carding sauce, aws waf response headers