Threat Level: green Handler on Duty: Jim Clausing

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
X-Cache
Strict-Transport-Security
X-AspNet-Version
CF-RAY
P3P
X-Pingback
Age
Content-Language
X-UA-Compatible
Via
Access-Control-Allow-Origin
X-Adblock-Key
Upgrade
X-Varnish
X-Cacheable
P3p
X-Check
X-Template
X-Language
Content-Security-Policy
X-Generator
X-Buckets
X-Drupal-Cache
X-Xss-Protection
X-Type
X-Cache-Group
X-Pass-Why
X-Request-Id
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Powered-By-Plesk
X-Cache-Hits
Content-Location
X-Runtime
X-Permitted-Cross-Domain-Policies
X-Download-Options
MS-Author-Via
Host-Header
Alt-Svc
X-ShopId
X-Sorting-Hat-Section
X-ShardId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PodId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId
X-Dc
X-Alternate-Cache-Key
X-IPLB-Instance
Cartoon
X-Request-ID
X-Powered-CMS
X-UA-Device
Status
X-Served-By
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Via
X-Amz-Cf-Id
X-Iinfo
X-Cache-Status
X-Backend
X-Contextid
X-Timer
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Wix-Server-Artifact-Id
X-ServedBy
X-PC-Hit
X-PC-Key
CF-Cache-Status
Powered-By
X-PC-AppVer
X-PC-Date
X-PC-Host
X-Mod-Pagespeed
X-DIS-Request-ID
X-Logged-In
X-Rid
Keep-Alive
Content-Encoding
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-Server
X-CDN
X-Cache-Hit
X-Host
X-Port
X-Tumblr-Pixel-1
X-CST
X-Server-Powered-By
X-Robots-Tag
X-Tumblr-Pixel-2
Referrer-Policy
X-Cache-Enabled
X-Pad
Expect-CT
WP-Super-Cache
X-Nginx-Cache-Status
X-Endurance-Cache-Level
Fastly-Debug-Digest
X-Accel-Version
X-Page-Speed
X-Turbo-Charged-By
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
X-Wix-PunisherID
X-Content-Powered-By
X-Tumblr-Pixel-3
X-Rack-Cache
X-Drupal-Dynamic-Cache
X-Content-Digest
X-Forwarded-For
X-Varnish-Cache
X-AH-Environment
X-FRAME-OPTIONS
X-Forwarded-Proto
Content-Security-Policy-Report-Only
X-Pantheon-Styx-Hostname
Surrogate-Key-Raw
X-Styx-Req-Id
X-Proxy-Cache
X-GitHub-Request-Id
SPRequestGuid
X-SharePointHealthScore
X-Cnection
MicrosoftSharePointTeamServices
X-Request-Country
X-MS-InvokeApp
X-XRDS-Location
X-LiteSpeed-Cache
X-Cache-Lookup
X-Original-Date
Edge-Control
Cf-Railgun
X-Safe-Firewall
Timing-Allow-Origin
X-FullPageCaching
X-Amz-Id-2
X-Amz-Request-Id
MicrosoftOfficeWebServer
X-Webserver
Request-Id
X-Died
Charset
X-PhApp
X-FW-Hash
X-Node
X-FW-Serve
X-FW-Static
X-FW-Type
Edge-Cache-Tag
SPIisLatency
X-INKT-SITE
SPRequestDuration
X-INKT-URI
X-HS-Cache-Config
X-Tumblr-Pixel-4
X-HS-Content-Id
X-Content-Security-Policy
Composed-By
X-Hits
Access-Control-Max-Age
Content-MD5
X-CF-Powered-By
Liferay-Portal
X-Swift-CacheTime
X-Swift-SaveTime
Grace
Served-By
EagleId
X-Hyper-Cache
X-VWS-Id
X-LJ-Flow-ID
X-AWS-Id
Access-Control-Expose-Headers
X-CDN-Pop
X-CDN-Pop-IP
X-Spip-Cache
X-BC-Stapler
Rating
Request-Context
X-Backend-Server
X-Device
X-Server-Name
X-Fastly-Request-ID
X-Microcache
X-Dw-Request-Base-Id
X-Newrelic-App-Data
X-Tumblr-Content-Rating
X-Firenze-Processing-Times
Refresh
X-Microcachable
X-RateLimit-Remaining
X-SERVER
X-RateLimit-Limit
X-RateLimit-Reset
X-VCache
X-Jimdo-Instance
X-Jimdo-Wid
X-User-Agent
Content-Style-Type
X-ServerName
X-FB-Debug
Content-Script-Type
X-Clacks-Overhead
X-Cloud-Trace-Context
X-Cache-Config
X-Loop
Real-Hostname
Public-Key-Pins
X-TNCMS
X-DDC-Arch-Trace
X-Acc-Exp
Front-End-Https
Surrogate-Control
Xkey
X-XN-XNHTML
X-XN-Trace-Token
X-Hostname
X-Age
Fpc-Cache-Id
X-Aspnetmvc-Version
X-Tumblr-Pixel-5
X-Generated-By
X-N-OperationId
PageSpeed
X-Px
X-Middleton-Response
X-Sol
X-Middleton-Display
Response
Display
X-Cached
X-DNS-Prefetch-Control
X-SS-Conf
X-SS-Location
X-LiteSpeed-Cache-Control
X-MiniProfiler-Ids
X-Url
X-WebKit-CSP
X-Request-Time
X-Topify-Platform
X-StackifyID
X-Cached-By
Surrogate-Key
X-Zen-Fury
X-CMS-Version
X-Content-Options
X-Outils-CS
Rt-Fastcgi-Cache
X-Servedby
X-URL
X-Pantheon-Environment
X-Pantheon-Site
X-Pantheon-Phpreq
X-Whom
TCN
Edge-Control-Message
X-OneAgent-JS-Injection
X-FORWARDED-FOR
X-HOST
X-Handled-By
X-Amz-Version-Id
X-Varnish-TTL
X-Correlation-Id
X-Umbraco-Version
X-Ruxit-JS-Agent
X-PERF
X-Varnish-Cache-Hits
X-AspNetWebPages-Version
X-ApacheServer
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Product
Access-Control-Request-Method
X-Engine
X-DynaTrace-JS-Agent
Imagetoolbar
X-DynaTrace
Alternate-Protocol
Host
X-Cache-Rule
ServedBy
X-Kinsta-Cache
Fhost
X-Powered-By-360WZB
P-LB
WZWS-RAY
P-WS
Powered
X-Micro-Cache
X-Edge-Location
X-Magento-Tags
DynaTrace
Generator
X-NWS-LOG-UUID
X-Location-Id
X-From
X-Hosted-By
X-Msg-2-Log
X-Recruiting
X-Track
X-CacheServer
X-Goog-Hash
X-Tumblr-Pixel-6
X-Developer
Arr-Disable-Session-Affinity
X-VTEX-Janus-Router-Backend-App
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Processed-At
X-Vtex-Remote-Cache
No
X-Vtex-Processado-Em
Origin
Fastcgi-Cache
X-B-Cache
X-LBLID
X-VARNISH-Cache
X-I-Sp
X-BS
X-Actual-URL
X-Response-Time
X-Returned-From-DLL
X-Passed-To
X-Original-Request
X-Passed-To-DLL
X-Returned-From
X-Shop-Id
X-Defender
X-Application-Context
X-Cache-Age
X-RESOURCE
X-Powered-By-VTEX-Janus-Edge
X-URLSCHEME
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-Passed-To-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Stale
X-Fastcgi-Cache
Akamai-IP
X-Varnish-Host
X-App-Hosting
X-Source
X-Instart-Request-ID
X-Upstream
X-Internal-ReqID
X-Platform-Router
X-Platform-Cluster
X-Platform-Processor
X-Cache-TTL
X-LB
X-TransIP-Balancer
X-UD-Method
X-Akamai-Transformed
X-Matrix-Server
X-Matrix-Proxy
X-Cache-Info
Dmn
X-Storage
X-Cdn
X-Accel-Expires
Content-Hash
X-NetCat-Version
X-HS-Content-Campaign-Id
X-Varnish-HitMiss
Version
X-Origin
X-Device-Type
X-Varnish-Count
Powered-By-ChinaCache
X-S
X-Varnish-Cacheable
Ohc-File-Size
X-I
X-Expires-Orig
USPLoggingUUID
X-Cache-Debug
X-Revision
X-Cache-Key
X-Powered-By-VelaWeb
X-Gamma-Serve
X-Cache-Operation
X-Front
X-Version
X-TransIP-Backend
IBM-Web2-Location
X-Varnish-ObjectSource
X-Varnish-Seen-By
Pool
X-Varnish-RemainingLife
X-Varnish-GracePeriod
X-Varnish-RemainingTTL
X-Cache-Tags
X-Dispatcher
X-Rocket-Nginx-Bypass
WPE-Backend
X-Content-Encoded-By
X-VTEX-Cache-Status-Janus-Edge
X-Server-Upstream
Public-Key-Pins-Report-Only
X-Platform
X-LB-Node
MIME-Version
X-Translation
X-Microcache-Status
HTTPS
Last-Published
Content-Disposition
X-EdgeConnect-Origin-MEX-Latency
X-Daa-Tunnel
X-Signature
X-Supported-By
X-SSL-Protocol
X-Debug-Info
X-Route-Server
X-UPSTREAM
X-Dispatch
X-NoCache
X-SSL-Cipher
Srv
X-Cache-Lifetime
X-Sapient
X-NewRelic-App-Data
X-Varnish-Age
X-Vcap-Request-Id
X-Varnish-Backend
X-Art-Request-Id
X-ATG-Version
X-Page-Cache
X-Platform-Cache
X-EdgeConnect-MidMile-RTT
X-Director
X-Hypernode
ServerName
X-Cf-Powered-By
Page-Completion-Status
X-AOL-HN
X-Cache-Only-Varnish
X-Server-ID
X-Firenze-Processing-Time
Proxy-Connection
SSPAppContext
X-Cache-Control-Orig
X-Server-Id
X-Platform-Server
X-Last-Modified
ServerID
X-SV-Duration
X-SV-Expires
FAI-W-FLOW
X-Duration
X-SV-Nginx-Duration
X-SV-Pid
Cache-Tag
X-SV-Edge
X-SV-FromDBCache
X-SV-CreatedAt
X-SV-CacheTags
X-SV-Cacheable
Node
X-TTL
X-Debug
X-SDS
X-Url-Base
WSR-Cache
X-Flow-Powered
X-Geo-Country
X-Abgroup
Cache-Key
X-Abuse
X-PwB-Node
X-Edge-IP
X-Cookie-Domain
X-Country-Code
X-Magento-Cache-Debug
Allow
X-ServerID
X-F-Cache
X-Client-IP
Accept-Encoding
X-Grace
SN
Lsrequestid
X-CJ-Soft
Cneonction
Edge-Content-Tag
X-ORACLE-DMS-ECID
X-LW-Cache
Author
X-Cache-CFC
X-Dns-Prefetch-Control
X-GeoIP-Country-Code
X-Cache-Server
X-RequestId
IM-Version
X-Speed-Cache
X-Cache-Expires
X-Speed-Cache-Key
X-FW
X-Purge-URL
X-Nbs
X-GeoIP-Country-Name
If-Modified-Since
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-GUploader-UploadID
Content-Encoding-Handler
X-Amz-Meta-S3cmd-Attrs
X-Frontend
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
NnCoection
X-Proxy
X-BackendServer
X-Id
X-DealerOn
X-IsCacheURL
PICS-Label
X-SERVER-NAME
X-ARC
Location
AMF-Ver
X-Loopia-Node
Pv
X-Akamai-Device-Characteristics
X-CDN-Cache-Status
X-Orig-Vary
X-CDN-Node
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Purge-Host
X-Real-Server
X-Lambda-Id
Fw-Via
X-Varnish-IP
X-Time
X-Config-Blacklist-Version
X-Content-Age
X-Processing-Time
X-Sucuri-ID
A-Powered-By
Cache-Provider
S-Cnection
X-NB-Cached-Page
X-Ttl
X-Middleware-Start
X-Vhost
Section-Io-Id
Cteonnt-Length
X-Cache-Handler
X-Processed-By
Backend
Cached
X-Discourse-Route
X-SE-Debug
X-Sucuri-Cache
X-Cache-Type
X-Varnish-Url
Qs-Cache
X-Nginx-Cache
Req-Id
X-N
X-Healthy
NetMindSessionID
Cache
Frame-Options
S
Use-Proxy
X-Akamai-Device-Model
X-SRCache-Key
X-Cache-Level
X-Pressidium-NinukisWP-Ver
X-TB-M
Access-Control-Allow-Header
Nitro-Cache
X-PF-Uncompressing
X-Browser
Accept-Charset
X-Shield-Request-Id
X-Generated
CacheControlHeader
X-Yadis-Location
Server-Info
X-Empowered-By
X-Cache-Engine
RTSS
X-Cache-Control
X-Framework
SEOMOZ
Retry-After
MJ12bot
X-Content-Type-Option
X-Mobilized-By
X-BKSrc
Xc-Version
Nodo
X-Worker
X-Trace
X-SO
SVR
NODE
X-Always-Cache
Tracecode
X-Cache-PageType
X-Cache-Fix
X-Magnolia-Registration
X-ClientSide-Caching
Local-Info
MC
X-WR-Flags
X-CDN-Forward
X-CB-Server
X-Hiawatha-Cache
X-VC-TTL
HitType
X-Unique-ID
X-Connection-Hash
X-Drupal-Cache-Tags
X-Amz-Storage-Class
BALANCEDTO
X-Cache-TTL-Remaining
EagleEye-TraceId
X-JG-Page-Cache
WWW-Authenticate
X-Twitter-Response-Tags
X-Varnish-Hits
X-Transaction
Identity
Content-Transfer-Encoding
X-Content-Security-Policy-Report-Only
X-Symfony-Cache
X-ID
Front
X-Adobe-Content
X-Powered-By-Server
X-Varnish-Server
Thanks
Keywords
X-Adobe-Loc
X-Magento-Cache-Control
X-Srv
From-Origin
X-HP-Trace-Project
X-HP-Trace-ID
HCVer
HAVer
X-LB-Server
Cm-Server
X-Hit-Cache
X-Pagename
X-Runtime-Memory
Eomportal-Instance
X-Cache-Doesi
X-Varnish-Ttl
X-Environment
X-Drectory-Script
X-Route-To
X-VC-Enabled
X-Traffic
RATING
Server-Name
X-Resty-Request-Id
ServerTokens
X-Sys-Req-ID
X-Session-Reinit
X-Server-IP
X-Site-Name
X-Varnish-ID
ServerSignature
X-Cache-Device-Type
Ufe-Result
X-OPNET-Transaction-Trace
X-LW-Web-Server
X-Fedora-School-Id
Description
SRV
X-ACMCache
X-Directory-Script
X-Static
Fastly-Backend-Name
Buuteeq-Source
Ctx
X-TTFB
X-Disney-Akamai-Rule
X-NginX-Cache
NtCoent-Length
X-SmugMug-Hiring
Smug-CDN
X-TTFB-L
X-SmugMug-Values
X-RiS-UFDI
SBGI-RealPath
Content_type
SBGI-Device
SBGI-9
SBGI-RenderTime
X-App-Server
Magicmarker
Disablevcache
X-CAPServer
Max-Age
SBGI-7
X-CF-Passed-Proto
X-AF-Userserver
X-Cache-Dispatchercachecontrol
X-Cache-Dispatcherpragma
SBGI-1
SBGI-10
X-Varnish-Retries
X-High-Performance
SBGI-5
X-HydroSheep
X-FireWall-Port
X-FORWARDED-PROTO
CLMOB
X-Amz-Meta-Cb-Modifiedtime
X-Location
X-A
Pics-Label
X-LP
X-Cocoon-Version
X-Generated-Time
X-Remote-Addr
X-Varnish-Hostname
X-ARRServer
X-Frame-Option
X-Cache-Node
AsisCache
X-HW
X-OpenCart-Lightning
X-Key
X-Env
X-Nginx-Host
Response-Time
X-App-Status
X-Client-Image-Vid
X-Client-Vid
X-EPiphany-Vid
X-NginX-Server
X-Webcelerate
IISExport
X-Cache-Source
X-Cache-Provider
X-ORACLE-DMS-RID
X-Debug-Token
Machine
X-GeoIP
X-Balanceador
Yoncu-Errno
X-WHOIS-Cached
X-Runtime-Rack
X-ETag
X-Cache-Detail
X-Jphone-Copyright
AC-ELC
X-Author
RN-Server
X-Mobile-URL
X-Smartcache-Timeout
Dis-Env
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Dynatrace-Js-Agent
X-Smartcache-Keys
X-Distributor
X-WP
X-Unbounce-PageId
X-Domain-Checked
X-Served-Server
X-Provisioner-Version
X-Server-Instance
X-E
X-WN-ClientGroup
Og
X-Backend-Status
WN
X-Blog
X-Garden-Version
X-Varnish-Debug-Age
X-Middleton-PageSpeed
Home
X-Unbounce-VisitorID
X-Unbounce-Variant
X-Cached-Status
X-Page
X-Varnish-Debug-TTL
ScoreTracker
Provider
X-UA
X-PageType
X-Session-ID
X-App
From
X-ServerIndex
X-Esi
Web-App-Origin-Name
X-WR-MODIFICATION
Strikingly-Cached-Version
Strikingly-Cached
Strikingly-Cache-Region
X-VARITI-CCR
X-Goog-Meta-Policy
X-Goog-Meta-Replace
X-DataDome
Backend-Timing
X-Analytics
X-AEM
X-Drupal-Cache-Contexts
XDomainRequestAllowed
SS
Hname
X-Atraveo-Zone
Cmsid
X-Wikidot-Backend
X-Desc
X-Atraveo-Cache-Control
X-Wikidot-Static-Cache
DNNOutputCache
X-Atraveo-Expires
X-Atraveo-From-Varnish-Cache
X-Info
X-Atraveo-ETag
X-Site
Paypal-Debug-Id
Sophnep-Edge-FX
X-Rq
X-Machine
SG
X-Rocket-Nginx-Serving-Static
X-Grid-Server
X-MSEdge-Ref
X-Captured
X-SH-Cache-Status
CommunityServer
X-Proto
X-Time-Microsecs
X-Cache-On
X-Source-ID
X-Actindo-RS
X-RDP
X-Cache-Keep
Cmstype
X-Rebelmouse-Surrogate-Control
Bios
Dispatcher
X-HP-Redirect
X-Atraveo-Set-Cookie
X-MAT-GEO
X-Atraveo-TTL
X-L-Path
X-Force
X-Atraveo-Varnish-Server-Id
X-Rewrite
X-PRAM
X-Machine-Name
X-Application
X-Rebelmouse-Cache-Control
NLCacheNote
X-Atraveo-Param-Rm
X-GSL-Server
X-Environment-Context
X-Resolver-IP
X-Cdn-Forward
X-SDE-Name
X-Detected-Device
Device
Ttl
X-PM-ID
X-Render-Time
X-Map-Context
X-App-Runtime
X-Ser
X-CacheResult
MW-Webserver
X-Autoru-Host
X-Correlation-ID
X-AutoRu-App-Id
X-Hosting-Env
Resin-Trace
X-Culture
X-Rack-Cors
Xc
X-Runtime-Affili
X-Req-Head-Response
VServer
X-Autoru-LB
X-Cluster-Node
X-Trace-Id
Content-Server
X-Airee-Node
Cluster-ID
X-Magento-Action
ViewMode
X-RemovedCookies
W
X-Amcomm-Site
X-Amz-Id-1
N365rili
Ibf5scheme
X-Sc-Cache
X-Config-By
X-Response
X-Webapp
X-Pageid
X-ProcessESI
X-CRA-DC
X-Proxy-Cache-Key
X-Viator-Tapersistentcookie
X-Cache-TTL-Current
X-KoobooCMS-Version
X-Dev
X-Cms-Mode
Worker
X-Ghost-Cache-Status
X-FRUIT
TC-S-Cache
TC-S-Cache-M
X-Cache-TTL-Age
X-Frames-Options
X-Clara-ASAP
X-IIJ-Cache
X-AISO-Cacheable
X-AISO-Server
Id
Server-Ip
X-AISO-Cache
VANITY-HOST
X-Ezoic-Cdn
X-Batcache
Beyond-Iis
TC-Cache-U
X-ASAP-Cache
X-Cache-Warmer
TC-Cache-IC
X-Plat
TC-Cache
X-Optimization
BackendServer
X-Varnish-Action
X-Lb
X-ENV
X-Stage
X-Header
X-Resource
X-Nginx
X-We-Are-Hiring
X-Hrouter
X-This-Proto
X-Rack-CORS
X-Varnish-Info
X-Old-Content-Length
X-Dw-Trace-Id
X-Oracle-DMS-ECID
X-Bcwwwid
X-EC2-Instance-Id
X-Batcache-Reason
X-ACCELERATE
X-Hstore
Nginx-Cache
X-Refresh
X-7d-Trace-Id
Tempo
Web
X-7d-Instance-Id
X-Node-Name
Set-Cookie2
X-HashTwo
WP-AdvCache-MemCached
X-HTML-Minification-Powered-By
OriginServer
X-Highwire-RequestId
X-Powered-By-Home.Pl
Lb
X-Highwire-SessionId
X-V
X-Hosting
AccessControlAllowOrigin
X-Data-Request
Proxy-Cache
X-Unique-Id
Access-Control-Request-Headers
NCache
Gzip
X-RealServer
Server-ID
ClientIP
X-Catalyst
F5-IpCliente
X-Fstrz
Session-From
X-Avvio-Cms-Cacheload
X-MidCOM-Meta-Cache
X-HA-Backend
X-HA-Frontend
X-Forwarded-Host
Il-Cl
X-SmartBan-URL
ServerIP
X-DTC
X-Adnet
X-Varnish-Cache-Local
X-SmartBan-Host
X-WebKit-CSP-Report-Only
X-CDN-RULE
X-Zendesk-Origin-Server
X-W3TC-Minify
FastCGI-Cache-Status
X-Secret
Expect-Ct
X-Reflector
X-CDN-COMPRESS
X-Depends
Note
X-Zendesk-User-Id
X-RAMCache
X-Reflector-Cache
X-Cacheable-TTL
NS-VaryByCustom-Key
RequestId
X-Cache-Via
X-Src-Webcache
X-Server-Addr
X-SV
StatusCode
SBMCLOUD
X-MCB-Server
X-HAProxy
X-APP
X-CACHE-TTL
SERVER-ID
PagesDisplayed
X-DB-Content-Length
X-Nginx-Request-Time
X-ReqId
X-DN-Cache-Control
X-Cache-Varnish
X-Farm-Server
X-Time-Zone
X-Server-FQDN
X-S-Misc
X-ServiceProvider
X-DSMX-Render-MS
X-Built-With
X-Uncacheable
X-B2f-Not-Route
X-Apm-Telemetry-Syncmark
X-Amz-Meta-Content-Md5
Debug-Status
AMFplus-Ver
X-LOCATION
Cache-Status
X-ACLR-Version
X-Varnish-Instance
X-VLoc
Accept-Language
X-CCM
X-Gyrobase-Publication
X-SCM-Server-Number
X-Compressed-By
Progma
X-Test
X-Wm-VIP
X-Artvisual-Server
X-Wm-1
X-Beresp-Ttl
X-Cache-Time
X-EC-Security-Audit
SiteSpeed
X-Distil-CS
X-Server-Generated
X-Obj.Ttl
Traffic-Origin
X-Meta-MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
X-Streams-Distribution
X-DevSrv-CMS
Ews
X-Pagely-Cache
X-Node-ID
X-CacheID
X-DSMX-Rewrite-MS
VAR-Cache
Url
X-Meta-Imagetoolbar
X-Upstream-Backend
MSThemeCompatible
Myheader
MSSmartTagsPreventParsing
X-M
X-XHR-Current-Location
X-Front-Cache
X-Search-Id
X-Origin-Server
X-REDIRECTSERVER
X-IP-Address
COMMERCE-SERVER-SOFTWARE
X-JSESSIONID
X-Sid
X-SilverStripe-Cache
X-Upgrade-Enabled
Content-Cache
X-Box
X-VC-Debug
X-Cache-FS-Status
X-Flex-Lastmod
XDisk
X-Proxy-Id
X-Webstats-RespID
X-DeliveryServer
X-Router
X-Dynamic
X-DEBUG
X-Cache-Extended
X-Brought-To-You-By
X-Router-Backend
X-RiS-PX
X-Tradeindia-Request-GUID
X-PHP-Response-Code
X-UseReverse-Proxy
X-Flex-Tag
X-Flex-Tags
X-Provided-By
X-Tradeindia-SMgmt
PServer
DbServerName
X-Flex-Lang
SB-Cache-Remaining
SB-Cache-Life
X-PBS-Appsvrip
SB-Site-Device
SB-Site-IE-VERSION
X-Amzn-RequestId
X-Amzn-Trace-Id
X-AppServer-Cache-Rule
X-Country
RSL-Trace-ID
X-Generation-Time
NZSpeedy
Provided-Host
X-ELB
X-Flex-Community
X-D-Time
X-Flex-Evend
X-CH-Device
X-Session-Id
Rewriter
WFE
SINA-LB
X-CACHE-KEY
X-Cache-Bypass
FindLaw
X-Flex-Evstart
Webserver
X-PBS-Fwsrvname
X-PBS-Appsvrname
Session-Id
SINA-TS
UrlWatchModule-Time
X-HostName
X-Ocache
X-IP
X-Nocache
X-Lima-Id
X-Webkit-CSP
X-Pixelsilk-Version
X-Dynamic-Cache
X-Cache-HT
X-Cache-BE
X-Tag-Playlist
Cleartype
X-ChromeLogger-Data
X-LBPoolMember
Swift-Performance
X-Pixelsilk-Server
X-Turpentine-Esi
X-4ormat-Cacheable
X-PBY
MS-CV
Warning
INFO
X-Deity
X-Debug-Message
X-Custom-Header
X-Made-On
X-Rocket-Nginx-Reason
X-Served
AMP-Access-Control-Allow-Source-Origin
X-Cache-Id
X-Cname-TryFiles
X-Route
RSB-LINK
ENV
X-Header-Treatment
!~Request-OOB-Work
X-UPSTREAM-Address
X-Beatles
Access-Control-Allow-Method
X-Real-IP
X-Svr
X-HP-CAM-COLOR
PLCDN
X-Server-Instance-Name
X-Config-Version
No-Cache
Apple-Itunes-App
X-Not-Cacheable
X-NewsFlow-Sitename
X-MainProfileCategory
X-Faeria
X-MainProfileID
X-MainProfileName
X-MainProfileURL
X-9XB-Server
X-Gannett-Site-Version
Countrycode
X-WPL-DATA
Head
X-CO-Host
X-Nginx-Page-Cache
X-CM-FE
X-Aramark-SID
DrivedBy
X-GoCache-CacheStatus
Accept-CH
Server-Id
X-Agent
TP-L2-Cache
MageStack-Debug
MageStack-Config
MageStack-Loadbalancer
MageStack-Magento-Version
MageStack-PageSpeed
MageStack-Cacheable
MageStack-Cache-Status
MageStack-Area
MageStack-Cache
MageStack-Cache-Hits
MageStack-Cache-Lifetime
MageStack-Tag
MageStack-Web-Node
X-Title
X-NewCloud-V-Cache
X-WebNode
SHInfo
TP-Cache
X-Layout
X-Goog-Meta-Goog-Reserved-File-Mtime
X-App-Version
X-Backend-TTL
X-Cache-Me-Harder
X-Cms-Server
Brightspot-Id
X-Phpwcms-Release
X-Backend-Host
Httpd-Identifier
X-DS1D
X-Rewritten-By
X-Instance-Name
Ibm-Web2-Location
Expiries
X-Test-Debug
Cache-Tags
X-Phpwcms-Page-Processed-In
X-XHTML-Minification-Powered-By
X-Who
X-Varnish-Cached-TTL
X-Varnish-Cached
X-Webkit-Csp
Actual-Object-TTL
CDCHOST
Aurora-Node
Edgecast
X-Ss-Conf
X-AMAZEEIO
X-AWS
X-FIRSTBase
X-WA-Info
X-Enhanced-By
X-CSRF-Token
X-Nginx-Request-Processing-Time
X-Pubstack
X-ManagedFusion-Rewriter-Version
X-RequesterIP
X-AppVersion
X-MCF-ID
X-NID
X-FreeTag-Count
X-Count
GP-Remote-Addr
GP-Version
X-Ss-Location
X-Obj-Ttl
X-HASH
X-OCTOPOD
X-Origin-Cache
FrontEnd
X-Container
X-Serendipity-InterfaceLang
X-Serendipity-InterfaceLangSource
X-Fpc
X-DDM-SERVER
D
WebServer
Kanooh-Host
Kp-EeAlive
X-UnsetCookies
X-Backend-Name
X-NodeID
X-DDM-SERVER-UPDATED
Fw-Cache-Status
X-Cjtype
X-SuperCache
X-COUNTRY-CODE
X-Varnish-URL
X-C2M-Server
X-C2M-Runtime
X-Webkit-CSP-Report-Only
X-Ssl-Cipher
X-Litespeed-Cache-Control
X-Protected-By
X-BServer
X-NMT-Proxy
X-BPool-Fx-Cache
X-BPool-Back
X-Ants-Machine-Id
X-BC
X-BPool
CpuTime
X-BPool-Bx-Cache
V-Age
Contao-Page-Layout
EQ-Cache
HostName
Microcache
Be
Aoestatic
X-Ants-Host
X-Varnish-Max-Age
X-Cluster
X-Prerendered
X-Varnish-Set-Cookie
TheAnswer
X-Ezpublish-Installationid
X-Ezpublish-Nodeid
X-FPC
X-Ec-Custom-Error
X-ESI
WSCLoggingUUID
Content-Generator
DB-Nickname
Content-Legth
Tk
X-Highwire-Sitecode
X-Highwire-Smart-Code
X-SVR
X-Theme
X-No-Session
Language
X-PROCESSED-BY
X-Pass-Through
X-Obvious-Info
X-Obvious-Tid
X-Varnish-Store
Upgrade-Insecure-Requests
X-Cache-ID
E-TAG
Lookup-Cache-Hit
X-Client-Ip
X-Geo-IP
X-Stiffia-Cache
X-SRV
Server-Tuning
Session
X-Instance-Id
X-Netrix-ID
X-Skip-Cache
X-Tt-Dbg
Vserver
X-Turpentine-Cache
Type
X-Cache-V
Serverid
X-Varnish-Currency
CD4
X-PG
X-Varnish-VCL
X-FastCGI-Cache
Resource
ReqUrl
IsMobile
Tesla.Performance
User-Cache-Control
X-ASAP-Age
Generate-Time
X-Varnish-Debug-Hits
X-Generated-Date
X-HEAD
X-Magento-Lifetime
X-Support
X-Varnish-Esi-Method
X-DynamicCache
X-Build-Id
X-Cachable
X-Pool-Info
X-Transaction-Name
X-Varnish-Esi-Access
X-VNode
X-Serverid
X-UT-Cache
X-Vary-Options
WP-Cache
X-FG-RequestId
MwpReleaseVersion
X-Czt
X-FCMS-Cache
Debug-Expires
X-AG-MIPS
X-Request-Received
Prototype-RootPath
X-Accel-Cache-Control
X-Request-Processing-Time
GranicusServer
Debug-Cache-Control
X-HS-Status
Yola-ID
X-Restarts
AR-CACHE
X-BeResp-Ttl
X-ZORequestID
AR-PoweredBy
Container
AGI-Request-ID
X-Op-Benvironment
AR-SID
X-Forwarded-By
ProxiaInstanceId
X-Archive-Guessed-Charset
0
X-Archive-Orig-ETag
X-Archive-Orig-Server
X-SCProxy
X-Archive-Orig-Connection
X-Archive-Orig-Date
X-Pj-Cache-Status
X-Processed
X-Archive-Orig-Content-Length
Copyright
Server-Node
X-Cache-LB
X-Amz-Meta-Version-Id
X-Vol-Mrp
X-Vol-Correlation
X-Content-Parsed-By
X-Csrf-Token
X-Built-By
Memento-Datetime
EXT-CACHEEXPIRE
X-Cache-Action
AR-ATIME
X-Debug-Serve
ResourceTag
Public-Extension
X-Auto-Login
X-Jcms-Ajax-Id
Url-Hash
X-Beatles-Hits
X-Cache-Served
CD1
X-Debug-Out
X-Hash
X-Diazo-Applied
M
Rlogid
X-EBAY-C-REQUEST-ID
X-Imforza-Hosted
B-Rlogid
X-UPServer
X-EC-Custom-Error
X-Script
X-ServerAddr
X-Cache-Set
X-Ar-Debug
Hosted-By
VC-NoCache
X-TTL-Age
X-UUID
X-Would-Your-GrandPa-Wait
X-Your-GrandPa-Would-Wait
X-W-Cache
X-W-Cache-Hits
X-Server-App
Ez
X-Sn-Servicetimems
OutputRewritten
X-Enabled2
X-Enabled1
X-Does-He-Have-Time
Www.Aujourdhui.Com
X-B3-Spanid
X-B3-Traceid
ServerNode
X-Enabled3
X-CPU-Time
X-Max-Age