Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
X-AspNet-Version
Age
P3P
X-Pingback
Content-Language
Via
X-UA-Compatible
Expect-CT
Upgrade
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Request-Id
X-Varnish
X-Check
X-Language
X-Template
Alt-Svc
X-Generator
X-Buckets
X-Drupal-Cache
X-Xss-Protection
P3p
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-Powered-By-Plesk
Content-Location
Host-Header
X-Runtime
Referrer-Policy
X-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PodId
X-ShardId
X-Dc
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-Section
X-Alternate-Cache-Key
MS-Author-Via
X-UA-Device
X-Powered-CMS
X-IPLB-Instance
Cartoon
X-Served-By
X-Amz-Cf-Id
X-Cache-Status
Access-Control-Allow-Headers
Access-Control-Allow-Credentials
Status
Access-Control-Allow-Methods
X-Via
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Wix-Server-Artifact-Id
X-ServedBy
CF-Cache-Status
X-Ua-Compatible
X-Contextid
X-Accel-Buffering
X-Backend
X-PC-Key
X-PC-Hit
Powered-By
X-PC-Host
X-PC-Date
X-PC-AppVer
X-Mod-Pagespeed
X-CST
Content-Encoding
X-WPE-Loopback-Upstream-Addr
X-Logged-In
X-DIS-Request-ID
Keep-Alive
X-CDN
X-Rid
X-Host
X-Cache-Hit
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Port
X-Cache-Enabled
X-Server-Powered-By
X-Tumblr-Pixel-1
X-Server
X-Endurance-Cache-Level
X-Nginx-Cache-Status
X-Original-Date
X-Robots-Tag
X-Tumblr-Pixel-2
X-Accel-Version
X-Seen-By
X-Wix-Request-Id
X-Drupal-Dynamic-Cache
X-Page-Speed
X-Turbo-Charged-By
X-Sorting-Hat-PrivacyLevel
X-Content-Powered-By
X-Pad
X-Wix-Punisher
X-Forwarded-For
X-Proxy-Cache
X-Content-Digest
X-NewRelic-App-Data
X-Rack-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-AH-Environment
X-Forwarded-Proto
WP-Super-Cache
X-Tumblr-Pixel-3
X-Varnish-Cache
Content-Security-Policy-Report-Only
X-LiteSpeed-Cache
X-GitHub-Request-Id
Edge-Control
SPRequestGuid
X-Request-Country
X-SharePointHealthScore
X-MS-InvokeApp
X-XRDS-Location
MicrosoftSharePointTeamServices
X-Newrelic-App-Data
Timing-Allow-Origin
X-Cache-Lookup
X-Cnection
X-Node
X-SERVER
X-Trace
X-Amz-Id-2
X-Amz-Request-Id
X-Died
X-FW-Hash
Cf-Railgun
X-FullPageCaching
Charset
X-Content-Security-Policy
X-Webcom-Cache-Status
X-FW-Serve
X-FW-Type
X-FW-Static
Edge-Cache-Tag
X-Webserver
Request-Id
X-HS-Cache-Config
X-HS-Content-Id
X-CF-Powered-By
X-PhApp
Request-Context
X-Hits
X-BC-Stapler
SPIisLatency
SPRequestDuration
X-INKT-URI
X-INKT-SITE
X-PHP-Backend
Access-Control-Max-Age
MicrosoftOfficeWebServer
X-Safe-Firewall
Composed-By
Grace
EagleId
X-Swift-CacheTime
X-Swift-SaveTime
Access-Control-Expose-Headers
Served-By
X-CDN-Pop
X-CDN-Pop-IP
X-Spip-Cache
X-Hyper-Cache
Liferay-Portal
X-HS-Combine-CSS
X-VCache
X-Tumblr-Pixel-4
X-Server-Name
X-Fastly-Request-ID
X-Backend-Server
X-Device
X-Dw-Request-Base-Id
X-Microcache
X-Firenze-Processing-Times
X-RateLimit-Remaining
Refresh
X-RateLimit-Limit
X-Cloud-Trace-Context
X-FB-Debug
X-RateLimit-Reset
X-LiteSpeed-Cache-Control
X-Clacks-Overhead
Rating
X-Jimdo-Wid
X-Jimdo-Instance
Content-Style-Type
X-TNCMS
X-Loop
Surrogate-Control
Front-End-Https
Content-Script-Type
X-Acc-Exp
X-ServerName
X-DDC-Arch-Trace
Xkey
Public-Key-Pins
X-User-Agent
X-DNS-Prefetch-Control
X-Vtex-Processado-Em
X-Cache-Config
X-Frame-Option
Display
X-Sol
X-Middleton-Response
Response
X-Middleton-Display
X-XN-XNHTML
X-XN-Trace-Token
X-StackifyID
Fpc-Cache-Id
X-Age
X-Hostname
X-Tumblr-Content-Rating
X-N-OperationId
X-SS-Location
X-SS-Conf
X-Px
X-Cached
X-Generated-By
X-Dscp-Value
Real-Hostname
X-WebKit-CSP
X-Tumblr-Pixel-5
X-Zen-Fury
X-Topify-Platform
X-HOST
X-MiniProfiler-Ids
X-Request-Time
X-Correlation-Id
P-LB
P-WS
X-Magento-Tags
X-URL
TCN
PageSpeed
X-Handled-By
X-Url
X-Whom
X-Amz-Version-Id
X-Sorting-Hat-FeatureSet
X-CMS-Version
X-Kinsta-Cache
X-Outils-CS
X-OneAgent-JS-Injection
X-Cached-By
Rt-Fastcgi-Cache
X-B-Cache
X-Content-Options
X-DynaTrace
Product
Access-Control-Request-Method
X-DynaTrace-JS-Agent
X-AspNetWebPages-Version
ServedBy
Surrogate-Key
X-Varnish-TTL
Powered
X-Ruxit-JS-Agent
X-Edge-Location
X-Debug-Info
X-Msg-2-Log
Fhost
X-From
X-LBLID
X-CacheServer
X-Engine
Host
X-Goog-Hash
X-Varnish-Cache-Hits
Imagetoolbar
X-Cache-Rule
X-VTEX-Cache-Status-Janus-ApiCache
X-Powered-By-VTEX-Janus-ApiCache
X-Vtex-Remote-Cache
X-Vtex-Processed-At
No
X-VTEX-Janus-Router-Backend-App
Public-Key-Pins-Report-Only
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Via-JSL
Alternate-Protocol
Edge-Control-Message
X-Location-Id
X-Upstream
X-Passed-To-DLL
X-Returned-From-DLL
X-Signature
X-Passed-To
X-Original-Request
X-Actual-URL
DynaTrace
X-Returned-From
X-FORWARDED-FOR
X-Track
X-Varnish-Beresp-Grace
X-Recruiting
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Accel-Expires
X-Platform
X-Application-Context
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Stale
X-Passed-To-PostProcessResponse
X-Umbraco-Version
X-LW-Cache
Arr-Disable-Session-Affinity
X-Fastcgi-Cache
X-Hosted-By
X-Micro-Cache
X-Developer
Fastcgi-Cache
X-Response-Time
X-Powered-By-VTEX-Janus-Edge
Retry-After
X-ApacheServer
X-PERF
HTTPS
Dmn
X-Magento-Cache-Debug
Pagespeed
X-Cache-Info
X-UD-Method
X-Version
X-Loopia-Node
WZWS-RAY
X-Platform-Processor
X-Platform-Router
X-VARNISH-Cache
X-Powered-By-360WZB
Generator
X-URLSCHEME
X-Varnish-Host
X-Shop-Id
X-Defender
X-Platform-Cluster
Ohc-File-Size
X-F-Cache
X-Supported-By
X-RESOURCE
X-Rnd
Origin
X-NWS-LOG-UUID
X-Litespeed-Cache
X-Cache-Age
X-BS
X-Cache-TTL
X-TransIP-Balancer
X-Rocket-Nginx-Bypass
X-Tumblr-Pixel-6
X-I-Sp
X-Instart-Request-ID
Content-Hash
X-Device-Type
X-Microcachable
Akamai-IP
X-Source
Version
X-HS-Content-Campaign-Id
Cache-Provider
X-Front
Fastly-Debug-Digest
X-Storage
X-TransIP-Backend
X-Varnish-Count
X-Varnish-HitMiss
X-S
Surrogate-Key-Raw
X-Cache-Key
X-Cdn
X-EdgeConnect-Origin-MEX-Latency
X-CSRF-Protection
Last-Published
X-Pantheon-Phpreq
USPLoggingUUID
X-Pantheon-Environment
X-Pantheon-Site
X-Server-ID
X-Director
X-Powered-By-VelaWeb
X-App-Hosting
X-Platform-Server
X-Hypernode
X-Shard
RTSS
X-NetCat-Version
X-Cache-Operation
X-Cluster-Node
X-ATG-Version
Cache-Key
X-Dispatcher
X-Art-Request-Id
X-I
X-Matrix-Proxy
X-Matrix-Server
X-Page-Cache
X-Gamma-Serve
Allow
X-Sapient
X-Microcache-Status
X-Cache-Namespace
X-Translation
X-Environment
X-Cache-Tags
X-Server-Upstream
X-LB-Node
MIME-Version
X-Expires-Orig
X-SSL-Cipher
X-Ezoic-Cdn
X-Platform-Cache
X-Route-Server
X-ORACLE-DMS-ECID
X-EdgeConnect-MidMile-RTT
X-SSL-Protocol
X-Vcap-Request-Id
X-ARC
Powered-By-ChinaCache
X-Varnish-Age
X-Revision
Pool
X-Content-Encoded-By
X-Varnish-Seen-By
X-Varnish-ObjectSource
X-Varnish-RemainingTTL
X-Varnish-RemainingLife
X-Varnish-GracePeriod
X-Litespeed-Cache-Control
X-Flow-Powered
X-LB
Content-Disposition
X-Ttl
X-Varnish-Cacheable
X-Abgroup
X-SV-CreatedAt
X-Drupal-Cache-Tags
X-SV-CacheTags
X-SV-Duration
X-SV-Nginx-Duration
X-SV-Pid
IBM-Web2-Location
X-SV-Cacheable
X-SV-FromDBCache
X-SV-Expires
X-SV-Edge
Section-Io-Id
X-Lambda-Id
X-Cache-Debug
X-NoCache
Wsr-Cache
X-Grace
SSPAppContext
X-Daa-Tunnel
X-Github-Request-Id
X-Edge-IP
Pv
X-Dispatch
Lsrequestid
Content-MD5
X-Firenze-Processing-Time
Accept-Encoding
X-Magento-Cache-Control
X-IsCacheURL
Fw-Via
X-N
X-Cache-Only-Varnish
SN
X-Duration
FAI-W-FLOW
X-Client-IP
Content-Encoding-Handler
X-CJ-Soft
X-Nginx-Cache
X-Cache-Control-Orig
X-Cache-Expires
X-Varnish-Backend
X-Ss-Location
Location
Srv
X-Ss-Conf
X-Hiawatha-Cache
X-Generated
ServerID
X-RequestId
X-Last-Modified
Backend
X-Proxy
Cneonction
X-Goog-Metageneration
X-Varnish-Url
X-GeoIP-Country-Code
X-Drupal-Cache-Contexts
X-Cache-Lifetime
X-GUploader-UploadID
X-Goog-Generation
S-Cnection
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-SDS
X-Cache-Server
X-Cache-Engine
X-Url-Base
X-Cache-Type
Page-Completion-Status
X-AOL-HN
X-Amz-Meta-S3cmd-Attrs
X-Vhost
X-Varnish-Ttl
X-Time
X-UPSTREAM
IM-Version
Node
Proxy-Connection
X-Country-Code
ServerName
X-Debug
X-ID
X-Fastly-Request-Id
X-Geo-Country
Req-Id
X-PwB-Node
X-Varnish-IP
X-Server-Id
PICS-Label
AMF-Ver
X-ServerID
X-Akamai-Transformed
X-Middleware-Start
X-Purge-URL
X-Content-Age
X-Speed-Cache-Key
X-Config-Blacklist-Version
X-Speed-Cache
X-Discourse-Route
X-Oneagent-Js-Injection
X-Cache-CFC
Use-Proxy
Nitro-Cache
X-SRCache-Key
Server-Name
X-GeoIP-Country-Name
X-Magnolia-Registration
X-Location
X-Dynatrace-Js-Agent
If-Modified-Since
X-Browser
X-Cookie-Domain
X-Pressidium-NinukisWP-Ver
X-Cache-Level
X-Nbs
X-Akamai-Device-Model
X-FW
X-Akamai-Device-Characteristics
Nodo
X-Purge-Host
X-DealerOn
X-Yadis-Location
X-Empowered-By
X-Real-Server
Xc-Version
X-Cache-Handler
X-Always-Cache
X-Runtime-Rack
X-Worker
Server-Info
X-Content-Type-Option
X-SO
NnCoection
X-ORACLE-DMS-RID
X-Cache-Control
X-Frontend
X-Cache-Device-Type
X-Correlation-ID
Cached
Front
SEOMOZ
X-Cache-PageType
X-CF-Passed-Proto
X-BackendServer
Frame-Options
MJ12bot
X-Srv
X-Cache-Fix
X-PF-Uncompressing
Accept-Charset
X-High-Performance
X-App-Server
X-BKSrc
X-TTL
X-Varnish-Retries
X-Rocket-Nginx-Serving-Static
P-ID
X-Rq
X-Framework
X-CDN-Forward
Qs-Cache
X-Mobilized-By
Pf.Web.Request.Id
X-Amz-Storage-Class
X-Processing-Time
Cache
X-Esi
Author
HAVer
X-Unbounce-Variant
HCVer
X-Unbounce-VisitorID
X-Server-Instance
X-Unbounce-PageId
X-App-Status
Server-Timing
X-Hit-Cache
X-Pagename
Eomportal-Instance
X-Id
X-OpenCart-Lightning
Content-Transfer-Encoding
X-Abuse
Cm-Server
Local-Info
Custom-Header
X-Sentry-ID
S
Cteonnt-Length
MC
SRV
X-JG-Page-Cache
X-ACMCache
X-Ruxit-Js-Agent
X-VARITI-CCR
NODE
CacheControlHeader
X-Xrds-Location
X-Dns-Prefetch-Control
X-Runtime-Memory
Cache-Tag
X-AF-Userserver
X-WPL-DATA
X-HTML-Minification-Powered-By
ServerSignature
ServerTokens
Ufe-Result
X-Env
X-Page
X-Sucuri-ID
X-Varnish-Hits
SVR
X-FTR-Request-ID
X-Origin
X-Session-ID
Cache-Tags
EagleEye-TraceId
NtCoent-Length
Proxy-Agent
Magicmarker
X-Adobe-Loc
X-Shield-Request-Id
NetMindSessionID
X-VTEX-Cache-Status-Janus-Edge
WWW-Authenticate
Thanks
X-NB-Cached-Page
X-Adobe-Content
X-Traffic
SiteSpeed
X-Processed-By
X-Route-To
X-Server-IP
X-Cache-Dispatcherpragma
X-Cache-Dispatchercachecontrol
X-Orig-Vary
Tracecode
X-SmugMug-Values
X-WR-Flags
X-Content-Security-Policy-Report-Only
X-TTFB
X-Resty-Request-Id
W
X-TTFB-L
X-WN-ClientGroup
X-Fedora-School-Id
WN
X-Backend-Status
X-Gateway-Cache-Status
X-SRV
X-SmugMug-Hiring
X-Gateway-Skip-Cache
X-CAPServer
X-Sys-Req-ID
BALANCEDTO
Smug-CDN
Content_type
X-Gateway-Cache-Key
X-Cf-Powered-By
X-ClientSide-Caching
Contao-Page-Layout
X-Webkit-CSP
Environment
X-LB-Server
X-DEBUG
X-Jphone-Copyright
X-CB-Server
X-Drectory-Script
X-Proto
Adm-Server
Web-App-Origin-Name
X-A
A-Powered-By
X-AEM
X-Trace-Id
X-Twitter-Response-Tags
X-EPiphany-Vid
X-ServerIndex
Max-Age
X-Client-Image-Vid
X-Generated-Time
X-Client-Vid
X-Transaction
X-Connection-Hash
MW-Webserver
X-Yottaa-Metrics
X-Stage
X-Yottaa-Optimizations
From-Origin
X-HW
X-WA-Info
X-Cache-Doesi
X-Compress-Hint
X-Sorting-Hat-Expire-Cache
Yoncu-Errno
X-Avg-Cookie-Expires
Noq
Ram
Ramp
X-Akamai-Edgescape
Id
X-AVG-Country-Code
VANITY-HOST
X-Redman-Backend
X-Redman-Final-Url
X-Unique-ID
Fastly-Backend-Name
X-Garden-Version
X-Disney-Akamai-Rule
X-LP
SBGI-RenderTime
SBGI-1
X-Webstats-RespID
X-ARRServer
X-Varnish-Debug-Age
X-Varnish-Debug-TTL
X-HydroSheep
X-Smartcache-Timeout
X-Smartcache-Keys
X-Varnish-Id
X-Info
X-WP
Play-Detected-Device
Cmstype
Cmsid
X-VNode
X-Varnish-Hostname
Service-Worker-Allowed
X-PRAM
X-VC-Enabled
X-Application
X-Secret
Pics-Label
SBGI-9
SBGI-RealPath
IISExport
X-Clara-ASAP
X-Sucuri-Cache
X-ASAP-Cache
SBGI-Device
X-Force
X-Provisioner-Version
X-RiS-UFDI
RN-Server
SBGI-5
SBGI-10
X-Domain-Checked
SBGI-7
Description
Machine
Play-Detected-UserAgent
Keywords
X-Vcache
X-GoCache-CacheStatus
X-Symfony-Cache
X-Akamai-3PM-SW-Version
Web
Beyond-Iis
X-Magento-Action
X-Server-Addr
X-VC-TTL
Dispatcher
Url
X-NginX-Server
X-Resource
X-LW-Web-Server
Ctx
X-FORWARDED-PROTO
X-Resolver-IP
X-Analytics
X-GeoIP
X-Frames-Options
X-Cache-Node
X-Environment-Context
X-Plat
X-Fstrz
X-Key
X-L-Path
Og
X-Varnish-Server
Home
X-Varnish-ID
X-Amz-Meta-Cb-Modifiedtime
X-Airee-Node
X-Request-Uri
X-SDE-Name
X-TB-M
X-Amz-Meta-Content-Md5
X-Culture
X-Detected-Device
X-Dw-Trace-Id
Dis-Env
X-E
X-Debug-Token
X-Sites
X-Acquia-Debug-Password
X-CACHE-TTL
X-Src-Webcache
X-Directory-Script
X-IIJ-Cache
X-Cocoon-Version
SHInfo
X-RealServer
X-Real-IP
X-FireWall-Port
X-Balanceador
Server-ID
ScoreTracker
Backend-Timing
AsisCache
RequestId
X-Hosting-Env
VServer
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Dev
X-Cms-Mode
Worker
XDomainRequestAllowed
Hostname
X-WebKit-CSP-Report-Only
X-Origin-Server
X-Source-ID
AC-ELC
SS
X-Bip
X-Atraveo-Cache-Control
Nginx-Cache
X-NginX-Cache
X-Atraveo-Param-Rm
WP-AdvCache-MemCached
Access-Control-Allow-Method
Bios
X-SV
COMMERCE-SERVER-SOFTWARE
X-Atraveo-ETag
X-Atraveo-Zone
X-Atraveo-Expires
X-Atraveo-From-Varnish-Cache
X-Atraveo-Varnish-Server-Id
HitType
X-Atraveo-TTL
X-Atraveo-Set-Cookie
X-Map-Context
TC-S-Cache-M
TC-S-Cache
X-Pubstack
X-Depends
X-Cache-Via
X-DTC
X-FPC
TC-Cache-U
NLCacheNote
X-Machine
X-Highwire-RequestId
X-Highwire-SessionId
X-Gannett-Site-Version
X-SmartBan-Host
X-SmartBan-URL
Disablevcache
Myheader
X-Goog-Meta-Replace
X-Flex-Lastmod
X-Goog-Meta-Policy
X-Ghost-Cache-Status
X-Flex-Tag
X-Flex-Lang
X-Flex-Evstart
X-ACCELERATE
X-Adnet
X-Flex-Community
X-Flex-Evend
X-Flex-Tags
X-Compressed-By
X-LDNR-NOT-ROOT-HL-NOTSET
X-GSL-Server
X-Origin-Cache
Hname
Paypal-Debug-Id
X-MAT-GEO
X-Desc
X-Remote-Addr
X-Rewrite
X-Redirector
X-Wikidot-Static-Cache
X-MCB-Server
X-Wikidot-Backend
Ec-CorrId
Ec-Machine
X-Distributor
X-Confluence-Request-Time
X-Viator-Tapersistentcookie
Access-Control-Allow-Header
X-Rebelmouse-Surrogate-Control
X-CRA-DC
X-Cdn-Forward
X-Rebelmouse-Cache-Control
X-RDP
X-Forwarded-Host
Device
X-Mobile-URL
X-HP-Trace-Project
Ibf5scheme
X-4ormat-Cacheable
X-Response
N365rili
SG
X-HP-Trace-ID
X-Cache-On
X-WHOIS-Cached
X-Runtime-Affili
X-Autoru-Host
X-AutoRu-App-Id
X-Aramark-SID
X-Autoru-LB
X-B2f-Not-Route
X-DB-Content-Length
X-Cluster
X-Amz-Meta-S3b-Last-Modified
Proxy-Cache
X-Req-Head-Response
X-Nginx-Host
TC-Cache
X-Search-Id
X-Session-Reinit
Il-Cl
X-Time-Microsecs
X-Varnish-Cache-Local
ClientIP
X-Amcomm-Site
From
AMP-Access-Control-Allow-Source-Origin
X-App-Runtime
X-Data-Request
X-Hosting
SERVER-ID
X-Refresh
X-Rack-CORS
OriginServer
Gzip
F5-IpCliente
Traffic-Origin
X-HashTwo
X-CacheResult
X-OPNET-Transaction-Trace
TC-Cache-IC
CLMOB
Strikingly-Cached-Version
X-SH-Cache-Status
X-EC2-Instance-Id
X-KoobooCMS-Version
TP-L2-Cache
Strikingly-Cache-Region
X-SERVER-NAME
X-Lb
X-Cache-Varnish
Aoestatic
Server-Ip
Strikingly-Cached
Accept-Language
X-NID
X-Batcache
NZSpeedy
TP-Cache
VC-NoCache
X-Avvio-Cms-Cacheload
Hummingbird-Cache
X-Magento-Lifetime
X-Akam-SW-Version
Identity
X-Distil-CS
X-ESI
X-Author
X-Proxy-Skip
PServer
X-Rack-Cors
Content-Generator
X-Omnis-SiteID
X-Protected-By
X-PM-ID
Server-Id
NS-VaryByCustom-Key
X-Grid-Server
ServerIP
Session-From
X-DSMX-Rewrite-MS
StatusCode
X-DSMX-Render-MS
X-DN-Cache-Control
EN-User
MSSmartTagsPreventParsing
MSThemeCompatible
X-Bcwwwid
X-Gyrobase-Publication
X-Meta-Imagetoolbar
X-Meta-MSSmartTagsPreventParsing
X-Meta-MSThemeCompatible
X-AISO-Cache
X-ETag
X-AISO-Server
X-AISO-Cacheable
X-V
X-Route
Lb
X-App
Ohc-Response-Time
X-DynamicCache
BackendServer
X-PHP-Response-Code
X-Node-Name
X-Tag-Playlist
X-HS-Status
OracleCommerceCloud-Sandiego
Upgrade-Insecure-Requests
X-Header
X-Cache-TTL-Age
Cleartype
CommercePlatform-Version
X-LBPoolMember
Copyright
Ez
X-DS1D
X-Cache-TTL-Current
X-ASAP-Age
X-DataDome
X-Amz-Id-1
OracleCommerceCloud-Version
X-Served-Server
Debug-Status
X-Render-Time
Xc
X-Zendesk-Origin-Server
X-Zendesk-User-Id
X-Streams-Distribution
Accept-CH
PagesDisplayed
X-Proxy-Cache-Key
Actual-Object-TTL
X-IP
X-Captured
X-Varnish-Action
X-NodeID
Ews
X-Powered-By-Home.Pl
X-ManagedFusion-Rewriter-Version
X-Dealeron-Backend
X-Dealeron-Original-Url
X-Pj-Cache-Status
X-Cache-Detail
Ttl
X-Rewritten-By
X-HP-CAM-COLOR
X-Batcache-Reason
X-HAProxy
X-Reflector
X-Reflector-Cache
X-Pagely-Cache
X-Serv
X-Lw-Cache
X-Nginx-Request-Processing-Time
X-Cache-TTL-Remaining
X-B
MageStack-Tag
X-Beresp-Ttl
X-Cachable
X-Config-By
X-Country
X-Generation-Time
MageStack-Web-Node
X-D-Time
X-CH-Device
Provided-Host
X-Nitro-Cache
UrlWatchModule-Time
X-Instart-Cache-Id
Content-Cache
X-M-P
X-M-T
X-Mw-Workerstats
X-M-V
X-I-V
X-HeBS-Cache-Status
Progma
MageStack-PageSpeed
No-Cache
Kanooh-Host
X-FIRSTBase
X-AppServer-Cache-Rule
MageStack-Magento-Version
WP-FROM-CACHE
Key
MageStack-Area
MageStack-Cache
MageStack-Cache-Lifetime
MageStack-Cache-Hits
TZ-Server
ID
X-CDN-RULE
Hamster
Amfplus-Ver
X-CDN-COMPRESS
X-CacheID
Expiries
MageStack-Cache-Status
MageStack-Loadbalancer
MageStack-Debug
XX
X-ServiceProvider
X-Pageid
MageStack-Config
Cache-Status
X-ReqId
CS-SERVER
X-Catalyst
MageStack-Cacheable
X-Built-With
X-S-Misc
X-Q-S
FindLaw
Requested-Host
X-Nginx-Request-Time
X-Obvious-Tid
X-MainProfileURL
X-Obvious-Info
Swift-Performance
X-Middleton-Pagespeed
X-Instance-Id
X-Box
X-Backend-Host
X-7d-Trace-Id
X-7d-Instance-Id
X-MainProfileName
X-OCTOPOD
X-Agent
X-Cache-Me-Harder
Tk
X-WebNode
Fastly-Restarts
X-Container
X-Hrouter
X-RiS-PX
X-MainProfileID
X-MainProfileCategory
X-UPSTREAM-Address
X-Hstore
X-Client-Ip
X-DDM-SERVER
X-SuperCache
X-VG-WebCache
Y-Trace
Z-Tpl
AR-ATIME
X-Transaction-Name
X-T
X-RAMCache
FRONT-END-SECUREBROWSER
X-Via-NSCOPI
X-S-C
X-S-V
X-Sid
AR-CACHE
ProxiaInstanceId
X-MidCOM-Meta-Cache
X-Hash
Session-Id
X-DDM-SERVER-UPDATED
CommunityServer
X-Phpwcms-Page-Processed-In
X-SE-Debug
AR-PoweredBy
X-REDIRECTSERVER
AR-SID
X-Phpwcms-Release
X-Pool-Info
MageStack-Cache-Warning
X-Cache-Bypass
X-CO-Host
X-Hit
X-Layout
Response-Time
X-Title
X-Static
X-Nginx-Page-Cache
X-Cjtype
X-BPool-Back
X-BPool
X-BPool-Bx-Cache
X-BPool-Fx-Cache
X-Cacheable-TTL
X-BServer
X-Turpentine-Esi
X-VC-Cache
X-ACLR-Version
User-Agent
X-Cache-Id
X-Cache-Original-TTL
X-Full-Url
X-Custom-Header
Arrnode
CmsfirstPublishTimestamp
X-VC-Debug
X-VC-Cacheable
X-VC-Hash
X-W3TC-Minify
CpuTime
Cacheid
X-Blog
X-Node-App
Page-Template
DeleGate-Ver
Provider
X-AMAZEEIO
MachineName
X-Artvisual-Server
SB-Cache-Life
SB-Cache-Remaining
X-SilverStripe-Cache
X-NO-BREACH
X-FG-RequestId
X-Enhanced-By
SB-Site-Device
X-Timestamp
X-Highwire-Sitecode
X-Highwire-Smart-Code
X-ZSITES-DNS
X-Who
DrivedBy
Language
TheAnswer
X-UT-Cache
X-Webcelerate
X-Varnish-Grace
X-PBY
X-Pass-Through
X-PROCESSED-BY
X-Unique-Id
X-UnsetCookies
X-SCM-Server-Number
X-Svr
X-Secure
X-Serverid
X-Cname-TryFiles
X-CSRF-Token
X-Az
X-HA
X-AppVersion
X-CloudBurst-Backend
X-Amz-Meta-Version-Id
X-CloudBurst-Frontend
X-CloudBurst-WordPress
X-Debug-Token-Link
X-Deity
X-Made-On
X-UA
X-Debug-Message
X-Served
X-Header-Treatment
X-HEAD
X-FastCGI-Cache-Status
X-Domino-CacheValidationWithETagReason
X-Domino-CacheValidationWithETagResult
X-Cache-Time
X-CloudBurst-Cache
X-Activity-Id
X-Middleton-PageSpeed
ViewMode
Tesla.Performance
HostName
Control-Cache
EQ-Cache
GranicusServer
Viewport
RSB-LINK
X-Beatles
X-JSESSIONID
X-Cache-ID
X-Apm-Telemetry-Syncmark
MS-CV
Generate-Time
X-Pixelsilk-Version
FastCGI-Cache
X-Pixelsilk-Server
X-Cache-Extended
X-Gateway-Rate-Limit-Conn
X-Backend-Name
V-Age
X-SayCDN-TTL
X-Reason-Bp
X-ClusterID
X-Prerendered
TestCC
X-SCProxy
X-Ants-Machine-Id
WSCLoggingUUID
X-Instance
X-MSEdge-Ref
X-ProcessESI
X-Old-Content-Length
X-Dynamic-Cache
X-Say-TTL
SB-Site-IE-VERSION
X-Status
X-RemovedCookies
X-RequesterIP
X-NMT-Proxy
X-Test-Debug
X-Varnish-Cache-Ttl
X-Gateway-Rate-Limit-Delayed
X-Ants-Host
X-Site
X-Theme
CDCHOST
X-XHTML-Minification-Powered-By
X-MyName
Rewriter
Webserver
X-Proxy-Id
X-Server-Hostname
DbServerName
CD4
X-Restarts
X-CACHE-KEY
X-Locale
Amp-Access-Control-Allow-Source-Origin
X-BackendProxy
X-Varnish-Cached-TTL
Httpd-Identifier
X-Instance-Name
X-Varnish-Cached
X-UPServer
X-MCF-ID
X-Script
X-ServerAddr
X-Skip-Cache
X-Geo-IP
Powered-By-115
ReqUrl
X-Cache-FS-Status
X-Healthy
Referer
X-Proxy-Backend
X-Origin-Date
X-Varnish-Debug-Hits
Request-Filtered-By
X-Say-Cacheable
X-NewsFlow-Sitename
X-SSLUpstream
X-Svr-Proxy
X-Session-Id
X-SSLProxy
X-Prerender-Token
X-PBS-Appsvrip
X-PBS-Appsvrname
X-PBS-Fwsrvname
X-M
X-PG
X-TLS-Version
X-DEBUG-HOST
X-DEBUG-TTL
X-Fastly-Backend-Reqs
X-Clx-Request
X-Cache-V
X-DevSrv-CMS
X-Does-He-Have-Time
X-DeliveryServer
X-ENV
SINA-TS
SINA-LB
X-PoweredBy
X-MSU-SOURCE
X-TTL-Age
Www.Aujourdhui.Com
V-TTL
X-Max-Age
X-Upstream-Status
Actioncode
Warning
X-Ao-Cache-Key
Arrow-RequestId
Access-Control-Request-Headers
Be
Redirect-Reason
Resin-Trace
VAR-Cache
Realaction
X-Optimization
X-Olaf
X-This-Proto
X-Cache-Set
X-Beatles-Hits
X-Test
X-Would-Your-GrandPa-Wait
X-Your-GrandPa-Would-Wait
X-Time-Zone
X-Varnish-Instance
X-VLoc
X-Server-FQDN
User-Cache-Control
X-Member
X-BIT-Node
X-ACache
X-XHR-Current-Location
Xcache
X-Mobile-Rewrite
X-CPU-Time
X-SH-Cache-Disabled
Serverid
Head
Returned-Status
Countrycode
X-Built-By
X-ELB
X-Upgrade-Enabled
X-Ssl-Cipher
Note
X-Tt-Dbg
PB-RID
Edgecast
PB-PID
X-Request-Received
X-Request-Processing-Time
X-Cache-LB
MwpReleaseVersion
X-Cache-ASPX
Container
X-Cache-Keep
Apple-Itunes-App
X-K8s
X-Processed