Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
X-Cache
Strict-Transport-Security
CF-RAY
X-AspNet-Version
P3P
X-Pingback
Age
Content-Language
X-UA-Compatible
Via
Expect-CT
Access-Control-Allow-Origin
Upgrade
X-Adblock-Key
X-Varnish
X-Cacheable
Content-Security-Policy
P3p
X-Check
X-Template
X-Language
X-Generator
X-Buckets
X-Drupal-Cache
X-Request-Id
X-AspNetMvc-Version
X-Type
X-Cache-Group
X-Pass-Why
X-Hacker
X-Ac
Alt-Svc
X-Powered-By-Plesk
X-Cache-Hits
Content-Location
X-Xss-Protection
X-FRAME-OPTIONS
X-Permitted-Cross-Domain-Policies
X-Runtime
X-Download-Options
Host-Header
MS-Author-Via
X-ShopId
X-Sorting-Hat-ShopId
X-Sorting-Hat-Section
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PodId
X-Dc
X-ShardId
X-Sorting-Hat-PodId-Cached
X-Alternate-Cache-Key
X-IPLB-Instance
X-Powered-CMS
Cartoon
X-UA-Device
X-Served-By
Status
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Amz-Cf-Id
X-Via
X-Iinfo
X-Cache-Status
X-Backend
X-Timer
X-ServedBy
X-Contextid
CF-Cache-Status
X-CST
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
Powered-By
X-DIS-Request-ID
X-Mod-Pagespeed
X-PC-Key
X-PC-Hit
Content-Encoding
X-PC-AppVer
X-PC-Host
X-PC-Date
Keep-Alive
X-Logged-In
X-CDN
X-Rid
X-Request-ID
X-Cache-Hit
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-Host
X-Port
X-Server
X-Tumblr-Pixel-1
Referrer-Policy
WPE-Backend
X-Server-Powered-By
X-Cache-Enabled
X-Tumblr-Pixel-2
X-Robots-Tag
X-Wix-Server-Artifact-Id
X-Endurance-Cache-Level
X-Seen-By
X-Wix-Request-Id
X-Wix-Renderer-Server
X-Nginx-Cache-Status
X-Accel-Version
X-Page-Speed
X-Turbo-Charged-By
X-Wix-PunisherID
WP-Super-Cache
X-Pad
X-Drupal-Dynamic-Cache
X-Forwarded-For
X-Content-Powered-By
Content-Security-Policy-Report-Only
X-Tumblr-Pixel-3
X-Forwarded-Proto
X-Varnish-Cache
X-Content-Digest
X-Rack-Cache
X-AH-Environment
X-Pantheon-Styx-Hostname
Surrogate-Key-Raw
X-Styx-Req-Id
X-Proxy-Cache
X-GitHub-Request-Id
SPRequestGuid
X-Cnection
X-SharePointHealthScore
X-Request-Country
X-Original-Date
MicrosoftSharePointTeamServices
X-MS-InvokeApp
X-LiteSpeed-Cache
X-XRDS-Location
Edge-Control
X-Cache-Lookup
X-Died
Cf-Railgun
Timing-Allow-Origin
X-Webserver
MicrosoftOfficeWebServer
X-Safe-Firewall
X-Amz-Request-Id
X-Amz-Id-2
X-FullPageCaching
Request-Id
X-PhApp
Charset
X-FW-Hash
X-FW-Static
X-FW-Type
X-FW-Serve
X-Content-Security-Policy
Edge-Cache-Tag
X-HS-Cache-Config
X-INKT-URI
X-INKT-SITE
SPIisLatency
SPRequestDuration
X-Node
X-HS-Content-Id
X-WPE-Loopback-Upstream-Addr
X-Tumblr-Pixel-4
X-Hits
X-SERVER
X-CF-Powered-By
Composed-By
Access-Control-Max-Age
Grace
Content-MD5
Liferay-Portal
X-Swift-CacheTime
X-Swift-SaveTime
Served-By
X-Newrelic-App-Data
EagleId
X-BC-Stapler
X-Hyper-Cache
Request-Context
Access-Control-Expose-Headers
X-CDN-Pop
X-CDN-Pop-IP
X-Spip-Cache
X-VWS-Id
X-AWS-Id
X-LJ-Flow-ID
Rating
X-Firenze-Processing-Times
X-Server-Name
Fastly-Debug-Digest
X-PHP-Backend
X-Device
X-Backend-Server
X-Dw-Request-Base-Id
X-Microcache
X-Fastly-Request-ID
X-Tumblr-Content-Rating
X-VCache
X-ServerName
Content-Style-Type
X-RateLimit-Remaining
Content-Script-Type
X-RateLimit-Limit
X-Cloud-Trace-Context
X-RateLimit-Reset
X-User-Agent
X-Loop
X-TNCMS
Real-Hostname
X-Jimdo-Instance
X-Jimdo-Wid
X-Clacks-Overhead
X-FB-Debug
Public-Key-Pins
Refresh
X-Cache-Config
Front-End-Https
X-XN-Trace-Token
X-XN-XNHTML
X-DDC-Arch-Trace
Surrogate-Control
X-Acc-Exp
X-Age
Fpc-Cache-Id
Xkey
X-Px
PageSpeed
X-Hostname
X-StackifyID
X-N-OperationId
X-Tumblr-Pixel-5
X-Generated-By
X-Cached
X-DNS-Prefetch-Control
Response
Display
X-Middleton-Display
X-Sol
X-Middleton-Response
X-Topify-Platform
X-SS-Conf
X-SS-Location
X-LiteSpeed-Cache-Control
X-WebKit-CSP
X-MiniProfiler-Ids
X-Trace
X-Request-Time
X-Zen-Fury
X-URL
X-Cached-By
X-DynaTrace-JS-Agent
TCN
X-Content-Options
Surrogate-Key
X-Whom
X-CMS-Version
X-DynaTrace
X-ApacheServer
Rt-Fastcgi-Cache
X-PERF
X-Amz-Version-Id
Edge-Control-Message
X-Outils-CS
X-Handled-By
X-Kinsta-Cache
X-Pantheon-Site
X-Pantheon-Phpreq
X-Pantheon-Environment
X-Url
Product
X-HS-Combine-CSS
X-AspNetWebPages-Version
Access-Control-Request-Method
X-SRCache-Fetch-Status
Imagetoolbar
X-SRCache-Store-Status
Alternate-Protocol
Host
DynaTrace
X-From
X-LBLID
X-Magento-Tags
X-Microcachable
X-Correlation-Id
X-OneAgent-JS-Injection
X-Varnish-TTL
P-WS
P-LB
X-Tumblr-Pixel-6
ServedBy
X-Umbraco-Version
X-Engine
Fhost
X-HOST
X-Content-Security-Policy-Report-Only
X-Cache-Rule
X-Ruxit-JS-Agent
X-Recruiting
X-Varnish-Cache-Hits
X-NWS-LOG-UUID
Dmn
X-Goog-Hash
Powered
X-Fastcgi-Cache
Generator
X-FORWARDED-FOR
X-Msg-2-Log
X-Location-Id
X-Actual-URL
X-Micro-Cache
X-CacheServer
X-B-Cache
X-Edge-Location
X-Passed-To
X-Passed-To-DLL
X-Original-Request
X-Returned-From
X-Returned-From-DLL
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Passed-To-BeforeDispatch
X-Hosted-By
X-Track
X-Passed-To-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Varnish-Beresp-Ttl
X-Returned-From-PostProcessResponse
X-RESOURCE
WZWS-RAY
X-Powered-By-360WZB
X-Tec-Api-Root
X-Tec-Api-Version
X-Stale
No
X-VTEX-Janus-Router-Backend-App
X-VTEX-Cache-Status-Janus-ApiCache
X-Powered-By-VTEX-Janus-ApiCache
X-Matrix-Server
X-Matrix-Proxy
X-Vtex-Processado-Em
X-Vtex-Processed-At
X-Tec-Api-Origin
X-Vtex-Remote-Cache
X-Application-Context
Arr-Disable-Session-Affinity
X-URLSCHEME
Fastcgi-Cache
X-Cache-Age
Public-Key-Pins-Report-Only
X-Upstream
Akamai-IP
X-Varnish-Host
Origin
X-Accel-Expires
X-Powered-By-VTEX-Janus-Edge
X-Developer
X-UD-Method
X-Instart-Request-ID
X-Source
X-I-Sp
X-BS
X-Duration
X-Debug-Info
X-Cache-TTL
X-NetCat-Version
X-Platform-Processor
X-Platform-Router
X-LB
X-Platform-Cluster
X-S
X-App-Hosting
X-Version
X-Art-Request-Id
X-Device-Type
X-Platform
Powered-By-ChinaCache
X-VARNISH-Cache
Content-Hash
X-Internal-ReqID
X-Storage
X-Response-Time
X-Rocket-Nginx-Bypass
X-TransIP-Balancer
X-Defender
X-Shop-Id
HTTPS
X-Cache-Debug
X-Translation
X-Microcache-Status
X-Signature
X-Daa-Tunnel
X-Varnish-Count
X-Varnish-HitMiss
X-EdgeConnect-Origin-MEX-Latency
X-HS-Content-Campaign-Id
MIME-Version
Last-Published
X-LW-Cache
X-Gamma-Serve
X-Expires-Orig
X-Powered-By-VelaWeb
X-Cache-Operation
X-Server-ID
Node
X-Front
X-Supported-By
X-Cache-Info
Cache-Key
Pool
X-Varnish-Cacheable
X-Page-Cache
X-ATG-Version
Version
X-EdgeConnect-MidMile-RTT
Ohc-File-Size
X-TransIP-Backend
X-Revision
X-I
X-Origin
IBM-Web2-Location
Content-Disposition
X-NoCache
X-Cache-Key
X-Content-Encoded-By
X-Firenze-Processing-Time
X-TTL
USPLoggingUUID
X-Director
X-Dispatcher
X-Platform-Server
X-Cache-Tags
X-SV-CreatedAt
X-Hypernode
X-SV-Pid
X-Client-IP
X-SV-FromDBCache
X-SV-Nginx-Duration
X-SV-Edge
X-SV-Duration
X-Varnish-Age
X-Vcap-Request-Id
X-VTEX-Cache-Status-Janus-Edge
X-F-Cache
X-Magento-Cache-Debug
X-SV-Expires
X-SV-Cacheable
X-SV-CacheTags
Cache-Provider
X-AOL-HN
X-Server-Upstream
ServerName
X-Platform-Cache
X-Lambda-Id
X-SSL-Cipher
X-UPSTREAM
X-Dispatch
X-Debug
X-Flow-Powered
X-SSL-Protocol
X-Cache-Control-Orig
X-Route-Server
X-Abgroup
Allow
Srv
IM-Version
X-Cache-Only-Varnish
SSPAppContext
X-Varnish-RemainingTTL
X-Varnish-RemainingLife
X-Varnish-ObjectSource
X-Varnish-Seen-By
X-Varnish-GracePeriod
Lsrequestid
Cneonction
X-ARC
X-CJ-Soft
X-GeoIP-Country-Code
X-Varnish-Backend
ServerID
SN
X-Grace
X-Cache-Lifetime
X-Cache-Expires
Accept-Encoding
Content-Encoding-Handler
X-PwB-Node
Proxy-Connection
X-Geo-Country
X-LB-Node
X-Sucuri-ID
Fw-Via
Section-Io-Id
X-Akamai-Device-Characteristics
X-Last-Modified
X-Cookie-Domain
X-Sucuri-Cache
X-RequestId
X-Loopia-Node
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-ORACLE-DMS-ECID
X-Goog-Generation
X-Edge-IP
X-Dns-Prefetch-Control
X-Id
Pv
X-SDS
Location
FAI-W-FLOW
X-Content-Age
X-Amz-Meta-S3cmd-Attrs
Backend
X-Via-JSL
X-Sapient
Wsr-Cache
X-Browser
PICS-Label
X-Abuse
X-Proxy
X-Cache-Server
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Country-Code
X-Generated
X-ServerID
Tracecode
RTSS
X-Server-Id
X-Url-Base
Page-Completion-Status
X-Speed-Cache
X-Speed-Cache-Key
X-Nbs
X-IsCacheURL
NnCoection
X-Drupal-Cache-Tags
Req-Id
X-Time
X-Xrds-Location
X-GeoIP-Country-Name
X-N
X-SE-Debug
Edge-Content-Tag
X-Hiawatha-Cache
X-Cf-Powered-By
X-Middleware-Start
X-Varnish-Ttl
X-CDN-Forward
X-Yadis-Location
Author
X-NB-Cached-Page
X-Akamai-Device-Model
Accept-Charset
X-CDN-Node
X-Frontend
X-Orig-Vary
X-CDN-Cache-Status
Xc-Version
X-Varnish-Url
X-Processing-Time
X-SRCache-Key
Qs-Cache
X-Correlation-ID
If-Modified-Since
X-Cache-Engine
X-BackendServer
S
X-Shield-Request-Id
X-Purge-URL
X-BKSrc
X-Akamai-Transformed
X-Cache-CFC
X-Discourse-Route
X-FW
X-Rnd
X-Processed-By
X-Worker
Nodo
Use-Proxy
X-Nginx-Cache
Server-Info
Eomportal-Instance
X-Cache-Type
Cache
X-Always-Cache
Cm-Server
X-Varnish-ID
HCVer
AMF-Ver
HAVer
SRV
X-Cache-Control
X-PF-Uncompressing
Content-Transfer-Encoding
WWW-Authenticate
A-Powered-By
X-Magnolia-Registration
X-Amz-Storage-Class
Local-Info
X-Vhost
NetMindSessionID
X-Cache-Level
X-Purge-Host
S-Cnection
X-DealerOn
X-Magento-Cache-Control
X-Framework
X-Empowered-By
X-ClientSide-Caching
X-Route-To
SVR
X-SO
X-Traffic
X-Config-Blacklist-Version
Cached
X-Webkit-CSP
X-DataDome
X-Srv
X-Environment
X-Mobilized-By
MJ12bot
X-ACMCache
X-Varnish-Hits
SEOMOZ
X-Varnish-IP
X-Yottaa-Optimizations
Magicmarker
X-Pressidium-NinukisWP-Ver
X-Yottaa-Metrics
X-HP-Trace-Project
X-HP-Trace-ID
Cache-Tag
X-Healthy
X-ServerIndex
X-JG-Page-Cache
X-Litespeed-Cache-Control
X-Cache-Handler
MC
X-App-Server
NODE
X-Real-Server
X-ID
AddOutputFilterByType
Access-Control-Allow-Header
X-Cache-PageType
X-FireWall-Port
X-Cache-Fix
Frame-Options
X-VARITI-CCR
X-Env
X-LB-Server
Thanks
X-Amz-Meta-Cb-Modifiedtime
Retry-After
X-Powered-By-Server
X-Ttl
X-PRAM
X-Force
X-Cache-Doesi
X-Runtime-Memory
IISExport
X-Atraveo-Zone
X-Atraveo-Varnish-Server-Id
X-Atraveo-Expires
X-Atraveo-ETag
X-Atraveo-From-Varnish-Cache
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-Pagename
X-Akamai-Edgescape
X-Avg-Cookie-Expires
X-Directory-Script
X-Varnish-Server
X-Cache-Source
X-Cache-Provider
X-AVG-Country-Code
X-Redman-Backend
X-CDN-RULE
X-CDN-COMPRESS
X-Hit-Cache
X-Cache-Device-Type
X-Redman-Final-Url
X-Dw-Trace-Id
X-Atraveo-Cache-Control
X-CB-Server
Nitro-Cache
X-Varnish-Retries
X-High-Performance
X-CF-Passed-Proto
X-HW
Front
CacheControlHeader
X-GeoIP
X-VC-TTL
CLMOB
X-SmugMug-Hiring
Warning
Smug-CDN
X-SmugMug-Values
X-WR-Flags
W
X-TTFB-L
X-TTFB
X-Provisioner-Version
X-Symfony-Cache
Cmsid
Cmstype
X-Drectory-Script
NtCoent-Length
Identity
Server-Name
Disablevcache
X-Domain-Checked
X-Drupal-Cache-Contexts
BALANCEDTO
X-AF-Userserver
X-Key
X-NODE
X-IIJ-Cache
X-App-Status
X-Nginx-Host
X-Server-IP
X-Balanceador
X-WN-ClientGroup
X-WHOIS-Cached
WN
X-Adobe-Loc
X-HOSTNAME
X-Ezoic-Cdn
Machine
X-ORACLE-DMS-RID
EagleEye-TraceId
X-LP
X-HTML-Minification-Powered-By
X-EPiphany-Vid
X-Client-Image-Vid
X-Cocoon-Version
X-Cluster-Node
X-Adobe-Content
X-Debug-Token
X-Client-Vid
X-Unbounce-PageId
Beyond-Iis
X-Unbounce-VisitorID
X-Unbounce-Variant
X-Server-Instance
X-Sys-Req-ID
X-Mobile-URL
X-Source-ID
X-Runtime-Rack
X-Clara-ASAP
Web-App-Origin-Name
Content_type
X-ASAP-Cache
X-Cache-Node
X-Varnish-Hostname
X-Session-Reinit
X-Remote-Addr
Pics-Label
X-UA
X-WR-MODIFICATION
X-VC-Enabled
Ctx
COMMERCE-SERVER-SOFTWARE
Backend-Timing
Proxy-Agent
HitType
X-Connection-Hash
X-OpenCart-Lightning
X-Session-ID
From
X-Location
X-Analytics
X-Transaction
X-Stage
X-Twitter-Response-Tags
X-ARRServer
Keywords
X-ACCELERATE
DNNOutputCache
X-EC2-Instance-Id
X-DB-Content-Length
X-This-Proto
SBGI-1
Dispatcher
X-Batcache
X-Batcache-Reason
X-Content-Type-Option
Max-Age
Ufe-Result
X-Cache-Dispatcherpragma
X-Machine
X-Adnet
X-App
X-Resty-Request-Id
X-RiS-UFDI
X-Culture
X-WP
X-Varnish-Cache-Local
X-Cache-Dispatchercachecontrol
Home
X-B2f-Not-Route
X-Disney-Akamai-Rule
X-A
SBGI-RenderTime
X-CAPServer
X-HP-Redirect
X-Fedora-School-Id
Yoncu-Errno
X-Origin-404Back
X-Origin-404URL
SBGI-RealPath
MW-Webserver
SBGI-Device
X-Rack-Cors
X-TB-M
SBGI-10
SBGI-9
SBGI-7
SBGI-5
SHInfo
Access-Control-Allow-Method
X-Autoru-LB
X-Req-Head-Response
NLCacheNote
X-AutoRu-App-Id
Bios
X-Webcelerate
X-Autoru-Host
Nginx-Cache
X-NginX-Cache
X-Goog-Meta-Replace
X-Goog-Meta-Policy
Fastly-Backend-Name
WP-AdvCache-MemCached
Description
X-Esi
Strikingly-Cache-Region
X-HydroSheep
X-Map-Context
X-Page
From-Origin
Strikingly-Cached
Strikingly-Cached-Version
ServerTokens
X-E
X-SERVER-NAME
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-FastCGI-Cache
X-Rocket-Nginx-Serving-Static
Set-Cookie2
OriginServer
X-Plat
X-MSEdge-Ref
X-DTC
ServerSignature
X-Depends
X-HA-Backend
X-HA-Frontend
Ttl
X-NginX-Server
ScoreTracker
X-CSRF-Token
X-Cache-TTL-Remaining
XDomainRequestAllowed
X-Smartcache-Keys
Cteonnt-Length
Id
X-Smartcache-Timeout
X-DSMX-Rewrite-MS
X-Frame-Option
Dis-Env
X-ACLR-Version
X-Backend-Status
RN-Server
X-DSMX-Render-MS
X-Blog
X-SDE-Name
X-Hosting-Env
X-Middleton-PageSpeed
X-Garden-Version
X-Jphone-Copyright
X-Distil-CS
X-Apm-Telemetry-Syncmark
X-Aramark-SID
X-Generated-Time
Accept-Language
X-Info
Myheader
Ram
X-Rq
X-Served-Server
X-Gyrobase-Publication
X-RealServer
X-Trace-Id
X-LW-Web-Server
X-AEM
X-Ser
Noq
X-Unique-ID
Swift-Performance
Ews
X-Hstore
X-Hrouter
X-Grid-Server
X-KoobooCMS-Version
AsisCache
X-HITS
X-NewRelic-App-Data
X-Machine-Name
X-Amz-Meta-Content-Md5
X-EMAC-Request-ID
Traffic-Origin
X-Replay-Request-ID
X-PM-ID
X-DN-Cache-Control
X-Router
X-Frames-Options
Cache-Tags
X-Flex-Community
X-Flex-Evend
AC-ELC
Proxy-Cache
X-Obj.Ttl
X-Cache-Time
X-Rack-CORS
X-Flex-Evstart
X-Flex-Lang
Hosted-By
Edgecast
X-We-Are-Hiring
X-Nginx
Il-Cl
X-Flex-Lastmod
X-Flex-Tag
X-Flex-Tags
WebServer
X-Ss-Location
Gzip
X-Cache-Keep
F5-IpCliente
Access-Control-Request-Headers
Paypal-Debug-Id
ClientIP
X-CacheResult
X-Cache-Detail
X-VarnState-NoCache
X-Highwire-RequestId
X-VarnMisc-UrlChanged
X-VarnMisc-Url
X-Airee-Node
X-Sc-Cache
X-Rebelmouse-Surrogate-Control
X-Cached-Status
Xc
Sophnep-Edge-FX
Cluster-ID
Hname
SG
Content-Server
X-Actindo-Request-Id
X-Actindo-Rs
X-RDP
X-Response
X-CACHE-TTL
X-CRA-DC
X-Cache-On
X-Actindo-Thread-Id
X-Rewrite
X-Highwire-SessionId
TC-S-Cache-M
X-Amz-Id-1
TC-S-Cache
TC-Cache-U
TC-Cache
TC-Cache-IC
PServer
VANITY-HOST
X-Data-Request
X-Rebelmouse-Cache-Control
X-MidCOM-Meta-Cache
X-HashTwo
X-MAT-GEO
X-Resolver-IP
X-WPL-DATA
AccessControlAllowOrigin
X-SmartBan-Host
X-Render-Time
X-Ghost-Cache-Status
X-GSL-Server
X-Proto
X-Real-IP
X-SmartBan-URL
X-Ss-Conf
SB-Cache-Remaining
SB-Cache-Life
SB-Site-Device
SB-Site-IE-VERSION
X-Actindo-Error-1
ViewMode
X-Search-Id
Worker
X-SCM-Server-Number
X-Header
X-Distributor
X-Oracle-DMS-ECID
X-Unique-Id
VServer
X-OPNET-Transaction-Trace
X-Artvisual-Server
X-HostName
X-ENV
X-Turpentine-Esi
X-Cms-Mode
Og
X-Detected-Device
SBMCLOUD
X-Goog-Meta-Goog-Reserved-File-Mtime
SiteSpeed
Web
X-Dev
RSB-LINK
X-ReqId
Ibf5scheme
X-HAProxy
X-Session-Id
Url
X-4ormat-Cacheable
DrivedBy
X-Captured
X-Origin-Cache
N365rili
AMP-Access-Control-Allow-Source-Origin
X-WA-Info
Server-ID
X-Upstream-Status
X-Webkit-CSP-Report-Only
X-Avvio-Cms-Cacheload
FastCGI-Cache-Status
CommunityServer
X-Svr
X-XHR-Current-Location
NS-VaryByCustom-Key
X-Cache-Via
Actual-Object-TTL
Session-From
ServerIP
X-Viator-Tapersistentcookie
Response-Time
Hamster
X-AMAZEEIO
X-OCTOPOD
X-Webstats-RespID
X-Hosting
X-Layout
X-Title
X-CacheID
X-MCB-Server
X-Origin-Server
X-Upstream-Backend
X-RemovedCookies
X-Your-GrandPa-Would-Wait
X-Secret
X-Would-Your-GrandPa-Wait
X-Pagely-Cache
X-Does-He-Have-Time
Service-Worker-Allowed
X-FRUIT
X-SilverStripe-Cache
X-ProcessESI
Aurora-Node
PagesDisplayed
X-Server-Generated
Server-Tuning
X-Header-Treatment
Serverid
X-TTL-Age
X-Config-By
X-M
Buuteeq-Source
X-CCM
X-Proxy-Cache-Key
X-GoCache-CacheStatus
X-Beatles
X-LBPoolMember
INFO
X-Cache-Id
X-Forwarded-Host
X-Beatles-Hits
X-Rewritten-By
X-Lima-Id
X-ManagedFusion-Rewriter-Version
User-Agent
Tempo
X-Cache-Set
X-Desc
X-W3TC-Minify
X-Lb
X-Site
X-SH-Cache-Status
Device
X-Reflector-Cache
X-Pj-Cache-Status
X-PBY
X-REDIRECTSERVER
X-Reflector
TP-L2-Cache
Server-Ip
X-Varnish-Action
X-IP
RATING
X-Varnish-Ip
X-App-Runtime
NZSpeedy
X-Cache-Warmer
X-Varnish-URL
X-Serv
Provider
X-Runtime-Affili
BackendServer
X-Optimization
TP-Cache
X-Container
SERVER-ID
X-RAMCache
X-CACHE-KEY
X-Cdn-Forward
X-ChromeLogger-Data
X-Cache-BE
X-Cache-HT
X-Bcwwwid
X-Resource
X-Nginx-Request-Processing-Time
X-Cache-Varnish
X-Built-With
UrlWatchModule-Time
DbServerName
FindLaw
Rewriter
Content-Cache
X-Upgrade-Enabled
X-Sites
X-ImpID
X-Sid
Arrnode
Webserver
CD4
X-Uncacheable
Cache-Status
X-Proxy-Id
X-Highwire-Smart-Code
X-AppServer-Cache-Rule
X-Bip
X-Highwire-Sitecode
D
Httpd-Identifier
X-Ezpublish-Nodeid
X-Ezpublish-Installationid
X-Built-By
X-NodeID
X-Pass-Through
X-Cjtype
Accept-CH
X-UUID
MS-CV
X-SV
X-Forwarded-By
X-DS1D
X-ASAP-Age
X-HS-Status
X-Restarts
X-Status
X-Src-Webcache
X-Time-Microsecs
Ozcache
X-Route
X-UPSTREAM-Address
X-FIRSTBase
X-HEAD
X-Cache-ID
X-Test
Be
X-Dynamic-Cache
X-Server-Instance-Name
X-Checkout
X-Backend-Name
V-Age
X-NID
X-Pixelsilk-Server
X-Backend-Host
X-Pixelsilk-Version
X-AG-MIPS
MwpReleaseVersion
X-Varnish-Cached
X-Phpwcms-Release
X-UPServer
X-Varnish-Cached-TTL
X-Varnish-Instance
Debug-Status
X-VLoc
X-Time-Zone
X-Streams-Distribution
X-MCF-ID
X-ELB
X-CPU-Time
X-Node-ID
X-Script
X-ServerAddr
X-Server-FQDN
Hostname
MSSmartTagsPreventParsing
X-Old-Content-Length
X-Meta-MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
X-Server-Addr
X-Varnish-Debug-Age
AGI-Request-ID
X-Varnish-Debug-TTL
X-Meta-Imagetoolbar
X-Instance-Name
X-Cache-TTL-Age
StatusCode
MSThemeCompatible
X-Cache-TTL-Current
X-Fstrz
X-Gannett-Site-Version
X-Phpwcms-Page-Processed-In
X-Country
X-Amcomm-Site
MageStack-Web-Node
MageStack-Tag
MageStack-PageSpeed
Str-Bsite
Str-Ip
X-App-Version
X-Accel-Cache-Control
MageStack-Magento-Version
MageStack-Loadbalancer
MageStack-Cache-Lifetime
MageStack-Cache-Hits
MageStack-Cache-Status
MageStack-Cacheable
MageStack-Debug
MageStack-Config
X-Compressed-By
X-JSESSIONID
X-Fastly-Backend-Reqs
X-Environment-Context
X-CH-Device
X-FreeTag-Count
X-IP-Address
X-Magento-Action
X-L-Path
X-Cacheable-TTL
RequestId
Y-Trace
X-V
Fw-Cache-Status
Note
Referer
Provided-Host
MageStack-Cache
MageStack-Area
X-Max-Age
SS
X-XHTML-Minification-Powered-By
X-ETag
AR-ATIME
AR-PoweredBy
AR-CACHE
X-Test-Debug
X-Pubstack
X-Srcache-Fetch-Status
X-Srcache-Store-Status
CDCHOST
Fastly-Restarts
X-AppVersion
X-APP
AR-SID
Quri
X-Served
X-SCProxy
X-Tag-Playlist
X-VNode
Lb
Brightspot-Id
X-Processed
X-Powered-By-Home.Pl
X-Author
Uuri
X-Cname-TryFiles
X-Debug-Message
X-HA
X-Deity
X-Pageid
X-Cache-LB
X-MainProfileCategory
X-MainProfileID
X-MainProfileURL
X-Dynamic
X-LOCATION
X-HP-CAM-COLOR
X-Zendesk-User-Id
XDisk
Session-Id
X-DevSrv-CMS
X-DeliveryServer
X-Nginx-Request-Time
Resin-Trace
X-Box
X-Agent
X-Application
X-Brought-To-You-By
X-WebNode
X-Not-Cacheable
X-Cluster
X-Cache-Extended
X-VC-Debug
X-Zendesk-Origin-Server
X-MainProfileName
X-UseReverse-Proxy
X-Webapp
X-Serendipity-InterfaceLangSource
X-Router-Backend
X-Serendipity-InterfaceLang
ProxiaInstanceId
X-DEBUG
X-COUNTRY-CODE
X-Beresp-Ttl
X-Obvious-Info
X-AISO-Cache
X-Obvious-Tid
NCache
X-Enabled1
X-7d-Instance-Id
X-7d-Trace-Id
X-AISO-Cacheable
X-Config-Version
Progma
X-Farm-Server
X-ServiceProvider
Apple-Itunes-App
No-Cache
AliCDN-Forbidden-Reason
X-Custom-Header
X-Client-Ip
X-Tt-Dbg
X-Via-NSCOPI
X-AISO-Server
X-Enabled2
X-Server-Ident
X-Memcached
X-Transaction-Name
Yola-ID
CacheControlMode
X-IsCached
X-Czt
X-Mobile-Rewrite
X-UT-Cache
X-WebKit-CSP-Report-Only
Copyright
LB
X-From-Varnish-Deploy
X-Enabled3
Tk
VAR-Cache
VC-NoCache
Vserver
Ez
X-Cache-Action
X-From-Varnish
Section-Io-Cache
Tst
X-BeResp-Ttl
Cookie
X-Hit
X-PoweredBy
X-Custom-Name
X-Protected-By
X-Cache-Served
X-Request-Processing-Time
X-BC
X-AWS
X-Ants-Host
X-WHO
X-Turpentine-Cache
X-Ants-Machine-Id
X-Purge-Level
X-Request-Received
X-Server-App
X-Amz-Meta-S3b-Last-Modified
OutputRewritten
X-Allow-Redis
Realaction
ServerNode
BM-Cache-Status
BM-Cache-Node
X-TempoPesquisa
Actioncode
X-Ar-Debug
BM-Cache-Key
X-Theme
X-Varnish-Currency
X-LB-Frontend
X-LB-Backend
X-Varnish-Set-Cookie
X-Varnish-Esi-Method
X-DynamicCache
X-Varnish-Store
Expiries
X-Node-Name
Www.Aujourdhui.Com
X-Wm-1
ERev-Ver
X-Wm-VIP
MachineName
Memento-Datetime
X-Archive-Orig-Etag
X-Archive-Orig-Date
X-Archive-Orig-Server
X-Cache-Date
X-RequesterIP
X-Archive-Orig-Content-Length
X-Archive-Orig-Connection
Powered-By-VeryCDN
TTL
X-Archive-Guessed-Charset
X-Varnish-Esi-Access
Kp-EeAlive
X-FPC
X-Faeria
X-Nginx-Page-Cache
X-Instance-Id
X-MSU-SOURCE
Container
X-Service-Id
X-SuperCache
X-Dynatrace-Js-Agent
X-Dynatrace
ReqUrl
X-Cache-FS-Status
X-Catalyst
Page-Template
X-DDM-SERVER-UPDATED
X-Varnish-Mode
X-Mobile-Device-Type
X-Varnish-Auto-Cache-Miss
X-NewsFlow-Sitename
CDN-Cache
X-Mobile-Device
X-Clx-Request
IsMobile
X-DDM-SERVER
Cleartype
X-Enhanced-By
X-FG-RequestId
X-Cache-V
FrontEnd
RSL-Trace-ID
WFE
X-B3-Traceid
X-B3-Spanid
X-Vid
X-Tradeindia-SMgmt
X-Sn-Servicetimems
X-Fpc
X-RiS-PX
X-Instart-Cache-Id
X-Front-Cache
X-Tradeindia-Request-GUID
Dynatrace
Load-Balancer
X-Cache-Me-Harder
X-NewCloud-V-Cache
X-Backend-TTL
DB-Nickname
Type
IES-Server
ResourceTag
AMFplus-Ver
Kanooh-Host
X-Vary-Options
Public-Extension
CDN-Cache-Hit
CDN-Node
X-Serverid
!~Request-OOB-Work
Server-Id
X-9XB-Server
EQ-Cache
X-Wily-Servlet
X-Wily-Info
X-SRV
X-Varnish-Cache-Ttl
Microcache
GranicusServer
X-ClusterID
EREV-Ver
HostName
Phoenix-Mark
Phoenix-Cache-V
Phoenix-Proxy-Cache
Proxy1
Tesla.Performance
Phoenix-Cache
Phoenix-A
X-Obj-Ttl
X-Skip-Cache
Generate-Time
PB-PID
PB-RID
Upgrade-Insecure-Requests
X-Static
SINA-TS
X-PBS-Appsvrname
X-Csrf-Token
X-PROCESSED-BY
SINA-LB
X-PBS-Appsvrip
X-Imforza-Hosted
Https
DeleGate-Ver
X-ACache
X-Made-On
X-BIT-Node
X-Ssl-Cipher
X-Geo-IP
X-BPool-Bx-Cache
X-BPool-Back
X-BPool-Fx-Cache
X-BServer
X-POPSUGAR-Server-Name
X-BPool
TheAnswer
X-Who
X-ZSITES-DNS
X-PBS-Fwsrvname
Language
X-Amz-Meta-Version-Id