Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
Age
X-Cache
P3P
Expect-CT
Content-Language
X-AspNet-Version
X-Pingback
Via
X-UA-Compatible
Upgrade
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Varnish
Referrer-Policy
X-Request-Id
X-Adblock-Key
X-Check
X-Generator
X-Xss-Protection
WPE-Backend
X-Type
X-Cache-Group
X-Pass-Why
X-Language
X-Template
X-Drupal-Cache
X-Buckets
X-Permitted-Cross-Domain-Policies
Alt-Svc
X-Download-Options
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Ac
X-Hacker
Host-Header
X-Cache-Hits
X-ShopId
X-Dc
X-ShardId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-Section
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-PodId
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-ShopId
X-Alternate-Cache-Key
X-AspNetMvc-Version
X-Via
X-Runtime
X-Powered-By-Plesk
X-Served-By
X-Contextid
X-UA-Device
X-ServedBy
X-PC-Hit
X-PC-Key
X-Amz-Cf-Id
X-PC-AppVer
X-PC-Host
X-PC-Date
MS-Author-Via
Access-Control-Allow-Headers
Content-Location
X-IPLB-Instance
Access-Control-Allow-Methods
X-Powered-CMS
X-Shopify-Stage
X-Timer
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Rid
X-Wix-Request-Id
X-Seen-By
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
Status
CF-Cache-Status
X-Tumblr-Pixel-1
X-FRAME-OPTIONS
Cartoon
X-Tumblr-Pixel-2
X-Iinfo
Access-Control-Allow-Credentials
X-Backend
X-Cache-Status
X-CST
Powered-By
X-WPE-Loopback-Upstream-Addr
X-Ua-Compatible
X-Host
Content-Encoding
X-Endurance-Cache-Level
X-Cache-Hit
X-Cache-Enabled
X-Port
X-Mod-Pagespeed
X-CDN
X-Tumblr-Pixel-3
X-Logged-In
X-Server
X-Server-Powered-By
X-Drupal-Dynamic-Cache
Keep-Alive
X-DIS-Request-ID
X-Robots-Tag
X-Request-ID
X-Nginx-Cache-Status
X-Proxy-Cache
X-Accel-Version
X-Turbo-Charged-By
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-LiteSpeed-Cache
X-Page-Speed
Content-Security-Policy-Report-Only
P3p
X-Content-Digest
X-Content-Powered-By
X-GitHub-Request-Id
Request-Context
X-FW-Hash
X-Tumblr-Pixel-4
X-FW-Server
X-AH-Environment
X-Rack-Cache
X-FW-Type
X-FW-Serve
X-FW-Static
X-Pad
X-Varnish-Cache
X-Hits
Access-Control-Expose-Headers
X-Webcom-Cache-Status
X-BC-Stapler
Edge-Control
X-XRDS-Location
X-Trace
X-Newrelic-App-Data
X-Node
SPRequestGuid
X-SharePointHealthScore
X-MS-InvokeApp
Edge-Cache-Tag
WP-Super-Cache
X-HS-Cache-Config
Cf-Railgun
X-HS-Content-Id
MicrosoftSharePointTeamServices
X-CF-Powered-By
X-Request-Country
X-Amz-Request-Id
X-Amz-Id-2
Timing-Allow-Origin
Charset
X-Died
X-Content-Security-Policy
Allow
X-PHP-Backend
X-Cache-Lookup
X-FullPageCaching
X-Fastly-Request-ID
X-INKT-URI
X-INKT-SITE
Request-Id
Access-Control-Max-Age
X-Backend-Server
X-HS-Combine-CSS
X-Cnection
SPIisLatency
SPRequestDuration
X-Edge-Cache
X-Edge-Cache-Key
Ali-Swift-Global-Savetime
X-Swift-SaveTime
X-Swift-CacheTime
Rating
Composed-By
MicrosoftOfficeWebServer
X-CDN-Pop
X-CDN-Pop-IP
Grace
EagleId
X-Tumblr-Pixel-5
X-Server-Name
X-DDC-Arch-Trace
X-NF-Request-ID
X-Tumblr-Content-Rating
X-Safe-Firewall
X-Device
Served-By
X-SS-Conf
X-SS-Location
X-Spip-Cache
X-Dw-Request-Base-Id
X-SERVER
X-Hyper-Cache
Liferay-Portal
X-VCache
P-WS
P-LB
Front-End-Https
X-HeyJason
X-Do-Not-Hack
Permitted-Cross-Domain-Policies
X-OneAgent-JS-Injection
X-Cloud-Trace-Context
X-LiteSpeed-Cache-Control
Surrogate-Control
X-Kinsta-Cache
X-Original-Date
X-Sol
X-Middleton-Display
Display
X-RateLimit-Remaining
X-TNCMS
X-Loop
X-RateLimit-Limit
X-RateLimit-Reset
Response
X-Middleton-Response
X-Acc-Exp
X-Cluster-Node
X-Jimdo-Wid
X-Jimdo-Instance
X-FB-Debug
X-Clacks-Overhead
Content-Style-Type
X-Vtex-Processado-Em
X-StackifyID
X-Firenze-Processing-Times
Content-Script-Type
Feature-Policy
Public-Key-Pins
X-HOST
X-Debug-Info
X-Ruxit-JS-Agent
X-Amz-Version-Id
Fpc-Cache-Id
X-Tumblr-Pixel-6
X-Age
X-Magento-Tags
Refresh
X-Frame-Option
X-WebKit-CSP
X-Goog-Hash
X-XN-XNHTML
X-XN-Trace-Token
Xkey
X-Cached
X-LW-Cache
X-DNS-Prefetch-Control
X-Zen-Fury
X-DynaTrace-JS-Agent
X-User-Agent
X-N-OperationId
X-Px
PageSpeed
X-Version
X-ARC
X-Cache-Config
Retry-After
X-Edge-Location
X-Hostname
X-Generated-By
WPX
X-Webserver
X-Handled-By
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Url
X-Dns-Prefetch-Control
X-PhApp
X-Servedby
X-Upstream
X-B-Cache
X-Topify-Platform
Fastcgi-Cache
Access-Control-Request-Method
X-MiniProfiler-Ids
Rt-Fastcgi-Cache
X-EdgeConnect-Origin-MEX-Latency
TCN
X-Source
X-CMS-Version
X-Loopia-Node
X-Magento-Cache-Debug
Powered
X-Cached-By
X-EdgeConnect-MidMile-RTT
X-ET-API-ORIGIN
X-ET-API-VERSION
X-RESOURCE
X-Whom
X-ET-API-ROOT
Last-Published
X-FORWARDED-FOR
X-Accel-Expires
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-URLSCHEME
X-Request-Time
X-Outils-CS
X-Powered-By-VTEX-Janus-ApiCache
ServedBy
No
X-VTEX-Cache-Status-Janus-ApiCache
X-CacheServer
X-Vtex-Remote-Cache
X-Vtex-Processed-At
X-VTEX-Janus-Router-Backend-App
Product
X-Fastcgi-Cache
X-Engine
Public-Key-Pins-Report-Only
Fhost
X-Location-Id
X-Developer
X-Content-Options
Warning
X-Signature
X-Platform-Server
Pagespeed
X-Application-Context
X-AspNetWebPages-Version
X-Varnish-Count
X-Varnish-HitMiss
X-Cache-Key
X-Defender
Cache-Key
X-Shop-Id
X-F-Cache
X-Platform-Processor
X-Platform-Cluster
X-Platform-Router
X-Varnish-Cache-Hits
X-URL
X-Actual-URL
X-Varnish-Host
X-Cache-Info
Host
X-PERF
X-ApacheServer
Dmn
X-From
X-LBLID
X-Ezoic-Cdn
X-Magento-Cache-Control
X-Varnish-Beresp-Status
X-Microcache
X-Varnish-Beresp-Ttl
X-Returned-From
X-Original-Request
X-Passed-To-DLL
X-Varnish-Beresp-Grace
X-Returned-From-DLL
X-Passed-To
X-Forwarded-For
X-Stale
X-Microcachable
Cache-Provider
X-Response-Time
Imagetoolbar
Alternate-Protocol
X-Cache-Age
X-Returned-From-BeforeDispatch
X-Platform
X-Umbraco-Version
X-S
X-Returned-From-PostProcessResponse
X-DynaTrace
X-Passed-To-PostProcessResponse
X-Passed-To-BeforeDispatch
X-NWS-LOG-UUID
X-Gateway-Cache-Key
X-Gateway-Cache-Status
X-Gateway-Skip-Cache
Generator
X-Device-Type
X-Cache-Rule
X-HS-Content-Campaign-Id
X-Acquia-Application-Trace
Content-Hash
X-Acquia-Application-UUID
Arr-Disable-Session-Affinity
X-SSLProxy
X-GUploader-UploadID
Origin
X-SSLUpstream
X-Hosted-By
Version
X-Environment
X-Correlation-ID
X-Translation
X-Microcache-Status
X-Sapient
X-Cache-Namespace
X-Guploader-Uploadid
X-Svr-Proxy
X-SVR-IIS
X-Dealeron-Backend
X-Powered-By-360WZB
X-Cache-TTL
X-DealerOn
X-Dealeron-Original-Url
SSPAppContext
X-Micro-Cache
X-App-Status
X-I-Sp
X-SO
X-BS
X-Lambda-Id
X-Rnd
Surrogate-Key
MIME-Version
X-Msg-2-Log
X-Dispatcher
X-Platform-Cache
X-Via-JSL
X-Duration
X-Server-ID
X-Supported-By
X-NetCat-Version
USPLoggingUUID
X-SSL-Cipher
X-Expires-Orig
X-Cache-Tags
X-Varnish-TTL
X-Server-Upstream
X-Akam-SW-Version
X-Instart-Request-ID
Node
WZWS-RAY
X-Hypernode
X-SSL-Protocol
X-Page-Cache
Content-Disposition
X-Abgroup
X-ORACLE-DMS-ECID
X-Sucuri-ID
X-Cache-Control-Orig
X-Powered-By-VelaWeb
X-Drupal-Cache-Tags
X-Art-Request-Id
CF-Worker-Version
DynaTrace
X-Track
X-Director
S-Cnection
X-Vcap-Request-Id
X-VARITI-CCR
X-Matrix-Proxy
Content-Encoding-Handler
Pool
X-Client-IP
X-Matrix-Server
SN
X-Sucuri-Cache
X-Storage
X-Varnish-Cacheable
X-Generated
X-CSRF-Protection
Powered-By-ChinaCache
X-ServerName
X-Front
X-App-Hosting
X-Gamma-Serve
RTSS
X-Vhost
X-TransIP-Balancer
X-Edge-IP
X-NewRelic-App-Data
X-TransIP-Backend
X-Revision
X-Grace
X-Amz-Meta-S3cmd-Attrs
X-Debug
X-Helper-Autoassign-All
X-Geo-Country
X-Powered-By-VTEX-Janus-Edge
X-Cache-Lifetime
X-Cache-Debug
X-Rocket-Nginx-Bypass
X-Cache-Engine
Cache
Accept-Encoding
Req-Id
X-Flow-Powered
X-NoCache
X-Github-Request-Id
FAI-W-FLOW
X-Daa-Tunnel
X-Cache-Server
Cache-Tags
X-LB-Server
X-Content-Encoded-By
X-Varnish-RemainingTTL
X-Forwarded-Proto
X-Varnish-ObjectSource
X-Varnish-Seen-By
X-Dispatch
X-Drupal-Cache-Contexts
X-Env
X-Varnish-GracePeriod
X-Varnish-RemainingLife
Akamai-IP
X-Esi
Update-Time
Src-Update
X-SmugMug-Values
X-SmugMug-Hiring
Smug-CDN
X-TTFB
X-Last-Modified
X-Country-Code
X-IsCacheURL
X-Correlation-Id
X-Rocket-Nginx-Serving-Static
X-TTFB-L
Contao-Page-Layout
X-Cache-Only-Varnish
X-SV-Nginx-Duration
X-SV-FromDBCache
X-Varnish-Age
X-Now-Id
X-SRV
X-Server-Id
X-FTR-Request-ID
X-SV-Edge
X-SV-Pid
X-SV-Duration
Section-Io-Id
X-Route-Server
ServerID
X-SV-CreatedAt
Wsr-Cache
X-UPSTREAM
X-Ttl
Service-Worker-Allowed
X-Locale
X-Cache-Handler
Edge-Control-Message
Author
X-Cache-Control
X-Server-Instance
X-Unbounce-Variant
X-Pressidium-NinukisWP-Ver
SiteSpeed
X-ATG-Version
X-Unbounce-PageId
X-Unbounce-VisitorID
X-SV-CacheTags
X-Content-Type-Option
X-Varnish-Url
X-SV-Cacheable
Cneonction
Lsrequestid
Server-Timing
X-Firenze-Processing-Time
X-SV-Expires
X-Discourse-Route
Strikingly-Cache-Region
Strikingly-Cached-Version
Strikingly-Cached
X-CJ-Soft
X-I
X-Recruiting
X-TTL
Server-Name
X-Cache-Type
Https
X-Cache-Operation
X-Cache-Level
X-FIRSTBase
X-GeoIP-Country-Code
X-Trace-Id
X-Varnish-IP
If-Modified-Since
X-Speed-Cache-Key
X-Speed-Cache
CF-Worker-Script
X-TransIP-Reserved
X-UD-Method
X-N
X-Hiawatha-Cache
X-Url-Base
X-SDS
X-NA-CachePolicy
X-Varnish-Backend
X-SRCache-Key
X-Rq
Dtk-Cache-Check-0
X-Middleware-Start
W
X-Time
X-Nginx-Cache
Backend
X-Amz-Rid
X-ORACLE-DMS-RID
Pv
S
X-LB
X-Cache-Expires
Use-Proxy
Nodo
X-PwB-Node
X-Service-Id
AMF-Ver
X-Fastly-Request-Id
X-Cache-PageType
X-Cache-Fix
X-Twitter-Response-Tags
X-GeoIP-Country-Name
X-Cache-Device-Type
X-Connection-Hash
X-Transaction
X-Symfony-Cache
SEOMOZ
X-Akamai-Device-Model
Content-MD5
X-Akamai-Device-Characteristics
MJ12bot
X-Storage-Cache
X-Orig-Vary
X-Storage-Cache-Date
X-Magnolia-Registration
X-BKSrc
PICS-Label
X-NginX-Cache
X-Storage-Cache-Expires
Srv
X-Config-Blacklist-Version
Custom-Header
X-RequestId
X-Dynamic-Cache
MC
X-Empowered-By
ServerName
Location
X-TB-M
From-Origin
NetMindSessionID
X-ID
X-Litespeed-Cache-Control
X-Browser
X-Now-Cache
X-Varnish-Retries
Page-Completion-Status
X-High-Performance
X-CacheFROM
Qs-Cache
X-PF-Uncompressing
X-CDN-Forward
Proxy-Connection
X-Content-Age
X-HW
Xc-Version
X-Content-Security-Policy-Report-Only
X-Real-Server
X-Amz-Storage-Class
X-CF-Passed-Proto
Accept-Charset
X-Processing-Time
X-Cookie-Domain
NnCoection
X-Disney-Akamai-Rule
X-GoCache-CacheStatus
FindLaw
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-Worker
X-FW
X-BackendServer
X-Analytics
X-Akamai-ERPolicy
X-Key
Ramp
Ohc-File-Size
Backend-Timing
X-Proxy-Backend
X-Akamai-ERRuleID
Noq
Ram
X-Srv
X-Stage
X-Processed-By
X-CB-Server
Pics-Label
HCVer
HAVer
X-Webkit-CSP
Tracecode
X-SP-UniqueName
Edit
Content_type
Prama
X-Origin
X-Runtime-Memory
X-Varnish-Hits
X-WEBSERVER
X-Amz-Meta-Content-Md5
X-ARRServer
X-Ruxit-Js-Agent
Frame-Options
X-SP-Farm
X-Varnish-Server
IM-Version
X-Cache-TTL-Remaining
X-Sedo-Request-Id
Cached
Drupal-Pagecache-Memcache
X-Shard
X-Cache-Miss-From
IBM-Web2-Location
X-RealServer
Content-Transfer-Encoding
X-WPL-DATA
X-Yadis-Location
Hummingbird-Cache
X-App-Server
X-Nitro-Cache
X-Nbs
X-Frontend
X-JG-Page-Cache
X-Avg-Cookie-Expires
X-Akamai-Edgescape
X-Redman-Backend
X-Server-IP
X-Redman-Final-Url
Access-Control-Allow-Method
Lb
Local-Info
CacheControlHeader
Accept-Language
X-Origin-Date
SRV
Url
X-AVG-Country-Code
X-4ormat-Cacheable
Web-App-Origin-Name
Cm-Server
X-Drectory-Script
Proxy-Agent
RequestId
X-Pantheon-Az
X-Cache-2
Nopic
CDN-Cache
A-Powered-By
X-UnsetCookies
X-Pantheon-Site
X-Pantheon-Environment
X-CLOUD-TRACE-CONTEXT
X-A
X-Forwarded-Host
X-Pagename
WWW-Authenticate
Front
X-ServerID
X-HydroSheep
X-Hit-Cache
X-Pantheon-Phpreq
Surrogate-Key-Raw
X-Cache-Ttl
X-PRAM
X-Hstore
X-Hrouter
X-Varnish-Hostname
X-Generated-Timestamp
X-Force
X-Ratelimit-Remaining
X-Ratelimit-Limit
CDN-CachedAt
X-Unique-ID
X-Webstats-RespID
Environment
X-Sys-Req-ID
CDN-Uid
CDN-RequestId
X-Cache-CFC
X-Appmachine-Environment
X-Session-ID
Referer
Request-EU
Request-Country
X-Path-Route
X-VCS-Cacheable
Accept-CH
X-Request-Uri
X-Plat
X-Culture
CDN-PullZone
X-Yottaa-Metrics
X-Span
X-Client-Image-Vid
X-Debug-Token
Server-Info
X-Client-Vid
X-CAPServer
X-EPiphany-Vid
X-HTML-Minification-Powered-By
X-Proxy
Report-To
X-Varnish-Id
X-NginX-Server
X-Remote-Addr
X-Source-ID
X-VCS-Ttl
X-GeoIP
X-Yottaa-Optimizations
X-Backend-Status
X-LP
X-Distributor
Lookup-Cache-Hit
X-ServerIndex
X-V
X-CacheDebug
X-Nginx-Dummy
SHInfo
X-Distil-CS
X-Shield-Request-Id
X-Oneagent-Js-Injection
X-FireWall-Port
X-Varnish-Ttl
Pf.Web.Request.Id
X-Provisioner-Version
X-Domain-Checked
X-Cacheable-TTL
X-MCB-Server
X-AEM
X-ClientSide-Caching
Home
X-SERVER-ID
X-Role
XDomainRequestAllowed
IISExport
X-Adobe-Loc
X-Cache-Dispatchercachecontrol
X-Cache-Dispatcherpragma
SVR
X-VC-Enabled
Beyond-Iis
X-Varnish-Backend-Beresp-Backend
X-Location
Nitro-Cache
X-Adobe-Content
DNNOutputCache
Max-Age
Dispatcher
X-CACHE-TTL
X-Id
X-Detected-Device
Eomportal-Instance
X-Framework
Swift-Performance
Nginx-Cache
X-Balanceador
X-AOL-HN
X-Cache-Doesi
X-Middleton-Pagespeed
X-NWS-UUID-VERIFY
Dis-Env
X-Reflector
X-Reflector-Cache
X-LB-Node
X-Vcache
X-Atraveo-Param-Rm
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-Goog-Meta-Replace
X-App-Runtime
X-Atraveo-Zone
X-Atraveo-ETag
X-Atraveo-Cache-Control
X-HeBS-Cache-Status
X-Consent-Required
Magicmarker
X-NginX-Upstream
Cteonnt-Length
Machine
X-Real-IP
X-Runtime-Affili
X-Atraveo-Varnish-Server-Id
X-Nginx-Host
X-LW-Web-Server
X-Via-NSCOPI
Identity
X-FastCGI-Cache
X-Goog-Meta-Policy
X-FPC
YF-ID
X-Actindo-Thread-Id
X-Aramark-SID
X-Adnet
Resin-Trace
X-B2f-Not-Route
X-Proxy-Cache-Key
X-ACCELERATE
X-AF-Userserver
X-Actindo-Rs
X-PBY
X-Timestamp
Proxy-Cache
TC-S-Cache-M
X-Resolver-IP
Play-Detected-Device
Play-Detected-UserAgent
Myheader
Filters
X-Route
X-Actindo-Request-Id
COMMERCE-SERVER-SOFTWARE
VANITY-HOST
Il-Cl
X-Scheme
X-Aramark-CSID
TC-Cache-U
X-Flex-Community
X-Flex-Evend
X-Flex-Evstart
WP-FROM-CACHE
Upgrade-Insecure-Requests
Locale
BALANCEDTO
X-Flex-Lang
X-Varnish-Grace
X-Hit
X-ETag
X-Flex-Tag
X-Flex-Lastmod
X-Purge-Host
X-SAPP
X-Purge-URL
CS-SERVER
Arrnode
TC-Cache-IC
TC-Cache
X-ZSITES-DNS
Access-Control
X-Fedora-School-Id
X-Instance
TC-S-Cache
X-WebNode
X-Via-S
X-Flex-Tags
*
X-Map-Context
X-Proxy-Cache-Control
X-Soro
X-Req-Head-Response
X-JSESSIONID
AETN-Area-Code
AETN-Latitude
AETN-EU
AETN-DEVICE
AETN-Longitude
AETN-Postal-Code
Load-Balancer
X-CacheID
AKA-DEVICE
AETN-Country-Name
AETN-Country-Code
X-Akamai-Transformed
X-Amz-Id-1
X-Amcomm-Site
X-RiS-PX
Copyright
AETN-Continent-Code
AETN-City
X-Webcelerate
IES-Server
X-DynamicCache
X-HostName
AsisCache
X-Unique-Id
Access-Control-Request-Headers
X-Jphone-Copyright
X-Varnish-Debug-Age
X-Varnish-Debug-TTL
Firespring-Website-Id
X-WR-Flags
AC-ELC
Cmsid
Cmstype
X-E
X-GSL-Server
X-Instance-Id
X-Static
X-RiS-UFDI
X-Server-Addr
X-TKP-SRV-ID
AETN-State-Code
Traffic-Origin
Num
X-Rack-CORS
X-HA-Frontend
X-Varnish-Cache-Local
X-HashTwo
X-Data-Request
X-HA-Backend
X-SE-Debug
X-Hostinger-Node
NLCacheNote
Cleartype
X-ESI
X-IIJ-Cache
X-Fstrz
AMP-Access-Control-Allow-Source-Origin
X-Cocoon-Version
Serverid
X-Nginx
X-Ms-Request-Id
X-Xml-Http-Blocked
X-WP
NODE
Adm-Server
X-Dev
MICROSOFTOFFICEWEBSERVER
Disablevcache
X-ACMCache
Prot
X-Smartcache-Timeout
X-Cms-Mode
Bios
X-Hostinger-Datacenter
X-Smartcache-Keys
X-Envoy-Upstream-Service-Time
Worker
RN-Server
X-PBS-Appsvrname
X-Blog
X-App
X-PBS-Appsvrip
X-MyName
X-Gyrobase-Publication
X-Status
X-DSMX-Rewrite-MS
X-DN-Cache-Control
Section-Io-Origin-Status
X-Client-Id
Section-Io-Origin-Time-Seconds
X-Frames-Options
X-GeoIP-Country
X-Upgrade-Enabled
NGX
X-Test
X-Dw-Trace-Id
X-Custom-Name
X-PBS-Fwsrvname
X-Qnm-Cache
X-DSMX-Render-MS
X-M-Log
X-M-Reqid
ClientIP
Gzip
F5-IpCliente
GranicusServer
CLMOB
X-Middleton-PageSpeed
X-FastCGI-Cache-Status
X-Cache-Date
X-Confluence-Request-Time
X-SH-Cache-Status
X-WEBMGR-CACHE
Pramga
Thanks
X-Access-Control-Allow-Origin
X-Upstream-Backend
X-DataDome
X-Served-Server
Fastly-Debug-Digest
X-Secret
X-Upstream-Status
X-Origin-Cache
Fastly-Backend-Name
Srv-Name
Edgecast
ProxiaInstanceId
X-Cache-FS-Status
VC-NoCache
X-Depends
X-Generated-Time
Cf-Ipcountry
X-Mobilized-By
X-SmartBan-URL
PServer
Aurora-Node
X-WebServer
X-Refresh
X-Rule
X-SmartBan-Host
X-OpenCart-Lightning
X-Appversion
Pragrma
Yoncu-Errno
DrivedBy
Hosted-By
XX
X-Captured
X-Streams-Distribution
X-LBPoolMember
X-Resource
X-Highwire-SessionId
X-Info
X-Batcache
Access-Control-Allow-Header
X-Highwire-RequestId
X-Garden-Version
X-Cache-Varnish
X-Amz-Meta-S3b-Last-Modified
X-FORWARDED-PROTO
MageStack-Web-Node
MageStack-Magento-Version
MageStack-Tag
MageStack-PageSpeed
MageStack-Debug
MageStack-Cacheable
MageStack-Cache-Hits
MageStack-Cache
MageStack-Cache-Lifetime
MageStack-Cache-Status
Viewport
MageStack-Config
Device
Keywords
X-Bip
Description
X-Hosting-Env
X-SDE-Name
VServer
Server-ID
MageStack-Area
X-Varnish-ID
X-DevSrv-CMS
Og
ScoreTracker
X-Cache-Me-Harder
MageStack-Loadbalancer
X-UD-METHOD
X-Directory-Script
X-ReqId
Provider
X-Cache-Detail
NZSpeedy
X-Proto
X-Appid
X-IP
X-Gateway-Rate-Limit-Delayed
X-UUID
X-We-Are-Hiring
X-Serverid
X-Domino-CacheValidationWithETagReason
X-Expires
X-Now-Trace
X-DB-Content-Length
Ttl
Content-Sn
X-Served-From
X-NoIndex
X-Vary-Options
X-Beatles
X-Tag-Playlist
MS-CV
Tempo
X-Domino-CacheValidationWithETagResult
X-RunCloud-Cache
X-Activity-Id
X-Origin-Upstream-Status
X-Shopware-Allow-Nocache
Tesla.Performance
X-Application
TYPO3-Sitename
TYPO3-Pid
X-Shopware-Cache-Id
ModuleCacheType
X-TLS-Version
X-Always-Cache
X-Az
X-Varnish-Ip
X-Batcache-Reason
X-Vol-Mrp
EQ-Cache
X-Cache-ID
X-Vol-Correlation
X-Cache-Time
X-Beget-Proxy
X-Wodby-Node
Ews
ID
NS-VaryByCustom-Key
X-CSRF-Token
X-V-Cache
N365rili
AMP-Redirect-To
X-Cache-On
X-Cdn-Forward
X-Rebelmouse-Cache-Control
X-CRA-DC
X-MAT-GEO
X-Desc
X-Amz-Apigw-Id
Paypal-Debug-Id
X-Amzn-RequestId
X-Amzn-Trace-Id
X-Container
X-Compress-Hint
X-Response
X-WR-MODIFICATION
X-Cache-Node
Server-Id
SWS-Security
,
X-Cache-Var-Map
X-Cache-Var
IP-Addr
X-Page
X-ASAP-Cache
X-ASAP-Age
X-Clara-ASAP
X-Lb
X-Nx-All
X-Nx
X-UPSTREAM-Address
X-Dispatcher-Number
X-This-Proto
X-Served
Generate-Time
WN
X-UT-Cache
X-Time-Spent
X-Resty-Request-Id
X-Processed
X-Debug-Message
X-Cname-TryFiles
X-Deity
X-HA
X-Pj-Cache-Status
X-Oferteo-Domain
X-WN-ClientGroup
Amfplus-Ver
Apachenode
X-WA-Info
NB-Cache
Session-Id
X-Catalyst
X-Avvio-Cms-Cacheload
X-Req-Counter
X-RAMCache
Origin-Vm
CommunityServer
Provided-Host
X-CH-Device
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Cache-LB
HTTPS
X-VC-TTL
Session-From
X-Highwire-Smart-Code
X-Proxy-Server
X-WebKit-CSP-Report-Only
X-W3TC-Minify
StatusCode
X-Title
X-Protected-By
X-Cache-TTL-Age
X-Render-Time
X-Rewritten-By
X-Session-Reinit
X-Nginx-Request-Processing-Time
ServerIP
Server-Ip
VSID
ViewMode
X-Autoru-App-Id
X-Autoru-Host
CommercePlatform-Version
X-Cache-HT
Httpd-Identifier
Id
OracleCommerceCloud-Sandiego
OracleCommerceCloud-Version
MSThemeCompatible
Response-Time
Ssl-Proxy-Server
MSSmartTagsPreventParsing
X-NodeID
X-Netrix-ID
X-SSL-Host
X-UA
X-Zendesk-Origin-Server
X-Zendesk-User-Id
HitType
From
Actual-Object-TTL
MachineName
X-ProcessESI
X-RemovedCookies
X-Serv
X-Server-Generated
X-Origin-Server
MwpReleaseVersion
X-Meta-MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
X-Country
X-Built-By
X-Cache-TTL-Current
X-Gannett-Site-Version
X-ManagedFusion-Rewriter-Version
X-Layout
X-BServer
X-BPool-Back
X-Meta-Imagetoolbar
X-Mobile-Rewrite
X-Instance-Name
X-Airee-Node
X-Firewall
X-Node-App
X-Highwire-Sitecode
X-EC2-Instance-Id
Now
PB-PID
X-Podname
X-Optimization
X-PM-ID
X-UPServer
X-Cache-Via
X-UA-Bot
X-Src-Webcache
X-PHP-Response-Code
SS
X-MCF-ID
PB-RID
X-Cdn-Origin
X-Varnish-Cached-TTL
X-Grid-Server
X-Backside-Transport
X-Firefox-Spdy
X-FromPodPressCache
X-Global-Transaction-ID
X-Varnish-Cached
X-GZip
PBS
REFRESH
X-Mighty-Proxy
X-WHO
X-Sorting-Hat-Expire-Cache
X-Dynatrace-Js-Agent
TP-L2-Cache
X-Ms-Version
Z
X-VTEX-Cache-Status-Janus-Edge
TP-Cache
X-Cache-Warmer
X-VERSION
X-Clx-Request
X-Varnish-Action
X-Geo
Xc
X-Cache-Extended
X-MSU-SOURCE
X-CACHE-KEY
X-NewsFlow-Sitename
UrlWatchModule-Time
Webserver
X-Cache-Action
SBSS
SB-Cache-Life
X-Box
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Amz-Meta-Cb-Modifiedtime
X-AppServer-Cache-Rule
X-7d-Instance-Id
Requested-Host
X-AppServer-Status
X-AppServer-Cache-Exception
X-Geoip-Country-Name
X-Amzn-Remapped-Date
X-Ser
X-Itkg-Cache-Tags
X-7d-Trace-Id
X-SSLTerm-Server
X-Page-Cacheable
X-Phpwcms-Page-Processed-In
X-SilverStripe-Cache
X-Newrelic-Synthetics
X-SuperCache
X-Sid
X-AWS
Cache-Cookie-Set-Idcheck
X-Phpwcms-Release
Cache-Cookie-Set-From
X-Obvious-Tid
X-ENV
X-Thanos
Cache-Cookie-Set-Lfrom
X-XHR-Current-Location
X-DDM-SERVER
X-Rack-Cors
Tk
No-Cache
X-VG-WebCache
X-Obvious-Info
X-DDM-SERVER-UPDATED
ServerSignature
Progma
X-ServiceProvider
X-Request-Processing-Time
X-AMAZEEIO
X-Request-Received
HitInfo
X-Apache2-RT-MicroSec
SB-Cache-Remaining
X-BIT-Node
X-Beluga-Status
X-Beluga-Response-Time-X
TTL
X-Beluga-Trace
X-Cache-Id
Language
Www.Aujourdhui.Com
X-VC-Cache
X-Pool
X-VC-Cacheable
X-VC-Debug
X-VC-Hash
X-Client-Ip
NEL
X-Cjtype
SB-Site-Device
X-HS-Content-Group-Id
X-InstanceId
X-Beluga-Response-Time
X-Beluga-Record
X-Varnish-Cache-Control
Content-Generator
X-PageCache
X-Server-Hostname
CINC-Endpoint
X-Artvisual-Server
X-Proxy-Id
X-Amz-Meta-Version-Id
X-Hosting
X-HEAD
X-Croise-Owner
X-Policy
X-Flash-Messages
AddDefaultCharset
X-Enhanced-By
X-Machine
X-LAKANA-AB
X-Beluga-Cache-Status
X-Beluga-Node
X-Nginx-VM-RT
Page-Template
Apple-Itunes-App
NtCoent-Length
X-Built-With
X-TNCMS-Bot-Tier
SB-Site-IE-VERSION
X-Abuse
ServerTokens
X-ENDPOINT
Expiries
X-APIVERSION
X-APIAUTH-VAL
Debug-Status
X-Cache-Bypass
X-ROUTING
X-Search-Id
X-PressLabs-Stats
X-ORIKEY
X-Max-Age
Value-Of-Url
Purge-Cache-Tags
X-Requestid
X-ProBase-Server
X-Varnish-Cache-Ttl
X-ZORequestID
X-Test-Debug
X-XHTML-Minification-Powered-By
MageStack-Last-Modified
Hit-Count
Fastly-Restarts
MageStack-Cache-Lifetime-Sent
MageStack-Cache-Warning
X-Sn-Servicetimems
X-Varnish-Debug-Hits
X-Fpc
X-Varnish-URL
X-InDy-Time
X-InDy-Query
X-InDy-Memory
X-Telligent-Evolution
X-SV
X-Reqid
X-CacheLoc
X-Block-RuleID
X-Router
X-Block-Rule
X-HS-Status
X-B3-Sampled
PROGMA
Backend-Powered-By
X-Custom-Header
Cache-Ctrol
X-Nws-Log-Uuid
Sl-Pgid
VAR-Cache
X-Agent
X-From-Cache
DB-Nickname
TestCC
Web
X-B
HSTS
FRONT-END-SECUREBROWSER
Powered-By-115
X-User-Agent-Tier
Origin-Cache-Control
316pxxline
262prline
129prxHost
X-Stiffia-Cache
135prxHost
196prxHost
259pxline
Origin-Edge-Control
X-Author
AR-CACHE
AR-ATIME
AR-PoweredBy
AR-SID
Content
Xxline
X-Proxy-Skip
X-Cluster
X-Compressed-By
X-SATserver
X-RequesterIP
X-Old-Content-Length
X-OCTOPOD
X-Powered-By-ADS
X-Pageid
X-T
X-Transaction-Name
X-Vid
X-Rocket-Nginx-File
X-Header
X-SCM-Server-Number
X-Beresp-Ttl
X-Fastly-Backend-Reqs
X-Ghost-Cache-Status
X-Rocket-Nginx-Reason
X-Pass-Through
X-Node-Id
SINA-TS
SINA-LB
Ohc-Response-Time
HA-Status
CDCHOST
X-LB-Frontend
X-LB-Backend
X-NMT-Proxy
X-DODN-Id
X-Dck
X-DODN-Region
D