Threat Level: green Handler on Duty: Russ McRee

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Set-Cookie
Server
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
Strict-Transport-Security
CF-RAY
X-XSS-Protection
Age
X-Cache
Expect-CT
Content-Language
P3P
X-AspNet-Version
X-Pingback
Via
X-UA-Compatible
Upgrade
X-Xss-Protection
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Adblock-Key
Referrer-Policy
X-Varnish
X-Request-Id
X-Check
X-Generator
X-Language
X-Template
X-Type
X-Buckets
X-Cache-Group
X-Pass-Why
WPE-Backend
X-Drupal-Cache
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-Wix-Server-Artifact-Id
X-Accel-Buffering
Alt-Svc
X-Ac
X-Hacker
X-Cache-Hits
Host-Header
X-Sorting-Hat-Section
X-Dc
X-Alternate-Cache-Key
X-AspNetMvc-Version
X-ShopId
X-Sorting-Hat-PodId
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-ShardId
X-Sorting-Hat-PrivacyLevel
P3p
X-Via
X-Runtime
X-Powered-By-Plesk
X-Served-By
X-Contextid
X-PC-Hit
X-PC-Key
X-UA-Device
X-ServedBy
X-PC-AppVer
X-Amz-Cf-Id
X-PC-Date
X-PC-Host
MS-Author-Via
Content-Location
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Powered-CMS
X-IPLB-Instance
X-Timer
X-Rid
X-Seen-By
X-Wix-Request-Id
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Tumblr-User
Status
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Tumblr-Pixel-1
CF-Cache-Status
Cartoon
X-Tumblr-Pixel-2
Access-Control-Allow-Credentials
X-Iinfo
X-Backend
X-WPE-Loopback-Upstream-Addr
X-Cache-Status
X-Ua-Compatible
X-CST
X-Host
Powered-By
Content-Encoding
X-Endurance-Cache-Level
X-NewRelic-App-Data
X-FRAME-OPTIONS
X-Mod-Pagespeed
X-Cache-Hit
X-Port
X-Cache-Enabled
X-Tumblr-Pixel-3
X-CDN
X-Newrelic-App-Data
X-Logged-In
Keep-Alive
X-Server-Powered-By
X-DIS-Request-ID
X-Drupal-Dynamic-Cache
X-Nginx-Cache-Status
X-Robots-Tag
X-Server
X-Request-ID
X-Accel-Version
X-Proxy-Cache
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Turbo-Charged-By
X-Page-Speed
X-Content-Powered-By
X-GitHub-Request-Id
X-LiteSpeed-Cache
X-Content-Digest
Content-Security-Policy-Report-Only
X-Tumblr-Pixel-4
X-Rack-Cache
X-FW-Hash
X-FW-Server
X-AH-Environment
X-FW-Serve
X-FW-Type
X-FW-Static
X-Pad
X-ASPNET-VERSION
Request-Context
X-Varnish-Cache
Edge-Control
X-Hits
X-Webcom-Cache-Status
X-Trace
X-XRDS-Location
X-Request-Country
X-BC-Stapler
SPRequestGuid
X-Node
X-SERVER
X-SharePointHealthScore
X-MS-InvokeApp
Access-Control-Expose-Headers
Edge-Cache-Tag
X-HS-Cache-Config
X-HS-Content-Id
MicrosoftSharePointTeamServices
WP-Super-Cache
Cf-Railgun
X-HS-Combine-CSS
X-CF-Powered-By
X-Amz-Id-2
X-Amz-Request-Id
Charset
Timing-Allow-Origin
X-Died
X-FullPageCaching
X-Content-Security-Policy
X-PHP-Backend
X-Webserver
X-Cache-Lookup
X-Fastly-Request-ID
X-INKT-SITE
X-INKT-URI
X-Cnection
Request-Id
Access-Control-Max-Age
X-PhApp
SPIisLatency
X-Backend-Server
SPRequestDuration
X-Edge-Cache-Key
X-Edge-Cache
CONTENT-SECURITY-POLICY
EagleId
MicrosoftOfficeWebServer
Rating
Composed-By
X-Swift-CacheTime
X-Swift-SaveTime
X-Tumblr-Pixel-5
X-SS-Location
X-SS-Conf
X-CDN-Pop-IP
X-CDN-Pop
Grace
X-Server-Name
X-Tumblr-Content-Rating
X-Safe-Firewall
X-DDC-Arch-Trace
X-NF-Request-ID
X-Device
Served-By
X-Spip-Cache
Server-Timing
Liferay-Portal
X-Dw-Request-Base-Id
X-Hyper-Cache
X-Cloud-Trace-Context
Ali-Swift-Global-Savetime
X-VCache
Front-End-Https
Permitted-Cross-Domain-Policies
X-Do-Not-Hack
X-HeyJason
P-WS
Surrogate-Control
X-Original-Date
P-LB
X-Microcache
X-Servedby
X-LiteSpeed-Cache-Control
X-TNCMS
X-Loop
X-StackifyID
Display
X-Middleton-Display
X-Sol
X-Wix-Punisher
X-Acc-Exp
X-Cluster-Node
Response
X-Middleton-Response
X-RateLimit-Limit
X-RateLimit-Remaining
X-Clacks-Overhead
X-OneAgent-JS-Injection
X-FB-Debug
X-Firenze-Processing-Times
X-Kinsta-Cache
Content-Style-Type
X-RateLimit-Reset
X-Jimdo-Instance
X-Jimdo-Wid
Content-Script-Type
Public-Key-Pins
X-DNS-Prefetch-Control
X-Debug-Info
X-Shopid
X-Sorting-Hat-Privacylevel
X-Sorting-Hat-Shopid-Cached
X-Sorting-Hat-Podid
X-Sorting-Hat-Shopid
X-Sorting-Hat-Podid-Cached
X-Sorting-Hat-Featureset
X-Shardid
X-Vtex-Processado-Em
X-Tumblr-Pixel-6
X-Age
X-HOST
X-Amz-Version-Id
X-Goog-Hash
Refresh
X-XN-Trace-Token
X-XN-XNHTML
PageSpeed
X-Magento-Tags
Fpc-Cache-Id
X-Cached
X-Zen-Fury
X-User-Agent
X-Ruxit-JS-Agent
X-DynaTrace-JS-Agent
X-N-OperationId
X-Px
X-Hostname
X-Cache-Config
Wpe-Backend
X-WebKit-CSP
X-Version
Retry-After
X-Url
X-LW-Cache
Xkey
Feature-Policy
X-Generated-By
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Handled-By
X-Goog-Metageneration
X-Goog-Generation
X-Frame-Option
X-Topify-Platform
X-Upstream
X-FORWARDED-FOR
X-Edge-Location
Rt-Fastcgi-Cache
Allow
Access-Control-Request-Method
X-MiniProfiler-Ids
X-Source
TCN
Fastcgi-Cache
X-Request-Time
X-Whom
X-Loopia-Node
X-ET-API-VERSION
X-ET-API-ROOT
X-ET-API-ORIGIN
X-B-Cache
X-CMS-Version
Product
X-EdgeConnect-Origin-MEX-Latency
X-Cached-By
X-SRCache-Fetch-Status
X-SRCache-Store-Status
ServedBy
X-Content-Options
Warning
X-URLSCHEME
X-Outils-CS
X-EdgeConnect-MidMile-RTT
Last-Published
X-Fastcgi-Cache
X-Guploader-Uploadid
X-RESOURCE
X-AspNetWebPages-Version
X-Platform-Cluster
Powered
X-Platform-Router
X-Platform-Processor
X-Tec-Api-Root
X-Tec-Api-Version
X-Accel-Expires
X-Tec-Api-Origin
X-From
Fhost
X-Magento-Cache-Debug
X-Location-Id
X-Signature
X-Application-Context
X-Engine
X-Varnish-HitMiss
X-Varnish-Host
Public-Key-Pins-Report-Only
X-Varnish-Count
X-Cache-Key
X-Developer
X-Returned-From-DLL
X-Passed-To-DLL
X-Passed-To
X-Returned-From
X-Original-Request
X-Vtex-Processed-At
X-Vtex-Remote-Cache
X-Umbraco-Version
X-Actual-URL
X-VTEX-Janus-Router-Backend-App
X-VTEX-Cache-Status-Janus-ApiCache
Dmn
No
X-Powered-By-VTEX-Janus-ApiCache
X-CacheServer
X-Cache-Info
X-Platform-Server
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-NWS-LOG-UUID
X-Varnish-Cache-Hits
X-LBLID
Generator
X-Stale
Cache-Key
X-DynaTrace
X-Response-Time
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Microcachable
X-Device-Type
X-F-Cache
X-Ezoic-Cdn
X-URL
X-Platform
X-Shop-Id
X-HS-Content-Campaign-Id
X-PERF
X-Defender
X-ApacheServer
Cache-Provider
X-Micro-Cache
Imagetoolbar
X-UD-Method
X-S
Host
Origin
X-Hosted-By
Surrogate-Key
X-ARC
X-Sapient
Arr-Disable-Session-Affinity
X-Gateway-Cache-Key
X-Gateway-Cache-Status
X-Gateway-Skip-Cache
Alternate-Protocol
Version
X-Recruiting
X-Msg-2-Log
X-Cache-Rule
Akamai-IP
X-SSLProxy
X-SSLUpstream
X-Dns-Prefetch-Control
X-Translation
X-Microcache-Status
X-Cache-Namespace
X-Lambda-Id
X-App-Status
DynaTrace
X-SO
MIME-Version
X-BS
X-I-Sp
Content-Hash
X-Powered-By-360WZB
X-Via-JSL
X-Supported-By
X-Instart-Request-ID
X-Svr-Proxy
X-SVR-IIS
X-Forwarded-For
X-Akam-SW-Version
SSPAppContext
X-Rnd
X-Platform-Cache
X-Cache-Age
X-Magento-Cache-Control
X-Dealeron-Original-Url
Pagespeed
X-DealerOn
X-Dealeron-Backend
WZWS-RAY
X-Track
X-Duration
USPLoggingUUID
S-Cnection
Node
X-Powered-By-VelaWeb
X-Director
X-Art-Request-Id
X-Acquia-Application-UUID
X-Correlation-Id
X-Cache-TTL
X-Environment
X-NetCat-Version
X-Server-Upstream
X-SSL-Cipher
X-Powered-By-VTEX-Janus-Edge
RTSS
Pool
X-SSL-Protocol
Content-Disposition
X-Hypernode
Edge-Control-Message
X-Page-Cache
X-Cache-Tags
X-LB-Node
X-Matrix-Server
X-Edge-IP
X-Matrix-Proxy
X-Expires-Orig
X-Rocket-Nginx-Bypass
X-CSRF-Protection
X-Abgroup
X-ServerName
X-TransIP-Balancer
X-App-Hosting
SN
X-Storage
X-Dispatcher
X-Server-ID
Accept-Encoding
X-Server-Id
X-TransIP-Backend
X-Generated
X-Correlation-ID
X-Cache-Control-Orig
X-Varnish-Cacheable
X-Cache-Debug
X-Last-Modified
X-Daa-Tunnel
X-Debug
X-Hiawatha-Cache
X-NoCache
X-Drupal-Cache-Tags
X-ORACLE-DMS-ECID
X-Cache-Handler
X-Cache-Lifetime
FAI-W-FLOW
X-Grace
Wsr-Cache
SiteSpeed
X-Front
X-Vcap-Request-Id
Src-Update
Update-Time
X-Revision
X-VARITI-CCR
Req-Id
X-Gamma-Serve
X-Varnish-ObjectSource
Powered-By-ChinaCache
X-Varnish-GracePeriod
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-Varnish-RemainingLife
X-Geo-Country
X-Client-IP
Content-Encoding-Handler
X-Sucuri-ID
X-SV-Cacheable
Contao-Page-Layout
X-SV-Nginx-Duration
X-SV-Pid
X-SRV
X-Cache-Server
X-SV-FromDBCache
X-SV-Expires
X-SV-Duration
X-SV-Edge
X-SV-CacheTags
X-SV-CreatedAt
X-Ttl
X-I
X-Amz-Meta-S3cmd-Attrs
X-LB-Server
X-Now-Id
X-GUploader-UploadID
X-Rocket-Nginx-Serving-Static
ServerID
X-CJ-Soft
X-Discourse-Route
X-Litespeed-Cache-Control
X-Firenze-Processing-Time
X-Vhost
X-Route-Server
Cache
X-Content-Type-Option
X-Cache-Operation
Lsrequestid
X-Varnish-TTL
X-Sucuri-Cache
X-Env
X-SDS
X-Dispatch
X-GeoIP-Country-Code
X-Flow-Powered
X-Cache-Level
X-Drupal-Cache-Contexts
X-Locale
X-Varnish-IP
X-TransIP-Reserved
X-Content-Encoded-By
X-Forwarded-Proto
X-TTFB
X-TTFB-L
X-Cache-Engine
X-SmugMug-Values
Smug-CDN
X-SmugMug-Hiring
X-Country-Code
X-Cache-Only-Varnish
Https
X-Twitter-Response-Tags
X-Transaction
X-Pressidium-NinukisWP-Ver
X-Trace-Id
Cneonction
X-Connection-Hash
X-Cache-Expires
X-Esi
X-ATG-Version
X-Webkit-CSP
X-Server-Instance
Strikingly-Cache-Region
X-Amz-Rid
Strikingly-Cached-Version
X-Varnish-Backend
Strikingly-Cached
Cache-Tags
X-IsCacheURL
W
X-Varnish-Age
X-Unbounce-Variant
X-Unbounce-VisitorID
X-Litespeed-Cache
X-Unbounce-PageId
X-Service-Id
X-Speed-Cache-Key
X-Varnish-Url
X-FIRSTBase
Author
X-Time
Service-Worker-Allowed
X-Speed-Cache
X-Cache-Type
Server-Name
X-GeoIP-Country-Name
Pv
Backend
X-N
X-Always-Cache
If-Modified-Since
X-Acquia-Application-Trace
X-Akamai-Device-Model
SEOMOZ
X-Cache-Control
MJ12bot
X-Akamai-Device-Characteristics
S
ServerName
X-BackendServer
Section-Io-Id
X-TTL
X-Middleware-Start
X-Url-Base
X-Cookie-Domain
Location
Content-MD5
X-PwB-Node
X-Magnolia-Registration
X-ID
Fw-Via
MC
AMF-Ver
Use-Proxy
X-Varnish-Server
X-Cache-Device-Type
X-Origin
X-LB
X-Config-Blacklist-Version
X-ORACLE-DMS-RID
X-Dynamic-Cache
X-Symfony-Cache
X-Storage-Cache
X-Storage-Cache-Date
X-SRCache-Key
X-Storage-Cache-Expires
Custom-Header
X-Content-Age
From-Origin
X-Amz-Meta-Content-Md5
X-Yadis-Location
X-High-Performance
X-Varnish-Retries
X-CF-Passed-Proto
Nodo
X-Xrds-Location
X-Wikidot-Backend
PICS-Label
X-UPSTREAM
NetMindSessionID
Page-Completion-Status
X-Wikidot-Static-Cache
X-CacheFROM
X-Pantheon-Environment
X-Pool
Surrogate-Key-Raw
X-Browser
X-CDN-Forward
Tracecode
X-Pantheon-Phpreq
X-ServerID
Ohc-File-Size
X-FTR-Request-ID
Proxy-Connection
X-Pantheon-Site
X-Key
Xc-Version
Qs-Cache
X-Cache-PageType
NnCoection
X-Cache-Fix
Srv
X-Content-Security-Policy-Report-Only
X-Srv
X-Real-Server
X-NginX-Cache
X-HW
X-Amz-Storage-Class
FindLaw
X-Now-Cache
Prama
X-Vip
X-Processing-Time
X-BKSrc
X-Nbs
X-Empowered-By
Pics-Label
X-Varnish-Hits
X-Shard
X-Id
X-Varnish-Ttl
X-Sedo-Request-Id
Hummingbird-Cache
X-Frontend
X-FW
X-Worker
IM-Version
X-Nitro-Cache
X-Cache-Miss-From
Access-Control-Allow-Method
Content-Transfer-Encoding
HCVer
Noq
HAVer
X-VC-Enabled
Ramp
X-SP-UniqueName
Ram
X-RealServer
X-RequestId
X-Ratelimit-Limit
X-Orig-Vary
X-Runtime-Memory
X-Location
X-Runtime-Rack
X-Proxy
Dtk-Cache-Check-0
X-Ratelimit-Remaining
Drupal-Pagecache-Memcache
Content_type
X-Nginx-Cache
X-SP-Farm
RequestId
IBM-Web2-Location
X-TB-M
X-WPL-DATA
X-Stage
X-Distributor
Swift-Performance
X-Varnish-ID
CacheControlHeader
X-Shield-Request-Id
X-App
X-Akamai-Edgescape
SRV
X-Avg-Cookie-Expires
X-AVG-Country-Code
X-Redman-Final-Url
X-Redman-Backend
X-Real-IP
Cm-Server
X-Resource
X-A
Front
Edit
A-Powered-By
X-Pagename
Cached
X-Hit-Cache
X-Unique-ID
X-CB-Server
X-Rq
X-4ormat-Cacheable
X-Analytics
X-Cache-CFC
X-NginX-Server
X-JSESSIONID
Local-Info
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Cache-2
Backend-Timing
Accept-Language
X-Proxy-Backend
X-App-Runtime
X-ClientSide-Caching
X-Runtime-Affili
X-Span
X-GoCache-CacheStatus
Web-App-Origin-Name
X-Vcache
X-CLOUD-TRACE-CONTEXT
Nginx-Cache
X-Disney-Akamai-Rule
Server-Info
Identity
X-FireWall-Port
X-Domain-Checked
X-Provisioner-Version
X-ServerIndex
X-Appmachine-Environment
X-ARRServer
X-CAPServer
X-Drectory-Script
X-Varnish-Hostname
X-AF-Userserver
X-Backend-Status
X-Culture
X-Rule
X-PF-Uncompressing
Frame-Options
X-Dw-Trace-Id
X-App-Server
X-Generated-Timestamp
X-Path-Route
WWW-Authenticate
X-Force
X-Fedora-School-Id
X-Atraveo-Zone
X-Hrouter
X-Hstore
X-Request-Uri
X-PRAM
X-Atraveo-Varnish-Server-Id
X-Atraveo-TTL
X-Atraveo-Cache-Control
X-Remote-Addr
X-Source-ID
X-Atraveo-ETag
X-Atraveo-Expires
X-Atraveo-Set-Cookie
X-Atraveo-From-Varnish-Cache
X-E
X-Atraveo-Param-Rm
X-LP
Proxy-Agent
Environment
X-Session-ID
X-NWS-UUID-VERIFY
Request-Country
X-Purge-Host
X-Purge-URL
X-Role
X-Varnish-Debug-TTL
X-Agent
X-Sys-Req-ID
X-Ratelimit-Reset
Beyond-Iis
Request-EU
X-Pantheon-Az
X-Varnish-Debug-Age
Cteonnt-Length
Lookup-Cache-Hit
Accept-Charset
Access-Control-Request-Headers
X-Jphone-Copyright
X-IIJ-Cache
X-CacheDebug
XDomainRequestAllowed
X-Distil-CS
X-Debug-Token
Upgrade-Insecure-Requests
X-Cacheable-TTL
Url
SVR
X-Processed-By
X-WR-MODIFICATION
X-VCS-Cacheable
Lb
SHInfo
X-ESI
WP-FROM-CACHE
X-CACHE-TTL
CS-SERVER
Firespring-Website-Id
X-Cache-Ttl
X-VCS-Ttl
X-Server-IP
X-Frames-Options
AsisCache
X-VC-TTL
X-Nginx-Host
Worker
X-SE-Debug
X-Dev
X-Cms-Mode
ServerTokens
X-HeBS-Cache-Status
Accept-CH
X-Client-Image-Vid
X-AEM
X-Webstats-RespID
X-GeoIP
X-Detected-Device
X-V
X-Balanceador
ServerSignature
X-Req-Head-Response
X-JG-Page-Cache
CLMOB
Cmsid
Cmstype
Eomportal-Instance
X-Client-Vid
Referer
X-Consent-Required
X-Map-Context
X-EPiphany-Vid
X-SAPP
Traffic-Origin
Access-Control
X-HA-Backend
X-HA-Frontend
X-Info
Home
AR-ATIME
AR-CACHE
X-Resolver-IP
Il-Cl
X-AOL-HN
Load-Balancer
X-Cocoon-Version
IES-Server
Play-Detected-Device
Play-Detected-UserAgent
X-Plat
AR-PoweredBy
X-Block-Rule
X-Block-RuleID
X-Aramark-SID
X-HTML-Minification-Powered-By
X-B2f-Not-Route
EagleEye-TraceId
X-Ms-Request-Id
X-Cache-Dispatchercachecontrol
X-Soro
X-Proxy-Cache-Control
X-Cache-Doesi
X-PBY
X-Cache-Dispatcherpragma
X-CacheLoc
X-Batcache
BALANCEDTO
Resin-Trace
X-Via-S
Machine
Ufe-Result
X-Ghost-Cache-Status
X-Varnish-Cache-Local
Proxy-Cache
X-DSMX-Rewrite-MS
Arrnode
Thanks
X-Domino-CacheValidationWithETagReason
X-Domino-CacheValidationWithETagResult
X-ACMCache
X-DSMX-Render-MS
X-WebNode
X-Data-Request
AETN-Longitude
Server-ID
*
AETN-Postal-Code
Disablevcache
X-LW-Web-Server
AETN-Latitude
AETN-EU
AETN-City
AETN-Area-Code
AETN-Continent-Code
AETN-Country-Code
AETN-DEVICE
AR-SID
Myheader
VANITY-HOST
X-Upstream-Backend
X-WR-Flags
X-Resty-Request-Id
X-RiS-UFDI
X-Session-Reinit
X-GSL-Server
Dispatcher
AKA-DEVICE
X-Actindo-Request-Id
X-Upstream-Status
X-Actindo-Rs
X-Actindo-Thread-Id
AETN-State-Code
X-Adnet
X-Confluence-Request-Time
AETN-Country-Name
X-Amcomm-Site
IISExport
X-Header
X-Oferteo-Domain
X-SERVER-NAME
X-TKP-SRV-ID
X-HashTwo
X-Amz-Id-1
X-Forwarded-Host
Num
Cleartype
X-HydroSheep
X-WP
Copyright
X-Smartcache-Keys
X-Highwire-Smart-Code
Now
Dynatrace
Bios
X-Varnish-URL
X-Adobe-Loc
X-Dynatrace
COMMERCE-SERVER-SOFTWARE
X-Adobe-Content
X-OpenCart-Lightning
X-Highwire-Sitecode
X-Smartcache-Timeout
X-Upgrade-Enabled
X-HostName
NtCoent-Length
X-Proxy-Skip
Adm-Server
X-Now-Trace
X-Flex-Evstart
X-UnsetCookies
X-Fastly-Request-Id
X-Flex-Tags
X-Flex-Lastmod
X-MCB-Server
X-Blog
X-Autoru-Host
X-Secret
X-Custom-Name
X-Flex-Lang
X-Flex-Tag
X-Flex-Evend
X-UA-Bot
Fastly-Debug-Digest
From
X-AutoRu-App-Id
X-WebKit-CSP-Report-Only
X-Cache-Time
X-Generated-Time
HitType
Magicmarker
X-Flex-Community
Fastly-Backend-Name
Provider
Edgecast
X-Timestamp
X-Protected-By
X-Depends
X-Requestid
MageStack-Debug
MageStack-Loadbalancer
MageStack-Magento-Version
MageStack-Config
MageStack-Cacheable
MageStack-Cache-Lifetime
MageStack-Cache-Status
MageStack-PageSpeed
MageStack-Tag
X-Nx
Pf.Web.Request.Id
X-Clara-ASAP
X-LBPoolMember
MageStack-Web-Node
Viewport
MageStack-Cache-Hits
MageStack-Cache
X-Beget-Proxy
X-WEBMGR-CACHE
X-Garden-Version
X-DataDome
X-CacheID
Prot
Aurora-Node
X-Framework
X-ASAP-Cache
Dis-Env
MageStack-Area
X-Server-Addr
PServer
WP-AdvCache-MemCached
X-Directory-Script
X-Middleton-PageSpeed
Max-Age
X-SmartBan-URL
TC-Cache
TC-Cache-IC
X-SmartBan-Host
X-Refresh
Ttl
X-Origin-Date
TC-Cache-U
TC-S-Cache
Id
Pragrma
X-Goog-Meta-Replace
X-Goog-Meta-Policy
TC-S-Cache-M
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Highwire-SessionId
X-Highwire-RequestId
X-Application
X-Test
X-Served-Server
DNNOutputCache
X-Cache-Detail
ServerNode
X-Nx-All
X-Gyrobase-Publication
X-Cf-Powered-By
X-Envoy-Upstream-Service-Time
X-ETag
VAR-Cache
Filters
X-DN-Cache-Control
X-Beatles
X-Varnish-Id
X-APIAUTH-VAL
BackendServer
X-RAMCache
Device
X-Cache-Me-Harder
X-Pj-Cache-Status
X-FastCGI-Cache-Status
X-Access-Control-Allow-Origin
Web
X-Served
X-Deity
X-Tag-Playlist
NLCacheNote
VServer
CommunityServer
X-Appversion
X-ORIKEY
X-ROUTING
Report-To
X-ENDPOINT
X-IP
X-APIVERSION
X-Varnish-Debug-Hits
X-Vary-Options
X-Reflector
Pramga
X-Reflector-Cache
X-TLS-Version
X-Via-NSCOPI
X-DB-Content-Length
X-Akamai-Transformed
X-Rack-Cors
Serverid
ViewMode
VSID
X-SDE-Name
X-SV
X-Serv
X-FORWARDED-PROTO
X-Varnish-Ip
Server-Ip
X-Hosting-Env
NODE
X-Gateway-Rate-Limit-Delayed
X-Appid
Paypal-Debug-Id
SINA-LB
X-SayCDN-TTL
X-Webcelerate
X-Processed
X-UPSTREAM-Address
Nitro-Cache
X-Powered-By-Home.Pl
X-DynamicCache
X-Instance-Id
X-MainProfileCategory
X-WN-ClientGroup
Amfplus-Ver
X-MrHost
X-Cache-FS-Status
SINA-TS
X-Cache-Node
X-Build-Id
X-SH-Cache-Status
X-CH-Device
X-MainProfileID
X-MID-Host
X-Say-Cacheable
X-Say-TTL
WN
X-V-Cache
MageStack-Cache-Lifetime-Sent
X-ProBase-Server
Session-Id
MageStack-Cache-Warning
MageStack-Last-Modified
Provided-Host
X-This-Proto
X-MainProfileURL
CDN-RequestId
CDN-PullZone
CDN-CachedAt
CDN-Uid
ServerIP
Tk
Debug-Status
Session-From
CDN-Cache
X-Streams-Distribution
X-Beluga-Response-Time-X
X-Beluga-Response-Time
X-Beluga-Record
X-Beluga-Status
X-Beluga-Trace
X-DevSrv-CMS
X-Lb
X-ACCELERATE
X-Client-Id
X-Aramark-CSID
YF-ID
X-ZSITES-DNS
X-Nginx
X-Page
X-RiS-PX
X-We-Are-Hiring
X-Title
X-Static
X-Varnish-Grace
X-Obvious-Tid
X-Obvious-Info
X-FPC
ScoreTracker
X-Layout
X-Lw-Cache
X-Beluga-Node
X-Beluga-Cache-Status
X-Reqid
X-MAT-GEO
X-Geo-IP
X-SilverStripe-Cache
X-Skip-Cache
Access-Control-Allow-Header
Yoncu-Errno
X-Svr
X-Desc
X-ManagedFusion-Rewriter-Version
X-NewsFlow-Sitename
X-MyName
X-M
X-PBS-Appsvrip
X-PBS-Appsvrname
X-Status
X-PBS-Fwsrvname
Ibf5scheme
N365rili
X-Rebelmouse-Cache-Control
X-Policy
X-PHP-Response-Code
Description
Keywords
Ohc-Response-Time
Og
X-CRA-DC
X-Cache-Varnish
X-Amz-Apigw-Id
X-7d-Trace-Id
X-7d-Instance-Id
X-Amzn-RequestId
X-Amzn-Trace-Id
X-Cache-On
X-Bip
X-MainProfileName
AMP-Redirect-To
X-AMAZEEIO
Page-Template
X-Now-Instance
X-SCM-Server-Number
X-Who
X-Qnm-Cache
X-NodeID
X-M-Reqid
X-FromPodPressCache
X-ReqId
X-Global-Transaction-ID
X-Cache-Warmer
X-M-Log
NZSpeedy
X-Vol-Correlation
X-Cache-TTL-Age
NGX
DrivedBy
StatusCode
Server-Id
X-Cache-TTL-Current
Hosted-By
X-Vol-Mrp
X-W3TC-Minify
X-Wodby-Node
Ssl-Proxy-Server
X-Proto
X-Gannett-Site-Version
X-Powered-By-ADS
REFRESH
PBS
X-Backside-Transport
X-Ms-Version
X-Test-Debug
AMP-Access-Control-Allow-Source-Origin
X-BPool-Back
SB-Cache-Life
X-BServer
X-Captured
X-Server-Generated
X-Enhanced-By
X-Airee-Node
SB-Cache-Remaining
X-Search-Id
X-ProcessESI
X-Proxy-Cache-Key
X-Proxy-Server
X-RemovedCookies
SB-Site-IE-VERSION
SB-Site-Device
X-Origin-Server
X-Nginx-Request-Processing-Time
X-Src-Webcache
X-Varnish-Cache-Ttl
X-Firefox-Spdy
X-Node-App
EN-User
X-Node-Id
X-Cname-TryFiles
AC-ELC
Response-Time
X-Mighty-Proxy
X-Pass-Through
X-Shopware-Cache-Id
X-Built-With
X-Rack-CORS
X-Max-Age
X-Cache-LB
Purge-Cache-Tags
Hit-Count
Tempo
MS-CV
X-Varnish-Backend-Beresp-Backend
GranicusServer
HTTPS
X-Rewritten-By
X-Shopware-Allow-Nocache
X-XHTML-Minification-Powered-By
X-Custom-Header
X-Instance
X-HA
Cf-Ipcountry
X-PM-ID
X-B3-Sampled
RN-Server
CDCHOST
X-NoIndex
X-EC2-Instance-Id
X-Route
X-Origin-Cache
X-Sid
X-PROCESSED-BY
X-RENDER-TIME
X-Xml-Http-Blocked
X-Scheme
X-Oracle-Dms-Ecid
X-Mobilized-By
X-COUNTRY-CODE
X-Compress-Hint
X-DEBUG
SERVER-ID
X-Actual-Url
X-CACHE-KEY
X-Geo
X-Cdn-Forward
X-From-Cache
X-GZip
X-Cache-HT
Fastly-Restarts
X-Serverid
X-Ruxit-Js-Agent
Language
X-NMT-Proxy
X-Built-By
X-Appmachine-Duration
X-Appmachine-CreatedOn
X-Appmachine-Name
WebServer
X-Instance-Name
X-Hit
X-Meta-Imagetoolbar
X-Meta-MSSmartTagsPreventParsing
X-Meta-MSThemeCompatible
X-Firewall
Arrow-RequestId
MSSmartTagsPreventParsing
MSThemeCompatible
OracleCommerceCloud-Sandiego
OracleCommerceCloud-Version
X-Nginx-Page-Cache
MachineName
X-Machine
X-JoinUs
X-Abuse
X-Old-Content-Length
X-Ser
X-FG-RequestId
FastCGI-Cache
MwpReleaseVersion
Returned-Status
X-Optimization
X-ASAP-Age
X-Ssl-Cipher
X-Enabled1
X-UT-Cache
X-Time-Spent
Fastly-Drupal-Html
Origin-Vm
X-Beresp-Ttl
RSL-Trace-ID
X-TEST
X-SSLTerm-Server
X-SG-Server
X-Magento-Route
Generate-Time
Prototype-RootPath
X-Itkg-Cache-Tags
X-Accel-Cache-Control
X-Country
X-Fastly-Backend-Reqs
ProxiaInstanceId
Gzip
VC-NoCache
X-Catalyst
X-Middleton-Pagespeed
X-Healthy
F5-IpCliente
ClientIP
X-No-Session
X-Front-Cache
X-Pageid
X-Tradeindia-Request-GUID
X-Vid
X-Tradeindia-SMgmt
X-Expires
X-CSRF-Token
X-InDy-Time
X-InDy-Query
X-Mobile-Rewrite
X-Origin-Upstream-Status
X-Router
X-ORIGN-SERVER
X-InDy-Memory
X-Grid-Server
Amp-Access-Control-Allow-Source-Origin
X-Varnish-TTL-Debug
LB
PB-PID
PROGMA
PB-RID
X-Telligent-Evolution
X-Render-Time
PagesDisplayed
EQ-Cache
V-Cache-Ttl
X-CAMPUSSUITE-DEBUGGING
X-CAMPUSSUITE-TENANT
X-CAMPUSSUITE-ENVIRONMENT
X-ENV
X-Enabled3
Servername
Ews
X-Dck
X-Cache-Id
X-Enabled2
Httpd-Identifier
X-Varnish-Age-Debug
HA-Urlpath
X-Cluster
X-Cache-Extended
X-Compressed-By
X-FastCGI-Cache
X-CloudBurst-Frontend
X-CloudBurst-WordPress
X-Cache-Action
X-Box
HitInfo
FRONT-END-SECUREBROWSER
HSTS
TP-Cache
TP-L2-Cache
X-Log
X-CloudBurst-Cache
Web-Server
Unique-Request-Id
Webserver
X-PressLabs-Stats
X-DDM-SERVER
X-Clx-Request
SBSS
Requested-Host
X-Qiniu-Zone
X-Oracle-Dms-Rid
X-CloudBurst-Backend
Sl-Pgid
Content
X-Olaf
X-Navigation-Version
X-OPNET-Transaction-Trace
X-SSL
X-Cache-ID
X-Boot
X-VHosting-Cache
ID
X-Activity-Id
X-Amz-Meta-Version-Id
X-Mobile-Device-Type
X-Mobile-Device
X-Debug-Message
X-SCProxy
X-Az
X-Cachable
X-Varnish-Cache-Control
X-D2id
X-Content-Type
X-HP-CAM-COLOR
X-HS-Status
X-Pagely-Cache
X-Server-Ip
X-BeResp-Ttl
Cache-Status
X-Transaction-Name
X-SEA-Instance-Name
X-Served-From
X-BIT-Node
X-Batcache-Reason
X-DDM-SERVER-UPDATED
X-MSU-SOURCE
X-Cdn-Origin
X-WA-Info
X-CGP
SS
X-HAProxy
X-Fpc
X-RequesterIP
X-Bcwwwid
Progma
NKBVHEADER
Request-Time
TYPO3-Pid
TYPO3-Sitename
X-Homeaway-Requestmarker
X-Jcms-Ajax-Id
X-XHR-Current-Location
X-Varnish-Cached-TTL
Xc
X-Zendesk-Origin-Server
CmsfirstPublishTimestamp
X-Zendesk-User-Id
X-Varnish-Cached
X-UPServer
X-NginX-Upstream
X-MCF-ID
X-Ruby-Cluster-ID
X-ServiceProvider
X-Sn-Servicetimems
ModuleCacheType
L5d-Success-Class
X-SuperCache
X-Rocket-Nginx-Reason
X-UType
X-Varnish-Action
XX
X-VG-WebCache
X-Rocket-Nginx-File
X-Response
X-Phpwcms-Release
X-Phpwcms-Page-Processed-In
X-PoweredBy
X-Proxy-Id
X-Requested-With
Backend-Powered-By
BlockPHPCallEnd
HA-Georegion
HA-Geolon
HA-Host
HA-Ipaddr
HA-Servedtime
HA-Geolat
HA-Geocountry
DB-Nickname
Content-Sn
X-Cache-Via
HA-Cloudapp
HA-Geocity
CommercePlatform-Version