Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
X-AspNet-Version
Age
P3P
X-Pingback
Content-Language
Via
X-UA-Compatible
Expect-CT
Upgrade
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Request-Id
X-Check
X-Language
X-Template
X-Varnish
Alt-Svc
X-Generator
X-Xss-Protection
X-Buckets
X-Drupal-Cache
P3p
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Permitted-Cross-Domain-Policies
X-Cache-Hits
X-Download-Options
X-Powered-By-Plesk
Host-Header
Content-Location
X-Runtime
X-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId-Cached
X-ShardId
X-Dc
X-Sorting-Hat-Section
X-Sorting-Hat-PodId
X-Alternate-Cache-Key
MS-Author-Via
Referrer-Policy
X-UA-Device
Cartoon
X-Powered-CMS
X-IPLB-Instance
X-Served-By
X-Amz-Cf-Id
X-Cache-Status
Status
Access-Control-Allow-Headers
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-Via
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Wix-Server-Artifact-Id
X-ServedBy
X-Contextid
CF-Cache-Status
X-Ua-Compatible
Powered-By
X-Backend
X-PC-Key
X-PC-Hit
X-Accel-Buffering
X-PC-AppVer
X-PC-Date
X-PC-Host
X-Mod-Pagespeed
X-CST
Content-Encoding
X-WPE-Loopback-Upstream-Addr
X-Logged-In
X-DIS-Request-ID
X-CDN
Keep-Alive
X-Rid
X-Host
X-Cache-Hit
X-Tumblr-Pixel-0
X-Tumblr-User
X-Tumblr-Pixel
X-Port
X-Cache-Enabled
X-Server-Powered-By
X-Tumblr-Pixel-1
X-Endurance-Cache-Level
X-Server
X-Nginx-Cache-Status
X-Original-Date
X-Robots-Tag
X-Accel-Version
X-Tumblr-Pixel-2
X-Seen-By
X-Wix-Request-Id
X-Turbo-Charged-By
X-Drupal-Dynamic-Cache
X-Page-Speed
X-Content-Powered-By
X-Pad
X-Proxy-Cache
X-Content-Digest
X-Sorting-Hat-PrivacyLevel
X-Wix-Punisher
X-Forwarded-For
X-Rack-Cache
X-NewRelic-App-Data
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
WP-Super-Cache
X-AH-Environment
X-Varnish-Cache
X-Forwarded-Proto
X-Tumblr-Pixel-3
Content-Security-Policy-Report-Only
X-GitHub-Request-Id
X-LiteSpeed-Cache
Edge-Control
SPRequestGuid
X-Request-Country
X-SharePointHealthScore
X-MS-InvokeApp
MicrosoftSharePointTeamServices
X-XRDS-Location
Timing-Allow-Origin
X-Cache-Lookup
X-Newrelic-App-Data
X-Cnection
X-SERVER
X-Node
X-Amz-Id-2
X-Amz-Request-Id
X-FW-Hash
X-Died
Cf-Railgun
X-Trace
Charset
X-FullPageCaching
X-Webcom-Cache-Status
X-Content-Security-Policy
X-FW-Type
X-FW-Static
X-FW-Serve
X-Webserver
Edge-Cache-Tag
Request-Id
X-HS-Cache-Config
X-HS-Content-Id
X-CF-Powered-By
X-PhApp
X-Hits
Request-Context
MicrosoftOfficeWebServer
X-BC-Stapler
X-PHP-Backend
Access-Control-Max-Age
SPIisLatency
X-INKT-URI
SPRequestDuration
X-INKT-SITE
X-Safe-Firewall
EagleId
X-Swift-SaveTime
X-Swift-CacheTime
Composed-By
Grace
Access-Control-Expose-Headers
Served-By
X-CDN-Pop
X-CDN-Pop-IP
X-HS-Combine-CSS
X-Hyper-Cache
Liferay-Portal
X-Spip-Cache
X-Tumblr-Pixel-4
X-VCache
X-Server-Name
X-Backend-Server
X-Dw-Request-Base-Id
X-Fastly-Request-ID
X-Device
X-Microcache
X-Firenze-Processing-Times
X-RateLimit-Remaining
X-RateLimit-Limit
Refresh
X-Cloud-Trace-Context
X-LiteSpeed-Cache-Control
Rating
X-RateLimit-Reset
X-Clacks-Overhead
X-FB-Debug
Xkey
Content-Style-Type
Surrogate-Control
X-Jimdo-Instance
X-Jimdo-Wid
Front-End-Https
X-Loop
X-TNCMS
Content-Script-Type
X-Acc-Exp
X-ServerName
X-User-Agent
Public-Key-Pins
X-DDC-Arch-Trace
X-Cache-Config
X-Sol
X-Middleton-Response
X-Middleton-Display
Response
Display
X-DNS-Prefetch-Control
Fpc-Cache-Id
X-Vtex-Processado-Em
X-StackifyID
X-XN-Trace-Token
X-XN-XNHTML
X-Tumblr-Content-Rating
X-Frame-Option
X-Age
X-Hostname
Real-Hostname
X-SS-Location
X-SS-Conf
X-Generated-By
X-WebKit-CSP
X-Px
X-N-OperationId
X-Cached
X-Tumblr-Pixel-5
X-Zen-Fury
X-Dscp-Value
X-Topify-Platform
X-Magento-Tags
X-HOST
X-Correlation-Id
X-Request-Time
X-MiniProfiler-Ids
P-LB
P-WS
X-URL
X-Amz-Version-Id
X-OneAgent-JS-Injection
PageSpeed
X-Whom
TCN
X-CMS-Version
X-Url
X-Handled-By
Rt-Fastcgi-Cache
X-Kinsta-Cache
X-Cached-By
X-Outils-CS
X-B-Cache
X-DynaTrace
X-DynaTrace-JS-Agent
Access-Control-Request-Method
Product
X-Ruxit-JS-Agent
X-AspNetWebPages-Version
X-Content-Options
X-Edge-Location
Fhost
X-Debug-Info
ServedBy
Surrogate-Key
X-Msg-2-Log
X-Varnish-TTL
X-Engine
Public-Key-Pins-Report-Only
Powered
Host
X-Varnish-Cache-Hits
X-Cache-Rule
X-Via-JSL
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-From
Edge-Control-Message
X-Upstream
Imagetoolbar
X-CacheServer
X-Goog-Hash
Alternate-Protocol
X-Application-Context
X-Accel-Expires
X-Signature
DynaTrace
X-Vtex-Remote-Cache
X-Location-Id
X-Vtex-Processed-At
X-VTEX-Janus-Router-Backend-App
No
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Cache-Status-Janus-ApiCache
X-LW-Cache
X-Umbraco-Version
X-Developer
X-LBLID
X-Recruiting
X-Track
X-Fastcgi-Cache
X-Hosted-By
X-Passed-To-DLL
X-Returned-From
X-Passed-To
X-Original-Request
X-Actual-URL
X-Platform
X-Returned-From-DLL
X-Response-Time
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
Retry-After
X-Platform-Processor
X-Platform-Router
Fastcgi-Cache
X-Micro-Cache
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Stale
X-Passed-To-BeforeDispatch
Pagespeed
Arr-Disable-Session-Affinity
X-Magento-Cache-Debug
X-Platform-Cluster
X-Shop-Id
Dmn
X-Defender
X-UD-Method
Generator
HTTPS
X-Powered-By-VTEX-Janus-Edge
X-Rnd
X-Cache-Age
Origin
X-Cache-Info
WZWS-RAY
X-NWS-LOG-UUID
X-Powered-By-360WZB
X-FORWARDED-FOR
X-F-Cache
X-Cache-TTL
X-VARNISH-Cache
Akamai-IP
X-Loopia-Node
X-Version
X-PERF
X-TransIP-Balancer
X-BS
X-I-Sp
X-Source
X-URLSCHEME
X-ApacheServer
X-Varnish-Host
X-Microcachable
Cache-Provider
X-RESOURCE
X-Device-Type
X-Rocket-Nginx-Bypass
Ohc-File-Size
X-TransIP-Backend
X-Supported-By
X-Instart-Request-ID
X-Litespeed-Cache
X-Storage
X-Tumblr-Pixel-6
X-HS-Content-Campaign-Id
Fastly-Debug-Digest
Content-Hash
X-S
X-Varnish-HitMiss
X-Server-ID
X-Varnish-Count
Version
USPLoggingUUID
X-Front
X-Cache-Key
X-Pantheon-Site
X-Pantheon-Phpreq
X-Pantheon-Environment
Surrogate-Key-Raw
X-Cdn
X-Dispatcher
X-App-Hosting
X-Cache-Operation
X-NetCat-Version
X-Platform-Server
X-Matrix-Server
X-ATG-Version
X-Matrix-Proxy
X-EdgeConnect-Origin-MEX-Latency
X-Cache-Tags
Last-Published
X-Expires-Orig
X-Powered-By-VelaWeb
X-Page-Cache
X-Sapient
RTSS
X-Director
X-Hypernode
X-Platform-Cache
X-Microcache-Status
X-Shard
X-Translation
X-Art-Request-Id
X-I
X-Cache-Namespace
X-Gamma-Serve
X-Vcap-Request-Id
Allow
X-CSRF-Protection
X-Cluster-Node
MIME-Version
X-ORACLE-DMS-ECID
Powered-By-ChinaCache
X-Ezoic-Cdn
X-Revision
X-LB
X-Varnish-Age
X-LB-Node
X-Varnish-RemainingLife
X-Varnish-RemainingTTL
X-Varnish-Seen-By
X-Varnish-ObjectSource
X-Varnish-GracePeriod
Pool
X-Content-Encoded-By
Cache-Key
X-Server-Upstream
X-Route-Server
X-EdgeConnect-MidMile-RTT
X-Flow-Powered
Wsr-Cache
X-ARC
X-SSL-Cipher
X-SSL-Protocol
Content-Disposition
IBM-Web2-Location
X-Environment
X-NoCache
X-Ttl
X-Drupal-Cache-Tags
X-Daa-Tunnel
X-IsCacheURL
X-Grace
X-Litespeed-Cache-Control
X-Abgroup
X-Cache-Debug
X-Varnish-Cacheable
X-Lambda-Id
X-SV-FromDBCache
X-SV-Edge
X-SV-Duration
X-SV-Cacheable
X-SV-Pid
X-SV-Expires
X-SV-CreatedAt
X-SV-CacheTags
X-Firenze-Processing-Time
X-SV-Nginx-Duration
X-Edge-IP
Content-MD5
SSPAppContext
X-Magento-Cache-Control
X-Xrds-Location
Accept-Encoding
X-Cache-Control-Orig
X-Github-Request-Id
Lsrequestid
X-Dispatch
X-CJ-Soft
Srv
X-Cache-Only-Varnish
X-Cache-Type
Cneonction
Section-Io-Id
Pv
FAI-W-FLOW
S-Cnection
X-Generated
ServerID
Fw-Via
X-Varnish-Backend
X-Cache-Server
X-Varnish-Url
Content-Encoding-Handler
X-GeoIP-Country-Code
X-Hiawatha-Cache
X-Varnish-Ttl
X-Ss-Conf
X-Drupal-Cache-Contexts
X-Ss-Location
SN
X-Cache-Lifetime
Location
Page-Completion-Status
X-Time
X-Cache-Expires
X-PwB-Node
X-Duration
X-Proxy
X-Nginx-Cache
Backend
X-Client-IP
X-RequestId
Node
X-Amz-Meta-S3cmd-Attrs
X-Debug
Proxy-Connection
AMF-Ver
ServerName
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Stored-Content-Encoding
PICS-Label
X-GUploader-UploadID
X-Url-Base
X-Goog-Storage-Class
X-Vhost
X-AOL-HN
X-ServerID
X-Middleware-Start
X-Country-Code
X-Magnolia-Registration
X-Speed-Cache-Key
X-Akamai-Transformed
X-Fastly-Request-Id
X-Speed-Cache
If-Modified-Since
Use-Proxy
X-Varnish-IP
X-FW
X-N
X-GeoIP-Country-Name
X-UPSTREAM
X-Cookie-Domain
X-Last-Modified
X-Geo-Country
Nodo
X-Config-Blacklist-Version
X-Location
X-Server-Id
X-Frontend
X-Pressidium-NinukisWP-Ver
X-Sorting-Hat-FeatureSet
X-Cache-Level
X-Purge-URL
X-ID
X-SDS
NnCoection
Server-Name
X-Cache-CFC
X-SO
X-Oneagent-Js-Injection
X-Worker
X-Always-Cache
Server-Info
X-Cache-Handler
X-Real-Server
X-SRCache-Key
X-Cache-Device-Type
X-Discourse-Route
X-Cache-Engine
X-ORACLE-DMS-RID
X-Cache-Fix
X-Processing-Time
X-Nbs
X-Cache-PageType
Req-Id
Cache
IM-Version
X-Dynatrace-Js-Agent
X-Content-Age
P-ID
X-Purge-Host
Pf.Web.Request.Id
X-DealerOn
X-Empowered-By
Xc-Version
X-Yadis-Location
Accept-Charset
X-Akamai-Device-Model
X-Varnish-Retries
Author
X-Cache-Control
X-Content-Type-Option
X-PF-Uncompressing
X-Browser
X-High-Performance
X-Akamai-Device-Characteristics
X-CF-Passed-Proto
Nitro-Cache
X-Amz-Storage-Class
X-Runtime-Rack
X-Correlation-ID
Cached
MJ12bot
SEOMOZ
X-Srv
X-BKSrc
X-Id
Front
X-BackendServer
Local-Info
X-App-Server
Content-Transfer-Encoding
X-Rocket-Nginx-Serving-Static
X-FTR-Request-ID
X-Framework
X-Hit-Cache
X-OpenCart-Lightning
X-Sentry-ID
X-Pagename
SRV
Qs-Cache
X-JG-Page-Cache
X-CDN-Forward
HCVer
HAVer
X-Esi
Adm-Server
X-Unbounce-Variant
X-Unbounce-VisitorID
Thanks
X-TTL
X-Unbounce-PageId
X-Server-Instance
Eomportal-Instance
X-Origin
X-Abuse
S
Custom-Header
CacheControlHeader
X-WR-Flags
X-AF-Userserver
X-Mobilized-By
Server-Timing
X-NB-Cached-Page
Cm-Server
X-ClientSide-Caching
X-VARITI-CCR
MC
X-Ruxit-Js-Agent
X-ACMCache
Cteonnt-Length
X-Rq
X-Sucuri-ID
X-Session-ID
X-Dns-Prefetch-Control
X-Varnish-Hits
Frame-Options
X-Content-Security-Policy-Report-Only
X-Page
Cache-Tags
X-CAPServer
X-WPL-DATA
Ufe-Result
X-Server-IP
NODE
X-HTML-Minification-Powered-By
X-Runtime-Memory
ServerSignature
X-Env
ServerTokens
X-Processed-By
SiteSpeed
X-Adobe-Content
X-HW
X-Adobe-Loc
Magicmarker
NtCoent-Length
X-Shield-Request-Id
X-Traffic
X-LB-Server
X-VTEX-Cache-Status-Janus-Edge
EagleEye-TraceId
WWW-Authenticate
X-Route-To
NetMindSessionID
Proxy-Agent
X-TTFB-L
Cache-Tag
X-WN-ClientGroup
Smug-CDN
SVR
WN
Tracecode
X-SRV
X-Fedora-School-Id
W
X-Gateway-Cache-Key
X-Gateway-Cache-Status
X-Sys-Req-ID
X-Orig-Vary
BALANCEDTO
X-Cache-Dispatcherpragma
X-Cache-Dispatchercachecontrol
X-TTFB
X-Gateway-Skip-Cache
X-SmugMug-Hiring
X-LP
X-SmugMug-Values
Content_type
X-Resty-Request-Id
X-Jphone-Copyright
X-HydroSheep
X-LW-Web-Server
Contao-Page-Layout
X-Smartcache-Keys
X-Garden-Version
X-Smartcache-Timeout
X-WP
X-DEBUG
X-CB-Server
X-Unique-ID
RN-Server
X-Yottaa-Optimizations
X-AEM
Keywords
X-ASAP-Cache
X-Transaction
X-A
Web-App-Origin-Name
X-Drectory-Script
X-Varnish-Hostname
X-ServerIndex
X-Yottaa-Metrics
X-Connection-Hash
X-Trace-Id
X-Twitter-Response-Tags
X-Clara-ASAP
Max-Age
X-Generated-Time
X-Client-Vid
X-EPiphany-Vid
Description
A-Powered-By
X-Client-Image-Vid
X-WA-Info
Noq
X-NginX-Server
From-Origin
X-Akamai-Edgescape
Yoncu-Errno
X-AVG-Country-Code
Ram
X-Redman-Backend
X-Avg-Cookie-Expires
X-Sorting-Hat-Expire-Cache
X-Cache-Doesi
X-Symfony-Cache
VANITY-HOST
X-Compress-Hint
X-Redman-Final-Url
ScoreTracker
Environment
Ramp
X-Webkit-CSP
X-CRA-DC
X-Varnish-Id
SBGI-10
SBGI-1
X-Environment-Context
X-Cache-On
Server-ID
X-L-Path
X-Webstats-RespID
X-Plat
MW-Webserver
X-Disney-Akamai-Rule
Pics-Label
X-ARRServer
X-Goog-Meta-Goog-Reserved-File-Mtime
VServer
Access-Control-Allow-Header
Fastly-Backend-Name
X-GeoIP
X-Application
SBGI-5
Play-Detected-UserAgent
Play-Detected-Device
IISExport
X-App-Status
SBGI-RenderTime
SBGI-RealPath
X-Viator-Tapersistentcookie
X-PRAM
X-RDP
Ibf5scheme
X-VC-Enabled
Service-Worker-Allowed
Machine
X-Force
N365rili
X-Varnish-Debug-Age
X-Varnish-Debug-TTL
Og
X-Cache-Node
X-Provisioner-Version
X-Stage
X-VNode
X-Sucuri-Cache
X-Response
X-RiS-UFDI
SBGI-Device
Cmstype
SBGI-7
X-Domain-Checked
SBGI-9
Cmsid
X-Akamai-3PM-SW-Version
X-VC-TTL
X-Proto
X-Cache-Varnish
X-GoCache-CacheStatus
X-Magento-Action
X-Bip
X-CacheResult
X-Forwarded-Host
Url
Dispatcher
X-Cdn-Forward
Beyond-Iis
X-Vcache
X-Resource
X-Backend-Status
AC-ELC
X-SmartBan-URL
X-PHP-Response-Code
X-Rack-CORS
X-Key
AsisCache
X-WebKit-CSP-Report-Only
X-TB-M
RequestId
X-Rebelmouse-Cache-Control
X-Runtime-Affili
X-Balanceador
X-Src-Webcache
XDomainRequestAllowed
X-Acquia-Debug-Password
X-Rebelmouse-Surrogate-Control
X-CACHE-TTL
Backend-Timing
Home
SG
X-SmartBan-Host
X-App-Runtime
Dis-Env
X-Detected-Device
X-Varnish-ID
X-Culture
X-AutoRu-App-Id
X-Autoru-Host
X-Varnish-Server
X-Analytics
X-E
X-Autoru-LB
X-Redirector
X-FORWARDED-PROTO
X-Secret
X-WHOIS-Cached
TC-Cache
X-SDE-Name
X-Hosting-Env
X-Varnish-Action
TC-Cache-IC
TC-S-Cache
TC-Cache-U
X-Dw-Trace-Id
X-FireWall-Port
Hostname
From
Ctx
X-Dev
X-Cms-Mode
Worker
X-Highwire-SessionId
X-Request-Uri
X-Real-IP
X-Session-Reinit
X-Cocoon-Version
X-Goog-Meta-Replace
X-Directory-Script
X-Time-Microsecs
SHInfo
X-NginX-Cache
X-Goog-Meta-Policy
X-Fstrz
X-IIJ-Cache
TC-S-Cache-M
X-Airee-Node
X-Amz-Meta-Cb-Modifiedtime
X-Frames-Options
X-Amz-Meta-Content-Md5
X-Highwire-RequestId
X-Source-ID
X-Origin-Server
Identity
Bios
X-Atraveo-Cache-Control
X-Atraveo-ETag
SS
HitType
Access-Control-Allow-Method
Nginx-Cache
X-SV
X-EC2-Instance-Id
X-Atraveo-Expires
WP-AdvCache-MemCached
X-Atraveo-Zone
X-Atraveo-From-Varnish-Cache
Accept-Language
COMMERCE-SERVER-SOFTWARE
X-Atraveo-Varnish-Server-Id
Web
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
X-Atraveo-TTL
X-DTC
X-Pubstack
X-Flex-Lang
X-FPC
X-Flex-Evstart
X-Flex-Evend
X-Flex-Community
X-ACCELERATE
Myheader
Disablevcache
X-Adnet
X-RealServer
X-Remote-Addr
Id
X-Ghost-Cache-Status
X-Origin-Cache
X-MCB-Server
X-Info
X-Debug-Token
X-Machine
NLCacheNote
X-Cache-Via
X-HAProxy
X-Sites
X-Flex-Lastmod
X-Resolver-IP
X-Depends
X-Nginx-Host
X-Hosting
X-Wikidot-Backend
X-Wikidot-Static-Cache
Ec-CorrId
X-Data-Request
X-Compressed-By
X-OPNET-Transaction-Trace
AMP-Access-Control-Allow-Source-Origin
X-Amcomm-Site
Ec-Machine
X-Confluence-Request-Time
Paypal-Debug-Id
X-Desc
X-MAT-GEO
X-Refresh
Hname
X-LDNR-NOT-ROOT-HL-NOTSET
X-Distributor
X-Rewrite
X-GSL-Server
X-HashTwo
Traffic-Origin
Device
Il-Cl
Proxy-Cache
X-Amz-Meta-S3b-Last-Modified
X-Search-Id
X-Req-Head-Response
X-Flex-Tags
X-Map-Context
X-Streams-Distribution
X-Mobile-URL
X-Aramark-SID
ClientIP
F5-IpCliente
Gzip
OriginServer
X-HP-Trace-ID
X-Varnish-Cache-Local
X-B2f-Not-Route
X-DB-Content-Length
X-HP-Trace-Project
X-Flex-Tag
X-Cluster
X-Node-Name
SERVER-ID
XX
Xc
X-Bcwwwid
X-Grid-Server
X-Pagely-Cache
TP-L2-Cache
X-SH-Cache-Status
X-ESI
X-NID
X-Batcache
X-Distil-CS
X-Avvio-Cms-Cacheload
CLMOB
X-Omnis-SiteID
Hummingbird-Cache
X-Cache-TTL-Remaining
X-Lb
X-SERVER-NAME
X-KoobooCMS-Version
TP-Cache
Aoestatic
Strikingly-Cached
Strikingly-Cached-Version
VC-NoCache
X-Cf-Powered-By
X-Magento-Lifetime
Strikingly-Cache-Region
X-Author
X-Akam-SW-Version
Ez
Ohc-Response-Time
X-CacheID
X-NodeID
X-Rack-Cors
X-IP
CommercePlatform-Version
Actual-Object-TTL
OracleCommerceCloud-Version
X-Gannett-Site-Version
X-DataDome
X-ASAP-Age
X-AISO-Cacheable
X-AISO-Cache
X-Captured
X-Proxy-Cache-Key
X-Config-By
X-Amz-Id-1
X-Country
OracleCommerceCloud-Sandiego
X-Agent
X-SuperCache
Content-Generator
X-App
X-Gyrobase-Publication
X-DSMX-Rewrite-MS
NS-VaryByCustom-Key
Upgrade-Insecure-Requests
X-MidCOM-Meta-Cache
X-Powered-By-Home.Pl
X-Zendesk-Origin-Server
PagesDisplayed
X-DSMX-Render-MS
X-DN-Cache-Control
Server-Id
X-DDM-SERVER
Progma
X-Zendesk-User-Id
Accept-CH
X-DDM-SERVER-UPDATED
X-V
X-AISO-Server
X-DynamicCache
Lb
X-HS-Status
X-Render-Time
Kanooh-Host
X-Tag-Playlist
StatusCode
X-ServiceProvider
X-LBPoolMember
X-Proxy-Skip
Cleartype
Copyright
X-Nitro-Cache
X-4ormat-Cacheable
X-Header
X-OCTOPOD
BackendServer
Ews
X-ETag
PServer
X-Served-Server
X-PM-ID
X-Protected-By
X-Cache-Keep
X-Server-Addr
X-HP-CAM-COLOR
X-Dealeron-Backend
X-Rewritten-By
X-Reflector
Server-Ip
X-Batcache-Reason
X-Nginx-Request-Processing-Time
Ttl
NZSpeedy
X-Dealeron-Original-Url
X-Reflector-Cache
X-Cache-Detail
X-Serv
X-ManagedFusion-Rewriter-Version
X-Pj-Cache-Status
X-Served
AR-CACHE
AR-PoweredBy
X-Made-On
AR-SID
Y-Trace
X-CDN-RULE
Tesla.Performance
MSThemeCompatible
ViewMode
Response-Time
MS-CV
Z-Tpl
ServerIP
Generate-Time
X-Header-Treatment
AR-ATIME
X-CloudBurst-WordPress
X-Instance-Id
X-Proxy-Id
X-Apm-Telemetry-Syncmark
X-Beatles
X-Cache-ID
RSB-LINK
Session-From
Control-Cache
X-Middleton-Pagespeed
EQ-Cache
GranicusServer
HostName
X-Cache-Time
X-CloudBurst-Backend
ProxiaInstanceId
Session-Id
X-Domino-CacheValidationWithETagReason
X-Domino-CacheValidationWithETagResult
CommunityServer
X-Deity
X-Debug-Token-Link
X-CloudBurst-Frontend
X-CloudBurst-Cache
Viewport
X-Cname-TryFiles
X-CSRF-Token
X-HEAD
EN-User
MageStack-PageSpeed
MageStack-Magento-Version
MageStack-Tag
MageStack-Web-Node
X-Varnish-Cached-TTL
X-Pageid
MageStack-Loadbalancer
MageStack-Debug
MageStack-Cache-Lifetime
MageStack-Cache-Hits
MageStack-Cache-Status
MageStack-Cache-Warning
MageStack-Config
MageStack-Cacheable
X-Varnish-Cached
Provided-Host
X-HeBS-Cache-Status
X-FIRSTBase
X-I-V
X-Instart-Cache-Id
X-M-T
X-M-P
X-Mw-Workerstats
X-CH-Device
X-Time-Zone
X-UPServer
X-B
X-Beresp-Ttl
X-Cachable
MageStack-Cache
MageStack-Area
X-FastCGI-Cache-Status
CmsfirstPublishTimestamp
X-HA
X-T
X-Middleton-PageSpeed
X-JSESSIONID
X-Debug-Message
X-Nginx-Request-Time
X-Amz-Meta-Version-Id
MSSmartTagsPreventParsing
X-AppVersion
X-Az
X-Transaction-Name
X-S-V
X-S-C
Amfplus-Ver
Hamster
X-XHR-Current-Location
X-VLoc
Key
X-Varnish-Instance
Arrnode
X-UT-Cache
X-Q-S
X-RAMCache
X-Pool-Info
X-Serverid
X-UA
X-Activity-Id
X-Script
X-Pass-Through
X-Meta-MSSmartTagsPreventParsing
X-PBY
X-PROCESSED-BY
X-Phpwcms-Release
X-Meta-Imagetoolbar
X-Meta-MSThemeCompatible
X-Nginx-Page-Cache
X-SE-Debug
X-Sid
X-Node-App
X-REDIRECTSERVER
X-Highwire-Smart-Code
X-Highwire-Sitecode
X-Hit
X-Phpwcms-Page-Processed-In
DrivedBy
X-ZSITES-DNS
X-Box
Language
X-Catalyst
X-Backend-Host
X-Who
X-Webcelerate
X-SCM-Server-Number
X-Hash
X-Client-Ip
X-UnsetCookies
X-Varnish-Grace
X-VG-WebCache
X-Via-NSCOPI
X-FG-RequestId
X-Enhanced-By
Debug-Status
X-Built-With
X-NO-BREACH
X-Generation-Time
X-DS1D
MachineName
SB-Cache-Life
SB-Site-Device
X-S-Misc
Page-Template
Cache-Status
X-D-Time
X-ReqId
No-Cache
X-Secure
Provider
Content-Cache
X-Artvisual-Server
X-AMAZEEIO
DeleGate-Ver
X-Timestamp
X-AppServer-Cache-Rule
X-ELB
X-SilverStripe-Cache
X-Unique-Id
UrlWatchModule-Time
X-MCF-ID
X-7d-Trace-Id
Warning
CpuTime
Webserver
User-Agent
FRONT-END-SECUREBROWSER
X-ACLR-Version
Cacheid
TZ-Server
X-VC-Debug
X-VC-Cacheable
X-VC-Hash
X-W3TC-Minify
X-CO-Host
Fastly-Restarts
X-WebNode
X-CDN-COMPRESS
ID
X-Full-Url
X-Route
X-RiS-PX
X-Svr
X-Server-FQDN
SB-Cache-Remaining
X-Cache-Id
X-UPSTREAM-Address
X-Cache-Original-TTL
X-Cache-Bypass
X-Custom-Header
X-VC-Cache
X-Turpentine-Esi
X-BPool-Bx-Cache
X-BPool-Back
X-BPool-Fx-Cache
X-BServer
X-Cjtype
X-Cacheable-TTL
X-BPool
X-Blog
TheAnswer
X-7d-Instance-Id
Swift-Performance
Requested-Host
FindLaw
X-Obvious-Tid
X-Obvious-Info
X-Container
X-Hrouter
X-Static
X-Cache-Me-Harder
X-Title
Tk
X-Hstore
X-MainProfileCategory
X-MainProfileURL
X-M-V
X-MainProfileName
X-Layout
X-MainProfileID
X-ServerAddr
X-Pixelsilk-Server
FastCGI-Cache
X-Cache-Extended
X-Pixelsilk-Version
X-MSEdge-Ref
X-ProcessESI
X-RemovedCookies
X-Instance
WSCLoggingUUID
X-Dynamic-Cache
X-RequesterIP
X-Old-Content-Length
X-Theme
X-Test-Debug
X-Varnish-Cache-Ttl
X-XHTML-Minification-Powered-By
TestCC
X-NMT-Proxy
X-Ants-Machine-Id
X-Cache-TTL-Current
CDCHOST
X-Ants-Host
X-Site
WP-FROM-CACHE
SB-Site-IE-VERSION
Returned-Status
Xcache
MwpReleaseVersion
X-PG
X-Member
X-Session-Id
X-Restarts
X-Fpc
Countrycode
Head
CS-SERVER
Expiries
X-Cache-V
X-SH-Cache-Disabled
X-CPU-Time
Serverid
Container
X-Homeaway-Requestmarker
X-Cache-TTL-Age
X-Backend-Name
X-Svr-Proxy
X-Server-Instance-Name
Realaction
X-Geo-IP
X-SSLUpstream
X-SSLProxy
X-PBS-Appsvrname
X-PBS-Fwsrvname
X-Prerender-Token
X-Skip-Cache
Actioncode
X-Server-Hostname
Amp-Access-Control-Allow-Source-Origin
X-BackendProxy
Rewriter
DbServerName
X-CACHE-KEY
X-Locale
CD4
X-PBS-Appsvrip
X-NewsFlow-Sitename
X-Gateway-Rate-Limit-Conn
X-Gateway-Rate-Limit-Delayed
X-M
X-Server-Generated
X-Reason-Bp
X-Status
X-ClusterID
X-Prerendered
X-Origin-Date
X-Varnish-Debug-Hits
X-Cache-FS-Status
X-Healthy
X-MyName
ReqUrl
Powered-By-115
Request-Filtered-By
X-Proxy-Backend
Referer
V-Age
User-Cache-Control
X-Uncacheable
BlockPHPCallEnd
DB-Nickname
Access-Control-Request-Headers
Be
Redirect-Reason
X-Cache-Set
X-Beatles-Hits
X-Ao-Cache-Key
Arrow-RequestId
DNNOutputCache
VAR-Cache
HA-Geolat
HA-Geolon
X-This-Proto
Resin-Trace
HA-Cloudapp
HA-Geocity
HA-Geocountry
X-DevSrv-CMS
X-Does-He-Have-Time
X-Processed
X-Mobile-Rewrite
X-Distributed-By
X-Say-Cacheable
X-Say-TTL
Note
X-SCProxy
X-SayCDN-TTL
X-Test
X-Cache-LB
X-TTL-Age
X-TLS-Version
X-Sn-Servicetimems
X-Would-Your-GrandPa-Wait
X-Your-GrandPa-Would-Wait
PB-RID
PB-PID
X-Machine-Name
HA-Georegion
X-Optimization
X-Request-Processing-Time
X-B3-Spanid
X-PoweredBy
X-K8s
X-MSU-SOURCE
X-Request-Received
X-DEBUG-TTL
X-DeliveryServer
X-ENV
X-B3-Traceid
X-Cacheable-By-Varnish
X-ACache
Apple-Itunes-App
X-Fastly-Backend-Reqs
X-BIT-Node
X-Built-By
X-Cache-ASPX
X-Tt-Dbg
X-Upgrade-Enabled
X-DEBUG-HOST
X-Clx-Request
IES-Server
L5d-Success-Class
Load-Balancer
HA-Urlpath
HA-Servedtime
HA-Host
X-Max-Age
HA-Ipaddr
X-Olaf
X-Upstream-Status
Server-Hostname
Edgecast
X-Ssl-Cipher
SINA-LB
SINA-TS
NKBVHEADER
Www.Aujourdhui.Com
V-TTL
X-CGP