Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Accept-Ranges
Link
ETag
X-Content-Type-Options
P3P
X-Pingback
X-XSS-Protection
X-Frame-Options
X-AspNet-Version
X-Cache
Content-Language
Age
CF-RAY
X-UA-Compatible
Strict-Transport-Security
Via
X-Adblock-Key
Access-Control-Allow-Origin
X-Language
X-Template
X-Check
X-Varnish
X-Buckets
X-Cacheable
X-Generator
X-Drupal-Cache
Content-Location
X-Request-Id
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Powered-By-Plesk
X-Type
MS-Author-Via
X-Cache-Group
X-Pass-Why
X-Runtime
WP-Super-Cache
X-Powered-CMS
Status
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
Ngpass-Ngall
X-Download-Options
Host-Header
X-ShopId
X-ShardId
X-Alternate-Cache-Key
X-Dc
X-UA-Device
Access-Control-Allow-Credentials
Keep-Alive
Access-Control-Allow-Headers
X-Iinfo
X-Via
Content-Security-Policy
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Tumblr-User
Access-Control-Allow-Methods
X-Mod-Pagespeed
X-Tumblr-Pixel-1
X-Logged-In
X-Backend
X-Pad
X-Served-By
X-Tumblr-Pixel-2
X-Cache-Status
X-ServedBy
X-PC-Key
X-PC-Hit
Powered-By
X-Xss-Protection
X-Server
X-Contextid
X-CDN
X-FRAME-OPTIONS
Upgrade
X-Host
X-Cache-Hit
Content-Encoding
X-Port
X-PC-Date
X-PC-AppVer
X-PC-Host
X-Tumblr-Pixel-3
X-Timer
X-Robots-Tag
X-Accel-Version
X-Request-ID
X-Rack-Cache
X-Cache-Lookup
SPRequestGuid
MicrosoftSharePointTeamServices
X-Cnection
X-Varnish-Cache
X-SharePointHealthScore
X-Amz-Cf-Id
MicrosoftOfficeWebServer
X-Server-Powered-By
X-Request-Country
X-MS-InvokeApp
Alt-Svc
X-Page-Speed
X-XRDS-Location
X-Turbo-Charged-By
X-Safe-Firewall
Rating
X-AH-Environment
CF-Cache-Status
X-Content-Powered-By
X-Tumblr-Content-Rating
X-Content-Digest
X-Tumblr-Pixel-4
X-W-DC
X-Node
X-Cache-Enabled
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
X-GitHub-Request-Id
X-PhApp
X-FullPageCaching
Public-Key-Pins
X-Webserver
Content-Security-Policy-Report-Only
Request-Id
X-INKT-URI
X-INKT-SITE
SPIisLatency
SPRequestDuration
Composed-By
Timing-Allow-Origin
Cf-Railgun
Served-By
X-Amz-Id-2
X-Amz-Request-Id
X-Firenze-Processing-Times
Permitted-Cross-Domain-Policies
X-HeyJason
X-Proxy-Cache
Liferay-Portal
X-Hyper-Cache
X-SERVER
Surrogate-Key-Raw
X-Pantheon-Endpoint
X-Styx-Version
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
Xkey
X-Spip-Cache
Access-Control-Expose-Headers
Access-Control-Max-Age
Surrogate-Key
X-Content-Security-Policy
X-Server-Name
Charset
X-Swift-CacheTime
X-Swift-SaveTime
X-CF-Powered-By
X-Drupal-Dynamic-Cache
EagleId
Content-MD5
X-Tumblr-Pixel-5
Content-Script-Type
X-CDN-Pop-IP
X-CDN-Pop
Content-Style-Type
Grace
X-FW-Hash
Access-Control-Allow-Method
X-Hits
X-ContextId
X-FW-Type
X-FW-Serve
X-FW-Static
X-FB-Debug
X-Dw-Request-Base-Id
X-XN-Trace-Token
X-XN-XNHTML
X-VWS-Id
X-AWS-Id
X-LJ-Flow-ID
Public-Key-Pins-Report-Only
X-Clacks-Overhead
X-Device
X-Tumblr-Adult-Blog
Refresh
X-User-Agent
X-VCache
X-Fastly-Request-ID
X-Jimdo-Wid
X-Jimdo-Instance
X-Backend-Server
X-Cache-Config
Real-Hostname
X-TNCMS
X-Loop
X-Cache-Server
X-Umbraco-Version
X-DDC-Arch-Trace
X-Cloud-Trace-Context
X-LiteSpeed-Cache
X-Generated-By
X-ServerName
X-MiniProfiler-Ids
X-Tumblr-Pixel-6
X-Cache-Result
Edge-Control
X-Cached-By
Cartoon
X-Hostname
X-Age
Fastly-Debug-Digest
X-Cached
X-Px
X-Url
PageSpeed
X-Powered-By-360WZB
X-Outils-CS
WZWS-RAY
X-HOST
X-DynaTrace-JS-Agent
Surrogate-Control
NS-RTIMER-COMPOSITE
X-Whom
X-DynaTrace
X-CMS-Version
Fpc-Cache-Id
TCN
Response
X-Forwarded-For
X-WebKit-CSP
X-Sol
X-Middleton-Display
X-Middleton-Response
Display
X-URL
Imagetoolbar
X-Cdn
X-Handled-By
Rt-Fastcgi-Cache
X-From
DynaTrace
X-TTL
X-Varnish-Cache-Hits
X-Msg-2-Log
Product
X-AspNetWebPages-Version
X-Recruiting
Front-End-Https
X-Do-Not-Hack
X-Content-Options
ServedBy
X-EC-Security-Audit
X-Newrelic-App-Data
Access-Control-Request-Method
X-LiteSpeed-Cache-Control
X-Servedby
IBM-Web2-Location
Fhost
X-NetCat-Version
Akamai-IP
Alternate-Protocol
X-Country-Code
X-Micro-Cache
Page-Completion-Status
X-BC-Stapler
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Track
X-FORWARDED-FOR
X-VARNISH-Cache
Generator
X-ApacheServer
X-Content-Encoded-By
X-Passed-To-DLL
X-Passed-To
X-Original-Request
X-Returned-From-DLL
X-SRCache-Fetch-Status
X-Hosted-By
X-Actual-URL
X-SRCache-Store-Status
X-Returned-From
X-UD-Method
Origin
X-Passed-To-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Stale
X-App-Hosting
X-Passed-To-PostProcessResponse
X-Varnish-TTL
X-Varnish-Host
X-I
X-Matrix-Server
X-Matrix-Proxy
X-Varnish-Backend
Powered
X-Expires-Orig
X-Platform
X-CacheServer
X-Origin
Content-Encoding-Handler
X-Abuse
ServerName
X-Version
Powered-By-ChinaCache
X-Art-Request-Id
X-Cache-Age
X-PERF
X-Firenze-Processing-Time
X-Server-ID
X-VTEX-Janus-Router-Backend-App
Ag-Send-Time
X-VTEX-Cache-Status-Janus-ApiCache
X-Powered-By-VTEX-Janus-ApiCache
X-Cache-TTL
X-Vtex-Processed-At
X-Powered-By-VTEX-Janus-Edge
X-Vtex-Remote-Cache
X-VTEX-Cache-Status-Janus-Edge
Ag-Server-Time
Ag-Execution-Time
X-Vtex-Processado-Em:
No
Magicmarker
X-S
X-Daa-Tunnel
X-Location-Id
X-Microcachable
Host
USPLoggingUUID
X-Magnolia-Registration
Surrogate-Keys
X-Source
Content-Disposition
X-ATG-Version
Content-Hash
X-BS
X-I-Sp
MIME-Version
X-Varnish-Cacheable
X-Cache-Rule
X-Cache-Lifetime
X-Engine
X-Upstream
X-OneAgent-JS-Injection
X-Zen-Fury
X-Request-Time
X-Developer
X-Director
X-Response-Time
X-Goog-Hash
X-Cache-Debug
X-Varnish-Seen-By
X-Route-Server
X-Varnish-RemainingTTL
X-Device-Type
X-SDS
X-Cache-Info
Node
X-RESOURCE
X-URLSCHEME
X-Gamma-Serve
X-CJ-Soft
X-Translation
X-Microcache-Status
X-DefendeR-Runtime
Lsrequestid
X-DefendeR-Status
X-DNS-Prefetch-Control
X-Cache-Expires
ServerID
X-Duration
X-Powered-By-Server
X-Drectory-Script
Fastcgi-Cache
X-Cache-Control-Orig
Content-Security-Policy-Rerport-Only
Server-Info
X-Geo-IP
Version
X-B-Cache
Proxy-Connection
X-PwB-Node
SN
X-Front
X-Server-Id
X-Instart-Request-ID
X-Revision
X-NoCache
X-Varnish-Age
Proxy-Agent
X-Vcap-Request-Id
X-Rocket-Nginx-Bypass
X-Fastcgi-Cache
X-Speed-Cache
X-Platform-Router
X-Platform-Processor
X-Speed-Cache-Key
X-N
Location
X-Geo-IP-Country
Arr-Disable-Session-Affinity
Buuteeq-Source
X-Geo-IPV
X-Geo-IP-Region
Edge-Control-Message
X-Geo-IP-Metro
X-Time
X-FW
X-SV-Pid
X-Cache-Tags
Nitro-Cache
X-SV-Nginx-Duration
X-SV-FromDBCache
X-SV-Duration
X-SV-CreatedAt
PICS-Label
X-Varnish-RemainingLife
X-Varnish-ObjectSource
X-ACMCache
Last-Published
X-Varnish-GracePeriod
CC-CACHE
X-Processing-Time
X-Real-Server
X-Cache-Operation
S
X-Varnish-Server
Cache-Key
Webluker-Edge
X-Cookie-Domain
X-Grace
X-SV-CacheTags
X-SV-Edge
X-Correlation-Id
X-ServerID
X-SV-Expires
X-Nurl
X-Nhost
X-NFE
SEOMOZ
X-Akamai-Device-Model
X-Akamai-Device-Characteristics
MJ12bot
X-LB
Pics-Label
X-GeoIP-Country-Code
X-Page-Cache
X-Dispatch
X-Amz-Version-Id
X-Xrds-Location
X-Varnish-HitMiss
RTSS
X-Content-Age
SVR
X-Hypernode
X-Storage
X-Varnish-Count
Cache
HAVer
X-Cache-Key
X-Platform-Cache
HCVer
X-CDN-Node
X-Client-IP
Accept-Charset
X-CDN-Cache-Status
X-NB-Cached-Page
X-GeoIP-Country-Name
X-Orig-Vary
Filter-Revision
X-Directory-Script
X-StackifyID
X-Kinsta-Cache
X-ClientSide-Caching
X-Processed-By
Retry-After
X-Server-Upstream
X-Varnish-IP
X-AOL-HN
Req-Id
Nodo
X-Purge-URL
Srv
A-Powered-By
X-SE-Debug
X-Mobilized-By
Mobiquo-Is-Login
Backend
Qs-Cache
X-Sys-Req-ID
X-Frontend
X-UPSTREAM
X-Yadis-Location
X-Framework
WSR-Cache
X-Adobe-Content
X-Adobe-Loc
X-Server-Response-Time
X-Edge-Location
X-App-Server
W
X-Varnish-Hits
X-WEBSERVER
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Application-Context
AMF-Ver
NetMindSessionID
Accept-Encoding
Section-Io-Id
Content-Transfer-Encoding
X-Purge-Host
X-Config-By
X-Mobile-URL
X-Discourse-Route
COMMERCE-SERVER-SOFTWARE
X-Nitra-Side
Logging-CorrelationId
NODE
X-Server-Start-Time
X-Origin-Id
X-Cache-Doesi
IISExport
X-Config-Blacklist-Version
X-Garden-Version
X-Blog
X-ORACLE-DMS-ECID
X-NginX-Upstream-Response-Time
SSPAppContext
Cm-Server
X-PF-Uncompressing
X-NginX-Upstream-Status
X-NginX-Node
X-Cache-Engine
X-NginX-Upstream-Addr
X-CDN-Forward
X-AbeBooks-Version
X-NginX-Cache-Status
X-LW-Web-Server
Author
X-Empowered-By
Frame-Options
X-Trace
X-Nginx-Host
X-Debug
X-GeoIP
X-BKSrc
X-NginX-Cache
X-Varnish-Hostname
X-Plat-Va-Ip
X-Plat
X-Plat-Be-Ip
X-Session-Reinit
X-Browser
X-Supported-By
Cached
X-Grid-Server
Host-Service
X-XTM-Node
X-V
X-F-Cache
Eomportal-Instance
X-Balanceador
X-Machine-Name
Id
SRV
Head
CacheControlHeader
X-Cocoon-Version
XDomainRequestAllowed
X-Ttl
Allow
Pool-Info
Ibf5scheme
X-Highwire-SessionId
Myheader
X-TempDebug
X-IIJ-Cache
X-Resolver-IP
X-AOL-SNH
X-SmartBan-Host
X-Jphone-Copyright
Front
X-PG
X-ARC
X-Worker
X-Member
X-LB-Server
X-SmartBan-URL
X-Highwire-RequestId
X-Twitter-Response-Tags
X-Connection-Hash
X-Transaction
S-Cnection
X-WR-Flags
IM-Version
X-Dispatcher
X-HW
X-Amz-Meta-S3cmd-Attrs
Thanks
X-NginX-Server
WWW-Authenticate
X-Symfony-Cache
Server-Name
X-Cache-Fix
X-Cache-Control
X-Real-IP
X-Flow-Powered
X-Cache-PageType
X-IsCacheURL
X-Varnish-Ttl
X-BackendServer
X-Optimization
Keywords
X-Hosts-Backend
Rewriter
X-Webstats-RespID
Cneonction
X-Varnish-Grace
CT
X-Sov
X-Rot
X-Analytics
Backend-Timing
VAR-Cache
X-EDGECONNECT-GUID-DEBUG
A
X-HTML-Minification-Powered-By
X-Distributed-By
X-RiS-UFDI
ORIGIN
X-Nginx-Cache
X-Avvio-Cms-Cacheload
X-JG-Page-Cache
X-Airee-Node
X-Dynatrace
X-Client-Image-Vid
Cpu
Noq
Ram
X-EPiphany-Vid
X-Atraveo-Varnish-Server-Id
X-Atraveo-TTL
X-Atraveo-Zone
X-Amz-Storage-Class
X-Vary-Options
Mime-Version
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
X-Atraveo-From-Varnish-Cache
X-Vhost
X-Atraveo-Cache-Control
X-Atraveo-ETag
X-Client-Vid
X-Atraveo-Expires
X-Unique-ID
X-TTFB
X-Source-ID
X-Force
X-PRAM
X-TTFB-L
X-App-Status
X-Domain-Checked
X-Pagename
X-Hit-Cache
X-Provisioner-Version
X-Varnish-Debug-Age
X-SmugMug-Values
X-Varnish-Debug-TTL
X-Captured
X-Webcelerate
Web
BALANCEDTO
Actual-Object-TTL
X-Server-Instance
X-Unbounce-PageId
X-Unbounce-VisitorID
X-Unbounce-Variant
Referrer-Policy
X-Prefetched
Smug-CDN
X-Edge-IP
X-Env
Ngpass-Vcall
X-WA-Info
X-SDE-Name
X-SmugMug-Hiring
X-FIRSTBase
X-Sucuri-ID
X-HP-Trace-Project
X-HP-Trace-ID
X-WP
X-Smartcache-Timeout
X-Dns-Prefetch-Control
MW-Webserver
X-Trace-Id
ServerTokens
ServerSignature
Dynatrace
Bios
Cmsid
P-WS
P-LB
X-Distributor
X-Restarts
MC
X-REDIRECTSERVER
X-Dev
X-Cms-Mode
X-ID
Beyond-Iis
Cmstype
VServer
Worker
X-Varnish-RemainingGrace
X-Smartcache-Keys
X-SRV
X-ServerIndex
X-HOSTNAME
X-Detected-Device
X-Actindo-RS
X-Goog-Stored-Content-Length
X-Pressidium-NinukisWP-Ver
X-Goog-Stored-Content-Encoding
X-MAT-GEO
X-Goog-Storage-Class
Cluster-ID
SS
From
NnCoection
X-Accel-Expires
D
Description
X-Goog-Metageneration
CLMOB
X-Unique-Id
X-Server-IP
X-GUploader-UploadID
X-Desc
X-Invoke-Duration
X-Goog-Generation
Real-Server
X-Cache-Level
Paypal-Debug-Id
SBGI-10
X-Varnish-Backend-Healthy
SBGI-1
X-Cache-Action
X-SV
X-Esi
X-DealerOn
NLCacheNote
X-Runtime-Affili
SBGI-5
X-Varnish-Error-Restart
WP-AdvCache-MemCached
X-Magento-Tags
SBGI-RealPath
X-Id
X-Ser
X-Header
Resin-Trace
X-Rack-Cors
SBGI-RenderTime
CmsCacheEngine
SBGI-Device
SBGI-7
X-Varnish-Instance
X-Cache-Set
X-Srv
SBGI-9
Content-Server
AsisCache
X-Lifetime
Sophnep-Edge-FX
N365rili
X-Cache-Var-Map
X-Search-Id
X-Cache-Source
X-GSL-Server
X-ORACLE-DMS-RID
X-Node-Name
X-Timing
Warning
X-CDN-COMPRESS
X-WR-MODIFICATION
Ec
Fw-Via
X-Cache-Var
X-Site:
Ksid
X-MrHost
Sid
X-ASAP-Cache
X-Key
ScoreTracker
X-RequestId
X-Server-By
X-B
X-Clara-ASAP
OT-RequestId
Cache-Rule
X-DTC
VnhCdn-Status
X-Secret
Access-Control-Request-Headers
X-T3Cache
X-T3CacheInfo
X-Rebelmouse-Cache-Control
X-DSMX-Rewrite-MS
X-RDP
Proxy-Cache
X-Cache-On
X-Apm-Telemetry-Syncmark
X-Rebelmouse-Surrogate-Control
X-Response
X-B2f-Not-Route
X-T3CacheTags
X-DSMX-Render-MS
Prxy
X-Varnish-Action
Device-Type
X-Cache-Provider
Set-Cookie2
X-Cache-Node
Nginx-Cache
Max-Age
X-Frames-Options
Ttl
Imx-Cookies-Used
X-Hiawatha-Cache
MageStack-Tag
MageStack-Web-Node
X-Ob-Mode
MageStack-Debug
MageStack-Cache-Lifetime
X-VC-TTL
X-Backend-Name
MageStack-Loadbalancer
X-Upstream-Backend
X-Signature
MageStack-Config
X-Pagely-Cache
TP-L2-Cache
Servername
TP-Cache
Ctx
MageStack-Cacheable
CommunityServer
MageStack-Cache-Hits
MageStack-Cache
X-Ratelimit-Remaining
MageStack-Cache-Status
MageStack-Area
X-Magento-Action
X-Rack-CORS
MageStack-PageSpeed
NtCoent-Length
X-DOM
Og
X-Platform-Server
Pool
Accept-Language
X-SID
X-Phpwcms-Page-Processed-In
X-Fstrz
X-OPNET-Transaction-Trace
X-Phpwcms-Release
Kanooh-Host
X-Generated
X-Middleton-PageSpeed
X-Environment
B-Powered-By
Xc
X-Bcwwwid
X-PoolMember
DrivedBy
X-Is-Mobile
SAVVIS
If-Modified-Since
X-Amz-Id-1
X-Appmachine-Environment
X-CB-Server
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-HAProxy
X-Content-Security-Policy-Report-Only
X-FastCGI-Cache
X-LW-T
X-OCTOPOD
X-Time-Microsecs
X-Server-Instance-Name
X-Server-Generated
X-Proxy-Cache-Key
Il-Cl
X-DN-GyrobaseID
X-E
X-Forwarded-Proto
PowerCDN
X-Depends
X-Varnish-Currency
X-Turpentine-Cache
X-HP-CAM-COLOR
X-ProxyInstancename
X-Info
E-TAG
Expire
Fastly-Restarts
X-Company
X-Varnish-Esi-Access
X-Enhanced-By
X-Application
VC-NoCache
X-A
X-Ocache
WFE
X-Varnish-Store
Atp-Isdpp
X-Varnish-Esi-Method
X-Cache-Extended
X-Box
X-Varnish-Set-Cookie
X-Hstore
X-Remote-Addr
T
X-Nginx
X-Wm-VIP
Copyright
X-7d-Trace-Id
X-Cache-2
X-DN-Cache-Control
X-HITS
X-7d-Instance-Id
X-Wm-1
X-Cache-Keep
X-Wikidot-Static-Cache
X-We-Are-Hiring
X-CacheResult
Cdate
X-Cache-TTL-Remaining
X-Hrouter
X-Wikidot-Backend
X-DEBUG
X-PoweredBy
X-TempoPesquisa
X-CSRF-TOKEN
X-RealServer
X-Seschat-URL
X-Litespeed-Cache-Control
Server-Ip
HOST-SERVICE
Provider
INCOMING-TIME
X-APP
M
NZSpeedy
X-SeschatTemplateID
X-Turpentine-Esi
X-4ormat-Cacheable
IsMobile
X-Rewritten-By
X-ManagedFusion-Rewriter-Version
X-SeschatLayout
X-SeschatRedID
X-AccessDev
Content-Generator
HitInfo
PServer
Mto-License-Status
X-Healthy
X-COUNTRY-CODE
X-TB-M
NS-VaryByCustom-Key
X-Cluster-Node
X-Stage
X-Hosting
X-SeschatDID
Server-Id
X-ACCELERATE
X-Do-Esi
X-Device-Group
X-Flex-Tag
X-Flex-Community
X-Flex-Lastmod
X-Obr-Rule
X-Flex-Evend
X-Pb-Mii
MageStack-Cache-Warning
X-Flex-Lang
X-ESI-Enable
X-FFX-B
X-Hcom-Styx-Info
X-Vhost-ID
X-ATP-Server
RequestId
X-Flex-Evstart
X-Hash
X-Max-Age
X-Mii-Cache-Hit
X-Flex-Tags
X-Nocache
Www.Aujourdhui.Com
X-Domino-CacheValidationWithETagResult
X-Domino-CacheValidationWithETagReason
Fastly-Backend-Name
Host-Name
X-N-ViewType
X-Serendipity-InterfaceLangSource
X-Contact
X-Cache-Device-Type
X-Faeria
X-Fedora-School-Id
X-NewsFlow-DoCache
X-Firewall
XDisk
X-Webapp
X-Router
X-RAMCache
X-Router-Backend
X-Status
X-UseReverse-Proxy
X-NewsFlow-Sitename
X-IP-Address
Url-Hash
X-ACLR-Version
X-Tile-Url
X-Custom-Header
X-Catalyst
At-Shoptype
At-Isb
X-Security
X-Not-Cacheable
X-WHOIS-Cached
Backend-Node
X-Render-Time
X-Old-Content-Length
X-Nginx-Request-Time
X-Does-He-Have-Time
X-Cms-Server
X-Route
X-Varnish-Cache-Local
X-Would-Your-GrandPa-Wait
X-TTL-Age
X-CCM
X-Beatles-Hits
X-Uid
X-RateLimit-Remaining
X-Gyrobase-Publication
Be
ServerIP
X-Your-GrandPa-Would-Wait
Apache
RouteID
Cache-Control:
Session-Id
X-AWS
X-Jcms-Ajax-Id
APP-VERSION
X-SilverStripe-Cache
Note
Http
Version-Epoch
X-FreeTag-Count
X-Serendipity-InterfaceLang
X-PM-ID
X-DataDome
GenSvr
X-Geo
User-Agent
X-AISO-Server
Cteonnt-Length
Origin-Server
Content
X-HostName
Dispatcher
X-Mobile
X-Author
X-Dw-Trace-Id
LBVIS
X-Ar-Debug
X-ASAP-Age
X-Bypass-Ssl-Transform
LBC
Apachenode
X-Cluster-Host
Response-Time
X-Runtime-Memory
X-Xhr-Current-Location
AC-ELC
QC-Hit
X-NewRelic-App-Data
X-EPiLogOnScreen-PostUrl
X-EPiLogOnScreen
X-EdgeConnect-Origin-MEX-Latency
DB-Nickname
X-MSU-SOURCE
Progma
X-AppServer-Cache-Rule
X-AppServer-Status
X-WorkerInstancename
X-Hosting-Env
X-EdgeConnect-MidMile-RTT
QC-Time
X-Requested-Page
QC-Key
BKREF
User-Cache-Control
WSCLoggingUUID
X-GRACE
X-Egnyte-Request-Id
X-Clx-Request
X-Akamai-Edgescape
X-FCMS-Cache
Expiries
X-Litespeed-Tag
X-Hit
X-PBY
Edgecast
X-RequesterIP
X-Amz-Meta-Cb-Modifiedtime
Vacache
X-Artvisual-Server
X-App
X-EZPublish-InstallationID
X-EZPublish-NodeID
X-Span
Hamster
X-Varnish-URL
X-Proto
X-Server-Addr
X-Src-Webcache
X-Gannett-Site-Version
X-Oracle-DMS-ECID
X-T
X-Cache-Me-Harder
X-Pj-Cache-Status
X-Mod-Oboe-PS
Serverid
X-UUID
HostName
Disablevcache
X-VARITI-CCR
X-BPool
Language
VANITY-HOST
X-BServer
X-Service-Location
X-Content-Parsed-By
X-Pubstack
X-Request-Processing-Time
X-Request-Received
X-Built-By
EXT-CACHEEXPIRE
X-Region
X-Checkout
X-Cache-Ua
X-SSL-Protocol
X-Nginx-Cache-Status
X-Content-Type
X-WebNode
WWW
MageStack-Cacheable-Reason
X-W3TC-Minify
MageStack-Response-Ttl
X-POPSUGAR-Server-Name
SLB
X-Varnish-Max-Age
X-Title
X-PS-MURDOCK-ORIG-FILEEXT
X-Frame-Option
X-Layout
X-Distil-CS
X-Cacheable-TTL
X-PS-MURDOCK-ORIG-PROTOCOL
X-Rq
X-SSL-Cipher
X-DB-Content-Length
X-This-Proto
X-HA
X-PS-MURDOCK-CASE-NORMALIZATION
X-ProcessTime
X-DDM-SERVER
X-DDM-SERVER-UPDATED
X-Logword
X-Cache-ID
X-Cache-Via
DeleGate-Ver
Web-Head
X-Magento-Lifetime
X-Pageid
X-Site-Name
Lookup-Cache-Hit
X-Session-ID
X-Backend-TTL
X-PF-CACHE-FAILED
X-Provided-By
TMP
X-DEBUG-TTL
Beon-Cache-Status
Exires
HA-Front
Aoestatic
X-VC-Enabled
X-Time-Spent
X-Pixelsilk-Version
X-Pixelsilk-Server
X-NewCloud-V-Cache
ResourceTag
RSL-Trace-ID
Redirect
Public-Extension
LB
Orgin-Server
X-SuperCache
X-Tags
X-Pj-Cache-Time
ReqUrl
X-Pj-Cache-Key
X-Powered-By-Anquanbao
XX
X-Zendesk-Origin-Server
X-Zendesk-User-Id
Server-ID
X-Beresp-Ttl
X-LOCATION
X-Original-Host
X-Pj-Cache-Expires
X-Pj-Cache-Flags
X-CACHE-TTL
X-Pj-Cache-Gzip
X-Reason-Bp
X-VCS-Url
X-VCS-Billing
X-VCS-Cache-Server
X-Tradeindia-SMgmt
Cleartype
Content-Instance
X-Tradeindia-Request-GUID
X-VCS-Cacheable
X-VCS-Hit
X-VCS-Ttl
X-Transaction-Id
X-Varnish-Cache-Control
X-VCS-Status
X-VCS-Host
X-VCS-Nrhit
X-Obj-Ttl
X-Cache-Served
Served-From
X-Nginx-Page-Cache
X-Compressed-By
X-FG-RequestId
Thinkindot-CacheControl
REFRESH
X-Location
X-JSESSIONID
X-AISO-Cacheable
X-AISO-Cache
X-CO-Host
X-ETag
X-Ghost-Cache-Status
Thinkindot-CacheControl-Type
Thinkindot-Control
X-Highwire-Sitecode
X-Feed
X-Matched-Rule
X-Nginx-VM-RT
X-SATserver
X-Original-IP
X-Expose-Took
X-Expose-Site
X-Cache-Handler
X-Apache2-RT-MicroSec
X-ESI
X-Expose-Generated
X-Expose-Hostname
SiteName
P
Charly
X-LS-DEBUG
Apple-Itunes-App
NKBVHEADER
X-B3-Traceid
BlockPHPCallEnd
X-HASH
X-DeliveryServer
X-AREQUESTID
X-9XB-Server
X-ASEN
X-AUSERNAME
X-Client-Ip
X-DB-NAR
X-Fpc
X-UltraCart-Critical-Path-CSS-Key
X-UltraCart-Critical-Path-CSS-Injected
X-UltraCart-Inject-Critical-Path-CSS
X-UltraCart-Server-Round-Trip
From-Origin
"
X-Sn-Servicetimems
X-Sentry-Token
X-Orig-Host
X-MCF-ID
X-Powered-By-Home.Pl
X-Ratelimit-Limit
X-Ratelimit-Reset
X-Theme
Aurora-Node
MSThemeCompatible
MSSmartTagsPreventParsing
Svr
X-Cache-Backend
X-Goog-Meta-Replace
X-Goog-Meta-Policy
Httpd-Identifier
Content-ID
F5-IpCliente
ClientIP
Gzip
Powerd-By
X-Farm-Server
X-Instance-Name
X-Meta-Imagetoolbar
Machine
Hosted-By
MwpReleaseVersion
X-AG-MIPS
X-RSS-CACHE-STATUS
X-Cache-Why
CD1
AGI-Request-ID
X-Meta-MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
X-SL-Norewrite
X-SL-Notranslate
X-UA
Cache-Status
Brandcast-Load-Balancer
Ews
X-Web-Node
SERVER-IP
WP-Cache
V-Cache
X-Test
X-DynamicCache
OutputRewritten
X-IP
X-BC
X-MCB-Server
X-Protected-By
X-VhostID
X-Accel-Cache-Control
X-Batcache
X-NGINX-Cache
X-BeResp-Ttl
Debug-Status
X-MOBILE
Brandcast-Brand-Id
X-OpenCart-Lightning
Pw-Value
Fpc-Expire
X-Memcached
X-FarmId
X-Mobile-Device
X-Powered-Developer
X-TargSmaku
X-Venda-Hitid