Threat Level: green Handler on Duty: Remco Verhoef

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
X-AspNet-Version
Age
P3P
X-Pingback
Content-Language
Via
X-UA-Compatible
Expect-CT
Upgrade
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Check
X-Language
X-Template
X-Request-Id
X-Varnish
Alt-Svc
X-Generator
X-Xss-Protection
X-Buckets
X-Drupal-Cache
P3p
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-Powered-By-Plesk
Content-Location
Host-Header
X-Runtime
X-ShopId
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-Section
X-Dc
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PodId
X-ShardId
X-Alternate-Cache-Key
MS-Author-Via
Referrer-Policy
X-UA-Device
Cartoon
X-Powered-CMS
X-IPLB-Instance
X-Served-By
X-Amz-Cf-Id
X-Cache-Status
Status
Access-Control-Allow-Headers
Access-Control-Allow-Credentials
Access-Control-Allow-Methods
X-Via
X-Ua-Compatible
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Wix-Server-Artifact-Id
X-ServedBy
X-Contextid
CF-Cache-Status
X-Backend
X-PC-Hit
X-PC-Key
Powered-By
X-Accel-Buffering
X-Mod-Pagespeed
X-PC-AppVer
X-PC-Host
X-PC-Date
Content-Encoding
X-CST
X-WPE-Loopback-Upstream-Addr
X-DIS-Request-ID
X-Logged-In
Keep-Alive
X-Host
X-CDN
X-Rid
X-Cache-Hit
X-Port
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-Cache-Enabled
X-Server-Powered-By
X-Tumblr-Pixel-1
X-Endurance-Cache-Level
X-Server
X-Nginx-Cache-Status
X-Original-Date
X-Robots-Tag
X-Accel-Version
X-Seen-By
X-Wix-Request-Id
X-Tumblr-Pixel-2
X-Turbo-Charged-By
X-Page-Speed
X-Drupal-Dynamic-Cache
X-Pad
X-Content-Powered-By
X-Forwarded-For
X-Wix-Punisher
X-Content-Digest
X-Proxy-Cache
X-Rack-Cache
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-AH-Environment
WP-Super-Cache
X-NewRelic-App-Data
X-Sorting-Hat-PrivacyLevel
X-Varnish-Cache
X-Forwarded-Proto
X-Tumblr-Pixel-3
Content-Security-Policy-Report-Only
X-GitHub-Request-Id
X-LiteSpeed-Cache
Edge-Control
X-Request-Country
SPRequestGuid
X-SharePointHealthScore
X-MS-InvokeApp
MicrosoftSharePointTeamServices
X-XRDS-Location
Timing-Allow-Origin
X-Cache-Lookup
X-Newrelic-App-Data
X-SERVER
X-Cnection
X-Node
X-FW-Hash
Cf-Railgun
X-Amz-Id-2
X-Amz-Request-Id
X-Died
X-Trace
Charset
X-Webcom-Cache-Status
X-Content-Security-Policy
X-FW-Type
X-FW-Serve
X-FW-Static
X-FullPageCaching
X-Webserver
Request-Id
Edge-Cache-Tag
X-HS-Cache-Config
X-CF-Powered-By
X-HS-Content-Id
X-PhApp
X-Hits
Request-Context
MicrosoftOfficeWebServer
X-PHP-Backend
X-BC-Stapler
SPIisLatency
X-INKT-URI
SPRequestDuration
X-INKT-SITE
X-Safe-Firewall
Access-Control-Max-Age
EagleId
X-Swift-CacheTime
X-Swift-SaveTime
Composed-By
Grace
Access-Control-Expose-Headers
Served-By
X-CDN-Pop-IP
X-CDN-Pop
X-Hyper-Cache
X-HS-Combine-CSS
Liferay-Portal
X-Spip-Cache
X-Tumblr-Pixel-4
X-Server-Name
X-VCache
X-Backend-Server
X-Dw-Request-Base-Id
X-Device
X-Fastly-Request-ID
X-Microcache
X-Firenze-Processing-Times
X-RateLimit-Remaining
X-LiteSpeed-Cache-Control
X-RateLimit-Limit
X-Cloud-Trace-Context
Xkey
X-Clacks-Overhead
X-FB-Debug
Rating
X-RateLimit-Reset
Front-End-Https
X-Loop
X-TNCMS
Surrogate-Control
Content-Style-Type
X-Jimdo-Instance
X-Jimdo-Wid
X-ServerName
Content-Script-Type
X-DDC-Arch-Trace
X-Acc-Exp
X-User-Agent
Public-Key-Pins
Refresh
X-Middleton-Display
Response
X-Sol
X-Middleton-Response
Display
X-Cache-Config
X-DNS-Prefetch-Control
X-Vtex-Processado-Em
X-StackifyID
Fpc-Cache-Id
X-Age
X-Frame-Option
X-XN-Trace-Token
X-XN-XNHTML
Real-Hostname
X-Tumblr-Content-Rating
X-Hostname
X-SS-Conf
X-SS-Location
X-Generated-By
X-Px
X-WebKit-CSP
X-Zen-Fury
X-Cached
X-N-OperationId
X-Tumblr-Pixel-5
X-Topify-Platform
X-Dscp-Value
X-Magento-Tags
X-Correlation-Id
X-HOST
X-Request-Time
X-MiniProfiler-Ids
PageSpeed
X-OneAgent-JS-Injection
X-Amz-Version-Id
P-LB
P-WS
TCN
X-URL
X-Whom
X-CMS-Version
X-Url
Rt-Fastcgi-Cache
X-Handled-By
X-Kinsta-Cache
X-DynaTrace-JS-Agent
X-DynaTrace
X-Cached-By
X-Outils-CS
X-B-Cache
X-Msg-2-Log
Product
X-Ruxit-JS-Agent
Access-Control-Request-Method
X-AspNetWebPages-Version
X-Content-Options
X-From
X-Edge-Location
X-Debug-Info
ServedBy
X-Varnish-Cache-Hits
Surrogate-Key
Powered
X-Varnish-TTL
Host
Imagetoolbar
X-Cache-Rule
X-Cdn
X-Engine
X-Via-JSL
Public-Key-Pins-Report-Only
X-Upstream
Fhost
X-SRCache-Store-Status
X-SRCache-Fetch-Status
Edge-Control-Message
X-CacheServer
DynaTrace
X-Application-Context
Alternate-Protocol
X-VTEX-Janus-Router-Backend-App
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Processed-At
X-Location-Id
X-Vtex-Remote-Cache
No
X-Powered-By-VTEX-Janus-ApiCache
X-Signature
X-Accel-Expires
X-Recruiting
X-LBLID
X-Umbraco-Version
X-Track
X-LW-Cache
X-Fastcgi-Cache
X-Developer
X-Platform
X-Response-Time
X-Micro-Cache
Fastcgi-Cache
X-Goog-Hash
X-Hosted-By
X-Original-Request
X-Platform-Router
X-Passed-To
X-Passed-To-DLL
X-Platform-Processor
X-Returned-From
X-Returned-From-DLL
X-Actual-URL
Retry-After
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-Platform-Cluster
X-F-Cache
X-Varnish-Beresp-Ttl
Pagespeed
X-Powered-By-VTEX-Janus-Edge
X-Magento-Cache-Debug
Generator
X-Stale
Dmn
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
X-Cache-Age
Arr-Disable-Session-Affinity
X-Defender
X-Passed-To-BeforeDispatch
X-Returned-From-BeforeDispatch
X-UD-Method
X-Shop-Id
HTTPS
X-Rnd
X-Loopia-Node
X-TransIP-Balancer
X-NWS-LOG-UUID
X-Version
WZWS-RAY
X-Powered-By-360WZB
X-Cache-TTL
Origin
X-Cache-Info
X-VARNISH-Cache
X-Device-Type
Akamai-IP
X-PERF
X-ApacheServer
X-Microcachable
X-FORWARDED-FOR
X-Source
X-URLSCHEME
X-BS
X-I-Sp
X-Varnish-Host
X-Instart-Request-ID
X-RESOURCE
X-Supported-By
Ohc-File-Size
X-Dispatcher
X-Litespeed-Cache
X-TransIP-Backend
Cache-Provider
Content-Hash
X-S
X-HS-Content-Campaign-Id
X-Rocket-Nginx-Bypass
Fastly-Debug-Digest
X-Tumblr-Pixel-6
X-Storage
X-Varnish-Count
Version
X-Varnish-HitMiss
X-Cache-Key
X-Front
X-Platform-Server
X-Pantheon-Environment
X-Pantheon-Phpreq
Surrogate-Key-Raw
X-Pantheon-Site
X-Cache-Tags
X-Cache-Operation
X-I
X-Server-ID
USPLoggingUUID
X-App-Hosting
X-Gamma-Serve
X-NetCat-Version
X-ATG-Version
X-EdgeConnect-Origin-MEX-Latency
X-Matrix-Server
X-Matrix-Proxy
Last-Published
X-Sapient
X-Page-Cache
RTSS
X-Translation
X-Microcache-Status
X-Powered-By-VelaWeb
X-Platform-Cache
X-Director
X-Art-Request-Id
X-Varnish-RemainingTTL
X-Expires-Orig
X-CSRF-Protection
X-Varnish-Seen-By
X-Varnish-ObjectSource
X-Varnish-RemainingLife
X-Varnish-GracePeriod
X-Shard
X-Cluster-Node
Allow
MIME-Version
X-Vcap-Request-Id
X-Varnish-Age
X-Route-Server
X-ORACLE-DMS-ECID
X-Hypernode
X-Content-Encoded-By
X-Cache-Namespace
X-LB
X-Revision
X-Ezoic-Cdn
Powered-By-ChinaCache
X-EdgeConnect-MidMile-RTT
X-Ttl
X-LB-Node
Wsr-Cache
X-Server-Upstream
Cache-Key
Content-Disposition
X-ARC
Pool
X-SSL-Cipher
X-Flow-Powered
X-Abgroup
IBM-Web2-Location
X-SSL-Protocol
X-NoCache
X-Environment
X-Litespeed-Cache-Control
X-IsCacheURL
X-Daa-Tunnel
X-Drupal-Cache-Tags
X-Grace
X-SV-Duration
X-SV-CreatedAt
X-Firenze-Processing-Time
X-Varnish-Cacheable
X-SV-FromDBCache
X-SV-Expires
X-SV-CacheTags
X-SV-Nginx-Duration
X-SV-Edge
X-SV-Pid
X-Lambda-Id
X-SV-Cacheable
X-Cache-Debug
Content-MD5
X-Edge-IP
Accept-Encoding
SSPAppContext
X-Github-Request-Id
X-Xrds-Location
S-Cnection
X-Dispatch
Srv
X-Nginx-Cache
FAI-W-FLOW
X-Magento-Cache-Control
X-Cache-Control-Orig
X-CJ-Soft
Lsrequestid
X-Cache-Only-Varnish
Cneonction
X-Url-Base
ServerID
Section-Io-Id
Page-Completion-Status
X-Varnish-Backend
X-GeoIP-Country-Code
X-Cache-Server
Backend
X-Varnish-Url
X-Cache-Type
Content-Encoding-Handler
X-Cache-Expires
SN
X-Varnish-Ttl
X-Cache-Lifetime
Location
X-Time
X-Hiawatha-Cache
X-Vhost
X-Ss-Conf
Pv
X-Ss-Location
X-Drupal-Cache-Contexts
X-Generated
Fw-Via
X-Duration
X-RequestId
X-PwB-Node
X-Debug
X-Servedby
X-Amz-Meta-S3cmd-Attrs
Node
Proxy-Connection
X-Server-Id
PICS-Label
X-Client-IP
X-AOL-HN
ServerName
X-ServerID
X-Proxy
Nodo
X-Fastly-Request-Id
X-Speed-Cache
X-Magnolia-Registration
X-Akamai-Transformed
X-Middleware-Start
X-Speed-Cache-Key
If-Modified-Since
Use-Proxy
X-GeoIP-Country-Name
X-Varnish-IP
AMF-Ver
X-FW
X-N
X-Cookie-Domain
X-Country-Code
X-Geo-Country
X-Cache-CFC
X-Config-Blacklist-Version
X-ID
X-Purge-URL
X-Frontend
X-Cache-Level
X-Location
Req-Id
X-Processing-Time
X-Pressidium-NinukisWP-Ver
X-Akamai-Device-Model
X-Akamai-Device-Characteristics
X-Goog-Metageneration
X-Cache-Handler
X-GUploader-UploadID
X-SO
X-Worker
X-Real-Server
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
NnCoection
X-Goog-Generation
X-Always-Cache
X-Goog-Storage-Class
Server-Info
Server-Name
X-UPSTREAM
X-SRCache-Key
X-Cache-Engine
X-Cache-Device-Type
X-Discourse-Route
X-Oneagent-Js-Injection
X-Nbs
IM-Version
X-Dynatrace-Js-Agent
X-ORACLE-DMS-RID
Cache
X-Content-Age
X-Cache-Fix
X-Cache-PageType
X-DealerOn
X-Purge-Host
P-ID
Local-Info
MJ12bot
X-Empowered-By
Pf.Web.Request.Id
Xc-Version
SEOMOZ
X-Yadis-Location
X-High-Performance
X-CF-Passed-Proto
Nitro-Cache
Author
X-Content-Type-Option
X-BackendServer
X-PF-Uncompressing
Accept-Charset
X-Varnish-Retries
X-Cache-Control
X-Browser
X-App-Server
X-Amz-Storage-Class
Cached
X-Sentry-ID
X-Correlation-ID
X-Runtime-Rack
Qs-Cache
X-WR-Flags
X-Id
X-Esi
X-Rocket-Nginx-Serving-Static
X-Unbounce-Variant
X-Server-Instance
X-Last-Modified
X-BKSrc
X-Unbounce-PageId
X-Unbounce-VisitorID
X-Srv
Front
Content-Transfer-Encoding
X-Hit-Cache
X-Framework
X-Abuse
X-FTR-Request-ID
X-OpenCart-Lightning
X-JG-Page-Cache
X-Pagename
SRV
X-CDN-Forward
Thanks
Adm-Server
X-Server-IP
HAVer
HCVer
X-TTL
X-SDS
X-Origin
S
X-AF-Userserver
Eomportal-Instance
CacheControlHeader
X-Content-Security-Policy-Report-Only
X-NB-Cached-Page
Server-Timing
X-Mobilized-By
X-ClientSide-Caching
Cm-Server
NODE
Custom-Header
X-Ruxit-Js-Agent
Cteonnt-Length
MC
X-VARITI-CCR
X-ACMCache
X-Varnish-Hits
Cache-Tags
X-AEM
X-WPL-DATA
X-HTML-Minification-Powered-By
X-Env
X-Sucuri-ID
X-Session-ID
ServerTokens
ServerSignature
X-CAPServer
X-Rq
X-Runtime-Memory
Frame-Options
X-Dns-Prefetch-Control
Proxy-Agent
X-Adobe-Content
X-Adobe-Loc
X-Processed-By
NetMindSessionID
X-VTEX-Cache-Status-Janus-Edge
X-Shield-Request-Id
NtCoent-Length
SiteSpeed
WWW-Authenticate
Magicmarker
X-LB-Server
X-DEBUG
X-HW
Smug-CDN
Ufe-Result
X-Trace-Id
BALANCEDTO
Tracecode
X-LP
X-Cache-Dispatcherpragma
X-TTFB
X-SmugMug-Values
X-SmugMug-Hiring
X-Page
X-WN-ClientGroup
X-SRV
X-Resty-Request-Id
W
X-TTFB-L
X-Cache-Dispatchercachecontrol
Cache-Tag
SVR
X-Fedora-School-Id
X-Sys-Req-ID
X-Gateway-Cache-Status
X-Orig-Vary
X-Gateway-Cache-Key
Content_type
X-Gateway-Skip-Cache
WN
X-CB-Server
VServer
X-LW-Web-Server
X-Route-To
X-Traffic
X-Smartcache-Keys
X-Garden-Version
Contao-Page-Layout
X-Jphone-Copyright
X-WP
X-Smartcache-Timeout
X-HydroSheep
X-Webkit-CSP
EagleEye-TraceId
X-Yottaa-Metrics
X-Yottaa-Optimizations
RN-Server
X-Drectory-Script
X-Generated-Time
X-Transaction
X-ASAP-Cache
Keywords
X-Twitter-Response-Tags
X-ServerIndex
X-A
Server-ID
Description
X-EPiphany-Vid
X-Varnish-Hostname
X-Connection-Hash
Max-Age
X-Clara-ASAP
X-Unique-ID
A-Powered-By
X-Client-Image-Vid
Web-App-Origin-Name
X-Client-Vid
Noq
Ramp
From-Origin
Environment
Ram
X-Symfony-Cache
X-Cache-Doesi
X-WA-Info
VANITY-HOST
X-Sorting-Hat-Expire-Cache
ScoreTracker
AsisCache
Yoncu-Errno
X-Compress-Hint
X-Redman-Final-Url
X-AVG-Country-Code
X-Akamai-Edgescape
X-Avg-Cookie-Expires
X-Redman-Backend
X-RDP
X-Disney-Akamai-Rule
X-Environment-Context
X-Hosting-Env
X-Viator-Tapersistentcookie
X-Webstats-RespID
Og
X-GeoIP
X-Plat
X-Application
X-ARRServer
X-Response
X-L-Path
X-SDE-Name
X-WebKit-CSP-Report-Only
X-VNode
Ibf5scheme
Access-Control-Allow-Header
X-Rebelmouse-Surrogate-Control
N365rili
X-RiS-UFDI
X-Cache-Node
X-VC-Enabled
Machine
IISExport
Pics-Label
X-Rebelmouse-Cache-Control
SBGI-10
SBGI-1
X-Varnish-Id
SG
SBGI-5
SBGI-7
SBGI-RenderTime
SBGI-RealPath
SBGI-Device
SBGI-9
X-Provisioner-Version
X-Sucuri-Cache
Cmstype
X-App-Status
X-Cache-On
Service-Worker-Allowed
X-Force
Play-Detected-Device
X-PRAM
Cmsid
X-Varnish-Debug-Age
X-CRA-DC
Fastly-Backend-Name
X-Domain-Checked
X-Varnish-Debug-TTL
Play-Detected-UserAgent
MW-Webserver
X-Stage
X-NginX-Server
X-Cache-Varnish
X-GoCache-CacheStatus
X-Bip
X-VC-TTL
X-SV
X-Proto
X-Magento-Action
X-Resource
X-Backend-Status
Beyond-Iis
Dispatcher
AC-ELC
X-CacheResult
X-Cdn-Forward
X-Forwarded-Host
Url
X-Vcache
X-AutoRu-App-Id
X-Directory-Script
X-Autoru-LB
X-Autoru-Host
X-CACHE-TTL
X-Secret
X-Src-Webcache
X-App-Runtime
X-Acquia-Debug-Password
SHInfo
X-Key
X-Culture
X-Detected-Device
X-Amz-Meta-S3b-Last-Modified
X-Varnish-ID
X-E
X-FORWARDED-PROTO
Dis-Env
X-Varnish-Server
X-TB-M
RequestId
Backend-Timing
Home
X-Analytics
X-Lb
X-Fstrz
X-Cms-Mode
X-Dev
Worker
X-Rack-CORS
X-Session-Reinit
X-Redirector
From
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Balanceador
XDomainRequestAllowed
X-Highwire-RequestId
X-FireWall-Port
X-Highwire-SessionId
X-Runtime-Affili
X-Varnish-Action
X-Dw-Trace-Id
X-Airee-Node
Hostname
X-Amz-Meta-Cb-Modifiedtime
X-Amz-Meta-Content-Md5
X-Frames-Options
X-Cocoon-Version
X-IIJ-Cache
X-PHP-Response-Code
X-SmartBan-URL
X-SmartBan-Host
X-Time-Microsecs
X-Request-Uri
Ctx
X-Real-IP
X-WHOIS-Cached
Web
X-Origin-Server
X-Source-ID
HitType
Identity
X-Atraveo-Cache-Control
X-Atraveo-Expires
COMMERCE-SERVER-SOFTWARE
Bios
Access-Control-Allow-Method
Nginx-Cache
SS
X-EC2-Instance-Id
X-Atraveo-From-Varnish-Cache
X-Atraveo-ETag
X-Atraveo-Varnish-Server-Id
X-Atraveo-TTL
X-Atraveo-Zone
WP-AdvCache-MemCached
Accept-Language
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
Myheader
X-Resolver-IP
Disablevcache
X-Sites
X-Adnet
Device
X-FPC
X-Pubstack
X-Depends
X-ACCELERATE
X-Cache-Via
NLCacheNote
X-DTC
Id
TC-Cache-U
TC-S-Cache
TC-S-Cache-M
TC-Cache-IC
TC-Cache
X-Streams-Distribution
X-Origin-Cache
X-Ghost-Cache-Status
X-Goog-Meta-Policy
X-Debug-Token
X-HAProxy
X-Machine
X-Flex-Community
X-NginX-Cache
X-Goog-Meta-Replace
X-Remote-Addr
X-RealServer
X-Flex-Lang
X-Hosting
X-Wikidot-Backend
X-Wikidot-Static-Cache
Ec-CorrId
X-Data-Request
X-Compressed-By
X-HashTwo
X-OPNET-Transaction-Trace
AMP-Access-Control-Allow-Source-Origin
X-Amcomm-Site
Ec-Machine
X-Confluence-Request-Time
Paypal-Debug-Id
X-Desc
X-MAT-GEO
X-Refresh
Hname
X-LDNR-NOT-ROOT-HL-NOTSET
X-Distributor
X-Rewrite
X-GSL-Server
Traffic-Origin
OriginServer
X-Nginx-Host
X-Req-Head-Response
X-Search-Id
X-Mobile-URL
X-Map-Context
X-Flex-Tags
X-Flex-Evstart
X-Node-Name
X-Flex-Lastmod
X-Flex-Tag
Proxy-Cache
X-HP-Trace-Project
X-HP-Trace-ID
ClientIP
F5-IpCliente
Gzip
X-Varnish-Cache-Local
X-DB-Content-Length
X-Aramark-SID
X-B2f-Not-Route
X-Cluster
X-Flex-Evend
Il-Cl
X-Grid-Server
XX
Xc
SERVER-ID
X-Bcwwwid
X-MidCOM-Meta-Cache
X-Info
X-Render-Time
X-MCB-Server
X-Batcache
X-NID
X-Cache-TTL-Remaining
VC-NoCache
CLMOB
X-Avvio-Cms-Cacheload
X-Distil-CS
Strikingly-Cached
Hummingbird-Cache
X-Pagely-Cache
X-SH-Cache-Status
Strikingly-Cache-Region
Strikingly-Cached-Version
X-ESI
X-SERVER-NAME
Aoestatic
X-Author
X-Magento-Lifetime
TP-Cache
X-Cf-Powered-By
TP-L2-Cache
X-Akamai-3PM-SW-Version
X-KoobooCMS-Version
Progma
OracleCommerceCloud-Version
Upgrade-Insecure-Requests
X-Proxy-Cache-Key
X-Amz-Id-1
X-Protected-By
Lb
OracleCommerceCloud-Sandiego
X-Client-Ip
X-Agent
X-AISO-Server
Ez
Accept-CH
CommercePlatform-Version
X-AISO-Cacheable
X-Proxy-Skip
Server-Id
X-DataDome
X-SuperCache
BackendServer
Kanooh-Host
Ohc-Response-Time
X-Zendesk-User-Id
X-7d-Trace-Id
X-DynamicCache
X-Zendesk-Origin-Server
X-Sid
X-IP
X-7d-Instance-Id
X-V
X-ASAP-Age
X-NodeID
X-App
X-HS-Status
X-Gannett-Site-Version
X-AISO-Cache
X-4ormat-Cacheable
X-PM-ID
PServer
Content-Generator
X-Captured
X-Powered-By-Home.Pl
X-Gyrobase-Publication
Actual-Object-TTL
X-CacheID
X-Country
X-DSMX-Render-MS
X-Config-By
X-Header
X-LBPoolMember
X-DN-Cache-Control
Copyright
X-OCTOPOD
X-DDM-SERVER-UPDATED
X-Tag-Playlist
X-ServiceProvider
PagesDisplayed
X-Rack-Cors
Cleartype
X-Served-Server
X-DDM-SERVER
NS-VaryByCustom-Key
X-DSMX-Rewrite-MS
X-Nitro-Cache
Ews
X-ETag
X-Cache-Extended
X-Batcache-Reason
X-HP-CAM-COLOR
X-Cache-Detail
Ttl
X-Reflector-Cache
X-Dealeron-Backend
X-Cache-Keep
Server-Ip
X-Dealeron-Original-Url
NZSpeedy
X-ManagedFusion-Rewriter-Version
X-Nginx-Request-Processing-Time
X-Server-Addr
X-Reflector
X-Rewritten-By
X-Pj-Cache-Status
X-Serv
MageStack-Cache-Status
X-CloudBurst-Frontend
X-Served
Amfplus-Ver
X-CloudBurst-Cache
MageStack-Cache
MageStack-Area
MS-CV
MageStack-Cache-Hits
MageStack-Cache-Lifetime
Key
X-Cache-ID
X-CloudBurst-WordPress
X-CloudBurst-Backend
X-Machine-Name
X-Cache-Time
Generate-Time
X-Serverid
X-Domino-CacheValidationWithETagResult
X-Made-On
X-Activity-Id
X-FastCGI-Cache-Status
X-Amz-Meta-Version-Id
X-AppVersion
X-HEAD
X-Header-Treatment
X-Az
X-Debug-Message
Viewport
X-Domino-CacheValidationWithETagReason
X-JSESSIONID
X-Middleton-PageSpeed
X-UA
X-UT-Cache
X-CSRF-Token
X-HA
X-Deity
ViewMode
Tesla.Performance
X-Cname-TryFiles
X-RAMCache
FindLaw
X-Obvious-Tid
X-Obvious-Info
X-MainProfileURL
Requested-Host
Swift-Performance
X-Hash
X-Box
X-Backend-Host
X-MainProfileName
X-MainProfileID
Tk
FRONT-END-SECUREBROWSER
Fastly-Restarts
X-WebNode
X-Cache-Me-Harder
X-Container
X-MainProfileCategory
X-Hstore
X-Hrouter
X-Phpwcms-Page-Processed-In
X-Phpwcms-Release
X-Catalyst
X-Built-With
Cache-Status
X-S-Misc
TZ-Server
ID
Hamster
X-CDN-RULE
X-CDN-COMPRESS
X-Generation-Time
X-D-Time
X-VG-WebCache
X-SE-Debug
X-REDIRECTSERVER
X-Via-NSCOPI
Content-Cache
X-AppServer-Cache-Rule
UrlWatchModule-Time
No-Cache
X-UPSTREAM-Address
X-RiS-PX
X-HeBS-Cache-Status
X-FIRSTBase
X-CH-Device
X-Cachable
X-I-V
X-Instart-Cache-Id
X-M-V
X-M-T
X-M-P
X-Beresp-Ttl
X-B
MageStack-Loadbalancer
MageStack-Debug
MageStack-Config
MageStack-Cacheable
MageStack-Magento-Version
MageStack-PageSpeed
Provided-Host
MageStack-Web-Node
MageStack-Tag
X-Mw-Workerstats
X-Pageid
CommunityServer
AR-SID
AR-PoweredBy
AR-CACHE
ProxiaInstanceId
Session-Id
X-Nginx-Request-Time
X-Middleton-Pagespeed
X-Instance-Id
AR-ATIME
Z-Tpl
X-Beatles
X-Q-S
X-Pool-Info
X-S-C
X-S-V
Y-Trace
X-Transaction-Name
X-T
MageStack-Cache-Warning
X-Debug-Token-Link
X-SilverStripe-Cache
X-ReqId
X-NO-BREACH
X-Omnis-SiteID
X-Timestamp
Provider
DeleGate-Ver
X-FG-RequestId
X-Enhanced-By
Page-Template
MachineName
X-Apm-Telemetry-Syncmark
SB-Cache-Remaining
X-DS1D
SB-Site-Device
X-AMAZEEIO
X-Artvisual-Server
X-Who
X-Webcelerate
X-ZSITES-DNS
DrivedBy
TheAnswer
Language
X-Varnish-Grace
X-UnsetCookies
X-Highwire-Smart-Code
X-Highwire-Sitecode
X-Pass-Through
X-PBY
X-SCM-Server-Number
X-PROCESSED-BY
Debug-Status
X-Unique-Id
X-VLoc
X-Varnish-Instance
X-XHR-Current-Location
Arrnode
EN-User
CmsfirstPublishTimestamp
X-Varnish-Cached-TTL
X-Varnish-Cached
X-Server-FQDN
X-Script
X-ServerAddr
X-MCF-ID
X-UPServer
X-Time-Zone
MSSmartTagsPreventParsing
MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
X-Meta-MSThemeCompatible
X-Nginx-Page-Cache
X-Secure
X-Node-App
X-Hit
X-CO-Host
ServerIP
Response-Time
Session-From
StatusCode
X-Cache-Bypass
X-ELB
X-Blog
SB-Cache-Life
Cacheid
X-W3TC-Minify
CpuTime
User-Agent
X-ACLR-Version
X-VC-Hash
X-VC-Debug
X-Static
X-Proxy-Id
X-Turpentine-Esi
X-VC-Cache
X-VC-Cacheable
X-Cache-Id
X-Cache-Original-TTL
X-Svr
Webserver
GranicusServer
EQ-Cache
Control-Cache
X-Route
X-Full-Url
X-Custom-Header
RSB-LINK
X-BPool
Warning
HostName
X-Layout
X-Title
X-BPool-Bx-Cache
X-Cjtype
X-Cacheable-TTL
X-BServer
X-BPool-Back
X-BPool-Fx-Cache
X-HOSTNAME
X-Akam-SW-Version
FastCGI-Cache
X-Pixelsilk-Server
X-Pixelsilk-Version
X-SH-Cache-Disabled
CS-SERVER
X-Sn-Servicetimems
X-Skip-Cache
Expiries
X-CPU-Time
X-Cache-TTL-Age
X-Old-Content-Length
WSCLoggingUUID
X-Instance
X-MSEdge-Ref
X-Dynamic-Cache
X-Ao-Cache-Key
Serverid
X-Cache-TTL-Current
X-Geo-IP
WP-FROM-CACHE
Countrycode
CD4
X-Locale
X-Member
DbServerName
Rewriter
X-Server-Hostname
Actioncode
X-PG
Amp-Access-Control-Allow-Source-Origin
X-ProcessESI
X-Beatles-Hits
X-DevSrv-CMS
Xcache
Redirect-Reason
X-CACHE-KEY
X-BackendProxy
Head
X-Site
X-Server-Instance-Name
X-Gateway-Rate-Limit-Conn
X-Gateway-Rate-Limit-Delayed
X-M
X-Reason-Bp
X-Prerendered
V-Age
X-Backend-Name
X-ClusterID
X-NewsFlow-Sitename
X-Origin-Date
ReqUrl
X-Cache-FS-Status
X-Healthy
Powered-By-115
Referer
X-Varnish-Debug-Hits
Request-Filtered-By
X-Proxy-Backend
X-Cache-Set
TestCC
X-SSLUpstream
X-SSLProxy
CDCHOST
X-Ants-Host
X-Svr-Proxy
X-Theme
X-RequesterIP
X-MyName
X-Server-Generated
X-Prerender-Token
X-PBS-Fwsrvname
X-Test-Debug
X-Varnish-Cache-Ttl
X-XHTML-Minification-Powered-By
Apple-Itunes-App
X-PBS-Appsvrip
X-PBS-Appsvrname
X-Ants-Machine-Id
X-NMT-Proxy
X-RemovedCookies
X-DEBUG-HOST
HA-Georegion
HA-Host
X-Cache-ASPX
X-Built-By
HA-Geolon
X-Fastly-Backend-Reqs
BlockPHPCallEnd
X-Uncacheable
HA-Geolat
X-BIT-Node
X-Max-Age
HA-Urlpath
X-Test
X-Cache-LB
X-Status
HA-Servedtime
HA-Ipaddr
X-ACache
User-Cache-Control
X-Optimization
X-K8s
X-Mobile-Rewrite
DNNOutputCache
HA-Cloudapp
Edgecast
HA-Geocity
SINA-LB
SINA-TS
DB-Nickname
Www.Aujourdhui.Com
V-TTL
X-SCProxy
X-SayCDN-TTL
X-Request-Received
X-Request-Processing-Time
HA-Geocountry
Note
X-Processed
X-Say-TTL
X-Say-Cacheable
X-Ssl-Cipher
IES-Server
X-This-Proto
X-Upstream-Status
X-Cacheable-By-Varnish
X-CGP
X-Fpc
X-Olaf
X-Cache-V
X-TLS-Version
X-B3-Spanid
X-B3-Traceid
X-Clx-Request
X-DEBUG-TTL
Be
X-Tt-Dbg
X-Upgrade-Enabled
X-Homeaway-Requestmarker
Realaction
X-PoweredBy
X-DeliveryServer
X-ENV
X-MSU-SOURCE
X-TTL-Age
X-Would-Your-GrandPa-Wait
SB-Site-IE-VERSION
Returned-Status
Access-Control-Request-Headers
Arrow-RequestId
NKBVHEADER
Load-Balancer
X-Session-Id
X-Restarts
L5d-Success-Class
MwpReleaseVersion
PB-RID
X-Distributed-By
X-WR-MODIFICATION
X-Your-GrandPa-Would-Wait
VAR-Cache
Server-Hostname
PB-PID
Container
Resin-Trace
X-Does-He-Have-Time