Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Connection
Set-Cookie
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Accept-Ranges
Link
ETag
X-Content-Type-Options
P3P
X-XSS-Protection
X-Pingback
X-Frame-Options
X-AspNet-Version
X-Cache
Content-Language
Age
CF-RAY
X-UA-Compatible
Strict-Transport-Security
Via
X-Adblock-Key
X-Language
X-Template
X-Check
Access-Control-Allow-Origin
X-Varnish
X-Buckets
X-Generator
X-Cacheable
X-Drupal-Cache
Content-Location
X-Hacker
X-Ac
X-AspNetMvc-Version
X-Request-Id
X-Powered-By-Plesk
MS-Author-Via
X-Type
X-Pass-Why
X-Cache-Group
X-Runtime
WP-Super-Cache
X-Cache-Hits
X-Powered-CMS
Status
Ngpass-Ngall
X-Permitted-Cross-Domain-Policies
Host-Header
X-Download-Options
Access-Control-Allow-Credentials
X-UA-Device
Keep-Alive
X-ShardId
X-Alternate-Cache-Key
X-ShopId
X-Dc
Access-Control-Allow-Headers
X-Iinfo
Content-Security-Policy
X-Via
X-Mod-Pagespeed
Access-Control-Allow-Methods
X-Tumblr-Pixel-0
X-Tumblr-User
X-Tumblr-Pixel
X-Logged-In
X-Pad
X-Backend
X-Tumblr-Pixel-1
X-Served-By
X-ServedBy
X-Cache-Status
X-Contextid
X-Tumblr-Pixel-2
X-Request-ID
X-Server
X-PC-Hit
X-PC-Key
X-Host
Upgrade
Powered-By
X-CDN
Content-Encoding
X-FRAME-OPTIONS
X-Cache-Hit
X-PC-AppVer
X-PC-Date
X-PC-Host
X-Port
X-Tumblr-Pixel-3
X-Timer
X-Robots-Tag
X-Accel-Version
X-Varnish-Cache
X-Cnection
X-Cache-Lookup
SPRequestGuid
X-SharePointHealthScore
MicrosoftSharePointTeamServices
X-Rack-Cache
X-Request-Country
X-Amz-Cf-Id
MicrosoftOfficeWebServer
X-Server-Powered-By
X-MS-InvokeApp
X-XRDS-Location
X-Safe-Firewall
X-Page-Speed
Alt-Svc
X-Turbo-Charged-By
CF-Cache-Status
X-Content-Powered-By
X-AH-Environment
Rating
X-W-DC
X-Node
X-Wix-Renderer-Server
X-Seen-By
X-Wix-Request-Id
X-Content-Digest
X-Tumblr-Content-Rating
X-Cache-Enabled
X-FullPageCaching
X-Tumblr-Pixel-4
X-GitHub-Request-Id
Request-Id
X-Webserver
X-PhApp
Public-Key-Pins
X-INKT-URI
X-INKT-SITE
SPIisLatency
Content-Security-Policy-Report-Only
SPRequestDuration
Composed-By
X-Firenze-Processing-Times
Timing-Allow-Origin
Served-By
Cf-Railgun
X-Amz-Request-Id
X-Amz-Id-2
X-HeyJason
Permitted-Cross-Domain-Policies
Liferay-Portal
X-Proxy-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
Surrogate-Key-Raw
X-Pantheon-Endpoint
X-Styx-Version
X-Spip-Cache
X-Hyper-Cache
Xkey
Access-Control-Expose-Headers
Surrogate-Key
Access-Control-Max-Age
X-Server-Name
Charset
X-Content-Security-Policy
X-Drupal-Dynamic-Cache
X-Swift-SaveTime
X-Swift-CacheTime
EagleId
X-CF-Powered-By
Content-Script-Type
X-SERVER
X-CDN-Pop
X-CDN-Pop-IP
Grace
Content-Style-Type
X-Tumblr-Pixel-5
X-XN-XNHTML
X-XN-Trace-Token
Access-Control-Allow-Method
X-FW-Hash
X-Hits
X-FB-Debug
X-FW-Type
X-FW-Static
X-Dw-Request-Base-Id
X-FW-Serve
X-Device
Public-Key-Pins-Report-Only
X-VCache
X-Clacks-Overhead
Content-MD5
X-Fastly-Request-ID
Refresh
X-Tumblr-Adult-Blog
X-User-Agent
X-TNCMS
Real-Hostname
X-Loop
X-Cache-Server
X-Jimdo-Wid
X-Jimdo-Instance
X-VWS-Id
X-LJ-Flow-ID
X-AWS-Id
X-Cache-Config
X-Backend-Server
X-DDC-Arch-Trace
X-Cache-Result
X-LiteSpeed-Cache
X-Umbraco-Version
X-Generated-By
X-Url
X-ServerName
Cartoon
Edge-Control
X-MiniProfiler-Ids
X-Age
Fastly-Debug-Digest
X-Cloud-Trace-Context
X-Cached-By
X-Px
X-Cached
PageSpeed
X-Cdn
X-Hostname
X-Tumblr-Pixel-6
X-Outils-CS
NS-RTIMER-COMPOSITE
Surrogate-Control
WZWS-RAY
X-Powered-By-360WZB
Fpc-Cache-Id
X-DynaTrace-JS-Agent
X-CMS-Version
X-Whom
TCN
Response
X-Sol
X-Middleton-Display
X-Middleton-Response
Display
X-DynaTrace
X-Forwarded-For
X-HOST
Imagetoolbar
X-WebKit-CSP
X-From
X-Msg-2-Log
X-Handled-By
ServedBy
X-AspNetWebPages-Version
DynaTrace
Product
Rt-Fastcgi-Cache
Front-End-Https
X-TTL
X-Varnish-Cache-Hits
X-Recruiting
X-EC-Security-Audit
X-Content-Options
X-Country-Code
X-Newrelic-App-Data
X-URL
IBM-Web2-Location
X-BC-Stapler
X-NetCat-Version
Access-Control-Request-Method
X-Varnish-Host
X-Matrix-Proxy
X-Matrix-Server
X-Art-Request-Id
X-Varnish-Beresp-Grace
Alternate-Protocol
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Original-Request
X-App-Hosting
Origin
X-Actual-URL
X-Passed-To
X-FORWARDED-FOR
X-Passed-To-DLL
X-Returned-From
X-Returned-From-DLL
X-Micro-Cache
X-Hosted-By
X-ApacheServer
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Track
X-Platform
Fhost
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
X-Stale
X-Do-Not-Hack
X-LiteSpeed-Cache-Control
X-Content-Encoded-By
Generator
Akamai-IP
Page-Completion-Status
X-SRCache-Store-Status
X-UD-Method
X-Firenze-Processing-Time
X-SRCache-Fetch-Status
X-Expires-Orig
Powered
Ag-Send-Time
X-PERF
X-Origin
Ag-Execution-Time
Ag-Server-Time
X-I
X-CacheServer
X-Varnish-Backend
X-Varnish-TTL
X-Version
Server-Info
X-Magnolia-Registration
X-S
Host
X-Daa-Tunnel
X-Cache-Rule
Powered-By-ChinaCache
X-VTEX-Cache-Status-Janus-ApiCache
X-VTEX-Cache-Status-Janus-Edge
ServerName
X-Powered-By-VTEX-Janus-ApiCache
X-Powered-By-VTEX-Janus-Edge
X-Varnish-Cacheable
No
X-Vtex-Processed-At
X-Vtex-Remote-Cache
X-Vtex-Processado-Em:
X-Server-ID
X-VTEX-Janus-Router-Backend-App
Content-Encoding-Handler
X-Location-Id
Content-Disposition
X-Engine
X-Microcachable
Surrogate-Keys
X-Abuse
X-Gamma-Serve
Content-Hash
X-Goog-Hash
USPLoggingUUID
Magicmarker
X-BS
X-I-Sp
X-Cache-TTL
X-Duration
X-Request-Time
X-ATG-Version
MIME-Version
X-Route-Server
Node
X-RESOURCE
Lsrequestid
X-Director
X-URLSCHEME
X-Cache-Info
X-Device-Type
X-Translation
Edge-Control-Message
X-Microcache-Status
X-Response-Time
X-Cache-Debug
Content-Security-Policy-Rerport-Only
X-Source
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-CJ-Soft
SN
X-Cache-Age
X-DNS-Prefetch-Control
X-Varnish-Age
X-Instart-Request-ID
X-Upstream
X-Cache-Expires
X-B-Cache
X-SDS
X-Cache-Lifetime
X-OneAgent-JS-Injection
Fastcgi-Cache
X-NoCache
X-Developer
Proxy-Agent
X-Geo-IP
X-N
Location
X-PwB-Node
X-Cache-Operation
X-Zen-Fury
X-Fastcgi-Cache
X-Speed-Cache-Key
X-Varnish-ObjectSource
Req-Id
X-Speed-Cache
Version
X-Cache-Control-Orig
X-Storage
X-Varnish-GracePeriod
X-Varnish-RemainingLife
X-Rocket-Nginx-Bypass
ServerID
X-Akamai-Device-Model
X-Front
X-ServerID
X-Akamai-Device-Characteristics
X-FW
Last-Published
X-Cookie-Domain
PICS-Label
Cache-Key
X-Grace
X-DefendeR-Runtime
X-GeoIP-Country-Code
X-DefendeR-Status
Proxy-Connection
X-Cache-Tags
X-Drectory-Script
X-Server-Id
Buuteeq-Source
X-Varnish-Server
X-Client-IP
X-Content-Age
Nitro-Cache
X-SV-CreatedAt
X-Geo-IPV
X-Geo-IP-Metro
X-Geo-IP-Country
X-SV-Duration
X-Geo-IP-Region
X-SV-FromDBCache
Cache
X-Revision
X-Time
X-SV-Pid
X-SV-Nginx-Duration
Webluker-Edge
Arr-Disable-Session-Affinity
S
X-GeoIP-Country-Name
Retry-After
X-LB
RTSS
SEOMOZ
MJ12bot
X-SV-Edge
X-SV-Expires
X-Powered-By-Server
X-SV-CacheTags
X-Varnish-HitMiss
X-Varnish-Count
Pics-Label
X-Hypernode
X-Ttl
X-Processing-Time
X-Mobilized-By
X-Varnish-IP
CC-CACHE
W
Srv
X-Kinsta-Cache
X-UPSTREAM
X-AOL-HN
X-Vcap-Request-Id
X-Platform-Processor
X-Platform-Router
X-Edge-Location
X-Varnish-Hits
X-Amz-Version-Id
Accept-Charset
X-Nginx-Host
Qs-Cache
X-Xrds-Location
Backend
X-ACMCache
X-Server-Upstream
X-CDN-Cache-Status
X-Real-Server
X-Orig-Vary
X-CDN-Node
X-Purge-URL
X-Dispatch
X-Correlation-Id
Filter-Revision
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-VARNISH-Cache
X-Mobile-URL
X-Trace
Nodo
X-StackifyID
X-Yadis-Location
X-Directory-Script
COMMERCE-SERVER-SOFTWARE
X-Nhost
X-NFE
X-Page-Cache
X-Nurl
Content-Transfer-Encoding
HCVer
X-Nginx-Cache-Status
SVR
HAVer
Cm-Server
Id
X-SE-Debug
X-Cache-Key
X-Dynatrace
NetMindSessionID
Accept-Encoding
A-Powered-By
IISExport
X-Processed-By
X-BKSrc
X-Framework
X-ClientSide-Caching
X-Frontend
X-Purge-Host
X-Supported-By
X-Cocoon-Version
Myheader
X-WEBSERVER
X-TempDebug
X-Config-Blacklist-Version
X-Blog
Front
X-Varnish-Hostname
X-Application-Context
Host-Service
Server-Name
X-Platform-Cache
Mobiquo-Is-Login
X-Worker
X-IIJ-Cache
X-App-Server
X-Cache-Doesi
X-Discourse-Route
X-Machine-Name
Cached
AMF-Ver
X-Cache-Engine
X-Grid-Server
X-Dispatcher
X-NB-Cached-Page
X-Cache-Control
X-Debug
NODE
Eomportal-Instance
X-Empowered-By
Section-Io-Id
Referrer-Policy
X-Flow-Powered
X-NginX-Node
X-NginX-Upstream-Addr
X-Config-By
SSPAppContext
X-V
X-NginX-Upstream-Response-Time
X-Sys-Req-ID
X-NginX-Upstream-Status
X-AbeBooks-Version
X-Server-Response-Time
X-Member
CacheControlHeader
Author
X-ARC
X-Browser
X-Resolver-IP
X-PG
X-CDN-Forward
X-Amz-Meta-S3cmd-Attrs
X-NginX-Cache
Pool-Info
Thanks
X-Highwire-RequestId
X-Highwire-SessionId
X-GeoIP
X-Twitter-Response-Tags
SRV
WWW-Authenticate
X-Transaction
X-SmartBan-URL
Frame-Options
X-Connection-Hash
IM-Version
X-SmartBan-Host
X-Edge-IP
X-F-Cache
X-EPiphany-Vid
X-Client-Image-Vid
X-Plat-Be-Ip
X-Prefetched
X-Cf-Powered-By
X-PF-Uncompressing
X-Source-ID
X-Plat-Va-Ip
X-SmugMug-Hiring
X-EDGECONNECT-GUID-DEBUG
X-TTFB-L
X-Force
X-Env
Allow
X-Client-Vid
X-SmugMug-Values
Rewriter
X-Dns-Prefetch-Control
X-TTFB
X-Plat
X-Session-Reinit
X-PRAM
Smug-CDN
X-WA-Info
X-Amz-Storage-Class
Beyond-Iis
X-Sucuri-ID
X-Vary-Options
Ibf5scheme
X-NginX-Server
X-Nitra-Side
Logging-CorrelationId
X-Server-Start-Time
X-Origin-Id
X-Atraveo-TTL
X-Analytics
X-Atraveo-ETag
X-Atraveo-Expires
X-Atraveo-Param-Rm
X-Atraveo-Cache-Control
X-Garden-Version
X-ORACLE-DMS-ECID
X-LW-Web-Server
X-XTM-Node
X-Varnish-Debug-Age
X-Atraveo-Set-Cookie
X-Atraveo-From-Varnish-Cache
X-AOL-SNH
X-Atraveo-Varnish-Server-Id
Backend-Timing
X-Adobe-Content
WSR-Cache
X-Adobe-Loc
X-Atraveo-Zone
Ngpass-Vcall
X-Optimization
X-Varnish-Ttl
X-Trace-Id
X-NginX-Cache-Status
Bios
MW-Webserver
X-ID
XDomainRequestAllowed
CT
X-NewRelic-App-Data
X-Hit-Cache
X-HP-Trace-ID
NLCacheNote
X-WR-Flags
CLMOB
X-Nginx-Cache
A
Cneonction
X-LB-Server
VAR-Cache
X-HP-Trace-Project
X-BackendServer
X-Pagename
Dynatrace
X-Varnish-Debug-TTL
X-Balanceador
X-Symfony-Cache
X-Distributed-By
X-Hiawatha-Cache
X-Vhost
Mime-Version
Ram
Noq
Cpu
X-SRV
X-Real-IP
X-Hosts-Backend
X-Esi
X-IsCacheURL
X-Avvio-Cms-Cacheload
OT-RequestId
X-Server-By
X-T3Cache
BALANCEDTO
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-T3CacheInfo
Head
X-Provisioner-Version
X-RiS-UFDI
X-JG-Page-Cache
X-Domain-Checked
X-App-Status
S-Cnection
X-T3CacheTags
X-Goog-Generation
X-Webstats-RespID
X-Cache-PageType
X-Unique-ID
X-Cache-Fix
Cmsid
Cmstype
Sid
X-ASAP-Cache
Cache-Rule
X-DTC
Set-Cookie2
X-Clara-ASAP
X-Backend-Name
X-HTML-Minification-Powered-By
X-Signature
X-Magento-Tags
P-WS
P-LB
CmsCacheEngine
SBGI-RenderTime
SBGI-7
SBGI-5
SBGI-10
SBGI-9
SBGI-Device
X-Varnish-Grace
SBGI-RealPath
SBGI-1
X-Runtime-Affili
X-ServerIndex
MC
X-Id
X-DOM
X-Srv
X-Cache-Set
Servername
X-HW
X-Server-IP
X-Unique-Id
X-Jphone-Copyright
X-HOSTNAME
X-SV
DrivedBy
X-Environment
X-Turpentine-Esi
X-Cache-Level
X-EdgeConnect-Origin-MEX-Latency
X-Litespeed-Cache-Control
Actual-Object-TTL
X-RequestId
X-DSMX-Render-MS
X-Airee-Node
Web
X-Platform-Server
X-Webcelerate
X-Appmachine-Environment
X-FIRSTBase
Keywords
X-SDE-Name
X-Nginx
X-WP
X-Varnish-Esi-Access
X-Varnish-Esi-Method
X-Restarts
X-Varnish-Set-Cookie
X-Smartcache-Timeout
X-Smartcache-Keys
X-Pressidium-NinukisWP-Ver
X-MrHost
X-Turpentine-Cache
X-Varnish-Currency
X-Varnish-Store
X-Key
X-DSMX-Rewrite-MS
AsisCache
X-Captured
X-We-Are-Hiring
X-B
X-EdgeConnect-MidMile-RTT
NnCoection
Imx-Cookies-Used
X-B2f-Not-Route
Real-Server
X-Detected-Device
MageStack-Cache-Status
X-REDIRECTSERVER
MageStack-Area
X-SSL-Cipher
X-Varnish-RemainingGrace
MageStack-Cache-Hits
MageStack-Cache-Lifetime
MageStack-Cache
X-SSL-Protocol
X-Dev
X-Info
Worker
X-Cms-Mode
MageStack-Tag
X-Ser
X-Upstream-Backend
From
X-Header
HitInfo
X-Rack-Cors
X-Distributor
MageStack-Web-Node
X-DealerOn
MageStack-Loadbalancer
MageStack-Config
MageStack-Cacheable
MageStack-PageSpeed
MageStack-Debug
Fastly-Backend-Name
If-Modified-Since
ServerSignature
ScoreTracker
ORIGIN
X-Remote-Addr
X-Varnish-URL
B-Powered-By
X-Secret
X-CB-Server
X-Phpwcms-Release
X-Max-Age
VnhCdn-Status
Access-Control-Request-Headers
X-Phpwcms-Page-Processed-In
Warning
X-Custom-Header
Pool
ServerTokens
Resin-Trace
X-Frames-Options
X-Cluster-Node
Paypal-Debug-Id
Backend-Node
X-Sov
Content-Server
N365rili
X-Cache-Var-Map
X-GSL-Server
X-7d-Instance-Id
Sophnep-Edge-FX
X-Rot
X-Server-Instance
X-Cache-Node
X-Invoke-Duration
X-Desc
X-Actindo-RS
X-MAT-GEO
Cluster-ID
NZSpeedy
X-Unbounce-PageId
X-Unbounce-Variant
X-Unbounce-VisitorID
Proxy-Cache
X-Cache-Var
X-Cache-Provider
Ksid
X-Cache-Source
D
INCOMING-TIME
Prxy
X-FastCGI-Cache
X-Accel-Expires
X-Apm-Telemetry-Syncmark
X-Enhanced-By
X-Middleton-PageSpeed
X-7d-Trace-Id
X-Lifetime
Ec
Fw-Via
X-Cache-On
X-AISO-Server
X-Response
Device-Type
X-Rebelmouse-Cache-Control
X-Site:
X-RDP
X-Rebelmouse-Surrogate-Control
Xc
X-HostName
X-Nbs
Serverid
X-Artvisual-Server
X-Fstrz
Ctx
WP-AdvCache-MemCached
X-SeschatTemplateID
X-SeschatRedID
X-Seschat-URL
X-SeschatDID
X-4ormat-Cacheable
X-Rack-CORS
X-Magento-Action
X-ManagedFusion-Rewriter-Version
X-ACCELERATE
Provider
X-RealServer
X-Rewritten-By
X-Stage
CommunityServer
X-APP
X-VC-TTL
Content-Generator
X-SeschatLayout
X-Server-Addr
X-Src-Webcache
X-RateLimit-Remaining
X-Proto
WFE
X-Oracle-DMS-ECID
X-EZPublish-NodeID
X-Uid
X-PM-ID
BKREF
Accept-Language
X-Generated
X-Flex-Tags
X-Hit
Copyright
X-Hrouter
X-Hstore
X-Obr-Rule
X-DN-Cache-Control
X-DN-GyrobaseID
X-Time-Microsecs
Atp-Isdpp
Nginx-Cache
X-Varnish-Action
X-Bypass-Ssl-Transform
X-EZPublish-InstallationID
X-ASAP-Age
X-Span
X-FCMS-Cache
X-Amz-Id-1
Expiries
X-OPNET-Transaction-Trace
X-Ocache
Description
Il-Cl
X-CSRF-TOKEN
Fastly-Restarts
X-Flex-Tag
X-Mobile
X-Varnish-Instance
X-Flex-Lastmod
X-Render-Time
Cdate
X-HITS
Host-Name
X-Varnish-Backend-Healthy
X-Varnish-Error-Restart
X-Pagely-Cache
Ttl
X-DataDome
X-Is-Mobile
X-Depends
X-SID
X-ORACLE-DMS-RID
X-Hcom-Styx-Info
X-Ob-Mode
X-Vhost-ID
X-Search-Id
X-PBY
X-Flex-Evend
X-Flex-Evstart
X-Flex-Lang
X-Tile-Url
X-Flex-Community
PowerCDN
Www.Aujourdhui.Com
T
RequestId
PServer
IsMobile
X-AccessDev
NS-VaryByCustom-Key
X-TB-M
X-COUNTRY-CODE
X-Healthy
X-DEBUG
X-Hosting
Server-Id
VServer
Mto-License-Status
User-Cache-Control
X-W3TC-Minify
X-AISO-Cache
X-AISO-Cacheable
X-AG-MIPS
X-Clx-Request
X-Content-Security-Policy-Report-Only
X-Forwarded-Proto
MwpReleaseVersion
Hosted-By
X-Wikidot-Static-Cache
X-PoweredBy
AGI-Request-ID
X-Timing
X-WHOIS-Cached
X-Wikidot-Backend
X-ProxyInstancename
X-E
X-Cache-Extended
X-CDN-COMPRESS
X-Cluster-Host
X-Company
X-GRACE
X-Wm-1
QC-Key
QC-Hit
X-Meta-MSThemeCompatible
QC-Time
Cteonnt-Length
Debug-Status
Content
X-Wm-VIP
X-WR-MODIFICATION
AC-ELC
X-UA
WSCLoggingUUID
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Bcwwwid
X-Instance-Name
X-Author
X-Farm-Server
X-Runtime-Memory
Content-ID
X-Xhr-Current-Location
Url-Hash
X-Layout
Powerd-By
X-Cache-Action
X-ACLR-Version
X-Title
X-Rq
X-This-Proto
X-Distil-CS
X-Cacheable-TTL
X-UUID
X-VARITI-CCR
User-Agent
X-Cache-Backend
X-Built-By
X-Catalyst
Language
X-BPool
X-BServer
Httpd-Identifier
M
MSSmartTagsPreventParsing
Server-Ip
MSThemeCompatible
Og
GenSvr
X-EPiLogOnScreen
Progma
X-Dw-Trace-Id
X-Domino-CacheValidationWithETagResult
EXT-CACHEEXPIRE
X-HAProxy
X-EPiLogOnScreen-PostUrl
CIPHER-NAME
X-RSS-CACHE-STATUS
X-MSU-SOURCE
X-WorkerInstancename
X-Meta-MSSmartTagsPreventParsing
Kanooh-Host
RN-Server
X-LW-T
X-Node-Name
X-Varnish-Cache-Control
X-Varnish-Cache-Local
Brandcast-Brand-Id
Brandcast-Load-Balancer
X-IP-Address
Cache-Status
At-Shoptype
At-Isb
X-OCTOPOD
X-Domino-CacheValidationWithETagReason
X-OpenCart-Lightning
X-Ratelimit-Remaining
X-Venda-Hitid
X-Meta-Imagetoolbar
X-Hosting-Env
X-Cache-2
X-CCM
X-Cms-Server
X-Does-He-Have-Time
X-Route
X-Beatles-Hits
ServerIP
Apachenode
X-Gyrobase-Publication
X-Gannett-Site-Version
Be
X-TTL-Age
X-Your-GrandPa-Would-Wait
X-FreeTag-Count
X-PoolMember
X-Serendipity-InterfaceLang
X-Serendipity-InterfaceLangSource
Version-Epoch
SAVVIS
Apache
Http
Note
X-Pb-Mii
X-Mii-Cache-Hit
Hamster
Edgecast
Aurora-Node
MageStack-Cache-Warning
X-RequesterIP
X-Box
X-App
Vacache
X-Litespeed-Tag
X-ESI-Enable
X-FFX-B
X-ATP-Server
X-Device-Group
X-Hash
X-HP-CAM-COLOR
NtCoent-Length
X-VhostID
X-Nocache
X-T
X-N-ViewType
X-SilverStripe-Cache
X-Would-Your-GrandPa-Wait
X-Cache-TTL-Remaining
X-Cache-Device-Type
X-CacheResult
X-Contact
X-Faeria
XDisk
X-Webapp
X-Router
X-RAMCache
X-Router-Backend
X-Status
X-UseReverse-Proxy
X-Fedora-School-Id
X-Firewall
TP-L2-Cache
TP-Cache
VC-NoCache
X-A
X-Application
Max-Age
Expire
X-NewsFlow-Sitename
X-NewsFlow-DoCache
X-Not-Cacheable
X-Security
E-TAG
X-Old-Content-Length
X-Cache-Keep
X-AWS
SS
APP-VERSION
Session-Id
RouteID
Cache-Control:
X-Nginx-Request-Time
X-Ar-Debug
X-Jcms-Ajax-Id
X-Mod-Oboe-PS
X-Cache-Me-Harder
X-Pj-Cache-Status
X-VCS-Url
X-VCS-Status
RSL-Trace-ID
X-VCS-Ttl
Web-Head
TMP
ResourceTag
Beon-Cache-Status
ReqUrl
Served-From
X-CACHE-TTL
LBVIS
X-LOCATION
X-Obj-Ttl
X-Beresp-Ttl
Orgin-Server
XX
X-Zendesk-User-Id
X-VCS-Nrhit
Redirect
Server-ID
X-Zendesk-Origin-Server
X-VCS-Cacheable
X-Magento-Lifetime
HA-Front
X-POPSUGAR-Server-Name
Public-Extension
X-Pageid
X-SuperCache
X-Provided-By
X-PF-CACHE-FAILED
X-Session-ID
X-Site-Name
X-Logword
X-Tags
X-DDM-SERVER
X-VCS-Hit
Exires
X-Cache-Via
X-VCS-Cache-Server
X-DDM-SERVER-UPDATED
X-Tradeindia-Request-GUID
X-Tradeindia-SMgmt
LB
X-VCS-Billing
X-VCS-Host
HA-Servedtime
X-Qnm-Cache
X-Page
Debug-Cache-Control
Debug-Expires
Foglight-Request-UUID
X-Ghost-Cache-Status
X-ETag
X-Capoed
NKBVHEADER
X-MCF-ID
X-Powered-By-Home.Pl
WebServer
Rt-Proxy-Cache
Web-Server
X-Static
X-Server-Node
Server-Optimized-By
X-NID
X-Origin-Cache
X-Magento-Cache-Debug
X-Magento-Cache-Control
X-TempoPesquisa
X-Pass-Through
X-AEM
X-App-Runtime
X-C
HA-Urlpath
Aoestatic
X-CDN-Any-IP
X-AUSERNAME
X-Client-Ip
X-DeliveryServer
X-Geo
X-ASEN
X-AREQUESTID
X-PS-MURDOCK-ORIG-PROTOCOL
X-PS-MURDOCK-ORIG-FILEEXT
X-WebNode
X-9XB-Server
X-Amz-Meta-Cb-Modifiedtime
X-HASH
X-LS-DEBUG
HA-Geolon
HA-Geolat
HA-Georegion
HA-Host
HA-Ipaddr
HA-Geocountry
HA-Geocity
X-RemovedCookies
X-ProcessESI
LBC
X-Cache-Ttl
HA-Cloudapp
X-PS-MURDOCK-CASE-NORMALIZATION
HOST-SERVICE
X-IP
X-MCB-Server
Svr
X-Goog-Meta-Policy
X-Goog-Meta-Replace
X-Protected-By
OutputRewritten
X-Web-Node
Gzip
X-DynamicCache
X-Requested-Page
X-Cache-Served
X-BC
X-Theme
X-Matched-Rule
Machine
X-Cache-Why
X-Highwire-Sitecode
X-Feed
X-Nginx-VM-RT
X-Original-IP
X-SL-Norewrite
X-SL-Notranslate
X-SATserver
CD1
F5-IpCliente
Ews
X-Powered-Developer
X-TargSmaku
X-Mobile-Device
X-Memcached
X-FarmId
X-MOBILE
Fpc-Expire
X-NGINX-Cache
Origin-Server
X-BeResp-Ttl
Pw-Value
X-Do-Esi
X-Batcache
X-Accel-Cache-Control
X-Server-Instance-Name
X-Server-Generated
WP-Cache
SERVER-IP
ClientIP
X-Proxy-Cache-Key
X-Test
V-Cache
X-AppServer-Cache-Rule
X-AppServer-Status
Dispatcher
X-Expose-Took
DeleGate-Ver
X-Pj-Cache-Time
X-Pj-Cache-Key
X-Powered-By-Anquanbao
X-ProcessTime
X-Reason-Bp
X-Pj-Cache-Gzip
X-Pj-Cache-Flags
X-DB-Content-Length
X-Content-Type
X-HA
X-Original-Host
X-Pj-Cache-Expires
X-Transaction-Id
X-FG-RequestId
X-NewCloud-V-Cache
X-DEBUG-TTL
X-Pixelsilk-Server
X-Pixelsilk-Version
X-Time-Spent
X-Cache-ID
X-Backend-TTL
X-Compressed-By
Cleartype
Content-Instance
Lookup-Cache-Hit
X-Checkout
X-Cache-Ua
X-ESI
X-Content-Parsed-By
X-Pubstack
X-Request-Processing-Time
X-Request-Received
X-Expose-Generated
X-Expose-Hostname
Disablevcache
X-Expose-Site
HostName
VANITY-HOST
X-Cache-Handler
X-Apache2-RT-MicroSec
MageStack-Cacheable-Reason
X-Varnish-Max-Age
MageStack-Response-Ttl
SLB
WWW
DB-Nickname
X-Region
Thinkindot-Control
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
REFRESH
X-VC-Enabled