Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
X-Cache
Strict-Transport-Security
CF-RAY
X-AspNet-Version
P3P
Age
X-Pingback
Content-Language
X-UA-Compatible
Via
Expect-CT
Access-Control-Allow-Origin
X-Adblock-Key
Upgrade
X-Varnish
X-Cacheable
P3p
Content-Security-Policy
X-Check
X-Template
X-Language
X-Generator
X-Buckets
X-Drupal-Cache
X-Request-Id
X-AspNetMvc-Version
X-Type
X-Cache-Group
X-Pass-Why
X-Hacker
X-Ac
Alt-Svc
X-Powered-By-Plesk
Content-Location
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-Xss-Protection
X-Runtime
Host-Header
MS-Author-Via
X-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Dc
X-Sorting-Hat-Section
X-ShardId
X-Sorting-Hat-PodId-Cached
X-Alternate-Cache-Key
Cartoon
X-IPLB-Instance
X-Powered-CMS
X-FRAME-OPTIONS
X-UA-Device
X-Served-By
Status
X-Amz-Cf-Id
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Via
X-Cache-Status
X-Iinfo
X-Backend
X-Timer
X-ServedBy
X-Contextid
X-CST
CF-Cache-Status
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Request-ID
Powered-By
X-PC-Key
X-PC-Hit
Content-Encoding
X-DIS-Request-ID
X-Mod-Pagespeed
X-PC-Date
X-PC-AppVer
X-PC-Host
X-Logged-In
Keep-Alive
X-Rid
X-Cache-Hit
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-CDN
WPE-Backend
X-Port
X-Host
X-Tumblr-Pixel-1
Referrer-Policy
X-Server
X-Server-Powered-By
X-Cache-Enabled
X-Tumblr-Pixel-2
X-Robots-Tag
X-Endurance-Cache-Level
X-Nginx-Cache-Status
X-Seen-By
X-Wix-Request-Id
X-Wix-Server-Artifact-Id
X-Wix-Renderer-Server
X-Turbo-Charged-By
X-Page-Speed
X-Accel-Version
X-Wix-PunisherID
WP-Super-Cache
X-Pad
X-Drupal-Dynamic-Cache
Content-Security-Policy-Report-Only
X-Content-Powered-By
X-Tumblr-Pixel-3
X-Forwarded-For
X-Forwarded-Proto
X-Content-Digest
X-Varnish-Cache
X-Rack-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
Surrogate-Key-Raw
X-AH-Environment
X-Proxy-Cache
X-GitHub-Request-Id
X-Original-Date
SPRequestGuid
X-SharePointHealthScore
X-Cnection
X-Died
MicrosoftSharePointTeamServices
X-Request-Country
X-MS-InvokeApp
Edge-Control
X-XRDS-Location
X-Cache-Lookup
X-LiteSpeed-Cache
Cf-Railgun
Timing-Allow-Origin
X-WPE-Loopback-Upstream-Addr
X-Amz-Id-2
X-Amz-Request-Id
MicrosoftOfficeWebServer
X-Webserver
X-Safe-Firewall
Charset
X-SERVER
X-FW-Hash
Request-Id
X-FullPageCaching
X-FW-Type
X-FW-Serve
X-FW-Static
X-PhApp
Edge-Cache-Tag
X-Content-Security-Policy
X-HS-Cache-Config
X-HS-Content-Id
X-Node
SPIisLatency
X-INKT-URI
X-INKT-SITE
SPRequestDuration
X-Tumblr-Pixel-4
X-CF-Powered-By
X-Hits
Composed-By
Access-Control-Max-Age
Content-MD5
Liferay-Portal
Grace
X-Swift-CacheTime
X-Swift-SaveTime
Request-Context
X-AWS-Id
X-VWS-Id
X-LJ-Flow-ID
X-Newrelic-App-Data
Served-By
EagleId
X-CDN-Pop-IP
X-CDN-Pop
Rating
X-BC-Stapler
X-Hyper-Cache
X-Spip-Cache
Access-Control-Expose-Headers
X-Server-Name
X-PHP-Backend
X-Backend-Server
Fastly-Debug-Digest
X-Device
X-Fastly-Request-ID
X-Dw-Request-Base-Id
X-Firenze-Processing-Times
X-Microcache
X-Tumblr-Content-Rating
X-ServerName
X-VCache
X-RateLimit-Remaining
Content-Style-Type
X-RateLimit-Limit
Content-Script-Type
X-Cloud-Trace-Context
X-User-Agent
X-RateLimit-Reset
Public-Key-Pins
X-Jimdo-Instance
X-Jimdo-Wid
X-Clacks-Overhead
X-FB-Debug
Front-End-Https
Refresh
X-Cache-Config
X-Loop
Real-Hostname
X-TNCMS
X-DDC-Arch-Trace
X-Acc-Exp
Surrogate-Control
Xkey
Fpc-Cache-Id
X-XN-Trace-Token
X-Age
X-XN-XNHTML
X-Trace
X-Tumblr-Pixel-5
X-Px
X-Hostname
Display
X-Middleton-Response
X-Middleton-Display
Response
X-Sol
PageSpeed
X-Cached
X-N-OperationId
X-Generated-By
X-DNS-Prefetch-Control
X-StackifyID
X-SS-Conf
X-LiteSpeed-Cache-Control
X-SS-Location
X-Topify-Platform
X-WebKit-CSP
X-MiniProfiler-Ids
X-Request-Time
Surrogate-Key
X-Cached-By
X-Zen-Fury
X-DynaTrace-JS-Agent
X-Content-Options
X-Whom
X-FORWARDED-FOR
X-Amz-Version-Id
X-Url
Edge-Control-Message
TCN
X-HS-Combine-CSS
X-CMS-Version
X-DynaTrace
Rt-Fastcgi-Cache
X-Pantheon-Environment
X-Pantheon-Site
X-Pantheon-Phpreq
X-PERF
X-ApacheServer
X-URL
X-Content-Security-Policy-Report-Only
X-Outils-CS
X-Kinsta-Cache
Access-Control-Request-Method
X-SRCache-Store-Status
X-SRCache-Fetch-Status
Product
X-Handled-By
X-AspNetWebPages-Version
X-Magento-Tags
Alternate-Protocol
P-WS
P-LB
Host
DynaTrace
X-Umbraco-Version
X-OneAgent-JS-Injection
Imagetoolbar
X-Tumblr-Pixel-6
X-Engine
X-Varnish-Cache-Hits
X-Correlation-Id
X-HOST
X-Varnish-TTL
Powered
X-Ruxit-JS-Agent
X-Goog-Hash
X-Cache-Rule
X-Microcachable
X-Fastcgi-Cache
ServedBy
X-NWS-LOG-UUID
Fhost
X-LBLID
X-Recruiting
Generator
X-CacheServer
X-B-Cache
X-Powered-By-360WZB
WZWS-RAY
X-Micro-Cache
X-Edge-Location
X-Track
X-Location-Id
X-RESOURCE
X-VTEX-Janus-Router-Backend-App
No
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Processado-Em
X-Vtex-Remote-Cache
X-Vtex-Processed-At
X-From
X-Powered-By-VTEX-Janus-ApiCache
X-URLSCHEME
X-Actual-URL
X-Application-Context
Fastcgi-Cache
X-Original-Request
X-Passed-To
X-Passed-To-DLL
X-Returned-From-DLL
X-Returned-From
Origin
X-Hosted-By
X-Instart-Request-ID
X-Cache-Age
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Tec-Api-Version
X-Tec-Api-Origin
X-Tec-Api-Root
X-Powered-By-VTEX-Janus-Edge
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
Arr-Disable-Session-Affinity
Public-Key-Pins-Report-Only
X-Stale
X-Varnish-Host
Content-Hash
Dmn
X-Developer
X-Upstream
Akamai-IP
X-BS
X-I-Sp
X-UD-Method
X-Accel-Expires
X-Cache-TTL
X-Response-Time
X-App-Hosting
X-LB
X-Device-Type
X-Matrix-Server
X-Matrix-Proxy
X-Rocket-Nginx-Bypass
X-Platform
X-Msg-2-Log
X-TransIP-Balancer
X-NetCat-Version
X-Source
X-Duration
X-Platform-Processor
X-VARNISH-Cache
X-Platform-Router
X-Signature
X-S
X-Internal-ReqID
X-Debug-Info
X-Shop-Id
HTTPS
X-Platform-Cluster
X-Defender
X-Storage
X-Front
X-LW-Cache
X-Daa-Tunnel
Last-Published
X-Page-Cache
X-Microcache-Status
X-Translation
X-Version
X-TransIP-Backend
X-EdgeConnect-Origin-MEX-Latency
X-Revision
Cache-Key
X-Supported-By
MIME-Version
X-Cache-Debug
X-Cache-Info
X-HS-Content-Campaign-Id
X-Varnish-Count
X-Varnish-HitMiss
X-Varnish-Cacheable
IBM-Web2-Location
Ohc-File-Size
X-Expires-Orig
X-Powered-By-VelaWeb
Powered-By-ChinaCache
X-Cache-Operation
Pool
X-EdgeConnect-MidMile-RTT
X-Gamma-Serve
X-I
X-Art-Request-Id
X-ATG-Version
X-Server-ID
Version
X-Content-Encoded-By
X-NoCache
X-Director
USPLoggingUUID
Cache-Provider
X-F-Cache
Node
X-Dispatch
X-Cache-Key
Content-Disposition
X-Dispatcher
X-VTEX-Cache-Status-Janus-Edge
X-Varnish-Age
X-Cache-Only-Varnish
X-Hypernode
X-Vcap-Request-Id
X-Lambda-Id
X-Platform-Server
X-Cache-Tags
X-Firenze-Processing-Time
ServerName
X-SV-Pid
X-SV-Duration
X-SV-Nginx-Duration
X-SV-CreatedAt
X-SV-Edge
X-Server-Upstream
X-SV-FromDBCache
IM-Version
X-Flow-Powered
X-SV-CacheTags
X-AOL-HN
X-SV-Expires
X-Varnish-Seen-By
X-Varnish-RemainingTTL
X-SV-Cacheable
X-Varnish-GracePeriod
X-ARC
X-Route-Server
Allow
X-UPSTREAM
X-Varnish-Backend
X-Varnish-ObjectSource
X-Varnish-RemainingLife
X-SSL-Cipher
SSPAppContext
X-Debug
X-Magento-Cache-Debug
X-Cache-Control-Orig
X-GeoIP-Country-Code
X-TTL
X-Sucuri-ID
X-SSL-Protocol
X-Abgroup
Srv
X-Platform-Cache
X-Origin
X-Cache-Lifetime
X-Cache-Expires
X-Sucuri-Cache
Accept-Encoding
Lsrequestid
X-Client-IP
Content-Encoding-Handler
X-Geo-Country
X-Goog-Generation
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-CJ-Soft
X-Goog-Metageneration
X-Goog-Storage-Class
X-Last-Modified
X-Goog-Stored-Content-Encoding
X-Dns-Prefetch-Control
Fw-Via
X-Loopia-Node
X-Proxy
FAI-W-FLOW
Proxy-Connection
X-SDS
X-RequestId
X-LB-Node
Cneonction
Location
Pv
X-Litespeed-Cache
X-Cookie-Domain
Backend
Section-Io-Id
X-Akamai-Device-Characteristics
X-Grace
X-Edge-IP
X-Via-JSL
X-PwB-Node
SN
X-Browser
X-Amz-Meta-S3cmd-Attrs
X-ORACLE-DMS-ECID
PICS-Label
ServerID
X-Nbs
Tracecode
Wsr-Cache
X-SE-Debug
X-IsCacheURL
X-Abuse
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Cache-Server
X-Content-Age
X-SRCache-Key
X-ServerID
X-Speed-Cache
X-Discourse-Route
X-GeoIP-Country-Name
X-Speed-Cache-Key
Page-Completion-Status
X-Url-Base
X-Correlation-ID
X-Country-Code
Accept-Charset
NnCoection
X-Processed-By
Req-Id
X-Server-Id
X-Cache-Engine
X-Sapient
X-Hiawatha-Cache
X-Drupal-Cache-Tags
X-Xrds-Location
RTSS
X-Rnd
Edge-Content-Tag
X-Id
X-Shield-Request-Id
X-NB-Cached-Page
X-Middleware-Start
Author
X-N
X-Cf-Powered-By
X-Yadis-Location
X-Varnish-Ttl
X-Generated
X-Akamai-Device-Model
X-BKSrc
X-Varnish-Url
S
Cm-Server
X-CDN-Forward
X-CDN-Node
X-Orig-Vary
Xc-Version
X-Time
X-Worker
WWW-Authenticate
X-CDN-Cache-Status
A-Powered-By
X-BackendServer
X-Nginx-Cache
X-Cache-CFC
X-FW
X-Purge-URL
If-Modified-Since
X-Processing-Time
X-Cache-Type
Nodo
X-Traffic
X-Route-To
X-Config-Blacklist-Version
X-Frontend
Use-Proxy
Cache
X-Srv
X-Akamai-Transformed
HAVer
X-Varnish-ID
X-Cache-Level
HCVer
X-Vhost
X-DealerOn
Content-Transfer-Encoding
X-Varnish-IP
X-Cache-Control
X-SO
X-Cache-PageType
X-Magnolia-Registration
Local-Info
X-PF-Uncompressing
X-ID
X-Amz-Storage-Class
X-Cache-Fix
Server-Info
X-HP-Trace-ID
X-HP-Trace-Project
Qs-Cache
X-Always-Cache
X-Pressidium-NinukisWP-Ver
Frame-Options
X-Purge-Host
S-Cnection
X-Empowered-By
SRV
X-ClientSide-Caching
X-LB-Server
X-Magento-Cache-Control
X-Yottaa-Metrics
X-Runtime-Memory
X-Yottaa-Optimizations
NetMindSessionID
MJ12bot
AMF-Ver
X-JG-Page-Cache
SEOMOZ
X-Varnish-Hits
Thanks
X-DataDome
X-Environment
X-WN-ClientGroup
X-Env
Web-App-Origin-Name
WN
X-Litespeed-Cache-Control
Cached
X-App-Server
X-Pagename
X-FireWall-Port
Eomportal-Instance
X-Hit-Cache
X-Varnish-Retries
X-ServerIndex
SVR
X-Real-Server
MC
AddOutputFilterByType
X-CF-Passed-Proto
NODE
X-Cache-Device-Type
X-High-Performance
X-Cache-Provider
X-Cache-Handler
X-Cache-Source
X-Framework
Access-Control-Allow-Header
X-Healthy
Cache-Tag
X-ACMCache
CLMOB
Magicmarker
Retry-After
X-Ttl
X-VARITI-CCR
Server-Name
X-Powered-By-Server
X-Mobilized-By
X-CB-Server
X-Drupal-Cache-Contexts
X-CDN-RULE
X-CDN-COMPRESS
X-VC-TTL
X-Directory-Script
X-Dw-Trace-Id
X-Remote-Addr
X-Cache-Doesi
X-Varnish-Server
X-Culture
X-Webkit-CSP
Nitro-Cache
EagleEye-TraceId
Dispatcher
X-Runtime-Rack
X-GeoIP
X-SmugMug-Values
X-Transaction
X-Connection-Hash
Smug-CDN
X-SmugMug-Hiring
Warning
CacheControlHeader
X-Twitter-Response-Tags
Proxy-Agent
X-WR-Flags
X-Amz-Meta-Cb-Modifiedtime
X-TTFB-L
X-TTFB
X-Clara-ASAP
NtCoent-Length
Content_type
Pagespeed
X-HW
X-AF-Userserver
X-ASAP-Cache
X-NODE
Disablevcache
X-Session-ID
Max-Age
Front
X-Drectory-Script
BALANCEDTO
X-LP
X-Ezoic-Cdn
X-HOSTNAME
X-Adobe-Loc
X-Mobile-URL
X-Client-Vid
X-WHOIS-Cached
W
X-EPiphany-Vid
X-Balanceador
X-Atraveo-ETag
X-Client-Image-Vid
X-Atraveo-Expires
X-PRAM
X-ORACLE-DMS-RID
X-App-Status
X-Force
X-Atraveo-Zone
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Debug-Token
X-Domain-Checked
X-Atraveo-Param-Rm
X-Atraveo-Cache-Control
X-Sys-Req-ID
X-Atraveo-From-Varnish-Cache
X-Provisioner-Version
X-Middleton-PageSpeed
X-Adobe-Content
X-VC-Enabled
X-UA
Cmsid
X-Wix-Punisher
X-WR-MODIFICATION
Cmstype
X-IIJ-Cache
Home
X-Cache-Node
X-Key
X-Session-Reinit
Identity
OriginServer
X-Varnish-Hostname
DNNOutputCache
X-Symfony-Cache
Strikingly-Cache-Region
Strikingly-Cached
Backend-Timing
X-Analytics
X-Resty-Request-Id
X-Fedora-School-Id
Strikingly-Cached-Version
X-ARRServer
X-Backend-Status
HitType
X-Location
Machine
Keywords
X-HTML-Minification-Powered-By
X-OpenCart-Lightning
X-Unbounce-Variant
X-Unbounce-PageId
X-Server-Instance
Ctx
X-Unbounce-VisitorID
X-Server-IP
X-Cluster-Node
X-Info
X-Nginx-Host
X-A
X-Rack-Cors
X-App
X-Akamai-Edgescape
SBMCLOUD
X-Machine
SBGI-RealPath
X-EC2-Instance-Id
SBGI-RenderTime
X-Garden-Version
X-CAPServer
X-This-Proto
X-WP
X-Cache-Dispatchercachecontrol
X-Jphone-Copyright
X-Wikidot-Static-Cache
Yoncu-Errno
X-Amz-Id-1
X-HA-Backend
IISExport
X-Wikidot-Backend
X-HashTwo
X-Cache-Dispatcherpragma
ViewMode
X-Content-Type-Option
X-Data-Request
X-Source-ID
MW-Webserver
X-Aramark-SID
X-Origin-404Back
SBGI-5
SBGI-10
Ram
X-Batcache-Reason
X-CSRF-Token
X-Redman-Backend
SBGI-1
Noq
X-Goog-Meta-Goog-Reserved-File-Mtime
Ufe-Result
X-Disney-Akamai-Rule
X-Varnish-Cache-Local
X-Origin-404URL
X-Redman-Final-Url
Swift-Performance
SBGI-Device
X-HP-Redirect
SBGI-9
SBGI-7
X-B2f-Not-Route
X-Avg-Cookie-Expires
X-Resolver-IP
X-RiS-UFDI
X-Apm-Telemetry-Syncmark
X-AVG-Country-Code
X-Batcache
X-TB-M
X-HA-Frontend
X-Cache-Detail
Fastly-Backend-Name
X-Goog-Meta-Policy
Description
Access-Control-Allow-Method
X-Cocoon-Version
COMMERCE-SERVER-SOFTWARE
X-NginX-Cache
WP-AdvCache-MemCached
X-Ser
X-LW-Web-Server
X-HydroSheep
X-DB-Content-Length
X-Goog-Meta-Replace
X-Req-Head-Response
X-Map-Context
From-Origin
Nginx-Cache
X-Autoru-LB
From
SHInfo
X-Autoru-Host
X-Esi
X-Page
Beyond-Iis
Bios
X-Webcelerate
X-AutoRu-App-Id
NLCacheNote
X-MSEdge-Ref
X-Plat
X-Hosting
Traffic-Origin
X-Rocket-Nginx-Serving-Static
Set-Cookie2
Il-Cl
X-DSMX-Render-MS
X-DSMX-Rewrite-MS
Cache-Tags
X-NginX-Server
Cteonnt-Length
Accept-Language
X-E
ServerSignature
X-Generated-Time
Proxy-Cache
ServerTokens
X-Blog
XDomainRequestAllowed
X-Smartcache-Keys
Dis-Env
Id
ScoreTracker
Ttl
X-Cache-TTL-Remaining
X-SDE-Name
Ews
X-Frame-Option
RN-Server
X-Hosting-Env
SiteSpeed
X-Smartcache-Timeout
X-SERVER-NAME
Pics-Label
X-HITS
X-Unique-ID
X-Hrouter
X-AEM
X-Rq
X-KoobooCMS-Version
X-Hstore
X-Grid-Server
X-Trace-Id
AsisCache
X-Cms-Mode
X-Dev
X-LBPoolMember
Worker
PagesDisplayed
X-ACCELERATE
X-Stage
X-Served-Server
X-RealServer
X-Gyrobase-Publication
X-Pj-Cache-Status
X-NewRelic-App-Data
SB-Cache-Life
SB-Cache-Remaining
FastCGI-Cache-Status
AccessControlAllowOrigin
X-WPL-DATA
SB-Site-Device
Gzip
X-DTC
X-Ghost-Cache-Status
F5-IpCliente
SB-Site-IE-VERSION
X-MCB-Server
X-Depends
X-Airee-Node
X-Proto
PServer
TC-Cache-IC
X-SmartBan-Host
X-SmartBan-URL
X-Rack-CORS
X-Highwire-SessionId
Xc
MS-CV
TC-Cache-U
AMP-Access-Control-Allow-Source-Origin
X-Highwire-RequestId
X-Adnet
ClientIP
SG
X-Actindo-Error-1
TC-S-Cache-M
X-Frames-Options
X-Rebelmouse-Surrogate-Control
Hname
X-Actindo-Request-Id
X-Actindo-Rs
X-MAT-GEO
X-MidCOM-Meta-Cache
X-Machine-Name
TC-S-Cache
X-Actindo-Thread-Id
Cluster-ID
Sophnep-Edge-FX
X-Sc-Cache
Access-Control-Request-Headers
X-Response
X-Rewrite
X-GSL-Server
X-RDP
NS-VaryByCustom-Key
TC-Cache
X-Cache-On
X-CRA-DC
X-Cached-Status
Paypal-Debug-Id
X-Rebelmouse-Cache-Control
Content-Server
X-VarnState-NoCache
X-CACHE-TTL
X-VarnMisc-UrlChanged
X-Ss-Location
WebServer
X-EMAC-Request-ID
X-Cache-Keep
X-Distil-CS
X-DN-Cache-Control
X-Ss-Conf
X-VarnMisc-Url
RSB-LINK
Hosted-By
X-Render-Time
X-ACLR-Version
X-Amz-Meta-Content-Md5
X-PM-ID
X-Replay-Request-ID
X-CacheResult
X-Cache-Time
X-OPNET-Transaction-Trace
X-SCM-Server-Number
X-Header
X-Distributor
X-ReqId
X-Unique-Id
VServer
Og
X-Detected-Device
X-Optimization
X-Oracle-DMS-ECID
X-HostName
Web
X-Cache-HT
X-Search-Id
X-Artvisual-Server
X-Webstats-RespID
X-AMAZEEIO
DrivedBy
X-Secret
X-Src-Webcache
Hamster
CommunityServer
AC-ELC
X-Title
X-Layout
X-JSESSIONID
X-Obj.Ttl
ServerIP
X-Cache-Id
Myheader
X-Cache-Via
Session-From
X-XHR-Current-Location
X-Upstream-Status
Ibf5scheme
N365rili
X-INSTART-START
X-SilverStripe-Cache
X-ProcessESI
X-RemovedCookies
X-Nginx
Server-ID
X-Origin-Cache
X-Viator-Tapersistentcookie
X-OCTOPOD
X-Captured
X-Session-Id
Url
X-WA-Info
X-Origin-Server
X-Upstream-Backend
X-CacheID
X-Avvio-Cms-Cacheload
X-ASAP-Age
X-4ormat-Cacheable
X-App-Version
Response-Time
X-Desc
X-Forwarded-Host
X-We-Are-Hiring
X-Pagely-Cache
X-HAProxy
Actual-Object-TTL
X-Proxy-Cache-Key
X-Deity
X-Your-GrandPa-Would-Wait
X-HA
INFO
X-Author
X-Server-Generated
X-Would-Your-GrandPa-Wait
X-Beatles
X-Cache-LB
X-GoCache-CacheStatus
X-Beatles-Hits
X-Debug-Message
X-Router
Brightspot-Id
X-Lima-Id
X-SCProxy
X-Served
X-Processed
Tempo
X-M
X-Tag-Playlist
Quri
X-Real-IP
X-Webkit-CSP-Report-Only
Buuteeq-Source
X-VNode
Uuri
X-Flex-Tags
X-TTL-Age
X-Dynatrace-Js-Agent
X-Cname-TryFiles
X-Flex-Community
X-ETag
X-Cache-Set
X-Header-Treatment
X-CCM
X-Flex-Tag
X-Svr
X-Flex-Evend
X-Flex-Evstart
X-Flex-Lastmod
X-Flex-Lang
X-Does-He-Have-Time
X-Serv
X-Lb
X-PBY
X-Cache-BE
X-Container
RATING
X-Varnish-Action
Device
X-Reflector
X-IP
X-Runtime-Affili
X-Turpentine-Esi
X-Resource
X-CACHE-KEY
X-W3TC-Minify
Provider
TP-L2-Cache
X-Varnish-Ip
X-Cache-Warmer
X-App-Runtime
X-Reflector-Cache
X-Nginx-Request-Processing-Time
X-Cdn-Forward
X-SH-Cache-Status
X-REDIRECTSERVER
SERVER-ID
ProxiaInstanceId
NZSpeedy
Server-Ip
X-Bcwwwid
X-ChromeLogger-Data
X-Varnish-URL
BackendServer
TP-Cache
X-Site
X-RAMCache
Debug-Status
X-Varnish-Cached
X-Varnish-Cached-TTL
X-Varnish-Instance
X-VLoc
X-Config-By
X-ELB
X-MCF-ID
X-Sites
X-Node-ID
X-CPU-Time
X-Country
Cache-Status
D
Edgecast
X-Built-With
X-ImpID
Arrnode
X-Phpwcms-Page-Processed-In
X-Streams-Distribution
X-Backend-Host
X-Time-Zone
X-Phpwcms-Release
CD4
X-Script
X-Server-FQDN
Hostname
X-ServerAddr
X-UPServer
X-Meta-Imagetoolbar
X-UPSTREAM-Address
Aurora-Node
Accept-CH
Service-Worker-Allowed
X-Cjtype
X-FRUIT
X-HEAD
X-UUID
Generate-Time
X-Ezpublish-Nodeid
X-Ezpublish-Installationid
X-NodeID
X-Pass-Through
PB-PID
PB-RID
X-ManagedFusion-Rewriter-Version
X-Rewritten-By
EQ-Cache
X-NID
HostName
X-Pixelsilk-Server
Be
X-Route
X-Pixelsilk-Version
X-Checkout
X-Backend-Name
Ozcache
X-Time-Microsecs
Server-Tuning
X-Cache-ID
V-Age
User-Agent
Tesla.Performance
X-Built-By
X-Meta-MSSmartTagsPreventParsing
X-Test
X-Instance-Name
X-Meta-MSThemeCompatible
X-Old-Content-Length
X-Varnish-Debug-Age
X-Server-Addr
X-Gannett-Site-Version
X-Fstrz
MSSmartTagsPreventParsing
X-Server-Instance-Name
MSThemeCompatible
StatusCode
X-Cache-TTL-Current
X-Cache-TTL-Age
X-Varnish-Debug-TTL
AGI-Request-ID
X-Restarts
X-HS-Status
X-Status
X-SV
X-Amz-Meta-Version-Id
X-DynamicCache
X-Forwarded-By
X-DS1D
X-FIRSTBase
X-Dynamic-Cache
MwpReleaseVersion
X-AG-MIPS
X-Mobile-Rewrite
X-UT-Cache
Httpd-Identifier
X-Cache-Varnish
MageStack-Web-Node
X-Not-Cacheable
MageStack-Tag
MageStack-PageSpeed
X-Serendipity-InterfaceLang
X-Nginx-Request-Time
X-MainProfileName
X-MainProfileURL
Str-Bsite
MageStack-Magento-Version
MageStack-Loadbalancer
MageStack-Cacheable
MageStack-Cache-Status
MageStack-Cache-Lifetime
MageStack-Cache-Hits
X-WebNode
X-VC-Debug
X-Router-Backend
MageStack-Debug
MageStack-Config
X-MainProfileID
X-MainProfileCategory
X-V
XDisk
X-Uncacheable
X-Compressed-By
Fw-Cache-Status
X-Zendesk-User-Id
X-Webapp
Y-Trace
X-Zendesk-Origin-Server
Session-Id
Note
X-HP-CAM-COLOR
Str-Ip
X-LOCATION
Referer
X-Accel-Cache-Control
X-DevSrv-CMS
Provided-Host
X-Serendipity-InterfaceLangSource
X-Amcomm-Site
Resin-Trace
MageStack-Cache
X-Srcache-Store-Status
X-Made-On
AR-SID
X-Cacheable-TTL
X-Bip
X-AppServer-Cache-Rule
UrlWatchModule-Time
Lb
Webserver
AR-PoweredBy
X-Highwire-Sitecode
X-Proxy-Id
X-Srcache-Fetch-Status
AR-CACHE
X-CH-Device
X-Environment-Context
X-Powered-By-Home.Pl
X-Highwire-Smart-Code
X-FreeTag-Count
X-Fastly-Backend-Reqs
X-IP-Address
X-L-Path
X-Brought-To-You-By
X-Cache-Extended
X-Cluster
X-DeliveryServer
X-Box
X-Application
MageStack-Area
RequestId
X-Agent
X-Dynamic
X-Pageid
Content-Cache
DbServerName
FindLaw
Rewriter
X-UseReverse-Proxy
X-Upgrade-Enabled
AR-ATIME
X-Magento-Action
X-Sid
X-ENV
Serverid
X-COUNTRY-CODE
X-DEBUG
X-Beresp-Ttl
No-Cache
Progma
VC-NoCache
X-Obvious-Tid
X-Obvious-Info
Vserver
VAR-Cache
Tk
Tst
Section-Io-Cache
X-BeResp-Ttl
X-Cache-Action
Ez
X-Farm-Server
X-Imforza-Hosted
X-7d-Instance-Id
X-Tt-Dbg
X-AISO-Server
Upgrade-Insecure-Requests
X-Client-Ip
X-Config-Version
GranicusServer
X-AISO-Cacheable
X-ServiceProvider
X-7d-Trace-Id
Microcache
AliCDN-Forbidden-Reason
X-AISO-Cache
X-Via-NSCOPI
X-Csrf-Token
TTL
BM-Cache-Node
BM-Cache-Key
Actioncode
BM-Cache-Status
OutputRewritten
ServerNode
Realaction
X-XHTML-Minification-Powered-By
X-Test-Debug
X-Pubstack
X-Protected-By
X-Request-Processing-Time
X-Request-Received
X-TempoPesquisa
X-Server-App
SS
Www.Aujourdhui.Com
X-Varnish-Esi-Method
X-Varnish-Esi-Access
X-Varnish-Set-Cookie
X-Varnish-Store
WP-Cache
ERev-Ver
X-Varnish-Currency
X-Turpentine-Cache
X-Amz-Meta-S3b-Last-Modified
X-Allow-Redis
X-Ar-Debug
X-Cache-Served
X-Purge-Level
X-Max-Age
X-PoweredBy
X-Custom-Name
MachineName
!~Request-OOB-Work
X-LB-Frontend
Memento-Datetime
Powered-By-VeryCDN
X-Archive-Guessed-Charset
LB
X-LB-Backend
Expiries
Kp-EeAlive
Cookie
X-Hit
X-Node-Name
X-Wm-VIP
X-Wm-1
X-Archive-Orig-Connection
X-Archive-Orig-Content-Length
VANITY-HOST
Fastly-Restarts
X-Ants-Host
X-Ants-Machine-Id
X-BC
X-AWS
CDCHOST
X-WHO
X-Archive-Orig-Etag
X-Archive-Orig-Date
X-Archive-Orig-Server
X-Cache-Date
X-Theme
X-RequesterIP
Apple-Itunes-App
X-NewCloud-V-Cache
X-NewsFlow-Sitename
X-Dynatrace
X-Nginx-Page-Cache
X-Instance-Id
X-Faeria
X-Cache-V
X-PBS-Appsvrip
X-POPSUGAR-Server-Name
X-PBS-Fwsrvname
X-PBS-Appsvrname
Type
X-Catalyst
Container
X-Mobile-Device-Type
X-Mobile-Device
X-Vid
X-Tradeindia-SMgmt
X-Tradeindia-Request-GUID
X-FG-RequestId
X-Enhanced-By
X-Cache-FS-Status
Page-Template
ReqUrl
FrontEnd
X-SRV
ResourceTag
X-B3-Spanid
Load-Balancer
X-B3-Traceid
X-DDM-SERVER-UPDATED
X-DDM-SERVER
Kanooh-Host
IES-Server
X-SuperCache
X-Service-Id
DB-Nickname
X-MSU-SOURCE
X-Clx-Request
X-Fpc
Server-Id
Dynatrace
X-Wily-Servlet
X-Wily-Info
Public-Extension
X-9XB-Server
X-Sn-Servicetimems
SINA-TS
SINA-LB
X-Skip-Cache
X-Geo-IP
CDN-Cache
CDN-Cache-Hit
Phoenix-Cache
Phoenix-A
Phoenix-Cache-V
Phoenix-Mark
Phoenix-Proxy-Cache
EREV-Ver
X-Backend-TTL
X-APP
X-Vary-Options
X-ClusterID
X-Cache-Me-Harder
Proxy1
IsMobile
X-Memcached
X-IsCached
X-Server-Ident
X-Transaction-Name
Yola-ID
X-Czt
Copyright
Cleartype
X-Varnish-Mode
X-Varnish-Auto-Cache-Miss
X-WebKit-CSP-Report-Only
AMFplus-Ver
X-Varnish-Cache-Ttl
X-PROCESSED-BY
X-Obj-Ttl
X-Instart-Cache-Id
X-Ssl-Cipher
X-Front-Cache
X-RiS-PX
X-BIT-Node
CDN-Node
DeleGate-Ver
Https
X-ACache
X-Who
X-ZSITES-DNS
X-BServer
X-BPool-Fx-Cache
WFE
RSL-Trace-ID
X-Static
X-BPool-Bx-Cache
X-BPool-Back
Language
TheAnswer
X-AppVersion
X-BPool
CacheControlMode