From 8327a176d2722a511ebeea8d80239d479eb9a867 Mon Sep 17 00:00:00 2001
From: Rafa Faura
@@ -132,7 +132,7 @@ Options used: -f -g -p -U -s --hints
@@ -264,7 +264,7 @@ $ docker rmi humble:1.42
usage: humble.py [-h] [-a] [-b] [-c] [-df] [-e [TESTSSL_PATH]] [-f [FINGERPRINT_TERM]] [-g] [-grd] [-if INPUT_FILE] [-l {es}] [-lic] [-o {csv,html,json,pdf,txt,xml}]
[-of OUTPUT_FILE] [-op OUTPUT_PATH] [-r] [-s [SKIP_HEADERS ...]] [-u URL] [-ua USER_AGENT] [-v]
-'humble' (HTTP Headers Analyzer) | https://github.com/rfc-st/humble | v.2024-12-20
+'humble' (HTTP Headers Analyzer) | https://github.com/rfc-st/humble | v.2024-12-28
options:
-h, --help show this help message and exit
@@ -276,10 +276,10 @@ options:
-f [FINGERPRINT_TERM] Shows fingerprint statistics; if 'FINGERPRINT_TERM' (e.g., 'Google') is omitted the top 20 results will be shown
-g Shows guidelines for enabling security HTTP response headers on popular frameworks, servers and services
-grd Shows the checks to grade an analysis, along with advice for improvement
- -if INPUT_FILE Analyzes 'INPUT_FILE': must contain HTTP response headers and values separated by ': '; E.g. 'server: nginx'.
+ -if INPUT_FILE Analyzes 'INPUT_FILE': must contain HTTP response headers and values separated by ': '; E.g. 'server: nginx'
-l {es} Defines the language for displaying analysis, errors and messages; if omitted, will be shown in English
-lic Shows the license for 'humble', along with permissions, limitations and conditions.
- -o {csv,html,json,pdf,txt,xml} Exports analysis to 'humble_scheme_URL_port_yyyymmdd_hhmmss_language.ext' file; csv/json/xml will have a brief analysis
+ -o {csv,html,json,pdf,txt,xml} Exports analysis to 'humble_scheme_URL_port_yyyymmdd_hhmmss_language.ext' file; json/xml will have a brief analysis
-of OUTPUT_FILE Exports analysis to 'OUTPUT_FILE'; if omitted the default filename of the parameter '-o' will be used
-op OUTPUT_PATH Exports analysis to 'OUTPUT_PATH'; must be absolute. If omitted the PATH of 'humble.py' will be used
-r Shows HTTP response headers and a detailed analysis; '-b' parameter will take priority
diff --git a/additional/fingerprint.txt b/additional/fingerprint.txt
index f568413..b35cc62 100644
--- a/additional/fingerprint.txt
+++ b/additional/fingerprint.txt
@@ -28,1189 +28,1189 @@
# OWASP Secure Headers Project
# https://github.com/OWASP/www-project-secure-headers/blob/master/LICENSE.txt
-$WSEP [IBM WebSphere Application Server]
-Akamai-GRN [Akamai Edge]
-Akamai-Mon-Iucid-Del [Akamai Adaptive Media Delivery]
-Akamai-Mon-Iucid-Ing [Akamai Adaptive Media Delivery]
-Akamai-Request-BC [Akamai Edge]
-Ali-Swift-Global-Savetime [Alibaba Cloud Object Storage Service]
-Alisite-Track [Alibaba Cloud Content Delivery Network]
-Apigw-RequestID [Amazon API Gateway]
-AR-Atime [ArvanCloud Content Delivery Network]
-AR-Cache [ArvanCloud Content Delivery Network]
-AR-PoweredBy [ArvanCloud Content Delivery Network]
-AR-Request-ID [ArvanCloud Content Delivery Network]
-AR-SID [ArvanCloud Content Delivery Network]
-Arastta [Arastta eCommerce]
-Arr-Disable-Session-Affinity [Azure Web App]
-ATL-TraceID [Atlassian Jira]
-Azure-AsyncOperation [Microsoft Azure Resource Manager]
-Azure-RegionName [Microsoft Azure]
-Azure-SiteName [Microsoft Azure]
-Azure-SlotName [Microsoft Azure]
-Azure-Version [Microsoft Azure]
-BingAPIs-Market [Bing Image Search API]
-BingAPIs-SessionId [Bing API]
-BingAPIs-TraceId [Bing Image Search API]
-CDN-Cache-Control [Generic Content Delivery Network]
-CDN-Loop [Generic Content Delivery Network]
-CF-Access-Domain [Cloudflare Access]
-CF-Apo-Via [Cloudflare Automatic Platform Optimization]
-CF-Bgj [Cloudflare Image Optimization]
-CF-Cache-Status [Cloudflare Automatic Platform Optimization]
-CF-CDNJS-Via [cdnjs.com Content Delivery Network]
-CF-CHL-Bypass [Cloudflare Content Delivery Network]
-CF-CHL-Out [Cloudflare Content Delivery Network]
-CF-Connecting-IP [Cloudflare Content Delivery Network]
-CF-Edge-Cache [Cloudflare Automatic Platform Optimization]
-CF-IPCountry [Cloudflare Content Delivery Network]
-CF-Mitigated [Cloudflare Content Delivery Network]
-CF-Polished [Cloudflare Image Optimization]
-CF-Railgun [Cloudflare Railgun Origin Network Optimizer]
-CF-RAY [Cloudflare Content Delivery Network]
-CF-Request-ID [Cloudflare Content Delivery Network]
-CF-Visitor [Cloudflare Content Delivery Network]
-Cloudflare-CDN-Cache-Control [Cloudflare Cache]
-Cloudfront-Forwarded-Proto [Amazon CloudFront]
-Cloudfront-Is-Android-Viewer [Amazon CloudFront]
-Cloudfront-Is-Desktop-Viewer [Amazon CloudFront]
-Cloudfront-Is-IOS-Viewer [Amazon CloudFront]
-Cloudfront-Is-Mobile-Viewer [Amazon CloudFront]
-Cloudfront-Is-SmartTV-Viewer [Amazon CloudFront]
-Cloudfront-Is-Tablet-Viewer [Amazon CloudFront]
-Cloudfront-Viewer-Address [Amazon CloudFront]
-Cloudfront-Viewer-ASN [Amazon CloudFront]
-Cloudfront-Viewer-City [Amazon CloudFront]
-Cloudfront-Viewer-Country [Amazon CloudFront]
-Cloudfront-Viewer-Country-Name [Amazon CloudFront]
-Cloudfront-Viewer-Country-Region [Amazon CloudFront]
-Cloudfront-Viewer-Country-Region-Name [Amazon CloudFront]
-CloudFront-Viewer-Header-Count [Amazon CloudFront]
-CloudFront-Viewer-Header-Order [Amazon CloudFront]
-Cloudfront-Viewer-HTTP-Version [Amazon CloudFront]
-Cloudfront-Viewer-JA3-Fingerprint [Amazon CloudFront]
-Cloudfront-Viewer-Latitude [Amazon CloudFront]
-Cloudfront-Viewer-Longitude [Amazon CloudFront]
-Cloudfront-Viewer-Metro-Code [Amazon CloudFront]
-Cloudfront-Viewer-Postal-Code [Amazon CloudFront]
-Cloudfront-Viewer-Time-Zone [Amazon CloudFront]
-Cloudfront-Viewer-TLS [Amazon CloudFront]
-CMS-Version [Generic Content Management System Software]
-Commerce-Server-Software [Microsoft Commerce Server]
-Composed-By [Generic Publishing Software]
-Contao-Cache [Contao Content Management System Software]
-Contao-Merge-Cache-Control [Contao Content Management System Software]
-Contao-Page-Layout [Contao Content Management System Software]
-Contao-Private-Response-Reason [Contao Content Management System Software]
-Cteonnt-Length [Citrix Application Delivery Controller]
-EagleID [Alibaba Cloud Content Delivery Network]
-Edge-Cache-Tag [Akamai Edge]
-FastCGI-Cache [NGINX HTTP Server]
-Fastly-Debug-Path [fastly.com Platform]
-Fastly-Debug-TTL [fastly.com Platform]
-Fastly-Debug-Digest [fastly.com Platform]
-Fastly-IO-Error [Fastly Image Optimizer]
-Fastly-IO-Info [Fastly Image Optimizer]
-Fastly-IO-Warning [Fastly Image Optimizer]
-Fastly-Request-Backend [fastly.com Platform]
-Fastly-Restarts [fastly.com Platform]
-Fastly-Sie [fastly.com Platform]
-Fastly-Stats [Fastly Image Optimizer]
-Fastly-Swr [fastly.com Platform]
-Firespring-Website-ID [Firespring.com Platform]
-Fitbit-Rate-Limit-Limit [Fitbit Web API]
-Fitbit-Rate-Limit-Remaining [Fitbit Web API]
-Fitbit-Rate-Limit-Reset [Fitbit Web API]
-Fly-Replay [fly.io Platform]
-Fly-Replay-Src [fly.io Platform]
-Fly-Request-ID [fly.io Platform]
-FT-Called-APP [fluidtopics.com Platform]
-FT-Called-APP-Version [fluidtopics.com Platform]
-Fvrr-Bl-Route-ID [fiverr.com Platform]
-Fvrr-Bl-Service-Name [fiverr.com Platform]
-Fvrr-Request-Headers [fiverr.com Platform]
-Generator [Generic Publishing Software]
-GitLab-LB [GitLab API]
-GitLab-SV [GitLab API]
-Hummingbird-Cache [Hummingbird WordPress Plugin]
-HX-Location [htmx library]
-HX-Push-Url [htmx library]
-HX-Redirect [htmx library]
-HX-Refresh [htmx library]
-HX-Replace-Url [htmx library]
-HX-Reswap [htmx library]
-HX-Retarget [htmx library]
-HX-Reselect [htmx library]
-HX-Trigger [htmx library]
-HX-Trigger-After-Settle [htmx library]
-HX-Trigger-After-Swap [htmx library]
-IBM-Web2-Location [IBM WebSphere Commerce]
-Imgeng-Hash [imageengine.io Platform]
-Imgeng-Img-Status [imageengine.io Platform]
-Incap-Blocking [Imperva XRAY]
-Incap-Cache-Duration [Imperva XRAY]
-Incap-Cache-Level [Imperva XRAY]
-Incap-Cache-Key [Imperva XRAY]
-Incap-Cache-Tags [Imperva XRAY]
-Incap-Cache-TTL [Imperva XRAY]
-Incap-Cache-Reason [Imperva XRAY]
-Incap-Cache-Rules [Imperva XRAY]
-Incap-Cache-Status [Imperva XRAY]
-Incap-Connection [Imperva XRAY]
-Incap-Origin-Pop [Imperva XRAY]
-Incap-Pop [Imperva XRAY]
-Incap-Proxy-ID [Imperva XRAY]
-Incap-Redirect [Imperva XRAY]
-Incap-Req-ID [Imperva XRAY]
-Incap-RTT [Imperva XRAY]
-Incap-Think-Time [Imperva XRAY]
-ITX-Generated-Timestamp [IBM WebSphere Commerce]
-K-Proxy-Request [Knative Serverless Deployments]
-KBN-License-Sig [Kibana Data Visualization Dashboard]
-KBN-Name [Kibana Data Visualization Dashboard]
-KBN-Version [Kibana Data Visualization Dashboard]
-KBN-Xpack-Sig [Kibana Data Visualization Dashboard]
-Ki-Cache-Tag [kinsta.com Platform]
-Ki-Cache-Type [kinsta.com Platform]
-Ki-CF-Cache-Status [kinsta.com Platform]
-Ki-Edge [kinsta.com Platform]
-Ki-Edge-o2o [kinsta.com Platform]
-Ki-Origin [kinsta.com Platform]
-Kong-Route-ID [Kong API Management Platform]
-Kong-Route-Name [Kong API Management Platform]
-Kong-Service-ID [Kong API Management Platform]
-Kong-Service-Name [Kong API Management Platform]
-Liferay-Portal [Liferay Portal]
-M4JSAPI-WebServer-Total-Time [cegid.com Platform]
-Magestack-Area [MageStack eCommerce]
-Magestack-Cache [MageStack eCommerce]
-Magestack-Cacheable [MageStack eCommerce]
-Magestack-Cacheable-Reason [MageStack eCommerce]
-Magestack-Cache-Hits [MageStack eCommerce]
-Magestack-Cache-Lifetime [MageStack eCommerce]
-Magestack-Cache-Status [MageStack eCommerce]
-Magestack-Cache-Warning [MageStack eCommerce]
-Magestack-Config [MageStack eCommerce]
-Magestack-Debug [MageStack eCommerce]
-Magestack-Last-Modified [MageStack eCommerce]
-Magestack-Loadbalancer [MageStack eCommerce]
-Magestack-Magento-Version [MageStack eCommerce]
-Magestack-Pagespeed [MageStack eCommerce]
-Magestack-Response-Ttl [MageStack eCommerce]
-MageStack-Spdy [MageStack eCommerce]
-Magestack-Tag [MageStack eCommerce]
-Magestack-Web-Node [MageStack eCommerce]
-MageStack-Whitelist-Debug [MageStack eCommerce]
-MageStack-Whitelisted-Http-Host [MageStack eCommerce]
-MageStack-Whitelisted-Ip [MageStack eCommerce]
-MageStack-Whitelisted-Uri [MageStack eCommerce]
-MageStack-Whitelisted-User-Agent [MageStack eCommerce]
-MediaWiki-API-Error [mediawiki.org Platform]
-MediaWiki-CORS-Rejection [mediawiki.org Platform]
-MediaWiki-Login-Suppressed [mediawiki.org Platform]
-Medium-Fulfilled-By [medium.com Platform]
-Medium-Missing-Time [medium.com Platform]
-MicrosoftOfficeWebServer [Microsoft Office HTTP Server]
-MicrosoftSharePointTeamServices [Microsoft SharePoint Services]
-Mighty-Cluster [mightynetworks.com Platform]
-Mighty-ENV [mightynetworks.com Platform]
-Mighty-Location [mightynetworks.com Platform]
-Mighty-Runtime [mightynetworks.com Platform]
-Mighty-Service [mightynetworks.com Platform]
-MS-ASProtocolCommands [Microsoft Exchange Server]
-MS-ASProtocolVersions [Microsoft Exchange Server]
-MS-Author-Via [Microsoft WebDAV Server Extension]
-MS-Server-ActiveSync [Microsoft Exchange Server]
-Nginx-Cache [NGINX HTTP Server]
-Ngrok-Agent-IPs [ngrok.com Platform]
-Ngrok-Error-Code [ngrok.com Platform]
-Ngrok-Trace-Id [ngrok.com Platform]
-ntCoent-Length [Citrix Application Delivery Controller]
-Oracle-Mobile-Canonical-Link [Oracle REST API for Mobile Cloud Service]
-Oracle-Mobile-Created-By [Oracle REST API for Mobile Cloud Service]
-Oracle-Mobile-Created-On [Oracle REST API for Mobile Cloud Service]
-Oracle-Mobile-Modified-By [Oracle REST API for Mobile Cloud Service]
-Oracle-Mobile-Modified-On [Oracle REST API for Mobile Cloud Service]
-Oracle-Mobile-Name [Oracle REST API for Mobile Cloud Service]
-Oracle-Mobile-Runtime-Version [Oracle Mobile Cloud Service]
-Oracle-Mobile-Self-Link [Oracle REST API for Mobile Cloud Service]
-Oracle-Mobile-Sync-Evict [Oracle REST API for Mobile Cloud Service]
-Oracle-Mobile-Sync-Expires [Oracle REST API for Mobile Cloud Service]
-Oracle-Mobile-Sync-No-Store [Oracle REST API for Mobile Cloud Service]
-Oracle-Mobile-Sync-Resource-Type [Oracle REST API for Mobile Cloud Service]
-OracleCommerceCloud-Sandiego [Oracle Commerce Cloud]
-OracleCommerceCloud-Version [Oracle Commerce Cloud]
-OT-Baggage-Auth0-Request-ID [auth0.com Platform]
-Oxygen-Cache-Control [Shopify.com Platform]
-Oxygen-Full-Page-Cache [Shopify.com Platform]
-Pantheon-Trace-ID [Pantheon Software as a service]
-PContext-Resp-Is-Stale [Pantheon Software as a service]
-Pega-Host [pega.com Platform]
-Platform [Generic Publishing Software]
-Powered-By [Generic Scripting Technology]
-Powered-By-ChinaCache [ChinaCache Content Delivery Network]
-Processed-By [Generic Scripting Technology]
-Product [Generic Publishing Software]
-Redis-Cache-Response-For [Redis in-memory Data Structure Store]
-Request-Context [Microsoft ASP.NET Framework]
-Response_Server [Generic HTTP Server]
-Server [Generic HTTP Server/Content Delivery Network]
-Serversignature [Generic HTTP Server]
-Servertokens [Generic HTTP Server]
-Servlet-Engine [Generic Servlet Engine Software]
-SForce-Limit-Info [Salesforce REST API]
-SG-F-Cache [SiteGround Optimizer WordPress Plugin]
-SG-Optimizer-Cache-Control [SiteGround Optimizer WordPress Plugin]
-SG-Optimizer-Worker-Status [SiteGround Optimizer WordPress Plugin]
-SharePointError [Microsoft SharePoint Services]
-SharePointHealthScore [Microsoft SharePoint Services]
-Simplycom-Server [simply.com HTTP Server]
-Smug-CDN [SmugMug eCommerce]
-Smug-Meta-Prefetch [SmugMug eCommerce]
-Smug-Meta-Prefetch-Files [SmugMug eCommerce]
-SPIisLatency [Microsoft SharePoint Online]
-SPRequestDuration [Microsoft SharePoint Online]
-SPRequestGuid [Microsoft SharePoint Services]
-Strikingly-Cache [strikingly.com Platform]
-Strikingly-Cache-Region [strikingly.com Platform]
-Strikingly-Cache-Version [strikingly.com Platform]
-SW-Context-Token [shopware.com Platform]
-SW-Invalidation-States [shopware.com Platform]
-SW-Language-ID [shopware.com Platform]
-SW-Version-ID [shopware.com Platform]
-Swift-Performance [Swift Performance WordPress Plugin]
-Tencent-Type [tencent.com platform]
-Tenweb-CF-Cache-Bypass-Reason [10web.io Platform]
-Tenweb-CF-Cache-Status [10web.io Platform]
-turbolinks-location [Turbolinks]
-Via [Generic Proxy server]
-WebDevSrc [PC SOFT WEBDEV Publishing Software]
-Weglot-Translated [Weglot Translate WordPress Plugin]
-Worker-Cache-Key [medium.com Platform]
-Worker-Cache-Middleware [medium.com Platform]
-Worker-Missing-Cookies [medium.com Platform]
-WP-Super-Cache [WP Super Cache WordPress Plugin]
-WPO-Cache-Message [WP-Optimize WordPress Plugin]
-WPO-Cache-Status [WP-Optimize WordPress Plugin]
-X-0-Cache-Hash [edg.io Platform]
-X-0-Caching-Status [edg.io Platform]
-X-0-Components [edg.io Platform]
-X-0-Hit-Request-ID [edg.io Platform]
-X-0-Request-ID [edg.io Platform]
-X-0-Status [edg.io Platform]
-X-0-Surrogate-Key [edg.io Platform]
-X-0-T [edg.io Platform]
-X-0-Version [edg.io Platform]
-X-77-Cache [CDN77 Content Delivery Network]
-X-77-NZ [CDN77 Content Delivery Network]
-X-77-NZT-Ray [CDN77 Content Delivery Network]
-X-77-Pop [CDN77 Content Delivery Network]
-X-Accel-Buffering [NGINX HTTP Server]
-X-Accel-Redirect [NGINX HTTP Server]
-X-Accel-Charset [NGINX HTTP Server]
-X-Accel-Expires [NGINX HTTP Server]
-X-Accel-Limit-Rate [NGINX HTTP Server]
-X-Accel-Version [mod_aclr2 Module]
-X-Advertising-By [Generic Publishing Software]
-X-AEM-Client-Country [Adobe Experience Manager Content Delivery Network]
-X-AEM-Client-Continent [Adobe Experience Manager Content Delivery Network]
-X-AEM-Cloudflare-Geolocation [Adobe Experience Manager Content Delivery Network]
-X-AH-Environment [Varnish HTTP Accelerator]
-X-Airee-ID [Airee Cloud Content Delivery Network]
-X-Airee-Node [Airee Cloud Content Delivery Network]
-X-Akam-SW-Version [Akamai mPulse]
-X-Akamai-Cache-Tag-Error [Akamai Purge Cache]
-X-Akamai-Edgescape [Akamai Edge]
-X-Akamai-EdgeWorker-onClientRequest-Info [Akamai EdgeWorkers]
-X-Akamai-EdgeWorker-onClientRequest-Log [Akamai EdgeWorkers]
-X-Akamai-EdgeWorker-onClientResponse-Info [Akamai EdgeWorkers]
-X-Akamai-EdgeWorker-onClientResponse-Log [Akamai EdgeWorkers]
-X-Akamai-EdgeWorker-onOriginRequest-Log [Akamai EdgeWorkers]
-X-Akamai-EdgeWorker-onOriginResponse-Log [Akamai EdgeWorkers]
-X-Akamai-EdgeWorker-ResponseProvider-Info [Akamai EdgeWorkers]
-X-Akamai-EdgeWorker-responseProvider-Log [Akamai EdgeWorkers]
-X-Akamai-JWT-Token [Akamai IoT Token Access Control]
-X-Akamai-OTA-UID [Akamai IoT Token Access Control]
-X-Akamai-Request-ID [Akamai Edge]
-X-Akamai-Sandbox [Akamai EdgeWorkers]
-X-Akamai-Session-Info [Akamai Property Manager API]
-X-Akamai-Staging [Akamai Ion]
-X-Akamai-Transformed [Akamai Edge]
-X-Akaunting [Akaunting Online Accounting]
-X-Alicdn-DA-UPS-Status [Alibaba Cloud Content Delivery Network]
-X-AMZ-Abort-Date [Amazon Simple Storage Service REST API]
-X-AMZ-Abort-Rule-ID [Amazon Simple Storage Service REST API]
-X-AMZ-Access-Point-Alias [Amazon Simple Storage Service REST API]
-X-AMZ-Apigw-ID [Amazon API Gateway]
-X-AMZ-Archive-Status [Amazon Simple Storage Service REST API]
-X-AMZ-Bucket [Amazon Simple Storage Service REST API]
-X-AMZ-Bucket-Region [Amazon Simple Storage Service REST API]
-X-AMZ-CF-Pop [Amazon CloudFront Edge]
-X-AMZ-CF-ID [Amazon CloudFront Edge]
-X-AMZ-Checksum-CRC32 [Amazon Simple Storage Service REST API]
-X-AMZ-Checksum-CRC32c [Amazon Simple Storage Service REST API]
-X-AMZ-Checksum-SHA1 [Amazon Simple Storage Service REST API]
-X-AMZ-Checksum-SHA256 [Amazon Simple Storage Service REST API]
-X-AMZ-Copy-Source-Version-ID [Amazon Simple Storage Service REST API]
-X-AMZ-Delete-Marker [Amazon Simple Storage Service REST API]
-X-AMZ-Error-Code [Amazon Simple Storage Service REST API]
-X-AMZ-Error-Detail-Key [Amazon Simple Storage Service REST API]
-X-AMZ-Error-Message [Amazon Simple Storage Service REST API]
-X-AMZ-Expiration [Amazon Simple Storage Service REST API]
-X-AMZ-ID-2 [Amazon Simple Storage Service REST API]
-X-AMZ-Meta-AWS-SGW [Amazon Storage Gateway]
-X-AMZ-Meta-CB-Modifiedtime [Amazon Simple Storage Service REST API]
-X-AMZ-Meta-Codebuild-Buildarn [Amazon CodeBuild]
-X-AMZ-Meta-Codebuild-Content-MD5 [Amazon CodeBuild]
-X-AMZ-Meta-Codebuild-Content-SHA256 [Amazon CodeBuild]
-X-AMZ-Meta-File-ATIME [Amazon File Cache]
-X-AMZ-Meta-File-Group [Amazon File Cache]
-X-AMZ-Meta-File-MTIME [Amazon File Cache]
-X-AMZ-Meta-File-Owner [Amazon File Cache]
-X-AMZ-Meta-File-Permissions [Amazon File Cache]
-X-AMZ-Meta-MD5chksum [Amazon Simple Storage Service REST API]
-X-AMZ-Meta-Mtime [Amazon Simple Storage Service REST API]
-X-AMZ-Meta-PC-Last-Modified [Amazon Simple Storage Service REST API]
-X-AMZ-Meta-S3B-Last-Modified [Amazon Simple Storage Service REST API]
-X-AMZ-Meta-S3CMD-Attrs [Amazon Simple Storage Service REST API]
-X-AMZ-Meta-SHA256 [Amazon Simple Storage Service REST API]
-X-AMZ-Meta-Surrogate-Key [Amazon Simple Storage Service REST API]
-X-AMZ-Meta-User-Agent [Amazon Transfer Family]
-X-AMZ-Meta-User-Agent-ID [Amazon Transfer Family]
-X-AMZ-Meta-Version [Amazon Simple Storage Service REST API]
-X-AMZ-Missing-Meta [Amazon Simple Storage Service REST API]
-X-Mural-LY-Version [mural.co Platform]
-X-AMZ-MP-Parts-Count [Amazon Simple Storage Service REST API]
-X-AMZ-Object-Lock-Legal-Hold [Amazon Simple Storage Service REST API]
-X-AMZ-Object-Lock-Mode [Amazon Simple Storage Service REST API]
-X-AMZ-Object-Lock-Retain-Until-Date [Amazon Simple Storage Service REST API]
-X-AMZ-Replication-Status [Amazon Simple Storage Service REST API]
-X-AMZ-Req-Time-Micros [Amazon Simple Storage Service REST API]
-X-AMZ-Restore [Amazon Simple Storage Service REST API]
-X-AMZ-Restore-Output-Path [Amazon Simple Storage Service REST API]
-X-AMZ-Request-Charged [Amazon Simple Storage Service REST API]
-X-AMZ-Request-ID [Amazon Simple Storage Service REST API]
-X-AMZ-Rid [Amazon Web Services]
-X-AMZ-Server-Side-Encryption [Amazon Simple Storage Service]
-X-AMZ-Server-Side-Encryption-AWS-Kms-Key-ID [Amazon Simple Storage Service]
-X-AMZ-Server-Side-Encryption-Bucket-Key-Enabled [Amazon Simple Storage Service REST API]
-X-AMZ-Server-Side-Encryption-Context [Amazon Simple Storage Service REST API]
-X-AMZ-Server-Side-Encryption-Customer-Algorithm [Amazon Simple Storage Service REST API]
-X-AMZ-Server-Side-Encryption-Customer-Key-MD5 [Amazon Simple Storage Service REST API]
-X-AMZ-Storage-Class [Amazon Simple Storage Service REST API]
-X-AMZ-Tagging-Count [Amazon Simple Storage Service REST API]
-X-AMZ-Version-ID [Amazon Simple Storage Service REST API]
-X-AMZ-Website-Redirect-Location [Amazon Simple Storage Service REST API]
-X-AMZN-Errortype [Amazon API Gateway]
-X-AMZN-Remapped-Connection [Amazon API Gateway]
-X-AMZN-Remapped-Content-Length [Amazon API Gateway]
-X-AMZN-Remapped-Date [Amazon API Gateway]
-X-AMZN-Remapped-Host [Amazon API Gateway]
-X-AMZN-Remapped-Server [Amazon API Gateway]
-X-AMZN-TLS-Cipher-Suite [Amazon API Gateway]
-X-AMZN-TLS-Version [Amazon API Gateway]
-X-AMZN-Remapped-User-Agent [Amazon API Gateway]
-X-AMZN-Remapped-X-Forwarded-For [Amazon API Gateway]
-X-AMZN-Requestid [Amazon API Gateway]
-X-AMZN-Trace-ID [Amazon Elastic Load Balancing]
-X-AMZN-WAF-Action [Amazon WAF]
-X-API-Version [Generic API]
-X-Appengine-BlobKey [Google Cloud Platform]
-X-Appengine-BlobRange [Google Cloud Platform]
-X-Appengine-Estimated-CPM-US-Dollars [Google Cloud Platform]
-X-Appengine-Log-Flush-Count [Google Cloud Platform]
-X-Appengine-Resource-Usage [Google Cloud Platform]
-X-Application-Context [Spring Boot]
-X-Arastta [Arastta eCommerce]
-X-ARequestID [Atlassian Jira]
-X-Aruba-Cache [Aruba HiSpeed Cache WordPress Plugin]
-X-Aruba2-Cache [Aruba HiSpeed Cache WordPress Plugin]
-X-AspNet-Version [Microsoft ASP.NET Framework]
-X-AspNetMvc-Version [Microsoft ASP.NET Framework]
-X-ATG-Version [Oracle ATG Web Commerce]
-X-Atmosphere-Error [Atmosphere Event Driven WebSockets Framework]
-X-Atmosphere-First-Request [Atmosphere Event Driven WebSockets Framework]
-X-Atmosphere-Framework [Atmosphere Event Driven WebSockets Framework]
-X-Atmosphere-Tracking-ID [Atmosphere Event Driven WebSockets Framework]
-X-Atmosphere-TrackMessageSize [Atmosphere Event Driven WebSockets Framework]
-X-Atmosphere-Transport [Atmosphere Event Driven WebSockets Framework]
-X-Azure-ExternalError [Microsoft Azure Front Door]
-X-Azure-InternalError [Microsoft Azure Front Door]
-X-Azure-OriginStatusCode [Microsoft Azure Front Door]
-X-Azure-Ref [Microsoft Azure Front Door]
-X-Azure-Ref-OriginShield [Microsoft Azure Front Door]
-X-Auth0-RequestID [auth0.com Platform]
-X-B3-Flags [Zipkin Tracing]
-X-B3-ParentSpanId [Zipkin Tracing]
-X-B3-Sampled [Zipkin Tracing]
-X-B3-SpanId [Zipkin Tracing]
-X-B3-TraceId [Zipkin Tracing]
-X-Backend [Generic Backend HTTP Server]
-X-Backdrop-Cache [Backdrop Content Management System]
-X-Backend-Server [Generic Backend HTTP Server]
-X-BackEndHttpStatus [Microsoft Outlook]
-X-Backside-Transport [IBM DataPower Gateway]
-X_BD_ST_Subid [baidu.com Platform]
-X-BD-UL [baidu.com Platform]
-X-Beluga-Backend-IP [Beluga Content Delivery Network]
-X-Beluga-Cache-Lookup [Beluga Content Delivery Network]
-X-Beluga-Cache-Status [Beluga Content Delivery Network]
-X-Beluga-Cache-Store [Beluga Content Delivery Network]
-X-Beluga-Document [Beluga Content Delivery Network]
-X-Beluga-Error [Beluga Content Delivery Network]
-X-Beluga-Node [Beluga Content Delivery Network]
-X-Beluga-Record [Beluga Content Delivery Network]
-X-Beluga-Response-Time [Beluga Content Delivery Network]
-X-Beluga-Status [Beluga Content Delivery Network]
-X-Beluga-Trace [Beluga Content Delivery Network]
-X-BEServer [Microsoft Exchange ActiveSync]
-X-BeSku [Microsoft Outlook]
-X-BinarySec-NoCache [BinarySEC Web Application Firewall]
-X-BinarySec-Via [BinarySEC Web Application Firewall]
-X-Bitrix-Ajax-Status [Bitrix24 Customer Relationship Management]
-X-Bitrix-Composite [Bitrix24 Customer Relationship Management]
-X-Bitrix-LB [Bitrix24 Customer Relationship Management]
-X-Bitrix-Rest-System-Time [Bitrix24 Customer Relationship Management]
-X-Bitrix-Rest-Time [Bitrix24 Customer Relationship Management]
-X-Bitrix-Rest-User-Time [Bitrix24 Customer Relationship Management]
-X-Bitrix-RI [Bitrix24 Customer Relationship Management]
-X-Bitrix-TCP [Bitrix24 Customer Relationship Management]
-X-Bitrix-Times [Bitrix24 Customer Relationship Management]
-X-Blackboard-Appserver [Blackboard Learn Platform]
-X-Blackboard-Context-Version [Blackboard Learn Platform]
-X-Blackboard-Product [Blackboard Learn Platform]
-X-Bubble-Capacity-Limit [bubble.io Platform]
-X-Bubble-Capacity-Used [bubble.io Platform]
-X-Bubble-Perf [bubble.io Platform]
-X-Built-With [Generic Publishing Software]
-X-Bytefaas-Cold-Start-duration [ByteDance Function as a Service]
-X-Bytefaas-Enable-Stream [ByteDance Function as a Service]
-X-Bytefaas-Execution-Duration [ByteDance Function as a Service]
-X-Bytefaas-Gateway-Duration [ByteDance Function as a Service]
-X-Bytefaas-Memory-Usage [ByteDance Function as a Service]
-X-Bytefaas-Request-ID [ByteDance Function as a Service]
-X-Bytefaas-Worker-Duration [ByteDance Function as a Service]
-X-Bytefaas-Worker-Schedule-Duration [ByteDance Function as a Service]
-X-Cache-Handler [Cache Enabler WordPress Plugin]
-X-Cache-Only-Varnish [Varnish HTTP Accelerator]
-X-Cache-Type [Generic Cache Software]
-X-CalculatedBETarget [Microsoft Outlook]
-X-CalculatedFETarget [Microsoft Outlook]
-X-CDN [Generic Content Delivery Network]
-X-CDN-nazwa.pl-Age [nazwa.pl Content Delivery Network]
-X-CDN-nazwa.pl-Cache [nazwa.pl Content Delivery Network]
-X-CDN-nazwa.pl-Location [nazwa.pl Content Delivery Network]
-X-CDN-nazwa.pl-Policyused [nazwa.pl Content Delivery Network]
-X-CDN-Pop [Generic Content Delivery Network]
-X-CDN-Pop-IP [Generic Content Delivery Network]
-X-CF-Powered-By [NGINX HTTP Server]
-X-Cf-RouterError [Cloud Foundry Gorouter]
-X-Cf-Warnings [cloudfoundry.org Platform]
-X-Citiportal-Auth-Reason [citigroup.com Platform]
-X-Citiportal-Proxynode [citigroup.com Platform]
-X-Citiportal-Redirectreason [citigroup.com Platform]
-X-Citiportal-Requestid [citigroup.com Platform]
-X-Citiportal-Webnode [citigroup.com Platform]
-X-Clockwork-ID [Clockwork PHP Dev Tools]
-X-Clockwork-Version [Clockwork PHP Dev Tools]
-X-Cloud-Trace-Context [Google Cloud Platform]
-X-Cloudez-Verify [cloudez.io Platform]
-X-Cluster [Generic Cluster Software]
-X-CMS [Generic Content Management System Software]
-X-CMS-Version [Generic Content Management System Software]
-X-Cocoon-Date [Apache Cocoon Framework]
-X-Cocoon-Header [Apache Cocoon Framework]
-X-Cocoon-Int [Apache Cocoon Framework]
-X-Cocoon-Time [Apache Cocoon Framework]
-X-Cocoon-Version [Apache Cocoon Framework]
-X-Commerce-Core [Drupal Commerce Core Module]
-X-Compressed-By [Generic Compression Module]
-X-Confluence-Request-Time [Atlassian Confluence]
-X-Content-Encoded-By [Generic Publishing Software]
-X-Content-Powered-By [Joomla! K2 Module]
-X-Contentful-RateLimit-Second-Limit [Contentful Content Management API]
-X-Contentful-RateLimit-Second-Remaining [Contentful Content Management API]
-X-Contentful-RateLimit-Reset [Contentful Content Management API]
-X-Contentful-Request-ID [Contentful Content Delivery API]
-X-Cuckoo-Version [cuckoosandbox.org Platform]
-X-Daa-Tunnel [tencent.com platform]
-X-DataDome-Botfamily [DataDome.co Protection API]
-X-DataDome-Botname [DataDome.co Protection API]
-X-Datadome-Captchapassed [DataDome.co Protection API]
-X-Datadome-Charset [DataDome.co Protection API]
-X-DataDome-CID [DataDome.co Protection API]
-X-DataDome-ClientID [DataDome.co Protection API]
-X-DataDome-Devicecheckpassed [DataDome.co Protection API]
-X-DataDome-Headers [DataDome.co Protection API]
-X-DataDome-Isbot [DataDome.co Protection API]
-X-Datadome-Latency [DataDome.co Protection API]
-X-Datadome-Log [DataDome.co Protection API]
-X-Datadome-Matchedmodels [DataDome.co Protection API]
-X-DataDome-ModuleName [DataDome.co Protection API]
-X-DataDome-ModuleVersion [DataDome.co Protection API]
-X-DataDome-Request-Headers [DataDome.co Protection API]
-X-Datadome-Requestid [DataDome.co Protection API]
-X-Datadome-Ruletype [DataDome.co Protection API]
-X-Datadome-Score [DataDome.co Protection API]
-X-DataDome-Timestamp [DataDome.co Protection API]
-X-Datadome-Traffic-Rule-Response [DataDome.co Protection API]
-X-DataDome [DataDome.co Protection API]
-X-DataDomeResponse [DataDome.co Protection API]
-X-Debug-Info [Platform.sh Platform as a service]
-X-Debug-Token [Symfony Profiler]
-X-Debug-Token-Link [Symfony Profiler]
-X-DevSrv-CMS [Bitrix Site Manager]
-X-DD-B [DataDome.co Protection API]
-X-DiagInfo [Microsoft Exchange Server]
-X-DIS-Request-ID [DOSarrest.com Platform]
-X-Discourse-Cached [discourse.org Platform]
-X-Discourse-Route [discourse.org Platform]
-X-Discourse-TrackView [discourse.org Platform]
-X-DLM-External-Download [Download Monitor Wordpress Plugin]
-X-DLM-File-Name [Download Monitor Wordpress Plugin]
-X-DLM-No-Access [Download Monitor Wordpress Plugin]
-X-DLM-No-Waypoints [Download Monitor Wordpress Plugin]
-X-DLM-Redirect [Download Monitor Wordpress Plugin]
-X-DO-APP-Origin [DigitalOcean Cloud Platform]
-X-DO-Orig-Status [DigitalOcean Cloud Platform]
-X-Docket-Cache [Docket Cache WordPress Plugin]
-X-Dotclear-Static-Cache [Dotclear Publishing Software]
-X-dotDefender-Denied [dotDefender Web Application Firewall]
-X-DP-Response-Code [IBM DataPower Gateway]
-X-DP-Watson-Tran-ID [IBM Watson Assistant]
-X-Drupal-Cache [Drupal Content Management System]
-X-Drupal-Cache-Contexts [Drupal Content Management System]
-X-Drupal-Cache-Tags [Drupal Content Management System]
-X-Drupal-Dynamic-Cache [Drupal Content Management System]
-X-Drupal-Received-Locale [Drupal Content Management System]
-X-DT-Tracestate [Dynatrace Platform]
-X-dtAgentId [Dynatrace Real User Monitoring]
-X-dtHealthCheck [Dynatrace Real User Monitoring]
-X-dtInjectedServlet [Dynatrace Real User Monitoring]
-X-Edg-AWS-Region [edg.io Platform]
-X-Edg-Components [edg.io Platform]
-X-Edg-MR [edg.io Platform]
-X-Edg-P [edg.io Platform]
-X-Edg-Platform-AWS-Account [edg.io Platform]
-X-Edg-Status [edg.io Platform]
-X-Edg-Surrogate-Key [edg.io Platform]
-X-Edg-Version [edg.io Platform]
-X-EdgeConnect-MidMile-RTT [Akamai Edge]
-X-EdgeConnect-Origin-MEX-Latency [Akamai Edge]
-X-Edge-Location [Generic Content Delivery Network]
-X-Edge-Location-Klb [kinsta.com Platform]
-X-Elasticpress-Query [ElasticPress WordPress Plugin]
-X-Envoy-Decorator-Operation [Envoy L7 Proxy]
-X-Envoy-External-Address [Envoy L7 Proxy]
-X-Envoy-Immediate-Health-Check-Fail [Envoy L7 Proxy]
-X-Envoy-Internal [Envoy L7 Proxy]
-X-Envoy-Original-DST-Host [Envoy L7 Proxy]
-X-Envoy-Overloaded [Envoy L7 Proxy]
-X-Envoy-Ratelimited [Envoy L7 Proxy]
-X-Envoy-Upstream-Canary [Envoy L7 Proxy]
-X-Envoy-Upstream-Healthchecked-Cluster [Envoy L7 Proxy]
-X-Envoy-Upstream-Service-Time [Envoy L7 Proxy]
-X-ePages-RequestID [epages.com Platform]
-X-ePages-Site [epages.com Platform]
-X-Esi [Edge Server]
-X-ET-API-Origin [Event Tickets and Registration WordPress Plugin]
-X-ET-API-Root [Event Tickets and Registration WordPress Plugin]
-X-ET-API-Version [Event Tickets and Registration WordPress Plugin]
-X-Evy-Trace-Listener [Envoy L7 Proxy]
-X-Evy-Trace-Route-Configuration [Envoy L7 Proxy]
-X-Evy-Trace-Route-Service-Name [Envoy L7 Proxy]
-X-Evy-Trace-Served-By-Pod [Envoy L7 Proxy]
-X-Evy-Trace-Virtual-Host [Envoy L7 Proxy]
-X-EZ-Minify-HTML [Ezoic Content Delivery Network]
-X-EZ-Proxy-Out [OCLC EZproxy proxy]
-X-Ezoic-CDN [Ezoic Content Delivery Network]
-X-FASO-Server-Execution-Time [Faso.com Platform]
-X-FASO-Timer-Multiples-Section [Faso.com Platform]
-X-FASO-Timer-Replace-HW [Faso.com Platform]
-X-Fastly-Request-ID [fastly.com Platform]
-X-FB-An-Errors [facebook.com Platform]
-X-FB-An-Request-ID [facebook.com Platform]
-X-FB-Debug [facebook.com Platform]
-X-FB-Request-ID [facebook.com Platform]
-X-FB-Rev [facebook.com Platform]
-X-FB-Rlafr [facebook.com Platform]
-X-FB-Trace-ID [facebook.com Platform]
-X-FB-Trip-ID [facebook.com Platform]
-X-Fc-Code-Checksum [Alibaba Function Compute]
-X-Fc-Instance-Id [Alibaba Function Compute]
-X-Fc-Invocation-Duration [Alibaba Function Compute]
-X-Fc-Invocation-Service-Version [Alibaba Function Compute]
-X-Fc-Max-Memory-Usage [Alibaba Function Compute]
-X-Fc-Request-Id [Alibaba Function Compute]
-X-FEEFZInfo [Microsoft Outlook]
-X-FEProxyInfo [Microsoft Outlook]
-X-FEServer [Microsoft Exchange Server]
-X-FirstHopCafeEFZ [Microsoft Outlook]
-X-Flex-Lang [Flexcmp.com Platform]
-X-Flow-ExceptionCode [Neos Flow Framework]
-X-Flow-ExceptionMessage [Neos Flow Framework]
-X-Flow-Powered [Neos Flow Framework]
-X-Flying-Press-Cache [FlyingPress Wordpress Plugin]
-X-Flying-Press-Source [FlyingPress Wordpress Plugin]
-X-Foswikiaction [foswiki.org Platform]
-X-Foswikiuri [foswiki.org Platform]
-X-Framework [Generic Framework]
-X-FW-Dynamic [getflywheel.com Platform]
-X-FW-Hash [getflywheel.com Platform]
-X-FW-Serve [getflywheel.com Platform]
-X-FW-Server [getflywheel.com Platform]
-X-FW-Static [getflywheel.com Platform]
-X-FW-Type [getflywheel.com Platform]
-X-FW-Version [getflywheel.com Platform]
-X-Garden-Version [Generic HTTP Server/Technology]
-X-Generated-By [Generic Publishing Software]
-X-Generator [Generic Publishing Software]
-X-GG-Cache-Date [NGINX HTTP Server]
-X-GG-Cache-Status [NGINX HTTP Server]
-X-GitHub-API-Version-Selected [GitHub REST API]
-X-GitHub-Media-Type [GitHub REST API]
-X-GitHub-OTP [GitHub REST API]
-X-GitHub-Request-ID [GitHub REST API]
-X-Gitlab-Blob-Id [GitLab API]
-X-Gitlab-Commit-Id [GitLab API]
-X-Gitlab-Content-Sha256 [GitLab API]
-X-Gitlab-Encoding [GitLab API]
-X-Gitlab-Execute-Filemode [GitLab API]
-X-Gitlab-File-Name [GitLab API]
-X-Gitlab-File-Path [GitLab API]
-X-Gitlab-Last-Commit-Id [GitLab API]
-X-Gitlab-Meta [GitLab API]
-X-Gitlab-Ref [GitLab API]
-X-Gitlab-Size [GitLab API]
-X-GoCache-CacheStatus [gocache.com.br Platform]
-X-Goog-Component-Count [Google Cloud Storage]
-X-Goog-Custom-Time [Google Cloud Storage]
-X-Goog-Encryption-Algorithm [Google Cloud Storage]
-X-Goog-Encryption-Key-SHA256 [Google Cloud Storage]
-X-Goog-Expiration [Google Cloud Storage]
-X-Goog-Generation [Google Cloud Storage]
-X-Goog-Hash [Google Cloud Storage]
-X-Goog-IAP-Generated-Response [Google Identity-Aware Proxy]
-X-Goog-Meta-Goog-Reserved-File-Mtime [Google Cloud Storage]
-X-Goog-Metageneration [Google Cloud Storage]
-X-Goog-Storage-Class [Google Cloud Storage]
-X-Goog-Stored-Content-Encoding [Google Cloud Storage]
-X-Goog-Stored-Content-Length [Google Cloud Storage]
-X-Goog-Upload-Chunk-Granularity [Google Cloud Storage]
-X-Goog-Upload-Status [Google Cloud Storage]
-X-Goog-Upload-Size-Received [Google Cloud Storage]
-X-Goog-Upload-URL [Google Cloud Storage]
-X-GUploader-UploadID [Google Cloud Storage]
-X-HCDN-Cache-Status [hostinger.com Platform]
-X-HCDN-Cache-Edge [hostinger.com Platform]
-X-HCDN-Info [hostinger.com Platform]
-X-HCDN-Request-ID [hostinger.com Platform]
-X-HCDN-Upstream-RT [hostinger.com Platform]
-X-Hiawatha-Cache [Hiawatha HTTP Server]
-X-Hiawatha-Cache-Remove [Hiawatha HTTP Server]
-X-Hostinger-Datacenter [hostinger.com Platform]
-X-Hostinger-Node [hostinger.com Platform]
-X-HS-Cache-Config [Hubspot.com Platform]
-X-HS-Cache-Control [Hubspot.com Platform]
-X-HS-CF-Cache-Status [Hubspot.com Platform]
-X-HS-CFworker-Source [Hubspot.com Platform]
-X-HS-Combine-CSS [Hubspot.com Platform]
-X-HS-Content-Campaign-ID [Hubspot.com Platform]
-X-HS-Content-Id [Hubspot.com Platform]
-X-HS-Content-Group-Id [Hubspot.com Platform]
-X-HS-Https-Only [Hubspot.com Platform]
-X-HS-Hub-Id [Hubspot.com Platform]
-X-HS-Mapping-ID [Hubspot.com Platform]
-X-HS-Mapping-Only-After-Not-Found [Hubspot.com Platform]
-X-HS-Prerendered [Hubspot.com Platform]
-X-HS-Public-Host [Hubspot.com Platform]
-X-HS-Reason [Hubspot.com Platform]
-X-HS-Route-Prefix [Hubspot.com Platform]
-X-HS-Zone-Name [Hubspot.com Platform]
-X-HTML-Minification-Powered-By [Web Markup Minifier]
-X-HTTPd-Modphp [Apache HTTP Server]
-X-HubSpot-Correlation-Id [Hubspot.com Platform]
-X-HubSpot-NotFound [Hubspot.com Platform]
-X-HubSpot-RateLimit-Daily [Hubspot.com Platform]
-X-HubSpot-RateLimit-Daily-Remaining [Hubspot.com Platform]
-X-HubSpot-RateLimit-Interval-Milliseconds [Hubspot.com Platform]
-X-HubSpot-RateLimit-Max [Hubspot.com Platform]
-X-HubSpot-RateLimit-Remaining [Hubspot.com Platform]
-X-HubSpot-RateLimit-Secondly [Hubspot.com Platform]
-X-HubSpot-RateLimit-Secondly-Remaining [Hubspot.com Platform]
-X-HubSpot-Trust-Forwarded-For [Hubspot.com Platform]
-X-Hudson [Jenkins Automation Server]
-X-Hudson-CLI-Port [Jenkins Automation Server]
-X-Hudson-Theme [Jenkins Automation Server]
-X-HW [Stackpath Content Delivery Network]
-X-IE-Cache [imageengine.io Platform]
-X-Iinfo [Imperva Web Application Firewall]
-X-IIS-Server [Microsoft Internet Information Services]
-X-Includable-Version [Includable.com Platform]
-X-Instart-Cache [Instart DX Web Application Firewall]
-X-Instart-Request-ID [Instart DX Web Application Firewall]
-X-Instart-WL [Instart DX Web Application Firewall]
-X-IPS-Cached-Response [invisioncommunity.com Platform]
-X-IPS-LoggedIn [invisioncommunity.com Platform]
-X-IRM-Cantdecrypt [Microsoft SharePoint Services]
-X-IRM-Crashed [Microsoft SharePoint Services]
-X-IRM-Notowner [Microsoft SharePoint Services]
-X-IRM-Rejected [Microsoft SharePoint Services]
-X-IRM-Timeout [Microsoft SharePoint Services]
-X-IRM-Unknown-Failure [Microsoft SharePoint Services]
-X-Jenkins [Jenkins Automation Server]
-X-Jenkins-CLI-Port [Jenkins Automation Server]
-X-Jenkins-CLI2-Port [Jenkins Automation Server]
-X-Jenkins-Session [Jenkins Automation Server]
-X-Jetpack-Boost-Cache [Jetpack WordPress Plugin]
-X-Jimdo-Instance [Jimdo.com Platform]
-X-Jimdo-Wid [Jimdo.com Platform]
-X-Jitsi-Region [jitsi.org Platform]
-X-Jitsi-Release [jitsi.org Platform]
-X-Jitsi-Shard [jitsi.org Platform]
-X-Jive-Chrome-Wrapped [Jive REST API]
-X-Jive-Flow-ID [Jive REST API]
-X-Jive-Request-ID [Jive REST API]
-X-Jive-User-ID [Jive REST API]
-X-JSL [Jive REST API]
-X-Jupyterhub-Version [Jupyterhub Notebook Environment]
-X-Kinsta-Cache [kinsta.com Platform]
-X-Kong-Admin-Latency [Kong API Management Platform]
-X-Kong-Admin-Request-ID [Kong API Management Platform]
-X-Kong-Proxy-Latency [Kong API Management Platform]
-X-Kong-Response-Latency [Kong API Management Platform]
-X-Kong-Upstream-Latency [Kong API Management Platform]
-X-Kong-Upstream-Status [Kong API Management Platform]
-X-KoobooCMS-Version [Kooboo Content Management System]
-X-Last-60s-Hits [fastly.com Platform]
-X-LI-Fabric [LinkedIn API]
-X-LI-Pop [LinkedIn API]
-X-LI-Proto [LinkedIn API]
-X-LI-ResponseOrigin [LinkedIn API]
-X-LI-Route-Key [LinkedIn API]
-X-LI-UUID [LinkedIn API]
-X-Lift-Version [Lift Framework]
-X-Litespeed-Alt-Svc [LiteSpeed HTTP Server]
-X-Litespeed-Cache [LiteSpeed HTTP Server]
-X-Litespeed-Cache-Control [LiteSpeed HTTP Server]
-X-LiteSpeed-Purge [LiteSpeed HTTP Server]
-X-LiteSpeed-Tag [LiteSpeed HTTP Server]
-X-LiteSpeed-Vary [LiteSpeed HTTP Server]
-X-Loopia-Node [loopia.com Platform]
-X-LSADC-Backend [LiteSpeed Web ADC]
-X-LSADC-Cache [LiteSpeed Web ADC]
-X-Magento-Cache-Control [Adobe Commerce]
-X-Magento-Cache-Debug [Adobe Commerce]
-X-Magento-Debug [Adobe Commerce]
-X-Magento-Tags [Adobe Commerce]
-X-Magnolia-Registration [Magnolia Content Management System]
-X-Matomo-Request-ID [matomo.org Platform]
-X-MH-Tag [middlehost.com Platform]
-X-Mighty-Prerender [mightynetworks.com Platform]
-X-Mighty-Proxy [mightynetworks.com Platform]
-X-Miva-Cache [Miva Redis Caching]
-X-Mod-Pagespeed [Apache/Nginx HTTP Server]
-X-MS-Access-Tier [Microsoft Azure Storage]
-X-MS-Access-Tier-Change-Time [Microsoft Azure Storage]
-X-MS-Access-Tier-Inferred [Microsoft Azure Storage]
-X-MS-Activity-ID [Microsoft Azure Cosmos DB]
-X-MS-Alt-Content-Path [Microsoft Azure Cosmos DB]
-X-MS-Archive-Status [Microsoft Azure Storage]
-X-MS-ASThrottle [Microsoft Exchange Server]
-X-MS-Async-Operation-Timeout [Microsoft Azure]
-X-MS-Blob-Committed-Block-Count [Microsoft Azure Storage]
-X-MS-Blob-Sealed [Microsoft Azure Storage]
-X-MS-Blob-Sequence-Number [Microsoft Azure Storage]
-X-MS-Blob-Type [Microsoft Azure Storage]
-X-MS-Client-Request-Id [Microsoft Azure]
-X-MS-Clitelem [Microsoft Azure Storage]
-X-MS-Content-Path [Microsoft Azure Cosmos DB]
-X-MS-Continuation [Microsoft Azure Cosmos DB]
-X-MS-Copy-Completion-Time [Microsoft Azure Storage]
-X-MS-Copy-Destination-Snapshot [Microsoft Azure Storage]
-X-MS-Copy-ID [Microsoft Azure Storage]
-X-MS-Copy-Progress [Microsoft Azure Storage]
-X-MS-Copy-Source [Microsoft Azure Storage]
-X-MS-Copy-Status [Microsoft Azure Storage]
-X-MS-Copy-Status-Description [Microsoft Azure Storage]
-X-MS-Creation-Time [Microsoft Azure Storage]
-X-MS-Credential-Service-Url [Microsoft Exchange Server]
-X-MS-Credentials-Expire [Microsoft Exchange Server]
-X-MS-Correlation-Id [Microsoft Power Platform]
-X-MS-Current-Replica-Set-Size [Microsoft Azure Cosmos DB]
-X-MS-Current-Write-Quorum [Microsoft Azure Cosmos DB]
-X-MS-Delete-Type-Permanent [Microsoft Azure Storage]
-X-MS-Documentdb-Partitionkeyrangeid [Microsoft Azure Cosmos DB]
-X-MS-Documentdb-Query-Metrics [Microsoft Azure Cosmos DB]
-X-MS-Encryption-Key-SHA256 [Microsoft Azure Storage]
-X-MS-Encryption-Scope [Microsoft Azure Storage]
-X-MS-Error-Code [Microsoft Azure Storage]
-X-MS-Ests-Server [Microsoft Azure Storage]
-X-MS-Expiry-Time [Microsoft Azure Storage]
-X-MS-Forbidden-IP [Microsoft Azure]
-X-MS-Group [Microsoft Azure Storage]
-X-MS-Immutability-Policy-Mode [Microsoft Azure Storage]
-X-MS-Immutability-Policy-Until-Date [Microsoft Azure Storage]
-X-MS-Immutability-Policy-Until-Rate [Microsoft Azure Storage]
-X-MS-Incremental-Copy [Microsoft Azure Storage]
-X-MS-InvokeApp [Microsoft SharePoint Services]
-X-MS-Item-Count [Microsoft Azure Cosmos DB]
-X-MS-Last-Access-Time [Microsoft Azure Storage]
-X-MS-Last-State-Change-UTC [Microsoft Azure Cosmos DB]
-X-MS-Lease-Duration [Microsoft Azure Storage]
-X-MS-Lease-State [Microsoft Azure Storage]
-X-MS-Lease-Status [Microsoft Azure Storage]
-X-MS-Legal-Hold [Microsoft Azure Storage]
-X-MS-Location [Microsoft Exchange Server]
-X-MS-Meta-Name [Microsoft Azure Storage]
-X-MS-OR-Policy-ID [Microsoft Azure Storage]
-X-MS-Owner [Microsoft Azure Storage]
-X-MS-Permissions [Microsoft Azure Storage]
-X-MS-Portal-APP [Microsoft Azure Portal]
-X-MS-Quorum-Acked-Lsn [Microsoft Azure Cosmos DB]
-X-MS-Ratelimit-Remaining-Subscription-Deletes [Microsoft Azure Resource Manager]
-X-MS-Ratelimit-Remaining-Subscription-Reads [Microsoft Azure Resource Manager]
-X-MS-Ratelimit-Remaining-Subscription-Resource-Entities-Read [Microsoft Azure Resource Manager]
-X-MS-Ratelimit-Remaining-Subscription-Resource-Requests [Microsoft Azure Resource Manager]
-X-MS-Ratelimit-Remaining-Subscription-Writes [Microsoft Azure Resource Manager]
-X-MS-Ratelimit-Remaining-Resource [Microsoft Azure Resource Manager]
-X-MS-Ratelimit-Remaining-Tenant-Reads [Microsoft Azure Resource Manager]
-X-MS-Ratelimit-Remaining-Tenant-Resource-Entities-Read [Microsoft Azure Resource Manager]
-X-MS-Ratelimit-Remaining-Tenant-Resource-Requests [Microsoft Azure Resource Manager]
-X-MS-Ratelimit-Remaining-Tenant-Writes [Microsoft Azure Resource Manager]
-X-MS-Rehydrate-Priority [Microsoft Azure Storage]
-X-MS-Request-Charge [Microsoft Azure Cosmos DB]
-X-MS-Request-ID [Microsoft Azure Storage]
-X-MS-Request-Root-ID [Microsoft Azure Storage]
-X-MS-Resource-Quota [Microsoft Azure Cosmos DB]
-X-MS-Resource-Type [Microsoft Azure Storage]
-X-MS-Resource-Usage [Microsoft Azure Cosmos DB]
-X-MS-Retry-After-Ms [Microsoft Azure Cosmos DB]
-X-MS-Routing-Request-Id [Microsoft Azure Resource Manager]
-X-MS-RP [Microsoft Exchange ActiveSync]
-X-MS-Schemaversion [Microsoft Azure Cosmos DB]
-X-MS-Server-Encrypted [Microsoft Azure Storage]
-X-MS-Serviceversion [Microsoft Azure Cosmos DB]
-X-MS-Session-Token [Microsoft Azure Cosmos DB]
-X-MS-Tag-Count [Microsoft Azure Storage]
-X-MS-Total-Request-Charge [Microsoft Azure Cosmos DB]
-X-MS-Version [Microsoft Azure Storage]
-X-MS-Version-ID [Microsoft Azure Storage]
-X-MS-XP-Role [Microsoft Azure Cosmos DB]
-X-MSEdge-ClientID [Bing Image Search API]
-X-MSEdge-Ref [Bing API]
-X-Nananana [Batcache WordPress Page Caching]
-X-Newfold-Cache-Level [Newfold Labs WordPress Performance Module]
-X-Nextjs-Cache [Next.js Framework]
-X-Nextjs-Matched-Path [Next.js Framework]
-X-Nextjs-Postponed [Next.js Framework]
-X-Nextjs-Redirect [Next.js Framework]
-X-Nextjs-Rewrite [Next.js Framework]
-X-NF-Render-Mode [netlify.com Platform]
-X-NF-Request-ID [netlify.com Platform]
-X-Nginx-Cache [NGINX HTTP Server]
-X-Nginx-Cache-Status [NGINX HTTP Server]
-X-Nginx-HTTP_Host [NGINX HTTP Server]
-X-Nginx-Host [NGINX HTTP Server]
-X-Nginx-Hostname [NGINX HTTP Server]
-X-Nginx-IP [NGINX HTTP Server]
-X-Nginx-Request-Time [NGINX HTTP Server]
-X-Nginx-Upstream-Cache-Status [NGINX HTTP Server]
-X-Nitro-Cache [NitroPack.io Platform]
-X-Nitro-Cache-From [NitroPack.io Platform]
-X-Nitro-Disabled [NitroPack.io Platform]
-X-Nitro-Disabled-Reason [NitroPack.io Platform]
-X-Nitro-Expires [NitroPack.io Platform]
-X-Nitro-Prerender [nitro.unjs.io Platform]
-X-Nitro-Rev [NitroPack.io Platform]
-X-Okta-Backend [Core Okta API]
-X-Okta-Request-ID [Core Okta API]
-X-OneAgent-JS-Injection [Dynatrace OneAgent]
-X-Opennext [Next.js serverless adapter]
-X-Oracle-Cache [Oracle Application Server]
-X-ORACLE-DMS-ECID [Oracle Identity Cloud Service]
-X-ORACLE-DMS-RID [Oracle Identity Cloud Service]
-X-OSS-CDN-Auth [Alibaba Cloud Content Delivery Network]
-X-OSS-Delete-Marker [Alibaba Cloud Object Storage Service]
-X-OSS-Hash-CRC64ecma [Alibaba Cloud Object Storage Service]
-X-OSS-Next-Append-Position [Alibaba Cloud Object Storage Service]
-X-OSS-Object-Type [Alibaba Cloud Object Storage Service]
-X-OSS-Restore [Alibaba Cloud Object Storage Service]
-X-OSS-Request-ID [Alibaba Cloud Object Storage Service]
-X-OSS-Server-Time [Alibaba Cloud Object Storage Service]
-X-OSS-Server-Side-Encryption [Alibaba Cloud Object Storage Service]
-X-OSS-Storage-Class [Alibaba Cloud Object Storage Service]
-X-OSS-Tagging-Count [Alibaba Cloud Object Storage Service]
-X-OSS-Version-ID [Alibaba Cloud Object Storage Service]
-X-OVH-Webhosting-ID [OVHcloud.com Platform]
-X-OWA-ClientBegin [Microsoft Outlook Web Access]
-X-OWA-CorrelationId [Microsoft Outlook Web Access]
-X-OWA-DiagnosticsInfo [Microsoft Outlook Web Access]
-X-OWA-OWSVersion [Microsoft Outlook Web Access]
-X-OWA-Version [Microsoft Outlook Web Access]
-X-Page-Speed [NGINX HTTP Server]
-X-Pantheon-Styx-Hostname [Pantheon Software as a service]
-X-PHP-Version [PHP Scripting Version]
-X-PHPFusion [PHPFusion Content Management System]
-X-phpwcms-Page-Processed-In [phpwcms Content Management System]
-X-phpwcms-Release [phpwcms Content Management System]
-X-Pimcore-Cache-Date [Pimcore.com Platform]
-X-Pimcore-Cache-Tag [Pimcore.com Platform]
-X-Pimcore-Output-Cache-Disable-Reason [Pimcore.com Platform]
-X-Pimcore-Output-Cache-Tag [Pimcore.com Platform]
-X-Platform-Cache [Platform.sh Platform as a service]
-X-Platform-Cluster [Platform.sh Platform as a service]
-X-Platform-Processor [Platform.sh Platform as a service]
-X-Platform-Router [Platform.sh Platform as a service]
-X-Platform-Server [Platform.sh Platform as a service]
-X-Plenty-Shop [plentymarkets.com Platform]
-X-Plenty-Shop-Stage [plentymarkets.com Platform]
-X-Plenty-Shop-Version [plentymarkets.com Platform]
-X-Plex-Content-Compressed-Length [Plex Media Server]
-X-Plex-Content-Original-Length [Plex Media Server]
-X-Plex-Protocol [Plex Media Server]
-X-Powered-By [Generic HTTP Server/Technology]
-X-Powered-by-Anquanbao [Anquanbao Web Application Firewall]
-X-Powered-By-Plesk [Plesk.com Platform]
-X-Powered-By-Vtex-Cache [vtex.com Platform]
-X-Powered-CMS [Generic Content Management System]
-X-Powered-Framework [Generic Scripting Technology]
-X-Powered-PublicCMS [Generic Content Management System]
-X-PressLabs-Cache [presslabs.com Platform]
-X-Presslabs-Stats [presslabs.com Platform]
-X-Protected-By [Generic HTTP Server/Content Delivery Network]
-X-Provided-By [Generic HTTP Server/Content Delivery Network]
-X-Proxy-BackendServerStatus [Microsoft Outlook]
-X-Proxy-RoutingCorrectness [Microsoft Outlook]
-X-QC-Cache [QUIC Content Delivery Network]
-X-QC-Pop [QUIC Content Delivery Network]
-X-Qiniu-CDN [Qiniu Content Delivery Network]
-X-Rack-Cache [Rack::Cache]
-X-Rack-CacheX-Redirect-By [Rack::Cache]
-X-Rack-CORS [Rack::Cors]
-X-Rack-CORS-Original-Access-Control-Allow-Methods [Rack::Cors]
-X-Rack-CORS-Original-Access-Control-Allow-Origin [Rack::Cors]
-X-Rack-CORS-Original-Access-Control-Expose-Headers [Rack::Cors]
-X-Rack-CORS-Original-Access-Control-Max-Age [Rack::Cors]
-X-Rebelmouse-Authorization [rebelmouse.com Platform]
-X-Rebelmouse-Layouts-Key [rebelmouse.com Platform]
-X-Rebelmouse-Origin-Timing [rebelmouse.com Platform]
-X-Redirect-By [Generic Publishing Software]
-X-Redirect-Powered-By [Prettylinks.com Platform]
-X-Rebelmouse-Cache-Control [RebelMouse.com Platform]
-X-Rebelmouse-Surrogate-Control [RebelMouse.com Platform]
-X-RGW-Bytes-Used [ceph.io Platform]
-X-RGW-Next-Append-Position [ceph.io Platform]
-X-RGW-Object-Count [ceph.io Platform]
-X-RGW-Object-Type [ceph.io Platform]
-X-RGW-Quota-Bucket-Objects [ceph.io Platform]
-X-RGW-Quota-Bucket-Size [ceph.io Platform]
-X-RGW-Quota-Max-Buckets [ceph.io Platform]
-X-RGW-Quota-User-Objects [ceph.io Platform]
-X-RGW-Quota-User-Size [ceph.io Platform]
-X-RGW-Replicated-From [ceph.io Platform]
-X-RL-Cache [RabbitLoader WordPress Plugin]
-X-RL-Modified [RabbitLoader WordPress Plugin]
-X-RL-Rule [RabbitLoader WordPress Plugin]
-X-Rocket-Nginx-Bypass [WP Rocket WordPress Plugin]
-X-Rocket-Nginx-Serving-Static [WP Rocket WordPress Plugin]
-X-RS-CF-App-Version [RankSense.com Platform]
-X-RS-Changes-Amount [RankSense.com Platform]
-X-RS-Fixes-Request-Time [RankSense.com Platform]
-X-RUM-NotUpdateQueriedDbCopy [Microsoft Outlook]
-X-RUM-NotUpdateQueriedPath [Microsoft Outlook]
-X-RUM-Validated [Microsoft Outlook]
-X-Rundeck-Auth-Token [Rundeck API]
-X-Rundeck-Exec-Completed [Rundeck API]
-X-Rundeck-Exec-Duration [Rundeck API]
-X-Rundeck-Exec-State [Rundeck API]
-X-Rundeck-ExecOutput-Completed [Rundeck API]
-X-Rundeck-ExecOutput-Empty [Rundeck API]
-X-Rundeck-ExecOutput-Error [Rundeck API]
-X-Rundeck-ExecOutput-LastModifed [Rundeck API]
-X-Rundeck-ExecOutput-Message [Rundeck API]
-X-Rundeck-ExecOutput-Offset [Rundeck API]
-X-Rundeck-ExecOutput-TotalSize [Rundeck API]
-X-Rundeck-ExecOutput-Unmodified [Rundeck API]
-X-Ruxit-JS-Agent [Dynatrace Real User Monitoring]
-X-Sanity-Shard [Shopify.com Platform]
-X-SAP-Icm-Err-Id [SAP Web Dispatcher]
-X-SAP-LogonToken [SAP REST API]
-X-SAP-ResourceUrl [SAP SAPUI5]
-X-SAP-Webdisp-AP [SAP Web Dispatcher]
-X-Say-Cacheable [Generic Content Delivery Network]
-X-Say-TTL [Generic Content Delivery Network]
-X-SayCDN-TTL [Generic Content Delivery Network]
-X-Seraph-Accel-Cache [Seraphinite Accelerator WordPress Plugin]
-X-Seraph-Accel-Cont [Seraphinite Accelerator WordPress Plugin]
-X-Seraph-LoginReason [Atlassian Seraph]
-X-Served-By [Generic HTTP Server/Content Delivery Network]
-X-ServedBy [Generic HTTP Server/Content Delivery Network]
-X-Servebolt-Plugin [Servebolt.com Platform]
-X-Server [Generic HTTP Server]
-X-ServerName [Generic HTTP Server]
-X-Server-Name [Generic HTTP Server]
-X-Server-Powered-By [Generic HTTP Server/Technology]
-X-SF-Properties [Progress Sitefinity Content Management System]
-X-SFC-Cachable [TYPO3 Content Management System]
-X-SFC-Explanation [TYPO3 Content Management System]
-X-SFC-Tags [TYPO3 Content Management System]
-X-SFDC-Request-ID [Salesforce API]
-X-SG-CDN [SiteGround Content Delivery Network]
-X-ShardId [Shopify.com Platform]
-X-SharePointHealthScore [Microsoft SharePoint Services]
-X-Shopery [Shopery.com Platform]
-X-ShopId [Shopify.com Platform]
-X-Shopify-Generated-Cart-Token [Shopify.com Platform]
-X-Shopify-Granular-Consent-Beta [Shopify.com Platform]
-X-Shopify-Nginx-No-Cookies [Shopify.com Platform]
-X-Shopify-Privacy-API-Migration-Beta [Shopify.com Platform]
-X-Shopify-Request-Trackable [Shopify.com Platform]
-X-Shopify-Stage [Shopify.com Platform]
-X-SiteID [Amazon Elastic Compute Cloud]
-X-SL-CompState [AppWall Web Application Firewall]
-X-Smith-Release [smith.ai Platform]
-X-Smith-SQL-Count [smith.ai Platform]
-X-Smugmug-Hiring [SmugMug eCommerce]
-X-Smugmug-Values [SmugMug eCommerce]
-X-Sorting-Hat-PodId [Shopify.com Platform]
-X-Sorting-Hat-ShopId [Shopify.com Platform]
-X-SourceFiles [Microsoft ASP.NET Framework]
-X-SP-Metadata [Stackpath Content Delivery Network]
-X-Spip-Cache [SPIP Publishing Software]
-X-Spdwp-Ngx [WP Rocket WordPress Plugin]
-X-SRCache-Fetch-Status [NGINX HTTP Server]
-X-SRCache-Flag [NGINX HTTP Server]
-X-SRCache-Store-Escaped-Key [NGINX HTTP Server]
-X-SRCache-Store-Key [NGINX HTTP Server]
-X-SRCache-Store-Status [NGINX HTTP Server]
-X-Stackcache-Cacheable [20i WordPress Cache Plugin]
-X-StackifyID [stackify.com Platform]
-X-Statuspage-Skip-Logging [Atlassian Statuspage]
-X-StatusPage-Version [Atlassian Statuspage]
-X-Store [epages.com Platform]
-X-Storefront-Renderer-Rendered [Shopify.com Platform]
-X-Storefront-Renderer-Verified [Shopify.com Platform]
-X-Streams-Distribution [Generic Content Management System]
-X-Styx-Req-ID [Pantheon Software as a service]
-X-Sucuri-Cache [Sucuri Content Delivery Network]
-X-Sucuri-ID [Sucuri Content Delivery Network]
-X-Supported-By [Generic HTTP Server/Content Delivery Network]
-X-Supplied-By [Generic HTTP Server/Content Delivery Network]
-X-Sveltekit-Page [SvelteKit Framework]
-X-Swift-CacheTime [Alibaba Cloud Content Delivery Network]
-X-Swift-SaveTime [Alibaba Cloud Content Delivery Network]
-X-Symfony-Cache [Symfony PHP Framework]
-X-TEC-API-ORIGIN [The Events Calendar WordPress Plugin]
-X-TEC-API-ROOT [The Events Calendar WordPress Plugin]
-X-TEC-API-VERSION [The Events Calendar WordPress Plugin]
-X-Tencent-Ua [tencent.com platform]
-X-TimeAS [epages.com Platform]
-X-Tncms [Generic Content Management System]
-X-TransIP-Backend [TransIP Web Application Firewall]
-X-TransIP-Balancer [TransIP Web Application Firewall]
-X-Trove-App-Name [Trove Database as a Service]
-X-Trove-Country-Code [Trove Database as a Service]
-X-Trove-Order-UUID [Trove Database as a Service]
-X-TT-Agw-Login [toutiao.com platform]
-X-TT-LogID [toutiao.com platform]
-X-TT-Trace-Host [toutiao.com platform]
-X-TT-Trace-Tag [toutiao.com platform]
-X-Turbo-Charged-By [Generic HTTP Server/Content Delivery Network]
-X-Two-Cache-Date [10web.io Platform]
-X-Two-Critical [10web.io Platform]
-X-Two-Optimize [10web.io Platform]
-X-Two-Optimize-Reason [10web.io Platform]
-X-Two-Page-Cached [10web.io Platform]
-X-Two-Page-Is-Optimized [10web.io Platform]
-X-Two-Version [10web.io Platform]
-X-Two-Webp [10web.io Platform]
-X-Umbraco-Version [Umbraco Content Management System]
-X-Unbounce-Instance [unbounce.com Platform]
-X-Unbounce-PageID [unbounce.com Platform]
-X-Unbounce-Variant [unbounce.com Platform]
-X-Unbounce-VisitorID [unbounce.com Platform]
-X-Using-Nginx-Controller [NGINX HTTP Server]
-X-Varnish [Varnish HTTP Accelerator]
-X-Varnish-Age [Varnish HTTP Accelerator]
-X-Varnish-Backend [Varnish HTTP Accelerator]
-X-Varnish-Cache [Varnish HTTP Accelerator]
-X-Varnish-CC [Varnish HTTP Accelerator]
-X-Varnish-Debug-TTL [Varnish HTTP Accelerator]
-X-Varnish-ESI [Varnish HTTP Accelerator]
-X-Varnish-Grace [Varnish HTTP Accelerator]
-X-Varnish-HitMiss [Varnish HTTP Accelerator]
-X-Varnish-Host [Varnish HTTP Accelerator]
-X-Varnish-ID [Varnish HTTP Accelerator]
-X-Varnish-Secret [Varnish HTTP Accelerator]
-X-Varnish-Server [Varnish HTTP Accelerator]
-X-Varnish-Timing [Varnish HTTP Accelerator]
-X-Varnish-TTL [Varnish HTTP Accelerator]
-X-Varnish-URL [Varnish HTTP Accelerator]
-X-Vcap-Request-Id [cloudfoundry.org Platform]
-X-Vercel-Cache [vercel.com Cache]
-X-Vercel-Deployment-URL [vercel.com Cache]
-X-Vercel-Error [vercel.com Cache]
-X-Vercel-Execution-Region [vercel.com Cache]
-X-Vercel-Forwarded-For [vercel.com Cache]
-X-Vercel-ID [vercel.com Cache]
-X-Vercel-IP-As-Number [vercel.com Cache]
-X-Vercel-IP-City [vercel.com Cache]
-X-Vercel-IP-Continent [vercel.com Cache]
-X-Vercel-IP-Country [vercel.com Cache]
-X-Vercel-IP-Country-Region [vercel.com Cache]
-X-Vercel-IP-Latitude [vercel.com Cache]
-X-Vercel-IP-Longitude [vercel.com Cache]
-X-Vercel-IP-Timezone [vercel.com Cache]
-X-Vercel-Signature [vercel.com Cache]
-X-Version [Generic Software Version ID]
-X-Version-Id [Generic Software Version ID]
-X-Vingle-API-Region [vingle.net Platform]
-X-Vingle-Authentication-Token [vingle.net Platform]
-X-Vingle-Request-ID [vingle.net Platform]
-X-Vingle-Time [vingle.net Platform]
-X-Vingle-UDID [vingle.net Platform]
-X-Vingle-User-Agent [vingle.net Platform]
-X-Virus-Infected [Microsoft SharePoint Services]
-X-Volterra-Location [F5 Volterra]
-X-VServer [Varnish HTTP Accelerator]
-X-Vtex-Backend-Elapsed-Time [vtex.com Platform]
-X-Vtex-Cache-Backend-Connect-Time [vtex.com Platform]
-X-Vtex-Cache-Backend-Header-Time [vtex.com Platform]
-X-Vtex-Cache-Server [vtex.com Platform]
-X-Vtex-Cache-Status [vtex.com Platform]
-X-Vtex-Cache-Time [vtex.com Platform]
-X-Vtex-Cache-Status-Janus-Apicache [vtex.com Platform]
-X-Vtex-Etag-Control [vtex.com Platform]
-X-Vtex-IO-Cluster-ID [vtex.com Platform]
-X-Vtex-Janus-Router-Backend-App [vtex.com Platform]
-X-Vtex-Processed-AT [vtex.com Platform]
-X-Vtex-Processado-EM [vtex.com Platform]
-X-Vtex-Processed-AR [vtex.com Platform]
-X-Vtex-Product [vtex.com Platform]
-X-Vtex-Remote-Cache [vtex.com Platform]
-X-Vtex-Renderer [vtex.com Platform]
-X-Vtex-Router-Elapsed-Time [vtex.com Platform]
-X-Vtex-Router-Version [vtex.com Platform]
-X-Webcom-Cache-Status [web.com Platform]
-X-Wix-Renderer-Server [Wix.com Publishing Software]
-X-Wix-Request-Id [Wix.com Publishing Software]
-X-Wix-Server-Artifact-Id [Wix.com Publishing Software]
-X-WP-CF-Fallback-Cache [Super Page Cache for Cloudflare WordPress Plugin]
-X-WP-CF-Super-Cache [Super Page Cache for Cloudflare WordPress Plugin]
-X-WP-CF-Super-Cache-Active [Super Page Cache for Cloudflare WordPress Plugin]
-X-WP-CF-Super-Cache-Cache-Control [Super Page Cache for Cloudflare WordPress Plugin]
-X-WP-CF-Super-Cache-Cookies-Bypass [Super Page Cache for Cloudflare WordPress Plugin]
-X-XHTML-Minification-Powered-By [The Web Markup Minifier]
-X-XYZ-Runtime [Generation XYZ Platform]
-X-XYZ-Server [Generation XYZ Platform]
-X-Yerdle-APP-Name [Yerdle Software]
-X-Yottaa-Metrics [yottaa.com Platform]
-X-Yottaa-Optimizations [yottaa.com Platform]
-X-Yottaa-OS [yottaa.com Platform]
-X-Yottaa-Sig [yottaa.com Platform]
-X-Zen-Fury [ZenEdge Web Application Firewall]
-X-Zendesk-User-ID [Zendesk Customer Relationship Management]
-YJS-ID [Yunjiasu Content Delivery Network]
-YJS-CacheStatus [Yunjiasu Content Delivery Network]
-Yunjiasu-Nginx [Yunjiasu HTTP Server]
\ No newline at end of file
+$WSEP (IBM WebSphere Application Server)
+Akamai-GRN (Akamai Edge)
+Akamai-Mon-Iucid-Del (Akamai Adaptive Media Delivery)
+Akamai-Mon-Iucid-Ing (Akamai Adaptive Media Delivery)
+Akamai-Request-BC (Akamai Edge)
+Ali-Swift-Global-Savetime (Alibaba Cloud Object Storage Service)
+Alisite-Track (Alibaba Cloud Content Delivery Network)
+Apigw-RequestID (Amazon API Gateway)
+AR-Atime (ArvanCloud Content Delivery Network)
+AR-Cache (ArvanCloud Content Delivery Network)
+AR-PoweredBy (ArvanCloud Content Delivery Network)
+AR-Request-ID (ArvanCloud Content Delivery Network)
+AR-SID (ArvanCloud Content Delivery Network)
+Arastta (Arastta eCommerce)
+Arr-Disable-Session-Affinity (Azure Web App)
+ATL-TraceID (Atlassian Jira)
+Azure-AsyncOperation (Microsoft Azure Resource Manager)
+Azure-RegionName (Microsoft Azure)
+Azure-SiteName (Microsoft Azure)
+Azure-SlotName (Microsoft Azure)
+Azure-Version (Microsoft Azure)
+BingAPIs-Market (Bing Image Search API)
+BingAPIs-SessionId (Bing API)
+BingAPIs-TraceId (Bing Image Search API)
+CDN-Cache-Control (Generic Content Delivery Network)
+CDN-Loop (Generic Content Delivery Network)
+CF-Access-Domain (Cloudflare Access)
+CF-Apo-Via (Cloudflare Automatic Platform Optimization)
+CF-Bgj (Cloudflare Image Optimization)
+CF-Cache-Status (Cloudflare Automatic Platform Optimization)
+CF-CDNJS-Via (cdnjs.com Content Delivery Network)
+CF-CHL-Bypass (Cloudflare Content Delivery Network)
+CF-CHL-Out (Cloudflare Content Delivery Network)
+CF-Connecting-IP (Cloudflare Content Delivery Network)
+CF-Edge-Cache (Cloudflare Automatic Platform Optimization)
+CF-IPCountry (Cloudflare Content Delivery Network)
+CF-Mitigated (Cloudflare Content Delivery Network)
+CF-Polished (Cloudflare Image Optimization)
+CF-Railgun (Cloudflare Railgun Origin Network Optimizer)
+CF-RAY (Cloudflare Content Delivery Network)
+CF-Request-ID (Cloudflare Content Delivery Network)
+CF-Visitor (Cloudflare Content Delivery Network)
+Cloudflare-CDN-Cache-Control (Cloudflare Cache)
+Cloudfront-Forwarded-Proto (Amazon CloudFront)
+Cloudfront-Is-Android-Viewer (Amazon CloudFront)
+Cloudfront-Is-Desktop-Viewer (Amazon CloudFront)
+Cloudfront-Is-IOS-Viewer (Amazon CloudFront)
+Cloudfront-Is-Mobile-Viewer (Amazon CloudFront)
+Cloudfront-Is-SmartTV-Viewer (Amazon CloudFront)
+Cloudfront-Is-Tablet-Viewer (Amazon CloudFront)
+Cloudfront-Viewer-Address (Amazon CloudFront)
+Cloudfront-Viewer-ASN (Amazon CloudFront)
+Cloudfront-Viewer-City (Amazon CloudFront)
+Cloudfront-Viewer-Country (Amazon CloudFront)
+Cloudfront-Viewer-Country-Name (Amazon CloudFront)
+Cloudfront-Viewer-Country-Region (Amazon CloudFront)
+Cloudfront-Viewer-Country-Region-Name (Amazon CloudFront)
+CloudFront-Viewer-Header-Count (Amazon CloudFront)
+CloudFront-Viewer-Header-Order (Amazon CloudFront)
+Cloudfront-Viewer-HTTP-Version (Amazon CloudFront)
+Cloudfront-Viewer-JA3-Fingerprint (Amazon CloudFront)
+Cloudfront-Viewer-Latitude (Amazon CloudFront)
+Cloudfront-Viewer-Longitude (Amazon CloudFront)
+Cloudfront-Viewer-Metro-Code (Amazon CloudFront)
+Cloudfront-Viewer-Postal-Code (Amazon CloudFront)
+Cloudfront-Viewer-Time-Zone (Amazon CloudFront)
+Cloudfront-Viewer-TLS (Amazon CloudFront)
+CMS-Version (Generic Content Management System Software)
+Commerce-Server-Software (Microsoft Commerce Server)
+Composed-By (Generic Publishing Software)
+Contao-Cache (Contao Content Management System Software)
+Contao-Merge-Cache-Control (Contao Content Management System Software)
+Contao-Page-Layout (Contao Content Management System Software)
+Contao-Private-Response-Reason (Contao Content Management System Software)
+Cteonnt-Length (Citrix Application Delivery Controller)
+EagleID (Alibaba Cloud Content Delivery Network)
+Edge-Cache-Tag (Akamai Edge)
+FastCGI-Cache (NGINX HTTP Server)
+Fastly-Debug-Path (fastly.com Platform)
+Fastly-Debug-TTL (fastly.com Platform)
+Fastly-Debug-Digest (fastly.com Platform)
+Fastly-IO-Error (Fastly Image Optimizer)
+Fastly-IO-Info (Fastly Image Optimizer)
+Fastly-IO-Warning (Fastly Image Optimizer)
+Fastly-Request-Backend (fastly.com Platform)
+Fastly-Restarts (fastly.com Platform)
+Fastly-Sie (fastly.com Platform)
+Fastly-Stats (Fastly Image Optimizer)
+Fastly-Swr (fastly.com Platform)
+Firespring-Website-ID (Firespring.com Platform)
+Fitbit-Rate-Limit-Limit (Fitbit Web API)
+Fitbit-Rate-Limit-Remaining (Fitbit Web API)
+Fitbit-Rate-Limit-Reset (Fitbit Web API)
+Fly-Replay (fly.io Platform)
+Fly-Replay-Src (fly.io Platform)
+Fly-Request-ID (fly.io Platform)
+FT-Called-APP (fluidtopics.com Platform)
+FT-Called-APP-Version (fluidtopics.com Platform)
+Fvrr-Bl-Route-ID (fiverr.com Platform)
+Fvrr-Bl-Service-Name (fiverr.com Platform)
+Fvrr-Request-Headers (fiverr.com Platform)
+Generator (Generic Publishing Software)
+GitLab-LB (GitLab API)
+GitLab-SV (GitLab API)
+Hummingbird-Cache (Hummingbird WordPress Plugin)
+HX-Location (htmx library)
+HX-Push-Url (htmx library)
+HX-Redirect (htmx library)
+HX-Refresh (htmx library)
+HX-Replace-Url (htmx library)
+HX-Reswap (htmx library)
+HX-Retarget (htmx library)
+HX-Reselect (htmx library)
+HX-Trigger (htmx library)
+HX-Trigger-After-Settle (htmx library)
+HX-Trigger-After-Swap (htmx library)
+IBM-Web2-Location (IBM WebSphere Commerce)
+Imgeng-Hash (imageengine.io Platform)
+Imgeng-Img-Status (imageengine.io Platform)
+Incap-Blocking (Imperva XRAY)
+Incap-Cache-Duration (Imperva XRAY)
+Incap-Cache-Level (Imperva XRAY)
+Incap-Cache-Key (Imperva XRAY)
+Incap-Cache-Tags (Imperva XRAY)
+Incap-Cache-TTL (Imperva XRAY)
+Incap-Cache-Reason (Imperva XRAY)
+Incap-Cache-Rules (Imperva XRAY)
+Incap-Cache-Status (Imperva XRAY)
+Incap-Connection (Imperva XRAY)
+Incap-Origin-Pop (Imperva XRAY)
+Incap-Pop (Imperva XRAY)
+Incap-Proxy-ID (Imperva XRAY)
+Incap-Redirect (Imperva XRAY)
+Incap-Req-ID (Imperva XRAY)
+Incap-RTT (Imperva XRAY)
+Incap-Think-Time (Imperva XRAY)
+ITX-Generated-Timestamp (IBM WebSphere Commerce)
+K-Proxy-Request (Knative Serverless Deployments)
+KBN-License-Sig (Kibana Data Visualization Dashboard)
+KBN-Name (Kibana Data Visualization Dashboard)
+KBN-Version (Kibana Data Visualization Dashboard)
+KBN-Xpack-Sig (Kibana Data Visualization Dashboard)
+Ki-Cache-Tag (kinsta.com Platform)
+Ki-Cache-Type (kinsta.com Platform)
+Ki-CF-Cache-Status (kinsta.com Platform)
+Ki-Edge (kinsta.com Platform)
+Ki-Edge-o2o (kinsta.com Platform)
+Ki-Origin (kinsta.com Platform)
+Kong-Route-ID (Kong API Management Platform)
+Kong-Route-Name (Kong API Management Platform)
+Kong-Service-ID (Kong API Management Platform)
+Kong-Service-Name (Kong API Management Platform)
+Liferay-Portal (Liferay Portal)
+M4JSAPI-WebServer-Total-Time (cegid.com Platform)
+Magestack-Area (MageStack eCommerce)
+Magestack-Cache (MageStack eCommerce)
+Magestack-Cacheable (MageStack eCommerce)
+Magestack-Cacheable-Reason (MageStack eCommerce)
+Magestack-Cache-Hits (MageStack eCommerce)
+Magestack-Cache-Lifetime (MageStack eCommerce)
+Magestack-Cache-Status (MageStack eCommerce)
+Magestack-Cache-Warning (MageStack eCommerce)
+Magestack-Config (MageStack eCommerce)
+Magestack-Debug (MageStack eCommerce)
+Magestack-Last-Modified (MageStack eCommerce)
+Magestack-Loadbalancer (MageStack eCommerce)
+Magestack-Magento-Version (MageStack eCommerce)
+Magestack-Pagespeed (MageStack eCommerce)
+Magestack-Response-Ttl (MageStack eCommerce)
+MageStack-Spdy (MageStack eCommerce)
+Magestack-Tag (MageStack eCommerce)
+Magestack-Web-Node (MageStack eCommerce)
+MageStack-Whitelist-Debug (MageStack eCommerce)
+MageStack-Whitelisted-Http-Host (MageStack eCommerce)
+MageStack-Whitelisted-Ip (MageStack eCommerce)
+MageStack-Whitelisted-Uri (MageStack eCommerce)
+MageStack-Whitelisted-User-Agent (MageStack eCommerce)
+MediaWiki-API-Error (mediawiki.org Platform)
+MediaWiki-CORS-Rejection (mediawiki.org Platform)
+MediaWiki-Login-Suppressed (mediawiki.org Platform)
+Medium-Fulfilled-By (medium.com Platform)
+Medium-Missing-Time (medium.com Platform)
+MicrosoftOfficeWebServer (Microsoft Office HTTP Server)
+MicrosoftSharePointTeamServices (Microsoft SharePoint Services)
+Mighty-Cluster (mightynetworks.com Platform)
+Mighty-ENV (mightynetworks.com Platform)
+Mighty-Location (mightynetworks.com Platform)
+Mighty-Runtime (mightynetworks.com Platform)
+Mighty-Service (mightynetworks.com Platform)
+MS-ASProtocolCommands (Microsoft Exchange Server)
+MS-ASProtocolVersions (Microsoft Exchange Server)
+MS-Author-Via (Microsoft WebDAV Server Extension)
+MS-Server-ActiveSync (Microsoft Exchange Server)
+Nginx-Cache (NGINX HTTP Server)
+Ngrok-Agent-IPs (ngrok.com Platform)
+Ngrok-Error-Code (ngrok.com Platform)
+Ngrok-Trace-Id (ngrok.com Platform)
+ntCoent-Length (Citrix Application Delivery Controller)
+Oracle-Mobile-Canonical-Link (Oracle REST API for Mobile Cloud Service)
+Oracle-Mobile-Created-By (Oracle REST API for Mobile Cloud Service)
+Oracle-Mobile-Created-On (Oracle REST API for Mobile Cloud Service)
+Oracle-Mobile-Modified-By (Oracle REST API for Mobile Cloud Service)
+Oracle-Mobile-Modified-On (Oracle REST API for Mobile Cloud Service)
+Oracle-Mobile-Name (Oracle REST API for Mobile Cloud Service)
+Oracle-Mobile-Runtime-Version (Oracle Mobile Cloud Service)
+Oracle-Mobile-Self-Link (Oracle REST API for Mobile Cloud Service)
+Oracle-Mobile-Sync-Evict (Oracle REST API for Mobile Cloud Service)
+Oracle-Mobile-Sync-Expires (Oracle REST API for Mobile Cloud Service)
+Oracle-Mobile-Sync-No-Store (Oracle REST API for Mobile Cloud Service)
+Oracle-Mobile-Sync-Resource-Type (Oracle REST API for Mobile Cloud Service)
+OracleCommerceCloud-Sandiego (Oracle Commerce Cloud)
+OracleCommerceCloud-Version (Oracle Commerce Cloud)
+OT-Baggage-Auth0-Request-ID (auth0.com Platform)
+Oxygen-Cache-Control (Shopify.com Platform)
+Oxygen-Full-Page-Cache (Shopify.com Platform)
+Pantheon-Trace-ID (Pantheon Software as a service)
+PContext-Resp-Is-Stale (Pantheon Software as a service)
+Pega-Host (pega.com Platform)
+Platform (Generic Publishing Software)
+Powered-By (Generic Scripting Technology)
+Powered-By-ChinaCache (ChinaCache Content Delivery Network)
+Processed-By (Generic Scripting Technology)
+Product (Generic Publishing Software)
+Redis-Cache-Response-For (Redis in-memory Data Structure Store)
+Request-Context (Microsoft ASP.NET Framework)
+Response_Server (Generic HTTP Server)
+Server (Generic HTTP Server/Content Delivery Network)
+Serversignature (Generic HTTP Server)
+Servertokens (Generic HTTP Server)
+Servlet-Engine (Generic Servlet Engine Software)
+SForce-Limit-Info (Salesforce REST API)
+SG-F-Cache (SiteGround Optimizer WordPress Plugin)
+SG-Optimizer-Cache-Control (SiteGround Optimizer WordPress Plugin)
+SG-Optimizer-Worker-Status (SiteGround Optimizer WordPress Plugin)
+SharePointError (Microsoft SharePoint Services)
+SharePointHealthScore (Microsoft SharePoint Services)
+Simplycom-Server (simply.com HTTP Server)
+Smug-CDN (SmugMug eCommerce)
+Smug-Meta-Prefetch (SmugMug eCommerce)
+Smug-Meta-Prefetch-Files (SmugMug eCommerce)
+SPIisLatency (Microsoft SharePoint Online)
+SPRequestDuration (Microsoft SharePoint Online)
+SPRequestGuid (Microsoft SharePoint Services)
+Strikingly-Cache (strikingly.com Platform)
+Strikingly-Cache-Region (strikingly.com Platform)
+Strikingly-Cache-Version (strikingly.com Platform)
+SW-Context-Token (shopware.com Platform)
+SW-Invalidation-States (shopware.com Platform)
+SW-Language-ID (shopware.com Platform)
+SW-Version-ID (shopware.com Platform)
+Swift-Performance (Swift Performance WordPress Plugin)
+Tencent-Type (tencent.com platform)
+Tenweb-CF-Cache-Bypass-Reason (10web.io Platform)
+Tenweb-CF-Cache-Status (10web.io Platform)
+turbolinks-location (Turbolinks)
+Via (Generic Proxy server)
+WebDevSrc (PC SOFT WEBDEV Publishing Software)
+Weglot-Translated (Weglot Translate WordPress Plugin)
+Worker-Cache-Key (medium.com Platform)
+Worker-Cache-Middleware (medium.com Platform)
+Worker-Missing-Cookies (medium.com Platform)
+WP-Super-Cache (WP Super Cache WordPress Plugin)
+WPO-Cache-Message (WP-Optimize WordPress Plugin)
+WPO-Cache-Status (WP-Optimize WordPress Plugin)
+X-0-Cache-Hash (edg.io Platform)
+X-0-Caching-Status (edg.io Platform)
+X-0-Components (edg.io Platform)
+X-0-Hit-Request-ID (edg.io Platform)
+X-0-Request-ID (edg.io Platform)
+X-0-Status (edg.io Platform)
+X-0-Surrogate-Key (edg.io Platform)
+X-0-T (edg.io Platform)
+X-0-Version (edg.io Platform)
+X-77-Cache (CDN77 Content Delivery Network)
+X-77-NZ (CDN77 Content Delivery Network)
+X-77-NZT-Ray (CDN77 Content Delivery Network)
+X-77-Pop (CDN77 Content Delivery Network)
+X-Accel-Buffering (NGINX HTTP Server)
+X-Accel-Redirect (NGINX HTTP Server)
+X-Accel-Charset (NGINX HTTP Server)
+X-Accel-Expires (NGINX HTTP Server)
+X-Accel-Limit-Rate (NGINX HTTP Server)
+X-Accel-Version (mod_aclr2 Module)
+X-Advertising-By (Generic Publishing Software)
+X-AEM-Client-Country (Adobe Experience Manager Content Delivery Network)
+X-AEM-Client-Continent (Adobe Experience Manager Content Delivery Network)
+X-AEM-Cloudflare-Geolocation (Adobe Experience Manager Content Delivery Network)
+X-AH-Environment (Varnish HTTP Accelerator)
+X-Airee-ID (Airee Cloud Content Delivery Network)
+X-Airee-Node (Airee Cloud Content Delivery Network)
+X-Akam-SW-Version (Akamai mPulse)
+X-Akamai-Cache-Tag-Error (Akamai Purge Cache)
+X-Akamai-Edgescape (Akamai Edge)
+X-Akamai-EdgeWorker-onClientRequest-Info (Akamai EdgeWorkers)
+X-Akamai-EdgeWorker-onClientRequest-Log (Akamai EdgeWorkers)
+X-Akamai-EdgeWorker-onClientResponse-Info (Akamai EdgeWorkers)
+X-Akamai-EdgeWorker-onClientResponse-Log (Akamai EdgeWorkers)
+X-Akamai-EdgeWorker-onOriginRequest-Log (Akamai EdgeWorkers)
+X-Akamai-EdgeWorker-onOriginResponse-Log (Akamai EdgeWorkers)
+X-Akamai-EdgeWorker-ResponseProvider-Info (Akamai EdgeWorkers)
+X-Akamai-EdgeWorker-responseProvider-Log (Akamai EdgeWorkers)
+X-Akamai-JWT-Token (Akamai IoT Token Access Control)
+X-Akamai-OTA-UID (Akamai IoT Token Access Control)
+X-Akamai-Request-ID (Akamai Edge)
+X-Akamai-Sandbox (Akamai EdgeWorkers)
+X-Akamai-Session-Info (Akamai Property Manager API)
+X-Akamai-Staging (Akamai Ion)
+X-Akamai-Transformed (Akamai Edge)
+X-Akaunting (Akaunting Online Accounting)
+X-Alicdn-DA-UPS-Status (Alibaba Cloud Content Delivery Network)
+X-AMZ-Abort-Date (Amazon Simple Storage Service REST API)
+X-AMZ-Abort-Rule-ID (Amazon Simple Storage Service REST API)
+X-AMZ-Access-Point-Alias (Amazon Simple Storage Service REST API)
+X-AMZ-Apigw-ID (Amazon API Gateway)
+X-AMZ-Archive-Status (Amazon Simple Storage Service REST API)
+X-AMZ-Bucket (Amazon Simple Storage Service REST API)
+X-AMZ-Bucket-Region (Amazon Simple Storage Service REST API)
+X-AMZ-CF-Pop (Amazon CloudFront Edge)
+X-AMZ-CF-ID (Amazon CloudFront Edge)
+X-AMZ-Checksum-CRC32 (Amazon Simple Storage Service REST API)
+X-AMZ-Checksum-CRC32c (Amazon Simple Storage Service REST API)
+X-AMZ-Checksum-SHA1 (Amazon Simple Storage Service REST API)
+X-AMZ-Checksum-SHA256 (Amazon Simple Storage Service REST API)
+X-AMZ-Copy-Source-Version-ID (Amazon Simple Storage Service REST API)
+X-AMZ-Delete-Marker (Amazon Simple Storage Service REST API)
+X-AMZ-Error-Code (Amazon Simple Storage Service REST API)
+X-AMZ-Error-Detail-Key (Amazon Simple Storage Service REST API)
+X-AMZ-Error-Message (Amazon Simple Storage Service REST API)
+X-AMZ-Expiration (Amazon Simple Storage Service REST API)
+X-AMZ-ID-2 (Amazon Simple Storage Service REST API)
+X-AMZ-Meta-AWS-SGW (Amazon Storage Gateway)
+X-AMZ-Meta-CB-Modifiedtime (Amazon Simple Storage Service REST API)
+X-AMZ-Meta-Codebuild-Buildarn (Amazon CodeBuild)
+X-AMZ-Meta-Codebuild-Content-MD5 (Amazon CodeBuild)
+X-AMZ-Meta-Codebuild-Content-SHA256 (Amazon CodeBuild)
+X-AMZ-Meta-File-ATIME (Amazon File Cache)
+X-AMZ-Meta-File-Group (Amazon File Cache)
+X-AMZ-Meta-File-MTIME (Amazon File Cache)
+X-AMZ-Meta-File-Owner (Amazon File Cache)
+X-AMZ-Meta-File-Permissions (Amazon File Cache)
+X-AMZ-Meta-MD5chksum (Amazon Simple Storage Service REST API)
+X-AMZ-Meta-Mtime (Amazon Simple Storage Service REST API)
+X-AMZ-Meta-PC-Last-Modified (Amazon Simple Storage Service REST API)
+X-AMZ-Meta-S3B-Last-Modified (Amazon Simple Storage Service REST API)
+X-AMZ-Meta-S3CMD-Attrs (Amazon Simple Storage Service REST API)
+X-AMZ-Meta-SHA256 (Amazon Simple Storage Service REST API)
+X-AMZ-Meta-Surrogate-Key (Amazon Simple Storage Service REST API)
+X-AMZ-Meta-User-Agent (Amazon Transfer Family)
+X-AMZ-Meta-User-Agent-ID (Amazon Transfer Family)
+X-AMZ-Meta-Version (Amazon Simple Storage Service REST API)
+X-AMZ-Missing-Meta (Amazon Simple Storage Service REST API)
+X-Mural-LY-Version (mural.co Platform)
+X-AMZ-MP-Parts-Count (Amazon Simple Storage Service REST API)
+X-AMZ-Object-Lock-Legal-Hold (Amazon Simple Storage Service REST API)
+X-AMZ-Object-Lock-Mode (Amazon Simple Storage Service REST API)
+X-AMZ-Object-Lock-Retain-Until-Date (Amazon Simple Storage Service REST API)
+X-AMZ-Replication-Status (Amazon Simple Storage Service REST API)
+X-AMZ-Req-Time-Micros (Amazon Simple Storage Service REST API)
+X-AMZ-Restore (Amazon Simple Storage Service REST API)
+X-AMZ-Restore-Output-Path (Amazon Simple Storage Service REST API)
+X-AMZ-Request-Charged (Amazon Simple Storage Service REST API)
+X-AMZ-Request-ID (Amazon Simple Storage Service REST API)
+X-AMZ-Rid (Amazon Web Services)
+X-AMZ-Server-Side-Encryption (Amazon Simple Storage Service)
+X-AMZ-Server-Side-Encryption-AWS-Kms-Key-ID (Amazon Simple Storage Service)
+X-AMZ-Server-Side-Encryption-Bucket-Key-Enabled (Amazon Simple Storage Service REST API)
+X-AMZ-Server-Side-Encryption-Context (Amazon Simple Storage Service REST API)
+X-AMZ-Server-Side-Encryption-Customer-Algorithm (Amazon Simple Storage Service REST API)
+X-AMZ-Server-Side-Encryption-Customer-Key-MD5 (Amazon Simple Storage Service REST API)
+X-AMZ-Storage-Class (Amazon Simple Storage Service REST API)
+X-AMZ-Tagging-Count (Amazon Simple Storage Service REST API)
+X-AMZ-Version-ID (Amazon Simple Storage Service REST API)
+X-AMZ-Website-Redirect-Location (Amazon Simple Storage Service REST API)
+X-AMZN-Errortype (Amazon API Gateway)
+X-AMZN-Remapped-Connection (Amazon API Gateway)
+X-AMZN-Remapped-Content-Length (Amazon API Gateway)
+X-AMZN-Remapped-Date (Amazon API Gateway)
+X-AMZN-Remapped-Host (Amazon API Gateway)
+X-AMZN-Remapped-Server (Amazon API Gateway)
+X-AMZN-TLS-Cipher-Suite (Amazon API Gateway)
+X-AMZN-TLS-Version (Amazon API Gateway)
+X-AMZN-Remapped-User-Agent (Amazon API Gateway)
+X-AMZN-Remapped-X-Forwarded-For (Amazon API Gateway)
+X-AMZN-Requestid (Amazon API Gateway)
+X-AMZN-Trace-ID (Amazon Elastic Load Balancing)
+X-AMZN-WAF-Action (Amazon WAF)
+X-API-Version (Generic API)
+X-Appengine-BlobKey (Google Cloud Platform)
+X-Appengine-BlobRange (Google Cloud Platform)
+X-Appengine-Estimated-CPM-US-Dollars (Google Cloud Platform)
+X-Appengine-Log-Flush-Count (Google Cloud Platform)
+X-Appengine-Resource-Usage (Google Cloud Platform)
+X-Application-Context (Spring Boot)
+X-Arastta (Arastta eCommerce)
+X-ARequestID (Atlassian Jira)
+X-Aruba-Cache (Aruba HiSpeed Cache WordPress Plugin)
+X-Aruba2-Cache (Aruba HiSpeed Cache WordPress Plugin)
+X-AspNet-Version (Microsoft ASP.NET Framework)
+X-AspNetMvc-Version (Microsoft ASP.NET Framework)
+X-ATG-Version (Oracle ATG Web Commerce)
+X-Atmosphere-Error (Atmosphere Event Driven WebSockets Framework)
+X-Atmosphere-First-Request (Atmosphere Event Driven WebSockets Framework)
+X-Atmosphere-Framework (Atmosphere Event Driven WebSockets Framework)
+X-Atmosphere-Tracking-ID (Atmosphere Event Driven WebSockets Framework)
+X-Atmosphere-TrackMessageSize (Atmosphere Event Driven WebSockets Framework)
+X-Atmosphere-Transport (Atmosphere Event Driven WebSockets Framework)
+X-Azure-ExternalError (Microsoft Azure Front Door)
+X-Azure-InternalError (Microsoft Azure Front Door)
+X-Azure-OriginStatusCode (Microsoft Azure Front Door)
+X-Azure-Ref (Microsoft Azure Front Door)
+X-Azure-Ref-OriginShield (Microsoft Azure Front Door)
+X-Auth0-RequestID (auth0.com Platform)
+X-B3-Flags (Zipkin Tracing)
+X-B3-ParentSpanId (Zipkin Tracing)
+X-B3-Sampled (Zipkin Tracing)
+X-B3-SpanId (Zipkin Tracing)
+X-B3-TraceId (Zipkin Tracing)
+X-Backend (Generic Backend HTTP Server)
+X-Backdrop-Cache (Backdrop Content Management System)
+X-Backend-Server (Generic Backend HTTP Server)
+X-BackEndHttpStatus (Microsoft Outlook)
+X-Backside-Transport (IBM DataPower Gateway)
+X_BD_ST_Subid (baidu.com Platform)
+X-BD-UL (baidu.com Platform)
+X-Beluga-Backend-IP (Beluga Content Delivery Network)
+X-Beluga-Cache-Lookup (Beluga Content Delivery Network)
+X-Beluga-Cache-Status (Beluga Content Delivery Network)
+X-Beluga-Cache-Store (Beluga Content Delivery Network)
+X-Beluga-Document (Beluga Content Delivery Network)
+X-Beluga-Error (Beluga Content Delivery Network)
+X-Beluga-Node (Beluga Content Delivery Network)
+X-Beluga-Record (Beluga Content Delivery Network)
+X-Beluga-Response-Time (Beluga Content Delivery Network)
+X-Beluga-Status (Beluga Content Delivery Network)
+X-Beluga-Trace (Beluga Content Delivery Network)
+X-BEServer (Microsoft Exchange ActiveSync)
+X-BeSku (Microsoft Outlook)
+X-BinarySec-NoCache (BinarySEC Web Application Firewall)
+X-BinarySec-Via (BinarySEC Web Application Firewall)
+X-Bitrix-Ajax-Status (Bitrix24 Customer Relationship Management)
+X-Bitrix-Composite (Bitrix24 Customer Relationship Management)
+X-Bitrix-LB (Bitrix24 Customer Relationship Management)
+X-Bitrix-Rest-System-Time (Bitrix24 Customer Relationship Management)
+X-Bitrix-Rest-Time (Bitrix24 Customer Relationship Management)
+X-Bitrix-Rest-User-Time (Bitrix24 Customer Relationship Management)
+X-Bitrix-RI (Bitrix24 Customer Relationship Management)
+X-Bitrix-TCP (Bitrix24 Customer Relationship Management)
+X-Bitrix-Times (Bitrix24 Customer Relationship Management)
+X-Blackboard-Appserver (Blackboard Learn Platform)
+X-Blackboard-Context-Version (Blackboard Learn Platform)
+X-Blackboard-Product (Blackboard Learn Platform)
+X-Bubble-Capacity-Limit (bubble.io Platform)
+X-Bubble-Capacity-Used (bubble.io Platform)
+X-Bubble-Perf (bubble.io Platform)
+X-Built-With (Generic Publishing Software)
+X-Bytefaas-Cold-Start-duration (ByteDance Function as a Service)
+X-Bytefaas-Enable-Stream (ByteDance Function as a Service)
+X-Bytefaas-Execution-Duration (ByteDance Function as a Service)
+X-Bytefaas-Gateway-Duration (ByteDance Function as a Service)
+X-Bytefaas-Memory-Usage (ByteDance Function as a Service)
+X-Bytefaas-Request-ID (ByteDance Function as a Service)
+X-Bytefaas-Worker-Duration (ByteDance Function as a Service)
+X-Bytefaas-Worker-Schedule-Duration (ByteDance Function as a Service)
+X-Cache-Handler (Cache Enabler WordPress Plugin)
+X-Cache-Only-Varnish (Varnish HTTP Accelerator)
+X-Cache-Type (Generic Cache Software)
+X-CalculatedBETarget (Microsoft Outlook)
+X-CalculatedFETarget (Microsoft Outlook)
+X-CDN (Generic Content Delivery Network)
+X-CDN-nazwa.pl-Age (nazwa.pl Content Delivery Network)
+X-CDN-nazwa.pl-Cache (nazwa.pl Content Delivery Network)
+X-CDN-nazwa.pl-Location (nazwa.pl Content Delivery Network)
+X-CDN-nazwa.pl-Policyused (nazwa.pl Content Delivery Network)
+X-CDN-Pop (Generic Content Delivery Network)
+X-CDN-Pop-IP (Generic Content Delivery Network)
+X-CF-Powered-By (NGINX HTTP Server)
+X-Cf-RouterError (Cloud Foundry Gorouter)
+X-Cf-Warnings (cloudfoundry.org Platform)
+X-Citiportal-Auth-Reason (citigroup.com Platform)
+X-Citiportal-Proxynode (citigroup.com Platform)
+X-Citiportal-Redirectreason (citigroup.com Platform)
+X-Citiportal-Requestid (citigroup.com Platform)
+X-Citiportal-Webnode (citigroup.com Platform)
+X-Clockwork-ID (Clockwork PHP Dev Tools)
+X-Clockwork-Version (Clockwork PHP Dev Tools)
+X-Cloud-Trace-Context (Google Cloud Platform)
+X-Cloudez-Verify (cloudez.io Platform)
+X-Cluster (Generic Cluster Software)
+X-CMS (Generic Content Management System Software)
+X-CMS-Version (Generic Content Management System Software)
+X-Cocoon-Date (Apache Cocoon Framework)
+X-Cocoon-Header (Apache Cocoon Framework)
+X-Cocoon-Int (Apache Cocoon Framework)
+X-Cocoon-Time (Apache Cocoon Framework)
+X-Cocoon-Version (Apache Cocoon Framework)
+X-Commerce-Core (Drupal Commerce Core Module)
+X-Compressed-By (Generic Compression Module)
+X-Confluence-Request-Time (Atlassian Confluence)
+X-Content-Encoded-By (Generic Publishing Software)
+X-Content-Powered-By (Joomla! K2 Module)
+X-Contentful-RateLimit-Second-Limit (Contentful Content Management API)
+X-Contentful-RateLimit-Second-Remaining (Contentful Content Management API)
+X-Contentful-RateLimit-Reset (Contentful Content Management API)
+X-Contentful-Request-ID (Contentful Content Delivery API)
+X-Cuckoo-Version (cuckoosandbox.org Platform)
+X-Daa-Tunnel (tencent.com platform)
+X-DataDome-Botfamily (DataDome.co Protection API)
+X-DataDome-Botname (DataDome.co Protection API)
+X-Datadome-Captchapassed (DataDome.co Protection API)
+X-Datadome-Charset (DataDome.co Protection API)
+X-DataDome-CID (DataDome.co Protection API)
+X-DataDome-ClientID (DataDome.co Protection API)
+X-DataDome-Devicecheckpassed (DataDome.co Protection API)
+X-DataDome-Headers (DataDome.co Protection API)
+X-DataDome-Isbot (DataDome.co Protection API)
+X-Datadome-Latency (DataDome.co Protection API)
+X-Datadome-Log (DataDome.co Protection API)
+X-Datadome-Matchedmodels (DataDome.co Protection API)
+X-DataDome-ModuleName (DataDome.co Protection API)
+X-DataDome-ModuleVersion (DataDome.co Protection API)
+X-DataDome-Request-Headers (DataDome.co Protection API)
+X-Datadome-Requestid (DataDome.co Protection API)
+X-Datadome-Ruletype (DataDome.co Protection API)
+X-Datadome-Score (DataDome.co Protection API)
+X-DataDome-Timestamp (DataDome.co Protection API)
+X-Datadome-Traffic-Rule-Response (DataDome.co Protection API)
+X-DataDome (DataDome.co Protection API)
+X-DataDomeResponse (DataDome.co Protection API)
+X-Debug-Info (Platform.sh Platform as a service)
+X-Debug-Token (Symfony Profiler)
+X-Debug-Token-Link (Symfony Profiler)
+X-DevSrv-CMS (Bitrix Site Manager)
+X-DD-B (DataDome.co Protection API)
+X-DiagInfo (Microsoft Exchange Server)
+X-DIS-Request-ID (DOSarrest.com Platform)
+X-Discourse-Cached (discourse.org Platform)
+X-Discourse-Route (discourse.org Platform)
+X-Discourse-TrackView (discourse.org Platform)
+X-DLM-External-Download (Download Monitor Wordpress Plugin)
+X-DLM-File-Name (Download Monitor Wordpress Plugin)
+X-DLM-No-Access (Download Monitor Wordpress Plugin)
+X-DLM-No-Waypoints (Download Monitor Wordpress Plugin)
+X-DLM-Redirect (Download Monitor Wordpress Plugin)
+X-DO-APP-Origin (DigitalOcean Cloud Platform)
+X-DO-Orig-Status (DigitalOcean Cloud Platform)
+X-Docket-Cache (Docket Cache WordPress Plugin)
+X-Dotclear-Static-Cache (Dotclear Publishing Software)
+X-dotDefender-Denied (dotDefender Web Application Firewall)
+X-DP-Response-Code (IBM DataPower Gateway)
+X-DP-Watson-Tran-ID (IBM Watson Assistant)
+X-Drupal-Cache (Drupal Content Management System)
+X-Drupal-Cache-Contexts (Drupal Content Management System)
+X-Drupal-Cache-Tags (Drupal Content Management System)
+X-Drupal-Dynamic-Cache (Drupal Content Management System)
+X-Drupal-Received-Locale (Drupal Content Management System)
+X-DT-Tracestate (Dynatrace Platform)
+X-dtAgentId (Dynatrace Real User Monitoring)
+X-dtHealthCheck (Dynatrace Real User Monitoring)
+X-dtInjectedServlet (Dynatrace Real User Monitoring)
+X-Edg-AWS-Region (edg.io Platform)
+X-Edg-Components (edg.io Platform)
+X-Edg-MR (edg.io Platform)
+X-Edg-P (edg.io Platform)
+X-Edg-Platform-AWS-Account (edg.io Platform)
+X-Edg-Status (edg.io Platform)
+X-Edg-Surrogate-Key (edg.io Platform)
+X-Edg-Version (edg.io Platform)
+X-EdgeConnect-MidMile-RTT (Akamai Edge)
+X-EdgeConnect-Origin-MEX-Latency (Akamai Edge)
+X-Edge-Location (Generic Content Delivery Network)
+X-Edge-Location-Klb (kinsta.com Platform)
+X-Elasticpress-Query (ElasticPress WordPress Plugin)
+X-Envoy-Decorator-Operation (Envoy L7 Proxy)
+X-Envoy-External-Address (Envoy L7 Proxy)
+X-Envoy-Immediate-Health-Check-Fail (Envoy L7 Proxy)
+X-Envoy-Internal (Envoy L7 Proxy)
+X-Envoy-Original-DST-Host (Envoy L7 Proxy)
+X-Envoy-Overloaded (Envoy L7 Proxy)
+X-Envoy-Ratelimited (Envoy L7 Proxy)
+X-Envoy-Upstream-Canary (Envoy L7 Proxy)
+X-Envoy-Upstream-Healthchecked-Cluster (Envoy L7 Proxy)
+X-Envoy-Upstream-Service-Time (Envoy L7 Proxy)
+X-ePages-RequestID (epages.com Platform)
+X-ePages-Site (epages.com Platform)
+X-Esi (Edge Server)
+X-ET-API-Origin (Event Tickets and Registration WordPress Plugin)
+X-ET-API-Root (Event Tickets and Registration WordPress Plugin)
+X-ET-API-Version (Event Tickets and Registration WordPress Plugin)
+X-Evy-Trace-Listener (Envoy L7 Proxy)
+X-Evy-Trace-Route-Configuration (Envoy L7 Proxy)
+X-Evy-Trace-Route-Service-Name (Envoy L7 Proxy)
+X-Evy-Trace-Served-By-Pod (Envoy L7 Proxy)
+X-Evy-Trace-Virtual-Host (Envoy L7 Proxy)
+X-EZ-Minify-HTML (Ezoic Content Delivery Network)
+X-EZ-Proxy-Out (OCLC EZproxy proxy)
+X-Ezoic-CDN (Ezoic Content Delivery Network)
+X-FASO-Server-Execution-Time (Faso.com Platform)
+X-FASO-Timer-Multiples-Section (Faso.com Platform)
+X-FASO-Timer-Replace-HW (Faso.com Platform)
+X-Fastly-Request-ID (fastly.com Platform)
+X-FB-An-Errors (facebook.com Platform)
+X-FB-An-Request-ID (facebook.com Platform)
+X-FB-Debug (facebook.com Platform)
+X-FB-Request-ID (facebook.com Platform)
+X-FB-Rev (facebook.com Platform)
+X-FB-Rlafr (facebook.com Platform)
+X-FB-Trace-ID (facebook.com Platform)
+X-FB-Trip-ID (facebook.com Platform)
+X-Fc-Code-Checksum (Alibaba Function Compute)
+X-Fc-Instance-Id (Alibaba Function Compute)
+X-Fc-Invocation-Duration (Alibaba Function Compute)
+X-Fc-Invocation-Service-Version (Alibaba Function Compute)
+X-Fc-Max-Memory-Usage (Alibaba Function Compute)
+X-Fc-Request-Id (Alibaba Function Compute)
+X-FEEFZInfo (Microsoft Outlook)
+X-FEProxyInfo (Microsoft Outlook)
+X-FEServer (Microsoft Exchange Server)
+X-FirstHopCafeEFZ (Microsoft Outlook)
+X-Flex-Lang (Flexcmp.com Platform)
+X-Flow-ExceptionCode (Neos Flow Framework)
+X-Flow-ExceptionMessage (Neos Flow Framework)
+X-Flow-Powered (Neos Flow Framework)
+X-Flying-Press-Cache (FlyingPress Wordpress Plugin)
+X-Flying-Press-Source (FlyingPress Wordpress Plugin)
+X-Foswikiaction (foswiki.org Platform)
+X-Foswikiuri (foswiki.org Platform)
+X-Framework (Generic Framework)
+X-FW-Dynamic (getflywheel.com Platform)
+X-FW-Hash (getflywheel.com Platform)
+X-FW-Serve (getflywheel.com Platform)
+X-FW-Server (getflywheel.com Platform)
+X-FW-Static (getflywheel.com Platform)
+X-FW-Type (getflywheel.com Platform)
+X-FW-Version (getflywheel.com Platform)
+X-Garden-Version (Generic HTTP Server/Technology)
+X-Generated-By (Generic Publishing Software)
+X-Generator (Generic Publishing Software)
+X-GG-Cache-Date (NGINX HTTP Server)
+X-GG-Cache-Status (NGINX HTTP Server)
+X-GitHub-API-Version-Selected (GitHub REST API)
+X-GitHub-Media-Type (GitHub REST API)
+X-GitHub-OTP (GitHub REST API)
+X-GitHub-Request-ID (GitHub REST API)
+X-Gitlab-Blob-Id (GitLab API)
+X-Gitlab-Commit-Id (GitLab API)
+X-Gitlab-Content-Sha256 (GitLab API)
+X-Gitlab-Encoding (GitLab API)
+X-Gitlab-Execute-Filemode (GitLab API)
+X-Gitlab-File-Name (GitLab API)
+X-Gitlab-File-Path (GitLab API)
+X-Gitlab-Last-Commit-Id (GitLab API)
+X-Gitlab-Meta (GitLab API)
+X-Gitlab-Ref (GitLab API)
+X-Gitlab-Size (GitLab API)
+X-GoCache-CacheStatus (gocache.com.br Platform)
+X-Goog-Component-Count (Google Cloud Storage)
+X-Goog-Custom-Time (Google Cloud Storage)
+X-Goog-Encryption-Algorithm (Google Cloud Storage)
+X-Goog-Encryption-Key-SHA256 (Google Cloud Storage)
+X-Goog-Expiration (Google Cloud Storage)
+X-Goog-Generation (Google Cloud Storage)
+X-Goog-Hash (Google Cloud Storage)
+X-Goog-IAP-Generated-Response (Google Identity-Aware Proxy)
+X-Goog-Meta-Goog-Reserved-File-Mtime (Google Cloud Storage)
+X-Goog-Metageneration (Google Cloud Storage)
+X-Goog-Storage-Class (Google Cloud Storage)
+X-Goog-Stored-Content-Encoding (Google Cloud Storage)
+X-Goog-Stored-Content-Length (Google Cloud Storage)
+X-Goog-Upload-Chunk-Granularity (Google Cloud Storage)
+X-Goog-Upload-Status (Google Cloud Storage)
+X-Goog-Upload-Size-Received (Google Cloud Storage)
+X-Goog-Upload-URL (Google Cloud Storage)
+X-GUploader-UploadID (Google Cloud Storage)
+X-HCDN-Cache-Status (hostinger.com Platform)
+X-HCDN-Cache-Edge (hostinger.com Platform)
+X-HCDN-Info (hostinger.com Platform)
+X-HCDN-Request-ID (hostinger.com Platform)
+X-HCDN-Upstream-RT (hostinger.com Platform)
+X-Hiawatha-Cache (Hiawatha HTTP Server)
+X-Hiawatha-Cache-Remove (Hiawatha HTTP Server)
+X-Hostinger-Datacenter (hostinger.com Platform)
+X-Hostinger-Node (hostinger.com Platform)
+X-HS-Cache-Config (Hubspot.com Platform)
+X-HS-Cache-Control (Hubspot.com Platform)
+X-HS-CF-Cache-Status (Hubspot.com Platform)
+X-HS-CFworker-Source (Hubspot.com Platform)
+X-HS-Combine-CSS (Hubspot.com Platform)
+X-HS-Content-Campaign-ID (Hubspot.com Platform)
+X-HS-Content-Id (Hubspot.com Platform)
+X-HS-Content-Group-Id (Hubspot.com Platform)
+X-HS-Https-Only (Hubspot.com Platform)
+X-HS-Hub-Id (Hubspot.com Platform)
+X-HS-Mapping-ID (Hubspot.com Platform)
+X-HS-Mapping-Only-After-Not-Found (Hubspot.com Platform)
+X-HS-Prerendered (Hubspot.com Platform)
+X-HS-Public-Host (Hubspot.com Platform)
+X-HS-Reason (Hubspot.com Platform)
+X-HS-Route-Prefix (Hubspot.com Platform)
+X-HS-Zone-Name (Hubspot.com Platform)
+X-HTML-Minification-Powered-By (Web Markup Minifier)
+X-HTTPd-Modphp (Apache HTTP Server)
+X-HubSpot-Correlation-Id (Hubspot.com Platform)
+X-HubSpot-NotFound (Hubspot.com Platform)
+X-HubSpot-RateLimit-Daily (Hubspot.com Platform)
+X-HubSpot-RateLimit-Daily-Remaining (Hubspot.com Platform)
+X-HubSpot-RateLimit-Interval-Milliseconds (Hubspot.com Platform)
+X-HubSpot-RateLimit-Max (Hubspot.com Platform)
+X-HubSpot-RateLimit-Remaining (Hubspot.com Platform)
+X-HubSpot-RateLimit-Secondly (Hubspot.com Platform)
+X-HubSpot-RateLimit-Secondly-Remaining (Hubspot.com Platform)
+X-HubSpot-Trust-Forwarded-For (Hubspot.com Platform)
+X-Hudson (Jenkins Automation Server)
+X-Hudson-CLI-Port (Jenkins Automation Server)
+X-Hudson-Theme (Jenkins Automation Server)
+X-HW (Stackpath Content Delivery Network)
+X-IE-Cache (imageengine.io Platform)
+X-Iinfo (Imperva Web Application Firewall)
+X-IIS-Server (Microsoft Internet Information Services)
+X-Includable-Version (Includable.com Platform)
+X-Instart-Cache (Instart DX Web Application Firewall)
+X-Instart-Request-ID (Instart DX Web Application Firewall)
+X-Instart-WL (Instart DX Web Application Firewall)
+X-IPS-Cached-Response (invisioncommunity.com Platform)
+X-IPS-LoggedIn (invisioncommunity.com Platform)
+X-IRM-Cantdecrypt (Microsoft SharePoint Services)
+X-IRM-Crashed (Microsoft SharePoint Services)
+X-IRM-Notowner (Microsoft SharePoint Services)
+X-IRM-Rejected (Microsoft SharePoint Services)
+X-IRM-Timeout (Microsoft SharePoint Services)
+X-IRM-Unknown-Failure (Microsoft SharePoint Services)
+X-Jenkins (Jenkins Automation Server)
+X-Jenkins-CLI-Port (Jenkins Automation Server)
+X-Jenkins-CLI2-Port (Jenkins Automation Server)
+X-Jenkins-Session (Jenkins Automation Server)
+X-Jetpack-Boost-Cache (Jetpack WordPress Plugin)
+X-Jimdo-Instance (Jimdo.com Platform)
+X-Jimdo-Wid (Jimdo.com Platform)
+X-Jitsi-Region (jitsi.org Platform)
+X-Jitsi-Release (jitsi.org Platform)
+X-Jitsi-Shard (jitsi.org Platform)
+X-Jive-Chrome-Wrapped (Jive REST API)
+X-Jive-Flow-ID (Jive REST API)
+X-Jive-Request-ID (Jive REST API)
+X-Jive-User-ID (Jive REST API)
+X-JSL (Jive REST API)
+X-Jupyterhub-Version (Jupyterhub Notebook Environment)
+X-Kinsta-Cache (kinsta.com Platform)
+X-Kong-Admin-Latency (Kong API Management Platform)
+X-Kong-Admin-Request-ID (Kong API Management Platform)
+X-Kong-Proxy-Latency (Kong API Management Platform)
+X-Kong-Response-Latency (Kong API Management Platform)
+X-Kong-Upstream-Latency (Kong API Management Platform)
+X-Kong-Upstream-Status (Kong API Management Platform)
+X-KoobooCMS-Version (Kooboo Content Management System)
+X-Last-60s-Hits (fastly.com Platform)
+X-LI-Fabric (LinkedIn API)
+X-LI-Pop (LinkedIn API)
+X-LI-Proto (LinkedIn API)
+X-LI-ResponseOrigin (LinkedIn API)
+X-LI-Route-Key (LinkedIn API)
+X-LI-UUID (LinkedIn API)
+X-Lift-Version (Lift Framework)
+X-Litespeed-Alt-Svc (LiteSpeed HTTP Server)
+X-Litespeed-Cache (LiteSpeed HTTP Server)
+X-Litespeed-Cache-Control (LiteSpeed HTTP Server)
+X-LiteSpeed-Purge (LiteSpeed HTTP Server)
+X-LiteSpeed-Tag (LiteSpeed HTTP Server)
+X-LiteSpeed-Vary (LiteSpeed HTTP Server)
+X-Loopia-Node (loopia.com Platform)
+X-LSADC-Backend (LiteSpeed Web ADC)
+X-LSADC-Cache (LiteSpeed Web ADC)
+X-Magento-Cache-Control (Adobe Commerce)
+X-Magento-Cache-Debug (Adobe Commerce)
+X-Magento-Debug (Adobe Commerce)
+X-Magento-Tags (Adobe Commerce)
+X-Magnolia-Registration (Magnolia Content Management System)
+X-Matomo-Request-ID (matomo.org Platform)
+X-MH-Tag (middlehost.com Platform)
+X-Mighty-Prerender (mightynetworks.com Platform)
+X-Mighty-Proxy (mightynetworks.com Platform)
+X-Miva-Cache (Miva Redis Caching)
+X-Mod-Pagespeed (Apache/Nginx HTTP Server)
+X-MS-Access-Tier (Microsoft Azure Storage)
+X-MS-Access-Tier-Change-Time (Microsoft Azure Storage)
+X-MS-Access-Tier-Inferred (Microsoft Azure Storage)
+X-MS-Activity-ID (Microsoft Azure Cosmos DB)
+X-MS-Alt-Content-Path (Microsoft Azure Cosmos DB)
+X-MS-Archive-Status (Microsoft Azure Storage)
+X-MS-ASThrottle (Microsoft Exchange Server)
+X-MS-Async-Operation-Timeout (Microsoft Azure)
+X-MS-Blob-Committed-Block-Count (Microsoft Azure Storage)
+X-MS-Blob-Sealed (Microsoft Azure Storage)
+X-MS-Blob-Sequence-Number (Microsoft Azure Storage)
+X-MS-Blob-Type (Microsoft Azure Storage)
+X-MS-Client-Request-Id (Microsoft Azure)
+X-MS-Clitelem (Microsoft Azure Storage)
+X-MS-Content-Path (Microsoft Azure Cosmos DB)
+X-MS-Continuation (Microsoft Azure Cosmos DB)
+X-MS-Copy-Completion-Time (Microsoft Azure Storage)
+X-MS-Copy-Destination-Snapshot (Microsoft Azure Storage)
+X-MS-Copy-ID (Microsoft Azure Storage)
+X-MS-Copy-Progress (Microsoft Azure Storage)
+X-MS-Copy-Source (Microsoft Azure Storage)
+X-MS-Copy-Status (Microsoft Azure Storage)
+X-MS-Copy-Status-Description (Microsoft Azure Storage)
+X-MS-Creation-Time (Microsoft Azure Storage)
+X-MS-Credential-Service-Url (Microsoft Exchange Server)
+X-MS-Credentials-Expire (Microsoft Exchange Server)
+X-MS-Correlation-Id (Microsoft Power Platform)
+X-MS-Current-Replica-Set-Size (Microsoft Azure Cosmos DB)
+X-MS-Current-Write-Quorum (Microsoft Azure Cosmos DB)
+X-MS-Delete-Type-Permanent (Microsoft Azure Storage)
+X-MS-Documentdb-Partitionkeyrangeid (Microsoft Azure Cosmos DB)
+X-MS-Documentdb-Query-Metrics (Microsoft Azure Cosmos DB)
+X-MS-Encryption-Key-SHA256 (Microsoft Azure Storage)
+X-MS-Encryption-Scope (Microsoft Azure Storage)
+X-MS-Error-Code (Microsoft Azure Storage)
+X-MS-Ests-Server (Microsoft Azure Storage)
+X-MS-Expiry-Time (Microsoft Azure Storage)
+X-MS-Forbidden-IP (Microsoft Azure)
+X-MS-Group (Microsoft Azure Storage)
+X-MS-Immutability-Policy-Mode (Microsoft Azure Storage)
+X-MS-Immutability-Policy-Until-Date (Microsoft Azure Storage)
+X-MS-Immutability-Policy-Until-Rate (Microsoft Azure Storage)
+X-MS-Incremental-Copy (Microsoft Azure Storage)
+X-MS-InvokeApp (Microsoft SharePoint Services)
+X-MS-Item-Count (Microsoft Azure Cosmos DB)
+X-MS-Last-Access-Time (Microsoft Azure Storage)
+X-MS-Last-State-Change-UTC (Microsoft Azure Cosmos DB)
+X-MS-Lease-Duration (Microsoft Azure Storage)
+X-MS-Lease-State (Microsoft Azure Storage)
+X-MS-Lease-Status (Microsoft Azure Storage)
+X-MS-Legal-Hold (Microsoft Azure Storage)
+X-MS-Location (Microsoft Exchange Server)
+X-MS-Meta-Name (Microsoft Azure Storage)
+X-MS-OR-Policy-ID (Microsoft Azure Storage)
+X-MS-Owner (Microsoft Azure Storage)
+X-MS-Permissions (Microsoft Azure Storage)
+X-MS-Portal-APP (Microsoft Azure Portal)
+X-MS-Quorum-Acked-Lsn (Microsoft Azure Cosmos DB)
+X-MS-Ratelimit-Remaining-Subscription-Deletes (Microsoft Azure Resource Manager)
+X-MS-Ratelimit-Remaining-Subscription-Reads (Microsoft Azure Resource Manager)
+X-MS-Ratelimit-Remaining-Subscription-Resource-Entities-Read (Microsoft Azure Resource Manager)
+X-MS-Ratelimit-Remaining-Subscription-Resource-Requests (Microsoft Azure Resource Manager)
+X-MS-Ratelimit-Remaining-Subscription-Writes (Microsoft Azure Resource Manager)
+X-MS-Ratelimit-Remaining-Resource (Microsoft Azure Resource Manager)
+X-MS-Ratelimit-Remaining-Tenant-Reads (Microsoft Azure Resource Manager)
+X-MS-Ratelimit-Remaining-Tenant-Resource-Entities-Read (Microsoft Azure Resource Manager)
+X-MS-Ratelimit-Remaining-Tenant-Resource-Requests (Microsoft Azure Resource Manager)
+X-MS-Ratelimit-Remaining-Tenant-Writes (Microsoft Azure Resource Manager)
+X-MS-Rehydrate-Priority (Microsoft Azure Storage)
+X-MS-Request-Charge (Microsoft Azure Cosmos DB)
+X-MS-Request-ID (Microsoft Azure Storage)
+X-MS-Request-Root-ID (Microsoft Azure Storage)
+X-MS-Resource-Quota (Microsoft Azure Cosmos DB)
+X-MS-Resource-Type (Microsoft Azure Storage)
+X-MS-Resource-Usage (Microsoft Azure Cosmos DB)
+X-MS-Retry-After-Ms (Microsoft Azure Cosmos DB)
+X-MS-Routing-Request-Id (Microsoft Azure Resource Manager)
+X-MS-RP (Microsoft Exchange ActiveSync)
+X-MS-Schemaversion (Microsoft Azure Cosmos DB)
+X-MS-Server-Encrypted (Microsoft Azure Storage)
+X-MS-Serviceversion (Microsoft Azure Cosmos DB)
+X-MS-Session-Token (Microsoft Azure Cosmos DB)
+X-MS-Tag-Count (Microsoft Azure Storage)
+X-MS-Total-Request-Charge (Microsoft Azure Cosmos DB)
+X-MS-Version (Microsoft Azure Storage)
+X-MS-Version-ID (Microsoft Azure Storage)
+X-MS-XP-Role (Microsoft Azure Cosmos DB)
+X-MSEdge-ClientID (Bing Image Search API)
+X-MSEdge-Ref (Bing API)
+X-Nananana (Batcache WordPress Page Caching)
+X-Newfold-Cache-Level (Newfold Labs WordPress Performance Module)
+X-Nextjs-Cache (Next.js Framework)
+X-Nextjs-Matched-Path (Next.js Framework)
+X-Nextjs-Postponed (Next.js Framework)
+X-Nextjs-Redirect (Next.js Framework)
+X-Nextjs-Rewrite (Next.js Framework)
+X-NF-Render-Mode (netlify.com Platform)
+X-NF-Request-ID (netlify.com Platform)
+X-Nginx-Cache (NGINX HTTP Server)
+X-Nginx-Cache-Status (NGINX HTTP Server)
+X-Nginx-HTTP_Host (NGINX HTTP Server)
+X-Nginx-Host (NGINX HTTP Server)
+X-Nginx-Hostname (NGINX HTTP Server)
+X-Nginx-IP (NGINX HTTP Server)
+X-Nginx-Request-Time (NGINX HTTP Server)
+X-Nginx-Upstream-Cache-Status (NGINX HTTP Server)
+X-Nitro-Cache (NitroPack.io Platform)
+X-Nitro-Cache-From (NitroPack.io Platform)
+X-Nitro-Disabled (NitroPack.io Platform)
+X-Nitro-Disabled-Reason (NitroPack.io Platform)
+X-Nitro-Expires (NitroPack.io Platform)
+X-Nitro-Prerender (nitro.unjs.io Platform)
+X-Nitro-Rev (NitroPack.io Platform)
+X-Okta-Backend (Core Okta API)
+X-Okta-Request-ID (Core Okta API)
+X-OneAgent-JS-Injection (Dynatrace OneAgent)
+X-Opennext (Next.js serverless adapter)
+X-Oracle-Cache (Oracle Application Server)
+X-ORACLE-DMS-ECID (Oracle Identity Cloud Service)
+X-ORACLE-DMS-RID (Oracle Identity Cloud Service)
+X-OSS-CDN-Auth (Alibaba Cloud Content Delivery Network)
+X-OSS-Delete-Marker (Alibaba Cloud Object Storage Service)
+X-OSS-Hash-CRC64ecma (Alibaba Cloud Object Storage Service)
+X-OSS-Next-Append-Position (Alibaba Cloud Object Storage Service)
+X-OSS-Object-Type (Alibaba Cloud Object Storage Service)
+X-OSS-Restore (Alibaba Cloud Object Storage Service)
+X-OSS-Request-ID (Alibaba Cloud Object Storage Service)
+X-OSS-Server-Time (Alibaba Cloud Object Storage Service)
+X-OSS-Server-Side-Encryption (Alibaba Cloud Object Storage Service)
+X-OSS-Storage-Class (Alibaba Cloud Object Storage Service)
+X-OSS-Tagging-Count (Alibaba Cloud Object Storage Service)
+X-OSS-Version-ID (Alibaba Cloud Object Storage Service)
+X-OVH-Webhosting-ID (OVHcloud.com Platform)
+X-OWA-ClientBegin (Microsoft Outlook Web Access)
+X-OWA-CorrelationId (Microsoft Outlook Web Access)
+X-OWA-DiagnosticsInfo (Microsoft Outlook Web Access)
+X-OWA-OWSVersion (Microsoft Outlook Web Access)
+X-OWA-Version (Microsoft Outlook Web Access)
+X-Page-Speed (NGINX HTTP Server)
+X-Pantheon-Styx-Hostname (Pantheon Software as a service)
+X-PHP-Version (PHP Scripting Version)
+X-PHPFusion (PHPFusion Content Management System)
+X-phpwcms-Page-Processed-In (phpwcms Content Management System)
+X-phpwcms-Release (phpwcms Content Management System)
+X-Pimcore-Cache-Date (Pimcore.com Platform)
+X-Pimcore-Cache-Tag (Pimcore.com Platform)
+X-Pimcore-Output-Cache-Disable-Reason (Pimcore.com Platform)
+X-Pimcore-Output-Cache-Tag (Pimcore.com Platform)
+X-Platform-Cache (Platform.sh Platform as a service)
+X-Platform-Cluster (Platform.sh Platform as a service)
+X-Platform-Processor (Platform.sh Platform as a service)
+X-Platform-Router (Platform.sh Platform as a service)
+X-Platform-Server (Platform.sh Platform as a service)
+X-Plenty-Shop (plentymarkets.com Platform)
+X-Plenty-Shop-Stage (plentymarkets.com Platform)
+X-Plenty-Shop-Version (plentymarkets.com Platform)
+X-Plex-Content-Compressed-Length (Plex Media Server)
+X-Plex-Content-Original-Length (Plex Media Server)
+X-Plex-Protocol (Plex Media Server)
+X-Powered-By (Generic HTTP Server/Technology)
+X-Powered-by-Anquanbao (Anquanbao Web Application Firewall)
+X-Powered-By-Plesk (Plesk.com Platform)
+X-Powered-By-Vtex-Cache (vtex.com Platform)
+X-Powered-CMS (Generic Content Management System)
+X-Powered-Framework (Generic Scripting Technology)
+X-Powered-PublicCMS (Generic Content Management System)
+X-PressLabs-Cache (presslabs.com Platform)
+X-Presslabs-Stats (presslabs.com Platform)
+X-Protected-By (Generic HTTP Server/Content Delivery Network)
+X-Provided-By (Generic HTTP Server/Content Delivery Network)
+X-Proxy-BackendServerStatus (Microsoft Outlook)
+X-Proxy-RoutingCorrectness (Microsoft Outlook)
+X-QC-Cache (QUIC Content Delivery Network)
+X-QC-Pop (QUIC Content Delivery Network)
+X-Qiniu-CDN (Qiniu Content Delivery Network)
+X-Rack-Cache (Rack::Cache)
+X-Rack-CacheX-Redirect-By (Rack::Cache)
+X-Rack-CORS (Rack::Cors)
+X-Rack-CORS-Original-Access-Control-Allow-Methods (Rack::Cors)
+X-Rack-CORS-Original-Access-Control-Allow-Origin (Rack::Cors)
+X-Rack-CORS-Original-Access-Control-Expose-Headers (Rack::Cors)
+X-Rack-CORS-Original-Access-Control-Max-Age (Rack::Cors)
+X-Rebelmouse-Authorization (rebelmouse.com Platform)
+X-Rebelmouse-Layouts-Key (rebelmouse.com Platform)
+X-Rebelmouse-Origin-Timing (rebelmouse.com Platform)
+X-Redirect-By (Generic Publishing Software)
+X-Redirect-Powered-By (Prettylinks.com Platform)
+X-Rebelmouse-Cache-Control (RebelMouse.com Platform)
+X-Rebelmouse-Surrogate-Control (RebelMouse.com Platform)
+X-RGW-Bytes-Used (ceph.io Platform)
+X-RGW-Next-Append-Position (ceph.io Platform)
+X-RGW-Object-Count (ceph.io Platform)
+X-RGW-Object-Type (ceph.io Platform)
+X-RGW-Quota-Bucket-Objects (ceph.io Platform)
+X-RGW-Quota-Bucket-Size (ceph.io Platform)
+X-RGW-Quota-Max-Buckets (ceph.io Platform)
+X-RGW-Quota-User-Objects (ceph.io Platform)
+X-RGW-Quota-User-Size (ceph.io Platform)
+X-RGW-Replicated-From (ceph.io Platform)
+X-RL-Cache (RabbitLoader WordPress Plugin)
+X-RL-Modified (RabbitLoader WordPress Plugin)
+X-RL-Rule (RabbitLoader WordPress Plugin)
+X-Rocket-Nginx-Bypass (WP Rocket WordPress Plugin)
+X-Rocket-Nginx-Serving-Static (WP Rocket WordPress Plugin)
+X-RS-CF-App-Version (RankSense.com Platform)
+X-RS-Changes-Amount (RankSense.com Platform)
+X-RS-Fixes-Request-Time (RankSense.com Platform)
+X-RUM-NotUpdateQueriedDbCopy (Microsoft Outlook)
+X-RUM-NotUpdateQueriedPath (Microsoft Outlook)
+X-RUM-Validated (Microsoft Outlook)
+X-Rundeck-Auth-Token (Rundeck API)
+X-Rundeck-Exec-Completed (Rundeck API)
+X-Rundeck-Exec-Duration (Rundeck API)
+X-Rundeck-Exec-State (Rundeck API)
+X-Rundeck-ExecOutput-Completed (Rundeck API)
+X-Rundeck-ExecOutput-Empty (Rundeck API)
+X-Rundeck-ExecOutput-Error (Rundeck API)
+X-Rundeck-ExecOutput-LastModifed (Rundeck API)
+X-Rundeck-ExecOutput-Message (Rundeck API)
+X-Rundeck-ExecOutput-Offset (Rundeck API)
+X-Rundeck-ExecOutput-TotalSize (Rundeck API)
+X-Rundeck-ExecOutput-Unmodified (Rundeck API)
+X-Ruxit-JS-Agent (Dynatrace Real User Monitoring)
+X-Sanity-Shard (Shopify.com Platform)
+X-SAP-Icm-Err-Id (SAP Web Dispatcher)
+X-SAP-LogonToken (SAP REST API)
+X-SAP-ResourceUrl (SAP SAPUI5)
+X-SAP-Webdisp-AP (SAP Web Dispatcher)
+X-Say-Cacheable (Generic Content Delivery Network)
+X-Say-TTL (Generic Content Delivery Network)
+X-SayCDN-TTL (Generic Content Delivery Network)
+X-Seraph-Accel-Cache (Seraphinite Accelerator WordPress Plugin)
+X-Seraph-Accel-Cont (Seraphinite Accelerator WordPress Plugin)
+X-Seraph-LoginReason (Atlassian Seraph)
+X-Served-By (Generic HTTP Server/Content Delivery Network)
+X-ServedBy (Generic HTTP Server/Content Delivery Network)
+X-Servebolt-Plugin (Servebolt.com Platform)
+X-Server (Generic HTTP Server)
+X-ServerName (Generic HTTP Server)
+X-Server-Name (Generic HTTP Server)
+X-Server-Powered-By (Generic HTTP Server/Technology)
+X-SF-Properties (Progress Sitefinity Content Management System)
+X-SFC-Cachable (TYPO3 Content Management System)
+X-SFC-Explanation (TYPO3 Content Management System)
+X-SFC-Tags (TYPO3 Content Management System)
+X-SFDC-Request-ID (Salesforce API)
+X-SG-CDN (SiteGround Content Delivery Network)
+X-ShardId (Shopify.com Platform)
+X-SharePointHealthScore (Microsoft SharePoint Services)
+X-Shopery (Shopery.com Platform)
+X-ShopId (Shopify.com Platform)
+X-Shopify-Generated-Cart-Token (Shopify.com Platform)
+X-Shopify-Granular-Consent-Beta (Shopify.com Platform)
+X-Shopify-Nginx-No-Cookies (Shopify.com Platform)
+X-Shopify-Privacy-API-Migration-Beta (Shopify.com Platform)
+X-Shopify-Request-Trackable (Shopify.com Platform)
+X-Shopify-Stage (Shopify.com Platform)
+X-SiteID (Amazon Elastic Compute Cloud)
+X-SL-CompState (AppWall Web Application Firewall)
+X-Smith-Release (smith.ai Platform)
+X-Smith-SQL-Count (smith.ai Platform)
+X-Smugmug-Hiring (SmugMug eCommerce)
+X-Smugmug-Values (SmugMug eCommerce)
+X-Sorting-Hat-PodId (Shopify.com Platform)
+X-Sorting-Hat-ShopId (Shopify.com Platform)
+X-SourceFiles (Microsoft ASP.NET Framework)
+X-SP-Metadata (Stackpath Content Delivery Network)
+X-Spip-Cache (SPIP Publishing Software)
+X-Spdwp-Ngx (WP Rocket WordPress Plugin)
+X-SRCache-Fetch-Status (NGINX HTTP Server)
+X-SRCache-Flag (NGINX HTTP Server)
+X-SRCache-Store-Escaped-Key (NGINX HTTP Server)
+X-SRCache-Store-Key (NGINX HTTP Server)
+X-SRCache-Store-Status (NGINX HTTP Server)
+X-Stackcache-Cacheable (20i WordPress Cache Plugin)
+X-StackifyID (stackify.com Platform)
+X-Statuspage-Skip-Logging (Atlassian Statuspage)
+X-StatusPage-Version (Atlassian Statuspage)
+X-Store (epages.com Platform)
+X-Storefront-Renderer-Rendered (Shopify.com Platform)
+X-Storefront-Renderer-Verified (Shopify.com Platform)
+X-Streams-Distribution (Generic Content Management System)
+X-Styx-Req-ID (Pantheon Software as a service)
+X-Sucuri-Cache (Sucuri Content Delivery Network)
+X-Sucuri-ID (Sucuri Content Delivery Network)
+X-Supported-By (Generic HTTP Server/Content Delivery Network)
+X-Supplied-By (Generic HTTP Server/Content Delivery Network)
+X-Sveltekit-Page (SvelteKit Framework)
+X-Swift-CacheTime (Alibaba Cloud Content Delivery Network)
+X-Swift-SaveTime (Alibaba Cloud Content Delivery Network)
+X-Symfony-Cache (Symfony PHP Framework)
+X-TEC-API-ORIGIN (The Events Calendar WordPress Plugin)
+X-TEC-API-ROOT (The Events Calendar WordPress Plugin)
+X-TEC-API-VERSION (The Events Calendar WordPress Plugin)
+X-Tencent-Ua (tencent.com platform)
+X-TimeAS (epages.com Platform)
+X-Tncms (Generic Content Management System)
+X-TransIP-Backend (TransIP Web Application Firewall)
+X-TransIP-Balancer (TransIP Web Application Firewall)
+X-Trove-App-Name (Trove Database as a Service)
+X-Trove-Country-Code (Trove Database as a Service)
+X-Trove-Order-UUID (Trove Database as a Service)
+X-TT-Agw-Login (toutiao.com platform)
+X-TT-LogID (toutiao.com platform)
+X-TT-Trace-Host (toutiao.com platform)
+X-TT-Trace-Tag (toutiao.com platform)
+X-Turbo-Charged-By (Generic HTTP Server/Content Delivery Network)
+X-Two-Cache-Date (10web.io Platform)
+X-Two-Critical (10web.io Platform)
+X-Two-Optimize (10web.io Platform)
+X-Two-Optimize-Reason (10web.io Platform)
+X-Two-Page-Cached (10web.io Platform)
+X-Two-Page-Is-Optimized (10web.io Platform)
+X-Two-Version (10web.io Platform)
+X-Two-Webp (10web.io Platform)
+X-Umbraco-Version (Umbraco Content Management System)
+X-Unbounce-Instance (unbounce.com Platform)
+X-Unbounce-PageID (unbounce.com Platform)
+X-Unbounce-Variant (unbounce.com Platform)
+X-Unbounce-VisitorID (unbounce.com Platform)
+X-Using-Nginx-Controller (NGINX HTTP Server)
+X-Varnish (Varnish HTTP Accelerator)
+X-Varnish-Age (Varnish HTTP Accelerator)
+X-Varnish-Backend (Varnish HTTP Accelerator)
+X-Varnish-Cache (Varnish HTTP Accelerator)
+X-Varnish-CC (Varnish HTTP Accelerator)
+X-Varnish-Debug-TTL (Varnish HTTP Accelerator)
+X-Varnish-ESI (Varnish HTTP Accelerator)
+X-Varnish-Grace (Varnish HTTP Accelerator)
+X-Varnish-HitMiss (Varnish HTTP Accelerator)
+X-Varnish-Host (Varnish HTTP Accelerator)
+X-Varnish-ID (Varnish HTTP Accelerator)
+X-Varnish-Secret (Varnish HTTP Accelerator)
+X-Varnish-Server (Varnish HTTP Accelerator)
+X-Varnish-Timing (Varnish HTTP Accelerator)
+X-Varnish-TTL (Varnish HTTP Accelerator)
+X-Varnish-URL (Varnish HTTP Accelerator)
+X-Vcap-Request-Id (cloudfoundry.org Platform)
+X-Vercel-Cache (vercel.com Cache)
+X-Vercel-Deployment-URL (vercel.com Cache)
+X-Vercel-Error (vercel.com Cache)
+X-Vercel-Execution-Region (vercel.com Cache)
+X-Vercel-Forwarded-For (vercel.com Cache)
+X-Vercel-ID (vercel.com Cache)
+X-Vercel-IP-As-Number (vercel.com Cache)
+X-Vercel-IP-City (vercel.com Cache)
+X-Vercel-IP-Continent (vercel.com Cache)
+X-Vercel-IP-Country (vercel.com Cache)
+X-Vercel-IP-Country-Region (vercel.com Cache)
+X-Vercel-IP-Latitude (vercel.com Cache)
+X-Vercel-IP-Longitude (vercel.com Cache)
+X-Vercel-IP-Timezone (vercel.com Cache)
+X-Vercel-Signature (vercel.com Cache)
+X-Version (Generic Software Version ID)
+X-Version-Id (Generic Software Version ID)
+X-Vingle-API-Region (vingle.net Platform)
+X-Vingle-Authentication-Token (vingle.net Platform)
+X-Vingle-Request-ID (vingle.net Platform)
+X-Vingle-Time (vingle.net Platform)
+X-Vingle-UDID (vingle.net Platform)
+X-Vingle-User-Agent (vingle.net Platform)
+X-Virus-Infected (Microsoft SharePoint Services)
+X-Volterra-Location (F5 Volterra)
+X-VServer (Varnish HTTP Accelerator)
+X-Vtex-Backend-Elapsed-Time (vtex.com Platform)
+X-Vtex-Cache-Backend-Connect-Time (vtex.com Platform)
+X-Vtex-Cache-Backend-Header-Time (vtex.com Platform)
+X-Vtex-Cache-Server (vtex.com Platform)
+X-Vtex-Cache-Status (vtex.com Platform)
+X-Vtex-Cache-Time (vtex.com Platform)
+X-Vtex-Cache-Status-Janus-Apicache (vtex.com Platform)
+X-Vtex-Etag-Control (vtex.com Platform)
+X-Vtex-IO-Cluster-ID (vtex.com Platform)
+X-Vtex-Janus-Router-Backend-App (vtex.com Platform)
+X-Vtex-Processed-AT (vtex.com Platform)
+X-Vtex-Processado-EM (vtex.com Platform)
+X-Vtex-Processed-AR (vtex.com Platform)
+X-Vtex-Product (vtex.com Platform)
+X-Vtex-Remote-Cache (vtex.com Platform)
+X-Vtex-Renderer (vtex.com Platform)
+X-Vtex-Router-Elapsed-Time (vtex.com Platform)
+X-Vtex-Router-Version (vtex.com Platform)
+X-Webcom-Cache-Status (web.com Platform)
+X-Wix-Renderer-Server (Wix.com Publishing Software)
+X-Wix-Request-Id (Wix.com Publishing Software)
+X-Wix-Server-Artifact-Id (Wix.com Publishing Software)
+X-WP-CF-Fallback-Cache (Super Page Cache for Cloudflare WordPress Plugin)
+X-WP-CF-Super-Cache (Super Page Cache for Cloudflare WordPress Plugin)
+X-WP-CF-Super-Cache-Active (Super Page Cache for Cloudflare WordPress Plugin)
+X-WP-CF-Super-Cache-Cache-Control (Super Page Cache for Cloudflare WordPress Plugin)
+X-WP-CF-Super-Cache-Cookies-Bypass (Super Page Cache for Cloudflare WordPress Plugin)
+X-XHTML-Minification-Powered-By (The Web Markup Minifier)
+X-XYZ-Runtime (Generation XYZ Platform)
+X-XYZ-Server (Generation XYZ Platform)
+X-Yerdle-APP-Name (Yerdle Software)
+X-Yottaa-Metrics (yottaa.com Platform)
+X-Yottaa-Optimizations (yottaa.com Platform)
+X-Yottaa-OS (yottaa.com Platform)
+X-Yottaa-Sig (yottaa.com Platform)
+X-Zen-Fury (ZenEdge Web Application Firewall)
+X-Zendesk-User-ID (Zendesk Customer Relationship Management)
+YJS-ID (Yunjiasu Content Delivery Network)
+YJS-CacheStatus (Yunjiasu Content Delivery Network)
+Yunjiasu-Nginx (Yunjiasu HTTP Server)
\ No newline at end of file
diff --git a/humble.py b/humble.py
index 2602b4b..e65e933 100644
--- a/humble.py
+++ b/humble.py
@@ -133,7 +133,7 @@
URL_STRING = ('rfc-st', ' URL : ', 'caniuse')
current_time = datetime.now().strftime("%Y/%m/%d - %H:%M:%S")
-local_version = datetime.strptime('2024-12-24', '%Y-%m-%d').date()
+local_version = datetime.strptime('2024-12-28', '%Y-%m-%d').date()
class SSLContextAdapter(requests.adapters.HTTPAdapter):
@@ -766,7 +766,7 @@ def print_basic_info(export_filename):
def print_extended_info(args, reliable, status_code):
if args.skip_headers:
print_skipped_headers(args)
- if args.output in ('csv', 'json', 'xml'):
+ if args.output in ('json', 'xml'):
print(get_detail('[limited_analysis_note]', replace=True))
if (status_code is not None and 400 <= status_code <= 451) or reliable or \
args.redirects or args.skip_headers:
@@ -857,7 +857,7 @@ def get_fingerprint_headers():
encoding='utf8') as fng_source:
l_fng_ex = [line.strip() for line in
islice(fng_source, SLICE_INT[0], None) if line.strip()]
- l_fng = [line.split(' [')[0].strip() for line in l_fng_ex]
+ l_fng = [line.split(' (')[0].strip() for line in l_fng_ex]
titled_fng = [item.title() for item in l_fng]
return l_fng_ex, l_fng, titled_fng
@@ -1358,7 +1358,7 @@ def format_html_fingerprint(args, ln, sub_d, l_fng):
for i in l_fng:
if (ln and i in ln and not args.brief):
try:
- idx = ln.index(' [')
+ idx = ln.index(' (')
except ValueError:
return ln
if 'class="ko"' not in ln:
@@ -1700,7 +1700,7 @@ def custom_help_formatter(prog):
the checks to grade an analysis, along with advice for improvement")
parser.add_argument("-if", dest='input_file', type=str, help="Analyzes \
'INPUT_FILE': must contain HTTP response headers and values separated by ': ';\
- E.g. 'server: nginx'.")
+ E.g. 'server: nginx'")
parser.add_argument("-l", dest='lang', choices=['es'], help="Defines the \
language for displaying analysis, errors and messages; if omitted, will be \
shown in English")
@@ -1709,7 +1709,7 @@ def custom_help_formatter(prog):
parser.add_argument("-o", dest='output', choices=['csv', 'html', 'json', 'pdf',
'txt', 'xml'], help="Exports\
analysis to 'humble_scheme_URL_port_yyyymmdd_hhmmss_language.ext' file; \
-csv/json/xml will have a brief analysis")
+json/xml will have a brief analysis")
parser.add_argument("-of", dest='output_file', type=str, help="Exports \
analysis to 'OUTPUT_FILE'; if omitted the default filename of the parameter \
'-o' will be used")
@@ -1795,7 +1795,7 @@ def custom_help_formatter(prog):
args.URL_A is None):
print_error_detail('[args_several]')
-if args.output in ['csv', 'json', 'xml'] and not args.brief:
+if args.output in ['json', 'xml'] and not args.brief:
print_error_detail('[args_brief_filetype]')
skip_list, unsupported_headers = [], []
diff --git a/l10n/details.txt b/l10n/details.txt
index 7f2d2ba..f95a540 100644
--- a/l10n/details.txt
+++ b/l10n/details.txt
@@ -872,7 +872,7 @@ HTTP Response Headers
Note : The analysis may not be reliable because of the time it took for the URL to respond.
[limited_analysis_note]
- Note : Exporting to CSV/JSON/XML is currently limited to a brief analysis
+ Note : Exporting to JSON/XML is currently limited to a brief analysis
[analysis_redirects_note]
Note : The exact URL will be analyzed, without following redirects.
@@ -1558,7 +1558,7 @@ Error: The parameters '-b', '-c', '-df', '-'o', '-r' and '-s' require the parame
Error: The parameter '-of' requires the parameters '-u' and '-o'.
[args_brief_filetype]
-Error: The parameters '-o csv', '-o json' and '-o xml' require the parameter '-b'.
+Error: The parameters '-o json' and '-o xml' require the parameter '-b'.
[notestssl_file]
Error: 'testssl.sh' is not found in that PATH.
diff --git a/l10n/details_es.txt b/l10n/details_es.txt
index db20cc8..c05380d 100644
--- a/l10n/details_es.txt
+++ b/l10n/details_es.txt
@@ -874,7 +874,7 @@ Cabeceras de respuesta HTTP
Nota : El análisis puede no ser fiable por el tiempo que tardó en responder la URL.
[limited_analysis_note]
- Nota: Exportar a CSV/JSON/XML limita actualmente a un análisis breve
+ Nota: Exportar a JSON/XML limita actualmente a un análisis breve
[analysis_redirects_note]
Nota : Se analizará la URL exacta, sin seguir redireccionamientos.
@@ -1563,7 +1563,7 @@ Error: Los parámetros '-b', 'c', '-df', -'o', '-r' y '-s' requieren el parámet
Error: El parámetro -of' requiere los parámetros '-u' y '-o'.
[args_brief_filetype]
-Error: Los parámetros '-o csv', '-o json' y '-o xml' requieren el parámetro '-b'.
+Error: Los parámetros '-o json' y '-o xml' requieren el parámetro '-b'.
[notestssl_file]
Error: 'testssl.sh' no existe en la ruta indicada.
diff --git a/samples/humble_https_facebook_com_20241121_174721_en.csv b/samples/humble_https_facebook_com_20241121_174721_en.csv
deleted file mode 100644
index e8941e9..0000000
--- a/samples/humble_https_facebook_com_20241121_174721_en.csv
+++ /dev/null
@@ -1,53 +0,0 @@
-"Section","Values"
-"[0. Info]","Date: 2024/11/21 - 17:47:21"
-"[0. Info]","URL: https://facebook.com"
-"[0. Info]","File: humble_https_facebook_com_20241121_174721_en.csv"
-"[0. Info]","Note: Exporting to CSV/JSON is currently limited to a brief analysis"
-"[0. Info]","Note: The URL returns an error (HTTP code 400, 'Bad Request')"
-"[0. Info]","Ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400"
-"[1. Enabled HTTP Security Headers]","Cache-Control"
-"[1. Enabled HTTP Security Headers]","Content-Security-Policy"
-"[1. Enabled HTTP Security Headers]","Content-Type"
-"[1. Enabled HTTP Security Headers]","Cross-Origin-Opener-Policy"
-"[1. Enabled HTTP Security Headers]","Strict-Transport-Security"
-"[1. Enabled HTTP Security Headers]","X-Content-Type-Options"
-"[1. Enabled HTTP Security Headers]","X-Frame-Options"
-"[2. Missing HTTP Security Headers]","Clear-Site-Data"
-"[2. Missing HTTP Security Headers]","Cross-Origin-Embedder-Policy"
-"[2. Missing HTTP Security Headers]","Cross-Origin-Resource-Policy"
-"[2. Missing HTTP Security Headers]","(*) NEL"
-"[2. Missing HTTP Security Headers]","(*) Permissions-Policy"
-"[2. Missing HTTP Security Headers]","Referrer-Policy"
-"[2. Missing HTTP Security Headers]","X-Permitted-Cross-Domain-Policies"
-"[3. Fingerprint HTTP Response Headers]","X-Fb-Debug"
-"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Content-Security-Policy (Deprecated Directives)"
-"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Content-Security-Policy (Insecure Schemes)"
-"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Content-Security-Policy (Too Permissive Sources)"
-"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Content-Security-Policy (Unsafe Values)"
-"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Pragma (Deprecated Header)"
-"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Report-To (Deprecated Header)"
-"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Strict-Transport-Security (Recommended Values)"
-"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Strict-Transport-Security (Required Values)"
-"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Vary (Potentially Unsafe Header)"
-"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","X-XSS-Protection (Deprecated Header)"
-"[5. Empty HTTP Response Headers Values]","Nothing to report, all seems OK!"
-"[6. Browser Compatibility for Enabled HTTP Security Headers]","Cache-Control: https://caniuse.com/?search=Cache-Control"
-"[6. Browser Compatibility for Enabled HTTP Security Headers]","Content-Security-Policy: https://caniuse.com/?search=contentsecuritypolicy2"
-"[6. Browser Compatibility for Enabled HTTP Security Headers]","Content-Type: https://caniuse.com/?search=Content-Type"
-"[6. Browser Compatibility for Enabled HTTP Security Headers]","Cross-Origin-Opener-Policy: https://caniuse.com/?search=Cross-Origin-Opener-Policy"
-"[6. Browser Compatibility for Enabled HTTP Security Headers]","Origin-Agent-Cluster: https://caniuse.com/?search=Origin-Agent-Cluster"
-"[6. Browser Compatibility for Enabled HTTP Security Headers]","Reporting-Endpoints: https://caniuse.com/?search=Reporting-Endpoints"
-"[6. Browser Compatibility for Enabled HTTP Security Headers]","Strict-Transport-Security: https://caniuse.com/?search=Strict-Transport-Security"
-"[6. Browser Compatibility for Enabled HTTP Security Headers]","Vary: https://caniuse.com/?search=Vary"
-"[6. Browser Compatibility for Enabled HTTP Security Headers]","X-Content-Type-Options: https://caniuse.com/?search=X-Content-Type-Options"
-"[6. Browser Compatibility for Enabled HTTP Security Headers]","X-Frame-Options: https://caniuse.com/?search=X-Frame-Options"
-"[6. Browser Compatibility for Enabled HTTP Security Headers]","X-XSS-Protection: https://caniuse.com/?search=X-XSS-Protection"
-"[7. Analysis Results]","Done in 0.53 seconds! (changes with respect to the last analysis in parentheses)"
-"[7. Analysis Results]","Missing headers: 7 (First Analysis)"
-"[7. Analysis Results]","Fingerprint headers: 1 (First Analysis)"
-"[7. Analysis Results]","Deprecated/Insecure headers: 10 (First Analysis)"
-"[7. Analysis Results]","Empty headers: 0 (First Analysis)"
-"[7. Analysis Results]","Findings to review: 18 (First Analysis)"
-"[7. Analysis Results]","Analysis Grade: D (Review 'Deprecated/Insecure headers')"
-"[7. Analysis Results]","'(*)' meaning: Experimental HTTP response header"
-"[7. Analysis Results]","'(*)' ref: https://mdn.io/Experimental_deprecated_obsolete"
diff --git a/samples/humble_https_facebook_com_20241228_202046_en.csv b/samples/humble_https_facebook_com_20241228_202046_en.csv
new file mode 100644
index 0000000..f56290f
--- /dev/null
+++ b/samples/humble_https_facebook_com_20241228_202046_en.csv
@@ -0,0 +1,98 @@
+"Section","Values"
+"[0. Info]","Date: 2024/12/28 - 20:20:46"
+"[0. Info]","URL: https://facebook.com"
+"[0. Info]","File: humble_https_facebook_com_20241228_202046_en.csv"
+"[0. Info]","Note: The URL returns an error (HTTP code 400, 'Bad Request')"
+"[0. Info]","Ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400"
+"[1. Enabled HTTP Security Headers]","Cache-Control: private, no-cache, no-store, must-revalidate"
+"[1. Enabled HTTP Security Headers]","Content-Security-Policy: default-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' blob: data: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net https://paywithmybank.com/ https://*.paywithmybank.com/;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;"
+"[1. Enabled HTTP Security Headers]","Content-Type: text/html; charset=""utf-8"""
+"[1. Enabled HTTP Security Headers]","Cross-Origin-Opener-Policy: same-origin-allow-popups;report-to=""coop_report"""
+"[1. Enabled HTTP Security Headers]","(*) Origin-Agent-Cluster: ?1"
+"[1. Enabled HTTP Security Headers]","Pragma: no-cache"
+"[1. Enabled HTTP Security Headers]","Report-To: {""max_age"":2592000,""endpoints"":"
+"[2. Missing HTTP Security Headers]","Clear-Site-Data"
+"[2. Missing HTTP Security Headers]","Clears browsing data (cookies, storage, cache) associated with the requesting website."
+"[2. Missing HTTP Security Headers]","Ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Clear-Site-Data"
+"[2. Missing HTTP Security Headers]","Cross-Origin-Embedder-Policy"
+"[2. Missing HTTP Security Headers]","Prevents documents and workers from loading non-same-origin requests unless allowed."
+"[2. Missing HTTP Security Headers]","Ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cross-Origin-Embedder-Policy"
+"[2. Missing HTTP Security Headers]","Cross-Origin-Resource-Policy"
+"[2. Missing HTTP Security Headers]","Protect servers against certain cross-origin or cross-site embedding of the returned source."
+"[2. Missing HTTP Security Headers]","Ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cross-Origin_Resource_Policy_(CORP)"
+"[2. Missing HTTP Security Headers]","(*) NEL"
+"[2. Missing HTTP Security Headers]","Enables web applications to declare a reporting policy to report errors."
+"[2. Missing HTTP Security Headers]","Ref: https://scotthelme.co.uk/network-error-logging-deep-dive/"
+"[2. Missing HTTP Security Headers]","(*) Permissions-Policy"
+"[2. Missing HTTP Security Headers]","Previously called ""Feature-Policy"", allow and deny the use of browser features."
+"[2. Missing HTTP Security Headers]","Ref: https://scotthelme.co.uk/goodbye-feature-policy-and-hello-permissions-policy/"
+"[2. Missing HTTP Security Headers]","Referrer-Policy"
+"[2. Missing HTTP Security Headers]","Controls how much referrer information should be included with requests."
+"[2. Missing HTTP Security Headers]","Ref: https://scotthelme.co.uk/a-new-security-header-referrer-policy/"
+"[2. Missing HTTP Security Headers]","X-Permitted-Cross-Domain-Policies"
+"[2. Missing HTTP Security Headers]","Limit which data external resources (e.g. Adobe Flash/PDF documents), can access on the domain."
+"[2. Missing HTTP Security Headers]","Ref: https://owasp.org/www-project-secure-headers/#div-headers"
+"[3. Fingerprint HTTP Response Headers]","These headers can leak information about software, versions, hostnames or IP addresses: "
+"[3. Fingerprint HTTP Response Headers]","X-FB-Debug (facebook.com Platform)"
+"[3. Fingerprint HTTP Response Headers]","Value: 'GOgszca9qLxKjM9jDeLK82LrEt4xNtj69s/dgFjLpcsasvcn+kOVZUlfIbDDjtTID4yeUGFkGsAYJb+hFuSrVQ=='"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","The following headers/protocols are deprecated or their values may be considered unsafe: "
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Content-Security-Policy (Deprecated Directives)"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Avoid using deprecated directives: 'report-uri', 'block-all-mixed-content'"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Content-Security-Policy (Insecure Schemes)"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Do not allow insecure, unencrypted schemes: 'http:'"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Ref: https://www.cloudflare.com/learning/ssl/why-is-http-not-secure/"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Ref: https://http.dev/wss"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Content-Security-Policy (Too Permissive Sources)"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Limit these permissive origins: 'data:', 'blob:'"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Ref: https://content-security-policy.com/"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Content-Security-Policy (Unsafe Values)"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","'unsafe-inline' and 'unsafe-eval' negate most of the security benefits provided by this header."
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Ref: https://csper.io/blog/no-more-unsafe-inline"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Ref: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/eval"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Pragma (Deprecated Header)"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","This header is deprecated."
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Pragma"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Report-To (Deprecated Header)"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","This header is deprecated. Use instead ""Reporting-Endpoints""."
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Report-To"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Strict-Transport-Security (Recommended Values)"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Add 'includeSubDomains' and 'max-age' (with 31536000 -one year- as minimum)."
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Ref: https://https.cio.gov/hsts/"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Strict-Transport-Security (Required Values)"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","'preload' requires 'includeSubDomains' and 'max-age' (with 31536000 -one year- as minimum)."
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Vary (Potentially Unsafe Header)"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","The values of this header may expose others, facilitating attacks if user input is accepted."
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Vary"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Ref: https://www.yeswehack.com/fr/learn-bug-bounty/http-header-exploitation"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","X-XSS-Protection (Deprecated Header)"
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","This header is deprecated in the three major web browsers."
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Instead, use the ""Content-Security-Policy"" header restrictively."
+"[4. Deprecated HTTP Response Headers/Protocols and Insecure Values]","Ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection"
+"[5. Empty HTTP Response Headers Values]","Empty HTTP headers (and are therefore considered disabled): "
+"[5. Empty HTTP Response Headers Values]","Nothing to report, all seems OK!"
+"[6. Browser Compatibility for Enabled HTTP Security Headers]","Cache-Control: https://caniuse.com/?search=Cache-Control"
+"[6. Browser Compatibility for Enabled HTTP Security Headers]","Content-Security-Policy: https://caniuse.com/?search=contentsecuritypolicy2"
+"[6. Browser Compatibility for Enabled HTTP Security Headers]","Content-Type: https://caniuse.com/?search=Content-Type"
+"[6. Browser Compatibility for Enabled HTTP Security Headers]","Cross-Origin-Opener-Policy: https://caniuse.com/?search=Cross-Origin-Opener-Policy"
+"[6. Browser Compatibility for Enabled HTTP Security Headers]","Origin-Agent-Cluster: https://caniuse.com/?search=Origin-Agent-Cluster"
+"[6. Browser Compatibility for Enabled HTTP Security Headers]","Pragma: https://caniuse.com/?search=Pragma"
+"[6. Browser Compatibility for Enabled HTTP Security Headers]","Report-To: https://caniuse.com/?search=Report-To"
+"[6. Browser Compatibility for Enabled HTTP Security Headers]","Reporting-Endpoints: https://caniuse.com/?search=Reporting-Endpoints"
+"[6. Browser Compatibility for Enabled HTTP Security Headers]","Strict-Transport-Security: https://caniuse.com/?search=Strict-Transport-Security"
+"[6. Browser Compatibility for Enabled HTTP Security Headers]","Vary: https://caniuse.com/?search=Vary"
+"[6. Browser Compatibility for Enabled HTTP Security Headers]","X-Content-Type-Options: https://caniuse.com/?search=X-Content-Type-Options"
+"[6. Browser Compatibility for Enabled HTTP Security Headers]","X-Frame-Options: https://caniuse.com/?search=X-Frame-Options"
+"[6. Browser Compatibility for Enabled HTTP Security Headers]","X-XSS-Protection: https://caniuse.com/?search=X-XSS-Protection"
+"[7. Analysis Results]","Done in 0.19 seconds! (changes with respect to the last analysis in parentheses)"
+"[7. Analysis Results]","Enabled headers: 12 (First Analysis)"
+"[7. Analysis Results]","Missing headers: 7 (First Analysis)"
+"[7. Analysis Results]","Fingerprint headers: 1 (First Analysis)"
+"[7. Analysis Results]","Deprecated/Insecure headers: 10 (First Analysis)"
+"[7. Analysis Results]","Empty headers: 0 (First Analysis)"
+"[7. Analysis Results]","Findings to review: 18 (First Analysis)"
+"[7. Analysis Results]","Analysis Grade: D (Review 'Deprecated/Insecure headers')"
+"[7. Analysis Results]","'(*)' meaning: Experimental HTTP response header"
+"[7. Analysis Results]","'(*)' ref: https://mdn.io/Experimental_deprecated_obsolete"
diff --git a/screenshots/humble_csv_s.PNG b/screenshots/humble_csv_s.PNG
index 16df20081d25854e2e87ee9a8decd53a6a028b94..74f50ec9600ee3da2a8b60da69d3d685973f2be2 100644
GIT binary patch
literal 306057
zcmeFY1yozzx-Q%nZPAtj#an1`hX#jIinO>CcZw5&yA*HHQrxY$6}J-H-6e$J9y~zM
zn|^11XMg*iz0W=O+;PYF|1s_u$;e8w=9+8H_0H#g-sgSiS0x2$yhr4Z?%lhG_g?0m
z%DsE&uzUB=Xt6O-zvy?Go}xbPJE};(y;n9&xsCdQZZ0k_e(zpI6wb8~2I~7mI~gs<
zd-w1=e!uVcfC@g{yLXrS{++m*oBm!JhTBtfNG%d}eg!`B-c@5{e^KAmM9Q)c^rP*9
zGO06`b>+Tc+P76+fI^|K{9ew8o!ijM(Vy=R@6!vtIoRbNrV~05J_+CNO-h<`>r>4O
z`4H+PlNT*q`ava*7w~;f=KCNY{d){?LiE4CIFF^kWEiO;5A%ua@q<#IWBdR8b=~nb
zf%aoC-?98FJ-LSo?exog{rrD#`uj4*nf-im77vEg1H+hB{&HE=e@pIku)Pob(zFVH
z?T--Mvr{&SnNFo3G1`uN+lCSEODxepG)#A6^5%Zqg}UNX`$*G&yd!L>#ojuZeOODB
z=lOmcgD*h8Q}R2rtNM>!jR$ )4U;lxK5_D1El2i0Y~?Axz)T+eg4Og(gFwP7`_
zoXLwfJ&vH)G@Ecog?kKA8?9D-WW7-;6ayT8I#MV#r3Rmfm%P(=3Pi7e8}xnRBKrlt
zEPABXMfAoFr|ptw3T()9Mv-l@)832*PJ^dhL`7eCEEm#4qpnpNPs036ide^>F-S$3
zytK@v(1u?Fk~6hrUs6z!RtXTL3^AWXXez_dBEC0((lXYU;ZFO|v67yC-aN-u%3TPy
zd_@miYX}wJGxr55`4#{Yq__F4-MN*dB)0RQE@*64Bi(8qNZYQ<@ACJH>gn;WKEV
zX?wSNB9nY87ug5x3N2^#Jrfm|OIC{(d-{yf4QY#4oe90N ys!?%-OS!oV*yiB~
zSUI8yq^XXgFY2Q~T+v5NHTiA$d&FXQ8y_T5ZwJ94YZ))p!~d=PntYX+sS&q`2B^JT
z?i|={{11rPUxGN4a+GiRR`!Z#U$T3mVx9|}CDH$RCq6CguZkr4i%3Ew{l7Q(
zePAE>@3;7GGV2$*zjywJAoiB>#j*T9NU$r|(f`;Hp>!t>Huh%*bWBWb1tq0X9dSFm
zL!Gu-AcWQY>I@FT5OUdbW0`Gm%wOM|uh}g%Jl}_cFi;9-MQXF>Ihc44Qg={lcz1gf
z@3_?JSLYvqMF1wI6m;r!z^4(tR<~R0jjr?0k&e-FD$`o3LK@bfUp$ntH}?E
zFZSWr;B1m_;Kt_xCeJO3G@nFR$2=1N(VeA%{WoMI=~idaEGpK}&oUaGIH#A^h;MdW
zqTIm10I{xCE%|U>$J9+zx`B^n;jQXbf`N8Hi|%|a&>8{l)JEpYl8%+kjo768K`L|5
zs~-KOUi~+q{;r5Oj5SpMLj#0|3BRD`%kkiCFpIT06Lkc-JxGgHhK!&JT6<2cCDTd-
zR{JWY>T4XHL-K^&m|^t*s2{$Ut}nhcmcC$N%WE^
2fX13MWzNckEqqp5+KFoI+nNes`V=q%LNsD?CnUENn?a^7ixXn8$*;jZj+C^csbR
zZD6f;*&n7%jgw~}u-;EOR;;0DI=gR^Bm{fyf6FCva=^?>Ig?IZlz+$G_yBL9# }d-p#Tos<2DUMnv@y?K}tvAZ(Sz#5Vwe(H_013^p#&*n3M$W-KY
zjIs%T3_e#|ln?i}x}IcdyWLKC$|%MOq+ec%BmXbi2OJ~I`dekxc&8@I>z6T}$v#d?
zZGAAo^Q`++b3FXx^G#URiA}gB_zPD~(uFvWGNdeN=gL@sX0T`d8?5btxKlt9_d9WP
zcMaG<`Rn-cMb7+Tj-sGkAB`(_hy5Rej!z0Mgr-Ya`krzWu|U#L3pbC;P
_F%g`zSS3B{aP#E>M9u9J^p6m8zLYm&
zb?9>C&3ho2aOE$)D%#OY=9g@#afg>j!N;eA_vX&7_)g0)g*j_~{Hb%c)>EVJQFxFM
zTHT1VbUnaP8155C^ZI-OSzSq>VMncvk^Wsbl^6V-QZz9Vn{%6XyELCa43(GPT#X9;
zs&RJR1gB3zw4-;Ma-!6a`ikWy-3fHWwEY<6iINOMtFOI8O~lN8`Spn2a?YIDB4AD1
zT2;H>Tx@!!CeC1)Bj1-mv=haQU*YlASxv0|)IA=%C7dag;VzNKAznsTr8kbj)!AA7
zS(^syVrqFV9S~gV2kGe;z(RKpN*X099?v5nrcw~8Fe8-XnafB5#?C{?$FW_0(9E$x
zUR$d)vtO~PqSqMQJVbw|Vc$t#BJgT+6#Zq}g^s|AXrkHb1it!veOoM#L>%2WrlaJD
z9PU2~VYpHym2bR!EhA`gaq~9$@Q%>j!#xU7Wwq;yOlzCS%JjeR5r#d305_cSJSv6A
z)uKw6V$@gog?Fp)t&cW*QkBddsgl<1y6;t!CmJHt3Ghvw&ijbf&J!=#@b%Zk!Is7^
z6g9b9Ua4tJAiiZ2$P(sM74S0*oCR0G5*o?(pmt|G&)td6P)VJxjaHiU#`Tlz@aZ<&
zS?ihT)ffBbnwLMnrBkgM|McWi!u6O}nPFQj$1~*DPlg>A5O6@EZ;yG~^e!^XNm|pJ
z{_)l$`by=VEDiGPMxB8kn%6Am5Yc&e_MADNQjqv(c0tK*=h9KvdHsmqc%CE9pR8pl
z{Cx6yi)w$Ba=S)irt$lf4fhkjgSaI*0Jvl6?-!AHo8EUg)-IQ$bne%kyFTi0{
`8So*6F8vzj61D|Jn!eI{Gm(^O{rvl>`5-hpIaaQ@uey=q)7ErQtLtk
zhj=9kD|K-ZuEZ|2s9Zef?e~mruQ+MQW~tG-_f{wecQgF&w-D1me>*4lBOK?O2SL3y
z;