Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Link
Last-Modified
Pragma
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
Age
X-Cache
Expect-CT
P3P
Content-Language
X-AspNet-Version
X-Pingback
Via
X-UA-Compatible
Upgrade
Access-Control-Allow-Origin
Content-Security-Policy
X-Cacheable
X-Varnish
Referrer-Policy
X-Request-Id
X-Adblock-Key
X-Check
X-Xss-Protection
X-Generator
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-Language
X-Template
X-Drupal-Cache
X-Buckets
X-Permitted-Cross-Domain-Policies
Alt-Svc
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Download-Options
X-Ac
X-Hacker
X-Cache-Hits
Host-Header
X-ShopId
X-Sorting-Hat-FeatureSet
X-Sorting-Hat-PodId
X-ShardId
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-Dc
X-Sorting-Hat-Section
X-Sorting-Hat-PrivacyLevel
X-Sorting-Hat-PodId-Cached
X-Alternate-Cache-Key
X-AspNetMvc-Version
X-Via
X-Served-By
X-Runtime
X-Powered-By-Plesk
X-Contextid
X-ServedBy
X-Amz-Cf-Id
X-PC-Key
X-PC-Hit
X-PC-AppVer
X-UA-Device
X-PC-Host
MS-Author-Via
X-PC-Date
X-Shopify-Stage
Access-Control-Allow-Headers
Content-Location
Access-Control-Allow-Methods
X-IPLB-Instance
X-Timer
X-Wix-Request-Id
X-Seen-By
X-Powered-CMS
X-TEC-API-VERSION
X-TEC-API-ROOT
X-TEC-API-ORIGIN
X-Rid
Status
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-User
CF-Cache-Status
Cartoon
X-FRAME-OPTIONS
X-Tumblr-Pixel-1
X-Backend
X-Tumblr-Pixel-2
X-Iinfo
Access-Control-Allow-Credentials
X-Ua-Compatible
X-Cache-Status
X-CST
X-WPE-Loopback-Upstream-Addr
Content-Encoding
X-Host
Powered-By
X-Cache-Hit
X-Endurance-Cache-Level
X-Port
X-Cache-Enabled
X-Mod-Pagespeed
X-CDN
X-Tumblr-Pixel-3
X-Logged-In
X-Drupal-Dynamic-Cache
Keep-Alive
X-Server
X-Server-Powered-By
X-Request-ID
X-DIS-Request-ID
X-Robots-Tag
X-Nginx-Cache-Status
X-Accel-Version
X-Proxy-Cache
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Turbo-Charged-By
X-LiteSpeed-Cache
P3p
X-Page-Speed
Content-Security-Policy-Report-Only
X-Content-Powered-By
X-Content-Digest
Request-Context
X-GitHub-Request-Id
X-FW-Hash
X-AH-Environment
X-FW-Server
X-FW-Type
X-FW-Serve
X-FW-Static
X-Rack-Cache
X-Tumblr-Pixel-4
X-Pad
X-Varnish-Cache
X-Hits
X-Webcom-Cache-Status
Access-Control-Expose-Headers
Edge-Control
X-BC-Stapler
X-XRDS-Location
X-Trace
X-Newrelic-App-Data
X-Node
SPRequestGuid
X-MS-InvokeApp
X-SharePointHealthScore
Cf-Railgun
Edge-Cache-Tag
X-Request-Country
X-HS-Cache-Config
WP-Super-Cache
X-HS-Content-Id
X-Amz-Request-Id
Allow
X-Amz-Id-2
MicrosoftSharePointTeamServices
X-CF-Powered-By
X-Died
Timing-Allow-Origin
X-Content-Security-Policy
Charset
X-Cache-Lookup
X-PHP-Backend
Access-Control-Max-Age
X-Fastly-Request-ID
X-INKT-URI
X-INKT-SITE
Request-Id
X-Backend-Server
X-FullPageCaching
X-Cnection
X-HS-Combine-CSS
SPIisLatency
SPRequestDuration
X-Edge-Cache-Key
X-Edge-Cache
X-Swift-CacheTime
Ali-Swift-Global-Savetime
MicrosoftOfficeWebServer
X-Swift-SaveTime
Composed-By
Rating
X-CDN-Pop-IP
EagleId
X-CDN-Pop
X-Tumblr-Pixel-5
Grace
X-Server-Name
X-DDC-Arch-Trace
X-NF-Request-ID
X-Device
X-SS-Conf
X-SS-Location
X-Safe-Firewall
X-SERVER
Served-By
X-Dw-Request-Base-Id
X-Tumblr-Content-Rating
X-Spip-Cache
Liferay-Portal
X-HeyJason
Permitted-Cross-Domain-Policies
X-Do-Not-Hack
X-Hyper-Cache
P-LB
P-WS
Front-End-Https
X-Cloud-Trace-Context
X-VCache
X-LiteSpeed-Cache-Control
X-OneAgent-JS-Injection
X-Kinsta-Cache
Surrogate-Control
X-Original-Date
X-Sol
X-Middleton-Display
Display
X-Vtex-Processado-Em
X-Cluster-Node
X-Loop
X-TNCMS
X-RateLimit-Remaining
X-RateLimit-Limit
X-RateLimit-Reset
Response
X-Middleton-Response
X-Clacks-Overhead
X-FB-Debug
X-StackifyID
Content-Style-Type
X-Jimdo-Instance
X-Jimdo-Wid
X-HOST
Public-Key-Pins
Content-Script-Type
X-Acc-Exp
X-Debug-Info
Feature-Policy
X-Amz-Version-Id
X-Age
X-Ruxit-JS-Agent
X-Firenze-Processing-Times
X-Magento-Tags
X-Goog-Hash
X-DNS-Prefetch-Control
X-Frame-Option
X-Tumblr-Pixel-6
Fpc-Cache-Id
X-WebKit-CSP
X-Cached
X-XN-Trace-Token
X-XN-XNHTML
X-DynaTrace-JS-Agent
X-Zen-Fury
Xkey
X-LW-Cache
X-Version
X-N-OperationId
PageSpeed
X-Px
X-User-Agent
WPX
X-ARC
X-Edge-Location
X-Cache-Config
Retry-After
X-Hostname
Refresh
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Generation
X-Goog-Metageneration
X-Goog-Storage-Class
X-Handled-By
X-Generated-By
X-Url
TCN
X-Topify-Platform
X-Dns-Prefetch-Control
Powered
X-Upstream
Fastcgi-Cache
X-Loopia-Node
X-Source
X-Magento-Cache-Debug
Rt-Fastcgi-Cache
Access-Control-Request-Method
X-B-Cache
X-Cached-By
X-Whom
No
X-VTEX-Cache-Status-Janus-ApiCache
X-VTEX-Janus-Router-Backend-App
X-Request-Time
X-Vtex-Remote-Cache
X-Accel-Expires
X-Vtex-Processed-At
X-Webserver
X-CacheServer
X-Powered-By-VTEX-Janus-ApiCache
X-EdgeConnect-Origin-MEX-Latency
X-MiniProfiler-Ids
X-FORWARDED-FOR
X-RESOURCE
X-URLSCHEME
X-ET-API-ORIGIN
X-ET-API-ROOT
X-EdgeConnect-MidMile-RTT
X-ET-API-VERSION
X-Fastcgi-Cache
X-Outils-CS
Last-Published
X-PhApp
X-CMS-Version
X-Varnish-HitMiss
X-Varnish-Count
X-SRCache-Fetch-Status
X-SRCache-Store-Status
ServedBy
X-Engine
X-Signature
X-Platform-Server
X-Application-Context
X-From
Product
X-Content-Options
X-ApacheServer
X-PERF
X-Developer
Warning
Imagetoolbar
X-Location-Id
Cache-Key
Pagespeed
X-AspNetWebPages-Version
Dmn
X-LBLID
Host
X-Varnish-Cache-Hits
X-Platform-Cluster
X-Platform-Processor
X-Platform-Router
X-Actual-URL
X-Cache-Key
X-Microcachable
X-Cache-Info
Fhost
X-Passed-To-DLL
X-Varnish-Beresp-Grace
X-Passed-To
X-Original-Request
X-Defender
X-Shop-Id
X-Varnish-Beresp-Status
X-Returned-From
X-Umbraco-Version
X-Varnish-Beresp-Ttl
Public-Key-Pins-Report-Only
X-Returned-From-DLL
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-F-Cache
X-Stale
X-Servedby
X-Forwarded-For
X-Device-Type
X-Cache-Age
Generator
X-Varnish-Host
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Ezoic-Cdn
X-Gateway-Skip-Cache
X-Returned-From-PostProcessResponse
X-Gateway-Cache-Key
X-Gateway-Cache-Status
X-URL
X-Magento-Cache-Control
X-S
X-NWS-LOG-UUID
X-Response-Time
X-SSLProxy
X-Translation
X-Microcache-Status
X-SSLUpstream
X-DynaTrace
Cache-Provider
X-Cache-Rule
X-HS-Content-Campaign-Id
X-Msg-2-Log
Alternate-Protocol
X-GUploader-UploadID
Content-Hash
X-Platform
X-Svr-Proxy
X-SVR-IIS
X-Powered-By-360WZB
X-Environment
Arr-Disable-Session-Affinity
Version
X-Correlation-ID
X-Hosted-By
Origin
X-Guploader-Uploadid
X-Dispatcher
X-Lambda-Id
X-Platform-Cache
X-Akam-SW-Version
SSPAppContext
X-Supported-By
X-Varnish-TTL
X-Duration
X-Dealeron-Original-Url
X-Micro-Cache
X-Cache-Tags
MIME-Version
X-DealerOn
X-Instart-Request-ID
X-Dealeron-Backend
X-BS
X-SO
X-I-Sp
X-Abgroup
X-Cache-Namespace
X-Sapient
Surrogate-Key
USPLoggingUUID
X-Via-JSL
Content-Disposition
X-Rnd
X-Server-ID
X-App-Status
X-Sucuri-ID
X-ServerName
RTSS
X-SSL-Cipher
X-NetCat-Version
WZWS-RAY
X-Track
X-Page-Cache
X-Microcache
Node
X-Server-Upstream
X-Art-Request-Id
X-ORACLE-DMS-ECID
S-Cnection
CF-Worker-Version
X-Cache-TTL
X-Sucuri-Cache
X-Powered-By-VelaWeb
X-SSL-Protocol
X-Client-IP
X-Vcap-Request-Id
Content-Encoding-Handler
X-Generated
X-Expires-Orig
X-Cache-Lifetime
X-Revision
X-VARITI-CCR
X-Powered-By-VTEX-Janus-Edge
X-Matrix-Proxy
X-Storage
X-Gamma-Serve
X-Matrix-Server
Powered-By-ChinaCache
X-Director
X-Debug
X-TransIP-Balancer
X-NewRelic-App-Data
X-Drupal-Cache-Tags
X-Front
X-I
SN
X-Varnish-RemainingLife
X-Edge-IP
X-Grace
X-Varnish-GracePeriod
X-Varnish-RemainingTTL
X-Varnish-ObjectSource
X-Varnish-Seen-By
X-TransIP-Backend
X-Cache-Control-Orig
Pool
X-App-Hosting
X-Cache-Debug
X-Vhost
X-Amz-Meta-S3cmd-Attrs
X-CSRF-Protection
X-Rocket-Nginx-Bypass
X-Github-Request-Id
X-Hypernode
X-Url-Base
X-LB-Server
DynaTrace
X-Varnish-Cacheable
Cache-Tags
X-Geo-Country
X-Cache-Engine
X-Discourse-Route
Server-Timing
X-Dispatch
FAI-W-FLOW
X-Daa-Tunnel
X-Recruiting
X-Cache-Only-Varnish
X-Flow-Powered
X-Rocket-Nginx-Serving-Static
Accept-Encoding
X-SV-Edge
X-SV-Duration
X-SV-FromDBCache
X-SV-Pid
X-SV-CreatedAt
Contao-Page-Layout
Wsr-Cache
X-SV-Nginx-Duration
X-TTL
X-NoCache
X-Varnish-Url
X-SRV
X-UPSTREAM
X-ATG-Version
X-Cache-Handler
X-Server-Id
X-Content-Encoded-By
X-Esi
SiteSpeed
X-Correlation-Id
X-SV-Cacheable
Cache
Src-Update
X-Now-Id
X-Nginx-Cache
X-Cache-Server
X-FTR-Request-ID
Update-Time
X-Forwarded-Proto
Cneonction
X-SV-Expires
X-SV-CacheTags
Strikingly-Cached
X-Locale
X-Country-Code
Service-Worker-Allowed
X-Drupal-Cache-Contexts
X-GeoIP-Country-Code
X-Cache-Type
Strikingly-Cache-Region
Strikingly-Cached-Version
X-Cache-Control
Req-Id
X-Pressidium-NinukisWP-Ver
Server-Name
X-Ttl
X-Varnish-Age
X-Unbounce-Variant
X-Unbounce-PageId
X-Server-Instance
X-Helper-Autoassign-All
ServerID
X-Unbounce-VisitorID
If-Modified-Since
X-Env
X-TransIP-Reserved
X-Route-Server
X-CJ-Soft
Lsrequestid
X-SmugMug-Values
Backend
Akamai-IP
X-SmugMug-Hiring
X-Cache-Level
X-FIRSTBase
Nodo
X-TTFB-L
X-TTFB
Smug-CDN
X-Trace-Id
X-Cache-Device-Type
X-NA-CachePolicy
Section-Io-Id
X-ORACLE-DMS-RID
X-Varnish-Backend
Edge-Control-Message
X-Content-Type-Option
X-IsCacheURL
X-Connection-Hash
X-Amz-Rid
X-Speed-Cache-Key
X-Speed-Cache
X-Transaction
X-Hiawatha-Cache
X-Firenze-Processing-Time
X-SRCache-Key
X-Twitter-Response-Tags
X-High-Performance
X-Varnish-Retries
X-CF-Passed-Proto
SEOMOZ
Author
MJ12bot
X-N
Https
X-Time
X-UD-Method
X-Varnish-IP
MC
X-GeoIP-Country-Name
X-Fastly-Request-Id
W
X-Akamai-Device-Model
X-Akamai-Device-Characteristics
X-Middleware-Start
CF-Worker-Script
X-Storage-Cache-Date
X-Orig-Vary
X-Storage-Cache-Expires
X-Magnolia-Registration
X-Service-Id
Pv
Use-Proxy
S
PICS-Label
Location
X-PwB-Node
X-BKSrc
X-Storage-Cache
X-Cache-TTL-Remaining
Accept-Charset
Custom-Header
X-Cache-Operation
X-Cache-Expires
Srv
X-Processing-Time
Dtk-Cache-Check-0
NnCoection
X-Litespeed-Cache-Control
X-Cache-Fix
X-TB-M
NetMindSessionID
Page-Completion-Status
X-Cache-PageType
Content-MD5
X-Empowered-By
Proxy-Connection
X-LB
X-CDN-Forward
X-Now-Cache
X-Amz-Storage-Class
X-RequestId
Qs-Cache
X-Disney-Akamai-Rule
X-Last-Modified
X-Rq
X-Cookie-Domain
AMF-Ver
X-ID
Backend-Timing
X-Analytics
FindLaw
X-Worker
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-Dynamic-Cache
X-PF-Uncompressing
X-Symfony-Cache
From-Origin
X-Akamai-ERRuleID
X-Key
Ram
X-Browser
X-Akamai-ERPolicy
Noq
X-Content-Age
Ramp
X-Srv
X-Adobe-Content
X-Real-Server
X-Adobe-Loc
X-Processed-By
Pics-Label
Edit
X-Webkit-CSP
HCVer
HAVer
X-ACMCache
X-GoCache-CacheStatus
X-NginX-Cache
Tracecode
X-Amz-Meta-Content-Md5
Ohc-File-Size
X-Proxy-Backend
X-FW
Xc-Version
X-Content-Security-Policy-Report-Only
ServerName
X-SP-Farm
X-Ruxit-Js-Agent
X-WEBSERVER
X-Origin
X-Varnish-Server
X-SP-UniqueName
X-ARRServer
X-Config-Blacklist-Version
X-WPL-DATA
X-BackendServer
X-CacheFROM
X-Sedo-Request-Id
X-Cache-Miss-From
Content-Transfer-Encoding
X-HW
X-FireWall-Port
X-Nbs
X-Yadis-Location
X-Frontend
Cached
X-Redman-Backend
X-Redman-Final-Url
Web-App-Origin-Name
X-Varnish-Hits
X-Hrouter
RequestId
X-Avg-Cookie-Expires
X-AVG-Country-Code
X-Akamai-Edgescape
X-Remote-Addr
CacheControlHeader
X-Cache-CFC
X-Server-IP
X-Hstore
SRV
Local-Info
X-Webstats-RespID
X-Role
X-Balanceador
Prama
Content_type
X-Origin-Date
Server-Info
X-Stage
Lb
Url
Cm-Server
X-Sys-Req-ID
X-Drectory-Script
Access-Control-Allow-Method
IBM-Web2-Location
X-CB-Server
Hummingbird-Cache
A-Powered-By
X-UnsetCookies
Nopic
X-Runtime-Memory
X-Nitro-Cache
X-Distributor
X-ServerID
X-SDS
X-Pantheon-Environment
Surrogate-Key-Raw
X-CLOUD-TRACE-CONTEXT
X-A
X-AEM
X-Cache-Ttl
X-Pantheon-Az
X-V
X-Pantheon-Phpreq
X-Pantheon-Site
X-Generated-Timestamp
X-PRAM
Max-Age
X-Request-Uri
X-Ratelimit-Limit
Referer
X-Path-Route
X-WR-Flags
X-Appmachine-Environment
X-Culture
X-VCS-Cacheable
X-VCS-Ttl
Proxy-Agent
X-Varnish-Id
X-RealServer
X-Ratelimit-Remaining
Frame-Options
X-Session-ID
Accept-CH
X-Span
IM-Version
Accept-Language
X-Yottaa-Metrics
X-Yottaa-Optimizations
X-Unique-ID
X-4ormat-Cacheable
X-Source-ID
X-Akamai-Transformed
Report-To
X-Force
X-MCB-Server
Drupal-Pagecache-Memcache
X-Varnish-Ttl
X-Distil-CS
Pf.Web.Request.Id
X-Oneagent-Js-Injection
WWW-Authenticate
X-Nginx-Dummy
X-ServerIndex
X-CacheDebug
X-Shield-Request-Id
X-Framework
X-LW-Web-Server
X-Hit-Cache
SHInfo
X-App-Server
AsisCache
X-Pagename
X-Cache-2
Lookup-Cache-Hit
X-ClientSide-Caching
X-Cacheable-TTL
X-Location
SVR
X-JG-Page-Cache
Environment
IISExport
Request-Country
X-CACHE-TTL
X-Detected-Device
Request-EU
Home
X-Hostinger-Node
X-Hostinger-Datacenter
X-Debug-Token
XDomainRequestAllowed
X-Varnish-Backend-Beresp-Backend
Dispatcher
DNNOutputCache
X-EPiphany-Vid
X-GeoIP
X-HTML-Minification-Powered-By
X-Varnish-Hostname
Beyond-Iis
X-Client-Vid
X-Id
X-Plat
X-Client-Image-Vid
X-Runtime-Affili
X-Atraveo-Expires
X-Provisioner-Version
X-NWS-UUID-VERIFY
X-Backend-Status
Swift-Performance
Disablevcache
X-Atraveo-Cache-Control
Serverid
X-Consent-Required
X-Atraveo-ETag
X-Atraveo-Zone
X-Vcache
Machine
Front
X-App-Runtime
X-NginX-Upstream
X-Atraveo-TTL
X-Atraveo-Set-Cookie
CDN-Cache
X-LP
X-Forwarded-Host
X-Domain-Checked
X-Atraveo-Varnish-Server-Id
X-Cache-Doesi
X-FastCGI-Cache
X-Atraveo-From-Varnish-Cache
Cteonnt-Length
X-Atraveo-Param-Rm
Identity
Dis-Env
Nginx-Cache
X-LB-Node
X-Real-IP
X-Via-NSCOPI
X-Nginx-Host
X-HeBS-Cache-Status
COMMERCE-SERVER-SOFTWARE
Proxy-Cache
X-Desc
Edgecast
CS-SERVER
Resin-Trace
X-Proxy-Cache-Key
X-Cache-Dispatchercachecontrol
X-Cache-Dispatcherpragma
X-HashTwo
X-NginX-Server
X-B2f-Not-Route
X-Actindo-Rs
X-PBY
X-Aramark-SID
X-Proxy
Cmstype
Il-Cl
Cmsid
X-E
X-Data-Request
X-SE-Debug
X-Varnish-Cache-Local
Play-Detected-UserAgent
Nitro-Cache
X-Fedora-School-Id
X-Upgrade-Enabled
*
X-Dw-Trace-Id
X-Aramark-CSID
YF-ID
X-Timestamp
X-HostName
X-TKP-SRV-ID
X-GSL-Server
Play-Detected-Device
X-ZSITES-DNS
X-VC-Enabled
X-FPC
Upgrade-Insecure-Requests
X-Amcomm-Site
X-Flex-Tags
X-Flex-Tag
AETN-Country-Name
X-Map-Context
AETN-Continent-Code
AETN-Country-Code
X-Flex-Lastmod
Access-Control-Request-Headers
X-Rack-CORS
X-Flex-Community
X-Amz-Id-1
X-Flex-Evend
Copyright
X-Flex-Lang
X-Flex-Evstart
AETN-City
AETN-Area-Code
AC-ELC
X-Via-S
Paypal-Debug-Id
X-WebNode
Access-Control
Myheader
X-Adnet
X-Soro
Traffic-Origin
X-JSESSIONID
X-Webcelerate
X-Proxy-Cache-Control
X-Req-Head-Response
X-Instance
X-RiS-PX
Firespring-Website-Id
X-Shard
Num
AETN-State-Code
X-HA-Backend
AETN-Postal-Code
WP-FROM-CACHE
AKA-DEVICE
CDN-CachedAt
AETN-DEVICE
CDN-RequestId
X-Actindo-Request-Id
X-RiS-UFDI
CDN-PullZone
X-Varnish-Debug-Age
X-Varnish-Debug-TTL
X-Actindo-Thread-Id
AETN-EU
VANITY-HOST
AETN-Latitude
AMP-Redirect-To
X-HA-Frontend
CDN-Uid
AETN-Longitude
X-Cocoon-Version
X-Xml-Http-Blocked
NODE
X-ESI
X-Ms-Request-Id
X-HydroSheep
Adm-Server
X-SERVER-NAME
Magicmarker
X-Middleton-Pagespeed
Cleartype
MICROSOFTOFFICEWEBSERVER
Bios
Prot
Server-ID
NLCacheNote
X-IIJ-Cache
X-Envoy-Upstream-Service-Time
X-Blog
X-Static
X-Custom-Name
X-App
X-M-Log
X-SH-Cache-Status
X-Hit
Thanks
Srv-Name
Fastly-Backend-Name
X-M-Reqid
X-WEBMGR-CACHE
X-Confluence-Request-Time
X-Varnish-Grace
X-Middleton-PageSpeed
X-FastCGI-Cache-Status
X-Access-Control-Allow-Origin
CLMOB
GranicusServer
Eomportal-Instance
Pramga
X-Qnm-Cache
TC-S-Cache-M
X-CacheID
X-Served-Server
X-Instance-Id
X-DynamicCache
TC-S-Cache
TC-Cache-U
X-Upstream-Status
X-Origin-Cache
X-Upstream-Backend
TC-Cache
X-Secret
TC-Cache-IC
X-Depends
X-Test
X-Route
X-Jphone-Copyright
X-Unique-Id
X-OpenCart-Lightning
Locale
X-Gyrobase-Publication
X-GeoIP-Country
PServer
X-Garden-Version
X-DSMX-Render-MS
X-DSMX-Rewrite-MS
X-Frames-Options
X-Goog-Meta-Replace
X-Appversion
X-LBPoolMember
X-Amz-Meta-S3b-Last-Modified
X-Reflector-Cache
X-Reflector
X-Resource
Section-Io-Origin-Time-Seconds
Section-Io-Origin-Status
X-Cf-Powered-By
X-WebServer
X-Purge-URL
X-Purge-Host
X-ACCELERATE
X-DN-Cache-Control
X-CAPServer
X-Amzn-Trace-Id
X-Compress-Hint
NGX
X-Amzn-RequestId
Fastly-Debug-Digest
X-Resolver-IP
X-ETag
X-MAT-GEO
X-Status
X-Amz-Apigw-Id
Aurora-Node
X-Goog-Meta-Policy
X-AF-Userserver
HitType
FRONT-END-SECUREBROWSER
IES-Server
Load-Balancer
Cf-Ipcountry
X-Generated-Time
X-Cache-Date
X-Client-Id
MageStack-Tag
MageStack-PageSpeed
X-ReqId
X-Dev
X-Cms-Mode
MageStack-Magento-Version
X-Cache-Me-Harder
Worker
Viewport
MageStack-Web-Node
MageStack-Cache-Lifetime
X-Directory-Script
X-We-Are-Hiring
MageStack-Area
Provider
X-Nginx
X-Appid
X-Gateway-Rate-Limit-Delayed
MageStack-Cache
X-IP
MageStack-Config
MageStack-Debug
MageStack-Cacheable
MageStack-Cache-Status
MageStack-Cache-Hits
AMP-Access-Control-Allow-Source-Origin
MageStack-Loadbalancer
X-Smartcache-Keys
X-Server-Addr
X-Varnish-ID
X-AOL-HN
X-WP
X-UUID
X-Serverid
Device
X-UD-METHOD
X-Cache-Detail
X-Smartcache-Timeout
X-FORWARDED-PROTO
VServer
ScoreTracker
TP-L2-Cache
RN-Server
X-Cache-Extended
TP-Cache
X-SDE-Name
X-Geo
X-Hosting-Env
X-Pj-Cache-Status
X-Az
X-Activity-Id
X-Cname-TryFiles
X-Cache-LB
X-Oferteo-Domain
X-Deity
X-Debug-Message
X-Processed
X-Expires
X-HA
X-Batcache
MS-CV
X-Tag-Playlist
X-Time-Spent
X-RunCloud-Cache
Generate-Time
HTTPS
WN
Tesla.Performance
Tempo
X-Served
X-This-Proto
X-Resty-Request-Id
X-Cache-On
X-SmartBan-Host
X-Refresh
X-Highwire-SessionId
X-SmartBan-URL
X-Streams-Distribution
BALANCEDTO
Arrnode
XX
X-Highwire-RequestId
X-Cache-Varnish
X-ENV
X-CRA-DC
X-Cdn-Forward
X-Fstrz
X-Mobilized-By
X-WR-MODIFICATION
X-Response
X-Rebelmouse-Cache-Control
Filters
X-SAPP
Server-Id
IP-Addr
X-VC-Cacheable
X-Cache-Node
SWS-Security
X-Cache-Var-Map
X-Cache-Var
,
X-Page
HitInfo
X-Scheme
X-Info
DrivedBy
X-ASAP-Age
X-ASAP-Cache
X-Nx-All
X-Nx
X-Clara-ASAP
X-DB-Content-Length
X-Cache-Action
ClientIP
Apachenode
X-WA-Info
F5-IpCliente
Gzip
Session-Id
ProxiaInstanceId
NB-Cache
X-Req-Counter
X-RAMCache
Amfplus-Ver
X-WN-ClientGroup
X-V-Cache
CommunityServer
Origin-Vm
X-Goog-Meta-Goog-Reserved-File-Mtime
X-CH-Device
Provided-Host
VC-NoCache
X-Avvio-Cms-Cacheload
X-Proxy-Skip
X-Container
X-Compressed-By
Yoncu-Errno
Access-Control-Allow-Header
X-Box
N365rili
D
X-Cluster
X-UPSTREAM-Address
X-DataDome
X-Catalyst
X-Cache-FS-Status
X-Dispatcher-Number
X-MyName
X-PBS-Fwsrvname
X-PBS-Appsvrname
X-PBS-Appsvrip
X-UT-Cache
X-FromPodPressCache
Response-Time
X-WebKit-CSP-Report-Only
Ssl-Proxy-Server
ViewMode
X-Autoru-App-Id
VSID
X-W3TC-Minify
X-Title
X-Protected-By
X-NodeID
X-Render-Time
X-Rewritten-By
X-Session-Reinit
X-Autoru-Host
X-Cache-HT
X-Lb
X-UA-Bot
Now
PB-PID
PB-RID
X-Src-Webcache
X-Rule
X-Mighty-Proxy
X-GZip
X-Optimization
X-PM-ID
X-Podname
X-Netrix-ID
X-ManagedFusion-Rewriter-Version
X-Origin-Server
MachineName
X-CSRF-Token
X-ProcessESI
X-RemovedCookies
X-Proxy-Server
MwpReleaseVersion
X-Nginx-Request-Processing-Time
X-Cache-Via
SS
Pragrma
X-Highwire-Sitecode
X-Highwire-Smart-Code
X-Serv
X-Server-Generated
X-Captured
X-Built-By
X-Country
X-Gannett-Site-Version
X-Layout
X-BServer
X-BPool-Back
X-Zendesk-Origin-Server
Actual-Object-TTL
X-Zendesk-User-Id
From
X-Airee-Node
PBS
X-VC-TTL
Hosted-By
X-Wodby-Node
X-Beatles
X-Domino-CacheValidationWithETagReason
X-Domino-CacheValidationWithETagResult
X-Vol-Mrp
X-Vol-Correlation
X-Mobile-Rewrite
X-Grid-Server
X-Now-Trace
X-Origin-Upstream-Status
X-Vary-Options
X-NoIndex
X-Served-From
NS-VaryByCustom-Key
ID
X-Application
X-Cache-ID
X-Cache-Time
Ews
EQ-Cache
X-Shopware-Allow-Nocache
X-Shopware-Cache-Id
X-TLS-Version
X-Varnish-Ip
X-Global-Transaction-ID
Ttl
X-Backside-Transport
X-Firefox-Spdy
REFRESH
X-VERSION
X-Sorting-Hat-Expire-Cache
Og
X-Dynatrace-Js-Agent
X-DevSrv-CMS
X-Origin-Name
X-Clx-Request
X-Bip
X-SERVER-ID
X-MSU-SOURCE
Keywords
Xc
X-VTEX-Cache-Status-Janus-Edge
X-Varnish-Action
Z
Description
X-Ms-Version
X-WHO
X-Node-App
X-MCF-ID
X-Flash-Messages
X-TNCMS-Bot-Tier
X-EC2-Instance-Id
X-Built-With
NtCoent-Length
X-Batcache-Reason
X-UPServer
X-PageCache
X-Varnish-Cached-TTL
MSThemeCompatible
MSSmartTagsPreventParsing
Server-Ip
StatusCode
X-Hosting
Id
X-BIT-Node
ModuleCacheType
X-Amz-Meta-Version-Id
X-Cache-Id
Httpd-Identifier
X-Varnish-Cached
X-Varnish-Cache-Control
X-Policy
X-PHP-Response-Code
X-Proxy-Id
ServerSignature
X-Server-Hostname
ServerTokens
X-SSLTerm-Server
X-AWS
TTL
X-Croise-Owner
Tk
X-ServiceProvider
SB-Site-IE-VERSION
Origin-Edge-Control
X-Skip-Cache
Content-Sn
Origin-Cache-Control
X-UA
Apple-Itunes-App
Content-Generator
SB-Site-Device
SB-Cache-Remaining
SB-Cache-Life
AddDefaultCharset
X-HEAD
X-Cache-TTL-Current
Web-Server
X-Amzn-Remapped-Content-Length
X-Beluga-Record
X-Beluga-Response-Time
Cache-Cookie-Set-Lfrom
X-Geoip-Country-Name
X-InstanceId
NEL
CINC-Endpoint
X-Beluga-Cache-Status
X-Beluga-Node
X-Beluga-Response-Time-X
X-Beluga-Status
X-Itkg-Cache-Tags
Language
X-Request-Processing-Time
X-Request-Received
Www.Aujourdhui.Com
X-Cjtype
Cache-Cookie-Set-Idcheck
Cache-Cookie-Set-From
X-VC-Hash
X-Beluga-Trace
X-HS-Content-Group-Id
SERVER-NAME
X-Agent
X-Pool
X-Instance-Name
X-Meta-Imagetoolbar
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-VC-Cache
X-CACHE-KEY
X-Cache-TTL-Age
X-AppServer-Status
X-Firewall
X-Geo-IP
X-Meta-MSSmartTagsPreventParsing
X-Meta-MSThemeCompatible
X-XHR-Current-Location
X-Enhanced-By
X-Artvisual-Server
X-LAKANA-AB
Page-Template
NZSpeedy
X-Proto
X-Ser
X-SSL-Host
WP-AdvCache-MemCached
X-VC-Debug
Content
X-ORIKEY
X-Vid
X-Max-Age
X-ENDPOINT
X-APIAUTH-VAL
X-APIVERSION
X-Transaction-Name
X-T
X-Header
X-Varnish-Debug-Hits
X-Pageid
X-Search-Id
X-PressLabs-Stats
X-ROUTING
Value-Of-Url
Purge-Cache-Tags
X-Rocket-Nginx-Reason
X-SCM-Server-Number
X-Rocket-Nginx-File
X-Powered-By-ADS
X-Node-Id
X-Pass-Through
X-Test-Debug
SINA-TS
Fastly-Restarts
Hit-Count
X-XHTML-Minification-Powered-By
X-Varnish-Cache-Ttl
SINA-LB
X-Ghost-Cache-Status
X-Fastly-Backend-Reqs
X-Reqid
X-Router
MageStack-Cache-Lifetime-Sent
MageStack-Cache-Warning
X-InDy-Time
MageStack-Last-Modified
X-SV
X-Telligent-Evolution
X-Nws-Log-Uuid
X-Beget-Proxy
X-Custom-Header
VAR-Cache
X-Varnish-URL
TestCC
X-InDy-Query
X-InDy-Memory
X-ZORequestID
ServerIP
PROGMA
X-B
Cache-Ctrol
X-Beresp-Ttl
Session-From
Sl-Pgid
X-From-Cache
X-HS-Status
X-ProBase-Server
X-Requestid
X-Always-Cache
X-NMT-Proxy
X-OCTOPOD
X-Newrelic-Synthetics
X-Client-Ip
X-Phpwcms-Page-Processed-In
X-Phpwcms-Release
X-Apache2-RT-MicroSec
X-Rack-Cors
X-DDM-SERVER-UPDATED
X-DDM-SERVER
X-Obvious-Tid
X-Amz-Meta-Cb-Modifiedtime
X-Obvious-Info
X-Nginx-VM-RT
X-Machine
X-Cdn-Origin
X-Sid
X-SilverStripe-Cache
TYPO3-Sitename
TYPO3-Pid
UrlWatchModule-Time
Webserver
X-AppServer-Cache-Exception
X-Amzn-Remapped-Date
SBSS
Progma
X-Thanos
X-SuperCache
X-VG-WebCache
X-AMAZEEIO
No-Cache
X-7d-Trace-Id
X-7d-Instance-Id
X-Abuse
316pxxline
HSTS
Ohc-Response-Time
HA-Status
Powered-By-115
262prline
259pxline
X-Stiffia-Cache
X-Dck
129prxHost
135prxHost
196prxHost
CDCHOST
X-Author
CommercePlatform-Version
AR-SID
X-Page-Cacheable
OracleCommerceCloud-Sandiego
Requested-Host
OracleCommerceCloud-Version
AR-PoweredBy
AR-CACHE
X-SATserver
X-User-Agent-Tier
X-RequesterIP
Xxline
AR-ATIME
X-AppServer-Cache-Rule