Threat Level: green Handler on Duty: Mark Baggett

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Accept-Ranges
Link
ETag
X-Content-Type-Options
P3P
X-Pingback
X-XSS-Protection
X-Frame-Options
X-AspNet-Version
X-Cache
Content-Language
Age
CF-RAY
X-UA-Compatible
Via
Strict-Transport-Security
X-Adblock-Key
Access-Control-Allow-Origin
X-Varnish
X-Language
X-Check
X-Template
X-Buckets
X-Cacheable
X-Generator
Content-Location
X-Drupal-Cache
P3p
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Powered-By-Plesk
MS-Author-Via
X-Type
X-Cache-Group
X-Pass-Why
X-Xss-Protection
X-Runtime
X-Request-Id
WP-Super-Cache
X-Powered-CMS
Status
Ngpass-Ngall
X-Cache-Hits
X-Request-ID
X-Permitted-Cross-Domain-Policies
X-Ua-Compatible
Host-Header
X-Download-Options
Keep-Alive
Access-Control-Allow-Credentials
X-UA-Device
X-ShopId
X-Alternate-Cache-Key
X-Dc
X-ShardId
Content-Security-Policy-Report-Only
Access-Control-Allow-Headers
X-Iinfo
X-Via
X-Mod-Pagespeed
Access-Control-Allow-Methods
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
Content-Security-Policy
X-Logged-In
X-Pad
X-Tumblr-Pixel-1
X-Backend
X-Served-By
X-ServedBy
X-Tumblr-Pixel-2
X-ContextId
X-Cache-Status
X-PC-Hit
X-PC-Key
X-Frame-OPTIONS
X-FRAME-OPTIONS
X-Host
X-CDN
X-Server
Powered-By
X-Cache-Hit
Upgrade
Content-Encoding
X-Port
X-PC-Date
X-PC-AppVer
X-PC-Host
X-Tumblr-Pixel-3
X-Robots-Tag
X-Accel-Version
X-Timer
X-Rack-Cache
X-Cache-Lookup
X-Varnish-Cache
MicrosoftSharePointTeamServices
X-Cnection
MicrosoftOfficeWebServer
SPRequestGuid
X-SharePointHealthScore
X-Request-Country
X-MS-InvokeApp
X-XRDS-Location
X-Wix-Renderer-Server
X-Seen-By
X-Amz-Cf-Id
X-Wix-Request-Id
X-Page-Speed
X-Safe-Firewall
X-Server-Powered-By
X-Turbo-Charged-By
CF-Cache-Status
X-AH-Environment
Alt-Svc
Rating
X-W-DC
X-Content-Powered-By
X-Node
X-Tumblr-Content-Rating
X-Content-Digest
X-Tumblr-Pixel-4
X-FullPageCaching
X-GitHub-Request-Id
Public-Key-Pins
X-Webserver
X-Cache-Enabled
Request-Id
X-PhApp
X-INKT-SITE
X-INKT-URI
Composed-By
SPIisLatency
SPRequestDuration
X-SERVER
X-Firenze-Processing-Times
Served-By
X-Amz-Id-2
X-Amz-Request-Id
X-HeyJason
Permitted-Cross-Domain-Policies
Cf-Railgun
Timing-Allow-Origin
Liferay-Portal
X-Proxy-Cache
X-Spip-Cache
X-Hyper-Cache
Xkey
Surrogate-Key
X-Styx-Version
Surrogate-Key-Raw
X-Pantheon-Styx-Hostname
X-Pantheon-Endpoint
X-Styx-Req-Id
Access-Control-Expose-Headers
X-Server-Name
X-Content-Security-Policy
Charset
Access-Control-Max-Age
X-Swift-SaveTime
X-Swift-CacheTime
X-CF-Powered-By
Content-Script-Type
EagleId
Content-Style-Type
Grace
X-FW-Hash
X-CDN-Pop
X-CDN-Pop-IP
X-Tumblr-Pixel-5
Access-Control-Allow-Method
X-XN-Trace-Token
X-XN-XNHTML
X-FW-Type
X-FW-Serve
X-FW-Static
X-Drupal-Dynamic-Cache
X-FB-Debug
Content-MD5
X-Clacks-Overhead
X-Hits
Public-Key-Pins-Report-Only
X-Dw-Request-Base-Id
X-VCache
X-Fastly-Request-ID
Refresh
X-User-Agent
X-Device
X-AWS-Id
X-LJ-Flow-ID
X-VWS-Id
X-Loop
Real-Hostname
X-TNCMS
X-Cache-Server
X-Umbraco-Version
X-Jimdo-Wid
X-Jimdo-Instance
X-Tumblr-Adult-Blog
X-Cache-Config
X-Backend-Server
X-MiniProfiler-Ids
X-Cache-Result
X-Cloud-Trace-Context
Edge-Control
X-DDC-Arch-Trace
X-Url
X-Age
X-LiteSpeed-Cache
X-Hostname
PageSpeed
X-Generated-By
X-Cached-By
X-Px
X-ServerName
X-Forwarded-For
X-Cached
X-Tumblr-Pixel-6
Fpc-Cache-Id
NS-RTIMER-COMPOSITE
Fastly-Debug-Digest
X-Powered-By-360WZB
X-HOST
Surrogate-Control
X-Outils-CS
X-DynaTrace-JS-Agent
X-Msg-2-Log
Response
Cartoon
X-CMS-Version
X-From
X-Whom
TCN
Display
X-Middleton-Display
X-Sol
X-Middleton-Response
X-DynaTrace
X-WebKit-CSP
X-Recruiting
Product
Imagetoolbar
X-Cdn
DynaTrace
X-TTL
Rt-Fastcgi-Cache
X-URL
X-Handled-By
X-Varnish-Cache-Hits
ServedBy
X-Country-Code
X-AspNetWebPages-Version
X-Content-Options
WZWS-RAY
Front-End-Https
X-Matrix-Proxy
X-Matrix-Server
X-Content-Encoded-By
X-Server-ID
Alternate-Protocol
X-NetCat-Version
Fhost
X-Varnish-Beresp-Status
X-Do-Not-Hack
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
Access-Control-Request-Method
X-Passed-To-DLL
Page-Completion-Status
X-Passed-To
X-Actual-URL
X-Returned-From-DLL
X-Origin
X-App-Hosting
X-Returned-From
X-Original-Request
X-Platform
X-Passed-To-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Micro-Cache
X-Stale
Ag-Server-Time
Ag-Execution-Time
Ag-Send-Time
ServerName
Generator
X-Varnish-Host
X-Track
X-Hosted-By
Powered-By-ChinaCache
X-Varnish-Backend
X-ApacheServer
X-Newrelic-App-Data
X-Duration
X-Magnolia-Registration
IBM-Web2-Location
Powered
X-Firenze-Processing-Time
X-ATG-Version
X-OneAgent-JS-Injection
X-Location-Id
Content-Hash
X-UD-Method
X-S
Magicmarker
X-Expires-Orig
Surrogate-Keys
X-Varnish-TTL
Origin
X-BC-Stapler
Akamai-IP
X-Director
X-Art-Request-Id
Content-Disposition
MIME-Version
X-CacheServer
X-Request-Time
X-I
X-Gamma-Serve
X-Microcachable
X-Source
Host
X-Abuse
X-Powered-By-VTEX-Janus-ApiCache
No
X-VTEX-Cache-Status-Janus-ApiCache
Node
X-Vtex-Processado-Em:
X-VTEX-Janus-Router-Backend-App
X-Vtex-Remote-Cache
X-Vtex-Processed-At
X-Powered-By-VTEX-Janus-Edge
X-VTEX-Cache-Status-Janus-Edge
Lsrequestid
X-Version
X-Goog-Hash
X-Microcache-Status
X-Powered-By-Server
USPLoggingUUID
X-Translation
X-LiteSpeed-Cache-Control
Content-Encoding-Handler
X-Cache-Rule
X-Gateway
X-Cache-TTL
X-Beta
X-BS
X-PERF
X-Varnish-Cacheable
X-I-Sp
X-Cache-Age
X-Upstream
X-RESOURCE
X-URLSCHEME
X-Device-Type
X-Developer
X-Fastcgi-Cache
X-Cache-Debug
X-SDS
X-DNS-Prefetch-Control
X-Varnish-Seen-By
X-Varnish-RemainingTTL
ServerID
X-SRCache-Fetch-Status
SN
X-SRCache-Store-Status
Content-Security-Policy-Rerport-Only
Proxy-Agent
X-VARNISH-Cache
X-Varnish-Age
X-Cache-Info
X-Response-Time
X-Geo-IP
X-PwB-Node
X-FORWARDED-FOR
X-Route-Server
X-Instart-Request-ID
X-Drectory-Script
X-Engine
X-Daa-Tunnel
Version
X-CJ-Soft
X-NoCache
X-Geo-IP-Country
Proxy-Connection
X-CDN-Node
X-Geo-IP-Region
X-Geo-IPV
X-Cache-Expires
X-Rocket-Nginx-Bypass
X-CDN-Cache-Status
X-Geo-IP-Metro
X-FW
X-Front
X-Time
Arr-Disable-Session-Affinity
X-Cache-Lifetime
Pics-Label
X-B-Cache
X-N
Server-Info
X-Vcap-Request-Id
X-Mobilized-By
X-DefendeR-Status
X-DefendeR-Runtime
X-AOL-HN
Srv
SEOMOZ
Buuteeq-Source
X-Revision
MJ12bot
Fastcgi-Cache
Last-Published
X-Cookie-Domain
Edge-Control-Message
X-Cache-Operation
NetMindSessionID
X-Cache-Control-Orig
X-Akamai-Device-Characteristics
Location
X-Akamai-Device-Model
CC-CACHE
X-Speed-Cache
X-Varnish-Server
X-Dynatrace
X-Speed-Cache-Key
Cache-Key
X-Zen-Fury
X-ServerID
X-A
X-GeoIP-Country-Code
AMF-Ver
X-Real-Server
Cache
Retry-After
PICS-Label
X-Cache-Tags
X-Frontend
X-Varnish-Hits
X-Client-IP
Nodo
Nitro-Cache
X-Orig-Vary
X-GeoIP-Country-Name
Qs-Cache
X-Processing-Time
X-ACMCache
X-Grace
X-SV-FromDBCache
Content-Transfer-Encoding
X-SV-Duration
X-StackifyID
X-SV-Pid
X-Content-Age
X-SV-CreatedAt
X-SV-CacheTags
X-SV-Edge
X-SV-Expires
X-Varnish-HitMiss
X-Trace
X-Dispatch
X-Varnish-Count
X-SV-Nginx-Duration
Req-Id
X-Storage
WWW-Authenticate
X-Discourse-Route
X-Server-Upstream
X-Nhost
X-Nurl
X-Xrds-Location
X-Trace-Cache
X-Page-Cache
HAVer
Cm-Server
HCVer
Author
X-NFE
CacheControlHeader
X-Platform-Processor
Webluker-Edge
Mobiquo-Is-Login
X-Varnish-Grace
X-Machine-Name
X-Platform-Router
Filter-Revision
A-Powered-By
X-Yadis-Location
X-ClientSide-Caching
X-Cache-Key
X-SE-Debug
X-Varnish-IP
X-Ttl
X-Hypernode
X-Mobile-URL
X-Nginx-Host
X-Worker
X-Varnish-RemainingGrace
X-Purge-URL
X-SRV
Accept-Charset
X-Blog
X-WR-Flags
X-NginX-Upstream-Status
RTSS
IISExport
COMMERCE-SERVER-SOFTWARE
X-NginX-Upstream-Response-Time
Cached
W
X-Cocoon-Version
X-TempDebug
X-AbeBooks-Version
X-NginX-Cache-Status
X-AOL-SNH
X-NB-Cached-Page
X-NginX-Node
X-NginX-Upstream-Addr
Host-Service
X-Framework
WSR-Cache
Server-Name
X-Server-Response-Time
Allow
X-Session-Reinit
Accept-Encoding
X-Empowered-By
NODE
X-BackendServer
Eomportal-Instance
X-Garden-Version
X-Varnish-Hostname
Frame-Options
X-EDGECONNECT-GUID-DEBUG
Id
X-PF-Uncompressing
NtCoent-Length
X-Debug
S
X-Amz-Version-Id
X-Varnish-GracePeriod
X-Varnish-ObjectSource
X-Varnish-RemainingLife
X-Edge-Location
NnCoection
X-Directory-Script
X-UPSTREAM
X-Purge-Host
X-Cache-Doesi
X-Symfony-Cache
S-Cnection
X-Nginx-Cache
X-CDN-Forward
X-Sys-Req-ID
X-Jphone-Copyright
X-Grid-Server
X-App-Server
X-Balanceador
Backend
X-Varnish-Ttl
X-Webcelerate
Logging-CorrelationId
SSPAppContext
X-Nitra-Side
Ibm-Web2-Location
X-Varnish-Debug-Age
X-Config-By
X-Yottaa-Metrics
X-Yottaa-Optimizations
Front
X-Processed-By
X-Adobe-Loc
X-Server-Start-Time
Rewriter
X-WA-Info
CT
X-Adobe-Content
X-Origin-Id
X-Kinsta-Cache
X-Cache-Control
X-Application-Context
X-Platform-Cache
X-LW-Web-Server
SRV
X-Source-ID
X-Accel-Expires
X-BKSrc
X-F-Cache
X-Flow-Powered
X-Amz-Storage-Class
X-XTM-Node
X-App
RN-Server
X-Optimization
Beyond-Iis
BALANCEDTO
Ibf5scheme
X-Resolver-IP
X-IIJ-Cache
Cneonction
X-LB
X-Cf-Powered-By
X-V
SVR
X-Vary-Options
Myheader
X-Highwire-RequestId
X-FIRSTBase
X-SmartBan-URL
NLCacheNote
X-SmartBan-Host
X-Highwire-SessionId
Pool-Info
X-Supported-By
X-Edge-IP
X-Dw-Trace-Id
X-GeoIP
X-Cache-Engine
X-Connection-Hash
X-HITS
Dynatrace
X-Twitter-Response-Tags
Ram
Noq
VServer
X-Transaction
Keywords
X-WEBSERVER
Cpu
X-Atraveo-Cache-Control
X-SDE-Name
X-Cache-Fix
X-Cache-PageType
X-Force
X-PRAM
X-Atraveo-Expires
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Atraveo-Zone
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
Cmsid
X-Atraveo-ETag
X-Atraveo-From-Varnish-Cache
Cmstype
X-JG-Page-Cache
Section-Io-Id
X-HP-Trace-ID
X-HP-Trace-Project
X-Varnish-Debug-TTL
WP-AdvCache-MemCached
X-Provisioner-Version
X-Domain-Checked
X-App-Status
X-Server-Id
X-Pagename
P-WS
P-LB
X-Hit-Cache
X-TTFB-L
Thanks
X-Full-URL
Warning
CmsCacheEngine
X-IsCacheURL
X-Sucuri-ID
X-Prefetched
X-SmugMug-Hiring
X-SmugMug-Values
X-Distributed-By
IM-Version
Smug-CDN
Device-Type
X-Unique-ID
X-TTFB
X-Env
X-ORACLE-DMS-ECID
X-Airee-Node
X-Src-Webcache
X-Avvio-Cms-Cacheload
XDomainRequestAllowed
X-Varnish-Action
X-NewRelic-App-Data
X-ID
VAR-Cache
X-N-ViewType
X-Hiawatha-Cache
X-REDIRECTSERVER
X-Id
OT-RequestId
X-B
X-Smartcache-Timeout
X-WP
Mime-Version
Cache-Rule
X-Smartcache-Keys
X-Key
SiteName
X-Webstats-RespID
X-T3CacheInfo
X-W3TC-Minify
X-Amz-Meta-S3cmd-Attrs
X-LB-Server
A
X-Uid
X-Middleton-PageSpeed
X-T3CacheTags
X-Detected-Device
X-T3Cache
Real-Server
ScoreTracker
X-RiS-UFDI
From
ServerTokens
X-Server-Instance
X-Cache-Set
X-Unbounce-PageId
Head
X-Unbounce-Variant
X-PoweredBy
ServerSignature
X-Unbounce-VisitorID
X-Info
X-NginX-Server
X-Server-IP
X-Plat
X-NginX-Cache
X-Correlation-Id
SBGI-5
X-Akamai-Edgescape
X-ASAP-Cache
X-Clara-ASAP
X-DSMX-Render-MS
X-ARC
X-MrHost
SBGI-7
Fastly-Backend-Name
X-Rot
X-Cache-Provider
X-Cache-Source
SBGI-10
Sophnep-Edge-FX
Sid
X-DSMX-Rewrite-MS
X-Sentry-Token
Ksid
Ttl
Hash
SBGI-RenderTime
Paypal-Debug-Id
X-Response
X-Magento-Tags
X-RDP
ORIGIN
CommunityServer
Cluster-ID
SBGI-Device
X-ServerIndex
X-Sov
X-Desc
Prxy
SBGI-RealPath
X-SV
X-Cache-On
SBGI-9
X-Apm-Telemetry-Syncmark
X-VC-TTL
CLMOB
APP-VERSION
Ngpass-Vcall
X-Actindo-RS
X-Time-Microsecs
X-Site:
X-Appmachine-Environment
Hamster
X-RequestId
MW-Webserver
X-GSL-Server
Content-Server
X-Healthy
B-Powered-By
X-PG
X-Hosts-Backend
X-Unique-Id
LBC
X-Enhanced-By
X-AWS
X-CB-Server
X-Server-By
Set-Cookie2
Bios
SBGI-1
TP-Cache
X-B2f-Not-Route
X-HTML-Minification-Powered-By
X-HW
TP-L2-Cache
X-Captured
Imx-Cookies-Used
X-Backend-Name
N365rili
X-Cache-CFC
X-Rack-CORS
X-Cache-Action
X-Test
Description
X-Content-Security-Policy-Report-Only
X-Client-Vid
X-EPiphany-Vid
X-Client-Image-Vid
X-TempoPesquisa
X-Esi
Ec
X-Distributor
X-Invoke-Duration
NS-VaryByCustom-Key
X-JSESSIONID
Fw-Via
X-Trace-Id
WP-Cache
X-Amz-Id-1
Content
LBVIS
X-AISO-Cache
X-Server-Instance-Name
X-AISO-Cacheable
X-MAT-GEO
Svr
X-MCB-Server
X-AISO-Server
X-Server-Generated
X-Magento-Cache-Debug
X-Nginx
X-Cms-Mode
Worker
MageStack-Web-Node
X-Dev
MageStack-Tag
X-Ob-Mode
MageStack-Cache-Hits
X-ManagedFusion-Rewriter-Version
X-Frames-Options
Aurora-Node
X-Render-Time
X-DTC
MageStack-Area
MageStack-Cache
PServer
X-Rewritten-By
MageStack-Cache-Lifetime
MageStack-Cache-Status
MageStack-Loadbalancer
X-Cache-Keep
X-Cache-TTL-Remaining
MageStack-Cacheable
MageStack-Debug
MageStack-Config
X-Dispatcher
X-CacheResult
X-Do-Esi
Xc
Ctx
Server-Id
MageStack-Cache-Warning
X-DEBUG
MageStack-PageSpeed
X-Is-Mobile
X-Plat-Va-Ip
X-Plat-Be-Ip
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-Goog-Storage-Class
X-Goog-Metageneration
D
X-Goog-Generation
X-Phpwcms-Page-Processed-In
X-Phpwcms-Release
Copyright
AsisCache
AC-ELC
Il-Cl
X-Rebelmouse-Cache-Control
X-Platform-Server
X-Rebelmouse-Surrogate-Control
X-WorkerInstancename
X-Environment
RequestId
SL-NOREWRITE-REDIRECTS
VANITY-HOST
Language
X-Cache-Backend
Hosted-By
X-Ocache
User-Agent
X-Hcom-Styx-Info
Cdate
PowerCDN
X-We-Are-Hiring
X-This-Proto
X-Rq
X-Signature
X-Remote-Addr
X-Varnish-Backend-Healthy
NZSpeedy
X-Artvisual-Server
Og
X-Varnish-Instance
X-Varnish-Error-Restart
Device
X-Pj-Cache-Status
MC
INCOMING-TIME
Server-Ip
X-Seschat-URL
X-Secret
X-SeschatLayout
X-SeschatDID
X-Restarts
X-Node-Name
X-Litespeed-Cache-Control
X-SeschatTemplateID
Resin-Trace
X-SeschatRedID
X-Route
Nginx-Cache
Mto-License-Status
X-Hosting
X-Ratelimit-Remaining
X-Real-IP
X-Flex-Evend
X-Zendesk-Origin-Server
X-Proxy-Cache-Key
X-Wm-1
X-Flex-Evstart
X-Pagely-Cache
Accept-Language
Kp-EeAlive
X-MCF-ID
X-ACCELERATE
X-CPU-Time
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Author
X-DOM
Pool
GenSvr
X-Flex-Community
Host-Name
X-AppServer-Cache-Rule
X-PM-ID
X-Stage
X-Obr-Rule
X-SID
X-Flex-Tags
X-MSU-SOURCE
X-GRACE
X-Clx-Request
Ews
X-EntryPoint
X-Fallback
X-Fstrz
Content-Cache
X-Flex-Tag
X-ClusterID
X-AppServer-Status
X-CSRF-TOKEN
X-Forwarded-Proto
X-Fpc
Httpd-Identifier
WSCLoggingUUID
Kanooh-Host
X-Flex-Lastmod
X-Flex-Lang
Tracker
X-HAProxy
X-RealServer
X-Varnish-Currency
X-Varnish-Esi-Access
X-Varnish-Esi-Method
X-Varnish-Set-Cookie
X-Turpentine-Esi
X-Turpentine-Cache
X-EZPublish-InstallationID
X-EZPublish-NodeID
X-Hit
X-PBY
X-Varnish-Store
X-Varnish-URL
Apachenode
X-HostName
Access-Control-Request-Headers
VnhCdn-Status
ServerIP
X-VhostID
X-BPool
X-BServer
X-Cacheable-TTL
X-Static
X-Built-By
Machine
X-Meta-MSThemeCompatible
X-Proto
X-Cache-Node
X-Server-Addr
X-Meta-MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
MSThemeCompatible
X-Cluster-Node
X-CACHE-TTL
X-Instance-Name
X-T
AGI-Request-ID
X-RSS-CACHE-STATUS
X-Span
X-Srv
BKREF
X-FCMS-Cache
X-DataDome
Provider
X-4ormat-Cacheable
X-AG-MIPS
X-ASAP-Age
MSSmartTagsPreventParsing
X-Wm-VIP
VC-NoCache
SBGI-QS
Note
X-Faeria
Backend-Timing
DNNOutputCache
Realaction
X-Analytics
X-Wix-Route-ID
IsMobile
XDisk
X-FreeTag-Count
X-Cache-Via
X-Trace-App
X-KoobooCMS-Version
Cteonnt-Length
X-Backend-TTL
Content-Instance
E-TAG
Backend-Name-Original
X-Block
X-Channel-Maxage
X-Header
X-NewCloud-V-Cache
X-Cms-Server
X-NGINX-Cache
X-Not-Cacheable
X-TB-M
X-Status
X-VCS-Nrhit
X-VCS-Status
X-VCS-Host
X-VCS-Hit
X-VCS-Cacheable
X-ACLR-Version
Session-Id
X-VCS-Url
X-Zendesk-User-Id
Fpc-Expire
Pw-Value
X-VCS-Ttl
X-VCS-Cache-Server
X-BeResp-Ttl
X-OCTOPOD
X-Nginx-Request-Time
X-Old-Content-Length
X-PageType
X-Pageid
X-Magento-Action
X-PF-CACHE-FAILED
X-VCS-Billing
X-Browser
X-DealerOn
X-Serendipity-InterfaceLangSource
X-Serendipity-InterfaceLang
Apache
X-WebNode
X-ProxyInstancename
X-IP-Address
X-Search-Id
X-Gyrobase-Publication
X-Pj-Cache-Key
X-Company
X-ATM-RTime
X-Box
X-Cache-Extended
X-Vhost
XX
X-AccessDev
User-Cache-Control
X-7d-Instance-Id
X-7d-Trace-Id
X-Beatles-Hits
X-DN-Cache-Control
X-Domino-CacheValidationWithETagResult
X-Domino-CacheValidationWithETagReason
X-Does-He-Have-Time
X-ATM-RServer
X-DN-GyrobaseID
X-TTL-Age
Web
X-RAMCache
Max-Age
X-Would-Your-GrandPa-Wait
X-Your-GrandPa-Would-Wait
X-Webkit-CSP
Serverid
X-Rack-Cors
X-Nocache
Servername
X-TargSmaku
EWHSERVER
X-Jcms-Ajax-Id
X-Powered-Developer
X-Gannett-Site-Version
X-FarmId
X-IP
X-WebKit-CSP-Report-Only
X-Dynamic-Cache
X-Forwarded-Host
X-Forwarded-Server
X-Hosting-Env
Debug-Status
Dispatcher
X-GoCache-CacheStatus
X-FFX-B
X-Cachable
Http
X-Hrouter
X-Hstore
X-MobileDetected
X-HP-CAM-COLOR
X-EdgeRouter
X-Cache-ID
X-DEBUG-TTL
X-Say-Cacheable
X-Say-TTL
X-Magento-Cache-Control
X-Time-Spent
X-SayCDN-UA
X-Vhost-ID
WFE
X-SayCDN-TTL
X-WR-MODIFICATION
X-Amz-Meta-Cb-Modifiedtime
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
Thinkindot-Control
HOST-SERVICE
DB-Nickname
X-Xhr-Current-Location
X-Theme
Content-ID
X-RequesterIP
X-Expose-Site
X-Expose-Took
X-Matched-Rule
X-Expose-Hostname
X-ESI
X-Expose-Generated
X-FG-RequestId
X-Bypass-Ssl-Transform
Cleartype
X-COUNTRY-CODE
X-LOCATION
X-Cache-Detail
Cache-Status
Brandcast-Brand-Id
Brandcast-Load-Balancer
X-ESI-Enable
Server-Optimized-By
X-Upstream-Backend
X-VC-Enabled
X-APP
CpuTime
NodeId
X-Ghost-Cache-Status
X-Highwire-Sitecode
X-Batcache
EXT-CACHEEXPIRE
Tempo
Rt-Proxy-Cache
DeleGate-Ver
X-UA
X-Venda-Hitid
X-AUSERNAME
Web-Server
X-Client-Ip
X-Geo
X-Request-Processing-Time
X-Request-Received
X-Pj-Cache-Time
X-DeliveryServer
X-OpenCart-Lightning
X-SL-Notranslate
Orgin-Server
X-EdgeConnect-MidMile-RTT
X-AREQUESTID
X-ASEN
X-FireWall-Protection
X-Application
MwpReleaseVersion
DrivedBy
X-SilverStripe-Cache
X-Cache-Level
X-Cache-Why
X-EdgeConnect-Origin-MEX-Latency
X-Pressidium-NinukisWP-Ver
X-ORACLE-DMS-RID
Apple-Itunes-App
X-Fedora-School-Id
X-FastCGI-Cache
X-HASH
X-Device-Class
Vacache
SB-Site-Device
SB-Cache-Remaining
X-Ants-Machine-Id
X-Ants-Host
X-RateLimit-Remaining
Expiries
SB-Cache-Life
Referrer-Policy
X-WHOIS-Cached
Be
X-Varnish-Cache-Control
X-DPWN-IS-SECURE
CD2
X-Content-Type
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Pj-Cache-Flags
X-ProcessESI
X-ETag
X-LS-DEBUG
X-SL-Norewrite
X-UUID
X-Purge-Level
X-OPNET-Transaction-Trace
X-RemovedCookies
X-Cache-Me-Harder
X-Runtime-Memory
SBMCLOUD
SS
X-SERVER-ID
MtcHosted
SERVER-IP