Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
P3P
X-AspNet-Version
Age
X-Pingback
Content-Language
Via
X-UA-Compatible
Expect-CT
Access-Control-Allow-Origin
Upgrade
X-Adblock-Key
X-Xss-Protection
Content-Security-Policy
X-Cacheable
X-Check
X-Template
X-Language
X-Varnish
X-Generator
X-Buckets
Alt-Svc
X-Request-Id
X-Drupal-Cache
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Powered-By-Plesk
X-Permitted-Cross-Domain-Policies
Content-Location
X-Download-Options
Host-Header
X-Runtime
MS-Author-Via
X-ShopId
X-FRAME-OPTIONS
X-ShardId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PodId
X-Dc
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-Section
X-Alternate-Cache-Key
P3p
Cartoon
X-Powered-CMS
X-IPLB-Instance
X-UA-Device
X-Served-By
Access-Control-Allow-Headers
Access-Control-Allow-Credentials
X-Amz-Cf-Id
Status
Access-Control-Allow-Methods
X-Cache-Status
X-Via
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
CF-Cache-Status
X-Contextid
X-Backend
Referrer-Policy
X-DIS-Request-ID
X-Mod-Pagespeed
X-PC-Hit
Powered-By
X-PC-Key
X-PC-Host
X-PC-Date
X-PC-AppVer
X-ServedBy
Content-Encoding
X-CST
X-WPE-Loopback-Upstream-Addr
X-Logged-In
Keep-Alive
X-Host
X-Cache-Hit
X-CDN
X-Rid
X-Server
X-Port
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-User
X-Cache-Enabled
X-Server-Powered-By
X-Tumblr-Pixel-1
X-Request-ID
X-Endurance-Cache-Level
X-Robots-Tag
X-Nginx-Cache-Status
X-Seen-By
X-Wix-Request-Id
X-Wix-Server-Artifact-Id
X-Accel-Version
X-Tumblr-Pixel-2
X-Turbo-Charged-By
X-Page-Speed
X-Original-Date
X-Drupal-Dynamic-Cache
X-Pad
X-Content-Powered-By
Content-Security-Policy-Report-Only
X-Content-Digest
X-Proxy-Cache
WP-Super-Cache
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-AH-Environment
X-Rack-Cache
X-Varnish-Cache
X-Tumblr-Pixel-3
X-LiteSpeed-Cache
X-GitHub-Request-Id
X-Request-Country
X-XRDS-Location
SPRequestGuid
X-SharePointHealthScore
X-MS-InvokeApp
Edge-Control
X-Cnection
MicrosoftSharePointTeamServices
X-Cache-Lookup
Timing-Allow-Origin
X-Died
X-Node
Cf-Railgun
X-Amz-Request-Id
X-Amz-Id-2
X-FW-Hash
Charset
X-Trace
Request-Id
X-FW-Static
X-FW-Serve
X-FW-Type
X-FullPageCaching
Edge-Cache-Tag
X-Webserver
X-Webcom-Cache-Status
X-Content-Security-Policy
X-HS-Cache-Config
MicrosoftOfficeWebServer
X-HS-Content-Id
X-Safe-Firewall
X-PhApp
X-Hits
X-CF-Powered-By
SPIisLatency
SPRequestDuration
X-INKT-URI
X-INKT-SITE
X-PHP-Backend
Request-Context
Access-Control-Max-Age
X-Newrelic-App-Data
X-BC-Stapler
Composed-By
X-SERVER
X-Swift-SaveTime
X-Swift-CacheTime
EagleId
Access-Control-Expose-Headers
Grace
Served-By
X-CDN-Pop
X-CDN-Pop-IP
Liferay-Portal
X-Spip-Cache
X-Hyper-Cache
X-Tumblr-Pixel-4
X-Backend-Server
X-Device
X-Ua-Compatible
X-Server-Name
X-Dw-Request-Base-Id
X-LiteSpeed-Cache-Control
X-Fastly-Request-ID
X-Microcache
X-VCache
X-Cloud-Trace-Context
X-ServerName
Content-Style-Type
X-FB-Debug
X-Clacks-Overhead
Content-Script-Type
Rating
X-RateLimit-Remaining
X-RateLimit-Limit
X-Firenze-Processing-Times
X-TNCMS
X-Loop
Real-Hostname
Front-End-Https
Surrogate-Control
X-RateLimit-Reset
X-Acc-Exp
X-User-Agent
X-DDC-Arch-Trace
X-Jimdo-Instance
X-Jimdo-Wid
Public-Key-Pins
Refresh
Xkey
X-Cache-Config
X-HS-Combine-CSS
X-XN-Trace-Token
X-XN-XNHTML
X-Middleton-Display
X-Middleton-Response
Display
X-StackifyID
Response
X-Sol
Fpc-Cache-Id
X-Age
X-Servedby
X-Tumblr-Content-Rating
X-SS-Conf
X-SS-Location
X-DNS-Prefetch-Control
X-Wix-Renderer-Server
X-Zen-Fury
X-Hostname
X-Vtex-Processado-Em
X-Generated-By
X-Cached
X-Px
X-OneAgent-JS-Injection
X-N-OperationId
X-Microcachable
X-HOST
PageSpeed
X-Cdn
X-Topify-Platform
X-Tumblr-Pixel-5
X-Frame-Option
X-MiniProfiler-Ids
X-Url
X-Cached-By
X-Request-Time
TCN
X-Whom
X-Correlation-Id
X-Ruxit-JS-Agent
X-Magento-Tags
X-CMS-Version
X-WebKit-CSP
X-Amz-Version-Id
P-LB
P-WS
Rt-Fastcgi-Cache
X-Kinsta-Cache
X-Outils-CS
X-Handled-By
X-URL
X-Content-Options
X-Varnish-TTL
X-DynaTrace-JS-Agent
Product
X-FORWARDED-FOR
X-B-Cache
Surrogate-Key
X-Via-JSL
X-AspNetWebPages-Version
Edge-Control-Message
Imagetoolbar
Host
X-Forwarded-For
X-DynaTrace
Access-Control-Request-Method
X-Msg-2-Log
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Engine
X-Varnish-Cache-Hits
Powered
X-From
X-Edge-Location
X-Debug-Info
ServedBy
X-Recruiting
X-CacheServer
X-LBLID
Fhost
Fastly-Debug-Digest
X-Track
X-Umbraco-Version
X-Cache-Rule
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Remote-Cache
X-Vtex-Processed-At
No
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
Alternate-Protocol
X-NWS-LOG-UUID
X-ApacheServer
X-PERF
X-Response-Time
X-Signature
X-Goog-Hash
Public-Key-Pins-Report-Only
X-Platform
X-Application-Context
Generator
X-Micro-Cache
X-Actual-URL
DynaTrace
X-Original-Request
X-Passed-To
X-Passed-To-DLL
X-Returned-From
X-Returned-From-DLL
X-Powered-By-VTEX-Janus-Edge
X-Cache-Age
WZWS-RAY
X-Powered-By-360WZB
Dmn
X-Location-Id
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Developer
X-Returned-From-PostProcessResponse
X-Upstream
X-Hosted-By
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
Arr-Disable-Session-Affinity
X-Accel-Expires
X-Stale
Akamai-IP
X-VARNISH-Cache
X-RESOURCE
X-LB
X-Supported-By
X-LW-Cache
X-Source
X-URLSCHEME
X-Instart-Request-ID
X-Version
HTTPS
X-Cache-Info
X-Rocket-Nginx-Bypass
Fastcgi-Cache
X-UD-Method
X-Platform-Router
X-Platform-Processor
X-Pantheon-Site
X-Varnish-Host
Retry-After
X-Pantheon-Phpreq
X-Pantheon-Environment
X-Defender
X-Shop-Id
X-TransIP-Balancer
Surrogate-Key-Raw
X-S
Content-Hash
X-Magento-Cache-Debug
X-Device-Type
Cache-Provider
X-Platform-Cluster
X-Tumblr-Pixel-6
X-HS-Content-Campaign-Id
X-I-Sp
X-BS
X-Fastcgi-Cache
X-Storage
Origin
X-NetCat-Version
X-Rnd
X-F-Cache
X-Cache-TTL
X-AOL-HN
X-CSRF-Protection
X-Matrix-Proxy
X-TransIP-Backend
X-Matrix-Server
X-EdgeConnect-Origin-MEX-Latency
X-Varnish-Count
Version
X-Varnish-HitMiss
X-Art-Request-Id
X-Cache-Tags
X-I
X-App-Hosting
X-Cache-Key
X-Dispatcher
X-ATG-Version
X-Gamma-Serve
X-EdgeConnect-MidMile-RTT
X-Varnish-ObjectSource
X-Varnish-Seen-By
X-Varnish-GracePeriod
X-Varnish-RemainingTTL
X-Varnish-RemainingLife
Last-Published
X-Route-Server
X-Platform-Server
X-Powered-By-VelaWeb
Ohc-File-Size
Allow
X-Front
USPLoggingUUID
IBM-Web2-Location
X-Microcache-Status
X-Translation
X-Server-ID
X-Page-Cache
X-Daa-Tunnel
X-Expires-Orig
X-LB-Node
Powered-By-ChinaCache
X-Director
X-Ua-Device
X-Server-Upstream
X-Abgroup
Pagespeed
X-Hypernode
X-Content-Encoded-By
RTSS
X-SSL-Cipher
Cache-Key
X-SSL-Protocol
Pool
X-Cache-Debug
X-Environment
X-Drupal-Cache-Tags
X-Flow-Powered
Accept-Encoding
X-Cache-Operation
X-ARC
X-Revision
X-Vcap-Request-Id
Wsr-Cache
SSPAppContext
X-NoCache
X-Loopia-Node
Content-Disposition
Content-MD5
MIME-Version
X-Varnish-Age
Lsrequestid
X-Platform-Cache
X-Debug
X-SV-Pid
X-SV-FromDBCache
X-UPSTREAM
X-SV-CacheTags
X-SV-Cacheable
X-Ttl
X-SV-CreatedAt
X-SV-Edge
X-SV-Duration
X-SV-Expires
X-SV-Nginx-Duration
Node
Page-Completion-Status
X-Grace
X-Hiawatha-Cache
Srv
X-Dispatch
X-Edge-IP
X-Github-Request-Id
X-Forwarded-Proto
X-Lambda-Id
X-Cache-Only-Varnish
X-Varnish-Cacheable
X-Url-Base
X-Sentry-ID
X-GeoIP-Country-Code
X-Generated
X-Id
Pv
X-Cache-Expires
X-Cache-Control-Orig
X-Litespeed-Cache
Location
X-Ezoic-Cdn
X-Cache-Lifetime
X-IsCacheURL
X-Firenze-Processing-Time
X-Drupal-Cache-Contexts
X-ORACLE-DMS-ECID
ServerID
Content-Encoding-Handler
Fw-Via
X-PwB-Node
X-RequestId
S-Cnection
Section-Io-Id
X-Cache-Server
X-CJ-Soft
X-Client-IP
X-ServerID
X-Sapient
Req-Id
Cneonction
X-Vhost
If-Modified-Since
FAI-W-FLOW
X-Dns-Prefetch-Control
Backend
ServerName
X-Speed-Cache-Key
Proxy-Connection
X-Speed-Cache
SN
Author
X-Magento-Cache-Control
X-Amz-Meta-S3cmd-Attrs
X-Cache-Type
X-Processing-Time
X-Duration
X-Cookie-Domain
X-Country-Code
X-Proxy
X-Server-Id
X-Nbs
X-GeoIP-Country-Name
Nodo
X-Cache-Engine
X-TTL
X-Browser
X-VTEX-Cache-Status-Janus-Edge
X-Location
X-N
Server-Name
X-Discourse-Route
PICS-Label
X-ACMCache
IM-Version
X-Goog-Stored-Content-Length
X-Dynatrace-Js-Agent
X-Goog-Storage-Class
X-Worker
X-GUploader-UploadID
X-Orig-Vary
X-SRCache-Key
X-NB-Cached-Page
X-Content-Age
X-Cache-CFC
X-Yadis-Location
X-Goog-Generation
X-Middleware-Start
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-FW
X-Nginx-Cache
X-Geo-Country
X-Webkit-CSP
X-Akamai-Device-Characteristics
X-Magnolia-Registration
X-Wix-Punisher
X-Cache-Control
Local-Info
X-Akamai-Device-Model
X-Time
SRV
X-Abuse
X-BackendServer
X-Cache-Namespace
X-Server-IP
X-Akamai-Transformed
AMF-Ver
NnCoection
X-Always-Cache
X-WR-Flags
SEOMOZ
X-Cluster-Node
X-Varnish-Url
Pf.Web.Request.Id
X-Cache-Level
X-Correlation-ID
MJ12bot
X-Varnish-Backend
Qs-Cache
X-Frontend
X-Framework
X-Sucuri-ID
Use-Proxy
Thanks
Cached
Accept-Charset
Cache
X-App-Server
Cm-Server
X-Pressidium-NinukisWP-Ver
S
X-SO
Server-Info
X-Cache-Fix
X-SERVER-NAME
X-Cache-PageType
X-Ss-Conf
HCVer
X-Real-Server
X-Ss-Location
HAVer
X-DealerOn
X-Purge-URL
X-Cache-Device-Type
Xc-Version
X-Srv
X-BKSrc
X-Shield-Request-Id
X-Config-Blacklist-Version
X-Session-ID
X-Processed-By
X-CDN-Forward
SVR
X-Runtime-Rack
X-Amz-Storage-Class
X-JG-Page-Cache
Pics-Label
X-Empowered-By
X-Sucuri-Cache
X-Purge-Host
Server-Timing
X-Last-Modified
NetMindSessionID
X-Route-To
X-Traffic
X-Origin
MC
X-Content-Security-Policy-Report-Only
SiteSpeed
X-Fastly-Request-Id
X-AF-Userserver
X-Litespeed-Cache-Control
X-FTR-Request-ID
X-FastCGI-Cache
X-Cf-Powered-By
X-Varnish-IP
Magicmarker
W
X-Content-Type-Option
Content-Transfer-Encoding
X-ClientSide-Caching
Tracecode
X-DataDome
X-VARITI-CCR
X-LB-Server
EagleEye-TraceId
Eomportal-Instance
A-Powered-By
X-PF-Uncompressing
X-SDS
Nitro-Cache
X-HTML-Minification-Powered-By
X-Cache-Handler
WWW-Authenticate
X-Pagename
X-Hit-Cache
X-Varnish-Retries
X-High-Performance
X-CF-Passed-Proto
X-Drectory-Script
Frame-Options
P-ID
X-FireWall-Port
X-Runtime-Memory
X-Yottaa-Optimizations
X-Esi
CacheControlHeader
X-Server-Instance
X-Unbounce-PageId
X-SRV
AC-ELC
Cache-Tag
X-Unbounce-VisitorID
X-Unbounce-Variant
X-Yottaa-Metrics
X-Sys-Req-ID
X-Twitter-Response-Tags
X-Varnish-ID
X-Unique-ID
NODE
X-Transaction
X-Connection-Hash
X-HOSTNAME
X-LP
HitType
X-HW
X-AVG-Country-Code
X-Rq
Keywords
X-Akamai-Edgescape
X-Avg-Cookie-Expires
X-Amz-Meta-Cb-Modifiedtime
X-Domain-Checked
X-App-Status
X-Directory-Script
AsisCache
X-Provisioner-Version
X-VNode
X-Redman-Final-Url
X-Cache-TTL-Remaining
X-Cache-Doesi
X-CB-Server
X-Redman-Backend
WN
X-Clara-ASAP
X-ASAP-Cache
Ufe-Result
ServerTokens
X-ORACLE-DMS-RID
X-Client-Image-Vid
X-Client-Vid
Content_type
X-Adobe-Loc
X-Adobe-Content
ServerSignature
VANITY-HOST
X-WN-ClientGroup
X-NginX-Cache
Cache-Tags
X-EPiphany-Vid
X-Varnish-Hits
Web-App-Origin-Name
X-ID
Adm-Server
Backend-Timing
X-Sorting-Hat-Expire-Cache
X-Runtime-Affili
X-Rocket-Nginx-Serving-Static
X-WPL-DATA
X-OpenCart-Lightning
Proxy-Agent
X-LW-Web-Server
X-Balanceador
X-App-Runtime
X-Mobilized-By
From-Origin
X-Analytics
X-Varnish-Ttl
X-ARRServer
From
X-Garden-Version
X-ServerIndex
VServer
X-CAPServer
X-Page
X-GeoIP
Front
X-AEM
SBGI-9
Play-Detected-Device
X-Varnish-Hostname
Play-Detected-UserAgent
X-Varnish-Debug-TTL
X-HP-Trace-Project
X-Varnish-Debug-Age
X-Mobile-URL
SBGI-Device
X-Jphone-Copyright
Access-Control-Allow-Header
SBGI-RenderTime
X-Trace-Id
X-Key
Ramp
X-Disney-Akamai-Rule
Ram
X-GoCache-CacheStatus
X-PRAM
Noq
X-Debug-Token
SBGI-RealPath
X-RiS-UFDI
X-MCB-Server
X-HP-Trace-ID
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
Max-Age
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-Atraveo-ETag
X-Webkit-Csp
X-Render-Time
Dispatcher
X-Source-ID
X-Atraveo-Cache-Control
X-Atraveo-Varnish-Server-Id
X-Atraveo-Param-Rm
SBGI-10
SBGI-5
X-Force
Description
SBGI-7
X-Atraveo-Zone
SBGI-1
Contao-Page-Layout
X-Webstats-RespID
X-A
X-Culture
X-Hosting-Env
X-Nginx-Host
NLCacheNote
SERVER-ID
Beyond-Iis
X-Backend-Status
X-Resty-Request-Id
X-Generated-Time
Machine
X-SDE-Name
X-Fedora-School-Id
ScoreTracker
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
Smug-CDN
X-Viator-Tapersistentcookie
TC-Cache
X-CacheResult
X-RDP
Og
X-Cache-Keep
Resin-Trace
X-NginX-Server
TC-Cache-IC
X-Varnish-Server
SG
N365rili
X-Cache-Node
X-App
X-Cache-On
X-E
X-Bip
Ibf5scheme
Hname
X-MAT-GEO
X-Wikidot-Backend
X-Plat
X-Machine-Name
X-Desc
Cteonnt-Length
X-Frames-Options
BALANCEDTO
X-Wikidot-Static-Cache
TC-Cache-U
X-SmugMug-Values
X-Detected-Device
X-Real-IP
X-Cdn-Forward
X-Smartcache-Timeout
X-TTFB
Strikingly-Cache-Region
Strikingly-Cached
XDomainRequestAllowed
X-WP
X-Env
X-WebKit-CSP-Report-Only
Strikingly-Cached-Version
X-SmugMug-Hiring
X-TTFB-L
X-Symfony-Cache
X-Remote-Addr
TC-S-Cache-M
X-Smartcache-Keys
TC-S-Cache
X-Resolver-IP
X-HydroSheep
X-Dev
Dis-Env
MS-CV
AMP-Access-Control-Allow-Source-Origin
X-V
Worker
X-Cms-Mode
Lb
X-Proto
X-AutoRu-App-Id
X-Autoru-Host
X-Autoru-LB
X-Airee-Node
MW-Webserver
X-Varnish-Ip
X-VC-TTL
Id
Custom-Header
X-VC-Enabled
Fastly-Backend-Name
Bios
X-Fstrz
Device
Cmstype
X-Rack-Cors
Cmsid
X-IIJ-Cache
X-Stage
PagesDisplayed
F5-IpCliente
Il-Cl
Myheader
X-Batcache-Reason
X-Captured
X-Batcache
OriginServer
Gzip
CLMOB
COMMERCE-SERVER-SOFTWARE
Traffic-Origin
X-Data-Request
Service-Worker-Allowed
X-DTC
X-Proxy-Cache-Key
X-Webcelerate
Ews
X-Adnet
SHInfo
X-FPC
Hostname
Home
WebServer
X-Info
ClientIP
X-Aramark-SID
X-Highwire-RequestId
X-Highwire-SessionId
X-MSEdge-Ref
X-Map-Context
X-B2f-Not-Route
X-Session-Reinit
X-Refresh
X-DN-Cache-Control
X-Server-Generated
X-Cache-Dispatcherpragma
X-Origin-Server
X-SmartBan-Host
X-Akamai-3PM-SW-Version
X-Varnish-Cache-Local
X-Cache-Dispatchercachecontrol
X-Req-Head-Response
Proxy-Cache
Arrnode
X-Amz-Meta-S3b-Last-Modified
X-SmartBan-URL
X-Apm-Telemetry-Syncmark
X-Gyrobase-Publication
X-EC2-Instance-Id
Nginx-Cache
X-Amcomm-Site
X-7d-Instance-Id
X-Compressed-By
X-7d-Trace-Id
X-ETag
IISExport
X-SH-Cache-Status
Hamster
X-Rewrite
X-Distributor
X-HashTwo
X-GSL-Server
X-Dw-Trace-Id
Disablevcache
Content-Server
X-CRA-DC
ViewMode
X-Magento-Action
X-TB-M
X-Response
X-Pj-Cache-Status
Identity
X-OPNET-Transaction-Trace
X-Hstore
X-WR-MODIFICATION
X-Confluence-Request-Time
Paypal-Debug-Id
X-Hrouter
X-MidCOM-Meta-Cache
X-Goog-Meta-Policy
X-WA-Info
X-Unique-Id
X-RealServer
X-Protected-By
RN-Server
X-Goog-Meta-Replace
NtCoent-Length
X-PM-ID
X-Grid-Server
Cleartype
X-SV
Xc
X-Header
Server-Id
X-KoobooCMS-Version
Url
Warning
X-Rack-CORS
X-Varnish-Action
X-Dynamic-Cache
X-HostName
BackendServer
X-CACHE-TTL
X-Avvio-Cms-Cacheload
X-W3TC-Minify
X-UA
X-Cocoon-Version
X-Backend-Host
ServerIP
Server-ID
X-Forwarded-Host
X-Hash
Web
X-ProcessESI
SS
Session-From
X-Flex-Evend
X-Flex-Lastmod
Yoncu-Errno
X-DDM-SERVER-UPDATED
X-Flex-Lang
X-Cache-TTL-Age
PServer
X-Cache-Id
X-Flex-Evstart
X-Flex-Community
X-CacheID
X-Zendesk-Origin-Server
X-Zendesk-User-Id
X-Cache-Extended
X-Beatles
X-Cache-Via
X-M
DNNOutputCache
X-RemovedCookies
X-Gateway-Skip-Cache
X-Gateway-Cache-Status
X-Src-Webcache
X-Powered-By-Home.Pl
FRONT-END-SECUREBROWSER
Edgecast
Aoestatic
X-IP
X-Gateway-Cache-Key
X-Depends
X-Secret
X-SuperCache
X-Cache-TTL-Current
X-Flex-Tag
CommunityServer
X-We-Are-Hiring
X-Does-He-Have-Time
X-PHP-Response-Code
SB-Cache-Life
SB-Cache-Remaining
X-DSMX-Render-MS
X-JSESSIONID
SB-Site-Device
Hosted-By
X-Redirector
X-Streams-Distribution
X-Sc-Cache
XX
X-Nginx
X-Cache-Set
User-Agent
X-Varnish-Id
Ctx
X-Cache-Time
X-Goog-Meta-Goog-Reserved-File-Mtime
Accept-Language
X-Old-Content-Length
X-Flex-Tags
X-Machine
Hummingbird-Cache
X-LBPoolMember
X-Tag-Playlist
X-DDM-SERVER
X-Magento-Lifetime
X-Beatles-Hits
X-Your-GrandPa-Would-Wait
X-Bcwwwid
X-ENV
X-DSMX-Rewrite-MS
X-Lb
X-VC-Cache
X-Origin-Cache
X-TTL-Age
X-Ghost-Cache-Status
X-Would-Your-GrandPa-Wait
X-ASAP-Age
X-Author
X-HS-Status
X-FORWARDED-PROTO
Provider
Server-Ip
NZSpeedy
X-Pagely-Cache
X-ReqId
X-ACCELERATE
X-Reflector
VC-NoCache
Viewport
X-DB-Content-Length
Serverid
X-HP-CAM-COLOR
Mime-Version
X-HAProxy
X-Dynatrace
X-Resource
X-Lw-Cache
X-4ormat-Cacheable
X-Serv
X-RAMCache
X-CSRF-Token
X-Served-Server
X-Server-Addr
X-Reflector-Cache
X-Netrix-ID
X-ManagedFusion-Rewriter-Version
X-HA
X-Instance
X-Middleton-PageSpeed
X-FastCGI-Cache-Status
X-DynamicCache
X-Az
X-Cache-Detail
Requested-Host
X-Debug-Message
X-Mobile-Rewrite
X-UT-Cache
X-Blog
X-Hosting
X-Say-Cacheable
X-Say-TTL
X-CH-Device
X-Amz-Id-1
X-Distil-CS
X-SilverStripe-Cache
Note
RequestId
X-AppVersion
X-Activity-Id
X-Deity
X-VG-WebCache
X-Uncacheable
X-Made-On
X-Cname-TryFiles
Kanooh-Host
RSB-LINK
Tempo
Progma
Upgrade-Insecure-Requests
X-SE-Debug
X-Served
Quri
Tesla.Performance
Uuri
X-Clx-Request
PB-RID
PB-PID
X-Server-Ip
Generate-Time
X-MSU-SOURCE
X-SayCDN-TTL
X-Status
X-Cache-Me-Harder
X-Client-Ip
X-Cluster
X-DEBUG
X-Upstream-Backend
X-Box
X-PBS-Fwsrvname
X-Upstream-Status
TP-Cache
TP-L2-Cache
X-UnsetCookies
X-RequesterIP
X-Domino-CacheValidationWithETagReason
X-Domino-CacheValidationWithETagResult
Ec-CorrId
Ec-Machine
X-FIRSTBase
X-NodeID
X-Sid
X-Timestamp
X-Via-NSCOPI
X-PBS-Appsvrname
X-PBS-Appsvrip
Access-Control-Allow-Method
X-Instart-Cache-Id
X-Litespeed-Tag
X-Nginx-Request-Time
WP-AdvCache-MemCached
Session-Id
Provided-Host
Referer
CDCHOST
SB-Site-IE-VERSION
X-Ser
X-AMAZEEIO
X-Cache-FS-Status
X-Nginx-Request-Processing-Time
X-Instance-Id
X-NewsFlow-Sitename
X-Application
NS-VaryByCustom-Key
X-Gannett-Site-Version
Access-Control-Request-Headers
Fastly-Restarts
X-AppServer-Cache-Rule
X-Artvisual-Server
X-Turpentine-Esi
X-AISO-Server
X-VC-Cacheable
X-Search-Id
X-SCM-Server-Number
X-Pixelsilk-Server
X-Pixelsilk-Version
X-Cache-V
X-VC-Debug
X-VC-Hash
Cache-Status
X-Amz-Meta-Content-Md5
X-XHR-Current-Location
Ttl
EN-User
X-AISO-Cacheable
X-AISO-Cache
StatusCode
X-Max-Age
X-Full-Url
X-Enhanced-By
X-DS1D
Microcache
Cacheid
X-XHTML-Minification-Powered-By
X-Pubstack
X-Rewritten-By
X-Test-Debug
Www.Aujourdhui.Com
X-Backend-Name
Expiries
Debug-Status
X-Node-ID
MachineName
MwpReleaseVersion
X-Cache-Original-TTL
X-Cjtype
X-Time-Microsecs
ServerNode
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Generation-Time
X-Environment-Context
X-Header-Treatment
X-Enabled3
X-Cache-Varnish
X-Node-Name
X-L-Path
X-Enabled1
X-Enabled2
X-Route
X-D-Time
AR-ATIME
AR-CACHE
AR-PoweredBy
AR-SID
!~Request-OOB-Work
X-Catalyst
EQ-Cache
Control-Cache
X-Config-By
X-S-Misc
X-Router
X-DevSrv-CMS
X-CCM
X-Custom-Header
Dynatrace
X-Oneagent-Js-Injection
X-Cache-Ttl
X-ESI
X-Oracle-DMS-ECID
X-Ssl-Cipher
X-Ruxit-Js-Agent
X-CDN-RULE
X-CDN-COMPRESS
X-AWS
X-FG-RequestId
X-Archive-Orig-Date
X-Archive-Orig-ETag
X-Built-By
X-PBY
X-Archive-Orig-Server
X-Server-App
X-Cache-Date
X-Debug-Serve
CpuTime
GranicusServer
X-WebNode
Powered-By-VeryCDN
X-Request-Received
X-Server-Instance-Name
Language
X-Compress-Hint
X-Request-Processing-Time
X-Archive-Orig-Connection
X-Cache-Warmer
WP-FROM-CACHE
X-Instance-Name
X-LB-Backend
X-Meta-Imagetoolbar
X-LB-Frontend
Realaction
MSThemeCompatible
Actioncode
X-Varnish-Cached-TTL
CS-SERVER
Httpd-Identifier
MSSmartTagsPreventParsing
X-Meta-MSSmartTagsPreventParsing
X-Meta-MSThemeCompatible
X-WHO
TTL
Memento-Datetime
X-NewRelic-App-Data
X-UPSTREAM-Address
X-Archive-Guessed-Charset
CD4
Actual-Object-TTL
Swift-Performance
X-Restarts
X-Server-Vrn
X-Wm-1
X-Wm-VIP
X-Archive-Orig-Content-Length
X-Varnish-Esi-Access
X-S-C
X-S-V
UrlWatchModule-Time
Key
OracleCommerceCloud-Sandiego
CommercePlatform-Version
AMFplus-Ver
X-Transaction-Name
X-ProBase-Server
X-Serverid
X-T
OracleCommerceCloud-Version
X-Q-S
X-M-T
X-M-P
X-M-V
X-Pageid
X-Mw-Workerstats
X-I-V
X-Cacheable-TTL
X-B
X-Beresp-Ttl
X-Pool-Info
X-Cachable
X-Origin-Upstream-Status
X-NewCloud-V-Cache
MageStack-Cache
MageStack-Area
MageStack-Cache-Hits
MageStack-Cache-Lifetime
MageStack-Cache-Status
X-Varnish-Store
X-MyName
X-Fastly-Backend-Reqs
X-Varnish-Currency
X-Nocache
X-Varnish-Esi-Method
MageStack-Cacheable
MageStack-Config
MageStack-Tag
X-Healthy
ReqUrl
MageStack-Web-Node
X-Backend-TTL
MageStack-PageSpeed
X-Middleton-Pagespeed
X-Varnish-Cached
MageStack-Debug
MageStack-Loadbalancer
MageStack-Magento-Version
X-OCTOPOD
Cookie
X-Svr
X-IP-Address
Accept-CH
X-ZSITES-DNS
X-VCS-Cacheable
X-This-Proto
X-PROCESSED-BY
SINA-LB
Aurora-Node
SINA-TS
X-BeResp-Ttl
X-Cache-2
X-VCS-Ttl
X-WAF-Proxy
X-ELB
X-Varnish-Grace
X-MainProfileCategory
X-MainProfileID
X-MainProfileName
X-Who
X-Nginx-Page-Cache
X-Cache-Bypass
XDisk
DrivedBy
X-CO-Host
X-PG
Fw-Cache-Status
CmsfirstPublishTimestamp
X-ACLR-Version
X-Czt
Countrycode
X-Layout
X-Accel-Cache-Control
Copyright
X-Time-Zone
X-Varnish-Instance
X-VLoc
X-Server-FQDN
X-Memcached
X-BC
X-ZORequestID
X-Ants-Host
Y-Trace
Yola-ID
WSCLoggingUUID
X-Title
X-Ants-Machine-Id
Cache-Ctrol
Head
Response-Time
X-Server-Ident
X-MainProfileURL
X-Powered-Developer
X-Service-Id
X-Proxy-Id
X-ServiceProvider
DB-Nickname
IES-Server
X-Distributed-By
Webserver
Content-Cache
DbServerName
FindLaw
Rewriter
Load-Balancer
Request-Time
X-Nitro-Cache
X-MCF-ID
X-Script
X-ServerAddr
X-Sn-Servicetimems
X-LOCATION
X-Fpc
X-B3-Spanid
X-B3-Traceid
X-Built-With
X-CPU-Time
X-Upgrade-Enabled
X-EBAY-C-REQUEST-ID
VAR-Cache
Page-Template
X-Agent
X-Cache-Served
X-Brought-To-You-By
INFO
E-TAG
X-Not-Cacheable
X-Country
X-Varnish-URL
X-SID
X-Ar-Debug
X-Config-Version
X-REDIRECTSERVER
OutputRewritten
X-Rocket-Nginx-File
X-Rocket-Nginx-Reason
X-Skip-Cache
X-Geo-IP
Apple-Itunes-App
X-Container
RlogId
X-DeliveryServer
X-Dynamic
X-UPServer