Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-XSS-Protection
X-Frame-Options
Strict-Transport-Security
CF-RAY
Age
X-Cache
Expect-CT
P3P
Content-Language
X-AspNet-Version
X-Pingback
X-UA-Compatible
Via
Upgrade
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Varnish
X-Request-Id
Referrer-Policy
X-Adblock-Key
X-Check
X-Generator
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-Template
X-Language
X-Drupal-Cache
X-Buckets
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Permitted-Cross-Domain-Policies
X-FRAME-OPTIONS
X-Download-Options
Alt-Svc
X-Cache-Hits
X-Ac
X-Hacker
Host-Header
X-ShopId
X-Sorting-Hat-Section
X-Sorting-Hat-PrivacyLevel
X-Dc
X-ShardId
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId-Cached
X-Shopify-Stage
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-PodId
X-Alternate-Cache-Key
X-AspNetMvc-Version
X-Via
X-Contextid
X-Served-By
X-Runtime
X-ServedBy
X-Powered-By-Plesk
X-PC-AppVer
X-PC-Key
X-PC-Hit
X-UA-Device
X-Amz-Cf-Id
X-PC-Date
X-PC-Host
MS-Author-Via
Access-Control-Allow-Headers
X-Wix-Request-Id
X-Seen-By
Access-Control-Allow-Methods
X-Timer
Content-Location
X-IPLB-Instance
X-Rid
X-Powered-CMS
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
Status
CF-Cache-Status
X-Tumblr-Pixel-1
X-Xss-Protection
Cartoon
X-Tumblr-Pixel-2
X-Backend
X-Iinfo
Access-Control-Allow-Credentials
X-WPE-Loopback-Upstream-Addr
X-Cache-Status
Powered-By
Content-Encoding
X-Endurance-Cache-Level
X-Cache-Hit
X-Cache-Enabled
X-CST
X-Port
X-Mod-Pagespeed
X-Host
P3p
X-Tumblr-Pixel-3
X-CDN
X-Logged-In
X-Server
X-Drupal-Dynamic-Cache
Keep-Alive
X-Server-Powered-By
X-DIS-Request-ID
X-Robots-Tag
X-Nginx-Cache-Status
X-Proxy-Cache
X-Accel-Version
X-Turbo-Charged-By
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-LiteSpeed-Cache
X-Ua-Compatible
Allow
Content-Security-Policy-Report-Only
X-Page-Speed
X-Content-Digest
X-Content-Powered-By
X-GitHub-Request-Id
X-FW-Hash
X-FW-Server
X-Tumblr-Pixel-4
X-FW-Static
X-FW-Serve
X-FW-Type
Request-Context
X-Rack-Cache
X-AH-Environment
X-Request-ID
X-Pad
X-Hits
X-Webcom-Cache-Status
X-Varnish-Cache
Access-Control-Expose-Headers
Edge-Control
X-XRDS-Location
X-Trace
X-BC-Stapler
X-Request-Country
Edge-Cache-Tag
X-HS-Cache-Config
SPRequestGuid
X-HS-Content-Id
X-Newrelic-App-Data
X-Node
X-SharePointHealthScore
X-MS-InvokeApp
X-Amz-Request-Id
X-Amz-Id-2
Cf-Railgun
Timing-Allow-Origin
MicrosoftSharePointTeamServices
X-Content-Security-Policy
X-CF-Powered-By
Charset
WP-Super-Cache
X-Died
X-Cache-Lookup
X-Fastly-Request-ID
X-FullPageCaching
X-INKT-SITE
X-INKT-URI
Access-Control-Max-Age
X-PHP-Backend
X-Backend-Server
Request-Id
X-HS-Combine-CSS
X-Cnection
SPIisLatency
SPRequestDuration
X-HOST
X-Swift-CacheTime
Ali-Swift-Global-Savetime
X-Swift-SaveTime
X-Tumblr-Pixel-5
X-DDC-Arch-Trace
EagleId
Rating
MicrosoftOfficeWebServer
X-Edge-Cache-Key
X-Edge-Cache
Composed-By
X-SS-Conf
X-SS-Location
X-CDN-Pop
Grace
X-CDN-Pop-IP
X-Device
X-Safe-Firewall
X-Tumblr-Content-Rating
X-NF-Request-ID
X-Server-Name
X-Dw-Request-Base-Id
Permitted-Cross-Domain-Policies
Served-By
X-Do-Not-Hack
X-HeyJason
X-Spip-Cache
P-WS
P-LB
X-Cloud-Trace-Context
X-Hyper-Cache
Liferay-Portal
X-VCache
X-SERVER
Feature-Policy
X-Servedby
Front-End-Https
X-LiteSpeed-Cache-Control
X-Loop
X-Middleton-Display
X-Kinsta-Cache
Surrogate-Control
X-TNCMS
Display
X-Sol
X-RateLimit-Reset
X-OneAgent-JS-Injection
X-Cluster-Node
X-RateLimit-Remaining
X-RateLimit-Limit
X-Original-Date
Response
X-Middleton-Response
X-Jimdo-Wid
X-Jimdo-Instance
X-Clacks-Overhead
X-DNS-Prefetch-Control
Public-Key-Pins
X-FB-Debug
X-Vtex-Processado-Em
Content-Style-Type
X-Acc-Exp
X-Firenze-Processing-Times
X-StackifyID
X-Debug-Info
Content-Script-Type
X-Tumblr-Pixel-6
Xkey
X-Amz-Version-Id
X-Frame-Option
X-Age
X-WebKit-CSP
X-Pc-Appver
X-Goog-Hash
X-Pc-Key
X-Pc-Hit
X-Magento-Tags
X-Zen-Fury
X-Ruxit-JS-Agent
X-Pc-Date
X-Pc-Host
X-ServerName
X-Edge-Location
X-LW-Cache
X-XN-XNHTML
X-XN-Trace-Token
X-DynaTrace-JS-Agent
Fpc-Cache-Id
X-User-Agent
X-Cached
X-N-OperationId
Refresh
X-Px
WPX
X-Version
X-Hostname
PageSpeed
X-Cache-Config
X-ARC
Retry-After
X-Goog-Stored-Content-Length
X-Goog-Generation
X-Source
X-Goog-Storage-Class
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Url
X-Handled-By
X-Upstream
X-Generated-By
X-Topify-Platform
X-Webserver
X-MiniProfiler-Ids
Access-Control-Request-Method
Rt-Fastcgi-Cache
TCN
X-ET-API-ROOT
X-ET-API-ORIGIN
X-ET-API-VERSION
X-Loopia-Node
X-B-Cache
X-URLSCHEME
X-Magento-Cache-Debug
X-Request-Time
X-LBLID
Pagespeed
Fastcgi-Cache
Powered
X-Accel-Expires
X-RESOURCE
X-Cache-Key
X-Cached-By
Cache-Provider
Last-Published
X-FORWARDED-FOR
X-Platform-Server
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-CMS-Version
X-Whom
X-VTEX-Cache-Status-Janus-ApiCache
X-Powered-By-VTEX-Janus-ApiCache
X-Vtex-Processed-At
X-Outils-CS
X-Vtex-Remote-Cache
X-VTEX-Janus-Router-Backend-App
X-Cdn
X-CacheServer
No
X-Engine
X-Varnish-Count
X-Application-Context
X-Varnish-HitMiss
X-EdgeConnect-Origin-MEX-Latency
Cache-Key
Imagetoolbar
X-PhApp
Fhost
X-Fastcgi-Cache
Warning
ServedBy
X-Signature
X-Ezoic-Cdn
X-AspNetWebPages-Version
X-Platform-Router
X-Platform-Cluster
Public-Key-Pins-Report-Only
X-Platform-Processor
X-EdgeConnect-MidMile-RTT
X-Forwarded-For
X-Location-Id
X-DealerOn
X-Dealeron-Backend
X-Dealeron-Original-Url
X-Developer
X-Content-Options
Product
Generator
X-From
X-Dns-Prefetch-Control
X-DynaTrace
X-S
X-NWS-LOG-UUID
X-Microcachable
X-Response-Time
X-Cache-Info
Akamai-IP
X-HS-Content-Campaign-Id
X-Umbraco-Version
Host
X-Actual-URL
X-Shop-Id
X-Defender
X-Varnish-Host
X-NewRelic-App-Data
X-SSLUpstream
X-SSLProxy
X-Device-Type
X-URL
X-F-Cache
X-Passed-To-DLL
X-Returned-From-DLL
X-Returned-From
X-GUploader-UploadID
X-Varnish-Beresp-Grace
X-Passed-To
X-Varnish-Beresp-Ttl
X-Original-Request
X-Varnish-Beresp-Status
X-Msg-2-Log
Alternate-Protocol
X-Hosted-By
X-Acquia-Application-UUID
X-Magento-Cache-Control
X-Stale
Dmn
X-Acquia-Application-Trace
X-PERF
X-Cache-Age
X-Passed-To-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Lambda-Id
X-ApacheServer
X-Gateway-Cache-Status
X-Gateway-Cache-Key
X-Platform
X-Environment
X-Gateway-Skip-Cache
X-Varnish-Cache-Hits
Arr-Disable-Session-Affinity
X-Cache-Rule
X-SVR-IIS
X-Svr-Proxy
X-Translation
X-Microcache-Status
X-Platform-Cache
X-Server-ID
Version
Origin
X-Akam-SW-Version
SSPAppContext
X-Correlation-ID
X-Micro-Cache
Surrogate-Key
X-Dispatcher
X-Sapient
X-Guploader-Uploadid
X-Cache-TTL
X-Supported-By
Server-Timing
X-I-Sp
X-SO
X-Powered-By-360WZB
X-BS
X-Rnd
X-Cache-Namespace
X-Cache-Tags
X-NetCat-Version
Content-Hash
DynaTrace
X-Vcap-Request-Id
X-Abgroup
X-Sucuri-ID
X-Art-Request-Id
MIME-Version
X-App-Status
SN
X-Varnish-TTL
X-Duration
X-Via-JSL
Powered-By-ChinaCache
WZWS-RAY
X-Server-Upstream
X-Instart-Request-ID
X-VARITI-CCR
X-SSL-Protocol
X-SSL-Cipher
X-Sucuri-Cache
Strikingly-Cache-Region
Strikingly-Cached
Strikingly-Cached-Version
Content-Disposition
X-Cache-Debug
X-Edge-IP
X-Client-IP
X-Director
X-Track
USPLoggingUUID
X-Cache-Lifetime
Content-Encoding-Handler
X-App-Hosting
X-Expires-Orig
S-Cnection
X-Geo-Country
X-Debug
X-I
RTSS
X-Amz-Meta-S3cmd-Attrs
X-Nginx-Cache
X-Drupal-Cache-Tags
X-Now-Id
X-Route-Server
X-Esi
X-Gamma-Serve
X-Powered-By-VelaWeb
X-Matrix-Server
X-Rocket-Nginx-Serving-Static
X-Matrix-Proxy
X-Varnish-Seen-By
X-Varnish-RemainingTTL
X-Varnish-GracePeriod
X-Generated
CF-Worker-Version
X-Hypernode
X-Varnish-ObjectSource
X-Varnish-RemainingLife
X-Cache-Control-Orig
X-TransIP-Balancer
X-CSRF-Protection
X-Page-Cache
X-SRV
X-TransIP-Backend
Node
X-Cache-2
X-Rocket-Nginx-Bypass
X-Powered-By-VTEX-Janus-Edge
X-Storage
X-Cache-Server
X-Locale
X-Daa-Tunnel
X-Front
X-Drupal-Cache-Contexts
X-ORACLE-DMS-ECID
Contao-Page-Layout
Pool
Cneonction
Service-Worker-Allowed
Cache
X-Env
X-Revision
X-Vhost
X-Recruiting
X-TTFB-L
X-ATG-Version
X-Varnish-Age
X-NoCache
X-Cache-Type
X-TTFB
X-Url-Base
Smug-CDN
X-SmugMug-Values
X-Correlation-Id
X-Cache-Engine
X-FTR-Request-ID
X-SmugMug-Hiring
X-Helper-Autoassign-All
W
X-Cache-IO
X-Trace-Id
Srv
X-SV-Edge
X-LB-Server
X-SV-Duration
X-Flow-Powered
X-SV-Nginx-Duration
FAI-W-FLOW
X-SV-FromDBCache
X-TTL
Lsrequestid
Author
X-SV-CreatedAt
X-SV-Pid
X-HW
Section-Io-Id
X-V
Wsr-Cache
Cache-Tags
ServerID
Accept-Encoding
Nodo
X-IsCacheURL
Dtk-Cache-Check-0
X-Dispatch
X-Varnish-Cacheable
X-Firenze-Processing-Time
X-Cache-Operation
X-FIRSTBase
Pv
X-Forwarded-Proto
X-N
X-GeoIP-Country-Code
X-Cache-Only-Varnish
X-Hostinger-Node
X-Hostinger-Datacenter
X-Cache-Level
X-Empowered-By
ServerName
Update-Time
Src-Update
X-Rq
Lb
X-Middleware-Start
Req-Id
X-Speed-Cache
X-Content-Type-Option
X-LB
X-Ttl
X-Speed-Cache-Key
X-TransIP-Reserved
X-ORACLE-DMS-RID
SiteSpeed
X-Discourse-Route
X-Grace
Edge-Control-Message
X-Server-Id
Https
NnCoection
If-Modified-Since
X-Nf-Srv-Version
X-Varnish-Url
X-Cache-Fix
X-Cache-PageType
Server-Name
X-SV-Expires
X-SV-Cacheable
X-SV-CacheTags
X-Pressidium-NinukisWP-Ver
X-CJ-Soft
X-Cache-Device-Type
X-Processing-Time
S
Page-Completion-Status
X-Orig-Vary
X-SDS
X-ID
Backend
X-Last-Modified
X-GeoIP-Country-Name
Local-Info
Location
X-Storage-Cache
X-Storage-Cache-Date
X-Service-Id
Proxy-Connection
X-Storage-Cache-Expires
SEOMOZ
MJ12bot
X-Cookie-Domain
X-Dynamic-Cache
X-Cache-Handler
X-SP-UniqueName
X-RequestId
X-Akamai-Device-Model
X-Varnish-IP
X-Akamai-Device-Characteristics
PICS-Label
Content-Transfer-Encoding
X-SP-Farm
X-Amz-Rid
X-Cache-Control
X-Ruxit-Js-Agent
X-SRCache-Key
X-Time
X-Cache-Expires
Use-Proxy
X-Key
X-Country-Code
AMF-Ver
X-Nginx-Dummy
Backend-Timing
Content-MD5
X-Wikidot-Static-Cache
X-Unbounce-Variant
X-Real-Server
X-Unbounce-PageId
X-Unbounce-VisitorID
X-BKSrc
X-Id
X-CF-Passed-Proto
X-Analytics
X-High-Performance
X-Wikidot-Backend
X-Varnish-Retries
X-FW
X-Server-Instance
Frame-Options
X-Now-Cache
X-Ratelimit-Remaining
X-Ratelimit-Limit
X-Hrouter
X-Hstore
HAVer
X-Request-Uri
X-Symfony-Cache
Accept-Charset
HCVer
X-Content-Security-Policy-Report-Only
X-Browser
Accept-CH
X-PwB-Node
AC-ELC
X-Hiawatha-Cache
X-Proxy-Backend
X-Oneagent-Js-Injection
X-Config-Blacklist-Version
NetMindSessionID
X-WPL-DATA
X-Frontend
X-Span
X-Transaction
X-Twitter-Response-Tags
MC
X-Connection-Hash
X-NginX-Cache
Qs-Cache
Ohc-File-Size
Pf.Web.Request.Id
Xc-Version
X-CDN-Forward
Content_type
X-UPSTREAM
Cached
Edit
X-Cache-TTL-Remaining
X-CACHE-TTL
X-Content-Encoded-By
Server-Info
X-Content-Age
X-Stage
X-CacheFROM
FindLaw
X-Disney-Akamai-Rule
X-ACMCache
X-JG-Page-Cache
X-Varnish-Backend
X-Adobe-Content
X-Varnish-Ttl
X-TB-M
X-Balanceador
X-PF-Uncompressing
X-GoCache-CacheStatus
X-Adobe-Loc
X-Atraveo-Cache-Control
X-Worker
X-Atraveo-Set-Cookie
X-Force
X-Atraveo-TTL
X-Pagename
X-Atraveo-Zone
X-Hit-Cache
SHInfo
X-Atraveo-Param-Rm
X-Atraveo-From-Varnish-Cache
Request-EU
Request-Country
X-A
X-Atraveo-Varnish-Server-Id
X-PRAM
X-Atraveo-Expires
X-CB-Server
X-Atraveo-ETag
X-HeBS-Cache-Status
RequestId
X-Debug-Token
*
CacheControlHeader
X-Consent-Required
Ufe-Result
X-Proxy
X-4ormat-Cacheable
From-Origin
X-Sedo-Request-Id
X-Via-S
X-Location
EagleEye-TraceId
X-Server-IP
X-Varnish-Debug-Age
X-Session-ID
X-Litespeed-Cache-Control
Front
X-Varnish-Debug-TTL
X-Origin
X-HTML-Minification-Powered-By
X-Cache-Miss-From
X-Webkit-CSP
X-Framework
Ramp
X-WR-Flags
X-Origin-Date
Report-To
Pics-Label
Tracecode
IM-Version
X-Akamai-ERPolicy
X-Akamai-ERRuleID
X-ARRServer
Ram
X-Amz-Storage-Class
SRV
Identity
CDN-Cache
Noq
DNNOutputCache
X-Nitro-Cache
X-LW-Web-Server
X-IIJ-Cache
X-LP
X-Webstats-RespID
X-NWS-UUID-VERIFY
X-Role
X-Magnolia-Registration
X-Sys-Req-ID
X-SERVER-NAME
Aurora-Node
X-Remote-Addr
Adm-Server
Url
Upgrade-Insecure-Requests
X-Plat
X-GeoIP
X-BackendServer
Web-App-Origin-Name
X-Cache-CFC
Hummingbird-Cache
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Srv
X-Nbs
Access-Control-Allow-Method
X-Akamai-Edgescape
X-UD-METHOD
X-Yadis-Location
X-Redman-Backend
X-Redman-Final-Url
X-AVG-Country-Code
X-Runtime-Memory
X-Drectory-Script
X-Avg-Cookie-Expires
X-Backend-Status
Accept-Language
X-HydroSheep
X-Instance-Id
X-CAPServer
X-Cache-Dispatchercachecontrol
ViewMode
SVR
Section-Io-Origin-Time-Seconds
X-NginX-Server
X-ServerID
X-Soro
Eomportal-Instance
Srv-Name
X-FireWall-Port
X-Cache-Dispatcherpragma
X-Proxy-Cache-Control
X-AEM
X-Resource
X-E
CDN-Uid
X-Appmachine-Environment
X-Source-ID
CDN-RequestId
X-SE-Debug
CDN-PullZone
Firespring-Website-Id
Cf-Ipcountry
X-ClientSide-Caching
Max-Age
WWW-Authenticate
X-Generated-Timestamp
X-Varnish-Hostname
X-Adnet
VSID
,
X-Microcache
X-ServerIndex
COMMERCE-SERVER-SOFTWARE
Surrogate-Key-Raw
X-Amzn-Trace-Id
X-Varnish-Hits
X-RealServer
X-Pantheon-Az
X-Runtime-Affili
X-FORWARDED-PROTO
X-Envoy-Upstream-Service-Time
X-Amzn-RequestId
Nopic
X-CacheDebug
X-Distributor
X-Origin-Name
X-Culture
A-Powered-By
Drupal-Pagecache-Memcache
X-Cf-Powered-By
CDN-CachedAt
X-Pantheon-Environment
X-GeoIP-Country
X-Streams-Distribution
X-Instance
IBM-Web2-Location
X-Forwarded-Host
X-Unique-ID
Section-Io-Origin-Status
X-Path-Route
X-Amz-Apigw-Id
Custom-Header
Prama
VServer
X-FastCGI-Cache
X-Varnish-Id
X-Pantheon-Phpreq
X-VCS-Cacheable
X-VCS-Ttl
X-Pantheon-Site
X-App-Runtime
X-UnsetCookies
X-Directory-Script
X-Smartcache-Timeout
X-Processed-By
XDomainRequestAllowed
Beyond-Iis
X-WP
AMP-Access-Control-Allow-Source-Origin
Copyright
Swift-Performance
Nitro-Cache
X-Smartcache-Keys
X-Garden-Version
X-Detected-Device
RN-Server
X-Unique-Id
X-Cache-Varnish
AsisCache
X-Cache-Doesi
X-App-Server
X-Provisioner-Version
X-Domain-Checked
X-Scheme
X-AOL-HN
Load-Balancer
X-MCB-Server
X-WEBMGR-CACHE
Serverid
X-Middleton-Pagespeed
Cmstype
Cmsid
Lookup-Cache-Hit
Dispatcher
X-Distil-CS
IES-Server
Machine
X-Server-Addr
X-Varnish-Server
AETN-City
AETN-Area-Code
AETN-Continent-Code
AETN-Country-Code
X-Hit
AETN-Country-Name
X-Actindo-Request-Id
X-GSL-Server
AETN-Postal-Code
Access-Control-Request-Headers
AETN-State-Code
AKA-DEVICE
X-Actindo-Thread-Id
X-Cacheable-TTL
X-Depends
X-Varnish-Backend-Beresp-Backend
AETN-EU
AETN-Latitude
AETN-Longitude
X-Actindo-Rs
AETN-DEVICE
SWS-Security
X-DynamicCache
X-Data-Request
X-Clara-ASAP
X-HashTwo
X-Info
VANITY-HOST
X-Map-Context
X-Cache-Date
X-ASAP-Cache
Proxy-Agent
Dis-Env
X-Nx-All
X-Access-Control-Allow-Origin
X-Amcomm-Site
X-ASAP-Age
X-Nx
X-Req-Head-Response
X-NginX-Upstream
X-LB-Node
X-Generated-Time
X-Dw-Trace-Id
X-Page
X-IP
X-FPC
X-SSLTerm-Server
X-Cache-Me-Harder
X-Amz-Id-1
X-TKP-SRV-ID
X-Shield-Request-Id
X-Serverid
X-Webcelerate
Cm-Server
X-WebKit-CSP-Report-Only
Nginx-Cache
X-Varnish-Grace
X-DataDome
Access-Control-Allow-Header
X-Rebelmouse-Cache-Control
X-MSU-SOURCE
AR-ATIME
AR-CACHE
AR-PoweredBy
XX
X-Clx-Request
X-7d-Trace-Id
X-Proxy-Skip
Ohc-Response-Time
Disablevcache
Server-ID
X-7d-Instance-Id
Filters
AR-SID
X-Varnish-Action
X-Highwire-SessionId
X-Autoru-App-Id
X-Autoru-Host
X-Highwire-RequestId
X-Cocoon-Version
X-CRA-DC
X-PHP-Response-Code
X-Response
X-UA-Bot
From
MW-Webserver
N365rili
X-SmartBan-Host
X-SmartBan-URL
X-Desc
Fastly-Backend-Name
Resin-Trace
X-Cache-Var-Map
X-Cache-On
Locale
Environment
X-Ms-Request-Id
X-Cache-Var
Gzip
X-Client-Id
X-Resolver-IP
X-AF-Userserver
X-ACCELERATE
F5-IpCliente
ClientIP
X-SAPP
X-RiS-UFDI
HitInfo
FRONT-END-SECUREBROWSER
X-Client-Image-Vid
Fastly-Restarts
X-Akamai-Transformed
HitType
AMP-Redirect-To
X-Client-Vid
X-Protected-By
Edgecast
Paypal-Debug-Id
X-Fstrz
X-EPiphany-Vid
X-Amzn-Remapped-Content-Length
IISExport
Bios
Thanks
Server-Id
X-Flex-Tags
X-Amz-Meta-Content-Md5
X-Flex-Tag
X-Aramark-CSID
X-Flex-Lastmod
Proxy-Cache
Play-Detected-UserAgent
X-Goog-Meta-Replace
X-HA-Backend
Fastly-Debug-Digest
Home
X-Goog-Meta-Policy
Play-Detected-Device
Traffic-Origin
X-Flex-Lang
X-Aramark-SID
X-Test
X-Route
X-Gyrobase-Publication
X-Cache-Time
X-Upgrade-Enabled
Num
X-Varnish-Cache-Local
X-DSMX-Rewrite-MS
X-DSMX-Render-MS
X-B2f-Not-Route
X-Flex-Evstart
X-Flex-Evend
X-Cache-Node
X-Flex-Community
X-DN-Cache-Control
X-HA-Frontend
Il-Cl
X-WebNode
X-Rule
Access-Control
IP-Addr
YF-ID
X-PM-ID
X-Rack-CORS
NEL
WP-FROM-CACHE
CS-SERVER
ScoreTracker
X-PBY
X-Fedora-School-Id
X-Oracle-Dms-Ecid
X-Purge-Host
X-JSESSIONID
X-Amz-Meta-S3b-Last-Modified
X-M-Log
X-M-Reqid
X-Nginx-Host
X-Purge-URL
X-Timestamp
X-Qnm-Cache
Cteonnt-Length
X-HostName
Server-Ip
X-Reflector-Cache
TYPO3-Sitename
X-Cache-Detail
X-Cache-Ttl
X-VTEX-Cache-Status-Janus-Edge
X-LBPoolMember
X-Dynatrace-Js-Agent
TYPO3-Pid
X-Oracle-DMS-ECID
X-Mobilized-By
Provider
X-Rack-Cors
X-SDE-Name
PagesDisplayed
X-ReqId
X-PROCESSED-BY
X-Hosting-Env
X-Cdn-Forward
X-Proto
X-UUID
X-RENDER-TIME
X-Via-NSCOPI
X-Reflector
X-VERSION
X-Sorting-Hat-Expire-Cache
PServer
X-OpenCart-Lightning
Prot
X-Appversion
Referer
Cleartype
Og
Keywords
X-Highwire-Smart-Code
ModuleCacheType
GD-Server
Description
X-Origin-Server
Backend-Powered-By
Content-Sn
DB-Nickname
X-Ms-Version
X-Highwire-Sitecode
X-Built-By
X-DevSrv-CMS
X-Cms
X-Beluga-Status
X-EC2-Instance-Id
X-Fpc
X-MCF-ID
X-Jcms-Ajax-Id
X-Cdn-Origin
X-Captured
X-Batcache
X-B3-Sampled
Request-Time
X-Batcache-Reason
X-Bcwwwid
X-Beluga-Trace
X-Built-With
X-Proxy-Cache-Key
Xc
X-Varnish-Cache-Ttl
X-DDM-SERVER-UPDATED
X-DDM-SERVER
CINC-Endpoint
X-Upstream-Status
X-Secret
X-Title
X-Upstream-Backend
X-PressLabs-Stats
Myheader
X-Src-Webcache
X-Backside-Transport
X-AppServer-Status
X-Bip
Ssl-Proxy-Server
X-Search-Id
Response-Time
X-Layout
X-Gannett-Site-Version
X-Time-Microsecs
X-SuperCache
X-VC-TTL
X-VC-Enabled
X-Ssl-Cipher
X-VG-WebCache
X-SCM-Server-Number
X-VHOST
X-SID
X-Airee-Node
X-Proxy-Id
X-Policy
X-Who
X-Rocket-Nginx-File
X-Session-Reinit
X-Rocket-Nginx-Reason
X-Beluga-Response-Time-X
X-UPServer
CD5
X-Svr
Actual-Object-TTL
X-Status
X-Server-Generated
NZSpeedy
MachineName
Yoncu-Errno
X-VC-Cache
X-Zendesk-Origin-Server
X-Instance-Name
X-HTTPS-Protocol
X-Nginx-Page-Cache
X-User-Agent-Tier
X-TNCMS-Bot-Tier
X-AppServer-Cache-Rule
Origin-Cache-Control
X-Serv
X-Cache-Via
X-Page-Cacheable
X-ProcessESI
X-NodeID
X-Nginx-Request-Processing-Time
X-LAKANA-AB
X-Debounce
SB-Site-IE-VERSION
SB-Site-Device
Page-Template
X-RemovedCookies
Origin-Edge-Control
X-Redir-Url
Returned-Status
SB-Cache-Remaining
SB-Cache-Life
X-HTTPS-Cipher
X-Ghost-Cache-Status
DrivedBy
Debug-Status
X-Archive-Orig-Server
X-Archive-Orig-Last-Modified
X-Archive-Orig-Date
X-Archive-Orig-Connection
X-Archive-Orig-Content-Type
Arrnode
X-Beluga-Cache-Status
X-Machine
X-Sn-Servicetimems
X-Refresh
X-Varnish-Cached
X-Varnish-Cached-TTL
X-Beluga-Node
X-Beluga-Record
X-Archive-Guessed-Charset
Httpd-Identifier
Memento-Datetime
NLCacheNote
X-Cache-TTL-Current
Magicmarker
Disp
X-Zendesk-User-Id
DeleGate-Ver
X-Cache-TTL-Age
X-AMAZEEIO
NtCoent-Length
Id
ServerSignature
ServerTokens
Verto-Server
StatusCode
X-Beluga-Response-Time
X-Compress-Hint
X-WN-ClientGroup
X-CSRF-Token
X-V-Cache
X-UT-Cache
Device
X-Cache-ID
X-CH-Device
X-Application
X-Artvisual-Server
X-Beatles
X-UA
X-DB-Content-Length
X-Resty-Request-Id
X-Processed
X-Pj-Cache-Status
X-Oferteo-Domain
X-Served
X-Expires
X-This-Proto
X-ESI
X-ETag
X-Confluence-Request-Time
Ttl
X-Shopware-Cache-Id
X-Varnish-Cache-Control
X-Varnish-Ip
X-ZSITES-DNS
X-Shopware-Allow-Nocache
X-Served-Server
CommunityServer
Amfplus-Ver
X-Served-From
Content-Generator
EQ-Cache
NS-VaryByCustom-Key
X-Middleton-PageSpeed
X-Itkg-Cache-Tags
X-Geoip-Country-Name
X-SH-Cache-Status
ID
Ews
Hosted-By
X-Time-Spent
X-Jphone-Copyright
X-Hosting
MageStack-Debug
MageStack-Config
MageStack-Cacheable
MageStack-Cache-Status
MageStack-Loadbalancer
MageStack-Magento-Version
MageStack-Web-Node
MageStack-Tag
MageStack-PageSpeed
MageStack-Cache-Lifetime
MageStack-Cache-Hits
X-We-Are-Hiring
X-RunCloud-Cache
X-Tag-Playlist
X-UD-Method
X-Xml-Http-Blocked
Generate-Time
MageStack-Cache
MageStack-Area
HTTPS
MS-CV
Tempo
X-Debug-Message
X-Cname-TryFiles
X-Cms-Mode
X-Frames-Options
X-Deity
X-Dev
X-HA
X-Goog-Meta-Goog-Reserved-File-Mtime
X-FastCGI-Cache-Status
X-Cache-LB
X-Az
Worker
WN
Viewport
Tesla.Performance
X-Nginx
X-Activity-Id
X-App
X-Amz-Meta-Version-Id
X-HEAD
Origin-Vm
Provided-Host
D
X-Skip-Cache
X-MAT-GEO
X-Geo-IP
X-Gateway-Rate-Limit-Delayed
X-FromPodPressCache
X-Cache-Action
X-Box
REFRESH
X-Firefox-Spdy
X-Compressed-By
X-Cluster
SERVER-NAME
X-Vary-Options
X-Vol-Correlation
X-VC-Cacheable
TP-Cache
TP-L2-Cache
X-Now-Trace
X-Agent
WP-AdvCache-MemCached
X-Cache-Extended
PBS
Requested-Host
Nd
X-Global-Transaction-ID
X-HS-Content-Group-Id
SBSS
SS
Webserver
UrlWatchModule-Time
X-Custom-Name
X-Mighty-Proxy
Content
X-Lb
X-Geo
X-ENV
X-TLS-Version
Now
X-Sid
Cache-Ctrol
X-Podname
X-SilverStripe-Cache
X-Container
X-Vol-Mrp
X-BIT-Node
X-Cache-Id
X-XHR-Current-Location
X-Flash-Messages
NB-Cache
NODE
X-Appid
ProxiaInstanceId
Pramga
X-Ser
X-RiS-PX
X-Origin-Cache
X-PageCache
X-CACHE-KEY
X-Real-IP
X-NoIndex
X-Grid-Server
X-Req-Counter
X-RAMCache
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
Session-Id
VC-NoCache
Cache-Cookie-Set-Idcheck
Cache-Cookie-Set-From
X-UPSTREAM-Address
X-Static
Cache-Cookie-Set-Lfrom
GranicusServer
X-Wodby-Node
CLMOB
Web-Server
NGX
X-PBS-Fwsrvname
X-CacheID
X-Cache-FS-Status
X-Blog
X-Avvio-Cms-Cacheload
X-Catalyst
X-Dispatcher-Number
X-PBS-Appsvrname
X-PBS-Appsvrip
X-MyName
X-AppServer-Cache-Exception