Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
X-AspNet-Version
Age
P3P
Content-Language
X-Pingback
Via
X-UA-Compatible
Expect-CT
Upgrade
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Check
X-Language
X-Template
X-Varnish
X-Request-Id
X-Xss-Protection
Alt-Svc
X-Generator
X-Buckets
X-Drupal-Cache
P3p
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-Powered-By-Plesk
Content-Location
Host-Header
X-Runtime
X-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId-Cached
X-Dc
X-Sorting-Hat-Section
X-ShardId
X-Sorting-Hat-PodId
X-Alternate-Cache-Key
MS-Author-Via
Referrer-Policy
X-UA-Device
Cartoon
X-Powered-CMS
X-Served-By
X-IPLB-Instance
X-Amz-Cf-Id
Access-Control-Allow-Headers
Access-Control-Allow-Credentials
X-Cache-Status
Access-Control-Allow-Methods
Status
X-Via
X-Timer
X-Iinfo
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Wix-Server-Artifact-Id
CF-Cache-Status
X-Contextid
X-Backend
X-ServedBy
Powered-By
X-PC-Hit
X-PC-Key
X-Mod-Pagespeed
X-Accel-Buffering
X-CST
Content-Encoding
X-PC-Date
X-PC-Host
X-PC-AppVer
X-DIS-Request-ID
X-WPE-Loopback-Upstream-Addr
X-Ua-Compatible
X-Logged-In
Keep-Alive
X-CDN
X-Host
X-Cache-Hit
X-Rid
X-Port
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Tumblr-User
X-Cache-Enabled
X-Server-Powered-By
X-Server
X-Endurance-Cache-Level
X-Tumblr-Pixel-1
X-Nginx-Cache-Status
X-Robots-Tag
X-Original-Date
X-Seen-By
X-Wix-Request-Id
X-Accel-Version
X-Drupal-Dynamic-Cache
X-Tumblr-Pixel-2
X-Turbo-Charged-By
X-Page-Speed
X-Pad
X-Content-Powered-By
X-Proxy-Cache
X-Wix-Punisher
X-Content-Digest
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-AH-Environment
X-Forwarded-For
X-Rack-Cache
WP-Super-Cache
X-NewRelic-App-Data
X-Varnish-Cache
X-Forwarded-Proto
Content-Security-Policy-Report-Only
X-Tumblr-Pixel-3
X-LiteSpeed-Cache
X-GitHub-Request-Id
Edge-Control
X-Request-Country
SPRequestGuid
X-SharePointHealthScore
X-MS-InvokeApp
MicrosoftSharePointTeamServices
X-XRDS-Location
X-Cache-Lookup
X-Cnection
Timing-Allow-Origin
X-SERVER
X-Newrelic-App-Data
X-Amz-Id-2
X-Amz-Request-Id
X-FW-Hash
X-Node
X-Sorting-Hat-PrivacyLevel
Cf-Railgun
X-Died
X-Trace
X-FW-Static
X-FW-Serve
X-FW-Type
X-Content-Security-Policy
Charset
X-Webcom-Cache-Status
X-Webserver
Request-Id
Edge-Cache-Tag
X-HS-Cache-Config
X-FullPageCaching
X-HS-Content-Id
X-PhApp
X-CF-Powered-By
X-Hits
Request-Context
MicrosoftOfficeWebServer
SPIisLatency
SPRequestDuration
Access-Control-Max-Age
X-PHP-Backend
X-BC-Stapler
X-INKT-SITE
X-INKT-URI
X-Safe-Firewall
Composed-By
EagleId
X-Swift-CacheTime
X-Swift-SaveTime
Access-Control-Expose-Headers
Served-By
Grace
X-CDN-Pop
X-CDN-Pop-IP
X-HS-Combine-CSS
Liferay-Portal
X-Spip-Cache
X-Hyper-Cache
X-Backend-Server
X-Dw-Request-Base-Id
X-Device
X-Server-Name
X-Tumblr-Pixel-4
X-VCache
X-Fastly-Request-ID
X-Microcache
X-RateLimit-Remaining
X-RateLimit-Limit
X-Cloud-Trace-Context
Content-Style-Type
X-Clacks-Overhead
X-FB-Debug
X-LiteSpeed-Cache-Control
X-RateLimit-Reset
Content-Script-Type
X-Firenze-Processing-Times
Xkey
X-Jimdo-Instance
X-Jimdo-Wid
Rating
Front-End-Https
Surrogate-Control
X-ServerName
X-Acc-Exp
X-Loop
X-TNCMS
X-DNS-Prefetch-Control
X-DDC-Arch-Trace
Refresh
X-Vtex-Processado-Em
Public-Key-Pins
X-User-Agent
X-Sol
Display
X-Middleton-Display
Response
X-Middleton-Response
X-Cache-Config
X-StackifyID
X-Frame-Option
Real-Hostname
X-XN-Trace-Token
X-XN-XNHTML
X-Age
Fpc-Cache-Id
X-Tumblr-Content-Rating
X-Hostname
X-WebKit-CSP
X-SS-Location
X-SS-Conf
X-Px
X-Zen-Fury
X-Cached
X-Generated-By
X-N-OperationId
X-Topify-Platform
X-HOST
X-Tumblr-Pixel-5
X-Correlation-Id
X-Request-Time
X-Dscp-Value
X-Magento-Tags
PageSpeed
P-WS
P-LB
X-MiniProfiler-Ids
TCN
X-Amz-Version-Id
X-Whom
X-Msg-2-Log
X-Handled-By
X-Cached-By
X-OneAgent-JS-Injection
X-Kinsta-Cache
Rt-Fastcgi-Cache
X-Url
X-URL
X-DynaTrace
X-From
X-Outils-CS
X-CMS-Version
X-DynaTrace-JS-Agent
X-B-Cache
X-AspNetWebPages-Version
Powered
X-Content-Options
Product
X-Varnish-TTL
X-Ruxit-JS-Agent
Imagetoolbar
Access-Control-Request-Method
X-Debug-Info
X-FORWARDED-FOR
Surrogate-Key
X-Varnish-Cache-Hits
X-Edge-Location
X-Cdn
X-CacheServer
ServedBy
X-Cache-Rule
X-Powered-By-VTEX-Janus-ApiCache
X-Vtex-Processed-At
X-VTEX-Janus-Router-Backend-App
No
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Remote-Cache
DynaTrace
X-Track
Host
X-Engine
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Recruiting
X-Via-JSL
Public-Key-Pins-Report-Only
X-Servedby
X-Upstream
Alternate-Protocol
X-Umbraco-Version
Fhost
X-LBLID
X-Signature
X-Fastcgi-Cache
X-Application-Context
X-Powered-By-VTEX-Janus-Edge
X-Accel-Expires
X-Goog-Hash
X-Location-Id
Edge-Control-Message
X-Passed-To-DLL
X-Returned-From
X-Passed-To
X-Original-Request
X-Actual-URL
X-Returned-From-DLL
X-ApacheServer
X-Response-Time
X-PERF
X-Passed-To-PostProcessResponse
X-Platform
X-Returned-From-BeforeDispatch
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Returned-From-PostProcessResponse
X-Passed-To-BeforeDispatch
X-Varnish-Beresp-Grace
X-Developer
X-Stale
X-LW-Cache
X-Hosted-By
Generator
Dmn
Fastcgi-Cache
X-Platform-Router
X-Platform-Processor
Arr-Disable-Session-Affinity
X-Micro-Cache
X-Magento-Cache-Debug
X-Powered-By-360WZB
X-UD-Method
WZWS-RAY
X-NWS-LOG-UUID
X-Platform-Cluster
X-VARNISH-Cache
X-Instart-Request-ID
Pagespeed
X-Version
Fastly-Debug-Digest
HTTPS
X-Cache-Info
X-TransIP-Balancer
X-Microcachable
X-Cache-Age
Retry-After
X-Varnish-Host
X-Shop-Id
X-Defender
X-URLSCHEME
X-Supported-By
X-Device-Type
X-Cache-TTL
X-Dispatcher
X-Varnish-HitMiss
X-I-Sp
X-Varnish-Count
X-Loopia-Node
Content-Hash
X-BS
X-I
Ohc-File-Size
X-F-Cache
X-RESOURCE
X-Rocket-Nginx-Bypass
Origin
Cache-Provider
X-Rnd
X-HS-Content-Campaign-Id
X-Source
X-Tumblr-Pixel-6
X-TransIP-Backend
Akamai-IP
X-Storage
X-Cache-Tags
X-S
USPLoggingUUID
RTSS
X-Pantheon-Environment
X-Pantheon-Phpreq
X-Pantheon-Site
X-EdgeConnect-Origin-MEX-Latency
Surrogate-Key-Raw
X-Platform-Server
X-Powered-By-VelaWeb
X-ATG-Version
X-Cache-Operation
Version
X-Cache-Key
X-Front
X-Server-ID
X-NetCat-Version
X-Gamma-Serve
Last-Published
X-Page-Cache
X-Litespeed-Cache
X-App-Hosting
X-CSRF-Protection
X-Matrix-Proxy
X-Matrix-Server
X-Director
X-Art-Request-Id
X-Platform-Cache
X-Vcap-Request-Id
X-Microcache-Status
X-Translation
X-Varnish-ObjectSource
X-Varnish-Seen-By
X-Varnish-RemainingLife
X-Varnish-GracePeriod
X-Varnish-RemainingTTL
Allow
X-EdgeConnect-MidMile-RTT
X-Environment
X-Revision
X-LB
X-ORACLE-DMS-ECID
X-Hypernode
X-LB-Node
Content-Disposition
Cache-Key
X-Url-Base
X-Route-Server
X-Ezoic-Cdn
X-Ttl
X-Drupal-Cache-Tags
X-Abgroup
MIME-Version
X-Varnish-Age
X-Shard
X-Cluster-Node
Wsr-Cache
X-Expires-Orig
X-Content-Encoded-By
X-Sapient
IBM-Web2-Location
Pool
X-Litespeed-Cache-Control
X-Server-Upstream
X-SSL-Cipher
X-Lambda-Id
Powered-By-ChinaCache
X-ARC
X-Cache-Debug
X-SV-Duration
X-SV-Nginx-Duration
X-SV-FromDBCache
X-Grace
X-Daa-Tunnel
X-SSL-Protocol
X-SV-Expires
X-SV-Pid
X-SV-Edge
X-SV-Cacheable
X-SV-CacheTags
X-SV-CreatedAt
Content-MD5
X-Dispatch
X-Flow-Powered
SSPAppContext
X-Cache-Namespace
X-Varnish-Cacheable
X-Edge-IP
X-Xrds-Location
X-NoCache
X-Github-Request-Id
X-Cache-Only-Varnish
X-Nginx-Cache
S-Cnection
X-GeoIP-Country-Code
X-Varnish-Backend
Lsrequestid
Accept-Encoding
X-Drupal-Cache-Contexts
ServerID
X-CJ-Soft
X-Magento-Cache-Control
FAI-W-FLOW
Page-Completion-Status
Content-Encoding-Handler
X-Firenze-Processing-Time
Backend
X-Cache-Lifetime
Section-Io-Id
X-Generated
X-Vhost
X-Ss-Location
Srv
Cneonction
X-IsCacheURL
X-Ss-Conf
X-Cache-Type
X-Duration
X-Varnish-Url
X-Amz-Meta-S3cmd-Attrs
X-PwB-Node
X-N
X-Cache-Expires
X-Cache-Control-Orig
Pv
Location
Node
SN
PICS-Label
X-RequestId
X-Client-IP
Fw-Via
Proxy-Connection
X-Varnish-Ttl
X-Debug
X-Time
X-Proxy
Nodo
X-AOL-HN
X-Cache-Server
X-Nbs
X-SRCache-Key
X-Hiawatha-Cache
X-Discourse-Route
X-Fastly-Request-Id
X-Cache-CFC
X-Server-Id
X-Varnish-IP
X-Akamai-Transformed
X-Geo-Country
X-Speed-Cache
X-GeoIP-Country-Name
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-GUploader-UploadID
ServerName
X-Country-Code
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Speed-Cache-Key
X-Goog-Generation
X-Middleware-Start
X-ServerID
X-ID
X-ACMCache
Req-Id
X-FW
X-UPSTREAM
Use-Proxy
Server-Name
X-Akamai-Device-Model
X-Oneagent-Js-Injection
X-Akamai-Device-Characteristics
X-Empowered-By
AMF-Ver
X-Magnolia-Registration
If-Modified-Since
X-Cache-Engine
X-Cookie-Domain
X-Varnish-Retries
IM-Version
X-CF-Passed-Proto
X-High-Performance
X-Content-Age
X-Location
X-Dynatrace-Js-Agent
SEOMOZ
X-Yadis-Location
NnCoection
P-ID
X-Cache-Device-Type
X-Cache-Handler
X-Always-Cache
X-Worker
Server-Info
MJ12bot
X-Cache-Level
X-Browser
X-Purge-URL
X-Processing-Time
X-ORACLE-DMS-RID
X-Pressidium-NinukisWP-Ver
X-Cache-Control
X-Real-Server
Qs-Cache
X-Runtime-Rack
Cache
Cached
X-Frontend
X-Correlation-ID
Nitro-Cache
X-Cache-PageType
X-Esi
X-Cache-Fix
Pf.Web.Request.Id
Local-Info
X-Framework
Author
X-Last-Modified
X-DealerOn
X-Srv
X-BKSrc
X-SO
X-Content-Type-Option
X-Amz-Storage-Class
X-App-Server
X-Config-Blacklist-Version
X-Content-Security-Policy-Report-Only
Xc-Version
X-Adobe-Loc
SRV
X-Purge-Host
X-Abuse
Custom-Header
X-Sentry-ID
X-NB-Cached-Page
X-Adobe-Content
Accept-Charset
X-SDS
X-PF-Uncompressing
MC
Content-Transfer-Encoding
X-Unbounce-Variant
X-Unbounce-VisitorID
X-Server-Instance
X-Unbounce-PageId
X-Origin
S
X-Rocket-Nginx-Serving-Static
X-Mobilized-By
X-WR-Flags
Server-Timing
X-CDN-Forward
CacheControlHeader
X-OpenCart-Lightning
NODE
X-JG-Page-Cache
Cm-Server
X-BackendServer
Cteonnt-Length
X-Server-IP
X-Id
Front
X-Ruxit-Js-Agent
X-TTL
HAVer
HCVer
X-LB-Server
SBGI-RealPath
SBGI-9
X-Sys-Req-ID
SBGI-7
X-Rq
SBGI-Device
ServerSignature
X-Dns-Prefetch-Control
X-AEM
X-HTML-Minification-Powered-By
X-ClientSide-Caching
ServerTokens
SBGI-10
X-SRV
X-Varnish-Hits
SBGI-RenderTime
SBGI-5
Eomportal-Instance
X-AF-Userserver
X-Hit-Cache
X-Pagename
Content_type
X-WPL-DATA
X-Session-ID
SBGI-1
X-Sucuri-ID
Cache-Tags
Magicmarker
X-VARITI-CCR
X-Shield-Request-Id
X-Processed-By
X-VTEX-Cache-Status-Janus-Edge
X-Drectory-Script
X-Jphone-Copyright
WWW-Authenticate
Thanks
NetMindSessionID
Contao-Page-Layout
SiteSpeed
X-Page
X-Runtime-Memory
X-FTR-Request-ID
W
X-Trace-Id
Max-Age
Ufe-Result
SVR
Frame-Options
WN
X-DEBUG
X-Resty-Request-Id
Tracecode
Cache-Tag
X-WN-ClientGroup
X-Orig-Vary
X-Fedora-School-Id
X-Traffic
X-HW
X-Route-To
X-Disney-Akamai-Rule
EagleEye-TraceId
NtCoent-Length
X-Compress-Hint
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Twitter-Response-Tags
X-ASAP-Cache
X-Clara-ASAP
X-RiS-UFDI
X-Varnish-Debug-Age
Web-App-Origin-Name
Adm-Server
X-Application
X-A
X-ServerIndex
X-Varnish-Debug-TTL
X-Transaction
X-Connection-Hash
X-Cache-Dispatcherpragma
X-Cache-Dispatchercachecontrol
X-Generated-Time
MW-Webserver
X-Env
A-Powered-By
Proxy-Agent
Yoncu-Errno
X-LP
Noq
VServer
Environment
X-Cache-Doesi
Ramp
X-Sorting-Hat-Expire-Cache
X-AVG-Country-Code
X-Avg-Cookie-Expires
X-Akamai-Edgescape
X-Redman-Backend
X-Redman-Final-Url
From-Origin
X-SERVER-NAME
Server-ID
VANITY-HOST
Ram
X-CB-Server
X-WA-Info
AsisCache
X-Balanceador
X-Desc
X-GeoIP
X-TTFB
X-Varnish-Hostname
X-FireWall-Port
X-Environment-Context
X-MAT-GEO
X-Client-Vid
Paypal-Debug-Id
Cmstype
X-Plat
X-Varnish-Id
X-L-Path
X-Webstats-RespID
Service-Worker-Allowed
Pics-Label
Smug-CDN
Cmsid
X-EPiphany-Vid
SHInfo
X-TTFB-L
X-Gateway-Skip-Cache
X-Client-Image-Vid
X-LW-Web-Server
Description
X-VNode
Play-Detected-Device
Play-Detected-UserAgent
X-PRAM
Keywords
X-Unique-ID
X-Stage
X-SmugMug-Values
X-Force
X-WebKit-CSP-Report-Only
Hname
IISExport
X-CAPServer
X-VC-Enabled
X-SmugMug-Hiring
X-ARRServer
X-Hosting-Env
X-Sucuri-Cache
X-SDE-Name
X-Gateway-Cache-Key
X-Gateway-Cache-Status
X-Magento-Action
X-HydroSheep
X-Symfony-Cache
Url
X-NginX-Server
ScoreTracker
X-Proto
X-SV
X-GoCache-CacheStatus
X-Resource
X-VC-TTL
X-Vcache
Dispatcher
X-Backend-Status
X-Webkit-CSP
Beyond-Iis
AC-ELC
X-Cache-On
X-App-Runtime
X-Cache-Node
Machine
X-Amz-Meta-S3b-Last-Modified
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Frames-Options
X-Rack-CORS
X-Runtime-Affili
Hostname
Og
X-Fstrz
BALANCEDTO
SG
X-RDP
X-Response
X-CRA-DC
RequestId
X-Wikidot-Backend
X-Wikidot-Static-Cache
FRONT-END-SECUREBROWSER
X-Amz-Meta-Cb-Modifiedtime
X-Analytics
X-GSL-Server
X-Varnish-Server
X-Amz-Meta-Content-Md5
Fastly-Backend-Name
Backend-Timing
X-Distributor
X-E
X-Src-Webcache
X-Key
X-Secret
X-TB-M
X-Compressed-By
XX
X-Directory-Script
XDomainRequestAllowed
X-Cocoon-Version
X-Domain-Checked
Dis-Env
X-App-Status
X-Request-Uri
X-IIJ-Cache
X-Detected-Device
X-WP
X-Smartcache-Timeout
X-Cms-Mode
Worker
X-Dw-Trace-Id
X-Dev
X-Garden-Version
X-Smartcache-Keys
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Real-IP
X-Avvio-Cms-Cacheload
X-Provisioner-Version
X-Varnish-ID
X-Varnish-Action
X-Culture
X-SH-Cache-Status
SS
X-Atraveo-Param-Rm
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
From
Web
X-Atraveo-Set-Cookie
X-Forwarded-Host
X-Source-ID
RN-Server
X-Cache-Extended
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
Identity
X-KoobooCMS-Version
TP-Cache
Nginx-Cache
X-Atraveo-Zone
WP-AdvCache-MemCached
X-Origin-Server
Access-Control-Allow-Method
COMMERCE-SERVER-SOFTWARE
X-Atraveo-ETag
Bios
X-Atraveo-Cache-Control
TP-L2-Cache
X-Lb
X-Machine
X-CacheResult
X-RealServer
X-Goog-Meta-Policy
X-Goog-Meta-Replace
Id
X-Debug-Token
TC-S-Cache-M
X-Session-Reinit
X-SmartBan-Host
X-SmartBan-URL
X-Redirector
X-Highwire-SessionId
X-Remote-Addr
X-Grid-Server
X-Highwire-RequestId
X-Time-Microsecs
Ctx
TC-S-Cache
X-Resolver-IP
X-Airee-Node
TC-Cache-U
TC-Cache-IC
X-NginX-Cache
TC-Cache
X-Ghost-Cache-Status
Myheader
X-Cluster
X-DB-Content-Length
X-Varnish-Cache-Local
OriginServer
X-B2f-Not-Route
X-Aramark-SID
X-HP-Trace-ID
Home
Il-Cl
Proxy-Cache
Traffic-Origin
X-HashTwo
Ec-Machine
X-Confluence-Request-Time
X-Rewrite
X-LDNR-NOT-ROOT-HL-NOTSET
Ec-CorrId
X-Hosting
X-OPNET-Transaction-Trace
AMP-Access-Control-Allow-Source-Origin
X-Amcomm-Site
X-Data-Request
X-Search-Id
X-Req-Head-Response
X-DTC
X-FPC
X-Pubstack
X-Mobile-URL
X-Depends
X-Cache-Via
Device
X-V
Lb
NLCacheNote
X-Adnet
X-Flex-Community
X-Flex-Tags
X-HP-Trace-Project
X-Map-Context
X-Nginx-Host
X-Flex-Tag
X-Flex-Lastmod
X-Flex-Evend
X-Flex-Evstart
X-Flex-Lang
X-Sites
X-ACCELERATE
X-MCB-Server
X-Autoru-Host
X-AutoRu-App-Id
X-Render-Time
X-Origin-Cache
Ibf5scheme
X-Autoru-LB
X-Info
X-Viator-Tapersistentcookie
X-WHOIS-Cached
X-MidCOM-Meta-Cache
X-PHP-Response-Code
X-Box
SERVER-ID
Access-Control-Allow-Header
N365rili
Hummingbird-Cache
X-Akamai-3PM-SW-Version
X-Author
X-Cache-TTL-Remaining
Strikingly-Cached
X-Distil-CS
X-ESI
X-Cache-Varnish
X-Magento-Lifetime
HitType
X-Cdn-Forward
X-Bip
X-NID
Accept-Language
CLMOB
X-EC2-Instance-Id
Strikingly-Cached-Version
VC-NoCache
Strikingly-Cache-Region
Aoestatic
X-AISO-Server
X-PM-ID
X-Tag-Playlist
X-SilverStripe-Cache
X-Cache-Me-Harder
X-NodeID
X-DataDome
X-AISO-Cache
X-CACHE-TTL
X-AISO-Cacheable
Server-Id
CommercePlatform-Version
PServer
Ews
OracleCommerceCloud-Version
X-Proxy-Skip
X-Protected-By
OracleCommerceCloud-Sandiego
X-Powered-By-Home.Pl
Ez
X-Acquia-Debug-Password
X-Sid
X-Amz-Id-1
Upgrade-Insecure-Requests
X-ETag
X-Gannett-Site-Version
X-IP
Accept-CH
Disablevcache
X-HAProxy
X-4ormat-Cacheable
X-DSMX-Rewrite-MS
F5-IpCliente
X-App
X-DSMX-Render-MS
X-Backend-Host
X-Bcwwwid
X-LBPoolMember
Gzip
X-Rack-Cors
Copyright
Content-Generator
X-Gyrobase-Publication
ClientIP
X-Country
Ohc-Response-Time
X-OCTOPOD
X-Node-Name
X-Header
X-Streams-Distribution
NS-VaryByCustom-Key
X-7d-Instance-Id
X-Client-Ip
BackendServer
ID
X-Zendesk-User-Id
X-ASAP-Age
X-Zendesk-Origin-Server
X-Served-Server
X-Hrouter
X-DN-Cache-Control
X-Agent
PagesDisplayed
Cleartype
X-Hstore
X-HS-Status
X-DynamicCache
X-7d-Trace-Id
X-Batcache-Reason
X-Reflector
X-ManagedFusion-Rewriter-Version
X-Nginx-Request-Processing-Time
X-Cache-Detail
Ttl
Server-Ip
X-Batcache
Xc
X-Serv
X-Rewritten-By
NZSpeedy
X-Cache-Keep
X-Reflector-Cache
X-Server-Addr
X-Pj-Cache-Status
X-HP-CAM-COLOR
X-Amz-Meta-Version-Id
X-Az
X-AppVersion
X-Debug-Token-Link
X-Beatles
X-Apm-Telemetry-Syncmark
X-Cache-ID
X-Cache-Time
X-CloudBurst-Cache
X-CloudBurst-Backend
RSB-LINK
HostName
X-Full-Url
X-Custom-Header
X-Route
X-Svr
GranicusServer
EQ-Cache
X-CloudBurst-Frontend
X-CloudBurst-WordPress
Generate-Time
X-Served
MS-CV
Tesla.Performance
Viewport
ViewMode
X-Made-On
X-Header-Treatment
X-CSRF-Token
X-Cname-TryFiles
X-Deity
X-Domino-CacheValidationWithETagReason
X-HEAD
X-Domino-CacheValidationWithETagResult
X-Activity-Id
MageStack-Cache-Lifetime
X-UPSTREAM-Address
X-RiS-PX
X-Nginx-Request-Time
X-Middleton-Pagespeed
X-WebNode
Fastly-Restarts
X-MainProfileCategory
X-Container
Tk
X-Instance-Id
Session-Id
AR-ATIME
Z-Tpl
Y-Trace
X-Transaction-Name
AR-CACHE
AR-PoweredBy
ProxiaInstanceId
CommunityServer
AR-SID
X-MainProfileID
X-MainProfileName
X-Captured
Actual-Object-TTL
X-Via-NSCOPI
X-Tt-Dbg
X-Refresh
X-Catalyst
X-CDN-RULE
X-CDN-COMPRESS
TZ-Server
X-SE-Debug
X-REDIRECTSERVER
FindLaw
X-Obvious-Tid
X-Obvious-Info
X-MainProfileURL
Swift-Performance
X-DEBUG-HOST
X-Phpwcms-Release
X-Phpwcms-Page-Processed-In
X-ENV
X-T
X-S-V
MageStack-Cache-Warning
MageStack-Cache-Status
X-Cache-Original-TTL
MageStack-Cache-Hits
MageStack-Cacheable
MageStack-Config
MageStack-Magento-Version
MageStack-Loadbalancer
MageStack-Debug
MageStack-Cache
MageStack-Area
X-Middleton-PageSpeed
X-JSESSIONID
X-HA
X-FastCGI-Cache-Status
X-Serverid
X-UA
Key
Amfplus-Ver
X-UT-Cache
MageStack-PageSpeed
MageStack-Tag
X-Mw-Workerstats
X-M-V
X-M-T
X-M-P
X-Pageid
X-Pool-Info
X-S-C
X-RAMCache
X-Q-S
X-Instart-Cache-Id
X-I-V
X-B
Provided-Host
MageStack-Web-Node
X-Beresp-Ttl
X-Cachable
X-HeBS-Cache-Status
X-FIRSTBase
X-CH-Device
X-Debug-Message
Control-Cache
Page-Template
MachineName
SB-Cache-Life
SB-Cache-Remaining
X-DS1D
SB-Site-Device
Debug-Status
X-Omnis-SiteID
X-Meta-MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
X-Nginx-Page-Cache
X-Node-App
X-Unique-Id
X-Secure
X-Enhanced-By
X-FG-RequestId
X-Highwire-Sitecode
X-Artvisual-Server
X-Highwire-Smart-Code
X-Pass-Through
X-PROCESSED-BY
X-PBY
X-AMAZEEIO
Provider
X-ReqId
X-NO-BREACH
X-Machine-Name
X-Timestamp
DeleGate-Ver
X-Meta-Imagetoolbar
X-Hit
X-ServiceProvider
X-Server-FQDN
X-Time-Zone
X-Varnish-Instance
X-XHR-Current-Location
X-VLoc
X-Pagely-Cache
X-Nitro-Cache
Progma
Kanooh-Host
X-CacheID
X-Config-By
X-ELB
Arrnode
CmsfirstPublishTimestamp
X-Cache-Bypass
X-SuperCache
X-DDM-SERVER-UPDATED
X-DDM-SERVER
Warning
X-CO-Host
StatusCode
Session-From
MSSmartTagsPreventParsing
EN-User
X-Cache-Id
Response-Time
ServerIP
X-Proxy-Cache-Key
MSThemeCompatible
X-ZSITES-DNS
DrivedBy
X-Cacheable-TTL
Language
X-Turpentine-Esi
X-Who
X-W3TC-Minify
X-Webcelerate
X-VC-Hash
X-BServer
X-BPool-Fx-Cache
X-BPool
X-VC-Cache
X-Blog
TheAnswer
X-BPool-Back
X-VC-Debug
X-VC-Cacheable
X-BPool-Bx-Cache
X-Cjtype
X-Title
X-ACLR-Version
X-Server-Instance-Name
User-Agent
X-Server-Generated
X-Layout
CpuTime
Cacheid
X-SCM-Server-Number
X-Upstream-Status
X-Static
X-UnsetCookies
X-Varnish-Grace
X-HOSTNAME
X-Pixelsilk-Version
X-Akam-SW-Version
X-FORWARDED-PROTO
X-Pixelsilk-Server
FastCGI-Cache
X-Cache-TTL-Age
X-Cache-TTL-Current
X-Old-Content-Length
CS-SERVER
X-Dynamic-Cache
WSCLoggingUUID
Expiries
X-Instance
WP-FROM-CACHE
X-MSEdge-Ref
Countrycode
No-Cache
Content-Cache
UrlWatchModule-Time
X-AppServer-Cache-Rule
X-D-Time
Apple-Itunes-App
Server-Hostname
X-B3-Traceid
X-Cacheable-By-Varnish
X-Upgrade-Enabled
X-VG-WebCache
X-B3-Spanid
X-Generation-Time
X-Member
Serverid
Head
X-Built-With
NKBVHEADER
X-CPU-Time
X-ProcessESI
Cache-Status
X-PG
HA-Servedtime
X-S-Misc
Xcache
X-SH-Cache-Disabled
X-Ants-Machine-Id
X-NewsFlow-Sitename
X-MyName
X-PBS-Appsvrip
X-PBS-Appsvrname
X-PBS-Fwsrvname
X-Healthy
X-Cache-FS-Status
X-Proxy-Backend
Referer
Powered-By-115
ReqUrl
X-Prerender-Token
X-SSLProxy
X-Skip-Cache
D
Hamster
X-Locale
X-Geo-IP
X-Dealeron-Original-Url
X-SSLUpstream
X-Svr-Proxy
IES-Server
X-Dealeron-Backend
Request-Filtered-By
X-Varnish-Debug-Hits
X-NMT-Proxy
X-Test-Debug
X-Varnish-Cache-Ttl
X-XHTML-Minification-Powered-By
X-CGP
X-Ants-Host
X-RequesterIP
X-Site
X-Theme
CDCHOST
TestCC
Load-Balancer
X-Gateway-Rate-Limit-Conn
X-Gateway-Rate-Limit-Delayed
X-M
X-Origin-Date
L5d-Success-Class
X-Reason-Bp
V-Age
X-Backend-Name
X-ClusterID
X-Prerendered
X-RemovedCookies
X-MCF-ID
X-DevSrv-CMS
SINA-LB
Returned-Status
SINA-TS
X-Does-He-Have-Time
SB-Site-IE-VERSION
X-Session-Id
X-Restarts
Edgecast
X-WR-MODIFICATION
MwpReleaseVersion
V-TTL
Webserver
X-Fastly-Backend-Reqs
X-Ao-Cache-Key
X-Cache-V
X-Beatles-Hits
X-Cache-Set
Container
Www.Aujourdhui.Com
Note
X-Status
X-SCProxy
X-Your-GrandPa-Would-Wait
X-Would-Your-GrandPa-Wait
X-Cache-ASPX
X-Built-By
X-K8s
X-Ssl-Cipher
X-Request-Processing-Time
PB-PID
X-Request-Received
X-Cache-LB
X-BIT-Node
X-Processed
X-Say-Cacheable
X-Say-TTL
X-SayCDN-TTL
X-Mobile-Rewrite
User-Cache-Control
X-TTL-Age
X-TLS-Version
X-ACache
Redirect-Reason
X-Distributed-By
HA-Geocountry
X-Homeaway-Requestmarker
HA-Geolat
HA-Geolon
PB-RID
VAR-Cache
X-Script
Resin-Trace
HA-Geocity
X-Olaf
HA-Georegion
X-DeliveryServer
HA-Ipaddr
X-Hash
X-MSU-SOURCE
X-DEBUG-TTL
X-Fpc
Requested-Host
HA-Host
X-Clx-Request
Arrow-RequestId
Access-Control-Request-Headers
X-Test
X-Optimization
BlockPHPCallEnd
HA-Urlpath
X-Max-Age
Realaction
X-Proxy-Id
X-Uncacheable
X-Sc-Cache
X-This-Proto
Actioncode
X-Sn-Servicetimems
DNNOutputCache
HA-Cloudapp
X-ServerAddr
DB-Nickname
X-UPServer
Be
X-Varnish-Cached-TTL
X-Varnish-Cached
X-PoweredBy