Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
Age
X-Cache
Content-Language
X-AspNet-Version
P3P
X-Pingback
Expect-CT
X-UA-Compatible
Via
Upgrade
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Adblock-Key
X-Request-Id
Referrer-Policy
X-Varnish
X-Check
X-Xss-Protection
X-Generator
X-Language
X-Template
X-Buckets
X-Drupal-Cache
X-Type
WPE-Backend
P3p
X-Cache-Group
X-Pass-Why
Alt-Svc
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-AspNetMvc-Version
X-Cache-Hits
X-Hacker
X-Ac
Host-Header
X-Dc
X-Sorting-Hat-Section
X-Alternate-Cache-Key
X-Accel-Buffering
X-Wix-Server-Artifact-Id
X-ShopId
X-ShardId
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-PodId
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-PodId-Cached
X-Powered-By-Plesk
X-Runtime
X-Served-By
MS-Author-Via
Content-Location
X-Via
X-Amz-Cf-Id
X-Powered-CMS
X-IPLB-Instance
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Contextid
X-ServedBy
X-PC-Key
X-PC-Hit
X-UA-Device
Cartoon
X-Timer
Status
X-PC-Host
X-PC-AppVer
X-PC-Date
Access-Control-Allow-Credentials
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
CF-Cache-Status
X-Iinfo
X-NewRelic-App-Data
X-Rid
X-Seen-By
X-Wix-Request-Id
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Backend
X-WPE-Loopback-Upstream-Addr
Powered-By
X-Mod-Pagespeed
X-Cache-Status
Content-Encoding
X-Tumblr-Pixel-1
X-Host
X-CST
X-Server
X-Endurance-Cache-Level
X-Tumblr-Pixel-2
X-Cache-Hit
X-Cache-Enabled
X-Port
X-Logged-In
X-DIS-Request-ID
Keep-Alive
X-CDN
X-Server-Powered-By
X-Drupal-Dynamic-Cache
X-Nginx-Cache-Status
X-Accel-Version
X-Robots-Tag
X-Tumblr-Pixel-3
X-Turbo-Charged-By
X-Proxy-Cache
Server-Timing
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Page-Speed
X-Request-ID
X-Content-Digest
X-Content-Powered-By
X-LiteSpeed-Cache
X-AH-Environment
Content-Security-Policy-Report-Only
X-GitHub-Request-Id
X-Rack-Cache
X-Pad
X-ASPNET-VERSION
X-Varnish-Cache
Edge-Control
X-FW-Hash
X-FW-Server
X-Request-Country
Request-Context
X-FW-Serve
X-FW-Static
X-FW-Type
X-XRDS-Location
SPRequestGuid
X-MS-InvokeApp
X-SharePointHealthScore
X-Hits
WP-Super-Cache
MicrosoftSharePointTeamServices
X-Trace
X-Node
X-Webcom-Cache-Status
Timing-Allow-Origin
Cf-Railgun
X-BC-Stapler
X-Tumblr-Pixel-4
Edge-Cache-Tag
X-Amz-Request-Id
Access-Control-Expose-Headers
X-Amz-Id-2
X-Cache-Lookup
X-HS-Cache-Config
X-Content-Security-Policy
X-Died
X-HS-Content-Id
X-Webserver
Charset
X-Ua-Compatible
X-Cnection
X-FullPageCaching
X-PhApp
X-CF-Powered-By
X-HS-Combine-CSS
Request-Id
X-PHP-Backend
X-Newrelic-App-Data
X-INKT-URI
X-INKT-SITE
Access-Control-Max-Age
X-Fastly-Request-ID
SPIisLatency
SPRequestDuration
X-Backend-Server
EagleId
Composed-By
X-Swift-CacheTime
MicrosoftOfficeWebServer
X-Swift-SaveTime
X-CDN-Pop-IP
X-CDN-Pop
X-SS-Location
X-SS-Conf
Grace
X-Safe-Firewall
Served-By
X-Spip-Cache
X-Device
Liferay-Portal
X-Server-Name
X-Dw-Request-Base-Id
X-Edge-Cache-Key
X-Edge-Cache
X-Hyper-Cache
Rating
Front-End-Https
X-NF-Request-ID
X-VCache
X-Cloud-Trace-Context
X-Cluster-Node
X-StackifyID
Surrogate-Control
X-Tumblr-Pixel-5
X-DDC-Arch-Trace
X-Microcache
X-FB-Debug
X-LiteSpeed-Cache-Control
X-Wix-Punisher
X-Clacks-Overhead
X-RateLimit-Remaining
X-RateLimit-Limit
X-Loop
X-TNCMS
X-RateLimit-Reset
Content-Style-Type
X-Tumblr-Content-Rating
X-SERVER
X-HeyJason
Permitted-Cross-Domain-Policies
X-Do-Not-Hack
Content-Script-Type
X-Jimdo-Wid
X-Jimdo-Instance
X-Acc-Exp
X-OneAgent-JS-Injection
Public-Key-Pins
X-Sol
X-Middleton-Display
Display
Response
X-Firenze-Processing-Times
X-Middleton-Response
X-Age
X-DNS-Prefetch-Control
X-Vtex-Processado-Em
Refresh
P-LB
P-WS
X-Debug-Info
X-Kinsta-Cache
X-Original-Date
X-WebKit-CSP
X-Px
X-XN-Trace-Token
X-XN-XNHTML
X-User-Agent
Fpc-Cache-Id
X-Magento-Tags
Xkey
X-Cached
X-Amz-Version-Id
X-Cdn
X-Cache-Config
X-Ruxit-JS-Agent
X-N-OperationId
X-Goog-Hash
X-Generated-By
PageSpeed
X-Zen-Fury
X-Hostname
X-Shopid
X-Topify-Platform
X-Sorting-Hat-Podid-Cached
X-Sorting-Hat-Featureset
X-Sorting-Hat-Shopid-Cached
X-Sorting-Hat-Podid
X-Sorting-Hat-Privacylevel
X-Sorting-Hat-Shopid
Retry-After
X-Shardid
X-DynaTrace-JS-Agent
X-Url
X-Frame-Option
X-Tumblr-Pixel-6
Rt-Fastcgi-Cache
X-Handled-By
X-From
X-Loopia-Node
X-MiniProfiler-Ids
X-LW-Cache
TCN
X-Edge-Location
X-B-Cache
X-Outils-CS
X-CMS-Version
X-EdgeConnect-Origin-MEX-Latency
X-Goog-Storage-Class
X-Goog-Generation
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Request-Time
X-Goog-Metageneration
X-URL
Access-Control-Request-Method
X-Whom
X-FORWARDED-FOR
Feature-Policy
X-Cached-By
X-Upstream
Fastcgi-Cache
Edge-Control-Message
X-EdgeConnect-MidMile-RTT
X-Platform-Router
X-Platform-Processor
X-Platform-Cluster
X-Engine
X-Version
X-Source
Powered
X-Varnish-TTL
ServedBy
X-AspNetWebPages-Version
X-Servedby
X-Content-Options
X-DynaTrace
Imagetoolbar
X-Accel-Expires
Public-Key-Pins-Report-Only
X-Msg-2-Log
X-Varnish-Host
X-LBLID
X-Recruiting
Product
X-SRCache-Store-Status
X-Location-Id
X-SRCache-Fetch-Status
X-Varnish-Cache-Hits
Last-Published
X-VTEX-Cache-Status-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-Vtex-Remote-Cache
X-Powered-By-VTEX-Janus-ApiCache
X-Vtex-Processed-At
X-CacheServer
No
Allow
Dmn
Fhost
X-Magento-Cache-Debug
X-Response-Time
X-Actual-URL
DynaTrace
X-Passed-To-DLL
X-Returned-From
X-Passed-To
X-Original-Request
X-Returned-From-DLL
X-Umbraco-Version
X-NWS-LOG-UUID
X-URLSCHEME
X-Application-Context
X-Cache-Info
X-Signature
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-RESOURCE
X-Cache-Rule
X-Passed-To-PostProcessResponse
X-Developer
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Stale
X-Returned-From-PostProcessResponse
Warning
X-Microcachable
X-ApacheServer
X-PERF
X-Forwarded-For
Host
X-Device-Type
X-UD-Method
X-Varnish-Count
X-Varnish-HitMiss
X-Fastcgi-Cache
X-Powered-By-360WZB
X-Platform-Server
Arr-Disable-Session-Affinity
X-Platform
Generator
X-Cache-Key
X-ET-API-ORIGIN
X-ET-API-ROOT
X-ET-API-VERSION
X-Dns-Prefetch-Control
X-S
X-Correlation-Id
X-HS-Content-Campaign-Id
X-F-Cache
X-Platform-Cache
Alternate-Protocol
X-Rnd
X-Gateway-Skip-Cache
X-Gateway-Cache-Status
X-Gateway-Cache-Key
X-Supported-By
X-Guploader-Uploadid
Origin
X-Shop-Id
WZWS-RAY
X-Micro-Cache
X-Defender
X-Ezoic-Cdn
X-Cache-Tags
X-TransIP-Balancer
Surrogate-Key
X-Instart-Request-ID
Version
X-Via-JSL
X-Correlation-ID
Content-Hash
X-TransIP-Backend
X-Microcache-Status
X-Translation
X-Hosted-By
Pagespeed
X-App-Status
X-Dispatcher
X-Cache-Namespace
X-Environment
Cache-Provider
USPLoggingUUID
X-Director
X-Duration
X-Cache-Age
X-HOST
X-BS
X-SO
X-I-Sp
X-Lambda-Id
X-Powered-By-VelaWeb
X-LB-Node
X-Matrix-Proxy
X-Matrix-Server
X-Sapient
X-Expires-Orig
X-Ttl
MIME-Version
X-Daa-Tunnel
X-SSL-Cipher
Cache-Key
X-CSRF-Protection
RTSS
X-Server-Upstream
X-Akam-SW-Version
X-Varnish-GracePeriod
X-Magento-Cache-Control
Content-Disposition
X-Art-Request-Id
X-Varnish-Seen-By
X-Varnish-ObjectSource
X-Varnish-RemainingLife
X-Varnish-RemainingTTL
X-Cache-Control-Orig
S-Cnection
X-SSL-Protocol
Pool
X-Server-ID
X-Hypernode
X-Abgroup
X-App-Hosting
X-Debug
X-Track
X-NoCache
X-ORACLE-DMS-ECID
Cneonction
X-Cache-Debug
X-Front
X-Drupal-Cache-Tags
X-Last-Modified
X-Gamma-Serve
SN
X-NetCat-Version
X-Edge-IP
X-I
Wsr-Cache
X-Grace
X-Route-Server
X-Vcap-Request-Id
X-Rocket-Nginx-Serving-Static
X-Storage
SSPAppContext
ServerID
Akamai-IP
X-Rocket-Nginx-Bypass
X-Powered-By-VTEX-Janus-Edge
X-GUploader-UploadID
X-Forwarded-Proto
X-Server-Id
X-Flow-Powered
X-Hiawatha-Cache
X-Client-IP
Powered-By-ChinaCache
X-Varnish-Cacheable
X-Dealeron-Backend
X-DealerOn
X-Dealeron-Original-Url
X-Cache-TTL
X-Page-Cache
X-Cache-Lifetime
X-Country-Code
FAI-W-FLOW
X-ATG-Version
Node
X-Cf-Powered-By
X-SV-Pid
X-SV-Edge
X-SV-Expires
X-SV-FromDBCache
X-SV-Duration
X-SV-Nginx-Duration
X-SV-CacheTags
If-Modified-Since
X-Drupal-Cache-Contexts
X-Litespeed-Cache
X-SV-Cacheable
X-SV-CreatedAt
X-Generated
X-Magnolia-Registration
X-VARITI-CCR
X-Pressidium-NinukisWP-Ver
X-Revision
X-Pantheon-Phpreq
X-Pantheon-Site
X-ServerName
X-Cache-Level
X-Pantheon-Environment
Surrogate-Key-Raw
X-Cache-Server
Src-Update
X-SSLProxy
Update-Time
X-SSLUpstream
X-Cache-Engine
Accept-Encoding
Lsrequestid
X-Content-Encoded-By
X-Url-Base
X-ARC
X-Cache-Type
X-Vhost
X-Cache-Expires
AMF-Ver
X-Amz-Meta-S3cmd-Attrs
X-SDS
X-CJ-Soft
PICS-Label
X-Discourse-Route
X-Cache-Handler
X-Firenze-Processing-Time
X-TransIP-Reserved
X-Cache-Operation
X-Geo-Country
X-GeoIP-Country-Code
X-Processing-Time
Backend
X-UPSTREAM
X-LB
X-PwB-Node
X-IsCacheURL
X-ServerID
Contao-Page-Layout
X-Time
Req-Id
X-ORACLE-DMS-RID
NnCoection
X-Esi
X-Varnish-Url
X-Runtime-Rack
X-Varnish-Backend
X-Sucuri-ID
X-Frontend
X-Litespeed-Cache-Control
ServerName
Page-Completion-Status
Qs-Cache
X-Svr-Proxy
X-SRCache-Key
Proxy-Connection
X-N
Author
Nodo
X-SVR-IIS
Server-Name
Content-Encoding-Handler
X-Varnish-Ttl
Section-Io-Id
Srv
X-Dispatch
X-Origin
X-SRV
X-Trace-Id
X-LB-Server
Tracecode
X-Akamai-Device-Model
X-Service-Id
X-Cache-Device-Type
Pv
X-Akamai-Device-Characteristics
X-Content-Age
X-FTR-Request-ID
X-Speed-Cache-Key
X-Speed-Cache
X-Real-Server
X-Varnish-IP
MC
X-Content-Type-Option
X-Always-Cache
X-Nbs
Cache-Tags
X-Cache-Only-Varnish
X-Dynamic-Cache
From-Origin
X-ACMCache
X-GeoIP-Country-Name
X-Cookie-Domain
X-Env
X-HW
Service-Worker-Allowed
S
Smug-CDN
SiteSpeed
X-Akamai-Edgescape
X-TTL
X-Sucuri-Cache
X-FW
X-SmugMug-Hiring
X-Id
X-TTFB-L
X-SmugMug-Values
X-TTFB
X-Varnish-Age
X-Unbounce-PageId
X-CF-Passed-Proto
X-Unbounce-Variant
X-High-Performance
X-Unbounce-VisitorID
X-Varnish-Retries
X-Srv
X-Browser
X-Transaction
Cache
X-Connection-Hash
X-Server-Instance
X-Twitter-Response-Tags
Https
X-CacheFROM
X-Config-Blacklist-Version
X-Locale
W
X-Avg-Cookie-Expires
X-AVG-Country-Code
X-Redman-Final-Url
X-Redman-Backend
MJ12bot
Content-Transfer-Encoding
SEOMOZ
Custom-Header
X-RequestId
IM-Version
X-Nginx-Cache
X-Amz-Storage-Class
IBM-Web2-Location
Location
X-VC-Enabled
X-BKSrc
Local-Info
X-ID
X-Symfony-Cache
Content_type
X-PF-Uncompressing
X-Shield-Request-Id
X-Drectory-Script
X-Cache-Control
X-Empowered-By
X-Rq
X-BackendServer
Ohc-File-Size
X-Middleware-Start
X-Worker
CacheControlHeader
X-Varnish-Server
NetMindSessionID
Fw-Via
X-Sys-Req-ID
Accept-Charset
X-Cache-PageType
HCVer
X-Varnish-Hits
Proxy-Agent
X-Orig-Vary
X-AF-Userserver
HAVer
X-Cache-Fix
X-ARRServer
Edit
Nginx-Cache
X-WR-Flags
X-Stage
X-Unique-ID
Content-MD5
X-Proxy
X-Analytics
X-Webstats-RespID
X-App-Server
X-Content-Security-Policy-Report-Only
Server-Info
X-LP
Dtk-Cache-Check-0
Backend-Timing
Strikingly-Cached-Version
Strikingly-Cache-Region
X-Wikidot-Static-Cache
X-Wikidot-Backend
Strikingly-Cached
Use-Proxy
X-Location
Cached
X-LW-Web-Server
Web-App-Origin-Name
Cm-Server
X-Remote-Addr
X-TB-M
SVR
Eomportal-Instance
Access-Control-Allow-Method
Adm-Server
WWW-Authenticate
Front
Xc-Version
X-Amz-Meta-Content-Md5
X-RealServer
X-Purge-URL
X-Amz-Rid
X-Key
X-Nitro-Cache
X-Adobe-Loc
X-Yadis-Location
X-Pool
X-WPL-DATA
X-Adobe-Content
X-Runtime-Memory
Environment
Swift-Performance
X-CB-Server
X-Framework
X-Cache-Ttl
X-Cache-CFC
Max-Age
Pf.Web.Request.Id
X-Role
Device
X-VNode
Hummingbird-Cache
X-CacheDebug
X-AEM
X-NginX-Cache
Pics-Label
X-Fedora-School-Id
X-Disney-Akamai-Rule
X-Source-ID
X-Webkit-CSP
X-FastCGI-Cache
X-SE-Debug
X-NginX-Server
X-WP
X-Purge-Host
X-Culture
X-Generated-Time
X-FIRSTBase
X-RiS-UFDI
X-App
RequestId
SRV
Frame-Options
X-Now-Id
X-Balanceador
X-SERVER-NAME
IISExport
FindLaw
X-JG-Page-Cache
X-VCS-Ttl
X-HostName
X-Detected-Device
X-Captured
Url
X-Smartcache-Keys
Lb
X-Storage-Cache-Expires
X-Varnish-ID
X-Consent-Required
X-GoCache-CacheStatus
X-CDN-Forward
X-HeBS-Cache-Status
X-Smartcache-Timeout
X-Dynatrace-Js-Agent
X-Vip
X-VCS-Cacheable
XDomainRequestAllowed
X-Amzn-Trace-Id
X-Atraveo-Zone
X-Atraveo-Varnish-Server-Id
X-Atraveo-TTL
Dispatcher
X-Distributor
X-Processed-By
X-Sedo-Request-Id
X-SH-Cache-Status
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
X-Amz-Apigw-Id
X-CAPServer
X-Resty-Request-Id
X-Amzn-RequestId
X-Atraveo-Cache-Control
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
X-Atraveo-ETag
X-Origin-Id
X-Backend-Status
X-Nginx-Host
Copyright
Report-To
EN-User
X-Storage-Cache
X-Storage-Cache-Date
X-Webcelerate
X-Runtime-Affili
X-Cache-Miss-From
X-App-Runtime
X-VC-TTL
X-Cacheable-TTL
X-Application
From
X-PRAM
X-Debug-Token
Cmsid
X-ClientSide-Caching
X-Jphone-Copyright
X-GeoIP
X-FireWall-Port
X-Provisioner-Version
X-Domain-Checked
F5-Trid-Name
Access-Control-Request-Headers
X-IIJ-Cache
Upgrade-Insecure-Requests
Cmstype
A-Powered-By
F5-Trid-Value
Disablevcache
X-HydroSheep
X-Lw-Cache
RN-Server
X-Span
X-Rack-Cors
X-Info
X-Force
X-A
AETN-Area-Code
X-Custom-Name
X-Desc
X-Depends
AETN-City
X-Session-Reinit
X-Resource
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Forwarded-Host
X-Map-Context
X-Resolver-IP
X-Adnet
Identity
X-SP-UniqueName
X-MCB-Server
X-Garden-Version
SHInfo
AKA-DEVICE
X-MAT-GEO
X-Server-IP
AETN-Continent-Code
AETN-Country-Code
AETN-Postal-Code
ScoreTracker
Machine
Ibf5scheme
X-RemovedCookies
AETN-Latitude
AETN-Longitude
Paypal-Debug-Id
X-Varnish-Action
X-GSL-Server
AETN-EU
X-Cache-Detail
X-Req-Head-Response
AETN-Country-Name
X-DynamicCache
AETN-State-Code
Id
Filters
AETN-DEVICE
NODE
AsisCache
Ufe-Result
X-SAPP
X-Page
Myheader
X-Plat
EagleEye-TraceId
Beyond-Iis
X-Cache-On
Access-Control-Allow-Header
N365rili
X-Confluence-Request-Time
X-Hit-Cache
X-MidCOM-Meta-Cache
Fastly-Backend-Name
BackendServer
X-Cocoon-Version
VServer
X-Request-Uri
Arrnode
X-ProcessESI
HitType
X-Now-Cache
X-CRA-DC
BALANCEDTO
X-Real-IP
Pragrma
Resin-Trace
Edgecast
X-4ormat-Cacheable
X-Pagename
X-SP-Farm
X-CACHE-TTL
X-Actindo-Thread-Id
X-Actindo-Rs
X-Actindo-Request-Id
NtCoent-Length
X-V
X-SayCDN-TTL
VANITY-HOST
X-Say-TTL
X-Say-Cacheable
X-HTML-Minification-Powered-By
AMP-Redirect-To
Accept-CH
X-Response
X-Agent
X-Amz-Id-1
Cteonnt-Length
WN
X-WN-ClientGroup
X-Cache-2
X-Akamai-Transformed
X-OpenCart-Lightning
X-HS-Status
CLMOB
X-Cms-Mode
X-Compress-Hint
X-Dev
X-ENV
Noq
X-Cache-Doesi
Magicmarker
Referer
Ramp
Accept-Language
X-Beget-Proxy
Ram
X-Proxy-Skip
Worker
X-Reflector
X-Reflector-Cache
X-Timestamp
SERVER-ID
X-Rewritten-By
X-ManagedFusion-Rewriter-Version
X-Hosting-Env
X-SDE-Name
X-Yottaa-Optimizations
X-DataDome
X-Refresh
X-Cache-Varnish
X-Hstore
X-Middleton-PageSpeed
X-Yottaa-Metrics
X-Flex-Evend
X-Gannett-Site-Version
X-NodeID
DNNOutputCache
X-E
X-Flex-Lang
X-Flex-Lastmod
Thanks
X-Appmachine-Environment
X-Hrouter
X-Varnish-Debug-Age
X-Flex-Tag
X-Varnish-Debug-TTL
X-AutoRu-App-Id
X-Autoru-Host
COMMERCE-SERVER-SOFTWARE
X-Flex-Tags
X-Bip
Cleartype
X-Blog
X-Flex-Community
X-Test
X-Flex-Evstart
X-Title
X-ESI
X-Data-Request
X-Rebelmouse-Cache-Control
X-Abuse
X-Client-Vid
X-Upgrade-Enabled
X-Ser
X-Varnish-Hostname
X-Client-Image-Vid
X-EPiphany-Vid
CS-SERVER
Num
MageStack-Web-Node
MageStack-Tag
MS-CV
Request-EU
Firespring-Website-Id
Request-Country
X-Box
X-Svr
X-IP
AR-SID
AR-PoweredBy
AC-ELC
X-AOL-HN
Web
X-WA-Info
AR-CACHE
AR-ATIME
Prama
X-Secret
X-Server-Addr
X-ServerIndex
X-Path-Route
NLCacheNote
Bios
MageStack-PageSpeed
X-Goog-Meta-Policy
X-Via-S
MageStack-Cache-Hits
MageStack-Cache
MageStack-Cache-Lifetime
X-Amcomm-Site
MageStack-Cache-Status
X-W3TC-Minify
MageStack-Area
WP-FROM-CACHE
DrivedBy
X-Layout
X-Rule
X-Hosting
X-Soro
X-Fstrz
X-Ghost-Cache-Status
X-WebKit-CSP-Report-Only
MageStack-Cacheable
X-ASAP-Cache
X-UA-Bot
X-Clara-ASAP
XX
X-Amz-Meta-Cb-Modifiedtime
MageStack-Magento-Version
X-Goog-Meta-Replace
X-Origin-Server
X-FastCGI-Cache-Status
X-PBY
MageStack-Debug
MageStack-Config
X-Oferteo-Domain
X-JSESSIONID
MageStack-Loadbalancer
X-HashTwo
X-Proxy-Cache-Control
Server-Id
X-Proto
NZSpeedy
X-Proxy-Backend
SS
IES-Server
X-Generated-Timestamp
Load-Balancer
Cache-Status
X-Session-ID
MageStack-Cache-Warning
X-Middleton-Pagespeed
X-LBPoolMember
Pramga
X-SilverStripe-Cache
X-Ratelimit-Limit
X-Ratelimit-Remaining
Fastly-Debug-Digest
X-Origin-Cache
X-CACHE-KEY
X-Dw-Trace-Id
CommunityServer
X-Varnish-URL
X-RAMCache
X-Directory-Script
WP-AdvCache-MemCached
X-Cdn-Forward
TC-S-Cache-M
X-Node-App
X-Cache-TTL-Current
X-SmartBan-URL
X-Cache-TTL-Age
X-Scheme
X-Streams-Distribution
X-Protected-By
X-ETag
X-Serv
X-Cache-Warmer
TC-Cache-U
Server-Ip
TC-Cache
X-ReqId
AMP-Access-Control-Allow-Source-Origin
TC-Cache-IC
TC-S-Cache
X-XHR-Current-Location
X-Status
X-DSMX-Rewrite-MS
X-Varnish-Cache-Local
X-Mobile-Rewrite
X-SmartBan-Host
Home
Il-Cl
ServerTokens
ServerSignature
Proxy-Cache
X-DSMX-Render-MS
X-B2f-Not-Route
X-Enabled1
Access-Control
*
X-Enabled2
X-Enabled3
PB-RID
PB-PID
X-NWS-UUID-VERIFY
Traffic-Origin
X-Aramark-SID
X-Envoy-Upstream-Service-Time
X-CacheLoc
X-Block-RuleID
X-Airee-Node
X-BPool-Back
X-Upstream-Status
X-Upstream-Backend
X-BServer
X-Block-Rule
X-Ms-Request-Id
X-Domino-CacheValidationWithETagResult
X-Domino-CacheValidationWithETagReason
X-Cache-Time
X-Frames-Options
X-HA-Backend
X-MrHost
Apachenode
X-HA-Frontend
X-We-Are-Hiring
X-VC-Debug
X-Node-Id
X-FPC
X-Built-By
X-Render-Time
X-Test-Debug
Aurora-Node
Arrow-RequestId
X-XHTML-Minification-Powered-By
CDCHOST
X-Zendesk-User-Id
X-Highwire-Smart-Code
X-Highwire-Sitecode
X-Cache-Via
X-Nginx-Request-Processing-Time
X-Proxy-Cache-Key
X-Zendesk-Origin-Server
X-UnsetCookies
X-RequesterIP
ORIGIN-SERVER
ORIGIN-SITE
X-Pass-Through
X-Nginx
X-Max-Age
X-PM-ID
X-PressLabs-Stats
X-Time-Microsecs
X-Src-Webcache
X-Search-Id
X-Gate-Blk
X-Gate
X-ACCELERATE
Www.Aujourdhui.Com
V-TTL
X-CD
X-Cjtype
X-DevSrv-CMS
X-Device-Item
Provider
X-Cache-Action
Powered-By-115
X-WebNode
TP-Cache
TP-L2-Cache
X-KoobooCMS-Version
X-Container
X-Upstream-Addr
Request-Filtered-By
X-Instance-Id
X-CacheID
X-MyName
X-Nginx-Request-Time
X-PBS-Appsvrname
X-PBS-Appsvrip
X-Mobilized-By
X-Olaf
X-7d-Trace-Id
X-7d-Instance-Id
X-Cache-Extended
X-Log
X-Reqid
X-Qiniu-Zone
Tempo
Server-ID
D
Yoncu-Errno
FRONT-END-SECUREBROWSER
Hamster
HitInfo
X-Cache-FS-Status
SINA-TS
X-ServiceProvider
X-UA
Amfplus-Ver
MageStack-Cache-Lifetime-Sent
X-Accel-Cache-Control
MageStack-Last-Modified
X-HA
X-Debug-Message
X-Activity-Id
Viewport
X-Amz-Meta-Version-Id
X-ASAP-Age
X-Az
X-Build-Id
X-CH-Device
Provided-Host
Dis-Env
X-Instart-Cache-Id
CDN-Cache
SINA-LB
Session-Id
Backend-Name
Backend-IP-Port
X-Rack-CORS
X-Czt
X-SSLTerm-Server
X-ZORequestID
Yola-ID
X-Via-NSCOPI
X-PBS-Fwsrvname
X-SuperCache
Xc
X-Distributed-By
X-Highwire-SessionId
X-Batcache
X-DDM-SERVER-UPDATED
X-Cache-Dispatchercachecontrol
X-DDM-SERVER
X-Cache-Dispatcherpragma
X-Built-With
X-Batcache-Reason
X-B3-Sampled
SBSS
X-Unique-Id
X-HAProxy
X-EC2-Instance-Id
X-WR-Trace
X-Proxy-Id
X-PHP-Response-Code
X-Highwire-RequestId
Content
X-APIVERSION
Play-Detected-UserAgent
X-FromPodPressCache
VC-NoCache
X-ROUTING
X-ORIKEY
X-ENDPOINT
X-Varnish-Debug-Hits
X-WEBMGR-CACHE
X-Shard
X-Appid
X-FORWARDED-PROTO
Play-Detected-Device
PServer
X-DB-Content-Length
X-Serverid
X-Pj-Cache-Status
X-Dscp-Value
X-APIAUTH-VAL
X-Appversion
ServerNode
Now
X-Bcwwwid
PBS
X-Now-Instance
X-Now-Trace
Ali-Swift-Global-Savetime
X-Cache-LB
X-Web-Node
X-Varnish-Cache-Ttl
X-Served
X-Deity
X-M
X-Processed
X-SCProxy
X-This-Proto
X-Tag-Playlist
X-Cname-TryFiles
Hit-Count
X-Beatles
X-InstanceId
X-Boot
X-Cache-ID
Ttl
X-Optimization
NGX
Plateforme
Generate-Time
RSB-LINK
X-CSRF-Token
X-Custom-Header
X-HEAD
X-RunCloud-Cache
X-SSL
X-TLS-Version
X-From-Varnish-Deploy
X-From-Varnish
X-GZip
X-Cache-HT
Language
X-SCM-Server-Number
GranicusServer
X-Stiffia-Cache
Lookup-Cache-Hit
X-NewsFlow-Sitename
X-Compressed-By
X-S-Misc
X-Geo-IP
X-MainProfileURL
X-Origin-Date
X-MainProfileName
X-MainProfileID
X-Enhanced-By
Page-Template
StatusCode
X-Generation-Time
X-D-Time
X-VG-WebCache
Backend-Powered-By
X-GEO
X-MSU-SOURCE
X-Newrelic-Synthetics
End-User-Country
X-Clx-Request
X-Origin-Upstream-Status
Progma
X-Skip-Cache
X-Trans-Id
Requested-Host
X-Server-Generated
X-MainProfileCategory
X-Front-Cache
X-Content-Type
X-SID
X-Tradeindia-Request-GUID
FastCGI-Cache
X-BeResp-Ttl
X-Amzn-Remapped-Content-Length
X-Cache-Me-Harder
X-Powered-By-ADS
X-Dck
X-ProBase-Server
RSL-Trace-ID
X-Who
X-Proxy-Server
X-Avvio-Cms-Cacheload
SB-Cache-Remaining
X-HP-CAM-COLOR
X-Len
SB-Cache-Life
SB-Site-Device
SB-Site-IE-VERSION
X-Tradeindia-SMgmt
Nitro-Cache
X-Ms-Version
X-AMAZEEIO
Prototype-RootPath
X-CloudBurst-Frontend
DbServerName
Nd
X-Route
MachineName
X-VTEX-Cache-Status-Janus-Edge
MwpReleaseVersion
X-Distil-CS
UrlWatchModule-Time
Expiries
Debug-Status
ServerIP
Session-From
Webserver
X-AppServer-Cache-Rule
X-Sid
X-Lb
X-UPSTREAM-Address
HSTS
X-Varnish-Grace
Cf-Ipcountry
X-Machine
X-Netrix-ID
VAR-Cache
X-Sorting-Hat-Expire-Cache
X-Dynamic
X-Geo
X-Brought-To-You-By
X-Backend-Host
RM-Cache-Control
X-Server-Hostname
X-Nginx-Page-Cache
CDN-PullZone
CDN-CachedAt
CDN-RequestId
CDN-Uid
Ctx
CommercePlatform-Version
X-Fpc
X-Varnish-Cached-TTL
X-Sn-Servicetimems
X-Ruby-Cluster-ID
X-MCF-ID
X-UPServer
X-Varnish-Cached
OracleCommerceCloud-Sandiego
OracleCommerceCloud-Version
X-AISO-Server
X-AISO-Cacheable
Description
DB-Nickname
X-Hit
Content-Sn
X-AISO-Cache
Keywords
X-B3-Spanid
X-B3-Traceid
Request-Time
Og
ModuleCacheType
X-Catalyst
ViewMode
Actioncode
X-Vary-Options
LB
Realaction
X-Grid-Server
X-AppVersion
X-SiteDistrict-Cache
X-Server-Response-Time
X-From-Cache
X-Firefox-Spdy
X-Gateway-Rate-Limit-Delayed
X-Global-Transaction-ID
X-Pagely-Cache
X-InDy-Memory
X-InDy-Query
X-Wodby-Node
X-Varnish-Cache-Control
Content-Generator
Ews
Hosted-By
Tesla.Performance
X-SV
X-Server-Ip
X-M-Log
X-InDy-Time
X-M-Reqid
X-Qnm-Cache
X-Served-Server
X-UT-Cache
X-V-Cache
X-OPNET-Transaction-Trace
X-Q-S
X-Mw-Workerstats
X-M-V
X-M-P
X-M-T
X-S-C
X-S-V
X-Csrf-Token
VSID
ProxiaInstanceId
NS-VaryByCustom-Key
X-Transaction-Name
X-I-V
X-Header
X-Appmachine-Name
X-Appmachine-Duration
X-Backside-Transport
X-CloudBurst-Backend
X-CloudBurst-WordPress
X-CloudBurst-Cache
X-Appmachine-CreatedOn
Sl-Pgid
X-Cachable
X-CPU-Time
Key
Prot
REFRESH
ID