Threat Level: green Handler on Duty: Tom Webb

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Connection
Set-Cookie
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Accept-Ranges
Link
ETag
X-Content-Type-Options
P3P
X-XSS-Protection
X-Pingback
X-Frame-Options
X-AspNet-Version
X-Cache
Content-Language
Age
CF-RAY
X-UA-Compatible
Strict-Transport-Security
Via
X-Adblock-Key
X-Language
X-Template
X-Check
Access-Control-Allow-Origin
X-Varnish
X-Buckets
X-Generator
X-Cacheable
X-Drupal-Cache
Content-Location
X-Hacker
X-Ac
X-AspNetMvc-Version
X-Request-Id
X-Powered-By-Plesk
MS-Author-Via
X-Type
X-Cache-Group
X-Pass-Why
X-Runtime
WP-Super-Cache
X-Cache-Hits
X-Powered-CMS
Status
Ngpass-Ngall
X-Permitted-Cross-Domain-Policies
Host-Header
X-Download-Options
Access-Control-Allow-Credentials
X-UA-Device
X-ShopId
X-Dc
X-ShardId
X-Alternate-Cache-Key
Keep-Alive
Access-Control-Allow-Headers
X-Iinfo
Content-Security-Policy
X-Via
Access-Control-Allow-Methods
X-Mod-Pagespeed
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Tumblr-Pixel-1
X-Logged-In
X-Pad
X-Backend
X-Served-By
X-Cache-Status
X-Tumblr-Pixel-2
X-Contextid
X-ServedBy
X-PC-Key
X-PC-Hit
X-Server
X-Request-ID
X-Host
Upgrade
Powered-By
X-CDN
Content-Encoding
X-Cache-Hit
X-FRAME-OPTIONS
X-PC-AppVer
X-PC-Date
X-PC-Host
X-Tumblr-Pixel-3
X-Port
X-Robots-Tag
X-Timer
X-Accel-Version
X-Cnection
X-Varnish-Cache
X-Cache-Lookup
SPRequestGuid
X-SharePointHealthScore
MicrosoftSharePointTeamServices
X-Rack-Cache
X-Request-Country
X-Amz-Cf-Id
MicrosoftOfficeWebServer
X-Server-Powered-By
X-MS-InvokeApp
X-Safe-Firewall
X-XRDS-Location
X-Page-Speed
Alt-Svc
X-Turbo-Charged-By
X-Content-Powered-By
CF-Cache-Status
X-AH-Environment
X-W-DC
Rating
X-Seen-By
X-Wix-Renderer-Server
X-Tumblr-Content-Rating
X-Wix-Request-Id
X-Node
X-Content-Digest
X-FullPageCaching
X-Cache-Enabled
X-Tumblr-Pixel-4
X-GitHub-Request-Id
X-Webserver
X-PhApp
Request-Id
Public-Key-Pins
X-INKT-URI
X-INKT-SITE
Content-Security-Policy-Report-Only
SPIisLatency
SPRequestDuration
Composed-By
X-Firenze-Processing-Times
Served-By
Timing-Allow-Origin
Cf-Railgun
X-Amz-Request-Id
X-Amz-Id-2
X-Proxy-Cache
X-HeyJason
Permitted-Cross-Domain-Policies
Liferay-Portal
X-Spip-Cache
X-Hyper-Cache
X-Pantheon-Endpoint
Surrogate-Key-Raw
X-Styx-Version
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
Xkey
Access-Control-Max-Age
Access-Control-Expose-Headers
X-Server-Name
Surrogate-Key
Charset
X-Content-Security-Policy
X-Drupal-Dynamic-Cache
X-Swift-CacheTime
X-Swift-SaveTime
X-CF-Powered-By
X-CDN-Pop
X-CDN-Pop-IP
Grace
Content-Script-Type
X-Tumblr-Pixel-5
EagleId
X-XN-XNHTML
X-XN-Trace-Token
Content-Style-Type
X-SERVER
Access-Control-Allow-Method
X-FW-Hash
X-Hits
X-Dw-Request-Base-Id
Refresh
X-FB-Debug
X-FW-Type
X-FW-Static
X-FW-Serve
Content-MD5
X-VCache
X-Device
Public-Key-Pins-Report-Only
X-Tumblr-Adult-Blog
X-Clacks-Overhead
X-Fastly-Request-ID
X-VWS-Id
X-AWS-Id
X-LJ-Flow-ID
Real-Hostname
X-Loop
X-TNCMS
X-User-Agent
X-Jimdo-Wid
X-Jimdo-Instance
X-Cache-Server
X-Backend-Server
X-Cache-Config
X-Umbraco-Version
X-DDC-Arch-Trace
X-Generated-By
X-Url
X-Cache-Result
Edge-Control
X-LiteSpeed-Cache
X-MiniProfiler-Ids
Fastly-Debug-Digest
Cartoon
X-Cloud-Trace-Context
X-ServerName
X-Age
PageSpeed
X-Cached
X-Px
X-Cached-By
X-HOST
X-Tumblr-Pixel-6
X-Hostname
NS-RTIMER-COMPOSITE
X-Cdn
X-Outils-CS
Surrogate-Control
X-Powered-By-360WZB
WZWS-RAY
X-CMS-Version
X-Whom
Fpc-Cache-Id
X-DynaTrace-JS-Agent
Response
TCN
X-Sol
X-Middleton-Display
X-Middleton-Response
Display
X-Forwarded-For
X-DynaTrace
X-Handled-By
X-WebKit-CSP
Imagetoolbar
ServedBy
X-From
X-Msg-2-Log
X-Content-Options
Rt-Fastcgi-Cache
X-TTL
Product
DynaTrace
X-AspNetWebPages-Version
X-Varnish-Cache-Hits
Front-End-Https
X-Recruiting
X-Country-Code
X-URL
X-EC-Security-Audit
X-Newrelic-App-Data
X-Passed-To
X-Original-Request
X-Returned-From-DLL
X-Passed-To-DLL
X-Returned-From
X-Actual-URL
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
IBM-Web2-Location
X-NetCat-Version
X-BC-Stapler
X-Passed-To-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-FORWARDED-FOR
X-Stale
X-Matrix-Server
X-Matrix-Proxy
X-Micro-Cache
X-Varnish-Host
Fhost
X-Platform
X-App-Hosting
Alternate-Protocol
X-ApacheServer
Access-Control-Request-Method
X-Do-Not-Hack
X-Hosted-By
X-LiteSpeed-Cache-Control
X-Content-Encoded-By
X-Art-Request-Id
X-Track
X-Servedby
Origin
Generator
X-Origin
X-Expires-Orig
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-PERF
Page-Completion-Status
Powered
X-Varnish-TTL
Akamai-IP
X-Magnolia-Registration
X-CacheServer
X-Firenze-Processing-Time
Ag-Send-Time
X-UD-Method
Ag-Server-Time
Ag-Execution-Time
X-Varnish-Backend
X-Version
X-Daa-Tunnel
X-S
X-Server-ID
X-I
X-Cache-Rule
Powered-By-ChinaCache
Server-Info
X-Varnish-Cacheable
X-Location-Id
X-Vtex-Processed-At
X-Vtex-Remote-Cache
Content-Disposition
X-Vtex-Processado-Em:
X-VTEX-Cache-Status-Janus-ApiCache
X-Engine
No
X-Powered-By-VTEX-Janus-ApiCache
X-Powered-By-VTEX-Janus-Edge
X-VTEX-Janus-Router-Backend-App
X-VTEX-Cache-Status-Janus-Edge
Content-Hash
ServerName
X-Gamma-Serve
Host
X-BS
X-I-Sp
USPLoggingUUID
Magicmarker
X-Duration
X-Abuse
X-Cache-TTL
X-Microcachable
Content-Encoding-Handler
X-Goog-Hash
Surrogate-Keys
MIME-Version
X-ATG-Version
X-Source
X-Request-Time
X-Cache-Debug
X-URLSCHEME
Lsrequestid
X-RESOURCE
SN
X-DNS-Prefetch-Control
Edge-Control-Message
X-Cache-Info
Node
X-Director
X-Route-Server
X-OneAgent-JS-Injection
Content-Security-Policy-Rerport-Only
X-NoCache
X-B-Cache
X-Response-Time
X-Varnish-Age
X-Microcache-Status
X-Device-Type
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-Developer
X-Translation
X-CJ-Soft
X-Cache-Age
X-Cache-Expires
X-Cache-Lifetime
X-Instart-Request-ID
X-Upstream
Proxy-Agent
X-SDS
X-Geo-IP
X-Speed-Cache
X-Speed-Cache-Key
X-Storage
Version
X-N
X-Cookie-Domain
X-Cache-Control-Orig
X-Rocket-Nginx-Bypass
Fastcgi-Cache
Location
X-Zen-Fury
X-Fastcgi-Cache
X-DefendeR-Runtime
X-DefendeR-Status
X-Cache-Operation
Cache-Key
X-Grace
X-GeoIP-Country-Code
ServerID
Buuteeq-Source
X-PwB-Node
X-Front
X-FW
Last-Published
X-Varnish-GracePeriod
Req-Id
X-Varnish-ObjectSource
X-Varnish-RemainingLife
X-Time
X-ServerID
Proxy-Connection
X-Akamai-Device-Characteristics
X-Akamai-Device-Model
X-Server-Id
Arr-Disable-Session-Affinity
S
X-GeoIP-Country-Name
X-Geo-IPV
X-SV-CreatedAt
X-Geo-IP-Metro
X-Varnish-Server
Retry-After
X-Revision
X-SV-Duration
X-Drectory-Script
X-Geo-IP-Country
X-Geo-IP-Region
X-SV-Nginx-Duration
X-SV-FromDBCache
X-SV-Pid
X-Hypernode
RTSS
Nitro-Cache
X-Client-IP
X-SV-Expires
X-SV-Edge
X-Cache-Tags
X-Mobilized-By
X-SV-CacheTags
X-Content-Age
PICS-Label
X-Powered-By-Server
Webluker-Edge
Pics-Label
X-UPSTREAM
X-LB
X-Varnish-HitMiss
Cache
X-Varnish-Count
SEOMOZ
CC-CACHE
MJ12bot
X-Processing-Time
X-Ttl
X-Amz-Version-Id
X-Platform-Processor
X-Platform-Router
X-Edge-Location
X-Nginx-Host
X-Server-Upstream
W
X-Varnish-Hits
X-Varnish-IP
Accept-Charset
X-AOL-HN
X-ACMCache
X-Dispatch
X-Vcap-Request-Id
X-Kinsta-Cache
Qs-Cache
Srv
X-Real-Server
X-Xrds-Location
X-Purge-URL
Filter-Revision
X-Correlation-Id
X-StackifyID
X-Page-Cache
Backend
X-Orig-Vary
Accept-Encoding
X-CDN-Cache-Status
X-CDN-Node
X-SE-Debug
SVR
X-Config-Blacklist-Version
X-Mobile-URL
IISExport
COMMERCE-SERVER-SOFTWARE
X-Yottaa-Metrics
X-Trace
NetMindSessionID
X-Yadis-Location
Front
Nodo
X-Yottaa-Optimizations
X-Directory-Script
X-Cache-Key
X-VARNISH-Cache
Cm-Server
Content-Transfer-Encoding
X-NFE
X-Nginx-Cache-Status
HCVer
X-Framework
HAVer
AMF-Ver
Id
X-Nurl
X-Nhost
X-Processed-By
X-Application-Context
Mobiquo-Is-Login
X-Platform-Cache
NODE
X-Dynatrace
X-Cocoon-Version
X-Blog
X-Cache-Engine
X-BKSrc
SSPAppContext
X-Frontend
X-ClientSide-Caching
X-Empowered-By
Myheader
X-Supported-By
X-WEBSERVER
A-Powered-By
X-Purge-Host
X-Debug
X-TempDebug
X-App-Server
X-Server-Response-Time
CacheControlHeader
X-Cache-Doesi
X-Varnish-Hostname
X-Worker
Host-Service
X-Edge-IP
X-Flow-Powered
X-Discourse-Route
Frame-Options
Cached
Eomportal-Instance
Server-Name
X-Machine-Name
X-PG
X-Cache-Control
X-Member
X-Dispatcher
X-Grid-Server
X-GeoIP
IM-Version
X-Amz-Meta-S3cmd-Attrs
X-PF-Uncompressing
X-NB-Cached-Page
X-NginX-Cache
Referrer-Policy
X-IIJ-Cache
X-F-Cache
X-ARC
X-Vary-Options
Author
X-Prefetched
X-Env
X-SmugMug-Hiring
X-SmugMug-Values
X-TTFB-L
X-TTFB
Smug-CDN
X-Browser
X-Client-Vid
X-EPiphany-Vid
X-Client-Image-Vid
X-V
X-Resolver-IP
X-Config-By
WWW-Authenticate
X-Session-Reinit
X-AbeBooks-Version
X-NginX-Upstream-Addr
X-NginX-Upstream-Status
X-NginX-Upstream-Response-Time
X-Sys-Req-ID
X-NginX-Node
X-CDN-Forward
Pool-Info
X-SmartBan-Host
X-Highwire-SessionId
Section-Io-Id
X-Sucuri-ID
X-Amz-Storage-Class
X-Connection-Hash
X-Transaction
X-SmartBan-URL
SRV
X-Twitter-Response-Tags
X-Highwire-RequestId
X-Plat
Rewriter
Cneonction
X-PRAM
X-EDGECONNECT-GUID-DEBUG
X-Cf-Powered-By
X-Plat-Va-Ip
X-Force
X-NginX-Server
X-Plat-Be-Ip
X-Source-ID
X-Varnish-Debug-Age
X-Nitra-Side
X-Origin-Id
Allow
Logging-CorrelationId
X-Dns-Prefetch-Control
Thanks
X-Server-Start-Time
Bios
Beyond-Iis
X-WA-Info
X-Optimization
X-Varnish-Debug-TTL
X-Garden-Version
X-Atraveo-Cache-Control
X-Adobe-Content
X-Adobe-Loc
X-HP-Trace-ID
X-AOL-SNH
X-XTM-Node
WSR-Cache
X-Atraveo-ETag
NLCacheNote
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
X-Atraveo-Expires
X-Atraveo-From-Varnish-Cache
X-HP-Trace-Project
X-LW-Web-Server
Backend-Timing
X-Analytics
Ibf5scheme
X-ORACLE-DMS-ECID
X-Atraveo-Zone
X-Varnish-Ttl
Cmstype
X-IsCacheURL
X-Trace-Id
XDomainRequestAllowed
X-ID
X-Hiawatha-Cache
X-NginX-Cache-Status
Cmsid
Ngpass-Vcall
X-App-Status
X-Pagename
X-Domain-Checked
X-Id
P-LB
P-WS
VAR-Cache
BALANCEDTO
X-WR-Flags
X-Provisioner-Version
X-Balanceador
X-BackendServer
A
X-Hit-Cache
Dynatrace
X-Real-IP
X-Nginx-Cache
Head
X-Jphone-Copyright
CLMOB
X-NewRelic-App-Data
CT
X-LB-Server
Cpu
X-Backend-Name
X-HTML-Minification-Powered-By
X-Symfony-Cache
Noq
Mime-Version
X-Airee-Node
X-Runtime-Affili
X-Vhost
X-Signature
X-Unique-Id
X-SRV
X-Turpentine-Esi
X-Distributed-By
Ram
MW-Webserver
X-T3CacheInfo
X-GUploader-UploadID
X-RiS-UFDI
X-Goog-Stored-Content-Length
X-Turpentine-Cache
X-Varnish-Currency
X-MrHost
NnCoection
S-Cnection
X-Goog-Metageneration
X-Goog-Generation
X-DOM
X-DTC
Keywords
X-Goog-Storage-Class
X-Server-By
X-T3Cache
X-Key
X-Avvio-Cms-Cacheload
X-Varnish-Esi-Access
OT-RequestId
X-Goog-Stored-Content-Encoding
X-Esi
ORIGIN
X-Cache-PageType
X-Cache-Fix
X-T3CacheTags
X-JG-Page-Cache
X-Unique-ID
X-Varnish-Store
X-Varnish-Set-Cookie
X-Webstats-RespID
X-Varnish-Esi-Method
Set-Cookie2
Cache-Rule
Sid
X-Hosts-Backend
ServerTokens
Servername
X-Nginx
X-Cache-Set
X-Magento-Tags
X-HW
X-Varnish-Grace
X-Dev
X-We-Are-Hiring
X-DealerOn
X-Ser
ServerSignature
CmsCacheEngine
X-Srv
X-ServerIndex
X-SV
X-Cluster-Node
Worker
SBGI-10
MageStack-Cacheable
MageStack-Config
MageStack-Cache-Status
MageStack-Cache-Lifetime
MageStack-Cache-Hits
X-Cms-Mode
MC
X-HOSTNAME
MageStack-PageSpeed
MageStack-Tag
MageStack-Debug
X-Server-IP
MageStack-Cache
SBGI-RealPath
SBGI-Device
SBGI-9
SBGI-7
SBGI-5
MageStack-Loadbalancer
MageStack-Area
MageStack-Web-Node
SBGI-1
SBGI-RenderTime
X-Platform-Server
X-Environment
X-EdgeConnect-Origin-MEX-Latency
AsisCache
X-EdgeConnect-MidMile-RTT
X-Phpwcms-Release
X-B
X-ASAP-Cache
Web
X-Clara-ASAP
X-Middleton-PageSpeed
DrivedBy
X-Webcelerate
X-HostName
X-Phpwcms-Page-Processed-In
X-AISO-Server
X-RequestId
X-Cache-Level
X-CB-Server
Ctx
X-Appmachine-Environment
X-Generated
D
X-Pressidium-NinukisWP-Ver
Actual-Object-TTL
X-Smartcache-Timeout
X-WP
X-Captured
X-FIRSTBase
X-Restarts
Imx-Cookies-Used
Real-Server
X-Ob-Mode
X-Litespeed-Cache-Control
X-Detected-Device
X-Smartcache-Keys
X-SDE-Name
X-REDIRECTSERVER
From
X-Distributor
X-SSL-Cipher
X-SSL-Protocol
X-Header
X-Upstream-Backend
X-Varnish-RemainingGrace
HitInfo
X-Rack-Cors
Fastly-Backend-Name
X-Fstrz
X-Info
Device-Type
N365rili
Ec
Fw-Via
X-GSL-Server
X-7d-Instance-Id
X-Cache-Var-Map
X-Cache-Var
Resin-Trace
Sophnep-Edge-FX
X-Lifetime
Access-Control-Request-Headers
X-Custom-Header
X-Accel-Expires
B-Powered-By
Proxy-Cache
X-DSMX-Rewrite-MS
X-DSMX-Render-MS
X-Frames-Options
X-Apm-Telemetry-Syncmark
Content-Server
X-Cache-Source
X-Varnish-URL
X-Enhanced-By
X-Cache-Provider
X-B2f-Not-Route
X-Secret
Pool
X-FastCGI-Cache
X-Site:
Ksid
X-Desc
X-Invoke-Duration
X-MAT-GEO
X-Rebelmouse-Cache-Control
X-Actindo-RS
X-Remote-Addr
X-Hcom-Styx-Info
X-Stage
X-RDP
X-Rot
X-7d-Trace-Id
ScoreTracker
Warning
X-Sov
X-Cache-On
INCOMING-TIME
Description
Cluster-ID
X-Max-Age
Paypal-Debug-Id
Backend-Node
NZSpeedy
If-Modified-Since
X-Response
VnhCdn-Status
X-Cache-Node
RequestId
Www.Aujourdhui.Com
X-Unbounce-Variant
X-Unbounce-VisitorID
X-ACCELERATE
X-Unbounce-PageId
X-Server-Instance
X-Rebelmouse-Surrogate-Control
WFE
Prxy
X-Rewritten-By
Provider
X-RealServer
X-Nbs
X-APP
X-ManagedFusion-Rewriter-Version
X-VC-TTL
WP-AdvCache-MemCached
X-Rack-CORS
CommunityServer
X-SeschatTemplateID
X-SeschatRedID
Server-Ip
M
Xc
Serverid
X-4ormat-Cacheable
Content-Generator
X-SeschatLayout
X-SeschatDID
X-Seschat-URL
X-Artvisual-Server
X-Magento-Action
X-W3TC-Minify
X-Hstore
X-Hrouter
Cdate
Ttl
X-Depends
X-Tile-Url
X-ORACLE-DMS-RID
Host-Name
Language
Nginx-Cache
X-Varnish-Action
X-DN-GyrobaseID
Il-Cl
X-Mobile
X-DN-Cache-Control
Copyright
X-Vhost-ID
X-Amz-Id-1
X-Uid
Atp-Isdpp
X-RateLimit-Remaining
X-Hash
X-Device-Group
X-OPNET-Transaction-Trace
X-Mii-Cache-Hit
X-Flex-Community
X-Flex-Evend
X-Flex-Lastmod
X-Flex-Lang
X-Flex-Evstart
X-Pb-Mii
AC-ELC
Accept-Language
X-OCTOPOD
X-Flex-Tags
X-Render-Time
PowerCDN
X-ATP-Server
X-PM-ID
X-Search-Id
X-Time-Microsecs
X-Flex-Tag
X-Runtime-Memory
X-Bypass-Ssl-Transform
X-DataDome
GenSvr
Max-Age
X-Varnish-Error-Restart
X-Hit
Fastly-Restarts
X-EZPublish-NodeID
X-EZPublish-InstallationID
X-Xhr-Current-Location
Cteonnt-Length
Expiries
X-HITS
X-Server-Addr
X-Src-Webcache
X-ASAP-Age
T
X-Oracle-DMS-ECID
X-Varnish-Backend-Healthy
X-Proto
X-SID
SS
X-Varnish-Instance
X-AISO-Cache
X-Pagely-Cache
X-Span
MageStack-Cache-Warning
X-FCMS-Cache
X-Author
X-Bcwwwid
X-Dw-Trace-Id
X-AISO-Cacheable
User-Agent
BKREF
X-PBY
X-CSRF-TOKEN
X-Ocache
X-Is-Mobile
X-Healthy
VServer
X-Hosting
X-COUNTRY-CODE
PServer
NS-VaryByCustom-Key
User-Cache-Control
X-DEBUG
X-TB-M
IsMobile
Server-Id
X-AccessDev
Mto-License-Status
X-Content-Security-Policy-Report-Only
X-GRACE
WSCLoggingUUID
X-Hosting-Env
X-Clx-Request
X-Forwarded-Proto
X-EPiLogOnScreen-PostUrl
X-Wikidot-Static-Cache
X-Cache-Action
X-Box
X-Cache-Extended
X-Domino-CacheValidationWithETagReason
X-Company
X-Cluster-Host
X-Application
X-A
Expire
E-TAG
TP-Cache
TP-L2-Cache
VC-NoCache
SiteName
X-E
Content
X-WR-MODIFICATION
Debug-Status
QC-Hit
QC-Key
X-Wm-VIP
X-Wm-1
X-Timing
X-ProxyInstancename
X-WHOIS-Cached
X-Wikidot-Backend
X-EPiLogOnScreen
QC-Time
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Catalyst
X-Built-By
X-UUID
X-VARITI-CCR
X-BServer
X-BPool
EXT-CACHEEXPIRE
X-Venda-Hitid
Machine
Hosted-By
MwpReleaseVersion
X-AG-MIPS
X-RSS-CACHE-STATUS
X-Cacheable-TTL
X-Distil-CS
X-ACLR-Version
SLB
X-IP-Address
X-Varnish-Cache-Local
X-Domino-CacheValidationWithETagResult
X-Varnish-Max-Age
X-Title
X-Nocache
X-Layout
X-Region
X-Rq
X-This-Proto
AGI-Request-ID
X-UA
X-Ratelimit-Remaining
X-OpenCart-Lightning
At-Isb
At-Shoptype
Brandcast-Load-Balancer
Brandcast-Brand-Id
X-Node-Name
X-LW-T
Kanooh-Host
X-WorkerInstancename
Progma
X-HAProxy
X-Amz-Meta-Cb-Modifiedtime
Cache-Status
Og
X-Instance-Name
X-Cache-Backend
X-Meta-Imagetoolbar
X-Meta-MSSmartTagsPreventParsing
X-Meta-MSThemeCompatible
MSThemeCompatible
MSSmartTagsPreventParsing
Url-Hash
Powerd-By
X-Farm-Server
Content-ID
Httpd-Identifier
X-MSU-SOURCE
X-CDN-COMPRESS
X-App-Runtime
X-Gannett-Site-Version
RN-Server
X-FreeTag-Count
Version-Epoch
X-Gyrobase-Publication
Hamster
X-FFX-B
SAVVIS
CIPHER-NAME
X-Litespeed-Tag
X-RequesterIP
X-Ar-Debug
WebServer
APP-VERSION
X-SilverStripe-Cache
X-PoolMember
X-Serendipity-InterfaceLang
X-Serendipity-InterfaceLangSource
Note
Http
X-T
X-Beatles-Hits
X-CCM
NtCoent-Length
OutputRewritten
ServerIP
Edgecast
Aurora-Node
X-Cms-Server
X-Does-He-Have-Time
X-Your-GrandPa-Would-Wait
Apache
X-ESI-Enable
X-Would-Your-GrandPa-Wait
X-TTL-Age
X-Route
X-VhostID
Be
RouteID
Cache-Control:
X-Ghost-Cache-Status
X-Webapp
XDisk
X-UseReverse-Proxy
X-Status
X-Router
X-Router-Backend
X-NewsFlow-DoCache
X-N-ViewType
X-Cache-2
X-Contact
X-Faeria
X-Fedora-School-Id
X-CacheResult
X-Cache-TTL-Remaining
X-Cache-Device-Type
X-Cache-Keep
X-Firewall
X-NewsFlow-Sitename
X-ETag
X-Obr-Rule
X-HP-CAM-COLOR
Vacache
X-AWS
X-Security
Session-Id
Apachenode
X-Jcms-Ajax-Id
X-App
X-Old-Content-Length
X-RAMCache
X-PoweredBy
X-Nginx-Request-Time
X-Not-Cacheable
X-Mod-Oboe-PS
X-Pj-Cache-Status
X-Cache-Me-Harder
X-Tradeindia-Request-GUID
Rt-Proxy-Cache
X-SuperCache
X-Provided-By
X-Session-ID
Web-Server
X-Pass-Through
X-PF-CACHE-FAILED
X-TempoPesquisa
X-C
X-Tags
X-Site-Name
X-AEM
X-Magento-Cache-Control
TMP
Exires
Beon-Cache-Status
HA-Front
LB
Public-Extension
Orgin-Server
Aoestatic
X-VC-Enabled
X-NewCloud-V-Cache
X-Dynamic-Cache
X-Pixelsilk-Server
X-Pixelsilk-Version
X-Time-Spent
Redirect
ResourceTag
X-Magento-Lifetime
X-Logword
X-Pageid
X-Static
X-Server-Node
X-DDM-SERVER-UPDATED
X-DDM-SERVER
X-Debug-Serve
RSL-Trace-ID
X-Tradeindia-SMgmt
Web-Head
X-Cache-Via
X-Magento-Cache-Debug
HA-Host
X-RemovedCookies
X-Cache-Ttl
X-ProcessESI
X-LS-DEBUG
X-HASH
HA-Cloudapp
HA-Geocity
X-Beresp-Ttl
HA-Geolon
X-CACHE-TTL
HA-Geolat
HA-Geocountry
X-Geo
X-DeliveryServer
X-9XB-Server
X-POPSUGAR-Server-Name
X-WebNode
X-PS-MURDOCK-ORIG-PROTOCOL
X-PS-MURDOCK-CASE-NORMALIZATION
X-AREQUESTID
X-Obj-Ttl
X-CDN-Any-IP
X-Client-Ip
X-AUSERNAME
X-ASEN
X-LOCATION
Server-ID
HA-Georegion
X-Powered-By-Home.Pl
X-VCS-Hit
X-MCF-ID
X-Capoed
X-VCS-Host
X-VCS-Cacheable
X-Page
Debug-Expires
X-VCS-Billing
Debug-Cache-Control
X-Qnm-Cache
X-VCS-Cache-Server
X-VCS-Nrhit
X-VCS-Status
X-Zendesk-User-Id
X-Zendesk-Origin-Server
X-PS-MURDOCK-ORIG-FILEEXT
XX
ReqUrl
X-VCS-Url
HA-Ipaddr
NKBVHEADER
HA-Urlpath
X-VCS-Ttl
HA-Servedtime
Foglight-Request-UUID
X-AppServer-Cache-Rule
X-FarmId
X-FG-RequestId
X-Compressed-By
X-Memcached
X-Mobile-Device
X-Batcache
X-Accel-Cache-Control
WP-Cache
SERVER-IP
X-Test
Dispatcher
V-Cache
X-Powered-Developer
X-TargSmaku
X-Location
X-Nginx-Page-Cache
X-JSESSIONID
X-NGINX-Cache
X-CO-Host
LBC
LBVIS
Fpc-Expire
Served-From
Pw-Value
X-BeResp-Ttl
DB-Nickname
Ews
X-Nginx-VM-RT
X-Original-IP
X-Matched-Rule
X-Highwire-Sitecode
X-Feed
X-DynamicCache
X-Cache-Served
X-Protected-By
X-MCB-Server
X-BC
X-Theme
X-SATserver
X-Expose-Took
X-Expose-Site
Thinkindot-CacheControl-Type
X-Web-Node
Thinkindot-CacheControl
REFRESH
HOST-SERVICE
Thinkindot-Control
X-Apache2-RT-MicroSec
X-Expose-Hostname
X-Expose-Generated
X-ESI
X-Cache-Handler
Origin-Server
P
X-HA
X-DB-Content-Length
X-Original-Host
X-Pj-Cache-Expires
X-Pj-Cache-Flags
X-Content-Type
X-Checkout
MageStack-Cacheable-Reason
X-Request-Received
MageStack-Response-Ttl
WWW
X-Cache-Ua
X-Pj-Cache-Gzip
X-Pj-Cache-Key
Content-Instance
Cleartype
Lookup-Cache-Hit
X-Backend-TTL
X-Cache-ID
X-Varnish-Cache-Control
X-Transaction-Id
X-Pj-Cache-Time
X-Powered-By-Anquanbao
X-ProcessTime
X-Reason-Bp
X-Request-Processing-Time
X-Pubstack
X-Server-Instance-Name
X-Server-Generated
ClientIP
F5-IpCliente
Gzip
X-Proxy-Cache-Key
X-AppServer-Status
"
From-Origin
X-Do-Esi
X-MOBILE
X-IP
X-Requested-Page
Svr
Disablevcache
DeleGate-Ver
HostName
VANITY-HOST
X-Content-Parsed-By
X-Cache-Why
CD1
X-Goog-Meta-Policy
X-Goog-Meta-Replace
X-SL-Norewrite
X-SL-Notranslate
X-DEBUG-TTL