Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
X-Cache
Age
Content-Language
X-AspNet-Version
P3P
X-Pingback
Expect-CT
X-UA-Compatible
Via
Upgrade
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Request-Id
X-Adblock-Key
Referrer-Policy
X-Varnish
X-Check
X-Generator
X-Language
X-Template
X-Buckets
X-Drupal-Cache
P3p
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-Xss-Protection
Alt-Svc
X-Permitted-Cross-Domain-Policies
X-Download-Options
X-AspNetMvc-Version
X-Cache-Hits
X-Hacker
X-Ac
Host-Header
X-Dc
X-Sorting-Hat-Section
X-Alternate-Cache-Key
X-ShopId
X-ShardId
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-ShopId
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId-Cached
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Powered-By-Plesk
X-Runtime
X-Served-By
X-Via
MS-Author-Via
Content-Location
X-Amz-Cf-Id
X-Powered-CMS
X-Contextid
Access-Control-Allow-Headers
X-UA-Device
X-ServedBy
X-IPLB-Instance
X-PC-Hit
X-PC-Key
Access-Control-Allow-Methods
Status
X-PC-AppVer
X-PC-Date
X-PC-Host
Cartoon
X-Timer
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
Access-Control-Allow-Credentials
CF-Cache-Status
X-Rid
X-Iinfo
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-NewRelic-App-Data
X-Seen-By
X-Wix-Request-Id
X-Backend
X-Tumblr-Pixel-1
X-WPE-Loopback-Upstream-Addr
Powered-By
Content-Encoding
X-Mod-Pagespeed
X-Cache-Status
X-Host
X-Tumblr-Pixel-2
X-CST
X-Endurance-Cache-Level
X-Cache-Enabled
X-Server
X-Cache-Hit
X-Port
X-Logged-In
X-CDN
Keep-Alive
X-Server-Powered-By
X-DIS-Request-ID
X-Nginx-Cache-Status
X-Drupal-Dynamic-Cache
X-Tumblr-Pixel-3
X-Robots-Tag
X-Accel-Version
X-Turbo-Charged-By
Server-Timing
X-Proxy-Cache
X-Page-Speed
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Content-Digest
X-Content-Powered-By
X-LiteSpeed-Cache
X-GitHub-Request-Id
Content-Security-Policy-Report-Only
X-Rack-Cache
X-Pad
X-ASPNET-VERSION
X-AH-Environment
Edge-Control
X-Varnish-Cache
X-FW-Hash
X-FW-Server
X-FW-Static
X-FW-Serve
X-FW-Type
Request-Context
X-Request-Country
X-XRDS-Location
SPRequestGuid
X-SharePointHealthScore
WP-Super-Cache
X-MS-InvokeApp
X-Trace
X-Hits
X-Tumblr-Pixel-4
X-Node
MicrosoftSharePointTeamServices
X-Webcom-Cache-Status
Timing-Allow-Origin
Edge-Cache-Tag
Cf-Railgun
X-BC-Stapler
X-HS-Cache-Config
X-Newrelic-App-Data
X-HS-Content-Id
X-Amz-Request-Id
X-Amz-Id-2
Access-Control-Expose-Headers
X-Cache-Lookup
X-Ua-Compatible
X-Died
X-Content-Security-Policy
Charset
X-CF-Powered-By
X-Webserver
X-HS-Combine-CSS
X-FullPageCaching
Request-Id
X-PHP-Backend
X-PhApp
X-Cnection
X-INKT-URI
X-INKT-SITE
Access-Control-Max-Age
X-Fastly-Request-ID
SPIisLatency
SPRequestDuration
EagleId
X-Backend-Server
Composed-By
X-Swift-SaveTime
X-Swift-CacheTime
MicrosoftOfficeWebServer
X-CDN-Pop-IP
X-CDN-Pop
Grace
X-SS-Conf
X-SS-Location
X-Request-ID
Served-By
X-Safe-Firewall
X-Spip-Cache
X-Device
Rating
Liferay-Portal
X-Hyper-Cache
X-Dw-Request-Base-Id
X-Server-Name
Front-End-Https
X-Tumblr-Pixel-5
X-NF-Request-ID
X-Edge-Cache
X-Edge-Cache-Key
X-VCache
X-DDC-Arch-Trace
X-Microcache
X-Tumblr-Content-Rating
X-Cloud-Trace-Context
X-LiteSpeed-Cache-Control
X-RateLimit-Remaining
X-RateLimit-Limit
X-RateLimit-Reset
X-Jimdo-Wid
X-Jimdo-Instance
X-Cluster-Node
X-SERVER
Permitted-Cross-Domain-Policies
X-HeyJason
X-Do-Not-Hack
X-Clacks-Overhead
X-FB-Debug
X-Loop
X-TNCMS
Surrogate-Control
X-Wix-Punisher
X-Acc-Exp
X-DNS-Prefetch-Control
X-Middleton-Display
X-Sol
Content-Style-Type
Display
Response
X-Middleton-Response
Content-Script-Type
X-Vtex-Processado-Em
P-WS
P-LB
Public-Key-Pins
X-OneAgent-JS-Injection
Refresh
X-Firenze-Processing-Times
X-Debug-Info
X-StackifyID
X-Age
X-Kinsta-Cache
X-Magento-Tags
Fpc-Cache-Id
X-User-Agent
X-Cached
X-XN-XNHTML
X-XN-Trace-Token
X-Px
X-Amz-Version-Id
X-Goog-Hash
X-Original-Date
X-WebKit-CSP
X-Cache-Config
Xkey
X-N-OperationId
X-Generated-By
X-Ruxit-JS-Agent
PageSpeed
X-Shopid
X-Hostname
X-Sorting-Hat-Featureset
X-Sorting-Hat-Podid
X-Sorting-Hat-Podid-Cached
X-Shardid
X-Sorting-Hat-Privacylevel
X-Sorting-Hat-Shopid-Cached
X-Sorting-Hat-Shopid
Retry-After
X-Zen-Fury
X-URL
X-Topify-Platform
X-DynaTrace-JS-Agent
X-Handled-By
X-Frame-Option
X-Tumblr-Pixel-6
X-Loopia-Node
Rt-Fastcgi-Cache
X-B-Cache
X-MiniProfiler-Ids
X-LW-Cache
X-CMS-Version
X-Outils-CS
X-Goog-Generation
X-Goog-Stored-Content-Length
X-Edge-Location
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-Upstream
Feature-Policy
Access-Control-Request-Method
Edge-Control-Message
TCN
X-Request-Time
X-Url
X-Whom
X-Platform-Cluster
X-Platform-Processor
X-Platform-Router
X-AspNetWebPages-Version
X-Varnish-TTL
X-Source
X-Cached-By
Powered
Fastcgi-Cache
X-Servedby
X-Content-Options
X-FORWARDED-FOR
Public-Key-Pins-Report-Only
X-Engine
Fhost
ServedBy
X-From
X-Version
X-DynaTrace
X-Powered-By-VTEX-Janus-ApiCache
No
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Remote-Cache
X-Vtex-Processed-At
X-VTEX-Janus-Router-Backend-App
X-CacheServer
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Accel-Expires
X-Cdn
X-Magento-Cache-Debug
Allow
X-Varnish-Cache-Hits
X-Recruiting
X-Signature
X-EdgeConnect-Origin-MEX-Latency
X-Varnish-Host
X-RESOURCE
X-Umbraco-Version
Last-Published
X-Developer
X-Application-Context
X-LBLID
X-Response-Time
X-EdgeConnect-MidMile-RTT
X-URLSCHEME
X-Correlation-Id
Product
X-Location-Id
DynaTrace
Imagetoolbar
X-Actual-URL
X-Varnish-Beresp-Status
X-Returned-From-DLL
X-Varnish-Beresp-Grace
X-Returned-From
X-Original-Request
X-Passed-To-DLL
X-Varnish-Beresp-Ttl
X-F-Cache
Warning
X-Passed-To
X-ET-API-VERSION
X-NWS-LOG-UUID
X-ET-API-ORIGIN
X-Defender
Arr-Disable-Session-Affinity
X-Shop-Id
Host
X-ET-API-ROOT
X-Stale
X-Micro-Cache
X-Microcachable
X-Powered-By-360WZB
X-Cache-Info
X-Returned-From-PostProcessResponse
X-Passed-To-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
Generator
X-Forwarded-For
Alternate-Protocol
X-Device-Type
X-Platform-Cache
X-PERF
X-ApacheServer
X-Cache-Key
X-Cache-Namespace
Origin
X-Cache-Rule
X-UD-Method
Pagespeed
X-Rnd
X-Via-JSL
X-SO
X-I-Sp
X-Varnish-HitMiss
X-BS
X-Varnish-Count
X-Fastcgi-Cache
X-Guploader-Uploadid
X-Platform-Server
WZWS-RAY
X-S
Content-Hash
X-Ezoic-Cdn
X-Msg-2-Log
X-HS-Content-Campaign-Id
X-Hosted-By
X-Cache-Age
X-Platform
X-Instart-Request-ID
Version
X-Supported-By
X-Gateway-Cache-Status
X-Cache-Tags
X-Environment
X-Gateway-Cache-Key
X-Gateway-Skip-Cache
X-App-Status
Cache-Provider
X-HOST
X-TransIP-Balancer
Surrogate-Key
RTSS
X-Lambda-Id
X-Duration
X-Microcache-Status
X-Translation
X-TransIP-Backend
X-LB-Node
X-Correlation-ID
X-Dispatcher
X-Sapient
X-Server-ID
Cache-Key
X-Director
X-Magento-Cache-Control
USPLoggingUUID
X-Powered-By-VelaWeb
X-Expires-Orig
X-Dns-Prefetch-Control
X-Akam-SW-Version
X-Front
X-Track
X-Cache-Control-Orig
X-Page-Cache
X-SSL-Cipher
X-Server-Upstream
X-Varnish-GracePeriod
X-Varnish-RemainingTTL
X-Daa-Tunnel
X-Varnish-Seen-By
X-Revision
X-Varnish-RemainingLife
Content-Disposition
X-Varnish-ObjectSource
MIME-Version
X-SSL-Protocol
X-Last-Modified
X-ORACLE-DMS-ECID
X-GUploader-UploadID
X-CSRF-Protection
X-Abgroup
X-App-Hosting
X-Hypernode
Pool
X-Vcap-Request-Id
X-I
Dmn
Wsr-Cache
X-Cache-Debug
X-Powered-By-VTEX-Janus-Edge
X-Ttl
X-Edge-IP
X-Dealeron-Backend
S-Cnection
X-Dealeron-Original-Url
X-DealerOn
SSPAppContext
X-Rocket-Nginx-Bypass
X-Rocket-Nginx-Serving-Static
X-Cache-TTL
X-Debug
X-Storage
Akamai-IP
X-Cache-Engine
X-Drupal-Cache-Tags
X-Cf-Powered-By
X-LB
X-NoCache
Accept-Encoding
X-Magnolia-Registration
X-ARC
X-Litespeed-Cache
X-Dispatch
X-VARITI-CCR
X-NetCat-Version
If-Modified-Since
X-Forwarded-Proto
X-Varnish-Cacheable
FAI-W-FLOW
X-Gamma-Serve
X-ServerName
X-SDS
X-Cache-Lifetime
X-Cache-Handler
X-Art-Request-Id
X-Matrix-Server
X-Matrix-Proxy
X-Hiawatha-Cache
X-Cache-Level
X-Pressidium-NinukisWP-Ver
SN
X-Cache-Type
X-IsCacheURL
Node
X-ATG-Version
X-Discourse-Route
X-Amz-Meta-S3cmd-Attrs
X-Route-Server
X-Geo-Country
X-Client-IP
X-Content-Encoded-By
X-Url-Base
Powered-By-ChinaCache
X-Flow-Powered
Contao-Page-Layout
Update-Time
X-Cache-Only-Varnish
Src-Update
X-Cache-Operation
Backend
X-CJ-Soft
Cneonction
X-Country-Code
X-Drupal-Cache-Contexts
PICS-Label
X-SV-Nginx-Duration
X-SV-Pid
X-SV-FromDBCache
X-SV-Edge
X-Vhost
X-Grace
X-Cache-Expires
ServerName
X-SV-CacheTags
X-SV-Duration
X-SV-CreatedAt
X-SV-Expires
X-SV-Cacheable
X-N
X-Cache-Server
Section-Io-Id
Srv
X-SRV
Req-Id
X-Firenze-Processing-Time
ServerID
X-Varnish-Url
X-SSLProxy
X-SSLUpstream
X-SVR-IIS
X-LB-Server
X-Sucuri-ID
Lsrequestid
Page-Completion-Status
AMF-Ver
Proxy-Connection
X-Varnish-IP
Author
X-Svr-Proxy
X-Generated
X-SRCache-Key
X-Varnish-Backend
Content-Encoding-Handler
X-ORACLE-DMS-RID
X-Service-Id
X-ServerID
X-Cache-Device-Type
Surrogate-Key-Raw
X-Trace-Id
X-Pantheon-Phpreq
X-Processing-Time
X-Pantheon-Site
X-Frontend
X-Pantheon-Environment
X-GeoIP-Country-Code
X-UPSTREAM
X-Id
X-Server-Id
SiteSpeed
X-PwB-Node
X-Esi
X-FTR-Request-ID
Nodo
X-Unbounce-PageId
X-Unbounce-Variant
X-Unbounce-VisitorID
X-TTFB
X-Server-Instance
X-SmugMug-Hiring
X-Nbs
X-SmugMug-Values
Smug-CDN
X-TTFB-L
X-TransIP-Reserved
Tracecode
X-ACMCache
IM-Version
X-Varnish-Ttl
X-Env
X-Real-Server
X-FW
X-HW
X-RequestId
X-Akamai-Device-Characteristics
X-Akamai-Device-Model
X-Content-Age
X-Runtime-Rack
X-Time
Qs-Cache
X-Varnish-Age
X-Browser
X-High-Performance
X-Varnish-Retries
Cache
X-CF-Passed-Proto
Edit
X-Dynamic-Cache
Pv
Location
Https
X-Locale
X-Middleware-Start
X-CacheFROM
X-Config-Blacklist-Version
Server-Name
X-Always-Cache
X-Cache-Fix
NnCoection
MC
X-Nginx-Cache
X-Cache-PageType
X-Content-Type-Option
X-BKSrc
X-Origin
X-Drectory-Script
Use-Proxy
X-Speed-Cache
S
X-Varnish-Hits
X-Speed-Cache-Key
W
X-Connection-Hash
IBM-Web2-Location
X-Twitter-Response-Tags
X-Symfony-Cache
X-PF-Uncompressing
X-Transaction
Content_type
X-Sucuri-Cache
X-GeoIP-Country-Name
X-Worker
Ohc-File-Size
X-Stage
SEOMOZ
NetMindSessionID
Custom-Header
X-Cookie-Domain
MJ12bot
Fw-Via
X-Cache-Control
X-Purge-URL
From-Origin
Xc-Version
X-CacheDebug
X-ARRServer
Proxy-Agent
X-WR-Flags
Service-Worker-Allowed
X-VC-Enabled
Cm-Server
X-AF-Userserver
Local-Info
X-Orig-Vary
Nginx-Cache
X-Srv
X-Sys-Req-ID
X-GoCache-CacheStatus
X-Varnish-ID
X-CDN-Forward
X-Empowered-By
Strikingly-Cache-Region
Dtk-Cache-Check-0
X-Varnish-Server
X-Webstats-RespID
CacheControlHeader
X-Runtime-Memory
X-TTL
X-Unique-ID
X-Analytics
Strikingly-Cached-Version
Strikingly-Cached
X-Rq
Backend-Timing
X-LP
X-Wikidot-Backend
X-Purge-Host
X-Webkit-CSP
X-Wikidot-Static-Cache
X-LW-Web-Server
X-SE-Debug
Content-Transfer-Encoding
WWW-Authenticate
Web-App-Origin-Name
X-Fedora-School-Id
Cache-Tags
Adm-Server
X-TB-M
X-JG-Page-Cache
Accept-Charset
X-ID
Swift-Performance
X-Cache-CFC
X-BackendServer
X-Amz-Storage-Class
X-Nitro-Cache
X-Framework
X-Shield-Request-Id
Content-MD5
X-Proxy
X-Litespeed-Cache-Control
X-Adobe-Loc
X-CB-Server
X-Adobe-Content
X-Disney-Akamai-Rule
X-Location
SVR
X-FastCGI-Cache
Environment
X-Resty-Request-Id
X-Xrds-Location
X-Culture
X-RiS-UFDI
X-RealServer
X-AEM
Cached
X-Role
X-WP
Front
Max-Age
X-VNode
X-Amz-Rid
FindLaw
Server-Info
X-Pool
X-Hit-Cache
X-Pagename
X-Now-Id
X-Balanceador
X-Application
X-GeoIP
X-Beget-Proxy
X-App-Server
HAVer
HCVer
Frame-Options
X-SERVER-NAME
X-Smartcache-Keys
X-App
X-Smartcache-Timeout
X-Amz-Apigw-Id
X-OpenCart-Lightning
Dispatcher
Hummingbird-Cache
X-Generated-Time
X-Amzn-Trace-Id
X-VCS-Ttl
X-Amzn-RequestId
X-Webcelerate
X-Session-ID
Pf.Web.Request.Id
X-Content-Security-Policy-Report-Only
Device
SHInfo
Lb
X-CAPServer
X-Vip
X-FIRSTBase
X-Processed-By
X-Sedo-Request-Id
X-SH-Cache-Status
X-Detected-Device
X-Plat
X-Backend-Status
X-HostName
X-NginX-Cache
X-Storage-Cache
Access-Control-Allow-Method
X-App-Runtime
Copyright
X-VCS-Cacheable
X-NginX-Server
X-Storage-Cache-Date
X-Origin-Id
X-Storage-Cache-Expires
X-Dynatrace-Js-Agent
X-Runtime-Affili
XDomainRequestAllowed
RequestId
X-Cache-Miss-From
X-Info
X-Domain-Checked
Upgrade-Insecure-Requests
X-ClientSide-Caching
Access-Control-Request-Headers
Ram
A-Powered-By
X-Timestamp
X-Key
X-FireWall-Port
X-A
RN-Server
X-Rack-Cors
X-Jphone-Copyright
X-WPL-DATA
X-Lw-Cache
F5-Trid-Name
Identity
F5-Trid-Value
X-Akamai-Edgescape
Noq
X-Provisioner-Version
X-HydroSheep
Ramp
AETN-Postal-Code
AETN-EU
Arrnode
AETN-Longitude
X-Goog-Meta-Goog-Reserved-File-Mtime
AETN-Latitude
Filters
Cteonnt-Length
X-Goog-Meta-Policy
AKA-DEVICE
AETN-State-Code
AETN-DEVICE
AETN-Country-Name
EN-User
X-HA-Frontend
X-Say-Cacheable
X-Captured
X-Say-TTL
Pics-Label
X-Goog-Meta-Replace
AETN-Area-Code
AETN-Continent-Code
AETN-Country-Code
AETN-City
X-HA-Backend
X-Yadis-Location
X-Agent
X-SayCDN-TTL
X-ProcessESI
X-ESI
Eomportal-Instance
Pragrma
Id
X-SAPP
Num
NtCoent-Length
N365rili
X-SP-UniqueName
X-SP-Farm
X-ASAP-Cache
X-CACHE-TTL
Ufe-Result
X-Cache-On
X-Resolver-IP
X-Oferteo-Domain
X-CRA-DC
X-Amz-Id-1
AsisCache
BALANCEDTO
X-Garden-Version
X-Data-Request
X-HashTwo
Traffic-Origin
Ibf5scheme
X-Response
VServer
AMP-Redirect-To
X-Varnish-Hostname
BackendServer
X-Desc
X-MAT-GEO
Paypal-Debug-Id
X-GSL-Server
X-4ormat-Cacheable
ScoreTracker
X-Clara-ASAP
X-Forwarded-Host
X-Varnish-Action
X-VC-TTL
X-Cache-Detail
Access-Control-Allow-Header
X-Now-Cache
X-Confluence-Request-Time
X-Server-IP
X-MidCOM-Meta-Cache
EagleEye-TraceId
NODE
X-RemovedCookies
X-DynamicCache
X-Hosting-Env
X-Cache-2
X-SDE-Name
From
X-Proxy-Skip
X-Compress-Hint
X-Span
X-Reflector-Cache
X-Reflector
Disablevcache
X-HS-Status
X-Redman-Backend
X-AVG-Country-Code
X-Avg-Cookie-Expires
X-Akamai-Transformed
SRV
WN
X-WN-ClientGroup
X-Dev
X-Redman-Final-Url
X-Dw-Trace-Id
X-ENV
CLMOB
Worker
X-Cms-Mode
X-Cache-Doesi
X-IIJ-Cache
Referer
X-Amz-Meta-Content-Md5
Url
X-MCB-Server
X-FastCGI-Cache-Status
X-ASAP-Age
X-Req-Head-Response
X-Amz-Meta-Cb-Modifiedtime
X-Map-Context
X-JSESSIONID
X-Box
X-Rule
X-Remote-Addr
X-Bip
AR-ATIME
Thanks
X-Svr
X-AOL-HN
Resin-Trace
X-Cache-Varnish
Prama
MS-CV
X-Debug-Token
X-Refresh
XX
X-Status
X-Page
X-Rebelmouse-Cache-Control
Web
AR-SID
X-Middleton-PageSpeed
AR-PoweredBy
X-Hosting
X-Ghost-Cache-Status
X-Amcomm-Site
X-Fstrz
AR-CACHE
X-Real-IP
COMMERCE-SERVER-SOFTWARE
X-DataDome
Edgecast
X-E
X-Distributor
X-Test
X-Depends
X-V
MageStack-Cache-Lifetime
MageStack-Config
X-Atraveo-From-Varnish-Cache
MageStack-Debug
Cleartype
X-Atraveo-Zone
X-Atraveo-Set-Cookie
X-Atraveo-Param-Rm
MageStack-Loadbalancer
MageStack-Magento-Version
X-Atraveo-Cache-Control
Il-Cl
Proxy-Cache
Home
MageStack-PageSpeed
X-Atraveo-Expires
X-Hstore
X-PRAM
Request-Country
WP-FROM-CACHE
Request-EU
MageStack-Area
X-Appmachine-Environment
X-Atraveo-Varnish-Server-Id
MageStack-Cache
X-Hrouter
X-Varnish-Debug-Age
MageStack-Cache-Hits
X-ServerIndex
MageStack-Cacheable
X-Path-Route
X-Varnish-Debug-TTL
MageStack-Cache-Status
X-Atraveo-TTL
Firespring-Website-Id
X-Atraveo-ETag
MageStack-Web-Node
Play-Detected-Device
X-Frames-Options
X-B2f-Not-Route
X-Cache-Ttl
Play-Detected-UserAgent
X-DSMX-Rewrite-MS
X-Server-Addr
X-DSMX-Render-MS
Fastly-Debug-Digest
X-Force
ServerTokens
CS-SERVER
ServerSignature
X-Varnish-Cache-Local
MageStack-Tag
X-Upgrade-Enabled
X-Source-ID
X-Aramark-SID
X-Rack-CORS
X-Origin-Cache
X-Request-Uri
NZSpeedy
IES-Server
X-Ratelimit-Remaining
X-Ratelimit-Limit
X-Proxy-Backend
X-Generated-Timestamp
Load-Balancer
X-SilverStripe-Cache
X-Middleton-Pagespeed
Beyond-Iis
MageStack-Cache-Warning
X-HeBS-Cache-Status
Cache-Status
WP-AdvCache-MemCached
Server-Id
X-Cdn-Forward
X-Nginx-Host
X-Consent-Required
X-Cocoon-Version
X-RAMCache
X-CACHE-KEY
X-LBPoolMember
Pramga
Magicmarker
Fastly-Backend-Name
X-Varnish-URL
X-Proto
CommunityServer
Accept-Language
TC-Cache-U
TC-Cache
TC-Cache-IC
TC-S-Cache
TC-S-Cache-M
X-B3-Sampled
X-Proxy-Id
X-PHP-Response-Code
X-Session-Reinit
X-SuperCache
X-UA-Bot
X-Distributed-By
X-DDM-SERVER-UPDATED
X-Autoru-Host
X-AutoRu-App-Id
X-Cache-Dispatchercachecontrol
X-Cache-Dispatcherpragma
X-DDM-SERVER
Xc
X-Batcache
X-SmartBan-Host
X-ServiceProvider
X-SmartBan-URL
X-Streams-Distribution
X-XHR-Current-Location
X-Highwire-SessionId
X-Highwire-RequestId
X-Batcache-Reason
X-Built-With
X-EC2-Instance-Id
X-HAProxy
AMP-Access-Control-Allow-Source-Origin
MachineName
X-HTML-Minification-Powered-By
X-Flex-Tags
X-Flex-Tag
X-Proxy-Cache-Control
X-Soro
*
X-Via-S
X-Flex-Lastmod
X-Flex-Lang
X-Custom-Name
Report-To
Myheader
X-DevSrv-CMS
X-Flex-Community
X-Flex-Evstart
X-Flex-Evend
Access-Control
X-Enabled1
AC-ELC
X-MrHost
Apachenode
X-Block-Rule
X-Block-RuleID
X-Enhanced-By
X-CacheLoc
IISExport
SERVER-ID
PB-PID
X-Enabled3
X-Enabled2
PB-RID
X-Mobile-Rewrite
X-Domino-CacheValidationWithETagResult
X-Domino-CacheValidationWithETagReason
DNNOutputCache
Cmstype
X-Secret
X-Gannett-Site-Version
X-Unique-Id
MwpReleaseVersion
X-ReqId
Machine
X-Serv
X-Cache-Warmer
X-Cache-TTL-Current
X-Scheme
X-Origin-Server
X-Node-App
Debug-Status
DrivedBy
X-Cache-TTL-Age
X-WR-Trace
Provider
X-WA-Info
X-PBY
X-FPC
X-EPiphany-Vid
X-Yottaa-Metrics
X-Yottaa-Optimizations
Cmsid
Aurora-Node
X-Client-Vid
X-Client-Image-Vid
X-Actindo-Request-Id
VANITY-HOST
X-Actindo-Rs
X-Actindo-Thread-Id
X-Cacheable-TTL
X-Adnet
X-ETag
Server-Ip
X-Instance-Id
X-CacheID
X-Machine
X-MyName
X-Activity-Id
X-Cache-FS-Status
X-M
Session-Id
CDN-Cache
SINA-LB
SINA-TS
X-Amz-Meta-Version-Id
X-Nginx-Request-Time
X-PBS-Appsvrip
X-Abuse
TP-L2-Cache
X-Container
X-KoobooCMS-Version
X-Mobilized-By
TP-Cache
Powered-By-115
X-PBS-Appsvrname
X-PBS-Fwsrvname
X-Upstream-Addr
X-WebNode
Provided-Host
Dis-Env
ID
X-HA
X-Build-Id
X-CH-Device
X-Czt
X-Accel-Cache-Control
MageStack-Last-Modified
X-UA
X-Cache-Time
Amfplus-Ver
MageStack-Cache-Lifetime-Sent
X-Layout
X-OPNET-Transaction-Trace
X-ZORequestID
X-Title
Yola-ID
Backend-IP-Port
Backend-Name
X-SSLTerm-Server
Og
X-Debug-Message
Description
X-Az
Keywords
X-Olaf
X-Instart-Cache-Id
HitType
FRONT-END-SECUREBROWSER
Tempo
X-Log
X-7d-Trace-Id
X-Ser
X-Reqid
Hamster
X-Qiniu-Zone
X-7d-Instance-Id
Request-Filtered-By
Server-ID
X-Via-NSCOPI
Content
X-Tag-Playlist
X-Cache-Action
SBSS
HitInfo
Yoncu-Errno
X-Cache-Extended
Accept-CH
D
Viewport
X-Now-Trace
X-APIVERSION
ServerNode
PBS
X-APIAUTH-VAL
X-ORIKEY
X-FromPodPressCache
X-ENDPOINT
X-Now-Instance
X-Appid
VC-NoCache
X-Pj-Cache-Status
X-Appversion
X-FORWARDED-PROTO
Bios
X-Bcwwwid
X-Resource
NLCacheNote
X-DB-Content-Length
SS
X-WEBMGR-CACHE
Now
X-Shard
PServer
X-IP
X-Varnish-Debug-Hits
X-ROUTING
X-Dscp-Value
X-Server-Ip
SB-Cache-Life
X-SV
X-Wodby-Node
X-Varnish-Cache-Control
X-Served-Server
X-Qnm-Cache
X-M-Reqid
X-M-Log
X-Clx-Request
X-Gyrobase-Publication
Requested-Host
X-Trans-Id
Content-Generator
X-Cache-ID
X-Boot
X-CSRF-Token
X-Custom-Header
X-Skip-Cache
X-Beatles
Ttl
Hosted-By
Ews
NGX
Plateforme
RSB-LINK
SB-Cache-Remaining
X-InDy-Time
X-Global-Transaction-ID
X-Gateway-Rate-Limit-Delayed
X-VG-WebCache
X-NWS-UUID-VERIFY
X-Pagely-Cache
X-From-Cache
X-Firefox-Spdy
X-CloudBurst-WordPress
X-CloudBurst-Frontend
X-UT-Cache
WebServer
X-Newrelic-Synthetics
X-Server-Response-Time
X-SiteDistrict-Cache
Realaction
X-GEO
X-Grid-Server
X-InDy-Memory
X-InDy-Query
X-MSU-SOURCE
SB-Site-Device
Actioncode
X-Vary-Options
LB
SB-Site-IE-VERSION
X-DN-Cache-Control
X-Origin-Upstream-Status
X-Geo-IP
X-ProBase-Server
X-Cache-Me-Harder
X-AppVersion
RSL-Trace-ID
X-Powered-By-Home.Pl
Prototype-RootPath
X-Web-Node
Nitro-Cache
X-Avvio-Cms-Cacheload
X-Tradeindia-SMgmt
X-Served
X-This-Proto
X-D-Time
X-Tradeindia-Request-GUID
X-Front-Cache
X-Amzn-Remapped-Content-Length
X-CloudBurst-Cache
X-Envoy-Upstream-Service-Time
X-BeResp-Ttl
Tesla.Performance
X-S-Misc
Page-Template
X-Stiffia-Cache
StatusCode
X-Generation-Time
X-Origin-Date
X-SCProxy
X-Processed
X-TLS-Version
X-SSL
X-Server-Generated
X-NewsFlow-Sitename
X-Ms-Request-Id
X-RunCloud-Cache
X-HEAD
Lookup-Cache-Hit
X-Compressed-By
X-From-Varnish
X-From-Varnish-Deploy
Backend-Powered-By
GranicusServer
X-MainProfileURL
X-HP-CAM-COLOR
X-Len
Progma
X-SID
X-Deity
X-MainProfileCategory
X-Cname-TryFiles
X-MainProfileName
X-MainProfileID
End-User-Country
X-Cache-LB
X-Content-Type
X-ACCELERATE
X-AISO-Cacheable
X-AISO-Cache
X-AISO-Server
X-Hit
X-Netrix-ID
X-Nginx-Page-Cache
X-UPSTREAM-Address
HSTS
CommercePlatform-Version
CDN-Uid
Ctx
OracleCommerceCloud-Sandiego
Generate-Time
OracleCommerceCloud-Version
X-Protected-By
X-Catalyst
X-Highwire-Sitecode
X-Directory-Script
X-Highwire-Smart-Code
X-Nginx-Request-Processing-Time
X-RequesterIP
X-Proxy-Cache-Key
X-Cache-Via
X-Route
ServerIP
Expiries
Session-From
ProxiaInstanceId
X-Distil-CS
NS-VaryByCustom-Key
CDN-RequestId
CDN-PullZone
X-Dynamic
X-Geo
Content-Sn
DB-Nickname
ModuleCacheType
X-Brought-To-You-By
X-Lb
X-Server-Hostname
X-AppServer-Cache-Rule
UrlWatchModule-Time
Nd
DbServerName
X-Sid
X-VTEX-Cache-Status-Janus-Edge
Request-Time
X-Backend-Host
X-UPServer
X-Sn-Servicetimems
X-Varnish-Cached
X-Varnish-Cached-TTL
CDN-CachedAt
VAR-Cache
X-Sorting-Hat-Expire-Cache
X-Ruby-Cluster-ID
X-B3-Traceid
X-B3-Spanid
RM-Cache-Control
X-Fpc
X-MCF-ID
X-UnsetCookies
X-Zendesk-Origin-Server
X-NodeID
X-Nginx
X-Pass-Through
X-PM-ID
X-Search-Id
X-PressLabs-Stats
X-Max-Age
X-Gate-Blk
X-I-V
X-Device-Item
X-Header
X-CPU-Time
X-Gate
X-Cachable
X-Src-Webcache
X-Time-Microsecs
Sl-Pgid
REFRESH
X-Appmachine-CreatedOn
X-Appmachine-Duration
X-Backside-Transport
X-Appmachine-Name
Prot
X-V-Cache
Key
X-VC-Debug
X-W3TC-Minify
X-We-Are-Hiring
X-WebKit-CSP-Report-Only
X-M-P
X-Csrf-Token
X-Rewritten-By
X-Render-Time
X-Test-Debug
X-Varnish-Grace
X-Q-S
X-XHTML-Minification-Powered-By
X-S-C
X-S-V
CDCHOST
X-Zendesk-User-Id
X-Built-By
X-Transaction-Name
X-Node-Id
X-ManagedFusion-Rewriter-Version
Arrow-RequestId
Cf-Ipcountry
Www.Aujourdhui.Com
VSID
Webserver
X-Blog
X-Cjtype
X-CD
ViewMode
V-TTL
X-M-V
X-Mw-Workerstats
ORIGIN-SERVER
ORIGIN-SITE
X-M-T
X-CloudBurst-Backend