Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
X-Cache
Strict-Transport-Security
CF-RAY
X-AspNet-Version
P3P
X-Pingback
Age
Content-Language
X-UA-Compatible
Via
Access-Control-Allow-Origin
X-Adblock-Key
Upgrade
X-Varnish
X-Cacheable
X-Check
X-Template
X-Language
P3p
Content-Security-Policy
X-Generator
X-Buckets
X-Drupal-Cache
X-Type
X-Cache-Group
X-AspNetMvc-Version
X-Pass-Why
X-Xss-Protection
X-Request-Id
X-Hacker
X-Ac
X-Powered-By-Plesk
X-Cache-Hits
Content-Location
X-Permitted-Cross-Domain-Policies
X-Runtime
X-Download-Options
Host-Header
MS-Author-Via
X-Request-ID
X-ShopId
X-Sorting-Hat-ShopId-Cached
X-Dc
X-Sorting-Hat-PodId
X-ShardId
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-Section
X-Alternate-Cache-Key
Alt-Svc
Cartoon
X-IPLB-Instance
X-Powered-CMS
X-UA-Device
Status
X-Served-By
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
X-Amz-Cf-Id
Access-Control-Allow-Methods
X-Via
X-Iinfo
X-Cache-Status
X-Backend
X-Timer
X-Contextid
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
CF-Cache-Status
X-PC-Key
X-PC-Hit
X-ServedBy
Powered-By
X-PC-Date
X-PC-AppVer
X-PC-Host
X-Mod-Pagespeed
X-Wix-Server-Artifact-Id
X-DIS-Request-ID
X-Logged-In
X-Rid
Keep-Alive
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Server
X-Cache-Hit
Content-Encoding
X-Port
X-Tumblr-Pixel-1
X-CDN
X-Host
X-CST
X-Tumblr-Pixel-2
X-Server-Powered-By
X-Robots-Tag
Referrer-Policy
X-Cache-Enabled
X-Pad
X-Nginx-Cache-Status
WP-Super-Cache
X-Seen-By
X-Endurance-Cache-Level
X-Wix-Request-Id
X-Wix-Renderer-Server
Fastly-Debug-Digest
X-Page-Speed
X-Wix-PunisherID
X-Turbo-Charged-By
X-Accel-Version
X-Forwarded-For
X-Tumblr-Pixel-3
X-Content-Powered-By
X-Forwarded-Proto
X-Drupal-Dynamic-Cache
X-Rack-Cache
X-Content-Digest
X-Styx-Req-Id
Surrogate-Key-Raw
X-Pantheon-Styx-Hostname
X-Varnish-Cache
X-AH-Environment
Content-Security-Policy-Report-Only
X-FRAME-OPTIONS
X-GitHub-Request-Id
X-Proxy-Cache
SPRequestGuid
X-Cnection
X-SharePointHealthScore
X-MS-InvokeApp
MicrosoftSharePointTeamServices
X-Request-Country
X-Original-Date
X-XRDS-Location
X-LiteSpeed-Cache
X-Cache-Lookup
X-Died
Edge-Control
WPE-Backend
Cf-Railgun
X-Safe-Firewall
Timing-Allow-Origin
Request-Id
X-Amz-Id-2
X-Amz-Request-Id
MicrosoftOfficeWebServer
Charset
X-FW-Hash
X-FullPageCaching
X-Webserver
X-FW-Serve
X-FW-Static
X-FW-Type
Edge-Cache-Tag
X-Tumblr-Pixel-4
SPIisLatency
SPRequestDuration
X-PhApp
X-HS-Cache-Config
X-Node
X-CF-Powered-By
X-HS-Content-Id
X-Hits
X-Content-Security-Policy
Composed-By
X-INKT-URI
X-INKT-SITE
Content-MD5
Access-Control-Max-Age
X-AWS-Id
X-VWS-Id
X-LJ-Flow-ID
Liferay-Portal
X-Hyper-Cache
X-Swift-SaveTime
X-Swift-CacheTime
Access-Control-Expose-Headers
EagleId
Rating
Grace
Served-By
X-CDN-Pop-IP
X-CDN-Pop
X-Spip-Cache
Request-Context
X-BC-Stapler
X-Device
X-Backend-Server
X-Tumblr-Content-Rating
X-Fastly-Request-ID
X-Server-Name
X-Microcache
X-Dw-Request-Base-Id
X-Newrelic-App-Data
X-Microcachable
X-Firenze-Processing-Times
X-RateLimit-Remaining
X-RateLimit-Limit
X-ServerName
X-User-Agent
X-RateLimit-Reset
Content-Style-Type
X-VCache
X-FB-Debug
X-Jimdo-Wid
X-Jimdo-Instance
Content-Script-Type
Public-Key-Pins
X-Cloud-Trace-Context
X-Cache-Config
X-Clacks-Overhead
X-DDC-Arch-Trace
Xkey
X-SERVER
Real-Hostname
X-Loop
X-TNCMS
X-Acc-Exp
Front-End-Https
Refresh
Fpc-Cache-Id
X-XN-Trace-Token
X-Age
X-XN-XNHTML
Surrogate-Control
X-Aspnetmvc-Version
X-Tumblr-Pixel-5
X-Hostname
PageSpeed
X-Generated-By
X-DNS-Prefetch-Control
Display
X-Sol
X-Middleton-Response
X-Middleton-Display
Response
X-Cached
X-Px
X-N-OperationId
X-LiteSpeed-Cache-Control
Surrogate-Key
X-MiniProfiler-Ids
X-SS-Conf
X-SS-Location
X-StackifyID
X-Cached-By
X-URL
X-Request-Time
X-Pantheon-Phpreq
X-Pantheon-Environment
X-Pantheon-Site
X-Content-Options
X-Topify-Platform
X-Zen-Fury
X-WebKit-CSP
Rt-Fastcgi-Cache
X-Servedby
X-CMS-Version
TCN
X-Whom
X-Outils-CS
X-Amz-Version-Id
Edge-Control-Message
X-AspNetWebPages-Version
X-Cdn
X-HOST
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-OneAgent-JS-Injection
X-Url
X-ApacheServer
X-PERF
X-Umbraco-Version
X-DynaTrace-JS-Agent
Access-Control-Request-Method
X-Ruxit-JS-Agent
X-DynaTrace
X-Correlation-Id
Alternate-Protocol
X-Varnish-Cache-Hits
X-Handled-By
X-Kinsta-Cache
Host
X-Varnish-TTL
Product
Imagetoolbar
X-Magento-Tags
Powered
X-Cache-Rule
X-Engine
P-LB
P-WS
X-NWS-LOG-UUID
DynaTrace
X-Powered-By-360WZB
WZWS-RAY
X-Tumblr-Pixel-6
Generator
X-Recruiting
X-CacheServer
Fhost
X-Micro-Cache
X-Track
ServedBy
X-Edge-Location
X-Location-Id
X-FORWARDED-FOR
X-Goog-Hash
No
X-Vtex-Processado-Em
X-Vtex-Remote-Cache
X-VTEX-Janus-Router-Backend-App
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Processed-At
X-Powered-By-VTEX-Janus-ApiCache
X-Fastcgi-Cache
X-Msg-2-Log
X-Hosted-By
X-I-Sp
X-B-Cache
X-BS
X-From
Fastcgi-Cache
X-Powered-By-VTEX-Janus-Edge
X-RESOURCE
X-Cache-Age
X-URLSCHEME
Origin
X-VARNISH-Cache
X-Application-Context
X-Response-Time
X-Developer
X-Varnish-Host
X-LBLID
Expect-CT
Arr-Disable-Session-Affinity
X-Actual-URL
X-Original-Request
X-Returned-From
X-Returned-From-DLL
X-Passed-To
X-Passed-To-DLL
Content-Hash
X-Returned-From-PostProcessResponse
X-UD-Method
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Passed-To-BeforeDispatch
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
X-LB
X-App-Hosting
X-Instart-Request-ID
X-Stale
X-Defender
X-Shop-Id
X-Storage
X-Source
X-Origin
X-Device-Type
X-TransIP-Balancer
X-Platform-Processor
X-Platform-Router
X-Platform-Cluster
Dmn
Akamai-IP
X-Cache-TTL
X-Cache-Info
HTTPS
X-Akamai-Transformed
X-Accel-Expires
X-Matrix-Server
X-Revision
X-Matrix-Proxy
X-Cache-Debug
X-Rocket-Nginx-Bypass
X-Powered-By-VelaWeb
X-Internal-ReqID
X-NetCat-Version
X-AOL-HN
X-I
IBM-Web2-Location
X-Varnish-Cacheable
X-Dispatch
X-Daa-Tunnel
X-Front
Last-Published
X-Microcache-Status
X-Translation
X-Page-Cache
X-Varnish-Count
X-Varnish-HitMiss
X-Cache-Operation
X-HS-Content-Campaign-Id
MIME-Version
X-UPSTREAM
X-Varnish-Backend
X-Signature
Ohc-File-Size
X-Version
X-Platform
X-Expires-Orig
USPLoggingUUID
X-EdgeConnect-Origin-MEX-Latency
X-Supported-By
X-S
X-Cache-Lifetime
X-TransIP-Backend
Pool
X-Gamma-Serve
Powered-By-ChinaCache
Version
X-Cache-Tags
X-VTEX-Cache-Status-Janus-Edge
X-Cache-Only-Varnish
X-NoCache
X-LB-Node
X-Varnish-GracePeriod
Content-Disposition
X-Varnish-RemainingLife
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-Varnish-ObjectSource
X-Upstream
X-Cache-Key
X-ATG-Version
X-EdgeConnect-MidMile-RTT
Public-Key-Pins-Report-Only
X-Duration
X-Content-Encoded-By
X-Dispatcher
Cache-Key
Cache-Tag
X-Hypernode
X-Route-Server
Node
X-Art-Request-Id
X-Platform-Cache
X-Server-Id
X-Director
X-Server-Upstream
X-Vcap-Request-Id
X-Flow-Powered
X-SV-CreatedAt
X-Varnish-Age
X-SV-Edge
X-SV-FromDBCache
X-SV-Duration
Srv
X-Debug-Info
X-SV-Nginx-Duration
X-SV-Pid
X-SV-CacheTags
X-SSL-Protocol
X-SV-Cacheable
X-SV-Expires
Proxy-Connection
X-Cookie-Domain
X-SSL-Cipher
X-Firenze-Processing-Time
X-Debug
ServerID
X-Platform-Server
X-F-Cache
ServerName
IM-Version
X-TTL
X-Cache-Control-Orig
X-CJ-Soft
X-NewRelic-App-Data
SSPAppContext
FAI-W-FLOW
X-Abgroup
Allow
X-Cache-Expires
Content-Encoding-Handler
X-Server-ID
X-Sucuri-ID
X-Geo-Country
Cneonction
Lsrequestid
X-Country-Code
X-ORACLE-DMS-ECID
X-Sapient
X-Client-IP
X-GeoIP-Country-Code
Accept-Encoding
X-Speed-Cache
X-Speed-Cache-Key
SN
X-Abuse
X-PwB-Node
X-RequestId
X-Edge-IP
X-Varnish-IP
X-Proxy
Page-Completion-Status
Cache-Provider
X-Sucuri-Cache
X-Dns-Prefetch-Control
Edge-Content-Tag
X-Last-Modified
X-Magento-Cache-Debug
X-Nbs
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
X-GUploader-UploadID
X-Amz-Meta-S3cmd-Attrs
X-Goog-Generation
X-Cache-CFC
X-Content-Age
X-ARC
X-SDS
X-GeoIP-Country-Name
X-Processed-By
X-Purge-URL
Author
X-Browser
X-Grace
X-Id
X-Cache-Server
PICS-Label
Backend
X-ServerID
X-Url-Base
If-Modified-Since
NnCoection
X-Lambda-Id
X-SRCache-Key
X-Akamai-Device-Characteristics
Location
A-Powered-By
RTSS
X-Loopia-Node
X-Real-Server
X-Cache-Control
X-Discourse-Route
X-Purge-Host
X-Nginx-Cache
Section-Io-Id
X-Orig-Vary
WSR-Cache
X-CDN-Node
X-Time
S-Cnection
X-CDN-Cache-Status
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Cache-Handler
X-Shield-Request-Id
AMF-Ver
X-SE-Debug
Fw-Via
NetMindSessionID
X-BKSrc
X-Processing-Time
X-Akamai-Device-Model
X-Yadis-Location
X-Vhost
X-Frontend
X-Hiawatha-Cache
X-Varnish-Hits
CacheControlHeader
X-IsCacheURL
Qs-Cache
Pv
X-Framework
Cached
X-Varnish-Url
X-NB-Cached-Page
X-DealerOn
X-Middleware-Start
X-Always-Cache
MC
X-HP-Trace-ID
X-HP-Trace-Project
X-Generated
Tracecode
Req-Id
X-Varnish-ID
X-CDN-Forward
Xc-Version
X-N
X-Ttl
X-Varnish-Server
S
X-BackendServer
X-FW
Use-Proxy
WWW-Authenticate
X-Trace
X-Varnish-Ttl
X-Srv
MJ12bot
SEOMOZ
X-TB-M
X-Drectory-Script
X-Worker
X-LW-Cache
X-Connection-Hash
X-Cache-Engine
X-Transaction
X-Twitter-Response-Tags
Accept-Charset
X-Traffic
X-Route-To
X-Config-Blacklist-Version
X-Cache-PageType
X-Magnolia-Registration
X-Fedora-School-Id
X-Cache-Type
Server-Name
X-Cache-Fix
X-Healthy
X-Resty-Request-Id
SVR
HAVer
Thanks
HCVer
X-Mobilized-By
X-Symfony-Cache
Cteonnt-Length
X-VC-TTL
X-Correlation-ID
Nodo
X-Drupal-Cache-Tags
X-ID
Cm-Server
SBGI-RealPath
SBGI-RenderTime
SBGI-Device
X-Directory-Script
Retry-After
SBGI-5
SBGI-1
X-Content-Security-Policy-Report-Only
SBGI-7
SBGI-10
SBGI-9
Frame-Options
X-Sys-Req-ID
X-Pressidium-NinukisWP-Ver
X-Cache-Level
X-ClientSide-Caching
Cache
X-Unique-ID
NODE
X-JG-Page-Cache
Nitro-Cache
Content-Transfer-Encoding
X-SO
X-Magento-Cache-Control
X-Pagename
X-Adobe-Loc
X-Adobe-Content
Local-Info
X-Hit-Cache
X-Webcelerate
From-Origin
X-Session-Reinit
X-Remote-Addr
CLMOB
X-Empowered-By
RATING
Server-Info
X-Content-Type-Option
X-Varnish-Retries
Buuteeq-Source
X-High-Performance
X-Cache-TTL-Remaining
X-VC-Enabled
Eomportal-Instance
WN
X-LB-Server
X-Served-Server
X-PF-Uncompressing
X-WN-ClientGroup
X-CF-Passed-Proto
Identity
X-Cache-Source
EagleEye-TraceId
X-App-Status
Web-App-Origin-Name
X-Cache-Provider
X-Mobile-URL
X-Environment
X-Amz-Storage-Class
X-Site-Name
X-Cache-Device-Type
X-Amz-Meta-Cb-Modifiedtime
Content_type
Access-Control-Allow-Header
X-ServerIndex
X-LP
X-Jphone-Copyright
X-WHOIS-Cached
X-Runtime-Memory
SRV
X-Static
X-FireWall-Port
X-Session-ID
X-Domain-Checked
X-Powered-By-Server
X-Disney-Akamai-Rule
X-Runtime-Rack
Dispatcher
X-Cache-Doesi
Max-Age
X-HP-Redirect
X-VARITI-CCR
X-RiS-UFDI
X-OPNET-Transaction-Trace
X-Provisioner-Version
X-OpenCart-Lightning
X-Blog
Magicmarker
Strikingly-Cache-Region
Strikingly-Cached-Version
X-Culture
X-WR-Flags
X-Cache-Detail
X-UA
X-Middleton-PageSpeed
X-SERVER-NAME
Strikingly-Cached
X-FORWARDED-PROTO
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Pageid
Disablevcache
BALANCEDTO
XDomainRequestAllowed
X-Nginx-Host
X-Server-IP
X-Frame-Option
NtCoent-Length
X-Page
X-Debug-Token
Home
HitType
ServerTokens
Cmstype
X-Varnish-Hostname
ServerSignature
Backend-Timing
Cmsid
X-Analytics
Pics-Label
X-ARRServer
X-Unbounce-Variant
X-Unbounce-VisitorID
X-Site
X-Unbounce-PageId
X-CB-Server
Keywords
Front
X-GeoIP
AC-ELC
X-Dynatrace-Js-Agent
X-Cocoon-Version
Resin-Trace
X-Server-Instance
X-Atraveo-TTL
X-Generated-Time
X-Atraveo-Set-Cookie
X-Atraveo-Varnish-Server-Id
X-Atraveo-Zone
X-Force
X-Key
X-PRAM
X-App-Runtime
X-Atraveo-Param-Rm
X-Atraveo-Cache-Control
Dis-Env
X-Location
X-Atraveo-ETag
X-Atraveo-Expires
X-A
X-Atraveo-From-Varnish-Cache
Provider
X-Runtime-Affili
Bios
X-Client-Vid
X-Client-Image-Vid
X-EPiphany-Vid
X-Backend-Status
X-Webkit-Csp
X-Optimization
X-ACMCache
X-App-Server
X-Balanceador
Yoncu-Errno
X-AF-Userserver
X-Frames-Options
X-Cache-Node
X-Map-Context
X-Req-Head-Response
X-App
X-Clara-ASAP
Ufe-Result
X-ORACLE-DMS-RID
X-Cached-Status
X-Machine
Response-Time
IISExport
X-ASAP-Cache
X-Author
OriginServer
NLCacheNote
MW-Webserver
Nginx-Cache
Beyond-Iis
Description
X-Drupal-Cache-Contexts
Machine
X-Distributor
X-Yottaa-Metrics
Ttl
X-Yottaa-Optimizations
X-NginX-Cache
SS
X-DataDome
X-Esi
X-PageType
X-Cms-Mode
X-Garden-Version
X-HW
Worker
X-Dev
X-LW-Web-Server
X-KoobooCMS-Version
X-Info
X-Source-ID
X-Amz-Id-1
X-GSL-Server
X-Sc-Cache
X-FRUIT
X-SH-Cache-Status
DNNOutputCache
X-Grid-Server
X-Amcomm-Site
X-Rewrite
Hname
Paypal-Debug-Id
X-Varnish-Debug-TTL
X-Cache-Dispatcherpragma
AsisCache
X-E
X-Batcache
X-Cache-Dispatchercachecontrol
X-HA-Backend
X-This-Proto
X-MAT-GEO
X-Resolver-IP
Proxy-Cache
X-Data-Request
X-Captured
X-CAPServer
X-Varnish-Cache-Local
X-IIJ-Cache
X-Varnish-Debug-Age
Fastly-Backend-Name
Il-Cl
X-ETag
X-SmugMug-Values
X-SmugMug-Hiring
X-TTFB
X-TTFB-L
X-HydroSheep
Set-Cookie2
X-Application
X-HashTwo
X-HA-Frontend
X-Magento-Action
Smug-CDN
PagesDisplayed
ViewMode
X-Header
X-PM-ID
Og
X-Trace-Id
X-Test
X-Rack-Cors
X-Goog-Meta-Policy
X-NginX-Server
X-Ser
X-EC-Security-Audit
X-Detected-Device
X-Goog-Meta-Replace
X-Cdn-Forward
X-Hrouter
X-Hstore
X-DSMX-Render-MS
X-Time-Microsecs
Access-Control-Request-Headers
X-Avvio-Cms-Cacheload
X-WP
X-DSMX-Rewrite-MS
X-B2f-Not-Route
W
X-Proto
X-Apm-Telemetry-Syncmark
X-Smartcache-Timeout
Ctx
Id
X-CacheResult
X-Reflector-Cache
FastCGI-Cache-Status
X-Webapp
X-Powered-By-Home.Pl
Lb
X-DB-Content-Length
CommunityServer
X-Hosting
NS-VaryByCustom-Key
SBMCLOUD
X-Env
X-Plat
X-Smartcache-Keys
X-Reflector
X-Cluster-Node
Traffic-Origin
X-RAMCache
X-MSEdge-Ref
RN-Server
SERVER-ID
Ews
VANITY-HOST
X-Batcache-Reason
X-Cname-TryFiles
X-SDE-Name
X-EC2-Instance-Id
X-ENV
X-APP
X-Hosting-Env
X-Served
X-Autoru-Host
X-AutoRu-App-Id
X-ACCELERATE
X-Stage
X-Render-Time
BackendServer
X-Cache-Keep
X-Autoru-LB
X-Varnish-Info
X-Deity
X-MCB-Server
Device
X-Rack-CORS
COMMERCE-SERVER-SOFTWARE
SiteSpeed
PServer
X-Resource
X-PBS-Appsvrip
X-PBS-Appsvrname
X-WebKit-CSP-Report-Only
X-LBPoolMember
X-Viator-Tapersistentcookie
Tempo
X-PBS-Fwsrvname
X-CacheID
X-WR-MODIFICATION
X-Cache-Via
X-VC-Debug
ScoreTracker
X-AEM
Accept-Language
X-V
Note
ClientIP
Gzip
AccessControlAllowOrigin
Cleartype
X-Rocket-Nginx-Serving-Static
X-Flex-Evend
X-Environment-Context
X-Cache-FS-Status
X-M
X-Depends
X-Node-Name
X-Zendesk-User-Id
X-Secret
X-Adnet
X-L-Path
X-Zendesk-Origin-Server
X-Compressed-By
Expect-Ct
X-Flex-Lang
X-Flex-Evstart
X-Airee-Node
X-Flex-Community
X-Flex-Lastmod
X-Flex-Tag
X-Cacheable-TTL
X-Fpc
X-JSESSIONID
X-Flex-Tags
X-Tag-Playlist
F5-IpCliente
X-DN-Cache-Control
X-RealServer
X-CCM
X-Cache-Time
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
X-Proxy-Cache-Key
X-Machine-Name
X-ProcessESI
X-CDN-COMPRESS
X-CDN-RULE
X-Cache-TTL-Age
X-ACLR-Version
Sophnep-Edge-FX
Myheader
X-Cache-TTL-Current
VAR-Cache
Ibf5scheme
X-Beatles
N365rili
X-Gyrobase-Publication
X-RemovedCookies
X-Server-Generated
X-Actindo-RS
X-DTC
RequestId
X-DevSrv-CMS
X-Config-By
Cluster-ID
SG
X-Cache-On
From
X-RDP
X-Desc
X-HTML-Minification-Powered-By
NCache
X-Cache-Id
X-Nginx-Request-Time
X-Pixelsilk-Server
X-Rq
X-CACHE-TTL
VServer
X-Cache-BE
X-We-Are-Hiring
Xc
X-Nginx
X-Cache-HT
Swift-Performance
X-Pixelsilk-Version
X-CSRF-Token
X-Dynamic-Cache
X-Lima-Id
X-ChromeLogger-Data
X-Ocache
X-Src-Webcache
RSL-Trace-ID
TC-S-Cache-M
X-Distil-CS
TC-Cache-U
SB-Site-IE-VERSION
X-Session-Id
TC-Cache-IC
X-CACHE-KEY
WFE
X-CH-Device
SB-Cache-Remaining
SB-Cache-Life
X-Front-Cache
TC-S-Cache
SB-Site-Device
Session-Id
Server-ID
X-Forwarded-Host
X-Response
X-W3TC-Minify
X-Catalyst
Session-From
ServerIP
X-SmartBan-URL
X-SmartBan-Host
X-LOCATION
X-Highwire-SessionId
X-Container
X-HostName
Web
TC-Cache
Content-Server
X-Tradeindia-Request-GUID
X-Tradeindia-SMgmt
X-Router-Backend
X-Router
X-Provided-By
X-RiS-PX
X-UseReverse-Proxy
X-Highwire-RequestId
X-Ghost-Cache-Status
X-CRA-DC
FrontEnd
XDisk
X-Webstats-RespID
X-IP-Address
MageStack-Loadbalancer
SHInfo
X-Upstream-Backend
ENV
Access-Control-Allow-Method
!~Request-OOB-Work
X-Faeria
X-Lb
WP-AdvCache-MemCached
X-Beresp-Ttl
AMP-Access-Control-Allow-Source-Origin
Brightspot-Id
MageStack-Area
X-Search-Id
X-Made-On
RSB-LINK
X-Ezoic-Cdn
Provided-Host
X-HP-CAM-COLOR
X-Cache-Warmer
X-Amz-Meta-Content-Md5
NZSpeedy
X-ReqId
Url
X-Varnish-URL
X-Artvisual-Server
X-Custom-Header
X-Server-Instance-Name
X-MainProfileID
X-MainProfileCategory
X-Varnish-Action
X-MainProfileName
X-MainProfileURL
X-Not-Cacheable
X-NewsFlow-Sitename
MageStack-Cache
X-Route
MageStack-Web-Node
X-Rocket-Nginx-Reason
MageStack-PageSpeed
MageStack-Magento-Version
X-Upgrade-Enabled
X-SCM-Server-Number
X-NewCloud-V-Cache
X-App-Version
X-Cms-Server
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Layout
AMFplus-Ver
X-Backend-TTL
Debug-Status
MageStack-Debug
MageStack-Tag
MageStack-Cache-Lifetime
X-Title
MageStack-Cache-Status
MageStack-Cache-Hits
MageStack-Cacheable
MageStack-Config
X-SV
X-IP
X-Dw-Trace-Id
X-Turpentine-Esi
X-PBY
X-Server-Addr
X-Webkit-CSP
Server-Ip
Warning
StatusCode
X-4ormat-Cacheable
X-Nocache
MS-CV
X-Cache-Action
X-CM-FE
X-DS1D
X-Obvious-Tid
X-WPL-DATA
X-GoCache-CacheStatus
Tk
X-Backend-Host
X-Obvious-Info
X-Aramark-SID
DrivedBy
X-Gannett-Site-Version
MSSmartTagsPreventParsing
X-Instance-Id
X-MCF-ID
X-Node-ID
X-Pubstack
X-Farm-Server
X-Bcwwwid
X-Built-With
X-Cache-Varnish
X-Pagely-Cache
X-Streams-Distribution
MSThemeCompatible
X-Rewritten-By
Server-Tuning
X-Old-Content-Length
Expiries
Session
X-Varnish-Cached
X-Varnish-Cached-TTL
Resource
X-AISO-Cache
Aurora-Node
X-WebNode
X-AppVersion
X-AMAZEEIO
Ez
X-WA-Info
TP-L2-Cache
Cache-Tags
X-AWS
TP-Cache
X-Debug-Message
X-UPSTREAM-Address
X-NID
X-Cjtype
X-Backend-Name
CDCHOST
X-OCTOPOD
X-Origin-Cache
X-Header-Treatment
X-Svr
X-Real-IP
VC-NoCache
X-Agent
X-AISO-Cacheable
Edgecast
X-Unique-Id
PLCDN
X-Test-Debug
X-AISO-Server
X-Meta-Imagetoolbar
X-Meta-MSSmartTagsPreventParsing
X-Refresh
X-Meta-MSThemeCompatible
X-Wm-1
X-Wm-VIP
X-Enhanced-By
X-Nginx-Request-Processing-Time
X-RequesterIP
X-FIRSTBase
X-ManagedFusion-Rewriter-Version
X-XHTML-Minification-Powered-By
X-Who
X-Obj.Ttl
Progma
X-Fstrz
X-SilverStripe-Cache
X-Serendipity-InterfaceLang
X-Obj-Ttl
X-Varnish-Debug-Hits
X-TTL-Age
X-Serendipity-InterfaceLangSource
X-Would-Your-GrandPa-Wait
X-Your-GrandPa-Would-Wait
CpuTime
AR-CACHE
AR-ATIME
Aoestatic
Ibm-Web2-Location
Vserver
X-DEBUG
X-DeliveryServer
X-Dynamic
X-Hash
X-Cache-Extended
X-Brought-To-You-By
X-Prerendered
X-Cache-Set
X-7d-Instance-Id
X-Box
AR-PoweredBy
X-Ss-Conf
Microcache
X-SCProxy
Generate-Time
IsMobile
X-Beatles-Hits
X-Processed
X-Magento-Lifetime
Kp-EeAlive
X-Cache-LB
ServerNode
Server-Id
X-Accel-Cache-Control
X-Cache-Me-Harder
X-Count
AR-SID
X-FreeTag-Count
X-Ss-Location
Fw-Cache-Status
EQ-Cache
X-DynamicCache
GranicusServer
X-UT-Cache
X-Vary-Options
X-Enabled3
X-7d-Trace-Id
X-D-Time
X-DDM-SERVER
X-DDM-SERVER-UPDATED
X-ELB
X-Country
X-AppServer-Cache-Rule
UrlWatchModule-Time
Webserver
X-Amzn-RequestId
X-Amzn-Trace-Id
X-Varnish-Instance
X-UnsetCookies
X-Proxy-Id
X-S-Misc
X-SuperCache
X-Server-FQDN
X-Time-Zone
X-NodeID
X-Generation-Time
X-Uncacheable
X-Enabled2
X-HAProxy
X-VLoc
SINA-TS
X-PHP-Response-Code
D
X-REDIRECTSERVER
X-Enabled1
X-MidCOM-Meta-Cache
X-Does-He-Have-Time
X-Cluster
X-HASH
X-Debug-Serve
X-Sid
Content-Cache
GP-Remote-Addr
GP-Version
Rewriter
SINA-LB
X-XHR-Current-Location
Cache-Status
X-ServiceProvider
DbServerName
FindLaw
X-Cache-Cfc
X-Litespeed-Cache-Control
X-Oracle-DMS-ECID
X-C2M-Runtime
X-COUNTRY-CODE
X-Cf-Powered-By
X-Webkit-CSP-Report-Only
X-C2M-Server
X-Ssl-Cipher
X-Jcms-Ajax-Id
TestCC
X-APIVERSION
Content-Generator
DB-Nickname
X-APIAUTH-VAL
No-Cache
X-FG-RequestId
Url-Hash
X-Generated-Date
Apple-Itunes-App
X-ServerAddr
X-UPServer
X-Script
X-Cache-Bypass
X-Diazo-Applied
X-Auto-Login
B-Rlogid
X-EC-Custom-Error
CD1
Rlogid
M
X-9XB-Server
X-EBAY-C-REQUEST-ID
X-BServer
X-HEAD
X-Cache-ID
X-Support
Tesla.Performance
User-Cache-Control
WP-Cache
Upgrade-Insecure-Requests
V-Age
Be
Contao-Page-Layout
HostName
X-ASAP-Age
X-Serverid
X-Netrix-ID
X-SRV
X-Stiffia-Cache
Lookup-Cache-Hit
ReqUrl
X-Transaction-Name
X-VNode
X-Build-Id
X-Cachable
X-Pool-Info
X-Protected-By
X-NMT-Proxy
X-Origin-Server
Hostname
X-Pass-Through
X-PROCESSED-BY
X-SVR
X-Highwire-Smart-Code
X-Highwire-Sitecode
X-ESI
X-Ezpublish-Installationid
X-Ezpublish-Nodeid
X-FPC
X-Theme
Accept-CH
X-BPool-Back
X-BPool-Bx-Cache
X-BPool-Fx-Cache
X-Config-Version
X-BPool
X-BC
Language
TheAnswer
X-Ants-Host
X-Ants-Machine-Id
WSCLoggingUUID
X-CAMPUSSUITE-DEBUGGING
X-Archive-Orig-Content-Length
X-Archive-Orig-Date
X-Archive-Orig-ETag
X-Archive-Orig-Server
X-Archive-Orig-Connection
X-Archive-Guessed-Charset
Memento-Datetime
Server-Node
X-No-Session
X-Built-By
X-Content-Parsed-By
X-UUID
OutputRewritten
WebServer
Www.Aujourdhui.Com
X-ServedByHost
X-Server-App
X-Ec-Custom-Error
X-Request-Processing-Time
X-Request-Received
EXT-CACHEEXPIRE
X-FastCGI-Cache
Hosted-By
Httpd-Identifier
X-Instance-Name
X-Restarts
X-Sn-Servicetimems
X-CPU-Time
X-B3-Spanid
X-B3-Traceid
Kanooh-Host
Actual-Object-TTL
AGI-Request-ID
X-Forwarded-By
X-Vol-Correlation
X-Vol-Mrp
X-AG-MIPS
MwpReleaseVersion
Container
Debug-Cache-Control
Debug-Expires
X-Ar-Debug
X-Cache-Served
X-Czt
X-FCMS-Cache
X-HS-Status
X-Op-Benvironment
Prototype-RootPath
Copyright
X-Imforza-Hosted
X-Pj-Cache-Status
0
X-ZORequestID
Yola-ID
X-Hcom-Styx-Info
X-Hcom-Origin-Id
X-ENDPOINT
X-ORIKEY
X-ROUTING
X-BeResp-Ttl
X-W-Cache
X-W-Cache-Hits
X-Csrf-Token
X-Amz-Meta-Version-Id
X-CAMPUSSUITE-TENANT
X-Turpentine-Cache
X-Varnish-Currency
X-Varnish-Esi-Access
X-Phpwcms-Release
X-Phpwcms-Page-Processed-In
X-Debug-Out
X-Max-Age
Application
X-Varnish-Esi-Method
X-Varnish-Max-Age
ResourceTag
X-CAMPUSSUITE-ENVIRONMENT
ProxiaInstanceId
Public-Extension
INFO
X-Varnish-Set-Cookie
X-Varnish-Store
Content-Legth
X-EC-Lua