Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
Age
X-Cache
P3P
Expect-CT
Content-Language
X-AspNet-Version
X-Pingback
Via
X-UA-Compatible
Upgrade
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Varnish
Referrer-Policy
X-Request-Id
X-Adblock-Key
X-Check
X-Generator
X-Xss-Protection
WPE-Backend
X-Type
X-Cache-Group
X-Pass-Why
X-Language
X-Template
X-Drupal-Cache
X-Buckets
X-Permitted-Cross-Domain-Policies
Alt-Svc
X-Download-Options
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Ac
X-Hacker
X-Cache-Hits
Host-Header
X-ShopId
X-Dc
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Sorting-Hat-FeatureSet
X-ShardId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-Section
X-Alternate-Cache-Key
X-AspNetMvc-Version
X-Via
X-Runtime
X-Powered-By-Plesk
X-Served-By
X-Contextid
X-ServedBy
X-PC-Hit
X-PC-Key
X-UA-Device
X-PC-AppVer
X-Amz-Cf-Id
X-PC-Date
X-PC-Host
MS-Author-Via
Access-Control-Allow-Headers
Content-Location
X-Shopify-Stage
Access-Control-Allow-Methods
X-IPLB-Instance
X-Powered-CMS
X-Timer
X-Seen-By
X-Wix-Request-Id
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Rid
Status
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-User
CF-Cache-Status
X-Tumblr-Pixel-1
Cartoon
X-FRAME-OPTIONS
X-Tumblr-Pixel-2
Access-Control-Allow-Credentials
X-Backend
X-Iinfo
X-Cache-Status
X-Ua-Compatible
X-CST
X-WPE-Loopback-Upstream-Addr
Powered-By
Content-Encoding
X-Host
X-Endurance-Cache-Level
X-Cache-Hit
X-Port
X-Cache-Enabled
X-Mod-Pagespeed
X-CDN
X-Tumblr-Pixel-3
X-Logged-In
X-Server
X-Drupal-Dynamic-Cache
X-Server-Powered-By
Keep-Alive
X-DIS-Request-ID
X-Robots-Tag
X-Request-ID
X-Nginx-Cache-Status
X-Proxy-Cache
X-Accel-Version
X-Turbo-Charged-By
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-LiteSpeed-Cache
X-Page-Speed
P3p
Content-Security-Policy-Report-Only
X-Content-Powered-By
X-Content-Digest
X-GitHub-Request-Id
Request-Context
X-FW-Hash
X-Rack-Cache
X-FW-Server
X-Tumblr-Pixel-4
X-AH-Environment
X-FW-Type
X-FW-Serve
X-FW-Static
X-Pad
X-Varnish-Cache
X-Hits
X-Webcom-Cache-Status
Access-Control-Expose-Headers
X-BC-Stapler
Edge-Control
X-XRDS-Location
X-Trace
X-Newrelic-App-Data
X-Node
SPRequestGuid
X-SharePointHealthScore
X-MS-InvokeApp
Edge-Cache-Tag
X-HS-Cache-Config
X-HS-Content-Id
WP-Super-Cache
Cf-Railgun
X-Request-Country
MicrosoftSharePointTeamServices
X-CF-Powered-By
X-Amz-Request-Id
X-Amz-Id-2
Timing-Allow-Origin
Allow
X-Died
X-Content-Security-Policy
Charset
X-Cache-Lookup
X-PHP-Backend
X-Fastly-Request-ID
X-FullPageCaching
Access-Control-Max-Age
X-INKT-SITE
X-INKT-URI
Request-Id
X-Backend-Server
X-HS-Combine-CSS
X-Cnection
SPIisLatency
SPRequestDuration
X-Edge-Cache-Key
X-Edge-Cache
Composed-By
Ali-Swift-Global-Savetime
X-Swift-CacheTime
X-Swift-SaveTime
Rating
X-CDN-Pop
X-CDN-Pop-IP
MicrosoftOfficeWebServer
Grace
EagleId
X-Tumblr-Pixel-5
X-Server-Name
X-Safe-Firewall
X-NF-Request-ID
X-DDC-Arch-Trace
X-Device
X-Spip-Cache
X-Tumblr-Content-Rating
Served-By
X-SS-Location
X-SS-Conf
X-Dw-Request-Base-Id
X-SERVER
Liferay-Portal
Permitted-Cross-Domain-Policies
X-Do-Not-Hack
X-HeyJason
X-Hyper-Cache
X-VCache
P-LB
P-WS
Front-End-Https
X-Cloud-Trace-Context
X-OneAgent-JS-Injection
X-LiteSpeed-Cache-Control
Surrogate-Control
Display
X-Kinsta-Cache
X-Middleton-Display
X-Sol
X-RateLimit-Remaining
X-RateLimit-Limit
X-Vtex-Processado-Em
X-Original-Date
X-RateLimit-Reset
X-TNCMS
X-Loop
X-Middleton-Response
Response
X-Cluster-Node
X-Jimdo-Instance
X-Jimdo-Wid
X-FB-Debug
Content-Style-Type
X-Clacks-Overhead
X-StackifyID
X-Acc-Exp
Content-Script-Type
Public-Key-Pins
Feature-Policy
X-HOST
X-Debug-Info
X-Firenze-Processing-Times
X-Amz-Version-Id
X-Frame-Option
X-Ruxit-JS-Agent
X-Goog-Hash
X-Age
X-Magento-Tags
Fpc-Cache-Id
Xkey
X-XN-Trace-Token
X-WebKit-CSP
X-XN-XNHTML
Refresh
X-Tumblr-Pixel-6
X-Cached
X-DNS-Prefetch-Control
X-Zen-Fury
PageSpeed
X-DynaTrace-JS-Agent
X-N-OperationId
X-LW-Cache
X-User-Agent
X-ARC
X-Version
X-Edge-Location
X-Cache-Config
X-Px
Retry-After
WPX
X-Handled-By
X-Hostname
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Generated-By
X-Goog-Storage-Class
X-Goog-Generation
X-Dns-Prefetch-Control
X-Webserver
X-Url
Powered
X-PhApp
X-Topify-Platform
X-Upstream
Fastcgi-Cache
TCN
X-MiniProfiler-Ids
X-B-Cache
Access-Control-Request-Method
X-Magento-Cache-Debug
X-EdgeConnect-Origin-MEX-Latency
X-Cached-By
X-RESOURCE
X-Source
X-VTEX-Janus-Router-Backend-App
X-Vtex-Processed-At
X-VTEX-Cache-Status-Janus-ApiCache
X-FORWARDED-FOR
No
X-Vtex-Remote-Cache
X-Powered-By-VTEX-Janus-ApiCache
X-CacheServer
X-Whom
X-Loopia-Node
X-URLSCHEME
X-Request-Time
Rt-Fastcgi-Cache
X-Outils-CS
X-CMS-Version
X-EdgeConnect-MidMile-RTT
X-Accel-Expires
Last-Published
X-ET-API-ROOT
X-ET-API-ORIGIN
X-ET-API-VERSION
ServedBy
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Fastcgi-Cache
Product
X-Varnish-Count
X-Varnish-HitMiss
Warning
X-Application-Context
X-Engine
X-Location-Id
X-Developer
X-Content-Options
X-Platform-Server
Fhost
X-Signature
X-Platform-Processor
X-Platform-Cluster
X-AspNetWebPages-Version
X-Platform-Router
Cache-Key
X-Actual-URL
X-Cache-Key
X-URL
X-ApacheServer
X-PERF
X-F-Cache
Pagespeed
X-Ezoic-Cdn
X-Returned-From
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Returned-From-DLL
X-Defender
X-Shop-Id
X-Passed-To
X-Original-Request
X-Passed-To-DLL
Dmn
X-Cache-Info
X-LBLID
X-Stale
Host
Public-Key-Pins-Report-Only
X-Cache-Age
X-Microcachable
X-Varnish-Cache-Hits
X-Umbraco-Version
X-From
X-Varnish-Host
X-Magento-Cache-Control
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
Imagetoolbar
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
X-Gateway-Skip-Cache
X-Gateway-Cache-Status
X-Gateway-Cache-Key
X-Forwarded-For
X-Device-Type
Generator
X-S
X-Response-Time
X-NWS-LOG-UUID
X-DynaTrace
Cache-Provider
X-Acquia-Application-UUID
X-Acquia-Application-Trace
Arr-Disable-Session-Affinity
X-Cache-Rule
X-Microcache
X-Translation
X-Microcache-Status
X-SSLProxy
X-Platform
X-GUploader-UploadID
X-SSLUpstream
X-HS-Content-Campaign-Id
Version
Alternate-Protocol
Content-Hash
X-Hosted-By
X-Sapient
X-Guploader-Uploadid
X-Svr-Proxy
X-Platform-Cache
Origin
X-SVR-IIS
X-Powered-By-360WZB
X-Cache-Namespace
SSPAppContext
X-Micro-Cache
X-Lambda-Id
X-Environment
X-BS
X-I-Sp
Surrogate-Key
X-SO
X-Dealeron-Backend
X-DealerOn
X-Msg-2-Log
X-Dealeron-Original-Url
X-Via-JSL
X-Correlation-ID
X-App-Status
X-Rnd
X-Supported-By
X-Duration
MIME-Version
X-Server-Upstream
X-Akam-SW-Version
X-Abgroup
X-Cache-Tags
X-Server-ID
X-SSL-Cipher
X-Track
X-Dispatcher
X-Cache-TTL
X-Varnish-TTL
USPLoggingUUID
CF-Worker-Version
Content-Disposition
X-Sucuri-ID
X-Instart-Request-ID
X-NetCat-Version
X-SSL-Protocol
X-Storage
X-ORACLE-DMS-ECID
Node
X-Page-Cache
WZWS-RAY
X-Powered-By-VelaWeb
X-Expires-Orig
X-Art-Request-Id
X-CSRF-Protection
X-Director
X-Powered-By-VTEX-Janus-Edge
X-Sucuri-Cache
Content-Encoding-Handler
X-VARITI-CCR
RTSS
X-Drupal-Cache-Tags
SN
X-Servedby
S-Cnection
DynaTrace
X-Cache-Lifetime
X-Generated
X-Debug
X-App-Hosting
X-Matrix-Proxy
X-Matrix-Server
X-Client-IP
X-Cache-Control-Orig
X-Hypernode
X-Gamma-Serve
X-Cache-Debug
X-ServerName
X-Front
X-Revision
X-Vcap-Request-Id
X-NewRelic-App-Data
X-Edge-IP
X-Varnish-Cacheable
X-Amz-Meta-S3cmd-Attrs
Powered-By-ChinaCache
Pool
X-Grace
X-TransIP-Balancer
Cache-Tags
X-Helper-Autoassign-All
X-Rocket-Nginx-Serving-Static
Accept-Encoding
X-Cache-Engine
X-Rocket-Nginx-Bypass
X-TransIP-Backend
X-Cache-Server
X-Correlation-Id
X-SV-Edge
X-SV-FromDBCache
X-SV-Duration
FAI-W-FLOW
X-SV-Pid
X-SV-CreatedAt
X-SV-Nginx-Duration
X-ATG-Version
X-Github-Request-Id
X-Daa-Tunnel
X-Vhost
X-Dispatch
X-Geo-Country
X-Cache-Handler
X-Varnish-GracePeriod
Req-Id
X-LB-Server
X-SV-Expires
X-NoCache
X-Varnish-ObjectSource
X-SV-CacheTags
X-SV-Cacheable
X-Varnish-RemainingLife
Src-Update
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-FTR-Request-ID
Update-Time
Cache
X-Flow-Powered
X-Cache-Only-Varnish
X-Content-Encoded-By
ServerID
X-Forwarded-Proto
X-Recruiting
X-Drupal-Cache-Contexts
X-Env
X-Now-Id
Server-Timing
X-TTFB
Smug-CDN
X-SmugMug-Hiring
X-Cache-Type
X-TTFB-L
X-SmugMug-Values
Wsr-Cache
X-UPSTREAM
X-I
X-Country-Code
Service-Worker-Allowed
X-Last-Modified
X-Ttl
X-Locale
Contao-Page-Layout
X-Content-Type-Option
Akamai-IP
X-Route-Server
Edge-Control-Message
X-Esi
X-Discourse-Route
Lsrequestid
SiteSpeed
Cneonction
Strikingly-Cache-Region
X-SRV
X-Cache-Control
Strikingly-Cached
Strikingly-Cached-Version
X-Varnish-Url
X-Server-Id
X-TTL
Https
Server-Name
X-Unbounce-PageId
X-Server-Instance
X-Unbounce-Variant
X-Unbounce-VisitorID
X-Pressidium-NinukisWP-Ver
X-ORACLE-DMS-RID
Author
Section-Io-Id
X-Trace-Id
If-Modified-Since
X-CJ-Soft
X-GeoIP-Country-Code
X-Varnish-Age
X-IsCacheURL
X-Varnish-Backend
X-TransIP-Reserved
X-Firenze-Processing-Time
X-N
CF-Worker-Script
X-FIRSTBase
X-Cache-Level
X-Cache-Device-Type
X-Url-Base
X-NA-CachePolicy
X-Nginx-Cache
X-Speed-Cache
X-Speed-Cache-Key
X-SRCache-Key
W
Dtk-Cache-Check-0
X-Middleware-Start
X-Amz-Rid
Backend
X-UD-Method
X-Hiawatha-Cache
Pv
MC
Nodo
Custom-Header
X-Cache-Operation
X-SDS
X-Cache-Expires
X-Magnolia-Registration
X-PwB-Node
S
Use-Proxy
X-Time
X-Twitter-Response-Tags
X-Fastly-Request-Id
X-GeoIP-Country-Name
X-Varnish-IP
X-Rq
X-Connection-Hash
X-Transaction
X-Akamai-Device-Characteristics
X-Storage-Cache-Expires
X-Orig-Vary
X-Service-Id
X-Akamai-Device-Model
X-Storage-Cache
X-Storage-Cache-Date
SEOMOZ
PICS-Label
X-BKSrc
MJ12bot
X-LB
Srv
X-RequestId
X-Config-Blacklist-Version
Accept-Charset
AMF-Ver
NnCoection
X-NginX-Cache
X-ID
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-Litespeed-Cache-Control
NetMindSessionID
Content-MD5
X-Real-Server
X-Empowered-By
ServerName
X-TB-M
X-Dynamic-Cache
X-Content-Age
X-Disney-Akamai-Rule
X-Cookie-Domain
Xc-Version
X-Amz-Storage-Class
X-Now-Cache
X-High-Performance
Qs-Cache
Proxy-Connection
X-Processing-Time
X-CF-Passed-Proto
Page-Completion-Status
X-CDN-Forward
X-Varnish-Retries
X-CacheFROM
Cached
From-Origin
X-Worker
X-Symfony-Cache
X-Browser
X-FW
Location
FindLaw
X-Cache-Fix
X-Cache-PageType
X-Key
Ram
X-Stage
X-Content-Security-Policy-Report-Only
Noq
X-PF-Uncompressing
Ramp
X-Analytics
X-Akamai-ERRuleID
Backend-Timing
X-Srv
X-Akamai-ERPolicy
Pics-Label
X-GoCache-CacheStatus
X-Webkit-CSP
X-BackendServer
HAVer
HCVer
X-Processed-By
X-HW
X-Varnish-Server
Ohc-File-Size
Tracecode
X-Amz-Meta-Content-Md5
X-WEBSERVER
X-Origin
X-Cache-CFC
X-Ruxit-Js-Agent
X-Runtime-Memory
X-SP-UniqueName
X-Proxy-Backend
X-SP-Farm
X-ARRServer
Prama
CacheControlHeader
Frame-Options
Content_type
X-Cache-TTL-Remaining
X-RealServer
IM-Version
Content-Transfer-Encoding
X-Nitro-Cache
X-Sedo-Request-Id
X-Cache-Miss-From
X-CB-Server
X-Yadis-Location
X-WPL-DATA
IBM-Web2-Location
X-Frontend
X-Shard
X-Origin-Date
Local-Info
Url
Edit
Lb
X-Drectory-Script
RequestId
X-AVG-Country-Code
SRV
X-Redman-Backend
X-Server-IP
Proxy-Agent
X-4ormat-Cacheable
X-Akamai-Edgescape
Cm-Server
X-Redman-Final-Url
X-Avg-Cookie-Expires
Web-App-Origin-Name
X-Varnish-Hits
Access-Control-Allow-Method
X-Cache-Ttl
Hummingbird-Cache
X-CLOUD-TRACE-CONTEXT
Nopic
Front
X-Framework
X-A
X-Nbs
X-Pantheon-Az
X-Pantheon-Site
X-Pantheon-Phpreq
X-App-Server
A-Powered-By
X-Pantheon-Environment
X-ServerID
X-UnsetCookies
Surrogate-Key-Raw
X-Remote-Addr
X-Culture
X-Sys-Req-ID
X-Varnish-Id
X-Webstats-RespID
X-Request-Uri
X-PRAM
X-Ratelimit-Limit
Referer
Accept-Language
X-Hstore
X-Hrouter
X-Appmachine-Environment
X-JG-Page-Cache
Report-To
X-Force
X-Source-ID
X-Generated-Timestamp
X-Debug-Token
X-HTML-Minification-Powered-By
X-Ratelimit-Remaining
X-VCS-Ttl
Accept-CH
Environment
X-EPiphany-Vid
X-Path-Route
Request-Country
X-Client-Image-Vid
X-Client-Vid
Request-EU
X-VCS-Cacheable
X-Span
X-Yottaa-Metrics
Server-Info
X-Backend-Status
X-Session-ID
X-Unique-ID
X-Yottaa-Optimizations
X-ClientSide-Caching
X-V
X-FireWall-Port
Drupal-Pagecache-Memcache
X-Shield-Request-Id
CDN-Cache
X-CacheDebug
SHInfo
X-Varnish-Ttl
Pf.Web.Request.Id
X-ServerIndex
X-Oneagent-Js-Injection
X-Cacheable-TTL
X-MCB-Server
X-Cache-2
X-Distil-CS
X-Hit-Cache
X-Distributor
WWW-Authenticate
X-Pagename
Lookup-Cache-Hit
X-Nginx-Dummy
X-Role
X-SERVER-ID
Dispatcher
Beyond-Iis
XDomainRequestAllowed
CDN-PullZone
X-Detected-Device
X-Varnish-Hostname
X-CACHE-TTL
X-Id
X-VC-Enabled
X-NginX-Server
X-Proxy
SVR
X-GeoIP
Max-Age
X-Location
IISExport
X-Varnish-Backend-Beresp-Backend
X-CAPServer
X-Plat
X-Cache-Dispatcherpragma
Home
X-Adobe-Loc
X-Cache-Dispatchercachecontrol
DNNOutputCache
X-Dw-Trace-Id
CDN-CachedAt
X-Adobe-Content
CDN-Uid
CDN-RequestId
X-Forwarded-Host
X-Domain-Checked
X-Cache-Doesi
X-LP
X-Real-IP
X-LB-Node
X-NWS-UUID-VERIFY
Dis-Env
Nginx-Cache
X-Balanceador
Cteonnt-Length
X-Provisioner-Version
Swift-Performance
X-HydroSheep
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Via-NSCOPI
X-LW-Web-Server
X-Runtime-Affili
X-Atraveo-Zone
X-Atraveo-ETag
X-Atraveo-Cache-Control
X-Consent-Required
X-Goog-Meta-Policy
X-Goog-Meta-Replace
Machine
X-HeBS-Cache-Status
X-NginX-Upstream
X-AEM
X-FastCGI-Cache
Identity
X-Nginx-Host
X-App-Runtime
X-Vcache
CS-SERVER
X-Via-S
*
X-ZSITES-DNS
X-WebNode
Access-Control
Edgecast
X-Varnish-Cache-Local
Resin-Trace
X-Data-Request
X-E
Nitro-Cache
AETN-Postal-Code
AETN-Longitude
X-HashTwo
AETN-Latitude
AETN-State-Code
AKA-DEVICE
X-Soro
Firespring-Website-Id
X-SE-Debug
X-GSL-Server
X-Route
TC-Cache-U
TC-S-Cache
TC-S-Cache-M
X-ACCELERATE
TC-Cache-IC
TC-Cache
X-HostName
Eomportal-Instance
Locale
X-Fedora-School-Id
X-Server-Addr
X-Amzn-Trace-Id
AC-ELC
X-RiS-UFDI
X-Resolver-IP
X-Rack-CORS
Paypal-Debug-Id
WP-FROM-CACHE
X-Amzn-RequestId
Upgrade-Insecure-Requests
X-Amz-Apigw-Id
COMMERCE-SERVER-SOFTWARE
X-HA-Frontend
Myheader
X-Varnish-Debug-Age
VANITY-HOST
X-Akamai-Transformed
Traffic-Origin
X-Proxy-Cache-Control
AsisCache
X-Flex-Tag
X-RiS-PX
X-Req-Head-Response
X-PBY
X-Actindo-Request-Id
X-FPC
Access-Control-Request-Headers
X-Flex-Tags
X-Amz-Id-1
X-HA-Backend
X-Map-Context
X-Actindo-Rs
X-Actindo-Thread-Id
X-Adnet
YF-ID
X-Varnish-Debug-TTL
AETN-DEVICE
X-WR-Flags
AETN-Country-Name
X-Proxy-Cache-Key
X-TKP-SRV-ID
X-Flex-Lang
X-Flex-Community
X-Flex-Evend
AETN-EU
X-Flex-Evstart
X-Varnish-Grace
AETN-Country-Code
X-Flex-Lastmod
X-Timestamp
X-SH-Cache-Status
X-Unique-Id
Num
X-Webcelerate
AETN-Continent-Code
AETN-City
AETN-Area-Code
X-Amcomm-Site
X-AF-Userserver
Il-Cl
X-ETag
X-SAPP
Cmsid
X-Aramark-SID
X-JSESSIONID
Cmstype
BALANCEDTO
Arrnode
X-Instance
X-Hit
X-Aramark-CSID
X-Purge-Host
X-Purge-URL
Play-Detected-Device
Copyright
Proxy-Cache
Play-Detected-UserAgent
X-B2f-Not-Route
NLCacheNote
Disablevcache
X-Middleton-Pagespeed
Magicmarker
X-Fstrz
MICROSOFTOFFICEWEBSERVER
Cleartype
X-Envoy-Upstream-Service-Time
X-AOL-HN
X-ACMCache
X-Cocoon-Version
Prot
X-IIJ-Cache
Adm-Server
X-Xml-Http-Blocked
Serverid
X-ESI
NODE
Bios
X-Ms-Request-Id
X-VC-Cacheable
X-Amz-Meta-S3b-Last-Modified
X-Qnm-Cache
X-Confluence-Request-Time
Hosted-By
X-OpenCart-Lightning
Section-Io-Origin-Time-Seconds
Section-Io-Origin-Status
X-DSMX-Render-MS
Load-Balancer
X-Origin-Cache
Pragrma
X-Served-Server
X-Status
PServer
X-App
X-Frames-Options
X-GeoIP-Country
X-Gyrobase-Publication
X-Blog
X-Resource
X-Upstream-Status
X-Upstream-Backend
X-Secret
Fastly-Backend-Name
X-Cache-Date
Thanks
Srv-Name
Yoncu-Errno
X-Reflector
X-Reflector-Cache
X-Jphone-Copyright
X-Appversion
X-Depends
X-Custom-Name
X-Middleton-PageSpeed
X-FastCGI-Cache-Status
X-DN-Cache-Control
X-Access-Control-Allow-Origin
DrivedBy
X-Generated-Time
X-DSMX-Rewrite-MS
X-Upgrade-Enabled
X-Instance-Id
Pramga
Fastly-Debug-Digest
X-Static
X-CacheID
Aurora-Node
X-M-Reqid
X-WebServer
X-MAT-GEO
Filters
X-M-Log
X-Info
X-Compress-Hint
CLMOB
X-Test
X-WEBMGR-CACHE
X-LBPoolMember
X-Client-Id
GranicusServer
IES-Server
Cf-Ipcountry
NGX
X-Mobilized-By
X-DynamicCache
X-Scheme
ScoreTracker
X-Cache-Me-Harder
Worker
Viewport
MageStack-Web-Node
MageStack-Cache-Hits
MageStack-Loadbalancer
MageStack-Tag
MageStack-Magento-Version
MageStack-PageSpeed
X-UD-METHOD
MageStack-Debug
MageStack-Config
NZSpeedy
MageStack-Cache
MageStack-Cache-Lifetime
MageStack-Cache-Status
MageStack-Cacheable
MageStack-Area
X-ReqId
X-Smartcache-Keys
X-Smartcache-Timeout
X-Origin-Name
X-Serverid
X-Proto
X-WP
X-Gateway-Rate-Limit-Delayed
X-Directory-Script
X-UUID
Provider
AMP-Access-Control-Allow-Source-Origin
X-Appid
X-Dev
RN-Server
X-Cms-Mode
X-Cache-Detail
VServer
X-We-Are-Hiring
Server-ID
Device
X-Nginx
X-Varnish-ID
X-IP
X-FORWARDED-PROTO
X-SDE-Name
X-Hosting-Env
MS-CV
X-Tag-Playlist
X-RunCloud-Cache
X-Beatles
HTTPS
X-CSRF-Token
Tempo
EQ-Cache
X-Varnish-Ip
Ttl
Ews
ID
NS-VaryByCustom-Key
X-NoIndex
X-Domino-CacheValidationWithETagResult
X-Application
X-Expires
X-Domino-CacheValidationWithETagReason
X-Shopware-Cache-Id
X-DB-Content-Length
X-Served-From
X-Shopware-Allow-Nocache
X-Cache-ID
X-Cache-Time
X-TLS-Version
X-SmartBan-Host
X-Response
X-Rebelmouse-Cache-Control
X-CRA-DC
X-Cdn-Forward
X-WR-MODIFICATION
X-Cache-Varnish
X-Highwire-SessionId
X-Highwire-RequestId
X-Garden-Version
X-Cache-On
N365rili
X-PBS-Fwsrvname
X-PBS-Appsvrname
X-PBS-Appsvrip
X-MyName
X-UPSTREAM-Address
X-Container
AMP-Redirect-To
Access-Control-Allow-Header
X-Desc
X-Refresh
X-Wodby-Node
X-Hostinger-Node
X-Hostinger-Datacenter
X-Cache-Node
Server-Id
SWS-Security
,
X-Amzn-Remapped-Content-Length
X-Cache-Var-Map
X-Cache-Var
IP-Addr
X-Page
XX
X-Streams-Distribution
X-SmartBan-URL
X-ASAP-Age
X-ASAP-Cache
X-Nx-All
X-Nx
X-Clara-ASAP
X-Dispatcher-Number
X-DataDome
Generate-Time
X-This-Proto
X-Served
X-Resty-Request-Id
WN
X-Batcache
X-V-Cache
X-UT-Cache
X-Time-Spent
X-Processed
X-Pj-Cache-Status
X-Cache-LB
X-Az
X-Activity-Id
X-Cname-TryFiles
X-Debug-Message
X-Oferteo-Domain
X-HA
X-Deity
X-WN-ClientGroup
Amfplus-Ver
ProxiaInstanceId
NB-Cache
Gzip
F5-IpCliente
Session-Id
VC-NoCache
X-Catalyst
X-Cache-FS-Status
X-Avvio-Cms-Cacheload
ClientIP
Apachenode
Provided-Host
Origin-Vm
CommunityServer
X-CH-Device
X-Goog-Meta-Goog-Reserved-File-Mtime
X-WA-Info
X-Req-Counter
X-RAMCache
Tesla.Performance
X-Gannett-Site-Version
X-Netrix-ID
X-ManagedFusion-Rewriter-Version
X-Firewall
X-NodeID
X-Protected-By
X-Instance-Name
X-Layout
X-BServer
X-BPool-Back
X-Built-By
X-Captured
X-Country
X-Render-Time
X-Rewritten-By
Response-Time
X-WebKit-CSP-Report-Only
Ssl-Proxy-Server
ViewMode
VSID
X-W3TC-Minify
X-VC-TTL
X-Cache-TTL-Current
X-Session-Reinit
X-Title
StatusCode
X-Airee-Node
HitType
X-Nginx-Request-Processing-Time
X-Highwire-Smart-Code
X-SSL-Host
X-Meta-MSThemeCompatible
X-Origin-Server
X-Highwire-Sitecode
X-UA
MwpReleaseVersion
SS
MachineName
Actual-Object-TTL
X-Cache-Via
X-Meta-MSSmartTagsPreventParsing
X-ProcessESI
X-Zendesk-User-Id
X-Zendesk-Origin-Server
X-Vol-Mrp
CommercePlatform-Version
From
X-Node-App
X-Server-Generated
X-Proxy-Server
X-RemovedCookies
X-Meta-Imagetoolbar
X-Serv
Httpd-Identifier
X-Cache-TTL-Age
X-Global-Transaction-ID
X-Src-Webcache
X-UA-Bot
X-FromPodPressCache
X-Rule
X-Grid-Server
X-Ss-Conf
X-Ss-Location
X-Mobile-Rewrite
X-Firefox-Spdy
X-Backside-Transport
Id
REFRESH
Server-Ip
PBS
PB-RID
Now
PB-PID
MSSmartTagsPreventParsing
X-Podname
X-Now-Trace
ServerIP
X-Origin-Upstream-Status
X-Mighty-Proxy
X-GZip
X-Vary-Options
X-Cache-HT
X-Vol-Correlation
X-Optimization
X-Lb
OracleCommerceCloud-Sandiego
OracleCommerceCloud-Version
X-Autoru-App-Id
X-Autoru-Host
Session-From
MSThemeCompatible
X-PM-ID
X-Ms-Version
X-VERSION
Keywords
X-Cache-Warmer
Description
X-DevSrv-CMS
Og
X-VTEX-Cache-Status-Janus-Edge
X-Sorting-Hat-Expire-Cache
X-Varnish-Action
Z
X-Clx-Request
X-Dynatrace-Js-Agent
X-MSU-SOURCE
X-Geo
X-Cache-Extended
X-WHO
X-Bip
Xc
TP-L2-Cache
TP-Cache
SBSS
X-Thanos
X-SuperCache
X-Policy
No-Cache
X-Proxy-Id
X-DDM-SERVER-UPDATED
X-ServiceProvider
X-Cache-Bypass
TYPO3-Pid
X-VG-WebCache
Progma
X-Server-Hostname
X-ENV
X-AppServer-Cache-Exception
X-Sid
X-Rack-Cors
X-AppServer-Cache-Rule
Debug-Status
X-AWS
Expiries
X-Croise-Owner
X-PHP-Response-Code
X-Amzn-Remapped-Date
X-Newrelic-Synthetics
X-AppServer-Status
X-SilverStripe-Cache
X-Phpwcms-Page-Processed-In
X-Phpwcms-Release
Webserver
UrlWatchModule-Time
TYPO3-Sitename
X-Beluga-Trace
X-Cache-Id
X-BIT-Node
X-Flash-Messages
X-PageCache
Content-Generator
X-Varnish-Cache-Control
X-HS-Content-Group-Id
NEL
X-VC-Cache
X-Pool
X-VC-Debug
X-VC-Hash
CINC-Endpoint
X-Artvisual-Server
X-HEAD
X-XHR-Current-Location
X-Ser
Cache-Cookie-Set-From
Cache-Cookie-Set-Idcheck
Web-Server
Cache-Cookie-Set-Lfrom
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-CACHE-KEY
X-Hosting
X-Amz-Meta-Version-Id
X-Geoip-Country-Name
X-Itkg-Cache-Tags
X-SSLTerm-Server
X-InstanceId
X-Cjtype
X-TNCMS-Bot-Tier
X-MCF-ID
X-UPServer
X-Varnish-Cached
Page-Template
X-Varnish-Cached-TTL
X-EC2-Instance-Id
X-Built-With
Content-Sn
Apple-Itunes-App
ModuleCacheType
NtCoent-Length
X-Batcache-Reason
X-Enhanced-By
X-LAKANA-AB
X-Request-Received
X-Request-Processing-Time
HitInfo
Language
Www.Aujourdhui.Com
X-DDM-SERVER
X-Beluga-Status
X-Beluga-Node
X-Beluga-Cache-Status
X-Beluga-Record
X-Beluga-Response-Time
X-Beluga-Response-Time-X
AddDefaultCharset
129prxHost
MageStack-Cache-Lifetime-Sent
X-Rocket-Nginx-File
MageStack-Cache-Warning
MageStack-Last-Modified
X-Pass-Through
X-Powered-By-ADS
X-Rocket-Nginx-Reason
X-SCM-Server-Number
Fastly-Restarts
Hit-Count
X-XHTML-Minification-Powered-By
X-Varnish-Cache-Ttl
X-Test-Debug
X-Node-Id
X-NMT-Proxy
X-Fastly-Backend-Reqs
Ohc-Response-Time
X-Ghost-Cache-Status
HA-Status
X-Pageid
X-Header
X-Beresp-Ttl
X-B
X-Requestid
X-ProBase-Server
X-Dck
X-ZORequestID
X-Abuse
Purge-Cache-Tags
Value-Of-Url
X-InDy-Query
X-InDy-Time
X-InDy-Memory
X-Custom-Header
X-From-Cache
X-HS-Status
VAR-Cache
TestCC
X-Telligent-Evolution
X-Varnish-URL
X-SV
X-Router
X-Reqid
X-Always-Cache
Sl-Pgid
X-ORIKEY
X-Beget-Proxy
X-Max-Age
X-ENDPOINT
X-APIAUTH-VAL
X-APIVERSION
X-PressLabs-Stats
X-ROUTING
PROGMA
X-Nws-Log-Uuid
Cache-Ctrol
X-Varnish-Debug-Hits
X-Search-Id
CDCHOST
X-User-Agent-Tier
X-DODN-Region
Powered-By-115
X-DODN-Id
X-Author
X-Compressed-By
X-Cluster
HSTS
FRONT-END-SECUREBROWSER
259pxline
196prxHost
262prline
316pxxline
X-LB-Backend
Web
X-Proxy-Skip
X-7d-Instance-Id
Requested-Host
X-7d-Trace-Id
X-Amz-Meta-Cb-Modifiedtime
X-Cache-Action
X-Box
D
Content
AR-ATIME
Xxline
AR-CACHE
AR-PoweredBy
AR-SID
135prxHost
X-LB-Frontend
X-Nginx-VM-RT
X-Obvious-Info
X-Machine
X-Client-Ip
X-AMAZEEIO
X-Apache2-RT-MicroSec
X-Obvious-Tid
X-Page-Cacheable
X-Transaction-Name
X-T
X-Vid
X-SATserver
X-RequesterIP
TTL
Tk
Origin-Edge-Control
SB-Cache-Life
Origin-Cache-Control
X-OCTOPOD
X-Stiffia-Cache
X-Old-Content-Length
SB-Cache-Remaining
SB-Site-Device
SINA-TS
SINA-LB
ServerTokens
ServerSignature
SB-Site-IE-VERSION
X-Cdn-Origin