Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
X-Cache
CF-RAY
Strict-Transport-Security
X-AspNet-Version
P3P
X-Pingback
Age
Content-Language
X-UA-Compatible
Via
Access-Control-Allow-Origin
X-Adblock-Key
Upgrade
X-Varnish
X-Cacheable
P3p
X-Check
X-Template
X-Language
Content-Security-Policy
X-Generator
X-Buckets
X-Drupal-Cache
X-Type
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Xss-Protection
X-Hacker
X-Ac
X-Request-Id
X-Powered-By-Plesk
X-Cache-Hits
Content-Location
X-Permitted-Cross-Domain-Policies
X-Runtime
X-Download-Options
X-Request-ID
Host-Header
MS-Author-Via
X-ShopId
X-Sorting-Hat-ShopId
X-ShardId
X-Dc
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-Section
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PodId
X-Alternate-Cache-Key
Alt-Svc
Cartoon
X-IPLB-Instance
X-Powered-CMS
X-UA-Device
Status
X-Served-By
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
X-Amz-Cf-Id
Access-Control-Allow-Methods
X-Via
X-Iinfo
X-Cache-Status
X-Backend
X-Timer
X-Contextid
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
CF-Cache-Status
X-PC-Hit
X-PC-Key
X-ServedBy
Powered-By
X-Wix-Server-Artifact-Id
X-PC-AppVer
X-PC-Date
X-Mod-Pagespeed
X-PC-Host
X-DIS-Request-ID
X-Logged-In
X-Rid
Keep-Alive
X-Server
Content-Encoding
X-Cache-Hit
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Port
X-CDN
X-Tumblr-Pixel-1
X-Host
X-CST
X-Server-Powered-By
X-Tumblr-Pixel-2
X-Robots-Tag
Referrer-Policy
X-Cache-Enabled
X-Pad
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
X-Nginx-Cache-Status
Fastly-Debug-Digest
X-Endurance-Cache-Level
WP-Super-Cache
X-Wix-PunisherID
X-Page-Speed
X-Turbo-Charged-By
X-Accel-Version
X-Forwarded-For
X-Tumblr-Pixel-3
X-Content-Powered-By
X-Forwarded-Proto
X-Drupal-Dynamic-Cache
X-Rack-Cache
X-Content-Digest
X-Pantheon-Styx-Hostname
Surrogate-Key-Raw
X-Styx-Req-Id
X-FRAME-OPTIONS
X-Varnish-Cache
X-AH-Environment
Content-Security-Policy-Report-Only
X-GitHub-Request-Id
X-Proxy-Cache
SPRequestGuid
X-SharePointHealthScore
X-Cnection
X-Request-Country
MicrosoftSharePointTeamServices
X-MS-InvokeApp
X-Original-Date
X-XRDS-Location
X-Cache-Lookup
X-Died
X-LiteSpeed-Cache
Edge-Control
Cf-Railgun
X-Safe-Firewall
Timing-Allow-Origin
Request-Id
X-Amz-Id-2
X-Amz-Request-Id
MicrosoftOfficeWebServer
Charset
X-FW-Hash
X-FullPageCaching
X-Webserver
X-FW-Type
X-FW-Static
X-FW-Serve
Edge-Cache-Tag
X-Node
X-HS-Cache-Config
X-PhApp
SPIisLatency
WPE-Backend
X-HS-Content-Id
SPRequestDuration
X-CF-Powered-By
X-Tumblr-Pixel-4
Composed-By
X-Hits
X-Content-Security-Policy
X-INKT-URI
X-INKT-SITE
Access-Control-Max-Age
Content-MD5
Liferay-Portal
X-AWS-Id
X-VWS-Id
X-LJ-Flow-ID
Access-Control-Expose-Headers
X-Swift-CacheTime
X-Swift-SaveTime
X-Hyper-Cache
EagleId
Served-By
X-Spip-Cache
X-CDN-Pop
X-CDN-Pop-IP
Rating
Grace
X-Device
Request-Context
X-Backend-Server
X-BC-Stapler
X-Fastly-Request-ID
X-Tumblr-Content-Rating
X-Server-Name
X-Dw-Request-Base-Id
X-Microcache
X-Microcachable
X-Newrelic-App-Data
X-Firenze-Processing-Times
X-RateLimit-Remaining
X-RateLimit-Limit
X-ServerName
Content-Style-Type
X-RateLimit-Reset
X-User-Agent
Content-Script-Type
X-FB-Debug
Public-Key-Pins
X-Jimdo-Wid
X-Jimdo-Instance
X-VCache
X-Cloud-Trace-Context
X-Clacks-Overhead
X-Cache-Config
Xkey
X-SERVER
X-DDC-Arch-Trace
X-Acc-Exp
Refresh
Front-End-Https
X-TNCMS
X-Loop
Real-Hostname
Fpc-Cache-Id
Surrogate-Control
X-XN-XNHTML
X-XN-Trace-Token
X-Aspnetmvc-Version
X-Age
X-Hostname
X-Tumblr-Pixel-5
PageSpeed
X-Generated-By
X-DNS-Prefetch-Control
X-Px
X-Cached
X-N-OperationId
Surrogate-Key
Display
X-Sol
X-Middleton-Display
X-Middleton-Response
Response
X-LiteSpeed-Cache-Control
X-SS-Location
X-SS-Conf
X-MiniProfiler-Ids
X-Cached-By
X-StackifyID
X-Pantheon-Site
X-Zen-Fury
X-Pantheon-Environment
X-Pantheon-Phpreq
X-Request-Time
X-Topify-Platform
X-Content-Options
X-URL
X-WebKit-CSP
X-Servedby
Rt-Fastcgi-Cache
X-Outils-CS
X-Amz-Version-Id
Edge-Control-Message
X-CMS-Version
X-HOST
TCN
X-Url
X-Correlation-Id
X-Whom
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-OneAgent-JS-Injection
X-AspNetWebPages-Version
X-DynaTrace
X-Umbraco-Version
X-DynaTrace-JS-Agent
Access-Control-Request-Method
X-Varnish-Cache-Hits
X-Varnish-TTL
X-ApacheServer
X-PERF
Product
X-Handled-By
X-Ruxit-JS-Agent
Alternate-Protocol
Imagetoolbar
X-Kinsta-Cache
Powered
Host
X-Cache-Rule
DynaTrace
X-Engine
X-Magento-Tags
P-WS
X-Powered-By-360WZB
P-LB
X-NWS-LOG-UUID
WZWS-RAY
X-CacheServer
X-Recruiting
Generator
X-From
X-Track
X-Micro-Cache
X-Edge-Location
ServedBy
X-Tumblr-Pixel-6
X-Msg-2-Log
X-FORWARDED-FOR
X-Powered-By-VTEX-Janus-ApiCache
X-Vtex-Processado-Em
X-VTEX-Janus-Router-Backend-App
X-Vtex-Processed-At
X-VTEX-Cache-Status-Janus-ApiCache
No
X-Vtex-Remote-Cache
X-Location-Id
Fhost
X-Goog-Hash
X-Hosted-By
X-Powered-By-VTEX-Janus-Edge
X-Fastcgi-Cache
X-VARNISH-Cache
X-Cache-Age
X-B-Cache
X-LBLID
Fastcgi-Cache
X-I-Sp
X-BS
X-Developer
X-Response-Time
X-Application-Context
Origin
X-RESOURCE
X-URLSCHEME
X-Actual-URL
X-Varnish-Host
Expect-CT
X-Returned-From
X-Returned-From-DLL
X-Passed-To-DLL
X-Passed-To
X-Original-Request
Arr-Disable-Session-Affinity
X-Instart-Request-ID
X-Passed-To-PostProcessResponse
X-Returned-From-PostProcessResponse
X-LB
X-Passed-To-BeforeDispatch
X-Returned-From-BeforeDispatch
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-App-Hosting
Content-Hash
X-Stale
X-Shop-Id
X-Defender
X-Device-Type
X-UD-Method
Dmn
X-Cache-Info
X-TransIP-Balancer
X-Cdn
X-Cache-TTL
X-Platform-Cluster
HTTPS
X-Platform-Router
X-Platform-Processor
X-Origin
X-I
X-Revision
X-Source
Akamai-IP
X-Akamai-Transformed
X-Matrix-Server
X-Matrix-Proxy
X-Powered-By-VelaWeb
X-Storage
X-HS-Content-Campaign-Id
X-Internal-ReqID
X-Cache-Debug
X-NetCat-Version
X-Translation
X-Accel-Expires
X-Front
X-Microcache-Status
X-Rocket-Nginx-Bypass
X-Daa-Tunnel
IBM-Web2-Location
X-Varnish-HitMiss
X-Varnish-Cacheable
X-Dispatch
X-Varnish-Count
X-Cache-Operation
USPLoggingUUID
X-Page-Cache
X-TransIP-Backend
X-S
X-VTEX-Cache-Status-Janus-Edge
X-UPSTREAM
X-Cache-Tags
X-Platform
X-Varnish-Seen-By
X-Gamma-Serve
X-Varnish-ObjectSource
X-Supported-By
X-Varnish-RemainingLife
Ohc-File-Size
X-Varnish-GracePeriod
X-Varnish-RemainingTTL
Pool
X-EdgeConnect-Origin-MEX-Latency
X-Varnish-Backend
X-Signature
X-Expires-Orig
X-Cache-Lifetime
Last-Published
X-LB-Node
Content-Disposition
X-Dispatcher
Powered-By-ChinaCache
X-Upstream
X-Version
X-NoCache
Version
X-Cache-Only-Varnish
MIME-Version
X-EdgeConnect-MidMile-RTT
X-AOL-HN
X-Route-Server
X-ATG-Version
X-Art-Request-Id
X-Content-Encoded-By
X-Cache-Key
Cache-Key
X-Duration
X-Hypernode
Public-Key-Pins-Report-Only
X-Varnish-Age
X-Director
X-Platform-Cache
X-Server-Id
X-Server-Upstream
X-Flow-Powered
Node
Cache-Tag
X-Vcap-Request-Id
Srv
X-Debug-Info
ServerID
X-Debug
Proxy-Connection
X-Cookie-Domain
X-SSL-Protocol
X-Abgroup
X-SSL-Cipher
X-NewRelic-App-Data
X-SV-Nginx-Duration
SSPAppContext
X-Firenze-Processing-Time
X-SV-Pid
X-SV-CreatedAt
ServerName
X-SV-Duration
X-TTL
X-SV-Edge
X-SV-FromDBCache
X-F-Cache
FAI-W-FLOW
X-SV-Cacheable
X-SV-CacheTags
IM-Version
X-SV-Expires
X-Url-Base
X-Cache-Control-Orig
X-Platform-Server
Allow
X-ORACLE-DMS-ECID
Page-Completion-Status
X-Abuse
X-Cache-Expires
Lsrequestid
Edge-Content-Tag
X-Sapient
X-CJ-Soft
X-Sucuri-ID
X-Speed-Cache-Key
Accept-Encoding
X-PwB-Node
Content-Encoding-Handler
X-Speed-Cache
X-Edge-IP
X-Client-IP
X-Country-Code
X-Amz-Meta-S3cmd-Attrs
X-Geo-Country
X-RequestId
X-Dns-Prefetch-Control
X-Nbs
X-GeoIP-Country-Code
X-Last-Modified
X-Magento-Cache-Debug
X-Proxy
X-Sucuri-Cache
X-Cache-CFC
X-Server-ID
X-Processed-By
SN
Cneonction
X-GeoIP-Country-Name
Cache-Provider
X-SDS
X-Content-Age
X-Goog-Metageneration
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-ARC
PICS-Label
X-Goog-Generation
X-Cache-Server
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Grace
X-Discourse-Route
Backend
X-Akamai-Device-Characteristics
WSR-Cache
X-Purge-URL
X-Loopia-Node
Location
X-Lambda-Id
X-SRCache-Key
X-Varnish-IP
X-Shield-Request-Id
X-Real-Server
A-Powered-By
X-ServerID
X-CDN-Node
X-Id
If-Modified-Since
X-Orig-Vary
X-Time
X-CDN-Cache-Status
NnCoection
S-Cnection
X-Processing-Time
X-Purge-Host
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Browser
X-SE-Debug
Section-Io-Id
X-Nginx-Cache
AMF-Ver
X-Akamai-Device-Model
X-N
Author
Fw-Via
X-IsCacheURL
X-Varnish-Url
X-NB-Cached-Page
X-Middleware-Start
Req-Id
RTSS
CacheControlHeader
Pv
X-Frontend
X-Vhost
X-BKSrc
X-BackendServer
NetMindSessionID
X-Always-Cache
Cached
X-Yadis-Location
Use-Proxy
Qs-Cache
X-Framework
X-Generated
X-Hiawatha-Cache
X-Cache-Control
X-LW-Cache
S
X-Ttl
MJ12bot
X-Cache-Handler
SEOMOZ
X-FW
X-Trace
Nodo
X-TB-M
X-Srv
MC
Tracecode
X-Cache-Fix
X-Cache-PageType
X-Varnish-Hits
X-Magnolia-Registration
X-Route-To
X-Cache-Engine
X-SERVER-NAME
Accept-Charset
X-Twitter-Response-Tags
X-Traffic
X-Transaction
X-Connection-Hash
WWW-Authenticate
X-Config-Blacklist-Version
X-HP-Trace-Project
X-HP-Trace-ID
Xc-Version
X-DealerOn
X-Worker
X-Varnish-Server
Cteonnt-Length
X-CDN-Forward
X-Sys-Req-ID
X-Varnish-ID
Server-Info
X-Fedora-School-Id
X-Resty-Request-Id
X-Content-Security-Policy-Report-Only
X-Pressidium-NinukisWP-Ver
X-Cache-Level
X-Drupal-Cache-Tags
HAVer
X-Healthy
Retry-After
Frame-Options
X-Cache-Type
HCVer
Server-Name
X-Symfony-Cache
X-Unique-ID
Cm-Server
SVR
Content-Transfer-Encoding
X-PF-Uncompressing
X-VC-TTL
X-Adobe-Content
NODE
X-Adobe-Loc
X-Drectory-Script
X-SO
X-JG-Page-Cache
X-LB-Server
X-Remote-Addr
X-Directory-Script
X-ClientSide-Caching
Thanks
X-WR-Flags
X-Varnish-Retries
Eomportal-Instance
X-High-Performance
X-VC-Enabled
Nitro-Cache
Buuteeq-Source
X-Magento-Cache-Control
X-CF-Passed-Proto
X-Varnish-Ttl
X-Mobilized-By
X-Empowered-By
X-ID
RATING
SBGI-10
EagleEye-TraceId
X-Webcelerate
Cache
Web-App-Origin-Name
X-Amz-Storage-Class
X-Content-Type-Option
SBGI-1
SRV
Local-Info
X-Site-Name
SBGI-5
SBGI-Device
CLMOB
SBGI-7
SBGI-RealPath
SBGI-RenderTime
Access-Control-Allow-Header
Content_type
Identity
X-Session-Reinit
SBGI-9
X-Cache-TTL-Remaining
X-Session-ID
X-WN-ClientGroup
X-Runtime-Memory
From-Origin
X-ACMCache
HitType
WN
X-Static
X-Environment
X-Runtime-Rack
X-Cache-Provider
X-OPNET-Transaction-Trace
X-Pagename
X-RiS-UFDI
X-Disney-Akamai-Rule
Dispatcher
Disablevcache
X-Hit-Cache
X-Amz-Meta-Cb-Modifiedtime
BALANCEDTO
X-FireWall-Port
Max-Age
X-Served-Server
X-LP
X-Cache-Source
X-Cache-Device-Type
X-VARITI-CCR
X-Culture
X-Middleton-PageSpeed
Strikingly-Cached-Version
Strikingly-Cached
Strikingly-Cache-Region
Keywords
X-WHOIS-Cached
X-UA
X-Cocoon-Version
X-Generated-Time
X-FORWARDED-PROTO
NtCoent-Length
ServerTokens
X-Frame-Option
XDomainRequestAllowed
X-Page
X-ORACLE-DMS-RID
X-Debug-Token
X-App-Server
Magicmarker
X-Jphone-Copyright
X-Cache-Doesi
X-Blog
X-Server-IP
X-OpenCart-Lightning
X-ServerIndex
X-Wikidot-Backend
X-Powered-By-Server
X-LW-Web-Server
X-ARRServer
ServerSignature
X-Wikidot-Static-Cache
X-Distributor
X-Cache-Detail
Provider
X-Balanceador
X-A
AsisCache
X-DataDome
X-CB-Server
Front
Dis-Env
X-GeoIP
X-Server-Instance
X-App-Runtime
X-Runtime-Affili
X-Dynatrace-Js-Agent
Description
X-Drupal-Cache-Contexts
Resin-Trace
X-Unbounce-PageId
X-Mobile-URL
X-Unbounce-VisitorID
X-Site
X-Unbounce-Variant
X-Cache-Dispatchercachecontrol
Ufe-Result
Cmstype
X-Pageid
Home
X-Webkit-Csp
X-AF-Userserver
X-Cached-Status
Response-Time
X-Ser
Cmsid
X-EPiphany-Vid
IISExport
X-Cache-Dispatcherpragma
X-App
X-App-Status
X-Client-Vid
X-Optimization
X-Req-Head-Response
NLCacheNote
X-Varnish-Hostname
X-Map-Context
X-Author
X-HP-Redirect
X-Nginx-Host
X-Cache-Node
X-Client-Image-Vid
X-Application
X-Yottaa-Optimizations
Backend-Timing
Machine
X-NginX-Cache
X-PageType
X-Garden-Version
X-SH-Cache-Status
X-HW
SS
AC-ELC
Pics-Label
X-Yottaa-Metrics
X-Location
X-Analytics
X-Info
X-Source-ID
Paypal-Debug-Id
X-Rewrite
X-Atraveo-Varnish-Server-Id
X-KoobooCMS-Version
X-MAT-GEO
X-Atraveo-Zone
X-Provisioner-Version
X-Domain-Checked
X-PRAM
X-Batcache
X-Force
X-Atraveo-TTL
X-Atraveo-Expires
X-Atraveo-ETag
Hname
X-Atraveo-From-Varnish-Cache
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
X-Atraveo-Cache-Control
X-HydroSheep
PagesDisplayed
X-Backend-Status
X-ASAP-Cache
X-Frames-Options
X-ETag
OriginServer
X-Key
X-Amcomm-Site
ViewMode
X-Clara-ASAP
X-Data-Request
X-Magento-Action
X-HA-Frontend
X-HashTwo
X-HA-Backend
Expect-Ct
X-CAPServer
X-AEM
X-Machine
X-Amz-Id-1
X-This-Proto
X-TTFB
X-TTFB-L
X-Resolver-IP
Smug-CDN
X-SmugMug-Values
X-E
X-SmugMug-Hiring
DNNOutputCache
CommunityServer
Bios
X-GSL-Server
Fastly-Backend-Name
X-FRUIT
X-NginX-Server
X-Detected-Device
Og
Nginx-Cache
X-Esi
X-Dev
X-Trace-Id
X-Header
X-Cdn-Forward
Worker
Yoncu-Errno
X-Cms-Mode
Ttl
X-Node-Name
Traffic-Origin
X-Varnish-Debug-Age
Proxy-Cache
X-Hosting
Il-Cl
X-Sc-Cache
Set-Cookie2
X-Varnish-Debug-TTL
FastCGI-Cache-Status
X-Varnish-Cache-Local
Lb
X-Webapp
Tempo
X-Powered-By-Home.Pl
X-Grid-Server
X-Time-Microsecs
Beyond-Iis
SBMCLOUD
X-Proto
X-WR-MODIFICATION
X-Desc
X-Env
X-RemovedCookies
X-ProcessESI
VANITY-HOST
X-IIJ-Cache
X-Machine-Name
X-Cluster-Node
SG
X-Actindo-RS
X-Smartcache-Timeout
Ctx
X-Smartcache-Keys
RN-Server
X-Captured
Id
X-WP
W
X-Goog-Meta-Policy
Device
X-Test
Web
X-Rack-CORS
X-Goog-Meta-Replace
SiteSpeed
X-Stage
X-SDE-Name
X-MCB-Server
X-Varnish-Info
X-ACCELERATE
X-Rack-Cors
X-ENV
MW-Webserver
X-Correlation-ID
X-Hosting-Env
X-Hstore
X-Hrouter
BackendServer
X-Autoru-LB
X-Resource
X-PM-ID
X-EC2-Instance-Id
X-Render-Time
X-Autoru-Host
X-Batcache-Reason
X-AutoRu-App-Id
AccessControlAllowOrigin
X-MSEdge-Ref
X-Adnet
X-Airee-Node
X-HTML-Minification-Powered-By
X-Plat
X-Cache-TTL-Age
X-Server-Generated
X-Avvio-Cms-Cacheload
X-DTC
X-M
NCache
Access-Control-Request-Headers
X-Cache-TTL-Current
X-RealServer
X-Fpc
WP-AdvCache-MemCached
N365rili
X-L-Path
X-Forwarded-Host
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Depends
X-Environment-Context
X-Secret
Cluster-ID
X-Zendesk-User-Id
NS-VaryByCustom-Key
X-Zendesk-Origin-Server
X-V
X-Webstats-RespID
X-Cacheable-TTL
X-Cache-Via
X-Cache-On
X-Compressed-By
X-Config-By
X-Proxy-Cache-Key
X-RDP
X-JSESSIONID
X-Upgrade-Enabled
Sophnep-Edge-FX
Ibf5scheme
RequestId
Note
X-WebKit-CSP-Report-Only
X-Viator-Tapersistentcookie
X-LBPoolMember
X-Reflector-Cache
ClientIP
X-Apm-Telemetry-Syncmark
X-B2f-Not-Route
X-Reflector
Cleartype
X-RAMCache
X-CacheResult
X-EC-Security-Audit
X-CDN-RULE
Accept-Language
X-CDN-COMPRESS
F5-IpCliente
Ews
Gzip
X-Tag-Playlist
From
X-Flex-Evstart
ScoreTracker
X-Flex-Evend
X-Flex-Community
X-DSMX-Render-MS
X-DSMX-Rewrite-MS
X-Flex-Tags
X-Flex-Lang
X-Flex-Tag
X-Flex-Lastmod
X-APP
X-Src-Webcache
X-Cache-Keep
X-Cache-BE
X-REDIRECTSERVER
SERVER-ID
Swift-Performance
X-Cache-HT
X-Lima-Id
Xc
VServer
X-CSRF-Token
X-Cname-TryFiles
X-Deity
X-Rq
X-Nginx
X-Ocache
X-Served
X-DB-Content-Length
X-We-Are-Hiring
X-Nginx-Request-Time
X-CACHE-TTL
X-Cache-Extended
VAR-Cache
X-DeliveryServer
X-Brought-To-You-By
X-Box
X-DevSrv-CMS
MageStack-Cache-Status
MageStack-Cache-Lifetime
X-Dynamic
MageStack-Cache-Hits
X-Artvisual-Server
X-LOCATION
X-MidCOM-Meta-Cache
X-Cms-Server
X-FastCGI-Cache
MageStack-Cacheable
PServer
X-Catalyst
X-PBS-Appsvrip
X-CacheID
MageStack-Tag
XDisk
X-Cache-FS-Status
X-PBS-Fwsrvname
X-VC-Debug
MageStack-Debug
MageStack-Config
MageStack-Loadbalancer
X-Container
MageStack-PageSpeed
MageStack-Magento-Version
Url
X-ReqId
X-Search-Id
X-HostName
X-Beatles
X-CRA-DC
X-Lb
X-ACLR-Version
X-Varnish-Action
Brightspot-Id
Myheader
X-Made-On
X-SCM-Server-Number
X-Response
X-Beresp-Ttl
X-Distil-CS
AMP-Access-Control-Allow-Source-Origin
X-W3TC-Minify
MageStack-Area
X-Highwire-RequestId
X-Cache-Time
Content-Server
X-Rocket-Nginx-Serving-Static
X-Highwire-SessionId
X-Upstream-Backend
MageStack-Cache
X-Cache-Warmer
NZSpeedy
X-CCM
X-DN-Cache-Control
X-Ezoic-Cdn
X-Gyrobase-Publication
Server-ID
X-Session-Id
X-PBS-Appsvrname
SB-Cache-Remaining
SB-Site-Device
SB-Site-IE-VERSION
SB-Cache-Life
RSL-Trace-ID
Provided-Host
!~Request-OOB-Work
X-Cache-Me-Harder
Session-Id
X-App-Version
X-Front-Cache
X-Backend-TTL
X-Ghost-Cache-Status
X-CACHE-KEY
X-CH-Device
Debug-Status
Access-Control-Allow-Method
TC-Cache-U
X-Layout
TC-S-Cache
X-Goog-Meta-Goog-Reserved-File-Mtime
ENV
TC-S-Cache-M
X-NewCloud-V-Cache
X-Rocket-Nginx-Reason
ServerIP
AMFplus-Ver
Session-From
TC-Cache
TC-Cache-IC
X-Title
X-Server-Instance-Name
WFE
X-Router-Backend
X-Router
X-Provided-By
X-SmartBan-URL
RSB-LINK
X-UseReverse-Proxy
X-Tradeindia-Request-GUID
X-SmartBan-Host
X-Tradeindia-SMgmt
MageStack-Web-Node
X-RiS-PX
X-IP-Address
X-SV
X-IP
X-COUNTRY-CODE
X-Dw-Trace-Id
Server-Ip
X-Turpentine-Esi
X-Dynamic-Cache
X-PBY
X-4ormat-Cacheable
X-Cache-Action
X-Pixelsilk-Server
X-Nocache
X-Webkit-CSP
X-ChromeLogger-Data
X-Server-Addr
Vserver
StatusCode
Warning
MS-CV
X-Pixelsilk-Version
Edgecast
X-ManagedFusion-Rewriter-Version
X-AMAZEEIO
X-Processed
X-FIRSTBase
X-Wm-VIP
X-AWS
X-AppVersion
X-Nginx-Request-Processing-Time
Ibm-Web2-Location
X-Enhanced-By
Actual-Object-TTL
Progma
X-Unique-Id
X-Meta-MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
X-Ss-Conf
X-Fstrz
X-Meta-MSThemeCompatible
X-WA-Info
X-Obj.Ttl
Aurora-Node
X-Wm-1
X-Ss-Location
X-DS1D
X-RequesterIP
CDCHOST
TP-Cache
X-Not-Cacheable
X-NewsFlow-Sitename
PLCDN
X-AISO-Cache
X-AISO-Cacheable
X-MainProfileURL
X-MainProfileName
X-Faeria
X-HP-CAM-COLOR
X-MainProfileCategory
X-MainProfileID
X-AISO-Server
X-Refresh
X-Aramark-SID
X-Cluster
X-CM-FE
X-WPL-DATA
Server-Id
X-GoCache-CacheStatus
X-9XB-Server
X-Old-Content-Length
X-Gannett-Site-Version
DrivedBy
X-Agent
TP-L2-Cache
X-NID
X-Cjtype
X-OCTOPOD
X-Origin-Cache
X-Real-IP
X-Backend-Name
Cache-Tags
X-Rewritten-By
X-Test-Debug
X-Who
X-XHTML-Minification-Powered-By
X-Svr
COMMERCE-SERVER-SOFTWARE
X-UPSTREAM-Address
X-Debug-Message
X-WebNode
SHInfo
X-Route
X-Header-Treatment
INFO
X-Amz-Meta-Content-Md5
X-Cache-Id
X-Custom-Header
X-Pubstack
X-Magento-Lifetime
IsMobile
X-AppServer-Cache-Rule
X-Country
X-D-Time
X-DDM-SERVER
X-Amzn-Trace-Id
AR-ATIME
SINA-TS
SINA-LB
UrlWatchModule-Time
Webserver
X-Amzn-RequestId
X-DDM-SERVER-UPDATED
X-Generation-Time
AR-PoweredBy
AR-CACHE
X-SuperCache
X-Time-Zone
X-Uncacheable
X-ServiceProvider
X-Server-FQDN
Generate-Time
X-HAProxy
X-NodeID
X-Proxy-Id
X-S-Misc
Rewriter
GP-Version
X-Serendipity-InterfaceLangSource
X-Serendipity-InterfaceLang
FrontEnd
X-7d-Instance-Id
X-7d-Trace-Id
X-Obj-Ttl
EQ-Cache
X-FreeTag-Count
X-Count
GranicusServer
X-Accel-Cache-Control
Microcache
X-DEBUG
X-HASH
X-Vary-Options
DbServerName
X-UT-Cache
FindLaw
GP-Remote-Addr
Content-Cache
X-Backend-Host
Fw-Cache-Status
X-PHP-Response-Code
X-Sid
X-SilverStripe-Cache
Aoestatic
X-UnsetCookies
X-ELB
X-Bcwwwid
X-Built-With
X-Farm-Server
X-Streams-Distribution
X-Varnish-Cached
Kp-EeAlive
Cache-Status
X-SCProxy
X-Node-ID
X-Pagely-Cache
X-Varnish-Instance
X-Varnish-Cached-TTL
Expiries
X-XHR-Current-Location
X-Cache-LB
MSThemeCompatible
X-MCF-ID
X-VLoc
D
MSSmartTagsPreventParsing
X-Cache-Varnish
X-DynamicCache
AR-SID
X-C2M-Runtime
X-Cf-Powered-By
X-C2M-Server
X-Cache-Cfc
X-Ssl-Cipher
X-Litespeed-Cache-Control
X-Webkit-CSP-Report-Only
X-Oracle-DMS-ECID
X-Varnish-URL
DB-Nickname
M
Rlogid
ReqUrl
X-Transaction-Name
X-Pool-Info
X-Generated-Date
X-FG-RequestId
X-EBAY-C-REQUEST-ID
Content-Generator
X-Cache-Bypass
X-Stiffia-Cache
X-SRV
Apple-Itunes-App
X-Netrix-ID
Lookup-Cache-Hit
X-Geo-IP
Url-Hash
X-Jcms-Ajax-Id
X-Skip-Cache
X-Instance-Id
X-Auto-Login
X-Script
X-ServerAddr
X-UPServer
Resource
X-EC-Custom-Error
Session
X-Diazo-Applied
Server-Tuning
B-Rlogid
X-Ezpublish-Installationid
X-HEAD
X-BPool-Back
X-BPool-Bx-Cache
X-BPool-Fx-Cache
X-BServer
X-BPool
X-BC
X-Support
No-Cache
X-Ants-Host
X-Ants-Machine-Id
X-NMT-Proxy
X-Protected-By
HostName
Contao-Page-Layout
Be
X-Prerendered
V-Age
Upgrade-Insecure-Requests
X-Cache-ID
CpuTime
WP-Cache
X-ServedByHost
TheAnswer
Language
X-FPC
X-Serverid
X-ASAP-Age
X-Highwire-Sitecode
X-VNode
X-Ezpublish-Nodeid
X-Cachable
X-Build-Id
WSCLoggingUUID
X-ESI
X-Highwire-Smart-Code
X-Obvious-Info
Accept-CH
User-Cache-Control
Tesla.Performance
X-Varnish-Debug-Hits
X-Theme
X-SVR
X-Obvious-Tid
X-Origin-Server
X-Pass-Through
X-PROCESSED-BY
Tk
0
X-Archive-Orig-Server
X-Built-By
X-Content-Parsed-By
X-Request-Processing-Time
X-Archive-Orig-ETag
X-Archive-Orig-Date
Kanooh-Host
X-Archive-Guessed-Charset
X-Archive-Orig-Connection
X-Archive-Orig-Content-Length
X-Request-Received
X-Server-App
Www.Aujourdhui.Com
X-Ar-Debug
X-Cache-Served
X-Debug-Out
WebServer
ServerNode
X-UUID
Application
OutputRewritten
Server-Node
Memento-Datetime
AGI-Request-ID
Container
Debug-Cache-Control
Debug-Expires
X-CAMPUSSUITE-ENVIRONMENT
X-Sn-Servicetimems
Httpd-Identifier
Hosted-By
X-Instance-Name
X-Restarts
MwpReleaseVersion
X-CAMPUSSUITE-TENANT
X-Vol-Mrp
X-B3-Traceid
X-B3-Spanid
EXT-CACHEEXPIRE
X-Vol-Correlation
X-Forwarded-By
X-AG-MIPS
X-CPU-Time
X-CAMPUSSUITE-DEBUGGING
X-Debug-Serve
X-Hash
Prototype-RootPath
X-Czt
X-FCMS-Cache
X-HS-Status
Copyright
X-Pj-Cache-Status
ProxiaInstanceId
X-Amz-Meta-Version-Id
X-Csrf-Token
X-Imforza-Hosted
X-Op-Benvironment
X-ZORequestID
VC-NoCache
X-No-Session
X-Ec-Custom-Error
X-Config-Version
Ez
X-W-Cache-Hits
Yola-ID
X-BeResp-Ttl
X-W-Cache
X-Your-GrandPa-Would-Wait
X-Would-Your-GrandPa-Wait
X-Varnish-Esi-Access
X-Varnish-Esi-Method
X-Varnish-Max-Age
X-Varnish-Set-Cookie
X-Varnish-Currency
X-Turpentine-Cache
X-Max-Age
X-Phpwcms-Page-Processed-In
X-Phpwcms-Release
X-Varnish-Store
Content-Legth
X-Enabled1
X-Enabled2
X-Enabled3
X-TTL-Age
X-Does-He-Have-Time
X-Cache-Set
Public-Extension
ResourceTag
X-Beatles-Hits
CD1