Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Connection
Set-Cookie
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Accept-Ranges
Link
ETag
X-Content-Type-Options
P3P
X-Frame-Options
X-XSS-Protection
X-Pingback
X-Cache
X-AspNet-Version
Content-Language
Age
CF-RAY
X-UA-Compatible
Strict-Transport-Security
Via
X-Adblock-Key
Access-Control-Allow-Origin
X-Varnish
X-Language
X-Template
X-Check
X-Buckets
X-Generator
X-Cacheable
X-Drupal-Cache
Content-Location
X-AspNetMvc-Version
P3p
X-Hacker
X-Ac
X-Request-Id
X-Powered-By-Plesk
X-Type
X-Cache-Group
X-Pass-Why
MS-Author-Via
X-Runtime
WP-Super-Cache
X-Cache-Hits
X-Powered-CMS
Status
X-Permitted-Cross-Domain-Policies
Host-Header
Ngpass-Ngall
X-Download-Options
X-Alternate-Cache-Key
X-ShardId
X-ShopId
X-Dc
X-UA-Device
Access-Control-Allow-Credentials
Content-Security-Policy
Keep-Alive
Access-Control-Allow-Headers
X-Iinfo
X-Via
Access-Control-Allow-Methods
X-Request-ID
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Mod-Pagespeed
X-Logged-In
X-Tumblr-Pixel-1
X-Served-By
X-Backend
X-Pad
X-Contextid
Upgrade
X-Tumblr-Pixel-2
X-ServedBy
X-PC-Hit
X-PC-Key
X-CDN
X-Cache-Status
Powered-By
X-Server
X-Host
X-Xss-Protection
X-Cache-Hit
Content-Encoding
X-PC-AppVer
X-PC-Date
X-PC-Host
X-Port
X-Tumblr-Pixel-3
X-Timer
X-Robots-Tag
X-Accel-Version
X-Varnish-Cache
X-Cache-Lookup
X-Server-Powered-By
X-Amz-Cf-Id
X-Rack-Cache
X-Cnection
SPRequestGuid
MicrosoftSharePointTeamServices
X-Request-Country
X-SharePointHealthScore
MicrosoftOfficeWebServer
Alt-Svc
X-Turbo-Charged-By
X-Safe-Firewall
CF-Cache-Status
X-Page-Speed
X-MS-InvokeApp
X-Content-Powered-By
X-XRDS-Location
X-AH-Environment
Rating
X-Node
X-Tumblr-Content-Rating
X-Content-Digest
X-Cache-Enabled
X-GitHub-Request-Id
X-Tumblr-Pixel-4
Public-Key-Pins
X-PhApp
X-FullPageCaching
Timing-Allow-Origin
Content-Security-Policy-Report-Only
X-Webserver
X-INKT-SITE
X-INKT-URI
Request-Id
X-Ua-Compatible
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
Composed-By
SPIisLatency
SPRequestDuration
X-Proxy-Cache
Served-By
Cf-Railgun
X-W-DC
Permitted-Cross-Domain-Policies
X-HeyJason
X-Amz-Request-Id
X-Amz-Id-2
X-Firenze-Processing-Times
Liferay-Portal
X-Swift-SaveTime
X-Swift-CacheTime
X-SERVER
EagleId
X-Hyper-Cache
X-Spip-Cache
X-Pantheon-Endpoint
Surrogate-Key-Raw
Access-Control-Expose-Headers
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Styx-Version
X-Drupal-Dynamic-Cache
Xkey
X-Nginx-Cache-Status
Charset
Access-Control-Max-Age
X-Content-Security-Policy
X-Server-Name
Surrogate-Key
X-Tumblr-Pixel-5
Grace
X-CDN-Pop-IP
X-CDN-Pop
Content-Script-Type
X-Hits
Content-Style-Type
X-FW-Hash
Content-MD5
Access-Control-Allow-Method
X-Dw-Request-Base-Id
X-FB-Debug
X-XN-Trace-Token
X-FW-Serve
X-XN-XNHTML
X-FW-Static
X-FW-Type
X-Device
X-VCache
X-CF-Powered-By
Public-Key-Pins-Report-Only
X-Fastly-Request-ID
Refresh
X-Backend-Server
X-User-Agent
X-Clacks-Overhead
X-VWS-Id
X-AWS-Id
X-LJ-Flow-ID
X-Loop
X-TNCMS
Real-Hostname
X-Tumblr-Adult-Blog
X-LiteSpeed-Cache
X-DDC-Arch-Trace
X-Cache-Server
X-Cache-Config
X-Age
X-Jimdo-Instance
X-Jimdo-Wid
Fastly-Debug-Digest
X-ServerName
X-Cache-Result
X-Cloud-Trace-Context
X-Tumblr-Pixel-6
X-Generated-By
X-Umbraco-Version
Edge-Control
X-MiniProfiler-Ids
X-Cached-By
Surrogate-Control
X-Cached
X-Powered-By-360WZB
X-DynaTrace-JS-Agent
WZWS-RAY
Cartoon
X-Px
NS-RTIMER-COMPOSITE
Fpc-Cache-Id
X-DynaTrace
X-Outils-CS
X-Whom
PageSpeed
X-URL
X-Hostname
X-CMS-Version
X-Url
TCN
DynaTrace
X-Newrelic-App-Data
X-WebKit-CSP
Product
X-Servedby
Response
X-BC-Stapler
X-Handled-By
Rt-Fastcgi-Cache
Imagetoolbar
Front-End-Https
X-AspNetWebPages-Version
ServedBy
X-Middleton-Display
Origin
Display
X-Middleton-Response
X-Sol
X-Content-Options
X-Forwarded-For
X-From
X-FORWARDED-FOR
X-Varnish-Cache-Hits
X-TTL
X-Msg-2-Log
Edge-Control-Message
X-Recruiting
Access-Control-Request-Method
X-Do-Not-Hack
X-Micro-Cache
X-NetCat-Version
X-Engine
Akamai-IP
X-Country-Code
Fhost
X-EC-Security-Audit
Server-Info
X-Matrix-Server
X-Matrix-Proxy
X-Passed-To
X-LiteSpeed-Cache-Control
X-Passed-To-DLL
X-Returned-From-DLL
Generator
X-Original-Request
X-Returned-From
X-Actual-URL
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
Referrer-Policy
Page-Completion-Status
X-Returned-From-PostProcessResponse
Alternate-Protocol
X-Stale
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Hosted-By
X-UD-Method
IBM-Web2-Location
X-Cache-Info
X-App-Hosting
X-I
X-Content-Encoded-By
X-Track
X-Expires-Orig
X-Cache-Rule
Surrogate-Keys
X-Varnish-Backend
X-Daa-Tunnel
X-Director
X-PERF
X-ApacheServer
Host
X-I-Sp
X-BS
X-Magnolia-Registration
X-Platform
X-Xrds-Location
X-CacheServer
X-Varnish-Host
X-Art-Request-Id
X-Abuse
Powered-By-ChinaCache
Powered
X-DNS-Prefetch-Control
X-Server-ID
X-Firenze-Processing-Time
X-Microcachable
Content-Encoding-Handler
X-Gamma-Serve
Magicmarker
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Varnish-TTL
X-Location-Id
Ag-Execution-Time
Ag-Send-Time
X-S
X-Dispatcher
Content-Disposition
Ag-Server-Time
X-Varnish-Cacheable
X-Request-Time
X-Duration
X-Response-Time
MIME-Version
X-Goog-Hash
X-Vtex-Processed-At
X-Powered-By-VTEX-Janus-Edge
X-Powered-By-VTEX-Janus-ApiCache
No
X-VTEX-Cache-Status-Janus-ApiCache
X-VTEX-Cache-Status-Janus-Edge
X-Vtex-Remote-Cache
X-Cache-Age
X-VTEX-Janus-Router-Backend-App
X-Vtex-Processado-Em:
X-RESOURCE
X-URLSCHEME
X-Version
ServerName
X-Last-Modified
X-SDS
X-Origin
USPLoggingUUID
X-Cache-TTL
X-Translation
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-Varnish-GracePeriod
Lsrequestid
X-Varnish-RemainingLife
X-Varnish-ObjectSource
X-Device-Type
X-Microcache-Status
X-Varnish-Age
X-Rocket-Nginx-Bypass
X-Developer
X-ATG-Version
X-Cache-Debug
Proxy-Agent
X-HOST
X-B-Cache
X-Cache-Operation
X-Zen-Fury
Fastcgi-Cache
X-Storage
ServerID
Node
SN
X-CJ-Soft
X-Fastcgi-Cache
X-DefendeR-Status
X-DefendeR-Runtime
X-Upstream
X-Debug
X-Route-Server
RTSS
X-ServerID
X-Amz-Version-Id
X-Instart-Request-ID
Req-Id
X-Cache-Lifetime
X-NoCache
X-OneAgent-JS-Injection
X-Cache-Control-Orig
X-Source
X-Vcap-Request-Id
Proxy-Connection
X-Revision
Version
X-Cache-Expires
X-PwB-Node
X-Server-Id
X-Client-IP
Arr-Disable-Session-Affinity
Cache
Buuteeq-Source
X-Front
X-Nbs
X-Cf-Powered-By
X-AOL-HN
X-Cache-Tags
X-SV-Duration
X-SV-Nginx-Duration
Location
X-SV-Edge
X-SV-FromDBCache
PICS-Label
X-SV-CreatedAt
X-SV-CacheTags
X-SV-Expires
Content-Security-Policy-Rerport-Only
X-SV-Pid
Content-Hash
X-FW
X-UPSTREAM
X-Cache-Key
Pics-Label
X-Geo-IP
X-Cookie-Domain
MJ12bot
SEOMOZ
Last-Published
X-Akamai-Device-Model
X-Varnish-HitMiss
X-Varnish-Count
X-Akamai-Device-Characteristics
X-Varnish-Hits
X-Kinsta-Cache
X-N
X-Edge-Location
Backend
X-Purge-URL
X-Frontend
X-Content-Age
X-Nhost
X-Nurl
X-WEBSERVER
X-NFE
X-Drectory-Script
X-Grace
X-Correlation-Id
Ufe-Result
X-CDN-Forward
X-Platform-Processor
Webluker-Edge
X-Platform-Router
Content-Transfer-Encoding
S
HAVer
Filter-Revision
HCVer
X-Page-Cache
X-ACMCache
Cache-Key
X-Nginx-Host
X-Mobile-URL
X-LB-Node
X-Dispatch
X-Cache-Doesi
AMF-Ver
X-Speed-Cache
X-LB
X-Speed-Cache-Key
X-Mobilized-By
X-Geo-IPV
Mobiquo-Is-Login
X-Geo-IP-Region
X-Geo-IP-Metro
X-Geo-IP-Country
X-ClientSide-Caching
Srv
X-Purge-Host
X-Supported-By
X-Edge-IP
Author
X-Application-Context
X-Time
X-B2f-Cache-Load
NetMindSessionID
Retry-After
X-Hypernode
Qs-Cache
W
X-Server-Upstream
Cached
X-Varnish-IP
A-Powered-By
X-HOSTNAME
X-Platform-Cache
X-SE-Debug
Warning
X-Real-Server
X-Yadis-Location
X-Varnish-Hostname
X-BKSrc
X-Config-Blacklist-Version
Accept-Charset
X-Discourse-Route
X-Ttl
X-Orig-Vary
Cm-Server
X-CDN-Cache-Status
WSR-Cache
X-Varnish-Ttl
CC-CACHE
X-CDN-Node
Nodo
SRV
X-AbeBooks-Version
X-WebServer
X-NginX-Upstream-Response-Time
X-Blog
X-Directory-Script
X-GeoIP-Country-Code
X-GeoIP-Country-Name
X-NginX-Upstream-Addr
X-NB-Cached-Page
Ngpass-Vcall
CT
Rewriter
X-Cache-Control
X-NginX-Upstream-Status
X-Processing-Time
X-Empowered-By
X-NginX-Node
X-SSL-Cipher
X-Trace
X-SSL-Protocol
X-IIJ-Cache
X-Yottaa-Metrics
Accept-Encoding
X-StackifyID
X-Yottaa-Optimizations
Eomportal-Instance
X-Framework
X-Varnish-Server
X-Browser
Server-Name
X-PF-Uncompressing
WWW-Authenticate
X-Cocoon-Version
X-F-Cache
X-Processed-By
SSPAppContext
X-Session-Reinit
COMMERCE-SERVER-SOFTWARE
X-Resolver-IP
X-Garden-Version
X-Sys-Req-ID
Thanks
X-Analytics
X-WR-Flags
Beyond-Iis
X-Transaction
X-Connection-Hash
Nitro-Cache
X-Symfony-Cache
X-Nginx-Cache
Backend-Timing
X-Twitter-Response-Tags
X-ServerIndex
X-GeoIP
X-ID
X-Unique-ID
X-Adobe-Content
X-AOL-SNH
X-Hit-Cache
Front
A
Host-Service
X-Worker
X-Pagename
X-Adobe-Loc
IISExport
X-Signature
S-Cnection
X-Vhost
X-BackendServer
Frame-Options
X-V
X-Hiawatha-Cache
Section-Io-Id
X-Machine-Name
MW-Webserver
NODE
X-SmartBan-Host
X-Highwire-SessionId
X-Highwire-RequestId
X-EDGECONNECT-GUID-DEBUG
X-Key
X-Magento-Tags
Allow
X-SmartBan-URL
Cneonction
Ibm-Web2-Location
Ibf5scheme
X-Cache-Fix
Pool-Info
X-Cache-PageType
X-We-Are-Hiring
X-Grid-Server
X-Cache-Only-Varnish
X-HW
X-App-Status
X-ARC
X-Provisioner-Version
X-Domain-Checked
X-Litespeed-Cache-Control
X-Atraveo-ETag
X-Atraveo-Expires
P-WS
X-Atraveo-Param-Rm
X-Atraveo-From-Varnish-Cache
X-Atraveo-Cache-Control
X-NginX-Cache
X-Atraveo-Set-Cookie
X-LW-Web-Server
X-HP-Trace-ID
X-HP-Trace-Project
Cteonnt-Length
X-Sucuri-ID
X-Atraveo-Zone
X-Atraveo-TTL
Machine
X-Amz-Storage-Class
NnCoection
Cmsid
Cmstype
X-Cache-Engine
X-Avvio-Cms-Cacheload
X-Atraveo-Varnish-Server-Id
X-IsCacheURL
P-LB
Smug-CDN
X-SmugMug-Values
X-TTFB
X-Source-ID
Bios
X-SmugMug-Hiring
X-TTFB-L
X-PRAM
X-Env
X-Prefetched
X-Flow-Powered
X-Force
X-RiS-UFDI
X-Plat
SVR
Myheader
X-Captured
X-Amz-Meta-S3cmd-Attrs
X-Dns-Prefetch-Control
X-Jphone-Copyright
BALANCEDTO
X-Goog-Stored-Content-Length
X-Plat-Be-Ip
X-Goog-Metageneration
X-Goog-Generation
X-Platform-Server
X-Goog-Storage-Class
X-AEM
X-Plat-Va-Ip
X-Goog-Stored-Content-Encoding
X-GUploader-UploadID
X-Server-Response-Time
X-Config-By
X-ORACLE-DMS-ECID
X-Cache-Source
X-Real-IP
CLMOB
X-Cache-Provider
X-HydroSheep
X-Balanceador
X-Vary-Options
X-Client-Vid
X-WA-Info
Keywords
X-NginX-Server
NtCoent-Length
X-Webcelerate
MC
Mime-Version
Resin-Trace
X-Client-Image-Vid
X-EPiphany-Vid
CacheControlHeader
X-Nginx
X-PG
X-Origin-Id
X-HTML-Minification-Powered-By
X-AWS
X-Nitra-Side
X-ACLR-Version
X-Varnish-Debug-Age
X-Varnish-Debug-TTL
Logging-CorrelationId
X-Varnish-Cache-Local
X-App-Server
Content-Server
X-Server-Start-Time
X-EdgeConnect-Origin-MEX-Latency
NLCacheNote
X-WP
X-Smartcache-Keys
X-EdgeConnect-MidMile-RTT
X-Smartcache-Timeout
X-LB-Server
Real-Server
X-Server-Instance
X-Frames-Options
X-Sucuri-Cache
X-Detected-Device
X-Server-IP
Id
RN-Server
X-Optimization
From
X-Id
ScoreTracker
X-Restarts
X-Unbounce-PageId
Head
X-Unbounce-VisitorID
X-Unbounce-Variant
XDomainRequestAllowed
X-SRV
X-Domino-CacheValidationWithETagResult
Rel
OT-RequestId
X-KoobooCMS-Version
Prxy
X-FIRSTBase
X-GSL-Server
Description
Cluster-ID
Hash
Imx-Cookies-Used
X-Amz-Id-1
X-Domino-CacheValidationWithETagReason
X-CB-Server
N365rili
Sophnep-Edge-FX
X-Actindo-RS
Web
X-Webstats-RespID
X-Route
X-Desc
Ec
AsisCache
X-A
Yoncu-Errno
X-Span
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Lifetime
X-Render-Time
X-RDP
X-OPNET-Transaction-Trace
X-Cache-On
X-REDIRECTSERVER
Proxy-Cache
X-Response
Il-Cl
X-B2f-Not-Route
X-ACCELERATE
VAR-Cache
Cache-Rule
X-JG-Page-Cache
Paypal-Debug-Id
X-MrHost
Set-Cookie2
X-This-Proto
X-Stage
Xc
X-Varnish-Store
PServer
X-Varnish-Set-Cookie
X-DTC
X-APP
Sid
X-DSMX-Render-MS
X-Server-By
X-Varnish-Currency
X-DSMX-Rewrite-MS
X-Turpentine-Cache
Hamster
X-Environment
X-Varnish-Esi-Method
X-Pj-Cache-Status
X-Qnm-Cache
X-Cache-CFC
X-Custom-Header
X-Varnish-Esi-Access
WP-AdvCache-MemCached
X-Distributor
X-HITS
X-Rack-CORS
X-DealerOn
NS-VaryByCustom-Key
Identity
X-Accel-Expires
Fastly-Backend-Name
X-App
X-Srv
INCOMING-TIME
X-Airee-Node
Actual-Object-TTL
X-Dynatrace
X-Search-Id
IsMobile
Cdate
Ram
Cpu
X-Enhanced-By
Host-Name
Worker
Noq
X-AccessDev
WFE
M
X-PBY
X-Catalyst
X-MSEdge-Ref
D
Backend-Node
X-OpenCart-Lightning
MageStack-Area
Accept-Language
X-Oracle-DMS-ECID
X-Tile-Url
X-Cache-Handler
X-B
X-Appmachine-Environment
If-Modified-Since
X-Cache-Level
X-Pressidium-NinukisWP-Ver
X-Trace-Id
ServerSignature
ServerTokens
MageStack-Cache
MageStack-Cache-Hits
X-7d-Instance-Id
X-7d-Trace-Id
X-Forwarded-Host
PowerCDN
VServer
X-WR-MODIFICATION
X-MAT-GEO
X-ProxyInstancename
X-Upstream-Backend
X-SV
MageStack-Web-Node
MageStack-Cacheable
MageStack-Cache-Warning
MageStack-Cache-Status
MageStack-Cache-Lifetime
MageStack-Config
MageStack-Debug
MageStack-Tag
MageStack-PageSpeed
MageStack-Loadbalancer
X-Forwarded-Proto
WWW
Device-Type
X-Pj-Cache-Flags
CmsCacheEngine
X-Pj-Cache-Gzip
X-Is-Mobile
Fw-Cache-Status
X-Turpentine-Esi
X-Cache-Set
X-SilverStripe-Cache
X-Original-Host
X-Pj-Cache-Expires
Fw-Via
X-Pj-Cache-Key
X-Pj-Cache-Time
X-Varnish-Cache-Control
X-SDE-Name
X-Transaction-Id
X-Cluster-Node
X-RateLimit-Remaining
X-RequestId
X-Hstore
X-Powered-By-Anquanbao
Note
X-ProcessTime
X-Site:
X-Hrouter
X-App-Runtime
X-Varnish-Action
X-IP-Address
X-DN-Cache-Control
X-Ob-Mode
X-Cms-Mode
X-DB-Content-Length
X-Content-Type
X-RealServer
X-CCM
Realaction
Actioncode
X-Dev
X-VC-TTL
X-Name
X-Jcms-Ajax-Id
IM-Version
X-Runtime-Affili
X-Magento-Action
X-HA
X-Apm-Telemetry-Syncmark
X-Cache-Action
X-Gyrobase-Publication
X-Rewritten-By
X-Cache-TTL-Remaining
X-ManagedFusion-Rewriter-Version
X-Cache-Keep
X-Esi
Server-Ip
Ctx
X-COUNTRY-CODE
X-Microcache
X-Artvisual-Server
Disablevcache
NZSpeedy
X-CSRF-TOKEN
X-Backend-Name
Provider
X-CacheResult
Cpu:
X-Varnish-Backend-Healthy
Servername
X-Wikidot-Backend
RATING
Server-Id
X-Cache-Me-Harder
X-EC-Lua
Nginx-Cache
X-Hosting
X-Varnish-Error-Restart
X-Cache-Node
Ram:
X-WorkerInstancename
X-Varnish-URL
Noq:
X-Wikidot-Static-Cache
X-Info
X-ESI-Enable
X-Secret
X-FFX-B
X-Pubstack
X-Src-Webcache
HOST-SERVICE
X-Request-Processing-Time
X-Request-Received
B-Powered-By
Content-Generator
VANITY-HOST
BKREF
DrivedBy
X-Matched-Rule
X-Ocache
X-RequesterIP
Thinkindot-Control
X-RSS-CACHE-STATUS
WSCLoggingUUID
X-Reason-Bp
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
X-Built-By
X-PoweredBy
X-Flex-Tag
X-Flex-Lastmod
X-Flex-Tags
X-Generated
X-Hcom-Styx-Info
X-Flex-Lang
X-VERSION
X-Flex-Community
X-Cjtype
X-Flex-Evend
X-Distributed-By
X-Flex-Evstart
X-HP-CAM-COLOR
X-Layout
X-Varnish-Max-Age
X-DPWN-IS-SECURE
X-Cluster
X-Checkout
CpuTime
X-Title
X-T3CacheTags
X-Max-Age
X-T3Cache
X-Hash
X-T3CacheInfo
Www.Aujourdhui.Com
X-OCTOPOD
X-PM-ID
X-VARITI-CCR
X-Vhost-ID
Language
X-Origin-Cache
X-RateLimit-Limit
X-UUID
X-SeschatLayout
X-SeschatDID
X-RateLimit-Reset
X-SeschatRedID
X-SeschatTemplateID
X-Obr-Rule
X-Cache-UA
X-WHOIS-Cached
Ozcache
Pool
RequestId
SS
AC-ELC
X-Proxy-Cache-Key
Tracecode
MageStack-Response-Ttl
MageStack-Magento-Version
MageStack-Cacheable-Reason
X-Seschat-URL
X-Meta-MSSmartTagsPreventParsing
X-DataDome
X-Company
X-Depends
X-Invoke-Duration
Content
X-NewRelic-App-Data
X-Cache-Extended
X-Box
X-GoCache-CacheStatus
X-Fedora-School-Id
X-Healthy
X-Server-Generated
Svr
X-Server-Instance-Name
X-HostName
Debug-Status
X-AppServer-Cache-Rule
X-Amz-Meta-Cb-Modifiedtime
X-Do-Esi
X-Farm-Server
X-Hosts-Backend
X-HAProxy
Tracker
Device
X-Akamai-Edgescape
Pv
X-GRACE
X-SID
Content-Cache
X-Cache-2
VC-NoCache
X-Pixelsilk-Server
X-NewCloud-V-Cache
X-Pixelsilk-Version
X-Time-Spent
X-Proto
X-VC-Enabled
X-Header
X-Cms-Server
Cleartype
Be
Content-Instance
Dispatcher
X-Cache-ID
X-Backend-TTL
X-FreeTag-Count
X-PF-CACHE-FAILED
X-Status
X-RAMCache
X-TB-M
X-WebNode
Response-Time
XDisk
X-Old-Content-Length
X-Nginx-Request-Time
X-Serendipity-InterfaceLangSource
X-Serendipity-InterfaceLang
RouteID
Session-Id
X-Content-Security-Policy-Report-Only
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
Cache-Control:
X-Phpwcms-Release
MSSmartTagsPreventParsing
MSThemeCompatible
X-Phpwcms-Page-Processed-In
X-Pagely-Cache
Powerd-By
X-Bcwwwid
X-MCF-ID
X-Author
X-Fstrz
X-Unique-Id
X-Ratelimit-Remaining
Hosted-By
X-Server-Addr
X-DEBUG
X-Meta-Imagetoolbar
X-Meta-MSThemeCompatible
Og
X-CACHE-TTL
X-Varnish-Instance
X-FCMS-Cache
X-4ormat-Cacheable
ORIGIN
Serverid
X-FastCGI-Cache
Powered-By-VeryCDN
X-Rack-Cors
Kanooh-Host
X-Old-Varnish
X-AISO-Server
QC-Hit
QC-Key
QC-Time
X-FG-RequestId
Webserver
LX-Host
LX-Site
LX-Static
LX-Tipo-Container
LX-Type
LX-Server-GetCache-Id
LX-MachineName
LX-Cliente
X-DEBUG-TTL
X-Compressed-By
LX-Host-Api
LX-Ambiente
X-Gannett-Site-Version
CommunityServer
REFRESH
E-Tag
Hostname
Tempo
X-Timing
X-Frame-Option
Origin-Server
X-Me
X-Akamai-Transformed
X-E
X-Brought-To-You-By
X-Client-Ip
X-RemovedCookies
X-ProcessESI
Apache
X-Sid
LX-Url-Photo-Container
X-Does-He-Have-Time
X-PHP-Response-Code
X-Delivered-By
X-DeliveryServer
X-Dynamic
X-LS-DEBUG
X-TempoPesquisa
LX-Version
AGI-Request-ID
X-UA
CD2
Debug-Cache-Control
Debug-Expires
X-SL-Notranslate
X-SL-Norewrite
X-Nginx-Page-Cache
X-Instance-Name
X-SP-PR
X-Page
X-SERVER-ID
MwpReleaseVersion
X-SP-AP
X-Venda-Hitid
X-ORACLE-DMS-RID
Aurora-Node
HostName
X-Content-Parsed-By
X-Clara-ASAP
X-IP
X-AG-MIPS
Served-From
X-ASAP-Age
X-ASAP-Cache
X-Goog-Meta-Replace
X-SP-TE
X-UltraCart-Critical-Path-CSS-Injected
X-Powered-By-Server
X-UltraCart-Critical-Path-CSS-Key
Expire
ServerIP
Lookup-Cache-Hit
X-Powered-By-Home.Pl
X-Hit
LX-Version-Package
X-Fpc
X-LW-T
X-Bypass-Ssl-Transform
X-UltraCart-Inject-Critical-Path-CSS
Httpd-Identifier
CACHED-RESPONSE
X-Cache-Backend
X-Cache-Device-Type
X-Goog-Meta-Policy
X-Beatles-Hits
Expiries
X-UltraCart-Server-Round-Trip
X-ETag
X-Runtime-Memory
X-Ruxit-JS-Agent
LX-Url-Skin-Container
X-VCS-Hit
TP-Cache
TP-L2-Cache
X-Mobile
X-Pb-Mii
X-Rq
X-LOCATION
X-CPU-Time
Url-Hash
X-Distil-CS
X-Built-With
X-Cache-Detail
Max-Age
E-TAG
X-Diehard-Tags
X-Dynamic-Cache
X-Diehard-Blocks-Removed
X-Diehard-Blocks-Added
X-Diehard
X-Faeria
X-NewsFlow-DoCache
X-Node-Name
X-Not-Cacheable
X-NGINX-Cache
X-NewsFlow-Sitename
P
Copyright
Atp-Isdpp
At-Shoptype
Brandcast-Brand-Id
Progma
Brandcast-Load-Balancer
X-AppServer-Status
X-ClusterID
X-Time-Microsecs
X-Fe
"
At-Isb
Cache-Status
X-VG-WebCache
Gzip
X-Clx-Request
User-Cache-Control
Requested-Host
Kp-EeAlive
X-Forwarded-Server
X-Device-Group
SiteName
ClientIP
X-MSU-SOURCE
F5-IpCliente
Dynatrace
X-Dw-Trace-Id
X-Router-Backend
X-Router
X-Site-Name
X-SuperCache
X-T
X-Provided-By
X-Pageid
X-Cache-Via
X-DDM-SERVER
X-DDM-SERVER-UPDATED
X-Front-Cache
X-UseReverse-Proxy
X-VCS-Billing
X-Webapp
X-VCS-Url
X-Zendesk-Origin-Server
MachineName
ReqUrl
X-VCS-Ttl
X-VCS-Status
X-VCS-Cache-Server
X-VCS-Cacheable
X-VCS-Host
X-VCS-Nrhit
Ttl
RSL-Trace-ID
X-BeResp-Ttl
X-Expose-Hostname
X-Expose-Generated
X-ESI
Pw-Value
X-Expose-Site
X-Expose-Took
X-Nginx-VM-RT
X-EZPublish-NodeID
X-EZPublish-InstallationID
X-PageType
Fpc-Expire
X-Ghost-Cache-Status
X-Accel-Cache-Control
X-Apache2-RT-MicroSec
X-Batcache
X-ITKG-Cache-Tags
Lb
X-TTL-Age
X-Ser
X-Cache-Time
X-Member
X-Your-GrandPa-Would-Wait
X-Would-Your-GrandPa-Wait
X-Highwire-Sitecode