Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
Age
X-Cache
Expect-CT
P3P
Content-Language
X-AspNet-Version
X-Pingback
Via
X-UA-Compatible
Upgrade
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Varnish
Referrer-Policy
X-Request-Id
X-Adblock-Key
X-Check
X-Generator
X-Xss-Protection
X-Type
WPE-Backend
X-Language
X-Template
X-Cache-Group
X-Pass-Why
X-Drupal-Cache
X-Buckets
Alt-Svc
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Ac
X-Hacker
X-Cache-Hits
Host-Header
X-ShopId
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-PodId
X-Dc
X-ShardId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-Section
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-Alternate-Cache-Key
X-AspNetMvc-Version
X-Via
X-Served-By
X-Powered-By-Plesk
X-Runtime
X-Contextid
X-Amz-Cf-Id
X-PC-Hit
X-PC-Key
X-PC-AppVer
X-UA-Device
X-ServedBy
MS-Author-Via
X-PC-Date
X-PC-Host
Content-Location
Access-Control-Allow-Headers
X-IPLB-Instance
X-Timer
Access-Control-Allow-Methods
X-Powered-CMS
X-Wix-Request-Id
X-Seen-By
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
Status
X-Rid
CF-Cache-Status
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-Shopify-Stage
Cartoon
X-Tumblr-Pixel-1
X-FRAME-OPTIONS
X-Iinfo
Access-Control-Allow-Credentials
X-Backend
X-Tumblr-Pixel-2
X-CST
X-Cache-Status
X-Ua-Compatible
Content-Encoding
X-WPE-Loopback-Upstream-Addr
Powered-By
X-Host
X-Endurance-Cache-Level
X-Cache-Enabled
X-Cache-Hit
X-Port
X-Mod-Pagespeed
X-CDN
X-Tumblr-Pixel-3
X-Logged-In
X-Server
X-Server-Powered-By
X-Drupal-Dynamic-Cache
X-DIS-Request-ID
Keep-Alive
X-Nginx-Cache-Status
X-Request-ID
X-Robots-Tag
X-Proxy-Cache
X-Accel-Version
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Turbo-Charged-By
X-LiteSpeed-Cache
X-Page-Speed
P3p
X-Content-Powered-By
X-Content-Digest
Content-Security-Policy-Report-Only
X-GitHub-Request-Id
X-FW-Hash
Request-Context
X-FW-Server
X-AH-Environment
X-Rack-Cache
X-FW-Static
X-FW-Type
X-FW-Serve
X-Tumblr-Pixel-4
X-Pad
X-Varnish-Cache
X-Hits
X-Webcom-Cache-Status
X-Died
Edge-Control
Access-Control-Expose-Headers
X-Trace
X-XRDS-Location
X-BC-Stapler
SPRequestGuid
X-MS-InvokeApp
X-SharePointHealthScore
X-Newrelic-App-Data
Edge-Cache-Tag
MicrosoftSharePointTeamServices
X-HS-Cache-Config
X-HS-Content-Id
WP-Super-Cache
X-Amz-Request-Id
X-Amz-Id-2
Cf-Railgun
X-Node
X-CF-Powered-By
X-Request-Country
Timing-Allow-Origin
Charset
X-Content-Security-Policy
X-Cache-Lookup
X-FullPageCaching
Request-Id
X-INKT-URI
X-INKT-SITE
Allow
X-Fastly-Request-ID
X-HS-Combine-CSS
Access-Control-Max-Age
X-PHP-Backend
X-Backend-Server
X-Cnection
SPIisLatency
SPRequestDuration
X-Edge-Cache
X-Edge-Cache-Key
Ali-Swift-Global-Savetime
X-Swift-SaveTime
X-Swift-CacheTime
MicrosoftOfficeWebServer
X-CDN-Pop-IP
X-CDN-Pop
EagleId
Composed-By
Rating
Grace
X-Safe-Firewall
X-Device
X-Server-Name
X-DDC-Arch-Trace
X-Tumblr-Pixel-5
Served-By
X-NF-Request-ID
X-Tumblr-Content-Rating
X-Dw-Request-Base-Id
X-Spip-Cache
X-SS-Conf
X-SS-Location
Liferay-Portal
X-SERVER
Front-End-Https
X-Hyper-Cache
X-VCache
X-HeyJason
Permitted-Cross-Domain-Policies
X-Do-Not-Hack
P-WS
P-LB
X-Cloud-Trace-Context
X-LiteSpeed-Cache-Control
X-Cluster-Node
Surrogate-Control
X-Kinsta-Cache
X-OneAgent-JS-Injection
X-Firenze-Processing-Times
X-Servedby
X-Original-Date
X-Loop
X-TNCMS
X-Middleton-Display
Display
X-Sol
X-Middleton-Response
Response
X-Clacks-Overhead
X-RateLimit-Reset
X-RateLimit-Limit
X-RateLimit-Remaining
X-Acc-Exp
X-Vtex-Processado-Em
X-StackifyID
Public-Key-Pins
X-FB-Debug
X-Jimdo-Wid
X-Jimdo-Instance
Feature-Policy
X-Debug-Info
Content-Style-Type
X-HOST
X-Amz-Version-Id
Content-Script-Type
X-Magento-Tags
Xkey
X-Webserver
X-WebKit-CSP
Refresh
X-Frame-Option
X-Age
X-DNS-Prefetch-Control
X-PhApp
Fpc-Cache-Id
X-Ruxit-JS-Agent
X-LW-Cache
X-Goog-Hash
X-XN-Trace-Token
X-XN-XNHTML
X-Tumblr-Pixel-6
X-Cached
X-Zen-Fury
X-N-OperationId
X-Px
X-DynaTrace-JS-Agent
X-User-Agent
X-Hostname
X-ARC
PageSpeed
Retry-After
X-Cache-Config
X-Version
X-Generated-By
X-Upstream
X-Edge-Location
X-Url
X-Handled-By
X-Topify-Platform
X-Goog-Storage-Class
X-Goog-Generation
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Goog-Metageneration
WPX
X-Dns-Prefetch-Control
X-Loopia-Node
TCN
Access-Control-Request-Method
X-Whom
Rt-Fastcgi-Cache
X-Magento-Cache-Debug
X-FORWARDED-FOR
X-EdgeConnect-Origin-MEX-Latency
X-B-Cache
X-MiniProfiler-Ids
Powered
X-Source
X-Cached-By
X-Accel-Expires
X-ET-API-VERSION
X-ET-API-ROOT
X-ET-API-ORIGIN
X-CMS-Version
Fastcgi-Cache
X-EdgeConnect-MidMile-RTT
X-RESOURCE
X-URLSCHEME
X-SRCache-Store-Status
X-Outils-CS
X-SRCache-Fetch-Status
X-Request-Time
No
X-Vtex-Remote-Cache
X-Vtex-Processed-At
X-VTEX-Janus-Router-Backend-App
X-Powered-By-VTEX-Janus-ApiCache
X-CacheServer
X-VTEX-Cache-Status-Janus-ApiCache
X-Microcache
X-Engine
ServedBy
Pagespeed
Last-Published
X-Fastcgi-Cache
X-Content-Options
X-ApacheServer
X-PERF
X-Varnish-Cache-Hits
X-Platform-Server
X-Varnish-Count
X-Varnish-HitMiss
X-Application-Context
X-LBLID
X-Developer
X-AspNetWebPages-Version
X-Platform-Cluster
Product
Warning
X-Platform-Router
X-Platform-Processor
X-DynaTrace
Cache-Key
X-Varnish-Host
Fhost
X-Signature
X-F-Cache
Host
Imagetoolbar
X-Shop-Id
X-Defender
Generator
X-From
X-Location-Id
X-S
Dmn
X-Actual-URL
X-Cache-Key
X-Microcachable
X-Ezoic-Cdn
X-Returned-From-DLL
X-Passed-To
X-Returned-From
X-Original-Request
X-Passed-To-DLL
Public-Key-Pins-Report-Only
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Device-Type
X-Cache-Age
X-Varnish-Beresp-Grace
X-Forwarded-For
X-Cache-Info
X-Umbraco-Version
X-Response-Time
X-Stale
X-URL
X-Acquia-Application-Trace
X-Magento-Cache-Control
X-Acquia-Application-UUID
X-Hosted-By
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
X-NWS-LOG-UUID
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Platform
X-HS-Content-Campaign-Id
Cache-Provider
Alternate-Protocol
X-GUploader-UploadID
X-Micro-Cache
X-Microcache-Status
X-Translation
X-Gateway-Skip-Cache
X-SSLProxy
X-Gateway-Cache-Status
Content-Hash
X-Environment
Arr-Disable-Session-Affinity
X-SSLUpstream
X-Gateway-Cache-Key
X-Lambda-Id
Origin
X-Platform-Cache
X-Powered-By-360WZB
X-Rnd
X-Via-JSL
X-SVR-IIS
X-Akam-SW-Version
X-Svr-Proxy
Surrogate-Key
X-Duration
Version
X-Cache-Namespace
X-Sapient
DynaTrace
X-Track
SSPAppContext
X-Guploader-Uploadid
X-Msg-2-Log
X-Cache-Tags
X-SO
X-BS
X-I-Sp
X-Cache-Rule
X-Varnish-TTL
X-Abgroup
X-Supported-By
MIME-Version
X-TransIP-Balancer
X-DealerOn
X-Dealeron-Backend
X-Dealeron-Original-Url
X-Cache-TTL
Content-Disposition
X-ORACLE-DMS-ECID
X-Powered-By-VTEX-Janus-Edge
X-Server-ID
X-SSL-Cipher
X-Expires-Orig
X-App-Status
S-Cnection
USPLoggingUUID
X-Dispatcher
X-TransIP-Backend
X-Front
X-Instart-Request-ID
X-NetCat-Version
WZWS-RAY
X-Correlation-Id
X-Vcap-Request-Id
RTSS
X-Server-Upstream
X-SSL-Protocol
X-Correlation-ID
X-Cache-Control-Orig
X-App-Hosting
X-Varnish-Seen-By
X-Varnish-RemainingTTL
X-Varnish-GracePeriod
X-Varnish-ObjectSource
X-Matrix-Proxy
Pool
X-Varnish-RemainingLife
X-Matrix-Server
X-Drupal-Cache-Tags
X-VARITI-CCR
Node
X-Hypernode
X-Sucuri-ID
X-ServerName
X-Page-Cache
X-CSRF-Protection
X-Debug
X-Gamma-Serve
X-Route-Server
FAI-W-FLOW
X-Generated
SN
Cache
X-Client-IP
X-Storage
X-Cache-Lifetime
X-Amz-Meta-S3cmd-Attrs
Powered-By-ChinaCache
X-Varnish-Cacheable
X-Art-Request-Id
X-Revision
X-ATG-Version
X-Sucuri-Cache
X-Edge-IP
Content-Encoding-Handler
Cache-Tags
X-NewRelic-App-Data
X-Varnish-Url
Src-Update
X-UD-Method
Update-Time
Accept-Encoding
X-Director
X-Daa-Tunnel
Req-Id
X-Flow-Powered
X-Helper-Autoassign-All
X-I
X-Powered-By-VelaWeb
X-Env
X-Cache-Debug
X-Grace
X-NoCache
X-Github-Request-Id
Contao-Page-Layout
X-TTFB
X-SmugMug-Values
X-SmugMug-Hiring
Wsr-Cache
X-TTFB-L
Smug-CDN
X-Discourse-Route
X-Recruiting
X-Rocket-Nginx-Serving-Static
X-Geo-Country
X-SV-Pid
X-SV-Nginx-Duration
X-Rocket-Nginx-Bypass
X-SV-CreatedAt
X-SV-FromDBCache
X-Cache-Server
X-SV-Duration
X-SV-Edge
X-Firenze-Processing-Time
X-FTR-Request-ID
X-Content-Type-Option
X-Now-Id
X-Forwarded-Proto
X-SV-CacheTags
X-SV-Cacheable
X-Locale
X-SV-Expires
X-LB-Server
X-Country-Code
X-Last-Modified
CF-Worker-Version
X-Url-Base
ServerID
X-Cache-Engine
X-Cache-Handler
X-Content-Encoded-By
Service-Worker-Allowed
X-GeoIP-Country-Code
X-Drupal-Cache-Contexts
X-Server-Instance
CF-Worker-Script
X-Unbounce-PageId
Cneonction
X-Unbounce-VisitorID
X-Unbounce-Variant
X-Esi
X-Varnish-Age
X-CJ-Soft
X-IsCacheURL
X-Ttl
X-ORACLE-DMS-RID
X-Nginx-Cache
X-Vhost
Lsrequestid
Author
X-Server-Id
X-Varnish-Backend
X-SRV
X-Pressidium-NinukisWP-Ver
X-Cache-Level
X-PwB-Node
X-Middleware-Start
Strikingly-Cache-Region
Strikingly-Cached
X-Trace-Id
X-UPSTREAM
Backend
X-N
Strikingly-Cached-Version
X-Dispatch
SiteSpeed
X-Cache-Only-Varnish
X-GeoIP-Country-Name
X-TransIP-Reserved
Edge-Control-Message
X-Cache-Type
Srv
Server-Timing
X-Cache-Control
X-Twitter-Response-Tags
X-Connection-Hash
X-CF-Passed-Proto
SEOMOZ
MJ12bot
X-Transaction
X-High-Performance
Use-Proxy
Section-Io-Id
Akamai-IP
X-Varnish-Retries
X-Speed-Cache-Key
X-Hiawatha-Cache
Server-Name
X-Speed-Cache
X-NA-CachePolicy
X-SRCache-Key
If-Modified-Since
X-LB
X-TTL
Proxy-Connection
X-Akamai-Device-Characteristics
Pv
X-Rq
Dtk-Cache-Check-0
X-Akamai-Device-Model
W
X-BKSrc
X-Empowered-By
X-SDS
X-Time
X-Processing-Time
AMF-Ver
X-Cache-Device-Type
X-Cookie-Domain
NnCoection
X-Cache-Expires
PICS-Label
X-Cache-PageType
X-Fastly-Request-Id
X-Cache-Fix
X-FIRSTBase
Page-Completion-Status
S
X-Storage-Cache
X-Storage-Cache-Expires
X-NginX-Cache
X-Storage-Cache-Date
X-Config-Blacklist-Version
FindLaw
X-Amz-Storage-Class
X-Cache-Operation
X-CDN-Forward
X-Service-Id
Edit
Content-MD5
Custom-Header
X-Now-Cache
X-Litespeed-Cache-Control
X-Varnish-IP
Location
Accept-Charset
Web-App-Origin-Name
X-Wikidot-Backend
Nodo
X-Wikidot-Static-Cache
X-Worker
X-Amz-Rid
Https
X-Magnolia-Registration
Ohc-File-Size
X-Real-Server
Xc-Version
X-Content-Age
X-PF-Uncompressing
X-CacheFROM
X-HW
X-RequestId
X-Dynamic-Cache
Local-Info
ServerName
From-Origin
X-Symfony-Cache
X-Frontend
X-Dynatrace-Js-Agent
X-BackendServer
X-GoCache-CacheStatus
X-Analytics
Ramp
Qs-Cache
X-Runtime-Memory
X-Stage
Noq
Content-Transfer-Encoding
Pf.Web.Request.Id
X-Key
IBM-Web2-Location
Prama
Ram
X-Proxy-Backend
X-WR-MODIFICATION
Backend-Timing
X-FW
X-Pantheon-Environment
X-Adobe-Content
X-Browser
X-Adobe-Loc
X-Pantheon-Site
X-Pantheon-Phpreq
MC
Surrogate-Key-Raw
X-Pantheon-Az
X-ID
Cached
X-Srv
X-Content-Security-Policy-Report-Only
X-CB-Server
X-TB-M
X-ACMCache
X-Nitro-Cache
X-SP-UniqueName
X-Varnish-Server
X-ServerID
X-FireWall-Port
X-4ormat-Cacheable
X-WR-Flags
X-WEBSERVER
X-WPL-DATA
X-SP-Farm
Swift-Performance
Pics-Label
X-Culture
Frame-Options
X-Amz-Meta-Content-Md5
X-Ruxit-Js-Agent
Proxy-Agent
X-Processed-By
X-Cache-TTL-Remaining
X-Shard
Accept-CH
X-LW-Web-Server
X-App-Server
IM-Version
X-JG-Page-Cache
X-Yadis-Location
X-Akamai-Edgescape
X-Client-Image-Vid
Cm-Server
X-Client-Vid
X-Disney-Akamai-Rule
X-Server-IP
X-Hrouter
X-Hstore
X-Remote-Addr
X-Backend-Status
Adm-Server
X-EPiphany-Vid
X-Role
Request-Country
X-Yottaa-Metrics
X-CacheDebug
X-Yottaa-Optimizations
X-Redman-Final-Url
X-Avg-Cookie-Expires
Request-EU
X-Varnish-Hostname
SRV
Accept-Language
X-Webstats-RespID
X-AVG-Country-Code
X-Redman-Backend
X-Framework
SHInfo
X-Sedo-Request-Id
X-RealServer
X-Cache-2
X-Cache-Miss-From
NetMindSessionID
X-HydroSheep
X-UnsetCookies
Front
X-Hit-Cache
X-CLOUD-TRACE-CONTEXT
X-Akamai-Transformed
X-Cache-Ttl
Nopic
Lookup-Cache-Hit
X-Pagename
X-Source-ID
X-PRAM
Report-To
X-Cache-Dispatcherpragma
X-Force
X-Appmachine-Environment
X-Varnish-Hits
X-Ratelimit-Limit
X-Ratelimit-Remaining
X-HTML-Minification-Powered-By
Tracecode
X-MCB-Server
Environment
X-Plat
X-GeoIP
AsisCache
X-NginX-Server
X-VCS-Cacheable
Server-Info
X-Cache-Dispatchercachecontrol
X-Path-Route
Referer
Max-Age
Access-Control-Allow-Method
X-VCS-Ttl
RequestId
CacheControlHeader
X-Request-Uri
HCVer
X-Span
X-Debug-Token
X-Webkit-CSP
X-AEM
X-LP
X-Cache-CFC
X-Session-ID
X-Nbs
IISExport
Lb
X-Origin
X-Varnish-Id
X-Generated-Timestamp
Content_type
X-CAPServer
HAVer
Dispatcher
A-Powered-By
X-AOL-HN
Url
X-ClientSide-Caching
X-Forwarded-Host
X-ServerIndex
Hummingbird-Cache
Cleartype
X-Distributor
X-V
X-Real-IP
X-Oneagent-Js-Injection
X-A
X-Shield-Request-Id
X-Nginx-Dummy
X-Varnish-Ttl
X-Hosting-Env
X-Purge-URL
X-Varnish-Backend-Beresp-Backend
X-SDE-Name
Home
RN-Server
X-Proxy-Cache-Key
X-SERVER-ID
X-Purge-Host
X-Origin-Date
Eomportal-Instance
X-Sys-Req-ID
X-Unique-Id
X-Jphone-Copyright
X-Location
X-Envoy-Upstream-Service-Time
ScoreTracker
X-Balanceador
DNNOutputCache
X-VC-Enabled
X-JSESSIONID
SVR
Beyond-Iis
X-Akamai-ERPolicy
X-Akamai-ERRuleID
X-Distil-CS
Drupal-Pagecache-Memcache
X-Vcache
X-Drectory-Script
X-Atraveo-Varnish-Server-Id
X-Goog-Meta-Policy
X-Goog-Meta-Replace
X-Atraveo-Expires
X-NginX-Upstream
X-Consent-Required
Disablevcache
Server-ID
X-FastCGI-Cache
X-Cacheable-TTL
Machine
WWW-Authenticate
X-Cache-Doesi
Identity
X-HeBS-Cache-Status
X-LBPoolMember
X-Atraveo-From-Varnish-Cache
X-Atraveo-Set-Cookie
X-Atraveo-TTL
CDN-Cache
X-Nginx-Host
X-Atraveo-ETag
X-Atraveo-Cache-Control
X-NWS-UUID-VERIFY
X-Atraveo-Param-Rm
X-Atraveo-Zone
X-M-Log
X-Amcomm-Site
Traffic-Origin
X-E
X-Cache-Varnish
X-Highwire-RequestId
X-TKP-SRV-ID
Num
AMP-Redirect-To
X-Refresh
Yoncu-Errno
X-Varnish-Cache-Local
X-Batcache
Filters
X-M-Reqid
X-HashTwo
X-HA-Backend
X-Response
X-Cache-On
X-Rebelmouse-Cache-Control
X-HA-Frontend
X-SE-Debug
X-FastCGI-Cache-Status
X-CRA-DC
X-SmartBan-URL
AC-ELC
X-Qnm-Cache
X-Highwire-SessionId
X-Data-Request
X-SmartBan-Host
XX
Cteonnt-Length
Access-Control-Allow-Header
TC-S-Cache-M
X-Fedora-School-Id
X-Upstream-Status
X-ZSITES-DNS
*
Upgrade-Insecure-Requests
CS-SERVER
X-Upstream-Backend
YF-ID
X-Adnet
X-Actindo-Thread-Id
X-App
X-FPC
COMMERCE-SERVER-SOFTWARE
X-PBY
CLMOB
Access-Control
X-Map-Context
X-Flex-Evstart
X-Flex-Tags
X-Flex-Tag
X-Flex-Lastmod
X-Flex-Lang
X-Proxy-Cache-Control
X-Req-Head-Response
WP-FROM-CACHE
X-Via-S
X-Soro
X-Flex-Community
X-Flex-Evend
X-Actindo-Rs
X-Actindo-Request-Id
X-Aramark-CSID
X-SAPP
Locale
Proxy-Cache
TC-Cache-IC
TC-Cache
X-ETag
CDN-RequestId
BALANCEDTO
Arrnode
X-Aramark-SID
CDN-CachedAt
CDN-PullZone
TC-Cache-U
TC-S-Cache
Resin-Trace
X-Route
X-Timestamp
Il-Cl
VANITY-HOST
Myheader
X-Resolver-IP
X-Proxy
X-ACCELERATE
X-Upgrade-Enabled
Play-Detected-UserAgent
X-AF-Userserver
Play-Detected-Device
X-B2f-Not-Route
CDN-Uid
MageStack-PageSpeed
Paypal-Debug-Id
MageStack-Tag
MageStack-Cache-Lifetime
X-Amz-Meta-S3b-Last-Modified
Cmsid
X-Via-NSCOPI
MageStack-Debug
MageStack-Config
MageStack-Cacheable
MageStack-Cache-Status
MageStack-Web-Node
Viewport
Firespring-Website-Id
X-ARRServer
X-Varnish-Debug-TTL
X-Cms-Mode
X-Dev
MageStack-Area
X-Orig-Vary
Worker
MageStack-Cache-Hits
MageStack-Cache
X-Middleton-Pagespeed
MageStack-Magento-Version
Cmstype
X-Server-Addr
MageStack-Loadbalancer
X-MAT-GEO
IES-Server
VServer
X-RiS-PX
X-Desc
Load-Balancer
X-Varnish-Debug-Age
X-Compress-Hint
X-Smartcache-Keys
X-ESI
X-Cache-Detail
X-Bip
Copyright
MICROSOFTOFFICEWEBSERVER
X-Smartcache-Timeout
X-WP
X-Id
X-Serverid
X-Xml-Http-Blocked
X-IIJ-Cache
X-Provisioner-Version
X-Cocoon-Version
X-Domain-Checked
Serverid
X-App-Runtime
Magicmarker
AMP-Access-Control-Allow-Source-Origin
Prot
X-Fstrz
Dis-Env
Bios
X-Runtime-Affili
NLCacheNote
X-Varnish-Grace
X-Custom-Name
X-HA
X-Hit
Hosted-By
X-Streams-Distribution
DrivedBy
X-Unique-ID
Pragrma
X-Cache-Date
X-OpenCart-Lightning
X-Resource
X-Instance
MS-CV
X-WebServer
X-Lb
X-Status
X-DN-Cache-Control
X-Client-Id
X-SERVER-NAME
NGX
Xc
Fastly-Debug-Digest
X-Varnish-Action
X-Geo
X-DSMX-Render-MS
X-DSMX-Rewrite-MS
X-UA
X-Mobilized-By
X-Appversion
X-Info
X-Origin-Cache
X-Served-Server
X-Frames-Options
X-GeoIP-Country
X-Gyrobase-Publication
X-Rack-CORS
X-Rule
X-UT-Cache
Nitro-Cache
N365rili
X-V-Cache
X-DynamicCache
Edgecast
PServer
X-WEBMGR-CACHE
X-Application
Fastly-Backend-Name
X-WN-ClientGroup
X-Amz-Apigw-Id
X-Secret
FRONT-END-SECUREBROWSER
Actual-Object-TTL
X-Webcelerate
X-Autoru-Host
X-Autoru-App-Id
X-Amzn-RequestId
X-Amzn-Trace-Id
X-UA-Bot
X-Session-Reinit
X-PHP-Response-Code
X-ASAP-Age
Pramga
OracleCommerceCloud-Version
X-7d-Instance-Id
X-7d-Trace-Id
Srv-Name
OracleCommerceCloud-Sandiego
Thanks
X-SH-Cache-Status
X-RiS-UFDI
CommercePlatform-Version
Generate-Time
X-Garden-Version
Cf-Ipcountry
WN
X-WebNode
X-Amz-Id-1
X-Clara-ASAP
X-ASAP-Cache
X-Captured
Aurora-Node
X-Cdn-Forward
GranicusServer
X-CACHE-TTL
X-Gateway-Rate-Limit-Delayed
X-Appid
X-IP
X-ReqId
Provider
TP-L2-Cache
Og
X-DevSrv-CMS
X-LB-Node
Description
XDomainRequestAllowed
TP-Cache
Keywords
X-Proto
X-HostName
Nginx-Cache
X-Varnish-ID
X-Nginx
X-Cache-Extended
X-We-Are-Hiring
X-UUID
X-Ms-Request-Id
X-Directory-Script
X-Detected-Device
NZSpeedy
NODE
X-Cache-Me-Harder
Now
PB-RID
X-Wodby-Node
X-Cache-HT
PBS
X-Backside-Transport
REFRESH
PB-PID
X-Grid-Server
X-Origin-Upstream-Status
X-Src-Webcache
X-Now-Trace
X-Optimization
X-Mobile-Rewrite
X-PM-ID
X-GZip
X-Vary-Options
X-FromPodPressCache
X-Firefox-Spdy
X-Global-Transaction-ID
X-Podname
X-Vol-Correlation
X-Vol-Mrp
HTTPS
AETN-Area-Code
X-WA-Info
X-Goog-Meta-Goog-Reserved-File-Mtime
AETN-City
AETN-Continent-Code
AETN-DEVICE
AETN-Country-Name
AETN-Country-Code
X-Confluence-Request-Time
X-ZORequestID
MageStack-Last-Modified
MageStack-Cache-Warning
MageStack-Cache-Lifetime-Sent
X-Access-Control-Allow-Origin
X-Middleton-PageSpeed
X-Requestid
X-ProBase-Server
AETN-EU
AETN-Latitude
X-Nx-All
X-Nx
X-Dw-Trace-Id
IP-Addr
Section-Io-Origin-Status
X-Hosting
Server-Id
Section-Io-Origin-Time-Seconds
X-Static
X-Instance-Id
AETN-State-Code
AETN-Postal-Code
AETN-Longitude
AKA-DEVICE
Apachenode
X-GSL-Server
X-CacheID
X-This-Proto
X-Served
Ews
EQ-Cache
X-Varnish-Ip
ID
NS-VaryByCustom-Key
X-Cache-Time
X-Cache-ID
Access-Control-Request-Headers
X-TLS-Version
X-Test
X-Domino-CacheValidationWithETagResult
X-Domino-CacheValidationWithETagReason
X-Beatles
X-NoIndex
X-Served-From
X-Shopware-Cache-Id
X-Shopware-Allow-Nocache
X-CSRF-Token
X-DB-Content-Length
X-Deity
X-Debug-Message
X-Cname-TryFiles
X-Oferteo-Domain
X-Pj-Cache-Status
X-Resty-Request-Id
X-Processed
X-Cache-LB
X-Az
X-Tag-Playlist
X-RunCloud-Cache
X-Expires
VSID
Tempo
X-Activity-Id
Tesla.Performance
Ttl
X-Mighty-Proxy
ServerIP
Server-Ip
MSThemeCompatible
Session-From
StatusCode
X-Firewall
X-Cache-TTL-Current
X-Cache-TTL-Age
MSSmartTagsPreventParsing
Id
X-UPServer
X-MCF-ID
X-EC2-Instance-Id
X-Varnish-Cached
X-Varnish-Cached-TTL
Httpd-Identifier
X-Node-App
X-Instance-Name
X-Meta-Imagetoolbar
X-Nginx-Request-Processing-Time
X-Highwire-Smart-Code
X-Highwire-Sitecode
X-Origin-Server
X-ProcessESI
X-RemovedCookies
X-Proxy-Server
X-Generated-Time
X-Cache-Via
X-Scheme
X-Meta-MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
X-SSL-Host
MachineName
SS
MwpReleaseVersion
X-Cdn-Origin
X-Batcache-Reason
X-Phpwcms-Release
X-Phpwcms-Page-Processed-In
X-Cluster
X-Rack-Cors
X-Agent
X-SilverStripe-Cache
X-Sid
X-HS-Status
X-Compressed-By
X-Proxy-Skip
Content
CF-Cache-Key
D
X-Box
X-ENV
X-Cache-Action
X-SV
Web
Content-Sn
X-Server-Hostname
X-Proxy-Id
ModuleCacheType
TYPO3-Pid
ViewMode
TYPO3-Sitename
X-Policy
HSTS
Webserver
UrlWatchModule-Time
SBSS
X-Amzn-Remapped-Date
X-AppServer-Cache-Exception
X-AppServer-Status
X-AppServer-Cache-Rule
X-Serv
X-Always-Cache
Ssl-Proxy-Server
From
X-Gannett-Site-Version
X-Layout
X-Netrix-ID
HitType
X-Depends
X-Country
Response-Time
X-Airee-Node
X-Blog
X-BPool-Back
X-Built-By
X-BServer
X-NodeID
X-ManagedFusion-Rewriter-Version
X-Zendesk-Origin-Server
X-Protected-By
X-Title
X-Zendesk-User-Id
X-VC-TTL
X-Server-Generated
X-W3TC-Minify
X-Render-Time
X-Rewritten-By
Device
X-WHO
X-Cache-Warmer
X-Ms-Version
X-Sorting-Hat-Expire-Cache
X-MSU-SOURCE
X-Reflector-Cache
X-Reflector
X-VERSION
X-VTEX-Cache-Status-Janus-Edge
X-Clx-Request
Z
X-Container
Xxline
AR-CACHE
X-Author
AR-ATIME
Powered-By-115
262prline
X-HEAD
316pxxline
X-XHTML-Minification-Powered-By
X-Artvisual-Server
AR-SID
X-SuperCache
X-Thanos
X-VG-WebCache
X-Varnish-Cache-Control
X-Newrelic-Synthetics
X-DDM-SERVER-UPDATED
Content-Generator
Requested-Host
X-Amz-Meta-Cb-Modifiedtime
X-DDM-SERVER
AR-PoweredBy
X-Hostinger-Datacenter
SWS-Security
X-Cache-File
Value-Of-Url
X-MyName
X-OCTOPOD
X-FORWARDED-PROTO
WP-AdvCache-MemCached
X-Varnish-Cache-Ttl
X-Catalyst
X-DataDome
X-Dispatcher-Number
X-PBS-Appsvrip
X-PBS-Appsvrname
135prxHost
196prxHost
X-Hostinger-Node
259pxline
129prxHost
X-UPSTREAM-Address
X-PBS-Fwsrvname
X-WebKit-CSP-Report-Only
X-Amz-Meta-Version-Id
X-Stiffia-Cache
No-Cache
X-AWS
X-VC-Hash
X-Beluga-Response-Time-X
X-VC-Debug
X-VC-Cacheable
X-VC-Cache
CINC-Endpoint
NEL
X-Beluga-Node
X-HS-Content-Group-Id
X-Beluga-Record
X-Beluga-Response-Time
X-Beluga-Status
X-Beluga-Trace
HitInfo
Language
Www.Aujourdhui.Com
X-Cjtype
X-Page
X-Request-Received
X-Pool
X-Geo-IP
X-ENDPOINT
X-Request-Processing-Time
X-Beluga-Cache-Status
X-LAKANA-AB
Apple-Itunes-App
NtCoent-Length
X-Built-With
X-TNCMS-Bot-Tier
X-PageCache
AddDefaultCharset
X-InstanceId
X-UD-METHOD
X-Croise-Owner
X-ServiceProvider
Page-Template
Fastly-Restarts
X-Cache-FS-Status
X-Enhanced-By
X-APIAUTH-VAL
X-APIVERSION
X-BIT-Node
X-Cache-Id
Hit-Count
Purge-Cache-Tags
X-Flash-Messages
X-Cache-Node
Progma
X-ORIKEY
X-Beget-Proxy
X-Old-Content-Length
X-Abuse
X-InDy-Time
X-LB-Frontend
Ohc-Response-Time
HA-Status
SB-Cache-Remaining
SB-Cache-Life
Origin-Edge-Control
Origin-Cache-Control
X-LB-Backend
X-InDy-Query
Expiries
PROGMA
Debug-Status
X-Cache-Bypass
X-Sn-Servicetimems
Sl-Pgid
X-Dck
X-InDy-Memory
X-DODN-Region
X-DODN-Id
X-From-Cache
SB-Site-Device
SB-Site-IE-VERSION
X-Nginx-VM-RT
VAR-Cache
X-Varnish-URL
X-Machine
X-Telligent-Evolution
X-Obvious-Info
TestCC
X-RequesterIP
X-User-Agent-Tier
X-Page-Cacheable
X-Obvious-Tid
X-Custom-Header
CDCHOST
Tk
X-Nws-Log-Uuid
ServerTokens
ServerSignature
TTL
X-AMAZEEIO
X-Router
X-Client-Ip
X-Reqid
X-Apache2-RT-MicroSec
X-NMT-Proxy
X-Fpc
X-PressLabs-Stats
X-Rocket-Nginx-Reason
X-SCM-Server-Number
X-Test-Debug
X-SATserver
X-ROUTING
X-Search-Id
X-Req-Counter
X-T
X-Transaction-Name
X-Vid
SERVER-NAME
Ibf5scheme
Session-Id
ProxiaInstanceId
SINA-LB
SINA-TS
VC-NoCache
NB-Cache
Gzip
X-Skip-Cache
X-Max-Age
ClientIP
F5-IpCliente
X-RAMCache
X-Pageid
X-Powered-By-ADS
X-Pass-Through
X-Time-Spent
X-Varnish-Debug-Hits
DB-Nickname
X-B3-Sampled
X-Block-Rule
X-Node-Id
Cache-Ctrol
X-CacheLoc
X-Block-RuleID
Backend-Powered-By
Amfplus-Ver
X-Fastly-Backend-Reqs
X-Ghost-Cache-Status
X-Header
X-Rocket-Nginx-File
X-CH-Device
X-Beresp-Ttl
CommunityServer
Origin-Vm
Provided-Host
X-B
X-Avvio-Cms-Cacheload