Threat Level: green Handler on Duty: Jim Clausing

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
X-Cache
CF-RAY
Strict-Transport-Security
X-AspNet-Version
P3P
X-Pingback
Age
Content-Language
X-UA-Compatible
Via
Access-Control-Allow-Origin
X-Adblock-Key
Upgrade
X-Varnish
X-Cacheable
P3p
X-Check
X-Template
X-Language
Content-Security-Policy
X-Generator
X-Buckets
X-Drupal-Cache
X-Type
X-AspNetMvc-Version
X-Cache-Group
X-Pass-Why
X-Xss-Protection
X-Request-Id
X-Hacker
X-Ac
X-Powered-By-Plesk
Content-Location
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Runtime
X-Download-Options
Host-Header
MS-Author-Via
X-ShopId
X-Sorting-Hat-Section
X-ShardId
X-Dc
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-ShopId
X-Alternate-Cache-Key
Alt-Svc
Cartoon
X-Request-ID
X-IPLB-Instance
X-Powered-CMS
X-UA-Device
Status
X-Served-By
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
X-Amz-Cf-Id
Access-Control-Allow-Methods
X-Via
X-Iinfo
X-Cache-Status
X-Backend
X-Contextid
X-Timer
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
CF-Cache-Status
X-PC-Hit
X-PC-Key
X-ServedBy
Powered-By
X-Mod-Pagespeed
X-PC-Date
X-PC-AppVer
X-PC-Host
X-DIS-Request-ID
X-Wix-Server-Artifact-Id
X-Logged-In
Keep-Alive
X-Rid
X-Server
X-Cache-Hit
Content-Encoding
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-User
X-Port
X-Tumblr-Pixel-1
X-CDN
X-Host
X-CST
X-Server-Powered-By
X-Tumblr-Pixel-2
X-Robots-Tag
Referrer-Policy
X-Cache-Enabled
X-Pad
X-Nginx-Cache-Status
X-Seen-By
X-Wix-Request-Id
X-Wix-Renderer-Server
WP-Super-Cache
X-Endurance-Cache-Level
Fastly-Debug-Digest
X-Page-Speed
X-Wix-PunisherID
X-Accel-Version
X-Turbo-Charged-By
X-Forwarded-For
X-Tumblr-Pixel-3
X-Content-Powered-By
X-Forwarded-Proto
X-Drupal-Dynamic-Cache
X-Rack-Cache
X-Content-Digest
X-Varnish-Cache
X-FRAME-OPTIONS
Surrogate-Key-Raw
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
Content-Security-Policy-Report-Only
X-AH-Environment
X-GitHub-Request-Id
X-Proxy-Cache
X-Cnection
SPRequestGuid
X-SharePointHealthScore
MicrosoftSharePointTeamServices
X-MS-InvokeApp
X-Request-Country
X-XRDS-Location
X-Original-Date
X-Died
X-LiteSpeed-Cache
X-Cache-Lookup
WPE-Backend
Edge-Control
Cf-Railgun
X-Safe-Firewall
Timing-Allow-Origin
Request-Id
MicrosoftOfficeWebServer
X-Amz-Request-Id
X-Amz-Id-2
Charset
X-FullPageCaching
X-Webserver
X-FW-Hash
X-FW-Type
X-FW-Serve
X-FW-Static
X-Node
Edge-Cache-Tag
X-PhApp
X-CF-Powered-By
SPIisLatency
X-Tumblr-Pixel-4
SPRequestDuration
X-HS-Cache-Config
X-INKT-URI
X-INKT-SITE
Composed-By
X-HS-Content-Id
X-Content-Security-Policy
X-Hits
Access-Control-Max-Age
Content-MD5
X-Swift-SaveTime
Liferay-Portal
X-Swift-CacheTime
EagleId
X-VWS-Id
X-AWS-Id
X-LJ-Flow-ID
Access-Control-Expose-Headers
X-Hyper-Cache
Served-By
Grace
X-Spip-Cache
Rating
X-CDN-Pop
X-CDN-Pop-IP
X-Server-Name
X-BC-Stapler
X-Device
Request-Context
X-Backend-Server
X-Tumblr-Content-Rating
X-Dw-Request-Base-Id
X-Microcachable
X-Microcache
X-Fastly-Request-ID
X-Newrelic-App-Data
X-Firenze-Processing-Times
Content-Style-Type
X-RateLimit-Remaining
X-ServerName
X-RateLimit-Limit
Content-Script-Type
X-RateLimit-Reset
X-FB-Debug
X-VCache
X-User-Agent
Public-Key-Pins
X-Cloud-Trace-Context
X-Jimdo-Instance
X-Jimdo-Wid
X-Clacks-Overhead
X-SERVER
X-Cache-Config
X-DDC-Arch-Trace
Xkey
X-Loop
X-TNCMS
Real-Hostname
X-Acc-Exp
Refresh
Front-End-Https
X-XN-XNHTML
X-XN-Trace-Token
Fpc-Cache-Id
X-Age
X-Aspnetmvc-Version
Surrogate-Control
X-Hostname
PageSpeed
X-Tumblr-Pixel-5
X-Generated-By
X-Px
X-Cached
Display
X-Middleton-Response
Response
X-Sol
X-Middleton-Display
X-N-OperationId
X-LiteSpeed-Cache-Control
Surrogate-Key
X-DNS-Prefetch-Control
X-MiniProfiler-Ids
X-SS-Location
X-SS-Conf
X-StackifyID
X-Cached-By
X-Pantheon-Site
X-Pantheon-Environment
X-Pantheon-Phpreq
X-Content-Options
X-Topify-Platform
X-Request-Time
X-Zen-Fury
X-URL
X-Servedby
X-WebKit-CSP
X-CMS-Version
Rt-Fastcgi-Cache
TCN
Edge-Control-Message
X-Whom
X-Amz-Version-Id
X-HOST
X-Cdn
X-Outils-CS
X-Url
X-OneAgent-JS-Injection
X-PERF
X-ApacheServer
Access-Control-Request-Method
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-AspNetWebPages-Version
X-Umbraco-Version
X-DynaTrace
X-Ruxit-JS-Agent
Product
X-DynaTrace-JS-Agent
X-Magento-Tags
Alternate-Protocol
X-Varnish-Cache-Hits
X-Handled-By
Host
X-Kinsta-Cache
X-Correlation-Id
Imagetoolbar
X-Cache-Rule
X-Varnish-TTL
DynaTrace
P-WS
X-Engine
P-LB
X-NWS-LOG-UUID
X-Powered-By-360WZB
Powered
X-Recruiting
WZWS-RAY
Generator
X-Micro-Cache
Fhost
X-Location-Id
X-FORWARDED-FOR
X-Edge-Location
X-Tumblr-Pixel-6
ServedBy
X-Goog-Hash
X-CacheServer
X-Track
X-Msg-2-Log
X-From
X-Fastcgi-Cache
X-B-Cache
X-Hosted-By
X-Developer
Fastcgi-Cache
X-Response-Time
X-Powered-By-VTEX-Janus-ApiCache
X-Vtex-Processed-At
X-Vtex-Processado-Em
X-Vtex-Remote-Cache
X-VTEX-Cache-Status-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
No
Expect-CT
Origin
X-I-Sp
X-BS
X-RESOURCE
X-Application-Context
X-Powered-By-VTEX-Janus-Edge
X-URLSCHEME
X-LBLID
X-Cache-Age
Arr-Disable-Session-Affinity
X-Actual-URL
X-Varnish-Host
X-Origin
X-Returned-From
X-Instart-Request-ID
X-Returned-From-DLL
X-Passed-To
X-Original-Request
X-Passed-To-DLL
X-Shop-Id
X-Defender
X-UD-Method
Content-Hash
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Status
X-App-Hosting
Dmn
Akamai-IP
X-Stale
X-Accel-Expires
X-Matrix-Server
X-Matrix-Proxy
X-LB
X-Storage
X-TransIP-Balancer
X-Cache-Info
X-Cache-TTL
X-Source
X-Device-Type
X-Internal-ReqID
X-Rocket-Nginx-Bypass
X-AOL-HN
HTTPS
X-UPSTREAM
X-Cache-Debug
X-NetCat-Version
X-Expires-Orig
X-Front
X-Akamai-Transformed
X-S
X-Revision
X-Cache-Operation
Powered-By-ChinaCache
X-Powered-By-VelaWeb
X-Varnish-Backend
X-Daa-Tunnel
X-Signature
X-HS-Content-Campaign-Id
X-Varnish-Cacheable
X-I
IBM-Web2-Location
X-VARNISH-Cache
X-Microcache-Status
X-Translation
X-Platform-Cluster
X-Platform
X-Platform-Processor
X-Platform-Router
USPLoggingUUID
X-TransIP-Backend
X-Version
X-Gamma-Serve
Ohc-File-Size
Last-Published
X-LB-Node
X-NoCache
Pool
X-Dispatch
X-Varnish-GracePeriod
X-Varnish-Seen-By
X-Page-Cache
X-Varnish-RemainingLife
X-Varnish-RemainingTTL
X-Varnish-ObjectSource
X-Varnish-HitMiss
Version
X-Varnish-Count
MIME-Version
X-Supported-By
X-EdgeConnect-Origin-MEX-Latency
X-Cache-Tags
X-VTEX-Cache-Status-Janus-Edge
X-Cache-Lifetime
X-Content-Encoded-By
Cache-Key
Public-Key-Pins-Report-Only
X-Cache-Only-Varnish
Content-Disposition
X-Dispatcher
X-Art-Request-Id
X-EdgeConnect-MidMile-RTT
X-Hypernode
X-Duration
Cache-Tag
Srv
Node
X-Upstream
X-Route-Server
X-Cache-Key
X-Varnish-Age
X-Vcap-Request-Id
X-Director
X-Server-Upstream
X-Flow-Powered
X-Cache-Control-Orig
X-Cookie-Domain
X-Debug
X-Firenze-Processing-Time
ServerName
X-Server-ID
X-Platform-Server
Content-Encoding-Handler
ServerID
IM-Version
FAI-W-FLOW
X-SSL-Protocol
X-NewRelic-App-Data
X-Server-Id
SSPAppContext
X-SSL-Cipher
X-TTL
Proxy-Connection
X-ATG-Version
X-Cache-Expires
X-SV-CreatedAt
X-SV-FromDBCache
X-SV-Pid
X-SV-Nginx-Duration
X-F-Cache
X-SV-Edge
X-SV-Duration
X-SV-Expires
X-Platform-Cache
X-SV-CacheTags
X-SV-Cacheable
X-Sucuri-ID
Lsrequestid
X-CJ-Soft
X-GeoIP-Country-Code
Accept-Encoding
X-Abgroup
X-Speed-Cache
SN
X-Speed-Cache-Key
Allow
X-Client-IP
X-Sucuri-Cache
X-Edge-IP
X-Amz-Meta-S3cmd-Attrs
X-Country-Code
X-RequestId
X-Debug-Info
X-Abuse
X-Dns-Prefetch-Control
Edge-Content-Tag
X-Last-Modified
X-ORACLE-DMS-ECID
X-Geo-Country
Cneonction
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Proxy
X-Sapient
X-Varnish-IP
X-Goog-Generation
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
X-GUploader-UploadID
Page-Completion-Status
X-Content-Age
X-Grace
X-ServerID
X-ARC
X-Purge-URL
X-GeoIP-Country-Name
X-SDS
Location
X-Nbs
X-Browser
PICS-Label
X-Processed-By
Backend
X-Cache-CFC
Cache-Provider
X-Akamai-Device-Characteristics
X-PwB-Node
X-Url-Base
X-Nginx-Cache
X-Discourse-Route
X-Magento-Cache-Debug
A-Powered-By
X-Purge-Host
X-CDN-Node
X-CDN-Cache-Status
X-Orig-Vary
Author
If-Modified-Since
CacheControlHeader
X-Processing-Time
Fw-Via
NnCoection
X-Time
X-BKSrc
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
WSR-Cache
X-SRCache-Key
X-Lambda-Id
NetMindSessionID
X-SE-Debug
X-Akamai-Device-Model
X-Shield-Request-Id
X-Id
X-Yadis-Location
Pv
X-Loopia-Node
X-Cache-Server
Qs-Cache
X-Frontend
X-Real-Server
X-IsCacheURL
Section-Io-Id
S-Cnection
X-FW
X-Always-Cache
X-HP-Trace-ID
AMF-Ver
RTSS
X-HP-Trace-Project
X-Varnish-Url
X-Cache-Control
X-Generated
X-N
Tracecode
Xc-Version
X-Varnish-ID
Req-Id
X-LW-Cache
X-TB-M
X-CDN-Forward
X-Cache-Handler
S
X-Connection-Hash
X-Middleware-Start
X-Vhost
X-Transaction
WWW-Authenticate
X-Twitter-Response-Tags
X-NB-Cached-Page
X-ID
X-Ttl
X-Varnish-Hits
X-Worker
X-Srv
X-DealerOn
SEOMOZ
X-Framework
X-Hiawatha-Cache
MJ12bot
X-Varnish-Ttl
X-Traffic
X-Cache-Engine
Server-Name
Cteonnt-Length
X-Magnolia-Registration
Cached
Use-Proxy
Accept-Charset
Nodo
X-Route-To
X-BackendServer
X-Varnish-Server
X-Cache-Fix
MC
NODE
X-Config-Blacklist-Version
X-Cache-PageType
Thanks
X-Drupal-Cache-Tags
X-Healthy
X-Trace
Cm-Server
X-VC-TTL
X-Fedora-School-Id
Retry-After
Frame-Options
X-ClientSide-Caching
X-Resty-Request-Id
X-Symfony-Cache
X-Content-Security-Policy-Report-Only
X-Unique-ID
Cache
X-Mobilized-By
Content-Transfer-Encoding
X-SO
X-JG-Page-Cache
X-Empowered-By
SVR
Local-Info
X-Cache-Level
X-Webcelerate
CLMOB
X-Cache-Type
X-Correlation-ID
X-Pressidium-NinukisWP-Ver
X-Session-Reinit
X-Sys-Req-ID
HAVer
X-Served-Server
Nitro-Cache
RATING
Eomportal-Instance
X-PF-Uncompressing
HCVer
Content_type
X-Amz-Storage-Class
X-Amz-Meta-Cb-Modifiedtime
X-Cache-Source
X-Hit-Cache
X-Cache-Provider
X-OPNET-Transaction-Trace
EagleEye-TraceId
X-Pagename
Access-Control-Allow-Header
X-Directory-Script
Web-App-Origin-Name
X-Site-Name
X-Mobile-URL
Identity
X-ServerIndex
Server-Info
X-Cache-TTL-Remaining
X-CF-Passed-Proto
WN
X-High-Performance
X-Varnish-Retries
X-WN-ClientGroup
X-VC-Enabled
X-Runtime-Memory
X-Static
X-Session-ID
X-Drectory-Script
Dispatcher
X-Blog
X-Remote-Addr
From-Origin
Dis-Env
X-Runtime-Rack
X-RiS-UFDI
X-VARITI-CCR
X-HP-Redirect
ServerSignature
X-Environment
X-LB-Server
X-Cache-Doesi
ServerTokens
X-App-Status
X-UA
X-Culture
X-FORWARDED-PROTO
X-WHOIS-Cached
Strikingly-Cache-Region
Strikingly-Cached-Version
Strikingly-Cached
X-Cocoon-Version
X-Middleton-PageSpeed
X-Generated-Time
X-FireWall-Port
X-Cache-Detail
X-WR-Flags
X-Fastly-Request-Id
X-Content-Type-Option
X-SERVER-NAME
Magicmarker
X-Cache-Node
X-Analytics
X-Nginx-Host
Home
SRV
X-OpenCart-Lightning
X-Page
BALANCEDTO
XDomainRequestAllowed
X-Varnish-Hostname
NtCoent-Length
X-Debug-Token
X-Domain-Checked
Max-Age
X-Pageid
Disablevcache
Pics-Label
X-Magento-Cache-Control
X-Provisioner-Version
IISExport
Backend-Timing
Buuteeq-Source
X-Powered-By-Server
X-Cache-Device-Type
X-ARRServer
X-Server-IP
X-LP
X-Unbounce-Variant
X-Server-Instance
X-App-Runtime
X-Unbounce-PageId
AC-ELC
X-A
X-Distributor
X-Disney-Akamai-Rule
X-Location
X-Site
Provider
X-Jphone-Copyright
X-GeoIP
X-Unbounce-VisitorID
X-Runtime-Affili
X-Atraveo-Param-Rm
X-Atraveo-From-Varnish-Cache
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-Atraveo-Zone
X-Atraveo-Varnish-Server-Id
X-Atraveo-Expires
X-Atraveo-ETag
Keywords
Front
X-CB-Server
X-Dynatrace-Js-Agent
X-Adobe-Loc
X-Adobe-Content
X-Force
X-Atraveo-Cache-Control
X-Key
X-PRAM
X-App-Server
X-Optimization
SBGI-7
X-Varnish-Debug-Age
SBGI-1
SBGI-10
HitType
X-Frames-Options
X-Client-Image-Vid
Bios
SBGI-Device
X-ORACLE-DMS-RID
X-Webkit-Csp
SBGI-9
Ufe-Result
X-Req-Head-Response
X-Map-Context
X-ACMCache
SBGI-5
OriginServer
X-Author
SBGI-RealPath
X-App
X-Client-Vid
X-AF-Userserver
X-Varnish-Debug-TTL
SBGI-RenderTime
NLCacheNote
X-Balanceador
X-EPiphany-Vid
X-LW-Web-Server
X-Garden-Version
Description
X-HW
X-Yottaa-Metrics
MW-Webserver
SS
X-Info
Ttl
Beyond-Iis
X-Yottaa-Optimizations
Machine
X-Drupal-Cache-Contexts
Cmsid
X-Resolver-IP
X-Amz-Id-1
X-E
X-Frame-Option
Cmstype
X-FRUIT
X-Source-ID
X-Batcache
X-Cache-Dispatcherpragma
DNNOutputCache
X-Cache-Dispatchercachecontrol
Proxy-Cache
Il-Cl
X-TTFB-L
X-Machine
X-IIJ-Cache
X-Varnish-Cache-Local
X-Captured
X-Data-Request
X-Cached-Status
X-Rewrite
ViewMode
X-PageType
X-Magento-Action
X-HashTwo
X-HA-Backend
X-GSL-Server
X-HA-Frontend
X-Amcomm-Site
PagesDisplayed
Smug-CDN
X-CAPServer
X-ETag
X-This-Proto
AsisCache
X-SmugMug-Hiring
X-SmugMug-Values
Fastly-Backend-Name
X-HydroSheep
X-TTFB
X-Grid-Server
X-Header
X-PM-ID
Og
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-MCB-Server
X-DataDome
X-Dev
X-Trace-Id
X-EC-Security-Audit
X-Detected-Device
X-Cdn-Forward
Worker
X-Test
X-Ser
X-Rack-Cors
X-WebKit-CSP-Report-Only
X-Cms-Mode
X-Esi
X-NginX-Server
X-Goog-Meta-Replace
X-Goog-Meta-Policy
X-Proto
X-Backend-Status
X-RAMCache
Nginx-Cache
X-Cluster-Node
X-ASAP-Cache
X-Clara-ASAP
X-Webapp
CommunityServer
X-Time-Microsecs
X-DB-Content-Length
X-B2f-Not-Route
X-DSMX-Render-MS
X-NginX-Cache
X-DSMX-Rewrite-MS
X-MSEdge-Ref
X-WR-MODIFICATION
X-Plat
W
X-Apm-Telemetry-Syncmark
RN-Server
SBMCLOUD
X-Env
Yoncu-Errno
Traffic-Origin
X-Hosting
VANITY-HOST
X-AEM
Lb
X-Powered-By-Home.Pl
X-WP
Ctx
Ews
Id
X-Smartcache-Timeout
BackendServer
X-Smartcache-Keys
X-Compressed-By
FastCGI-Cache-Status
Response-Time
X-Autoru-Host
X-RiS-PX
X-AutoRu-App-Id
Device
X-Stage
NS-VaryByCustom-Key
SiteSpeed
X-Rack-CORS
PServer
X-Varnish-Info
X-APP
X-ENV
X-Render-Time
X-Batcache-Reason
X-ACCELERATE
X-Autoru-LB
X-Nginx-Request-Time
X-EC2-Instance-Id
X-Resource
N365rili
SB-Cache-Life
X-JSESSIONID
X-Application
Ibf5scheme
SB-Site-Device
X-Tag-Playlist
X-Config-By
Url
Paypal-Debug-Id
Hname
SB-Cache-Remaining
Accept-Language
X-Cache-On
Sophnep-Edge-FX
X-ProcessESI
X-Flex-Community
X-Flex-Evend
X-M
X-Desc
X-Machine-Name
X-Node-Name
X-Flex-Evstart
X-Flex-Lang
X-Fpc
X-Actindo-RS
X-Flex-Tags
X-Flex-Tag
X-Flex-Lastmod
X-Proxy-Cache-Key
Tempo
ClientIP
Note
X-Rebelmouse-Surrogate-Control
X-RemovedCookies
X-MAT-GEO
X-Rebelmouse-Cache-Control
F5-IpCliente
Gzip
Set-Cookie2
X-V
SG
AMP-Access-Control-Allow-Source-Origin
RequestId
X-Viator-Tapersistentcookie
X-Beresp-Ttl
X-Environment-Context
X-SH-Cache-Status
Myheader
ScoreTracker
X-RealServer
AccessControlAllowOrigin
X-Depends
X-Cache-TTL-Age
X-Cache-TTL-Current
NCache
X-Reflector-Cache
X-Gyrobase-Publication
X-L-Path
X-Reflector
From
X-Adnet
X-DTC
X-LBPoolMember
X-ACLR-Version
X-CacheResult
X-Cache-Time
X-Airee-Node
Cleartype
X-Beatles
X-Sc-Cache
X-DN-Cache-Control
X-Cache-Via
X-CCM
X-Zendesk-User-Id
X-Secret
X-Cacheable-TTL
X-Zendesk-Origin-Server
X-RDP
X-Ocache
X-Lima-Id
COMMERCE-SERVER-SOFTWARE
X-Src-Webcache
Resin-Trace
Xc
X-We-Are-Hiring
X-KoobooCMS-Version
X-Hstore
X-Hrouter
SERVER-ID
X-Hosting-Env
X-Cache-Keep
X-CSRF-Token
X-SDE-Name
VServer
X-PBY
X-Deity
X-Cache-Id
X-Rq
X-Nginx
X-Cname-TryFiles
Swift-Performance
X-DEBUG
X-Pixelsilk-Version
X-Pixelsilk-Server
X-Served
X-Cache-BE
X-Cache-HT
SB-Site-IE-VERSION
X-Router-Backend
X-Goog-Meta-Goog-Reserved-File-Mtime
Session-Id
X-Layout
X-Rocket-Nginx-Reason
X-NewCloud-V-Cache
X-W3TC-Minify
X-CACHE-KEY
X-Backend-TTL
X-Tradeindia-Request-GUID
X-Tradeindia-SMgmt
X-Cms-Server
X-PBS-Fwsrvname
WFE
X-App-Version
X-CacheID
X-Catalyst
X-Provided-By
X-Front-Cache
AMFplus-Ver
X-Obj-Ttl
X-IP-Address
XDisk
Debug-Status
X-Cache-FS-Status
X-PBS-Appsvrip
X-Title
X-CH-Device
X-PBS-Appsvrname
RSL-Trace-ID
Provided-Host
X-UseReverse-Proxy
X-HostName
X-Upgrade-Enabled
X-Router
X-Session-Id
TC-S-Cache
TC-Cache-U
TC-Cache-IC
TC-S-Cache-M
X-Ghost-Cache-Status
X-Avvio-Cms-Cacheload
Access-Control-Request-Headers
TC-Cache
Session-From
X-LOCATION
X-Custom-Header
X-SmartBan-Host
X-SmartBan-URL
X-Amz-Meta-Content-Md5
ServerIP
X-Lb
X-AWS
WP-AdvCache-MemCached
X-Ezoic-Cdn
X-Upstream-Backend
VAR-Cache
X-Artvisual-Server
X-ReqId
X-Cache-Warmer
X-CACHE-TTL
X-Varnish-Action
X-Distil-CS
X-SCM-Server-Number
NZSpeedy
X-Search-Id
X-OCTOPOD
X-Highwire-SessionId
X-Highwire-RequestId
MageStack-Cache-Lifetime
MageStack-Cache-Status
MageStack-Cache-Hits
MageStack-Cache
Brightspot-Id
MageStack-Area
MageStack-Cacheable
MageStack-Config
MageStack-PageSpeed
MageStack-Tag
MageStack-Magento-Version
MageStack-Loadbalancer
MageStack-Debug
MageStack-Web-Node
Cluster-ID
Server-ID
!~Request-OOB-Work
Access-Control-Allow-Method
X-Webstats-RespID
X-Route
X-Response
X-CRA-DC
Content-Server
ENV
Web
X-Made-On
X-Forwarded-Host
X-PHP-Response-Code
RSB-LINK
X-Nocache
Mime-Version
X-Webkit-CSP
StatusCode
X-Dw-Trace-Id
Server-Ip
X-Turpentine-Esi
X-Cache-Action
X-4ormat-Cacheable
X-ChromeLogger-Data
MS-CV
X-SV
X-Server-Addr
X-IP
Warning
X-Meta-MSThemeCompatible
X-CDN-COMPRESS
X-Unique-Id
X-Wm-1
X-Meta-MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
X-Backend-Host
X-CDN-RULE
X-DS1D
X-Fstrz
X-Wm-VIP
X-WPL-DATA
X-GoCache-CacheStatus
X-RequesterIP
X-Server-Generated
X-WA-Info
X-Nginx-Request-Processing-Time
X-Enhanced-By
X-CM-FE
Progma
X-Aramark-SID
CpuTime
Server-Id
X-Does-He-Have-Time
X-Debug-Serve
X-Cluster
X-MCF-ID
X-Farm-Server
X-Cache-Varnish
Kp-EeAlive
X-Bcwwwid
X-Built-With
X-Node-ID
X-Pagely-Cache
Expiries
MSSmartTagsPreventParsing
MSThemeCompatible
ServerNode
X-Varnish-Cached-TTL
X-Varnish-Cached
X-Cache-Set
X-Beatles-Hits
X-Streams-Distribution
Aurora-Node
CDCHOST
X-WebNode
SHInfo
TP-Cache
TP-L2-Cache
X-Rocket-Nginx-Serving-Static
X-Debug-Message
X-Refresh
X-Header-Treatment
X-UPSTREAM-Address
X-AISO-Server
X-DevSrv-CMS
X-MainProfileURL
X-NewsFlow-Sitename
PLCDN
X-AISO-Cache
X-MainProfileName
X-MainProfileID
X-HP-CAM-COLOR
X-HTML-Minification-Powered-By
X-MainProfileCategory
X-Svr
X-Old-Content-Length
D
X-FIRSTBase
X-ManagedFusion-Rewriter-Version
X-Obj.Ttl
X-Gannett-Site-Version
X-Serendipity-InterfaceLangSource
Edgecast
DrivedBy
X-AMAZEEIO
X-Pubstack
X-Rewritten-By
X-Cjtype
X-NID
X-Origin-Cache
X-Real-IP
X-Backend-Name
Cache-Tags
X-Test-Debug
X-Who
X-XHTML-Minification-Powered-By
X-AISO-Cacheable
X-AppVersion
GP-Version
X-Your-GrandPa-Would-Wait
X-Would-Your-GrandPa-Wait
Rewriter
GP-Remote-Addr
FindLaw
X-7d-Trace-Id
Content-Cache
Aoestatic
DbServerName
SINA-LB
SINA-TS
X-Amzn-Trace-Id
X-DynamicCache
X-AppServer-Cache-Rule
X-7d-Instance-Id
X-Amzn-RequestId
X-TTL-Age
X-Varnish-Debug-Hits
X-Cache-Extended
Webserver
X-UT-Cache
X-SRV
X-Cache-LB
Cache-Status
X-MidCOM-Meta-Cache
Microcache
X-Vary-Options
X-HASH
X-DeliveryServer
Fw-Cache-Status
X-Dynamic
X-Count
GranicusServer
EQ-Cache
AR-CACHE
X-Sid
X-SilverStripe-Cache
AR-ATIME
AR-PoweredBy
X-REDIRECTSERVER
X-Brought-To-You-By
AR-SID
X-Box
X-Prerendered
UrlWatchModule-Time
X-Enabled1
Ibm-Web2-Location
X-NodeID
X-VC-Debug
X-SCProxy
X-Cache-Me-Harder
X-HAProxy
FrontEnd
X-Varnish-Instance
X-Accel-Cache-Control
Generate-Time
X-Hash
X-VLoc
X-SuperCache
X-ServiceProvider
X-Time-Zone
X-Uncacheable
X-UnsetCookies
X-Enabled2
X-Server-FQDN
X-Proxy-Id
X-Serendipity-InterfaceLang
X-Enabled3
X-S-Misc
X-Processed
X-Generation-Time
X-Country
X-D-Time
X-FreeTag-Count
IsMobile
X-ELB
X-XHR-Current-Location
X-Container
X-DDM-SERVER
X-Ss-Location
X-Ss-Conf
X-DDM-SERVER-UPDATED
X-Magento-Lifetime
X-Ssl-Cipher
X-Dynamic-Cache
X-Cf-Powered-By
X-Webkit-CSP-Report-Only
X-C2M-Server
X-C2M-Runtime
Expect-Ct
X-Oracle-DMS-ECID
X-Cache-Cfc
X-Varnish-URL
X-Litespeed-Cache-Control
Content-Generator
X-Not-Cacheable
X-Generated-Date
DB-Nickname
Rlogid
Tk
X-FG-RequestId
X-EBAY-C-REQUEST-ID
X-EC-Custom-Error
X-Jcms-Ajax-Id
X-ServedByHost
Apple-Itunes-App
Url-Hash
No-Cache
X-Config-Version
CD1
X-9XB-Server
X-Auto-Login
X-UPServer
X-Server-Instance-Name
B-Rlogid
X-ServerAddr
X-Script
X-Cache-Bypass
X-Diazo-Applied
M
TheAnswer
X-Cache-ID
WP-Cache
X-HEAD
X-Support
Tesla.Performance
Upgrade-Insecure-Requests
HostName
V-Age
X-Ec-Custom-Error
Be
Contao-Page-Layout
User-Cache-Control
X-ASAP-Age
ReqUrl
X-Transaction-Name
Section-Io-Cache
X-COUNTRY-CODE
X-Instance-Id
X-Pool-Info
X-No-Session
X-Serverid
X-VNode
X-Build-Id
X-Cachable
X-Protected-By
X-NMT-Proxy
X-Obvious-Tid
X-Obvious-Info
X-Origin-Server
X-Pass-Through
X-PROCESSED-BY
X-Highwire-Smart-Code
X-Highwire-Sitecode
X-ESI
X-Ezpublish-Installationid
X-Ezpublish-Nodeid
X-FPC
X-SVR
X-Theme
X-BPool-Back
X-BPool
X-BPool-Bx-Cache
X-BPool-Fx-Cache
X-BServer
X-BC
X-Ants-Machine-Id
Accept-CH
Language
Vserver
X-Ants-Host
WSCLoggingUUID
Public-Extension
X-Vol-Mrp
EXT-CACHEEXPIRE
Memento-Datetime
Server-Node
X-Vol-Correlation
X-Forwarded-By
Debug-Cache-Control
Debug-Expires
MwpReleaseVersion
X-AG-MIPS
X-Archive-Guessed-Charset
X-Archive-Orig-Connection
X-Content-Parsed-By
X-Request-Processing-Time
X-Request-Received
X-Server-App
X-Built-By
X-Archive-Orig-Server
X-Archive-Orig-Content-Length
X-Archive-Orig-Date
X-Archive-Orig-ETag
Container
AGI-Request-ID
X-Sn-Servicetimems
X-ENDPOINT
X-APIVERSION
Hosted-By
X-CPU-Time
X-B3-Traceid
Kanooh-Host
X-EC-Lua
X-B3-Spanid
Httpd-Identifier
X-APIAUTH-VAL
X-ORIKEY
X-ROUTING
X-Restarts
Actual-Object-TTL
X-Instance-Name
X-Hcom-Styx-Info
TestCC
Hostname
X-Hcom-Origin-Id
X-UUID
OutputRewritten
Prototype-RootPath
X-Czt
X-FCMS-Cache
X-HS-Status
Copyright
0
X-Amz-Meta-Version-Id
X-Csrf-Token
X-Imforza-Hosted
X-Pj-Cache-Status
X-Op-Benvironment
X-ZORequestID
VC-NoCache
X-Agent
X-Faeria
Application
Ez
X-W-Cache-Hits
Yola-ID
X-BeResp-Ttl
X-W-Cache
ProxiaInstanceId
X-CAMPUSSUITE-TENANT
X-Max-Age
X-CAMPUSSUITE-DEBUGGING
X-Phpwcms-Page-Processed-In
X-Phpwcms-Release
X-Debug-Out
X-Cache-Served
WebServer
Www.Aujourdhui.Com
X-Ar-Debug
X-CAMPUSSUITE-ENVIRONMENT
X-Turpentine-Cache
X-Varnish-Store
Content-Legth
INFO
ResourceTag
X-Varnish-Set-Cookie
X-Varnish-Max-Age
X-Varnish-Currency
X-Varnish-Esi-Access
X-Varnish-Esi-Method
X-FastCGI-Cache