Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
X-AspNet-Version
P3P
X-Pingback
Age
Content-Language
X-UA-Compatible
Via
Expect-CT
Access-Control-Allow-Origin
Upgrade
X-Adblock-Key
P3p
X-Varnish
X-Cacheable
Content-Security-Policy
X-Check
X-Template
X-Language
X-Generator
X-Request-Id
X-Drupal-Cache
X-Buckets
X-Xss-Protection
X-AspNetMvc-Version
X-Type
X-Cache-Group
X-Pass-Why
X-Hacker
X-Ac
Alt-Svc
X-Powered-By-Plesk
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
Content-Location
X-Download-Options
X-Runtime
Host-Header
X-FRAME-OPTIONS
X-ShopId
X-Sorting-Hat-PodId
X-ShardId
X-Dc
X-Sorting-Hat-Section
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-ShopId
X-Alternate-Cache-Key
MS-Author-Via
X-IPLB-Instance
X-Powered-CMS
X-UA-Device
Cartoon
X-Served-By
Status
Access-Control-Allow-Headers
Access-Control-Allow-Credentials
Access-Control-Allow-Methods
X-Amz-Cf-Id
X-Via
X-Cache-Status
X-Iinfo
X-Backend
X-ServedBy
X-Timer
X-Contextid
Powered-By
CF-Cache-Status
X-CST
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-PC-Key
X-PC-Hit
Content-Encoding
X-Mod-Pagespeed
X-PC-AppVer
X-PC-Host
X-PC-Date
X-DIS-Request-ID
X-Rid
X-Logged-In
Keep-Alive
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-CDN
X-Cache-Hit
WPE-Backend
X-Port
X-Host
X-Tumblr-Pixel-1
X-Request-ID
Referrer-Policy
X-Server
X-Tumblr-Pixel-2
X-Cache-Enabled
X-Server-Powered-By
X-Robots-Tag
X-Wix-Server-Artifact-Id
X-Endurance-Cache-Level
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
X-Nginx-Cache-Status
X-Turbo-Charged-By
X-Page-Speed
X-Wix-PunisherID
X-Accel-Version
WP-Super-Cache
X-Pad
Content-Security-Policy-Report-Only
X-Drupal-Dynamic-Cache
X-Tumblr-Pixel-3
X-Content-Powered-By
X-Forwarded-For
X-Forwarded-Proto
X-Content-Digest
X-Varnish-Cache
X-Rack-Cache
X-AH-Environment
X-Styx-Req-Id
Surrogate-Key-Raw
X-Pantheon-Styx-Hostname
X-Proxy-Cache
X-Original-Date
X-GitHub-Request-Id
SPRequestGuid
X-SharePointHealthScore
X-Cnection
MicrosoftSharePointTeamServices
X-Request-Country
X-MS-InvokeApp
X-XRDS-Location
Edge-Control
X-LiteSpeed-Cache
X-Cache-Lookup
X-Died
Cf-Railgun
Timing-Allow-Origin
X-WPE-Loopback-Upstream-Addr
MicrosoftOfficeWebServer
X-FullPageCaching
X-Webserver
X-Amz-Id-2
X-Amz-Request-Id
Request-Id
X-Safe-Firewall
Charset
X-FW-Hash
X-PhApp
X-FW-Static
X-FW-Serve
X-FW-Type
Edge-Cache-Tag
X-Content-Security-Policy
X-SERVER
X-Tumblr-Pixel-4
X-HS-Cache-Config
X-HS-Content-Id
SPIisLatency
SPRequestDuration
X-INKT-URI
X-INKT-SITE
X-Node
X-CF-Powered-By
Content-MD5
X-Hits
Access-Control-Max-Age
Composed-By
X-AWS-Id
X-VWS-Id
X-LJ-Flow-ID
Liferay-Portal
Grace
Rating
X-Hyper-Cache
X-Newrelic-App-Data
Served-By
X-CDN-Pop-IP
X-CDN-Pop
X-Swift-CacheTime
X-Swift-SaveTime
X-BC-Stapler
Request-Context
EagleId
Access-Control-Expose-Headers
X-Spip-Cache
X-Firenze-Processing-Times
X-Server-Name
Fastly-Debug-Digest
X-Device
X-Tumblr-Content-Rating
X-Backend-Server
X-Microcache
X-Fastly-Request-ID
X-PHP-Backend
X-Dw-Request-Base-Id
X-ServerName
X-VCache
X-RateLimit-Remaining
Content-Style-Type
X-RateLimit-Limit
X-Cloud-Trace-Context
Content-Script-Type
X-RateLimit-Reset
X-Jimdo-Instance
X-Jimdo-Wid
X-User-Agent
Public-Key-Pins
Real-Hostname
X-TNCMS
X-Loop
X-FB-Debug
Front-End-Https
X-Clacks-Overhead
X-DDC-Arch-Trace
Refresh
X-Cache-Config
X-Acc-Exp
Surrogate-Control
X-XN-XNHTML
X-XN-Trace-Token
Fpc-Cache-Id
X-Age
Xkey
X-Tumblr-Pixel-5
X-Px
X-Hostname
X-StackifyID
X-N-OperationId
PageSpeed
X-Cached
X-Generated-By
X-Trace
X-DNS-Prefetch-Control
Display
Response
X-Middleton-Response
X-Middleton-Display
X-Sol
X-Topify-Platform
X-MiniProfiler-Ids
X-Request-Time
X-SS-Conf
X-Content-Security-Policy-Report-Only
X-SS-Location
X-LiteSpeed-Cache-Control
X-Zen-Fury
X-WebKit-CSP
X-DynaTrace-JS-Agent
X-Cached-By
X-FORWARDED-FOR
X-URL
X-Content-Options
TCN
Surrogate-Key
X-CMS-Version
X-DynaTrace
X-Url
X-Amz-Version-Id
X-Whom
Access-Control-Request-Method
Rt-Fastcgi-Cache
X-ApacheServer
X-PERF
X-Handled-By
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Kinsta-Cache
X-Outils-CS
Edge-Control-Message
X-HS-Combine-CSS
Alternate-Protocol
X-Pantheon-Environment
X-Pantheon-Site
X-Pantheon-Phpreq
X-AspNetWebPages-Version
Product
P-WS
P-LB
Imagetoolbar
X-Magento-Tags
Host
X-Tumblr-Pixel-6
DynaTrace
X-Correlation-Id
X-Umbraco-Version
X-Microcachable
Fhost
X-From
X-OneAgent-JS-Injection
X-LBLID
ServedBy
X-Varnish-TTL
X-Cache-Rule
X-Engine
X-Fastcgi-Cache
X-Goog-Hash
X-HOST
Powered
X-Varnish-Cache-Hits
X-Ruxit-JS-Agent
X-NWS-LOG-UUID
X-Recruiting
Generator
Dmn
X-CacheServer
X-Location-Id
X-Micro-Cache
X-Actual-URL
X-Edge-Location
X-RESOURCE
X-B-Cache
X-Msg-2-Log
X-Original-Request
X-Returned-From
X-Passed-To-DLL
X-Track
X-Returned-From-DLL
X-Passed-To
X-Varnish-Beresp-Grace
X-VTEX-Janus-Router-Backend-App
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Processed-At
X-Vtex-Remote-Cache
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Passed-To-BeforeDispatch
X-Powered-By-VTEX-Janus-ApiCache
X-Vtex-Processado-Em
X-Passed-To-PostProcessResponse
X-Returned-From-PostProcessResponse
X-URLSCHEME
No
X-Returned-From-BeforeDispatch
X-Hosted-By
X-Application-Context
WZWS-RAY
X-Powered-By-360WZB
X-Stale
X-Upstream
Fastcgi-Cache
Public-Key-Pins-Report-Only
X-Tec-Api-Root
X-Cache-Age
X-BS
X-Tec-Api-Version
X-I-Sp
Arr-Disable-Session-Affinity
X-Matrix-Proxy
X-Tec-Api-Origin
X-Matrix-Server
X-Powered-By-VTEX-Janus-Edge
Origin
X-Source
X-Developer
X-Accel-Expires
X-Cache-TTL
X-Instart-Request-ID
Akamai-IP
X-NetCat-Version
X-Platform
X-Varnish-Host
X-UD-Method
X-Device-Type
X-LB
X-Platform-Processor
X-S
X-Duration
X-Platform-Router
X-Debug-Info
X-App-Hosting
X-Platform-Cluster
HTTPS
X-Version
X-Storage
X-Page-Cache
X-Revision
X-Art-Request-Id
Powered-By-ChinaCache
X-Rocket-Nginx-Bypass
Content-Hash
X-Signature
X-VARNISH-Cache
X-Internal-ReqID
X-Defender
X-Response-Time
X-Cache-Debug
X-Translation
X-Microcache-Status
X-Shop-Id
X-Daa-Tunnel
Last-Published
Cache-Key
X-TransIP-Balancer
X-Supported-By
X-Cache-Operation
X-Front
X-Varnish-Count
X-Varnish-HitMiss
X-HS-Content-Campaign-Id
X-Expires-Orig
X-Powered-By-VelaWeb
X-LW-Cache
X-Gamma-Serve
MIME-Version
Ohc-File-Size
X-EdgeConnect-Origin-MEX-Latency
X-Cache-Info
Node
X-Server-ID
Pool
X-Dispatch
Version
X-ATG-Version
X-NoCache
X-Cache-Only-Varnish
X-AOL-HN
X-Varnish-Cacheable
X-EdgeConnect-MidMile-RTT
X-TransIP-Backend
Content-Disposition
X-Cache-Key
X-Platform-Server
X-I
X-Origin
USPLoggingUUID
X-Firenze-Processing-Time
IBM-Web2-Location
X-Varnish-Age
X-SV-FromDBCache
X-SV-Pid
X-F-Cache
X-Content-Encoded-By
Cache-Provider
X-SV-Duration
X-TTL
X-SV-Nginx-Duration
X-Hypernode
X-SV-CreatedAt
X-SV-Edge
X-Magento-Cache-Debug
X-Director
X-VTEX-Cache-Status-Janus-Edge
X-SV-CacheTags
X-SV-Expires
X-SV-Cacheable
X-Dispatcher
X-Cache-Tags
X-Abgroup
X-Lambda-Id
IM-Version
X-Dns-Prefetch-Control
X-Cache-Control-Orig
Allow
X-Server-Upstream
X-Platform-Cache
Srv
X-Flow-Powered
X-Vcap-Request-Id
X-SSL-Cipher
X-Client-IP
SSPAppContext
Accept-Encoding
X-Route-Server
X-SSL-Protocol
X-UPSTREAM
X-GeoIP-Country-Code
ServerName
X-Debug
Lsrequestid
X-Varnish-RemainingTTL
X-Varnish-GracePeriod
X-Varnish-Seen-By
X-Varnish-ObjectSource
X-Varnish-RemainingLife
X-Cache-Expires
X-Sucuri-ID
Content-Encoding-Handler
X-Varnish-Backend
X-ARC
X-Geo-Country
X-Sucuri-Cache
Cneonction
X-RequestId
X-Cache-Lifetime
X-CJ-Soft
Proxy-Connection
ServerID
X-Cookie-Domain
X-Grace
X-Proxy
X-Goog-Metageneration
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-GUploader-UploadID
SN
X-Goog-Generation
X-PwB-Node
X-ORACLE-DMS-ECID
Section-Io-Id
X-LB-Node
X-Loopia-Node
Fw-Via
X-Litespeed-Cache
X-Cache-Server
X-Edge-IP
X-Browser
X-Akamai-Device-Characteristics
X-Last-Modified
X-Amz-Meta-S3cmd-Attrs
X-IsCacheURL
X-Speed-Cache
X-Speed-Cache-Key
Backend
X-SDS
Location
X-SE-Debug
Wsr-Cache
X-Via-JSL
FAI-W-FLOW
Pv
X-Sapient
X-GeoIP-Country-Name
X-Country-Code
X-Abuse
X-Id
X-Content-Age
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
PICS-Label
X-NB-Cached-Page
X-Time
Tracecode
X-Url-Base
Accept-Charset
X-ServerID
X-Middleware-Start
Page-Completion-Status
X-Server-Id
NnCoection
X-Hiawatha-Cache
Req-Id
X-Discourse-Route
X-Nbs
X-SRCache-Key
X-Generated
X-Shield-Request-Id
X-Cache-Engine
RTSS
X-Xrds-Location
S
X-Yadis-Location
Use-Proxy
Edge-Content-Tag
X-Route-To
X-Cf-Powered-By
X-CDN-Forward
A-Powered-By
X-Traffic
If-Modified-Since
X-Purge-URL
X-Drupal-Cache-Tags
X-N
Author
X-Varnish-Ttl
X-Akamai-Device-Model
X-Worker
X-Always-Cache
X-Processing-Time
Xc-Version
Content-Transfer-Encoding
X-CDN-Node
X-Frontend
X-CDN-Cache-Status
X-Correlation-ID
Qs-Cache
X-Orig-Vary
X-BKSrc
X-Cache-Control
X-Akamai-Transformed
X-Rnd
X-Nginx-Cache
X-FW
X-Cache-CFC
X-BackendServer
Server-Info
X-Varnish-Url
X-DealerOn
Nodo
X-SO
X-Processed-By
X-JG-Page-Cache
Eomportal-Instance
X-Cache-Type
X-Purge-Host
HCVer
X-VARITI-CCR
Cache
HAVer
AMF-Ver
Cm-Server
X-Varnish-ID
X-HP-Trace-Project
X-HP-Trace-ID
Local-Info
X-Vhost
X-Srv
X-ID
X-LB-Server
X-Magento-Cache-Control
WWW-Authenticate
X-PF-Uncompressing
X-Magnolia-Registration
X-Cache-Level
X-Runtime-Memory
X-Cache-PageType
X-Cache-Fix
Frame-Options
NetMindSessionID
S-Cnection
X-Amz-Storage-Class
X-Empowered-By
X-Config-Blacklist-Version
X-Varnish-IP
X-ClientSide-Caching
SRV
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-Env
X-DataDome
Magicmarker
MJ12bot
X-Pressidium-NinukisWP-Ver
X-Webkit-CSP
X-Environment
SEOMOZ
X-ACMCache
X-Healthy
X-Mobilized-By
X-Varnish-Hits
Retry-After
X-VC-TTL
X-Litespeed-Cache-Control
X-ServerIndex
NODE
MC
SVR
X-Framework
Access-Control-Allow-Header
AddOutputFilterByType
X-App-Server
X-FireWall-Port
X-Hit-Cache
X-Pagename
X-Real-Server
Cached
X-Cache-Handler
Thanks
X-Ttl
X-Amz-Meta-Cb-Modifiedtime
X-Powered-By-Server
Cache-Tag
X-Session-ID
X-Atraveo-Cache-Control
X-PRAM
X-Force
X-Atraveo-Zone
X-Cache-Doesi
X-Unbounce-Variant
X-Server-Instance
X-Unbounce-PageId
X-Atraveo-Varnish-Server-Id
X-Atraveo-TTL
X-Atraveo-ETag
X-Unbounce-VisitorID
X-Atraveo-Expires
X-Atraveo-From-Varnish-Cache
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
X-Directory-Script
X-Akamai-Edgescape
X-Redman-Final-Url
X-Varnish-Retries
X-Redman-Backend
X-AVG-Country-Code
X-Avg-Cookie-Expires
X-High-Performance
Nitro-Cache
X-Cache-Source
X-Cache-Provider
X-Symfony-Cache
X-CF-Passed-Proto
IISExport
X-Cache-Device-Type
X-CDN-COMPRESS
X-Resty-Request-Id
X-CB-Server
X-Dw-Trace-Id
X-CDN-RULE
X-Fedora-School-Id
Front
X-GeoIP
X-WHOIS-Cached
W
X-TTFB-L
CLMOB
X-Cluster-Node
X-WR-Flags
X-SmugMug-Hiring
X-VC-Enabled
X-TTFB
Warning
X-Debug-Token
CacheControlHeader
X-SmugMug-Values
Smug-CDN
X-Clara-ASAP
X-OpenCart-Lightning
Disablevcache
X-IIJ-Cache
NtCoent-Length
X-Drupal-Cache-Contexts
X-NODE
X-HW
Content_type
X-Varnish-Server
X-ASAP-Cache
Cmstype
Identity
X-CSRF-Token
BALANCEDTO
Server-Name
X-AF-Userserver
Cmsid
X-Drectory-Script
X-Nginx-Host
EagleEye-TraceId
X-Ezoic-Cdn
WN
X-Source-ID
X-App-Status
Keywords
X-ORACLE-DMS-RID
X-Adobe-Loc
X-WN-ClientGroup
X-HOSTNAME
X-Balanceador
Machine
X-Provisioner-Version
X-Domain-Checked
X-Sys-Req-ID
X-EPiphany-Vid
X-Adobe-Content
X-Mobile-URL
X-HTML-Minification-Powered-By
Proxy-Agent
X-Client-Image-Vid
X-Cocoon-Version
X-Client-Vid
X-LP
X-Session-Reinit
OriginServer
Home
X-Map-Context
X-WR-MODIFICATION
Dispatcher
X-Runtime-Rack
X-Req-Head-Response
X-Varnish-Hostname
X-Key
X-UA
X-Remote-Addr
X-This-Proto
X-Cache-Node
Web-App-Origin-Name
NLCacheNote
X-ACCELERATE
Strikingly-Cached-Version
X-Page
Description
Beyond-Iis
From
X-Server-IP
Access-Control-Allow-Method
X-Stage
Strikingly-Cache-Region
Strikingly-Cached
X-Location
Backend-Timing
HitType
Nginx-Cache
X-Connection-Hash
Ctx
X-Transaction
X-Analytics
X-ARRServer
X-Twitter-Response-Tags
X-LW-Web-Server
MW-Webserver
X-Batcache
X-WP
X-EC2-Instance-Id
Ram
X-Batcache-Reason
X-Adnet
Noq
X-Culture
Ews
Max-Age
X-App
X-RiS-UFDI
X-CAPServer
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Machine
X-HA-Frontend
Set-Cookie2
DNNOutputCache
X-B2f-Not-Route
X-TB-M
Yoncu-Errno
SBGI-5
SBGI-7
SBGI-10
SBGI-1
Ufe-Result
SBGI-9
SBGI-Device
X-Cache-Dispatchercachecontrol
Pics-Label
X-Cache-Dispatcherpragma
SBGI-RenderTime
SBGI-RealPath
X-HA-Backend
X-Rack-Cors
Accept-Language
X-Disney-Akamai-Rule
X-Aramark-SID
X-Apm-Telemetry-Syncmark
X-HP-Redirect
X-Varnish-Cache-Local
X-Origin-404Back
X-Content-Type-Option
X-A
X-Origin-404URL
WP-AdvCache-MemCached
X-Goog-Meta-Replace
X-Goog-Meta-Policy
From-Origin
SiteSpeed
X-Esi
X-NginX-Cache
X-HydroSheep
X-Webcelerate
X-AutoRu-App-Id
X-Autoru-LB
Fastly-Backend-Name
SHInfo
COMMERCE-SERVER-SOFTWARE
X-Autoru-Host
Bios
X-DB-Content-Length
Cteonnt-Length
ClientIP
X-Resolver-IP
Cache-Tags
X-Generated-Time
X-Flex-Lang
F5-IpCliente
Gzip
X-DSMX-Render-MS
X-Flex-Tag
X-DSMX-Rewrite-MS
X-Flex-Lastmod
X-NginX-Server
X-Flex-Tags
X-E
Traffic-Origin
X-Data-Request
X-HashTwo
X-Rocket-Nginx-Serving-Static
X-DTC
X-Plat
X-Depends
X-Blog
X-MSEdge-Ref
Proxy-Cache
Il-Cl
X-Backend-Status
X-Flex-Community
X-Flex-Evend
NS-VaryByCustom-Key
Myheader
ServerSignature
ServerTokens
X-Frames-Options
X-Flex-Evstart
XDomainRequestAllowed
X-Jphone-Copyright
X-Middleton-PageSpeed
Ttl
RN-Server
X-SERVER-NAME
X-Info
RSB-LINK
X-Cache-Detail
X-Distil-CS
Id
ScoreTracker
X-Smartcache-Keys
Dis-Env
X-Smartcache-Timeout
X-Hosting-Env
X-Frame-Option
X-SDE-Name
X-Cache-TTL-Remaining
X-Garden-Version
X-HITS
X-Served-Server
X-Gyrobase-Publication
AsisCache
X-Ser
X-Trace-Id
X-Tag-Playlist
X-Served
X-Cname-TryFiles
X-Deity
X-Author
X-Grid-Server
X-Pj-Cache-Status
Swift-Performance
X-AEM
Og
X-KoobooCMS-Version
PagesDisplayed
X-NewRelic-App-Data
X-RealServer
X-Unique-ID
X-Hrouter
X-Rq
X-Hstore
PServer
X-Lima-Id
X-Replay-Request-ID
X-DN-Cache-Control
X-Cache-On
X-EMAC-Request-ID
X-Rebelmouse-Surrogate-Control
X-PM-ID
X-Amz-Meta-Content-Md5
X-M
X-We-Are-Hiring
X-Rebelmouse-Cache-Control
AccessControlAllowOrigin
SB-Cache-Life
X-ACLR-Version
X-Nginx
WebServer
X-CRA-DC
Xc
X-Cached-Status
X-RDP
X-Amz-Id-1
X-Actindo-Request-Id
X-Optimization
X-GoCache-CacheStatus
SG
X-MidCOM-Meta-Cache
X-Varnish-Ip
X-Actindo-Error-1
X-Rack-CORS
Tempo
X-Machine-Name
X-Cache-Time
Cluster-ID
X-MAT-GEO
X-WPL-DATA
X-CACHE-TTL
X-Actindo-Thread-Id
X-Actindo-Rs
X-Response
Hname
ViewMode
X-Beatles
Hosted-By
SB-Cache-Remaining
Content-Server
X-Ss-Conf
X-Sc-Cache
X-Ghost-Cache-Status
TC-S-Cache
VANITY-HOST
X-VarnMisc-UrlChanged
X-Ss-Location
X-GSL-Server
X-Render-Time
TC-Cache-IC
X-Cache-Keep
TC-Cache
X-VarnState-NoCache
TC-Cache-U
X-Rewrite
Edgecast
X-Airee-Node
X-Highwire-RequestId
TC-S-Cache-M
X-SmartBan-URL
X-Highwire-SessionId
Access-Control-Request-Headers
Paypal-Debug-Id
X-Obj.Ttl
X-Proto
X-SmartBan-Host
Sophnep-Edge-FX
AC-ELC
SB-Site-Device
X-CacheResult
SB-Site-IE-VERSION
X-Webkit-Csp
X-VarnMisc-Url
X-Cms-Mode
X-Artvisual-Server
VServer
Worker
X-ReqId
X-Dev
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Cache-HT
SBMCLOUD
X-Oracle-DMS-ECID
X-Header
X-Unique-Id
X-Turpentine-Esi
X-HostName
X-OPNET-Transaction-Trace
X-Distributor
X-SCM-Server-Number
X-Detected-Device
Web
X-Search-Id
X-Webstats-RespID
X-Proxy-Cache-Key
X-Upstream-Status
X-Upstream-Backend
X-OCTOPOD
X-Origin-Server
Actual-Object-TTL
ServerIP
AMP-Access-Control-Allow-Source-Origin
Serverid
X-CacheID
X-Avvio-Cms-Cacheload
X-Session-Id
X-Cache-Via
Session-From
X-XHR-Current-Location
CommunityServer
X-MCB-Server
X-Src-Webcache
Response-Time
X-Layout
X-Hosting
X-Real-IP
X-Magento-Action
X-4ormat-Cacheable
X-Title
X-Varnish-Debug-TTL
X-Captured
X-Varnish-Debug-Age
X-Viator-Tapersistentcookie
X-Secret
DrivedBy
X-AMAZEEIO
FastCGI-Cache-Status
X-TTL-Age
X-CCM
Service-Worker-Allowed
X-Cache-Set
X-ProcessESI
X-RemovedCookies
X-Server-Generated
X-Does-He-Have-Time
X-Header-Treatment
X-LBPoolMember
X-Rewritten-By
X-ETag
X-Beatles-Hits
X-Webkit-CSP-Report-Only
X-WA-Info
Url
X-Desc
X-Cache-Id
X-HAProxy
X-Svr
INFO
X-Pagely-Cache
X-UPSTREAM-Address
X-Origin-Cache
X-Router
Aurora-Node
X-Config-By
X-Made-On
X-Forwarded-Host
X-HA
Fastly-Restarts
X-Powered-By-Home.Pl
X-Processed
Ibf5scheme
N365rili
Server-Tuning
Server-ID
X-FRUIT
X-ManagedFusion-Rewriter-Version
AR-CACHE
AR-ATIME
X-Your-GrandPa-Would-Wait
X-Would-Your-GrandPa-Wait
X-SilverStripe-Cache
AR-PoweredBy
EQ-Cache
X-Cache-LB
Buuteeq-Source
AR-SID
Hamster
X-Serv
X-Cache-Warmer
SERVER-ID
X-RAMCache
X-CACHE-KEY
TP-Cache
TP-L2-Cache
X-Container
X-Varnish-Action
BackendServer
X-Site
X-W3TC-Minify
X-PBY
X-Nginx-Request-Processing-Time
Provider
ProxiaInstanceId
Device
NZSpeedy
X-IP
X-Resource
X-Cache-BE
X-ChromeLogger-Data
X-Reflector
X-App-Runtime
X-Varnish-URL
X-Lb
X-Wix-Punisher
X-Runtime-Affili
X-Reflector-Cache
X-Cdn-Forward
X-Bcwwwid
X-SH-Cache-Status
RATING
X-REDIRECTSERVER
Server-Ip
X-Bip
X-AppServer-Cache-Rule
X-Node-ID
Webserver
X-Highwire-Smart-Code
X-Highwire-Sitecode
X-Proxy-Id
X-CPU-Time
X-Built-With
Cache-Status
UrlWatchModule-Time
D
X-Cache-Varnish
X-Uncacheable
X-Fpc
X-ELB
Rewriter
X-Country
X-MCF-ID
X-Checkout
User-Agent
Ozcache
X-Time-Microsecs
V-Age
X-Backend-Name
X-Pixelsilk-Server
X-NID
X-Cjtype
Accept-CH
X-Ezpublish-Installationid
X-Built-By
MS-CV
X-Ezpublish-Nodeid
X-NodeID
X-UUID
X-Pass-Through
X-Pixelsilk-Version
X-Route
X-Phpwcms-Release
X-Phpwcms-Page-Processed-In
X-Backend-Host
CD4
Arrnode
X-Sites
X-ImpID
X-Server-Instance-Name
X-Dynamic-Cache
HostName
Be
X-Test
X-Cache-ID
X-HEAD
X-FIRSTBase
X-Cache-Action
X-SV
X-Status
Httpd-Identifier
Hostname
Debug-Status
MSSmartTagsPreventParsing
MSThemeCompatible
X-Cache-TTL-Age
StatusCode
X-VLoc
X-Varnish-Instance
X-Streams-Distribution
X-ServerAddr
X-Server-FQDN
X-Time-Zone
X-UPServer
X-Varnish-Cached-TTL
X-Varnish-Cached
X-Cache-TTL-Current
X-Fstrz
X-ASAP-Age
X-AG-MIPS
MwpReleaseVersion
X-DS1D
X-Forwarded-By
X-Restarts
X-HS-Status
AGI-Request-ID
X-Server-Addr
X-Instance-Name
X-Gannett-Site-Version
X-Meta-Imagetoolbar
X-Meta-MSSmartTagsPreventParsing
X-Old-Content-Length
X-Meta-MSThemeCompatible
X-Script
X-Box
X-V
X-JSESSIONID
Y-Trace
Fw-Cache-Status
Provided-Host
Note
X-Compressed-By
CDCHOST
Str-Bsite
MageStack-Web-Node
Str-Ip
X-Accel-Cache-Control
X-App-Version
X-Amcomm-Site
RequestId
X-Cacheable-TTL
X-Serendipity-InterfaceLang
X-Router-Backend
X-Serendipity-InterfaceLangSource
X-UseReverse-Proxy
X-Zendesk-Origin-Server
X-Webapp
X-Pageid
X-L-Path
X-Environment-Context
X-CH-Device
X-Fastly-Backend-Reqs
X-FreeTag-Count
X-IP-Address
MageStack-Tag
MageStack-PageSpeed
X-SCProxy
X-Debug-Message
X-XHTML-Minification-Powered-By
X-Test-Debug
Brightspot-Id
X-VNode
Uuri
Upgrade-Insecure-Requests
!~Request-OOB-Work
X-Max-Age
GranicusServer
Microcache
Quri
SS
Lb
MageStack-Area
MageStack-Cacheable
MageStack-Cache-Status
MageStack-Config
MageStack-Debug
MageStack-Magento-Version
MageStack-Loadbalancer
MageStack-Cache-Lifetime
X-APP
FindLaw
X-Pubstack
X-AppVersion
MageStack-Cache
MageStack-Cache-Hits
X-Zendesk-User-Id
Referer
X-MainProfileName
X-ENV
X-Nginx-Request-Time
X-Dynamic
X-Sid
X-MainProfileID
Content-Cache
X-Upgrade-Enabled
X-LOCATION
X-MainProfileCategory
X-DeliveryServer
X-Cluster
XDisk
X-VC-Debug
X-WebNode
Resin-Trace
X-Agent
X-Application
X-Not-Cacheable
X-Cache-Extended
X-Brought-To-You-By
X-HP-CAM-COLOR
X-MainProfileURL
X-Srcache-Store-Status
X-DevSrv-CMS
X-Srcache-Fetch-Status
DbServerName
Session-Id
X-DEBUG
X-Beresp-Ttl
X-COUNTRY-CODE
X-FPC
X-AISO-Server
X-Config-Version
X-Client-Ip
Section-Io-Cache
Aoestatic
LB
ERev-Ver
CacheControlMode
X-Varnish-Set-Cookie
X-Server-Ident
X-Memcached
No-Cache
X-Transaction-Name
X-Varnish-Store
X-ASPNET-VERSION.*
X-Via-NSCOPI
Yola-ID
AliCDN-Forbidden-Reason
X-Tt-Dbg
X-CAMPUSSUITE-DEBUGGING
VAR-Cache
X-CAMPUSSUITE-ENVIRONMENT
Tk
X-CAMPUSSUITE-TENANT
X-Magento-Lifetime
X-Varnish-Debug-Hits
Vserver
VC-NoCache
X-Varnish-Esi-Method
X-Obvious-Info
X-7d-Instance-Id
X-7d-Trace-Id
X-AISO-Cache
Tst
X-BeResp-Ttl
Ez
X-Obvious-Tid
X-Serverid
X-AISO-Cacheable
X-ServiceProvider
Actioncode
X-Archive-Orig-Date
X-Archive-Orig-Etag
X-Archive-Orig-Server
X-Cache-Date
X-Archive-Orig-Content-Length
X-Archive-Orig-Connection
Powered-By-VeryCDN
BM-Cache-Key
X-IsCached
TTL
X-Archive-Guessed-Charset
X-TempoPesquisa
X-RequesterIP
X-Request-Processing-Time
X-BC
X-Custom-Name
X-Protected-By
X-PoweredBy
X-AWS
X-Ants-Machine-Id
X-Theme
X-Server-App
X-WHO
X-Ants-Host
X-Request-Received
Memento-Datetime
MachineName
Cookie
NCache
Kp-EeAlive
X-Ar-Debug
X-Amz-Meta-S3b-Last-Modified
Apple-Itunes-App
X-Cache-Served
X-Turpentine-Cache
X-Varnish-Currency
Progma
X-Farm-Server
X-Purge-Level
X-Allow-Redis
Www.Aujourdhui.Com
BM-Cache-Status
OutputRewritten
X-LB-Backend
X-LB-Frontend
BM-Cache-Node
Expiries
X-Wm-VIP
X-Hit
ServerNode
X-Node-Name
Realaction
X-Wm-1
X-Varnish-Esi-Access
X-BPool-Fx-Cache
X-Tradeindia-SMgmt
X-Vid
X-Tradeindia-Request-GUID
Dynatrace
X-RiS-PX
X-Sn-Servicetimems
FrontEnd
X-Faeria
X-Instance-Id
X-Catalyst
X-Cache-FS-Status
ReqUrl
Public-Extension
ResourceTag
WFE
X-Dynatrace-Js-Agent
RSL-Trace-ID
X-Nginx-Page-Cache
AMFplus-Ver
X-Dynatrace
X-Cache-V
X-Obj-Ttl
X-Instart-Cache-Id
X-Front-Cache
Type
X-NewsFlow-Sitename
X-B3-Traceid
X-MSU-SOURCE
X-DDM-SERVER-UPDATED
X-9XB-Server
Server-Id
X-Service-Id
X-DDM-SERVER
X-Clx-Request
SINA-LB
SINA-TS
X-Skip-Cache
X-Geo-IP
X-SuperCache
X-Wily-Servlet
Kanooh-Host
IES-Server
Load-Balancer
X-PBS-Appsvrip
X-B3-Spanid
X-PBS-Appsvrname
X-PBS-Fwsrvname
X-Wily-Info
X-SRV
X-POPSUGAR-Server-Name
DB-Nickname
X-Vary-Options
Container
EREV-Ver
X-Csrf-Token
Generate-Time
PB-PID
PB-RID
X-Imforza-Hosted
X-Varnish-Auto-Cache-Miss
IsMobile
X-Varnish-Cache-Ttl
Cleartype
X-Varnish-Mode
X-ClusterID
Phoenix-A
Phoenix-Cache
X-Mobile-Rewrite
X-DynamicCache
X-UT-Cache
X-WebKit-CSP-Report-Only
Copyright
X-Amz-Meta-Version-Id
Tesla.Performance
Phoenix-Cache-V
Phoenix-Mark
Phoenix-Proxy-Cache
Proxy1
X-Static
X-BServer
X-Mobile-Device-Type
X-Mobile-Device
CDN-Cache
CDN-Cache-Hit
CDN-Node
X-Backend-TTL
X-FG-RequestId
Page-Template
X-NewCloud-V-Cache
X-Cache-Me-Harder
X-Enhanced-By
DeleGate-Ver
Https
TheAnswer
Language
X-BPool
X-BPool-Back
X-BPool-Bx-Cache
X-ZSITES-DNS
X-Who
X-ACache
X-BIT-Node
X-PROCESSED-BY
X-Ssl-Cipher
X-Czt