Threat Level: green Handler on Duty: Rick Wanner

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Set-Cookie
Server
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
Strict-Transport-Security
CF-RAY
X-XSS-Protection
Age
X-Cache
Expect-CT
Content-Language
X-AspNet-Version
P3P
X-Pingback
Via
X-UA-Compatible
Upgrade
X-Xss-Protection
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Adblock-Key
X-Varnish
X-Request-Id
Referrer-Policy
X-Check
X-Generator
X-Language
X-Template
X-Buckets
X-Type
X-Cache-Group
X-Pass-Why
X-Drupal-Cache
WPE-Backend
X-Permitted-Cross-Domain-Policies
Alt-Svc
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Download-Options
X-Ac
X-Hacker
X-Cache-Hits
Host-Header
X-AspNetMvc-Version
X-Dc
X-Sorting-Hat-Section
X-Alternate-Cache-Key
X-ShopId
X-ShardId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId-Cached
P3p
X-Via
X-Runtime
X-Powered-By-Plesk
X-Served-By
X-Contextid
X-PC-Hit
X-PC-Key
X-UA-Device
X-ServedBy
X-Amz-Cf-Id
X-PC-AppVer
MS-Author-Via
X-PC-Host
X-PC-Date
Content-Location
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Powered-CMS
X-Timer
X-IPLB-Instance
X-Wix-Request-Id
X-Seen-By
Status
X-Rid
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Ua-Compatible
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Tumblr-User
CF-Cache-Status
Cartoon
X-Tumblr-Pixel-1
Access-Control-Allow-Credentials
X-Tumblr-Pixel-2
X-Iinfo
X-Backend
X-WPE-Loopback-Upstream-Addr
X-Cache-Status
X-Host
X-CST
Content-Encoding
Powered-By
X-Endurance-Cache-Level
X-Cache-Hit
X-Mod-Pagespeed
X-Port
X-NewRelic-App-Data
X-FRAME-OPTIONS
X-Cache-Enabled
X-CDN
X-Tumblr-Pixel-3
X-Logged-In
X-Newrelic-App-Data
Keep-Alive
X-Server-Powered-By
X-DIS-Request-ID
X-Drupal-Dynamic-Cache
X-Nginx-Cache-Status
X-Robots-Tag
X-Server
X-Accel-Version
X-Request-ID
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Proxy-Cache
X-Turbo-Charged-By
X-Page-Speed
X-Content-Powered-By
X-LiteSpeed-Cache
X-GitHub-Request-Id
Content-Security-Policy-Report-Only
X-Content-Digest
X-Rack-Cache
X-AH-Environment
X-FW-Hash
X-FW-Server
X-Tumblr-Pixel-4
X-FW-Serve
X-FW-Static
X-FW-Type
X-Pad
Request-Context
X-Varnish-Cache
Edge-Control
X-Hits
X-Webcom-Cache-Status
X-Request-Country
X-Trace
X-XRDS-Location
SPRequestGuid
Access-Control-Expose-Headers
X-SharePointHealthScore
X-SERVER
X-MS-InvokeApp
X-BC-Stapler
X-Node
Edge-Cache-Tag
X-HS-Cache-Config
MicrosoftSharePointTeamServices
X-HS-Content-Id
Cf-Railgun
WP-Super-Cache
X-HS-Combine-CSS
X-Amz-Id-2
X-Amz-Request-Id
X-CF-Powered-By
Timing-Allow-Origin
Charset
X-Content-Security-Policy
X-Webserver
X-Died
X-FullPageCaching
X-Cache-Lookup
X-PhApp
Request-Id
X-Fastly-Request-ID
X-PHP-Backend
X-INKT-SITE
X-INKT-URI
X-Cnection
Access-Control-Max-Age
SPIisLatency
X-Backend-Server
SPRequestDuration
X-Edge-Cache
X-Edge-Cache-Key
MicrosoftOfficeWebServer
CONTENT-SECURITY-POLICY
EagleId
Composed-By
Rating
X-Swift-SaveTime
X-Swift-CacheTime
X-CDN-Pop
X-CDN-Pop-IP
X-SS-Conf
X-SS-Location
Grace
X-Tumblr-Pixel-5
X-Device
Served-By
Liferay-Portal
X-Server-Name
X-Tumblr-Content-Rating
X-DDC-Arch-Trace
X-NF-Request-ID
X-Spip-Cache
X-Dw-Request-Base-Id
X-Safe-Firewall
X-Cloud-Trace-Context
Ali-Swift-Global-Savetime
X-Hyper-Cache
X-VCache
Front-End-Https
Permitted-Cross-Domain-Policies
X-HeyJason
X-Do-Not-Hack
X-Microcache
P-LB
P-WS
X-Original-Date
Surrogate-Control
X-LiteSpeed-Cache-Control
X-Loop
X-TNCMS
X-Servedby
X-Cluster-Node
X-RateLimit-Remaining
X-RateLimit-Limit
X-StackifyID
X-Clacks-Overhead
X-FB-Debug
X-Sol
X-Middleton-Display
Display
X-Kinsta-Cache
X-Acc-Exp
X-DNS-Prefetch-Control
X-RateLimit-Reset
Response
X-Jimdo-Instance
X-Middleton-Response
X-Jimdo-Wid
X-Wix-Punisher
X-Vtex-Processado-Em
Content-Style-Type
X-OneAgent-JS-Injection
Content-Script-Type
Public-Key-Pins
X-Debug-Info
X-Shopid
X-Shardid
X-Sorting-Hat-Shopid-Cached
X-Sorting-Hat-Shopid
X-Sorting-Hat-Privacylevel
X-Sorting-Hat-Podid-Cached
X-Sorting-Hat-Featureset
X-Sorting-Hat-Podid
X-Age
X-Goog-Hash
X-Amz-Version-Id
X-Firenze-Processing-Times
X-Tumblr-Pixel-6
X-HOST
X-XN-XNHTML
X-XN-Trace-Token
Refresh
X-DynaTrace-JS-Agent
X-Magento-Tags
X-Cached
X-N-OperationId
Fpc-Cache-Id
X-Zen-Fury
X-User-Agent
X-Ruxit-JS-Agent
X-Px
Server-Timing
PageSpeed
X-Cache-Config
X-Version
X-Hostname
Wpe-Backend
X-LW-Cache
X-WebKit-CSP
X-Url
Retry-After
Feature-Policy
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Stored-Content-Length
X-Handled-By
Xkey
X-Generated-By
X-Topify-Platform
X-Frame-Option
X-Upstream
TCN
Rt-Fastcgi-Cache
X-FORWARDED-FOR
X-Edge-Location
Allow
Access-Control-Request-Method
X-Whom
Fastcgi-Cache
X-Request-Time
X-MiniProfiler-Ids
X-Source
X-Loopia-Node
X-Cached-By
X-EdgeConnect-Origin-MEX-Latency
Powered
X-B-Cache
X-ET-API-ORIGIN
X-ET-API-ROOT
X-ET-API-VERSION
ServedBy
X-EdgeConnect-MidMile-RTT
X-Outils-CS
X-Content-Options
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-URLSCHEME
X-From
Product
X-Fastcgi-Cache
X-CMS-Version
Last-Published
X-Platform-Cluster
X-RESOURCE
X-Platform-Processor
X-Platform-Router
X-VTEX-Cache-Status-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-Powered-By-VTEX-Janus-ApiCache
No
X-CacheServer
X-Vtex-Processed-At
X-Vtex-Remote-Cache
X-AspNetWebPages-Version
X-Magento-Cache-Debug
X-Guploader-Uploadid
Warning
X-Accel-Expires
X-Varnish-HitMiss
X-Varnish-Count
X-Varnish-Host
Imagetoolbar
X-Engine
X-PERF
X-ApacheServer
X-Tec-Api-Origin
X-Tec-Api-Root
X-Tec-Api-Version
X-Returned-From-DLL
X-Returned-From
X-Passed-To
X-Original-Request
X-Passed-To-DLL
X-Application-Context
X-Signature
X-Varnish-Cache-Hits
X-Actual-URL
X-DynaTrace
X-Location-Id
X-Cache-Info
X-LBLID
Cache-Provider
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
Public-Key-Pins-Report-Only
Fhost
X-Platform-Server
X-Returned-From-BeforeDispatch
X-Returned-From-PostProcessResponse
Generator
X-Microcachable
X-UD-Method
X-Passed-To-PostProcessResponse
Dmn
X-Umbraco-Version
X-Passed-To-BeforeDispatch
X-Stale
X-Device-Type
X-Cache-Key
X-F-Cache
X-Developer
Cache-Key
X-NWS-LOG-UUID
X-Ezoic-Cdn
X-Response-Time
X-HS-Content-Campaign-Id
Host
X-Msg-2-Log
Pagespeed
X-S
X-Micro-Cache
X-Gateway-Skip-Cache
X-Gateway-Cache-Status
X-Gateway-Cache-Key
X-Hosted-By
X-Recruiting
X-Platform
X-Akam-SW-Version
X-Defender
X-Shop-Id
X-URL
Origin
X-ARC
Arr-Disable-Session-Affinity
Alternate-Protocol
X-Forwarded-For
Surrogate-Key
X-Microcache-Status
X-Translation
X-Track
X-Cache-Rule
DynaTrace
X-SSLUpstream
Content-Hash
X-Dns-Prefetch-Control
Version
X-SSLProxy
X-Instart-Request-ID
X-Platform-Cache
X-Lambda-Id
X-Sapient
X-Duration
X-Powered-By-360WZB
X-Powered-By-VTEX-Janus-Edge
X-Supported-By
RTSS
X-Via-JSL
Akamai-IP
MIME-Version
X-App-Status
X-Magento-Cache-Control
X-Acquia-Application-UUID
X-Svr-Proxy
X-SVR-IIS
SSPAppContext
USPLoggingUUID
X-I-Sp
WZWS-RAY
S-Cnection
X-SO
X-Rnd
X-BS
X-Cache-Age
X-Powered-By-VelaWeb
X-Dispatcher
X-Cache-Namespace
X-Environment
X-Cache-Tags
Content-Disposition
Pool
X-Director
X-CSRF-Protection
X-Dealeron-Original-Url
X-Dealeron-Backend
X-DealerOn
X-Correlation-Id
X-Server-Upstream
X-Art-Request-Id
X-NetCat-Version
X-App-Hosting
X-Abgroup
X-SSL-Cipher
Node
X-SSL-Protocol
X-Cache-TTL
X-TransIP-Balancer
X-I
X-Hypernode
X-Correlation-ID
Edge-Control-Message
X-Server-Id
X-Page-Cache
X-Matrix-Proxy
X-TransIP-Backend
X-LB-Node
X-Generated
X-Matrix-Server
X-Rocket-Nginx-Bypass
X-Edge-IP
X-ORACLE-DMS-ECID
X-Expires-Orig
X-Server-ID
Wsr-Cache
X-Drupal-Cache-Tags
SN
X-ServerName
X-Daa-Tunnel
X-Last-Modified
X-Cache-Debug
FAI-W-FLOW
Contao-Page-Layout
X-Varnish-Cacheable
X-Cache-Control-Orig
X-Storage
X-Varnish-RemainingLife
X-Varnish-ObjectSource
X-Varnish-GracePeriod
X-Revision
X-Url-Base
X-Varnish-Seen-By
X-Debug
X-Varnish-RemainingTTL
Update-Time
X-Client-IP
X-LB-Server
Src-Update
X-Gamma-Serve
X-GUploader-UploadID
X-Vcap-Request-Id
Accept-Encoding
Powered-By-ChinaCache
X-Geo-Country
X-Cache-Lifetime
X-Hiawatha-Cache
X-Vhost
SiteSpeed
X-Rocket-Nginx-Serving-Static
X-NoCache
X-Front
X-SRV
X-SV-CreatedAt
X-SV-Duration
X-SV-Edge
X-SV-Expires
X-SV-CacheTags
X-SV-Cacheable
X-Cache-Handler
X-SV-FromDBCache
Req-Id
ServerID
X-SV-Pid
X-SV-Nginx-Duration
X-Grace
X-Discourse-Route
Content-Encoding-Handler
X-Now-Id
X-Varnish-TTL
X-CJ-Soft
X-Drupal-Cache-Contexts
X-VARITI-CCR
X-Cache-Level
X-Sucuri-ID
X-Dispatch
X-ATG-Version
X-Acquia-Application-Trace
X-Amz-Meta-S3cmd-Attrs
X-Route-Server
X-Cache-Server
X-Trace-Id
X-Litespeed-Cache-Control
X-Ttl
X-Varnish-Backend
X-Pressidium-NinukisWP-Ver
X-SDS
X-Cache-Operation
Lsrequestid
X-Sucuri-Cache
X-Forwarded-Proto
X-Cache-Only-Varnish
X-TransIP-Reserved
Cneonction
Cache-Tags
X-Locale
X-Varnish-Url
X-Flow-Powered
X-GeoIP-Country-Code
X-Varnish-IP
X-Varnish-Age
X-Cache-Engine
X-N
X-Content-Type-Option
X-Country-Code
Backend
X-Content-Encoded-By
X-Env
Page-Completion-Status
Section-Io-Id
X-Connection-Hash
X-Twitter-Response-Tags
X-Transaction
X-Akamai-Device-Characteristics
X-Akamai-Device-Model
X-Esi
X-Cache-Expires
Cache
X-Webkit-CSP
X-Server-Instance
W
X-Firenze-Processing-Time
X-Litespeed-Cache
X-Cache-Type
X-Amz-Rid
Strikingly-Cache-Region
Location
Content-MD5
X-Unbounce-VisitorID
Strikingly-Cached-Version
X-Unbounce-Variant
X-Unbounce-PageId
If-Modified-Since
Strikingly-Cached
MJ12bot
SEOMOZ
X-Varnish-Retries
X-CF-Passed-Proto
Smug-CDN
X-SmugMug-Values
X-TTFB-L
Proxy-Connection
X-TTFB
X-Time
X-High-Performance
X-SmugMug-Hiring
X-FIRSTBase
Service-Worker-Allowed
X-SRCache-Key
Server-Name
X-Middleware-Start
Custom-Header
From-Origin
X-TTL
X-Always-Cache
X-ORACLE-DMS-RID
X-PwB-Node
X-IsCacheURL
Https
ServerName
X-Speed-Cache-Key
X-Service-Id
X-Speed-Cache
S
AMF-Ver
X-SERVER-NAME
X-Magnolia-Registration
Use-Proxy
Pv
X-GeoIP-Country-Name
X-Cache-Control
X-ID
Author
X-Wikidot-Backend
X-Wikidot-Static-Cache
MC
X-BackendServer
X-Cache-Device-Type
X-Storage-Cache-Expires
X-LB
Nodo
X-Nginx-Cache
X-Origin
X-Storage-Cache-Date
X-Varnish-Server
X-Cookie-Domain
X-Srv
X-Storage-Cache
X-Xrds-Location
NetMindSessionID
X-Adobe-Content
Qs-Cache
NnCoection
X-Processing-Time
Fw-Via
X-UPSTREAM
PICS-Label
X-Content-Age
X-Yadis-Location
X-Adobe-Loc
X-Key
X-Pool
Swift-Performance
X-Nbs
X-Empowered-By
X-Now-Cache
X-Dynamic-Cache
Surrogate-Key-Raw
X-FTR-Request-ID
X-Symfony-Cache
X-Pantheon-Environment
X-Pantheon-Site
Tracecode
X-CacheFROM
X-CDN-Forward
X-Pantheon-Phpreq
X-Amz-Storage-Class
X-Amz-Meta-Content-Md5
X-Real-Server
X-HW
X-NginX-Cache
X-Shield-Request-Id
FindLaw
Srv
X-Nitro-Cache
X-Distributor
X-Config-Blacklist-Version
X-Sedo-Request-Id
X-Vip
Ohc-File-Size
Xc-Version
X-ServerID
X-FireWall-Port
X-Proxy
X-VC-Enabled
X-ACMCache
X-Cache-PageType
X-Cache-Fix
X-BKSrc
Content_type
Edit
X-Worker
X-Browser
X-Id
X-Varnish-Ttl
X-Content-Security-Policy-Report-Only
CacheControlHeader
X-Analytics
Pics-Label
X-Cache-Miss-From
X-Shard
Drupal-Pagecache-Memcache
X-Sys-Req-ID
X-Frontend
X-Varnish-Hits
X-WR-MODIFICATION
IM-Version
Hummingbird-Cache
IBM-Web2-Location
Access-Control-Allow-Method
Content-Transfer-Encoding
X-Ratelimit-Limit
X-Ratelimit-Remaining
X-SP-Farm
X-SP-UniqueName
X-Disney-Akamai-Rule
HAVer
X-Orig-Vary
Backend-Timing
Prama
Ram
X-4ormat-Cacheable
X-Runtime-Rack
X-Hrouter
X-Location
X-Hstore
Ramp
X-Drectory-Script
HCVer
Noq
X-Role
X-WPL-DATA
X-Balanceador
X-Varnish-ID
RequestId
X-FW
Lookup-Cache-Hit
X-TB-M
X-Remote-Addr
X-Stage
X-JSESSIONID
X-Resource
X-A
X-Unique-ID
Local-Info
SHInfo
Cached
X-Akamai-Edgescape
Front
X-App
A-Powered-By
X-Cache-CFC
X-Avg-Cookie-Expires
X-AVG-Country-Code
X-Hit-Cache
X-Redman-Final-Url
X-RequestId
X-Real-IP
SRV
X-NginX-Server
X-Redman-Backend
X-RealServer
X-Pagename
Cm-Server
X-Rq
Dtk-Cache-Check-0
Server-Info
X-AEM
X-App-Runtime
X-Runtime-Affili
Accept-Language
X-Span
X-Proxy-Backend
Web-App-Origin-Name
X-Yottaa-Metrics
X-Runtime-Memory
X-ClientSide-Caching
X-Cache-2
X-Agent
X-GoCache-CacheStatus
Accept-Charset
AsisCache
X-Yottaa-Optimizations
WWW-Authenticate
X-VC-TTL
X-Upgrade-Enabled
X-Path-Route
X-AF-Userserver
X-Proxy-Skip
X-Domain-Checked
X-Fedora-School-Id
X-Provisioner-Version
X-ServerIndex
X-E
X-Dw-Trace-Id
Nginx-Cache
X-Generated-Timestamp
X-Processed-By
X-PF-Uncompressing
X-Backend-Status
X-Atraveo-Cache-Control
X-Force
X-Atraveo-Param-Rm
X-PRAM
X-Request-Uri
X-Atraveo-ETag
X-Atraveo-Expires
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Atraveo-Zone
X-Atraveo-From-Varnish-Cache
X-CLOUD-TRACE-CONTEXT
X-Akamai-Transformed
X-Appmachine-Environment
Identity
Frame-Options
X-Culture
X-ARRServer
X-WR-Flags
X-Source-ID
X-Vcache
X-Atraveo-Set-Cookie
X-Ratelimit-Reset
X-CB-Server
Access-Control-Request-Headers
Cteonnt-Length
X-Pantheon-Az
X-Debug-Token
X-Varnish-Debug-TTL
X-Varnish-Debug-Age
X-V
X-Jphone-Copyright
X-Distil-CS
Beyond-Iis
X-CacheDebug
X-Session-ID
XDomainRequestAllowed
X-LP
X-NWS-UUID-VERIFY
Request-Country
X-Purge-URL
X-Purge-Host
Disablevcache
Request-EU
Environment
X-IIJ-Cache
X-Rule
X-SE-Debug
X-LW-Web-Server
X-App-Server
CS-SERVER
X-Varnish-Hostname
X-Cacheable-TTL
Url
Firespring-Website-Id
Upgrade-Insecure-Requests
X-Cache-Ttl
Lb
X-ESI
WP-FROM-CACHE
X-Nginx-Host
X-VCS-Cacheable
X-VCS-Ttl
WP-AdvCache-MemCached
X-Server-IP
X-CACHE-TTL
X-Forwarded-Host
Worker
X-Cms-Mode
X-RiS-UFDI
Max-Age
SVR
X-Frames-Options
X-Dev
CLMOB
Referer
X-EPiphany-Vid
Cmsid
X-Client-Image-Vid
Cmstype
X-Client-Vid
Proxy-Agent
X-JG-Page-Cache
Eomportal-Instance
ServerTokens
ServerSignature
X-GeoIP
X-Ms-Request-Id
X-Map-Context
X-Webstats-RespID
X-Req-Head-Response
Web
X-HeBS-Cache-Status
Accept-CH
X-Detected-Device
X-Consent-Required
Machine
Resin-Trace
Ufe-Result
X-Cache-Doesi
X-Resolver-IP
X-CAPServer
HitType
X-AOL-HN
X-SAPP
X-Info
X-Ghost-Cache-Status
IISExport
*
X-Session-Reinit
X-Upstream-Backend
X-Adnet
X-Resty-Request-Id
X-HTML-Minification-Powered-By
X-Upstream-Status
X-Actindo-Thread-Id
X-Actindo-Request-Id
VANITY-HOST
X-PBY
X-Cocoon-Version
X-Actindo-Rs
Myheader
X-Aramark-SID
AETN-Continent-Code
AETN-City
AETN-Country-Code
AETN-Country-Name
AETN-EU
AETN-DEVICE
AETN-Area-Code
X-Confluence-Request-Time
X-Oferteo-Domain
X-Header
X-TKP-SRV-ID
X-Amcomm-Site
X-Amz-Id-1
AETN-Latitude
AETN-Longitude
X-MAT-GEO
X-Geo-IP
X-Skip-Cache
X-Cache-Dispatchercachecontrol
X-Cache-Dispatcherpragma
X-Framework
X-Desc
AETN-State-Code
AETN-Postal-Code
AKA-DEVICE
X-GSL-Server
Paypal-Debug-Id
X-HashTwo
X-Data-Request
Play-Detected-UserAgent
Play-Detected-Device
Proxy-Cache
Thanks
X-Batcache
X-B2f-Not-Route
Il-Cl
Home
X-Via-S
X-Soro
X-WebNode
Access-Control
X-Timestamp
X-Domino-CacheValidationWithETagReason
X-Domino-CacheValidationWithETagResult
AR-CACHE
AR-ATIME
AR-PoweredBy
AR-SID
Num
X-HA-Frontend
X-HA-Backend
X-DSMX-Rewrite-MS
X-DSMX-Render-MS
X-Varnish-Cache-Local
Traffic-Origin
X-Application
X-Proxy-Cache-Control
X-Plat
X-Compress-Hint
IES-Server
Load-Balancer
Cleartype
Dispatcher
EagleEye-TraceId
Server-ID
X-HydroSheep
X-Varnish-URL
Dynatrace
Copyright
X-DataDome
COMMERCE-SERVER-SOFTWARE
X-HostName
Adm-Server
X-Hosting-Env
X-SDE-Name
Bios
X-Highwire-Smart-Code
NtCoent-Length
X-Now-Trace
X-Highwire-Sitecode
X-Dynatrace
Server-Id
CF-Worker-Script
X-OpenCart-Lightning
Now
X-Varnish-Id
X-UA-Bot
X-Clara-ASAP
X-Flex-Tags
X-Cf-Powered-By
Ttl
X-Beatles
X-DN-Cache-Control
Yoncu-Errno
X-Directory-Script
X-ASAP-Cache
X-Nx
VAR-Cache
X-Server-Addr
X-Flex-Tag
X-WebKit-CSP-Report-Only
X-Fastly-Request-Id
Edgecast
X-Secret
X-Requestid
X-MCB-Server
X-RiS-PX
X-Protected-By
Fastly-Backend-Name
X-AutoRu-App-Id
X-Flex-Evstart
X-Flex-Lang
X-Flex-Lastmod
X-Nx-All
X-Flex-Evend
X-Autoru-Host
X-Flex-Community
X-WEBMGR-CACHE
PServer
MageStack-PageSpeed
MageStack-Magento-Version
MageStack-Loadbalancer
MageStack-Tag
X-SH-Cache-Status
MageStack-Web-Node
X-CacheID
X-Beget-Proxy
MageStack-Debug
MageStack-Cache-Hits
MageStack-Area
Dis-Env
MageStack-Cache-Lifetime
MageStack-Cache-Status
MageStack-Config
MageStack-Cacheable
Viewport
X-Garden-Version
TP-L2-Cache
Aurora-Node
DNNOutputCache
X-Compressed-By
X-Test
X-Origin-Cache
X-Served-Server
Tempo
X-Cache-Detail
X-Middleton-PageSpeed
X-LBPoolMember
Prot
AMP-Redirect-To
TP-Cache
FRONT-END-SECUREBROWSER
X-Gyrobase-Publication
MageStack-Cache
From
X-RemovedCookies
TC-S-Cache-M
Id
X-Generated-Time
X-Cache-Time
Magicmarker
TC-Cache-U
TC-S-Cache
X-Blog
Pf.Web.Request.Id
X-Block-Rule
Fastly-Debug-Digest
X-UnsetCookies
X-Block-RuleID
X-CacheLoc
BALANCEDTO
Arrnode
X-ProcessESI
ServerNode
X-Goog-Meta-Replace
X-Goog-Meta-Policy
X-Goog-Meta-Goog-Reserved-File-Mtime
TC-Cache-IC
Pragrma
Provider
X-Custom-Name
X-Depends
TC-Cache
VServer
X-Varnish-Ip
X-Rack-Cors
NODE
X-Vary-Options
X-Serv
X-ORIKEY
Serverid
X-FORWARDED-PROTO
VSID
Pramga
X-Appid
X-Smartcache-Timeout
X-WP
Server-Ip
X-IP
X-RAMCache
X-Access-Control-Allow-Origin
Report-To
X-SV
X-Smartcache-Keys
X-Reflector
X-ENDPOINT
X-DB-Content-Length
BackendServer
NLCacheNote
X-Cache-Me-Harder
X-Via-NSCOPI
X-Appversion
X-ROUTING
X-Gateway-Rate-Limit-Delayed
X-Varnish-Debug-Hits
X-Pj-Cache-Status
Device
X-Deity
X-TLS-Version
CommunityServer
ViewMode
X-FastCGI-Cache-Status
X-APIVERSION
X-APIAUTH-VAL
X-Served
X-Reflector-Cache
X-Geo
X-Tag-Playlist
HSTS
HitInfo
X-CH-Device
X-Box
X-Server-Generated
X-Cluster
X-ManagedFusion-Rewriter-Version
X-Cache-Action
X-FastCGI-Cache
X-MainProfileID
Nitro-Cache
X-Webcelerate
SINA-LB
SINA-TS
NZSpeedy
X-Lw-Cache
X-MrHost
X-Proto
X-Cache-TTL-Current
StatusCode
X-Cache-TTL-Age
Provided-Host
Session-Id
X-Cache-FS-Status
Page-Template
X-NewsFlow-Sitename
X-Cache-Warmer
X-PBS-Appsvrip
X-PBS-Appsvrname
X-Status
X-PBS-Fwsrvname
X-MyName
X-MainProfileURL
DrivedBy
X-DynamicCache
X-Instance-Id
X-MainProfileCategory
X-MainProfileName
X-Enhanced-By
X-Bip
X-ACCELERATE
Tk
Debug-Status
X-Client-Id
X-Obvious-Info
X-Origin-Date
X-Obvious-Tid
Session-From
ServerIP
CDN-Cache
X-Streams-Distribution
X-Refresh
CDN-CachedAt
CDN-PullZone
CDN-Uid
CDN-RequestId
X-Varnish-Grace
X-FPC
X-Nginx
X-ENV
X-Aramark-CSID
X-Page
X-We-Are-Hiring
SERVER-NAME
Actual-Object-TTL
YF-ID
X-ZSITES-DNS
X-Title
X-Static
X-Layout
PB-PID
PB-RID
X-Origin-Upstream-Status
X-Mobile-Rewrite
X-DevSrv-CMS
EN-User
X-Cache-On
X-Cache-Node
X-Amzn-Trace-Id
X-Cache-Varnish
X-CRA-DC
X-Highwire-RequestId
X-Envoy-Upstream-Service-Time
X-Amzn-RequestId
X-Amz-Apigw-Id
Access-Control-Allow-Header
X-Svr
X-SilverStripe-Cache
Ibf5scheme
N365rili
X-7d-Trace-Id
X-7d-Instance-Id
X-Highwire-SessionId
X-PHP-Response-Code
X-Beluga-Record
X-Beluga-Node
X-Beluga-Cache-Status
X-Beluga-Response-Time
X-Beluga-Response-Time-X
X-Beluga-Trace
X-Beluga-Status
Ohc-Response-Time
Og
X-SmartBan-Host
X-Rebelmouse-Cache-Control
X-Policy
X-SmartBan-URL
Description
Keywords
Filters
X-Reqid
X-Cache-Extended
X-Wodby-Node
X-Vol-Mrp
NGX
CDCHOST
AC-ELC
X-Vol-Correlation
X-Qnm-Cache
X-Lb
X-Test-Debug
X-SCM-Server-Number
X-Now-Instance
X-Rewritten-By
X-Who
X-Powered-By-ADS
X-Shopware-Allow-Nocache
X-Proxy-Server
X-Shopware-Cache-Id
X-Proxy-Cache-Key
X-ETag
X-Route
X-ReqId
X-Custom-Header
ScoreTracker
X-EC2-Instance-Id
X-Instance
X-NoIndex
X-M-Reqid
X-M-Log
Purge-Cache-Tags
Response-Time
Hit-Count
X-BPool-Back
X-BServer
X-Search-Id
Ssl-Proxy-Server
X-Max-Age
X-Airee-Node
X-Mighty-Proxy
X-Pass-Through
X-PM-ID
X-Src-Webcache
Cf-Ipcountry
X-Firefox-Spdy
X-W3TC-Minify
X-FromPodPressCache
X-Global-Transaction-ID
X-Varnish-Cache-Ttl
X-Captured
X-XHTML-Minification-Powered-By
AMP-Access-Control-Allow-Source-Origin
PBS
REFRESH
X-Backside-Transport
X-Rack-CORS
Hosted-By
SB-Cache-Life
X-Powered-By-Home.Pl
X-V-Cache
X-ProBase-Server
X-WN-ClientGroup
SB-Cache-Remaining
MS-CV
X-Ms-Version
X-AMAZEEIO
X-Cache-LB
SB-Site-IE-VERSION
X-SayCDN-TTL
X-Say-TTL
X-This-Proto
SB-Site-Device
WN
X-HA
X-Say-Cacheable
X-Gannett-Site-Version
MageStack-Cache-Warning
MageStack-Cache-Lifetime-Sent
HTTPS
X-Varnish-Backend-Beresp-Backend
X-M
X-Origin-Server
Amfplus-Ver
X-Processed
X-NodeID
GranicusServer
X-Node-Id
X-MID-Host
X-Cname-TryFiles
X-Nginx-Request-Processing-Time
MageStack-Last-Modified
X-Build-Id
X-Actual-Url
X-Mobilized-By
X-Sid
X-Scheme
X-CACHE-KEY
X-DEBUG
X-COUNTRY-CODE
SERVER-ID
X-Oracle-Dms-Ecid
X-PROCESSED-BY
X-Xml-Http-Blocked
X-RENDER-TIME
CF-Cache-Key
X-Cdn-Forward
X-NMT-Proxy
X-Ruxit-Js-Agent
X-Appmachine-Name
X-From-Cache
X-GZip
X-Middleton-Pagespeed
X-Cache-HT
Language
Fastly-Restarts
X-Appmachine-CreatedOn
X-Appmachine-Duration
X-Serverid
X-Old-Content-Length
X-Node-App
MachineName
MwpReleaseVersion
X-VTEX-Cache-Status-Janus-Edge
X-Nginx-Page-Cache
X-Meta-MSThemeCompatible
X-Instance-Name
X-Meta-Imagetoolbar
X-Meta-MSSmartTagsPreventParsing
Returned-Status
WebServer
X-Machine
X-Optimization
X-Built-By
Arrow-RequestId
X-JoinUs
X-FG-RequestId
D
X-ASAP-Age
SS
X-Ssl-Cipher
X-InDy-Time
ClientIP
X-SG-Server
Generate-Time
Prototype-RootPath
X-Itkg-Cache-Tags
X-Accel-Cache-Control
F5-IpCliente
X-Render-Time
VC-NoCache
X-CSRF-Token
ProxiaInstanceId
X-Expires
Gzip
X-Magento-Route
X-SSLTerm-Server
X-Vid
X-Beresp-Ttl
RSL-Trace-ID
X-Country
X-Fastly-Backend-Reqs
X-No-Session
X-Front-Cache
X-Tradeindia-Request-GUID
Origin-Vm
X-TEST
X-Tradeindia-SMgmt
X-Time-Spent
X-UT-Cache
Fastly-Drupal-Html
X-Hit
X-CAMPUSSUITE-TENANT
X-Healthy
X-Pageid
X-ORIGN-SERVER
X-Router
X-Ser
X-Telligent-Evolution
X-InDy-Query
X-InDy-Memory
Amp-Access-Control-Allow-Source-Origin
X-Varnish-TTL-Debug
LB
PROGMA
X-Grid-Server
X-Catalyst
Ews
PagesDisplayed
EQ-Cache
V-Cache-Ttl
X-CAMPUSSUITE-DEBUGGING
X-CAMPUSSUITE-ENVIRONMENT
X-Avvio-Cms-Cacheload
X-Dck
X-Enabled3
Servername
X-Bitrix-Composite
X-Cache-Id
X-Enabled1
X-Enabled2
X-Varnish-Age-Debug
Sl-Pgid
Webserver
Web-Server
X-Batcache-Reason
X-Zendesk-Origin-Server
X-Clx-Request
X-Zendesk-User-Id
Unique-Request-Id
SBSS
Content
X-RequesterIP
X-BIT-Node
X-WA-Info
Requested-Host
X-DDM-SERVER
X-DDM-SERVER-UPDATED
X-Response
X-Requested-With
X-Rocket-Nginx-File
X-Rocket-Nginx-Reason
X-SuperCache
FastCGI-Cache
X-Pagely-Cache
X-Proxy-Id
X-Server-Ip
X-MSU-SOURCE
X-Phpwcms-Page-Processed-In
X-Phpwcms-Release
X-PoweredBy
X-Qiniu-Zone
X-Oracle-Dms-Rid
X-Debug-Message
X-Mobile-Device
X-Cache-Via
X-D2id
X-Amz-Meta-Version-Id
X-Az
X-Mobile-Device-Type
X-UPSTREAM-Address
X-Transaction-Name
X-SEA-Instance-Name
X-SCProxy
X-BeResp-Ttl
X-Content-Type
X-HP-CAM-COLOR
X-HS-Status
X-VHosting-Cache
ID
X-Varnish-Cache-Control
X-Served-From
X-Log
X-Boot
X-Cache-ID
X-Navigation-Version
X-Activity-Id
X-Olaf
X-SSL
X-OPNET-Transaction-Trace
X-UType
X-Varnish-Action
X-Jcms-Ajax-Id
X-Homeaway-Requestmarker
X-MCF-ID
X-NginX-Upstream
X-ServiceProvider
X-Ruby-Cluster-ID
X-HAProxy
X-Fpc
X-Cachable
X-CloudBurst-Backend
X-Built-With
X-Cdn-Origin
X-CGP
X-Sn-Servicetimems
X-PressLabs-Stats
MSSmartTagsPreventParsing
Httpd-Identifier
MSThemeCompatible
OracleCommerceCloud-Sandiego
X-Abuse
OracleCommerceCloud-Version
CommercePlatform-Version
CmsfirstPublishTimestamp
X-Varnish-Cached
X-UPServer
X-Varnish-Cached-TTL
X-XHR-Current-Location
Xc
X-CloudBurst-Cache
X-CloudBurst-Frontend
HA-Geocountry
HA-Geocity
HA-Geolat
HA-Geolon
HA-Host
HA-Georegion
HA-Cloudapp
DB-Nickname
XX
X-VG-WebCache
Backend-Powered-By
BlockPHPCallEnd
Content-Sn
HA-Ipaddr
HA-Servedtime
TYPO3-Sitename
TYPO3-Pid
X-CloudBurst-WordPress
X-B3-Sampled
X-Bcwwwid
RN-Server
Request-Time
L5d-Success-Class
HA-Urlpath
ModuleCacheType
NKBVHEADER
Progma
X-Firewall