https://www.linuxsec.org/2018/09/bulk-http-header-response-check.html