Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
X-AspNet-Version
X-Pingback
P3P
Age
Content-Language
X-UA-Compatible
Via
Access-Control-Allow-Origin
Expect-CT
Upgrade
X-Adblock-Key
X-Varnish
P3p
X-Cacheable
X-Check
X-Language
X-Template
Content-Security-Policy
X-Generator
X-Buckets
X-Drupal-Cache
X-Request-Id
X-AspNetMvc-Version
X-Type
X-Cache-Group
X-Pass-Why
X-Hacker
X-Ac
X-Powered-By-Plesk
X-Cache-Hits
Content-Location
Alt-Svc
X-Permitted-Cross-Domain-Policies
X-FRAME-OPTIONS
X-Runtime
X-Download-Options
MS-Author-Via
Host-Header
X-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Dc
X-Sorting-Hat-Section
X-ShardId
X-Sorting-Hat-PodId-Cached
X-Alternate-Cache-Key
X-IPLB-Instance
X-Powered-CMS
Cartoon
X-Served-By
X-UA-Device
Access-Control-Allow-Credentials
Status
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Amz-Cf-Id
X-Via
X-Iinfo
X-Cache-Status
X-Xss-Protection
X-Backend
X-DIS-Request-ID
X-Timer
X-ServedBy
X-Contextid
CF-Cache-Status
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Mod-Pagespeed
X-CST
X-PC-Hit
X-PC-Key
X-Request-ID
Content-Encoding
Powered-By
X-PC-AppVer
X-PC-Date
X-PC-Host
Keep-Alive
X-Logged-In
X-Host
X-Rid
X-CDN
X-Server
X-Cache-Hit
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Port
Referrer-Policy
X-Tumblr-Pixel-1
X-Server-Powered-By
X-Cache-Enabled
X-Robots-Tag
X-Tumblr-Pixel-2
X-Wix-Server-Artifact-Id
X-Endurance-Cache-Level
X-Nginx-Cache-Status
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
X-Accel-Version
X-Page-Speed
WP-Super-Cache
X-Turbo-Charged-By
X-Wix-PunisherID
WPE-Backend
X-Pad
X-Drupal-Dynamic-Cache
X-Content-Powered-By
X-Forwarded-For
Content-Security-Policy-Report-Only
X-Tumblr-Pixel-3
X-Content-Digest
X-Varnish-Cache
X-Forwarded-Proto
X-AH-Environment
X-Rack-Cache
X-Proxy-Cache
X-Styx-Req-Id
Surrogate-Key-Raw
X-Pantheon-Styx-Hostname
SPRequestGuid
X-SharePointHealthScore
X-Request-Country
X-Cnection
MicrosoftSharePointTeamServices
X-MS-InvokeApp
X-GitHub-Request-Id
X-XRDS-Location
X-Original-Date
X-Cache-Lookup
Edge-Control
X-LiteSpeed-Cache
X-FullPageCaching
Cf-Railgun
Timing-Allow-Origin
X-Died
X-Safe-Firewall
X-Webserver
MicrosoftOfficeWebServer
Request-Id
X-Amz-Id-2
X-Amz-Request-Id
X-FW-Hash
Charset
X-PhApp
X-FW-Serve
X-FW-Static
X-FW-Type
X-Content-Security-Policy
X-Node
SPIisLatency
Edge-Cache-Tag
SPRequestDuration
X-INKT-URI
X-INKT-SITE
X-HS-Cache-Config
X-HS-Content-Id
Composed-By
X-Hits
Access-Control-Max-Age
X-SERVER
X-CF-Powered-By
X-Tumblr-Pixel-4
Liferay-Portal
Grace
Served-By
X-WPE-Loopback-Upstream-Addr
Access-Control-Expose-Headers
X-Spip-Cache
X-Newrelic-App-Data
X-Swift-CacheTime
X-Swift-SaveTime
Request-Context
X-Hyper-Cache
X-BC-Stapler
EagleId
Fastly-Debug-Digest
X-Firenze-Processing-Times
X-CDN-Pop
X-CDN-Pop-IP
Content-MD5
X-Server-Name
X-Device
Rating
X-PHP-Backend
X-AWS-Id
X-LJ-Flow-ID
X-VWS-Id
X-Backend-Server
X-Dw-Request-Base-Id
X-Fastly-Request-ID
X-Microcache
X-VCache
Content-Style-Type
X-ServerName
X-RateLimit-Remaining
X-Tumblr-Content-Rating
Content-Script-Type
X-RateLimit-Limit
X-FB-Debug
X-User-Agent
X-Clacks-Overhead
X-RateLimit-Reset
X-Jimdo-Wid
X-Jimdo-Instance
X-Cloud-Trace-Context
Public-Key-Pins
X-Loop
X-TNCMS
Real-Hostname
X-Cache-Config
Surrogate-Control
Refresh
X-XN-Trace-Token
X-XN-XNHTML
Front-End-Https
X-DDC-Arch-Trace
X-Acc-Exp
Xkey
X-Age
Fpc-Cache-Id
X-StackifyID
X-Hostname
X-N-OperationId
X-Px
X-Generated-By
X-Cached
PageSpeed
X-DNS-Prefetch-Control
X-SS-Location
X-SS-Conf
X-Tumblr-Pixel-5
X-Topify-Platform
X-LiteSpeed-Cache-Control
X-Middleton-Display
X-Middleton-Response
Display
Response
X-Sol
X-MiniProfiler-Ids
X-Zen-Fury
X-WebKit-CSP
X-Cached-By
TCN
Surrogate-Key
X-Request-Time
X-Outils-CS
X-ApacheServer
X-PERF
X-DynaTrace-JS-Agent
X-Url
X-CMS-Version
X-Content-Options
X-URL
X-Trace
X-Microcachable
Product
X-Whom
X-Pantheon-Environment
X-Pantheon-Phpreq
X-Pantheon-Site
Rt-Fastcgi-Cache
X-DynaTrace
Edge-Control-Message
X-Amz-Version-Id
X-Handled-By
Imagetoolbar
X-Kinsta-Cache
X-FORWARDED-FOR
Access-Control-Request-Method
X-From
Dmn
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-AspNetWebPages-Version
Alternate-Protocol
X-Varnish-TTL
Host
X-Correlation-Id
X-HS-Combine-CSS
X-Umbraco-Version
ServedBy
DynaTrace
X-Magento-Tags
X-Engine
X-Varnish-Cache-Hits
X-OneAgent-JS-Injection
X-Cache-Rule
X-LBLID
X-HOST
P-LB
X-Msg-2-Log
P-WS
Powered
X-Tumblr-Pixel-6
X-NWS-LOG-UUID
X-Location-Id
X-Fastcgi-Cache
X-Recruiting
X-Ruxit-JS-Agent
X-B-Cache
X-CacheServer
Generator
X-Actual-URL
Fhost
X-Hosted-By
X-Goog-Hash
X-Track
X-Returned-From-DLL
X-RESOURCE
X-Returned-From
X-Passed-To-DLL
X-Original-Request
X-Passed-To
X-Varnish-Beresp-Ttl
X-Edge-Location
X-Micro-Cache
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
X-Passed-To-BeforeDispatch
X-Instart-Request-ID
X-Varnish-Beresp-Status
X-Returned-From-BeforeDispatch
X-Varnish-Beresp-Grace
X-Matrix-Server
X-Matrix-Proxy
X-Stale
X-Powered-By-360WZB
WZWS-RAY
X-Vtex-Remote-Cache
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Cache-Status-Janus-ApiCache
No
X-Vtex-Processado-Em
X-Vtex-Processed-At
X-URLSCHEME
X-VTEX-Janus-Router-Backend-App
X-Varnish-Host
Arr-Disable-Session-Affinity
X-Tec-Api-Version
X-Tec-Api-Root
X-Art-Request-Id
X-Tec-Api-Origin
Public-Key-Pins-Report-Only
X-Accel-Expires
X-Cache-Age
X-Powered-By-VTEX-Janus-Edge
Origin
X-Application-Context
X-Source
X-UD-Method
Fastcgi-Cache
X-LB
X-Developer
X-App-Hosting
X-Upstream
X-Cache-TTL
X-Platform
X-Platform-Processor
X-Version
X-NetCat-Version
X-Debug-Info
X-Platform-Router
X-Platform-Cluster
X-I-Sp
X-BS
Powered-By-ChinaCache
X-Cdn
Akamai-IP
X-Rocket-Nginx-Bypass
X-Cache-Info
X-Device-Type
X-Duration
X-Response-Time
X-TransIP-Balancer
X-VARNISH-Cache
X-Internal-ReqID
X-Content-Security-Policy-Report-Only
X-S
X-Varnish-Count
X-Powered-By-VelaWeb
X-Varnish-HitMiss
X-Signature
X-Defender
X-Shop-Id
X-HS-Content-Campaign-Id
Content-Hash
X-Storage
X-Gamma-Serve
X-LW-Cache
X-ATG-Version
Ohc-File-Size
Pool
Last-Published
X-Supported-By
X-Translation
X-Expires-Orig
X-Microcache-Status
X-Server-ID
X-Daa-Tunnel
X-Varnish-Cacheable
X-EdgeConnect-Origin-MEX-Latency
USPLoggingUUID
X-Cache-Debug
HTTPS
X-TransIP-Backend
MIME-Version
X-I
X-Cache-Tags
X-Cache-Operation
Content-Disposition
X-Director
Node
X-Content-Encoded-By
X-Front
Version
X-NoCache
X-Firenze-Processing-Time
IBM-Web2-Location
X-TTL
X-SV-FromDBCache
X-SV-Pid
X-EdgeConnect-MidMile-RTT
X-Cache-Key
X-SV-Nginx-Duration
X-SV-Edge
X-Page-Cache
X-SV-CreatedAt
X-SV-Duration
X-SV-CacheTags
X-SV-Expires
X-SV-Cacheable
X-Hypernode
Srv
X-Dispatcher
Cache-Key
X-Varnish-Seen-By
X-Varnish-ObjectSource
X-Varnish-RemainingTTL
X-Route-Server
X-F-Cache
X-Varnish-GracePeriod
X-UPSTREAM
X-Varnish-RemainingLife
X-Flow-Powered
X-Revision
X-Platform-Server
X-Origin
X-VTEX-Cache-Status-Janus-Edge
X-Magento-Cache-Debug
SSPAppContext
X-Client-IP
ServerName
X-Varnish-Age
Lsrequestid
X-Abgroup
X-Server-Upstream
X-Cache-Control-Orig
X-SSL-Cipher
Allow
Cache-Provider
Cneonction
X-Platform-Cache
X-SSL-Protocol
X-Dns-Prefetch-Control
X-Grace
SN
X-CJ-Soft
Req-Id
X-PwB-Node
X-Abuse
X-Dispatch
X-Vcap-Request-Id
IM-Version
X-GeoIP-Country-Code
X-Country-Code
X-Debug
X-Varnish-Backend
X-Cache-Only-Varnish
X-Cache-Lifetime
X-Akamai-Device-Characteristics
X-Lambda-Id
X-Cache-Expires
Fw-Via
Pv
PICS-Label
Section-Io-Id
X-ARC
ServerID
X-LB-Node
X-AOL-HN
FAI-W-FLOW
X-Cookie-Domain
Accept-Encoding
X-Sucuri-ID
X-Content-Age
X-Akamai-Transformed
X-Geo-Country
X-Last-Modified
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
Location
Proxy-Connection
X-Time
X-Cache-Server
X-ORACLE-DMS-ECID
Page-Completion-Status
X-Hiawatha-Cache
NnCoection
X-Sapient
X-Via-JSL
Wsr-Cache
X-Sucuri-Cache
X-SDS
Edge-Content-Tag
X-Loopia-Node
X-Speed-Cache
X-Speed-Cache-Key
X-ServerID
X-Amz-Meta-S3cmd-Attrs
X-Cache-Engine
Tracecode
X-Akamai-Device-Model
X-GeoIP-Country-Name
Content-Encoding-Handler
X-Edge-IP
HCVer
HAVer
X-Server-Id
Server-Info
RTSS
X-Proxy
X-Yadis-Location
X-Generated
X-Xrds-Location
X-BackendServer
X-Url-Base
X-Processing-Time
X-Drupal-Cache-Tags
X-BKSrc
X-SE-Debug
Accept-Charset
X-Goog-Stored-Content-Length
X-Browser
X-Id
S
Nodo
X-GUploader-UploadID
X-Goog-Metageneration
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Generation
Backend
X-Nbs
X-IsCacheURL
X-RequestId
Qs-Cache
X-Varnish-Ttl
S-Cnection
X-DataDome
X-FW
X-Shield-Request-Id
Eomportal-Instance
X-Cf-Powered-By
X-Yottaa-Metrics
X-Orig-Vary
X-Always-Cache
X-Yottaa-Optimizations
X-Correlation-ID
X-N
X-CDN-Cache-Status
X-CDN-Node
X-SRCache-Key
Content-Transfer-Encoding
Author
If-Modified-Since
X-Nginx-Cache
X-Worker
Cm-Server
X-PF-Uncompressing
NODE
NetMindSessionID
X-Frontend
X-Purge-URL
X-ID
X-Discourse-Route
X-Processed-By
X-Cache-Level
X-App-Server
X-Varnish-Url
SRV
X-Cache-Type
X-Middleware-Start
X-NB-Cached-Page
X-Amz-Storage-Class
AMF-Ver
Magicmarker
X-Cache-CFC
X-Config-Blacklist-Version
X-Ttl
X-Pressidium-NinukisWP-Ver
X-CDN-Forward
A-Powered-By
X-Magento-Cache-Control
X-Magnolia-Registration
X-Healthy
Cache
WWW-Authenticate
X-Rnd
X-Environment
MC
Retry-After
X-ACMCache
SEOMOZ
MJ12bot
X-Srv
X-Vhost
W
IISExport
X-AVG-Country-Code
X-Cache-PageType
X-Empowered-By
X-Redman-Final-Url
X-Cache-Fix
Frame-Options
Cached
X-Akamai-Edgescape
X-Avg-Cookie-Expires
Use-Proxy
X-Redman-Backend
X-SO
Xc-Version
X-Webkit-CSP
Identity
X-DealerOn
Disablevcache
X-Varnish-IP
X-Cache-Handler
Front
X-Pagename
X-Hit-Cache
Warning
X-EPiphany-Vid
Local-Info
X-Client-Vid
X-Client-Image-Vid
Nitro-Cache
X-Cache-Control
SVR
X-Route-To
X-Varnish-ID
X-AF-Userserver
X-Real-Server
Access-Control-Allow-Header
X-VARITI-CCR
AddOutputFilterByType
X-Litespeed-Cache-Control
X-Purge-Host
X-Traffic
CacheControlHeader
X-Remote-Addr
X-Powered-By-Server
X-LB-Server
X-ORACLE-DMS-RID
X-Varnish-Hits
X-Varnish-Server
X-ClientSide-Caching
X-Amz-Meta-Cb-Modifiedtime
X-Drupal-Cache-Contexts
X-CDN-COMPRESS
X-CDN-RULE
X-Mobilized-By
X-FireWall-Port
X-Source-ID
X-Cache-Device-Type
X-Framework
BALANCEDTO
X-HP-Trace-Project
Cache-Tag
X-HP-Trace-ID
EagleEye-TraceId
X-Cocoon-Version
X-WR-Flags
X-Env
X-Debug-Token
X-Dw-Trace-Id
X-Location
Machine
X-WN-ClientGroup
X-HTML-Minification-Powered-By
X-Directory-Script
WN
X-VC-TTL
X-IIJ-Cache
X-UA
X-Symfony-Cache
Content_type
X-CF-Passed-Proto
X-Cluster-Node
X-Cache-Source
Thanks
X-High-Performance
X-Runtime-Memory
X-Cache-Provider
X-CB-Server
NtCoent-Length
X-Varnish-Retries
X-JG-Page-Cache
X-NODE
X-WR-MODIFICATION
Cmstype
Cmsid
X-Session-Reinit
X-Distil-CS
X-Drectory-Script
Cteonnt-Length
X-Sys-Req-ID
X-Adobe-Content
X-PRAM
CLMOB
X-HOSTNAME
HitType
X-Adobe-Loc
X-Cache-Doesi
X-Force
X-SmugMug-Values
X-TTFB-L
From
X-TTFB
X-SmugMug-Hiring
X-LP
Smug-CDN
X-ASAP-Cache
X-GeoIP
X-Generated-Time
X-Cache-Dispatcherpragma
Access-Control-Allow-Method
Server-Name
Ufe-Result
X-Page
X-Clara-ASAP
X-Cache-TTL-Remaining
X-Cache-Dispatchercachecontrol
X-Key
Id
Web-App-Origin-Name
X-Varnish-Hostname
X-TB-M
X-CAPServer
X-Runtime-Rack
X-Connection-Hash
X-Server-IP
X-RealServer
NLCacheNote
X-Rq
X-ServerIndex
Bios
Proxy-Agent
X-Transaction
Keywords
X-Balanceador
X-WHOIS-Cached
X-ARRServer
X-Webcelerate
X-Ezoic-Cdn
X-Twitter-Response-Tags
MW-Webserver
ServerTokens
ServerSignature
X-This-Proto
X-WP
X-HW
X-Info
X-Disney-Akamai-Rule
X-Cache-Node
X-A
X-App
X-Atraveo-Varnish-Server-Id
X-Atraveo-TTL
X-Atraveo-Set-Cookie
SBGI-RenderTime
X-Atraveo-Zone
X-Adnet
X-Depends
X-Resolver-IP
Max-Age
X-Atraveo-Param-Rm
X-Atraveo-From-Varnish-Cache
X-NginX-Server
SBGI-10
X-DTC
SBGI-1
X-Culture
X-Atraveo-Expires
X-Atraveo-ETag
X-Atraveo-Cache-Control
SBGI-5
SBGI-7
SBGI-Device
SBGI-9
X-Blog
X-Airee-Node
SBGI-RealPath
X-Webkit-Csp
X-RiS-UFDI
X-VC-Enabled
DNNOutputCache
X-Backend-Status
X-HP-Redirect
Dispatcher
X-Content-Type-Option
X-Rack-Cors
Ctx
X-Session-ID
X-Proto
X-Stage
Pics-Label
Fastly-Backend-Name
Description
X-HydroSheep
X-Mobile-URL
X-Nginx-Host
X-NginX-Cache
Strikingly-Cache-Region
X-Provisioner-Version
Url
Strikingly-Cached
Strikingly-Cached-Version
X-Req-Head-Response
X-Map-Context
Beyond-Iis
X-OPNET-Transaction-Trace
X-ACCELERATE
X-Esi
X-Render-Time
X-Domain-Checked
Nginx-Cache
X-App-Status
SHInfo
X-ReqId
Yoncu-Errno
X-E
Backend-Timing
X-Analytics
X-Captured
X-Highwire-RequestId
X-Highwire-SessionId
X-Secret
X-SmartBan-Host
TC-S-Cache-M
Access-Control-Request-Headers
TC-Cache-IC
TC-Cache-U
TC-S-Cache
X-SmartBan-URL
DrivedBy
OriginServer
X-Rocket-Nginx-Serving-Static
X-Wikidot-Backend
X-Machine
Home
TC-Cache
X-Obj.Ttl
Myheader
X-Wikidot-Static-Cache
X-Unbounce-Variant
X-Oracle-DMS-ECID
Dis-Env
X-SERVER-NAME
RN-Server
X-Hosting-Env
X-Smartcache-Keys
X-Garden-Version
VANITY-HOST
XDomainRequestAllowed
X-Artvisual-Server
X-Unbounce-PageId
X-Unbounce-VisitorID
X-Jphone-Copyright
X-Server-Instance
X-Middleton-PageSpeed
ScoreTracker
X-OpenCart-Lightning
X-Frame-Option
X-SDE-Name
X-Smartcache-Timeout
X-KoobooCMS-Version
X-Hstore
X-Ser
WP-AdvCache-MemCached
X-Hrouter
X-Trace-Id
X-Batcache-Reason
X-Batcache
X-Fedora-School-Id
X-Unique-ID
X-4ormat-Cacheable
X-HITS
COMMERCE-SERVER-SOFTWARE
From-Origin
X-LW-Web-Server
Swift-Performance
AsisCache
X-EC2-Instance-Id
Buuteeq-Source
X-Goog-Meta-Policy
X-AEM
X-NewRelic-App-Data
X-Resty-Request-Id
X-Goog-Meta-Replace
Web
X-Data-Request
Edgecast
ViewMode
X-Avvio-Cms-Cacheload
X-AMAZEEIO
X-Gannett-Site-Version
X-B2f-Not-Route
AccessControlAllowOrigin
X-WPL-DATA
X-AutoRu-App-Id
SB-Cache-Life
X-Autoru-LB
X-Autoru-Host
SB-Cache-Remaining
X-EMAC-Request-ID
X-Grid-Server
X-Origin-404Back
X-SilverStripe-Cache
X-HashTwo
X-Cache-Via
X-Amz-Id-1
X-Title
X-Layout
X-PBY
X-MSEdge-Ref
Xc
X-Aramark-SID
X-Upstream-Status
X-Upstream-Backend
X-SCM-Server-Number
X-HA-Backend
Aurora-Node
X-Apm-Telemetry-Syncmark
X-Varnish-Cache-Local
Accept-Language
X-Config-By
Service-Worker-Allowed
Server-Tuning
X-HA-Frontend
X-Rewritten-By
X-NodeID
X-Origin-Server
X-Cache-Detail
X-ManagedFusion-Rewriter-Version
X-Origin-404URL
X-Plat
AC-ELC
SB-Site-IE-VERSION
X-Proxy-Cache-Key
X-RemovedCookies
X-ProcessESI
X-Replay-Request-ID
NZSpeedy
Set-Cookie2
SB-Site-Device
X-MidCOM-Meta-Cache
X-MAT-GEO
X-CacheResult
X-Cache-Keep
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Cache-On
Sophnep-Edge-FX
Content-Server
X-Machine-Name
Paypal-Debug-Id
Cluster-ID
SG
Hname
X-CACHE-TTL
X-Actindo-Error-1
X-Actindo-Thread-Id
X-Actindo-Rs
X-Actindo-Request-Id
X-CRA-DC
X-OCTOPOD
X-VarnMisc-Url
Server-ID
X-GSL-Server
X-VarnMisc-UrlChanged
ServerIP
Session-From
Cache-Tags
X-VarnState-NoCache
X-Rewrite
X-Ghost-Cache-Status
X-RDP
X-Sc-Cache
X-Response
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Serv
Provider
X-W3TC-Minify
X-Dev
SBMCLOUD
X-Detected-Device
X-Header
X-CSRF-Token
Og
Ttl
VServer
X-Server-Addr
X-Flex-Lastmod
X-DB-Content-Length
X-Unique-Id
X-Flex-Lang
X-Flex-Evstart
X-Flex-Tag
X-Src-Webcache
Worker
X-Cms-Mode
X-Optimization
X-Nginx-Request-Processing-Time
X-HostName
X-Flex-Evend
X-Flex-Tags
X-Flex-Community
MS-CV
X-Distributor
X-IP
X-SV
Response-Time
Accept-CH
X-Search-Id
X-Webstats-RespID
F5-IpCliente
X-MCB-Server
Gzip
X-PM-ID
FastCGI-Cache-Status
X-DSMX-Render-MS
X-DN-Cache-Control
X-Cacheable-TTL
X-Router
X-DSMX-Rewrite-MS
X-CacheID
ClientIP
X-Gyrobase-Publication
RequestId
X-Time-Microsecs
Actual-Object-TTL
N365rili
X-Frames-Options
X-Cache-Time
AMP-Access-Control-Allow-Source-Origin
Ibf5scheme
X-Cached-Status
X-M
X-Powered-By-Home.Pl
X-Forwarded-Host
X-Desc
Traffic-Origin
Hosted-By
X-Hosting
X-Viator-Tapersistentcookie
Il-Cl
NS-VaryByCustom-Key
X-Session-Id
Proxy-Cache
Tempo
X-XHR-Current-Location
CommunityServer
X-Highwire-Sitecode
X-Highwire-Smart-Code
X-Cache-TTL-Age
X-Cache-TTL-Current
X-Ezpublish-Nodeid
X-Served-Server
PagesDisplayed
X-WA-Info
X-Zendesk-Origin-Server
StatusCode
X-AG-MIPS
X-DS1D
X-Dynamic-Cache
Ram
X-Old-Content-Length
Serverid
Ews
X-Pagely-Cache
X-HAProxy
Noq
X-Amz-Meta-Content-Md5
X-Ezpublish-Installationid
X-Forwarded-By
X-Zendesk-User-Id
X-Pass-Through
X-Test-Debug
X-We-Are-Hiring
X-Pubstack
X-Nginx
X-XHTML-Minification-Powered-By
X-LBPoolMember
X-Webkit-CSP-Report-Only
Debug-Status
X-Turpentine-Esi
MwpReleaseVersion
X-FRUIT
CDCHOST
Hamster
Fastly-Restarts
X-ACLR-Version
AGI-Request-ID
X-Varnish-URL
X-Site
BackendServer
PServer
RSB-LINK
X-Ss-Location
X-Runtime-Affili
SiteSpeed
X-Pj-Cache-Status
X-Ss-Conf
Device
X-Resource
X-Reflector
X-SH-Cache-Status
X-Bcwwwid
X-REDIRECTSERVER
X-Cache-BE
X-Cdn-Forward
X-App-Runtime
X-Cache-HT
X-Cache-Warmer
X-Varnish-Action
X-ChromeLogger-Data
SERVER-ID
X-RAMCache
TP-Cache
TP-L2-Cache
X-Reflector-Cache
X-Container
X-CACHE-KEY
RATING
Server-Ip
X-Lb
X-Brought-To-You-By
X-Test
X-Route
X-NID
X-Cache-Extended
X-GoCache-CacheStatus
X-Rack-CORS
X-Agent
X-Application
X-Box
X-Cluster
X-DeliveryServer
X-Cjtype
X-BServer
X-BPool-Fx-Cache
X-BPool-Bx-Cache
X-Static
X-ENV
X-FIRSTBase
X-Varnish-Cache-Ttl
X-Dynamic
User-Agent
X-Server-Generated
X-LOCATION
X-MainProfileCategory
X-MainProfileID
X-Ants-Host
X-HP-CAM-COLOR
X-DevSrv-CMS
X-Protected-By
X-BC
Session-Id
X-Ants-Machine-Id
X-MainProfileName
X-MainProfileURL
Resin-Trace
Arrnode
CD4
X-Backend-Host
X-ImpID
X-Sites
X-Nginx-Request-Time
X-Not-Cacheable
X-VC-Debug
X-WebNode
X-BPool-Back
X-BPool
X-Built-With
X-Cache-Varnish
X-Country
X-VLoc
Hostname
Httpd-Identifier
MSThemeCompatible
Cache-Status
MSSmartTagsPreventParsing
D
X-Varnish-Instance
X-Varnish-Cached-TTL
X-Server-FQDN
X-UPServer
X-ServerAddr
X-Streams-Distribution
X-Script
X-Node-ID
X-CPU-Time
X-Varnish-Cached
X-ELB
X-MCF-ID
X-Uncacheable
X-Fstrz
DbServerName
FindLaw
X-Status
X-Restarts
X-Built-By
Content-Cache
TheAnswer
Language
X-Sid
X-UUID
X-HS-Status
Rewriter
X-Meta-MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
X-Proxy-Id
X-Instance-Name
X-Meta-MSThemeCompatible
X-Bip
X-ASAP-Age
UrlWatchModule-Time
Webserver
X-AppServer-Cache-Rule
X-Time-Zone
X-Upgrade-Enabled
X-Srcache-Fetch-Status
Brightspot-Id
MageStack-Area
MageStack-Cache
MageStack-Cache-Lifetime
MageStack-Cache-Hits
X-VNode
X-Tag-Playlist
X-Lima-Id
X-HA
X-Site-Name
X-Processed
X-Served
X-SCProxy
MageStack-Cache-Status
MageStack-Cacheable
Str-Ip
Str-Bsite
X-Accel-Cache-Control
X-Amcomm-Site
X-App-Version
X-FG-RequestId
MageStack-Web-Node
MageStack-Tag
MageStack-Config
X-Svr
MageStack-Debug
MageStack-Loadbalancer
MageStack-PageSpeed
MageStack-Magento-Version
X-Deity
X-Debug-Message
X-Header-Treatment
X-RequesterIP
X-PROCESSED-BY
X-FPC
X-Would-Your-GrandPa-Wait
X-TTL-Age
X-Theme
X-Who
X-Beatles-Hits
X-ZSITES-DNS
X-Cache-Set
X-CCM
X-ETag
X-Does-He-Have-Time
X-Your-GrandPa-Would-Wait
AR-ATIME
X-Beatles
X-APP
X-Cache-LB
X-Cname-TryFiles
X-AppVersion
DB-Nickname
X-Author
NCache
AR-PoweredBy
AR-CACHE
AR-SID
Quri
Uuri
INFO
X-Max-Age
Lb
X-FreeTag-Count
Page-Template
X-Srcache-Store-Status
X-IP-Address
X-Fastly-Backend-Reqs
X-Environment-Context
Provided-Host
Referer
X-CH-Device
X-L-Path
X-Magento-Action
X-Serendipity-InterfaceLangSource
X-UseReverse-Proxy
X-Webapp
XDisk
X-Serendipity-InterfaceLang
X-Router-Backend
WebServer
X-Cache-Id
Expiries
Note
X-Pageid
X-Enhanced-By
Y-Trace
X-V
X-Compressed-By
X-JSESSIONID
Fw-Cache-Status
X-DEBUG
X-Ip
X-Varnish-Ip
X-Origin-Cache
X-COUNTRY-CODE
ProxiaInstanceId
X-Beresp-Ttl
LB
X-LB-Backend
SS
Copyright
Section-Io-Cache
Tst
X-BeResp-Ttl
X-Server-App
Www.Aujourdhui.Com
MachineName
Memento-Datetime
X-Memcached
CacheControlMode
X-Server-Ident
X-Transaction-Name
X-IsCached
X-Apache-Server-ID
FastCGI-Cache
X-TempoPesquisa
X-Czt
Yola-ID
X-D2id
X-Vhost-ID
Phoenix-Mark
X-Varnish-Max-Age
Phoenix-Proxy-Cache
Phoenix-Cache-V
Phoenix-Cache
PB-PID
PB-RID
Phoenix-A
Proxy1
Tesla.Performance
X-WebKit-CSP-Report-Only
X-NMT-Proxy
X-Cache-Action
X-Server-Node
X-UT-Cache
X-Amz-Meta-Version-Id
X-DynamicCache
X-Mobile-Rewrite
X-Compress-Hint
VC-NoCache
X-Phpwcms-Release
X-Hit
X-Tt-Dbg
X-Via-NSCOPI
Kp-EeAlive
X-Archive-Orig-Server
X-Node-Name
X-Config-Version
X-WHO
X-Phpwcms-Page-Processed-In
X-Cache-Date
AliCDN-Forbidden-Reason
X-Archive-Orig-Etag
X-Archive-Guessed-Charset
X-Archive-Orig-Date
X-Archive-Orig-Content-Length
X-Archive-Orig-Connection
Generate-Time
Apple-Itunes-App
No-Cache
Progma
X-Farm-Server
X-ServiceProvider
X-Client-Ip
X-Wm-1
X-Obvious-Tid
X-Request-Processing-Time
Powered-By-VeryCDN
X-PoweredBy
X-Obvious-Info
Vserver
Ez
Tk
VAR-Cache
Cookie
X-Custom-Name
X-Server-Instance-Name
X-AWS
X-AISO-Server
X-Serverid
TTL
X-Wm-VIP
X-AISO-Cacheable
X-7d-Instance-Id
X-7d-Trace-Id
X-LB-Frontend
X-AISO-Cache
X-Request-Received
Microcache
X-Cache-Me-Harder
X-Skip-Cache
X-Backend-TTL
SINA-LB
SINA-TS
X-EBAY-C-REQUEST-ID
X-NewCloud-V-Cache
RSL-Trace-ID
AMFplus-Ver
X-Geo-IP
X-Vary-Options
X-Generated-Date
X-Clx-Request
Load-Balancer
Kanooh-Host
X-B3-Spanid
X-B3-Traceid
IsMobile
IES-Server
X-SuperCache
X-DDM-SERVER
X-DDM-SERVER-UPDATED
X-MSU-SOURCE
X-Service-Id
WFE
RlogId
X-Tradeindia-Request-GUID
X-Instance-Id
X-NewsFlow-Sitename
X-RiS-PX
M
X-Tradeindia-SMgmt
X-Faeria
ReqUrl
X-Cache-FS-Status
X-Vid
X-Catalyst
X-PBS-Appsvrip
X-PBS-Appsvrname
Server-Id
X-Instart-Cache-Id
X-9XB-Server
X-Front-Cache
X-Wily-Servlet
X-Wily-Info
X-PBS-Fwsrvname
X-POPSUGAR-Server-Name
X-SRV
X-Obj-Ttl
Cleartype
X-Varnish-Mode
X-Ssl-Cipher
GranicusServer
!~Request-OOB-Work
Ozcache
V-Age
X-BIT-Node
X-ACache
CDN-Cache-Hit
CDN-Node
DeleGate-Ver
Https
X-Backend-Name
X-Checkout
EREV-Ver
HostName
X-Cache-ID
X-HEAD
EQ-Cache
Be
X-ClusterID
X-Pixelsilk-Server
X-Pixelsilk-Version
X-Real-IP
CDN-Cache
FrontEnd
Public-Extension
X-Csrf-Token
ResourceTag
Type
X-Cache-V
Dynatrace
X-Imforza-Hosted
X-Fpc
X-Varnish-Auto-Cache-Miss
X-Sn-Servicetimems
X-Made-On
X-Dynatrace
X-Dynatrace-Js-Agent
WSR-Cache
X-ESI
X-Mobile-Device
X-Mobile-Device-Type
Container
X-Varnish-Debug-TTL
Upgrade-Insecure-Requests
WSCLoggingUUID
X-Nginx-Page-Cache
X-Varnish-Debug-Age
X-UPSTREAM-Address