Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Connection
Set-Cookie
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Accept-Ranges
Link
ETag
X-Content-Type-Options
P3P
X-Frame-Options
X-XSS-Protection
X-Pingback
X-Cache
X-AspNet-Version
Content-Language
Age
CF-RAY
X-UA-Compatible
Strict-Transport-Security
Via
X-Adblock-Key
Access-Control-Allow-Origin
X-Varnish
X-Language
X-Template
X-Check
X-Buckets
X-Generator
X-Cacheable
X-Drupal-Cache
Content-Location
P3p
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Request-Id
X-Powered-By-Plesk
X-Type
MS-Author-Via
X-Pass-Why
X-Cache-Group
X-Runtime
WP-Super-Cache
X-Cache-Hits
X-Powered-CMS
Status
X-Permitted-Cross-Domain-Policies
Host-Header
X-Download-Options
Ngpass-Ngall
X-ShopId
X-Alternate-Cache-Key
X-ShardId
X-Dc
X-Xss-Protection
Access-Control-Allow-Credentials
X-UA-Device
Access-Control-Allow-Headers
Content-Security-Policy
Keep-Alive
X-Iinfo
X-Request-ID
X-Via
Access-Control-Allow-Methods
X-Tumblr-Pixel-0
X-Tumblr-User
X-Tumblr-Pixel
X-Mod-Pagespeed
X-Logged-In
X-Tumblr-Pixel-1
X-Served-By
X-Pad
X-Backend
X-Contextid
X-Tumblr-Pixel-2
Upgrade
X-ServedBy
X-PC-Key
X-PC-Hit
X-Host
X-CDN
X-Cache-Status
Powered-By
X-Server
Content-Encoding
X-Cache-Hit
X-PC-AppVer
X-PC-Date
X-PC-Host
X-Tumblr-Pixel-3
X-Port
X-Timer
X-Robots-Tag
X-Accel-Version
X-Cache-Lookup
X-Varnish-Cache
X-Cnection
X-Rack-Cache
X-Amz-Cf-Id
X-Server-Powered-By
X-Request-Country
SPRequestGuid
MicrosoftSharePointTeamServices
X-SharePointHealthScore
MicrosoftOfficeWebServer
Alt-Svc
X-Safe-Firewall
X-Turbo-Charged-By
X-Page-Speed
X-MS-InvokeApp
CF-Cache-Status
X-Content-Powered-By
X-AH-Environment
X-XRDS-Location
Rating
X-Node
X-Tumblr-Content-Rating
X-Content-Digest
X-Cache-Enabled
X-Tumblr-Pixel-4
X-GitHub-Request-Id
Public-Key-Pins
X-FullPageCaching
X-PhApp
Content-Security-Policy-Report-Only
Request-Id
Timing-Allow-Origin
X-Webserver
X-Ua-Compatible
X-INKT-URI
X-INKT-SITE
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
Composed-By
SPIisLatency
SPRequestDuration
X-Proxy-Cache
Served-By
X-W-DC
X-Firenze-Processing-Times
Cf-Railgun
Permitted-Cross-Domain-Policies
X-HeyJason
X-Amz-Id-2
X-Amz-Request-Id
Liferay-Portal
X-SERVER
X-Swift-CacheTime
X-Swift-SaveTime
X-Spip-Cache
X-Styx-Version
X-Styx-Req-Id
Access-Control-Expose-Headers
X-Pantheon-Styx-Hostname
Surrogate-Key-Raw
X-Pantheon-Endpoint
X-Hyper-Cache
X-Drupal-Dynamic-Cache
Xkey
EagleId
Access-Control-Max-Age
X-Nginx-Cache-Status
Charset
Surrogate-Key
X-Content-Security-Policy
Grace
X-Server-Name
X-CDN-Pop
X-CDN-Pop-IP
X-Tumblr-Pixel-5
X-Dw-Request-Base-Id
Content-Script-Type
Access-Control-Allow-Method
Content-MD5
X-Hits
Content-Style-Type
X-FW-Hash
X-FB-Debug
X-XN-XNHTML
X-XN-Trace-Token
X-FW-Serve
X-FW-Type
X-FW-Static
X-Device
Public-Key-Pins-Report-Only
X-CF-Powered-By
X-LJ-Flow-ID
X-Clacks-Overhead
X-AWS-Id
X-VWS-Id
X-Backend-Server
X-VCache
X-User-Agent
X-Fastly-Request-ID
Refresh
X-Tumblr-Adult-Blog
X-DDC-Arch-Trace
X-Cache-Config
X-Jimdo-Instance
X-Jimdo-Wid
X-LiteSpeed-Cache
X-TNCMS
X-Loop
Real-Hostname
X-Cache-Server
X-Age
Fastly-Debug-Digest
X-Cache-Result
X-ServerName
X-Cloud-Trace-Context
Edge-Control
X-Generated-By
X-Umbraco-Version
X-Tumblr-Pixel-6
X-MiniProfiler-Ids
X-Cached-By
Surrogate-Control
WZWS-RAY
X-Powered-By-360WZB
X-URL
X-Px
X-Cached
X-DynaTrace-JS-Agent
NS-RTIMER-COMPOSITE
X-Outils-CS
Cartoon
Fpc-Cache-Id
X-CMS-Version
X-Hostname
PageSpeed
X-DynaTrace
X-Newrelic-App-Data
X-Whom
TCN
X-WebKit-CSP
X-Servedby
X-Url
Imagetoolbar
X-FORWARDED-FOR
X-Handled-By
X-BC-Stapler
DynaTrace
Response
Product
ServedBy
X-From
X-TTL
Front-End-Https
Rt-Fastcgi-Cache
X-Content-Options
X-Middleton-Display
X-Sol
X-Middleton-Response
Display
X-Recruiting
X-AspNetWebPages-Version
Edge-Control-Message
X-Varnish-Cache-Hits
X-Forwarded-For
X-Msg-2-Log
X-Country-Code
Origin
Access-Control-Request-Method
X-Do-Not-Hack
X-Matrix-Server
X-Matrix-Proxy
X-NetCat-Version
X-EC-Security-Audit
X-Engine
Fhost
X-Original-Request
X-Actual-URL
X-Returned-From-DLL
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-Passed-To
X-Varnish-Beresp-Ttl
X-Returned-From
X-Passed-To-DLL
X-Micro-Cache
X-Hosted-By
X-Returned-From-PostProcessResponse
Server-Info
X-Passed-To-BeforeDispatch
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Stale
Referrer-Policy
Akamai-IP
X-Content-Encoded-By
IBM-Web2-Location
X-Cache-Info
X-LiteSpeed-Cache-Control
X-Platform
X-App-Hosting
Alternate-Protocol
Generator
Page-Completion-Status
X-Cache-Rule
X-UD-Method
X-I
X-Director
X-Magnolia-Registration
X-Track
Content-Disposition
X-Varnish-TTL
X-S
X-Varnish-Backend
X-Xrds-Location
Powered-By-ChinaCache
X-Origin
X-SRCache-Store-Status
X-Duration
X-Varnish-Host
X-SRCache-Fetch-Status
X-Firenze-Processing-Time
X-Location-Id
Surrogate-Keys
X-Abuse
X-Art-Request-Id
X-Response-Time
X-ApacheServer
X-PERF
Ag-Send-Time
X-Version
Ag-Execution-Time
Ag-Server-Time
X-Dispatcher
X-Cache-Age
X-I-Sp
X-CacheServer
X-BS
Host
X-Expires-Orig
X-Gamma-Serve
Magicmarker
X-Varnish-Cacheable
Powered
Content-Encoding-Handler
X-DNS-Prefetch-Control
X-Daa-Tunnel
X-Microcachable
X-ATG-Version
MIME-Version
X-Goog-Hash
X-RESOURCE
X-URLSCHEME
X-SDS
X-Last-Modified
X-Vtex-Processed-At
X-Request-Time
USPLoggingUUID
X-Vtex-Remote-Cache
X-Vtex-Processado-Em:
X-VTEX-Janus-Router-Backend-App
X-Powered-By-VTEX-Janus-ApiCache
X-Powered-By-VTEX-Janus-Edge
No
ServerName
X-VTEX-Cache-Status-Janus-Edge
X-VTEX-Cache-Status-Janus-ApiCache
X-Cache-TTL
X-HOST
X-B-Cache
Lsrequestid
Proxy-Agent
X-Varnish-RemainingLife
X-Varnish-RemainingTTL
X-Varnish-ObjectSource
X-Varnish-GracePeriod
X-Varnish-Seen-By
X-Varnish-Age
X-Server-ID
X-Storage
X-Cache-Debug
X-Zen-Fury
X-Device-Type
X-Fastcgi-Cache
X-Microcache-Status
X-Translation
X-Debug
X-Rocket-Nginx-Bypass
X-Upstream
X-Cache-Operation
X-Developer
X-Route-Server
X-DefendeR-Runtime
X-DefendeR-Status
X-Instart-Request-ID
X-OneAgent-JS-Injection
Req-Id
X-Cache-Lifetime
ServerID
X-Revision
X-Source
Node
X-NoCache
Proxy-Connection
X-Server-Id
Fastcgi-Cache
SN
X-ServerID
X-PwB-Node
Arr-Disable-Session-Affinity
Version
X-Cf-Powered-By
X-CJ-Soft
X-Client-IP
X-Cache-Tags
X-Cache-Expires
X-AOL-HN
PICS-Label
Buuteeq-Source
X-N
Content-Security-Policy-Rerport-Only
Location
X-SV-Expires
X-FW
X-SV-Pid
X-SV-FromDBCache
X-SV-CacheTags
X-SV-Duration
RTSS
X-Frontend
X-SV-Edge
X-SV-Nginx-Duration
X-SV-CreatedAt
X-Cache-Control-Orig
X-Front
X-Geo-IP
X-Nbs
Last-Published
X-Amz-Version-Id
X-Grace
Content-Hash
X-UPSTREAM
X-WEBSERVER
X-Drectory-Script
X-Vcap-Request-Id
X-Varnish-Hits
X-Varnish-HitMiss
X-Supported-By
X-Cookie-Domain
Webluker-Edge
X-Correlation-Id
X-Platform-Processor
X-Platform-Router
X-Varnish-Count
Ufe-Result
Backend
X-Kinsta-Cache
X-Speed-Cache-Key
X-Speed-Cache
X-Content-Age
Cache
X-Cache-Key
Content-Transfer-Encoding
Qs-Cache
X-Dispatch
X-Page-Cache
Cache-Key
X-ACMCache
HCVer
HAVer
X-LB-Node
Pics-Label
X-Mobilized-By
S
X-Geo-IPV
X-LB
AMF-Ver
X-Geo-IP-Metro
X-Geo-IP-Region
X-Geo-IP-Country
X-Edge-Location
Srv
X-B2f-Cache-Load
X-Akamai-Device-Characteristics
W
X-Time
X-Hypernode
X-Akamai-Device-Model
X-Application-Context
NetMindSessionID
X-Purge-URL
X-Server-Upstream
X-HOSTNAME
Warning
SEOMOZ
X-Real-Server
X-SE-Debug
MJ12bot
X-Platform-Cache
Accept-Charset
X-Nginx-Host
X-Config-Blacklist-Version
X-Blog
X-Yadis-Location
Filter-Revision
Retry-After
X-Varnish-Hostname
Eomportal-Instance
Cached
X-ClientSide-Caching
SSPAppContext
Cm-Server
X-Orig-Vary
Mobiquo-Is-Login
X-Cocoon-Version
WSR-Cache
X-Trace
Nodo
X-CDN-Node
X-CDN-Cache-Status
X-Mobile-URL
X-Processing-Time
X-Session-Reinit
X-WebServer
X-NginX-Node
X-AbeBooks-Version
X-NginX-Upstream-Addr
X-NginX-Upstream-Response-Time
Author
X-NginX-Upstream-Status
X-NB-Cached-Page
X-Purge-Host
X-Edge-IP
X-GeoIP-Country-Name
Rewriter
X-GeoIP-Country-Code
X-StackifyID
X-Varnish-Server
X-PF-Uncompressing
A
Accept-Encoding
X-Varnish-IP
X-Yottaa-Optimizations
X-SSL-Protocol
X-Yottaa-Metrics
X-SSL-Cipher
X-Ttl
X-F-Cache
X-CDN-Forward
X-Garden-Version
X-Cache-Control
X-BKSrc
NODE
X-Sys-Req-ID
Front
X-Processed-By
X-NFE
X-Connection-Hash
X-Twitter-Response-Tags
X-Nhost
X-Transaction
X-WR-Flags
A-Powered-By
X-Dns-Prefetch-Control
X-Nurl
X-Cache-Doesi
SRV
X-Hiawatha-Cache
Nitro-Cache
X-Directory-Script
X-Discourse-Route
X-Unique-ID
Ngpass-Vcall
Host-Service
X-Adobe-Content
X-Signature
X-Adobe-Loc
X-AOL-SNH
CC-CACHE
P-LB
P-WS
S-Cnection
X-Vhost
X-BackendServer
X-Sucuri-ID
X-Amz-Storage-Class
X-Browser
X-Framework
X-IIJ-Cache
Frame-Options
X-Machine-Name
X-Empowered-By
X-Pagename
Ibf5scheme
X-SmartBan-URL
X-SmartBan-Host
X-Cache-PageType
X-Hit-Cache
Ibm-Web2-Location
Allow
X-Cache-Only-Varnish
COMMERCE-SERVER-SOFTWARE
Pool-Info
X-Cache-Fix
IISExport
X-Resolver-IP
X-Key
X-Highwire-SessionId
X-Vary-Options
X-Highwire-RequestId
X-Magento-Tags
Backend-Timing
X-Avvio-Cms-Cacheload
X-HP-Trace-ID
X-IsCacheURL
NnCoection
Machine
Section-Io-Id
Cteonnt-Length
X-Analytics
X-LW-Web-Server
X-HP-Trace-Project
Beyond-Iis
Thanks
X-Varnish-Ttl
X-NginX-Cache
X-ID
CacheControlHeader
X-Litespeed-Cache-Control
X-TTFB
X-Prefetched
NLCacheNote
X-SmugMug-Hiring
X-Source-ID
BALANCEDTO
X-SmugMug-Values
X-TTFB-L
X-Cache-Source
X-EDGECONNECT-GUID-DEBUG
Myheader
X-ORACLE-DMS-ECID
X-Jphone-Copyright
X-Config-By
X-GeoIP
SVR
X-Worker
CT
Smug-CDN
X-Force
X-Grid-Server
X-RiS-UFDI
X-PRAM
X-AEM
X-Cache-Provider
X-Env
WWW-Authenticate
X-WA-Info
X-We-Are-Hiring
X-Id
X-Sucuri-Cache
X-NginX-Server
X-EPiphany-Vid
X-Client-Vid
X-Webcelerate
X-Client-Image-Vid
Cmsid
Cmstype
X-Optimization
X-V
X-Symfony-Cache
Keywords
MC
Mime-Version
MW-Webserver
Server-Name
X-Unbounce-VisitorID
X-HydroSheep
X-Unbounce-Variant
X-Cache-Engine
X-Server-Instance
X-Balanceador
Resin-Trace
X-Unbounce-PageId
X-Goog-Stored-Content-Encoding
X-Plat-Be-Ip
X-Plat
X-Flow-Powered
X-ARC
X-PG
X-LB-Server
X-Goog-Stored-Content-Length
X-Goog-Generation
X-Goog-Metageneration
X-Plat-Va-Ip
X-Goog-Storage-Class
Real-Server
X-Smartcache-Keys
X-Real-IP
X-AWS
X-WP
X-HTML-Minification-Powered-By
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-App-Server
X-Smartcache-Timeout
Cneonction
X-Amz-Meta-S3cmd-Attrs
X-GUploader-UploadID
X-Varnish-Debug-TTL
Content-Server
X-Varnish-Debug-Age
X-Frames-Options
X-ServerIndex
Head
X-Restarts
X-HW
From
Id
XDomainRequestAllowed
X-Detected-Device
X-SRV
X-App
ScoreTracker
X-Nginx-Cache
X-Turpentine-Esi
X-Provisioner-Version
X-App-Status
Fastly-Backend-Name
X-Server-IP
X-Nginx
X-Cluster-Node
RN-Server
X-Domain-Checked
X-REDIRECTSERVER
X-RDP
X-Rebelmouse-Cache-Control
X-CB-Server
X-Cache-On
X-Rebelmouse-Surrogate-Control
X-Span
Prxy
M
X-MrHost
X-Amz-Id-1
X-Domino-CacheValidationWithETagResult
X-Captured
X-Response
X-Lifetime
X-Webstats-RespID
X-Render-Time
Sophnep-Edge-FX
X-FIRSTBase
X-GSL-Server
X-Varnish-Esi-Method
X-Varnish-Esi-Access
Cluster-ID
X-Varnish-Set-Cookie
X-JG-Page-Cache
Set-Cookie2
Paypal-Debug-Id
VAR-Cache
X-A
X-Varnish-Store
X-Varnish-Currency
Description
Ec
X-Desc
Bios
AsisCache
N365rili
X-Turpentine-Cache
X-Actindo-RS
Hash
Rel
Xc
Web
X-This-Proto
X-Domino-CacheValidationWithETagReason
X-KoobooCMS-Version
Hamster
X-Custom-Header
X-Cache-CFC
X-DTC
Sid
X-Platform-Server
X-Server-Response-Time
X-Qnm-Cache
Cache-Rule
Imx-Cookies-Used
WFE
CLMOB
X-Server-By
OT-RequestId
X-Atraveo-Expires
X-Atraveo-ETag
X-Distributor
X-Atraveo-From-Varnish-Cache
X-Rack-CORS
X-Airee-Node
Identity
NS-VaryByCustom-Key
X-Accel-Expires
INCOMING-TIME
NtCoent-Length
Actual-Object-TTL
X-DealerOn
X-Atraveo-Cache-Control
X-Atraveo-Zone
X-Atraveo-Varnish-Server-Id
X-HITS
WP-AdvCache-MemCached
X-Backend-Name
X-Atraveo-TTL
X-Srv
X-Dynatrace
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
X-Flex-Evstart
X-Flex-Evend
X-Varnish-Max-Age
Language
X-Generated
D
X-PBY
Backend-Node
X-Flex-Lastmod
X-Flex-Lang
X-Flex-Tags
Pool
ServerSignature
Www.Aujourdhui.Com
X-Varnish-Action
X-Server-Start-Time
X-Flex-Community
X-Enhanced-By
If-Modified-Since
X-MSEdge-Ref
X-Oracle-DMS-ECID
X-SV
ServerTokens
X-Forwarded-Proto
X-7d-Trace-Id
X-7d-Instance-Id
X-Appmachine-Environment
X-Hcom-Styx-Info
X-Pressidium-NinukisWP-Ver
X-OpenCart-Lightning
X-Forwarded-Host
X-Cache-Handler
X-Cache-Level
X-Tile-Url
VServer
X-Trace-Id
X-RealServer
X-MAT-GEO
Accept-Language
X-B
X-ProxyInstancename
X-Upstream-Backend
X-Flex-Tag
X-Max-Age
X-Cjtype
X-WR-MODIFICATION
X-Catalyst
Pv
X-Magento-Action
X-Jcms-Ajax-Id
Worker
Logging-CorrelationId
X-Dev
X-Hrouter
X-Hstore
Fw-Via
X-Cms-Mode
X-Runtime-Affili
X-AccessDev
X-Site:
Cpu
X-ACLR-Version
X-Varnish-Cache-Local
X-SilverStripe-Cache
IsMobile
X-Cache-Action
Note
X-Nitra-Side
X-Cache-Set
X-Is-Mobile
Proxy-Cache
X-VC-TTL
Fw-Cache-Status
Device-Type
X-App-Runtime
X-Apm-Telemetry-Syncmark
X-SDE-Name
X-Origin-Id
Noq
IM-Version
Il-Cl
X-Ob-Mode
Ram
CmsCacheEngine
NZSpeedy
Noq:
Provider
Server-Id
X-ManagedFusion-Rewriter-Version
X-COUNTRY-CODE
Ctx
X-Cache-Keep
X-CSRF-TOKEN
X-CacheResult
X-Cache-TTL-Remaining
Server-Ip
X-Artvisual-Server
X-Rewritten-By
Disablevcache
X-Wikidot-Backend
Ram:
X-Wikidot-Static-Cache
X-Esi
Cpu:
Nginx-Cache
X-Varnish-URL
X-Varnish-Backend-Healthy
Servername
X-WorkerInstancename
X-Cache-Node
X-Cache-Me-Harder
X-Hosting
X-EC-Lua
X-Varnish-Error-Restart
RATING
X-Seschat-URL
MSSmartTagsPreventParsing
Dispatcher
Content-Instance
MSThemeCompatible
X-Author
X-Fstrz
X-Request-Processing-Time
X-Request-Received
X-CACHE-TTL
Be
X-SeschatDID
Cleartype
X-UUID
SS
X-HP-CAM-COLOR
X-Pagely-Cache
X-WHOIS-Cached
X-MCF-ID
X-Backend-TTL
X-Layout
RequestId
X-Phpwcms-Page-Processed-In
X-SeschatTemplateID
X-SeschatRedID
X-Meta-Imagetoolbar
X-VARITI-CCR
X-Phpwcms-Release
X-Vhost-ID
X-SeschatLayout
X-Pubstack
HOST-SERVICE
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
DrivedBy
Content-Generator
VANITY-HOST
B-Powered-By
Thinkindot-Control
BKREF
X-Matched-Rule
X-OCTOPOD
X-PoweredBy
X-Ocache
X-RequesterIP
X-Proxy-Cache-Key
X-RSS-CACHE-STATUS
X-Src-Webcache
X-Secret
Hosted-By
X-Info
X-HostName
X-Unique-Id
X-Server-Addr
X-Meta-MSThemeCompatible
X-DEBUG
X-4ormat-Cacheable
X-FFX-B
X-Proto
WSCLoggingUUID
X-APP
X-FCMS-Cache
X-ESI-Enable
X-Built-By
X-Meta-MSSmartTagsPreventParsing
X-T3CacheInfo
X-Depends
X-Invoke-Duration
X-NewRelic-App-Data
X-Serendipity-InterfaceLangSource
X-DataDome
X-Company
Svr
X-Box
X-Cache-Extended
X-Serendipity-InterfaceLang
X-PF-CACHE-FAILED
Cache-Control:
X-DSMX-Render-MS
X-Akamai-Edgescape
X-VC-Enabled
X-DSMX-Rewrite-MS
Debug-Status
Content
X-FreeTag-Count
X-Environment
RouteID
X-OPNET-Transaction-Trace
Response-Time
X-Old-Content-Length
VC-NoCache
X-Cache-2
XDisk
X-WebNode
X-Status
X-TB-M
X-RAMCache
X-Route
X-Nginx-Request-Time
X-Server-Generated
X-Server-Instance-Name
Session-Id
X-Content-Security-Policy-Report-Only
X-Distributed-By
X-Fedora-School-Id
X-GoCache-CacheStatus
X-Healthy
X-Time-Spent
Yoncu-Errno
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Header
X-Ratelimit-Remaining
X-HAProxy
X-Farm-Server
X-Amz-Meta-Cb-Modifiedtime
X-AppServer-Cache-Rule
X-Do-Esi
X-Varnish-Instance
X-Cms-Server
Og
Powerd-By
X-Bcwwwid
X-Cache-ID
X-T3Cache
X-Title
X-T3CacheTags
Tracker
X-Hosts-Backend
X-GRACE
X-B2f-Not-Route
X-Pixelsilk-Version
X-Pixelsilk-Server
X-SID
Device
Content-Cache
X-NewCloud-V-Cache
PServer
X-Stage
ORIGIN
Serverid
X-ACCELERATE
X-FastCGI-Cache
X-Zendesk-Origin-Server
Ttl
X-VCS-Cacheable
RSL-Trace-ID
Lb
X-ITKG-Cache-Tags
X-Frame-Option
X-Accel-Cache-Control
ReqUrl
X-Akamai-Transformed
X-VCS-Cache-Server
X-E
Origin-Server
MachineName
X-Batcache
X-T
X-VCS-Billing
X-UseReverse-Proxy
Expire
X-Router
X-Provided-By
X-VCS-Ttl
X-Router-Backend
X-VCS-Hit
X-VCS-Nrhit
X-Site-Name
X-VCS-Status
X-Highwire-Sitecode
X-Pageid
X-DDM-SERVER
X-Webapp
X-SuperCache
X-DDM-SERVER-UPDATED
X-VCS-Host
X-IP-Address
X-VCS-Url
X-Front-Cache
X-Cache-Via
X-SP-TE
X-Ruxit-JS-Agent
X-Runtime-Memory
X-Content-Parsed-By
X-ETag
Expiries
HostName
Httpd-Identifier
X-Venda-Hitid
Aurora-Node
X-UltraCart-Server-Round-Trip
X-UltraCart-Inject-Critical-Path-CSS
X-IP
X-LW-T
X-Fpc
X-Powered-By-Home.Pl
X-Hit
X-UltraCart-Critical-Path-CSS-Key
X-UltraCart-Critical-Path-CSS-Injected
X-Powered-By-Server
X-Cache-Backend
X-Cache-Device-Type
CD2
AGI-Request-ID
X-UA
X-SL-Notranslate
Debug-Cache-Control
Debug-Expires
X-AG-MIPS
X-ASAP-Age
MwpReleaseVersion
X-SL-Norewrite
X-SERVER-ID
X-Goog-Meta-Policy
X-Clara-ASAP
X-ORACLE-DMS-RID
X-Goog-Meta-Replace
X-Instance-Name
X-Page
X-ASAP-Cache
X-Nginx-Page-Cache
LX-Version-Package
LX-Version
X-Sid
X-RemovedCookies
X-ProcessESI
X-PHP-Response-Code
X-TempoPesquisa
AC-ELC
QC-Key
QC-Hit
Powered-By-VeryCDN
X-LS-DEBUG
X-Dynamic
Hostname
E-Tag
CommunityServer
Tempo
X-Brought-To-You-By
X-DeliveryServer
X-Delivered-By
X-Client-Ip
QC-Time
Webserver
LX-Site
LX-Server-GetCache-Id
LX-MachineName
LX-Static
LX-Tipo-Container
LX-Url-Skin-Container
LX-Url-Photo-Container
LX-Type
LX-Host-Api
LX-Host
X-Rack-Cors
X-Old-Varnish
X-AISO-Server
Kanooh-Host
X-SP-PR
LX-Cliente
LX-Ambiente
X-SP-AP
X-Timing
X-Built-With
At-Isb
"
X-Time-Microsecs
At-Shoptype
Atp-Isdpp
Brandcast-Load-Balancer
Brandcast-Brand-Id
X-Fe
X-ClusterID
X-Forwarded-Server
X-Clx-Request
X-MSU-SOURCE
X-VG-WebCache
X-AppServer-Status
Progma
Cache-Status
ClientIP
X-Dw-Trace-Id
X-Node-Name
X-Ghost-Cache-Status
X-Member
X-Bypass-Ssl-Transform
Served-From
X-LOCATION
X-CPU-Time
Gzip
F5-IpCliente
Kp-EeAlive
P
X-Cache-Detail
Url-Hash
User-Cache-Control
Requested-Host
X-Your-GrandPa-Would-Wait
X-Would-Your-GrandPa-Wait
Fpc-Expire
Pw-Value
X-PageType
X-BeResp-Ttl
X-TTL-Age
X-Me
Lookup-Cache-Hit
Apache
ServerIP
X-Beatles-Hits
X-Does-He-Have-Time
X-DEBUG-TTL
Dynatrace
X-Diehard
E-TAG
X-Not-Cacheable
Max-Age
TP-Cache
Copyright
TP-L2-Cache
X-NGINX-Cache
X-NewsFlow-Sitename
X-Diehard-Blocks-Removed
X-Diehard-Blocks-Added
X-Diehard-Tags
X-Dynamic-Cache
X-NewsFlow-DoCache
X-Faeria
X-Compressed-By
X-FG-RequestId
X-Content-Type
X-Cluster
X-DB-Content-Length
X-DN-Cache-Control
X-Gyrobase-Publication
X-DPWN-IS-SECURE
X-Checkout
X-CCM
CpuTime
Cdate
Host-Name
Ozcache
WWW
PowerCDN
X-HA
X-Hash
X-ProcessTime
X-Powered-By-Anquanbao
X-RequestId
X-Ser
X-Varnish-Cache-Control
X-Transaction-Id
X-Pj-Cache-Time
X-Pj-Cache-Status
X-Original-Host
X-Name
X-Pj-Cache-Expires
X-Pj-Cache-Flags
X-Pj-Cache-Key
X-Pj-Cache-Gzip
X-Search-Id
X-Rq
X-EZPublish-InstallationID
X-Expose-Took
X-EZPublish-NodeID
X-Nginx-VM-RT
MageStack-Area
X-Distil-CS
X-Expose-Site
X-Expose-Hostname
REFRESH
X-Gannett-Site-Version
X-Apache2-RT-MicroSec
X-Cache-Time
X-Expose-Generated
X-ESI
MageStack-Cache
MageStack-Cache-Hits
MageStack-Web-Node
MageStack-Tag
SiteName
X-Device-Group
X-Pb-Mii
X-Mobile
MageStack-PageSpeed
MageStack-Loadbalancer
MageStack-Cache-Status
MageStack-Cache-Lifetime
MageStack-Cache-Warning
MageStack-Cacheable
MageStack-Debug
MageStack-Config
X-VERSION