Threat Level: green Handler on Duty: Kevin Liston

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
X-AspNet-Version
Age
P3P
Content-Language
X-Pingback
Via
X-UA-Compatible
Expect-CT
Upgrade
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Varnish
X-Check
X-Language
X-Template
X-Request-Id
Alt-Svc
X-Generator
X-Buckets
X-Drupal-Cache
X-Xss-Protection
P3p
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-Powered-By-Plesk
Content-Location
Host-Header
Referrer-Policy
X-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-ShopId
X-Dc
X-Sorting-Hat-Section
X-ShardId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PodId
X-Alternate-Cache-Key
X-Runtime
MS-Author-Via
X-UA-Device
X-IPLB-Instance
X-Powered-CMS
Cartoon
X-Served-By
X-Amz-Cf-Id
X-Cache-Status
Access-Control-Allow-Headers
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
Status
X-Via
X-Wix-Server-Artifact-Id
X-Iinfo
X-Timer
X-Accel-Buffering
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-ServedBy
CF-Cache-Status
X-Contextid
X-Backend
Powered-By
X-PC-Hit
X-PC-Key
X-Mod-Pagespeed
X-CST
X-PC-AppVer
X-PC-Host
X-PC-Date
Content-Encoding
X-WPE-Loopback-Upstream-Addr
X-DIS-Request-ID
X-Logged-In
Keep-Alive
X-CDN
X-Host
X-Cache-Hit
X-Rid
X-Port
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Tumblr-User
X-Cache-Enabled
X-Server-Powered-By
X-Endurance-Cache-Level
X-Tumblr-Pixel-1
X-Server
X-Ua-Compatible
X-Robots-Tag
X-Nginx-Cache-Status
X-Original-Date
X-Sorting-Hat-PrivacyLevel
X-Accel-Version
X-Seen-By
X-Wix-Request-Id
X-Drupal-Dynamic-Cache
X-Page-Speed
X-Tumblr-Pixel-2
X-Turbo-Charged-By
X-Wix-Punisher
X-Content-Powered-By
X-Forwarded-For
X-Pad
X-Proxy-Cache
X-Forwarded-Proto
X-Content-Digest
X-AH-Environment
X-NewRelic-App-Data
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
WP-Super-Cache
X-Rack-Cache
X-Varnish-Cache
Content-Security-Policy-Report-Only
X-Tumblr-Pixel-3
X-LiteSpeed-Cache
X-Newrelic-App-Data
X-GitHub-Request-Id
SPRequestGuid
Edge-Control
X-Request-Country
X-SharePointHealthScore
X-MS-InvokeApp
X-XRDS-Location
MicrosoftSharePointTeamServices
X-SERVER
X-Cache-Lookup
X-Cnection
Timing-Allow-Origin
X-FW-Hash
X-Node
Cf-Railgun
X-Amz-Id-2
X-Amz-Request-Id
X-Died
Charset
X-FW-Serve
X-FW-Type
X-FW-Static
X-Content-Security-Policy
X-FullPageCaching
X-Trace
X-Webcom-Cache-Status
X-Webserver
Request-Id
X-CF-Powered-By
Edge-Cache-Tag
Request-Context
X-PhApp
X-HS-Cache-Config
X-Hits
X-HS-Content-Id
X-BC-Stapler
MicrosoftOfficeWebServer
SPIisLatency
SPRequestDuration
X-INKT-URI
X-INKT-SITE
X-PHP-Backend
Access-Control-Max-Age
X-Safe-Firewall
Composed-By
EagleId
Access-Control-Expose-Headers
X-Sorting-Hat-FeatureSet
X-Swift-CacheTime
X-Swift-SaveTime
Grace
Served-By
X-CDN-Pop-IP
X-CDN-Pop
X-Spip-Cache
X-Hyper-Cache
Liferay-Portal
X-Backend-Server
X-Server-Name
X-VCache
X-Dw-Request-Base-Id
X-Tumblr-Pixel-4
X-Device
X-HS-Combine-CSS
X-Fastly-Request-ID
X-Microcache
X-Firenze-Processing-Times
X-Request-ID
X-FB-Debug
Surrogate-Control
Content-Style-Type
X-RateLimit-Remaining
X-Clacks-Overhead
X-LiteSpeed-Cache-Control
X-RateLimit-Limit
X-Cloud-Trace-Context
Content-Script-Type
Front-End-Https
Xkey
X-DDC-Arch-Trace
X-RateLimit-Reset
Rating
X-Jimdo-Wid
X-Jimdo-Instance
X-TNCMS
X-Loop
X-StackifyID
Public-Key-Pins
X-User-Agent
X-ServerName
X-Acc-Exp
X-DNS-Prefetch-Control
X-Cache-Config
Refresh
X-Vtex-Processado-Em
X-Frame-Option
X-Age
X-XN-Trace-Token
X-XN-XNHTML
Fpc-Cache-Id
X-Sol
X-Middleton-Response
X-Middleton-Display
Response
Display
X-Hostname
X-SS-Location
X-SS-Conf
X-Px
X-WebKit-CSP
X-Tumblr-Content-Rating
X-N-OperationId
X-Cached
X-Zen-Fury
X-Dscp-Value
X-Generated-By
X-Topify-Platform
X-Tumblr-Pixel-5
X-HOST
Real-Hostname
TCN
X-Request-Time
X-Magento-Tags
X-MiniProfiler-Ids
X-Correlation-Id
X-URL
X-Kinsta-Cache
X-Amz-Version-Id
P-LB
X-Whom
P-WS
X-OneAgent-JS-Injection
Rt-Fastcgi-Cache
X-CMS-Version
X-Outils-CS
PageSpeed
X-Cached-By
X-Handled-By
Dmn
X-DynaTrace
X-B-Cache
X-Url
Product
X-Content-Options
X-Msg-2-Log
X-DynaTrace-JS-Agent
X-Ruxit-JS-Agent
Access-Control-Request-Method
X-From
X-Varnish-TTL
Imagetoolbar
Surrogate-Key
Powered
Host
X-FORWARDED-FOR
ServedBy
X-AspNetWebPages-Version
X-Cache-Rule
X-Debug-Info
X-Edge-Location
X-CacheServer
X-Varnish-Cache-Hits
Public-Key-Pins-Report-Only
X-Location-Id
X-Accel-Expires
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Remote-Cache
X-Powered-By-VTEX-Janus-ApiCache
X-Vtex-Processed-At
X-VTEX-Janus-Router-Backend-App
X-Fastcgi-Cache
X-Umbraco-Version
No
X-Engine
X-LBLID
Edge-Control-Message
DynaTrace
X-Signature
X-SRCache-Fetch-Status
X-Upstream
X-SRCache-Store-Status
X-Goog-Hash
Fhost
X-Via-JSL
X-Application-Context
Alternate-Protocol
X-Track
X-Platform
X-Recruiting
X-NWS-LOG-UUID
X-Passed-To-DLL
X-Magento-Cache-Debug
X-Returned-From-DLL
X-Original-Request
X-Hosted-By
X-Actual-URL
X-Returned-From
X-Passed-To
X-Loopia-Node
X-Art-Request-Id
X-Varnish-Beresp-Status
X-Powered-By-VTEX-Janus-Edge
X-LW-Cache
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-Response-Time
X-Developer
Fastcgi-Cache
X-Returned-From-PostProcessResponse
X-UD-Method
Retry-After
X-Passed-To-PostProcessResponse
X-Passed-To-BeforeDispatch
X-Returned-From-BeforeDispatch
Ohc-File-Size
Pagespeed
X-Micro-Cache
X-Stale
Arr-Disable-Session-Affinity
X-Version
X-Cache-Info
X-Varnish-Host
X-Rocket-Nginx-Bypass
X-Platform-Router
X-PERF
X-Platform-Processor
X-ApacheServer
Generator
X-F-Cache
X-VARNISH-Cache
X-URLSCHEME
X-Platform-Cluster
X-Supported-By
X-Rnd
HTTPS
X-TransIP-Balancer
X-Device-Type
X-Litespeed-Cache
WZWS-RAY
USPLoggingUUID
X-Powered-By-360WZB
X-Microcachable
Origin
X-Shop-Id
X-Varnish-Count
X-I-Sp
X-Defender
X-Varnish-HitMiss
X-BS
X-TransIP-Backend
X-Cache-Age
X-Instart-Request-ID
X-RESOURCE
X-S
Content-Hash
X-Cache-TTL
X-EdgeConnect-Origin-MEX-Latency
Akamai-IP
X-Tumblr-Pixel-6
X-Cluster-Node
X-HS-Content-Campaign-Id
X-NetCat-Version
X-Server-ID
X-Powered-By-VelaWeb
Cache-Provider
X-Storage
X-Director
Surrogate-Key-Raw
X-Pantheon-Site
X-Platform-Server
X-Cdn
Fastly-Debug-Digest
X-Pantheon-Phpreq
X-Pantheon-Environment
X-Matrix-Proxy
X-Source
X-Matrix-Server
Last-Published
X-Dispatcher
RTSS
X-CSRF-Protection
X-Shard
X-I
X-Gamma-Serve
X-Cache-Tags
Version
X-Front
X-Translation
X-Microcache-Status
X-Hypernode
Content-Disposition
X-Flow-Powered
X-Cache-Key
X-App-Hosting
X-ATG-Version
X-Page-Cache
Powered-By-ChinaCache
X-Daa-Tunnel
X-EdgeConnect-MidMile-RTT
X-Cache-Operation
MIME-Version
Allow
X-Route-Server
X-Platform-Cache
X-Expires-Orig
X-Varnish-ObjectSource
X-LB-Node
X-Varnish-GracePeriod
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-Varnish-RemainingLife
Cache-Key
X-Sapient
X-ORACLE-DMS-ECID
X-Abgroup
X-Vcap-Request-Id
X-SV-CacheTags
X-SV-Cacheable
X-SV-FromDBCache
X-SV-Edge
X-SV-Duration
X-SV-Pid
X-SV-Expires
X-SV-CreatedAt
X-SV-Nginx-Duration
X-Varnish-Cacheable
X-Environment
X-Ttl
X-Content-Encoded-By
X-ARC
X-Server-Upstream
X-Drupal-Cache-Tags
X-Cache-Debug
X-Ezoic-Cdn
X-Revision
X-Cache-Namespace
X-Varnish-Age
X-SSL-Cipher
Pool
IBM-Web2-Location
X-SSL-Protocol
X-Magento-Cache-Control
X-Litespeed-Cache-Control
SSPAppContext
X-Lambda-Id
X-Varnish-Ttl
X-Github-Request-Id
Lsrequestid
SN
X-Firenze-Processing-Time
X-LB
Node
Wsr-Cache
Cneonction
X-Grace
S-Cnection
X-Dispatch
X-Duration
X-Edge-IP
FAI-W-FLOW
Accept-Encoding
Pv
X-Varnish-Backend
X-CJ-Soft
X-Cache-Expires
X-NoCache
Content-MD5
ServerID
X-Cache-Control-Orig
X-Nginx-Cache
X-Cache-Only-Varnish
Backend
Content-Encoding-Handler
X-IsCacheURL
X-Generated
X-Cache-Lifetime
X-Ss-Location
X-Ss-Conf
X-Hiawatha-Cache
X-PwB-Node
Fw-Via
X-Time
X-Drupal-Cache-Contexts
X-Client-IP
Srv
Section-Io-Id
X-Varnish-IP
X-Last-Modified
X-AOL-HN
X-Debug
X-ID
X-RequestId
X-Url-Base
PICS-Label
X-Vhost
Location
X-Amz-Meta-S3cmd-Attrs
X-Server-Id
X-Proxy
X-GeoIP-Country-Code
X-SDS
Server-Timing
X-Fastly-Request-Id
X-Yadis-Location
X-N
X-Dynatrace-Js-Agent
X-Cache-Server
X-Varnish-Url
X-Cache-Type
X-Akamai-Device-Model
X-Akamai-Device-Characteristics
NnCoection
Server-Name
X-Country-Code
Req-Id
X-Cache-Handler
Proxy-Connection
ServerName
X-Akamai-Transformed
AMF-Ver
X-Purge-URL
X-Pressidium-NinukisWP-Ver
If-Modified-Since
X-Content-Age
X-Cache-Level
Page-Completion-Status
X-Goog-Stored-Content-Encoding
X-GUploader-UploadID
X-Worker
X-Goog-Stored-Content-Length
X-Geo-Country
X-Purge-Host
X-Discourse-Route
X-SRCache-Key
X-Goog-Storage-Class
X-Goog-Generation
X-Cache-CFC
X-Runtime-Rack
X-Goog-Metageneration
HAVer
X-Oneagent-Js-Injection
X-Cache-Engine
HCVer
X-Magnolia-Registration
X-Nbs
X-UPSTREAM
X-Middleware-Start
Nodo
X-Speed-Cache-Key
X-Speed-Cache
X-ServerID
X-App-Status
SRV
X-ORACLE-DMS-RID
IM-Version
Use-Proxy
X-Srv
X-Always-Cache
X-GeoIP-Country-Name
X-Origin
X-App-Server
Server-Info
X-TTL
Pf.Web.Request.Id
Cache
X-Location
Accept-Charset
MJ12bot
X-BackendServer
X-BKSrc
X-SO
SEOMOZ
X-Cookie-Domain
Qs-Cache
Front
X-Cache-Control
X-Correlation-ID
X-Content-Type-Option
X-FW
X-Processing-Time
X-Real-Server
X-Cache-Device-Type
X-Frontend
X-Amz-Storage-Class
VANITY-HOST
X-Cache-Fix
X-PF-Uncompressing
X-Empowered-By
X-Cache-PageType
Cteonnt-Length
X-CDN-Forward
Xc-Version
X-Config-Blacklist-Version
Cache-Tags
X-Framework
X-Browser
Nitro-Cache
Custom-Header
S
CacheControlHeader
Content-Transfer-Encoding
X-WPL-DATA
Cm-Server
X-Unbounce-Variant
X-DealerOn
X-Unbounce-PageId
X-Server-Instance
X-Esi
X-Varnish-Retries
X-Rocket-Nginx-Serving-Static
X-High-Performance
X-Gateway-Skip-Cache
Cached
MC
X-Gateway-Cache-Status
X-Unbounce-VisitorID
X-CF-Passed-Proto
X-Gateway-Cache-Key
Local-Info
X-Sentry-ID
X-Hit-Cache
X-Abuse
X-OpenCart-Lightning
X-HTML-Minification-Powered-By
NetMindSessionID
X-Pagename
X-Id
Magicmarker
X-Shield-Request-Id
X-EPiphany-Vid
X-JG-Page-Cache
X-VARITI-CCR
X-Mobilized-By
P-ID
X-Content-Security-Policy-Report-Only
X-Client-Image-Vid
X-Ruxit-Js-Agent
X-ACMCache
X-Client-Vid
Author
X-Avg-Cookie-Expires
W
X-Akamai-Edgescape
X-Xrds-Location
X-WN-ClientGroup
X-AVG-Country-Code
WN
X-Session-ID
Cache-Tag
NODE
X-FTR-Request-ID
X-SRV
Tracecode
X-Sucuri-ID
Eomportal-Instance
X-Varnish-Hits
X-Redman-Final-Url
X-Dns-Prefetch-Control
X-Redman-Backend
X-AF-Userserver
X-Rq
X-Yottaa-Metrics
X-Processed-By
X-Yottaa-Optimizations
Url
SiteSpeed
Thanks
WWW-Authenticate
X-Adobe-Loc
X-Adobe-Content
X-Resource
ServerSignature
X-Resty-Request-Id
X-Fedora-School-Id
X-Server-IP
Frame-Options
ServerTokens
Machine
IISExport
X-Transaction
X-Env
Content_type
X-WR-Flags
X-Orig-Vary
X-Sys-Req-ID
X-Twitter-Response-Tags
X-Connection-Hash
NtCoent-Length
X-Route-To
X-NB-Cached-Page
X-Source-ID
X-LB-Server
X-DEBUG
X-Traffic
X-Runtime-Memory
X-ClientSide-Caching
Contao-Page-Layout
X-VTEX-Cache-Status-Janus-Edge
X-SmugMug-Values
Web-App-Origin-Name
A-Powered-By
X-AEM
X-ServerIndex
X-Stage
X-TTFB
X-Page
X-TTFB-L
Adm-Server
Smug-CDN
SVR
X-A
Service-Worker-Allowed
Proxy-Agent
Max-Age
Cmsid
Cmstype
X-SmugMug-Hiring
X-Cache-Dispatchercachecontrol
Bios
X-Cache-Dispatcherpragma
X-Trace-Id
X-Drectory-Script
Ufe-Result
X-Compress-Hint
Ramp
Noq
Ram
From-Origin
X-Jphone-Copyright
X-WebKit-CSP-Report-Only
X-Remote-Addr
X-VC-TTL
X-WA-Info
NLCacheNote
Environment
X-Sorting-Hat-Expire-Cache
X-Directory-Script
X-Symfony-Cache
EagleEye-TraceId
X-NginX-Server
X-HW
X-GeoIP
X-Webstats-RespID
X-DTC
X-FPC
X-Clara-ASAP
X-ARRServer
X-VC-Enabled
X-ASAP-Cache
X-Disney-Akamai-Rule
X-Generated-Time
X-Garden-Version
X-Plat
X-Sucuri-Cache
Keywords
X-LP
Description
BALANCEDTO
X-Varnish-Hostname
X-Application
X-Airee-Node
Play-Detected-UserAgent
SBGI-5
SBGI-10
SBGI-7
X-IIJ-Cache
SBGI-Device
SBGI-9
SBGI-1
X-CB-Server
X-RiS-UFDI
X-Unique-ID
X-HydroSheep
X-CAPServer
X-VNode
X-Varnish-Id
Play-Detected-Device
SBGI-RealPath
X-Info
Pics-Label
X-Webkit-CSP
X-Force
X-PRAM
X-Cache-Doesi
SBGI-RenderTime
X-Distil-CS
Access-Control-Allow-Method
X-LW-Web-Server
X-IP
Id
Beyond-Iis
X-Magento-Action
Yoncu-Errno
X-Akamai-3PM-SW-Version
X-Vcache
Dispatcher
SERVER-ID
X-Backend-Status
X-Acquia-Debug-Password
Home
Backend-Timing
X-Varnish-Debug-TTL
SHInfo
X-Analytics
Dis-Env
X-Detected-Device
X-Varnish-Server
X-Cocoon-Version
X-Varnish-ID
Og
X-Cache-Node
X-TB-M
X-CACHE-TTL
X-RealServer
X-Pubstack
X-Render-Time
X-Resolver-IP
Fastly-Backend-Name
X-Sites
X-NodeID
RequestId
X-Key
X-Culture
X-E
X-Cache-Via
X-Adnet
X-Depends
Disablevcache
X-Varnish-Debug-Age
ScoreTracker
X-Hosting-Env
From
VServer
X-SDE-Name
X-Smartcache-Timeout
X-FireWall-Port
Server-ID
X-Request-Uri
X-WP
XDomainRequestAllowed
X-Domain-Checked
X-Smartcache-Keys
X-Real-IP
X-Provisioner-Version
RN-Server
X-MCB-Server
X-Balanceador
X-Goog-Meta-Goog-Reserved-File-Mtime
COMMERCE-SERVER-SOFTWARE
AC-ELC
WP-AdvCache-MemCached
X-Atraveo-TTL
X-GoCache-CacheStatus
X-Atraveo-Zone
Nginx-Cache
X-Atraveo-Cache-Control
X-Bip
MW-Webserver
X-Atraveo-ETag
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
X-Origin-Server
X-Atraveo-Param-Rm
X-Atraveo-Varnish-Server-Id
SS
X-Atraveo-Set-Cookie
X-ESI
X-Flex-Tag
X-Flex-Evstart
X-Flex-Tags
X-Flex-Lastmod
X-Flex-Lang
X-Data-Request
X-Wikidot-Static-Cache
X-Wikidot-Backend
X-WHOIS-Cached
X-Highwire-RequestId
Myheader
Ec-Machine
Hostname
Ec-CorrId
X-Runtime-Affili
X-Hosting
X-App-Runtime
X-Amcomm-Site
X-Flex-Community
X-Compressed-By
X-Map-Context
X-ACCELERATE
X-Amz-Meta-Cb-Modifiedtime
X-Flex-Evend
X-Rack-CORS
X-Autoru-LB
X-B2f-Not-Route
X-Cms-Mode
X-Autoru-Host
X-AutoRu-App-Id
X-Amz-Meta-S3b-Last-Modified
X-Aramark-SID
X-HP-Trace-Project
X-Dev
X-HP-Trace-ID
X-Frames-Options
ClientIP
X-Varnish-Cache-Local
F5-IpCliente
Gzip
X-Cluster
X-SmartBan-URL
X-DB-Content-Length
OriginServer
Proxy-Cache
X-Src-Webcache
Accept-CH
Worker
X-Session-Reinit
X-Search-Id
AMP-Access-Control-Allow-Source-Origin
X-Highwire-SessionId
X-Req-Head-Response
X-Powered-By-Home.Pl
X-Time-Microsecs
X-Mobile-URL
X-SmartBan-Host
Il-Cl
Traffic-Origin
X-Debug-Token
X-OPNET-Transaction-Trace
X-Machine
X-HashTwo
X-Nginx-Host
X-Dw-Trace-Id
X-L-Path
Ctx
X-LDNR-NOT-ROOT-HL-NOTSET
N365rili
X-Amz-Meta-Content-Md5
X-GSL-Server
X-Cache-On
X-Response
SG
X-Environment-Context
X-Origin-Cache
Ibf5scheme
X-Viator-Tapersistentcookie
X-Desc
X-MAT-GEO
Access-Control-Allow-Header
Paypal-Debug-Id
X-Cdn-Forward
Ohc-Response-Time
X-Omnis-SiteID
Hname
X-Rebelmouse-Surrogate-Control
X-CacheResult
X-Captured
AsisCache
X-Fstrz
X-CRA-DC
X-Refresh
X-Distributor
X-Confluence-Request-Time
Device
X-NginX-Cache
X-Rebelmouse-Cache-Control
X-Redirector
X-PBY
X-RDP
X-Secret
X-Forwarded-Host
X-Rewrite
X-Proxy-Cache-Key
X-Magento-Lifetime
X-Proto
X-Akam-SW-Version
X-Author
CLMOB
TP-L2-Cache
HitType
TP-Cache
Aoestatic
VC-NoCache
X-NID
X-EC2-Instance-Id
X-Batcache
X-ManagedFusion-Rewriter-Version
X-Rewritten-By
Strikingly-Cached
Strikingly-Cache-Region
Hummingbird-Cache
X-SV
Strikingly-Cached-Version
X-Highwire-Smart-Code
X-SH-Cache-Status
Identity
X-Cache-Varnish
X-Lb
Accept-Language
X-Nginx-Request-Processing-Time
X-KoobooCMS-Version
X-Avvio-Cms-Cacheload
X-SERVER-NAME
Web
X-Cf-Powered-By
X-Highwire-Sitecode
X-FORWARDED-PROTO
Content-Generator
CommercePlatform-Version
X-Ghost-Cache-Status
Ez
OracleCommerceCloud-Version
X-PHP-Response-Code
X-Cache-TTL-Current
X-Rack-Cors
X-Cache-TTL-Age
X-DataDome
OracleCommerceCloud-Sandiego
Copyright
Actual-Object-TTL
Upgrade-Insecure-Requests
PagesDisplayed
X-Amz-Id-1
X-Goog-Meta-Replace
X-Zendesk-User-Id
X-App
X-DynamicCache
X-Zendesk-Origin-Server
NS-VaryByCustom-Key
X-Goog-Meta-Policy
X-Node-Name
X-ASAP-Age
X-Varnish-Grace
X-Webcelerate
X-Who
X-ZSITES-DNS
BackendServer
Lb
X-SCM-Server-Number
X-Header
X-LBPoolMember
X-UnsetCookies
X-HS-Status
X-V
X-Server-Addr
X-PM-ID
Xc
PServer
Server-Id
X-Served-Server
X-Tag-Playlist
Ews
X-Varnish-Action
X-Grid-Server
Provider
Cleartype
X-PROCESSED-BY
X-Artvisual-Server
X-AMAZEEIO
X-DN-Cache-Control
X-DSMX-Render-MS
X-Gyrobase-Publication
X-DSMX-Rewrite-MS
X-W3TC-Minify
X-Pass-Through
X-HP-CAM-COLOR
X-Batcache-Reason
X-Cache-Detail
X-Pj-Cache-Status
X-HAProxy
X-Dealeron-Backend
X-Reflector-Cache
X-Serv
X-Reflector
X-Dealeron-Original-Url
NZSpeedy
Ttl
X-4ormat-Cacheable
X-Pagely-Cache
X-7d-Trace-Id
Fastly-Restarts
X-Box
X-Backend-Host
X-7d-Instance-Id
CommunityServer
Swift-Performance
Requested-Host
X-DDM-SERVER
X-Hash
AR-ATIME
X-MidCOM-Meta-Cache
X-Phpwcms-Page-Processed-In
X-Phpwcms-Release
AR-CACHE
X-DDM-SERVER-UPDATED
X-Client-Ip
AR-PoweredBy
FRONT-END-SECUREBROWSER
X-WebNode
AR-SID
X-Obvious-Info
X-REDIRECTSERVER
X-Instance-Id
Resin-Trace
X-Container
X-RiS-PX
X-Cache-Me-Harder
X-Agent
X-OCTOPOD
Tk
X-Nginx-Request-Time
X-Middleton-Pagespeed
X-Built-By
X-Hrouter
DeleGate-Ver
X-MainProfileURL
X-Obvious-Tid
X-Svr
X-UPSTREAM-Address
X-MainProfileName
X-Hstore
X-MainProfileCategory
Session-Id
X-MainProfileID
ProxiaInstanceId
No-Cache
X-Meta-Imagetoolbar
X-Gannett-Site-Version
X-FG-RequestId
X-Meta-MSSmartTagsPreventParsing
X-Meta-MSThemeCompatible
X-Site
X-ReqId
X-Enhanced-By
X-DS1D
MachineName
X-Proxy-Skip
X-Protected-By
MSSmartTagsPreventParsing
MSThemeCompatible
StatusCode
Page-Template
CDCHOST
X-Ants-Host
X-CDN-RULE
X-CDN-COMPRESS
X-CacheID
Hamster
X-Actindo-Request-Id
X-Actindo-Thread-Id
X-Actindo-Rs
SB-Site-Device
SB-Cache-Remaining
X-Test-Debug
X-Ants-Machine-Id
X-XHTML-Minification-Powered-By
TZ-Server
SB-Cache-Life
ID
X-ETag
X-Catalyst
UrlWatchModule-Time
Progma
Z-Tpl
X-AppServer-Cache-Rule
X-Cache-TTL-Remaining
X-Country
X-Config-By
Kanooh-Host
Content-Cache
X-SilverStripe-Cache
X-Sid
X-SuperCache
X-Timestamp
X-Via-NSCOPI
X-VG-WebCache
X-D-Time
X-Generation-Time
TC-Cache-U
TC-Cache-IC
TC-Cache
TC-S-Cache
TC-S-Cache-M
X-Built-With
X-Bcwwwid
Server-Ip
EN-User
X-S-Misc
X-Nitro-Cache
X-ServiceProvider
X-Streams-Distribution
Cache-Status
XX
X-SE-Debug
FindLaw
X-Cjtype
X-Activity-Id
Viewport
X-Amz-Meta-Version-Id
X-Cacheable-TTL
X-AppVersion
X-BServer
ViewMode
Tesla.Performance
X-Cache-Original-TTL
X-Cache-Id
X-Custom-Header
MS-CV
X-Layout
HostName
X-BPool-Fx-Cache
X-Az
EQ-Cache
GranicusServer
Control-Cache
X-Serverid
X-UT-Cache
X-UA
X-Middleton-PageSpeed
X-JSESSIONID
X-BPool-Back
X-BPool-Bx-Cache
X-Debug-Message
X-BPool
X-HA
X-FastCGI-Cache-Status
Generate-Time
Y-Trace
X-CSRF-Token
X-Cname-TryFiles
X-Debug-Token-Link
X-Deity
Cacheid
X-VC-Hash
X-CloudBurst-WordPress
X-CloudBurst-Frontend
X-Beatles
X-Apm-Telemetry-Syncmark
X-Cache-ID
X-Cache-Time
X-CloudBurst-Cache
X-CloudBurst-Backend
CpuTime
RSB-LINK
X-Made-On
X-Turpentine-Esi
X-Title
X-Static
X-ACLR-Version
X-Served
X-Header-Treatment
X-HEAD
X-Domino-CacheValidationWithETagResult
X-Domino-CacheValidationWithETagReason
X-VC-Debug
User-Agent
X-VC-Cache
X-VC-Cacheable
TheAnswer
X-Blog
MageStack-Debug
MageStack-Config
X-Mw-Workerstats
MageStack-Loadbalancer
MageStack-PageSpeed
MageStack-Magento-Version
MageStack-Cacheable
MageStack-Cache-Warning
MageStack-Cache-Lifetime
MageStack-Cache-Hits
MageStack-Cache-Status
X-FIRSTBase
X-Pageid
X-M-V
MageStack-Tag
X-I-V
X-Instart-Cache-Id
X-CH-Device
X-HeBS-Cache-Status
X-Ssl-Cipher
X-Cachable
X-M-P
MageStack-Web-Node
X-M-T
Provided-Host
X-B
X-Beresp-Ttl
X-Q-S
X-Pool-Info
X-S-C
Language
DrivedBy
MageStack-Cache
X-S-V
X-Transaction-Name
X-Route
X-T
X-Full-Url
Amfplus-Ver
X-RAMCache
Key
MageStack-Area
X-AISO-Cacheable
X-AISO-Server
X-Cache-Extended
X-Pixelsilk-Server
X-AISO-Cache
FastCGI-Cache
X-Pixelsilk-Version
X-Cache-Ttl
X-Instance
Container
MwpReleaseVersion
V-Age
X-Node-Id
WSCLoggingUUID
X-Instance-Name
X-ClusterID
X-Backend-Name
X-ARKEA-Diag
X-ProcessESI
Be
X-Theme
X-NMT-Proxy
X-RemovedCookies
Warning
X-Varnish-Cache-Ttl
SB-Site-IE-VERSION
TestCC
Redirect-Reason
X-RequesterIP
X-Status
X-MSEdge-Ref
Powered-By-115
X-SSLUpstream
X-Svr-Proxy
X-Script
X-Geo-IP
X-SSLProxy
X-Ao-Cache-Key
X-ServerAddr
X-PBS-Fwsrvname
X-Prerender-Token
X-Skip-Cache
X-CACHE-KEY
Amp-Access-Control-Allow-Source-Origin
Rewriter
Webserver
X-Proxy-Id
X-BackendProxy
X-MCF-ID
X-Locale
CD4
DbServerName
X-PBS-Appsvrname
X-UPServer
X-M
X-Origin-Date
X-Varnish-Debug-Hits
Request-Filtered-By
X-Gateway-Rate-Limit-Delayed
X-Gateway-Rate-Limit-Conn
Httpd-Identifier
X-Reason-Bp
X-Varnish-Cached-TTL
X-Proxy-Backend
Referer
X-MyName
X-NewsFlow-Sitename
X-PBS-Appsvrip
X-Healthy
X-Cache-FS-Status
X-Server-Hostname
ReqUrl
X-Varnish-Cached
X-Prerendered
X-Would-Your-GrandPa-Wait
X-SayCDN-TTL
X-PoweredBy
X-Say-TTL
X-Say-Cacheable
X-SCProxy
X-MSU-SOURCE
X-DEBUG-TTL
X-DeliveryServer
X-ENV
V-TTL
X-Processed
X-Cache-LB
X-Cache-Keep
X-ELB
Apple-Itunes-App
X-Upgrade-Enabled
X-Mobile-Rewrite
Www.Aujourdhui.Com
X-Tt-Dbg
X-DEBUG-HOST
SINA-TS
X-ACache
User-Cache-Control
Access-Control-Request-Headers
X-Request-Processing-Time
X-BIT-Node
X-Cache-ASPX
X-K8s
X-Test
Arrow-RequestId
X-Request-Received
Edgecast
X-Clx-Request
SINA-LB
X-Upstream-Status
X-Olaf
X-Fastly-Backend-Reqs
VAR-Cache
Note
X-Member
X-PG
X-SH-Cache-Disabled
X-Does-He-Have-Time
X-Unique-Id
CS-SERVER
X-Node-App
X-Nginx-Page-Cache
X-CO-Host
X-CPU-Time
X-Hit
Debug-Status
Expiries
X-Cache-Set
X-Beatles-Hits
X-NO-BREACH
X-Dynamic-Cache
WP-FROM-CACHE
X-DevSrv-CMS
ServerIP
Session-From
X-Cache-Bypass
X-This-Proto
X-Varnish-Instance
X-VLoc
X-XHR-Current-Location
X-Time-Zone
X-Max-Age
PB-RID
PB-PID
X-Server-FQDN
Xcache
X-Optimization
X-TTL-Age
Serverid
X-TLS-Version
Response-Time
Head
CmsfirstPublishTimestamp
Countrycode
X-Your-GrandPa-Would-Wait
X-Old-Content-Length