Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
Pragma
X-Powered-By
CF-RAY
ETag
Link
Expect-CT
X-XSS-Protection
Via
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Xss-Protection
X-Varnish
X-Request-Id
CF-Cache-Status
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-AspNet-Version
X-Download-Options
X-Runtime
Access-Control-Allow-Credentials
X-Drupal-Cache
X-Adblock-Key
X-Check
Alt-Svc
X-Cacheable
X-Generator
Content-Security-Policy-Report-Only
X-DNS-Prefetch-Control
X-Cache-Status
X-AspNetMvc-Version
X-Permitted-Cross-Domain-Policies
X-Iinfo
X-Template
X-Language
Status
Timing-Allow-Origin
X-Buckets
X-Content-Security-Policy
Content-Encoding
X-CDN
X-Kinja-Server-Push
Xkey
X-Turbo-Charged-By
Upgrade
X-Type
Keep-Alive
Access-Control-Expose-Headers
X-Request-ID
WPE-Backend
X-Pass-Why
X-Backend
Access-Control-Max-Age
X-AH-Environment
CF-Ray
X-Age
X-Cache-Group
X-Drupal-Dynamic-Cache
X-Server
X-Ua-Compatible
X-Via
X-Proxy-Cache
Grace
X-Pingback
X-Nginx-Cache-Status
X-Server-Powered-By
X-Amz-Request-Id
X-Amz-Id-2
X-Robots-Tag
X-Hacker
X-Varnish-Cache
X-UA-Device
X-Page-Speed
EagleId
Request-Context
X-LiteSpeed-Cache
P3p
Cf-Railgun
X-Envoy-Upstream-Service-Time
X-CST
X-Swift-CacheTime
X-Swift-SaveTime
X-WebKit-CSP
Ali-Swift-Global-Savetime
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Device
X-Server-Id
X-Amz-Version-Id
X-Ac
X-Node
Server-Timing
X-OneAgent-JS-Injection
Allow
Feature-Policy
X-Iejgwucgyu
X-Cnection
X-Response-Time
X-Rq
Content-Location
X-Backend-Server
X-Cache-Lookup
Report-To
EagleEye-TraceId
Surrogate-Control
X-Readtime
X-Host
X-Application-Context
Request-Id
X-Url
X-ORACLE-DMS-ECID
X-Rack-Cache
X-Origin-Cache
X-Clacks-Overhead
X-Country
X-FTR-Request-ID
Rating
NEL
X-Country-Code
X-Cloud-Trace-Context
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-DataDome
X-Instart-Request-ID
X-Px
X-Ruxit-JS-Agent
X-Vhost
X-MS-InvokeApp
X-Mod-Pagespeed
Charset
X-VARITI-CCR
Accept-CH
Edge-Control
Pinterest-Generated-By
X-Goog-Hash
X-GitHub-Request-Id
Arc-Version
PB-PID
PB-RID
X-Mobile-Rewrite
Verso
X-ESI
X-DynaTrace
X-PC
X-TtlSet
X-Vname
X-Version
X-Server-Name
X-Varnish-TTL
X-TTL
X-Powered-By-Plesk
X-Cdn
X-D2id
X-Kinja-Revision
X-Kinja-Build
X-Kinja-Server
X-Use-Magma
X-Kinja
X-GoogleNews-Bot
X-Exp-Variant
X-Cdn-Fetch
X-Exp-Id
X-Cached
X-B3-TraceId
X-Upstream-Env
X-Origin-Upstream-Status
SPRequestGuid
X-Dispatcher
X-SharePointHealthScore
X-Powered-CMS
X-Abt-Application-Version
MS-Author-Via
X-Recruiting
X-T
Accept-CH-Lifetime
RTSS
X-Navigation-Version
Public-Key-Pins
X-Shield-Request-Id
X-Oracle-Dms-Rid
X-ORACLE-DMS-RID
X-Trace
Content-MD5
AR-CACHE
AR-PoweredBy
AR-ATIME
X-SRCache-Store-Status
X-Client-IP
X-Amz-Rid
X-SRCache-Fetch-Status
SPRequestDuration
SPIisLatency
X-HW
X-Fastly-Request-ID
X-Forwarded-Proto
Arr-Disable-Session-Affinity
X-DIS-Request-ID
X-Wix-Server-Artifact-Id
X-Accel-Buffering
Realpath
X-Server-ID
X-B
X-DynaTrace-JS-Agent
X-F-Cache
X-Upstream
X-Goog-Generation
X-Amz-Meta-S3cmd-Attrs
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Goog-Stored-Content-Length
Service-Worker-Allowed
X-Ser
X-Via-JSL
Pinterest-Version
X-Pinterest-Rid
X-Id
X-FTR-DC
X-FTR-Realm
X-FTR-Cache-Status
X-FTR-Backend-Server
X-FTR-Backend
X-Country-Code-Real
X-FTR-Balancer
Front-End-Https
X-Dw-Request-Base-Id
Paypal-Debug-Id
X-FTR-Expires
AR-Request-ID
X-Vcap-Request-Id
X-Varnish-Age
X-Dns-Prefetch-Control
X-Debug
X-Ttl
Ar-Sid
X-Acc-Meta-Resource-Type
X-Goog-Storage-Class
X-MSEdge-Ref
Nginx-Cache
X-N
X-Hits
X-Kinsta-Cache
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-TEC-API-ROOT
X-NF-Request-ID
X-NewRelic-App-Data
X-FTR-Cache-Host
X-Logged-In
MRF-Tech
S
X-Mrf-Item-Lastmod
X-B3-TraceId-Primal
Mrf-Cache-Status
X-Mrf-Section-Lastmod
X-XRDS-Location
X-Akam-SW-Version
X-Forwarded-For
X-Grace
X-Frontend
X-PressLabs-Stats
X-HS-Hub-Id
X-HS-Content-Id
Alternate-Protocol
X-DataStream-Cache-Status
X-User-Agent
Tracecode
X-Amzn-Trace-Id
AMP-Access-Control-Allow-Source-Origin
X-CACHE-GROUP
DynaTrace
Server-Name
X-Pad
X-Content-Digest
Refresh
X-Cache-Key
X-Content-Options
MicrosoftSharePointTeamServices
X-Analytics
X-TA-CDN-Provider
Backend-Timing
Powered-By-ChinaCache
Fastcgi-Cache
Accept-Charset
X-Content-Type
X-Zen-Fury
X-Az
X-LB-Cache
X-Fastcgi-Cache
X-AppVersion
X-Activity-Id
Host
TCN
X-Page-Id
X-IPLB-Instance
X-Rid
FilterID
X-Debug-Info
X-Middleton-Display
X-FastCGI-Cache
Display
Access-Control-Request-Method
X-Sol
MS-CV
X-CF-Powered-By
ServerID
X-Magnolia-Registration
TP-Cache
TP-L2-Cache
Cache-Status
X-XRDS-LOCATION
Response
X-Middleton-Response
X-Cache-Hit
X-ATG-Version
X-Mobile
X-Content-Powered-By
X-Seen-By
X-Srv
X-Hostname
X-WA-Info
Surrogate-Key
X-VCache
X-RateLimit-Remaining
X-B3-Sampled
X-Revision
X-Cached-By
Rt-Fastcgi-Cache
X-Varnish-Backend
X-Request-Received
X-Request-Processing-Time
X-SS-Set-Cookie
X-Cluster
X-Signature
X-B-Cache
X-Cache-Action
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Tumblr-User
X-Instance
X-Cache-Age
X-Content-Security-Policy-Report-Only
X-Request-Guid
X-Drupal-Cache-Tags
X-PHP-Backend
Cleartype
Source
X-Whom
X-Akamai-Edgescape
X-Platform-Server
X-TT
X-Framework
X-Wix-Request-Id
ViewerVersion
X-Handled-By
Host-Header
X-App-Environment
X-Origin-Server
Server-Info
X-Ruxit-Js-Agent
X-Edge-Location
X-GUploader-UploadID
X-Cache-Control
DC
X-BCube-Filmed-By
X-Generated-By
X-Amzn-RequestId
X-Amz-Apigw-Id
X-App-Server
X-Geo-Country
X-NWS-LOG-UUID
X-FW-Server
X-FW-Static
X-FW-Type
X-Real-IP
X-FW-Serve
X-FW-Hash
X-Varnish-Hostname
X-Oneagent-Js-Injection
X-Cache-Rule
X-AOL-HN
Server-Node
X-Varnish-Server
Retry-After
X-Cache-2
Fusion-Component-Id
Fusion-Template-Id
Fusion-Content-Source
Fusion-Content-Id
Fusion-Source
X-Correlation-Id
Eomportal-Instance
X-FB-Debug
Cache
X-WPE-Loopback-Upstream-Addr
Payment
Webserver
Actual-Object-TTL
X-TT-TIMESTAMP
X-Response-Served-From
X-Varnish-Grace
Access-Control-Allow-Method
X-Amz-Server-Side-Encryption
AsisCache
ServedBy
X-Tumblr-Pixel-2
X-Tumblr-Pixel-1
X-Varnish-Hits
X-Device-Type
NGB
Filters
Content-Script-Type
Content-Style-Type
Ms-Operation-Id
X-Jobs
X-WebKit-CSP-Report-Only
X-RTag
X-TX-ID
X-Region
GEO-INFO
X-Cacheable-TTL
Viewport
X-Servedby
X-Varnish-IP
X-Amz-Replication-Status
X-UUID
Healthy
X-Contextid
X-Drupal-Cache-Contexts
X-Rendered-As
X-Adobe-Content
X-Locale
X-Adobe-Loc
X-RequestSource
Upgrade-Insecure-Requests
X-UA-Device-Type
Cache-Tv-Group
Country
X-Cache-Config
From-Origin
X-Accel-Expires
Edge-Cache-Tag
HitType
X-BACKEND-TTL
X-Cache-TTL-Remaining
X-Ezoic-Cdn
X-Cache-Remote
X-Cache-Server
X-Cache-TTL
X-VG-WebCache
Fastcgi-Useragent
Pagespeed
X-Cache-Operation
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Content-Age
Fastly-Restarts
X-FW-Dynamic
Cache-Tags
X-APP-VERSION
X-Upgrade-Enabled
X-Hit
X-Redis-Cache
X-Storage
X-S
X-Esi
X-Guploader-Uploadid
Datacenter
X-Mode
X-Source
X-App-Version
Cache-Tag
NtCoent-Length
Served-By
X-Upstream-Proxy
X-RateLimit-Limit
X-Origin-Response-Time
X-Akamai-Request-ID
X-RN-RSRV
X-Path-Route
Xserver
X-Backend-Name
X-Cache-Var
SRV
X-Cache-Var-Map
X-GeoIP
X-Internal-Host
Origin-Cache-Control
X-Is-Bot
X-Hl-Ver
X-Generated
Load-Balancing
Machine
Meta-Geo
X-NCache
X-JoinUs
X-Rule
Origin-Edge-Control
X-Detected-As
X-NGENIX-Cache
X-FC-Vary-Parameters
Vix-Hermes-Req-Id
X-TNCMS
X-Birta-Cache-Post
Now
X-Tb
X-Grey
X-Www-Served-By
X-Web-Node
X-Origin-Host
X-Edge-IP
X-Agile
X-Agile-Id
X-Agile-Age
X-Loop
X-Environment-Context
X-Proxy-Build
X-L-Path
X-Birta-Served
X-Proxy
X-Time-Microsecs
X-Labrador-Cache-Channel
X-ServerID
X-Cache-Category-Id
X-ProxyCache-Key
X-ProxyCache-Status
X-CDN-Cache
Selected-FE
X-Timing-Wait
X-Pubstack
X-BYPASS-REASON
X-Hosted-By
TWC-GeoIP-LatLong
Property-Id
TWC-GeoIP-Country
TWC-Device-Class
TWC-Connection-Speed
X-Pc-Key
X-Varnish-Cacheable
X-IP
X-Origin-Hint
Cache-Name
Cache-Key
X-Via-Fastly
X-Viewer-Country
X-Pc-Appver
X-Pc-Hit
Webcakes-App-Version
Webcakes-App-Name
TWC-Privacy
Webcakes-Region
X-RemovedCookies
X-PERF
X-ProcessESI
TWC-Locale-Group
X-ApacheServer
X-Akamai-Transformed
X-Varnish-Cache-Hits
X-Cache-NE
X-Format
Azure-Version
X-PCL
X-CCM
X-Status
X-Human
X-Daa-Tunnel
X-Site-Version
X-Debug-Cache
S-Rt
X-OCL
DB-Nickname
Azure-InstanceId
Fastcgi-X-Cache-Version
Azure-SiteName
Azure-SlotName
Azure-RegionName
Mail-Subject
X-Xfnlog-Site
X-Zipkin-Id
Public-Key-Pins-Report-Only
X-Routing-Service
X-MP-GENERATED-AT
X-Proxied
X-CACHE-KEY
X-DataStream-Origin-MEX-Latency
X-DataStream-MidMile-RTT
X-Access
X-Section
We-Hiring
X-VG-TLSProxy
X-App-Name
X-Cache-Enabled
X-Original-Request
X-Microcachable
Access-Control-Request-Headers
X-UA
X-Origin
X-Sucuri-ID
User-Cache-Control
S-Cnection
X-Ocache
X-Protected-By
Nel
X-EdgeConnect-Cache-Status
Liferay-Portal
X-Request-Time
X-Nginx-Cache
X-Cdn-Forward
User-Agent
X-FW-Version
LB
X-Tumblr-Pixel-3
X-Webstats-RespID
X-GEO
X-Proto
Cache-Hits
Ohc-File-Size
X-Yottaa-Metrics
X-FB-TRIP-ID
X-Node-Name
X-Yottaa-Optimizations
X-GRACE
X-Trace-Id
X-ES-SERVER
X-Origin-CC
PageSpeed
X-Nc
Powered
X-Correlation-ID
X-Endurance-Cache-Level
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
Frame-Options
X-Upstream-HT
X-Upstream-CT
X-Pc-Host
X-Pc-Date
X-Parent-Response-Time
X-Forwarded-Host
X-Time
L5d-Success-Class
X-Pc-Subdomain
IBM-Web2-Location
X-Cache-Backend
X-Unique-ID
X-ElasticPress-Search
X-B3-Traceid
X-OVcl-Cache
X-V
X-OVcl
X-Origin-TTL
Section-Io-Cache
X-Ua
AR-SID
X-Rocket-Nginx-Bypass
OT-Force-Account-Verify
X-Varnish-Beresp-Ttl
X-Vgn-Hpd-Reason
X-VWS-Id
X-LJ-Flow-ID
X-AWS-Id
X-R9-Blue-Green-Version
Ec-Rule-Version
Decoy-Debug-TTL
X-Info
X-LI-Proto
Decoy-Debug-Status
X-Li-Fabric
X-Rebelmouse-Surrogate-Control
X-Li-Pop
X-LI-UUID
X-IN-WAF
X-Irp-Debug
Decoy-Debug-Key
X-IN-APIGATEWAY
Arc-Country
X-Hnp-Log
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Generated-In
Cache-Prefix
Country-Code
X-IN-SSL-APIGATEWAY
X-Gen-Mode
BehaviorPad-Version
Fastly-SWR
X-Cache-Bucket
Rendered-Blocks
X-Block-Status
Resin-Trace
X-Cache-FS-Status
Powered-By
X-Cache-Info
X-Cache-Id
X-Cache-Host
X-BB-ID
X-B-Cookie
X-Accel-Expires-Debug
Viewtype
VivaBuild
X-Aed
X-Amz-Meta-Cache-Control
X-Auto-Login
X-ARC
X-Application
X-Cache-URL
X-Cdn-Srv
Fly-Request-Id
X-Distil-CS
X-Developer
GMS-Ver
Fly-Cache
X-Micro-Cache
Fastly-SIE
X-External-Request-Id
X-DPWN-IS-SECURE
X-Destination
X-Date
X-CF-Lambda-Fn
Mobile-Detection-Method
Node
X-CF-Lambda-Version
Meta-Geo-Continent
MD5-Digest
Memcached
X-Connection-Hash
X-Fetched-On
X-Request-UUID
X-ScT
X-Server-By
X-Region-Sid
X-User
X-S-Maxage
X-S-Cookie
X-Wikidot-Backend
X-Rewrite-Enabled
X-Rojux
X-SRCache-Key
X-Server-Group
X-UE-Client-Country
X-Trv-Group
X-Edge-Cache
X-Transaction
X-Edge-Cache-Key
X-TT-LOGID
X-Wikidot-Static-Cache
X-TIME
X-Twitter-Response-Tags
X-ServiceProvider
Www
X-PAYTM-SRV-ID
X-PHP-Host
X-Reboot
Xc-Version
Fastcgi-X-Cache
X-Origin-Date
X-Origin-Expires
X-Rebelmouse-Cache-Control
X-NU-AKA-ACS-Version
X-VG-WebServer
X-Server-Cache
X-We-Are-Hiring
X-Dynatrace-Js-Agent
X-Cluster-Node
X-Dc
X-Cache-Expires
X-Cache-Grace
X-A-Ccd
X-A
X-Thinkindot-L3
X-RateLimit-Remaining-Second
X-Cache-Debug
X-ShardId
X-ShopId
X-C
X-Backend-Url
X-Actual-URL
X-Clientip
X-Alternate-Cache-Key
X-Variation
X-Backend-Host
X-Varnish-Action
X-A-Wwc
X-Var-Ttl
X-Shopify-Stage
X-A-Dcw
X-Bip
X-A-Dgt
X-A-Dam
X-Debug-Log
X-Returned-From-DLL
X-Passed-To-DLL
X-Returned-From-BeforeDispatch
X-Request-URI
X-Passed-To-PostProcessResponse
X-Hash
X-G
X-Generated-On
X-Returned-From-PostProcessResponse
X-Passed-To-BeforeDispatch
X-Level-Front-Cache
X-Node-Id
X-Logtrace-Id
X-Matched-Rule
X-Location
X-Response-By
X-Passed-To
X-Returned-From
X-NX-Host
X-From
X-FireWall-Port
X-CUA
X-D
X-Proxy-Upstream
X-Debug-Cookies
X-Crawler
X-Core-Mission
X-SIPLIST1
X-Sf
X-RateLimit-Limit-Second
X-Nginx-Cache-Key
X-Sorting-Hat-PodId
X-Proxy-Cache-Status
X-Server-IP
X-Policy
X-Sorting-Hat-ShopId
X-Stale
X-Swa-Ws
X-Svr
X-Dispatcher-Server
X-Thanos
Mn-Server-Ip
Is-Eu
Backend
Request-Time
Ajk
Fastly-Backend-Name
Adler-Geo
Fastly-Soc-X-Request-Id
Proxy-Connection
On-Server
Origin
Countrycode
Content-Disposition
CDCHOST
Platform
Server-Host
SD-X-WS
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
Thinkindot-Control
True-Client-Country-4JS
Web-Mar-Node
X-Via-NSCOPI
IsBot
Lfy
Who
X-Sucuri-Cache
X-Via-CDN
Heartbleed
X-Fastly-Cache
X-Died
X-Distributor
X-Backend-State
X-Device-Os
X-F5-Cache
Fastly-SSL
GW-Server
AKAMAI
X-MSEdge-Features
X-UnsetCookies
X-MSEdge-Flight
X-No-Session
X-Qloud-Router
X-Key
X-Varnish-Authentication
X-Generation-Time
X-Fstrz
Ha-Gx-Prefs
X-SERVER
X-Instart-Isnd
HA-Ipaddr
X-Developers
Release
X-CGP
X-Platform
X-LAGOON
X-GeoIP-Country-Code
Pramga
RNT-Machine
RNT-Time
Server-Surrogate-Control
SS
Server-Int
Server-Cache-Control
X-Secret
Pagetype
X-Cache-ASPX
X-Epic-Correlation-Id
Magicmarker
X-Eu-Site
X-Gannett-Site-Version
HostName
X-HS-Cache-Config
Warning
X-Varnish-Url
X-EIG-Tracking-Id
Server-ID
X-Server-Time
X-TrackingId
X-Croise-Owner
X-Amz-Meta-Surrogate-Control
X-Page-Type
CACHE
X-Core-Value
X-Debug-Cache-Fetch
Apple-News-Services-Parsed-Url
Cache-Cookie-Set-From
X-Debug-Cache-Store
Cache-Cookie-Set-Lfrom
Cache-Cookie-Set-Idcheck
Apple-News-Services-Host
Apple-News-Services-Request-Url
REQUESTUUID
X-Debug-Cache-Expiry
Apple-News-Services-Handled
X-Pjax-Url
X-Sedo-Request-Id
Kp-EeAlive
Version
X-Up
X-Be
X-Cache-Miss-From
X-Refresh
X-Servername
RequestId
PFcat
NGX
SID
X-Newrelic-App-Data
X-Varnish-Ttl
X-Ratelimit-Remaining
X-CDN-Forward
X-Cache-CFC
X-Store
Esi-Enabled
X-Owner
X-SN
X-URL
Time
X-Oss-Storage-Class
X-From-Cache
X-MI-In-Market
X-Oss-Hash-Crc64ecma
X-RCS-CacheZone
Odigeo-Trace-Id
MIME-Version
MI-Cache-Age
X-Oss-Request-Id
X-Layer
MI-Cache
X-Oss-Object-Type
X-Oss-Server-Time
MI-API
X-NC
Cdn
X-B3-SpanId
X-FPC
PICS-Label
Mime-Version
X-RequestId
Cteonnt-Length
X-IPS-LoggedIn
Hostname
X-Geo
HA-Geocountry
HA-Geocity
HTTPS
HA-Cloudapp
HA-Urlpath
HA-Servedtime
HA-Host
HA-Geolon
HA-Geolat
HA-Georegion
X-Hyper-Cache
FastCGI-Cache
X-Ratelimit-Limit
X-Mshield-Cache-Status
X-Mrs-Cache-Hits
X-Edge-Server
Cdn-Request-Time
Cdn-Host
X-Unique-Id-Primal
X-Mrs-Cache
X-Servedbyhost
Backend-Name
X-Mrs-Age
X-Load-Cache
X-Webkit-CSP
Memory
X-CMS-Context
X-Real-Ip
Processtime
X-Req
X-Webkit-Csp
X-CSRF-TOKEN
X-CLOUD-TRACE-CONTEXT
CF-IPCountry
Cf-Ipcountry
X-B3-Spanid
X-Amzn-Remapped-Connection
ProcessTime
X-Amzn-Remapped-Date
X-WebServer
X-Wa
X-Mobile-URL
X-Instart-Info
Ohc-Response-Time
X-Phone
CDN
X-NodeID
X-DC
GeoIP-Country-Code
Cross-Origin-Window-Policy
X-GZip
X-VServer
X-Request-Start
X-Varnish-Beresp-TTL
X-Pf-Uncompressing
X-HS-Combine-CSS
X-Lb-Id
X-HTML-Minification-Powered-By
X-Aicache-OS
GeoIP-Latitude
X-Newrelic-Synthetics
X-WR-MODIFICATION
X-Release
XServer
X-Atg-Version
X-Fastly-Country-Code
X-PF-Uncompressing
X-Skip-Cache
X-WA
Ohc-Cache-HIT
X-Server-W
URI
X-Served-From
X-ND-Cache
Rt-Proxy-Cache
Accept-Ch-Lifetime
X-VC-Cache
X-FORWARDED-FOR
T-Server
Amp-Access-Control-Allow-Source-Origin
X-Unique-Id
X-Tb-Optimization-Total-Bytes-Saved
X-Cms-Context
X-Nananana
X-ServedByHost
X-GoCache-CacheStatus
X-APP
X-Oracle-Dms-Ecid
Uber-Trace-Id
X-UCC
N-Cache
X-LB-ID
X-COUNTRY
X-MServer
X-Gateway-Cache-Key
X-CSRF-Token
X-Gateway-Cache-Status
X-Gateway-Skip-Cache
V-Age
X-Sn-Servicetimems
X-Datadome
X-Cdn-Origin
X-Worker
X-SRV
Pics-Label
X-SVT-ORM-VERSION
X-Fastly-Cache-Hits
A
X-Processor
X-UPSTREAM-Address
X-SVT-ORM-RULES
X-LiteSpeed-Cache-Control
X-HS-Status
Proxy-Firewall
X-SERVER-NAME
X-Hp-Webp
X-P-T
X-BBXSRF
DataCenter
Is-Session-Tracking
Get-Access-Time
X-CACHE-AGE
X-GZIP
X-Requestid
X-Check-Cacheable
Cneonction
ServerName
X-NGINX-Cache
X-RCS-Backend
X-Cache-HT
X-HostName
X-Vcache
X-Optimization
Dnion-Transfer-Encoding
Geoip-Latitude
X-ID
X-BE
X-Shard
X-Backend-TTL
X-Vg-Webcache
X-Geo-Header
GeoIp-Country-Code
X-GDPR
X-Amzn-Remapped-Content-Length
X-StackifyID
X-Varnish-URL
X-ServerName
X-PAGE-TYPE
X-Fe
X-VCT
Host-ID
X-GeoIP-City
X-Port
X-PJAX-URL
X-Csrf-Token
WP-Super-Cache
Requestid
X-NWS-UUID-VERIFY
Serverid
X-Dw-Trace-Id
X-Git-Hash
X-Fastly-Backend-Reqs
WZWS-RAY
Server-Id
RequestUuid
X-LiteSpeed-Tag
Inserted-Into-Cache-At
Cache-Provider
UCS
X-Org
X-RAMCache
286prxHost
409pxxline
219prxHost
X-Request-Url
DSUID
188prxHost
178proxuri
X-CS
X-Via-Edge
352pxline
Xxline
X-Via-SSL
189phosttRef
225prxHost
355prline