Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
X-Cache
Strict-Transport-Security
P3P
X-AspNet-Version
CF-RAY
X-Pingback
Age
Content-Language
X-UA-Compatible
Via
Access-Control-Allow-Origin
X-Adblock-Key
Upgrade
X-Varnish
X-Cacheable
X-Check
X-Template
X-Language
Content-Security-Policy
X-Generator
P3p
X-Buckets
X-Drupal-Cache
X-Xss-Protection
X-Request-Id
X-Type
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Powered-By-Plesk
Content-Location
X-Cache-Hits
X-Runtime
X-Permitted-Cross-Domain-Policies
MS-Author-Via
X-Download-Options
Host-Header
Alt-Svc
X-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PodId
X-ShardId
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId-Cached
X-Dc
X-Sorting-Hat-Section
X-Alternate-Cache-Key
X-IPLB-Instance
X-Powered-CMS
Cartoon
X-Request-ID
Status
X-UA-Device
X-Served-By
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Via
X-Amz-Cf-Id
X-Iinfo
X-Cache-Status
X-Backend
X-Wix-Server-Artifact-Id
X-Contextid
X-Timer
X-ServedBy
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-PC-Key
X-PC-Hit
CF-Cache-Status
X-PC-Date
X-PC-AppVer
X-PC-Host
X-Mod-Pagespeed
X-DIS-Request-ID
Powered-By
X-Logged-In
Keep-Alive
Content-Encoding
X-Rid
X-Server
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Host
X-Cache-Hit
X-CDN
X-Port
X-Tumblr-Pixel-1
X-CST
Expect-CT
X-Server-Powered-By
Referrer-Policy
X-Robots-Tag
X-Pad
X-Tumblr-Pixel-2
X-Cache-Enabled
X-Nginx-Cache-Status
X-Endurance-Cache-Level
WP-Super-Cache
X-Accel-Version
Fastly-Debug-Digest
X-Page-Speed
X-Seen-By
X-Wix-Request-Id
X-Wix-Renderer-Server
X-Turbo-Charged-By
X-Wix-PunisherID
X-Content-Powered-By
X-Tumblr-Pixel-3
X-Drupal-Dynamic-Cache
X-Rack-Cache
X-Content-Digest
X-Varnish-Cache
X-AH-Environment
X-Forwarded-For
Content-Security-Policy-Report-Only
X-Forwarded-Proto
Surrogate-Key-Raw
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
SPRequestGuid
X-Proxy-Cache
X-SharePointHealthScore
X-GitHub-Request-Id
X-MS-InvokeApp
MicrosoftSharePointTeamServices
X-Cnection
X-Request-Country
X-XRDS-Location
X-LiteSpeed-Cache
X-Cache-Lookup
Edge-Control
X-Original-Date
X-Safe-Firewall
Cf-Railgun
Timing-Allow-Origin
X-FullPageCaching
MicrosoftOfficeWebServer
X-Amz-Request-Id
X-Amz-Id-2
Request-Id
X-Webserver
X-Died
X-FW-Hash
Charset
X-PhApp
X-Node
X-FW-Type
X-FW-Serve
X-FW-Static
SPIisLatency
SPRequestDuration
Edge-Cache-Tag
X-INKT-URI
X-INKT-SITE
X-Content-Security-Policy
X-Hits
X-HS-Cache-Config
X-HS-Content-Id
Composed-By
X-Tumblr-Pixel-4
Access-Control-Max-Age
X-CF-Powered-By
Liferay-Portal
X-Swift-SaveTime
X-Swift-CacheTime
Grace
Served-By
Content-MD5
EagleId
Access-Control-Expose-Headers
X-Hyper-Cache
X-Spip-Cache
X-CDN-Pop-IP
X-CDN-Pop
X-VWS-Id
X-LJ-Flow-ID
X-AWS-Id
X-BC-Stapler
X-Firenze-Processing-Times
Request-Context
X-Device
Rating
X-Backend-Server
X-Server-Name
X-Fastly-Request-ID
X-Newrelic-App-Data
X-Dw-Request-Base-Id
X-Microcachable
X-SERVER
X-Microcache
X-Tumblr-Content-Rating
X-RateLimit-Remaining
X-VCache
X-RateLimit-Limit
X-RateLimit-Reset
Refresh
X-FB-Debug
Content-Style-Type
X-Clacks-Overhead
X-Jimdo-Wid
X-Jimdo-Instance
X-ServerName
X-User-Agent
Content-Script-Type
X-Cloud-Trace-Context
X-TNCMS
Real-Hostname
X-Loop
Public-Key-Pins
X-Cache-Config
Xkey
X-XN-Trace-Token
X-XN-XNHTML
X-Acc-Exp
Front-End-Https
Surrogate-Control
X-DDC-Arch-Trace
X-Age
X-Aspnetmvc-Version
Fpc-Cache-Id
X-Hostname
X-Generated-By
X-Tumblr-Pixel-5
X-N-OperationId
PageSpeed
X-FORWARDED-FOR
X-Cached
X-Px
X-LiteSpeed-Cache-Control
X-DNS-Prefetch-Control
X-Middleton-Response
X-Middleton-Display
Response
X-Sol
Display
X-Topify-Platform
X-SS-Conf
X-SS-Location
X-MiniProfiler-Ids
X-Cached-By
Surrogate-Key
X-URL
X-Zen-Fury
X-StackifyID
X-Outils-CS
X-WebKit-CSP
X-Content-Options
X-CMS-Version
X-Url
X-Request-Time
X-Pantheon-Phpreq
Rt-Fastcgi-Cache
X-Pantheon-Environment
X-Pantheon-Site
TCN
X-Whom
X-Cdn
X-OneAgent-JS-Injection
X-HOST
X-Umbraco-Version
X-Handled-By
X-Varnish-TTL
X-Amz-Version-Id
X-Varnish-Cache-Hits
X-ApacheServer
X-PERF
X-AspNetWebPages-Version
X-Ruxit-JS-Agent
Access-Control-Request-Method
X-DynaTrace
Imagetoolbar
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-DynaTrace-JS-Agent
Product
Edge-Control-Message
X-Correlation-Id
Host
ServedBy
X-Engine
Alternate-Protocol
Powered
X-Micro-Cache
X-Kinsta-Cache
DynaTrace
X-Magento-Tags
X-Cache-Rule
Generator
Fhost
X-Powered-By-360WZB
X-NWS-LOG-UUID
P-WS
P-LB
WZWS-RAY
X-Servedby
X-From
X-Msg-2-Log
X-LBLID
X-Track
X-Hosted-By
X-CacheServer
X-Location-Id
X-Edge-Location
X-B-Cache
X-Actual-URL
X-Recruiting
X-Vtex-Processado-Em
X-Vtex-Processed-At
X-Vtex-Remote-Cache
X-VTEX-Janus-Router-Backend-App
X-Returned-From-DLL
X-Passed-To-DLL
X-VTEX-Cache-Status-Janus-ApiCache
No
X-Powered-By-VTEX-Janus-ApiCache
X-Returned-From
X-Passed-To
X-Original-Request
Arr-Disable-Session-Affinity
X-RESOURCE
X-VARNISH-Cache
X-Instart-Request-ID
X-Tumblr-Pixel-6
X-Passed-To-BeforeDispatch
X-Varnish-Beresp-Ttl
X-Passed-To-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Developer
X-Goog-Hash
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Powered-By-VTEX-Janus-Edge
X-BS
Fastcgi-Cache
X-I-Sp
X-Stale
X-URLSCHEME
X-Cache-Age
X-App-Hosting
Origin
X-Varnish-Host
X-Response-Time
X-Defender
X-Shop-Id
X-Fastcgi-Cache
X-TransIP-Balancer
X-Cache-Info
X-Matrix-Server
X-Internal-ReqID
X-Matrix-Proxy
X-LB
X-Source
X-Application-Context
X-Akamai-Transformed
X-Accel-Expires
X-UD-Method
X-Cache-TTL
Dmn
Akamai-IP
X-Varnish-GracePeriod
X-Varnish-Seen-By
X-Varnish-RemainingTTL
X-Varnish-ObjectSource
X-Varnish-RemainingLife
X-Varnish-HitMiss
X-Platform-Processor
X-Platform-Cluster
X-Varnish-Count
X-Platform-Router
X-Upstream
X-HS-Content-Campaign-Id
X-TransIP-Backend
X-Device-Type
Ohc-File-Size
X-Gamma-Serve
X-I
USPLoggingUUID
X-Version
Pool
Content-Hash
Version
X-Storage
IBM-Web2-Location
X-Cache-Tags
X-NetCat-Version
X-Origin
X-Front
X-Art-Request-Id
X-Expires-Orig
X-UPSTREAM
X-S
X-Content-Encoded-By
Srv
Powered-By-ChinaCache
X-Varnish-Cacheable
X-Cache-Debug
X-Signature
X-Supported-By
X-Rocket-Nginx-Bypass
X-Powered-By-VelaWeb
X-Revision
X-VTEX-Cache-Status-Janus-Edge
X-Cache-Operation
X-Route-Server
X-ATG-Version
Content-Disposition
X-Platform
HTTPS
X-Microcache-Status
Last-Published
Public-Key-Pins-Report-Only
X-Cache-Key
X-Translation
X-Server-Upstream
X-NoCache
MIME-Version
X-Dispatcher
X-SSL-Protocol
X-SSL-Cipher
X-EdgeConnect-Origin-MEX-Latency
X-NewRelic-App-Data
X-Daa-Tunnel
X-Debug-Info
X-Firenze-Processing-Time
ServerName
X-Varnish-Age
X-Server-ID
Node
X-Vcap-Request-Id
X-TTL
X-EdgeConnect-MidMile-RTT
X-Varnish-Backend
X-Hypernode
X-Cache-Lifetime
X-Page-Cache
X-Platform-Cache
X-Dispatch
X-CJ-Soft
X-AOL-HN
SSPAppContext
X-SV-CacheTags
X-Server-Id
X-Flow-Powered
X-SV-Pid
X-LB-Node
X-SV-Edge
X-SV-Expires
X-Duration
X-SV-FromDBCache
X-Sapient
X-Dns-Prefetch-Control
X-SV-CreatedAt
X-SV-Duration
X-SV-Cacheable
X-SV-Nginx-Duration
X-Platform-Server
Page-Completion-Status
X-Last-Modified
X-PwB-Node
X-Abuse
Cache-Key
FAI-W-FLOW
X-Cache-Only-Varnish
SN
X-SDS
X-F-Cache
Cache-Tag
X-Cache-Control-Orig
X-Abgroup
X-Cookie-Domain
X-Geo-Country
Proxy-Connection
X-Country-Code
ServerID
Cneonction
X-Url-Base
X-Director
Edge-Content-Tag
X-Grace
X-Edge-IP
WSR-Cache
Lsrequestid
X-LW-Cache
X-GeoIP-Country-Code
X-Debug
X-Magento-Cache-Debug
X-Client-IP
X-ORACLE-DMS-ECID
Accept-Encoding
IM-Version
X-Speed-Cache
X-Speed-Cache-Key
Req-Id
Allow
X-GeoIP-Country-Name
Pv
X-Cache-CFC
X-ServerID
X-Amz-Meta-S3cmd-Attrs
X-Cache-Expires
PICS-Label
Location
Author
X-Cache-Server
X-ARC
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
Section-Io-Id
X-Content-Age
X-BackendServer
If-Modified-Since
X-Nbs
Cache-Provider
NnCoection
X-Frontend
X-Yadis-Location
X-SERVER-NAME
A-Powered-By
X-RequestId
X-Purge-URL
X-Loopia-Node
Content-Encoding-Handler
Fw-Via
X-Akamai-Device-Model
X-IsCacheURL
Backend
X-Cache-Engine
X-Akamai-Device-Characteristics
X-Discourse-Route
X-NB-Cached-Page
X-Middleware-Start
X-FW
X-Processing-Time
Cached
X-Time
Cteonnt-Length
X-Goog-Generation
X-Goog-Storage-Class
S-Cnection
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Varnish-Url
X-Id
Server-Info
X-Ttl
X-Proxy
X-SE-Debug
Accept-Charset
X-Sucuri-ID
X-N
S
X-Pressidium-NinukisWP-Ver
X-Cache-Level
X-BKSrc
X-Purge-Host
X-PF-Uncompressing
AMF-Ver
X-Browser
Cache
Use-Proxy
X-Cache-Handler
X-Processed-By
X-Shield-Request-Id
X-Nginx-Cache
X-Lambda-Id
X-Varnish-IP
X-Real-Server
X-Sucuri-Cache
Access-Control-Allow-Header
X-Worker
Nitro-Cache
X-DealerOn
Frame-Options
RTSS
X-Config-Blacklist-Version
SEOMOZ
MJ12bot
Nodo
X-Vhost
Xc-Version
X-Generated
Identity
X-Content-Type-Option
X-Empowered-By
X-Trace
X-Framework
Retry-After
X-SRCache-Key
X-Cache-Type
X-Healthy
X-Cache-Control
X-Hiawatha-Cache
X-Cf-Powered-By
X-Cache-TTL-Remaining
X-Always-Cache
X-SO
Local-Info
CacheControlHeader
X-ID
Qs-Cache
X-Cache-PageType
X-Amz-Storage-Class
X-Cache-Fix
X-WR-Flags
X-CDN-Forward
X-Varnish-Server
X-Mobilized-By
X-HP-Trace-Project
Tracecode
X-HP-Trace-ID
BALANCEDTO
EagleEye-TraceId
X-ClientSide-Caching
MC
HitType
Content-Transfer-Encoding
Cm-Server
Eomportal-Instance
X-Pagename
X-Hit-Cache
Thanks
SVR
X-Powered-By-Server
NetMindSessionID
X-Adobe-Loc
X-Adobe-Content
HAVer
X-Generated-Time
HCVer
X-Drupal-Cache-Tags
X-App-Server
X-Directory-Script
X-Environment
X-JG-Page-Cache
X-Srv
X-Twitter-Response-Tags
X-Transaction
X-Connection-Hash
X-AF-Userserver
X-Varnish-Hits
WWW-Authenticate
X-Content-Security-Policy-Report-Only
X-ORACLE-DMS-RID
Disablevcache
Buuteeq-Source
Front
X-VC-TTL
X-Magnolia-Registration
X-LB-Server
X-Symfony-Cache
RATING
X-Location
X-TB-M
X-CB-Server
X-Yottaa-Optimizations
X-Varnish-Ttl
X-CDN-Node
X-Yottaa-Metrics
X-CDN-Cache-Status
X-Orig-Vary
X-Unique-ID
X-Sys-Req-ID
X-Client-Image-Vid
Keywords
X-Client-Vid
X-Site-Name
X-EPiphany-Vid
X-Magento-Cache-Control
Ufe-Result
X-LW-Web-Server
X-Varnish-ID
X-Server-IP
X-Varnish-Hostname
X-Cache-Device-Type
From-Origin
X-OPNET-Transaction-Trace
X-ACMCache
X-Webkit-CSP
X-Traffic
NODE
X-Route-To
X-Remote-Addr
Machine
SRV
Smug-CDN
SBGI-9
X-TTFB-L
SBGI-1
X-TTFB
X-SmugMug-Values
X-SmugMug-Hiring
SBGI-10
SBGI-5
SBGI-RenderTime
SBGI-RealPath
SBGI-Device
SBGI-7
X-Drectory-Script
X-Runtime-Memory
X-CAPServer
X-Cache-Dispatcherpragma
X-Resty-Request-Id
X-Varnish-Retries
X-High-Performance
Max-Age
X-CF-Passed-Proto
X-Session-Reinit
X-Cache-Dispatchercachecontrol
X-Fedora-School-Id
X-VC-Enabled
X-Cache-Doesi
X-VARITI-CCR
Fastly-Backend-Name
Content_type
X-FORWARDED-PROTO
X-Mobile-URL
X-Cocoon-Version
X-DataDome
X-LP
X-FireWall-Port
Server-Name
Pics-Label
Description
X-Frame-Option
ServerTokens
X-Env
X-HW
X-Esi
Provider
X-Resolver-IP
X-Nginx-Host
ServerSignature
X-HydroSheep
X-Webcelerate
X-Key
X-Static
Magicmarker
X-NginX-Cache
X-WHOIS-Cached
X-Proto
X-Page
X-Cache-Detail
X-Runtime-Rack
X-Dynatrace-Js-Agent
X-GeoIP
CLMOB
AC-ELC
X-Smartcache-Timeout
X-WP
X-Amz-Meta-Cb-Modifiedtime
Ctx
X-Disney-Akamai-Rule
RN-Server
X-Smartcache-Keys
NtCoent-Length
X-RiS-UFDI
AsisCache
Bios
X-Unbounce-PageId
X-Unbounce-VisitorID
X-NginX-Server
MW-Webserver
X-Unbounce-Variant
Response-Time
X-Garden-Version
IISExport
Home
X-OpenCart-Lightning
Id
X-Served-Server
X-Backend-Status
X-Debug-Token
X-WN-ClientGroup
X-HostName
X-Server-Instance
X-Cache-Provider
W
WN
X-Cache-Source
X-Session-ID
X-UA
X-App
X-WR-MODIFICATION
X-ARRServer
Strikingly-Cached-Version
Strikingly-Cached
Strikingly-Cache-Region
X-Balanceador
X-Author
X-AEM
X-ServerIndex
ScoreTracker
X-Jphone-Copyright
Yoncu-Errno
Web-App-Origin-Name
From
X-Cache-Node
X-ProcessESI
X-Info
X-Machine-Name
X-Desc
X-Middleton-PageSpeed
X-Rebelmouse-Cache-Control
X-RemovedCookies
DNNOutputCache
X-HP-Redirect
X-Source-ID
Dispatcher
X-Actindo-RS
X-Time-Microsecs
X-Rebelmouse-Surrogate-Control
X-MAT-GEO
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-ETag
X-Cache-Keep
Og
X-Distributor
X-Cached-Status
Hname
X-Atraveo-From-Varnish-Cache
Sophnep-Edge-FX
X-A
X-Application
Paypal-Debug-Id
SG
X-Trace-Id
X-Force
X-SmartBan-Host
X-Highwire-SessionId
X-PRAM
X-Atraveo-ETag
X-Atraveo-Expires
X-SmartBan-URL
X-Grid-Server
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-RealServer
X-Atraveo-Zone
X-Captured
X-Highwire-RequestId
Cmstype
X-RDP
X-Atraveo-Cache-Control
X-Proxy-Cache-Key
X-IIJ-Cache
X-App-Status
X-Cache-On
Cmsid
X-Blog
NLCacheNote
Xc
Backend-Timing
X-Cdn-Forward
X-Analytics
X-App-Runtime
X-PM-ID
X-Correlation-ID
X-CacheResult
X-ReqId
X-Goog-Meta-Policy
X-Goog-Meta-Replace
X-Rq
X-Ser
Resin-Trace
X-Runtime-Affili
VServer
X-Drupal-Cache-Contexts
X-Autoru-LB
X-Autoru-Host
X-SDE-Name
X-Render-Time
X-Req-Head-Response
X-PageType
X-Map-Context
X-Culture
X-Hosting-Env
X-AutoRu-App-Id
X-SH-Cache-Status
Server-ID
X-Varnish-Debug-Age
Dis-Env
X-Config-By
Beyond-Iis
X-CRA-DC
SS
N365rili
Ibf5scheme
CommunityServer
X-E
X-Site
X-Cluster-Node
Cluster-ID
X-Varnish-Debug-TTL
XDomainRequestAllowed
Web
X-Domain-Checked
TC-Cache-U
TC-Cache-IC
TC-Cache
Access-Control-Request-Headers
TC-S-Cache
TC-S-Cache-M
X-FRUIT
X-Frames-Options
X-Cache-TTL-Current
X-Cache-TTL-Age
NCache
X-Batcache
X-Machine
X-Airee-Node
X-Viator-Tapersistentcookie
X-Response
X-DTC
X-Clara-ASAP
X-Plat
X-MSEdge-Ref
X-ASAP-Cache
X-Avvio-Cms-Cacheload
X-Provisioner-Version
Content-Server
X-SV
X-KoobooCMS-Version
X-Rocket-Nginx-Serving-Static
X-4ormat-Cacheable
X-Src-Webcache
VANITY-HOST
X-Varnish-Action
X-Rack-CORS
X-Ss-Location
Device
NZSpeedy
Ttl
X-Stage
X-EC2-Instance-Id
X-Nginx
X-Lb
X-We-Are-Hiring
X-ENV
X-Batcache-Reason
X-Optimization
X-ACCELERATE
X-Dw-Trace-Id
X-Rack-Cors
X-This-Proto
X-Varnish-Info
X-Oracle-DMS-ECID
X-Ss-Conf
X-Sc-Cache
WP-AdvCache-MemCached
X-Secret
X-Environment-Context
X-Powered-By-Home.Pl
X-Artvisual-Server
Lb
X-Hosting
X-Rewrite
X-Cache-Warmer
X-Server-Addr
ServerIP
X-Magento-Action
X-AISO-Cacheable
ViewMode
X-HashTwo
X-HTML-Minification-Powered-By
X-Webapp
X-Server-Generated
Gzip
F5-IpCliente
Warning
X-Ghost-Cache-Status
X-Data-Request
X-Cache-Via
X-Cache-Time
ClientIP
X-Zendesk-Origin-Server
X-Distil-CS
X-Refresh
AccessControlAllowOrigin
X-Adnet
X-Node-Name
X-Zendesk-User-Id
X-Upstream-Backend
Set-Cookie2
X-AISO-Server
Worker
X-SilverStripe-Cache
X-MidCOM-Meta-Cache
X-Amcomm-Site
X-Forwarded-Host
X-Ezoic-Cdn
MS-CV
X-Detected-Device
X-CDN-RULE
X-Dev
X-Cms-Mode
X-V
X-Old-Content-Length
X-CDN-COMPRESS
X-L-Path
X-AISO-Cache
X-Pageid
Tempo
OriginServer
X-7d-Trace-Id
Session-From
X-Amz-Id-1
X-7d-Instance-Id
X-HA-Backend
Il-Cl
X-GSL-Server
X-HA-Frontend
Proxy-Cache
X-Varnish-Cache-Local
X-Hstore
X-AMAZEEIO
SBMCLOUD
Server-Ip
X-DB-Content-Length
X-CACHE-TTL
X-Dynamic-Cache
PagesDisplayed
X-HAProxy
X-APP
BackendServer
X-MCB-Server
X-Hrouter
StatusCode
Nginx-Cache
X-Header
SHInfo
Debug-Status
X-Wm-1
X-Unique-Id
X-Catalyst
X-Wm-VIP
SB-Cache-Remaining
Progma
SB-Site-Device
Actual-Object-TTL
AGI-Request-ID
X-AG-MIPS
SB-Site-IE-VERSION
X-Flex-Evend
X-Origin-Server
COMMERCE-SERVER-SOFTWARE
X-ACLR-Version
X-Apm-Telemetry-Syncmark
X-Compressed-By
X-Search-Id
X-Flex-Lastmod
X-Flex-Tag
X-Flex-Tags
X-B2f-Not-Route
X-CCM
X-Cacheable-TTL
X-Gannett-Site-Version
X-Beatles
X-Depends
Traffic-Origin
X-DN-Cache-Control
X-Gyrobase-Publication
FastCGI-Cache-Status
X-Flex-Lang
X-Flex-Evstart
X-RequesterIP
X-WA-Info
Edgecast
NS-VaryByCustom-Key
X-WebKit-CSP-Report-Only
X-Forwarded-By
SB-Cache-Life
X-Nginx-Request-Processing-Time
X-DevSrv-CMS
X-Obj.Ttl
X-DSMX-Render-MS
X-DSMX-Rewrite-MS
X-Flex-Community
VAR-Cache
X-Test
X-SCM-Server-Number
Myheader
RequestId
X-Enhanced-By
Expiries
X-ELB
X-Generation-Time
PServer
X-Proxy-Id
SiteSpeed
X-D-Time
X-Amzn-Trace-Id
X-AppServer-Cache-Rule
X-Country
Ews
X-S-Misc
X-Varnish-Instance
Url
X-VLoc
X-EC-Security-Audit
X-Uncacheable
X-Server-FQDN
X-ServiceProvider
X-Time-Zone
X-Amzn-RequestId
Webserver
X-DeliveryServer
X-Dynamic
X-PHP-Response-Code
X-REDIRECTSERVER
X-DEBUG
X-Cache-Extended
X-VC-Debug
X-Box
X-Brought-To-You-By
X-Fstrz
X-Sid
SINA-LB
SINA-TS
UrlWatchModule-Time
Rewriter
FindLaw
X-Upgrade-Enabled
Content-Cache
DbServerName
X-XHR-Current-Location
X-NodeID
X-LOCATION
X-Farm-Server
X-Cache-Varnish
X-Bcwwwid
X-M
X-Node-ID
X-Streams-Distribution
X-Session-Id
X-Pagely-Cache
X-DS1D
X-Built-With
X-W3TC-Minify
Cache-Status
Accept-Language
X-Nginx-Request-Time
X-RAMCache
X-Reflector
X-Turpentine-Esi
X-Ocache
X-ChromeLogger-Data
X-LBPoolMember
X-Lima-Id
SERVER-ID
X-Reflector-Cache
Expect-Ct
X-Nocache
X-Resource
X-Pixelsilk-Version
Swift-Performance
X-Cache-BE
X-IP
X-Pixelsilk-Server
Cleartype
X-Tag-Playlist
X-Cache-HT
X-PBY
X-Goog-Meta-Goog-Reserved-File-Mtime
WSCLoggingUUID
X-Obvious-Info
X-Made-On
X-GoCache-CacheStatus
X-Deity
X-NewCloud-V-Cache
X-Obvious-Tid
X-Ezpublish-Nodeid
X-Layout
X-JSESSIONID
X-Ezpublish-Installationid
X-CH-Device
MageStack-Config
MageStack-Cacheable
MageStack-Debug
MageStack-Loadbalancer
MageStack-Magento-Version
X-CM-FE
MageStack-Cache-Status
MageStack-Cache-Lifetime
X-WPL-DATA
Brightspot-Id
MageStack-Area
MageStack-Cache
MageStack-Cache-Hits
MageStack-PageSpeed
MageStack-Tag
X-Backend-TTL
X-App-Version
X-Cache-Me-Harder
X-Theme
Ibm-Web2-Location
X-Rocket-Nginx-Reason
X-Title
X-Served
AMP-Access-Control-Allow-Source-Origin
MageStack-Web-Node
X-Aramark-SID
Server-Id
Note
X-Webkit-Csp
X-CACHE-KEY
X-Cache-Bypass
X-HP-CAM-COLOR
X-9XB-Server
X-MainProfileCategory
X-MainProfileID
X-Faeria
X-CacheID
TP-Cache
TP-L2-Cache
X-Agent
X-Cache-FS-Status
X-MainProfileName
X-MainProfileURL
PLCDN
Apple-Itunes-App
X-Config-Version
No-Cache
X-Server-Instance-Name
X-PBS-Fwsrvname
X-NewsFlow-Sitename
X-Not-Cacheable
X-PBS-Appsvrip
X-PBS-Appsvrname
M
XDisk
DB-Nickname
DrivedBy
X-CSRF-Token
X-Generated-Date
X-IP-Address
X-Front-Cache
WFE
Provided-Host
RSL-Trace-ID
Tk
Session-Id
X-Provided-By
X-RiS-PX
X-FG-RequestId
X-EBAY-C-REQUEST-ID
X-WebNode
X-Webstats-RespID
X-UseReverse-Proxy
X-Tradeindia-SMgmt
X-Router
X-Debug-Message
X-Router-Backend
X-Tradeindia-Request-GUID
AMFplus-Ver
X-Cms-Server
X-XHTML-Minification-Powered-By
X-Who
Cache-Tags
X-Backend-Name
X-Cjtype
X-Test-Debug
X-SuperCache
X-FIRSTBase
X-ManagedFusion-Rewriter-Version
X-Pubstack
X-Rewritten-By
X-DDM-SERVER-UPDATED
X-DDM-SERVER
X-Svr
GP-Version
GP-Remote-Addr
INFO
X-Real-IP
X-Phpwcms-Release
X-NID
X-OCTOPOD
X-Origin-Cache
X-Phpwcms-Page-Processed-In
X-UnsetCookies
X-AWS
X-Varnish-Cached-TTL
X-Varnish-Cached
MwpReleaseVersion
X-MCF-ID
MSSmartTagsPreventParsing
MSThemeCompatible
X-Meta-Imagetoolbar
X-Meta-MSSmartTagsPreventParsing
X-Meta-MSThemeCompatible
X-Backend-Host
X-Fpc
Kp-EeAlive
X-Archive-Orig-Connection
X-Archive-Orig-Content-Length
X-Archive-Orig-Date
X-Archive-Orig-Server
X-Archive-Guessed-Charset
X-AppVersion
Kanooh-Host
D
Aurora-Node
Memento-Datetime
X-Amz-Meta-Content-Md5
CDCHOST
X-Route
X-Header-Treatment
X-HASH
X-Custom-Header
X-Cname-TryFiles
!~Request-OOB-Work
X-Container
RSB-LINK
ENV
Access-Control-Allow-Method
X-Cache-Id
X-UPSTREAM-Address
X-Ssl-Cipher
X-C2M-Runtime
X-COUNTRY-CODE
X-WHO
X-Webkit-CSP-Report-Only
X-Beresp-Ttl
X-Varnish-URL
X-C2M-Server
Microcache
User-Cache-Control
Tesla.Performance
HostName
EQ-Cache
X-Upstream-Status
Aoestatic
Be
Contao-Page-Layout
X-SATserver
IsMobile
X-Support
X-Varnish-Debug-Hits
Generate-Time
X-Magento-Lifetime
X-HEAD
WP-Cache
X-Cache-ID
X-Prerendered
Upgrade-Insecure-Requests
V-Age
Language
TheAnswer
X-Ants-Host
X-Ants-Machine-Id
Accept-CH
X-ZSITES-DNS
X-Pass-Through
X-PROCESSED-BY
X-SVR
X-Imforza-Hosted
X-BC
X-BPool
CpuTime
X-Amz-Meta-Version-Id
X-ASAP-Age
X-Restarts
X-Protected-By
X-NMT-Proxy
X-BPool-Back
X-BPool-Bx-Cache
X-BPool-Fx-Cache
X-BServer
X-Cluster
X-Archive-Orig-Etag
X-SRV
X-Stiffia-Cache
E-TAG
Lookup-Cache-Hit
X-Netrix-ID
X-Instance-Id
ReqUrl
Resource
Server-Tuning
Session
X-Client-Ip
X-Geo-IP
Countrycode
Head
Serverid
X-Nginx-Page-Cache
X-Varnish-VCL
X-PG
Page-Template
X-Skip-Cache
X-Tt-Dbg
CD4
FrontEnd
X-Transaction-Name
X-VNode
Vserver
Realaction
Fw-Cache-Status
X-Vary-Options
TTL
X-DynamicCache
X-CO-Host
X-Serverid
X-UT-Cache
X-Build-Id
Actioncode
X-Obj-Ttl
X-Pool-Info
X-Serendipity-InterfaceLang
X-Serendipity-InterfaceLangSource
RlogId
X-Instance-Name
X-Cachable
X-Serv
X-FreeTag-Count
X-Cache-LB
Debug-Cache-Control
X-Ar-Debug
Www.Aujourdhui.Com
WebServer
ServerNode
X-Enabled3
X-Cache-Served
X-Enabled1
X-Enabled2
X-Debug-Serve
X-Debug-Out
X-W-Cache
X-W-Cache-Hits
VC-NoCache
X-TTL-Age
X-Request-Received
X-Request-Processing-Time
X-Server-App
X-UUID
OutputRewritten
X-Accel-Cache-Control
Prototype-RootPath
Ez
X-Hash
X-Max-Age
Yola-ID
X-Varnish-Store
X-Varnish-Set-Cookie
X-Varnish-Max-Age
X-ZORequestID
X-Beatles-Hits
Public-Extension
X-Op-Benvironment
X-HS-Status
Content-Legth
X-Varnish-Esi-Method
X-Varnish-Esi-Access
X-BeResp-Ttl
X-Cache-Action
X-Cache-Set
X-Does-He-Have-Time
X-Count
X-Czt
X-Varnish-Currency
X-Turpentine-Cache
X-FCMS-Cache
X-Would-Your-GrandPa-Wait
X-Your-GrandPa-Would-Wait
X-B3-Traceid
X-CPU-Time
X-FastCGI-Cache
Content-Generator
X-B3-Spanid
Rlogid
X-ServerAddr
X-UPServer
B-Rlogid
X-SCProxy
X-Sn-Servicetimems
X-Processed
X-FPC
X-Highwire-Sitecode
X-Highwire-Smart-Code
Hosted-By
X-Pj-Cache-Status
Container
Debug-Expires
ResourceTag
X-ESI
X-Script
X-EC-Custom-Error
AR-SID
Copyright
Server-Node
GranicusServer
AR-PoweredBy
AR-CACHE
X-Content-Parsed-By
X-Built-By
AR-ATIME
X-Archive-Orig-ETag
CD1
EXT-CACHEEXPIRE
X-Auto-Login
X-Vol-Mrp
X-Vol-Correlation
X-Diazo-Applied
0
ProxiaInstanceId
Url-Hash
X-Jcms-Ajax-Id
X-Csrf-Token
Httpd-Identifier