Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
X-AspNet-Version
Age
X-Pingback
P3P
Content-Language
Via
X-UA-Compatible
Expect-CT
Upgrade
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Check
X-Language
X-Template
X-Request-Id
X-Varnish
Alt-Svc
X-Generator
X-Xss-Protection
X-Buckets
P3p
X-Drupal-Cache
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-Powered-By-Plesk
Content-Location
Host-Header
X-Runtime
X-ShopId
MS-Author-Via
X-Sorting-Hat-ShopId-Cached
X-Dc
X-Sorting-Hat-PodId
X-ShardId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-Section
X-Alternate-Cache-Key
Referrer-Policy
X-UA-Device
Cartoon
X-Powered-CMS
X-IPLB-Instance
X-Served-By
X-Amz-Cf-Id
Access-Control-Allow-Headers
X-Cache-Status
Access-Control-Allow-Methods
Status
Access-Control-Allow-Credentials
X-Via
X-Ua-Compatible
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Wix-Server-Artifact-Id
CF-Cache-Status
X-Contextid
X-ServedBy
X-Backend
X-PC-Hit
X-PC-Key
Powered-By
X-Mod-Pagespeed
X-Accel-Buffering
X-PC-Host
X-PC-Date
X-PC-AppVer
Content-Encoding
X-CST
X-WPE-Loopback-Upstream-Addr
X-DIS-Request-ID
X-Logged-In
Keep-Alive
X-Host
X-CDN
X-Cache-Hit
X-Rid
X-Port
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Tumblr-User
X-Cache-Enabled
X-Server-Powered-By
X-Endurance-Cache-Level
X-Tumblr-Pixel-1
X-Server
X-Nginx-Cache-Status
X-Robots-Tag
X-Original-Date
X-Accel-Version
X-Wix-Request-Id
X-Seen-By
X-Tumblr-Pixel-2
X-Turbo-Charged-By
X-Drupal-Dynamic-Cache
X-Page-Speed
X-Pad
X-Content-Powered-By
X-Forwarded-For
X-Wix-Punisher
X-Proxy-Cache
X-Content-Digest
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-AH-Environment
WP-Super-Cache
X-Rack-Cache
X-NewRelic-App-Data
X-Varnish-Cache
X-Forwarded-Proto
X-Sorting-Hat-PrivacyLevel
Content-Security-Policy-Report-Only
X-Tumblr-Pixel-3
X-GitHub-Request-Id
X-LiteSpeed-Cache
Edge-Control
X-Request-Country
SPRequestGuid
X-SharePointHealthScore
X-MS-InvokeApp
MicrosoftSharePointTeamServices
X-XRDS-Location
X-SERVER
Timing-Allow-Origin
X-Cache-Lookup
X-Cnection
X-Newrelic-App-Data
X-Node
X-FW-Hash
X-Amz-Request-Id
X-Amz-Id-2
Cf-Railgun
X-Died
X-Trace
X-Webcom-Cache-Status
Charset
X-Content-Security-Policy
X-FW-Serve
X-FW-Static
X-FW-Type
X-Webserver
X-FullPageCaching
Request-Id
Edge-Cache-Tag
X-CF-Powered-By
X-HS-Cache-Config
X-HS-Content-Id
X-PhApp
X-Hits
MicrosoftOfficeWebServer
Request-Context
X-PHP-Backend
SPIisLatency
SPRequestDuration
X-BC-Stapler
X-INKT-SITE
X-INKT-URI
Access-Control-Max-Age
X-Safe-Firewall
EagleId
X-Swift-SaveTime
Composed-By
X-Swift-CacheTime
Grace
Access-Control-Expose-Headers
X-CDN-Pop
X-CDN-Pop-IP
Served-By
X-HS-Combine-CSS
X-Hyper-Cache
Liferay-Portal
X-Spip-Cache
X-Server-Name
X-Tumblr-Pixel-4
X-VCache
X-Backend-Server
X-Dw-Request-Base-Id
X-Device
X-Fastly-Request-ID
X-Microcache
X-Firenze-Processing-Times
X-RateLimit-Remaining
X-RateLimit-Limit
X-Cloud-Trace-Context
X-LiteSpeed-Cache-Control
X-Clacks-Overhead
X-FB-Debug
X-RateLimit-Reset
Rating
Front-End-Https
Content-Style-Type
Xkey
X-Jimdo-Instance
X-Jimdo-Wid
Surrogate-Control
X-TNCMS
X-Loop
X-ServerName
Content-Script-Type
X-Acc-Exp
X-DDC-Arch-Trace
X-User-Agent
Public-Key-Pins
Refresh
X-Cache-Config
X-Middleton-Response
X-Sol
Display
X-Middleton-Display
X-DNS-Prefetch-Control
Response
X-StackifyID
X-Vtex-Processado-Em
X-XN-XNHTML
X-XN-Trace-Token
Fpc-Cache-Id
X-Age
Real-Hostname
X-Frame-Option
X-Tumblr-Content-Rating
X-SS-Location
X-SS-Conf
X-Hostname
X-Generated-By
X-Px
X-WebKit-CSP
X-Zen-Fury
X-Cached
X-N-OperationId
X-Topify-Platform
X-Tumblr-Pixel-5
X-Dscp-Value
X-Magento-Tags
X-HOST
X-Correlation-Id
X-OneAgent-JS-Injection
X-MiniProfiler-Ids
X-Request-Time
PageSpeed
P-LB
P-WS
TCN
X-Amz-Version-Id
X-CMS-Version
X-Whom
X-Url
Rt-Fastcgi-Cache
X-Msg-2-Log
X-URL
X-From
X-Handled-By
X-DynaTrace
X-Outils-CS
X-Cached-By
X-DynaTrace-JS-Agent
X-Kinsta-Cache
X-B-Cache
Product
Access-Control-Request-Method
X-Ruxit-JS-Agent
X-AspNetWebPages-Version
X-Content-Options
X-Edge-Location
X-Debug-Info
Surrogate-Key
Host
X-Varnish-Cache-Hits
X-Varnish-TTL
X-Cdn
X-Cache-Rule
Imagetoolbar
ServedBy
Powered
Public-Key-Pins-Report-Only
X-Engine
X-Via-JSL
X-SRCache-Store-Status
X-Upstream
X-SRCache-Fetch-Status
DynaTrace
Fhost
Edge-Control-Message
Alternate-Protocol
X-CacheServer
X-Recruiting
X-Accel-Expires
X-LBLID
X-Vtex-Processed-At
X-VTEX-Janus-Router-Backend-App
X-Vtex-Remote-Cache
X-Signature
X-VTEX-Cache-Status-Janus-ApiCache
X-Application-Context
No
X-Powered-By-VTEX-Janus-ApiCache
X-Fastcgi-Cache
X-LW-Cache
X-Track
X-Umbraco-Version
X-Location-Id
X-Developer
X-Platform
X-Goog-Hash
X-Response-Time
X-Hosted-By
X-Micro-Cache
Generator
X-Passed-To-DLL
X-Returned-From-DLL
X-Returned-From
X-Actual-URL
Pagespeed
X-Passed-To
X-Original-Request
Fastcgi-Cache
X-Powered-By-VTEX-Janus-Edge
X-Magento-Cache-Debug
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-Returned-From-PostProcessResponse
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Returned-From-BeforeDispatch
Dmn
X-UD-Method
Arr-Disable-Session-Affinity
X-PERF
X-Varnish-Beresp-Status
X-ApacheServer
X-Shop-Id
X-Platform-Router
X-NWS-LOG-UUID
X-Platform-Processor
X-Defender
X-Loopia-Node
X-Stale
Retry-After
X-TransIP-Balancer
X-Cache-Age
X-Platform-Cluster
X-Rnd
X-Version
X-VARNISH-Cache
X-Instart-Request-ID
X-Cache-Info
WZWS-RAY
X-Powered-By-360WZB
Origin
X-Cache-TTL
X-Microcachable
X-URLSCHEME
X-Litespeed-Cache
HTTPS
X-BS
X-I-Sp
X-Source
X-Device-Type
X-Varnish-Host
X-Supported-By
X-HS-Content-Campaign-Id
X-RESOURCE
Akamai-IP
X-TransIP-Backend
Ohc-File-Size
X-Dispatcher
X-FORWARDED-FOR
X-F-Cache
Cache-Provider
Fastly-Debug-Digest
X-Rocket-Nginx-Bypass
Content-Hash
X-I
X-Varnish-HitMiss
X-Varnish-Count
X-S
Version
X-Tumblr-Pixel-6
X-Storage
X-Cache-Key
X-Platform-Server
Surrogate-Key-Raw
USPLoggingUUID
X-Cache-Tags
X-Pantheon-Environment
X-Pantheon-Site
X-Cache-Operation
X-Pantheon-Phpreq
X-Front
RTSS
X-NetCat-Version
X-Gamma-Serve
X-Matrix-Proxy
X-Matrix-Server
X-ATG-Version
X-EdgeConnect-Origin-MEX-Latency
X-Page-Cache
X-App-Hosting
X-Powered-By-VelaWeb
X-Translation
X-Microcache-Status
X-Server-ID
Last-Published
X-Vcap-Request-Id
X-Director
MIME-Version
X-Expires-Orig
X-Hypernode
X-CSRF-Protection
X-Varnish-Age
X-Varnish-ObjectSource
X-Varnish-RemainingTTL
X-Varnish-RemainingLife
X-Varnish-GracePeriod
X-Art-Request-Id
X-Varnish-Seen-By
X-Shard
X-Platform-Cache
X-ORACLE-DMS-ECID
Allow
X-Cluster-Node
X-Route-Server
X-Revision
X-LB
X-Ezoic-Cdn
X-Content-Encoded-By
Wsr-Cache
X-LB-Node
X-EdgeConnect-MidMile-RTT
X-Environment
Cache-Key
Content-Disposition
X-Sapient
X-Server-Upstream
X-Flow-Powered
X-Ttl
X-Abgroup
Pool
Powered-By-ChinaCache
X-SSL-Cipher
IBM-Web2-Location
X-SSL-Protocol
X-NoCache
X-Cache-Namespace
X-Drupal-Cache-Tags
X-Daa-Tunnel
X-Litespeed-Cache-Control
X-Grace
X-Cache-Debug
X-SV-Nginx-Duration
X-SV-Cacheable
X-SV-CacheTags
X-SV-CreatedAt
X-SV-Duration
X-SV-Pid
X-SV-Expires
X-SV-Edge
X-SV-FromDBCache
X-IsCacheURL
X-Varnish-Cacheable
X-Url-Base
X-Lambda-Id
SSPAppContext
X-Firenze-Processing-Time
X-ARC
Content-MD5
X-Edge-IP
X-Github-Request-Id
X-Xrds-Location
Accept-Encoding
X-Dispatch
S-Cnection
Srv
X-Nginx-Cache
FAI-W-FLOW
X-Cache-Control-Orig
X-Magento-Cache-Control
X-CJ-Soft
Lsrequestid
X-Cache-Only-Varnish
X-GeoIP-Country-Code
Cneonction
ServerID
Section-Io-Id
X-Servedby
Content-Encoding-Handler
X-Cache-Type
X-Varnish-Backend
Backend
Location
X-Generated
Page-Completion-Status
X-Cache-Lifetime
X-Vhost
X-Cache-Expires
Pv
X-Drupal-Cache-Contexts
X-Time
X-Hiawatha-Cache
X-Ss-Conf
SN
X-Varnish-Ttl
X-Ss-Location
X-PwB-Node
X-Cache-Server
X-Varnish-Url
X-Duration
X-RequestId
Fw-Via
Node
X-Debug
Proxy-Connection
X-Amz-Meta-S3cmd-Attrs
X-Client-IP
PICS-Label
X-AOL-HN
X-Proxy
ServerName
Nodo
X-Speed-Cache-Key
X-Middleware-Start
X-Akamai-Transformed
X-Fastly-Request-Id
X-Speed-Cache
X-ServerID
X-N
If-Modified-Since
X-Varnish-IP
X-GeoIP-Country-Name
AMF-Ver
X-Server-Id
Use-Proxy
X-Discourse-Route
X-Geo-Country
X-Country-Code
X-Cookie-Domain
X-Nbs
X-Magnolia-Registration
X-Cache-CFC
X-ID
Req-Id
X-Frontend
X-Cache-Level
X-Processing-Time
X-Pressidium-NinukisWP-Ver
X-Always-Cache
X-Akamai-Device-Model
X-ORACLE-DMS-RID
NnCoection
X-Cache-Handler
X-Empowered-By
X-Akamai-Device-Characteristics
X-Oneagent-Js-Injection
X-Real-Server
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-Goog-Generation
X-Goog-Metageneration
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-UPSTREAM
Server-Name
X-SRCache-Key
X-FW
X-Cache-Device-Type
X-Worker
X-Cache-Engine
X-Dynatrace-Js-Agent
X-Cache-PageType
X-Location
X-Content-Age
Cache
IM-Version
X-Purge-URL
X-Cache-Fix
Local-Info
X-Yadis-Location
MJ12bot
Author
Server-Info
X-SO
P-ID
SEOMOZ
Pf.Web.Request.Id
Accept-Charset
X-Content-Type-Option
X-DealerOn
X-Varnish-Retries
X-Browser
X-High-Performance
X-PF-Uncompressing
X-CF-Passed-Proto
X-Rocket-Nginx-Serving-Static
X-Cache-Control
X-App-Server
X-Correlation-ID
Qs-Cache
X-Amz-Storage-Class
X-Purge-Host
Cached
X-Runtime-Rack
X-ACMCache
X-WR-Flags
X-Sentry-ID
Nitro-Cache
X-Unbounce-Variant
X-Unbounce-PageId
X-Id
X-BKSrc
X-Server-Instance
Content-Transfer-Encoding
X-BackendServer
X-Esi
X-Last-Modified
X-Srv
X-Unbounce-VisitorID
X-Config-Blacklist-Version
X-Abuse
Xc-Version
X-Framework
X-Pagename
X-JG-Page-Cache
X-OpenCart-Lightning
X-CDN-Forward
X-Hit-Cache
SRV
HCVer
X-SDS
X-TTL
Adm-Server
HAVer
Thanks
X-Server-IP
NODE
Server-Timing
X-AF-Userserver
CacheControlHeader
X-Content-Security-Policy-Report-Only
Eomportal-Instance
S
X-Origin
X-Mobilized-By
X-NB-Cached-Page
X-ClientSide-Caching
Cm-Server
Custom-Header
MC
X-Ruxit-Js-Agent
Front
X-HW
X-VARITI-CCR
Cteonnt-Length
X-Varnish-Hits
Cache-Tags
X-Session-ID
X-Rq
X-Sucuri-ID
X-FTR-Request-ID
ServerTokens
ServerSignature
Frame-Options
X-HTML-Minification-Powered-By
X-Dns-Prefetch-Control
X-WPL-DATA
X-AEM
X-Gateway-Cache-Status
X-Shield-Request-Id
NtCoent-Length
X-Gateway-Cache-Key
X-Gateway-Skip-Cache
WWW-Authenticate
X-LB-Server
X-VTEX-Cache-Status-Janus-Edge
X-Processed-By
NetMindSessionID
X-Adobe-Loc
X-Adobe-Content
X-DEBUG
Magicmarker
SiteSpeed
Tracecode
X-WN-ClientGroup
Cache-Tag
WN
X-Trace-Id
X-Cache-Dispatcherpragma
X-Cache-Dispatchercachecontrol
X-SRV
W
X-Sys-Req-ID
X-LP
X-Orig-Vary
X-Page
Ufe-Result
X-Runtime-Memory
Content_type
X-CAPServer
X-Fedora-School-Id
SVR
X-Resty-Request-Id
X-Webkit-CSP
X-HydroSheep
EagleEye-TraceId
X-Traffic
X-Jphone-Copyright
VServer
Contao-Page-Layout
X-Route-To
X-CB-Server
X-Smartcache-Timeout
X-LW-Web-Server
X-Garden-Version
X-Smartcache-Keys
X-WP
X-Drectory-Script
X-EPiphany-Vid
Max-Age
X-A
Description
X-Yottaa-Metrics
X-Env
X-Client-Vid
Fastly-Backend-Name
X-Plat
Keywords
RN-Server
Web-App-Origin-Name
X-Yottaa-Optimizations
X-ServerIndex
X-Client-Image-Vid
X-Unique-ID
A-Powered-By
X-Clara-ASAP
X-Varnish-Hostname
X-Connection-Hash
X-GeoIP
X-Generated-Time
Server-ID
X-ASAP-Cache
X-Twitter-Response-Tags
X-Transaction
Proxy-Agent
X-AVG-Country-Code
X-Redman-Backend
From-Origin
X-Redman-Final-Url
Environment
X-Avg-Cookie-Expires
X-Cache-Doesi
X-Compress-Hint
X-WA-Info
Yoncu-Errno
Ramp
X-Sorting-Hat-Expire-Cache
AsisCache
Noq
VANITY-HOST
X-Akamai-Edgescape
Ram
ScoreTracker
X-Symfony-Cache
X-Hosting-Env
X-SDE-Name
X-Response
X-ARRServer
SG
X-Environment-Context
X-Webstats-RespID
X-Viator-Tapersistentcookie
X-Disney-Akamai-Rule
Og
SBGI-5
X-RDP
SBGI-RealPath
SBGI-Device
SBGI-9
SBGI-RenderTime
X-PHP-Response-Code
X-Application
X-L-Path
SBGI-7
Service-Worker-Allowed
X-Varnish-Debug-TTL
X-WebKit-CSP-Report-Only
X-CRA-DC
Access-Control-Allow-Header
X-Varnish-Debug-Age
MW-Webserver
X-Rebelmouse-Surrogate-Control
X-TTFB
X-TTFB-L
X-VNode
X-Cache-On
X-Sucuri-Cache
IISExport
Machine
X-Cache-Node
N365rili
X-RiS-UFDI
X-Stage
Ibf5scheme
SBGI-10
X-Rebelmouse-Cache-Control
Play-Detected-UserAgent
Play-Detected-Device
X-SmugMug-Values
Smug-CDN
BALANCEDTO
SBGI-1
X-Varnish-Id
X-Force
X-PRAM
X-SmugMug-Hiring
X-VC-Enabled
Cmsid
Pics-Label
Cmstype
X-Cache-Varnish
X-SV
X-Proto
X-Bip
X-VC-TTL
X-NginX-Server
X-GoCache-CacheStatus
X-Magento-Action
X-Forwarded-Host
X-Backend-Status
Beyond-Iis
Dispatcher
AC-ELC
X-Vcache
X-Resource
X-Cdn-Forward
Url
X-CacheResult
X-Autoru-Host
X-AutoRu-App-Id
X-Fstrz
X-App-Runtime
X-Directory-Script
RequestId
X-Secret
X-Autoru-LB
X-Acquia-Debug-Password
SHInfo
X-Src-Webcache
X-Key
X-Detected-Device
Dis-Env
X-Culture
XX
X-Varnish-ID
X-Desc
X-Amz-Meta-S3b-Last-Modified
X-E
Backend-Timing
X-TB-M
Home
X-Analytics
X-Varnish-Server
X-Lb
X-Cocoon-Version
X-Cms-Mode
X-Dev
From
Worker
X-Redirector
X-Session-Reinit
X-Dw-Trace-Id
X-Rack-CORS
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Runtime-Affili
XDomainRequestAllowed
X-Balanceador
X-Highwire-RequestId
X-Highwire-SessionId
X-FireWall-Port
X-Varnish-Action
X-SmartBan-Host
X-Airee-Node
Hostname
X-Amz-Meta-Cb-Modifiedtime
X-App-Status
X-WHOIS-Cached
X-Amz-Meta-Content-Md5
Ctx
X-Domain-Checked
X-Time-Microsecs
X-SmartBan-URL
X-Request-Uri
X-Real-IP
X-IIJ-Cache
X-Provisioner-Version
X-Frames-Options
X-Origin-Server
X-Atraveo-Zone
X-EC2-Instance-Id
X-Atraveo-Varnish-Server-Id
X-Atraveo-TTL
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
COMMERCE-SERVER-SOFTWARE
Bios
WP-AdvCache-MemCached
SS
Nginx-Cache
Accept-Language
Identity
X-Atraveo-From-Varnish-Cache
Access-Control-Allow-Method
X-Atraveo-Expires
Web
X-Atraveo-ETag
X-Atraveo-Cache-Control
X-Source-ID
X-MCB-Server
X-Grid-Server
Ec-Machine
X-Info
X-Pubstack
X-Depends
X-Cache-Via
X-DTC
X-Remote-Addr
X-FPC
Ec-CorrId
X-Wikidot-Backend
X-Adnet
X-ACCELERATE
X-Compressed-By
X-Amcomm-Site
X-Flex-Community
X-Data-Request
Myheader
X-Wikidot-Static-Cache
NLCacheNote
Disablevcache
X-Hosting
X-MAT-GEO
X-Goog-Meta-Policy
X-NginX-Cache
X-GSL-Server
X-Distributor
X-Origin-Cache
X-LDNR-NOT-ROOT-HL-NOTSET
X-Debug-Token
TC-S-Cache-M
TC-Cache-IC
TC-Cache
TC-S-Cache
Id
X-Rewrite
X-Confluence-Request-Time
X-Streams-Distribution
Paypal-Debug-Id
X-Ghost-Cache-Status
TC-Cache-U
X-Sites
Hname
X-Resolver-IP
X-HAProxy
X-Machine
Traffic-Origin
X-RealServer
X-Goog-Meta-Replace
X-Bcwwwid
X-HashTwo
X-Mobile-URL
X-Aramark-SID
X-B2f-Not-Route
X-Flex-Evend
Il-Cl
AMP-Access-Control-Allow-Source-Origin
X-OPNET-Transaction-Trace
Xc
X-Cluster
X-DB-Content-Length
F5-IpCliente
Gzip
OriginServer
ClientIP
X-HP-Trace-Project
X-Render-Time
X-MidCOM-Meta-Cache
X-Varnish-Cache-Local
X-Refresh
Proxy-Cache
X-HP-Trace-ID
X-Map-Context
X-Nginx-Host
X-Req-Head-Response
X-Flex-Tags
X-Flex-Tag
X-Flex-Evstart
X-Flex-Lang
X-Flex-Lastmod
X-Search-Id
Device
SERVER-ID
Strikingly-Cached-Version
X-Author
X-Magento-Lifetime
Strikingly-Cached
X-SH-Cache-Status
X-NID
Aoestatic
X-SERVER-NAME
X-Akamai-3PM-SW-Version
CLMOB
TP-Cache
X-Pagely-Cache
TP-L2-Cache
Hummingbird-Cache
X-Distil-CS
VC-NoCache
X-Batcache
Strikingly-Cache-Region
X-ESI
HitType
X-KoobooCMS-Version
X-Avvio-Cms-Cacheload
X-Cache-Extended
X-Cache-TTL-Remaining
Ohc-Response-Time
X-AISO-Server
X-HS-Status
Content-Generator
PagesDisplayed
Lb
X-Proxy-Cache-Key
X-4ormat-Cacheable
X-V
X-CACHE-TTL
NS-VaryByCustom-Key
OracleCommerceCloud-Sandiego
Ez
OracleCommerceCloud-Version
X-Proxy-Skip
X-App
X-DynamicCache
X-DN-Cache-Control
X-DSMX-Render-MS
Accept-CH
X-NodeID
X-Zendesk-Origin-Server
Upgrade-Insecure-Requests
X-Powered-By-Home.Pl
X-IP
X-DataDome
X-ASAP-Age
X-AISO-Cacheable
X-Amz-Id-1
X-Gannett-Site-Version
Server-Id
X-DSMX-Rewrite-MS
X-AISO-Cache
CommercePlatform-Version
X-Gyrobase-Publication
X-Protected-By
X-Node-Name
X-OCTOPOD
Cleartype
X-Nitro-Cache
X-Client-Ip
X-7d-Instance-Id
X-DDM-SERVER
Actual-Object-TTL
X-Sid
X-Tag-Playlist
X-Served-Server
X-DDM-SERVER-UPDATED
X-PM-ID
Ews
X-ServiceProvider
X-Captured
X-SuperCache
X-LBPoolMember
X-7d-Trace-Id
X-ETag
FRONT-END-SECUREBROWSER
X-Backend-Host
X-Zendesk-User-Id
X-Header
X-Agent
Progma
X-CacheID
BackendServer
X-Box
Copyright
X-Config-By
X-Rack-Cors
X-Country
Kanooh-Host
PServer
X-Cache-Detail
X-Server-Addr
NZSpeedy
X-Pj-Cache-Status
X-HP-CAM-COLOR
X-Cache-Keep
Ttl
X-Reflector
Server-Ip
X-ManagedFusion-Rewriter-Version
X-Serv
X-Nginx-Request-Processing-Time
X-Rewritten-By
X-Reflector-Cache
X-Batcache-Reason
X-SE-Debug
X-REDIRECTSERVER
X-CloudBurst-Backend
X-CloudBurst-Cache
X-CloudBurst-Frontend
X-CloudBurst-WordPress
ViewMode
Hamster
X-Via-NSCOPI
X-VG-WebCache
X-Phpwcms-Release
X-AppVersion
X-Hash
X-Az
X-Beatles
X-Apm-Telemetry-Syncmark
X-Amz-Meta-Version-Id
X-Phpwcms-Page-Processed-In
X-Cache-ID
Content-Cache
Viewport
X-Activity-Id
X-Cache-Time
No-Cache
X-HEAD
X-Debug-Token-Link
Cache-Status
X-Header-Treatment
X-CDN-COMPRESS
X-Made-On
Swift-Performance
ID
X-Built-With
X-Catalyst
TZ-Server
X-Domino-CacheValidationWithETagReason
X-Deity
X-CDN-RULE
X-Served
X-CSRF-Token
Tesla.Performance
X-Dealeron-Original-Url
UrlWatchModule-Time
X-Domino-CacheValidationWithETagResult
X-AppServer-Cache-Rule
X-Dealeron-Backend
Generate-Time
X-S-Misc
X-Generation-Time
X-D-Time
MS-CV
X-Cname-TryFiles
X-UA
Session-Id
X-Instance-Id
X-Middleton-Pagespeed
ProxiaInstanceId
CommunityServer
X-HeBS-Cache-Status
X-FIRSTBase
AR-SID
X-CH-Device
X-Nginx-Request-Time
X-WebNode
X-B
Fastly-Restarts
X-Beresp-Ttl
X-Cachable
X-RiS-PX
X-UPSTREAM-Address
X-I-V
X-Instart-Cache-Id
Z-Tpl
X-RAMCache
AR-ATIME
Y-Trace
X-S-C
X-T
X-S-V
X-Q-S
AR-CACHE
X-M-V
X-M-T
X-M-P
X-Mw-Workerstats
AR-PoweredBy
X-Pool-Info
X-Pageid
Tk
Provided-Host
Amfplus-Ver
X-UT-Cache
X-Transaction-Name
X-MainProfileURL
X-MainProfileName
MageStack-Area
Key
X-MainProfileID
X-Serverid
X-Obvious-Info
Requested-Host
X-HA
X-FastCGI-Cache-Status
FindLaw
X-Obvious-Tid
X-Middleton-PageSpeed
X-JSESSIONID
MageStack-Cache
MageStack-Cache-Hits
X-Hrouter
X-Hstore
MageStack-PageSpeed
X-Container
MageStack-Tag
MageStack-Web-Node
X-Cache-Me-Harder
MageStack-Magento-Version
MageStack-Loadbalancer
MageStack-Cache-Status
X-MainProfileCategory
MageStack-Cache-Lifetime
MageStack-Cache-Warning
MageStack-Cacheable
MageStack-Debug
MageStack-Config
X-Debug-Message
CpuTime
X-UnsetCookies
X-Meta-Imagetoolbar
X-Varnish-Grace
X-Webcelerate
X-Who
X-SCM-Server-Number
X-Meta-MSSmartTagsPreventParsing
X-Pass-Through
X-PBY
X-PROCESSED-BY
X-Meta-MSThemeCompatible
X-ZSITES-DNS
X-Hit
Response-Time
Language
MSThemeCompatible
MSSmartTagsPreventParsing
DrivedBy
ServerIP
X-CO-Host
X-Cache-Bypass
StatusCode
Session-From
X-Nginx-Page-Cache
X-Highwire-Smart-Code
Webserver
SB-Cache-Life
X-SilverStripe-Cache
Page-Template
MachineName
X-ReqId
X-NO-BREACH
SB-Cache-Remaining
X-DS1D
X-Enhanced-By
X-FG-RequestId
X-Omnis-SiteID
Warning
X-Unique-Id
X-Secure
X-Node-App
X-Highwire-Sitecode
X-Artvisual-Server
X-AMAZEEIO
X-Timestamp
DeleGate-Ver
Provider
Debug-Status
TheAnswer
EN-User
X-Cache-Id
X-ACLR-Version
X-Server-FQDN
X-Script
X-Cache-Original-TTL
User-Agent
Cacheid
X-VC-Cacheable
X-VC-Debug
X-VC-Hash
X-W3TC-Minify
X-Custom-Header
X-Full-Url
X-ELB
HostName
X-Proxy-Id
RSB-LINK
GranicusServer
EQ-Cache
X-Route
X-Svr
X-MCF-ID
Control-Cache
SB-Site-Device
X-VC-Cache
X-BServer
X-BPool-Fx-Cache
X-Cacheable-TTL
X-Cjtype
X-Layout
X-BPool-Bx-Cache
X-BPool-Back
CmsfirstPublishTimestamp
X-Blog
Arrnode
X-BPool
X-ServerAddr
X-XHR-Current-Location
X-Turpentine-Esi
X-Varnish-Cached
X-UPServer
X-Time-Zone
X-Title
X-Varnish-Cached-TTL
X-Varnish-Instance
X-Machine-Name
X-Static
X-VLoc
X-FORWARDED-PROTO
FastCGI-Cache
X-HOSTNAME
X-Pixelsilk-Version
X-Akam-SW-Version
X-Pixelsilk-Server
X-Instance
WSCLoggingUUID
X-Server-Hostname
X-Old-Content-Length
X-Cache-TTL-Age
X-Cache-TTL-Current
X-Dynamic-Cache
X-MSEdge-Ref
CD4
X-Locale
X-RequesterIP
X-Site
X-RemovedCookies
X-ProcessESI
DbServerName
WP-FROM-CACHE
Rewriter
Expiries
X-Member
X-PG
BlockPHPCallEnd
X-Uncacheable
DB-Nickname
DNNOutputCache
HA-Geocountry
HA-Geocity
HA-Cloudapp
Xcache
X-BackendProxy
X-CPU-Time
X-SH-Cache-Disabled
CS-SERVER
Amp-Access-Control-Allow-Source-Origin
X-Distributed-By
Countrycode
Head
Serverid
X-Theme
X-Skip-Cache
Request-Filtered-By
X-Varnish-Debug-Hits
X-Origin-Date
X-Proxy-Backend
X-Varnish-Cache-Ttl
ReqUrl
Powered-By-115
Referer
X-M
X-Gateway-Rate-Limit-Delayed
X-Prerendered
X-ClusterID
X-Backend-Name
HA-Geolat
TestCC
X-XHTML-Minification-Powered-By
X-Gateway-Rate-Limit-Conn
X-Reason-Bp
X-Cache-FS-Status
X-Test-Debug
X-Ants-Machine-Id
X-Svr-Proxy
X-SSLUpstream
X-WR-MODIFICATION
X-Geo-IP
V-Age
CDCHOST
X-Ants-Host
X-SSLProxy
X-Prerender-Token
X-NewsFlow-Sitename
X-MyName
X-Healthy
X-PBS-Appsvrip
X-PBS-Appsvrname
X-PBS-Fwsrvname
X-NMT-Proxy
X-CACHE-KEY
Actioncode
X-SCProxy
X-Ssl-Cipher
X-Request-Received
X-Request-Processing-Time
X-SayCDN-TTL
X-Say-TTL
X-Mobile-Rewrite
X-Processed
X-Say-Cacheable
X-K8s
X-Cache-ASPX
X-Status
X-Session-Id
X-Restarts
X-Fastly-Backend-Reqs
Note
User-Cache-Control
X-Built-By
X-BIT-Node
X-ACache
Edgecast
SINA-LB
X-Does-He-Have-Time
X-TLS-Version
X-TTL-Age
X-Would-Your-GrandPa-Wait
X-DevSrv-CMS
Be
Redirect-Reason
X-Beatles-Hits
X-Cache-Set
X-Your-GrandPa-Would-Wait
X-This-Proto
Www.Aujourdhui.Com
V-TTL
SINA-TS
X-Cache-LB
X-Max-Age
PB-PID
PB-RID
X-Optimization
SB-Site-IE-VERSION
Returned-Status
X-ENV
NKBVHEADER
X-MSU-SOURCE
Load-Balancer
X-DeliveryServer
X-DEBUG-TTL
Server-Hostname
X-Clx-Request
X-DEBUG-HOST
L5d-Success-Class
X-PoweredBy
HA-Ipaddr
HA-Host
HA-Georegion
Apple-Itunes-App
X-Upgrade-Enabled
X-Tt-Dbg
IES-Server
HA-Urlpath
HA-Servedtime
X-B3-Spanid
X-B3-Traceid
X-Ao-Cache-Key
Access-Control-Request-Headers
Arrow-RequestId
Resin-Trace
Realaction
X-Cache-V
MwpReleaseVersion
Container
X-Test
X-Sn-Servicetimems
VAR-Cache
X-Cacheable-By-Varnish
X-Olaf
X-Upstream-Status
X-CGP
X-Fpc
X-Server-Instance-Name
X-Server-Generated
X-Homeaway-Requestmarker
HA-Geolon