Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Connection
Set-Cookie
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
P3P
X-Frame-Options
X-XSS-Protection
X-Pingback
X-Cache
X-AspNet-Version
Content-Language
Age
CF-RAY
X-UA-Compatible
Strict-Transport-Security
Via
X-Adblock-Key
Access-Control-Allow-Origin
X-Varnish
X-Language
X-Template
X-Check
X-Buckets
X-Generator
X-Cacheable
X-Drupal-Cache
Content-Location
P3p
X-Hacker
X-Ac
X-AspNetMvc-Version
X-Powered-By-Plesk
X-Type
X-Request-Id
X-Pass-Why
X-Cache-Group
MS-Author-Via
X-Runtime
WP-Super-Cache
X-Powered-CMS
X-Cache-Hits
Status
X-Permitted-Cross-Domain-Policies
X-Download-Options
Host-Header
Ngpass-Ngall
X-ShopId
X-Dc
X-Alternate-Cache-Key
X-ShardId
X-UA-Device
Access-Control-Allow-Credentials
X-Request-ID
Content-Security-Policy
Access-Control-Allow-Headers
Keep-Alive
X-Iinfo
X-Via
Access-Control-Allow-Methods
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-User
X-Mod-Pagespeed
X-Tumblr-Pixel-1
X-Logged-In
X-Served-By
X-Backend
X-Pad
X-Tumblr-Pixel-2
X-Contextid
Upgrade
X-ServedBy
X-PC-Key
X-PC-Hit
X-Xss-Protection
X-Cache-Status
X-CDN
X-Host
Powered-By
X-Server
X-Cache-Hit
Content-Encoding
X-PC-AppVer
X-PC-Host
X-PC-Date
X-Tumblr-Pixel-3
X-Port
X-Timer
X-Robots-Tag
X-Accel-Version
X-Cache-Lookup
X-Varnish-Cache
X-Server-Powered-By
X-Rack-Cache
X-Amz-Cf-Id
X-Request-Country
X-Cnection
SPRequestGuid
MicrosoftSharePointTeamServices
X-SharePointHealthScore
MicrosoftOfficeWebServer
Alt-Svc
X-Turbo-Charged-By
X-Safe-Firewall
X-Page-Speed
X-MS-InvokeApp
CF-Cache-Status
X-Content-Powered-By
X-AH-Environment
X-XRDS-Location
Rating
X-Tumblr-Content-Rating
X-Node
X-Content-Digest
X-Cache-Enabled
X-Tumblr-Pixel-4
X-GitHub-Request-Id
X-FullPageCaching
Public-Key-Pins
X-PhApp
Content-Security-Policy-Report-Only
Request-Id
X-Ua-Compatible
Timing-Allow-Origin
X-INKT-SITE
X-INKT-URI
X-Webserver
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
Composed-By
SPIisLatency
SPRequestDuration
X-W-DC
X-Proxy-Cache
Served-By
Cf-Railgun
X-Amz-Request-Id
X-Amz-Id-2
X-Firenze-Processing-Times
Permitted-Cross-Domain-Policies
X-HeyJason
Liferay-Portal
X-SERVER
X-Spip-Cache
X-Swift-CacheTime
X-Swift-SaveTime
X-Hyper-Cache
Access-Control-Expose-Headers
X-Styx-Req-Id
X-Styx-Version
X-Pantheon-Styx-Hostname
X-Drupal-Dynamic-Cache
Surrogate-Key-Raw
X-Pantheon-Endpoint
EagleId
Xkey
X-Nginx-Cache-Status
Access-Control-Max-Age
Charset
X-Content-Security-Policy
Surrogate-Key
X-Tumblr-Pixel-5
X-Server-Name
Grace
X-CDN-Pop-IP
X-CDN-Pop
Content-Script-Type
Content-MD5
Content-Style-Type
Access-Control-Allow-Method
X-Dw-Request-Base-Id
X-FW-Hash
X-Hits
X-FB-Debug
X-Device
X-FW-Serve
X-FW-Static
X-FW-Type
X-XN-XNHTML
X-XN-Trace-Token
Public-Key-Pins-Report-Only
X-CF-Powered-By
X-User-Agent
X-Clacks-Overhead
X-VWS-Id
X-AWS-Id
X-LJ-Flow-ID
X-Backend-Server
X-VCache
Refresh
X-Fastly-Request-ID
X-Tumblr-Adult-Blog
X-Cache-Config
X-DDC-Arch-Trace
X-Age
X-Jimdo-Instance
X-Jimdo-Wid
Real-Hostname
X-TNCMS
X-Loop
X-LiteSpeed-Cache
X-Cache-Server
X-ASPNETMVC-VERSION
Fastly-Debug-Digest
X-Cache-Result
X-Cloud-Trace-Context
X-Generated-By
X-ServerName
X-MiniProfiler-Ids
X-Tumblr-Pixel-6
Edge-Control
X-Umbraco-Version
X-Cached-By
Surrogate-Control
X-Powered-By-360WZB
WZWS-RAY
X-Cached
X-Outils-CS
X-Px
NS-RTIMER-COMPOSITE
X-Hostname
X-DynaTrace-JS-Agent
Fpc-Cache-Id
X-CMS-Version
Cartoon
X-URL
X-Url
PageSpeed
X-DynaTrace
TCN
X-Whom
X-Newrelic-App-Data
X-Servedby
X-WebKit-CSP
X-BC-Stapler
X-Forwarded-For
Product
Imagetoolbar
DynaTrace
X-Handled-By
Response
X-From
Front-End-Https
Rt-Fastcgi-Cache
X-TTL
ServedBy
Display
X-Middleton-Display
Edge-Control-Message
X-Sol
X-Msg-2-Log
X-Middleton-Response
X-Content-Options
X-AspNetWebPages-Version
X-Varnish-Cache-Hits
Origin
X-Recruiting
X-Do-Not-Hack
Access-Control-Request-Method
X-FORWARDED-FOR
X-NetCat-Version
X-Country-Code
X-EC-Security-Audit
X-Engine
Fhost
Akamai-IP
X-Micro-Cache
X-Hosted-By
X-Content-Encoded-By
X-Varnish-Beresp-Status
Referrer-Policy
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
Server-Info
X-Passed-To-DLL
Generator
X-Returned-From
X-Passed-To
X-Original-Request
X-LiteSpeed-Cache-Control
X-Actual-URL
X-Returned-From-DLL
X-Cache-Info
IBM-Web2-Location
X-Matrix-Proxy
X-Matrix-Server
Page-Completion-Status
X-Returned-From-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
X-Stale
X-Passed-To-BeforeDispatch
X-I
X-Director
X-App-Hosting
Alternate-Protocol
X-Platform
X-Cache-Rule
X-Track
X-Abuse
X-UD-Method
X-Xrds-Location
X-DNS-Prefetch-Control
X-Location-Id
X-Varnish-Backend
Surrogate-Keys
X-Art-Request-Id
X-S
X-Varnish-TTL
X-Expires-Orig
Powered-By-ChinaCache
Content-Disposition
X-Response-Time
X-I-Sp
Host
X-BS
X-Firenze-Processing-Time
X-SRCache-Fetch-Status
X-PERF
X-Daa-Tunnel
X-SRCache-Store-Status
X-ApacheServer
Magicmarker
X-Varnish-Host
Powered
X-CacheServer
X-Magnolia-Registration
X-Cache-Age
X-Microcachable
X-Version
Content-Encoding-Handler
X-Duration
X-Origin
X-Dispatcher
X-Varnish-Cacheable
X-Request-Time
Ag-Send-Time
Lsrequestid
X-RESOURCE
X-Last-Modified
Ag-Execution-Time
X-URLSCHEME
Ag-Server-Time
X-SDS
X-Vtex-Processado-Em:
USPLoggingUUID
X-Gamma-Serve
X-Server-ID
X-VTEX-Janus-Router-Backend-App
X-Vtex-Remote-Cache
X-Vtex-Processed-At
X-Powered-By-VTEX-Janus-Edge
X-VTEX-Cache-Status-Janus-Edge
No
X-ATG-Version
X-VTEX-Cache-Status-Janus-ApiCache
X-Powered-By-VTEX-Janus-ApiCache
X-Cache-TTL
X-HOST
X-B-Cache
MIME-Version
X-Varnish-ObjectSource
X-Varnish-RemainingLife
X-Varnish-Seen-By
X-Varnish-GracePeriod
X-Varnish-RemainingTTL
ServerName
X-Microcache-Status
X-Device-Type
X-Translation
X-Varnish-Age
X-Zen-Fury
X-Cache-Debug
X-Goog-Hash
X-Route-Server
Proxy-Agent
X-Storage
X-Upstream
X-Rocket-Nginx-Bypass
X-Cache-Operation
Req-Id
X-Developer
X-Instart-Request-ID
X-Fastcgi-Cache
X-OneAgent-JS-Injection
X-DefendeR-Status
X-DefendeR-Runtime
X-Cache-Lifetime
X-Revision
Node
X-Debug
Proxy-Connection
X-PwB-Node
X-Server-Id
Version
Arr-Disable-Session-Affinity
X-Source
Fastcgi-Cache
X-Nbs
Location
X-CJ-Soft
X-Cf-Powered-By
X-Cache-Control-Orig
X-Geo-IP
X-AOL-HN
X-NoCache
X-Cache-Tags
SN
ServerID
PICS-Label
X-Cache-Expires
Buuteeq-Source
X-Drectory-Script
X-Client-IP
X-FW
X-ServerID
X-Amz-Version-Id
Last-Published
X-Front
X-SV-Duration
X-WEBSERVER
X-SV-Edge
X-Vcap-Request-Id
X-SV-CacheTags
X-SV-CreatedAt
X-SV-Nginx-Duration
X-SV-Pid
X-SV-FromDBCache
X-Kinsta-Cache
X-SV-Expires
X-N
X-Varnish-Hits
Webluker-Edge
Cache-Key
Content-Security-Policy-Rerport-Only
HCVer
Ufe-Result
HAVer
X-Correlation-Id
X-Geo-IP-Region
Srv
RTSS
X-Geo-IP-Metro
X-Geo-IP-Country
X-Platform-Processor
X-Geo-IPV
X-Platform-Router
X-Cache-Key
X-Varnish-Count
X-Frontend
X-UPSTREAM
Cache
X-Varnish-HitMiss
Content-Hash
NetMindSessionID
X-Hypernode
X-Page-Cache
X-Dispatch
X-Mobilized-By
Retry-After
SEOMOZ
X-ACMCache
X-LB-Node
X-Cookie-Domain
MJ12bot
AMF-Ver
X-Speed-Cache
X-LB
X-Speed-Cache-Key
X-Edge-Location
Qs-Cache
Content-Transfer-Encoding
X-Supported-By
X-Yadis-Location
Cached
X-B2f-Cache-Load
X-Varnish-Hostname
X-Akamai-Device-Model
X-Akamai-Device-Characteristics
Mobiquo-Is-Login
W
X-Application-Context
X-Server-Upstream
X-Purge-URL
X-Real-Server
X-Grace
Warning
S
X-Platform-Cache
X-HOSTNAME
X-Content-Age
Nodo
Backend
Cm-Server
X-SE-Debug
Author
Filter-Revision
X-Varnish-Server
X-Processing-Time
X-Config-Blacklist-Version
Accept-Charset
X-Orig-Vary
WSR-Cache
X-CDN-Cache-Status
X-CDN-Node
X-ClientSide-Caching
X-Time
X-Purge-Host
X-WebServer
X-Blog
X-NginX-Upstream-Addr
X-NginX-Upstream-Response-Time
X-Edge-IP
X-NB-Cached-Page
Rewriter
X-NginX-Upstream-Status
X-BKSrc
X-NginX-Node
X-GeoIP-Country-Code
X-GeoIP-Country-Name
X-AbeBooks-Version
X-Mobile-URL
Pics-Label
X-SSL-Cipher
Accept-Encoding
X-SSL-Protocol
X-Varnish-IP
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Cocoon-Version
Eomportal-Instance
X-PF-Uncompressing
X-Garden-Version
X-Trace
X-F-Cache
X-Session-Reinit
X-Sys-Req-ID
X-Processed-By
X-CDN-Forward
X-StackifyID
X-Machine-Name
NODE
X-Ttl
Nitro-Cache
X-NFE
SSPAppContext
X-BackendServer
X-Nginx-Host
X-WR-Flags
A-Powered-By
S-Cnection
COMMERCE-SERVER-SOFTWARE
X-Nhost
Frame-Options
Allow
X-Nurl
SRV
X-Cache-Doesi
X-Transaction
X-Connection-Hash
X-Twitter-Response-Tags
IISExport
X-Hiawatha-Cache
Ngpass-Vcall
X-Adobe-Loc
Pool-Info
X-Discourse-Route
Host-Service
X-Unique-ID
A
X-AOL-SNH
X-Adobe-Content
X-Signature
X-Magento-Tags
X-Directory-Script
CC-CACHE
X-IIJ-Cache
X-Framework
X-Browser
X-Empowered-By
X-Vhost
Ibf5scheme
X-Hit-Cache
X-Cache-Fix
Ibm-Web2-Location
X-Pagename
X-Resolver-IP
X-SmartBan-Host
X-Cache-Control
X-Cache-PageType
X-SmartBan-URL
X-GeoIP
X-Cache-Only-Varnish
X-Highwire-RequestId
X-Highwire-SessionId
X-Key
X-Config-By
Front
X-HP-Trace-Project
Backend-Timing
X-Symfony-Cache
Thanks
X-V
X-NginX-Cache
X-Avvio-Cms-Cacheload
X-Amz-Storage-Class
P-LB
P-WS
X-IsCacheURL
Section-Io-Id
X-ID
Cteonnt-Length
Machine
X-Litespeed-Cache-Control
X-LW-Web-Server
X-Varnish-Ttl
X-HP-Trace-ID
MC
X-Analytics
BALANCEDTO
X-Flow-Powered
WWW-Authenticate
X-Source-ID
X-Plat
SVR
X-Prefetched
X-SmugMug-Hiring
X-Env
X-RiS-UFDI
Smug-CDN
X-Worker
X-Vary-Options
CT
X-Plat-Be-Ip
X-HTML-Minification-Powered-By
X-Jphone-Copyright
X-ORACLE-DMS-ECID
Cneonction
X-TTFB-L
X-Plat-Va-Ip
X-SmugMug-Values
X-TTFB
CacheControlHeader
MW-Webserver
Keywords
NLCacheNote
X-WA-Info
X-EPiphany-Vid
X-NginX-Server
Resin-Trace
Server-Name
X-HydroSheep
From
X-Cache-Engine
Mime-Version
X-Client-Vid
X-Client-Image-Vid
X-Webcelerate
NnCoection
X-Sucuri-ID
X-Balanceador
X-SRV
Content-Server
X-Varnish-Debug-TTL
X-AWS
X-Captured
X-Varnish-Debug-Age
CLMOB
Bios
Cmstype
X-PG
Cmsid
X-EDGECONNECT-GUID-DEBUG
X-ARC
X-App-Server
X-EdgeConnect-Origin-MEX-Latency
X-Real-IP
X-Smartcache-Keys
X-LB-Server
Real-Server
X-AEM
X-Smartcache-Timeout
X-Grid-Server
X-WP
Myheader
X-EdgeConnect-MidMile-RTT
X-Nginx-Cache
X-Domain-Checked
X-Restarts
XDomainRequestAllowed
X-Provisioner-Version
X-App-Status
X-HW
X-Distributor
X-Id
X-PRAM
ScoreTracker
Head
X-Server-IP
RN-Server
X-Force
Beyond-Iis
X-Detected-Device
Id
X-Frames-Options
X-Optimization
X-ServerIndex
X-Platform-Server
X-Domino-CacheValidationWithETagResult
X-GSL-Server
CmsCacheEngine
X-Cache-CFC
AsisCache
X-REDIRECTSERVER
X-Domino-CacheValidationWithETagReason
X-RDP
If-Modified-Since
X-Lifetime
Hamster
Imx-Cookies-Used
X-FIRSTBase
Ec
Xc
X-APP
N365rili
X-CB-Server
Sophnep-Edge-FX
X-KoobooCMS-Version
X-Server-Response-Time
X-MrHost
Sid
X-Render-Time
X-Qnm-Cache
X-Response
Rel
Web
Prxy
X-Actindo-RS
X-Server-By
X-A
X-Cache-Source
X-JG-Page-Cache
X-Cache-Provider
Cluster-ID
Hash
Description
X-Desc
X-Webstats-RespID
X-This-Proto
X-Cache-On
X-Span
X-Amz-Id-1
X-DTC
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
IM-Version
VAR-Cache
X-Custom-Header
Set-Cookie2
X-Amz-Meta-S3cmd-Attrs
Cache-Rule
Paypal-Debug-Id
X-HITS
X-Atraveo-Varnish-Server-Id
X-Atraveo-Param-Rm
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
X-Atraveo-ETag
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-Dynatrace-Js-Agent
X-Dynatrace
X-Atraveo-Cache-Control
X-Atraveo-Zone
X-Dns-Prefetch-Control
Identity
X-Unbounce-PageId
X-Accel-Expires
NS-VaryByCustom-Key
X-Server-Instance
WP-AdvCache-MemCached
X-Sucuri-Cache
X-Rack-CORS
X-Airee-Node
Actual-Object-TTL
X-We-Are-Hiring
X-Srv
X-Unbounce-VisitorID
NtCoent-Length
X-DealerOn
INCOMING-TIME
M
X-Unbounce-Variant
X-Upstream-Backend
Note
X-Enhanced-By
X-Varnish-Store
X-Varnish-Set-Cookie
X-Depends
X-Forwarded-Proto
X-ProxyInstancename
X-MAT-GEO
X-Varnish-Action
X-Server-Start-Time
X-Jcms-Ajax-Id
Fw-Via
Fw-Cache-Status
Logging-CorrelationId
X-7d-Instance-Id
X-7d-Trace-Id
X-Cache-Action
X-Magento-Action
VServer
Device-Type
X-ACLR-Version
X-Distributed-By
X-Site:
X-Forwarded-Host
X-Nitra-Side
X-Origin-Id
X-WR-MODIFICATION
IsMobile
X-Pressidium-NinukisWP-Ver
X-GUploader-UploadID
X-Cache-Level
X-Trace-Id
DrivedBy
X-SDE-Name
VANITY-HOST
X-Cache-Handler
X-Turpentine-Cache
X-Varnish-Esi-Access
X-Secret
B-Powered-By
X-Varnish-Currency
X-B
X-Appmachine-Environment
X-Catalyst
X-Turpentine-Esi
X-Goog-Metageneration
X-Vhost-ID
X-Is-Mobile
X-Ob-Mode
RequestId
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-FFX-B
X-ESI-Enable
X-PBY
X-Pubstack
X-Cluster-Node
X-Goog-Stored-Content-Length
X-RealServer
X-VC-TTL
X-Varnish-Esi-Method
X-Hrouter
X-MSEdge-Ref
X-Oracle-DMS-ECID
Cpu
X-Cache-Set
X-Hstore
D
X-OpenCart-Lightning
X-Varnish-Cache-Local
X-SilverStripe-Cache
X-Runtime-Affili
Backend-Node
Accept-Language
OT-RequestId
X-App-Runtime
Worker
X-Fstrz
X-AccessDev
X-Cms-Mode
X-Unique-Id
X-Dev
Ram
Noq
X-Tile-Url
X-Apm-Telemetry-Syncmark
Proxy-Cache
ServerSignature
ServerTokens
Il-Cl
X-SV
X-COUNTRY-CODE
X-Rewritten-By
X-Nginx
Noq:
Ram:
X-Cache-Me-Harder
X-ManagedFusion-Rewriter-Version
X-Backend-Name
X-CSRF-TOKEN
X-CacheResult
Ctx
Server-Ip
Fastly-Backend-Name
X-EC-Lua
X-Hosting
X-Esi
Provider
Disablevcache
X-App
X-Artvisual-Server
NZSpeedy
X-WorkerInstancename
X-Varnish-Backend-Healthy
Nginx-Cache
X-Varnish-Error-Restart
X-Cache-Node
X-Varnish-URL
X-Cache-TTL-Remaining
Cpu:
X-Wikidot-Backend
Servername
X-Cache-Keep
Server-Id
X-Wikidot-Static-Cache
RATING
X-Proto
X-OPNET-Transaction-Trace
X-FCMS-Cache
X-Route
X-4ormat-Cacheable
X-Environment
X-Gannett-Site-Version
X-DSMX-Rewrite-MS
Thinkindot-CacheControl-Type
Thinkindot-Control
Thinkindot-CacheControl
X-DSMX-Render-MS
Hosted-By
HOST-SERVICE
Content-Generator
X-Server-Addr
X-Cache-ID
X-Backend-TTL
MSSmartTagsPreventParsing
MSThemeCompatible
X-Cms-Server
X-Phpwcms-Release
X-Header
X-Pagely-Cache
X-Phpwcms-Page-Processed-In
Dispatcher
Content-Instance
X-Meta-MSThemeCompatible
Be
X-B2f-Not-Route
X-Meta-MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
X-Author
X-CACHE-TTL
Cleartype
Yoncu-Errno
X-OCTOPOD
X-SeschatRedID
X-SeschatTemplateID
X-UUID
X-SeschatLayout
X-SeschatDID
X-Request-Processing-Time
X-Request-Received
X-Seschat-URL
X-VARITI-CCR
X-Layout
X-Cjtype
X-WHOIS-Cached
X-Hcom-Styx-Info
WFE
X-HP-CAM-COLOR
Language
X-PoweredBy
SS
X-Mobile
X-RSS-CACHE-STATUS
BKREF
X-Title
X-RequesterIP
X-Ocache
X-HostName
X-Matched-Rule
X-T3CacheTags
X-T3CacheInfo
X-T3Cache
X-Info
X-Rq
X-Distil-CS
X-MCF-ID
WSCLoggingUUID
X-Built-By
X-DEBUG
X-Src-Webcache
X-GRACE
X-Serendipity-InterfaceLangSource
X-Serendipity-InterfaceLang
X-PF-CACHE-FAILED
Aurora-Node
RouteID
X-Nginx-Request-Time
X-Content-Security-Policy-Report-Only
X-Akamai-Edgescape
Session-Id
X-FreeTag-Count
Cache-Control:
X-AppServer-Cache-Rule
X-VC-Enabled
X-Do-Esi
X-Farm-Server
X-Amz-Meta-Cb-Modifiedtime
Tracker
X-SID
Content-Cache
Device
X-Old-Content-Length
Debug-Status
X-Box
X-Cache-Extended
X-Company
X-DataDome
Svr
X-Fedora-School-Id
X-Server-Generated
X-Server-Instance-Name
X-Healthy
X-GoCache-CacheStatus
X-Cache-2
VC-NoCache
X-TB-M
X-Status
Content
X-RAMCache
X-WebNode
XDisk
Response-Time
X-Invoke-Duration
X-NewRelic-App-Data
X-HAProxy
X-Proxy-Cache-Key
X-UA
X-Ratelimit-Remaining
X-Varnish-Instance
X-NewCloud-V-Cache
Powerd-By
X-Bcwwwid
Og
X-Hosts-Backend
X-Pixelsilk-Server
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Time-Spent
X-Pixelsilk-Version
X-Stage
PServer
X-ACCELERATE
X-FastCGI-Cache
ORIGIN
Serverid
MachineName
X-BServer
X-ETag
X-Zendesk-Origin-Server
ReqUrl
X-C
X-Cacheable-TTL
X-BPool
X-Pass-Through
X-Highwire-Sitecode
X-NMT-Proxy
Origin-Server
X-SP-TE
Expiries
LX-Version-Package
Httpd-Identifier
X-E
X-Akamai-Transformed
X-Fpc
X-LW-T
X-Ants-Host
X-Ants-Machine-Id
Expire
FastCGI-Cache
X-Ruxit-JS-Agent
X-Runtime-Memory
X-BC
X-VCS-Ttl
X-IP-Address
X-Front-Cache
X-Protected-By
X-Pageid
X-Provided-By
X-Router-Backend
X-Router
X-DDM-SERVER-UPDATED
X-DDM-SERVER
Lb
X-VhostID
X-ITKG-Cache-Tags
RSL-Trace-ID
Ttl
X-Static
X-Cache-Via
X-Site-Name
X-UltraCart-Inject-Critical-Path-CSS
X-VCS-Nrhit
X-VCS-Host
X-VCS-Hit
X-VCS-Status
X-Frame-Option
X-VCS-Url
X-UltraCart-Server-Round-Trip
X-VCS-Cacheable
X-VCS-Cache-Server
X-UseReverse-Proxy
X-T
X-SuperCache
X-VCS-Billing
X-UltraCart-Critical-Path-CSS-Injected
X-Powered-By-Home.Pl
X-Powered-By-Server
X-Webapp
X-Cache-Device-Type
LX-Site
LX-Static
X-SL-Notranslate
X-ASAP-Cache
X-ASAP-Age
QC-Time
LX-Server-GetCache-Id
LX-Tipo-Container
X-SL-Norewrite
X-Page
HostName
X-Venda-Hitid
X-ORACLE-DMS-RID
X-Clara-ASAP
X-SERVER-ID
X-AG-MIPS
Webserver
AGI-Request-ID
LX-Host-Api
Debug-Expires
Debug-Cache-Control
X-Batcache
CD2
LX-MachineName
LX-Host
MwpReleaseVersion
X-Old-Varnish
X-AISO-Server
X-Rack-Cors
Kanooh-Host
LX-Cliente
LX-Ambiente
LX-Type
X-Nginx-Page-Cache
X-Dynamic
X-DeliveryServer
X-Delivered-By
X-LS-DEBUG
X-PHP-Response-Code
X-ProcessESI
X-Goog-Meta-Policy
LX-Version
X-Client-Ip
CommunityServer
X-Cache-Backend
E-Tag
Hostname
X-Brought-To-You-By
Tempo
X-RemovedCookies
X-Sid
LX-Url-Photo-Container
X-IP
X-UltraCart-Critical-Path-CSS-Key
X-Hit
X-Goog-Meta-Replace
X-Content-Parsed-By
X-Instance-Name
X-SP-AP
LX-Url-Skin-Container
AC-ELC
X-TempoPesquisa
Powered-By-VeryCDN
QC-Hit
X-SP-PR
QC-Key
X-Timing
MageStack-Tag
Url-Hash
P
Kp-EeAlive
X-Built-With
X-Cache-Detail
X-Me
X-CPU-Time
Gzip
F5-IpCliente
Atp-Isdpp
At-Shoptype
At-Isb
Brandcast-Brand-Id
Brandcast-Load-Balancer
ClientIP
Cache-Status
X-LOCATION
X-Does-He-Have-Time
X-Bypass-Ssl-Transform
Served-From
Apache
X-Compressed-By
X-FG-RequestId
X-Apache2-RT-MicroSec
REFRESH
X-Member
X-Ghost-Cache-Status
X-DEBUG-TTL
X-Node-Name
X-Beatles-Hits
ServerIP
X-Dw-Trace-Id
Lookup-Cache-Hit
"
X-Time-Microsecs
X-Diehard-Blocks-Added
X-Diehard-Blocks-Removed
TP-L2-Cache
X-Diehard
Dynatrace
X-PageType
Copyright
TP-Cache
X-Diehard-Tags
X-NewsFlow-DoCache
X-Not-Cacheable
X-NGINX-Cache
E-TAG
X-Faeria
Max-Age
X-Dynamic-Cache
Pv
Requested-Host
X-Would-Your-GrandPa-Wait
Progma
X-VG-WebCache
X-AppServer-Status
X-ClusterID
X-TTL-Age
X-Fe
X-Your-GrandPa-Would-Wait
X-MSU-SOURCE
X-BeResp-Ttl
User-Cache-Control
Pw-Value
X-Clx-Request
X-Forwarded-Server
Fpc-Expire
X-Cache-Time
X-ESI
X-Content-Type
X-Cluster
X-Checkout
X-DB-Content-Length
X-DN-Cache-Control
X-Gyrobase-Publication
X-DPWN-IS-SECURE
X-CCM
WWW
Cdate
X-Varnish-Max-Age
X-Search-Id
CpuTime
Host-Name
PowerCDN
Ozcache
X-HA
X-Hash
X-RequestId
X-ProcessTime
X-Powered-By-Anquanbao
X-Ser
X-Transaction-Id
X-VERSION
X-Varnish-Cache-Control
X-Pj-Cache-Time
X-Pj-Cache-Status
X-Original-Host
X-Name
X-Pj-Cache-Expires
X-Pj-Cache-Flags
X-Pj-Cache-Key
X-Pj-Cache-Gzip
X-Pb-Mii
X-Max-Age
MageStack-Cache-Lifetime
MageStack-Cache-Hits
MageStack-Cache
MageStack-Cache-Status
MageStack-Cache-Warning
MageStack-Config
MageStack-Cacheable
MageStack-Area
X-Nginx-VM-RT
X-Expose-Hostname
X-Expose-Generated
X-Expose-Site
X-Expose-Took
X-EZPublish-NodeID
X-EZPublish-InstallationID
MageStack-Debug
MageStack-Loadbalancer
X-Flex-Lang
X-Flex-Evstart
X-Flex-Evend
X-Flex-Lastmod
X-Flex-Tag
X-Generated
X-Flex-Tags
X-Flex-Community
X-Device-Group
X-NewsFlow-Sitename
MageStack-PageSpeed
MageStack-Web-Node
Pool
Www.Aujourdhui.Com
SiteName
X-Accel-Cache-Control