Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Last-Modified
Accept-Ranges
Pragma
X-Powered-By
Link
ETag
CF-RAY
Expect-CT
Via
X-XSS-Protection
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Id
X-Served-By
P3P
Referrer-Policy
X-Varnish
X-Xss-Protection
X-Timer
CF-Cache-Status
X-Request-Id
Access-Control-Allow-Headers
X-AspNet-Version
Access-Control-Allow-Methods
X-Download-Options
X-Runtime
Access-Control-Allow-Credentials
P3p
CF-Ray
X-Drupal-Cache
X-Check
X-Adblock-Key
Alt-Svc
X-Cacheable
X-Generator
Content-Security-Policy-Report-Only
X-Cache-Status
X-AspNetMvc-Version
Status
X-Amz-Cf-Pop
X-DNS-Prefetch-Control
X-Request-ID
X-Template
X-Language
Timing-Allow-Origin
Content-Encoding
X-Permitted-Cross-Domain-Policies
X-Iinfo
X-Buckets
X-Content-Security-Policy
X-Turbo-Charged-By
Upgrade
X-Kinja-Server-Push
X-CDN
X-Type
Xkey
Keep-Alive
Access-Control-Expose-Headers
WPE-Backend
X-Pass-Why
X-AH-Environment
Access-Control-Max-Age
X-Backend
X-Cache-Group
X-Server
X-Age
X-Drupal-Dynamic-Cache
X-Pingback
X-Via
X-Nginx-Cache-Status
X-Amz-Id-2
X-Amz-Request-Id
X-Server-Powered-By
Grace
X-Hacker
EagleId
X-UA-Device
X-Robots-Tag
X-LiteSpeed-Cache
X-Varnish-Cache
X-Page-Speed
X-Swift-CacheTime
X-Swift-SaveTime
X-Proxy-Cache
Cf-Railgun
X-Envoy-Upstream-Service-Time
Request-Context
Ali-Swift-Global-Savetime
X-Ua-Compatible
X-Ac
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Device
X-WebKit-CSP
X-Cache-Lookup
Content-Location
X-Amz-Version-Id
Surrogate-Control
X-Cnection
X-Host
Report-To
X-Readtime
X-Node
X-Rq
EagleEye-TraceId
Server-Timing
X-Response-Time
X-Server-Id
X-OneAgent-JS-Injection
X-CST
Feature-Policy
X-Rack-Cache
X-Backend-Server
X-ORACLE-DMS-ECID
X-Application-Context
X-Iejgwucgyu
Request-Id
X-Instart-Request-ID
X-Cloud-Trace-Context
X-Clacks-Overhead
Edge-Control
NEL
X-Url
X-DynaTrace
Allow
Rating
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Country
X-Varnish-TTL
X-Server-ID
X-Origin-Cache
X-FTR-Request-ID
X-Country-Code
X-B3-TraceId
X-Cdn
X-Trace
X-Server-Name
X-Px
X-Vhost
X-DataDome
X-ESI
X-GitHub-Request-Id
X-MS-InvokeApp
RTSS
X-VARITI-CCR
X-Cached
X-Ruxit-JS-Agent
Accept-CH
SPRequestGuid
X-Goog-Hash
X-ORACLE-DMS-RID
Charset
X-PC
X-TtlSet
X-Vname
X-TTL
Pinterest-Generated-By
X-Mod-Pagespeed
Public-Key-Pins
X-D2id
X-F-Cache
X-Dispatcher
X-Kinja
X-Kinja-Build
X-Kinja-Server
X-Kinja-Revision
X-GoogleNews-Bot
X-Exp-Variant
Verso
X-Use-Magma
X-Cdn-Fetch
X-Exp-Id
X-SharePointHealthScore
PB-RID
X-Mobile-Rewrite
PB-PID
Arc-Version
X-T
X-Version
X-Powered-By-Plesk
X-DynaTrace-JS-Agent
X-Abt-Application-Version
Accept-CH-Lifetime
X-Powered-CMS
X-DIS-Request-ID
X-Dns-Prefetch-Control
X-Ser
X-Fastly-Request-ID
X-Pinterest-Rid
X-Upstream-Env
Pinterest-Version
X-Origin-Upstream-Status
X-Navigation-Version
X-Recruiting
X-Shield-Request-Id
X-Forwarded-Proto
X-B
DynaTrace
X-Client-IP
MS-Author-Via
X-Amz-Rid
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-HW
SPRequestDuration
Realpath
SPIisLatency
X-TEC-API-ROOT
X-TEC-API-VERSION
X-TEC-API-ORIGIN
Content-MD5
X-Oneagent-Js-Injection
X-Upstream
Nginx-Cache
X-Goog-Stored-Content-Encoding
X-Vcap-Request-Id
X-Goog-Generation
X-Goog-Metageneration
X-Goog-Stored-Content-Length
Edge-Cache-Tag
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Amz-Meta-S3cmd-Attrs
X-Oracle-Dms-Rid
AR-ATIME
AR-PoweredBy
AR-CACHE
X-N
X-Ttl
X-Hits
TCN
Arr-Disable-Session-Affinity
X-Varnish-Age
X-Debug
X-NF-Request-ID
Access-Control-Request-Method
X-Mrf-Section-Lastmod
X-B3-TraceId-Primal
Mrf-Cache-Status
MRF-Tech
X-Mrf-Item-Lastmod
X-Goog-Storage-Class
X-Acc-Meta-Resource-Type
X-MSEdge-Ref
X-NewRelic-App-Data
X-Dw-Request-Base-Id
X-ATG-Version
S
X-Id
Service-Worker-Allowed
X-FTR-Cache-Status
X-FTR-DC
X-FTR-Realm
X-Via-JSL
X-FTR-Balancer
X-FTR-Backend
X-Country-Code-Real
X-FTR-Backend-Server
X-Logged-In
X-FTR-Expires
X-XRDS-Location
Tracecode
X-FastCGI-Cache
X-HS-Content-Id
Rt-Fastcgi-Cache
X-Forwarded-For
X-Content-Digest
X-PressLabs-Stats
X-HS-Hub-Id
X-Pad
Alternate-Protocol
X-Frontend
X-Kinsta-Cache
Surrogate-Key
Fastly-Restarts
AMP-Access-Control-Allow-Source-Origin
X-Cache-Key
MicrosoftSharePointTeamServices
X-Content-Options
X-RateLimit-Remaining
Ar-Sid
X-FTR-Cache-Host
X-Grace
X-Ruxit-Js-Agent
X-Edge-Location
Server-Name
X-Amzn-Trace-Id
Fastcgi-Cache
X-Analytics
Backend-Timing
Host
FilterID
X-CF-Powered-By
TP-L2-Cache
TP-Cache
X-Rid
X-IPLB-Instance
X-Debug-Info
X-User-Agent
X-Hostname
ServerID
X-Revision
X-Magnolia-Registration
X-B3-Sampled
X-Whom
Eomportal-Instance
X-Cache-2
Paypal-Debug-Id
X-Request-Received
X-Request-Processing-Time
X-NWS-LOG-UUID
X-Page-Id
X-HS-Cache-Config
X-Mobile
AR-Request-ID
X-Srv
X-Akam-SW-Version
Front-End-Https
X-AOL-HN
X-Content-Powered-By
X-VCache
X-Cache-Hit
Retry-After
X-Litespeed-Cache
X-B-Cache
X-GUploader-UploadID
X-Signature
X-Varnish-Grace
Source
X-SS-Set-Cookie
X-Handled-By
X-FB-Debug
X-Device-Type
X-Cluster
X-LB-Cache
Cleartype
X-WA-Info
X-Instance
X-XRDS-LOCATION
X-Request-Guid
X-Cache-Action
X-Cache-Control
X-Correlation-Id
Refresh
X-App-Environment
X-Tumblr-User
X-Varnish-Hostname
X-Platform-Server
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-BCube-Filmed-By
X-Framework
X-Content-Security-Policy-Report-Only
X-Zen-Fury
X-Akamai-Edgescape
X-TA-CDN-Provider
Webserver
X-Varnish-Backend
X-Webkit-CSP
X-Daa-Tunnel
X-Middleton-Display
Display
X-Sol
X-Cache-Server
X-Fastcgi-Cache
X-Varnish-Server
X-Drupal-Cache-Tags
X-Az
X-Activity-Id
X-AppVersion
X-Drupal-Cache-Contexts
Healthy
X-Cache-Rule
X-Geo-Country
X-Content-Type
X-Generated-By
X-URL
VIX-Pulpo-Upstream-Status
VIX-Pulpo-Node
ViewerVersion
X-Seen-By
X-Middleton-Response
Response
X-Wix-Request-Id
X-App-Server
X-Cache-Age
Server-Node
X-Cached-By
S-Cnection
Cache-Status
X-Accel-Expires
X-Node-Name
X-CACHE-GROUP
X-DataStream-Cache-Status
X-Origin-Server
X-Amz-Apigw-Id
X-Amz-Replication-Status
X-Amzn-RequestId
X-Esi
Upgrade-Insecure-Requests
X-TT
X-WPE-Loopback-Upstream-Addr
X-S
Payment
Host-Header
GEO-INFO
X-Response-Served-From
NGB
X-RequestSource
Filters
X-Locale
X-Cacheable-TTL
X-UA-Device-Type
HostName
X-Cache-NE
Viewport
X-Edge-Cache-Key
X-GeoIP
X-Varnish-IP
Actual-Object-TTL
X-Edge-Cache
X-FW-Static
X-FW-Serve
X-FW-Hash
X-Contextid
X-FW-Type
X-Jobs
X-Tumblr-Pixel-2
X-Tumblr-Pixel-1
X-Servedby
ServedBy
X-FW-Server
AsisCache
X-UUID
X-Varnish-Hits
X-Status
X-TT-TIMESTAMP
X-Amz-Server-Side-Encryption
X-WebKit-CSP-Report-Only
Access-Control-Allow-Method
X-TX-ID
Server-Info
X-Adobe-Loc
X-Adobe-Content
Accept-Charset
X-Storage
SRV
X-Hyper-Cache
X-HS-Combine-CSS
Cache
X-Cache-TTL-Remaining
X-CLOUD-TRACE-CONTEXT
X-PHP-Backend
X-Vg-Webcache
X-Cache-Remote
X-Rendered-As
MS-CV
X-Croise-Owner
From-Origin
X-APP-VERSION
X-App-Version
Cache-Tag
X-Cache-Operation
Cache-Tv-Group
DC
X-Region
Public-Key-Pins-Report-Only
X-Forwarded-Host
Liferay-Portal
Served-By
X-Redis-Cache
X-Mode
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-UA
X-Endurance-Cache-Level
X-Akamai-Transformed
Fastcgi-X-Cache
X-RN-RSRV
Fastcgi-Useragent
X-Request-Time
X-Agile
X-Agile-Age
Selected-FE
X-Akamai-Request-ID2
Fastcgi-X-Cache-Version
Machine
X-Agile-Id
X-Site-Version
Meta-Geo
X-TNCMS
X-Upgrade-Enabled
X-IP
X-Cache-Var
X-Cache-Var-Map
X-Webstats-RespID
X-Detected-As
X-Proxy-Build
X-Path-Route
X-TIME
X-Human
X-NGENIX-Cache
X-Hosted-By
X-Is-Bot
X-Loop
X-Timing-Wait
X-Generated
X-Environment-Context
TWC-GeoIP-Country
X-Origin-Hint
X-Pc-Hit
TWC-Device-Class
X-Pc-Appver
TWC-Locale-Group
X-Format
Origin-Edge-Control
Origin-Cache-Control
Now
X-Pc-Key
Property-Id
TWC-Connection-Speed
X-Grey
S-Rt
X-Original-Request
Webcakes-Region
X-NCache
X-BYPASS-REASON
X-ProxyCache-Status
X-Internal-Host
X-Cache-Category-Id
X-Labrador-Cache-Channel
X-L-Path
X-JoinUs
X-ProxyCache-Key
X-Vgn-Hpd-Reason
Webcakes-App-Version
Webcakes-App-Name
X-Proxied
X-Routing-Service
Cache-Name
X-CDN-Cache
X-Via-Fastly
X-Zipkin-Id
TWC-Privacy
TWC-GeoIP-LatLong
Xserver
X-Upstream-CT
X-PCL
X-Upstream-HT
X-VG-TLSProxy
X-Viewer-Country
X-Tumblr-Pixel-3
X-Access
X-RemovedCookies
X-Section
X-Pubstack
X-Proxy
X-ProcessESI
X-Web-Node
X-FC-Vary-Parameters
Datacenter
X-OCL
Powered-By-ChinaCache
X-Birta-Cache-Post
X-Birta-Served
DB-Nickname
Cache-Tags
X-Ocache
X-Origin-Response-Time
X-Origin
X-Rule
X-Cache-Config
Pagespeed
X-Akamai-Request-ID
X-Origin-CC
X-Backend-Name
X-ServerID
X-Www-Served-By
X-Xfnlog-Site
X-Via-CDN
X-Time-Microsecs
X-Origin-Host
Mn-Server-Ip
Azure-Version
X-Tb
Azure-SlotName
Azure-RegionName
X-CCM
Azure-SiteName
OT-Force-Account-Verify
Azure-InstanceId
HitType
X-Alternate-Cache-Key
X-ShardId
X-Sorting-Hat-PodId
X-Shopify-Stage
X-ShopId
X-B3-Spanid
X-Sorting-Hat-ShopId
X-App-Name
X-Parent-Response-Time
X-NODE
X-Nginx-Cache
X-Cache-TTL
Accept-Language
X-Guploader-Uploadid
X-RateLimit-Limit
X-CACHE-KEY
X-OVcl
X-OVcl-Cache
X-Ezoic-Cdn
L5d-Success-Class
NtCoent-Length
Cache-Key
User-Cache-Control
X-Protected-By
X-Edge-IP
Vix-Hermes-Req-Id
LB
X-Real-IP
Content-Script-Type
Content-Style-Type
Time
X-Real-Ip
X-Newrelic-App-Data
X-Amz-Meta-Surrogate-Control
X-Kong-Upstream-Latency
X-BACKEND-TTL
X-Kong-Proxy-Latency
X-Proto
X-Webkit-Csp
X-Cache-Backend
X-Pc-Host
Ms-Operation-Id
X-Correlation-ID
X-RTag
X-Pc-Date
X-PERF
X-ApacheServer
X-Front
X-Nc
X-Cdn-Forward
X-Mrs-Age
X-CDN-Forward
X-Mshield-Cache-Status
X-Unique-Id-Primal
X-Mrs-Cache-Hits
Section-Io-Cache
X-Mrs-Cache
X-Hit
X-Dynatrace-Js-Agent
X-Sucuri-ID
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-FB-TRIP-ID
AR-SID
X-Varnish-Cacheable
X-Microcachable
X-Debug-Cache
WZWS-RAY
X-Ratelimit-Limit
X-Dc
X-Content-Age
X-GRACE
Access-Control-Request-Headers
X-Twitter-Response-Tags
Version
X-Transaction
X-C
X-Unique-ID
X-Cache-Enabled
X-Connection-Hash
X-EdgeConnect-Cache-Status
Fusion-Content-Source
Fusion-Component-Id
Fusion-Content-Id
Fusion-Source
X-Trace-Id
Fusion-Template-Id
X-MP-GENERATED-AT
Country
Warning
X-Cache-URL
X-CUA
X-D
X-Date
X-Destination
X-Crawler
X-Clientip
X-Cache-Host
X-Cache-Id
X-CF-Lambda-Fn
X-CF-Lambda-Version
X-Cache-FS-Status
X-B-Cookie
X-A-Dcw
X-A-Dam
RNT-Time
X-A-Dgt
X-A-Wwc
Resin-Trace
X-Accel-Expires-Debug
RNT-Machine
X-A-Ccd
Rt-Proxy-Cache
Uber-Trace-Id
Server-Host
SS
UCS
V-Age
VivaBuild
Viewtype
SD-X-WS
X-Actual-URL
Rendered-Blocks
X-Bip
X-BB-ID
X-Backend-State
X-Cache-Bucket
Memcached
Locale
MD5-Digest
X-Cache-Debug
Server-ID
X-Auto-Login
X-Aed
Powered-By
Release
X-Application
Platform
Meta-Geo-Continent
Mobile-Detection-Method
Node
Is-Eu
X-RCS-CacheZone
X-S-Maxage
X-S-Cookie
X-Rojux
X-ScT
X-Served-From
X-Server-Time
X-Server-By
X-Rewrite-Enabled
X-Returned-From-PostProcessResponse
X-Request-UUID
X-Release
X-Response-By
X-Returned-From
X-Returned-From-DLL
X-Returned-From-BeforeDispatch
X-SRCache-Key
X-Store
X-Via-Edge
X-VG-WebServer
X-Varnish-Action
X-Via-SSL
X-We-Are-Hiring
Xc-Version
X-WebServer
X-Variation
X-Var-Ttl
X-Trv-Group
X-Thanos
X-UE-Client-Country
X-Urbn-Context-Path
X-User
X-Urbn-Site-Id
X-Region-Sid
X-Reboot
X-Generated-In
X-G
X-FW-Version
X-GeoIP-Country-Code
X-Layer
X-Li-Pop
X-Li-Fabric
X-From
X-Fetched-On
X-Died
X-Device-Os
X-Dispatcher-Server
X-DPWN-IS-SECURE
X-F5-Cache
X-External-Request-Id
X-LI-Proto
X-LI-UUID
X-PHP-Host
X-PAYTM-SRV-ID
X-Qloud-Router
IBM-Web2-Location
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
X-Passed-To-PostProcessResponse
X-Passed-To-DLL
X-Node-Id
X-Logtrace-Id
X-NU-AKA-ACS-Version
X-Org
X-Passed-To-BeforeDispatch
X-Passed-To
X-Developer
X-A
Fastly-Backend-Name
Ec-Rule-Version
Countrycode
Fastly-SIE
Fastly-SWR
Fly-Request-Id
Fly-Cache
Cache-Prefix
BehaviorPad-Version
X-Rocket-Nginx-Bypass
Load-Balancing
Ohc-File-Size
Mail-Subject
We-Hiring
Arc-Country
Ajk
Frame-Options
Adler-Geo
X-Hl-Ver
X-Varnish-Beresp-Ttl
X-NWS-UUID-VERIFY
HA-Ipaddr
X-Block-Status
X-Swa-Ws
HA-Host
X-Time
X-CGP
X-Thinkindot-L3
X-Via-NSCOPI
X-SVT-ORM-RULES
X-Server-Group
Apple-News-Services-Host
Apple-News-Services-Parsed-Url
Apple-News-Services-Request-Url
HA-Urlpath
X-Server-IP
X-Amz-Meta-Cache-Control
HA-Servedtime
AKAMAI
Apple-News-Services-Handled
X-UnsetCookies
X-Core-Value
X-IN-WAF
X-IN-SSL-APIGATEWAY
X-IN-APIGATEWAY
X-Hnp-Log
X-Info
X-Key
X-Matched-Rule
X-Location
X-No-Session
X-Hash
X-Gen-Mode
X-Proxy-Upstream
HA-Geolat
Ha-Gx-Prefs
X-Request-Start
HA-Georegion
X-Epic-Correlation-Id
HA-Geolon
X-Proxy-Cache-Status
X-Eu-Site
Backend
X-Cache-Expires
GW-Server
Thinkindot-Control
Origin
Country-Code
Kp-EeAlive
Thinkindot-CacheControl-Type
GMS-Ver
Esi-Enabled
HA-Geocity
HA-Geocountry
Thinkindot-CacheControl
Pragrma
Content-Disposition
X-Stale
X-Sf
Www
Request-EU
Heartbleed
Request-Country
Who
Web-Mar-Node
Backend-Name
Pramga
HA-Cloudapp
X-SVT-ORM-VERSION
V-Cache
Group
X-Be
X-Geo
User-Agent
X-Wikidot-Static-Cache
X-Phone
Proxy-Connection
X-MI-In-Market
MI-Cache
X-Platform
Decoy-Debug-Status
Decoy-Debug-Key
X-Nginx-Cache-Key
X-Policy
True-Client-Country-4JS
X-P-T
MI-API
X-GeoIP-City
X-Goog-Meta-Goog-Reserved-File-Mtime
HitInfo
X-SIPLIST1
X-Gannett-Site-Version
X-VCT
X-Fstrz
X-Instance-Name
X-Irp-Debug
Fastly-SSL
X-Cache-CFC
MI-Cache-Age
X-Secret
X-Wikidot-Backend
Server-Int
X-V
CDCHOST
X-Backend-Url
Cache-Cookie-Set-Idcheck
Cache-Cookie-Set-From
Cache-Cookie-Set-Lfrom
Decoy-Debug-TTL
X-Backend-Host
X-ServiceProvider
X-TT-LOGID
X-Developers
X-Up
X-Distil-CS
X-Distributor
REQUESTUUID
X-Request-URI
Fastly-Soc-X-Request-Id
IsBot
On-Server
X-Ua
X-Origin-Date
X-Origin-TTL
X-MSEdge-Flight
X-Servername
Request-Time
X-NX-Host
X-MSEdge-Features
X-Origin-Expires
X-Sn-Servicetimems
X-Refresh
X-ElasticPress-Search
X-Fastly-Cache
Magicmarker
X-Cdn-Origin
X-Debug-Cookies
X-Debug-Log
X-Core-Mission
Pagetype
X-Planisys-CDN-Cache
X-Page-Type
RequestId
X-Planisys-CDN-Rules
X-DC
X-Planisys-CDN-TTL
X-COUNTRY
PFcat
X-Pjax-Url
X-Req
Host-ID
X-BBXSRF
X-EIG-Tracking-Id
PageSpeed
X-Powered-By-ANYU
X-VarnCache
X-CACHE-AGE
X-Micro-Cache
X-PARISIEN-Cache-Rendered
X-Svr
X-Debug-Cache-Store
X-Debug-Cache-Fetch
X-NC
X-VarnPar1
X-Debug-Cache-Expiry
X-Newrelic-Synthetics
X-HOST
X-Level-Front-Cache
X-Generated-On
X-Instart-Info
Mime-Version
X-Datadome
MIME-Version
ServerName
Cache-Provider
Lfy
Cdn
PICS-Label
X-Cache-Info
Ohc-Response-Time
X-Gdpr
X-TWH-CORRELATION-ID
X-Server-Cache
X-Cdn-Srv
Cteonnt-Length
X-Cluster-Node
X-ARC
Memory
Nel
X-Servedbyhost
CF-IPCountry
FSS-Proxy
X-CMS-Context
FSS-Cache
X-Sentry-ID
X-StackifyID
X-NodeID
X-Hello
X-Aicache-OS
X-VServer
X-Wa
X-Fastly-Country-Code
X-Flog
X-ABtesting
X-Load-Cache
X-WR-MODIFICATION
SN
X-Varnish-Beresp-TTL
GeoIP-Country-Code
GeoIP-Latitude
CDN
X-LAGOON
X-Ratelimit-Remaining
Geoip-Latitude
X-HTML-Minification-Powered-By
XServer
GeoIp-Country-Code
X-GZip
X-Fastly-Backend-Reqs
NGX
X-WA
CACHE
X-CSRF-TOKEN
X-CSRF-Token
X-UPSTREAM-Address
TSSecure
X-Unique-Id
X-Check-Cacheable
X-Worker
X-MServer
X-Source
X-APP
Processtime
Amp-Access-Control-Allow-Source-Origin
X-Csrf-Token
X-DataStream-Origin-MEX-Latency
X-DataStream-MidMile-RTT
X-ServedByHost
A
Cf-Ipcountry
X-SplitTest
X-VWS-Id
X-LJ-Flow-ID
X-AWS-Id
PageType
X-Port
X-Oss-Storage-Class
WP-Super-Cache
X-Oss-Request-Id
X-CDN-Pop
X-FireWall-Port
X-Oss-Hash-Crc64ecma
X-Oss-Object-Type
X-CDN-Pop-IP
X-Oss-Server-Time
X-Varnish-Cache-Hits
HTTPS
X-RateLimit-Remaining-Second
X-Nananana
X-Dynatrace
X-Generation-Time
X-Edge-Server
Cdn-Request-Time
X-Cache-Miss-From
X-RateLimit-Limit-Second
X-Sedo-Request-Id
Cdn-Host
Cache-Hits
X-SRV
Odigeo-Trace-Id
X-GDPR
Pics-Label
X-Backend-TTL
X-Sucuri-Cache
URI
X-VC-Cache
X-Skip-Cache
X-FORWARDED-FOR
DataCenter
X-ID
X-Owner
X-Cache-Grace
X-Ms-Version
X-Ms-Blob-Type
X-Ms-Request-Id
X-Ms-Lease-Status
X-B3-Traceid
X-Fastly-Cache-Hits
ProcessTime
Server-Surrogate-Control
X-Varnish-Authentication
X-HS-Status
X-IPS-LoggedIn
X-Cache-ASPX
X-VG-WebCache
Server-Cache-Control
X-B3-SpanId
X-BE
X-Swift-Error
Hostname
X-SN
X-Gen-Id
X-RCS-Backend
X-PJAX-URL
Dynatrace
X-Bug-Bounty
X-Amzn-Remapped-Date
X-GZIP
X-From-Cache
X-Varnish-Url
X-Amzn-Remapped-Connection
X-GoCache-CacheStatus
X-Instart-Isnd
X-ORIG-AKA-EDGE
X-ND-Cache
X-Cache-Ttl
X-Cache-Srv
X-PAGE-TYPE
X-VarnPar2
X-Fe
X-NGINX-Cache
Requestid
X-Ms-Lease-State
X-Amz-Meta-S3b-Last-Modified
X-Akamai-SSL-Client-Sid
Serverid
X-Server-W
WebServer
X-LiteSpeed-Cache-Control
X-Varnish-URL
X-ServerName
X-Serial
X-VC
X-SB
RequestUuid
T-Server
X-Pf-Uncompressing
X-ORIG-AKA-COUNTRY-CODE
X-RAMCache
Is-Session-Tracking
X-Alicdn-Da-Ups-Status
NodeID
Get-Access-Time
Xet-Cookie
X-PF-Uncompressing
Proxy-Firewall
X-LiteSpeed-Tag
X-Akamai-ERRuleID
X-HTML-Edge-Cache
SID
X-RequestId
NnCoection
X-Akamai-ERPolicy
X-Developed-By
X-CS
Location
X-Dw-Trace-Id