Threat Level: green Handler on Duty: Deborah Hale

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Connection
Set-Cookie
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Accept-Ranges
ETag
Link
X-Pingback
X-Content-Type-Options
P3P
X-XSS-Protection
X-AspNet-Version
X-Frame-Options
X-Cache
Content-Language
Age
CF-RAY
X-UA-Compatible
X-Adblock-Key
Via
Strict-Transport-Security
Keep-Alive
X-Template
X-Language
X-Check
X-Varnish
Access-Control-Allow-Origin
X-Buckets
X-Cacheable
X-Generator
Content-Location
P3p
X-Drupal-Cache
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Iinfo
X-Powered-By-Plesk
X-Request-ID
MS-Author-Via
X-Type
X-Pass-Why
X-Cache-Group
X-Runtime
WP-Super-Cache
Status
X-Powered-CMS
Ngpass-Ngall
X-UA-Device
Host-Header
Content-Security-Policy-Report-Only
Access-Control-Allow-Credentials
X-Cache-Hits
X-Mod-Pagespeed
X-ShopId
X-Dc
X-ShardId
X-Alternate-Cache-Key
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Tumblr-Pixel-1
X-Backend
X-Pad
X-Logged-In
Access-Control-Allow-Headers
X-Via
X-Tumblr-Pixel-2
X-Request-Id
Access-Control-Allow-Methods
X-Server
X-ServedBy
X-Host
X-ContextId
X-Cache-Hit
X-Served-From-Cache
X-Served-By
X-Port
X-PC-Hit
X-PC-Key
Content-Security-Policy
X-CDN
X-Tumblr-Pixel-3
X-Robots-Tag
Powered-By
X-Cache-Lookup
X-PC-AppVer
X-PC-Date
X-PC-Host
X-Rack-Cache
X-Xss-Protection
MicrosoftSharePointTeamServices
MicrosoftOfficeWebServer
SPRequestGuid
X-SharePointHealthScore
X-Cache-Status
X-Accel-Version
X-Varnish-Cache
X-Request-Country
Upgrade
X-Page-Speed
X-MS-InvokeApp
X-Safe-Firewall
Rating
X-Amz-Cf-Id
X-Tumblr-Content-Rating
X-Wix-Renderer-Server
X-Seen-By
Content-Encoding
X-Wix-Request-Id
X-XRDS-Location
X-Turbo-Charged-By
X-Cnection
X-W-DC
X-AH-Environment
X-Tumblr-Pixel-4
CF-Cache-Status
X-FullPageCaching
X-Webserver
X-GitHub-Request-Id
X-INKT-URI
X-INKT-SITE
X-Content-Digest
Composed-By
X-PhApp
X-Permitted-Cross-Domain-Policies
Request-Id
X-Content-Powered-By
X-Firenze-Processing-Times
X-Cache-Enabled
Alternate-Protocol
SPIisLatency
SPRequestDuration
Served-By
Public-Key-Pins
X-Proxy
Alt-Svc
X-Download-Options
Liferay-Portal
X-Timer
X-Amz-Request-Id
X-Amz-Id-2
Cf-Railgun
X-Spip-Cache
X-Proxy-Cache
X-Node
X-Hyper-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Pantheon-Endpoint
X-Styx-Version
X-Server-Powered-By
Timing-Allow-Origin
X-Server-Name
X-HeyJason
Permitted-Cross-Domain-Policies
X-CF-Powered-By
X-XN-Trace-Token
X-XN-XNHTML
X-Tumblr-Pixel-5
Content-Script-Type
Charset
Access-Control-Expose-Headers
Content-Style-Type
Access-Control-Max-Age
X-Swift-CacheTime
X-Swift-SaveTime
Content-MD5
EagleId
X-CDN-Geo
X-CDN-Geo-IP
X-Content-Security-Policy
X-CDN-Any-IP
Access-Control-Allow-Method
X-FB-Debug
X-Clacks-Overhead
X-Fastly-Request-ID
X-Gateway
X-Beta
X-DDC-Arch-Trace
X-LJ-Flow-ID
X-VWS-Id
X-AWS-Id
Public-Key-Pins-Report-Only
X-FW-Hash
X-Hits
X-Umbraco-Version
X-VCache
X-Powered-By-360WZB
X-Device
X-Loop
X-Jimdo-Instance
X-Jimdo-Wid
Real-Hostname
X-SERVER
X-FW-Type
X-FW-Serve
Cartoon
X-FW-Static
X-Cached-By
Refresh
Grace
X-Url
X-User-Agent
X-Cache-Server
X-TNCMS
X-Generated-By
X-DynaTrace-JS-Agent
X-Backend-Server
X-Cache-Config
X-Outils-CS
X-Tumblr-Pixel-6
PageSpeed
X-Cloud-Trace-Context
X-Cache-Result
X-Age
X-Px
NS-RTIMER-COMPOSITE
X-Cached
X-MiniProfiler-Ids
Response
TCN
X-DynaTrace
X-Whom
X-CMS-Version
X-Hostname
X-LiteSpeed-Cache
X-Middleton-Display
X-Xrds-Location
X-Middleton-Response
X-Sol
Display
X-Drupal-Dynamic-Cache
X-ServerName
Fpc-Cache-Id
Fastly-Debug-Digest
Magicmarker
Surrogate-Control
X-Forwarded-For
Imagetoolbar
ServerName
X-WebKit-CSP
X-Msg-2-Log
X-From
Rt-Fastcgi-Cache
Product
X-AspNetWebPages-Version
DynaTrace
X-Content-Options
X-Micro-Cache
X-Expires-Orig
ServedBy
IBM-Web2-Location
Powered-By-ChinaCache
X-TTL
X-Handled-By
X-Varnish-Host
X-Country-Code
X-Content-Encoded-By
X-Cache-Info
X-Do-Not-Hack
X-NetCat-Version
Generator
Proxy-Connection
Ag-Send-Time
Ag-Execution-Time
Ag-Server-Time
X-App-Hosting
X-Matrix-Server
X-Matrix-Proxy
Page-Completion-Status
X-Hosted-By
X-ApacheServer
X-Cache-TTL
MIME-Version
X-Firenze-Processing-Time
Access-Control-Request-Method
Fhost
Content-Hash
X-Director
X-Art-Request-Id
X-Varnish-Cache-Hits
X-I
X-URL
Edge-Control
X-Track
X-Cache-Rule
X-Recruiting
X-ATG-Version
X-Version
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Returned-From-BeforeDispatch
X-Returned-From
X-Returned-From-PostProcessResponse
Content-Disposition
Content-Encoding-Handler
X-Passed-To-PostProcessResponse
X-Returned-From-DLL
X-Actual-URL
X-Passed-To
X-Passed-To-DLL
X-Passed-To-BeforeDispatch
X-Original-Request
Powered
Surrogate-Keys
X-Cache-Age
X-Microcachable
X-Varnish-TTL
X-Varnish-Backend
X-Stale
X-Ruxit-JS-Agent
X-PERF
X-Varnish-Cacheable
X-Server-ID
X-CacheServer
X-ChromeLogger-Data
X-S
X-UD-Method
Proxy-Agent
X-NoCache
X-FORWARDED-FOR
Akamai-IP
Pics-Label
Lsrequestid
X-Cache-Control-Orig
X-Duration
X-Platform
No
X-Powered-By-VTEX-Janus-ApiCache
X-Powered-By-VTEX-Janus-Edge
X-Vtex-Remote-Cache
X-Vtex-Processed-At
X-VTEX-Cache-Status-Janus-ApiCache
X-VTEX-Janus-SO
X-VTEX-Janus-System
Host
X-VTEX-Janus-Router-Backend-App
X-Vtex-Processado-Em:
X-VTEX-Cache-Status-Janus-Edge
X-FW
Node
X-Abuse
X-Cdn
X-SDS
X-Developer
X-BS
X-I-Sp
X-Gamma-Serve
Front-End-Https
ServerID
Retry-After
X-Powered-By-Server
X-Processed-By
X-Cache-Debug
X-Varnish-Age
X-CDN-Cache-Status
X-RESOURCE
X-Location-Id
X-URLSCHEME
X-CDN-Node
CC-CACHE
X-Daa-Tunnel
X-App-Status
X-Device-Type
RTSS
Webluker-Edge
X-Varnish-Hits
Fastcgi-Cache
X-Translation
X-Route-Server
X-Microcache-Status
X-Cache-Operation
X-Revision
X-Cache-Lifetime
NODE
Content-Security-Policy-Rerport-Only
X-Drectory-Script
X-PwB-Node
X-Mobilized-By
Version
X-DefendeR-Status
X-Fastcgi-Cache
X-DefendeR-Runtime
X-Cache-Expires
X-Amz-Meta-S3cmd-Attrs
X-Speed-Cache
X-Front
Cache
SN
X-Geo-IP
X-Engine
X-Trace
X-DNS-Prefetch-Control
X-SRCache-Fetch-Status
NetMindSessionID
Arr-Disable-Session-Affinity
X-Request-Time
Cxy-All
X-SRCache-Store-Status
X-Response-Time
X-Time
X-HOST
X-CJ-Soft
X-Page-Cache
X-Source
X-Purge-URL
SID
X-ServerID
X-Libra-UpstreamHost
Origin
Mobiquo-Is-Login
X-Frontend
X-Geo-IPV
X-Geo-IP-Region
X-Dispatch
Buuteeq-Source
X-Geo-IP-Metro
Server-Info
X-Akamai-Device-Characteristics
X-Purge-Host
X-Geo-IP-Country
X-Speed-Cache-Key
Qs-Cache
X-ARC
X-Upstream
X-GeoIP-Country-Code
X-GeoIP-Country-Name
X-Instart-Request-ID
X-Cookie-Domain
X-Cache-Key
NtCoent-Length
X-Client-IP
X-Akamai-Device-Model
X-Cache-Tags
X-Vcap-Request-Id
X-Goog-Hash
X-Varnish-Server
X-Real-Server
X-Magnolia-Registration
X-Trace-Cache
X-Orig-Vary
COMMERCE-SERVER-SOFTWARE
X-Srv
Req-Id
Thanks
Last-Published
X-N
Ngpass-Vcall
A-Powered-By
X-Mobile-URL
X-AOL-HN
Accept-Encoding
Location
Accept-Charset
X-Varnish-Hostname
Server-Name
X-Rocket-Nginx-Bypass
X-Varnish-IP
X-Server-Response-Time
X-UPSTREAM
Cm-Server
HAVer
HCVer
X-Discourse-Route
VAR-Cache
X-Yadis-Location
X-Platform-Processor
X-Platform-Router
X-Nitra-Side
X-Domain-Checked
X-B-Cache
X-Blog
X-Provisioner-Version
Logging-CorrelationId
X-Framework
X-Origin-Id
Lfy
X-AOL-SNH
X-Newrelic-App-Data
X-ClientSide-Caching
Filter-Revision
WSR-Cache
X-Backend-Time
AMF-Ver
X-Grid-Server
X-Sys-Req-ID
LBVIS
X-Processing-Time
X-Cookie
X-Directory-Script
Content-Transfer-Encoding
X-Grace
Frame-Options
X-ACMCache
X-Hypernode
X-SV-Edge
X-SV-Expires
X-SV-Duration
CacheControlHeader
X-SV-FromDBCache
X-SV-Pid
X-SV-Nginx-Duration
X-Flow-Powered
X-SV-CreatedAt
IISExport
X-Cache-Engine
Backend
X-SV-CacheTags
Nitro-Cache
Host-Service
X-Distributed-By
X-Varnish-Grace
X-Server-Upstream
X-JG-Page-Cache
Sfy
X-Nginx-Cache
SRV
X-FIRSTBase
SVR
X-Session-Reinit
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Cache-Doesi
WWW-Authenticate
X-Do-Esi
X-Bettercache-Proxy
X-Highwire-RequestId
Nodo
X-Nurl
X-Nhost
X-Highwire-SessionId
X-SE-Debug
X-SmartBan-Host
X-Varnish-Debug-Age
X-Secret
X-Object-Id
X-SmartBan-URL
Srv
X-TempDebug
X-HOSTNAME
X-App
X-Object-Type
X-Varnish-Count
X-NFE
X-Varnish-HitMiss
X-Debug
Cneonction
X-Platform-Cache
X-Ttl
X-Amz-Version-Id
X-Cocoon-Version
X-Varnish-RemainingGrace
LBC
X-Sucuri-ID
X-Varnish-RemainingTTL
X-Plat
X-PF-Uncompressing
X-Varnish-Seen-By
X-Storage
Author
X-Resolver-IP
X-Config-By
Cache-Key
X-Garden-Version
PICS-Label
XDomainRequestAllowed
X-Rack-Cors
X-Src-Webcache
Allow
X-StackifyID
X-Machine-Name
X-Balanceador
X-NginX-Cache
X-Varnish-Ttl
Set-Cookie2
Hamster
Tk
X-Obvious-Tid
X-Obvious-Info
X-ORACLE-DMS-ECID
X-WR-Flags
X-Content-Age
X-App-Server
X-Cache-Control
X-Accel-Expires
S
SSPAppContext
X-Uid
X-Jphone-Copyright
Vacache
Beyond-Iis
X-Full-URL
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Atraveo-Zone
X-Varnish-Esi-Method
X-PRAM
X-Atraveo-Set-Cookie
X-Req-Host
X-Distributor
X-Analytics
X-Varnish-Debug-TTL
X-Force
Backend-Timing
Real-Server
X-BackendServer
X-Atraveo-Param-Rm
X-Source-ID
Id
X-Varnish-Esi-Access
X-HostName
X-Atraveo-Cache-Control
X-Atraveo-Expires
X-Atraveo-ETag
X-Atraveo-From-Varnish-Cache
X-Varnish-Action
X-Symfony-Cache
X-Hit-Cache
X-Pagename
X-Nginx-Host
Warning
WP-AdvCache-MemCached
X-Adobe-Content
X-Content-Security-Policy-Report-Only
X-NB-Cached-Page
X-Client-Vid
X-EPiphany-Vid
SBGI-1
SBGI-7
SBGI-9
SBGI-Device
SBGI-5
SBGI-10
SBGI-RenderTime
X-Dev
W
X-Vary-Options
X-Connection-Hash
X-Unbounce-Variant
X-Cms-Mode
CLMOB
X-Adobe-Loc
X-Unbounce-VisitorID
X-Unbounce-PageId
X-Server-Instance
X-Twitter-Response-Tags
SBGI-RealPath
X-Optimization
X-Transaction
X-Middleton-PageSpeed
Worker
X-Detected-Device
X-Unique-ID
X-SmugMug-Values
X-TTFB-L
X-W3TC-Minify
Smug-CDN
X-Env
X-TTFB
X-Prefetched
X-Amz-Id-1
X-Hosts-Backend
X-SmugMug-Hiring
X-Edge-Location
X-CB-Server
X-Avvio-Cms-Cacheload
X-Varnish-Currency
X-Varnish-Store
X-Ob-Mode
X-Info
X-Server-Id
X-DOM
X-PHP-Engine
X-WA-Info
X-FreeTag-Count
Front
X-HeBS-Cache-Status
X-Captured
X-NginX-Server
X-ID
X-Real-IP
X-Expires
ORIGIN
Ibf5scheme
X-Browser
NLCacheNote
X-Cache-Set
X-Amz-Storage-Class
X-Empowered-By
X-Web
X-APP
MW-Webserver
ServerIP
Bios
X-AWS
X-LW-Web-Server
Keywords
CmsCacheEngine
X-Medium-Entity-Type
Pool-Info
Ec
X-T3Cache
X-DSMX-Render-MS
P-LB
P-WS
X-Gannett-Site-Version
X-Cache-On
X-DSMX-Rewrite-MS
X-Medium-Entity-Id
X-Apm-Telemetry-Syncmark
X-T3CacheInfo
X-Site:
BALANCEDTO
Test.Executivepeople.Se
Www.Mabracertifiering.Se
Www.Mirrorgate.Se
Cache-Rule
P3P:CP
OT-RequestId
Jobb.Assistentpoolen.Se
Jobb.Gil.Se
Jobb.Passal.Se
Open.Jobgate.Se
Www.Myjob.Se
X-T3CacheTags
X-N-ViewType
X-REDIRECTSERVER
X-V
X-DTC
X-GSL-Server
X-Magento-Action
X-Tile-Url
X-Powered-By-Anquanbao
X-Healthy
X-DealerOn
Pool
X-TN-ServedBy
CT
X-Phpwcms-Page-Processed-In
X-Id
VC-NoCache
X-Block
X-Phpwcms-Release
X-Edge-IP
Myheader
X-Trace-App
X-IsCacheURL
X-Node-Name
X-Channel-Maxage
X-XTM-Node
Backend-Name-Original
X-LiteSpeed-Cache-Control
X-F-Cache
RATING
SS
Cached
X-HP-Trace-ID
X-HP-Trace-Project
Cmsid
X-VC-TTL
CpuTime
Cmstype
X-Test
X-Cache-TTL-Remaining
X-SDE-Name
X-Origin
X-Cache-Keep
Sss
X-CacheResult
S-Cnection
TP-Cache
X-AISO-Server
X-Header
X-AbeBooks-Version
X-NginX-Node
X-Old-Content-Length
X-NginX-Cache-Status
X-CCM
X-AISO-Cacheable
X-Varnish-Set-Cookie
X-Turpentine-Esi
Gzip
F5-IpCliente
X-ESI-Enable
ClientIP
X-WR-MODIFICATION
X-AISO-Cache
X-Turpentine-Cache
Paypal-Debug-Id
Sid
TP-L2-Cache
X-Vhost-ID
X-Smartcache-Keys
X-Webstats-RespID
X-Smartcache-Timeout
X-Artvisual-Server
X-CCC
X-CID
X-FFX-B
X-SV
X-WP
X-BC-Stapler
Il-Cl
Description
X-DPWN-IS-SECURE
X-SERVER-ID
X-Varnish-URL
X-Clara-ASAP
Fastly-Backend-Name
From
SB-Cache-Remaining
X-Cache-PageType
SB-Site-Device
X-NginX-Upstream-Status
X-NginX-Upstream-Addr
X-NginX-Upstream-Response-Time
SB-Cache-Life
Machine
Fw-Via
X-ASAP-Cache
X-Cache-CFC
X-Cache-Fix
X-B2f-Not-Route
X-IP-Address
X-Time-Spent
X-Frames-Options
PServer
X-HITS
SiteName
ScoreTracker
X-SRV
X-GeoIP
Ews
X-Trace-Id
X-LB
X-Stage
Y-Trace
Imx-Cookies-Used
X-Cache-Node
Surrogate-Key
X-Rewritten-By
Session-Id
Prxy
X-Ec-Custom-Error
Server-ID
X-CDN-Pop
X-ManagedFusion-Rewriter-Version
Cdate
X-Actindo-RS
X-Invoke-Duration
X-Worker
X-OCTOPOD
Access-Control-Allow-Orgin
X-Forwarded-Proto
X-BKSrc
X-Response-Status
Count-Click-Attempt2
X-MrHost
X-Esi
Ksid
X-COUNTRY-CODE
X-Oracle-DMS-ECID
X-CDN-Pop-IP
Web
X-Supported-By
X-Desc
X-Frame-Option
Fpc-Expire
X-Wix-Route-ID
X-Pagely-Cache
X-IP
Hash
N365rili
X-Backside-Transport
If-Modified-Since
ServerTokens
ServerSignature
X-Application-Context
X-BC
Cluster-ID
Content-Instance
Ram
Sophnep-Edge-FX
Noq
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-ATM-RServer
X-MAT-GEO
X-ATM-RTime
X-Instance
X-Response
Cpu
PowerCDN
Note
X-Timing
X-Server-Instance-Name
X-Server-Generated
Head
IM-Version
X-B
X-SeschatRedID
X-SeschatLayout
X-SeschatDID
X-SeschatTemplateID
Ibm-Web2-Location
X-RiS-UFDI
Web-Server
X-4ormat-Cacheable
X-Seschat-URL
X-NewRelic-App-Data
X-T
X-LB-Server
X-Ocache
X-Status
X-Would-Your-GrandPa-Wait
X-TTL-Age
X-Venda-Hitid
Copyright
BDQID
X-Your-GrandPa-Would-Wait
X-ENV
X-DN-Cache-Control
X-Does-He-Have-Time
X-Trans-Id
X-HW
X-Beatles-Hits
BDUSERID
X-Timestamp
DNNOutputCache
X-Global-Transaction-ID
Og
X-OPNET-Transaction-Trace
X-Hosting
X-Author
X-Gyrobase-Publication
X-AccessDev
X-Server-IP
X-Signature
X-Webapp
X-WorkerInstancename
XDisk
X-UseReverse-Proxy
X-Router-Backend
X-Cluster
X-HTML-Minification-Powered-By
X-Router
X-7d-Trace-Id
X-7d-Instance-Id
Cache-Cookie-Set-Lfrom
Section-Io-Id
Encoding
Cache-Cookie-Set-Index-Page
Cache-Cookie-Set-Idcheck
X-Fedora-School-Id
Cache-Cookie-Set-From
X-ACCELERATE
X-Catalyst
X-FarmId
X-Powered-Developer
X-WebNode
X-Cache-Original-TTL
Redirect
Mto-License-Status
BDPAGETYPE
X-Serendipity-InterfaceLang
X-Serendipity-InterfaceLangSource
D
RouteID
X-Enhanced-By
X-PHP-Response-Code
XX
X-ServedByHost
X-Full-Url
Http
Be-Va
MIH-CLIENT-FARM
MIH-PLATFORM
Server-Optimized-By
V-Age
Www.Aujourdhui.Com
X-Client-Addr
Server-IP
X-Is-Mobile
B-Powered-By
Akamai-Edgescape
RequestTrackId
RN-Server
X-Varnish-Error-Restart
X-ATP-Server
X-Flex-Lang
X-Flex-Evstart
X-Flex-Lastmod
X-Flex-Tag
X-Flex-Tags
X-Flex-Evend
X-Flex-Community
X-Cluster-Node
X-Device-Group
X-Dynamic-Cache
X-Environment
Aurora-Node
Mime-Version
WFE
Thinkindot-Control
X-Capoed
X-Expose-Generated
X-Expose-Hostname
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
Access-Control-Request-Headers
Cache-By-Node
No-Cache
Provider
INCOMING-TIME
X-Expose-Site
X-PHP
X-Node-Id
X-RequesterIP
X-Varnish-Instance
X-Span
X-Key
Xc
X-Expose-Took
X-EZPublish-InstallationID
X-EZPublish-NodeID
X-Highwire-Sitecode
X-Max-Age
MIH-PUBLIC-IDENTIFIER
X-Cache-Ttl
X-Cache-Action
X-Pj-Cache-Status
X-Pb-Mii
IsMobile
Countrycode
Be
X-Purge-Level
X-Mii-Cache-Hit
X-RateLimit-Remaining
X-Dynatrace
X-Restarts
Be-Ip
X-Varnish-Backend-Healthy
X-Backend-Name
X-Tradeindia-Request-GUID
NZSpeedy
X-Dispatcher
X-Airee-Node
Device
X-Webkit-CSP
X-ProxyInstancename
X-Server-Addr
X-Tradeindia-SMgmt
NnCoection
Hosted-By
X-LOCATION
WP-Cache
X-Amz-Meta-Cb-Modifiedtime
X-Request-Count
X-M
GenSvr
X-Obj-Ttl
X-FastCGI-Cache
X-Beresp-Ttl
Accept-Language
X-ETag
ReqUrl
X-RemovedCookies
Server-Version
X-CO-Host
Kanooh-Host
X-Render-Time
X-OneLinkHost
From-Origin
X-LW-T
X-GETTER-Cache
Rewriter
Servername
X-HAProxy
X-Static-Version
X-Webcelerate
Robots
X-Perf
X-SID
X-OneLinkTook
Beid
X-OneLinkServiceType
X-PageType
MtcHosted
X-Appmachine-Environment
X-Process-Time
X-OneLinkProcessing
X-Panel-Name
Language
X-RSS-CACHE-STATUS
X-Route
X-Ct-Info
X-Pj-Cache-Key
X-Server-Ip
X-SilverStripe-Cache
AGI-Request-ID
Ttl
X-AG-MIPS
CommunityServer
X-Powered-By-Home.Pl
X-Pixelsilk-Version
X-Pixelsilk-Server
X-Goog-Storage-Class
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-Goog-Generation
X-PBY
CDN-Region
X-Debug-Serve
X-Cluster-Host
X-Protected-By
X-ProcessESI
X-RealServer
Expiries
X-Xhr-Current-Location
Powered-By-VeryCDN
NS-VaryByCustom-Key
X-Jcms-Ajax-Id
X-Runtime-Memory
X-Pressidium-NinukisWP-Ver
X-JSESSIONID
X-Lima-Id
X-NMT-Proxy
X-Panel-Id
Stats-API
Stats-HtmlMinAndCss
X-GC-App
X-FCMS-Cache
X-GC-Pointer
X-GC-Read
X-GC-Write
X-Esi-Processing
X-Compressed-By
X-ACLR-Version
Stats-Rendering
X-ASAP-Age
X-Backend-Ip
X-Ghost-Cache-Status
X-Cache-Level
X-IB-Site-Name
X-IB-Timestamp
MachineName
X-IB-Context-Urn
X-IB-Content-Type
X-IB-Content-Urn
HostGen
DeleGate-Ver
X-Domino-CacheValidationWithETagReason
X-Domino-CacheValidationWithETagResult
X-NID
X-Nginx
X-Brought-To-You-By
X-Content-Type
X-Ar-Debug
X-Batcache
X-Sc-Path
X-Sc-Cache
X-BeResp-Ttl
X-Cache-Type
BM-Cache-Key
BM-Cache-Node
Pw-Value
Device-Type
RequestId
OutputRewritten
BM-Cache-Status
X-Obr-Rule
X-Varnish-Restarts
X-Say-TTL
X-Hstore
X-Hrouter
X-Rq
X-This-Proto
X-SayCDN-Original-Host
X-Martin
X-MobileDetected
X-Say-Original-IP
X-Say-Original-UA
X-Say-Original-Host
X-Say-Cacheable
X-Say-Original-URL
X-SayCDN-Original-Path
X-SayCDN-Original-UA
X-EC2-Instance-Id
X-EdgeRouter
X-Origin-Cache
X-Dynamic
X-Varnish-Debug-Varnish-TTL-Set-From-Server
X-Varnish-Debug-Pool-Recv
X-Varnish-Debug-Pool-Fetch
X-SayCDN-UA
X-SayCDN-TTL
X-We-Are-Hiring
X-Web-Node
X-Uplex
X-Nginx-Request-Time
X-IDS-WS
Dispatcher
Expire
AsisCache
Debug-Status
X-ESI
X-A
User-Agent
Max-Age
X-Zendesk-User-Id
X-Wm-1
X-Wm-VIP
Resin-Trace
X-Zendesk-Origin-Server
X-Cache-Extended
X-Box
X-GRACE
X-Hosting-Env
X-Remote-Addr
X-Fallback
X-Application
X-EntryPoint
User-Cache-Control
X-IIJ-Cache
X-E
X-HP-CAM-COLOR
USPLoggingUUID
X-Client-Ip
Instapage-Variant
X-MOBILE
Yola-ID
X-Search-Id
X-DistilledODN-Id
TotalTime
Bs-Header
X-SUPERCACHE
URI
X-TargSmaku
X-Debug-Token
X-ASEN
X-POPSUGAR-Server-Name
X-Not-Cacheable
X-Faeria
X-PS-MURDOCK-CASE-NORMALIZATION
X-PS-MURDOCK-ORIG-FILEEXT
X-UA-Vendor
X-JV
X-PS-MURDOCK-ORIG-PROTOCOL
Nginx-Cache
HOST-SERVICE
X-AREQUESTID
EWHSERVER
SBMCLOUD
X-AUSERNAME
X-DEBUG
X-RiS-PX
X-Pageid
X-WLD-LB
X-Cms-Server
X-Mod-Oboe-PS
X-Country
X-DataDome
X-Hit
X-BE
DB-Nickname
X-SuperCache
X-Gondor-Server
X-Proto
AC-ELC
X-Machine
X-RAMCache
X-BCube-Filmed-By
X-Varnish-Max-Age
X-DB-Content-Length
X-DN-GyrobaseID
X-Aicache-OS
X-WEBFRONT
X-Varnish-Hashed-On
X-Varnish-ServiceNetIP
X-Request-Uri
X-Pj-Cache-Expires
X-Pj-Cache-Flags
NKBVHEADER
X-Fpc
X-MCF-ID
X-Batcache-Reason
Acdc-Web
X-Accel-Cache-Control
X-Czt
BlockPHPCallEnd
CtExclusions
X-HA
X-Bcwwwid
X-Lb-Server
X-Pj-Cache-Gzip
MwpReleaseVersion
Railo-Version
X-Cache-Backend
X-Pj-Cache-Time
SERVER-IP
X-Recruitment-Address
Apache
Xonnection
X-Memcached
X-OpenCart-Lightning
MageStack-Cacheable
MageStack-Cache-Status
MageStack-Config
MageStack-Debug
X-TNCMS-Bot-Tier
MageStack-Cache-Lifetime
Cteonnt-Length
X-CPU-Time
MageStack-Area
MageStack-Cache
MageStack-Cache-Hits
MageStack-Loadbalancer
MageStack-PageSpeed
X-DELIVERYSERVER
X-Document-Folder-Guid
X-Document-Guid
X-Document-Guid-Path
X-Ants-Machine-Id
X-Ants-Host
MageStack-Tag
MSSmartTagsPreventParsing
MSThemeCompatible
MageStack-Web-Node
X-9XB-Server
WebServer
Requested-Host
Hostname
DPOOL-HEADER
Orgin-Server
SINA-LB
Content-Cache
X-VG-WebCache
SINA-TS
Apple-Itunes-App
Clientip
Tracker
UniqueName
X-Service-Location
X-KS-Cache-Status
XServer
RVBD-CSH:
X-NWS-LOG-UUID
X-Nginx-Backend
X-AppServer-Cache-Rule
X-AppServer-Status
X-ClusterID
X-Device-Class
X-EdgeConnect-MidMile-RTT
X-EdgeConnect-Origin-MEX-Latency
X-Backend-TTL
X-PM-ID
X-NewCloud-V-Cache
X-SCProxy
X-Server-By
X-Geo
X-LS-DEBUG
At-Shoptype
Atp-Isdpp
SLB
Url-Hash
Is-Cached
Uitdaging
X-Rack-CORS
X-Rot
X-Session-ID
X-Site-Name
X-Provided-By
X-DDM-SERVER-UPDATED
Web-Head
X-Cachable
X-Cache-Via
X-DDM-SERVER
At-Isb
X-UUID
X-Ec2-Vpc
X-Hiring
X-Kinsta-Cache
X-Litespeed-Cache-Control
X-Meta-MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
X-Document-Path
X-Document-Tracking-Type
X-Hiawatha-Cache
X-Meta-Imagetoolbar
Disablevcache
X-Allow-Redis
X-Pardot-Route
X-Pardot-Rsp
X-Request-Processing-Time
X-Request-Received
X-Pardot-LB
X-Op
X-Built-By
X-Cached-Status
X-Lookup-Mode
X-Nosy-Parker
X-Sov