Threat Level: green Handler on Duty: Russell Eubanks

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Connection
Set-Cookie
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Accept-Ranges
ETag
Link
X-Pingback
X-Content-Type-Options
P3P
X-AspNet-Version
X-XSS-Protection
X-Frame-Options
X-Cache
Content-Language
Age
CF-RAY
X-UA-Compatible
X-Adblock-Key
Via
Keep-Alive
Strict-Transport-Security
X-Template
X-Check
X-Language
X-Buckets
X-Varnish
Access-Control-Allow-Origin
X-Cacheable
Content-Location
X-Generator
P3p
X-Drupal-Cache
Status
X-Hacker
X-Ac
X-Request-Id
X-AspNetMvc-Version
X-Iinfo
X-Powered-By-Plesk
MS-Author-Via
X-Runtime
X-Type
X-Cache-Group
X-Pass-Why
WP-Super-Cache
X-Powered-CMS
Ngpass-Ngall
Access-Control-Allow-Credentials
Host-Header
X-Xss-Protection
X-Cache-Hits
X-Mod-Pagespeed
X-UA-Device
X-Pad
Content-Security-Policy-Report-Only
X-ShopId
X-Dc
X-ShardId
X-Alternate-Cache-Key
X-Via
X-Logged-In
Access-Control-Allow-Headers
X-Backend
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Tumblr-User
X-Tumblr-Pixel-1
X-Host
Access-Control-Allow-Methods
X-ServedBy
X-ContextId
X-Served-From-Cache
X-CDN
X-Server
X-Tumblr-Pixel-2
X-PC-Key
X-PC-Hit
X-Served-By
Content-Security-Policy
X-Cache-Hit
X-Cache-Lookup
X-Port
MicrosoftOfficeWebServer
X-Robots-Tag
Powered-By
MicrosoftSharePointTeamServices
X-Rack-Cache
X-Tumblr-Pixel-3
SPRequestGuid
X-Accel-Version
X-SharePointHealthScore
X-PC-Date
X-PC-AppVer
X-PC-Host
X-Varnish-Cache
X-Request-Country
X-XRDS-Location
X-Safe-Firewall
X-Cache-Status
X-MS-InvokeApp
X-Amz-Cf-Id
X-Cnection
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
X-Page-Speed
Content-Encoding
X-Ua-Compatible
X-W-DC
X-AH-Environment
X-FullPageCaching
X-Turbo-Charged-By
X-Webserver
X-PhApp
X-Firenze-Processing-Times
X-INKT-SITE
X-INKT-URI
Upgrade
X-Request-ID
CF-Cache-Status
X-Content-Digest
Rating
Composed-By
Request-Id
X-Tumblr-Content-Rating
Served-By
X-GitHub-Request-Id
X-Tumblr-Pixel-4
SPIisLatency
SPRequestDuration
X-Cache-Enabled
X-Content-Powered-By
Liferay-Portal
Public-Key-Pins
Alternate-Protocol
X-Amz-Id-2
X-Amz-Request-Id
X-Node
X-Spip-Cache
X-Styx-Req-Id
X-Styx-Version
X-Pantheon-Styx-Hostname
X-Pantheon-Endpoint
X-Proxy
Cf-Railgun
X-Hyper-Cache
X-XN-Trace-Token
X-XN-XNHTML
X-Server-Name
X-SERVER
X-Proxy-Cache
Alt-Svc
X-CF-Powered-By
X-Timer
Access-Control-Expose-Headers
Content-Script-Type
Timing-Allow-Origin
Content-Style-Type
X-Server-Powered-By
Permitted-Cross-Domain-Policies
X-HeyJason
Refresh
Charset
Access-Control-Allow-Method
X-Content-Security-Policy
X-FB-Debug
X-CDN-Geo
X-CDN-Any-IP
X-CDN-Geo-IP
Public-Key-Pins-Report-Only
X-Powered-By-360WZB
Access-Control-Max-Age
X-Hits
X-VCache
X-Tumblr-Pixel-5
Cartoon
X-Clacks-Overhead
X-Swift-SaveTime
X-Umbraco-Version
X-Swift-CacheTime
X-Cache-Server
EagleId
X-FW-Hash
X-Loop
Real-Hostname
X-Permitted-Cross-Domain-Policies
X-Cached-By
X-Cache-Result
X-Device
X-FW-Serve
X-FW-Type
X-FW-Static
X-TNCMS
X-Backend-Server
X-Fastly-Request-ID
X-Cached
X-DynaTrace-JS-Agent
X-User-Agent
X-Jimdo-Wid
X-Jimdo-Instance
X-Url
X-Generated-By
X-Px
NS-RTIMER-COMPOSITE
Grace
X-Cache-Config
X-Outils-CS
X-Age
Content-MD5
X-DDC-Arch-Trace
X-Hostname
TCN
X-MiniProfiler-Ids
X-CMS-Version
X-DynaTrace
X-Whom
X-Beta
X-VWS-Id
X-Gateway
X-AWS-Id
X-LJ-Flow-ID
Magicmarker
X-From
Fpc-Cache-Id
X-Tumblr-Pixel-6
X-Msg-2-Log
X-WebKit-CSP
Fastly-Debug-Digest
Surrogate-Control
X-Expires-Orig
X-FORWARDED-FOR
X-Powered-Cms
Imagetoolbar
ServedBy
Product
X-Handled-By
X-Micro-Cache
X-Content-Options
X-ChromeLogger-Data
DynaTrace
X-Drupal-Dynamic-Cache
Page-Completion-Status
X-ServerName
X-Content-Encoded-By
Rt-Fastcgi-Cache
X-Middleton-Display
X-URL
ServerName
X-Sol
PageSpeed
X-AspNetWebPages-Version
Display
X-LiteSpeed-Cache
Generator
X-Cloud-Trace-Context
X-Matrix-Server
X-Country-Code
X-Firenze-Processing-Time
X-Matrix-Proxy
Powered-By-ChinaCache
X-Hosted-By
Response
X-Server-ID
X-Varnish-Cache-Hits
X-Cache-Info
X-Returned-From
X-TTL
X-Returned-From-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
X-Passed-To
X-Actual-URL
X-Returned-From-DLL
X-Passed-To-BeforeDispatch
X-Original-Request
X-Passed-To-DLL
IBM-Web2-Location
X-App-Hosting
X-Art-Request-Id
X-Forwarded-For
X-Middleton-Response
X-Stale
Ngpass-Vcall
X-Version
Node
Fhost
X-ApacheServer
X-Varnish-Host
X-Cache-Control-Orig
Proxy-Connection
MIME-Version
X-UD-Method
X-I
X-Track
X-Download-Options
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
Edge-Control
X-Mobilized-By
Access-Control-Request-Method
X-Varnish-TTL
Pics-Label
X-S
Content-Hash
Lsrequestid
X-NetCat-Version
Content-Disposition
X-Cache-TTL
X-Varnish-Cacheable
Akamai-IP
Content-Encoding-Handler
X-Abuse
X-Gamma-Serve
Powered
X-SDS
X-Director
X-Cache-Debug
X-BS
X-I-Sp
X-Cache-Rule
X-Varnish-Backend
X-PERF
Front-End-Https
Ag-Send-Time
Ag-Server-Time
Ag-Execution-Time
X-Duration
X-ATG-Version
X-CacheServer
X-Location-Id
Host
X-App-Status
X-ARC
X-Time
X-Cache-Age
X-Processed-By
Proxy-Agent
Retry-After
X-Route-Server
X-Microcachable
X-Do-Not-Hack
X-NoCache
SN
X-HOST
X-Cache-Expires
X-Powered-By-Server
X-VTEX-Cache-Status-Janus-Edge
X-Varnish-Age
X-Vtex-Remote-Cache
No
X-Powered-By-VTEX-Janus-Edge
X-VTEX-Cache-Status-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-Powered-By-VTEX-Janus-ApiCache
X-Vtex-Processado-Em:
X-VTEX-Janus-System
X-Vtex-Processed-At
X-VTEX-Janus-SO
Webluker-Edge
X-Developer
X-PwB-Node
RTSS
X-Vcap-Request-Id
X-CJ-Soft
X-RESOURCE
VAR-Cache
CC-CACHE
ServerID
X-Front
X-Frontend
Version
X-Libra-UpstreamHost
SID
X-Response-Time
X-ServerID
X-Akamai-Device-Characteristics
Server-Info
X-Amz-Meta-S3cmd-Attrs
X-Varnish-Hits
X-Cookie
Surrogate-Keys
X-Recruiting
X-Varnish-Server
X-FW
X-Upstream
X-DefendeR-Status
X-DefendeR-Runtime
Vacache
Buuteeq-Source
Thanks
X-Device-Type
X-Do-Esi
X-Akamai-Device-Model
X-Goog-Hash
X-DNS-Prefetch-Control
X-Fastcgi-Cache
X-Ttl
X-Translation
Location
X-Cookie-Domain
X-Speed-Cache-Key
X-Microcache-Status
X-Speed-Cache
PICS-Label
Content-Security-Policy-Rerport-Only
X-Geo-IP
X-Purge-Host
Arr-Disable-Session-Affinity
X-Grace
X-App
X-ClientSide-Caching
X-GeoIP-Country-Code
X-GeoIP-Country-Name
X-CDN-Cache-Status
X-Client-IP
Srv
X-CDN-Node
Req-Id
X-Purge-URL
X-B-Cache
Sfy
X-N
Lfy
Cxy-All
X-Mobile-URL
X-Daa-Tunnel
X-Trace
Accept-Encoding
X-Magnolia-Registration
X-Varnish-Hostname
X-Yadis-Location
Cache
X-Drectory-Script
Filter-Revision
Frame-Options
Qs-Cache
X-Varnish-IP
Accept-Charset
X-Orig-Vary
NetMindSessionID
X-Trace-Cache
X-Instart-Request-ID
X-Geo-IPV
X-Domain-Checked
X-Directory-Script
X-Provisioner-Version
X-Srv
X-SmartBan-URL
X-Geo-IP-Country
X-Highwire-RequestId
X-Geo-IP-Region
X-Geo-IP-Metro
X-Highwire-SessionId
X-SmartBan-Host
X-Source
X-Cache-Tags
X-Dynatrace
X-SRV
X-Cache-Operation
Server-Name
A-Powered-By
X-URLSCHEME
X-Real-Server
IISExport
X-Engine
Last-Published
NtCoent-Length
X-Varnish-Grace
X-Sucuri-ID
Origin
CacheControlHeader
LBVIS
X-Cache-Lifetime
X-ACMCache
X-Cache-Doesi
X-Platform
X-PF-Uncompressing
X-SV-Edge
X-SV-FromDBCache
X-Blog
X-SV-Duration
X-Cocoon-Version
X-SV-Nginx-Duration
X-Processing-Time
X-SV-CreatedAt
X-SV-CacheTags
X-FIRSTBase
X-SV-Pid
Mobiquo-Is-Login
S
X-WR-Flags
Warning
X-Varnish-Seen-By
Cm-Server
X-Nginx-Host
X-Varnish-Debug-Age
X-Varnish-RemainingGrace
WWW-Authenticate
X-SE-Debug
X-Varnish-RemainingTTL
Host-Service
X-Revision
COMMERCE-SERVER-SOFTWARE
X-AOL-HN
X-JG-Page-Cache
X-SmugMug-Values
X-SmugMug-Hiring
X-Server-Upstream
Smug-CDN
X-Prefetched
X-Amz-Version-Id
X-TTFB-L
Id
NODE
Cache-By-Node
X-TTFB
SVR
X-Env
AMF-Ver
HAVer
HCVer
X-Hypernode
X-Session-Reinit
Fastcgi-Cache
Backend
LBC
X-Nitra-Side
X-WA-Info
X-Debug
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Ruxit-JS-Agent
Logging-CorrelationId
X-Origin-Id
X-TempDebug
SSPAppContext
Keywords
Hamster
X-Storage
X-Distributed-By
X-Bettercache-Proxy
X-Resolver-IP
X-Vary-Options
X-Nginx-Cache
Author
X-Platform-Processor
WSR-Cache
X-Edge-Location
X-XTM-Node
X-Platform-Router
X-Real-IP
X-Uid
X-Adobe-Content
X-Object-Type
X-Amz-Storage-Class
X-W3TC-Minify
X-Object-Id
X-Source-ID
X-NginX-Server
X-NginX-Cache
X-Grid-Server
X-Discourse-Route
X-Content-Age
X-Machine-Name
X-ID
X-Secret
Beyond-Iis
X-Adobe-Loc
Ibf5scheme
X-Origin
X-Src-Webcache
X-Ob-Mode
X-BackendServer
Web-Server
X-Accel-Expires
X-NewRelic-App-Data
Allow
X-Framework
X-IsCacheURL
Content-Transfer-Encoding
X-EPiphany-Vid
Description
X-Client-Vid
X-NB-Cached-Page
BALANCEDTO
X-Captured
X-AOL-SNH
X-Config-By
Nodo
X-Empowered-By
X-Sys-Req-ID
Cneonction
X-Pagely-Cache
X-AISO-Cacheable
X-AISO-Cache
X-AISO-Server
X-Varnish-Debug-TTL
X-Req-Host
X-Distributor
X-Plat
X-Pagename
X-Varnish-Esi-Access
X-Varnish-Esi-Method
X-PRAM
X-DOM
X-Atraveo-Set-Cookie
X-Force
X-Phpwcms-Page-Processed-In
X-Atraveo-TTL
X-Analytics
X-Full-URL
X-Atraveo-Varnish-Server-Id
X-Atraveo-Cache-Control
X-Atraveo-Zone
X-Yottaa-Metrics
X-Atraveo-Param-Rm
X-Yottaa-Optimizations
X-Cache-Key
X-Atraveo-Expires
X-Gannett-Site-Version
X-Atraveo-From-Varnish-Cache
X-Atraveo-ETag
Backend-Timing
X-Phpwcms-Release
X-UPSTREAM
X-Varnish-Action
X-HostName
X-Cache-Control
X-WP
X-Smartcache-Timeout
X-Smartcache-Keys
SRV
X-StackifyID
X-REDIRECTSERVER
X-Edge-IP
X-EDGECONNECT-GUID-DEBUG
S-Cnection
X-Varnish-Store
X-Varnish-HitMiss
Front
X-Varnish-Ttl
Bios
X-Varnish-Count
Nitro-Cache
SiteName
Cache-Key
X-Varnish-Currency
X-Symfony-Cache
X-Flow-Powered
From
X-Hit-Cache
X-Balanceador
B-Powered-By
NLCacheNote
X-PHP-Engine
X-TN-ServedBy
X-Newrelic-App-Data
X-Worker
ServerIP
Jobb.Gil.Se
Jobb.Assistentpoolen.Se
X-LB-Server
Access-Control-Request-Headers
OT-RequestId
Open.Jobgate.Se
Set-Cookie2
CLMOB
X-LW-Web-Server
X-Nurl
X-Nhost
X-NFE
X-Info
CT
X-DTC
Sid
X-Optimization
Cache-Rule
X-Turpentine-Esi
ServerSignature
ServerTokens
Www.Myjob.Se
X-Author
Myheader
Prxy
X-Full-Url
Test.Executivepeople.Se
P3P:CP
Www.Mabracertifiering.Se
X-Cache-Original-TTL
Www.Mirrorgate.Se
Machine
X-Id
Jobb.Passal.Se
X-Airee-Node
X-Amz-Id-1
MW-Webserver
X-N-ViewType
X-Rocket-Nginx-Bypass
X-LB
X-App-Server
X-SV
X-CacheResult
X-Is-Mobile
ScoreTracker
Fastly-Backend-Name
X-SDE-Name
X-Hosts-Backend
X-Cache-Keep
X-Cache-TTL-Remaining
X-Cache-Set
X-Garden-Version
Tracker
Sophnep-Edge-FX
X-HW
X-T
X-Varnish-Set-Cookie
X-Dispatch
X-AWS
X-T3CacheTags
X-Turpentine-Cache
N365rili
Hash
X-Node-Name
X-Obvious-Info
X-Obvious-Tid
Y-Trace
SS
X-Dev
Worker
X-Cms-Mode
X-MrHost
X-T3CacheInfo
X-T3Cache
TP-L2-Cache
X-Cache-Engine
RequestId
X-WorkerInstancename
X-Rewritten-By
X-BC
TP-Cache
X-BLSR-COST
Tk
If-Modified-Since
X-Ocache
X-Page-Cache
X-Kirra-SiteId
X-Response-Status
XX
X-Artvisual-Server
X-Max-Age
X-Old-Content-Length
X-Response
X-Connection-Hash
Pool
X-Vhost-ID
X-Jphone-Copyright
X-Varnish-URL
No-Cache
Fw-Via
X-ASAP-Cache
X-Detected-Device
XDomainRequestAllowed
X-Transaction
X-Time-Spent
X-ManagedFusion-Rewriter-Version
X-Twitter-Response-Tags
X-B
X-Clara-ASAP
Sss
X-Expires
X-Test
X-HOSTNAME
Backend-Name-Original
Xc
X-Channel-Maxage
X-Block
Pool-Info
X-Cache-Action
X-Middleton-PageSpeed
X-Content-Security-Policy-Report-Only
X-CB-Server
X-Remote-Addr
X-Trace-App
X-Platform-Cache
X-SCProxy
WP-AdvCache-MemCached
X-ATM-RTime
X-Forwarded-Proto
X-Stage
X-Web-Node
X-ATM-RServer
ORIGIN
X-IDS-WS
P-LB
X-Invoke-Duration
X-Cache-Served
X-ACCELERATE
X-Perf
X-Cache-Fix
X-Varnish-Instance
X-BKSrc
INCOMING-TIME
Imx-Cookies-Used
X-RateLimit-Remaining
Section-Io-Id
X-Webstats-RespID
X-Actindo-RS
X-RiS-UFDI
YF-ID
X-Rack-Cors
X-CID
X-ESI-Enable
X-CCC
X-HITS
X-FCMS-Cache
X-Domino-CacheValidationWithETagReason
X-GeoIP
X-Domino-CacheValidationWithETagResult
X-FFX-B
Ec
X-Apm-Telemetry-Syncmark
X-B2f-Not-Route
W
P-WS
X-PHP-Response-Code
X-EdgeConnect-MidMile-RTT
X-GSL-Server
Cluster-ID
X-EdgeConnect-Origin-MEX-Latency
X-Varnish-Bot
CpuTime
X-Desc
X-WLD-LB
X-Site:
Akamai-Edgescape
X-Cache-PageType
X-Cache-On
X-VAge
AC-ELC
X-Powered
Encoding
X-Hit
X-Server-Addr
SBGI-9
SBGI-7
SBGI-5
SBGI-Device
SBGI-RealPath
NZSpeedy
Og
SBGI-RenderTime
SBGI-10
SBGI-1
Device
X-Server-Id
X-Rq
Dynatrace
X-Header
Copyright
X-FreeTag-Count
X-APP
X-Server-IP
X-Cache-CFC
X-SeschatTemplateID
X-CO-Host
X-SeschatRedID
Cmsid
Cmstype
X-IP
NnCoection
X-SeschatLayout
X-SeschatDID
Hosted-By
Cached
X-Seschat-URL
X-ESI
X-Built-By
X-BC-Stapler
Server-IP
X-BE
X-Client-Addr
X-CCM
X-RSS-CACHE-STATUS
X-Powered-By-Home.Pl
X-Span
X-Trace-Id
Il-Cl
X-We-Are-Hiring
Cpu
X-WR-MODIFICATION
X-Pb-Mii
X-Mii-Cache-Hit
X-Nginx
Noq
Ram
Content-Instance
X-Oracle-DMS-ECID
X-Pj-Cache-Status
X-Hosting
X-DSMX-Render-MS
X-DSMX-Rewrite-MS
X-Flex-Tags
X-Flex-Tag
V-Age
Www.Aujourdhui.Com
OutputRewritten
X-Server-By
X-Sc-Cache
X-Sc-Path
X-ATP-Server
X-Cluster-Node
X-Flex-Lang
X-Flex-Lastmod
X-Flex-Evstart
X-Flex-Evend
X-Device-Group
X-Flex-Community
X-Protected-By
X-Key
X-IP-Address
X-Frames-Options
X-OPNET-Transaction-Trace
X-Route
MIH-CLIENT-FARM
Nginx-Cache
X-Backside-Transport
Ews
X-GC-Pointer
X-GC-Read
X-GC-App
X-F-Cache
X-Webkit-CSP
IM-Version
MIH-PLATFORM
X-KoobooCMS-Version
X-MCF-ID
Surrogate-Key
X-JSESSIONID
WebServer
X-Ghost-Cache-Status
X-Rot
X-Runtime-Memory
X-Timestamp
MIH-PUBLIC-IDENTIFIER
X-Avvio-Cms-Cacheload
X-Trans-Id
X-Sov
X-GC-Write
PServer
X-VC-TTL
CtExclusions
X-Signature
AsisCache
BM-Cache-Key
Provider
X-Unbounce-PageId
X-Dispatcher
X-PageID
X-Cache-Node
X-4ormat-Cacheable
Mime-Version
X-Server-Instance
X-GRACE
X-Esi
BM-Cache-Status
X-ORACLE-DMS-ECID
X-Fe
WP-Cache
X-Request-Received
X-Unbounce-Variant
X-Request-Processing-Time
Ibm-Web2-Location
X-Dynatrace-Js-Agent
BM-Cache-Node
X-Unbounce-VisitorID
X-ProxyInstancename
X-Batcache-Reason
X-Beatles-Hits
X-TTL-Age
X-SayCDN-Original-Host
X-Say-TTL
X-Say-Original-URL
X-SayCDN-TTL
X-SayCDN-Original-UA
X-DN-Cache-Control
X-SayCDN-UA
X-Brought-To-You-By
X-SayCDN-Original-Path
X-Say-Original-Host
X-ETag
X-ENV
X-Pj-Cache-Key
X-Uplex
X-Global-Transaction-ID
Ohc-Response-Time
X-Gyrobase-Publication
Thinkindot-CacheControl
X-EdgeRouter
X-MobileDetected
X-Martin
X-Say-Original-IP
X-Does-He-Have-Time
X-Hrouter
X-Hstore
X-EC2-Instance-Id
X-Dynamic
X-Say-Cacheable
X-Say-Original-UA
Redirect
X-7d-Instance-Id
User-Cache-Control
X-7d-Trace-Id
X-Box
X-Cache-Extended
Ttl
Debug-Status
X-Purge-Level
X-View
XDisk
Apachenode
X-Debug-Token
X-EntryPoint
X-RemovedCookies
X-Render-Time
X-Request-Count
X-SID
X-ProcessESI
X-Static-Version
X-Fallback
X-CDNZZ-FCACHE
X-Healthy
X-IIJ-Cache
X-Powered-By-Anquanbao
X-SV-Expires
Accept-Language
Http
Mto-License-Status
Note
X-Your-GrandPa-Would-Wait
X-Would-Your-GrandPa-Wait
X-Varnish-Debug-Pool-Recv
X-Varnish-Debug-Varnish-TTL-Set-From-Server
X-Varnish-Restarts
X-Venda-Hitid
X-Batcache
X-Frame-Option
X-DPWN-IS-SECURE
X-Cms-Server
X-Cache-Level
X-LTM-ID
Svr
Noahs-Classifieds
X-Proto
X-ServedByHost
X-SSL
X-Site-Name
X-Varnish-Debug-Pool-Fetch
SERVER-IP
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-GUploader-UploadID
VANITY-HOST
MageStack-Web-Node
RN-Server
X-Goog-Storage-Class
X-Goog-Metageneration
X-Ct-Info
X-Ants-Machine-Id
X-Ants-Host
X-Compressed-By
X-Goog-Generation
MageStack-Tag
MageStack-PageSpeed
X-Varnish-ServiceNetIP
X-AccessDev
MageStack-Cacheable
MageStack-Cache-Status
BM-Cache-Bypass
X-UUID
MageStack-Config
X-PBY
MageStack-Loadbalancer
MSThemeCompatible
MSSmartTagsPreventParsing
MageStack-Debug
X-Magento-Action
X-Magento-Lifetime
X-Document-Path
X-FastCGI-Cache
X-Document-Guid-Path
X-Hiring
X-Instance
Railo-Version
X-Document-Tracking-Type
Thinkindot-Control
Thinkindot-CacheControl-Type
WFE
X-AG-MIPS
X-HeBS-Cache-Status
X-Document-Guid
X-RequesterIP
X-Meta-MSThemeCompatible
Foglight-Request-UUID
X-Meta-MSSmartTagsPreventParsing
X-DELIVERYSERVER
X-Meta-Imagetoolbar
Disablevcache
X-Wikidot-Static-Cache
AGI-Request-ID
Apache
X-Wix-Route-ID
X-Document-Folder-Guid
X-Wikidot-Backend
Aoestatic
X-Varnish-Hashed-On
X-AppServer-Status
X-ClusterID
Ksid
X-AppServer-Cache-Rule
Head
X-D-Time
X-Country
X-Upstream-Time
Apple-Itunes-App
X-Process-Time
X-Nginx-Backend
X-Generation-Time
X-Pressidium-NinukisWP-Ver
OriginServer
Content-Cache
HostGen
IsMobile
Server-Optimized-By
User-Agent
DeleGate-Ver
Countrycode
Kanooh-Host
MtcHosted
Be
Be-Ip
Be-Va
Fpc-Expire
X-S-Misc
X-Obr-Rule
X-Panel-Id
X-PHP
X-Tags
X-Amz-Meta-Cb-Modifiedtime
Language
Aurora-Node
GenSvr
X-Zendesk-User-Id
X-Zendesk-Origin-Server
X-TargSmaku
X-Cache-Frontend
MageStack-Cache
SL-NOREWRITE-REDIRECTS
MageStack-Cache-Hits
MageStack-Cache-Lifetime
X-KO-Site-Id
MageStack-Area
X-EZPublish-NodeID
X-EZPublish-InstallationID
Kp-EeAlive
X-Panel-Name
X-Web
X-Litespeed-Cache
RATING
HOST-SERVICE
X-Croise-Owner
X-Cachable
X-Ar-Debug
X-ACLR-Version
Orgin-Server
D
Balanced-From
X-Pj-Cache-Time
X-Pj-Cache-Gzip
X-Pj-Cache-Flags
X-Pj-Cache-Expires
Web
MachineName
Is-Cached
DNNOutputCache
KeepAliveTimeout
X-Ec-Custom-Error
X-Enhanced-By
X-Esi-Processing
ClientIP
X-Backend-Ip
F5-IpCliente
Stats-Rendering
X-Gondor-Server
X-LiteSpeed-Cache-Control
X-Capoed
X-Expose-Generated
REFRESH
DB-Nickname
X-NWS-LOG-UUID
From-Origin
Gzip
Stats-API
X-Xhr-Current-Location
Server-Ip
X-ZSITES-DNS
Inserted-Into-Cache-At
X-VhostID
X-Timing
X-Bcwwwid
Stats-HtmlMinAndCss
X-GETTER-Cache
X-Lima-Id
X-Tile-Url
X-LW-T
Robots
Max-Age
Device-Type
SBMCLOUD
Sunucu
X-ADI-STACK
WEB
Cteonnt-Length
X-UA-Vendor
X-RE-Ref
X-FarmId
X-Serendipity-InterfaceLang
X-Serendipity-InterfaceLangSource
X-Tradeindia-Request-GUID
X-ADI-VCache
X-Search-Id
X-Expose-Took
X-Highwire-Sitecode
X-Expose-Site
X-Expose-Hostname
NKBVHEADER
X-Node-Id
X-Hosting-Env
X-Varnish-Cookie-Debug
X-TNCMS-Bot-Tier
X-Varnish-GW-Backend
X-WebKit-CSP-Report-Only
TotalTime
X-Cache-Via
X-Pardot-Rsp
X-Ec2-Vpc
X-MSEdge-Ref
X-Node-ID
X-Catalyst
Real-Server
X-GeoIP-Country
X-Vgn-Hpd-Cached
X-Vgn-Hpd-Variations-Key
X-Pardot-LB
X-Pardot-Route
X-This-Proto
X-Cluster
X-Pixelsilk-Server
X-Environment
X-Debug-Serve
X-Server-Node
SLB
X-Cluster-Host
X-AVG-REWRITE
X-AVG
X-9XB-Server
X-Aberdeen-Cache
X-Aberdeen-Site
RVBD-CSH:
X-Device-Class
UniqueName
VC-NoCache
X-Application-Context
X-CPU-Time
X-Wm-1
X-ASAP-Age
Atp-Isdpp
Secured-By
Rewriter
M
X-Wm-VIP
CommunityServer
Content-ID
X-Pixelsilk-Version
X-NMT-Proxy
X-B3-Traceid
X-Built-With
X-COUNTRY-CODE
INFO
Commerce-Server-Software
X-LS-DEBUG
X-SilverStripe-Cache
X-VG-WebCache
X-Farm-Server
X-Orig-Host
X-Lb-Server
X-PressLabs-Stats
X-PROCESSED-BY
X-DealerOn
X-CACHE-TTL
X-SATserver
X-Sn-Servicetimems
NodeId
X-HASH
X-Frontal
X-Kinja
X-Kinja-Build
X-Kinja-Revision
X-Geo-Segment
X-Distil-CS
X-SERVER-ID
Tempo
X-Cdn-Fetch
X-Kinja-Server
X-Status
SINA-LB
SINA-TS
X-Bip
Requested-Host
Hostname
X-UA-Profile
DPOOL-HEADER
X-Nucleus-Cache