Threat Level: green Handler on Duty: Rick Wanner

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
X-Cache
X-AspNet-Version
Age
P3P
X-Pingback
Content-Language
Via
X-UA-Compatible
Expect-CT
Upgrade
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Check
X-Language
X-Template
X-Varnish
X-Request-Id
X-Xss-Protection
Alt-Svc
X-Generator
X-Buckets
X-Drupal-Cache
P3p
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Powered-By-Plesk
X-Download-Options
Content-Location
Host-Header
X-Runtime
MS-Author-Via
X-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Dc
X-ShardId
X-Sorting-Hat-Section
X-Sorting-Hat-PodId-Cached
X-Alternate-Cache-Key
Referrer-Policy
X-UA-Device
Cartoon
X-Powered-CMS
X-IPLB-Instance
X-Served-By
X-Amz-Cf-Id
Access-Control-Allow-Headers
Access-Control-Allow-Credentials
Access-Control-Allow-Methods
Status
X-Cache-Status
X-Via
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Wix-Server-Artifact-Id
CF-Cache-Status
X-Contextid
X-ServedBy
X-Backend
Powered-By
X-Mod-Pagespeed
X-PC-Key
X-PC-Hit
X-Accel-Buffering
Content-Encoding
X-PC-Host
X-PC-AppVer
X-PC-Date
X-CST
X-DIS-Request-ID
X-WPE-Loopback-Upstream-Addr
X-Ua-Compatible
X-Logged-In
Keep-Alive
X-Host
X-CDN
X-Cache-Hit
X-Port
X-Rid
X-Cache-Enabled
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-Server-Powered-By
X-Endurance-Cache-Level
X-Server
X-Tumblr-Pixel-1
X-Nginx-Cache-Status
X-Robots-Tag
X-Original-Date
X-Accel-Version
X-Seen-By
X-Wix-Request-Id
X-Turbo-Charged-By
X-Drupal-Dynamic-Cache
X-Tumblr-Pixel-2
X-Page-Speed
X-CACHE
X-Pad
X-Content-Powered-By
X-Forwarded-For
X-Proxy-Cache
X-Content-Digest
X-Wix-Punisher
X-AH-Environment
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Rack-Cache
WP-Super-Cache
X-NewRelic-App-Data
X-Forwarded-Proto
X-Varnish-Cache
Content-Security-Policy-Report-Only
X-GitHub-Request-Id
X-Tumblr-Pixel-3
X-LiteSpeed-Cache
Edge-Control
X-Request-Country
SPRequestGuid
X-SharePointHealthScore
X-MS-InvokeApp
MicrosoftSharePointTeamServices
X-XRDS-Location
X-Sorting-Hat-PrivacyLevel
X-Cache-Lookup
Timing-Allow-Origin
X-Cnection
X-SERVER
X-Newrelic-App-Data
X-Node
Cf-Railgun
X-FW-Hash
X-Amz-Id-2
X-Amz-Request-Id
X-Died
X-Trace
X-Webcom-Cache-Status
X-FW-Static
Charset
X-FW-Type
X-FW-Serve
X-Content-Security-Policy
X-Webserver
Request-Id
X-FullPageCaching
Edge-Cache-Tag
X-HS-Cache-Config
X-PhApp
X-HS-Content-Id
X-CF-Powered-By
X-Hits
MicrosoftOfficeWebServer
Request-Context
X-PHP-Backend
SPIisLatency
SPRequestDuration
X-INKT-SITE
X-INKT-URI
X-BC-Stapler
Access-Control-Max-Age
X-Safe-Firewall
EagleId
X-Swift-CacheTime
X-Swift-SaveTime
Composed-By
Grace
Access-Control-Expose-Headers
Served-By
X-CDN-Pop
X-CDN-Pop-IP
X-HS-Combine-CSS
Liferay-Portal
X-Hyper-Cache
X-Spip-Cache
X-Backend-Server
X-Server-Name
X-Dw-Request-Base-Id
X-Device
X-Tumblr-Pixel-4
X-VCache
X-Fastly-Request-ID
X-Request-ID
X-Microcache
X-RateLimit-Remaining
X-RateLimit-Limit
X-Firenze-Processing-Times
X-Cloud-Trace-Context
Xkey
X-Clacks-Overhead
X-LiteSpeed-Cache-Control
X-FB-Debug
X-RateLimit-Reset
Content-Style-Type
Front-End-Https
Surrogate-Control
Content-Script-Type
X-Jimdo-Instance
X-Jimdo-Wid
X-TNCMS
X-Loop
Rating
X-ServerName
X-DDC-Arch-Trace
Public-Key-Pins
X-Acc-Exp
X-User-Agent
Refresh
X-DNS-Prefetch-Control
Response
Display
X-Middleton-Response
X-Sol
X-Middleton-Display
X-Cache-Config
X-Vtex-Processado-Em
X-StackifyID
X-XN-XNHTML
X-Age
X-XN-Trace-Token
Real-Hostname
X-Frame-Option
Fpc-Cache-Id
X-Hostname
X-SS-Conf
X-SS-Location
X-Tumblr-Content-Rating
X-Px
X-Zen-Fury
X-Generated-By
X-Cached
X-N-OperationId
X-WebKit-CSP
X-Topify-Platform
X-Dscp-Value
X-HOST
X-Magento-Tags
X-Tumblr-Pixel-5
X-Correlation-Id
X-Amz-Version-Id
X-MiniProfiler-Ids
X-Request-Time
X-Url
TCN
P-LB
PageSpeed
P-WS
X-OneAgent-JS-Injection
X-Whom
X-Msg-2-Log
Rt-Fastcgi-Cache
X-Kinsta-Cache
X-Cached-By
X-DynaTrace
X-CMS-Version
X-From
X-URL
X-Outils-CS
X-Handled-By
X-DynaTrace-JS-Agent
X-B-Cache
X-Ruxit-JS-Agent
X-Content-Options
Product
Access-Control-Request-Method
Imagetoolbar
X-AspNetWebPages-Version
X-Varnish-Cache-Hits
X-VARNISH-Cache
Powered
X-Debug-Info
X-Edge-Location
X-Cdn
X-Upstream
Host
ServedBy
X-Cache-Rule
X-Varnish-TTL
Surrogate-Key
X-Via-JSL
X-CacheServer
DynaTrace
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Recruiting
Fhost
X-Engine
Alternate-Protocol
Public-Key-Pins-Report-Only
X-VTEX-Cache-Status-Janus-ApiCache
X-Powered-By-VTEX-Janus-ApiCache
X-Vtex-Remote-Cache
X-Vtex-Processed-At
X-VTEX-Janus-Router-Backend-App
No
Edge-Control-Message
X-Track
X-LBLID
X-Signature
X-Application-Context
X-Umbraco-Version
X-Goog-Hash
X-Fastcgi-Cache
X-Accel-Expires
X-Platform
X-LW-Cache
X-Location-Id
Generator
X-Developer
X-Micro-Cache
X-Response-Time
X-PERF
X-ApacheServer
X-Hosted-By
X-Powered-By-VTEX-Janus-Edge
X-UD-Method
Pagespeed
X-Returned-From
X-Actual-URL
X-Original-Request
X-Passed-To-DLL
X-Passed-To
X-Returned-From-DLL
Fastcgi-Cache
X-Returned-From-PostProcessResponse
X-Varnish-Beresp-Status
Dmn
X-Returned-From-BeforeDispatch
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
Arr-Disable-Session-Affinity
X-Magento-Cache-Debug
Retry-After
X-Platform-Router
X-Platform-Processor
X-Version
X-Stale
X-TransIP-Balancer
X-Instart-Request-ID
X-Cache-Info
X-Cache-Age
X-NWS-LOG-UUID
X-Platform-Cluster
X-Microcachable
HTTPS
X-Defender
WZWS-RAY
X-Shop-Id
X-Litespeed-Cache
X-Powered-By-360WZB
X-Rnd
X-Supported-By
X-Varnish-Host
X-I-Sp
X-URLSCHEME
X-Device-Type
X-Source
X-BS
Ohc-File-Size
X-Dispatcher
X-Cache-TTL
Origin
X-F-Cache
Fastly-Debug-Digest
X-FORWARDED-FOR
X-Loopia-Node
Content-Hash
X-RESOURCE
X-Rocket-Nginx-Bypass
Akamai-IP
X-TransIP-Backend
Cache-Provider
X-HS-Content-Campaign-Id
X-I
X-S
X-Varnish-HitMiss
X-Storage
X-Varnish-Count
X-Cache-Tags
USPLoggingUUID
X-Platform-Server
RTSS
X-Tumblr-Pixel-6
X-Cache-Key
X-Matrix-Server
X-Matrix-Proxy
X-Gamma-Serve
X-App-Hosting
X-NetCat-Version
X-Varnish-ObjectSource
X-EdgeConnect-Origin-MEX-Latency
X-Varnish-GracePeriod
X-Varnish-Seen-By
X-Front
X-Cache-Operation
X-Varnish-RemainingTTL
X-Varnish-RemainingLife
Version
X-Pantheon-Phpreq
X-Pantheon-Environment
X-Pantheon-Site
Surrogate-Key-Raw
X-ATG-Version
X-Server-ID
Last-Published
X-Powered-By-VelaWeb
X-Director
X-Vcap-Request-Id
X-Page-Cache
X-Microcache-Status
X-Environment
X-CSRF-Protection
X-Art-Request-Id
X-Translation
X-Route-Server
Allow
X-Cluster-Node
X-Platform-Cache
X-Shard
X-LB
X-Revision
X-Expires-Orig
X-EdgeConnect-MidMile-RTT
X-Hypernode
X-LB-Node
Content-Disposition
X-Sapient
X-Url-Base
Cache-Key
X-Content-Encoded-By
MIME-Version
X-Ttl
X-Abgroup
X-Ezoic-Cdn
IBM-Web2-Location
Pool
Wsr-Cache
X-Varnish-Age
X-ORACLE-DMS-ECID
X-Litespeed-Cache-Control
X-Drupal-Cache-Tags
X-SV-CacheTags
X-SV-FromDBCache
X-SV-Nginx-Duration
X-SV-Pid
X-Grace
X-SV-Expires
X-SV-Edge
X-SV-Cacheable
X-SV-CreatedAt
X-SV-Duration
X-Server-Upstream
X-NoCache
X-SSL-Cipher
X-Flow-Powered
X-Cache-Debug
Powered-By-ChinaCache
X-SSL-Protocol
Content-MD5
X-Lambda-Id
X-Daa-Tunnel
X-ARC
SSPAppContext
X-Xrds-Location
X-Cache-Namespace
X-Github-Request-Id
X-Varnish-Cacheable
Srv
S-Cnection
X-Dispatch
X-Nginx-Cache
Lsrequestid
FAI-W-FLOW
X-Magento-Cache-Control
X-Edge-IP
X-CJ-Soft
X-Firenze-Processing-Time
Section-Io-Id
X-Cache-Only-Varnish
Accept-Encoding
X-Varnish-Backend
Proxy-Connection
X-IsCacheURL
X-Cache-Lifetime
Cneonction
X-Servedby
X-Cache-Control-Orig
X-GeoIP-Country-Code
Page-Completion-Status
Content-Encoding-Handler
X-Cache-Type
Backend
X-Hiawatha-Cache
X-Generated
X-Time
X-Drupal-Cache-Contexts
X-Vhost
ServerID
X-Cache-Expires
X-Ss-Location
X-Ss-Conf
X-Debug
X-Duration
X-Varnish-Url
X-Varnish-Ttl
X-RequestId
X-PwB-Node
Location
Pv
Node
X-Amz-Meta-S3cmd-Attrs
SN
PICS-Label
X-Client-IP
X-Cache-Server
Fw-Via
ServerName
Nodo
X-Proxy
X-AOL-HN
X-N
X-Nbs
X-Middleware-Start
X-Fastly-Request-Id
X-Akamai-Transformed
If-Modified-Since
X-Varnish-IP
Use-Proxy
X-Server-Id
X-ServerID
X-ID
X-GUploader-UploadID
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Speed-Cache
X-Speed-Cache-Key
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-Country-Code
X-Discourse-Route
X-ACMCache
Req-Id
X-Frontend
X-GeoIP-Country-Name
X-Vcache
AMF-Ver
X-Magnolia-Registration
X-Cache-Engine
X-Akamai-Device-Model
X-Cache-CFC
X-SRCache-Key
X-UPSTREAM
X-Akamai-Device-Characteristics
X-Oneagent-Js-Injection
X-Geo-Country
NnCoection
X-Cache-Device-Type
X-Cookie-Domain
X-Worker
Server-Name
Server-Info
X-Empowered-By
X-Pressidium-NinukisWP-Ver
X-Location
IM-Version
X-Cache-Level
X-Dynatrace-Js-Agent
X-Content-Age
X-CF-Passed-Proto
X-Processing-Time
X-High-Performance
X-Varnish-Retries
X-Purge-URL
P-ID
Local-Info
X-FW
X-Cache-Handler
Pf.Web.Request.Id
X-Yadis-Location
MJ12bot
X-Always-Cache
SEOMOZ
X-SO
X-DealerOn
Accept-Charset
X-Browser
X-Cache-Control
X-Real-Server
Author
X-Purge-Host
X-WR-Flags
X-Runtime-Rack
X-Sentry-ID
Qs-Cache
X-Correlation-ID
Cache
X-Adobe-Content
X-Adobe-Loc
Content-Transfer-Encoding
X-Server-Instance
X-Unbounce-PageId
X-Unbounce-Variant
X-Srv
X-BKSrc
X-Content-Type-Option
X-Esi
X-Unbounce-VisitorID
X-ORACLE-DMS-RID
X-Last-Modified
X-PF-Uncompressing
Nitro-Cache
X-Cache-PageType
X-Cache-Fix
X-Config-Blacklist-Version
Cached
X-Amz-Storage-Class
X-JG-Page-Cache
X-Framework
X-Pagename
X-NB-Cached-Page
X-App-Server
SRV
X-Hit-Cache
Xc-Version
X-SDS
X-Id
X-TTL
X-Server-IP
Adm-Server
S
X-Rocket-Nginx-Serving-Static
X-Mobilized-By
CacheControlHeader
X-Content-Security-Policy-Report-Only
X-ClientSide-Caching
X-Origin
Server-Timing
X-CDN-Forward
X-OpenCart-Lightning
X-BackendServer
X-AF-Userserver
Cm-Server
Custom-Header
X-Abuse
NODE
MC
Frame-Options
X-VARITI-CCR
HAVer
Thanks
Cteonnt-Length
X-Ruxit-Js-Agent
Front
HCVer
X-LB-Server
X-Dns-Prefetch-Control
X-AEM
X-FTR-Request-ID
ServerSignature
Eomportal-Instance
X-SRV
X-Session-ID
ServerTokens
X-Rq
X-Varnish-Hits
X-Sucuri-ID
X-HTML-Minification-Powered-By
X-Sys-Req-ID
X-WPL-DATA
Cache-Tags
Magicmarker
X-VTEX-Cache-Status-Janus-Edge
X-DEBUG
Contao-Page-Layout
SiteSpeed
X-Processed-By
X-Shield-Request-Id
NetMindSessionID
X-Cdn-Forward
WWW-Authenticate
X-Runtime-Memory
SVR
X-Orig-Vary
Ufe-Result
W
Tracecode
X-Resty-Request-Id
X-Trace-Id
Cache-Tag
X-Fedora-School-Id
WN
X-WN-ClientGroup
X-Page
Max-Age
Content_type
Server-ID
X-Unique-ID
EagleEye-TraceId
X-Webkit-CSP
X-LW-Web-Server
X-HW
X-Traffic
X-Jphone-Copyright
X-LP
NtCoent-Length
VServer
X-Route-To
X-Cache-Dispatchercachecontrol
X-Env
X-Cache-Dispatcherpragma
X-A
X-Generated-Time
X-Clara-ASAP
A-Powered-By
X-Yottaa-Metrics
X-Client-Vid
X-Client-Image-Vid
X-Yottaa-Optimizations
X-ASAP-Cache
X-EPiphany-Vid
X-ServerIndex
X-Connection-Hash
Web-App-Origin-Name
X-Drectory-Script
X-HydroSheep
X-Twitter-Response-Tags
X-Transaction
X-Smartcache-Keys
X-Garden-Version
X-Smartcache-Timeout
X-Redman-Final-Url
X-WA-Info
X-Redman-Backend
X-Cache-Doesi
X-Sorting-Hat-Expire-Cache
X-Avg-Cookie-Expires
X-AVG-Country-Code
X-SERVER-NAME
Environment
AsisCache
Yoncu-Errno
Noq
X-Compress-Hint
X-Akamai-Edgescape
ScoreTracker
Ram
X-CB-Server
X-WP
Ramp
Proxy-Agent
VANITY-HOST
X-Response
Description
SBGI-RenderTime
Access-Control-Allow-Header
X-Cache-On
SBGI-RealPath
X-Gateway-Cache-Status
X-Gateway-Skip-Cache
X-Gateway-Cache-Key
X-CRA-DC
SBGI-Device
IISExport
SBGI-10
X-ARRServer
X-Key
X-CAPServer
X-Webstats-RespID
X-Application
Smug-CDN
MW-Webserver
X-RiS-UFDI
X-Viator-Tapersistentcookie
RN-Server
X-RDP
SHInfo
BALANCEDTO
X-SDE-Name
X-VNode
SBGI-5
X-Hosting-Env
SBGI-9
X-Desc
Service-Worker-Allowed
Cmstype
Cmsid
X-L-Path
X-Force
X-Balanceador
X-PRAM
X-Plat
Keywords
X-Varnish-Debug-TTL
X-TTFB
X-Environment-Context
SBGI-7
X-TTFB-L
X-GeoIP
X-Varnish-Debug-Age
X-WebKit-CSP-Report-Only
Ibf5scheme
X-FireWall-Port
Play-Detected-Device
X-Disney-Akamai-Rule
N365rili
SG
Machine
SBGI-1
XX
X-SmugMug-Hiring
Pics-Label
X-VC-Enabled
X-SmugMug-Values
X-Rebelmouse-Surrogate-Control
X-Cache-Node
Play-Detected-UserAgent
X-Rebelmouse-Cache-Control
X-Varnish-Id
X-Sucuri-Cache
X-Stage
X-Varnish-Hostname
X-SV
X-VC-TTL
X-GoCache-CacheStatus
X-Magento-Action
X-Proto
X-Symfony-Cache
Url
X-NginX-Server
X-Bip
Beyond-Iis
X-CacheResult
AC-ELC
X-Resource
X-Forwarded-Host
X-Backend-Status
Dispatcher
From-Origin
X-Amz-Meta-S3b-Last-Modified
X-Src-Webcache
X-App-Status
X-Varnish-ID
X-Frames-Options
X-Provisioner-Version
X-Real-IP
X-Varnish-Server
X-IIJ-Cache
X-Fstrz
X-Domain-Checked
X-Secret
Dis-Env
X-Detected-Device
X-Amz-Meta-Content-Md5
X-Amz-Meta-Cb-Modifiedtime
Og
X-Directory-Script
X-Cocoon-Version
X-Redirector
X-Autoru-Host
X-Request-Uri
X-Session-Reinit
X-AutoRu-App-Id
X-App-Runtime
X-Autoru-LB
X-Analytics
Hostname
X-WHOIS-Cached
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Varnish-Action
X-Cms-Mode
X-Dev
X-PHP-Response-Code
XDomainRequestAllowed
X-Rack-CORS
X-Runtime-Affili
From
X-Distributor
X-Lb
Ctx
X-TB-M
X-Acquia-Debug-Password
Hname
X-Dw-Trace-Id
Fastly-Backend-Name
X-Compressed-By
Home
X-Culture
Backend-Timing
RequestId
X-E
X-MAT-GEO
Worker
Paypal-Debug-Id
Web
TP-Cache
X-Atraveo-ETag
Identity
X-Atraveo-Cache-Control
Nginx-Cache
X-Atraveo-Expires
X-Atraveo-Zone
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Atraveo-From-Varnish-Cache
SS
X-Origin-Server
Bios
Access-Control-Allow-Method
X-Source-ID
X-Cache-Varnish
TP-L2-Cache
COMMERCE-SERVER-SOFTWARE
WP-AdvCache-MemCached
X-Grid-Server
X-Highwire-RequestId
X-Highwire-SessionId
X-Streams-Distribution
TC-Cache-IC
TC-Cache-U
TC-S-Cache
TC-Cache
TC-S-Cache-M
X-SmartBan-URL
X-Time-Microsecs
X-SmartBan-Host
Disablevcache
X-Cluster
X-B2f-Not-Route
X-DB-Content-Length
X-Varnish-Cache-Local
OriginServer
X-Aramark-SID
Proxy-Cache
X-Nginx-Host
X-Map-Context
X-Req-Head-Response
X-Search-Id
Il-Cl
Traffic-Origin
X-HashTwo
Ec-CorrId
X-Wikidot-Static-Cache
Ec-Machine
X-Confluence-Request-Time
X-Rewrite
X-Wikidot-Backend
X-Hosting
X-OPNET-Transaction-Trace
AMP-Access-Control-Allow-Source-Origin
X-Amcomm-Site
X-Data-Request
X-Flex-Tags
X-Flex-Tag
X-RealServer
X-Machine
X-Sites
NLCacheNote
X-Cache-Via
X-Debug-Token
Id
X-Ghost-Cache-Status
X-Goog-Meta-Policy
X-Goog-Meta-Replace
X-LDNR-NOT-ROOT-HL-NOTSET
X-Depends
X-DTC
X-Flex-Evend
X-Flex-Community
X-Flex-Evstart
X-Flex-Lang
X-Flex-Lastmod
X-Adnet
X-ACCELERATE
X-FPC
X-Pubstack
Myheader
X-GSL-Server
X-Airee-Node
X-Resolver-IP
SERVER-ID
X-Render-Time
X-Info
X-PM-ID
X-Origin-Cache
X-MidCOM-Meta-Cache
Device
X-HP-Trace-Project
X-HP-Trace-ID
X-Mobile-URL
FRONT-END-SECUREBROWSER
Xc
X-Remote-Addr
X-MCB-Server
X-NginX-Cache
X-Akamai-3PM-SW-Version
VC-NoCache
X-Magento-Lifetime
X-Author
X-Cache-TTL-Remaining
Accept-Language
X-KoobooCMS-Version
X-SH-Cache-Status
X-Cache-Extended
Hummingbird-Cache
HitType
X-Avvio-Cms-Cacheload
Strikingly-Cached-Version
X-Distil-CS
Aoestatic
Strikingly-Cached
X-NID
Strikingly-Cache-Region
CLMOB
X-ESI
X-EC2-Instance-Id
X-Box
X-7d-Instance-Id
X-Hstore
X-V
X-7d-Trace-Id
X-Backend-Host
X-Client-Ip
X-Country
X-Sid
X-Zendesk-User-Id
Server-Id
X-Config-By
X-4ormat-Cacheable
X-ETag
Accept-CH
X-ASAP-Age
X-NodeID
X-Proxy-Cache-Key
X-IP
X-Bcwwwid
X-Refresh
X-Captured
X-Amz-Id-1
X-Rack-Cors
X-Hrouter
Ohc-Response-Time
Lb
X-Protected-By
X-Proxy-Skip
X-DataDome
X-Cache-Me-Harder
X-HS-Status
BackendServer
PagesDisplayed
PServer
X-Powered-By-Home.Pl
Upgrade-Insecure-Requests
X-Agent
NS-VaryByCustom-Key
ClientIP
Content-Generator
X-DDM-SERVER
Gzip
X-ServiceProvider
X-HAProxy
X-AISO-Cache
Ez
OracleCommerceCloud-Sandiego
OracleCommerceCloud-Version
X-Node-Name
X-OCTOPOD
X-App
X-DynamicCache
X-AISO-Cacheable
CommercePlatform-Version
X-AISO-Server
F5-IpCliente
X-CACHE-TTL
X-Tag-Playlist
Copyright
Cleartype
Progma
X-Gannett-Site-Version
X-SuperCache
X-Zendesk-Origin-Server
X-LBPoolMember
X-Header
X-DSMX-Rewrite-MS
X-Gyrobase-Publication
X-DDM-SERVER-UPDATED
X-DSMX-Render-MS
X-DN-Cache-Control
Ews
X-Served-Server
X-HP-CAM-COLOR
X-Nginx-Request-Processing-Time
X-Pj-Cache-Status
X-Cache-Detail
Ttl
X-Rewritten-By
X-Serv
X-ManagedFusion-Rewriter-Version
NZSpeedy
X-Batcache
Server-Ip
X-Server-Addr
X-Batcache-Reason
X-Cache-Keep
X-Reflector-Cache
X-Reflector
X-UA
Key
X-UT-Cache
Amfplus-Ver
X-Pagely-Cache
X-Serverid
X-Nitro-Cache
X-Catalyst
X-HA
X-FastCGI-Cache-Status
X-JSESSIONID
X-Middleton-PageSpeed
X-FG-RequestId
MageStack-Area
MageStack-Cache
MageStack-PageSpeed
MageStack-Magento-Version
MageStack-Tag
MageStack-Web-Node
Provided-Host
Kanooh-Host
MageStack-Loadbalancer
MageStack-Debug
MageStack-Cache-Lifetime
MageStack-Cache-Hits
MageStack-Cache-Status
MageStack-Cache-Warning
MageStack-Config
MageStack-Cacheable
X-Server-FQDN
X-Debug-Message
X-CloudBurst-Cache
X-CloudBurst-Backend
X-Cache-Time
X-CloudBurst-Frontend
X-Cname-TryFiles
X-Debug-Token-Link
X-CSRF-Token
X-Cache-ID
X-Beatles
HostName
GranicusServer
X-Time-Zone
RSB-LINK
X-Apm-Telemetry-Syncmark
TZ-Server
X-Deity
X-Domino-CacheValidationWithETagReason
Viewport
ViewMode
X-Activity-Id
X-Amz-Meta-Version-Id
X-Az
X-AppVersion
Tesla.Performance
MS-CV
X-HEAD
X-Domino-CacheValidationWithETagResult
X-Header-Treatment
X-Made-On
Generate-Time
X-Served
X-S-Misc
X-Beresp-Ttl
Fastly-Restarts
No-Cache
Content-Cache
Tk
X-MainProfileCategory
X-Container
UrlWatchModule-Time
X-WebNode
X-CacheID
X-Instance-Id
X-Middleton-Pagespeed
X-Nginx-Request-Time
X-UPSTREAM-Address
X-RiS-PX
X-MainProfileID
X-MainProfileName
X-SE-Debug
X-VG-WebCache
X-REDIRECTSERVER
X-Hash
X-Phpwcms-Release
X-Phpwcms-Page-Processed-In
Swift-Performance
Requested-Host
X-Obvious-Info
X-MainProfileURL
X-Obvious-Tid
Actual-Object-TTL
FindLaw
X-Via-NSCOPI
X-AppServer-Cache-Rule
Session-Id
X-M-V
X-M-T
X-Mw-Workerstats
X-Pageid
X-Q-S
X-Pool-Info
X-M-P
X-Instart-Cache-Id
X-Cachable
EQ-Cache
X-CH-Device
X-FIRSTBase
X-I-V
X-HeBS-Cache-Status
X-RAMCache
X-Generation-Time
AR-CACHE
AR-ATIME
AR-PoweredBy
AR-SID
ProxiaInstanceId
CommunityServer
Z-Tpl
Y-Trace
X-S-V
X-S-C
X-T
X-D-Time
X-ELB
X-Transaction-Name
X-B
X-CloudBurst-WordPress
X-CDN-COMPRESS
Session-From
X-Unique-Id
X-Highwire-Smart-Code
X-Uncacheable
X-Pass-Through
StatusCode
X-Proxy-Id
X-Secure
X-Layout
X-PROCESSED-BY
X-PBY
X-Highwire-Sitecode
X-Static
X-VC-Cache
X-Turpentine-Esi
X-VC-Cacheable
X-VC-Debug
DrivedBy
X-Dealeron-Backend
X-Title
ServerIP
X-CDN-RULE
Debug-Status
MachineName
Webserver
Warning
X-Webcelerate
X-Who
TheAnswer
X-Varnish-Grace
X-UnsetCookies
X-ZSITES-DNS
X-Node-App
Language
X-Nginx-Page-Cache
X-Meta-MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
X-Hit
X-CO-Host
X-Cacheable-TTL
X-BServer
X-Cjtype
X-Machine-Name
X-Cache-Bypass
X-BPool-Fx-Cache
X-BPool-Bx-Cache
X-Blog
X-BPool
X-SCM-Server-Number
X-BPool-Back
X-VC-Hash
X-Dealeron-Original-Url
X-Custom-Header
EN-User
CmsfirstPublishTimestamp
X-Full-Url
X-SilverStripe-Cache
X-W3TC-Minify
X-Omnis-SiteID
SB-Cache-Remaining
SB-Site-Device
X-Cache-Id
Arrnode
X-Route
X-NO-BREACH
X-Varnish-Instance
X-Enhanced-By
Control-Cache
X-VLoc
ID
X-Svr
X-DS1D
X-ReqId
X-XHR-Current-Location
SB-Cache-Life
X-Cache-Original-TTL
Cacheid
User-Agent
Provider
CpuTime
MSSmartTagsPreventParsing
MSThemeCompatible
Hamster
X-AMAZEEIO
Page-Template
X-ACLR-Version
DeleGate-Ver
X-Artvisual-Server
Response-Time
X-Timestamp
FastCGI-Cache
X-FORWARDED-PROTO
X-Akam-SW-Version
X-Pixelsilk-Version
X-Pixelsilk-Server
X-HOSTNAME
X-Cacheable-By-Varnish
X-Skip-Cache
X-Geo-IP
X-SSLUpstream
Apple-Itunes-App
X-Svr-Proxy
X-B3-Traceid
DbServerName
X-Locale
Rewriter
X-Server-Hostname
X-SSLProxy
X-CACHE-KEY
X-Upgrade-Enabled
CD4
X-Tt-Dbg
X-Healthy
X-Theme
X-Site
CDCHOST
X-Ants-Host
X-Origin-Date
X-Varnish-Debug-Hits
X-RequesterIP
X-RemovedCookies
WSCLoggingUUID
Request-Filtered-By
X-Instance
X-MSEdge-Ref
X-ProcessESI
X-Ants-Machine-Id
X-NMT-Proxy
V-Age
TestCC
X-Backend-Name
X-ClusterID
X-Prerendered
X-Gateway-Rate-Limit-Conn
X-XHTML-Minification-Powered-By
X-M
X-Test-Debug
X-PoweredBy
X-Gateway-Rate-Limit-Delayed
X-Varnish-Cache-Ttl
X-Old-Content-Length
X-Dynamic-Cache
Cache-Status
Xcache
X-MyName
X-Reason-Bp
Countrycode
X-Cache-FS-Status
X-B3-Spanid
X-NewsFlow-Sitename
X-PBS-Appsvrname
X-PBS-Fwsrvname
X-Member
X-PG
X-PBS-Appsvrip
Head
ReqUrl
X-Proxy-Backend
Expiries
WP-FROM-CACHE
X-Cache-TTL-Age
X-Cache-TTL-Current
CS-SERVER
X-SH-Cache-Disabled
X-Built-With
Serverid
Powered-By-115
Referer
X-CPU-Time
X-Prerender-Token
X-Say-TTL
DB-Nickname
DNNOutputCache
HA-Cloudapp
HA-Geocity
Realaction
X-This-Proto
X-Distributed-By
X-Max-Age
X-Optimization
BlockPHPCallEnd
Actioncode
Be
X-Ao-Cache-Key
X-Beatles-Hits
X-Cache-Set
X-DevSrv-CMS
HA-Geolat
Redirect-Reason
HA-Geocountry
X-Varnish-Cached-TTL
X-Varnish-Cached
X-UPServer
X-WR-MODIFICATION
X-Cache-V
User-Cache-Control
X-ACache
X-BIT-Node
X-Built-By
MwpReleaseVersion
Returned-Status
X-Restarts
X-Session-Id
SB-Site-IE-VERSION
X-Status
X-Cache-ASPX
Container
SINA-LB
SINA-TS
V-TTL
Www.Aujourdhui.Com
Edgecast
X-Ssl-Cipher
X-K8s
X-Request-Processing-Time
X-Request-Received
X-Does-He-Have-Time
HA-Geolon
X-Fastly-Backend-Reqs
X-Fpc
X-Test
Server-Hostname
NKBVHEADER
Load-Balancer
IES-Server
Note
X-Homeaway-Requestmarker
L5d-Success-Class
X-CGP
Access-Control-Request-Headers
X-DEBUG-HOST
X-DEBUG-TTL
X-DeliveryServer
X-ENV
X-Clx-Request
X-Upstream-Status
Arrow-RequestId
Resin-Trace
VAR-Cache
X-Olaf
X-MCF-ID
HA-Urlpath
HA-Host
PB-PID
PB-RID
HA-Ipaddr
X-Your-GrandPa-Would-Wait
X-Would-Your-GrandPa-Wait
X-Sn-Servicetimems
HA-Georegion
X-TLS-Version
X-TTL-Age
X-ServerAddr
X-Server-Instance-Name
X-Say-Cacheable
X-SayCDN-TTL
X-SCProxy
HA-Servedtime
X-Processed
X-Mobile-Rewrite
X-Cache-LB
X-Server-Generated
X-Script
X-MSU-SOURCE