Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
X-Cache
Age
Content-Language
X-AspNet-Version
P3P
X-Pingback
Expect-CT
X-UA-Compatible
Via
Upgrade
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Adblock-Key
X-Request-Id
Referrer-Policy
X-Xss-Protection
X-Varnish
X-Check
X-Generator
X-Language
X-Template
X-Buckets
X-Drupal-Cache
P3p
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
Alt-Svc
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
Host-Header
X-Sorting-Hat-Section
X-Dc
X-Alternate-Cache-Key
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-ShopId
X-Sorting-Hat-PodId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-ShopId
X-ShardId
X-Sorting-Hat-FeatureSet
X-Powered-By-Plesk
X-Runtime
X-Served-By
X-Via
MS-Author-Via
Content-Location
X-Amz-Cf-Id
X-Powered-CMS
X-Contextid
Access-Control-Allow-Headers
X-IPLB-Instance
X-ServedBy
X-UA-Device
X-PC-Hit
X-PC-Key
Access-Control-Allow-Methods
Cartoon
X-PC-Host
X-PC-AppVer
X-PC-Date
Status
X-Timer
Access-Control-Allow-Credentials
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
CF-Cache-Status
X-Rid
X-Iinfo
X-NewRelic-App-Data
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-Seen-By
X-Wix-Request-Id
X-Backend
X-WPE-Loopback-Upstream-Addr
X-Tumblr-Pixel-1
Powered-By
Content-Encoding
X-Mod-Pagespeed
X-Cache-Status
X-Host
X-Tumblr-Pixel-2
X-CST
X-Endurance-Cache-Level
X-Server
X-Cache-Enabled
X-Cache-Hit
X-Port
X-Logged-In
X-CDN
Keep-Alive
X-DIS-Request-ID
X-Server-Powered-By
X-Drupal-Dynamic-Cache
X-Nginx-Cache-Status
X-Robots-Tag
X-Accel-Version
X-Tumblr-Pixel-3
Server-Timing
X-Turbo-Charged-By
X-Proxy-Cache
X-Page-Speed
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Content-Digest
X-Content-Powered-By
X-LiteSpeed-Cache
X-GitHub-Request-Id
Content-Security-Policy-Report-Only
X-Rack-Cache
X-ASPNET-VERSION
X-AH-Environment
X-Pad
X-Varnish-Cache
Edge-Control
X-FW-Hash
X-FW-Server
X-Request-ID
Request-Context
X-FW-Serve
X-FW-Type
X-FW-Static
X-Request-Country
X-XRDS-Location
SPRequestGuid
X-SharePointHealthScore
X-MS-InvokeApp
WP-Super-Cache
X-Trace
X-Hits
MicrosoftSharePointTeamServices
X-Tumblr-Pixel-4
X-Node
X-Webcom-Cache-Status
Edge-Cache-Tag
X-BC-Stapler
Timing-Allow-Origin
Cf-Railgun
X-HS-Cache-Config
X-Cache-Lookup
X-HS-Content-Id
Access-Control-Expose-Headers
X-Amz-Request-Id
X-Amz-Id-2
X-Ua-Compatible
X-Content-Security-Policy
X-Died
Charset
X-Newrelic-App-Data
X-Webserver
X-CF-Powered-By
X-HS-Combine-CSS
X-FullPageCaching
X-PHP-Backend
Request-Id
X-PhApp
X-Cnection
X-INKT-URI
X-INKT-SITE
Access-Control-Max-Age
X-Fastly-Request-ID
SPIisLatency
SPRequestDuration
X-Backend-Server
EagleId
Composed-By
MicrosoftOfficeWebServer
X-Swift-SaveTime
X-Swift-CacheTime
X-CDN-Pop-IP
X-CDN-Pop
Grace
X-SS-Location
X-SS-Conf
Served-By
X-Safe-Firewall
X-Device
X-Spip-Cache
Liferay-Portal
Rating
X-Server-Name
X-Hyper-Cache
X-Dw-Request-Base-Id
Front-End-Https
X-Edge-Cache
X-Edge-Cache-Key
X-NF-Request-ID
X-VCache
X-Tumblr-Pixel-5
X-DDC-Arch-Trace
X-LiteSpeed-Cache-Control
X-Cloud-Trace-Context
X-Tumblr-Content-Rating
X-Microcache
X-RateLimit-Remaining
X-Cluster-Node
X-RateLimit-Limit
X-SERVER
X-HeyJason
Permitted-Cross-Domain-Policies
X-Do-Not-Hack
X-FB-Debug
X-RateLimit-Reset
X-Loop
X-TNCMS
Surrogate-Control
X-Jimdo-Wid
X-Jimdo-Instance
X-Clacks-Overhead
X-Wix-Punisher
X-Acc-Exp
X-DNS-Prefetch-Control
X-Vtex-Processado-Em
X-OneAgent-JS-Injection
X-Middleton-Display
X-Sol
Display
X-Middleton-Response
Response
P-WS
P-LB
Content-Style-Type
Content-Script-Type
Refresh
X-Firenze-Processing-Times
Public-Key-Pins
X-Debug-Info
X-StackifyID
X-Age
X-Kinsta-Cache
X-Magento-Tags
X-Cached
X-User-Agent
Fpc-Cache-Id
X-WebKit-CSP
X-XN-Trace-Token
X-XN-XNHTML
X-Px
Xkey
X-Original-Date
X-Amz-Version-Id
X-Ruxit-JS-Agent
X-Cache-Config
X-Goog-Hash
X-Generated-By
X-Shopid
PageSpeed
X-Sorting-Hat-Podid-Cached
X-Sorting-Hat-Shopid
X-Sorting-Hat-Privacylevel
X-Sorting-Hat-Podid
X-Sorting-Hat-Shopid-Cached
X-Shardid
X-Sorting-Hat-Featureset
X-N-OperationId
Retry-After
X-Hostname
X-Zen-Fury
X-Frame-Option
X-Topify-Platform
X-DynaTrace-JS-Agent
X-Tumblr-Pixel-6
X-Handled-By
X-Loopia-Node
X-LW-Cache
X-B-Cache
Rt-Fastcgi-Cache
X-MiniProfiler-Ids
X-URL
X-Edge-Location
X-Url
X-CMS-Version
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Goog-Storage-Class
X-Goog-Generation
Edge-Control-Message
X-Outils-CS
Fastcgi-Cache
Feature-Policy
X-Upstream
X-Whom
X-Varnish-TTL
Access-Control-Request-Method
X-Platform-Router
X-Platform-Processor
TCN
X-Platform-Cluster
Powered
X-Request-Time
X-Servedby
X-AspNetWebPages-Version
X-Cached-By
X-From
X-Source
Public-Key-Pins-Report-Only
X-Content-Options
X-FORWARDED-FOR
ServedBy
X-Engine
X-Version
X-Vtex-Processed-At
No
X-CacheServer
X-VTEX-Janus-Router-Backend-App
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Remote-Cache
X-Powered-By-VTEX-Janus-ApiCache
X-Accel-Expires
X-SRCache-Store-Status
X-Cdn
X-SRCache-Fetch-Status
X-DynaTrace
X-Varnish-Host
Allow
X-Varnish-Cache-Hits
Last-Published
X-Magento-Cache-Debug
Fhost
X-EdgeConnect-Origin-MEX-Latency
X-RESOURCE
X-URLSCHEME
Imagetoolbar
X-Signature
X-Recruiting
X-Location-Id
X-Umbraco-Version
X-EdgeConnect-MidMile-RTT
Product
X-LBLID
X-Response-Time
X-NWS-LOG-UUID
X-Application-Context
X-Developer
X-Actual-URL
Warning
X-Original-Request
X-Passed-To-DLL
DynaTrace
X-Passed-To
X-Returned-From
X-Returned-From-DLL
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-PERF
X-ApacheServer
X-Correlation-Id
X-Forwarded-For
Host
X-Cache-Info
X-Stale
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
Arr-Disable-Session-Affinity
X-Returned-From-PostProcessResponse
X-Platform-Cache
X-F-Cache
X-Returned-From-BeforeDispatch
X-Powered-By-360WZB
X-Microcachable
X-Device-Type
X-Cache-Rule
X-ET-API-ROOT
X-Shop-Id
X-ET-API-ORIGIN
X-Varnish-Count
X-Varnish-HitMiss
X-Defender
X-Guploader-Uploadid
X-ET-API-VERSION
Generator
X-Rnd
X-Fastcgi-Cache
X-UD-Method
X-Micro-Cache
Alternate-Protocol
Origin
X-Platform-Server
X-Cache-Key
X-Platform
X-Via-JSL
X-Msg-2-Log
Content-Hash
X-SO
X-BS
X-HS-Content-Campaign-Id
X-I-Sp
X-Cache-Namespace
Pagespeed
WZWS-RAY
X-Ezoic-Cdn
X-S
X-TransIP-Balancer
Version
X-Dns-Prefetch-Control
X-Environment
X-Gateway-Skip-Cache
X-Gateway-Cache-Status
X-Gateway-Cache-Key
Surrogate-Key
Cache-Provider
X-App-Status
X-Supported-By
X-Hosted-By
X-Instart-Request-ID
X-HOST
X-TransIP-Backend
X-Cache-Tags
X-Duration
X-Cache-Age
X-Microcache-Status
X-Translation
X-LB-Node
X-Lambda-Id
X-Dispatcher
X-Director
X-Correlation-ID
RTSS
USPLoggingUUID
X-Sapient
X-Expires-Orig
X-Track
Cache-Key
X-Powered-By-VelaWeb
X-Server-ID
X-Magento-Cache-Control
X-Akam-SW-Version
X-Daa-Tunnel
Content-Disposition
X-SSL-Cipher
X-Cache-Control-Orig
X-Server-Upstream
X-Page-Cache
X-Varnish-Seen-By
X-Varnish-RemainingLife
X-Front
X-Varnish-GracePeriod
X-Varnish-ObjectSource
X-Varnish-RemainingTTL
MIME-Version
X-Ttl
Pool
X-CSRF-Protection
X-Abgroup
X-Last-Modified
X-Hypernode
X-SSL-Protocol
Wsr-Cache
X-Powered-By-VTEX-Janus-Edge
X-Edge-IP
X-App-Hosting
X-Cache-TTL
X-I
X-Vcap-Request-Id
Dmn
S-Cnection
X-Revision
X-ORACLE-DMS-ECID
X-NoCache
X-Cache-Debug
X-Rocket-Nginx-Bypass
X-NetCat-Version
X-Debug
Accept-Encoding
X-Storage
X-Forwarded-Proto
X-GUploader-UploadID
X-Rocket-Nginx-Serving-Static
Akamai-IP
X-Drupal-Cache-Tags
X-Cf-Powered-By
X-Dealeron-Original-Url
If-Modified-Since
X-Litespeed-Cache
X-Cache-Lifetime
X-Magnolia-Registration
X-DealerOn
X-Dealeron-Backend
SSPAppContext
X-Pressidium-NinukisWP-Ver
X-Cache-Engine
X-Art-Request-Id
X-Varnish-Cacheable
X-Route-Server
X-Cache-Level
X-ARC
X-Gamma-Serve
Cneonction
SN
X-Matrix-Server
X-ATG-Version
X-IsCacheURL
X-Matrix-Proxy
X-Cache-Type
Node
X-Url-Base
X-LB
X-VARITI-CCR
X-Cache-Handler
X-Grace
X-CJ-Soft
X-Dispatch
PICS-Label
Powered-By-ChinaCache
FAI-W-FLOW
X-Hiawatha-Cache
X-SDS
X-Geo-Country
X-Content-Encoded-By
X-Client-IP
X-Cache-Operation
X-Discourse-Route
X-Amz-Meta-S3cmd-Attrs
X-Server-Id
X-ServerName
X-Country-Code
X-Drupal-Cache-Contexts
Backend
X-Generated
X-Vhost
Contao-Page-Layout
Req-Id
X-Flow-Powered
X-Cache-Server
ServerID
X-SSLProxy
Src-Update
X-Varnish-Backend
X-Varnish-Url
X-SSLUpstream
X-PwB-Node
X-Cache-Expires
Update-Time
X-Firenze-Processing-Time
X-Pantheon-Environment
Lsrequestid
Page-Completion-Status
X-Pantheon-Site
Surrogate-Key-Raw
X-Varnish-IP
X-Pantheon-Phpreq
X-SV-Edge
X-SV-Pid
X-SV-Nginx-Duration
X-SV-FromDBCache
AMF-Ver
ServerName
X-SVR-IIS
X-GeoIP-Country-Code
X-Svr-Proxy
X-SRCache-Key
X-Cache-Only-Varnish
X-SV-Expires
Author
X-N
Proxy-Connection
X-LB-Server
X-SV-Cacheable
X-SV-Duration
X-SV-CreatedAt
X-SV-CacheTags
X-Service-Id
X-Cache-Device-Type
X-ServerID
Section-Io-Id
Srv
Content-Encoding-Handler
X-UPSTREAM
X-Processing-Time
X-Frontend
Nodo
X-Sucuri-ID
X-Esi
X-SRV
X-Trace-Id
X-TransIP-Reserved
X-ORACLE-DMS-RID
SiteSpeed
X-FTR-Request-ID
X-Nbs
X-Origin
X-Id
X-Content-Age
X-Varnish-Ttl
X-ACMCache
Tracecode
X-Dynamic-Cache
Pv
X-Time
Qs-Cache
X-Real-Server
X-Runtime-Rack
Smug-CDN
X-SmugMug-Hiring
X-SmugMug-Values
X-Varnish-Age
X-TTFB
X-FW
X-TTFB-L
Https
X-CacheFROM
X-Server-Instance
X-Unbounce-Variant
Cache
X-Unbounce-VisitorID
X-Browser
X-CF-Passed-Proto
X-Unbounce-PageId
X-Varnish-Retries
X-Speed-Cache
X-Speed-Cache-Key
X-High-Performance
Location
X-Config-Blacklist-Version
X-Locale
X-Env
X-Akamai-Device-Characteristics
X-Akamai-Device-Model
X-HW
X-Nginx-Cache
X-Cache-Fix
X-GeoIP-Country-Name
X-Cookie-Domain
X-Cache-PageType
MC
Server-Name
NnCoection
IM-Version
X-Content-Type-Option
X-Drectory-Script
IBM-Web2-Location
X-Srv
Content_type
X-Transaction
X-Connection-Hash
W
X-Twitter-Response-Tags
X-PF-Uncompressing
Edit
X-Sucuri-Cache
X-VC-Enabled
X-BKSrc
X-Empowered-By
Ohc-File-Size
Custom-Header
CacheControlHeader
X-Middleware-Start
X-RequestId
NetMindSessionID
X-Worker
Fw-Via
From-Origin
X-Always-Cache
X-Symfony-Cache
Proxy-Agent
X-Orig-Vary
S
Nginx-Cache
Accept-Charset
X-Sys-Req-ID
X-AF-Userserver
Local-Info
X-Varnish-Hits
X-WR-Flags
X-ARRServer
X-Cache-Control
X-Webstats-RespID
X-TTL
SEOMOZ
X-Rq
Dtk-Cache-Check-0
MJ12bot
X-Varnish-Server
Content-MD5
X-Unique-ID
Backend-Timing
X-Analytics
Strikingly-Cache-Region
Strikingly-Cached-Version
Strikingly-Cached
X-LP
X-Wikidot-Static-Cache
X-Wikidot-Backend
Use-Proxy
Web-App-Origin-Name
Adm-Server
X-TB-M
X-LW-Web-Server
Cm-Server
Cache-Tags
WWW-Authenticate
X-RealServer
Service-Worker-Allowed
Content-Transfer-Encoding
X-Stage
Xc-Version
X-Purge-URL
X-CacheDebug
X-Framework
HCVer
X-Litespeed-Cache-Control
HAVer
X-BackendServer
X-Proxy
X-CB-Server
X-Runtime-Memory
X-Amz-Storage-Class
X-Adobe-Content
Swift-Performance
X-Shield-Request-Id
X-Adobe-Loc
X-Nitro-Cache
X-ID
X-Cache-CFC
X-Amz-Rid
SVR
X-Fedora-School-Id
X-WP
X-GoCache-CacheStatus
X-Role
Max-Age
X-Purge-Host
Cached
X-RiS-UFDI
X-Disney-Akamai-Rule
X-FastCGI-Cache
X-Xrds-Location
X-Webkit-CSP
X-Generated-Time
X-SE-Debug
X-Culture
X-Location
X-AEM
X-VNode
Front
X-Balanceador
Server-Info
FindLaw
X-Now-Id
Environment
X-App-Server
X-Pool
Frame-Options
X-JG-Page-Cache
X-SERVER-NAME
X-Content-Security-Policy-Report-Only
X-App
Device
X-NginX-Server
X-NginX-Cache
X-HostName
X-Amzn-Trace-Id
X-Smartcache-Timeout
X-Amz-Apigw-Id
X-Resty-Request-Id
Lb
X-Smartcache-Keys
X-Detected-Device
X-Amzn-RequestId
Access-Control-Allow-Method
Copyright
X-Storage-Cache-Expires
X-VCS-Cacheable
X-Dynatrace-Js-Agent
RequestId
X-Varnish-ID
X-Sedo-Request-Id
X-VCS-Ttl
X-Cache-Miss-From
Dispatcher
X-CAPServer
X-Storage-Cache
X-Storage-Cache-Date
Pf.Web.Request.Id
X-Backend-Status
X-CDN-Forward
X-Webcelerate
X-SH-Cache-Status
Hummingbird-Cache
X-Origin-Id
X-App-Runtime
X-FIRSTBase
X-Runtime-Affili
X-Processed-By
X-Vip
XDomainRequestAllowed
X-IIJ-Cache
A-Powered-By
X-Info
F5-Trid-Value
X-WPL-DATA
Access-Control-Request-Headers
X-ClientSide-Caching
X-Application
X-Jphone-Copyright
F5-Trid-Name
X-Lw-Cache
X-FireWall-Port
X-Debug-Token
X-Rack-Cors
RN-Server
X-GeoIP
X-Beget-Proxy
X-Domain-Checked
X-A
X-Akamai-Edgescape
X-Key
X-HydroSheep
Upgrade-Insecure-Requests
X-Provisioner-Version
NtCoent-Length
X-Server-IP
X-Say-TTL
X-SayCDN-TTL
X-SP-Farm
NODE
Ibf5scheme
Identity
X-Say-Cacheable
AETN-Area-Code
X-Plat
Access-Control-Allow-Header
Pics-Label
N365rili
X-Confluence-Request-Time
X-Oferteo-Domain
X-Goog-Meta-Goog-Reserved-File-Mtime
AMP-Redirect-To
Cteonnt-Length
VServer
AKA-DEVICE
X-HashTwo
X-DynamicCache
X-GSL-Server
Paypal-Debug-Id
SHInfo
X-Now-Cache
X-Cache-On
X-VC-TTL
X-Cache-Detail
X-MAT-GEO
X-Data-Request
AETN-State-Code
X-ProcessESI
X-MidCOM-Meta-Cache
AETN-Country-Name
AETN-Country-Code
X-SP-UniqueName
AETN-Continent-Code
X-RemovedCookies
AETN-DEVICE
AETN-EU
Num
AETN-Longitude
AETN-Postal-Code
X-Desc
X-Forwarded-Host
AETN-Latitude
X-Amz-Id-1
AETN-City
Filters
X-CACHE-TTL
AsisCache
X-Resolver-IP
Eomportal-Instance
X-Agent
Arrnode
BALANCEDTO
X-SAPP
Id
Pragrma
EagleEye-TraceId
EN-User
X-Captured
BackendServer
X-4ormat-Cacheable
Ufe-Result
X-Remote-Addr
X-Yadis-Location
X-Garden-Version
X-CRA-DC
ScoreTracker
X-Varnish-Action
X-Response
X-Pagename
X-Hit-Cache
X-Proxy-Skip
X-Timestamp
Url
X-Amz-Meta-Content-Md5
Disablevcache
X-Compress-Hint
X-HS-Status
X-AVG-Country-Code
X-Span
X-Avg-Cookie-Expires
SRV
X-Reflector-Cache
X-Redman-Backend
X-Redman-Final-Url
X-Hosting-Env
X-SDE-Name
X-Cache-2
From
X-Reflector
Worker
X-Cms-Mode
X-Dev
CLMOB
Noq
X-Session-ID
X-Akamai-Transformed
X-ENV
X-OpenCart-Lightning
X-Resource
WN
Referer
X-WN-ClientGroup
Ram
Ramp
X-Cache-Doesi
MageStack-PageSpeed
MageStack-Tag
MageStack-Debug
MageStack-Loadbalancer
X-Depends
X-MCB-Server
X-Req-Head-Response
X-E
X-Distributor
X-Map-Context
X-JSESSIONID
MageStack-Magento-Version
X-ESI
X-V
X-FastCGI-Cache-Status
MageStack-Cache
X-Hosting
X-Hstore
X-Ghost-Cache-Status
Cleartype
X-Fstrz
X-Rule
X-Test
AR-ATIME
X-Middleton-PageSpeed
X-Varnish-Debug-TTL
X-Varnish-Debug-Age
X-Hrouter
X-Appmachine-Environment
MageStack-Cache-Lifetime
MageStack-Cache-Status
Request-Country
MageStack-Cacheable
MageStack-Cache-Hits
X-Clara-ASAP
WP-FROM-CACHE
Request-EU
MageStack-Area
X-Amcomm-Site
MageStack-Config
X-Page
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
X-Svr
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
X-Goog-Meta-Policy
X-Rebelmouse-Cache-Control
X-Atraveo-Cache-Control
X-Atraveo-ETag
X-Atraveo-Zone
Prama
X-ServerIndex
Thanks
X-Path-Route
X-Bip
X-Cache-Varnish
XX
X-Refresh
X-Force
X-AOL-HN
X-PRAM
X-Varnish-Hostname
X-Source-ID
X-Goog-Meta-Replace
Machine
Resin-Trace
X-Real-IP
Edgecast
AR-SID
X-Amz-Meta-Cb-Modifiedtime
X-DataDome
Firespring-Website-Id
X-ASAP-Cache
COMMERCE-SERVER-SOFTWARE
CS-SERVER
MS-CV
AR-CACHE
X-Box
X-Server-Addr
X-Origin-Server
X-Cache-Ttl
Web
Traffic-Origin
AR-PoweredBy
X-Upgrade-Enabled
X-HA-Frontend
X-HA-Backend
MageStack-Web-Node
MageStack-Cache-Warning
X-Cdn-Forward
X-Directory-Script
WP-AdvCache-MemCached
Server-Id
X-CACHE-KEY
X-RAMCache
Fastly-Backend-Name
Magicmarker
X-SilverStripe-Cache
Pramga
Cache-Status
NZSpeedy
X-Proto
CommunityServer
X-Varnish-URL
Accept-Language
Load-Balancer
X-Origin-Cache
Beyond-Iis
X-Generated-Timestamp
IES-Server
X-Dw-Trace-Id
X-Consent-Required
X-Cocoon-Version
X-HeBS-Cache-Status
X-Nginx-Host
X-Request-Uri
X-Middleton-Pagespeed
X-LBPoolMember
X-Proxy-Backend
X-Ratelimit-Limit
X-Ratelimit-Remaining
TC-Cache-U
X-Cache-Time
X-Aramark-SID
ServerTokens
X-Domino-CacheValidationWithETagReason
TC-S-Cache
TC-Cache-IC
X-Unique-Id
Server-Ip
X-Frames-Options
TC-Cache
X-Domino-CacheValidationWithETagResult
TC-S-Cache-M
X-Varnish-Cache-Local
Home
X-Mobile-Rewrite
X-Cache-TTL-Age
X-Cache-Warmer
X-Cache-TTL-Current
DrivedBy
X-Scheme
ServerSignature
X-ETag
Proxy-Cache
X-Node-App
Il-Cl
SERVER-ID
Apachenode
X-Batcache
X-B3-Sampled
X-Block-Rule
X-Batcache-Reason
X-Built-With
Xc
X-Block-RuleID
X-Session-Reinit
X-Proxy-Id
X-SuperCache
X-UA-Bot
X-CacheLoc
X-EC2-Instance-Id
X-HAProxy
X-XHR-Current-Location
AC-ELC
AMP-Access-Control-Allow-Source-Origin
X-MrHost
X-Gannett-Site-Version
X-Streams-Distribution
X-SmartBan-URL
X-Highwire-SessionId
X-Highwire-RequestId
X-Ms-Request-Id
X-ServiceProvider
X-SmartBan-Host
IISExport
X-DSMX-Rewrite-MS
X-Custom-Name
Report-To
X-DevSrv-CMS
X-Flex-Community
X-Flex-Evstart
X-Flex-Evend
Myheader
DNNOutputCache
X-Yottaa-Optimizations
X-Yottaa-Metrics
Aurora-Node
Cmsid
Cmstype
X-Flex-Lang
X-Flex-Lastmod
Access-Control
*
X-Enabled1
X-Enabled2
PB-PID
X-Enabled3
X-Via-S
X-Soro
X-Flex-Tags
X-Flex-Tag
X-HTML-Minification-Powered-By
X-Proxy-Cache-Control
X-WR-Trace
X-PBY
X-FPC
X-Highwire-Smart-Code
X-Highwire-Sitecode
X-Nginx-Request-Processing-Time
X-Proxy-Cache-Key
X-UnsetCookies
X-RequesterIP
X-Cache-Via
X-DSMX-Render-MS
X-ReqId
X-Rack-CORS
X-Serv
X-Status
Provider
X-B2f-Not-Route
X-PHP-Response-Code
X-Cacheable-TTL
X-Adnet
X-Client-Image-Vid
X-Client-Vid
X-EPiphany-Vid
X-Actindo-Thread-Id
X-Actindo-Rs
X-Zendesk-Origin-Server
X-WA-Info
X-Zendesk-User-Id
VANITY-HOST
X-Actindo-Request-Id
PB-RID
X-Secret
X-Container
X-Abuse
TP-L2-Cache
X-KoobooCMS-Version
X-Tag-Playlist
X-Olaf
X-Mobilized-By
TP-Cache
Powered-By-115
Viewport
X-Activity-Id
X-Upstream-Addr
X-WebNode
X-SSLTerm-Server
Request-Filtered-By
Dis-Env
Accept-CH
X-7d-Instance-Id
Og
X-7d-Trace-Id
Keywords
X-Cache-Extended
X-Cache-Action
X-M
Tempo
FRONT-END-SECUREBROWSER
D
Hamster
HitInfo
Server-ID
HitType
X-PBS-Fwsrvname
X-PBS-Appsvrname
X-Build-Id
X-Debug-Message
X-HA
X-Instart-Cache-Id
X-CH-Device
CDN-Cache
X-Az
X-Accel-Cache-Control
MageStack-Last-Modified
Amfplus-Ver
Provided-Host
Backend-Name
Backend-IP-Port
MageStack-Cache-Lifetime-Sent
X-UA
X-ASAP-Age
X-Czt
X-Title
X-ZORequestID
X-Instance-Id
X-MyName
X-PBS-Appsvrip
X-Nginx-Request-Time
Yola-ID
X-Amz-Meta-Version-Id
X-Layout
Session-Id
SINA-LB
SINA-TS
X-CacheID
X-Cache-FS-Status
Description
Yoncu-Errno
X-DDM-SERVER
X-Cache-Dispatcherpragma
Content
X-Log
X-Qiniu-Zone
X-AutoRu-App-Id
X-Cache-Dispatchercachecontrol
X-Reqid
X-Ser
X-Distributed-By
X-DDM-SERVER-UPDATED
X-Autoru-Host
SBSS
X-Via-NSCOPI
VC-NoCache
X-FORWARDED-PROTO
X-Pj-Cache-Status
X-APIAUTH-VAL
X-ENDPOINT
X-APIVERSION
PServer
Play-Detected-UserAgent
X-DB-Content-Length
X-Appversion
X-Appid
X-Dscp-Value
X-FromPodPressCache
X-ORIKEY
X-WEBMGR-CACHE
Now
X-Now-Trace
Bios
NLCacheNote
X-Shard
X-IP
X-Now-Instance
X-Varnish-Debug-Hits
Fastly-Debug-Digest
Play-Detected-Device
X-Bcwwwid
X-ROUTING
SS
PBS
ServerNode
X-Header
X-Custom-Header
X-Cache-ID
X-CSRF-Token
Service-Owner
X-I-V
X-From-Varnish
SB-Site-IE-VERSION
SB-Site-Device
X-From-Varnish-Deploy
X-HEAD
X-SSL
X-Boot
X-RunCloud-Cache
X-TLS-Version
X-Proxy-Server
X-Qnm-Cache
Key
X-Served-Server
X-Who
X-SV
X-Server-Ip
X-M-Reqid
X-M-Log
X-Grid-Server
Realaction
X-InDy-Memory
X-InDy-Query
X-InDy-Time
X-Varnish-Cache-Control
X-Wodby-Node
X-Cachable
RSB-LINK
X-Ms-Version
Ttl
X-CPU-Time
X-AMAZEEIO
SB-Cache-Remaining
Plateforme
Ews
Content-Generator
Hosted-By
ID
NGX
X-Beatles
X-Served
X-HP-CAM-COLOR
X-Avvio-Cms-Cacheload
X-VG-WebCache
X-SID
X-Newrelic-Synthetics
X-Len
Nitro-Cache
X-M-V
X-Tradeindia-SMgmt
X-D-Time
X-OPNET-Transaction-Trace
Progma
Backend-Powered-By
End-User-Country
X-MSU-SOURCE
X-MainProfileCategory
X-Origin-Upstream-Status
X-Geo-IP
X-Skip-Cache
X-Trans-Id
X-Clx-Request
Requested-Host
X-Compressed-By
X-GEO
X-MainProfileName
X-MainProfileID
X-MainProfileURL
X-Mw-Workerstats
Lookup-Cache-Hit
X-NewsFlow-Sitename
X-Generation-Time
X-Tradeindia-Request-GUID
X-Web-Node
X-This-Proto
Prototype-RootPath
X-Cache-Me-Harder
X-Enhanced-By
X-ProBase-Server
X-Server-Generated
X-SCProxy
GranicusServer
SB-Cache-Life
X-Cache-LB
X-Cname-TryFiles
X-Processed
X-Deity
X-M-P
RSL-Trace-ID
X-S-C
X-M-T
X-Stiffia-Cache
X-S-V
X-S-Misc
X-Q-S
X-Envoy-Upstream-Service-Time
X-Origin-Date
StatusCode
Page-Template
X-Amzn-Remapped-Content-Length
X-BeResp-Ttl
X-Front-Cache
X-Content-Type
X-Transaction-Name
X-Gate
Expiries
X-Brought-To-You-By
X-Backend-Host
ServerIP
X-Distil-CS
Session-From
Debug-Status
X-Protected-By
X-AISO-Server
X-AISO-Cacheable
X-Geo
X-Dynamic
X-Nginx-Page-Cache
X-Hit
X-Route
RM-Cache-Control
X-Built-By
HSTS
Tesla.Performance
X-UPSTREAM-Address
X-Node-Id
X-ManagedFusion-Rewriter-Version
Generate-Time
CDCHOST
MwpReleaseVersion
MachineName
X-Powered-By-Home.Pl
X-Sorting-Hat-Expire-Cache
VAR-Cache
X-AISO-Cache
X-Lb
X-MCF-ID
X-Fpc
Webserver
X-Ruby-Cluster-ID
X-Sn-Servicetimems
UrlWatchModule-Time
X-AppServer-Cache-Rule
X-B3-Traceid
Content-Sn
X-Server-Hostname
DB-Nickname
ModuleCacheType
X-B3-Spanid
Request-Time
X-UPServer
X-Varnish-Cached
Ctx
CommercePlatform-Version
X-VTEX-Cache-Status-Janus-Edge
OracleCommerceCloud-Sandiego
X-Sid
OracleCommerceCloud-Version
CDN-Uid
CDN-RequestId
Nd
X-Varnish-Cached-TTL
DbServerName
CDN-CachedAt
CDN-PullZone
X-Render-Time
X-Rewritten-By
X-Appmachine-CreatedOn
Sl-Pgid
X-Appmachine-Duration
X-Appmachine-Name
X-CloudBurst-Backend
X-Backside-Transport
REFRESH
Prot
X-Time-Microsecs
X-Src-Webcache
X-VC-Debug
X-W3TC-Minify
X-WebKit-CSP-Report-Only
X-We-Are-Hiring
X-CloudBurst-Cache
X-CloudBurst-Frontend
X-Pagely-Cache
X-NWS-UUID-VERIFY
X-Server-Response-Time
X-SiteDistrict-Cache
Actioncode
X-Vary-Options
X-Global-Transaction-ID
X-Gateway-Rate-Limit-Delayed
X-UT-Cache
X-CloudBurst-WordPress
X-V-Cache
X-Firefox-Spdy
X-From-Cache
X-Search-Id
X-PressLabs-Stats
V-TTL
ORIGIN-SITE
ViewMode
VSID
X-ACCELERATE
Www.Aujourdhui.Com
ORIGIN-SERVER
X-Machine
X-Varnish-Grace
X-Test-Debug
X-XHTML-Minification-Powered-By
Arrow-RequestId
X-Netrix-ID
Cf-Ipcountry
X-Blog
X-CD
X-Max-Age
NS-VaryByCustom-Key
X-Nginx
X-NodeID
X-PM-ID
X-Pass-Through
X-Gate-Blk
ProxiaInstanceId
X-Csrf-Token
X-Cjtype
X-Device-Item
X-Catalyst
X-AppVersion
LB