Threat Level: green Handler on Duty: Lorna Hutcheson

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
X-Cache
X-AspNet-Version
Age
Content-Language
X-Pingback
P3P
Via
X-UA-Compatible
Upgrade
Expect-CT
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Check
X-Template
X-Language
X-Cacheable
X-Varnish
Alt-Svc
X-Generator
X-Buckets
X-Drupal-Cache
X-Xss-Protection
P3p
X-Request-Id
Referrer-Policy
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Powered-By-Plesk
X-Download-Options
Host-Header
Content-Location
MS-Author-Via
X-ShopId
X-Runtime
X-Sorting-Hat-ShopId
X-Sorting-Hat-Section
X-Sorting-Hat-ShopId-Cached
X-Dc
X-ShardId
X-Sorting-Hat-PodId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PrivacyLevel
X-Alternate-Cache-Key
X-Sorting-Hat-FeatureSet
X-UA-Device
X-Powered-CMS
X-IPLB-Instance
X-Served-By
X-FRAME-OPTIONS
Cartoon
Access-Control-Allow-Headers
X-Request-ID
Access-Control-Allow-Methods
X-Amz-Cf-Id
Access-Control-Allow-Credentials
X-Cache-Status
Status
X-Via
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
CF-Cache-Status
X-ServedBy
X-Contextid
X-PC-Hit
X-PC-Key
X-Mod-Pagespeed
X-Backend
X-CST
Powered-By
X-PC-Host
X-PC-AppVer
X-PC-Date
Content-Encoding
X-Host
X-WPE-Loopback-Upstream-Addr
X-Logged-In
X-Server
X-DIS-Request-ID
X-CDN
Keep-Alive
X-Rid
X-Cache-Hit
X-Port
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-Cache-Enabled
X-Endurance-Cache-Level
X-Server-Powered-By
X-Tumblr-Pixel-1
X-Original-Date
X-Accel-Version
X-Nginx-Cache-Status
X-NewRelic-App-Data
X-Robots-Tag
X-Ua-Compatible
X-Drupal-Dynamic-Cache
X-Seen-By
X-Wix-Request-Id
X-Page-Speed
X-Turbo-Charged-By
X-Wix-Punisher
X-Tumblr-Pixel-2
X-Forwarded-For
X-Content-Powered-By
X-Proxy-Cache
X-Forwarded-Proto
X-Content-Digest
X-AH-Environment
X-Pad
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Varnish-Cache
X-LiteSpeed-Cache
Content-Security-Policy-Report-Only
WP-Super-Cache
X-Rack-Cache
X-GitHub-Request-Id
X-Tumblr-Pixel-3
X-Request-Country
Edge-Control
SPRequestGuid
X-XRDS-Location
X-MS-InvokeApp
X-SharePointHealthScore
MicrosoftSharePointTeamServices
X-Cache-Lookup
Timing-Allow-Origin
X-Cnection
X-Node
X-FW-Hash
X-Content-Security-Policy
X-Amz-Request-Id
X-Amz-Id-2
Cf-Railgun
X-FW-Type
X-FW-Serve
X-FW-Static
Charset
X-FullPageCaching
Request-Id
X-Died
X-Trace
X-Webcom-Cache-Status
Request-Context
X-Hits
X-PhApp
Edge-Cache-Tag
X-HS-Cache-Config
X-BC-Stapler
X-HS-Content-Id
X-CF-Powered-By
SPIisLatency
SPRequestDuration
MicrosoftOfficeWebServer
X-INKT-URI
X-INKT-SITE
X-PHP-Backend
X-Newrelic-App-Data
Composed-By
Access-Control-Expose-Headers
X-Webserver
Access-Control-Max-Age
Grace
X-Safe-Firewall
X-Swift-CacheTime
EagleId
X-Swift-SaveTime
Served-By
X-Spip-Cache
X-CDN-Pop
X-CDN-Pop-IP
X-Fastly-Request-ID
X-Backend-Server
X-Hyper-Cache
Liferay-Portal
X-VCache
X-Dw-Request-Base-Id
X-SERVER
X-Tumblr-Pixel-4
X-Server-Name
X-Firenze-Processing-Times
X-Device
X-StackifyID
X-FB-Debug
X-Microcache
Surrogate-Control
Refresh
X-SS-Location
X-SS-Conf
X-LiteSpeed-Cache-Control
X-Cloud-Trace-Context
Front-End-Https
Content-Style-Type
X-DNS-Prefetch-Control
X-RateLimit-Remaining
Xkey
Content-Script-Type
X-RateLimit-Limit
X-Clacks-Overhead
X-Loop
X-TNCMS
Public-Key-Pins
X-XN-XNHTML
X-RateLimit-Reset
X-XN-Trace-Token
Rating
X-Jimdo-Instance
X-Jimdo-Wid
X-HS-Combine-CSS
X-Acc-Exp
X-DDC-Arch-Trace
X-Vtex-Processado-Em
X-Age
X-User-Agent
X-WebKit-CSP
X-Cache-Config
Fpc-Cache-Id
X-Dscp-Value
X-N-OperationId
X-Px
X-Middleton-Response
X-Middleton-Display
Response
X-Sol
X-ServerName
Display
X-Hostname
X-Cached
X-Topify-Platform
X-Generated-By
X-Url
X-Zen-Fury
X-Correlation-Id
X-Tumblr-Content-Rating
X-Kinsta-Cache
X-Tumblr-Pixel-5
X-MiniProfiler-Ids
TCN
X-Handled-By
X-Magento-Tags
X-Request-Time
P-LB
P-WS
X-Whom
X-Outils-CS
X-Amz-Version-Id
X-B-Cache
X-Loopia-Node
X-OneAgent-JS-Injection
Dmn
X-DynaTrace
X-CMS-Version
X-Content-Options
Edge-Control-Message
ServedBy
X-Msg-2-Log
X-LBLID
PageSpeed
X-Cached-By
X-From
Rt-Fastcgi-Cache
X-Debug-Info
Imagetoolbar
X-URL
X-Varnish-TTL
X-DynaTrace-JS-Agent
X-Ruxit-JS-Agent
Access-Control-Request-Method
X-Goog-Hash
X-Edge-Location
Surrogate-Key
Powered
Product
X-Location-Id
Host
X-Passed-To
X-Returned-From-DLL
X-Varnish-Cache-Hits
X-Passed-To-DLL
X-Actual-URL
Public-Key-Pins-Report-Only
X-Original-Request
X-Returned-From
X-CacheServer
X-Signature
X-Upstream
X-Fastcgi-Cache
X-AspNetWebPages-Version
X-Cluster-Node
X-FORWARDED-FOR
X-Cache-Rule
DynaTrace
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-Shard
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Passed-To-BeforeDispatch
X-Varnish-Beresp-Ttl
X-Returned-From-PostProcessResponse
Retry-After
X-Stale
X-NWS-LOG-UUID
X-Vtex-Processed-At
No
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Remote-Cache
X-Engine
X-Accel-Expires
X-Platform
X-Umbraco-Version
Fhost
Alternate-Protocol
X-F-Cache
X-Recruiting
X-Art-Request-Id
X-Micro-Cache
X-Via-JSL
X-Version
X-Platform-Router
X-Platform-Processor
Arr-Disable-Session-Affinity
X-Cache-Info
X-Varnish-Host
Ohc-File-Size
X-Rocket-Nginx-Bypass
X-LW-Cache
X-Magento-Cache-Debug
X-Platform-Cluster
X-PERF
X-Response-Time
X-ApacheServer
X-Hosted-By
Fastcgi-Cache
X-Source
X-UD-Method
X-Developer
X-Matrix-Server
X-HS-Content-Campaign-Id
X-Matrix-Proxy
X-Device-Type
X-Cdn
X-Supported-By
X-Microcachable
X-URLSCHEME
X-Instart-Request-ID
X-S
Last-Published
WZWS-RAY
X-Application-Context
X-EdgeConnect-Origin-MEX-Latency
X-Powered-By-360WZB
X-App-Status
Generator
Pagespeed
X-HOST
X-Gamma-Serve
Cache-Provider
X-Platform-Server
X-TransIP-Balancer
X-Rnd
Origin
X-Track
X-Storage
X-Translation
X-Tumblr-Pixel-6
X-Microcache-Status
X-Powered-By-VelaWeb
X-RESOURCE
X-Hypernode
X-TransIP-Backend
X-Varnish-Count
X-Varnish-HitMiss
X-Shop-Id
X-Defender
X-App-Hosting
X-Daa-Tunnel
X-BS
Content-Hash
X-I-Sp
Version
X-NetCat-Version
X-Drupal-Cache-Tags
X-Platform-Cache
X-Route-Server
X-Cache-TTL
Akamai-IP
X-Server-ID
X-WebServer
RTSS
X-Front
HTTPS
USPLoggingUUID
X-Flow-Powered
Cache-Key
Surrogate-Key-Raw
X-Powered-By-VTEX-Janus-Edge
X-Duration
X-Pantheon-Phpreq
X-Pantheon-Site
X-EdgeConnect-MidMile-RTT
X-Pantheon-Environment
Pool
X-ATG-Version
X-I
Lsrequestid
X-Varnish-Seen-By
X-Varnish-RemainingTTL
X-Varnish-ObjectSource
X-Varnish-GracePeriod
ServerID
X-Varnish-RemainingLife
X-Dispatcher
X-Frame-Option
X-Cache-Age
X-CSRF-Protection
X-Director
X-Cache-Key
X-Vcache
Powered-By-ChinaCache
X-Last-Modified
Allow
X-Cache-Tags
X-Sapient
X-SV-Nginx-Duration
X-Cache-Namespace
X-SV-Pid
X-SDS
Content-Disposition
X-SV-FromDBCache
X-SV-Edge
X-SV-CreatedAt
X-SV-Duration
SSPAppContext
X-Expires-Orig
X-Page-Cache
X-ORACLE-DMS-ECID
X-Cache-Debug
MIME-Version
X-Generated
X-Ttl
X-SV-CacheTags
X-Client-IP
X-Litespeed-Cache
X-Drupal-Cache-Contexts
Cneonction
X-Ezoic-Cdn
X-SV-Cacheable
S-Cnection
X-SV-Expires
X-Cache-Operation
X-Firenze-Processing-Time
X-Content-Encoded-By
SN
Pv
NnCoection
X-Server-Upstream
X-SSL-Cipher
X-Grace
X-Server-Id
X-Environment
X-Magento-Cache-Control
X-CJ-Soft
X-LB-Node
X-Lambda-Id
X-Abgroup
X-SSL-Protocol
X-Origin
Node
X-Varnish-Age
X-Vcap-Request-Id
Server-Timing
X-Revision
X-Debug
X-Varnish-Cacheable
FAI-W-FLOW
X-Time
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-GUploader-UploadID
AMF-Ver
X-Goog-Storage-Class
X-Goog-Metageneration
Req-Id
X-Varnish-Ttl
X-Goog-Generation
X-Amz-Meta-S3cmd-Attrs
Section-Io-Id
X-Gateway-Cache-Status
X-Gateway-Cache-Key
X-Gateway-Skip-Cache
IBM-Web2-Location
X-UPSTREAM
X-Edge-IP
Accept-Encoding
X-Hiawatha-Cache
X-Bb-Deploy-Id
X-N
X-Akamai-Device-Characteristics
X-Oneagent-Js-Injection
Fw-Via
X-ARC
Server-Name
X-NoCache
X-Cache-Control-Orig
X-Runtime-Rack
X-ID
ServerName
Backend
X-Yadis-Location
X-Cache-Server
X-PwB-Node
X-TTL
X-WEBSERVER
X-Cache-Expires
Wsr-Cache
X-Varnish-Url
X-Dispatch
Content-Encoding-Handler
Server-Info
X-Esi
Location
X-Content-Age
X-Cache-Engine
IM-Version
Fastly-Debug-Digest
X-Cache-Only-Varnish
X-Akamai-Edgescape
X-Discourse-Route
X-Redman-Final-Url
X-Redman-Backend
X-AVG-Country-Code
X-ORACLE-DMS-RID
X-Magnolia-Registration
X-Akamai-Device-Model
X-Vhost
Srv
X-AOL-HN
X-Avg-Cookie-Expires
X-Cache-Lifetime
X-Varnish-Backend
X-LB
X-Country-Code
X-Varnish-IP
X-Content-Security-Policy-Report-Only
Nodo
X-IsCacheURL
PICS-Label
S
X-Geo-Country
X-Amz-Storage-Class
Content-Transfer-Encoding
X-GeoIP-Country-Code
Qs-Cache
Proxy-Connection
Content-MD5
X-RequestId
Front
X-App-Server
X-Cache-Type
W
Page-Completion-Status
X-Url-Base
SRV
If-Modified-Since
X-SRV
X-Nbs
X-Sucuri-ID
X-Proxy
X-High-Performance
X-Speed-Cache
X-Varnish-Retries
X-Nginx-Cache
X-SO
X-Speed-Cache-Key
Environment
X-Real-Server
Frame-Options
Nitro-Cache
X-Empowered-By
X-Rq
Accept-Charset
WWW-Authenticate
X-CF-Passed-Proto
CacheControlHeader
X-Stage
X-Always-Cache
X-BKSrc
X-Cache-Handler
HCVer
HAVer
Cache-Tags
Author
X-Cache-Level
X-Resource
VANITY-HOST
X-VARITI-CCR
X-Worker
X-ServerID
Pf.Web.Request.Id
X-FTR-Request-ID
X-Frontend
MC
X-Dynatrace-Js-Agent
X-HTML-Minification-Powered-By
X-BackendServer
Eomportal-Instance
X-SRCache-Key
X-Browser
Contao-Page-Layout
X-Varnish-Server
X-Sucuri-Cache
Cache
X-Cache-Device-Type
Custom-Header
X-Pressidium-NinukisWP-Ver
X-Middleware-Start
X-Processing-Time
X-Config-Blacklist-Version
X-Location
Cached
X-Shield-Request-Id
Cache-Tag
X-WPL-DATA
X-GeoIP-Country-Name
Pics-Label
X-Cookie-Domain
X-Correlation-ID
X-Litespeed-Cache-Control
X-Ruxit-Js-Agent
X-Server-Instance
X-Cache-CFC
X-Akam-SW-Version
X-Dealeron-Original-Url
X-AF-Userserver
X-Content-Type-Option
X-Source-ID
X-Remote-Addr
X-PF-Uncompressing
X-Airee-Node
Cm-Server
Tracecode
X-Dealeron-Backend
X-Env
X-Akamai-3PM-SW-Version
X-Unbounce-Variant
X-Rocket-Nginx-Serving-Static
X-DealerOn
X-Unbounce-VisitorID
X-Srv
X-Unbounce-PageId
X-Cache-Fix
X-Cache-PageType
X-Purge-URL
X-Purge-Host
X-Cache-Control
X-Symfony-Cache
X-WebKit-CSP-Report-Only
Use-Proxy
X-Framework
IISExport
X-Client-Vid
X-EPiphany-Vid
NetMindSessionID
X-Client-Image-Vid
X-Cacheable-TTL
Cmstype
X-Compress-Hint
From-Origin
X-HW
X-CB-Server
SEOMOZ
MJ12bot
Thanks
Smug-CDN
Local-Info
BALANCEDTO
X-SmugMug-Hiring
X-SmugMug-Values
X-Page
X-Real-IP
Ufe-Result
X-TTFB-L
X-TTFB
X-Id
Cmsid
X-Atraveo-From-Varnish-Cache
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-Atraveo-Expires
X-CDN-Forward
Xc-Version
X-Omnis-SiteID
Identity
X-Atraveo-ETag
X-Atraveo-Varnish-Server-Id
X-Atraveo-Cache-Control
X-ACMCache
X-NginX-Cache
X-Drectory-Script
X-Atraveo-Zone
X-IIJ-Cache
X-Server-IP
NtCoent-Length
Accept-CH
NLCacheNote
X-IP
Beyond-Iis
X-Varnish-Hostname
SVR
X-Nginx-Host
X-FW
Access-Control-Allow-Method
X-Info
X-Trace-Id
X-Akamai-Transformed
X-App
X-Pagename
Id
X-PRAM
X-Force
X-Session-Reinit
X-WA-Info
X-Directory-Script
X-Hit-Cache
X-FW-Server
X-Backend-Status
A-Powered-By
X-Resty-Request-Id
AC-ELC
Hummingbird-Cache
X-Blog
X-GeoIP
WN
Service-Worker-Allowed
X-Garden-Version
X-Dns-Prefetch-Control
X-Adnet
X-Mobilized-By
Bios
X-Clara-ASAP
X-RealServer
X-Resolver-IP
X-Cache-Dispatcherpragma
X-Cache-Dispatchercachecontrol
X-Abuse
X-ASAP-Cache
X-Sites
X-VC-Enabled
X-DTC
X-FPC
X-Fedora-School-Id
Ohc-Response-Time
X-Sys-Req-ID
Machine
X-NodeID
X-WN-ClientGroup
X-Request-Uri
X-WR-Flags
X-W3TC-Minify
X-SERVER-NAME
X-Cache-Doesi
X-Analytics
X-LB-Server
Backend-Timing
X-Time-Microsecs
X-RTag
ServerTokens
X-Secret
EagleEye-TraceId
X-Plat
X-JG-Page-Cache
Content_type
X-Ser
X-ClientSide-Caching
X-Orig-Vary
X-Locale
ServerSignature
X-Runtime-Memory
SS
SERVER-ID
Proxy-Agent
X-Fstrz
X-ServerIndex
X-Provisioner-Version
X-SmartBan-URL
X-Rewritten-By
X-Search-Id
X-AEM
Url
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Highwire-RequestId
X-SmartBan-Host
X-Server-Addr
X-HydroSheep
From
X-Session-ID
X-Domain-Checked
Yoncu-Errno
X-ACCELERATE
X-OpenCart-Lightning
X-Transaction
X-VC-TTL
X-MCB-Server
X-ManagedFusion-Rewriter-Version
X-Route-To
Web-App-Origin-Name
X-Twitter-Response-Tags
X-Adobe-Content
X-Connection-Hash
X-Unique-ID
X-Highwire-SessionId
Adm-Server
X-GoCache-CacheStatus
X-Webstats-RespID
X-Traffic
X-Adobe-Loc
X-TB-M
NODE
SBGI-9
X-Cache-TTL-Age
SBGI-7
X-Debug-Token
X-Culture
EN-User
SHInfo
X-NginX-Server
X-Webkit-CSP
SBGI-5
SBGI-1
SBGI-10
X-Cache-TTL-Current
RequestId
X-Req-Head-Response
X-Src-Webcache
X-Title
X-Cache-Node
X-Protected-By
X-Powered-By-Home.Pl
X-Key
X-Layout
X-Map-Context
Accept-Language
Description
X-Agent
X-CAPServer
X-RiS-UFDI
HitType
Swift-Performance
Max-Age
Keywords
X-Varnish-Debug-Age
X-Varnish-Debug-TTL
X-Grid-Server
X-Gannett-Site-Version
X-Cache-Via
X-Distil-CS
X-Origin-Server
X-PROCESSED-BY
Resin-Trace
Magicmarker
X-Varnish-Id
X-DataDome
X-Machine
X-Webcelerate
Myheader
X-BPool-Bx-Cache
X-BPool-Fx-Cache
X-BServer
X-Depends
X-BPool-Back
X-BPool
Report-To
SBGI-Device
TheAnswer
X-4ormat-Cacheable
Disablevcache
X-LW-Web-Server
Play-Detected-UserAgent
X-Disney-Akamai-Rule
Edit
Play-Detected-Device
X-FireWall-Port
SBGI-RealPath
SBGI-RenderTime
X-CACHE-TTL
X-Cocoon-Version
X-ARRServer
X-LP
X-Cdn-Forward
X-DEBUG
X-Hosting-Env
X-Role
X-Captured
X-SDE-Name
X-Distributor
AMP-Access-Control-Allow-Source-Origin
X-Serv
X-Balanceador
XDomainRequestAllowed
Device
X-A
X-EC2-Instance-Id
X-Batcache
X-Batcache-Reason
X-Middleton-Pagespeed
X-Jphone-Copyright
Server-ID
VServer
X-Smartcache-Keys
Web
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Amz-Meta-Cb-Modifiedtime
X-Rack-Cors
X-Highwire-Sitecode
Ramp
NZSpeedy
Fastly-Backend-Name
Noq
Dis-Env
X-Detected-Device
Ram
SiteSpeed
X-Highwire-Smart-Code
X-WP
X-Varnish-ID
X-V
Lb
X-Smartcache-Timeout
X-Cache-Time
X-Goog-Meta-Replace
X-Goog-Meta-Policy
X-Data-Request
MS-CV
X-AutoRu-App-Id
X-OPNET-Transaction-Trace
Proxy-Cache
X-Rack-CORS
Prama
X-Refresh
TZ-Server
X-Aramark-SID
X-HashTwo
X-Autoru-LB
ID
X-Svr
X-Gyrobase-Publication
X-Generated-Time
Gzip
X-Varnish-Cache-Local
ScoreTracker
F5-IpCliente
ClientIP
X-Varnish-Hits
X-Frames-Options
X-DN-Cache-Control
PagesDisplayed
Content-Generator
Traffic-Origin
Upgrade-Insecure-Requests
X-B2f-Not-Route
OriginServer
NS-VaryByCustom-Key
X-DB-Content-Length
Og
X-Cluster
X-Autoru-Host
RN-Server
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-RDP
X-MidCOM-Meta-Cache
X-CRA-DC
X-SH-Cache-Status
X-Dw-Trace-Id
X-Response
X-Varnish-Action
Apachenode
SINA-LB
SINA-TS
X-CacheID
X-Cache-On
Edgecast
Access-Control-Allow-Header
Hamster
X-MAT-GEO
X-Node-Name
X-Skip-Cache
X-Proxy-Skip
Ibf5scheme
N365rili
SG
Paypal-Debug-Id
Warning
X-Desc
X-Geo-IP
X-Zendesk-User-Id
X-Zendesk-Origin-Server
X-JSESSIONID
X-Hosting
X-Runtime-Affili
MW-Webserver
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Header
X-DynamicCache
X-App-Runtime
X-Amz-Id-1
X-Cache-Me-Harder
X-CacheDebug
X-Compressed-By
Backend-IP-Port
Backend-Name
X-Origin-Id
X-GSL-Server
X-Redirector
X-Rewrite
X-Viator-Tapersistentcookie
X-Ghost-Cache-Status
X-E
CommercePlatform-Version
BackendServer
OracleCommerceCloud-Sandiego
OracleCommerceCloud-Version
X-Confluence-Request-Time
X-Amcomm-Site
AsisCache
Language
X-Mobile-URL
SB-Site-IE-VERSION
SB-Site-Device
Hostname
DrivedBy
X-Enhanced-By
X-DS1D
X-ASAP-Age
Cleartype
Www.Aujourdhui.Com
X-Cjtype
X-VNode
Nginx-Cache
X-Node-Id
X-Processed-By
X-Amz-Meta-Content-Md5
Dispatcher
SB-Cache-Remaining
SB-Cache-Life
X-FG-RequestId
X-ReqId
X-Actindo-Rs
X-HP-Trace-ID
X-HP-Trace-Project
X-Proxy-Cache-Key
X-Actindo-Thread-Id
X-Nginx-Request-Processing-Time
X-ESI
X-Artvisual-Server
X-AMAZEEIO
X-Render-Time
X-SCM-Server-Number
X-Varnish-Grace
X-Who
X-ZSITES-DNS
X-SilverStripe-Cache
X-UnsetCookies
Cteonnt-Length
X-Actindo-Request-Id
Provider
Il-Cl
X-Old-Content-Length
Page-Template
CLMOB
COMMERCE-SERVER-SOFTWARE
X-Meta-MSThemeCompatible
X-XHTML-Minification-Powered-By
X-Meta-Imagetoolbar
X-Varnish-Cache-Ttl
X-Meta-MSSmartTagsPreventParsing
MSThemeCompatible
Server-Ip
X-Application
X-Proto
Home
MSSmartTagsPreventParsing
Strikingly-Cached
X-Forwarded-Host
Aoestatic
X-Lb
X-AISO-Server
Ttl
Ews
X-Cache-Varnish
X-Sid
X-HS-Status
TP-L2-Cache
TP-Cache
X-Reflector
X-Reflector-Cache
VC-NoCache
Strikingly-Cache-Region
X-Upgrade-Enabled
PServer
X-AISO-Cacheable
MyHeader
X-Client-Ip
Strikingly-Cached-Version
X-Origin-Cache
X-PM-ID
X-NID
X-Dev
X-LBPoolMember
X-Cms-Mode
X-Cache-Detail
X-Tag-Playlist
Xc
Viewport
Worker
X-Magento-Action
X-Magento-Lifetime
Ctx
X-AISO-Cache
X-Author
IES-Server
HA-Urlpath
X-VTEX-Cache-Status-Janus-Edge
HA-Servedtime
HA-Ipaddr
X-UType
HA-Host
X-Profiler
X-Uncacheable
X-Clx-Request
Kanooh-Host
X-Reqid
X-SuperCache
X-Hash
X-Distributed-By
X-DDM-SERVER-UPDATED
X-We-Are-Hiring
X-Pool
HA-Georegion
X-Bip
L5d-Success-Class
Load-Balancer
X-CACHE-KEY
NKBVHEADER
BlockPHPCallEnd
XX
DB-Nickname
X-Global-Transaction-ID
HA-Cloudapp
X-Max-Age
X-Phpwcms-Release
X-DDM-SERVER
X-VG-WebCache
X-7d-Instance-Id
X-PoweredBy
HA-Geocity
Unique-Request-Id
X-PressLabs-Stats
Requested-Host
HA-Geolat
HA-Geolon
X-7d-Trace-Id
X-SE-Debug
X-Nginx
X-Phpwcms-Page-Processed-In
HA-Geocountry
X-MSU-SOURCE
X-Flex-Tags
X-Proxy-Id
X-MCF-ID
Dtk-Cache-Check-0
X-SV
X-Server-Generated
X-Dynamic-Cache
X-Flex-Community
Request-Country
X-Feed
WSCLoggingUUID
Tk
Request-EU
WP-FROM-CACHE
Session-From
X-Node-App
X-Hit
X-CO-Host
X-Cache-Bypass
X-Unique-Id
CS-SERVER
ServerIP
Expiries
Debug-Status
X-Instance
X-Obvious-Info
X-Pubstack
X-Test-Debug
CDCHOST
HSTS
X-Ants-Host
X-Ants-Machine-Id
X-Custom-Name
X-COUNTRY-CODE
X-Cache-Ttl
X-TA-CDN-Provider
V-TTL
X-ProcessESI
X-Device-Item
X-Original-IP
X-Obvious-Tid
X-RemovedCookies
X-CD
X-Backside-Transport
X-SATserver
X-RequesterIP
TC-S-Cache-M
TC-S-Cache
X-Homeaway-Requestmarker
X-HAProxy
X-Generation-Time
X-FreeTag-Count
X-Jcms-Ajax-Id
X-Flex-Lang
X-Nitro-Cache
X-Flex-Evstart
X-Member
X-Fpc
X-D-Time
X-Bcwwwid
X-B3-Traceid
X-B3-Spanid
X-AWS
X-Built-With
X-CGP
X-Flex-Lastmod
X-Flex-Tag
X-Config-By
X-OCTOPOD
X-OpenUrlRewriter-Debug
Xcache
X-XHR-Current-Location
X-Varnish-Cached-TTL
X-Varnish-Cached
X-REDIRECTSERVER
Response-Time
TC-Cache-U
TC-Cache-IC
TC-Cache
X-UPServer
X-Streams-Distribution
X-Flex-Evend
X-PHP-Response-Code
X-PG
X-Pagely-Cache
X-S-Misc
X-Script
X-Sn-Servicetimems
X-ServiceProvider
X-ServerAddr
Progma
X-DSMX-Rewrite-MS
X-Deity
X-Debug-Token-Link
X-CSRF-Token
X-ETag
X-Gateway-Rate-Limit-Conn
X-Header-Treatment
X-HEAD
X-Gateway-Rate-Limit-Delayed
X-Cname-TryFiles
X-Cache-ID
EQ-Cache
Be
X-VCS-Ttl
GranicusServer
HostName
X-Beatles
X-Apm-Telemetry-Syncmark
RSB-LINK
X-M
X-Made-On
MageStack-Cacheable
MageStack-Cache-Status
MageStack-Cache-Lifetime
MageStack-Config
MageStack-Debug
MageStack-PageSpeed
MageStack-Magento-Version
MageStack-Loadbalancer
MageStack-Cache-Hits
MageStack-Cache
X-Sorting-Hat-Expire-Cache
X-Served
X-Pj-Cache-Status
X-Varnish-Debug-Hits
1A-CountryCode
MageStack-Area
IsMobile
Generate-Time
X-VCS-Cacheable
X-Shopware-Cache-Id
DeleGate-Ver
X-Ssl-Cipher
X-Site
X-NMT-Proxy
X-Static
X-VC-Debug
X-VC-Cacheable
X-VC-Cache
X-PBY
X-Pass-Through
X-Instance-Name
StatusCode
Httpd-Identifier
Container
MachineName
X-Timestamp
X-Status
MwpReleaseVersion
X-VC-Hash
Cacheid
X-Full-Url
X-DSMX-Render-MS
X-Custom-Header
X-Pixelsilk-Server
X-Pixelsilk-Version
X-Shopware-Allow-Nocache
X-Served-Server
X-Route
X-ClusterID
X-Cache-Original-TTL
User-Agent
Server-Id
CpuTime
V-Age
X-Ab-Selection
X-Cache-Id
X-ACLR-Version
MageStack-Tag
MageStack-Web-Node
X-MyName
X-Instance-Id
X-HP-CAM-COLOR
X-NewsFlow-Sitename
X-Nginx-Request-Time
X-PBS-Fwsrvname
X-PBS-Appsvrname
X-PBS-Appsvrip
X-Healthy
X-Container
XDisk
X-Transaction-Name
X-RAMCache
ProxiaInstanceId
ReqUrl
X-Catalyst
X-Cache-FS-Status
Session-Id
X-SSLProxy
X-SSLUpstream
X-Hstore
X-Hrouter
X-Cache-Extended
X-KoobooCMS-Version
X-Log
X-Qiniu-Zone
X-M-Reqid
X-M-Log
X-Box
X-Backend-Host
X-Via-NSCOPI
X-UPSTREAM-Address
X-Svr-Proxy
X-WebNode
Actual-Object-TTL
X-Avvio-Cms-Cacheload
FRONT-END-SECUREBROWSER
Fastly-Restarts
X-Pool-Info
X-Pageid
X-NewCloud-V-Cache
X-HA
X-FastCGI-Cache-Status
X-Ocache
X-ProBase-Server
X-SayCDN-TTL
X-Say-TTL
X-Say-Cacheable
X-Debug-Message
X-BP-NSA-REQID
X-Activity-Id
Tesla.Performance
Request-Filtered-By
X-Amz-Meta-Version-Id
X-AppVersion
X-Backend-TTL
X-B
X-Az
X-Serverid
X-T
X-Country
X-CH-Device
X-Beresp-Ttl
X-FIRSTBase
X-Front-Cache
X-Litespeed-Tag
X-IP-Address
X-Instart-Cache-Id
RSL-Trace-ID
Referer
Amfplus-Ver
X-UT-Cache
X-UA
CommunityServer
Copyright
Provided-Host
HA-Front
X-Qnm-Cache