Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-XSS-Protection
X-Frame-Options
Strict-Transport-Security
CF-RAY
Age
Expect-CT
X-Cache
P3P
Content-Language
X-AspNet-Version
X-Pingback
Via
X-UA-Compatible
Upgrade
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
Referrer-Policy
X-Varnish
X-Request-Id
X-Adblock-Key
X-Check
X-Generator
X-FRAME-OPTIONS
X-Language
X-Template
X-Drupal-Cache
X-Buckets
Alt-Svc
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-Cache-Hits
X-Ac
X-Hacker
X-AspNetMvc-Version
Host-Header
X-ShopId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PodId
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-Section
X-Shopify-Stage
X-ShardId
X-Dc
X-Alternate-Cache-Key
X-Powered-By-Plesk
X-Wix-Server-Artifact-Id
X-Served-By
X-Accel-Buffering
X-Runtime
X-Amz-Cf-Id
MS-Author-Via
X-Via
Access-Control-Allow-Headers
X-IPLB-Instance
X-Powered-CMS
Access-Control-Allow-Methods
Content-Location
X-Xss-Protection
X-Timer
X-Contextid
X-UA-Device
Cartoon
Status
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
CF-Cache-Status
X-ServedBy
X-PC-Hit
X-PC-Key
X-PC-AppVer
X-PC-Host
X-PC-Date
X-Iinfo
Access-Control-Allow-Credentials
X-Cache-Status
Powered-By
X-Backend
P3p
Content-Encoding
X-Seen-By
X-Wix-Request-Id
X-Mod-Pagespeed
X-Rid
X-CST
X-WPE-Loopback-Upstream-Addr
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-Cache-Enabled
X-Tumblr-Pixel-1
X-Endurance-Cache-Level
X-Logged-In
X-Cache-Hit
X-Port
X-Drupal-Dynamic-Cache
X-CDN
X-Tumblr-Pixel-2
X-Server-Powered-By
X-Server
Keep-Alive
X-Host
X-DIS-Request-ID
X-Nginx-Cache-Status
X-Ua-Compatible
X-Accel-Version
X-Robots-Tag
X-Turbo-Charged-By
X-Proxy-Cache
X-LiteSpeed-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Page-Speed
Allow
Content-Security-Policy-Report-Only
X-Tumblr-Pixel-3
X-Content-Digest
X-Content-Powered-By
X-Request-ID
X-AH-Environment
Request-Context
X-GitHub-Request-Id
X-Rack-Cache
X-Varnish-Cache
X-FW-Hash
X-Pad
X-FW-Server
Access-Control-Expose-Headers
X-FW-Static
X-FW-Type
X-FW-Serve
X-XRDS-Location
X-Request-Country
X-Node
SPRequestGuid
X-MS-InvokeApp
X-SharePointHealthScore
X-Hits
Edge-Control
X-Newrelic-App-Data
X-BC-Stapler
X-Trace
MicrosoftSharePointTeamServices
X-Content-Security-Policy
X-Webcom-Cache-Status
Cf-Railgun
X-Amz-Request-Id
X-Amz-Id-2
Timing-Allow-Origin
Edge-Cache-Tag
X-Died
WP-Super-Cache
X-HS-Cache-Config
X-CF-Powered-By
X-HS-Content-Id
Charset
X-Cache-Lookup
X-PHP-Backend
Request-Id
Access-Control-Max-Age
X-Tumblr-Pixel-4
X-Backend-Server
X-Fastly-Request-ID
X-INKT-SITE
X-INKT-URI
X-HOST
SPIisLatency
SPRequestDuration
X-FullPageCaching
X-Cnection
Ali-Swift-Global-Savetime
X-Swift-SaveTime
X-Swift-CacheTime
X-HS-Combine-CSS
Composed-By
X-Edge-Cache
X-Edge-Cache-Key
MicrosoftOfficeWebServer
EagleId
X-SS-Location
X-CDN-Pop-IP
X-CDN-Pop
X-SS-Conf
Grace
X-Safe-Firewall
Served-By
X-Spip-Cache
X-Device
X-Dw-Request-Base-Id
X-SERVER
X-HeyJason
X-Do-Not-Hack
Permitted-Cross-Domain-Policies
X-Hyper-Cache
X-NF-Request-ID
X-Servedby
X-Server-Name
X-DDC-Arch-Trace
Liferay-Portal
X-Cloud-Trace-Context
Front-End-Https
Feature-Policy
X-VCache
X-LiteSpeed-Cache-Control
Rating
Surrogate-Control
X-RateLimit-Reset
X-OneAgent-JS-Injection
X-Original-Date
X-Middleton-Display
X-DNS-Prefetch-Control
Display
X-RateLimit-Limit
X-Loop
X-Sol
X-RateLimit-Remaining
X-TNCMS
X-Jimdo-Wid
X-Jimdo-Instance
X-Vtex-Processado-Em
X-Firenze-Processing-Times
X-Cluster-Node
X-Kinsta-Cache
X-FB-Debug
P-WS
P-LB
X-Middleton-Response
Content-Style-Type
X-Clacks-Overhead
Response
X-Debug-Info
Public-Key-Pins
X-Tumblr-Pixel-5
Content-Script-Type
X-Pc-Appver
X-Pc-Key
X-Pc-Hit
X-Tumblr-Content-Rating
X-StackifyID
Xkey
X-WebKit-CSP
X-Pc-Date
X-Pc-Host
X-Acc-Exp
X-Magento-Tags
X-Age
X-Frame-Option
X-Ruxit-JS-Agent
Fpc-Cache-Id
Refresh
X-ServerName
X-XN-XNHTML
X-XN-Trace-Token
X-Edge-Location
X-DynaTrace-JS-Agent
X-Px
X-Amz-Version-Id
X-Goog-Hash
X-N-OperationId
X-ARC
X-User-Agent
X-Cached
X-Hostname
X-Url
X-Cache-Config
PageSpeed
X-Zen-Fury
X-Generated-By
X-LW-Cache
WPX
X-Handled-By
Retry-After
X-Webserver
X-Topify-Platform
X-B-Cache
X-MiniProfiler-Ids
X-Goog-Generation
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
X-Goog-Metageneration
X-Loopia-Node
Powered
TCN
Rt-Fastcgi-Cache
X-Source
Access-Control-Request-Method
X-Cached-By
X-CMS-Version
X-Outils-CS
X-Vtex-Remote-Cache
X-Cdn
X-Vtex-Processed-At
X-VTEX-Cache-Status-Janus-ApiCache
X-CacheServer
No
X-VTEX-Janus-Router-Backend-App
X-Powered-By-VTEX-Janus-ApiCache
X-FORWARDED-FOR
X-Magento-Cache-Debug
Pagespeed
X-Tumblr-Pixel-6
X-Platform-Server
X-Request-Time
X-EdgeConnect-Origin-MEX-Latency
X-Signature
X-Accel-Expires
Imagetoolbar
Fastcgi-Cache
Fhost
X-Location-Id
ServedBy
X-URLSCHEME
X-ET-API-VERSION
X-EdgeConnect-MidMile-RTT
X-ET-API-ROOT
Cache-Provider
X-ET-API-ORIGIN
X-Fastcgi-Cache
X-Upstream
X-RESOURCE
X-Platform-Router
X-PhApp
X-Version
X-Platform-Processor
X-Platform-Cluster
X-Application-Context
X-AspNetWebPages-Version
X-Whom
X-LBLID
X-From
X-Cache-Key
X-Response-Time
X-Engine
Host
X-SRCache-Store-Status
X-Content-Options
X-SRCache-Fetch-Status
X-DynaTrace
X-Ezoic-Cdn
X-F-Cache
X-Forwarded-For
X-Developer
X-Actual-URL
Product
X-Acquia-Application-UUID
X-Acquia-Application-Trace
Dmn
Warning
X-Passed-To-DLL
X-Passed-To-BeforeDispatch
X-Original-Request
X-Returned-From
X-URL
X-Passed-To
X-Shop-Id
X-Varnish-Beresp-Ttl
Alternate-Protocol
X-Dns-Prefetch-Control
X-Umbraco-Version
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-Cache-Age
X-Returned-From-DLL
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
Public-Key-Pins-Report-Only
X-Varnish-Host
X-Defender
X-Stale
X-NWS-LOG-UUID
Arr-Disable-Session-Affinity
X-Msg-2-Log
X-Cache-Info
Generator
X-Server-ID
Akamai-IP
X-Platform
X-Microcachable
X-Varnish-Cache-Hits
X-ApacheServer
X-Correlation-ID
Cache-Key
X-Varnish-Count
X-Hosted-By
X-Cache-Rule
X-Varnish-HitMiss
Last-Published
X-PERF
X-Device-Type
X-Dispatcher
X-Platform-Cache
X-S
X-Environment
X-Magento-Cache-Control
Origin
X-Lambda-Id
X-Akam-SW-Version
X-GUploader-UploadID
X-DealerOn
X-Dealeron-Backend
X-Dealeron-Original-Url
Content-Hash
X-HS-Content-Campaign-Id
X-Cache-Namespace
X-Rnd
X-Powered-By-360WZB
X-Vcap-Request-Id
X-Cache-TTL
X-Gateway-Skip-Cache
X-BS
X-SO
X-Gateway-Cache-Key
DynaTrace
X-Sapient
X-I-Sp
X-Gateway-Cache-Status
X-Cache-Tags
Surrogate-Key
X-Art-Request-Id
X-Micro-Cache
X-Duration
X-Translation
X-Microcache-Status
X-Varnish-TTL
Version
Server-Timing
SSPAppContext
X-App-Status
X-Track
X-Supported-By
WZWS-RAY
X-Client-IP
X-Guploader-Uploadid
X-Director
X-Cache-Debug
Powered-By-ChinaCache
X-Via-JSL
S-Cnection
X-NetCat-Version
X-Expires-Orig
X-Instart-Request-ID
X-VARITI-CCR
RTSS
X-Sucuri-ID
X-I
X-Nginx-Cache
X-Esi
X-Geo-Country
X-Rocket-Nginx-Serving-Static
MIME-Version
X-Powered-By-VelaWeb
X-Gamma-Serve
X-Abgroup
X-Cache-Lifetime
X-Route-Server
X-TransIP-Balancer
X-Varnish-RemainingTTL
X-Varnish-ObjectSource
CF-Worker-Version
X-Sucuri-Cache
X-Varnish-Seen-By
X-Page-Cache
X-TransIP-Backend
X-Varnish-GracePeriod
Content-Disposition
X-Hypernode
X-Server-Upstream
X-Varnish-RemainingLife
X-App-Hosting
X-Cache-Control-Orig
SN
X-Matrix-Server
X-Edge-IP
X-Debug
X-Amz-Meta-S3cmd-Attrs
X-Matrix-Proxy
X-Powered-By-VTEX-Janus-Edge
X-Drupal-Cache-Tags
X-SSL-Protocol
X-SSL-Cipher
USPLoggingUUID
Contao-Page-Layout
Content-Encoding-Handler
X-Revision
X-Front
X-Storage
X-Recruiting
X-Rocket-Nginx-Bypass
X-Helper-Autoassign-All
X-Varnish-Age
X-Url-Base
X-Cache-2
X-Daa-Tunnel
X-CSRF-Protection
X-Cache-Server
X-Cache-Type
X-Vhost
X-ORACLE-DMS-ECID
Node
X-Drupal-Cache-Contexts
X-SV-Pid
Cneonction
X-Cache-IO
X-SV-Edge
X-SV-CreatedAt
X-SV-FromDBCache
X-SV-Duration
X-Flow-Powered
X-SV-Nginx-Duration
Srv
X-Cache-Operation
X-V
X-Dispatch
Service-Worker-Allowed
Nodo
X-Firenze-Processing-Time
X-Varnish-Cacheable
X-ATG-Version
X-IsCacheURL
Wsr-Cache
X-Now-Id
Strikingly-Cached-Version
Cache-Tags
X-Cache-Engine
Section-Io-Id
X-Generated
Pool
Strikingly-Cache-Region
Strikingly-Cached
X-N
X-Hostinger-Node
X-Forwarded-Proto
X-Cache-Only-Varnish
X-TTL
X-Content-Type-Option
Author
ServerName
X-LB
X-Hostinger-Datacenter
Lsrequestid
X-Ttl
Cache
If-Modified-Since
X-Grace
X-TransIP-Reserved
X-Nf-Srv-Version
X-SV-CacheTags
X-SV-Expires
X-ORACLE-DMS-RID
X-SV-Cacheable
X-HW
Server-Name
Edge-Control-Message
Https
X-Varnish-Url
FAI-W-FLOW
Dtk-Cache-Check-0
X-FTR-Request-ID
X-Cache-PageType
X-Cache-Fix
X-Correlation-Id
NnCoection
Page-Completion-Status
S
X-Cache-Device-Type
X-Locale
X-Cache-Level
X-Rq
X-CJ-Soft
X-ID
Backend
Lb
Accept-Encoding
X-SDS
X-Orig-Vary
X-NoCache
X-Last-Modified
Pv
MJ12bot
SEOMOZ
X-SSLUpstream
X-SRV
Update-Time
Src-Update
X-Trace-Id
X-Dynamic-Cache
X-SSLProxy
Location
Proxy-Connection
X-Pressidium-NinukisWP-Ver
X-Empowered-By
X-Server-Id
PICS-Label
X-Time
X-Cache-Expires
X-Varnish-IP
X-Nginx-Dummy
X-Akamai-Device-Model
X-SRCache-Key
X-Env
X-Akamai-Device-Characteristics
Content-MD5
Backend-Timing
W
AMF-Ver
X-Country-Code
X-Discourse-Route
X-CF-Passed-Proto
X-SmugMug-Values
Frame-Options
Smug-CDN
X-Real-Server
X-Id
X-Speed-Cache-Key
X-Middleware-Start
X-High-Performance
X-Speed-Cache
X-TTFB
X-Varnish-Retries
X-FW
X-GeoIP-Country-Code
X-Ratelimit-Remaining
X-Ratelimit-Limit
X-SmugMug-Hiring
X-Analytics
X-TTFB-L
X-BKSrc
X-Twitter-Response-Tags
X-Transaction
HCVer
ServerID
Accept-CH
Content-Transfer-Encoding
X-LB-Server
Accept-Charset
HAVer
X-Connection-Hash
Qs-Cache
AC-ELC
X-Frontend
X-WPL-DATA
X-Amz-Rid
NetMindSessionID
X-Cache-Control
X-Config-Blacklist-Version
X-Symfony-Cache
X-PwB-Node
X-Content-Security-Policy-Report-Only
X-CacheFROM
X-CDN-Forward
X-ACMCache
Xc-Version
Req-Id
Server-Info
X-FIRSTBase
X-Cache-TTL-Remaining
X-Service-Id
Ohc-File-Size
Pf.Web.Request.Id
X-RequestId
X-Content-Age
Content_type
Edit
X-Stage
X-Now-Cache
X-UPSTREAM
Cached
X-Disney-Akamai-Rule
X-CACHE-TTL
Local-Info
X-Cookie-Domain
X-Hiawatha-Cache
X-Adobe-Loc
X-Adobe-Content
X-SVR-IIS
X-Hit-Cache
X-Varnish-Backend
X-GeoIP-Country-Name
X-CB-Server
X-JG-Page-Cache
X-Pagename
X-Cache-Handler
X-TB-M
X-Svr-Proxy
X-PF-Uncompressing
X-Worker
X-Processing-Time
X-Varnish-Ttl
X-Browser
X-GoCache-CacheStatus
X-Balanceador
Ufe-Result
X-Debug-Token
Front
X-Litespeed-Cache-Control
X-Akamai-ERRuleID
Identity
Tracecode
CDN-Cache
From-Origin
X-Session-ID
SRV
X-Origin-Date
X-NginX-Cache
X-Amz-Storage-Class
IM-Version
X-WR-Flags
X-Content-Encoded-By
X-Webkit-CSP
X-ARRServer
Pics-Label
Ram
X-Akamai-ERPolicy
Ramp
Use-Proxy
EagleEye-TraceId
X-Proxy
X-Framework
Noq
X-BackendServer
X-Plat
Upgrade-Insecure-Requests
X-LP
X-Role
X-Drectory-Script
SHInfo
X-LW-Web-Server
X-GeoIP
X-Yottaa-Metrics
X-Remote-Addr
X-Key
X-Webstats-RespID
X-Yottaa-Optimizations
X-Backend-Status
Access-Control-Allow-Method
X-Runtime-Memory
X-UD-METHOD
MC
X-Srv
X-Sys-Req-ID
Accept-Language
X-IIJ-Cache
X-Redman-Final-Url
Url
X-Avg-Cookie-Expires
X-Nbs
X-Akamai-Edgescape
X-NWS-UUID-VERIFY
X-AVG-Country-Code
X-Magnolia-Registration
X-SERVER-NAME
Web-App-Origin-Name
X-Yadis-Location
Adm-Server
X-Redman-Backend
Eomportal-Instance
COMMERCE-SERVER-SOFTWARE
X-Server-Instance
X-Cache-Dispatchercachecontrol
X-Instance
X-Location
X-GeoIP-Country
X-ClientSide-Caching
SVR
X-Cache-Dispatcherpragma
Section-Io-Origin-Time-Seconds
X-PRAM
X-Unbounce-VisitorID
X-Atraveo-Cache-Control
X-Atraveo-ETag
X-Atraveo-Expires
Surrogate-Key-Raw
X-CacheDebug
X-Culture
X-Source-ID
X-HTML-Minification-Powered-By
X-Atraveo-From-Varnish-Cache
X-Atraveo-Param-Rm
X-Request-Uri
X-Unbounce-Variant
A-Powered-By
X-Force
X-Atraveo-Zone
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Unbounce-PageId
X-Hrouter
X-Origin
X-SE-Debug
X-Distributor
X-Sedo-Request-Id
,
CDN-RequestId
CDN-PullZone
CDN-CachedAt
X-Varnish-Hostname
X-Cache-Miss-From
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Streams-Distribution
RequestId
WWW-Authenticate
Drupal-Pagecache-Memcache
CacheControlHeader
Max-Age
CDN-Uid
X-Resource
X-Hstore
X-Pantheon-Az
X-FastCGI-Cache
X-VCS-Ttl
X-VCS-Cacheable
X-Microcache
VServer
X-Varnish-Hits
IBM-Web2-Location
X-Amzn-Trace-Id
X-Cf-Powered-By
X-FireWall-Port
X-Forwarded-Host
X-Varnish-Id
X-RealServer
X-Amzn-RequestId
X-Amz-Apigw-Id
X-Proxy-Backend
Section-Io-Origin-Status
X-Envoy-Upstream-Service-Time
X-HydroSheep
X-Varnish-Debug-TTL
X-AEM
X-Origin-Name
X-Unique-ID
X-ServerID
X-ServerIndex
X-FORWARDED-PROTO
X-A
Custom-Header
X-Pantheon-Phpreq
X-Pantheon-Site
X-Varnish-Debug-Age
X-HeBS-Cache-Status
X-Pantheon-Environment
Nopic
X-CAPServer
X-Consent-Required
AMP-Access-Control-Allow-Source-Origin
RN-Server
XDomainRequestAllowed
X-Cache-Varnish
X-Detected-Device
X-WP
X-Unique-Id
X-Cache-Doesi
X-Middleton-Pagespeed
X-Smartcache-Keys
X-Nitro-Cache
X-Garden-Version
Copyright
X-Smartcache-Timeout
X-Domain-Checked
X-Processed-By
X-App-Server
X-Provisioner-Version
X-MCB-Server
Beyond-Iis
Nitro-Cache
X-Server-Addr
Machine
X-Scheme
Dispatcher
AsisCache
X-AOL-HN
X-Directory-Script
X-Distil-CS
Cmstype
Cmsid
Serverid
DNNOutputCache
Report-To
X-SP-UniqueName
X-SP-Farm
Request-EU
Request-Country
SiteSpeed
Swift-Performance
X-Span
X-GSL-Server
X-NginX-Upstream
X-E
ViewMode
Srv-Name
X-Soro
AETN-State-Code
AKA-DEVICE
Aurora-Node
ClientIP
X-Cache-Var-Map
X-Cache-Var
X-Depends
X-WebKit-CSP-Report-Only
X-Cacheable-TTL
VSID
F5-IpCliente
X-Hit
X-Proxy-Cache-Control
Gzip
X-LB-Node
X-Webcelerate
X-UnsetCookies
X-TKP-SRV-ID
X-Storage-Cache-Date
X-Storage-Cache
SWS-Security
Nginx-Cache
Cm-Server
X-Storage-Cache-Expires
X-Shield-Request-Id
X-Info
X-HashTwo
*
X-Map-Context
X-Req-Head-Response
X-Via-S
X-Serverid
X-Amz-Id-1
X-App-Runtime
AETN-Continent-Code
AETN-City
AETN-Area-Code
AETN-Country-Code
AETN-Country-Name
AETN-Latitude
AETN-EU
AETN-DEVICE
Access-Control-Request-Headers
X-Varnish-Grace
X-Generated-Time
X-Dw-Trace-Id
X-Cache-Me-Harder
X-DataDome
X-Page
X-SSLTerm-Server
X-Runtime-Affili
AETN-Longitude
X-Desc
X-Highwire-SessionId
X-Highwire-RequestId
X-CRA-DC
X-PHP-Response-Code
X-Response
X-SmartBan-URL
X-ACCELERATE
X-SmartBan-Host
X-Cocoon-Version
X-Cache-On
X-Resolver-IP
N365rili
MW-Webserver
X-Autoru-App-Id
X-Autoru-Host
X-AF-Userserver
X-Client-Id
X-UA-Bot
X-Varnish-Action
X-EPiphany-Vid
Resin-Trace
X-Client-Vid
Locale
Environment
X-Protected-By
X-Fstrz
X-4ormat-Cacheable
X-Client-Image-Vid
Ohc-Response-Time
Filters
XX
Prama
X-NginX-Server
Fastly-Restarts
Fastly-Backend-Name
From
AR-SID
FRONT-END-SECUREBROWSER
AMP-Redirect-To
X-Nx
X-IP
HitInfo
HitType
X-FPC
X-Amzn-Remapped-Content-Length
Paypal-Debug-Id
VANITY-HOST
X-Ms-Request-Id
X-Instance-Id
X-Nx-All
X-RiS-UFDI
Edgecast
X-Server-IP
X-Akamai-Transformed
X-SAPP
X-Rebelmouse-Cache-Control
X-MSU-SOURCE
X-Clx-Request
Access-Control-Allow-Header
AR-ATIME
AR-PoweredBy
AR-CACHE
X-7d-Trace-Id
X-7d-Instance-Id
X-Actindo-Request-Id
X-Actindo-Rs
X-Actindo-Thread-Id
X-Proxy-Skip
Disablevcache
IISExport
Server-ID
X-Adnet
AETN-Postal-Code
X-Gyrobase-Publication
Dis-Env
X-Cache-Time
X-Varnish-Backend-Beresp-Backend
X-Rack-CORS
X-Amz-Meta-S3b-Last-Modified
X-Purge-URL
X-Oracle-Dms-Ecid
X-DSMX-Rewrite-MS
Home
Proxy-Agent
X-B2f-Not-Route
X-Aramark-SID
X-Cache-Node
X-DN-Cache-Control
Il-Cl
X-Cache-CFC
X-Varnish-Cache-Local
X-Purge-Host
X-Test
X-Flex-Evend
X-Flex-Tag
X-Flex-Evstart
X-Flex-Lastmod
Bios
X-Flex-Lang
Fastly-Debug-Digest
X-Flex-Tags
X-Upgrade-Enabled
X-Flex-Community
X-Route
X-Nginx-Host
X-HA-Frontend
X-HA-Backend
X-Goog-Meta-Policy
X-Goog-Meta-Replace
X-Aramark-CSID
X-DSMX-Render-MS
Play-Detected-Device
X-Amz-Meta-Content-Md5
ScoreTracker
X-ASAP-Cache
Num
X-Clara-ASAP
X-Data-Request
Server-Id
X-DynamicCache
Thanks
Proxy-Cache
Play-Detected-UserAgent
X-ASAP-Age
X-Cache-Date
X-Access-Control-Allow-Origin
Traffic-Origin
X-Amcomm-Site
Provider
X-Cache-Detail
X-Dynatrace-Js-Agent
X-Cdn-Forward
X-Path-Route
X-Hosting-Env
X-Proto
X-Appversion
PServer
Cleartype
Cteonnt-Length
Referer
X-Reflector-Cache
X-Reflector
X-HostName
X-SDE-Name
X-Via-NSCOPI
X-LBPoolMember
X-PROCESSED-BY
X-UUID
X-VTEX-Cache-Status-Janus-Edge
Server-Ip
X-ReqId
X-VERSION
X-Sorting-Hat-Expire-Cache
X-Oracle-DMS-ECID
X-Cache-Ttl
X-WEBMGR-CACHE
X-Mobilized-By
X-OpenCart-Lightning
Cf-Ipcountry
TYPO3-Pid
TYPO3-Sitename
PagesDisplayed
X-RENDER-TIME
X-Rack-Cors
X-Varnish-Server
NtCoent-Length
X-HTTPS-Cipher
X-Instance-Name
X-HTTPS-Protocol
X-Cache-TTL-Age
StatusCode
ServerTokens
X-Nginx-Page-Cache
Verto-Server
ServerSignature
X-Cache-TTL-Current
Id
X-Ghost-Cache-Status
Access-Control
X-EC2-Instance-Id
Load-Balancer
Keywords
IES-Server
ModuleCacheType
Og
X-Batcache
X-B3-Sampled
Request-Time
GD-Server
IP-Addr
Xc
X-VG-WebCache
X-Time-Microsecs
Backend-Powered-By
Content-Sn
NGX
Description
DB-Nickname
X-Batcache-Reason
X-Bcwwwid
X-Varnish-Cached
X-UPServer
X-Sn-Servicetimems
X-Varnish-Cached-TTL
Arrnode
CLMOB
DrivedBy
Debug-Status
X-Refresh
GranicusServer
X-Cdn-Origin
X-Captured
X-Built-With
X-Cms
X-DevSrv-CMS
X-MCF-ID
X-Jcms-Ajax-Id
X-Fpc
Httpd-Identifier
X-LAKANA-AB
X-Highwire-Smart-Code
X-Highwire-Sitecode
X-Built-By
X-Beluga-Trace
X-Ms-Version
X-Origin-Server
X-SCM-Server-Number
X-Proxy-Cache-Key
X-PBY
X-Beluga-Status
X-Beluga-Response-Time-X
X-Archive-Orig-Last-Modified
X-Archive-Orig-Date
X-Archive-Orig-Content-Type
X-Archive-Orig-Server
X-Beluga-Cache-Status
X-Beluga-Response-Time
X-Beluga-Record
X-Beluga-Node
X-Ssl-Cipher
X-VC-Enabled
NEL
X-Varnish-Cache-Ttl
X-Upstream-Status
X-PM-ID
X-PressLabs-Stats
X-Src-Webcache
X-Search-Id
X-Rule
X-Upstream-Backend
X-Title
X-Who
X-VHOST
X-VC-TTL
X-Airee-Node
X-Gannett-Site-Version
X-Secret
X-Ruxit-Js-Agent
X-Layout
X-Archive-Orig-Connection
X-Archive-Guessed-Charset
SB-Site-Device
SB-Cache-Remaining
SB-Cache-Life
SB-Site-IE-VERSION
X-Cache-Via
X-Machine
X-SuperCache
X-Debounce
Returned-Status
Page-Template
Actual-Object-TTL
Yoncu-Errno
X-VC-Cache
CD5
MachineName
Origin-Edge-Control
Origin-Cache-Control
NZSpeedy
X-Nginx-Request-Processing-Time
X-NodeID
DeleGate-Ver
X-Zendesk-User-Id
X-Zendesk-Origin-Server
Disp
Magicmarker
X-AMAZEEIO
NLCacheNote
Memento-Datetime
X-User-Agent-Tier
X-Timestamp
X-Redir-Url
X-ProcessESI
X-Page-Cacheable
X-RemovedCookies
X-Serv
X-Svr
X-Status
X-Server-Generated
X-TNCMS-Bot-Tier
X-Bip
X-Xml-Http-Blocked
Provided-Host
Origin-Vm
CommunityServer
X-CACHE-KEY
X-We-Are-Hiring
X-RunCloud-Cache
X-Tag-Playlist
X-TLS-Version
X-UD-Method
Generate-Time
Amfplus-Ver
MageStack-Cache-Status
MageStack-Cacheable
MageStack-Config
MageStack-Debug
MageStack-Cache-Lifetime
MageStack-Cache-Hits
HTTPS
MageStack-Area
MageStack-Cache
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-RAMCache
X-Avvio-Cms-Cacheload
VC-NoCache
Session-Id
ProxiaInstanceId
X-Blog
X-Cache-FS-Status
X-Expires
X-Dispatcher-Number
X-Catalyst
X-CacheID
Pramga
NODE
X-XHR-Current-Location
X-Ser
X-RiS-PX
X-Req-Counter
X-Nginx
X-HEAD
NB-Cache
Hummingbird-Cache
X-Frames-Options
MageStack-Loadbalancer
MageStack-Magento-Version
X-Cname-TryFiles
X-Served
X-Resty-Request-Id
X-Debug-Message
X-Cms-Mode
X-This-Proto
X-V-Cache
X-UT-Cache
X-Cache-LB
X-UA
X-Processed
X-Pj-Cache-Status
X-Hosting
X-FastCGI-Cache-Status
X-HA
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Jphone-Copyright
X-JSESSIONID
X-Deity
X-Oferteo-Domain
X-Dev
X-Az
X-WN-ClientGroup
X-SH-Cache-Status
Tempo
X-Middleton-PageSpeed
Tesla.Performance
MS-CV
X-Time-Spent
MageStack-PageSpeed
MageStack-Tag
MageStack-Web-Node
X-Itkg-Cache-Tags
X-Geoip-Country-Name
X-Activity-Id
X-Amz-Meta-Version-Id
X-App
Device
Worker
X-CH-Device
Viewport
WN
X-Confluence-Request-Time
X-ETag
X-ESI
Content
Cache-Ctrol
X-NoIndex
X-Origin-Cache
FindLaw
Firespring-Website-Id
Nd
X-Flash-Messages
X-Generated-Timestamp
X-Grid-Server
X-PageCache
X-Real-IP
X-Geo
X-ENV
X-Compress-Hint
X-Shopware-Allow-Nocache
X-Lb
X-Served-Server
X-SilverStripe-Cache
X-Sid
X-Served-From
Requested-Host
SBSS
X-Appid
X-M-Reqid
X-M-Log
X-Appmachine-Environment
X-Policy
X-Proxy-Id
X-Session-Reinit
X-Rocket-Nginx-Reason
X-Rocket-Nginx-File
X-Qnm-Cache
X-DDM-SERVER-UPDATED
X-DDM-SERVER
X-AppServer-Cache-Exception
Webserver
UrlWatchModule-Time
SS
X-AppServer-Cache-Rule
X-AppServer-Status
X-BIT-Node
X-Cache-Id
X-Fedora-School-Id
X-Cache-Extended
X-Cache-Action
Web-Server
X-Beatles
Cache-Cookie-Set-Lfrom
Cache-Cookie-Set-Idcheck
X-Artvisual-Server
X-Application
NS-VaryByCustom-Key
X-VC-Cacheable
X-Container
Ttl
Cache-Cookie-Set-From
X-WebNode
X-PBS-Fwsrvname
X-PBS-Appsvrname
X-PBS-Appsvrip
X-MyName
X-DB-Content-Length
X-CSRF-Token
X-UPSTREAM-Address
X-Static
X-Cache-ID
ID
Hosted-By
X-Varnish-Ip
X-MAT-GEO
X-ZSITES-DNS
YF-ID
X-Skip-Cache
D
X-Box
X-Shopware-Cache-Id
X-Varnish-Cache-Control
X-Geo-IP
Content-Generator
WP-AdvCache-MemCached
TP-L2-Cache
TP-Cache
SERVER-NAME
X-Agent
Ews
EQ-Cache
X-Compressed-By
X-Cluster
X-SID