Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
X-Cache
X-AspNet-Version
Age
Content-Language
X-Pingback
P3P
Via
X-UA-Compatible
Upgrade
Expect-CT
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Check
X-Template
X-Language
X-Varnish
Alt-Svc
X-Generator
X-Buckets
X-Drupal-Cache
P3p
X-Xss-Protection
X-Request-Id
Referrer-Policy
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Powered-By-Plesk
X-Download-Options
Content-Location
Host-Header
MS-Author-Via
X-ShopId
X-Runtime
X-Sorting-Hat-ShopId
X-Sorting-Hat-Section
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PodId
X-Dc
X-Sorting-Hat-PrivacyLevel
X-ShardId
X-Sorting-Hat-PodId-Cached
X-Alternate-Cache-Key
X-Sorting-Hat-FeatureSet
X-UA-Device
X-Powered-CMS
X-IPLB-Instance
X-Served-By
X-FRAME-OPTIONS
Cartoon
Access-Control-Allow-Headers
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-Amz-Cf-Id
X-Cache-Status
X-Request-ID
Status
X-Via
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
CF-Cache-Status
X-ServedBy
X-Contextid
X-PC-Hit
X-PC-Key
X-Backend
Powered-By
X-Mod-Pagespeed
X-CST
X-PC-Host
X-PC-Date
X-PC-AppVer
Content-Encoding
X-Host
X-WPE-Loopback-Upstream-Addr
X-Server
X-Logged-In
X-DIS-Request-ID
X-CDN
Keep-Alive
X-Rid
X-Cache-Hit
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-User
X-Port
X-Cache-Enabled
X-Endurance-Cache-Level
X-Server-Powered-By
X-Tumblr-Pixel-1
X-Original-Date
X-Accel-Version
X-Nginx-Cache-Status
X-Robots-Tag
X-NewRelic-App-Data
X-Drupal-Dynamic-Cache
X-Ua-Compatible
X-Seen-By
X-Wix-Request-Id
X-Page-Speed
X-Tumblr-Pixel-2
X-Turbo-Charged-By
X-Wix-Punisher
X-Forwarded-For
X-Content-Powered-By
X-Proxy-Cache
X-Forwarded-Proto
X-Content-Digest
X-AH-Environment
X-Pad
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Varnish-Cache
X-LiteSpeed-Cache
Content-Security-Policy-Report-Only
X-Rack-Cache
WP-Super-Cache
X-Tumblr-Pixel-3
X-GitHub-Request-Id
Edge-Control
X-Request-Country
SPRequestGuid
X-XRDS-Location
X-MS-InvokeApp
X-SharePointHealthScore
MicrosoftSharePointTeamServices
X-Cache-Lookup
Timing-Allow-Origin
X-Cnection
X-Node
X-FW-Hash
X-Content-Security-Policy
Cf-Railgun
X-Amz-Request-Id
X-Amz-Id-2
X-FullPageCaching
X-FW-Static
X-FW-Serve
X-FW-Type
Charset
Request-Id
X-Trace
X-Died
Request-Context
X-Webcom-Cache-Status
Edge-Cache-Tag
X-Hits
X-HS-Cache-Config
X-PhApp
X-HS-Content-Id
X-BC-Stapler
SPIisLatency
SPRequestDuration
X-CF-Powered-By
X-Newrelic-App-Data
X-INKT-URI
X-INKT-SITE
X-PHP-Backend
MicrosoftOfficeWebServer
Composed-By
Access-Control-Expose-Headers
X-Webserver
Access-Control-Max-Age
X-Safe-Firewall
Grace
X-Swift-SaveTime
EagleId
X-Swift-CacheTime
Served-By
X-Spip-Cache
X-CDN-Pop-IP
X-CDN-Pop
X-Fastly-Request-ID
X-Backend-Server
X-Hyper-Cache
X-VCache
Liferay-Portal
X-Firenze-Processing-Times
X-Dw-Request-Base-Id
X-Tumblr-Pixel-4
X-SERVER
X-Server-Name
X-Device
X-StackifyID
X-FB-Debug
X-Microcache
Surrogate-Control
Refresh
X-LiteSpeed-Cache-Control
X-Cloud-Trace-Context
X-SS-Conf
X-SS-Location
Xkey
Front-End-Https
X-DNS-Prefetch-Control
X-RateLimit-Remaining
Content-Style-Type
X-TNCMS
X-Loop
X-Clacks-Overhead
Content-Script-Type
X-RateLimit-Limit
Public-Key-Pins
Rating
X-HS-Combine-CSS
X-RateLimit-Reset
X-XN-Trace-Token
X-XN-XNHTML
X-Jimdo-Wid
X-Acc-Exp
X-Jimdo-Instance
X-DDC-Arch-Trace
X-Vtex-Processado-Em
X-Age
X-User-Agent
X-WebKit-CSP
Fpc-Cache-Id
X-Cache-Config
X-N-OperationId
X-Dscp-Value
X-Px
Response
Display
X-Middleton-Display
X-Middleton-Response
X-Sol
X-Hostname
X-ServerName
X-Topify-Platform
X-Cached
X-Generated-By
X-Correlation-Id
X-Tumblr-Content-Rating
X-Url
X-Zen-Fury
X-Tumblr-Pixel-5
X-Kinsta-Cache
X-MiniProfiler-Ids
X-Handled-By
X-Request-Time
TCN
X-Magento-Tags
P-LB
P-WS
X-Whom
X-Outils-CS
X-Amz-Version-Id
X-B-Cache
X-Loopia-Node
X-OneAgent-JS-Injection
Dmn
Edge-Control-Message
X-DynaTrace
X-CMS-Version
ServedBy
X-Content-Options
PageSpeed
X-Msg-2-Log
X-URL
X-LBLID
X-From
X-Debug-Info
X-Cached-By
Rt-Fastcgi-Cache
X-Varnish-TTL
Imagetoolbar
X-FORWARDED-FOR
X-Edge-Location
X-Ruxit-JS-Agent
X-DynaTrace-JS-Agent
Access-Control-Request-Method
Powered
X-Goog-Hash
X-Location-Id
X-CacheServer
Surrogate-Key
Host
Product
X-Returned-From
X-Actual-URL
X-Passed-To
Public-Key-Pins-Report-Only
X-Passed-To-DLL
X-Original-Request
X-Returned-From-DLL
X-Varnish-Cache-Hits
X-Signature
X-AspNetWebPages-Version
X-Upstream
X-Fastcgi-Cache
Retry-After
X-Vtex-Remote-Cache
X-Cluster-Node
X-VTEX-Janus-Router-Backend-App
X-Vtex-Processed-At
No
X-F-Cache
X-VTEX-Cache-Status-Janus-ApiCache
X-Powered-By-VTEX-Janus-ApiCache
X-Varnish-Beresp-Ttl
X-Passed-To-PostProcessResponse
X-Cache-Rule
X-Passed-To-BeforeDispatch
DynaTrace
X-Varnish-Beresp-Status
X-Returned-From-PostProcessResponse
X-Shard
X-Returned-From-BeforeDispatch
Fhost
X-Varnish-Beresp-Grace
X-Engine
X-Stale
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-NWS-LOG-UUID
X-Platform
X-Umbraco-Version
X-Accel-Expires
X-Recruiting
Alternate-Protocol
X-Art-Request-Id
X-Via-JSL
X-Micro-Cache
X-Platform-Processor
X-Platform-Router
Arr-Disable-Session-Affinity
X-Version
X-Cache-Info
X-Platform-Cluster
X-Varnish-Host
X-Rocket-Nginx-Bypass
Ohc-File-Size
X-Magento-Cache-Debug
Fastcgi-Cache
X-LW-Cache
X-PERF
X-Hosted-By
X-Device-Type
X-Response-Time
X-ApacheServer
X-S
X-Matrix-Server
X-Source
X-Supported-By
X-Application-Context
X-Matrix-Proxy
X-UD-Method
X-Developer
X-Cdn
X-HS-Content-Campaign-Id
X-Microcachable
X-Instart-Request-ID
X-URLSCHEME
X-App-Status
X-EdgeConnect-Origin-MEX-Latency
Cache-Provider
Last-Published
WZWS-RAY
X-Powered-By-360WZB
Generator
X-Gamma-Serve
Pagespeed
X-HOST
X-Rnd
X-Platform-Server
X-Track
X-Storage
Origin
X-App-Hosting
X-TransIP-Balancer
X-Translation
X-Microcache-Status
X-Tumblr-Pixel-6
X-Powered-By-VelaWeb
X-Server-ID
Akamai-IP
Content-Hash
X-Frame-Option
X-Varnish-Count
X-Hypernode
X-Defender
X-RESOURCE
Version
X-TransIP-Backend
X-Varnish-HitMiss
X-Shop-Id
X-Daa-Tunnel
X-Platform-Cache
HTTPS
X-I-Sp
X-Front
X-BS
X-Drupal-Cache-Tags
X-NetCat-Version
X-Sapient
X-Cache-Namespace
X-WebServer
X-Cache-TTL
X-Route-Server
RTSS
Surrogate-Key-Raw
X-Pantheon-Environment
X-Powered-By-VTEX-Janus-Edge
X-Cache-Age
X-Pantheon-Phpreq
X-Pantheon-Site
Cache-Key
X-Flow-Powered
Powered-By-ChinaCache
USPLoggingUUID
X-EdgeConnect-MidMile-RTT
X-Duration
ServerID
X-Varnish-RemainingLife
X-Dispatcher
X-Varnish-ObjectSource
X-Varnish-RemainingTTL
X-Varnish-GracePeriod
X-Varnish-Seen-By
X-ATG-Version
X-I
Lsrequestid
Pool
X-CSRF-Protection
X-Vcache
X-Last-Modified
X-Director
X-Cache-Key
Allow
X-Cache-Tags
SSPAppContext
X-SV-CreatedAt
X-SV-Duration
X-SV-Edge
X-SDS
X-SV-Nginx-Duration
X-SV-FromDBCache
Content-Disposition
X-SV-Pid
X-Cache-Debug
X-ORACLE-DMS-ECID
X-Page-Cache
X-Firenze-Processing-Time
X-Expires-Orig
X-Client-IP
X-SV-Cacheable
X-Ttl
X-SSL-Cipher
X-Ezoic-Cdn
X-Server-Upstream
Cneonction
X-Drupal-Cache-Contexts
X-Content-Encoded-By
S-Cnection
X-SV-CacheTags
X-Litespeed-Cache
MIME-Version
X-Generated
X-SV-Expires
X-Cache-Operation
X-SSL-Protocol
X-Grace
SN
X-Environment
X-Magento-Cache-Control
NnCoection
Pv
X-Server-Id
Node
X-LB-Node
X-Lambda-Id
X-Origin
X-ARC
X-CJ-Soft
X-Abgroup
X-Debug
X-Varnish-Age
X-Revision
Server-Timing
Accept-Encoding
X-Vcap-Request-Id
X-Amz-Meta-S3cmd-Attrs
FAI-W-FLOW
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
Req-Id
X-Goog-Metageneration
X-Goog-Generation
X-Varnish-Cacheable
X-Varnish-Ttl
AMF-Ver
X-Time
X-Goog-Stored-Content-Length
X-GUploader-UploadID
Section-Io-Id
X-Gateway-Cache-Key
X-Bb-Deploy-Id
X-Akamai-Device-Characteristics
X-Hiawatha-Cache
X-Gateway-Skip-Cache
X-Gateway-Cache-Status
IBM-Web2-Location
X-Cache-Server
X-UPSTREAM
X-N
X-Edge-IP
Fw-Via
Backend
X-Runtime-Rack
X-Cache-Control-Orig
X-NoCache
ServerName
X-ID
X-Oneagent-Js-Injection
X-Yadis-Location
X-Varnish-Url
Server-Name
X-PwB-Node
X-Cache-Expires
Wsr-Cache
X-TTL
X-Magnolia-Registration
X-WEBSERVER
X-Content-Age
Server-Info
X-Cache-Engine
Location
X-Esi
X-Dispatch
IM-Version
Content-Encoding-Handler
X-IsCacheURL
X-AOL-HN
X-Varnish-Backend
X-Redman-Backend
X-Avg-Cookie-Expires
X-Discourse-Route
X-Akamai-Device-Model
Fastly-Debug-Digest
X-Cache-Only-Varnish
X-Redman-Final-Url
X-Akamai-Edgescape
X-AVG-Country-Code
X-ORACLE-DMS-RID
Front
X-Cache-Lifetime
Content-MD5
Srv
X-Vhost
Page-Completion-Status
X-LB
X-Content-Security-Policy-Report-Only
PICS-Label
X-Geo-Country
X-Amz-Storage-Class
Content-Transfer-Encoding
X-GeoIP-Country-Code
S
X-Config-Blacklist-Version
X-Country-Code
X-Varnish-IP
Nodo
X-Cache-Type
W
Qs-Cache
X-App-Server
X-RequestId
Proxy-Connection
Nitro-Cache
If-Modified-Since
X-BackendServer
X-SRV
X-Nbs
X-FTR-Request-ID
X-Sucuri-ID
SRV
X-Url-Base
X-Empowered-By
CacheControlHeader
Frame-Options
X-BKSrc
X-High-Performance
X-Varnish-Retries
X-Stage
Accept-Charset
X-Proxy
WWW-Authenticate
X-Always-Cache
Environment
X-CF-Passed-Proto
X-SO
HAVer
X-Cache-Handler
X-Real-Server
X-Rq
X-Speed-Cache
HCVer
X-Speed-Cache-Key
X-Nginx-Cache
Cache-Tags
X-ServerID
Pf.Web.Request.Id
Author
MC
X-Worker
X-VARITI-CCR
X-Dynatrace-Js-Agent
Eomportal-Instance
X-Browser
X-Env
X-Resource
VANITY-HOST
X-Cache-Level
X-SRCache-Key
X-HTML-Minification-Powered-By
X-Frontend
X-Cache-Device-Type
Cache
Custom-Header
Cached
X-Ruxit-Js-Agent
X-Sucuri-Cache
Cache-Tag
X-WPL-DATA
X-Litespeed-Cache-Control
X-Correlation-ID
X-GeoIP-Country-Name
X-Middleware-Start
X-Cookie-Domain
X-Purge-URL
X-Pressidium-NinukisWP-Ver
Contao-Page-Layout
X-Purge-Host
X-Processing-Time
X-Varnish-Server
X-Shield-Request-Id
Pics-Label
X-Location
X-Unbounce-VisitorID
X-Rocket-Nginx-Serving-Static
X-SmugMug-Values
X-Content-Type-Option
BALANCEDTO
X-Akam-SW-Version
X-Unbounce-Variant
Smug-CDN
X-Source-ID
X-Dealeron-Original-Url
Xc-Version
X-SmugMug-Hiring
X-Unbounce-PageId
X-Remote-Addr
X-Akamai-3PM-SW-Version
X-Server-Instance
X-Airee-Node
X-FW
X-Srv
X-Cache-PageType
X-PF-Uncompressing
X-Cache-Fix
X-Dealeron-Backend
X-AF-Userserver
X-TTFB
X-DealerOn
X-TTFB-L
Cm-Server
X-Cache-CFC
Tracecode
X-WebKit-CSP-Report-Only
X-Client-Image-Vid
Use-Proxy
X-Symfony-Cache
NetMindSessionID
X-Cache-Control
X-Framework
X-Client-Vid
X-EPiphany-Vid
IISExport
Cmstype
Cmsid
SEOMOZ
X-Real-IP
MJ12bot
Thanks
From-Origin
X-Page
X-CB-Server
X-Omnis-SiteID
Local-Info
X-Cacheable-TTL
Ufe-Result
Identity
Proxy-Agent
X-ACMCache
X-Drectory-Script
X-CDN-Forward
X-Id
X-Compress-Hint
X-Atraveo-From-Varnish-Cache
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-Atraveo-Zone
X-Atraveo-Expires
X-HW
X-NginX-Cache
X-Atraveo-Cache-Control
X-Atraveo-ETag
X-Atraveo-Varnish-Server-Id
X-Provisioner-Version
X-IIJ-Cache
X-Nginx-Host
X-Hit-Cache
Accept-CH
X-Akamai-Transformed
X-Trace-Id
SVR
X-Info
X-FW-Server
X-App
NLCacheNote
X-Varnish-Hostname
X-Session-Reinit
X-Pagename
X-IP
Access-Control-Allow-Method
X-PRAM
X-Force
Id
X-Directory-Script
NtCoent-Length
X-Server-IP
X-WA-Info
Beyond-Iis
X-Domain-Checked
X-Garden-Version
X-GeoIP
X-Abuse
AC-ELC
X-Secret
EagleEye-TraceId
X-Plat
X-W3TC-Minify
X-Backend-Status
Ohc-Response-Time
WN
Machine
X-WR-Flags
X-NodeID
X-Mobilized-By
X-Resty-Request-Id
Hummingbird-Cache
X-Fedora-School-Id
Service-Worker-Allowed
A-Powered-By
X-Adnet
X-Blog
X-DTC
X-VC-Enabled
X-WN-ClientGroup
X-Sys-Req-ID
Content_type
X-CACHE-TTL
X-FPC
X-Dns-Prefetch-Control
Bios
X-RTag
ServerSignature
X-ASAP-Cache
X-Cache-Dispatchercachecontrol
X-ClientSide-Caching
X-Locale
ServerTokens
X-Request-Uri
X-CAPServer
X-Cache-Doesi
X-Ser
X-Fstrz
X-JG-Page-Cache
SS
X-Cache-Dispatcherpragma
X-Orig-Vary
SERVER-ID
X-Runtime-Memory
X-LB-Server
X-RealServer
X-Resolver-IP
X-Time-Microsecs
X-Sites
X-Clara-ASAP
Backend-Timing
X-Analytics
X-SERVER-NAME
X-ServerIndex
X-SmartBan-URL
Web-App-Origin-Name
From
X-Adobe-Content
X-HydroSheep
X-Highwire-SessionId
X-Unique-ID
Adm-Server
X-SmartBan-Host
X-Adobe-Loc
Yoncu-Errno
X-Highwire-RequestId
X-GoCache-CacheStatus
X-VC-TTL
X-Connection-Hash
X-ManagedFusion-Rewriter-Version
X-Twitter-Response-Tags
NODE
X-Rewritten-By
Url
X-Transaction
X-Yottaa-Optimizations
X-Route-To
X-Yottaa-Metrics
X-ACCELERATE
X-Traffic
X-Search-Id
X-MCB-Server
X-AEM
X-Session-ID
X-Webstats-RespID
X-OpenCart-Lightning
X-FORWARDED-PROTO
X-Server-Addr
X-Cf-Powered-By
X-TB-M
SBGI-7
SBGI-10
SBGI-1
SBGI-5
X-4ormat-Cacheable
X-Culture
X-Debug-Token
X-NginX-Server
X-Cache-TTL-Current
SHInfo
X-Varnish-Id
X-Webkit-CSP
X-Cache-TTL-Age
EN-User
X-Webcelerate
X-Req-Head-Response
X-Src-Webcache
X-Title
X-Cache-Node
X-Protected-By
X-Powered-By-Home.Pl
X-Key
X-Layout
X-Map-Context
Accept-Language
Description
X-Agent
X-RiS-UFDI
HitType
Swift-Performance
Max-Age
Keywords
X-Varnish-Debug-Age
X-Varnish-Debug-TTL
X-Grid-Server
X-Gannett-Site-Version
X-Origin-Server
X-PROCESSED-BY
SBGI-9
X-Distil-CS
X-Cache-Via
X-Machine
Magicmarker
Resin-Trace
Disablevcache
Myheader
X-BPool-Bx-Cache
X-BServer
X-Depends
X-BPool-Back
X-BPool
Report-To
RequestId
TheAnswer
X-DataDome
X-BPool-Fx-Cache
Play-Detected-Device
SBGI-Device
X-Cocoon-Version
X-Disney-Akamai-Rule
X-FireWall-Port
X-ARRServer
Play-Detected-UserAgent
SBGI-RenderTime
SBGI-RealPath
X-LW-Web-Server
Edit
X-LP
X-Role
X-Distributor
X-SDE-Name
X-Smartcache-Keys
X-WP
X-Smartcache-Timeout
Device
X-Captured
X-Hosting-Env
Server-ID
SiteSpeed
X-EC2-Instance-Id
X-Balanceador
Web
VServer
Ramp
XDomainRequestAllowed
Noq
Ram
X-Middleton-Pagespeed
X-Rack-Cors
X-A
Fastly-Backend-Name
X-Amz-Meta-Cb-Modifiedtime
X-Serv
X-Cdn-Forward
AMP-Access-Control-Allow-Source-Origin
X-Highwire-Sitecode
X-DEBUG
X-Batcache-Reason
NZSpeedy
X-Varnish-ID
Lb
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Highwire-Smart-Code
X-Jphone-Copyright
X-Detected-Device
X-V
Dis-Env
X-Batcache
X-Cluster
X-Wikidot-Static-Cache
X-SH-Cache-Status
X-DynamicCache
X-XHTML-Minification-Powered-By
X-DB-Content-Length
X-Frames-Options
X-CacheDebug
X-Generated-Time
X-Compressed-By
X-MidCOM-Meta-Cache
Backend-IP-Port
X-DN-Cache-Control
Backend-Name
X-Autoru-Host
Home
Edgecast
X-Cache-On
X-Gyrobase-Publication
TZ-Server
Proxy-Cache
MW-Webserver
Il-Cl
COMMERCE-SERVER-SOFTWARE
CLMOB
X-AutoRu-App-Id
X-Hosting
X-Autoru-LB
X-Aramark-SID
X-CRA-DC
X-Header
X-JSESSIONID
X-B2f-Not-Route
Content-Generator
X-HashTwo
X-Goog-Meta-Replace
X-Rewrite
X-Redirector
X-OPNET-Transaction-Trace
X-Goog-Meta-Policy
OracleCommerceCloud-Sandiego
Apachenode
X-Data-Request
X-Varnish-Action
X-Zendesk-User-Id
X-Zendesk-Origin-Server
X-Viator-Tapersistentcookie
X-Rack-CORS
X-E
X-Ghost-Cache-Status
MS-CV
X-Confluence-Request-Time
X-Refresh
X-GSL-Server
OracleCommerceCloud-Version
X-Amz-Id-1
X-Amcomm-Site
X-Origin-Id
Prama
X-App-Runtime
X-Cache-Time
X-Varnish-Hits
X-Varnish-Cache-Local
X-Rebelmouse-Surrogate-Control
ClientIP
Paypal-Debug-Id
X-Svr
X-Dw-Trace-Id
BackendServer
CommercePlatform-Version
X-RDP
X-Rebelmouse-Cache-Control
X-Response
F5-IpCliente
Traffic-Origin
PagesDisplayed
Upgrade-Insecure-Requests
SINA-TS
SINA-LB
OriginServer
Og
X-CacheID
Gzip
ID
NS-VaryByCustom-Key
X-Cache-Me-Harder
X-Old-Content-Length
X-Mobile-URL
Cleartype
Dispatcher
Provider
X-HP-Trace-Project
Hamster
X-HP-Trace-ID
X-ReqId
X-SilverStripe-Cache
Access-Control-Allow-Header
X-Actindo-Request-Id
SG
X-ESI
Nginx-Cache
X-Nginx-Request-Processing-Time
Ibf5scheme
X-VNode
X-Processed-By
X-Actindo-Thread-Id
X-AMAZEEIO
X-Artvisual-Server
X-FG-RequestId
X-Enhanced-By
X-Node-Name
X-Meta-Imagetoolbar
X-Meta-MSSmartTagsPreventParsing
X-Meta-MSThemeCompatible
X-Proxy-Skip
Server-Ip
RN-Server
MSSmartTagsPreventParsing
MSThemeCompatible
X-Proto
X-MAT-GEO
SB-Site-IE-VERSION
Cteonnt-Length
X-ASAP-Age
X-DS1D
SB-Site-Device
SB-Cache-Remaining
X-Skip-Cache
Page-Template
SB-Cache-Life
N365rili
X-Actindo-Rs
X-Runtime-Affili
Www.Aujourdhui.Com
X-ZSITES-DNS
X-Who
X-Application
DrivedBy
Warning
X-Node-Id
Hostname
X-Cjtype
Language
X-Varnish-Grace
X-Wikidot-Backend
ScoreTracker
AsisCache
X-Proxy-Cache-Key
X-Varnish-Cache-Ttl
X-UnsetCookies
X-Render-Time
X-Desc
X-Geo-IP
X-Amz-Meta-Content-Md5
X-SCM-Server-Number
X-AISO-Cache
X-Cache-Detail
X-NID
X-LBPoolMember
X-AISO-Cacheable
X-Dev
X-Cms-Mode
Ctx
MyHeader
PServer
Worker
Viewport
X-Tag-Playlist
X-Origin-Cache
X-PM-ID
Aoestatic
X-HS-Status
X-Magento-Lifetime
X-AISO-Server
X-Cache-Varnish
Ttl
X-Author
X-Reflector-Cache
Ews
X-Client-Ip
Strikingly-Cache-Region
TP-Cache
Strikingly-Cached
Strikingly-Cached-Version
X-Upgrade-Enabled
X-Reflector
X-Lb
VC-NoCache
X-Forwarded-Host
X-Sid
Xc
TP-L2-Cache
X-Magento-Action
Load-Balancer
Progma
HA-Servedtime
L5d-Success-Class
NKBVHEADER
Kanooh-Host
HA-Urlpath
HA-Ipaddr
IES-Server
X-Bip
X-DDM-SERVER-UPDATED
X-DDM-SERVER
X-Clx-Request
X-Distributed-By
X-Hash
X-Phpwcms-Page-Processed-In
X-MSU-SOURCE
X-CACHE-KEY
X-AWS
X-VTEX-Cache-Status-Janus-Edge
X-Reqid
Requested-Host
Unique-Request-Id
X-7d-Trace-Id
X-7d-Instance-Id
X-Phpwcms-Release
X-PoweredBy
HA-Geocity
HA-Cloudapp
DB-Nickname
HA-Geocountry
HA-Geolat
HA-Georegion
HA-Geolon
BlockPHPCallEnd
XX
X-SE-Debug
X-Proxy-Id
X-SuperCache
X-Uncacheable
X-VG-WebCache
X-UType
HA-Host
Request-EU
X-RequesterIP
X-RemovedCookies
X-ProcessESI
X-Original-IP
X-SATserver
X-TA-CDN-Provider
X-Cache-Ttl
X-Ants-Machine-Id
X-Ants-Host
CDCHOST
X-Obvious-Tid
X-Obvious-Info
X-SV
X-Server-Generated
X-Dynamic-Cache
WP-FROM-CACHE
Dtk-Cache-Check-0
Request-Country
X-Instance
X-Feed
WSCLoggingUUID
Tk
X-COUNTRY-CODE
X-Custom-Name
X-Global-Transaction-ID
X-Flex-Tags
X-Flex-Tag
X-Flex-Lastmod
X-Max-Age
X-Nginx
X-We-Are-Hiring
X-Profiler
X-PressLabs-Stats
X-Pool
X-Flex-Lang
X-Flex-Evstart
V-TTL
HSTS
X-Test-Debug
X-Pubstack
X-Backside-Transport
X-CD
X-Flex-Evend
X-REDIRECTSERVER
X-Flex-Community
X-Device-Item
Session-From
ServerIP
X-OCTOPOD
X-Nitro-Cache
X-Member
X-MCF-ID
X-OpenUrlRewriter-Debug
X-Pagely-Cache
X-Script
X-S-Misc
X-PHP-Response-Code
X-PG
X-Jcms-Ajax-Id
X-Homeaway-Requestmarker
X-CGP
X-Built-With
X-Bcwwwid
X-B3-Traceid
X-Config-By
X-D-Time
X-HAProxy
X-Generation-Time
X-FreeTag-Count
X-Fpc
X-ServerAddr
X-ServiceProvider
X-CO-Host
X-Cache-Bypass
TC-S-Cache-M
TC-S-Cache
X-Hit
X-Node-App
Expiries
Debug-Status
CS-SERVER
X-Unique-Id
TC-Cache-U
TC-Cache-IC
X-Varnish-Cached
X-UPServer
X-Streams-Distribution
X-Sn-Servicetimems
X-Varnish-Cached-TTL
X-XHR-Current-Location
TC-Cache
Response-Time
Xcache
X-B3-Spanid
X-VCS-Cacheable
X-Deity
X-Debug-Token-Link
X-CSRF-Token
X-ETag
X-Gateway-Rate-Limit-Conn
X-Header-Treatment
X-HEAD
X-Gateway-Rate-Limit-Delayed
X-Cname-TryFiles
X-Cache-ID
EQ-Cache
Be
X-VCS-Ttl
GranicusServer
HostName
X-Beatles
X-Apm-Telemetry-Syncmark
RSB-LINK
X-M
X-Made-On
MageStack-Cacheable
MageStack-Cache-Status
MageStack-Cache-Lifetime
MageStack-Config
MageStack-Debug
MageStack-PageSpeed
MageStack-Magento-Version
MageStack-Loadbalancer
MageStack-Cache-Hits
MageStack-Cache
X-Sorting-Hat-Expire-Cache
X-Served
X-Pj-Cache-Status
X-Varnish-Debug-Hits
1A-CountryCode
MageStack-Area
IsMobile
Generate-Time
X-Shopware-Cache-Id
X-Shopware-Allow-Nocache
DeleGate-Ver
X-Ssl-Cipher
X-Site
X-NMT-Proxy
X-Static
X-VC-Debug
X-VC-Cacheable
X-VC-Cache
X-PBY
X-Pass-Through
X-Instance-Name
StatusCode
Httpd-Identifier
Container
MachineName
X-Timestamp
X-Status
MwpReleaseVersion
X-VC-Hash
Cacheid
X-DSMX-Rewrite-MS
X-DSMX-Render-MS
X-Custom-Header
X-Full-Url
X-Pixelsilk-Server
X-Served-Server
X-Route
X-Pixelsilk-Version
X-ClusterID
X-Cache-Original-TTL
User-Agent
Server-Id
CpuTime
V-Age
X-Ab-Selection
X-Cache-Id
X-ACLR-Version
MageStack-Tag
MageStack-Web-Node
X-MyName
X-Instance-Id
X-HP-CAM-COLOR
X-NewsFlow-Sitename
X-Nginx-Request-Time
X-PBS-Fwsrvname
X-PBS-Appsvrname
X-PBS-Appsvrip
X-Healthy
X-Container
XDisk
X-Transaction-Name
X-RAMCache
ProxiaInstanceId
ReqUrl
X-Catalyst
X-Cache-FS-Status
Session-Id
X-SSLProxy
X-SSLUpstream
X-Hstore
X-Hrouter
X-Cache-Extended
X-KoobooCMS-Version
X-Log
X-Qiniu-Zone
X-M-Reqid
X-M-Log
X-Box
X-Backend-Host
X-Via-NSCOPI
X-UPSTREAM-Address
X-Svr-Proxy
X-WebNode
Actual-Object-TTL
X-Avvio-Cms-Cacheload
FRONT-END-SECUREBROWSER
Fastly-Restarts
X-Pool-Info
X-Pageid
X-NewCloud-V-Cache
X-HA
X-FastCGI-Cache-Status
X-Ocache
X-ProBase-Server
X-SayCDN-TTL
X-Say-TTL
X-Say-Cacheable
X-Debug-Message
X-BP-NSA-REQID
X-Activity-Id
Tesla.Performance
Request-Filtered-By
X-Amz-Meta-Version-Id
X-AppVersion
X-Backend-TTL
X-B
X-Az
X-Serverid
X-T
X-Country
X-CH-Device
X-Beresp-Ttl
X-FIRSTBase
X-Front-Cache
X-Litespeed-Tag
X-IP-Address
X-Instart-Cache-Id
RSL-Trace-ID
Referer
Amfplus-Ver
X-UT-Cache
X-UA
CommunityServer
Copyright
Provided-Host
HA-Front
X-Qnm-Cache