Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
P3P
X-AspNet-Version
Age
X-Pingback
Content-Language
Via
X-UA-Compatible
Expect-CT
Access-Control-Allow-Origin
Upgrade
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Check
X-Template
X-Language
X-Varnish
X-Xss-Protection
X-Generator
X-Buckets
X-Request-Id
Alt-Svc
X-Drupal-Cache
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
Content-Location
X-Powered-By-Plesk
X-Permitted-Cross-Domain-Policies
X-Download-Options
Host-Header
X-Runtime
X-ShopId
Cartoon
MS-Author-Via
X-ShardId
X-Dc
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Sorting-Hat-Section
X-Alternate-Cache-Key
X-FRAME-OPTIONS
X-IPLB-Instance
X-Powered-CMS
X-UA-Device
X-Served-By
X-Amz-Cf-Id
Access-Control-Allow-Headers
Status
Access-Control-Allow-Credentials
Access-Control-Allow-Methods
X-Cache-Status
X-Via
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
CF-Cache-Status
X-Backend
Referrer-Policy
X-Contextid
X-CST
X-DIS-Request-ID
X-PC-Key
X-PC-Hit
Powered-By
X-Mod-Pagespeed
Content-Encoding
X-PC-AppVer
X-PC-Date
X-PC-Host
X-WPE-Loopback-Upstream-Addr
X-ServedBy
X-Logged-In
X-Cache-Hit
Keep-Alive
X-Server
X-Port
X-Host
X-Request-ID
X-Rid
X-CDN
P3p
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-Cache-Enabled
X-Server-Powered-By
X-Tumblr-Pixel-1
X-Endurance-Cache-Level
X-Seen-By
X-Wix-Request-Id
X-Wix-Server-Artifact-Id
X-Robots-Tag
X-Nginx-Cache-Status
X-Turbo-Charged-By
X-Accel-Version
X-Tumblr-Pixel-2
X-Page-Speed
X-Original-Date
X-Drupal-Dynamic-Cache
X-Pad
X-Content-Powered-By
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
Content-Security-Policy-Report-Only
X-Proxy-Cache
X-Content-Digest
WP-Super-Cache
X-Rack-Cache
X-Died
X-AH-Environment
X-GitHub-Request-Id
X-Varnish-Cache
X-Tumblr-Pixel-3
X-LiteSpeed-Cache
X-Ua-Compatible
Edge-Control
SPRequestGuid
X-XRDS-Location
X-SharePointHealthScore
X-Request-Country
X-MS-InvokeApp
X-Cnection
MicrosoftSharePointTeamServices
X-Cache-Lookup
X-Node
X-Trace
Timing-Allow-Origin
X-Amz-Id-2
X-Amz-Request-Id
X-FW-Hash
Cf-Railgun
Charset
Edge-Cache-Tag
X-FW-Serve
X-FW-Static
X-FW-Type
X-HS-Cache-Config
X-HS-Content-Id
Request-Id
X-Webcom-Cache-Status
X-Webserver
X-Content-Security-Policy
X-CF-Powered-By
X-FullPageCaching
X-Safe-Firewall
MicrosoftOfficeWebServer
X-Hits
X-PhApp
SPIisLatency
SPRequestDuration
X-INKT-SITE
X-INKT-URI
X-PHP-Backend
Request-Context
X-Wix-Renderer-Server
Access-Control-Max-Age
Composed-By
X-Newrelic-App-Data
X-BC-Stapler
Access-Control-Expose-Headers
X-Swift-CacheTime
X-Swift-SaveTime
EagleId
X-CDN-Pop-IP
X-CDN-Pop
Grace
Served-By
X-Spip-Cache
Liferay-Portal
X-Tumblr-Pixel-4
X-Hyper-Cache
X-Backend-Server
X-Dw-Request-Base-Id
X-Device
X-Fastly-Request-ID
X-SERVER
X-Server-Name
X-Microcache
X-LiteSpeed-Cache-Control
X-ServerName
X-VCache
Rating
X-Cloud-Trace-Context
Public-Key-Pins
X-FB-Debug
X-Clacks-Overhead
Content-Style-Type
X-RateLimit-Remaining
Content-Script-Type
X-Firenze-Processing-Times
X-Servedby
X-RateLimit-Limit
X-Acc-Exp
Front-End-Https
X-RateLimit-Reset
X-User-Agent
X-DDC-Arch-Trace
Surrogate-Control
X-Loop
X-Jimdo-Wid
Real-Hostname
X-TNCMS
X-Jimdo-Instance
Refresh
Xkey
X-Cache-Config
X-Middleton-Response
X-Middleton-Display
X-Sol
Display
Response
X-Microcachable
X-HS-Combine-CSS
Fpc-Cache-Id
X-SS-Location
X-SS-Conf
X-XN-XNHTML
X-Tumblr-Content-Rating
X-XN-Trace-Token
X-StackifyID
X-Age
X-Hostname
X-DNS-Prefetch-Control
X-Cached
X-Generated-By
X-Zen-Fury
X-N-OperationId
X-Px
X-Cdn
X-OneAgent-JS-Injection
X-Vtex-Processado-Em
X-Tumblr-Pixel-5
X-Topify-Platform
X-Amz-Version-Id
X-Cached-By
X-Correlation-Id
PageSpeed
X-MiniProfiler-Ids
X-Request-Time
X-Whom
Surrogate-Key
TCN
X-WebKit-CSP
P-WS
P-LB
X-Frame-Option
X-Url
X-Ruxit-JS-Agent
X-Magento-Tags
Product
X-CMS-Version
X-Content-Options
X-DynaTrace-JS-Agent
X-Kinsta-Cache
Edge-Control-Message
Rt-Fastcgi-Cache
X-URL
X-Handled-By
X-Outils-CS
X-B-Cache
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Via-JSL
X-Forwarded-For
X-Varnish-TTL
X-DynaTrace
X-AspNetWebPages-Version
X-VARNISH-Cache
Access-Control-Request-Method
Host
X-Recruiting
X-Edge-Location
Powered
X-Varnish-Cache-Hits
X-Engine
Fastly-Debug-Digest
X-FORWARDED-FOR
Imagetoolbar
X-Umbraco-Version
X-CacheServer
X-Cache-Rule
ServedBy
X-Track
Alternate-Protocol
X-HOST
X-NWS-LOG-UUID
X-Application-Context
X-PERF
X-Vtex-Processed-At
X-Powered-By-VTEX-Janus-ApiCache
No
X-ApacheServer
X-VTEX-Janus-Router-Backend-App
X-Vtex-Remote-Cache
X-Goog-Hash
X-VTEX-Cache-Status-Janus-ApiCache
X-Pantheon-Site
X-Signature
X-LBLID
X-Pantheon-Phpreq
X-Pantheon-Environment
Surrogate-Key-Raw
Fhost
Generator
X-Debug-Info
X-Response-Time
DynaTrace
X-Powered-By-VTEX-Janus-Edge
X-Msg-2-Log
X-Platform
X-Actual-URL
X-Upstream
X-Returned-From
X-Returned-From-DLL
X-Location-Id
X-Passed-To-DLL
X-Passed-To
X-Original-Request
X-Powered-By-360WZB
WZWS-RAY
X-Developer
X-Varnish-Host
HTTPS
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Micro-Cache
X-From
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-Cache-Age
Public-Key-Pins-Report-Only
X-Stale
X-Hosted-By
X-Accel-Expires
Origin
X-Supported-By
X-UD-Method
Dmn
Akamai-IP
X-LW-Cache
X-Rocket-Nginx-Bypass
X-RESOURCE
X-Device-Type
Fastcgi-Cache
X-URLSCHEME
X-Cache-Info
Pagespeed
X-Cache-TTL
Content-Hash
X-TransIP-Balancer
Arr-Disable-Session-Affinity
X-LB
X-Rnd
X-F-Cache
X-Defender
X-Shop-Id
X-Fastcgi-Cache
X-I-Sp
X-BS
X-Tumblr-Pixel-6
X-Version
Retry-After
X-Source
X-TransIP-Backend
X-HS-Content-Campaign-Id
X-S
X-Platform-Processor
X-NetCat-Version
X-Platform-Router
X-Storage
X-Director
Cache-Provider
X-App-Hosting
X-Page-Cache
X-EdgeConnect-Origin-MEX-Latency
X-Front
X-Platform-Cluster
X-Instart-Request-ID
X-Matrix-Proxy
X-CSRF-Protection
X-Powered-By-VelaWeb
X-Magento-Cache-Debug
X-Matrix-Server
Last-Published
X-AOL-HN
X-Microcache-Status
Pool
X-Translation
X-EdgeConnect-MidMile-RTT
X-Daa-Tunnel
X-Cache-Key
Ohc-File-Size
Cache-Key
X-ATG-Version
X-Art-Request-Id
IBM-Web2-Location
X-Dispatcher
X-Varnish-Count
X-Varnish-HitMiss
X-Route-Server
MIME-Version
X-ARC
X-Loopia-Node
Version
Allow
X-Cache-Operation
RTSS
X-Hypernode
X-Gamma-Serve
X-Varnish-RemainingTTL
X-Varnish-GracePeriod
X-Varnish-Seen-By
X-Varnish-ObjectSource
X-Varnish-RemainingLife
X-Lambda-Id
X-Expires-Orig
USPLoggingUUID
X-Revision
X-Drupal-Cache-Tags
Node
X-Cache-Tags
X-Varnish-Age
X-Content-Encoded-By
X-Platform-Server
SSPAppContext
X-Cache-Debug
X-Ua-Device
Powered-By-ChinaCache
X-NoCache
X-I
X-Flow-Powered
X-Varnish-Cacheable
X-Dispatch
X-Hiawatha-Cache
X-Edge-IP
Content-Disposition
Lsrequestid
Backend
X-LB-Node
X-Cache-Only-Varnish
X-Server-Upstream
X-SV-CacheTags
X-SV-Expires
X-SV-FromDBCache
X-SV-Nginx-Duration
X-Abgroup
X-SV-Pid
X-SV-Cacheable
X-SV-Duration
X-SV-CreatedAt
X-Server-ID
X-SV-Edge
X-SSL-Protocol
Accept-Encoding
X-Vcap-Request-Id
X-SSL-Cipher
Content-Encoding-Handler
X-Environment
X-UPSTREAM
X-Platform-Cache
Pv
X-GeoIP-Country-Code
X-Generated
X-IsCacheURL
X-Drupal-Cache-Contexts
X-Dns-Prefetch-Control
X-SRCache-Key
X-Debug
Content-MD5
X-Id
X-Cache-Expires
X-Cache-Lifetime
X-Grace
Wsr-Cache
X-Ezoic-Cdn
Fw-Via
Location
X-Ttl
X-Cache-Engine
Page-Completion-Status
X-Cache-Control-Orig
X-Proxy
X-RequestId
X-Duration
X-Firenze-Processing-Time
X-VTEX-Cache-Status-Janus-Edge
X-ORACLE-DMS-ECID
Section-Io-Id
X-Discourse-Route
S-Cnection
X-Nbs
X-Country-Code
IM-Version
X-Sucuri-ID
X-CJ-Soft
Srv
Server-Name
X-Cache-Server
X-Url-Base
X-Sentry-ID
X-Amz-Meta-S3cmd-Attrs
X-N
ServerID
FAI-W-FLOW
Proxy-Connection
X-Cache-Type
ServerName
X-TTL
X-Geo-Country
Cneonction
X-Location
X-Varnish-Backend
X-Yadis-Location
X-Client-IP
X-Sapient
X-Browser
X-Content-Age
If-Modified-Since
X-Forwarded-Proto
X-Magento-Cache-Control
X-Speed-Cache
X-Processing-Time
X-Litespeed-Cache
X-Speed-Cache-Key
SRV
X-PwB-Node
X-Cookie-Domain
SN
X-Cache-Fix
X-Cache-PageType
X-Varnish-Url
X-GUploader-UploadID
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
PICS-Label
X-Goog-Generation
X-GeoIP-Country-Name
X-Goog-Metageneration
Author
X-Vhost
Req-Id
X-Nginx-Cache
X-Sucuri-Cache
X-Cache-Control
X-Server-Id
Server-Info
X-Shield-Request-Id
NnCoection
X-Cache-Level
X-ServerID
X-Dynatrace-Js-Agent
X-Traffic
X-NB-Cached-Page
X-BackendServer
Cm-Server
X-Route-To
Web-App-Origin-Name
X-Pressidium-NinukisWP-Ver
X-Akamai-Device-Model
X-Akamai-Device-Characteristics
Accept-Charset
X-Last-Modified
X-Middleware-Start
X-Runtime-Rack
X-Worker
Thanks
X-Always-Cache
X-Processed-By
X-Cache-Namespace
X-SO
X-SERVER-NAME
X-FastCGI-Cache
SiteSpeed
X-CDN-Forward
NetMindSessionID
X-Time
Nodo
X-Session-ID
X-Akamai-Transformed
Use-Proxy
X-Config-Blacklist-Version
X-Amz-Storage-Class
X-Magnolia-Registration
X-FW
X-ACMCache
X-BKSrc
X-Culture
AMF-Ver
X-Purge-URL
X-Webkit-CSP
X-App-Server
X-High-Performance
X-CF-Passed-Proto
X-Varnish-Retries
X-Srv
Xc-Version
Cached
Qs-Cache
X-Twitter-Response-Tags
X-SDS
X-Litespeed-Cache-Control
X-Transaction
X-Connection-Hash
X-Frontend
X-Real-Server
X-Correlation-ID
S
X-Cache-Device-Type
X-VNode
HCVer
X-Cache-CFC
X-Purge-Host
X-Framework
X-Abuse
Cache
HAVer
WN
X-WN-ClientGroup
X-DealerOn
Pf.Web.Request.Id
X-Orig-Vary
X-LB-Server
X-JG-Page-Cache
X-Varnish-ID
EagleEye-TraceId
Local-Info
X-FTR-Request-ID
X-Cluster-Node
X-Server-IP
WWW-Authenticate
A-Powered-By
Pics-Label
X-Content-Type-Option
Server-Timing
Frame-Options
X-Amz-Meta-Cb-Modifiedtime
X-Jphone-Copyright
SVR
SEOMOZ
P-ID
MC
X-Runtime-Memory
X-VARITI-CCR
Dispatcher
X-Origin
X-SRV
MJ12bot
Proxy-Agent
X-Drectory-Script
W
X-WR-Flags
Worker
X-Cf-Powered-By
X-Dev
X-Garden-Version
X-DataDome
X-Cms-Mode
X-Empowered-By
X-ClientSide-Caching
X-Sorting-Hat-Expire-Cache
X-Varnish-IP
X-AF-Userserver
X-Balanceador
HitType
Keywords
Tracecode
Max-Age
X-Remote-Addr
X-Webstats-RespID
X-Rocket-Nginx-Serving-Static
Magicmarker
Nitro-Cache
Eomportal-Instance
Cleartype
X-Sys-Req-ID
X-LP
Ram
AC-ELC
Noq
X-Yottaa-Metrics
Content-Transfer-Encoding
X-Mobilized-By
X-MCB-Server
X-Yottaa-Optimizations
Ramp
Cache-Tag
X-Backend-Status
X-Mobile-URL
X-HP-Trace-Project
X-HP-Trace-ID
X-Varnish-Hits
X-Client-Image-Vid
X-Redman-Final-Url
X-Redman-Backend
X-Cache-Doesi
X-Clara-ASAP
X-Client-Vid
X-ASAP-Cache
Ufe-Result
X-Cache-TTL-Remaining
X-HW
X-WPL-DATA
CLMOB
X-Avg-Cookie-Expires
X-App-Status
X-App-Runtime
X-Domain-Checked
X-Provisioner-Version
X-Cache-Handler
X-Runtime-Affili
X-EPiphany-Vid
X-Debug-Token
X-Akamai-Edgescape
VANITY-HOST
X-Directory-Script
X-AVG-Country-Code
X-PF-Uncompressing
X-App
X-Hit-Cache
Description
X-Pagename
X-NginX-Cache
Adm-Server
X-Adobe-Loc
X-HTML-Minification-Powered-By
X-Adobe-Content
X-Varnish-Ttl
X-Unbounce-Variant
X-Content-Security-Policy-Report-Only
PagesDisplayed
Content_type
X-FireWall-Port
Contao-Page-Layout
X-Unbounce-PageId
X-ARRServer
CacheControlHeader
X-LW-Web-Server
X-OpenCart-Lightning
X-Server-Instance
X-Generated-Time
X-Unbounce-VisitorID
X-Pj-Cache-Status
X-Fedora-School-Id
X-Resty-Request-Id
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
X-Atraveo-TTL
X-Atraveo-Param-Rm
X-Atraveo-ETag
X-Atraveo-Set-Cookie
X-Atraveo-Cache-Control
X-Symfony-Cache
X-HashTwo
X-RiS-UFDI
X-ServerIndex
X-Key
X-Source-ID
X-Atraveo-Varnish-Server-Id
X-Cache-Detail
X-ORACLE-DMS-RID
X-Akamai-3PM-SW-Version
Play-Detected-Device
Play-Detected-UserAgent
X-Varnish-Debug-Age
X-Varnish-Hostname
X-Varnish-Ip
X-Real-IP
X-Varnish-Debug-TTL
X-GeoIP
X-Force
X-Wikidot-Backend
X-PRAM
X-Wikidot-Static-Cache
X-Atraveo-Zone
X-HOSTNAME
X-UA
X-V
X-Disney-Akamai-Rule
Strikingly-Cache-Region
Front
Lb
ServerSignature
X-CB-Server
OriginServer
X-Webkit-Csp
X-Info
X-Goog-Meta-Goog-Reserved-File-Mtime
Strikingly-Cached-Version
Strikingly-Cached
Cteonnt-Length
AMP-Access-Control-Allow-Source-Origin
X-GoCache-CacheStatus
X-Data-Request
Cache-Tags
X-Amcomm-Site
X-AEM
X-Frames-Options
From-Origin
BALANCEDTO
ViewMode
ServerTokens
X-Compressed-By
X-ID
X-Rq
X-CAPServer
SBGI-RealPath
Backend-Timing
SBGI-10
Cmstype
Cmsid
X-LBPoolMember
X-Dw-Trace-Id
SBGI-1
X-Esi
Viewport
SBGI-Device
SBGI-9
SBGI-7
SBGI-5
X-Analytics
Machine
NLCacheNote
Beyond-Iis
X-Req-Head-Response
SBGI-RenderTime
SERVER-ID
X-Unique-ID
X-Map-Context
X-JSESSIONID
X-CDN-COMPRESS
Smug-CDN
X-CDN-RULE
Access-Control-Allow-Header
X-Resolver-IP
X-Page
X-Env
X-Varnish-Server
X-NginX-Server
Disablevcache
Service-Worker-Allowed
X-Plat
X-HydroSheep
X-Smartcache-Timeout
X-Middleton-PageSpeed
X-WP
Proxy-Cache
Resin-Trace
XDomainRequestAllowed
X-Smartcache-Keys
X-Cache-Keep
X-WebKit-CSP-Report-Only
Traffic-Origin
X-Cache-Node
X-Aramark-SID
X-Apm-Telemetry-Syncmark
Og
X-TTFB
X-TTFB-L
X-CacheResult
From
X-OPNET-Transaction-Trace
Il-Cl
Home
X-SmugMug-Values
X-SmugMug-Hiring
X-Detected-Device
X-VC-TTL
Web
X-Stage
X-Nginx-Host
Fastly-Backend-Name
X-Wix-PunisherID
MS-CV
X-Dynamic-Cache
X-IIJ-Cache
X-A
X-AutoRu-App-Id
NODE
X-Wix-Punisher
Id
X-Proto
Bios
X-Autoru-Host
X-Autoru-LB
Dis-Env
X-Airee-Node
X-VC-Enabled
X-Webcelerate
X-L-Path
X-WR-MODIFICATION
X-Gyrobase-Publication
X-Ser
Yoncu-Errno
X-Origin-Server
Content-Server
X-M
X-Mobile-Rewrite
X-Hrouter
X-Hosting-Env
X-Cache-On
X-Bip
X-Powered-By-Home.Pl
Paypal-Debug-Id
Hamster
X-GSL-Server
Ibf5scheme
N365rili
X-Hstore
COMMERCE-SERVER-SOFTWARE
X-ENV
X-Rewrite
X-Say-Cacheable
X-SmartBan-Host
Hname
SG
X-Say-TTL
Ews
X-RDP
ScoreTracker
X-SayCDN-TTL
X-Varnish-Cache-Local
Nginx-Cache
X-B2f-Not-Route
X-E
X-Desc
X-Machine-Name
X-MAT-GEO
X-Origin-Cache
X-Distributor
X-CACHE-TTL
X-Hosting
IISExport
SHInfo
X-SmartBan-URL
X-Environment-Context
X-SDE-Name
TC-S-Cache-M
WebServer
X-FPC
X-Adnet
TC-S-Cache
X-DN-Cache-Control
X-Refresh
X-Cache-Dispatchercachecontrol
X-Cache-Dispatcherpragma
X-MSEdge-Ref
X-Captured
X-ETag
X-Highwire-SessionId
Identity
X-Highwire-RequestId
X-Session-Reinit
TC-Cache-U
Aoestatic
F5-IpCliente
Gzip
X-Author
X-Tag-Playlist
X-Magento-Action
X-Magento-Lifetime
Hostname
ClientIP
TC-Cache-IC
X-Proxy-Cache-Key
Arrnode
X-Trace-Id
TC-Cache
X-DTC
X-Batcache-Reason
X-EC2-Instance-Id
PB-RID
Quri
Myheader
X-Render-Time
X-Batcache
X-Viator-Tapersistentcookie
DNNOutputCache
PB-PID
X-Cdn-Forward
Uuri
X-Goog-Meta-Replace
X-Protected-By
X-RealServer
X-SH-Cache-Status
RN-Server
X-PM-ID
Server-Id
Serverid
X-Rack-CORS
X-Grid-Server
X-KoobooCMS-Version
X-Header
X-HostName
Xc
X-Goog-Meta-Policy
Device
MW-Webserver
AsisCache
X-Ss-Location
X-Rack-Cors
X-Ss-Conf
Warning
NtCoent-Length
X-Cocoon-Version
X-W3TC-Minify
X-Resource
X-Flex-Evend
X-Rebelmouse-Cache-Control
X-Cache-Set
SS
X-CacheID
ServerIP
X-CRA-DC
Ctx
X-Flex-Community
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Response
X-Src-Webcache
X-Machine
X-Cache-Time
X-Cache-TTL-Age
Hosted-By
Accept-Language
X-Rebelmouse-Surrogate-Control
X-Old-Content-Length
X-Upstream-Backend
Session-From
X-Flex-Tags
X-VC-Cache
X-Backend-Host
X-Cluster
X-Timestamp
X-Agent
X-Cache-TTL-Current
X-Sc-Cache
X-Server-Generated
X-RemovedCookies
X-Streams-Distribution
X-Flex-Evstart
X-Beatles-Hits
X-ProcessESI
X-Flex-Lang
X-Amz-Meta-S3b-Last-Modified
X-Flex-Tag
X-Forwarded-Host
X-Flex-Lastmod
User-Agent
Edgecast
X-HA
Hummingbird-Cache
X-SE-Debug
X-Served
X-Server-Ip
Custom-Header
X-Beatles
X-Gateway-Skip-Cache
X-Varnish-Id
X-IP
MageStack-Area
MageStack-Cache
MageStack-Loadbalancer
MageStack-Magento-Version
MageStack-PageSpeed
MageStack-Debug
MageStack-Config
MageStack-Cache-Hits
MageStack-Cache-Lifetime
MageStack-Cacheable
X-Gateway-Cache-Status
X-FastCGI-Cache-Status
X-DynamicCache
X-ASAP-Age
Tempo
Upgrade-Insecure-Requests
AR-SID
AR-PoweredBy
Access-Control-Allow-Method
AR-ATIME
AR-CACHE
X-Cache-Id
PServer
X-Domino-CacheValidationWithETagReason
X-Domino-CacheValidationWithETagResult
X-Gateway-Cache-Key
X-Deity
X-Debug-Message
X-Avvio-Cms-Cacheload
X-Cname-TryFiles
Generate-Time
MageStack-Tag
MageStack-Cache-Status
X-Redirector
X-Depends
X-Ghost-Cache-Status
X-Confluence-Request-Time
X-Would-Your-GrandPa-Wait
SB-Site-Device
X-Your-GrandPa-Would-Wait
X-TTL-Age
CommunityServer
SB-Cache-Life
SB-Cache-Remaining
VServer
SB-Site-IE-VERSION
X-TB-M
X-Litespeed-Tag
X-Bcwwwid
X-ProBase-Server
X-DSMX-Render-MS
X-Amz-Id-1
X-Does-He-Have-Time
MageStack-Web-Node
X-UT-Cache
BackendServer
X-Backend-TTL
X-DSMX-Rewrite-MS
X-Cache-Me-Harder
X-NewCloud-V-Cache
NZSpeedy
X-DEBUG
X-CSRF-Token
X-DB-Content-Length
X-Reflector-Cache
X-Reflector
X-HP-CAM-COLOR
X-RAMCache
X-ACCELERATE
X-Varnish-URL
X-WA-Info
X-Varnish-Action
X-Fstrz
Provider
X-Netrix-ID
X-Server-Addr
X-Serv
X-Unique-Id
X-4ormat-Cacheable
X-HS-Status
X-SV
X-HAProxy
X-Served-Server
X-Dynatrace
Url
X-Pagely-Cache
Server-Ip
X-Lw-Cache
X-ReqId
X-NodeID
X-Nginx-Request-Processing-Time
X-Nginx
X-Secret
X-DS1D
X-Enhanced-By
X-Gannett-Site-Version
X-MidCOM-Meta-Cache
X-Origin-Upstream-Status
Server-ID
X-Serverid
X-Instance
Fastly-Restarts
X-AMAZEEIO
X-Artvisual-Server
X-Status
X-We-Are-Hiring
WP-AdvCache-MemCached
X-SilverStripe-Cache
X-Cache-Via
Tesla.Performance
X-Search-Id
X-SCM-Server-Number
X-Turpentine-Esi
X-VC-Cacheable
X-VC-Debug
X-Pixelsilk-Version
X-Pixelsilk-Server
Control-Cache
!~Request-OOB-Work
X-Full-Url
X-Max-Age
X-VC-Hash
X-Router
X-CCM
X-Enabled1
X-Custom-Header
X-DevSrv-CMS
X-Enabled2
X-Enabled3
Ttl
X-Route
X-Amz-Meta-Content-Md5
X-Header-Treatment
EQ-Cache
Microcache
X-Pubstack
X-ManagedFusion-Rewriter-Version
X-Az
X-Rewritten-By
X-Test-Debug
X-Distil-CS
X-Blog
X-UnsetCookies
X-Zendesk-Origin-Server
X-Zendesk-User-Id
CDCHOST
X-XHTML-Minification-Powered-By
X-AppVersion
X-Cjtype
MwpReleaseVersion
X-Made-On
RSB-LINK
X-Cache-Original-TTL
X-Backend-Name
Cacheid
X-Activity-Id
ServerNode
Www.Aujourdhui.Com
X-RequesterIP
X-PBS-Fwsrvname
X-Box
TP-L2-Cache
X-Cache-Extended
X-Client-Ip
X-Container
TP-Cache
INFO
X-PBS-Appsvrip
X-PBS-Appsvrname
X-Upstream-Status
FRONT-END-SECUREBROWSER
X-Geo-IP
X-REDIRECTSERVER
X-SuperCache
X-Hash
X-Uncacheable
Kanooh-Host
Progma
X-DDM-SERVER-UPDATED
X-DDM-SERVER
X-Skip-Cache
X-Upgrade-Enabled
X-7d-Instance-Id
X-7d-Trace-Id
X-Not-Cacheable
X-NewsFlow-Sitename
Provided-Host
AccessControlAllowOrigin
Referer
X-BeResp-Ttl
XDisk
X-CH-Device
RequestId
GranicusServer
MachineName
X-This-Proto
Note
Access-Control-Request-Headers
DrivedBy
X-MainProfileCategory
X-MainProfileID
X-MainProfileName
X-MainProfileURL
X-LOCATION
X-Instance-Id
NS-VaryByCustom-Key
Services
X-Cache-FS-Status
X-Catalyst
X-AppServer-Cache-Rule
X-Application
X-AISO-Cacheable
X-Node-Name
X-XHR-Current-Location
X-Generation-Time
X-Fastly-Request-Id
X-WebServer
X-AISO-Cache
StatusCode
X-Time-Microsecs
Cache-Status
EN-User
X-S-Misc
X-PHP-Response-Code
X-Cache-V
X-AISO-Server
X-Node-ID
Expiries
X-Config-By
X-Cache-Varnish
X-D-Time
Debug-Status
X-Oracle-DMS-ECID
X-FORWARDED-PROTO
X-Lb
Dynatrace
X-Ruxit-Js-Agent
X-Ssl-Cipher
X-Oneagent-Js-Injection
X-Cache-Ttl
X-ESI
CS-SERVER
X-Requestid
Actioncode
X-Nitro-Cache
X-Sn-Servicetimems
X-Varnish-Cached
X-UPServer
X-Varnish-Cached-TTL
Ohc-Response-Time
X-ServerAddr
Httpd-Identifier
X-Script
X-B3-Spanid
Rewriter
FindLaw
Webserver
X-Distributed-By
X-Proxy-Id
DbServerName
Content-Cache
X-Rocket-Nginx-File
X-Rocket-Nginx-Reason
X-Sid
X-Via-NSCOPI
X-Service-Id
XX
X-B3-Traceid
X-Built-With
X-CPU-Time
X-Fpc
MSSmartTagsPreventParsing
Request-Time
Cookie
DB-Nickname
IES-Server
Load-Balancer
X-MCF-ID
Realaction
X-Meta-MSSmartTagsPreventParsing
X-Meta-MSThemeCompatible
X-Restarts
X-Archive-Orig-Server
X-Meta-Imagetoolbar
X-AWS
X-Request-Processing-Time
X-PBY
X-FIRSTBase
X-Built-By
X-Server-Vrn
X-Archive-Orig-ETag
TTL
X-Archive-Orig-Connection
X-WHO
Memento-Datetime
CD4
Actual-Object-TTL
X-Wm-1
X-Archive-Orig-Date
X-Archive-Orig-Content-Length
X-Wm-VIP
X-LB-Frontend
X-Dynamic
X-Varnish-Store
X-Cache-Warmer
X-Varnish-Esi-Method
X-Varnish-Esi-Access
WP-FROM-CACHE
X-Archive-Guessed-Charset
MSThemeCompatible
Ec-Machine
Ec-CorrId
1A-CountryCode
X-Varnish-Currency
X-Fastly-Backend-Reqs
Language
X-Server-App
X-Request-Received
X-LB-Backend
Powered-By-VeryCDN
X-Cache-Date
X-Instance-Name
CpuTime
X-Debug-Serve
IsMobile
X-Csrf-Token
X-BC
X-ELB
X-Country
UrlWatchModule-Time
X-Ants-Machine-Id
X-Ants-Host
Accept-CH
Aurora-Node
X-PG
Apple-Itunes-App
X-VG-WebCache
X-Clx-Request
SINA-TS
SINA-LB
Requested-Host
X-Cache-Served
X-Ar-Debug
OutputRewritten
X-SID
X-MSU-SOURCE
X-ZSITES-DNS
X-Who
X-EBAY-C-REQUEST-ID
X-FG-RequestId
X-Cache-Bypass
Response-Time
X-CO-Host
X-Nginx-Page-Cache
Page-Template
RlogId
X-Powered-Developer
Head
WSCLoggingUUID
X-Time-Zone
X-ServiceProvider
X-Server-FQDN
X-Varnish-Grace
X-Varnish-Instance
X-PROCESSED-BY
Countrycode
CmsfirstPublishTimestamp
X-VLoc
Cache-Ctrol
X-Svr
Yola-ID
Fw-Cache-Status
Session-Id
X-Cache-2
Y-Trace
X-ZORequestID
X-Memcached
X-Server-Ident
X-Title
X-Instart-Cache-Id
X-IP-Address
E-TAG
VAR-Cache
X-Brought-To-You-By
X-Config-Version
VC-NoCache
X-WAF-Proxy
X-Nginx-Request-Time
X-VCS-Cacheable
X-VCS-Ttl
X-Layout
X-Czt
AMFplus-Ver
X-Web-Node
X-SCProxy
X-Processed
ATI-Server-Id
ReqUrl
X-9XB-Server
X-ACLR-Version
X-COUNTRY-CODE
X-Optimization
X-Imforza-Hosted
ProxiaInstanceId
FastCGI-Cache-Status
Copyright
X-Accel-Cache-Control
X-Amz-Meta-Version-Id
X-Cache-HT
X-HA-Frontend
X-HA-Backend
X-Cache-LB
X-DeliveryServer