Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
P3P
X-Cache
X-AspNet-Version
Strict-Transport-Security
CF-RAY
X-Pingback
Age
Content-Language
Via
X-UA-Compatible
Access-Control-Allow-Origin
X-Adblock-Key
X-Xss-Protection
X-Varnish
Upgrade
X-Check
X-Language
X-Template
X-Cacheable
X-Generator
Content-Security-Policy
X-Buckets
X-Drupal-Cache
X-Request-Id
X-AspNetMvc-Version
X-Type
X-Cache-Group
X-Pass-Why
P3p
X-Hacker
X-Ac
Content-Location
X-Powered-By-Plesk
X-Cache-Hits
X-Runtime
X-Permitted-Cross-Domain-Policies
X-Download-Options
MS-Author-Via
Host-Header
X-ShopId
X-Sorting-Hat-PodId
X-ShardId
X-Dc
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-Section
X-Alternate-Cache-Key
X-IPLB-Instance
Alt-Svc
Cartoon
X-Powered-CMS
Status
X-UA-Device
X-Served-By
Access-Control-Allow-Credentials
WPE-Backend
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Via
X-Amz-Cf-Id
X-Iinfo
X-Request-ID
X-Backend
X-Cache-Status
X-ServedBy
X-Contextid
X-Timer
X-PC-Hit
X-PC-Key
Powered-By
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Mod-Pagespeed
X-PC-AppVer
X-PC-Date
X-Ua-Compatible
X-PC-Host
X-DIS-Request-ID
X-Logged-In
CF-Cache-Status
Keep-Alive
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Server
X-Cache-Hit
X-Tumblr-Pixel-1
X-CDN
X-Port
X-Host
Content-Encoding
X-Tumblr-Pixel-2
X-Robots-Tag
X-Server-Powered-By
X-CST
WP-Super-Cache
X-Cache-Enabled
X-Rid
X-Pad
Referrer-Policy
X-Nginx-Cache-Status
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
Fastly-Debug-Digest
X-Accel-Version
X-Endurance-Cache-Level
X-Turbo-Charged-By
X-Page-Speed
X-Tumblr-Pixel-3
X-Content-Powered-By
X-Wix-PunisherID
X-Rack-Cache
X-Content-Digest
X-Drupal-Dynamic-Cache
X-Forwarded-For
X-AH-Environment
X-Varnish-Cache
X-Pantheon-Styx-Hostname
Surrogate-Key-Raw
X-Styx-Req-Id
Content-Security-Policy-Report-Only
SPRequestGuid
X-SharePointHealthScore
X-Proxy-Cache
MicrosoftSharePointTeamServices
X-Cnection
X-Request-Country
X-Forwarded-Proto
X-MS-InvokeApp
X-GitHub-Request-Id
X-XRDS-Location
X-Cache-Lookup
X-Original-Date
X-Died
X-Safe-Firewall
Cf-Railgun
X-LiteSpeed-Cache
X-FullPageCaching
MicrosoftOfficeWebServer
Timing-Allow-Origin
Edge-Control
Request-Id
X-Amz-Request-Id
X-Amz-Id-2
X-Node
Charset
X-Webserver
X-PhApp
X-Tumblr-Pixel-4
SPIisLatency
SPRequestDuration
X-FW-Hash
X-INKT-URI
X-INKT-SITE
Composed-By
X-Content-Security-Policy
X-CF-Powered-By
X-FW-Static
X-FW-Serve
X-FW-Type
X-Hits
Access-Control-Max-Age
Content-MD5
X-Swift-SaveTime
X-Swift-CacheTime
Rating
EagleId
Served-By
X-Hyper-Cache
Access-Control-Expose-Headers
X-Spip-Cache
Liferay-Portal
X-Firenze-Processing-Times
X-VWS-Id
X-AWS-Id
X-LJ-Flow-ID
Grace
X-HS-Cache-Config
X-CDN-Pop-IP
X-CDN-Pop
Edge-Cache-Tag
X-HS-Content-Id
X-Tumblr-Content-Rating
X-Server-Name
X-Device
X-BC-Stapler
X-Newrelic-App-Data
X-Backend-Server
X-Dw-Request-Base-Id
X-Microcache
X-Fastly-Request-ID
Request-Context
X-RateLimit-Remaining
X-RateLimit-Limit
X-VCache
X-SERVER
Content-Style-Type
X-RateLimit-Reset
Public-Key-Pins
X-FB-Debug
X-ServerName
X-User-Agent
Content-Script-Type
X-Jimdo-Instance
X-Jimdo-Wid
X-Clacks-Overhead
X-Cloud-Trace-Context
X-Acc-Exp
Refresh
X-Cache-Config
Xkey
X-TNCMS
X-Loop
Real-Hostname
X-DDC-Arch-Trace
X-XN-XNHTML
X-XN-Trace-Token
Front-End-Https
Fpc-Cache-Id
X-Age
Surrogate-Control
X-Url
X-Microcachable
X-Hostname
X-Generated-By
X-N-OperationId
X-DNS-Prefetch-Control
X-LiteSpeed-Cache-Control
X-Px
X-Cached
X-Tumblr-Pixel-5
PageSpeed
Surrogate-Key
Display
X-Sol
X-Middleton-Response
Response
X-Middleton-Display
X-WebKit-CSP
X-Pantheon-Environment
X-Pantheon-Site
X-Pantheon-Phpreq
X-MiniProfiler-Ids
X-StackifyID
X-Zen-Fury
X-Cached-By
X-Topify-Platform
X-SS-Conf
X-SS-Location
X-CMS-Version
X-Outils-CS
X-Content-Options
X-HOST
Rt-Fastcgi-Cache
TCN
X-Request-Time
Edge-Control-Message
X-Handled-By
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Product
X-Umbraco-Version
X-DynaTrace-JS-Agent
X-ApacheServer
X-PERF
X-OneAgent-JS-Injection
X-DynaTrace
X-Amz-Version-Id
Access-Control-Request-Method
X-Whom
Imagetoolbar
X-AspNetWebPages-Version
X-Varnish-Cache-Hits
X-Ruxit-JS-Agent
Alternate-Protocol
Host
X-Cache-Rule
X-Tumblr-Pixel-6
X-Correlation-Id
X-Engine
X-Recruiting
WZWS-RAY
X-Powered-By-360WZB
X-Varnish-TTL
X-Micro-Cache
X-Kinsta-Cache
ServedBy
X-NWS-LOG-UUID
Powered
X-LBLID
X-From
DynaTrace
Fhost
X-Magento-Tags
X-URL
X-VARNISH-Cache
X-Msg-2-Log
X-Track
X-CacheServer
Generator
X-Location-Id
P-WS
P-LB
X-Edge-Location
X-FORWARDED-FOR
Dmn
X-Hosted-By
X-Upstream
X-VTEX-Janus-Router-Backend-App
X-VTEX-Cache-Status-Janus-ApiCache
X-Powered-By-VTEX-Janus-ApiCache
No
X-Vtex-Processado-Em
X-Vtex-Processed-At
X-Vtex-Remote-Cache
X-Powered-By-VTEX-Janus-Edge
X-Instart-Request-ID
X-Varnish-Backend
X-B-Cache
X-Varnish-Host
X-Goog-Hash
X-Cache-Age
X-Actual-URL
Fastcgi-Cache
X-LB
Origin
X-Cache-TTL
X-Response-Time
X-Original-Request
X-Passed-To-DLL
X-Passed-To
X-Returned-From-DLL
X-Returned-From
Akamai-IP
X-BS
Arr-Disable-Session-Affinity
X-I-Sp
X-Varnish-Beresp-Ttl
X-Returned-From-PostProcessResponse
X-Varnish-Beresp-Status
X-Cdn
X-Passed-To-BeforeDispatch
Expect-CT
X-URLSCHEME
X-Varnish-Beresp-Grace
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Stale
X-Application-Context
X-Fastcgi-Cache
X-RESOURCE
X-Matrix-Proxy
X-Matrix-Server
Pool
X-App-Hosting
X-Cache-Info
X-Internal-ReqID
X-Source
X-TransIP-Balancer
X-Developer
X-Platform
Powered-By-ChinaCache
X-Varnish-Cacheable
X-Defender
X-S
X-Shop-Id
X-NetCat-Version
X-Art-Request-Id
X-UD-Method
X-Origin
X-Device-Type
X-I
Content-Hash
X-Powered-By-VelaWeb
X-Content-Encoded-By
X-Version
X-Platform-Processor
X-Platform-Router
X-Platform-Cluster
X-Revision
X-Cache-Tags
X-TransIP-Backend
X-Front
X-VTEX-Cache-Status-Janus-Edge
IBM-Web2-Location
HTTPS
X-Accel-Expires
X-LB-Node
X-Storage
USPLoggingUUID
X-Expires-Orig
X-Daa-Tunnel
X-Varnish-RemainingTTL
X-Cache-Operation
X-Varnish-Seen-By
X-Varnish-GracePeriod
X-Varnish-ObjectSource
X-Varnish-RemainingLife
Version
X-Cache-Debug
X-Firenze-Processing-Time
X-Gamma-Serve
X-Route-Server
X-TTL
X-Rocket-Nginx-Bypass
X-Page-Cache
X-Translation
X-Supported-By
X-Server-ID
X-Microcache-Status
X-Signature
Cache-Tag
Ohc-File-Size
Node
X-NoCache
X-HS-Content-Campaign-Id
X-Varnish-Count
X-Varnish-HitMiss
X-EdgeConnect-Origin-MEX-Latency
X-Dispatch
X-Dispatcher
X-Akamai-Transformed
X-Tec-Api-Root
X-Tec-Api-Version
Last-Published
X-Tec-Api-Origin
X-Cache-Key
Content-Disposition
X-Cache-Only-Varnish
X-Cache-Control-Orig
SSPAppContext
X-Hypernode
X-EdgeConnect-MidMile-RTT
X-Server-Upstream
X-Flow-Powered
X-Abuse
MIME-Version
X-Github-Request-Id
Page-Completion-Status
X-Director
X-Duration
X-Platform-Server
ServerName
X-ATG-Version
Lsrequestid
X-SV-CreatedAt
X-SV-Cacheable
X-SV-Duration
Srv
X-SV-Expires
X-SV-Pid
X-SV-Nginx-Duration
X-SV-FromDBCache
X-Cache-Lifetime
X-SV-Edge
X-SV-CacheTags
X-Varnish-Age
ServerID
FAI-W-FLOW
X-Akamai-Device-Characteristics
Cache-Key
X-Last-Modified
X-F-Cache
X-SSL-Protocol
X-Magento-Cache-Debug
X-Country-Code
X-ARC
X-PwB-Node
X-SSL-Cipher
X-SDS
X-SE-Debug
X-CJ-Soft
Cneonction
X-Amz-Meta-S3cmd-Attrs
PICS-Label
X-Cookie-Domain
IM-Version
X-Platform-Cache
X-Grace
SN
X-Edge-IP
S-Cnection
Content-Encoding-Handler
X-Url-Base
X-Content-Age
X-Geo-Country
Proxy-Connection
X-Client-IP
X-Cache-Server
Allow
X-ServerID
X-GeoIP-Country-Code
X-Abgroup
X-ORACLE-DMS-ECID
X-Internal-UserID
Accept-Encoding
X-Debug
X-UPSTREAM
X-Sapient
X-Vcap-Request-Id
X-Cache-Engine
X-Speed-Cache
X-Speed-Cache-Key
X-Proxy
If-Modified-Since
X-GeoIP-Country-Name
X-CDN-Cache-Status
Location
X-Orig-Vary
X-CDN-Node
X-Processing-Time
X-Frontend
X-Nbs
X-AOL-HN
X-Time
X-NB-Cached-Page
X-Middleware-Start
Qs-Cache
Req-Id
X-Processed-By
X-Server-Id
Magicmarker
X-Real-Server
AMF-Ver
X-Lambda-Id
CacheControlHeader
X-WEBSERVER
X-Shield-Request-Id
X-Sucuri-ID
X-Srv
X-RequestId
X-BackendServer
NnCoection
X-Akamai-Device-Model
Section-Io-Id
X-Always-Cache
Accept-Charset
S
WSR-Cache
X-N
Retry-After
X-AF-Userserver
X-Cache-Expires
X-NewRelic-App-Data
X-FW
X-Varnish-Url
X-VC-Enabled
A-Powered-By
X-VC-TTL
X-IsCacheURL
X-Sucuri-Cache
Server-Info
Pv
SRV
X-Goog-Generation
Fw-Via
Content-Transfer-Encoding
X-Id
MC
X-Loopia-Node
X-GUploader-UploadID
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-Browser
X-DealerOn
X-Config-Blacklist-Version
X-Ttl
Cached
Cm-Server
X-SRCache-Key
Use-Proxy
X-Discourse-Route
HCVer
HAVer
X-Cache-Level
X-EC-Security-Audit
X-Pressidium-NinukisWP-Ver
Nodo
NetMindSessionID
SEOMOZ
MJ12bot
EagleEye-TraceId
Backend
X-Worker
X-PF-Uncompressing
Author
X-Cache-Control
X-Magnolia-Registration
RTSS
X-TB-M
X-Dns-Prefetch-Control
X-Nginx-Cache
X-Drectory-Script
Tracecode
X-Cache-Type
X-BKSrc
X-Purge-URL
X-ACMCache
X-Varnish-Hits
X-Amz-Storage-Class
Cteonnt-Length
Cache
X-Framework
X-Varnish-Hostname
X-Varnish-Ttl
Buuteeq-Source
SVR
X-Correlation-ID
X-Cache-PageType
X-Cache-Fix
X-Hiawatha-Cache
Identity
X-Cache-TTL-Remaining
X-Generated
X-Vhost
X-Healthy
X-ID
X-Route-To
X-Litespeed-Cache
Nitro-Cache
X-Traffic
X-WR-MODIFICATION
X-Trace
X-Cache-Handler
X-Varnish-IP
X-JG-Page-Cache
X-Empowered-By
X-Powered-By-Server
X-Cocoon-Version
X-Adobe-Content
X-OpenCart-Lightning
X-Adobe-Loc
Server-Name
X-Yottaa-Metrics
X-Yottaa-Optimizations
SS
X-Directory-Script
X-Yadis-Location
Keywords
X-LB-Server
X-Fastly-Request-Id
X-Runtime-Rack
BALANCEDTO
X-Unbounce-PageId
X-Twitter-Response-Tags
X-Transaction
X-Unique-ID
X-Resolver-IP
X-WR-Flags
Local-Info
X-Garden-Version
X-Site-Name
Frame-Options
X-Server-Instance
Ufe-Result
X-Unbounce-Variant
X-Hit-Cache
X-FireWall-Port
X-Purge-Host
Cache-Provider
X-Session-ID
X-Served-Server
X-Connection-Hash
X-Unbounce-VisitorID
X-Magento-Cache-Control
X-Environment
X-Sys-Req-ID
X-Pagename
X-Runtime-Memory
X-TTFB-L
X-Nginx-Host
X-TTFB
X-NginX-Cache
Thanks
X-Mobilized-By
X-Content-Security-Policy-Report-Only
HitType
Description
NODE
Smug-CDN
X-SmugMug-Hiring
IISExport
WWW-Authenticate
X-LP
X-SmugMug-Values
X-HOSTNAME
X-ClientSide-Caching
X-VARITI-CCR
X-Cache-Node
X-Debug-Token
X-Cache-Dispatchercachecontrol
X-Author
X-Session-Reinit
X-Cache-Device-Type
X-EPiphany-Vid
X-Client-Vid
X-Client-Image-Vid
X-CB-Server
X-Cache-Dispatcherpragma
X-Drupal-Cache-Tags
Eomportal-Instance
Disablevcache
X-LW-Web-Server
Xc-Version
Front
X-Balanceador
X-Varnish-Retries
X-High-Performance
X-SmartBan-URL
X-Highwire-SessionId
X-SmartBan-Host
X-Highwire-RequestId
X-Optimization
X-HW
X-WN-ClientGroup
X-Env
X-CF-Passed-Proto
Strikingly-Cached
Strikingly-Cached-Version
WN
X-Distributor
X-Cache-Doesi
Dispatcher
X-App-Server
X-Source-ID
NLCacheNote
X-NginX-Server
X-HTML-Minification-Powered-By
Max-Age
X-DEBUG
X-OPNET-Transaction-Trace
X-CAPServer
Content_type
X-Cache-Source
X-ARRServer
ServerTokens
X-Cache-Provider
Web-App-Origin-Name
ServerSignature
X-Webcelerate
X-ORACLE-DMS-RID
X-Varnish-Server
X-Location
X-RiS-UFDI
X-Disney-Akamai-Rule
X-HydroSheep
Access-Control-Allow-Method
X-App
X-HITS
X-Generated-Time
X-Amz-Meta-Cb-Modifiedtime
X-App-Status
X-Rack-Cors
X-GeoIP
X-Provisioner-Version
X-WebKit-CSP-Report-Only
X-We-Are-Hiring
X-Domain-Checked
From-Origin
X-Nginx
Dis-Env
X-Render-Time
X-Trace-Id
Url
X-Grid-Server
X-Culture
X-Server-IP
X-Runtime-Affili
X-Symfony-Cache
X-Remote-Addr
AsisCache
X-C2M-Runtime
X-HP-Trace-Project
X-HP-Trace-ID
X-Time-Microsecs
X-C2M-Server
X-Config-By
Cmsid
Cmstype
X-App-Runtime
X-Atraveo-Expires
X-Jphone-Copyright
X-Machine
X-SDE-Name
CLMOB
X-Cache-Keep
X-Dynatrace-Js-Agent
X-Smartcache-Timeout
X-Smartcache-Keys
X-Hosting-Env
X-Site
Set-Cookie2
X-Varnish-Debug-TTL
X-Varnish-Debug-Age
X-Cache-CFC
X-Varnish-ID
X-Node-Name
XDomainRequestAllowed
OriginServer
X-AEM
X-Blog
X-Atraveo-Param-Rm
Id
X-Atraveo-Set-Cookie
X-Atraveo-From-Varnish-Cache
Ohc-Upstream-Trace
X-Atraveo-Cache-Control
X-Atraveo-ETag
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Cf-Powered-By
X-CDN-Forward
SiteSpeed
X-WP
X-Atraveo-Zone
X-A
X-Wikidot-Backend
Machine
X-Esi
Og
X-Wikidot-Static-Cache
WP-AdvCache-MemCached
X-Ser
Beyond-Iis
X-Force
Public-Key-Pins-Report-Only
X-CacheResult
X-Fedora-School-Id
X-Resty-Request-Id
ScoreTracker
X-PRAM
X-Resource
Cluster-ID
Hname
Paypal-Debug-Id
X-PageType
X-Lb
X-E
X-GSL-Server
Xc
SG
X-Bcwwwid
Content-Server
Ibf5scheme
N365rili
X-Cdn-Forward
X-Server-Generated
X-Desc
X-MAT-GEO
Nginx-Cache
X-Hstore
X-Magento-Action
X-Pageid
X-Powered-By-Home.Pl
Strikingly-Cache-Region
X-HashTwo
X-HA-Backend
X-HA-Frontend
ViewMode
X-Amcomm-Site
X-Page
X-Rewrite
Pics-Label
X-Dw-Trace-Id
X-Cacheable-TTL
RequestId
Ttl
W
X-Cache-On
TC-S-Cache
TC-S-Cache-M
MW-Webserver
TC-Cache-U
TC-Cache-IC
Yoncu-Errno
TC-Cache
X-ASAP-Cache
X-Clara-ASAP
X-Ezoic-Cdn
X-Rq
X-DataDome
X-Adnet
X-IIJ-Cache
X-Distil-CS
X-DTC
X-Key
Expect-Ct
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Response
X-RDP
X-MidCOM-Meta-Cache
X-CRA-DC
X-Machine-Name
X-SV
X-Viator-Tapersistentcookie
X-Detected-Device
X-Proto
X-Refresh
X-Autoru-LB
X-Autoru-Host
DNNOutputCache
X-AutoRu-App-Id
X-Fpc
Sophnep-Edge-FX
Traffic-Origin
Ctx
CP
X-Cache-Detail
From
X-Data-Request
RN-Server
X-This-Proto
X-Beresp-Ttl
Resin-Trace
X-ServerIndex
X-UA
X-Info
X-SERVER-NAME
X-Atg-Version
X-Cluster-Node
Fastly-Backend-Name
X-Req-Head-Response
X-RealServer
Debug-Status
X-Map-Context
X-Mobile-URL
X-CACHE-KEY
X-Captured
VANITY-HOST
Bios
X-Batcache
MS-CV
NS-VaryByCustom-Key
X-WA-Info
X-W3TC-Minify
X-Cache-Warmer
X-Cache-Action
X-Backend-Status
X-Vary-Options
X-Title
X-Hrouter
X-Webapp
X-M
Server-Ip
X-Webstats-RespID
X-Phpwcms-Release
X-Depends
Webluker-Edge
Access-Control-Request-Headers
X-CDN-RULE
Gzip
X-Frame-Option
X-Search-Id
Actual-Object-TTL
X-Header
X-Phpwcms-Page-Processed-In
X-Layout
Mime-Version
ClientIP
X-SCM-Server-Number
X-SO
SINA-LB
X-OCTOPOD
X-Unique-Id
X-Stage
X-Pagely-Cache
SINA-TS
Myheader
Warning
X-7d-Instance-Id
X-7d-Trace-Id
X-CDN-COMPRESS
X-Fstrz
X-Ghost-Cache-Status
Response-Time
X-Airee-Node
X-AWS
X-Obj.Ttl
F5-IpCliente
X-Dev
X-Sc-Cache
X-Agent
X-Turpentine-Esi
X-ACCELERATE
X-EC-Lua
SHInfo
X-Actindo-RS
X-Application
X-Avvio-Cms-Cacheload
DrivedBy
NtCoent-Length
X-MCB-Server
X-Compressed-By
X-Artvisual-Server
VServer
Backend-Timing
X-Hosting
X-Cms-Mode
X-Amz-Id-1
Worker
X-Server-Instance-Name
X-Cache-Via
SBMCLOUD
X-Analytics
X-CACHE-TTL
X-HP-Redirect
X-Test
X-Sid
X-Reflector
X-RAMCache
X-Webkit-Csp
X-Rewritten-By
Device
X-Nginx-Request-Time
SERVER-ID
Web
X-Reflector-Cache
X-Cache-Varnish
PagesDisplayed
X-ReqId
X-DSS
Provider
X-Cache-Extended
X-DB
Ibm-Web2-Location
X-DW
X-RPM
X-Varnish-Action
X-Tag-Playlist
Ews
X-KoobooCMS-Version
X-Ssl-Cipher
X-ManagedFusion-Rewriter-Version
X-RPS
X-APP
X-PBY
X-Middleton-PageSpeed
X-RSL
X-Varnish-URL
X-ChromeLogger-Data
X-Drupal-Cache-Contexts
X-Client-Ip
AGI-Request-ID
MwpReleaseVersion
X-Wm-VIP
X-WPL-DATA
Container
X-Cache-TTL-Current
X-Built-With
X-MSEdge-Ref
X-Node-ID
X-XHR-Current-Location
X-VLoc
X-Varnish-VCL
X-Streams-Distribution
X-Flex-Community
X-Time-Zone
X-Varnish-Instance
Httpd-Identifier
MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
X-Meta-MSSmartTagsPreventParsing
X-Meta-MSThemeCompatible
X-Server-Addr
X-Instance-Name
X-Cache-TTL-Age
MSThemeCompatible
StatusCode
X-Flex-Tags
X-Wm-1
X-Ezpublish-Nodeid
X-B2f-Not-Route
X-Amz-Meta-Content-Md5
X-ACLR-Version
X-EC2-Instance-Id
X-Real-IP
Accept-Language
X-Varnish-Cache-Local
X-Svr
MageStack-Web-Node
MageStack-Tag
MageStack-Config
MageStack-Cacheable
MageStack-Cache-Status
MageStack-Debug
MageStack-Loadbalancer
MageStack-PageSpeed
MageStack-Magento-Version
Home
Il-Cl
GP-Version
Hostname
X-Forwarded-Host
GP-Remote-Addr
X-Rocket-Nginx-Serving-Static
X-FIRSTBase
X-Flex-Evstart
X-Plat
X-ProcessESI
X-UnsetCookies
X-Apm-Telemetry-Syncmark
Proxy-Cache
X-Domino-CacheValidationWithETagReason
X-Domino-CacheValidationWithETagResult
X-RemovedCookies
X-Frames-Options
MageStack-Cache-Lifetime
MageStack-Cache-Hits
X-Sites
X-Serv
X-Restarts
X-Src-Webcache
Edgecast
X-Cache-Time
X-AMAZEEIO
X-Generated-Date
X-Forwarded-By
X-AG-MIPS
X-4ormat-Cacheable
Server-ID
X-ASAP-Age
X-Flex-Tag
X-Enhanced-By
X-DS1D
X-Ezpublish-Installationid
X-Nginx-Request-Processing-Time
X-Flex-Lang
X-Flex-Lastmod
X-Cjtype
X-XHTML-Minification-Powered-By
COMMERCE-SERVER-SOFTWARE
MageStack-Cache
MageStack-Area
X-BServer
X-BPool-Fx-Cache
Language
X-Proxy-Cache-Key
Cache-Tags
TheAnswer
X-BPool
X-BPool-Bx-Cache
X-BPool-Back
NZSpeedy
X-ServiceProvider
X-Varnish-Auto-Cache-Miss
X-Catalyst
Content-Legth
AR-SID
Lb
X-Len
X-CacheID
X-Cached-Status
SB-Cache-Remaining
SB-Cache-Life
SB-Site-Device
Session-Id
X-Cache-FS-Status
Cleartype
AR-PoweredBy
AR-ATIME
AR-CACHE
TP-Cache
TP-L2-Cache
Vserver
VAR-Cache
X-WebNode
X-PHP-Response-Code
X-NewsFlow-Sitename
Brightspot-Id
X-Obj-Ttl
X-PBS-Appsvrname
X-PBS-Fwsrvname
X-Backend-TTL
X-Server-FQDN
AMFplus-Ver
X-Provided-By
X-VID
X-RiS-PX
ENV
X-V
X-Varnish-Mode
X-FreeTag-Count
RSB-LINK
Server-Hostname
Provided-Host
Note
FastCGI-Cache-Status
X-Router
X-Router-Backend
X-Zendesk-Origin-Server
X-DI
X-Zendesk-User-Id
X-Cms-Server
BackendServer
X-UseReverse-Proxy
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Serendipity-InterfaceLang
X-Secret
X-NewCloud-V-Cache
X-Serendipity-InterfaceLangSource
Drupal-Pagecache-Memcache
X-Box
X-PBS-Appsvrip
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-MSU-SOURCE
X-Nocache
X-PoweredBy
X-SuperCache
X-DDM-SERVER-UPDATED
X-DDM-SERVER
Server-Id
X-HAProxy
X-Made-On
X-Clx-Request
X-Cname-TryFiles
X-Uncacheable
X-Country
X-Flex-Evend
X-ELB
X-LBPoolMember
X-FastCGI-Cache
X-AppServer-Cache-Rule
UrlWatchModule-Time
X-VG-WebCache
Content-Cache
Kanooh-Host
Progma
Requested-Host
X-WHOIS-Cached
X-Upgrade-Enabled
Cache-Ctrol
X-PG
X-REDIRECTSERVER
X-SH-Cache-Status
X-Deity
X-Served
X-Container
X-JSESSIONID
X-UPSTREAM-Address
Hamster
X-Cluster
X-ENV
X-Oracle-DMS-ECID
X-Srcache-Fetch-Status
X-Srcache-Store-Status
X-FF
X-Litespeed-Cache-Control
X-Lima-Id
X-CSRF-Token
X-DB-Content-Length
PServer
DB-Nickname
X-Tradeindia-SMgmt
X-W-Cache-Hits
HA-Geolon
X-Request-Received
HA-Geocity
HA-Cloudapp
HA-Geocountry
HA-Geolat
Apple-Itunes-App
X-Request-Processing-Time
X-W-Cache
X-Tt-Dbg
XDisk
X-Pubstack
BlockPHPCallEnd
Ez
X-HASH
X-MainProfileID
X-SRV
HA-Georegion
X-VC-Debug
FindLaw
X-MainProfileName
X-Obvious-Tid
X-Not-Cacheable
X-UUID
X-MainProfileURL
X-Obvious-Info
X-MainProfileCategory
X-Faeria
X-Dynamic
Tk
X-Grow-Cache
X-Grow-Guest
Lookup-Cache-Hit
X-DeliveryServer
VC-NoCache
X-Bip
X-Brought-To-You-By
X-DEBUG-TTL
X-Dynamic-Cache
X-SilverStripe-Cache
X-Hcom-Styx-Info
X-Vol-Correlation
X-Vol-Mrp
X-Varnish-Max-Age
X-Varnish-Grace
X-RequesterIP
X-Requestid
Type
Session-From
X-Varnish-Cached-TTL
X-Varnish-Cached
Accept-CH
DeleGate-Ver
Proxy-Agent
Origin-Content-Encoding
X-AppVersion
Returned-Status
X-AISO-Server
X-AISO-Cacheable
X-Cache-V
X-ETag
X-Nginx-Page-Cache
X-PvInfo
X-AISO-Cache
CD4
X-Tradeindia-Request-GUID
LCache
Debug-Expires
WebServer
Debug-Cache-Control
Memento-Datetime
X-Sn-Servicetimems
X-Content-Parsed-By
Redkiwi-Cloud
X-Built-By
X-B3-Spanid
X-Archive-Orig-Server
X-B3-Traceid
NKBVHEADER
X-IP
HA-Servedtime
HA-Ipaddr
HA-Urlpath
IES-Server
Load-Balancer
L5d-Success-Class
X-Archive-Orig-ETag
X-Archive-Orig-Date
X-Archive-Guessed-Charset
X-Hcom-Origin-Id
X-MCF-ID
X-ACache
Server-Node
Www.Aujourdhui.Com
X-Group
X-Archive-Orig-Connection
X-Batcache-Reason
X-Max-Age
X-Cache-Origin
X-CGP
X-Archive-Orig-Content-Length
HA-Host
X-Varnish-Esi-Access
Cache-Status
X-Varnish-Store
X-FORWARDED-PROTO
X-Cache-Why
X-Highwire-Smart-Code
X-Highwire-Sitecode
X-Varnish-Set-Cookie
X-Varnish-Esi-Method
X-UType
X-GRACE
X-Netrix-ID
X-Turpentine-Cache
X-Varnish-Currency
X-Instance
X-NodeID
X-Static
X-Protected-By
Ina-Bwaf
MageStack-Cache-Warning
MageStack-Cacheable-Reason
X-NMT-Proxy
X-Gannett-Site-Version
X-Pass-Through
X-Origin-Server
AC-ELC
Aurora-Node
X-BC
Unique-Request-Id
Copyright
X-Cachable
PB-RID
X-CH-Device
X-Count
X-Powered-Developer
X-Pool-Info
PB-PID
LB
EQ-Cache
Aoestatic
X-Magento-Lifetime
X-Varnish-Debug-Hits
X-Xrds-Location
X-Rack-CORS
X-TargSmaku
Referer-Policy
XX
X-Geo-IP
X-Scache
X-Skip-Cache
X-Status
X-LOCATION
Developer
X-Transaction-Name
MachineName
ReqUrl
X-COUNTRY-CODE
MageStack-Response-Ttl
V-Age
X-Imforza-Hosted
X-Debug-Message
X-Ocache
X-Pj-Cache-Status
X-SCProxy
X-Processed
X-Csrf-Token
X-Cache-LB
Tempo
GranicusServer
X-Amz-Meta-Version-Id
X-Cache-BE
X-Cache-HT
Application
IsMobile
SB-Site-IE-VERSION
RSL-Trace-ID
WFE
X-Front-Cache
X-IP-Address
Fw-Cache-Status
CommunityServer
X-Accel-Cache-Control
Prototype-RootPath
X-App-Version
X-Cache-Me-Harder
X-FRUIT
X-Your-GrandPa-Would-Wait
X-Would-Your-GrandPa-Wait
X-Pixelsilk-Version
X-Pixelsilk-Server
X-PM-ID
X-Reason-Bp
EagleEye-TraceId-Daily
X-Origin-Cache
X-NID
X-Cache-Id
X-Backend-Name
X-DN-Cache-Control
X-Gyrobase-Publication
X-Name
INFO
X-Beatles
X-NO-BREACH
X-Goog-Meta-Replace
X-Ss-Conf
X-Ss-Location
X-TTL-Age
X-Goog-Meta-Policy
X-Does-He-Have-Time
X-Cache-ID
X-Beatles-Hits
X-Cache-Set
X-CCM
X-Content-Type-Option
X-No-Session