Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
X-AspNet-Version
Age
P3P
Content-Language
X-Pingback
Via
X-UA-Compatible
Upgrade
Expect-CT
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Varnish
X-Check
X-Template
X-Language
Alt-Svc
X-Generator
X-Buckets
X-Drupal-Cache
X-Request-Id
P3p
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
Referrer-Policy
X-AspNetMvc-Version
X-Xss-Protection
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-Powered-By-Plesk
Content-Location
Host-Header
MS-Author-Via
X-ShopId
X-Runtime
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-Section
X-Sorting-Hat-PodId
X-Dc
X-Sorting-Hat-PrivacyLevel
X-ShardId
X-Sorting-Hat-PodId-Cached
X-Alternate-Cache-Key
X-UA-Device
X-Powered-CMS
X-IPLB-Instance
X-Served-By
Cartoon
X-Sorting-Hat-FeatureSet
Access-Control-Allow-Headers
Access-Control-Allow-Methods
Access-Control-Allow-Credentials
X-Cache-Status
X-Amz-Cf-Id
X-Ua-Compatible
Status
X-Via
X-FRAME-OPTIONS
X-Request-ID
X-Iinfo
X-Timer
X-Wix-Server-Artifact-Id
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Accel-Buffering
X-ServedBy
X-Contextid
CF-Cache-Status
X-PC-Key
X-PC-Hit
X-Mod-Pagespeed
X-PC-Host
X-PC-Date
X-PC-AppVer
Powered-By
X-Backend
X-CST
Content-Encoding
X-Host
X-WPE-Loopback-Upstream-Addr
X-Logged-In
X-CDN
Keep-Alive
X-DIS-Request-ID
X-Server
X-Rid
X-Cache-Hit
X-Tumblr-Pixel
X-Tumblr-User
X-Tumblr-Pixel-0
X-Port
X-Cache-Enabled
X-Endurance-Cache-Level
X-Server-Powered-By
X-Tumblr-Pixel-1
X-Original-Date
X-Accel-Version
X-Nginx-Cache-Status
X-Robots-Tag
X-Drupal-Dynamic-Cache
X-Page-Speed
X-Wix-Request-Id
X-Seen-By
X-NewRelic-App-Data
X-Turbo-Charged-By
X-Tumblr-Pixel-2
X-Wix-Punisher
X-Content-Powered-By
X-Forwarded-For
X-Proxy-Cache
X-Pad
X-Content-Digest
X-AH-Environment
X-Forwarded-Proto
X-Varnish-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Rack-Cache
WP-Super-Cache
X-LiteSpeed-Cache
Content-Security-Policy-Report-Only
X-GitHub-Request-Id
X-Request-Country
X-Tumblr-Pixel-3
SPRequestGuid
Edge-Control
X-MS-InvokeApp
X-SharePointHealthScore
X-XRDS-Location
MicrosoftSharePointTeamServices
X-Cache-Lookup
Timing-Allow-Origin
X-Cnection
X-Node
X-Content-Security-Policy
X-FW-Hash
X-Amz-Request-Id
X-Amz-Id-2
Cf-Railgun
X-FW-Static
X-FW-Type
X-FW-Serve
X-FullPageCaching
Charset
Request-Id
X-Trace
X-Webcom-Cache-Status
X-PhApp
X-Newrelic-App-Data
Request-Context
Edge-Cache-Tag
X-Hits
X-HS-Cache-Config
X-BC-Stapler
X-HS-Content-Id
X-Died
X-Webserver
SPIisLatency
X-PHP-Backend
SPRequestDuration
X-CF-Powered-By
MicrosoftOfficeWebServer
X-INKT-SITE
X-INKT-URI
Access-Control-Max-Age
Access-Control-Expose-Headers
Composed-By
X-Safe-Firewall
EagleId
X-Swift-CacheTime
X-Swift-SaveTime
X-SERVER
Grace
Served-By
X-CDN-Pop
X-CDN-Pop-IP
X-Spip-Cache
X-Fastly-Request-ID
X-VCache
X-Backend-Server
Liferay-Portal
X-Hyper-Cache
X-Dw-Request-Base-Id
X-Firenze-Processing-Times
X-Tumblr-Pixel-4
X-Device
X-Server-Name
X-Microcache
X-FB-Debug
Surrogate-Control
X-StackifyID
Xkey
X-LiteSpeed-Cache-Control
Front-End-Https
X-Cloud-Trace-Context
X-RateLimit-Remaining
X-SS-Location
X-SS-Conf
Refresh
X-RateLimit-Limit
X-Clacks-Overhead
X-DNS-Prefetch-Control
X-TNCMS
X-Loop
X-RateLimit-Reset
Content-Style-Type
X-Jimdo-Instance
X-Jimdo-Wid
Content-Script-Type
Rating
Public-Key-Pins
X-Acc-Exp
X-HS-Combine-CSS
X-Vtex-Processado-Em
X-XN-Trace-Token
X-XN-XNHTML
X-DDC-Arch-Trace
X-User-Agent
X-Dscp-Value
X-Age
X-WebKit-CSP
Fpc-Cache-Id
X-Cache-Config
X-Middleton-Display
Response
X-Middleton-Response
X-Sol
Display
X-Hostname
X-ServerName
X-Px
X-N-OperationId
X-Topify-Platform
X-Generated-By
X-Correlation-Id
X-Tumblr-Content-Rating
X-Url
X-Cached
X-Zen-Fury
X-Tumblr-Pixel-5
X-MiniProfiler-Ids
X-Request-Time
X-Kinsta-Cache
X-Msg-2-Log
Edge-Control-Message
X-From
P-LB
P-WS
TCN
X-Handled-By
X-Magento-Tags
X-Outils-CS
X-OneAgent-JS-Injection
X-Whom
PageSpeed
X-Amz-Version-Id
X-DynaTrace
X-Loopia-Node
X-CMS-Version
X-B-Cache
X-Debug-Info
Rt-Fastcgi-Cache
X-Varnish-TTL
Imagetoolbar
ServedBy
X-Cached-By
X-DynaTrace-JS-Agent
X-URL
X-Content-Options
X-Edge-Location
X-LBLID
X-Ruxit-JS-Agent
Access-Control-Request-Method
Dmn
Powered
X-Varnish-Cache-Hits
X-Upstream
DynaTrace
X-CacheServer
X-Shard
X-AspNetWebPages-Version
Surrogate-Key
X-Goog-Hash
X-Location-Id
X-Engine
Host
Product
X-Powered-By-VTEX-Janus-ApiCache
Public-Key-Pins-Report-Only
X-VTEX-Cache-Status-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-Vtex-Processed-At
X-Vtex-Remote-Cache
No
X-Via-JSL
X-Platform-Router
X-Cluster-Node
X-Platform-Processor
X-Fastcgi-Cache
X-Cache-Rule
X-Signature
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Platform-Cluster
X-FORWARDED-FOR
X-F-Cache
Fhost
Retry-After
X-Accel-Expires
X-Recruiting
X-Returned-From
X-Returned-From-DLL
X-NWS-LOG-UUID
X-Passed-To-DLL
X-Passed-To
X-Actual-URL
X-Original-Request
Alternate-Protocol
X-Platform
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Umbraco-Version
X-Varnish-Beresp-Grace
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-LW-Cache
X-Micro-Cache
X-Passed-To-PostProcessResponse
X-Passed-To-BeforeDispatch
X-Stale
X-Magento-Cache-Debug
Arr-Disable-Session-Affinity
X-Source
X-Hosted-By
X-Response-Time
X-Cache-Info
X-Version
X-Device-Type
X-HS-Content-Campaign-Id
X-PERF
X-ApacheServer
X-Varnish-Host
X-Developer
X-Application-Context
X-UD-Method
X-Rnd
X-Frame-Option
X-Powered-By-360WZB
WZWS-RAY
Cache-Provider
Fastcgi-Cache
X-URLSCHEME
X-Art-Request-Id
Ohc-File-Size
X-S
X-Instart-Request-ID
Origin
Generator
X-Microcachable
X-Rocket-Nginx-Bypass
X-Supported-By
X-Track
X-EdgeConnect-Origin-MEX-Latency
X-TransIP-Balancer
X-Matrix-Server
X-Matrix-Proxy
X-Shop-Id
X-Defender
X-Gamma-Serve
X-RESOURCE
Pagespeed
X-Platform-Cache
X-TransIP-Backend
X-Varnish-HitMiss
X-Varnish-Count
X-Platform-Server
X-Translation
X-BS
X-I-Sp
X-Dispatcher
Akamai-IP
X-Microcache-Status
X-I
Last-Published
X-Storage
Content-Hash
X-Litespeed-Cache
X-Tumblr-Pixel-6
Version
X-Cdn
X-Server-ID
X-Cache-TTL
X-Cache-Age
X-App-Hosting
X-ATG-Version
X-App-Status
X-Daa-Tunnel
X-Powered-By-VTEX-Janus-Edge
X-Route-Server
X-Varnish-Seen-By
X-Varnish-RemainingTTL
X-Drupal-Cache-Tags
X-Varnish-RemainingLife
X-Front
X-Cache-Tags
X-Varnish-ObjectSource
X-Cache-Namespace
X-Varnish-GracePeriod
X-Cache-Key
HTTPS
X-Powered-By-VelaWeb
USPLoggingUUID
RTSS
X-EdgeConnect-MidMile-RTT
X-HOST
X-NetCat-Version
Pool
X-Duration
X-Hypernode
X-Flow-Powered
X-Pantheon-Phpreq
Surrogate-Key-Raw
Content-Disposition
X-Pantheon-Site
X-ORACLE-DMS-ECID
X-Sapient
X-Pantheon-Environment
X-CSRF-Protection
ServerID
Allow
S-Cnection
Powered-By-ChinaCache
X-Environment
X-Content-Encoded-By
X-Expires-Orig
X-Vcap-Request-Id
X-SV-Pid
X-Firenze-Processing-Time
MIME-Version
X-WebServer
X-SV-FromDBCache
X-Ezoic-Cdn
X-SV-Edge
X-SV-Nginx-Duration
X-SV-Duration
X-SV-CreatedAt
X-Drupal-Cache-Contexts
X-Director
X-Cache-Operation
X-Ttl
X-SSL-Cipher
X-Server-Upstream
Cache-Key
X-Page-Cache
X-Varnish-Age
X-SSL-Protocol
Lsrequestid
Wsr-Cache
X-SV-Expires
X-Abgroup
X-SV-CacheTags
X-SV-Cacheable
X-Generated
X-Vcache
Cneonction
X-Last-Modified
X-Revision
X-Cache-Debug
X-Magento-Cache-Control
SSPAppContext
AMF-Ver
X-SDS
NnCoection
X-Cache-Server
X-Server-Id
Section-Io-Id
Accept-Encoding
X-Lambda-Id
X-CJ-Soft
X-Varnish-Url
X-Gateway-Cache-Key
X-Client-IP
X-NoCache
Pv
X-Gateway-Skip-Cache
X-Gateway-Cache-Status
FAI-W-FLOW
X-Varnish-Cacheable
IBM-Web2-Location
SN
X-Edge-IP
X-Grace
X-PwB-Node
X-ARC
X-Hiawatha-Cache
X-IsCacheURL
Page-Completion-Status
X-Url-Base
X-Time
X-Magnolia-Registration
X-Cache-Control-Orig
X-Varnish-Ttl
X-Debug
Srv
X-N
X-Akamai-Device-Characteristics
X-Amz-Meta-S3cmd-Attrs
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-LB-Node
X-Goog-Stored-Content-Encoding
Req-Id
X-Cache-Lifetime
Backend
Node
X-Goog-Storage-Class
X-Origin
X-Goog-Metageneration
X-Goog-Generation
ServerName
Server-Timing
X-ORACLE-DMS-RID
Location
Fw-Via
Proxy-Connection
Server-Info
X-GeoIP-Country-Code
Content-MD5
If-Modified-Since
X-Cache-Expires
X-Cache-Type
X-Dispatch
X-TTL
X-Bb-Deploy-Id
X-UPSTREAM
X-Vhost
X-Geo-Country
X-Cache-Only-Varnish
X-Oneagent-Js-Injection
X-Varnish-Backend
X-Discourse-Route
X-Nginx-Cache
X-Akamai-Device-Model
Server-Name
X-Cache-Engine
X-Esi
X-ID
X-LB
X-Real-Server
X-Runtime-Rack
X-BackendServer
X-Yadis-Location
X-Middleware-Start
PICS-Label
Nodo
X-ServerID
X-WEBSERVER
X-Cache-CFC
Content-Encoding-Handler
X-CF-Passed-Proto
X-Amz-Storage-Class
X-Content-Age
X-Content-Security-Policy-Report-Only
Content-Transfer-Encoding
Accept-Charset
X-Varnish-Retries
X-FTR-Request-ID
X-Cache-Level
X-ACMCache
X-App-Server
X-SO
X-Country-Code
IM-Version
X-High-Performance
X-Empowered-By
X-FW
Qs-Cache
X-Nbs
X-Frontend
X-AOL-HN
X-Speed-Cache
X-Speed-Cache-Key
X-Processing-Time
X-RequestId
X-Redman-Backend
X-Avg-Cookie-Expires
Use-Proxy
X-Litespeed-Cache-Control
Front
X-Cache-Device-Type
X-Pressidium-NinukisWP-Ver
Pf.Web.Request.Id
X-Akamai-Edgescape
Fastly-Debug-Digest
CacheControlHeader
X-AVG-Country-Code
X-Redman-Final-Url
Cache
X-Cache-Fix
X-HTML-Minification-Powered-By
X-Varnish-IP
X-Config-Blacklist-Version
S
X-Cache-PageType
X-SRCache-Key
SRV
Author
W
X-GeoIP-Country-Name
X-Proxy
X-Cookie-Domain
Cached
Nitro-Cache
X-Rocket-Nginx-Serving-Static
X-Cache-Handler
X-Akamai-Transformed
X-Always-Cache
Frame-Options
X-Dealeron-Original-Url
X-DealerOn
HAVer
HCVer
X-Dealeron-Backend
X-Server-Instance
Custom-Header
X-Shield-Request-Id
Local-Info
Contao-Page-Layout
X-Worker
X-Unbounce-VisitorID
X-Unbounce-Variant
X-Framework
X-Unbounce-PageId
X-Sucuri-ID
X-Adobe-Loc
BALANCEDTO
X-WR-Flags
X-Adobe-Content
X-VARITI-CCR
X-PF-Uncompressing
Eomportal-Instance
X-AF-Userserver
X-SRV
NtCoent-Length
X-Srv
WWW-Authenticate
X-SERVER-NAME
Environment
X-Purge-URL
Cache-Tags
X-Purge-Host
X-Location
X-Rq
X-Stage
X-BKSrc
X-Id
Thanks
X-Airee-Node
X-Content-Type-Option
X-Dynatrace-Js-Agent
X-Server-IP
MC
VANITY-HOST
X-Env
X-Browser
Cm-Server
X-Resource
X-Omnis-SiteID
From-Origin
Adm-Server
Xc-Version
X-Correlation-ID
SEOMOZ
MJ12bot
X-Garden-Version
X-WebKit-CSP-Report-Only
X-Ruxit-Js-Agent
X-Hit-Cache
X-Symfony-Cache
X-Pagename
X-Varnish-Server
X-Client-Image-Vid
X-WPL-DATA
IISExport
X-Client-Vid
X-EPiphany-Vid
X-Sucuri-Cache
Cache-Tag
Pics-Label
X-LW-Web-Server
X-Source-ID
X-TTFB-L
X-Cache-Dispatchercachecontrol
X-SmugMug-Values
X-TTFB
Smug-CDN
X-CAPServer
X-CB-Server
X-Cache-Dispatcherpragma
X-CDN-Forward
X-Akamai-3PM-SW-Version
X-Akam-SW-Version
X-Remote-Addr
X-HW
Tracecode
X-Compress-Hint
X-SmugMug-Hiring
X-Abuse
X-Drectory-Script
X-AEM
Accept-CH
X-FireWall-Port
X-Cache-Control
NetMindSessionID
X-LB-Server
X-Sys-Req-ID
X-Trace-Id
X-Varnish-Hostname
X-Session-Reinit
X-HydroSheep
Cmsid
Cmstype
X-Cacheable-TTL
X-Mobilized-By
X-VC-Enabled
X-Locale
Keywords
HitType
Description
Machine
X-Runtime-Memory
Proxy-Agent
Ufe-Result
X-Time-Microsecs
X-Real-IP
X-ClientSide-Caching
X-Page
X-WP
VServer
X-Hosting-Env
X-Smartcache-Keys
X-Smartcache-Timeout
X-SDE-Name
X-Atraveo-Set-Cookie
X-Atraveo-Cache-Control
X-Atraveo-Expires
X-Atraveo-From-Varnish-Cache
X-Atraveo-Param-Rm
X-Atraveo-ETag
X-Atraveo-TTL
Content_type
Yoncu-Errno
Identity
X-Balanceador
From
X-Atraveo-Zone
X-Atraveo-Varnish-Server-Id
X-JG-Page-Cache
X-Webkit-CSP
X-NginX-Cache
X-Disney-Akamai-Rule
X-DEBUG
SBGI-9
SBGI-Device
SBGI-RealPath
SBGI-RenderTime
X-Info
X-Cdn-Forward
X-Webstats-RespID
X-Highwire-SessionId
X-Highwire-RequestId
Beyond-Iis
SBGI-1
X-SmartBan-Host
X-SmartBan-URL
X-IP
NLCacheNote
X-Nginx-Host
X-Unique-ID
SBGI-10
SVR
X-OpenCart-Lightning
SBGI-7
X-Directory-Script
X-LP
X-FW-Server
SBGI-5
ScoreTracker
X-A
X-App
X-PRAM
Id
X-Provisioner-Version
X-IIJ-Cache
RN-Server
X-Domain-Checked
X-WA-Info
X-Force
Access-Control-Allow-Method
SS
AC-ELC
AsisCache
X-Resolver-IP
ServerSignature
X-Analytics
X-Sites
Bios
X-Node-Name
X-Cache-On
SHInfo
Ohc-Response-Time
EagleEye-TraceId
Max-Age
Backend-Timing
X-Fedora-School-Id
X-CACHE-TTL
X-Ser
X-ASAP-Cache
SERVER-ID
A-Powered-By
X-Dns-Prefetch-Control
WN
X-RTag
X-Fstrz
X-WN-ClientGroup
ServerTokens
Service-Worker-Allowed
X-CRA-DC
Swift-Performance
X-Clara-ASAP
X-Resty-Request-Id
X-RealServer
Paypal-Debug-Id
X-RDP
Access-Control-Allow-Header
Web
X-Plat
X-Blog
X-Refresh
Disablevcache
X-DTC
X-Rebelmouse-Cache-Control
X-Rebelmouse-Surrogate-Control
X-Orig-Vary
Server-ID
X-RiS-UFDI
X-MAT-GEO
X-Viator-Tapersistentcookie
X-Cache-Node
X-GeoIP
X-Response
X-W3TC-Minify
X-Adnet
X-NodeID
X-Backend-Status
X-Acquia-Debug-Password
N365rili
X-FPC
SG
X-Agent
X-Cache-Doesi
X-Secret
Ibf5scheme
Hummingbird-Cache
X-Request-Uri
X-Desc
Hamster
X-E
Accept-Language
X-Transaction
X-Twitter-Response-Tags
X-ACCELERATE
Fastly-Backend-Name
X-Rewritten-By
X-Session-ID
X-ServerIndex
X-GoCache-CacheStatus
X-Search-Id
X-Connection-Hash
NODE
X-ManagedFusion-Rewriter-Version
X-Application
X-Server-Addr
X-Rack-Cors
X-Cache-Varnish
X-Captured
Web-App-Origin-Name
X-TB-M
X-MCB-Server
X-Jphone-Copyright
X-Distributor
X-EC2-Instance-Id
X-Varnish-Action
X-VC-TTL
X-Route-To
Url
X-Yottaa-Optimizations
X-FORWARDED-PROTO
X-Yottaa-Metrics
X-Cf-Powered-By
X-Traffic
X-Batcache
X-Depends
Home
X-AutoRu-App-Id
X-BPool-Bx-Cache
X-Gannett-Site-Version
X-Autoru-Host
X-Autoru-LB
X-BPool-Fx-Cache
X-BServer
X-Powered-By-Home.Pl
X-Src-Webcache
X-Req-Head-Response
X-Title
X-Varnish-Debug-Age
X-Varnish-Debug-TTL
X-Protected-By
X-BPool-Back
X-Grid-Server
X-Key
X-Layout
X-Map-Context
X-Render-Time
Report-To
X-DataDome
X-4ormat-Cacheable
X-Machine
X-Bip
Resin-Trace
Magicmarker
X-Culture
X-NginX-Server
EN-User
X-Varnish-Id
X-Cache-TTL-Age
X-Cache-TTL-Current
X-Debug-Token
X-Cache-Via
X-CacheID
RequestId
Myheader
X-Redirector
X-Proxy-Cache-Key
TheAnswer
X-Webcelerate
X-PROCESSED-BY
X-Origin-Server
Og
Gzip
F5-IpCliente
ClientIP
X-BPool
X-Distil-CS
X-Proxy-Skip
X-Lb
Edit
Play-Detected-Device
X-Skip-Cache
X-Cocoon-Version
X-ARRServer
X-KoobooCMS-Version
X-Cache-Me-Harder
X-Cluster
X-Compressed-By
X-Geo-IP
X-GSL-Server
Xc
Play-Detected-UserAgent
ID
X-SH-Cache-Status
X-Wikidot-Backend
Actual-Object-TTL
X-VTEX-Cache-Status-Janus-Edge
X-Wikidot-Static-Cache
Ram
Noq
X-Pagely-Cache
X-Amz-Meta-Cb-Modifiedtime
X-Varnish-ID
X-V
TP-L2-Cache
AMP-Access-Control-Allow-Source-Origin
SiteSpeed
Ramp
TP-Cache
X-Highwire-Sitecode
X-Avvio-Cms-Cacheload
X-Highwire-Smart-Code
NZSpeedy
X-Client-Ip
X-Forwarded-Host
X-Detected-Device
Lb
X-Sid
X-Role
X-Serv
XDomainRequestAllowed
Dis-Env
Ctx
Device
X-Middleton-Pagespeed
X-Batcache-Reason
X-Goog-Meta-Goog-Reserved-File-Mtime
COMMERCE-SERVER-SOFTWARE
X-Old-Content-Length
X-Node-Id
X-Varnish-Cache-Ttl
Il-Cl
X-XHTML-Minification-Powered-By
MW-Webserver
CLMOB
X-ZSITES-DNS
X-Artvisual-Server
X-ESI
X-Nginx-Request-Processing-Time
X-AMAZEEIO
X-Actindo-Thread-Id
Provider
X-Actindo-Request-Id
X-Actindo-Rs
X-SCM-Server-Number
X-UnsetCookies
Language
Www.Aujourdhui.Com
X-Amz-Meta-Content-Md5
Hostname
DrivedBy
X-Varnish-Grace
X-Who
Proxy-Cache
X-Cjtype
Content-Generator
CommercePlatform-Version
BackendServer
OracleCommerceCloud-Sandiego
OracleCommerceCloud-Version
X-Confluence-Request-Time
Backend-Name
Backend-IP-Port
X-Header
X-DynamicCache
X-Hosting
X-JSESSIONID
X-Runtime-Affili
X-Ghost-Cache-Status
X-Origin-Id
Edgecast
X-Dw-Trace-Id
Warning
X-MidCOM-Meta-Cache
Prama
SINA-TS
SINA-LB
X-Rewrite
X-Zendesk-Origin-Server
X-Zendesk-User-Id
Apachenode
X-CacheDebug
X-App-Runtime
X-Varnish-Cache-Local
X-Svr
X-Varnish-Hits
NS-VaryByCustom-Key
X-CACHE-KEY
X-Gyrobase-Publication
X-Generated-Time
X-B2f-Not-Route
X-Aramark-SID
X-DB-Content-Length
X-DN-Cache-Control
X-Frames-Options
PagesDisplayed
Traffic-Origin
X-Rack-CORS
X-OPNET-Transaction-Trace
MS-CV
X-Amcomm-Site
X-Amz-Id-1
X-HashTwo
X-Goog-Meta-Replace
Upgrade-Insecure-Requests
X-Cache-Time
X-Data-Request
X-Goog-Meta-Policy
TZ-Server
OriginServer
X-Built-With
X-Bcwwwid
WP-AdvCache-MemCached
Hname
X-MCF-ID
X-Backend-Host
X-Box
X-Streams-Distribution
X-ServiceProvider
XX
X-CDN-RULE
X-CDN-COMPRESS
X-Script
X-ServerAddr
X-Mobile-URL
X-HP-Trace-Project
MSSmartTagsPreventParsing
MSThemeCompatible
Server-Ip
X-HP-Trace-ID
Cteonnt-Length
X-UPServer
X-Varnish-Cached
X-Varnish-Cached-TTL
FRONT-END-SECUREBROWSER
X-S-Misc
X-Proxy-Id
X-Phpwcms-Release
X-Phpwcms-Page-Processed-In
X-SE-Debug
X-Sentry-ID
X-SuperCache
Requested-Host
X-Hash
X-7d-Trace-Id
X-DDM-SERVER
X-DDM-SERVER-UPDATED
X-7d-Instance-Id
X-SV
X-VG-WebCache
X-Hstore
X-HAProxy
X-Nitro-Cache
X-Hrouter
X-PHP-Response-Code
X-Generation-Time
X-D-Time
X-Sorting-Hat-Expire-Cache
Kanooh-Host
Progma
X-Config-By
Cleartype
X-REDIRECTSERVER
SB-Site-Device
X-Meta-MSThemeCompatible
X-ReqId
X-DS1D
X-Enhanced-By
X-Meta-MSSmartTagsPreventParsing
X-Processed-By
X-VNode
X-SilverStripe-Cache
X-ASAP-Age
X-Meta-Imagetoolbar
X-FG-RequestId
SB-Cache-Remaining
X-Proto
SB-Site-IE-VERSION
Dispatcher
Nginx-Cache
SB-Cache-Life
Page-Template
X-Dev
PServer
Worker
X-AISO-Cache
X-Cms-Mode
X-Tag-Playlist
Viewport
X-AISO-Server
X-AISO-Cacheable
X-Cache-Detail
X-LBPoolMember
X-Reflector-Cache
Strikingly-Cached
X-Upgrade-Enabled
Strikingly-Cached-Version
X-CacheResult
VC-NoCache
X-Reflector
X-PM-ID
X-Origin-Cache
X-NID
MyHeader
Strikingly-Cache-Region
X-Author
X-Magento-Action
X-Magento-Lifetime
Ttl
X-HS-Status
Aoestatic
Ews
HA-Geocountry
HA-Geocity
X-MSU-SOURCE
BlockPHPCallEnd
X-UType
DB-Nickname
X-Uncacheable
X-PoweredBy
HA-Cloudapp
L5d-Success-Class
NKBVHEADER
Load-Balancer
X-AWS
X-B3-Spanid
X-CGP
X-B3-Traceid
X-Distributed-By
IES-Server
HA-Georegion
HA-Geolon
HA-Host
HA-Ipaddr
HA-Urlpath
HA-Servedtime
HA-Geolat
X-UPSTREAM-Address
X-NewsFlow-Sitename
X-MyName
X-Nginx-Request-Time
X-PBS-Appsvrip
X-PBS-Fwsrvname
X-PBS-Appsvrname
X-Instance-Id
X-HP-CAM-COLOR
FindLaw
Session-Id
X-Cache-FS-Status
X-Catalyst
X-Healthy
X-Container
X-SSLProxy
X-SSLUpstream
X-Qiniu-Zone
X-M-Reqid
X-Qnm-Cache
X-Reqid
X-Status
Unique-Request-Id
X-M-Log
X-Log
X-Fpc
X-Svr-Proxy
X-Via-NSCOPI
X-WebNode
X-Cache-Extended
Fastly-Restarts
X-Clx-Request
TC-Cache-U
X-Cache-Ttl
X-Ants-Machine-Id
X-Ants-Host
X-COUNTRY-CODE
X-Custom-Name
HSTS
X-Test-Debug
X-Pubstack
CDCHOST
X-TA-CDN-Provider
X-Original-IP
X-Obvious-Tid
X-Obvious-Info
X-ProcessESI
X-RemovedCookies
X-SATserver
X-RequesterIP
V-TTL
X-Backside-Transport
X-Nginx
X-Max-Age
X-Global-Transaction-ID
X-Pool
X-PressLabs-Stats
X-We-Are-Hiring
X-Profiler
X-Flex-Tags
X-Flex-Tag
X-Flex-Community
X-Device-Item
X-CD
X-Flex-Evend
X-Flex-Evstart
X-Flex-Lastmod
X-Flex-Lang
X-Instance
X-Feed
TC-Cache
Response-Time
X-Timestamp
TC-Cache-IC
ReqUrl
X-Cache-Bypass
TC-S-Cache-M
TC-S-Cache
Xcache
X-XHR-Current-Location
X-Member
X-Jcms-Ajax-Id
X-Homeaway-Requestmarker
X-OCTOPOD
X-OpenUrlRewriter-Debug
X-Sn-Servicetimems
X-PG
X-CO-Host
X-Hit
Dtk-Cache-Check-0
X-Server-Generated
X-Amz-Meta-S3b-Last-Modified
Request-Country
Request-EU
WSCLoggingUUID
Tk
X-Dynamic-Cache
WP-FROM-CACHE
CS-SERVER
X-Unique-Id
X-Node-App
Debug-Status
Expiries
Session-From
ServerIP
X-FreeTag-Count
RSL-Trace-ID
X-Cname-TryFiles
DeleGate-Ver
X-Cache-ID
X-CSRF-Token
X-Server-Hostname
X-Deity
X-Debug-Token-Link
X-Beatles
X-Apm-Telemetry-Syncmark
Cache-Status
HostName
RSB-LINK
Amp-Access-Control-Allow-Source-Origin
Container
X-WHOIS-Cached
X-ETag
X-Gateway-Rate-Limit-Conn
X-Varnish-Debug-Hits
X-Served
X-Pj-Cache-Status
X-Ssl-Cipher
1A-CountryCode
IsMobile
Generate-Time
X-Made-On
X-M
MachineName
X-Gateway-Rate-Limit-Delayed
X-Environment-Context
MwpReleaseVersion
X-Header-Treatment
X-HEAD
GranicusServer
EQ-Cache
Server-Id
CpuTime
X-Instance-Name
User-Agent
V-Age
X-ACLR-Version
X-Ab-Selection
Cacheid
X-VC-Hash
X-Static
X-NMT-Proxy
Httpd-Identifier
X-VC-Cache
X-VC-Debug
X-VC-Cacheable
X-Cache-Id
X-Cache-Original-TTL
X-Shopware-Cache-Id
X-Shopware-Allow-Nocache
X-Served-Server
X-BackendProxy
X-VCS-Cacheable
Be
X-VCS-Ttl
X-Route
X-Pixelsilk-Version
X-Custom-Header
X-ClusterID
X-DSMX-Render-MS
X-DSMX-Rewrite-MS
X-Pixelsilk-Server
X-Full-Url
MageStack-Area
MageStack-Cache
CommunityServer
No-Cache
X-Pass-Through
Copyright
HA-Front
Content-Cache
DbServerName
Rewriter
Amfplus-Ver
X-SayCDN-TTL
X-Say-TTL
X-Serverid
X-T
X-UT-Cache
X-UA
Provided-Host
Referer
X-Pageid
X-Litespeed-Tag
X-IP-Address
X-Pool-Info
X-RAMCache
XDisk
X-Transaction-Name
X-Instart-Cache-Id
X-Front-Cache
X-Beresp-Ttl
StatusCode
X-CH-Device
CD4
X-FIRSTBase
X-Country
X-Say-Cacheable
UrlWatchModule-Time
MageStack-Web-Node
MageStack-Tag
MageStack-PageSpeed
X-Site
Request-Filtered-By
X-Activity-Id
Tesla.Performance
MageStack-Magento-Version
MageStack-Loadbalancer
MageStack-Cache-Lifetime
MageStack-Cache-Hits
MageStack-Cache-Status
MageStack-Cacheable
MageStack-Debug
MageStack-Config
X-Amz-Meta-Version-Id
X-PBY
X-AppServer-Cache-Rule
X-HA
X-FastCGI-Cache-Status
Webserver
X-NewCloud-V-Cache
X-ProBase-Server
X-Ocache
X-LDNR-NOT-ROOT-HL-NOTSET
X-Debug-Message
X-Az
X-AppVersion
X-B
X-Backend-TTL
X-L-Path
X-BP-NSA-REQID
ProxiaInstanceId