Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
X-Cache
Strict-Transport-Security
X-AspNet-Version
CF-RAY
P3P
X-Pingback
Age
Content-Language
X-UA-Compatible
Via
Access-Control-Allow-Origin
X-Adblock-Key
Upgrade
X-Varnish
X-Cacheable
X-Check
X-Template
X-Language
P3p
Content-Security-Policy
X-Generator
X-Buckets
X-Drupal-Cache
X-Type
X-AspNetMvc-Version
X-Cache-Group
X-Pass-Why
X-Xss-Protection
X-Request-Id
X-Hacker
X-Ac
Content-Location
X-Powered-By-Plesk
X-Cache-Hits
X-Runtime
X-Permitted-Cross-Domain-Policies
MS-Author-Via
X-Download-Options
Host-Header
Cartoon
Alt-Svc
X-Request-ID
X-ShopId
X-Sorting-Hat-ShopId-Cached
X-ShardId
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Sorting-Hat-Section
X-Sorting-Hat-PodId-Cached
X-Dc
X-Alternate-Cache-Key
X-IPLB-Instance
X-Powered-CMS
Status
X-Served-By
X-UA-Device
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Amz-Cf-Id
X-Via
X-Iinfo
X-Cache-Status
X-Backend
X-Timer
X-Contextid
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
CF-Cache-Status
X-ServedBy
X-PC-Key
X-PC-Hit
X-Wix-Server-Artifact-Id
X-Mod-Pagespeed
X-DIS-Request-ID
Powered-By
X-PC-AppVer
X-PC-Date
X-PC-Host
X-Server
X-Logged-In
Keep-Alive
Content-Encoding
X-Cache-Hit
X-CDN
X-Rid
X-Port
X-Host
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-Pixel-1
X-CST
X-Server-Powered-By
Referrer-Policy
X-Robots-Tag
X-Cache-Enabled
X-Pad
X-Tumblr-Pixel-2
X-Nginx-Cache-Status
WP-Super-Cache
X-Endurance-Cache-Level
Fastly-Debug-Digest
X-Accel-Version
X-Seen-By
X-Wix-Request-Id
X-Wix-Renderer-Server
X-Page-Speed
X-Turbo-Charged-By
X-Wix-PunisherID
X-Content-Powered-By
X-Forwarded-For
X-Drupal-Dynamic-Cache
X-Rack-Cache
X-Content-Digest
X-Forwarded-Proto
X-Tumblr-Pixel-3
X-Varnish-Cache
X-AH-Environment
Surrogate-Key-Raw
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-FRAME-OPTIONS
Content-Security-Policy-Report-Only
X-Proxy-Cache
X-GitHub-Request-Id
SPRequestGuid
X-Cnection
X-SharePointHealthScore
X-Request-Country
MicrosoftSharePointTeamServices
X-MS-InvokeApp
X-XRDS-Location
Expect-CT
X-Cache-Lookup
X-LiteSpeed-Cache
X-Original-Date
Edge-Control
X-Died
Cf-Railgun
X-Safe-Firewall
Timing-Allow-Origin
MicrosoftOfficeWebServer
X-Amz-Id-2
X-Amz-Request-Id
Request-Id
X-Webserver
X-FullPageCaching
Charset
X-FW-Hash
X-PhApp
X-Node
X-FW-Type
X-FW-Serve
X-FW-Static
Edge-Cache-Tag
SPIisLatency
SPRequestDuration
X-INKT-SITE
X-INKT-URI
X-HS-Cache-Config
X-Content-Security-Policy
X-CF-Powered-By
X-HS-Content-Id
Composed-By
X-Hits
X-Tumblr-Pixel-4
Access-Control-Max-Age
Access-Control-Expose-Headers
Liferay-Portal
X-Swift-CacheTime
X-Swift-SaveTime
EagleId
X-Hyper-Cache
Content-MD5
Served-By
Grace
X-CDN-Pop-IP
X-CDN-Pop
X-Spip-Cache
X-AWS-Id
X-VWS-Id
X-LJ-Flow-ID
X-BC-Stapler
X-Backend-Server
Request-Context
X-Device
Rating
X-Firenze-Processing-Times
X-Server-Name
X-Dw-Request-Base-Id
X-Microcachable
X-Newrelic-App-Data
X-Fastly-Request-ID
X-Microcache
X-Tumblr-Content-Rating
X-RateLimit-Remaining
X-RateLimit-Limit
X-FB-Debug
X-VCache
X-RateLimit-Reset
X-User-Agent
X-ServerName
Content-Style-Type
Public-Key-Pins
Content-Script-Type
X-Clacks-Overhead
X-Jimdo-Wid
X-Jimdo-Instance
X-Cache-Config
Xkey
X-Cloud-Trace-Context
Real-Hostname
X-TNCMS
X-Loop
X-Acc-Exp
Refresh
X-DDC-Arch-Trace
Surrogate-Control
Front-End-Https
X-Age
X-Hostname
WPE-Backend
X-XN-XNHTML
X-XN-Trace-Token
X-Aspnetmvc-Version
Fpc-Cache-Id
PageSpeed
X-Generated-By
X-Px
X-Tumblr-Pixel-5
Display
Response
X-Middleton-Display
X-Middleton-Response
X-Sol
X-N-OperationId
X-Cached
Surrogate-Key
X-DNS-Prefetch-Control
X-SS-Conf
X-SS-Location
X-LiteSpeed-Cache-Control
X-Topify-Platform
X-MiniProfiler-Ids
X-SERVER
X-Pantheon-Phpreq
X-Pantheon-Site
X-Pantheon-Environment
X-Cached-By
X-StackifyID
X-WebKit-CSP
X-URL
X-Zen-Fury
X-Request-Time
Edge-Control-Message
Rt-Fastcgi-Cache
X-Content-Options
X-CMS-Version
X-Servedby
X-Url
X-Outils-CS
X-Amz-Version-Id
X-Whom
X-OneAgent-JS-Injection
TCN
X-HOST
X-FORWARDED-FOR
X-Varnish-Cache-Hits
X-Ruxit-JS-Agent
X-AspNetWebPages-Version
X-Correlation-Id
X-Umbraco-Version
X-DynaTrace-JS-Agent
X-ApacheServer
X-PERF
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Varnish-TTL
Product
X-DynaTrace
Access-Control-Request-Method
Imagetoolbar
Alternate-Protocol
Host
X-Handled-By
X-Engine
X-Magento-Tags
X-Cache-Rule
X-Kinsta-Cache
X-Powered-By-360WZB
WZWS-RAY
P-LB
P-WS
DynaTrace
X-NWS-LOG-UUID
Powered
X-From
Generator
X-Msg-2-Log
X-Recruiting
Fhost
X-Edge-Location
X-Micro-Cache
X-Location-Id
ServedBy
X-CacheServer
X-Hosted-By
X-Track
X-B-Cache
X-Cache-Age
X-Response-Time
X-Tumblr-Pixel-6
X-VTEX-Janus-Router-Backend-App
X-Vtex-Processed-At
X-VTEX-Cache-Status-Janus-ApiCache
No
X-Vtex-Remote-Cache
X-VARNISH-Cache
X-Powered-By-VTEX-Janus-ApiCache
Origin
X-Vtex-Processado-Em
X-Application-Context
X-Goog-Hash
Fastcgi-Cache
X-LBLID
X-Fastcgi-Cache
X-Varnish-Host
X-Instart-Request-ID
Arr-Disable-Session-Affinity
X-Powered-By-VTEX-Janus-Edge
X-Developer
X-Internal-ReqID
X-UD-Method
X-I-Sp
X-TransIP-Balancer
X-BS
X-RESOURCE
X-URLSCHEME
X-LB
Akamai-IP
X-Origin
Content-Hash
X-Actual-URL
X-Matrix-Proxy
X-Matrix-Server
X-Original-Request
X-Passed-To
X-Cache-Info
X-Shop-Id
X-Defender
X-Passed-To-DLL
X-App-Hosting
X-Returned-From
X-Returned-From-DLL
X-Device-Type
X-Cache-TTL
X-Upstream
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
Dmn
X-HS-Content-Campaign-Id
X-Varnish-Beresp-Ttl
X-Source
X-Platform-Processor
X-Platform-Router
X-Varnish-Beresp-Status
X-Platform-Cluster
X-Cdn
X-Varnish-Beresp-Grace
X-TransIP-Backend
X-Accel-Expires
X-Stale
X-I
X-Akamai-Transformed
X-Varnish-RemainingTTL
X-Varnish-ObjectSource
X-Varnish-RemainingLife
X-Varnish-GracePeriod
IBM-Web2-Location
X-Varnish-Seen-By
X-S
X-Storage
USPLoggingUUID
Pool
X-NetCat-Version
X-Cache-Tags
X-Powered-By-VelaWeb
Powered-By-ChinaCache
X-Cache-Debug
X-Varnish-Cacheable
X-Rocket-Nginx-Bypass
X-Revision
X-Varnish-HitMiss
X-Varnish-Count
X-Content-Encoded-By
Ohc-File-Size
X-Signature
X-Dispatcher
X-Microcache-Status
X-Translation
X-Gamma-Serve
MIME-Version
X-Expires-Orig
X-EdgeConnect-Origin-MEX-Latency
X-Front
HTTPS
X-Cache-Operation
X-Daa-Tunnel
X-Version
X-LB-Node
X-Route-Server
Content-Disposition
X-Varnish-Backend
X-Supported-By
X-Cache-Lifetime
X-NoCache
X-Cache-Key
X-VTEX-Cache-Status-Janus-Edge
X-UPSTREAM
X-EdgeConnect-MidMile-RTT
Version
X-Platform
Last-Published
X-ATG-Version
Srv
X-Last-Modified
X-NewRelic-App-Data
Public-Key-Pins-Report-Only
ServerName
X-Vcap-Request-Id
X-Art-Request-Id
X-Page-Cache
X-SDS
Page-Completion-Status
X-Platform-Cache
X-Firenze-Processing-Time
Node
X-Varnish-Age
X-Debug-Info
X-Dispatch
X-Director
X-Flow-Powered
Proxy-Connection
X-Server-Upstream
ServerID
X-Debug
X-TTL
X-AOL-HN
X-Duration
X-SV-Nginx-Duration
X-Hypernode
Cache-Tag
Cache-Key
X-Server-Id
X-SV-Pid
X-SV-FromDBCache
X-SV-Edge
X-SV-Duration
X-SV-CacheTags
X-SV-CreatedAt
X-F-Cache
X-SV-Expires
X-SV-Cacheable
X-Sapient
X-Country-Code
SSPAppContext
X-Platform-Server
X-Cache-Control-Orig
X-Server-ID
X-SSL-Protocol
X-PwB-Node
X-Url-Base
X-SSL-Cipher
X-Cache-Only-Varnish
FAI-W-FLOW
X-Abgroup
X-CJ-Soft
X-Geo-Country
X-Abuse
X-Cookie-Domain
X-Cache-Expires
Edge-Content-Tag
X-Edge-IP
X-ORACLE-DMS-ECID
Cneonction
Content-Encoding-Handler
Allow
IM-Version
Lsrequestid
WSR-Cache
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Grace
Location
X-Frontend
X-Nbs
X-Dns-Prefetch-Control
X-Cache-CFC
X-LW-Cache
X-ServerID
X-Client-IP
X-Sucuri-ID
X-Amz-Meta-S3cmd-Attrs
X-GeoIP-Country-Code
PICS-Label
If-Modified-Since
SN
Author
X-Processed-By
X-Speed-Cache-Key
X-Speed-Cache
X-Magento-Cache-Debug
X-Processing-Time
X-Content-Age
Accept-Encoding
X-Sucuri-Cache
X-Time
X-Cache-Server
NnCoection
X-Id
X-IsCacheURL
X-GeoIP-Country-Name
X-Purge-URL
X-RequestId
X-Discourse-Route
X-Akamai-Device-Characteristics
X-Varnish-IP
X-FW
Backend
X-Loopia-Node
X-SERVER-NAME
Cache-Provider
X-Middleware-Start
X-NB-Cached-Page
X-CDN-Node
X-Varnish-Url
X-Orig-Vary
X-CDN-Cache-Status
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-Goog-Generation
X-ARC
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-GUploader-UploadID
A-Powered-By
X-Purge-Host
X-SE-Debug
X-SRCache-Key
X-Shield-Request-Id
X-Nginx-Cache
X-BackendServer
X-Proxy
X-Yadis-Location
X-Vhost
X-N
X-Real-Server
X-Akamai-Device-Model
Qs-Cache
Req-Id
CacheControlHeader
S-Cnection
Use-Proxy
X-Ttl
S
Pv
X-Lambda-Id
NetMindSessionID
X-BKSrc
Cache
X-Cache-Level
AMF-Ver
X-ClientSide-Caching
X-Browser
Access-Control-Allow-Header
X-Pressidium-NinukisWP-Ver
Accept-Charset
X-Trace
X-Generated
Section-Io-Id
Fw-Via
X-Always-Cache
MJ12bot
RTSS
X-Cache-Handler
X-Cache-PageType
X-Cache-Fix
SEOMOZ
Cached
X-Framework
X-TB-M
Nodo
X-Cache-Engine
MC
X-Cache-Type
X-DealerOn
NODE
X-Hiawatha-Cache
X-Twitter-Response-Tags
X-Cache-Control
Cteonnt-Length
X-Connection-Hash
X-Transaction
Thanks
X-PF-Uncompressing
X-Healthy
X-WR-Flags
WWW-Authenticate
X-Config-Blacklist-Version
Tracecode
Local-Info
Nitro-Cache
X-CDN-Forward
X-Magnolia-Registration
Frame-Options
X-Varnish-Server
X-Varnish-Hits
X-Content-Security-Policy-Report-Only
X-Worker
X-Unique-ID
X-Cache-TTL-Remaining
SVR
EagleEye-TraceId
X-Amz-Storage-Class
Retry-After
Server-Info
Content-Transfer-Encoding
X-LB-Server
Identity
X-Drupal-Cache-Tags
X-Sys-Req-ID
X-Srv
Xc-Version
X-Empowered-By
X-CF-Passed-Proto
X-Adobe-Content
X-Hit-Cache
X-Drectory-Script
X-Varnish-Retries
X-Pagename
X-Mobilized-By
X-Adobe-Loc
X-Content-Type-Option
Cm-Server
Eomportal-Instance
X-SO
X-ID
X-High-Performance
Server-Name
X-HP-Trace-Project
X-JG-Page-Cache
X-Session-Reinit
X-LW-Web-Server
HCVer
X-HP-Trace-ID
X-Cache-Device-Type
HAVer
X-Powered-By-Server
X-LP
Buuteeq-Source
X-VC-TTL
X-Route-To
X-Varnish-Ttl
X-Symfony-Cache
X-Traffic
RATING
BALANCEDTO
X-Remote-Addr
X-Varnish-ID
X-Fedora-School-Id
X-Site-Name
CLMOB
X-HydroSheep
ServerTokens
X-Resty-Request-Id
Max-Age
ServerSignature
X-Server-IP
X-Directory-Script
X-Static
SRV
X-HW
X-ACMCache
HitType
X-WN-ClientGroup
WN
X-Garden-Version
X-Magento-Cache-Control
NtCoent-Length
X-AF-Userserver
Fastly-Backend-Name
SBGI-7
SBGI-9
SBGI-5
SBGI-10
SBGI-1
SBGI-Device
SBGI-RealPath
X-Cache-Node
X-Runtime-Rack
X-OPNET-Transaction-Trace
X-Disney-Akamai-Rule
SBGI-RenderTime
X-Nginx-Host
X-OpenCart-Lightning
Content_type
X-Webcelerate
X-Cache-Source
X-Cache-Provider
Keywords
Ufe-Result
Disablevcache
X-ORACLE-DMS-RID
X-EPiphany-Vid
X-Environment
X-Client-Image-Vid
X-Client-Vid
X-RiS-UFDI
Web-App-Origin-Name
X-UA
X-Culture
X-Middleton-PageSpeed
X-FireWall-Port
X-A
X-FORWARDED-PROTO
X-VC-Enabled
X-CB-Server
Pics-Label
X-GeoIP
From-Origin
X-WHOIS-Cached
X-Cocoon-Version
X-Varnish-Hostname
X-Generated-Time
X-App
X-App-Server
RN-Server
X-TTFB
X-TTFB-L
AsisCache
IISExport
Smug-CDN
X-Unbounce-Variant
X-Server-Instance
X-Served-Server
X-Jphone-Copyright
X-SmugMug-Values
X-SmugMug-Hiring
X-Smartcache-Keys
X-Key
XDomainRequestAllowed
X-Smartcache-Timeout
X-Frame-Option
Dispatcher
X-ARRServer
X-Unbounce-VisitorID
X-WP
X-Unbounce-PageId
X-Runtime-Memory
X-NginX-Cache
Machine
X-Dynatrace-Js-Agent
X-Mobile-URL
X-Runtime-Affili
Dis-Env
X-Balanceador
X-Amz-Meta-Cb-Modifiedtime
Xc
ScoreTracker
X-Site
Front
X-Cache-Detail
X-Distributor
AC-ELC
X-Yottaa-Optimizations
X-App-Runtime
X-Yottaa-Metrics
Description
X-Batcache
X-Env
X-Cache-Dispatcherpragma
X-Blog
Magicmarker
X-Grid-Server
X-E
X-Cache-Doesi
X-Cached-Status
X-Debug-Token
X-CAPServer
X-Proto
Ctx
X-App-Status
X-Captured
X-Ser
X-CacheResult
Home
X-Cache-Dispatchercachecontrol
X-Time-Microsecs
X-Page
DNNOutputCache
X-DataDome
X-NginX-Server
X-Cache-Keep
X-PageType
X-Analytics
Device
X-Autoru-LB
X-Autoru-Host
Backend-Timing
X-Location
X-AutoRu-App-Id
Strikingly-Cache-Region
Strikingly-Cached-Version
X-AEM
X-Drupal-Cache-Contexts
X-VARITI-CCR
Provider
X-Esi
X-ServerIndex
Strikingly-Cached
X-Info
SS
From
X-Session-ID
X-Pageid
X-Environment-Context
CommunityServer
X-Plat
ViewMode
NLCacheNote
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-Clara-ASAP
X-ASAP-Cache
X-Amz-Id-1
X-Amcomm-Site
X-GSL-Server
X-FRUIT
X-Rewrite
X-Actindo-RS
SG
X-MAT-GEO
X-Application
X-Desc
X-Machine-Name
X-Resolver-IP
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
Response-Time
Paypal-Debug-Id
X-Config-By
X-SH-Cache-Status
X-RDP
X-Cache-On
X-Machine
Hname
Sophnep-Edge-FX
W
X-L-Path
X-Backend-Status
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
X-Atraveo-Expires
X-Atraveo-ETag
X-Atraveo-Cache-Control
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Force
X-PRAM
Bios
X-Atraveo-Zone
Cmstype
X-Atraveo-From-Varnish-Cache
X-Source-ID
X-Provisioner-Version
X-HP-Redirect
Cmsid
X-Domain-Checked
X-WR-MODIFICATION
VServer
Yoncu-Errno
X-PM-ID
X-EC2-Instance-Id
X-Cms-Mode
X-Batcache-Reason
Ttl
X-Rack-Cors
Worker
X-Correlation-ID
X-Nginx
X-Map-Context
X-Hosting-Env
Resin-Trace
X-Detected-Device
X-We-Are-Hiring
X-Header
X-SDE-Name
X-Author
X-Dev
X-Render-Time
X-Dw-Trace-Id
MW-Webserver
Og
X-Req-Head-Response
X-Cdn-Forward
X-HashTwo
Ibf5scheme
X-Data-Request
X-HA-Backend
Content-Server
X-Frames-Options
Lb
X-RemovedCookies
X-Trace-Id
OriginServer
X-Hosting
X-ProcessESI
VANITY-HOST
Cluster-ID
X-CRA-DC
X-Cluster-Node
X-Response
X-Sc-Cache
FastCGI-Cache-Status
X-Proxy-Cache-Key
SBMCLOUD
X-Varnish-Debug-Age
X-Magento-Action
Beyond-Iis
X-WebKit-CSP-Report-Only
X-Viator-Tapersistentcookie
X-Varnish-Debug-TTL
X-Webapp
N365rili
X-HA-Frontend
X-HAProxy
X-IIJ-Cache
X-Rocket-Nginx-Serving-Static
X-KoobooCMS-Version
Id
X-Varnish-Info
BackendServer
X-Stage
X-Hrouter
X-ACCELERATE
PagesDisplayed
X-ETag
X-This-Proto
X-Highwire-RequestId
X-ENV
X-Rack-CORS
X-MCB-Server
X-Hstore
Nginx-Cache
X-Goog-Meta-Replace
X-SmartBan-Host
X-Highwire-SessionId
X-Test
X-SmartBan-URL
X-Goog-Meta-Policy
X-Cache-Varnish
X-Varnish-Action
X-Optimization
X-Resource
X-Lb
Note
NS-VaryByCustom-Key
AccessControlAllowOrigin
X-AppServer-Cache-Rule
X-XHR-Current-Location
X-VLoc
X-Refresh
RequestId
X-V
X-Cache-Via
Server-ID
X-Airee-Node
WP-AdvCache-MemCached
Accept-Language
X-Zendesk-User-Id
Set-Cookie2
UrlWatchModule-Time
X-Varnish-Cache-Local
X-LBPoolMember
X-ELB
X-Catalyst
X-Secret
Cleartype
X-Zendesk-Origin-Server
X-Country
X-Varnish-Instance
X-Depends
X-Time-Zone
X-Server-FQDN
X-ServiceProvider
X-Cacheable-TTL
Web
Traffic-Origin
Proxy-Cache
X-Server-Generated
X-MidCOM-Meta-Cache
X-Forwarded-Host
X-CDN-RULE
X-Compressed-By
X-Reflector
X-Reflector-Cache
Content-Cache
X-Cache-TTL-Age
X-HTML-Minification-Powered-By
X-Avvio-Cms-Cacheload
X-DTC
Progma
NCache
X-Cache-TTL-Current
X-RealServer
Access-Control-Request-Headers
X-CDN-COMPRESS
Il-Cl
X-Node-Name
X-MSEdge-Ref
X-RAMCache
X-Streams-Distribution
X-Powered-By-Home.Pl
X-JSESSIONID
X-Upgrade-Enabled
Expect-Ct
X-Adnet
X-7d-Trace-Id
X-Fpc
X-7d-Instance-Id
Tempo
X-SV
X-Src-Webcache
X-DB-Content-Length
X-Rq
X-Nginx-Request-Time
X-CACHE-TTL
X-APP
SERVER-ID
X-Amzn-Trace-Id
X-DSMX-Rewrite-MS
SINA-TS
Rewriter
X-Flex-Lang
X-Apm-Telemetry-Syncmark
X-Flex-Evend
X-Amzn-RequestId
FindLaw
X-Flex-Lastmod
DbServerName
X-Flex-Community
Webserver
X-Flex-Evstart
X-B2f-Not-Route
X-DSMX-Render-MS
SINA-LB
X-Flex-Tag
X-Uncacheable
ServerIP
Session-From
TC-Cache
TC-Cache-IC
X-AISO-Cache
X-AISO-Cacheable
X-MCF-ID
X-Pagely-Cache
VAR-Cache
X-AISO-Server
TC-Cache-U
X-Agent
X-Server-Instance-Name
Actual-Object-TTL
X-Cache-Time
X-OCTOPOD
X-Ghost-Cache-Status
X-SilverStripe-Cache
X-DevSrv-CMS
TC-S-Cache
TC-S-Cache-M
X-M
X-Upstream-Backend
X-Flex-Tags
X-Proxy-Id
X-Obj.Ttl
X-S-Misc
X-CCM
X-Generation-Time
Myheader
X-SCM-Server-Number
COMMERCE-SERVER-SOFTWARE
X-D-Time
X-DN-Cache-Control
X-Distil-CS
Kanooh-Host
X-Farm-Server
X-Search-Id
X-LOCATION
Gzip
F5-IpCliente
X-Ezoic-Cdn
X-Gyrobase-Publication
ClientIP
X-Session-Id
X-PBS-Fwsrvname
X-Layout
X-NewCloud-V-Cache
X-Rocket-Nginx-Reason
X-Title
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Cms-Server
MageStack-Web-Node
X-App-Version
X-Backend-TTL
X-Cache-Me-Harder
AMFplus-Ver
Debug-Status
Session-Id
WFE
X-ACLR-Version
X-CACHE-KEY
SB-Site-IE-VERSION
SB-Site-Device
Provided-Host
RSL-Trace-ID
SB-Cache-Life
SB-Cache-Remaining
MageStack-Tag
MageStack-PageSpeed
X-Cache-Warmer
NZSpeedy
SiteSpeed
X-Beresp-Ttl
PServer
Ews
X-EC-Security-Audit
X-Artvisual-Server
Url
X-ReqId
AMP-Access-Control-Allow-Source-Origin
Brightspot-Id
MageStack-Config
MageStack-Debug
MageStack-Loadbalancer
MageStack-Magento-Version
X-Sid
MageStack-Cache-Status
MageStack-Area
MageStack-Cache
MageStack-Cache-Hits
MageStack-Cache-Lifetime
X-CH-Device
MageStack-Cacheable
X-Tradeindia-SMgmt
X-UseReverse-Proxy
X-Webstats-RespID
X-Tradeindia-Request-GUID
X-DEBUG
X-Router
X-DeliveryServer
X-Router-Backend
XDisk
X-HostName
X-Box
X-Brought-To-You-By
X-Cache-Extended
X-VC-Debug
X-PBS-Appsvrname
X-CacheID
X-PBS-Appsvrip
X-RiS-PX
X-Cache-FS-Status
X-Front-Cache
X-PHP-Response-Code
X-IP-Address
X-Provided-By
X-W3TC-Minify
X-REDIRECTSERVER
X-Dynamic
X-Webkit-CSP
X-Dynamic-Cache
X-4ormat-Cacheable
X-Pixelsilk-Server
Warning
X-IP
MS-CV
X-Ocache
StatusCode
X-Nocache
X-Server-Addr
X-PBY
X-Tag-Playlist
X-Cache-HT
X-Turpentine-Esi
Swift-Performance
X-ChromeLogger-Data
X-Cache-BE
Server-Ip
X-Pixelsilk-Version
X-Lima-Id
X-Who
X-XHTML-Minification-Powered-By
TP-Cache
X-Debug-Message
X-Rewritten-By
X-Test-Debug
X-Deity
TP-L2-Cache
X-WebNode
X-Pubstack
Cache-Tags
X-ManagedFusion-Rewriter-Version
X-Served
X-Amz-Meta-Content-Md5
SHInfo
X-FIRSTBase
X-AWS
X-Made-On
X-Backend-Name
X-Route
X-NID
X-UPSTREAM-Address
GP-Remote-Addr
X-Aramark-SID
GP-Version
X-Custom-Header
X-Origin-Cache
X-Real-IP
X-Header-Treatment
X-PG
X-Phpwcms-Release
X-Phpwcms-Page-Processed-In
X-WPL-DATA
X-Cache-Id
ENV
X-Svr
X-CM-FE
RSB-LINK
X-Cname-TryFiles
X-Beatles
Access-Control-Allow-Method
X-Cjtype
X-Varnish-VCL
X-HASH
X-AppVersion
!~Request-OOB-Work
INFO
Server-Id
X-Ss-Conf
X-Serendipity-InterfaceLangSource
X-DynamicCache
X-Varnish-Cached
X-Serendipity-InterfaceLang
X-DDM-SERVER
X-UPServer
X-DDM-SERVER-UPDATED
X-Varnish-Cached-TTL
Expiries
X-Accel-Cache-Control
FrontEnd
X-Backend-Host
X-Webkit-Csp
MSThemeCompatible
Ibm-Web2-Location
MSSmartTagsPreventParsing
X-Node-ID
X-UT-Cache
Cache-Status
D
X-Script
X-FreeTag-Count
X-ServerAddr
X-Count
X-SuperCache
X-Obj-Ttl
Kp-EeAlive
Fw-Cache-Status
X-Config-Version
X-Vary-Options
X-Built-With
X-Bcwwwid
X-NodeID
No-Cache
X-DS1D
X-Fstrz
X-Nginx-Request-Processing-Time
X-RequesterIP
X-UnsetCookies
X-CSRF-Token
X-Enhanced-By
Generate-Time
X-Gannett-Site-Version
X-HP-CAM-COLOR
X-Faeria
X-Ss-Location
DrivedBy
X-GoCache-CacheStatus
Edgecast
CDCHOST
X-WA-Info
Aurora-Node
IsMobile
X-MainProfileCategory
X-Unique-Id
X-Wm-1
X-Wm-VIP
X-Meta-MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
PLCDN
X-Meta-Imagetoolbar
X-Old-Content-Length
X-Container
X-MainProfileID
Apple-Itunes-App
X-MainProfileName
X-MainProfileURL
X-Not-Cacheable
X-NewsFlow-Sitename
X-AMAZEEIO
X-Cf-Powered-By
X-Ssl-Cipher
X-C2M-Runtime
X-Oracle-DMS-ECID
X-Litespeed-Cache-Control
X-Webkit-CSP-Report-Only
X-C2M-Server
X-Varnish-URL
X-COUNTRY-CODE
X-Ants-Machine-Id
X-Ants-Host
X-BServer
X-BC
X-BPool
X-BPool-Fx-Cache
X-BPool-Bx-Cache
X-BPool-Back
X-NMT-Proxy
CpuTime
Be
Contao-Page-Layout
EQ-Cache
HostName
Aoestatic
X-Prerendered
TheAnswer
V-Age
X-Cluster
X-Protected-By
X-Theme
Tk
DB-Nickname
WSCLoggingUUID
X-ESI
X-Ezpublish-Installationid
Content-Generator
X-Generated-Date
Rlogid
X-EBAY-C-REQUEST-ID
X-FG-RequestId
Application
X-Ezpublish-Nodeid
X-FPC
X-PROCESSED-BY
X-SVR
Microcache
Accept-CH
X-Pass-Through
X-Origin-Server
X-Highwire-Sitecode
X-Highwire-Smart-Code
X-Obvious-Info
X-Obvious-Tid
Language
X-Cache-ID
HA-Geocity
HA-Cloudapp
HA-Geocountry
HA-Geolat
HA-Geolon
BlockPHPCallEnd
CD4
X-Client-Ip
X-Geo-IP
X-Skip-Cache
X-Tt-Dbg
HA-Georegion
HA-Host
X-CGP
X-Group
X-Hcom-Origin-Id
X-Hcom-Styx-Info
Redkiwi-Cloud
NKBVHEADER
HA-Ipaddr
HA-Servedtime
HA-Urlpath
L5d-Success-Class
Lookup-Cache-Hit
E-TAG
User-Cache-Control
Tesla.Performance
X-ASAP-Age
X-Serverid
X-VNode
X-Varnish-Debug-Hits
X-Support
WP-Cache
M
X-HEAD
X-Magento-Lifetime
X-Build-Id
X-Cachable
X-Instance-Id
X-Netrix-ID
X-SRV
X-Stiffia-Cache
Session
Server-Tuning
X-Pool-Info
X-Transaction-Name
ReqUrl
Resource
Upgrade-Insecure-Requests
B-Rlogid
ServerNode
X-Amz-Meta-Version-Id
X-Cache-LB
OutputRewritten
X-Csrf-Token
WebServer
Www.Aujourdhui.Com
AR-SID
X-Ar-Debug
GranicusServer
ProxiaInstanceId
X-UUID
X-Server-App
0
X-Content-Parsed-By
Copyright
Prototype-RootPath
X-Czt
X-SCProxy
X-Request-Processing-Time
X-Imforza-Hosted
X-Request-Received
X-Pj-Cache-Status
X-Processed
AR-PoweredBy
AR-CACHE
X-Varnish-Esi-Method
X-Varnish-Max-Age
X-Does-He-Have-Time
X-Enabled1
X-Enabled2
X-Varnish-Set-Cookie
X-Cache-Set
Public-Extension
Content-Legth
X-Beatles-Hits
X-Varnish-Store
X-Enabled3
X-Varnish-Esi-Access
X-Your-GrandPa-Would-Wait
X-Would-Your-GrandPa-Wait
X-Debug-Out
X-Cache-Served
AR-ATIME
X-Debug-Serve
X-Hash
X-Varnish-Currency
X-Turpentine-Cache
X-Max-Age
X-TTL-Age
X-FCMS-Cache
X-HS-Status
X-Sn-Servicetimems
Hosted-By
X-CPU-Time
CD1
X-B3-Traceid
Httpd-Identifier
X-Instance-Name
Debug-Cache-Control
Container
AGI-Request-ID
X-Restarts
Url-Hash
X-Jcms-Ajax-Id
Vserver
X-EC-Custom-Error
X-No-Session
X-Ec-Custom-Error
X-ServedByHost
X-Diazo-Applied
X-Cache-Bypass
X-B3-Spanid
X-FastCGI-Cache
X-9XB-Server
X-Auto-Login
Debug-Expires
MwpReleaseVersion
X-Archive-Orig-ETag
X-Cache-Action
X-W-Cache
X-W-Cache-Hits
X-Archive-Orig-Date
X-BeResp-Ttl
X-Archive-Orig-Server
X-Op-Benvironment
X-ZORequestID
Yola-ID
X-Built-By
Ez
X-Archive-Orig-Content-Length
X-Vol-Mrp
X-Vol-Correlation
X-Forwarded-By
X-AG-MIPS
EXT-CACHEEXPIRE
Memento-Datetime
X-Archive-Orig-Connection
X-Archive-Guessed-Charset
Server-Node
VC-NoCache
ResourceTag