Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
X-Cache
Strict-Transport-Security
CF-RAY
X-AspNet-Version
P3P
Age
X-Pingback
Content-Language
X-UA-Compatible
Via
Expect-CT
Access-Control-Allow-Origin
X-Adblock-Key
Upgrade
X-Varnish
P3p
X-Cacheable
Content-Security-Policy
X-Check
X-Template
X-Language
X-Generator
X-Buckets
X-Drupal-Cache
X-Request-Id
X-AspNetMvc-Version
X-Type
X-Cache-Group
X-Pass-Why
X-Hacker
X-Ac
Alt-Svc
X-Powered-By-Plesk
Content-Location
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Xss-Protection
X-Download-Options
X-Runtime
Host-Header
MS-Author-Via
X-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId-Cached
X-Dc
X-ShardId
X-Sorting-Hat-Section
X-Sorting-Hat-PodId
X-Alternate-Cache-Key
Cartoon
X-IPLB-Instance
X-Powered-CMS
X-FRAME-OPTIONS
X-UA-Device
X-Served-By
Status
Access-Control-Allow-Credentials
X-Amz-Cf-Id
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Via
X-Cache-Status
X-Iinfo
X-Backend
X-Timer
X-ServedBy
X-Contextid
CF-Cache-Status
X-CST
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-PC-Key
X-PC-Hit
Powered-By
X-DIS-Request-ID
Content-Encoding
X-Mod-Pagespeed
X-Request-ID
X-PC-Date
X-PC-Host
X-PC-AppVer
X-Logged-In
Keep-Alive
WPE-Backend
X-Rid
X-Cache-Hit
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-CDN
X-Port
X-Host
Referrer-Policy
X-Tumblr-Pixel-1
X-Server
X-Server-Powered-By
X-Cache-Enabled
X-Tumblr-Pixel-2
X-Robots-Tag
X-Endurance-Cache-Level
X-Nginx-Cache-Status
X-Seen-By
X-Wix-Server-Artifact-Id
X-Wix-Request-Id
X-Wix-Renderer-Server
X-Page-Speed
X-Turbo-Charged-By
X-Accel-Version
X-Wix-PunisherID
WP-Super-Cache
X-Pad
X-Drupal-Dynamic-Cache
Content-Security-Policy-Report-Only
X-Content-Powered-By
X-Tumblr-Pixel-3
X-Forwarded-For
X-Forwarded-Proto
X-Content-Digest
X-Rack-Cache
X-Varnish-Cache
X-Styx-Req-Id
Surrogate-Key-Raw
X-Pantheon-Styx-Hostname
X-AH-Environment
X-Proxy-Cache
X-GitHub-Request-Id
X-Original-Date
X-Cnection
SPRequestGuid
X-SharePointHealthScore
X-Died
MicrosoftSharePointTeamServices
X-Request-Country
X-MS-InvokeApp
X-XRDS-Location
Edge-Control
X-Cache-Lookup
X-LiteSpeed-Cache
X-WPE-Loopback-Upstream-Addr
Cf-Railgun
Timing-Allow-Origin
X-Amz-Id-2
X-Amz-Request-Id
X-Safe-Firewall
X-SERVER
Charset
MicrosoftOfficeWebServer
X-FW-Hash
X-FullPageCaching
X-Webserver
Request-Id
X-FW-Static
X-FW-Serve
X-FW-Type
Edge-Cache-Tag
X-PhApp
X-Node
X-Content-Security-Policy
X-HS-Cache-Config
X-HS-Content-Id
SPIisLatency
X-INKT-SITE
X-INKT-URI
SPRequestDuration
X-CF-Powered-By
X-Tumblr-Pixel-4
X-Hits
Composed-By
Access-Control-Max-Age
Content-MD5
Liferay-Portal
Grace
X-Swift-CacheTime
X-Swift-SaveTime
X-AWS-Id
X-LJ-Flow-ID
X-VWS-Id
Served-By
Request-Context
EagleId
X-Hyper-Cache
X-Newrelic-App-Data
Rating
Access-Control-Expose-Headers
X-Spip-Cache
X-PHP-Backend
X-CDN-Pop-IP
X-CDN-Pop
X-BC-Stapler
X-Server-Name
X-Backend-Server
X-Device
Fastly-Debug-Digest
X-Fastly-Request-ID
X-Firenze-Processing-Times
X-Microcache
X-Dw-Request-Base-Id
X-Tumblr-Content-Rating
X-ServerName
Content-Style-Type
X-RateLimit-Remaining
Content-Script-Type
X-VCache
X-RateLimit-Limit
X-User-Agent
Public-Key-Pins
X-RateLimit-Reset
X-Cloud-Trace-Context
X-FB-Debug
X-Jimdo-Wid
X-Jimdo-Instance
X-Clacks-Overhead
X-Cache-Config
Front-End-Https
Refresh
Real-Hostname
X-Loop
X-TNCMS
X-DDC-Arch-Trace
X-Acc-Exp
X-Age
Surrogate-Control
Xkey
X-XN-XNHTML
X-XN-Trace-Token
Fpc-Cache-Id
X-Trace
X-Hostname
X-Tumblr-Pixel-5
X-Sol
X-Middleton-Response
X-Middleton-Display
Response
Display
PageSpeed
X-Px
X-Cached
X-DNS-Prefetch-Control
X-Generated-By
X-N-OperationId
X-StackifyID
X-SS-Location
X-SS-Conf
X-WebKit-CSP
X-MiniProfiler-Ids
X-LiteSpeed-Cache-Control
X-Topify-Platform
X-Request-Time
X-Cached-By
Surrogate-Key
X-DynaTrace-JS-Agent
X-Content-Options
X-Zen-Fury
X-Amz-Version-Id
X-Url
X-FORWARDED-FOR
Edge-Control-Message
X-DynaTrace
X-CMS-Version
X-HS-Combine-CSS
TCN
X-Pantheon-Site
X-Pantheon-Environment
X-Pantheon-Phpreq
Rt-Fastcgi-Cache
X-Whom
X-URL
X-Content-Security-Policy-Report-Only
X-ApacheServer
X-PERF
X-Outils-CS
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Kinsta-Cache
Access-Control-Request-Method
Product
X-Handled-By
X-Magento-Tags
Alternate-Protocol
X-OneAgent-JS-Injection
DynaTrace
X-AspNetWebPages-Version
P-LB
P-WS
X-Umbraco-Version
Host
Imagetoolbar
X-Tumblr-Pixel-6
X-Ruxit-JS-Agent
X-Varnish-Cache-Hits
X-HOST
X-Varnish-TTL
X-Correlation-Id
X-Engine
X-Cache-Rule
Powered
Fhost
X-NWS-LOG-UUID
X-Goog-Hash
X-Fastcgi-Cache
Generator
X-Recruiting
ServedBy
X-Microcachable
X-CacheServer
X-B-Cache
X-LBLID
X-Powered-By-360WZB
WZWS-RAY
X-Location-Id
X-Edge-Location
X-Instart-Request-ID
X-Micro-Cache
X-From
X-RESOURCE
X-Track
No
X-Vtex-Processed-At
X-Vtex-Remote-Cache
X-Vtex-Processado-Em
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-Application-Context
X-VTEX-Cache-Status-Janus-ApiCache
Fastcgi-Cache
X-Hosted-By
X-Actual-URL
X-URLSCHEME
X-Tec-Api-Origin
X-Cache-Age
X-Tec-Api-Root
X-Tec-Api-Version
X-Passed-To-DLL
X-Returned-From
X-Returned-From-DLL
X-Original-Request
X-Passed-To
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
Arr-Disable-Session-Affinity
X-Varnish-Beresp-Ttl
Origin
X-Passed-To-PostProcessResponse
X-Passed-To-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Powered-By-VTEX-Janus-Edge
Content-Hash
X-Stale
Public-Key-Pins-Report-Only
Dmn
Akamai-IP
X-Upstream
X-Cache-TTL
X-Varnish-Host
X-BS
X-Developer
X-Response-Time
X-I-Sp
X-Accel-Expires
X-LB
X-UD-Method
X-Msg-2-Log
X-Rocket-Nginx-Bypass
X-Device-Type
X-Platform
X-Matrix-Proxy
X-Matrix-Server
X-App-Hosting
X-Source
X-NetCat-Version
X-Signature
X-Platform-Router
X-S
X-Platform-Processor
X-VARNISH-Cache
X-TransIP-Balancer
X-Debug-Info
X-Platform-Cluster
X-Duration
X-Storage
X-Page-Cache
X-LW-Cache
Last-Published
X-Front
X-Defender
X-Shop-Id
HTTPS
X-Internal-ReqID
Ohc-File-Size
X-Revision
X-Daa-Tunnel
X-Translation
Cache-Key
X-EdgeConnect-Origin-MEX-Latency
X-Microcache-Status
X-Powered-By-VelaWeb
X-Cache-Info
X-Supported-By
X-Version
X-Varnish-HitMiss
X-Varnish-Count
IBM-Web2-Location
X-Varnish-Cacheable
X-TransIP-Backend
X-Cache-Debug
MIME-Version
X-HS-Content-Campaign-Id
Pool
X-Art-Request-Id
Powered-By-ChinaCache
X-Cache-Operation
X-Expires-Orig
USPLoggingUUID
X-EdgeConnect-MidMile-RTT
X-I
X-ATG-Version
X-Server-ID
Version
X-Gamma-Serve
X-Director
X-NoCache
X-F-Cache
X-Content-Encoded-By
X-Cache-Key
X-Dispatch
Content-Disposition
X-Dispatcher
Node
X-LB-Node
X-Cache-Only-Varnish
X-Hypernode
Cache-Provider
X-Varnish-Age
X-Lambda-Id
X-Cache-Tags
X-Firenze-Processing-Time
X-VTEX-Cache-Status-Janus-Edge
ServerName
X-Vcap-Request-Id
X-SV-FromDBCache
X-SV-CreatedAt
X-SV-Edge
X-SV-Nginx-Duration
X-SV-Pid
X-SV-Duration
X-Sucuri-ID
IM-Version
X-Flow-Powered
X-Varnish-GracePeriod
SSPAppContext
X-Varnish-ObjectSource
X-SV-Expires
X-SV-Cacheable
X-Varnish-Backend
X-Route-Server
Allow
X-Varnish-Seen-By
X-SV-CacheTags
X-Varnish-RemainingLife
X-Varnish-RemainingTTL
X-GeoIP-Country-Code
X-Abgroup
X-Platform-Server
X-Magento-Cache-Debug
X-Cache-Control-Orig
X-Server-Upstream
X-AOL-HN
X-Platform-Cache
X-ARC
Srv
X-SSL-Cipher
Accept-Encoding
Lsrequestid
X-Debug
X-TTL
X-SSL-Protocol
X-Cache-Expires
X-Cache-Lifetime
X-Origin
X-Sucuri-Cache
X-UPSTREAM
X-Last-Modified
X-Client-IP
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-Geo-Country
X-Loopia-Node
X-Dns-Prefetch-Control
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
Fw-Via
Pv
Content-Encoding-Handler
X-Proxy
X-SDS
X-Via-JSL
Proxy-Connection
FAI-W-FLOW
X-CJ-Soft
Location
Backend
X-Litespeed-Cache
X-Grace
X-Edge-IP
SN
X-PwB-Node
Section-Io-Id
X-RequestId
Cneonction
X-Amz-Meta-S3cmd-Attrs
Wsr-Cache
X-Cookie-Domain
X-ORACLE-DMS-ECID
PICS-Label
Tracecode
X-Browser
X-SE-Debug
X-IsCacheURL
X-Abuse
X-Content-Age
ServerID
X-Akamai-Device-Characteristics
X-SRCache-Key
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Cache-Server
X-Url-Base
X-Shield-Request-Id
X-Country-Code
Page-Completion-Status
X-Speed-Cache
X-Speed-Cache-Key
X-Correlation-ID
X-GeoIP-Country-Name
X-Discourse-Route
NnCoection
Accept-Charset
X-Nbs
X-Processed-By
Req-Id
X-Hiawatha-Cache
X-ServerID
X-Xrds-Location
X-Cache-Engine
X-Rnd
X-Server-Id
X-Generated
X-Sapient
RTSS
X-Id
X-Drupal-Cache-Tags
Cm-Server
S
X-Cf-Powered-By
X-N
X-Middleware-Start
X-CDN-Forward
X-NB-Cached-Page
X-Time
X-Orig-Vary
X-CDN-Cache-Status
X-CDN-Node
Edge-Content-Tag
X-Processing-Time
X-Purge-URL
X-Yadis-Location
If-Modified-Since
Author
X-Nginx-Cache
X-BackendServer
X-Cache-CFC
X-FW
X-BKSrc
X-Cache-Type
Use-Proxy
WWW-Authenticate
X-Akamai-Device-Model
X-Varnish-Url
X-Frontend
X-Route-To
Nodo
X-Traffic
X-Config-Blacklist-Version
X-Worker
Qs-Cache
X-Varnish-ID
X-Akamai-Transformed
A-Powered-By
HAVer
X-Srv
NetMindSessionID
HCVer
X-Cache-Level
X-SO
X-Cache-PageType
X-Varnish-IP
X-Vhost
X-Real-Server
X-Amz-Storage-Class
X-Cache-Fix
X-Cache-Control
Content-Transfer-Encoding
Retry-After
X-Varnish-Ttl
Xc-Version
X-PF-Uncompressing
X-DealerOn
X-Magnolia-Registration
X-HP-Trace-Project
X-ID
X-HP-Trace-ID
Server-Info
X-Purge-Host
X-Pressidium-NinukisWP-Ver
Frame-Options
X-Always-Cache
Cache
Local-Info
X-LB-Server
SRV
X-Magento-Cache-Control
X-Runtime-Memory
X-Yottaa-Optimizations
Web-App-Origin-Name
X-Sys-Req-ID
X-JG-Page-Cache
X-WN-ClientGroup
X-Yottaa-Metrics
X-DataDome
X-Env
X-Varnish-Hits
WN
AMF-Ver
S-Cnection
X-FireWall-Port
AddOutputFilterByType
Access-Control-Allow-Header
MC
X-Cache-Handler
X-Cache-Device-Type
NODE
Cache-Tag
X-Hit-Cache
X-Litespeed-Cache-Control
X-Pagename
SVR
X-ClientSide-Caching
X-App-Server
Eomportal-Instance
X-Empowered-By
Thanks
X-Mobilized-By
X-Ttl
X-Environment
MJ12bot
X-Powered-By-Server
X-ACMCache
Magicmarker
CLMOB
SEOMOZ
X-Healthy
X-VARITI-CCR
X-VC-TTL
X-Directory-Script
X-Dw-Trace-Id
X-CB-Server
Nitro-Cache
X-Framework
X-CDN-RULE
X-Remote-Addr
Cached
X-CDN-COMPRESS
X-CF-Passed-Proto
X-High-Performance
X-Varnish-Retries
X-Webkit-CSP
X-Culture
X-Varnish-Server
X-Cache-Provider
X-Cache-Source
X-SmugMug-Values
Dispatcher
X-Twitter-Response-Tags
X-GeoIP
X-Runtime-Rack
X-Transaction
X-TTFB
X-Connection-Hash
Proxy-Agent
Server-Name
X-TTFB-L
X-WR-Flags
CacheControlHeader
Smug-CDN
X-SmugMug-Hiring
X-ServerIndex
Warning
EagleEye-TraceId
X-Drectory-Script
X-AF-Userserver
BALANCEDTO
Front
XDomainRequestAllowed
X-HW
DNNOutputCache
X-Drupal-Cache-Contexts
X-Session-ID
X-Wix-Punisher
Content_type
Max-Age
Pagespeed
X-NODE
Disablevcache
X-LP
X-Cache-Doesi
X-Balanceador
X-Adobe-Loc
X-Debug-Token
X-EPiphany-Vid
X-WHOIS-Cached
X-Client-Vid
X-Client-Image-Vid
X-HOSTNAME
X-VC-Enabled
X-Middleton-PageSpeed
X-ORACLE-DMS-RID
W
X-Provisioner-Version
X-Amz-Meta-Cb-Modifiedtime
X-Adobe-Content
X-App-Status
X-Mobile-URL
X-Ezoic-Cdn
X-Domain-Checked
X-Key
Cmstype
Identity
X-Cache-Node
X-Clara-ASAP
Cmsid
NtCoent-Length
Home
X-UA
X-Symfony-Cache
X-ASAP-Cache
X-Session-Reinit
X-WR-MODIFICATION
OriginServer
X-Varnish-Hostname
X-OpenCart-Lightning
X-Server-IP
X-INSTART-START
X-Location
X-Backend-Status
X-Resty-Request-Id
X-Server-Instance
HitType
X-Info
X-Cluster-Node
Strikingly-Cached
X-HTML-Minification-Powered-By
Ctx
Strikingly-Cached-Version
Strikingly-Cache-Region
Keywords
Machine
X-ARRServer
X-Unbounce-PageId
X-Unbounce-Variant
X-Fedora-School-Id
X-Unbounce-VisitorID
X-Cache-Dispatcherpragma
SBGI-9
X-HashTwo
SBGI-Device
SBGI-5
SBGI-RealPath
X-Resolver-IP
SBGI-RenderTime
X-Data-Request
X-Cache-Dispatchercachecontrol
Noq
ViewMode
Ram
X-Atraveo-Zone
X-Atraveo-Varnish-Server-Id
X-Atraveo-TTL
SBMCLOUD
Swift-Performance
X-HA-Frontend
X-Machine
Ufe-Result
X-WP
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
X-PRAM
X-This-Proto
X-Force
X-Apm-Telemetry-Syncmark
X-Aramark-SID
X-IIJ-Cache
X-Atraveo-Cache-Control
X-HA-Backend
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
X-Atraveo-ETag
X-Source-ID
SBGI-7
X-Akamai-Edgescape
X-Wikidot-Backend
X-TB-M
X-Avg-Cookie-Expires
X-AVG-Country-Code
X-CSRF-Token
X-Redman-Backend
X-Disney-Akamai-Rule
X-Unique-ID
X-Cache-Detail
X-A
X-Jphone-Copyright
X-Content-Type-Option
X-CAPServer
X-Rack-Cors
X-RiS-UFDI
X-Amz-Id-1
X-Wikidot-Static-Cache
SBGI-1
X-Redman-Final-Url
Yoncu-Errno
X-Garden-Version
SBGI-10
IISExport
X-App
Backend-Timing
X-Analytics
Fastly-Backend-Name
X-Site
X-Goog-Meta-Replace
X-NginX-Cache
X-DB-Content-Length
Nginx-Cache
X-Map-Context
X-Req-Head-Response
X-HydroSheep
X-Page
From-Origin
Description
X-Goog-Meta-Policy
X-Ser
NLCacheNote
Bios
X-Cocoon-Version
X-LW-Web-Server
X-Webcelerate
From
WP-AdvCache-MemCached
X-Esi
Access-Control-Allow-Method
SHInfo
Proxy-Cache
X-Smartcache-Timeout
Cteonnt-Length
X-Blog
X-B2f-Not-Route
X-NginX-Server
Cache-Tags
X-Varnish-Cache-Local
Ews
ServerSignature
X-HP-Redirect
X-Origin-404URL
Il-Cl
X-E
X-Origin-404Back
X-Plat
X-SERVER-NAME
Accept-Language
ScoreTracker
X-MSEdge-Ref
X-Frame-Option
X-Detected-Device
ServerTokens
Dis-Env
X-Rocket-Nginx-Serving-Static
X-EC2-Instance-Id
Ttl
Traffic-Origin
X-Cache-TTL-Remaining
X-Batcache-Reason
X-Batcache
MW-Webserver
RN-Server
X-Hosting-Env
X-Hosting
X-SDE-Name
Set-Cookie2
X-Generated-Time
X-Nginx-Host
X-Smartcache-Keys
Id
SiteSpeed
X-RealServer
X-ACCELERATE
X-Hstore
AsisCache
Beyond-Iis
X-Rq
X-Trace-Id
X-Pj-Cache-Status
X-Stage
X-AutoRu-App-Id
X-Autoru-LB
X-Autoru-Host
X-AEM
PagesDisplayed
X-Hrouter
Pics-Label
X-NewRelic-App-Data
X-HITS
X-Cms-Mode
Worker
X-KoobooCMS-Version
X-Dev
X-LBPoolMember
COMMERCE-SERVER-SOFTWARE
SG
X-Response
X-Frames-Options
Hname
X-Actindo-Request-Id
X-Actindo-Error-1
X-RDP
X-Actindo-Rs
X-CRA-DC
Cluster-ID
Paypal-Debug-Id
X-MAT-GEO
X-Depends
X-Machine-Name
X-Rewrite
X-MCB-Server
Sophnep-Edge-FX
X-GSL-Server
X-Rebelmouse-Cache-Control
X-Ghost-Cache-Status
X-WPL-DATA
X-Rebelmouse-Surrogate-Control
Content-Server
X-Cache-On
SB-Cache-Life
SB-Site-Device
SB-Site-IE-VERSION
AccessControlAllowOrigin
SB-Cache-Remaining
X-Cached-Status
AMP-Access-Control-Allow-Source-Origin
X-MidCOM-Meta-Cache
FastCGI-Cache-Status
X-Sc-Cache
Access-Control-Request-Headers
NS-VaryByCustom-Key
X-Actindo-Thread-Id
X-CacheResult
TC-S-Cache
TC-S-Cache-M
X-Render-Time
X-Distil-CS
RSB-LINK
X-Ss-Conf
TC-Cache
TC-Cache-IC
TC-Cache-U
X-Ss-Location
X-VarnMisc-UrlChanged
X-VarnMisc-Url
X-DSMX-Rewrite-MS
PServer
X-Rack-CORS
Xc
X-CACHE-TTL
X-DSMX-Render-MS
MS-CV
X-Cache-Keep
X-DTC
X-Adnet
X-SmartBan-URL
X-VarnState-NoCache
X-SmartBan-Host
X-Proto
X-Highwire-RequestId
X-Highwire-SessionId
Gzip
X-Airee-Node
F5-IpCliente
X-Cache-Time
Hosted-By
ClientIP
X-Cache-HT
X-Grid-Server
X-Gyrobase-Publication
X-Search-Id
Web
X-Distributor
X-OPNET-Transaction-Trace
X-Runtime-Affili
X-App-Runtime
X-Optimization
X-ReqId
X-SCM-Server-Number
X-Artvisual-Server
Og
VServer
Device
X-Header
X-Oracle-DMS-ECID
X-Unique-Id
X-HostName
X-Webstats-RespID
X-Flex-Tag
X-PM-ID
X-OCTOPOD
X-Secret
X-Flex-Tags
X-GoCache-CacheStatus
X-Title
X-Flex-Lastmod
Session-From
ServerIP
X-Flex-Evend
X-Flex-Evstart
X-Server-Generated
X-Flex-Community
X-Cache-Via
X-XHR-Current-Location
CommunityServer
X-Flex-Lang
Myheader
X-Forwarded-Host
X-Amz-Meta-Content-Md5
X-Desc
X-Captured
X-4ormat-Cacheable
X-Origin-Server
X-Nginx
X-ProcessESI
Ibf5scheme
N365rili
X-We-Are-Hiring
Response-Time
X-RemovedCookies
X-SilverStripe-Cache
X-ASAP-Age
X-Viator-Tapersistentcookie
X-Avvio-Cms-Cacheload
X-CacheID
X-Obj.Ttl
AC-ELC
X-ACLR-Version
WebServer
Server-ID
X-Proxy-Cache-Key
DrivedBy
X-Src-Webcache
X-AMAZEEIO
X-Upstream-Status
X-Upstream-Backend
Actual-Object-TTL
X-Webkit-CSP-Report-Only
X-Would-Your-GrandPa-Wait
X-TTL-Age
Url
X-Your-GrandPa-Would-Wait
X-Processed
X-WA-Info
X-Served
X-Router
X-Real-IP
X-Lima-Id
X-Dynatrace-Js-Agent
X-Replay-Request-ID
X-M
X-SCProxy
X-Beatles
Uuri
X-Served-Server
X-HAProxy
X-Pagely-Cache
X-Origin-Cache
X-Author
X-Tag-Playlist
Tempo
X-VNode
Brightspot-Id
Buuteeq-Source
Hamster
Quri
X-Header-Treatment
X-Cache-LB
X-Does-He-Have-Time
X-EMAC-Request-ID
X-Cache-Set
X-Beatles-Hits
X-CCM
X-HA
X-Session-Id
X-App-Version
X-DN-Cache-Control
X-ETag
X-Deity
X-JSESSIONID
X-Layout
X-Cname-TryFiles
INFO
X-Debug-Message
X-RAMCache
X-IP
X-SH-Cache-Status
X-REDIRECTSERVER
X-W3TC-Minify
Server-Ip
X-Bcwwwid
X-Serv
Provider
X-Cdn-Forward
BackendServer
X-CACHE-KEY
ProxiaInstanceId
X-Reflector-Cache
X-Varnish-Ip
X-Varnish-Action
TP-Cache
X-Varnish-URL
TP-L2-Cache
X-Container
RATING
X-Resource
X-Cache-BE
X-Turpentine-Esi
X-Nginx-Request-Processing-Time
X-Cache-Warmer
X-Lb
X-PBY
X-Reflector
SERVER-ID
X-ChromeLogger-Data
NZSpeedy
X-Cache-TTL-Age
X-Fstrz
X-Instance-Name
X-Meta-MSSmartTagsPreventParsing
X-Cache-TTL-Current
X-Gannett-Site-Version
X-VLoc
X-Node-ID
X-Script
X-Server-FQDN
X-ServerAddr
X-MCF-ID
X-ELB
X-Built-With
X-Cache-Varnish
X-Country
X-CPU-Time
X-Streams-Distribution
X-Time-Zone
Hostname
Httpd-Identifier
MSSmartTagsPreventParsing
MSThemeCompatible
Debug-Status
X-Meta-MSThemeCompatible
X-UPServer
X-Varnish-Cached
X-Varnish-Cached-TTL
X-Varnish-Instance
StatusCode
X-HS-Status
X-HEAD
X-Srcache-Fetch-Status
X-Srcache-Store-Status
X-UPSTREAM-Address
Generate-Time
PB-RID
PB-PID
X-Cache-ID
HostName
X-Route
X-Pixelsilk-Version
X-Svr
X-Test
EQ-Cache
Be
Tesla.Performance
X-Amz-Meta-Version-Id
X-Config-By
CD4
X-Phpwcms-Release
Arrnode
X-ImpID
Edgecast
X-Sites
X-Phpwcms-Page-Processed-In
X-Backend-Host
X-Mobile-Rewrite
X-DynamicCache
X-UT-Cache
X-FIRSTBase
X-Server-Instance-Name
X-Dynamic-Cache
X-Pixelsilk-Server
X-NID
X-SV
X-Status
X-Restarts
X-Built-By
X-Ezpublish-Installationid
X-NodeID
X-Ezpublish-Nodeid
X-Forwarded-By
X-DS1D
X-Varnish-Debug-Age
X-Server-Addr
X-Varnish-Debug-TTL
AGI-Request-ID
X-AG-MIPS
MwpReleaseVersion
X-Pass-Through
X-UUID
User-Agent
Server-Tuning
Ozcache
V-Age
X-Backend-Name
X-Checkout
X-Cache-Id
X-Time-Microsecs
X-Rewritten-By
Aurora-Node
Accept-CH
Service-Worker-Allowed
X-Cjtype
X-ManagedFusion-Rewriter-Version
X-FRUIT
X-Old-Content-Length
X-Meta-Imagetoolbar
MageStack-Area
X-Webapp
X-Zendesk-Origin-Server
X-Zendesk-User-Id
Lb
XDisk
X-UseReverse-Proxy
X-Serendipity-InterfaceLangSource
X-Router-Backend
MageStack-Cache-Status
MageStack-Cache-Hits
MageStack-Cache
X-Serendipity-InterfaceLang
Session-Id
X-DevSrv-CMS
X-VC-Debug
X-Not-Cacheable
X-WebNode
X-Powered-By-Home.Pl
Resin-Trace
X-Made-On
X-Nginx-Request-Time
X-MainProfileURL
X-LOCATION
X-HP-CAM-COLOR
X-MainProfileCategory
X-MainProfileID
X-MainProfileName
X-Pageid
X-Magento-Action
X-Amcomm-Site
RequestId
X-Accel-Cache-Control
Str-Ip
MageStack-Web-Node
Str-Bsite
Referer
Provided-Host
Y-Trace
X-V
X-Compressed-By
Fw-Cache-Status
Note
MageStack-Tag
MageStack-PageSpeed
MageStack-Config
X-FreeTag-Count
MageStack-Cacheable
X-IP-Address
X-L-Path
X-Fastly-Backend-Reqs
X-Environment-Context
X-Cacheable-TTL
MageStack-Magento-Version
X-CH-Device
MageStack-Loadbalancer
MageStack-Debug
X-Agent
MageStack-Cache-Lifetime
Content-Cache
X-Upgrade-Enabled
AR-CACHE
AR-ATIME
DbServerName
AR-PoweredBy
X-Sid
X-DeliveryServer
X-Dynamic
X-ENV
AR-SID
FindLaw
Rewriter
X-Application
X-Uncacheable
Cache-Status
D
X-Highwire-Smart-Code
X-Highwire-Sitecode
UrlWatchModule-Time
Webserver
X-AppServer-Cache-Rule
X-Bip
X-Cluster
X-Proxy-Id
X-Box
X-Brought-To-You-By
X-Cache-Extended
X-COUNTRY-CODE
X-Beresp-Ttl
Serverid
X-WebServer
X-DEBUG
Kp-EeAlive
X-Hit
Tk
X-Node-Name
Cookie
X-B3-Spanid
X-Farm-Server
VAR-Cache
X-ServiceProvider
Apple-Itunes-App
X-Wm-1
X-Wm-VIP
RSL-Trace-ID
X-Cache-Action
MachineName
Memento-Datetime
X-Vary-Options
Ez
Expiries
IES-Server
X-LB-Backend
X-LB-Frontend
VC-NoCache
AMFplus-Ver
X-AISO-Cache
X-AISO-Cacheable
X-AISO-Server
Vserver
X-7d-Trace-Id
X-7d-Instance-Id
X-Obvious-Info
X-Obvious-Tid
X-Nginx-Page-Cache
DB-Nickname
X-Client-Ip
X-Config-Version
Powered-By-VeryCDN
X-Cache-Me-Harder
No-Cache
Progma
AliCDN-Forbidden-Reason
X-Via-NSCOPI
X-B3-Traceid
X-Backend-TTL
X-Tt-Dbg
X-Csrf-Token
X-Archive-Guessed-Charset
ServerNode
Realaction
SS
Www.Aujourdhui.Com
X-Allow-Redis
OutputRewritten
BM-Cache-Status
X-XHTML-Minification-Powered-By
X-Test-Debug
Actioncode
BM-Cache-Key
BM-Cache-Node
X-Amz-Meta-S3b-Last-Modified
X-Ar-Debug
X-Varnish-Set-Cookie
X-Varnish-Esi-Method
X-Varnish-Store
ERev-Ver
WP-Cache
X-Varnish-Esi-Access
X-Varnish-Currency
X-Cache-Served
X-Max-Age
X-Purge-Level
X-Turpentine-Cache
X-TempoPesquisa
X-Server-App
X-RequesterIP
X-Cache-Date
X-Theme
X-WHO
CDCHOST
X-Archive-Orig-Server
X-Archive-Orig-Etag
X-BeResp-Ttl
X-Archive-Orig-Connection
X-Archive-Orig-Content-Length
X-Archive-Orig-Date
Kanooh-Host
Fastly-Restarts
X-Protected-By
X-PoweredBy
X-Pubstack
X-Request-Processing-Time
X-Request-Received
X-Custom-Name
X-BC
VANITY-HOST
X-Ants-Host
X-Ants-Machine-Id
X-AWS
TTL
Yola-ID
X-BPool-Back
X-BPool
X-BPool-Bx-Cache
X-BPool-Fx-Cache
X-BServer
X-AppVersion
Cleartype
Language
GranicusServer
ReqUrl
TheAnswer
FrontEnd
IsMobile
X-Skip-Cache
X-POPSUGAR-Server-Name
X-Vid
X-FG-RequestId
X-Tradeindia-SMgmt
Public-Extension
X-Varnish-Cache-Ttl
X-Mobile-Device
X-PBS-Fwsrvname
X-Static
ResourceTag
X-Cache-FS-Status
X-Varnish-Mode
X-PBS-Appsvrname
Https
X-ACache
Type
X-BIT-Node
X-PBS-Appsvrip
DeleGate-Ver
X-NewsFlow-Sitename
CDN-Cache
CDN-Cache-Hit
CDN-Node
X-Mobile-Device-Type
X-Geo-IP
X-Ssl-Cipher
X-Varnish-Auto-Cache-Miss
X-Who
X-ZSITES-DNS
X-Catalyst
X-PROCESSED-BY
X-Instance-Id
Upgrade-Insecure-Requests
X-Faeria
Microcache
X-APP
X-Tradeindia-Request-GUID
X-Imforza-Hosted
Proxy1
X-Service-Id
X-Fpc
X-SuperCache
Phoenix-Proxy-Cache
Phoenix-Mark
X-MSU-SOURCE
Phoenix-A
Phoenix-Cache
Phoenix-Cache-V
X-9XB-Server
X-WebKit-CSP-Report-Only
X-Cache-V
CacheControlMode
LB
Section-Io-Cache
X-Transaction-Name
X-Server-Ident
Copyright
X-Czt
X-IsCached
X-Memcached
Server-Id
WFE
X-Wily-Info
X-RiS-PX
!~Request-OOB-Work
X-Obj-Ttl
Page-Template
Load-Balancer
X-Dynatrace
X-Enhanced-By
Dynatrace
X-ClusterID
X-SRV
SINA-LB
SINA-TS
X-Clx-Request
X-DDM-SERVER
X-DDM-SERVER-UPDATED
X-NewCloud-V-Cache
Container
X-Front-Cache
EREV-Ver
X-Instart-Cache-Id
X-Wily-Servlet
X-Sn-Servicetimems
Tst