Threat Level: green Handler on Duty: Russell Eubanks

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Connection
Set-Cookie
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
P3P
X-Frame-Options
X-XSS-Protection
X-Pingback
X-Cache
X-AspNet-Version
Content-Language
Age
CF-RAY
X-UA-Compatible
Strict-Transport-Security
Via
X-Adblock-Key
Access-Control-Allow-Origin
X-Varnish
X-Language
X-Check
X-Template
X-Buckets
X-Generator
X-Cacheable
Content-Location
X-Drupal-Cache
X-AspNetMvc-Version
X-Hacker
X-Ac
P3p
X-Powered-By-Plesk
X-Request-Id
X-Type
X-Cache-Group
X-Pass-Why
MS-Author-Via
X-Runtime
WP-Super-Cache
X-Powered-CMS
X-Cache-Hits
Status
X-Permitted-Cross-Domain-Policies
Host-Header
X-Download-Options
Ngpass-Ngall
X-UA-Device
X-ShopId
X-Alternate-Cache-Key
X-Dc
X-ShardId
Access-Control-Allow-Credentials
X-Request-ID
Keep-Alive
Content-Security-Policy
Access-Control-Allow-Headers
X-Via
X-Iinfo
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
Access-Control-Allow-Methods
X-Tumblr-Pixel-1
X-Mod-Pagespeed
X-Logged-In
X-Served-By
X-Backend
X-Tumblr-Pixel-2
X-Pad
X-Contextid
X-ServedBy
X-PC-Hit
X-PC-Key
X-Xss-Protection
Upgrade
Powered-By
X-Cache-Status
X-CDN
X-Host
X-Server
X-Cache-Hit
Content-Encoding
X-PC-AppVer
X-PC-Date
X-PC-Host
X-Tumblr-Pixel-3
X-Port
X-Timer
X-Robots-Tag
X-Accel-Version
X-Cache-Lookup
X-Server-Powered-By
X-Varnish-Cache
X-Rack-Cache
X-Amz-Cf-Id
X-Cnection
X-Request-Country
SPRequestGuid
MicrosoftSharePointTeamServices
X-SharePointHealthScore
X-Safe-Firewall
MicrosoftOfficeWebServer
X-Page-Speed
Alt-Svc
X-Turbo-Charged-By
X-Content-Powered-By
CF-Cache-Status
Rating
X-MS-InvokeApp
X-XRDS-Location
X-AH-Environment
X-Tumblr-Content-Rating
X-Tumblr-Pixel-4
X-Cache-Enabled
X-Node
X-Content-Digest
X-GitHub-Request-Id
Public-Key-Pins
Timing-Allow-Origin
X-Ua-Compatible
X-PhApp
Content-Security-Policy-Report-Only
X-FullPageCaching
X-INKT-SITE
X-INKT-URI
Request-Id
X-Webserver
X-W-DC
Composed-By
SPIisLatency
SPRequestDuration
X-Seen-By
X-Proxy-Cache
X-Wix-Renderer-Server
Served-By
X-Wix-Request-Id
X-Firenze-Processing-Times
Permitted-Cross-Domain-Policies
X-HeyJason
X-Amz-Id-2
X-Amz-Request-Id
Cf-Railgun
X-SERVER
Liferay-Portal
X-Swift-CacheTime
X-Swift-SaveTime
EagleId
X-Hyper-Cache
X-Spip-Cache
Access-Control-Expose-Headers
X-Styx-Version
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Pantheon-Endpoint
Surrogate-Key-Raw
Xkey
X-Nginx-Cache-Status
Access-Control-Max-Age
X-Drupal-Dynamic-Cache
X-Content-Security-Policy
Charset
X-Tumblr-Pixel-5
X-Server-Name
Surrogate-Key
Grace
Content-MD5
X-CDN-Pop-IP
X-CDN-Pop
Content-Script-Type
X-Hits
Content-Style-Type
Access-Control-Allow-Method
X-FW-Hash
X-Device
X-Dw-Request-Base-Id
X-FB-Debug
X-LJ-Flow-ID
X-VWS-Id
X-AWS-Id
X-FW-Type
X-FW-Serve
X-FW-Static
Refresh
X-CF-Powered-By
X-VCache
Public-Key-Pins-Report-Only
X-XN-Trace-Token
X-XN-XNHTML
X-User-Agent
X-Backend-Server
X-Fastly-Request-ID
X-Tumblr-Adult-Blog
X-Clacks-Overhead
X-DDC-Arch-Trace
X-Jimdo-Instance
Real-Hostname
X-Jimdo-Wid
X-TNCMS
X-Loop
X-LiteSpeed-Cache
X-Cache-Config
X-Age
Fastly-Debug-Digest
X-Cache-Server
X-ServerName
X-Cloud-Trace-Context
X-Tumblr-Pixel-6
X-Generated-By
X-Umbraco-Version
X-Cache-Result
Edge-Control
X-Cached-By
X-MiniProfiler-Ids
X-Powered-By-360WZB
WZWS-RAY
X-Cached
X-Hostname
X-Outils-CS
X-Px
X-DynaTrace-JS-Agent
Surrogate-Control
X-CMS-Version
PageSpeed
NS-RTIMER-COMPOSITE
X-Url
Cartoon
X-URL
Fpc-Cache-Id
X-Whom
X-DynaTrace
TCN
DynaTrace
X-Newrelic-App-Data
Response
X-WebKit-CSP
Product
X-Sol
X-Middleton-Response
X-Middleton-Display
Display
X-BC-Stapler
X-Forwarded-For
Rt-Fastcgi-Cache
X-Handled-By
X-AspNetWebPages-Version
Front-End-Https
Origin
X-Content-Options
Imagetoolbar
ServedBy
Edge-Control-Message
X-Do-Not-Hack
Access-Control-Request-Method
X-From
X-Varnish-Cache-Hits
X-Micro-Cache
Akamai-IP
X-Recruiting
X-NetCat-Version
Page-Completion-Status
Fhost
X-FORWARDED-FOR
X-Msg-2-Log
X-TTL
Server-Info
X-LiteSpeed-Cache-Control
Generator
X-Content-Encoded-By
X-Servedby
X-Engine
X-Varnish-Beresp-Ttl
X-Hosted-By
X-UD-Method
X-Director
X-Varnish-Beresp-Grace
Alternate-Protocol
X-Varnish-Beresp-Status
X-I
Referrer-Policy
X-App-Hosting
X-Passed-To-DLL
X-Original-Request
X-Passed-To
X-Actual-URL
X-Returned-From
X-Returned-From-DLL
X-Country-Code
X-Stale
X-Track
X-Xrds-Location
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Passed-To-BeforeDispatch
X-EC-Security-Audit
IBM-Web2-Location
X-BS
X-I-Sp
X-Cache-Info
X-Firenze-Processing-Time
X-Matrix-Proxy
X-Matrix-Server
Content-Encoding-Handler
X-ApacheServer
X-CacheServer
X-Abuse
Powered
X-PERF
X-Cache-Age
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Surrogate-Keys
X-Cache-Rule
X-Varnish-Backend
Host
X-Dispatcher
X-Powered-By-VTEX-Janus-Edge
X-Response-Time
X-VTEX-Cache-Status-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-Daa-Tunnel
X-Powered-By-VTEX-Janus-ApiCache
No
X-VTEX-Cache-Status-Janus-Edge
X-Vtex-Processado-Em:
X-Vtex-Remote-Cache
X-Vtex-Processed-At
X-S
X-SDS
X-B-Cache
Magicmarker
X-Expires-Orig
X-Last-Modified
Ag-Send-Time
Ag-Server-Time
Ag-Execution-Time
Powered-By-ChinaCache
X-Cache-TTL
X-Version
X-Upstream
X-Duration
X-Platform
X-Gamma-Serve
X-Microcachable
X-DNS-Prefetch-Control
X-HOST
X-Varnish-TTL
X-Location-Id
X-RESOURCE
X-URLSCHEME
X-Varnish-Host
X-Goog-Hash
X-Request-Time
X-Varnish-Cacheable
X-Varnish-RemainingLife
X-Varnish-RemainingTTL
X-Varnish-ObjectSource
X-Varnish-GracePeriod
X-Developer
X-Varnish-Seen-By
X-Server-Id
X-Magnolia-Registration
X-ATG-Version
Content-Disposition
X-Origin
MIME-Version
Lsrequestid
ServerName
X-Server-ID
X-Microcache-Status
X-Translation
X-Device-Type
Proxy-Agent
USPLoggingUUID
X-Varnish-Age
X-Instart-Request-ID
X-Revision
X-Route-Server
X-DefendeR-Status
X-DefendeR-Runtime
Arr-Disable-Session-Affinity
X-Rocket-Nginx-Bypass
X-Cache-Debug
Proxy-Connection
X-OneAgent-JS-Injection
X-Cache-Operation
Node
ServerID
X-CJ-Soft
X-Cache-Lifetime
X-Cf-Powered-By
X-Storage
Req-Id
Cache
RTSS
Fastcgi-Cache
X-Zen-Fury
X-Debug
X-Front
X-ServerID
Last-Published
Webluker-Edge
Version
X-Art-Request-Id
X-Cache-Tags
X-Amz-Version-Id
X-Nbs
X-Cache-Expires
Buuteeq-Source
X-Source
SN
Location
PICS-Label
X-WEBSERVER
X-Frontend
X-NoCache
X-Fastcgi-Cache
X-Vcap-Request-Id
X-AOL-HN
X-Platform-Router
X-Kinsta-Cache
X-Platform-Processor
X-Drectory-Script
Ufe-Result
X-PwB-Node
X-Correlation-Id
X-Cache-Key
X-FW
Content-Hash
X-Purge-URL
X-Edge-Location
Content-Security-Policy-Rerport-Only
X-Page-Cache
X-Dispatch
X-LB-Node
X-LB
Srv
X-Client-IP
X-ClientSide-Caching
Warning
X-Akamai-Device-Characteristics
X-Cache-Control-Orig
X-N
X-Akamai-Device-Model
X-Mobilized-By
S
X-ACMCache
X-B2f-Cache-Load
Cached
X-Grace
X-Application-Context
X-Content-Age
Cache-Key
X-Cookie-Domain
X-CDN-Forward
MJ12bot
AMF-Ver
X-SE-Debug
W
SEOMOZ
X-Geo-IP
X-Purge-Host
X-Platform-Cache
X-UPSTREAM
Content-Transfer-Encoding
X-Speed-Cache
X-Speed-Cache-Key
HAVer
X-SV-FromDBCache
X-NFE
X-SV-Pid
X-Server-Upstream
X-SV-Nginx-Duration
HCVer
X-Supported-By
X-Config-Blacklist-Version
Pics-Label
X-Varnish-HitMiss
X-SV-Edge
X-SV-Expires
X-SV-CreatedAt
X-Varnish-Hostname
X-SV-CacheTags
NetMindSessionID
Author
X-Nhost
X-Varnish-Count
X-Ttl
X-Nurl
X-SV-Duration
X-Edge-IP
X-CDN-Cache-Status
X-Orig-Vary
X-Processing-Time
WSR-Cache
X-Varnish-IP
X-Cache-Doesi
X-Mobile-URL
Cm-Server
X-Varnish-Hits
X-CDN-Node
X-Real-Server
X-Geo-IP-Metro
X-Geo-IPV
X-Geo-IP-Region
X-Hypernode
X-NB-Cached-Page
Qs-Cache
X-Browser
Backend
X-Geo-IP-Country
X-WebServer
X-NginX-Upstream-Response-Time
X-NginX-Node
X-NginX-Upstream-Addr
A-Powered-By
X-NginX-Upstream-Status
X-AbeBooks-Version
Rewriter
Accept-Charset
Nodo
X-Yadis-Location
Filter-Revision
X-F-Cache
X-GeoIP-Country-Name
X-Discourse-Route
X-Trace
X-Time
Mobiquo-Is-Login
X-GeoIP-Country-Code
X-Sys-Req-ID
X-Garden-Version
X-Blog
Retry-After
X-PF-Uncompressing
X-Cocoon-Version
X-WR-Flags
Frame-Options
X-SSL-Protocol
X-Empowered-By
X-SSL-Cipher
Ngpass-Vcall
Front
X-Signature
X-Processed-By
X-Unique-ID
CT
X-Resolver-IP
X-AOL-SNH
X-Adobe-Loc
X-Nginx-Host
Accept-Encoding
X-Session-Reinit
X-Adobe-Content
Thanks
Host-Service
X-Yottaa-Optimizations
X-Yottaa-Metrics
Section-Io-Id
Nitro-Cache
X-Machine-Name
X-Vhost
A
SRV
X-Framework
CC-CACHE
X-Dynatrace
X-Connection-Hash
X-Transaction
X-Twitter-Response-Tags
X-StackifyID
X-BackendServer
X-Cache-Engine
X-SmartBan-URL
X-Highwire-RequestId
Ibm-Web2-Location
Ibf5scheme
X-BKSrc
X-Magento-Tags
X-Cache-PageType
X-GeoIP
Eomportal-Instance
X-SmartBan-Host
SSPAppContext
X-V
MW-Webserver
WWW-Authenticate
X-Directory-Script
SVR
X-Cache-Only-Varnish
Server-Name
X-Cache-Fix
X-ARC
X-Highwire-SessionId
X-IsCacheURL
X-Webcelerate
X-ID
X-Varnish-Server
X-Nginx-Cache
X-EdgeConnect-Origin-MEX-Latency
X-IIJ-Cache
X-Analytics
Backend-Timing
X-Varnish-Ttl
X-LW-Web-Server
S-Cnection
X-EdgeConnect-MidMile-RTT
X-Plat
X-Plat-Be-Ip
X-Plat-Va-Ip
X-Hit-Cache
X-EDGECONNECT-GUID-DEBUG
X-Key
X-RiS-UFDI
X-Config-By
X-Cache-Control
BALANCEDTO
X-Pagename
Pool-Info
IISExport
Myheader
NODE
X-ServerIndex
X-Hiawatha-Cache
X-Jphone-Copyright
P-WS
X-Sucuri-ID
MC
Cteonnt-Length
Smug-CDN
P-LB
X-Symfony-Cache
X-Prefetched
Beyond-Iis
X-HP-Trace-ID
X-HP-Trace-Project
X-HOSTNAME
Resin-Trace
X-TTFB-L
X-SmugMug-Hiring
X-SmugMug-Values
X-TTFB
X-Env
Keywords
Allow
COMMERCE-SERVER-SOFTWARE
X-HydroSheep
X-Balanceador
Mime-Version
X-Avvio-Cms-Cacheload
X-AEM
X-Server-Response-Time
X-Atraveo-Expires
X-NginX-Cache
X-Atraveo-Cache-Control
X-Atraveo-ETag
X-ORACLE-DMS-ECID
Real-Server
Content-Server
X-LB-Server
X-Atraveo-Param-Rm
X-HTML-Minification-Powered-By
X-Grid-Server
X-Atraveo-From-Varnish-Cache
Web
X-Cache-CFC
X-Real-IP
X-Smartcache-Keys
X-WP
X-PG
X-Smartcache-Timeout
X-Atraveo-Zone
X-Client-Vid
X-EPiphany-Vid
X-Atraveo-Varnish-Server-Id
X-Atraveo-TTL
X-Atraveo-Set-Cookie
Cneonction
X-Client-Image-Vid
X-We-Are-Hiring
From
X-Detected-Device
Id
X-Provisioner-Version
Head
X-HW
ScoreTracker
X-SV
X-Domain-Checked
X-Restarts
X-Accel-Expires
X-App-Status
X-Flow-Powered
X-Force
X-WA-Info
X-PRAM
X-Frames-Options
X-Server-IP
XDomainRequestAllowed
CacheControlHeader
RN-Server
X-Amz-Storage-Class
X-AWS
Cluster-ID
X-KoobooCMS-Version
X-REDIRECTSERVER
X-JG-Page-Cache
X-Litespeed-Cache-Control
Il-Cl
X-Oracle-DMS-ECID
X-Domino-CacheValidationWithETagReason
X-Varnish-Debug-TTL
X-Amz-Id-1
N365rili
INCOMING-TIME
X-Worker
X-MrHost
X-Lifetime
X-Goog-Storage-Class
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Domino-CacheValidationWithETagResult
X-GUploader-UploadID
Paypal-Debug-Id
X-DSMX-Rewrite-MS
Xc
X-Amz-Meta-S3cmd-Attrs
X-GSL-Server
X-B2f-Not-Route
X-DSMX-Render-MS
VAR-Cache
Hash
Description
X-Desc
X-Cache-Source
X-Cache-Provider
X-App-Server
X-Varnish-Cache-Local
X-Server-Start-Time
X-Rebelmouse-Cache-Control
X-A
X-Webstats-RespID
X-CB-Server
X-Cache-On
X-Varnish-Debug-Age
X-RDP
X-Upstream-Backend
AsisCache
X-Rebelmouse-Surrogate-Control
X-Actindo-RS
X-NginX-Server
Rel
X-Origin-Id
Machine
Proxy-Cache
Sophnep-Edge-FX
Prxy
X-Platform-Server
Sid
CLMOB
Ec
X-Nitra-Side
Logging-CorrelationId
X-Response
X-SRV
X-Dns-Prefetch-Control
X-HITS
ORIGIN
X-Srv
X-DealerOn
NS-VaryByCustom-Key
NnCoection
NtCoent-Length
X-Id
X-Sucuri-Cache
X-Rack-CORS
X-Nginx
X-Optimization
Cmstype
Cmsid
NZSpeedy
X-Server-Instance
WP-AdvCache-MemCached
X-Src-Webcache
X-Unbounce-PageId
X-Unbounce-Variant
Identity
X-Unbounce-VisitorID
X-Forwarded-Host
X-Render-Time
Accept-Language
X-7d-Trace-Id
D
X-Span
X-OpenCart-Lightning
X-This-Proto
X-Route
X-Runtime-Affili
X-SilverStripe-Cache
X-Hrouter
X-Hstore
X-Captured
X-ProxyInstancename
X-Cache-Action
X-ACLR-Version
X-Proto
Fw-Via
X-FIRSTBase
X-Enhanced-By
X-RealServer
X-Magento-Action
X-Jcms-Ajax-Id
Set-Cookie2
X-Secret
Fw-Cache-Status
X-MAT-GEO
X-Varnish-Action
X-WR-MODIFICATION
VServer
X-Forwarded-Proto
X-Site:
Backend-Node
Device-Type
Note
X-7d-Instance-Id
X-Is-Mobile
Worker
X-T3CacheTags
X-T3CacheInfo
X-T3Cache
X-AccessDev
X-RequestId
Ram
Yoncu-Errno
X-Vary-Options
X-OPNET-Transaction-Trace
PServer
Cpu
Noq
IsMobile
IM-Version
X-Ob-Mode
X-Cms-Mode
X-App-Runtime
X-VC-TTL
X-Environment
X-Source-ID
Imx-Cookies-Used
X-SDE-Name
OT-RequestId
X-Apm-Telemetry-Syncmark
X-Dev
X-WorkerInstancename
Server-Id
Hosted-By
X-4ormat-Cacheable
X-Wikidot-Static-Cache
X-Varnish-URL
Actual-Object-TTL
X-ACCELERATE
X-Wikidot-Backend
X-Cache-Keep
RATING
Noq:
Cpu:
Ctx
Ram:
X-EC-Lua
Server-Ip
X-Stage
Fastly-Backend-Name
NLCacheNote
Servername
Bios
X-COUNTRY-CODE
X-Cache-Me-Harder
Nginx-Cache
X-Varnish-Backend-Healthy
X-CacheResult
X-Varnish-Error-Restart
X-Cache-TTL-Remaining
X-Hosting
X-Distributor
X-Cache-Node
X-CSRF-TOKEN
X-Airee-Node
X-GRACE
Powerd-By
X-Bcwwwid
X-Akamai-Edgescape
M
Og
X-Amz-Meta-Cb-Modifiedtime
X-Ratelimit-Remaining
X-SID
Content-Cache
Device
X-Farm-Server
X-AppServer-Cache-Rule
X-HAProxy
Tracker
X-Do-Esi
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Hosts-Backend
X-Varnish-Instance
ServerTokens
X-Info
X-Custom-Header
X-PBY
X-Qnm-Cache
X-Server-By
X-Catalyst
X-APP
X-Pressidium-NinukisWP-Ver
X-Ocache
X-RSS-CACHE-STATUS
X-Trace-Id
Cache-Rule
RequestId
WFE
X-Distributed-By
X-Varnish-Store
X-OCTOPOD
SS
X-WHOIS-Cached
X-Varnish-Set-Cookie
X-Varnish-Esi-Method
X-HP-CAM-COLOR
X-Turpentine-Cache
X-Varnish-Currency
X-Varnish-Esi-Access
X-DTC
X-Cache-Level
ServerSignature
MSThemeCompatible
X-Author
X-CACHE-TTL
X-Meta-Imagetoolbar
MSSmartTagsPreventParsing
X-Tile-Url
X-MSEdge-Ref
X-Pagely-Cache
X-Phpwcms-Page-Processed-In
X-Phpwcms-Release
X-Meta-MSSmartTagsPreventParsing
X-Meta-MSThemeCompatible
HOST-SERVICE
Hamster
X-Appmachine-Environment
X-B
X-Cache-Handler
Content-Generator
X-DEBUG
X-Server-Addr
Served-From
X-FCMS-Cache
X-FG-RequestId
X-MCF-ID
X-Gannett-Site-Version
RouteID
Session-Id
X-Varnish-Cache-Control
X-Content-Security-Policy-Report-Only
X-CCM
X-DN-Cache-Control
CmsCacheEngine
X-Pj-Cache-Flags
X-Pj-Cache-Expires
X-Gyrobase-Publication
X-Nginx-Request-Time
X-Old-Content-Length
VC-NoCache
X-Cache-2
X-Dynamic-Cache
PowerCDN
Response-Time
XDisk
X-RAMCache
X-Status
X-TB-M
X-WebNode
X-Serendipity-InterfaceLangSource
X-Header
Content-Instance
X-Cache-Set
X-Time-Spent
Cleartype
X-Cache-ID
Dispatcher
X-Pixelsilk-Version
X-Pixelsilk-Server
X-NewCloud-V-Cache
X-Backend-TTL
Be
X-VC-Enabled
X-Pj-Cache-Gzip
X-FreeTag-Count
X-PF-CACHE-FAILED
X-Serendipity-InterfaceLang
X-Cms-Server
Cache-Control:
X-Pj-Cache-Time
X-Pj-Cache-Status
X-Pj-Cache-Key
X-Fedora-School-Id
Disablevcache
X-Company
Content
X-GoCache-CacheStatus
X-Cache-Extended
X-Healthy
Host-Name
Svr
X-Box
X-Server-Generated
Cdate
X-NewRelic-App-Data
X-Invoke-Duration
X-Depends
X-Server-Instance-Name
X-Cluster-Node
X-ManagedFusion-Rewriter-Version
Serverid
X-Backend-Name
X-Rewritten-By
X-Turpentine-Esi
X-FastCGI-Cache
X-SL-Notranslate
X-Router-Backend
X-IP-Address
X-Front-Cache
AGI-Request-ID
X-UA
X-Pageid
X-Provided-By
X-Router
X-VCS-Billing
X-VCS-Nrhit
X-VCS-Host
X-VCS-Status
X-VCS-Ttl
X-Webapp
X-VCS-Url
X-SL-Norewrite
X-VCS-Hit
X-T
X-SuperCache
X-UseReverse-Proxy
MwpReleaseVersion
X-VCS-Cacheable
X-VCS-Cache-Server
X-Site-Name
Ttl
Ozcache
CpuTime
X-Beatles-Hits
WWW
X-Checkout
X-DB-Content-Length
X-Content-Type
X-Cluster
X-Generated-Date
X-Varnish-Max-Age
X-Rq
X-Pb-Mii
X-Mobile
X-Search-Id
X-Title
X-Me
X-Generated-Time
X-M
X-DPWN-IS-SECURE
X-HA
X-ITKG-Cache-Tags
X-Batcache
X-Accel-Cache-Control
Lb
RSL-Trace-ID
X-DDM-SERVER
X-Cache-Via
X-Zendesk-Origin-Server
X-VERSION
X-Transaction-Id
X-Original-Host
X-Name
X-Hash
X-Powered-By-Anquanbao
X-ProcessTime
X-Ser
X-AG-MIPS
X-DDM-SERVER-UPDATED
X-Page
X-AISO-Server
Webserver
QC-Time
X-Old-Varnish
X-Rack-Cors
LX-Ambiente
Kanooh-Host
X-UltraCart-Inject-Critical-Path-CSS
QC-Key
Powered-By-VeryCDN
AC-ELC
X-TempoPesquisa
X-Runtime-Memory
X-ETag
X-UltraCart-Server-Round-Trip
QC-Hit
LX-Cliente
LX-Host
LX-Version-Package
LX-Version
LX-Url-Skin-Container
X-Fpc
X-LW-T
X-Powered-By-Home.Pl
X-UltraCart-Critical-Path-CSS-Injected
LX-Url-Photo-Container
LX-Type
LX-Server-GetCache-Id
LX-MachineName
LX-Host-Api
X-UltraCart-Critical-Path-CSS-Key
LX-Site
LX-Tipo-Container
LX-Static
X-Sid
X-RemovedCookies
X-Nginx-Page-Cache
X-Timing
X-Frame-Option
X-Instance-Name
CommunityServer
E-Tag
X-Goog-Meta-Replace
X-E
X-Akamai-Transformed
X-SERVER-ID
X-Highwire-Sitecode
ReqUrl
X-Powered-By-Server
Expire
X-DEBUG-TTL
Origin-Server
X-Goog-Meta-Policy
Hostname
X-PHP-Response-Code
X-LS-DEBUG
X-Dynamic
Expiries
X-PoweredBy
X-ProcessESI
X-Ruxit-JS-Agent
X-DeliveryServer
X-Delivered-By
X-Cache-Backend
X-Cache-Device-Type
Tempo
X-Brought-To-You-By
X-Max-Age
Httpd-Identifier
X-Client-Ip
MachineName
MageStack-Cache
X-Node-Name
X-Diehard
X-Diehard-Blocks-Added
X-Clara-ASAP
X-DOM
X-NID
Dynatrace
X-LOCATION
X-CPU-Time
Url-Hash
P
X-ASAP-Cache
X-Diehard-Tags
X-Diehard-Blocks-Removed
X-Cache-Detail
X-Built-With
X-Obr-Rule
X-Origin-Cache
X-Compressed-By
X-Bypass-Ssl-Transform
X-BeResp-Ttl
Pw-Value
X-Does-He-Have-Time
B-Powered-By
Fpc-Expire
X-Unique-Id
X-Uid
X-Ghost-Cache-Status
X-Fstrz
X-Dw-Trace-Id
X-Member
X-PageType
X-RateLimit-Remaining
X-PM-ID
Kp-EeAlive
Gzip
Progma
X-VG-WebCache
X-DataDome
TP-L2-Cache
TP-Cache
E-TAG
Max-Age
X-MSU-SOURCE
X-Forwarded-Server
Pv
Requested-Host
User-Cache-Control
Debug-Status
Copyright
X-Esi
X-Clx-Request
X-AppServer-Status
X-ClusterID
Brandcast-Load-Balancer
Brandcast-Brand-Id
Atp-Isdpp
Cache-Status
ClientIP
F5-IpCliente
X-Faeria
At-Shoptype
At-Isb
X-NGINX-Cache
X-Not-Cacheable
X-Fe
X-NewsFlow-Sitename
X-NewsFlow-DoCache
"
X-Time-Microsecs
If-Modified-Since
Provider
MageStack-Config
MageStack-Cacheable
MageStack-Cache-Warning
MageStack-Debug
MageStack-Loadbalancer
MageStack-Tag
MageStack-PageSpeed
MageStack-Cache-Status
MageStack-Cache-Lifetime
X-VARITI-CCR
X-UUID
X-SeschatTemplateID
X-Vhost-ID
Language
MageStack-Cache-Hits
MageStack-Area
MageStack-Web-Node
Pool
X-Flex-Tag
X-Flex-Lastmod
X-Flex-Lang
X-Flex-Tags
X-Generated
ServerIP
X-Hcom-Styx-Info
X-Flex-Evstart
X-Flex-Evend
Www.Aujourdhui.Com
Lookup-Cache-Hit
SiteName
X-App
X-Cjtype
X-Flex-Community
X-Device-Group
X-SeschatRedID
X-SeschatLayout
X-Expose-Took
X-Expose-Site
X-Expose-Hostname
X-EZPublish-InstallationID
X-EZPublish-NodeID
X-Nginx-VM-RT
X-Matched-Rule
X-Expose-Generated
X-ESI
Thinkindot-CacheControl-Type
Thinkindot-CacheControl
REFRESH
Thinkindot-Control
X-Apache2-RT-MicroSec
X-Cache-Time
X-Artvisual-Server
X-RequesterIP
X-Your-GrandPa-Would-Wait
X-Pubstack
X-TTL-Age
X-FFX-B
X-Request-Processing-Time
X-Request-Received
X-SeschatDID
X-Seschat-URL
X-ESI-Enable
X-Distil-CS
DrivedBy
X-Would-Your-GrandPa-Wait
BKREF
VANITY-HOST
WSCLoggingUUID
Apache
X-Built-By
X-Layout