Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
Age
X-Cache
Expect-CT
P3P
Content-Language
X-AspNet-Version
X-Pingback
Via
X-UA-Compatible
Upgrade
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Varnish
Referrer-Policy
X-Request-Id
X-Adblock-Key
X-Check
X-Xss-Protection
X-Generator
WPE-Backend
X-Type
X-Cache-Group
X-Pass-Why
X-Language
X-Template
X-Drupal-Cache
X-Buckets
X-Permitted-Cross-Domain-Policies
Alt-Svc
X-Download-Options
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Ac
X-Hacker
X-Cache-Hits
Host-Header
X-ShopId
X-Dc
X-ShardId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-Section
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-PodId
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-ShopId
X-Alternate-Cache-Key
X-AspNetMvc-Version
X-Via
X-Powered-By-Plesk
X-Served-By
X-Runtime
X-Contextid
X-ServedBy
X-PC-Hit
X-PC-Key
X-Amz-Cf-Id
X-UA-Device
X-PC-AppVer
X-PC-Host
X-PC-Date
MS-Author-Via
Access-Control-Allow-Headers
Content-Location
X-Shopify-Stage
Access-Control-Allow-Methods
X-IPLB-Instance
X-Powered-CMS
X-Timer
X-Wix-Request-Id
X-Seen-By
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Rid
Status
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
CF-Cache-Status
X-Tumblr-Pixel-1
X-FRAME-OPTIONS
Cartoon
X-Tumblr-Pixel-2
X-Backend
Access-Control-Allow-Credentials
X-Iinfo
X-Cache-Status
X-Ua-Compatible
X-CST
X-WPE-Loopback-Upstream-Addr
Powered-By
Content-Encoding
X-Host
X-Cache-Hit
X-Endurance-Cache-Level
X-Port
X-Cache-Enabled
X-Mod-Pagespeed
X-CDN
X-Tumblr-Pixel-3
X-Request-ID
X-Logged-In
X-Drupal-Dynamic-Cache
Keep-Alive
X-Server
X-Server-Powered-By
X-DIS-Request-ID
X-Robots-Tag
X-Nginx-Cache-Status
X-Accel-Version
X-Proxy-Cache
X-Turbo-Charged-By
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-LiteSpeed-Cache
X-Page-Speed
P3p
Content-Security-Policy-Report-Only
X-Content-Powered-By
X-Content-Digest
Request-Context
X-GitHub-Request-Id
X-FW-Hash
X-FW-Server
X-AH-Environment
X-Rack-Cache
X-Tumblr-Pixel-4
X-FW-Type
X-FW-Serve
X-FW-Static
X-Pad
X-Varnish-Cache
X-Hits
Access-Control-Expose-Headers
X-Webcom-Cache-Status
X-BC-Stapler
X-XRDS-Location
Edge-Control
X-Trace
X-Newrelic-App-Data
X-Node
SPRequestGuid
X-MS-InvokeApp
X-SharePointHealthScore
Edge-Cache-Tag
X-HS-Cache-Config
WP-Super-Cache
Cf-Railgun
X-HS-Content-Id
X-Request-Country
MicrosoftSharePointTeamServices
X-Amz-Request-Id
X-Amz-Id-2
X-CF-Powered-By
Timing-Allow-Origin
X-Died
Allow
Charset
X-Content-Security-Policy
X-Cache-Lookup
X-PHP-Backend
X-INKT-URI
X-INKT-SITE
X-FullPageCaching
X-Fastly-Request-ID
Access-Control-Max-Age
Request-Id
X-Backend-Server
X-HS-Combine-CSS
X-Cnection
SPIisLatency
SPRequestDuration
X-Edge-Cache
X-Edge-Cache-Key
Ali-Swift-Global-Savetime
X-Swift-SaveTime
X-Swift-CacheTime
Composed-By
MicrosoftOfficeWebServer
Rating
X-CDN-Pop-IP
X-CDN-Pop
EagleId
Grace
X-Tumblr-Pixel-5
X-Server-Name
X-Device
X-DDC-Arch-Trace
X-NF-Request-ID
Served-By
X-Safe-Firewall
X-SS-Conf
X-SS-Location
X-Tumblr-Content-Rating
X-Spip-Cache
X-Dw-Request-Base-Id
X-SERVER
Liferay-Portal
X-Do-Not-Hack
X-HeyJason
Permitted-Cross-Domain-Policies
X-Hyper-Cache
P-WS
P-LB
Front-End-Https
X-VCache
X-Cloud-Trace-Context
X-OneAgent-JS-Injection
X-LiteSpeed-Cache-Control
Surrogate-Control
X-Kinsta-Cache
X-Original-Date
X-RateLimit-Remaining
X-RateLimit-Limit
X-RateLimit-Reset
X-Middleton-Display
Display
X-Sol
X-HOST
X-Loop
X-TNCMS
X-Vtex-Processado-Em
X-Cluster-Node
X-Middleton-Response
Response
X-Jimdo-Wid
X-Jimdo-Instance
X-Clacks-Overhead
X-FB-Debug
X-StackifyID
Content-Style-Type
X-Acc-Exp
Public-Key-Pins
Content-Script-Type
Feature-Policy
X-Debug-Info
X-Amz-Version-Id
X-Ruxit-JS-Agent
X-Goog-Hash
X-Magento-Tags
X-Age
X-Frame-Option
Fpc-Cache-Id
X-XN-Trace-Token
X-Firenze-Processing-Times
X-XN-XNHTML
Refresh
X-Cached
X-Tumblr-Pixel-6
X-DNS-Prefetch-Control
X-WebKit-CSP
X-Zen-Fury
Xkey
X-DynaTrace-JS-Agent
X-LW-Cache
X-Version
X-N-OperationId
X-User-Agent
X-Px
X-Cache-Config
X-ARC
PageSpeed
X-Edge-Location
WPX
Retry-After
X-Hostname
X-Goog-Generation
X-Dns-Prefetch-Control
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Goog-Storage-Class
X-Goog-Stored-Content-Length
X-Handled-By
X-Generated-By
X-Webserver
X-Url
X-Topify-Platform
X-Upstream
TCN
Powered
X-PhApp
X-Magento-Cache-Debug
Fastcgi-Cache
Access-Control-Request-Method
X-EdgeConnect-Origin-MEX-Latency
X-B-Cache
X-RESOURCE
X-Cached-By
X-Whom
X-URLSCHEME
Rt-Fastcgi-Cache
X-MiniProfiler-Ids
X-Source
X-EdgeConnect-MidMile-RTT
X-FORWARDED-FOR
X-Loopia-Node
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Processed-At
X-CacheServer
No
X-VTEX-Janus-Router-Backend-App
X-Request-Time
X-Accel-Expires
X-Vtex-Remote-Cache
X-CMS-Version
Last-Published
X-ET-API-ORIGIN
X-ET-API-VERSION
X-ET-API-ROOT
X-Outils-CS
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Fastcgi-Cache
ServedBy
Product
X-Varnish-Count
X-Varnish-HitMiss
X-Content-Options
Pagespeed
Warning
X-ApacheServer
X-Engine
X-Platform-Server
X-PERF
X-AspNetWebPages-Version
X-Signature
Cache-Key
X-Application-Context
X-Location-Id
Fhost
X-Developer
X-URL
X-LBLID
X-Platform-Router
X-Platform-Processor
X-Actual-URL
X-Cache-Info
Dmn
X-Platform-Cluster
X-Cache-Key
Imagetoolbar
X-Original-Request
Public-Key-Pins-Report-Only
X-Passed-To
X-Varnish-Cache-Hits
X-Returned-From
X-From
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Returned-From-DLL
X-Varnish-Beresp-Grace
X-Passed-To-DLL
X-Magento-Cache-Control
X-Stale
Host
X-Shop-Id
X-Defender
X-Umbraco-Version
Generator
X-Cache-Age
X-Ezoic-Cdn
X-Microcachable
X-Varnish-Host
X-Passed-To-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-F-Cache
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Forwarded-For
Arr-Disable-Session-Affinity
X-Response-Time
X-Gateway-Cache-Status
X-Gateway-Skip-Cache
X-Gateway-Cache-Key
X-NWS-LOG-UUID
X-DynaTrace
X-Device-Type
X-GUploader-UploadID
X-S
Cache-Provider
X-SSLProxy
Alternate-Protocol
X-SSLUpstream
X-Platform
X-HS-Content-Campaign-Id
X-Translation
X-Microcache-Status
X-Hosted-By
Content-Hash
X-Cache-Rule
X-Environment
X-Svr-Proxy
X-SVR-IIS
Origin
X-Powered-By-360WZB
X-Correlation-ID
X-Guploader-Uploadid
Version
X-Micro-Cache
SSPAppContext
X-Microcache
X-Platform-Cache
X-Lambda-Id
X-Msg-2-Log
X-App-Status
Surrogate-Key
X-Sapient
X-Duration
X-Supported-By
X-Cache-Namespace
X-Akam-SW-Version
X-Dealeron-Backend
X-DealerOn
X-Rnd
X-Dealeron-Original-Url
MIME-Version
X-I-Sp
X-BS
X-Dispatcher
X-SO
X-Server-ID
X-Via-JSL
USPLoggingUUID
X-Cache-Tags
X-Varnish-TTL
X-Instart-Request-ID
X-Cache-TTL
X-Sucuri-ID
X-Abgroup
X-Track
X-NetCat-Version
RTSS
X-SSL-Cipher
Node
Content-Disposition
WZWS-RAY
X-ORACLE-DMS-ECID
X-Server-Upstream
X-ServerName
X-Art-Request-Id
X-Expires-Orig
X-CSRF-Protection
X-Director
X-Page-Cache
CF-Worker-Version
X-Sucuri-Cache
X-Powered-By-VelaWeb
X-SSL-Protocol
X-Drupal-Cache-Tags
Content-Encoding-Handler
X-Generated
X-Powered-By-VTEX-Janus-Edge
X-Servedby
X-Cache-Lifetime
SN
Pool
X-Front
X-Hypernode
X-VARITI-CCR
X-Storage
X-Gamma-Serve
X-Debug
X-Matrix-Proxy
X-Matrix-Server
X-Client-IP
X-Cache-Control-Orig
X-Vcap-Request-Id
X-TransIP-Balancer
X-NewRelic-App-Data
S-Cnection
X-Grace
X-TransIP-Backend
Powered-By-ChinaCache
X-App-Hosting
DynaTrace
X-Amz-Meta-S3cmd-Attrs
X-Revision
X-Geo-Country
X-Varnish-Cacheable
X-Helper-Autoassign-All
X-Edge-IP
X-Cache-Debug
X-Vhost
X-Rocket-Nginx-Bypass
Cache-Tags
X-Daa-Tunnel
X-Varnish-RemainingTTL
X-Varnish-RemainingLife
X-Varnish-ObjectSource
X-Varnish-GracePeriod
X-Github-Request-Id
X-LB-Server
X-Varnish-Seen-By
FAI-W-FLOW
X-Rocket-Nginx-Serving-Static
X-Cache-Engine
X-NoCache
X-SV-Pid
Src-Update
X-SV-Edge
X-SV-Duration
X-SV-CreatedAt
Update-Time
X-SV-Nginx-Duration
Req-Id
X-SV-FromDBCache
Contao-Page-Layout
X-Correlation-Id
Accept-Encoding
X-Dispatch
X-Flow-Powered
X-Content-Encoded-By
X-SV-CacheTags
X-SV-Expires
X-I
X-FTR-Request-ID
X-Cache-Server
Server-Timing
X-SV-Cacheable
X-Forwarded-Proto
X-Drupal-Cache-Contexts
X-Recruiting
X-Now-Id
X-Cache-Type
X-ATG-Version
X-Last-Modified
X-Cache-Only-Varnish
Service-Worker-Allowed
X-UPSTREAM
X-Cache-Handler
X-Locale
X-SRV
X-Url-Base
Lsrequestid
Wsr-Cache
X-N
X-Esi
SiteSpeed
Edge-Control-Message
X-Route-Server
Cneonction
X-Discourse-Route
Cache
Section-Io-Id
X-Env
Strikingly-Cached-Version
X-Cache-Control
Strikingly-Cache-Region
X-Country-Code
Strikingly-Cached
ServerID
X-Pressidium-NinukisWP-Ver
X-TTL
Server-Name
X-Unbounce-VisitorID
X-SmugMug-Values
X-Varnish-Url
X-SmugMug-Hiring
Smug-CDN
X-Server-Id
X-TTFB
X-Ttl
X-Server-Instance
X-Unbounce-PageId
X-Unbounce-Variant
X-TTFB-L
X-Content-Type-Option
X-Varnish-Age
X-Trace-Id
X-GeoIP-Country-Code
X-CJ-Soft
If-Modified-Since
X-Cache-Level
X-TransIP-Reserved
X-FIRSTBase
X-ORACLE-DMS-RID
Akamai-IP
X-NA-CachePolicy
X-Cache-Device-Type
X-Varnish-Backend
Author
Pv
X-IsCacheURL
X-Nginx-Cache
X-Middleware-Start
W
X-Speed-Cache
X-Speed-Cache-Key
X-Hiawatha-Cache
Dtk-Cache-Check-0
X-Firenze-Processing-Time
CF-Worker-Script
X-SRCache-Key
X-Amz-Rid
Backend
X-UD-Method
S
Nodo
X-SDS
Use-Proxy
Https
Custom-Header
X-Cache-Expires
MC
X-Rq
X-GeoIP-Country-Name
X-Transaction
X-Twitter-Response-Tags
X-Varnish-IP
X-Time
X-Connection-Hash
X-Fastly-Request-Id
X-Akamai-Device-Model
SEOMOZ
PICS-Label
Content-MD5
X-PwB-Node
X-Magnolia-Registration
X-BKSrc
X-Storage-Cache-Date
X-Service-Id
Proxy-Connection
X-Akamai-Device-Characteristics
X-Storage-Cache-Expires
X-Storage-Cache
X-Orig-Vary
X-LB
MJ12bot
Accept-Charset
NnCoection
AMF-Ver
X-High-Performance
X-CF-Passed-Proto
Srv
X-Varnish-Retries
X-Cache-Operation
X-Empowered-By
X-TB-M
X-Litespeed-Cache-Control
Page-Completion-Status
X-ID
X-Cache-Fix
Location
ServerName
X-NginX-Cache
X-Browser
NetMindSessionID
X-Cache-PageType
X-CacheFROM
X-Now-Cache
X-CDN-Forward
X-Disney-Akamai-Rule
X-Amz-Storage-Class
X-Content-Age
X-Cookie-Domain
Qs-Cache
X-RequestId
X-Processing-Time
X-Worker
X-Wikidot-Static-Cache
X-Wikidot-Backend
From-Origin
X-Symfony-Cache
X-Dynamic-Cache
FindLaw
X-Srv
X-Analytics
Backend-Timing
X-Akamai-ERRuleID
Ramp
Ram
X-Key
Xc-Version
X-Stage
Noq
X-Akamai-ERPolicy
X-Adobe-Content
Pics-Label
X-Adobe-Loc
X-Real-Server
X-Processed-By
HCVer
X-Webkit-CSP
X-HW
X-GoCache-CacheStatus
HAVer
X-Config-Blacklist-Version
Tracecode
X-Amz-Meta-Content-Md5
Cm-Server
X-FW
X-Varnish-Server
X-Origin
X-Content-Security-Policy-Report-Only
X-Proxy-Backend
Ohc-File-Size
X-SP-Farm
X-SP-UniqueName
X-ARRServer
X-Ruxit-Js-Agent
X-WEBSERVER
Frame-Options
X-Frontend
X-WPL-DATA
IM-Version
X-RealServer
Cached
X-Sedo-Request-Id
X-Yadis-Location
X-Cache-Miss-From
Content-Transfer-Encoding
X-BackendServer
X-CB-Server
X-PF-Uncompressing
X-Cache-TTL-Remaining
X-4ormat-Cacheable
X-Sys-Req-ID
Url
SRV
X-Hrouter
Lb
X-Cache-CFC
X-Redman-Final-Url
X-Varnish-Hits
Local-Info
RequestId
X-Server-IP
X-Origin-Date
Edit
X-Akamai-Edgescape
Access-Control-Allow-Method
Web-App-Origin-Name
X-Redman-Backend
X-AVG-Country-Code
X-Avg-Cookie-Expires
X-Hstore
CacheControlHeader
X-Drectory-Script
Prama
Content_type
Hummingbird-Cache
X-Runtime-Memory
X-Cache-Ttl
X-CLOUD-TRACE-CONTEXT
Nopic
X-Nbs
X-Pantheon-Az
X-Pantheon-Site
X-ServerID
X-A
X-Pantheon-Phpreq
X-UnsetCookies
X-Pantheon-Environment
A-Powered-By
X-Nitro-Cache
X-App-Server
Surrogate-Key-Raw
X-Shield-Request-Id
X-FireWall-Port
X-Distributor
IBM-Web2-Location
X-Client-Vid
SVR
Server-Info
X-Balanceador
Accept-CH
X-Request-Uri
X-Ratelimit-Remaining
Referer
X-PRAM
X-Force
X-Unique-ID
X-VCS-Cacheable
X-HTML-Minification-Powered-By
X-VCS-Ttl
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-JG-Page-Cache
X-EPiphany-Vid
Environment
X-Path-Route
X-Varnish-Id
Accept-Language
X-Webstats-RespID
X-Culture
X-Source-ID
X-Appmachine-Environment
X-Generated-Timestamp
X-Debug-Token
Proxy-Agent
X-Backend-Status
Max-Age
X-ACMCache
X-Session-ID
Report-To
X-Ratelimit-Limit
X-Client-Image-Vid
Request-Country
X-Remote-Addr
Request-EU
X-Role
X-Span
X-Nginx-Dummy
X-Cache-2
X-Framework
Lookup-Cache-Hit
X-ServerIndex
X-FastCGI-Cache
X-CacheDebug
Front
Pf.Web.Request.Id
X-Varnish-Ttl
WWW-Authenticate
X-MCB-Server
X-Oneagent-Js-Injection
X-Hit-Cache
X-Pagename
Drupal-Pagecache-Memcache
X-Distil-CS
X-Shard
SHInfo
X-ClientSide-Caching
X-V
X-Cacheable-TTL
X-Varnish-Backend-Beresp-Backend
IISExport
X-Akamai-Transformed
Dispatcher
Beyond-Iis
XDomainRequestAllowed
X-Proxy
X-VC-Enabled
Home
X-NginX-Server
X-Plat
X-Location
DNNOutputCache
X-Varnish-Hostname
X-CACHE-TTL
X-Detected-Device
X-GeoIP
X-Id
X-Atraveo-TTL
X-Atraveo-From-Varnish-Cache
X-Atraveo-ETag
Nginx-Cache
Dis-Env
X-Atraveo-Expires
X-LB-Node
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
Machine
Swift-Performance
X-Provisioner-Version
X-Goog-Meta-Policy
Identity
X-Goog-Meta-Replace
Serverid
X-LW-Web-Server
X-LP
X-HydroSheep
X-Forwarded-Host
X-NWS-UUID-VERIFY
X-Atraveo-Cache-Control
X-Atraveo-Varnish-Server-Id
CDN-Cache
X-Vcache
X-Via-NSCOPI
X-HeBS-Cache-Status
X-Consent-Required
X-App-Runtime
X-Cache-Doesi
X-Nginx-Host
X-Domain-Checked
Cteonnt-Length
X-AEM
X-Runtime-Affili
X-NginX-Upstream
X-Atraveo-Zone
X-Real-IP
TC-Cache
X-Upgrade-Enabled
Resin-Trace
Locale
Traffic-Origin
Eomportal-Instance
X-ACCELERATE
Num
X-Fedora-School-Id
X-CAPServer
X-Instance
AC-ELC
TC-Cache-IC
TC-Cache-U
X-Route
TC-S-Cache
X-AF-Userserver
Paypal-Debug-Id
X-Resolver-IP
X-RiS-UFDI
X-Varnish-Cache-Local
X-JSESSIONID
TC-S-Cache-M
AETN-EU
X-Req-Head-Response
X-Soro
X-Proxy-Cache-Control
X-Amz-Id-1
X-ZSITES-DNS
X-Amcomm-Site
X-PBY
X-SE-Debug
X-RiS-PX
X-Cache-Dispatcherpragma
X-Via-S
X-FPC
X-Rack-CORS
X-Unique-Id
*
X-WR-Flags
X-Flex-Community
X-Data-Request
X-Flex-Evend
X-Flex-Evstart
X-Flex-Lastmod
X-Flex-Lang
X-Flex-Tags
X-HashTwo
Edgecast
CS-SERVER
X-TKP-SRV-ID
Upgrade-Insecure-Requests
WP-FROM-CACHE
X-Map-Context
X-Cache-Dispatchercachecontrol
X-WebNode
Access-Control
CDN-CachedAt
AKA-DEVICE
X-Timestamp
AsisCache
AETN-State-Code
CDN-PullZone
CDN-RequestId
X-HA-Backend
X-E
X-HA-Frontend
Nitro-Cache
CDN-Uid
X-Proxy-Cache-Key
AETN-Postal-Code
AETN-Longitude
X-Actindo-Rs
X-Actindo-Request-Id
X-Actindo-Thread-Id
X-Adnet
X-Webcelerate
AETN-Area-Code
AETN-City
VANITY-HOST
AETN-DEVICE
AETN-Latitude
AETN-Country-Name
Myheader
AETN-Continent-Code
AETN-Country-Code
X-GSL-Server
YF-ID
Play-Detected-UserAgent
Cmsid
Access-Control-Request-Headers
COMMERCE-SERVER-SOFTWARE
Cmstype
X-Varnish-Debug-TTL
X-Flex-Tag
Firespring-Website-Id
Proxy-Cache
Copyright
X-Dw-Trace-Id
X-HostName
X-B2f-Not-Route
X-Server-Addr
X-Aramark-SID
Play-Detected-Device
Il-Cl
X-Aramark-CSID
X-Varnish-Debug-Age
NODE
X-IIJ-Cache
X-Xml-Http-Blocked
X-Cocoon-Version
X-SERVER-NAME
Cleartype
X-AOL-HN
X-Envoy-Upstream-Service-Time
X-ESI
MICROSOFTOFFICEWEBSERVER
Bios
X-Hostinger-Datacenter
Magicmarker
Adm-Server
X-Ms-Request-Id
Prot
X-Fstrz
NLCacheNote
X-Hostinger-Node
Disablevcache
X-Middleton-Pagespeed
X-App
X-Reflector
DrivedBy
X-Jphone-Copyright
X-Blog
X-Purge-Host
CLMOB
X-Resource
X-Purge-URL
X-SH-Cache-Status
X-Status
X-Appversion
X-LBPoolMember
GranicusServer
IES-Server
X-Upstream-Backend
X-Upstream-Status
Aurora-Node
X-FastCGI-Cache-Status
X-Middleton-PageSpeed
X-Access-Control-Allow-Origin
Fastly-Backend-Name
X-Amz-Meta-S3b-Last-Modified
X-Cache-Date
Thanks
Srv-Name
X-Secret
Cf-Ipcountry
PServer
X-Hit
X-Depends
X-Custom-Name
X-WEBMGR-CACHE
X-WebServer
X-Confluence-Request-Time
X-Varnish-Grace
Pramga
Load-Balancer
X-DN-Cache-Control
X-OpenCart-Lightning
X-Reflector-Cache
X-Desc
X-Info
X-MAT-GEO
X-M-Log
X-M-Reqid
X-Amzn-Trace-Id
X-Amzn-RequestId
X-Scheme
NGX
X-Amz-Apigw-Id
Fastly-Debug-Digest
X-Mobilized-By
X-DSMX-Render-MS
X-DSMX-Rewrite-MS
X-GeoIP-Country
X-Qnm-Cache
X-Gyrobase-Publication
X-Served-Server
Hosted-By
Pragrma
BALANCEDTO
X-Frames-Options
X-Origin-Cache
X-Test
Arrnode
X-Static
X-SAPP
Section-Io-Origin-Time-Seconds
Section-Io-Origin-Status
X-Instance-Id
X-ETag
X-DynamicCache
X-Client-Id
X-Generated-Time
X-CacheID
MageStack-Web-Node
X-Appid
Device
X-Dev
ScoreTracker
X-Directory-Script
AMP-Access-Control-Allow-Source-Origin
X-Hosting-Env
X-UUID
X-Cf-Powered-By
X-Serverid
X-Varnish-ID
X-UD-METHOD
X-FORWARDED-PROTO
TP-Cache
TP-L2-Cache
X-Cache-Detail
X-Cms-Mode
X-IP
NZSpeedy
X-ReqId
Provider
MageStack-Cache-Hits
MageStack-Cache-Lifetime
MageStack-Cache
MageStack-Area
VServer
X-SDE-Name
MageStack-Cache-Status
MageStack-Cacheable
MageStack-PageSpeed
MageStack-Tag
MageStack-Magento-Version
MageStack-Loadbalancer
MageStack-Config
MageStack-Debug
Viewport
RN-Server
X-Cache-Me-Harder
X-Nginx
X-Proto
Server-ID
Worker
X-Smartcache-Timeout
X-We-Are-Hiring
X-Gateway-Rate-Limit-Delayed
X-Smartcache-Keys
X-WP
X-Cache-LB
X-DB-Content-Length
X-Az
X-Expires
X-Cname-TryFiles
X-NoIndex
X-Shopware-Allow-Nocache
X-Shopware-Cache-Id
X-Served-From
MS-CV
X-RunCloud-Cache
EQ-Cache
X-Tag-Playlist
X-Application
Ews
NS-VaryByCustom-Key
X-Domino-CacheValidationWithETagReason
ID
X-Varnish-Ip
HTTPS
Tempo
X-CSRF-Token
Tesla.Performance
X-TLS-Version
X-Cache-Time
X-Domino-CacheValidationWithETagResult
X-Cache-ID
X-Activity-Id
AMP-Redirect-To
X-Rebelmouse-Cache-Control
X-CRA-DC
X-Cdn-Forward
X-Cache-On
X-Response
X-WR-MODIFICATION
X-Highwire-RequestId
X-Garden-Version
X-Cache-Varnish
N365rili
X-Beatles
X-Compress-Hint
X-Cluster
HSTS
FRONT-END-SECUREBROWSER
X-Compressed-By
X-Container
Access-Control-Allow-Header
Yoncu-Errno
X-Proxy-Skip
X-Highwire-SessionId
X-Refresh
Server-Id
IP-Addr
X-VC-Cacheable
X-Page
X-Cache-Node
SWS-Security
X-Cache-Var-Map
X-Cache-Var
,
X-Nx-All
X-Nx
X-Streams-Distribution
X-SmartBan-URL
X-SmartBan-Host
XX
Filters
X-Clara-ASAP
X-ASAP-Cache
X-ASAP-Age
X-UPSTREAM-Address
X-PBS-Fwsrvname
X-V-Cache
X-UT-Cache
X-Time-Spent
X-Batcache
X-WN-ClientGroup
Amfplus-Ver
Provided-Host
Origin-Vm
CommunityServer
WN
Generate-Time
X-Oferteo-Domain
X-HA
X-Deity
X-Pj-Cache-Status
X-Processed
X-This-Proto
X-Served
X-Resty-Request-Id
X-CH-Device
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Catalyst
X-Cache-FS-Status
X-Avvio-Cms-Cacheload
VC-NoCache
X-DataDome
X-Dispatcher-Number
X-PBS-Appsvrname
X-PBS-Appsvrip
X-MyName
Session-Id
ProxiaInstanceId
X-WA-Info
X-Req-Counter
X-RAMCache
Apachenode
ClientIP
NB-Cache
Gzip
F5-IpCliente
X-Debug-Message
X-Autoru-Host
X-Airee-Node
X-Lb
X-BPool-Back
X-BServer
X-Captured
X-Built-By
HitType
From
X-Serv
X-RemovedCookies
X-Server-Generated
X-Zendesk-Origin-Server
X-Zendesk-User-Id
X-Country
X-Gannett-Site-Version
X-Title
X-Session-Reinit
X-VC-TTL
X-W3TC-Minify
Response-Time
X-WebKit-CSP-Report-Only
X-Rewritten-By
X-Render-Time
X-ManagedFusion-Rewriter-Version
X-Layout
X-Netrix-ID
X-NodeID
X-Protected-By
X-Proxy-Server
X-ProcessESI
ServerIP
Server-Ip
Session-From
StatusCode
X-Cache-TTL-Current
X-Cache-TTL-Age
OracleCommerceCloud-Version
OracleCommerceCloud-Sandiego
Httpd-Identifier
CommercePlatform-Version
Id
MSSmartTagsPreventParsing
MSThemeCompatible
X-Firewall
X-Instance-Name
X-Cache-Via
SS
X-Highwire-Sitecode
X-Highwire-Smart-Code
X-Origin-Server
X-Nginx-Request-Processing-Time
MwpReleaseVersion
Actual-Object-TTL
X-Meta-MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
X-Meta-MSThemeCompatible
X-SSL-Host
X-UA
Ssl-Proxy-Server
MachineName
PB-PID
Now
PB-RID
PBS
REFRESH
X-UA-Bot
X-Src-Webcache
X-Optimization
X-PM-ID
X-Podname
X-Rule
X-Firefox-Spdy
X-FromPodPressCache
X-Wodby-Node
X-Vol-Mrp
X-Vol-Correlation
X-Vary-Options
Ttl
X-Origin-Upstream-Status
X-Global-Transaction-ID
X-Grid-Server
X-Mobile-Rewrite
X-Now-Trace
X-Mighty-Proxy
X-Backside-Transport
ViewMode
X-Autoru-App-Id
X-Cache-HT
VSID
X-GZip
X-Varnish-Action
X-Ms-Version
X-Sorting-Hat-Expire-Cache
X-WHO
X-VERSION
X-MSU-SOURCE
Xc
Description
X-VTEX-Cache-Status-Janus-Edge
X-Dynatrace-Js-Agent
X-Origin-Name
X-Geo
Keywords
X-DevSrv-CMS
Og
X-Cache-Warmer
X-Cache-Extended
X-Bip
X-Clx-Request
Z
X-SERVER-ID
No-Cache
X-Thanos
X-SuperCache
X-VG-WebCache
VAR-Cache
AddDefaultCharset
X-Agent
X-Server-Hostname
X-ServiceProvider
X-SilverStripe-Cache
NtCoent-Length
X-Batcache-Reason
X-Built-With
X-EC2-Instance-Id
ModuleCacheType
X-Skip-Cache
Content-Sn
Progma
X-Sid
X-Geo-IP
Apple-Itunes-App
X-Amzn-Remapped-Content-Length
X-AppServer-Status
X-AWS
WP-AdvCache-MemCached
X-Croise-Owner
X-AppServer-Cache-Rule
X-AppServer-Cache-Exception
UrlWatchModule-Time
Webserver
X-Amzn-Remapped-Date
TestCC
X-MCF-ID
X-PHP-Response-Code
X-Policy
X-Proxy-Id
Debug-Status
SBSS
Expiries
TYPO3-Sitename
TYPO3-Pid
SERVER-NAME
Web-Server
X-Enhanced-By
NEL
X-Ser
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-HS-Content-Group-Id
X-BIT-Node
CINC-Endpoint
X-VC-Hash
X-Pool
X-XHR-Current-Location
X-VC-Cache
X-VC-Debug
X-CACHE-KEY
X-Cache-Id
X-Artvisual-Server
X-HEAD
X-Amz-Meta-Version-Id
X-Hosting
X-Itkg-Cache-Tags
Content-Generator
X-SSLTerm-Server
X-Flash-Messages
X-PageCache
X-Varnish-Cache-Control
X-InstanceId
X-Cjtype
Cache-Cookie-Set-Idcheck
X-Geoip-Country-Name
X-LAKANA-AB
X-Beluga-Cache-Status
X-Beluga-Node
Page-Template
X-Varnish-Cached-TTL
X-Node-App
X-TNCMS-Bot-Tier
X-UPServer
X-Varnish-Cached
X-Beluga-Record
X-Beluga-Response-Time
X-Request-Received
HitInfo
Language
Www.Aujourdhui.Com
X-Request-Processing-Time
X-Rack-Cors
X-Beluga-Response-Time-X
Cache-Cookie-Set-From
X-Beluga-Status
X-Beluga-Trace
Cache-Cookie-Set-Lfrom
X-Amz-Meta-Cb-Modifiedtime
Ohc-Response-Time
X-Abuse
X-Varnish-Debug-Hits
HA-Status
CDCHOST
Cache-Ctrol
X-Search-Id
X-Vid
X-PressLabs-Stats
X-Dck
X-ROUTING
X-T
X-Transaction-Name
X-User-Agent-Tier
X-SATserver
X-Machine
X-Nginx-VM-RT
SINA-LB
SINA-TS
X-Client-Ip
X-Beget-Proxy
X-Obvious-Info
X-Obvious-Tid
PROGMA
X-RequesterIP
Sl-Pgid
X-Page-Cacheable
X-Always-Cache
X-Pageid
X-ORIKEY
X-Varnish-Cache-Ttl
X-APIAUTH-VAL
X-APIVERSION
X-Test-Debug
X-Requestid
X-ProBase-Server
X-XHTML-Minification-Powered-By
MageStack-Last-Modified
Hit-Count
Purge-Cache-Tags
Fastly-Restarts
MageStack-Cache-Lifetime-Sent
MageStack-Cache-Warning
X-SCM-Server-Number
X-Rocket-Nginx-Reason
X-Beresp-Ttl
X-B
X-NMT-Proxy
X-Fastly-Backend-Reqs
X-Header
X-Ghost-Cache-Status
X-Node-Id
X-Max-Age
X-ENDPOINT
X-Rocket-Nginx-File
X-ZORequestID
X-Powered-By-ADS
X-Pass-Through
X-From-Cache
X-Apache2-RT-MicroSec
AR-PoweredBy
AR-CACHE
AR-SID
Content
X-SV
D
AR-ATIME
Web
X-DODN-Id
X-DODN-Region
Xxline
X-Reqid
X-Router
Requested-Host
X-7d-Instance-Id
X-DDM-SERVER
X-Varnish-URL
X-DDM-SERVER-UPDATED
X-ENV
X-Phpwcms-Page-Processed-In
X-Newrelic-Synthetics
X-Cdn-Origin
X-Telligent-Evolution
Value-Of-Url
X-7d-Trace-Id
X-Box
X-Cache-Action
X-Nws-Log-Uuid
X-LB-Backend
X-LB-Frontend
SB-Cache-Remaining
SB-Site-Device
SB-Cache-Life
Origin-Edge-Control
X-Stiffia-Cache
Origin-Cache-Control
X-OCTOPOD
SB-Site-IE-VERSION
TTL
X-AMAZEEIO
Tk
ServerTokens
ServerSignature
129prxHost
135prxHost
X-Old-Content-Length
Powered-By-115
X-InDy-Query
X-InDy-Time
X-Author
X-InDy-Memory
X-HS-Status
259pxline
196prxHost
262prline
316pxxline
X-Custom-Header
X-Phpwcms-Release