Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
X-AspNet-Version
Age
P3P
X-Pingback
Content-Language
Via
X-UA-Compatible
Expect-CT
Upgrade
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Check
X-Template
X-Language
X-Varnish
X-Request-Id
Alt-Svc
X-Generator
X-Buckets
X-Drupal-Cache
X-Xss-Protection
P3p
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Powered-By-Plesk
X-Download-Options
Content-Location
Host-Header
Referrer-Policy
X-Runtime
X-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId
X-ShardId
X-Dc
X-Sorting-Hat-Section
X-Sorting-Hat-PodId
X-Alternate-Cache-Key
MS-Author-Via
X-UA-Device
X-Powered-CMS
X-IPLB-Instance
X-Served-By
Cartoon
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
Status
X-Amz-Cf-Id
X-Cache-Status
Access-Control-Allow-Methods
X-Via
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Wix-Server-Artifact-Id
X-ServedBy
X-Contextid
CF-Cache-Status
X-Accel-Buffering
X-Ua-Compatible
X-PC-Key
X-PC-Hit
X-Backend
Powered-By
X-PC-Host
X-PC-AppVer
X-PC-Date
X-Mod-Pagespeed
X-CST
Content-Encoding
X-WPE-Loopback-Upstream-Addr
X-Logged-In
X-DIS-Request-ID
X-Rid
X-CDN
Keep-Alive
X-Tumblr-User
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Host
X-Cache-Hit
X-Port
X-Tumblr-Pixel-1
X-Server-Powered-By
X-Cache-Enabled
X-Endurance-Cache-Level
X-Server
X-Nginx-Cache-Status
X-Robots-Tag
X-Original-Date
X-Tumblr-Pixel-2
X-Accel-Version
X-Wix-Request-Id
X-Seen-By
X-Drupal-Dynamic-Cache
X-Turbo-Charged-By
X-Page-Speed
X-Sorting-Hat-PrivacyLevel
X-Content-Powered-By
X-Pad
X-Wix-Punisher
X-Forwarded-For
X-Content-Digest
X-Proxy-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-AH-Environment
X-Rack-Cache
WP-Super-Cache
X-Forwarded-Proto
X-NewRelic-App-Data
X-Varnish-Cache
X-Tumblr-Pixel-3
Content-Security-Policy-Report-Only
X-LiteSpeed-Cache
Edge-Control
X-GitHub-Request-Id
X-Request-Country
SPRequestGuid
X-SharePointHealthScore
X-MS-InvokeApp
X-XRDS-Location
MicrosoftSharePointTeamServices
X-Newrelic-App-Data
X-SERVER
Timing-Allow-Origin
X-Cache-Lookup
X-Node
X-Cnection
X-Trace
X-Amz-Id-2
X-Amz-Request-Id
X-FW-Hash
Cf-Railgun
Charset
X-FW-Serve
X-FW-Static
X-FW-Type
X-Webcom-Cache-Status
X-Died
X-Content-Security-Policy
X-FullPageCaching
Edge-Cache-Tag
X-HS-Cache-Config
Request-Id
X-Webserver
X-HS-Content-Id
X-CF-Powered-By
X-Hits
X-PhApp
Request-Context
SPIisLatency
X-BC-Stapler
SPRequestDuration
X-PHP-Backend
X-INKT-SITE
X-INKT-URI
MicrosoftOfficeWebServer
Access-Control-Max-Age
X-Safe-Firewall
Composed-By
Grace
EagleId
X-Swift-CacheTime
X-Swift-SaveTime
Served-By
Access-Control-Expose-Headers
X-Spip-Cache
X-CDN-Pop
X-CDN-Pop-IP
X-Hyper-Cache
Liferay-Portal
X-HS-Combine-CSS
X-VCache
X-Tumblr-Pixel-4
X-Backend-Server
X-Server-Name
X-Dw-Request-Base-Id
X-Device
X-Fastly-Request-ID
X-Firenze-Processing-Times
X-Microcache
X-Sorting-Hat-FeatureSet
X-Request-ID
X-RateLimit-Remaining
X-RateLimit-Limit
X-FB-Debug
Rating
Refresh
X-LiteSpeed-Cache-Control
X-Clacks-Overhead
X-Cloud-Trace-Context
X-RateLimit-Reset
X-Loop
X-TNCMS
Content-Style-Type
Surrogate-Control
Front-End-Https
X-Jimdo-Wid
X-Jimdo-Instance
X-Acc-Exp
Content-Script-Type
Xkey
X-ServerName
X-DDC-Arch-Trace
Public-Key-Pins
X-DNS-Prefetch-Control
X-User-Agent
X-XN-Trace-Token
X-XN-XNHTML
X-Vtex-Processado-Em
Display
Response
X-Middleton-Response
X-Middleton-Display
X-Sol
X-Cache-Config
X-StackifyID
X-Frame-Option
Fpc-Cache-Id
X-Tumblr-Content-Rating
X-Hostname
X-Generated-By
X-SS-Conf
X-SS-Location
X-N-OperationId
X-Cached
X-Age
X-Px
X-WebKit-CSP
X-Dscp-Value
Real-Hostname
X-Tumblr-Pixel-5
X-Zen-Fury
X-Topify-Platform
X-MiniProfiler-Ids
X-HOST
X-Magento-Tags
TCN
X-URL
X-Handled-By
X-Request-Time
X-Outils-CS
P-WS
P-LB
X-Correlation-Id
X-CMS-Version
PageSpeed
X-Amz-Version-Id
X-Whom
X-Kinsta-Cache
X-OneAgent-JS-Injection
X-Url
X-Cached-By
X-B-Cache
X-Content-Options
Rt-Fastcgi-Cache
Access-Control-Request-Method
X-DynaTrace
X-AspNetWebPages-Version
ServedBy
X-Ruxit-JS-Agent
X-Varnish-TTL
Product
X-DynaTrace-JS-Agent
Surrogate-Key
Powered
X-Edge-Location
X-Varnish-Cache-Hits
X-Upstream
X-Debug-Info
Fhost
X-CacheServer
X-Msg-2-Log
Host
X-Engine
X-From
X-FORWARDED-FOR
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-LBLID
Imagetoolbar
X-Cache-Rule
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
No
X-Vtex-Processed-At
X-Vtex-Remote-Cache
X-VTEX-Cache-Status-Janus-ApiCache
X-Returned-From
X-Returned-From-DLL
Public-Key-Pins-Report-Only
X-Passed-To-DLL
X-Passed-To
X-Original-Request
X-Goog-Hash
X-Actual-URL
X-Track
X-Signature
X-Varnish-Beresp-Grace
X-Accel-Expires
Alternate-Protocol
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Status
X-Via-JSL
X-Returned-From-PostProcessResponse
X-Umbraco-Version
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Stale
X-Passed-To-BeforeDispatch
DynaTrace
X-Location-Id
Edge-Control-Message
X-Recruiting
X-LW-Cache
Arr-Disable-Session-Affinity
X-Application-Context
X-Developer
X-Platform
X-Micro-Cache
X-Hosted-By
X-Response-Time
X-Powered-By-VTEX-Janus-Edge
Retry-After
X-Fastcgi-Cache
X-Cache-Info
Fastcgi-Cache
X-Version
X-Loopia-Node
Dmn
X-Defender
X-Platform-Router
X-Shop-Id
X-Platform-Processor
X-Magento-Cache-Debug
Generator
Pagespeed
X-PERF
X-Instart-Request-ID
X-ApacheServer
X-Varnish-Host
X-UD-Method
X-Platform-Cluster
HTTPS
X-Rnd
X-F-Cache
X-Powered-By-360WZB
X-VARNISH-Cache
Origin
X-Supported-By
WZWS-RAY
X-Cache-Age
X-URLSCHEME
X-RESOURCE
X-Rocket-Nginx-Bypass
X-TransIP-Balancer
Ohc-File-Size
X-Source
X-Microcachable
X-I-Sp
X-BS
X-NWS-LOG-UUID
X-HS-Content-Campaign-Id
X-Tumblr-Pixel-6
X-Litespeed-Cache
Last-Published
X-Device-Type
X-TransIP-Backend
X-Front
Content-Hash
Version
X-Cache-TTL
Akamai-IP
X-Varnish-HitMiss
X-Varnish-Count
X-S
X-Server-ID
Cache-Provider
Fastly-Debug-Digest
X-Storage
X-I
X-Powered-By-VelaWeb
X-App-Hosting
X-CSRF-Protection
Surrogate-Key-Raw
X-Pantheon-Site
X-Pantheon-Environment
X-Pantheon-Phpreq
RTSS
X-Cache-Operation
X-NetCat-Version
X-Shard
X-EdgeConnect-Origin-MEX-Latency
USPLoggingUUID
X-Cluster-Node
X-Cdn
X-Cache-Tags
X-Cache-Key
X-Platform-Server
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-Varnish-RemainingLife
X-Varnish-GracePeriod
X-Varnish-ObjectSource
X-Gamma-Serve
X-Hypernode
X-Dispatcher
X-Director
X-Microcache-Status
X-Server-Upstream
X-Content-Encoded-By
X-Translation
X-Art-Request-Id
X-Matrix-Server
X-Page-Cache
X-SSL-Cipher
X-ATG-Version
X-Matrix-Proxy
Cache-Key
X-Cache-Namespace
X-ORACLE-DMS-ECID
X-Vcap-Request-Id
Allow
X-Sapient
X-SSL-Protocol
X-Environment
X-LB
X-LB-Node
MIME-Version
X-Flow-Powered
X-Platform-Cache
X-Ezoic-Cdn
X-Expires-Orig
Pool
IBM-Web2-Location
X-EdgeConnect-MidMile-RTT
X-Varnish-Age
Powered-By-ChinaCache
X-CJ-Soft
X-ARC
X-Varnish-Cacheable
X-Drupal-Cache-Tags
X-Revision
X-Route-Server
X-Firenze-Processing-Time
X-SV-FromDBCache
X-SV-Expires
X-SV-Nginx-Duration
X-Litespeed-Cache-Control
X-SV-Cacheable
X-SV-CacheTags
X-SV-CreatedAt
Content-Disposition
X-SV-Duration
X-SV-Edge
X-SV-Pid
SSPAppContext
X-Ttl
Lsrequestid
Pv
X-Abgroup
X-NoCache
Content-MD5
Section-Io-Id
X-Cache-Debug
X-Lambda-Id
X-Daa-Tunnel
Wsr-Cache
X-Grace
Srv
X-Edge-IP
X-Github-Request-Id
SN
X-Duration
X-Dispatch
X-Client-IP
Location
Accept-Encoding
X-IsCacheURL
X-Magento-Cache-Control
X-Varnish-Backend
X-Cache-Only-Varnish
X-Cache-Expires
FAI-W-FLOW
X-Last-Modified
Fw-Via
X-Amz-Meta-S3cmd-Attrs
X-GeoIP-Country-Code
X-Cache-Engine
X-N
X-Drupal-Cache-Contexts
X-Hiawatha-Cache
X-Cache-Control-Orig
Content-Encoding-Handler
X-Generated
X-Vhost
X-Time
PICS-Label
X-SDS
X-Ss-Location
X-Ss-Conf
Req-Id
ServerID
X-RequestId
X-Nginx-Cache
Backend
Cneonction
X-Proxy
S-Cnection
X-Cache-Lifetime
X-Server-Id
X-Content-Age
X-Varnish-Url
X-ID
X-Url-Base
X-Cache-Server
X-Cache-Type
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-Goog-Generation
X-Speed-Cache
X-Speed-Cache-Key
X-GUploader-UploadID
X-AOL-HN
Node
X-Varnish-Ttl
Page-Completion-Status
Nodo
X-Country-Code
Server-Info
X-GeoIP-Country-Name
ServerName
X-Fastly-Request-Id
Proxy-Connection
X-Debug
X-PwB-Node
X-Varnish-IP
IM-Version
X-Location
X-Cookie-Domain
X-Pressidium-NinukisWP-Ver
X-Cache-Level
X-Worker
X-Empowered-By
X-Geo-Country
AMF-Ver
X-ServerID
X-Akamai-Transformed
X-Middleware-Start
X-TTL
X-Akamai-Device-Model
X-Purge-URL
X-Akamai-Device-Characteristics
X-BKSrc
X-Config-Blacklist-Version
X-ORACLE-DMS-RID
X-Cache-Control
X-SRCache-Key
X-Oneagent-Js-Injection
Nitro-Cache
X-Yadis-Location
Use-Proxy
X-UPSTREAM
Server-Name
Cached
X-Magnolia-Registration
X-Cache-CFC
X-Discourse-Route
If-Modified-Since
X-FW
X-Dynatrace-Js-Agent
X-Nbs
X-Srv
X-Always-Cache
X-Purge-Host
X-Real-Server
X-DealerOn
X-Esi
X-Cache-Handler
Xc-Version
NnCoection
X-SO
X-Content-Type-Option
X-Browser
X-App-Server
X-Runtime-Rack
X-Hit-Cache
X-Frontend
Cm-Server
S
Frame-Options
X-Pagename
X-Rq
X-Cache-Device-Type
X-Correlation-ID
X-VARITI-CCR
Front
X-Varnish-Retries
X-BackendServer
X-PF-Uncompressing
X-High-Performance
SEOMOZ
X-Rocket-Nginx-Serving-Static
X-Cache-PageType
MJ12bot
X-CF-Passed-Proto
X-Cache-Fix
Accept-Charset
X-Abuse
X-Mobilized-By
X-App-Status
Pf.Web.Request.Id
Cache
Qs-Cache
X-Framework
P-ID
X-CDN-Forward
X-Amz-Storage-Class
X-Processing-Time
HAVer
X-Unbounce-PageId
X-Unbounce-Variant
X-Unbounce-VisitorID
X-Server-Instance
Author
Environment
HCVer
X-Id
Cache-Tag
X-Cache-Dispatcherpragma
X-Cache-Dispatchercachecontrol
X-AF-Userserver
Tracecode
Custom-Header
Content-Transfer-Encoding
X-OpenCart-Lightning
Local-Info
X-Sucuri-ID
Server-Timing
X-Sentry-ID
X-Ruxit-Js-Agent
SRV
MC
X-ACMCache
Cteonnt-Length
X-JG-Page-Cache
X-WA-Info
X-Env
NODE
W
X-WPL-DATA
X-Session-ID
X-Client-Vid
ServerTokens
X-Runtime-Memory
ServerSignature
X-Xrds-Location
CacheControlHeader
X-EPiphany-Vid
X-Client-Image-Vid
Ufe-Result
X-Varnish-Hits
X-Page
X-Twitter-Response-Tags
Cache-Tags
X-Transaction
X-SERVER-NAME
X-Connection-Hash
A-Powered-By
X-HTML-Minification-Powered-By
X-FTR-Request-ID
X-Dns-Prefetch-Control
X-Origin
Eomportal-Instance
X-VTEX-Cache-Status-Janus-Edge
X-Cache-Doesi
NetMindSessionID
WWW-Authenticate
Magicmarker
X-Route-To
X-Adobe-Content
X-Shield-Request-Id
X-Adobe-Loc
EagleEye-TraceId
NtCoent-Length
SiteSpeed
X-Processed-By
X-NB-Cached-Page
Thanks
X-Traffic
Proxy-Agent
X-TTFB
X-VC-Enabled
X-Resty-Request-Id
X-TTFB-L
Service-Worker-Allowed
WN
X-SmugMug-Values
X-Server-IP
X-Sys-Req-ID
X-Gateway-Cache-Status
X-Gateway-Cache-Key
X-SmugMug-Hiring
X-SRV
X-Gateway-Skip-Cache
X-Trace-Id
SVR
X-Content-Security-Policy-Report-Only
X-CAPServer
X-Varnish-Hostname
X-Orig-Vary
Content_type
X-Fedora-School-Id
X-WN-ClientGroup
X-Clara-ASAP
BALANCEDTO
X-WR-Flags
X-ASAP-Cache
X-Stage
Smug-CDN
X-Jphone-Copyright
X-ClientSide-Caching
Contao-Page-Layout
X-LB-Server
X-DEBUG
X-CB-Server
Identity
X-AEM
X-Yottaa-Optimizations
X-Sucuri-Cache
Web-App-Origin-Name
X-ServerIndex
Adm-Server
SHInfo
X-Generated-Time
X-Yottaa-Metrics
X-A
X-Drectory-Script
Server-ID
Max-Age
X-AVG-Country-Code
X-HW
X-Redman-Backend
X-Avg-Cookie-Expires
Yoncu-Errno
X-Compress-Hint
X-Akamai-Edgescape
VANITY-HOST
Ram
Id
Ramp
X-Backend-Status
Noq
X-Sorting-Hat-Expire-Cache
X-Redman-Final-Url
From-Origin
X-Smartcache-Keys
X-Smartcache-Timeout
X-ARRServer
X-Resolver-IP
X-SmartBan-Host
X-Highwire-SessionId
Fastly-Backend-Name
Keywords
X-WP
Description
X-Sites
X-Varnish-Debug-TTL
X-Garden-Version
X-RealServer
Machine
X-SmartBan-URL
RN-Server
X-Info
X-LP
X-Disney-Akamai-Rule
X-Machine
X-Highwire-RequestId
X-Varnish-Debug-Age
X-Application
X-Webstats-RespID
Cmsid
SBGI-RenderTime
Play-Detected-Device
Play-Detected-UserAgent
SBGI-RealPath
SBGI-9
X-PRAM
SBGI-5
SBGI-7
MW-Webserver
X-Provisioner-Version
X-RiS-UFDI
X-HydroSheep
IISExport
X-Domain-Checked
X-Unique-ID
X-Webkit-CSP
Pics-Label
X-VNode
SBGI-10
SBGI-Device
X-Varnish-Id
Cmstype
SBGI-1
X-Force
X-Resource
X-VC-TTL
X-Serv
X-Magento-Action
X-Proto
Beyond-Iis
X-GoCache-CacheStatus
X-Vcache
X-Akamai-3PM-SW-Version
X-Symfony-Cache
X-LW-Web-Server
Url
Dispatcher
X-NginX-Server
X-Airee-Node
X-Fstrz
X-Environment-Context
X-Frames-Options
X-Directory-Script
X-Omnis-SiteID
X-Amz-Meta-Content-Md5
X-Amz-Meta-Cb-Modifiedtime
X-4ormat-Cacheable
Hostname
Ctx
X-DataDome
Home
X-Analytics
Backend-Timing
X-WebKit-CSP-Report-Only
X-TB-M
X-Cache-Node
X-GeoIP
X-FORWARDED-PROTO
X-E
Og
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Plat
X-Key
RequestId
X-ASAP-Age
X-Debug-Token
AsisCache
X-CACHE-TTL
X-Acquia-Debug-Password
Dis-Env
X-Secret
X-Src-Webcache
X-Varnish-ID
X-Culture
X-Detected-Device
X-L-Path
X-Varnish-Server
VServer
ScoreTracker
X-IIJ-Cache
X-Hosting-Env
X-SDE-Name
X-FireWall-Port
X-Real-IP
Worker
X-Dev
XDomainRequestAllowed
X-Cms-Mode
X-Balanceador
X-Cocoon-Version
X-Request-Uri
Access-Control-Allow-Method
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
X-Distil-CS
X-Atraveo-TTL
X-NginX-Cache
COMMERCE-SERVER-SOFTWARE
X-Atraveo-Cache-Control
X-Atraveo-ETag
WP-AdvCache-MemCached
Bios
X-Origin-Server
X-Source-ID
Nginx-Cache
HitType
AC-ELC
X-Atraveo-Varnish-Server-Id
X-SV
X-Bip
NZSpeedy
SS
X-Atraveo-Zone
Web
X-SilverStripe-Cache
AMP-Access-Control-Allow-Source-Origin
X-Session-Reinit
X-Remote-Addr
SB-Cache-Remaining
SB-Cache-Life
SB-Site-Device
X-Req-Head-Response
X-Search-Id
X-OPNET-Transaction-Trace
Device
From
X-Rack-CORS
X-Time-Microsecs
X-Desc
X-FG-RequestId
X-DS1D
X-Enhanced-By
X-Timestamp
X-Mobile-URL
X-ReqId
X-Runtime-Affili
X-MAT-GEO
X-HP-Trace-ID
X-HP-Trace-Project
X-Origin-Cache
NLCacheNote
X-RDP
N365rili
SG
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Flex-Community
X-Response
Ibf5scheme
X-App-Runtime
X-Adnet
X-Distributor
X-Cache-On
X-Confluence-Request-Time
Myheader
X-Amcomm-Site
Disablevcache
X-ACCELERATE
X-Forwarded-Host
X-Pubstack
X-Flex-Evend
X-Flex-Tags
X-Cache-Via
X-Depends
X-Hosting
X-Map-Context
Access-Control-Allow-Header
SERVER-ID
Il-Cl
X-DTC
X-FPC
X-Data-Request
X-Compressed-By
X-Flex-Evstart
X-Flex-Lang
X-Flex-Lastmod
X-Viator-Tapersistentcookie
X-Flex-Tag
X-Nginx-Host
MachineName
TC-Cache-IC
TC-Cache-U
TC-Cache
X-Wikidot-Backend
X-Varnish-Cache-Local
TC-S-Cache
Page-Template
X-CacheResult
X-Ghost-Cache-Status
X-HashTwo
X-Cdn-Forward
X-WHOIS-Cached
X-Rewrite
X-Wikidot-Static-Cache
X-LDNR-NOT-ROOT-HL-NOTSET
Ec-Machine
Traffic-Origin
X-GSL-Server
X-Server-Addr
Ec-CorrId
OriginServer
ClientIP
F5-IpCliente
Gzip
X-MCB-Server
X-Goog-Meta-Policy
TC-S-Cache-M
Hname
X-B2f-Not-Route
Proxy-Cache
X-Goog-Meta-Replace
X-Cluster
Paypal-Debug-Id
X-Refresh
X-Dw-Trace-Id
X-Redirector
X-Autoru-LB
X-CRA-DC
X-Aramark-SID
X-Amz-Meta-S3b-Last-Modified
X-AutoRu-App-Id
X-Autoru-Host
X-DB-Content-Length
X-NID
X-ESI
VC-NoCache
X-Lb
X-EC2-Instance-Id
X-Avvio-Cms-Cacheload
X-Cf-Powered-By
Hummingbird-Cache
Accept-Language
Strikingly-Cached
Strikingly-Cached-Version
Strikingly-Cache-Region
X-Batcache
X-Cache-Varnish
X-KoobooCMS-Version
X-SH-Cache-Status
Server-Ip
X-Akam-SW-Version
CLMOB
X-Magento-Lifetime
TP-Cache
X-Author
TP-L2-Cache
Aoestatic
X-Zendesk-User-Id
Upgrade-Insecure-Requests
Copyright
Cleartype
X-Gyrobase-Publication
X-Header
X-DN-Cache-Control
Ews
X-DSMX-Render-MS
X-DSMX-Rewrite-MS
X-LBPoolMember
X-Tag-Playlist
NS-VaryByCustom-Key
PagesDisplayed
X-Powered-By-Home.Pl
Content-Generator
BackendServer
X-Svr
X-Grid-Server
X-Zendesk-Origin-Server
OracleCommerceCloud-Sandiego
X-Gannett-Site-Version
X-HS-Status
X-V
SB-Site-IE-VERSION
MwpReleaseVersion
X-Cache-TTL-Age
X-ETag
PServer
X-Meta-Imagetoolbar
Xc
X-PM-ID
Lb
StatusCode
MSSmartTagsPreventParsing
MSThemeCompatible
X-Protected-By
X-Proxy-Skip
X-Cache-TTL-Current
X-Meta-MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
X-PHP-Response-Code
X-Streams-Distribution
Container
Debug-Status
Ez
X-Varnish-Action
X-Node-Name
X-Status
EN-User
X-Render-Time
X-Rack-Cors
X-Proxy-Cache-Key
X-Amz-Id-1
X-AISO-Server
X-NodeID
X-Bcwwwid
X-AISO-Cache
X-Served-Server
Server-Id
X-AISO-Cacheable
Accept-CH
X-App
X-DynamicCache
X-IP
OracleCommerceCloud-Version
Ohc-Response-Time
Actual-Object-TTL
X-Captured
CommercePlatform-Version
X-HAProxy
X-Pagely-Cache
X-Pj-Cache-Status
X-ManagedFusion-Rewriter-Version
X-HP-CAM-COLOR
X-Reflector
X-Dealeron-Backend
Ttl
X-Batcache-Reason
X-Rewritten-By
X-Reflector-Cache
X-Cache-Detail
X-Dealeron-Original-Url
X-Nginx-Request-Processing-Time
X-Transaction-Name
Z-Tpl
AR-ATIME
AR-CACHE
Y-Trace
MageStack-Cache-Lifetime
X-S-V
X-T
X-S-C
X-RAMCache
MageStack-Web-Node
Provided-Host
MageStack-Tag
AR-PoweredBy
MageStack-Cache-Hits
X-M-P
X-B
X-Instart-Cache-Id
X-FIRSTBase
X-Cachable
X-HeBS-Cache-Status
X-I-V
X-Beresp-Ttl
MageStack-PageSpeed
MageStack-Magento-Version
X-CH-Device
X-Q-S
MageStack-Config
MageStack-Cacheable
MageStack-Cache-Warning
MageStack-Debug
MageStack-Loadbalancer
X-M-V
X-M-T
X-Mw-Workerstats
X-Pageid
X-Pool-Info
MageStack-Cache-Status
X-MidCOM-Meta-Cache
No-Cache
Kanooh-Host
Content-Cache
Progma
UrlWatchModule-Time
X-Cache-TTL-Remaining
X-AppServer-Cache-Rule
X-Via-NSCOPI
X-VG-WebCache
X-Phpwcms-Release
X-Phpwcms-Page-Processed-In
MageStack-Cache
X-REDIRECTSERVER
X-SE-Debug
X-SuperCache
X-Sid
X-Config-By
X-Country
X-CacheID
ID
TZ-Server
X-CDN-COMPRESS
X-CDN-RULE
X-Locale
Hamster
X-Catalyst
X-Built-With
X-Nitro-Cache
X-Generation-Time
X-D-Time
X-S-Misc
X-ServiceProvider
Cache-Status
XX
X-Hash
X-DDM-SERVER-UPDATED
FRONT-END-SECUREBROWSER
Fastly-Restarts
X-WebNode
Resin-Trace
Tk
X-Cache-Me-Harder
X-Agent
X-UPSTREAM-Address
X-RiS-PX
Session-Id
ProxiaInstanceId
CommunityServer
X-Instance-Id
X-Middleton-Pagespeed
X-OCTOPOD
X-Nginx-Request-Time
X-Container
X-Hrouter
X-7d-Trace-Id
X-7d-Instance-Id
Swift-Performance
X-Backend-Host
X-Box
X-DDM-SERVER
X-Client-Ip
Requested-Host
FindLaw
X-MainProfileID
X-MainProfileCategory
X-Hstore
X-MainProfileName
X-MainProfileURL
X-Obvious-Tid
X-Obvious-Info
AR-SID
X-Domino-CacheValidationWithETagResult
X-VC-Debug
X-VC-Cacheable
X-VC-Hash
X-W3TC-Minify
CpuTime
Cacheid
X-VC-Cache
X-Turpentine-Esi
X-Layout
X-Cjtype
X-NO-BREACH
X-Static
X-Title
User-Agent
X-ACLR-Version
GranicusServer
Control-Cache
HostName
RSB-LINK
X-Secure
X-Unique-Id
Returned-Status
X-Cache-Original-TTL
X-Cache-Id
X-Custom-Header
X-Full-Url
X-Route
X-Cacheable-TTL
X-BServer
X-UnsetCookies
X-Highwire-Sitecode
X-Varnish-Grace
X-Webcelerate
X-Who
X-SCM-Server-Number
X-Highwire-Smart-Code
X-Pass-Through
CmsfirstPublishTimestamp
X-PBY
X-PROCESSED-BY
MageStack-Area
X-ZSITES-DNS
DrivedBy
X-BPool
X-Blog
X-BPool-Back
X-BPool-Bx-Cache
X-BPool-Fx-Cache
DeleGate-Ver
Provider
X-AMAZEEIO
X-Artvisual-Server
Language
Arrnode
TheAnswer
X-Node-App
EQ-Cache
X-Amz-Meta-Version-Id
X-Activity-Id
X-AppVersion
X-Az
X-Debug-Message
Viewport
ViewMode
Generate-Time
X-Apm-Telemetry-Syncmark
X-CO-Host
Tesla.Performance
X-FastCGI-Cache-Status
X-HA
X-UA
X-Serverid
X-UT-Cache
Amfplus-Ver
Key
ServerIP
Response-Time
X-JSESSIONID
X-Middleton-PageSpeed
X-Cache-Bypass
Session-From
X-Served
MS-CV
X-Deity
X-Hit
X-CloudBurst-Frontend
X-Domino-CacheValidationWithETagReason
X-CloudBurst-Backend
X-Debug-Token-Link
X-CloudBurst-WordPress
X-Cname-TryFiles
X-CSRF-Token
X-CloudBurst-Cache
X-HEAD
X-Cache-Time
X-Beatles
X-Nginx-Page-Cache
X-Cache-ID
X-Made-On
X-Header-Treatment
X-Cache-Extended
X-Pixelsilk-Version
FastCGI-Cache
X-Pixelsilk-Server
X-Old-Content-Length
X-Backend-Name
X-Dynamic-Cache
WP-FROM-CACHE
X-Prerendered
X-ClusterID
CDCHOST
X-XHTML-Minification-Powered-By
X-NMT-Proxy
X-Test-Debug
X-MSEdge-Ref
X-ProcessESI
X-Ants-Machine-Id
X-RequesterIP
X-RemovedCookies
X-Instance
X-Theme
TestCC
Realaction
X-Site
X-Varnish-Cache-Ttl
X-Ants-Host
WSCLoggingUUID
V-Age
X-Prerender-Token
Rewriter
Webserver
X-Proxy-Id
X-Server-Hostname
DbServerName
CD4
X-Geo-IP
X-Skip-Cache
X-CACHE-KEY
Amp-Access-Control-Allow-Source-Origin
X-BackendProxy
X-Varnish-Cached-TTL
Httpd-Identifier
X-Instance-Name
X-JoinUs
X-Varnish-Cached
X-UPServer
X-MCF-ID
X-Script
X-ServerAddr
Actioncode
X-Svr-Proxy
Request-Filtered-By
X-Proxy-Backend
Referer
Powered-By-115
X-Varnish-Debug-Hits
X-Origin-Date
X-Gateway-Rate-Limit-Conn
X-Gateway-Rate-Limit-Delayed
X-M
ReqUrl
X-Cache-FS-Status
X-PBS-Fwsrvname
Expiries
X-SSLProxy
X-SSLUpstream
X-PBS-Appsvrname
X-PBS-Appsvrip
X-Healthy
X-MyName
X-NewsFlow-Sitename
X-Reason-Bp
X-Request-Processing-Time
Access-Control-Request-Headers
Arrow-RequestId
VAR-Cache
Be
Redirect-Reason
X-Beatles-Hits
X-Ao-Cache-Key
Warning
X-This-Proto
X-Optimization
V-TTL
X-Clx-Request
SINA-TS
Www.Aujourdhui.Com
X-Max-Age
X-Olaf
X-Upstream-Status
X-Cache-Set
X-Test
X-Mobile-Rewrite
Note
X-Cache-LB
X-Processed
X-Say-Cacheable
X-SCProxy
X-SayCDN-TTL
X-Say-TTL
X-Fastly-Backend-Reqs
PB-RID
X-TLS-Version
X-Does-He-Have-Time
X-DevSrv-CMS
X-TTL-Age
X-Would-Your-GrandPa-Wait
PB-PID
X-Your-GrandPa-Would-Wait
SINA-LB
X-DEBUG-HOST
X-Server-FQDN
X-Time-Zone
X-Varnish-Instance
X-PG
X-Member
X-Session-Id
X-Restarts
X-ELB
X-VLoc
X-XHR-Current-Location
Serverid
X-CPU-Time
X-SH-Cache-Disabled
Head
Countrycode
Xcache
X-Cache-V
X-Cache-Keep
User-Cache-Control
X-MSU-SOURCE
X-PoweredBy
X-Ssl-Cipher
Edgecast
X-ENV
X-DEBUG-TTL
X-DeliveryServer
X-Request-Received
X-Tt-Dbg
X-Built-By
X-BIT-Node
X-ACache
Apple-Itunes-App
X-Cache-ASPX
X-Upgrade-Enabled
X-K8s
CS-SERVER