Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
X-AspNet-Version
Age
P3P
X-Pingback
Content-Language
Via
X-UA-Compatible
Expect-CT
Upgrade
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Cacheable
X-Varnish
X-Check
X-Language
X-Template
X-Xss-Protection
X-Request-Id
Alt-Svc
X-Generator
X-Buckets
X-Drupal-Cache
P3p
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Powered-By-Plesk
X-Download-Options
Content-Location
Host-Header
Referrer-Policy
X-Runtime
X-ShopId
MS-Author-Via
X-Sorting-Hat-ShopId-Cached
X-Dc
X-Sorting-Hat-ShopId
X-Sorting-Hat-PodId
X-Sorting-Hat-Section
X-Sorting-Hat-PodId-Cached
X-ShardId
X-Alternate-Cache-Key
X-UA-Device
X-Powered-CMS
X-IPLB-Instance
X-Served-By
Cartoon
X-Amz-Cf-Id
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
Access-Control-Allow-Methods
Status
X-Cache-Status
X-Via
X-Iinfo
X-Timer
X-Wix-Server-Artifact-Id
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Accel-Buffering
X-ServedBy
CF-Cache-Status
X-Ua-Compatible
X-Contextid
X-Backend
X-PC-Key
X-PC-Hit
Powered-By
X-Mod-Pagespeed
X-PC-AppVer
X-PC-Date
X-PC-Host
X-CST
Content-Encoding
X-WPE-Loopback-Upstream-Addr
X-DIS-Request-ID
X-Logged-In
Keep-Alive
X-CDN
X-Host
X-Rid
X-Cache-Hit
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Port
X-Server-Powered-By
X-Cache-Enabled
X-Tumblr-Pixel-1
X-Endurance-Cache-Level
X-Robots-Tag
X-Nginx-Cache-Status
X-Original-Date
X-Accel-Version
X-Server
X-Tumblr-Pixel-2
X-Seen-By
X-Wix-Request-Id
X-Sorting-Hat-PrivacyLevel
X-Drupal-Dynamic-Cache
X-Turbo-Charged-By
X-Page-Speed
X-Content-Powered-By
X-Pad
X-Wix-Punisher
X-Forwarded-For
X-Proxy-Cache
X-Content-Digest
X-AH-Environment
X-Forwarded-Proto
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-NewRelic-App-Data
WP-Super-Cache
X-Rack-Cache
X-Varnish-Cache
X-Tumblr-Pixel-3
X-LiteSpeed-Cache
Content-Security-Policy-Report-Only
Edge-Control
X-GitHub-Request-Id
X-SERVER
X-Request-Country
SPRequestGuid
X-SharePointHealthScore
X-MS-InvokeApp
X-XRDS-Location
X-Newrelic-App-Data
MicrosoftSharePointTeamServices
Timing-Allow-Origin
X-Cache-Lookup
X-Node
X-Cnection
X-FW-Hash
X-Amz-Request-Id
X-Amz-Id-2
X-Trace
Cf-Railgun
X-Died
X-FW-Serve
X-FW-Static
X-FW-Type
Charset
X-Webcom-Cache-Status
X-Content-Security-Policy
Request-Id
X-FullPageCaching
Edge-Cache-Tag
X-Webserver
X-HS-Cache-Config
X-HS-Content-Id
X-CF-Powered-By
X-Hits
Request-Context
X-PhApp
MicrosoftOfficeWebServer
SPIisLatency
SPRequestDuration
X-BC-Stapler
X-PHP-Backend
X-INKT-SITE
X-INKT-URI
Access-Control-Max-Age
Composed-By
X-Safe-Firewall
Grace
EagleId
X-Swift-CacheTime
X-Swift-SaveTime
Access-Control-Expose-Headers
Served-By
X-Spip-Cache
X-CDN-Pop
X-CDN-Pop-IP
X-Hyper-Cache
Liferay-Portal
X-VCache
X-Server-Name
X-Tumblr-Pixel-4
X-Backend-Server
X-HS-Combine-CSS
X-Dw-Request-Base-Id
X-Device
X-Fastly-Request-ID
X-Firenze-Processing-Times
X-Sorting-Hat-FeatureSet
X-Microcache
X-Request-ID
X-FB-Debug
X-RateLimit-Remaining
X-Clacks-Overhead
X-RateLimit-Limit
Rating
X-LiteSpeed-Cache-Control
Surrogate-Control
Content-Style-Type
X-RateLimit-Reset
Front-End-Https
X-Cloud-Trace-Context
X-Loop
X-TNCMS
X-Jimdo-Wid
Content-Script-Type
X-Jimdo-Instance
Xkey
X-Acc-Exp
Public-Key-Pins
X-DDC-Arch-Trace
X-ServerName
X-DNS-Prefetch-Control
X-User-Agent
Refresh
X-Vtex-Processado-Em
X-XN-XNHTML
X-XN-Trace-Token
X-Cache-Config
X-Middleton-Display
X-Sol
X-Middleton-Response
Response
Display
X-StackifyID
X-Frame-Option
Fpc-Cache-Id
X-Tumblr-Content-Rating
X-Age
X-Hostname
X-Generated-By
X-Cached
X-N-OperationId
X-Px
X-SS-Location
X-SS-Conf
X-WebKit-CSP
X-Dscp-Value
X-Zen-Fury
X-Tumblr-Pixel-5
X-Topify-Platform
Real-Hostname
X-HOST
X-Magento-Tags
TCN
X-MiniProfiler-Ids
X-Correlation-Id
X-URL
X-Request-Time
P-WS
P-LB
X-Amz-Version-Id
X-OneAgent-JS-Injection
X-CMS-Version
PageSpeed
X-Outils-CS
X-Kinsta-Cache
X-Handled-By
X-Whom
X-FORWARDED-FOR
X-Cached-By
X-B-Cache
X-Url
X-Content-Options
Rt-Fastcgi-Cache
X-Ruxit-JS-Agent
X-AspNetWebPages-Version
X-DynaTrace-JS-Agent
Access-Control-Request-Method
X-DynaTrace
ServedBy
X-Varnish-TTL
Product
Powered
Surrogate-Key
X-Msg-2-Log
X-Edge-Location
Imagetoolbar
X-CacheServer
Host
X-From
X-Varnish-Cache-Hits
X-Debug-Info
X-Upstream
X-LBLID
X-Cache-Rule
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Public-Key-Pins-Report-Only
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Cache-Status-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-Vtex-Remote-Cache
X-Accel-Expires
X-Vtex-Processed-At
No
Fhost
X-Engine
X-Signature
X-Umbraco-Version
X-Track
X-Goog-Hash
X-Returned-From-DLL
X-Original-Request
X-Passed-To
X-Actual-URL
X-Passed-To-DLL
Alternate-Protocol
X-Returned-From
X-Recruiting
X-Via-JSL
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Ttl
Edge-Control-Message
X-Varnish-Beresp-Status
X-Passed-To-BeforeDispatch
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Returned-From-PostProcessResponse
X-Stale
DynaTrace
X-Fastcgi-Cache
X-Platform
X-Application-Context
X-Location-Id
X-Response-Time
Arr-Disable-Session-Affinity
X-LW-Cache
X-Developer
X-Micro-Cache
X-Powered-By-VTEX-Janus-Edge
Retry-After
X-Loopia-Node
X-Cache-Info
Fastcgi-Cache
X-Version
X-Hosted-By
Dmn
Pagespeed
X-Instart-Request-ID
X-PERF
X-ApacheServer
X-Varnish-Host
Generator
X-Platform-Router
X-Magento-Cache-Debug
X-UD-Method
X-VARNISH-Cache
X-Platform-Processor
X-Supported-By
X-Rocket-Nginx-Bypass
X-URLSCHEME
X-NWS-LOG-UUID
HTTPS
X-Rnd
X-Platform-Cluster
X-Defender
X-Cache-Age
X-F-Cache
WZWS-RAY
X-TransIP-Balancer
X-Powered-By-360WZB
Ohc-File-Size
X-Shop-Id
X-I-Sp
X-BS
X-Litespeed-Cache
X-Device-Type
X-Microcachable
Origin
X-RESOURCE
X-TransIP-Backend
Last-Published
X-Source
X-Tumblr-Pixel-6
Content-Hash
X-HS-Content-Campaign-Id
X-Cache-TTL
X-Varnish-HitMiss
X-I
X-S
X-Varnish-Count
X-Server-ID
Fastly-Debug-Digest
Akamai-IP
X-Pantheon-Environment
X-Pantheon-Site
X-Front
X-Pantheon-Phpreq
Surrogate-Key-Raw
USPLoggingUUID
Cache-Provider
X-Shard
Version
X-Cdn
X-Cluster-Node
X-Storage
RTSS
X-App-Hosting
X-Director
X-Powered-By-VelaWeb
X-EdgeConnect-Origin-MEX-Latency
X-NetCat-Version
X-Cache-Operation
X-Platform-Server
X-Cache-Tags
X-ATG-Version
X-Dispatcher
X-Gamma-Serve
X-Art-Request-Id
X-Translation
X-Microcache-Status
X-CSRF-Protection
X-Varnish-GracePeriod
X-Varnish-ObjectSource
MIME-Version
X-Varnish-Seen-By
X-Page-Cache
X-Varnish-RemainingTTL
X-Varnish-RemainingLife
X-Hypernode
X-Matrix-Server
X-Matrix-Proxy
Cache-Key
X-Cache-Key
X-ORACLE-DMS-ECID
X-Content-Encoded-By
X-LB-Node
X-Flow-Powered
X-Platform-Cache
X-CJ-Soft
Allow
X-EdgeConnect-MidMile-RTT
X-Environment
Content-Disposition
X-Vcap-Request-Id
X-Expires-Orig
IBM-Web2-Location
X-Sapient
X-Server-Upstream
X-SSL-Cipher
X-Varnish-Age
X-Route-Server
X-ARC
Powered-By-ChinaCache
Pool
X-Revision
X-Ezoic-Cdn
X-LB
X-Cache-Namespace
X-Drupal-Cache-Tags
X-SSL-Protocol
X-Daa-Tunnel
X-Litespeed-Cache-Control
X-Firenze-Processing-Time
X-Ss-Location
X-Ss-Conf
X-Varnish-Cacheable
X-NoCache
X-Lambda-Id
X-Abgroup
X-Ttl
Wsr-Cache
Srv
Lsrequestid
X-SV-Edge
X-SV-Cacheable
SN
X-Grace
X-SV-Pid
X-SV-Nginx-Duration
X-SV-FromDBCache
X-SV-Expires
X-SV-CacheTags
X-SV-CreatedAt
X-SV-Duration
SSPAppContext
X-Github-Request-Id
Section-Io-Id
Pv
X-Edge-IP
X-Duration
X-Cache-Debug
Content-MD5
FAI-W-FLOW
Accept-Encoding
X-Magento-Cache-Control
X-Dispatch
X-Cache-Expires
X-Varnish-Backend
PICS-Label
X-Amz-Meta-S3cmd-Attrs
Cneonction
Location
Backend
X-Cache-Lifetime
Content-Encoding-Handler
X-Cache-Only-Varnish
X-IsCacheURL
X-Drupal-Cache-Contexts
X-Generated
X-Client-IP
X-Vhost
ServerID
X-GeoIP-Country-Code
X-Hiawatha-Cache
X-Nginx-Cache
Fw-Via
Req-Id
X-Cache-Control-Orig
X-Last-Modified
X-Time
S-Cnection
X-N
X-PwB-Node
X-Server-Id
Node
X-Content-Age
X-Cache-Engine
X-RequestId
X-Url-Base
X-AOL-HN
X-Cache-Level
X-Varnish-Ttl
X-Proxy
X-Varnish-Url
X-Varnish-IP
X-SDS
X-Pressidium-NinukisWP-Ver
Nodo
X-Debug
X-ID
X-Fastly-Request-Id
X-Yadis-Location
X-Worker
Page-Completion-Status
X-Speed-Cache-Key
X-Speed-Cache
X-Cache-Type
X-Cache-Server
X-TTL
X-Goog-Storage-Class
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Stored-Content-Encoding
Proxy-Connection
ServerName
If-Modified-Since
X-ORACLE-DMS-RID
X-Location
X-GUploader-UploadID
X-Goog-Stored-Content-Length
X-GeoIP-Country-Name
X-Akamai-Transformed
X-Country-Code
X-Cookie-Domain
IM-Version
X-Akamai-Device-Model
Server-Info
X-Akamai-Device-Characteristics
X-BKSrc
AMF-Ver
X-Magnolia-Registration
X-UPSTREAM
X-Cache-CFC
X-SRCache-Key
X-Discourse-Route
X-Oneagent-Js-Injection
X-Geo-Country
Server-Name
X-ServerID
X-Srv
X-Nbs
X-Dynatrace-Js-Agent
X-Cache-Control
X-Esi
X-Middleware-Start
X-Empowered-By
X-Purge-URL
X-Always-Cache
Accept-Charset
Use-Proxy
Server-Timing
X-SO
X-Browser
NnCoection
X-Pagename
X-Cache-Handler
X-Runtime-Rack
X-Cache-Device-Type
X-Purge-Host
Cached
X-Correlation-ID
X-Frontend
Cm-Server
X-Hit-Cache
Nitro-Cache
X-FW
Xc-Version
X-Config-Blacklist-Version
X-Real-Server
X-Amz-Storage-Class
X-App-Server
X-Cache-Fix
X-VARITI-CCR
X-High-Performance
X-PF-Uncompressing
X-Origin
MJ12bot
X-Cache-PageType
SEOMOZ
HCVer
X-CF-Passed-Proto
HAVer
X-Varnish-Retries
Qs-Cache
Pf.Web.Request.Id
X-Processing-Time
X-Framework
Cteonnt-Length
X-CDN-Forward
S
Cache
X-Content-Type-Option
X-BackendServer
X-DealerOn
X-Unbounce-VisitorID
X-Unbounce-Variant
X-Rocket-Nginx-Serving-Static
X-Server-Instance
X-Unbounce-PageId
Front
Cache-Tag
Environment
Local-Info
X-OpenCart-Lightning
Custom-Header
X-Id
X-Sentry-ID
Content-Transfer-Encoding
X-Sucuri-ID
X-AF-Userserver
Tracecode
X-Abuse
X-WPL-DATA
Author
X-Shield-Request-Id
P-ID
X-Ruxit-Js-Agent
MC
Frame-Options
X-JG-Page-Cache
X-Mobilized-By
X-App-Status
X-ACMCache
X-Rq
X-WA-Info
Cache-Tags
X-FTR-Request-ID
W
WN
X-Xrds-Location
X-Dns-Prefetch-Control
X-Varnish-Hits
X-Env
NODE
X-Session-ID
X-Connection-Hash
X-Transaction
A-Powered-By
X-Client-Vid
X-Client-Image-Vid
CacheControlHeader
X-EPiphany-Vid
X-Twitter-Response-Tags
X-WN-ClientGroup
X-HTML-Minification-Powered-By
X-Cache-Doesi
X-Adobe-Loc
X-Adobe-Content
Thanks
WWW-Authenticate
SRV
X-Processed-By
X-VTEX-Cache-Status-Janus-Edge
SiteSpeed
NetMindSessionID
X-WR-Flags
X-Fedora-School-Id
X-Resource
X-SmugMug-Hiring
Content_type
ServerSignature
X-Cache-Dispatchercachecontrol
X-Cache-Dispatcherpragma
X-Resty-Request-Id
Ufe-Result
Eomportal-Instance
X-VC-Enabled
X-Server-IP
X-Varnish-Hostname
X-Generated-Time
X-SmugMug-Values
X-TTFB
Smug-CDN
X-Gateway-Cache-Key
X-Gateway-Cache-Status
ServerTokens
X-Gateway-Skip-Cache
X-TTFB-L
X-Orig-Vary
X-Stage
X-SRV
X-Sys-Req-ID
X-Page
X-Trace-Id
X-Content-Security-Policy-Report-Only
X-NB-Cached-Page
X-Route-To
X-Traffic
X-Runtime-Memory
Contao-Page-Layout
EagleEye-TraceId
NtCoent-Length
X-ClientSide-Caching
Magicmarker
X-DEBUG
X-LB-Server
Machine
Identity
X-Sucuri-Cache
X-AEM
X-A
X-ServerIndex
X-ASAP-Cache
Max-Age
SVR
SHInfo
X-CAPServer
Adm-Server
Web-App-Origin-Name
X-Drectory-Script
Proxy-Agent
BALANCEDTO
Service-Worker-Allowed
X-Yottaa-Metrics
X-Clara-ASAP
X-Yottaa-Optimizations
X-HW
X-Compress-Hint
X-VC-TTL
Noq
Ramp
X-Jphone-Copyright
Id
X-Backend-Status
Ram
X-Avg-Cookie-Expires
X-Akamai-Edgescape
X-Directory-Script
X-Sorting-Hat-Expire-Cache
X-AVG-Country-Code
VANITY-HOST
X-Redman-Backend
X-Redman-Final-Url
X-Force
SBGI-7
X-VNode
SBGI-5
SBGI-10
Description
X-Disney-Akamai-Rule
X-Webstats-RespID
Play-Detected-UserAgent
X-Highwire-SessionId
Play-Detected-Device
X-Highwire-RequestId
X-PRAM
SBGI-1
Cmstype
X-HydroSheep
X-LP
MW-Webserver
IISExport
Keywords
X-Garden-Version
X-Varnish-Id
Server-ID
X-CB-Server
X-Application
X-ARRServer
Cmsid
X-RiS-UFDI
X-Unique-ID
SBGI-RenderTime
SBGI-RealPath
X-Webkit-CSP
X-Sites
X-SmartBan-URL
X-IIJ-Cache
Pics-Label
X-Info
X-SmartBan-Host
SBGI-Device
X-RealServer
SBGI-9
X-Resolver-IP
Beyond-Iis
Dispatcher
X-Symfony-Cache
X-Akamai-3PM-SW-Version
Url
Yoncu-Errno
X-LW-Web-Server
From-Origin
X-Vcache
X-Magento-Action
X-Airee-Node
X-WP
X-Smartcache-Keys
X-Domain-Checked
X-Smartcache-Timeout
X-Omnis-SiteID
X-E
Dis-Env
X-Acquia-Debug-Password
X-Varnish-Debug-Age
X-Plat
X-Cache-Via
X-Real-IP
X-Provisioner-Version
X-Request-Uri
X-DTC
Og
X-Varnish-Debug-TTL
X-GeoIP
X-Varnish-Server
X-CACHE-TTL
X-4ormat-Cacheable
X-Cache-Node
X-Analytics
X-FireWall-Port
X-Cocoon-Version
X-Key
ScoreTracker
X-Src-Webcache
VServer
X-Balanceador
X-Secret
XDomainRequestAllowed
Fastly-Backend-Name
RequestId
X-Debug-Token
X-Goog-Meta-Goog-Reserved-File-Mtime
X-DataDome
X-TB-M
X-Varnish-ID
X-Machine
Home
RN-Server
X-Culture
X-Detected-Device
X-Serv
X-Remote-Addr
Backend-Timing
AsisCache
X-WebKit-CSP-Report-Only
X-Hosting-Env
X-SDE-Name
SS
X-Avvio-Cms-Cacheload
X-GoCache-CacheStatus
Web
Bios
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
X-Atraveo-Param-Rm
X-Atraveo-Set-Cookie
X-Atraveo-TTL
X-Atraveo-Cache-Control
X-Origin-Server
COMMERCE-SERVER-SOFTWARE
WP-AdvCache-MemCached
X-Bip
AC-ELC
X-Source-ID
X-Atraveo-Varnish-Server-Id
X-Atraveo-ETag
Nginx-Cache
X-Proto
X-NginX-Server
X-Atraveo-Zone
X-SV
Access-Control-Allow-Method
Actual-Object-TTL
X-Viator-Tapersistentcookie
Paypal-Debug-Id
X-LDNR-NOT-ROOT-HL-NOTSET
X-Wikidot-Backend
Ctx
X-Wikidot-Static-Cache
X-Adnet
X-Rebelmouse-Surrogate-Control
X-Runtime-Affili
X-Amz-Meta-Cb-Modifiedtime
X-Rebelmouse-Cache-Control
X-Response
X-WHOIS-Cached
Ec-CorrId
X-Desc
X-Amz-Meta-Content-Md5
X-ACCELERATE
X-L-Path
X-GSL-Server
X-Depends
X-Zendesk-Origin-Server
X-Environment-Context
X-Pubstack
X-FPC
X-Proxy-Cache-Key
X-Zendesk-User-Id
X-Rewrite
X-Redirector
Disablevcache
Ec-Machine
X-Refresh
X-Confluence-Request-Time
X-Hosting
X-Fstrz
X-Distributor
Hname
X-Flex-Lang
X-Aramark-SID
X-AutoRu-App-Id
X-Autoru-Host
X-OPNET-Transaction-Trace
X-Rack-CORS
AMP-Access-Control-Allow-Source-Origin
X-Amz-Meta-S3b-Last-Modified
Ibf5scheme
X-Cache-On
N365rili
X-HashTwo
X-Autoru-LB
X-Frames-Options
X-Varnish-Cache-Local
Gzip
ClientIP
X-DB-Content-Length
X-Cluster
X-B2f-Not-Route
SG
Traffic-Origin
OriginServer
Proxy-Cache
X-CRA-DC
X-Flex-Tag
X-Flex-Tags
X-Compressed-By
X-App-Runtime
X-Data-Request
X-Flex-Lastmod
X-Flex-Community
X-Flex-Evend
X-Flex-Evstart
F5-IpCliente
X-Map-Context
X-Nginx-Host
Access-Control-Allow-Header
X-RDP
X-Forwarded-Host
Il-Cl
X-Amcomm-Site
X-Time-Microsecs
X-Req-Head-Response
X-Search-Id
X-Session-Reinit
X-MAT-GEO
Myheader
Hostname
X-CacheResult
From
SERVER-ID
MachineName
SB-Cache-Life
X-ASAP-Age
SB-Site-Device
SB-Cache-Remaining
X-MCB-Server
X-Dev
X-Mobile-URL
X-HP-Trace-Project
X-HP-Trace-ID
Device
X-Cdn-Forward
Worker
X-Dw-Trace-Id
X-Origin-Cache
X-ReqId
X-Cms-Mode
NLCacheNote
X-Timestamp
X-Cf-Powered-By
X-ESI
X-Lb
NZSpeedy
X-SERVER-NAME
Hummingbird-Cache
VC-NoCache
CLMOB
X-Nginx-Request-Processing-Time
X-Distil-CS
X-Batcache
X-EC2-Instance-Id
X-Author
X-Magento-Lifetime
X-Akam-SW-Version
X-AMAZEEIO
Strikingly-Cached-Version
Strikingly-Cached
X-NID
X-FORWARDED-PROTO
Aoestatic
Strikingly-Cache-Region
X-Cache-Varnish
HitType
X-SH-Cache-Status
X-KoobooCMS-Version
TP-L2-Cache
Accept-Language
TP-Cache
X-V
X-Gyrobase-Publication
Copyright
X-HS-Status
CommercePlatform-Version
X-Rack-Cors
Content-Generator
BackendServer
X-Header
Ez
X-DSMX-Rewrite-MS
X-LBPoolMember
X-Highwire-Sitecode
X-Amz-Id-1
OracleCommerceCloud-Version
OracleCommerceCloud-Sandiego
X-DSMX-Render-MS
X-DN-Cache-Control
X-Ghost-Cache-Status
X-Highwire-Smart-Code
Cleartype
X-Goog-Meta-Policy
X-IP
Ews
X-Cache-Time
X-Goog-Meta-Replace
X-App
PServer
X-Powered-By-Home.Pl
Xc
X-PM-ID
X-Varnish-Action
X-Served-Server
NS-VaryByCustom-Key
X-Tag-Playlist
X-NginX-Cache
PagesDisplayed
Ohc-Response-Time
X-DynamicCache
Upgrade-Insecure-Requests
Provider
X-Server-Addr
X-Gannett-Site-Version
X-UnsetCookies
Page-Template
X-FG-RequestId
X-Artvisual-Server
X-Node-Name
X-PHP-Response-Code
TC-Cache-IC
X-Webcelerate
X-ZSITES-DNS
TC-S-Cache
TC-Cache-U
TC-Cache
TC-S-Cache-M
SB-Site-IE-VERSION
Accept-CH
X-Grid-Server
X-Render-Time
Server-Id
X-NodeID
X-Captured
Lb
X-Cache-TTL-Current
X-Cache-TTL-Age
X-SilverStripe-Cache
X-Enhanced-By
X-DS1D
X-Pj-Cache-Status
X-Dealeron-Backend
X-HP-CAM-COLOR
X-Reflector
X-Dealeron-Original-Url
X-Reflector-Cache
X-Cache-Detail
X-HAProxy
X-Pagely-Cache
Ttl
X-Rewritten-By
X-Batcache-Reason
X-ManagedFusion-Rewriter-Version
X-RiS-PX
AR-SID
AR-PoweredBy
CommunityServer
WSCLoggingUUID
X-Middleton-Pagespeed
X-Meta-Imagetoolbar
X-Meta-MSThemeCompatible
X-Instance-Id
X-Nginx-Request-Time
X-Meta-MSSmartTagsPreventParsing
ProxiaInstanceId
Session-Id
X-OCTOPOD
X-Instance
X-T
X-I-V
X-HeBS-Cache-Status
X-Instart-Cache-Id
X-M-P
X-M-V
X-M-T
X-CacheID
X-FIRSTBase
X-Locale
X-CH-Device
Hamster
X-CDN-RULE
DeleGate-Ver
X-CDN-COMPRESS
X-Mw-Workerstats
X-Pageid
X-RemovedCookies
X-Transaction-Name
Y-Trace
Z-Tpl
X-ProcessESI
AR-ATIME
X-UPSTREAM-Address
X-RequesterIP
X-RAMCache
X-Q-S
ID
X-S-C
X-S-V
TZ-Server
AR-CACHE
X-ETag
X-Phpwcms-Page-Processed-In
X-ServiceProvider
X-MidCOM-Meta-Cache
X-S-Misc
X-Phpwcms-Release
X-REDIRECTSERVER
X-Nitro-Cache
X-Hash
X-Streams-Distribution
EN-User
Server-Ip
Cache-Status
XX
X-DDM-SERVER-UPDATED
X-Cachable
X-Generation-Time
X-D-Time
X-SuperCache
No-Cache
Kanooh-Host
Content-Cache
X-Via-NSCOPI
X-VG-WebCache
X-Sid
Progma
X-Config-By
X-Country
X-Cache-TTL-Remaining
X-AppServer-Cache-Rule
X-SE-Debug
UrlWatchModule-Time
X-DDM-SERVER
X-Client-Ip
X-Agent
X-Protected-By
X-Cache-Me-Harder
X-Container
X-Built-With
X-Catalyst
Tk
Resin-Trace
MSSmartTagsPreventParsing
MSThemeCompatible
X-WebNode
Fastly-Restarts
X-Proxy-Skip
FRONT-END-SECUREBROWSER
X-Bcwwwid
X-Hrouter
Swift-Performance
Requested-Host
X-7d-Instance-Id
X-7d-Trace-Id
X-Box
X-Backend-Host
FindLaw
X-Obvious-Tid
X-MainProfileCategory
X-Hstore
X-MainProfileID
X-MainProfileName
X-Obvious-Info
X-MainProfileURL
StatusCode
X-Pool-Info
X-Svr
X-Route
Control-Cache
EQ-Cache
HostName
GranicusServer
X-Full-Url
X-Custom-Header
CpuTime
Cacheid
User-Agent
X-ACLR-Version
X-Cache-Original-TTL
X-Cache-Id
RSB-LINK
X-Apm-Telemetry-Syncmark
X-Debug-Token-Link
X-CSRF-Token
X-Deity
X-Domino-CacheValidationWithETagReason
X-HEAD
X-Domino-CacheValidationWithETagResult
X-Cname-TryFiles
X-CloudBurst-WordPress
X-Cache-ID
X-Beatles
X-CloudBurst-Backend
X-CloudBurst-Cache
X-CloudBurst-Frontend
X-W3TC-Minify
X-VC-Hash
X-BPool
X-Blog
X-BPool-Back
X-BPool-Bx-Cache
X-BServer
X-BPool-Fx-Cache
X-Status
TheAnswer
X-Varnish-Grace
X-SCM-Server-Number
X-Who
DrivedBy
Language
X-NO-BREACH
X-Cacheable-TTL
X-Cjtype
X-Title
Container
X-Turpentine-Esi
X-Beresp-Ttl
X-VC-Debug
X-VC-Cacheable
Debug-Status
X-Static
X-PBY
X-PROCESSED-BY
X-Layout
MwpReleaseVersion
X-Pass-Through
X-Header-Treatment
X-VC-Cache
MageStack-Cache-Lifetime
X-UT-Cache
X-Amz-Meta-Version-Id
X-AppVersion
X-Az
Viewport
X-B
MageStack-Cache-Warning
ViewMode
X-Made-On
MageStack-Cache-Status
MageStack-Cache-Hits
X-Debug-Message
X-Serverid
MageStack-Area
X-UA
Key
Amfplus-Ver
X-Middleton-PageSpeed
Provided-Host
X-FastCGI-Cache-Status
X-HA
X-JSESSIONID
MageStack-Cache
Tesla.Performance
X-Activity-Id
Generate-Time
X-Served
MageStack-PageSpeed
MageStack-Debug
MageStack-Config
MS-CV
MageStack-Tag
MageStack-Loadbalancer
MageStack-Cacheable
MageStack-Web-Node
MageStack-Magento-Version
CACHE
X-Pixelsilk-Version
X-WHO
X-Pixelsilk-Server
FastCGI-Cache
X-AISO-Cache
X-Cache-Extended
X-AISO-Cacheable
X-AISO-Server
SINA-TS
X-M
X-Backend-Name
X-ClusterID
X-Reason-Bp
X-Gateway-Rate-Limit-Conn
X-Gateway-Rate-Limit-Delayed
SINA-LB
X-Restarts
V-Age
X-Prerendered
X-MSEdge-Ref
Note
X-NMT-Proxy
X-Site
X-Ants-Machine-Id
CDCHOST
X-Theme
X-Test-Debug
X-Varnish-Cache-Ttl
TestCC
X-ACache
X-XHTML-Minification-Powered-By
X-Ants-Host
X-Fastly-Backend-Reqs
Edgecast
X-Old-Content-Length
X-NewsFlow-Sitename
X-Server-Hostname
Amp-Access-Control-Allow-Source-Origin
X-BackendProxy
X-MCF-ID
X-Proxy-Id
Webserver
X-Request-Received
CD4
DbServerName
Rewriter
X-Script
X-ServerAddr
X-Cache-Why
X-FW-Server
X-SATserver
X-Server-Generated
TTL
X-Instance-Name
X-UPServer
X-Varnish-Cached
X-Varnish-Cached-TTL
Httpd-Identifier
X-CACHE-KEY
X-Skip-Cache
X-Cache-FS-Status
X-Secure
X-Healthy
X-MyName
ReqUrl
Powered-By-115
X-Varnish-Debug-Hits
Request-Filtered-By
X-Proxy-Backend
Referer
X-Dynamic-Cache
X-PBS-Appsvrip
X-Svr-Proxy
X-Ssl-Cipher
X-Session-Id
X-Geo-IP
X-SSLUpstream
X-SSLProxy
X-PBS-Appsvrname
X-PBS-Fwsrvname
X-Prerender-Token
X-Origin-Date
X-Cache-Bypass
X-ENV
X-MSU-SOURCE
Be
X-DeliveryServer
X-DEBUG-TTL
X-Clx-Request
Redirect-Reason
X-DEBUG-HOST
X-PoweredBy
X-Cache-ASPX
X-BIT-Node
X-Mobile-Rewrite
Arrnode
Apple-Itunes-App
X-Built-By
X-Cache-LB
X-Tt-Dbg
X-Upgrade-Enabled
Warning
X-Ao-Cache-Key
X-Would-Your-GrandPa-Wait
X-Your-GrandPa-Would-Wait
X-K8s
X-TTL-Age
X-TLS-Version
VAR-Cache
X-Does-He-Have-Time
X-DevSrv-CMS
Arrow-RequestId
X-Olaf
User-Cache-Control
PB-PID
PB-RID
X-Beatles-Hits
X-Cache-Set
X-Upstream-Status
Access-Control-Request-Headers
X-Processed
X-Say-Cacheable
X-CO-Host
X-CPU-Time
X-Hit
X-Request-Processing-Time
Serverid
Countrycode
Head
Response-Time
X-Nginx-Page-Cache
X-Node-App
Session-From
WP-FROM-CACHE
Www.Aujourdhui.Com
ServerIP
Expiries
X-SH-Cache-Disabled
X-Unique-Id
CS-SERVER
CmsfirstPublishTimestamp
Returned-Status
X-Test
X-Member
X-This-Proto
X-ELB
X-SCProxy
X-Cache-Keep
X-Say-TTL
X-SayCDN-TTL
X-PG
X-Server-FQDN
X-VLoc
X-XHR-Current-Location
Xcache
X-Varnish-Instance
X-Time-Zone
X-Optimization
X-Max-Age
V-TTL