Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Set-Cookie
Server
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
X-Cache
Age
Content-Language
X-AspNet-Version
P3P
X-Pingback
Expect-CT
X-UA-Compatible
Via
Upgrade
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Request-Id
X-Adblock-Key
Referrer-Policy
X-Varnish
X-Xss-Protection
X-Check
X-Generator
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-Language
X-Template
X-Drupal-Cache
X-Buckets
X-Wix-Server-Artifact-Id
X-Accel-Buffering
P3p
X-Permitted-Cross-Domain-Policies
X-Download-Options
Alt-Svc
X-Ac
X-Hacker
X-Cache-Hits
Host-Header
X-Sorting-Hat-Section
X-Dc
X-Alternate-Cache-Key
X-AspNetMvc-Version
X-ShopId
X-Sorting-Hat-PrivacyLevel
X-ShardId
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-PodId
X-Sorting-Hat-PodId-Cached
X-Via
X-Contextid
X-ServedBy
X-PC-Hit
X-PC-Key
X-Runtime
X-Powered-By-Plesk
X-Served-By
X-UA-Device
X-PC-AppVer
X-PC-Date
X-PC-Host
MS-Author-Via
X-Amz-Cf-Id
Content-Location
Access-Control-Allow-Headers
X-Wix-Request-Id
X-Seen-By
X-Rid
Access-Control-Allow-Methods
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Powered-CMS
X-Timer
X-IPLB-Instance
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
Status
X-Tumblr-Pixel-1
X-NewRelic-App-Data
Access-Control-Allow-Credentials
X-Tumblr-Pixel-2
CF-Cache-Status
Cartoon
X-WPE-Loopback-Upstream-Addr
X-Iinfo
X-Backend
X-Host
X-Endurance-Cache-Level
X-Cache-Status
Content-Encoding
X-Mod-Pagespeed
Powered-By
X-Cache-Hit
X-Port
X-Tumblr-Pixel-3
X-Cache-Enabled
X-Server
X-CST
X-CDN
Keep-Alive
X-Logged-In
X-DIS-Request-ID
X-Server-Powered-By
X-Drupal-Dynamic-Cache
X-Robots-Tag
X-Nginx-Cache-Status
X-Accel-Version
X-Proxy-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Turbo-Charged-By
Server-Timing
X-Page-Speed
X-Tumblr-Pixel-4
X-Content-Digest
X-Newrelic-App-Data
X-GitHub-Request-Id
X-Content-Powered-By
X-Rack-Cache
X-LiteSpeed-Cache
Content-Security-Policy-Report-Only
X-Pad
X-AH-Environment
X-FW-Hash
X-FW-Server
X-FW-Static
X-FW-Type
X-FW-Serve
Edge-Control
X-ASPNET-VERSION
X-Varnish-Cache
X-Webcom-Cache-Status
X-Hits
X-XRDS-Location
X-Request-Country
Request-Context
X-Request-ID
X-Trace
SPRequestGuid
X-BC-Stapler
X-SharePointHealthScore
X-MS-InvokeApp
WP-Super-Cache
Edge-Cache-Tag
MicrosoftSharePointTeamServices
X-HS-Cache-Config
X-HS-Content-Id
X-Node
Cf-Railgun
X-Amz-Request-Id
X-Amz-Id-2
X-FullPageCaching
Timing-Allow-Origin
Access-Control-Expose-Headers
X-HS-Combine-CSS
X-Cache-Lookup
Charset
X-Webserver
X-Content-Security-Policy
X-INKT-SITE
X-INKT-URI
X-Ua-Compatible
X-PhApp
X-CF-Powered-By
X-Cnection
X-Fastly-Request-ID
Request-Id
Access-Control-Max-Age
X-PHP-Backend
SPIisLatency
SPRequestDuration
X-Backend-Server
MicrosoftOfficeWebServer
X-Tumblr-Pixel-5
EagleId
X-Died
Rating
Composed-By
X-Swift-CacheTime
X-Swift-SaveTime
X-SS-Conf
X-SS-Location
Grace
X-CDN-Pop-IP
X-CDN-Pop
X-DDC-Arch-Trace
X-Device
X-Wix-Punisher
X-Tumblr-Content-Rating
Served-By
X-Safe-Firewall
X-Server-Name
Liferay-Portal
X-Spip-Cache
X-NF-Request-ID
X-Dw-Request-Base-Id
X-VCache
X-Hyper-Cache
X-Edge-Cache-Key
X-Edge-Cache
Front-End-Https
X-Cloud-Trace-Context
X-Cluster-Node
P-LB
P-WS
Surrogate-Control
X-Loop
X-TNCMS
X-LiteSpeed-Cache-Control
X-Acc-Exp
X-RateLimit-Remaining
X-RateLimit-Limit
X-Microcache
X-FB-Debug
X-StackifyID
X-RateLimit-Reset
X-Clacks-Overhead
X-Do-Not-Hack
Permitted-Cross-Domain-Policies
X-HeyJason
X-Jimdo-Wid
X-SERVER
X-Jimdo-Instance
X-OneAgent-JS-Injection
X-DNS-Prefetch-Control
Content-Style-Type
X-Sol
Display
X-Middleton-Display
X-Middleton-Response
X-Kinsta-Cache
Content-Script-Type
Response
X-Firenze-Processing-Times
X-Tumblr-Pixel-6
X-Debug-Info
X-Vtex-Processado-Em
Refresh
X-Age
Public-Key-Pins
X-User-Agent
X-Original-Date
X-XN-XNHTML
X-XN-Trace-Token
X-Cache-Config
X-Zen-Fury
X-Amz-Version-Id
X-Cached
X-Ruxit-JS-Agent
X-Magento-Tags
X-Goog-Hash
X-N-OperationId
X-WebKit-CSP
Fpc-Cache-Id
X-Px
X-Hostname
Retry-After
PageSpeed
X-LW-Cache
X-Version
Xkey
X-Generated-By
X-Topify-Platform
X-Shopid
X-Sorting-Hat-Shopid-Cached
X-Sorting-Hat-Shopid
X-Sorting-Hat-Featureset
X-Sorting-Hat-Podid-Cached
X-Shardid
X-Sorting-Hat-Podid
X-Sorting-Hat-Privacylevel
X-Handled-By
X-DynaTrace-JS-Agent
X-Upstream
Rt-Fastcgi-Cache
Allow
X-Frame-Option
X-Source
Access-Control-Request-Method
X-Goog-Metageneration
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Url
X-MiniProfiler-Ids
Last-Published
Fastcgi-Cache
X-From
X-URL
X-Request-Time
X-Loopia-Node
X-FORWARDED-FOR
TCN
X-Outils-CS
X-Edge-Location
Feature-Policy
X-B-Cache
X-Whom
X-CMS-Version
X-Cached-By
Edge-Control-Message
X-Platform-Cluster
X-Platform-Router
X-AspNetWebPages-Version
X-Platform-Processor
ServedBy
X-Engine
Public-Key-Pins-Report-Only
X-Varnish-HitMiss
X-Varnish-Count
X-RESOURCE
X-URLSCHEME
X-EdgeConnect-Origin-MEX-Latency
X-Varnish-TTL
X-Servedby
X-ET-API-ORIGIN
X-ET-API-VERSION
X-ET-API-ROOT
X-EdgeConnect-MidMile-RTT
Powered
X-Content-Options
Imagetoolbar
X-Accel-Expires
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Cache-Info
X-DynaTrace
X-LBLID
X-Cache-Key
X-Recruiting
Fhost
X-Msg-2-Log
X-Varnish-Cache-Hits
X-NWS-LOG-UUID
X-Actual-URL
X-Returned-From-DLL
X-Cdn
X-Returned-From
X-Passed-To
X-Original-Request
X-Guploader-Uploadid
X-Passed-To-DLL
Dmn
X-Magento-Cache-Debug
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Status
Warning
X-Varnish-Beresp-Grace
Product
X-CacheServer
X-Powered-By-VTEX-Janus-ApiCache
No
X-Location-Id
X-Vtex-Remote-Cache
X-VTEX-Cache-Status-Janus-ApiCache
X-Microcachable
X-Stale
X-Vtex-Processed-At
X-VTEX-Janus-Router-Backend-App
X-Returned-From-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
X-Passed-To-BeforeDispatch
X-Varnish-Host
X-Device-Type
X-Umbraco-Version
X-Application-Context
Generator
X-S
X-Developer
Host
X-Response-Time
DynaTrace
X-Signature
Origin
X-Cache-Rule
Arr-Disable-Session-Affinity
X-Gateway-Skip-Cache
X-Forwarded-For
X-Gateway-Cache-Status
X-Gateway-Cache-Key
X-HS-Content-Campaign-Id
X-Platform-Server
X-Platform
X-UD-Method
X-ApacheServer
X-PERF
X-Fastcgi-Cache
X-Hosted-By
Version
X-Shop-Id
Surrogate-Key
X-Defender
X-Ezoic-Cdn
X-Powered-By-360WZB
X-Platform-Cache
X-SSLProxy
Alternate-Protocol
X-Microcache-Status
X-Translation
X-F-Cache
X-Instart-Request-ID
X-SSLUpstream
X-Micro-Cache
Cache-Provider
X-Rnd
X-Cache-Tags
USPLoggingUUID
X-Environment
Pagespeed
X-Via-JSL
Cache-Key
X-Correlation-Id
WZWS-RAY
X-SVR-IIS
X-Svr-Proxy
X-App-Status
X-TransIP-Balancer
X-Cache-Namespace
X-Correlation-ID
X-Supported-By
X-HOST
X-TransIP-Backend
X-I-Sp
X-BS
X-DealerOn
X-Dealeron-Original-Url
X-Lambda-Id
X-Dealeron-Backend
X-SO
Content-Hash
X-Dispatcher
X-SSL-Cipher
X-Server-Upstream
MIME-Version
X-Sapient
X-Cache-Age
X-LB-Node
X-Daa-Tunnel
X-SSL-Protocol
X-Director
X-Ttl
X-Powered-By-VelaWeb
Content-Disposition
X-Matrix-Server
X-Magento-Cache-Control
X-Matrix-Proxy
X-Debug
X-Expires-Orig
X-Abgroup
X-NoCache
X-Dns-Prefetch-Control
X-Art-Request-Id
X-Duration
SSPAppContext
X-CSRF-Protection
X-Server-ID
X-App-Hosting
X-Varnish-GracePeriod
X-Varnish-ObjectSource
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-Varnish-RemainingLife
X-Cache-Control-Orig
RTSS
SN
Akamai-IP
S-Cnection
Pool
X-ORACLE-DMS-ECID
X-Akam-SW-Version
X-Hypernode
X-Last-Modified
X-Rocket-Nginx-Bypass
X-Track
X-I
X-Generated
Wsr-Cache
X-Edge-IP
X-NetCat-Version
X-Drupal-Cache-Tags
ServerID
Cneonction
X-Grace
X-Cache-Debug
Req-Id
Node
X-Front
X-ServerName
X-ATG-Version
X-Gamma-Serve
X-Server-Id
X-Pressidium-NinukisWP-Ver
X-Cache-Level
X-SRV
SiteSpeed
X-Cache-TTL
X-Forwarded-Proto
X-Vcap-Request-Id
If-Modified-Since
X-Storage
X-Amz-Meta-S3cmd-Attrs
X-Powered-By-VTEX-Janus-Edge
Powered-By-ChinaCache
X-Client-IP
X-Rocket-Nginx-Serving-Static
X-Route-Server
X-Cf-Powered-By
X-Cache-Handler
X-Magnolia-Registration
X-Flow-Powered
X-Litespeed-Cache
X-Page-Cache
X-LB-Server
Accept-Encoding
X-Cache-Server
X-Cache-Lifetime
X-Varnish-Cacheable
X-VARITI-CCR
X-GeoIP-Country-Code
X-Cache-Engine
X-Revision
X-Drupal-Cache-Contexts
X-Sucuri-ID
X-Cache-Type
X-Hiawatha-Cache
X-GUploader-UploadID
X-SV-Expires
X-SV-FromDBCache
X-SV-Nginx-Duration
X-SV-Pid
X-SV-Edge
X-SV-Duration
X-SV-Cacheable
X-SV-CacheTags
X-SV-CreatedAt
X-Url-Base
X-Trace-Id
X-Locale
X-CJ-Soft
X-SDS
X-Processing-Time
X-Content-Encoded-By
AMF-Ver
PICS-Label
Lsrequestid
Strikingly-Cached-Version
X-SmugMug-Values
Smug-CDN
X-TTFB
X-Country-Code
X-Cache-Operation
FAI-W-FLOW
Strikingly-Cache-Region
X-UPSTREAM
X-Env
X-Discourse-Route
X-Geo-Country
X-LB
X-PwB-Node
X-TTFB-L
X-SmugMug-Hiring
X-Firenze-Processing-Time
X-Cache-Expires
Strikingly-Cached
X-ARC
X-ServerID
Contao-Page-Layout
Author
X-TransIP-Reserved
X-Vhost
X-Service-Id
X-IsCacheURL
X-Pantheon-Site
X-Pantheon-Phpreq
X-Speed-Cache-Key
X-Pantheon-Environment
Surrogate-Key-Raw
X-Speed-Cache
W
Update-Time
Page-Completion-Status
Content-Encoding-Handler
ServerName
X-Litespeed-Cache-Control
X-Time
Src-Update
Nodo
X-Esi
X-ORACLE-DMS-RID
X-Runtime-Rack
X-Sucuri-Cache
Section-Io-Id
Qs-Cache
X-Server-Instance
X-Unbounce-VisitorID
X-Unbounce-PageId
X-Dispatch
X-Origin
X-Cache-Device-Type
X-GeoIP-Country-Name
X-Unbounce-Variant
NnCoection
X-Cookie-Domain
X-N
Proxy-Connection
X-Varnish-Url
Service-Worker-Allowed
Cache
X-Frontend
Backend
X-Akamai-Device-Characteristics
FindLaw
MC
X-Content-Age
X-Akamai-Device-Model
X-Pool
X-Middleware-Start
Srv
X-Varnish-Ttl
X-Varnish-IP
X-Storage-Cache
X-Wikidot-Backend
X-Varnish-Backend
X-Storage-Cache-Date
X-Wikidot-Static-Cache
X-Storage-Cache-Expires
X-Real-Server
X-FIRSTBase
X-Dynamic-Cache
X-FTR-Request-ID
Use-Proxy
X-Empowered-By
X-Cache-Only-Varnish
Tracecode
X-ACMCache
X-Vip
X-Nbs
X-Always-Cache
X-Content-Type-Option
S
Cache-Tags
X-FW
X-SRCache-Key
X-Id
Hummingbird-Cache
Custom-Header
X-HW
X-Now-Id
Https
X-SP-Farm
X-SP-UniqueName
X-Key
From-Origin
X-Config-Blacklist-Version
Local-Info
Pv
IM-Version
X-CacheFROM
Content-Transfer-Encoding
X-Webkit-CSP
X-Varnish-Server
Server-Name
X-Nginx-Cache
CacheControlHeader
X-Varnish-Retries
X-Varnish-Age
X-Symfony-Cache
X-High-Performance
X-RequestId
X-Drectory-Script
X-Browser
X-CF-Passed-Proto
X-Srv
IBM-Web2-Location
X-PF-Uncompressing
Location
Accept-Charset
X-ID
X-NginX-Server
Ohc-File-Size
X-Cache-Control
NetMindSessionID
X-NginX-Cache
X-BackendServer
X-Worker
HAVer
X-Span
X-Cache-Fix
HCVer
SEOMOZ
Edit
X-Cache-PageType
X-VC-Enabled
MJ12bot
X-Amz-Storage-Class
X-Akamai-Edgescape
Content_type
X-Connection-Hash
X-Orig-Vary
X-Shield-Request-Id
Nginx-Cache
X-Varnish-Hits
X-Sys-Req-ID
X-AF-Userserver
X-BKSrc
X-ARRServer
X-WR-Flags
X-Twitter-Response-Tags
X-Transaction
X-4ormat-Cacheable
Fw-Via
X-Role
X-Varnish-Debug-TTL
Content-MD5
RequestId
X-Nitro-Cache
Backend-Timing
X-Varnish-Debug-Age
X-Proxy
X-Rq
X-Unique-ID
X-Analytics
X-TTL
X-LP
X-Purge-URL
Cached
X-LW-Web-Server
Xc-Version
Cm-Server
X-Location
Proxy-Agent
X-RealServer
X-Redman-Backend
X-TB-M
Front
X-Avg-Cookie-Expires
Adm-Server
X-AVG-Country-Code
X-Redman-Final-Url
X-Content-Security-Policy-Report-Only
SHInfo
Swift-Performance
Server-Info
X-Adobe-Content
Dtk-Cache-Check-0
X-Hrouter
X-Hstore
X-Consent-Required
Request-Country
Request-EU
Eomportal-Instance
X-App-Server
X-Cache-CFC
X-CB-Server
X-Cache-Ttl
X-Adobe-Loc
X-Webstats-RespID
X-HeBS-Cache-Status
X-Framework
X-Disney-Akamai-Rule
X-Stage
X-WP
X-Atraveo-ETag
X-Fedora-School-Id
X-SE-Debug
X-PRAM
X-Atraveo-TTL
X-Amz-Rid
X-RiS-UFDI
X-Atraveo-Set-Cookie
Access-Control-Allow-Method
WWW-Authenticate
X-Purge-Host
X-Atraveo-Varnish-Server-Id
CS-SERVER
X-AEM
X-Server-IP
X-Atraveo-Zone
WP-FROM-CACHE
Pics-Label
X-Force
X-Appmachine-Environment
Pf.Web.Request.Id
X-Proxy-Backend
X-Atraveo-Expires
X-Atraveo-Param-Rm
X-Atraveo-Cache-Control
X-FastCGI-Cache
X-Generated-Time
X-Atraveo-From-Varnish-Cache
X-Source-ID
X-Amz-Meta-Content-Md5
SRV
SVR
Load-Balancer
X-WPL-DATA
X-Remote-Addr
Frame-Options
Environment
X-Runtime-Memory
X-Yadis-Location
X-SERVER-NAME
X-A
IES-Server
X-Balanceador
X-PBY
X-Generated-Timestamp
X-JG-Page-Cache
X-Request-Uri
X-Now-Cache
Url
X-Resty-Request-Id
Device
X-Amz-Apigw-Id
X-Amzn-RequestId
Firespring-Website-Id
X-CacheDebug
X-Sedo-Request-Id
ServerNode
X-CAPServer
X-Amzn-Trace-Id
X-Varnish-ID
EN-User
X-Captured
X-Detected-Device
X-VCS-Cacheable
X-VCS-Ttl
X-CDN-Forward
X-HostName
X-Processed-By
X-SH-Cache-Status
XDomainRequestAllowed
X-Smartcache-Timeout
Copyright
Aurora-Node
X-Smartcache-Keys
X-App-Runtime
X-Runtime-Affili
X-Cache-Miss-From
X-App
X-Origin-Id
Max-Age
X-GeoIP
Upgrade-Insecure-Requests
X-Domain-Checked
A-Powered-By
X-ClientSide-Caching
X-IIJ-Cache
X-Application
X-Provisioner-Version
X-WEBMGR-CACHE
Access-Control-Request-Headers
DNNOutputCache
X-Jphone-Copyright
From
X-Debug-Token
X-FireWall-Port
X-ORIKEY
X-ENDPOINT
X-HydroSheep
F5-Trid-Name
X-HS-Status
X-APIVERSION
X-APIAUTH-VAL
RN-Server
F5-Trid-Value
X-Cocoon-Version
Disablevcache
X-Lw-Cache
X-Rack-Cors
X-Varnish-Debug-Hits
X-ROUTING
X-Depends
AsisCache
AETN-Postal-Code
AETN-Longitude
X-Culture
AETN-DEVICE
AETN-EU
AETN-Latitude
AETN-State-Code
AKA-DEVICE
Cteonnt-Length
AETN-Country-Name
NtCoent-Length
BackendServer
X-E
X-GSL-Server
N365rili
Resin-Trace
X-Distributor
X-SAPP
X-Real-IP
X-Plat
X-Resolver-IP
X-Secret
X-Say-Cacheable
X-Confluence-Request-Time
X-Gannett-Site-Version
X-Resource
Pragrma
NODE
X-Varnish-Hostname
X-GoCache-CacheStatus
X-Amz-Id-1
X-Say-TTL
X-CRA-DC
Machine
AETN-Area-Code
AETN-City
AETN-Continent-Code
BALANCEDTO
Arrnode
X-SayCDN-TTL
Lookup-Cache-Hit
X-Cache-On
X-Cache-Varnish
AETN-Country-Code
Ibf5scheme
X-MAT-GEO
X-Actindo-Rs
X-Hit-Cache
AMP-Redirect-To
X-Proxy-Cache-Control
X-Rule
Access-Control-Allow-Header
X-Soro
X-Webcelerate
X-Varnish-Action
IISExport
X-HTML-Minification-Powered-By
X-Desc
Ufe-Result
X-Pagename
X-Forwarded-Host
Myheader
VANITY-HOST
VServer
X-Response
X-Custom-Name
Lb
Paypal-Debug-Id
X-VNode
X-CACHE-TTL
Filters
X-Dynatrace-Js-Agent
X-Garden-Version
X-Adnet
Identity
X-Agent
Id
*
X-Actindo-Thread-Id
X-MidCOM-Meta-Cache
Edgecast
X-VC-TTL
EagleEye-TraceId
X-WebNode
X-Via-S
ScoreTracker
X-RemovedCookies
X-ProcessESI
X-Actindo-Request-Id
X-Akamai-Transformed
Ram
Ramp
Noq
SERVER-ID
Web-App-Origin-Name
Now
X-Now-Trace
Report-To
X-Reflector-Cache
X-Nginx-Host
Dispatcher
Fastly-Backend-Name
X-Cacheable-TTL
X-Reflector
X-ENV
VSID
Prot
X-OpenCart-Lightning
X-Cache-2
X-SDE-Name
X-Cms-Mode
X-Dev
Magicmarker
X-Backend-Status
X-Compress-Hint
X-Proxy-Skip
X-Hosting-Env
X-Timestamp
CLMOB
Worker
X-Beget-Proxy
ViewMode
X-Cache-Doesi
Referer
Accept-Language
Beyond-Iis
X-IP
X-Client-Image-Vid
X-Goog-Meta-Policy
X-Goog-Meta-Goog-Reserved-File-Mtime
Cmstype
X-ServerIndex
Cmsid
X-Path-Route
X-Rebelmouse-Cache-Control
Bios
X-Server-Addr
Access-Control
X-Ser
XX
X-Yottaa-Optimizations
X-Yottaa-Metrics
NLCacheNote
X-AOL-HN
X-Abuse
X-FromPodPressCache
Web
X-UnsetCookies
Accept-CH
Prama
X-Map-Context
X-Flex-Tag
HitType
X-Flex-Tags
X-Flex-Lang
PBS
X-Session-Reinit
X-Box
X-Now-Instance
AC-ELC
X-Req-Head-Response
X-Bip
X-Flex-Community
X-Flex-Evstart
X-Flex-Evend
X-UA-Bot
X-Flex-Lastmod
X-DynamicCache
AR-SID
MageStack-Cacheable
X-Amcomm-Site
MageStack-Cache-Status
AR-CACHE
AR-PoweredBy
MageStack-Config
X-Test
MageStack-Magento-Version
MageStack-Tag
MageStack-Loadbalancer
MageStack-Debug
Thanks
X-Client-Vid
X-Cache-Detail
X-Refresh
X-Fstrz
X-EPiphany-Vid
MageStack-Cache-Hits
MageStack-Cache
X-Hosting
X-Ghost-Cache-Status
X-Middleton-PageSpeed
X-Info
MageStack-Cache-Lifetime
X-Page
AR-ATIME
X-Svr
MageStack-Area
MageStack-Web-Node
MageStack-PageSpeed
X-JSESSIONID
X-NWS-UUID-VERIFY
X-ESI
COMMERCE-SERVER-SOFTWARE
X-Enabled2
X-DataDome
X-Goog-Meta-Replace
X-Enabled1
X-Upgrade-Enabled
X-Enabled3
X-AutoRu-App-Id
X-Origin-Server
X-Autoru-Host
X-MCB-Server
X-Session-ID
X-Proto
X-RAMCache
X-Ratelimit-Limit
X-Ratelimit-Remaining
NZSpeedy
Cache-Status
Server-Id
CommunityServer
X-CACHE-KEY
WP-AdvCache-MemCached
SS
X-Cdn-Forward
X-Directory-Script
X-SilverStripe-Cache
Response-Time
Fastly-Debug-Digest
X-Varnish-URL
MageStack-Cache-Warning
Pramga
X-Origin-Cache
X-ReqId
DrivedBy
X-Cache-TTL-Age
X-Cache-TTL-Current
X-Cache-Warmer
X-V
X-Scheme
TC-S-Cache-M
X-ETag
X-Node-App
X-Protected-By
X-Serv
X-Status
X-RequesterIP
X-WA-Info
X-Zendesk-Origin-Server
X-Zendesk-User-Id
X-Proxy-Cache-Key
X-Nginx-Request-Processing-Time
Provider
X-Cache-Via
X-Highwire-Sitecode
X-Highwire-Smart-Code
CDCHOST
X-Firefox-Spdy
Traffic-Origin
ServerTokens
ServerSignature
X-Aramark-SID
X-Cache-Time
X-Frames-Options
X-Domino-CacheValidationWithETagResult
X-Domino-CacheValidationWithETagReason
Proxy-Cache
Il-Cl
X-DSMX-Rewrite-MS
X-DSMX-Render-MS
X-B2f-Not-Route
Ssl-Proxy-Server
X-Mobile-Rewrite
Home
X-Varnish-Cache-Local
X-HA-Backend
X-HA-Frontend
X-WN-ClientGroup
X-Oferteo-Domain
X-HashTwo
Apachenode
X-MrHost
TC-S-Cache
X-Ms-Request-Id
X-Data-Request
X-Block-Rule
WN
Num
MS-CV
X-ASAP-Cache
X-CacheLoc
X-Clara-ASAP
X-Block-RuleID
PB-RID
PB-PID
X-Max-Age
X-DevSrv-CMS
X-Blog
X-NodeID
X-Pass-Through
X-PressLabs-Stats
X-PM-ID
Cf-Ipcountry
Arrow-RequestId
X-Node-Id
X-ManagedFusion-Rewriter-Version
X-FPC
X-Render-Time
X-Rewritten-By
X-XHTML-Minification-Powered-By
X-Test-Debug
X-Search-Id
X-Src-Webcache
X-From-Cache
X-CloudBurst-WordPress
X-CloudBurst-Frontend
X-Mighty-Proxy
X-Pagely-Cache
X-Vary-Options
X-Server-Response-Time
X-CloudBurst-Cache
X-CloudBurst-Backend
REFRESH
X-WebKit-CSP-Report-Only
X-W3TC-Minify
Sl-Pgid
X-Appmachine-CreatedOn
X-Appmachine-Name
X-Appmachine-Duration
X-Built-By
Backend-Name
D
Yoncu-Errno
FRONT-END-SECUREBROWSER
Hamster
Server-ID
HitInfo
X-Olaf
X-Mobilized-By
Powered-By-115
X-Upstream-Addr
TP-Cache
TP-L2-Cache
X-KoobooCMS-Version
X-Container
X-Czt
X-7d-Instance-Id
Content
X-Via-NSCOPI
SBSS
X-Cache-Dispatchercachecontrol
X-DDM-SERVER
X-Cache-Dispatcherpragma
X-Reqid
X-Qiniu-Zone
X-Amz-Meta-Cb-Modifiedtime
X-7d-Trace-Id
X-Cache-Action
X-Cache-Extended
X-Log
X-PBS-Fwsrvname
X-PBS-Appsvrname
X-Rack-CORS
Amfplus-Ver
TC-Cache-U
X-SSLTerm-Server
X-ZORequestID
X-Title
MageStack-Cache-Lifetime-Sent
MageStack-Last-Modified
X-CH-Device
X-FastCGI-Cache-Status
X-Layout
X-Build-Id
X-Accel-Cache-Control
Yola-ID
Backend-IP-Port
X-CacheID
X-Cache-FS-Status
X-Instance-Id
X-MyName
X-PBS-Appsvrip
X-Nginx-Request-Time
SINA-TS
SINA-LB
Provided-Host
Dis-Env
X-Instart-Cache-Id
CDN-Cache
Session-Id
X-DDM-SERVER-UPDATED
Tempo
X-Highwire-RequestId
X-Highwire-SessionId
X-ServiceProvider
X-HAProxy
X-EC2-Instance-Id
X-Batcache
X-Batcache-Reason
X-Built-With
X-SmartBan-Host
X-SmartBan-URL
Server-Ip
TC-Cache
TC-Cache-IC
X-Unique-Id
X-WR-Trace
X-Distributed-By
X-XHR-Current-Location
AMP-Access-Control-Allow-Source-Origin
X-B3-Sampled
X-Streams-Distribution
Xc
X-PHP-Response-Code
X-Proxy-Id
X-SuperCache
Cleartype
X-Shard
X-Appversion
X-Dw-Trace-Id
X-Appid
VC-NoCache
X-Bcwwwid
X-FORWARDED-PROTO
Ali-Swift-Global-Savetime
X-DB-Content-Length
Play-Detected-Device
X-Pj-Cache-Status
PServer
Play-Detected-UserAgent
X-Tag-Playlist
X-Processed
X-SCProxy
X-Served
X-This-Proto
X-Generation-Time
X-Varnish-Cache-Ttl
Viewport
X-Cache-Me-Harder
X-Upstream-Status
X-D-Time
Prototype-RootPath
Hit-Count
X-UA
X-S-Misc
X-Web-Node
Purge-Cache-Tags
Aoestatic
X-HA
X-Nx-All
X-Powered-By-Server
GranicusServer
X-Nx
Request-Filtered-By
X-Cachable
X-Proxy-Host
X-HEAD
X-CPU-Time
X-RunCloud-Cache
X-SSL
X-TLS-Version
Key
X-Activity-Id
X-Debug-Message
X-Cname-TryFiles
X-Deity
X-Upstream-Backend
X-LBPoolMember
X-Magento-Action
X-Cache-LB
X-Amz-Meta-Version-Id
X-ASAP-Age
X-Magento-Lifetime
X-Az
X-M
X-SCM-Server-Number
X-SID
X-MainProfileName
SB-Cache-Life
X-Server-Generated
X-Newrelic-Synthetics
X-Origin-Date
X-MainProfileID
X-Len
X-VG-WebCache
SB-Cache-Remaining
X-Envoy-Upstream-Service-Time
X-MainProfileCategory
X-Enhanced-By
X-MainProfileURL
Requested-Host
X-Trans-Id
X-Clx-Request
X-GEO
StatusCode
X-Skip-Cache
Page-Template
X-NewsFlow-Sitename
X-Compressed-By
X-Geo-IP
X-Origin-Upstream-Status
X-HP-CAM-COLOR
Backend-Powered-By
X-Airee-Node
X-BeResp-Ttl
X-Content-Type
X-Front-Cache
FastCGI-Cache
X-BPool-Back
X-BServer
X-Amzn-Remapped-Content-Length
RSL-Trace-ID
X-MSU-SOURCE
X-Powered-By-ADS
X-Dck
Progma
X-Who
X-AMAZEEIO
X-Ms-Version
X-Avvio-Cms-Cacheload
SB-Site-IE-VERSION
SB-Site-Device
X-Proxy-Server
Nitro-Cache
X-Stiffia-Cache
End-User-Country
X-Tradeindia-Request-GUID
X-Tradeindia-SMgmt
X-ProBase-Server
X-InDy-Memory
Webserver
X-AppServer-Cache-Rule
UrlWatchModule-Time
Nd
X-VTEX-Cache-Status-Janus-Edge
DbServerName
X-Server-Hostname
Content-Sn
Og
Request-Time
ModuleCacheType
Keywords
DB-Nickname
Description
X-Varnish-Grace
X-Sid
X-CD
X-ACCELERATE
X-Cjtype
X-Csrf-Token
X-Device-Item
X-Brought-To-You-By
Www.Aujourdhui.Com
V-TTL
X-Geo
X-Lb
X-Dynamic
ORIGIN-SERVER
ORIGIN-SITE
X-B3-Spanid
X-B3-Traceid
CommercePlatform-Version
X-Nginx-Page-Cache
CDN-Uid
CDN-RequestId
CDN-CachedAt
CDN-PullZone
X-Hit
Ctx
X-AISO-Cacheable
X-AISO-Cache
X-AISO-Server
OracleCommerceCloud-Version
OracleCommerceCloud-Sandiego
Debug-Status
X-Varnish-Cached-TTL
X-MCF-ID
X-Ruby-Cluster-ID
X-Route
MachineName
X-Fpc
MwpReleaseVersion
X-Distil-CS
X-Sn-Servicetimems
X-Varnish-Cached
Expiries
X-UPServer
ServerIP
Session-From
X-Backend-Host
RM-Cache-Control
Hosted-By
Ews
ID
X-Q-S
Plateforme
NGX
Content-Generator
X-Wodby-Node
X-Served-Server
X-Qnm-Cache
X-Server-Ip
X-SV
X-S-C
X-Varnish-Cache-Control
X-OPNET-Transaction-Trace
RSB-LINK
X-CSRF-Token
X-Cache-ID
X-Custom-Header
X-I-V
X-From-Varnish
X-Header
X-Boot
X-Beatles
X-M-V
X-Mw-Workerstats
X-M-T
Ttl
X-M-P
X-S-V
X-M-Reqid
X-UPSTREAM-Address
HSTS
X-We-Are-Hiring
X-Netrix-ID
X-Machine
X-Middleton-Pagespeed
X-VC-Debug
X-Time-Microsecs
X-Gate-Blk
X-Gate
X-Nginx
X-Sorting-Hat-Expire-Cache
VAR-Cache
X-Backside-Transport
X-Catalyst
X-Transaction-Name
Realaction
X-Grid-Server
X-InDy-Query
X-M-Log
X-InDy-Time
LB
Actioncode
NS-VaryByCustom-Key
ProxiaInstanceId
X-Gateway-Rate-Limit-Delayed
X-Global-Transaction-ID
X-SiteDistrict-Cache
X-From-Varnish-Deploy