Threat Level: green Handler on Duty: Russell Eubanks

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
X-Cache
X-AspNet-Version
Age
Content-Language
X-Pingback
P3P
Via
X-UA-Compatible
Upgrade
Expect-CT
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Check
X-Language
X-Template
X-Cacheable
X-Varnish
Alt-Svc
X-Generator
X-Buckets
X-Drupal-Cache
X-Xss-Protection
P3p
X-Request-Id
Referrer-Policy
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Powered-By-Plesk
X-Download-Options
Host-Header
Content-Location
MS-Author-Via
X-ShopId
X-Runtime
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-Section
X-ShardId
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-PodId
X-Sorting-Hat-PodId-Cached
X-Dc
X-Alternate-Cache-Key
X-Sorting-Hat-FeatureSet
X-UA-Device
X-Powered-CMS
X-IPLB-Instance
X-Served-By
X-FRAME-OPTIONS
Cartoon
X-Request-ID
Access-Control-Allow-Headers
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-Amz-Cf-Id
X-Cache-Status
Status
X-Via
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
CF-Cache-Status
X-ServedBy
X-Contextid
X-PC-Hit
X-PC-Key
X-Mod-Pagespeed
X-Backend
Powered-By
X-PC-AppVer
X-PC-Date
X-PC-Host
X-CST
Content-Encoding
X-Host
X-WPE-Loopback-Upstream-Addr
X-Logged-In
X-Server
X-DIS-Request-ID
X-CDN
Keep-Alive
X-Rid
X-Cache-Hit
X-Port
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Cache-Enabled
X-Endurance-Cache-Level
X-Server-Powered-By
X-Tumblr-Pixel-1
X-Accel-Version
X-Original-Date
X-Nginx-Cache-Status
X-NewRelic-App-Data
X-Ua-Compatible
X-Robots-Tag
X-Drupal-Dynamic-Cache
X-Seen-By
X-Wix-Request-Id
X-Page-Speed
X-Turbo-Charged-By
X-Wix-Punisher
X-Tumblr-Pixel-2
X-Forwarded-For
X-Content-Powered-By
X-Proxy-Cache
X-Forwarded-Proto
X-Content-Digest
X-AH-Environment
X-Pad
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Varnish-Cache
X-LiteSpeed-Cache
Content-Security-Policy-Report-Only
WP-Super-Cache
X-Rack-Cache
X-GitHub-Request-Id
X-Tumblr-Pixel-3
X-Request-Country
Edge-Control
SPRequestGuid
X-XRDS-Location
X-MS-InvokeApp
X-SharePointHealthScore
MicrosoftSharePointTeamServices
X-Cache-Lookup
Timing-Allow-Origin
X-Cnection
X-Node
X-FW-Hash
X-Content-Security-Policy
Cf-Railgun
X-Amz-Request-Id
X-Amz-Id-2
X-FW-Type
X-FW-Static
X-FW-Serve
Charset
X-FullPageCaching
Request-Id
X-Died
X-Trace
X-Webcom-Cache-Status
Request-Context
X-PhApp
X-Hits
Edge-Cache-Tag
X-HS-Cache-Config
X-BC-Stapler
X-HS-Content-Id
X-CF-Powered-By
SPIisLatency
SPRequestDuration
X-INKT-URI
MicrosoftOfficeWebServer
X-INKT-SITE
X-Newrelic-App-Data
X-PHP-Backend
Composed-By
Access-Control-Expose-Headers
X-Webserver
Access-Control-Max-Age
Grace
X-Safe-Firewall
X-Swift-CacheTime
X-Swift-SaveTime
EagleId
Served-By
X-Spip-Cache
X-CDN-Pop-IP
X-CDN-Pop
X-Fastly-Request-ID
X-Backend-Server
X-Hyper-Cache
X-VCache
Liferay-Portal
X-Dw-Request-Base-Id
X-SERVER
X-Tumblr-Pixel-4
X-Firenze-Processing-Times
X-Server-Name
X-Device
X-StackifyID
X-FB-Debug
X-Microcache
Surrogate-Control
Refresh
X-SS-Location
X-SS-Conf
X-LiteSpeed-Cache-Control
X-Cloud-Trace-Context
Front-End-Https
X-RateLimit-Remaining
X-DNS-Prefetch-Control
Xkey
Content-Style-Type
X-Clacks-Overhead
X-TNCMS
X-Loop
X-RateLimit-Limit
Content-Script-Type
X-XN-Trace-Token
Public-Key-Pins
X-XN-XNHTML
X-RateLimit-Reset
Rating
X-Jimdo-Instance
X-Jimdo-Wid
X-HS-Combine-CSS
X-DDC-Arch-Trace
X-Acc-Exp
X-Vtex-Processado-Em
X-Age
X-User-Agent
X-WebKit-CSP
Fpc-Cache-Id
X-Cache-Config
X-Dscp-Value
X-Px
X-N-OperationId
X-Middleton-Response
Display
X-Sol
X-ServerName
Response
X-Middleton-Display
X-Hostname
X-Cached
X-Topify-Platform
X-Generated-By
X-Zen-Fury
X-Correlation-Id
X-Url
X-Tumblr-Content-Rating
X-Kinsta-Cache
X-MiniProfiler-Ids
X-Tumblr-Pixel-5
TCN
X-Request-Time
X-Magento-Tags
X-Whom
X-Handled-By
X-Outils-CS
P-LB
P-WS
X-Loopia-Node
X-B-Cache
X-OneAgent-JS-Injection
Dmn
X-Amz-Version-Id
X-CMS-Version
X-Content-Options
X-DynaTrace
Edge-Control-Message
X-Msg-2-Log
X-Cached-By
X-LBLID
PageSpeed
X-From
ServedBy
Rt-Fastcgi-Cache
X-Debug-Info
Imagetoolbar
X-Varnish-TTL
X-URL
Access-Control-Request-Method
X-Ruxit-JS-Agent
X-DynaTrace-JS-Agent
X-Edge-Location
Surrogate-Key
Powered
X-Location-Id
Product
Host
X-Varnish-Cache-Hits
Public-Key-Pins-Report-Only
X-Upstream
X-CacheServer
X-AspNetWebPages-Version
X-Fastcgi-Cache
X-Goog-Hash
X-Returned-From-DLL
X-Passed-To
X-Original-Request
X-Passed-To-DLL
X-Actual-URL
X-Returned-From
X-Cluster-Node
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Signature
X-Cache-Rule
X-Shard
X-Returned-From-PostProcessResponse
DynaTrace
X-NWS-LOG-UUID
X-FORWARDED-FOR
X-VTEX-Janus-Router-Backend-App
X-Vtex-Remote-Cache
X-Varnish-Beresp-Ttl
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Vtex-Processed-At
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Cache-Status-Janus-ApiCache
No
X-Accel-Expires
X-Engine
X-Umbraco-Version
X-Platform
X-Stale
Retry-After
X-Art-Request-Id
Alternate-Protocol
X-Recruiting
Fhost
X-F-Cache
X-Via-JSL
X-Micro-Cache
X-Version
X-Platform-Processor
X-Platform-Router
Arr-Disable-Session-Affinity
X-Varnish-Host
X-Cache-Info
X-Rocket-Nginx-Bypass
Ohc-File-Size
X-LW-Cache
X-Platform-Cluster
X-Magento-Cache-Debug
X-ApacheServer
X-PERF
X-Response-Time
Fastcgi-Cache
X-Source
X-Matrix-Proxy
X-Device-Type
X-Developer
X-Matrix-Server
X-Hosted-By
X-Cdn
X-HS-Content-Campaign-Id
X-Microcachable
X-UD-Method
X-Supported-By
X-Instart-Request-ID
X-URLSCHEME
Last-Published
X-Application-Context
X-EdgeConnect-Origin-MEX-Latency
X-Powered-By-360WZB
WZWS-RAY
X-App-Status
X-S
Generator
Pagespeed
Cache-Provider
X-HOST
X-Gamma-Serve
X-Platform-Server
Origin
X-Storage
X-Rnd
X-TransIP-Balancer
X-Track
X-Powered-By-VelaWeb
X-Translation
X-Microcache-Status
X-Tumblr-Pixel-6
X-App-Hosting
X-Varnish-Count
X-Shop-Id
X-TransIP-Backend
X-Defender
X-Hypernode
X-Varnish-HitMiss
X-RESOURCE
X-Daa-Tunnel
X-BS
X-I-Sp
Content-Hash
Version
X-NetCat-Version
X-Drupal-Cache-Tags
Akamai-IP
X-Route-Server
X-Front
X-Platform-Cache
X-Cache-TTL
X-WebServer
RTSS
X-EdgeConnect-MidMile-RTT
X-Pantheon-Phpreq
X-Pantheon-Site
X-Pantheon-Environment
Surrogate-Key-Raw
X-Powered-By-VTEX-Janus-Edge
Cache-Key
X-Flow-Powered
USPLoggingUUID
X-Duration
Pool
X-Varnish-GracePeriod
X-Varnish-ObjectSource
HTTPS
X-Dispatcher
X-I
Lsrequestid
X-Varnish-RemainingLife
X-ATG-Version
X-Frame-Option
ServerID
X-Varnish-RemainingTTL
X-Varnish-Seen-By
Allow
X-CSRF-Protection
X-Last-Modified
X-Director
X-Cache-Age
X-Vcache
X-Server-ID
X-Cache-Key
X-Cache-Tags
X-SV-Edge
SSPAppContext
X-SV-Duration
X-SV-CreatedAt
X-SV-Nginx-Duration
X-SV-FromDBCache
X-SDS
X-SV-Pid
X-Cache-Namespace
Powered-By-ChinaCache
Content-Disposition
X-Page-Cache
X-Cache-Debug
X-Sapient
X-ORACLE-DMS-ECID
X-Expires-Orig
X-Generated
X-SV-CacheTags
Cneonction
X-SV-Cacheable
MIME-Version
X-Client-IP
X-SV-Expires
X-Litespeed-Cache
X-Ttl
X-Ezoic-Cdn
S-Cnection
X-Drupal-Cache-Contexts
X-Firenze-Processing-Time
X-Cache-Operation
X-SSL-Cipher
X-Grace
Pv
X-Environment
X-Server-Id
SN
X-Magento-Cache-Control
X-Server-Upstream
X-Content-Encoded-By
NnCoection
X-SSL-Protocol
X-Lambda-Id
Node
X-CJ-Soft
X-LB-Node
X-Origin
X-Abgroup
X-Revision
X-Vcap-Request-Id
Server-Timing
X-Debug
X-Varnish-Age
Section-Io-Id
Req-Id
X-Varnish-Cacheable
X-Time
FAI-W-FLOW
X-Varnish-Ttl
X-Amz-Meta-S3cmd-Attrs
IBM-Web2-Location
X-Akamai-Device-Characteristics
X-N
X-Edge-IP
X-Gateway-Skip-Cache
X-Gateway-Cache-Status
X-Gateway-Cache-Key
Accept-Encoding
X-Hiawatha-Cache
X-Bb-Deploy-Id
X-UPSTREAM
AMF-Ver
X-ID
Backend
X-Cache-Control-Orig
X-Runtime-Rack
ServerName
X-Oneagent-Js-Injection
X-Yadis-Location
Fw-Via
X-NoCache
X-Goog-Stored-Content-Encoding
Server-Name
X-Goog-Storage-Class
X-Goog-Metageneration
X-Goog-Generation
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-WEBSERVER
X-Cache-Server
X-Cache-Expires
X-PwB-Node
Wsr-Cache
X-TTL
X-Dispatch
Content-Encoding-Handler
Server-Info
X-Cache-Engine
X-Esi
IM-Version
Location
X-Content-Age
X-ARC
X-Varnish-Url
Fastly-Debug-Digest
X-Akamai-Device-Model
X-Cache-Only-Varnish
X-AOL-HN
X-Magnolia-Registration
X-Vhost
X-Redman-Backend
X-Varnish-Backend
X-AVG-Country-Code
X-Akamai-Edgescape
X-Avg-Cookie-Expires
X-Cache-Lifetime
X-ORACLE-DMS-RID
X-Discourse-Route
X-Redman-Final-Url
Srv
X-GeoIP-Country-Code
X-Varnish-IP
X-LB
X-Content-Security-Policy-Report-Only
X-IsCacheURL
S
X-Country-Code
X-Amz-Storage-Class
X-Geo-Country
Content-Transfer-Encoding
PICS-Label
Nodo
W
X-App-Server
X-Cache-Type
Proxy-Connection
Content-MD5
X-RequestId
Qs-Cache
X-Nbs
X-SRV
X-Sucuri-ID
SRV
If-Modified-Since
X-Url-Base
X-Nginx-Cache
X-Speed-Cache
X-Stage
Page-Completion-Status
X-Cache-Handler
X-Proxy
X-SO
CacheControlHeader
X-CF-Passed-Proto
HCVer
X-Real-Server
X-High-Performance
HAVer
X-BKSrc
Environment
Nitro-Cache
X-Varnish-Retries
X-Empowered-By
WWW-Authenticate
X-Speed-Cache-Key
X-Always-Cache
Cache-Tags
Frame-Options
Front
X-Rq
Accept-Charset
X-BackendServer
Author
X-VARITI-CCR
X-ServerID
X-Browser
Eomportal-Instance
VANITY-HOST
X-Cache-Level
Pf.Web.Request.Id
X-Resource
X-Dynatrace-Js-Agent
MC
X-SRCache-Key
X-Worker
X-HTML-Minification-Powered-By
X-Frontend
X-Cache-Device-Type
Custom-Header
X-Ruxit-Js-Agent
Contao-Page-Layout
X-Pressidium-NinukisWP-Ver
X-Cookie-Domain
X-GeoIP-Country-Name
X-Processing-Time
X-Shield-Request-Id
X-Correlation-ID
Cache
X-Litespeed-Cache-Control
Cached
Cache-Tag
X-Location
X-Varnish-Server
Pics-Label
X-Sucuri-Cache
X-Middleware-Start
X-WPL-DATA
X-Remote-Addr
X-Dealeron-Backend
X-Dealeron-Original-Url
X-DealerOn
X-Source-ID
X-FTR-Request-ID
X-Airee-Node
X-Unbounce-VisitorID
Tracecode
X-Unbounce-Variant
X-Unbounce-PageId
X-Server-Instance
Cm-Server
X-Rocket-Nginx-Serving-Static
X-Cache-PageType
X-Cache-Fix
X-Cache-CFC
X-Srv
X-PF-Uncompressing
X-AF-Userserver
X-Content-Type-Option
X-EPiphany-Vid
NetMindSessionID
X-Framework
IISExport
X-Client-Vid
X-Config-Blacklist-Version
X-Client-Image-Vid
X-Purge-URL
X-Cache-Control
Use-Proxy
X-Purge-Host
X-WebKit-CSP-Report-Only
X-Symfony-Cache
MJ12bot
X-Real-IP
X-HW
X-Env
X-Id
X-Compress-Hint
From-Origin
X-Page
Ufe-Result
X-CB-Server
Thanks
X-Cacheable-TTL
Cmstype
Local-Info
SEOMOZ
Cmsid
X-CDN-Forward
X-Atraveo-Expires
X-ACMCache
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
X-Atraveo-ETag
X-Atraveo-Cache-Control
X-Drectory-Script
X-Akamai-3PM-SW-Version
X-Akam-SW-Version
Identity
X-Atraveo-TTL
X-Atraveo-From-Varnish-Cache
X-NginX-Cache
X-Omnis-SiteID
X-Atraveo-Zone
Xc-Version
X-Atraveo-Varnish-Server-Id
X-Nginx-Host
X-Akamai-Transformed
X-Server-IP
X-FW
X-Trace-Id
X-App
Beyond-Iis
X-Pagename
X-Info
X-Hit-Cache
Accept-CH
X-IIJ-Cache
X-FW-Server
SVR
Access-Control-Allow-Method
NLCacheNote
X-Varnish-Hostname
Id
X-WA-Info
X-Directory-Script
X-IP
X-PRAM
NtCoent-Length
X-Force
X-Session-Reinit
X-Locale
Bios
X-VC-Enabled
X-Runtime-Memory
WN
X-Fstrz
X-Secret
X-Orig-Vary
X-Backend-Status
X-Time-Microsecs
X-Resty-Request-Id
EagleEye-TraceId
A-Powered-By
X-Cache-Dispatchercachecontrol
X-Mobilized-By
X-W3TC-Minify
X-Cache-Dispatcherpragma
AC-ELC
X-Clara-ASAP
X-RealServer
X-Ser
X-Garden-Version
X-TTFB
X-TTFB-L
X-Sites
X-Resolver-IP
X-ASAP-Cache
X-Plat
X-SmugMug-Hiring
X-FPC
Service-Worker-Allowed
X-Cache-Doesi
X-DTC
X-Adnet
X-Request-Uri
Content_type
X-SERVER-NAME
ServerSignature
X-NodeID
SERVER-ID
Smug-CDN
Hummingbird-Cache
X-WR-Flags
X-RTag
ServerTokens
SS
X-Abuse
X-Analytics
Ohc-Response-Time
Backend-Timing
X-Sys-Req-ID
X-Dns-Prefetch-Control
X-LB-Server
BALANCEDTO
X-JG-Page-Cache
Machine
X-GeoIP
X-SmugMug-Values
X-ClientSide-Caching
X-WN-ClientGroup
X-Fedora-School-Id
X-Blog
X-SmartBan-URL
X-SmartBan-Host
X-Twitter-Response-Tags
Adm-Server
Yoncu-Errno
X-Adobe-Loc
X-Session-ID
X-AEM
X-Highwire-RequestId
From
X-Connection-Hash
X-Transaction
X-Highwire-SessionId
NODE
X-Adobe-Content
X-GoCache-CacheStatus
X-Traffic
Web-App-Origin-Name
X-Search-Id
X-Rewritten-By
X-Route-To
X-OpenCart-Lightning
X-Provisioner-Version
X-Unique-ID
X-Server-Addr
Url
X-MCB-Server
X-ManagedFusion-Rewriter-Version
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Domain-Checked
X-VC-TTL
X-TB-M
X-Webstats-RespID
X-ACCELERATE
X-ServerIndex
X-HydroSheep
X-Debug-Token
SBGI-5
X-Cache-TTL-Current
SBGI-10
RequestId
Report-To
X-BServer
X-Cache-TTL-Age
TheAnswer
X-NginX-Server
X-BPool
SBGI-Device
SBGI-9
X-Webkit-CSP
X-BPool-Bx-Cache
SBGI-RealPath
EN-User
X-BPool-Back
Description
X-BPool-Fx-Cache
Myheader
SBGI-1
SBGI-RenderTime
SBGI-7
X-Machine
Resin-Trace
X-Webcelerate
X-Varnish-Id
X-Cache-Node
Magicmarker
X-Title
X-Powered-By-Home.Pl
X-Protected-By
X-Req-Head-Response
X-Src-Webcache
X-Cache-Via
X-Distil-CS
X-LW-Web-Server
X-LP
X-Cocoon-Version
X-PROCESSED-BY
Play-Detected-Device
Play-Detected-UserAgent
X-CAPServer
X-FireWall-Port
X-Origin-Server
HitType
X-Varnish-Debug-Age
X-Gannett-Site-Version
X-RiS-UFDI
Swift-Performance
X-Grid-Server
X-4ormat-Cacheable
X-Culture
Disablevcache
X-Agent
X-Depends
SHInfo
Edit
X-DataDome
Keywords
Max-Age
X-ARRServer
X-Varnish-Debug-TTL
X-Map-Context
Proxy-Agent
X-Key
X-Layout
X-Disney-Akamai-Rule
Accept-Language
VServer
X-A
Device
X-Batcache
X-Middleton-Pagespeed
X-Distributor
XDomainRequestAllowed
X-Balanceador
X-Cdn-Forward
X-DEBUG
X-Batcache-Reason
X-Jphone-Copyright
Ramp
Ram
Noq
SiteSpeed
AMP-Access-Control-Allow-Source-Origin
X-Goog-Meta-Goog-Reserved-File-Mtime
X-EC2-Instance-Id
X-Amz-Meta-Cb-Modifiedtime
Dis-Env
Web
NZSpeedy
X-WP
X-Highwire-Sitecode
X-Detected-Device
X-Varnish-ID
Fastly-Backend-Name
X-Serv
X-V
Lb
X-Smartcache-Timeout
X-Highwire-Smart-Code
X-Rack-Cors
Server-ID
X-Hosting-Env
X-Role
X-SDE-Name
X-Smartcache-Keys
X-Captured
X-AutoRu-App-Id
OriginServer
X-Cluster
X-Autoru-Host
PagesDisplayed
X-Aramark-SID
X-Autoru-LB
X-B2f-Not-Route
X-Varnish-Hits
Traffic-Origin
Content-Generator
ID
Gzip
ClientIP
F5-IpCliente
X-Varnish-Cache-Local
X-Svr
X-DB-Content-Length
NS-VaryByCustom-Key
X-DN-Cache-Control
X-Frames-Options
X-Generated-Time
Og
OracleCommerceCloud-Sandiego
X-Geo-IP
X-Desc
SG
X-MAT-GEO
X-Node-Name
X-Skip-Cache
X-Proxy-Skip
Paypal-Debug-Id
Edgecast
SINA-LB
Apachenode
X-Zendesk-User-Id
SINA-TS
X-CacheID
X-SH-Cache-Status
X-Dw-Trace-Id
Access-Control-Allow-Header
Hamster
X-Varnish-Action
X-Response
X-Rebelmouse-Surrogate-Control
X-Viator-Tapersistentcookie
RN-Server
Prama
X-Refresh
X-Rebelmouse-Cache-Control
X-RDP
N365rili
Ibf5scheme
Warning
X-Cache-On
X-MidCOM-Meta-Cache
X-CRA-DC
X-Zendesk-Origin-Server
X-Rewrite
X-App-Runtime
X-Amz-Id-1
X-Amcomm-Site
X-Cache-Me-Harder
X-CacheDebug
X-DynamicCache
X-Compressed-By
MS-CV
X-Rack-CORS
X-Data-Request
X-Cache-Time
X-Goog-Meta-Policy
X-Goog-Meta-Replace
X-OPNET-Transaction-Trace
X-HashTwo
X-Header
X-Hosting
X-E
X-Confluence-Request-Time
OracleCommerceCloud-Version
X-Ghost-Cache-Status
X-GSL-Server
X-Redirector
X-Origin-Id
CommercePlatform-Version
BackendServer
X-Runtime-Affili
X-JSESSIONID
X-Wikidot-Backend
X-Wikidot-Static-Cache
Backend-Name
Backend-IP-Port
Upgrade-Insecure-Requests
X-Gyrobase-Publication
X-UnsetCookies
X-Varnish-Grace
X-Who
X-Proto
X-Enhanced-By
X-Render-Time
X-SCM-Server-Number
X-FG-RequestId
SB-Cache-Remaining
DrivedBy
X-Amz-Meta-Content-Md5
X-Meta-MSSmartTagsPreventParsing
X-Cjtype
Www.Aujourdhui.Com
Language
Hostname
X-Meta-MSThemeCompatible
X-Proxy-Cache-Key
AsisCache
Nginx-Cache
Provider
X-Actindo-Request-Id
X-SilverStripe-Cache
X-ReqId
ScoreTracker
SB-Cache-Life
SB-Site-Device
X-Actindo-Rs
X-Actindo-Thread-Id
Page-Template
Cteonnt-Length
X-Nginx-Request-Processing-Time
X-ESI
X-Artvisual-Server
SB-Site-IE-VERSION
X-AMAZEEIO
X-Meta-Imagetoolbar
X-ZSITES-DNS
X-CACHE-TTL
X-XHTML-Minification-Powered-By
X-HP-Trace-Project
X-Processed-By
TZ-Server
X-Application
Proxy-Cache
MW-Webserver
COMMERCE-SERVER-SOFTWARE
X-VNode
CLMOB
X-Mobile-URL
Il-Cl
Home
Server-Ip
X-HP-Trace-ID
X-Old-Content-Length
Dispatcher
MSThemeCompatible
MSSmartTagsPreventParsing
Cleartype
X-ASAP-Age
X-Varnish-Cache-Ttl
X-DS1D
X-Node-Id
Ctx
X-Reflector-Cache
X-AISO-Cacheable
X-Cache-Varnish
X-NID
TP-Cache
X-Forwarded-Host
X-Sid
X-Lb
X-Upgrade-Enabled
X-Tag-Playlist
X-Client-Ip
TP-L2-Cache
Xc
X-Magento-Action
Worker
Viewport
X-AISO-Cache
Ttl
Strikingly-Cache-Region
X-Dev
Strikingly-Cached-Version
X-Cms-Mode
MyHeader
X-Cache-Detail
X-HS-Status
Ews
Strikingly-Cached
PServer
X-Magento-Lifetime
VC-NoCache
X-AISO-Server
X-Author
Aoestatic
X-PM-ID
X-LBPoolMember
X-Origin-Cache
X-Reflector
L5d-Success-Class
Load-Balancer
NKBVHEADER
Progma
X-AWS
HA-Georegion
Kanooh-Host
HA-Ipaddr
HA-Servedtime
HA-Urlpath
IES-Server
HA-Host
X-SuperCache
X-DDM-SERVER-UPDATED
X-DDM-SERVER
X-Distributed-By
X-Hash
X-Phpwcms-Page-Processed-In
X-MSU-SOURCE
X-Clx-Request
X-CACHE-KEY
Requested-Host
X-VTEX-Cache-Status-Janus-Edge
Unique-Request-Id
X-7d-Instance-Id
X-Bip
X-7d-Trace-Id
X-Phpwcms-Release
X-PoweredBy
DB-Nickname
BlockPHPCallEnd
HA-Cloudapp
HA-Geocity
HA-Geolat
HA-Geocountry
XX
X-VG-WebCache
X-SE-Debug
X-Proxy-Id
X-B3-Spanid
X-Uncacheable
X-UType
HA-Geolon
X-PHP-Response-Code
X-RequesterIP
X-RemovedCookies
X-ProcessESI
X-Original-IP
X-SATserver
X-TA-CDN-Provider
X-Cache-Ttl
X-Ants-Machine-Id
X-Ants-Host
CDCHOST
X-Obvious-Tid
X-Obvious-Info
Dtk-Cache-Check-0
X-SV
X-Server-Generated
X-Dynamic-Cache
Request-Country
Request-EU
X-Instance
X-Feed
WSCLoggingUUID
Tk
X-COUNTRY-CODE
X-Custom-Name
X-Global-Transaction-ID
X-Flex-Tags
X-Flex-Tag
X-Flex-Lastmod
X-Max-Age
X-Nginx
X-We-Are-Hiring
X-Profiler
X-PressLabs-Stats
X-Pool
X-Flex-Lang
X-Flex-Evstart
V-TTL
HSTS
X-Test-Debug
X-Pubstack
X-Backside-Transport
X-CD
X-Flex-Evend
X-Flex-Community
X-Device-Item
WP-FROM-CACHE
Session-From
X-OpenUrlRewriter-Debug
X-OCTOPOD
X-Nitro-Cache
X-Member
X-Pagely-Cache
X-PG
X-ServerAddr
X-Script
X-S-Misc
X-Reqid
X-MCF-ID
X-Jcms-Ajax-Id
X-Config-By
X-CGP
X-Built-With
X-Bcwwwid
X-D-Time
X-Fpc
X-Homeaway-Requestmarker
X-HAProxy
X-Generation-Time
X-FreeTag-Count
X-ServiceProvider
X-Sn-Servicetimems
X-Hit
X-CO-Host
X-Cache-Bypass
TC-S-Cache-M
X-Node-App
X-Unique-Id
ServerIP
Expiries
Debug-Status
CS-SERVER
TC-S-Cache
TC-Cache-U
X-Varnish-Cached-TTL
X-Varnish-Cached
X-UPServer
X-Streams-Distribution
X-XHR-Current-Location
Xcache
TC-Cache-IC
TC-Cache
Response-Time
X-B3-Traceid
X-Healthy
X-Served
X-Pj-Cache-Status
X-Made-On
X-Sorting-Hat-Expire-Cache
X-Timestamp
1A-CountryCode
X-Varnish-Debug-Hits
X-Status
X-M
X-Header-Treatment
X-Debug-Token-Link
X-CSRF-Token
X-Cname-TryFiles
X-Deity
X-ETag
X-HEAD
X-Gateway-Rate-Limit-Delayed
X-Gateway-Rate-Limit-Conn
Generate-Time
IsMobile
MageStack-Web-Node
MageStack-Tag
MageStack-PageSpeed
Request-Filtered-By
Tesla.Performance
X-AppVersion
X-Amz-Meta-Version-Id
X-Activity-Id
MageStack-Magento-Version
MageStack-Loadbalancer
MageStack-Cache-Hits
MageStack-Cache
MageStack-Area
MageStack-Cache-Lifetime
MageStack-Cache-Status
MageStack-Debug
MageStack-Config
MageStack-Cacheable
X-Pass-Through
X-Cache-ID
X-VC-Hash
X-DSMX-Rewrite-MS
X-DSMX-Render-MS
X-VC-Debug
X-Full-Url
X-Static
X-VC-Cache
X-VC-Cacheable
Cacheid
X-Custom-Header
X-ACLR-Version
X-Ab-Selection
V-Age
Server-Id
X-Cache-Id
X-ClusterID
X-Cache-Original-TTL
CpuTime
X-Pixelsilk-Server
X-Pixelsilk-Version
X-Ssl-Cipher
DeleGate-Ver
HostName
RSB-LINK
X-Site
X-Beatles
X-Apm-Telemetry-Syncmark
X-PBY
GranicusServer
EQ-Cache
X-Shopware-Allow-Nocache
X-Served-Server
X-Route
X-Shopware-Cache-Id
X-NMT-Proxy
Be
X-VCS-Ttl
X-VCS-Cacheable
X-Az
X-B
X-NewsFlow-Sitename
X-MyName
X-Instance-Id
X-Nginx-Request-Time
X-PBS-Appsvrip
X-SSLProxy
X-PBS-Fwsrvname
X-PBS-Appsvrname
X-HP-CAM-COLOR
User-Agent
ProxiaInstanceId
XDisk
X-Transaction-Name
ReqUrl
Session-Id
X-Container
X-Catalyst
X-Cache-FS-Status
X-SSLUpstream
X-Svr-Proxy
X-KoobooCMS-Version
X-Hstore
X-Hrouter
X-Log
X-M-Log
X-Qnm-Cache
X-Qiniu-Zone
X-M-Reqid
X-Cache-Extended
X-Box
X-WebNode
X-Via-NSCOPI
X-UPSTREAM-Address
Actual-Object-TTL
Fastly-Restarts
X-Backend-Host
X-Avvio-Cms-Cacheload
FRONT-END-SECUREBROWSER
X-RAMCache
X-Pool-Info
X-Say-Cacheable
X-Instance-Name
X-ProBase-Server
X-Say-TTL
X-SayCDN-TTL
X-UA
X-T
X-Serverid
X-Ocache
X-NewCloud-V-Cache
MwpReleaseVersion
X-BP-NSA-REQID
X-Backend-TTL
MachineName
X-Debug-Message
X-HA
X-FastCGI-Cache-Status
Container
X-UT-Cache
StatusCode
X-FIRSTBase
X-Country
X-CH-Device
X-Front-Cache
X-Instart-Cache-Id
X-Pageid
X-Litespeed-Tag
X-IP-Address
X-Beresp-Ttl
RSL-Trace-ID
CommunityServer
Httpd-Identifier
Amfplus-Ver
Copyright
HA-Front
Referer
Provided-Host
X-REDIRECTSERVER