Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
P3P
X-AspNet-Version
Age
X-Pingback
Content-Language
Via
X-UA-Compatible
Expect-CT
Access-Control-Allow-Origin
Upgrade
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Check
X-Template
X-Language
X-Varnish
X-Xss-Protection
X-Generator
X-Buckets
Alt-Svc
X-Drupal-Cache
X-Request-Id
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Powered-By-Plesk
Content-Location
X-Permitted-Cross-Domain-Policies
X-Download-Options
Host-Header
X-Runtime
MS-Author-Via
X-ShopId
Cartoon
X-ShardId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PodId
X-Dc
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-Section
X-Alternate-Cache-Key
X-FRAME-OPTIONS
X-Powered-CMS
X-IPLB-Instance
X-UA-Device
X-Served-By
X-Amz-Cf-Id
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
Status
Access-Control-Allow-Methods
X-Cache-Status
X-Via
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
CF-Cache-Status
X-Backend
Referrer-Policy
X-DIS-Request-ID
X-Contextid
X-Mod-Pagespeed
Powered-By
X-PC-Key
X-PC-Hit
Content-Encoding
X-PC-Date
X-PC-Host
X-PC-AppVer
X-WPE-Loopback-Upstream-Addr
X-CST
X-Request-ID
X-ServedBy
X-Server
X-Logged-In
Keep-Alive
X-Cache-Hit
X-Host
X-Port
X-CDN
P3p
X-Rid
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-User
X-Server-Powered-By
X-Cache-Enabled
X-Robots-Tag
X-Tumblr-Pixel-1
X-Endurance-Cache-Level
X-Nginx-Cache-Status
X-Accel-Version
X-Seen-By
X-Wix-Request-Id
X-Wix-Server-Artifact-Id
X-Turbo-Charged-By
X-Tumblr-Pixel-2
X-Page-Speed
X-Drupal-Dynamic-Cache
X-Original-Date
X-Pad
X-Content-Powered-By
Content-Security-Policy-Report-Only
WP-Super-Cache
X-Content-Digest
X-Pantheon-Styx-Hostname
X-Proxy-Cache
X-Styx-Req-Id
X-AH-Environment
X-Rack-Cache
X-Varnish-Cache
X-GitHub-Request-Id
X-LiteSpeed-Cache
X-Request-Country
X-Tumblr-Pixel-3
X-Ua-Compatible
X-XRDS-Location
X-Cnection
Edge-Control
SPRequestGuid
X-SharePointHealthScore
X-Cache-Lookup
X-MS-InvokeApp
MicrosoftSharePointTeamServices
X-Node
X-Died
Timing-Allow-Origin
Cf-Railgun
Charset
X-Trace
X-Amz-Request-Id
X-Amz-Id-2
X-FW-Hash
Edge-Cache-Tag
X-FW-Static
X-FW-Type
X-FW-Serve
X-Content-Security-Policy
X-Webcom-Cache-Status
X-Webserver
Request-Id
X-HS-Cache-Config
X-FullPageCaching
X-PhApp
X-HS-Content-Id
X-PHP-Backend
MicrosoftOfficeWebServer
X-Safe-Firewall
X-CF-Powered-By
X-INKT-SITE
X-INKT-URI
Composed-By
X-Hits
Request-Context
Access-Control-Max-Age
SPIisLatency
SPRequestDuration
X-Newrelic-App-Data
X-BC-Stapler
Access-Control-Expose-Headers
X-Swift-CacheTime
X-Swift-SaveTime
EagleId
Served-By
X-Spip-Cache
Grace
X-CDN-Pop
X-CDN-Pop-IP
X-Hyper-Cache
Liferay-Portal
X-Backend-Server
X-Tumblr-Pixel-4
X-Server-Name
X-Device
X-Dw-Request-Base-Id
X-Fastly-Request-ID
X-Microcache
X-Wix-Renderer-Server
X-LiteSpeed-Cache-Control
Content-Style-Type
Content-Script-Type
X-ServerName
X-VCache
X-FB-Debug
X-SERVER
X-Clacks-Overhead
X-RateLimit-Remaining
X-RateLimit-Limit
X-Cloud-Trace-Context
Public-Key-Pins
X-User-Agent
Rating
X-RateLimit-Reset
X-Servedby
X-Jimdo-Wid
X-Jimdo-Instance
X-Firenze-Processing-Times
Real-Hostname
X-Loop
X-TNCMS
Surrogate-Control
X-Acc-Exp
X-Cache-Config
X-DDC-Arch-Trace
Refresh
Front-End-Https
X-SS-Conf
X-SS-Location
X-XN-Trace-Token
X-XN-XNHTML
X-Middleton-Display
X-Middleton-Response
X-Age
X-Sol
Display
Response
Fpc-Cache-Id
Xkey
X-StackifyID
X-HS-Combine-CSS
X-DNS-Prefetch-Control
X-Microcachable
X-Hostname
X-Generated-By
X-N-OperationId
X-Cached
X-Tumblr-Content-Rating
X-Px
X-OneAgent-JS-Injection
X-Zen-Fury
X-Cdn
X-Cached-By
X-Topify-Platform
PageSpeed
X-Tumblr-Pixel-5
Edge-Control-Message
X-Frame-Option
X-Url
TCN
X-Correlation-Id
X-Vtex-Processado-Em
X-Request-Time
X-MiniProfiler-Ids
X-WebKit-CSP
X-Ruxit-JS-Agent
X-Whom
X-CMS-Version
X-Amz-Version-Id
X-Magento-Tags
X-DynaTrace-JS-Agent
Product
P-LB
P-WS
Surrogate-Key
Rt-Fastcgi-Cache
X-Outils-CS
X-Kinsta-Cache
X-Handled-By
X-Content-Options
X-Via-JSL
X-URL
X-Varnish-TTL
X-B-Cache
Access-Control-Request-Method
X-AspNetWebPages-Version
Imagetoolbar
X-VARNISH-Cache
X-DynaTrace
X-Edge-Location
X-Recruiting
X-Cache-Rule
Host
Fastly-Debug-Digest
X-FORWARDED-FOR
X-Forwarded-For
X-Engine
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Powered
ServedBy
X-Debug-Info
X-Umbraco-Version
Alternate-Protocol
X-Varnish-Cache-Hits
X-NWS-LOG-UUID
X-HOST
X-Goog-Hash
X-Msg-2-Log
X-Response-Time
X-CacheServer
X-ApacheServer
X-PERF
X-LBLID
Fhost
X-Track
X-Application-Context
X-Signature
X-From
X-Actual-URL
WZWS-RAY
X-Powered-By-360WZB
X-Vtex-Processed-At
X-Powered-By-VTEX-Janus-ApiCache
X-Vtex-Remote-Cache
X-VTEX-Janus-Router-Backend-App
X-Passed-To
No
X-VTEX-Cache-Status-Janus-ApiCache
X-Passed-To-DLL
X-Original-Request
X-Returned-From-DLL
X-Returned-From
X-Location-Id
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Returned-From-PostProcessResponse
X-Passed-To-BeforeDispatch
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
Public-Key-Pins-Report-Only
Generator
Akamai-IP
X-Hosted-By
DynaTrace
X-Pantheon-Environment
X-Cache-Age
X-Pantheon-Phpreq
Surrogate-Key-Raw
X-Stale
X-Platform
X-Micro-Cache
X-LW-Cache
X-Pantheon-Site
X-Accel-Expires
X-Powered-By-VTEX-Janus-Edge
Origin
X-Director
Dmn
X-UD-Method
X-Developer
Arr-Disable-Session-Affinity
Fastcgi-Cache
X-Cache-Info
X-Upstream
X-Rocket-Nginx-Bypass
X-Supported-By
Retry-After
HTTPS
X-Varnish-Host
X-S
X-RESOURCE
X-Instart-Request-ID
X-Source
X-Cache-TTL
X-Version
X-LB-Node
X-Platform-Processor
X-Platform-Router
X-URLSCHEME
X-CSRF-Protection
X-TransIP-Balancer
X-Rnd
X-Fastcgi-Cache
X-Platform-Cluster
X-EdgeConnect-Origin-MEX-Latency
X-LB
Content-Hash
X-Powered-By-VelaWeb
X-Tumblr-Pixel-6
X-Device-Type
X-Matrix-Proxy
X-Storage
X-NetCat-Version
X-Matrix-Server
X-Defender
X-Shop-Id
X-App-Hosting
X-Dispatcher
X-TransIP-Backend
X-I-Sp
X-BS
X-EdgeConnect-MidMile-RTT
X-Front
X-Magento-Cache-Debug
X-AOL-HN
X-F-Cache
X-Art-Request-Id
X-Daa-Tunnel
Version
X-HS-Content-Campaign-Id
RTSS
X-Cache-Tags
Cache-Provider
X-I
X-Varnish-Count
Powered-By-ChinaCache
IBM-Web2-Location
X-Varnish-HitMiss
Last-Published
Ohc-File-Size
X-Cache-Key
X-Drupal-Cache-Tags
X-ATG-Version
USPLoggingUUID
Pagespeed
X-Cache-Operation
X-Translation
X-Page-Cache
X-Platform-Server
X-Microcache-Status
Pool
X-Hypernode
MIME-Version
Allow
X-Cache-Debug
X-Gamma-Serve
X-Expires-Orig
SSPAppContext
X-Flow-Powered
X-UPSTREAM
X-Server-ID
X-Varnish-ObjectSource
Node
X-Varnish-RemainingLife
X-Varnish-RemainingTTL
X-Varnish-GracePeriod
X-Varnish-Seen-By
X-Route-Server
X-Content-Encoded-By
X-ARC
X-Ua-Device
X-Loopia-Node
Content-Disposition
X-Server-Upstream
Lsrequestid
X-Lambda-Id
X-Revision
X-Edge-IP
X-Platform-Cache
Cache-Key
X-SSL-Cipher
X-SSL-Protocol
X-Generated
X-Drupal-Cache-Contexts
X-Varnish-Age
Content-MD5
X-NoCache
X-Id
X-Hiawatha-Cache
X-Url-Base
X-SV-Duration
X-SV-CreatedAt
X-Environment
Location
X-SV-Expires
X-Cache-Expires
X-Grace
X-SV-CacheTags
X-SV-Edge
X-SV-Cacheable
Wsr-Cache
X-SV-FromDBCache
X-SV-Nginx-Duration
X-SV-Pid
X-ORACLE-DMS-ECID
Content-Encoding-Handler
X-Debug
X-Varnish-Cacheable
X-Dispatch
Section-Io-Id
X-Client-IP
S-Cnection
ServerID
X-CJ-Soft
X-Abgroup
X-Cache-Only-Varnish
Accept-Encoding
X-Vcap-Request-Id
If-Modified-Since
X-Ezoic-Cdn
X-Ttl
X-TTL
FAI-W-FLOW
Page-Completion-Status
X-Cache-Control-Orig
X-Cache-Lifetime
X-IsCacheURL
ServerName
X-GeoIP-Country-Code
X-Country-Code
X-RequestId
X-Firenze-Processing-Time
X-Sucuri-ID
Fw-Via
Srv
X-Nbs
X-VTEX-Cache-Status-Janus-Edge
X-Sentry-ID
X-PwB-Node
X-Vhost
X-Cache-Server
X-Duration
X-Orig-Vary
Pv
X-Proxy
Cneonction
X-Akamai-Transformed
X-Content-Age
X-Cache-Engine
X-ServerID
X-Amz-Meta-S3cmd-Attrs
NetMindSessionID
Proxy-Connection
Author
X-N
X-Sapient
X-Geo-Country
X-Always-Cache
X-Litespeed-Cache
Backend
X-Dns-Prefetch-Control
Cm-Server
SN
X-Time
X-Nginx-Cache
X-Cache-Type
X-Processing-Time
X-Magento-Cache-Control
X-Discourse-Route
Qs-Cache
X-Shield-Request-Id
X-Goog-Generation
Server-Name
Nodo
X-GUploader-UploadID
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-Goog-Storage-Class
IM-Version
SRV
Req-Id
X-Server-Id
X-Location
X-Sucuri-Cache
X-Speed-Cache
X-Browser
X-Magnolia-Registration
X-Speed-Cache-Key
PICS-Label
X-SRCache-Key
X-Dynatrace-Js-Agent
X-Cookie-Domain
X-Cache-Level
X-Yadis-Location
X-Middleware-Start
X-FW
X-Cache-Control
X-NB-Cached-Page
Pics-Label
X-Processed-By
X-GeoIP-Country-Name
X-Akamai-Device-Characteristics
X-Akamai-Device-Model
X-Cache-CFC
Server-Info
X-Real-Server
X-Pressidium-NinukisWP-Ver
X-Cache-Fix
X-Worker
X-Cache-PageType
X-Varnish-Url
X-Frontend
NnCoection
X-WebServer
HCVer
X-SERVER-NAME
X-BackendServer
X-Cache-Namespace
Accept-Charset
HAVer
X-Varnish-Backend
X-SRV
X-Purge-URL
S
X-Config-Blacklist-Version
X-ACMCache
X-Last-Modified
X-Cluster-Node
Use-Proxy
X-Sys-Req-ID
X-Varnish-IP
X-Webkit-CSP
X-Runtime-Rack
X-Purge-Host
X-App-Server
SiteSpeed
Thanks
A-Powered-By
Cached
AMF-Ver
X-Litespeed-Cache-Control
X-SO
Pf.Web.Request.Id
X-Ss-Conf
X-Traffic
X-Abuse
X-Framework
X-Ss-Location
X-Route-To
X-BKSrc
X-Forwarded-Proto
X-Unique-ID
Cache
X-DealerOn
Xc-Version
X-Varnish-Retries
X-SDS
X-High-Performance
X-Cache-Device-Type
Local-Info
X-CF-Passed-Proto
X-Webstats-RespID
Tracecode
X-Session-ID
NODE
X-JG-Page-Cache
X-Server-IP
X-CDN-Forward
X-Amz-Storage-Class
Cache-Tag
X-Twitter-Response-Tags
X-ARRServer
X-Transaction
X-Detected-Device
SVR
Server-Timing
X-Connection-Hash
X-ClientSide-Caching
X-Mobilized-By
X-Varnish-Hits
X-PF-Uncompressing
WWW-Authenticate
X-Balanceador
X-FTR-Request-ID
EagleEye-TraceId
MC
X-Srv
X-Rocket-Nginx-Serving-Static
X-Origin
SEOMOZ
MJ12bot
W
X-LB-Server
CacheControlHeader
X-DataDome
X-FastCGI-Cache
X-WR-Flags
X-Drectory-Script
X-Cf-Powered-By
X-Content-Type-Option
WN
X-Empowered-By
X-WN-ClientGroup
X-Jphone-Copyright
P-ID
X-Content-Security-Policy-Report-Only
X-Debug-Token
XDomainRequestAllowed
X-AF-Userserver
X-Sorting-Hat-Expire-Cache
Keywords
Cache-Tags
X-VARITI-CCR
ServerTokens
Frame-Options
X-RiS-UFDI
ServerSignature
Eomportal-Instance
Magicmarker
X-ORACLE-DMS-RID
Nitro-Cache
HitType
X-Varnish-ID
X-Garden-Version
X-Yottaa-Optimizations
X-LP
AC-ELC
Content-Transfer-Encoding
Proxy-Agent
X-Analytics
Backend-Timing
X-Yottaa-Metrics
X-Culture
X-Runtime-Memory
X-Generated-Time
X-Cache-TTL-Remaining
X-HW
X-Provisioner-Version
X-ASAP-Cache
Ufe-Result
Description
X-Clara-ASAP
X-Client-Image-Vid
X-EPiphany-Vid
X-Client-Vid
X-Pagename
X-HTML-Minification-Powered-By
X-App-Status
X-Remote-Addr
X-Directory-Script
X-Domain-Checked
X-Cache-Node
Cteonnt-Length
Max-Age
X-Cache-Doesi
X-Hit-Cache
X-Cache-Handler
X-Adobe-Content
X-Adobe-Loc
Dispatcher
Worker
X-Dev
X-Cms-Mode
Adm-Server
Web-App-Origin-Name
X-Redman-Backend
X-VNode
X-Redman-Final-Url
X-Avg-Cookie-Expires
X-Akamai-Edgescape
X-Amz-Meta-Cb-Modifiedtime
VANITY-HOST
X-NginX-Cache
X-AVG-Country-Code
X-Unbounce-Variant
X-Server-Instance
X-Unbounce-VisitorID
X-WPL-DATA
X-Distributor
X-OpenCart-Lightning
X-LW-Web-Server
Content_type
X-FireWall-Port
X-App-Runtime
X-Runtime-Affili
X-Varnish-Ttl
X-Unbounce-PageId
Noq
Ram
X-ServerIndex
X-MCB-Server
X-CAPServer
X-A
BALANCEDTO
X-GoCache-CacheStatus
Ramp
X-Mobile-URL
Play-Detected-Device
X-PRAM
X-Force
Play-Detected-UserAgent
X-Varnish-Hostname
X-HP-Trace-Project
X-HP-Trace-ID
X-Page
Front
X-WebKit-CSP-Report-Only
X-Amcomm-Site
X-Akamai-3PM-SW-Version
X-SmugMug-Values
X-App
X-Rewrite
X-OPNET-Transaction-Trace
X-Env
Smug-CDN
X-TTFB
X-TTFB-L
X-AEM
X-Key
X-Webkit-Csp
X-Webcelerate
X-Varnish-Debug-TTL
X-Varnish-Debug-Age
X-Atraveo-Zone
X-SmugMug-Hiring
X-GeoIP
X-Atraveo-Cache-Control
X-Atraveo-ETag
X-Atraveo-From-Varnish-Cache
X-Atraveo-Param-Rm
X-ID
X-Source-ID
X-HOSTNAME
X-Disney-Akamai-Rule
X-Correlation-ID
X-Rq
X-Atraveo-Set-Cookie
X-Atraveo-Expires
X-Atraveo-Varnish-Server-Id
X-CB-Server
X-Atraveo-TTL
From-Origin
Device
Machine
X-Esi
Cmsid
X-Backend-Status
SBGI-1
NLCacheNote
Cleartype
Contao-Page-Layout
X-Rack-CORS
SBGI-10
X-Nginx-Host
X-Fedora-School-Id
SBGI-5
SERVER-ID
SBGI-7
SBGI-RealPath
X-Resty-Request-Id
SBGI-9
SBGI-Device
SBGI-RenderTime
X-TB-M
Cmstype
Dis-Env
Beyond-Iis
X-Resource
X-CDN-RULE
Access-Control-Allow-Header
OriginServer
Resin-Trace
ViewMode
X-WP
X-NginX-Server
X-Smartcache-Keys
X-CDN-COMPRESS
Strikingly-Cache-Region
X-Frames-Options
X-Session-Reinit
X-Plat
X-Varnish-Server
CLMOB
Og
X-Compressed-By
X-Wikidot-Backend
X-Wikidot-Static-Cache
CommunityServer
X-Trace-Id
X-E
X-Smartcache-Timeout
X-GSL-Server
X-Ser
Disablevcache
X-Ghost-Cache-Status
X-HashTwo
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Data-Request
X-Info
X-Confluence-Request-Time
X-Depends
X-Redirector
Strikingly-Cached
X-Cache-Keep
X-CacheResult
Strikingly-Cached-Version
From
X-Symfony-Cache
X-HydroSheep
X-Real-IP
X-Resolver-IP
X-Fstrz
Lb
X-AutoRu-App-Id
X-V
X-Header
AMP-Access-Control-Allow-Source-Origin
X-VC-TTL
X-RAMCache
Id
X-Stage
X-Dynamic-Cache
X-Proto
Custom-Header
Web
X-Varnish-Ip
X-IIJ-Cache
X-Autoru-LB
MS-CV
Bios
X-VC-Enabled
AsisCache
X-WA-Info
Fastly-Backend-Name
X-Autoru-Host
X-Airee-Node
X-Adnet
X-MAT-GEO
X-Map-Context
Service-Worker-Allowed
X-Machine-Name
X-WR-MODIFICATION
X-ENV
X-Cdn-Forward
X-Desc
Content-Server
Ibf5scheme
N365rili
Il-Cl
Yoncu-Errno
Hamster
Myheader
X-Dw-Trace-Id
Paypal-Debug-Id
COMMERCE-SERVER-SOFTWARE
X-Sc-Cache
Traffic-Origin
X-Hstore
X-Pj-Cache-Status
X-Bip
PagesDisplayed
SG
X-ETag
X-FPC
X-Hrouter
Hname
Ews
Home
SHInfo
X-Secret
ClientIP
F5-IpCliente
X-DN-Cache-Control
Hostname
Arrnode
X-Origin-Server
X-Varnish-Cache-Local
X-Gyrobase-Publication
X-Req-Head-Response
TC-Cache
TC-Cache-IC
TC-S-Cache-M
X-Highwire-RequestId
WebServer
X-Cache-Dispatcherpragma
TC-S-Cache
TC-Cache-U
X-B2f-Not-Route
X-MSEdge-Ref
X-Highwire-SessionId
X-Aramark-SID
X-Refresh
X-Proxy-Cache-Key
Proxy-Cache
X-DTC
X-Cache-Via
X-Viator-Tapersistentcookie
X-Render-Time
X-Zendesk-Origin-Server
X-Cache-On
X-RDP
X-Cache-Dispatchercachecontrol
X-SDE-Name
X-SmartBan-URL
X-Apm-Telemetry-Syncmark
X-SmartBan-Host
X-EC2-Instance-Id
X-Hosting-Env
X-Batcache
X-Batcache-Reason
X-Captured
X-Zendesk-User-Id
Gzip
Referer
Provided-Host
Nginx-Cache
SB-Cache-Life
SB-Cache-Remaining
SB-Site-IE-VERSION
SB-Site-Device
X-CH-Device
RequestId
X-CACHE-TTL
Viewport
X-JSESSIONID
X-Middleton-PageSpeed
Note
ScoreTracker
BackendServer
IISExport
Identity
X-L-Path
X-Environment-Context
NtCoent-Length
X-Cocoon-Version
X-RealServer
MW-Webserver
X-SH-Cache-Status
Warning
X-HostName
X-Goog-Meta-Policy
X-Goog-Meta-Replace
RN-Server
X-Protected-By
X-W3TC-Minify
Server-Id
X-Rack-Cors
X-KoobooCMS-Version
Xc
X-PM-ID
Serverid
X-UA
X-Grid-Server
X-Cache-TTL-Current
X-RemovedCookies
X-We-Are-Hiring
X-Src-Webcache
X-ProcessESI
X-Blog
WP-AdvCache-MemCached
X-Server-Generated
X-Streams-Distribution
VServer
X-Amz-Id-1
X-Response
DNNOutputCache
X-Time-Microsecs
Ctx
ServerIP
Session-From
X-Old-Content-Length
X-Powered-By-Home.Pl
X-FIRSTBase
X-Instart-Cache-Id
X-Cache-TTL-Age
X-Flex-Evend
Aoestatic
X-Beatles-Hits
X-Cache-Set
X-Author
X-Amz-Meta-S3b-Last-Modified
Hosted-By
X-Magento-Action
User-Agent
Hummingbird-Cache
X-Your-GrandPa-Would-Wait
X-Would-Your-GrandPa-Wait
X-TTL-Age
X-Cache-Id
X-IP
X-DSMX-Rewrite-MS
X-Cache-Time
X-Does-He-Have-Time
X-DSMX-Render-MS
X-Magento-Lifetime
X-Beatles
X-Flex-Lang
X-Flex-Lastmod
X-Flex-Tag
X-Nginx
X-Flex-Evstart
SS
X-Flex-Community
PServer
X-Flex-Tags
X-Rebelmouse-Surrogate-Control
X-VC-Cache
Accept-Language
X-Tag-Playlist
X-LBPoolMember
X-M
X-ASAP-Age
X-Origin-Cache
X-Litespeed-Tag
Edgecast
X-SayCDN-TTL
X-Forwarded-Host
X-Cluster
X-Timestamp
X-Say-TTL
X-Hosting
X-Say-Cacheable
X-Backend-Host
AMFplus-Ver
X-Avvio-Cms-Cacheload
XDisk
X-Bcwwwid
X-CacheID
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Upstream-Backend
X-Machine
X-CRA-DC
X-Varnish-Id
X-Rebelmouse-Cache-Control
X-Cache-Detail
X-DB-Content-Length
X-CSRF-Token
X-Varnish-Action
X-ACCELERATE
X-SV
X-Dynatrace
X-Reflector
X-Serv
X-Server-Addr
Url
X-ReqId
X-Pagely-Cache
X-Served-Server
Server-Ip
X-HAProxy
X-Unique-Id
X-DEBUG
Provider
X-4ormat-Cacheable
NZSpeedy
X-Netrix-ID
X-Reflector-Cache
X-HS-Status
X-Lw-Cache
X-Varnish-URL
X-HP-CAM-COLOR
Www.Aujourdhui.Com
X-Instance-Id
X-Backend-TTL
X-MainProfileCategory
X-Backend-Name
TP-L2-Cache
X-Cache-Original-TTL
X-CCM
X-Cjtype
X-LOCATION
X-Catalyst
ServerNode
X-Enabled3
X-Cache-FS-Status
X-SuperCache
X-Header-Treatment
X-Agent
MageStack-Magento-Version
X-DevSrv-CMS
X-MainProfileID
X-Uncacheable
X-Enabled1
X-Custom-Header
INFO
X-VC-Hash
X-VC-Debug
X-Pixelsilk-Server
X-PBS-Appsvrip
X-Upstream-Status
X-VC-Cacheable
X-PBS-Appsvrname
X-PBS-Fwsrvname
X-SCM-Server-Number
X-Search-Id
X-Turpentine-Esi
X-Route
X-Not-Cacheable
X-MainProfileName
FRONT-END-SECUREBROWSER
X-Pixelsilk-Version
TP-Cache
AccessControlAllowOrigin
Ttl
X-Max-Age
X-NewsFlow-Sitename
X-MainProfileURL
X-Full-Url
X-Amz-Meta-Content-Md5
AR-ATIME
X-BeResp-Ttl
X-UT-Cache
X-IP-Address
Fastly-Restarts
X-Gateway-Cache-Status
X-Gateway-Cache-Key
X-Mobile-Rewrite
X-HA
X-Az
X-AppVersion
X-Debug-Message
X-DynamicCache
X-FastCGI-Cache-Status
X-Gateway-Skip-Cache
X-MidCOM-Meta-Cache
X-Cacheable-TTL
X-Beresp-Ttl
X-Pageid
X-Pool-Info
X-Transaction-Name
OracleCommerceCloud-Version
OracleCommerceCloud-Sandiego
X-Domino-CacheValidationWithETagResult
X-Domino-CacheValidationWithETagReason
CommercePlatform-Version
Ec-CorrId
Ec-Machine
X-Activity-Id
Uuri
AR-SID
AR-PoweredBy
Control-Cache
EQ-Cache
RSB-LINK
Microcache
AR-CACHE
X-Application
X-Fastly-Request-Id
Services
NS-VaryByCustom-Key
DrivedBy
!~Request-OOB-Work
Tempo
Upgrade-Insecure-Requests
PB-PID
Generate-Time
PB-RID
Quri
Tesla.Performance
X-Server-Ip
X-Served
X-Cname-TryFiles
Access-Control-Request-Headers
X-Deity
X-Made-On
X-Wix-PunisherID
X-Router
X-Enabled2
X-Gannett-Site-Version
X-Instance
X-AppServer-Cache-Rule
X-Enhanced-By
X-XHR-Current-Location
X-DS1D
X-7d-Trace-Id
Cache-Status
X-SilverStripe-Cache
X-Hash
X-Artvisual-Server
X-SE-Debug
X-NewCloud-V-Cache
MageStack-PageSpeed
X-AMAZEEIO
X-Status
X-Cache-Me-Harder
X-REDIRECTSERVER
X-Skip-Cache
X-AISO-Cacheable
X-AISO-Cache
Debug-Status
X-AISO-Server
MageStack-Tag
X-ProBase-Server
X-Cache-V
X-Node-ID
StatusCode
Expiries
Server-ID
X-Upgrade-Enabled
MageStack-Web-Node
EN-User
X-7d-Instance-Id
MachineName
MwpReleaseVersion
X-NodeID
X-Nginx-Request-Processing-Time
X-Cache-Extended
X-ManagedFusion-Rewriter-Version
X-Box
X-Distil-CS
X-Client-Ip
MageStack-Config
X-DDM-SERVER
X-DDM-SERVER-UPDATED
MageStack-Debug
X-Pubstack
X-XHTML-Minification-Powered-By
Cacheid
Kanooh-Host
MageStack-Loadbalancer
X-Test-Debug
X-Cache-Varnish
X-Rewritten-By
X-S-Misc
X-Config-By
MageStack-Cache
X-PHP-Response-Code
X-Node-Name
MageStack-Area
X-UnsetCookies
X-Geo-IP
Progma
X-RequesterIP
X-Container
MageStack-Cache-Hits
MageStack-Cacheable
X-D-Time
CDCHOST
Access-Control-Allow-Method
MageStack-Cache-Status
X-Generation-Time
MageStack-Cache-Lifetime
X-Ssl-Cipher
X-Ruxit-Js-Agent
X-Oneagent-Js-Injection
X-Oracle-DMS-ECID
X-FORWARDED-PROTO
X-Lb
X-Cache-Ttl
X-ESI
Dynatrace
TTL
X-WHO
Memento-Datetime
CD4
Actual-Object-TTL
X-Wm-1
X-Wm-VIP
X-Request-Processing-Time
X-Archive-Guessed-Charset
X-Archive-Orig-Connection
X-ZSITES-DNS
X-Built-By
X-Archive-Orig-Server
X-Archive-Orig-ETag
X-Archive-Orig-Date
X-Archive-Orig-Content-Length
X-PBY
X-Server-Vrn
X-AWS
X-Meta-MSSmartTagsPreventParsing
X-Varnish-Cached-TTL
Actioncode
CS-SERVER
Httpd-Identifier
X-Varnish-Cached
X-UPServer
X-Script
X-ServerAddr
X-Sn-Servicetimems
MSSmartTagsPreventParsing
MSThemeCompatible
X-LB-Frontend
X-Meta-Imagetoolbar
X-Request-Received
X-Meta-MSThemeCompatible
X-LB-Backend
X-Instance-Name
Realaction
WP-FROM-CACHE
X-Cache-Warmer
X-Restarts
Powered-By-VeryCDN
X-M-T
X-M-V
X-Mw-Workerstats
X-Nocache
X-M-P
X-I-V
X-Ants-Machine-Id
X-Cachable
X-BC
X-9XB-Server
X-Cache-Served
RSL-Trace-ID
X-Front-Cache
X-Tradeindia-Request-GUID
X-Tradeindia-SMgmt
X-Ar-Debug
X-T
X-Q-S
X-S-C
X-S-V
X-B
X-Ants-Host
GranicusServer
Accept-CH
X-ELB
X-Fastly-Backend-Reqs
CpuTime
X-Debug-Serve
Language
X-Nitro-Cache
X-Cache-Date
X-Varnish-Currency
X-Varnish-Esi-Access
Aurora-Node
X-Country
Key
X-MSU-SOURCE
Apple-Itunes-App
X-Serverid
X-Varnish-Esi-Method
X-Varnish-Store
X-Origin-Upstream-Status
X-Server-App
X-CPU-Time
X-ServiceProvider
Copyright
X-Accel-Cache-Control
X-Czt
X-Clx-Request
WSCLoggingUUID
X-FG-RequestId
X-Time-Zone
X-VG-WebCache
X-Layout
X-Memcached
X-ZORequestID
Y-Trace
Yola-ID
Fw-Cache-Status
X-PROCESSED-BY
X-Server-FQDN
X-ACLR-Version
X-Server-Ident
X-Title
X-Varnish-Instance
X-VLoc
X-Cache-Bypass
UrlWatchModule-Time
X-SID
X-Powered-Developer
SINA-LB
X-Nginx-Page-Cache
Requested-Host
X-CO-Host
Cache-Ctrol
SINA-TS
ReqUrl
Countrycode
CmsfirstPublishTimestamp
X-EBAY-C-REQUEST-ID
X-COUNTRY-CODE
RlogId
Response-Time
Page-Template
Head
Session-Id
X-Varnish-Grace
X-Distributed-By
X-Proxy-Id
X-Service-Id
XX
Webserver
Rewriter
Content-Cache
DbServerName
FindLaw
Cookie
DB-Nickname
X-Built-With
ATI-Server-Id
X-Fpc
X-B3-Traceid
X-B3-Spanid
IES-Server
Load-Balancer
Request-Time
X-Via-NSCOPI
X-Sid
X-VCS-Ttl
X-WAF-Proxy
VC-NoCache
X-PG
X-VCS-Cacheable
X-Nginx-Request-Time
X-Cache-2
OutputRewritten
X-Who
X-This-Proto
E-TAG
X-Svr
X-Rocket-Nginx-File
X-Rocket-Nginx-Reason
X-Dynamic
X-DeliveryServer
VAR-Cache
X-Brought-To-You-By
X-Config-Version
X-MCF-ID