Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Connection
Set-Cookie
Cache-Control
X-Powered-By
Vary
Expires
Content-Length
Last-Modified
Pragma
Accept-Ranges
Link
ETag
X-Content-Type-Options
X-Pingback
P3P
X-XSS-Protection
X-Frame-Options
X-AspNet-Version
X-Cache
Content-Language
Age
CF-RAY
X-UA-Compatible
X-Adblock-Key
Via
Keep-Alive
Strict-Transport-Security
X-Varnish
Access-Control-Allow-Origin
X-Check
X-Language
X-Template
P3p
X-Buckets
X-Cacheable
X-Generator
Content-Location
X-Drupal-Cache
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Iinfo
X-Powered-By-Plesk
X-Request-Id
MS-Author-Via
X-Type
X-Pass-Why
X-Cache-Group
X-Runtime
Status
WP-Super-Cache
X-Powered-CMS
Ngpass-Ngall
Content-Security-Policy-Report-Only
X-Permitted-Cross-Domain-Policies
Host-Header
X-UA-Device
X-Cache-Hits
X-Download-Options
Access-Control-Allow-Credentials
X-ShopId
X-Alternate-Cache-Key
X-Dc
X-ShardId
X-Mod-Pagespeed
X-Tumblr-User
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Via
X-Tumblr-Pixel-1
Access-Control-Allow-Headers
X-Logged-In
X-Request-ID
X-Pad
X-Backend
X-Tumblr-Pixel-2
Access-Control-Allow-Methods
X-ServedBy
X-ContextId
X-Served-By
X-PC-Key
X-PC-Hit
X-Host
Content-Security-Policy
X-CDN
X-Cache-Hit
Powered-By
X-Port
X-Tumblr-Pixel-3
Upgrade
X-PC-Date
X-PC-AppVer
X-PC-Host
X-Robots-Tag
X-Server
X-Rack-Cache
X-Cache-Lookup
X-Cache-Status
MicrosoftOfficeWebServer
MicrosoftSharePointTeamServices
X-Accel-Version
SPRequestGuid
X-SharePointHealthScore
X-Varnish-Cache
X-Page-Speed
X-Request-Country
X-Safe-Firewall
X-MS-InvokeApp
X-XRDS-Location
Rating
Content-Encoding
X-Amz-Cf-Id
X-Cnection
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
X-Tumblr-Content-Rating
X-AH-Environment
X-SERVER
CF-Cache-Status
X-Turbo-Charged-By
X-Tumblr-Pixel-4
X-W-DC
X-FullPageCaching
X-Webserver
X-Timer
X-Served-From-Cache
X-GitHub-Request-Id
X-Content-Powered-By
X-PhApp
X-Content-Digest
X-INKT-SITE
X-INKT-URI
X-Cache-Enabled
Public-Key-Pins
Request-Id
Composed-By
X-Firenze-Processing-Times
Served-By
SPIisLatency
SPRequestDuration
Alt-Svc
X-Proxy
X-Amz-Id-2
X-Amz-Request-Id
X-Server-Powered-By
Cf-Railgun
Liferay-Portal
X-Proxy-Cache
Permitted-Cross-Domain-Policies
X-HeyJason
X-Hyper-Cache
Timing-Allow-Origin
X-Spip-Cache
X-Styx-Req-Id
X-Styx-Version
X-Pantheon-Styx-Hostname
X-Pantheon-Endpoint
X-Node
X-Server-Name
Access-Control-Max-Age
X-CF-Powered-By
X-Tumblr-Pixel-5
Charset
Access-Control-Expose-Headers
X-XN-Trace-Token
X-XN-XNHTML
Content-Script-Type
X-Swift-SaveTime
X-Swift-CacheTime
Content-Style-Type
EagleId
Content-MD5
Refresh
X-Content-Security-Policy
X-Hits
X-FW-Hash
X-AWS-Id
X-Umbraco-Version
X-Gateway
X-Beta
X-VWS-Id
X-LJ-Flow-ID
X-Clacks-Overhead
Access-Control-Allow-Method
X-FB-Debug
Cartoon
X-Fastly-Request-ID
X-FW-Type
X-FW-Serve
X-FW-Static
Public-Key-Pins-Report-Only
Grace
X-Backend-Server
X-VCache
X-Powered-By-360WZB
X-Jimdo-Wid
X-Jimdo-Instance
X-Device
X-Cache-Server
X-Dw-Request-Base-Id
X-DDC-Arch-Trace
Real-Hostname
X-Loop
X-User-Agent
X-Cloud-Trace-Context
X-Generated-By
X-Cache-Result
X-TNCMS
X-MiniProfiler-Ids
X-Cache-Config
X-Cached-By
X-Tumblr-Pixel-6
X-Px
X-CDN-Pop-IP
X-CDN-Pop
X-Drupal-Dynamic-Cache
X-Cached
X-Outils-CS
X-Age
X-DynaTrace-JS-Agent
PageSpeed
X-Url
X-Hostname
X-Whom
NS-RTIMER-COMPOSITE
X-CMS-Version
X-ServerName
TCN
X-URL
X-Do-Not-Hack
X-Forwarded-For
Response
Fpc-Cache-Id
X-DynaTrace
Surrogate-Control
X-WebKit-CSP
X-Middleton-Response
X-Middleton-Display
Display
X-Sol
Fastly-Debug-Digest
X-LiteSpeed-Cache
Edge-Control
Page-Completion-Status
X-Handled-By
X-Recruiting
Imagetoolbar
DynaTrace
ServerName
ServedBy
Magicmarker
X-Msg-2-Log
Rt-Fastcgi-Cache
X-CDN-Geo
X-CDN-Geo-IP
X-CDN-Any-IP
X-AspNetWebPages-Version
X-Expires-Orig
Product
X-Micro-Cache
X-Content-Options
X-Country-Code
X-HOST
X-TTL
IBM-Web2-Location
X-From
Fhost
X-Ruxit-JS-Agent
Generator
X-NetCat-Version
Access-Control-Request-Method
X-Content-Encoded-By
X-Hosted-By
X-Varnish-Host
Powered-By-ChinaCache
X-Matrix-Proxy
X-Matrix-Server
X-Varnish-Cache-Hits
Alternate-Protocol
X-Server-ID
X-Returned-From-DLL
X-Passed-To
X-Passed-To-DLL
X-App-Hosting
X-Returned-From
X-Actual-URL
X-Original-Request
X-Firenze-Processing-Time
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Status
X-Varnish-Beresp-Grace
X-ApacheServer
X-Passed-To-BeforeDispatch
X-Stale
X-Passed-To-PostProcessResponse
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Cache-TTL
X-Track
Akamai-IP
X-Version
Content-Hash
X-Varnish-TTL
Front-End-Https
Content-Encoding-Handler
X-I
USPLoggingUUID
X-UD-Method
X-FORWARDED-FOR
X-Origin
Ag-Server-Time
Ag-Send-Time
Ag-Execution-Time
X-ATG-Version
X-ChromeLogger-Data
X-Varnish-Backend
Powered
X-Daa-Tunnel
X-PERF
X-SDS
Content-Disposition
X-Developer
X-S
X-Varnish-Cacheable
MIME-Version
Node
X-Cache-Rule
X-CacheServer
X-Platform
X-Director
X-Microcachable
X-App-Status
X-Cache-Age
X-Cdn
Surrogate-Keys
X-Art-Request-Id
X-Cache-Control-Orig
X-BS
X-I-Sp
X-Cache-Info
Lsrequestid
Proxy-Connection
X-Gamma-Serve
No
X-Powered-By-VTEX-Janus-ApiCache
X-Powered-By-Server
X-Vtex-Processed-At
X-Vtex-Remote-Cache
X-Vtex-Processado-Em:
X-VTEX-Janus-Router-Backend-App
X-VTEX-Cache-Status-Janus-Edge
X-VTEX-Cache-Status-Janus-ApiCache
X-Powered-By-VTEX-Janus-Edge
X-Abuse
X-Duration
X-Cache-Debug
X-Request-Time
X-RESOURCE
X-URLSCHEME
X-DefendeR-Status
X-DefendeR-Runtime
Host
X-CDN-Node
X-CDN-Cache-Status
X-FW
X-SRCache-Fetch-Status
X-Varnish-Age
X-SRCache-Store-Status
X-Source
Retry-After
Origin
Content-Security-Policy-Rerport-Only
X-Front
X-Route-Server
X-PwB-Node
X-Location-Id
X-Rocket-Nginx-Bypass
X-Drectory-Script
X-NoCache
Proxy-Agent
Webluker-Edge
X-Device-Type
Buuteeq-Source
Pics-Label
X-Revision
X-Translation
X-Response-Time
X-Cache-Expires
X-Mobilized-By
ServerID
X-Microcache-Status
Fastcgi-Cache
X-Time
Location
X-CJ-Soft
X-Frontend
X-Vcap-Request-Id
Version
X-Geo-IP
X-ServerID
SN
NetMindSessionID
PICS-Label
X-Instart-Request-ID
Accept-Encoding
X-Fastcgi-Cache
X-Cache-Tags
X-Cache-Operation
CC-CACHE
RTSS
Accept-Charset
X-Geo-IP-Region
X-Geo-IP-Country
X-Geo-IP-Metro
X-Geo-IPV
VAR-Cache
X-Page-Cache
X-B-Cache
Server-Info
Cache
X-Domain-Checked
X-Trace
X-Provisioner-Version
X-Speed-Cache
X-Purge-Host
AMF-Ver
Req-Id
SID
X-Trace-Cache
X-Cookie-Domain
X-Upstream
X-Real-Server
Mobiquo-Is-Login
X-ClientSide-Caching
X-Dispatch
Qs-Cache
X-Grace
X-Processed-By
X-Yadis-Location
X-SV-Pid
X-SV-Expires
X-Xrds-Location
X-SV-Nginx-Duration
X-Akamai-Device-Characteristics
X-SV-FromDBCache
Content-Transfer-Encoding
X-SV-Edge
X-SV-CacheTags
X-Goog-Hash
X-ACMCache
X-Akamai-Device-Model
X-Cache-Key
X-Varnish-Hits
X-Cache-Lifetime
X-Libra-UpstreamHost
X-SV-Duration
X-SV-CreatedAt
X-Magnolia-Registration
Arr-Disable-Session-Affinity
X-Amz-Meta-S3cmd-Attrs
X-Engine
X-Server-Response-Time
Filter-Revision
X-Varnish-Server
NtCoent-Length
X-UPSTREAM
X-Platform-Router
X-DNS-Prefetch-Control
X-Platform-Processor
X-Purge-URL
X-Speed-Cache-Key
X-SE-Debug
X-GeoIP-Country-Name
X-Orig-Vary
X-AOL-HN
NODE
X-GeoIP-Country-Code
X-Blog
SVR
Last-Published
X-Cache-Doesi
Lfy
Cxy-All
X-Varnish-Grace
X-Client-IP
HAVer
Logging-CorrelationId
X-Origin-Id
WSR-Cache
X-N
HCVer
X-Nitra-Side
A-Powered-By
X-Discourse-Route
Nitro-Cache
X-AbeBooks-Version
X-PF-Uncompressing
X-WR-Flags
X-LiteSpeed-Cache-Control
IISExport
X-Server-Upstream
Thanks
X-NginX-Cache-Status
X-NginX-Upstream-Status
X-NginX-Node
X-NginX-Upstream-Response-Time
X-NginX-Upstream-Addr
X-Nginx-Cache
X-Processing-Time
X-Varnish-RemainingTTL
COMMERCE-SERVER-SOFTWARE
X-Sucuri-ID
X-Varnish-Hostname
X-Varnish-Seen-By
X-Litespeed-Cache
Srv
X-Hypernode
Author
X-Distributed-By
X-Srv
X-Varnish-RemainingGrace
X-Cache-Engine
Hamster
LBVIS
X-Varnish-Action
X-Session-Reinit
X-Debug
Frame-Options
X-JG-Page-Cache
X-FIRSTBase
X-Ttl
X-Varnish-IP
X-Newrelic-App-Data
X-Mobile-URL
X-Sys-Req-ID
X-Pagename
X-Grid-Server
X-AOL-SNH
X-BackendServer
Allow
X-Hit-Cache
X-Varnish-Debug-Age
Cm-Server
CacheControlHeader
X-StackifyID
X-Aicache-OS
X-Framework
X-NB-Cached-Page
X-Cookie
X-Obvious-Tid
X-Directory-Script
Host-Service
X-Nurl
X-NFE
X-Nhost
X-Empowered-By
X-Obvious-Info
Tk
X-SmugMug-Values
X-SmugMug-Hiring
X-LW-Web-Server
Smug-CDN
X-Env
X-TTFB
X-Prefetched
X-Flow-Powered
X-SmartBan-URL
X-SmartBan-Host
SSPAppContext
Keywords
Cache-Key
X-Symfony-Cache
X-Highwire-SessionId
BALANCEDTO
X-Do-Esi
SRV
X-Highwire-RequestId
X-TTFB-L
X-LB
Nodo
Ibf5scheme
X-Platform-Cache
Server-Name
X-Supported-By
X-Yottaa-Metrics
X-Yottaa-Optimizations
Mime-Version
X-Cache-Control
Id
S
S-Cnection
X-Unique-ID
X-Amz-Version-Id
X-XTM-Node
X-IsCacheURL
X-Garden-Version
X-Machine-Name
X-Adobe-Loc
X-Twitter-Response-Tags
X-Cache-On
X-Varnish-HitMiss
X-Connection-Hash
X-Varnish-Count
Beyond-Iis
X-TempDebug
LBC
X-Adobe-Content
X-Transaction
X-Varnish-Debug-TTL
X-Resolver-IP
X-Dynatrace
Rewriter
X-App
X-Storage
Front
X-App-Server
X-Src-Webcache
X-Plat
X-WP
XDomainRequestAllowed
X-Hosts-Backend
X-Smartcache-Timeout
X-APP
WWW-Authenticate
X-Smartcache-Keys
X-Ob-Mode
X-Bettercache-Proxy
X-Amz-Storage-Class
X-Cf-Powered-By
X-CacheResult
X-Uid
X-NginX-Cache
X-Object-Id
Description
Backend
X-NginX-Server
WP-AdvCache-MemCached
X-Cache-TTL-Remaining
X-Balanceador
X-Cache-Keep
CT
W
Set-Cookie2
X-Object-Type
X-Config-By
X-Atraveo-Zone
X-Atraveo-Param-Rm
X-Atraveo-From-Varnish-Cache
X-Accel-Expires
X-WR-MODIFICATION
X-WA-Info
X-Atraveo-Cache-Control
X-Varnish-Esi-Method
X-Content-Age
X-Atraveo-Expires
X-Real-IP
SiteName
X-Atraveo-ETag
X-Atraveo-TTL
X-Cache-PageType
X-Cache-Fix
X-Atraveo-Set-Cookie
X-Atraveo-Varnish-Server-Id
X-Varnish-Esi-Access
X-Cache-CFC
X-Node-Name
X-Distributor
Cneonction
X-Jphone-Copyright
X-Analytics
X-Content-Security-Policy-Report-Only
X-Vary-Options
Backend-Timing
Ksid
X-Force
Pool
X-HP-Trace-Project
X-HP-Trace-ID
N365rili
Sophnep-Edge-FX
X-Worker
X-Middleton-PageSpeed
X-EPiphany-Vid
X-Source-ID
X-Client-Vid
ScoreTracker
X-RiS-UFDI
X-Nginx-Host
X-Captured
X-RDP
Prxy
X-Response
X-WorkerInstancename
X-Dns-Prefetch-Control
X-PRAM
X-Full-URL
X-SDE-Name
X-HW
X-Optimization
X-Cocoon-Version
X-ORACLE-DMS-ECID
X-Phpwcms-Page-Processed-In
NnCoection
X-Amz-Id-1
X-Server-Id
X-Phpwcms-Release
X-HOSTNAME
X-Turpentine-Cache
X-ATM-RServer
X-ATM-RTime
X-Healthy
X-Varnish-Currency
X-Turpentine-Esi
Pool-Info
CpuTime
X-Varnish-URL
Hash
X-Varnish-Store
CLMOB
X-Varnish-Set-Cookie
IM-Version
X-VARNISH-Cache
X-Stage
X-Webcelerate
Real-Server
X-DOM
X-DPWN-IS-SECURE
ServerTokens
ServerSignature
X-ID
X-ACCELERATE
NLCacheNote
X-Web
X-BC-Stapler
X-CDN-Forward
X-Secret
X-Magento-Action
X-CB-Server
X-Server-Instance
Beid
X-Unbounce-PageId
X-Unbounce-Variant
X-Unbounce-VisitorID
X-Full-Url
X-Info
X-Detected-Device
X-MrHost
X-Browser
X-Cache-Original-TTL
X-F-Cache
X-Id
X-Kinsta-Cache
X-PHP-Engine
X-TN-ServedBy
VC-NoCache
X-Varnish-Instance
Xc
X-VTEX-Janus-System
X-VTEX-Janus-SO
X-Trace-Id
X-Rocket-Nginx-File
Worker
X-Rocket-Nginx-Reason
X-Vhost-ID
Bios
Dynatrace
X-Avvio-Cms-Cacheload
X-Dev
X-Cms-Mode
X-REDIRECTSERVER
X-V
Cmsid
Edgecast
WFE
X-DTC
X-OCTOPOD
X-T
X-Ocache
Cached
Cmstype
X-B
X-Pagely-Cache
X-Wikidot-Backend
Cache-Rule
X-Appmachine-Environment
X-ProxyInstancename
X-Edge-Location
X-Environment
Surrogate-Key
X-LB-Server
X-Server-Instance-Name
X-Wikidot-Static-Cache
Sid
X-Author
X-Server-Generated
X-DSMX-Render-MS
X-CCC
X-Block
X-Channel-Maxage
X-CID
X-Trace-App
X-Site:
X-Invoke-Duration
X-Header
X-DSMX-Rewrite-MS
X-Domino-CacheValidationWithETagResult
X-FreeTag-Count
X-Powered-By-Anquanbao
Backend-Name-Original
Access-Control-Allow-Orgin
Ec
P-LB
X-ARC
X-Actindo-RS
X-Cache-Node
X-GSL-Server
Cluster-ID
Paypal-Debug-Id
X-Varnish-Ttl
X-Desc
P-WS
X-NewRelic-App-Data
SS
X-AUSERNAME
X-Expires
X-MAT-GEO
X-Domino-CacheValidationWithETagReason
Open.Jobgate.Se
Myheader
P3P:CP
Test.Executivepeople.Se
Www.Mirrorgate.Se
Www.Mabracertifiering.Se
Jobb.Passal.Se
Jobb.Gil.Se
OT-RequestId
Accept-Language
X-HeBS-Cache-Status
X-N-ViewType
Jobb.Assistentpoolen.Se
Www.Myjob.Se
X-T3Cache
Noq
MW-Webserver
Ram
X-Apm-Telemetry-Syncmark
X-B2f-Not-Route
Head
Il-Cl
X-Is-Mobile
X-T3CacheTags
X-T3CacheInfo
X-Zen-Fury
Content-Instance
Cpu
X-AWS
X-Frame-Option
X-Clara-ASAP
X-Artvisual-Server
X-Restarts
X-Varnish-Backend-Healthy
From
X-Varnish-Error-Restart
Fastly-Backend-Name
X-SV
X-Rack-Cors
ClientIP
F5-IpCliente
Gzip
X-Tile-Url
HOST-SERVICE
MIH-CLIENT-FARM
X-ASAP-Cache
X-Client-Ip
X-HostName
Servername
MIH-PLATFORM
Device
X-Cache-Action
MIH-PUBLIC-IDENTIFIER
TP-Cache
X-GRACE
TP-L2-Cache
X-SERVER-ID
SBGI-RenderTime
X-HTML-Minification-Powered-By
X-HAProxy
X-Application-Context
Kanooh-Host
X-Cache-Extended
SBGI-RealPath
X-EntryPoint
X-Fallback
X-72E-NoBeian-Transfer
Robots
X-Instance
SBGI-10
Max-Age
Section-Io-Id
Dispatcher
X-DealerOn
X-Hiawatha-Cache
X-Webstats-RespID
X-Forwarded-Proto
X-Timing
X-Cache-Level
X-Pressidium-NinukisWP-Ver
Og
X-Render-Time
AC-ELC
INCOMING-TIME
X-ASEN
SBGI-1
Encoding
X-Cache-Set
SBGI-5
SBGI-9
SBGI-7
Note
X-GeoIP
Fw-Via
X-AREQUESTID
X-Backend-Name
CommunityServer
PServer
SBGI-Device
Device-Type
AsisCache
X-Ghost-Cache-Status
Apache
X-W3TC-Minify
X-LW-T
Warning
Machine
Web
X-Runtime-Memory
X-ETag
X-Enhanced-By
ServerIP
GenSvr
X-Old-Content-Length
X-Process-Time
X-FastCGI-Cache
X-VarnishCache
X-Frames-Options
X-IP-Address
X-Test
X-Pj-Cache-Status
X-Dispatcher
X-AccessDev
IsMobile
X-Status
X-COUNTRY-CODE
X-Oracle-DMS-ECID
Resin-Trace
X-Signature
SB-Cache-Remaining
SB-Cache-Life
SB-Site-Device
Server-ID
X-Cache-Backend
X-Route
RSL-Trace-ID
X-Confluence-Request-Time
X-4ormat-Cacheable
X-Catalyst
RouteID
NZSpeedy
X-BeResp-Ttl
RATING
X-Pixelsilk-Version
X-Pixelsilk-Server
X-Jcms-Ajax-Id
X-OPNET-Transaction-Trace
X-DEBUG
X-DDM-SERVER-UPDATED
X-Cache-Type
X-FCMS-Cache
X-DDM-SERVER
X-Pj-Cache-Key
X-Sc-Cache
MachineName
X-PHP-Response-Code
PowerCDN
X-Cms-Server
X-Hosting
X-NMT-Proxy
X-Accel-Cache-Control
CDN-Region
Cdate
Imx-Cookies-Used
Mto-License-Status
Content
HostGen
X-Powered-Developer
X-RAMCache
CmsCacheEngine
Fpc-Expire
HA-Front
X-Sc-Path
Aoestatic
X-Magento-Lifetime
X-Esi
X-ServedByHost
X-SilverStripe-Cache
X-BKSrc
Copyright
X-Purge-Level
X-LS-DEBUG
X-VC-TTL
X-Search-Id
X-Server-Addr
QC-Hit
Content-Cache
DNI-Expires
X-Ec-Custom-Error
Ibm-Web2-Location
X-9XB-Server
X-Box
X-Wm-1
X-Distil-CS
QC-Key
QC-Time
X-ESI
X-Clx-Request
X-IIJ-Cache
X-MSU-SOURCE
X-Request-Count
X-AppServer-Status
X-AppServer-Cache-Rule
User-Cache-Control
X-JSESSIONID
X-7d-Instance-Id
X-7d-Trace-Id
X-Fpc
Ttl
X-Wm-VIP
X-Tags
X-Capoed
X-Tradeindia-Request-GUID
X-Tradeindia-SMgmt
X-Webapp
X-UseReverse-Proxy
X-Mobile-Device-Type
X-HA
X-EdgeConnect-Origin-MEX-Latency
X-Static-Version
X-Router
X-Router-Backend
X-Site-Name
Hosted-By
XDisk
Cteonnt-Length
X-Xhr-Current-Location
X-Amz-Meta-Cb-Modifiedtime
Expire
SBMCLOUD
X-QHCDN
X-Medium-Entity-Type
X-EdgeConnect-MidMile-RTT
Nginx-Cache
X-Mobile-Device
X-Fedora-School-Id
X-Medium-Entity-Id
X-Provided-By
X-SuperCache
X-AISO-Cache
Ngpass-Vcall
RequestId
V-Age
Www.Aujourdhui.Com
Provider
Thinkindot-CacheControl
X-Gyrobase-Publication
X-PBY
X-Rewritten-By
ORIGIN
Thinkindot-CacheControl-Type
X-ATP-Server
X-Cluster-Node
X-SeschatRedID
X-Flex-Lastmod
X-Flex-Tag
X-Flex-Tags
X-Hash
X-Flex-Lang
X-CCM
X-Device-Group
X-AISO-Cacheable
X-SeschatTemplateID
X-Flex-Community
X-Flex-Evend
X-BE
X-PG
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Built-By
X-GUploader-UploadID
Thinkindot-Control
X-Goog-Storage-Class
X-Goog-Metageneration
X-ESI-Enable
X-Client-Addr
X-FFX-B
X-Cached-Status
X-Goog-Generation
X-IB-Content-Type
X-IB-Content-Urn
Language
X-IB-Timestamp
TotalTime
X-ManagedFusion-Rewriter-Version
X-EZPublish-NodeID
X-IB-Site-Name
X-Cache-Ttl
VANITY-HOST
X-IB-Context-Urn
X-EZPublish-InstallationID
Server-IP
X-Max-Age
X-Flex-Evstart
X-Span
X-Remote-Addr
X-DN-Cache-Control
X-Seschat-URL
X-Venda-Hitid
X-AISO-Server
X-RealServer
X-Cms
X-Cluster
X-Proto
Server-Optimized-By
X-Highwire-Sitecode
X-Backside-Transport
X-CPU-Time
X-Mii-Cache-Hit
X-RSS-CACHE-STATUS
X-SeschatDID
X-DN-GyrobaseID
XX
X-Global-Transaction-ID
From-Origin
X-Gondor-Server
X-Varnish-Max-Age
X-Panel-Id
X-Panel-Name
X-Pb-Mii
X-SeschatLayout
X-Rq
X-Key
X-RateLimit-Remaining
X-Rack-CORS
CountryCode
X-Sid
Serverid
WN
Wn-Vars
X-Var-Hash
Disablevcache
X-Expose-Took
X-Hiring
X-Backend-TTL
X-Hit
X-Expose-Site
Prototype-RootPath
X-Cache-Me-Harder
X-RequesterIP
X-Cookies-Stripped
X-Pj-Cache-Time
SL-NOREWRITE-REDIRECTS
X-Checkout
X-Content-Type
X-WN-ClientGroup
X-UUID
X-Hcom-Styx-Info
X-Backend-Status
AcceptLangage
Host-Name
X-This-Proto
X-MCB-Server
X-Server-By
X-Request-Received
X-Platform-Server
X-Pardot-Route
X-Pardot-LB
X-PM-ID
X-MSEdge-Ref
X-Pj-Cache-Flags
X-Obr-Rule
X-Request-Processing-Time
X-Pardot-Rsp
X-Cookie-Store
X-Identity
X-Url-Store
X-Time-Spent
SINA-TS
SINA-LB
ThisTTL
X-Akamai-Edgescape
X-Geo
X-Country
Requested-Host
DPOOL-HEADER
Url-Hash
Atp-Isdpp
X-A
X-E
Debug-Status
A
X-Hosting-Env
X-ProcessESI
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
X-Device-Class
X-Time-Microsecs
Publisher
X-GETTER-Cache
X-CO-Host
X-BC
UniqueName
X-Server-IP
X-RemovedCookies
X-VG-WebCache
Apple-Itunes-App
MtcHosted
Clientip
At-Shoptype
At-Isb
X-Say-Original-URL
X-Say-Original-UA
X-Say-TTL
X-SayCDN-Original-Host
X-SayCDN-Original-UA
X-SayCDN-Original-Path
X-Say-Original-IP
X-Say-Original-Host
X-Hstore
X-Hrouter
X-Martin
X-MobileDetected
X-Say-Cacheable
X-NewCloud-V-Cache
X-SayCDN-TTL
X-SayCDN-UA
X-Zendesk-Origin-Server
X-Wix-Route-ID
ReqUrl
X-CACHE-TTL
X-LOCATION
X-Lima-Id
X-TB-M
X-Serendipity-InterfaceLangSource
X-DataDome
X-Expose-Hostname
X-ACLR-Version
X-Debug-Message
X-Serendipity-InterfaceLang
X-EdgeRouter
Orgin-Server
Access-Control-Request-Headers
X-Debug-Serve
X-WEBFRONT
X-Request-Uri
Cache-Cookie-Set-From
Inserted-Into-Cache-At
MwpReleaseVersion
Powered-By-VeryCDN
Session-Id
Returned-Status
X-Edge-IP
X-Dynamic-Cache
Cache-Cookie-Set-Idcheck
Cache-Cookie-Set-Index-Page
X-Faeria
X-Contact
X-IP
X-Firewall
X-Not-Cacheable
Server-Version
Server-N
Cache-Cookie-Set-Lfrom
X-Protected-By
Origin-Server
Secured-By
X-AG-MIPS
NodeId
Http
X-Beatles-Hits
Redirect
X-Debug-Token
MSSmartTagsPreventParsing
X-DB-Content-Length
X-Your-GrandPa-Would-Wait
X-Does-He-Have-Time
X-ENV
X-Server-Ip
X-TTL-Age
X-Would-Your-GrandPa-Wait
X-Czt
WebServer
Be
Yola-ID
MSThemeCompatible
Count-Click-Attempt2
X-Meta-MSThemeCompatible
Be-Ip
X-TargSmaku
Ews
Countrycode
X-UA
Be-Va
X-PS-MURDOCK-CASE-NORMALIZATION
X-PS-MURDOCK-ORIG-FILEEXT
X-Powered-By-Home.Pl
X-Orig-Host
X-SATserver
X-Sn-Servicetimems
X-Meta-Imagetoolbar
X-MCF-ID
X-DB-NAR
INFO
DB-Nickname
X-Airee-Node
X-B3-Traceid
X-Bcwwwid
X-Meta-MSSmartTagsPreventParsing
X-PHP
X-Gannett-Site-Version
X-Esi-Processing
B-Powered-By
If-Modified-Since
REFRESH
X-Compressed-By
X-Backend-Ip
Expiries
Stats-API
Stats-HtmlMinAndCss
Stats-Rendering
Xonnection
X-SID
X-Dynamic
X-DeliveryServer
Vacache
X-HASH
X-KoobooCMS-Version
X-Brought-To-You-By
X-Application
X-Security
X-PS-MURDOCK-ORIG-PROTOCOL
Bs-Header
AGI-Request-ID
Tempo
X-VC-Enabled
X-IDS-WS
X-DODN-Id
X-Varnish-ServiceNetIP
X-Varnish-Hashed-On
X-Fe
X-PressLabs-Stats
NKBVHEADER
X-Akamai-Transformed
RN-Server
Tracker
Web-Server
Aurora-Node
X-Expose-Generated