Threat Level: green Handler on Duty: Manuel Humberto Santander Pelaez

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
X-Cache
Age
Content-Language
X-AspNet-Version
P3P
X-Pingback
Expect-CT
X-UA-Compatible
Via
Upgrade
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Request-Id
X-Adblock-Key
Referrer-Policy
X-Varnish
X-Check
X-Generator
X-Language
X-Template
X-Buckets
P3p
X-Drupal-Cache
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-Xss-Protection
X-Permitted-Cross-Domain-Policies
Alt-Svc
X-Download-Options
X-AspNetMvc-Version
X-Cache-Hits
X-Hacker
X-Ac
Host-Header
X-Sorting-Hat-Section
X-Dc
X-Alternate-Cache-Key
X-Wix-Server-Artifact-Id
X-ShopId
X-Accel-Buffering
X-Sorting-Hat-PodId
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PrivacyLevel
X-ShardId
X-Powered-By-Plesk
X-Runtime
X-Served-By
X-Via
MS-Author-Via
X-Amz-Cf-Id
Content-Location
X-Powered-CMS
X-Contextid
Access-Control-Allow-Headers
X-UA-Device
X-ServedBy
X-IPLB-Instance
X-PC-Hit
X-PC-Key
Access-Control-Allow-Methods
X-PC-Date
X-PC-Host
X-PC-AppVer
Cartoon
Status
X-Timer
Access-Control-Allow-Credentials
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
CF-Cache-Status
X-Rid
X-Iinfo
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-NewRelic-App-Data
X-Seen-By
X-Wix-Request-Id
X-Backend
X-Tumblr-Pixel-1
X-WPE-Loopback-Upstream-Addr
Powered-By
Content-Encoding
X-Mod-Pagespeed
X-Cache-Status
X-Host
X-Tumblr-Pixel-2
X-CST
X-Endurance-Cache-Level
X-Server
X-Cache-Enabled
X-Cache-Hit
X-Port
X-Logged-In
Keep-Alive
X-CDN
X-Server-Powered-By
X-DIS-Request-ID
X-Nginx-Cache-Status
X-Drupal-Dynamic-Cache
X-Tumblr-Pixel-3
X-Robots-Tag
X-Accel-Version
Server-Timing
X-Turbo-Charged-By
X-Proxy-Cache
X-Page-Speed
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Content-Digest
X-Content-Powered-By
X-LiteSpeed-Cache
X-GitHub-Request-Id
Content-Security-Policy-Report-Only
X-Rack-Cache
X-ASPNET-VERSION
X-Pad
X-AH-Environment
Edge-Control
X-Varnish-Cache
X-FW-Hash
X-FW-Server
X-FW-Serve
X-FW-Type
X-FW-Static
Request-Context
X-Request-Country
X-XRDS-Location
SPRequestGuid
WP-Super-Cache
X-SharePointHealthScore
X-MS-InvokeApp
X-Tumblr-Pixel-4
X-Trace
X-Hits
MicrosoftSharePointTeamServices
X-Webcom-Cache-Status
X-Node
Timing-Allow-Origin
Cf-Railgun
Edge-Cache-Tag
X-BC-Stapler
X-HS-Cache-Config
X-HS-Content-Id
X-Ua-Compatible
Access-Control-Expose-Headers
X-Cache-Lookup
X-Amz-Request-Id
X-Newrelic-App-Data
X-Died
X-Amz-Id-2
X-Content-Security-Policy
Charset
X-Request-ID
X-CF-Powered-By
X-Webserver
X-FullPageCaching
X-HS-Combine-CSS
X-Cnection
X-PhApp
Request-Id
X-PHP-Backend
Access-Control-Max-Age
X-INKT-URI
X-INKT-SITE
X-Fastly-Request-ID
SPIisLatency
SPRequestDuration
EagleId
X-Backend-Server
X-Swift-SaveTime
X-Swift-CacheTime
Composed-By
MicrosoftOfficeWebServer
X-CDN-Pop
X-CDN-Pop-IP
Grace
X-SS-Location
X-SS-Conf
Served-By
X-Safe-Firewall
X-Device
X-Spip-Cache
Liferay-Portal
Rating
X-Hyper-Cache
X-Dw-Request-Base-Id
X-Server-Name
Front-End-Https
X-Tumblr-Pixel-5
X-NF-Request-ID
X-DDC-Arch-Trace
X-Edge-Cache
X-Edge-Cache-Key
X-Microcache
X-VCache
X-Cloud-Trace-Context
X-Tumblr-Content-Rating
X-RateLimit-Remaining
X-LiteSpeed-Cache-Control
X-RateLimit-Limit
X-Do-Not-Hack
Permitted-Cross-Domain-Policies
X-HeyJason
X-RateLimit-Reset
X-Jimdo-Wid
X-Jimdo-Instance
X-FB-Debug
X-Cluster-Node
Surrogate-Control
X-Acc-Exp
X-Wix-Punisher
X-Loop
X-Clacks-Overhead
X-TNCMS
X-DNS-Prefetch-Control
X-Middleton-Display
Content-Style-Type
X-Vtex-Processado-Em
Display
X-Sol
P-WS
P-LB
Response
X-Middleton-Response
Public-Key-Pins
Content-Script-Type
Refresh
X-Firenze-Processing-Times
X-OneAgent-JS-Injection
X-SERVER
X-Debug-Info
X-StackifyID
X-Age
X-Kinsta-Cache
X-Magento-Tags
Fpc-Cache-Id
X-User-Agent
X-Cached
X-Goog-Hash
X-Px
X-WebKit-CSP
Xkey
X-Amz-Version-Id
X-XN-XNHTML
X-XN-Trace-Token
X-Cache-Config
X-Original-Date
X-Shopid
X-Sorting-Hat-Shopid
X-Sorting-Hat-Shopid-Cached
X-Shardid
X-Sorting-Hat-Featureset
X-Sorting-Hat-Podid-Cached
X-Sorting-Hat-Podid
X-Sorting-Hat-Privacylevel
X-Ruxit-JS-Agent
X-Generated-By
X-N-OperationId
PageSpeed
Retry-After
X-Hostname
X-Zen-Fury
X-URL
X-Tumblr-Pixel-6
X-DynaTrace-JS-Agent
X-Topify-Platform
X-Frame-Option
X-Handled-By
Rt-Fastcgi-Cache
X-LW-Cache
X-Loopia-Node
X-MiniProfiler-Ids
X-B-Cache
X-Goog-Generation
X-Goog-Metageneration
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Edge-Location
X-CMS-Version
Edge-Control-Message
Access-Control-Request-Method
X-Outils-CS
X-Url
Feature-Policy
X-Upstream
X-Platform-Cluster
X-Platform-Processor
X-Request-Time
X-Platform-Router
Powered
X-Varnish-TTL
X-Servedby
TCN
Fastcgi-Cache
X-Whom
X-Cached-By
X-AspNetWebPages-Version
X-Source
X-Content-Options
X-From
X-Engine
Public-Key-Pins-Report-Only
X-FORWARDED-FOR
Fhost
ServedBy
No
X-Powered-By-VTEX-Janus-ApiCache
X-Vtex-Processed-At
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Remote-Cache
X-CacheServer
X-VTEX-Janus-Router-Backend-App
X-DynaTrace
X-Cdn
X-Accel-Expires
X-Version
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Allow
X-RESOURCE
X-Recruiting
X-EdgeConnect-Origin-MEX-Latency
X-Magento-Cache-Debug
X-Response-Time
X-Varnish-Cache-Hits
X-Application-Context
X-LBLID
X-Varnish-Host
Product
X-Signature
X-Developer
X-URLSCHEME
X-Correlation-Id
Last-Published
X-EdgeConnect-MidMile-RTT
X-Umbraco-Version
Warning
DynaTrace
X-Location-Id
Imagetoolbar
X-Actual-URL
X-F-Cache
X-Passed-To
X-Passed-To-DLL
X-Varnish-Beresp-Grace
X-Powered-By-360WZB
X-Original-Request
X-Returned-From-DLL
X-Varnish-Beresp-Ttl
X-ET-API-ROOT
X-ET-API-VERSION
X-Forwarded-For
X-Varnish-Beresp-Status
X-Returned-From
X-ET-API-ORIGIN
X-Platform-Cache
X-NWS-LOG-UUID
X-Defender
X-Shop-Id
Host
X-Microcachable
Generator
X-PERF
X-ApacheServer
X-Stale
Arr-Disable-Session-Affinity
X-Device-Type
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
Alternate-Protocol
X-Returned-From-PostProcessResponse
X-Cache-Key
X-Cache-Namespace
X-UD-Method
Pagespeed
X-Cache-Rule
X-Via-JSL
X-Micro-Cache
X-Cache-Info
Origin
X-Fastcgi-Cache
X-S
X-Guploader-Uploadid
WZWS-RAY
X-Msg-2-Log
X-Varnish-HitMiss
X-Varnish-Count
X-SO
X-Rnd
X-Hosted-By
X-I-Sp
X-BS
X-Platform
X-Ezoic-Cdn
Content-Hash
X-Platform-Server
X-Environment
Version
X-Gateway-Cache-Status
X-Gateway-Cache-Key
X-Gateway-Skip-Cache
X-HS-Content-Campaign-Id
X-Supported-By
X-Instart-Request-ID
Cache-Provider
X-Cache-Age
X-HOST
X-Duration
X-App-Status
X-Lambda-Id
X-Cache-Tags
Surrogate-Key
X-TransIP-Balancer
X-Microcache-Status
X-LB-Node
RTSS
X-Translation
X-Dispatcher
X-Correlation-ID
X-Sapient
X-TransIP-Backend
X-Director
Cache-Key
USPLoggingUUID
X-Expires-Orig
X-Akam-SW-Version
X-Front
X-Dns-Prefetch-Control
X-Cache-Control-Orig
X-Powered-By-VelaWeb
X-Track
X-Magento-Cache-Control
X-Page-Cache
X-Revision
X-Server-ID
X-Server-Upstream
X-SSL-Cipher
MIME-Version
X-Abgroup
Content-Disposition
X-CSRF-Protection
X-GUploader-UploadID
Pool
X-Hypernode
X-ORACLE-DMS-ECID
X-SSL-Protocol
X-Daa-Tunnel
X-Vcap-Request-Id
Dmn
X-Last-Modified
X-Varnish-Seen-By
X-Varnish-RemainingTTL
X-Varnish-ObjectSource
X-Varnish-GracePeriod
X-Varnish-RemainingLife
X-App-Hosting
X-Edge-IP
Wsr-Cache
X-Powered-By-VTEX-Janus-Edge
X-Ttl
X-Cache-Debug
X-Cache-TTL
X-Rocket-Nginx-Serving-Static
X-DealerOn
X-I
X-Dealeron-Original-Url
X-Dealeron-Backend
X-Debug
X-Storage
Akamai-IP
X-NoCache
X-Rocket-Nginx-Bypass
X-Cf-Powered-By
Accept-Encoding
X-NetCat-Version
S-Cnection
X-Dispatch
X-Litespeed-Cache
X-ARC
X-Magnolia-Registration
X-Drupal-Cache-Tags
X-Cache-Lifetime
If-Modified-Since
SSPAppContext
X-Art-Request-Id
X-Cache-Handler
X-Cache-Engine
X-Forwarded-Proto
X-IsCacheURL
X-ATG-Version
Node
X-Matrix-Server
X-Cache-Type
X-Matrix-Proxy
X-VARITI-CCR
X-LB
X-ServerName
X-Geo-Country
X-Route-Server
X-Url-Base
Powered-By-ChinaCache
X-Varnish-Cacheable
X-Cache-Only-Varnish
FAI-W-FLOW
X-Gamma-Serve
X-Hiawatha-Cache
Contao-Page-Layout
SN
X-SDS
X-Cache-Level
Cneonction
Backend
X-Country-Code
X-Pressidium-NinukisWP-Ver
X-Discourse-Route
X-Client-IP
X-Cache-Expires
X-N
ServerName
X-Vhost
X-Grace
Update-Time
Src-Update
X-Amz-Meta-S3cmd-Attrs
X-Content-Encoded-By
X-Firenze-Processing-Time
X-Cache-Server
X-Cache-Operation
X-Drupal-Cache-Contexts
ServerID
X-SSLProxy
X-SSLUpstream
X-SV-CreatedAt
X-SV-Duration
X-SV-Edge
X-SV-CacheTags
Author
Page-Completion-Status
X-SRCache-Key
X-SV-Expires
X-SV-Cacheable
X-SV-Nginx-Duration
AMF-Ver
X-Svr-Proxy
X-SVR-IIS
Lsrequestid
Proxy-Connection
X-Generated
X-LB-Server
X-SV-FromDBCache
X-SV-Pid
X-Flow-Powered
Section-Io-Id
X-Cache-Device-Type
X-ServerID
Content-Encoding-Handler
X-Varnish-Backend
X-Service-Id
PICS-Label
Req-Id
X-Varnish-Url
X-Pantheon-Phpreq
Surrogate-Key-Raw
X-Pantheon-Site
X-Pantheon-Environment
X-GeoIP-Country-Code
X-SRV
X-Processing-Time
X-Varnish-IP
X-Frontend
X-UPSTREAM
Srv
X-FTR-Request-ID
SiteSpeed
X-Server-Id
X-ORACLE-DMS-RID
X-CJ-Soft
X-PwB-Node
X-Nbs
X-Unbounce-Variant
X-Unbounce-VisitorID
X-Unbounce-PageId
X-TTFB-L
X-Sucuri-ID
Smug-CDN
X-Id
X-TTFB
X-SmugMug-Hiring
X-SmugMug-Values
X-Server-Instance
X-TransIP-Reserved
X-ACMCache
IM-Version
Nodo
X-Varnish-Ttl
X-Env
X-RequestId
X-Real-Server
X-Varnish-Age
X-HW
X-Runtime-Rack
X-Time
Qs-Cache
X-FW
X-Trace-Id
Tracecode
Pv
X-Config-Blacklist-Version
X-CacheFROM
Cache
X-Browser
Https
X-Dynamic-Cache
X-Middleware-Start
Location
Edit
Server-Name
X-Always-Cache
MC
X-Content-Age
X-Cache-Fix
NnCoection
X-Cache-PageType
X-Esi
X-Nginx-Cache
IBM-Web2-Location
X-Varnish-Hits
Content_type
X-Sucuri-Cache
X-Varnish-Retries
Use-Proxy
X-Origin
X-PF-Uncompressing
X-High-Performance
X-Symfony-Cache
X-Drectory-Script
X-Akamai-Device-Model
X-Akamai-Device-Characteristics
X-CF-Passed-Proto
X-Speed-Cache-Key
X-Transaction
X-Twitter-Response-Tags
X-Speed-Cache
X-Connection-Hash
Fw-Via
Ohc-File-Size
SEOMOZ
X-Cookie-Domain
NetMindSessionID
X-Purge-URL
MJ12bot
From-Origin
X-GeoIP-Country-Name
Custom-Header
X-CacheDebug
S
X-Content-Type-Option
X-Orig-Vary
Local-Info
Nginx-Cache
X-WR-Flags
Proxy-Agent
X-ARRServer
X-Locale
X-Sys-Req-ID
W
Xc-Version
X-VC-Enabled
X-Srv
X-Webstats-RespID
CacheControlHeader
X-Analytics
Backend-Timing
X-LP
X-Purge-Host
X-Varnish-ID
Strikingly-Cached-Version
X-Cache-Control
X-TTL
X-Unique-ID
X-CDN-Forward
X-GoCache-CacheStatus
X-Runtime-Memory
X-Wikidot-Static-Cache
X-Empowered-By
Strikingly-Cache-Region
X-BKSrc
Strikingly-Cached
Dtk-Cache-Check-0
X-Wikidot-Backend
X-Rq
X-Worker
Cm-Server
Web-App-Origin-Name
Service-Worker-Allowed
X-SE-Debug
Adm-Server
WWW-Authenticate
Cache-Tags
X-AF-Userserver
X-Fedora-School-Id
X-LW-Web-Server
X-Stage
Content-Transfer-Encoding
X-BackendServer
X-JG-Page-Cache
Accept-Charset
X-Litespeed-Cache-Control
X-Proxy
X-Adobe-Content
X-Shield-Request-Id
X-Varnish-Server
X-Adobe-Loc
X-CB-Server
X-Framework
X-ID
Content-MD5
X-Nitro-Cache
Swift-Performance
X-Cache-CFC
X-Culture
X-VNode
Max-Age
X-Xrds-Location
X-Amz-Rid
X-Resty-Request-Id
X-Location
X-Webkit-CSP
SVR
X-Role
Cached
X-RealServer
X-RiS-UFDI
X-Disney-Akamai-Rule
X-AEM
X-WP
Front
X-FastCGI-Cache
Server-Info
X-SERVER-NAME
X-Beget-Proxy
FindLaw
X-App-Server
Frame-Options
X-Now-Id
X-Balanceador
X-Pool
HCVer
X-Amz-Storage-Class
X-Application
X-TB-M
HAVer
RequestId
X-Generated-Time
X-Cache-Miss-From
X-App
Access-Control-Allow-Method
X-Origin-Id
X-SH-Cache-Status
X-Amzn-RequestId
X-Smartcache-Timeout
X-Smartcache-Keys
X-Webcelerate
X-Amz-Apigw-Id
X-Sedo-Request-Id
X-Amzn-Trace-Id
X-Content-Security-Policy-Report-Only
X-Processed-By
X-Vip
Dispatcher
X-Dynatrace-Js-Agent
X-OpenCart-Lightning
X-Backend-Status
Copyright
X-NginX-Server
X-Storage-Cache-Expires
X-CAPServer
Pf.Web.Request.Id
X-Session-ID
X-HostName
Device
Hummingbird-Cache
X-FIRSTBase
X-Detected-Device
X-NginX-Cache
Lb
X-Storage-Cache
X-Storage-Cache-Date
X-Runtime-Affili
X-App-Runtime
XDomainRequestAllowed
X-A
X-Domain-Checked
X-GeoIP
X-WPL-DATA
X-Provisioner-Version
Upgrade-Insecure-Requests
F5-Trid-Value
Noq
X-HydroSheep
Ram
A-Powered-By
X-ClientSide-Caching
Ramp
F5-Trid-Name
X-Lw-Cache
RN-Server
X-Rack-Cors
X-Info
Access-Control-Request-Headers
X-Akamai-Edgescape
X-FireWall-Port
X-Jphone-Copyright
X-Key
AETN-Country-Name
AETN-Country-Code
AETN-Continent-Code
X-Amz-Id-1
AETN-City
AETN-DEVICE
AETN-Longitude
AKA-DEVICE
Cteonnt-Length
X-CRA-DC
AETN-State-Code
AETN-Postal-Code
AETN-Latitude
Filters
AETN-Area-Code
AETN-EU
X-HA-Frontend
X-Goog-Meta-Policy
X-Goog-Meta-Replace
X-ESI
Eomportal-Instance
X-Plat
ScoreTracker
NODE
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Now-Cache
Pics-Label
X-SP-Farm
X-SayCDN-TTL
X-VCS-Cacheable
X-Say-TTL
X-Say-Cacheable
X-VCS-Ttl
X-SP-UniqueName
X-HA-Backend
X-Confluence-Request-Time
X-DynamicCache
X-Oferteo-Domain
Environment
Traffic-Origin
Ufe-Result
AsisCache
Id
Ibf5scheme
BackendServer
N365rili
NtCoent-Length
X-Response
X-CACHE-TTL
X-Cache-On
EN-User
X-Captured
X-Agent
X-Garden-Version
Arrnode
X-Varnish-Action
EagleEye-TraceId
BALANCEDTO
X-VC-TTL
Access-Control-Allow-Header
X-SAPP
AMP-Redirect-To
Num
X-Desc
X-Forwarded-Host
X-MAT-GEO
Paypal-Debug-Id
X-GSL-Server
X-Varnish-Hostname
SHInfo
X-Cache-Detail
X-MidCOM-Meta-Cache
VServer
X-HashTwo
Pragrma
X-Data-Request
X-Server-IP
X-Yadis-Location
X-Timestamp
From
X-Span
X-Proxy-Skip
X-WN-ClientGroup
X-Compress-Hint
X-IIJ-Cache
X-SDE-Name
Url
X-AVG-Country-Code
X-Avg-Cookie-Expires
X-Redman-Backend
X-Redman-Final-Url
Disablevcache
X-Cache-2
X-Hosting-Env
X-Reflector
X-Dev
SRV
X-Akamai-Transformed
X-Cms-Mode
Worker
Referer
X-Dw-Trace-Id
CLMOB
WN
X-HS-Status
X-Reflector-Cache
X-ENV
X-Amz-Meta-Content-Md5
X-Clara-ASAP
X-Map-Context
X-MCB-Server
MS-CV
X-FastCGI-Cache-Status
X-Req-Head-Response
X-ASAP-Cache
X-Amz-Meta-Cb-Modifiedtime
X-JSESSIONID
X-V
X-Test
X-Box
X-ProcessESI
X-Rebelmouse-Cache-Control
Web
Edgecast
COMMERCE-SERVER-SOFTWARE
X-DataDome
X-4ormat-Cacheable
X-RemovedCookies
X-Svr
XX
X-Pagename
X-Hit-Cache
X-Bip
X-Refresh
Thanks
Prama
X-Debug-Token
X-E
X-Middleton-PageSpeed
AR-PoweredBy
AR-CACHE
AR-SID
X-Hosting
X-AOL-HN
X-Fstrz
X-Ghost-Cache-Status
AR-ATIME
X-Rule
X-Page
X-Depends
X-Distributor
X-Cache-Varnish
X-Resolver-IP
X-Remote-Addr
X-Real-IP
X-Amcomm-Site
MageStack-Area
X-Cache-Ttl
Home
X-Source-ID
WP-FROM-CACHE
X-Atraveo-ETag
X-Atraveo-Cache-Control
X-Appmachine-Environment
X-Hrouter
ServerSignature
ServerTokens
X-Varnish-Debug-Age
Proxy-Cache
Il-Cl
X-Hstore
Request-EU
X-Atraveo-Expires
Request-Country
X-Force
X-PRAM
X-ServerIndex
Firespring-Website-Id
X-Path-Route
X-Atraveo-Zone
X-Atraveo-Varnish-Server-Id
CS-SERVER
X-Atraveo-From-Varnish-Cache
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-Aramark-SID
X-Server-Addr
MageStack-Debug
MageStack-Config
MageStack-Loadbalancer
X-Varnish-Cache-Local
X-Rack-CORS
MageStack-Magento-Version
Play-Detected-Device
MageStack-Cacheable
MageStack-Cache
Cleartype
MageStack-Cache-Hits
MageStack-Cache-Lifetime
Play-Detected-UserAgent
MageStack-Cache-Status
MageStack-PageSpeed
Fastly-Debug-Digest
X-Upgrade-Enabled
X-DSMX-Render-MS
X-B2f-Not-Route
X-Varnish-Debug-TTL
X-DSMX-Rewrite-MS
MageStack-Tag
X-Frames-Options
MageStack-Web-Node
IES-Server
X-Proto
Load-Balancer
X-Request-Uri
X-Middleton-Pagespeed
Cache-Status
Beyond-Iis
X-Nginx-Host
X-Generated-Timestamp
X-Consent-Required
Pramga
Magicmarker
NZSpeedy
MageStack-Cache-Warning
X-SilverStripe-Cache
X-Cache-Doesi
Fastly-Backend-Name
X-LBPoolMember
X-HeBS-Cache-Status
X-Cocoon-Version
X-Ratelimit-Remaining
X-CACHE-KEY
X-Ratelimit-Limit
CommunityServer
X-Proxy-Backend
X-Varnish-URL
X-RAMCache
Accept-Language
Server-Id
WP-AdvCache-MemCached
X-Cdn-Forward
X-Origin-Cache
X-Cache-Dispatcherpragma
X-Cache-Dispatchercachecontrol
X-Autoru-Host
X-Cache-TTL-Current
X-Cache-TTL-Age
X-AutoRu-App-Id
X-UA
X-Unique-Id
X-HA
X-Reqid
X-PHP-Response-Code
AC-ELC
X-Distributed-By
X-MrHost
X-DDM-SERVER
X-DDM-SERVER-UPDATED
X-Cache-Time
Amfplus-Ver
Content
X-Secret
X-Build-Id
X-Status
X-Via-NSCOPI
Machine
X-CH-Device
X-Ser
Identity
ID
MageStack-Cache-Lifetime-Sent
X-Cache-Warmer
Apachenode
X-Proxy-Id
MageStack-Last-Modified
X-Accel-Cache-Control
X-Gannett-Site-Version
SBSS
Resin-Trace
X-WR-Trace
X-Block-RuleID
TC-S-Cache-M
X-ServiceProvider
X-SmartBan-Host
Viewport
X-M
X-HAProxy
X-Highwire-RequestId
X-Highwire-SessionId
X-Activity-Id
X-SmartBan-URL
TC-S-Cache
X-CacheLoc
Request-Filtered-By
Server-Ip
X-Tag-Playlist
AMP-Access-Control-Allow-Source-Origin
X-XHR-Current-Location
X-Streams-Distribution
TC-Cache-U
TC-Cache-IC
TC-Cache
X-ETag
X-EC2-Instance-Id
Description
X-Az
DrivedBy
Keywords
Xc
X-Debug-Message
IISExport
X-Session-Reinit
X-SuperCache
X-UA-Bot
X-ASAP-Age
X-Scheme
X-Batcache
X-Batcache-Reason
X-Built-With
Og
X-Node-App
X-Origin-Server
X-Block-Rule
X-Amz-Meta-Version-Id
X-B3-Sampled
X-OPNET-Transaction-Trace
X-Log
Cmsid
Session-Id
Access-Control
SINA-LB
Cmstype
*
X-Instart-Cache-Id
X-Via-S
CDN-Cache
SINA-TS
X-Cache-FS-Status
X-MyName
X-Yottaa-Metrics
X-Nginx-Request-Time
X-PBS-Appsvrip
X-Yottaa-Optimizations
X-Instance-Id
X-CacheID
Aurora-Node
X-Enabled1
DNNOutputCache
Myheader
X-Flex-Tags
X-Flex-Tag
X-Flex-Lastmod
X-Flex-Lang
X-HTML-Minification-Powered-By
X-Proxy-Cache-Control
X-SSLTerm-Server
X-ZORequestID
Yola-ID
X-Flex-Evstart
X-Soro
X-Custom-Name
Dis-Env
Provided-Host
Report-To
Backend-Name
Backend-IP-Port
X-Flex-Evend
X-Flex-Community
X-DevSrv-CMS
X-PBS-Appsvrname
X-PBS-Fwsrvname
Tempo
X-Domino-CacheValidationWithETagReason
X-Domino-CacheValidationWithETagResult
X-7d-Instance-Id
Server-ID
X-Adnet
Hamster
HitInfo
HitType
X-7d-Trace-Id
X-Actindo-Thread-Id
SERVER-ID
VANITY-HOST
X-Title
X-Czt
X-Actindo-Request-Id
X-Cache-Extended
X-Layout
X-Actindo-Rs
X-Cache-Action
FRONT-END-SECUREBROWSER
D
X-PBY
PB-RID
Powered-By-115
TP-Cache
PB-PID
X-WebNode
X-Enabled2
X-Upstream-Addr
X-Enabled3
TP-L2-Cache
X-FPC
X-Cacheable-TTL
Yoncu-Errno
Accept-CH
X-Mobile-Rewrite
X-Olaf
X-Mobilized-By
X-Abuse
X-Container
X-KoobooCMS-Version
X-Qiniu-Zone
X-Dscp-Value
X-Now-Trace
X-Now-Instance
X-FORWARDED-PROTO
X-FromPodPressCache
VC-NoCache
X-ORIKEY
X-WEBMGR-CACHE
X-Varnish-Debug-Hits
X-ROUTING
X-Bcwwwid
X-ENDPOINT
ServerNode
PBS
Now
SS
X-IP
NLCacheNote
X-Resource
X-APIAUTH-VAL
Bios
X-Pj-Cache-Status
X-APIVERSION
X-Shard
X-DB-Content-Length
X-Appversion
PServer
X-Appid
X-CloudBurst-WordPress
X-Q-S
NGX
X-CloudBurst-Backend
Hosted-By
X-Wodby-Node
X-CloudBurst-Frontend
Plateforme
X-CloudBurst-Cache
Ews
Content-Generator
Ttl
X-From-Varnish
X-M-P
X-From-Varnish-Deploy
X-HEAD
X-RunCloud-Cache
X-M-T
X-Custom-Header
X-Beatles
X-Varnish-Cache-Control
X-Boot
X-Cache-ID
X-CSRF-Token
RSB-LINK
X-Served-Server
X-Server-Response-Time
X-SiteDistrict-Cache
X-Pagely-Cache
X-NWS-UUID-VERIFY
X-Global-Transaction-ID
X-Vary-Options
X-InDy-Memory
X-Mw-Workerstats
Realaction
Actioncode
X-Grid-Server
X-Gateway-Rate-Limit-Delayed
X-From-Cache
X-M-V
X-Qnm-Cache
LB
X-Server-Ip
X-M-Reqid
X-M-Log
X-SSL
X-InDy-Query
X-Firefox-Spdy
X-InDy-Time
X-SV
X-Cachable
X-Clx-Request
Requested-Host
X-Trans-Id
X-GEO
X-MSU-SOURCE
X-SID
X-Newrelic-Synthetics
X-Skip-Cache
X-Origin-Upstream-Status
X-Ms-Request-Id
X-MainProfileURL
X-MainProfileName
X-NewsFlow-Sitename
Lookup-Cache-Hit
X-Geo-IP
X-Compressed-By
X-VG-WebCache
Backend-Powered-By
X-Origin-Date
X-Envoy-Upstream-Service-Time
Tesla.Performance
StatusCode
Page-Template
X-Server-Generated
X-Enhanced-By
X-Powered-By-Home.Pl
X-AppVersion
Progma
End-User-Country
X-Gyrobase-Publication
X-D-Time
X-S-Misc
X-Generation-Time
X-MainProfileID
X-MainProfileCategory
X-Served
X-SCProxy
X-Processed
X-This-Proto
X-Web-Node
X-Cache-Me-Harder
Prototype-RootPath
X-Deity
X-Cname-TryFiles
X-Header
X-I-V
X-CPU-Time
X-Backside-Transport
X-Cache-LB
GranicusServer
X-ProBase-Server
Key
X-DN-Cache-Control
X-Tradeindia-SMgmt
X-Tradeindia-Request-GUID
Nitro-Cache
X-Avvio-Cms-Cacheload
X-Len
X-HP-CAM-COLOR
X-Stiffia-Cache
X-UT-Cache
X-Amzn-Remapped-Content-Length
RSL-Trace-ID
X-BeResp-Ttl
X-Content-Type
X-V-Cache
X-Front-Cache
X-TLS-Version
X-VC-Debug
MwpReleaseVersion
MachineName
X-ReqId
X-Serv
X-Sid
X-VTEX-Cache-Status-Janus-Edge
DbServerName
X-Route
X-AppServer-Cache-Rule
Session-From
Webserver
UrlWatchModule-Time
Nd
X-Distil-CS
Provider
X-Cache-Via
X-WA-Info
X-Lb
X-Zendesk-Origin-Server
X-Zendesk-User-Id
X-Geo
CDCHOST
X-UnsetCookies
X-RequesterIP
X-Highwire-Sitecode
X-Directory-Script
X-Highwire-Smart-Code
X-Nginx-Request-Processing-Time
X-Proxy-Cache-Key
ServerIP
X-Server-Hostname
X-Varnish-Cached
X-Varnish-Cached-TTL
X-UPServer
X-Sn-Servicetimems
X-MCF-ID
X-Ruby-Cluster-ID
CDN-CachedAt
CDN-PullZone
Ctx
CommercePlatform-Version
CDN-RequestId
Generate-Time
OracleCommerceCloud-Version
OracleCommerceCloud-Sandiego
X-AISO-Cache
X-AISO-Cacheable
ModuleCacheType
Request-Time
Debug-Status
DB-Nickname
Expiries
Content-Sn
X-Protected-By
X-B3-Spanid
X-Fpc
X-AISO-Server
X-Hit
X-Nginx-Page-Cache
X-B3-Traceid
X-Dynamic
X-Brought-To-You-By
X-Nginx
X-Max-Age
X-NodeID
X-Pass-Through
X-PressLabs-Stats
X-PM-ID
X-Gate-Blk
X-Gate
X-Blog
X-ACCELERATE
X-CD
X-Cjtype
X-Device-Item
X-Csrf-Token
X-Transaction-Name
X-Search-Id
Prot
X-S-C
REFRESH
Sl-Pgid
X-Appmachine-Duration
X-Appmachine-CreatedOn
X-WebKit-CSP-Report-Only
X-We-Are-Hiring
X-Time-Microsecs
X-Src-Webcache
CDN-Uid
X-S-V
X-W3TC-Minify
Www.Aujourdhui.Com
VSID
X-ManagedFusion-Rewriter-Version
VAR-Cache
X-Node-Id
HSTS
X-Render-Time
X-UPSTREAM-Address
X-EPiphany-Vid
X-Client-Vid
RM-Cache-Control
X-Backend-Host
X-Built-By
X-Sorting-Hat-Expire-Cache
X-Client-Image-Vid
X-Rewritten-By
X-Test-Debug
NS-VaryByCustom-Key
ProxiaInstanceId
ORIGIN-SERVER
ORIGIN-SITE
ViewMode
V-TTL
Cf-Ipcountry
X-Catalyst
X-XHTML-Minification-Powered-By
X-Varnish-Grace
X-Netrix-ID
X-Machine
Arrow-RequestId
X-Appmachine-Name