Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - SANS Internet Storm Center HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
X-Cache
Age
Content-Language
X-AspNet-Version
P3P
X-Pingback
Expect-CT
X-UA-Compatible
Via
Upgrade
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Adblock-Key
X-Request-Id
Referrer-Policy
X-Varnish
X-Xss-Protection
X-Check
X-Generator
X-Language
X-Template
X-Buckets
X-Drupal-Cache
P3p
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
Alt-Svc
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-Hacker
X-Ac
X-AspNetMvc-Version
X-Cache-Hits
Host-Header
X-Sorting-Hat-Section
X-Dc
X-Alternate-Cache-Key
X-Accel-Buffering
X-Wix-Server-Artifact-Id
X-ShopId
X-Sorting-Hat-ShopId
X-ShardId
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId-Cached
X-Powered-By-Plesk
X-Runtime
X-Served-By
MS-Author-Via
X-Via
Content-Location
X-Amz-Cf-Id
X-Powered-CMS
X-IPLB-Instance
Access-Control-Allow-Headers
X-Contextid
Access-Control-Allow-Methods
X-ServedBy
X-PC-Hit
X-PC-Key
X-UA-Device
Cartoon
Status
X-Timer
X-PC-Host
X-PC-AppVer
X-PC-Date
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
Access-Control-Allow-Credentials
CF-Cache-Status
X-Iinfo
X-NewRelic-App-Data
X-Rid
X-Tumblr-Pixel-0
X-Tumblr-User
X-Tumblr-Pixel
X-Seen-By
X-Wix-Request-Id
X-Backend
X-WPE-Loopback-Upstream-Addr
X-Tumblr-Pixel-1
Powered-By
X-Host
X-Mod-Pagespeed
X-Cache-Status
Content-Encoding
X-CST
X-Endurance-Cache-Level
X-Tumblr-Pixel-2
X-Cache-Enabled
X-Server
X-Cache-Hit
X-Port
X-Logged-In
X-CDN
Keep-Alive
X-DIS-Request-ID
X-Server-Powered-By
X-Drupal-Dynamic-Cache
X-Nginx-Cache-Status
X-Accel-Version
X-Robots-Tag
X-Tumblr-Pixel-3
Server-Timing
X-Turbo-Charged-By
X-Proxy-Cache
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Page-Speed
X-Request-ID
X-Content-Digest
X-Content-Powered-By
X-LiteSpeed-Cache
X-GitHub-Request-Id
X-AH-Environment
Content-Security-Policy-Report-Only
X-Rack-Cache
X-Pad
X-ASPNET-VERSION
X-Varnish-Cache
Edge-Control
X-FW-Hash
X-FW-Server
Request-Context
X-Request-Country
X-FW-Static
X-FW-Type
X-FW-Serve
X-XRDS-Location
SPRequestGuid
X-MS-InvokeApp
X-SharePointHealthScore
WP-Super-Cache
X-Hits
MicrosoftSharePointTeamServices
X-Trace
X-Node
Timing-Allow-Origin
X-Webcom-Cache-Status
Cf-Railgun
X-BC-Stapler
X-Tumblr-Pixel-4
Edge-Cache-Tag
X-Cache-Lookup
X-HS-Cache-Config
Access-Control-Expose-Headers
X-Amz-Request-Id
X-Amz-Id-2
X-Content-Security-Policy
X-HS-Content-Id
X-Ua-Compatible
Charset
X-Webserver
X-Died
X-FullPageCaching
X-Newrelic-App-Data
X-PhApp
X-CF-Powered-By
X-Cnection
X-HS-Combine-CSS
X-PHP-Backend
Request-Id
X-INKT-URI
X-INKT-SITE
Access-Control-Max-Age
X-Fastly-Request-ID
SPIisLatency
SPRequestDuration
X-Backend-Server
EagleId
Composed-By
MicrosoftOfficeWebServer
X-Swift-CacheTime
X-Swift-SaveTime
X-CDN-Pop
X-CDN-Pop-IP
Grace
X-SS-Conf
X-SS-Location
Served-By
X-Spip-Cache
X-Safe-Firewall
X-Device
Liferay-Portal
X-SERVER
X-Dw-Request-Base-Id
X-Server-Name
Rating
X-Hyper-Cache
X-Edge-Cache
X-Edge-Cache-Key
Front-End-Https
X-NF-Request-ID
X-VCache
X-DDC-Arch-Trace
X-Tumblr-Pixel-5
Surrogate-Control
X-Cloud-Trace-Context
X-Microcache
X-Cluster-Node
X-FB-Debug
X-LiteSpeed-Cache-Control
X-RateLimit-Remaining
X-Clacks-Overhead
X-RateLimit-Limit
X-Wix-Punisher
X-Do-Not-Hack
X-HeyJason
Permitted-Cross-Domain-Policies
X-Tumblr-Content-Rating
X-RateLimit-Reset
X-TNCMS
X-Loop
X-Jimdo-Instance
X-Jimdo-Wid
X-StackifyID
Content-Style-Type
X-Acc-Exp
Content-Script-Type
X-Firenze-Processing-Times
X-OneAgent-JS-Injection
X-DNS-Prefetch-Control
Display
X-Middleton-Display
X-Sol
Response
X-Middleton-Response
X-Vtex-Processado-Em
Refresh
Public-Key-Pins
P-LB
P-WS
X-Debug-Info
X-Age
X-Kinsta-Cache
X-Original-Date
X-WebKit-CSP
X-Magento-Tags
X-Px
X-User-Agent
Fpc-Cache-Id
X-Cached
X-XN-Trace-Token
X-XN-XNHTML
X-Amz-Version-Id
Xkey
X-Cache-Config
X-Ruxit-JS-Agent
X-Goog-Hash
X-N-OperationId
X-Generated-By
X-Hostname
PageSpeed
X-Shopid
X-Sorting-Hat-Podid-Cached
X-Sorting-Hat-Privacylevel
X-Sorting-Hat-Shopid
X-Sorting-Hat-Shopid-Cached
X-Shardid
X-Sorting-Hat-Featureset
X-Sorting-Hat-Podid
X-Zen-Fury
Retry-After
X-Topify-Platform
X-Frame-Option
X-DynaTrace-JS-Agent
Rt-Fastcgi-Cache
X-LW-Cache
X-Loopia-Node
X-Tumblr-Pixel-6
X-MiniProfiler-Ids
X-Url
X-Handled-By
X-B-Cache
X-From
TCN
X-Edge-Location
X-URL
X-CMS-Version
X-Outils-CS
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Storage-Class
X-Goog-Stored-Content-Encoding
Feature-Policy
Edge-Control-Message
X-Whom
X-Request-Time
Access-Control-Request-Method
Fastcgi-Cache
X-Platform-Processor
X-Platform-Cluster
X-Platform-Router
X-Upstream
X-Cached-By
X-Varnish-TTL
X-Servedby
X-EdgeConnect-Origin-MEX-Latency
Powered
X-Source
X-AspNetWebPages-Version
X-Engine
X-Version
X-Accel-Expires
X-FORWARDED-FOR
Public-Key-Pins-Report-Only
X-EdgeConnect-MidMile-RTT
X-Content-Options
ServedBy
X-Varnish-Host
X-DynaTrace
Imagetoolbar
X-Varnish-Cache-Hits
X-VTEX-Janus-Router-Backend-App
X-VTEX-Cache-Status-Janus-ApiCache
X-Powered-By-VTEX-Janus-ApiCache
No
Product
Last-Published
X-Vtex-Remote-Cache
X-Vtex-Processed-At
X-CacheServer
X-Response-Time
X-SRCache-Store-Status
X-SRCache-Fetch-Status
X-Cdn
X-Location-Id
X-Recruiting
X-Magento-Cache-Debug
Allow
X-NWS-LOG-UUID
X-Msg-2-Log
Fhost
X-URLSCHEME
X-Signature
X-RESOURCE
X-LBLID
X-Application-Context
X-Developer
X-Umbraco-Version
X-Forwarded-For
DynaTrace
X-Actual-URL
Warning
X-Cache-Rule
X-Returned-From-DLL
X-Passed-To-DLL
Host
X-Returned-From
X-Cache-Info
X-Passed-To
X-Original-Request
X-ApacheServer
X-PERF
X-Correlation-Id
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
Arr-Disable-Session-Affinity
X-Varnish-Beresp-Ttl
X-Varnish-Count
X-Microcachable
X-Stale
X-Varnish-HitMiss
X-Powered-By-360WZB
X-Passed-To-PostProcessResponse
X-UD-Method
X-F-Cache
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Device-Type
X-ET-API-ROOT
X-ET-API-VERSION
X-ET-API-ORIGIN
X-Fastcgi-Cache
Generator
X-Rnd
X-Platform-Cache
X-Shop-Id
X-Platform-Server
X-Defender
X-S
Origin
X-Cache-Key
X-Platform
Alternate-Protocol
X-Gateway-Cache-Key
X-Gateway-Cache-Status
X-Gateway-Skip-Cache
X-HS-Content-Campaign-Id
X-Guploader-Uploadid
WZWS-RAY
X-Via-JSL
Content-Hash
X-Micro-Cache
X-Supported-By
X-TransIP-Balancer
Pagespeed
Dmn
Surrogate-Key
X-Ezoic-Cdn
X-Cache-Tags
X-App-Status
Version
X-Instart-Request-ID
X-Cache-Namespace
X-Hosted-By
X-Dns-Prefetch-Control
X-TransIP-Backend
X-Environment
X-HOST
USPLoggingUUID
X-Duration
X-I-Sp
X-Translation
X-BS
X-Microcache-Status
X-SO
X-Cache-Age
X-Dispatcher
X-Director
Cache-Provider
X-Correlation-ID
X-LB-Node
X-Lambda-Id
X-Expires-Orig
X-Sapient
X-Ttl
X-Powered-By-VelaWeb
X-Akam-SW-Version
RTSS
Content-Disposition
X-Art-Request-Id
X-Varnish-RemainingLife
X-Varnish-Seen-By
X-Magento-Cache-Control
X-Varnish-RemainingTTL
MIME-Version
X-Varnish-GracePeriod
X-Varnish-ObjectSource
X-Server-ID
X-Daa-Tunnel
X-CSRF-Protection
X-SSL-Cipher
X-Cache-Control-Orig
X-Server-Upstream
X-Track
Cache-Key
S-Cnection
Pool
X-SSL-Protocol
X-Front
X-Abgroup
X-I
X-Matrix-Server
X-Matrix-Proxy
X-Hypernode
X-Last-Modified
Wsr-Cache
X-ORACLE-DMS-ECID
X-App-Hosting
X-Vcap-Request-Id
X-Debug
X-Drupal-Cache-Tags
X-Cache-Debug
X-NoCache
X-Edge-IP
X-Rocket-Nginx-Bypass
X-GUploader-UploadID
X-Powered-By-VTEX-Janus-Edge
X-Gamma-Serve
X-Route-Server
X-Rocket-Nginx-Serving-Static
X-Cache-TTL
X-Page-Cache
Cneonction
X-NetCat-Version
X-Forwarded-Proto
SN
X-Storage
X-Server-Id
Akamai-IP
Powered-By-ChinaCache
X-Flow-Powered
X-Varnish-Cacheable
SSPAppContext
X-Cf-Powered-By
X-Dealeron-Backend
X-Cache-Lifetime
If-Modified-Since
X-Magnolia-Registration
X-DealerOn
X-Litespeed-Cache
X-Dealeron-Original-Url
Node
X-Hiawatha-Cache
X-Revision
X-Grace
X-Cache-Level
X-Country-Code
X-Pressidium-NinukisWP-Ver
X-Client-IP
X-Drupal-Cache-Contexts
FAI-W-FLOW
X-ATG-Version
X-SV-Cacheable
X-SV-CacheTags
X-SV-Duration
ServerID
X-SV-Expires
X-SV-Edge
X-SV-CreatedAt
Accept-Encoding
X-Generated
X-Url-Base
X-VARITI-CCR
X-SV-Pid
X-SV-FromDBCache
X-SV-Nginx-Duration
X-Cache-Engine
X-Cache-Handler
X-SDS
X-CJ-Soft
X-SSLProxy
X-ARC
X-SSLUpstream
PICS-Label
X-ServerName
X-Cache-Type
X-PwB-Node
Src-Update
X-Firenze-Processing-Time
X-Cache-Operation
X-LB
Update-Time
X-Cache-Server
X-Pantheon-Phpreq
X-UPSTREAM
Backend
X-Content-Encoded-By
X-Pantheon-Site
X-Geo-Country
Surrogate-Key-Raw
X-Pantheon-Environment
Contao-Page-Layout
X-Vhost
X-ServerID
X-IsCacheURL
Req-Id
AMF-Ver
X-Sucuri-ID
X-Discourse-Route
X-Amz-Meta-S3cmd-Attrs
X-Varnish-Backend
X-Varnish-Url
X-Cache-Expires
Lsrequestid
X-Litespeed-Cache-Control
X-Svr-Proxy
X-GeoIP-Country-Code
Nodo
X-SVR-IIS
Author
X-Esi
ServerName
X-N
Page-Completion-Status
X-Processing-Time
Proxy-Connection
X-SRCache-Key
X-TransIP-Reserved
Srv
X-Origin
Section-Io-Id
X-ORACLE-DMS-RID
X-Dispatch
X-Frontend
X-Time
X-SRV
X-LB-Server
X-Trace-Id
Qs-Cache
X-Service-Id
X-FTR-Request-ID
X-Cache-Device-Type
Tracecode
X-Varnish-Ttl
X-Runtime-Rack
NnCoection
Content-Encoding-Handler
X-Real-Server
X-Varnish-IP
X-Connection-Hash
Server-Name
X-Transaction
X-Twitter-Response-Tags
X-Content-Age
X-Dynamic-Cache
X-Cache-Only-Varnish
Pv
X-Akamai-Device-Model
X-Akamai-Device-Characteristics
X-ACMCache
X-FW
X-Sucuri-Cache
X-Content-Type-Option
X-Nbs
MC
X-Varnish-Age
X-TTFB
X-TTFB-L
X-SmugMug-Values
X-Id
X-SmugMug-Hiring
SiteSpeed
Smug-CDN
X-Browser
Cache
X-Speed-Cache-Key
X-Config-Blacklist-Version
X-Speed-Cache
X-Env
X-CacheFROM
X-High-Performance
X-Srv
X-Server-Instance
From-Origin
X-Locale
X-CF-Passed-Proto
X-Unbounce-PageId
X-Varnish-Retries
X-Unbounce-Variant
X-Unbounce-VisitorID
Https
IM-Version
X-HW
X-Always-Cache
S
X-GeoIP-Country-Name
X-Cookie-Domain
X-Nginx-Cache
Custom-Header
X-ID
IBM-Web2-Location
X-Drectory-Script
Content_type
Cache-Tags
X-PF-Uncompressing
W
X-BKSrc
Location
X-Symfony-Cache
CacheControlHeader
Fw-Via
SEOMOZ
X-Empowered-By
Service-Worker-Allowed
NetMindSessionID
X-RequestId
Content-Transfer-Encoding
Ohc-File-Size
X-Worker
MJ12bot
X-Varnish-Server
X-Middleware-Start
X-Varnish-Hits
X-Shield-Request-Id
X-VC-Enabled
Nginx-Cache
X-Cache-PageType
X-Sys-Req-ID
X-Cache-Fix
Accept-Charset
X-AF-Userserver
X-ARRServer
Local-Info
Edit
HCVer
HAVer
Proxy-Agent
X-WR-Flags
X-Orig-Vary
X-Webstats-RespID
Content-MD5
X-Cache-Control
Use-Proxy
X-TTL
Strikingly-Cache-Region
X-LP
X-Amz-Storage-Class
X-Proxy
Dtk-Cache-Check-0
X-Analytics
Strikingly-Cached-Version
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-BackendServer
Backend-Timing
Strikingly-Cached
X-Unique-ID
X-Rq
Web-App-Origin-Name
X-RealServer
X-Purge-URL
Xc-Version
WWW-Authenticate
X-Stage
Adm-Server
X-Akamai-Edgescape
Cm-Server
Front
X-TB-M
X-LW-Web-Server
X-WPL-DATA
X-App-Server
X-Adobe-Loc
Swift-Performance
X-Framework
X-Adobe-Content
X-Runtime-Memory
Server-Info
X-CB-Server
X-Cache-CFC
X-Nitro-Cache
Access-Control-Allow-Method
X-Disney-Akamai-Rule
X-Role
X-NginX-Cache
X-NginX-Server
X-VNode
X-Fedora-School-Id
SVR
Max-Age
X-WP
Cached
X-Content-Security-Policy-Report-Only
X-FastCGI-Cache
X-Culture
X-RiS-UFDI
X-Webkit-CSP
Pf.Web.Request.Id
X-Purge-Host
X-AEM
X-Amz-Rid
X-FIRSTBase
X-Redman-Backend
X-Redman-Final-Url
X-Generated-Time
X-Location
X-CacheDebug
X-Avg-Cookie-Expires
X-SE-Debug
X-AVG-Country-Code
SRV
Frame-Options
X-Balanceador
Environment
X-JG-Page-Cache
X-SERVER-NAME
X-Key
X-Yadis-Location
FindLaw
X-Pool
X-Remote-Addr
X-Now-Id
X-Detected-Device
X-Amz-Apigw-Id
Url
X-Processed-By
Hummingbird-Cache
X-Sedo-Request-Id
X-SH-Cache-Status
X-Webcelerate
X-Amz-Meta-Content-Md5
X-CDN-Forward
X-Smartcache-Keys
X-Amzn-RequestId
X-Smartcache-Timeout
X-App
Device
X-Amzn-Trace-Id
X-HostName
X-Storage-Cache-Date
X-Storage-Cache-Expires
X-App-Runtime
X-Backend-Status
X-Runtime-Affili
X-Storage-Cache
X-Origin-Id
X-Captured
X-VCS-Cacheable
X-VCS-Ttl
EN-User
X-Cache-Miss-From
Copyright
X-Dynatrace-Js-Agent
Dispatcher
X-GoCache-CacheStatus
X-Vip
Lb
RequestId
Eomportal-Instance
X-Varnish-ID
X-Resty-Request-Id
XDomainRequestAllowed
X-CAPServer
X-Cache-Ttl
A-Powered-By
X-IIJ-Cache
X-Source-ID
X-Application
Access-Control-Request-Headers
RN-Server
F5-Trid-Value
Disablevcache
X-A
F5-Trid-Name
X-Provisioner-Version
X-ClientSide-Caching
X-Jphone-Copyright
X-Info
X-Rack-Cors
X-GeoIP
From
X-FireWall-Port
X-Lw-Cache
X-Debug-Token
X-Domain-Checked
X-HydroSheep
VServer
X-Forwarded-Host
X-RemovedCookies
X-ProcessESI
X-Server-IP
X-Desc
X-MidCOM-Meta-Cache
X-GSL-Server
AETN-Continent-Code
AETN-City
AETN-Country-Code
X-MCB-Server
AETN-DEVICE
AETN-Country-Name
AETN-Area-Code
X-SayCDN-TTL
X-Plat
X-Confluence-Request-Time
X-Amz-Id-1
X-Real-IP
X-Say-TTL
X-Say-Cacheable
AETN-EU
AETN-Latitude
X-Depends
Cteonnt-Length
X-Distributor
SHInfo
X-MAT-GEO
Paypal-Debug-Id
X-Cache-Detail
AKA-DEVICE
AETN-Longitude
X-Goog-Meta-Goog-Reserved-File-Mtime
X-DynamicCache
AETN-Postal-Code
AETN-State-Code
AMP-Redirect-To
X-CACHE-TTL
Ufe-Result
Magicmarker
X-Garden-Version
X-SAPP
Pragrma
AsisCache
EagleEye-TraceId
BALANCEDTO
X-Varnish-Action
X-Consent-Required
Filters
X-Agent
Arrnode
X-4ormat-Cacheable
X-Resolver-IP
Pics-Label
ScoreTracker
X-Now-Cache
X-Resource
NODE
X-SP-UniqueName
X-SP-Farm
Resin-Trace
Machine
BackendServer
X-VC-TTL
IISExport
X-HeBS-Cache-Status
Id
X-Cache-On
X-Response
X-CRA-DC
NtCoent-Length
N365rili
X-Pagename
X-Hit-Cache
Identity
Ibf5scheme
Access-Control-Allow-Header
X-Cacheable-TTL
Report-To
X-Akamai-Transformed
X-Cache-Doesi
X-Reflector
X-Reflector-Cache
SERVER-ID
Ram
Ramp
WN
Upgrade-Insecure-Requests
X-WN-ClientGroup
Noq
X-ENV
X-Beget-Proxy
X-Dev
X-HS-Status
X-OpenCart-Lightning
X-Nginx-Host
Accept-Language
Referer
Worker
CLMOB
X-Cache-2
X-Compress-Hint
X-SDE-Name
X-Cms-Mode
X-Span
X-Hosting-Env
X-Proxy-Skip
X-Timestamp
Cmsid
Myheader
Cmstype
X-Yottaa-Optimizations
X-Ghost-Cache-Status
X-Custom-Name
X-Hosting
X-Middleton-PageSpeed
X-Rule
AR-PoweredBy
X-Rebelmouse-Cache-Control
AC-ELC
X-AOL-HN
AR-CACHE
AR-ATIME
X-Test
X-Svr
X-Ser
AR-SID
X-HTML-Minification-Powered-By
COMMERCE-SERVER-SOFTWARE
X-Goog-Meta-Policy
Prama
X-Abuse
X-Goog-Meta-Replace
Edgecast
X-Cache-Varnish
X-Origin-Server
X-Box
Web
HitType
X-Session-Reinit
XX
X-Refresh
X-Varnish-Hostname
Accept-CH
X-Bip
X-Gannett-Site-Version
X-Adnet
X-Actindo-Thread-Id
X-E
X-Client-Image-Vid
X-Client-Vid
X-PBY
X-EPiphany-Vid
X-ESI
X-Actindo-Rs
Thanks
X-Page
X-Secret
X-DataDome
X-Actindo-Request-Id
VANITY-HOST
X-Yottaa-Metrics
MageStack-Loadbalancer
X-Path-Route
MageStack-PageSpeed
MageStack-Area
Bios
X-Force
NLCacheNote
X-ServerIndex
X-PRAM
X-ASAP-Cache
X-Data-Request
X-FastCGI-Cache-Status
X-HashTwo
X-Clara-ASAP
MageStack-Cache-Hits
X-Server-Addr
MageStack-Cache
X-IP
MageStack-Magento-Version
X-Atraveo-From-Varnish-Cache
X-Atraveo-Expires
X-Atraveo-ETag
Cleartype
WP-FROM-CACHE
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
MageStack-Debug
Num
X-Appmachine-Environment
X-Atraveo-Cache-Control
MS-CV
Request-EU
X-Atraveo-Zone
X-JSESSIONID
X-Amz-Meta-Cb-Modifiedtime
X-Fstrz
X-Varnish-Debug-Age
X-Varnish-Debug-TTL
MageStack-Web-Node
MageStack-Tag
MageStack-Cacheable
Request-Country
X-Amcomm-Site
X-Map-Context
X-Hstore
CS-SERVER
MageStack-Config
X-V
X-Upgrade-Enabled
X-Hrouter
MageStack-Cache-Lifetime
MageStack-Cache-Status
Firespring-Website-Id
X-Req-Head-Response
X-Oferteo-Domain
X-Varnish-URL
X-Ratelimit-Remaining
X-Cocoon-Version
X-Session-ID
X-Directory-Script
X-Dw-Trace-Id
MageStack-Cache-Warning
X-Proxy-Backend
Server-Id
Pramga
X-CACHE-KEY
X-RAMCache
CommunityServer
WP-AdvCache-MemCached
X-Cdn-Forward
X-Middleton-Pagespeed
IES-Server
Load-Balancer
X-LBPoolMember
X-SilverStripe-Cache
Beyond-Iis
X-Request-Uri
NZSpeedy
X-Proto
Cache-Status
X-Generated-Timestamp
X-Origin-Cache
Fastly-Debug-Digest
Fastly-Backend-Name
X-Ratelimit-Limit
X-UnsetCookies
X-UA-Bot
X-Cache-Time
Xc
X-Ms-Request-Id
X-B3-Sampled
X-PHP-Response-Code
X-Proxy-Id
X-W3TC-Minify
X-DDM-SERVER
X-RequesterIP
X-Distributed-By
X-DDM-SERVER-UPDATED
X-Soro
X-Via-S
X-SuperCache
X-Proxy-Cache-Key
X-Nginx-Request-Processing-Time
X-Highwire-Smart-Code
X-Streams-Distribution
X-ETag
Apachenode
X-Flex-Lang
X-Flex-Evstart
X-Node-App
X-Flex-Lastmod
X-Flex-Tag
TC-Cache-IC
TC-Cache-U
TC-S-Cache
TC-S-Cache-M
X-Protected-By
X-Status
X-ReqId
X-HA-Frontend
X-Cache-TTL-Age
X-Cache-TTL-Current
X-Cache-Warmer
X-DevSrv-CMS
X-Serv
X-Scheme
X-Flex-Evend
DrivedBy
X-Flex-Community
TC-Cache
Server-Ip
X-Proxy-Cache-Control
X-Highwire-SessionId
X-Cache-Via
X-ServiceProvider
X-SmartBan-Host
X-Highwire-RequestId
X-HAProxy
X-Batcache
X-Batcache-Reason
X-Built-With
X-EC2-Instance-Id
X-SmartBan-URL
X-Domino-CacheValidationWithETagReason
Provider
X-MrHost
X-HA-Backend
X-Flex-Tags
X-Frames-Options
AMP-Access-Control-Allow-Source-Origin
X-Cache-Dispatcherpragma
X-Domino-CacheValidationWithETagResult
X-NodeID
X-XHR-Current-Location
X-Highwire-Sitecode
ServerTokens
X-Activity-Id
X-Instart-Cache-Id
CDN-Cache
Viewport
X-Unique-Id
X-Amz-Meta-Version-Id
X-Blog
X-Az
Backend-Name
Dis-Env
Provided-Host
X-ASAP-Age
Home
Session-Id
X-Enabled2
X-Instance-Id
X-MyName
X-Enabled1
X-Nginx-Request-Time
Request-Filtered-By
X-Enabled3
SINA-LB
X-WR-Trace
SINA-TS
X-Cache-FS-Status
X-CacheID
Backend-IP-Port
X-Debug-Message
PB-PID
X-CH-Device
X-Build-Id
X-Rack-CORS
X-Accel-Cache-Control
PB-RID
X-B2f-Not-Route
X-Layout
X-Czt
X-Mobile-Rewrite
X-DSMX-Rewrite-MS
X-DSMX-Render-MS
DNNOutputCache
MageStack-Last-Modified
Yola-ID
X-ZORequestID
X-NWS-UUID-VERIFY
X-UA
X-HA
Aurora-Node
X-Title
MageStack-Cache-Lifetime-Sent
Amfplus-Ver
X-Varnish-Cache-Local
X-SSLTerm-Server
X-PBS-Appsvrip
X-PBS-Appsvrname
X-Qiniu-Zone
X-Log
X-Built-By
X-Reqid
X-Via-NSCOPI
ServerSignature
X-FPC
X-Cache-Action
X-Node-Id
X-Cache-Extended
X-ManagedFusion-Rewriter-Version
Proxy-Cache
Traffic-Origin
Content
X-WA-Info
X-Zendesk-Origin-Server
X-WebKit-CSP-Report-Only
X-AutoRu-App-Id
X-Autoru-Host
*
Access-Control
X-Aramark-SID
CDCHOST
SBSS
X-Zendesk-User-Id
X-7d-Trace-Id
X-7d-Instance-Id
TP-Cache
Powered-By-115
TP-L2-Cache
X-Block-Rule
X-Container
X-Block-RuleID
X-WebNode
X-XHTML-Minification-Powered-By
X-PBS-Fwsrvname
X-Test-Debug
X-Upstream-Addr
X-CacheLoc
X-KoobooCMS-Version
X-Mobilized-By
HitInfo
Hamster
X-Rewritten-By
Server-ID
Tempo
X-Cache-Dispatchercachecontrol
FRONT-END-SECUREBROWSER
X-Olaf
Il-Cl
Yoncu-Errno
D
X-Render-Time
X-Dscp-Value
ServerNode
X-Varnish-Debug-Hits
X-WEBMGR-CACHE
X-Appid
X-ROUTING
X-ORIKEY
X-Now-Instance
X-Now-Trace
X-Shard
Play-Detected-Device
X-Pj-Cache-Status
Ali-Swift-Global-Savetime
X-Appversion
X-DB-Content-Length
Play-Detected-UserAgent
PServer
X-ENDPOINT
X-FromPodPressCache
X-Bcwwwid
X-APIVERSION
SS
X-FORWARDED-PROTO
VC-NoCache
X-APIAUTH-VAL
PBS
Now
X-M-Reqid
X-M-Log
Content-Generator
Ews
Hosted-By
X-Served-Server
X-TLS-Version
ID
X-Varnish-Cache-Control
X-SV
X-Server-Ip
X-Wodby-Node
X-Qnm-Cache
Ttl
X-Custom-Header
X-CSRF-Token
X-From-Varnish
X-From-Varnish-Deploy
X-RunCloud-Cache
X-Cache-ID
X-Boot
Plateforme
NGX
RSB-LINK
X-HEAD
X-Beatles
X-SSL
X-MainProfileID
X-S-Misc
X-Generation-Time
X-D-Time
X-Envoy-Upstream-Service-Time
X-Origin-Date
X-Enhanced-By
Page-Template
StatusCode
Progma
End-User-Country
X-MSU-SOURCE
X-GEO
X-Clx-Request
X-Newrelic-Synthetics
X-SID
Backend-Powered-By
X-VG-WebCache
X-Server-Generated
SB-Cache-Life
X-Powered-By-ADS
X-Dck
X-BServer
X-SCM-Server-Number
X-Upstream-Backend
X-ZSITES-DNS
X-Varnish-Cache-Ttl
X-Upstream-Status
X-BPool-Back
X-Airee-Node
SB-Site-IE-VERSION
SB-Site-Device
SB-Cache-Remaining
X-AMAZEEIO
X-Ms-Version
X-Who
X-Proxy-Server
Requested-Host
X-Trans-Id
X-Cache-Me-Harder
Prototype-RootPath
X-Web-Node
X-ProBase-Server
RSL-Trace-ID
X-Content-Type
X-BeResp-Ttl
X-Amzn-Remapped-Content-Length
X-This-Proto
X-Tag-Playlist
X-Deity
X-Cname-TryFiles
X-Cache-LB
X-M
X-Processed
X-Served
X-SCProxy
X-Front-Cache
X-Stiffia-Cache
Lookup-Cache-Hit
X-NewsFlow-Sitename
X-MainProfileURL
X-Compressed-By
X-Geo-IP
X-Skip-Cache
X-Origin-Upstream-Status
X-MainProfileName
X-InDy-Time
Nitro-Cache
X-Tradeindia-SMgmt
X-Tradeindia-Request-GUID
X-Avvio-Cms-Cacheload
X-HP-CAM-COLOR
X-MainProfileCategory
X-Len
GranicusServer
X-Distil-CS
Content-Sn
X-Server-Hostname
X-AppServer-Cache-Rule
DB-Nickname
Description
ModuleCacheType
Keywords
Webserver
UrlWatchModule-Time
X-Lb
X-Geo
X-Sid
X-VTEX-Cache-Status-Janus-Edge
Nd
DbServerName
Og
Request-Time
CDN-CachedAt
X-Varnish-Cached-TTL
CDN-PullZone
CDN-RequestId
CommercePlatform-Version
CDN-Uid
X-Varnish-Cached
X-UPServer
X-B3-Traceid
X-B3-Spanid
X-Fpc
X-MCF-ID
X-Sn-Servicetimems
X-Ruby-Cluster-ID
X-Dynamic
X-Brought-To-You-By
X-Q-S
X-Cachable
X-S-C
X-S-V
X-V-Cache
Key
X-OPNET-Transaction-Trace
X-Mw-Workerstats
X-I-V
X-Header
X-M-P
X-M-T
X-CPU-Time
X-M-V
X-Transaction-Name
X-UT-Cache
HSTS
X-UPSTREAM-Address
VAR-Cache
X-Sorting-Hat-Expire-Cache
X-Backend-Host
RM-Cache-Control
Generate-Time
X-Netrix-ID
NS-VaryByCustom-Key
X-AppVersion
ProxiaInstanceId
Tesla.Performance
X-Machine
X-Catalyst
Ctx
OracleCommerceCloud-Sandiego
X-Appmachine-CreatedOn
Sl-Pgid
REFRESH
X-Appmachine-Duration
X-Appmachine-Name
X-CloudBurst-Backend
X-Backside-Transport
Prot
X-We-Are-Hiring
X-PressLabs-Stats
X-PM-ID
X-Search-Id
X-Src-Webcache
X-VC-Debug
X-Time-Microsecs
X-CloudBurst-Cache
X-CloudBurst-Frontend
Actioncode
X-Vary-Options
LB
Realaction
X-InDy-Memory
X-Grid-Server
X-SiteDistrict-Cache
X-Server-Response-Time
X-Firefox-Spdy
X-CloudBurst-WordPress
X-From-Cache
X-Gateway-Rate-Limit-Delayed
X-Pagely-Cache
X-Global-Transaction-ID
X-Pass-Through
X-Nginx
Session-From
ServerIP
X-Route
MachineName
X-Varnish-Grace
MwpReleaseVersion
Expiries
Debug-Status
X-AISO-Cache
OracleCommerceCloud-Version
X-AISO-Cacheable
X-AISO-Server
X-Nginx-Page-Cache
X-Hit
Arrow-RequestId
Cf-Ipcountry
X-Csrf-Token
X-Cjtype
X-Device-Item
X-Gate
X-Max-Age
X-Gate-Blk
X-CD
X-ACCELERATE
ORIGIN-SITE
ORIGIN-SERVER
V-TTL
ViewMode
Www.Aujourdhui.Com
VSID
X-InDy-Query