Threat Level: green Handler on Duty: Russell Eubanks

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
P3P
X-Frame-Options
X-XSS-Protection
X-Pingback
X-AspNet-Version
X-Cache
Content-Language
CF-RAY
Age
X-UA-Compatible
Strict-Transport-Security
Via
X-Adblock-Key
Access-Control-Allow-Origin
X-Varnish
X-Language
X-Check
X-Template
X-Buckets
X-Generator
X-Cacheable
Content-Location
X-Drupal-Cache
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Powered-By-Plesk
P3p
X-Type
X-Pass-Why
X-Cache-Group
MS-Author-Via
X-Request-Id
X-Runtime
WP-Super-Cache
X-Cache-Hits
X-Powered-CMS
Status
X-Permitted-Cross-Domain-Policies
Host-Header
X-Download-Options
Ngpass-Ngall
X-Request-ID
X-UA-Device
X-ShopId
X-Dc
X-ShardId
X-Alternate-Cache-Key
Access-Control-Allow-Credentials
Keep-Alive
Content-Security-Policy
Access-Control-Allow-Headers
X-Iinfo
X-Via
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
Access-Control-Allow-Methods
X-Tumblr-Pixel-1
X-Mod-Pagespeed
X-Logged-In
X-Served-By
X-Backend
X-Pad
X-Tumblr-Pixel-2
X-Contextid
X-ServedBy
X-PC-Key
X-PC-Hit
Upgrade
X-Xss-Protection
X-Cache-Status
Powered-By
X-CDN
X-Host
X-Server
Content-Encoding
X-Cache-Hit
X-PC-AppVer
X-Tumblr-Pixel-3
X-PC-Host
X-PC-Date
X-Port
X-Timer
X-Robots-Tag
X-Accel-Version
X-Cache-Lookup
X-Varnish-Cache
X-Server-Powered-By
X-Rack-Cache
X-Cnection
X-Amz-Cf-Id
X-Request-Country
X-Safe-Firewall
MicrosoftSharePointTeamServices
SPRequestGuid
X-SharePointHealthScore
MicrosoftOfficeWebServer
X-Page-Speed
Alt-Svc
X-Turbo-Charged-By
CF-Cache-Status
X-Content-Powered-By
Rating
X-MS-InvokeApp
X-AH-Environment
X-XRDS-Location
X-Tumblr-Content-Rating
X-Content-Digest
X-Node
X-Tumblr-Pixel-4
X-Cache-Enabled
X-GitHub-Request-Id
Public-Key-Pins
X-PhApp
X-FullPageCaching
Content-Security-Policy-Report-Only
Timing-Allow-Origin
X-W-DC
X-INKT-SITE
X-INKT-URI
X-Webserver
X-Ua-Compatible
Request-Id
X-Seen-By
X-Wix-Renderer-Server
Composed-By
X-Wix-Request-Id
SPIisLatency
SPRequestDuration
X-Proxy-Cache
Served-By
X-Firenze-Processing-Times
Permitted-Cross-Domain-Policies
X-HeyJason
X-Amz-Request-Id
X-Amz-Id-2
Cf-Railgun
Liferay-Portal
X-SERVER
X-Swift-CacheTime
X-Swift-SaveTime
EagleId
X-Spip-Cache
X-Hyper-Cache
Access-Control-Expose-Headers
X-Styx-Version
X-Pantheon-Styx-Hostname
X-Pantheon-Endpoint
Surrogate-Key-Raw
X-Styx-Req-Id
Xkey
Access-Control-Max-Age
X-Nginx-Cache-Status
X-Content-Security-Policy
X-Drupal-Dynamic-Cache
X-Tumblr-Pixel-5
X-Server-Name
Charset
Surrogate-Key
X-CDN-Pop-IP
X-CDN-Pop
Grace
Content-MD5
Refresh
Content-Script-Type
Access-Control-Allow-Method
X-Dw-Request-Base-Id
Content-Style-Type
X-Device
X-Hits
X-FB-Debug
X-FW-Hash
X-LJ-Flow-ID
X-VWS-Id
X-AWS-Id
X-XN-XNHTML
X-XN-Trace-Token
X-CF-Powered-By
X-FW-Type
X-FW-Static
X-FW-Serve
X-VCache
X-User-Agent
X-Fastly-Request-ID
Public-Key-Pins-Report-Only
X-Tumblr-Adult-Blog
X-Backend-Server
X-Clacks-Overhead
X-Jimdo-Instance
X-Jimdo-Wid
X-DDC-Arch-Trace
X-TNCMS
X-Loop
Real-Hostname
X-Cache-Config
X-LiteSpeed-Cache
X-Age
Fastly-Debug-Digest
X-Cloud-Trace-Context
X-Tumblr-Pixel-6
X-Cache-Server
X-ServerName
Edge-Control
X-Generated-By
X-Umbraco-Version
X-Cache-Result
X-MiniProfiler-Ids
X-Cached-By
X-Hostname
X-Cached
WZWS-RAY
X-Powered-By-360WZB
X-Px
Surrogate-Control
X-DynaTrace-JS-Agent
X-URL
PageSpeed
NS-RTIMER-COMPOSITE
Fpc-Cache-Id
X-Outils-CS
Cartoon
X-CMS-Version
X-Whom
X-Url
X-DynaTrace
TCN
DynaTrace
Response
Product
X-Newrelic-App-Data
X-WebKit-CSP
X-Handled-By
X-Sol
X-Middleton-Display
X-Middleton-Response
Display
X-From
X-Forwarded-For
X-BC-Stapler
Origin
X-AspNetWebPages-Version
Imagetoolbar
Rt-Fastcgi-Cache
Front-End-Https
Edge-Control-Message
ServedBy
X-Msg-2-Log
X-Content-Options
X-Do-Not-Hack
Access-Control-Request-Method
X-Recruiting
X-FORWARDED-FOR
X-Varnish-Cache-Hits
X-Micro-Cache
X-NetCat-Version
Fhost
X-EC-Security-Audit
Akamai-IP
X-Country-Code
X-Content-Encoded-By
Page-Completion-Status
Server-Info
X-TTL
X-Engine
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Returned-From
X-Passed-To-DLL
X-Passed-To
X-Actual-URL
X-Original-Request
X-Returned-From-DLL
X-Returned-From-PostProcessResponse
X-Stale
X-LiteSpeed-Cache-Control
Alternate-Protocol
X-Returned-From-BeforeDispatch
X-Hosted-By
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Servedby
Generator
X-Director
Referrer-Policy
X-App-Hosting
X-UD-Method
X-Matrix-Proxy
X-Matrix-Server
X-Track
X-ApacheServer
X-I
X-PERF
X-Xrds-Location
X-Cache-Rule
X-Varnish-Backend
X-Cache-Info
X-Firenze-Processing-Time
X-I-Sp
Powered
X-Platform
X-Duration
Host
X-BS
X-CacheServer
IBM-Web2-Location
X-Dispatcher
Ag-Send-Time
Ag-Execution-Time
Ag-Server-Time
Magicmarker
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Content-Encoding-Handler
X-Vtex-Processado-Em:
X-Vtex-Processed-At
X-VTEX-Janus-Router-Backend-App
No
X-Daa-Tunnel
X-S
X-Vtex-Remote-Cache
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Cache-Status-Janus-ApiCache
X-VTEX-Cache-Status-Janus-Edge
X-Powered-By-VTEX-Janus-Edge
X-Version
X-Expires-Orig
X-DNS-Prefetch-Control
X-Location-Id
X-Cache-Age
Powered-By-ChinaCache
X-Gamma-Serve
X-B-Cache
Surrogate-Keys
X-SDS
X-Microcachable
X-Varnish-Host
X-Goog-Hash
X-Varnish-TTL
X-Origin
Content-Disposition
X-Last-Modified
ServerName
X-Request-Time
X-Varnish-Cacheable
X-Abuse
X-Magnolia-Registration
X-Response-Time
X-HOST
MIME-Version
X-URLSCHEME
Lsrequestid
X-Varnish-Age
X-RESOURCE
X-Upstream
X-ATG-Version
X-Cache-TTL
X-Cache-Debug
X-Device-Type
X-Art-Request-Id
X-Translation
X-Microcache-Status
Proxy-Agent
X-Storage
X-Developer
X-Server-ID
USPLoggingUUID
X-Varnish-GracePeriod
X-Varnish-Seen-By
X-Rocket-Nginx-Bypass
X-Varnish-RemainingLife
X-Varnish-ObjectSource
X-Varnish-RemainingTTL
Node
Proxy-Connection
X-Revision
X-Route-Server
Arr-Disable-Session-Affinity
X-DefendeR-Runtime
X-Zen-Fury
X-DefendeR-Status
Req-Id
X-Cache-Operation
X-Server-Id
X-Instart-Request-ID
X-Debug
X-ServerID
ServerID
X-Nbs
RTSS
SN
X-OneAgent-JS-Injection
X-Cf-Powered-By
X-Cache-Lifetime
Version
X-Cache-Expires
Cache
X-NoCache
Buuteeq-Source
Fastcgi-Cache
X-Source
Last-Published
X-Front
X-AOL-HN
X-Fastcgi-Cache
X-Amz-Version-Id
Content-Hash
X-Purge-URL
X-PwB-Node
X-Edge-Location
X-Cache-Tags
Content-Security-Policy-Rerport-Only
X-Drectory-Script
X-Ttl
X-FW
X-Vcap-Request-Id
X-WEBSERVER
Webluker-Edge
X-CJ-Soft
X-Grace
X-Client-IP
X-Frontend
Location
X-Correlation-Id
X-Platform-Processor
X-Platform-Router
X-Dispatch
X-Mobilized-By
X-Page-Cache
X-N
Ufe-Result
Cache-Key
X-Cache-Key
Warning
X-Hypernode
X-Geo-IP
X-Cookie-Domain
X-Kinsta-Cache
X-ACMCache
X-LB-Node
PICS-Label
AMF-Ver
Cached
X-SV-Edge
X-Speed-Cache-Key
X-UPSTREAM
X-Speed-Cache
X-SV-Duration
X-SV-CreatedAt
X-SV-CacheTags
X-ClientSide-Caching
X-Purge-Host
X-SV-Expires
X-SV-FromDBCache
X-Cache-Control-Orig
MJ12bot
SEOMOZ
X-SV-Pid
X-SV-Nginx-Duration
X-Edge-IP
X-Geo-IP-Region
X-Varnish-HitMiss
X-B2f-Cache-Load
X-Varnish-Hostname
X-Supported-By
X-Geo-IPV
X-Cache-Doesi
X-Akamai-Device-Characteristics
X-Akamai-Device-Model
X-Varnish-Hits
X-Geo-IP-Country
X-Geo-IP-Metro
X-Application-Context
X-Varnish-Count
Author
Content-Transfer-Encoding
NetMindSessionID
Pics-Label
X-Server-Upstream
X-SE-Debug
S
X-Content-Age
X-Platform-Cache
X-Real-Server
Qs-Cache
X-CDN-Forward
HAVer
HCVer
X-Nurl
X-NFE
X-Config-Blacklist-Version
Srv
Backend
X-Nhost
X-CDN-Cache-Status
Cm-Server
X-LB
Mobiquo-Is-Login
X-Orig-Vary
X-Processing-Time
X-Mobile-URL
X-Varnish-IP
Nodo
Retry-After
WSR-Cache
X-CDN-Node
X-Blog
X-NB-Cached-Page
X-Browser
Rewriter
X-Time
X-NginX-Node
X-GeoIP-Country-Name
X-GeoIP-Country-Code
Filter-Revision
X-NginX-Upstream-Status
X-AbeBooks-Version
X-NginX-Upstream-Response-Time
X-Empowered-By
X-NginX-Upstream-Addr
X-WebServer
X-StackifyID
W
Front
X-Yadis-Location
X-Nginx-Host
X-Sys-Req-ID
X-F-Cache
Eomportal-Instance
X-Dynatrace
X-Garden-Version
X-Session-Reinit
X-Discourse-Route
A-Powered-By
X-Cocoon-Version
Frame-Options
X-SSL-Cipher
X-PF-Uncompressing
X-Machine-Name
X-SSL-Protocol
X-Trace
X-WR-Flags
Thanks
X-Processed-By
X-Cache-Only-Varnish
X-AOL-SNH
X-Unique-ID
Ibf5scheme
Accept-Charset
Nitro-Cache
Accept-Encoding
Section-Io-Id
X-Signature
X-Adobe-Content
X-Magento-Tags
Myheader
X-Adobe-Loc
CT
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Resolver-IP
Ngpass-Vcall
X-Vhost
X-Hiawatha-Cache
X-IIJ-Cache
Host-Service
X-BackendServer
SRV
A
X-Framework
X-Varnish-Server
X-Dns-Prefetch-Control
X-SmartBan-URL
X-EDGECONNECT-GUID-DEBUG
X-V
X-Cache-Engine
X-SmartBan-Host
IISExport
X-Cache-Control
X-Highwire-RequestId
Server-Name
X-Highwire-SessionId
X-ARC
X-Directory-Script
Ibm-Web2-Location
COMMERCE-SERVER-SOFTWARE
X-Cache-Fix
Beyond-Iis
X-Cache-PageType
WWW-Authenticate
X-Sucuri-ID
X-Transaction
MC
X-Twitter-Response-Tags
X-Varnish-Ttl
X-LW-Web-Server
CC-CACHE
S-Cnection
P-WS
X-Nginx-Cache
Allow
X-HydroSheep
Backend-Timing
X-EdgeConnect-Origin-MEX-Latency
X-Connection-Hash
X-EdgeConnect-MidMile-RTT
X-IsCacheURL
P-LB
X-Analytics
BALANCEDTO
X-Grid-Server
X-Hit-Cache
X-RiS-UFDI
X-Pagename
SSPAppContext
X-Jphone-Copyright
NODE
CacheControlHeader
X-Config-By
SVR
X-AEM
X-PRAM
X-ID
X-LB-Server
X-Force
X-ServerIndex
X-GeoIP
X-HTML-Minification-Powered-By
Pool-Info
X-NginX-Cache
X-Key
X-Flow-Powered
Mime-Version
MW-Webserver
X-BKSrc
X-Domain-Checked
X-Restarts
Keywords
X-Provisioner-Version
X-Webcelerate
X-App-Status
X-HP-Trace-Project
X-Symfony-Cache
X-HP-Trace-ID
Cteonnt-Length
X-Balanceador
Resin-Trace
X-HOSTNAME
X-CB-Server
X-Real-IP
X-Avvio-Cms-Cacheload
Real-Server
Content-Server
X-WP
X-Smartcache-Timeout
X-Smartcache-Keys
Cneonction
X-Plat-Va-Ip
X-Plat-Be-Ip
X-Plat
Id
X-Server-Response-Time
X-GUploader-UploadID
Cmstype
Cmsid
X-Atraveo-Zone
X-Atraveo-Varnish-Server-Id
X-Atraveo-Expires
X-Atraveo-ETag
X-Atraveo-Cache-Control
X-Atraveo-From-Varnish-Cache
X-Atraveo-Param-Rm
X-Atraveo-TTL
X-Atraveo-Set-Cookie
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-NginX-Server
X-Platform-Server
X-Client-Image-Vid
X-ORACLE-DMS-ECID
X-Amz-Meta-S3cmd-Attrs
CLMOB
IM-Version
Web
X-Client-Vid
X-Goog-Storage-Class
X-Optimization
X-Goog-Metageneration
X-Goog-Generation
X-Vary-Options
X-EPiphany-Vid
X-HW
X-We-Are-Hiring
X-Id
Head
X-Accel-Expires
X-Env
X-Server-IP
ScoreTracker
From
X-SmugMug-Hiring
Smug-CDN
X-Source-ID
X-Frames-Options
RN-Server
XDomainRequestAllowed
X-SmugMug-Values
X-Prefetched
NnCoection
X-Detected-Device
X-TTFB-L
X-Amz-Storage-Class
X-TTFB
X-Runtime-Affili
X-Cache-Provider
X-Varnish-Debug-TTL
X-Webstats-RespID
X-T3Cache
X-JG-Page-Cache
X-T3CacheInfo
X-Cache-Source
X-Varnish-Debug-Age
X-A
X-T3CacheTags
OT-RequestId
X-FIRSTBase
X-KoobooCMS-Version
X-AWS
Ec
X-GSL-Server
Paypal-Debug-Id
VAR-Cache
Sid
Xc
X-Server-Start-Time
X-Varnish-Cache-Local
NLCacheNote
X-Litespeed-Cache-Control
X-Origin-Id
X-Nitra-Side
Proxy-Cache
Logging-CorrelationId
Il-Cl
X-Environment
X-DSMX-Rewrite-MS
X-PG
X-Cache-CFC
X-Lifetime
X-REDIRECTSERVER
X-MrHost
X-Domino-CacheValidationWithETagResult
X-DSMX-Render-MS
X-Amz-Id-1
X-B2f-Not-Route
X-Domino-CacheValidationWithETagReason
X-This-Proto
X-App-Runtime
Prxy
Machine
X-SV
X-Worker
NZSpeedy
X-Actindo-RS
X-App-Server
X-Desc
X-Rebelmouse-Surrogate-Control
X-RDP
X-Cache-On
Sophnep-Edge-FX
N365rili
X-Upstream-Backend
X-Rebelmouse-Cache-Control
Rel
X-Response
Hash
Description
Cluster-ID
X-DealerOn
X-HITS
X-WA-Info
NtCoent-Length
WP-AdvCache-MemCached
X-Unbounce-PageId
NS-VaryByCustom-Key
ORIGIN
Fastly-Backend-Name
X-Unbounce-VisitorID
X-Nginx
Bios
X-Unbounce-Variant
X-Server-Instance
X-Rack-CORS
X-Sucuri-Cache
Server-Ip
X-RealServer
X-SRV
X-PBY
X-Route
AsisCache
Yoncu-Errno
X-Jcms-Ajax-Id
X-Src-Webcache
Device-Type
MSThemeCompatible
Set-Cookie2
X-Meta-Imagetoolbar
Backend-Node
X-ACLR-Version
Accept-Language
X-OPNET-Transaction-Trace
X-Cache-Action
Fw-Via
X-7d-Trace-Id
Note
Identity
VServer
X-7d-Instance-Id
MSSmartTagsPreventParsing
X-Apm-Telemetry-Syncmark
X-Render-Time
X-SilverStripe-Cache
X-MAT-GEO
X-Meta-MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
X-Oracle-DMS-ECID
X-Span
X-OpenCart-Lightning
D
X-Forwarded-Proto
X-Varnish-Action
X-Forwarded-Host
X-Site:
X-Proto
X-Secret
X-WR-MODIFICATION
X-Magento-Action
X-ProxyInstancename
Svr
X-Hstore
X-Hrouter
X-Server-Addr
X-Captured
Fw-Cache-Status
X-Server-By
CmsCacheEngine
Cache-Rule
RequestId
X-Varnish-Store
X-Custom-Header
X-SDE-Name
X-Is-Mobile
X-Ob-Mode
X-Varnish-Esi-Access
X-Varnish-Esi-Method
X-Varnish-Set-Cookie
X-Varnish-Currency
X-UA
X-Turpentine-Cache
X-DTC
X-Depends
X-Appmachine-Environment
IsMobile
Noq
X-Distributed-By
Cpu
PServer
X-Backend-Name
X-Cluster-Node
X-Turpentine-Esi
Worker
Ram
X-RequestId
X-Dev
X-Cms-Mode
X-AccessDev
Imx-Cookies-Used
X-VC-TTL
X-Distributor
Nginx-Cache
X-Varnish-Error-Restart
X-Varnish-URL
X-WorkerInstancename
X-Cache-Node
X-Varnish-Backend-Healthy
X-ACCELERATE
X-Srv
X-Cache-Keep
X-Cache-TTL-Remaining
X-CacheResult
Actual-Object-TTL
Servername
RATING
Server-Id
X-Wikidot-Backend
X-CSRF-TOKEN
X-COUNTRY-CODE
Noq:
Ram:
X-Cache-Me-Harder
X-EC-Lua
Cpu:
X-Stage
Ctx
X-ManagedFusion-Rewriter-Version
X-Rewritten-By
X-Hosting
X-Wikidot-Static-Cache
Be
M
Og
Powerd-By
Cleartype
Content-Instance
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
Dispatcher
X-Ratelimit-Remaining
X-Varnish-Instance
X-Airee-Node
X-Bcwwwid
X-Phpwcms-Release
X-Tile-Url
ServerSignature
ServerTokens
X-Phpwcms-Page-Processed-In
X-Pagely-Cache
X-MCF-ID
X-Gyrobase-Publication
X-MSEdge-Ref
X-Hosts-Backend
X-HAProxy
PowerCDN
X-Akamai-Edgescape
X-GRACE
X-Cms-Server
Host-Name
X-Header
Content
X-Vhost-ID
Cdate
X-Cache-Set
X-Cache-ID
X-Amz-Meta-Cb-Modifiedtime
X-AppServer-Cache-Rule
X-Do-Esi
X-Farm-Server
Tracker
Device
X-SID
X-Backend-TTL
Content-Cache
X-Author
X-CACHE-TTL
SS
X-WHOIS-Cached
INCOMING-TIME
Expiries
X-OCTOPOD
X-DN-Cache-Control
X-CCM
X-Qnm-Cache
WFE
X-HP-CAM-COLOR
Httpd-Identifier
X-Cache-Backend
X-Page
X-SERVER-ID
X-SL-Norewrite
X-SL-Notranslate
X-Nginx-Page-Cache
X-Instance-Name
X-Cache-Device-Type
X-Goog-Meta-Policy
X-Goog-Meta-Replace
X-Info
X-Catalyst
X-Pj-Cache-Key
X-4ormat-Cacheable
X-Pj-Cache-Flags
X-Pj-Cache-Expires
Served-From
X-Pj-Cache-Status
X-TempDebug
X-Varnish-Cache-Control
X-Pj-Cache-Time
X-Gannett-Site-Version
Disablevcache
X-Cache-Level
X-Pressidium-NinukisWP-Ver
X-Trace-Id
X-APP
X-Cache-Handler
X-B
X-DEBUG
Hamster
HOST-SERVICE
X-NewCloud-V-Cache
X-Pj-Cache-Gzip
X-Content-Security-Policy-Report-Only
X-Distil-CS
Language
X-Healthy
X-GoCache-CacheStatus
MageStack-Area
Www.Aujourdhui.Com
DrivedBy
X-TB-M
X-Cache-2
X-Status
RouteID
X-VC-Enabled
MageStack-Cacheable
MageStack-Cache
MageStack-Cache-Hits
X-RAMCache
X-Old-Content-Length
X-Nginx-Request-Time
X-Rq
MageStack-Debug
X-Enhanced-By
X-WebNode
MageStack-Cache-Status
X-Pixelsilk-Server
MageStack-Cache-Lifetime
X-Server-Instance-Name
X-Server-Generated
X-Fedora-School-Id
VC-NoCache
MageStack-Loadbalancer
X-Invoke-Duration
X-Serendipity-InterfaceLang
X-Serendipity-InterfaceLangSource
X-Time-Spent
X-Hcom-Styx-Info
X-Layout
X-Title
X-PF-CACHE-FAILED
X-Pixelsilk-Version
XDisk
X-NewRelic-App-Data
Cache-Control:
X-FreeTag-Count
MageStack-Config
MageStack-Web-Node
X-Generated
B-Powered-By
X-Cache-Extended
X-Box
AC-ELC
Session-Id
Response-Time
MageStack-PageSpeed
X-Max-Age
X-Mobile
MageStack-Tag
X-Company
X-W3TC-Minify
X-FastCGI-Cache
Serverid
X-Site-Name
X-SuperCache
X-Router-Backend
X-VCS-Status
X-VCS-Nrhit
X-Router
X-VCS-Ttl
X-VCS-Url
X-VCS-Host
X-VCS-Hit
X-UseReverse-Proxy
X-VCS-Billing
X-VCS-Cache-Server
X-VCS-Cacheable
X-T
X-Transaction-Id
X-Cluster
X-Checkout
WWW
X-Content-Type
X-DB-Content-Length
X-Hash
X-HA
X-DPWN-IS-SECURE
Ozcache
CpuTime
X-Flex-Tags
X-Flex-Tag
X-Flex-Lastmod
X-Would-Your-GrandPa-Wait
X-Pb-Mii
X-Varnish-Max-Age
X-Search-Id
X-Name
X-Original-Host
X-Cache-Via
Ttl
RSL-Trace-ID
X-DDM-SERVER
X-DDM-SERVER-UPDATED
X-Pageid
X-IP-Address
X-Front-Cache
Lb
X-ITKG-Cache-Tags
X-Your-GrandPa-Would-Wait
X-ProcessTime
X-Powered-By-Anquanbao
X-Ser
X-VERSION
X-Batcache
X-Accel-Cache-Control
X-Provided-By
Tempo
LX-Static
LX-Site
LX-Server-GetCache-Id
LX-Tipo-Container
LX-Type
LX-Url-Skin-Container
LX-Url-Photo-Container
LX-MachineName
LX-Host-Api
Pw-Value
X-Rack-Cors
Kanooh-Host
LX-Ambiente
LX-Host
LX-Cliente
LX-Version
LX-Version-Package
X-Ruxit-JS-Agent
X-Runtime-Memory
X-ETag
Fpc-Expire
X-Magento-Cache-Control
X-LB-Frontend
X-LB-Backend
X-UltraCart-Server-Round-Trip
X-UltraCart-Inject-Critical-Path-CSS
X-LW-T
X-Fpc
X-Powered-By-Home.Pl
X-Powered-By-Server
X-UltraCart-Critical-Path-CSS-Key
X-UltraCart-Critical-Path-CSS-Injected
X-Old-Varnish
X-AISO-Server
CommunityServer
X-Timing
X-Frame-Option
E-Tag
Hostname
X-Brought-To-You-By
X-Flex-Lang
X-E
X-Akamai-Transformed
MachineName
X-Zendesk-Origin-Server
ReqUrl
X-Highwire-Sitecode
Origin-Server
Expire
X-Client-Ip
X-Delivered-By
Powered-By-VeryCDN
X-TempoPesquisa
QC-Hit
QC-Key
Webserver
QC-Time
X-Sid
X-RemovedCookies
X-Dynamic
X-DeliveryServer
X-LS-DEBUG
X-PHP-Response-Code
X-ProcessESI
X-PoweredBy
X-Webapp
X-ESI-Enable
F5-IpCliente
ClientIP
Cache-Status
Gzip
Kp-EeAlive
X-NewsFlow-Sitename
X-NGINX-Cache
Brandcast-Load-Balancer
Brandcast-Brand-Id
"
X-Time-Microsecs
At-Isb
At-Shoptype
X-Not-Cacheable
Atp-Isdpp
P
X-NewsFlow-DoCache
X-Obr-Rule
X-NID
X-Dynamic-Cache
X-Diehard-Tags
X-Diehard-Blocks-Removed
X-Diehard
X-Diehard-Blocks-Added
X-Faeria
Apache
X-Built-With
Url-Hash
X-Cache-Detail
X-CPU-Time
X-Node-Name
X-LOCATION
E-TAG
X-Fe
X-DEBUG-TTL
X-Does-He-Have-Time
X-DataDome
X-Clx-Request
X-Esi
X-Forwarded-Server
X-ASAP-Cache
X-Static
User-Cache-Control
Copyright
X-Me
Debug-Status
X-VhostID
Requested-Host
Pv
X-MSU-SOURCE
X-Beatles-Hits
X-Server-Node
X-TTL-Age
X-AppServer-Status
Lookup-Cache-Hit
Max-Age
X-ClusterID
ServerIP
X-DOM
X-VG-WebCache
Aurora-Node
TP-L2-Cache
TP-Cache
Progma
X-Clara-ASAP
X-Dw-Trace-Id
X-Fstrz
X-FFX-B
X-BServer
X-Built-By
X-C
X-Pubstack
X-Request-Processing-Time
X-Cacheable-TTL
X-BPool
WSCLoggingUUID
X-Ocache
X-Nginx-VM-RT
X-RequesterIP
X-RSS-CACHE-STATUS
VANITY-HOST
BKREF
X-Request-Received
X-Seschat-URL
X-App
X-BeResp-Ttl
SiteName
X-Cjtype
X-Device-Group
X-Flex-Evend
X-Flex-Community
Pool
MageStack-Cache-Warning
X-SeschatLayout
X-SeschatDID
X-SeschatRedID
X-SeschatTemplateID
X-VARITI-CCR
X-UUID
X-Matched-Rule
X-EZPublish-NodeID
X-Magento-Cache-Debug
X-Bypass-Ssl-Transform
Dynatrace
X-Compressed-By
X-FCMS-Cache
Content-Generator
X-FG-RequestId
Hosted-By
X-Unique-Id
X-Member
X-Ghost-Cache-Status
X-Origin-Cache
X-PM-ID
X-Uid
X-RateLimit-Remaining
If-Modified-Since
Provider
X-Expose-Generated
X-ESI
X-Expose-Hostname
X-Expose-Site
X-EZPublish-InstallationID
X-Expose-Took
X-Cache-Time
X-PageType
Thinkindot-CacheControl
REFRESH
Thinkindot-CacheControl-Type
Thinkindot-Control
X-Artvisual-Server
X-Apache2-RT-MicroSec
X-Flex-Evstart