Threat Level: green Handler on Duty: Tom Webb

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
P3P
X-AspNet-Version
Age
X-Pingback
Content-Language
Via
X-UA-Compatible
Expect-CT
Upgrade
Access-Control-Allow-Origin
X-Adblock-Key
X-Xss-Protection
Content-Security-Policy
X-Cacheable
X-Check
X-Template
X-Language
X-Varnish
X-Generator
X-Buckets
Alt-Svc
X-Request-Id
X-Drupal-Cache
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Powered-By-Plesk
X-Permitted-Cross-Domain-Policies
Content-Location
X-Download-Options
Host-Header
X-Runtime
MS-Author-Via
X-ShopId
X-FRAME-OPTIONS
X-Sorting-Hat-ShopId
X-ShardId
X-Dc
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-Section
X-Alternate-Cache-Key
P3p
Cartoon
X-Powered-CMS
X-IPLB-Instance
X-UA-Device
X-Served-By
Status
X-Amz-Cf-Id
Access-Control-Allow-Headers
Access-Control-Allow-Credentials
Access-Control-Allow-Methods
X-Cache-Status
X-Via
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Contextid
Referrer-Policy
CF-Cache-Status
X-Backend
Powered-By
X-DIS-Request-ID
X-PC-Hit
X-PC-Key
X-Mod-Pagespeed
X-PC-Date
X-ServedBy
X-PC-AppVer
X-PC-Host
Content-Encoding
X-WPE-Loopback-Upstream-Addr
X-CST
X-Logged-In
Keep-Alive
X-CDN
X-Cache-Hit
X-Host
X-Rid
X-Port
X-Server
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-Cache-Enabled
X-Server-Powered-By
X-Tumblr-Pixel-1
X-Request-ID
X-Endurance-Cache-Level
X-Robots-Tag
X-Nginx-Cache-Status
X-Accel-Version
X-Wix-Request-Id
X-Seen-By
X-Wix-Server-Artifact-Id
X-Tumblr-Pixel-2
X-Turbo-Charged-By
X-Page-Speed
X-Original-Date
X-Drupal-Dynamic-Cache
X-Pad
X-Content-Powered-By
Content-Security-Policy-Report-Only
X-Content-Digest
X-Proxy-Cache
WP-Super-Cache
X-Rack-Cache
X-AH-Environment
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Varnish-Cache
X-Tumblr-Pixel-3
X-LiteSpeed-Cache
X-GitHub-Request-Id
SPRequestGuid
X-Request-Country
X-SharePointHealthScore
X-MS-InvokeApp
Edge-Control
X-XRDS-Location
MicrosoftSharePointTeamServices
X-Cnection
X-Cache-Lookup
X-Died
Timing-Allow-Origin
X-Node
Cf-Railgun
X-Amz-Id-2
X-Amz-Request-Id
X-FW-Hash
X-Trace
Charset
Request-Id
X-FullPageCaching
X-FW-Type
X-FW-Static
X-FW-Serve
X-Content-Security-Policy
X-Webserver
X-Webcom-Cache-Status
Edge-Cache-Tag
MicrosoftOfficeWebServer
X-HS-Cache-Config
X-PhApp
X-HS-Content-Id
X-Safe-Firewall
X-Hits
X-CF-Powered-By
SPIisLatency
SPRequestDuration
X-PHP-Backend
X-INKT-URI
X-INKT-SITE
X-Newrelic-App-Data
Request-Context
X-BC-Stapler
Access-Control-Max-Age
Composed-By
X-SERVER
X-Swift-SaveTime
X-Swift-CacheTime
EagleId
Access-Control-Expose-Headers
Grace
X-CDN-Pop
X-CDN-Pop-IP
Served-By
Liferay-Portal
X-Tumblr-Pixel-4
X-Hyper-Cache
X-Spip-Cache
X-Backend-Server
X-Ua-Compatible
X-Dw-Request-Base-Id
X-Device
X-LiteSpeed-Cache-Control
X-Server-Name
X-Fastly-Request-ID
X-Microcache
X-VCache
X-Firenze-Processing-Times
X-ServerName
X-FB-Debug
X-Cloud-Trace-Context
X-RateLimit-Remaining
X-Clacks-Overhead
Rating
X-RateLimit-Limit
Content-Style-Type
Content-Script-Type
X-RateLimit-Reset
Real-Hostname
X-Loop
X-TNCMS
X-Acc-Exp
Surrogate-Control
X-Jimdo-Wid
X-Jimdo-Instance
Refresh
X-DDC-Arch-Trace
X-User-Agent
Public-Key-Pins
Front-End-Https
X-HS-Combine-CSS
X-Cache-Config
X-XN-Trace-Token
X-XN-XNHTML
X-Middleton-Display
X-Middleton-Response
Response
X-Sol
Display
X-StackifyID
X-Tumblr-Content-Rating
X-Age
Xkey
X-Servedby
Fpc-Cache-Id
X-Generated-By
X-DNS-Prefetch-Control
X-Hostname
X-SS-Location
X-SS-Conf
X-Cached
X-Vtex-Processado-Em
X-HOST
X-Zen-Fury
X-Px
X-N-OperationId
X-OneAgent-JS-Injection
X-Microcachable
X-Tumblr-Pixel-5
X-Topify-Platform
X-Wix-Renderer-Server
X-Frame-Option
X-MiniProfiler-Ids
X-Correlation-Id
PageSpeed
TCN
X-Url
X-Cached-By
X-Request-Time
X-CMS-Version
X-Magento-Tags
X-Amz-Version-Id
X-Whom
P-LB
X-WebKit-CSP
X-Ruxit-JS-Agent
P-WS
Rt-Fastcgi-Cache
X-Handled-By
Product
X-Kinsta-Cache
X-Outils-CS
X-Content-Options
X-Via-JSL
X-URL
X-DynaTrace-JS-Agent
Edge-Control-Message
X-B-Cache
X-Varnish-TTL
Surrogate-Key
X-Cdn
X-Debug-Info
X-DynaTrace
Access-Control-Request-Method
X-Msg-2-Log
X-Forwarded-For
Host
X-AspNetWebPages-Version
Imagetoolbar
X-From
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Varnish-Cache-Hits
X-FORWARDED-FOR
Fhost
X-Engine
ServedBy
X-Edge-Location
X-Recruiting
Powered
X-Cache-Rule
Alternate-Protocol
Fastly-Debug-Digest
X-CacheServer
Public-Key-Pins-Report-Only
X-LBLID
X-Umbraco-Version
X-Track
Generator
X-Application-Context
X-VTEX-Janus-Router-Backend-App
X-Vtex-Processed-At
X-Vtex-Remote-Cache
X-Signature
X-VTEX-Cache-Status-Janus-ApiCache
X-Powered-By-VTEX-Janus-ApiCache
X-NWS-LOG-UUID
No
X-Goog-Hash
X-Cache-Age
X-ApacheServer
X-PERF
X-Micro-Cache
X-Upstream
X-Location-Id
X-Platform
X-Actual-URL
DynaTrace
X-Accel-Expires
X-Passed-To
X-Passed-To-DLL
X-Returned-From
X-Original-Request
X-Returned-From-DLL
Dmn
X-Hosted-By
X-Developer
X-Returned-From-PostProcessResponse
X-Passed-To-BeforeDispatch
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
WZWS-RAY
X-Powered-By-360WZB
X-Varnish-Beresp-Grace
X-Platform-Processor
X-Platform-Router
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
Arr-Disable-Session-Affinity
X-Powered-By-VTEX-Janus-Edge
Retry-After
X-Stale
Akamai-IP
X-VARNISH-Cache
X-UD-Method
X-Source
X-Platform-Cluster
X-Response-Time
X-RESOURCE
X-LB
Fastcgi-Cache
HTTPS
X-I-Sp
X-TransIP-Balancer
X-BS
X-URLSCHEME
X-LW-Cache
X-Rnd
X-Varnish-Host
X-Cache-Info
X-Supported-By
X-Instart-Request-ID
X-Device-Type
X-Version
X-Pantheon-Environment
X-Shop-Id
X-Defender
X-Pantheon-Phpreq
X-Pantheon-Site
Surrogate-Key-Raw
X-Magento-Cache-Debug
X-Rocket-Nginx-Bypass
X-Cache-TTL
X-S
Cache-Provider
Content-Hash
X-Tumblr-Pixel-6
Origin
X-Fastcgi-Cache
X-TransIP-Backend
X-HS-Content-Campaign-Id
Pagespeed
X-Storage
X-F-Cache
X-AOL-HN
X-NetCat-Version
X-Cache-Key
X-Gamma-Serve
X-Varnish-HitMiss
X-Varnish-Count
X-Matrix-Proxy
X-Art-Request-Id
X-Matrix-Server
X-EdgeConnect-Origin-MEX-Latency
X-Expires-Orig
Version
USPLoggingUUID
X-Dispatcher
X-ATG-Version
X-Cache-Tags
IBM-Web2-Location
X-Server-ID
X-App-Hosting
Last-Published
X-CSRF-Protection
X-Varnish-RemainingLife
X-Varnish-ObjectSource
X-Platform-Server
X-Powered-By-VelaWeb
X-Translation
X-Varnish-RemainingTTL
X-Varnish-GracePeriod
X-Microcache-Status
X-Varnish-Seen-By
X-Front
X-EdgeConnect-MidMile-RTT
X-I
Powered-By-ChinaCache
X-Daa-Tunnel
Ohc-File-Size
Pool
X-LB-Node
X-Page-Cache
X-Platform-Cache
X-Hypernode
X-Director
X-Ua-Device
X-Flow-Powered
Allow
RTSS
X-Route-Server
X-Drupal-Cache-Tags
Cache-Key
X-Loopia-Node
Content-Disposition
SSPAppContext
X-Revision
X-Vcap-Request-Id
Page-Completion-Status
X-Cache-Operation
X-ARC
X-Server-Upstream
MIME-Version
X-Cache-Debug
X-Varnish-Age
X-SV-CacheTags
X-SV-Cacheable
X-SV-CreatedAt
X-SV-Edge
X-SV-Duration
X-SV-Nginx-Duration
X-SV-Expires
X-SV-FromDBCache
X-Environment
X-SV-Pid
X-Abgroup
X-SSL-Cipher
Content-MD5
X-SSL-Protocol
X-Content-Encoded-By
X-NoCache
Wsr-Cache
Node
X-UPSTREAM
X-Grace
X-Ttl
Lsrequestid
X-IsCacheURL
X-Github-Request-Id
X-Dispatch
Accept-Encoding
X-Lambda-Id
X-Cache-Lifetime
X-Cache-Control-Orig
X-ORACLE-DMS-ECID
X-Hiawatha-Cache
X-Debug
X-Sentry-ID
X-Firenze-Processing-Time
X-Url-Base
X-Cache-Only-Varnish
X-Varnish-Cacheable
X-Generated
X-Forwarded-Proto
X-Drupal-Cache-Contexts
X-Id
Pv
Content-Encoding-Handler
X-Edge-IP
X-Litespeed-Cache
X-RequestId
X-CJ-Soft
S-Cnection
Section-Io-Id
X-PwB-Node
X-Magento-Cache-Control
Srv
X-GeoIP-Country-Code
FAI-W-FLOW
ServerName
X-Cache-Expires
X-Cache-Server
Fw-Via
X-Cache-Type
X-Ezoic-Cdn
Location
X-Client-IP
X-Sapient
Proxy-Connection
X-Location
If-Modified-Since
Backend
Cneonction
ServerID
X-Dns-Prefetch-Control
X-Proxy
X-Discourse-Route
Req-Id
X-Amz-Meta-S3cmd-Attrs
SN
X-Processing-Time
X-Duration
AMF-Ver
X-Server-Id
X-Nbs
X-Time
X-Cache-Engine
SRV
X-Vhost
X-Browser
X-Speed-Cache-Key
X-Speed-Cache
Server-Name
X-Geo-Country
X-N
Author
IM-Version
X-Country-Code
X-ServerID
X-Cookie-Domain
X-Yadis-Location
X-Goog-Generation
X-GUploader-UploadID
X-Worker
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-Goog-Metageneration
X-Content-Age
X-SRCache-Key
X-Orig-Vary
X-Dynatrace-Js-Agent
X-GeoIP-Country-Name
Accept-Charset
X-Frontend
X-Cache-Level
X-FW
X-Nginx-Cache
X-Always-Cache
Nodo
X-Varnish-Url
X-Cache-Control
X-Akamai-Device-Characteristics
X-Middleware-Start
X-NB-Cached-Page
X-Webkit-CSP
PICS-Label
X-Akamai-Device-Model
X-Xrds-Location
X-TTL
X-Pressidium-NinukisWP-Ver
X-Cache-Namespace
Use-Proxy
X-Cache-Device-Type
X-SO
X-VTEX-Cache-Status-Janus-Edge
X-Cache-Fix
X-Sucuri-ID
X-Cache-PageType
X-Correlation-ID
NnCoection
X-Magnolia-Registration
X-Cache-CFC
Cache
X-ACMCache
X-Varnish-Backend
Server-Info
Qs-Cache
X-Akamai-Transformed
Local-Info
Cm-Server
Thanks
X-Real-Server
X-ClientSide-Caching
Cached
X-App-Server
X-SERVER-NAME
X-Cluster-Node
S
X-JG-Page-Cache
X-CDN-Forward
X-Amz-Storage-Class
Pf.Web.Request.Id
HAVer
X-WR-Flags
Adm-Server
HCVer
X-Purge-URL
X-Sucuri-Cache
X-Ss-Location
X-Ss-Conf
X-Abuse
X-Srv
X-BackendServer
X-DealerOn
Xc-Version
X-Runtime-Rack
X-Processed-By
X-Session-ID
X-Config-Blacklist-Version
X-Shield-Request-Id
Pics-Label
P-ID
X-BKSrc
X-Server-IP
NetMindSessionID
Server-Timing
X-Framework
X-Purge-Host
X-HW
X-Route-To
X-Traffic
X-Empowered-By
MJ12bot
MC
X-Fastly-Request-Id
SEOMOZ
SVR
X-High-Performance
X-ORACLE-DMS-RID
X-Cache-Handler
X-Litespeed-Cache-Control
X-Wix-Punisher
X-CF-Passed-Proto
X-Varnish-Retries
X-LB-Server
X-FTR-Request-ID
X-Origin
SiteSpeed
X-AF-Userserver
X-Unbounce-PageId
X-Cf-Powered-By
X-Content-Type-Option
X-LP
X-Unbounce-VisitorID
X-Unbounce-Variant
X-Server-Instance
W
X-FastCGI-Cache
X-Varnish-IP
X-Cache-TTL-Remaining
Magicmarker
ServerTokens
ServerSignature
Eomportal-Instance
Tracecode
X-Garden-Version
WWW-Authenticate
X-Varnish-Ttl
Nitro-Cache
X-Hit-Cache
EagleEye-TraceId
Content-Transfer-Encoding
Frame-Options
X-PF-Uncompressing
X-Client-Vid
X-Client-Image-Vid
X-Pagename
X-DataDome
A-Powered-By
X-Drectory-Script
X-EPiphany-Vid
X-Content-Security-Policy-Report-Only
X-VARITI-CCR
X-SRV
X-Yottaa-Metrics
NODE
X-Sys-Req-ID
X-Varnish-ID
X-Runtime-Memory
X-OpenCart-Lightning
X-Yottaa-Optimizations
X-HOSTNAME
Cache-Tag
X-Connection-Hash
X-Twitter-Response-Tags
X-Transaction
X-Adobe-Content
X-Cache-Doesi
X-Clara-ASAP
X-NginX-Cache
X-Rq
Content_type
X-HTML-Minification-Powered-By
Cache-Tags
X-VNode
X-HydroSheep
X-Directory-Script
X-Provisioner-Version
X-Adobe-Loc
X-WN-ClientGroup
Keywords
X-AVG-Country-Code
X-Domain-Checked
X-Akamai-Edgescape
X-ID
X-Avg-Cookie-Expires
VANITY-HOST
X-App-Status
X-ASAP-Cache
X-Redman-Backend
Web-App-Origin-Name
WN
X-Amz-Meta-Cb-Modifiedtime
Ufe-Result
X-Redman-Final-Url
X-Varnish-Hits
X-Sorting-Hat-Expire-Cache
From-Origin
X-Unique-ID
Backend-Timing
AC-ELC
X-Analytics
X-CacheResult
X-Autoru-LB
X-Cache-Keep
X-Smartcache-Timeout
X-Autoru-Host
X-AutoRu-App-Id
X-ARRServer
X-WPL-DATA
X-WP
X-Smartcache-Keys
CacheControlHeader
X-LW-Web-Server
Proxy-Agent
X-Rocket-Nginx-Serving-Static
X-Mobilized-By
Machine
Play-Detected-UserAgent
X-HP-Trace-Project
X-ServerIndex
X-HP-Trace-ID
Play-Detected-Device
X-Mobile-URL
X-Varnish-Hostname
X-GoCache-CacheStatus
X-Page
Description
X-Env
X-Debug-Token
Smug-CDN
X-GeoIP
X-SmugMug-Hiring
X-SmugMug-Values
X-Key
X-Jphone-Copyright
X-Disney-Akamai-Rule
X-Varnish-Debug-TTL
X-Varnish-Debug-Age
X-TTFB
X-TTFB-L
X-MCB-Server
X-Atraveo-Expires
X-Webkit-Csp
SBGI-1
SBGI-10
SBGI-5
X-AEM
Dispatcher
X-Source-ID
X-Trace-Id
X-RiS-UFDI
SBGI-7
SBGI-9
Noq
X-CAPServer
Front
Ram
Ramp
SBGI-Device
SBGI-RealPath
SBGI-RenderTime
X-Atraveo-Cache-Control
HitType
X-Atraveo-ETag
X-Atraveo-Zone
X-Atraveo-TTL
X-Atraveo-Set-Cookie
X-Atraveo-From-Varnish-Cache
X-Atraveo-Param-Rm
X-Force
X-Atraveo-Varnish-Server-Id
X-PRAM
Max-Age
Fastly-Backend-Name
Access-Control-Allow-Header
X-Generated-Time
X-Backend-Status
X-Balanceador
X-Fedora-School-Id
X-Esi
X-Resty-Request-Id
Beyond-Iis
Contao-Page-Layout
X-Culture
X-Webstats-RespID
X-FireWall-Port
X-Proto
X-Nginx-Host
X-App-Runtime
SERVER-ID
NLCacheNote
X-Runtime-Affili
Resin-Trace
N365rili
Strikingly-Cached
X-Varnish-Server
X-Real-IP
Xc
X-Cache-On
Ibf5scheme
X-WebKit-CSP-Report-Only
X-Resolver-IP
XDomainRequestAllowed
RN-Server
X-Frames-Options
X-Dw-Trace-Id
X-CB-Server
TC-S-Cache-M
X-Symfony-Cache
Og
X-Plat
XX
X-NginX-Server
X-Remote-Addr
X-RDP
X-Wikidot-Backend
X-Session-Reinit
X-Wikidot-Static-Cache
X-Viator-Tapersistentcookie
X-Server-Generated
Strikingly-Cached-Version
X-PHP-Response-Code
TC-Cache-U
TC-Cache-IC
X-Detected-Device
TC-Cache
TC-S-Cache
Identity
Strikingly-Cache-Region
AMP-Access-Control-Allow-Source-Origin
Lb
Device
X-Stage
Worker
X-Dev
X-Last-Modified
X-Airee-Node
X-Grid-Server
X-Varnish-Ip
Dis-Env
Custom-Header
X-Cache-Varnish
X-V
ScoreTracker
MS-CV
X-Cms-Mode
X-Rack-CORS
From
X-Cache-Node
Bios
Id
X-IIJ-Cache
Cmsid
X-Fstrz
X-VC-TTL
MW-Webserver
Cmstype
Warning
X-VC-Enabled
X-Rebelmouse-Cache-Control
X-Data-Request
COMMERCE-SERVER-SOFTWARE
X-Distributor
X-Req-Head-Response
X-Cache-Dispatchercachecontrol
OriginServer
X-Map-Context
X-MAT-GEO
PagesDisplayed
X-GSL-Server
Traffic-Origin
X-Cache-Dispatcherpragma
X-MidCOM-Meta-Cache
WebServer
Home
ClientIP
Cteonnt-Length
Ctx
BALANCEDTO
Arrnode
X-Aramark-SID
X-Apm-Telemetry-Syncmark
X-Amz-Meta-S3b-Last-Modified
X-Confluence-Request-Time
X-TB-M
Il-Cl
X-Machine-Name
Hostname
Gzip
X-Rebelmouse-Surrogate-Control
X-Akamai-3PM-SW-Version
F5-IpCliente
Proxy-Cache
Ews
X-App
X-WR-MODIFICATION
X-Webcelerate
Hname
Service-Worker-Allowed
X-Adnet
X-Render-Time
X-FPC
SG
X-Proxy-Cache-Key
X-DTC
Server-ID
X-DN-Cache-Control
X-Info
X-Hrouter
X-Hstore
X-SH-Cache-Status
X-Pj-Cache-Status
Paypal-Debug-Id
X-Compressed-By
X-Gyrobase-Publication
ViewMode
X-OPNET-Transaction-Trace
X-Amcomm-Site
X-MSEdge-Ref
SHInfo
X-Forwarded-Host
X-Highwire-SessionId
X-Desc
X-Origin-Server
Myheader
X-Varnish-Cache-Local
X-SmartBan-URL
X-Streams-Distribution
X-B2f-Not-Route
CLMOB
X-Rewrite
X-HashTwo
X-Highwire-RequestId
X-SmartBan-Host
X-Redirector
X-Refresh
X-ETag
X-Magento-Action
Nginx-Cache
X-CRA-DC
X-HAProxy
X-Captured
X-Response
IISExport
X-EC2-Instance-Id
X-Cdn-Forward
VServer
X-Batcache
X-Bip
DNNOutputCache
X-Batcache-Reason
X-UA
X-Cocoon-Version
X-SV
X-PM-ID
X-Dynamic-Cache
X-Avvio-Cms-Cacheload
Url
NtCoent-Length
X-A
X-Protected-By
X-CACHE-TTL
X-HostName
X-RealServer
BackendServer
Cleartype
X-Goog-Meta-Replace
X-WA-Info
X-Header
X-Unique-Id
X-Goog-Meta-Policy
X-W3TC-Minify
User-Agent
X-DSMX-Render-MS
AsisCache
X-Beatles-Hits
Hosted-By
X-Cache-Time
X-Cache-Set
X-Does-He-Have-Time
X-Flex-Evstart
Edgecast
SS
X-Flex-Community
X-Powered-By-Home.Pl
X-Depends
X-Zendesk-User-Id
Disablevcache
X-Flex-Evend
X-DSMX-Rewrite-MS
X-Origin-Cache
X-VC-Cache
Accept-Language
X-Flex-Tags
X-Flex-Tag
X-Flex-Lang
X-Flex-Lastmod
X-Lb
X-Beatles
X-E
X-Bcwwwid
X-CacheID
SB-Site-Device
SB-Cache-Remaining
X-We-Are-Hiring
CommunityServer
SB-Cache-Life
X-Gateway-Cache-Key
X-Gateway-Cache-Status
X-Cache-Extended
X-Varnish-Id
X-SDS
X-Backend-Host
FRONT-END-SECUREBROWSER
X-Gateway-Skip-Cache
X-Machine
X-Sc-Cache
X-Nginx
X-Your-GrandPa-Would-Wait
Hummingbird-Cache
X-Author
X-Would-Your-GrandPa-Wait
X-Magento-Lifetime
X-LBPoolMember
X-TTL-Age
X-Tag-Playlist
X-Zendesk-Origin-Server
Aoestatic
X-IP
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Time-Microsecs
X-ASAP-Age
PServer
X-Cache-Id
X-M
X-ENV
X-JSESSIONID
Content-Server
X-Environment-Context
X-Generation-Time
X-Ghost-Cache-Status
Hamster
X-AppServer-Cache-Rule
X-ProcessESI
X-XHR-Current-Location
X-D-Time
X-Config-By
X-L-Path
Yoncu-Errno
X-Secret
X-Src-Webcache
X-S-Misc
ServerIP
X-Cache-Via
X-Cache-TTL-Age
Session-From
Web
X-RemovedCookies
X-Old-Content-Length
X-Cache-TTL-Current
Progma
Kanooh-Host
X-Server-Addr
X-RAMCache
X-Reflector
VC-NoCache
X-HP-CAM-COLOR
X-Netrix-ID
X-DB-Content-Length
X-Serv
X-4ormat-Cacheable
Provider
X-SDE-Name
X-Varnish-Action
Viewport
X-Hosting-Env
X-Pagely-Cache
X-KoobooCMS-Version
X-Resource
Server-Ip
X-FORWARDED-PROTO
X-CSRF-Token
X-HS-Status
Mime-Version
NZSpeedy
X-ACCELERATE
X-Lw-Cache
X-Dynatrace
X-ReqId
X-Reflector-Cache
Serverid
X-Served-Server
Provided-Host
WP-AdvCache-MemCached
SB-Site-IE-VERSION
X-AISO-Server
X-AISO-Cacheable
X-AISO-Cache
Session-Id
Referer
X-Hosting
X-Debug-Message
X-DynamicCache
X-FastCGI-Cache-Status
X-HA
UrlWatchModule-Time
X-Cache-Detail
X-Node-ID
X-Activity-Id
X-AppVersion
X-Az
X-Middleton-PageSpeed
X-Mobile-Rewrite
X-Say-Cacheable
X-Say-TTL
X-SayCDN-TTL
X-Cache-V
X-CH-Device
X-Amz-Id-1
X-UT-Cache
X-Catalyst
Note
RequestId
X-Country
Fastly-Restarts
X-Timestamp
X-Sid
X-Via-NSCOPI
Content-Cache
Webserver
X-Time-Zone
X-Varnish-Instance
X-Cluster
X-Client-Ip
X-DEBUG
X-VLoc
X-ServiceProvider
X-DDM-SERVER
X-DDM-SERVER-UPDATED
X-Domino-CacheValidationWithETagResult
X-Domino-CacheValidationWithETagReason
Ec-CorrId
Ec-Machine
X-WHOIS-Cached
X-FIRSTBase
Actual-Object-TTL
X-Distributed-By
X-Proxy-Id
X-SuperCache
X-Uncacheable
X-Cache-Me-Harder
X-Box
X-Application
StatusCode
X-Cache-FS-Status
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Node-Name
NS-VaryByCustom-Key
Uuri
X-Litespeed-Tag
X-Nginx-Request-Time
X-ELB
Access-Control-Request-Headers
X-PG
X-Instance-Id
TP-L2-Cache
TP-Cache
X-7d-Instance-Id
X-7d-Trace-Id
X-Server-FQDN
Cache-Status
X-PBS-Fwsrvname
EN-User
X-NewsFlow-Sitename
X-PBS-Appsvrip
X-PBS-Appsvrname
X-Instart-Cache-Id
X-Ser
X-Upstream-Status
X-Search-Id
X-Turpentine-Esi
X-VC-Cacheable
X-VC-Debug
X-SCM-Server-Number
X-Pixelsilk-Version
X-Full-Url
X-Max-Age
X-Instance
X-Pixelsilk-Server
X-VC-Hash
X-Gannett-Site-Version
X-DevSrv-CMS
MwpReleaseVersion
X-Enabled1
X-Enabled2
X-Custom-Header
X-CCM
X-Enhanced-By
Ttl
X-DS1D
X-Amz-Meta-Content-Md5
X-SilverStripe-Cache
X-Status
Tesla.Performance
X-ManagedFusion-Rewriter-Version
X-NodeID
X-Pubstack
X-Distil-CS
X-Blog
Access-Control-Allow-Method
CDCHOST
X-UnsetCookies
X-RequesterIP
X-Nginx-Request-Processing-Time
X-Rewritten-By
X-Backend-Name
X-Cache-Original-TTL
X-Cjtype
X-AMAZEEIO
Www.Aujourdhui.Com
X-Artvisual-Server
X-Test-Debug
X-XHTML-Minification-Powered-By
Cacheid
ServerNode
X-Enabled3
X-Upstream-Backend
Microcache
X-Served
PB-PID
X-Cname-TryFiles
X-Header-Treatment
MachineName
AR-PoweredBy
X-Server-Ip
Quri
X-Route
Generate-Time
EQ-Cache
X-Rack-Cors
!~Request-OOB-Work
Control-Cache
X-Made-On
Tempo
X-Deity
AR-CACHE
Expiries
Upgrade-Insecure-Requests
AR-SID
RSB-LINK
AR-ATIME
X-Router
Debug-Status
PB-RID
X-Ssl-Cipher
X-Ruxit-Js-Agent
X-ESI
X-Oracle-DMS-ECID
X-Oneagent-Js-Injection
X-Cache-Ttl
Dynatrace
Server-Id
CpuTime
X-Member
X-Fastly-Backend-Reqs
X-Varnish-Esi-Method
X-Varnish-Store
X-COUNTRY-CODE
X-Varnish-Esi-Access
X-Varnish-Currency
Accept-CH
X-ZSITES-DNS
GranicusServer
Powered-By-VeryCDN
Aurora-Node
X-Wm-VIP
CD4
TTL
Memento-Datetime
X-WHO
X-Wm-1
X-Server-Vrn
X-Meta-Imagetoolbar
X-LB-Frontend
X-Meta-MSSmartTagsPreventParsing
X-Meta-MSThemeCompatible
X-Restarts
X-Archive-Guessed-Charset
X-Archive-Orig-Connection
X-Request-Received
X-Request-Processing-Time
X-Server-App
Language
X-Debug-Serve
X-Cache-Date
X-PBY
X-Built-By
X-Archive-Orig-Date
X-Archive-Orig-Content-Length
X-Archive-Orig-ETag
X-Archive-Orig-Server
X-AWS
X-Hash
MageStack-Config
X-Cacheable-TTL
X-Cachable
X-Middleton-Pagespeed
X-I-V
X-M-P
X-Beresp-Ttl
X-B
OracleCommerceCloud-Sandiego
Key
OracleCommerceCloud-Version
X-OCTOPOD
X-MyName
X-M-T
X-M-V
X-Q-S
X-Pool-Info
X-S-C
X-T
X-S-V
X-Pageid
X-Transaction-Name
X-Mw-Workerstats
X-Nocache
X-Healthy
ReqUrl
X-UPSTREAM-Address
X-WebNode
MageStack-Loadbalancer
MageStack-Debug
MageStack-Magento-Version
X-Who
MageStack-PageSpeed
X-Cacheable-By-Varnish
MageStack-Cacheable
MageStack-Cache
MageStack-Cache-Hits
MageStack-Cache-Lifetime
MageStack-Cache-Status
MageStack-Tag
X-NewRelic-App-Data
AMFplus-Ver
X-Serverid
CommercePlatform-Version
X-LB-Backend
X-Compress-Hint
X-Server-Instance-Name
X-ProBase-Server
MageStack-Web-Node
X-Backend-TTL
X-NewCloud-V-Cache
X-Origin-Upstream-Status
MageStack-Area
X-PROCESSED-BY
Response-Time
X-FG-RequestId
X-This-Proto
Head
X-Svr
DrivedBy
XDisk
X-VCS-Cacheable
X-VCS-Ttl
X-WAF-Proxy
X-EBAY-C-REQUEST-ID
X-MainProfileCategory
X-MainProfileID
INFO
WSCLoggingUUID
VAR-Cache
X-Agent
CmsfirstPublishTimestamp
E-TAG
X-MainProfileName
X-MainProfileURL
X-Not-Cacheable
Countrycode
X-Varnish-Grace
X-ACLR-Version
X-Layout
X-Memcached
X-CO-Host
X-Varnish-URL
X-Czt
X-Accel-Cache-Control
X-Nginx-Page-Cache
X-Powered-Developer
Apple-Itunes-App
Copyright
X-Server-Ident
X-Title
RlogId
X-BeResp-Ttl
X-Cache-2
X-IP-Address
Page-Template
Fw-Cache-Status
X-ZORequestID
Y-Trace
Yola-ID
X-Cache-Bypass
X-Cache-Served
X-Brought-To-You-By
X-MCF-ID
X-Nitro-Cache
X-Script
X-ServerAddr
X-LOCATION
X-Fpc
X-B3-Spanid
X-B3-Traceid
X-Built-With
X-CPU-Time
X-Sn-Servicetimems
X-UPServer
MSThemeCompatible
Realaction
WP-FROM-CACHE
X-Cache-Warmer
MSSmartTagsPreventParsing
Httpd-Identifier
X-Varnish-Cached
X-Varnish-Cached-TTL
Actioncode
CS-SERVER
Request-Time
Load-Balancer
X-Geo-IP
X-REDIRECTSERVER
X-Rocket-Nginx-File
X-Rocket-Nginx-Reason
OutputRewritten
X-Dynamic
X-Ar-Debug
X-Config-Version
X-Container
X-DeliveryServer
X-Skip-Cache
X-Upgrade-Enabled
X-Service-Id
Cookie
DB-Nickname
IES-Server
X-Ants-Host
X-Ants-Machine-Id
DbServerName
FindLaw
Rewriter
X-BC
X-Instance-Name