Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Pragma
Last-Modified
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
P3P
X-XSS-Protection
X-Cache
X-AspNet-Version
CF-RAY
Strict-Transport-Security
X-Pingback
Age
Content-Language
Via
X-UA-Compatible
Access-Control-Allow-Origin
X-Adblock-Key
X-Varnish
X-Xss-Protection
X-Check
X-Template
X-Language
Upgrade
X-Cacheable
Content-Security-Policy
X-Generator
X-Buckets
X-Drupal-Cache
X-Request-Id
X-AspNetMvc-Version
X-Type
X-Cache-Group
X-Pass-Why
X-Powered-By-Plesk
X-Hacker
X-Ac
Content-Location
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Runtime
X-Download-Options
Host-Header
MS-Author-Via
X-ShopId
X-ShardId
X-Dc
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-Section
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PodId
X-Alternate-Cache-Key
Cartoon
X-IPLB-Instance
Alt-Svc
X-Powered-CMS
X-UA-Device
Status
X-Served-By
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Amz-Cf-Id
X-Ua-Compatible
X-Via
X-Request-ID
X-Backend
X-Iinfo
X-Cache-Status
X-ServedBy
X-Contextid
X-Timer
Powered-By
X-PC-Hit
X-PC-Key
WPE-Backend
X-Mod-Pagespeed
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-PC-AppVer
X-PC-Date
X-PC-Host
X-Tumblr-Pixel-0
X-Tumblr-User
X-Tumblr-Pixel
X-Logged-In
Keep-Alive
CF-Cache-Status
X-Cache-Hit
X-DIS-Request-ID
X-Tumblr-Pixel-1
X-Server
P3p
X-Port
X-CDN
Content-Encoding
X-Tumblr-Pixel-2
X-CST
X-Host
X-Server-Powered-By
X-Robots-Tag
X-Cache-Enabled
WP-Super-Cache
X-Seen-By
X-Wix-Request-Id
X-Wix-Renderer-Server
X-Rid
X-Nginx-Cache-Status
X-Pad
Referrer-Policy
X-Page-Speed
X-Turbo-Charged-By
X-Endurance-Cache-Level
Fastly-Debug-Digest
X-Accel-Version
X-Tumblr-Pixel-3
X-Content-Powered-By
X-Wix-PunisherID
X-Rack-Cache
X-Varnish-Cache
X-Forwarded-For
X-Content-Digest
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
Surrogate-Key-Raw
X-Drupal-Dynamic-Cache
X-Forwarded-Proto
Content-Security-Policy-Report-Only
X-AH-Environment
X-Proxy-Cache
X-Died
SPRequestGuid
X-GitHub-Request-Id
X-Cnection
X-SharePointHealthScore
MicrosoftSharePointTeamServices
X-Request-Country
X-Original-Date
X-XRDS-Location
X-MS-InvokeApp
X-Cache-Lookup
Cf-Railgun
X-Safe-Firewall
X-LiteSpeed-Cache
X-Tumblr-Pixel-4
MicrosoftOfficeWebServer
Request-Id
Timing-Allow-Origin
X-FullPageCaching
Charset
Edge-Control
X-Amz-Id-2
X-Amz-Request-Id
X-CF-Powered-By
X-Node
Rating
Composed-By
SPIisLatency
SPRequestDuration
X-FW-Hash
X-Webserver
Content-MD5
X-FW-Type
X-FW-Serve
X-FW-Static
X-Content-Security-Policy
X-INKT-URI
X-INKT-SITE
X-PhApp
X-Tumblr-Content-Rating
X-VWS-Id
X-LJ-Flow-ID
X-AWS-Id
X-Hits
Access-Control-Max-Age
X-Hyper-Cache
X-Swift-SaveTime
X-Swift-CacheTime
EagleId
Served-By
X-Spip-Cache
Access-Control-Expose-Headers
X-CDN-Pop
X-CDN-Pop-IP
Liferay-Portal
Grace
X-HS-Cache-Config
X-Server-Name
Edge-Cache-Tag
X-Device
X-HS-Content-Id
X-Backend-Server
X-Firenze-Processing-Times
X-Newrelic-App-Data
X-BC-Stapler
X-Dw-Request-Base-Id
X-Microcache
Request-Context
Content-Style-Type
X-ServerName
X-RateLimit-Remaining
Content-Script-Type
X-RateLimit-Limit
X-User-Agent
X-Fastly-Request-ID
Public-Key-Pins
X-RateLimit-Reset
X-FB-Debug
X-Jimdo-Wid
X-Jimdo-Instance
X-Cache-Config
X-DDC-Arch-Trace
X-Acc-Exp
X-Clacks-Overhead
X-SERVER
X-VCache
X-Cloud-Trace-Context
Xkey
Fpc-Cache-Id
X-Loop
Real-Hostname
X-TNCMS
Front-End-Https
Refresh
X-XN-Trace-Token
X-Hostname
X-XN-XNHTML
X-Tumblr-Pixel-5
X-Cached
X-Age
X-Generated-By
PageSpeed
X-Px
Surrogate-Key
X-Sol
X-Middleton-Display
Surrogate-Control
Display
X-N-OperationId
Response
X-Middleton-Response
X-Pantheon-Site
X-LiteSpeed-Cache-Control
X-Pantheon-Phpreq
X-Pantheon-Environment
X-DNS-Prefetch-Control
X-Url
X-Microcachable
X-WebKit-CSP
X-MiniProfiler-Ids
X-HOST
X-Cached-By
X-StackifyID
X-Content-Options
X-Zen-Fury
Edge-Control-Message
X-SS-Conf
X-SS-Location
X-CMS-Version
X-Request-Time
Rt-Fastcgi-Cache
X-Topify-Platform
X-Outils-CS
X-Amz-Version-Id
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Tumblr-Pixel-6
X-DynaTrace-JS-Agent
Access-Control-Request-Method
TCN
X-PERF
X-OneAgent-JS-Injection
X-ApacheServer
Product
Alternate-Protocol
X-DynaTrace
X-Umbraco-Version
X-Cache-Rule
X-Recruiting
X-Ruxit-JS-Agent
X-AspNetWebPages-Version
Host
X-Magento-Tags
X-Kinsta-Cache
X-Whom
X-Handled-By
Imagetoolbar
X-Powered-By-360WZB
WZWS-RAY
X-URL
X-Varnish-Cache-Hits
X-Edge-Location
X-NWS-LOG-UUID
X-Micro-Cache
Fhost
X-Engine
Powered
P-WS
P-LB
DynaTrace
Generator
X-Location-Id
X-Track
X-Varnish-TTL
X-CacheServer
X-Goog-Hash
X-FORWARDED-FOR
X-Response-Time
X-Correlation-Id
X-Vtex-Remote-Cache
X-Vtex-Processed-At
X-Vtex-Processado-Em
X-Origin
No
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-VTEX-Cache-Status-Janus-ApiCache
X-Powered-By-VTEX-Janus-Edge
X-Varnish-Backend
Origin
Fastcgi-Cache
X-Application-Context
X-BS
X-Cache-Age
X-I-Sp
ServedBy
X-LB-Node
X-Developer
X-Hosted-By
X-LB
X-Fastcgi-Cache
X-B-Cache
X-Instart-Request-ID
X-RESOURCE
X-Varnish-Host
X-LBLID
Content-Hash
X-From
Akamai-IP
X-URLSCHEME
X-Defender
Arr-Disable-Session-Affinity
X-Shop-Id
X-Revision
X-Platform
X-Msg-2-Log
X-Upstream
Expect-CT
IBM-Web2-Location
X-Front
X-Cache-TTL
X-Source
X-Dispatch
X-Tec-Api-Root
X-Page-Cache
X-Tec-Api-Origin
X-Tec-Api-Version
X-Device-Type
Pool
HTTPS
X-NetCat-Version
X-App-Hosting
X-Internal-ReqID
X-Varnish-Cacheable
X-Actual-URL
X-S
X-Rocket-Nginx-Bypass
X-UD-Method
X-TransIP-Balancer
X-Varnish-Beresp-Ttl
X-I
X-Passed-To
X-Returned-From-DLL
X-Varnish-Beresp-Grace
X-Cache-Only-Varnish
X-Varnish-Beresp-Status
X-Original-Request
X-Returned-From
X-Powered-By-VelaWeb
X-Storage
X-Passed-To-DLL
X-Github-Request-Id
X-Cache-Info
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Stale
X-Returned-From-PostProcessResponse
X-Passed-To-BeforeDispatch
Powered-By-ChinaCache
X-Daa-Tunnel
Dmn
X-Matrix-Server
X-Matrix-Proxy
X-Content-Encoded-By
X-Microcache-Status
X-Cache-Operation
X-Translation
X-Expires-Orig
X-VTEX-Cache-Status-Janus-Edge
X-Cache-Debug
Ohc-File-Size
X-Signature
Cache-Tag
X-Cache-Tags
X-Version
USPLoggingUUID
X-Platform-Processor
X-TransIP-Backend
X-Platform-Router
Content-Encoding-Handler
Node
X-Accel-Expires
X-Platform-Cluster
X-Route-Server
MIME-Version
X-Akamai-Transformed
X-Dispatcher
X-Cache-Lifetime
X-Gamma-Serve
X-Akamai-Device-Characteristics
X-Server-ID
X-Fastly-Request-Id
X-EdgeConnect-Origin-MEX-Latency
Last-Published
X-NoCache
X-Hypernode
X-Firenze-Processing-Time
X-Art-Request-Id
X-Director
X-Varnish-RemainingLife
X-Varnish-Seen-By
X-Varnish-ObjectSource
X-Cache-Control-Orig
X-Varnish-GracePeriod
X-Varnish-RemainingTTL
X-TTL
X-Varnish-HitMiss
X-Supported-By
X-Varnish-Count
X-Duration
X-Correlation-ID
Version
Cache-Key
Page-Completion-Status
Srv
X-EdgeConnect-MidMile-RTT
Content-Disposition
X-Flow-Powered
X-HS-Content-Campaign-Id
X-CDN-Cache-Status
SSPAppContext
X-Sucuri-ID
X-CDN-Node
X-SE-Debug
X-Orig-Vary
ServerName
X-Amz-Meta-S3cmd-Attrs
X-Proxy
X-UPSTREAM
FAI-W-FLOW
ServerID
Lsrequestid
X-Cache-Key
X-ARC
IM-Version
X-Sucuri-Cache
X-Abuse
X-Platform-Server
S-Cnection
X-Magento-Cache-Debug
X-Cookie-Domain
X-Varnish-Age
X-Edge-IP
X-Content-Age
X-Server-Upstream
X-ATG-Version
Proxy-Connection
X-Debug
X-Cache-Expires
PICS-Label
X-Processed-By
X-RequestId
X-Browser
X-Srv
Allow
X-F-Cache
X-Vcap-Request-Id
X-Last-Modified
CacheControlHeader
X-GeoIP-Country-Code
Cneonction
X-Client-IP
X-Geo-Country
X-ServerID
X-SV-CreatedAt
X-SV-Expires
X-SV-CacheTags
X-SV-FromDBCache
X-SV-Nginx-Duration
X-SV-Pid
X-SV-Edge
X-SRCache-Key
X-SV-Duration
X-Cache-Engine
X-TB-M
X-SV-Cacheable
X-Nbs
X-Processing-Time
X-Country-Code
X-SSL-Protocol
X-Always-Cache
X-SDS
X-SSL-Cipher
X-AOL-HN
X-Platform-Cache
X-CJ-Soft
If-Modified-Since
X-VC-TTL
X-Goog-Stored-Content-Encoding
X-Shield-Request-Id
X-Goog-Stored-Content-Length
X-Abgroup
X-GUploader-UploadID
X-Goog-Metageneration
X-Goog-Generation
X-Speed-Cache
X-Speed-Cache-Key
X-Url-Base
X-ORACLE-DMS-ECID
X-Dns-Prefetch-Control
X-Magnolia-Registration
X-Goog-Storage-Class
Cm-Server
X-Real-Server
X-Grace
AMF-Ver
Accept-Encoding
X-Varnish-Hits
X-IsCacheURL
X-VC-Enabled
X-Server-Id
X-GeoIP-Country-Name
Qs-Cache
X-Middleware-Start
X-PwB-Node
X-NB-Cached-Page
NetMindSessionID
X-Time
X-Cache-Server
Server-Name
Location
X-BKSrc
SN
X-Lambda-Id
X-Sapient
X-Litespeed-Cache
MC
X-Cache-Control
X-Cache-Type
Magicmarker
X-Akamai-Device-Model
Fw-Via
Nodo
A-Powered-By
X-FW
X-Discourse-Route
X-Purge-URL
Backend
S
X-Framework
X-AF-Userserver
X-Twitter-Response-Tags
Use-Proxy
X-Traffic
X-Served-Server
X-Route-To
X-Nginx-Cache
NODE
X-Connection-Hash
X-Transaction
WSR-Cache
Tracecode
X-Worker
X-Config-Blacklist-Version
X-OpenCart-Lightning
X-Varnish-IP
Cteonnt-Length
X-Internal-UserID
X-ID
X-DealerOn
Section-Io-Id
Dis-Env
X-Frontend
X-Ttl
X-N
X-Debug-Token
X-JG-Page-Cache
HAVer
HCVer
Pv
SVR
Accept-Charset
Req-Id
X-Cache-PageType
Author
Content_type
EagleEye-TraceId
X-Cache-Fix
X-Purge-Host
X-Cocoon-Version
X-Session-ID
X-BackendServer
NnCoection
X-Loopia-Node
X-Unique-ID
X-Content-Security-Policy-Report-Only
Retry-After
Content-Transfer-Encoding
X-WR-MODIFICATION
SS
WWW-Authenticate
X-Varnish-Ttl
X-Sys-Req-ID
WN
X-WN-ClientGroup
X-Generated
X-Id
X-Varnish-Url
X-ARRServer
RTSS
Cached
Access-Control-Allow-Method
X-Vhost
X-Healthy
X-Disney-Akamai-Rule
Dispatcher
X-WebKit-CSP-Report-Only
X-Drectory-Script
X-PageType
Cache
MJ12bot
X-Site-Name
Web-App-Origin-Name
X-Magento-Cache-Control
X-Runtime-Memory
X-ACMCache
X-RiS-UFDI
X-VARITI-CCR
X-Cache-Device-Type
X-Cache-Handler
X-Server-Instance
X-Hiawatha-Cache
X-Unbounce-VisitorID
X-Unbounce-Variant
SEOMOZ
X-Unbounce-PageId
Thanks
Strikingly-Cached-Version
X-LP
Cache-Provider
Strikingly-Cached
Keywords
X-Empowered-By
Server-Info
ServerSignature
SRV
X-HITS
X-Cache-Node
ServerTokens
X-Optimization
X-FireWall-Port
X-Balanceador
Nitro-Cache
X-Distributor
X-Cache-Level
X-Session-Reinit
Frame-Options
X-Cache-Doesi
Max-Age
X-Mobilized-By
X-Pagename
X-Cache-Provider
X-Cache-Source
X-Drupal-Cache-Tags
X-CDN-Forward
Local-Info
X-Varnish-ID
X-OPNET-Transaction-Trace
X-Hit-Cache
X-Pressidium-NinukisWP-Ver
Ufe-Result
X-Garden-Version
X-Varnish-Hostname
X-LB-Server
X-Varnish-Debug-Age
X-Powered-By-Server
X-Cf-Powered-By
X-Runtime-Rack
X-Amz-Storage-Class
Description
X-Author
OriginServer
X-EC-Security-Audit
Xc-Version
X-C2M-Server
X-C2M-Runtime
X-Trace
IISExport
X-Site
X-Varnish-Debug-TTL
X-Culture
SiteSpeed
NS-VaryByCustom-Key
XDomainRequestAllowed
Buuteeq-Source
X-PF-Uncompressing
WP-AdvCache-MemCached
X-Environment
X-Yadis-Location
X-App-Status
X-App
X-Domain-Checked
X-Generated-Time
X-Provisioner-Version
Identity
X-DEBUG
X-Nginx-Host
X-Directory-Script
X-Beresp-Ttl
X-A
X-Amcomm-Site
Traffic-Origin
X-Adobe-Loc
ViewMode
X-Pageid
Ttl
X-RAMCache
X-Cache-CFC
X-Webcelerate
X-Compressed-By
Disablevcache
X-Rewrite
NLCacheNote
X-HashTwo
X-HA-Frontend
X-CDN-COMPRESS
X-MCB-Server
X-Node-Name
X-HA-Backend
CP
X-Blog
X-Data-Request
X-CDN-RULE
CLMOB
X-Magento-Action
X-Machine
X-Env
X-Adobe-Content
X-CACHE-TTL
X-SmugMug-Hiring
X-GSL-Server
X-Jphone-Copyright
X-E
X-CB-Server
X-Rack-Cors
BALANCEDTO
X-Varnish-Server
X-Resolver-IP
X-Cache-Dispatcherpragma
X-Cache-Dispatchercachecontrol
X-NginX-Cache
Smug-CDN
X-TTFB
X-SmugMug-Values
X-WR-Flags
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-ClientSide-Caching
X-TTFB-L
Front
X-HP-Trace-Project
X-HP-Trace-ID
X-App-Runtime
X-Runtime-Affili
Nginx-Cache
X-Detected-Device
X-Config-By
X-SERVER-NAME
Eomportal-Instance
X-High-Performance
HitType
X-HW
X-We-Are-Hiring
X-Nginx-Request-Time
Device
X-CACHE-KEY
X-RiS-PX
X-Dynatrace-Js-Agent
X-UA
X-Resty-Request-Id
X-Fedora-School-Id
X-CF-Passed-Proto
X-LW-Web-Server
X-Cache-TTL-Remaining
X-Ser
X-EPiphany-Vid
X-Client-Vid
X-ServerIndex
Url
X-Client-Image-Vid
X-Amz-Meta-Cb-Modifiedtime
X-AEM
X-Nginx
X-HTML-Minification-Powered-By
X-Varnish-Retries
Yoncu-Errno
X-SmartBan-Host
X-IIJ-Cache
X-Location
BackendServer
SB-Site-Device
Pics-Label
X-SmartBan-URL
Session-Id
X-HP-Redirect
SB-Cache-Remaining
SB-Cache-Life
SBMCLOUD
Set-Cookie2
X-Webapp
X-Cache-Action
X-Highwire-SessionId
X-Fpc
X-Trace-Id
X-Symfony-Cache
X-Powered-By-Home.Pl
Backend-Timing
X-Obj-Ttl
X-Wikidot-Backend
X-Cacheable-TTL
X-Wikidot-Static-Cache
From-Origin
X-WebNode
X-Amz-Id-1
X-Analytics
X-OCTOPOD
X-Hstore
X-Hosting
X-Grid-Server
X-Page
X-AWS
X-Highwire-RequestId
X-Test
X-ORACLE-DMS-RID
X-Depends
X-Dw-Trace-Id
X-Header
X-App-Server
X-Webstats-RespID
Beyond-Iis
X-Force
X-PRAM
X-Atraveo-Cache-Control
X-Source-ID
Worker
X-Dev
X-Cms-Mode
Webluker-Edge
X-Atraveo-ETag
X-Atraveo-Expires
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Atraveo-Zone
X-HydroSheep
X-Atraveo-Set-Cookie
X-Atraveo-From-Varnish-Cache
X-Atraveo-Param-Rm
X-CAPServer
Mime-Version
AsisCache
X-Reflector
X-ChromeLogger-Data
Og
X-Reflector-Cache
Strikingly-Cache-Region
X-Cache-Keep
X-CacheResult
X-Smartcache-Keys
X-This-Proto
RN-Server
X-SDE-Name
X-Cache-Detail
X-Batcache
X-Mobile-URL
From
X-Hosting-Env
X-Smartcache-Timeout
Cmsid
X-DSS
X-NginX-Server
X-WA-Info
X-RSL
X-RPM
X-RPS
X-PBY
X-DB
X-WP
X-DW
Ctx
X-Render-Time
Id
Cmstype
X-Tag-Playlist
Ews
X-Middleton-PageSpeed
X-Varnish-URL
X-GeoIP
PagesDisplayed
X-Map-Context
X-Info
X-Req-Head-Response
X-Drupal-Cache-Contexts
Ohc-Upstream-Trace
Server-Id
MageStack-PageSpeed
X-CRA-DC
X-Nocache
MageStack-Cache-Lifetime
MageStack-Tag
X-Rebelmouse-Surrogate-Control
MageStack-Web-Node
X-Cache-On
MageStack-Magento-Version
MageStack-Cache-Status
MageStack-Debug
X-MidCOM-Meta-Cache
MageStack-Config
X-Phpwcms-Page-Processed-In
MageStack-Loadbalancer
MageStack-Cacheable
X-Esi
X-Rebelmouse-Cache-Control
X-RDP
X-Machine-Name
X-Phpwcms-Release
Warning
X-Frames-Options
X-MAT-GEO
X-Sc-Cache
X-Domino-CacheValidationWithETagResult
Content-Server
X-Hrouter
X-Desc
X-Actindo-RS
VAR-Cache
XDisk
X-Bcwwwid
X-EC-Lua
Hamster
Ibf5scheme
X-Varnish-Cache-Local
Home
X-SRV
X-B2f-Not-Route
X-Response
W
Sophnep-Edge-FX
X-Apm-Telemetry-Syncmark
X-Domino-CacheValidationWithETagReason
N365rili
Proxy-Cache
Il-Cl
X-ACLR-Version
MageStack-Area
TC-Cache-U
TC-Cache-IC
TC-S-Cache
TC-S-Cache-M
X-SCM-Server-Number
TC-Cache
Xc
X-Adnet
VANITY-HOST
Myheader
X-Server-IP
X-Ghost-Cache-Status
X-WPL-DATA
X-Distil-CS
Bios
Machine
X-Cache-Time
X-Sites
X-RealServer
MW-Webserver
SHInfo
X-Remote-Addr
X-DTC
SG
X-Ezoic-Cdn
RSB-LINK
X-Title
X-Autoru-Host
X-Autoru-LB
DNNOutputCache
X-Viator-Tapersistentcookie
X-SV
MageStack-Cache
Public-Key-Pins-Report-Only
X-Vary-Options
X-FastCGI-Cache
X-Search-Id
ScoreTracker
X-Lb
X-Key
X-MSEdge-Ref
NtCoent-Length
X-Turpentine-Esi
X-Layout
X-Proto
X-Refresh
X-Time-Microsecs
MageStack-Cache-Hits
X-AutoRu-App-Id
X-VID
X-Serendipity-InterfaceLang
X-Serendipity-InterfaceLangSource
X-Varnish-Mode
X-Cname-TryFiles
ENV
X-Router
X-Varnish-Auto-Cache-Miss
X-Router-Backend
X-Secret
X-V
X-UseReverse-Proxy
X-Catalyst
X-COUNTRY-CODE
X-Len
X-LOCATION
X-CacheID
X-Cached-Status
X-NewCloud-V-Cache
MachineName
X-Cache-FS-Status
X-Provided-By
X-Deity
Provided-Host
ClientIP
AR-SID
AR-PoweredBy
Content-Legth
RequestId
X-Cache-Via
Drupal-Pagecache-Memcache
Server-Hostname
AR-CACHE
X-M
AR-ATIME
X-Served
AMFplus-Ver
X-UPSTREAM-Address
X-Made-On
X-FreeTag-Count
Note
FastCGI-Cache-Status
X-Frame-Option
X-NewsFlow-Sitename
ReqUrl
X-JSESSIONID
F5-IpCliente
Cleartype
X-PBS-Fwsrvname
Brightspot-Id
X-PHP-Response-Code
Lb
X-Cms-Server
X-Backend-TTL
X-DI
X-Status
Cluster-ID
X-LBPoolMember
Hname
X-WHOIS-Cached
Paypal-Debug-Id
X-PBS-Appsvrip
Gzip
X-Goog-Meta-Goog-Reserved-File-Mtime
X-PBS-Appsvrname
X-Srcache-Fetch-Status
X-Resource
PServer
X-ACCELERATE
X-Cluster-Node
X-Stage
X-DB-Content-Length
VServer
X-APP
X-CSRF-Token
X-Srcache-Store-Status
DrivedBy
X-Cdn-Forward
X-Client-Ip
X-FF
X-Sid
Resin-Trace
X-Lima-Id
X-Litespeed-Cache-Control
Server-Ip
X-Oracle-DMS-ECID
X-Artvisual-Server
MS-CV
Web
Aurora-Node
AC-ELC
Language
X-BPool-Back
X-ManagedFusion-Rewriter-Version
X-BPool-Fx-Cache
X-Gannett-Site-Version
X-Ssl-Cipher
X-Cjtype
V-Age
X-Xrds-Location
MageStack-Cacheable-Reason
X-BServer
MageStack-Response-Ttl
X-BPool
X-Proxy-Cache-Key
X-Flex-Tags
COMMERCE-SERVER-SOFTWARE
Fastly-Backend-Name
Ina-Bwaf
X-XHTML-Minification-Powered-By
X-W3TC-Minify
X-Airee-Node
X-Static
X-BPool-Bx-Cache
TheAnswer
X-Rq
X-BC
X-Obj.Ttl
X-Varnish-Debug-Hits
MageStack-Cache-Warning
X-Protected-By
X-Rewritten-By
X-Magento-Lifetime
Aoestatic
X-NMT-Proxy
X-Svr
X-Ocache
X-Imforza-Hosted
X-Debug-Message
X-Pj-Cache-Status
X-Processed
Application
X-SCProxy
X-Rocket-Nginx-Serving-Static
X-Csrf-Token
X-Cache-LB
X-Your-GrandPa-Would-Wait
X-Would-Your-GrandPa-Wait
X-TTL-Age
GranicusServer
Tempo
X-Cache-HT
X-Cache-BE
X-Amz-Meta-Version-Id
IsMobile
Prototype-RootPath
X-IP-Address
X-Front-Cache
X-FIRSTBase
X-No-Session
X-Tradeindia-Request-GUID
X-W-Cache-Hits
X-W-Cache
X-Tradeindia-SMgmt
WFE
SB-Site-IE-VERSION
X-Cache-Me-Harder
X-App-Version
X-Accel-Cache-Control
X-FRUIT
CommunityServer
RSL-Trace-ID
Fw-Cache-Status
X-Ss-Location
X-Ss-Conf
X-Pixelsilk-Server
X-Origin-Cache
X-NID
X-Pixelsilk-Version
X-PM-ID
X-Pass-Through
X-Reason-Bp
X-Real-IP
X-Name
X-Flex-Lastmod
X-Cache-Id
X-Backend-Name
X-Flex-Tag
X-DataDome
X-DN-Cache-Control
X-Gyrobase-Publication
X-EC2-Instance-Id
X-Flex-Lang
Accept-Language
X-Does-He-Have-Time
X-Content-Type-Option
X-CCM
EQ-Cache
X-Goog-Meta-Policy
X-Plat
X-NO-BREACH
X-Goog-Meta-Replace
X-Cache-Set
X-Cache-ID
X-Flex-Evend
X-Flex-Evstart
EagleEye-TraceId-Daily
INFO
X-Flex-Community
X-Beatles-Hits
X-Beatles
X-Amz-Meta-Content-Md5
X-ASAP-Cache
X-Varnish-Action
X-UType
X-Uncacheable
X-VG-WebCache
Content-Cache
Progma
Kanooh-Host
X-TargSmaku
X-SuperCache
Developer
X-MSU-SOURCE
X-GRACE
X-PoweredBy
X-Zendesk-User-Id
X-Transaction-Name
X-Zendesk-Origin-Server
UrlWatchModule-Time
X-AppServer-Cache-Rule
X-PG
X-Netrix-ID
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Server-FQDN
X-ServiceProvider
X-Time-Zone
X-Streams-Distribution
X-HAProxy
X-Pool-Info
X-Cache-Varnish
X-Rack-CORS
X-Captured
X-Country
X-Powered-Developer
X-ELB
SERVER-ID
X-DDM-SERVER-UPDATED
X-Container
X-Cluster
X-Cache-Extended
X-Geo-IP
Actual-Object-TTL
XX
X-KoobooCMS-Version
X-Box
Expect-Ct
TP-L2-Cache
TP-Cache
Referer-Policy
Vserver
X-Agent
X-Avvio-Cms-Cacheload
X-Application
X-REDIRECTSERVER
X-Scache
Unique-Request-Id
SINA-TS
SINA-LB
X-7d-Instance-Id
X-7d-Trace-Id
X-DDM-SERVER
X-Clx-Request
Requested-Host
Copyright
X-Server-Instance-Name
X-Server-Generated
X-SH-Cache-Status
X-Skip-Cache
Cache-Ctrol
X-Upgrade-Enabled
X-Turpentine-Cache
X-Varnish-Currency
Response-Time
X-ASAP-Age
X-AG-MIPS
X-Clara-ASAP
X-DS1D
X-Forwarded-By
X-Enhanced-By
X-4ormat-Cacheable
Server-ID
Access-Control-Request-Headers
X-Wm-VIP
X-Wm-1
AGI-Request-ID
Container
NZSpeedy
MwpReleaseVersion
X-Generated-Date
X-Pagely-Cache
X-Highwire-Sitecode
X-Ezpublish-Nodeid
X-Ezpublish-Installationid
X-Highwire-Smart-Code
X-Instance
X-NodeID
X-Nginx-Request-Processing-Time
X-Cache-Why
X-AMAZEEIO
X-Restarts
X-ReqId
X-Serv
X-Src-Webcache
Provider
Edgecast
X-Unique-Id
X-Server-Addr
X-Count
X-Built-With
Debug-Status
X-CH-Device
X-Node-ID
X-XHR-Current-Location
X-Cachable
Cache-Status
X-VLoc
X-Varnish-Esi-Method
X-Varnish-Esi-Access
X-Varnish-Instance
X-Varnish-Set-Cookie
X-Varnish-VCL
X-Varnish-Store
Httpd-Identifier
MSSmartTagsPreventParsing
X-Fstrz
X-FORWARDED-PROTO
X-Cache-Warmer
X-Instance-Name
X-Meta-Imagetoolbar
X-Meta-MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
X-Cache-TTL-Current
X-Cache-TTL-Age
StatusCode
MSThemeCompatible
PB-RID
PB-PID
X-Backend-Status
LB
X-Origin-Server