Threat Level: green Handler on Duty: Russ McRee

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Set-Cookie
Server
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
Strict-Transport-Security
CF-RAY
X-XSS-Protection
Age
X-Cache
Expect-CT
Content-Language
X-AspNet-Version
P3P
X-Pingback
Via
X-UA-Compatible
Upgrade
X-Xss-Protection
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Adblock-Key
X-Varnish
Referrer-Policy
X-Request-Id
X-Check
X-Generator
X-Language
X-Template
X-Buckets
X-Type
X-Cache-Group
X-Pass-Why
X-Drupal-Cache
WPE-Backend
X-Permitted-Cross-Domain-Policies
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Download-Options
Alt-Svc
X-Ac
X-Hacker
X-Cache-Hits
Host-Header
X-Sorting-Hat-Section
X-Dc
X-Alternate-Cache-Key
X-AspNetMvc-Version
X-ShopId
X-Sorting-Hat-ShopId-Cached
X-ShardId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-ShopId
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-PodId
P3p
X-Via
X-Runtime
X-Powered-By-Plesk
X-Served-By
X-Contextid
X-PC-Key
X-PC-Hit
X-UA-Device
X-ServedBy
X-PC-AppVer
X-Amz-Cf-Id
MS-Author-Via
X-PC-Date
X-PC-Host
Content-Location
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Powered-CMS
X-Timer
X-Seen-By
X-Wix-Request-Id
X-IPLB-Instance
X-Rid
X-Ua-Compatible
Status
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Tumblr-Pixel-1
CF-Cache-Status
Cartoon
X-Tumblr-Pixel-2
Access-Control-Allow-Credentials
X-Backend
X-Iinfo
X-WPE-Loopback-Upstream-Addr
X-Cache-Status
X-CST
X-Host
Content-Encoding
Powered-By
X-Endurance-Cache-Level
X-NewRelic-App-Data
X-FRAME-OPTIONS
X-Cache-Hit
X-Mod-Pagespeed
X-Port
X-Cache-Enabled
X-Tumblr-Pixel-3
X-CDN
X-Newrelic-App-Data
X-Logged-In
Keep-Alive
X-Server-Powered-By
X-DIS-Request-ID
X-Drupal-Dynamic-Cache
X-Nginx-Cache-Status
X-Server
X-Robots-Tag
X-Request-ID
X-Accel-Version
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Proxy-Cache
X-Turbo-Charged-By
X-Page-Speed
X-Content-Powered-By
X-GitHub-Request-Id
X-LiteSpeed-Cache
Content-Security-Policy-Report-Only
X-Content-Digest
X-Tumblr-Pixel-4
X-Rack-Cache
X-FW-Hash
X-FW-Server
X-AH-Environment
X-FW-Static
X-FW-Type
X-FW-Serve
X-Pad
Request-Context
X-Varnish-Cache
Edge-Control
X-Hits
X-Webcom-Cache-Status
X-Trace
X-XRDS-Location
X-Request-Country
SPRequestGuid
X-BC-Stapler
Access-Control-Expose-Headers
X-SharePointHealthScore
X-Node
X-MS-InvokeApp
Edge-Cache-Tag
X-HS-Cache-Config
X-HS-Content-Id
MicrosoftSharePointTeamServices
WP-Super-Cache
Cf-Railgun
X-SERVER
X-HS-Combine-CSS
X-Amz-Request-Id
X-Amz-Id-2
X-CF-Powered-By
Charset
Timing-Allow-Origin
X-Died
X-Content-Security-Policy
X-FullPageCaching
X-Webserver
X-Cache-Lookup
X-PHP-Backend
X-Fastly-Request-ID
X-INKT-URI
X-INKT-SITE
Request-Id
X-PhApp
X-Cnection
Access-Control-Max-Age
X-Backend-Server
SPIisLatency
SPRequestDuration
X-Edge-Cache
X-Edge-Cache-Key
CONTENT-SECURITY-POLICY
MicrosoftOfficeWebServer
EagleId
Rating
Composed-By
X-Swift-CacheTime
X-Swift-SaveTime
X-CDN-Pop
X-CDN-Pop-IP
X-SS-Conf
X-Tumblr-Pixel-5
X-SS-Location
Grace
X-Server-Name
X-Tumblr-Content-Rating
X-DDC-Arch-Trace
X-Device
X-NF-Request-ID
Served-By
X-Safe-Firewall
X-Spip-Cache
Liferay-Portal
X-Dw-Request-Base-Id
Ali-Swift-Global-Savetime
X-Cloud-Trace-Context
X-Hyper-Cache
X-VCache
Permitted-Cross-Domain-Policies
X-Do-Not-Hack
X-HeyJason
Front-End-Https
X-Microcache
P-WS
P-LB
Surrogate-Control
X-Original-Date
X-Servedby
X-LiteSpeed-Cache-Control
X-TNCMS
X-Loop
X-StackifyID
X-Clacks-Overhead
X-RateLimit-Limit
X-Cluster-Node
X-RateLimit-Remaining
X-Middleton-Display
Display
X-Sol
X-Wix-Punisher
X-Acc-Exp
X-Kinsta-Cache
X-FB-Debug
Response
X-Middleton-Response
X-RateLimit-Reset
X-Jimdo-Instance
X-OneAgent-JS-Injection
X-Jimdo-Wid
Content-Style-Type
X-DNS-Prefetch-Control
Content-Script-Type
X-Vtex-Processado-Em
Public-Key-Pins
X-Debug-Info
X-Shopid
X-Sorting-Hat-Shopid-Cached
X-Sorting-Hat-Podid
X-Shardid
X-Sorting-Hat-Featureset
X-Sorting-Hat-Podid-Cached
X-Sorting-Hat-Shopid
X-Sorting-Hat-Privacylevel
X-Firenze-Processing-Times
X-Goog-Hash
X-Tumblr-Pixel-6
X-Age
X-Amz-Version-Id
X-HOST
Refresh
X-XN-XNHTML
X-XN-Trace-Token
X-Magento-Tags
X-Cached
Fpc-Cache-Id
X-Zen-Fury
X-DynaTrace-JS-Agent
X-User-Agent
X-N-OperationId
X-Ruxit-JS-Agent
Server-Timing
X-Px
X-Cache-Config
Wpe-Backend
X-Version
PageSpeed
X-Hostname
X-Url
X-LW-Cache
X-WebKit-CSP
Retry-After
Xkey
Feature-Policy
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Handled-By
X-Generated-By
X-Frame-Option
X-Topify-Platform
X-Upstream
X-FORWARDED-FOR
TCN
X-Edge-Location
Rt-Fastcgi-Cache
Allow
Access-Control-Request-Method
X-MiniProfiler-Ids
Fastcgi-Cache
X-Request-Time
X-Whom
X-Source
X-B-Cache
X-EdgeConnect-Origin-MEX-Latency
X-Cached-By
X-Loopia-Node
X-SRCache-Store-Status
X-ET-API-ORIGIN
X-SRCache-Fetch-Status
X-ET-API-ROOT
Product
X-ET-API-VERSION
X-URLSCHEME
X-Fastcgi-Cache
X-EdgeConnect-MidMile-RTT
X-Content-Options
Last-Published
X-CMS-Version
Powered
X-Outils-CS
ServedBy
X-RESOURCE
X-Platform-Cluster
X-Platform-Processor
Warning
X-Guploader-Uploadid
X-Platform-Router
X-AspNetWebPages-Version
X-Magento-Cache-Debug
X-Tec-Api-Root
X-From
X-Tec-Api-Origin
X-Accel-Expires
X-Tec-Api-Version
X-Varnish-Host
X-Vtex-Remote-Cache
X-Vtex-Processed-At
X-VTEX-Cache-Status-Janus-ApiCache
No
X-VTEX-Janus-Router-Backend-App
X-Powered-By-VTEX-Janus-ApiCache
X-CacheServer
X-Varnish-HitMiss
X-Varnish-Count
X-Application-Context
X-Signature
X-Passed-To-DLL
X-PERF
X-Passed-To
X-Engine
X-Original-Request
X-Returned-From
Public-Key-Pins-Report-Only
Fhost
X-ApacheServer
X-Location-Id
X-Returned-From-DLL
X-Cache-Info
Dmn
X-Umbraco-Version
X-Actual-URL
X-Varnish-Cache-Hits
Imagetoolbar
X-Microcachable
X-Cache-Key
X-LBLID
Cache-Provider
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
Cache-Key
Generator
X-Platform-Server
X-Varnish-Beresp-Status
X-Developer
X-F-Cache
X-DynaTrace
X-Device-Type
X-UD-Method
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
X-NWS-LOG-UUID
X-Returned-From-BeforeDispatch
X-Stale
X-Returned-From-PostProcessResponse
X-Ezoic-Cdn
X-Response-Time
Pagespeed
X-Platform
Host
X-HS-Content-Campaign-Id
X-Micro-Cache
X-Gateway-Cache-Key
X-Gateway-Skip-Cache
X-S
X-Gateway-Cache-Status
X-URL
X-Hosted-By
Arr-Disable-Session-Affinity
X-Shop-Id
X-Recruiting
X-Defender
X-ARC
Surrogate-Key
Alternate-Protocol
Origin
X-SSLUpstream
X-Dns-Prefetch-Control
X-Microcache-Status
X-Translation
X-Msg-2-Log
X-SSLProxy
X-Sapient
X-Akam-SW-Version
X-Cache-Rule
Content-Hash
Version
X-Lambda-Id
X-Platform-Cache
X-Track
X-App-Status
Akamai-IP
X-Svr-Proxy
X-SVR-IIS
X-Instart-Request-ID
DynaTrace
X-Duration
SSPAppContext
X-Powered-By-360WZB
X-Magento-Cache-Control
X-Forwarded-For
X-Via-JSL
MIME-Version
X-Cache-Age
X-SO
X-I-Sp
X-BS
X-Supported-By
X-Powered-By-VTEX-Janus-Edge
X-Powered-By-VelaWeb
X-Rnd
RTSS
X-Cache-Namespace
X-Acquia-Application-UUID
USPLoggingUUID
WZWS-RAY
X-Environment
X-Director
X-Dealeron-Backend
X-DealerOn
X-Dealeron-Original-Url
S-Cnection
X-Correlation-Id
Pool
X-Art-Request-Id
X-Cache-Tags
X-NetCat-Version
Content-Disposition
Node
X-CSRF-Protection
X-Cache-TTL
X-Server-Upstream
X-Hypernode
Edge-Control-Message
X-Page-Cache
X-App-Hosting
X-Abgroup
X-TransIP-Balancer
X-SSL-Cipher
X-SSL-Protocol
X-Dispatcher
X-Rocket-Nginx-Bypass
X-LB-Node
X-Matrix-Proxy
X-Matrix-Server
X-TransIP-Backend
X-Correlation-ID
X-Server-ID
X-Expires-Orig
X-Server-Id
X-Edge-IP
X-ServerName
SN
X-Generated
X-Cache-Debug
X-Last-Modified
X-Storage
X-Cache-Control-Orig
X-Varnish-Cacheable
X-Daa-Tunnel
X-Debug
X-Drupal-Cache-Tags
Wsr-Cache
Accept-Encoding
X-ORACLE-DMS-ECID
X-Cache-Lifetime
FAI-W-FLOW
X-Hiawatha-Cache
X-Revision
Contao-Page-Layout
Src-Update
X-I
Powered-By-ChinaCache
SiteSpeed
Update-Time
X-NoCache
X-Cache-Handler
X-Vcap-Request-Id
X-SV-Pid
X-SV-Duration
X-SV-CreatedAt
X-SV-CacheTags
X-Gamma-Serve
X-SV-Edge
X-SV-Nginx-Duration
X-SV-FromDBCache
X-SV-Expires
X-SV-Cacheable
X-GUploader-UploadID
Req-Id
X-LB-Server
ServerID
X-Varnish-RemainingLife
X-Varnish-RemainingTTL
X-Varnish-Seen-By
Content-Encoding-Handler
X-Front
X-Grace
X-Now-Id
X-Client-IP
X-Geo-Country
X-Rocket-Nginx-Serving-Static
X-Varnish-GracePeriod
X-Varnish-ObjectSource
X-Sucuri-ID
X-SRV
X-VARITI-CCR
X-CJ-Soft
X-Route-Server
X-Dispatch
X-ATG-Version
X-Amz-Meta-S3cmd-Attrs
X-Vhost
X-Discourse-Route
X-Litespeed-Cache-Control
X-Cache-Level
X-Ttl
X-Cache-Server
X-Drupal-Cache-Contexts
X-Cache-Only-Varnish
X-SDS
Lsrequestid
X-Sucuri-Cache
X-Pressidium-NinukisWP-Ver
X-Varnish-IP
Cneonction
X-Flow-Powered
X-Varnish-Backend
Cache-Tags
X-Locale
X-Trace-Id
X-Content-Type-Option
X-Forwarded-Proto
X-Cache-Operation
X-Content-Encoded-By
X-Country-Code
X-Url-Base
X-Cache-Engine
X-Esi
X-Acquia-Application-Trace
X-TransIP-Reserved
X-Env
X-GeoIP-Country-Code
X-Webkit-CSP
X-Cache-Expires
Cache
X-Varnish-Age
X-Server-Instance
W
Strikingly-Cache-Region
Strikingly-Cached
X-Cache-Type
Strikingly-Cached-Version
X-Unbounce-VisitorID
X-Unbounce-PageId
X-Unbounce-Variant
Backend
X-Litespeed-Cache
X-Amz-Rid
X-Firenze-Processing-Time
X-TTFB
Service-Worker-Allowed
X-Transaction
Section-Io-Id
X-Twitter-Response-Tags
X-Time
X-Connection-Hash
X-N
X-Varnish-TTL
X-FIRSTBase
Smug-CDN
X-SmugMug-Hiring
X-SmugMug-Values
X-Varnish-Url
X-TTFB-L
Custom-Header
X-SRCache-Key
Content-MD5
If-Modified-Since
Location
X-Always-Cache
Server-Name
S
X-Service-Id
SEOMOZ
AMF-Ver
X-Speed-Cache
Https
X-Akamai-Device-Model
ServerName
X-Speed-Cache-Key
X-Akamai-Device-Characteristics
X-IsCacheURL
MJ12bot
X-Magnolia-Registration
X-Middleware-Start
Pv
X-GeoIP-Country-Name
From-Origin
Page-Completion-Status
X-TTL
X-Varnish-Retries
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Cache-Device-Type
Author
X-Cache-Control
X-BackendServer
Proxy-Connection
X-ID
X-High-Performance
X-ORACLE-DMS-RID
MC
X-PwB-Node
X-CF-Passed-Proto
X-Origin
X-Storage-Cache-Expires
X-Storage-Cache
Use-Proxy
X-LB
X-Storage-Cache-Date
X-Varnish-Server
X-Cookie-Domain
X-Srv
NnCoection
X-Xrds-Location
PICS-Label
Fw-Via
X-Content-Age
X-UPSTREAM
X-Yadis-Location
NetMindSessionID
X-Pool
X-Pantheon-Environment
X-Pantheon-Phpreq
X-Pantheon-Site
Surrogate-Key-Raw
X-CDN-Forward
X-Symfony-Cache
X-Dynamic-Cache
Tracecode
X-CacheFROM
X-FTR-Request-ID
X-Now-Cache
X-Key
X-Amz-Storage-Class
X-Config-Blacklist-Version
FindLaw
X-Nitro-Cache
Qs-Cache
X-Real-Server
Nodo
X-Amz-Meta-Content-Md5
Srv
X-NginX-Cache
X-HW
X-ServerID
X-Vip
X-Cache-Fix
X-VC-Enabled
X-Processing-Time
X-Nbs
X-Cache-PageType
Content_type
X-BKSrc
X-Empowered-By
Xc-Version
Ohc-File-Size
Swift-Performance
X-Shield-Request-Id
X-Sedo-Request-Id
X-Cache-Miss-From
Drupal-Pagecache-Memcache
X-Worker
X-Varnish-Hits
X-Content-Security-Policy-Report-Only
X-Browser
X-Frontend
Hummingbird-Cache
Access-Control-Allow-Method
CacheControlHeader
X-Shard
X-Distributor
IM-Version
X-Id
X-Varnish-Ttl
Pics-Label
X-Proxy
Ramp
X-Ratelimit-Remaining
Ram
Prama
X-4ormat-Cacheable
X-Nginx-Cache
HCVer
X-Disney-Akamai-Rule
Noq
X-Orig-Vary
Content-Transfer-Encoding
X-Location
X-SP-UniqueName
X-Runtime-Rack
HAVer
X-SP-Farm
X-Ratelimit-Limit
X-Varnish-ID
X-TB-M
X-FireWall-Port
IBM-Web2-Location
X-FW
X-WPL-DATA
X-Stage
RequestId
X-A
Edit
Cm-Server
X-SERVER-NAME
X-Hrouter
X-Hstore
Front
X-NginX-Server
X-Analytics
X-Drectory-Script
X-Adobe-Loc
X-Adobe-Content
X-RealServer
X-Unique-ID
X-JSESSIONID
A-Powered-By
X-Pagename
X-Hit-Cache
X-Sys-Req-ID
X-Resource
SRV
X-AVG-Country-Code
Dtk-Cache-Check-0
Cached
X-Redman-Backend
X-Redman-Final-Url
X-Rq
X-RequestId
X-Cache-CFC
Local-Info
X-Akamai-Edgescape
X-Avg-Cookie-Expires
X-Real-IP
X-App
Backend-Timing
X-Runtime-Memory
X-GoCache-CacheStatus
Lookup-Cache-Hit
X-Span
Web-App-Origin-Name
X-Yottaa-Metrics
X-Cache-2
Accept-Charset
X-App-Runtime
X-ClientSide-Caching
X-ACMCache
X-Role
X-Runtime-Affili
X-Proxy-Backend
X-Yottaa-Optimizations
Accept-Language
X-Path-Route
X-Fedora-School-Id
X-Backend-Status
X-Generated-Timestamp
X-E
Nginx-Cache
Server-Info
X-Balanceador
X-AF-Userserver
X-Dw-Trace-Id
X-Provisioner-Version
X-Domain-Checked
SHInfo
X-ServerIndex
WWW-Authenticate
X-VC-TTL
X-Atraveo-Expires
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Culture
X-Atraveo-Zone
X-Atraveo-From-Varnish-Cache
X-Vcache
Identity
X-Appmachine-Environment
X-Remote-Addr
X-CLOUD-TRACE-CONTEXT
X-Atraveo-Cache-Control
X-ARRServer
X-Atraveo-ETag
X-Force
X-Request-Uri
Frame-Options
X-Source-ID
X-PRAM
X-Purge-URL
Environment
X-LP
X-CB-Server
Request-Country
X-Purge-Host
X-Agent
X-Pantheon-Az
X-Jphone-Copyright
X-Ratelimit-Reset
X-CacheDebug
X-Session-ID
Beyond-Iis
X-Varnish-Debug-Age
X-IIJ-Cache
X-NWS-UUID-VERIFY
X-Varnish-Debug-TTL
X-Distil-CS
Request-EU
Cteonnt-Length
XDomainRequestAllowed
Access-Control-Request-Headers
X-Debug-Token
X-Processed-By
X-PF-Uncompressing
X-Cacheable-TTL
Url
X-ESI
X-Cache-Ttl
Firespring-Website-Id
X-Rule
X-CACHE-TTL
X-Server-IP
Lb
X-Frames-Options
X-Varnish-Hostname
X-App-Server
AsisCache
Upgrade-Insecure-Requests
X-SE-Debug
X-WR-MODIFICATION
X-RiS-UFDI
Worker
X-VCS-Cacheable
X-Nginx-Host
SVR
X-Cms-Mode
X-VCS-Ttl
WP-FROM-CACHE
CS-SERVER
X-Dev
Proxy-Agent
Eomportal-Instance
X-Client-Vid
X-AEM
X-Ms-Request-Id
X-Detected-Device
X-Map-Context
X-JG-Page-Cache
X-EPiphany-Vid
Cmsid
X-GeoIP
X-V
ServerSignature
X-Webstats-RespID
Referer
Cmstype
X-Req-Head-Response
CLMOB
ServerTokens
X-Client-Image-Vid
X-Upgrade-Enabled
X-Proxy-Skip
X-HeBS-Cache-Status
Accept-CH
X-Consent-Required
X-Domino-CacheValidationWithETagReason
Myheader
AETN-Area-Code
AETN-City
X-Upstream-Backend
X-Domino-CacheValidationWithETagResult
AETN-Continent-Code
AETN-Latitude
X-Confluence-Request-Time
Cleartype
X-Upstream-Status
Resin-Trace
X-Cache-Dispatcherpragma
X-DSMX-Rewrite-MS
X-Info
VANITY-HOST
X-DSMX-Render-MS
X-Actindo-Request-Id
X-Actindo-Rs
X-AOL-HN
X-Batcache
X-CAPServer
EagleEye-TraceId
Home
Il-Cl
Play-Detected-Device
X-Proxy-Cache-Control
Ufe-Result
AETN-Country-Name
X-Via-S
X-WebNode
Access-Control
Play-Detected-UserAgent
AETN-EU
X-SAPP
X-Aramark-SID
X-B2f-Not-Route
X-Cache-Dispatchercachecontrol
AETN-Country-Code
X-Ghost-Cache-Status
Disablevcache
Proxy-Cache
IISExport
Thanks
X-Cocoon-Version
X-Actindo-Thread-Id
Dispatcher
Machine
AKA-DEVICE
X-PBY
X-HashTwo
X-Data-Request
X-WR-Flags
AETN-State-Code
X-HTML-Minification-Powered-By
X-Amcomm-Site
X-Cache-Doesi
X-Resty-Request-Id
X-GSL-Server
X-Soro
WP-AdvCache-MemCached
X-TKP-SRV-ID
X-Oferteo-Domain
X-Session-Reinit
X-Akamai-Transformed
X-Header
Max-Age
X-Resolver-IP
Num
X-Framework
Traffic-Origin
Server-ID
X-Application
X-HA-Backend
X-Varnish-Cache-Local
X-Amz-Id-1
X-Plat
X-Forwarded-Host
AETN-Postal-Code
AETN-Longitude
X-Adnet
AR-CACHE
X-LW-Web-Server
AR-PoweredBy
AR-SID
*
AR-ATIME
Load-Balancer
IES-Server
X-HA-Frontend
AETN-DEVICE
Adm-Server
X-HydroSheep
X-Highwire-Sitecode
X-SDE-Name
X-Highwire-Smart-Code
X-HostName
X-Varnish-URL
NtCoent-Length
Web
Now
X-Now-Trace
X-OpenCart-Lightning
Bios
COMMERCE-SERVER-SOFTWARE
X-Hosting-Env
X-DataDome
Copyright
Dynatrace
X-Dynatrace
X-MCB-Server
X-Depends
X-Cf-Powered-By
X-Desc
X-Geo-IP
X-Garden-Version
X-Beget-Proxy
X-CacheID
X-Fastly-Request-Id
X-Protected-By
X-Custom-Name
X-MAT-GEO
X-Requestid
X-Nx-All
X-RiS-PX
Magicmarker
HitType
X-Nx
X-Clara-ASAP
Paypal-Debug-Id
X-Skip-Cache
Yoncu-Errno
X-ASAP-Cache
X-Blog
Dis-Env
X-Flex-Lang
X-AutoRu-App-Id
X-Flex-Lastmod
X-Served-Server
Fastly-Backend-Name
X-Autoru-Host
X-Flex-Evstart
X-Flex-Evend
VAR-Cache
X-Flex-Community
X-Beatles
X-DN-Cache-Control
Edgecast
X-Test
X-Timestamp
X-Middleton-PageSpeed
X-Flex-Tags
X-SH-Cache-Status
Ttl
X-UA-Bot
X-WebKit-CSP-Report-Only
X-Flex-Tag
X-Varnish-Id
From
X-Cache-Detail
X-Secret
X-Gyrobase-Publication
X-Cache-Time
X-LBPoolMember
X-Block-Rule
ServerNode
Viewport
MageStack-Web-Node
MageStack-Loadbalancer
MageStack-Magento-Version
MageStack-PageSpeed
X-Generated-Time
X-Directory-Script
X-Server-Addr
X-Goog-Meta-Replace
Id
Pragrma
Pf.Web.Request.Id
X-Goog-Meta-Policy
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Block-RuleID
X-WEBMGR-CACHE
Provider
X-CacheLoc
MageStack-Debug
MageStack-Tag
X-UnsetCookies
Prot
TC-S-Cache
MageStack-Config
TC-Cache-U
TC-Cache-IC
BALANCEDTO
PServer
Arrnode
TC-Cache
Aurora-Node
DNNOutputCache
MageStack-Cache
MageStack-Cache-Lifetime
MageStack-Cache-Status
MageStack-Cacheable
MageStack-Area
MageStack-Cache-Hits
Fastly-Debug-Digest
TC-S-Cache-M
Pramga
X-FastCGI-Cache-Status
X-Served
X-Deity
X-Cache-Me-Harder
X-DB-Content-Length
X-Access-Control-Allow-Origin
CommunityServer
X-Reflector-Cache
X-Gateway-Rate-Limit-Delayed
X-Via-NSCOPI
X-Reflector
X-Tag-Playlist
X-Rack-Cors
X-Appversion
X-TLS-Version
X-Pj-Cache-Status
Device
BackendServer
X-IP
X-APIAUTH-VAL
X-Varnish-Debug-Hits
X-ENDPOINT
X-ORIKEY
X-APIVERSION
X-Vary-Options
X-ROUTING
X-RAMCache
Report-To
X-Serv
X-FORWARDED-PROTO
X-Varnish-Ip
Serverid
VSID
ViewMode
Server-Ip
X-WP
VServer
NLCacheNote
X-SV
X-Smartcache-Keys
X-Smartcache-Timeout
X-Appid
X-Compress-Hint
NODE
X-PBS-Appsvrip
X-BServer
X-PBS-Appsvrname
X-Status
X-PBS-Fwsrvname
X-NewsFlow-Sitename
X-MainProfileURL
X-MainProfileCategory
X-Instance-Id
X-MainProfileID
X-MainProfileName
AMP-Redirect-To
X-MyName
FRONT-END-SECUREBROWSER
X-ReqId
X-RemovedCookies
X-Airee-Node
YF-ID
X-SilverStripe-Cache
X-Reqid
X-Aramark-CSID
X-BPool-Back
TP-Cache
HSTS
TP-L2-Cache
X-Cluster
X-Compressed-By
X-DynamicCache
X-Captured
X-Rewritten-By
X-SCM-Server-Number
X-AMAZEEIO
X-Powered-By-ADS
X-Node-Id
X-NodeID
SB-Site-IE-VERSION
SB-Site-Device
X-WN-ClientGroup
X-V-Cache
Amfplus-Ver
X-Cache-Node
X-CH-Device
X-Ms-Version
X-Nginx-Request-Processing-Time
Nitro-Cache
X-Webcelerate
X-Proxy-Cache-Key
SINA-LB
X-Cache-FS-Status
X-Proxy-Server
X-ProcessESI
X-MrHost
Session-Id
Provided-Host
X-ManagedFusion-Rewriter-Version
X-Origin-Server
X-Gannett-Site-Version
X-Svr
X-ZSITES-DNS
X-Beluga-Record
X-Beluga-Node
X-Beluga-Response-Time
X-Beluga-Response-Time-X
X-Beluga-Trace
X-Beluga-Status
X-Beluga-Cache-Status
X-Client-Id
Og
X-Origin-Date
Ohc-Response-Time
X-Obvious-Tid
X-Obvious-Info
X-ACCELERATE
AC-ELC
CDN-Cache
ServerIP
CDN-CachedAt
CDN-PullZone
CDN-Uid
CDN-RequestId
Session-From
X-Streams-Distribution
Tk
CDCHOST
X-DevSrv-CMS
Debug-Status
X-Refresh
X-Varnish-Grace
Keywords
X-Bip
X-Amzn-Trace-Id
X-Cache-On
X-Cache-Varnish
X-Envoy-Upstream-Service-Time
X-CRA-DC
X-Amzn-RequestId
X-Amz-Apigw-Id
Ibf5scheme
X-SayCDN-TTL
N365rili
X-7d-Instance-Id
X-7d-Trace-Id
X-Highwire-RequestId
X-Highwire-SessionId
Filters
Description
X-Layout
X-Who
X-FPC
X-Static
X-Title
X-Policy
X-PHP-Response-Code
X-Rebelmouse-Cache-Control
X-SmartBan-Host
X-SmartBan-URL
Access-Control-Allow-Header
SINA-TS
PBS
X-Vol-Correlation
ScoreTracker
X-Qnm-Cache
X-Now-Instance
X-Vol-Mrp
X-Wodby-Node
Hosted-By
Hit-Count
AMP-Access-Control-Allow-Source-Origin
NZSpeedy
X-ETag
Page-Template
HTTPS
GranicusServer
MS-CV
Tempo
X-M-Log
X-Cache-Warmer
X-Lb
X-Rack-CORS
EN-User
X-M-Reqid
Cf-Ipcountry
StatusCode
X-Shopware-Cache-Id
X-Cache-TTL-Current
X-PM-ID
Server-Id
X-Proto
X-Search-Id
X-Pass-Through
X-Cache-TTL-Age
X-Custom-Header
X-Max-Age
X-Mighty-Proxy
DrivedBy
Ssl-Proxy-Server
X-Src-Webcache
Purge-Cache-Tags
X-Origin-Cache
X-Route
X-Say-TTL
X-Shopware-Allow-Nocache
X-NoIndex
X-Instance
X-EC2-Instance-Id
CF-Worker-Script
Response-Time
NGX
X-Lw-Cache
X-Varnish-Backend-Beresp-Backend
X-W3TC-Minify
X-M
X-MID-Host
MageStack-Cache-Lifetime-Sent
X-ProBase-Server
X-Server-Generated
MageStack-Cache-Warning
X-This-Proto
X-Build-Id
X-Powered-By-Home.Pl
X-Processed
X-Firefox-Spdy
X-Varnish-Cache-Ttl
X-Nginx
X-Page
X-FromPodPressCache
X-Backside-Transport
X-HA
REFRESH
MageStack-Last-Modified
SB-Cache-Life
SB-Cache-Remaining
X-Cname-TryFiles
X-Say-Cacheable
X-Test-Debug
X-Cache-LB
X-We-Are-Hiring
WN
X-Global-Transaction-ID
X-XHTML-Minification-Powered-By
X-Enhanced-By
X-Oracle-Dms-Ecid
X-Actual-Url
SERVER-ID
X-Cdn-Forward
X-COUNTRY-CODE
X-Geo
X-RENDER-TIME
X-Scheme
X-CACHE-KEY
X-DEBUG
X-Mobilized-By
X-Sid
X-Xml-Http-Blocked
X-PROCESSED-BY
X-Vid
X-Ruxit-Js-Agent
X-Serverid
X-Tradeindia-Request-GUID
X-NMT-Proxy
MSThemeCompatible
X-Old-Content-Length
OracleCommerceCloud-Version
X-Middleton-Pagespeed
OracleCommerceCloud-Sandiego
X-Ssl-Cipher
X-Healthy
Language
Actual-Object-TTL
X-Country
Returned-Status
SERVER-NAME
WebServer
MwpReleaseVersion
X-Meta-Imagetoolbar
X-Node-App
MachineName
X-Meta-MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
X-Instance-Name
X-Hit
X-Nginx-Page-Cache
X-FG-RequestId
X-JoinUs
X-Pageid
X-ASAP-Age
X-No-Session
X-Front-Cache
X-Fastly-Backend-Reqs
X-Firewall
X-Machine
RSL-Trace-ID
X-ENV
ClientIP
X-Accel-Cache-Control
Prototype-RootPath
EQ-Cache
Generate-Time
X-Enabled3
X-Enabled2
Servername
X-TEST
X-SSLTerm-Server
X-Itkg-Cache-Tags
X-Enabled1
X-Cache-Id
PagesDisplayed
X-Avvio-Cms-Cacheload
X-CSRF-Token
Gzip
X-Expires
F5-IpCliente
X-Magento-Route
MSSmartTagsPreventParsing
ProxiaInstanceId
X-CAMPUSSUITE-TENANT
VC-NoCache
V-Cache-Ttl
X-Tradeindia-SMgmt
X-SG-Server
X-CAMPUSSUITE-ENVIRONMENT
X-CAMPUSSUITE-DEBUGGING
Ews
X-Time-Spent
X-Varnish-TTL-Debug
X-Varnish-Age-Debug
Amp-Access-Control-Allow-Source-Origin
LB
PB-RID
PB-PID
X-Optimization
X-GZip
X-Appmachine-CreatedOn
Fastly-Restarts
X-Appmachine-Duration
X-Appmachine-Name
X-From-Cache
X-Cache-HT
PROGMA
X-Grid-Server
Origin-Vm
X-Telligent-Evolution
Fastly-Drupal-Html
X-Catalyst
X-Bitrix-Composite
X-UT-Cache
X-Router
X-ORIGN-SERVER
X-InDy-Query
X-InDy-Memory
X-InDy-Time
X-Mobile-Rewrite
X-Origin-Upstream-Status
X-Beresp-Ttl
X-Olaf
X-Transaction-Name
X-SEA-Instance-Name
X-BeResp-Ttl
X-Content-Type
X-D2id
X-UPSTREAM-Address
X-Cachable
X-SCProxy
X-Amz-Meta-Version-Id
X-Activity-Id
X-Az
X-Debug-Message
X-Mobile-Device-Type
X-Mobile-Device
X-HP-CAM-COLOR
X-HS-Status
X-Qiniu-Zone
X-Oracle-Dms-Rid
Content
Requested-Host
Unique-Request-Id
SBSS
X-Log
X-FastCGI-Cache
HitInfo
X-Navigation-Version
X-Box
X-Cache-Action
X-Cache-Extended
X-SSL
X-OPNET-Transaction-Trace
X-Render-Time
X-Cache-Via
X-Ser
Arrow-RequestId
X-PressLabs-Stats
SS
X-Dck
X-Built-By
X-Zendesk-User-Id
FastCGI-Cache
X-Zendesk-Origin-Server
X-Abuse
X-RequesterIP
X-WA-Info
Sl-Pgid
X-CloudBurst-Backend
X-Varnish-Cache-Control
X-Served-From
X-VHosting-Cache
ID
X-Cache-ID
X-Boot
X-BIT-Node
X-Batcache-Reason
X-CloudBurst-Frontend
X-CloudBurst-Cache
X-CloudBurst-WordPress
X-Pagely-Cache
X-Server-Ip
Web-Server
Webserver
X-Bcwwwid
X-B3-Sampled
X-Built-With
X-Cdn-Origin
X-Fpc
X-CGP
TYPO3-Sitename
TYPO3-Pid
ModuleCacheType
L5d-Success-Class
NKBVHEADER
Progma
RN-Server
Request-Time
X-HAProxy
X-Homeaway-Requestmarker
X-Varnish-Cached-TTL
X-Varnish-Cached
X-XHR-Current-Location
Xc
CommercePlatform-Version
CmsfirstPublishTimestamp
X-UPServer
X-Sn-Servicetimems
X-MCF-ID
X-Jcms-Ajax-Id
X-NginX-Upstream
X-Ruby-Cluster-ID
X-ServiceProvider
HA-Urlpath
HA-Servedtime
X-Response
X-Requested-With
X-Rocket-Nginx-File
X-Rocket-Nginx-Reason
X-UType
X-SuperCache
X-Proxy-Id
X-PoweredBy
X-DDM-SERVER
X-Clx-Request
X-DDM-SERVER-UPDATED
X-MSU-SOURCE
X-Phpwcms-Release
X-Phpwcms-Page-Processed-In
X-Varnish-Action
X-VG-WebCache
HA-Geolat
HA-Geocountry
HA-Geolon
HA-Georegion
HA-Ipaddr
HA-Host
HA-Geocity
HA-Cloudapp
Backend-Powered-By
XX
BlockPHPCallEnd
Content-Sn
DB-Nickname
Httpd-Identifier