Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-XSS-Protection
X-Frame-Options
Strict-Transport-Security
CF-RAY
Age
X-Cache
Expect-CT
P3P
Content-Language
X-AspNet-Version
X-Pingback
Upgrade
Via
X-UA-Compatible
Access-Control-Allow-Origin
Content-Security-Policy
X-FRAME-OPTIONS
X-Varnish
X-Cacheable
Referrer-Policy
X-Adblock-Key
X-Request-Id
X-Check
X-Generator
X-Template
X-Language
X-Buckets
X-Drupal-Cache
X-Type
Alt-Svc
WPE-Backend
X-Cache-Group
X-Pass-Why
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-Ac
X-Hacker
X-Cache-Hits
X-Xss-Protection
X-AspNetMvc-Version
Host-Header
X-ShopId
X-Sorting-Hat-PodId
X-Shopify-Stage
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-Section
X-ShardId
X-Sorting-Hat-ShopId
X-Sorting-Hat-FeatureSet
X-Dc
X-Alternate-Cache-Key
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Served-By
X-Via
X-Powered-By-Plesk
X-Runtime
MS-Author-Via
P3p
X-Contextid
X-IPLB-Instance
Access-Control-Allow-Headers
X-Amz-Cf-Id
X-Powered-CMS
Access-Control-Allow-Methods
Content-Location
X-Timer
X-UA-Device
X-PC-AppVer
X-PC-Key
X-PC-Hit
X-ServedBy
Status
X-TEC-API-VERSION
X-PC-Date
X-PC-Host
X-TEC-API-ORIGIN
X-TEC-API-ROOT
CF-Cache-Status
Cartoon
X-Iinfo
Access-Control-Allow-Credentials
X-Ua-Compatible
X-Rid
X-Seen-By
X-Wix-Request-Id
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-User
X-WPE-Loopback-Upstream-Addr
X-CST
X-Mod-Pagespeed
Powered-By
Content-Encoding
X-Tumblr-Pixel-1
X-Cache-Status
X-Backend
X-Endurance-Cache-Level
X-Cache-Enabled
X-Logged-In
X-Tumblr-Pixel-2
X-Drupal-Dynamic-Cache
X-Host
X-Request-ID
X-DIS-Request-ID
X-CDN
X-Server
X-Cache-Hit
X-Port
X-Server-Powered-By
Keep-Alive
X-Accel-Version
X-Nginx-Cache-Status
X-Robots-Tag
X-Turbo-Charged-By
X-Proxy-Cache
X-LiteSpeed-Cache
X-Tumblr-Pixel-3
Allow
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Content-Digest
X-Content-Powered-By
X-Page-Speed
Content-Security-Policy-Report-Only
X-AH-Environment
Request-Context
X-Rack-Cache
X-Pad
X-FW-Hash
X-FW-Server
X-GitHub-Request-Id
X-FW-Type
X-FW-Serve
X-FW-Static
X-Varnish-Cache
Access-Control-Expose-Headers
SPRequestGuid
X-MS-InvokeApp
X-SharePointHealthScore
X-Request-Country
X-Hits
X-XRDS-Location
X-Content-Security-Policy
Edge-Control
MicrosoftSharePointTeamServices
X-Newrelic-App-Data
X-Webcom-Cache-Status
X-Amz-Request-Id
X-Amz-Id-2
X-BC-Stapler
Timing-Allow-Origin
X-Trace
X-HOST
Cf-Railgun
X-HS-Cache-Config
X-Node
Edge-Cache-Tag
X-HS-Content-Id
Request-Id
X-FullPageCaching
X-Tumblr-Pixel-4
Charset
X-INKT-URI
X-INKT-SITE
X-CF-Powered-By
WP-Super-Cache
X-Cache-Lookup
X-Servedby
SPIisLatency
SPRequestDuration
Access-Control-Max-Age
X-Backend-Server
X-PHP-Backend
X-Fastly-Request-ID
Ali-Swift-Global-Savetime
X-Swift-SaveTime
X-Swift-CacheTime
X-HS-Combine-CSS
X-Edge-Cache
X-Edge-Cache-Key
EagleId
X-Cnection
MicrosoftOfficeWebServer
Grace
X-CDN-Pop-IP
X-CDN-Pop
X-SS-Conf
X-SS-Location
Composed-By
X-SERVER
X-Pc-Hit
X-Pc-Appver
X-Pc-Key
X-Safe-Firewall
Served-By
X-Device
X-Pc-Date
X-Pc-Host
X-Firenze-Processing-Times
X-Spip-Cache
Liferay-Portal
X-DNS-Prefetch-Control
Front-End-Https
X-Hyper-Cache
X-DDC-Arch-Trace
X-VCache
Surrogate-Control
X-LiteSpeed-Cache-Control
X-Dw-Request-Base-Id
X-Died
X-ServerName
X-Server-Name
X-RateLimit-Remaining
X-Cloud-Trace-Context
X-TNCMS
X-Loop
X-RateLimit-Limit
X-Tumblr-Pixel-5
X-Cluster-Node
Rating
X-RateLimit-Reset
Feature-Policy
X-WebKit-CSP
X-Debug-Info
X-NF-Request-ID
Xkey
X-FB-Debug
X-Clacks-Overhead
X-Jimdo-Wid
X-Jimdo-Instance
X-StackifyID
X-OneAgent-JS-Injection
X-Original-Date
X-Kinsta-Cache
Permitted-Cross-Domain-Policies
X-HeyJason
X-Do-Not-Hack
X-Middleton-Display
Display
X-Sol
X-Vtex-Processado-Em
X-Tumblr-Content-Rating
P-WS
P-LB
Response
X-Middleton-Response
X-Acc-Exp
Content-Style-Type
Refresh
X-XN-Trace-Token
X-XN-XNHTML
X-Age
X-Frame-Option
Public-Key-Pins
Content-Script-Type
X-DynaTrace-JS-Agent
X-Cdn
X-N-OperationId
X-Hostname
X-Ruxit-JS-Agent
X-Amz-Version-Id
X-Magento-Tags
X-User-Agent
X-FORWARDED-FOR
X-Px
X-Edge-Location
X-LW-Cache
X-Cached
X-Cache-Config
Fpc-Cache-Id
X-Goog-Hash
X-Topify-Platform
WPX
X-Webserver
X-Handled-By
X-Zen-Fury
X-Tumblr-Pixel-6
X-Generated-By
Dmn
PageSpeed
X-Source
X-ARC
X-Outils-CS
Retry-After
X-MiniProfiler-Ids
X-LBLID
X-Loopia-Node
ServedBy
Imagetoolbar
Access-Control-Request-Method
X-Platform-Server
X-DynaTrace
X-Platform-Router
Rt-Fastcgi-Cache
X-Platform-Cluster
X-Platform-Processor
TCN
X-Url
X-URL
X-CMS-Version
Pagespeed
X-ET-API-VERSION
X-ET-API-ROOT
X-URLSCHEME
X-ET-API-ORIGIN
X-Engine
X-Goog-Stored-Content-Encoding
X-B-Cache
X-PhApp
X-Upstream
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-Goog-Metageneration
Powered
X-From
X-Goog-Generation
X-CacheServer
X-Accel-Expires
X-Vtex-Remote-Cache
X-VTEX-Cache-Status-Janus-ApiCache
No
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-Vtex-Processed-At
X-Magento-Cache-Debug
X-Cache-Key
X-Cached-By
X-Request-Time
X-Msg-2-Log
X-Passed-To
X-Returned-From
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Returned-From-DLL
X-Actual-URL
X-EdgeConnect-Origin-MEX-Latency
Fhost
X-Varnish-Count
X-RESOURCE
X-Varnish-HitMiss
X-Version
X-Passed-To-DLL
X-Original-Request
X-Passed-To-PostProcessResponse
X-Varnish-Beresp-Ttl
Host
X-Varnish-Beresp-Status
X-Stale
X-Varnish-Beresp-Grace
Cache-Provider
X-Art-Request-Id
X-Varnish-Cache-Hits
X-EdgeConnect-MidMile-RTT
X-Ezoic-Cdn
Fastcgi-Cache
DynaTrace
X-Varnish-TTL
X-NWS-LOG-UUID
X-Application-Context
X-Cache-Info
X-Cache-Tags
X-DealerOn
X-Dealeron-Backend
X-Dealeron-Original-Url
X-AspNetWebPages-Version
X-S
X-Sapient
X-Platform
X-Response-Time
Alternate-Protocol
X-HS-Content-Campaign-Id
X-Server-ID
Public-Key-Pins-Report-Only
X-Content-Options
X-Platform-Cache
X-Hosted-By
X-Location-Id
X-F-Cache
X-Acquia-Application-UUID
X-SRCache-Fetch-Status
X-Varnish-Host
Arr-Disable-Session-Affinity
Warning
X-SRCache-Store-Status
X-Whom
X-Acquia-Application-Trace
X-Developer
Origin
Last-Published
X-Signature
X-Route-Server
X-Microcachable
X-Varnish-GracePeriod
X-Varnish-RemainingLife
X-I
X-Varnish-ObjectSource
X-Forwarded-For
X-Cache-2
X-Rnd
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-Helper-Autoassign-All
X-Umbraco-Version
SN
X-Device-Type
Powered-By-ChinaCache
X-BS
X-Shop-Id
X-Via-JSL
X-Cache-TTL
X-Dispatcher
X-SO
X-Defender
Version
X-I-Sp
X-Supported-By
S-Cnection
Generator
X-Micro-Cache
X-Cache-IO
Server-Timing
X-Cache-Rule
X-Environment
Service-Worker-Allowed
X-Lambda-Id
X-Cache-Age
X-Akam-SW-Version
X-Gamma-Serve
Cache-Key
X-Magento-Cache-Control
Surrogate-Key
Content-Disposition
X-Esi
X-Nginx-Cache
X-Cache-Debug
X-TransIP-Backend
X-TransIP-Balancer
X-Vcap-Request-Id
X-Instart-Request-ID
X-Track
Product
X-Server-Upstream
X-Guploader-Uploadid
X-Powered-By-360WZB
X-Cache-Server
SSPAppContext
X-CSRF-Protection
X-Correlation-Id
X-App-Hosting
X-Debug
X-Microcache-Status
X-Translation
X-Client-IP
X-NetCat-Version
Akamai-IP
X-VARITI-CCR
X-ATG-Version
X-SSL-Cipher
X-Nf-Srv-Version
X-SSL-Protocol
X-Matrix-Proxy
X-Last-Modified
X-Cache-Namespace
X-ApacheServer
X-SDS
X-PERF
Cneonction
X-Hypernode
X-Abgroup
X-Sucuri-ID
X-Matrix-Server
X-Powered-By-VelaWeb
X-App-Status
X-Director
X-GUploader-UploadID
WZWS-RAY
USPLoggingUUID
X-Amz-Meta-S3cmd-Attrs
Wsr-Cache
NnCoection
X-Firenze-Processing-Time
Edge-Control-Message
X-Fastcgi-Cache
X-Gateway-Skip-Cache
X-HW
Strikingly-Cached
X-Gateway-Cache-Status
X-Gateway-Cache-Key
X-Now-Id
X-ORACLE-DMS-RID
Strikingly-Cache-Region
Strikingly-Cached-Version
X-Drupal-Cache-Tags
X-Cache-Type
X-Expires-Orig
X-Daa-Tunnel
X-SV-Duration
X-Varnish-Age
X-Flow-Powered
X-Drupal-Cache-Contexts
X-SV-CreatedAt
X-SV-FromDBCache
X-SV-Edge
X-Hostinger-Node
X-Rq
Srv
Contao-Page-Layout
X-SV-Nginx-Duration
X-Hostinger-Datacenter
X-LB
X-SV-Pid
X-Cache-Lifetime
Page-Completion-Status
X-Sucuri-Cache
X-Geo-Country
X-FTR-Request-ID
X-Ttl
X-SV-Cacheable
X-SV-CacheTags
X-Powered-By-VTEX-Janus-Edge
X-Edge-IP
Cache-Tags
X-SRV
X-Server-Id
X-Rocket-Nginx-Serving-Static
X-ORACLE-DMS-ECID
X-Locale
Content-Hash
X-SV-Expires
X-N
X-Correlation-ID
RTSS
X-Cache-Control-Orig
X-Akamai-Device-Model
X-Forwarded-Proto
X-Akamai-Device-Characteristics
Nodo
PICS-Label
Cache
X-SSLUpstream
AMF-Ver
X-Generated
Https
X-SSLProxy
X-Url-Base
X-PwB-Node
FAI-W-FLOW
X-Env
Author
X-Cache-Level
X-Recruiting
X-Empowered-By
ServerName
W
X-SmugMug-Values
X-SmugMug-Hiring
X-Pressidium-NinukisWP-Ver
X-TransIP-Reserved
X-Duration
CF-Worker-Version
X-Cache-Device-Type
X-TTFB-L
X-TTFB
X-CJ-Soft
X-ID
Dtk-Cache-Check-0
X-TTL
X-Content-Type-Option
Lsrequestid
Smug-CDN
X-CacheFROM
X-ACMCache
X-Cache-Operation
X-Rocket-Nginx-Bypass
X-Cache-TTL-Remaining
Local-Info
X-Trace-Id
Frame-Options
X-Cache-Engine
X-Real-Server
MIME-Version
X-Front
X-Varnish-Url
Content-Transfer-Encoding
Server-Name
Accept-CH
X-Middleware-Start
Section-Io-Id
Location
X-IsCacheURL
Proxy-Connection
Pv
X-NoCache
S
X-Cache-PageType
X-Cache-Fix
X-V
AC-ELC
X-Adobe-Content
X-Dynamic-Cache
X-Adobe-Loc
Src-Update
Update-Time
Content-MD5
Ohc-File-Size
X-Cache-Expires
Server-Info
Req-Id
X-Grace
Cached
Ufe-Result
EagleEye-TraceId
X-WR-Flags
Front
Pf.Web.Request.Id
X-Time
X-Content-Age
Pool
X-NginX-Cache
X-Varnish-Cacheable
X-Litespeed-Cache-Control
Identity
X-Nginx-Dummy
X-UPSTREAM
X-Speed-Cache-Key
X-AVG-Country-Code
X-Redman-Backend
X-PF-Uncompressing
X-Speed-Cache
X-Processing-Time
X-Redman-Final-Url
X-Akamai-Edgescape
Adm-Server
X-Frontend
X-SERVER-NAME
X-Remote-Addr
Qs-Cache
X-Pagename
X-Hit-Cache
X-Config-Blacklist-Version
X-CB-Server
X-Storage
SHInfo
X-Dns-Prefetch-Control
X-Avg-Cookie-Expires
X-FW
X-Varnish-Retries
X-Revision
X-CF-Passed-Proto
X-LP
MJ12bot
Accept-Charset
SEOMOZ
X-Page-Cache
X-High-Performance
ServerID
X-HeBS-Cache-Status
X-GeoIP-Country-Name
X-Atraveo-TTL
X-Resource
X-Cf-Powered-By
X-GeoIP-Country-Code
X-Atraveo-Set-Cookie
X-Consent-Required
X-Now-Cache
X-FastCGI-Cache
X-Force
X-Atraveo-Zone
Eomportal-Instance
X-Atraveo-Varnish-Server-Id
X-Atraveo-Param-Rm
X-Atraveo-From-Varnish-Cache
X-Country-Code
HCVer
X-Source-ID
X-Cache-Dispatcherpragma
Node
X-Cookie-Domain
X-Envoy-Upstream-Service-Time
HAVer
X-Atraveo-ETag
X-Atraveo-Expires
X-Stage
X-Cache-Dispatchercachecontrol
X-Atraveo-Cache-Control
Edit
X-PRAM
Content-Encoding-Handler
X-CAPServer
X-HydroSheep
X-HTML-Minification-Powered-By
X-Content-Security-Policy-Report-Only
CDN-Cache
X-Varnish-Debug-Age
VServer
X-Amzn-RequestId
X-Varnish-IP
X-SVR-IIS
X-Hrouter
X-Hstore
X-Amzn-Trace-Id
X-Framework
If-Modified-Since
X-Svr-Proxy
SRV
X-Varnish-Debug-TTL
X-Discourse-Route
X-Vhost
X-Proxy
X-Origin-Name
X-Amz-Apigw-Id
X-Amz-Storage-Class
X-Hiawatha-Cache
X-Request-Uri
Serverid
X-SP-Farm
Report-To
X-Span
X-Key
Upgrade-Insecure-Requests
X-SP-UniqueName
X-Id
X-Balanceador
X-JG-Page-Cache
Lb
X-Garden-Version
X-App-Server
Use-Proxy
X-Dispatch
X-Smartcache-Keys
Request-EU
Swift-Performance
Request-Country
X-WP
X-Smartcache-Timeout
Backend
X-Yottaa-Optimizations
X-LW-Web-Server
X-BKSrc
X-CACHE-TTL
X-Disney-Akamai-Rule
X-Role
X-Unique-Id
X-Cache-Varnish
X-Yottaa-Metrics
Backend-Timing
X-Analytics
RN-Server
X-AOL-HN
X-BackendServer
X-Plat
X-GeoIP
Machine
X-Worker
X-Server-Addr
X-Directory-Script
X-Cache-Control
X-Debug-Token
X-Forwarded-Host
X-GeoIP-Country
X-CRA-DC
X-4ormat-Cacheable
Tracecode
X-FPC
X-IP
X-Nx
X-Response
X-IIJ-Cache
X-Sedo-Request-Id
X-PHP-Response-Code
X-Highwire-SessionId
X-Cocoon-Version
X-ACCELERATE
X-Highwire-RequestId
X-Nx-All
X-Cache-On
CDN-Uid
Environment
From
IBM-Web2-Location
CDN-RequestId
CDN-PullZone
AR-PoweredBy
Locale
AR-SID
CDN-CachedAt
MW-Webserver
N365rili
X-WPL-DATA
X-Autoru-Host
ScoreTracker
X-SAPP
X-AEM
RequestId
Resin-Trace
X-Adnet
VANITY-HOST
Xc-Version
X-SmartBan-Host
X-Cache-Miss-From
X-Streams-Distribution
X-Client-Id
X-Symfony-Cache
X-Service-Id
X-ServerID
X-SRCache-Key
X-RealServer
X-VCS-Ttl
X-VCS-Cacheable
X-Varnish-Ttl
X-Wikidot-Backend
X-Backend-Status
X-Fstrz
X-Client-Image-Vid
X-Client-Vid
X-Resolver-IP
X-Oracle-Dms-Ecid
X-Wikidot-Static-Cache
Fastly-Backend-Name
Fastly-Restarts
Url
X-NginX-Server
XX
Accept-Encoding
Accept-Language
Content_type
X-Varnish-Hostname
X-Varnish-Action
X-FIRSTBase
X-EPiphany-Vid
X-UA-Bot
Filters
Ohc-Response-Time
X-Actindo-Request-Id
IISExport
X-AF-Userserver
X-Amz-Meta-S3b-Last-Modified
X-Actindo-Rs
X-Protected-By
Prama
X-Actindo-Thread-Id
AR-CACHE
X-SmartBan-URL
X-Autoru-App-Id
X-Akamai-Transformed
X-Browser
X-Desc
,
*
HitType
X-Via-S
X-Drectory-Script
X-FireWall-Port
Aurora-Node
Disablevcache
Srv-Name
X-Proxy-Skip
VSID
ViewMode
HitInfo
FRONT-END-SECUREBROWSER
X-Origin
X-Storage-Cache
X-Amzn-Remapped-Content-Length
X-Proxy-Cache-Control
X-LB-Server
X-Soro
X-Cache-Only-Varnish
X-Storage-Cache-Date
AR-ATIME
AMP-Redirect-To
From-Origin
Edgecast
X-Storage-Cache-Expires
Paypal-Debug-Id
X-NginX-Upstream
Server-ID
X-Distributor
X-Rebelmouse-Cache-Control
X-Clx-Request
X-MSU-SOURCE
X-7d-Trace-Id
X-7d-Instance-Id
Access-Control-Allow-Header
X-Rack-Cors
AMP-Access-Control-Allow-Source-Origin
Cmsid
Nitro-Cache
X-ReqId
Cmstype
X-SDE-Name
X-UUID
AsisCache
X-Oracle-DMS-ECID
X-RENDER-TIME
X-PROCESSED-BY
Cf-Ipcountry
DNNOutputCache
X-WEBMGR-CACHE
X-TB-M
TYPO3-Sitename
X-FORWARDED-PROTO
X-RequestId
X-Proto
X-Distil-CS
X-Mobilized-By
X-Webstats-RespID
X-Cdn-Forward
X-Session-ID
PagesDisplayed
TYPO3-Pid
X-Hosting-Env
X-Cache-Ttl
Provider
Server-Ip
X-Scheme
X-Search-Id
X-Rule
Returned-Status
ClientIP
Bios
Origin-Edge-Control
X-Src-Webcache
Origin-Cache-Control
X-Zendesk-Origin-Server
X-Zendesk-User-Id
Page-Template
X-Timestamp
X-User-Agent-Tier
X-Svr
X-Redir-Url
X-Instance
X-Generated-Time
X-LAKANA-AB
X-Machine
X-Nginx-Request-Processing-Time
X-Debounce
X-ASAP-Age
X-Cache-Via
X-Cache-Doesi
X-Clara-ASAP
X-ASAP-Cache
X-Content-Encoded-By
X-NodeID
X-Origin-Date
X-Serv
X-UnsetCookies
SB-Cache-Remaining
X-Server-Generated
SB-Cache-Life
SB-Site-Device
SB-Site-IE-VERSION
X-Page-Cacheable
X-ProcessESI
X-Cache-Time
X-RemovedCookies
X-Status
X-Archive-Orig-Last-Modified
NZSpeedy
X-Who
X-VHOST
Access-Control-Allow-Method
X-Yadis-Location
X-WebKit-CSP-Report-Only
Pics-Label
Custom-Header
Beyond-Iis
NEL
X-Flex-Community
X-SCM-Server-Number
X-Proxy-Cache-Key
X-Ssl-Cipher
X-UD-METHOD
X-VC-TTL
X-VC-Enabled
Surrogate-Key-Raw
X-Varnish-Cache-Ttl
X-Pantheon-Site
X-Ruxit-Js-Agent
X-Layout
X-Pantheon-Phpreq
X-Nginx-Host
X-Pantheon-Environment
X-Pantheon-Az
X-Gannett-Site-Version
X-Depends
X-Cacheable-TTL
X-Airee-Node
X-Upstream-Status
X-Upstream-Backend
X-Title
X-Secret
X-Serverid
X-PBY
X-Origin-Server
X-Archive-Orig-Connection
X-Archive-Guessed-Charset
X-PM-ID
X-Archive-Orig-Content-Type
X-Archive-Orig-Date
X-Beluga-Node
X-Beluga-Cache-Status
X-Archive-Orig-Server
X-PressLabs-Stats
X-AMAZEEIO
F5-IpCliente
X-Req-Head-Response
Disp
Gzip
Magicmarker
NLCacheNote
Memento-Datetime
X-Beluga-Record
X-Beluga-Response-Time
X-Highwire-Smart-Code
X-Highwire-Sitecode
X-Flex-Lang
X-Ms-Request-Id
X-Ms-Version
X-Flex-Evend
X-Flex-Evstart
X-Flex-Lastmod
X-Flex-Tag
X-Beluga-Trace
X-Beluga-Status
X-Beluga-Response-Time-X
X-Map-Context
X-Instance-Id
X-Flex-Tags
X-Built-By
DeleGate-Ver
X-DevSrv-CMS
SS
SBSS
Requested-Host
Thanks
UrlWatchModule-Time
X-App-Runtime
X-A
Webserver
Nd
Firespring-Website-Id
X-Twitter-Response-Tags
X-Transaction
X-SilverStripe-Cache
Cache-Ctrol
CacheControlHeader
FindLaw
Copyright
Content
X-AppServer-Cache-Exception
X-AppServer-Cache-Rule
X-Proxy-Id
X-Policy
X-M-Reqid
X-Qnm-Cache
X-Rocket-Nginx-File
X-SE-Debug
X-Runtime-Affili
X-Rocket-Nginx-Reason
X-M-Log
X-Location
X-ClientSide-Caching
X-Bip
X-AppServer-Status
X-DataDome
X-DDM-SERVER
X-E
X-DDM-SERVER-UPDATED
X-Sid
X-Lb
X-RiS-UFDI
X-Magnolia-Registration
X-Dw-Trace-Id
X-Varnish-Backend
X-VC-Cacheable
TP-Cache
SERVER-NAME
Max-Age
X-Container
X-Cache-Var-Map
Cache-Cookie-Set-Lfrom
Cache-Cookie-Set-Idcheck
Cache-Cookie-Set-From
MC
Web-Server
X-Cache-Var
X-Cache-Handler
X-Cache-CFC
TP-L2-Cache
WP-AdvCache-MemCached
X-Cache-Action
X-Box
D
X-Cache-Extended
X-Compress-Hint
X-Geo
X-ENV
X-Connection-Hash
X-Upgrade-Enabled
X-Sys-Req-ID
X-Compressed-By
X-Cluster
X-Agent
X-Geo-IP
X-MAT-GEO
X-Skip-Cache
X-Nbs
X-Server-IP
X-Session-Reinit
X-Cache-Me-Harder
X-Amz-Meta-Content-Md5
Verto-Server
X-Cache-TTL-Age
X-Cache-TTL-Current
X-Goog-Meta-Replace
X-Goog-Meta-Policy
X-Ghost-Cache-Status
SVR
StatusCode
Httpd-Identifier
DrivedBy
Debug-Status
Id
IM-Version
ServerTokens
ServerSignature
NtCoent-Length
X-Hit
X-HTTPS-Cipher
X-VC-Cache
X-Varnish-Grace
X-TNCMS-Bot-Tier
Yoncu-Errno
A-Powered-By
Cm-Server
CD5
Actual-Object-TTL
X-Runtime-Memory
X-Route
X-Instance-Name
X-Info
X-HTTPS-Protocol
X-Nginx-Page-Cache
X-NWS-UUID-VERIFY
X-Purge-URL
X-Purge-Host
Arrnode
X-Varnish-Cached-TTL
IES-Server
GD-Server
Drupal-Pagecache-Memcache
Keywords
Load-Balancer
Request-Time
Og
ModuleCacheType
Description
DB-Nickname
X-SuperCache
X-SSLTerm-Server
X-SID
X-Time-Microsecs
X-VG-WebCache
Content-Sn
Backend-Powered-By
Xc
X-B3-Sampled
X-Batcache
X-Nitro-Cache
X-MCF-ID
X-Jcms-Ajax-Id
X-Page
X-Refresh
X-Varnish-Cached
X-UPServer
X-Sn-Servicetimems
X-Fpc
X-EC2-Instance-Id
X-Built-With
X-Bcwwwid
X-Batcache-Reason
X-Cache-Date
X-Captured
X-Cms
X-Cdn-Origin
MachineName