Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
X-Cache
X-AspNet-Version
Age
Content-Language
X-Pingback
P3P
Via
X-UA-Compatible
Expect-CT
Upgrade
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Check
X-Template
X-Language
X-Varnish
Alt-Svc
X-Generator
X-Buckets
X-Xss-Protection
P3p
X-Drupal-Cache
X-Request-Id
Referrer-Policy
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Powered-By-Plesk
X-Download-Options
Host-Header
Content-Location
MS-Author-Via
X-ShopId
X-Sorting-Hat-ShopId
X-Sorting-Hat-Section
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PrivacyLevel
X-Dc
X-ShardId
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PodId
X-Alternate-Cache-Key
X-Runtime
X-FRAME-OPTIONS
X-IPLB-Instance
X-UA-Device
X-Powered-CMS
X-Served-By
Cartoon
X-Amz-Cf-Id
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Cache-Status
Access-Control-Allow-Credentials
X-Request-ID
Status
X-Via
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
CF-Cache-Status
X-ServedBy
X-Contextid
X-Backend
X-Mod-Pagespeed
X-CST
Powered-By
X-PC-Hit
X-PC-Key
X-PC-AppVer
X-PC-Host
X-PC-Date
Content-Encoding
X-Host
X-Server
X-WPE-Loopback-Upstream-Addr
X-Logged-In
X-DIS-Request-ID
X-CDN
Keep-Alive
X-Cache-Hit
X-Port
X-Rid
X-Endurance-Cache-Level
X-Cache-Enabled
X-Server-Powered-By
X-Tumblr-Pixel-0
X-Tumblr-User
X-Tumblr-Pixel
X-NewRelic-App-Data
X-Ua-Compatible
X-Original-Date
X-Accel-Version
X-Tumblr-Pixel-1
X-Nginx-Cache-Status
X-Robots-Tag
X-Seen-By
X-Wix-Request-Id
X-Drupal-Dynamic-Cache
X-Wix-Punisher
X-Page-Speed
X-Turbo-Charged-By
X-Forwarded-For
X-Tumblr-Pixel-2
X-Content-Powered-By
X-Forwarded-Proto
X-Proxy-Cache
X-AH-Environment
X-Content-Digest
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Pad
X-Varnish-Cache
WP-Super-Cache
Content-Security-Policy-Report-Only
X-Rack-Cache
X-LiteSpeed-Cache
X-GitHub-Request-Id
X-Request-Country
SPRequestGuid
Edge-Control
X-XRDS-Location
X-Tumblr-Pixel-3
X-MS-InvokeApp
X-SharePointHealthScore
X-Cache-Lookup
MicrosoftSharePointTeamServices
X-Cnection
Timing-Allow-Origin
X-FW-Hash
X-Died
Cf-Railgun
X-Node
X-Content-Security-Policy
X-FW-Type
X-FW-Serve
X-FW-Static
X-Amz-Request-Id
Charset
X-Amz-Id-2
Request-Id
X-FullPageCaching
Request-Context
X-Trace
X-Webcom-Cache-Status
X-Hits
X-PhApp
X-CF-Powered-By
Edge-Cache-Tag
X-BC-Stapler
X-HS-Cache-Config
MicrosoftOfficeWebServer
X-HS-Content-Id
SPIisLatency
SPRequestDuration
X-INKT-SITE
X-INKT-URI
Access-Control-Expose-Headers
X-PHP-Backend
Composed-By
Access-Control-Max-Age
X-Webserver
X-Safe-Firewall
EagleId
X-Swift-CacheTime
X-Swift-SaveTime
Grace
Served-By
X-CDN-Pop-IP
X-CDN-Pop
X-Spip-Cache
X-Newrelic-App-Data
X-Fastly-Request-ID
X-Backend-Server
X-Hyper-Cache
X-Dw-Request-Base-Id
Liferay-Portal
X-VCache
X-StackifyID
X-Tumblr-Pixel-4
X-Device
X-Server-Name
X-Firenze-Processing-Times
X-FB-Debug
X-Microcache
Surrogate-Control
X-SS-Conf
X-Cloud-Trace-Context
X-SS-Location
Front-End-Https
X-LiteSpeed-Cache-Control
Content-Style-Type
Xkey
X-DNS-Prefetch-Control
Content-Script-Type
X-RateLimit-Remaining
X-Clacks-Overhead
Public-Key-Pins
X-RateLimit-Limit
X-TNCMS
X-Loop
X-RateLimit-Reset
X-HS-Combine-CSS
X-DDC-Arch-Trace
Rating
X-Jimdo-Instance
X-Age
X-Jimdo-Wid
X-XN-XNHTML
X-XN-Trace-Token
X-SERVER
Refresh
X-Acc-Exp
X-User-Agent
X-Vtex-Processado-Em
X-WebKit-CSP
X-Cache-Config
Fpc-Cache-Id
X-Dscp-Value
X-Px
Display
X-Sol
X-Middleton-Response
X-Middleton-Display
Response
X-ServerName
X-Hostname
X-N-OperationId
X-Url
X-Correlation-Id
X-Topify-Platform
X-Cached
X-Zen-Fury
X-Kinsta-Cache
X-Generated-By
X-Tumblr-Content-Rating
X-MiniProfiler-Ids
X-Request-Time
TCN
Dmn
X-Tumblr-Pixel-5
X-Magento-Tags
P-LB
P-WS
X-Whom
X-Amz-Version-Id
X-Loopia-Node
Edge-Control-Message
X-OneAgent-JS-Injection
X-DynaTrace
X-Handled-By
X-Msg-2-Log
X-Outils-CS
X-B-Cache
X-From
PageSpeed
X-DynaTrace-JS-Agent
Rt-Fastcgi-Cache
X-Debug-Info
X-Content-Options
X-CMS-Version
Imagetoolbar
X-Cached-By
X-Ruxit-JS-Agent
X-Fastcgi-Cache
ServedBy
X-Edge-Location
Access-Control-Request-Method
X-Location-Id
Public-Key-Pins-Report-Only
Product
X-Varnish-TTL
Host
Powered
X-CacheServer
X-Cache-Rule
X-Cluster-Node
X-LBLID
X-NWS-LOG-UUID
DynaTrace
X-Varnish-Cache-Hits
X-Shard
X-Art-Request-Id
Surrogate-Key
X-AspNetWebPages-Version
X-Signature
X-Vtex-Processed-At
X-Vtex-Remote-Cache
X-VTEX-Janus-Router-Backend-App
X-Goog-Hash
X-Recruiting
X-VTEX-Cache-Status-Janus-ApiCache
X-Powered-By-VTEX-Janus-ApiCache
No
X-Umbraco-Version
X-Via-JSL
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Alternate-Protocol
X-Platform-Router
X-Platform-Processor
X-F-Cache
X-Engine
X-Accel-Expires
X-Platform
X-Upstream
X-Original-Request
X-Actual-URL
X-Returned-From-DLL
X-Passed-To
X-Returned-From
X-Passed-To-DLL
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-URL
X-Passed-To-PostProcessResponse
Retry-After
X-Returned-From-PostProcessResponse
X-Version
X-Platform-Cluster
X-Varnish-Host
X-Cdn
Ohc-File-Size
X-Device-Type
X-Matrix-Proxy
X-Matrix-Server
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Status
Fhost
X-Stale
X-Magento-Cache-Debug
Fastcgi-Cache
X-Micro-Cache
X-Microcachable
X-PERF
X-Rocket-Nginx-Bypass
X-ApacheServer
X-Application-Context
X-UD-Method
X-Developer
X-Source
X-LW-Cache
Arr-Disable-Session-Affinity
X-HOST
X-Cache-Info
X-Supported-By
X-URLSCHEME
X-S
X-Response-Time
X-EdgeConnect-Origin-MEX-Latency
X-Hosted-By
Generator
X-HS-Content-Campaign-Id
X-Translation
X-Microcache-Status
Pagespeed
X-Platform-Server
Cache-Provider
WZWS-RAY
X-Powered-By-360WZB
Last-Published
X-Storage
X-Instart-Request-ID
X-Gamma-Serve
X-Daa-Tunnel
X-TransIP-Balancer
X-App-Status
X-Powered-By-VelaWeb
X-Rnd
X-Varnish-Count
X-Varnish-HitMiss
X-App-Hosting
X-Cache-TTL
X-TransIP-Backend
X-BS
Origin
Akamai-IP
X-Defender
X-I-Sp
X-WebServer
X-Platform-Cache
X-Shop-Id
X-Drupal-Cache-Tags
X-NetCat-Version
X-Track
X-EdgeConnect-MidMile-RTT
X-RESOURCE
X-Route-Server
X-Hypernode
Content-Hash
RTSS
X-Tumblr-Pixel-6
ServerID
X-Dispatcher
USPLoggingUUID
X-Flow-Powered
X-Cache-Key
X-Vcache
X-Pantheon-Environment
Surrogate-Key-Raw
X-Pantheon-Phpreq
X-Server-ID
X-Pantheon-Site
X-ATG-Version
X-Duration
Cache-Key
X-Director
X-Front
HTTPS
Content-Disposition
Allow
Powered-By-ChinaCache
Version
X-FORWARDED-FOR
X-Powered-By-VTEX-Janus-Edge
X-Expires-Orig
X-Cache-Age
X-Cache-Debug
X-Sapient
Pool
X-I
X-Page-Cache
X-Varnish-RemainingLife
SSPAppContext
X-Varnish-RemainingTTL
X-Varnish-GracePeriod
Lsrequestid
X-Litespeed-Cache
X-Ttl
X-Varnish-Seen-By
MIME-Version
X-SV-Edge
X-SV-Duration
X-SV-CreatedAt
X-Cache-Tags
X-SV-FromDBCache
X-SV-Nginx-Duration
X-Ezoic-Cdn
Cneonction
X-SV-Pid
X-Cache-Namespace
X-Varnish-ObjectSource
S-Cnection
X-ORACLE-DMS-ECID
X-Generated
X-Drupal-Cache-Contexts
NnCoection
X-SV-Expires
X-SV-Cacheable
X-SV-CacheTags
Node
X-Lambda-Id
X-Abgroup
X-LB-Node
X-Origin
X-CSRF-Protection
X-Cache-Operation
Server-Timing
X-Revision
X-Debug
X-Grace
X-Firenze-Processing-Time
X-Client-IP
X-Varnish-Ttl
SN
X-Varnish-Cacheable
X-Magento-Cache-Control
X-Gateway-Skip-Cache
X-Gateway-Cache-Status
X-Gateway-Cache-Key
X-Content-Encoded-By
X-Bb-Deploy-Id
X-UPSTREAM
X-Vcap-Request-Id
X-Edge-IP
Accept-Encoding
Server-Name
FAI-W-FLOW
X-Environment
X-Time
X-Varnish-Age
X-Runtime-Rack
Backend
X-Cache-Control-Orig
X-Server-Upstream
X-SSL-Cipher
X-Oneagent-Js-Injection
X-Last-Modified
X-Hiawatha-Cache
X-SSL-Protocol
X-Cache-Server
Pv
X-Server-Id
X-WEBSERVER
X-PwB-Node
Wsr-Cache
X-Amz-Meta-S3cmd-Attrs
X-Akamai-Device-Characteristics
IBM-Web2-Location
X-Frame-Option
AMF-Ver
X-CJ-Soft
X-Yadis-Location
X-ARC
X-NoCache
X-Dispatch
Content-Encoding-Handler
X-Varnish-Url
ServerName
X-Goog-Stored-Content-Encoding
X-ID
X-AOL-HN
X-Avg-Cookie-Expires
X-GUploader-UploadID
X-Goog-Storage-Class
Fw-Via
X-SDS
X-Redman-Final-Url
X-Redman-Backend
X-Goog-Stored-Content-Length
X-Cache-Lifetime
X-AVG-Country-Code
X-Magnolia-Registration
X-Discourse-Route
X-Goog-Generation
X-Cache-Only-Varnish
X-Varnish-Backend
X-Akamai-Edgescape
X-Goog-Metageneration
Content-Transfer-Encoding
X-Amz-Storage-Class
X-Esi
Section-Io-Id
X-Cache-Expires
X-Content-Security-Policy-Report-Only
Req-Id
X-IsCacheURL
X-Varnish-IP
X-ORACLE-DMS-RID
Proxy-Connection
Qs-Cache
X-RequestId
X-TTL
Location
X-Akamai-Device-Model
Fastly-Debug-Digest
X-Vhost
X-Cache-Type
X-N
Server-Info
X-Content-Age
X-Nbs
S
X-Geo-Country
Srv
X-SRV
IM-Version
X-Url-Base
SRV
X-GeoIP-Country-Code
If-Modified-Since
Cache-Tags
W
X-Nginx-Cache
CacheControlHeader
Content-MD5
X-Real-Server
PICS-Label
Front
HAVer
WWW-Authenticate
X-Varnish-Retries
Page-Completion-Status
X-CF-Passed-Proto
X-High-Performance
HCVer
X-Cache-Handler
Accept-Charset
X-SO
Nodo
X-Always-Cache
X-App-Server
X-BackendServer
X-Sucuri-ID
X-SRCache-Key
MC
X-Resource
X-ServerID
Author
Pf.Web.Request.Id
X-Dynatrace-Js-Agent
X-LB
X-Country-Code
Eomportal-Instance
VANITY-HOST
X-Frontend
X-Browser
X-WPL-DATA
Contao-Page-Layout
X-Cache-Engine
X-Processing-Time
Custom-Header
X-Stage
X-Correlation-ID
X-Speed-Cache
X-Cache-Device-Type
X-Speed-Cache-Key
X-Varnish-Server
X-Shield-Request-Id
Cache
X-Ruxit-Js-Agent
X-Middleware-Start
Pics-Label
X-Litespeed-Cache-Control
X-PF-Uncompressing
X-Cache-Level
X-Content-Type-Option
X-BKSrc
X-DealerOn
Nitro-Cache
X-Remote-Addr
X-Proxy
X-Cache-Fix
X-VARITI-CCR
X-HTML-Minification-Powered-By
X-Cache-PageType
X-Cache-CFC
X-Dealeron-Original-Url
X-Airee-Node
X-Unbounce-VisitorID
X-Worker
X-Source-ID
X-Unbounce-Variant
X-Dealeron-Backend
X-Server-Instance
X-Unbounce-PageId
X-FTR-Request-ID
X-Rocket-Nginx-Serving-Static
X-GeoIP-Country-Name
X-Location
IISExport
X-Pressidium-NinukisWP-Ver
Frame-Options
X-Symfony-Cache
X-Rq
NetMindSessionID
Cached
Use-Proxy
X-Cookie-Domain
Cache-Tag
X-Framework
X-Config-Blacklist-Version
X-Empowered-By
X-Sucuri-Cache
X-WebKit-CSP-Report-Only
X-Purge-Host
Environment
X-Purge-URL
X-ACMCache
X-Drectory-Script
Cmsid
Local-Info
MJ12bot
SEOMOZ
Thanks
X-Real-IP
Cmstype
X-Srv
X-Atraveo-Cache-Control
X-CDN-Forward
Tracecode
X-AF-Userserver
X-Atraveo-Expires
Cm-Server
X-Id
X-HW
Xc-Version
X-Env
X-Atraveo-From-Varnish-Cache
X-Atraveo-ETag
From-Origin
X-Cacheable-TTL
X-Compress-Hint
X-Atraveo-Varnish-Server-Id
X-Atraveo-Zone
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-Akamai-Transformed
SVR
X-App
X-FW
Accept-CH
X-IIJ-Cache
X-Trace-Id
X-Cache-Control
X-Force
X-Directory-Script
Beyond-Iis
Access-Control-Allow-Method
X-Session-Reinit
X-EPiphany-Vid
X-Client-Image-Vid
X-Nginx-Host
X-Server-IP
X-IP
X-Client-Vid
X-PRAM
NLCacheNote
X-FW-Server
NtCoent-Length
BALANCEDTO
X-Ser
X-Fstrz
X-Garden-Version
Ufe-Result
X-NodeID
Backend-Timing
X-DTC
X-Analytics
Machine
Ohc-Response-Time
Hummingbird-Cache
X-Adnet
X-Page
X-Plat
X-GeoIP
X-Time-Microsecs
X-Blog
X-ClientSide-Caching
Bios
X-RTag
X-CB-Server
X-SmugMug-Hiring
X-SmugMug-Values
X-TTFB
X-Secret
Smug-CDN
X-Locale
X-W3TC-Minify
ServerSignature
AC-ELC
ServerTokens
X-TTFB-L
X-FPC
X-Fedora-School-Id
X-WR-Flags
Content_type
X-Sys-Req-ID
SERVER-ID
X-Dns-Prefetch-Control
X-Request-Uri
SS
X-Orig-Vary
X-SERVER-NAME
X-WN-ClientGroup
X-Resty-Request-Id
X-Akamai-3PM-SW-Version
X-LB-Server
WN
X-JG-Page-Cache
X-Akam-SW-Version
X-Runtime-Memory
X-Session-ID
Yoncu-Errno
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Pagename
X-ServerIndex
From
X-AEM
X-Varnish-Hostname
NODE
X-Hit-Cache
Url
X-ManagedFusion-Rewriter-Version
X-ACCELERATE
X-Rewritten-By
X-Search-Id
X-Unique-ID
X-Domain-Checked
X-VC-TTL
Web-App-Origin-Name
X-Adobe-Content
X-Adobe-Loc
Adm-Server
X-NginX-Cache
X-GoCache-CacheStatus
X-TB-M
X-OpenCart-Lightning
X-Webstats-RespID
X-Provisioner-Version
X-MCB-Server
X-Origin-Server
A-Powered-By
SBGI-9
X-Distil-CS
X-Backend-Status
X-WA-Info
X-PROCESSED-BY
X-Sites
X-Varnish-Debug-Age
X-Resolver-IP
X-LP
X-VC-Enabled
X-RealServer
X-Omnis-SiteID
X-Cache-Via
X-Webkit-CSP
Resin-Trace
Magicmarker
X-LW-Web-Server
X-Key
X-Culture
X-FireWall-Port
X-CAPServer
X-Title
X-Mobilized-By
X-RiS-UFDI
SBGI-1
SBGI-RealPath
SBGI-Device
X-Varnish-Id
X-Webcelerate
X-Cache-Dispatcherpragma
SBGI-10
X-Cache-Dispatchercachecontrol
X-BServer
X-BPool-Bx-Cache
X-BPool-Fx-Cache
Swift-Performance
X-Map-Context
X-Grid-Server
X-Agent
X-Layout
X-Gannett-Site-Version
SBGI-5
X-Depends
X-BPool-Back
X-BPool
X-Protected-By
X-Powered-By-Home.Pl
X-Req-Head-Response
Disablevcache
HitType
X-Src-Webcache
Myheader
Report-To
Max-Age
Proxy-Agent
SBGI-7
TheAnswer
RequestId
Service-Worker-Allowed
X-Varnish-Debug-TTL
Identity
Play-Detected-Device
Play-Detected-UserAgent
X-Clara-ASAP
X-Cocoon-Version
X-Abuse
X-ARRServer
X-ASAP-Cache
Keywords
X-Cache-Doesi
X-Cache-Node
SBGI-RenderTime
EagleEye-TraceId
Description
Edit
Accept-Language
X-Disney-Akamai-Rule
X-Rack-Cors
X-Role
X-SDE-Name
X-Highwire-SessionId
X-Highwire-RequestId
X-Captured
X-A
X-Detected-Device
X-Jphone-Copyright
Dis-Env
X-Route-To
X-Batcache-Reason
X-Batcache
X-EC2-Instance-Id
X-Balanceador
Web
X-HydroSheep
XDomainRequestAllowed
X-Distributor
AMP-Access-Control-Allow-Source-Origin
Noq
VServer
X-Hosting-Env
X-Amz-Meta-Cb-Modifiedtime
Ramp
X-Transaction
X-V
X-Traffic
X-WP
X-Varnish-ID
SiteSpeed
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Middleton-Pagespeed
X-Connection-Hash
X-Info
Fastly-Backend-Name
Lb
X-DEBUG
X-Highwire-Sitecode
X-Twitter-Response-Tags
X-SmartBan-Host
X-Highwire-Smart-Code
Ram
X-Smartcache-Timeout
X-Smartcache-Keys
X-Cdn-Forward
Device
X-SmartBan-URL
X-Cache-Time
Og
Cteonnt-Length
X-Varnish-Hits
X-Svr
Upgrade-Insecure-Requests
ClientIP
X-Data-Request
Content-Generator
X-OPNET-Transaction-Trace
MS-CV
X-Machine
NS-VaryByCustom-Key
Id
PagesDisplayed
OriginServer
X-4ormat-Cacheable
X-HashTwo
X-Rack-CORS
Gzip
F5-IpCliente
Traffic-Origin
X-Goog-Meta-Policy
X-Goog-Meta-Replace
ID
X-Debug-Token
X-Confluence-Request-Time
EN-User
SHInfo
X-Desc
X-Geo-IP
X-Varnish-Action
X-Viator-Tapersistentcookie
SG
Paypal-Debug-Id
X-DataDome
X-CacheID
X-Dw-Trace-Id
RN-Server
Edgecast
X-SH-Cache-Status
X-MAT-GEO
X-Node-Name
N365rili
Ibf5scheme
Warning
X-MidCOM-Meta-Cache
X-CRA-DC
X-Cache-On
Hamster
Access-Control-Allow-Header
X-Response
X-Proxy-Skip
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
X-Skip-Cache
X-RDP
SINA-TS
SINA-LB
Prama
X-JSESSIONID
X-Runtime-Affili
X-Wikidot-Backend
Backend-IP-Port
X-Wikidot-Static-Cache
X-Hosting
X-Header
X-App-Runtime
X-Amz-Id-1
X-Cache-Me-Harder
X-CacheDebug
X-DynamicCache
X-Compressed-By
Backend-Name
BackendServer
X-Redirector
X-Origin-Id
X-Rewrite
X-Zendesk-Origin-Server
Apachenode
X-Zendesk-User-Id
X-GSL-Server
X-Ghost-Cache-Status
X-Refresh
CommercePlatform-Version
OracleCommerceCloud-Sandiego
OracleCommerceCloud-Version
X-E
X-Gyrobase-Publication
X-Amcomm-Site
X-Varnish-Cache-Local
X-Cjtype
Dispatcher
Cleartype
X-Node-Id
X-Processed-By
X-Amz-Meta-Content-Md5
Hostname
Language
Www.Aujourdhui.Com
X-VNode
X-Old-Content-Length
X-Mobile-URL
COMMERCE-SERVER-SOFTWARE
Home
Il-Cl
MW-Webserver
CLMOB
X-XHTML-Minification-Powered-By
X-HP-Trace-Project
X-HP-Trace-ID
X-Varnish-Cache-Ttl
DrivedBy
X-Who
X-Actindo-Rs
X-Actindo-Thread-Id
X-Application
X-AMAZEEIO
X-Actindo-Request-Id
Provider
X-Server-Addr
ScoreTracker
AsisCache
X-Artvisual-Server
X-CACHE-TTL
X-Render-Time
X-SCM-Server-Number
X-UnsetCookies
X-Varnish-Grace
X-Proxy-Cache-Key
X-NginX-Server
Nginx-Cache
X-ESI
X-Nginx-Request-Processing-Time
Proxy-Cache
X-ZSITES-DNS
X-DN-Cache-Control
X-DB-Content-Length
X-B2f-Not-Route
X-Cluster
TZ-Server
X-Generated-Time
X-Autoru-Host
X-Autoru-LB
X-Frames-Options
X-Aramark-SID
X-AutoRu-App-Id
X-Tag-Playlist
X-HS-Status
X-AISO-Cacheable
X-AISO-Cache
X-AISO-Server
X-Magento-Lifetime
Strikingly-Cache-Region
NZSpeedy
X-LBPoolMember
Strikingly-Cached-Version
X-Magento-Action
VC-NoCache
Ttl
X-Author
X-Cache-Detail
X-Cms-Mode
Strikingly-Cached
Ctx
Worker
X-Dev
MyHeader
Viewport
PServer
X-Upgrade-Enabled
Server-ID
X-Client-Ip
Aoestatic
X-PM-ID
TP-Cache
X-Origin-Cache
X-Reflector
X-Reflector-Cache
X-NID
Ews
TP-L2-Cache
X-Cache-Varnish
X-Lb
X-Sid
X-Forwarded-Host
Xc
X-CGP
X-Serv
X-SATserver
X-TA-CDN-Provider
X-MSU-SOURCE
BlockPHPCallEnd
X-Built-With
X-Ants-Host
X-B3-Traceid
CDCHOST
X-Bcwwwid
X-Config-By
X-Phpwcms-Page-Processed-In
X-Hash
X-DDM-SERVER-UPDATED
XX
X-Generation-Time
X-HAProxy
X-Distributed-By
X-FreeTag-Count
X-Fpc
X-Ants-Machine-Id
X-Cache-Ttl
X-RequesterIP
X-ReqId
X-D-Time
X-Homeaway-Requestmarker
DB-Nickname
HA-Host
HA-Georegion
HA-Ipaddr
HA-Servedtime
X-Proxy-Id
HA-Geolon
HA-Geolat
HA-Geocity
HA-Cloudapp
X-SE-Debug
HA-Geocountry
X-RemovedCookies
HA-Urlpath
X-SuperCache
X-UType
Progma
X-PoweredBy
X-Phpwcms-Release
X-AWS
NKBVHEADER
X-VG-WebCache
X-Uncacheable
IES-Server
Kanooh-Host
L5d-Success-Class
Load-Balancer
X-B3-Spanid
X-OCTOPOD
X-Cache-TTL-Current
X-Cache-TTL-Age
X-Global-Transaction-ID
WP-FROM-CACHE
X-DS1D
X-Dynamic-Cache
X-Meta-Imagetoolbar
X-CD
X-FG-RequestId
X-Enhanced-By
Session-From
ServerIP
Expiries
Debug-Status
X-Max-Age
CS-SERVER
X-Backside-Transport
MSSmartTagsPreventParsing
Server-Ip
Page-Template
MSThemeCompatible
X-Instance
X-Flex-Tags
Tk
Dtk-Cache-Check-0
X-SV
X-Server-Generated
SB-Site-IE-VERSION
Request-Country
SB-Site-Device
SB-Cache-Remaining
SB-Cache-Life
Request-EU
X-Flex-Community
X-Device-Item
X-Flex-Lang
X-Flex-Lastmod
X-Meta-MSSmartTagsPreventParsing
X-Flex-Tag
X-Meta-MSThemeCompatible
X-Feed
WSCLoggingUUID
X-Flex-Evstart
X-Proto
X-Unique-Id
X-Obvious-Info
X-Pool
X-PressLabs-Stats
X-S-Misc
X-Custom-Name
X-ProcessESI
X-Script
X-Sn-Servicetimems
X-ServiceProvider
X-ServerAddr
X-Original-IP
X-PHP-Response-Code
X-COUNTRY-CODE
X-Nitro-Cache
X-We-Are-Hiring
X-Member
X-MCF-ID
X-Flex-Evend
X-OpenUrlRewriter-Debug
X-Profiler
X-PG
X-Pagely-Cache
X-Streams-Distribution
X-UPServer
TC-S-Cache
TC-Cache-U
V-TTL
HSTS
TC-S-Cache-M
X-Cache-Bypass
X-Node-App
X-Hit
X-CO-Host
TC-Cache-IC
TC-Cache
Xcache
X-XHR-Current-Location
X-Varnish-Cached-TTL
X-Varnish-Cached
X-Nginx
X-Pubstack
X-Test-Debug
Response-Time
X-Obvious-Tid
X-Jcms-Ajax-Id
CpuTime
X-Varnish-Debug-Hits
X-Sorting-Hat-Expire-Cache
X-Served
X-Pj-Cache-Status
1A-CountryCode
Generate-Time
MageStack-Cache
MageStack-Area
IsMobile
X-Made-On
X-M
X-Deity
X-Debug-Token-Link
X-CSRF-Token
X-ETag
X-Gateway-Rate-Limit-Conn
X-Header-Treatment
X-HEAD
X-Gateway-Rate-Limit-Delayed
MageStack-Cache-Hits
MageStack-Cache-Lifetime
X-Amz-Meta-Version-Id
X-Activity-Id
Tesla.Performance
X-AppVersion
X-ASAP-Age
X-Backend-TTL
X-B
X-Az
Request-Filtered-By
MageStack-Web-Node
MageStack-Config
MageStack-Cacheable
MageStack-Cache-Status
MageStack-Debug
MageStack-Loadbalancer
MageStack-Tag
MageStack-PageSpeed
MageStack-Magento-Version
X-Cname-TryFiles
X-Cache-ID
User-Agent
Server-Id
Cacheid
X-VC-Hash
V-Age
X-Ab-Selection
X-Cache-Original-TTL
X-Cache-Id
X-ACLR-Version
X-VC-Debug
X-VC-Cacheable
X-Site
X-PBY
X-Pass-Through
X-Ssl-Cipher
DeleGate-Ver
X-VC-Cache
X-Static
X-NMT-Proxy
X-ClusterID
X-Custom-Header
EQ-Cache
Be
X-VCS-Ttl
GranicusServer
HostName
X-Beatles
X-Apm-Telemetry-Syncmark
RSB-LINK
X-VCS-Cacheable
X-Shopware-Cache-Id
X-Full-Url
X-DSMX-Rewrite-MS
X-DSMX-Render-MS
X-Pixelsilk-Server
X-Pixelsilk-Version
X-Shopware-Allow-Nocache
X-Served-Server
X-Route
X-BP-NSA-REQID
X-Debug-Message
Actual-Object-TTL
X-WebNode
X-Via-NSCOPI
X-UPSTREAM-Address
Fastly-Restarts
FRONT-END-SECUREBROWSER
X-Box
X-Backend-Host
X-Avvio-Cms-Cacheload
X-Svr-Proxy
X-SSLUpstream
X-NewsFlow-Sitename
X-MyName
X-Instance-Id
X-Nginx-Request-Time
X-PBS-Appsvrip
X-SSLProxy
X-PBS-Fwsrvname
X-PBS-Appsvrname
X-Cache-Extended
X-Hrouter
Unique-Request-Id
Requested-Host
X-VTEX-Cache-Status-Janus-Edge
X-7d-Instance-Id
X-7d-Trace-Id
X-Clx-Request
X-CACHE-KEY
X-Bip
X-SilverStripe-Cache
X-Reqid
X-Log
X-KoobooCMS-Version
X-Hstore
X-M-Log
X-M-Reqid
X-REDIRECTSERVER
X-Qnm-Cache
X-Qiniu-Zone
X-HP-CAM-COLOR
X-Healthy
Amfplus-Ver
X-UT-Cache
X-UA
CommunityServer
Copyright
Referer
Provided-Host
HA-Front
X-T
X-Serverid
X-NewCloud-V-Cache
X-HA
X-FastCGI-Cache-Status
X-Ocache
X-ProBase-Server
X-SayCDN-TTL
X-Say-TTL
X-Say-Cacheable
RSL-Trace-ID
X-Beresp-Ttl
ProxiaInstanceId
XDisk
X-Transaction-Name
ReqUrl
Session-Id
X-Container
X-Catalyst
X-Cache-FS-Status
X-RAMCache
X-Pool-Info
X-FIRSTBase
X-Country
X-CH-Device
X-Front-Cache
X-Instart-Cache-Id
X-Pageid
X-Litespeed-Tag
X-IP-Address
X-DDM-SERVER