Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
X-Cache
Strict-Transport-Security
X-AspNet-Version
CF-RAY
P3P
X-Pingback
Age
Content-Language
X-UA-Compatible
Via
Access-Control-Allow-Origin
X-Adblock-Key
Upgrade
X-Varnish
X-Cacheable
X-Check
X-Template
X-Language
P3p
Content-Security-Policy
X-Generator
X-Buckets
X-Drupal-Cache
X-Xss-Protection
X-Type
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Request-Id
X-Hacker
X-Ac
X-Powered-By-Plesk
Content-Location
X-Cache-Hits
X-Runtime
X-Permitted-Cross-Domain-Policies
MS-Author-Via
X-Download-Options
Host-Header
Alt-Svc
X-ShopId
X-Sorting-Hat-PodId
X-ShardId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-Section
X-Dc
X-Sorting-Hat-ShopId
X-IPLB-Instance
X-Alternate-Cache-Key
X-Request-ID
X-Powered-CMS
Cartoon
Status
X-Served-By
X-UA-Device
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Via
X-Amz-Cf-Id
X-Iinfo
X-Cache-Status
X-Wix-Server-Artifact-Id
X-Backend
X-Contextid
X-Timer
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-ServedBy
X-DIS-Request-ID
X-PC-Key
X-PC-Hit
CF-Cache-Status
Powered-By
X-Mod-Pagespeed
X-PC-Date
X-PC-AppVer
X-PC-Host
X-Logged-In
Content-Encoding
Keep-Alive
X-Server
Expect-CT
X-Rid
X-Host
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Cache-Hit
X-CDN
X-Port
X-Tumblr-Pixel-1
X-CST
X-Server-Powered-By
Referrer-Policy
X-Robots-Tag
X-Pad
X-Tumblr-Pixel-2
X-Cache-Enabled
X-Nginx-Cache-Status
X-Endurance-Cache-Level
WP-Super-Cache
X-Accel-Version
Fastly-Debug-Digest
X-Page-Speed
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
X-Turbo-Charged-By
X-Wix-PunisherID
X-Content-Powered-By
X-Drupal-Dynamic-Cache
X-Tumblr-Pixel-3
X-Content-Digest
X-Rack-Cache
X-Varnish-Cache
X-AH-Environment
X-Forwarded-For
Content-Security-Policy-Report-Only
X-Forwarded-Proto
SPRequestGuid
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
Surrogate-Key-Raw
X-SharePointHealthScore
X-Proxy-Cache
MicrosoftSharePointTeamServices
X-MS-InvokeApp
X-GitHub-Request-Id
X-Cnection
X-Request-Country
X-XRDS-Location
X-Cache-Lookup
X-LiteSpeed-Cache
X-Original-Date
Edge-Control
X-Safe-Firewall
Cf-Railgun
X-FullPageCaching
Timing-Allow-Origin
MicrosoftOfficeWebServer
Request-Id
X-Amz-Id-2
X-Amz-Request-Id
X-Webserver
Charset
X-FW-Hash
X-PhApp
X-Died
X-Node
X-FW-Type
X-FW-Serve
X-FW-Static
SPIisLatency
SPRequestDuration
X-INKT-URI
X-INKT-SITE
Edge-Cache-Tag
X-Content-Security-Policy
X-Hits
Composed-By
X-HS-Cache-Config
X-HS-Content-Id
Access-Control-Max-Age
X-CF-Powered-By
X-Tumblr-Pixel-4
Liferay-Portal
X-Swift-SaveTime
X-Swift-CacheTime
Grace
Served-By
EagleId
Access-Control-Expose-Headers
X-Hyper-Cache
Content-MD5
X-Spip-Cache
X-CDN-Pop
X-CDN-Pop-IP
X-BC-Stapler
X-AWS-Id
X-LJ-Flow-ID
X-VWS-Id
X-Device
Request-Context
X-Firenze-Processing-Times
X-Server-Name
X-Backend-Server
Rating
X-Microcachable
X-Dw-Request-Base-Id
X-Fastly-Request-ID
X-Newrelic-App-Data
X-Microcache
X-SERVER
X-Tumblr-Content-Rating
X-VCache
X-RateLimit-Remaining
X-RateLimit-Limit
Content-Style-Type
X-FB-Debug
X-RateLimit-Reset
Refresh
Content-Script-Type
X-ServerName
X-Clacks-Overhead
X-User-Agent
X-Jimdo-Wid
X-Jimdo-Instance
X-Cloud-Trace-Context
Public-Key-Pins
X-TNCMS
X-Loop
Real-Hostname
Surrogate-Control
X-Cache-Config
Xkey
X-XN-XNHTML
X-XN-Trace-Token
X-DDC-Arch-Trace
Front-End-Https
X-Acc-Exp
X-Hostname
X-Age
Fpc-Cache-Id
X-Aspnetmvc-Version
X-N-OperationId
X-Generated-By
X-Tumblr-Pixel-5
PageSpeed
X-Px
X-Cached
X-DNS-Prefetch-Control
X-LiteSpeed-Cache-Control
Display
X-Middleton-Display
X-StackifyID
Response
X-Middleton-Response
X-Sol
X-Topify-Platform
X-SS-Conf
X-SS-Location
X-MiniProfiler-Ids
X-WebKit-CSP
X-FORWARDED-FOR
X-Cached-By
X-Zen-Fury
Surrogate-Key
X-Url
X-Outils-CS
TCN
X-Request-Time
X-CMS-Version
X-URL
X-Content-Options
Rt-Fastcgi-Cache
X-Pantheon-Environment
X-Pantheon-Phpreq
X-Pantheon-Site
X-Varnish-TTL
X-Cdn
X-Whom
X-HOST
X-Umbraco-Version
X-PERF
X-OneAgent-JS-Injection
X-ApacheServer
X-Amz-Version-Id
Product
Imagetoolbar
X-Varnish-Cache-Hits
X-Handled-By
Access-Control-Request-Method
X-Ruxit-JS-Agent
X-AspNetWebPages-Version
X-DynaTrace
Edge-Control-Message
X-DynaTrace-JS-Agent
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Correlation-Id
X-Engine
Host
Alternate-Protocol
ServedBy
X-Kinsta-Cache
Powered
X-From
X-Msg-2-Log
Dmn
DynaTrace
X-Micro-Cache
X-NWS-LOG-UUID
Generator
X-Hosted-By
X-Cache-Rule
Fhost
X-Magento-Tags
P-LB
X-Location-Id
P-WS
X-Servedby
WZWS-RAY
X-Powered-By-360WZB
X-Track
X-CacheServer
X-LBLID
X-Edge-Location
X-Recruiting
X-Vtex-Remote-Cache
X-B-Cache
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-Vtex-Processado-Em
X-Vtex-Processed-At
X-VTEX-Cache-Status-Janus-ApiCache
No
X-RESOURCE
X-Goog-Hash
X-Actual-URL
X-Powered-By-VTEX-Janus-Edge
Arr-Disable-Session-Affinity
X-VARNISH-Cache
X-Passed-To-DLL
X-Passed-To
X-Returned-From
X-Original-Request
X-Returned-From-DLL
X-Tumblr-Pixel-6
X-Developer
X-URLSCHEME
Origin
X-Passed-To-PostProcessResponse
Fastcgi-Cache
X-Fastcgi-Cache
X-Varnish-Host
X-Passed-To-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-BS
X-I-Sp
X-Instart-Request-ID
X-Stale
X-Cache-Info
X-Cache-Age
X-Response-Time
X-App-Hosting
X-Matrix-Proxy
X-Matrix-Server
X-Defender
X-TransIP-Balancer
X-Accel-Expires
X-Shop-Id
X-LB
X-Application-Context
X-Source
X-UD-Method
X-Varnish-HitMiss
X-Varnish-Count
X-Internal-ReqID
X-Art-Request-Id
X-Cache-TTL
Akamai-IP
X-Akamai-Transformed
X-Varnish-GracePeriod
X-Varnish-ObjectSource
X-Varnish-RemainingLife
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-Platform-Router
X-NetCat-Version
X-Upstream
X-Platform-Processor
X-Platform-Cluster
USPLoggingUUID
X-Version
X-Device-Type
X-TransIP-Backend
X-Gamma-Serve
X-Storage
X-HS-Content-Campaign-Id
X-Expires-Orig
X-Cache-Tags
Powered-By-ChinaCache
Content-Disposition
Ohc-File-Size
X-Rocket-Nginx-Bypass
X-Varnish-Cacheable
X-NewRelic-App-Data
Pool
X-Cache-Debug
X-Powered-By-VelaWeb
Content-Hash
X-I
Version
X-S
X-Route-Server
X-Content-Encoded-By
X-Origin
X-ATG-Version
X-Supported-By
X-Front
IBM-Web2-Location
X-Cache-Operation
X-Microcache-Status
X-Cache-Key
Public-Key-Pins-Report-Only
X-Translation
X-VTEX-Cache-Status-Janus-Edge
X-Platform
X-Revision
HTTPS
X-Signature
X-EdgeConnect-Origin-MEX-Latency
X-UPSTREAM
X-Server-Upstream
Last-Published
MIME-Version
X-Daa-Tunnel
Srv
X-Debug-Info
X-Dispatcher
X-NoCache
X-SSL-Cipher
X-SSL-Protocol
X-SV-CacheTags
X-SV-Duration
X-SV-Edge
X-SV-Nginx-Duration
X-SV-FromDBCache
X-SV-Expires
X-SV-Cacheable
X-Varnish-Age
X-EdgeConnect-MidMile-RTT
X-SV-Pid
ServerName
X-SV-CreatedAt
X-Firenze-Processing-Time
X-Varnish-Backend
X-Hypernode
Node
X-Platform-Cache
SSPAppContext
X-Server-Id
X-Server-ID
X-Flow-Powered
X-Cache-Lifetime
X-AOL-HN
X-Platform-Server
X-Page-Cache
X-Abgroup
X-Cache-Control-Orig
X-Duration
X-Vcap-Request-Id
X-PwB-Node
X-Abuse
X-Sapient
X-Dns-Prefetch-Control
SN
X-LB-Node
X-Dispatch
X-F-Cache
X-TTL
X-Last-Modified
Cache-Key
FAI-W-FLOW
X-Country-Code
X-CJ-Soft
Edge-Content-Tag
Page-Completion-Status
X-Director
X-SDS
Cache-Tag
X-Cache-Only-Varnish
Lsrequestid
X-Magento-Cache-Debug
X-Geo-Country
Proxy-Connection
Cneonction
X-Cookie-Domain
ServerID
X-Client-IP
X-Url-Base
WSR-Cache
Req-Id
X-Edge-IP
X-Debug
Accept-Encoding
X-LW-Cache
X-Grace
Allow
X-ORACLE-DMS-ECID
IM-Version
X-GeoIP-Country-Code
NnCoection
X-ServerID
X-Speed-Cache
X-Cache-CFC
X-Speed-Cache-Key
X-BackendServer
X-Cache-Expires
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Akamai-Device-Model
X-GeoIP-Country-Name
Pv
X-Cache-Server
X-Akamai-Device-Characteristics
X-Amz-Meta-S3cmd-Attrs
X-ARC
PICS-Label
Location
S-Cnection
X-Processing-Time
X-Ttl
Cteonnt-Length
X-Nbs
Cache-Provider
Author
X-Time
X-Content-Age
X-Purge-URL
X-RequestId
Section-Io-Id
If-Modified-Since
X-SERVER-NAME
X-Frontend
X-Discourse-Route
X-IsCacheURL
Backend
X-Yadis-Location
X-Loopia-Node
Content-Encoding-Handler
X-NB-Cached-Page
MJ12bot
X-FW
SEOMOZ
X-Middleware-Start
A-Powered-By
Cached
X-GUploader-UploadID
X-Nginx-Cache
X-Goog-Storage-Class
X-Goog-Generation
X-Goog-Stored-Content-Encoding
Fw-Via
X-Goog-Metageneration
X-Goog-Stored-Content-Length
X-Sucuri-ID
X-Pressidium-NinukisWP-Ver
Server-Info
X-Cache-Level
X-N
X-Id
X-Cache-Engine
X-Varnish-Url
X-Proxy
X-SE-Debug
X-Purge-Host
AMF-Ver
X-ID
Accept-Charset
X-Browser
X-PF-Uncompressing
Use-Proxy
X-Hiawatha-Cache
X-Worker
RTSS
S
X-Shield-Request-Id
X-BKSrc
X-Cache-Handler
X-Processed-By
X-Lambda-Id
Access-Control-Allow-Header
X-Real-Server
X-Sucuri-Cache
X-Varnish-IP
Frame-Options
Nitro-Cache
Cache
X-Trace
Identity
Qs-Cache
X-Config-Blacklist-Version
Content-Transfer-Encoding
X-DealerOn
X-Vhost
X-Empowered-By
Xc-Version
X-Generated
X-Always-Cache
CacheControlHeader
X-Content-Type-Option
X-WEBSERVER
HCVer
HAVer
X-Framework
X-Cache-Type
SRV
X-Mobilized-By
X-Healthy
Nodo
Local-Info
X-SO
Tracecode
NetMindSessionID
X-Cache-TTL-Remaining
X-CDN-Forward
X-Cache-Fix
X-Cache-PageType
X-WR-Flags
NODE
Retry-After
X-Varnish-Server
Eomportal-Instance
X-Cache-Control
X-Magento-Cache-Control
MC
X-ClientSide-Caching
BALANCEDTO
HitType
X-App-Server
X-Amz-Storage-Class
X-Cf-Powered-By
X-Yottaa-Optimizations
X-Yottaa-Metrics
EagleEye-TraceId
Buuteeq-Source
SVR
X-EPiphany-Vid
X-Client-Image-Vid
X-Powered-By-Server
X-SRCache-Key
X-Hit-Cache
Cm-Server
X-Client-Vid
X-Pagename
X-Symfony-Cache
X-Adobe-Content
Thanks
X-Adobe-Loc
X-Drupal-Cache-Tags
X-JG-Page-Cache
X-HP-Trace-Project
X-HP-Trace-ID
X-Twitter-Response-Tags
X-Varnish-Hits
X-AF-Userserver
X-Directory-Script
X-Transaction
X-Environment
WWW-Authenticate
X-Remote-Addr
X-Connection-Hash
X-Varnish-Ttl
X-VC-TTL
RATING
X-CDN-Node
Magicmarker
Front
X-CDN-Cache-Status
X-LB-Server
X-TB-M
Disablevcache
X-Content-Security-Policy-Report-Only
From-Origin
X-Orig-Vary
X-Magnolia-Registration
X-CB-Server
X-Cache-Device-Type
X-Unique-ID
X-Varnish-ID
X-Srv
X-Site-Name
X-DataDome
Keywords
X-ORACLE-DMS-RID
X-Server-IP
Ufe-Result
X-LW-Web-Server
X-Sys-Req-ID
X-Location
X-Route-To
X-Generated-Time
X-Traffic
X-OPNET-Transaction-Trace
X-ACMCache
X-Cocoon-Version
Machine
X-Cache-Dispatchercachecontrol
X-High-Performance
X-NginX-Cache
X-CF-Passed-Proto
X-NginX-Server
X-CAPServer
IISExport
X-Runtime-Memory
X-Varnish-Retries
X-Source-ID
Max-Age
X-Cache-Dispatcherpragma
X-Resty-Request-Id
X-Varnish-Hostname
X-Session-Reinit
X-Fedora-School-Id
Pics-Label
Server-Name
Fastly-Backend-Name
Description
X-LP
X-Cache-Doesi
X-Render-Time
Content_type
NLCacheNote
X-VARITI-CCR
X-FireWall-Port
X-FORWARDED-PROTO
X-Frame-Option
X-SmugMug-Values
X-TTFB
X-TTFB-L
Bios
X-Webcelerate
X-SmugMug-Hiring
X-Captured
ServerSignature
ServerTokens
Smug-CDN
X-Key
X-Resolver-IP
X-HW
X-Nginx-Host
X-Drectory-Script
X-HydroSheep
RN-Server
X-Mobile-URL
X-Runtime-Rack
Ctx
X-VC-Enabled
AC-ELC
X-Proto
Provider
X-UA
X-Page
CLMOB
X-Dynatrace-Js-Agent
X-Smartcache-Keys
X-Cache-Detail
X-WP
X-WHOIS-Cached
X-GeoIP
NtCoent-Length
X-Smartcache-Timeout
From
X-Amz-Meta-Cb-Modifiedtime
X-WN-ClientGroup
SBGI-1
SBGI-7
SBGI-9
X-Garden-Version
SBGI-Device
Cmstype
MW-Webserver
SBGI-10
SBGI-5
Home
X-IIJ-Cache
W
WN
Cmsid
X-Unbounce-VisitorID
X-Served-Server
X-Cache-Provider
X-Backend-Status
X-OpenCart-Lightning
X-Debug-Token
AsisCache
X-Unbounce-Variant
SBGI-RenderTime
Id
X-Cache-Source
VANITY-HOST
X-Server-Instance
SBGI-RealPath
Response-Time
X-Unbounce-PageId
X-Env
X-Author
X-Distil-CS
X-App
X-Static
X-Dw-Trace-Id
X-Cache-Node
Strikingly-Cached
Yoncu-Errno
X-Balanceador
X-Esi
X-ServerIndex
ScoreTracker
Strikingly-Cache-Region
X-ARRServer
X-WR-MODIFICATION
X-AEM
Strikingly-Cached-Version
Web-App-Origin-Name
X-Session-ID
X-HP-Redirect
X-Blog
X-Proxy-Cache-Key
X-RDP
X-RiS-UFDI
X-Cache-On
X-Config-By
X-Wikidot-Static-Cache
X-Disney-Akamai-Rule
X-A
Og
X-Info
X-Middleton-PageSpeed
X-Grid-Server
Sophnep-Edge-FX
X-Cache-Keep
X-Application
X-Atraveo-Expires
X-Rebelmouse-Cache-Control
Url
X-ProcessESI
NCache
X-Rebelmouse-Surrogate-Control
X-Time-Microsecs
X-RemovedCookies
X-Distributor
X-Machine-Name
X-RealServer
Hname
X-MAT-GEO
Paypal-Debug-Id
Dispatcher
SG
X-Desc
X-Actindo-RS
X-Atraveo-Cache-Control
X-ASAP-Cache
X-Force
DNNOutputCache
X-PRAM
X-Clara-ASAP
X-DTC
X-App-Status
X-Atraveo-Zone
X-ETag
X-Atraveo-Varnish-Server-Id
X-Atraveo-Param-Rm
X-Wikidot-Backend
X-Atraveo-Set-Cookie
X-Atraveo-ETag
X-Atraveo-TTL
X-Atraveo-From-Varnish-Cache
X-Analytics
X-PM-ID
Backend-Timing
X-Culture
X-Ser
X-Req-Head-Response
X-Goog-Meta-Replace
X-Goog-Meta-Policy
X-Artvisual-Server
X-Autoru-LB
X-Rq
Resin-Trace
Xc
VServer
X-Runtime-Affili
X-Map-Context
X-Autoru-Host
X-Cdn-Forward
X-CacheResult
X-SDE-Name
X-App-Runtime
X-Hosting-Env
X-Correlation-ID
X-Jphone-Copyright
X-AutoRu-App-Id
X-Drupal-Cache-Contexts
TC-Cache-IC
X-ReqId
TC-Cache
X-IP
TC-Cache-U
TC-S-Cache-M
X-Webkit-CSP
Dis-Env
X-Frames-Options
X-SH-Cache-Status
SS
X-FRUIT
X-Cache-TTL-Current
X-Cache-TTL-Age
CommunityServer
TC-S-Cache
X-Rocket-Nginx-Serving-Static
Cluster-ID
Access-Control-Request-Headers
Web
Content-Server
X-Highwire-SessionId
X-Highwire-RequestId
X-Adnet
X-Src-Webcache
X-SV
X-Provisioner-Version
X-Machine
X-Airee-Node
X-Viator-Tapersistentcookie
X-Cached-Status
X-CRA-DC
X-Response
XDomainRequestAllowed
X-Site
X-Cluster-Node
X-Trace-Id
X-MSEdge-Ref
X-Avvio-Cms-Cacheload
X-E
Ibf5scheme
X-Batcache
Beyond-Iis
X-KoobooCMS-Version
N365rili
Server-ID
X-Varnish-Debug-TTL
X-Varnish-Debug-Age
X-Domain-Checked
X-Plat
X-SmartBan-URL
X-SmartBan-Host
X-PBY
X-Varnish-Info
X-Rack-CORS
X-PageType
X-We-Are-Hiring
X-ACCELERATE
Ttl
X-Stage
X-ENV
X-MCB-Server
Device
X-Rack-Cors
X-Oracle-DMS-ECID
X-Nginx
NZSpeedy
X-Varnish-Action
X-APP
X-Lb
X-Batcache-Reason
X-This-Proto
X-Optimization
X-EC2-Instance-Id
X-Obj.Ttl
X-SCM-Server-Number
ClientIP
Warning
X-Cms-Mode
F5-IpCliente
X-Rewrite
X-Dev
X-Server-Addr
X-4ormat-Cacheable
X-Webapp
Gzip
ViewMode
X-Zendesk-User-Id
Session-From
ServerIP
X-Old-Content-Length
X-Detected-Device
X-Secret
DrivedBy
X-Ghost-Cache-Status
X-Cache-Warmer
X-L-Path
X-Environment-Context
X-Cache-Via
X-Refresh
X-Zendesk-Origin-Server
MS-CV
Edgecast
X-HTML-Minification-Powered-By
X-AISO-Cache
X-Node-Name
X-AISO-Server
X-Powered-By-Home.Pl
X-AISO-Cacheable
Worker
X-Upstream-Backend
X-HA-Frontend
X-Forwarded-Host
X-Varnish-Cache-Local
OriginServer
Set-Cookie2
X-HA-Backend
X-Hosting
AccessControlAllowOrigin
X-SilverStripe-Cache
X-Ezoic-Cdn
X-MidCOM-Meta-Cache
X-CDN-COMPRESS
X-7d-Trace-Id
X-V
Lb
X-HashTwo
X-Data-Request
X-Pageid
X-Amcomm-Site
X-7d-Instance-Id
X-CDN-RULE
Tempo
X-Amz-Id-1
WP-AdvCache-MemCached
X-Sc-Cache
Il-Cl
Proxy-Cache
X-GSL-Server
X-Depends
X-Magento-Action
X-Hrouter
X-Litespeed-Cache-Control
StatusCode
Nginx-Cache
SBMCLOUD
X-Dynamic-Cache
PagesDisplayed
X-Header
X-DB-Content-Length
X-Hstore
Server-Ip
X-CACHE-TTL
BackendServer
X-HAProxy
X-Origin-Server
X-Wm-VIP
X-Cache-Time
Traffic-Origin
X-Flex-Evstart
X-Flex-Evend
Access-Control-Allow-Method
COMMERCE-SERVER-SOFTWARE
FastCGI-Cache-Status
X-Flex-Lastmod
X-Flex-Tags
X-Gannett-Site-Version
Debug-Status
X-Wm-1
X-Unique-Id
Progma
X-Flex-Lang
X-Catalyst
X-FPC
X-Flex-Tag
X-Flex-Community
X-DSMX-Render-MS
X-Rewritten-By
NS-VaryByCustom-Key
X-Pubstack
X-WebKit-CSP-Report-Only
X-DN-Cache-Control
X-ManagedFusion-Rewriter-Version
X-CCM
X-Test-Debug
X-Apm-Telemetry-Syncmark
Myheader
X-XHTML-Minification-Powered-By
X-Who
X-B2f-Not-Route
SHInfo
X-Test
X-AppVersion
X-Server-Generated
X-ACLR-Version
X-RequesterIP
RequestId
X-DSMX-Rewrite-MS
X-Enhanced-By
X-Gyrobase-Publication
Aurora-Node
X-DevSrv-CMS
VAR-Cache
X-AMAZEEIO
X-Cacheable-TTL
CDCHOST
X-Search-Id
X-Compressed-By
X-Nginx-Request-Processing-Time
X-Amzn-RequestId
Webserver
X-Amzn-Trace-Id
X-AppServer-Cache-Rule
X-D-Time
X-Country
UrlWatchModule-Time
SINA-TS
X-Farm-Server
PServer
X-Server-FQDN
X-Cache-Varnish
X-Bcwwwid
X-Built-With
X-HostName
X-ELB
X-Proxy-Id
X-Varnish-Instance
X-S-Misc
X-Uncacheable
X-ServiceProvider
X-Time-Zone
X-W3TC-Minify
X-VLoc
Cache-Status
X-Generation-Time
Accept-Language
X-Session-Id
X-XHR-Current-Location
X-NodeID
Ews
SiteSpeed
X-Sid
X-REDIRECTSERVER
X-PHP-Response-Code
X-Upgrade-Enabled
X-EC-Security-Audit
Expiries
SINA-LB
X-Dynamic
X-DeliveryServer
X-Brought-To-You-By
X-Box
X-Fstrz
X-DS1D
X-DEBUG
X-Cache-Extended
DbServerName
Content-Cache
X-LOCATION
X-M
FindLaw
X-Pagely-Cache
X-Node-ID
Rewriter
X-Streams-Distribution
X-Reflector-Cache
Swift-Performance
Cleartype
X-RAMCache
X-Nginx-Request-Time
X-Reflector
X-ChromeLogger-Data
X-Nocache
X-Pixelsilk-Server
Expect-Ct
X-Pixelsilk-Version
X-Cache-BE
X-LBPoolMember
X-Cache-HT
X-Resource
X-Tag-Playlist
SERVER-ID
X-Lima-Id
X-Ocache
X-Turpentine-Esi
X-EBAY-C-REQUEST-ID
X-Ezpublish-Nodeid
X-App-Version
X-Backend-TTL
X-FG-RequestId
MageStack-Tag
Ibm-Web2-Location
MageStack-Web-Node
Note
M
X-CH-Device
X-JSESSIONID
X-Highwire-Smart-Code
X-Layout
X-Cache-Bypass
X-9XB-Server
X-Highwire-Sitecode
X-Goog-Meta-Goog-Reserved-File-Mtime
MageStack-PageSpeed
X-Cms-Server
X-Meta-MSThemeCompatible
X-GoCache-CacheStatus
X-Cache-Me-Harder
X-Generated-Date
Server-Id
AMP-Access-Control-Allow-Source-Origin
Brightspot-Id
MageStack-Area
X-Served
X-CSRF-Token
X-Made-On
X-ESI
X-Aramark-SID
X-Rocket-Nginx-Reason
DB-Nickname
MageStack-Cache
MageStack-Config
MageStack-Debug
MageStack-Loadbalancer
X-NewCloud-V-Cache
MageStack-Cacheable
MageStack-Cache-Status
MageStack-Cache-Hits
X-Ezpublish-Installationid
MageStack-Cache-Lifetime
X-Webkit-Csp
MageStack-Magento-Version
X-Title
X-Provided-By
X-Faeria
X-CacheID
X-RiS-PX
X-HP-CAM-COLOR
X-MainProfileCategory
X-NewsFlow-Sitename
X-MainProfileURL
X-MainProfileName
X-MainProfileID
X-Cache-FS-Status
X-Router
X-Tradeindia-SMgmt
XDisk
X-UseReverse-Proxy
X-Webstats-RespID
X-Tradeindia-Request-GUID
TP-Cache
X-Agent
X-Theme
X-Router-Backend
TP-L2-Cache
X-IP-Address
X-Not-Cacheable
RSL-Trace-ID
SB-Cache-Life
SB-Cache-Remaining
SB-Site-Device
No-Cache
Provided-Host
X-WebNode
X-Pass-Through
AMFplus-Ver
X-PROCESSED-BY
SB-Site-IE-VERSION
X-Config-Version
X-PBS-Fwsrvname
X-PBS-Appsvrname
X-PBS-Appsvrip
X-Front-Cache
X-CACHE-KEY
X-Server-Instance-Name
PLCDN
Session-Id
WFE
X-VC-Debug
Apple-Itunes-App
RSB-LINK
X-Amz-Meta-Content-Md5
X-Fpc
X-Cache-Id
X-Built-By
X-AWS
X-Backend-Name
X-WA-Info
X-MCF-ID
X-CM-FE
X-Ss-Location
X-AG-MIPS
X-Varnish-Cached
X-FIRSTBase
X-Custom-Header
X-Forwarded-By
GP-Remote-Addr
INFO
X-Phpwcms-Release
X-Real-IP
X-Phpwcms-Page-Processed-In
X-Origin-Cache
X-NID
X-OCTOPOD
X-DDM-SERVER
X-Svr
X-Cjtype
GP-Version
X-WPL-DATA
X-DDM-SERVER-UPDATED
Kp-EeAlive
X-Ss-Conf
X-HASH
X-Varnish-Cached-TTL
X-Container
Actual-Object-TTL
AGI-Request-ID
WSCLoggingUUID
ENV
X-Header-Treatment
X-Beatles
X-Backend-Host
X-Debug-Message
X-Deity
X-Meta-MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
X-UnsetCookies
X-Cname-TryFiles
MSThemeCompatible
X-SuperCache
X-UPSTREAM-Address
Server-Tuning
D
Kanooh-Host
X-Route
!~Request-OOB-Work
Cache-Tags
MSSmartTagsPreventParsing
MwpReleaseVersion
X-Varnish-URL
X-Beresp-Ttl
X-COUNTRY-CODE
X-C2M-Server
X-C2M-Runtime
X-Webkit-CSP-Report-Only
X-Ssl-Cipher
X-Netrix-ID
X-Stiffia-Cache
E-TAG
Lookup-Cache-Hit
X-Client-Ip
X-SRV
X-Geo-IP
X-SVR
X-Serv
RlogId
X-Obvious-Info
X-Obvious-Tid
X-Upstream-Status
X-ZSITES-DNS
X-Cache-Ttl
Service-Worker-Allowed
Fastly-Restarts
Page-Template
X-Instance-Id
X-Varnish-VCL
X-PG
CD4
X-Tt-Dbg
Countrycode
Head
X-Nginx-Page-Cache
X-CO-Host
Serverid
X-Skip-Cache
X-Obj-Ttl
Generate-Time
X-Protected-By
X-Varnish-Debug-Hits
X-Support
X-Magento-Lifetime
X-NMT-Proxy
IsMobile
X-BServer
X-BPool-Fx-Cache
X-ASAP-Age
User-Cache-Control
Tesla.Performance
X-HEAD
X-Cache-ID
V-Age
Contao-Page-Layout
Be
Aoestatic
X-Cluster
EQ-Cache
CpuTime
WP-Cache
Upgrade-Insecure-Requests
Microcache
HostName
X-BPool-Bx-Cache
X-DynamicCache
X-Serendipity-InterfaceLangSource
X-Transaction-Name
X-Serendipity-InterfaceLang
X-Pool-Info
X-Prerendered
FrontEnd
ReqUrl
Accept-CH
Resource
Language
TheAnswer
X-Ants-Host
X-Ants-Machine-Id
X-BPool
X-BC
X-UT-Cache
X-Serverid
X-BPool-Back
X-Vary-Options
X-VNode
X-FreeTag-Count
X-Cachable
X-Build-Id
Fw-Cache-Status
Session
X-Count
X-Cache-Served
X-Ar-Debug
X-Debug-Out
X-Debug-Serve
X-Hash
Www.Aujourdhui.Com
WebServer
X-Server-App
X-UUID
OutputRewritten
ServerNode
X-Max-Age
X-Turpentine-Cache
Public-Extension
Content-Legth
ResourceTag
X-Beatles-Hits
X-Cache-Set
X-Varnish-Store
X-Varnish-Set-Cookie
X-Varnish-Currency
X-Varnish-Esi-Access
X-Varnish-Esi-Method
X-Varnish-Max-Age
X-Request-Received
X-Request-Processing-Time
X-Sn-Servicetimems
Hosted-By
X-Vol-Correlation
X-Vol-Mrp
X-CPU-Time
Httpd-Identifier
Debug-Expires
X-Restarts
X-Instance-Name
Container
Debug-Cache-Control
EXT-CACHEEXPIRE
Memento-Datetime
X-Archive-Orig-Date
X-Archive-Orig-ETag
X-Archive-Orig-Server
X-Content-Parsed-By
X-Archive-Orig-Content-Length
X-Archive-Orig-Connection
Server-Node
X-B3-Traceid
X-B3-Spanid
X-Archive-Guessed-Charset
X-Does-He-Have-Time
X-Enabled1
X-W-Cache
X-Cache-Action
X-W-Cache-Hits
Ez
VC-NoCache
X-BeResp-Ttl
Yola-ID
X-FCMS-Cache
X-HS-Status
X-Op-Benvironment
X-ZORequestID
CD1
Url-Hash
X-UPServer
B-Rlogid
Rlogid
Content-Generator
X-ServerAddr
X-Script
X-Jcms-Ajax-Id
X-Auto-Login
X-Diazo-Applied
X-EC-Custom-Error
X-Czt
X-Accel-Cache-Control
AR-PoweredBy
AR-CACHE
AR-SID
GranicusServer
ProxiaInstanceId
AR-ATIME
X-Your-GrandPa-Would-Wait
X-Enabled2
X-Enabled3
X-TTL-Age
X-Would-Your-GrandPa-Wait
X-FastCGI-Cache
X-Amz-Meta-Version-Id
X-SCProxy
0
Copyright
Prototype-RootPath
X-Processed
X-Pj-Cache-Status
X-Cache-LB
X-Csrf-Token
Vserver
X-Imforza-Hosted
Tk