Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
X-AspNet-Version
Age
P3P
X-Pingback
Content-Language
Via
X-UA-Compatible
Expect-CT
Upgrade
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Check
X-Language
X-Template
X-Varnish
X-Request-Id
X-Xss-Protection
Alt-Svc
X-Generator
X-Buckets
X-Drupal-Cache
P3p
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Powered-By-Plesk
X-Download-Options
Content-Location
Host-Header
X-Runtime
X-ShopId
MS-Author-Via
X-Sorting-Hat-ShopId-Cached
X-Dc
X-Sorting-Hat-Section
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-ShardId
X-Sorting-Hat-PodId-Cached
X-Alternate-Cache-Key
Referrer-Policy
X-UA-Device
Cartoon
X-Powered-CMS
X-IPLB-Instance
X-Served-By
X-Amz-Cf-Id
Access-Control-Allow-Headers
Status
Access-Control-Allow-Methods
X-Cache-Status
Access-Control-Allow-Credentials
X-Via
X-Ua-Compatible
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Wix-Server-Artifact-Id
X-Contextid
X-ServedBy
CF-Cache-Status
X-Backend
Powered-By
X-PC-Key
X-PC-Hit
X-Mod-Pagespeed
X-Accel-Buffering
X-PC-Host
X-PC-AppVer
X-PC-Date
Content-Encoding
X-CST
X-WPE-Loopback-Upstream-Addr
X-DIS-Request-ID
X-Logged-In
Keep-Alive
X-Host
X-CDN
X-Cache-Hit
X-Rid
X-Port
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-User
X-Cache-Enabled
X-Server-Powered-By
X-Endurance-Cache-Level
X-Tumblr-Pixel-1
X-Server
X-Nginx-Cache-Status
X-Robots-Tag
X-Original-Date
X-Accel-Version
X-Seen-By
X-Wix-Request-Id
X-Turbo-Charged-By
X-Tumblr-Pixel-2
X-Drupal-Dynamic-Cache
X-Page-Speed
X-Pad
X-Content-Powered-By
X-Content-Digest
X-Proxy-Cache
X-Forwarded-For
X-Wix-Punisher
X-AH-Environment
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
WP-Super-Cache
X-Rack-Cache
X-NewRelic-App-Data
X-Varnish-Cache
X-Forwarded-Proto
X-Sorting-Hat-PrivacyLevel
Content-Security-Policy-Report-Only
X-GitHub-Request-Id
X-Tumblr-Pixel-3
X-LiteSpeed-Cache
Edge-Control
SPRequestGuid
X-Request-Country
X-SharePointHealthScore
X-MS-InvokeApp
MicrosoftSharePointTeamServices
X-XRDS-Location
X-Cache-Lookup
Timing-Allow-Origin
X-Cnection
X-SERVER
X-Newrelic-App-Data
X-Node
Cf-Railgun
X-Amz-Request-Id
X-Amz-Id-2
X-FW-Hash
X-Died
X-Webcom-Cache-Status
X-Trace
X-Content-Security-Policy
Charset
X-FW-Type
X-FW-Static
X-FW-Serve
X-Webserver
X-FullPageCaching
Request-Id
Edge-Cache-Tag
X-PhApp
X-HS-Cache-Config
X-CF-Powered-By
X-HS-Content-Id
MicrosoftOfficeWebServer
X-Hits
Request-Context
SPIisLatency
X-PHP-Backend
SPRequestDuration
X-BC-Stapler
X-INKT-URI
X-INKT-SITE
Access-Control-Max-Age
X-Safe-Firewall
EagleId
Composed-By
X-Swift-CacheTime
X-Swift-SaveTime
Access-Control-Expose-Headers
Grace
Served-By
X-CDN-Pop
X-CDN-Pop-IP
Liferay-Portal
X-Hyper-Cache
X-HS-Combine-CSS
X-Spip-Cache
X-Backend-Server
X-VCache
X-Dw-Request-Base-Id
X-Server-Name
X-Tumblr-Pixel-4
X-Device
X-Fastly-Request-ID
X-Microcache
X-Firenze-Processing-Times
X-RateLimit-Remaining
X-RateLimit-Limit
X-LiteSpeed-Cache-Control
X-Cloud-Trace-Context
X-FB-Debug
X-Clacks-Overhead
X-RateLimit-Reset
Rating
X-Jimdo-Instance
X-Jimdo-Wid
Content-Style-Type
Surrogate-Control
Front-End-Https
Content-Script-Type
X-Loop
X-TNCMS
Xkey
X-ServerName
X-Acc-Exp
X-DDC-Arch-Trace
Public-Key-Pins
X-User-Agent
Refresh
X-DNS-Prefetch-Control
X-Cache-Config
X-Sol
Response
X-Middleton-Response
Display
X-Middleton-Display
X-Vtex-Processado-Em
X-StackifyID
X-XN-XNHTML
X-XN-Trace-Token
X-Age
X-Tumblr-Content-Rating
X-Frame-Option
Real-Hostname
Fpc-Cache-Id
X-Hostname
X-SS-Location
X-SS-Conf
X-Px
X-Generated-By
X-WebKit-CSP
X-Zen-Fury
X-Cached
X-N-OperationId
X-Topify-Platform
X-Tumblr-Pixel-5
X-Dscp-Value
X-Correlation-Id
X-Magento-Tags
X-HOST
X-Amz-Version-Id
X-Request-Time
PageSpeed
X-OneAgent-JS-Injection
X-MiniProfiler-Ids
P-LB
P-WS
TCN
X-Whom
Rt-Fastcgi-Cache
X-CMS-Version
X-Url
X-URL
X-Msg-2-Log
X-Cached-By
X-DynaTrace
X-Kinsta-Cache
X-B-Cache
X-Outils-CS
X-From
X-Handled-By
X-DynaTrace-JS-Agent
Product
Access-Control-Request-Method
X-Ruxit-JS-Agent
X-Content-Options
X-AspNetWebPages-Version
Imagetoolbar
X-Debug-Info
X-Edge-Location
X-Varnish-Cache-Hits
X-Cache-Rule
X-Upstream
Public-Key-Pins-Report-Only
Surrogate-Key
Powered
X-Via-JSL
X-Cdn
Host
X-Engine
ServedBy
X-SRCache-Store-Status
X-SRCache-Fetch-Status
Fhost
DynaTrace
X-Varnish-TTL
Edge-Control-Message
Alternate-Protocol
X-CacheServer
X-Recruiting
X-Accel-Expires
No
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-Signature
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Remote-Cache
X-Vtex-Processed-At
X-LBLID
X-Fastcgi-Cache
X-Track
X-Application-Context
X-LW-Cache
X-Umbraco-Version
X-Goog-Hash
X-Platform
X-Location-Id
X-Developer
X-Hosted-By
Generator
X-Response-Time
X-Micro-Cache
Fastcgi-Cache
X-ApacheServer
X-PERF
X-UD-Method
X-Platform-Router
X-Powered-By-VTEX-Janus-Edge
X-Platform-Processor
X-Returned-From
X-Passed-To-DLL
X-Original-Request
X-Returned-From-DLL
X-Platform-Cluster
X-Actual-URL
Pagespeed
Arr-Disable-Session-Affinity
X-Passed-To
X-TransIP-Balancer
X-Tec-Api-Version
X-Returned-From-PostProcessResponse
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Status
X-Tec-Api-Origin
Retry-After
X-Tec-Api-Root
Dmn
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Shop-Id
X-NWS-LOG-UUID
X-Defender
X-Magento-Cache-Debug
X-Cache-Info
X-Rnd
X-Loopia-Node
X-Version
X-Instart-Request-ID
X-Stale
X-Microcachable
X-Device-Type
HTTPS
X-Cache-Age
X-Varnish-Host
X-VARNISH-Cache
Origin
X-BS
X-Cache-TTL
X-I-Sp
WZWS-RAY
X-Litespeed-Cache
X-Powered-By-360WZB
X-URLSCHEME
X-Source
X-F-Cache
Ohc-File-Size
X-Supported-By
X-HS-Content-Campaign-Id
Akamai-IP
X-TransIP-Backend
X-Dispatcher
Content-Hash
X-RESOURCE
X-FORWARDED-FOR
Fastly-Debug-Digest
Cache-Provider
X-Cache-Tags
X-Rocket-Nginx-Bypass
X-Varnish-HitMiss
X-Varnish-Count
X-I
X-Tumblr-Pixel-6
X-S
X-Cache-Operation
USPLoggingUUID
X-Server-ID
X-Storage
Version
X-Platform-Server
X-Cache-Key
X-Pantheon-Site
X-Pantheon-Phpreq
Surrogate-Key-Raw
RTSS
X-Pantheon-Environment
X-Gamma-Serve
X-Matrix-Proxy
X-Matrix-Server
X-Vcap-Request-Id
X-ATG-Version
X-LB
X-NetCat-Version
X-EdgeConnect-Origin-MEX-Latency
X-Front
X-Page-Cache
X-Translation
X-App-Hosting
Last-Published
X-Microcache-Status
X-Powered-By-VelaWeb
X-Shard
X-Varnish-RemainingLife
X-Varnish-ObjectSource
X-Varnish-RemainingTTL
X-Varnish-GracePeriod
X-Varnish-Seen-By
MIME-Version
X-Cluster-Node
X-Expires-Orig
X-Platform-Cache
X-Director
Allow
X-Route-Server
X-Art-Request-Id
X-CSRF-Protection
X-Hypernode
X-Environment
X-Varnish-Age
X-Revision
Pool
X-ORACLE-DMS-ECID
X-Sapient
X-Content-Encoded-By
Wsr-Cache
X-EdgeConnect-MidMile-RTT
X-Ttl
X-Ezoic-Cdn
X-LB-Node
Cache-Key
Content-Disposition
IBM-Web2-Location
X-Url-Base
X-Drupal-Cache-Tags
X-Flow-Powered
X-Abgroup
X-SV-CreatedAt
X-SV-Expires
X-SV-FromDBCache
X-SV-Edge
X-SV-Pid
X-NoCache
X-Grace
X-SV-Nginx-Duration
X-SV-Duration
Powered-By-ChinaCache
X-SV-Cacheable
X-SV-CacheTags
Content-MD5
X-IsCacheURL
X-Cache-Namespace
X-Daa-Tunnel
X-Litespeed-Cache-Control
X-Server-Upstream
X-Edge-IP
X-Lambda-Id
X-SSL-Cipher
X-Cache-Debug
X-SSL-Protocol
X-Firenze-Processing-Time
X-ARC
X-CJ-Soft
SSPAppContext
X-Varnish-Ttl
Section-Io-Id
X-Xrds-Location
X-Varnish-Cacheable
X-Github-Request-Id
X-Nginx-Cache
X-Dispatch
S-Cnection
X-Cache-Type
X-Cache-Control-Orig
Srv
X-Drupal-Cache-Contexts
FAI-W-FLOW
X-Time
X-Magento-Cache-Control
Lsrequestid
Page-Completion-Status
X-Varnish-Backend
Accept-Encoding
X-Cache-Only-Varnish
X-Cache-Lifetime
X-Varnish-Url
ServerID
X-Hiawatha-Cache
Cneonction
Backend
Location
Content-Encoding-Handler
X-PwB-Node
X-Servedby
X-GeoIP-Country-Code
Proxy-Connection
X-Vhost
Pv
X-Ss-Location
Node
X-Ss-Conf
X-Cache-Expires
X-Generated
ServerName
X-Duration
Fw-Via
X-RequestId
X-Cache-Server
X-Amz-Meta-S3cmd-Attrs
X-Debug
X-Middleware-Start
SN
Use-Proxy
PICS-Label
X-Client-IP
Nodo
X-N
X-AOL-HN
X-Proxy
X-Akamai-Transformed
X-Cache-Device-Type
X-Nbs
X-Fastly-Request-Id
X-Server-Id
If-Modified-Since
X-Varnish-IP
X-ServerID
AMF-Ver
X-GUploader-UploadID
X-Country-Code
X-Goog-Generation
X-Magnolia-Registration
X-Speed-Cache-Key
X-Speed-Cache
X-Processing-Time
X-Goog-Stored-Content-Length
X-Discourse-Route
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-Goog-Metageneration
X-Geo-Country
X-Varnish-Retries
X-Pressidium-NinukisWP-Ver
X-ACMCache
X-High-Performance
X-GeoIP-Country-Name
Req-Id
X-CF-Passed-Proto
X-Frontend
X-SO
X-ID
X-Cache-Level
X-Cookie-Domain
X-Empowered-By
Server-Name
X-Akamai-Device-Model
X-Akamai-Device-Characteristics
X-Worker
Adm-Server
X-FW
X-UPSTREAM
X-Cache-CFC
X-Oneagent-Js-Injection
Pf.Web.Request.Id
X-Always-Cache
NnCoection
X-SRCache-Key
X-Cache-Engine
IM-Version
X-ORACLE-DMS-RID
X-Real-Server
X-Dynatrace-Js-Agent
X-Location
Cache
X-Purge-URL
X-Cache-Fix
X-Cache-PageType
X-Content-Age
P-ID
X-Rocket-Nginx-Serving-Static
X-Yadis-Location
Server-Info
Local-Info
SEOMOZ
X-Cache-Handler
X-Amz-Storage-Class
MJ12bot
X-JG-Page-Cache
X-Esi
X-Browser
Accept-Charset
SRV
Author
X-PF-Uncompressing
X-Cache-Control
Cached
X-OpenCart-Lightning
X-Adobe-Content
X-Sentry-ID
Qs-Cache
X-Purge-Host
X-WR-Flags
X-Correlation-ID
X-App-Server
X-Runtime-Rack
X-Adobe-Loc
X-DealerOn
X-Srv
Nitro-Cache
Content-Transfer-Encoding
X-BKSrc
X-Content-Type-Option
X-Server-Instance
X-Unbounce-PageId
X-Last-Modified
X-Unbounce-VisitorID
X-Unbounce-Variant
X-CDN-Forward
Xc-Version
X-Framework
X-Origin
X-Config-Blacklist-Version
X-NB-Cached-Page
Thanks
X-Server-IP
X-Id
X-TTL
X-SDS
Cm-Server
X-Pagename
X-LP
X-Abuse
CacheControlHeader
X-HydroSheep
X-BackendServer
S
Eomportal-Instance
X-Content-Security-Policy-Report-Only
NODE
X-ClientSide-Caching
X-Hit-Cache
Custom-Header
Server-Timing
X-Mobilized-By
X-AF-Userserver
Cteonnt-Length
MC
HAVer
Front
X-VARITI-CCR
HCVer
X-HW
X-LB-Server
X-Ruxit-Js-Agent
X-Sucuri-ID
X-WPL-DATA
X-SRV
X-Varnish-Hits
X-Sys-Req-ID
X-HTML-Minification-Powered-By
X-Session-ID
X-Rq
X-FTR-Request-ID
ServerTokens
ServerSignature
X-AEM
X-Dns-Prefetch-Control
Frame-Options
Cache-Tags
VServer
X-LW-Web-Server
X-Shield-Request-Id
SiteSpeed
Magicmarker
X-Processed-By
X-Gateway-Skip-Cache
NetMindSessionID
X-VTEX-Cache-Status-Janus-Edge
Contao-Page-Layout
WWW-Authenticate
X-DEBUG
X-Gateway-Cache-Key
X-Gateway-Cache-Status
X-Smartcache-Timeout
X-Smartcache-Keys
X-Orig-Vary
X-Cache-Dispatcherpragma
X-WN-ClientGroup
X-Runtime-Memory
X-WP
X-Garden-Version
Max-Age
Cache-Tag
X-Cache-Dispatchercachecontrol
W
X-Resty-Request-Id
X-Fedora-School-Id
Ufe-Result
SVR
WN
X-Trace-Id
X-ASAP-Cache
X-Page
X-Clara-ASAP
Tracecode
Content_type
NtCoent-Length
X-Route-To
X-Jphone-Copyright
X-Webkit-CSP
X-Traffic
EagleEye-TraceId
X-Compress-Hint
X-CB-Server
X-GeoIP
X-Plat
Description
Keywords
X-Varnish-Hostname
X-Yottaa-Metrics
X-Yottaa-Optimizations
A-Powered-By
X-A
Server-ID
RN-Server
X-Generated-Time
XX
X-Env
X-EPiphany-Vid
X-Unique-ID
X-Acquia-Debug-Password
X-Connection-Hash
X-CacheResult
X-Forwarded-Host
X-Transaction
X-Client-Image-Vid
X-Twitter-Response-Tags
X-CAPServer
X-ServerIndex
Web-App-Origin-Name
X-Drectory-Script
X-Client-Vid
X-Avg-Cookie-Expires
AsisCache
X-AVG-Country-Code
X-Akamai-Edgescape
Ram
X-SERVER-NAME
VANITY-HOST
X-Redman-Final-Url
Noq
Ramp
X-Redman-Backend
Proxy-Agent
X-Symfony-Cache
X-WA-Info
Environment
ScoreTracker
X-Cache-Doesi
X-Sorting-Hat-Expire-Cache
Yoncu-Errno
X-NginX-Server
X-Response
X-RDP
X-PHP-Response-Code
X-Environment-Context
X-L-Path
SBGI-9
X-ARRServer
X-Webstats-RespID
SBGI-RealPath
Og
X-Viator-Tapersistentcookie
SBGI-Device
SBGI-RenderTime
X-Disney-Akamai-Rule
X-Hosting-Env
X-WebKit-CSP-Report-Only
Access-Control-Allow-Header
Ibf5scheme
N365rili
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
Pics-Label
SHInfo
X-Desc
SG
X-VNode
X-RiS-UFDI
X-Cache-Node
X-Cache-On
X-CRA-DC
X-FireWall-Port
X-Application
IISExport
X-Varnish-Action
X-SDE-Name
SBGI-5
X-Balanceador
SBGI-7
X-TTFB-L
X-Varnish-Debug-Age
X-Stage
Play-Detected-UserAgent
X-TTFB
X-SmugMug-Values
X-Varnish-Id
Smug-CDN
X-SmugMug-Hiring
Play-Detected-Device
MW-Webserver
Service-Worker-Allowed
Cmstype
Cmsid
X-Force
Machine
X-Sucuri-Cache
X-VC-Enabled
X-PRAM
SBGI-1
X-Varnish-Debug-TTL
BALANCEDTO
X-Time-Microsecs
X-Session-Reinit
Fastly-Backend-Name
SBGI-10
AC-ELC
X-Bip
X-Cache-Varnish
X-Vcache
From-Origin
X-VC-TTL
X-Cdn-Forward
X-SV
Beyond-Iis
Url
X-Proto
Dispatcher
X-GoCache-CacheStatus
X-Magento-Action
X-Backend-Status
X-Resource
X-Highwire-RequestId
X-TB-M
Dis-Env
X-Amz-Meta-S3b-Last-Modified
X-Compressed-By
Home
X-Analytics
Paypal-Debug-Id
X-Varnish-Server
X-Distributor
X-MAT-GEO
X-Highwire-SessionId
Hname
Backend-Timing
X-Grid-Server
X-E
X-SmartBan-Host
X-Varnish-ID
X-Culture
X-Fstrz
Ctx
X-Frames-Options
X-Amz-Meta-Content-Md5
X-Runtime-Affili
X-Rack-CORS
Hostname
X-Amz-Meta-Cb-Modifiedtime
X-WHOIS-Cached
X-Autoru-LB
X-AutoRu-App-Id
X-App-Runtime
X-Detected-Device
RequestId
X-SmartBan-URL
X-Streams-Distribution
X-Redirector
X-Secret
X-Autoru-Host
X-Key
X-Src-Webcache
X-Directory-Script
X-Cocoon-Version
X-NginX-Cache
X-Domain-Checked
Xc
X-Lb
X-App-Status
XDomainRequestAllowed
From
X-Provisioner-Version
X-IIJ-Cache
X-Cms-Mode
X-Dev
X-Goog-Meta-Goog-Reserved-File-Mtime
X-HAProxy
Worker
X-Dw-Trace-Id
X-Request-Uri
X-Real-IP
TP-L2-Cache
Nginx-Cache
TP-Cache
Bios
WP-AdvCache-MemCached
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Atraveo-Zone
Accept-Language
Access-Control-Allow-Method
X-Atraveo-Param-Rm
X-Atraveo-Cache-Control
X-Atraveo-ETag
X-Atraveo-Expires
X-Atraveo-From-Varnish-Cache
COMMERCE-SERVER-SOFTWARE
SS
X-EC2-Instance-Id
Web
X-Nitro-Cache
Identity
X-Origin-Server
X-Source-ID
X-Captured
X-Refresh
X-Wikidot-Backend
X-Goog-Meta-Replace
X-Ghost-Cache-Status
X-Goog-Meta-Policy
X-Hosting
X-Data-Request
Traffic-Origin
Id
X-HashTwo
X-OPNET-Transaction-Trace
X-Amcomm-Site
AMP-Access-Control-Allow-Source-Origin
X-Wikidot-Static-Cache
X-Origin-Cache
TC-Cache
TC-Cache-IC
X-LDNR-NOT-ROOT-HL-NOTSET
X-Confluence-Request-Time
X-GSL-Server
X-Rewrite
TC-Cache-U
TC-S-Cache
X-Node-Name
Ec-CorrId
X-OCTOPOD
Ec-Machine
TC-S-Cache-M
X-Airee-Node
X-ServiceProvider
X-Debug-Token
Myheader
X-Search-Id
X-ACCELERATE
Il-Cl
Disablevcache
X-Pubstack
Proxy-Cache
X-Adnet
X-Flex-Community
X-Flex-Lastmod
X-Flex-Tag
X-Flex-Tags
X-Nginx-Host
X-Flex-Lang
X-Flex-Evend
X-Flex-Evstart
X-Info
X-FPC
X-RealServer
X-Resolver-IP
X-DB-Content-Length
X-Varnish-Cache-Local
X-Machine
X-Map-Context
X-Remote-Addr
X-Cluster
X-B2f-Not-Route
X-Depends
X-DTC
X-Cache-Via
NLCacheNote
X-Aramark-SID
X-Sites
OriginServer
X-Req-Head-Response
X-MidCOM-Meta-Cache
SERVER-ID
X-Render-Time
X-HP-Trace-Project
X-Mobile-URL
FRONT-END-SECUREBROWSER
X-Bcwwwid
X-Agent
Progma
X-HP-Trace-ID
Kanooh-Host
X-MCB-Server
Device
X-Config-By
Aoestatic
X-KoobooCMS-Version
X-Cache-Extended
X-Batcache
X-SH-Cache-Status
X-NID
X-Cache-TTL-Remaining
Strikingly-Cached
Hummingbird-Cache
Strikingly-Cache-Region
X-Author
X-Magento-Lifetime
Strikingly-Cached-Version
CLMOB
X-Akamai-3PM-SW-Version
X-Avvio-Cms-Cacheload
VC-NoCache
HitType
X-Distil-CS
X-ESI
Server-Id
X-V
X-Sid
X-HS-Status
Ohc-Response-Time
X-SuperCache
X-CACHE-TTL
X-Gannett-Site-Version
BackendServer
X-DataDome
PServer
X-4ormat-Cacheable
X-NodeID
X-Proxy-Cache-Key
X-IP
X-DDM-SERVER
X-DDM-SERVER-UPDATED
Accept-CH
X-DSMX-Render-MS
X-DynamicCache
CommercePlatform-Version
X-App
Upgrade-Insecure-Requests
X-Cache-Me-Harder
X-Powered-By-Home.Pl
Ez
OracleCommerceCloud-Sandiego
X-Rack-Cors
Actual-Object-TTL
X-Zendesk-User-Id
X-Zendesk-Origin-Server
OracleCommerceCloud-Version
X-Amz-Id-1
PagesDisplayed
NS-VaryByCustom-Key
X-DN-Cache-Control
X-ASAP-Age
X-Backend-Host
X-Box
Lb
X-7d-Instance-Id
X-DSMX-Rewrite-MS
X-Gyrobase-Publication
F5-IpCliente
Gzip
Content-Generator
ClientIP
X-Hstore
X-Hrouter
X-Client-Ip
X-7d-Trace-Id
X-Served-Server
X-ETag
X-CacheID
X-Protected-By
Ews
X-AISO-Cache
X-AISO-Cacheable
X-Header
X-Pagely-Cache
X-Tag-Playlist
X-AISO-Server
Copyright
X-Country
Cleartype
EN-User
X-Proxy-Skip
X-XHR-Current-Location
X-PM-ID
X-LBPoolMember
X-Server-Addr
X-Batcache-Reason
X-Rewritten-By
X-Serv
Ttl
X-Cache-Keep
X-Pj-Cache-Status
Server-Ip
X-Reflector
X-Reflector-Cache
X-Nginx-Request-Processing-Time
X-HP-CAM-COLOR
X-ManagedFusion-Rewriter-Version
NZSpeedy
X-Cache-Detail
X-JSESSIONID
X-HA
X-Debug-Message
X-Sn-Servicetimems
X-FastCGI-Cache-Status
MageStack-Config
MageStack-Cacheable
MageStack-Cache-Status
Amfplus-Ver
MageStack-Cache
MageStack-Area
X-ServerAddr
Key
X-UT-Cache
MageStack-Cache-Hits
X-Serverid
MageStack-Cache-Warning
X-UA
MageStack-Cache-Lifetime
X-Middleton-PageSpeed
ViewMode
X-CSRF-Token
X-Cname-TryFiles
X-CloudBurst-WordPress
X-Debug-Token-Link
X-Deity
X-Domino-CacheValidationWithETagResult
X-Domino-CacheValidationWithETagReason
X-CloudBurst-Frontend
HA-Geocountry
X-Beatles
X-Apm-Telemetry-Syncmark
X-Varnish-Instance
X-Fpc
X-Cache-ID
X-CloudBurst-Backend
X-Cache-Time
X-HEAD
X-Header-Treatment
X-Activity-Id
Viewport
MageStack-Debug
X-UPServer
X-Amz-Meta-Version-Id
X-AppVersion
X-Time-Zone
X-Varnish-Cached
Tesla.Performance
X-Varnish-Cached-TTL
X-Made-On
X-Served
TZ-Server
MS-CV
Generate-Time
X-Az
X-Script
X-MainProfileID
X-MainProfileCategory
X-Container
X-MainProfileName
X-MainProfileURL
FindLaw
X-Obvious-Tid
X-Obvious-Info
Tk
Fastly-Restarts
X-Middleton-Pagespeed
X-Instance-Id
Session-Id
X-Nginx-Request-Time
X-RiS-PX
X-WebNode
X-UPSTREAM-Address
Requested-Host
Swift-Performance
No-Cache
Content-Cache
X-ELB
UrlWatchModule-Time
X-AppServer-Cache-Rule
X-Generation-Time
X-D-Time
X-Via-NSCOPI
X-VG-WebCache
X-Phpwcms-Page-Processed-In
X-Catalyst
X-Hash
X-Phpwcms-Release
X-Homeaway-Requestmarker
X-SE-Debug
X-REDIRECTSERVER
ProxiaInstanceId
CommunityServer
X-CGP
X-CH-Device
X-Cachable
X-FIRSTBase
X-HeBS-Cache-Status
X-M-P
X-Instart-Cache-Id
X-I-V
X-Beresp-Ttl
X-B
MageStack-Tag
MageStack-PageSpeed
MageStack-Magento-Version
MageStack-Web-Node
X-Server-FQDN
Provided-Host
RSB-LINK
X-M-T
X-M-V
Z-Tpl
Y-Trace
X-MCF-ID
AR-ATIME
AR-CACHE
AR-SID
AR-PoweredBy
X-Transaction-Name
X-T
X-Pool-Info
X-Pageid
X-Mw-Workerstats
X-Q-S
X-RAMCache
X-S-V
X-S-C
MageStack-Loadbalancer
X-CloudBurst-Cache
X-DS1D
DrivedBy
Language
Webserver
HA-Geolon
HA-Georegion
ID
X-CO-Host
X-UnsetCookies
X-SCM-Server-Number
X-Varnish-Grace
X-Webcelerate
X-ZSITES-DNS
X-Who
TheAnswer
Warning
X-Cjtype
X-Cacheable-TTL
HA-Geolat
Load-Balancer
NKBVHEADER
BlockPHPCallEnd
X-BServer
X-BPool-Fx-Cache
X-Blog
X-Cache-Bypass
X-BPool
X-BPool-Back
X-BPool-Bx-Cache
X-Enhanced-By
X-FG-RequestId
X-Meta-MSSmartTagsPreventParsing
DeleGate-Ver
X-Meta-Imagetoolbar
Provider
X-AMAZEEIO
X-CDN-RULE
X-Timestamp
X-Meta-MSThemeCompatible
X-SilverStripe-Cache
X-CDN-COMPRESS
X-Node-App
X-Nginx-Page-Cache
X-Proxy-Id
X-Artvisual-Server
HA-Host
X-Secure
HA-Urlpath
X-Pass-Through
X-PBY
IES-Server
X-PROCESSED-BY
X-Highwire-Smart-Code
X-Highwire-Sitecode
X-NO-BREACH
X-ReqId
X-Hit
HA-Ipaddr
HA-Servedtime
X-Layout
L5d-Success-Class
X-Cache-Original-TTL
X-Cache-Id
Response-Time
X-Custom-Header
MSThemeCompatible
X-Omnis-SiteID
ServerIP
Hamster
MachineName
X-S-Misc
User-Agent
DB-Nickname
X-B3-Spanid
Debug-Status
MSSmartTagsPreventParsing
HA-Cloudapp
Arrnode
EQ-Cache
GranicusServer
HostName
X-Unique-Id
X-VLoc
Control-Cache
X-B3-Traceid
X-Route
X-Full-Url
X-Svr
HA-Geocity
CmsfirstPublishTimestamp
Session-From
X-ACLR-Version
StatusCode
Page-Template
X-Turpentine-Esi
X-VC-Cache
X-Static
Server-Hostname
SB-Site-Device
SB-Cache-Remaining
SB-Cache-Life
X-Machine-Name
X-VC-Cacheable
X-Title
Cacheid
X-VC-Hash
X-W3TC-Minify
CpuTime
X-VC-Debug
X-Pixelsilk-Version
X-Akam-SW-Version
X-HOSTNAME
FastCGI-Cache
X-Pixelsilk-Server
X-FORWARDED-PROTO
WSCLoggingUUID
X-CPU-Time
Serverid
X-Geo-IP
Countrycode
Xcache
X-Built-With
Cache-Status
X-SH-Cache-Disabled
X-Dynamic-Cache
X-Skip-Cache
CS-SERVER
Expiries
WP-FROM-CACHE
X-Dealeron-Backend
X-CACHE-KEY
Head
X-Cache-TTL-Age
X-Dealeron-Original-Url
X-Cache-TTL-Current
X-Old-Content-Length
X-Locale
X-Ants-Machine-Id
X-M
X-Gateway-Rate-Limit-Delayed
X-NMT-Proxy
X-Ants-Host
CDCHOST
X-Origin-Date
X-RequesterIP
X-Site
X-Theme
X-Test-Debug
X-Varnish-Cache-Ttl
X-Gateway-Rate-Limit-Conn
X-Prerendered
DbServerName
X-Reason-Bp
X-ClusterID
X-Backend-Name
X-XHTML-Minification-Powered-By
TestCC
V-Age
CD4
Rewriter
X-Varnish-Debug-Hits
X-PBS-Appsvrip
X-MSEdge-Ref
X-NewsFlow-Sitename
X-MyName
X-PBS-Appsvrname
X-PBS-Fwsrvname
X-Svr-Proxy
X-SSLUpstream
X-SSLProxy
X-Prerender-Token
X-Healthy
X-Cache-FS-Status
X-Proxy-Backend
Request-Filtered-By
X-Sol-Ease
X-Server-Hostname
Referer
Powered-By-115
X-ProcessESI
ReqUrl
X-RemovedCookies
X-Instance
X-Beatles-Hits
X-Ssl-Cipher
Edgecast
SINA-LB
X-Request-Received
X-Request-Processing-Time
X-Cache-ASPX
X-Distributed-By
X-K8s
SINA-TS
V-TTL
X-This-Proto
Be
Redirect-Reason
X-Optimization
X-Max-Age
Www.Aujourdhui.Com
X-WR-MODIFICATION
X-Built-By
X-BIT-Node
X-Cache-V
DNNOutputCache
Container
Realaction
Actioncode
X-Server-Generated
X-Server-Instance-Name
X-Cacheable-By-Varnish
MwpReleaseVersion
Returned-Status
X-Status
User-Cache-Control
X-ACache
X-Session-Id
X-Restarts
SB-Site-IE-VERSION
X-Uncacheable
X-Ao-Cache-Key
X-Cache-Set
X-Upstream-Status
X-Clx-Request
X-DEBUG-HOST
X-Olaf
VAR-Cache
Access-Control-Request-Headers
Arrow-RequestId
Resin-Trace
X-DEBUG-TTL
X-DeliveryServer
X-Upgrade-Enabled
Apple-Itunes-App
X-Member
X-Tt-Dbg
X-PoweredBy
X-ENV
X-MSU-SOURCE
X-Test
X-Fastly-Backend-Reqs
X-Would-Your-GrandPa-Wait
X-Your-GrandPa-Would-Wait
PB-PID
X-TTL-Age
X-TLS-Version
X-DevSrv-CMS
X-Does-He-Have-Time
PB-RID
X-Cache-LB
X-SayCDN-TTL
X-SCProxy
Note
X-Say-TTL
X-Say-Cacheable
X-Mobile-Rewrite
X-Processed
X-PG