Threat Level: green Handler on Duty: Richard Porter

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Accept-Ranges
Link
ETag
X-Content-Type-Options
P3P
X-Pingback
X-XSS-Protection
X-Frame-Options
X-AspNet-Version
X-Cache
Content-Language
Age
CF-RAY
X-UA-Compatible
Via
Strict-Transport-Security
X-Adblock-Key
Access-Control-Allow-Origin
X-Varnish
X-Language
X-Check
X-Template
X-Buckets
X-Cacheable
X-Generator
Content-Location
X-Drupal-Cache
P3p
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Powered-By-Plesk
MS-Author-Via
X-Type
X-Cache-Group
X-Pass-Why
X-Request-Id
X-Runtime
WP-Super-Cache
X-Powered-CMS
Status
Ngpass-Ngall
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Request-ID
Host-Header
X-Xss-Protection
X-Ua-Compatible
Keep-Alive
X-Download-Options
Access-Control-Allow-Credentials
X-UA-Device
X-ShopId
X-Alternate-Cache-Key
X-Dc
X-ShardId
X-Iinfo
Access-Control-Allow-Headers
Content-Security-Policy-Report-Only
X-Via
X-Mod-Pagespeed
Access-Control-Allow-Methods
Content-Security-Policy
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Pad
X-Logged-In
X-Backend
X-Tumblr-Pixel-1
X-Served-By
X-ServedBy
X-ContextId
X-Tumblr-Pixel-2
X-Cache-Status
X-PC-Hit
X-PC-Key
X-Frame-OPTIONS
X-FRAME-OPTIONS
X-CDN
X-Server
X-Host
Powered-By
Upgrade
X-Cache-Hit
Content-Encoding
X-Port
X-PC-Host
X-PC-AppVer
X-PC-Date
X-Tumblr-Pixel-3
X-Robots-Tag
X-Timer
X-Accel-Version
X-Varnish-Cache
X-Rack-Cache
X-Cache-Lookup
MicrosoftOfficeWebServer
MicrosoftSharePointTeamServices
SPRequestGuid
X-Cnection
X-SharePointHealthScore
X-Request-Country
X-XRDS-Location
X-MS-InvokeApp
X-Amz-Cf-Id
X-Page-Speed
X-Wix-Renderer-Server
X-Seen-By
X-Wix-Request-Id
X-Safe-Firewall
X-Server-Powered-By
CF-Cache-Status
X-Turbo-Charged-By
X-AH-Environment
Alt-Svc
Rating
X-Content-Powered-By
X-Node
X-Tumblr-Content-Rating
X-W-DC
X-Content-Digest
X-Webserver
X-GitHub-Request-Id
X-Cache-Enabled
X-PhApp
Public-Key-Pins
X-Tumblr-Pixel-4
Request-Id
X-INKT-SITE
X-INKT-URI
X-FullPageCaching
Composed-By
SPIisLatency
SPRequestDuration
X-Firenze-Processing-Times
Served-By
Cf-Railgun
X-Amz-Id-2
X-Amz-Request-Id
Timing-Allow-Origin
Permitted-Cross-Domain-Policies
X-HeyJason
X-Proxy-Cache
Liferay-Portal
X-SERVER
X-Hyper-Cache
X-Spip-Cache
Xkey
Surrogate-Key
X-Pantheon-Endpoint
X-Styx-Req-Id
X-Styx-Version
X-Pantheon-Styx-Hostname
Surrogate-Key-Raw
X-Server-Name
Access-Control-Expose-Headers
X-Swift-CacheTime
X-Swift-SaveTime
Access-Control-Max-Age
X-Content-Security-Policy
Charset
EagleId
Grace
Content-Script-Type
X-CF-Powered-By
X-FW-Hash
Content-Style-Type
X-CDN-Pop
X-CDN-Pop-IP
X-FW-Type
X-FW-Static
X-FW-Serve
Access-Control-Allow-Method
X-Drupal-Dynamic-Cache
X-Tumblr-Pixel-5
X-XN-Trace-Token
X-XN-XNHTML
X-FB-Debug
Content-MD5
X-Hits
X-Clacks-Overhead
Public-Key-Pins-Report-Only
X-VCache
X-Dw-Request-Base-Id
X-Fastly-Request-ID
Refresh
Real-Hostname
X-Loop
X-TNCMS
X-User-Agent
X-LJ-Flow-ID
X-AWS-Id
X-Device
X-VWS-Id
X-Umbraco-Version
X-Cache-Server
X-Jimdo-Instance
X-Jimdo-Wid
X-Backend-Server
X-Tumblr-Adult-Blog
X-Cache-Config
X-Cache-Result
Edge-Control
X-MiniProfiler-Ids
X-Cloud-Trace-Context
X-Age
X-LiteSpeed-Cache
X-Hostname
X-DDC-Arch-Trace
X-Cached-By
X-ServerName
X-Generated-By
PageSpeed
X-Px
X-Url
X-Cached
NS-RTIMER-COMPOSITE
X-DynaTrace-JS-Agent
Fastly-Debug-Digest
X-Powered-By-360WZB
X-Forwarded-For
X-Whom
X-Outils-CS
X-Tumblr-Pixel-6
Fpc-Cache-Id
Surrogate-Control
X-HOST
X-DynaTrace
Response
Cartoon
TCN
X-CMS-Version
Display
X-Sol
X-Middleton-Response
X-Middleton-Display
X-WebKit-CSP
X-Recruiting
DynaTrace
X-Cdn
X-Msg-2-Log
Product
Imagetoolbar
X-URL
Rt-Fastcgi-Cache
X-TTL
X-Content-Options
X-AspNetWebPages-Version
X-From
X-Varnish-Cache-Hits
WZWS-RAY
X-Handled-By
ServedBy
Front-End-Https
X-NetCat-Version
X-Country-Code
X-Matrix-Server
X-Matrix-Proxy
X-Server-ID
Page-Completion-Status
X-Content-Encoded-By
Access-Control-Request-Method
X-App-Hosting
X-Micro-Cache
X-Do-Not-Hack
Fhost
Alternate-Protocol
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-Origin
X-Original-Request
X-Passed-To
X-Returned-From-DLL
X-Newrelic-App-Data
X-Returned-From
X-Passed-To-DLL
X-Actual-URL
Generator
X-Stale
X-Passed-To-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-ApacheServer
IBM-Web2-Location
X-UD-Method
X-Expires-Orig
X-Hosted-By
Powered-By-ChinaCache
X-Track
X-Firenze-Processing-Time
Magicmarker
ServerName
X-Platform
Content-Hash
X-Varnish-Backend
X-BC-Stapler
MIME-Version
X-Varnish-Host
X-OneAgent-JS-Injection
Surrogate-Keys
X-Duration
X-Director
Origin
X-ATG-Version
Ag-Execution-Time
Ag-Server-Time
Ag-Send-Time
X-I
Powered
X-Art-Request-Id
X-S
X-Location-Id
X-Varnish-Cacheable
Akamai-IP
X-CacheServer
X-Varnish-TTL
Node
X-Magnolia-Registration
X-Goog-Hash
Content-Encoding-Handler
X-Abuse
X-PERF
X-LiteSpeed-Cache-Control
USPLoggingUUID
Host
X-Cache-TTL
X-Gamma-Serve
X-VTEX-Janus-Router-Backend-App
X-Vtex-Processed-At
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Cache-Status-Janus-Edge
No
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Remote-Cache
X-Vtex-Processado-Em:
X-Powered-By-VTEX-Janus-Edge
X-Request-Time
X-Cache-Rule
X-Cache-Age
Content-Disposition
X-FORWARDED-FOR
X-Source
X-Microcachable
X-Version
X-Powered-By-Server
Lsrequestid
X-Gateway
X-Beta
X-URLSCHEME
X-RESOURCE
X-SDS
X-I-Sp
X-BS
X-Translation
X-Microcache-Status
Pics-Label
X-Cache-Info
X-Developer
ServerID
X-Cache-Debug
X-Upstream
X-SRCache-Fetch-Status
X-Device-Type
X-Varnish-Seen-By
X-Varnish-RemainingTTL
Proxy-Agent
X-SRCache-Store-Status
SN
X-Fastcgi-Cache
X-Drectory-Script
X-Response-Time
X-Instart-Request-ID
X-VARNISH-Cache
X-DNS-Prefetch-Control
X-Varnish-Age
X-PwB-Node
X-CJ-Soft
X-Daa-Tunnel
X-Route-Server
X-Vcap-Request-Id
MJ12bot
SEOMOZ
X-Geo-IP
Buuteeq-Source
X-Rocket-Nginx-Bypass
Version
Content-Security-Policy-Rerport-Only
Arr-Disable-Session-Affinity
X-Cache-Lifetime
X-Cache-Expires
X-AOL-HN
Server-Info
Proxy-Connection
X-FW
X-Front
X-Time
X-Geo-IP-Country
Last-Published
X-Cache-Control-Orig
CC-CACHE
X-Geo-IPV
X-Geo-IP-Region
X-Akamai-Device-Characteristics
X-Engine
X-Akamai-Device-Model
X-Geo-IP-Metro
Cache
X-Mobilized-By
Fastcgi-Cache
X-NoCache
X-Revision
X-DefendeR-Runtime
X-DefendeR-Status
X-B-Cache
X-N
X-CDN-Cache-Status
Cache-Key
Edge-Control-Message
Webluker-Edge
X-CDN-Node
X-Nurl
X-NFE
X-Nhost
X-ServerID
X-Cache-Operation
X-Varnish-Server
X-Content-Age
Location
X-Zen-Fury
X-Processing-Time
NetMindSessionID
X-A
X-Cache-Tags
X-Varnish-Hits
Srv
X-Cookie-Domain
X-Mobile-URL
X-Orig-Vary
X-Grace
X-SV-Duration
PICS-Label
X-SV-CreatedAt
X-SV-CacheTags
Cm-Server
X-SV-Edge
AMF-Ver
X-SV-Nginx-Duration
Retry-After
X-SV-FromDBCache
X-SV-Pid
X-Varnish-IP
X-SV-Expires
X-CDN-Forward
Nodo
Nitro-Cache
X-Frontend
X-Purge-URL
X-Dispatch
WWW-Authenticate
X-Speed-Cache
Qs-Cache
X-Speed-Cache-Key
X-GeoIP-Country-Code
X-Real-Server
X-Server-Upstream
X-Trace
Content-Transfer-Encoding
X-Client-IP
X-Page-Cache
HAVer
HCVer
X-Trace-Cache
CT
X-ClientSide-Caching
X-ACMCache
X-Xrds-Location
X-AOL-SNH
A-Powered-By
X-Dynatrace
X-StackifyID
X-Varnish-Grace
X-GeoIP-Country-Name
Filter-Revision
Accept-Charset
X-Platform-Processor
X-Discourse-Route
X-Platform-Router
X-Cache-Key
X-Server-Response-Time
X-Amz-Version-Id
Author
X-Varnish-HitMiss
Frame-Options
X-SE-Debug
X-Blog
W
X-Purge-Host
COMMERCE-SERVER-SOFTWARE
X-Varnish-Count
CacheControlHeader
X-Storage
X-Varnish-RemainingGrace
RTSS
X-Cf-Powered-By
X-Yadis-Location
X-UPSTREAM
Cached
X-Garden-Version
X-NginX-Upstream-Status
X-Server-Start-Time
X-NB-Cached-Page
X-Config-By
X-Cache-Doesi
X-Varnish-Debug-Age
X-Webcelerate
X-AbeBooks-Version
X-Empowered-By
X-NginX-Upstream-Addr
X-NginX-Node
X-NginX-Cache-Status
X-NginX-Upstream-Response-Time
X-WR-Flags
X-GeoIP
X-Session-Reinit
Server-Name
X-Machine-Name
X-Cocoon-Version
X-Hypernode
Mobiquo-Is-Login
X-Nitra-Side
X-Directory-Script
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Processed-By
X-Origin-Id
Logging-CorrelationId
Accept-Encoding
X-Jphone-Copyright
WSR-Cache
X-Framework
X-Worker
X-Kinsta-Cache
NODE
X-SRV
X-Varnish-Ttl
Req-Id
Beyond-Iis
Host-Service
X-V
NtCoent-Length
S
X-Application-Context
SSPAppContext
X-Varnish-ObjectSource
X-Varnish-RemainingLife
X-Varnish-GracePeriod
X-Nginx-Cache
Id
X-PF-Uncompressing
X-Debug
X-Varnish-Hostname
X-Nginx-Host
X-Ttl
X-Edge-Location
X-Resolver-IP
X-EDGECONNECT-GUID-DEBUG
X-Balanceador
X-Symfony-Cache
X-BackendServer
Noq
X-Accel-Expires
S-Cnection
Cpu
X-Sys-Req-ID
Ram
X-App-Status
Ibm-Web2-Location
X-Domain-Checked
X-Server-Id
X-HP-Trace-Project
X-TempDebug
X-WA-Info
X-HP-Trace-ID
X-Varnish-Debug-TTL
Pool-Info
X-Provisioner-Version
Rewriter
X-App-Server
Front
IISExport
X-Adobe-Content
X-Adobe-Loc
X-Grid-Server
X-Cache-Control
X-Atraveo-Expires
Allow
X-LW-Web-Server
X-Atraveo-ETag
X-Atraveo-Cache-Control
X-Highwire-RequestId
X-Transaction
X-SmartBan-Host
X-SmartBan-URL
X-Connection-Hash
X-Highwire-SessionId
X-Twitter-Response-Tags
VAR-Cache
Eomportal-Instance
Cneonction
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Atraveo-Zone
X-Platform-Cache
X-Atraveo-Param-Rm
SRV
Backend
X-Atraveo-From-Varnish-Cache
X-ID
X-Pagename
Ibf5scheme
BALANCEDTO
X-Cache-PageType
X-Cache-Fix
NnCoection
X-Hit-Cache
X-XTM-Node
X-ServerIndex
X-LB
X-Plat
SVR
WP-AdvCache-MemCached
X-IIJ-Cache
X-BKSrc
X-Cache-Engine
X-Edge-IP
X-HITS
X-WEBSERVER
Dynatrace
ORIGIN
X-Supported-By
Keywords
X-Dw-Trace-Id
X-FIRSTBase
VServer
X-ARC
X-PRAM
PServer
X-Uid
X-Sucuri-ID
X-JG-Page-Cache
X-Optimization
X-Force
X-REDIRECTSERVER
X-Source-ID
Section-Io-Id
Thanks
Warning
X-Middleton-PageSpeed
X-IsCacheURL
X-B2f-Not-Route
X-Webstats-RespID
X-F-Cache
X-SmugMug-Hiring
X-SmugMug-Values
X-TTFB
Myheader
X-Prefetched
Device-Type
X-Amz-Meta-S3cmd-Attrs
X-ORACLE-DMS-ECID
X-TTFB-L
X-Env
IM-Version
X-SDE-Name
X-App
Smug-CDN
X-Amz-Storage-Class
X-Unique-ID
RN-Server
XDomainRequestAllowed
X-Varnish-Action
X-Src-Webcache
X-Plat-Be-Ip
CLMOB
X-Plat-Va-Ip
X-Frames-Options
X-Cache-Set
X-Vary-Options
X-Server-IP
X-VC-TTL
X-Airee-Node
X-Avvio-Cms-Cacheload
X-Apm-Telemetry-Syncmark
X-B
Il-Cl
X-DSMX-Render-MS
X-Key
X-Detected-Device
P-WS
P-LB
CmsCacheEngine
X-Distributed-By
From
X-RiS-UFDI
A
MW-Webserver
X-LB-Server
X-Goog-Metageneration
X-Goog-Generation
Real-Server
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-DSMX-Rewrite-MS
X-Captured
NLCacheNote
X-Smartcache-Keys
X-WP
X-Flow-Powered
X-NewRelic-App-Data
X-Smartcache-Timeout
X-W3TC-Minify
ScoreTracker
TP-Cache
TP-L2-Cache
Cmstype
X-Client-Vid
X-Unbounce-VisitorID
X-Client-Image-Vid
Cmsid
X-NginX-Server
X-PoweredBy
X-Route
X-Server-Instance
X-EPiphany-Vid
X-Correlation-Id
X-Dev
ServerSignature
X-Test
ServerTokens
Head
X-Content-Security-Policy-Report-Only
X-NginX-Cache
Fastly-Backend-Name
SiteName
X-Unbounce-Variant
X-Info
X-Unbounce-PageId
Worker
X-Cms-Mode
LBC
X-Desc
N365rili
X-Cache-On
X-Cache-Provider
X-Actindo-RS
X-Magento-Tags
Imx-Cookies-Used
X-Rot
X-Sov
Sophnep-Edge-FX
X-T3CacheInfo
X-HW
X-Cache-Source
Content-Server
X-Akamai-Edgescape
SBGI-RenderTime
X-Enhanced-By
Ngpass-Vcall
APP-VERSION
X-PG
X-Healthy
X-Full-URL
Set-Cookie2
Paypal-Debug-Id
X-AWS
X-CB-Server
X-GSL-Server
X-Hosts-Backend
X-HTML-Minification-Powered-By
X-Time-Microsecs
X-Site:
SBGI-9
SBGI-Device
SBGI-7
SBGI-5
SBGI-10
SBGI-RealPath
X-N-ViewType
Cluster-ID
X-Rack-CORS
Hash
X-T3CacheTags
Ttl
SBGI-1
X-Id
X-MrHost
X-Sentry-Token
Sid
X-T3Cache
X-DN-Cache-Control
Ksid
X-Server-By
X-DN-GyrobaseID
X-RDP
User-Agent
Bios
Cache-Rule
Hamster
X-Clara-ASAP
X-ASAP-Cache
CommunityServer
X-Appmachine-Environment
Hosted-By
MC
OT-RequestId
X-Gyrobase-Publication
X-RequestId
Prxy
X-Unique-Id
X-SV
X-Response
Mime-Version
X-Hosting
Description
X-We-Are-Hiring
X-Esi
X-TempoPesquisa
X-Pj-Cache-Status
X-Cache-Action
MageStack-Web-Node
X-Invoke-Duration
MageStack-Cache-Warning
MageStack-Tag
MageStack-Debug
B-Powered-By
X-Hiawatha-Cache
X-Ocache
NS-VaryByCustom-Key
X-Environment
MageStack-Cache
MageStack-Cache-Lifetime
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
PowerCDN
MageStack-Cache-Hits
X-Distributor
X-Cache-Backend
MageStack-PageSpeed
X-Hcom-Styx-Info
Cdate
MageStack-Cache-Status
X-WorkerInstancename
Copyright
Content
D
X-Real-IP
ServerIP
AsisCache
X-Render-Time
X-DTC
AC-ELC
LBVIS
MageStack-Area
X-Server-Instance-Name
X-MAT-GEO
X-Magento-Cache-Debug
X-JSESSIONID
Svr
X-MCB-Server
MageStack-Config
X-Remote-Addr
X-Cache-CFC
X-Server-Generated
MageStack-Loadbalancer
MageStack-Cacheable
X-Is-Mobile
Server-Id
X-DEBUG
X-TTL-Age
X-Would-Your-GrandPa-Wait
X-RAMCache
Ctx
X-Backend-TTL
Fw-Via
X-Amz-Id-1
X-Pj-Cache-Key
X-Your-GrandPa-Would-Wait
Apache
X-Cache-TTL-Remaining
X-CacheResult
X-Do-Esi
Xc
X-Cache-Keep
X-Dispatcher
X-Trace-Id
X-Ob-Mode
X-Platform-Server
Ec
WP-Cache
X-Cms-Server
Servername
X-NewCloud-V-Cache
X-Header
X-Domino-CacheValidationWithETagResult
X-AccessDev
X-Beatles-Hits
X-AISO-Cache
X-Rack-Cors
Ews
X-Does-He-Have-Time
X-Domino-CacheValidationWithETagReason
X-AISO-Server
IsMobile
X-AISO-Cacheable
X-Varnish-Instance
X-SeschatDID
X-Secret
NZSpeedy
X-Varnish-Backend-Healthy
X-Node-Name
X-Varnish-Error-Restart
Device
X-Restarts
Og
X-SeschatLayout
X-SeschatRedID
Resin-Trace
INCOMING-TIME
X-Stage
X-Seschat-URL
Mto-License-Status
Server-Ip
X-Nginx
Nginx-Cache
X-Artvisual-Server
X-ACCELERATE
X-SeschatTemplateID
X-Litespeed-Cache-Control
X-RSS-CACHE-STATUS
X-FCMS-Cache
BKREF
X-Span
X-Srv
Provider
MSSmartTagsPreventParsing
Httpd-Identifier
MSThemeCompatible
X-CACHE-TTL
X-Instance-Name
X-Wm-VIP
X-Wm-1
X-CPU-Time
X-MCF-ID
X-Phpwcms-Page-Processed-In
X-Phpwcms-Release
X-Meta-Imagetoolbar
X-Meta-MSSmartTagsPreventParsing
Machine
X-4ormat-Cacheable
X-Browser
X-ASAP-Age
AGI-Request-ID
X-T
X-Meta-MSThemeCompatible
X-Proto
X-RealServer
X-Server-Addr
X-DataDome
X-Varnish-Store
X-Hrouter
X-HP-CAM-COLOR
X-Hstore
X-MobileDetected
X-Say-TTL
X-Say-Cacheable
X-EdgeRouter
X-DEBUG-TTL
X-Varnish-Cache-Control
X-DOM
Be
SERVER-IP
X-Cache-ID
X-SayCDN-TTL
X-SayCDN-UA
Proxy-Cache
VANITY-HOST
X-Cache-Handler
X-CCM
X-Pixelsilk-Version
X-Pixelsilk-Server
VnhCdn-Status
Access-Control-Request-Headers
X-Dynamic-Cache
X-Time-Spent
Apachenode
X-HostName
X-VC-Enabled
X-Content-Type
Referrer-Policy
X-Varnish-Esi-Method
X-Varnish-Esi-Access
X-Varnish-Set-Cookie
X-Author
Aurora-Node
X-Varnish-URL
X-Varnish-Currency
X-Turpentine-Esi
X-EZPublish-NodeID
X-EZPublish-InstallationID
X-Hit
X-PBY
X-Turpentine-Cache
SL-NOREWRITE-REDIRECTS
X-Backend-Name
X-Flex-Lang
X-Flex-Evstart
X-Flex-Lastmod
X-Flex-Tag
Host-Name
X-Flex-Tags
X-Flex-Evend
X-Flex-Community
X-ManagedFusion-Rewriter-Version
X-Cluster-Node
X-Rewritten-By
X-Signature
Pool
X-Built-By
X-AG-MIPS
Web
SBGI-QS
X-Old-Content-Length
X-ATM-RServer
X-Box
X-ATM-RTime
Max-Age
X-Analytics
X-Pageid
E-TAG
X-FreeTag-Count
X-Cache-Via
X-PageType
X-Cache-Extended
X-Company
X-SilverStripe-Cache
XX
X-Channel-Maxage
X-Block
User-Cache-Control
X-Vhost
X-Trace-App
X-ProxyInstancename
Note
DNNOutputCache
Backend-Timing
X-Search-Id
X-PF-CACHE-FAILED
X-Serendipity-InterfaceLang
Fpc-Expire
VC-NoCache
X-Zendesk-User-Id
X-Faeria
X-VCS-Url
X-Zendesk-Origin-Server
Pw-Value
Realaction
X-WebNode
X-TB-M
X-Wix-Route-ID
XDisk
Session-Id
X-VCS-Ttl
X-VCS-Status
X-VCS-Billing
X-VCS-Cache-Server
X-Status
Kp-EeAlive
X-Serendipity-InterfaceLangSource
X-Not-Cacheable
X-NGINX-Cache
X-KoobooCMS-Version
X-VCS-Nrhit
X-VCS-Host
X-VCS-Hit
X-VCS-Cacheable
X-7d-Instance-Id
X-OCTOPOD
X-GRACE
X-HAProxy
Content-Instance
X-AppServer-Cache-Rule
X-Pagely-Cache
X-Fstrz
X-Forwarded-Proto
X-Fpc
X-Proxy-Cache-Key
Cleartype
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Nginx-Request-Time
X-Magento-Action
X-SID
Backend-Name-Original
X-DealerOn
X-ACLR-Version
Content-Cache
X-MSU-SOURCE
X-OPNET-Transaction-Trace
Kanooh-Host
X-Fallback
GenSvr
X-ClusterID
Cteonnt-Length
WSCLoggingUUID
X-Pj-Cache-Flags
X-7d-Trace-Id
X-Cache-Node
X-AppServer-Status
X-BeResp-Ttl
Accept-Language
X-Pj-Cache-Time
X-Ratelimit-Remaining
X-CSRF-TOKEN
X-Clx-Request
Tracker
X-EntryPoint
X-IP-Address
Serverid
X-Nocache
WFE
X-Hash
X-LOCATION
X-WR-MODIFICATION
X-ENV
Dispatcher
Debug-Status
X-Forwarded-Host
X-GoCache-CacheStatus
X-SayCDN-DevType
EWHSERVER
X-Jcms-Ajax-Id
X-WebKit-CSP-Report-Only
X-Dynamic
X-Brought-To-You-By
Brandcast-Load-Balancer
Cache-Status
X-Cache-Detail
X-VERSION
Brandcast-Brand-Id
X-Amz-Meta-Cb-Modifiedtime
X-Forwarded-Server
X-Hosting-Env
Powerd-By
X-COUNTRY-CODE
X-Bypass-Ssl-Transform
X-ESI-Enable
X-FFX-B
X-IP
X-Varnish-Max-Age
X-APP
X-TargSmaku
X-Matched-Rule
X-RequesterIP
X-Theme
X-Magento-Cache-Control
X-Pb-Mii
Www.Aujourdhui.Com
X-ATP-Server
X-Device-Group
X-Generated
X-Max-Age
X-Mii-Cache-Hit
X-Vhost-ID
V-Age
X-Highwire-Sitecode
X-Expose-Took
X-Purge-Level
X-DynamicCache
X-FG-RequestId
X-Checkout
X-Cluster
X-HA
X-Ghost-Cache-Status
Vacache
X-Upstream-Backend
DB-Nickname
HOST-SERVICE
X-Expose-Hostname
From-Origin
X-Expose-Site
X-Expose-Generated
X-ESI
Thinkindot-CacheControl
Thinkindot-CacheControl-Type
Thinkindot-Control
NodeId
X-Static
EXT-CACHEEXPIRE
Rt-Proxy-Cache
Web-Server
DeleGate-Ver
X-Cache-Me-Harder
X-ORACLE-DMS-RID
X-Pressidium-NinukisWP-Ver
X-Venda-Hitid
X-RemovedCookies
X-Request-Processing-Time
X-HASH
X-Geo
X-DeliveryServer
X-UUID
X-LS-DEBUG
X-Request-Received
X-ProcessESI
X-FastCGI-Cache
X-Cache-Why
Content-ID
Expiries
X-OpenCart-Lightning
X-Xhr-Current-Location
Server-Optimized-By
X-ETag
Apple-Itunes-App
X-Runtime-Memory
X-Device-Class
MtcHosted
DrivedBy
MwpReleaseVersion
X-Cache-Level
CD2
X-UA
X-SL-Norewrite
X-SL-Notranslate
X-Client-Ip
Language
X-PM-ID
X-Fedora-School-Id
X-WHOIS-Cached
X-Obr-Rule
X-DPWN-IS-SECURE
X-VhostID
X-Batcache
X-FireWall-Protection
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Cachable
X-FarmId
X-Gannett-Site-Version
Http
SB-Site-Device
SB-Cache-Life
SB-Cache-Remaining
X-This-Proto
X-SERVER-ID
Tempo
SS
SBMCLOUD
Orgin-Server
X-Application
X-AUSERNAME
X-ASEN
X-AREQUESTID
RequestId
X-Ants-Host
X-Rq
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Cacheable-TTL
X-BServer
X-Ants-Machine-Id
X-BPool
X-Powered-Developer