Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Pragma
Last-Modified
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
P3P
X-XSS-Protection
X-Cache
X-AspNet-Version
CF-RAY
Strict-Transport-Security
X-Pingback
Age
Content-Language
Via
X-UA-Compatible
Access-Control-Allow-Origin
X-Adblock-Key
X-Varnish
X-Xss-Protection
X-Cacheable
Upgrade
X-Check
X-Template
X-Language
Content-Security-Policy
X-Generator
X-Buckets
X-Drupal-Cache
X-AspNetMvc-Version
X-Request-Id
X-Type
X-Cache-Group
X-Pass-Why
X-Powered-By-Plesk
X-Hacker
X-Ac
Content-Location
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Runtime
X-Download-Options
Host-Header
X-ShopId
MS-Author-Via
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PodId
X-ShardId
X-Dc
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-Section
X-Alternate-Cache-Key
Cartoon
X-IPLB-Instance
Alt-Svc
X-Powered-CMS
X-Request-ID
X-UA-Device
Status
X-Served-By
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
X-Amz-Cf-Id
Access-Control-Allow-Methods
X-Ua-Compatible
X-Via
X-Backend
X-Iinfo
X-Cache-Status
X-ServedBy
X-Contextid
X-Timer
Powered-By
WPE-Backend
X-PC-Key
X-PC-Hit
X-PC-Date
X-PC-AppVer
X-PC-Host
X-Mod-Pagespeed
X-Tumblr-Pixel-0
X-Tumblr-User
X-Tumblr-Pixel
X-Server
X-Logged-In
CF-Cache-Status
Keep-Alive
X-Cache-Hit
X-Tumblr-Pixel-1
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
P3p
X-Port
X-DIS-Request-ID
X-CDN
Content-Encoding
X-Tumblr-Pixel-2
X-Host
X-CST
X-Server-Powered-By
X-Robots-Tag
WP-Super-Cache
X-Cache-Enabled
X-Seen-By
X-Wix-Request-Id
X-Wix-Renderer-Server
X-Rid
X-Pad
X-Nginx-Cache-Status
Referrer-Policy
X-Page-Speed
X-Endurance-Cache-Level
X-Turbo-Charged-By
Fastly-Debug-Digest
X-Tumblr-Pixel-3
X-Accel-Version
X-Wix-PunisherID
X-Content-Powered-By
X-Rack-Cache
X-Varnish-Cache
X-Forwarded-For
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
Surrogate-Key-Raw
X-Content-Digest
X-Drupal-Dynamic-Cache
X-Forwarded-Proto
Content-Security-Policy-Report-Only
X-AH-Environment
X-Died
X-Proxy-Cache
X-GitHub-Request-Id
SPRequestGuid
X-Cnection
X-SharePointHealthScore
MicrosoftSharePointTeamServices
X-Request-Country
X-Original-Date
X-MS-InvokeApp
X-Cache-Lookup
X-XRDS-Location
X-Safe-Firewall
Cf-Railgun
X-LiteSpeed-Cache
X-Tumblr-Pixel-4
Request-Id
MicrosoftOfficeWebServer
Timing-Allow-Origin
Edge-Control
X-Amz-Id-2
X-FullPageCaching
X-Amz-Request-Id
Charset
X-CF-Powered-By
X-Node
Rating
X-FW-Hash
SPIisLatency
X-Webserver
SPRequestDuration
Content-MD5
Composed-By
X-FW-Static
X-FW-Serve
X-FW-Type
X-Content-Security-Policy
X-PhApp
X-INKT-SITE
X-INKT-URI
X-AWS-Id
X-LJ-Flow-ID
X-VWS-Id
X-Hits
Access-Control-Max-Age
X-Tumblr-Content-Rating
X-Hyper-Cache
X-Swift-CacheTime
X-Swift-SaveTime
EagleId
X-CDN-Pop
Served-By
X-CDN-Pop-IP
X-Spip-Cache
Access-Control-Expose-Headers
Liferay-Portal
X-HS-Cache-Config
Edge-Cache-Tag
X-HS-Content-Id
Grace
X-Device
X-Firenze-Processing-Times
X-Newrelic-App-Data
X-Server-Name
X-Backend-Server
X-BC-Stapler
X-Microcache
X-Dw-Request-Base-Id
X-Fastly-Request-ID
Request-Context
X-RateLimit-Remaining
X-RateLimit-Limit
X-ServerName
X-User-Agent
Public-Key-Pins
X-RateLimit-Reset
Content-Style-Type
X-Jimdo-Instance
X-Jimdo-Wid
Content-Script-Type
X-Cache-Config
X-FB-Debug
X-DDC-Arch-Trace
X-Acc-Exp
X-VCache
X-Cloud-Trace-Context
X-Clacks-Overhead
Xkey
X-Tec-Api-Version
X-Tec-Api-Origin
X-Tec-Api-Root
Fpc-Cache-Id
Front-End-Https
X-Loop
Real-Hostname
Refresh
X-TNCMS
X-Tumblr-Pixel-5
X-XN-Trace-Token
X-XN-XNHTML
X-Age
X-Hostname
X-Cached
PageSpeed
X-Generated-By
X-DNS-Prefetch-Control
Surrogate-Key
Surrogate-Control
X-Px
X-N-OperationId
X-LiteSpeed-Cache-Control
Display
Response
X-Pantheon-Phpreq
X-Sol
X-Pantheon-Environment
X-Pantheon-Site
X-Middleton-Response
X-Middleton-Display
X-Url
X-Cached-By
X-WebKit-CSP
X-MiniProfiler-Ids
X-Microcachable
X-Zen-Fury
X-StackifyID
X-Content-Options
Edge-Control-Message
X-SS-Conf
X-SS-Location
X-Request-Time
X-CMS-Version
X-Topify-Platform
Rt-Fastcgi-Cache
X-Outils-CS
X-DynaTrace-JS-Agent
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Tumblr-Pixel-6
X-Amz-Version-Id
TCN
X-PERF
X-ApacheServer
Access-Control-Request-Method
X-OneAgent-JS-Injection
X-Umbraco-Version
Alternate-Protocol
X-DynaTrace
X-AspNetWebPages-Version
Product
X-Handled-By
X-Whom
X-Cache-Rule
X-Ruxit-JS-Agent
X-SERVER
X-URL
Imagetoolbar
Host
X-Kinsta-Cache
X-Recruiting
WZWS-RAY
X-Powered-By-360WZB
X-Varnish-Cache-Hits
X-Magento-Tags
X-NWS-LOG-UUID
Powered
X-Engine
X-Micro-Cache
X-Varnish-TTL
DynaTrace
X-Edge-Location
X-Track
Fhost
X-CacheServer
P-WS
Generator
P-LB
X-Vtex-Processed-At
X-Vtex-Remote-Cache
X-Vtex-Processado-Em
X-Location-Id
X-VTEX-Janus-Router-Backend-App
X-FORWARDED-FOR
X-Goog-Hash
X-VTEX-Cache-Status-Janus-ApiCache
No
X-Powered-By-VTEX-Janus-ApiCache
X-Correlation-Id
X-Powered-By-VTEX-Janus-Edge
X-Cache-Age
ServedBy
X-Varnish-Backend
X-Response-Time
Origin
X-Application-Context
X-I-Sp
X-Fastcgi-Cache
X-LB-Node
X-Hosted-By
X-Varnish-Host
X-LB
X-BS
X-Instart-Request-ID
Fastcgi-Cache
X-LBLID
X-Upstream
X-B-Cache
X-RESOURCE
X-Cache-TTL
Content-Hash
Akamai-IP
X-Origin
X-Revision
IBM-Web2-Location
X-HOST
X-URLSCHEME
X-Developer
X-Msg-2-Log
Expect-CT
Arr-Disable-Session-Affinity
X-Page-Cache
X-From
Pool
X-Dispatch
HTTPS
X-Actual-URL
X-Varnish-Beresp-Ttl
X-Returned-From
X-Varnish-Beresp-Status
X-Passed-To
X-Source
X-Passed-To-DLL
X-Returned-From-DLL
X-Original-Request
X-Platform
X-Varnish-Beresp-Grace
X-Stale
X-Passed-To-BeforeDispatch
X-Returned-From-PostProcessResponse
X-NetCat-Version
X-Passed-To-PostProcessResponse
X-Varnish-Cacheable
X-Returned-From-BeforeDispatch
X-App-Hosting
X-Shop-Id
X-I
X-Front
X-Defender
X-Cache-Only-Varnish
X-Internal-ReqID
X-Device-Type
X-Powered-By-VelaWeb
X-UD-Method
X-Storage
X-Github-Request-Id
X-TransIP-Balancer
X-S
X-Cache-Info
X-Rocket-Nginx-Bypass
Dmn
X-Daa-Tunnel
X-Cache-Debug
X-Matrix-Proxy
X-VTEX-Cache-Status-Janus-Edge
Powered-By-ChinaCache
X-Matrix-Server
X-Platform-Router
X-Translation
X-Content-Encoded-By
X-Microcache-Status
X-Platform-Processor
X-Platform-Cluster
Cache-Tag
X-Cache-Tags
X-Version
X-Cache-Operation
X-Signature
Ohc-File-Size
X-Akamai-Transformed
X-Accel-Expires
X-Cache-Lifetime
Node
X-Route-Server
X-Director
Version
X-Expires-Orig
X-EdgeConnect-Origin-MEX-Latency
Last-Published
X-Varnish-Count
X-Akamai-Device-Characteristics
X-TransIP-Backend
X-Varnish-HitMiss
X-Supported-By
X-Correlation-ID
USPLoggingUUID
MIME-Version
X-Hypernode
X-Art-Request-Id
X-Firenze-Processing-Time
X-NoCache
X-Dispatcher
X-Varnish-ObjectSource
X-Varnish-GracePeriod
Content-Encoding-Handler
X-Gamma-Serve
X-Varnish-RemainingTTL
X-Varnish-RemainingLife
X-TTL
X-Varnish-Seen-By
X-EdgeConnect-MidMile-RTT
X-Duration
Page-Completion-Status
Cache-Key
SSPAppContext
X-CDN-Cache-Status
X-SE-Debug
X-Abuse
X-Server-ID
X-Orig-Vary
Content-Disposition
X-CDN-Node
X-Cache-Key
X-Server-Upstream
X-Cache-Control-Orig
X-Flow-Powered
X-HS-Content-Campaign-Id
Srv
X-Proxy
FAI-W-FLOW
ServerName
X-F-Cache
X-ARC
IM-Version
X-Platform-Server
Lsrequestid
X-Cookie-Domain
X-Magento-Cache-Debug
Proxy-Connection
X-Amz-Meta-S3cmd-Attrs
ServerID
X-Varnish-Age
X-Platform-Cache
X-SV-Expires
X-SV-CreatedAt
X-SV-Duration
X-SV-Cacheable
X-SV-FromDBCache
X-SV-Nginx-Duration
X-Sucuri-ID
X-SV-Edge
X-SV-Pid
X-SV-CacheTags
S-Cnection
X-UPSTREAM
X-Debug
Cneonction
X-Nbs
X-ATG-Version
X-Content-Age
X-CJ-Soft
X-SSL-Cipher
X-SSL-Protocol
X-Sucuri-Cache
X-Vcap-Request-Id
X-Server-Id
X-PwB-Node
PICS-Label
X-Srv
Allow
X-Last-Modified
X-GeoIP-Country-Code
X-Browser
X-Processed-By
X-Edge-IP
X-Geo-Country
X-SRCache-Key
X-Cache-Engine
X-Client-IP
X-Cache-Expires
X-Cache-Server
X-Abgroup
X-Country-Code
X-Real-Server
If-Modified-Since
X-SDS
X-RequestId
X-VC-TTL
X-VC-Enabled
X-AOL-HN
X-Speed-Cache
X-GUploader-UploadID
X-ServerID
X-Lambda-Id
X-Goog-Stored-Content-Encoding
X-Varnish-Hits
X-Always-Cache
X-Goog-Storage-Class
X-Goog-Metageneration
X-Processing-Time
X-Speed-Cache-Key
X-Goog-Generation
X-Goog-Stored-Content-Length
X-ORACLE-DMS-ECID
X-Dns-Prefetch-Control
X-Shield-Request-Id
X-Url-Base
X-TB-M
X-NB-Cached-Page
X-GeoIP-Country-Name
Qs-Cache
X-Middleware-Start
CacheControlHeader
Accept-Encoding
X-Grace
NetMindSessionID
AMF-Ver
X-Cache-Control
SN
MC
Cm-Server
Location
X-Time
X-Litespeed-Cache
X-Sapient
X-Discourse-Route
Fw-Via
X-Cache-Type
A-Powered-By
HCVer
HAVer
X-Magnolia-Registration
NnCoection
X-Framework
X-Akamai-Device-Model
X-IsCacheURL
X-Transaction
X-BackendServer
Backend
X-Twitter-Response-Tags
X-Connection-Hash
S
Magicmarker
X-Drectory-Script
X-Served-Server
Pv
X-Purge-URL
Use-Proxy
X-Fastly-Request-Id
Section-Io-Id
Author
X-Traffic
X-AF-Userserver
Tracecode
X-Route-To
X-Internal-UserID
RTSS
Server-Name
X-FW
X-Frontend
X-Loopia-Node
X-Varnish-IP
X-Sys-Req-ID
X-OpenCart-Lightning
X-Id
X-N
X-BKSrc
X-Nginx-Cache
X-Ttl
X-DealerOn
X-Worker
X-Config-Blacklist-Version
Nodo
SVR
Req-Id
X-Session-ID
Accept-Charset
WSR-Cache
EagleEye-TraceId
Cache-Provider
X-JG-Page-Cache
X-Cache-Fix
X-Purge-Host
X-Cache-PageType
Content-Transfer-Encoding
SS
X-Unique-ID
X-FireWall-Port
Retry-After
WN
X-Cache-Device-Type
Cteonnt-Length
X-Cache-Level
X-Varnish-Url
X-Pressidium-NinukisWP-Ver
X-Cache-Handler
X-Varnish-Ttl
WWW-Authenticate
X-WN-ClientGroup
X-Generated
X-ID
Cache
Buuteeq-Source
X-Disney-Akamai-Rule
MJ12bot
X-Mobilized-By
X-Debug-Token
X-LB-Server
X-Vhost
X-Site-Name
X-Content-Security-Policy-Report-Only
X-ARRServer
X-Cocoon-Version
X-Server-Instance
NODE
X-VARITI-CCR
Web-App-Origin-Name
Dis-Env
X-ACMCache
X-LP
Dispatcher
SEOMOZ
X-Hiawatha-Cache
Cached
X-Unbounce-PageId
X-Unbounce-Variant
X-Unbounce-VisitorID
X-Runtime-Memory
X-Magento-Cache-Control
X-PF-Uncompressing
Nitro-Cache
X-Environment
X-Empowered-By
Keywords
X-HITS
Server-Info
Thanks
X-Healthy
X-Balanceador
Strikingly-Cached-Version
SRV
X-PageType
X-Jphone-Copyright
X-WR-MODIFICATION
X-Directory-Script
Strikingly-Cached
X-Optimization
ServerTokens
X-Pagename
X-Trace
ServerSignature
Max-Age
X-Garden-Version
Ufe-Result
Local-Info
X-Varnish-ID
SiteSpeed
X-Varnish-Hostname
X-Drupal-Cache-Tags
X-Cache-Provider
X-RiS-UFDI
Frame-Options
X-Session-Reinit
X-Cache-Doesi
X-EC-Security-Audit
X-C2M-Server
XDomainRequestAllowed
X-CDN-Forward
X-Cache-Source
X-Cf-Powered-By
X-Culture
Xc-Version
X-C2M-Runtime
X-Hit-Cache
X-Amz-Storage-Class
X-Author
X-Varnish-Server
Access-Control-Allow-Method
Content_type
X-Runtime-Rack
Description
X-HTML-Minification-Powered-By
X-Site
X-Cache-TTL-Remaining
X-Wikidot-Backend
X-WebKit-CSP-Report-Only
X-Nginx-Host
NS-VaryByCustom-Key
X-Yadis-Location
X-Distributor
X-Wikidot-Static-Cache
X-Domain-Checked
Identity
X-Cache-Node
X-Provisioner-Version
X-App
WP-AdvCache-MemCached
X-App-Status
X-Cache-CFC
X-ClientSide-Caching
CP
OriginServer
ViewMode
X-Node-Name
Traffic-Origin
Set-Cookie2
NLCacheNote
IISExport
Disablevcache
X-Rewrite
X-Data-Request
Ttl
X-Blog
X-Magento-Action
CLMOB
X-Varnish-Debug-Age
X-WR-Flags
X-HashTwo
X-HA-Backend
X-Yottaa-Optimizations
X-HA-Frontend
X-Varnish-Debug-TTL
X-Yottaa-Metrics
X-Amcomm-Site
X-OPNET-Transaction-Trace
X-Resolver-IP
Front
X-Powered-By-Server
X-Detected-Device
X-Cache-Dispatcherpragma
X-Cache-Dispatchercachecontrol
X-Machine
From-Origin
X-Rack-Cors
X-App-Runtime
X-TTFB-L
X-TTFB
X-Dev
X-Env
Smug-CDN
X-CB-Server
X-Cms-Mode
X-NginX-Cache
X-SmugMug-Values
BALANCEDTO
X-SmugMug-Hiring
Worker
X-Adobe-Loc
X-Runtime-Affili
X-HP-Trace-Project
X-HP-Trace-ID
X-Config-By
Nginx-Cache
X-GSL-Server
X-Webcelerate
X-Adobe-Content
X-CF-Passed-Proto
X-High-Performance
X-LW-Web-Server
X-Atg-Version
X-HW
X-A
X-Varnish-Retries
X-UA
X-Hstore
X-Client-Image-Vid
X-Generated-Time
X-CACHE-KEY
X-Client-Vid
HitType
X-ServerIndex
X-EPiphany-Vid
Yoncu-Errno
X-Beresp-Ttl
Resin-Trace
X-We-Are-Hiring
X-Amz-Meta-Cb-Modifiedtime
X-SERVER-NAME
Cmsid
X-Nginx
Eomportal-Instance
X-Cache-Keep
X-Dynatrace-Js-Agent
X-Fedora-School-Id
X-Ser
X-CacheResult
X-Resty-Request-Id
Cmstype
X-Analytics
X-Amz-Id-1
X-Location
X-Grid-Server
X-E
X-Highwire-SessionId
X-Cacheable-TTL
X-CDN-COMPRESS
X-App-Server
X-Webapp
X-Webstats-RespID
X-Cache-Action
X-Fpc
X-Deity
X-HP-Redirect
X-Cname-TryFiles
X-Page
X-Served
X-MAT-GEO
X-Depends
X-ORACLE-DMS-RID
X-Highwire-RequestId
X-CDN-RULE
X-SmartBan-URL
X-Dw-Trace-Id
SBMCLOUD
X-Trace-Id
Paypal-Debug-Id
X-Test
X-SmartBan-Host
X-Compressed-By
X-Sc-Cache
Backend-Timing
Hname
X-Powered-By-Home.Pl
X-Pageid
X-Remote-Addr
X-IIJ-Cache
X-Hosting
X-Header
MW-Webserver
X-MCB-Server
X-Symfony-Cache
X-Frame-Option
X-Force
X-HydroSheep
X-PRAM
X-Atraveo-Cache-Control
X-CACHE-TTL
Mime-Version
X-CAPServer
Webluker-Edge
X-DEBUG
X-Source-ID
Beyond-Iis
AsisCache
X-Atraveo-ETag
X-Atraveo-Expires
Strikingly-Cache-Region
X-Atraveo-Varnish-Server-Id
X-Atraveo-Zone
Og
X-Reflector-Cache
X-Atraveo-TTL
X-Reflector
X-Atraveo-Param-Rm
X-Atraveo-From-Varnish-Cache
X-Atraveo-Set-Cookie
Url
X-AEM
X-Batcache
X-Render-Time
X-NginX-Server
X-Mobile-URL
X-RPM
X-ChromeLogger-Data
X-Smartcache-Keys
X-Smartcache-Timeout
X-WP
RN-Server
From
X-Cache-Detail
X-Hosting-Env
X-SDE-Name
Ctx
X-WA-Info
X-DW
Ews
X-RPS
X-DSS
X-DB
Device
Id
X-Tag-Playlist
X-RSL
X-This-Proto
X-Middleton-PageSpeed
X-GeoIP
X-Nginx-Request-Time
X-Req-Head-Response
X-Drupal-Cache-Contexts
X-Varnish-URL
X-RAMCache
PagesDisplayed
X-Map-Context
SERVER-ID
X-Hrouter
X-KoobooCMS-Version
X-Info
X-Esi
MageStack-PageSpeed
X-Cache-On
X-Machine-Name
X-CRA-DC
MageStack-Tag
MageStack-Web-Node
X-Phpwcms-Release
MageStack-Loadbalancer
X-SV
MageStack-Debug
MageStack-Config
X-Viator-Tapersistentcookie
X-Response
X-Rebelmouse-Surrogate-Control
X-Phpwcms-Page-Processed-In
X-RDP
MageStack-Magento-Version
X-Rebelmouse-Cache-Control
X-MidCOM-Meta-Cache
Warning
X-Desc
X-Container
X-Frames-Options
X-Server-Generated
X-SH-Cache-Status
X-Server-Instance-Name
X-Rocket-Nginx-Serving-Static
X-EC-Lua
X-Agent
X-Actindo-RS
X-Application
X-Avvio-Cms-Cacheload
Ohc-Upstream-Trace
X-Bcwwwid
X-Domino-CacheValidationWithETagResult
X-Domino-CacheValidationWithETagReason
Sophnep-Edge-FX
Home
W
X-Varnish-Cache-Local
DNNOutputCache
X-B2f-Not-Route
Il-Cl
N365rili
Content-Server
X-Apm-Telemetry-Syncmark
Hamster
Proxy-Cache
Ibf5scheme
X-ACLR-Version
RSB-LINK
SHInfo
X-Nocache
X-ASAP-Cache
X-Clara-ASAP
X-Ezoic-Cdn
Access-Control-Request-Headers
X-WPL-DATA
X-Search-Id
X-Layout
X-Backend-Status
X-Ghost-Cache-Status
X-RealServer
X-Sites
X-DTC
Pics-Label
X-Server-IP
X-Lb
X-SCM-Server-Number
X-Distil-CS
X-Cache-Time
Bios
Machine
X-Adnet
VANITY-HOST
ScoreTracker
X-Title
X-Time-Microsecs
X-Refresh
X-Turpentine-Esi
NtCoent-Length
MageStack-Cache-Lifetime
X-Proto
MageStack-Cache-Status
MageStack-Cacheable
X-Autoru-Host
X-Autoru-LB
Myheader
MageStack-Cache-Hits
MageStack-Cache
TC-Cache-U
TC-Cache-IC
VAR-Cache
TC-S-Cache
TC-S-Cache-M
TC-Cache
Xc
X-Key
X-MSEdge-Ref
MageStack-Area
X-Vary-Options
X-AutoRu-App-Id
X-FastCGI-Cache
X-VID
SB-Cache-Life
SB-Cache-Remaining
SB-Site-Device
RequestId
BackendServer
X-Varnish-Mode
ClientIP
AMFplus-Ver
Session-Id
X-V
X-CacheID
X-JSESSIONID
Gzip
X-NewCloud-V-Cache
Content-Legth
X-AWS
X-Cache-FS-Status
F5-IpCliente
FastCGI-Cache-Status
X-UseReverse-Proxy
Provided-Host
AR-CACHE
X-Router-Backend
X-Secret
AR-PoweredBy
X-Router
Drupal-Pagecache-Memcache
ENV
X-RiS-PX
AR-ATIME
X-WHOIS-Cached
Note
X-UPSTREAM-Address
X-Varnish-Auto-Cache-Miss
AR-SID
X-Serendipity-InterfaceLangSource
X-M
X-Made-On
X-Serendipity-InterfaceLang
X-Len
X-Cached-Status
X-PBS-Appsvrname
X-FreeTag-Count
Server-Hostname
Lb
X-PBS-Fwsrvname
X-WebNode
Cluster-ID
X-Cache-Via
X-LBPoolMember
X-Backend-TTL
X-OCTOPOD
X-PBS-Appsvrip
X-DI
X-Obj-Ttl
X-NewsFlow-Sitename
Response-Time
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Cms-Server
Cleartype
Brightspot-Id
X-Provided-By
SG
VServer
X-Stage
X-Resource
X-FF
X-Sid
X-APP
MS-CV
X-CSRF-Token
Web
X-Cdn-Forward
X-Cluster-Node
X-Client-Ip
DrivedBy
Server-Ip
X-Srcache-Store-Status
X-Artvisual-Server
X-Litespeed-Cache-Control
X-ACCELERATE
X-DB-Content-Length
X-Lima-Id
PServer
X-Srcache-Fetch-Status
X-PBY
X-Oracle-DMS-ECID
X-Flex-Tags
X-DataDome
X-DN-Cache-Control
X-Name
X-Gyrobase-Publication
X-EC2-Instance-Id
V-Age
X-Flex-Lastmod
X-Flex-Tag
X-Cache-Id
X-Amz-Meta-Content-Md5
X-Backend-Name
X-XHTML-Minification-Powered-By
X-Gannett-Site-Version
X-Cjtype
X-ManagedFusion-Rewriter-Version
X-NMT-Proxy
X-Obj.Ttl
X-BServer
X-BPool-Fx-Cache
X-BC
X-Airee-Node
X-BPool
X-BPool-Back
X-BPool-Bx-Cache
X-Protected-By
X-Rewritten-By
MageStack-Cache-Warning
X-Varnish-Debug-Hits
X-Magento-Lifetime
MageStack-Cacheable-Reason
Aoestatic
Ina-Bwaf
Fastly-Backend-Name
X-Static
X-Rq
X-W3TC-Minify
X-NID
COMMERCE-SERVER-SOFTWARE
MageStack-Response-Ttl
X-Does-He-Have-Time
RSL-Trace-ID
Fw-Cache-Status
CommunityServer
SB-Site-IE-VERSION
WFE
X-IP-Address
X-Front-Cache
X-FIRSTBase
X-FRUIT
X-Cache-Me-Harder
X-SCProxy
EQ-Cache
X-Processed
Application
IsMobile
X-App-Version
X-Accel-Cache-Control
Prototype-RootPath
X-No-Session
X-Tradeindia-Request-GUID
X-MainProfileCategory
X-Faeria
X-Dynamic-Cache
X-MainProfileID
X-MainProfileName
X-VC-Debug
X-Not-Cacheable
X-MainProfileURL
VC-NoCache
Session
X-W-Cache-Hits
X-W-Cache
X-Tradeindia-SMgmt
XDisk
Ez
Resource
Lookup-Cache-Hit
X-Pj-Cache-Status
X-Ocache
X-Flex-Community
INFO
X-Flex-Evend
X-Beatles
X-Beatles-Hits
X-CCM
X-Cache-Set
X-Cache-ID
X-Flex-Evstart
EagleEye-TraceId-Daily
X-PM-ID
X-Pixelsilk-Version
X-Pixelsilk-Server
X-Real-IP
X-Reason-Bp
Accept-Language
X-Flex-Lang
X-Svr
X-Content-Type-Option
X-Goog-Meta-Policy
X-Cache-BE
X-Amz-Meta-Version-Id
Tempo
X-Cache-HT
X-Cache-LB
X-Imforza-Hosted
X-Debug-Message
X-Csrf-Token
GranicusServer
X-Your-GrandPa-Would-Wait
X-Plat
X-NO-BREACH
X-Goog-Meta-Replace
X-Ss-Conf
X-Ss-Location
X-Would-Your-GrandPa-Wait
X-TTL-Age
X-Origin-Cache
X-Serv
Kanooh-Host
X-Transaction-Name
Content-Cache
Progma
UrlWatchModule-Time
X-TargSmaku
X-AppServer-Cache-Rule
X-VG-WebCache
X-Varnish-Action
X-SuperCache
Developer
MachineName
X-Zendesk-User-Id
X-Zendesk-Origin-Server
X-UType
X-Uncacheable
X-Cache-Varnish
X-Captured
X-Rack-CORS
X-Turpentine-Cache
X-Time-Zone
X-Varnish-Currency
X-Varnish-Esi-Access
X-Varnish-Instance
X-Varnish-Esi-Method
X-Streams-Distribution
X-ServiceProvider
X-HAProxy
X-ELB
X-Country
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Netrix-ID
X-Server-FQDN
X-PG
ReqUrl
X-PoweredBy
XX
Actual-Object-TTL
X-Scache
X-Skip-Cache
X-Upgrade-Enabled
X-PHP-Response-Code
X-Status
X-REDIRECTSERVER
X-Geo-IP
Referer-Policy
TP-Cache
TP-L2-Cache
X-Box
X-Cache-Extended
Expect-Ct
X-Cluster
Cache-Ctrol
Copyright
X-Clx-Request
X-Catalyst
X-COUNTRY-CODE
X-DDM-SERVER
X-DDM-SERVER-UPDATED
X-MSU-SOURCE
X-GRACE
X-7d-Trace-Id
X-7d-Instance-Id
Server-Id
Requested-Host
SINA-LB
SINA-TS
Unique-Request-Id
X-LOCATION
X-Varnish-Set-Cookie
X-Varnish-Store
X-Restarts
X-ReqId
X-Pagely-Cache
Vserver
X-Src-Webcache
Provider
Edgecast
X-Generated-Date
X-Forwarded-By
X-AG-MIPS
X-4ormat-Cacheable
Server-ID
X-ASAP-Age
LB
X-Enhanced-By
X-DS1D
Public-Key-Pins-Report-Only
X-AMAZEEIO
X-Ssl-Cipher
X-Proxy-Cache-Key
X-Pass-Through
AC-ELC
Aurora-Node
TheAnswer
Language
X-Origin-Server
X-NodeID
X-Ezpublish-Nodeid
X-Ezpublish-Installationid
X-Cache-Why
X-Highwire-Sitecode
X-Highwire-Smart-Code
X-Nginx-Request-Processing-Time
X-Instance
NZSpeedy
MwpReleaseVersion
Httpd-Identifier
X-XHR-Current-Location
X-CH-Device
MSSmartTagsPreventParsing
MSThemeCompatible
X-Cachable
StatusCode
X-Count
X-Node-ID
Cache-Status
X-VLoc
X-Varnish-VCL
Debug-Status
X-Powered-Developer
X-Pool-Info
X-Built-With
X-Cache-TTL-Age
X-Cache-TTL-Current
X-Wm-VIP
X-Wm-1
X-Unique-Id
PB-RID
AGI-Request-ID
PB-PID
Container
X-Server-Addr
X-Meta-MSThemeCompatible
X-FORWARDED-PROTO
X-Cache-Warmer
X-Fstrz
X-Instance-Name
X-Meta-MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
X-Xrds-Location