Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
P3P
X-AspNet-Version
Age
X-Pingback
Content-Language
Via
X-UA-Compatible
Expect-CT
Access-Control-Allow-Origin
Upgrade
X-Adblock-Key
X-Xss-Protection
Content-Security-Policy
X-Cacheable
X-Check
X-Template
X-Varnish
X-Language
X-Generator
X-Buckets
Alt-Svc
X-Request-Id
X-Drupal-Cache
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
Content-Location
X-Powered-By-Plesk
X-Permitted-Cross-Domain-Policies
X-Download-Options
Host-Header
X-Runtime
MS-Author-Via
X-ShopId
X-ShardId
X-Sorting-Hat-PodId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-Section
X-Dc
X-Sorting-Hat-ShopId
X-Alternate-Cache-Key
X-FRAME-OPTIONS
Cartoon
P3p
X-Powered-CMS
X-IPLB-Instance
X-UA-Device
X-Served-By
Access-Control-Allow-Headers
Access-Control-Allow-Credentials
Status
X-Amz-Cf-Id
Access-Control-Allow-Methods
X-Cache-Status
X-Via
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
CF-Cache-Status
Referrer-Policy
X-Contextid
X-Backend
X-DIS-Request-ID
X-Mod-Pagespeed
X-PC-Key
X-PC-Hit
Powered-By
X-PC-Date
X-PC-AppVer
X-PC-Host
Content-Encoding
X-CST
X-ServedBy
X-WPE-Loopback-Upstream-Addr
X-Logged-In
Keep-Alive
X-Host
X-Cache-Hit
X-Rid
X-Port
X-Server
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-CDN
X-Request-ID
X-Cache-Enabled
X-Server-Powered-By
X-Tumblr-Pixel-1
X-Endurance-Cache-Level
X-Robots-Tag
X-Nginx-Cache-Status
X-Wix-Request-Id
X-Seen-By
X-Wix-Server-Artifact-Id
X-Accel-Version
X-Tumblr-Pixel-2
X-Turbo-Charged-By
X-Page-Speed
X-Drupal-Dynamic-Cache
X-Original-Date
X-Pad
X-Content-Powered-By
Content-Security-Policy-Report-Only
X-Content-Digest
WP-Super-Cache
X-Proxy-Cache
X-AH-Environment
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Rack-Cache
X-Varnish-Cache
X-Tumblr-Pixel-3
X-LiteSpeed-Cache
X-GitHub-Request-Id
X-Request-Country
SPRequestGuid
X-XRDS-Location
X-SharePointHealthScore
Edge-Control
X-MS-InvokeApp
X-Cnection
MicrosoftSharePointTeamServices
X-Cache-Lookup
Timing-Allow-Origin
X-Node
X-Died
X-Amz-Request-Id
X-Amz-Id-2
Cf-Railgun
X-FW-Hash
X-Trace
Charset
X-Webserver
Request-Id
X-FW-Type
X-FW-Static
X-FW-Serve
Edge-Cache-Tag
X-Webcom-Cache-Status
X-Content-Security-Policy
X-FullPageCaching
X-PhApp
MicrosoftOfficeWebServer
X-HS-Cache-Config
X-HS-Content-Id
X-Safe-Firewall
X-Hits
X-CF-Powered-By
SPIisLatency
SPRequestDuration
X-PHP-Backend
X-INKT-SITE
X-INKT-URI
Request-Context
X-SERVER
Access-Control-Max-Age
X-Newrelic-App-Data
X-BC-Stapler
Composed-By
X-Swift-SaveTime
X-Swift-CacheTime
EagleId
Access-Control-Expose-Headers
Served-By
Grace
X-CDN-Pop
X-CDN-Pop-IP
Liferay-Portal
X-Spip-Cache
X-Hyper-Cache
X-Backend-Server
X-Tumblr-Pixel-4
X-Device
X-Dw-Request-Base-Id
X-Ua-Compatible
X-Server-Name
X-LiteSpeed-Cache-Control
X-Fastly-Request-ID
X-Microcache
X-VCache
X-Cloud-Trace-Context
X-Cdn
X-ServerName
X-FB-Debug
Content-Style-Type
X-Clacks-Overhead
X-RateLimit-Remaining
X-RateLimit-Limit
Content-Script-Type
Rating
Front-End-Https
Real-Hostname
X-Loop
X-TNCMS
X-Firenze-Processing-Times
X-RateLimit-Reset
X-Servedby
Surrogate-Control
X-Jimdo-Wid
X-Jimdo-Instance
X-DDC-Arch-Trace
X-User-Agent
X-Acc-Exp
Refresh
Public-Key-Pins
X-Wix-Renderer-Server
X-HS-Combine-CSS
X-Cache-Config
X-XN-Trace-Token
X-XN-XNHTML
Xkey
X-Middleton-Response
X-Middleton-Display
Response
X-Sol
Display
X-DNS-Prefetch-Control
X-Age
X-StackifyID
X-Tumblr-Content-Rating
Fpc-Cache-Id
X-Zen-Fury
X-SS-Conf
X-SS-Location
X-Hostname
X-Vtex-Processado-Em
X-Px
X-Microcachable
X-Generated-By
X-Cached
X-N-OperationId
X-OneAgent-JS-Injection
PageSpeed
X-Topify-Platform
X-Tumblr-Pixel-5
X-Frame-Option
X-Request-Time
X-Cached-By
TCN
X-Url
X-Whom
X-MiniProfiler-Ids
X-Correlation-Id
X-Forwarded-For
X-WebKit-CSP
X-Handled-By
X-Kinsta-Cache
X-Amz-Version-Id
X-Ruxit-JS-Agent
Rt-Fastcgi-Cache
X-Magento-Tags
X-DynaTrace-JS-Agent
X-Varnish-TTL
X-CMS-Version
P-WS
P-LB
X-Outils-CS
X-Content-Options
Product
Imagetoolbar
X-Msg-2-Log
Surrogate-Key
X-Via-JSL
X-VARNISH-Cache
X-URL
X-B-Cache
X-From
X-DynaTrace
X-AspNetWebPages-Version
Host
Powered
Edge-Control-Message
X-Varnish-Cache-Hits
X-Engine
X-SRCache-Store-Status
X-SRCache-Fetch-Status
Access-Control-Request-Method
X-Recruiting
ServedBy
X-CacheServer
X-Edge-Location
X-Debug-Info
X-FORWARDED-FOR
X-Track
Fastly-Debug-Digest
X-Cache-Rule
X-HOST
X-Vtex-Processed-At
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-VTEX-Cache-Status-Janus-ApiCache
No
X-Vtex-Remote-Cache
X-LBLID
Fhost
Alternate-Protocol
DynaTrace
X-PERF
X-ApacheServer
X-NWS-LOG-UUID
X-Umbraco-Version
X-Goog-Hash
X-Powered-By-VTEX-Janus-Edge
Generator
X-Signature
X-Actual-URL
Public-Key-Pins-Report-Only
X-Passed-To
X-Returned-From-DLL
X-Original-Request
X-Returned-From
X-Passed-To-DLL
X-Platform
WZWS-RAY
X-Response-Time
X-Location-Id
X-Powered-By-360WZB
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Micro-Cache
X-Upstream
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Hosted-By
X-Application-Context
Arr-Disable-Session-Affinity
X-Accel-Expires
X-Developer
X-Cache-Age
Dmn
X-Stale
Akamai-IP
X-Supported-By
X-RESOURCE
X-Instart-Request-ID
X-Device-Type
X-Dispatcher
Fastcgi-Cache
X-UD-Method
HTTPS
X-Cache-Info
X-URLSCHEME
X-TransIP-Balancer
X-Platform-Router
X-Platform-Processor
X-HS-Content-Campaign-Id
X-Source
X-LW-Cache
X-Pantheon-Phpreq
X-Pantheon-Site
X-Pantheon-Environment
Surrogate-Key-Raw
X-Rocket-Nginx-Bypass
X-Varnish-Host
X-LB
X-S
X-Version
X-I
X-Tumblr-Pixel-6
X-Platform-Cluster
X-Shop-Id
Content-Hash
X-Defender
X-Magento-Cache-Debug
Origin
Retry-After
X-BS
X-Cache-TTL
X-Varnish-HitMiss
X-Varnish-Count
X-CSRF-Protection
X-Fastcgi-Cache
X-I-Sp
X-EdgeConnect-Origin-MEX-Latency
X-Rnd
X-Gamma-Serve
X-Cache-Tags
X-Cache-Key
Cache-Provider
X-F-Cache
X-NetCat-Version
X-AOL-HN
Version
X-Storage
X-Matrix-Server
X-Matrix-Proxy
X-Varnish-ObjectSource
X-Varnish-GracePeriod
X-Art-Request-Id
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-TransIP-Backend
X-EdgeConnect-MidMile-RTT
X-Varnish-RemainingLife
X-Translation
X-Powered-By-VelaWeb
X-ATG-Version
X-App-Hosting
X-Microcache-Status
USPLoggingUUID
X-Front
X-Url-Base
X-Page-Cache
Last-Published
X-Platform-Server
X-Route-Server
X-Daa-Tunnel
Ohc-File-Size
X-LB-Node
X-Abgroup
X-Content-Encoded-By
X-Expires-Orig
X-Server-ID
X-Server-Upstream
IBM-Web2-Location
Powered-By-ChinaCache
RTSS
X-Cache-Operation
Content-Disposition
X-Environment
X-Ua-Device
X-SSL-Protocol
Pagespeed
Allow
X-Varnish-Age
Pool
X-Drupal-Cache-Tags
X-SSL-Cipher
X-Hypernode
X-Loopia-Node
X-Revision
X-Director
X-ARC
Cache-Key
Wsr-Cache
X-Vcap-Request-Id
X-Forwarded-Proto
Page-Completion-Status
MIME-Version
X-Flow-Powered
X-Ttl
Content-MD5
X-Cache-Debug
SSPAppContext
X-Platform-Cache
Accept-Encoding
X-Dispatch
X-Lambda-Id
X-SV-Duration
X-SV-CreatedAt
X-SV-CacheTags
Node
X-SV-Edge
X-SV-Expires
X-SV-Pid
X-Cache-Only-Varnish
X-SV-Nginx-Duration
X-SV-Cacheable
X-UPSTREAM
X-SV-FromDBCache
X-Nginx-Cache
X-Edge-IP
X-NoCache
Lsrequestid
X-Github-Request-Id
X-Grace
X-Varnish-Cacheable
X-Vhost
X-Drupal-Cache-Contexts
X-Debug
X-Sentry-ID
Srv
X-ORACLE-DMS-ECID
X-Cache-Lifetime
X-Generated
X-Hiawatha-Cache
X-GeoIP-Country-Code
Pv
S-Cnection
X-Cache-Control-Orig
Section-Io-Id
X-Litespeed-Cache
X-IsCacheURL
X-Firenze-Processing-Time
X-Id
X-Cache-Server
Backend
X-Cache-Expires
Content-Encoding-Handler
Fw-Via
X-RequestId
X-Nbs
X-Wix-Punisher
ServerID
X-Ezoic-Cdn
X-CJ-Soft
Proxy-Connection
FAI-W-FLOW
X-ACMCache
X-Processing-Time
Location
X-Sapient
X-Proxy
X-Akamai-Device-Characteristics
X-N
X-PwB-Node
X-Magento-Cache-Control
Nodo
X-Akamai-Device-Model
X-Client-IP
Req-Id
X-Dns-Prefetch-Control
X-Cache-Engine
X-SRCache-Key
ServerName
X-Server-Id
X-Discourse-Route
SN
X-ServerID
Cneonction
X-VTEX-Cache-Status-Janus-Edge
X-Cache-Type
X-Duration
X-SERVER-NAME
X-Amz-Meta-S3cmd-Attrs
X-TTL
X-Geo-Country
X-Middleware-Start
Author
X-Webkit-CSP
X-NB-Cached-Page
Server-Name
If-Modified-Since
X-Browser
X-Location
X-Speed-Cache-Key
X-Country-Code
X-Speed-Cache
IM-Version
X-Yadis-Location
X-Varnish-Url
X-Content-Age
X-Dynatrace-Js-Agent
X-Orig-Vary
PICS-Label
X-BackendServer
X-Goog-Generation
X-Cookie-Domain
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-GUploader-UploadID
X-Goog-Metageneration
X-App-Server
X-GeoIP-Country-Name
X-Server-IP
Use-Proxy
X-Cache-Control
X-Cache-CFC
X-Worker
Qs-Cache
SRV
X-Varnish-Backend
X-Time
Local-Info
X-Cache-Level
X-Magnolia-Registration
X-WR-Flags
AMF-Ver
Cm-Server
X-Cache-Namespace
X-Pressidium-NinukisWP-Ver
X-Always-Cache
X-Sucuri-ID
X-Abuse
X-FW
Server-Info
SEOMOZ
X-Cluster-Node
MJ12bot
X-Cache-PageType
X-Cache-Fix
X-Correlation-ID
HCVer
NnCoection
HAVer
X-Shield-Request-Id
Accept-Charset
Cache
X-Akamai-Transformed
Cached
X-Real-Server
X-Framework
X-Processed-By
X-SO
S
X-Frontend
X-Ss-Location
Xc-Version
X-Ss-Conf
X-Adobe-Loc
Thanks
X-Srv
X-Empowered-By
X-Cache-Device-Type
X-Purge-URL
X-Sucuri-Cache
X-DealerOn
X-Adobe-Content
Pf.Web.Request.Id
SVR
Pics-Label
X-BKSrc
X-Amz-Storage-Class
X-Session-ID
X-CDN-Forward
X-Varnish-Retries
X-Config-Blacklist-Version
X-CF-Passed-Proto
X-High-Performance
X-Runtime-Rack
X-JG-Page-Cache
X-AEM
NetMindSessionID
X-Purge-Host
X-Last-Modified
Server-Timing
X-Route-To
X-Traffic
X-Sys-Req-ID
MC
X-Fastly-Request-Id
X-Origin
X-Litespeed-Cache-Control
X-LB-Server
X-HOSTNAME
X-Drectory-Script
A-Powered-By
SiteSpeed
X-Content-Security-Policy-Report-Only
W
NODE
Magicmarker
X-Cf-Powered-By
X-Unbounce-VisitorID
X-Unbounce-Variant
X-Unbounce-PageId
X-Server-Instance
X-Content-Type-Option
X-ClientSide-Caching
X-Varnish-IP
X-FastCGI-Cache
X-SRV
X-SDS
X-FTR-Request-ID
X-Rocket-Nginx-Serving-Static
X-AF-Userserver
Eomportal-Instance
X-Cache-Handler
Frame-Options
X-PF-Uncompressing
P-ID
Nitro-Cache
X-VARITI-CCR
EagleEye-TraceId
WWW-Authenticate
Tracecode
X-Balanceador
Keywords
HitType
X-DataDome
X-Disney-Akamai-Rule
CacheControlHeader
X-FireWall-Port
Cache-Tag
X-Yottaa-Metrics
X-Esi
X-Runtime-Memory
X-Yottaa-Optimizations
X-LW-Web-Server
X-Mobilized-By
X-Connection-Hash
Content-Transfer-Encoding
X-Transaction
X-Varnish-ID
X-Twitter-Response-Tags
X-HW
X-LP
Description
X-Directory-Script
Adm-Server
Ufe-Result
X-RiS-UFDI
X-Pagename
X-Amz-Meta-Cb-Modifiedtime
X-ORACLE-DMS-RID
WN
X-Clara-ASAP
X-App-Status
X-Cache-Doesi
Content_type
X-Domain-Checked
X-Client-Vid
X-WN-ClientGroup
X-Rq
X-CB-Server
X-Provisioner-Version
X-Hit-Cache
Web-App-Origin-Name
X-Akamai-Edgescape
VANITY-HOST
X-Redman-Final-Url
X-Avg-Cookie-Expires
X-AVG-Country-Code
Cache-Tags
X-ID
X-Redman-Backend
X-EPiphany-Vid
X-NginX-Cache
X-Varnish-Hits
Max-Age
ServerSignature
ServerTokens
X-Cache-TTL-Remaining
X-VNode
X-ASAP-Cache
X-Trace-Id
X-HTML-Minification-Powered-By
X-Client-Image-Vid
X-Generated-Time
X-OpenCart-Lightning
Contao-Page-Layout
AC-ELC
X-ARRServer
X-Sorting-Hat-Expire-Cache
X-Unique-ID
X-WPL-DATA
X-Analytics
X-Varnish-Ttl
Backend-Timing
Proxy-Agent
AsisCache
X-Garden-Version
X-Webstats-RespID
From-Origin
X-Atraveo-Zone
Play-Detected-Device
X-MCB-Server
X-Atraveo-Varnish-Server-Id
X-Atraveo-From-Varnish-Cache
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-GeoIP
X-Force
X-HP-Trace-ID
X-Jphone-Copyright
Play-Detected-UserAgent
X-PRAM
X-HP-Trace-Project
X-Key
X-ServerIndex
X-Mobile-URL
Ramp
SBGI-7
X-Hosting-Env
SG
VServer
X-Desc
X-Atraveo-Expires
SBGI-RenderTime
BALANCEDTO
SBGI-Device
SBGI-RealPath
Hname
Dispatcher
X-Page
Front
X-CAPServer
Noq
Ram
X-WR-MODIFICATION
X-GoCache-CacheStatus
X-Machine-Name
X-MAT-GEO
X-Debug-Token
SBGI-9
X-SDE-Name
X-WebKit-CSP-Report-Only
X-Render-Time
X-Varnish-Debug-Age
X-Varnish-Debug-TTL
X-Remote-Addr
X-Varnish-Hostname
X-Source-ID
X-Webkit-Csp
X-Atraveo-Cache-Control
SBGI-5
SBGI-1
SBGI-10
X-Atraveo-ETag
X-Resty-Request-Id
NLCacheNote
X-App-Runtime
X-Culture
X-Fedora-School-Id
X-Backend-Status
Machine
Beyond-Iis
SERVER-ID
X-Runtime-Affili
X-Nginx-Host
Og
X-Amz-Meta-S3b-Last-Modified
Resin-Trace
Cteonnt-Length
X-Distributor
X-Real-IP
Paypal-Debug-Id
X-Rebelmouse-Surrogate-Control
Disablevcache
X-Varnish-Server
SHInfo
X-Frames-Options
X-Hrouter
X-Rebelmouse-Cache-Control
X-Compressed-By
X-App
X-Hstore
X-Resolver-IP
Strikingly-Cache-Region
X-CacheResult
TC-Cache-U
Strikingly-Cached
TC-S-Cache
TC-S-Cache-M
Strikingly-Cached-Version
X-Smartcache-Keys
X-Smartcache-Timeout
Smug-CDN
X-TTFB
X-TTFB-L
X-Symfony-Cache
TC-Cache
X-WP
TC-Cache-IC
X-Cache-Node
X-Cache-Keep
X-NginX-Server
X-SmugMug-Hiring
XDomainRequestAllowed
X-Env
X-HydroSheep
Access-Control-Allow-Header
X-Detected-Device
From
X-SmugMug-Values
X-Plat
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Cms-Mode
X-Dev
X-Lb
AMP-Access-Control-Allow-Source-Origin
MS-CV
MW-Webserver
Lb
X-V
X-Rack-Cors
Device
X-Proto
Dis-Env
Custom-Header
X-VC-TTL
Web
Worker
X-KoobooCMS-Version
X-IIJ-Cache
X-Autoru-LB
Cmsid
X-VC-Enabled
X-A
Id
X-Varnish-Ip
X-Fstrz
Cmstype
Bios
X-Stage
Fastly-Backend-Name
X-AutoRu-App-Id
X-Airee-Node
X-Autoru-Host
X-SmartBan-Host
X-FPC
X-Cache-Dispatchercachecontrol
X-7d-Trace-Id
X-SmartBan-URL
X-Cache-On
X-Bip
X-Highwire-SessionId
X-7d-Instance-Id
X-Highwire-RequestId
X-Cache-Dispatcherpragma
Il-Cl
X-Adnet
Service-Worker-Allowed
N365rili
Ews
X-EC2-Instance-Id
X-Webcelerate
X-Origin-Server
Hamster
Ibf5scheme
Home
X-Captured
X-Info
Arrnode
Content-Server
X-RDP
Myheader
Hostname
X-Map-Context
F5-IpCliente
Gzip
Server-ID
ClientIP
X-Session-Reinit
X-Server-Generated
X-Viator-Tapersistentcookie
X-Proxy-Cache-Key
X-Req-Head-Response
X-E
WebServer
CLMOB
X-Refresh
X-Batcache
X-Batcache-Reason
X-DTC
COMMERCE-SERVER-SOFTWARE
X-Pj-Cache-Status
Identity
X-Rewrite
X-GSL-Server
X-TB-M
X-ETag
X-Data-Request
X-Gyrobase-Publication
X-MidCOM-Meta-Cache
FRONT-END-SECUREBROWSER
X-Confluence-Request-Time
X-Magento-Action
Proxy-Cache
ViewMode
X-OPNET-Transaction-Trace
X-HashTwo
X-Amcomm-Site
Traffic-Origin
OriginServer
PagesDisplayed
X-Dw-Trace-Id
Nginx-Cache
X-Varnish-Cache-Local
X-Cache-Extended
X-SH-Cache-Status
X-ENV
X-Forwarded-Host
ScoreTracker
X-MSEdge-Ref
X-B2f-Not-Route
X-Backend-Host
X-Aramark-SID
X-DN-Cache-Control
Yoncu-Errno
IISExport
X-Cdn-Forward
X-Apm-Telemetry-Syncmark
X-Akamai-3PM-SW-Version
X-Client-Ip
Serverid
Xc
Server-Id
X-PM-ID
Warning
NtCoent-Length
RN-Server
Cleartype
X-CACHE-TTL
X-Dynamic-Cache
BackendServer
X-Grid-Server
X-HostName
X-SV
X-Header
X-Rack-CORS
X-Goog-Meta-Policy
X-Avvio-Cms-Cacheload
X-WA-Info
X-UA
Url
X-Cocoon-Version
X-Unique-Id
X-Goog-Meta-Replace
X-W3TC-Minify
X-Protected-By
X-RealServer
XX
X-Would-Your-GrandPa-Wait
X-Gateway-Cache-Status
X-Origin-Cache
X-Your-GrandPa-Would-Wait
X-Flex-Lastmod
X-Flex-Lang
X-Flex-Tag
X-Flex-Tags
X-CacheID
X-Sid
X-Gateway-Cache-Key
X-Machine
X-Cache-Set
X-Cache-Time
X-Old-Content-Length
X-Beatles-Hits
User-Agent
Hosted-By
Accept-Language
X-DEBUG
SB-Site-Device
X-Gateway-Skip-Cache
X-DSMX-Rewrite-MS
X-DSMX-Render-MS
X-VC-Cache
X-Does-He-Have-Time
X-TTL-Age
X-Flex-Evstart
SS
X-Zendesk-Origin-Server
X-RemovedCookies
X-Goog-Meta-Goog-Reserved-File-Mtime
X-ProcessESI
X-JSESSIONID
X-ASAP-Age
X-Zendesk-User-Id
X-Powered-By-Home.Pl
X-M
X-Depends
Edgecast
X-Beatles
X-Flex-Community
X-Nginx
X-Cache-TTL-Age
X-Cache-TTL-Current
Session-From
ServerIP
SB-Cache-Remaining
SB-Cache-Life
CommunityServer
X-Flex-Evend
X-Sc-Cache
X-Cache-Via
X-Src-Webcache
X-We-Are-Hiring
X-Secret
Hummingbird-Cache
X-Bcwwwid
X-Cache-Id
Aoestatic
PServer
X-IP
Ctx
X-Author
TP-Cache
DNNOutputCache
X-Streams-Distribution
X-LBPoolMember
X-Tag-Playlist
X-Magento-Lifetime
X-Application
TP-L2-Cache
X-Redirector
X-Timestamp
X-Response
X-Ghost-Cache-Status
X-Varnish-Id
X-PHP-Response-Code
X-CRA-DC
X-Box
X-CDN-COMPRESS
X-Cluster
X-CDN-RULE
X-Ser
X-ACCELERATE
X-ReqId
X-DB-Content-Length
X-Reflector-Cache
Provider
X-Reflector
Viewport
X-RAMCache
X-HS-Status
X-4ormat-Cacheable
X-Serv
X-HAProxy
Mime-Version
X-Lw-Cache
X-Resource
X-Dynatrace
X-Server-Addr
X-Served-Server
X-Pagely-Cache
NZSpeedy
Server-Ip
X-Varnish-Action
X-Netrix-ID
X-CSRF-Token
X-HP-CAM-COLOR
X-FORWARDED-PROTO
VC-NoCache
Generate-Time
PB-PID
PB-RID
Quri
X-Upstream-Backend
X-Served
X-Deity
X-Gannett-Site-Version
X-Made-On
X-Enhanced-By
Tesla.Performance
Uuri
X-Debug-Message
X-DynamicCache
X-FastCGI-Cache-Status
X-XHR-Current-Location
X-Cache-Detail
X-Az
X-Activity-Id
X-DS1D
X-AppVersion
X-Cname-TryFiles
X-Instance
INFO
X-Status
!~Request-OOB-Work
AR-ATIME
X-Router
X-Route
X-Enabled2
X-Enabled3
X-AMAZEEIO
X-Header-Treatment
AR-CACHE
AR-PoweredBy
RSB-LINK
Tempo
X-Time-Microsecs
Upgrade-Insecure-Requests
X-SilverStripe-Cache
Microcache
AR-SID
Control-Cache
EQ-Cache
X-HA
Cache-Status
X-Cache-FS-Status
StatusCode
X-AISO-Cache
X-AISO-Cacheable
NS-VaryByCustom-Key
Fastly-Restarts
X-Instart-Cache-Id
X-Litespeed-Tag
X-Nginx-Request-Time
Access-Control-Request-Headers
X-Instance-Id
X-AISO-Server
X-Cache-Me-Harder
X-Cache-V
X-Via-NSCOPI
X-Node-ID
X-PBS-Fwsrvname
X-PBS-Appsvrname
X-FIRSTBase
X-NewsFlow-Sitename
X-PBS-Appsvrip
EN-User
WP-AdvCache-MemCached
X-CH-Device
X-Hosting
MwpReleaseVersion
X-Say-Cacheable
X-Amz-Id-1
RequestId
X-Middleton-PageSpeed
X-Mobile-Rewrite
X-UT-Cache
Note
X-Say-TTL
X-SayCDN-TTL
Provided-Host
Referer
SB-Site-IE-VERSION
Session-Id
X-Domino-CacheValidationWithETagReason
X-Domino-CacheValidationWithETagResult
MachineName
Expiries
Debug-Status
X-Enabled1
X-Server-Ip
Cacheid
X-SCM-Server-Number
X-Search-Id
X-Hash
X-Cache-Varnish
X-Artvisual-Server
X-Pixelsilk-Version
X-Catalyst
X-Turpentine-Esi
X-XHTML-Minification-Powered-By
X-DDM-SERVER
X-VC-Hash
X-VC-Debug
X-DDM-SERVER-UPDATED
X-VC-Cacheable
X-Pixelsilk-Server
X-RequesterIP
X-UnsetCookies
Www.Aujourdhui.Com
Ec-CorrId
X-Backend-Name
Kanooh-Host
X-Cache-Original-TTL
Progma
X-Uncacheable
X-AppServer-Cache-Rule
X-Max-Age
Ec-Machine
X-Full-Url
X-SuperCache
ServerNode
X-Cjtype
X-Node-Name
CDCHOST
Access-Control-Allow-Method
X-Generation-Time
X-Nginx-Request-Processing-Time
X-NodeID
X-Geo-IP
X-Container
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-CCM
X-Agent
X-Upstream-Status
X-L-Path
X-S-Misc
X-Custom-Header
X-DevSrv-CMS
X-REDIRECTSERVER
X-Environment-Context
Ttl
X-Upgrade-Enabled
X-ManagedFusion-Rewriter-Version
X-Config-By
X-Pubstack
X-Test-Debug
X-Distil-CS
X-Skip-Cache
X-Amz-Meta-Content-Md5
X-Blog
X-D-Time
X-Rewritten-By
X-ESI
X-Oneagent-Js-Injection
X-Oracle-DMS-ECID
X-Cache-Ttl
X-Ruxit-Js-Agent
Dynatrace
X-Ssl-Cipher
X-Archive-Orig-Connection
X-M-T
X-Archive-Orig-Content-Length
X-Server-Instance-Name
X-Archive-Orig-Date
X-Archive-Guessed-Charset
TTL
X-WHO
MageStack-Cache-Status
Memento-Datetime
X-Archive-Orig-ETag
X-Compress-Hint
MageStack-Cache-Lifetime
X-Built-By
X-PBY
X-Cacheable-TTL
X-Sn-Servicetimems
X-AWS
X-I-V
X-Pageid
X-Pool-Info
X-M-P
X-Archive-Orig-Server
X-NewRelic-App-Data
CD4
MSThemeCompatible
MSSmartTagsPreventParsing
Realaction
WP-FROM-CACHE
X-Cache-Warmer
Httpd-Identifier
CS-SERVER
X-UPServer
X-Varnish-Cached
X-Varnish-Cached-TTL
Actioncode
X-Instance-Name
X-LB-Backend
X-Wm-1
X-Server-Vrn
X-Wm-VIP
Actual-Object-TTL
X-Nocache
X-Restarts
X-Meta-MSThemeCompatible
X-LB-Frontend
X-Meta-Imagetoolbar
MageStack-Cacheable
X-Meta-MSSmartTagsPreventParsing
X-M-V
X-Beresp-Ttl
ReqUrl
X-Transaction-Name
X-Varnish-Currency
Key
X-Varnish-Esi-Access
X-Fastly-Backend-Reqs
X-NewCloud-V-Cache
MageStack-Web-Node
GranicusServer
X-Backend-TTL
X-T
X-Origin-Upstream-Status
X-ProBase-Server
MageStack-Area
X-MyName
MageStack-Cache-Hits
CommercePlatform-Version
X-Middleton-Pagespeed
X-Varnish-Store
X-Serverid
AMFplus-Ver
X-Healthy
X-Varnish-Esi-Method
X-OCTOPOD
X-S-V
X-Request-Received
MageStack-Config
X-WebNode
X-Server-App
Language
X-Request-Processing-Time
X-Mw-Workerstats
MageStack-Cache
X-Q-S
X-B
OracleCommerceCloud-Version
Powered-By-VeryCDN
X-UPSTREAM-Address
MageStack-Magento-Version
MageStack-PageSpeed
X-S-C
MageStack-Tag
CpuTime
X-Debug-Serve
OracleCommerceCloud-Sandiego
X-Cache-Date
MageStack-Debug
MageStack-Loadbalancer
X-Cachable
Copyright
X-VG-WebCache
Apple-Itunes-App
X-SID
X-SE-Debug
X-MSU-SOURCE
X-Cache-Served
X-Ar-Debug
X-BC
X-Ants-Machine-Id
X-Country
UrlWatchModule-Time
OutputRewritten
X-Svr
X-This-Proto
Services
X-9XB-Server
X-Varnish-URL
X-Nginx-Page-Cache
X-Accel-Cache-Control
X-ACLR-Version
Cache-Ctrol
X-Clx-Request
SINA-TS
SINA-LB
Requested-Host
X-Ants-Host
X-ELB
RlogId
Page-Template
CmsfirstPublishTimestamp
X-VLoc
X-Varnish-Instance
Countrycode
Head
X-CO-Host
X-Powered-Developer
X-Cache-Bypass
Response-Time
X-EBAY-C-REQUEST-ID
X-FG-RequestId
X-Who
X-Varnish-Grace
X-ZSITES-DNS
Accept-CH
Aurora-Node
X-PG
X-PROCESSED-BY
X-Time-Zone
X-ServiceProvider
X-Server-FQDN
WSCLoggingUUID
X-Czt
X-Layout
X-Distributed-By
Webserver
X-Proxy-Id
X-Service-Id
Cookie
Rewriter
FindLaw
X-Rocket-Nginx-File
X-Rocket-Nginx-Reason
Content-Cache
DbServerName
DB-Nickname
IES-Server
X-LOCATION
X-Fpc
X-MCF-ID
X-Nitro-Cache
X-Script
X-CPU-Time
X-Built-With
Load-Balancer
Request-Time
X-B3-Spanid
X-B3-Traceid
X-Dynamic
X-DeliveryServer
X-BeResp-Ttl
Fw-Cache-Status
X-Cache-2
X-IP-Address
X-VCS-Cacheable
Yola-ID
Y-Trace
X-Memcached
X-Server-Ident
X-Title
X-ZORequestID
X-VCS-Ttl
X-WAF-Proxy
E-TAG
X-Not-Cacheable
VAR-Cache
X-Brought-To-You-By
X-Config-Version
X-MainProfileURL
X-MainProfileName
XDisk
DrivedBy
X-MainProfileCategory
X-MainProfileID
X-ServerAddr