Threat Level: green Handler on Duty: Russell Eubanks

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
X-Cache
Strict-Transport-Security
CF-RAY
X-AspNet-Version
P3P
Age
X-Pingback
Content-Language
X-UA-Compatible
Via
Expect-CT
Access-Control-Allow-Origin
X-Adblock-Key
Upgrade
X-Varnish
X-Cacheable
P3p
Content-Security-Policy
X-Check
X-Template
X-Language
X-Generator
X-Buckets
X-Drupal-Cache
X-Request-Id
X-AspNetMvc-Version
X-Type
X-Cache-Group
X-Pass-Why
X-Hacker
X-Ac
Alt-Svc
Content-Location
X-Cache-Hits
X-Powered-By-Plesk
X-Permitted-Cross-Domain-Policies
X-Runtime
X-Download-Options
X-Xss-Protection
Host-Header
X-FRAME-OPTIONS
MS-Author-Via
X-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId-Cached
X-Dc
X-Sorting-Hat-Section
X-ShardId
X-Sorting-Hat-PodId
X-Alternate-Cache-Key
Cartoon
X-IPLB-Instance
X-Powered-CMS
X-UA-Device
X-Served-By
Status
X-Amz-Cf-Id
Access-Control-Allow-Headers
Access-Control-Allow-Credentials
Access-Control-Allow-Methods
X-Via
X-Iinfo
X-Cache-Status
X-Backend
X-Timer
X-ServedBy
X-CST
CF-Cache-Status
X-Contextid
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
Powered-By
X-Request-ID
X-PC-Hit
X-PC-Key
X-DIS-Request-ID
Content-Encoding
X-Mod-Pagespeed
X-PC-Date
X-PC-Host
X-PC-AppVer
X-Logged-In
Keep-Alive
X-Rid
X-Cache-Hit
X-CDN
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
WPE-Backend
X-Port
X-Host
Referrer-Policy
X-Tumblr-Pixel-1
X-Server
X-Cache-Enabled
X-Server-Powered-By
X-Tumblr-Pixel-2
X-Robots-Tag
X-Endurance-Cache-Level
X-Nginx-Cache-Status
X-Seen-By
X-Wix-Request-Id
X-Wix-Server-Artifact-Id
X-Wix-Renderer-Server
X-Turbo-Charged-By
X-Page-Speed
X-Accel-Version
X-Wix-PunisherID
WP-Super-Cache
X-Pad
X-Drupal-Dynamic-Cache
Content-Security-Policy-Report-Only
X-Content-Powered-By
X-Tumblr-Pixel-3
X-Forwarded-For
X-Forwarded-Proto
X-Content-Digest
X-Varnish-Cache
Surrogate-Key-Raw
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Rack-Cache
X-AH-Environment
X-Proxy-Cache
X-GitHub-Request-Id
X-Died
X-Original-Date
SPRequestGuid
X-Cnection
X-SharePointHealthScore
MicrosoftSharePointTeamServices
X-MS-InvokeApp
X-Request-Country
Edge-Control
X-XRDS-Location
X-LiteSpeed-Cache
X-Cache-Lookup
Cf-Railgun
Timing-Allow-Origin
X-WPE-Loopback-Upstream-Addr
X-Amz-Request-Id
X-Amz-Id-2
X-Safe-Firewall
MicrosoftOfficeWebServer
X-Webserver
Charset
Request-Id
X-FW-Hash
X-SERVER
X-FullPageCaching
X-FW-Type
X-FW-Serve
X-FW-Static
Edge-Cache-Tag
X-PhApp
X-HS-Cache-Config
X-Content-Security-Policy
X-HS-Content-Id
X-Node
X-INKT-URI
X-INKT-SITE
SPIisLatency
SPRequestDuration
X-CF-Powered-By
Composed-By
X-Tumblr-Pixel-4
X-Hits
Access-Control-Max-Age
Content-MD5
Liferay-Portal
Grace
X-Swift-CacheTime
X-Swift-SaveTime
X-Spip-Cache
X-Newrelic-App-Data
Request-Context
Served-By
EagleId
X-CDN-Pop-IP
X-CDN-Pop
X-VWS-Id
X-AWS-Id
X-LJ-Flow-ID
X-BC-Stapler
X-Hyper-Cache
Access-Control-Expose-Headers
Rating
X-Server-Name
X-PHP-Backend
X-Backend-Server
Fastly-Debug-Digest
X-Device
X-Firenze-Processing-Times
X-Fastly-Request-ID
X-Dw-Request-Base-Id
X-Microcache
X-Tumblr-Content-Rating
X-ServerName
X-VCache
X-RateLimit-Remaining
Content-Style-Type
X-RateLimit-Limit
X-Cloud-Trace-Context
Public-Key-Pins
Content-Script-Type
X-RateLimit-Reset
X-User-Agent
X-Jimdo-Instance
X-Jimdo-Wid
X-FB-Debug
Front-End-Https
Refresh
X-Clacks-Overhead
X-Cache-Config
X-Loop
X-TNCMS
Real-Hostname
X-DDC-Arch-Trace
X-Acc-Exp
X-XN-Trace-Token
X-XN-XNHTML
Surrogate-Control
X-Age
Xkey
Fpc-Cache-Id
X-Trace
X-Px
X-Tumblr-Pixel-5
X-Sol
Display
X-Middleton-Response
X-Middleton-Display
Response
X-Hostname
PageSpeed
X-N-OperationId
X-Cached
X-DNS-Prefetch-Control
X-Generated-By
X-StackifyID
X-SS-Location
X-SS-Conf
X-LiteSpeed-Cache-Control
X-Topify-Platform
Surrogate-Key
X-MiniProfiler-Ids
X-Request-Time
X-WebKit-CSP
X-DynaTrace-JS-Agent
X-Cached-By
X-Zen-Fury
X-FORWARDED-FOR
X-Content-Options
X-Whom
TCN
X-Amz-Version-Id
Edge-Control-Message
X-Url
X-DynaTrace
X-Pantheon-Site
X-Pantheon-Environment
X-Pantheon-Phpreq
Rt-Fastcgi-Cache
X-CMS-Version
X-HS-Combine-CSS
X-URL
X-ApacheServer
X-PERF
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Outils-CS
X-Content-Security-Policy-Report-Only
Access-Control-Request-Method
X-Kinsta-Cache
Product
X-Handled-By
Alternate-Protocol
X-AspNetWebPages-Version
X-Magento-Tags
P-WS
P-LB
DynaTrace
Host
X-Umbraco-Version
X-LBLID
X-OneAgent-JS-Injection
X-Tumblr-Pixel-6
Imagetoolbar
X-Engine
X-Microcachable
X-Varnish-TTL
X-Goog-Hash
X-Correlation-Id
X-Varnish-Cache-Hits
X-Recruiting
X-Fastcgi-Cache
X-HOST
Powered
ServedBy
X-Ruxit-JS-Agent
Fhost
X-Cache-Rule
X-NWS-LOG-UUID
Generator
WZWS-RAY
X-Powered-By-360WZB
X-CacheServer
X-Edge-Location
X-From
X-B-Cache
X-Micro-Cache
X-Location-Id
X-Track
X-RESOURCE
X-Vtex-Remote-Cache
X-VTEX-Cache-Status-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-Vtex-Processado-Em
No
X-Powered-By-VTEX-Janus-ApiCache
X-Vtex-Processed-At
X-Actual-URL
X-Instart-Request-ID
X-Hosted-By
X-URLSCHEME
X-Returned-From
X-Passed-To-DLL
X-Original-Request
X-Passed-To
X-Returned-From-DLL
X-Application-Context
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
Fastcgi-Cache
X-Varnish-Beresp-Grace
X-Passed-To-BeforeDispatch
X-Returned-From-BeforeDispatch
X-Returned-From-PostProcessResponse
Origin
X-Passed-To-PostProcessResponse
X-Cache-Age
X-Tec-Api-Origin
X-Tec-Api-Version
X-Tec-Api-Root
X-Powered-By-VTEX-Janus-Edge
Public-Key-Pins-Report-Only
X-Stale
Arr-Disable-Session-Affinity
X-Ua-Compatible
X-Upstream
X-UD-Method
X-Varnish-Host
Content-Hash
X-Cache-TTL
Dmn
X-Developer
Akamai-IP
X-Msg-2-Log
X-I-Sp
X-BS
X-Accel-Expires
X-Response-Time
X-Matrix-Server
X-Matrix-Proxy
X-App-Hosting
X-Device-Type
X-LB
X-NetCat-Version
X-Platform
X-Rocket-Nginx-Bypass
X-Source
X-Duration
X-TransIP-Balancer
X-S
X-Storage
HTTPS
X-Debug-Info
X-VARNISH-Cache
X-Platform-Processor
X-Internal-ReqID
X-Signature
X-Platform-Router
X-Version
X-Shop-Id
X-Platform-Cluster
Last-Published
X-Defender
X-Front
X-Daa-Tunnel
X-Page-Cache
X-LW-Cache
Cache-Key
X-Supported-By
X-Microcache-Status
X-Translation
X-TransIP-Backend
X-HS-Content-Campaign-Id
X-Revision
X-EdgeConnect-Origin-MEX-Latency
Ohc-File-Size
X-Cache-Debug
Pool
MIME-Version
X-Varnish-Count
X-Powered-By-VelaWeb
X-Varnish-HitMiss
X-Cache-Info
Powered-By-ChinaCache
IBM-Web2-Location
X-Varnish-Cacheable
X-Expires-Orig
X-NoCache
X-Cache-Operation
X-EdgeConnect-MidMile-RTT
X-I
X-Art-Request-Id
X-Server-ID
X-Gamma-Serve
X-ATG-Version
Version
X-Content-Encoded-By
USPLoggingUUID
X-Director
X-F-Cache
Cache-Provider
X-Cache-Key
X-Dispatch
Node
X-Dispatcher
Content-Disposition
X-Varnish-Age
X-Cache-Only-Varnish
X-Lambda-Id
X-Platform-Server
X-Firenze-Processing-Time
X-VTEX-Cache-Status-Janus-Edge
X-TTL
X-Vcap-Request-Id
X-Hypernode
X-Cache-Tags
X-Origin
IM-Version
ServerName
X-Server-Upstream
X-SV-FromDBCache
X-Flow-Powered
X-SV-Duration
X-SV-Pid
X-SV-CreatedAt
X-Debug
X-GeoIP-Country-Code
X-SV-Nginx-Duration
X-SV-Edge
X-SV-CacheTags
X-SV-Expires
X-SV-Cacheable
X-Route-Server
SSPAppContext
Allow
X-ARC
X-Varnish-Backend
X-Varnish-GracePeriod
X-Varnish-RemainingLife
X-AOL-HN
X-Varnish-ObjectSource
X-Varnish-Seen-By
X-Varnish-RemainingTTL
X-UPSTREAM
X-SSL-Cipher
X-Sucuri-ID
X-Abgroup
X-SSL-Protocol
X-Cache-Control-Orig
X-Magento-Cache-Debug
Srv
X-Platform-Cache
X-Client-IP
Lsrequestid
X-Cache-Lifetime
X-Cache-Expires
X-Sucuri-Cache
Accept-Encoding
Content-Encoding-Handler
Fw-Via
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-CJ-Soft
X-Last-Modified
X-Geo-Country
X-GUploader-UploadID
X-Goog-Metageneration
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
X-Cookie-Domain
X-Grace
X-Dns-Prefetch-Control
X-Edge-IP
X-Loopia-Node
X-Proxy
X-SDS
Pv
ServerID
Proxy-Connection
Cneonction
Location
X-RequestId
X-LB-Node
FAI-W-FLOW
X-Litespeed-Cache
Backend
X-Via-JSL
SN
X-PwB-Node
Section-Io-Id
X-Amz-Meta-S3cmd-Attrs
X-Akamai-Device-Characteristics
X-Browser
X-Speed-Cache-Key
X-Speed-Cache
X-ORACLE-DMS-ECID
X-Content-Age
PICS-Label
X-Correlation-ID
Tracecode
Wsr-Cache
X-GeoIP-Country-Name
X-SE-Debug
X-Nbs
X-IsCacheURL
X-Processed-By
X-Abuse
X-Hiawatha-Cache
X-SRCache-Key
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Cache-Server
Page-Completion-Status
X-Country-Code
X-Url-Base
X-Discourse-Route
X-ServerID
NnCoection
Req-Id
Accept-Charset
X-Server-Id
X-Cache-Engine
X-Xrds-Location
RTSS
X-Rnd
X-Sapient
X-Id
Edge-Content-Tag
X-CDN-Forward
X-Varnish-Url
X-BKSrc
X-Cf-Powered-By
X-NB-Cached-Page
X-Middleware-Start
X-N
X-Yadis-Location
S
X-Shield-Request-Id
X-Varnish-Ttl
Author
X-Drupal-Cache-Tags
X-Akamai-Device-Model
Cm-Server
X-Generated
WWW-Authenticate
X-Time
Xc-Version
X-CDN-Node
X-Orig-Vary
X-Worker
X-Frontend
X-CDN-Cache-Status
A-Powered-By
If-Modified-Since
X-Purge-URL
X-Cache-Type
X-BackendServer
X-FW
X-Cache-CFC
X-Nginx-Cache
X-Processing-Time
X-Config-Blacklist-Version
Use-Proxy
X-Route-To
X-Traffic
Nodo
X-Srv
HAVer
X-Akamai-Transformed
X-Cache-Level
Qs-Cache
Cache
X-Varnish-ID
HCVer
X-Cache-PageType
X-Vhost
X-ID
X-Cache-Fix
Server-Info
X-Cache-Control
X-Varnish-IP
X-SO
Local-Info
Content-Transfer-Encoding
X-HP-Trace-Project
X-HP-Trace-ID
X-PF-Uncompressing
X-Amz-Storage-Class
X-Magnolia-Registration
X-DealerOn
X-Always-Cache
X-Purge-Host
S-Cnection
Eomportal-Instance
X-Pressidium-NinukisWP-Ver
Frame-Options
X-Cache-Provider
X-Cache-Source
SRV
X-Empowered-By
X-ClientSide-Caching
X-LB-Server
X-Magento-Cache-Control
X-Environment
AMF-Ver
X-Varnish-Hits
X-Env
X-VARITI-CCR
X-Runtime-Memory
MJ12bot
SEOMOZ
Thanks
X-Yottaa-Metrics
X-DataDome
X-Yottaa-Optimizations
NetMindSessionID
Web-App-Origin-Name
X-Webkit-CSP
X-JG-Page-Cache
X-WN-ClientGroup
WN
X-Pagename
Access-Control-Allow-Header
X-FireWall-Port
X-Litespeed-Cache-Control
X-App-Server
SVR
NODE
X-Hit-Cache
AddOutputFilterByType
X-Cache-Handler
X-Real-Server
X-High-Performance
X-Varnish-Retries
X-Cache-Device-Type
MC
X-Framework
X-CF-Passed-Proto
X-ServerIndex
Cached
Cache-Tag
Magicmarker
X-Healthy
X-ACMCache
CLMOB
Retry-After
X-Amz-Meta-Cb-Modifiedtime
X-Powered-By-Server
Server-Name
X-Mobilized-By
X-Ttl
X-Dw-Trace-Id
X-Atraveo-From-Varnish-Cache
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
X-Atraveo-Expires
X-Remote-Addr
X-Atraveo-Cache-Control
X-Atraveo-ETag
X-CDN-RULE
X-Cache-Doesi
X-Varnish-Server
X-VC-TTL
X-CDN-COMPRESS
X-Culture
X-Atraveo-Varnish-Server-Id
X-Atraveo-Zone
X-Force
X-Atraveo-TTL
X-PRAM
X-Directory-Script
Nitro-Cache
X-CB-Server
Front
X-HW
X-SmugMug-Values
X-Runtime-Rack
X-WR-Flags
X-TTFB
X-SmugMug-Hiring
Warning
X-Cluster-Node
Dispatcher
X-GeoIP
EagleEye-TraceId
X-TTFB-L
X-Twitter-Response-Tags
X-Transaction
CacheControlHeader
Proxy-Agent
Smug-CDN
X-Connection-Hash
W
NtCoent-Length
X-Session-ID
X-NODE
Content_type
X-Drectory-Script
Pagespeed
X-Drupal-Cache-Contexts
Max-Age
BALANCEDTO
Disablevcache
X-ASAP-Cache
X-AF-Userserver
X-Clara-ASAP
X-Ezoic-Cdn
X-Server-Instance
X-Client-Vid
X-ORACLE-DMS-RID
X-Unbounce-VisitorID
X-EPiphany-Vid
X-Unbounce-PageId
X-Debug-Token
X-Adobe-Loc
X-WHOIS-Cached
X-Adobe-Content
X-Middleton-PageSpeed
X-LP
X-Unbounce-Variant
X-App-Status
X-Sys-Req-ID
X-VC-Enabled
X-Provisioner-Version
X-Mobile-URL
X-Nginx-Host
X-Client-Image-Vid
X-HOSTNAME
X-Domain-Checked
X-Balanceador
X-Avg-Cookie-Expires
OriginServer
Home
X-Akamai-Edgescape
X-Symfony-Cache
Identity
X-Cache-Node
X-Key
X-Varnish-Hostname
X-This-Proto
Cmstype
X-IIJ-Cache
DNNOutputCache
Cmsid
X-Redman-Final-Url
X-UA
X-WR-MODIFICATION
X-Wix-Punisher
X-Session-Reinit
X-AVG-Country-Code
X-Redman-Backend
Ctx
X-Cocoon-Version
X-Server-IP
Backend-Timing
X-Analytics
Machine
Strikingly-Cached
X-OpenCart-Lightning
Strikingly-Cached-Version
X-Map-Context
X-Req-Head-Response
X-Location
X-Backend-Status
X-Fedora-School-Id
X-Resty-Request-Id
X-ARRServer
Keywords
Beyond-Iis
X-Info
Strikingly-Cache-Region
X-HTML-Minification-Powered-By
HitType
X-HP-Redirect
X-HA-Backend
X-Origin-404Back
X-HA-Frontend
X-B2f-Not-Route
Ram
X-Machine
SBMCLOUD
X-Origin-404URL
X-Content-Type-Option
X-Aramark-SID
X-Varnish-Cache-Local
X-Goog-Meta-Goog-Reserved-File-Mtime
MW-Webserver
X-Cache-Dispatchercachecontrol
X-Apm-Telemetry-Syncmark
X-Cache-Dispatcherpragma
X-App
X-HashTwo
X-Batcache-Reason
X-Amz-Id-1
Yoncu-Errno
X-Wikidot-Backend
X-Batcache
Swift-Performance
Ufe-Result
ViewMode
X-Wikidot-Static-Cache
X-RiS-UFDI
X-Source-ID
X-Data-Request
X-EC2-Instance-Id
Noq
X-Resolver-IP
X-CAPServer
X-TB-M
X-Rack-Cors
Pics-Label
X-Cache-Detail
IISExport
X-Jphone-Copyright
X-A
X-Disney-Akamai-Rule
X-Garden-Version
X-CSRF-Token
SBGI-5
SBGI-1
X-WP
SBGI-7
SBGI-10
SBGI-RenderTime
SBGI-9
SBGI-RealPath
SBGI-Device
X-Goog-Meta-Policy
X-Goog-Meta-Replace
From-Origin
X-Page
Description
COMMERCE-SERVER-SOFTWARE
Fastly-Backend-Name
Nginx-Cache
X-ACCELERATE
X-Autoru-LB
X-Stage
X-LW-Web-Server
X-INSTART-START
X-Autoru-Host
X-AutoRu-App-Id
X-DB-Content-Length
X-Webcelerate
Bios
NLCacheNote
X-Esi
X-HydroSheep
X-Ser
SHInfo
Access-Control-Allow-Method
WP-AdvCache-MemCached
X-NginX-Cache
From
X-DSMX-Rewrite-MS
X-Frame-Option
Accept-Language
Il-Cl
X-DSMX-Render-MS
X-Blog
X-SDE-Name
X-Hosting-Env
RN-Server
Ews
X-SERVER-NAME
Id
X-Cache-TTL-Remaining
X-Plat
X-Hosting
X-Smartcache-Keys
X-Smartcache-Timeout
X-E
ServerTokens
ServerSignature
X-Generated-Time
X-Rocket-Nginx-Serving-Static
Cteonnt-Length
Cache-Tags
Dis-Env
Set-Cookie2
ScoreTracker
Traffic-Origin
X-MSEdge-Ref
Proxy-Cache
X-NginX-Server
Ttl
XDomainRequestAllowed
SiteSpeed
X-AEM
X-Hstore
X-Trace-Id
X-RealServer
PagesDisplayed
X-Pj-Cache-Status
X-Gyrobase-Publication
X-Hrouter
X-Grid-Server
AsisCache
X-Served-Server
X-KoobooCMS-Version
X-NewRelic-App-Data
X-Rq
X-LBPoolMember
Worker
X-Cms-Mode
X-Dev
X-HITS
X-Unique-ID
X-CACHE-TTL
X-Replay-Request-ID
Hosted-By
AMP-Access-Control-Allow-Source-Origin
X-Actindo-Request-Id
X-Actindo-Rs
X-Actindo-Thread-Id
X-PM-ID
X-Machine-Name
X-MAT-GEO
Content-Server
X-Cache-Time
X-Frames-Options
TC-Cache
X-CacheResult
X-Airee-Node
X-MidCOM-Meta-Cache
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Highwire-RequestId
X-VarnMisc-UrlChanged
X-Rewrite
X-GSL-Server
FastCGI-Cache-Status
TC-Cache-IC
X-Sc-Cache
AccessControlAllowOrigin
X-Ghost-Cache-Status
X-Depends
SB-Site-IE-VERSION
RSB-LINK
SB-Site-Device
SB-Cache-Remaining
SB-Cache-Life
X-WPL-DATA
X-Ss-Conf
X-VarnState-NoCache
X-VarnMisc-Url
Cluster-ID
Hname
SG
X-Cached-Status
X-Proto
X-MCB-Server
Access-Control-Request-Headers
X-Ss-Location
NS-VaryByCustom-Key
Paypal-Debug-Id
X-Actindo-Error-1
X-Highwire-SessionId
X-Flex-Lang
X-Flex-Tag
X-Flex-Evstart
X-Flex-Evend
X-Cache-On
X-Flex-Community
X-Flex-Tags
TC-Cache-U
X-Cache-Keep
WebServer
X-We-Are-Hiring
Sophnep-Edge-FX
X-Nginx
Myheader
X-Rack-CORS
X-Response
X-RDP
X-Adnet
X-DTC
X-SmartBan-Host
TC-S-Cache-M
PServer
X-CRA-DC
X-Distil-CS
X-SmartBan-URL
TC-S-Cache
X-Render-Time
X-ACLR-Version
X-Flex-Lastmod
Gzip
X-Amz-Meta-Content-Md5
ClientIP
F5-IpCliente
X-DN-Cache-Control
MS-CV
X-EMAC-Request-ID
Xc
X-ReqId
X-Unique-Id
X-Distributor
Web
X-HostName
X-OPNET-Transaction-Trace
X-Turpentine-Esi
X-Search-Id
X-SCM-Server-Number
VServer
X-Detected-Device
Og
X-Optimization
X-Header
X-Oracle-DMS-ECID
X-Cache-HT
X-Artvisual-Server
X-AMAZEEIO
Response-Time
INFO
X-CacheID
X-HAProxy
X-Origin-Cache
X-Upstream-Status
X-Dynatrace-Js-Agent
X-Src-Webcache
X-Cache-Id
X-Origin-Server
ServerIP
X-Avvio-Cms-Cacheload
X-Session-Id
X-Upstream-Backend
X-Cache-Via
X-Secret
Hamster
X-Webstats-RespID
X-XHR-Current-Location
X-OCTOPOD
X-Svr
Url
X-Title
Edgecast
X-App-Version
CommunityServer
X-Proxy-Cache-Key
Actual-Object-TTL
X-Layout
X-JSESSIONID
X-Pagely-Cache
X-Desc
X-ETag
Tempo
Quri
X-RemovedCookies
X-SilverStripe-Cache
X-4ormat-Cacheable
X-Does-He-Have-Time
X-Cache-LB
X-Beatles
X-Author
Uuri
Buuteeq-Source
X-WA-Info
X-Webkit-CSP-Report-Only
X-Header-Treatment
X-Router
X-Viator-Tapersistentcookie
X-TTL-Age
X-Would-Your-GrandPa-Wait
Ibf5scheme
N365rili
Server-ID
X-Your-GrandPa-Would-Wait
X-Cname-TryFiles
AC-ELC
X-VNode
X-GoCache-CacheStatus
X-Captured
X-Cache-Set
X-Tag-Playlist
X-Server-Generated
X-Real-IP
X-Beatles-Hits
DrivedBy
X-Forwarded-Host
Brightspot-Id
X-Served
X-SCProxy
X-HA
X-Deity
X-Debug-Message
Session-From
X-ASAP-Age
X-ProcessESI
X-Processed
X-CCM
X-M
X-Lima-Id
X-Obj.Ttl
X-Varnish-URL
ProxiaInstanceId
X-ChromeLogger-Data
X-Runtime-Affili
X-Lb
Device
BackendServer
X-Nginx-Request-Processing-Time
RATING
X-W3TC-Minify
X-PBY
Server-Ip
X-Serv
X-Cache-BE
X-Bcwwwid
X-Varnish-Ip
X-App-Runtime
X-SH-Cache-Status
X-Cdn-Forward
X-Reflector
X-Site
X-Container
X-Reflector-Cache
TP-L2-Cache
X-REDIRECTSERVER
X-Varnish-Action
X-Cache-Warmer
NZSpeedy
X-IP
TP-Cache
X-Resource
Provider
SERVER-ID
X-CACHE-KEY
X-RAMCache
X-Varnish-Debug-Age
StatusCode
X-Server-Addr
X-Meta-MSSmartTagsPreventParsing
X-Meta-MSThemeCompatible
X-Meta-Imagetoolbar
X-Fstrz
X-Gannett-Site-Version
X-Cache-TTL-Current
X-Cache-TTL-Age
X-Instance-Name
X-Time-Zone
X-ELB
X-CPU-Time
X-MCF-ID
X-Node-ID
X-Script
X-Country
X-Cache-Varnish
X-Uncacheable
X-Proxy-Id
Cache-Status
D
X-Built-With
X-Server-FQDN
X-ServerAddr
Debug-Status
X-VLoc
Hostname
Httpd-Identifier
MSSmartTagsPreventParsing
X-Varnish-Instance
X-Varnish-Cached-TTL
X-Streams-Distribution
X-Varnish-Debug-TTL
X-UPServer
X-Varnish-Cached
MSThemeCompatible
X-Forwarded-By
X-UPSTREAM-Address
X-HEAD
Generate-Time
PB-PID
Tesla.Performance
PB-RID
X-Cache-ID
HostName
X-Pixelsilk-Version
X-Pixelsilk-Server
X-Route
X-Test
EQ-Cache
Be
X-Amz-Meta-Version-Id
X-DynamicCache
CD4
X-Phpwcms-Release
X-Config-By
Arrnode
X-Sites
X-ImpID
X-Phpwcms-Page-Processed-In
X-Backend-Host
X-UT-Cache
X-Mobile-Rewrite
X-FIRSTBase
X-Dynamic-Cache
X-Server-Instance-Name
X-NID
X-Checkout
X-Ezpublish-Installationid
X-Built-By
X-Ezpublish-Nodeid
X-NodeID
X-UUID
X-Pass-Through
X-SV
X-Status
X-AG-MIPS
MwpReleaseVersion
X-DS1D
X-HS-Status
X-Restarts
Accept-CH
Aurora-Node
Ozcache
X-Srcache-Fetch-Status
Server-Tuning
User-Agent
X-Backend-Name
V-Age
X-Time-Microsecs
X-Rewritten-By
X-Cjtype
Service-Worker-Allowed
X-FRUIT
X-ManagedFusion-Rewriter-Version
X-Srcache-Store-Status
AGI-Request-ID
X-Old-Content-Length
X-Not-Cacheable
X-Nginx-Request-Time
X-Cacheable-TTL
MageStack-Web-Node
X-VC-Debug
MageStack-PageSpeed
X-MainProfileURL
X-MainProfileName
X-CH-Device
X-HP-CAM-COLOR
X-LOCATION
X-MainProfileCategory
X-MainProfileID
X-WebNode
MageStack-Magento-Version
MageStack-Cache
MageStack-Cache-Hits
X-Agent
X-Application
X-Brought-To-You-By
X-Box
MageStack-Cache-Lifetime
MageStack-Cache-Status
MageStack-Debug
MageStack-Loadbalancer
MageStack-Config
Resin-Trace
MageStack-Cacheable
Str-Bsite
X-DevSrv-CMS
X-Serendipity-InterfaceLang
Note
X-Serendipity-InterfaceLangSource
Provided-Host
X-Webapp
X-UseReverse-Proxy
Y-Trace
X-Router-Backend
X-L-Path
X-IP-Address
X-Magento-Action
X-Pageid
Fw-Cache-Status
X-V
X-Zendesk-Origin-Server
X-Accel-Cache-Control
X-Environment-Context
Str-Ip
Referer
RequestId
X-Amcomm-Site
X-Fastly-Backend-Reqs
XDisk
X-Zendesk-User-Id
X-Compressed-By
X-FreeTag-Count
Session-Id
MageStack-Area
MageStack-Tag
Lb
DbServerName
FindLaw
AR-CACHE
AR-SID
Content-Cache
X-Made-On
X-Sid
X-Upgrade-Enabled
AR-ATIME
Rewriter
SS
X-Highwire-Sitecode
X-Highwire-Smart-Code
X-Bip
X-AppServer-Cache-Rule
UrlWatchModule-Time
Webserver
X-Max-Age
X-Powered-By-Home.Pl
AR-PoweredBy
X-DeliveryServer
X-Cluster
X-Cache-Extended
X-ENV
X-Dynamic
X-Beresp-Ttl
Serverid
X-COUNTRY-CODE
X-DEBUG
X-Varnish-Currency
X-7d-Instance-Id
X-Turpentine-Cache
X-7d-Trace-Id
X-AWS
X-Protected-By
X-BC
X-RequesterIP
X-Front-Cache
X-Varnish-Esi-Access
X-AISO-Cache
X-Purge-Level
X-Amz-Meta-S3b-Last-Modified
X-Allow-Redis
X-Transaction-Name
Www.Aujourdhui.Com
X-Ar-Debug
X-Config-Version
X-AISO-Cacheable
X-AISO-Server
X-Cache-Served
X-Client-Ip
X-Obvious-Tid
X-Obvious-Info
X-BeResp-Ttl
CacheControlMode
X-Cache-Action
X-Instart-Cache-Id
ERev-Ver
Tst
Section-Io-Cache
X-WHO
X-Custom-Name
WP-Cache
Ez
Tk
X-Varnish-Esi-Method
X-PoweredBy
ServerNode
X-Theme
X-Varnish-Set-Cookie
Yola-ID
VAR-Cache
X-Varnish-Store
VC-NoCache
Vserver
LB
X-Tt-Dbg
X-LB-Frontend
RSL-Trace-ID
MachineName
Memento-Datetime
X-LB-Backend
Actioncode
X-Wm-VIP
BM-Cache-Node
Expiries
BM-Cache-Key
Powered-By-VeryCDN
TTL
X-Archive-Orig-Server
X-XHTML-Minification-Powered-By
X-Test-Debug
X-Server-App
X-Archive-Orig-Etag
X-Server-Ident
X-Archive-Guessed-Charset
X-Archive-Orig-Connection
X-Archive-Orig-Content-Length
X-Archive-Orig-Date
X-Request-Received
X-Wm-1
X-Ants-Host
X-Farm-Server
X-ServiceProvider
Apple-Itunes-App
X-Pubstack
Progma
X-Via-NSCOPI
AliCDN-Forbidden-Reason
X-TempoPesquisa
No-Cache
Realaction
X-Cache-Date
Fastly-Restarts
CDCHOST
OutputRewritten
BM-Cache-Status
X-Node-Name
X-Request-Processing-Time
VANITY-HOST
Cookie
Kp-EeAlive
X-Hit
X-Ants-Machine-Id
X-Backend-TTL
X-Dynatrace
X-Cache-V
X-9XB-Server
Server-Id
X-Nginx-Page-Cache
Type
ResourceTag
Cleartype
Dynatrace
IsMobile
Public-Extension
WFE
X-Wily-Servlet
X-Mobile-Device-Type
X-Mobile-Device
X-POPSUGAR-Server-Name
X-PBS-Fwsrvname
X-PBS-Appsvrname
X-SRV
X-FG-RequestId
Container
X-Wily-Info
Page-Template
X-Enhanced-By
X-Varnish-Mode
X-Geo-IP
Kanooh-Host
IES-Server
Load-Balancer
X-Serverid
SINA-TS
DB-Nickname
X-Clx-Request
X-DDM-SERVER-UPDATED
X-DDM-SERVER
X-Service-Id
X-SuperCache
X-B3-Spanid
X-B3-Traceid
X-Csrf-Token
Upgrade-Insecure-Requests
X-Sn-Servicetimems
X-Imforza-Hosted
X-Varnish-Auto-Cache-Miss
Microcache
GranicusServer
SINA-LB
!~Request-OOB-Work
X-Fpc
X-Skip-Cache
X-PBS-Appsvrip
CDN-Cache
X-Tradeindia-SMgmt
X-Vid
X-Tradeindia-Request-GUID
EREV-Ver
X-Vary-Options
X-ClusterID
X-NewCloud-V-Cache
X-MSU-SOURCE
X-Cache-Me-Harder
FrontEnd
X-APP
AMFplus-Ver
X-RiS-PX
X-WebKit-CSP-Report-Only
X-Obj-Ttl
Copyright
X-Czt
X-IsCached
Proxy1
Phoenix-Proxy-Cache
Phoenix-A
Phoenix-Cache
Phoenix-Cache-V
Phoenix-Mark
ReqUrl
X-Varnish-Cache-Ttl
X-PROCESSED-BY
X-NewsFlow-Sitename
X-Ssl-Cipher
X-Instance-Id
X-Who
X-BIT-Node
X-ACache
CDN-Cache-Hit
CDN-Node
DeleGate-Ver
Https
X-ZSITES-DNS
Language
X-BServer
X-BPool-Fx-Cache
X-Catalyst
X-Cache-FS-Status
X-Static
X-BPool-Bx-Cache
X-BPool-Back
X-Faeria
TheAnswer
X-AppVersion
X-BPool
X-Memcached