Threat Level: green Handler on Duty: Rick Wanner

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Connection
Set-Cookie
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Accept-Ranges
Link
ETag
X-Content-Type-Options
X-Pingback
P3P
X-Frame-Options
X-XSS-Protection
X-Cache
X-AspNet-Version
Content-Language
Age
CF-RAY
X-UA-Compatible
Via
Strict-Transport-Security
X-Varnish
Access-Control-Allow-Origin
X-Adblock-Key
X-Language
X-Check
X-Template
X-Cacheable
X-Generator
X-Buckets
Content-Location
P3p
X-Drupal-Cache
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Powered-By-Plesk
MS-Author-Via
X-Type
X-Pass-Why
X-Cache-Group
X-Runtime
X-Request-Id
WP-Super-Cache
Status
X-Powered-CMS
X-Iinfo
Keep-Alive
Ngpass-Ngall
Content-Security-Policy-Report-Only
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
Host-Header
X-UA-Device
X-Request-ID
X-Download-Options
X-ShardId
X-ShopId
X-Dc
X-Alternate-Cache-Key
Access-Control-Allow-Credentials
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-User
Access-Control-Allow-Headers
X-Mod-Pagespeed
X-Tumblr-Pixel-1
X-Via
X-Logged-In
X-Pad
X-Tumblr-Pixel-2
Access-Control-Allow-Methods
X-Backend
X-Server
X-Served-By
X-ServedBy
X-ContextId
Content-Security-Policy
X-PC-Key
X-PC-Hit
X-CDN
X-Host
X-Cache-Status
Powered-By
X-Cache-Hit
X-Tumblr-Pixel-3
Upgrade
X-Port
Content-Encoding
X-PC-Host
X-PC-Date
X-PC-AppVer
X-Robots-Tag
X-Xss-Protection
X-Rack-Cache
X-Timer
X-Accel-Version
X-Cache-Lookup
MicrosoftSharePointTeamServices
SPRequestGuid
MicrosoftOfficeWebServer
X-SharePointHealthScore
X-Varnish-Cache
X-Cnection
X-Request-Country
X-Page-Speed
X-XRDS-Location
Rating
X-MS-InvokeApp
X-Amz-Cf-Id
X-Wix-Renderer-Server
X-Seen-By
X-Wix-Request-Id
X-Tumblr-Content-Rating
CF-Cache-Status
X-Turbo-Charged-By
X-Safe-Firewall
X-Tumblr-Pixel-4
X-AH-Environment
X-W-DC
X-Content-Powered-By
X-Server-Powered-By
X-Cache-Enabled
X-FullPageCaching
X-GitHub-Request-Id
X-Content-Digest
Alt-Svc
X-Ua-Compatible
Request-Id
Public-Key-Pins
X-PhApp
X-Webserver
X-Firenze-Processing-Times
Composed-By
X-INKT-SITE
X-INKT-URI
SPIisLatency
SPRequestDuration
Cf-Railgun
X-Node
Served-By
X-Amz-Id-2
X-Amz-Request-Id
Permitted-Cross-Domain-Policies
X-HeyJason
X-Proxy-Cache
Liferay-Portal
X-Hyper-Cache
X-Spip-Cache
Timing-Allow-Origin
Surrogate-Key
Xkey
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Pantheon-Endpoint
Surrogate-Key-Raw
X-Styx-Version
X-Server-Name
Charset
X-OneAgent-JS-Injection
X-Tumblr-Pixel-5
Access-Control-Max-Age
X-Swift-SaveTime
X-Swift-CacheTime
X-Content-Security-Policy
Access-Control-Expose-Headers
EagleId
Content-Script-Type
Content-Style-Type
Content-MD5
X-CF-Powered-By
X-XN-XNHTML
X-XN-Trace-Token
Grace
X-CDN-Pop
X-CDN-Pop-IP
X-FW-Hash
X-Clacks-Overhead
X-Hits
X-FW-Serve
X-FW-Type
X-FW-Static
X-VCache
Refresh
X-Beta
X-AWS-Id
X-Dw-Request-Base-Id
X-LJ-Flow-ID
X-Gateway
X-VWS-Id
X-Fastly-Request-ID
Access-Control-Allow-Method
X-Drupal-Dynamic-Cache
X-Jimdo-Wid
X-Jimdo-Instance
X-FB-Debug
X-DDC-Arch-Trace
X-Loop
Real-Hostname
X-Umbraco-Version
X-Device
X-Tumblr-Adult-Blog
X-TNCMS
X-User-Agent
Public-Key-Pins-Report-Only
X-Backend-Server
X-LiteSpeed-Cache
X-Generated-By
X-Cache-Config
X-MiniProfiler-Ids
X-SERVER
X-Cache-Server
Edge-Control
Cartoon
X-Cached-By
X-REQUEST-ID
X-Tumblr-Pixel-6
X-Cloud-Trace-Context
PageSpeed
X-Hostname
X-ServerName
X-Cache-Result
X-Powered-By-360WZB
Surrogate-Control
X-Cached
X-Px
X-Age
X-Url
X-CMS-Version
Fpc-Cache-Id
NS-RTIMER-COMPOSITE
Fastly-Debug-Digest
X-Outils-CS
X-DynaTrace-JS-Agent
Response
TCN
X-DynaTrace
Display
X-Middleton-Response
X-Sol
X-Whom
X-Middleton-Display
X-URL
X-WebKit-CSP
Product
X-Forwarded-For
X-BackEnd
X-Recruiting
X-Served-From-Cache
X-Content-Options
DynaTrace
Rt-Fastcgi-Cache
Imagetoolbar
X-Handled-By
X-Varnish-Cache-Hits
X-AspNetWebPages-Version
X-From
X-TTL
ServedBy
X-NetCat-Version
Access-Control-Request-Method
X-Country-Code
X-Do-Not-Hack
X-FORWARDED-FOR
IBM-Web2-Location
X-HOST
Alternate-Protocol
Powered-By-ChinaCache
X-Content-Encoded-By
X-Matrix-Server
X-Matrix-Proxy
X-Micro-Cache
X-Msg-2-Log
X-ApacheServer
X-Varnish-Host
Page-Completion-Status
Fhost
X-Firenze-Processing-Time
Magicmarker
Front-End-Https
ServerName
X-Hosted-By
Generator
X-App-Hosting
X-Returned-From
X-Passed-To-DLL
X-Returned-From-DLL
X-Magnolia-Registration
X-Passed-To
X-Actual-URL
X-Original-Request
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Expires-Orig
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Track
X-Varnish-Beresp-Ttl
Akamai-IP
X-Stale
Host
X-Platform
X-PERF
X-Origin
X-UD-Method
Content-Hash
Ag-Execution-Time
Ag-Server-Time
Ag-Send-Time
X-Art-Request-Id
USPLoggingUUID
X-Director
X-S
Content-Encoding-Handler
X-LiteSpeed-Cache-Control
X-ATG-Version
Surrogate-Keys
X-BS
X-I-Sp
X-Request-Time
Origin
X-I
MIME-Version
X-Duration
X-Varnish-TTL
X-Server-ID
X-Varnish-Backend
X-Powered-By-Server
X-Varnish-Cacheable
Lsrequestid
X-Developer
X-URLSCHEME
X-Microcachable
X-Version
X-RESOURCE
Content-Disposition
X-CDN-Node
X-CDN-Cache-Status
X-CacheServer
CONTENT-SECURITY-POLICY
X-Cache-Age
X-Gamma-Serve
X-VARNISH-Cache
X-Abuse
CC-CACHE
X-Translation
X-Cache-Debug
X-Daa-Tunnel
X-Microcache-Status
Powered
X-Device-Type
X-Drectory-Script
ServerID
X-Goog-Hash
X-Source
X-Grace
X-Location-Id
X-Cache-TTL
X-Cache-Expires
X-Cache-Info
X-Powered-By-VTEX-Janus-Edge
No
X-Varnish-Seen-By
X-Powered-By-VTEX-Janus-ApiCache
X-CJ-Soft
X-SDS
X-Vtex-Processed-At
X-VTEX-Cache-Status-Janus-ApiCache
X-Revision
X-Varnish-RemainingTTL
X-Vtex-Processado-Em:
X-Vtex-Remote-Cache
X-VTEX-Cache-Status-Janus-Edge
X-VTEX-Janus-Router-Backend-App
X-Cache-Lifetime
X-Front
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Newrelic-App-Data
Node
X-DefendeR-Runtime
X-DefendeR-Status
X-Cache-Rule
X-Route-Server
X-Response-Time
X-Vcap-Request-Id
Content-Security-Policy-Rerport-Only
X-Cache-Control-Orig
X-BC-Stapler
SN
X-DNS-Prefetch-Control
Webluker-Edge
X-Instart-Request-ID
X-Mobilized-By
Proxy-Agent
X-NoCache
Buuteeq-Source
X-Geo-IP
X-FW
X-Cf-Powered-By
Edge-Control-Message
X-N
Last-Published
X-Dispatch
Proxy-Connection
Cache
X-Time
X-Server-Id
X-Page-Cache
X-Fastcgi-Cache
X-WebServer
X-App-Status
Version
Nitro-Cache
X-Client-IP
AMF-Ver
X-Cache-Tags
X-PwB-Node
X-B-Cache
Cache-Key
NetMindSessionID
X-Orig-Vary
X-Purge-URL
X-ServerID
Accept-Charset
X-Varnish-Age
X-Akamai-Device-Characteristics
X-Varnish-Server
X-Geo-IP-Country
X-Geo-IPV
X-Akamai-Device-Model
X-Geo-IP-Metro
X-Geo-IP-Region
Mobiquo-Is-Login
Server-Info
PICS-Label
SVR
Fastcgi-Cache
Arr-Disable-Session-Affinity
X-Engine
X-Discourse-Route
Pics-Label
X-Purge-Host
X-Frontend
X-UPSTREAM
Qs-Cache
X-Platform-Processor
X-Platform-Router
X-Trace
X-Processed-By
X-Cache-Operation
X-Trace-Cache
X-Mobile-URL
X-Yottaa-Metrics
SID
X-Yottaa-Optimizations
Retry-After
Location
X-Processing-Time
X-Real-Server
X-Cache-Key
Req-Id
Frame-Options
X-Cookie-Domain
X-Speed-Cache-Key
X-Content-Age
X-Speed-Cache
X-SV-CreatedAt
X-SV-Edge
X-SV-Expires
X-SV-FromDBCache
X-SV-Nginx-Duration
X-SV-Duration
X-SV-CacheTags
X-CDN-Forward
X-Zen-Fury
X-Ttl
X-SV-Pid
Author
X-Rocket-Nginx-Bypass
X-Varnish-Grace
HCVer
X-Blog
X-Cache-Doesi
X-Varnish-IP
HAVer
X-ClientSide-Caching
X-Server-Response-Time
NODE
X-Domain-Checked
X-Provisioner-Version
Host-Service
A-Powered-By
Logging-CorrelationId
X-Origin-Id
X-Nitra-Side
X-Varnish-Hostname
Content-Transfer-Encoding
Accept-Encoding
COMMERCE-SERVER-SOFTWARE
WWW-Authenticate
X-SE-Debug
X-Server-Start-Time
X-GeoIP-Country-Code
X-Varnish-RemainingGrace
X-Varnish-Hits
Srv
X-Hypernode
Cm-Server
Filter-Revision
X-Config-By
X-Nhost
X-Upstream
X-Nurl
X-NFE
X-Highwire-RequestId
X-Highwire-SessionId
X-PF-Uncompressing
X-Cocoon-Version
X-Cache-Control
X-GeoIP-Country-Name
X-StackifyID
X-Nginx-Cache
SRV
X-SmartBan-URL
Cached
X-SmartBan-Host
RTSS
X-Server-Upstream
X-Grid-Server
Id
Decompress
Pool-Info
X-Varnish-HitMiss
Mime-Version
X-Nginx-Host
X-Session-Reinit
X-App-Server
X-Varnish-Count
X-Yadis-Location
X-TempDebug
Keywords
X-SmugMug-Hiring
X-Prefetched
X-Env
Smug-CDN
X-SmugMug-Values
X-Resolver-IP
X-Garden-Version
Rewriter
X-TTFB-L
X-TTFB
X-Kinsta-Cache
X-Plat
X-Varnish-RemainingLife
SEOMOZ
CacheControlHeader
MJ12bot
X-Varnish-ObjectSource
X-Varnish-GracePeriod
X-Debug
X-Dynatrace
Front
Thanks
CT
X-Unique-ID
X-AOL-HN
Backend
X-AbeBooks-Version
X-Platform-Cache
X-Machine-Name
X-NewRelic-App-Data
ORIGIN
X-NginX-Upstream-Status
X-FIRSTBase
X-IsCacheURL
X-WR-Flags
Nodo
X-NginX-Cache-Status
X-Flow-Powered
LBVIS
X-NginX-Node
X-NginX-Upstream-Addr
X-Sys-Req-ID
X-NB-Cached-Page
X-NginX-Cache
X-NginX-Upstream-Response-Time
X-Uid
X-HP-Trace-ID
X-HP-Trace-Project
X-WA-Info
X-Sucuri-ID
X-ACMCache
Beyond-Iis
X-Browser
P-WS
P-LB
X-BKSrc
X-App
X-ID
Server-Name
X-Application-Context
Allow
X-Transaction
Cpu
X-XTM-Node
WSR-Cache
Ram
Noq
IISExport
Dynatrace
X-Connection-Hash
X-Twitter-Response-Tags
X-Hosts-Backend
X-Obvious-Info
Tk
X-Empowered-By
X-Obvious-Tid
X-Atraveo-From-Varnish-Cache
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
X-Atraveo-Expires
X-Atraveo-ETag
VAR-Cache
X-RiS-UFDI
X-Atraveo-Cache-Control
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
Ibf5scheme
X-Pagename
X-Hit-Cache
X-PRAM
X-LW-Web-Server
X-Atraveo-Zone
X-Force
X-Varnish-Debug-TTL
X-Framework
X-DealerOn
X-Webcelerate
X-Aicache-OS
X-Varnish-Debug-Age
X-CB-Server
X-NginX-Server
X-Cache-Fix
X-Cache-PageType
X-Directory-Script
Real-Server
X-LB-Server
X-Ruxit-JS-Agent
X-LB
X-Libra-UpstreamHost
S
Eomportal-Instance
X-Src-Webcache
X-Amz-Version-Id
X-ORACLE-DMS-ECID
X-Analytics
W
X-JG-Page-Cache
Backend-Timing
X-Storage
NtCoent-Length
XDomainRequestAllowed
X-Hiawatha-Cache
X-Worker
ServerTokens
X-Dw-Trace-Id
X-Server-IP
X-Cache-Level
LBC
X-Distributed-By
Description
BALANCEDTO
X-Ec-Custom-Error
X-BackendServer
X-Client-Vid
X-EPiphany-Vid
X-SRV
X-V
ServerSignature
X-Detected-Device
X-Cache-Engine
X-AOL-SNH
X-Dns-Prefetch-Control
Imx-Cookies-Used
X-Do-Esi
X-Smartcache-Keys
X-Smartcache-Timeout
X-AWS
X-EdgeConnect-Origin-MEX-Latency
X-Pressidium-NinukisWP-Ver
X-EdgeConnect-MidMile-RTT
X-Jphone-Copyright
X-Healthy
IM-Version
X-WP
MW-Webserver
X-Middleton-PageSpeed
X-CacheResult
X-DPWN-IS-SECURE
From
X-CACHE-TTL
Device-Type
X-Cache-Keep
X-Cache-TTL-Remaining
X-Edge-Location
X-Srv
X-Varnish-Ttl
X-Phpwcms-Page-Processed-In
X-Phpwcms-Release
S-Cnection
X-Full-URL
Cneonction
X-Source-ID
SiteName
Beid
X-DOM
X-Distributor
X-Full-Url
X-Cookie
X-IIJ-Cache
X-Cache-Original-TTL
SBGI-7
X-GSL-Server
SBGI-RenderTime
SBGI-RealPath
Ksid
X-Requested-Page
X-Captured
SBGI-9
X-Symfony-Cache
SBGI-Device
X-Secret
OT-RequestId
RN-Server
WP-Cache
Myheader
X-Info
NLCacheNote
X-ARC
X-Cache-Set
X-N-ViewType
XX
Il-Cl
CommunityServer
PowerCDN
CLMOB
X-Accel-Expires
X-Apm-Telemetry-Syncmark
Cdate
Hamster
Cache-Rule
Fw-Via
Ec
X-Site:
Sid
SBGI-1
X-MrHost
SBGI-5
SBGI-10
X-Rack-CORS
X-Amz-Meta-S3cmd-Attrs
X-DSMX-Render-MS
X-Balanceador
X-B2f-Not-Route
SSPAppContext
X-DSMX-Rewrite-MS
X-Amz-Id-1
X-ServerIndex
X-Key
X-DTC
N365rili
Worker
Accept-Language
X-Cache-Node
Prxy
X-Cms-Mode
Ctx
X-Amz-Meta-Cb-Modifiedtime
Warning
X-Litespeed-Cache
NnCoection
X-HW
X-Dev
X-Adobe-Loc
X-Optimization
Section-Io-Id
X-SERVER-ID
X-Ob-Mode
ScoreTracker
X-Status
X-Is-Cachable
X-Adobe-Content
X-Trace-Id
X-Magento-Cache-Debug
X-Avvio-Cms-Cacheload
X-Clara-ASAP
X-APP
ReqUrl
Nginx-Cache
X-ATM-RTime
X-Node-Name
X-Cache-Device-Type
X-Catalyst
X-Fedora-School-Id
X-Wix-Route-ID
X-Time-Microsecs
X-ASAP-Cache
WP-AdvCache-MemCached
PServer
X-B
Jobb.Gil.Se
Bios
CmsCacheEngine
X-WorkerInstancename
X-SDE-Name
X-Varnish-URL
X-SilverStripe-Cache
X-Cms-Server
X-FreeTag-Count
X-Litespeed-Cache-Control
X-REDIRECTSERVER
X-Amz-Storage-Class
HOST-SERVICE
X-Expires
X-Vary-Options
Jobb.Passal.Se
X-Ocache
X-CID
X-CCC
Jobb.Assistentpoolen.Se
If-Modified-Since
B-Powered-By
X-Artvisual-Server
X-Frames-Options
X-XS4ALL-Server
X-F-Cache
Sophnep-Edge-FX
X-Varnish-Action
X-Server-Instance-Name
Machine
X-Cache-On
X-Backend-Name
X-ATM-RServer
X-Id
X-HP-CAM-COLOR
Hash
X-Server-Generated
X-COUNTRY-CODE
X-HeBS-Cache-Status
X-DEBUG
Ibm-Web2-Location
VServer
X-EDGECONNECT-GUID-DEBUG
X-ProxyInstancename
X-RDP
X-Response
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
X-Real-IP
X-RequestId
Content-Server
Test.Executivepeople.Se
Open.Jobgate.Se
X-T3CacheTags
Www.Mabracertifiering.Se
Www.Mirrorgate.Se
D
X-T3CacheInfo
Www.Myjob.Se
X-T3Cache
P3P:CP
X-Is-Mobile
X-Webkit-CSP
X-ACCELERATE
X-Cache-CFC
X-Stage
A
Xc
X-Server-Instance
X-Dispatcher
Web
X-Medium-Entity-Type
X-Oracle-DMS-ECID
INCOMING-TIME
X-Unbounce-VisitorID
X-Varnish-Instance
X-Unbounce-Variant
SS
X-Unbounce-PageId
X-Medium-Entity-Id
Ngpass-Vcall
NZSpeedy
X-Hosting
CpuTime
Fastly-Backend-Name
Cleartype
X-Would-Your-GrandPa-Wait
X-Your-GrandPa-Would-Wait
Apache
X-TTL-Age
X-GeoIP
Backend-Name-Original
X-Flex-Lang
X-Nginx
X-Max-Age
X-Flex-Tags
X-AccessDev
IsMobile
X-We-Are-Hiring
Content-Instance
Countrycode
X-Flex-Tag
X-Flex-Lastmod
X-Cluster-Node
X-Does-He-Have-Time
Pool
X-Beatles-Hits
X-Beatles
X-Flex-Evstart
X-Flex-Evend
X-Flex-Community
Host-Name
Ttl
TP-L2-Cache
TP-Cache
Paypal-Debug-Id
Url-Hash
X-Invoke-Duration
X-Timing
X-MAT-GEO
Cluster-ID
Atp-Isdpp
X-Purge-Level
X-PHP-Response-Code
X-OneLinkTook
X-Cache-Action
X-WebNode
At-Shoptype
At-Isb
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-Environment-Context
Xxxxx-Restarts-Count
Xxxxx-Hit-Count
X-L-Path
X-VC-TTL
X-NewsFlow-Sitename
X-NewsFlow-DoCache
Xxxxx-Cache
Xxxxx-Age
X-Actindo-RS
SharePointError
X-ESI
X-Tags
X-Appmachine-Environment
X-Environment
X-OneLinkServiceType
X-OneLinkProcessing
Access-Control-Allow-Orgin
X-Trace-App
X-NewCloud-V-Cache
DNNOutputCache
Note
X-HITS
RouteID
X-MobileDetected
X-Hstore
X-Cache-Me-Harder
X-Block
X-Backend-TTL
X-Channel-Maxage
X-EdgeRouter
X-Hrouter
X-Header
Server-Id
X-Jcms-Ajax-Id
X-AISO-Server
X-AISO-Cacheable
X-AISO-Cache
X-Magento-Action
X-OCTOPOD
X-OneLinkHost
X-Old-Content-Length
Session-Id
Server-ID
X-Serendipity-InterfaceLangSource
X-Serendipity-InterfaceLang
X-Webstats-RespID
SB-Cache-Life
SB-Site-Device
SB-Cache-Remaining
Mto-License-Status
Ews
X-Seschat-URL
X-SeschatDID
X-SeschatLayout
X-SeschatRedID
X-Server-By
X-Runtime-Memory
MSThemeCompatible
MSSmartTagsPreventParsing
X-Xhr-Current-Location
X-Remote-Addr
X-SeschatTemplateID
X-Turpentine-Cache
X-Author
Publisher
Max-Age
Provider
X-W3TC-Minify
X-ETag
X-Turpentine-Esi
X-Varnish-Currency
X-Varnish-Esi-Access
X-Ghost-Cache-Status
Webserver
X-Hit
X-FCMS-Cache
X-RealServer
X-RSS-CACHE-STATUS
X-Proto
X-FastCGI-Cache
X-DataDome
AGI-Request-ID
X-SV
X-Server-Addr
X-AG-MIPS
X-Meta-MSThemeCompatible
X-Span
X-BE
X-Country
X-EZPublish-InstallationID
X-EZPublish-NodeID
X-Gannett-Site-Version
X-Meta-Imagetoolbar
X-PG
X-Meta-MSSmartTagsPreventParsing
Foglight-Request-UUID
Set-Cookie2
X-Varnish-Set-Cookie
X-Varnish-Esi-Method
X-EntryPoint
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Akamai-Edgescape
X-Fpc
X-CCM
X-JSESSIONID
X-LW-T
VANITY-HOST
X-Orig-Host
X-Fallback
X-MCF-ID
AsisCache
Backend-Node
X-Rewritten-By
Device
X-Signature
X-Vhost-ID
TotalTime
INFO
Kanooh-Host
X-B3-Traceid
X-PM-ID
X-ManagedFusion-Rewriter-Version
Og
GenSvr
X-Pagely-Cache
Cmstype
Cmsid
MageStack-Area
MageStack-Cache
MageStack-Cache-Hits
Aurora-Node
X-HAProxy
X-Varnish-Store
X-Sn-Servicetimems
X-SATserver
X-RateLimit-Remaining
MageStack-Web-Node
MageStack-Cache-Lifetime
MageStack-Tag
MageStack-Debug
MageStack-Loadbalancer
MageStack-Cache-Status
MageStack-Config
MageStack-Cacheable
MageStack-PageSpeed
X-Powered-By-Home.Pl
X-Ratelimit-Remaining
X-HOSTNAME
X-Mod-Oboe-PS
Servername
X-Supported-By
X-Varnish-Backend-Healthy
VC-NoCache
X-Restarts
Resin-Trace
X-Varnish-Error-Restart
Head
Cxy-All
X-Esi
X-HostName
Lfy
X-GRACE
X-AppServer-Cache-Rule
BlockPHPCallEnd
X-Rack-Cors
X-SID
X-WR-MODIFICATION
DB-Nickname
X-BeResp-Ttl
X-Fe
X-Generation-Time
X-Test
X-Airee-Node
X-PF-CACHE-FAILED
X-Zendesk-Origin-Server
NKBVHEADER
OriginServer
X-Zendesk-User-Id
X-TB-M
X-D-Time
X-Magento-Cache-Control
X-Sid
X-VG-WebCache
Server-Version
X-Origin-Server
X-LS-DEBUG
X-Dynamic
X-Forwarded-Proto
X-Geo
X-HASH
QC-Hit
QC-Key
X-AppServer-Status
X-Cache-ID
X-Magento-Tags
XDisk
DrivedBy
X-S-Misc
QC-Time
User-Cache-Control
X-Clx-Request
X-MSU-SOURCE
X-Bcwwwid
User-Agent
X-Instance-Name
Www.Aujourdhui.Com
X-ASAP-Age
X-ATP-Server
X-Device-Group
X-Ratelimit-Reset
Httpd-Identifier
NodeId
X-Client-Image-Vid
X-Enhanced-By
EXT-CACHEEXPIRE
X-Nginx-Backend
X-Cache-Handler
X-ESI-Enable
Edgecast
Cteonnt-Length
Tracker
X-Desc
V-Age
X-Ratelimit-Limit
X-Process-Time
X-Batcache
X-WHOIS-Cached
X-DB-NAR
X-Pb-Mii
X-Capoed
X-Cache-Origin
X-Varnish-Cache-Control
X-Content-Type
X-FFX-B
X-Mii-Cache-Hit
X-EvoSuite-Machine
X-Goog-Metageneration
X-Goog-Generation
X-OpenCart-Lightning
X-EvoSuite-Secs
X-Goog-Storage-Class
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
Lookup-Cache-Hit
X-HTML-Minification-Powered-By
X-Render-Time
X-PHP
X-PBY
X-Pardot-Route
X-Accel-Cache-Control
Dispatcher
X-Pj-Cache-Key
X-Pj-Cache-Status
X-RAMCache
X-Route
X-Pardot-LB
VM
X-ACLR-Version
X-Cache-Via
X-T
X-DDM-SERVER
Hosted-By
MwpReleaseVersion
X-ServedByHost
BKREF
SLB
X-IP-Address
X-Gyrobase-Publication
X-Compressor
X-Hash
X-Cacheable-TTL
X-BServer
X-Hcom-Origin-Id
X-Hcom-Styx-Info
X-VhostID
RequestId
X-Protected-By
X-Nucleus-Cache
X-BPool
X-Ants-Machine-Id
X-DB-Content-Length
X-DN-Cache-Control
X-DN-GyrobaseID
AC-ELC
Server-Optimized-By
SL-NOREWRITE-REDIRECTS
X-Obr-Rule
X-Ants-Host
X-Rq
X-DDM-SERVER-UPDATED
X-Pageid
X-Sov
X-Wm-1
X-Wm-VIP
Content
X-Rot
X-Backend-Ip
X-A
X-Application
X-Cluster-Host
X-E
DPOOL-HEADER
POOL
X-Brought-To-You-By
X-Cache-Extended
X-Client-Ip
X-Delivered-By
X-Box
Tempo
Requested-Host
SINA-LB
SINA-TS
Content-Cache
Expire
X-Webapp
NS-VaryByCustom-Key
Public-Extension
Pw-Value
X-UseReverse-Proxy
X-SuperCache
X-Router
X-Router-Backend
X-Site-Name
X-Compressed-By
ResourceTag
X-Nginx-Request-Time
ServerIP
X-PageType
Charly
X-MCB-Server
X-Highwire-Sitecode
X-4ormat-Cacheable
Expiries
X-Content-Security-Policy-Report-Only
X-DeliveryServer