Threat Level: green Handler on Duty: Russell Eubanks

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Connection
Set-Cookie
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
P3P
X-Frame-Options
X-XSS-Protection
X-Pingback
X-Cache
X-AspNet-Version
Content-Language
Age
CF-RAY
X-UA-Compatible
Strict-Transport-Security
Via
X-Adblock-Key
Access-Control-Allow-Origin
X-Varnish
X-Template
X-Language
X-Check
X-Buckets
X-Generator
X-Cacheable
X-Drupal-Cache
Content-Location
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Powered-By-Plesk
X-Request-Id
P3p
X-Type
X-Pass-Why
X-Cache-Group
MS-Author-Via
X-Runtime
WP-Super-Cache
X-Powered-CMS
X-Cache-Hits
Status
X-Permitted-Cross-Domain-Policies
Host-Header
X-Download-Options
Ngpass-Ngall
X-UA-Device
X-ShardId
X-Dc
X-ShopId
X-Alternate-Cache-Key
Access-Control-Allow-Credentials
X-Request-ID
Keep-Alive
Content-Security-Policy
Access-Control-Allow-Headers
X-Via
X-Iinfo
X-Tumblr-Pixel-0
X-Tumblr-User
X-Tumblr-Pixel
Access-Control-Allow-Methods
X-Tumblr-Pixel-1
X-Mod-Pagespeed
X-Logged-In
X-Served-By
X-Backend
X-Pad
X-Tumblr-Pixel-2
X-Contextid
X-ServedBy
Upgrade
X-PC-Hit
X-PC-Key
X-Xss-Protection
X-CDN
Powered-By
X-Cache-Status
X-Server
X-Host
X-Cache-Hit
Content-Encoding
X-PC-AppVer
X-PC-Host
X-PC-Date
X-Tumblr-Pixel-3
X-Port
X-Timer
X-Robots-Tag
X-Accel-Version
X-Varnish-Cache
X-Cache-Lookup
X-Amz-Cf-Id
X-Server-Powered-By
X-Rack-Cache
X-Cnection
X-Request-Country
SPRequestGuid
MicrosoftSharePointTeamServices
X-SharePointHealthScore
MicrosoftOfficeWebServer
X-Turbo-Charged-By
Alt-Svc
X-Page-Speed
X-Safe-Firewall
X-Content-Powered-By
CF-Cache-Status
X-XRDS-Location
X-MS-InvokeApp
Rating
X-AH-Environment
X-Tumblr-Content-Rating
X-Node
X-Tumblr-Pixel-4
X-Cache-Enabled
X-Content-Digest
X-GitHub-Request-Id
Public-Key-Pins
X-FullPageCaching
X-PhApp
Timing-Allow-Origin
Content-Security-Policy-Report-Only
X-Ua-Compatible
X-INKT-SITE
X-INKT-URI
Request-Id
X-Webserver
Composed-By
X-W-DC
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
X-Proxy-Cache
SPIisLatency
SPRequestDuration
Served-By
X-HeyJason
Permitted-Cross-Domain-Policies
X-Amz-Id-2
X-Amz-Request-Id
X-Firenze-Processing-Times
Cf-Railgun
Liferay-Portal
X-SERVER
X-Swift-CacheTime
X-Swift-SaveTime
X-Hyper-Cache
EagleId
X-Spip-Cache
Access-Control-Expose-Headers
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Styx-Version
X-Pantheon-Endpoint
Surrogate-Key-Raw
X-Drupal-Dynamic-Cache
Access-Control-Max-Age
Charset
Xkey
X-Nginx-Cache-Status
X-Content-Security-Policy
X-Tumblr-Pixel-5
X-Server-Name
Surrogate-Key
Grace
X-CDN-Pop
X-CDN-Pop-IP
Content-MD5
X-Hits
Content-Script-Type
Content-Style-Type
X-FW-Hash
Access-Control-Allow-Method
X-FB-Debug
X-Dw-Request-Base-Id
X-Device
X-FW-Serve
X-FW-Static
X-FW-Type
X-VCache
X-CF-Powered-By
X-VWS-Id
X-AWS-Id
X-LJ-Flow-ID
Public-Key-Pins-Report-Only
X-Backend-Server
X-XN-Trace-Token
X-XN-XNHTML
Refresh
X-Fastly-Request-ID
X-User-Agent
X-Tumblr-Adult-Blog
X-Clacks-Overhead
X-Loop
Real-Hostname
X-TNCMS
X-DDC-Arch-Trace
X-LiteSpeed-Cache
X-Cache-Server
X-Jimdo-Wid
X-Jimdo-Instance
X-Cache-Config
X-Cache-Result
X-Tumblr-Pixel-6
X-ServerName
X-Cloud-Trace-Context
X-Age
X-Generated-By
Fastly-Debug-Digest
X-Umbraco-Version
Edge-Control
X-Cached-By
X-Powered-By-360WZB
WZWS-RAY
X-MiniProfiler-Ids
Surrogate-Control
X-Cached
X-Outils-CS
X-DynaTrace-JS-Agent
X-URL
Cartoon
NS-RTIMER-COMPOSITE
X-CMS-Version
X-Hostname
X-Px
PageSpeed
Fpc-Cache-Id
X-Whom
X-DynaTrace
X-Url
TCN
DynaTrace
X-Newrelic-App-Data
Response
X-WebKit-CSP
X-Forwarded-For
X-BC-Stapler
Front-End-Https
X-AspNetWebPages-Version
Product
Rt-Fastcgi-Cache
X-Handled-By
X-Content-Options
X-Middleton-Response
Display
X-Sol
X-Middleton-Display
ServedBy
Imagetoolbar
X-Varnish-Cache-Hits
Access-Control-Request-Method
Edge-Control-Message
Origin
X-Do-Not-Hack
X-TTL
X-Micro-Cache
X-NetCat-Version
X-From
X-Recruiting
Akamai-IP
X-Engine
Fhost
Server-Info
Generator
X-LiteSpeed-Cache-Control
X-FORWARDED-FOR
Page-Completion-Status
X-Content-Encoded-By
X-Msg-2-Log
Alternate-Protocol
X-App-Hosting
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Status
X-Country-Code
IBM-Web2-Location
X-Servedby
Referrer-Policy
X-I
X-Director
X-Hosted-By
X-Matrix-Server
X-Returned-From-DLL
X-Passed-To
X-Original-Request
X-Passed-To-DLL
X-Actual-URL
X-Returned-From
X-Matrix-Proxy
X-Stale
Surrogate-Keys
X-Passed-To-PostProcessResponse
X-Passed-To-BeforeDispatch
X-Track
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Cache-Info
X-UD-Method
X-Xrds-Location
X-BS
X-EC-Security-Audit
X-I-Sp
X-Abuse
X-Response-Time
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Host
X-Cache-Rule
X-Cache-Age
X-CacheServer
X-Firenze-Processing-Time
X-Expires-Orig
X-ApacheServer
X-S
X-PERF
Powered-By-ChinaCache
X-Varnish-TTL
X-Server-ID
X-Location-Id
X-Dispatcher
Content-Encoding-Handler
X-Platform
X-Microcachable
X-Varnish-Backend
X-SDS
X-Varnish-Host
X-DNS-Prefetch-Control
Magicmarker
Powered
Ag-Server-Time
X-Last-Modified
X-Varnish-Cacheable
Ag-Send-Time
Ag-Execution-Time
Content-Disposition
X-Request-Time
X-Gamma-Serve
X-RESOURCE
X-URLSCHEME
X-Daa-Tunnel
X-Varnish-RemainingTTL
X-Varnish-ObjectSource
X-Varnish-GracePeriod
X-Magnolia-Registration
X-Varnish-Seen-By
X-Varnish-RemainingLife
MIME-Version
X-VTEX-Janus-Router-Backend-App
X-Powered-By-VTEX-Janus-Edge
X-HOST
X-Vtex-Processado-Em:
X-Vtex-Remote-Cache
X-VTEX-Cache-Status-Janus-Edge
X-Powered-By-VTEX-Janus-ApiCache
X-CJ-Soft
X-Origin
No
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Processed-At
X-Goog-Hash
X-Version
X-Cache-TTL
X-B-Cache
X-Device-Type
X-Duration
X-Microcache-Status
X-Translation
Lsrequestid
X-Developer
ServerName
X-Upstream
Node
X-Route-Server
Fastcgi-Cache
X-Cache-Operation
X-ATG-Version
X-Cache-Lifetime
Proxy-Agent
X-Varnish-Age
X-Instart-Request-ID
USPLoggingUUID
X-Server-Id
X-DefendeR-Status
X-DefendeR-Runtime
ServerID
Req-Id
X-Storage
X-Revision
X-Cache-Debug
X-Rocket-Nginx-Bypass
X-Zen-Fury
Proxy-Connection
Version
X-OneAgent-JS-Injection
Arr-Disable-Session-Affinity
SN
X-Fastcgi-Cache
PICS-Label
X-Source
X-Cf-Powered-By
X-Amz-Version-Id
X-PwB-Node
Location
Webluker-Edge
Last-Published
X-Cache-Tags
X-Debug
X-Front
X-ServerID
X-UPSTREAM
Srv
X-Kinsta-Cache
Buuteeq-Source
RTSS
X-Art-Request-Id
Cache
X-Cache-Control-Orig
X-Client-IP
Content-Security-Policy-Rerport-Only
X-Akamai-Device-Model
X-AOL-HN
X-Edge-Location
X-WEBSERVER
X-Nbs
X-Vcap-Request-Id
X-Akamai-Device-Characteristics
X-Cache-Expires
Accept-Charset
X-Platform-Router
X-Correlation-Id
X-Platform-Processor
Ufe-Result
X-LB
X-NoCache
X-Purge-URL
X-Geo-IP
X-Cache-Key
Content-Hash
X-Frontend
X-FW
X-SV-Duration
X-Drectory-Script
X-SV-Edge
X-SV-CreatedAt
X-SV-CacheTags
X-Server-Upstream
X-Grace
Backend
X-SV-Expires
X-Varnish-HitMiss
Cache-Key
X-Page-Cache
X-Dispatch
X-SV-Pid
X-SV-Nginx-Duration
X-Varnish-Count
X-SV-FromDBCache
X-LB-Node
X-Varnish-Hits
X-ClientSide-Caching
S
X-Content-Age
X-Mobile-URL
Warning
X-N
W
X-Mobilized-By
X-Edge-IP
X-Hypernode
X-ACMCache
X-Application-Context
Content-Transfer-Encoding
X-B2f-Cache-Load
AMF-Ver
MJ12bot
SEOMOZ
WSR-Cache
X-Platform-Cache
X-CDN-Forward
X-Purge-Host
X-SE-Debug
Cm-Server
X-Varnish-Hostname
Author
X-Ttl
NetMindSessionID
Accept-Encoding
HAVer
X-Config-Blacklist-Version
HCVer
X-Nurl
X-NFE
X-Nhost
Pics-Label
X-Twitter-Response-Tags
X-SSL-Protocol
X-Varnish-IP
Cached
X-Yadis-Location
X-PF-Uncompressing
X-SSL-Cipher
X-Real-Server
X-Transaction
X-Cache-Doesi
X-Connection-Hash
X-CDN-Node
X-CDN-Cache-Status
X-Orig-Vary
X-Cookie-Domain
X-Discourse-Route
X-NB-Cached-Page
X-NginX-Node
X-NginX-Upstream-Addr
X-NginX-Upstream-Response-Time
X-Processed-By
Rewriter
X-Speed-Cache-Key
X-AbeBooks-Version
X-NginX-Upstream-Status
X-Geo-IPV
X-Processing-Time
X-Geo-IP-Metro
X-Geo-IP-Country
X-Speed-Cache
X-Geo-IP-Region
X-WebServer
Qs-Cache
Host-Service
X-Supported-By
Retry-After
Nodo
X-Cocoon-Version
X-BKSrc
X-Trace
A-Powered-By
Mobiquo-Is-Login
X-Blog
X-Garden-Version
X-Sys-Req-ID
Filter-Revision
X-Varnish-Server
SSPAppContext
X-Directory-Script
X-WR-Flags
X-Browser
X-BackendServer
X-Empowered-By
S-Cnection
CC-CACHE
X-Adobe-Content
CT
X-GeoIP
Thanks
X-Nginx-Host
X-Adobe-Loc
X-Session-Reinit
X-Avvio-Cms-Cacheload
X-Time
X-Unique-ID
X-Hit-Cache
X-Pagename
X-GeoIP-Country-Name
Server-Name
X-Yottaa-Metrics
X-F-Cache
X-Key
X-Resolver-IP
X-Yottaa-Optimizations
X-Cache-Engine
X-GeoIP-Country-Code
Front
X-AOL-SNH
X-Prefetched
X-Framework
X-Env
X-TTFB-L
X-Vhost
Cteonnt-Length
X-StackifyID
X-HP-Trace-ID
X-HP-Trace-Project
X-TTFB
X-SmugMug-Values
X-SmugMug-Hiring
SRV
Smug-CDN
MW-Webserver
Frame-Options
Machine
X-Plat-Va-Ip
X-Plat
X-Cache-Only-Varnish
X-ORACLE-DMS-ECID
X-SmartBan-Host
X-Cache-Fix
X-Plat-Be-Ip
X-Cache-PageType
X-V
X-SmartBan-URL
X-Cache-Control
Ngpass-Vcall
X-Magento-Tags
X-Highwire-RequestId
WWW-Authenticate
X-Highwire-SessionId
Ibm-Web2-Location
Eomportal-Instance
X-ARC
Ibf5scheme
X-Machine-Name
X-Signature
Nitro-Cache
X-Nginx-Cache
Section-Io-Id
X-LW-Web-Server
X-Worker
X-IIJ-Cache
Backend-Timing
X-Varnish-Ttl
X-Analytics
A
X-IsCacheURL
X-Amz-Storage-Class
IISExport
X-Config-By
X-Jphone-Copyright
X-RiS-UFDI
SVR
BALANCEDTO
NODE
X-EDGECONNECT-GUID-DEBUG
Pool-Info
X-ServerIndex
Myheader
X-App-Server
X-HydroSheep
X-Balanceador
X-Symfony-Cache
Resin-Trace
Keywords
X-HOSTNAME
X-WA-Info
MC
P-LB
P-WS
Mime-Version
COMMERCE-SERVER-SOFTWARE
Allow
NnCoection
X-Webcelerate
X-Sucuri-ID
Beyond-Iis
X-NginX-Cache
X-Grid-Server
X-HTML-Minification-Powered-By
X-ID
X-Airee-Node
Content-Server
Cneonction
AsisCache
X-Hiawatha-Cache
Identity
X-Server-Response-Time
X-Span
X-Smartcache-Keys
X-LB-Server
X-Atraveo-Zone
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
X-EdgeConnect-Origin-MEX-Latency
X-Atraveo-Set-Cookie
X-Atraveo-Varnish-Server-Id
X-Atraveo-TTL
Real-Server
X-Atraveo-ETag
X-Atraveo-Param-Rm
X-WP
X-AEM
INCOMING-TIME
X-Atraveo-Cache-Control
X-Real-IP
X-Smartcache-Timeout
X-EdgeConnect-MidMile-RTT
Head
X-Srv
X-Restarts
X-We-Are-Hiring
X-Frames-Options
X-HW
Id
XDomainRequestAllowed
X-Detected-Device
X-Domain-Checked
X-Provisioner-Version
X-App-Status
X-Flow-Powered
CacheControlHeader
From
Actual-Object-TTL
ScoreTracker
X-PRAM
X-Force
X-Server-IP
RN-Server
Il-Cl
X-Webstats-RespID
Logging-CorrelationId
Proxy-Cache
X-Cache-Provider
X-Domino-CacheValidationWithETagResult
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-Cache-Source
X-Varnish-Debug-TTL
X-Varnish-Debug-Age
X-REDIRECTSERVER
CLMOB
X-Lifetime
X-Varnish-Cache-Local
X-Amz-Id-1
X-HostName
X-Domino-CacheValidationWithETagReason
X-Nitra-Side
X-Origin-Id
Ec
X-Server-Start-Time
VAR-Cache
ServerTokens
X-NginX-Server
X-PG
ServerSignature
X-MrHost
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Response
X-Platform-Server
Sid
X-DTC
X-Pressidium-NinukisWP-Ver
X-Trace-Id
X-Cache-Level
X-B
X-Client-Image-Vid
X-Client-Vid
X-EPiphany-Vid
X-RDP
X-CB-Server
X-Goog-Storage-Class
X-JG-Page-Cache
X-A
Set-Cookie2
Paypal-Debug-Id
X-AWS
X-GSL-Server
Xc
Cluster-ID
Description
N365rili
Sophnep-Edge-FX
X-Cache-On
X-Desc
X-Actindo-RS
Hash
Rel
Web
X-Litespeed-Cache-Control
Prxy
Provider
X-Amz-Meta-S3cmd-Attrs
X-B2f-Not-Route
X-KoobooCMS-Version
X-DSMX-Render-MS
X-DSMX-Rewrite-MS
X-Esi
X-Goog-Metageneration
X-Goog-Generation
X-Cache-CFC
NtCoent-Length
X-Optimization
X-Accel-Expires
Cmsid
X-SRV
ORIGIN
X-Unbounce-PageId
X-Unbounce-Variant
X-Dynatrace
X-Unbounce-VisitorID
X-HITS
X-Nginx
NS-VaryByCustom-Key
X-Rack-CORS
WP-AdvCache-MemCached
X-DealerOn
X-Sucuri-Cache
X-Dns-Prefetch-Control
Cmstype
X-Id
X-Server-Instance
Imx-Cookies-Used
Thinkindot-Control
X-Appmachine-Environment
X-Oracle-DMS-ECID
X-Dev
X-Cms-Mode
X-Hstore
X-Ob-Mode
X-This-Proto
X-Runtime-Affili
X-VC-TTL
X-Is-Mobile
X-SilverStripe-Cache
Note
X-ACLR-Version
X-FCMS-Cache
Fw-Via
Fw-Cache-Status
X-Cache-Action
X-Varnish-Action
Hosted-By
X-Magento-Action
X-Jcms-Ajax-Id
X-FIRSTBase
X-RealServer
X-SDE-Name
X-Site:
If-Modified-Since
Thinkindot-CacheControl
X-Enhanced-By
X-Hrouter
Content-Generator
Device-Type
X-Source-ID
B-Powered-By
Thinkindot-CacheControl-Type
Worker
X-OPNET-Transaction-Trace
IsMobile
X-ASAP-Cache
X-Captured
X-Clara-ASAP
X-WR-MODIFICATION
X-Upstream-Backend
X-DataDome
X-Forwarded-Proto
X-AccessDev
X-ProxyInstancename
VServer
X-7d-Instance-Id
X-Render-Time
X-Forwarded-Host
Cpu
PServer
X-Environment
X-SV
X-RequestId
X-7d-Trace-Id
X-T3CacheTags
X-T3CacheInfo
X-T3Cache
OT-RequestId
X-MAT-GEO
Ram
X-Ocache
IM-Version
X-OpenCart-Lightning
X-Apm-Telemetry-Syncmark
X-RequesterIP
X-Vary-Options
X-App-Runtime
X-RSS-CACHE-STATUS
X-Matched-Rule
Yoncu-Errno
Noq
D
Accept-Language
Backend-Node
X-Distributor
X-ACCELERATE
Bios
X-Cache-Me-Harder
RATING
X-Cache-Keep
X-EC-Lua
X-Stage
X-Hosting
X-Wikidot-Static-Cache
Servername
X-Wikidot-Backend
Fastly-Backend-Name
NLCacheNote
Noq:
Cpu:
Ram:
X-Varnish-Backend-Healthy
Ctx
X-Varnish-Error-Restart
X-COUNTRY-CODE
X-Cache-Node
Server-Id
Server-Ip
X-WorkerInstancename
X-Varnish-URL
X-CacheResult
X-Cache-TTL-Remaining
X-CSRF-TOKEN
Nginx-Cache
NZSpeedy
X-Distributed-By
X-Route
X-Varnish-Store
X-Varnish-Set-Cookie
X-Farm-Server
X-Turpentine-Cache
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-HP-CAM-COLOR
X-Ratelimit-Remaining
X-Hosts-Backend
X-HAProxy
X-Do-Esi
X-Varnish-Esi-Access
X-Varnish-Currency
X-Varnish-Esi-Method
Tracker
MwpReleaseVersion
Content-Cache
CD2
X-AG-MIPS
X-SID
X-Venda-Hitid
X-ORACLE-DMS-RID
X-ASAP-Age
AGI-Request-ID
X-PoweredBy
X-OCTOPOD
WFE
X-Amz-Meta-Cb-Modifiedtime
SS
Progma
Device
X-WHOIS-Cached
X-AppServer-Cache-Rule
X-Custom-Header
HOST-SERVICE
Hamster
X-Src-Webcache
MSSmartTagsPreventParsing
X-Tile-Url
X-Phpwcms-Page-Processed-In
X-Phpwcms-Release
X-Author
X-CACHE-TTL
X-Meta-MSThemeCompatible
X-4ormat-Cacheable
X-Proto
X-Meta-MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
X-Secret
X-Pagely-Cache
X-Cache-Handler
X-Info
X-Server-Addr
M
X-PBY
X-Qnm-Cache
RequestId
X-Server-By
X-Catalyst
X-APP
X-MCF-ID
X-MSEdge-Ref
X-Bcwwwid
Powerd-By
Og
Cache-Rule
X-Varnish-Instance
MSThemeCompatible
RouteID
CmsCacheEngine
Session-Id
X-Content-Security-Policy-Report-Only
X-Nginx-Request-Time
X-Serendipity-InterfaceLangSource
X-Serendipity-InterfaceLang
Disablevcache
Cache-Control:
X-FreeTag-Count
X-Pj-Cache-Gzip
X-Old-Content-Length
X-RAMCache
X-Cache-2
X-DEBUG
X-Fedora-School-Id
X-GoCache-CacheStatus
VC-NoCache
Response-Time
X-Status
X-TB-M
X-WebNode
XDisk
X-VC-Enabled
X-Time-Spent
Cdate
X-Pj-Cache-Expires
X-Gyrobase-Publication
Be
Cleartype
Host-Name
X-Pj-Cache-Flags
X-Pj-Cache-Key
X-Pj-Cache-Status
X-Pj-Cache-Time
PowerCDN
Content-Instance
Dispatcher
X-Header
X-NewCloud-V-Cache
X-Pixelsilk-Server
X-Pixelsilk-Version
X-Cms-Server
X-Cache-Set
X-Backend-TTL
X-DN-Cache-Control
X-CCM
X-Cache-ID
X-Healthy
X-PF-CACHE-FAILED
X-Server-Generated
X-Akamai-Edgescape
X-Company
X-Depends
Debug-Status
X-Box
X-Server-Instance-Name
X-Invoke-Duration
Content
X-Cache-Extended
X-NewRelic-App-Data
X-GRACE
X-Varnish-Cache-Control
Svr
X-Turpentine-Esi
X-Cluster-Node
X-FastCGI-Cache
X-Rewritten-By
X-Backend-Name
Serverid
X-ManagedFusion-Rewriter-Version
X-VCS-Hit
X-VCS-Host
X-Router-Backend
X-VCS-Billing
X-Site-Name
X-SuperCache
X-VCS-Cacheable
X-VCS-Cache-Server
X-T
X-UseReverse-Proxy
X-VCS-Status
MachineName
X-Zendesk-Origin-Server
ReqUrl
X-Highwire-Sitecode
Expire
X-Webapp
X-VCS-Url
X-Router
X-VCS-Nrhit
Debug-Cache-Control
X-VCS-Ttl
X-Uid
Debug-Expires
X-RateLimit-Remaining
X-HA
X-DPWN-IS-SECURE
X-DB-Content-Length
X-Hash
X-Name
X-Powered-By-Anquanbao
X-Original-Host
X-Content-Type
X-Cluster
X-Origin-Cache
X-Obr-Rule
X-NID
CpuTime
Ozcache
X-Checkout
WWW
X-ProcessTime
X-PM-ID
X-DDM-SERVER-UPDATED
X-DDM-SERVER
X-Cache-Via
Origin-Server
X-Front-Cache
X-Pageid
X-IP-Address
Ttl
RSL-Trace-ID
X-VERSION
X-Transaction-Id
X-Ser
X-Accel-Cache-Control
X-Batcache
Lb
X-ITKG-Cache-Tags
X-Provided-By
X-Frame-Option
X-Rack-Cors
X-UltraCart-Server-Round-Trip
X-ETag
X-UltraCart-Inject-Critical-Path-CSS
X-UltraCart-Critical-Path-CSS-Key
LX-Ambiente
Kanooh-Host
X-Runtime-Memory
X-Ruxit-JS-Agent
Httpd-Identifier
QC-Time
Expiries
Webserver
X-Old-Varnish
X-AISO-Server
LX-Cliente
LX-Host
LX-Url-Photo-Container
LX-Type
X-Powered-By-Home.Pl
LX-Url-Skin-Container
LX-Version
X-Fpc
LX-Version-Package
X-Powered-By-Server
LX-Tipo-Container
LX-MachineName
LX-Host-Api
LX-Server-GetCache-Id
LX-Site
X-UltraCart-Critical-Path-CSS-Injected
LX-Static
X-Cache-Backend
QC-Key
X-Brought-To-You-By
Tempo
Hostname
X-Client-Ip
X-Delivered-By
X-Dynamic
X-DeliveryServer
E-Tag
CommunityServer
X-E
X-UA
X-LW-T
X-Timing
X-DOM
X-SL-Notranslate
X-LS-DEBUG
X-PHP-Response-Code
X-Goog-Meta-Policy
X-TempoPesquisa
X-Sid
AC-ELC
Powered-By-VeryCDN
QC-Hit
X-Cache-Device-Type
X-Goog-Meta-Replace
X-Instance-Name
X-ProcessESI
X-SL-Norewrite
X-RemovedCookies
X-SERVER-ID
X-Nginx-Page-Cache
X-Page
X-Akamai-Transformed
MageStack-PageSpeed
X-Fstrz
X-Dw-Trace-Id
X-Diehard
X-Ghost-Cache-Status
X-Member
X-Unique-Id
Dynatrace
X-Diehard-Blocks-Added
X-Diehard-Blocks-Removed
X-Node-Name
X-NewsFlow-Sitename
X-NGINX-Cache
X-NewsFlow-DoCache
X-Faeria
X-Diehard-Tags
X-Dynamic-Cache
X-PageType
Served-From
X-TTL-Age
X-Would-Your-GrandPa-Wait
REFRESH
X-Apache2-RT-MicroSec
X-Artvisual-Server
X-Me
X-Cache-Time
X-Your-GrandPa-Would-Wait
Fpc-Expire
X-BeResp-Ttl
X-Bypass-Ssl-Transform
X-Compressed-By
X-FG-RequestId
Pw-Value
X-Gannett-Site-Version
X-Not-Cacheable
X-LOCATION
X-Fe
X-ClusterID
X-AppServer-Status
X-Time-Microsecs
"
At-Isb
TP-L2-Cache
Copyright
Pv
X-Forwarded-Server
X-MSU-SOURCE
X-Clx-Request
X-VG-WebCache
Requested-Host
User-Cache-Control
At-Shoptype
Atp-Isdpp
P
E-TAG
Max-Age
Url-Hash
X-Built-With
X-CPU-Time
X-Cache-Detail
Kp-EeAlive
Gzip
Brandcast-Brand-Id
TP-Cache
Brandcast-Load-Balancer
Cache-Status
F5-IpCliente
ClientIP
X-ESI
X-Expose-Generated
Apache
Pool
MageStack-Web-Node
SiteName
Www.Aujourdhui.Com
X-Cjtype
X-App
MageStack-Tag
MageStack-Loadbalancer
MageStack-Cache-Status
MageStack-Cache-Lifetime
MageStack-Cache-Warning
MageStack-Cacheable
MageStack-Debug
MageStack-Config
X-Device-Group
X-Flex-Community
X-Mobile
X-Max-Age
X-Layout
X-Pb-Mii
X-Rq
X-Title
X-Search-Id
X-Hcom-Styx-Info
X-Generated
X-Flex-Evstart
X-Flex-Evend
X-Flex-Lang
X-Flex-Lastmod
X-Flex-Tags
X-Flex-Tag
MageStack-Cache-Hits
MageStack-Cache
DrivedBy
X-Beatles-Hits
BKREF
VANITY-HOST
WSCLoggingUUID
ServerIP
X-Built-By
X-DEBUG-TTL
X-Does-He-Have-Time
X-Expose-Site
X-Expose-Hostname
X-Expose-Took
X-EZPublish-InstallationID
X-Nginx-VM-RT
X-EZPublish-NodeID
Lookup-Cache-Hit
X-Distil-CS
X-UUID
X-SeschatTemplateID
X-SeschatRedID
X-VARITI-CCR
X-Vhost-ID
MageStack-Area
Language
X-SeschatLayout
X-SeschatDID
X-FFX-B
X-ESI-Enable
X-Pubstack
X-Request-Processing-Time
X-Seschat-URL
X-Request-Received
X-Varnish-Max-Age