Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Connection
Set-Cookie
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Accept-Ranges
Link
ETag
X-Content-Type-Options
P3P
X-Frame-Options
X-XSS-Protection
X-Pingback
X-AspNet-Version
X-Cache
Content-Language
Age
CF-RAY
X-UA-Compatible
Strict-Transport-Security
Via
X-Adblock-Key
Access-Control-Allow-Origin
X-Varnish
X-Language
X-Template
X-Check
X-Buckets
X-Generator
X-Cacheable
Content-Location
X-Drupal-Cache
X-AspNetMvc-Version
X-Hacker
X-Ac
P3p
X-Request-Id
X-Powered-By-Plesk
MS-Author-Via
X-Type
X-Pass-Why
X-Cache-Group
X-Runtime
WP-Super-Cache
X-Cache-Hits
X-Powered-CMS
Status
Ngpass-Ngall
Host-Header
X-Permitted-Cross-Domain-Policies
X-Download-Options
Access-Control-Allow-Credentials
X-Dc
X-ShardId
X-ShopId
X-Alternate-Cache-Key
X-UA-Device
Content-Security-Policy
Keep-Alive
Access-Control-Allow-Headers
X-Iinfo
X-Via
X-Request-ID
X-Mod-Pagespeed
Access-Control-Allow-Methods
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Logged-In
X-Served-By
X-Pad
X-Backend
X-Tumblr-Pixel-1
X-Contextid
X-ServedBy
X-Xss-Protection
X-Tumblr-Pixel-2
Upgrade
X-PC-Key
X-PC-Hit
X-Cache-Status
X-CDN
X-Host
Powered-By
X-Server
Content-Encoding
X-Cache-Hit
X-PC-AppVer
X-PC-Host
X-PC-Date
X-Port
X-Tumblr-Pixel-3
X-Timer
X-Robots-Tag
X-Accel-Version
X-Varnish-Cache
X-Cache-Lookup
X-Cnection
X-Amz-Cf-Id
X-Server-Powered-By
X-Rack-Cache
X-Request-Country
SPRequestGuid
X-SharePointHealthScore
MicrosoftSharePointTeamServices
MicrosoftOfficeWebServer
X-Safe-Firewall
X-Turbo-Charged-By
X-MS-InvokeApp
CF-Cache-Status
Alt-Svc
X-Page-Speed
X-XRDS-Location
X-Content-Powered-By
X-AH-Environment
X-Node
Rating
X-Content-Digest
X-W-DC
X-Cache-Enabled
X-Tumblr-Content-Rating
X-GitHub-Request-Id
Public-Key-Pins
X-Tumblr-Pixel-4
X-PhApp
X-FullPageCaching
X-Ua-Compatible
Request-Id
Content-Security-Policy-Report-Only
X-INKT-URI
X-INKT-SITE
X-Seen-By
X-Wix-Renderer-Server
Timing-Allow-Origin
X-Webserver
X-Wix-Request-Id
Composed-By
SPIisLatency
SPRequestDuration
X-SERVER
Served-By
X-Firenze-Processing-Times
X-Proxy-Cache
Permitted-Cross-Domain-Policies
X-HeyJason
Cf-Railgun
X-Amz-Id-2
X-Amz-Request-Id
Liferay-Portal
X-Swift-SaveTime
X-Swift-CacheTime
X-Spip-Cache
X-Styx-Version
Surrogate-Key-Raw
X-Styx-Req-Id
Access-Control-Expose-Headers
X-Pantheon-Styx-Hostname
X-Pantheon-Endpoint
Xkey
EagleId
X-Hyper-Cache
Charset
X-Drupal-Dynamic-Cache
Access-Control-Max-Age
X-Content-Security-Policy
Surrogate-Key
X-Server-Name
X-CDN-Pop
X-CDN-Pop-IP
X-Tumblr-Pixel-5
Grace
Content-Script-Type
Content-Style-Type
Access-Control-Allow-Method
X-FW-Hash
X-Dw-Request-Base-Id
X-Hits
X-FB-Debug
X-Nginx-Cache-Status
X-FW-Serve
X-FW-Static
X-FW-Type
X-CF-Powered-By
X-Device
X-XN-XNHTML
X-XN-Trace-Token
Public-Key-Pins-Report-Only
X-VCache
X-Clacks-Overhead
Content-MD5
Refresh
X-User-Agent
X-Fastly-Request-ID
X-Backend-Server
Real-Hostname
X-Loop
X-TNCMS
X-Cache-Server
X-Tumblr-Adult-Blog
X-DDC-Arch-Trace
X-Cache-Config
X-AWS-Id
X-VWS-Id
X-LJ-Flow-ID
X-Jimdo-Instance
X-Jimdo-Wid
X-Age
X-LiteSpeed-Cache
X-Cache-Result
Fastly-Debug-Digest
X-ServerName
X-Cloud-Trace-Context
Edge-Control
X-MiniProfiler-Ids
X-Generated-By
X-Umbraco-Version
X-Tumblr-Pixel-6
X-DynaTrace-JS-Agent
X-Cached-By
X-Cached
X-Powered-By-360WZB
Surrogate-Control
WZWS-RAY
X-Px
X-Hostname
PageSpeed
X-Outils-CS
X-Url
NS-RTIMER-COMPOSITE
Cartoon
Fpc-Cache-Id
X-Whom
X-DynaTrace
X-CMS-Version
TCN
Response
DynaTrace
X-URL
Product
X-Sol
Imagetoolbar
X-Middleton-Display
X-Middleton-Response
Display
X-From
X-WebKit-CSP
X-AspNetWebPages-Version
X-Newrelic-App-Data
X-Handled-By
Front-End-Https
X-Forwarded-For
Rt-Fastcgi-Cache
X-Msg-2-Log
X-Content-Options
X-BC-Stapler
ServedBy
Edge-Control-Message
X-FORWARDED-FOR
X-Recruiting
X-EC-Security-Audit
X-NetCat-Version
X-Varnish-Cache-Hits
Origin
Access-Control-Request-Method
X-Micro-Cache
Server-Info
X-Country-Code
X-TTL
X-Do-Not-Hack
X-Director
Akamai-IP
X-Matrix-Proxy
X-Matrix-Server
X-Servedby
X-Hosted-By
Generator
X-Engine
X-I
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-App-Hosting
X-Varnish-Beresp-Ttl
Page-Completion-Status
X-Content-Encoded-By
X-Returned-From-DLL
X-Returned-From
X-Original-Request
X-Actual-URL
X-Passed-To
X-Passed-To-DLL
X-Track
X-LiteSpeed-Cache-Control
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Stale
Fhost
Alternate-Protocol
IBM-Web2-Location
X-Platform
X-UD-Method
X-Varnish-Backend
X-Xrds-Location
X-ApacheServer
X-PERF
X-Cache-Rule
X-Art-Request-Id
Surrogate-Keys
X-Varnish-Host
X-Firenze-Processing-Time
Ag-Send-Time
Ag-Server-Time
Ag-Execution-Time
X-CacheServer
X-Duration
Content-Disposition
Host
X-S
X-Dispatcher
X-Cache-Info
Referrer-Policy
Powered
X-Microcachable
X-Expires-Orig
X-Abuse
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Gamma-Serve
Content-Encoding-Handler
X-Varnish-TTL
X-Response-Time
Magicmarker
X-Daa-Tunnel
X-BS
X-I-Sp
No
X-Powered-By-VTEX-Janus-ApiCache
X-Vtex-Processado-Em:
X-Location-Id
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Remote-Cache
X-VTEX-Cache-Status-Janus-Edge
X-Vtex-Processed-At
X-VTEX-Janus-Router-Backend-App
X-Powered-By-VTEX-Janus-Edge
Powered-By-ChinaCache
X-Server-ID
X-Magnolia-Registration
X-Origin
X-Request-Time
X-SDS
X-DNS-Prefetch-Control
USPLoggingUUID
X-Goog-Hash
X-Varnish-Cacheable
X-Last-Modified
Lsrequestid
X-HOST
X-Version
X-ATG-Version
Node
X-Translation
ServerName
X-Cache-Age
X-Microcache-Status
MIME-Version
X-Device-Type
X-Upstream
X-B-Cache
X-Varnish-RemainingLife
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-Rocket-Nginx-Bypass
X-URLSCHEME
X-RESOURCE
X-Varnish-ObjectSource
X-Varnish-GracePeriod
X-Varnish-Age
X-Cache-Debug
X-Cache-TTL
X-Route-Server
X-Storage
SN
Proxy-Agent
X-Instart-Request-ID
Req-Id
ServerID
Fastcgi-Cache
X-Debug
X-Cache-Operation
X-Cache-Lifetime
X-Revision
X-Cache-Expires
Proxy-Connection
X-CJ-Soft
X-Cache-Tags
Buuteeq-Source
X-Zen-Fury
X-OneAgent-JS-Injection
RTSS
X-PwB-Node
X-Fastcgi-Cache
Content-Security-Policy-Rerport-Only
X-Source
Version
Arr-Disable-Session-Affinity
X-Ttl
Content-Hash
Location
X-Developer
X-AOL-HN
X-ServerID
X-N
X-Geo-IP
Cache
X-NoCache
Webluker-Edge
X-Server-Id
X-Purge-URL
X-Nbs
X-FW
Last-Published
X-WEBSERVER
PICS-Label
X-Akamai-Device-Characteristics
SEOMOZ
X-Front
X-Akamai-Device-Model
X-Client-IP
MJ12bot
Cache-Key
X-Varnish-Hits
X-Dispatch
X-SV-Duration
X-Mobilized-By
X-SV-FromDBCache
X-SV-Nginx-Duration
X-SV-Pid
X-SV-Expires
X-SV-Edge
X-SV-CacheTags
X-SV-CreatedAt
X-LB-Node
Srv
X-DefendeR-Runtime
X-Varnish-HitMiss
X-Kinsta-Cache
X-Varnish-Count
X-Amz-Version-Id
X-DefendeR-Status
Content-Transfer-Encoding
X-Cache-Control-Orig
Cm-Server
S
X-Cache-Key
HCVer
HAVer
W
X-Content-Age
X-Purge-Host
X-Platform-Processor
Backend
X-ACMCache
X-Platform-Router
NetMindSessionID
X-Page-Cache
X-Geo-IPV
Pics-Label
X-Vcap-Request-Id
X-Geo-IP-Metro
X-Geo-IP-Country
X-Geo-IP-Region
X-Varnish-IP
X-Real-Server
X-Cookie-Domain
X-CDN-Forward
X-Hypernode
X-Drectory-Script
X-Frontend
Qs-Cache
X-Grace
X-UPSTREAM
X-Varnish-Hostname
X-LB
X-Edge-Location
X-Mobile-URL
X-Correlation-Id
AMF-Ver
Ufe-Result
Accept-Charset
Retry-After
Nodo
X-Server-Upstream
X-Application-Context
Warning
X-Processing-Time
X-Orig-Vary
X-Varnish-Server
X-CDN-Node
X-Speed-Cache-Key
X-Speed-Cache
X-CDN-Cache-Status
Cached
X-Yadis-Location
X-Supported-By
X-Cocoon-Version
X-Platform-Cache
X-NginX-Upstream-Status
X-Nurl
Author
X-Nhost
X-NFE
X-WebServer
Rewriter
X-AbeBooks-Version
X-Yottaa-Metrics
X-NginX-Upstream-Addr
X-NginX-Node
X-Blog
X-NginX-Upstream-Response-Time
X-Yottaa-Optimizations
X-ClientSide-Caching
X-Edge-IP
X-Nginx-Host
Mobiquo-Is-Login
X-GeoIP-Country-Code
X-Discourse-Route
X-Sys-Req-ID
X-Session-Reinit
Filter-Revision
X-Directory-Script
X-BKSrc
A-Powered-By
X-F-Cache
X-IIJ-Cache
X-SE-Debug
X-Cache-Doesi
X-Empowered-By
X-Cf-Powered-By
X-Config-Blacklist-Version
X-WR-Flags
X-GeoIP-Country-Name
SRV
X-Browser
X-NB-Cached-Page
X-StackifyID
X-Time
X-Machine-Name
X-V
COMMERCE-SERVER-SOFTWARE
Server-Name
X-SSL-Cipher
X-SSL-Protocol
X-Resolver-IP
WSR-Cache
X-Sucuri-ID
Thanks
WWW-Authenticate
X-Cache-Control
X-Unique-ID
Eomportal-Instance
X-Connection-Hash
X-Transaction
X-Twitter-Response-Tags
X-Adobe-Loc
CT
X-AOL-SNH
X-Adobe-Content
X-Processed-By
Host-Service
IISExport
Myheader
Nitro-Cache
Front
Pool-Info
X-Dynatrace
X-Garden-Version
Frame-Options
X-Vhost
X-BackendServer
CC-CACHE
X-EDGECONNECT-GUID-DEBUG
Beyond-Iis
Ibm-Web2-Location
X-Hit-Cache
X-Framework
X-Pagename
X-Signature
X-Dns-Prefetch-Control
X-SmartBan-URL
X-SmartBan-Host
X-HP-Trace-Project
X-HP-Trace-ID
X-Flow-Powered
X-Nginx-Cache
X-Symfony-Cache
Allow
Accept-Encoding
X-Varnish-Ttl
X-Trace
X-Hiawatha-Cache
X-Analytics
Id
MW-Webserver
Section-Io-Id
Ngpass-Vcall
X-Highwire-SessionId
Backend-Timing
MC
X-Worker
S-Cnection
X-Litespeed-Cache-Control
X-Highwire-RequestId
X-Cache-Only-Varnish
X-Avvio-Cms-Cacheload
X-Jphone-Copyright
X-AEM
X-ServerIndex
X-Magento-Tags
X-RiS-UFDI
X-HTML-Minification-Powered-By
X-PF-Uncompressing
Cneonction
X-ORACLE-DMS-ECID
X-PRAM
X-ARC
X-WA-Info
NODE
CacheControlHeader
X-Source-ID
X-GeoIP
SVR
X-ID
X-Config-By
X-Key
X-Force
Ibf5scheme
X-Balanceador
X-Webcelerate
A
Mime-Version
X-Client-Image-Vid
P-LB
X-Client-Vid
X-TTFB
X-Cache-Engine
X-Prefetched
X-SmugMug-Hiring
X-SmugMug-Values
X-EPiphany-Vid
X-TTFB-L
X-Amz-Storage-Class
P-WS
X-HOSTNAME
Smug-CDN
X-NginX-Cache
Resin-Trace
X-Env
X-Plat
Real-Server
X-Amz-Meta-S3cmd-Attrs
CLMOB
X-Plat-Be-Ip
X-Plat-Va-Ip
X-Varnish-Debug-TTL
X-Varnish-Debug-Age
X-Server-Response-Time
X-App-Server
X-Atraveo-Cache-Control
X-Cache-PageType
Cmsid
X-Cache-Fix
X-Grid-Server
X-Atraveo-ETag
X-Atraveo-Expires
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
X-Atraveo-From-Varnish-Cache
NLCacheNote
Cmstype
X-Vary-Options
BALANCEDTO
X-Optimization
SSPAppContext
X-Atraveo-Zone
X-Provisioner-Version
X-EdgeConnect-MidMile-RTT
XDomainRequestAllowed
X-App-Status
From
X-SRV
X-Domain-Checked
X-Id
X-EdgeConnect-Origin-MEX-Latency
NnCoection
X-LW-Web-Server
Bios
X-NginX-Server
X-Detected-Device
X-Restarts
Cteonnt-Length
ScoreTracker
AsisCache
IM-Version
Sid
X-Platform-Server
X-Span
X-DSMX-Render-MS
X-Cache-Source
Ec
X-AWS
X-GSL-Server
X-Cache-Provider
X-Webstats-RespID
X-Domino-CacheValidationWithETagReason
X-Domino-CacheValidationWithETagResult
X-Lifetime
X-REDIRECTSERVER
Paypal-Debug-Id
VAR-Cache
Content-Server
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
Machine
X-Desc
X-Actindo-RS
Cluster-ID
Hash
Rel
Web
X-Amz-Id-1
X-Varnish-Cache-Local
X-Server-By
X-Turpentine-Cache
X-Varnish-Currency
X-Varnish-Esi-Access
X-Render-Time
X-PG
Set-Cookie2
X-Appmachine-Environment
X-Custom-Header
X-DTC
X-Varnish-Esi-Method
X-Varnish-Set-Cookie
X-B2f-Not-Route
X-DSMX-Rewrite-MS
Il-Cl
Proxy-Cache
X-T3CacheTags
X-T3CacheInfo
X-Varnish-Store
OT-RequestId
X-App-Runtime
X-Runtime-Affili
Cache-Rule
X-T3Cache
X-Turpentine-Esi
Imx-Cookies-Used
X-NewRelic-App-Data
X-TempDebug
X-A
X-Cache-CFC
X-KoobooCMS-Version
X-Rack-CORS
X-Unbounce-Variant
X-Server-IP
X-Unbounce-PageId
Actual-Object-TTL
X-Frames-Options
X-Real-IP
X-We-Are-Hiring
X-Info
Fastly-Backend-Name
INCOMING-TIME
Keywords
X-Srv
ORIGIN
X-Server-Instance
X-IsCacheURL
RN-Server
NS-VaryByCustom-Key
X-DealerOn
X-HITS
WP-AdvCache-MemCached
X-Unbounce-VisitorID
Head
X-Sucuri-Cache
X-Cache-Set
X-Cluster-Node
X-Distributed-By
Xc
X-APP
X-Goog-Generation
Note
X-JG-Page-Cache
X-Depends
X-FIRSTBase
Description
Noq
X-Forwarded-Proto
Worker
X-Goog-Stored-Content-Length
X-MAT-GEO
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-SilverStripe-Cache
X-Backend-Name
Ram
X-Goog-Metageneration
X-Site:
IsMobile
PServer
X-ProxyInstancename
X-This-Proto
X-Cms-Mode
X-SDE-Name
X-Magento-Action
X-Jcms-Ajax-Id
Device-Type
CmsCacheEngine
X-Cache-Action
X-Varnish-Action
X-Hstore
Fw-Cache-Status
X-ACLR-Version
Fw-Via
Cpu
X-Dev
X-HydroSheep
X-Is-Mobile
X-Tile-Url
X-Hrouter
RequestId
X-AccessDev
X-Trace-Id
X-Apm-Telemetry-Syncmark
X-Response
X-SV
X-VC-TTL
X-RequestId
X-RDP
DrivedBy
ServerTokens
ServerSignature
X-Cache-On
X-CB-Server
X-Qnm-Cache
X-MrHost
X-OPNET-Transaction-Trace
X-Origin-Id
M
X-Server-Start-Time
X-Nitra-Side
X-Environment
X-Captured
X-HW
X-LB-Server
Logging-CorrelationId
X-7d-Trace-Id
X-Upstream-Backend
X-Cache-Level
N365rili
X-Enhanced-By
Sophnep-Edge-FX
X-GUploader-UploadID
X-PoweredBy
X-WR-MODIFICATION
X-7d-Instance-Id
X-Pressidium-NinukisWP-Ver
VServer
X-B
X-WorkerInstancename
Dynatrace
X-COUNTRY-CODE
X-Artvisual-Server
X-Smartcache-Keys
X-Varnish-URL
X-ManagedFusion-Rewriter-Version
Server-Ip
X-Varnish-Backend-Healthy
Nginx-Cache
Server-Id
X-ACCELERATE
X-Cache-Node
X-Distributor
X-Esi
X-Nginx
X-Hosting
Cpu:
X-Varnish-Error-Restart
X-Wikidot-Static-Cache
NZSpeedy
X-Wikidot-Backend
X-WP
NtCoent-Length
Noq:
X-Smartcache-Timeout
RATING
Ram:
X-CSRF-TOKEN
Servername
X-EC-Lua
X-Rewritten-By
X-Cache-Me-Harder
X-FastCGI-Cache
X-Stage
X-Pj-Cache-Time
X-Pj-Cache-Status
X-Time-Spent
Dispatcher
X-Header
Content-Instance
X-Backend-TTL
X-Cache-ID
X-Cms-Server
X-NewCloud-V-Cache
Cleartype
X-Pixelsilk-Version
Yoncu-Errno
Be
X-Pixelsilk-Server
X-VC-Enabled
X-Healthy
Device
Content-Cache
Prxy
Tracker
X-AppServer-Cache-Rule
X-SID
X-GRACE
X-Invoke-Duration
Content
X-Akamai-Edgescape
X-Forwarded-Host
X-Do-Esi
X-OpenCart-Lightning
X-Cache-Handler
X-Catalyst
WFE
X-HP-CAM-COLOR
Hamster
X-Secret
Accept-Language
Backend-Node
X-Oracle-DMS-ECID
X-CACHE-TTL
X-Company
X-Cache-Extended
X-Nginx-Request-Time
X-DEBUG
X-Old-Content-Length
X-RAMCache
X-Status
X-Content-Security-Policy-Report-Only
Session-Id
X-FreeTag-Count
X-PF-CACHE-FAILED
X-Serendipity-InterfaceLang
X-Serendipity-InterfaceLangSource
X-TB-M
X-WebNode
X-Pj-Cache-Key
X-Server-Generated
X-Server-Instance-Name
X-Box
X-GoCache-CacheStatus
X-Fedora-School-Id
XDisk
Response-Time
VC-NoCache
X-Cache-2
Cache-Control:
RouteID
MageStack-Cache-Lifetime
MageStack-Cache-Status
MageStack-Cacheable
MageStack-Config
If-Modified-Since
MageStack-Cache-Hits
Language
MageStack-Area
MageStack-Cache
X-Meta-MSThemeCompatible
MageStack-Debug
BKREF
X-Distil-CS
X-Generated
X-EZPublish-InstallationID
MageStack-Web-Node
MageStack-Loadbalancer
MageStack-PageSpeed
MageStack-Tag
B-Powered-By
AC-ELC
X-Member
X-Dw-Trace-Id
X-PBY
X-Pj-Cache-Gzip
X-Meta-Imagetoolbar
X-EZPublish-NodeID
X-Built-By
X-AISO-Server
MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
X-TempoPesquisa
X-UUID
X-VARITI-CCR
X-SeschatTemplateID
X-SeschatRedID
X-Seschat-URL
X-SeschatDID
X-SeschatLayout
X-Hcom-Styx-Info
Www.Aujourdhui.Com
Host-Name
PowerCDN
X-ASAP-Cache
Cdate
X-Bypass-Ssl-Transform
X-RealServer
X-Vhost-ID
Content-Generator
X-Server-Addr
X-Src-Webcache
X-4ormat-Cacheable
Provider
MSSmartTagsPreventParsing
X-RSS-CACHE-STATUS
Hosted-By
X-Title
X-Clara-ASAP
X-Layout
X-CCM
X-FCMS-Cache
X-DN-Cache-Control
X-Gyrobase-Publication
X-Pj-Cache-Flags
X-Pj-Cache-Expires
X-Accel-Expires
Disablevcache
X-Rq
X-Proto
Debug-Status
X-Mobile
X-Varnish-Cache-Control
X-DataDome
X-Max-Age
X-HostName
X-XTM-Node
Ctx
X-CacheResult
X-Ob-Mode
X-W3TC-Minify
X-Cache-Keep
Serverid
X-Cache-TTL-Remaining
X-Original-Host
X-Content-Type
X-DB-Content-Length
X-Search-Id
X-DPWN-IS-SECURE
X-Varnish-Max-Age
X-Checkout
X-Name
X-Hash
WWW
Ozcache
X-HA
CpuTime
X-Cluster
X-App
X-Matched-Rule
X-Expose-Took
X-Expose-Site
X-Nginx-VM-RT
X-Ocache
WSCLoggingUUID
VANITY-HOST
X-RequesterIP
X-Expose-Hostname
X-Expose-Generated
Thinkindot-CacheControl
REFRESH
HOST-SERVICE
Thinkindot-CacheControl-Type
Thinkindot-Control
X-ESI
X-Cache-Time
X-Apache2-RT-MicroSec
Httpd-Identifier
X-ESI-Enable
X-Flex-Evstart
X-Flex-Evend
X-Flex-Community
X-Flex-Lang
X-Flex-Lastmod
Content-ID
X-Flex-Tags
X-Flex-Tag
X-Device-Group
X-Cjtype
X-Request-Processing-Time
X-Pubstack
X-FFX-B
X-Request-Received
MageStack-Cache-Warning
Expiries
SiteName
Pool
X-Pb-Mii
X-Site-Name
X-WHOIS-Cached
X-Timing
X-Frame-Option
CommunityServer
E-Tag
Tempo
Hostname
X-E
X-Akamai-Transformed
X-Highwire-Sitecode
ReqUrl
MachineName
X-OCTOPOD
Expire
SS
Origin-Server
X-Brought-To-You-By
X-Client-Ip
QC-Key
QC-Hit
Powered-By-VeryCDN
QC-Time
Webserver
X-Rack-Cors
X-Old-Varnish
X-Sid
X-RemovedCookies
X-DeliveryServer
X-Delivered-By
X-Dynamic
X-LS-DEBUG
X-ProcessESI
X-PHP-Response-Code
X-Zendesk-Origin-Server
X-Webapp
Ttl
RSL-Trace-ID
Lb
X-Cache-Via
X-DDM-SERVER
X-Front-Cache
X-DDM-SERVER-UPDATED
X-ITKG-Cache-Tags
X-Batcache
X-Route
X-ProcessTime
X-Ser
X-Transaction-Id
X-Accel-Cache-Control
X-VERSION
X-IP-Address
X-Pageid
X-VCS-Host
X-VCS-Hit
X-VCS-Cacheable
X-VCS-Nrhit
X-VCS-Status
X-VCS-Url
X-VCS-Ttl
X-VCS-Cache-Server
X-VCS-Billing
X-Router
X-Provided-By
X-Router-Backend
X-SuperCache
X-UseReverse-Proxy
X-T
X-Powered-By-Anquanbao
"
X-NewsFlow-DoCache
X-Pass-Through
X-NewsFlow-Sitename
X-NGINX-Cache
X-Hit
X-Not-Cacheable
X-Remote-Addr
X-Faeria
X-Diehard
X-PageType
X-Diehard-Blocks-Added
X-Diehard-Blocks-Removed
X-Dynamic-Cache
X-Diehard-Tags
E-TAG
X-AISO-Cacheable
X-Venda-Hitid
EXT-CACHEEXPIRE
X-ORACLE-DMS-RID
Copyright
Requested-Host
Pv
Foglight-Request-UUID
Rt-Proxy-Cache
X-AISO-Cache
Max-Age
Svr
TP-Cache
Web-Server
TP-L2-Cache
Aurora-Node
X-BeResp-Ttl
X-NID
X-Obr-Rule
X-DOM
X-DEBUG-TTL
X-VhostID
X-Does-He-Have-Time
X-Beatles-Hits
X-Origin-Cache
X-Uid
Apache
Lookup-Cache-Hit
ServerIP
X-PM-ID
X-RateLimit-Remaining
X-UA
X-Me
X-C
X-Cacheable-TTL
X-BServer
X-BPool
Pw-Value
Fpc-Expire
X-Your-GrandPa-Would-Wait
X-Would-Your-GrandPa-Wait
X-Server-Node
X-Static
X-Magento-Cache-Debug
X-TTL-Age
X-Magento-Cache-Control
User-Cache-Control
X-ASAP-Age
X-Airee-Node
Url-Hash
X-Bcwwwid
X-Built-With
X-CPU-Time
X-Cache-Detail
Powerd-By
P
D
ClientIP
F5-IpCliente
Gzip
Og
Kp-EeAlive
X-LOCATION
X-MCF-ID
X-Unique-Id
X-Ghost-Cache-Status
Served-From
X-Compressed-By
X-Gannett-Site-Version
X-FG-RequestId
X-Fstrz
X-Author
X-Node-Name
X-MSEdge-Ref
X-Pagely-Cache
X-Phpwcms-Page-Processed-In
X-Phpwcms-Release
Cache-Status
Brandcast-Load-Balancer
Progma
X-VG-WebCache
X-Page
X-Amz-Meta-Cb-Modifiedtime
X-AppServer-Status
X-Middleton-PageSpeed
AGI-Request-ID
Debug-Cache-Control
MwpReleaseVersion
X-AG-MIPS
X-Clx-Request
X-Forwarded-Server
Debug-Expires
X-MSU-SOURCE
X-ClusterID
X-Farm-Server
At-Isb
X-Varnish-Instance
At-Shoptype
Atp-Isdpp
Brandcast-Brand-Id
X-Cache-Backend
X-Time-Microsecs
X-Ratelimit-Remaining
X-HAProxy
X-Fe
X-Hosts-Backend
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Instance-Name
User-Agent