Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
X-Cache
Strict-Transport-Security
X-AspNet-Version
CF-RAY
P3P
X-Pingback
Age
Content-Language
X-UA-Compatible
Via
Access-Control-Allow-Origin
X-Adblock-Key
Upgrade
X-Varnish
X-Cacheable
P3p
X-Check
X-Template
X-Language
Content-Security-Policy
X-Generator
X-Buckets
X-Drupal-Cache
X-Xss-Protection
X-Type
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Request-Id
X-Powered-By-Plesk
Content-Location
X-Cache-Hits
X-Runtime
X-Permitted-Cross-Domain-Policies
MS-Author-Via
X-Download-Options
Host-Header
Alt-Svc
X-ShopId
X-Request-ID
X-ShardId
X-Dc
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-Section
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId
X-IPLB-Instance
X-Alternate-Cache-Key
X-Powered-CMS
Cartoon
Status
X-Served-By
X-UA-Device
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Via
X-Amz-Cf-Id
X-Iinfo
X-Cache-Status
X-Wix-Server-Artifact-Id
X-Backend
X-Contextid
X-Timer
X-ServedBy
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-PC-Key
X-PC-Hit
X-DIS-Request-ID
Powered-By
CF-Cache-Status
X-PC-Date
X-PC-AppVer
X-PC-Host
X-Mod-Pagespeed
X-Logged-In
X-Server
Content-Encoding
Keep-Alive
Expect-CT
X-Rid
X-Host
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Cache-Hit
X-CDN
X-Port
X-Tumblr-Pixel-1
X-CST
Referrer-Policy
X-Server-Powered-By
X-Robots-Tag
X-Pad
X-Tumblr-Pixel-2
X-Cache-Enabled
WP-Super-Cache
X-Nginx-Cache-Status
X-Endurance-Cache-Level
X-Accel-Version
Fastly-Debug-Digest
X-Page-Speed
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
X-Turbo-Charged-By
X-Wix-PunisherID
X-Content-Powered-By
X-Drupal-Dynamic-Cache
X-Tumblr-Pixel-3
X-Content-Digest
X-Rack-Cache
X-Varnish-Cache
X-AH-Environment
X-Forwarded-For
Content-Security-Policy-Report-Only
X-Forwarded-Proto
SPRequestGuid
X-SharePointHealthScore
Surrogate-Key-Raw
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Proxy-Cache
X-MS-InvokeApp
MicrosoftSharePointTeamServices
X-GitHub-Request-Id
X-Cnection
X-Request-Country
X-XRDS-Location
X-Cache-Lookup
X-LiteSpeed-Cache
X-Original-Date
Edge-Control
X-Safe-Firewall
X-FullPageCaching
Cf-Railgun
Timing-Allow-Origin
MicrosoftOfficeWebServer
Request-Id
X-Amz-Request-Id
X-Amz-Id-2
X-Webserver
X-FW-Hash
Charset
X-PhApp
X-FW-Static
X-FW-Serve
X-FW-Type
X-Died
X-Node
SPIisLatency
SPRequestDuration
X-INKT-SITE
X-INKT-URI
X-Content-Security-Policy
Edge-Cache-Tag
X-Hits
Composed-By
X-HS-Cache-Config
Access-Control-Max-Age
X-HS-Content-Id
X-Tumblr-Pixel-4
X-CF-Powered-By
Liferay-Portal
X-Swift-SaveTime
X-Swift-CacheTime
Served-By
Grace
EagleId
Access-Control-Expose-Headers
X-Hyper-Cache
Content-MD5
X-Spip-Cache
X-CDN-Pop
X-CDN-Pop-IP
X-BC-Stapler
X-VWS-Id
X-AWS-Id
X-LJ-Flow-ID
Request-Context
X-Device
X-Backend-Server
X-Firenze-Processing-Times
X-Server-Name
Rating
X-Newrelic-App-Data
X-Microcachable
X-Dw-Request-Base-Id
X-Fastly-Request-ID
X-Microcache
X-VCache
X-Tumblr-Content-Rating
X-RateLimit-Remaining
X-RateLimit-Limit
X-FB-Debug
X-RateLimit-Reset
Content-Style-Type
Refresh
X-Clacks-Overhead
X-User-Agent
X-Jimdo-Wid
X-Jimdo-Instance
X-ServerName
Content-Script-Type
Public-Key-Pins
X-Cloud-Trace-Context
X-TNCMS
X-Loop
Real-Hostname
X-Cache-Config
Surrogate-Control
Xkey
X-XN-XNHTML
X-Acc-Exp
X-XN-Trace-Token
Front-End-Https
X-DDC-Arch-Trace
X-SERVER
X-Age
X-Hostname
Fpc-Cache-Id
X-Aspnetmvc-Version
X-N-OperationId
X-Generated-By
X-Tumblr-Pixel-5
X-Cached
PageSpeed
X-LiteSpeed-Cache-Control
X-Px
X-DNS-Prefetch-Control
X-MiniProfiler-Ids
Response
X-Middleton-Response
Display
X-Sol
X-Middleton-Display
X-SS-Location
X-SS-Conf
X-WebKit-CSP
X-Topify-Platform
X-Cached-By
X-FORWARDED-FOR
Surrogate-Key
X-Url
X-Outils-CS
X-Zen-Fury
X-URL
X-CMS-Version
TCN
X-Request-Time
X-StackifyID
X-Content-Options
Rt-Fastcgi-Cache
X-Pantheon-Site
X-Pantheon-Environment
X-Pantheon-Phpreq
X-Varnish-TTL
X-Whom
X-Umbraco-Version
X-OneAgent-JS-Injection
X-Cdn
X-HOST
X-ApacheServer
X-PERF
X-Handled-By
X-Amz-Version-Id
X-Varnish-Cache-Hits
X-Ruxit-JS-Agent
Imagetoolbar
Product
X-AspNetWebPages-Version
X-DynaTrace
X-DynaTrace-JS-Agent
Access-Control-Request-Method
Edge-Control-Message
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Host
X-Engine
X-Correlation-Id
Alternate-Protocol
ServedBy
Powered
X-Kinsta-Cache
DynaTrace
Dmn
X-Micro-Cache
X-NWS-LOG-UUID
X-Cache-Rule
Generator
X-Magento-Tags
X-Hosted-By
X-From
X-Msg-2-Log
WZWS-RAY
X-Powered-By-360WZB
Fhost
X-CacheServer
X-Servedby
P-LB
P-WS
X-Track
X-Location-Id
X-LBLID
X-Edge-Location
X-B-Cache
X-Vtex-Processado-Em
X-Vtex-Processed-At
X-Vtex-Remote-Cache
No
X-VTEX-Janus-Router-Backend-App
X-Recruiting
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Cache-Status-Janus-ApiCache
Arr-Disable-Session-Affinity
X-Actual-URL
X-RESOURCE
X-URLSCHEME
X-Tumblr-Pixel-6
Fastcgi-Cache
X-Goog-Hash
X-Returned-From
X-Passed-To
X-Original-Request
X-Passed-To-DLL
X-Returned-From-DLL
X-Powered-By-VTEX-Janus-Edge
X-VARNISH-Cache
X-I-Sp
X-BS
X-Passed-To-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
X-Returned-From-PostProcessResponse
X-Varnish-Beresp-Status
X-Fastcgi-Cache
Origin
X-Varnish-Host
X-Stale
X-Developer
X-Cache-Age
X-App-Hosting
X-Instart-Request-ID
X-Cache-Info
X-Response-Time
X-LB
X-Akamai-Transformed
X-Accel-Expires
X-TransIP-Balancer
X-Shop-Id
X-Defender
X-UD-Method
X-Matrix-Server
X-Matrix-Proxy
X-Internal-ReqID
X-Varnish-Count
X-Varnish-HitMiss
X-Cache-TTL
X-Application-Context
X-Source
X-Art-Request-Id
USPLoggingUUID
Akamai-IP
X-Upstream
X-Platform-Processor
X-Platform-Cluster
X-Varnish-GracePeriod
X-Platform-Router
X-Varnish-RemainingLife
X-Varnish-RemainingTTL
X-Varnish-ObjectSource
X-Varnish-Seen-By
X-NetCat-Version
X-Expires-Orig
X-Version
X-Gamma-Serve
X-TransIP-Backend
Ohc-File-Size
X-HS-Content-Campaign-Id
X-I
Powered-By-ChinaCache
X-Rocket-Nginx-Bypass
Pool
X-Storage
X-Device-Type
Content-Disposition
X-Cache-Tags
X-Powered-By-VelaWeb
Content-Hash
Version
X-Varnish-Cacheable
IBM-Web2-Location
X-ATG-Version
X-S
X-Content-Encoded-By
X-Signature
X-Origin
Public-Key-Pins-Report-Only
X-Route-Server
X-Cache-Debug
X-Platform
X-Front
X-Cache-Operation
X-Supported-By
X-VTEX-Cache-Status-Janus-Edge
X-Revision
X-Cache-Key
X-UPSTREAM
HTTPS
MIME-Version
X-NoCache
X-Server-Upstream
Last-Published
Srv
X-Daa-Tunnel
Node
X-Dispatcher
X-Translation
X-Debug-Info
X-Microcache-Status
X-Server-ID
X-EdgeConnect-Origin-MEX-Latency
ServerName
X-SSL-Protocol
X-SSL-Cipher
X-SV-FromDBCache
X-SV-Edge
X-SV-CreatedAt
X-SV-Expires
X-SV-Duration
X-Varnish-Age
X-SV-CacheTags
X-NewRelic-App-Data
X-SV-Pid
X-SV-Cacheable
X-SV-Nginx-Duration
X-Hypernode
X-Firenze-Processing-Time
SSPAppContext
X-Cache-Control-Orig
X-Cache-Lifetime
X-Varnish-Backend
X-Vcap-Request-Id
X-AOL-HN
X-Flow-Powered
X-Platform-Server
X-EdgeConnect-MidMile-RTT
X-Page-Cache
X-Sapient
X-Platform-Cache
X-Dispatch
X-Abuse
X-CJ-Soft
SN
X-PwB-Node
X-F-Cache
X-Dns-Prefetch-Control
X-Duration
X-Server-Id
X-LB-Node
X-Abgroup
X-Country-Code
Page-Completion-Status
X-Last-Modified
FAI-W-FLOW
Cache-Key
Edge-Content-Tag
X-Director
Lsrequestid
Cache-Tag
X-Cache-Only-Varnish
X-TTL
X-SDS
Proxy-Connection
X-Geo-Country
Cneonction
X-Magento-Cache-Debug
ServerID
X-Cookie-Domain
X-Grace
X-Edge-IP
Req-Id
X-Url-Base
WSR-Cache
X-LW-Cache
X-Debug
Accept-Encoding
X-Client-IP
IM-Version
X-ORACLE-DMS-ECID
X-Ttl
Allow
X-GeoIP-Country-Code
X-BackendServer
X-ServerID
PICS-Label
NnCoection
X-Cache-CFC
X-Speed-Cache
Pv
X-Speed-Cache-Key
X-Cache-Expires
X-Akamai-Device-Characteristics
X-Akamai-Device-Model
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
Cteonnt-Length
X-GeoIP-Country-Name
X-Cache-Server
Author
X-Amz-Meta-S3cmd-Attrs
X-ARC
Location
If-Modified-Since
X-Yadis-Location
S-Cnection
X-Content-Age
X-Nbs
Backend
Cache-Provider
Section-Io-Id
X-SERVER-NAME
X-Frontend
X-FW
X-Purge-URL
X-Nginx-Cache
X-RequestId
SEOMOZ
X-Discourse-Route
Content-Encoding-Handler
MJ12bot
X-Loopia-Node
X-IsCacheURL
X-Middleware-Start
Accept-Charset
X-Processing-Time
X-NB-Cached-Page
A-Powered-By
Cached
X-Time
Fw-Via
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-Worker
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Storage-Class
X-GUploader-UploadID
X-Proxy
X-SE-Debug
X-Cache-Level
X-BKSrc
X-Pressidium-NinukisWP-Ver
X-Id
X-N
X-Varnish-Url
X-Cache-Engine
X-Cache-Handler
X-ID
X-Sucuri-ID
X-PF-Uncompressing
AMF-Ver
X-Purge-Host
X-Hiawatha-Cache
Use-Proxy
X-Browser
X-Real-Server
S
Access-Control-Allow-Header
X-Processed-By
X-Varnish-IP
Server-Info
X-Sucuri-Cache
X-Lambda-Id
Content-Transfer-Encoding
Nodo
RTSS
Nitro-Cache
X-Trace
X-DealerOn
Cache
Frame-Options
X-Config-Blacklist-Version
Identity
HAVer
X-Generated
CacheControlHeader
Xc-Version
Qs-Cache
X-Vhost
X-Shield-Request-Id
HCVer
X-Empowered-By
X-Content-Type-Option
X-SRCache-Key
X-Cache-Type
X-Framework
X-Cache-Control
X-Healthy
X-Cf-Powered-By
X-Always-Cache
X-Cache-Fix
X-Cache-TTL-Remaining
X-WR-Flags
X-SO
X-Cache-PageType
X-CDN-Forward
Tracecode
Local-Info
SRV
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Mobilized-By
X-Powered-By-Server
Retry-After
X-Directory-Script
Buuteeq-Source
Disablevcache
X-Varnish-Server
X-EPiphany-Vid
HitType
X-Varnish-Hits
EagleEye-TraceId
X-Amz-Storage-Class
MC
X-Client-Image-Vid
BALANCEDTO
X-Client-Vid
X-ClientSide-Caching
X-App-Server
X-VC-TTL
X-Remote-Addr
Cm-Server
SVR
Eomportal-Instance
Thanks
Front
X-Symfony-Cache
X-Adobe-Content
NetMindSessionID
X-TB-M
X-Adobe-Loc
X-Pagename
X-Hit-Cache
X-Transaction
X-Twitter-Response-Tags
X-JG-Page-Cache
X-AF-Userserver
X-HP-Trace-ID
X-Connection-Hash
X-Magento-Cache-Control
X-Environment
WWW-Authenticate
X-Drupal-Cache-Tags
X-HP-Trace-Project
X-CB-Server
Magicmarker
RATING
X-Varnish-Ttl
X-CDN-Cache-Status
X-Orig-Vary
X-CDN-Node
X-Generated-Time
X-Magnolia-Registration
X-Content-Security-Policy-Report-Only
X-DataDome
X-LB-Server
From-Origin
X-Location
X-Varnish-Hostname
X-Site-Name
X-Srv
X-Fedora-School-Id
X-Sys-Req-ID
X-Resty-Request-Id
X-Varnish-ID
Keywords
X-LW-Web-Server
X-Unique-ID
Ufe-Result
X-ORACLE-DMS-RID
X-Server-IP
X-Cache-Device-Type
Machine
X-Traffic
X-Route-To
X-ACMCache
X-VARITI-CCR
NODE
X-OPNET-Transaction-Trace
SBGI-Device
SBGI-9
SBGI-RealPath
X-SmugMug-Values
X-TTFB
X-Cache-Dispatcherpragma
X-SmugMug-Hiring
SBGI-7
X-CAPServer
X-Runtime-Memory
SBGI-1
SBGI-10
SBGI-5
Smug-CDN
Max-Age
SBGI-RenderTime
X-High-Performance
X-Cache-Dispatchercachecontrol
X-Webcelerate
X-Varnish-Retries
X-NginX-Server
X-CF-Passed-Proto
X-Session-Reinit
X-TTFB-L
X-Drectory-Script
X-Source-ID
Content_type
Fastly-Backend-Name
X-Cocoon-Version
X-Render-Time
Server-Name
X-LP
X-FORWARDED-PROTO
Description
Pics-Label
X-FireWall-Port
Bios
X-Cache-Doesi
X-VC-Enabled
NLCacheNote
X-NginX-Cache
X-Key
W
X-Resolver-IP
ServerTokens
X-Captured
X-Env
X-Frame-Option
ServerSignature
X-HW
IISExport
X-Static
WN
X-HydroSheep
X-WN-ClientGroup
X-Nginx-Host
Strikingly-Cached
Strikingly-Cached-Version
X-Disney-Akamai-Rule
X-Runtime-Rack
NtCoent-Length
CLMOB
X-Dynatrace-Js-Agent
X-Amz-Meta-Cb-Modifiedtime
X-Mobile-URL
Provider
Strikingly-Cache-Region
X-Cache-Detail
RN-Server
X-Smartcache-Keys
X-WHOIS-Cached
Ctx
X-Smartcache-Timeout
AC-ELC
X-GeoIP
X-Proto
X-WP
X-Page
X-Cache-Source
X-Cache-Provider
X-RealServer
X-Debug-Token
X-Unbounce-Variant
MW-Webserver
X-OpenCart-Lightning
X-Served-Server
X-Server-Instance
X-Unbounce-PageId
X-Backend-Status
Home
X-Unbounce-VisitorID
X-IIJ-Cache
AsisCache
Response-Time
X-RiS-UFDI
VANITY-HOST
Id
X-Garden-Version
X-Proxy-Cache-Key
X-Esi
X-Dw-Trace-Id
X-ServerIndex
ScoreTracker
X-Cache-Node
X-AEM
X-Jphone-Copyright
From
X-ARRServer
X-Artvisual-Server
Yoncu-Errno
X-Session-ID
X-App
Web-App-Origin-Name
X-WR-MODIFICATION
X-Balanceador
X-UA
X-Author
X-HP-Redirect
X-A
X-Actindo-RS
X-Cached-Status
X-Application
NCache
X-RemovedCookies
X-Middleton-PageSpeed
X-Grid-Server
X-Distil-CS
X-MAT-GEO
X-Info
X-Rebelmouse-Surrogate-Control
SG
X-ASAP-Cache
X-Clara-ASAP
Hname
X-Cache-Keep
X-Blog
Og
X-ETag
X-Wikidot-Static-Cache
X-Wikidot-Backend
Paypal-Debug-Id
X-Machine-Name
X-Desc
X-Rebelmouse-Cache-Control
X-ProcessESI
X-DTC
X-Time-Microsecs
X-Atraveo-Param-Rm
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
X-Atraveo-ETag
X-Atraveo-Set-Cookie
X-Atraveo-Varnish-Server-Id
X-PRAM
X-Force
X-Atraveo-Zone
X-Atraveo-Cache-Control
Cmstype
X-ReqId
X-Cache-On
X-RDP
Url
Dispatcher
Cmsid
Sophnep-Edge-FX
X-Distributor
X-App-Status
X-Atraveo-TTL
DNNOutputCache
X-App-Runtime
VServer
X-AutoRu-App-Id
MS-CV
X-Hosting-Env
X-Map-Context
X-Req-Head-Response
Backend-Timing
X-PageType
X-PM-ID
X-Culture
X-Resource
X-SDE-Name
X-Analytics
X-Ser
X-Correlation-ID
Warning
X-CacheResult
X-Runtime-Affili
X-Goog-Meta-Policy
X-Cdn-Forward
Xc
X-Rq
X-Goog-Meta-Replace
X-Drupal-Cache-Contexts
X-Autoru-LB
X-Autoru-Host
Resin-Trace
CommunityServer
Web
X-Adnet
X-Cluster-Node
X-Airee-Node
X-SmartBan-URL
SS
X-Avvio-Cms-Cacheload
X-Response
X-SH-Cache-Status
X-CRA-DC
Access-Control-Request-Headers
X-Config-By
X-Machine
X-Viator-Tapersistentcookie
X-Site
Dis-Env
Cluster-ID
X-FRUIT
TC-S-Cache
X-Batcache
X-Provisioner-Version
X-Webkit-CSP
TC-S-Cache-M
X-SV
X-Src-Webcache
X-Highwire-SessionId
X-Domain-Checked
Ibf5scheme
X-KoobooCMS-Version
TC-Cache-U
N365rili
X-MSEdge-Ref
X-Upstream-Backend
Server-ID
X-PBY
X-Plat
TC-Cache-IC
XDomainRequestAllowed
X-SmartBan-Host
Content-Server
X-Rocket-Nginx-Serving-Static
X-SCM-Server-Number
Beyond-Iis
X-E
TC-Cache
X-Cache-TTL-Current
X-Cache-TTL-Age
X-Varnish-Debug-TTL
X-Trace-Id
X-Frames-Options
X-Varnish-Debug-Age
X-Highwire-RequestId
X-Oracle-DMS-ECID
X-This-Proto
X-Batcache-Reason
X-EC2-Instance-Id
Ttl
X-APP
X-Varnish-Info
X-IP
X-Nginx
X-We-Are-Hiring
X-Optimization
X-Stage
X-Varnish-Action
X-ACCELERATE
X-Rack-Cors
X-ENV
NZSpeedy
X-Lb
X-Rack-CORS
Device
X-GSL-Server
X-AISO-Cacheable
X-AISO-Cache
X-HTML-Minification-Powered-By
X-Magento-Action
X-Node-Name
X-Rewrite
X-Old-Content-Length
X-Origin-Server
DrivedBy
X-Environment-Context
X-L-Path
X-NodeID
X-Secret
X-Powered-By-Home.Pl
F5-IpCliente
X-AISO-Server
ClientIP
X-Refresh
Gzip
X-Amz-Id-1
Il-Cl
X-Who
Proxy-Cache
X-Ezoic-Cdn
X-HA-Frontend
X-HA-Backend
X-Webapp
X-Ghost-Cache-Status
X-Nginx-Request-Processing-Time
X-Cache-Via
X-Zendesk-User-Id
Edgecast
X-AMAZEEIO
X-Varnish-Cache-Local
OriginServer
X-Hosting
X-Amcomm-Site
X-Sc-Cache
AccessControlAllowOrigin
WP-AdvCache-MemCached
ServerIP
Session-From
ViewMode
Set-Cookie2
X-Data-Request
X-HashTwo
X-Pageid
X-Depends
X-Zendesk-Origin-Server
Tempo
X-Cms-Mode
X-7d-Instance-Id
X-MidCOM-Meta-Cache
X-SilverStripe-Cache
X-Dev
X-Server-Addr
X-CDN-RULE
X-V
X-CDN-COMPRESS
X-Detected-Device
Lb
X-Cache-Warmer
X-4ormat-Cacheable
X-Forwarded-Host
X-7d-Trace-Id
Worker
SBMCLOUD
X-CACHE-TTL
X-Header
BackendServer
X-Dynamic-Cache
X-HAProxy
X-MCB-Server
X-Hrouter
Server-Ip
StatusCode
X-Hstore
Nginx-Cache
X-DB-Content-Length
PagesDisplayed
Progma
Traffic-Origin
FastCGI-Cache-Status
X-Wm-VIP
X-Test
X-Fstrz
X-Box
X-Compressed-By
X-Unique-Id
X-Generation-Time
X-HostName
X-Wm-1
Debug-Status
X-Gyrobase-Publication
X-Flex-Evend
X-Flex-Community
X-Flex-Evstart
X-Flex-Lang
X-Flex-Tag
X-Flex-Lastmod
X-DSMX-Rewrite-MS
X-FIRSTBase
RequestId
Myheader
X-Pubstack
X-Obj.Ttl
X-DSMX-Render-MS
X-Flex-Tags
X-Search-Id
X-Server-Generated
X-DN-Cache-Control
X-RequesterIP
X-Enhanced-By
X-VC-Debug
X-CCM
X-B2f-Not-Route
COMMERCE-SERVER-SOFTWARE
X-W3TC-Minify
X-ACLR-Version
X-Amz-Meta-Content-Md5
X-Apm-Telemetry-Syncmark
X-Cache-Time
X-Brought-To-You-By
UrlWatchModule-Time
X-Ezpublish-Nodeid
X-Ezpublish-Installationid
Webserver
X-FPC
Cache-Status
X-Amzn-RequestId
SINA-TS
X-Session-Id
X-DS1D
X-Catalyst
X-Farm-Server
X-Cache-Varnish
X-Built-With
X-Gannett-Site-Version
X-Bcwwwid
Accept-Language
X-XHR-Current-Location
X-S-Misc
X-Server-FQDN
X-ServiceProvider
X-Country
X-D-Time
X-ELB
X-Proxy-Id
X-AppServer-Cache-Rule
X-PROCESSED-BY
X-Amzn-Trace-Id
X-VLoc
X-Varnish-Instance
X-Pass-Through
X-Time-Zone
X-Uncacheable
X-EC-Security-Audit
SINA-LB
X-Upgrade-Enabled
Expiries
PServer
Ews
X-Streams-Distribution
X-DEBUG
SiteSpeed
X-Cacheable-TTL
NS-VaryByCustom-Key
X-Dynamic
X-PHP-Response-Code
X-REDIRECTSERVER
X-Sid
X-DeliveryServer
X-Cache-Extended
Rewriter
X-Node-ID
VAR-Cache
X-M
X-DevSrv-CMS
X-LOCATION
X-Pagely-Cache
SHInfo
DbServerName
Content-Cache
FindLaw
X-WebKit-CSP-Report-Only
X-Cache-BE
X-Cache-HT
Swift-Performance
X-Tag-Playlist
Cleartype
X-Pixelsilk-Version
X-RAMCache
SERVER-ID
X-Turpentine-Esi
X-Pixelsilk-Server
X-Lima-Id
X-Ssl-Cipher
X-Ocache
X-Nginx-Request-Time
X-Reflector
Expect-Ct
X-Nocache
X-LBPoolMember
X-Reflector-Cache
X-ChromeLogger-Data
RSL-Trace-ID
SB-Cache-Life
SB-Site-Device
Provided-Host
SB-Cache-Remaining
X-HASH
X-Aramark-SID
X-Backend-Host
AMFplus-Ver
X-Varnish-Cached
SB-Site-IE-VERSION
Session-Id
MSSmartTagsPreventParsing
MSThemeCompatible
X-Front-Cache
X-UUID
X-Varnish-Cached-TTL
X-CACHE-KEY
Server-Id
WFE
Ibm-Web2-Location
X-Title
X-Provided-By
X-IP-Address
X-NewCloud-V-Cache
MageStack-Debug
MageStack-Config
MageStack-Loadbalancer
MageStack-Magento-Version
MageStack-Tag
X-Highwire-Sitecode
MageStack-Cacheable
MageStack-Cache-Status
MageStack-Area
Brightspot-Id
MageStack-Cache
MageStack-Cache-Hits
MageStack-Cache-Lifetime
MageStack-Web-Node
Note
X-Meta-MSSmartTagsPreventParsing
X-Goog-Meta-Goog-Reserved-File-Mtime
X-JSESSIONID
X-Layout
X-RiS-PX
X-Meta-MSThemeCompatible
X-Cms-Server
X-App-Version
Actual-Object-TTL
X-Backend-TTL
X-Cache-Me-Harder
X-CH-Device
X-Meta-Imagetoolbar
X-Router-Backend
X-9XB-Server
Apple-Itunes-App
X-Cache-Bypass
X-Ss-Location
X-Theme
X-Fpc
No-Cache
PLCDN
X-Server-Instance-Name
X-CSRF-Token
X-Ss-Conf
X-Config-Version
X-SuperCache
M
Kp-EeAlive
X-ESI
Kanooh-Host
D
X-GoCache-CacheStatus
WSCLoggingUUID
X-Highwire-Smart-Code
X-EBAY-C-REQUEST-ID
X-UnsetCookies
X-FG-RequestId
X-Generated-Date
DB-Nickname
X-PBS-Fwsrvname
X-PBS-Appsvrname
GP-Version
XDisk
TP-Cache
TP-L2-Cache
X-MCF-ID
X-Webstats-RespID
X-WebNode
X-Tradeindia-Request-GUID
AMP-Access-Control-Allow-Source-Origin
X-Tradeindia-SMgmt
X-UseReverse-Proxy
GP-Remote-Addr
X-Agent
X-Cache-FS-Status
X-MainProfileURL
X-MainProfileName
X-NewsFlow-Sitename
X-Not-Cacheable
X-PBS-Appsvrip
X-MainProfileID
X-MainProfileCategory
X-CacheID
X-Faeria
X-HP-CAM-COLOR
X-Webkit-Csp
X-Router
MageStack-PageSpeed
Aurora-Node
X-Cache-Id
X-WA-Info
CDCHOST
INFO
X-Svr
X-AppVersion
Server-Node
X-Custom-Header
X-Forwarded-By
X-DDM-SERVER
!~Request-OOB-Work
Access-Control-Allow-Method
X-UPSTREAM-Address
X-DDM-SERVER-UPDATED
X-Header-Treatment
X-Route
X-Real-IP
X-Phpwcms-Release
X-Rewritten-By
X-Request-Received
X-Request-Processing-Time
X-Backend-Name
X-Upstream-Status
X-Test-Debug
X-XHTML-Minification-Powered-By
Cache-Tags
X-Cjtype
X-ManagedFusion-Rewriter-Version
X-OCTOPOD
X-Origin-Cache
X-Phpwcms-Page-Processed-In
X-NID
X-AWS
X-Content-Parsed-By
X-Built-By
X-WPL-DATA
Server-Tuning
X-Rocket-Nginx-Reason
RSB-LINK
X-Beatles
X-Made-On
X-Debug-Message
MwpReleaseVersion
X-Deity
X-CM-FE
X-Container
AGI-Request-ID
X-Served
X-Cname-TryFiles
X-AG-MIPS
ENV
X-COUNTRY-CODE
X-Varnish-URL
X-C2M-Server
X-C2M-Runtime
X-Webkit-CSP-Report-Only
X-Beresp-Ttl
X-BPool-Back
IsMobile
X-BC
X-BPool
WP-Cache
X-CO-Host
Countrycode
X-PG
X-Varnish-VCL
Tesla.Performance
Head
X-Nginx-Page-Cache
Serverid
User-Cache-Control
Language
DeleGate-Ver
X-ZSITES-DNS
X-Obvious-Info
X-Obvious-Tid
Https
X-ACache
X-Cache-ID
X-Magento-Lifetime
X-K8s
X-Support
X-Varnish-Debug-Hits
TheAnswer
X-Ants-Host
Page-Template
X-Ants-Machine-Id
Upgrade-Insecure-Requests
RlogId
X-Serv
X-SVR
Accept-CH
Generate-Time
X-Skip-Cache
X-Serendipity-InterfaceLangSource
X-Serendipity-InterfaceLang
X-Pool-Info
X-Obj-Ttl
CpuTime
X-Transaction-Name
ReqUrl
EQ-Cache
Contao-Page-Layout
FrontEnd
V-Age
X-UT-Cache
X-Build-Id
Fw-Cache-Status
X-Prerendered
X-Cluster
Aoestatic
X-Cachable
Be
X-Vary-Options
X-FreeTag-Count
HostName
Resource
X-BPool-Bx-Cache
Lookup-Cache-Hit
E-TAG
X-Stiffia-Cache
X-Client-Ip
X-Geo-IP
CD4
X-ASAP-Age
X-Tt-Dbg
X-VNode
X-BPool-Fx-Cache
X-SRV
Session
X-Protected-By
X-HEAD
X-Serverid
X-NMT-Proxy
X-BServer
X-Netrix-ID
X-DynamicCache
X-Instance-Id
Microcache
Hosted-By
X-Cache-Set
X-Vol-Mrp
X-Does-He-Have-Time
X-Enabled1
X-Beatles-Hits
ResourceTag
Content-Legth
Memento-Datetime
EXT-CACHEEXPIRE
Public-Extension
X-Enabled2
X-Enabled3
AR-CACHE
AR-PoweredBy
AR-SID
GranicusServer
AR-ATIME
X-Your-GrandPa-Would-Wait
X-Vol-Correlation
X-TTL-Age
Vserver
X-Would-Your-GrandPa-Wait
X-Varnish-Store
X-Varnish-Set-Cookie
X-Cache-Served
X-Debug-Out
X-Debug-Serve
X-Archive-Orig-Server
X-Ar-Debug
Www.Aujourdhui.Com
X-Server-App
OutputRewritten
ServerNode
WebServer
X-Archive-Orig-ETag
X-Archive-Orig-Date
X-Varnish-Currency
X-Varnish-Esi-Access
X-Varnish-Esi-Method
X-Varnish-Max-Age
X-Turpentine-Cache
X-Archive-Guessed-Charset
X-Archive-Orig-Content-Length
X-Hash
X-Archive-Orig-Connection
X-Max-Age
ProxiaInstanceId
X-FastCGI-Cache
VC-NoCache
CD1
Url-Hash
X-Jcms-Ajax-Id
Ez
X-W-Cache-Hits
X-Cache-Action
Httpd-Identifier
X-Sn-Servicetimems
X-W-Cache
X-Auto-Login
X-CPU-Time
Rlogid
X-B3-Traceid
X-B3-Spanid
Content-Generator
B-Rlogid
X-UPServer
X-Diazo-Applied
X-EC-Custom-Error
X-Script
X-ServerAddr
X-BeResp-Ttl
Yola-ID
X-Imforza-Hosted
X-Pj-Cache-Status
X-Processed
X-SCProxy
Container
Debug-Cache-Control
Debug-Expires
X-Amz-Meta-Version-Id
X-Cache-LB
X-Csrf-Token
0
Copyright
X-HS-Status
X-Op-Benvironment
X-Instance-Name
X-ZORequestID
X-FCMS-Cache
X-Czt
Prototype-RootPath
X-Accel-Cache-Control
X-Restarts
X-Count
Tk