Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
Age
X-Cache
P3P
Expect-CT
Content-Language
X-AspNet-Version
X-Pingback
Via
X-UA-Compatible
Upgrade
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Varnish
Referrer-Policy
X-Request-Id
X-Adblock-Key
X-Check
X-Xss-Protection
X-Generator
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-Language
X-Template
X-Drupal-Cache
X-Buckets
Alt-Svc
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Ac
X-Hacker
X-Cache-Hits
Host-Header
X-ShopId
X-ShardId
X-Dc
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-Section
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-PodId
X-Sorting-Hat-PodId-Cached
X-Alternate-Cache-Key
X-AspNetMvc-Version
X-Via
X-Runtime
X-Served-By
X-Powered-By-Plesk
X-Contextid
X-PC-Key
X-PC-Hit
X-PC-AppVer
X-ServedBy
X-UA-Device
X-Amz-Cf-Id
X-PC-Date
X-PC-Host
MS-Author-Via
Content-Location
Access-Control-Allow-Headers
X-IPLB-Instance
Access-Control-Allow-Methods
X-Powered-CMS
X-Timer
X-Ua-Compatible
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Rid
X-Wix-Request-Id
X-Seen-By
Status
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-Pixel-1
CF-Cache-Status
X-FRAME-OPTIONS
X-Tumblr-Pixel-2
X-Shopify-Stage
X-Iinfo
Access-Control-Allow-Credentials
Cartoon
X-Backend
X-Host
X-Cache-Status
X-CST
X-WPE-Loopback-Upstream-Addr
Powered-By
Content-Encoding
X-Endurance-Cache-Level
X-Cache-Enabled
X-Cache-Hit
X-Mod-Pagespeed
X-Port
X-CDN
X-Tumblr-Pixel-3
X-Logged-In
X-Server
X-Drupal-Dynamic-Cache
X-Server-Powered-By
Keep-Alive
X-Request-ID
X-DIS-Request-ID
X-Robots-Tag
X-Nginx-Cache-Status
X-Accel-Version
X-Proxy-Cache
X-Turbo-Charged-By
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-LiteSpeed-Cache
X-Page-Speed
P3p
X-Content-Powered-By
X-Content-Digest
Content-Security-Policy-Report-Only
X-GitHub-Request-Id
X-AH-Environment
X-FW-Hash
X-FW-Server
X-Rack-Cache
Request-Context
X-Tumblr-Pixel-4
X-FW-Static
X-FW-Serve
X-FW-Type
X-Pad
X-Varnish-Cache
X-Hits
X-Webcom-Cache-Status
Access-Control-Expose-Headers
X-BC-Stapler
X-XRDS-Location
SPRequestGuid
X-MS-InvokeApp
Edge-Control
X-Newrelic-App-Data
X-SharePointHealthScore
X-Trace
MicrosoftSharePointTeamServices
WP-Super-Cache
Timing-Allow-Origin
Cf-Railgun
Edge-Cache-Tag
X-Request-Country
X-HS-Cache-Config
X-Node
X-Amz-Request-Id
X-Amz-Id-2
X-HS-Content-Id
X-CF-Powered-By
X-Content-Security-Policy
Charset
X-FullPageCaching
Request-Id
X-INKT-SITE
X-INKT-URI
X-Fastly-Request-ID
X-Cache-Lookup
X-PHP-Backend
Access-Control-Max-Age
X-HS-Combine-CSS
SPIisLatency
SPRequestDuration
X-Cnection
X-Backend-Server
Allow
X-Died
X-Edge-Cache
X-Edge-Cache-Key
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
MicrosoftOfficeWebServer
EagleId
X-CDN-Pop-IP
X-CDN-Pop
Grace
Rating
X-Tumblr-Pixel-5
Composed-By
X-Safe-Firewall
Served-By
X-Server-Name
X-Device
X-Tumblr-Content-Rating
X-SS-Location
X-SS-Conf
X-DDC-Arch-Trace
X-SERVER
Liferay-Portal
X-Dw-Request-Base-Id
X-NF-Request-ID
X-Spip-Cache
Front-End-Https
X-Hyper-Cache
X-VCache
Permitted-Cross-Domain-Policies
X-Do-Not-Hack
X-HeyJason
P-WS
P-LB
X-Cloud-Trace-Context
X-OneAgent-JS-Injection
Surrogate-Control
X-LiteSpeed-Cache-Control
X-Cluster-Node
X-TNCMS
X-Loop
X-Original-Date
X-RateLimit-Limit
X-RateLimit-Remaining
X-Middleton-Display
X-Sol
Display
X-Firenze-Processing-Times
X-RateLimit-Reset
X-Kinsta-Cache
Response
X-Middleton-Response
X-Clacks-Overhead
X-Acc-Exp
X-Jimdo-Instance
X-Jimdo-Wid
X-FB-Debug
X-Vtex-Processado-Em
X-Debug-Info
X-StackifyID
Content-Style-Type
Content-Script-Type
Public-Key-Pins
X-Webserver
X-Tumblr-Pixel-6
Feature-Policy
X-Servedby
X-Ruxit-JS-Agent
X-PhApp
X-Age
X-XN-XNHTML
X-XN-Trace-Token
X-Amz-Version-Id
Refresh
X-DNS-Prefetch-Control
X-Magento-Tags
X-LW-Cache
X-Cached
X-WebKit-CSP
X-DynaTrace-JS-Agent
Fpc-Cache-Id
X-Goog-Hash
Xkey
X-Frame-Option
X-User-Agent
X-N-OperationId
X-HOST
X-Zen-Fury
PageSpeed
X-Cache-Config
X-Hostname
X-Px
X-Version
Retry-After
X-Generated-By
X-Handled-By
X-Topify-Platform
X-ARC
X-Upstream
X-Edge-Location
X-Goog-Generation
X-FORWARDED-FOR
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
X-Url
Access-Control-Request-Method
WPX
X-Source
X-Microcache
X-EdgeConnect-Origin-MEX-Latency
X-MiniProfiler-Ids
TCN
X-Magento-Cache-Debug
Rt-Fastcgi-Cache
X-B-Cache
X-EdgeConnect-MidMile-RTT
X-Cached-By
Powered
X-RESOURCE
X-Whom
X-Loopia-Node
X-URLSCHEME
X-CMS-Version
X-Accel-Expires
Fastcgi-Cache
X-Outils-CS
ServedBy
X-Dns-Prefetch-Control
X-Engine
X-ET-API-VERSION
X-ET-API-ROOT
X-ET-API-ORIGIN
X-Powered-By-VTEX-Janus-ApiCache
Last-Published
X-VTEX-Janus-Router-Backend-App
No
X-CacheServer
X-Vtex-Processed-At
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Remote-Cache
X-Request-Time
X-Varnish-HitMiss
X-Varnish-Count
X-Content-Options
X-Platform-Router
X-Platform-Cluster
X-Platform-Processor
X-Developer
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Fhost
X-Platform-Server
X-Varnish-Cache-Hits
Pagespeed
X-AspNetWebPages-Version
X-Defender
X-DynaTrace
X-Shop-Id
X-Application-Context
X-URL
X-Actual-URL
X-Fastcgi-Cache
Imagetoolbar
Product
X-Returned-From-DLL
X-Passed-To
X-Returned-From
X-From
X-Passed-To-DLL
X-Original-Request
X-LBLID
Public-Key-Pins-Report-Only
Host
X-Signature
X-Varnish-Host
Warning
X-S
X-F-Cache
Dmn
X-Cache-Key
X-PERF
Cache-Key
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
X-ApacheServer
X-Varnish-Beresp-Status
X-Ezoic-Cdn
X-Location-Id
X-Stale
X-Passed-To-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Microcachable
X-Returned-From-PostProcessResponse
X-Cache-Info
X-Passed-To-BeforeDispatch
X-Acquia-Application-Trace
X-Magento-Cache-Control
X-Acquia-Application-UUID
Generator
X-HS-Content-Campaign-Id
X-Device-Type
X-SSLUpstream
X-SSLProxy
Cache-Provider
X-NWS-LOG-UUID
X-Gateway-Cache-Status
X-Cache-Age
X-Hosted-By
X-Platform
X-Gateway-Cache-Key
X-Gateway-Skip-Cache
X-Guploader-Uploadid
Alternate-Protocol
X-Sapient
X-Powered-By-360WZB
Arr-Disable-Session-Affinity
Version
X-Response-Time
Origin
X-Microcache-Status
X-Svr-Proxy
X-SVR-IIS
X-Platform-Cache
X-Translation
X-Forwarded-For
X-Micro-Cache
X-Via-JSL
X-Umbraco-Version
X-Cache-Rule
Content-Hash
X-Environment
X-I-Sp
X-SO
X-Msg-2-Log
X-BS
X-Akam-SW-Version
X-Cache-Tags
X-Rnd
X-ORACLE-DMS-ECID
DynaTrace
X-Varnish-TTL
X-Dealeron-Original-Url
X-Dealeron-Backend
X-DealerOn
X-Dispatcher
SSPAppContext
X-Cache-Namespace
X-App-Status
X-Lambda-Id
Content-Disposition
X-Server-ID
X-SSL-Cipher
X-Track
X-Supported-By
MIME-Version
X-Server-Upstream
Surrogate-Key
USPLoggingUUID
S-Cnection
X-GUploader-UploadID
X-Instart-Request-ID
WZWS-RAY
X-Expires-Orig
X-SSL-Protocol
X-Correlation-ID
X-Abgroup
X-NetCat-Version
X-CSRF-Protection
X-Drupal-Cache-Tags
X-Matrix-Server
X-Matrix-Proxy
SN
X-Cache-Control-Orig
Cache
X-Cache-TTL
X-Duration
X-Vcap-Request-Id
X-VARITI-CCR
X-Powered-By-VTEX-Janus-Edge
X-Gamma-Serve
X-App-Hosting
X-Sucuri-ID
X-TransIP-Balancer
X-Hypernode
X-Art-Request-Id
X-Correlation-Id
X-Client-IP
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-Varnish-GracePeriod
X-Varnish-RemainingLife
X-Generated
Wsr-Cache
X-Powered-By-VelaWeb
X-NewRelic-App-Data
X-Varnish-ObjectSource
X-TransIP-Backend
X-Front
X-Debug
FAI-W-FLOW
X-UD-Method
Pool
X-Page-Cache
X-Sucuri-Cache
X-Helper-Autoassign-All
X-ATG-Version
X-I
X-Revision
X-Cache-Server
RTSS
X-Route-Server
Node
Powered-By-ChinaCache
Content-Encoding-Handler
X-Env
Smug-CDN
X-Now-Id
X-Rocket-Nginx-Bypass
Req-Id
X-SmugMug-Values
X-Geo-Country
X-SmugMug-Hiring
X-ServerName
X-Github-Request-Id
X-TTFB-L
X-Cache-Lifetime
X-TTFB
X-Daa-Tunnel
X-SV-CreatedAt
X-SV-CacheTags
X-SV-Cacheable
Cache-Tags
X-SV-Duration
X-SV-FromDBCache
X-SV-Nginx-Duration
X-SV-Pid
Src-Update
X-Varnish-Cacheable
ServerID
X-SV-Expires
Update-Time
X-SV-Edge
X-Grace
X-Amz-Meta-S3cmd-Attrs
Contao-Page-Layout
X-Server-Id
X-Esi
X-Forwarded-Proto
CF-Worker-Script
X-Storage
X-Flow-Powered
X-Director
X-Edge-IP
X-Last-Modified
X-Url-Base
X-Cache-Debug
X-UPSTREAM
X-Cache-Handler
X-Locale
Accept-Encoding
X-LB-Server
Service-Worker-Allowed
X-Varnish-Url
X-Firenze-Processing-Time
X-Cache-Level
X-Drupal-Cache-Contexts
X-NoCache
X-ORACLE-DMS-RID
X-Vhost
X-SRV
X-Pressidium-NinukisWP-Ver
Cneonction
X-Trace-Id
X-CJ-Soft
X-Cache-Engine
X-Varnish-Age
X-Rocket-Nginx-Serving-Static
Edge-Control-Message
Author
CF-Worker-Version
Akamai-IP
X-Cache-Control
X-FTR-Request-ID
X-Recruiting
X-Middleware-Start
Section-Io-Id
X-Content-Encoded-By
X-PwB-Node
X-Dispatch
X-Discourse-Route
Strikingly-Cache-Region
Strikingly-Cached
X-Content-Type-Option
Strikingly-Cached-Version
X-Unbounce-VisitorID
X-N
X-IsCacheURL
X-Unbounce-Variant
X-Cache-Type
X-Server-Instance
X-Unbounce-PageId
X-Cache-Only-Varnish
X-Hiawatha-Cache
Content-MD5
Use-Proxy
X-Ttl
X-Country-Code
X-Varnish-Backend
Server-Timing
X-GeoIP-Country-Code
Proxy-Connection
X-LB
Lsrequestid
SiteSpeed
X-SDS
X-TransIP-Reserved
X-NA-CachePolicy
If-Modified-Since
X-TTL
Server-Name
X-Rq
AMF-Ver
W
X-Akamai-Device-Model
X-Akamai-Device-Characteristics
X-Cache-Operation
X-Empowered-By
Backend
X-NginX-Cache
Page-Completion-Status
X-Cache-Expires
Https
X-Speed-Cache
X-Speed-Cache-Key
PICS-Label
Dtk-Cache-Check-0
X-GeoIP-Country-Name
X-Varnish-Retries
MJ12bot
X-Nginx-Cache
SEOMOZ
Pv
X-CF-Passed-Proto
X-Now-Cache
X-High-Performance
X-FIRSTBase
X-Fastly-Request-Id
X-Varnish-IP
Srv
X-Cache-Device-Type
X-Time
X-Storage-Cache-Expires
X-Storage-Cache-Date
X-Storage-Cache
From-Origin
NnCoection
X-Dynamic-Cache
X-CDN-Forward
X-BKSrc
X-PF-Uncompressing
X-Magnolia-Registration
Custom-Header
FindLaw
X-Service-Id
X-Litespeed-Cache-Control
X-Symfony-Cache
X-Browser
Nodo
X-Worker
Accept-Charset
IBM-Web2-Location
X-SRCache-Key
S
X-WEBSERVER
Edit
X-Processing-Time
X-RequestId
X-CacheFROM
MC
Xc-Version
Local-Info
X-HW
X-Real-Server
X-Cache-PageType
X-ID
X-Webkit-CSP
X-Wikidot-Static-Cache
X-FW
X-Cache-Fix
X-Wikidot-Backend
X-Twitter-Response-Tags
X-Frontend
X-Connection-Hash
X-Transaction
X-Nitro-Cache
ServerName
X-Cookie-Domain
X-Disney-Akamai-Rule
X-Amz-Storage-Class
Qs-Cache
X-Amz-Rid
Location
Ohc-File-Size
X-WR-MODIFICATION
X-Content-Age
X-Config-Blacklist-Version
Prama
Backend-Timing
X-Varnish-Server
X-Key
X-Analytics
X-CB-Server
Cached
X-Adobe-Loc
X-ACMCache
X-BackendServer
X-Content-Security-Policy-Report-Only
X-TB-M
X-Shard
X-FireWall-Port
X-Adobe-Content
Cm-Server
Content-Transfer-Encoding
X-SP-Farm
X-ServerID
Ram
Noq
X-Amz-Meta-Content-Md5
Ramp
X-4ormat-Cacheable
X-WR-Flags
X-SP-UniqueName
X-Ruxit-Js-Agent
Swift-Performance
Content_type
Accept-CH
X-GoCache-CacheStatus
X-Cache-2
X-GeoIP
X-LW-Web-Server
X-Cache-TTL-Remaining
X-App-Server
X-Sedo-Request-Id
X-RealServer
X-Cache-Miss-From
X-Plat
Adm-Server
Pf.Web.Request.Id
X-Yottaa-Optimizations
X-Origin
X-Yottaa-Metrics
X-Yadis-Location
X-Hrouter
Accept-Language
X-Server-IP
X-Client-Vid
X-Remote-Addr
X-Varnish-Hostname
Server-Info
Tracecode
X-Role
X-EPiphany-Vid
X-Client-Image-Vid
X-LP
X-Hstore
X-AVG-Country-Code
X-Redman-Final-Url
X-Avg-Cookie-Expires
X-Redman-Backend
Frame-Options
X-JG-Page-Cache
SRV
X-Forwarded-Host
X-Stage
X-Srv
X-Drectory-Script
X-AEM
X-Akamai-Edgescape
SHInfo
X-Varnish-Hits
Url
X-Cache-Ttl
X-Akamai-Transformed
X-Hit-Cache
X-HydroSheep
X-Proxy-Backend
X-Runtime-Memory
Lookup-Cache-Hit
X-A
Front
X-Pagename
X-CLOUD-TRACE-CONTEXT
X-Cache-Dispatchercachecontrol
X-Force
X-Varnish-Id
X-CAPServer
X-Cache-Dispatcherpragma
Proxy-Agent
X-Path-Route
X-Cache-CFC
X-ARRServer
HCVer
X-Request-Uri
X-Source-ID
X-PRAM
Referer
Report-To
HAVer
CacheControlHeader
X-Appmachine-Environment
X-Processed-By
X-VCS-Ttl
X-VCS-Cacheable
X-HTML-Minification-Powered-By
Drupal-Pagecache-Memcache
X-Span
IISExport
Request-EU
SVR
X-Generated-Timestamp
X-NginX-Server
X-VC-Enabled
Environment
Request-Country
RequestId
Hummingbird-Cache
X-Framework
CDN-Cache
A-Powered-By
X-Varnish-ID
X-ClientSide-Caching
X-Oneagent-Js-Injection
X-ServerIndex
X-Purge-URL
X-Distributor
X-Purge-Host
X-UnsetCookies
IM-Version
Pics-Label
X-Varnish-Ttl
X-Via-NSCOPI
X-Akamai-ERPolicy
X-Proxy-Cache-Key
X-Nbs
X-Unique-Id
X-Webstats-RespID
Home
X-E
CDN-RequestId
CDN-Uid
CDN-PullZone
CDN-CachedAt
Eomportal-Instance
Beyond-Iis
Nopic
X-Envoy-Upstream-Service-Time
AsisCache
X-Proxy
X-Hosting-Env
NetMindSessionID
X-SERVER-ID
X-RiS-PX
X-Akamai-ERRuleID
X-Session-ID
X-CACHE-TTL
X-SDE-Name
X-Balanceador
X-Sys-Req-ID
ScoreTracker
RN-Server
X-Ratelimit-Remaining
X-Goog-Meta-Policy
X-NginX-Upstream
X-Pantheon-Az
Surrogate-Key-Raw
X-AOL-HN
X-Pantheon-Environment
X-Pantheon-Site
X-Domain-Checked
X-Cache-Doesi
NODE
X-Provisioner-Version
Server-ID
Identity
Pramga
Disablevcache
X-Backend-Status
X-Real-IP
X-Shield-Request-Id
X-Pantheon-Phpreq
X-Goog-Meta-Replace
X-Vcache
X-Atraveo-Varnish-Server-Id
X-Atraveo-Zone
X-FastCGI-Cache
Machine
X-Atraveo-From-Varnish-Cache
X-Atraveo-Param-Rm
X-Debug-Token
PServer
X-Atraveo-TTL
X-Atraveo-Set-Cookie
X-Distil-CS
X-Ratelimit-Limit
X-Atraveo-Expires
Access-Control-Allow-Method
X-Cacheable-TTL
X-Atraveo-Cache-Control
X-Atraveo-ETag
X-Consent-Required
X-HeBS-Cache-Status
X-WebNode
Max-Age
X-M-Reqid
X-Refresh
X-Highwire-RequestId
X-Timestamp
X-Qnm-Cache
AMP-Redirect-To
X-CRA-DC
X-Highwire-SessionId
Cteonnt-Length
X-Cache-On
X-RiS-UFDI
X-M-Log
Yoncu-Errno
X-SmartBan-Host
X-Varnish-Backend-Beresp-Backend
X-Upgrade-Enabled
Paypal-Debug-Id
X-Desc
BALANCEDTO
Arrnode
X-Garden-Version
TC-Cache
Filters
Nitro-Cache
Locale
X-Amzn-RequestId
X-Amzn-Trace-Id
X-Compress-Hint
X-Amz-Apigw-Id
Access-Control-Allow-Header
X-ETag
X-Response
TC-Cache-IC
X-Rebelmouse-Cache-Control
X-AF-Userserver
X-SAPP
X-Resolver-IP
Resin-Trace
X-Route
X-ACCELERATE
X-Cache-Varnish
TC-Cache-U
X-MAT-GEO
TC-S-Cache
TC-S-Cache-M
XX
X-SmartBan-URL
X-WPL-DATA
X-Orig-Vary
WP-FROM-CACHE
Play-Detected-UserAgent
Play-Detected-Device
Il-Cl
X-Server-Addr
Load-Balancer
X-Origin-Date
*
X-Varnish-Debug-TTL
Firespring-Website-Id
CS-SERVER
Nginx-Cache
X-Aramark-CSID
YF-ID
X-Proxy-Cache-Control
X-Served-Server
CLMOB
X-Fedora-School-Id
DNNOutputCache
X-Varnish-Cache-Local
IES-Server
X-Location
Access-Control
X-Via-S
X-Soro
Myheader
Cmsid
Cmstype
X-ZSITES-DNS
Proxy-Cache
X-Adnet
X-PBY
X-Actindo-Thread-Id
VServer
X-FPC
X-Varnish-Debug-Age
X-Amz-Meta-S3b-Last-Modified
VANITY-HOST
X-Aramark-SID
X-Ms-Request-Id
X-B2f-Not-Route
X-Actindo-Request-Id
X-Actindo-Rs
X-Bip
X-IIJ-Cache
X-Nginx-Host
X-Runtime-Affili
X-App-Runtime
Web-App-Origin-Name
X-WP
Prot
X-Smartcache-Timeout
X-Cocoon-Version
X-Smartcache-Keys
NLCacheNote
Bios
Magicmarker
X-CacheDebug
X-Fstrz
Fastly-Debug-Digest
WWW-Authenticate
Serverid
X-NWS-UUID-VERIFY
X-Rack-Cors
MICROSOFTOFFICEWEBSERVER
Copyright
X-Cache-Date
X-JSESSIONID
X-Origin-Cache
X-DSMX-Rewrite-MS
X-DSMX-Render-MS
X-Test
X-Cdn-Forward
X-Autoru-App-Id
X-Autoru-Host
X-Frames-Options
X-7d-Trace-Id
N365rili
COMMERCE-SERVER-SOFTWARE
X-GeoIP-Country
X-DN-Cache-Control
NGX
X-Gyrobase-Publication
X-Rule
AC-ELC
Upgrade-Insecure-Requests
Thanks
Srv-Name
X-Flex-Community
Pragrma
X-SE-Debug
X-Flex-Evstart
X-Flex-Evend
Fastly-Backend-Name
Edgecast
X-Nginx-Dummy
X-Client-Id
X-Status
X-Custom-Name
X-MCB-Server
X-Secret
X-Mobilized-By
X-Upstream-Status
X-Upstream-Backend
Hosted-By
X-Flex-Lang
Traffic-Origin
X-HA-Backend
X-HA-Frontend
X-Batcache
GranicusServer
X-UA-Bot
X-7d-Instance-Id
X-Instance
X-Session-Reinit
X-Captured
X-WEBMGR-CACHE
X-Flex-Tag
X-Flex-Lastmod
DrivedBy
X-Varnish-Grace
X-Flex-Tags
X-Req-Head-Response
X-Hit
X-Map-Context
X-PHP-Response-Code
X-VC-TTL
Xc
X-Geo
X-Reflector-Cache
X-Instance-Id
X-GSL-Server
AETN-Continent-Code
AETN-City
X-Reflector
X-Lb
FRONT-END-SECUREBROWSER
AETN-Area-Code
Actual-Object-TTL
X-Static
X-SERVER-NAME
X-Dynatrace-Js-Agent
Aurora-Node
AETN-Country-Code
AETN-Latitude
AETN-EU
X-OpenCart-Lightning
AETN-Longitude
AETN-Postal-Code
AKA-DEVICE
AETN-State-Code
X-App
AETN-DEVICE
X-Confluence-Request-Time
Cf-Ipcountry
X-CacheID
AETN-Country-Name
X-Resource
X-Unique-ID
OracleCommerceCloud-Version
X-Varnish-Action
CommercePlatform-Version
X-Application
X-SH-Cache-Status
X-WebServer
Lb
X-Culture
OracleCommerceCloud-Sandiego
Access-Control-Request-Headers
X-Jphone-Copyright
X-HostName
X-Detected-Device
XDomainRequestAllowed
Dis-Env
X-IP
X-Cms-Mode
X-Dev
X-UUID
X-Gateway-Rate-Limit-Delayed
X-Xml-Http-Blocked
Dispatcher
X-Appid
TP-Cache
X-LB-Node
X-Sorting-Hat-Expire-Cache
X-ESI
Section-Io-Origin-Status
X-V
Section-Io-Origin-Time-Seconds
X-ReqId
X-DevSrv-CMS
NZSpeedy
TP-L2-Cache
Og
X-Cache-Extended
Description
Keywords
X-DataDome
X-Proto
Worker
Provider
X-Directory-Script
From
X-RemovedCookies
X-Zendesk-User-Id
X-Serv
X-Proxy-Server
X-Gannett-Site-Version
X-Airee-Node
Response-Time
X-BServer
X-W3TC-Minify
X-Server-Generated
X-ProcessESI
X-Built-By
X-Render-Time
X-Rewritten-By
X-Protected-By
X-Depends
X-Netrix-ID
X-Zendesk-Origin-Server
X-Title
X-Country
X-NodeID
HitType
X-Blog
X-ManagedFusion-Rewriter-Version
X-Layout
X-Backside-Transport
X-Shopware-Cache-Id
X-Shopware-Allow-Nocache
X-TLS-Version
X-Varnish-Ip
Num
ID
X-Served-From
X-Nws-Log-Uuid
X-Beatles
Ttl
X-Domino-CacheValidationWithETagReason
X-Domino-CacheValidationWithETagResult
X-NoIndex
X-Cache-ID
X-Cache-Time
X-FastCGI-Cache-Status
X-Middleton-PageSpeed
X-Amz-Id-1
X-Resty-Request-Id
X-TKP-SRV-ID
X-Amcomm-Site
X-HashTwo
X-Data-Request
X-DB-Content-Length
X-CSRF-Token
Cleartype
X-Rack-CORS
X-RunCloud-Cache
X-Wodby-Node
X-Vol-Mrp
X-Src-Webcache
X-Podname
Now
PB-PID
PBS
PB-RID
X-PM-ID
X-Optimization
VSID
ViewMode
X-Cache-HT
X-GZip
X-Mighty-Proxy
REFRESH
X-Origin-Server
X-Now-Trace
X-Mobile-Rewrite
X-Origin-Upstream-Status
X-Vary-Options
X-Vol-Correlation
X-WA-Info
X-Webcelerate
Apachenode
X-Firefox-Spdy
X-FromPodPressCache
X-Global-Transaction-ID
X-Grid-Server
Ssl-Proxy-Server
X-BPool-Back
X-AppServer-Status
Id
ProxiaInstanceId
X-AppServer-Cache-Rule
X-AppServer-Cache-Exception
MSSmartTagsPreventParsing
Httpd-Identifier
Session-Id
SINA-TS
X-PBS-Fwsrvname
HSTS
SINA-LB
Web
MSThemeCompatible
Gzip
SBSS
StatusCode
X-Cache-TTL-Age
X-Cache-TTL-Current
X-Agent
UrlWatchModule-Time
Session-From
ClientIP
X-Amzn-Remapped-Date
Server-Ip
Webserver
ServerIP
X-Policy
VC-NoCache
X-Cdn-Origin
X-DynamicCache
X-Middleton-Pagespeed
X-EC2-Instance-Id
X-MCF-ID
X-Batcache-Reason
Content-Sn
TYPO3-Pid
ModuleCacheType
TYPO3-Sitename
X-Always-Cache
X-FORWARDED-PROTO
X-Catalyst
X-MyName
X-Beget-Proxy
X-Proxy-Id
X-Avvio-Cms-Cacheload
X-Node-App
X-PBS-Appsvrname
X-PBS-Appsvrip
X-Cache-FS-Status
X-UPServer
X-Streams-Distribution
X-Varnish-Cached
X-Varnish-Cached-TTL
X-Server-Hostname
X-Cluster
F5-IpCliente
X-Meta-MSThemeCompatible
X-Cache-Via
X-Nx-All
X-ENV
X-Generated-Time
MwpReleaseVersion
X-Meta-Imagetoolbar
X-Meta-MSSmartTagsPreventParsing
X-Scheme
X-HS-Status
X-Compressed-By
MachineName
X-Dw-Trace-Id
X-Nx
X-Phpwcms-Page-Processed-In
CF-Cache-Key
SS
X-SSL-Host
Content
X-Highwire-Sitecode
X-SilverStripe-Cache
X-Cache-Action
X-Firewall
X-Box
X-Instance-Name
X-Info
X-Sid
IP-Addr
X-Phpwcms-Release
X-Highwire-Smart-Code
X-SV
D
X-Nginx-Request-Processing-Time
X-Proxy-Skip
X-We-Are-Hiring
X-Ms-Version
X-Clx-Request
AMP-Access-Control-Allow-Source-Origin
X-VERSION
X-Serverid
X-Cache-Warmer
Z
X-MSU-SOURCE
X-WHO
X-Nginx
X-Appversion
MageStack-PageSpeed
MageStack-Tag
MageStack-Loadbalancer
MageStack-Debug
MageStack-Config
MageStack-Web-Node
Viewport
X-Id
Device
X-LBPoolMember
X-Cache-Me-Harder
MageStack-Cacheable
MageStack-Magento-Version
MageStack-Cache
MageStack-Area
MageStack-Cache-Lifetime
MageStack-Cache-Hits
MageStack-Cache-Status
X-Ghost-Cache-Status
CommunityServer
X-Pageid
NEL
X-Flash-Messages
X-PageCache
X-UD-METHOD
MageStack-Last-Modified
Origin-Vm
X-Fastly-Backend-Reqs
X-BIT-Node
X-Access-Control-Allow-Origin
Provided-Host
X-CH-Device
X-Cache-Node
WN
MageStack-Cache-Warning
X-Requestid
X-ProBase-Server
X-Cache-Id
X-Time-Spent
X-HS-Content-Group-Id
X-V-Cache
X-UT-Cache
Server-Id
X-ZORequestID
CINC-Endpoint
X-Beresp-Ttl
X-WN-ClientGroup
Amfplus-Ver
X-B
X-Header
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Stiffia-Cache
X-Beluga-Trace
X-VG-WebCache
X-Thanos
X-Beluga-Status
X-Beluga-Response-Time-X
X-Beluga-Record
X-Beluga-Response-Time
X-SuperCache
X-Request-Processing-Time
X-Amz-Meta-Cb-Modifiedtime
Requested-Host
HitInfo
X-DDM-SERVER
X-DDM-SERVER-UPDATED
X-Newrelic-Synthetics
X-Request-Received
X-Beluga-Node
No-Cache
AddDefaultCharset
X-ASAP-Age
X-ServiceProvider
Apple-Itunes-App
Page-Template
X-Built-With
X-TNCMS-Bot-Tier
X-ASAP-Cache
X-Croise-Owner
Progma
X-Beluga-Cache-Status
X-LAKANA-AB
X-Enhanced-By
X-Clara-ASAP
X-AWS
AR-SID
Language
NB-Cache
X-Page
X-Pool
X-Dispatcher-Number
Powered-By-VeryCDN
X-OCTOPOD
X-InstanceId
X-Vid
X-VC-Cache
X-Req-Counter
X-RAMCache
X-VC-Hash
X-T
X-Transaction-Name
X-VC-Cacheable
X-VC-Debug
NtCoent-Length
X-Cjtype
X-Container
X-Author
Powered-By-115
Xxline
AR-ATIME
AR-PoweredBy
AR-CACHE
316pxxline
262prline
129prxHost
X-UPSTREAM-Address
135prxHost
Www.Aujourdhui.Com
259pxline
196prxHost
X-Varnish-Cache-Control
Ibf5scheme
TTL
Tk
X-AMAZEEIO
X-Apache2-RT-MicroSec
X-Machine
X-Client-Ip
ServerTokens
ServerSignature
SB-Cache-Life
Origin-Edge-Control
SB-Cache-Remaining
SB-Site-Device
SB-Site-IE-VERSION
X-Nginx-VM-RT
X-Obvious-Info
X-Abuse
Ohc-Response-Time
X-Dck
X-NMT-Proxy
X-Pass-Through
X-Node-Id
HA-Status
CDCHOST
X-Page-Cacheable
X-Obvious-Tid
X-RequesterIP
X-SATserver
X-User-Agent-Tier
Origin-Cache-Control
X-UA
WP-AdvCache-MemCached
SERVER-NAME
X-Geo-IP
X-Skip-Cache
DB-Nickname
Backend-Powered-By
X-NewsFlow-Sitename
X-MainProfileURL
X-Healthy
X-Bitrix-Composite
X-MainProfileCategory
X-MainProfileID
X-MainProfileName
X-B3-Sampled
X-Block-Rule
X-DODN-Region
X-DODN-Id
X-LB-Backend
X-LB-Frontend
X-Old-Content-Length
Expiries
Debug-Status
X-CacheLoc
X-Block-RuleID
X-Fpc
X-Sn-Servicetimems
X-Cache-Bypass
X-Powered-By-ADS
X-Rocket-Nginx-File
X-Tag-Playlist
X-Expires
HTTPS
MS-CV
Tesla.Performance
Tempo
NS-VaryByCustom-Key
Ews
TestCC
X-Varnish-URL
VAR-Cache
X-Custom-Header
EQ-Cache
X-Activity-Id
X-Az
X-Processed
X-Pj-Cache-Status
X-Served
X-This-Proto
Generate-Time
X-Oferteo-Domain
X-HA
X-Cache-LB
X-Cache-Detail
X-Cname-TryFiles
X-Debug-Message
X-Deity
X-Telligent-Evolution
X-Router
Purge-Cache-Tags
Hit-Count
Value-Of-Url
X-APIAUTH-VAL
X-ENDPOINT
X-APIVERSION
Fastly-Restarts
X-XHTML-Minification-Powered-By
X-SCM-Server-Number
X-Rocket-Nginx-Reason
X-Test-Debug
X-Varnish-Cache-Ttl
X-WebKit-CSP-Report-Only
X-Max-Age
X-ORIKEY
X-InDy-Memory
X-From-Cache
X-InDy-Query
X-InDy-Time
X-Reqid
Sl-Pgid
PROGMA
X-ROUTING
X-PressLabs-Stats
X-Search-Id
X-Varnish-Debug-Hits
Cache-Ctrol
MageStack-Cache-Lifetime-Sent