Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
X-AspNet-Version
Age
P3P
X-Pingback
Content-Language
Via
X-UA-Compatible
Expect-CT
Upgrade
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Request-Id
X-Check
X-Language
X-Template
X-Varnish
Alt-Svc
X-Xss-Protection
X-Generator
X-Buckets
X-Drupal-Cache
P3p
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-Powered-By-Plesk
Host-Header
Content-Location
X-Runtime
X-ShopId
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PodId
X-ShardId
X-Sorting-Hat-Section
X-Sorting-Hat-PodId-Cached
X-Dc
X-Alternate-Cache-Key
MS-Author-Via
Referrer-Policy
X-UA-Device
Cartoon
X-Powered-CMS
X-IPLB-Instance
X-Served-By
X-Amz-Cf-Id
X-Cache-Status
Status
Access-Control-Allow-Headers
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-Via
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Wix-Server-Artifact-Id
X-ServedBy
X-Contextid
X-Ua-Compatible
CF-Cache-Status
X-Backend
Powered-By
X-PC-Hit
X-PC-Key
X-Accel-Buffering
X-Mod-Pagespeed
X-PC-AppVer
X-PC-Date
X-PC-Host
Content-Encoding
X-CST
X-WPE-Loopback-Upstream-Addr
X-DIS-Request-ID
X-Logged-In
X-CDN
Keep-Alive
X-Rid
X-Host
X-Cache-Hit
X-Port
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Cache-Enabled
X-Server-Powered-By
X-Tumblr-Pixel-1
X-Endurance-Cache-Level
X-Server
X-Nginx-Cache-Status
X-Original-Date
X-Robots-Tag
X-Accel-Version
X-Tumblr-Pixel-2
X-Wix-Request-Id
X-Seen-By
X-Page-Speed
X-Turbo-Charged-By
X-Drupal-Dynamic-Cache
X-Content-Powered-By
X-Pad
X-Content-Digest
X-Proxy-Cache
X-Wix-Punisher
X-Forwarded-For
X-Rack-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-NewRelic-App-Data
WP-Super-Cache
X-AH-Environment
X-Sorting-Hat-PrivacyLevel
X-Varnish-Cache
X-Forwarded-Proto
X-Tumblr-Pixel-3
Content-Security-Policy-Report-Only
X-GitHub-Request-Id
X-LiteSpeed-Cache
Edge-Control
SPRequestGuid
X-Request-Country
X-SharePointHealthScore
X-MS-InvokeApp
MicrosoftSharePointTeamServices
X-XRDS-Location
Timing-Allow-Origin
X-Newrelic-App-Data
X-Cache-Lookup
X-Cnection
X-Node
X-SERVER
X-FW-Hash
X-Died
X-Amz-Id-2
X-Amz-Request-Id
Cf-Railgun
X-Trace
Charset
X-Webcom-Cache-Status
X-Content-Security-Policy
X-FW-Serve
X-FW-Static
X-FW-Type
X-FullPageCaching
X-Webserver
Edge-Cache-Tag
Request-Id
X-HS-Cache-Config
X-CF-Powered-By
X-HS-Content-Id
X-PhApp
X-Hits
MicrosoftOfficeWebServer
Request-Context
X-BC-Stapler
X-PHP-Backend
SPIisLatency
SPRequestDuration
X-INKT-URI
X-INKT-SITE
X-Safe-Firewall
Access-Control-Max-Age
EagleId
Composed-By
X-Swift-CacheTime
X-Swift-SaveTime
Grace
Access-Control-Expose-Headers
X-CDN-Pop
Served-By
X-CDN-Pop-IP
X-HS-Combine-CSS
X-Hyper-Cache
Liferay-Portal
X-Spip-Cache
X-Tumblr-Pixel-4
X-VCache
X-Server-Name
X-Backend-Server
X-Dw-Request-Base-Id
X-Fastly-Request-ID
X-Device
X-Firenze-Processing-Times
X-Microcache
X-RateLimit-Remaining
X-RateLimit-Limit
X-LiteSpeed-Cache-Control
X-Clacks-Overhead
X-Cloud-Trace-Context
Rating
X-FB-Debug
X-RateLimit-Reset
Xkey
Content-Style-Type
X-Jimdo-Instance
X-Jimdo-Wid
Surrogate-Control
Front-End-Https
X-TNCMS
X-Loop
Content-Script-Type
X-Acc-Exp
X-ServerName
X-DDC-Arch-Trace
Public-Key-Pins
X-User-Agent
Refresh
X-Cache-Config
X-Middleton-Display
X-Middleton-Response
Display
Response
X-Sol
X-DNS-Prefetch-Control
X-Vtex-Processado-Em
Fpc-Cache-Id
X-StackifyID
X-Age
X-XN-Trace-Token
X-XN-XNHTML
X-Tumblr-Content-Rating
X-Frame-Option
X-Hostname
Real-Hostname
X-SS-Location
X-SS-Conf
X-Generated-By
X-WebKit-CSP
X-Px
X-Cached
X-N-OperationId
X-Tumblr-Pixel-5
X-Zen-Fury
X-Topify-Platform
X-Dscp-Value
X-HOST
X-Correlation-Id
X-Magento-Tags
X-MiniProfiler-Ids
X-Request-Time
X-OneAgent-JS-Injection
P-LB
X-Amz-Version-Id
P-WS
PageSpeed
X-URL
TCN
X-CMS-Version
X-Url
X-Whom
X-Handled-By
Rt-Fastcgi-Cache
X-Cached-By
X-Outils-CS
X-Kinsta-Cache
X-DynaTrace
X-B-Cache
X-DynaTrace-JS-Agent
Product
Access-Control-Request-Method
X-Ruxit-JS-Agent
X-AspNetWebPages-Version
X-Content-Options
X-Edge-Location
X-Debug-Info
ServedBy
X-Msg-2-Log
Surrogate-Key
Powered
Public-Key-Pins-Report-Only
Host
X-Varnish-Cache-Hits
X-Cache-Rule
Fhost
X-Via-JSL
X-Varnish-TTL
X-Engine
X-From
Imagetoolbar
Edge-Control-Message
X-Upstream
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-CacheServer
X-Application-Context
Alternate-Protocol
DynaTrace
X-Signature
X-VTEX-Janus-Router-Backend-App
X-Vtex-Processed-At
X-VTEX-Cache-Status-Janus-ApiCache
X-Powered-By-VTEX-Janus-ApiCache
X-Accel-Expires
X-Vtex-Remote-Cache
No
X-Location-Id
X-LW-Cache
X-Umbraco-Version
X-LBLID
X-Recruiting
X-Track
X-Fastcgi-Cache
X-Developer
X-Goog-Hash
X-Platform
X-Hosted-By
Retry-After
X-Response-Time
X-Actual-URL
X-Passed-To-DLL
X-Original-Request
X-Micro-Cache
X-Platform-Processor
X-Platform-Router
Fastcgi-Cache
X-Returned-From-DLL
X-Returned-From
X-Passed-To
Pagespeed
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Platform-Cluster
X-Varnish-Beresp-Ttl
X-UD-Method
X-Returned-From-BeforeDispatch
X-Stale
X-Passed-To-PostProcessResponse
Dmn
X-Returned-From-PostProcessResponse
X-Passed-To-BeforeDispatch
X-Rnd
X-Powered-By-VTEX-Janus-Edge
Generator
HTTPS
X-Magento-Cache-Debug
X-Shop-Id
Arr-Disable-Session-Affinity
X-Defender
X-Cache-Age
X-F-Cache
X-NWS-LOG-UUID
X-FORWARDED-FOR
X-Cache-TTL
X-Cache-Info
Origin
Akamai-IP
X-Version
X-VARNISH-Cache
X-Loopia-Node
X-Source
X-PERF
X-URLSCHEME
X-ApacheServer
X-TransIP-Balancer
X-BS
X-I-Sp
WZWS-RAY
X-Powered-By-360WZB
X-Microcachable
X-Varnish-Host
X-Device-Type
X-RESOURCE
Ohc-File-Size
X-Litespeed-Cache
Cache-Provider
X-TransIP-Backend
X-Supported-By
X-Instart-Request-ID
X-Rocket-Nginx-Bypass
Fastly-Debug-Digest
Content-Hash
X-Storage
X-S
X-Tumblr-Pixel-6
X-HS-Content-Campaign-Id
X-Varnish-Count
X-Varnish-HitMiss
X-Server-ID
Version
X-Front
X-Pantheon-Environment
Surrogate-Key-Raw
X-Cache-Key
X-Pantheon-Phpreq
X-Pantheon-Site
USPLoggingUUID
X-Dispatcher
X-Cdn
X-NetCat-Version
X-App-Hosting
X-Cache-Operation
X-Platform-Server
X-Matrix-Server
X-Matrix-Proxy
X-ATG-Version
X-Cache-Tags
X-Powered-By-VelaWeb
X-Page-Cache
X-Sapient
RTSS
Last-Published
X-Director
X-Platform-Cache
X-EdgeConnect-Origin-MEX-Latency
X-Microcache-Status
X-Art-Request-Id
X-Translation
X-Expires-Orig
X-Gamma-Serve
X-I
X-Shard
X-Cluster-Node
X-Vcap-Request-Id
Allow
MIME-Version
X-Hypernode
X-ORACLE-DMS-ECID
X-Cache-Namespace
X-Revision
Powered-By-ChinaCache
X-LB
X-Ezoic-Cdn
X-CSRF-Protection
X-LB-Node
X-Varnish-GracePeriod
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-Varnish-ObjectSource
X-Varnish-RemainingLife
X-Content-Encoded-By
Cache-Key
X-Varnish-Age
X-Route-Server
Pool
X-Flow-Powered
Wsr-Cache
X-EdgeConnect-MidMile-RTT
X-ARC
IBM-Web2-Location
X-Server-Upstream
Content-Disposition
X-Environment
X-SSL-Cipher
X-NoCache
X-Ttl
X-SSL-Protocol
X-Daa-Tunnel
X-Drupal-Cache-Tags
X-Grace
X-Litespeed-Cache-Control
X-IsCacheURL
X-SV-FromDBCache
X-Abgroup
X-Lambda-Id
X-SV-Duration
X-SV-Edge
X-SV-Pid
X-Cache-Debug
X-SV-Cacheable
X-Varnish-Cacheable
X-SV-CreatedAt
X-SV-Nginx-Duration
X-SV-CacheTags
X-SV-Expires
X-Firenze-Processing-Time
X-Edge-IP
Content-MD5
SSPAppContext
X-Github-Request-Id
X-Xrds-Location
Accept-Encoding
X-Dispatch
X-CJ-Soft
X-Magento-Cache-Control
X-Cache-Control-Orig
X-Cache-Only-Varnish
Srv
Lsrequestid
Cneonction
Section-Io-Id
FAI-W-FLOW
S-Cnection
ServerID
X-Varnish-Backend
X-Varnish-Url
Content-Encoding-Handler
X-Cache-Server
X-GeoIP-Country-Code
X-Cache-Type
X-Ss-Conf
SN
Pv
X-Ss-Location
X-Hiawatha-Cache
Page-Completion-Status
X-Time
X-Generated
Location
X-Varnish-Ttl
X-Cache-Expires
X-Drupal-Cache-Contexts
X-Cache-Lifetime
X-Duration
X-Nginx-Cache
X-PwB-Node
Backend
Fw-Via
X-RequestId
Node
X-Amz-Meta-S3cmd-Attrs
Proxy-Connection
X-Debug
X-Client-IP
PICS-Label
X-Url-Base
X-ServerID
X-AOL-HN
X-Vhost
ServerName
X-Proxy
X-Fastly-Request-Id
X-Speed-Cache
X-Speed-Cache-Key
X-Middleware-Start
X-Magnolia-Registration
X-Akamai-Transformed
Use-Proxy
If-Modified-Since
AMF-Ver
X-Varnish-IP
X-GeoIP-Country-Name
X-N
X-FW
Nodo
X-Country-Code
X-Geo-Country
X-Cookie-Domain
X-Frontend
X-Pressidium-NinukisWP-Ver
X-Purge-URL
X-Config-Blacklist-Version
X-ID
X-Location
X-Cache-Level
X-Server-Id
X-Cache-CFC
X-Oneagent-Js-Injection
X-UPSTREAM
X-Real-Server
X-Cache-Device-Type
NnCoection
X-SRCache-Key
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Goog-Generation
X-Worker
X-SO
X-Cache-Engine
X-Goog-Stored-Content-Length
X-Always-Cache
X-Discourse-Route
Server-Info
X-Cache-Handler
Server-Name
X-GUploader-UploadID
X-Content-Age
Req-Id
IM-Version
X-Nbs
X-Dynatrace-Js-Agent
X-Cache-PageType
X-ORACLE-DMS-RID
Cache
X-Processing-Time
X-Cache-Fix
X-Purge-Host
Xc-Version
X-Yadis-Location
Pf.Web.Request.Id
P-ID
X-DealerOn
X-Content-Type-Option
X-PF-Uncompressing
X-Browser
Accept-Charset
X-Akamai-Device-Model
X-Cache-Control
Author
Nitro-Cache
X-CF-Passed-Proto
X-Akamai-Device-Characteristics
X-High-Performance
X-Varnish-Retries
Cached
X-Correlation-ID
X-Runtime-Rack
X-Empowered-By
X-Amz-Storage-Class
Front
SEOMOZ
X-Last-Modified
X-Rocket-Nginx-Serving-Static
X-Srv
X-Id
MJ12bot
Local-Info
X-BKSrc
Content-Transfer-Encoding
X-App-Server
X-BackendServer
X-Pagename
X-JG-Page-Cache
Qs-Cache
X-CDN-Forward
X-Sentry-ID
X-OpenCart-Lightning
X-Hit-Cache
X-FTR-Request-ID
X-Framework
SRV
X-Unbounce-Variant
X-SDS
Thanks
X-Unbounce-VisitorID
X-Server-Instance
X-TTL
HAVer
HCVer
X-Unbounce-PageId
X-Esi
Adm-Server
X-NB-Cached-Page
CacheControlHeader
X-AF-Userserver
Server-Timing
X-Mobilized-By
X-ClientSide-Caching
Custom-Header
S
Cm-Server
Eomportal-Instance
X-Abuse
X-Origin
X-WR-Flags
MC
Cteonnt-Length
X-VARITI-CCR
X-Ruxit-Js-Agent
X-ACMCache
X-Server-IP
Cache-Tags
ServerTokens
X-HTML-Minification-Powered-By
X-Session-ID
X-Runtime-Memory
X-Env
X-Rq
X-Dns-Prefetch-Control
NODE
ServerSignature
X-Varnish-Hits
X-Content-Security-Policy-Report-Only
X-Sucuri-ID
X-CAPServer
X-WPL-DATA
Frame-Options
X-Processed-By
X-HW
X-VTEX-Cache-Status-Janus-Edge
NtCoent-Length
WWW-Authenticate
X-LB-Server
NetMindSessionID
Magicmarker
X-Adobe-Content
X-Shield-Request-Id
Proxy-Agent
SiteSpeed
X-Adobe-Loc
X-Fedora-School-Id
X-TTFB-L
Cache-Tag
Tracecode
X-Resty-Request-Id
Smug-CDN
X-Sys-Req-ID
BALANCEDTO
X-Orig-Vary
SVR
Ufe-Result
X-Cache-Dispatchercachecontrol
X-SmugMug-Hiring
X-Page
W
X-Cache-Dispatcherpragma
X-SmugMug-Values
X-TTFB
X-Gateway-Cache-Key
Content_type
X-Gateway-Cache-Status
X-Gateway-Skip-Cache
X-SRV
X-WN-ClientGroup
WN
X-LP
X-Smartcache-Keys
X-Traffic
X-LW-Web-Server
X-HydroSheep
EagleEye-TraceId
X-Jphone-Copyright
X-Smartcache-Timeout
X-WP
X-Route-To
X-CB-Server
Contao-Page-Layout
X-DEBUG
X-Garden-Version
X-ServerIndex
Description
Web-App-Origin-Name
Keywords
X-Yottaa-Optimizations
X-Trace-Id
X-A
X-Connection-Hash
X-Drectory-Script
X-Twitter-Response-Tags
X-Transaction
X-Varnish-Hostname
RN-Server
X-Yottaa-Metrics
X-Clara-ASAP
X-Client-Image-Vid
X-Unique-ID
Max-Age
X-Client-Vid
X-ASAP-Cache
A-Powered-By
X-Generated-Time
X-EPiphany-Vid
X-AEM
Ramp
X-WA-Info
X-Redman-Backend
VANITY-HOST
X-Cache-Doesi
Noq
X-Symfony-Cache
X-Redman-Final-Url
From-Origin
Ram
Environment
X-Sorting-Hat-Expire-Cache
X-AVG-Country-Code
X-Compress-Hint
ScoreTracker
Yoncu-Errno
X-Akamai-Edgescape
X-Avg-Cookie-Expires
Fastly-Backend-Name
X-Environment-Context
Og
X-Disney-Akamai-Rule
X-Webstats-RespID
X-GeoIP
X-RiS-UFDI
Server-ID
X-L-Path
X-CRA-DC
IISExport
X-Plat
X-Application
X-VNode
X-ARRServer
VServer
X-Viator-Tapersistentcookie
X-VC-Enabled
X-Varnish-Debug-Age
SBGI-Device
SBGI-RealPath
SBGI-9
SBGI-7
X-Provisioner-Version
Cmsid
Pics-Label
SBGI-RenderTime
X-Varnish-Debug-TTL
X-RDP
Ibf5scheme
N365rili
X-Stage
X-Sucuri-Cache
MW-Webserver
X-Webkit-CSP
SBGI-5
Cmstype
Play-Detected-UserAgent
SBGI-10
X-App-Status
X-Cache-Node
X-Domain-Checked
Machine
X-Cache-On
Play-Detected-Device
SBGI-1
Service-Worker-Allowed
X-Force
X-Response
X-Varnish-Id
Access-Control-Allow-Header
X-PRAM
X-Proto
X-GoCache-CacheStatus
X-Magento-Action
X-Bip
X-NginX-Server
X-Cache-Varnish
X-VC-TTL
X-Resource
X-Forwarded-Host
Url
Dispatcher
X-CacheResult
X-Cdn-Forward
X-Vcache
Beyond-Iis
X-Backend-Status
AC-ELC
X-Highwire-SessionId
RequestId
X-Key
AsisCache
X-WebKit-CSP-Report-Only
X-TB-M
X-CACHE-TTL
X-Acquia-Debug-Password
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Rebelmouse-Cache-Control
X-Session-Reinit
X-Rack-CORS
X-Redirector
X-PHP-Response-Code
Backend-Timing
Home
X-Culture
X-Detected-Device
X-Varnish-ID
X-FORWARDED-PROTO
X-Highwire-RequestId
X-E
Dis-Env
SG
X-Autoru-Host
X-Autoru-LB
X-Analytics
X-AutoRu-App-Id
X-Varnish-Server
X-App-Runtime
X-FireWall-Port
X-Src-Webcache
X-Runtime-Affili
X-Dw-Trace-Id
Ctx
X-Hosting-Env
X-Request-Uri
X-SDE-Name
X-Time-Microsecs
X-SmartBan-URL
X-WHOIS-Cached
X-SmartBan-Host
X-Cms-Mode
From
X-Balanceador
Worker
X-Secret
X-Varnish-Action
X-Rebelmouse-Surrogate-Control
X-Cocoon-Version
XDomainRequestAllowed
X-Directory-Script
SHInfo
X-Dev
X-Real-IP
X-Fstrz
X-Airee-Node
X-IIJ-Cache
X-Frames-Options
X-Amz-Meta-Cb-Modifiedtime
X-Amz-Meta-Content-Md5
Hostname
Web
X-Source-ID
WP-AdvCache-MemCached
X-EC2-Instance-Id
HitType
X-Atraveo-ETag
X-Atraveo-Expires
Identity
COMMERCE-SERVER-SOFTWARE
Nginx-Cache
X-SV
Bios
Access-Control-Allow-Method
X-Origin-Server
X-Atraveo-From-Varnish-Cache
X-Atraveo-Cache-Control
X-Akamai-3PM-SW-Version
X-Atraveo-Zone
X-Atraveo-Varnish-Server-Id
Accept-Language
SS
X-Atraveo-TTL
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
X-Depends
X-Flex-Evend
X-HAProxy
NLCacheNote
X-Cache-Via
X-FPC
Disablevcache
Myheader
X-ACCELERATE
X-Adnet
X-Flex-Community
X-Pubstack
X-DTC
X-NginX-Cache
TC-S-Cache
TC-S-Cache-M
X-Ghost-Cache-Status
TC-Cache-U
TC-Cache-IC
X-Origin-Cache
TC-Cache
X-Goog-Meta-Policy
X-Goog-Meta-Replace
X-Machine
X-RealServer
X-Resolver-IP
X-Debug-Token
Id
X-Remote-Addr
X-Flex-Evstart
X-Sites
X-Flex-Tags
X-Hosting
X-Wikidot-Backend
X-Wikidot-Static-Cache
Ec-CorrId
X-Data-Request
X-Compressed-By
X-HashTwo
X-OPNET-Transaction-Trace
AMP-Access-Control-Allow-Source-Origin
X-Amcomm-Site
Ec-Machine
X-Confluence-Request-Time
Paypal-Debug-Id
X-Desc
X-MAT-GEO
X-Refresh
Hname
X-LDNR-NOT-ROOT-HL-NOTSET
X-Distributor
X-Rewrite
X-GSL-Server
Traffic-Origin
OriginServer
X-Search-Id
Device
Il-Cl
Proxy-Cache
X-Req-Head-Response
X-Nginx-Host
X-Flex-Lastmod
X-Flex-Tag
X-Streams-Distribution
X-Map-Context
X-Amz-Meta-S3b-Last-Modified
X-Mobile-URL
X-HP-Trace-ID
ClientIP
F5-IpCliente
Gzip
X-Varnish-Cache-Local
X-HP-Trace-Project
X-B2f-Not-Route
X-Cluster
X-DB-Content-Length
X-Flex-Lang
X-Aramark-SID
XX
X-Bcwwwid
SERVER-ID
X-Grid-Server
Xc
X-MCB-Server
X-Node-Name
X-Info
X-NID
X-KoobooCMS-Version
VC-NoCache
CLMOB
Hummingbird-Cache
X-Avvio-Cms-Cacheload
X-Distil-CS
X-Pagely-Cache
X-Lb
Strikingly-Cached
X-Author
Strikingly-Cached-Version
X-Cf-Powered-By
X-Magento-Lifetime
Strikingly-Cache-Region
X-Cache-TTL-Remaining
X-SERVER-NAME
TP-Cache
Aoestatic
TP-L2-Cache
X-ESI
X-SH-Cache-Status
X-Batcache
X-AISO-Cacheable
X-Proxy-Cache-Key
X-AISO-Server
X-ASAP-Age
PagesDisplayed
X-ServiceProvider
X-DataDome
X-Served-Server
X-SuperCache
X-Config-By
X-4ormat-Cacheable
X-Captured
Ez
X-Amz-Id-1
Lb
X-PM-ID
Kanooh-Host
X-AISO-Cache
X-Render-Time
X-DynamicCache
X-Tag-Playlist
X-Agent
Ohc-Response-Time
X-Zendesk-User-Id
X-Zendesk-Origin-Server
Progma
Accept-CH
Content-Generator
X-CacheID
Server-Id
X-App
X-HS-Status
X-V
Ews
X-Gannett-Site-Version
Upgrade-Insecure-Requests
BackendServer
Actual-Object-TTL
OracleCommerceCloud-Sandiego
X-Gyrobase-Publication
X-MidCOM-Meta-Cache
X-Nitro-Cache
X-Powered-By-Home.Pl
X-ETag
Copyright
CommercePlatform-Version
X-Header
X-DDM-SERVER
PServer
X-OCTOPOD
X-DSMX-Rewrite-MS
X-Protected-By
X-DSMX-Render-MS
X-Proxy-Skip
Cleartype
X-DDM-SERVER-UPDATED
X-Rack-Cors
X-IP
X-LBPoolMember
X-NodeID
X-DN-Cache-Control
OracleCommerceCloud-Version
NS-VaryByCustom-Key
X-Country
X-Akam-SW-Version
X-Cache-Keep
Ttl
X-HP-CAM-COLOR
X-Pj-Cache-Status
X-Rewritten-By
X-Dealeron-Backend
X-Reflector
X-Reflector-Cache
X-Cache-Detail
X-Serv
X-Dealeron-Original-Url
X-Batcache-Reason
NZSpeedy
X-ManagedFusion-Rewriter-Version
Server-Ip
X-Nginx-Request-Processing-Time
X-Server-Addr
Warning
X-CloudBurst-Cache
Webserver
MageStack-Config
Amfplus-Ver
MageStack-Cacheable
MageStack-Debug
MageStack-Loadbalancer
MageStack-Magento-Version
MageStack-Cache-Warning
MageStack-Cache-Status
MageStack-Cache
MageStack-Area
MageStack-Cache-Hits
MageStack-Cache-Lifetime
X-CloudBurst-Backend
Key
X-Amz-Meta-Version-Id
Viewport
ViewMode
MageStack-PageSpeed
X-Activity-Id
X-AppVersion
X-Domino-CacheValidationWithETagReason
Tesla.Performance
MS-CV
X-Served
X-Made-On
Generate-Time
X-Header-Treatment
X-HEAD
X-Deity
X-Debug-Token-Link
X-UA
X-Serverid
X-UT-Cache
X-Cname-TryFiles
X-CloudBurst-WordPress
X-Middleton-PageSpeed
X-JSESSIONID
X-Debug-Message
X-Az
X-FastCGI-Cache-Status
X-HA
X-CSRF-Token
X-CloudBurst-Frontend
X-Transaction-Name
X-7d-Trace-Id
X-7d-Instance-Id
Swift-Performance
Requested-Host
X-Backend-Host
X-Box
X-Phpwcms-Page-Processed-In
X-Hash
X-Client-Ip
FindLaw
X-Obvious-Tid
X-Hstore
X-Hrouter
X-Container
X-MainProfileCategory
X-MainProfileID
X-Obvious-Info
X-MainProfileURL
X-MainProfileName
X-Phpwcms-Release
X-REDIRECTSERVER
X-Catalyst
X-Built-With
Cache-Status
X-S-Misc
TZ-Server
ID
Hamster
X-CDN-RULE
X-CDN-COMPRESS
X-Generation-Time
X-D-Time
X-VG-WebCache
X-Sid
X-SE-Debug
X-Via-NSCOPI
Content-Cache
X-AppServer-Cache-Rule
UrlWatchModule-Time
No-Cache
X-Cache-Me-Harder
Tk
X-Mw-Workerstats
X-M-V
X-M-T
X-M-P
X-Pageid
X-Pool-Info
X-S-C
X-RAMCache
X-Q-S
X-Instart-Cache-Id
X-I-V
X-B
Provided-Host
MageStack-Web-Node
X-Beresp-Ttl
X-Cachable
X-HeBS-Cache-Status
X-FIRSTBase
X-CH-Device
X-S-V
X-T
X-Nginx-Request-Time
X-Middleton-Pagespeed
X-Instance-Id
X-RiS-PX
X-UPSTREAM-Address
FRONT-END-SECUREBROWSER
Fastly-Restarts
X-WebNode
Session-Id
ProxiaInstanceId
Z-Tpl
Y-Trace
X-Cache-Time
AR-ATIME
AR-CACHE
CommunityServer
AR-SID
AR-PoweredBy
MageStack-Tag
X-Domino-CacheValidationWithETagResult
X-BPool-Bx-Cache
X-BPool-Back
X-BPool-Fx-Cache
X-BServer
X-Cacheable-TTL
X-BPool
X-Blog
X-Varnish-Cached-TTL
TheAnswer
X-XHR-Current-Location
SB-Cache-Remaining
SB-Cache-Life
X-Cjtype
Page-Template
X-Omnis-SiteID
X-ELB
X-Node-App
X-Static
X-Nginx-Page-Cache
X-Layout
X-Unique-Id
X-Varnish-Cached
MachineName
Debug-Status
Arrnode
SB-Site-Device
Language
X-Highwire-Smart-Code
X-Highwire-Sitecode
X-Pass-Through
X-PBY
X-PROCESSED-BY
X-ReqId
X-SilverStripe-Cache
Provider
DeleGate-Ver
X-Timestamp
X-AMAZEEIO
X-Artvisual-Server
X-NO-BREACH
X-FG-RequestId
X-Who
X-Enhanced-By
X-ZSITES-DNS
X-DS1D
DrivedBy
X-Webcelerate
X-Varnish-Grace
X-Varnish-Instance
X-SCM-Server-Number
X-VLoc
X-UnsetCookies
X-Meta-MSThemeCompatible
X-Secure
ServerIP
Response-Time
X-Cache-Bypass
X-Proxy-Id
Control-Cache
X-Time-Zone
X-Svr
X-UPServer
X-Meta-MSSmartTagsPreventParsing
X-Full-Url
X-Route
EQ-Cache
GranicusServer
X-Apm-Telemetry-Syncmark
StatusCode
X-Beatles
Session-From
X-Cache-ID
RSB-LINK
X-Server-FQDN
X-ServerAddr
X-MCF-ID
HostName
X-Script
X-Cache-Original-TTL
X-Custom-Header
X-Cache-Id
X-VC-Debug
CmsfirstPublishTimestamp
X-VC-Hash
X-VC-Cacheable
X-VC-Cache
X-CO-Host
EN-User
X-Title
X-Turpentine-Esi
X-W3TC-Minify
MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
X-ACLR-Version
X-Hit
User-Agent
MSThemeCompatible
Cacheid
CpuTime
FastCGI-Cache
X-Pixelsilk-Version
X-Cache-Extended
X-Pixelsilk-Server
Expiries
X-Cache-TTL-Age
CS-SERVER
X-PG
X-Member
WP-FROM-CACHE
Actioncode
Head
Countrycode
Realaction
Xcache
Serverid
X-Server-Instance-Name
X-CPU-Time
Apple-Itunes-App
X-SH-Cache-Disabled
X-Test-Debug
X-NewsFlow-Sitename
X-MyName
X-PBS-Appsvrip
X-PBS-Appsvrname
X-Prerender-Token
X-PBS-Fwsrvname
X-Healthy
X-Cache-FS-Status
X-Proxy-Backend
Request-Filtered-By
Referer
Powered-By-115
ReqUrl
X-SSLProxy
X-SSLUpstream
Rewriter
DbServerName
X-Server-Hostname
Amp-Access-Control-Allow-Source-Origin
X-BackendProxy
CD4
X-Locale
X-Geo-IP
X-Svr-Proxy
X-Skip-Cache
X-Sn-Servicetimems
X-CACHE-KEY
X-Varnish-Debug-Hits
X-Origin-Date
X-Site
X-RequesterIP
X-Theme
CDCHOST
X-Ants-Host
X-RemovedCookies
X-ProcessESI
X-Old-Content-Length
X-Dynamic-Cache
WSCLoggingUUID
X-Instance
X-MSEdge-Ref
X-Ants-Machine-Id
X-NMT-Proxy
X-Reason-Bp
X-Prerendered
X-Gateway-Rate-Limit-Conn
X-Gateway-Rate-Limit-Delayed
X-M
X-ClusterID
X-Backend-Name
X-Varnish-Cache-Ttl
X-Upgrade-Enabled
X-XHTML-Minification-Powered-By
TestCC
V-Age
X-Cache-TTL-Current
Arrow-RequestId
HA-Cloudapp
HA-Geocity
HA-Geocountry
HA-Geolat
X-Max-Age
DNNOutputCache
X-SayCDN-TTL
X-SCProxy
DB-Nickname
X-Optimization
HA-Geolon
HA-Georegion
Note
V-TTL
SINA-TS
SINA-LB
Www.Aujourdhui.Com
HA-Urlpath
HA-Host
HA-Ipaddr
HA-Servedtime
X-Say-TTL
X-Say-Cacheable
X-Distributed-By
X-Machine-Name
Be
X-TLS-Version
X-Does-He-Have-Time
X-DevSrv-CMS
X-Beatles-Hits
X-Ao-Cache-Key
Redirect-Reason
X-TTL-Age
X-Would-Your-GrandPa-Wait
X-This-Proto
BlockPHPCallEnd
X-Mobile-Rewrite
X-Processed
X-Cache-LB
X-Uncacheable
X-Your-GrandPa-Would-Wait
PB-PID
PB-RID
IES-Server
Edgecast
MwpReleaseVersion
Container
X-Olaf
X-Upstream-Status
Returned-Status
VAR-Cache
X-Cache-Set
X-CGP
SB-Site-IE-VERSION
Resin-Trace
X-Fpc
X-Cache-V
X-MSU-SOURCE
X-Homeaway-Requestmarker
X-PoweredBy
X-Server-Generated
X-ENV
X-DeliveryServer
X-Clx-Request
X-DEBUG-HOST
X-DEBUG-TTL
Access-Control-Request-Headers
X-Cacheable-By-Varnish
Load-Balancer
X-K8s
NKBVHEADER
Server-Hostname
X-Request-Processing-Time
X-Request-Received
L5d-Success-Class
X-Fastly-Backend-Reqs
X-Ssl-Cipher
X-Test
X-Cache-ASPX
X-B3-Spanid
X-B3-Traceid
X-Session-Id
X-Restarts
X-Status
User-Cache-Control
X-Built-By
X-BIT-Node
X-ACache
X-Tt-Dbg