| Server | Apache |
| Origin | http://www.wishpond.com, https://www.wishpond.com |
| Access-Control-Allow-Origin | http://www.wishpond.com, https://www.wishpond.com |
| Access-Control-Allow-Headers | origin, x-requested-with, content-type |
| Access-Control-Allow-Methods | PUT, GET, POST, DELETE, OPTIONS |
| Strict-Transport-Security | max-age=63072000; includeSubDomains |
| X-Frame-Options | SAMEORIGIN |
| X-Content-Type-Options | nosniff |
| Upgrade | h2,h2c |
| Connection | Upgrade, Keep-Alive |
| Vary | Accept-Encoding |
| Content-Encoding | gzip |
| Keep-Alive | timeout=5, max=100 |
| Content-Type | text/html; charset=UTF-8 |