Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
X-Cache
CF-RAY
Strict-Transport-Security
X-AspNet-Version
P3P
X-Pingback
Age
Content-Language
X-UA-Compatible
Via
Access-Control-Allow-Origin
X-Adblock-Key
Upgrade
X-Varnish
X-Cacheable
X-Check
X-Template
X-Language
P3p
Content-Security-Policy
X-Generator
X-Buckets
X-Drupal-Cache
X-AspNetMvc-Version
X-Type
X-Cache-Group
X-Pass-Why
X-Xss-Protection
X-Hacker
X-Ac
X-Request-Id
X-Powered-By-Plesk
Content-Location
X-Cache-Hits
X-Request-ID
X-Permitted-Cross-Domain-Policies
X-Runtime
X-Download-Options
Host-Header
MS-Author-Via
X-ShopId
X-Dc
X-Sorting-Hat-PodId
X-ShardId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-Section
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-Alternate-Cache-Key
Alt-Svc
Cartoon
X-IPLB-Instance
X-Powered-CMS
X-UA-Device
X-Served-By
Status
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
X-Amz-Cf-Id
Access-Control-Allow-Methods
X-Via
X-Iinfo
X-Cache-Status
X-Backend
X-Timer
X-Contextid
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
CF-Cache-Status
X-ServedBy
X-PC-Key
X-PC-Hit
X-Mod-Pagespeed
X-Wix-Server-Artifact-Id
Powered-By
X-PC-Date
X-PC-AppVer
X-PC-Host
X-DIS-Request-ID
X-Server
X-Logged-In
Keep-Alive
Content-Encoding
X-Cache-Hit
X-Rid
X-CDN
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-User
X-Port
X-Host
X-Tumblr-Pixel-1
X-CST
X-Server-Powered-By
Referrer-Policy
X-Robots-Tag
X-Tumblr-Pixel-2
X-Cache-Enabled
X-Pad
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
X-Nginx-Cache-Status
Fastly-Debug-Digest
X-Endurance-Cache-Level
WP-Super-Cache
X-Wix-PunisherID
X-Page-Speed
X-Accel-Version
X-Turbo-Charged-By
X-Forwarded-For
X-Content-Powered-By
X-Forwarded-Proto
X-Tumblr-Pixel-3
X-Drupal-Dynamic-Cache
X-Rack-Cache
X-Content-Digest
X-Varnish-Cache
X-Pantheon-Styx-Hostname
Surrogate-Key-Raw
X-Styx-Req-Id
X-AH-Environment
Content-Security-Policy-Report-Only
X-FRAME-OPTIONS
X-GitHub-Request-Id
X-Proxy-Cache
SPRequestGuid
X-SharePointHealthScore
X-Cnection
X-Request-Country
MicrosoftSharePointTeamServices
X-MS-InvokeApp
X-XRDS-Location
X-Cache-Lookup
X-Original-Date
X-LiteSpeed-Cache
Edge-Control
X-Died
Cf-Railgun
X-Safe-Firewall
Timing-Allow-Origin
MicrosoftOfficeWebServer
X-Amz-Id-2
X-Amz-Request-Id
Request-Id
Charset
X-Webserver
X-FW-Hash
X-FullPageCaching
X-FW-Static
X-FW-Type
X-FW-Serve
X-Node
Edge-Cache-Tag
X-PhApp
SPIisLatency
X-HS-Cache-Config
SPRequestDuration
X-CF-Powered-By
X-HS-Content-Id
X-INKT-SITE
X-INKT-URI
WPE-Backend
X-Hits
Composed-By
X-Content-Security-Policy
X-Tumblr-Pixel-4
Access-Control-Max-Age
Liferay-Portal
Content-MD5
X-Swift-SaveTime
X-Swift-CacheTime
EagleId
Access-Control-Expose-Headers
Served-By
X-Hyper-Cache
X-VWS-Id
X-LJ-Flow-ID
X-AWS-Id
X-Spip-Cache
Grace
X-CDN-Pop
X-CDN-Pop-IP
Rating
X-Device
X-Backend-Server
Request-Context
X-BC-Stapler
X-Server-Name
X-Fastly-Request-ID
X-Dw-Request-Base-Id
X-Tumblr-Content-Rating
X-Microcachable
X-Microcache
X-Firenze-Processing-Times
X-Newrelic-App-Data
X-RateLimit-Remaining
Content-Style-Type
X-RateLimit-Limit
X-ServerName
Content-Script-Type
X-FB-Debug
X-RateLimit-Reset
X-VCache
Public-Key-Pins
X-Cloud-Trace-Context
X-User-Agent
X-Jimdo-Instance
X-Jimdo-Wid
X-Clacks-Overhead
Xkey
X-Cache-Config
X-DDC-Arch-Trace
Real-Hostname
X-TNCMS
X-Loop
Front-End-Https
X-Acc-Exp
Refresh
Surrogate-Control
Fpc-Cache-Id
X-Age
X-XN-XNHTML
X-XN-Trace-Token
X-Hostname
X-Aspnetmvc-Version
X-Px
PageSpeed
X-Generated-By
X-Tumblr-Pixel-5
X-DNS-Prefetch-Control
X-Middleton-Display
X-Sol
X-Middleton-Response
Response
X-N-OperationId
Display
X-Cached
Surrogate-Key
X-SS-Location
X-SS-Conf
X-LiteSpeed-Cache-Control
X-FORWARDED-FOR
X-Zen-Fury
X-SERVER
X-MiniProfiler-Ids
X-Cached-By
X-Topify-Platform
X-Pantheon-Environment
X-Pantheon-Phpreq
X-Pantheon-Site
X-StackifyID
X-Request-Time
X-Content-Options
X-WebKit-CSP
Rt-Fastcgi-Cache
X-Url
X-Servedby
X-URL
X-Amz-Version-Id
X-Outils-CS
X-OneAgent-JS-Injection
X-CMS-Version
X-Whom
TCN
Edge-Control-Message
X-HOST
X-DynaTrace
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Ruxit-JS-Agent
X-Umbraco-Version
X-Varnish-Cache-Hits
X-AspNetWebPages-Version
X-DynaTrace-JS-Agent
X-Correlation-Id
Access-Control-Request-Method
X-Varnish-TTL
X-Handled-By
Imagetoolbar
Product
X-PERF
Alternate-Protocol
X-ApacheServer
Host
Powered
X-Kinsta-Cache
DynaTrace
X-Engine
X-Magento-Tags
X-From
X-Cache-Rule
P-WS
X-Msg-2-Log
P-LB
X-Powered-By-360WZB
WZWS-RAY
X-Recruiting
X-Track
X-CacheServer
X-NWS-LOG-UUID
Generator
X-Micro-Cache
X-Edge-Location
ServedBy
X-Location-Id
X-Vtex-Processed-At
X-Vtex-Processado-Em
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-Vtex-Remote-Cache
X-VTEX-Cache-Status-Janus-ApiCache
No
X-Response-Time
X-Hosted-By
Fhost
X-Tumblr-Pixel-6
X-Powered-By-VTEX-Janus-Edge
X-Goog-Hash
X-Fastcgi-Cache
X-B-Cache
X-LBLID
X-Cache-Age
X-VARNISH-Cache
Expect-CT
Fastcgi-Cache
X-Developer
Origin
X-Instart-Request-ID
X-Application-Context
X-Actual-URL
X-BS
X-I-Sp
Arr-Disable-Session-Affinity
X-Returned-From
X-Passed-To
X-Original-Request
X-RESOURCE
X-Returned-From-DLL
X-Passed-To-DLL
X-URLSCHEME
X-Returned-From-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
X-Varnish-Host
X-Passed-To-BeforeDispatch
X-Varnish-Beresp-Status
Content-Hash
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
X-App-Hosting
X-Shop-Id
X-UD-Method
X-Stale
X-Defender
Akamai-IP
X-TransIP-Balancer
X-Matrix-Proxy
X-Matrix-Server
X-Device-Type
X-I
X-Cache-Info
X-HS-Content-Campaign-Id
X-LB
X-Storage
X-Cache-TTL
Dmn
X-Revision
X-Cdn
X-Origin
X-Varnish-RemainingLife
X-Varnish-GracePeriod
X-Varnish-RemainingTTL
X-Varnish-ObjectSource
X-S
X-Dispatcher
X-Varnish-Seen-By
X-NetCat-Version
HTTPS
X-Rocket-Nginx-Bypass
X-Source
X-Akamai-Transformed
X-Internal-ReqID
X-UPSTREAM
X-Platform-Router
X-Cache-Debug
IBM-Web2-Location
USPLoggingUUID
X-Platform-Processor
X-Platform-Cluster
X-Accel-Expires
X-Front
X-Gamma-Serve
X-Powered-By-VelaWeb
X-Translation
X-Cache-Tags
X-Varnish-Cacheable
X-Microcache-Status
X-VTEX-Cache-Status-Janus-Edge
X-Cache-Operation
X-Varnish-HitMiss
X-Varnish-Count
X-Supported-By
X-TransIP-Backend
X-Version
X-Daa-Tunnel
X-EdgeConnect-Origin-MEX-Latency
X-Platform
Ohc-File-Size
X-Signature
X-Route-Server
X-NewRelic-App-Data
X-Varnish-Backend
Pool
Version
Content-Disposition
X-Dispatch
X-Page-Cache
X-Content-Encoded-By
X-NoCache
X-Expires-Orig
Last-Published
X-AOL-HN
X-LB-Node
X-Upstream
X-Cache-Lifetime
Powered-By-ChinaCache
X-Last-Modified
X-EdgeConnect-MidMile-RTT
X-Url-Base
MIME-Version
Srv
X-Cache-Key
X-Varnish-Age
X-Cache-Only-Varnish
X-SDS
Cache-Key
X-Art-Request-Id
X-Server-Upstream
X-Vcap-Request-Id
Public-Key-Pins-Report-Only
X-Hypernode
X-Duration
X-ATG-Version
X-Server-Id
X-Director
X-SSL-Protocol
X-SSL-Cipher
X-Abgroup
Proxy-Connection
X-Cookie-Domain
Node
FAI-W-FLOW
Cache-Tag
X-Platform-Cache
ServerName
X-F-Cache
ServerID
X-Flow-Powered
SSPAppContext
Allow
X-Edge-IP
X-Firenze-Processing-Time
IM-Version
Accept-Encoding
X-Debug
X-Debug-Info
Page-Completion-Status
X-Abuse
X-SV-Duration
X-SV-Pid
X-SV-FromDBCache
X-Platform-Server
X-SV-Edge
X-SV-Nginx-Duration
X-SV-CreatedAt
X-Cache-Control-Orig
X-Amz-Meta-S3cmd-Attrs
X-TTL
Edge-Content-Tag
X-GeoIP-Country-Code
X-SV-Cacheable
Lsrequestid
X-SV-Expires
X-SV-CacheTags
X-Speed-Cache-Key
X-Speed-Cache
X-Magento-Cache-Debug
X-Nbs
X-PwB-Node
X-Cache-Expires
X-Country-Code
X-Sapient
X-ORACLE-DMS-ECID
Content-Encoding-Handler
X-Sucuri-ID
X-GeoIP-Country-Name
X-Geo-Country
X-Cache-CFC
X-ServerID
Cneonction
X-Dns-Prefetch-Control
X-RequestId
X-CJ-Soft
X-Server-ID
X-Client-IP
If-Modified-Since
X-Sucuri-Cache
X-Proxy
PICS-Label
WSR-Cache
X-Processed-By
SN
X-Discourse-Route
X-Grace
A-Powered-By
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Id
Backend
Cache-Provider
Location
X-Shield-Request-Id
X-Akamai-Device-Characteristics
X-ARC
X-Nginx-Cache
X-Goog-Stored-Content-Length
NnCoection
X-Content-Age
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Metageneration
X-GUploader-UploadID
X-Purge-URL
X-Processing-Time
X-Varnish-IP
X-SRCache-Key
Author
X-Cache-Server
X-SERVER-NAME
X-N
CacheControlHeader
X-Middleware-Start
X-NB-Cached-Page
X-CDN-Cache-Status
X-Lambda-Id
X-Orig-Vary
X-Frontend
X-CDN-Node
X-BackendServer
X-Time
X-Akamai-Device-Model
X-FW
X-Ttl
X-Purge-Host
X-Trace
X-Varnish-Url
Qs-Cache
MJ12bot
X-LW-Cache
SEOMOZ
Req-Id
X-Loopia-Node
X-Browser
AMF-Ver
Fw-Via
X-SE-Debug
X-Vhost
X-Real-Server
Section-Io-Id
S-Cnection
Use-Proxy
X-IsCacheURL
X-Framework
Pv
X-Always-Cache
NODE
NetMindSessionID
X-BKSrc
Nodo
X-Yadis-Location
X-Hiawatha-Cache
X-Generated
X-Healthy
X-Cache-Control
X-CDN-Forward
Cached
Cteonnt-Length
S
RTSS
X-Cache-Handler
X-TB-M
X-Srv
X-Worker
X-DealerOn
X-Content-Security-Policy-Report-Only
Tracecode
X-Magnolia-Registration
MC
Accept-Charset
X-Cache-Engine
Server-Info
X-Traffic
X-Twitter-Response-Tags
X-Content-Type-Option
X-Connection-Hash
X-Transaction
X-Route-To
X-Config-Blacklist-Version
WWW-Authenticate
Xc-Version
X-Cache-PageType
Local-Info
X-Unique-ID
X-ClientSide-Caching
X-Varnish-Server
X-Cache-Fix
X-WR-Flags
X-Varnish-Hits
X-Drupal-Cache-Tags
X-HP-Trace-Project
X-HP-Trace-ID
X-PF-Uncompressing
X-Adobe-Loc
X-Varnish-ID
Access-Control-Allow-Header
Cm-Server
Content-Transfer-Encoding
Nitro-Cache
X-Adobe-Content
X-ACMCache
Retry-After
Server-Name
Identity
X-Cache-Type
Cache
Frame-Options
X-Resty-Request-Id
X-Cache-Level
X-Fedora-School-Id
Thanks
X-Sys-Req-ID
X-Pressidium-NinukisWP-Ver
X-VC-TTL
Buuteeq-Source
X-Mobilized-By
SVR
X-Varnish-Retries
X-JG-Page-Cache
Eomportal-Instance
X-Symfony-Cache
X-Empowered-By
X-SO
X-High-Performance
X-CF-Passed-Proto
X-Magento-Cache-Control
X-FireWall-Port
HitType
HCVer
X-LW-Web-Server
HAVer
NtCoent-Length
X-ID
X-Directory-Script
X-LB-Server
RATING
X-Drectory-Script
X-Varnish-Ttl
X-Server-IP
BALANCEDTO
X-Session-Reinit
CLMOB
Web-App-Origin-Name
EagleEye-TraceId
X-Cocoon-Version
X-Pagename
X-Webcelerate
X-Amz-Storage-Class
X-Remote-Addr
AsisCache
X-Site-Name
X-Hit-Cache
Content_type
Disablevcache
X-CB-Server
X-Session-ID
X-Static
X-WN-ClientGroup
X-Cache-Detail
X-A
X-Cache-TTL-Remaining
X-VC-Enabled
WN
X-Runtime-Memory
X-Cache-Source
X-VARITI-CCR
X-Amz-Meta-Cb-Modifiedtime
X-AF-Userserver
X-Cache-Provider
X-RiS-UFDI
X-Environment
X-Disney-Akamai-Rule
X-App
IISExport
X-Cache-Device-Type
X-AEM
X-Runtime-Rack
Max-Age
X-Served-Server
SBGI-7
SBGI-5
SBGI-1
SBGI-9
SBGI-Device
SBGI-RealPath
SBGI-RenderTime
X-OPNET-Transaction-Trace
X-App-Server
SBGI-10
Dispatcher
X-UA
X-Generated-Time
Strikingly-Cache-Region
X-Culture
X-Yottaa-Metrics
X-FORWARDED-PROTO
X-WHOIS-Cached
From-Origin
Keywords
Strikingly-Cached
X-Middleton-PageSpeed
AC-ELC
X-Balanceador
X-Yottaa-Optimizations
Pics-Label
Strikingly-Cached-Version
X-Ser
ServerSignature
X-ServerIndex
SRV
ServerTokens
Magicmarker
X-Powered-By-Server
X-LP
X-Blog
X-Cache-Node
X-OpenCart-Lightning
X-ARRServer
X-E
X-Jphone-Copyright
XDomainRequestAllowed
X-Debug-Token
X-Page
X-Distributor
X-Site
X-Dynatrace-Js-Agent
X-WR-MODIFICATION
X-Mobile-URL
X-Runtime-Affili
Description
Front
Dis-Env
X-Esi
X-Unbounce-VisitorID
X-App-Runtime
X-Unbounce-Variant
X-Unbounce-PageId
X-Server-Instance
Provider
VServer
X-Cache-Dispatcherpragma
X-EPiphany-Vid
X-Webkit-Csp
X-App-Status
X-Wikidot-Backend
X-Wikidot-Static-Cache
Home
NLCacheNote
X-Pageid
X-HP-Redirect
X-Client-Image-Vid
X-Client-Vid
ScoreTracker
From
X-Map-Context
X-Author
X-Req-Head-Response
X-Cached-Status
X-ORACLE-DMS-RID
X-SDE-Name
X-Hosting-Env
Ufe-Result
X-Optimization
X-Cache-Doesi
X-Nginx-Host
X-Cache-Dispatchercachecontrol
X-Frame-Option
X-Key
X-Varnish-Hostname
CommunityServer
X-Analytics
X-DataDome
Backend-Timing
X-Rack-Cors
X-Drupal-Cache-Contexts
X-NginX-Cache
X-GeoIP
X-Render-Time
Machine
X-Location
X-Lb
SS
X-Info
X-HW
X-PageType
X-Garden-Version
DNNOutputCache
X-WebKit-CSP-Report-Only
X-Force
X-Batcache
X-Atraveo-Expires
X-Atraveo-From-Varnish-Cache
X-Atraveo-Varnish-Server-Id
X-PRAM
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
X-Atraveo-TTL
X-Atraveo-Zone
X-FRUIT
X-Rebelmouse-Cache-Control
X-Actindo-RS
SG
X-ProcessESI
X-Machine-Name
X-HydroSheep
X-Desc
X-Rebelmouse-Surrogate-Control
X-Provisioner-Version
X-Resolver-IP
X-Trace-Id
X-RemovedCookies
X-Domain-Checked
X-Atraveo-ETag
X-RDP
Sophnep-Edge-FX
X-Cache-On
X-Amz-Id-1
Fastly-Backend-Name
X-Machine
X-Frames-Options
X-ETag
Hname
X-SmugMug-Values
X-SmugMug-Hiring
X-Data-Request
X-HA-Backend
Smug-CDN
X-Rewrite
X-GSL-Server
X-Amcomm-Site
ViewMode
X-Magento-Action
X-SH-Cache-Status
X-HA-Frontend
X-HashTwo
X-This-Proto
X-Atraveo-Cache-Control
X-TTFB
X-Source-ID
OriginServer
Set-Cookie2
X-Varnish-Action
X-CAPServer
PagesDisplayed
Cmstype
Cmsid
X-MAT-GEO
X-TTFB-L
X-Backend-Status
X-Application
X-Clara-ASAP
Paypal-Debug-Id
Bios
X-ASAP-Cache
Response-Time
Ttl
X-Header
MW-Webserver
Yoncu-Errno
Nginx-Cache
Og
X-Cms-Mode
X-ENV
X-NginX-Server
X-Cdn-Forward
X-Correlation-ID
X-Dev
X-Detected-Device
Resin-Trace
Worker
Id
X-Time-Microsecs
X-KoobooCMS-Version
Proxy-Cache
Tempo
Ctx
X-Sc-Cache
RN-Server
SBMCLOUD
X-Smartcache-Timeout
X-WP
Beyond-Iis
X-Captured
Il-Cl
X-Viator-Tapersistentcookie
FastCGI-Cache-Status
X-HTML-Minification-Powered-By
Lb
W
X-Varnish-Cache-Local
X-Powered-By-Home.Pl
X-CRA-DC
X-Proto
X-Cluster-Node
WP-AdvCache-MemCached
X-IIJ-Cache
Content-Server
X-Grid-Server
VANITY-HOST
Ibf5scheme
X-Env
N365rili
X-Response
Traffic-Origin
X-Smartcache-Keys
X-Varnish-Debug-Age
X-Varnish-Debug-TTL
X-Webapp
Cluster-ID
Web
X-Hosting
X-Upgrade-Enabled
X-Forwarded-Host
X-DEBUG
X-Goog-Meta-Replace
BackendServer
SiteSpeed
X-Goog-Meta-Policy
X-EC2-Instance-Id
X-SV
X-Hstore
X-Dw-Trace-Id
X-PM-ID
X-ACCELERATE
X-Hrouter
X-Resource
X-Test
X-Batcache-Reason
X-Rack-CORS
Device
X-Stage
X-Cache-Extended
X-Autoru-LB
X-Autoru-Host
X-MCB-Server
X-AutoRu-App-Id
X-Varnish-Info
Swift-Performance
X-Compressed-By
X-MidCOM-Meta-Cache
X-L-Path
X-Box
X-REDIRECTSERVER
X-JSESSIONID
Expect-Ct
X-PHP-Response-Code
X-Cache-Via
X-Brought-To-You-By
X-Config-By
X-DeliveryServer
X-Reflector-Cache
X-RAMCache
X-V
X-Depends
FindLaw
X-Sid
RequestId
Note
X-7d-Instance-Id
X-CacheResult
X-Cacheable-TTL
AccessControlAllowOrigin
X-7d-Trace-Id
X-Environment-Context
X-Reflector
X-SilverStripe-Cache
X-Dynamic
X-DSMX-Rewrite-MS
ClientIP
X-Secret
X-Node-Name
X-MSEdge-Ref
X-Tag-Playlist
F5-IpCliente
X-Apm-Telemetry-Syncmark
X-Adnet
X-Airee-Node
Gzip
X-DTC
X-Plat
Cleartype
Access-Control-Request-Headers
X-RealServer
Ews
NCache
X-CDN-COMPRESS
Accept-Language
NS-VaryByCustom-Key
X-Avvio-Cms-Cacheload
X-CDN-RULE
X-B2f-Not-Route
X-EC-Security-Audit
X-Flex-Lang
X-Obj.Ttl
X-M
X-Flex-Lastmod
X-Flex-Tag
X-Fpc
X-Flex-Tags
X-Cache-TTL-Age
X-Flex-Evstart
X-Flex-Evend
X-LBPoolMember
X-Zendesk-Origin-Server
X-Zendesk-User-Id
X-Proxy-Cache-Key
X-Cache-TTL-Current
X-Flex-Community
X-DSMX-Render-MS
X-DB-Content-Length
X-Cache-Keep
X-Nginx-Request-Time
SERVER-ID
X-Ocache
X-APP
X-Cache-BE
X-Src-Webcache
X-CACHE-TTL
X-Lima-Id
X-CSRF-Token
X-Cname-TryFiles
X-Rq
X-Served
X-Deity
X-Nginx
Xc
X-We-Are-Hiring
X-Cache-HT
X-PBS-Fwsrvname
X-PBS-Appsvrip
X-PBS-Appsvrname
X-VC-Debug
X-Catalyst
X-Gyrobase-Publication
X-Cache-FS-Status
X-CacheID
XDisk
X-Ezoic-Cdn
X-DDM-SERVER-UPDATED
X-LOCATION
X-Cache-Time
X-SmartBan-Host
X-Highwire-SessionId
X-Highwire-RequestId
X-Distil-CS
X-Server-Generated
X-SmartBan-URL
ServerIP
TC-S-Cache
TC-S-Cache-M
TC-Cache-U
TC-Cache-IC
Session-From
TC-Cache
X-SuperCache
X-SCM-Server-Number
X-Search-Id
Server-ID
SINA-LB
COMMERCE-SERVER-SOFTWARE
X-W3TC-Minify
X-CCM
X-ACLR-Version
SINA-TS
X-Phpwcms-Release
Myheader
X-Session-Id
X-Webstats-RespID
X-DDM-SERVER
X-Phpwcms-Page-Processed-In
X-HostName
X-DN-Cache-Control
X-CH-Device
Server-Id
MageStack-PageSpeed
MageStack-Tag
MageStack-Magento-Version
MageStack-Loadbalancer
MageStack-Config
ENV
MageStack-Debug
MageStack-Web-Node
Access-Control-Allow-Method
!~Request-OOB-Work
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Layout
X-DevSrv-CMS
X-Cms-Server
X-App-Version
X-Backend-TTL
X-Cache-Me-Harder
MageStack-Cacheable
MageStack-Cache-Status
NZSpeedy
X-AISO-Cacheable
X-Beatles
X-UseReverse-Proxy
X-AISO-Cache
X-Made-On
X-ReqId
Url
X-Artvisual-Server
AMP-Access-Control-Allow-Source-Origin
MageStack-Cache-Hits
MageStack-Cache-Lifetime
X-AISO-Server
MageStack-Cache
MageStack-Area
Brightspot-Id
RSB-LINK
X-Cache-Warmer
X-NewCloud-V-Cache
X-Beresp-Ttl
X-Front-Cache
X-Upstream-Backend
X-Ghost-Cache-Status
Session-Id
X-CACHE-KEY
X-IP-Address
X-Rocket-Nginx-Serving-Static
X-Tradeindia-Request-GUID
X-Tradeindia-SMgmt
X-Router-Backend
X-Router
X-Provided-By
X-RiS-PX
SB-Site-IE-VERSION
WFE
AMFplus-Ver
Provided-Host
PServer
X-Title
X-Rocket-Nginx-Reason
VAR-Cache
RSL-Trace-ID
Debug-Status
SB-Cache-Remaining
SB-Site-Device
SB-Cache-Life
StatusCode
X-Dynamic-Cache
Warning
X-Webkit-CSP
MS-CV
X-ChromeLogger-Data
X-Server-Addr
X-Pixelsilk-Version
X-Pixelsilk-Server
X-PBY
X-IP
X-4ormat-Cacheable
X-Turpentine-Esi
Server-Ip
X-Nocache
X-Cache-Action
Progma
X-Amz-Meta-Content-Md5
X-CM-FE
TP-L2-Cache
X-Svr
TP-Cache
X-WPL-DATA
X-Agent
X-Faeria
X-Enhanced-By
DrivedBy
X-GoCache-CacheStatus
INFO
X-Wm-VIP
X-Aramark-SID
X-Gannett-Site-Version
X-Unique-Id
X-Meta-MSSmartTagsPreventParsing
X-Debug-Message
X-UPSTREAM-Address
X-Route
X-Meta-Imagetoolbar
X-Header-Treatment
X-Tt-Dbg
X-Custom-Header
X-Cache-Id
X-Nginx-Request-Processing-Time
X-Meta-MSThemeCompatible
SHInfo
X-Client-Ip
X-WebNode
X-Wm-1
X-Old-Content-Length
X-Server-Instance-Name
X-MainProfileID
X-Test-Debug
PLCDN
X-Rewritten-By
X-NID
X-Pubstack
X-Cjtype
X-Not-Cacheable
Cache-Tags
X-Backend-Name
X-XHTML-Minification-Powered-By
X-MainProfileName
X-Who
X-NewsFlow-Sitename
X-ManagedFusion-Rewriter-Version
X-OCTOPOD
CDCHOST
Edgecast
X-Config-Version
Aurora-Node
X-WA-Info
X-MainProfileURL
X-Refresh
X-Real-IP
X-AMAZEEIO
X-Origin-Cache
X-FIRSTBase
X-MainProfileCategory
X-HP-CAM-COLOR
X-AppVersion
X-AWS
X-RequesterIP
X-XHR-Current-Location
Rewriter
GP-Version
UrlWatchModule-Time
Webserver
X-Amzn-RequestId
Aoestatic
AR-ATIME
X-HASH
X-Ss-Conf
Ibm-Web2-Location
Content-Cache
DbServerName
X-Amzn-Trace-Id
X-AppServer-Cache-Rule
X-S-Misc
X-Proxy-Id
X-Server-FQDN
X-ServiceProvider
X-Time-Zone
X-NodeID
X-HAProxy
X-Country
X-D-Time
X-ELB
X-Generation-Time
X-Ss-Location
X-Container
Generate-Time
X-SCProxy
IsMobile
X-Accel-Cache-Control
X-DynamicCache
X-Processed
X-Magento-Lifetime
GranicusServer
EQ-Cache
Microcache
X-Cache-LB
X-UT-Cache
X-Vary-Options
X-Obj-Ttl
AR-CACHE
X-Serendipity-InterfaceLang
X-Serendipity-InterfaceLangSource
FrontEnd
X-Fstrz
X-FreeTag-Count
Fw-Cache-Status
AR-SID
X-Count
AR-PoweredBy
X-Uncacheable
GP-Remote-Addr
X-Varnish-Cached
X-Cache-Varnish
Kp-EeAlive
X-Varnish-Cached-TTL
X-Streams-Distribution
X-Pagely-Cache
X-UnsetCookies
X-MCF-ID
X-Node-ID
Expiries
MSSmartTagsPreventParsing
X-VLoc
X-Backend-Host
X-DS1D
X-Varnish-Instance
X-Farm-Server
X-Bcwwwid
Cache-Status
X-Built-With
D
MSThemeCompatible
X-Varnish-URL
X-Cf-Powered-By
X-Ssl-Cipher
X-C2M-Server
X-C2M-Runtime
X-Litespeed-Cache-Control
X-Oracle-DMS-ECID
X-Cache-Cfc
X-COUNTRY-CODE
X-Webkit-CSP-Report-Only
Requested-Host
X-Generated-Date
X-Varnish-Debug-Hits
X-Bip
X-Clx-Request
Tesla.Performance
X-EBAY-C-REQUEST-ID
X-FG-RequestId
X-DEBUG-TTL
Content-Generator
Cache-Ctrol
WSCLoggingUUID
X-ESI
X-Ezpublish-Installationid
X-Ezpublish-Nodeid
Tk
X-Cache-ID
DB-Nickname
X-Support
X-HEAD
X-Grow-Cache
X-Cachable
X-Script
X-ServerAddr
X-VNode
X-ASAP-Age
X-Serverid
X-EC-Custom-Error
X-Cache-Bypass
X-Diazo-Applied
X-VG-WebCache
X-UPServer
B-Rlogid
Rlogid
X-Grow-Guest
X-FPC
X-MSU-SOURCE
X-PoweredBy
M
User-Cache-Control
X-Build-Id
X-Pool-Info
X-Skip-Cache
X-BPool-Fx-Cache
X-BServer
Resource
X-NMT-Proxy
E-TAG
Lookup-Cache-Hit
Contao-Page-Layout
X-BPool-Back
Be
X-BPool-Bx-Cache
Server-Tuning
X-Protected-By
X-Prerendered
X-Auto-Login
X-Netrix-ID
X-Instance-Id
X-Cluster
X-SRV
CpuTime
X-Stiffia-Cache
V-Age
X-BPool
HostName
X-Origin-Server
X-Pass-Through
X-PROCESSED-BY
X-SVR
X-Transaction-Name
X-Obvious-Tid
X-Highwire-Sitecode
X-Highwire-Smart-Code
X-Obvious-Info
X-Theme
WP-Cache
TheAnswer
X-Ants-Host
X-Ants-Machine-Id
X-BC
Language
Upgrade-Insecure-Requests
Accept-CH
ReqUrl
X-Geo-IP
Session
Yola-ID
X-Request-Received
X-Request-Processing-Time
X-Server-App
X-UUID
OutputRewritten
X-Content-Parsed-By
X-Built-By
X-Archive-Orig-Content-Length
X-Archive-Orig-Date
X-Archive-Orig-ETag
X-Archive-Orig-Server
ServerNode
WebServer
X-Max-Age
X-Turpentine-Cache
X-Varnish-Currency
X-Varnish-Esi-Access
X-Hash
X-Debug-Serve
Www.Aujourdhui.Com
X-Ar-Debug
X-Cache-Served
X-Debug-Out
X-Archive-Orig-Connection
X-Archive-Guessed-Charset
Container
Debug-Cache-Control
Debug-Expires
MwpReleaseVersion
AGI-Request-ID
Actual-Object-TTL
X-Instance-Name
X-Restarts
Httpd-Identifier
Hosted-By
X-AG-MIPS
X-Sn-Servicetimems
EXT-CACHEEXPIRE
Memento-Datetime
Server-Node
Kanooh-Host
X-B3-Spanid
X-B3-Traceid
X-Forwarded-By
X-CPU-Time
X-Vol-Correlation
X-Vol-Mrp
X-Varnish-Esi-Method
X-Varnish-Max-Age
X-Ec-Custom-Error
X-BeResp-Ttl
X-W-Cache
X-W-Cache-Hits
X-ZORequestID
X-Op-Benvironment
Prototype-RootPath
X-Czt
X-FCMS-Cache
X-HS-Status
Ez
X-ServedByHost
No-Cache
Url-Hash
X-Jcms-Ajax-Id
Apple-Itunes-App
CD1
X-CAMPUSSUITE-DEBUGGING
VC-NoCache
Application
X-CAMPUSSUITE-TENANT
X-CAMPUSSUITE-ENVIRONMENT
Copyright
0
X-Cache-Set
X-FastCGI-Cache
X-Does-He-Have-Time
X-Enabled1
X-Beatles-Hits
ResourceTag
X-Varnish-Set-Cookie
X-Varnish-Store
Content-Legth
Public-Extension
X-Enabled2
X-Enabled3
X-Csrf-Token
X-Imforza-Hosted
X-Pj-Cache-Status
X-No-Session
X-Amz-Meta-Version-Id
ProxiaInstanceId
Vserver
X-TTL-Age
X-Would-Your-GrandPa-Wait
X-Your-GrandPa-Would-Wait
X-9XB-Server