Threat Level: green Handler on Duty: Rick Wanner

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
X-AspNet-Version
Age
P3P
X-Pingback
Content-Language
Via
X-UA-Compatible
Expect-CT
Upgrade
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Check
X-Language
X-Template
X-Varnish
X-Request-Id
X-Xss-Protection
Alt-Svc
X-Generator
X-Buckets
X-Drupal-Cache
P3p
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Powered-By-Plesk
X-Download-Options
Content-Location
Host-Header
X-Runtime
X-ShopId
MS-Author-Via
X-Sorting-Hat-PodId-Cached
X-Dc
X-Sorting-Hat-PodId
X-ShardId
X-Sorting-Hat-Section
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-Alternate-Cache-Key
Referrer-Policy
X-UA-Device
Cartoon
X-Powered-CMS
X-IPLB-Instance
X-Served-By
X-Amz-Cf-Id
Access-Control-Allow-Headers
Access-Control-Allow-Credentials
Access-Control-Allow-Methods
X-Cache-Status
Status
X-Via
X-Timer
X-Iinfo
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Wix-Server-Artifact-Id
CF-Cache-Status
X-Contextid
X-ServedBy
X-Backend
X-Mod-Pagespeed
Powered-By
X-PC-Hit
X-PC-Key
X-Accel-Buffering
Content-Encoding
X-PC-Host
X-PC-AppVer
X-PC-Date
X-CST
X-DIS-Request-ID
X-WPE-Loopback-Upstream-Addr
X-Logged-In
X-Ua-Compatible
Keep-Alive
X-Host
X-CDN
X-Cache-Hit
X-Rid
X-Port
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Tumblr-User
X-Cache-Enabled
X-Server-Powered-By
X-Endurance-Cache-Level
X-Tumblr-Pixel-1
X-Server
X-Nginx-Cache-Status
X-Robots-Tag
X-Original-Date
X-Accel-Version
X-Seen-By
X-Wix-Request-Id
X-Turbo-Charged-By
X-Drupal-Dynamic-Cache
X-Tumblr-Pixel-2
X-Page-Speed
X-Pad
X-Content-Powered-By
X-Proxy-Cache
X-Forwarded-For
X-Wix-Punisher
X-Content-Digest
X-AH-Environment
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Rack-Cache
WP-Super-Cache
X-Varnish-Cache
X-Forwarded-Proto
X-NewRelic-App-Data
Content-Security-Policy-Report-Only
X-GitHub-Request-Id
X-Tumblr-Pixel-3
X-Request-Country
X-LiteSpeed-Cache
Edge-Control
SPRequestGuid
X-SharePointHealthScore
X-MS-InvokeApp
MicrosoftSharePointTeamServices
X-XRDS-Location
X-Sorting-Hat-PrivacyLevel
X-SERVER
X-Cache-Lookup
Timing-Allow-Origin
X-Cnection
X-Newrelic-App-Data
X-Node
X-FW-Hash
X-Amz-Request-Id
X-Amz-Id-2
Cf-Railgun
X-Died
X-FW-Serve
X-FW-Type
X-FW-Static
X-Trace
Charset
X-Webcom-Cache-Status
X-Content-Security-Policy
Request-Id
X-Webserver
X-FullPageCaching
Edge-Cache-Tag
X-HS-Cache-Config
X-Hits
X-HS-Content-Id
X-CF-Powered-By
X-PhApp
Request-Context
MicrosoftOfficeWebServer
X-PHP-Backend
SPIisLatency
SPRequestDuration
X-INKT-SITE
X-INKT-URI
Access-Control-Max-Age
X-BC-Stapler
X-Safe-Firewall
EagleId
Composed-By
X-Swift-CacheTime
X-Swift-SaveTime
Access-Control-Expose-Headers
Served-By
Grace
X-CDN-Pop-IP
X-CDN-Pop
X-HS-Combine-CSS
Liferay-Portal
X-Spip-Cache
X-Backend-Server
X-Hyper-Cache
X-Server-Name
X-Device
X-Dw-Request-Base-Id
X-VCache
X-Tumblr-Pixel-4
X-Fastly-Request-ID
X-Microcache
X-RateLimit-Remaining
Xkey
X-RateLimit-Limit
X-Clacks-Overhead
X-Cloud-Trace-Context
X-Firenze-Processing-Times
Content-Style-Type
X-LiteSpeed-Cache-Control
X-FB-Debug
X-RateLimit-Reset
Content-Script-Type
Front-End-Https
X-Jimdo-Instance
X-Jimdo-Wid
Surrogate-Control
Rating
X-Request-ID
X-Loop
X-TNCMS
X-ServerName
X-Acc-Exp
X-DNS-Prefetch-Control
X-DDC-Arch-Trace
Public-Key-Pins
X-User-Agent
X-Vtex-Processado-Em
Refresh
X-Middleton-Display
X-Middleton-Response
X-Sol
Display
Response
X-Cache-Config
X-StackifyID
X-Frame-Option
X-Age
Real-Hostname
Fpc-Cache-Id
X-XN-Trace-Token
X-XN-XNHTML
X-SS-Conf
X-SS-Location
X-Tumblr-Content-Rating
X-Hostname
X-Px
X-Zen-Fury
X-Cached
X-N-OperationId
X-Generated-By
X-WebKit-CSP
X-Topify-Platform
X-Dscp-Value
X-Magento-Tags
X-Tumblr-Pixel-5
X-HOST
X-Correlation-Id
PageSpeed
X-Request-Time
X-OneAgent-JS-Injection
X-MiniProfiler-Ids
P-WS
TCN
P-LB
X-Whom
X-Amz-Version-Id
X-URL
Rt-Fastcgi-Cache
X-Msg-2-Log
X-Kinsta-Cache
X-Url
X-Cached-By
X-Outils-CS
X-DynaTrace
X-Handled-By
X-From
X-DynaTrace-JS-Agent
X-CMS-Version
X-B-Cache
X-Ruxit-JS-Agent
X-AspNetWebPages-Version
X-Content-Options
Product
Powered
Imagetoolbar
X-Varnish-TTL
Access-Control-Request-Method
X-Varnish-Cache-Hits
X-Debug-Info
X-Edge-Location
X-CacheServer
Surrogate-Key
X-Cdn
X-Upstream
X-VTEX-Cache-Status-Janus-ApiCache
No
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
Host
DynaTrace
X-Cache-Rule
X-Vtex-Processed-At
X-Vtex-Remote-Cache
ServedBy
Edge-Control-Message
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Track
X-Recruiting
X-Engine
X-Via-JSL
X-Umbraco-Version
Public-Key-Pins-Report-Only
X-Signature
Fhost
X-Application-Context
X-LBLID
Alternate-Protocol
X-Response-Time
X-Fastcgi-Cache
X-Powered-By-VTEX-Janus-Edge
X-Goog-Hash
X-Accel-Expires
X-Platform
X-Location-Id
X-LW-Cache
X-Micro-Cache
Generator
X-ApacheServer
X-Hosted-By
X-PERF
X-Actual-URL
X-Returned-From-DLL
X-Returned-From
X-Passed-To
X-Original-Request
X-Passed-To-DLL
X-Magento-Cache-Debug
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Platform-Processor
Arr-Disable-Session-Affinity
X-UD-Method
X-Returned-From-PostProcessResponse
X-Varnish-Beresp-Grace
X-Platform-Router
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Developer
WZWS-RAY
X-Powered-By-360WZB
Dmn
X-Platform-Cluster
X-Stale
Fastcgi-Cache
X-Version
X-Cache-Age
X-NWS-LOG-UUID
X-TransIP-Balancer
X-Cache-Info
Retry-After
X-Instart-Request-ID
X-VARNISH-Cache
Pagespeed
X-Supported-By
X-URLSCHEME
X-Microcachable
X-Litespeed-Cache
Fastly-Debug-Digest
HTTPS
X-FORWARDED-FOR
X-Cache-TTL
X-Dispatcher
X-F-Cache
X-Rnd
X-I-Sp
X-Shop-Id
X-RESOURCE
X-Varnish-Host
Cache-Provider
X-Defender
X-BS
X-Source
Ohc-File-Size
X-Rocket-Nginx-Bypass
X-Device-Type
X-Varnish-HitMiss
X-Loopia-Node
X-Varnish-Count
Origin
X-I
Content-Hash
X-TransIP-Backend
Akamai-IP
X-S
X-Storage
USPLoggingUUID
X-Cache-Tags
X-HS-Content-Campaign-Id
X-Tumblr-Pixel-6
RTSS
X-Platform-Server
X-ATG-Version
X-Varnish-ObjectSource
X-Varnish-GracePeriod
X-Varnish-RemainingLife
X-Varnish-RemainingTTL
Version
X-Varnish-Seen-By
X-EdgeConnect-Origin-MEX-Latency
X-Gamma-Serve
X-CSRF-Protection
X-Front
X-NetCat-Version
X-App-Hosting
X-Director
Allow
X-Powered-By-VelaWeb
X-Platform-Cache
X-Cache-Operation
X-Pantheon-Site
X-Pantheon-Phpreq
X-Cache-Key
X-Pantheon-Environment
X-Matrix-Proxy
X-Matrix-Server
X-Vcap-Request-Id
Surrogate-Key-Raw
X-Server-ID
X-Page-Cache
Last-Published
X-Route-Server
X-Art-Request-Id
X-Microcache-Status
X-Translation
X-Revision
X-Cluster-Node
X-LB
X-EdgeConnect-MidMile-RTT
X-Environment
X-Shard
X-Abgroup
Content-Disposition
X-ORACLE-DMS-ECID
X-Hypernode
Wsr-Cache
X-LB-Node
X-Ezoic-Cdn
Cache-Key
IBM-Web2-Location
X-Expires-Orig
X-Content-Encoded-By
X-Url-Base
MIME-Version
X-Sapient
X-Ttl
X-Drupal-Cache-Tags
Pool
X-Varnish-Age
X-Server-Upstream
X-SSL-Cipher
X-Cache-Debug
X-Grace
X-Litespeed-Cache-Control
X-SSL-Protocol
X-NoCache
X-Lambda-Id
Powered-By-ChinaCache
X-Daa-Tunnel
X-ARC
X-SV-Cacheable
X-SV-Edge
X-SV-CacheTags
X-SV-CreatedAt
X-SV-Duration
X-SV-FromDBCache
X-SV-Expires
X-SV-Nginx-Duration
X-SV-Pid
Content-MD5
X-Dispatch
X-Flow-Powered
SSPAppContext
X-Cache-Namespace
X-Xrds-Location
X-Varnish-Cacheable
X-Github-Request-Id
X-Magento-Cache-Control
Lsrequestid
X-Nginx-Cache
X-Cache-Only-Varnish
S-Cnection
Srv
Accept-Encoding
X-GeoIP-Country-Code
FAI-W-FLOW
X-Edge-IP
X-Drupal-Cache-Contexts
X-Varnish-Backend
Cneonction
X-Firenze-Processing-Time
X-Cache-Lifetime
Page-Completion-Status
ServerID
X-CJ-Soft
X-PwB-Node
Proxy-Connection
X-Generated
Section-Io-Id
Content-Encoding-Handler
X-Servedby
Backend
X-Debug
X-Ss-Conf
X-Hiawatha-Cache
X-Amz-Meta-S3cmd-Attrs
Location
X-Cache-Expires
X-Vhost
PICS-Label
X-IsCacheURL
X-Ss-Location
X-Cache-Type
X-Duration
Nodo
SN
Pv
Node
X-Cache-Server
X-Cache-Control-Orig
X-RequestId
X-Varnish-Ttl
Fw-Via
X-Client-IP
X-Varnish-Url
X-Cache-CFC
If-Modified-Since
X-ServerID
X-Time
X-N
X-Proxy
X-AOL-HN
X-Speed-Cache-Key
X-Speed-Cache
X-Server-Id
X-SRCache-Key
X-Akamai-Transformed
X-FW
X-GeoIP-Country-Name
X-Fastly-Request-Id
X-Magnolia-Registration
X-Country-Code
X-Nbs
X-Middleware-Start
Req-Id
X-Varnish-IP
X-Cookie-Domain
AMF-Ver
ServerName
X-GUploader-UploadID
X-Goog-Stored-Content-Length
Server-Name
X-Goog-Storage-Class
X-Goog-Metageneration
X-Discourse-Route
X-Goog-Generation
X-Goog-Stored-Content-Encoding
X-ID
MJ12bot
X-Location
SEOMOZ
X-Frontend
NnCoection
X-ACMCache
X-Worker
X-Empowered-By
X-Geo-Country
X-Cache-Handler
X-Akamai-Device-Characteristics
X-Akamai-Device-Model
Server-Info
Use-Proxy
X-Oneagent-Js-Injection
X-UPSTREAM
X-Cache-Engine
X-Processing-Time
X-Pressidium-NinukisWP-Ver
X-Dynatrace-Js-Agent
X-Cache-Level
IM-Version
X-Content-Age
Local-Info
X-Yadis-Location
Pf.Web.Request.Id
X-Framework
X-Always-Cache
P-ID
X-Cache-Device-Type
Cache
X-High-Performance
X-Cache-Control
X-Varnish-Retries
X-Browser
X-Real-Server
Author
X-Purge-URL
X-Esi
X-ORACLE-DMS-RID
X-Last-Modified
X-CF-Passed-Proto
X-WR-Flags
X-Correlation-ID
X-Id
Accept-Charset
Content-Transfer-Encoding
X-Runtime-Rack
CacheControlHeader
Qs-Cache
X-Content-Security-Policy-Report-Only
Cached
X-Cache-PageType
X-SO
Nitro-Cache
X-Srv
X-Cache-Fix
X-Server-IP
X-Content-Type-Option
X-BKSrc
X-SDS
X-DealerOn
X-Abuse
Custom-Header
X-BackendServer
X-Adobe-Loc
X-Adobe-Content
X-Sentry-ID
X-Pagename
X-Hit-Cache
X-App-Server
X-Amz-Storage-Class
SRV
X-NB-Cached-Page
X-Purge-Host
Xc-Version
X-Config-Blacklist-Version
X-PF-Uncompressing
X-Server-Instance
MC
X-Unbounce-Variant
X-Unbounce-PageId
X-Unbounce-VisitorID
X-OpenCart-Lightning
Server-Timing
X-ClientSide-Caching
X-Origin
X-Rocket-Nginx-Serving-Static
X-CDN-Forward
X-HTML-Minification-Powered-By
X-AF-Userserver
X-JG-Page-Cache
NODE
X-Mobilized-By
Cm-Server
S
Front
HCVer
X-TTL
Cteonnt-Length
HAVer
Thanks
X-Ruxit-Js-Agent
X-VTEX-Cache-Status-Janus-Edge
X-LB-Server
ServerTokens
NtCoent-Length
X-Rq
Content_type
SBGI-RenderTime
SBGI-1
Eomportal-Instance
X-Sys-Req-ID
W
X-Dns-Prefetch-Control
X-SRV
Frame-Options
X-AEM
X-FTR-Request-ID
X-Session-ID
ServerSignature
X-Sucuri-ID
Cache-Tags
SBGI-5
X-WPL-DATA
SBGI-10
SBGI-9
SBGI-7
SBGI-RealPath
SBGI-Device
X-Varnish-Hits
NetMindSessionID
X-Shield-Request-Id
X-VARITI-CCR
Magicmarker
X-Processed-By
Contao-Page-Layout
X-HW
SiteSpeed
X-Drectory-Script
WWW-Authenticate
AsisCache
X-Jphone-Copyright
X-DEBUG
X-Unique-ID
Max-Age
X-Trace-Id
X-Orig-Vary
SVR
Ufe-Result
X-Runtime-Memory
Server-ID
WN
X-Fedora-School-Id
Cache-Tag
X-A
X-Resty-Request-Id
X-Page
Tracecode
X-WN-ClientGroup
X-Cdn-Forward
X-Hosting-Env
X-Disney-Akamai-Rule
X-SDE-Name
ScoreTracker
VServer
X-Webkit-CSP
X-Compress-Hint
X-Traffic
EagleEye-TraceId
X-Route-To
X-Twitter-Response-Tags
X-Yottaa-Optimizations
X-RiS-UFDI
Web-App-Origin-Name
X-Connection-Hash
X-Application
X-ServerIndex
X-LW-Web-Server
X-ASAP-Cache
X-Clara-ASAP
X-Transaction
X-Yottaa-Metrics
X-Cache-Dispatcherpragma
X-Cache-Dispatchercachecontrol
Adm-Server
X-Varnish-Debug-TTL
MW-Webserver
X-Generated-Time
A-Powered-By
X-Varnish-Debug-Age
X-Env
X-Redman-Backend
X-Avg-Cookie-Expires
X-Sorting-Hat-Expire-Cache
VANITY-HOST
Ramp
X-Akamai-Edgescape
Proxy-Agent
X-AVG-Country-Code
X-Cache-Doesi
X-SERVER-NAME
Ram
X-LP
X-CB-Server
X-Redman-Final-Url
Yoncu-Errno
From
Environment
AC-ELC
Noq
X-SV
From-Origin
X-WA-Info
X-FireWall-Port
Ibf5scheme
X-App-Runtime
N365rili
X-Rebelmouse-Surrogate-Control
XX
X-Varnish-Action
X-Desc
X-Balanceador
X-ARRServer
SHInfo
SG
Hname
Paypal-Debug-Id
X-MAT-GEO
X-WebKit-CSP-Report-Only
X-Webstats-RespID
X-Rebelmouse-Cache-Control
Access-Control-Allow-Header
Smug-CDN
BALANCEDTO
X-Varnish-Hostname
X-EPiphany-Vid
X-Client-Vid
X-Client-Image-Vid
X-Plat
X-Varnish-Id
Cmstype
X-E
Cmsid
X-GeoIP
X-VC-Enabled
X-SmugMug-Hiring
X-Sucuri-Cache
X-VNode
IISExport
X-CAPServer
X-Stage
X-Gateway-Cache-Key
X-Gateway-Cache-Status
X-SmugMug-Values
X-TTFB
X-TTFB-L
X-Gateway-Skip-Cache
X-Environment-Context
X-L-Path
Service-Worker-Allowed
Keywords
X-Viator-Tapersistentcookie
X-Cache-On
Description
X-IIJ-Cache
X-CRA-DC
Play-Detected-UserAgent
Play-Detected-Device
X-Runtime-Affili
X-Force
Pics-Label
X-PRAM
X-Response
X-Cache-Node
X-RDP
X-Proto
Beyond-Iis
X-Resource
X-VC-TTL
Identity
X-Bip
X-GoCache-CacheStatus
Dispatcher
X-HydroSheep
X-Symfony-Cache
X-Backend-Status
X-NginX-Server
X-Magento-Action
Url
X-Vcache
RequestId
X-Varnish-Server
Machine
X-Analytics
X-TB-M
Backend-Timing
X-Key
Hostname
Og
X-Amz-Meta-S3b-Last-Modified
X-Distributor
X-Compressed-By
X-WHOIS-Cached
X-Rack-CORS
X-Autoru-Host
X-Autoru-LB
X-PHP-Response-Code
Fastly-Backend-Name
X-Wikidot-Static-Cache
X-GSL-Server
X-Fstrz
X-Secret
X-Frames-Options
X-Amz-Meta-Content-Md5
X-Wikidot-Backend
X-AutoRu-App-Id
X-Amz-Meta-Cb-Modifiedtime
X-Src-Webcache
X-Directory-Script
Dis-Env
X-Cms-Mode
Worker
X-Smartcache-Keys
X-Dev
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Avvio-Cms-Cacheload
X-Garden-Version
X-Culture
X-WP
X-Dw-Trace-Id
X-Detected-Device
X-Varnish-ID
X-Cocoon-Version
X-App-Status
X-Domain-Checked
X-Request-Uri
X-Real-IP
X-Provisioner-Version
XDomainRequestAllowed
X-Smartcache-Timeout
X-Lb
Access-Control-Allow-Method
X-Atraveo-ETag
Bios
X-Atraveo-Expires
X-Atraveo-From-Varnish-Cache
X-Atraveo-Cache-Control
X-Forwarded-Host
SS
X-Origin-Server
Nginx-Cache
X-Atraveo-Zone
TP-Cache
X-Cache-Varnish
COMMERCE-SERVER-SOFTWARE
X-Source-ID
X-SH-Cache-Status
X-Atraveo-Set-Cookie
TP-L2-Cache
Web
X-Atraveo-TTL
X-Rack-Cors
RN-Server
X-Atraveo-Varnish-Server-Id
WP-AdvCache-MemCached
X-Atraveo-Param-Rm
X-KoobooCMS-Version
X-Confluence-Request-Time
X-NginX-Cache
X-ACCELERATE
X-Adnet
Ctx
X-Data-Request
Proxy-Cache
X-Rewrite
X-SuperCache
Il-Cl
Home
X-Cache-Via
X-Varnish-Cache-Local
X-HP-Trace-ID
X-Session-Reinit
X-Flex-Evstart
X-Mobile-URL
X-Flex-Evend
X-LDNR-NOT-ROOT-HL-NOTSET
X-Flex-Tags
X-Flex-Lang
X-Highwire-SessionId
X-Highwire-RequestId
X-Grid-Server
X-Flex-Tag
X-Remote-Addr
X-Map-Context
X-Search-Id
X-SmartBan-Host
X-SmartBan-URL
X-HP-Trace-Project
X-Req-Head-Response
OriginServer
X-Redirector
X-Flex-Community
Traffic-Origin
X-Nginx-Host
X-Time-Microsecs
X-DTC
X-MCB-Server
X-Resolver-IP
X-HashTwo
X-CacheResult
FRONT-END-SECUREBROWSER
Accept-CH
X-Info
X-7d-Trace-Id
X-Goog-Meta-Replace
X-7d-Instance-Id
X-Sites
Disablevcache
X-RealServer
X-OPNET-Transaction-Trace
X-Debug-Token
X-Acquia-Debug-Password
Ec-Machine
Ec-CorrId
X-Machine
X-Pubstack
AMP-Access-Control-Allow-Source-Origin
SERVER-ID
X-Aramark-SID
X-B2f-Not-Route
Id
X-Depends
X-MidCOM-Meta-Cache
TC-Cache
X-FPC
TC-Cache-IC
TC-Cache-U
TC-S-Cache
NLCacheNote
X-Cluster
X-DDM-SERVER-UPDATED
Lb
X-DDM-SERVER
X-Origin-Cache
Myheader
TC-S-Cache-M
X-Airee-Node
X-Ghost-Cache-Status
X-Render-Time
X-Goog-Meta-Policy
X-Amcomm-Site
Device
X-Hosting
X-V
X-DB-Content-Length
X-Flex-Lastmod
X-Cache-TTL-Remaining
X-ESI
X-Distil-CS
Hummingbird-Cache
X-Author
Accept-Language
Strikingly-Cached-Version
X-Magento-Lifetime
X-Akamai-3PM-SW-Version
VC-NoCache
CLMOB
X-Cache-Extended
Strikingly-Cached
Strikingly-Cache-Region
X-NID
X-EC2-Instance-Id
HitType
Aoestatic
X-Proxy-Skip
X-LBPoolMember
X-Protected-By
OracleCommerceCloud-Sandiego
X-Backend-Host
X-Hstore
OracleCommerceCloud-Version
X-Hrouter
X-HAProxy
X-Amz-Id-1
X-Tag-Playlist
X-AISO-Cache
X-ETag
Cleartype
X-Sid
X-Cache-Me-Harder
X-Box
Ez
X-IP
X-NodeID
X-CACHE-TTL
X-DSMX-Rewrite-MS
X-HS-Status
X-DN-Cache-Control
X-DynamicCache
Ohc-Response-Time
X-Gannett-Site-Version
CommercePlatform-Version
X-Powered-By-Home.Pl
BackendServer
X-Header
X-Gyrobase-Publication
Upgrade-Insecure-Requests
X-DataDome
X-ASAP-Age
X-AISO-Cacheable
Copyright
X-Client-Ip
X-Bcwwwid
Content-Generator
PagesDisplayed
Requested-Host
X-Node-Name
X-DSMX-Render-MS
Server-Id
X-Agent
X-Zendesk-User-Id
X-Streams-Distribution
Gzip
F5-IpCliente
PServer
X-Zendesk-Origin-Server
NS-VaryByCustom-Key
X-4ormat-Cacheable
X-OCTOPOD
X-Served-Server
X-PM-ID
ClientIP
Warning
X-AISO-Server
X-App
X-VG-WebCache
Ews
X-SE-Debug
X-Country
Server-Ip
Ttl
X-Rewritten-By
X-Batcache
Xc
X-Reflector-Cache
X-Server-Addr
X-Reflector
X-HP-CAM-COLOR
NZSpeedy
X-Pj-Cache-Status
X-Cache-Detail
X-Cache-Keep
X-ManagedFusion-Rewriter-Version
X-Serv
X-Batcache-Reason
X-Nginx-Request-Processing-Time
ViewMode
X-Amz-Meta-Version-Id
HostName
RSB-LINK
X-Activity-Id
Viewport
X-Apm-Telemetry-Syncmark
MS-CV
X-Cname-TryFiles
X-CSRF-Token
X-CloudBurst-WordPress
X-HEAD
X-Header-Treatment
X-Debug-Token-Link
X-Domino-CacheValidationWithETagResult
X-Deity
X-Domino-CacheValidationWithETagReason
X-Route
X-Svr
X-Made-On
X-CloudBurst-Frontend
X-CloudBurst-Backend
X-CloudBurst-Cache
X-Cache-Time
GranicusServer
X-Cache-ID
EQ-Cache
Tesla.Performance
Control-Cache
X-Served
X-Full-Url
Generate-Time
X-Beatles
X-FIRSTBase
X-WebNode
X-UPSTREAM-Address
X-RiS-PX
X-Nginx-Request-Time
Fastly-Restarts
Tk
X-MainProfileName
X-MainProfileID
X-MainProfileCategory
X-Container
X-Middleton-Pagespeed
X-Instance-Id
AR-CACHE
AR-ATIME
Z-Tpl
Y-Trace
AR-PoweredBy
AR-SID
Session-Id
ProxiaInstanceId
CommunityServer
X-MainProfileURL
X-Obvious-Info
TZ-Server
X-Catalyst
X-Refresh
X-Captured
ID
Referer
Hamster
X-CDN-RULE
X-CDN-COMPRESS
Actual-Object-TTL
X-Via-NSCOPI
X-Clx-Request
Swift-Performance
FindLaw
X-Obvious-Tid
X-Hash
X-MSU-SOURCE
X-REDIRECTSERVER
X-Phpwcms-Release
X-Phpwcms-Page-Processed-In
X-Transaction-Name
X-T
MageStack-Cache-Lifetime
MageStack-Cache-Hits
MageStack-Cache
MageStack-Area
MageStack-Cache-Status
MageStack-Cache-Warning
MageStack-Loadbalancer
MageStack-Debug
MageStack-Config
MageStack-Cacheable
Key
Amfplus-Ver
X-HA
X-FastCGI-Cache-Status
X-Debug-Message
X-Az
X-JSESSIONID
X-Middleton-PageSpeed
X-UT-Cache
X-UA
X-Serverid
MageStack-Magento-Version
MageStack-PageSpeed
X-Pageid
X-Mw-Workerstats
X-M-V
X-M-T
X-Pool-Info
X-Q-S
X-S-V
X-S-C
X-RAMCache
X-M-P
X-Instart-Cache-Id
X-B
Provided-Host
MageStack-Web-Node
MageStack-Tag
X-Beresp-Ttl
X-Cachable
X-I-V
X-HeBS-Cache-Status
X-CH-Device
X-AppVersion
X-BServer
X-Unique-Id
X-Secure
X-Omnis-SiteID
Debug-Status
Page-Template
MachineName
X-Node-App
X-Nginx-Page-Cache
X-CO-Host
X-Cache-Bypass
X-Hit
X-Meta-Imagetoolbar
X-Meta-MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
SB-Cache-Life
SB-Cache-Remaining
DeleGate-Ver
X-Timestamp
Provider
X-AMAZEEIO
X-Highwire-Sitecode
X-Artvisual-Server
X-SilverStripe-Cache
X-ReqId
X-DS1D
SB-Site-Device
X-Enhanced-By
X-FG-RequestId
X-NO-BREACH
StatusCode
Session-From
Kanooh-Host
X-Uncacheable
Progma
X-CacheID
X-ELB
X-Config-By
X-Proxy-Id
X-Distributed-By
X-Server-Instance-Name
X-Server-Generated
X-Upstream-Status
X-Machine-Name
Webserver
X-Nitro-Cache
X-Pagely-Cache
EN-User
CmsfirstPublishTimestamp
MSSmartTagsPreventParsing
MSThemeCompatible
ServerIP
Response-Time
Arrnode
X-XHR-Current-Location
X-Custom-Header
X-Server-FQDN
X-Time-Zone
X-Varnish-Instance
X-VLoc
X-Highwire-Smart-Code
X-ServiceProvider
X-BPool
X-Blog
X-BPool-Back
X-Cache-Original-TTL
X-BPool-Fx-Cache
X-W3TC-Minify
TheAnswer
Language
X-Webcelerate
X-Varnish-Grace
X-Who
X-ZSITES-DNS
DrivedBy
X-Cacheable-TTL
X-Cjtype
X-VC-Hash
X-Cache-Id
X-ACLR-Version
User-Agent
Cacheid
CpuTime
X-VC-Debug
X-VC-Cacheable
X-Static
X-Layout
X-Title
X-Turpentine-Esi
X-VC-Cache
X-UnsetCookies
X-BPool-Bx-Cache
X-Pass-Through
X-PBY
X-Proxy-Cache-Key
X-PROCESSED-BY
X-SCM-Server-Number
X-Pixelsilk-Version
FastCGI-Cache
X-Akam-SW-Version
X-HOSTNAME
X-Pixelsilk-Server
X-FORWARDED-PROTO
Expiries
WP-FROM-CACHE
X-Cache-TTL-Age
X-SID
CS-SERVER
X-SH-Cache-Disabled
Apple-Itunes-App
X-WR-MODIFICATION
X-Upgrade-Enabled
X-Cache-TTL-Current
X-Old-Content-Length
Be
WSCLoggingUUID
X-Tt-Dbg
X-Dynamic-Cache
X-Skip-Cache
X-Geo-IP
X-CPU-Time
X-CACHE-KEY
X-Member
X-PG
X-Locale
X-Generation-Time
X-D-Time
UrlWatchModule-Time
X-AppServer-Cache-Rule
X-FW-Server
X-S-Misc
Xcache
Head
Serverid
X-Built-With
Countrycode
Content-Cache
Cache-Status
X-Dealeron-Original-Url
No-Cache
X-RemovedCookies
X-Sc-Cache
X-NewsFlow-Sitename
X-Gateway-Rate-Limit-Conn
X-Gateway-Rate-Limit-Delayed
X-Reason-Bp
X-PBS-Appsvrip
X-Backend-Name
X-ClusterID
X-Prerendered
X-M
X-Origin-Date
Request-Filtered-By
Powered-By-115
X-Proxy-Backend
ReqUrl
X-Cache-FS-Status
X-MyName
X-Healthy
X-Varnish-Debug-Hits
X-PBS-Appsvrname
X-PBS-Fwsrvname
CDCHOST
X-Ants-Host
X-Ants-Machine-Id
X-NMT-Proxy
X-Theme
X-Site
X-MSEdge-Ref
X-ProcessESI
X-RequesterIP
X-Dealeron-Backend
X-Test-Debug
X-SSLProxy
X-Prerender-Token
V-Age
TestCC
X-SSLUpstream
X-Varnish-Cache-Ttl
X-Svr-Proxy
X-XHTML-Minification-Powered-By
X-Instance
HA-Host
Edgecast
X-Does-He-Have-Time
X-DevSrv-CMS
Note
Container
MwpReleaseVersion
X-TLS-Version
SB-Site-IE-VERSION
X-Ssl-Cipher
Returned-Status
SINA-LB
SINA-TS
Realaction
X-Beatles-Hits
X-Ao-Cache-Key
Actioncode
X-Cache-Set
X-Fastly-Backend-Reqs
V-TTL
X-Cache-V
Www.Aujourdhui.Com
X-TTL-Age
X-Would-Your-GrandPa-Wait
User-Cache-Control
PB-RID
PB-PID
X-Status
X-ACache
X-Cache-LB
X-Cache-ASPX
X-Built-By
X-BIT-Node
X-Request-Processing-Time
X-Mobile-Rewrite
X-Session-Id
X-Restarts
X-Request-Received
X-Your-GrandPa-Would-Wait
X-SCProxy
X-SayCDN-TTL
X-Processed
X-Say-Cacheable
X-Say-TTL
Redirect-Reason
X-Varnish-Cached-TTL
X-K8s
HA-Georegion
X-Olaf
HA-Geolon
HA-Ipaddr
HA-Servedtime
L5d-Success-Class
VAR-Cache
IES-Server
HA-Urlpath
HA-Geolat
HA-Geocountry
HA-Cloudapp
DNNOutputCache
DB-Nickname
BlockPHPCallEnd
X-ENV
X-DeliveryServer
HA-Geocity
X-DEBUG-HOST
X-DEBUG-TTL
Resin-Trace
Load-Balancer
X-Optimization
X-ServerAddr
X-Script
X-This-Proto
X-Sn-Servicetimems
X-Test
X-Varnish-Cached
X-UPServer
X-Max-Age
X-MCF-ID
X-Homeaway-Requestmarker
Server-Hostname
NKBVHEADER
Access-Control-Request-Headers
Arrow-RequestId
X-B3-Spanid
X-B3-Traceid
X-Fpc
X-CGP
X-Cacheable-By-Varnish
X-PoweredBy