Overview

URLgenvipfocus.com/
IP162.244.32.143
ASNAS14576 Hosting Solution Ltd.
Location United States
Report completed2017-01-10 13:40:26 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Referer
Pool
Access Levelpublic


Intrusion Detection Systems

Snort /w Sourcefire VRT No alerts detected
Suricata /w Emerging Threats Pro No alerts detected


Blacklists

Fortinet's Web Filter / fortiguard.com
Added / Verified Severity Host Comment
2017-01-102genvipfocus.com/Malware
2017-01-102genvipfocus.com/intl/asca/inteligen?bhu=8mbkLnQrWkPvFr94Dbxu81iEw7EF2KzQRMalware
MDL / malwaredomainlist.com No alerts detected
DNS-BH / malwaredomains.com No alerts detected
mnemonic secure DNS / mnemonic.no No alerts detected
OpenPhish / openphish.com No alerts detected
PhishTank / phishtank.com No alerts detected
Spamhaus DBL / spamhaus.org No alerts detected


Files Captured



Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 162.244.32.143

Date UQ / IDS / BL URL IP
2017-01-18 16:51:050 - 0 - 1focusokswitt.com/162.244.32.143
2017-01-18 11:59:520 - 0 - 1focusokswitt.com/162.244.32.143
2017-01-11 20:03:140 - 0 - 2genvipfocus.com/162.244.32.143
2017-01-11 18:43:100 - 0 - 2genvipfocus.com/162.244.32.143
2017-01-11 17:32:580 - 0 - 2genvipfocus.com/162.244.32.143
2017-01-11 05:56:570 - 0 - 2genvipfocus.com/162.244.32.143

Last 6 reports on ASN: AS14576 Hosting Solution Ltd.

Date UQ / IDS / BL URL IP
2017-02-25 10:49:280 - 0 - 1sexwebgirls.com/185.104.11.146
2017-02-25 10:04:170 - 0 - 5madxxxporn.com/204.155.30.149
2017-02-25 08:27:400 - 0 - 2rapiseebrains.com/204.155.31.176
2017-02-25 07:32:180 - 0 - 1ld.mediaget.com/index.php?l=ru185.104.10.56
2017-02-25 03:47:000 - 0 - 2rapiseebrains.com/204.155.31.176
2017-02-25 02:16:570 - 0 - 2rapiseebrains.com/204.155.31.176

Last 6 reports on domain: genvipfocus.com

Date UQ / IDS / BL URL IP
2017-01-29 22:45:040 - 0 - 1genvipfocus.com/185.62.39.133
2017-01-29 17:34:450 - 0 - 2genvipfocus.com/185.62.39.133
2017-01-29 06:02:490 - 0 - 2genvipfocus.com/185.62.39.133
2017-01-29 05:42:440 - 0 - 2genvipfocus.com/185.62.39.133
2017-01-27 06:08:180 - 0 - 2genvipfocus.com/185.62.39.133
2017-01-26 09:55:490 - 0 - 2genvipfocus.com/185.62.39.133



JavaScript

Executed Scripts (33)


Executed Evals (3)

#1 JavaScript::Eval (size: 222, repeated: 9)

(function() {
    try {
        var a = window.location.href;
        return /\/b.[0-9]{5,}\//.test(window.location.href) ? a.match(/\/b.([0-9]{5,})\//)[1] : window.location.search.match(/[\?|\&]b=([0-9]{5,})/)[1]
    } catch (b) {
        return "Error: " + b.message
    }
})();

#2 JavaScript::Eval (size: 8, repeated: 1)

_ate.cbs

#3 JavaScript::Eval (size: 11, repeated: 1)

addthis.cbs

Executed Writes (2)

#1 JavaScript::Write (size: 516, repeated: 1)

<img height="1" width="1" border="0" alt="" src="https://www.googleadservices.com/pagead/conversion/1069852215/?random=1484051982526&cv=8&fst=1484051982526&num=1&fmt=3&value=0&label=UiVPCOGIxgIQt8yS_gM&bg=ffffff&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&tiba=Official%20USA%20Site%20-%20Save%20the%20Children" style="display:none" />

#2 JavaScript::Write (size: 240, repeated: 1)

<img src="https://4266705.fls.doubleclick.net/activityi;src=4266705;type=invmedia;cat=xs0zpcmo;ord=1?" width="1" height="1" style="position:absolute;overflow:hidden;clip:rect(0 0 0 0);height:1px;width:1px;margin:-1px;padding:0;border:0;" />


HTTP Transactions (74)


Request Response
GET / HTTP/1.1

Host: genvipfocus.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 162.244.32.143
HTTP/1.1 303 See Other
HTTP/1.1 303 See Other
Server: nginx/1.10.2
Date: Tue, 10 Jan 2017 12:39:57 GMT
Content-Length: 0
Connection: keep-alive
Location: http://genvipfocus.com/intl/asca/inteligen?bhu=8mbkLnQrWkPvFr94Dbxu81iEw7EF2KzQR
Set-Cookie: UUID=U808-88-57-370945-552812; path=/
GET /intl/asca/inteligen?bhu=8mbkLnQrWkPvFr94Dbxu81iEw7EF2KzQR HTTP/1.1

Host: genvipfocus.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: UUID=U808-88-57-370945-552812
 162.244.32.143
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Server: nginx/1.10.2
Date: Tue, 10 Jan 2017 12:39:57 GMT
Content-Length: 27
Connection: keep-alive
X-Powered-By: ARR/2.5(08b72d7f5)
Location: http://savethechildren.org/
GET / HTTP/1.1

Host: savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 64.209.141.60
HTTP/1.1 302 Object moved
Content-Type: text/html
Cache-Control: private
Content-Length: 175
Location: http://www.kintera.org/site/lookup.asp?c=8rKLIXMGIpI4E
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDSCRTRABS=FPCEEKECKEJFOLMDDIEJOJFC; path=/ NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c7745525d5f4f58455e445a4a423660;path=/;httponly
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:39 GMT
GET /site/lookup.asp?c=8rKLIXMGIpI4E HTTP/1.1

Host: www.kintera.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 104.123.114.124
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Content-Length: 197
Location: http://www.savethechildren.org/site/lookup.asp?c=8rKLIXMGIpI4E&amp;b=6115947
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:40 GMT
Connection: keep-alive
Set-Cookie: KNTASESSION=keyw44832=DBE0CEE2B208458C9A11F02639217913&amp;kntaw44832=F568B922CD144AB591054602BD24B3F0; domain=kintera.org; path=/ NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6b45525d5f4f58455e445a4a423660;path=/;httponly
Cache-Control: private
Expires: Tue, 10 Jan 2017 12:38:40 GMT
GET /site/lookup.asp?c=8rKLIXMGIpI4E&b=6115947 HTTP/1.1

Host: www.savethechildren.org
GET /site/lookup.asp?c=8rKLIXMGIpI4E&amp;b=6115947 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 104.123.114.107
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 0
Location: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:40 GMT
Connection: keep-alive
Set-Cookie: KNTASESSION=keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;kntaw44832=CCE1C82C6608442CB22407BE7C096236; domain=savethechildren.org; path=/ NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660;path=/;httponly
Cache-Control: private
Expires: Tue, 10 Jan 2017 12:38:40 GMT
GET /site/layout/default.css HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/css
Cteonnt-Length: 71565
Last-Modified: Fri, 08 Mar 2013 21:19:58 GMT
Accept-Ranges: bytes
Etag: &quot;0539caf421cce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 13931
Vary: Accept-Encoding
Cache-Control: private, max-age=11917
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /site/layout/content.css HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/css
Cteonnt-Length: 2119
Last-Modified: Sat, 10 Jan 2015 12:00:09 GMT
Accept-Ranges: bytes
Etag: &quot;806a3fbcc2cd01:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 564
Vary: Accept-Encoding
Cache-Control: private, max-age=3833
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-header-footer.min.css?id=100 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/css
Cteonnt-Length: 15478
Last-Modified: Mon, 16 Nov 2015 22:52:40 GMT
Accept-Ranges: bytes
Etag: &quot;244827fc120d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 3807
Vary: Accept-Encoding
Cache-Control: private, max-age=7013
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/css
Cteonnt-Length: 43272
Last-Modified: Sat, 20 Jun 2015 14:04:53 GMT
Accept-Ranges: bytes
Etag: &quot;5ad36c1462abd01:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 8378
Vary: Accept-Encoding
Cache-Control: private, max-age=3036
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-template-full-width-pages.min.css HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/css
Cteonnt-Length: 6238
Last-Modified: Mon, 26 Jan 2015 17:40:10 GMT
Accept-Ranges: bytes
Etag: &quot;d6f891218f39d01:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 1248
Vary: Accept-Encoding
Cache-Control: private, max-age=2718
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/FAVICON.ICO HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Tue, 26 Jul 2011 14:08:27 GMT
Accept-Ranges: bytes
Etag: &quot;f95e487d9d4bcc1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/RIVETED.MIN.JS HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Tue, 15 Dec 2015 16:56:38 GMT
Accept-Ranges: bytes
Etag: &quot;c37c83905937d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1032
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/header_save_the_children_logo.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2183
Last-Modified: Sun, 13 Oct 2013 03:14:07 GMT
Accept-Ranges: bytes
Etag: &quot;b3f59247c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/decorative_link_arrow.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 619
Last-Modified: Sun, 13 Oct 2013 02:28:32 GMT
Accept-Ranges: bytes
Etag: &quot;db313ee9bbc7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/charlie_separator.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2036
Last-Modified: Sun, 13 Oct 2013 03:12:09 GMT
Accept-Ranges: bytes
Etag: &quot;7331221c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/HOMEPAGE_ARROW.PNG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 4801
Last-Modified: Tue, 17 Jun 2014 18:19:35 GMT
Accept-Ranges: bytes
Etag: &quot;ef946eb1588acf1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/HP_SLIDE_JAN1_NEWYEAR.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 92302
Last-Modified: Sun, 01 Jan 2017 14:32:33 GMT
Accept-Ranges: bytes
Etag: &quot;1df69be33b64d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/ANNUAL_REPORT_2016_3.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 26858
Last-Modified: Thu, 26 May 2016 14:30:39 GMT
Accept-Ranges: bytes
Etag: &quot;36dfb82c5bb7d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/ANNUAL_REPORT_2016_2.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 45732
Last-Modified: Wed, 25 May 2016 20:13:24 GMT
Accept-Ranges: bytes
Etag: &quot;96404fe4c1b6d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: KNTASESSION=keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;kntaw44832=CCE1C82C6608442CB22407BE7C096236; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/html; charset=iso-8859-1
Cteonnt-Length: 43015
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 12422
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; path=/; HttpOnly KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; domain=savethechildren.org; path=/ CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; path=/
Cache-Control: private
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/HP_SLIDER_2016_HIGHLIGHTS.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 94302
Last-Modified: Sun, 01 Jan 2017 14:32:33 GMT
Accept-Ranges: bytes
Etag: &quot;15f5d9e33b64d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/HP_SLIDE_JAN1_SPON.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 93799
Last-Modified: Sun, 01 Jan 2017 14:32:33 GMT
Accept-Ranges: bytes
Etag: &quot;11a7ace33b64d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9DEF2EBE-10AE-432C-9BD0-DF91D2EBA74A%7D/multi-load-min.js?id=431 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Wed, 22 Oct 2014 17:49:17 GMT
Accept-Ranges: bytes
Etag: &quot;621c218020eecf1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7741
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9DEF2EBE-10AE-432C-9BD0-DF91D2EBA74A%7D/www.savethechildren.org.js?id=4125 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Tue, 03 Jan 2017 21:35:44 GMT
Accept-Ranges: bytes
Etag: &quot;3fcb9756966d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7574
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/ANNUAL_REPORT_2016_1.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 53542
Last-Modified: Wed, 25 May 2016 20:13:24 GMT
Accept-Ranges: bytes
Etag: &quot;96404fe4c1b6d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9DEF2EBE-10AE-432C-9BD0-DF91D2EBA74A%7D/www.savethechildren.org.functionality.js?id=481 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Thu, 08 Dec 2016 15:10:49 GMT
Accept-Ranges: bytes
Etag: &quot;6db7a3426551d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 32507
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/HP_SLIDE_SYRIA_JAN1_2017.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 99743
Last-Modified: Sun, 01 Jan 2017 14:32:33 GMT
Accept-Ranges: bytes
Etag: &quot;8da6cbe33b64d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /ajax/libs/jquery/1.4.2/jquery.min.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.170
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Wed, 04 Jan 2017 17:40:13 GMT
Expires: Thu, 04 Jan 2018 17:40:13 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 24715
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 500368
GET /CommonLib/lib/INC_jsFields.js HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Tue, 14 Jan 2014 02:16:42 GMT
Accept-Ranges: bytes
Etag: &quot;06117aace10cf1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5186
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /site/layout/util.js HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Fri, 23 Oct 2009 18:22:40 GMT
Accept-Ranges: bytes
Etag: &quot;058f2cdd54ca1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2758
Date: Tue, 10 Jan 2017 12:39:41 GMT
Connection: keep-alive
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Tue, 10 Jan 2017 10:59:11 GMT
Expires: Tue, 10 Jan 2017 12:59:11 GMT
Last-Modified: Wed, 28 Sep 2016 20:19:01 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 16022
Cache-Control: public, max-age=7200
Age: 6030
GET /pagead/conversion.js HTTP/1.1

Host: www.googleadservices.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Timing-Allow-Origin: *
Etag: 1260147617075718455
Date: Tue, 10 Jan 2017 12:39:41 GMT
Expires: Tue, 10 Jan 2017 12:39:41 GMT
Cache-Control: private, max-age=86400
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename=&quot;f.txt&quot;
Content-Encoding: gzip
Server: cafe
Content-Length: 5421
X-XSS-Protection: 1; mode=block
GET /j.php?a=27125&u=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&r=0.5468575809419277 HTTP/1.1

Host: dev.visualwebsiteoptimizer.com
GET /j.php?a=27125&amp;u=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;r=0.5468575809419277 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 159.122.87.153
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Date: Tue, 10 Jan 2017 12:39:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: dacdn2
Content-Encoding: gzip
GET /seg?add=806740&t=1 HTTP/1.1

Host: go.accmgr.com
GET /seg?add=806740&amp;t=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 37.252.172.40
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Server: nginx/1.9.13
Date: Tue, 10 Jan 2017 12:39:43 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Location: http://ib.adnxs.com/seg?add=806740&amp;t=1
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/SPOT_SPON_DRTV_110316.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 10974
Last-Modified: Thu, 03 Nov 2016 19:11:40 GMT
Accept-Ranges: bytes
Etag: &quot;c097691b636d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/APPLE_SPOT.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 14897
Last-Modified: Mon, 14 Nov 2016 18:08:25 GMT
Accept-Ranges: bytes
Etag: &quot;985df817a23ed21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/CHARITY_NAVIGATOR_4STAR.GIF HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 2313
Last-Modified: Sun, 13 Oct 2013 00:54:47 GMT
Accept-Ranges: bytes
Etag: &quot;a38977d0aec7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /v.gif?a=27125&d=savethechildren.org&u=EDF3DA29A30ABD2B59C83C53DE2BAE81&h=e708b15cee5ec8a15f96155c48ab4e48&t=false&r=0.9338714714171863 HTTP/1.1

Host: dev.visualwebsiteoptimizer.com
GET /v.gif?a=27125&amp;d=savethechildren.org&amp;u=EDF3DA29A30ABD2B59C83C53DE2BAE81&amp;h=e708b15cee5ec8a15f96155c48ab4e48&amp;t=false&amp;r=0.9338714714171863 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 159.122.87.153
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 10 Jan 2017 12:39:32 GMT
Connection: keep-alive
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Expires: Mon, 10 Jan 2005 00:00:01 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
Content-Length: 35
Server: dacdn2
GET /gtm.js?id=GTM-5T6BP3 HTTP/1.1

Host: www.googletagmanager.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.168
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 10 Jan 2017 12:39:42 GMT
Expires: Tue, 10 Jan 2017 12:39:42 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
Content-Length: 35138
X-XSS-Protection: 1; mode=block
GET /seg?add=806740&t=1 HTTP/1.1

Host: ib.adnxs.com
GET /seg?add=806740&amp;t=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 37.252.172.39
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Server: nginx/1.9.13
Date: Tue, 10 Jan 2017 12:39:44 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Location: http://ib.adnxs.com/bounce?%2Fseg%3Fadd%3D806740%26t%3D1
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Wed, 11-Jan-2017 12:39:44 GMT; Domain=.adnxs.com; HttpOnly uuid2=5423163531124190835; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2017 12:39:44 GMT; Domain=.adnxs.com; HttpOnly
GET /r/__utm.gif?utmwv=5.6.7&utms=1&utmn=1020762609&utmhn=www.savethechildren.org&utme=8(5!session_msource)9(5!wewscwww1112)11(5!2)&utmcs=ISO-8859-1&utmsr=1176x885&utmvp=1159x775&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Official%20USA%20Site%20-%20Save%20the%20Children&utmhid=1284509405&utmr=-&utmp=%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&utmht=1484051982491&utmac=UA-19396666-1&utmcc=__utma%3D1.1429078191.1484051982.1484051982.1484051982.1%3B%2B__utmz%3D1.1484051982.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=2004390609&utmredir=1&utmu=q1AAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1

Host: www.google-analytics.com
GET /r/__utm.gif?utmwv=5.6.7&amp;utms=1&amp;utmn=1020762609&amp;utmhn=www.savethechildren.org&amp;utme=8(5!session_msource)9(5!wewscwww1112)11(5!2)&amp;utmcs=ISO-8859-1&amp;utmsr=1176x885&amp;utmvp=1159x775&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=Official%20USA%20Site%20-%20Save%20the%20Children&amp;utmhid=1284509405&amp;utmr=-&amp;utmp=%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;utmht=1484051982491&amp;utmac=UA-19396666-1&amp;utmcc=__utma%3D1.1429078191.1484051982.1484051982.1484051982.1%3B%2B__utmz%3D1.1484051982.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmjid=2004390609&amp;utmredir=1&amp;utmu=q1AAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
Access-Control-Allow-Origin: *
Date: Tue, 10 Jan 2017 12:39:42 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/guidestar_exchange_gold.gif HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 4526
Last-Modified: Sun, 13 Oct 2013 00:54:47 GMT
Accept-Ranges: bytes
Etag: &quot;a38977d0aec7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/slideshow.js?id=4 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Mon, 05 May 2014 19:51:56 GMT
Accept-Ranges: bytes
Etag: &quot;11238789b68cf1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2794
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/SC_PIE_2015.PNG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 35107
Last-Modified: Wed, 25 May 2016 17:25:26 GMT
Accept-Ranges: bytes
Etag: &quot;8a4e416daab6d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/magnifying_glass.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-header-footer.min.css?id=100
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=EDF3DA29A30ABD2B59C83C53DE2BAE81|e708b15cee5ec8a15f96155c48ab4e48
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 317
Last-Modified: Sun, 13 Oct 2013 03:15:27 GMT
Accept-Ranges: bytes
Etag: &quot;1330eb76c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/full_width_headline_line.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=EDF3DA29A30ABD2B59C83C53DE2BAE81|e708b15cee5ec8a15f96155c48ab4e48
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 557
Last-Modified: Sun, 13 Oct 2013 03:14:07 GMT
Accept-Ranges: bytes
Etag: &quot;b3f59247c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/gray_arc.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=EDF3DA29A30ABD2B59C83C53DE2BAE81|e708b15cee5ec8a15f96155c48ab4e48
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 7629
Last-Modified: Mon, 14 Oct 2013 04:26:10 GMT
Accept-Ranges: bytes
Etag: &quot;c49d718295c8ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/SOCIAL-MEDIA-ICONS-GRAY-FULL-COLOR-50X50.PNG?id=7 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=EDF3DA29A30ABD2B59C83C53DE2BAE81|e708b15cee5ec8a15f96155c48ab4e48
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 15695
Last-Modified: Thu, 04 Dec 2014 22:22:59 GMT
Accept-Ranges: bytes
Etag: &quot;6ce4ddc1010d01:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/footer_arc.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-header-footer.min.css?id=100
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=EDF3DA29A30ABD2B59C83C53DE2BAE81|e708b15cee5ec8a15f96155c48ab4e48
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 5216
Last-Modified: Sun, 13 Oct 2013 03:12:09 GMT
Accept-Ranges: bytes
Etag: &quot;7331221c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/semi_transparent_world_map.jpg HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-header-footer.min.css?id=100
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=EDF3DA29A30ABD2B59C83C53DE2BAE81|e708b15cee5ec8a15f96155c48ab4e48
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 5446
Last-Modified: Sun, 13 Oct 2013 03:16:37 GMT
Accept-Ranges: bytes
Etag: &quot;1b3e6a0c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/SOCIAL-MEDIA-ICONS-GRAY-FULL-COLOR-29X29.PNG?id=7 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=EDF3DA29A30ABD2B59C83C53DE2BAE81|e708b15cee5ec8a15f96155c48ab4e48
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 9074
Last-Modified: Thu, 04 Dec 2014 22:22:59 GMT
Accept-Ranges: bytes
Etag: &quot;6ce4ddc1010d01:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /js/savethechildren.js HTTP/1.1

Host: d1n00d49gkbray.cloudfront.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 54.230.11.174
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 28 Dec 2016 06:58:25 GMT
Last-Modified: Tue, 20 Dec 2016 18:30:12 GMT
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 538858
X-Cache: Hit from cloudfront
Via: 1.1 f76a5f650b7fe2be49bcae6cfe9c8215.cloudfront.net (CloudFront)
X-Amz-Cf-Id: Q359-kHXz9cxMnyyof6utSFx9jVIu8atLthXFt3gYfl3brxgzBjzQA==
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/NEWBORN_JAN17_SPOT.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 58254
Last-Modified: Wed, 04 Jan 2017 16:58:00 GMT
Accept-Ranges: bytes
Etag: &quot;a3f6c0b4ab66d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/CW_TOPRATED_RGB_WEB_88.PNG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 10213
Last-Modified: Thu, 22 Dec 2016 16:12:22 GMT
Accept-Ranges: bytes
Etag: &quot;6c2f4c2d6e5cd21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /js/300/addthis_widget.js HTTP/1.1

Host: s7.addthis.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 104.16.16.35
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Tue, 10 Jan 2017 12:39:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 06 Jan 2017 21:19:45 GMT
Etag: &quot;54125-5457393b19e40&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Timing-Allow-Origin: *
Surrogate-Key: client_dist
Cache-Control: public, no-check, max-age=600
CF-Cache-Status: HIT
X-Host: s7.addthis.com
X-Distribution: 99
Server: cloudflare-nginx
CF-RAY: 31f0317b00b84285-OSL
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/bbb_accredited_charity_seal.jpg HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 13341
Last-Modified: Sun, 13 Oct 2013 00:54:47 GMT
Accept-Ranges: bytes
Etag: &quot;a38977d0aec7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:42 GMT
Connection: keep-alive
GET /bounce?%2Fseg%3Fadd%3D806740%26t%3D1 HTTP/1.1

Host: ib.adnxs.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: sess=1; uuid2=5423163531124190835
 37.252.172.39
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Server: nginx/1.9.13
Date: Tue, 10 Jan 2017 12:39:45 GMT
Content-Length: 259
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Set-Cookie: anj=dTM7k!M4/8DYRWSF']wIg2GVOeo3h-!@wnf]meq8dWME4(EW&lt;KNY:[#; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2017 12:39:45 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Wed, 11-Jan-2017 12:39:45 GMT; Domain=.adnxs.com; HttpOnly uuid2=5423163531124190835; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2017 12:39:45 GMT; Domain=.adnxs.com; HttpOnly
GET /analytics.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Tue, 10 Jan 2017 11:23:55 GMT
Expires: Tue, 10 Jan 2017 13:23:55 GMT
Last-Modified: Wed, 28 Sep 2016 20:19:01 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 11590
Cache-Control: public, max-age=7200
Age: 4548
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/MOVINGSLIDESHOWTRIANGLE.PNG?id=2 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=EDF3DA29A30ABD2B59C83C53DE2BAE81|e708b15cee5ec8a15f96155c48ab4e48; cybersource=0
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 509
Last-Modified: Fri, 22 Nov 2013 20:29:32 GMT
Accept-Ranges: bytes
Etag: &quot;195d7e8dc1e7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:43 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/slideshowNext2.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=EDF3DA29A30ABD2B59C83C53DE2BAE81|e708b15cee5ec8a15f96155c48ab4e48; cybersource=0
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 818
Last-Modified: Wed, 03 Aug 2016 18:06:59 GMT
Accept-Ranges: bytes
Etag: &quot;9c1c14d4b1edd11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:43 GMT
Connection: keep-alive
GET /pages/scripts/0041/0877.js?412236 HTTP/1.1

Host: script.crazyegg.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 52.85.70.20
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 28 Dec 2016 06:55:49 GMT
Last-Modified: Tue, 20 Dec 2016 21:33:31 GMT
Cache-Control: max-age=3600
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 2176
X-Cache: Hit from cloudfront
Via: 1.1 69cf24ae37ffa20a3643ef8de73fe74a.cloudfront.net (CloudFront)
X-Amz-Cf-Id: ARyeeKsWx7eGVHGljbPUMm-dO7oydZSxDhKFLzTfdfJbtrqWc6zW8Q==
GET /activityi;src=5547516;type=stcge0;cat=stcho0;ord=8677517594846;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm? HTTP/1.1

Host: 5547516.fls.doubleclick.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.166
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Timing-Allow-Origin: *
Date: Tue, 10 Jan 2017 12:39:43 GMT
Expires: Tue, 10 Jan 2017 12:39:43 GMT
Cache-Control: private, max-age=0
Strict-Transport-Security: max-age=21600
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 1252
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 10-Jan-2017 12:54:43 GMT; path=/; domain=.doubleclick.net
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/slideshowPrev2.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=CCE1C82C6608442CB22407BE7C096236&amp;keyw44832=BEFEFE863044496A9B84D1D1093B5099&amp;key=a149abee819047948ef21e8e270f3372&amp;knta=D53C356BAEAC4724AA06E45E49AD2B5B; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f6b45525d5f4f58455e445a4a423660; ASP.NET_SessionId=voxpkk55ffutptncse0deqa5; CCE1C82C6608442CB22407BE7C096236=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1429078191.1484051982.1484051982.1484051982.1; __utmb=1.1.10.1484051982; __utmc=1; __utmz=1.1484051982.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=EDF3DA29A30ABD2B59C83C53DE2BAE81|e708b15cee5ec8a15f96155c48ab4e48; cybersource=0
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 861
Last-Modified: Wed, 03 Aug 2016 18:06:59 GMT
Accept-Ranges: bytes
Etag: &quot;4aba11d4b1edd11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 12:39:43 GMT
Connection: keep-alive
GET /meter/www.savethechildren.org/101.gif HTTP/1.1

Host: cdn.ywxi.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 2.23.139.10
HTTP/1.1 200 OK
Content-Type: image/png; charset=UTF-8
Server: Apache
Cache-Control: public
Expires: Tue, 10 Jan 2017 13:18:02 GMT
Content-Encoding: gzip
Content-Length: 5029
Vary: Accept-Encoding
Date: Tue, 10 Jan 2017 12:39:43 GMT
Connection: keep-alive
GET /p/js/1.js HTTP/1.1

Host: 3yfxj6c2.micpn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 54.192.8.218
HTTP/1.1 200 OK
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache max-age=0
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
P3P: policyref=&quot;https://movableink.com/w3c/p3p.xml&quot;, CP=&quot;DEVa PSAa PSDa IVAa IVDa OUR IND DSP NON COR NAV UNI&quot;
Date: Tue, 10 Jan 2017 12:32:26 GMT
Age: 437
X-Cache: Hit from cloudfront
Via: 1.1 3f24c2c1b2f93306294e76010c5e9899.cloudfront.net (CloudFront)
X-Amz-Cf-Id: WDe4ToqaeiDq5hJ9GiPvWyzYufOs_xq1QxFqsiXSA4OPXVxO7pzaAw==
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 12:39:43 GMT
Expires: Sat, 14 Jan 2017 12:39:43 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /en_US/fbevents.js HTTP/1.1

Host: connect.facebook.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 31.13.66.5
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: d03af2e7d83def009687cb8f2ac55b8e
Etag: &quot;469c0659031478dca13873d87a4b2d19&quot;
X-Frame-Options: DENY
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Timing-Allow-Origin: *
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Tue, 10 Jan 2017 12:48:54 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: qhUgh1OmjqBWJKXM3BYWkA==
X-FB-Debug: ZpA0Mrxl0wHXJGIszr7XjO1llKzycA6EkxCPhe1dk4PmMEEy6xAHJkYH4xhwOg1vrfWjaen/I61ZzpwcV3fIDw==
Date: Tue, 10 Jan 2017 12:39:43 GMT
Connection: keep-alive
Content-Length: 4055
GET /app1/SmarterHandler.ashx?r=1169992089&i=fyl6dahrce-1092&cb=_smtr.postprocess&bv=2.7.0&utc=-60&pt=5&href=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&hostn=www.savethechildren.org&pathn=%2Fsite%2Fc.8rklixmgipi4e%2Fb.6115947%2Fk.b143%2Fofficial_usa_site.htm HTTP/1.1

Host: tr2.smarterhq.io
GET /app1/SmarterHandler.ashx?r=1169992089&amp;i=fyl6dahrce-1092&amp;cb=_smtr.postprocess&amp;bv=2.7.0&amp;utc=-60&amp;pt=5&amp;href=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;hostn=www.savethechildren.org&amp;pathn=%2Fsite%2Fc.8rklixmgipi4e%2Fb.6115947%2Fk.b143%2Fofficial_usa_site.htm HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 52.203.75.153
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Cache-Control: no-cache, no-store
Date: Tue, 10 Jan 2017 12:39:43 GMT
Expires: -1
Pragma: no-cache
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 296
Connection: keep-alive
POST / HTTP/1.1

Host: g.symcd.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 102
Content-Type: application/ocsp-request
 23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.10.2
Content-Length: 1377
Content-Transfer-Encoding: binary
Cache-Control: max-age=594866, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Jan 2017 09:50:52 GMT
Expires: Tue, 17 Jan 2017 09:50:52 GMT
Date: Tue, 10 Jan 2017 12:39:44 GMT
Connection: keep-alive
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 12:39:52 GMT
Expires: Sat, 14 Jan 2017 12:39:52 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /activityi;src=4266705;type=invmedia;cat=xs0zpcmo;ord=1? HTTP/1.1

Host: 4266705.fls.doubleclick.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.166
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref=&quot;https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Timing-Allow-Origin: *
Date: Tue, 10 Jan 2017 12:39:52 GMT
Expires: Tue, 10 Jan 2017 12:39:52 GMT
Cache-Control: private, max-age=0
Strict-Transport-Security: max-age=21600
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 10-Jan-2017 12:54:52 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
Transfer-Encoding: chunked
GET /pagead/conversion/1069852215/?random=1484051982526&cv=8&fst=1484051982526&num=1&fmt=3&value=0&label=UiVPCOGIxgIQt8yS_gM&bg=ffffff&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&tiba=Official%20USA%20Site%20-%20Save%20the%20Children HTTP/1.1

Host: www.googleadservices.com
GET /pagead/conversion/1069852215/?random=1484051982526&amp;cv=8&amp;fst=1484051982526&amp;num=1&amp;fmt=3&amp;value=0&amp;label=UiVPCOGIxgIQt8yS_gM&amp;bg=ffffff&amp;hl=en&amp;guid=ON&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_his=1&amp;u_tz=60&amp;u_java=true&amp;u_nplug=10&amp;u_nmime=92&amp;frm=0&amp;url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;tiba=Official%20USA%20Site%20-%20Save%20the%20Children HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 

GET /adcedge/lb?site=695501&betr=STC_1day=[+]1day[24]|STC_1hr=[+]1hr[1]|STC_7day=[+]7day[168]|STC_14day=[+]14day[336]|STC_30day=[+]30day[720] HTTP/1.1

Host: secure.leadback.advertising.com
GET /adcedge/lb?site=695501&amp;betr=STC_1day=[+]1day[24]|STC_1hr=[+]1hr[1]|STC_7day=[+]7day[168]|STC_14day=[+]14day[336]|STC_30day=[+]30day[720] HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 

GET /s/at?site=10052&page=6115947 HTTP/1.1

Host: link.savethechildren.csengage2.net
GET /s/at?site=10052&amp;page=6115947 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm