Overview

URLgenvipfocus.com/
IP162.244.32.143
ASNAS14576 Hosting Solution Ltd.
Location United States
Report completed2017-01-10 16:46:55 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Referer
Pool
Access Levelpublic


Intrusion Detection Systems

Snort /w Sourcefire VRT No alerts detected
Suricata /w Emerging Threats Pro No alerts detected


Blacklists

Fortinet's Web Filter / fortiguard.com
Added / Verified Severity Host Comment
2017-01-102genvipfocus.com/Malware
2017-01-102genvipfocus.com/int/asca/forskolin/?bhu=2m69uy493fNxTGFyJX2t4bPUkjuzmnqEMalware
MDL / malwaredomainlist.com No alerts detected
DNS-BH / malwaredomains.com No alerts detected
mnemonic secure DNS / mnemonic.no No alerts detected
OpenPhish / openphish.com No alerts detected
PhishTank / phishtank.com No alerts detected
Spamhaus DBL / spamhaus.org No alerts detected


Files Captured



Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 162.244.32.143

Date UQ / IDS / BL URL IP
2017-01-18 16:51:050 - 0 - 1focusokswitt.com/162.244.32.143
2017-01-18 11:59:520 - 0 - 1focusokswitt.com/162.244.32.143
2017-01-11 20:03:140 - 0 - 2genvipfocus.com/162.244.32.143
2017-01-11 18:43:100 - 0 - 2genvipfocus.com/162.244.32.143
2017-01-11 17:32:580 - 0 - 2genvipfocus.com/162.244.32.143
2017-01-11 05:56:570 - 0 - 2genvipfocus.com/162.244.32.143

Last 6 reports on ASN: AS14576 Hosting Solution Ltd.

Date UQ / IDS / BL URL IP
2017-02-25 10:49:280 - 0 - 1sexwebgirls.com/185.104.11.146
2017-02-25 10:04:170 - 0 - 5madxxxporn.com/204.155.30.149
2017-02-25 08:27:400 - 0 - 2rapiseebrains.com/204.155.31.176
2017-02-25 07:32:180 - 0 - 1ld.mediaget.com/index.php?l=ru185.104.10.56
2017-02-25 03:47:000 - 0 - 2rapiseebrains.com/204.155.31.176
2017-02-25 02:16:570 - 0 - 2rapiseebrains.com/204.155.31.176

Last 6 reports on domain: genvipfocus.com

Date UQ / IDS / BL URL IP
2017-01-29 22:45:040 - 0 - 1genvipfocus.com/185.62.39.133
2017-01-29 17:34:450 - 0 - 2genvipfocus.com/185.62.39.133
2017-01-29 06:02:490 - 0 - 2genvipfocus.com/185.62.39.133
2017-01-29 05:42:440 - 0 - 2genvipfocus.com/185.62.39.133
2017-01-27 06:08:180 - 0 - 2genvipfocus.com/185.62.39.133
2017-01-26 09:55:490 - 0 - 2genvipfocus.com/185.62.39.133



JavaScript

Executed Scripts (55)


Executed Evals (3)

#1 JavaScript::Eval (size: 222, repeated: 13)

(function() {
    try {
        var a = window.location.href;
        return /\/b.[0-9]{5,}\//.test(window.location.href) ? a.match(/\/b.([0-9]{5,})\//)[1] : window.location.search.match(/[\?|\&]b=([0-9]{5,})/)[1]
    } catch (b) {
        return "Error: " + b.message
    }
})();

#2 JavaScript::Eval (size: 8, repeated: 1)

_ate.cbs

#3 JavaScript::Eval (size: 11, repeated: 1)

addthis.cbs

Executed Writes (4)

#1 JavaScript::Write (size: 516, repeated: 1)

<img height="1" width="1" border="0" alt="" src="https://www.googleadservices.com/pagead/conversion/1069852215/?random=1484063171540&cv=8&fst=1484063171540&num=1&fmt=3&value=0&label=UiVPCOGIxgIQt8yS_gM&bg=ffffff&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&tiba=Official%20USA%20Site%20-%20Save%20the%20Children" style="display:none" />

#2 JavaScript::Write (size: 240, repeated: 1)

<img src="https://4266705.fls.doubleclick.net/activityi;src=4266705;type=invmedia;cat=xs0zpcmo;ord=1?" width="1" height="1" style="position:absolute;overflow:hidden;clip:rect(0 0 0 0);height:1px;width:1px;margin:-1px;padding:0;border:0;" />

#3 JavaScript::Write (size: 152, repeated: 1)

<img src="https://www.wtp101.com/push_sync?f=0" alt=" " style="display:none"/><script type="text/javascript" src="https://www.wtp101.com/pcon"></script>

#4 JavaScript::Write (size: 424, repeated: 1)

<img src="https://x.bidswitch.net/sync?dsp_id=17&user_group=1&expires=10&user_id=0be23537-21a6-40bc-8fcf-0e1cfdbb807e" alt=" " style="display:none"/><img src="https://x.bidswitch.net/sync?dsp_id=17&user_group=1&expires=10&user_id=0be23537-21a6-40bc-8fcf-0e1cfdbb807e" alt=" " style="display:none"/><img src="https://idsync.rlcdn.com/385296.gif?partner_uid=0be23537-21a6-40bc-8fcf-0e1cfdbb807e" alt=" " style="display:none"/>


HTTP Transactions (157)


Request Response
GET / HTTP/1.1

Host: genvipfocus.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 162.244.32.143
HTTP/1.1 303 See Other
HTTP/1.1 303 See Other
Server: nginx/1.10.2
Date: Tue, 10 Jan 2017 15:46:26 GMT
Content-Length: 0
Connection: keep-alive
Location: http://genvipfocus.com/int/asca/forskolin/?bhu=2m69uy493fNxTGFyJX2t4bPUkjuzmnqE
Set-Cookie: UUID=U808-88-1-370945-652471; path=/
GET /int/asca/forskolin/?bhu=2m69uy493fNxTGFyJX2t4bPUkjuzmnqE HTTP/1.1

Host: genvipfocus.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: UUID=U808-88-1-370945-652471
 162.244.32.143
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Server: nginx/1.10.2
Date: Tue, 10 Jan 2017 15:46:27 GMT
Content-Length: 27
Connection: keep-alive
X-Powered-By: ARR/2.5(3922185c8)
Location: http://savethechildren.org/
GET / HTTP/1.1

Host: savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 64.209.141.60
HTTP/1.1 302 Object moved
Content-Type: text/html
Cache-Control: private
Content-Length: 175
Location: http://www.kintera.org/site/lookup.asp?c=8rKLIXMGIpI4E
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDSCRTRABS=MHJGEKECMFOOGALCMPJBLBMB; path=/ NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c7745525d5f4f58455e445a4a423660;path=/;httponly
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:09 GMT
GET /site/lookup.asp?c=8rKLIXMGIpI4E HTTP/1.1

Host: www.kintera.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 104.123.114.124
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Content-Length: 197
Location: http://www.savethechildren.org/site/lookup.asp?c=8rKLIXMGIpI4E&amp;b=6115947
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:10 GMT
Connection: keep-alive
Set-Cookie: KNTASESSION=keyw44832=580CAAC77157402B9DA86887E7D4E090&amp;kntaw44832=9A9377C9E29F4CDDA67395C9DC557A1E; domain=kintera.org; path=/ NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091fbd45525d5f4f58455e445a4a423660;path=/;httponly
Cache-Control: private
Expires: Tue, 10 Jan 2017 15:45:10 GMT
GET /site/lookup.asp?c=8rKLIXMGIpI4E&b=6115947 HTTP/1.1

Host: www.savethechildren.org
GET /site/lookup.asp?c=8rKLIXMGIpI4E&amp;b=6115947 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 104.123.114.107
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 0
Location: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:10 GMT
Connection: keep-alive
Set-Cookie: KNTASESSION=keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F; domain=savethechildren.org; path=/ NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660;path=/;httponly
Cache-Control: private
Expires: Tue, 10 Jan 2017 15:45:10 GMT
GET /site/layout/default.css HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/css
Cteonnt-Length: 71565
Last-Modified: Fri, 08 Mar 2013 21:19:58 GMT
Accept-Ranges: bytes
Etag: &quot;0539caf421cce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 13931
Vary: Accept-Encoding
Cache-Control: private, max-age=13346
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/css
Cteonnt-Length: 43272
Last-Modified: Sat, 20 Jun 2015 14:04:53 GMT
Accept-Ranges: bytes
Etag: &quot;5ad36c1462abd01:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 8378
Vary: Accept-Encoding
Cache-Control: private, max-age=5734
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-header-footer.min.css?id=100 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/css
Cteonnt-Length: 15478
Last-Modified: Mon, 16 Nov 2015 22:52:40 GMT
Accept-Ranges: bytes
Etag: &quot;244827fc120d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 3807
Vary: Accept-Encoding
Cache-Control: private, max-age=3751
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/FAVICON.ICO HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Tue, 26 Jul 2011 14:08:27 GMT
Accept-Ranges: bytes
Etag: &quot;f95e487d9d4bcc1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-template-full-width-pages.min.css HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/css
Cteonnt-Length: 6238
Last-Modified: Mon, 26 Jan 2015 17:40:10 GMT
Accept-Ranges: bytes
Etag: &quot;d6f891218f39d01:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 1248
Vary: Accept-Encoding
Cache-Control: private, max-age=5728
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /site/layout/content.css HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/css
Cteonnt-Length: 2119
Last-Modified: Sat, 10 Jan 2015 12:00:09 GMT
Accept-Ranges: bytes
Etag: &quot;806a3fbcc2cd01:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 564
Vary: Accept-Encoding
Cache-Control: private, max-age=3389
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/RIVETED.MIN.JS HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Tue, 15 Dec 2015 16:56:38 GMT
Accept-Ranges: bytes
Etag: &quot;c37c83905937d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1032
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/header_save_the_children_logo.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2183
Last-Modified: Sun, 13 Oct 2013 03:14:07 GMT
Accept-Ranges: bytes
Etag: &quot;b3f59247c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/decorative_link_arrow.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 619
Last-Modified: Sun, 13 Oct 2013 02:28:32 GMT
Accept-Ranges: bytes
Etag: &quot;db313ee9bbc7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9DEF2EBE-10AE-432C-9BD0-DF91D2EBA74A%7D/multi-load-min.js?id=431 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Wed, 22 Oct 2014 17:49:17 GMT
Accept-Ranges: bytes
Etag: &quot;621c218020eecf1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7741
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/HP_SLIDE_JAN1_NEWYEAR.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 92302
Last-Modified: Sun, 01 Jan 2017 14:32:33 GMT
Accept-Ranges: bytes
Etag: &quot;1df69be33b64d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9DEF2EBE-10AE-432C-9BD0-DF91D2EBA74A%7D/www.savethechildren.org.functionality.js?id=481 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Thu, 08 Dec 2016 15:10:49 GMT
Accept-Ranges: bytes
Etag: &quot;6db7a3426551d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 32507
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: KNTASESSION=keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/html; charset=iso-8859-1
Cteonnt-Length: 43015
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 12422
Date: Tue, 10 Jan 2017 15:46:10 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; path=/; HttpOnly KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; domain=savethechildren.org; path=/ 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; path=/
Cache-Control: private
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/charlie_separator.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2036
Last-Modified: Sun, 13 Oct 2013 03:12:09 GMT
Accept-Ranges: bytes
Etag: &quot;7331221c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9DEF2EBE-10AE-432C-9BD0-DF91D2EBA74A%7D/www.savethechildren.org.js?id=4125 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Tue, 03 Jan 2017 21:35:44 GMT
Accept-Ranges: bytes
Etag: &quot;3fcb9756966d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7574
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/ANNUAL_REPORT_2016_3.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 26858
Last-Modified: Thu, 26 May 2016 14:30:39 GMT
Accept-Ranges: bytes
Etag: &quot;36dfb82c5bb7d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /ajax/libs/jquery/1.4.2/jquery.min.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.170
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Wed, 04 Jan 2017 17:40:13 GMT
Expires: Thu, 04 Jan 2018 17:40:13 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 24715
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 511558
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/HP_SLIDER_2016_HIGHLIGHTS.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 94302
Last-Modified: Sun, 01 Jan 2017 14:32:33 GMT
Accept-Ranges: bytes
Etag: &quot;15f5d9e33b64d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/HOMEPAGE_ARROW.PNG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 4801
Last-Modified: Tue, 17 Jun 2014 18:19:35 GMT
Accept-Ranges: bytes
Etag: &quot;ef946eb1588acf1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /site/layout/util.js HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Fri, 23 Oct 2009 18:22:40 GMT
Accept-Ranges: bytes
Etag: &quot;058f2cdd54ca1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2758
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /CommonLib/lib/INC_jsFields.js HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Tue, 14 Jan 2014 02:16:42 GMT
Accept-Ranges: bytes
Etag: &quot;06117aace10cf1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5186
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/ANNUAL_REPORT_2016_2.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 45732
Last-Modified: Wed, 25 May 2016 20:13:24 GMT
Accept-Ranges: bytes
Etag: &quot;96404fe4c1b6d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /pagead/conversion.js HTTP/1.1

Host: www.googleadservices.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Timing-Allow-Origin: *
Etag: 1260147617075718455
Date: Tue, 10 Jan 2017 15:46:11 GMT
Expires: Tue, 10 Jan 2017 15:46:11 GMT
Cache-Control: private, max-age=86400
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename=&quot;f.txt&quot;
Content-Encoding: gzip
Server: cafe
Content-Length: 5421
X-XSS-Protection: 1; mode=block
GET /j.php?a=27125&u=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&r=0.5832847928556565 HTTP/1.1

Host: dev.visualwebsiteoptimizer.com
GET /j.php?a=27125&amp;u=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;r=0.5832847928556565 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 159.122.87.153
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Date: Tue, 10 Jan 2017 15:46:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: dacdn2
Content-Encoding: gzip
GET /seg?add=806740&t=1 HTTP/1.1

Host: go.accmgr.com
GET /seg?add=806740&amp;t=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 185.33.223.10
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Server: nginx/1.9.13
Date: Tue, 10 Jan 2017 15:46:13 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Location: http://ib.adnxs.com/seg?add=806740&amp;t=1
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/HP_SLIDE_JAN1_SPON.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 93799
Last-Modified: Sun, 01 Jan 2017 14:32:33 GMT
Accept-Ranges: bytes
Etag: &quot;11a7ace33b64d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/SPOT_SPON_DRTV_110316.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 10974
Last-Modified: Thu, 03 Nov 2016 19:11:40 GMT
Accept-Ranges: bytes
Etag: &quot;c097691b636d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/APPLE_SPOT.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 14897
Last-Modified: Mon, 14 Nov 2016 18:08:25 GMT
Accept-Ranges: bytes
Etag: &quot;985df817a23ed21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/CHARITY_NAVIGATOR_4STAR.GIF HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 2313
Last-Modified: Sun, 13 Oct 2013 00:54:47 GMT
Accept-Ranges: bytes
Etag: &quot;a38977d0aec7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/bbb_accredited_charity_seal.jpg HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 13341
Last-Modified: Sun, 13 Oct 2013 00:54:47 GMT
Accept-Ranges: bytes
Etag: &quot;a38977d0aec7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/HP_SLIDE_SYRIA_JAN1_2017.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 99743
Last-Modified: Sun, 01 Jan 2017 14:32:33 GMT
Accept-Ranges: bytes
Etag: &quot;8da6cbe33b64d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/guidestar_exchange_gold.gif HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 4526
Last-Modified: Sun, 13 Oct 2013 00:54:47 GMT
Accept-Ranges: bytes
Etag: &quot;a38977d0aec7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/CW_TOPRATED_RGB_WEB_88.PNG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 10213
Last-Modified: Thu, 22 Dec 2016 16:12:22 GMT
Accept-Ranges: bytes
Etag: &quot;6c2f4c2d6e5cd21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /meter/www.savethechildren.org/101.gif HTTP/1.1

Host: cdn.ywxi.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 2.23.139.10
HTTP/1.1 200 OK
Content-Type: image/png; charset=UTF-8
Server: Apache
Cache-Control: public
Expires: Tue, 10 Jan 2017 15:53:00 GMT
Content-Encoding: gzip
Content-Length: 5029
Vary: Accept-Encoding
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/slideshow.js?id=4 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Mon, 05 May 2014 19:51:56 GMT
Accept-Ranges: bytes
Etag: &quot;11238789b68cf1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2794
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/ANNUAL_REPORT_2016_1.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 53542
Last-Modified: Wed, 25 May 2016 20:13:24 GMT
Accept-Ranges: bytes
Etag: &quot;96404fe4c1b6d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Tue, 10 Jan 2017 14:59:11 GMT
Expires: Tue, 10 Jan 2017 16:59:11 GMT
Last-Modified: Wed, 28 Sep 2016 20:19:01 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 16022
Age: 2820
Cache-Control: public, max-age=7200
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/NEWBORN_JAN17_SPOT.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 58254
Last-Modified: Wed, 04 Jan 2017 16:58:00 GMT
Accept-Ranges: bytes
Etag: &quot;a3f6c0b4ab66d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /v.gif?a=27125&d=savethechildren.org&u=0ACAC52FA2AB38D18FAEBBE23D020811&h=7b0b9a01d269c249f2ef48195a969131&t=false&r=0.5720643767006944 HTTP/1.1

Host: dev.visualwebsiteoptimizer.com
GET /v.gif?a=27125&amp;d=savethechildren.org&amp;u=0ACAC52FA2AB38D18FAEBBE23D020811&amp;h=7b0b9a01d269c249f2ef48195a969131&amp;t=false&amp;r=0.5720643767006944 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 159.122.87.153
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 10 Jan 2017 15:46:02 GMT
Connection: keep-alive
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Expires: Mon, 10 Jan 2005 00:00:01 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
Content-Length: 35
Server: dacdn2
GET /js/300/addthis_widget.js HTTP/1.1

Host: s7.addthis.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 104.16.25.35
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Tue, 10 Jan 2017 15:46:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 06 Jan 2017 21:19:45 GMT
Etag: &quot;54125-5457393b19e40&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Timing-Allow-Origin: *
Surrogate-Key: client_dist
Cache-Control: public, no-check, max-age=600
CF-Cache-Status: HIT
X-Host: s7.addthis.com
X-Distribution: 99
Server: cloudflare-nginx
CF-RAY: 31f142a631db42af-OSL
GET /gtm.js?id=GTM-5T6BP3 HTTP/1.1

Host: www.googletagmanager.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.168
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 10 Jan 2017 15:46:12 GMT
Expires: Tue, 10 Jan 2017 15:46:12 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
Content-Length: 35138
X-XSS-Protection: 1; mode=block
GET /seg?add=806740&t=1 HTTP/1.1

Host: ib.adnxs.com
GET /seg?add=806740&amp;t=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 185.33.222.8
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Server: nginx/1.9.13
Date: Tue, 10 Jan 2017 15:46:14 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Location: http://ib.adnxs.com/bounce?%2Fseg%3Fadd%3D806740%26t%3D1
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Wed, 11-Jan-2017 15:46:14 GMT; Domain=.adnxs.com; HttpOnly uuid2=8112546281313915484; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2017 15:46:14 GMT; Domain=.adnxs.com; HttpOnly
GET /r/__utm.gif?utmwv=5.6.7&utms=1&utmn=469484651&utmhn=www.savethechildren.org&utme=8(5!session_msource)9(5!wewscwww1112)11(5!2)&utmcs=ISO-8859-1&utmsr=1176x885&utmvp=1159x775&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Official%20USA%20Site%20-%20Save%20the%20Children&utmhid=1683753956&utmr=-&utmp=%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&utmht=1484063172369&utmac=UA-19396666-1&utmcc=__utma%3D1.1955594197.1484063172.1484063172.1484063172.1%3B%2B__utmz%3D1.1484063172.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1389677002&utmredir=1&utmu=q1AAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1

Host: www.google-analytics.com
GET /r/__utm.gif?utmwv=5.6.7&amp;utms=1&amp;utmn=469484651&amp;utmhn=www.savethechildren.org&amp;utme=8(5!session_msource)9(5!wewscwww1112)11(5!2)&amp;utmcs=ISO-8859-1&amp;utmsr=1176x885&amp;utmvp=1159x775&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=Official%20USA%20Site%20-%20Save%20the%20Children&amp;utmhid=1683753956&amp;utmr=-&amp;utmp=%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;utmht=1484063172369&amp;utmac=UA-19396666-1&amp;utmcc=__utma%3D1.1955594197.1484063172.1484063172.1484063172.1%3B%2B__utmz%3D1.1484063172.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmjid=1389677002&amp;utmredir=1&amp;utmu=q1AAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
Access-Control-Allow-Origin: *
Date: Tue, 10 Jan 2017 15:46:12 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/SC_PIE_2015.PNG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 35107
Last-Modified: Wed, 25 May 2016 17:25:26 GMT
Accept-Ranges: bytes
Etag: &quot;8a4e416daab6d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:11 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/gray_arc.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; _vwo_uuid_v2=0ACAC52FA2AB38D18FAEBBE23D020811|7b0b9a01d269c249f2ef48195a969131; __utma=1.1955594197.1484063172.1484063172.1484063172.1; __utmb=1.1.10.1484063172; __utmc=1; __utmz=1.1484063172.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 7629
Last-Modified: Mon, 14 Oct 2013 04:26:10 GMT
Accept-Ranges: bytes
Etag: &quot;c49d718295c8ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:12 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/full_width_headline_line.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; _vwo_uuid_v2=0ACAC52FA2AB38D18FAEBBE23D020811|7b0b9a01d269c249f2ef48195a969131; __utma=1.1955594197.1484063172.1484063172.1484063172.1; __utmb=1.1.10.1484063172; __utmc=1; __utmz=1.1484063172.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 557
Last-Modified: Sun, 13 Oct 2013 03:14:07 GMT
Accept-Ranges: bytes
Etag: &quot;b3f59247c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:12 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/footer_arc.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-header-footer.min.css?id=100
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; _vwo_uuid_v2=0ACAC52FA2AB38D18FAEBBE23D020811|7b0b9a01d269c249f2ef48195a969131; __utma=1.1955594197.1484063172.1484063172.1484063172.1; __utmb=1.1.10.1484063172; __utmc=1; __utmz=1.1484063172.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 5216
Last-Modified: Sun, 13 Oct 2013 03:12:09 GMT
Accept-Ranges: bytes
Etag: &quot;7331221c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:12 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/SOCIAL-MEDIA-ICONS-GRAY-FULL-COLOR-50X50.PNG?id=7 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; _vwo_uuid_v2=0ACAC52FA2AB38D18FAEBBE23D020811|7b0b9a01d269c249f2ef48195a969131; __utma=1.1955594197.1484063172.1484063172.1484063172.1; __utmb=1.1.10.1484063172; __utmc=1; __utmz=1.1484063172.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 15695
Last-Modified: Thu, 04 Dec 2014 22:22:59 GMT
Accept-Ranges: bytes
Etag: &quot;6ce4ddc1010d01:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:12 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/SOCIAL-MEDIA-ICONS-GRAY-FULL-COLOR-29X29.PNG?id=7 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; _vwo_uuid_v2=0ACAC52FA2AB38D18FAEBBE23D020811|7b0b9a01d269c249f2ef48195a969131; __utma=1.1955594197.1484063172.1484063172.1484063172.1; __utmb=1.1.10.1484063172; __utmc=1; __utmz=1.1484063172.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 9074
Last-Modified: Thu, 04 Dec 2014 22:22:59 GMT
Accept-Ranges: bytes
Etag: &quot;6ce4ddc1010d01:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:12 GMT
Connection: keep-alive
GET /bounce?%2Fseg%3Fadd%3D806740%26t%3D1 HTTP/1.1

Host: ib.adnxs.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: sess=1; uuid2=8112546281313915484
 185.33.222.8
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Server: nginx/1.9.13
Date: Tue, 10 Jan 2017 15:46:14 GMT
Content-Length: 259
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Set-Cookie: anj=dTM7k!M4/8DYRWSF']wIg2HbZc:v3(N6f941pnwkI'mTS#BFkYIz/'&gt;; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2017 15:46:14 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Wed, 11-Jan-2017 15:46:14 GMT; Domain=.adnxs.com; HttpOnly uuid2=8112546281313915484; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2017 15:46:14 GMT; Domain=.adnxs.com; HttpOnly
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/magnifying_glass.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-header-footer.min.css?id=100
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; _vwo_uuid_v2=0ACAC52FA2AB38D18FAEBBE23D020811|7b0b9a01d269c249f2ef48195a969131; __utma=1.1955594197.1484063172.1484063172.1484063172.1; __utmb=1.1.10.1484063172; __utmc=1; __utmz=1.1484063172.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 317
Last-Modified: Sun, 13 Oct 2013 03:15:27 GMT
Accept-Ranges: bytes
Etag: &quot;1330eb76c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:12 GMT
Connection: keep-alive
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 15:46:13 GMT
Expires: Sat, 14 Jan 2017 15:46:13 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/semi_transparent_world_map.jpg HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-header-footer.min.css?id=100
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; _vwo_uuid_v2=0ACAC52FA2AB38D18FAEBBE23D020811|7b0b9a01d269c249f2ef48195a969131; __utma=1.1955594197.1484063172.1484063172.1484063172.1; __utmb=1.1.10.1484063172; __utmc=1; __utmz=1.1484063172.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 5446
Last-Modified: Sun, 13 Oct 2013 03:16:37 GMT
Accept-Ranges: bytes
Etag: &quot;1b3e6a0c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:13 GMT
Connection: keep-alive
GET /analytics.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Tue, 10 Jan 2017 15:23:55 GMT
Expires: Tue, 10 Jan 2017 17:23:55 GMT
Last-Modified: Wed, 28 Sep 2016 20:19:01 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 11590
Cache-Control: public, max-age=7200
Age: 1338
GET /activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm? HTTP/1.1

Host: 5547516.fls.doubleclick.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.166
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Timing-Allow-Origin: *
Date: Tue, 10 Jan 2017 15:46:13 GMT
Expires: Tue, 10 Jan 2017 15:46:13 GMT
Cache-Control: private, max-age=0
Strict-Transport-Security: max-age=21600
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 1252
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 10-Jan-2017 16:01:13 GMT; path=/; domain=.doubleclick.net
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/MOVINGSLIDESHOWTRIANGLE.PNG?id=2 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; _vwo_uuid_v2=0ACAC52FA2AB38D18FAEBBE23D020811|7b0b9a01d269c249f2ef48195a969131; __utma=1.1955594197.1484063172.1484063172.1484063172.1; __utmb=1.1.10.1484063172; __utmc=1; __utmz=1.1484063172.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; cybersource=0
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 509
Last-Modified: Fri, 22 Nov 2013 20:29:32 GMT
Accept-Ranges: bytes
Etag: &quot;195d7e8dc1e7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/slideshowPrev2.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; _vwo_uuid_v2=0ACAC52FA2AB38D18FAEBBE23D020811|7b0b9a01d269c249f2ef48195a969131; __utma=1.1955594197.1484063172.1484063172.1484063172.1; __utmb=1.1.10.1484063172; __utmc=1; __utmz=1.1484063172.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; cybersource=0
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 861
Last-Modified: Wed, 03 Aug 2016 18:06:59 GMT
Accept-Ranges: bytes
Etag: &quot;4aba11d4b1edd11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/slideshowNext2.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=7575D17DFD7A45FCBFB7C559CD03FA7F&amp;keyw44832=F8B2ACDE673247DE88CB5010C661BAEF&amp;key=622baf5aa63042b6a465f8a55f961219&amp;knta=378F89B41877464DBCFAF9880F62C3F5; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660; ASP.NET_SessionId=5cnenw45tfxvlhvxy13c1cfd; 7575D17DFD7A45FCBFB7C559CD03FA7F=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; _vwo_uuid_v2=0ACAC52FA2AB38D18FAEBBE23D020811|7b0b9a01d269c249f2ef48195a969131; __utma=1.1955594197.1484063172.1484063172.1484063172.1; __utmb=1.1.10.1484063172; __utmc=1; __utmz=1.1484063172.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; cybersource=0
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 818
Last-Modified: Wed, 03 Aug 2016 18:06:59 GMT
Accept-Ranges: bytes
Etag: &quot;9c1c14d4b1edd11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Tue, 10 Jan 2017 15:46:13 GMT
Connection: keep-alive
GET /plugins/ua/linkid.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 10 Jan 2017 15:46:06 GMT
Expires: Tue, 10 Jan 2017 16:46:06 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 856
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 7
POST / HTTP/1.1

Host: g.symcd.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 102
Content-Type: application/ocsp-request
 23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.10.2
Content-Length: 1377
Content-Transfer-Encoding: binary
Cache-Control: max-age=583751, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Jan 2017 09:50:52 GMT
Expires: Tue, 17 Jan 2017 09:50:52 GMT
Date: Tue, 10 Jan 2017 15:46:13 GMT
Connection: keep-alive
GET /plugins/ua/ec.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 10 Jan 2017 15:43:21 GMT
Expires: Tue, 10 Jan 2017 16:43:21 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 1296
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 172
GET /en_US/fbevents.js HTTP/1.1

Host: connect.facebook.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 31.13.66.5
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 3651cd898533e48c331431b317769c6d
Etag: &quot;469c0659031478dca13873d87a4b2d19&quot;
X-Frame-Options: DENY
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Tue, 10 Jan 2017 15:49:16 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: /fN6nTmKqS76/iw6W1gqkA==
X-FB-Debug: GrnHvtdbJMAFjmlDOsEF7fMVoxP84i93tyMAxw6T1SMxp6kC0FEvE1G/p8geiJQvf4DAWcRQv1dcImXxq9A0fw==
Date: Tue, 10 Jan 2017 15:46:13 GMT
Connection: keep-alive
Content-Length: 4054
GET /p/js/1.js HTTP/1.1

Host: 3yfxj6c2.micpn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 54.192.8.218
HTTP/1.1 200 OK
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache max-age=0
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
P3P: policyref=&quot;https://movableink.com/w3c/p3p.xml&quot;, CP=&quot;DEVa PSAa PSDa IVAa IVDa OUR IND DSP NON COR NAV UNI&quot;
Date: Tue, 10 Jan 2017 15:42:32 GMT
Age: 221
X-Cache: Hit from cloudfront
Via: 1.1 0eab76ce53b41f34576485a06933533e.cloudfront.net (CloudFront)
X-Amz-Cf-Id: e0QqkC95HYoIq_nUFwaxJ-cy6yl9mMCbfr04ECyoAa6Ms_-4I2ewBA==
GET /js/savethechildren.js HTTP/1.1

Host: d1n00d49gkbray.cloudfront.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 54.230.11.231
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 28 Dec 2016 06:58:25 GMT
Last-Modified: Tue, 20 Dec 2016 18:30:12 GMT
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 550049
X-Cache: Hit from cloudfront
Via: 1.1 7c1dd6ec3a2968c60e7c975e26a3924c.cloudfront.net (CloudFront)
X-Amz-Cf-Id: hVXTJ7v-xvhI2Emjo-lAmPBCSzeaOl9RCr8A5WjiI-_TA9XoMSlIMA==
GET /pages/scripts/0041/0877.js?412239 HTTP/1.1

Host: script.crazyegg.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 52.85.70.20
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 28 Dec 2016 06:55:49 GMT
Last-Modified: Tue, 20 Dec 2016 21:33:31 GMT
Cache-Control: max-age=3600
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 2264
X-Cache: Hit from cloudfront
Via: 1.1 0742a501f4d29312ad9cbc7b7bf143c7.cloudfront.net (CloudFront)
X-Amz-Cf-Id: oJDXzJoFFd_erFh9ZooXD1KKQ_g9kEwbh0NVOOr9QUgByJDZa1n6mw==
GET /live/boost/savethechildren/_ate.track.config_resp HTTP/1.1

Host: m.addthisedge.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 104.16.27.235
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=UTF-8
Date: Tue, 10 Jan 2017 15:46:15 GMT
Content-Length: 141
Connection: keep-alive
Cache-Control: public, max-age=60, s-maxage=86400
Surrogate-Key: savethechildren
Etag: -309516394
Content-Disposition: attachment; filename=1.txt
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 31f142bc35cf427f-OSL
GET /stas/s/e0o0g8.js HTTP/1.1

Host: px.owneriq.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 2.23.129.11
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
Last-Modified: Tue, 31 Jan 2012 01:23:14 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Wed, 11 Jan 2017 00:54:10 GMT
Date: Tue, 10 Jan 2017 15:46:15 GMT
Content-Length: 2770
Connection: keep-alive
GET /piwik/tv2track.js HTTP/1.1

Host: collector-412.tvsquared.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 52.31.118.246
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Date: Tue, 10 Jan 2017 15:46:15 GMT
Etag: &quot;575fc977-210d&quot;
Last-Modified: Tue, 14 Jun 2016 09:08:07 GMT
Server: nginx/1.9.3 (Ubuntu)
Content-Length: 8461
Connection: keep-alive
GET /collect?v=1&_v=j47&a=1683753956&t=pageview&_s=1&dl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&ul=en-us&de=ISO-8859-1&dt=Official%20USA%20Site%20-%20Save%20the%20Children&sd=24-bit&sr=1176x885&vp=1159x758&je=1&fl=10.0%20r45&_utma=1.1955594197.1484063172.1484063172.1484063172.1&_utmz=1.1484063172.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&_utmht=1484063175088&_u=SSACgEQq~&jid=786055990&cid=1955594197.1484063172&tid=UA-9968643-1&gtm=GTM-5T6BP3&cd1=wewscwww1112&z=17414578 HTTP/1.1

Host: www.google-analytics.com
GET /collect?v=1&amp;_v=j47&amp;a=1683753956&amp;t=pageview&amp;_s=1&amp;dl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;ul=en-us&amp;de=ISO-8859-1&amp;dt=Official%20USA%20Site%20-%20Save%20the%20Children&amp;sd=24-bit&amp;sr=1176x885&amp;vp=1159x758&amp;je=1&amp;fl=10.0%20r45&amp;_utma=1.1955594197.1484063172.1484063172.1484063172.1&amp;_utmz=1.1484063172.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&amp;_utmht=1484063175088&amp;_u=SSACgEQq~&amp;jid=786055990&amp;cid=1955594197.1484063172&amp;tid=UA-9968643-1&amp;gtm=GTM-5T6BP3&amp;cd1=wewscwww1112&amp;z=17414578 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
Access-Control-Allow-Origin: *
Date: Wed, 28 Dec 2016 00:15:47 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 1179028
GET /collect?v=1&_v=j47&a=1683753956&t=pageview&_s=1&dl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&ul=en-us&de=ISO-8859-1&dt=Official%20USA%20Site%20-%20Save%20the%20Children&sd=24-bit&sr=1176x885&vp=1159x758&je=1&fl=10.0%20r45&_utma=1.1955594197.1484063172.1484063172.1484063172.1&_utmz=1.1484063172.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&_utmht=1484063175167&_u=SSCCiEQqB~&jid=1402005807&cid=1955594197.1484063172&tid=UA-9968643-26&gtm=GTM-5T6BP3&cd1=wewscwww1112&z=1632495308 HTTP/1.1

Host: www.google-analytics.com
GET /collect?v=1&amp;_v=j47&amp;a=1683753956&amp;t=pageview&amp;_s=1&amp;dl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;ul=en-us&amp;de=ISO-8859-1&amp;dt=Official%20USA%20Site%20-%20Save%20the%20Children&amp;sd=24-bit&amp;sr=1176x885&amp;vp=1159x758&amp;je=1&amp;fl=10.0%20r45&amp;_utma=1.1955594197.1484063172.1484063172.1484063172.1&amp;_utmz=1.1484063172.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&amp;_utmht=1484063175167&amp;_u=SSCCiEQqB~&amp;jid=1402005807&amp;cid=1955594197.1484063172&amp;tid=UA-9968643-26&amp;gtm=GTM-5T6BP3&amp;cd1=wewscwww1112&amp;z=1632495308 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
Access-Control-Allow-Origin: *
Date: Wed, 28 Dec 2016 00:15:46 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 1179029
GET /eps?pt=e0o0g8&pid=6098&uid=Q5373495752014601143J&l=true HTTP/1.1

Host: px.owneriq.net
GET /eps?pt=e0o0g8&amp;pid=6098&amp;uid=Q5373495752014601143J&amp;l=true HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 2.23.129.11
HTTP/1.1 200 OK
Content-Type: text/html
Server: Apache/2.2.15 (CentOS)
Set-Cookie: si=Q5373495752014601143J; expires=Sun, 09 Jan 2022 15:46:15 GMT; path=/; domain=.owneriq.net p2=gguuid.oxc.rmuuid.ac.rc.bsc.tapq.cc.cwc.apq.lrc.nsc.pmc.brc.roc.adpq.bkc.kc.stc;expires=None; path=/; domain=.owneriq.net stc=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net kc=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net bkc=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net adpq=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net roc=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net brc=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net pmc=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net nsc=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net lrc=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net apq=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net cwc=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net cc=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net tapq=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net bsc=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net rc=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net ac=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net rmuuid=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net oxc=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net gguuid=1;expires=Fri, 20 Jan 2017 15:46:15 GMT; path=/; domain=.owneriq.net
X-Powered-By: PHP/5.3.3
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=83696
Date: Tue, 10 Jan 2017 15:46:15 GMT
Content-Length: 1238
Connection: keep-alive
GET /j/?pt=e0o0g8&t=f%7C%22%22&s=1vme HTTP/1.1

Host: px.owneriq.net
GET /j/?pt=e0o0g8&amp;t=f%7C%22%22&amp;s=1vme HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 2.23.129.11
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 10 Jan 2017 15:46:15 GMT
Content-Length: 483
Connection: keep-alive
GET /orbserv/hbjs?pixId=35342&pcv=54 HTTP/1.1

Host: action.media6degrees.com
GET /orbserv/hbjs?pixId=35342&amp;pcv=54 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 38.126.130.202
HTTP/1.1 302 Found
HTTP/1.1 302 Found
Date: Tue, 10 Jan 2017 15:46:15 GMT
Server: Apache-Coyote/1.1
P3P: CP=&quot;COM NAV INT STA NID OUR IND NOI&quot;
Pragma: no-cache
Cache-Control: no-cache
Location: http://action.media6degrees.com/orbserv/hbjs?pixId=35342&amp;pcv=54&amp;cckz=true
Content-Length: 0
Set-Cookie: cckz=1ojkmh3; Domain=media6degrees.com; Expires=Tue, 10-Jan-2017 15:56:15 GMT; Path=/ cckz=1ojkmh3; Domain=media6degrees.com; Expires=Sun, 09-Jul-2017 15:46:15 GMT; Path=/
Connection: close
GET /app1/SmarterHandler.ashx?r=1895837338&i=fyl6dahrce-1092&cb=_smtr.postprocess&bv=2.7.0&utc=-60&pt=5&href=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&hostn=www.savethechildren.org&pathn=%2Fsite%2Fc.8rklixmgipi4e%2Fb.6115947%2Fk.b143%2Fofficial_usa_site.htm HTTP/1.1

Host: tr2.smarterhq.io
GET /app1/SmarterHandler.ashx?r=1895837338&amp;i=fyl6dahrce-1092&amp;cb=_smtr.postprocess&amp;bv=2.7.0&amp;utc=-60&amp;pt=5&amp;href=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;hostn=www.savethechildren.org&amp;pathn=%2Fsite%2Fc.8rklixmgipi4e%2Fb.6115947%2Fk.b143%2Fofficial_usa_site.htm HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 52.204.101.32
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Cache-Control: no-cache, no-store
Date: Tue, 10 Jan 2017 15:46:14 GMT
Expires: -1
Pragma: no-cache
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 296
Connection: keep-alive
GET /piwik/piwik.php?action_name=Official%20USA%20Site%20-%20Save%20the%20Children&idsite=TV-548172-1&rec=1&r=733610&h=16&m=46&s=15&url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&_id=24c77e31cbe9f798&_idts=1484063175&_idvc=0&_idn=1&_viewts=&cs=ISO-8859-1&pdf=1&qt=0&realp=0&wma=1&dir=0&fla=1&java=1&gears=0&ag=0&cookie=1&res=1176x885 HTTP/1.1

Host: collector-412.tvsquared.com
GET /piwik/piwik.php?action_name=Official%20USA%20Site%20-%20Save%20the%20Children&amp;idsite=TV-548172-1&amp;rec=1&amp;r=733610&amp;h=16&amp;m=46&amp;s=15&amp;url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;_id=24c77e31cbe9f798&amp;_idts=1484063175&amp;_idvc=0&amp;_idn=1&amp;_viewts=&amp;cs=ISO-8859-1&amp;pdf=1&amp;qt=0&amp;realp=0&amp;wma=1&amp;dir=0&amp;fla=1&amp;java=1&amp;gears=0&amp;ag=0&amp;cookie=1&amp;res=1176x885 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 52.31.118.246
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 10 Jan 2017 15:46:15 GMT
P3P: CP='OTI DSP COR NID STP UNI OTPa OUR'
Server: nginx/1.9.3 (Ubuntu)
Set-Cookie: _pk_uid=0%3DczoxNjoiMjRjNzdlMzFjYmU5Zjc5OCI7%3A_%3D34474e822c1a8d44ad2bceced47cbaf00dd788aa; expires=Thu, 10-Jan-2019 15:46:15 GMT
X-Powered-By: PHP/5.6.11-1ubuntu3.4
Content-Length: 43
Connection: keep-alive
GET /crum?cm_dsp_id=1&cm_user_id=Q5373495752014601143J HTTP/1.1

Host: dsum.casalemedia.com
GET /crum?cm_dsp_id=1&amp;cm_user_id=Q5373495752014601143J HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 195.159.219.9
HTTP/1.1 200 OK
Content-Type: image/gif
Server: Apache
Expires: Tue, 10 Jan 2017 15:46:15 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 10 Jan 2017 15:46:15 GMT
Content-Length: 43
Connection: keep-alive
GET /sync?dsp_id=219&user_id=Q5373495752014601143J&expires=10 HTTP/1.1

Host: x.bidswitch.net
GET /sync?dsp_id=219&amp;user_id=Q5373495752014601143J&amp;expires=10 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 52.58.205.63
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.7.10
Date: Tue, 10 Jan 2017 15:46:15 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Location: http://x.bidswitch.net/ul_cb/sync?dsp_id=219&amp;user_id=Q5373495752014601143J&amp;expires=10
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Set-Cookie: tuuid=167c8026-2250-4d93-a05b-a42c34846960; path=/; expires=Wed, 10-Jan-2018 15:46:15 GMT; domain=.bidswitch.net tuuid_last_update=1484063175; path=/; expires=Wed, 10-Jan-2018 15:46:15 GMT; domain=.bidswitch.net c=1484063175; path=/; expires=Wed, 10-Jan-2018 15:46:15 GMT; domain=.bidswitch.net
GET /bh/rtset?do=add&pid=541254&ev=Q5373495752014601143J HTTP/1.1

Host: bh.contextweb.com
GET /bh/rtset?do=add&amp;pid=541254&amp;ev=Q5373495752014601143J HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 151.101.84.166
HTTP/1.1 200 OK
Content-Type: image/gif; charset=ISO-8859-1
P3P: policyref=&quot;/bh/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT&quot;
Set-Cookie: V=AzMCzRFnXJ16;Path=/;Domain=.contextweb.com;Expires=Fri, 05-Jan-2018 15:46:15 GMT pb_rtb_ev=3-dpm|2JB.0.Q5373495752014601143J;Path=/;Domain=.contextweb.com;Expires=Wed, 10-Jan-2018 15:46:15 GMT sto-id-20480-bh=DJANNMAKJBBP; Domain=contextweb.com; Expires=Tue, 10-Jan-2017 16:01:15 GMT; Path=/
Expires: -1
CW-Server: ams-bh02
Cache-Control: private, max-age=0, no-cache, no-store
Content-Language: en-US
Server: Jetty(9.2.3.v20140905)
Transfer-Encoding: chunked
Accept-Ranges: bytes
Date: Tue, 10 Jan 2017 15:46:15 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-bma7031-BMA
X-Cache: MISS
X-Cache-Hits: 0
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI2NDYmdGw9MTI5NjAw&piggybackCookie=uid:Q5373495752014601143J HTTP/1.1

Host: image2.pubmatic.com
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI2NDYmdGw9MTI5NjAw&amp;piggybackCookie=uid:Q5373495752014601143J HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 198.47.127.15
HTTP/1.1 200 OK
Content-Type: image/gif; charset=utf-8
Date: Tue, 10 Jan 2017 15:46:15 GMT
Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/1.0.1e-fips mod_fastcgi/2.4.6
Set-Cookie: KRTBCOOKIE_286=5193-uid:Q5373495752014601143J; domain=pubmatic.com; expires=Mon, 10-Apr-2017 15:46:15 GMT; path=/ PUBRETARGET=dummy; domain=pubmatic.com; expires=Tue, 10-Jan-2017 15:46:15 GMT; path=/ PUBMDCID=3; domain=pubmatic.com; expires=Mon, 10-Apr-2017 15:46:15 GMT; path=/
X-lat: Pug22054:0:305
Content-Length: 42
P3P: CP=&quot;NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC&quot;
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Connection: close
GET /idsync/ex/receive?partner_device_id=Q5373495752014601143J&partner_id=916 HTTP/1.1

Host: pixel.tapad.com
GET /idsync/ex/receive?partner_device_id=Q5373495752014601143J&amp;partner_id=916 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 185.57.60.186
HTTP/1.1 302 Found
HTTP/1.1 302 Found
Server: nginx/1.11.3
Date: Tue, 10 Jan 2017 15:46:15 GMT
Content-Length: 0
Connection: keep-alive
P3P: policyref=&quot;http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
Set-Cookie: TapAd_TS=1484063175669;Expires=Sat, 11 Mar 2017 15:46:15 GMT;Path=/;Domain=.tapad.com TapAd_DID=eb9ad251-d74b-11e6-906d-005056a2376a;Expires=Sat, 11 Mar 2017 15:46:15 GMT;Path=/;Domain=.tapad.com
Location: http://pixel.tapad.com/idsync/ex/receive/check?partner_device_id=Q5373495752014601143J&amp;partner_id=916
GET /w/1.0/sd?id=537073059&val=Q5373495752014601143J HTTP/1.1

Host: us-u.openx.net
GET /w/1.0/sd?id=537073059&amp;val=Q5373495752014601143J HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 173.241.240.143
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Set-Cookie: i=00f1801f-612d-4fa8-7e6a-49744343939d|1484063175; Version=1; Expires=Wed, 10-Jan-2018 15:46:15 GMT; Max-Age=31536000; Domain=.openx.net; Path=/
Server: OXGW/11.40.7.5
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Location: http://us-u.openx.net/w/1.0/sd?cc=1&amp;id=537073059&amp;val=Q5373495752014601143J
Date: Tue, 10 Jan 2017 15:46:15 GMT
Content-Length: 0
GET /ep?sid%5B%5D=5113135689&sid%5B%5D=5113135694&sid%5B%5D=5113135699&sid%5B%5D=5112825659&sid%5B%5D=5112825664&pt=e0o0g8&uid=Q5373495752014601143J&jcs=1 HTTP/1.1

Host: px.owneriq.net
GET /ep?sid%5B%5D=5113135689&amp;sid%5B%5D=5113135694&amp;sid%5B%5D=5113135699&amp;sid%5B%5D=5112825659&amp;sid%5B%5D=5112825664&amp;pt=e0o0g8&amp;uid=Q5373495752014601143J&amp;jcs=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: si=Q5373495752014601143J; p2=gguuid.oxc.rmuuid.ac.rc.bsc.tapq.cc.cwc.apq.lrc.nsc.pmc.brc.roc.adpq.bkc.kc.stc; stc=1; kc=1; bkc=1; adpq=1; roc=1; brc=1; pmc=1; nsc=1; lrc=1; apq=1; cwc=1; cc=1; tapq=1; bsc=1; rc=1; ac=1; rmuuid=1; oxc=1; gguuid=1
 2.23.129.11
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Server: Apache/2.2.15 (CentOS)
Content-Length: 154
Location: http://px.owneriq.net/ecc?redir=false&amp;uid=Q5373495752014601143J&amp;ref=%2Fep
Set-Cookie: ss=;expires=None; path=/; domain=.owneriq.net p2=None;expires=None; path=/; domain=.owneriq.net p1=;expires=None; path=/; domain=.owneriq.net
X-Powered-By: PHP/5.3.3
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Vary: Accept-Encoding
Cache-Control: max-age=83688
Date: Tue, 10 Jan 2017 15:46:15 GMT
Connection: keep-alive
GET /usermatch.gif?partner=owneriq&partner_uid=Q5373495752014601143J HTTP/1.1

Host: beacon.krxd.net
GET /usermatch.gif?partner=owneriq&amp;partner_uid=Q5373495752014601143J HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 176.34.255.33
HTTP/1.1 204 No Content
Content-Type: image/gif
Cache-Control: private, no-cache, no-store
Content-Length: 0
Date: Tue, 10 Jan 2017 15:46:15 GMT
P3P: policyref=&quot;http://cdn.krxd.net/kruxcontent/p3p.xml&quot;, CP=&quot;NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC&quot;
Server: Apache
Set-Cookie: ServedBy=beacon-a242-dub; path=/; domain=.krxd.net; expires=Mon, 10-Jul-2017 05:06:15 GMT _kuid_=LAZ5XSkp; path=/; expires=Sun, 09-Jul-17 15:46:15 GMT; domain=.krxd.net
X-Request-Time: D=246 t=1484063175744231
X-Served-By: beacon-a242-dub.krxd.net
Connection: keep-alive
GET /pixel?google_nid=owneriq1&google_cm&google_sc&google_ula=1174&google_hm=UTUzNzM0OTU3NTIwMTQ2MDExNDNK&esi=1 HTTP/1.1

Host: cm.g.doubleclick.net
GET /pixel?google_nid=owneriq1&amp;google_cm&amp;google_sc&amp;google_ula=1174&amp;google_hm=UTUzNzM0OTU3NTIwMTQ2MDExNDNK&amp;esi=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: test_cookie=CheckForPermission
 216.58.211.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Location: http://px.owneriq.net/cm?id=&amp;esi=1&amp;google_gid=CAESEPPxIHCJcqTYVP1uMHBOOtc&amp;google_cver=1&amp;google_ula=1174,0
Date: Tue, 10 Jan 2017 15:46:15 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 318
X-XSS-Protection: 1; mode=block
Set-Cookie: id=225a94a2e60d0005||t=1484063175|et=730|cs=002213fd480006443b01b046fa; expires=Thu, 10-Jan-2019 15:46:15 GMT; path=/; domain=.doubleclick.net test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUk2YSXP66LRhmP5yKPoQ1oKMBxKPO2z2rL636Op_nFyzbopCzn1XQ; expires=Thu, 10-Jan-2019 15:46:15 GMT; path=/; domain=.doubleclick.net; HttpOnly
GET /oiq?uid=Q5373495752014601143J HTTP/1.1

Host: sync.sharethis.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 52.59.12.20
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 10 Jan 2017 15:46:15 GMT
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;ALL DSP COR CURa ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV INT DEM&quot;
Set-Cookie: __stid=CvQAB1h1AccAAAAPB8O9Aw==; Path=/; Domain=sharethis.com; Expires=Wed, 10 Jan 2018 15:46:15 GMT
Stid: CvQAB1h1AccAAAAPB8O9Aw==
Content-Length: 42
Connection: keep-alive
GET /v1/map/2661c1bff9e7be77/Q5373495752014601143J/ HTTP/1.1

Host: geo-um.btrll.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 185.62.216.117
HTTP/1.1 302 Found
HTTP/1.1 302 Found
Server: nginx/1.8.0
Date: Tue, 10 Jan 2017 15:46:15 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: BR_APS=3WHUBx36f7iUB_uD_Cw; Expires=Wed, 10 Jan 2018 15:46:15 GMT; Path=/; Domain=.btrll.com
P3P: CP=&quot;IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA&quot;
Access-Control-Allow-Origin: *
Expires: Tue, 01 Jan 1980 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: http://cache.btrll.com/default/Pix-1x1.gif
GET /tap.php?v=11581&nid=2395&put=Q5373495752014601143J HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=11581&amp;nid=2395&amp;put=Q5373495752014601143J HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 213.19.162.80
HTTP/1.1 307 Temporary Redirect
HTTP/1.1 307 Temporary Redirect
Set-Cookie: c=1; Path=/
Location: /tap.php?cookie_redirect=1&amp;v=11581&amp;nid=2395&amp;put=Q5373495752014601143J
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Tue, 10 Jan 2017 15:46:15 GMT
Server: Rubicon Project
GET /pxj?bidder=13&seg=703107&action=su(%27Q5373495752014601143J%27) HTTP/1.1

Host: ib.adnxs.com
GET /pxj?bidder=13&amp;seg=703107&amp;action=su(%27Q5373495752014601143J%27) HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: sess=1; uuid2=8112546281313915484; anj=dTM7k!M4/8DYRWSF']wIg2HbZc:v3(N6f941pnwkI'mTS#BFkYIz/'&gt;
 185.33.222.8
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.9.13
Date: Tue, 10 Jan 2017 15:46:17 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: anj=dTM7k!M4/8DunaTF']wIg2HbZc:v3(XJ]Jd=IPAe%w2Bs%o%m@%nrJv$nTfe; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Wed, 11-Jan-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly uuid2=8112546281313915484; Path=/; Max-Age=7776000; Expires=Mon, 10-Apr-2017 15:46:17 GMT; Domain=.adnxs.com; HttpOnly
GET /ibs:dpid=53196&dpuuid=Q5373495752014601143J HTTP/1.1

Host: dpm.demdex.net
GET /ibs:dpid=53196&amp;dpuuid=Q5373495752014601143J HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 54.171.4.69
HTTP/1.1 302 Found
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
Date: Tue, 10 Jan 2017 15:46:15 GMT
Expires: Thu, 01 Jan 2009 00:00:00 GMT
Location: http://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=53196&amp;dpuuid=Q5373495752014601143J
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT&quot;
Pragma: no-cache
Set-Cookie: demdex=76188005152977890701227916699685954873;Path=/;Domain=.demdex.net;Expires=Sun, 09-Jul-2017 15:46:15 GMT
Content-Length: 0
Connection: keep-alive
GET /pixel?adv=95413&t=2&id=1722475&piggyback=http%3A%2F%2Fads.yahoo.com%2Fcms%2Fv1%3Fesig%3D1%7E1d05283fd37fe3ca8c3fbe8814c9bf54208864b5%26nwid%3D10000482661%26sigv%3D1 HTTP/1.1

Host: ads.yahoo.com
GET /pixel?adv=95413&amp;t=2&amp;id=1722475&amp;piggyback=http%3A%2F%2Fads.yahoo.com%2Fcms%2Fv1%3Fesig%3D1%7E1d05283fd37fe3ca8c3fbe8814c9bf54208864b5%26nwid%3D10000482661%26sigv%3D1 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 217.12.15.83
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
Date: Tue, 10 Jan 2017 15:46:15 GMT
P3P: policyref=&quot;https://policies.yahoo.com/w3c/p3p.xml&quot;, CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV&quot;
Set-Cookie: B=8ojc7mhc7a0e7&amp;b=3&amp;s=j8; expires=Fri, 11-Jan-2019 15:46:15 GMT; path=/; domain=.yahoo.com
Location: http://px.owneriq.net/ermcm?t=2&amp;id=1722475&amp;piggyback=http://ads.yahoo.com/cms/v1?esig=1~1d05283fd37fe3ca8c3fbe8814c9bf54208864b5&amp;amp;nwid=10000482661&amp;amp;sigv=1&amp;xid=nJSfAb01uVrDZUI0WBekGP.U
Cache-Control: private
Content-Length: 0
Age: 0
Connection: keep-alive
Server: ATS
GET /adscores/g.pixel?sid=9212281528&owneriqid=Q5373495752014601143J HTTP/1.1

Host: adadvisor.net
GET /adscores/g.pixel?sid=9212281528&amp;owneriqid=Q5373495752014601143J HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 54.72.125.147
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue,  10 Jan 2017 15:46:15 GMT
Connection: close
Server: AAWebServer
P3P: policyref=&quot;http://www.adadvisor.net/w3c/p3p.xml&quot;,CP=&quot;NOI NID&quot;
Content-Length: 43
Set-Cookie: ab=0001%3AEgOZzX0CAsQZCqGHrL7WBWH9IQtDuxn1; Domain=.adadvisor.net; Expires=Tue, 10 Jan 2018 15:46:15 GMT; Path=/
GET /site/26763?id=Q5373495752014601143J HTTP/1.1

Host: tags.bluekai.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 169.47.30.64
HTTP/1.1 302 Found
Content-Type: text/html
Date: Tue, 10 Jan 2017 15:46:15 GMT
Server: Apache/2.2.24 (Unix)
P3P: CP=&quot;NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV&quot;, policyref=&quot;http://tags.bluekai.com/w3c/p3p.xml&quot;
Set-Cookie: bkdc=wdc; expires=Sun, 09-Jul-2017 15:46:15 GMT; path=/; domain=.bluekai.com bku=itQ991zO5Pi/W02M; expires=Sun, 09-Jul-2017 15:46:15 GMT; path=/; domain=.bluekai.com
Location: http://tags.bluekai.com/site/26763?dt=0&amp;r=1193336217&amp;sig=1377775674&amp;bkca=KJpnEnWBBeDtBpShBeDlBE/yBeWp1ex614RY9WZdOUy=
Content-Length: 0
BK-Server: f9b0
GET /w/1.0/sd?cc=1&id=537073059&val=Q5373495752014601143J HTTP/1.1

Host: us-u.openx.net
GET /w/1.0/sd?cc=1&amp;id=537073059&amp;val=Q5373495752014601143J HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: i=00f1801f-612d-4fa8-7e6a-49744343939d|1484063175
 173.241.240.143
HTTP/1.1 200 OK
Content-Type: text/html
Vary: Accept
Server: OXGW/11.40.7.5
Pragma: no-cache
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Date: Tue, 10 Jan 2017 15:46:15 GMT
Cache-Control: private, max-age=0, no-cache
Transfer-Encoding: chunked
Content-Encoding: gzip
GET /idsync/ex/receive/check?partner_device_id=Q5373495752014601143J&partner_id=916 HTTP/1.1

Host: pixel.tapad.com
GET /idsync/ex/receive/check?partner_device_id=Q5373495752014601143J&amp;partner_id=916 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: TapAd_TS=1484063175669; TapAd_DID=eb9ad251-d74b-11e6-906d-005056a2376a
 185.57.60.186
HTTP/1.1 200 OK
Content-Type: image/png
Server: nginx/1.11.3
Date: Tue, 10 Jan 2017 15:46:15 GMT
Content-Length: 95
Connection: keep-alive
P3P: policyref=&quot;http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
Set-Cookie: TapAd_TS=1484063175669;Expires=Sat, 11 Mar 2017 15:46:15 GMT;Path=/;Domain=.tapad.com TapAd_DID=eb9ad251-d74b-11e6-906d-005056a2376a;Expires=Sat, 11 Mar 2017 15:46:15 GMT;Path=/;Domain=.tapad.com
GET /ul_cb/sync?dsp_id=219&user_id=Q5373495752014601143J&expires=10 HTTP/1.1

Host: x.bidswitch.net
GET /ul_cb/sync?dsp_id=219&amp;user_id=Q5373495752014601143J&amp;expires=10 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: tuuid=167c8026-2250-4d93-a05b-a42c34846960; tuuid_last_update=1484063175; c=1484063175
 52.58.205.63
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.7.10
Date: Tue, 10 Jan 2017 15:46:15 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Location: //soma.smaato.net/oapi/idsync?redirect=%2F%2Fx.bidswitch.net%2Fsync%3Fssp%3Dsmaato%26user_id%3DSomaCookieUserId
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Set-Cookie: tuuid=167c8026-2250-4d93-a05b-a42c34846960; path=/; expires=Wed, 10-Jan-2018 15:46:15 GMT; domain=.bidswitch.net tuuid_last_update=1484063175; path=/; expires=Wed, 10-Jan-2018 15:46:15 GMT; domain=.bidswitch.net
GET /mapuser?providerid=1044;userid=Q5373495752014601143J HTTP/1.1

Host: ums.adtechus.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 152.163.56.2
HTTP/1.0 302 Moved Temporarily
HTTP/1.0 302 Moved Temporarily
Connection: keep-alive
Expires: Mon, 15 Jun 1998 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache
Location: http://ums.adtechus.com/mapuser?providerid=1044;cfp=1;rndc=1484063175;userid=Q5373495752014601143J
Content-Length: 0
P3P: CP=&quot;NOI DSP DEVa OUR BUS UNI COM NAV INT&quot;
Set-Cookie: CfP=1;domain=adtechus.com;path=/
GET /379208.gif?partner_uid=Q5373495752014601143J HTTP/1.1

Host: idsync.rlcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 52.72.203.208
HTTP/1.1 302 Found
Content-Type: image/gif; charset=ISO-8859-1
Cache-Control: no-cache, no-store
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://idsync.rlcdn.com/379208.gif?partner_uid=Q5373495752014601143J&amp;redirect=1
P3P: CP: &quot;NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE&quot;
Set-Cookie: ck1=ck1;Domain=.rlcdn.com;Expires=Sun, 09-Jul-2017 15:46:13 GMT
Content-Length: 0
Connection: keep-alive
GET /usersync/owneriq/Q5373495752014601143J HTTP/1.1

Host: sync.1rx.io

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 8.30.11.14
HTTP/1.1 302 Found
Content-Type: text/html
Server: nginx
Date: Tue, 10 Jan 2017 15:46:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-db5d6f95-4261-4b12-85f1-6e51ac91dd9c%22%7D; path=/; expires=Thu, 10 Jan 2019 15:46:15 GMT; domain=.1rx.io; httponly
Location: http://sync.1rx.io/usersync/owneriq/Q5373495752014601143J?zcc=1&amp;dspret=0
Etag: RXdb5d6f9542614b1285f16e51ac91dd9c
GET /ecc?redir=false&uid=Q5373495752014601143J&ref=%2Fep HTTP/1.1

Host: px.owneriq.net
GET /ecc?redir=false&amp;uid=Q5373495752014601143J&amp;ref=%2Fep HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: si=Q5373495752014601143J; p2=None; stc=1; kc=1; bkc=1; adpq=1; roc=1; brc=1; pmc=1; nsc=1; lrc=1; apq=1; cwc=1; cc=1; tapq=1; bsc=1; rc=1; ac=1; rmuuid=1; oxc=1; gguuid=1; ss=; p1=
 2.23.129.11
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Server: Apache/2.2.15 (CentOS)
Content-Length: 154
Location: http://px.owneriq.net/fr/epx.gif
X-Powered-By: PHP/5.3.3
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Vary: Accept-Encoding
Cache-Control: max-age=53825
Date: Tue, 10 Jan 2017 15:46:16 GMT
Connection: keep-alive
GET /cm?id=&esi=1&google_gid=CAESEPPxIHCJcqTYVP1uMHBOOtc&google_cver=1&google_ula=1174,0 HTTP/1.1

Host: px.owneriq.net
GET /cm?id=&amp;esi=1&amp;google_gid=CAESEPPxIHCJcqTYVP1uMHBOOtc&amp;google_cver=1&amp;google_ula=1174,0 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: si=Q5373495752014601143J; p2=None; stc=1; kc=1; bkc=1; adpq=1; roc=1; brc=1; pmc=1; nsc=1; lrc=1; apq=1; cwc=1; cc=1; tapq=1; bsc=1; rc=1; ac=1; rmuuid=1; oxc=1; gguuid=1; ss=; p1=
 2.23.129.11
HTTP/1.1 200 OK
Content-Type: image/gif
Server: Apache/2.2.15 (CentOS)
Content-Length: 124
Set-Cookie: gguuid=CAESEPPxIHCJcqTYVP1uMHBOOtc; expires=Fri, 20 Jan 2017 15:46:16 GMT; path=/; domain=.owneriq.net
X-Powered-By: PHP/5.3.3
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Vary: Accept-Encoding
Cache-Control: max-age=67014
Date: Tue, 10 Jan 2017 15:46:16 GMT
Connection: keep-alive
GET /default/Pix-1x1.gif HTTP/1.1

Host: cache.btrll.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: BR_APS=3WHUBx36f7iUB_uD_Cw
 54.230.9.127
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 42
Connection: keep-alive
Date: Fri, 06 Jan 2017 03:32:43 GMT
Last-Modified: Mon, 18 Oct 2010 17:58:31 GMT
Etag: &quot;b4682377ddfbe4e7dabfddb2e543e842&quot;
x-amz-meta-permissions: 33188
x-amz-meta-owner: 33
x-amz-meta-group: 33
Accept-Ranges: bytes
Server: AmazonS3
Age: 44013
X-Cache: Hit from cloudfront
Via: 1.1 0742a501f4d29312ad9cbc7b7bf143c7.cloudfront.net (CloudFront)
X-Amz-Cf-Id: mO9laxw_KJitVQuTMVtsAJD9m_EM9hKH9MmhBMmPvFSs5Dm0-V0MvA==
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 15:46:16 GMT
Expires: Sat, 14 Jan 2017 15:46:16 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /demconf.jpg?et:ibs%7cdata:dpid=53196&dpuuid=Q5373495752014601143J HTTP/1.1

Host: dpm.demdex.net
GET /demconf.jpg?et:ibs%7cdata:dpid=53196&amp;dpuuid=Q5373495752014601143J HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: demdex=76188005152977890701227916699685954873
 54.171.4.69
HTTP/1.1 200 OK
Content-Type: image/gif
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
Date: Tue, 10 Jan 2017 15:46:16 GMT
DCS: irl1-prod-dcs-ecb97a2c.edge-irl1.demdex.com master-5.2.0.20161115.204931 2ms
Expires: Thu, 01 Jan 2009 00:00:00 GMT
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT&quot;
Pragma: no-cache
Set-Cookie: demdex=76188005152977890701227916699685954873;Path=/;Domain=.demdex.net;Expires=Sun, 09-Jul-2017 15:46:16 GMT dpm=76188005152977890701227916699685954873;Path=/;Domain=.dpm.demdex.net;Expires=Sun, 09-Jul-2017 15:46:16 GMT
Content-Length: 42
Connection: keep-alive
GET /orbserv/hbjs?pixId=35342&pcv=54&cckz=true HTTP/1.1

Host: action.media6degrees.com
GET /orbserv/hbjs?pixId=35342&amp;pcv=54&amp;cckz=true HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: cckz=1ojkmh3
 38.126.130.202
HTTP/1.1 200 OK
Content-Type: text/html;charset=ISO-8859-1
Date: Tue, 10 Jan 2017 15:46:16 GMT
Server: Apache-Coyote/1.1
P3P: CP=&quot;COM NAV INT STA NID OUR IND NOI&quot;
Pragma: no-cache
Cache-Control: no-cache
Content-Language: en-US
Content-Length: 5
Set-Cookie: clid=2ojkmh40117095net5cmxtv5000000010a010201101; Domain=media6degrees.com; Expires=Sun, 09-Jul-2017 15:46:16 GMT; Path=/ sglst=&quot;&quot;; Domain=media6degrees.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ rdrlst=&quot;&quot;; Domain=media6degrees.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ adh=&quot;&quot;; Domain=media6degrees.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ acs=015020k0l0m0n1ojkmh4xzt10xzt10xzt10xzt10; Domain=media6degrees.com; Expires=Sun, 09-Jul-2017 15:46:16 GMT; Path=/ lbh=11yh2tq01r9q100hy; Domain=media6degrees.com; Expires=Sun, 09-Jul-2017 15:46:16 GMT; Path=/ cckz=&quot;&quot;; Domain=media6degrees.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ JSESSIONID=B29CB876DF43C779C0E1A968C3308FE3; Path=/orbserv/; HttpOnly
Connection: close
GET /ermcm?t=2&id=1722475&piggyback=http://ads.yahoo.com/cms/v1?esig=1~1d05283fd37fe3ca8c3fbe8814c9bf54208864b5&amp;nwid=10000482661&amp;sigv=1&xid=nJSfAb01uVrDZUI0WBekGP.U HTTP/1.1

Host: px.owneriq.net
GET /ermcm?t=2&amp;id=1722475&amp;piggyback=http://ads.yahoo.com/cms/v1?esig=1~1d05283fd37fe3ca8c3fbe8814c9bf54208864b5&amp;amp;nwid=10000482661&amp;amp;sigv=1&amp;xid=nJSfAb01uVrDZUI0WBekGP.U HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: si=Q5373495752014601143J; p2=None; stc=1; kc=1; bkc=1; adpq=1; roc=1; brc=1; pmc=1; nsc=1; lrc=1; apq=1; cwc=1; cc=1; tapq=1; bsc=1; rc=1; ac=1; rmuuid=1; oxc=1; gguuid=1; ss=; p1=
 2.23.129.11
HTTP/1.1 200 OK
Content-Type: image/gif
Server: Apache/2.2.15 (CentOS)
Content-Length: 43
Set-Cookie: rmuuid=nJSfAb01uVrDZUI0WBekGP.U; expires=Fri, 20 Jan 2017 15:46:16 GMT; path=/; domain=.owneriq.net
X-Powered-By: PHP/5.3.3
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Vary: Accept-Encoding
Cache-Control: max-age=22707
Date: Tue, 10 Jan 2017 15:46:16 GMT
Connection: keep-alive
GET /tap.php?cookie_redirect=1&v=11581&nid=2395&put=Q5373495752014601143J HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?cookie_redirect=1&amp;v=11581&amp;nid=2395&amp;put=Q5373495752014601143J HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: c=1
 213.19.162.80
HTTP/1.1 200 OK
Content-Type: image/gif
X-RPHost: 1YOuDUB3EtQyLlNCr8nC8Q
Set-Cookie: rpb=11581%3D1; Domain=.rubiconproject.com; Expires=Thu, 09-Feb-2017 15:46:17 GMT; Path=/ rpx=11581%3D61591%2C0%2C1%2C%2C; Domain=.pixel.rubiconproject.com; Expires=Thu, 09-Feb-2017 15:46:17 GMT; Path=/ put_2395=Q5373495752014601143J; Domain=.rubiconproject.com; Expires=Thu, 09-Feb-2017 14:59:59 GMT; Path=/ khaos=IXROWC3J-11-27OV; Domain=.rubiconproject.com; Expires=Wed, 12-Jul-2017 03:46:17 GMT; Path=/
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Connection: keep-alive
Content-Length: 42
Date: Tue, 10 Jan 2017 15:46:16 GMT
Server: Rubicon Project
GET /site/26763?dt=0&r=1193336217&sig=1377775674&bkca=KJpnEnWBBeDtBpShBeDlBE/yBeWp1ex614RY9WZdOUy= HTTP/1.1

Host: tags.bluekai.com
GET /site/26763?dt=0&amp;r=1193336217&amp;sig=1377775674&amp;bkca=KJpnEnWBBeDtBpShBeDlBE/yBeWp1ex614RY9WZdOUy= HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: bkdc=wdc; bku=itQ991zO5Pi/W02M
 169.47.30.64
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 10 Jan 2017 15:46:16 GMT
P3P: CP=&quot;NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV&quot;, policyref=&quot;http://tags.bluekai.com/w3c/p3p.xml&quot;
Expires: Wed, 11 Jan 2017 15:46:16 GMT
Cache-Control: max-age=86400, private
Content-Length: 62
Set-Cookie: bku=itQ991zO5Pi/W02M; expires=Sun, 09-Jul-2017 15:46:16 GMT; path=/; domain=.bluekai.com
BK-Server: 8d9
Cneonction: close
GET /pagead/conversion/1069852215/?random=1484063171540&cv=8&fst=1484063171540&num=1&fmt=3&value=0&label=UiVPCOGIxgIQt8yS_gM&bg=ffffff&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&tiba=Official%20USA%20Site%20-%20Save%20the%20Children HTTP/1.1

Host: www.googleadservices.com
GET /pagead/conversion/1069852215/?random=1484063171540&amp;cv=8&amp;fst=1484063171540&amp;num=1&amp;fmt=3&amp;value=0&amp;label=UiVPCOGIxgIQt8yS_gM&amp;bg=ffffff&amp;hl=en&amp;guid=ON&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_his=1&amp;u_tz=60&amp;u_java=true&amp;u_nplug=10&amp;u_nmime=92&amp;frm=0&amp;url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;tiba=Official%20USA%20Site%20-%20Save%20the%20Children HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 216.58.211.130
HTTP/1.1 302 Found
Content-Type: image/gif
P3P: policyref=&quot;https://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Timing-Allow-Origin: *
Date: Tue, 10 Jan 2017 15:46:15 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1069852215/?random=414824288&amp;cv=8&amp;fst=1484063171540&amp;num=1&amp;fmt=3&amp;value=0&amp;label=UiVPCOGIxgIQt8yS_gM&amp;bg=ffffff&amp;hl=en&amp;guid=ON&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_his=1&amp;u_tz=60&amp;u_java=true&amp;u_nplug=10&amp;u_nmime=92&amp;frm=0&amp;url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;tiba=Official%20USA%20Site%20-%20Save%20the%20Children&amp;ctc_id=CAIVAgAAAB0CAAAA&amp;ct_cookie_present=false&amp;convclickts=0&amp;ocp_id=xwF1WM-ZMsiQZKaKhPAD
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
GET /fr/epx.gif HTTP/1.1

Host: px.owneriq.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: si=Q5373495752014601143J; p2=None; stc=1; kc=1; bkc=1; adpq=1; roc=1; brc=1; pmc=1; nsc=1; lrc=1; apq=1; cwc=1; cc=1; tapq=1; bsc=1; rc=1; ac=1; rmuuid=1; oxc=1; gguuid=1; ss=; p1=
 2.23.129.11
HTTP/1.1 200 OK
Content-Type: image/gif
Server: Apache/2.2.15 (CentOS)
Content-Length: 43
X-Powered-By: PHP/5.3.3
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Cache-Control: max-age=401491
Expires: Sun, 15 Jan 2017 07:17:48 GMT
Date: Tue, 10 Jan 2017 15:46:17 GMT
Connection: keep-alive
POST / HTTP/1.1

Host: ocsp.entrust.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 103
Content-Type: application/ocsp-request
 104.123.128.217
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Transfer-Encoding: Binary
Content-Length: 2108
Last-Modified: Tue, 10 Jan 2017 00:25:07 GMT
Etag: &quot;B786C661D28B706F85A92CF82B040C5B6D7F406F&quot;
Cache-Control: public, no-transform, must-revalidate, max-age=2853
Expires: Tue, 10 Jan 2017 16:33:50 GMT
Date: Tue, 10 Jan 2017 15:46:17 GMT
Connection: keep-alive
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=497916
Date: Tue, 10 Jan 2017 15:46:17 GMT
Etag: &quot;587485aa-1d7&quot;
Expires: Tue, 17 Jan 2017 03:46:17 GMT
Last-Modified: Tue, 10 Jan 2017 06:56:42 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471
GET /usersync/owneriq/Q5373495752014601143J?zcc=1&dspret=0 HTTP/1.1

Host: sync.1rx.io
GET /usersync/owneriq/Q5373495752014601143J?zcc=1&amp;dspret=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-db5d6f95-4261-4b12-85f1-6e51ac91dd9c%22%7D
 8.30.11.14
HTTP/1.1 200 OK
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Jan 2017 15:46:17 GMT
Content-Length: 0
Connection: keep-alive
GET /379208.gif?partner_uid=Q5373495752014601143J&redirect=1 HTTP/1.1

Host: idsync.rlcdn.com
GET /379208.gif?partner_uid=Q5373495752014601143J&amp;redirect=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: ck1=ck1
 52.72.203.208
HTTP/1.1 200 OK
Content-Type: image/gif; charset=ISO-8859-1
Cache-Control: no-cache, no-store
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP: &quot;NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE&quot;
Set-Cookie: rlas3=x+lTgyoaWMQjZp6hJFZfW0Lom6Z4YoKOfyCcTOx2Kb6MyA9jEACu5w==;Domain=.rlcdn.com;Expires=Sun, 09-Jul-2017 15:46:15 GMT rtn1=C9KzD1DcNqD4axKTL5fOGA==;Domain=.rlcdn.com;Expires=Sun, 09-Jul-2017 15:46:15 GMT
Content-Length: 43
Connection: keep-alive
GET /mapuser?providerid=1044;cfp=1;rndc=1484063175;userid=Q5373495752014601143J HTTP/1.1

Host: ums.adtechus.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: CfP=1
 152.163.56.2
HTTP/1.0 200 OK
Content-Type: image/gif
Connection: keep-alive
Expires: Mon, 15 Jun 1998 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache
Content-Length: 43
P3P: CP=&quot;NOI DSP DEVa OUR BUS UNI COM NAV INT&quot;
Set-Cookie: JEB2=5874F71E6E651774E0324050F85BD934;expires=Thu, 10 Jan 2019 15:46:16 GMT;domain=adtechus.com;path=/
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=511827
Date: Tue, 10 Jan 2017 15:46:17 GMT
Etag: &quot;5874c5e0-1d7&quot;
Expires: Tue, 17 Jan 2017 03:46:17 GMT
Last-Modified: Tue, 10 Jan 2017 11:30:40 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471
GET /activityi;src=4266705;type=invmedia;cat=xs0zpcmo;ord=1? HTTP/1.1

Host: 4266705.fls.doubleclick.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.166
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref=&quot;https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Timing-Allow-Origin: *
Date: Tue, 10 Jan 2017 15:46:17 GMT
Expires: Tue, 10 Jan 2017 15:46:17 GMT
Cache-Control: private, max-age=0
Strict-Transport-Security: max-age=21600
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 10-Jan-2017 16:01:17 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
Transfer-Encoding: chunked
POST / HTTP/1.1

Host: gv.symcd.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 102
Content-Type: application/ocsp-request
 23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.10.2
Content-Length: 1399
Content-Transfer-Encoding: binary
Cache-Control: max-age=506027, public, no-transform, must-revalidate
Last-Modified: Mon, 9 Jan 2017 12:17:08 GMT
Expires: Mon, 16 Jan 2017 12:17:08 GMT
Date: Tue, 10 Jan 2017 15:46:17 GMT
Connection: keep-alive
GET /oapi/idsync?redirect=%2F%2Fx.bidswitch.net%2Fsync%3Fssp%3Dsmaato%26user_id%3DSomaCookieUserId HTTP/1.1

Host: soma.smaato.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 52.73.213.170
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Date: Tue, 10 Jan 2017 15:46:17 GMT
Location: http://x.bidswitch.net/sync?ssp=smaato&amp;user_id=1650d353-aac7-43aa-a00a-94e5bf58944d
Server: Apache
Set-Cookie: SomaCookieUserId=1650d353-aac7-43aa-a00a-94e5bf58944d; Domain=.smaato.net; Expires=Thu, 09-Feb-2017 15:46:17 GMT; Path=/
Content-Length: 0
Connection: keep-alive
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 15:46:17 GMT
Expires: Sat, 14 Jan 2017 15:46:17 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /sync?ssp=smaato&user_id=1650d353-aac7-43aa-a00a-94e5bf58944d HTTP/1.1

Host: x.bidswitch.net
GET /sync?ssp=smaato&amp;user_id=1650d353-aac7-43aa-a00a-94e5bf58944d HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: tuuid=167c8026-2250-4d93-a05b-a42c34846960; tuuid_last_update=1484063175; c=1484063175
 52.58.205.63
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.7.10
Date: Tue, 10 Jan 2017 15:46:17 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
POST / HTTP/1.1

Host: ss.symcd.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=558788, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Jan 2017 02:55:38 GMT
Expires: Tue, 17 Jan 2017 02:55:38 GMT
Date: Tue, 10 Jan 2017 15:46:17 GMT
Connection: keep-alive
GET /pixel?id=36964 HTTP/1.1

Host: www.wtp101.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 104.199.41.131
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.7.10
Date: Tue, 10 Jan 2017 15:46:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Location: https://www.wtp101.com/ul_cb/pixel?id=36964
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Pragma: no-cache
Set-Cookie: tuuid=0be23537-21a6-40bc-8fcf-0e1cfdbb807e; path=/; expires=Thu, 10-Jan-2019 15:46:17 GMT; domain=.wtp101.com tuuid_last_update=1484063177; path=/; expires=Thu, 10-Jan-2019 15:46:17 GMT; domain=.wtp101.com cookie_born=1484063177; path=/; expires=Sun, 09-Jan-2022 15:46:17 GMT; domain=.wtp101.com
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=505361
Date: Tue, 10 Jan 2017 15:46:17 GMT
Etag: &quot;5874b038-1d7&quot;
Expires: Tue, 17 Jan 2017 03:46:17 GMT
Last-Modified: Tue, 10 Jan 2017 09:58:16 GMT
Server: ECS (arn/459D)
X-Cache: HIT
Content-Length: 471
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=497761
Date: Tue, 10 Jan 2017 15:46:17 GMT
Etag: &quot;58748df8-1d7&quot;
Expires: Tue, 17 Jan 2017 03:46:17 GMT
Last-Modified: Tue, 10 Jan 2017 07:32:08 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471
GET /pagead/viewthroughconversion/1069852215/?random=414824288&cv=8&fst=1484063171540&num=1&fmt=3&value=0&label=UiVPCOGIxgIQt8yS_gM&bg=ffffff&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&tiba=Official%20USA%20Site%20-%20Save%20the%20Children&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&convclickts=0&ocp_id=xwF1WM-ZMsiQZKaKhPAD HTTP/1.1

Host: googleads.g.doubleclick.net
GET /pagead/viewthroughconversion/1069852215/?random=414824288&amp;cv=8&amp;fst=1484063171540&amp;num=1&amp;fmt=3&amp;value=0&amp;label=UiVPCOGIxgIQt8yS_gM&amp;bg=ffffff&amp;hl=en&amp;guid=ON&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_his=1&amp;u_tz=60&amp;u_java=true&amp;u_nplug=10&amp;u_nmime=92&amp;frm=0&amp;url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;tiba=Official%20USA%20Site%20-%20Save%20the%20Children&amp;ctc_id=CAIVAgAAAB0CAAAA&amp;ct_cookie_present=false&amp;convclickts=0&amp;ocp_id=xwF1WM-ZMsiQZKaKhPAD HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: id=225a94a2e60d0005||t=1484063175|et=730|cs=002213fd480006443b01b046fa; IDE=AHWqTUk2YSXP66LRhmP5yKPoQ1oKMBxKPO2z2rL636Op_nFyzbopCzn1XQ
 172.217.22.162
HTTP/1.1 302 Found
Content-Type: image/gif
P3P: policyref=&quot;https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Timing-Allow-Origin: *
Date: Tue, 10 Jan 2017 15:46:17 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/ads/user-lists/1069852215/?label=UiVPCOGIxgIQt8yS_gM&amp;fmt=3&amp;bg=ffffff&amp;num=1&amp;ct_cookie_present=false&amp;cv=8&amp;frm=0&amp;url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;random=3294446260&amp;fpvtc=/1069852215/%3Frandom%3D891158827%26cv%3D8%26fst%3D1484060400000%26num%3D1%26fmt%3D3%26value%3D0%26label%3DUiVPCOGIxgIQt8yS_gM%26bg%3Dffffff%26hl%3Den%26guid%3DON%26u_h%3D885%26u_w%3D1176%26u_ah%3D855%26u_aw%3D1176%26u_cd%3D24%26u_his%3D1%26u_tz%3D60%26u_java%3Dtrue%26u_nplug%3D10%26u_nmime%3D92%26frm%3D0%26url%3Dhttp://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm%26tiba%3DOfficial%2520USA%2520Site%2520-%2520Save%2520the%2520Children%26ctc_id%3DCAIVAgAAAB0CAAAA%26ct_cookie_present%3Dfalse
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
GET /wi/ytc.js HTTP/1.1

Host: s.yimg.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 87.248.118.23
HTTP/1.1 200 OK
Content-Type: application/javascript
Date: Tue, 10 Jan 2017 15:46:17 GMT
P3P: policyref=&quot;https://policies.yahoo.com/w3c/p3p.xml&quot;, CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV&quot;
Last-Modified: Wed, 09 Dec 2015 23:08:16 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3553
Age: 0
Via: http/1.1 spdc0017.pbp.ir2.yahoo.com (ApacheTrafficServer), https/1.1 e11.ycpi.deb.yahoo.com (ApacheTrafficServer [cMsSf ])
Server: ATS
Connection: keep-alive
GET /ul_cb/pixel?id=36964 HTTP/1.1

Host: www.wtp101.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: tuuid=0be23537-21a6-40bc-8fcf-0e1cfdbb807e; tuuid_last_update=1484063177; cookie_born=1484063177
 104.199.41.131
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
Server: nginx/1.7.10
Date: Tue, 10 Jan 2017 15:46:17 GMT
Content-Length: 192
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type,X-Requested-With
Access-Control-Allow-Origin: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Access-Control-Max-Age: 60
Allow-Control-Allow-Methods: POST,GET,OPTIONS
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Pragma: no-cache
Set-Cookie: tuuid=0be23537-21a6-40bc-8fcf-0e1cfdbb807e; path=/; expires=Thu, 10-Jan-2019 15:46:17 GMT; domain=.wtp101.com tuuid_last_update=1484063177; path=/; expires=Thu, 10-Jan-2019 15:46:17 GMT; domain=.wtp101.com s=!36964; path=/; expires=Thu, 10-Jan-2019 15:46:17 GMT; domain=.wtp101.com
GET /en_US/fbevents.js HTTP/1.1

Host: connect.facebook.net

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 31.13.66.5
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 3651cd898533e48c331431b317769c6d
Etag: &quot;469c0659031478dca13873d87a4b2d19&quot;
X-Frame-Options: DENY
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Tue, 10 Jan 2017 15:49:16 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: /fN6nTmKqS76/iw6W1gqkA==
X-FB-Debug: GrnHvtdbJMAFjmlDOsEF7fMVoxP84i93tyMAxw6T1SMxp6kC0FEvE1G/p8geiJQvf4DAWcRQv1dcImXxq9A0fw==
Date: Tue, 10 Jan 2017 15:46:17 GMT
Connection: keep-alive
Content-Length: 4054
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 15:46:17 GMT
Expires: Sat, 14 Jan 2017 15:46:17 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /adcedge/lb?site=695501&betr=STC_1day=[+]1day[24]|STC_1hr=[+]1hr[1]|STC_7day=[+]7day[168]|STC_14day=[+]14day[336]|STC_30day=[+]30day[720] HTTP/1.1

Host: secure.leadback.advertising.com
GET /adcedge/lb?site=695501&amp;betr=STC_1day=[+]1day[24]|STC_1hr=[+]1hr[1]|STC_7day=[+]7day[168]|STC_14day=[+]14day[336]|STC_30day=[+]30day[720] HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 152.163.13.6
HTTP/1.1 200 OK
Content-Type: image/gif
Cache-Control: private, max-age=3600
Expires: Tue, 10 Jan 2017 16:46:17 GMT
Server: Microsoft-IIS/7.5
P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
X-AspNet-Version: 4.0.30319
Set-Cookie: C2=JHQdYV+WAEsCbgU5cBAxKsxAl3VAHrwG4XuXDosCbAf5fhw2KsBc; domain=advertising.com; expires=Thu, 10-Jan-2019 15:46:17 GMT; path=/ LB=; domain=advertising.com; expires=Thu, 01-Jan-1970 00:00:00 GMT; path=/ GUID=; domain=advertising.com; expires=Thu, 01-Jan-1970 00:00:00 GMT; path=/ ACID=Lo860014840631770046; domain=advertising.com; expires=Thu, 10-Jan-2019 15:46:17 GMT; path=/
X-Powered-By: ASP.NET
Date: Tue, 10 Jan 2017 15:46:16 GMT
Content-Length: 49
GET /sp.pl?a=10000&jsonp=YAHOO.ywa.I13N.handleJSONResponse&d=Tue%2C%2010%20Jan%202017%2015%3A46%3A17%20GMT&n=-1&.yp=10007818&f=http%3A%2F%2F5547516.fls.doubleclick.net%2Factivityi%3Bsrc%3D5547516%3Btype%3Dstcge0%3Bcat%3Dstcho0%3Bord%3D4261740684849%3B~oref%3Dhttp%253A%252F%252Fwww.savethechildren.org%252Fsite%252Fc.8rKLIXMGIpI4E%252Fb.6115947%252Fk.B143%252FOfficial_USA_Site.htm%3F&e=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&enc=UTF-8&isIframe=1 HTTP/1.1

Host: sp.analytics.yahoo.com
GET /sp.pl?a=10000&amp;jsonp=YAHOO.ywa.I13N.handleJSONResponse&amp;d=Tue%2C%2010%20Jan%202017%2015%3A46%3A17%20GMT&amp;n=-1&amp;.yp=10007818&amp;f=http%3A%2F%2F5547516.fls.doubleclick.net%2Factivityi%3Bsrc%3D5547516%3Btype%3Dstcge0%3Bcat%3Dstcho0%3Bord%3D4261740684849%3B~oref%3Dhttp%253A%252F%252Fwww.savethechildren.org%252Fsite%252Fc.8rKLIXMGIpI4E%252Fb.6115947%252Fk.B143%252FOfficial_USA_Site.htm%3F&amp;e=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;enc=UTF-8&amp;isIframe=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: B=8ojc7mhc7a0e7&amp;b=3&amp;s=j8
 188.125.66.33
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Date: Tue, 10 Jan 2017 15:46:17 GMT
Expires: Tue, 10 Jan 2017 15:46:17 GMT
Pragma: no-cache
Cache-Control: no-cache, private, must-revalidate
Accept-Ranges: bytes
Content-Length: 0
Server: ATS
Age: 0
Connection: keep-alive
Via: http/1.1 spdc0032.pbp.ir2.yahoo.com (ApacheTrafficServer)
GET /push_sync?f=0 HTTP/1.1

Host: www.wtp101.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: tuuid=0be23537-21a6-40bc-8fcf-0e1cfdbb807e; tuuid_last_update=1484063177; cookie_born=1484063177; s=!36964
 104.199.41.131
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.7.10
Date: Tue, 10 Jan 2017 15:46:17 GMT
Content-Length: 43
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Pragma: no-cache
Set-Cookie: synclock=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.wtp101.com
GET /r/collect?t=dc&aip=1&_r=3&v=1&_v=j47&tid=UA-9968643-1&cid=1955594197.1484063172&jid=786055990&_u=SSACgEQq~&z=441442592 HTTP/1.1

Host: stats.g.doubleclick.net
GET /r/collect?t=dc&amp;aip=1&amp;_r=3&amp;v=1&amp;_v=j47&amp;tid=UA-9968643-1&amp;cid=1955594197.1484063172&amp;jid=786055990&amp;_u=SSACgEQq~&amp;z=441442592 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: test_cookie=CheckForPermission
 173.194.222.154
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Location: https://www.google.com/ads/ga-audiences?v=1&amp;aip=1&amp;t=sr&amp;_r=4&amp;tid=UA-9968643-1&amp;cid=1955594197.1484063172&amp;jid=786055990&amp;_v=j47&amp;z=441442592
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Tue, 10 Jan 2017 15:46:17 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 364
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
GET /r/collect?t=dc&aip=1&_r=3&v=1&_v=j47&tid=UA-9968643-26&cid=1955594197.1484063172&jid=1402005807&_u=SSCCiEQqB~&z=2067870374 HTTP/1.1

Host: stats.g.doubleclick.net
GET /r/collect?t=dc&amp;aip=1&amp;_r=3&amp;v=1&amp;_v=j47&amp;tid=UA-9968643-26&amp;cid=1955594197.1484063172&amp;jid=1402005807&amp;_u=SSCCiEQqB~&amp;z=2067870374 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: test_cookie=CheckForPermission
 173.194.222.154
HTTP/1.1 200 OK
Content-Type: image/gif
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Tue, 10 Jan 2017 15:46:17 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-9968643-1&cid=1955594197.1484063172&jid=786055990&_v=j47&z=441442592 HTTP/1.1

Host: www.google.com
GET /ads/ga-audiences?v=1&amp;aip=1&amp;t=sr&amp;_r=4&amp;tid=UA-9968643-1&amp;cid=1955594197.1484063172&amp;jid=786055990&amp;_v=j47&amp;z=441442592 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 173.194.222.104
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Location: https://www.google.no/ads/ga-audiences?v=1&amp;aip=1&amp;t=sr&amp;_r=4&amp;tid=UA-9968643-1&amp;cid=1955594197.1484063172&amp;jid=786055990&amp;_v=j47&amp;z=441442592&amp;ipr=y&amp;ulfeg=n
Cache-Control: private, max-age=43200
Date: Tue, 10 Jan 2017 15:46:17 GMT
Expires: Tue, 10 Jan 2017 15:46:17 GMT
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 385
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 15:46:17 GMT
Expires: Sat, 14 Jan 2017 15:46:17 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /s?u=410877&t=ojkmh3 HTTP/1.1

Host: gtrk.s3.amazonaws.com
GET /s?u=410877&amp;t=ojkmh3 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 52.216.1.72
HTTP/1.1 200 OK
Content-Type: image/gif
x-amz-id-2: tZw33ZK50VVEIz9iOz0CehvL2watyeUmOD91cIHMTFphOyddNhZsrmWE10DCkvnmydLxNmhNYTU=
x-amz-request-id: 5C4CA6838E8A62A0
Date: Tue, 10 Jan 2017 15:46:18 GMT
Last-Modified: Tue, 09 Feb 2016 23:57:19 GMT
Etag: &quot;776f5f447e5e03b50f3bc4d4ec78daaa&quot;
Accept-Ranges: bytes
Content-Length: 32
Server: AmazonS3
GET /u?u=410877&t=ojkmh3 HTTP/1.1

Host: gtrk.s3.amazonaws.com
GET /u?u=410877&amp;t=ojkmh3 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 52.216.1.72
HTTP/1.1 200 OK
Content-Type: image/gif
x-amz-id-2: MrAj75lnthNnGGWP+4WCEOgdYT6zddudFvLv98bIzYGSi8vlcXqfigMuqmz37Ry1seTXplh/HLo=
x-amz-request-id: B3C847066B5759B9
Date: Tue, 10 Jan 2017 15:46:18 GMT
Last-Modified: Tue, 09 Feb 2016 23:57:32 GMT
Etag: &quot;776f5f447e5e03b50f3bc4d4ec78daaa&quot;
Accept-Ranges: bytes
Content-Length: 32
Server: AmazonS3
GET /ads/user-lists/1069852215/?label=UiVPCOGIxgIQt8yS_gM&fmt=3&bg=ffffff&num=1&ct_cookie_present=false&cv=8&frm=0&url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&random=3294446260&fpvtc=/1069852215/%3Frandom%3D891158827%26cv%3D8%26fst%3D1484060400000%26num%3D1%26fmt%3D3%26value%3D0%26label%3DUiVPCOGIxgIQt8yS_gM%26bg%3Dffffff%26hl%3Den%26guid%3DON%26u_h%3D885%26u_w%3D1176%26u_ah%3D855%26u_aw%3D1176%26u_cd%3D24%26u_his%3D1%26u_tz%3D60%26u_java%3Dtrue%26u_nplug%3D10%26u_nmime%3D92%26frm%3D0%26url%3Dhttp://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm%26tiba%3DOfficial%2520USA%2520Site%2520-%2520Save%2520the%2520Children%26ctc_id%3DCAIVAgAAAB0CAAAA%26ct_cookie_present%3Dfalse&ipr=y&ulfeg=n HTTP/1.1

Host: www.google.no
GET /ads/user-lists/1069852215/?label=UiVPCOGIxgIQt8yS_gM&amp;fmt=3&amp;bg=ffffff&amp;num=1&amp;ct_cookie_present=false&amp;cv=8&amp;frm=0&amp;url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;random=3294446260&amp;fpvtc=/1069852215/%3Frandom%3D891158827%26cv%3D8%26fst%3D1484060400000%26num%3D1%26fmt%3D3%26value%3D0%26label%3DUiVPCOGIxgIQt8yS_gM%26bg%3Dffffff%26hl%3Den%26guid%3DON%26u_h%3D885%26u_w%3D1176%26u_ah%3D855%26u_aw%3D1176%26u_cd%3D24%26u_his%3D1%26u_tz%3D60%26u_java%3Dtrue%26u_nplug%3D10%26u_nmime%3D92%26frm%3D0%26url%3Dhttp://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm%26tiba%3DOfficial%2520USA%2520Site%2520-%2520Save%2520the%2520Children%26ctc_id%3DCAIVAgAAAB0CAAAA%26ct_cookie_present%3Dfalse&amp;ipr=y&amp;ulfeg=n HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 173.194.222.94
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 10 Jan 2017 15:46:17 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
GET /pcon HTTP/1.1

Host: www.wtp101.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: tuuid=0be23537-21a6-40bc-8fcf-0e1cfdbb807e; tuuid_last_update=1484063177; cookie_born=1484063177; s=!36964
 104.199.41.131
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
Server: nginx/1.7.10
Date: Tue, 10 Jan 2017 15:46:17 GMT
Content-Length: 475
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Pragma: no-cache
Set-Cookie: synced=!liveramp,253305977!bidswitch,253305977!bidswitch2,253305977; path=/; expires=Thu, 10-Jan-2019 15:46:17 GMT; domain=.wtp101.com sprf=!liveramp!bidswitch!bidswitch2; path=/; expires=Thu, 10-Jan-2019 15:46:17 GMT; domain=.wtp101.com
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-9968643-1&cid=1955594197.1484063172&jid=786055990&_v=j47&z=441442592&ipr=y&ulfeg=n HTTP/1.1

Host: www.google.no
GET /ads/ga-audiences?v=1&amp;aip=1&amp;t=sr&amp;_r=4&amp;tid=UA-9968643-1&amp;cid=1955594197.1484063172&amp;jid=786055990&amp;_v=j47&amp;z=441442592&amp;ipr=y&amp;ulfeg=n HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 173.194.222.94
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 10 Jan 2017 15:46:17 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
POST / HTTP/1.1

Host: ocsp.comodoca.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 15:46:17 GMT
Server: Apache
Last-Modified: Mon, 09 Jan 2017 16:59:26 GMT
Expires: Fri, 13 Jan 2017 16:59:26 GMT
Etag: CBD12B3AD5BC8492C2487BA2C41C7B06FF3205A7
Cache-Control: max-age=262988,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp16
Content-Length: 471
Connection: close
POST / HTTP/1.1

Host: ocsp.comodoca.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 15:46:17 GMT
Server: Apache
Last-Modified: Mon, 09 Jan 2017 05:27:08 GMT
Expires: Fri, 13 Jan 2017 05:27:08 GMT
Etag: CB2C4D26942B605491553CFA1E1FDFCF3441D7E8
Cache-Control: max-age=221450,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp23
Content-Length: 727
Connection: close
POST / HTTP/1.1

Host: ocsp.usertrust.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 15:46:18 GMT
Server: Apache
Last-Modified: Mon, 09 Jan 2017 05:27:08 GMT
Expires: Fri, 13 Jan 2017 05:27:08 GMT
Etag: 4F6224C2A9871F1648739AAC701C5462F72D09AE
Cache-Control: max-age=221449,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp16
Content-Length: 471
Connection: close
GET /tr/?id=175734969458030&ev=PageView&dl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&rl=&if=false&ts=1484063175180&v=2.5.1 HTTP/1.1

Host: www.facebook.com
GET /tr/?id=175734969458030&amp;ev=PageView&amp;dl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;rl=&amp;if=false&amp;ts=1484063175180&amp;v=2.5.1 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 157.240.3.35
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 10 Jan 2017 15:46:17 GMT
Expires: Tue, 10 Jan 2017 15:46:17 GMT
Last-Modified: Fri, 21 Dec 2012 00:00:01 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Set-Cookie: fr=089LQAkvWQQYw8jXs..BYdQHJ...1.0.BYdQHJ.; expires=Monday, 10-Apr-2017 15:46:17 GMT; path=/; domain=.facebook.com
Server: proxygen
Connection: keep-alive
Content-Length: 44
POST / HTTP/1.1

Host: ocsp.godaddy.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 10 Jan 2017 15:46:18 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=118449, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Jan 2017 14:24:22 GMT
Expires: Thu, 12 Jan 2017 02:24:22 GMT
Etag: &quot;4bf02a5a3b9cba4e2a4b5c87a8f208039d4819aa&quot;
P3P: CP=&quot;IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA&quot;
Content-Length: 1776
Connection: close
GET /sync?dsp_id=17&user_group=1&expires=10&user_id=0be23537-21a6-40bc-8fcf-0e1cfdbb807e HTTP/1.1

Host: x.bidswitch.net
GET /sync?dsp_id=17&amp;user_group=1&amp;expires=10&amp;user_id=0be23537-21a6-40bc-8fcf-0e1cfdbb807e HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: tuuid=167c8026-2250-4d93-a05b-a42c34846960; tuuid_last_update=1484063175; c=1484063175
 52.58.205.63
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.7.10
Date: Tue, 10 Jan 2017 15:46:18 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Location: //us-u.openx.net/w/1.0/sd?id=537072968&amp;val=167c8026-2250-4d93-a05b-a42c34846960
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
POST / HTTP/1.1

Host: gn.symcd.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.10.2
Content-Length: 1419
Content-Transfer-Encoding: binary
Cache-Control: max-age=518578, public, no-transform, must-revalidate
Last-Modified: Mon, 9 Jan 2017 15:46:44 GMT
Expires: Mon, 16 Jan 2017 15:46:44 GMT
Date: Tue, 10 Jan 2017 15:46:19 GMT
Connection: keep-alive
GET /w/1.0/sd?id=537072968&val=167c8026-2250-4d93-a05b-a42c34846960 HTTP/1.1

Host: us-u.openx.net
GET /w/1.0/sd?id=537072968&amp;val=167c8026-2250-4d93-a05b-a42c34846960 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: i=00f1801f-612d-4fa8-7e6a-49744343939d|1484063175
 173.241.240.143
HTTP/1.1 200 OK
Content-Type: text/html
Vary: Accept
Server: OXGW/11.40.7.5
Pragma: no-cache
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Date: Tue, 10 Jan 2017 15:46:19 GMT
Cache-Control: private, max-age=0, no-cache
Transfer-Encoding: chunked
Content-Encoding: gzip
GET /tr/?id=1866633740221545&ev=PageView&dl=http%3A%2F%2F5547516.fls.doubleclick.net%2Factivityi%3Bsrc%3D5547516%3Btype%3Dstcge0%3Bcat%3Dstcho0%3Bord%3D4261740684849%3B~oref%3Dhttp%253A%252F%252Fwww.savethechildren.org%252Fsite%252Fc.8rKLIXMGIpI4E%252Fb.6115947%252Fk.B143%252FOfficial_USA_Site.htm%3F&rl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&if=true&ts=1484063177508&v=2.5.1 HTTP/1.1

Host: www.facebook.com
GET /tr/?id=1866633740221545&amp;ev=PageView&amp;dl=http%3A%2F%2F5547516.fls.doubleclick.net%2Factivityi%3Bsrc%3D5547516%3Btype%3Dstcge0%3Bcat%3Dstcho0%3Bord%3D4261740684849%3B~oref%3Dhttp%253A%252F%252Fwww.savethechildren.org%252Fsite%252Fc.8rKLIXMGIpI4E%252Fb.6115947%252Fk.B143%252FOfficial_USA_Site.htm%3F&amp;rl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;if=true&amp;ts=1484063177508&amp;v=2.5.1 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 157.240.3.35
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 10 Jan 2017 15:46:19 GMT
Expires: Tue, 10 Jan 2017 15:46:19 GMT
Last-Modified: Fri, 21 Dec 2012 00:00:01 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Set-Cookie: fr=0GrMVNFB8Mg2UA53b..BYdQHL...1.0.BYdQHL.; expires=Monday, 10-Apr-2017 15:46:19 GMT; path=/; domain=.facebook.com
Server: proxygen
Connection: keep-alive
Content-Length: 44
GET /385296.gif?partner_uid=0be23537-21a6-40bc-8fcf-0e1cfdbb807e HTTP/1.1

Host: idsync.rlcdn.com

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=4261740684849;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: ck1=ck1; rlas3=x+lTgyoaWMQjZp6hJFZfW0Lom6Z4YoKOfyCcTOx2Kb6MyA9jEACu5w==; rtn1=C9KzD1DcNqD4axKTL5fOGA==
 52.72.203.208
HTTP/1.1 200 OK
Content-Type: image/gif; charset=ISO-8859-1
Cache-Control: no-cache, no-store
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP: &quot;NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE&quot;
Set-Cookie: rlas3=75/pJqihKZ8jZp6hJFZfW0Lom6Z4YoKOfyCcTOx2Kb6MyA9jEACu5w==;Domain=.rlcdn.com;Expires=Sun, 09-Jul-2017 15:46:18 GMT rtn1=C9KzD1DcNqD4axKTL5fOGA==;Domain=.rlcdn.com;Expires=Sun, 09-Jul-2017 15:46:17 GMT
Content-Length: 43
Connection: keep-alive
GET /s/at?site=10052&page=6115947 HTTP/1.1

Host: link.savethechildren.csengage2.net
GET /s/at?site=10052&amp;page=6115947 HTTP/1.1

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm