Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
X-Cache
Age
Content-Language
X-AspNet-Version
P3P
X-Pingback
Expect-CT
X-UA-Compatible
Via
Upgrade
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Request-Id
X-Adblock-Key
Referrer-Policy
X-Check
X-Xss-Protection
X-Varnish
X-Generator
X-Language
X-Template
X-Buckets
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-Drupal-Cache
P3p
X-Permitted-Cross-Domain-Policies
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Download-Options
Alt-Svc
X-Ac
X-Hacker
X-Cache-Hits
X-AspNetMvc-Version
Host-Header
X-Sorting-Hat-Section
X-Dc
X-Alternate-Cache-Key
X-ShopId
X-ShardId
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId-Cached
X-Via
X-Runtime
X-Powered-By-Plesk
X-Contextid
X-ServedBy
X-Served-By
X-PC-Hit
X-PC-Key
X-UA-Device
X-PC-Host
X-PC-Date
X-PC-AppVer
MS-Author-Via
Content-Location
X-Amz-Cf-Id
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Powered-CMS
X-IPLB-Instance
X-Rid
X-Timer
Status
X-Wix-Request-Id
X-Seen-By
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Tumblr-Pixel-0
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-1
Access-Control-Allow-Credentials
Cartoon
X-NewRelic-App-Data
CF-Cache-Status
X-Tumblr-Pixel-2
X-Iinfo
X-Backend
X-WPE-Loopback-Upstream-Addr
X-Host
X-Cache-Status
Powered-By
X-Endurance-Cache-Level
Content-Encoding
X-Mod-Pagespeed
X-Cache-Hit
X-Port
X-Cache-Enabled
X-CST
X-Server
X-Tumblr-Pixel-3
X-CDN
X-Logged-In
Keep-Alive
X-DIS-Request-ID
X-Server-Powered-By
X-Drupal-Dynamic-Cache
X-Robots-Tag
X-Nginx-Cache-Status
X-Accel-Version
Server-Timing
X-Proxy-Cache
X-Turbo-Charged-By
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Page-Speed
X-Newrelic-App-Data
X-Content-Digest
X-LiteSpeed-Cache
X-Content-Powered-By
X-GitHub-Request-Id
X-Rack-Cache
X-Tumblr-Pixel-4
Content-Security-Policy-Report-Only
X-AH-Environment
X-Pad
X-FW-Hash
X-ASPNET-VERSION
X-FW-Server
X-FW-Static
X-FW-Serve
X-FW-Type
Edge-Control
X-Varnish-Cache
X-Hits
Request-Context
X-Webcom-Cache-Status
X-Request-ID
X-XRDS-Location
X-Request-Country
SPRequestGuid
X-MS-InvokeApp
X-SharePointHealthScore
X-Trace
X-BC-Stapler
MicrosoftSharePointTeamServices
WP-Super-Cache
Timing-Allow-Origin
Edge-Cache-Tag
X-HS-Cache-Config
X-HS-Content-Id
X-Amz-Request-Id
Cf-Railgun
X-Amz-Id-2
X-FullPageCaching
X-Node
Access-Control-Expose-Headers
X-Cache-Lookup
X-HS-Combine-CSS
X-Ua-Compatible
X-Content-Security-Policy
Charset
X-Webserver
X-CF-Powered-By
X-INKT-URI
X-INKT-SITE
Request-Id
X-PhApp
X-Fastly-Request-ID
X-Cnection
Access-Control-Max-Age
X-PHP-Backend
SPIisLatency
SPRequestDuration
EagleId
X-Backend-Server
MicrosoftOfficeWebServer
X-Died
X-Swift-CacheTime
X-Swift-SaveTime
X-Tumblr-Pixel-5
Rating
Composed-By
X-CDN-Pop
X-CDN-Pop-IP
Grace
X-SS-Location
X-SS-Conf
X-Safe-Firewall
X-Device
Served-By
Liferay-Portal
X-DDC-Arch-Trace
X-Wix-Punisher
X-Server-Name
X-Tumblr-Content-Rating
X-Edge-Cache
X-Edge-Cache-Key
X-Spip-Cache
X-Dw-Request-Base-Id
X-Hyper-Cache
X-VCache
X-NF-Request-ID
Front-End-Https
X-Do-Not-Hack
Permitted-Cross-Domain-Policies
X-HeyJason
X-Cloud-Trace-Context
X-Cluster-Node
Surrogate-Control
X-LiteSpeed-Cache-Control
X-Loop
X-TNCMS
X-Acc-Exp
X-Microcache
P-WS
P-LB
X-FB-Debug
X-SERVER
X-RateLimit-Remaining
X-StackifyID
X-RateLimit-Limit
X-Clacks-Overhead
X-RateLimit-Reset
X-DNS-Prefetch-Control
X-Jimdo-Instance
X-Jimdo-Wid
X-OneAgent-JS-Injection
Content-Style-Type
X-Firenze-Processing-Times
Content-Script-Type
Display
X-Middleton-Display
X-Sol
X-Middleton-Response
Response
X-Kinsta-Cache
X-Debug-Info
X-Vtex-Processado-Em
Public-Key-Pins
Refresh
X-Tumblr-Pixel-6
X-Original-Date
X-Age
X-User-Agent
X-XN-XNHTML
X-Cached
X-XN-Trace-Token
X-Ruxit-JS-Agent
X-Amz-Version-Id
X-WebKit-CSP
X-Cache-Config
X-Goog-Hash
Fpc-Cache-Id
X-Magento-Tags
X-Zen-Fury
X-Px
X-N-OperationId
X-Hostname
PageSpeed
Retry-After
X-Shopid
Xkey
X-Sorting-Hat-Podid-Cached
X-Sorting-Hat-Privacylevel
X-Shardid
X-Sorting-Hat-Podid
X-Sorting-Hat-Featureset
X-Sorting-Hat-Shopid
X-Sorting-Hat-Shopid-Cached
X-LW-Cache
X-Generated-By
X-Topify-Platform
X-Version
X-Handled-By
X-DynaTrace-JS-Agent
Rt-Fastcgi-Cache
X-Frame-Option
X-Upstream
Allow
Access-Control-Request-Method
X-Goog-Stored-Content-Length
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
X-Source
X-MiniProfiler-Ids
X-Goog-Metageneration
X-Goog-Generation
X-From
X-FORWARDED-FOR
X-Loopia-Node
X-URL
Fastcgi-Cache
TCN
X-Request-Time
X-Url
X-Edge-Location
X-Outils-CS
Last-Published
X-CMS-Version
X-Platform-Processor
X-Platform-Router
X-Platform-Cluster
X-B-Cache
X-Cached-By
X-Whom
Feature-Policy
Edge-Control-Message
X-Servedby
Public-Key-Pins-Report-Only
ServedBy
X-Engine
X-AspNetWebPages-Version
X-Varnish-TTL
X-EdgeConnect-Origin-MEX-Latency
X-Accel-Expires
X-URLSCHEME
X-Content-Options
X-LBLID
X-RESOURCE
X-Varnish-Count
X-Varnish-HitMiss
X-EdgeConnect-MidMile-RTT
X-NWS-LOG-UUID
X-SRCache-Store-Status
X-Magento-Cache-Debug
X-SRCache-Fetch-Status
Powered
Imagetoolbar
X-DynaTrace
X-Cdn
X-Varnish-Cache-Hits
X-Msg-2-Log
Dmn
X-ET-API-ROOT
X-Varnish-Host
X-ET-API-ORIGIN
X-ET-API-VERSION
Fhost
Warning
X-Cache-Info
X-Actual-URL
X-Original-Request
X-Returned-From-DLL
X-Passed-To
X-Returned-From
X-Passed-To-DLL
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Processed-At
X-Vtex-Remote-Cache
X-Powered-By-VTEX-Janus-ApiCache
X-CacheServer
X-Guploader-Uploadid
No
X-Recruiting
X-VTEX-Janus-Router-Backend-App
X-Cache-Key
X-Varnish-Beresp-Grace
Product
X-Developer
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Microcachable
X-Stale
X-Application-Context
X-S
X-Location-Id
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Returned-From-PostProcessResponse
X-Response-Time
Generator
X-Umbraco-Version
X-UD-Method
X-Returned-From-BeforeDispatch
X-HS-Content-Campaign-Id
X-Platform-Server
Host
X-Device-Type
X-PERF
X-ApacheServer
DynaTrace
X-Cache-Rule
X-Gateway-Cache-Key
X-Gateway-Cache-Status
X-Gateway-Skip-Cache
X-Fastcgi-Cache
X-Shop-Id
X-Defender
X-Signature
Arr-Disable-Session-Affinity
X-Platform
X-Platform-Cache
X-Instart-Request-ID
Version
X-Supported-By
Origin
X-Forwarded-For
X-Cache-Tags
X-Powered-By-360WZB
X-Hosted-By
X-Rnd
X-Via-JSL
X-Ezoic-Cdn
X-F-Cache
X-Micro-Cache
X-App-Status
Cache-Provider
Alternate-Protocol
X-Translation
X-Microcache-Status
Pagespeed
X-Correlation-Id
X-Correlation-ID
Surrogate-Key
X-Environment
WZWS-RAY
USPLoggingUUID
X-SSLUpstream
X-TransIP-Balancer
X-Cache-Namespace
X-HOST
X-SSLProxy
X-BS
X-I-Sp
X-SO
X-Sapient
Cache-Key
X-TransIP-Backend
X-Dispatcher
Content-Hash
X-Daa-Tunnel
X-Svr-Proxy
X-SVR-IIS
X-Magento-Cache-Control
X-SSL-Cipher
Content-Disposition
X-Lambda-Id
X-Cache-Age
X-Server-Upstream
MIME-Version
X-Dealeron-Original-Url
X-Dealeron-Backend
X-DealerOn
X-Ttl
X-SSL-Protocol
X-Abgroup
X-Expires-Orig
X-Server-ID
X-Powered-By-VelaWeb
X-Varnish-ObjectSource
X-CSRF-Protection
X-Varnish-GracePeriod
X-Varnish-Seen-By
Pool
X-Varnish-RemainingTTL
X-Varnish-RemainingLife
SN
Akamai-IP
S-Cnection
SSPAppContext
X-Duration
X-NoCache
X-Edge-IP
X-Hypernode
X-ORACLE-DMS-ECID
X-Debug
X-Akam-SW-Version
X-Art-Request-Id
X-Matrix-Proxy
X-Matrix-Server
X-Cache-Control-Orig
X-I
X-App-Hosting
Node
X-Director
Cneonction
ServerID
X-Last-Modified
X-LB-Node
X-Track
X-Storage
X-NetCat-Version
Wsr-Cache
X-Front
X-Rocket-Nginx-Bypass
Req-Id
X-Gamma-Serve
X-Vcap-Request-Id
X-Drupal-Cache-Tags
Accept-Encoding
X-Grace
RTSS
X-Forwarded-Proto
X-Server-Id
X-Cf-Powered-By
X-ATG-Version
X-Cache-Debug
X-Cache-Handler
X-Hiawatha-Cache
X-VARITI-CCR
X-Page-Cache
X-Magnolia-Registration
X-Litespeed-Cache
X-Cache-Level
X-ServerName
X-Pressidium-NinukisWP-Ver
X-Flow-Powered
X-Varnish-Cacheable
Powered-By-ChinaCache
X-Route-Server
X-Revision
X-Cache-Lifetime
X-SRV
X-Cache-Server
X-Cache-Type
X-Rocket-Nginx-Serving-Static
If-Modified-Since
X-GUploader-UploadID
X-LB-Server
X-Powered-By-VTEX-Janus-Edge
X-Cache-TTL
X-Dns-Prefetch-Control
X-Generated
FAI-W-FLOW
X-SV-Expires
X-SV-CreatedAt
X-SV-Nginx-Duration
X-SV-Duration
X-SV-Pid
SiteSpeed
X-SV-CacheTags
X-SV-FromDBCache
X-SV-Edge
X-SV-Cacheable
X-Cache-Engine
X-Amz-Meta-S3cmd-Attrs
AMF-Ver
X-GeoIP-Country-Code
X-Content-Encoded-By
X-Drupal-Cache-Contexts
X-Client-IP
X-Geo-Country
X-UPSTREAM
X-Sucuri-ID
X-Firenze-Processing-Time
X-LB
X-Cache-Operation
X-ARC
Update-Time
Lsrequestid
Author
X-SDS
X-IsCacheURL
X-CJ-Soft
Src-Update
X-Processing-Time
X-Country-Code
X-Env
X-PwB-Node
X-Service-Id
X-Trace-Id
X-Url-Base
X-Discourse-Route
X-SmugMug-Values
X-SmugMug-Hiring
Smug-CDN
X-TTFB-L
X-TTFB
X-Speed-Cache
X-Vhost
Page-Completion-Status
Contao-Page-Layout
X-Locale
X-Speed-Cache-Key
X-Esi
X-Litespeed-Cache-Control
W
X-Pantheon-Environment
Section-Io-Id
X-Pantheon-Phpreq
X-Pantheon-Site
X-Cache-Device-Type
X-Cache-Expires
Surrogate-Key-Raw
X-Dispatch
X-ServerID
X-ORACLE-DMS-RID
NnCoection
Strikingly-Cached-Version
Strikingly-Cached
PICS-Label
X-Unbounce-PageId
X-Server-Instance
Strikingly-Cache-Region
X-Unbounce-VisitorID
X-Unbounce-Variant
X-Cookie-Domain
X-N
X-GeoIP-Country-Name
Proxy-Connection
X-Varnish-Url
X-Akamai-Device-Characteristics
X-Varnish-Ttl
ServerName
Nodo
X-Sucuri-Cache
X-Akamai-Device-Model
X-TransIP-Reserved
Srv
X-Origin
X-Varnish-Backend
X-Time
X-Frontend
X-Cache-Only-Varnish
X-Dynamic-Cache
Content-Encoding-Handler
Cache
Qs-Cache
X-ACMCache
X-Middleware-Start
X-Runtime-Rack
Backend
X-SRCache-Key
X-FW
MC
X-Content-Type-Option
X-Real-Server
X-HW
Https
Pv
From-Origin
X-Content-Age
Local-Info
Tracecode
X-CacheFROM
Use-Proxy
X-FTR-Request-ID
Service-Worker-Allowed
X-Pool
Content-Transfer-Encoding
X-Wikidot-Static-Cache
Cache-Tags
X-Wikidot-Backend
X-Empowered-By
X-Webkit-CSP
CacheControlHeader
X-Nginx-Cache
X-Now-Id
Server-Name
S
X-Varnish-IP
FindLaw
X-Always-Cache
X-TTL
X-Symfony-Cache
Hummingbird-Cache
X-Id
X-Browser
X-Varnish-Age
X-Nbs
X-FIRSTBase
X-ID
X-Storage-Cache-Expires
X-Storage-Cache
X-Vip
X-Drectory-Script
IM-Version
X-Varnish-Retries
X-High-Performance
X-Cache-CFC
X-Storage-Cache-Date
X-Config-Blacklist-Version
X-CF-Passed-Proto
Custom-Header
X-Varnish-Server
X-Worker
X-Cache-Control
X-BackendServer
X-Key
Ohc-File-Size
X-Srv
X-SP-Farm
Content_type
X-Akamai-Edgescape
X-PF-Uncompressing
IBM-Web2-Location
X-BKSrc
X-VC-Enabled
X-Cache-PageType
X-Amz-Storage-Class
X-SP-UniqueName
X-Cache-Fix
MJ12bot
SEOMOZ
X-WR-Flags
X-AF-Userserver
Edit
X-RequestId
Accept-Charset
Fw-Via
X-LP
Content-MD5
X-Proxy
X-Rq
HCVer
X-Twitter-Response-Tags
X-Transaction
X-Fedora-School-Id
Adm-Server
Nginx-Cache
X-Role
HAVer
X-Content-Security-Policy-Report-Only
X-NginX-Cache
Front
X-NginX-Server
X-LW-Web-Server
Cached
X-Redman-Final-Url
X-Amz-Rid
X-Shield-Request-Id
X-Avg-Cookie-Expires
X-Location
Xc-Version
X-Redman-Backend
X-RealServer
X-AVG-Country-Code
X-Connection-Hash
Swift-Performance
Server-Info
X-Adobe-Loc
X-Varnish-Hits
X-App-Server
NetMindSessionID
Eomportal-Instance
X-Adobe-Content
X-Span
Dtk-Cache-Check-0
X-Cache-Ttl
X-CB-Server
Location
X-Nitro-Cache
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Force
X-Atraveo-Set-Cookie
X-PRAM
X-Atraveo-Zone
X-Atraveo-ETag
X-Amz-Meta-Content-Md5
X-TB-M
X-Source-ID
X-Atraveo-Cache-Control
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
X-Atraveo-Param-Rm
X-4ormat-Cacheable
X-AEM
X-ARRServer
X-Unique-ID
X-RiS-UFDI
Pf.Web.Request.Id
Pics-Label
X-SE-Debug
Proxy-Agent
X-Purge-URL
Cm-Server
SVR
SRV
Backend-Timing
Access-Control-Allow-Method
X-Analytics
X-Disney-Akamai-Rule
WWW-Authenticate
X-Yadis-Location
X-Cache-Miss-From
Request-EU
X-SERVER-NAME
X-Webstats-RespID
X-Remote-Addr
WP-FROM-CACHE
X-Hrouter
CS-SERVER
X-Hstore
Environment
Frame-Options
RequestId
X-Sedo-Request-Id
X-WPL-DATA
X-Runtime-Memory
X-Varnish-Debug-Age
X-Sys-Req-ID
Request-Country
X-Framework
Prama
X-Balanceador
X-Varnish-Debug-TTL
X-VCS-Cacheable
X-Amzn-RequestId
X-Now-Cache
Firespring-Website-Id
X-Request-Uri
Lb
X-Consent-Required
X-CDN-Forward
X-VCS-Ttl
X-HeBS-Cache-Status
X-App-Runtime
X-Runtime-Affili
X-Amzn-Trace-Id
X-Purge-Host
X-Smartcache-Keys
X-Proxy-Backend
X-Captured
X-CAPServer
X-Appmachine-Environment
X-WP
X-Varnish-ID
X-Generated-Time
X-Resty-Request-Id
X-Amz-Apigw-Id
EN-User
SHInfo
Url
X-Server-IP
X-Stage
X-HostName
X-Smartcache-Timeout
X-IIJ-Cache
X-FastCGI-Cache
X-Debug-Token
X-Path-Route
X-Domain-Checked
X-Timestamp
X-Application
Access-Control-Request-Headers
X-FireWall-Port
X-ClientSide-Caching
From
X-Provisioner-Version
Disablevcache
RN-Server
X-Lw-Cache
X-A
X-JG-Page-Cache
X-Rack-Cors
X-Generated-Timestamp
X-Cocoon-Version
X-HydroSheep
F5-Trid-Value
F5-Trid-Name
X-Origin-Id
X-Orig-Vary
X-Custom-Name
X-SH-Cache-Status
X-Processed-By
X-HTML-Minification-Powered-By
X-Webcelerate
Edgecast
IES-Server
AMP-Redirect-To
VServer
X-PBY
X-Desc
X-MAT-GEO
Myheader
X-App
X-Proxy-Cache-Control
Max-Age
Paypal-Debug-Id
BackendServer
X-CACHE-TTL
AETN-Country-Name
AETN-DEVICE
AETN-EU
AETN-Latitude
AETN-Country-Code
AETN-Continent-Code
AETN-Area-Code
X-VC-TTL
AETN-City
AsisCache
AETN-Longitude
AETN-Postal-Code
X-Rule
X-Depends
Load-Balancer
X-Distributor
X-Soro
Cteonnt-Length
X-Via-S
AETN-State-Code
AKA-DEVICE
X-GSL-Server
X-MidCOM-Meta-Cache
X-Ratelimit-Remaining
X-Response
X-Varnish-Action
Resin-Trace
Machine
X-Pagename
X-Resource
X-Cache-On
X-CRA-DC
ScoreTracker
X-Hit-Cache
X-Ratelimit-Limit
Filters
Arrnode
BALANCEDTO
EagleEye-TraceId
Ufe-Result
X-SAPP
X-GoCache-CacheStatus
X-Agent
X-Resolver-IP
Pragrma
Id
X-Forwarded-Host
X-Dynatrace-Js-Agent
X-Actindo-Rs
X-Actindo-Request-Id
Access-Control-Allow-Header
VANITY-HOST
X-CacheDebug
X-Actindo-Thread-Id
X-ProcessESI
X-Adnet
*
X-RemovedCookies
IISExport
Ibf5scheme
NtCoent-Length
N365rili
Identity
SERVER-ID
X-Reflector
Noq
A-Powered-By
Web-App-Origin-Name
Ramp
ServerNode
Ali-Swift-Global-Savetime
Ram
X-Akamai-Transformed
X-Proxy-Skip
X-ENV
X-GeoIP
X-Jphone-Copyright
Copyright
X-OpenCart-Lightning
Fastly-Backend-Name
X-HS-Status
Upgrade-Insecure-Requests
Accept-Language
X-Beget-Proxy
X-Backend-Status
X-Compress-Hint
Magicmarker
X-Hosting-Env
XDomainRequestAllowed
DNNOutputCache
Aurora-Node
X-Cache-Doesi
Referer
Beyond-Iis
X-Reflector-Cache
X-NWS-UUID-VERIFY
X-Cacheable-TTL
Report-To
X-Varnish-URL
X-SDE-Name
X-Cache-2
X-Nginx-Host
X-AutoRu-App-Id
Access-Control
X-Svr
X-Real-IP
Thanks
X-Ser
Now
X-MCB-Server
HitType
AR-PoweredBy
X-Yottaa-Metrics
X-Yottaa-Optimizations
AR-SID
Accept-CH
Web
X-Autoru-Host
X-Client-Image-Vid
X-VNode
X-EPiphany-Vid
AR-ATIME
AR-CACHE
X-Box
X-Rebelmouse-Cache-Control
X-UA-Bot
X-ROUTING
X-AOL-HN
Lookup-Cache-Hit
X-Refresh
X-ORIKEY
X-Plat
X-Origin-Server
X-Varnish-Hostname
X-Goog-Meta-Policy
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Goog-Meta-Replace
X-WEBMGR-CACHE
AMP-Access-Control-Allow-Source-Origin
X-Varnish-Debug-Hits
X-ServerIndex
X-JSESSIONID
X-UnsetCookies
X-Now-Trace
X-Cache-Varnish
X-ENDPOINT
X-APIAUTH-VAL
X-APIVERSION
X-Session-Reinit
X-SayCDN-TTL
X-Info
X-Gannett-Site-Version
X-Page
X-Secret
XX
X-Bip
X-Client-Vid
X-Flex-Lang
X-Flex-Evstart
X-Flex-Lastmod
X-Server-Addr
X-Say-TTL
X-Flex-Evend
X-Flex-Community
X-WebNode
X-IP
NLCacheNote
Bios
X-DataDome
X-Flex-Tag
X-Amz-Id-1
X-Confluence-Request-Time
Device
X-Garden-Version
X-Upgrade-Enabled
X-E
X-ESI
X-Flex-Tags
X-Map-Context
COMMERCE-SERVER-SOFTWARE
X-Req-Head-Response
AC-ELC
X-DynamicCache
X-Abuse
Cmstype
X-Say-Cacheable
Cmsid
X-Culture
CommunityServer
X-Origin-Cache
X-RAMCache
X-Detected-Device
CLMOB
X-Now-Instance
PBS
X-Session-ID
X-FromPodPressCache
X-Dev
SS
NZSpeedy
Dispatcher
Cache-Status
X-Cdn-Forward
Prot
Fastly-Debug-Digest
X-SilverStripe-Cache
X-Cms-Mode
X-Vary-Options
X-Directory-Script
X-CACHE-KEY
WP-AdvCache-MemCached
Worker
Server-Id
Pramga
X-Proto
X-ReqId
X-Serv
X-Varnish-Cache-Local
X-Wodby-Node
X-Server-Ip
X-Cache-TTL-Age
X-Cache-TTL-Current
X-Cache-Warmer
X-Test-Debug
X-PM-ID
X-Ms-Request-Id
DrivedBy
Arrow-RequestId
X-B2f-Not-Route
Home
X-DSMX-Render-MS
X-Ghost-Cache-Status
X-ETag
TC-S-Cache
TC-S-Cache-M
X-Pagely-Cache
Cf-Ipcountry
X-Src-Webcache
X-Global-Transaction-ID
X-XHTML-Minification-Powered-By
X-Amcomm-Site
X-V
X-Scheme
X-Node-App
X-Search-Id
X-Protected-By
X-PressLabs-Stats
X-Cache-Via
CDCHOST
X-CloudBurst-Cache
X-CloudBurst-Backend
X-Backside-Transport
X-Blog
X-CloudBurst-Frontend
X-Zendesk-User-Id
X-MrHost
X-WA-Info
X-Zendesk-Origin-Server
X-CloudBurst-WordPress
PB-PID
TC-Cache-U
Apachenode
X-W3TC-Minify
X-M-Log
X-Built-By
X-WebKit-CSP-Report-Only
X-FPC
PB-RID
Sl-Pgid
REFRESH
X-ManagedFusion-Rewriter-Version
X-Enabled1
X-Enabled2
X-Qnm-Cache
X-Max-Age
X-Highwire-Sitecode
X-Firefox-Spdy
X-Highwire-Smart-Code
X-DSMX-Rewrite-MS
X-NodeID
X-Status
X-Middleton-PageSpeed
Provider
X-Pass-Through
X-Nginx-Request-Processing-Time
X-Mobile-Rewrite
X-Node-Id
VSID
X-DevSrv-CMS
X-Enabled3
ViewMode
X-M-Reqid
X-Rewritten-By
X-Render-Time
X-Proxy-Cache-Key
X-RequesterIP
X-Gateway-Rate-Limit-Delayed
SBSS
NODE
Yoncu-Errno
D
FRONT-END-SECUREBROWSER
TC-Cache-IC
Hamster
X-Olaf
X-Mobilized-By
TP-Cache
Powered-By-115
TP-L2-Cache
X-Container
X-KoobooCMS-Version
Server-ID
Tempo
X-Reqid
X-Qiniu-Zone
X-Via-NSCOPI
Content
X-HashTwo
X-Log
X-Test
X-7d-Trace-Id
X-7d-Instance-Id
X-Amz-Meta-Cb-Modifiedtime
X-Cache-Action
X-Cache-Extended
MS-CV
X-Unique-Id
X-ASAP-Cache
CDN-Cache
Session-Id
SINA-LB
SINA-TS
X-Instart-Cache-Id
X-Hosting
Backend-Name
Backend-IP-Port
Dis-Env
Provided-Host
X-Fstrz
X-Cache-FS-Status
X-CacheID
X-PBS-Fwsrvname
X-PBS-Appsvrname
X-WR-Trace
X-Upstream-Addr
Num
X-PBS-Appsvrip
X-Nginx-Request-Time
X-Instance-Id
X-Clara-ASAP
WN
X-MyName
X-Data-Request
X-HA-Frontend
HitInfo
X-Highwire-RequestId
X-Block-Rule
X-Highwire-SessionId
X-ServiceProvider
X-SmartBan-Host
X-EC2-Instance-Id
X-Built-With
X-CacheLoc
X-Block-RuleID
X-Batcache
X-Batcache-Reason
X-SmartBan-URL
X-Streams-Distribution
X-WN-ClientGroup
Il-Cl
Server-Ip
TC-Cache
Proxy-Cache
ServerSignature
X-Aramark-SID
X-XHR-Current-Location
Traffic-Origin
ServerTokens
X-B3-Sampled
X-HAProxy
X-DDM-SERVER-UPDATED
Xc
X-Frames-Options
X-PHP-Response-Code
X-DDM-SERVER
X-SuperCache
X-Cache-Dispatcherpragma
X-Proxy-Id
X-Distributed-By
X-HA-Backend
X-Cache-Time
X-Cache-Detail
X-Cache-Dispatchercachecontrol
X-Domino-CacheValidationWithETagResult
X-Oferteo-Domain
X-Domino-CacheValidationWithETagReason
MageStack-Magento-Version
MageStack-Debug
MageStack-Loadbalancer
VC-NoCache
MageStack-Web-Node
X-Ratelimit-Reset
X-FORWARDED-PROTO
MageStack-Config
MageStack-PageSpeed
MageStack-Tag
X-Appid
MageStack-Cache-Status
X-Pj-Cache-Status
Cleartype
X-Bcwwwid
X-Dw-Trace-Id
X-DB-Content-Length
PServer
MageStack-Area
MageStack-Cache
MageStack-Cacheable
X-Shard
X-Appversion
Play-Detected-Device
MageStack-Cache-Hits
MageStack-Cache-Lifetime
Play-Detected-UserAgent
X-ProBase-Server
X-Layout
X-Cname-TryFiles
Viewport
X-Accel-Cache-Control
X-Debug-Message
X-SCProxy
X-Build-Id
X-Processed
X-M
X-LBPoolMember
X-HA
X-FastCGI-Cache-Status
X-Deity
X-Cache-Me-Harder
X-Served
X-Cache-LB
MageStack-Last-Modified
X-UA
X-Web-Node
MageStack-Cache-Warning
X-Czt
X-CH-Device
Prototype-RootPath
X-Tag-Playlist
X-Rack-CORS
X-This-Proto
MageStack-Cache-Lifetime-Sent
X-Server-Generated
SB-Site-Device
SB-Cache-Remaining
SB-Cache-Life
SB-Site-IE-VERSION
X-AMAZEEIO
X-Proxy-Server
X-Ms-Version
X-Enhanced-By
Page-Template
X-Generation-Time
X-D-Time
Progma
X-S-Misc
X-Envoy-Upstream-Service-Time
StatusCode
X-Origin-Date
X-Who
FastCGI-Cache
Response-Time
Purge-Cache-Tags
Hit-Count
Ssl-Proxy-Server
X-Mighty-Proxy
X-Vol-Mrp
X-Vol-Correlation
X-Varnish-Cache-Ttl
X-Upstream-Status
X-BServer
X-BPool-Back
X-Airee-Node
X-Dck
X-Powered-By-ADS
X-Upstream-Backend
X-SCM-Server-Number
End-User-Country
Backend-Powered-By
X-Tradeindia-SMgmt
X-Tradeindia-Request-GUID
X-Stiffia-Cache
Nitro-Cache
X-Avvio-Cms-Cacheload
X-Len
X-HP-CAM-COLOR
X-Front-Cache
X-Content-Type
Yola-ID
X-ZORequestID
X-Title
Amfplus-Ver
RSL-Trace-ID
X-BeResp-Ttl
X-Amzn-Remapped-Content-Length
X-MainProfileCategory
X-MainProfileID
X-GEO
X-Clx-Request
Requested-Host
X-MSU-SOURCE
X-Newrelic-Synthetics
X-VG-WebCache
X-SID
X-Trans-Id
X-Skip-Cache
X-MainProfileURL
X-MainProfileName
X-NewsFlow-Sitename
X-Compressed-By
X-Origin-Upstream-Status
X-Geo-IP
X-SSLTerm-Server
X-AISO-Server
X-UPServer
X-Sn-Servicetimems
X-Varnish-Cached
X-Varnish-Cached-TTL
CDN-PullZone
CDN-CachedAt
X-Ruby-Cluster-ID
X-MCF-ID
Request-Time
Og
X-B3-Spanid
X-B3-Traceid
X-Fpc
CDN-RequestId
CDN-Uid
Debug-Status
X-Nginx-Page-Cache
Expiries
ServerIP
X-Distil-CS
Session-From
X-Hit
X-AISO-Cacheable
Ctx
CommercePlatform-Version
OracleCommerceCloud-Sandiego
OracleCommerceCloud-Version
X-AISO-Cache
ModuleCacheType
Keywords
VAR-Cache
HSTS
X-Sorting-Hat-Expire-Cache
RM-Cache-Control
X-Brought-To-You-By
X-Backend-Host
X-UPSTREAM-Address
X-Netrix-ID
ProxiaInstanceId
NS-VaryByCustom-Key
X-Catalyst
X-Machine
X-Middleton-Pagespeed
X-Dynamic
X-Geo
X-Server-Hostname
X-AppServer-Cache-Rule
Content-Sn
DB-Nickname
Description
Webserver
UrlWatchModule-Time
X-Sid
X-Lb
X-VTEX-Cache-Status-Janus-Edge
DbServerName
Nd
X-Route
MachineName
NGX
ID
Plateforme
RSB-LINK
X-Beatles
Ttl
Hosted-By
Ews
X-Served-Server
X-InDy-Time
X-SV
X-Varnish-Cache-Control
Content-Generator
X-Boot
X-Cache-ID
GranicusServer
X-TLS-Version
Request-Filtered-By
X-Activity-Id
X-ASAP-Age
X-Amz-Meta-Version-Id
X-SSL
X-RunCloud-Cache
X-Custom-Header
X-CSRF-Token
X-From-Varnish
X-From-Varnish-Deploy
X-HEAD
X-InDy-Query
X-InDy-Memory
X-Cjtype
X-CD
X-Csrf-Token
X-Device-Item
X-Gate-Blk
X-Gate
X-ACCELERATE
Www.Aujourdhui.Com
X-Varnish-Grace
MwpReleaseVersion
ORIGIN-SERVER
ORIGIN-SITE
V-TTL
X-Nginx
X-Time-Microsecs
Actioncode
X-SiteDistrict-Cache
LB
Realaction
X-Grid-Server
X-Server-Response-Time
X-From-Cache
X-We-Are-Hiring
X-VC-Debug
X-Appmachine-CreatedOn
X-Appmachine-Duration
X-Appmachine-Name
X-Az