Threat Level: green Handler on Duty: Tom Webb

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Connection
Set-Cookie
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Accept-Ranges
Link
ETag
X-Content-Type-Options
P3P
X-Frame-Options
X-XSS-Protection
X-Pingback
X-AspNet-Version
X-Cache
Content-Language
Age
CF-RAY
X-UA-Compatible
Strict-Transport-Security
Via
X-Adblock-Key
Access-Control-Allow-Origin
X-Varnish
X-Language
X-Template
X-Check
X-Buckets
X-Generator
X-Cacheable
Content-Location
X-Drupal-Cache
X-AspNetMvc-Version
X-Hacker
X-Ac
P3p
X-Powered-By-Plesk
MS-Author-Via
X-Type
X-Request-Id
X-Cache-Group
X-Pass-Why
X-Runtime
WP-Super-Cache
X-Powered-CMS
X-Cache-Hits
Status
X-Permitted-Cross-Domain-Policies
Host-Header
Ngpass-Ngall
X-Download-Options
Access-Control-Allow-Credentials
X-Alternate-Cache-Key
X-Dc
X-ShardId
X-ShopId
X-UA-Device
X-Request-ID
Content-Security-Policy
Keep-Alive
Access-Control-Allow-Headers
X-Iinfo
X-Via
Access-Control-Allow-Methods
X-Mod-Pagespeed
X-Tumblr-Pixel-0
X-Tumblr-User
X-Tumblr-Pixel
X-Logged-In
X-Backend
X-Pad
X-Served-By
X-Tumblr-Pixel-1
X-Contextid
X-ServedBy
X-Xss-Protection
Upgrade
X-Tumblr-Pixel-2
X-PC-Hit
X-PC-Key
X-CDN
X-Cache-Status
X-Host
Powered-By
X-Server
X-Cache-Hit
Content-Encoding
X-Port
X-PC-AppVer
X-PC-Date
X-PC-Host
X-Tumblr-Pixel-3
X-Timer
X-Robots-Tag
X-Accel-Version
X-Varnish-Cache
X-Cache-Lookup
X-Amz-Cf-Id
X-Cnection
X-Rack-Cache
X-Server-Powered-By
X-Request-Country
SPRequestGuid
MicrosoftSharePointTeamServices
X-SharePointHealthScore
MicrosoftOfficeWebServer
Alt-Svc
X-Turbo-Charged-By
X-Safe-Firewall
CF-Cache-Status
X-MS-InvokeApp
X-XRDS-Location
X-Page-Speed
X-AH-Environment
X-Content-Powered-By
Rating
X-Node
X-Content-Digest
X-W-DC
X-Tumblr-Content-Rating
X-Cache-Enabled
X-GitHub-Request-Id
Public-Key-Pins
X-Tumblr-Pixel-4
X-PhApp
X-Ua-Compatible
X-FullPageCaching
Request-Id
Content-Security-Policy-Report-Only
X-Webserver
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
X-INKT-URI
X-INKT-SITE
Timing-Allow-Origin
Composed-By
SPIisLatency
SPRequestDuration
X-Firenze-Processing-Times
X-SERVER
Served-By
X-Proxy-Cache
Cf-Railgun
X-HeyJason
Permitted-Cross-Domain-Policies
X-Amz-Id-2
X-Amz-Request-Id
Liferay-Portal
X-Swift-SaveTime
X-Swift-CacheTime
Access-Control-Expose-Headers
X-Hyper-Cache
Surrogate-Key-Raw
X-Pantheon-Endpoint
X-Styx-Req-Id
X-Styx-Version
X-Pantheon-Styx-Hostname
X-Spip-Cache
Xkey
EagleId
X-Drupal-Dynamic-Cache
Access-Control-Max-Age
Charset
X-Content-Security-Policy
Surrogate-Key
X-Server-Name
X-CDN-Pop
X-CDN-Pop-IP
Content-Script-Type
X-Tumblr-Pixel-5
Content-Style-Type
Grace
Access-Control-Allow-Method
X-Dw-Request-Base-Id
X-FW-Hash
X-Hits
X-Nginx-Cache-Status
X-FB-Debug
X-FW-Serve
X-FW-Type
X-FW-Static
X-XN-Trace-Token
X-XN-XNHTML
X-CF-Powered-By
Content-MD5
X-Device
Public-Key-Pins-Report-Only
X-Clacks-Overhead
X-VCache
X-User-Agent
X-Backend-Server
X-Fastly-Request-ID
X-Cache-Server
X-AWS-Id
X-LJ-Flow-ID
X-VWS-Id
X-DDC-Arch-Trace
Real-Hostname
X-Loop
X-TNCMS
X-Cache-Config
X-LiteSpeed-Cache
X-Age
X-Cache-Result
X-Tumblr-Adult-Blog
Fastly-Debug-Digest
X-Jimdo-Wid
X-Jimdo-Instance
X-ServerName
X-Cloud-Trace-Context
Refresh
X-Tumblr-Pixel-6
X-Generated-By
Edge-Control
X-Umbraco-Version
X-MiniProfiler-Ids
Surrogate-Control
X-DynaTrace-JS-Agent
X-Cached
X-Cached-By
X-Powered-By-360WZB
WZWS-RAY
X-Px
X-Hostname
PageSpeed
X-Url
Cartoon
NS-RTIMER-COMPOSITE
X-Outils-CS
Fpc-Cache-Id
X-DynaTrace
X-Whom
X-CMS-Version
TCN
DynaTrace
Response
X-URL
X-WebKit-CSP
Product
X-Forwarded-For
X-Sol
X-Newrelic-App-Data
X-Middleton-Response
Display
X-Middleton-Display
Imagetoolbar
X-From
X-AspNetWebPages-Version
Rt-Fastcgi-Cache
Front-End-Https
X-BC-Stapler
X-Msg-2-Log
Edge-Control-Message
X-Handled-By
X-Content-Options
X-Recruiting
ServedBy
X-EC-Security-Audit
X-Varnish-Cache-Hits
Origin
Access-Control-Request-Method
X-NetCat-Version
X-Do-Not-Hack
X-Country-Code
X-FORWARDED-FOR
Akamai-IP
X-Engine
Server-Info
X-Matrix-Proxy
X-Matrix-Server
Page-Completion-Status
X-Director
X-Servedby
X-TTL
X-Micro-Cache
Generator
X-LiteSpeed-Cache-Control
X-Hosted-By
IBM-Web2-Location
Alternate-Protocol
X-I
X-Content-Encoded-By
Fhost
X-UD-Method
X-App-Hosting
X-Xrds-Location
X-Cache-Rule
X-Track
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
X-Returned-From
X-Art-Request-Id
Surrogate-Keys
X-Actual-URL
X-Firenze-Processing-Time
X-Varnish-Backend
X-Passed-To-DLL
X-Passed-To
X-Returned-From-DLL
X-Original-Request
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
X-Platform
X-Stale
X-Dispatcher
X-Varnish-TTL
Ag-Execution-Time
Ag-Send-Time
Ag-Server-Time
Content-Disposition
X-Microcachable
Host
X-ApacheServer
X-Varnish-Host
Referrer-Policy
X-Response-Time
X-Cache-Info
X-PERF
Content-Encoding-Handler
X-Abuse
X-SRCache-Fetch-Status
X-S
X-Expires-Orig
Powered-By-ChinaCache
X-SRCache-Store-Status
X-Duration
X-Origin
X-CacheServer
X-Daa-Tunnel
X-I-Sp
X-Request-Time
X-SDS
X-BS
Powered
X-Magnolia-Registration
X-Cache-Age
MIME-Version
Magicmarker
X-Last-Modified
X-Gamma-Serve
X-Location-Id
Node
X-Translation
X-Version
X-HOST
X-Microcache-Status
X-Device-Type
X-Vtex-Remote-Cache
X-Server-ID
X-Vtex-Processed-At
X-Cache-TTL
X-VTEX-Janus-Router-Backend-App
X-Powered-By-VTEX-Janus-ApiCache
X-Powered-By-VTEX-Janus-Edge
X-VTEX-Cache-Status-Janus-ApiCache
X-VTEX-Cache-Status-Janus-Edge
X-Vtex-Processado-Em:
X-Goog-Hash
No
X-Varnish-Cacheable
USPLoggingUUID
ServerName
X-Varnish-Age
X-Varnish-Seen-By
Lsrequestid
X-Varnish-RemainingLife
X-Varnish-ObjectSource
X-Varnish-RemainingTTL
X-Varnish-GracePeriod
X-ATG-Version
X-Cache-Debug
X-Upstream
X-DNS-Prefetch-Control
X-Rocket-Nginx-Bypass
X-URLSCHEME
Fastcgi-Cache
X-RESOURCE
X-B-Cache
X-Cache-Operation
ServerID
X-CJ-Soft
X-Server-Id
X-Cache-Lifetime
X-Route-Server
SN
X-Debug
X-Developer
X-Fastcgi-Cache
X-Storage
X-PwB-Node
X-Cache-Expires
Proxy-Agent
X-Instart-Request-ID
X-Cache-Tags
X-Ttl
X-Revision
X-Zen-Fury
PICS-Label
Req-Id
X-Source
Location
Proxy-Connection
Buuteeq-Source
RTSS
X-OneAgent-JS-Injection
X-DefendeR-Runtime
X-DefendeR-Status
X-NoCache
X-ServerID
X-N
X-Geo-IP
X-AOL-HN
X-SV-Duration
X-SV-FromDBCache
Content-Hash
X-SV-Expires
X-SV-CreatedAt
X-SV-Edge
X-SV-CacheTags
X-Nbs
Content-Security-Policy-Rerport-Only
Version
X-FW
X-SV-Nginx-Duration
X-WEBSERVER
X-SV-Pid
X-Akamai-Device-Characteristics
X-Client-IP
X-Akamai-Device-Model
X-Cache-Control-Orig
X-Varnish-Count
X-Varnish-HitMiss
SEOMOZ
Webluker-Edge
MJ12bot
X-Amz-Version-Id
Arr-Disable-Session-Affinity
Cache
X-Cache-Key
X-Vcap-Request-Id
X-Varnish-Hits
X-Purge-URL
Content-Transfer-Encoding
X-LB-Node
Srv
X-Kinsta-Cache
X-ACMCache
X-Drectory-Script
Cm-Server
X-Varnish-Hostname
S
X-LB
HCVer
X-Purge-Host
X-Frontend
HAVer
NetMindSessionID
Backend
Cache-Key
Last-Published
Ufe-Result
X-Correlation-Id
X-Front
X-Page-Cache
X-Geo-IP-Country
X-Geo-IP-Metro
X-Platform-Router
Pics-Label
X-Dispatch
X-Geo-IPV
X-Geo-IP-Region
X-Nurl
X-Nhost
X-Platform-Processor
X-NFE
X-Mobile-URL
X-Content-Age
X-ClientSide-Caching
Qs-Cache
X-Cookie-Domain
X-CDN-Forward
X-Real-Server
X-UPSTREAM
Warning
X-Varnish-IP
W
X-Speed-Cache
AMF-Ver
X-Speed-Cache-Key
Accept-Charset
X-Hypernode
Author
X-Mobilized-By
Mobiquo-Is-Login
Nodo
X-Grace
X-Application-Context
X-Nginx-Host
X-Varnish-Server
X-CDN-Node
X-CDN-Cache-Status
X-Yadis-Location
X-Orig-Vary
X-AbeBooks-Version
X-NginX-Node
X-NB-Cached-Page
X-NginX-Upstream-Addr
X-Yottaa-Optimizations
X-Time
X-Edge-Location
X-Yottaa-Metrics
X-Cocoon-Version
X-NginX-Upstream-Response-Time
X-WebServer
X-Platform-Cache
X-Blog
X-NginX-Upstream-Status
Cached
WSR-Cache
X-Server-Upstream
X-SE-Debug
Retry-After
Eomportal-Instance
X-Directory-Script
X-BKSrc
Rewriter
X-Sys-Req-ID
X-Discourse-Route
X-GeoIP-Country-Code
X-Session-Reinit
A-Powered-By
X-Garden-Version
X-Processing-Time
X-Supported-By
Filter-Revision
X-Cf-Powered-By
X-Edge-IP
X-IIJ-Cache
X-WR-Flags
X-Machine-Name
X-GeoIP-Country-Name
SRV
X-Processed-By
WWW-Authenticate
X-Adobe-Loc
CT
Thanks
X-SSL-Protocol
COMMERCE-SERVER-SOFTWARE
X-V
X-Adobe-Content
X-AOL-SNH
X-F-Cache
X-SSL-Cipher
X-Unique-ID
Server-Name
X-Twitter-Response-Tags
X-Transaction
X-Connection-Hash
X-Cache-Control
IISExport
Myheader
Pool-Info
Accept-Encoding
X-PF-Uncompressing
X-StackifyID
X-Highwire-RequestId
X-SmartBan-URL
X-SmartBan-Host
X-Highwire-SessionId
X-Cache-Doesi
X-Config-Blacklist-Version
X-Vhost
X-BackendServer
CC-CACHE
X-Browser
X-Cache-Fix
X-Sucuri-ID
X-Pagename
Nitro-Cache
Beyond-Iis
Host-Service
X-Hit-Cache
X-EDGECONNECT-GUID-DEBUG
X-Cache-PageType
X-Empowered-By
Ibm-Web2-Location
X-Framework
X-Resolver-IP
X-Dns-Prefetch-Control
X-GeoIP
S-Cnection
MW-Webserver
Allow
P-WS
X-Symfony-Cache
P-LB
Front
X-Varnish-Ttl
X-Worker
X-Litespeed-Cache-Control
X-HP-Trace-ID
X-HP-Trace-Project
MC
X-Nginx-Cache
X-Flow-Powered
Ngpass-Vcall
X-LW-Web-Server
X-Magento-Tags
X-HTML-Minification-Powered-By
X-Cache-Only-Varnish
X-Plat-Be-Ip
X-Signature
X-Jphone-Copyright
X-Source-ID
NODE
X-Avvio-Cms-Cacheload
X-RiS-UFDI
X-ORACLE-DMS-ECID
X-ServerIndex
SSPAppContext
Ibf5scheme
X-Config-By
X-Force
Frame-Options
X-Plat-Va-Ip
CacheControlHeader
X-Key
X-Plat
X-AEM
X-WA-Info
X-Grid-Server
X-PRAM
Cneonction
SVR
Backend-Timing
X-HOSTNAME
A
X-Balanceador
Mime-Version
X-Analytics
Resin-Trace
X-Webcelerate
X-NginX-Cache
X-Hiawatha-Cache
X-Amz-Storage-Class
X-IsCacheURL
X-Trace
NLCacheNote
BALANCEDTO
Content-Server
X-Optimization
X-Dynatrace
X-Varnish-Debug-TTL
CLMOB
X-Vary-Options
Real-Server
X-Atraveo-Cache-Control
X-Amz-Meta-S3cmd-Attrs
X-Varnish-Debug-Age
X-Real-IP
X-Atraveo-Varnish-Server-Id
X-Atraveo-TTL
X-Atraveo-Set-Cookie
X-Atraveo-Zone
Cmstype
X-ARC
Cmsid
X-Atraveo-ETag
X-Atraveo-Param-Rm
Section-Io-Id
X-Server-Response-Time
X-Atraveo-Expires
X-Atraveo-From-Varnish-Cache
X-ID
Keywords
X-TTFB
X-TTFB-L
X-SmugMug-Hiring
X-Env
X-We-Are-Hiring
Smug-CDN
Cteonnt-Length
X-Prefetched
NnCoection
X-SmugMug-Values
Bios
X-NginX-Server
XDomainRequestAllowed
X-Id
X-Client-Image-Vid
X-Frames-Options
X-Client-Vid
X-HW
X-EPiphany-Vid
ScoreTracker
From
RN-Server
X-Detected-Device
X-SRV
X-Server-IP
X-HydroSheep
X-Cache-Engine
Cache-Rule
X-Span
X-Runtime-Affili
X-T3Cache
Set-Cookie2
X-Custom-Header
X-App-Runtime
X-Varnish-Currency
OT-RequestId
X-Varnish-Esi-Access
X-Varnish-Set-Cookie
X-Varnish-Esi-Method
X-Turpentine-Cache
X-Server-By
X-Varnish-Store
X-Appmachine-Environment
X-DTC
X-PG
X-Render-Time
AsisCache
X-Response
X-Turpentine-Esi
Rel
Web
X-Actindo-RS
X-App-Server
Hash
Cluster-ID
X-Cache-CFC
X-GSL-Server
Paypal-Debug-Id
VAR-Cache
X-JG-Page-Cache
X-Desc
N365rili
X-Rebelmouse-Cache-Control
Id
X-A
X-Rebelmouse-Surrogate-Control
Machine
X-NewRelic-App-Data
X-TempDebug
Sophnep-Edge-FX
X-LB-Server
Xc
X-Cache-On
X-RDP
Imx-Cookies-Used
X-AWS
X-Nitra-Side
Proxy-Cache
X-Origin-Id
X-WP
X-Smartcache-Timeout
Logging-CorrelationId
Il-Cl
X-This-Proto
X-T3CacheTags
X-B2f-Not-Route
X-DSMX-Render-MS
X-DSMX-Rewrite-MS
X-Smartcache-Keys
X-Server-Start-Time
X-Cache-Provider
X-Webstats-RespID
X-Cache-Source
Ec
X-KoobooCMS-Version
X-REDIRECTSERVER
X-Lifetime
X-Varnish-Cache-Local
X-Amz-Id-1
X-Domino-CacheValidationWithETagReason
X-Domino-CacheValidationWithETagResult
X-T3CacheInfo
X-Unbounce-PageId
Fastly-Backend-Name
ORIGIN
X-Restarts
WP-AdvCache-MemCached
X-Nginx
X-Srv
X-Unbounce-VisitorID
INCOMING-TIME
X-Server-Instance
X-HITS
X-EdgeConnect-MidMile-RTT
X-Unbounce-Variant
X-EdgeConnect-Origin-MEX-Latency
X-App-Status
X-Domain-Checked
X-Provisioner-Version
X-Varnish-URL
Actual-Object-TTL
Head
X-Rack-CORS
X-Sucuri-Cache
NS-VaryByCustom-Key
X-Info
X-DealerOn
X-Forwarded-Host
X-Apm-Telemetry-Syncmark
X-OPNET-Transaction-Trace
X-Is-Mobile
X-Goog-Storage-Class
X-OpenCart-Lightning
X-Captured
X-Distributed-By
X-Depends
Accept-Language
X-B
X-Goog-Metageneration
X-GUploader-UploadID
Prxy
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-CB-Server
X-RequestId
X-Hstore
Worker
X-ProxyInstancename
X-MAT-GEO
X-AccessDev
X-WR-MODIFICATION
X-Cms-Mode
X-Varnish-Action
X-Forwarded-Proto
Ram
Cpu
PServer
X-Cluster-Node
X-Backend-Name
Description
Noq
IsMobile
X-Dev
X-Magento-Action
X-7d-Instance-Id
VServer
X-Site:
X-7d-Trace-Id
X-SilverStripe-Cache
X-Hrouter
RequestId
Note
Device-Type
X-VC-TTL
X-Jcms-Ajax-Id
X-Cache-Action
X-ACLR-Version
Fw-Cache-Status
Fw-Via
X-SDE-Name
X-Goog-Generation
IM-Version
X-Platform-Server
X-Trace-Id
X-APP
X-Cache-Set
X-Tile-Url
X-FIRSTBase
DrivedBy
CmsCacheEngine
Sid
X-Pressidium-NinukisWP-Ver
X-Cache-Level
ServerTokens
X-Enhanced-By
X-PoweredBy
ServerSignature
NtCoent-Length
X-Varnish-Error-Restart
X-COUNTRY-CODE
X-CSRF-TOKEN
X-Varnish-Backend-Healthy
X-FastCGI-Cache
X-Stage
X-Rewritten-By
X-ManagedFusion-Rewriter-Version
X-ACCELERATE
Servername
RATING
X-Artvisual-Server
X-Wikidot-Static-Cache
X-Esi
X-Wikidot-Backend
Nginx-Cache
X-Accel-Expires
X-Cache-TTL-Remaining
Server-Id
X-Cache-Keep
X-WorkerInstancename
X-Cache-Node
X-CacheResult
X-Hosting
Cpu:
Noq:
X-EC-Lua
X-Distributor
X-Cache-Me-Harder
Ram:
RouteID
Session-Id
BKREF
X-Catalyst
X-Old-Content-Length
MageStack-Web-Node
X-Qnm-Cache
X-Content-Security-Policy-Report-Only
Debug-Status
MageStack-Loadbalancer
X-Nginx-Request-Time
X-Cache-Handler
MageStack-Tag
MageStack-PageSpeed
Hosted-By
X-Serendipity-InterfaceLangSource
X-Pagely-Cache
X-CACHE-TTL
Content-Generator
Www.Aujourdhui.Com
X-VC-Enabled
X-Time-Spent
X-AISO-Server
X-Secret
Cache-Control:
Content
If-Modified-Since
X-Serendipity-InterfaceLang
X-PF-CACHE-FAILED
Hamster
X-FreeTag-Count
HOST-SERVICE
X-RAMCache
X-Cache-Extended
X-Box
X-OCTOPOD
X-Company
X-4ormat-Cacheable
X-Fedora-School-Id
X-GoCache-CacheStatus
X-Healthy
X-Server-Generated
X-Server-Instance-Name
X-Clara-ASAP
MageStack-Area
X-ASAP-Cache
X-DataDome
MageStack-Cache
X-WHOIS-Cached
X-FCMS-Cache
MageStack-Cache-Hits
X-HP-CAM-COLOR
X-WebNode
XDisk
MageStack-Config
MageStack-Debug
X-TB-M
X-RSS-CACHE-STATUS
WFE
X-Status
Provider
Response-Time
MageStack-Cache-Status
MageStack-Cache-Lifetime
X-Invoke-Duration
X-Upstream-Backend
X-Cache-2
MageStack-Cacheable
VC-NoCache
X-Pixelsilk-Version
X-NewCloud-V-Cache
AC-ELC
Device
M
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
Tracker
X-SeschatDID
X-Seschat-URL
X-Amz-Meta-Cb-Modifiedtime
Content-Cache
X-Varnish-Cache-Control
X-CCM
X-DN-Cache-Control
X-Gyrobase-Publication
X-SV
X-PBY
Disablevcache
X-Layout
X-SeschatLayout
X-SeschatRedID
X-Vhost-ID
X-UUID
Cdate
X-Do-Esi
X-Title
X-Hosts-Backend
X-VARITI-CCR
Host-Name
PowerCDN
X-Environment
X-TempoPesquisa
X-SeschatTemplateID
X-Max-Age
X-Mobile
X-Rq
X-AppServer-Cache-Rule
X-SID
X-MCF-ID
X-Cms-Server
X-EZPublish-NodeID
X-EZPublish-InstallationID
X-Cache-ID
X-GRACE
B-Powered-By
X-Distil-CS
X-Backend-TTL
X-Ratelimit-Remaining
X-Varnish-Instance
X-DEBUG
X-Akamai-Edgescape
X-HAProxy
X-Oracle-DMS-ECID
X-Built-By
X-Header
Backend-Node
X-Generated
Language
X-Pj-Cache-Status
X-Pj-Cache-Time
D
X-Pj-Cache-Key
X-Pj-Cache-Gzip
X-Pj-Cache-Expires
X-Pj-Cache-Flags
X-Pixelsilk-Server
X-MrHost
Content-Instance
Dispatcher
Cleartype
Be
X-Hcom-Styx-Info
Yoncu-Errno
X-Member
X-HostName
X-W3TC-Minify
Serverid
Ctx
Server-Ip
X-Ob-Mode
X-VERSION
X-Transaction-Id
X-ITKG-Cache-Tags
X-Accel-Cache-Control
X-Ser
X-Batcache
X-Powered-By-Anquanbao
X-Name
X-Hash
X-Original-Host
Lb
X-ProcessTime
X-Route
RSL-Trace-ID
X-SuperCache
X-Site-Name
X-Router-Backend
X-T
X-UseReverse-Proxy
X-VCS-Cache-Server
X-VCS-Billing
X-Router
X-Provided-By
X-DDM-SERVER
X-Cache-Via
Ttl
X-DDM-SERVER-UPDATED
X-Front-Cache
X-Pageid
X-IP-Address
X-HA
X-DB-Content-Length
MwpReleaseVersion
SiteName
Pool
X-App
X-Cjtype
X-Flex-Community
X-Device-Group
MageStack-Cache-Warning
X-Request-Received
X-ESI-Enable
Debug-Expires
WSCLoggingUUID
X-FFX-B
X-Pubstack
X-Request-Processing-Time
X-Venda-Hitid
X-Flex-Evend
X-Flex-Evstart
WWW
Ozcache
CpuTime
X-Checkout
X-Cluster
X-VCS-Cacheable
X-Content-Type
X-Varnish-Max-Age
X-Search-Id
X-Flex-Lastmod
X-Flex-Lang
X-Flex-Tag
X-Flex-Tags
X-Pb-Mii
X-ORACLE-DMS-RID
X-DPWN-IS-SECURE
X-VCS-Nrhit
LX-Cliente
LX-Ambiente
Kanooh-Host
LX-Host
LX-Host-Api
LX-Server-GetCache-Id
LX-MachineName
Identity
X-Rack-Cors
QC-Hit
Powered-By-VeryCDN
QC-Key
QC-Time
X-Old-Varnish
Webserver
LX-Site
LX-Static
X-Powered-By-Server
X-Powered-By-Home.Pl
X-UltraCart-Critical-Path-CSS-Injected
X-UltraCart-Critical-Path-CSS-Key
X-UltraCart-Server-Round-Trip
X-UltraCart-Inject-Critical-Path-CSS
X-LW-T
X-Fpc
LX-Type
LX-Tipo-Container
LX-Url-Photo-Container
LX-Url-Skin-Container
LX-Version-Package
LX-Version
X-Sid
X-RemovedCookies
X-AG-MIPS
X-Highwire-Sitecode
ReqUrl
Expire
Origin-Server
X-Akamai-Transformed
SS
MachineName
X-Zendesk-Origin-Server
VANITY-HOST
X-VCS-Host
X-VCS-Status
X-VCS-Ttl
X-Webapp
X-VCS-Url
X-E
X-Frame-Option
X-DeliveryServer
X-Delivered-By
X-Dynamic
X-LS-DEBUG
X-ProcessESI
X-PHP-Response-Code
X-Client-Ip
X-Brought-To-You-By
X-ASAP-Age
X-Timing
CommunityServer
E-Tag
Tempo
Hostname
X-VCS-Hit
X-Nginx-VM-RT
X-NID
X-Obr-Rule
X-Origin-Cache
X-DOM
X-AppServer-Status
X-ClusterID
X-VhostID
Progma
X-PM-ID
Lookup-Cache-Hit
ServerIP
Apache
X-VG-WebCache
X-RateLimit-Remaining
X-Uid
X-UA
X-Farm-Server
At-Isb
X-BServer
"
At-Shoptype
Atp-Isdpp
Brandcast-Brand-Id
X-BPool
X-C
X-Time-Microsecs
X-Static
X-Fe
X-Server-Node
X-Magento-Cache-Debug
X-Cacheable-TTL
X-Magento-Cache-Control
X-MSU-SOURCE
X-Beatles-Hits
X-Diehard-Tags
X-Dynamic-Cache
X-Faeria
X-Diehard-Blocks-Removed
X-Diehard-Blocks-Added
Dynatrace
X-Diehard
X-NewsFlow-DoCache
X-NewsFlow-Sitename
TP-L2-Cache
TP-Cache
Max-Age
E-TAG
X-NGINX-Cache
X-Not-Cacheable
X-PageType
X-BeResp-Ttl
X-Me
X-TTL-Age
X-Does-He-Have-Time
X-Clx-Request
X-Forwarded-Server
X-DEBUG-TTL
X-Would-Your-GrandPa-Wait
X-Your-GrandPa-Would-Wait
Pw-Value
Copyright
Pv
Requested-Host
User-Cache-Control
Fpc-Expire
Brandcast-Load-Balancer
Cache-Status
X-Proto
X-Gannett-Site-Version
X-FG-RequestId
X-RealServer
Rt-Proxy-Cache
Debug-Cache-Control
X-Src-Webcache
X-Compressed-By
X-Bypass-Ssl-Transform
Web-Server
X-Meta-MSThemeCompatible
X-Server-Addr
X-Unique-Id
Served-From
NZSpeedy
Foglight-Request-UUID
REFRESH
X-Expose-Site
X-Expose-Hostname
X-Expose-Took
X-Matched-Rule
X-Ocache
Svr
X-Expose-Generated
X-ESI
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
Thinkindot-Control
X-Apache2-RT-MicroSec
X-Cache-Time
EXT-CACHEEXPIRE
X-Meta-MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
X-Airee-Node
Url-Hash
Powerd-By
X-Bcwwwid
X-Built-With
X-CPU-Time
X-Cache-Detail
P
Og
Aurora-Node
ClientIP
F5-IpCliente
Gzip
X-Remote-Addr
Kp-EeAlive
X-LOCATION
X-Pass-Through
X-Author
MSThemeCompatible
X-AISO-Cache
X-Dw-Trace-Id
X-Ghost-Cache-Status
X-Fstrz
MSSmartTagsPreventParsing
X-Phpwcms-Release
X-MSEdge-Ref
X-Hit
X-Node-Name
AGI-Request-ID
X-Phpwcms-Page-Processed-In
X-AISO-Cacheable
X-RequesterIP