Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
CF-RAY
CF-Cache-Status
Pragma
Link
X-Powered-By
ETag
Expect-CT
Via
X-XSS-Protection
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Pop
X-Xss-Protection
X-Amz-Cf-Id
Referrer-Policy
X-Served-By
X-Varnish
X-Timer
Access-Control-Allow-Headers
Access-Control-Allow-Methods
Alt-Svc
X-Download-Options
X-Request-Id
X-AspNet-Version
Access-Control-Allow-Credentials
X-FRAME-OPTIONS
X-Runtime
X-Drupal-Cache
X-Adblock-Key
X-Request-ID
X-Check
X-Generator
Content-Security-Policy-Report-Only
X-Cache-Status
X-Cacheable
X-Permitted-Cross-Domain-Policies
X-DNS-Prefetch-Control
Timing-Allow-Origin
X-Template
X-Iinfo
X-Language
X-AspNetMvc-Version
X-Content-Security-Policy
Status
X-Buckets
Content-Encoding
Access-Control-Expose-Headers
Upgrade
X-CDN
Xkey
Access-Control-Max-Age
X-Kinja-Server-Push
Keep-Alive
X-Drupal-Dynamic-Cache
X-Turbo-Charged-By
X-Via
X-Ua-Compatible
X-Cache-Group
X-Age
X-AH-Environment
X-Pass-Why
X-Envoy-Upstream-Service-Time
X-Backend
EagleId
X-Server
X-Amz-Id-2
X-Amz-Request-Id
X-Robots-Tag
X-Page-Speed
X-Pingback
X-Server-Powered-By
X-UA-Device
X-Swift-SaveTime
X-Swift-CacheTime
X-Proxy-Cache
X-Hacker
Ali-Swift-Global-Savetime
X-Nginx-Cache-Status
Request-Context
Grace
X-Varnish-Cache
Server-Timing
Feature-Policy
Cf-Railgun
X-Amz-Version-Id
X-Device
X-LiteSpeed-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-WebKit-CSP
X-Rq
Report-To
X-Ac
EagleEye-TraceId
X-Response-Time
X-OneAgent-JS-Injection
X-Server-Id
X-Host
X-Cnection
X-Backend-Server
X-DataDome
Request-Id
Content-Location
X-Node
X-Cloud-Trace-Context
X-Origin-Cache
X-Readtime
X-Cache-Lookup
NEL
X-Vhost
X-Application-Context
X-Dispatcher
X-ORACLE-DMS-ECID
X-Ws-Request-Id
X-HW
X-Cdn
X-ORACLE-DMS-RID
Allow
X-Dns-Prefetch-Control
X-Clacks-Overhead
X-Rack-Cache
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Origin-Upstream-Status
Surrogate-Control
X-DynaTrace
X-Country
Rating
X-FTR-Request-ID
X-Country-Code
Fusion-Content-Source
Fusion-Template-Id
X-Goog-Hash
Fusion-Source
Fusion-Content-Id
Fusion-Component-Id
X-Akam-SW-Version
X-Varnish-TTL
X-Vname
X-PC
X-TtlSet
Pinterest-Generated-By
X-Instart-Request-ID
X-Ruxit-JS-Agent
X-Url
X-MS-InvokeApp
Edge-Control
X-Mod-Pagespeed
Verso
X-B3-TraceId
X-Powered-By-Plesk
SPRequestGuid
Accept-Ch
X-D2id
X-Trace
X-Sol
X-Middleton-Response
Pagespeed
Response
X-SharePointHealthScore
X-Middleton-Display
Display
X-VARITI-CCR
RTSS
Service-Worker-Allowed
X-Exp-Variant
X-Cdn-Fetch
X-Kinja
X-Server-Name
X-Use-Magma
X-Kinja-Server
X-Kinja-Revision
X-Kinja-Build
X-GoogleNews-Bot
X-Exp-Id
X-Server-ID
X-GitHub-Request-Id
X-ESI
SPRequestDuration
SPIisLatency
X-Navigation-Version
Content-MD5
X-Powered-CMS
X-Debug
X-Abt-Application-Version
X-Vcache
X-TTL
X-Vcap-Request-Id
Accept-Ch-Lifetime
X-CST
Public-Key-Pins
X-Amz-Server-Side-Encryption
MS-Author-Via
Charset
X-Upstream
X-Forwarded-Proto
X-Cached
X-NF-Request-ID
X-Version
X-Amz-Rid
X-Px
DynaTrace
Realpath
Edge-Cache-Tag
X-Shard
TCN
MicrosoftSharePointTeamServices
Fastly-Restarts
Arr-Disable-Session-Affinity
X-Ezoic-Cdn
X-MSEdge-Ref
Access-Control-Request-Method
X-DynaTrace-JS-Agent
X-Pinterest-Rid
Pinterest-Version
X-Shield-Request-Id
X-Ser
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Recruiting
X-TEC-API-VERSION
X-TEC-API-ROOT
S
X-TEC-API-ORIGIN
X-Fastly-Request-ID
X-Goog-Generation
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-XRDS-Location
X-DIS-Request-ID
X-Accel-Expires
Nginx-Cache
Front-End-Https
X-Trafficlayer-App-Scope
X-Trafficlayer-App-Name
X-Amz-Meta-S3cmd-Attrs
X-Client-IP
X-Goog-Storage-Class
X-Id
X-Varnish-Age
X-Element-Page-Cache
X-T
X-B3-TraceId-Primal
MRF-Tech
Mrf-Cache-Status
X-Mrf-Item-Lastmod
X-Mrf-Section-Lastmod
X-FTR-Backend-Server
X-FTR-Backend
X-FTR-Balancer
X-FTR-Cache-Status
X-FTR-Realm
X-FTR-DC
X-Country-Code-Real
X-FTR-Expires
X-Amzn-Trace-Id
X-Ttl
X-Dw-Request-Base-Id
Cache-Tag
Fastcgi-Cache
X-HS-Hub-Id
X-HS-Content-Id
X-Content-Digest
NR-ENABLED
X-Frontend
X-RateLimit-Remaining
Powered
X-HS-Cache-Config
X-Hits
X-Correlation-Id
X-Kinsta-Cache
X-Webapp-Samesite-None-Activated-N
X-Litespeed-Cache
X-Fastcgi-Cache
X-Grace
X-FTR-Cache-Host
ServerID
X-Aspnetmvc-Version
Alternate-Protocol
X-Webkit-Csp
X-Hp-Webp
TP-Cache
TP-L2-Cache
X-Node-Name
X-Cache-Hit
X-Request-Received
X-Request-Processing-Time
X-N
X-Request-Handler-Origin-Region
X-Microsite
PB-RID
PB-PID
Arc-Version
X-Mobile-Rewrite
AMP-Access-Control-Allow-Source-Origin
Server-Name
X-Zen-Fury
X-Rid
X-User-Agent
Healthy
X-Content-Type
Backend-Timing
X-Analytics
X-Revision
X-Forwarded-For
AR-CACHE
AR-ATIME
X-HS-Combine-CSS
AR-PoweredBy
Ar-Sid
Server-Node
X-Akamai-Edgescape
X-LB-Cache
X-Content-Security-Policy-Report-Only
X-Logged-In
X-FastCGI-Cache
X-AppVersion
X-Activity-Id
X-Az
Cache-Status
X-Pad
X-GUploader-UploadID
X-IPLB-Instance
X-Amzn-RequestId
Retry-After
X-Oneagent-Js-Injection
X-Amz-Apigw-Id
X-Cached-By
X-NWS-LOG-UUID
Accept-CH
Accept-CH-Lifetime
X-Srv
X-Type
X-Varnish-Grace
X-Mobile-URL
Paypal-Debug-Id
X-B3-Sampled
X-Via-JSL
X-Ruxit-Js-Agent
X-Content-Options
Refresh
X-F-Cache
FilterID
Upgrade-Insecure-Requests
X-Cache-Age
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Geo-Country
Accept-Charset
X-FB-Debug
X-Instance
X-Debug-Info
X-Cluster
X-Jobs
X-App-Environment
Host
Source
X-Page-Id
X-AOL-HN
X-Request-Guid
X-B
X-PHP-Backend
X-Erf-Bev-Bev
X-Erf-Bev-Bev-Is-Generated
Actual-Object-TTL
Access-Control-Allow-Method
X-Varnish-Backend
X-Framework
AR-Request-ID
DC
X-Seen-By
X-ATG-Version
X-WebKit-CSP-Report-Only
X-Cache-Key
MS-CV
X-Content-Powered-By
Fastcgi-Useragent
X-TT
X-PressLabs-Stats
X-Whom
X-Git-Hash
VIX-Pulpo-Node
VIX-Pulpo-Upstream-Status
X-Cache-2
X-Cache-TTL
X-Esi
X-Host-Name
X-Cache-Control
X-TA-CDN-Provider
X-Amz-Replication-Status
X-UA
X-Wix-Request-Id
Surrogate-Key
Cache
X-Signature
Host-Header
X-Daa-Tunnel
X-B-Cache
X-Cache-Operation
NGB
X-Cache-Rule
X-Response-Served-From
X-FW-Hash
X-FW-Server
X-FW-Type
Frame-Options
X-FW-Static
X-FW-Serve
Xserver
X-Origin-Server
X-Ah-Environment
X-Kong-Upstream-Latency
X-Kong-Proxy-Latency
X-Tumblr-Pixel-2
Cache-Tv-Group
X-Tumblr-Pixel-1
X-Cache-NE
WPE-Backend
X-RequestSource
X-Hyper-Cache
Payment
X-Region
X-Drupal-Cache-Tags
Cleartype
X-Cache-Action
X-GeoIP
Webserver
X-Forwarded-Host
X-Adobe-Content
X-Cache-Enabled
X-Adobe-Loc
X-TX-ID
X-Handled-By
X-Mobile
X-Cacheable-TTL
Eomportal-Instance
X-SERVER
Filters
From-Origin
X-Time
X-UA-Device-Type
X-RemovedCookies
X-ProcessESI
X-EdgeConnect-Cache-Status
Datacenter
X-RTag
Ms-Operation-Id
X-Load-Cache
X-Akamai-Transformed
X-Hostname
X-App-Server
X-NewRelic-App-Data
X-Cache-TTL-Remaining
Tracecode
X-Cache-Server
X-Status
X-Contextid
X-Edge-Location
Liferay-Portal
X-VCache
X-XRDS-LOCATION
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-BCube-Filmed-By
X-Varnish-Hostname
X-TT-TIMESTAMP
X-Varnish-Server
Odigeo-Trace-Id
X-Rule
X-ATS-Timestamp
X-Cache-Var
Meta-Geo
X-FW-Dynamic
Server-Info
X-Cache-Var-Map
X-ES-SERVER
X-Path-Route
X-RN-RSRV
Load-Balancing
Country
X-Xfnlog-Site
X-Debug-Cache
X-Via-Fastly
X-PCL
X-Viewer-Country
X-Rocket-Nginx-Bypass
DB-Nickname
X-OCL
Version
X-Upgrade-Enabled
X-Redis-Cache
X-Web-Node
X-Origin-Response-Time
X-Real-IP
Cache-Tags
X-CCM
X-Proxy
Fastly-SSL
S-Rt
L5d-Success-Class
X-Proto
Azure-Version
Azure-SlotName
X-ServerID
X-Cache-Time
X-TNCMS
X-Cache-Config
Azure-InstanceId
Azure-SiteName
Azure-RegionName
X-UUID
Mn-Server-Ip
X-Varnish-Cache-Hits
TWC-GeoIP-Country
TWC-GeoIP-LatLong
X-FC-Vary-Parameters
X-Origin-Hint
X-IP
X-Drupal-Cache-Contexts
TWC-Connection-Speed
TWC-Locale-Group
TWC-Privacy
Webcakes-App-Version
X-Labrador-Cache-Channel
Webcakes-Region
X-Cache-Host
Webcakes-App-Name
X-From
X-Loop
X-Hosted-By
TWC-Device-Class
X-Akamai-Request-ID
X-Origin
Property-Id
X-R9-Blue-Green-Version
X-EIG-Tracking-Id
Cache-Name
X-RateLimit-Limit
Release
X-Format
DSUID
X-Generated
Viewport
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Access
X-Human
X-Info
X-Content-Age
X-Proxy-Build
X-VCT
Ec-Rule-Version
NGX
X-Section
X-Pubstack
X-Backend-Name
Selected-Fe
X-JoinUs
Origin-Edge-Control
X-FireWall-Port
X-Rendered-As
X-Timing-Wait
X-Cluster-Name
Origin-Cache-Control
S-Cnection
X-PERF
X-NWS-UUID-VERIFY
X-Soup
X-ApacheServer
Decoy-Debug-Key
X-Varnish-Hits
Decoy-Debug-Status
Decoy-Debug-TTL
X-Www-Served-By
X-Akamai-Request-ID2
X-Vgn-Hpd-Reason
X-Origin-TTL
X-Time-Microsecs
X-Origin-CC
X-Oss-Hash-Crc64ecma
X-Oss-Object-Type
X-Oss-Server-Time
X-Oss-Request-Id
X-Oss-Storage-Class
X-Locale
X-Site-Version
X-Is-Bot
X-B3-Traceid
X-ProxyCache-Key
X-ProxyCache-Status
Rt-Fastcgi-Cache
Uber-Trace-Id
X-BYPASS-REASON
X-Storage
X-ORACLE-APMCS-REQUEST-ID
X-ORACLE-APMCS-TAG
X-WA-Info
X-PHP-Host
X-Generated-By
X-Cache-Backend
Cache-Key
X-Amzn-Remapped-Content-Length
Akamai-GRN
Time
X-Accel-Buffering
X-SS-Set-Cookie
Cteonnt-Length
X-GoCache-CacheStatus
X-App-Version
X-Guploader-Uploadid
X-Hit
Cache-Hits
X-NCache
GEO-INFO
Vix-Hermes-Req-Id
X-Cache-Remote
X-Backend-TTL
X-Tec-Api-Root
X-Tec-Api-Origin
X-Tec-Api-Version
Origin
X-Nginx-Cache-Key
X-Cache-Grace
X-APP-VERSION
X-CF-Powered-By
X-Trace-Id
X-FB-TRIP-ID
X-Presslabs-Stats
X-Device-Type
X-CS
X-SaId
X-Environment-Context
X-L-Path
X-Tumblr-Pixel-3
X-No-Session
X-Tb
Accept-Language
X-MServer
X-OVcl
X-OVcl-Cache
X-S
Access-Control-Request-Headers
X-URL
X-Say-TTL
X-B3-SpanId
X-SayCDN-TTL
X-Say-Cacheable
X-Cluster-Node
X-Geo
X-Uri
Fastcgi-X-Cache-Version
X-CACHE-KEY
X-CDN-Forward
Mime-Version
X-Via-CDN
Hostname
User-Cache-Control
MD5-Digest
Meta-Geo-Continent
X-D
X-Svr
X-SIPLIST1
X-Session-Fingerprint
X-SRCache-Key
Machine
X-Rojux
X-External-Request-Id
Cross-Origin-Window-Policy
X-DPWN-IS-SECURE
X-Detected-As
X-Processor
Content-Style-Type
X-PAYTM-SRV-ID
X-G
Content-Script-Type
X-Destination
X-ARC
IsBot
X-ScT
X-Date
X-S-Cookie
X-Application
X-Region-Sid
X-Request-UUID
X-Rewrite-Enabled
X-Server-Time
X-Trv-Group
X-CF-Lambda-Fn
Apple-News-Services-Request-Url
X-A-Dcw
X-A-Dam
Xc-Version
X-CF-Lambda-Version
Arc-Country
Mobile-Detection-Method
Rt-Proxy-Cache
X-A-Ccd
T-Server
X-A
X-Accel-Expires-Debug
Apple-News-Services-Host
VivaBuild
Viewtype
Apple-News-Services-Parsed-Url
X-Aed
X-Hl-Ver
X-Unique-Id
AsisCache
X-Twitter-Response-Tags
Node
X-A-Dgt
X-A-Wwc
Now
X-Connection-Hash
X-Transaction
X-UnsetCookies
Rendered-Blocks
Request-Country
X-Vtex-Remote-Cache
X-AIR-PT
BehaviorPad-Version
X-B-Cookie
X-Vtex-Processado-Em
X-VG-WebCache
X-VG-WebServer
Request-EU
Apple-News-Services-Handled
X-Endurance-Cache-Level
X-FW-Version
ServerName
X-CSRF-TOKEN
CDCHOST
X-Gen-Mode
X-Cms-Context
X-Cache-Info
Thinkindot-Control
Thinkindot-CacheControl-Type
Web-Mar-Node
X-Cache-Debug
X-Block-Status
X-Cache-Bucket
Thinkindot-CacheControl
Server-Int
X-Core-Value
X-Debug-Cookies
X-Hnp-Log
X-Clara-WADP
RNT-Time
RNT-Machine
X-Debug-Log
OT-Force-Account-Verify
Mail-Subject
X-Proxy-Upstream
X-Reboot
We-Hiring
X-Location
X-Matched-Rule
X-Proxy-Cache-Status
X-S-Maxage
Srv
Server-Host
X-NX-Host
X-WADP-Cache
X-Thinkindot-L3
X-Service
X-NC
NtCoent-Length
X-B3-Parentspanid
X-Alternate-Cache-Key
X-Sorting-Hat-PodId
X-Shopify-Stage
X-Sorting-Hat-ShopId
X-ShopId
X-ShardId
ServedBy
Served-By
X-Cache-URL
X-Cache-Id
Wxu-Next-Commit
X-Cdn-Srv
Cache-Host
X-WebServer
X-We-Are-Hiring
X-Is-Gdpr
X-Wikidot-Backend
X-CGP
Wxu-Next-Hostname
X-Wikidot-Static-Cache
Kp-EeAlive
X-Cache-FS-Status
X-Ms-Version
X-Ms-Request-Id
X-JWT-State
X-C
X-Reqid
X-Backend-State
X-Webstats-RespID
X-User
X-Azure-Ref-OriginShield
X-Level-Front-Cache
X-Instart-Isnd
X-Dispatch
X-CUA
X-VServer
X-Dispatcher-Server
X-Generated-On
X-IN-APIGATEWAYSSL
X-IN-APIGATEWAY
X-Hash
Wxu-Next-Region
X-Clientip
X-LI-UUID
X-Magnolia-Registration
X-Azure-Ref
X-Eu-Site
X-Epic-Correlation-Id
X-Distil-CS
X-Distributor
X-Li-Pop
X-Policy
X-Fastly-Cache
X-GeoIP-City
X-Old-Content-Length
X-Has-Esi
X-Origin-Date
X-Geo-Header
X-Platform-Server
X-Origin-Expires
X-Generation-Time
X-Developers
X-Li-Fabric
X-TrackingId
X-Core-Mission
X-Key
X-Up
X-Compress-Hint
X-VC-Cache
X-Method
X-Variation
X-SVT-ORM-VERSION
X-SVT-ORM-RULES
X-Request-URI
X-Request-Start
X-Irp-Debug
X-Debug-Cache-Fetch
X-Scheme
X-Skip-Cache
X-SD-PageType
X-Debug-Cache-Expiry
X-VG-TLSProxy
X-Debug-Cache-Store
Is-Eu
IBM-Web2-Location
HA-Ipaddr
L
Magicmarker
SD-X-WS
Platform
PFcat
Ha-Gx-Prefs
Gh-Request-Id
Countrycode
Content-Disposition
X-Parent-Response-Time
Esi-Enabled
AKAMAI
Fastly-Soc-X-Request-Id
Adler-Geo
Section-Io-Cache
Memcached
X-7Graus-Varnish-Cache-Control
W
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Status
X-7Graus-Varnish-XKeys
X-Varnish-Beresp-Grace
X-Auto-Login
X-App-Name
X-Amz-Meta-Cache-Control
X-Shopify-Generated-Cart-Token
X-Dc
X-Nc
X-LI-Proto
X-Sigma-Backend
X-Internal-Host
X-Swa-Ws
X-Thanos
Heartbleed
X-Sucuri-Cache
X-Agile
Pramga
X-Server-IP
X-MSEdge-Features
X-BBXSRF
X-Qloud-Router
X-Owner
X-Bip
X-Logging-Id
Proxy-Connection
X-RateLimit-Limit-Second
X-Generated-In
X-Agile-Age
X-Release
X-MSEdge-Flight
X-RateLimit-Remaining-Second
X-Agile-Id
X-Rocket-Build-Number
X-Sigma
X-Vdms-Version
True-Client-Country-4JS
X-EC-Lua
Cache-Provider
Server-ID
A
X-B3-Spanid
V-Age
X-ServiceProvider
Cdnsip
Locale
X-Developer
X-Planisys-CDN-Cache
X-Urbn-Site-Id
Cdncip
X-Planisys-CDN-Rules
X-Urbn-Context-Path
X-Planisys-CDN-TTL
X-AK-Request-ID
X-Cdn-Forward
CF-IPCountry
X-RCS-CacheZone
X-Servername
X-Upstream-Ht
X-Cdn-Origin
X-Upstream-Ct
X-NodeID
X-Sn-Servicetimems
Powered-By-ChinaCache
X-Via-NSCOPI
X-Source
X-GRACE
X-Sucuri-Id
X-ND-Cache
X-Node-Id
X-Device-Os
GEO-REGION-INFO
Environment
X-FPC
X-Be
X-Trafficlayer-App-Version
X-Lb-Id
X-SRV
X-VHOST
X-Nginx-Cache
Tcn
X-Servedbyhost
X-Req
X-Newrelic-Synthetics
Geo-Info
X-Microcachable
Locid
X-Webkit-CSP
X-TIME
X-Zone
FNAC-ModuleRouting
Request-Time
X-Gamma-Serve
X-Tb-Optimization-Total-Bytes-Saved
X-Served-From
Resin-Trace
X-Sucuri-ID
X-Pjax-Url
X-Refresh
X-FORWARDED-FOR
X-Instart-Info
X-ElasticPress-Search
Memory
X-ECACHE
X-Pf-Uncompressing
CF-Cached-On
X-HTML-Minification-Powered-By
X-NGENIX-Cache
X-VCL-Version
X-Backend-Host
Group
X-VWS-Id
ProcessTime
X-AWS-Id
X-DC
X-COUNTRY
X-Backend-Url
X-IPS-LoggedIn
X-LJ-Flow-ID
X-Render-Time
Gannett-Cam-Experience-Id
X-Correlation-ID
X-Var-Ttl
TTL
X-NU-AKA-ACS-Version
Amp-Access-Control-Allow-Source-Origin
X-Ratelimit-Remaining
Backend-Name
X-CSRF-Token
X-Unique-ID
Geoip-City
N-Cache
GeoIp-Country-Code
Geoip-Latitude
X-Pod
Cf-Ipcountry
X-GEO
PICS-Label
X-GeoIP-Country-Code
Pics-Label
M-TraceId
Pagetype
REQUESTUUID
Fly-Cache
Cache-Prefix
X-Mode
Fly-Request-Id
Lfy
X-Via-Edge
GeoIP-Latitude
GeoIP-City
GeoIP-Country-Code
Cdn
X-Via-SSL
X-Check-Cacheable
XServer
X-MP-GENERATED-AT
MIME-Version
X-Bc
X-Vcl-Version
Ttl
SRV
X-APP
X-Worker
X-ZONE
X-CLOUD-TRACE-CONTEXT
X-Fstrz
X-Via-Ucdn
Request-ID
Ohc-Cache-HIT
X-Ratelimit-Limit
Ohc-File-Size
X-Cache-Miss-From
X-Sedo-Request-Id
X-LiteSpeed-Cache-Control
X-Upstream-HT
X-Upstream-CT
HostName
X-Fetched-On
X-PF-Uncompressing
Host-ID
HitType
X-Server-W
X-Zipkin-Id
X-Routing-Service
Fastly-SIE
Fastly-SWR
X-Fastly-Country-Code
Cache-Cookie-Set-Lfrom
Cache-Cookie-Set-Idcheck
Cache-Cookie-Set-From
X-Proxied
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
X-HS-Status
X-Wa
X-Swift-Error
X-NGINX-Cache
X-Dynatrace-Js-Agent
X-BC
X-Cache-Tag
X-Cdn-Request-ID
CACHE
X-Oracle-Dms-Rid
Pragrma
User-Agent
URI
X-PJAX-URL
X-ServedByHost
On-Server
X-HostName
X-Dynatrace
X-Aicache-OS
X-TH-Server
X-Tt-Trace-Tag
X-WR-MODIFICATION
X-TT-LOGID
Who
Powered-By
X-WA
X-UPSTREAM-Address
X-GDPR
X-RateLimit-Reset
CDN
X-Request-Time
Cdn-Host
X-BE
X-Edge-Server
X-Edge-O15-RID
X-Fastly-Backend-Reqs
Cdn-Request-Time
X-Ua
Dynatrace
X-Hello
X-Varnish-Cacheable
X-ABtesting
X-LAGOON
X-Flog
X-Fpc
X-SN
X-LB-ID
X-Varnish-URL
Media-Length
X-Cf-Powered-By
DataCenter
X-DSS
X-ServerName
X-Org
X-RSL
X-DW
X-Action
SN
X-Response-By
Server-Id
X-DB
SS
LB
Is-Session-Tracking
Get-Access-Time
Debug
X-RPM
X-RPS
X-DI
X-Ftr-Cache-Host
X-Cache-Ttl
X-Varnish-Beresp-TTL
X-Gen-Id
X-Protected-By
FSS-Cache
FSS-Proxy
X-Upstream-Proxy
Requestid
X-Nananana
NnCoection
Processtime
Cneonction
XxX-Cache-Status
X-Tt-Trace-Host
RequestId
Warning
X-Request-Url
X-Li-Proto
SID
X-Fastly-Cache-Hits
Product
Thinkindot-Cache-Type
X-Dw-Trace-Id
X-Akamai-ERPolicy
X-LiteSpeed-Tag
X-Akamai-ERRuleID
X-Amzn-Remapped-Connection
X-Amzn-Remapped-Date
Application