Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
P3P
X-AspNet-Version
X-Pingback
Age
Content-Language
Via
X-UA-Compatible
Expect-CT
Access-Control-Allow-Origin
Upgrade
X-Adblock-Key
X-Xss-Protection
Content-Security-Policy
X-Cacheable
X-Varnish
X-Check
X-Template
X-Language
X-Generator
Alt-Svc
X-Buckets
X-Request-Id
X-Drupal-Cache
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Powered-By-Plesk
X-Download-Options
Content-Location
Host-Header
X-Runtime
X-ShopId
X-Sorting-Hat-ShopId-Cached
X-Dc
X-Sorting-Hat-PodId
X-ShardId
X-Sorting-Hat-ShopId
X-Sorting-Hat-Section
X-Sorting-Hat-PodId-Cached
X-Alternate-Cache-Key
MS-Author-Via
X-FRAME-OPTIONS
P3p
Cartoon
X-UA-Device
X-Powered-CMS
X-IPLB-Instance
X-Served-By
Access-Control-Allow-Headers
Status
Access-Control-Allow-Credentials
X-Amz-Cf-Id
Access-Control-Allow-Methods
X-Cache-Status
X-Via
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
CF-Cache-Status
X-Contextid
X-Backend
Referrer-Policy
Powered-By
X-PC-Key
X-PC-Hit
X-Mod-Pagespeed
X-ServedBy
X-PC-AppVer
X-PC-Date
X-PC-Host
X-DIS-Request-ID
X-WPE-Loopback-Upstream-Addr
Content-Encoding
X-CST
X-Logged-In
X-Request-ID
Keep-Alive
X-Rid
X-Server
X-Cache-Hit
X-Host
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-Port
X-CDN
X-Tumblr-Pixel-1
X-Cache-Enabled
X-Server-Powered-By
X-Robots-Tag
X-Endurance-Cache-Level
X-Tumblr-Pixel-2
X-Nginx-Cache-Status
X-Seen-By
X-Wix-Request-Id
X-Wix-Server-Artifact-Id
X-Accel-Version
X-Turbo-Charged-By
X-Original-Date
X-Page-Speed
X-Drupal-Dynamic-Cache
X-Pad
X-Content-Powered-By
Content-Security-Policy-Report-Only
WP-Super-Cache
X-Content-Digest
X-Proxy-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Rack-Cache
X-AH-Environment
X-Tumblr-Pixel-3
X-LiteSpeed-Cache
X-Varnish-Cache
X-GitHub-Request-Id
X-Ua-Compatible
SPRequestGuid
X-Request-Country
X-SharePointHealthScore
X-XRDS-Location
Edge-Control
X-MS-InvokeApp
X-Cnection
MicrosoftSharePointTeamServices
X-Cache-Lookup
Timing-Allow-Origin
Cf-Railgun
X-Died
X-Node
X-Amz-Id-2
X-Amz-Request-Id
X-FW-Hash
X-Trace
Charset
Request-Id
X-FW-Static
X-FW-Serve
X-FW-Type
Edge-Cache-Tag
X-FullPageCaching
X-Content-Security-Policy
X-Webserver
X-Webcom-Cache-Status
X-HS-Cache-Config
X-HS-Content-Id
MicrosoftOfficeWebServer
X-PhApp
X-CF-Powered-By
X-Safe-Firewall
X-Hits
Request-Context
SPIisLatency
SPRequestDuration
X-Newrelic-App-Data
X-INKT-URI
X-INKT-SITE
Access-Control-Max-Age
X-BC-Stapler
Composed-By
X-PHP-Backend
Access-Control-Expose-Headers
Grace
X-Tumblr-Pixel-4
X-Swift-CacheTime
X-Swift-SaveTime
EagleId
Served-By
X-CDN-Pop-IP
X-CDN-Pop
X-Hyper-Cache
Liferay-Portal
X-Spip-Cache
X-Backend-Server
X-SERVER
X-Device
X-Dw-Request-Base-Id
X-Fastly-Request-ID
X-Microcache
X-Server-Name
X-LiteSpeed-Cache-Control
Rating
X-Wix-Renderer-Server
X-ServerName
X-VCache
X-RateLimit-Remaining
Content-Style-Type
X-RateLimit-Limit
X-FB-Debug
X-Cloud-Trace-Context
X-Clacks-Overhead
Content-Script-Type
X-RateLimit-Reset
X-DDC-Arch-Trace
X-User-Agent
X-Jimdo-Wid
X-Jimdo-Instance
Surrogate-Control
X-Loop
Real-Hostname
X-TNCMS
X-Acc-Exp
X-Cache-Config
X-Firenze-Processing-Times
Front-End-Https
Public-Key-Pins
Refresh
X-Tumblr-Content-Rating
X-XN-Trace-Token
X-XN-XNHTML
X-Middleton-Response
X-Middleton-Display
Display
Response
X-Sol
X-HS-Combine-CSS
Fpc-Cache-Id
X-Servedby
X-StackifyID
X-Age
Xkey
X-DNS-Prefetch-Control
X-Microcachable
X-SS-Location
X-Hostname
X-SS-Conf
X-Generated-By
X-Tumblr-Pixel-5
X-Cached
X-Zen-Fury
X-Vtex-Processado-Em
X-Px
X-OneAgent-JS-Injection
X-N-OperationId
X-Cdn
PageSpeed
X-MiniProfiler-Ids
X-Topify-Platform
X-Correlation-Id
X-Request-Time
X-Cached-By
X-Frame-Option
TCN
X-Ruxit-JS-Agent
X-CMS-Version
P-WS
P-LB
X-URL
X-Kinsta-Cache
X-Whom
X-Amz-Version-Id
X-WebKit-CSP
X-DynaTrace-JS-Agent
X-Outils-CS
X-Magento-Tags
X-Url
Edge-Control-Message
Rt-Fastcgi-Cache
X-Handled-By
Product
X-Content-Options
Surrogate-Key
X-B-Cache
X-Varnish-TTL
X-Via-JSL
X-AspNetWebPages-Version
X-VARNISH-Cache
Host
Imagetoolbar
X-SRCache-Fetch-Status
Powered
X-SRCache-Store-Status
X-Edge-Location
X-Forwarded-For
Access-Control-Request-Method
X-CacheServer
X-Engine
X-Debug-Info
Fastly-Debug-Digest
X-DynaTrace
X-Cache-Rule
X-Track
X-Vtex-Remote-Cache
X-Vtex-Processed-At
X-VTEX-Cache-Status-Janus-ApiCache
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
No
ServedBy
Fhost
X-Recruiting
X-Umbraco-Version
X-Varnish-Cache-Hits
X-HOST
X-Application-Context
X-NWS-LOG-UUID
Public-Key-Pins-Report-Only
X-FORWARDED-FOR
Alternate-Protocol
X-LBLID
X-Powered-By-VTEX-Janus-Edge
X-Platform
X-Signature
X-Msg-2-Log
X-Goog-Hash
X-Actual-URL
X-ApacheServer
X-Returned-From-DLL
X-Passed-To
X-PERF
X-Original-Request
X-Passed-To-DLL
X-Returned-From
X-Cache-Age
X-Location-Id
WZWS-RAY
X-Powered-By-360WZB
X-Returned-From-PostProcessResponse
X-From
X-Tumblr-Pixel-6
X-Passed-To-BeforeDispatch
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Response-Time
X-Varnish-Beresp-Grace
X-Accel-Expires
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
Generator
X-Stale
Fastcgi-Cache
X-Developer
Arr-Disable-Session-Affinity
Akamai-IP
Dmn
Surrogate-Key-Raw
X-Pantheon-Site
X-Source
X-Upstream
X-Pantheon-Environment
X-Hosted-By
X-Pantheon-Phpreq
X-LW-Cache
X-Platform-Processor
X-RESOURCE
X-Micro-Cache
X-Platform-Router
DynaTrace
HTTPS
X-UD-Method
X-LB
X-BS
X-I-Sp
X-Rocket-Nginx-Bypass
X-Cache-Info
X-Platform-Cluster
X-URLSCHEME
Origin
X-Supported-By
Retry-After
X-Version
X-Rnd
X-Varnish-Host
X-Director
X-Device-Type
X-Fastcgi-Cache
X-Defender
X-Shop-Id
Content-Hash
X-TransIP-Balancer
X-NetCat-Version
X-Instart-Request-ID
Cache-Provider
X-S
X-Magento-Cache-Debug
X-Powered-By-VelaWeb
X-EdgeConnect-Origin-MEX-Latency
X-Storage
X-Cache-Key
X-Cache-TTL
Version
Last-Published
X-Page-Cache
X-Varnish-Count
X-Varnish-HitMiss
X-Dispatcher
X-HS-Content-Campaign-Id
X-App-Hosting
X-CSRF-Protection
X-F-Cache
X-EdgeConnect-MidMile-RTT
X-Front
X-ATG-Version
X-Cache-Tags
X-AOL-HN
X-Daa-Tunnel
X-TransIP-Backend
X-Art-Request-Id
X-Matrix-Server
X-Matrix-Proxy
USPLoggingUUID
X-LB-Node
X-Microcache-Status
Ohc-File-Size
Allow
X-Translation
IBM-Web2-Location
X-Revision
X-Drupal-Cache-Tags
Powered-By-ChinaCache
X-Gamma-Serve
X-I
X-Expires-Orig
X-Hypernode
MIME-Version
X-Dispatch
X-Server-Upstream
X-Platform-Server
X-Flow-Powered
Pool
X-Cache-Debug
X-Cache-Operation
X-Varnish-ObjectSource
X-Varnish-GracePeriod
X-Varnish-RemainingLife
X-Cache-Only-Varnish
X-ARC
X-Varnish-Seen-By
X-Varnish-RemainingTTL
X-Server-ID
X-Content-Encoded-By
X-Ua-Device
Pagespeed
X-SSL-Protocol
X-SSL-Cipher
Content-MD5
Content-Disposition
X-Lambda-Id
RTSS
X-Route-Server
Cache-Key
X-Platform-Cache
Node
SSPAppContext
X-Environment
X-SV-Cacheable
X-SV-Duration
X-SV-Nginx-Duration
X-SV-FromDBCache
X-SV-CreatedAt
X-SV-Pid
X-SV-Edge
X-SV-CacheTags
X-SV-Expires
X-Vcap-Request-Id
X-UPSTREAM
X-Loopia-Node
X-Drupal-Cache-Contexts
X-Cache-Lifetime
X-Abgroup
Lsrequestid
Wsr-Cache
X-Varnish-Age
X-ORACLE-DMS-ECID
X-Id
X-Edge-IP
Page-Completion-Status
X-Varnish-Cacheable
X-Github-Request-Id
X-NoCache
X-CJ-Soft
Accept-Encoding
X-Grace
X-Vhost
X-Hiawatha-Cache
X-Cache-Server
X-Cache-Control-Orig
X-Debug
Section-Io-Id
X-IsCacheURL
X-Generated
Content-Encoding-Handler
X-Ttl
Proxy-Connection
Srv
X-RequestId
Cneonction
ServerID
Fw-Via
Pv
X-Cache-Engine
Location
X-Cache-Type
Author
X-Firenze-Processing-Time
S-Cnection
X-Url-Base
X-SRCache-Key
X-Sapient
X-PwB-Node
X-GeoIP-Country-Code
X-Client-IP
X-Proxy
X-Orig-Vary
X-Sentry-ID
X-Cache-Expires
X-Ezoic-Cdn
X-TTL
X-VTEX-Cache-Status-Janus-Edge
Server-Name
X-Server-Id
X-Magento-Cache-Control
X-Akamai-Transformed
X-Nbs
X-Cache-Control
ServerName
X-Geo-Country
X-Dns-Prefetch-Control
If-Modified-Since
Backend
X-Litespeed-Cache
X-Country-Code
SN
X-N
X-ServerID
X-Magnolia-Registration
X-Nginx-Cache
X-Amz-Meta-S3cmd-Attrs
X-Browser
X-Duration
FAI-W-FLOW
X-Discourse-Route
X-Processing-Time
X-Content-Age
X-Speed-Cache-Key
X-Speed-Cache
IM-Version
Req-Id
Nodo
SRV
X-Always-Cache
X-Cache-CFC
X-Location
Server-Info
HAVer
HCVer
X-Ss-Conf
X-Yadis-Location
X-Ss-Location
X-FW
X-Time
X-Cookie-Domain
X-Dynatrace-Js-Agent
NnCoection
X-Middleware-Start
AMF-Ver
X-Cache-Namespace
NetMindSessionID
X-GeoIP-Country-Name
X-Akamai-Device-Characteristics
X-NB-Cached-Page
X-Sucuri-ID
X-Akamai-Device-Model
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-DealerOn
X-Varnish-Url
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-Worker
X-Varnish-Backend
X-Cache-Level
X-Goog-Generation
PICS-Label
X-Real-Server
X-Drectory-Script
SVR
X-SERVER-NAME
Cached
X-Pressidium-NinukisWP-Ver
X-Framework
Cm-Server
X-Cache-Device-Type
X-Correlation-ID
X-Cache-Fix
X-Cache-PageType
X-Processed-By
X-ACMCache
Use-Proxy
X-BackendServer
X-Sucuri-Cache
X-App-Server
Accept-Charset
X-Webkit-CSP
X-Shield-Request-Id
Pics-Label
X-SRV
S
X-Frontend
X-Origin
X-SO
X-Fastly-Request-Id
X-Cluster-Node
Qs-Cache
X-Litespeed-Cache-Control
X-BKSrc
X-Varnish-IP
Xc-Version
Magicmarker
MC
X-Abuse
X-Forwarded-Proto
Cache
Pf.Web.Request.Id
X-DataDome
X-LB-Server
X-Srv
Thanks
X-Purge-URL
Local-Info
X-Runtime-Rack
X-JG-Page-Cache
X-Server-IP
X-CDN-Forward
X-Config-Blacklist-Version
Tracecode
X-Amz-Storage-Class
X-Session-ID
Server-Timing
Content_type
X-LP
X-Traffic
X-Purge-Host
X-Last-Modified
X-Route-To
SiteSpeed
SEOMOZ
X-Rocket-Nginx-Serving-Static
X-CF-Passed-Proto
X-High-Performance
X-Varnish-Retries
MJ12bot
Nitro-Cache
WN
X-Hit-Cache
X-RiS-UFDI
X-Content-Security-Policy-Report-Only
A-Powered-By
X-Disney-Akamai-Rule
X-Pagename
X-PF-Uncompressing
X-WN-ClientGroup
X-WR-Flags
X-OpenCart-Lightning
X-Cf-Powered-By
X-FastCGI-Cache
SBGI-Device
X-NginX-Cache
X-Content-Type-Option
AC-ELC
SBGI-RenderTime
X-Varnish-Ttl
W
SBGI-10
SBGI-5
SBGI-7
SBGI-9
SBGI-1
SBGI-RealPath
X-Empowered-By
X-ClientSide-Caching
From-Origin
X-Sys-Req-ID
HitType
X-Varnish-Debug-TTL
X-Cache-TTL-Remaining
X-Balanceador
X-AF-Userserver
X-HTML-Minification-Powered-By
EagleEye-TraceId
X-Sorting-Hat-Expire-Cache
X-ASAP-Cache
X-Clara-ASAP
X-FTR-Request-ID
Keywords
X-App-Status
Eomportal-Instance
ServerSignature
X-Cache-Handler
X-ARRServer
X-Webkit-Csp
Frame-Options
X-Provisioner-Version
ServerTokens
X-SDS
X-Domain-Checked
X-Varnish-Debug-Age
X-ID
WWW-Authenticate
P-ID
X-VARITI-CCR
X-Mobilized-By
X-Esi
X-Connection-Hash
X-Runtime-Memory
X-Yottaa-Optimizations
X-Transaction
X-Generated-Time
X-Twitter-Response-Tags
Content-Transfer-Encoding
X-Yottaa-Metrics
CacheControlHeader
X-Jphone-Copyright
X-Webstats-RespID
Cache-Tag
X-Varnish-ID
SERVER-ID
Ufe-Result
X-Debug-Token
Description
X-Directory-Script
Cache-Tags
X-Client-Image-Vid
X-Client-Vid
X-Rq
X-Cache-Doesi
X-EPiphany-Vid
X-HW
Dis-Env
X-Akamai-Edgescape
X-Avg-Cookie-Expires
VANITY-HOST
X-Amz-Meta-Cb-Modifiedtime
X-Adobe-Loc
Adm-Server
Web-App-Origin-Name
X-Adobe-Content
X-AVG-Country-Code
Nginx-Cache
X-ORACLE-DMS-RID
X-Varnish-Hits
X-AEM
X-VNode
X-Redman-Backend
X-Redman-Final-Url
X-Resty-Request-Id
X-FireWall-Port
Backend-Timing
NODE
X-Fedora-School-Id
X-Unique-ID
Cmsid
X-Unbounce-Variant
Cmstype
Proxy-Agent
X-Unbounce-PageId
X-Server-Instance
X-Garden-Version
X-Unbounce-VisitorID
X-LW-Web-Server
X-Analytics
X-WPL-DATA
X-PRAM
X-Mobile-URL
X-ServerIndex
X-SmugMug-Values
X-HP-Trace-Project
X-HP-Trace-ID
Dispatcher
X-TTFB-L
Play-Detected-UserAgent
Play-Detected-Device
X-TTFB
Front
COMMERCE-SERVER-SOFTWARE
Smug-CDN
X-Rewrite
X-MCB-Server
Cteonnt-Length
XDomainRequestAllowed
Ram
X-Env
Noq
X-Key
X-CAPServer
Ramp
X-GSL-Server
X-SmugMug-Hiring
X-WebKit-CSP-Report-Only
X-Source-ID
X-Wikidot-Backend
X-Atraveo-Cache-Control
X-Atraveo-ETag
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
X-Varnish-Hostname
X-Wikidot-Static-Cache
Resin-Trace
X-HOSTNAME
X-Cache-Keep
X-GeoIP
BALANCEDTO
X-Remote-Addr
Max-Age
X-Atraveo-Param-Rm
X-Force
X-Page
X-GoCache-CacheStatus
X-Atraveo-Set-Cookie
X-CB-Server
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-CacheResult
X-Atraveo-Zone
X-App-Runtime
X-Dev
X-Cms-Mode
Worker
X-Runtime-Affili
X-A
X-Nginx-Host
NLCacheNote
Machine
X-Backend-Status
Beyond-Iis
Contao-Page-Layout
X-CACHE-TTL
X-Culture
X-SH-Cache-Status
Device
X-HydroSheep
X-Symfony-Cache
X-Resolver-IP
X-Real-IP
X-Frames-Options
X-Varnish-Server
X-Trace-Id
X-App
X-TB-M
X-OPNET-Transaction-Trace
X-E
X-Hstore
X-Hrouter
X-CacheID
X-Webcelerate
X-Detected-Device
X-Distributor
Disablevcache
TC-Cache
TC-Cache-IC
TC-Cache-U
X-Plat
X-NginX-Server
Paypal-Debug-Id
Og
TC-S-Cache-M
TC-S-Cache
X-Reflector-Cache
X-Cache-Node
X-Reflector
X-Smartcache-Keys
X-Smartcache-Timeout
X-CDN-COMPRESS
X-WP
Strikingly-Cache-Region
X-HP-CAM-COLOR
X-KoobooCMS-Version
Strikingly-Cached
X-CDN-RULE
Strikingly-Cached-Version
Access-Control-Allow-Header
From
X-Fstrz
Lb
AMP-Access-Control-Allow-Source-Origin
X-AutoRu-App-Id
X-Dynamic-Cache
MS-CV
BackendServer
Custom-Header
X-Autoru-Host
X-V
X-Autoru-LB
Bios
X-Proto
Web
Fastly-Backend-Name
X-Airee-Node
X-IIJ-Cache
X-VC-Enabled
X-Avvio-Cms-Cacheload
Id
X-VC-TTL
X-Varnish-Ip
X-Stage
X-Adnet
X-Compressed-By
Service-Worker-Allowed
X-Forwarded-Host
X-ENV
X-Proxy-Cache-Key
X-Desc
Myheader
Ews
X-Req-Head-Response
X-EC2-Instance-Id
Home
Il-Cl
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Map-Context
X-Sc-Cache
SHInfo
CLMOB
SG
Hname
X-DTC
X-FPC
X-Bip
X-Viator-Tapersistentcookie
Gzip
F5-IpCliente
Hostname
X-Hosting-Env
X-Render-Time
X-Cache-Dispatchercachecontrol
WebServer
ClientIP
Arrnode
X-Batcache-Reason
X-Captured
Identity
X-Batcache
X-Refresh
X-Session-Reinit
X-Server-Generated
X-Cache-Dispatcherpragma
X-Highwire-RequestId
Hamster
Ibf5scheme
N365rili
Content-Server
X-Info
X-MAT-GEO
X-WR-MODIFICATION
Yoncu-Errno
X-SDE-Name
X-Cache-On
X-MSEdge-Ref
X-Highwire-SessionId
X-RDP
X-Origin-Server
X-ETag
X-SmartBan-URL
X-SmartBan-Host
X-Machine-Name
X-Machine
X-DN-Cache-Control
Proxy-Cache
X-Amcomm-Site
X-Dw-Trace-Id
Access-Control-Request-Headers
X-Varnish-Cache-Local
X-Confluence-Request-Time
X-Ghost-Cache-Status
X-Cdn-Forward
ViewMode
X-Gyrobase-Publication
X-Pj-Cache-Status
IISExport
X-Ser
X-L-Path
X-Depends
X-Environment-Context
X-HashTwo
X-Magento-Action
X-Apm-Telemetry-Syncmark
X-Aramark-SID
OriginServer
PagesDisplayed
X-Akamai-3PM-SW-Version
SB-Cache-Remaining
SB-Cache-Life
SB-Site-Device
Traffic-Origin
X-B2f-Not-Route
ScoreTracker
X-Gateway-Cache-Key
X-Data-Request
X-Gateway-Cache-Status
X-Gateway-Skip-Cache
CommunityServer
X-Header
X-RAMCache
X-Rack-CORS
X-RealServer
X-Unique-Id
X-HostName
X-Protected-By
Xc
MW-Webserver
X-Goog-Meta-Replace
X-WA-Info
AsisCache
Serverid
Server-Id
X-Rack-Cors
X-W3TC-Minify
Url
X-Cocoon-Version
X-UA
RN-Server
X-Goog-Meta-Policy
Warning
Cleartype
NtCoent-Length
X-PM-ID
X-Grid-Server
Ctx
Fastly-Restarts
User-Agent
X-We-Are-Hiring
X-Flex-Lang
X-Nginx
X-JSESSIONID
X-Flex-Evend
X-Flex-Evstart
X-Cache-Set
X-Streams-Distribution
X-Flex-Lastmod
Hosted-By
X-Origin-Cache
VServer
X-VC-Cache
Accept-Language
X-Beatles-Hits
X-Redirector
X-Flex-Tag
X-PHP-Response-Code
X-Flex-Community
X-Flex-Tags
X-Amz-Meta-S3b-Last-Modified
X-Cache-Time
X-Cache-TTL-Age
X-Cache-TTL-Current
Session-From
ServerIP
X-Bcwwwid
X-ProcessESI
X-Would-Your-GrandPa-Wait
X-Cache-Via
X-Src-Webcache
Hummingbird-Cache
X-Beatles
X-Your-GrandPa-Would-Wait
X-RemovedCookies
X-Zendesk-Origin-Server
X-Does-He-Have-Time
X-DSMX-Render-MS
X-ASAP-Age
SS
X-Secret
Edgecast
X-DSMX-Rewrite-MS
X-TTL-Age
X-M
X-Powered-By-Home.Pl
X-Old-Content-Length
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Zendesk-User-Id
X-PBS-Appsvrip
X-PBS-Appsvrname
X-PBS-Fwsrvname
X-Not-Cacheable
X-NewsFlow-Sitename
X-MainProfileName
X-MainProfileURL
X-Middleton-PageSpeed
X-Upstream-Backend
X-Application
X-CRA-DC
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Timestamp
X-Container
X-Backend-Host
X-Cluster
X-MainProfileID
X-MainProfileCategory
X-Magento-Lifetime
X-Author
X-Litespeed-Tag
X-Tag-Playlist
SB-Site-IE-VERSION
Provided-Host
Referer
Aoestatic
X-Cache-Id
X-Catalyst
X-IP
X-Instance-Id
X-Cache-FS-Status
NS-VaryByCustom-Key
PServer
DrivedBy
X-Response
X-LBPoolMember
X-Varnish-Id
DNNOutputCache
X-ACCELERATE
X-SV
Mime-Version
VC-NoCache
NZSpeedy
X-Lw-Cache
X-CSRF-Token
X-DB-Content-Length
Viewport
X-Netrix-ID
X-Varnish-Action
X-Dynatrace
X-Pagely-Cache
X-Served-Server
X-Server-Addr
X-DEBUG
X-FORWARDED-PROTO
Provider
Server-Ip
X-4ormat-Cacheable
X-ReqId
X-Serv
X-HAProxy
X-HS-Status
X-Resource
AR-PoweredBy
X-Header-Treatment
AR-SID
EQ-Cache
X-Cache-Varnish
Control-Cache
X-Config-By
AR-ATIME
X-AppServer-Cache-Rule
!~Request-OOB-Work
X-Node-Name
X-BeResp-Ttl
X-Route
X-Router
AR-CACHE
X-Custom-Header
X-VC-Hash
X-Time-Microsecs
X-LOCATION
Progma
X-VC-Debug
X-VC-Cacheable
X-SCM-Server-Number
X-Search-Id
X-Turpentine-Esi
Ttl
X-Amz-Meta-Content-Md5
Microcache
X-DevSrv-CMS
X-Enabled1
X-Enabled2
X-CCM
XDisk
Services
ReqUrl
X-S-Misc
X-Enabled3
AMFplus-Ver
X-CH-Device
X-Hosting
X-Say-Cacheable
X-Say-TTL
X-Amz-Id-1
RequestId
X-HA
X-Mobile-Rewrite
X-UT-Cache
Note
X-SayCDN-TTL
Session-Id
X-Domino-CacheValidationWithETagReason
X-Domino-CacheValidationWithETagResult
Ec-CorrId
Ec-Machine
X-FIRSTBase
X-Via-NSCOPI
WP-AdvCache-MemCached
X-Instart-Cache-Id
X-Nginx-Request-Time
X-MidCOM-Meta-Cache
X-FastCGI-Cache-Status
X-DynamicCache
X-Deity
X-XHR-Current-Location
X-Made-On
X-Served
AccessControlAllowOrigin
X-Cname-TryFiles
RSB-LINK
Tempo
X-Generation-Time
Upgrade-Insecure-Requests
X-Server-Ip
Generate-Time
X-AppVersion
X-Az
X-Cache-Detail
X-Debug-Message
X-Activity-Id
Uuri
PB-PID
PB-RID
Tesla.Performance
X-D-Time
Quri
X-AISO-Cache
Access-Control-Allow-Method
X-7d-Instance-Id
X-Box
X-Cache-V
X-UnsetCookies
X-DS1D
X-Cache-Extended
CDCHOST
EN-User
X-ManagedFusion-Rewriter-Version
X-Pubstack
X-Rewritten-By
X-Agent
X-Distil-CS
Server-ID
X-Blog
MwpReleaseVersion
X-RequesterIP
X-Client-Ip
X-Skip-Cache
X-Status
X-AISO-Server
X-Gannett-Site-Version
X-SilverStripe-Cache
X-Instance
X-Upgrade-Enabled
X-Pixelsilk-Version
X-AMAZEEIO
X-Artvisual-Server
X-Enhanced-By
X-Uncacheable
X-SuperCache
X-NodeID
X-Nginx-Request-Processing-Time
X-REDIRECTSERVER
X-Geo-IP
X-Test-Debug
MachineName
X-Cjtype
X-Upstream-Status
X-DDM-SERVER
X-Hash
X-7d-Trace-Id
X-XHTML-Minification-Powered-By
X-Cache-Original-TTL
Kanooh-Host
X-Full-Url
X-Pixelsilk-Server
X-Node-ID
X-Max-Age
X-DDM-SERVER-UPDATED
Cache-Status
X-AISO-Cacheable
Debug-Status
X-Backend-Name
Expiries
TP-L2-Cache
StatusCode
ServerNode
TP-Cache
Www.Aujourdhui.Com
FRONT-END-SECUREBROWSER
INFO
Cacheid
X-Ruxit-Js-Agent
X-ESI
X-Oneagent-Js-Injection
X-Ssl-Cipher
X-Lb
Dynatrace
X-Oracle-DMS-ECID
X-Cache-Ttl
GranicusServer
X-Request-Processing-Time
X-Cache-Date
Powered-By-VeryCDN
Language
X-PBY
X-Debug-Serve
X-Request-Received
CpuTime
X-Server-App
X-Archive-Guessed-Charset
X-Instance-Name
X-Cache-Warmer
WP-FROM-CACHE
X-LB-Backend
X-LB-Frontend
X-Meta-MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
Realaction
MSThemeCompatible
X-Varnish-Cached-TTL
X-Varnish-Cached
Actioncode
CS-SERVER
MSSmartTagsPreventParsing
Httpd-Identifier
X-Meta-MSThemeCompatible
X-Restarts
X-Archive-Orig-Content-Length
X-Archive-Orig-Connection
X-Archive-Orig-Date
X-Archive-Orig-ETag
X-AWS
X-Archive-Orig-Server
Memento-Datetime
X-WHO
X-Wm-1
X-Server-Vrn
X-Wm-VIP
Actual-Object-TTL
TTL
CD4
X-Built-By
MageStack-Web-Node
X-M-V
X-M-T
X-Mw-Workerstats
X-Nocache
X-Pageid
X-M-P
X-I-V
X-B
OracleCommerceCloud-Version
X-Beresp-Ttl
X-Cachable
X-Cacheable-TTL
X-Pool-Info
X-Q-S
X-OCTOPOD
X-MyName
X-UPSTREAM-Address
X-WebNode
X-Server-Instance-Name
X-Middleton-Pagespeed
X-Healthy
X-S-C
X-S-V
X-T
X-Transaction-Name
OracleCommerceCloud-Sandiego
Key
MageStack-Cache-Lifetime
MageStack-Cache-Hits
MageStack-Cache-Status
MageStack-Cacheable
MageStack-Config
MageStack-Cache
MageStack-Area
X-Varnish-Currency
X-Varnish-Esi-Access
X-Varnish-Esi-Method
X-Varnish-Store
MageStack-Debug
MageStack-Loadbalancer
X-ProBase-Server
X-Origin-Upstream-Status
X-Serverid
CommercePlatform-Version
X-SE-Debug
X-NewCloud-V-Cache
X-Backend-TTL
MageStack-Magento-Version
MageStack-PageSpeed
MageStack-Tag
X-UPServer
X-Fastly-Backend-Reqs
VAR-Cache
WSCLoggingUUID
X-PROCESSED-BY
X-SID
X-VG-WebCache
Cache-Ctrol
Head
Apple-Itunes-App
X-Country
X-ELB
X-Who
X-Varnish-Grace
X-FG-RequestId
X-EBAY-C-REQUEST-ID
X-Accel-Cache-Control
X-Czt
X-Layout
X-Memcached
Copyright
Page-Template
Requested-Host
SINA-LB
SINA-TS
RlogId
X-ZSITES-DNS
Accept-CH
X-COUNTRY-CODE
Countrycode
X-Cache-Served
X-ServiceProvider
X-ACLR-Version
CmsfirstPublishTimestamp
X-Time-Zone
X-VLoc
X-Svr
X-This-Proto
X-Varnish-Instance
UrlWatchModule-Time
X-Ar-Debug
X-BC
X-Ants-Machine-Id
X-Ants-Host
Aurora-Node
X-Varnish-URL
X-PG
X-Server-FQDN
ATI-Server-Id
OutputRewritten
X-9XB-Server
X-Clx-Request
Response-Time
X-Service-Id
X-Proxy-Id
XX
Cookie
DB-Nickname
X-Distributed-By
Webserver
Content-Cache
DbServerName
FindLaw
Rewriter
IES-Server
Load-Balancer
X-MCF-ID
X-Nitro-Cache
X-Script
X-ServerAddr
X-Fpc
X-CPU-Time
Request-Time
X-B3-Spanid
X-B3-Traceid
X-Built-With
X-Cache-Bypass
X-Sid
X-Nginx-Page-Cache
Fw-Cache-Status
X-Cache-2
X-MSU-SOURCE
X-IP-Address
Yola-ID
Y-Trace
X-Powered-Developer
X-Server-Ident
X-Title
X-ZORequestID
X-VCS-Cacheable
X-VCS-Ttl
X-DeliveryServer
X-Dynamic
X-Rocket-Nginx-File
X-Rocket-Nginx-Reason
X-Config-Version
X-Cache-Me-Harder
X-WAF-Proxy
X-CO-Host
E-TAG
X-Brought-To-You-By
X-Sn-Servicetimems