-User-Agent
TP-L2-Cache
TP-Cache
X-HS-Cache-Config
X-FTR-Cache-Host
FilterID
X-Litespeed-Cache
X-Akam-SW-Version
X-FastCGI-Cache
X-CF-Powered-By
Response
X-Middleton-Response
X-Grace
AMP-Access-Control-Allow-Source-Origin
X-SS-Set-Cookie
AR-Request-ID
X-Drupal-Cache-Tags
X-NewRelic-App-Data
Ar-Sid
X-Mobile
X-Magnolia-Registration
X-TA-CDN-Provider
Refresh
X-Cache-Key
Cache-Status
X-Cached-By
X-Accel-Expires
X-Newrelic-App-Data
X-B3-Sampled
X-SERVER
Host-Header
X-Ttl
ServerID
X-NWS-LOG-UUID
X-AOL-HN
X-Varnish-Backend
X-Node-Name
X-VCache
X-Content-Security-Policy-Report-Only
Eomportal-Instance
X-Whom
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Via-JSL
X-Cluster
X-Tumblr-User
X-FB-Debug
X-Instance
X-Cache-Control
X-Platform-Server
X-Cache-2
X-B-Cache
X-Akamai-Edgescape
X-Webkit-CSP
X-Signature
X-Page-Id
X-Generated-By
X-Framework
X-LB-Cache
X-Varnish-Hostname
X-BCube-Filmed-By
X-Device-Type
X-Srv
X-App-Environment
X-Drupal-Cache-Contexts
X-Handled-By
Cleartype
X-Request-Guid
X-GUploader-UploadID
X-Cache-Rule
X-Cache-Action
X-Az
X-Activity-Id
X-AppVersion
X-Ruxit-Js-Agent
Cache-Tag
X-App-Server
X-URL
Alternate-Protocol
DC
Liferay-Portal
Source
X-Cache-Server
X-Content-Powered-By
Retry-After
X-Hostname
X-App-Version
X-HS-Combine-CSS
X-Correlation-Id
X-WPE-Loopback-Upstream-Addr
MS-CV
X-Varnish-Grace
X-WA-Info
HostName
X-Varnish-Server
X-Daa-Tunnel
X-Geo-Country
Pagespeed
X-Amz-Replication-Status
Public-Key-Pins-Report-Only
AR-SID
X-TT
X-Wix-Request-Id
X-Seen-By
Server-Node
ViewerVersion
X-Esi
Accept-Charset
X-XRDS-LOCATION
Upgrade-Insecure-Requests
X-Cache-NE
X-Tumblr-Pixel-1
AsisCache
X-WebKit-CSP-Report-Only
X-Tumblr-Pixel-2
X-Response-Served-From
X-Amz-Apigw-Id
Webserver
Actual-Object-TTL
SRV
X-GeoIP
X-Amzn-RequestId
GEO-INFO
X-RequestSource
X-Locale
ServedBy
X-Varnish-Hits
X-Jobs
X-FW-Hash
X-FW-Serve
X-FW-Server
X-Edge-Cache-Key
X-Contextid
Payment
Viewport
X-FW-Static
X-Edge-Cache
X-FW-Type
X-Servedby
X-S
X-UUID
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Status
X-Varnish-IP
X-TX-ID
X-Adobe-Content
X-Adobe-Loc
X-TT-TIMESTAMP
X-Cacheable-TTL
X-Origin-Server
Cache
S-Cnection
X-Cache-TTL-Remaining
X-Vg-Webcache
X-Hyper-Cache
X-Cache-Age
X-Cache-Operation
X-Geo-Segment
X-Correlation-ID
X-RateLimit-Limit
Server-Info
X-Forwarded-Host
X-Amz-Server-Side-Encryption
Datacenter
X-Region
Served-By
X-Akamai-Request-ID2
Access-Control-Allow-Method
X-Mode
X-DataStream-Cache-Status
Healthy
X-Real-IP
X-Content-Type
X-Sucuri-ID
X-Akamai-Transformed
X-CLOUD-TRACE-CONTEXT
X-Guploader-Uploadid
X-Proxied
X-Cache-Var
X-Zipkin-Id
Fastcgi-X-Cache-Version
X-Is-Bot
X-JoinUs
X-Ezoic-Cdn
X-Cache-Config
Fastcgi-X-Cache
X-Cache-Var-Map
X-Environment-Context
X-Generated
Machine
Fastcgi-Useragent
X-L-Path
X-Detected-As
X-Upgrade-Enabled
Meta-Geo
X-Proxy
X-RN-RSRV
From-Origin
X-Rendered-As
X-Site-Version
X-Ocache
X-Routing-Service
Country
X-Rule
X-Path-Route
X-Section
X-Format
DB-Nickname
X-GRACE
X-Birta-Served
L5d-Success-Class
X-Birta-Cache-Post
X-Agile-Age
X-Agile
X-Agile-Id
X-Hosted-By
X-Amz-Meta-Surrogate-Control
Now
X-Access
X-CDN-Cache
X-Human
Xserver
CACHE
X-Request-Time
X-Viewer-Country
X-NGENIX-Cache
TWC-GeoIP-LatLong
TWC-Locale-Group
X-Origin-Hint
X-Labrador-Cache-Channel
Property-Id
Webcakes-Region
TWC-Device-Class
TWC-Connection-Speed
X-Tb
TWC-GeoIP-Country
OT-Force-Account-Verify
X-CCM
X-ServerID
X-TNCMS
TWC-Privacy
X-Hit
X-PCL
X-Pc-Appver
X-FC-Vary-Parameters
X-Pc-Key
X-Pc-Hit
X-Via-Fastly
Cache-Name
X-OCL
Webcakes-App-Name
X-Loop
Webcakes-App-Version
X-Pubstack
Origin-Cache-Control
HitType
Origin-Edge-Control
S-Rt
X-Upstream-HT
X-Xfnlog-Site
X-EIG-Tracking-Id
X-Origin
X-Upstream-CT
X-ProcessESI
X-ProxyCache-Status
X-Grey
X-Cache-Category-Id
X-BYPASS-REASON
X-VG-TLSProxy
X-Original-Request
X-OVcl
X-IP
X-ProxyCache-Key
X-RemovedCookies
X-Web-Node
X-OVcl-Cache
HitInfo
Azure-RegionName
Azure-Version
Azure-SiteName
Azure-SlotName
Azure-InstanceId
X-Alternate-Cache-Key
X-ShardId
Accept-Language
X-Microcachable
X-ShopId
X-Via-CDN
X-Www-Served-By
X-Timing-Wait
X-Sorting-Hat-ShopId
X-Shopify-Stage
X-Sorting-Hat-PodId
NGB
X-Proxy-Build
Selected-FE
LB
Mn-Server-Ip
X-Geo
X-Cluster-Node
X-Cdn
X-App-Name
Filters
X-CACHE-KEY
X-TWH-CORRELATION-ID
X-RTag
Ms-Operation-Id
X-Transaction
X-Connection-Hash
X-Twitter-Response-Tags
X-Real-Ip
X-Rocket-Nginx-Bypass
X-UA
X-Cache-Enabled
X-Cache-Remote
Time
X-UA-Device-Type
X-NCache
X-Internal-Host
Access-Control-Request-Headers
X-Unique-ID
X-Pc-Host
IBM-Web2-Location
X-TIME
X-Pc-Date
X-Tumblr-Pixel-3
X-NodeID
X-LJ-Flow-ID
Content-Style-Type
Content-Script-Type
X-Origin-CC
X-SplitTest
X-AWS-Id
X-VWS-Id
X-Cache-TTL
X-Nginx-Cache
X-Proto
X-PHP-Backend
Mail-Subject
We-Hiring
X-MP-GENERATED-AT
X-Vgn-Hpd-Reason
NtCoent-Length
Cache-Hits
X-Source
X-Cdn-Forward
X-Storage
X-Edge-IP
X-Time-Microsecs
Backend
X-Port
X-Varnish-Cacheable
X-Distil-CS
X-Akamai-Request-ID
X-Webstats-RespID
X-Ms-Version
X-Debug-Cache
X-Ms-Request-Id
X-Ms-Blob-Type
X-Ms-Lease-Status
X-Backend-Name
Cache-Tags
X-Endurance-Cache-Level
X-APP-VERSION
X-Csrf-Token
X-B3-Spanid
X-Redis-Cache
X-Varnish-Beresp-Status
X-CACHE-GROUP
X-Varnish-Beresp-Grace
X-Origin-Response-Time
X-Dc
X-Urbn-Context-Path
X-Urbn-Site-Id
Locale
X-Croise-Owner
X-Ua
X-Nc
X-CDN-Forward
Warning
X-Varnish-Cache-Hits
X-EdgeConnect-Cache-Status
User-Agent
X-Ratelimit-Limit
X-PERF
X-C
X-Varnish-Beresp-Ttl
X-ApacheServer
X-ScT
V-Age
X-S-Cookie
Fastly-SSL
X-Server-By
Content-Disposition
X-A-Ccd
Cache-Prefix
X-A
VivaBuild
Viewtype
X-A-Dcw
X-A-Dam
X-Rojux
X-Server-Time
HA-Host
Ha-Gx-Prefs
HA-Ipaddr
HA-Servedtime
HA-Urlpath
HA-Georegion
HA-Geolon
HA-Cloudapp
GMS-Ver
HA-Geocity
HA-Geocountry
HA-Geolat
MD5-Digest
Meta-Geo-Continent
Server-Host
Fly-Cache
Fly-Request-Id
TSSecure
Ec-Rule-Version
Rt-Proxy-Cache
Resin-Trace
Mobile-Detection-Method
Powered-By
Rendered-Blocks
X-A-Wwc
UCS
X-Cache-Bucket
X-Eu-Site
BehaviorPad-Version
X-Org
X-NX-Host
X-NU-AKA-ACS-Version
X-ElasticPress-Search
X-DPWN-IS-SECURE
X-Debug-Log
X-Debug-Cookies
X-Destination
X-Developer
X-Died
X-Logtrace-Id
X-External-Request-Id
X-SRCache-Key
X-IN-SSL-APIGATEWAY
X-IN-APIGATEWAY
X-Generated-In
X-GeoIP-Country-Code
X-IN-WAF
X-Irp-Debug
X-F5-Cache
X-Fetched-On
X-From
X-G
X-Date
X-VG-WebServer
X-Hash
X-BBXSRF
X-Cache-Host
X-We-Are-Hiring
X-Cache-URL
Xc-Version
X-BB-ID
X-Aed
X-Accel-Expires-Debug
X-Amz-Meta-Cache-Control
X-Application
X-B-Cookie
X-Cdn-Origin
X-CF-Lambda-Fn
X-Sn-Servicetimems
X-Via-SSL
X-Trv-Group
X-Via-Edge
X-Store
X-PAYTM-SRV-ID
X-D
X-CF-Lambda-Version
X-Region-Sid
X-UE-Client-Country
X-CGP
X-Rewrite-Enabled
X-A-Dgt
X-Mrs-Cache-Hits
Cache-Key
X-Mrs-Age
X-Mshield-Cache-Status
X-Mrs-Cache
X-Cache-Backend
Ajk
Arc-Country
Version
X-CACHE-AGE
X-NWS-UUID-VERIFY
X-GeoIP-City
RNT-Machine
X-SIPLIST1
RNT-Time
X-Qloud-Router
X-No-Session
Server-ID
X-FW-Version
X-Location
X-Reboot
Release
X-Oss-Hash-Crc64ecma
Pramga
Fastly-SWR
X-Developers
Origin
X-Platform
PageSpeed
X-Release
X-Matched-Rule
X-User
X-Dispatcher-Server
Www
X-Backend-State
X-V
X-Var-Ttl
X-ABtesting
X-Epic-Correlation-Id
Fastly-SIE
X-Rebelmouse-Cache-Control
Thinkindot-CacheControl
X-Flog
X-VServer
Thinkindot-CacheControl-Type
X-Via-NSCOPI
X-Rebelmouse-Surrogate-Control
X-UnsetCookies
Thinkindot-Control
SN
X-Request-Start
Frame-Options
Apple-News-Services-Handled
Apple-News-Services-Host
Fastly-Soc-X-Request-Id
FSS-Cache
FSS-Proxy
GW-Server
AKAMAI
X-Clientip
X-Cache-Id
X-Wikidot-Backend
X-Key
X-Wikidot-Static-Cache
X-ServiceProvider
X-MServer
X-Layer
Apple-News-Services-Request-Url
Countrycode
Apple-News-Services-Parsed-Url
Decoy-Debug-TTL
Decoy-Debug-Status
Decoy-Debug-Key
X-Auto-Login
X-Oss-Storage-Class
Memcached
X-Hl-Ver
X-Core-Value
X-Powered-By-ANYU
X-Hello
X-Response-By
X-Request-URI
Country-Code
X-Trace-Id
IsBot
X-Thinkindot-L3
Heartbleed
Section-Io-Cache
User-Cache-Control
WZWS-RAY
X-Oss-Server-Time
X-S-Maxage
X-Oss-Object-Type
X-Oss-Request-Id
X-Sucuri-Cache
X-Core-Mission
X-MI-In-Market
X-WebServer
X-CUA
X-Crawler
X-Gen-Mode
X-Thanos
X-Hnp-Log
X-LI-UUID
X-Swa-Ws
X-Instance-Name
X-Li-Pop
X-LI-Proto
X-SVT-ORM-VERSION
X-Goog-Meta-Goog-Reserved-File-Mtime
X-TT-LOGID
X-Varnish-Action
X-Distributor
X-VCT
X-Fastly-Cache
X-Up
X-Gannett-Site-Version
X-SVT-ORM-RULES
X-Time
X-Device-Os
X-Passed-To-DLL
Pragrma
Request-Country
On-Server
Odigeo-Trace-Id
MI-Cache-Age
X-Request-UUID
Request-EU
X-RCS-CacheZone
X-Variation
True-Client-Country-4JS
X-Phone
Server-Int
X-Policy
MI-Cache
X-Returned-From
Fastly-Backend-Name
X-Sentry-ID
Esi-Enabled
X-Served-From
Cache-Cookie-Set-Idcheck
Cache-Cookie-Set-Lfrom
X-Secret
X-Sf
X-Returned-From-DLL
X-Returned-From-BeforeDispatch
Magicmarker
Kp-EeAlive
X-Returned-From-PostProcessResponse
X-Info
Web-Mar-Node
X-Bip
X-Block-Status
X-Backend-Url
X-Node-Id
X-Backend-Host
X-Nginx-Cache-Key
X-Cache-Debug
Cache-Cookie-Set-From
X-Dynatrace-Js-Agent
Adler-Geo
Backend-Name
X-Cache-Expires
Is-Eu
X-Stale
X-Li-Fabric
Uber-Trace-Id
X-Actual-URL
X-Passed-To-PostProcessResponse
X-Passed-To
X-Cache-FS-Status
Platform
X-P-T
X-Passed-To-BeforeDispatch
X-Parent-Response-Time
X-NC
X-Datadome
X-Refresh
X-Newrelic-Synthetics
X-MSEdge-Features
X-MSEdge-Flight
X-Worker
REQUESTUUID
X-Server-IP
Pagetype
X-Cache-CFC
X-Unique-Id-Primal
Proxy-Connection
Group
CDCHOST
MI-API
X-Fstrz
V-Cache
X-NODE
X-Page-Type
X-HOST
RequestId
HTTPS
X-Owner
Who
X-DC
Amp-Access-Control-Allow-Source-Origin
Cteonnt-Length
X-Pjax-Url
Fusion-Source
X-Be
X-Req
X-Servername
Fusion-Component-Id
X-SN
Fusion-Content-Id
Fusion-Template-Id
Fusion-Content-Source
X-Backend-TTL
MIME-Version
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-GZip
X-Cache-Srv
X-Oracle-Dms-Ecid
NodeID
Memory
X-Ms-Lease-State
X-Origin-TTL
Cdn
Mime-Version
X-Edge-Server
Cdn-Request-Time
Cdn-Host
ProcessTime
X-Server-Group
X-Content-Age
X-Aicache-OS
X-Servedbyhost
SD-X-WS
X-Protected-By
SS
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
CF-IPCountry
X-BB-IP
X-Wa
A
X-ND-Cache
GeoIP-Country-Code
X-COUNTRY
X-Ckpd-Fst-Backend
X-Origin-Host
X-Origin-Date
GeoIP-Latitude
PageType
X-Origin-Expires
CDN
X-SRV
X-Varnish-Beresp-TTL
X-StackifyID
Is-Session-Tracking
Get-Access-Time
XServer
X-B3-Traceid
X-APP
X-Pf-Uncompressing
Processtime
GeoIp-Country-Code
X-Fastly-Country-Code
X-WA
Geoip-Latitude
X-Varnish-Url
X-Cache-Info
X-Unique-Id
Node
Serverid
X-PHP-Host
Vix-Hermes-Req-Id
X-Proxy-Upstream
X-Requestid
Cache-Tv-Group
PICS-Label
X-Proxy-Cache-Status
X-Load-Cache
X-Ratelimit-Remaining
X-CSRF-Token
X-Generation-Time
X-Gdpr
X-RateLimit-Remaining-Second
Cf-Ipcountry
X-Fastly-Cache-Hits
X-RateLimit-Limit-Second
Nel
X-Nananana
X-BACKEND-TTL
X-ServedByHost
X-FireWall-Port
X-ID
X-RequestId
X-Planisys-CDN-TTL
DataCenter
X-Planisys-CDN-Rules
X-Planisys-CDN-Cache
RATING
X-SERVER-NAME
X-Check-Cacheable
Cache-Provider
Request-Time
URI
X-HS-Status
WP-Super-Cache
X-Server-W
X-EC-Security-Audit
X-CS
X-UPSTREAM-Address
Hostname
X-FORWARDED-FOR
Host-ID
X-Front
PFcat
X-Micro-Cache
X-NGINX-Cache
X-GZIP
X-GEO
X-Surge-Debug
X-Debug-Cache-Expiry
X-Fastly-Backend-Reqs
X-GDPR
X-Debug-Cache-Store
X-Debug-Cache-Fetch
NGX
T-Server
X-WR-MODIFICATION
X-FB-TRIP-ID
X-B3-SpanId
X-Svr
X-DataStream-MidMile-RTT
X-VarnCache
X-VarnPar1
WebServer
X-Swift-Error
X-ServerName
X-HTML-Edge-Cache
ServerName
X-HTML-Minification-Powered-By
X-BE
X-Fe
X-PARISIEN-Cache-Rendered
X-VG-WebCache
X-DataStream-Origin-MEX-Latency
X-Atg-Version
X-PF-Uncompressing
X-M-Reqid
X-M-Log
Lfy
Https
Requestid
X-Generated-On
X-Instart-Info
X-VarnPar2
X-Level-Front-Cache
X-Cdn-Srv
RequestUuid
X-Qnm-Cache
X-PJAX-URL
X-IPS-LoggedIn
Ohc-File-Size
Pics-Label
Ohc-Response-Time
X-Akamai-SSL-Client-Sid
X-Amz-Meta-S3b-Last-Modified
X-Vcache
X-From-Cache
X-Cache-Ttl
N-Cache
X-Alicdn-Da-Ups-Status
X-SB
X-VC
X-Distil-Cs
X-PAGE-TYPE
Load-Balancing
X-ARC
X-Gen-Id
X-Skip-Cache
X-Serial
SID
Build-Number
Cdn-Src-Port
X-Dw-Trace-Id
X-RAMCache
X-Grace-Duration