Overview

URLgenvipfocus.com/
IP162.244.32.143
ASNAS14576 Hosting Solution Ltd.
Location United States
Report completed2017-01-11 05:56:57 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Levelpublic


Intrusion Detection Systems

Snort /w Sourcefire VRT No alerts detected
Suricata /w Emerging Threats Pro No alerts detected


Blacklists

Fortinet's Web Filter / fortiguard.com
Added / Verified Severity Host Comment
2017-01-112genvipfocus.com/Malware
2017-01-112genvipfocus.com/int/asca/forskolin/?bhu=8mbkLnQrWkPukvM5WKZJNrnDK2Wvh6EnAMalware
MDL / malwaredomainlist.com No alerts detected
DNS-BH / malwaredomains.com No alerts detected
mnemonic secure DNS / mnemonic.no No alerts detected
OpenPhish / openphish.com No alerts detected
PhishTank / phishtank.com No alerts detected
Spamhaus DBL / spamhaus.org No alerts detected


Files Captured



Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 162.244.32.143

Date UQ / IDS / BL URL IP
2017-01-11 20:03:140 - 0 - 2genvipfocus.com/162.244.32.143
2017-01-11 18:43:100 - 0 - 2genvipfocus.com/162.244.32.143
2017-01-11 17:32:580 - 0 - 2genvipfocus.com/162.244.32.143
2017-01-11 03:26:320 - 0 - 2genvipfocus.com/162.244.32.143
2017-01-10 16:46:550 - 0 - 2genvipfocus.com/162.244.32.143
2017-01-10 13:40:260 - 0 - 2genvipfocus.com/162.244.32.143

Last 6 reports on ASN: AS14576 Hosting Solution Ltd.

Date UQ / IDS / BL URL IP
2017-01-18 02:17:140 - 0 - 2ipornhub.net162.244.34.22
2017-01-18 01:46:420 - 0 - 1witvipokgen.com/204.155.31.136
2017-01-18 00:56:460 - 0 - 1witvipokgen.com/204.155.31.136
2017-01-17 23:13:520 - 0 - 1witvipokgen.com204.155.31.136
2017-01-17 23:09:560 - 0 - 1witvipokgen.com204.155.31.136
2017-01-17 22:28:250 - 0 - 0witvipokgen.com/us/owuy/tmz_megyn_kelly?bhu=3cMP5UoMJWTLnSrvZjz6P4XaVPi5poRwRL2t204.155.31.136

Last 6 reports on domain: genvipfocus.com

Date UQ / IDS / BL URL IP
2017-01-17 17:37:510 - 0 - 2genvipfocus.com/185.62.39.133
2017-01-17 13:48:050 - 0 - 2genvipfocus.com/185.62.39.133
2017-01-17 11:45:490 - 0 - 2genvipfocus.com/185.62.39.133
2017-01-17 09:45:500 - 0 - 2genvipfocus.com/185.62.39.133
2017-01-17 06:35:440 - 0 - 2genvipfocus.com/185.62.39.133
2017-01-17 05:55:400 - 0 - 2genvipfocus.com/185.62.39.133



JavaScript

Executed Scripts (56)


Executed Evals (3)

#1 JavaScript::Eval (size: 222, repeated: 13)

(function() {
    try {
        var a = window.location.href;
        return /\/b.[0-9]{5,}\//.test(window.location.href) ? a.match(/\/b.([0-9]{5,})\//)[1] : window.location.search.match(/[\?|\&]b=([0-9]{5,})/)[1]
    } catch (b) {
        return "Error: " + b.message
    }
})();

#2 JavaScript::Eval (size: 8, repeated: 1)

_ate.cbs

#3 JavaScript::Eval (size: 11, repeated: 1)

addthis.cbs

Executed Writes (4)

#1 JavaScript::Write (size: 516, repeated: 1)

<img height="1" width="1" border="0" alt="" src="https://www.googleadservices.com/pagead/conversion/1069852215/?random=1484110575012&cv=8&fst=1484110575012&num=1&fmt=3&value=0&label=UiVPCOGIxgIQt8yS_gM&bg=ffffff&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&tiba=Official%20USA%20Site%20-%20Save%20the%20Children" style="display:none" />

#2 JavaScript::Write (size: 240, repeated: 1)

<img src="https://4266705.fls.doubleclick.net/activityi;src=4266705;type=invmedia;cat=xs0zpcmo;ord=1?" width="1" height="1" style="position:absolute;overflow:hidden;clip:rect(0 0 0 0);height:1px;width:1px;margin:-1px;padding:0;border:0;" />

#3 JavaScript::Write (size: 152, repeated: 1)

<img src="https://www.wtp101.com/push_sync?f=0" alt=" " style="display:none"/><script type="text/javascript" src="https://www.wtp101.com/pcon"></script>

#4 JavaScript::Write (size: 424, repeated: 1)

<img src="https://x.bidswitch.net/sync?dsp_id=17&user_group=1&expires=10&user_id=31cc32d7-fdfb-4782-9e91-4b9909cc4e03" alt=" " style="display:none"/><img src="https://x.bidswitch.net/sync?dsp_id=17&user_group=1&expires=10&user_id=31cc32d7-fdfb-4782-9e91-4b9909cc4e03" alt=" " style="display:none"/><img src="https://su.addthis.com/red/usync?pid=11197&puid=31cc32d7-fdfb-4782-9e91-4b9909cc4e03" alt=" " style="display:none"/>


HTTP Transactions (160)


Request Response
GET / HTTP/1.1

Host: genvipfocus.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 162.244.32.143
HTTP/1.1 303 See Other
HTTP/1.1 303 See Other
Server: nginx/1.10.2
Date: Wed, 11 Jan 2017 04:56:28 GMT
Content-Length: 0
Connection: keep-alive
Location: http://genvipfocus.com/int/asca/forskolin/?bhu=8mbkLnQrWkPukvM5WKZJNrnDK2Wvh6EnA
Set-Cookie: UUID=U808-88-1-370945-1006927; path=/
GET /int/asca/forskolin/?bhu=8mbkLnQrWkPukvM5WKZJNrnDK2Wvh6EnA HTTP/1.1

Host: genvipfocus.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: UUID=U808-88-1-370945-1006927
 162.244.32.143
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Server: nginx/1.10.2
Date: Wed, 11 Jan 2017 04:56:29 GMT
Content-Length: 27
Connection: keep-alive
X-Powered-By: ARR/2.5(33b33c8a7)
Location: http://savethechildren.org/
GET / HTTP/1.1

Host: savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 64.209.141.60
HTTP/1.1 302 Object moved
Content-Type: text/html
Cache-Control: private
Content-Length: 175
Location: http://www.kintera.org/site/lookup.asp?c=8rKLIXMGIpI4E
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDQQRSTCAQ=FALJCAFCFGIMFJENNFMOHGDC; path=/ NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091cd145525d5f4f58455e445a4a423660;path=/;httponly
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:11 GMT
GET /site/lookup.asp?c=8rKLIXMGIpI4E HTTP/1.1

Host: www.kintera.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 104.123.114.124
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Content-Length: 197
Location: http://www.savethechildren.org/site/lookup.asp?c=8rKLIXMGIpI4E&amp;b=6115947
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:12 GMT
Connection: keep-alive
Set-Cookie: KNTASESSION=keyw44832=718FB3F483D4487E91DC6E1EA27DBC54&amp;kntaw44832=298C474AB3C9480DB2B3D25F94ABAE18; domain=kintera.org; path=/ NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091c6145525d5f4f58455e445a4a423660;path=/;httponly
Cache-Control: private
Expires: Wed, 11 Jan 2017 04:55:12 GMT
GET /site/lookup.asp?c=8rKLIXMGIpI4E&b=6115947 HTTP/1.1

Host: www.savethechildren.org
GET /site/lookup.asp?c=8rKLIXMGIpI4E&amp;b=6115947 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 104.123.114.107
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 0
Location: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
Set-Cookie: KNTASESSION=keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0; domain=savethechildren.org; path=/ NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660;path=/;httponly
Cache-Control: private
Expires: Wed, 11 Jan 2017 04:55:12 GMT
GET /site/layout/default.css HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/css
Cteonnt-Length: 71565
Last-Modified: Fri, 08 Mar 2013 21:19:58 GMT
Accept-Ranges: bytes
Etag: &quot;0539caf421cce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 13931
Vary: Accept-Encoding
Cache-Control: private, max-age=7837
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /site/layout/content.css HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/css
Cteonnt-Length: 2119
Last-Modified: Sat, 10 Jan 2015 12:00:09 GMT
Accept-Ranges: bytes
Etag: &quot;806a3fbcc2cd01:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 564
Vary: Accept-Encoding
Cache-Control: private, max-age=4493
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-header-footer.min.css?id=100 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/css
Cteonnt-Length: 15478
Last-Modified: Mon, 16 Nov 2015 22:52:40 GMT
Accept-Ranges: bytes
Etag: &quot;244827fc120d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 3807
Vary: Accept-Encoding
Cache-Control: private, max-age=10878
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-template-full-width-pages.min.css HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/css
Cteonnt-Length: 6238
Last-Modified: Mon, 26 Jan 2015 17:40:10 GMT
Accept-Ranges: bytes
Etag: &quot;d6f891218f39d01:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 1248
Vary: Accept-Encoding
Cache-Control: private, max-age=5520
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/css
Cteonnt-Length: 43272
Last-Modified: Sat, 20 Jun 2015 14:04:53 GMT
Accept-Ranges: bytes
Etag: &quot;5ad36c1462abd01:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 8378
Vary: Accept-Encoding
Cache-Control: private, max-age=4585
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/FAVICON.ICO HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Tue, 26 Jul 2011 14:08:27 GMT
Accept-Ranges: bytes
Etag: &quot;f95e487d9d4bcc1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/RIVETED.MIN.JS HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Tue, 15 Dec 2015 16:56:38 GMT
Accept-Ranges: bytes
Etag: &quot;c37c83905937d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1032
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/header_save_the_children_logo.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2183
Last-Modified: Sun, 13 Oct 2013 03:14:07 GMT
Accept-Ranges: bytes
Etag: &quot;b3f59247c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/decorative_link_arrow.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 619
Last-Modified: Sun, 13 Oct 2013 02:28:32 GMT
Accept-Ranges: bytes
Etag: &quot;db313ee9bbc7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: KNTASESSION=keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: text/html; charset=iso-8859-1
Cteonnt-Length: 43015
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Content-Encoding: gzip
Content-Length: 12422
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; path=/; HttpOnly KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; domain=savethechildren.org; path=/ 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; path=/
Cache-Control: private
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/HP_SLIDE_JAN1_NEWYEAR.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 92302
Last-Modified: Sun, 01 Jan 2017 14:32:33 GMT
Accept-Ranges: bytes
Etag: &quot;1df69be33b64d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/HP_SLIDER_2016_HIGHLIGHTS.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 94302
Last-Modified: Sun, 01 Jan 2017 14:32:33 GMT
Accept-Ranges: bytes
Etag: &quot;15f5d9e33b64d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/charlie_separator.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2036
Last-Modified: Sun, 13 Oct 2013 03:12:09 GMT
Accept-Ranges: bytes
Etag: &quot;7331221c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9DEF2EBE-10AE-432C-9BD0-DF91D2EBA74A%7D/multi-load-min.js?id=431 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Wed, 22 Oct 2014 17:49:17 GMT
Accept-Ranges: bytes
Etag: &quot;621c218020eecf1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7741
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9DEF2EBE-10AE-432C-9BD0-DF91D2EBA74A%7D/www.savethechildren.org.js?id=4125 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Tue, 03 Jan 2017 21:35:44 GMT
Accept-Ranges: bytes
Etag: &quot;3fcb9756966d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7574
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9DEF2EBE-10AE-432C-9BD0-DF91D2EBA74A%7D/www.savethechildren.org.functionality.js?id=481 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Thu, 08 Dec 2016 15:10:49 GMT
Accept-Ranges: bytes
Etag: &quot;6db7a3426551d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 32507
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/ANNUAL_REPORT_2016_3.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 26858
Last-Modified: Thu, 26 May 2016 14:30:39 GMT
Accept-Ranges: bytes
Etag: &quot;36dfb82c5bb7d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/HOMEPAGE_ARROW.PNG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 4801
Last-Modified: Tue, 17 Jun 2014 18:19:35 GMT
Accept-Ranges: bytes
Etag: &quot;ef946eb1588acf1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/ANNUAL_REPORT_2016_2.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 45732
Last-Modified: Wed, 25 May 2016 20:13:24 GMT
Accept-Ranges: bytes
Etag: &quot;96404fe4c1b6d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/ANNUAL_REPORT_2016_1.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 53542
Last-Modified: Wed, 25 May 2016 20:13:24 GMT
Accept-Ranges: bytes
Etag: &quot;96404fe4c1b6d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/HP_SLIDE_SYRIA_JAN1_2017.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 99743
Last-Modified: Sun, 01 Jan 2017 14:32:33 GMT
Accept-Ranges: bytes
Etag: &quot;8da6cbe33b64d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /ajax/libs/jquery/1.4.2/jquery.min.js HTTP/1.1

Host: ajax.googleapis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Thu, 22 Dec 2016 19:24:47 GMT
Expires: Fri, 22 Dec 2017 19:24:47 GMT
Last-Modified: Fri, 16 Oct 2015 18:27:31 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 24606
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1675886
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/HP_SLIDE_JAN1_SPON.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 93799
Last-Modified: Sun, 01 Jan 2017 14:32:33 GMT
Accept-Ranges: bytes
Etag: &quot;11a7ace33b64d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /CommonLib/lib/INC_jsFields.js HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Tue, 14 Jan 2014 02:16:42 GMT
Accept-Ranges: bytes
Etag: &quot;06117aace10cf1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5186
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /site/layout/util.js HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Fri, 23 Oct 2009 18:22:40 GMT
Accept-Ranges: bytes
Etag: &quot;058f2cdd54ca1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2758
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Wed, 11 Jan 2017 02:59:11 GMT
Expires: Wed, 11 Jan 2017 04:59:11 GMT
Last-Modified: Wed, 28 Sep 2016 20:19:01 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 16022
Cache-Control: public, max-age=7200
Age: 7022
GET /pagead/conversion.js HTTP/1.1

Host: www.googleadservices.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 108.177.14.156
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Timing-Allow-Origin: *
Etag: 1260147617075718455
Date: Wed, 11 Jan 2017 04:56:13 GMT
Expires: Wed, 11 Jan 2017 04:56:13 GMT
Cache-Control: private, max-age=86400
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename=&quot;f.txt&quot;
Content-Encoding: gzip
Server: cafe
Content-Length: 5421
X-XSS-Protection: 1; mode=block
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/SPOT_SPON_DRTV_110316.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 10974
Last-Modified: Thu, 03 Nov 2016 19:11:40 GMT
Accept-Ranges: bytes
Etag: &quot;c097691b636d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/APPLE_SPOT.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 14897
Last-Modified: Mon, 14 Nov 2016 18:08:25 GMT
Accept-Ranges: bytes
Etag: &quot;985df817a23ed21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/slideshow.js?id=4 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Mon, 05 May 2014 19:51:56 GMT
Accept-Ranges: bytes
Etag: &quot;11238789b68cf1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2794
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/guidestar_exchange_gold.gif HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 4526
Last-Modified: Sun, 13 Oct 2013 00:54:47 GMT
Accept-Ranges: bytes
Etag: &quot;a38977d0aec7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/CW_TOPRATED_RGB_WEB_88.PNG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 10213
Last-Modified: Thu, 22 Dec 2016 16:12:22 GMT
Accept-Ranges: bytes
Etag: &quot;6c2f4c2d6e5cd21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /seg?add=806740&t=1 HTTP/1.1

Host: go.accmgr.com
GET /seg?add=806740&amp;t=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 185.33.222.77
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Server: nginx/1.9.13
Date: Wed, 11 Jan 2017 04:56:15 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Location: http://ib.adnxs.com/seg?add=806740&amp;t=1
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/NEWBORN_JAN17_SPOT.JPG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 58254
Last-Modified: Wed, 04 Jan 2017 16:58:00 GMT
Accept-Ranges: bytes
Etag: &quot;a3f6c0b4ab66d21:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/CHARITY_NAVIGATOR_4STAR.GIF HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 2313
Last-Modified: Sun, 13 Oct 2013 00:54:47 GMT
Accept-Ranges: bytes
Etag: &quot;a38977d0aec7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/SC_PIE_2015.PNG HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 35107
Last-Modified: Wed, 25 May 2016 17:25:26 GMT
Accept-Ranges: bytes
Etag: &quot;8a4e416daab6d11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/bbb_accredited_charity_seal.jpg HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 13341
Last-Modified: Sun, 13 Oct 2013 00:54:47 GMT
Accept-Ranges: bytes
Etag: &quot;a38977d0aec7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:13 GMT
Connection: keep-alive
GET /meter/www.savethechildren.org/101.gif HTTP/1.1

Host: cdn.ywxi.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 23.43.141.10
HTTP/1.1 200 OK
Content-Type: image/png; charset=UTF-8
Server: Apache
Cache-Control: public
Expires: Wed, 11 Jan 2017 04:58:13 GMT
Content-Encoding: gzip
Content-Length: 5029
Vary: Accept-Encoding
Date: Wed, 11 Jan 2017 04:56:15 GMT
Connection: keep-alive
GET /r/__utm.gif?utmwv=5.6.7&utms=1&utmn=1582013587&utmhn=www.savethechildren.org&utme=8(5!session_msource)9(5!wewscwww1112)11(5!2)&utmcs=ISO-8859-1&utmsr=1176x885&utmvp=1159x775&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Official%20USA%20Site%20-%20Save%20the%20Children&utmhid=722657047&utmr=-&utmp=%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&utmht=1484110574995&utmac=UA-19396666-1&utmcc=__utma%3D1.1566903102.1484110574.1484110574.1484110574.1%3B%2B__utmz%3D1.1484110574.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1940798317&utmredir=1&utmu=q1AAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1

Host: www.google-analytics.com
GET /r/__utm.gif?utmwv=5.6.7&amp;utms=1&amp;utmn=1582013587&amp;utmhn=www.savethechildren.org&amp;utme=8(5!session_msource)9(5!wewscwww1112)11(5!2)&amp;utmcs=ISO-8859-1&amp;utmsr=1176x885&amp;utmvp=1159x775&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=Official%20USA%20Site%20-%20Save%20the%20Children&amp;utmhid=722657047&amp;utmr=-&amp;utmp=%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;utmht=1484110574995&amp;utmac=UA-19396666-1&amp;utmcc=__utma%3D1.1566903102.1484110574.1484110574.1484110574.1%3B%2B__utmz%3D1.1484110574.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmjid=1940798317&amp;utmredir=1&amp;utmu=q1AAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
Access-Control-Allow-Origin: *
Date: Wed, 11 Jan 2017 04:56:15 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
GET /js/300/addthis_widget.js HTTP/1.1

Host: s7.addthis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 104.16.24.35
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Wed, 11 Jan 2017 04:56:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 06 Jan 2017 21:19:45 GMT
Etag: &quot;54125-5457393b19e40&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Timing-Allow-Origin: *
Surrogate-Key: client_dist
Cache-Control: public, no-check, max-age=600
CF-Cache-Status: HIT
X-Host: s7.addthis.com
X-Distribution: 99
Server: cloudflare-nginx
CF-RAY: 31f5c7ef41b14255-OSL
GET /seg?add=806740&t=1 HTTP/1.1

Host: ib.adnxs.com
GET /seg?add=806740&amp;t=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 185.33.220.210
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Server: nginx/1.9.13
Date: Wed, 11 Jan 2017 04:56:17 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Location: http://ib.adnxs.com/bounce?%2Fseg%3Fadd%3D806740%26t%3D1
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Thu, 12-Jan-2017 04:56:17 GMT; Domain=.adnxs.com; HttpOnly uuid2=2685042323431053452; Path=/; Max-Age=7776000; Expires=Tue, 11-Apr-2017 04:56:17 GMT; Domain=.adnxs.com; HttpOnly
GET /bounce?%2Fseg%3Fadd%3D806740%26t%3D1 HTTP/1.1

Host: ib.adnxs.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: sess=1; uuid2=2685042323431053452
 185.33.220.210
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Server: nginx/1.9.13
Date: Wed, 11 Jan 2017 04:56:17 GMT
Content-Length: 259
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Set-Cookie: anj=dTM7k!M4/8DYRWSF']wIg2In9u#JW/!@wnf]meq8dWME4(EW&lt;KRl3pW; Path=/; Max-Age=7776000; Expires=Tue, 11-Apr-2017 04:56:17 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Thu, 12-Jan-2017 04:56:17 GMT; Domain=.adnxs.com; HttpOnly uuid2=2685042323431053452; Path=/; Max-Age=7776000; Expires=Tue, 11-Apr-2017 04:56:17 GMT; Domain=.adnxs.com; HttpOnly
GET /j.php?a=27125&u=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&r=0.5159675314881889 HTTP/1.1

Host: dev.visualwebsiteoptimizer.com
GET /j.php?a=27125&amp;u=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;r=0.5159675314881889 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 159.122.87.148
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Date: Wed, 11 Jan 2017 04:56:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: fra1
Content-Encoding: gzip
GET /v.gif?a=27125&d=savethechildren.org&u=2AAA5B2AB912C39C4D371B8CA99B2F46&h=b294d277e2470edd450449d9d6ebd6ec&t=false&r=0.9803526751052912 HTTP/1.1

Host: dev.visualwebsiteoptimizer.com
GET /v.gif?a=27125&amp;d=savethechildren.org&amp;u=2AAA5B2AB912C39C4D371B8CA99B2F46&amp;h=b294d277e2470edd450449d9d6ebd6ec&amp;t=false&amp;r=0.9803526751052912 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 159.122.87.148
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Wed, 11 Jan 2017 04:56:11 GMT
Connection: keep-alive
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Expires: Mon, 10 Jan 2005 00:00:01 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
Content-Length: 35
Server: fra1
GET /gtm.js?id=GTM-5T6BP3 HTTP/1.1

Host: www.googletagmanager.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.168
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Wed, 11 Jan 2017 04:56:15 GMT
Expires: Wed, 11 Jan 2017 04:56:15 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
Content-Length: 35138
X-XSS-Protection: 1; mode=block
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/magnifying_glass.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-header-footer.min.css?id=100
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1566903102.1484110574.1484110574.1484110574.1; __utmb=1.1.10.1484110574; __utmc=1; __utmz=1.1484110574.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=2AAA5B2AB912C39C4D371B8CA99B2F46|b294d277e2470edd450449d9d6ebd6ec
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 317
Last-Modified: Sun, 13 Oct 2013 03:15:27 GMT
Accept-Ranges: bytes
Etag: &quot;1330eb76c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:15 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/full_width_headline_line.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1566903102.1484110574.1484110574.1484110574.1; __utmb=1.1.10.1484110574; __utmc=1; __utmz=1.1484110574.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=2AAA5B2AB912C39C4D371B8CA99B2F46|b294d277e2470edd450449d9d6ebd6ec
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 557
Last-Modified: Sun, 13 Oct 2013 03:14:07 GMT
Accept-Ranges: bytes
Etag: &quot;b3f59247c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:15 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/gray_arc.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1566903102.1484110574.1484110574.1484110574.1; __utmb=1.1.10.1484110574; __utmc=1; __utmz=1.1484110574.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=2AAA5B2AB912C39C4D371B8CA99B2F46|b294d277e2470edd450449d9d6ebd6ec
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 7629
Last-Modified: Mon, 14 Oct 2013 04:26:10 GMT
Accept-Ranges: bytes
Etag: &quot;c49d718295c8ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:15 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/SOCIAL-MEDIA-ICONS-GRAY-FULL-COLOR-50X50.PNG?id=7 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1566903102.1484110574.1484110574.1484110574.1; __utmb=1.1.10.1484110574; __utmc=1; __utmz=1.1484110574.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=2AAA5B2AB912C39C4D371B8CA99B2F46|b294d277e2470edd450449d9d6ebd6ec
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 15695
Last-Modified: Thu, 04 Dec 2014 22:22:59 GMT
Accept-Ranges: bytes
Etag: &quot;6ce4ddc1010d01:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:15 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/footer_arc.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-header-footer.min.css?id=100
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1566903102.1484110574.1484110574.1484110574.1; __utmb=1.1.10.1484110574; __utmc=1; __utmz=1.1484110574.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=2AAA5B2AB912C39C4D371B8CA99B2F46|b294d277e2470edd450449d9d6ebd6ec
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 5216
Last-Modified: Sun, 13 Oct 2013 03:12:09 GMT
Accept-Ranges: bytes
Etag: &quot;7331221c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:15 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/SOCIAL-MEDIA-ICONS-GRAY-FULL-COLOR-29X29.PNG?id=7 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1566903102.1484110574.1484110574.1484110574.1; __utmb=1.1.10.1484110574; __utmc=1; __utmz=1.1484110574.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=2AAA5B2AB912C39C4D371B8CA99B2F46|b294d277e2470edd450449d9d6ebd6ec
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 9074
Last-Modified: Thu, 04 Dec 2014 22:22:59 GMT
Accept-Ranges: bytes
Etag: &quot;6ce4ddc1010d01:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:15 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/semi_transparent_world_map.jpg HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-header-footer.min.css?id=100
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1566903102.1484110574.1484110574.1484110574.1; __utmb=1.1.10.1484110574; __utmc=1; __utmz=1.1484110574.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=2AAA5B2AB912C39C4D371B8CA99B2F46|b294d277e2470edd450449d9d6ebd6ec
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 5446
Last-Modified: Sun, 13 Oct 2013 03:16:37 GMT
Accept-Ranges: bytes
Etag: &quot;1b3e6a0c2c7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:15 GMT
Connection: keep-alive
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2017 04:56:16 GMT
Expires: Sun, 15 Jan 2017 04:56:16 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /analytics.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Wed, 11 Jan 2017 03:23:55 GMT
Expires: Wed, 11 Jan 2017 05:23:55 GMT
Last-Modified: Wed, 28 Sep 2016 20:19:01 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 11590
Cache-Control: public, max-age=7200
Age: 5541
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/MOVINGSLIDESHOWTRIANGLE.PNG?id=2 HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1566903102.1484110574.1484110574.1484110574.1; __utmb=1.1.10.1484110574; __utmc=1; __utmz=1.1484110574.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=2AAA5B2AB912C39C4D371B8CA99B2F46|b294d277e2470edd450449d9d6ebd6ec; cybersource=0
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 509
Last-Modified: Fri, 22 Nov 2013 20:29:32 GMT
Accept-Ranges: bytes
Etag: &quot;195d7e8dc1e7ce1:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:16 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/slideshowPrev2.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1566903102.1484110574.1484110574.1484110574.1; __utmb=1.1.10.1484110574; __utmc=1; __utmz=1.1484110574.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=2AAA5B2AB912C39C4D371B8CA99B2F46|b294d277e2470edd450449d9d6ebd6ec; cybersource=0
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 861
Last-Modified: Wed, 03 Aug 2016 18:06:59 GMT
Accept-Ranges: bytes
Etag: &quot;4aba11d4b1edd11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:16 GMT
Connection: keep-alive
GET /atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/slideshowNext2.png HTTP/1.1

Host: www.savethechildren.org

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/atf/cf/%7B9def2ebe-10ae-432c-9bd0-df91d2eba74a%7D/save-the-children-responsive-content.min.css?id=21
Cookie: KNTASESSION=kntaw44832=1A5D460CDF4B4201856DE1AE3725C1C0&amp;keyw44832=B63E66EB1A1F4D81B1DBB26940341450&amp;key=bea8a9b91f324689bfbe9caaa9097e8a&amp;knta=F0046E1AC24047F4A8087DDFFB8E49B2; NSC_xxx.ljoufsb.psh_iuuq=ffffffff09091f9f45525d5f4f58455e445a4a423660; ASP.NET_SessionId=wtynjuzoqxgqmr55fcfutqix; 1A5D460CDF4B4201856DE1AE3725C1C0=log=1&amp;content={5936AB4A-596A-4961-B4A6-54674A327BC1}; stc_msrc=wewscwww1112; __utma=1.1566903102.1484110574.1484110574.1484110574.1; __utmb=1.1.10.1484110574; __utmc=1; __utmz=1.1484110574.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _vwo_uuid_v2=2AAA5B2AB912C39C4D371B8CA99B2F46|b294d277e2470edd450449d9d6ebd6ec; cybersource=0
 104.123.114.107
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 818
Last-Modified: Wed, 03 Aug 2016 18:06:59 GMT
Accept-Ranges: bytes
Etag: &quot;9c1c14d4b1edd11:0&quot;
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
P3P: CP=&quot;CAO DSP COR CURa DEVa TAIa PSAa PSDa IVAi IVDi CONi TELi OUR IND PHY ONL UNI PUR COM NAV INT DEM CNT STA POL&quot;
Date: Wed, 11 Jan 2017 04:56:16 GMT
Connection: keep-alive
GET /activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm? HTTP/1.1

Host: 5547516.fls.doubleclick.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.166
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Timing-Allow-Origin: *
Date: Wed, 11 Jan 2017 04:56:16 GMT
Expires: Wed, 11 Jan 2017 04:56:16 GMT
Cache-Control: private, max-age=0
Strict-Transport-Security: max-age=21600
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 1252
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 11-Jan-2017 05:11:16 GMT; path=/; domain=.doubleclick.net
GET /plugins/ua/linkid.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 11 Jan 2017 04:46:20 GMT
Expires: Wed, 11 Jan 2017 05:46:20 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 856
X-XSS-Protection: 1; mode=block
Age: 596
Cache-Control: public, max-age=3600
GET /plugins/ua/ec.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 11 Jan 2017 04:43:51 GMT
Expires: Wed, 11 Jan 2017 05:43:51 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 1296
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 745
GET /p/js/1.js HTTP/1.1

Host: 3yfxj6c2.micpn.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 54.192.8.218
HTTP/1.1 200 OK
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache max-age=0
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
P3P: policyref=&quot;https://movableink.com/w3c/p3p.xml&quot;, CP=&quot;DEVa PSAa PSDa IVAa IVDa OUR IND DSP NON COR NAV UNI&quot;
Date: Wed, 11 Jan 2017 04:49:54 GMT
Age: 382
X-Cache: Hit from cloudfront
Via: 1.1 42f7313d5b73283a2c7c5eeb15391fa4.cloudfront.net (CloudFront)
X-Amz-Cf-Id: l0k60ZLfppAoFNL_Rx9ysvCgqZl_w7EdZIxCnoQQfbsSYoWNIxL2Mg==
GET /js/savethechildren.js HTTP/1.1

Host: d1n00d49gkbray.cloudfront.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 54.230.11.174
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Tue, 10 Jan 2017 22:14:50 GMT
Last-Modified: Tue, 10 Jan 2017 22:08:20 GMT
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 24087
X-Cache: Hit from cloudfront
Via: 1.1 8bc6ceb505a42af10a5f7fdd59805ef6.cloudfront.net (CloudFront)
X-Amz-Cf-Id: H7mvoUwYDMW31fQDQJGgc7vOC3ZIfu9nvOmKX3ch9AQzDIaE4zABmg==
GET /pages/scripts/0041/0877.js?412252 HTTP/1.1

Host: script.crazyegg.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 52.85.70.20
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Tue, 10 Jan 2017 21:26:03 GMT
Last-Modified: Tue, 20 Dec 2016 21:33:31 GMT
Cache-Control: max-age=3600
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
Age: 721
X-Cache: Hit from cloudfront
Via: 1.1 2a3894d93a2a1e3b94fb6ed07542ad37.cloudfront.net (CloudFront)
X-Amz-Cf-Id: PAIadhnS0Fniq1X6vCUu9QQkRQ61JfoP8lb73Nav1xI2H4k2GuGVSg==
GET /en_US/fbevents.js HTTP/1.1

Host: connect.facebook.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 31.13.66.5
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: fd9f9e8db2f954160c7c45c8a596ce99
Etag: &quot;6a3dc945d9aaf999ace6c3e324edc748&quot;
X-Frame-Options: DENY
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Wed, 11 Jan 2017 05:11:13 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: sOFj2QaBQSaEh+5QyxTr3A==
X-FB-Debug: KqotXo7/+yGRl98zPioSa6Yv2XB2fYAOneT4/UdA5NO8gn/d7EITHw7QS8vkYzAYe8wFRBBMQRyk/QrXY56srA==
Date: Wed, 11 Jan 2017 04:56:16 GMT
Connection: keep-alive
Content-Length: 4054
GET /live/boost/savethechildren/_ate.track.config_resp HTTP/1.1

Host: m.addthisedge.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 104.16.27.235
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=UTF-8
Date: Wed, 11 Jan 2017 04:56:17 GMT
Content-Length: 141
Connection: keep-alive
Cache-Control: public, max-age=60, s-maxage=86400
Surrogate-Key: savethechildren
Etag: -309516394
Content-Disposition: attachment; filename=1.txt
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 31f5c807b297425b-OSL
POST / HTTP/1.1

Host: g.symcd.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 102
Content-Type: application/ocsp-request
 23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.10.2
Content-Length: 1377
Content-Transfer-Encoding: binary
Cache-Control: max-age=536092, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Jan 2017 09:50:52 GMT
Expires: Tue, 17 Jan 2017 09:50:52 GMT
Date: Wed, 11 Jan 2017 04:56:18 GMT
Connection: keep-alive
GET /collect?v=1&_v=j47&a=722657047&t=pageview&_s=1&dl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&ul=en-us&de=ISO-8859-1&dt=Official%20USA%20Site%20-%20Save%20the%20Children&sd=24-bit&sr=1176x885&vp=1159x758&je=1&fl=10.0%20r45&_utma=1.1566903102.1484110574.1484110574.1484110574.1&_utmz=1.1484110574.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&_utmht=1484110578032&_u=SSACgEQq~&jid=1528380453&cid=1566903102.1484110574&tid=UA-9968643-1&gtm=GTM-5T6BP3&cd1=wewscwww1112&z=683589558 HTTP/1.1

Host: www.google-analytics.com
GET /collect?v=1&amp;_v=j47&amp;a=722657047&amp;t=pageview&amp;_s=1&amp;dl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;ul=en-us&amp;de=ISO-8859-1&amp;dt=Official%20USA%20Site%20-%20Save%20the%20Children&amp;sd=24-bit&amp;sr=1176x885&amp;vp=1159x758&amp;je=1&amp;fl=10.0%20r45&amp;_utma=1.1566903102.1484110574.1484110574.1484110574.1&amp;_utmz=1.1484110574.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&amp;_utmht=1484110578032&amp;_u=SSACgEQq~&amp;jid=1528380453&amp;cid=1566903102.1484110574&amp;tid=UA-9968643-1&amp;gtm=GTM-5T6BP3&amp;cd1=wewscwww1112&amp;z=683589558 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
Access-Control-Allow-Origin: *
Date: Wed, 28 Dec 2016 00:15:46 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 1226432
GET /stas/s/e0o0g8.js HTTP/1.1

Host: px.owneriq.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 184.86.53.103
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
Last-Modified: Tue, 31 Jan 2012 01:23:14 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Wed, 11 Jan 2017 07:17:54 GMT
Date: Wed, 11 Jan 2017 04:56:18 GMT
Content-Length: 2770
Connection: keep-alive
GET /collect?v=1&_v=j47&a=722657047&t=pageview&_s=1&dl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&ul=en-us&de=ISO-8859-1&dt=Official%20USA%20Site%20-%20Save%20the%20Children&sd=24-bit&sr=1176x885&vp=1159x758&je=1&fl=10.0%20r45&_utma=1.1566903102.1484110574.1484110574.1484110574.1&_utmz=1.1484110574.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&_utmht=1484110578063&_u=SSCCiEQqB~&jid=1150053751&cid=1566903102.1484110574&tid=UA-9968643-26&gtm=GTM-5T6BP3&cd1=wewscwww1112&z=1437122085 HTTP/1.1

Host: www.google-analytics.com
GET /collect?v=1&amp;_v=j47&amp;a=722657047&amp;t=pageview&amp;_s=1&amp;dl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;ul=en-us&amp;de=ISO-8859-1&amp;dt=Official%20USA%20Site%20-%20Save%20the%20Children&amp;sd=24-bit&amp;sr=1176x885&amp;vp=1159x758&amp;je=1&amp;fl=10.0%20r45&amp;_utma=1.1566903102.1484110574.1484110574.1484110574.1&amp;_utmz=1.1484110574.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&amp;_utmht=1484110578063&amp;_u=SSCCiEQqB~&amp;jid=1150053751&amp;cid=1566903102.1484110574&amp;tid=UA-9968643-26&amp;gtm=GTM-5T6BP3&amp;cd1=wewscwww1112&amp;z=1437122085 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
Access-Control-Allow-Origin: *
Date: Wed, 28 Dec 2016 00:15:46 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 1226432
GET /orbserv/hbjs?pixId=35342&pcv=54 HTTP/1.1

Host: action.media6degrees.com
GET /orbserv/hbjs?pixId=35342&amp;pcv=54 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 204.2.197.202
HTTP/1.1 302 Found
HTTP/1.1 302 Found
Date: Wed, 11 Jan 2017 04:56:17 GMT
Server: Apache-Coyote/1.1
P3P: CP=&quot;COM NAV INT STA NID OUR IND NOI&quot;
Pragma: no-cache
Cache-Control: no-cache
Location: http://action.media6degrees.com/orbserv/hbjs?pixId=35342&amp;pcv=54&amp;cckz=true
Content-Length: 0
Set-Cookie: cckz=1ojln1u; Domain=media6degrees.com; Expires=Wed, 11-Jan-2017 05:06:18 GMT; Path=/ cckz=1ojln1u; Domain=media6degrees.com; Expires=Mon, 10-Jul-2017 04:56:18 GMT; Path=/
Connection: close
GET /eps?pt=e0o0g8&pid=6098&uid=Q5373969782126021037J&l=true HTTP/1.1

Host: px.owneriq.net
GET /eps?pt=e0o0g8&amp;pid=6098&amp;uid=Q5373969782126021037J&amp;l=true HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 184.86.53.103
HTTP/1.1 200 OK
Content-Type: text/html
Server: Apache/2.2.15 (CentOS)
Set-Cookie: si=Q5373969782126021037J; expires=Mon, 10 Jan 2022 04:56:18 GMT; path=/; domain=.owneriq.net p2=gguuid.oxc.rmuuid.ac.rc.bsc.tapq.cc.cwc.apq.lrc.nsc.pmc.brc.roc.adpq.bkc.kc.stc;expires=None; path=/; domain=.owneriq.net stc=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net kc=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net bkc=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net adpq=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net roc=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net brc=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net pmc=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net nsc=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net lrc=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net apq=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net cwc=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net cc=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net tapq=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net bsc=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net rc=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net ac=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net rmuuid=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net oxc=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net gguuid=1;expires=Sat, 21 Jan 2017 04:56:18 GMT; path=/; domain=.owneriq.net
X-Powered-By: PHP/5.3.3
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=36282
Date: Wed, 11 Jan 2017 04:56:18 GMT
Content-Length: 1237
Connection: keep-alive
GET /piwik/tv2track.js HTTP/1.1

Host: collector-412.tvsquared.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 52.31.118.246
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Date: Wed, 11 Jan 2017 04:56:18 GMT
Etag: &quot;575fc977-210d&quot;
Last-Modified: Tue, 14 Jun 2016 09:08:07 GMT
Server: nginx/1.9.3 (Ubuntu)
Content-Length: 8461
Connection: keep-alive
GET /app1/SmarterHandler.ashx?r=1070801869&i=fyl6dahrce-1092&cb=_smtr.postprocess&bv=2.7.0&utc=-60&pt=5&href=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&hostn=www.savethechildren.org&pathn=%2Fsite%2Fc.8rklixmgipi4e%2Fb.6115947%2Fk.b143%2Fofficial_usa_site.htm HTTP/1.1

Host: tr2.smarterhq.io
GET /app1/SmarterHandler.ashx?r=1070801869&amp;i=fyl6dahrce-1092&amp;cb=_smtr.postprocess&amp;bv=2.7.0&amp;utc=-60&amp;pt=5&amp;href=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;hostn=www.savethechildren.org&amp;pathn=%2Fsite%2Fc.8rklixmgipi4e%2Fb.6115947%2Fk.b143%2Fofficial_usa_site.htm HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 52.203.75.153
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Cache-Control: no-cache, no-store
Date: Wed, 11 Jan 2017 04:56:17 GMT
Expires: -1
Pragma: no-cache
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 296
Connection: keep-alive
GET /j/?pt=e0o0g8&t=f%7C%22%22&s=1vme HTTP/1.1

Host: px.owneriq.net
GET /j/?pt=e0o0g8&amp;t=f%7C%22%22&amp;s=1vme HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 184.86.53.103
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 11 Jan 2017 04:56:19 GMT
Content-Length: 483
Connection: keep-alive
GET /orbserv/hbjs?pixId=35342&pcv=54&cckz=true HTTP/1.1

Host: action.media6degrees.com
GET /orbserv/hbjs?pixId=35342&amp;pcv=54&amp;cckz=true HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: cckz=1ojln1u
 204.2.197.202
HTTP/1.1 200 OK
Content-Type: text/html;charset=ISO-8859-1
Date: Wed, 11 Jan 2017 04:56:18 GMT
Server: Apache-Coyote/1.1
P3P: CP=&quot;COM NAV INT STA NID OUR IND NOI&quot;
Pragma: no-cache
Cache-Control: no-cache
Content-Language: en-US
Content-Length: 5
Set-Cookie: clid=2ojln1v01170aphfknaaw96n000000010a010201101; Domain=media6degrees.com; Expires=Mon, 10-Jul-2017 04:56:19 GMT; Path=/ sglst=&quot;&quot;; Domain=media6degrees.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ rdrlst=&quot;&quot;; Domain=media6degrees.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ adh=&quot;&quot;; Domain=media6degrees.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ acs=015020k0l0m0n1ojln1vxzt10xzt10xzt10xzt10; Domain=media6degrees.com; Expires=Mon, 10-Jul-2017 04:56:19 GMT; Path=/ lbh=1i372tq01r9q1013w; Domain=media6degrees.com; Expires=Mon, 10-Jul-2017 04:56:19 GMT; Path=/ cckz=&quot;&quot;; Domain=media6degrees.com; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/ JSESSIONID=2564A90F11B85B95624557254A846909; Path=/orbserv/; HttpOnly
Connection: close
GET /w/1.0/sd?id=537073059&val=Q5373969782126021037J HTTP/1.1

Host: us-u.openx.net
GET /w/1.0/sd?id=537073059&amp;val=Q5373969782126021037J HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 173.241.240.143
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Set-Cookie: i=2018cfd8-b6f2-4c3b-aa3f-620360815474|1484110579; Version=1; Expires=Thu, 11-Jan-2018 04:56:19 GMT; Max-Age=31536000; Domain=.openx.net; Path=/
Server: OXGW/11.40.7.5
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Location: http://us-u.openx.net/w/1.0/sd?cc=1&amp;id=537073059&amp;val=Q5373969782126021037J
Date: Wed, 11 Jan 2017 04:56:19 GMT
Content-Length: 0
GET /sync?dsp_id=219&user_id=Q5373969782126021037J&expires=10 HTTP/1.1

Host: x.bidswitch.net
GET /sync?dsp_id=219&amp;user_id=Q5373969782126021037J&amp;expires=10 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 52.58.229.22
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.7.10
Date: Wed, 11 Jan 2017 04:56:19 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Location: http://x.bidswitch.net/ul_cb/sync?dsp_id=219&amp;user_id=Q5373969782126021037J&amp;expires=10
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Set-Cookie: tuuid=4d8eb657-8947-4eaa-8e5e-bfa3fdd5d0ea; path=/; expires=Thu, 11-Jan-2018 04:56:19 GMT; domain=.bidswitch.net tuuid_last_update=1484110579; path=/; expires=Thu, 11-Jan-2018 04:56:19 GMT; domain=.bidswitch.net c=1484110579; path=/; expires=Thu, 11-Jan-2018 04:56:19 GMT; domain=.bidswitch.net
GET /bh/rtset?do=add&pid=541254&ev=Q5373969782126021037J HTTP/1.1

Host: bh.contextweb.com
GET /bh/rtset?do=add&amp;pid=541254&amp;ev=Q5373969782126021037J HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 151.101.84.166
HTTP/1.1 200 OK
Content-Type: image/gif; charset=ISO-8859-1
P3P: policyref=&quot;/bh/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT&quot;
Set-Cookie: V=9UYzqKaNguzm;Path=/;Domain=.contextweb.com;Expires=Sat, 06-Jan-2018 04:56:19 GMT pb_rtb_ev=3-dpz|2JB.0.Q5373969782126021037J;Path=/;Domain=.contextweb.com;Expires=Thu, 11-Jan-2018 04:56:19 GMT sto-id-20480-bh=DHANNMAKJCBP; Domain=contextweb.com; Expires=Wed, 11-Jan-2017 05:11:18 GMT; Path=/
Expires: -1
CW-Server: ams-bh00
Cache-Control: private, max-age=0, no-cache, no-store
Content-Language: en-US
Server: Jetty(9.2.3.v20140905)
Transfer-Encoding: chunked
Accept-Ranges: bytes
Date: Wed, 11 Jan 2017 04:56:19 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-bma7029-BMA
X-Cache: MISS
X-Cache-Hits: 0
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI2NDYmdGw9MTI5NjAw&piggybackCookie=uid:Q5373969782126021037J HTTP/1.1

Host: image2.pubmatic.com
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI2NDYmdGw9MTI5NjAw&amp;piggybackCookie=uid:Q5373969782126021037J HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 198.47.127.15
HTTP/1.1 200 OK
Content-Type: image/gif; charset=utf-8
Date: Wed, 11 Jan 2017 04:56:19 GMT
Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/1.0.0-fips mod_fastcgi/2.4.6
Set-Cookie: KRTBCOOKIE_286=5193-uid:Q5373969782126021037J; domain=pubmatic.com; expires=Tue, 11-Apr-2017 04:56:19 GMT; path=/ PUBRETARGET=dummy; domain=pubmatic.com; expires=Wed, 11-Jan-2017 04:56:19 GMT; path=/ PUBMDCID=3; domain=pubmatic.com; expires=Tue, 11-Apr-2017 04:56:19 GMT; path=/
X-lat: Pug22005:0:525
Content-Length: 42
P3P: CP=&quot;NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC&quot;, CP=&quot;NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC&quot;
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Connection: close
GET /idsync/ex/receive?partner_device_id=Q5373969782126021037J&partner_id=916 HTTP/1.1

Host: pixel.tapad.com
GET /idsync/ex/receive?partner_device_id=Q5373969782126021037J&amp;partner_id=916 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 185.57.60.185
HTTP/1.1 302 Found
HTTP/1.1 302 Found
Server: nginx/1.11.3
Date: Wed, 11 Jan 2017 04:56:19 GMT
Content-Length: 0
Connection: keep-alive
P3P: policyref=&quot;http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
Set-Cookie: TapAd_TS=1484110579409;Expires=Sun, 12 Mar 2017 04:56:19 GMT;Path=/;Domain=.tapad.com TapAd_DID=4a6f8411-d7ba-11e6-906d-005056a2376a;Expires=Sun, 12 Mar 2017 04:56:19 GMT;Path=/;Domain=.tapad.com
Location: http://pixel.tapad.com/idsync/ex/receive/check?partner_device_id=Q5373969782126021037J&amp;partner_id=916
GET /usermatch.gif?partner=owneriq&partner_uid=Q5373969782126021037J HTTP/1.1

Host: beacon.krxd.net
GET /usermatch.gif?partner=owneriq&amp;partner_uid=Q5373969782126021037J HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 54.217.205.184
HTTP/1.1 204 No Content
Content-Type: image/gif
Cache-Control: private, no-cache, no-store
Content-Length: 0
Date: Wed, 11 Jan 2017 04:56:19 GMT
P3P: policyref=&quot;http://cdn.krxd.net/kruxcontent/p3p.xml&quot;, CP=&quot;NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC&quot;
Server: Apache
Set-Cookie: ServedBy=beacon-a232-dub; path=/; domain=.krxd.net; expires=Mon, 10-Jul-2017 18:16:19 GMT _kuid_=LAeT6XC9; path=/; expires=Mon, 10-Jul-17 04:56:19 GMT; domain=.krxd.net
X-Request-Time: D=196 t=1484110579427024
X-Served-By: beacon-a232-dub.krxd.net
Connection: keep-alive
GET /crum?cm_dsp_id=1&cm_user_id=Q5373969782126021037J HTTP/1.1

Host: dsum.casalemedia.com
GET /crum?cm_dsp_id=1&amp;cm_user_id=Q5373969782126021037J HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 195.159.219.8
HTTP/1.1 200 OK
Content-Type: image/gif
Server: Apache
Expires: Wed, 11 Jan 2017 04:56:19 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 11 Jan 2017 04:56:19 GMT
Content-Length: 43
Connection: keep-alive
GET /pixel?google_nid=owneriq1&google_cm&google_sc&google_ula=1174&google_hm=UTUzNzM5Njk3ODIxMjYwMjEwMzdK&esi=1 HTTP/1.1

Host: cm.g.doubleclick.net
GET /pixel?google_nid=owneriq1&amp;google_cm&amp;google_sc&amp;google_ula=1174&amp;google_hm=UTUzNzM5Njk3ODIxMjYwMjEwMzdK&amp;esi=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: test_cookie=CheckForPermission
 108.177.14.154
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Location: http://px.owneriq.net/cm?id=&amp;esi=1&amp;google_gid=CAESEL5j3AsfPe9TLDy17x8BtEs&amp;google_cver=1&amp;google_ula=1174,0
Date: Wed, 11 Jan 2017 04:56:19 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 318
X-XSS-Protection: 1; mode=block
Set-Cookie: id=22a08509030e0016||t=1484110579|et=730|cs=002213fd480c6ddcb722141304; expires=Fri, 11-Jan-2019 04:56:19 GMT; path=/; domain=.doubleclick.net test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUnSppCY4xcxhhtqUGfKKlxpkP8IVEoyJs-RVY5aCKy8WxxC1V3CUQ; expires=Fri, 11-Jan-2019 04:56:19 GMT; path=/; domain=.doubleclick.net; HttpOnly
GET /v1/map/2661c1bff9e7be77/Q5373969782126021037J/ HTTP/1.1

Host: geo-um.btrll.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 185.62.216.117
HTTP/1.1 302 Found
HTTP/1.1 302 Found
Server: nginx/1.8.0
Date: Wed, 11 Jan 2017 04:56:19 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: BR_APS=3WHW680orjAEBP3OYiQ; Expires=Thu, 11 Jan 2018 04:56:19 GMT; Path=/; Domain=.btrll.com
P3P: CP=&quot;IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA&quot;
Access-Control-Allow-Origin: *
Expires: Tue, 01 Jan 1980 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: http://cache.btrll.com/default/Pix-1x1.gif
GET /oiq?uid=Q5373969782126021037J HTTP/1.1

Host: sync.sharethis.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 52.59.12.20
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Wed, 11 Jan 2017 04:56:19 GMT
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;ALL DSP COR CURa ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV INT DEM&quot;
Set-Cookie: __stid=CvQBBVh1uvMAAAAPEXCSAw==; Path=/; Domain=sharethis.com; Expires=Thu, 11 Jan 2018 04:56:19 GMT
Stid: CvQBBVh1uvMAAAAPEXCSAw==
Content-Length: 42
Connection: keep-alive
GET /tap.php?v=11581&nid=2395&put=Q5373969782126021037J HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?v=11581&amp;nid=2395&amp;put=Q5373969782126021037J HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 213.19.162.80
HTTP/1.1 307 Temporary Redirect
HTTP/1.1 307 Temporary Redirect
Set-Cookie: c=1; Path=/
Location: /tap.php?cookie_redirect=1&amp;v=11581&amp;nid=2395&amp;put=Q5373969782126021037J
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Wed, 11 Jan 2017 04:56:18 GMT
Server: Rubicon Project
GET /ep?sid%5B%5D=5113135689&sid%5B%5D=5113135694&sid%5B%5D=5113135699&sid%5B%5D=5112825659&sid%5B%5D=5112825664&pt=e0o0g8&uid=Q5373969782126021037J&jcs=1 HTTP/1.1

Host: px.owneriq.net
GET /ep?sid%5B%5D=5113135689&amp;sid%5B%5D=5113135694&amp;sid%5B%5D=5113135699&amp;sid%5B%5D=5112825659&amp;sid%5B%5D=5112825664&amp;pt=e0o0g8&amp;uid=Q5373969782126021037J&amp;jcs=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: si=Q5373969782126021037J; p2=gguuid.oxc.rmuuid.ac.rc.bsc.tapq.cc.cwc.apq.lrc.nsc.pmc.brc.roc.adpq.bkc.kc.stc; stc=1; kc=1; bkc=1; adpq=1; roc=1; brc=1; pmc=1; nsc=1; lrc=1; apq=1; cwc=1; cc=1; tapq=1; bsc=1; rc=1; ac=1; rmuuid=1; oxc=1; gguuid=1
 184.86.53.103
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Server: Apache/2.2.15 (CentOS)
Content-Length: 154
Location: http://px.owneriq.net/ecc?redir=false&amp;uid=Q5373969782126021037J&amp;ref=%2Fep
Set-Cookie: ss=;expires=None; path=/; domain=.owneriq.net p2=None;expires=None; path=/; domain=.owneriq.net p1=;expires=None; path=/; domain=.owneriq.net
X-Powered-By: PHP/5.3.3
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Vary: Accept-Encoding
Cache-Control: max-age=36296
Date: Wed, 11 Jan 2017 04:56:19 GMT
Connection: keep-alive
GET /pxj?bidder=13&seg=703107&action=su(%27Q5373969782126021037J%27) HTTP/1.1

Host: ib.adnxs.com
GET /pxj?bidder=13&amp;seg=703107&amp;action=su(%27Q5373969782126021037J%27) HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: sess=1; uuid2=2685042323431053452; anj=dTM7k!M4/8DYRWSF']wIg2In9u#JW/!@wnf]meq8dWME4(EW&lt;KRl3pW
 185.33.220.210
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.9.13
Date: Wed, 11 Jan 2017 04:56:21 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref=&quot;http://cdn.adnxs.com/w3c/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
X-XSS-Protection: 0
Set-Cookie: anj=dTM7k!M4/8DunaTF']wIg2In9u#JW/!EKyr%&gt;LCy66iIZ$Z_F&lt;!!*iB%Ub=N; Path=/; Max-Age=7776000; Expires=Tue, 11-Apr-2017 04:56:21 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Thu, 12-Jan-2017 04:56:21 GMT; Domain=.adnxs.com; HttpOnly uuid2=2685042323431053452; Path=/; Max-Age=7776000; Expires=Tue, 11-Apr-2017 04:56:21 GMT; Domain=.adnxs.com; HttpOnly
GET /piwik/piwik.php?action_name=Official%20USA%20Site%20-%20Save%20the%20Children&idsite=TV-548172-1&rec=1&r=512978&h=5&m=56&s=19&url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&_id=5a70c87cf5b1926e&_idts=1484110579&_idvc=0&_idn=1&_viewts=&cs=ISO-8859-1&pdf=1&qt=0&realp=0&wma=1&dir=0&fla=1&java=1&gears=0&ag=0&cookie=1&res=1176x885 HTTP/1.1

Host: collector-412.tvsquared.com
GET /piwik/piwik.php?action_name=Official%20USA%20Site%20-%20Save%20the%20Children&amp;idsite=TV-548172-1&amp;rec=1&amp;r=512978&amp;h=5&amp;m=56&amp;s=19&amp;url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;_id=5a70c87cf5b1926e&amp;_idts=1484110579&amp;_idvc=0&amp;_idn=1&amp;_viewts=&amp;cs=ISO-8859-1&amp;pdf=1&amp;qt=0&amp;realp=0&amp;wma=1&amp;dir=0&amp;fla=1&amp;java=1&amp;gears=0&amp;ag=0&amp;cookie=1&amp;res=1176x885 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 52.31.118.246
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Wed, 11 Jan 2017 04:56:19 GMT
P3P: CP='OTI DSP COR NID STP UNI OTPa OUR'
Server: nginx/1.9.3 (Ubuntu)
Set-Cookie: _pk_uid=0%3DczoxNjoiMjVkOTdiNTcxM2JhYTljNiI7%3A_%3D23ff84f6b5cb2ce61ff90309669d9f81bfbbce53; expires=Fri, 11-Jan-2019 04:56:19 GMT
X-Powered-By: PHP/5.6.11-1ubuntu3.4
Content-Length: 43
Connection: keep-alive
GET /pixel?adv=95413&t=2&id=1722475&piggyback=http%3A%2F%2Fads.yahoo.com%2Fcms%2Fv1%3Fesig%3D1%7E1d05283fd37fe3ca8c3fbe8814c9bf54208864b5%26nwid%3D10000482661%26sigv%3D1 HTTP/1.1

Host: ads.yahoo.com
GET /pixel?adv=95413&amp;t=2&amp;id=1722475&amp;piggyback=http%3A%2F%2Fads.yahoo.com%2Fcms%2Fv1%3Fesig%3D1%7E1d05283fd37fe3ca8c3fbe8814c9bf54208864b5%26nwid%3D10000482661%26sigv%3D1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 217.12.15.54
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
Date: Wed, 11 Jan 2017 04:56:19 GMT
P3P: policyref=&quot;https://policies.yahoo.com/w3c/p3p.xml&quot;, CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV&quot;
Set-Cookie: B=8anin31c7benj&amp;b=3&amp;s=oa; expires=Sat, 12-Jan-2019 04:56:19 GMT; path=/; domain=.yahoo.com
Location: http://px.owneriq.net/ermcm?t=2&amp;id=1722475&amp;piggyback=http://ads.yahoo.com/cms/v1?esig=1~1d05283fd37fe3ca8c3fbe8814c9bf54208864b5&amp;amp;nwid=10000482661&amp;amp;sigv=1&amp;xid=AcSVR901t16lCG6u9hPwjkU9
Cache-Control: private
Content-Length: 0
Age: 0
Connection: keep-alive
Server: ATS
GET /mapuser?providerid=1044;userid=Q5373969782126021037J HTTP/1.1

Host: ums.adtechus.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 152.163.56.2
HTTP/1.0 302 Moved Temporarily
HTTP/1.0 302 Moved Temporarily
Connection: keep-alive
Expires: Mon, 15 Jun 1998 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache
Location: http://ums.adtechus.com/mapuser?providerid=1044;cfp=1;rndc=1484110579;userid=Q5373969782126021037J
Content-Length: 0
P3P: CP=&quot;NOI DSP DEVa OUR BUS UNI COM NAV INT&quot;
Set-Cookie: CfP=1;domain=adtechus.com;path=/
GET /site/26763?id=Q5373969782126021037J HTTP/1.1

Host: tags.bluekai.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 169.47.30.64
HTTP/1.1 302 Found
Content-Type: text/html
Date: Wed, 11 Jan 2017 04:56:19 GMT
P3P: CP=&quot;NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV&quot;, policyref=&quot;http://tags.bluekai.com/w3c/p3p.xml&quot;
Set-Cookie: bkdc=wdc; expires=Mon, 10-Jul-2017 04:56:19 GMT; path=/; domain=.bluekai.com bku=itQ99wmb5PMCM35a; expires=Mon, 10-Jul-2017 04:56:19 GMT; path=/; domain=.bluekai.com
Location: http://tags.bluekai.com/site/26763?dt=0&amp;r=1230104838&amp;sig=3213666233&amp;bkca=KJpnEnWBBeDtBfR6Lpul1e/61M1y1MxyBFzY9WoWORz=
Content-Length: 0
BK-Server: e9b6
nnCoection: close
GET /379208.gif?partner_uid=Q5373969782126021037J HTTP/1.1

Host: idsync.rlcdn.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 52.72.73.156
HTTP/1.1 302 Found
Content-Type: image/gif; charset=ISO-8859-1
Cache-Control: no-cache, no-store
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://idsync.rlcdn.com/379208.gif?partner_uid=Q5373969782126021037J&amp;redirect=1
P3P: CP: &quot;NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE&quot;
Set-Cookie: ck1=ck1;Domain=.rlcdn.com;Expires=Mon, 10-Jul-2017 04:56:15 GMT
Content-Length: 0
Connection: keep-alive
GET /usersync/owneriq/Q5373969782126021037J HTTP/1.1

Host: sync.1rx.io

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 8.30.11.14
HTTP/1.1 302 Found
Content-Type: text/html
Server: nginx
Date: Wed, 11 Jan 2017 04:56:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-03d96c19-7a66-4e38-8c69-80c2be8d615c%22%7D; path=/; expires=Fri, 11 Jan 2019 04:56:19 GMT; domain=.1rx.io; httponly
Location: http://sync.1rx.io/usersync/owneriq/Q5373969782126021037J?zcc=1&amp;dspret=0
Etag: RX03d96c197a664e388c6980c2be8d615c
GET /ibs:dpid=53196&dpuuid=Q5373969782126021037J HTTP/1.1

Host: dpm.demdex.net
GET /ibs:dpid=53196&amp;dpuuid=Q5373969782126021037J HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 54.72.198.94
HTTP/1.1 302 Found
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
Date: Wed, 11 Jan 2017 04:56:19 GMT
Expires: Thu, 01 Jan 2009 00:00:00 GMT
Location: http://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=53196&amp;dpuuid=Q5373969782126021037J
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT&quot;
Pragma: no-cache
Set-Cookie: demdex=63717470582168146550981519675765319128;Path=/;Domain=.demdex.net;Expires=Mon, 10-Jul-2017 04:56:19 GMT
Content-Length: 0
Connection: keep-alive
GET /idsync/ex/receive/check?partner_device_id=Q5373969782126021037J&partner_id=916 HTTP/1.1

Host: pixel.tapad.com
GET /idsync/ex/receive/check?partner_device_id=Q5373969782126021037J&amp;partner_id=916 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: TapAd_TS=1484110579409; TapAd_DID=4a6f8411-d7ba-11e6-906d-005056a2376a
 185.57.60.185
HTTP/1.1 200 OK
Content-Type: image/png
Server: nginx/1.11.3
Date: Wed, 11 Jan 2017 04:56:19 GMT
Content-Length: 95
Connection: keep-alive
P3P: policyref=&quot;http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml&quot;, CP=&quot;NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE&quot;
Set-Cookie: TapAd_TS=1484110579409;Expires=Sun, 12 Mar 2017 04:56:19 GMT;Path=/;Domain=.tapad.com TapAd_DID=4a6f8411-d7ba-11e6-906d-005056a2376a;Expires=Sun, 12 Mar 2017 04:56:19 GMT;Path=/;Domain=.tapad.com
GET /tap.php?cookie_redirect=1&v=11581&nid=2395&put=Q5373969782126021037J HTTP/1.1

Host: pixel.rubiconproject.com
GET /tap.php?cookie_redirect=1&amp;v=11581&amp;nid=2395&amp;put=Q5373969782126021037J HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: c=1
 213.19.162.80
HTTP/1.1 200 OK
Content-Type: image/gif
X-RPHost: jtkc-84i1MeaK-gZBcGqOg
Set-Cookie: rpb=11581%3D1; Domain=.rubiconproject.com; Expires=Fri, 10-Feb-2017 04:56:19 GMT; Path=/ rpx=11581%3D61604%2C0%2C1%2C%2C; Domain=.pixel.rubiconproject.com; Expires=Fri, 10-Feb-2017 04:56:19 GMT; Path=/ put_2395=Q5373969782126021037J; Domain=.rubiconproject.com; Expires=Fri, 10-Feb-2017 03:59:59 GMT; Path=/ khaos=IXSH4C6I-1I-K7TF; Domain=.rubiconproject.com; Expires=Wed, 12-Jul-2017 16:56:19 GMT; Path=/
P3P: CP=&quot;NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT&quot;
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Connection: keep-alive
Content-Length: 42
Date: Wed, 11 Jan 2017 04:56:18 GMT
Server: Rubicon Project
GET /ecc?redir=false&uid=Q5373969782126021037J&ref=%2Fep HTTP/1.1

Host: px.owneriq.net
GET /ecc?redir=false&amp;uid=Q5373969782126021037J&amp;ref=%2Fep HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: si=Q5373969782126021037J; p2=None; stc=1; kc=1; bkc=1; adpq=1; roc=1; brc=1; pmc=1; nsc=1; lrc=1; apq=1; cwc=1; cc=1; tapq=1; bsc=1; rc=1; ac=1; rmuuid=1; oxc=1; gguuid=1; ss=; p1=
 184.86.53.103
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Server: Apache/2.2.15 (CentOS)
Content-Length: 154
Location: http://px.owneriq.net/fr/epx.gif
X-Powered-By: PHP/5.3.3
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Vary: Accept-Encoding
Cache-Control: max-age=33369
Date: Wed, 11 Jan 2017 04:56:19 GMT
Connection: keep-alive
GET /cm?id=&esi=1&google_gid=CAESEL5j3AsfPe9TLDy17x8BtEs&google_cver=1&google_ula=1174,0 HTTP/1.1

Host: px.owneriq.net
GET /cm?id=&amp;esi=1&amp;google_gid=CAESEL5j3AsfPe9TLDy17x8BtEs&amp;google_cver=1&amp;google_ula=1174,0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: si=Q5373969782126021037J; p2=gguuid.oxc.rmuuid.ac.rc.bsc.tapq.cc.cwc.apq.lrc.nsc.pmc.brc.roc.adpq.bkc.kc.stc; stc=1; kc=1; bkc=1; adpq=1; roc=1; brc=1; pmc=1; nsc=1; lrc=1; apq=1; cwc=1; cc=1; tapq=1; bsc=1; rc=1; ac=1; rmuuid=1; oxc=1; gguuid=1
 184.86.53.103
HTTP/1.1 200 OK
Content-Type: image/gif
Server: Apache/2.2.15 (CentOS)
Content-Length: 124
Set-Cookie: gguuid=CAESEL5j3AsfPe9TLDy17x8BtEs; expires=Sat, 21 Jan 2017 04:56:19 GMT; path=/; domain=.owneriq.net
X-Powered-By: PHP/5.3.3
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Vary: Accept-Encoding
Cache-Control: max-age=78932
Date: Wed, 11 Jan 2017 04:56:19 GMT
Connection: keep-alive
GET /w/1.0/sd?cc=1&id=537073059&val=Q5373969782126021037J HTTP/1.1

Host: us-u.openx.net
GET /w/1.0/sd?cc=1&amp;id=537073059&amp;val=Q5373969782126021037J HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: i=2018cfd8-b6f2-4c3b-aa3f-620360815474|1484110579
 173.241.240.143
HTTP/1.1 200 OK
Content-Type: text/html
Vary: Accept
Server: OXGW/11.40.7.5
Pragma: no-cache
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Date: Wed, 11 Jan 2017 04:56:19 GMT
Cache-Control: private, max-age=0, no-cache
Transfer-Encoding: chunked
Content-Encoding: gzip
GET /api/onsite/?instanceId=fyl6dahrce-1092&loiId=0afdfb43-bad7-e611-814d-0ec33c23da30&sessionId=0bfdfb43-bad7-e611-814d-0ec33c23da30&url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&callback=_smtr.postprocess&r=265826527 HTTP/1.1

Host: onsite.smarterhq.io
GET /api/onsite/?instanceId=fyl6dahrce-1092&amp;loiId=0afdfb43-bad7-e611-814d-0ec33c23da30&amp;sessionId=0bfdfb43-bad7-e611-814d-0ec33c23da30&amp;url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;callback=_smtr.postprocess&amp;r=265826527 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 52.73.208.218
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
Date: Wed, 11 Jan 2017 04:56:19 GMT
Server: Microsoft-HTTPAPI/2.0
Content-Length: 112
Connection: keep-alive
GET /ul_cb/sync?dsp_id=219&user_id=Q5373969782126021037J&expires=10 HTTP/1.1

Host: x.bidswitch.net
GET /ul_cb/sync?dsp_id=219&amp;user_id=Q5373969782126021037J&amp;expires=10 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: tuuid=4d8eb657-8947-4eaa-8e5e-bfa3fdd5d0ea; tuuid_last_update=1484110579; c=1484110579
 52.58.229.22
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.7.10
Date: Wed, 11 Jan 2017 04:56:19 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Location: //ce.lijit.com/merge?pid=26&amp;3pid=4d8eb657-8947-4eaa-8e5e-bfa3fdd5d0ea
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Set-Cookie: tuuid=4d8eb657-8947-4eaa-8e5e-bfa3fdd5d0ea; path=/; expires=Thu, 11-Jan-2018 04:56:19 GMT; domain=.bidswitch.net tuuid_last_update=1484110579; path=/; expires=Thu, 11-Jan-2018 04:56:19 GMT; domain=.bidswitch.net
GET /ermcm?t=2&id=1722475&piggyback=http://ads.yahoo.com/cms/v1?esig=1~1d05283fd37fe3ca8c3fbe8814c9bf54208864b5&amp;nwid=10000482661&amp;sigv=1&xid=AcSVR901t16lCG6u9hPwjkU9 HTTP/1.1

Host: px.owneriq.net
GET /ermcm?t=2&amp;id=1722475&amp;piggyback=http://ads.yahoo.com/cms/v1?esig=1~1d05283fd37fe3ca8c3fbe8814c9bf54208864b5&amp;amp;nwid=10000482661&amp;amp;sigv=1&amp;xid=AcSVR901t16lCG6u9hPwjkU9 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: si=Q5373969782126021037J; p2=None; stc=1; kc=1; bkc=1; adpq=1; roc=1; brc=1; pmc=1; nsc=1; lrc=1; apq=1; cwc=1; cc=1; tapq=1; bsc=1; rc=1; ac=1; rmuuid=1; oxc=1; gguuid=1; ss=; p1=
 184.86.53.103
HTTP/1.1 200 OK
Content-Type: image/gif
Server: Apache/2.2.15 (CentOS)
Content-Length: 43
Set-Cookie: rmuuid=AcSVR901t16lCG6u9hPwjkU9; expires=Sat, 21 Jan 2017 04:56:19 GMT; path=/; domain=.owneriq.net
X-Powered-By: PHP/5.3.3
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Vary: Accept-Encoding
Cache-Control: max-age=82393
Date: Wed, 11 Jan 2017 04:56:19 GMT
Connection: keep-alive
GET /fr/epx.gif HTTP/1.1

Host: px.owneriq.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: si=Q5373969782126021037J; p2=None; stc=1; kc=1; bkc=1; adpq=1; roc=1; brc=1; pmc=1; nsc=1; lrc=1; apq=1; cwc=1; cc=1; tapq=1; bsc=1; rc=1; ac=1; rmuuid=1; oxc=1; gguuid=1; ss=; p1=
 184.86.53.103
HTTP/1.1 200 OK
Content-Type: image/gif
Server: Apache/2.2.15 (CentOS)
Content-Length: 43
X-Powered-By: PHP/5.3.3
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Cache-Control: max-age=535893
Expires: Tue, 17 Jan 2017 09:47:52 GMT
Date: Wed, 11 Jan 2017 04:56:19 GMT
Connection: keep-alive
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2017 04:56:19 GMT
Expires: Sun, 15 Jan 2017 04:56:19 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /demconf.jpg?et:ibs%7cdata:dpid=53196&dpuuid=Q5373969782126021037J HTTP/1.1

Host: dpm.demdex.net
GET /demconf.jpg?et:ibs%7cdata:dpid=53196&amp;dpuuid=Q5373969782126021037J HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: demdex=63717470582168146550981519675765319128
 54.72.198.94
HTTP/1.1 200 OK
Content-Type: image/gif
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
Date: Wed, 11 Jan 2017 04:56:19 GMT
DCS: irl1-prod-dcs-f9e0076f.edge-irl1.demdex.com master-5.2.0.20161115.204931 2ms
Expires: Thu, 01 Jan 2009 00:00:00 GMT
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT&quot;
Pragma: no-cache
Set-Cookie: demdex=63717470582168146550981519675765319128;Path=/;Domain=.demdex.net;Expires=Mon, 10-Jul-2017 04:56:19 GMT dpm=63717470582168146550981519675765319128;Path=/;Domain=.dpm.demdex.net;Expires=Mon, 10-Jul-2017 04:56:19 GMT
Content-Length: 42
Connection: keep-alive
GET /activityi;src=4266705;type=invmedia;cat=xs0zpcmo;ord=1? HTTP/1.1

Host: 4266705.fls.doubleclick.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 172.217.22.166
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
P3P: policyref=&quot;https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Timing-Allow-Origin: *
Date: Wed, 11 Jan 2017 04:56:19 GMT
Expires: Wed, 11 Jan 2017 04:56:19 GMT
Cache-Control: private, max-age=0
Strict-Transport-Security: max-age=21600
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 11-Jan-2017 05:11:19 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
Transfer-Encoding: chunked
GET /default/Pix-1x1.gif HTTP/1.1

Host: cache.btrll.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: BR_APS=3WHW680orjAEBP3OYiQ
 54.230.9.127
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 42
Connection: keep-alive
Date: Fri, 30 Dec 2016 04:09:20 GMT
Last-Modified: Mon, 18 Oct 2010 17:58:31 GMT
Etag: &quot;b4682377ddfbe4e7dabfddb2e543e842&quot;
x-amz-meta-permissions: 33188
x-amz-meta-owner: 33
x-amz-meta-group: 33
Accept-Ranges: bytes
Server: AmazonS3
Age: 80721
X-Cache: Hit from cloudfront
Via: 1.1 2a3894d93a2a1e3b94fb6ed07542ad37.cloudfront.net (CloudFront)
X-Amz-Cf-Id: Lmgv-XFCytgVnuW2JNc173M9KC82Ql0pjFCaCzXRHCDJlrDDxcuVVw==
GET /adscores/g.pixel?sid=9212281528&owneriqid=Q5373969782126021037J&&bounced=1 HTTP/1.1

Host: aa.agkn.com
GET /adscores/g.pixel?sid=9212281528&amp;owneriqid=Q5373969782126021037J&amp;&amp;bounced=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 54.77.164.43
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Wed,  11 Jan 2017 04:56:19 GMT
Connection: close
Server: AAWebServer
P3P: policyref=&quot;http://www.agkn.com/p3p/p3p.xml&quot;,CP=&quot;NOI NID&quot;
Content-Length: 43
Set-Cookie: ab=0001%3Ai5D3CVkuTO2fDlEZ8C6%2BHfZ7Djq8FGwd; Domain=.agkn.com; Expires=Wed, 11 Jan 2018 04:56:19 GMT; Path=/
POST / HTTP/1.1

Host: ocsp.entrust.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 103
Content-Type: application/ocsp-request
 104.123.128.217
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Transfer-Encoding: Binary
Content-Length: 2108
Last-Modified: Wed, 11 Jan 2017 00:27:11 GMT
Etag: &quot;19D64C87A7E4D7719973A7883E062C64E6638846&quot;
Cache-Control: public, no-transform, must-revalidate, max-age=802
Expires: Wed, 11 Jan 2017 05:09:41 GMT
Date: Wed, 11 Jan 2017 04:56:19 GMT
Connection: keep-alive
GET /379208.gif?partner_uid=Q5373969782126021037J&redirect=1 HTTP/1.1

Host: idsync.rlcdn.com
GET /379208.gif?partner_uid=Q5373969782126021037J&amp;redirect=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: ck1=ck1
 52.72.73.156
HTTP/1.1 200 OK
Content-Type: image/gif; charset=ISO-8859-1
Cache-Control: no-cache, no-store
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP: &quot;NON DSP COR PSDo SAMo BUS IND UNI COM NAV INT POL PRE&quot;
Set-Cookie: rlas3=tgB7wP51i4kJRKrKX7pp4DoN5sgx15uUvkN3MECg3qqMyA9jEACu5w==;Domain=.rlcdn.com;Expires=Mon, 10-Jul-2017 04:56:16 GMT rtn1=9D4tZbioRab4axKTL5fOGA==;Domain=.rlcdn.com;Expires=Mon, 10-Jul-2017 04:56:17 GMT
Content-Length: 43
Connection: keep-alive
GET /site/26763?dt=0&r=1230104838&sig=3213666233&bkca=KJpnEnWBBeDtBfR6Lpul1e/61M1y1MxyBFzY9WoWORz= HTTP/1.1

Host: tags.bluekai.com
GET /site/26763?dt=0&amp;r=1230104838&amp;sig=3213666233&amp;bkca=KJpnEnWBBeDtBfR6Lpul1e/61M1y1MxyBFzY9WoWORz= HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: bkdc=wdc; bku=itQ99wmb5PMCM35a
 169.47.30.64
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Wed, 11 Jan 2017 04:56:19 GMT
P3P: CP=&quot;NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV&quot;, policyref=&quot;http://tags.bluekai.com/w3c/p3p.xml&quot;
Expires: Thu, 12 Jan 2017 04:56:19 GMT
Cache-Control: max-age=86400, private
Content-Length: 62
Set-Cookie: bku=itQ99wmb5PMCM35a; expires=Mon, 10-Jul-2017 04:56:19 GMT; path=/; domain=.bluekai.com
BK-Server: 26e3
nnCoection: close
GET /usersync/owneriq/Q5373969782126021037J?zcc=1&dspret=0 HTTP/1.1

Host: sync.1rx.io
GET /usersync/owneriq/Q5373969782126021037J?zcc=1&amp;dspret=0 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-03d96c19-7a66-4e38-8c69-80c2be8d615c%22%7D
 8.30.11.14
HTTP/1.1 200 OK
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 11 Jan 2017 04:56:19 GMT
Content-Length: 0
Connection: keep-alive
GET /mapuser?providerid=1044;cfp=1;rndc=1484110579;userid=Q5373969782126021037J HTTP/1.1

Host: ums.adtechus.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: CfP=1
 152.163.56.2
HTTP/1.0 200 OK
Content-Type: image/gif
Connection: keep-alive
Expires: Mon, 15 Jun 1998 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache
Content-Length: 43
P3P: CP=&quot;NOI DSP DEVa OUR BUS UNI COM NAV INT&quot;
Set-Cookie: JEB2=5875ADF86E651A43E0324050FC6477DA;expires=Fri, 11 Jan 2019 4:56:19 GMT;domain=adtechus.com;path=/
GET /pagead/conversion/1069852215/?random=1484110575012&cv=8&fst=1484110575012&num=1&fmt=3&value=0&label=UiVPCOGIxgIQt8yS_gM&bg=ffffff&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&tiba=Official%20USA%20Site%20-%20Save%20the%20Children HTTP/1.1

Host: www.googleadservices.com
GET /pagead/conversion/1069852215/?random=1484110575012&amp;cv=8&amp;fst=1484110575012&amp;num=1&amp;fmt=3&amp;value=0&amp;label=UiVPCOGIxgIQt8yS_gM&amp;bg=ffffff&amp;hl=en&amp;guid=ON&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_his=1&amp;u_tz=60&amp;u_java=true&amp;u_nplug=10&amp;u_nmime=92&amp;frm=0&amp;url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;tiba=Official%20USA%20Site%20-%20Save%20the%20Children HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 108.177.14.156
HTTP/1.1 302 Found
Content-Type: image/gif
P3P: policyref=&quot;https://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Timing-Allow-Origin: *
Date: Wed, 11 Jan 2017 04:56:19 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1069852215/?random=202748696&amp;cv=8&amp;fst=1484110575012&amp;num=1&amp;fmt=3&amp;value=0&amp;label=UiVPCOGIxgIQt8yS_gM&amp;bg=ffffff&amp;hl=en&amp;guid=ON&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_his=1&amp;u_tz=60&amp;u_java=true&amp;u_nplug=10&amp;u_nmime=92&amp;frm=0&amp;url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;tiba=Official%20USA%20Site%20-%20Save%20the%20Children&amp;ctc_id=CAIVAgAAAB0CAAAA&amp;ct_cookie_present=false&amp;convclickts=0&amp;ocp_id=87p1WODDLt6LywWb6YG4Aw
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2017 04:56:19 GMT
Expires: Sun, 15 Jan 2017 04:56:19 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
POST / HTTP/1.1

Host: ss.symcd.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=511339, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Jan 2017 02:55:38 GMT
Expires: Tue, 17 Jan 2017 02:55:38 GMT
Date: Wed, 11 Jan 2017 04:56:19 GMT
Connection: keep-alive
GET /merge?pid=26&3pid=4d8eb657-8947-4eaa-8e5e-bfa3fdd5d0ea HTTP/1.1

Host: ce.lijit.com
GET /merge?pid=26&amp;3pid=4d8eb657-8947-4eaa-8e5e-bfa3fdd5d0ea HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 169.55.70.244
HTTP/1.1 302 Found
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 11 Jan 2017 04:56:19 GMT
Content-Length: 0
Set-Cookie: ljt_reader=22461bd31d69f0c6a7d0a4fcd5229ace;Path=/;Domain=.lijit.com;Expires=Thu, 11-Jan-2018 04:56:19 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
Expires: Fri, 20 Mar 2009 00:00:00 GMT
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
Location: http://ce.lijit.com/merge?pid=26&amp;3pid=4d8eb657-8947-4eaa-8e5e-bfa3fdd5d0ea&amp;dnr=1
X-Powered-By: raptor
X-Sovrn-Pod: ap2iad1
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=501210
Date: Wed, 11 Jan 2017 04:56:19 GMT
Etag: &quot;58755853-1d7&quot;
Expires: Tue, 17 Jan 2017 16:56:19 GMT
Last-Modified: Tue, 10 Jan 2017 21:55:31 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=498395
Date: Wed, 11 Jan 2017 04:56:19 GMT
Etag: &quot;587533d0-1d7&quot;
Expires: Tue, 17 Jan 2017 16:56:19 GMT
Last-Modified: Tue, 10 Jan 2017 19:19:44 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2017 04:56:19 GMT
Expires: Sun, 15 Jan 2017 04:56:19 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /merge?pid=26&3pid=4d8eb657-8947-4eaa-8e5e-bfa3fdd5d0ea&dnr=1 HTTP/1.1

Host: ce.lijit.com
GET /merge?pid=26&amp;3pid=4d8eb657-8947-4eaa-8e5e-bfa3fdd5d0ea&amp;dnr=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: ljt_reader=22461bd31d69f0c6a7d0a4fcd5229ace
 169.55.70.244
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Wed, 11 Jan 2017 04:56:19 GMT
Content-Length: 43
Set-Cookie: _ljtrtb_26=4d8eb657-8947-4eaa-8e5e-bfa3fdd5d0ea;Path=/;Domain=.lijit.com;Expires=Thu, 11-Jan-2018 04:56:19 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0
Pragma: no-cache
Expires: Fri, 20 Mar 2009 00:00:00 GMT
P3P: CP=&quot;CUR ADM OUR NOR STA NID&quot;
X-Powered-By: raptor
X-Sovrn-Pod: ap2iad1
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=511533
Date: Wed, 11 Jan 2017 04:56:20 GMT
Etag: &quot;58758242-1d7&quot;
Expires: Tue, 17 Jan 2017 16:56:20 GMT
Last-Modified: Wed, 11 Jan 2017 00:54:26 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=505892
Date: Wed, 11 Jan 2017 04:56:20 GMT
Etag: &quot;58756cc3-1d7&quot;
Expires: Tue, 17 Jan 2017 16:56:20 GMT
Last-Modified: Tue, 10 Jan 2017 23:22:43 GMT
Server: ECS (arn/459D)
X-Cache: HIT
Content-Length: 471
GET /r/collect?t=dc&aip=1&_r=3&v=1&_v=j47&tid=UA-9968643-1&cid=1566903102.1484110574&jid=1528380453&_u=SSACgEQq~&z=2009748377 HTTP/1.1

Host: stats.g.doubleclick.net
GET /r/collect?t=dc&amp;aip=1&amp;_r=3&amp;v=1&amp;_v=j47&amp;tid=UA-9968643-1&amp;cid=1566903102.1484110574&amp;jid=1528380453&amp;_u=SSACgEQq~&amp;z=2009748377 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: test_cookie=CheckForPermission
 64.233.162.157
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Location: https://www.google.com/ads/ga-audiences?v=1&amp;aip=1&amp;t=sr&amp;_r=4&amp;tid=UA-9968643-1&amp;cid=1566903102.1484110574&amp;jid=1528380453&amp;_v=j47&amp;z=2009748377
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Wed, 11 Jan 2017 04:56:20 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 366
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
POST / HTTP/1.1

Host: gv.symcd.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 102
Content-Type: application/ocsp-request
 23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.10.2
Content-Length: 1399
Content-Transfer-Encoding: binary
Cache-Control: max-age=458504, public, no-transform, must-revalidate
Last-Modified: Mon, 9 Jan 2017 12:17:08 GMT
Expires: Mon, 16 Jan 2017 12:17:08 GMT
Date: Wed, 11 Jan 2017 04:56:20 GMT
Connection: keep-alive
GET /pagead/viewthroughconversion/1069852215/?random=202748696&cv=8&fst=1484110575012&num=1&fmt=3&value=0&label=UiVPCOGIxgIQt8yS_gM&bg=ffffff&hl=en&guid=ON&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_his=1&u_tz=60&u_java=true&u_nplug=10&u_nmime=92&frm=0&url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&tiba=Official%20USA%20Site%20-%20Save%20the%20Children&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&convclickts=0&ocp_id=87p1WODDLt6LywWb6YG4Aw HTTP/1.1

Host: googleads.g.doubleclick.net
GET /pagead/viewthroughconversion/1069852215/?random=202748696&amp;cv=8&amp;fst=1484110575012&amp;num=1&amp;fmt=3&amp;value=0&amp;label=UiVPCOGIxgIQt8yS_gM&amp;bg=ffffff&amp;hl=en&amp;guid=ON&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_his=1&amp;u_tz=60&amp;u_java=true&amp;u_nplug=10&amp;u_nmime=92&amp;frm=0&amp;url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;tiba=Official%20USA%20Site%20-%20Save%20the%20Children&amp;ctc_id=CAIVAgAAAB0CAAAA&amp;ct_cookie_present=false&amp;convclickts=0&amp;ocp_id=87p1WODDLt6LywWb6YG4Aw HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: id=22a08509030e0016||t=1484110579|et=730|cs=002213fd480c6ddcb722141304; IDE=AHWqTUnSppCY4xcxhhtqUGfKKlxpkP8IVEoyJs-RVY5aCKy8WxxC1V3CUQ; test_cookie=CheckForPermission
 216.58.211.130
HTTP/1.1 302 Found
Content-Type: image/gif
P3P: policyref=&quot;https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Timing-Allow-Origin: *
Date: Wed, 11 Jan 2017 04:56:20 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://www.google.com/ads/user-lists/1069852215/?label=UiVPCOGIxgIQt8yS_gM&amp;fmt=3&amp;bg=ffffff&amp;num=1&amp;ct_cookie_present=false&amp;cv=8&amp;frm=0&amp;url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;random=3792855497&amp;fpvtc=/1069852215/%3Frandom%3D1895037498%26cv%3D8%26fst%3D1484107200000%26num%3D1%26fmt%3D3%26value%3D0%26label%3DUiVPCOGIxgIQt8yS_gM%26bg%3Dffffff%26hl%3Den%26guid%3DON%26u_h%3D885%26u_w%3D1176%26u_ah%3D855%26u_aw%3D1176%26u_cd%3D24%26u_his%3D1%26u_tz%3D60%26u_java%3Dtrue%26u_nplug%3D10%26u_nmime%3D92%26frm%3D0%26url%3Dhttp://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm%26tiba%3DOfficial%2520USA%2520Site%2520-%2520Save%2520the%2520Children%26ctc_id%3DCAIVAgAAAB0CAAAA%26ct_cookie_present%3Dfalse
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2017 04:56:20 GMT
Expires: Sun, 15 Jan 2017 04:56:20 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /u?u=410877&t=ojln1u HTTP/1.1

Host: gtrk.s3.amazonaws.com
GET /u?u=410877&amp;t=ojln1u HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 54.231.73.75
HTTP/1.1 200 OK
Content-Type: image/gif
x-amz-id-2: GFcbLsn7IjImSywtEBtd9BdXR59201CryHvyOjdJE0MFL6+gEHDJekBGDpo10NZU9i572j03flo=
x-amz-request-id: B307972C9C8DB6FB
Date: Wed, 11 Jan 2017 04:56:21 GMT
Last-Modified: Tue, 09 Feb 2016 23:57:32 GMT
Etag: &quot;776f5f447e5e03b50f3bc4d4ec78daaa&quot;
Accept-Ranges: bytes
Content-Length: 32
Server: AmazonS3
GET /adcedge/lb?site=695501&betr=STC_1day=[+]1day[24]|STC_1hr=[+]1hr[1]|STC_7day=[+]7day[168]|STC_14day=[+]14day[336]|STC_30day=[+]30day[720] HTTP/1.1

Host: secure.leadback.advertising.com
GET /adcedge/lb?site=695501&amp;betr=STC_1day=[+]1day[24]|STC_1hr=[+]1hr[1]|STC_7day=[+]7day[168]|STC_14day=[+]14day[336]|STC_30day=[+]30day[720] HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 149.174.66.134
HTTP/1.1 200 OK
Content-Type: image/gif
Cache-Control: private, max-age=3600
Expires: Wed, 11 Jan 2017 05:56:20 GMT
Server: Microsoft-IIS/7.5
P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
X-AspNet-Version: 4.0.30319
Set-Cookie: C2=0rbdYV+WAEsCbgU5cBAxKsxAl3VAHrwG4XuXDosCbAf5fhw2KsBc; domain=advertising.com; expires=Fri, 11-Jan-2019 04:56:20 GMT; path=/ LB=; domain=advertising.com; expires=Thu, 01-Jan-1970 00:00:00 GMT; path=/ GUID=; domain=advertising.com; expires=Thu, 01-Jan-1970 00:00:00 GMT; path=/ ACID=tq550014841105800002; domain=advertising.com; expires=Fri, 11-Jan-2019 04:56:20 GMT; path=/
X-Powered-By: ASP.NET
Date: Wed, 11 Jan 2017 04:56:19 GMT
Content-Length: 49
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-9968643-1&cid=1566903102.1484110574&jid=1528380453&_v=j47&z=2009748377 HTTP/1.1

Host: www.google.com
GET /ads/ga-audiences?v=1&amp;aip=1&amp;t=sr&amp;_r=4&amp;tid=UA-9968643-1&amp;cid=1566903102.1484110574&amp;jid=1528380453&amp;_v=j47&amp;z=2009748377 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 64.233.162.104
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Location: https://www.google.no/ads/ga-audiences?v=1&amp;aip=1&amp;t=sr&amp;_r=4&amp;tid=UA-9968643-1&amp;cid=1566903102.1484110574&amp;jid=1528380453&amp;_v=j47&amp;z=2009748377&amp;ipr=y&amp;ulfeg=n
Cache-Control: private, max-age=43200
Date: Wed, 11 Jan 2017 04:56:20 GMT
Expires: Wed, 11 Jan 2017 04:56:20 GMT
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 387
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
GET /r/collect?t=dc&aip=1&_r=3&v=1&_v=j47&tid=UA-9968643-26&cid=1566903102.1484110574&jid=1150053751&_u=SSCCiEQqB~&z=1674280875 HTTP/1.1

Host: stats.g.doubleclick.net
GET /r/collect?t=dc&amp;aip=1&amp;_r=3&amp;v=1&amp;_v=j47&amp;tid=UA-9968643-26&amp;cid=1566903102.1484110574&amp;jid=1150053751&amp;_u=SSCCiEQqB~&amp;z=1674280875 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
Cookie: test_cookie=CheckForPermission
 64.233.162.157
HTTP/1.1 200 OK
Content-Type: image/gif
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Wed, 11 Jan 2017 04:56:20 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
GET /pixel?id=36964 HTTP/1.1

Host: www.wtp101.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 104.199.41.131
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.7.10
Date: Wed, 11 Jan 2017 04:56:20 GMT
Content-Length: 0
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Location: https://www.wtp101.com/ul_cb/pixel?id=36964
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Pragma: no-cache
Set-Cookie: tuuid=31cc32d7-fdfb-4782-9e91-4b9909cc4e03; path=/; expires=Fri, 11-Jan-2019 04:56:20 GMT; domain=.wtp101.com tuuid_last_update=1484110580; path=/; expires=Fri, 11-Jan-2019 04:56:20 GMT; domain=.wtp101.com cookie_born=1484110580; path=/; expires=Mon, 10-Jan-2022 04:56:20 GMT; domain=.wtp101.com
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2017 04:56:20 GMT
Expires: Sun, 15 Jan 2017 04:56:20 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /ul_cb/pixel?id=36964 HTTP/1.1

Host: www.wtp101.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: tuuid=31cc32d7-fdfb-4782-9e91-4b9909cc4e03; tuuid_last_update=1484110580; cookie_born=1484110580
 104.199.41.131
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
Server: nginx/1.7.10
Date: Wed, 11 Jan 2017 04:56:20 GMT
Content-Length: 192
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type,X-Requested-With
Access-Control-Allow-Origin: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Access-Control-Max-Age: 60
Allow-Control-Allow-Methods: POST,GET,OPTIONS
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Pragma: no-cache
Set-Cookie: tuuid=31cc32d7-fdfb-4782-9e91-4b9909cc4e03; path=/; expires=Fri, 11-Jan-2019 04:56:20 GMT; domain=.wtp101.com tuuid_last_update=1484110580; path=/; expires=Fri, 11-Jan-2019 04:56:20 GMT; domain=.wtp101.com s=!36964; path=/; expires=Fri, 11-Jan-2019 04:56:20 GMT; domain=.wtp101.com
GET /s?u=410877&t=ojln1u HTTP/1.1

Host: gtrk.s3.amazonaws.com
GET /s?u=410877&amp;t=ojln1u HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 54.231.73.75
HTTP/1.1 200 OK
Content-Type: image/gif
x-amz-id-2: K0pVmd1msYNAz2doDHmhobh39ER8YART6EsjrxmfBZD6qY0pjJ0vNyOxaBiORNmrXW+vgDP3JXU=
x-amz-request-id: B46AAEF4B485328B
Date: Wed, 11 Jan 2017 04:56:21 GMT
Last-Modified: Tue, 09 Feb 2016 23:57:19 GMT
Etag: &quot;776f5f447e5e03b50f3bc4d4ec78daaa&quot;
Accept-Ranges: bytes
Content-Length: 32
Server: AmazonS3
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-9968643-1&cid=1566903102.1484110574&jid=1528380453&_v=j47&z=2009748377&ipr=y&ulfeg=n HTTP/1.1

Host: www.google.no
GET /ads/ga-audiences?v=1&amp;aip=1&amp;t=sr&amp;_r=4&amp;tid=UA-9968643-1&amp;cid=1566903102.1484110574&amp;jid=1528380453&amp;_v=j47&amp;z=2009748377&amp;ipr=y&amp;ulfeg=n HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 64.233.162.94
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Wed, 11 Jan 2017 04:56:20 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
GET /ads/user-lists/1069852215/?label=UiVPCOGIxgIQt8yS_gM&fmt=3&bg=ffffff&num=1&ct_cookie_present=false&cv=8&frm=0&url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&random=3792855497&fpvtc=/1069852215/%3Frandom%3D1895037498%26cv%3D8%26fst%3D1484107200000%26num%3D1%26fmt%3D3%26value%3D0%26label%3DUiVPCOGIxgIQt8yS_gM%26bg%3Dffffff%26hl%3Den%26guid%3DON%26u_h%3D885%26u_w%3D1176%26u_ah%3D855%26u_aw%3D1176%26u_cd%3D24%26u_his%3D1%26u_tz%3D60%26u_java%3Dtrue%26u_nplug%3D10%26u_nmime%3D92%26frm%3D0%26url%3Dhttp://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm%26tiba%3DOfficial%2520USA%2520Site%2520-%2520Save%2520the%2520Children%26ctc_id%3DCAIVAgAAAB0CAAAA%26ct_cookie_present%3Dfalse&ipr=y&ulfeg=n HTTP/1.1

Host: www.google.no
GET /ads/user-lists/1069852215/?label=UiVPCOGIxgIQt8yS_gM&amp;fmt=3&amp;bg=ffffff&amp;num=1&amp;ct_cookie_present=false&amp;cv=8&amp;frm=0&amp;url=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;random=3792855497&amp;fpvtc=/1069852215/%3Frandom%3D1895037498%26cv%3D8%26fst%3D1484107200000%26num%3D1%26fmt%3D3%26value%3D0%26label%3DUiVPCOGIxgIQt8yS_gM%26bg%3Dffffff%26hl%3Den%26guid%3DON%26u_h%3D885%26u_w%3D1176%26u_ah%3D855%26u_aw%3D1176%26u_cd%3D24%26u_his%3D1%26u_tz%3D60%26u_java%3Dtrue%26u_nplug%3D10%26u_nmime%3D92%26frm%3D0%26url%3Dhttp://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm%26tiba%3DOfficial%2520USA%2520Site%2520-%2520Save%2520the%2520Children%26ctc_id%3DCAIVAgAAAB0CAAAA%26ct_cookie_present%3Dfalse&amp;ipr=y&amp;ulfeg=n HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 64.233.162.94
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Wed, 11 Jan 2017 04:56:20 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Server: adclick_server
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
GET /en_US/fbevents.js HTTP/1.1

Host: connect.facebook.net

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 31.13.66.5
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: fd9f9e8db2f954160c7c45c8a596ce99
Etag: &quot;6a3dc945d9aaf999ace6c3e324edc748&quot;
X-Frame-Options: DENY
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Wed, 11 Jan 2017 05:11:13 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: sOFj2QaBQSaEh+5QyxTr3A==
X-FB-Debug: KqotXo7/+yGRl98zPioSa6Yv2XB2fYAOneT4/UdA5NO8gn/d7EITHw7QS8vkYzAYe8wFRBBMQRyk/QrXY56srA==
Date: Wed, 11 Jan 2017 04:56:20 GMT
Connection: keep-alive
Content-Length: 4054
GET /push_sync?f=0 HTTP/1.1

Host: www.wtp101.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: tuuid=31cc32d7-fdfb-4782-9e91-4b9909cc4e03; tuuid_last_update=1484110580; cookie_born=1484110580; s=!36964
 104.199.41.131
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.7.10
Date: Wed, 11 Jan 2017 04:56:20 GMT
Content-Length: 43
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Pragma: no-cache
Set-Cookie: synclock=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.wtp101.com
GET /pcon HTTP/1.1

Host: www.wtp101.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: tuuid=31cc32d7-fdfb-4782-9e91-4b9909cc4e03; tuuid_last_update=1484110580; cookie_born=1484110580; s=!36964
 104.199.41.131
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
Server: nginx/1.7.10
Date: Wed, 11 Jan 2017 04:56:20 GMT
Content-Length: 476
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
Pragma: no-cache
Set-Cookie: synced=!addthis,253353380!bidswitch2,253353380!bidswitch,253353380; path=/; expires=Fri, 11-Jan-2019 04:56:20 GMT; domain=.wtp101.com sprf=!addthis!bidswitch2!bidswitch; path=/; expires=Fri, 11-Jan-2019 04:56:20 GMT; domain=.wtp101.com
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=500924
Date: Wed, 11 Jan 2017 04:56:20 GMT
Etag: &quot;58756346-1d7&quot;
Expires: Tue, 17 Jan 2017 16:56:20 GMT
Last-Modified: Tue, 10 Jan 2017 22:42:14 GMT
Server: ECS (arn/45E4)
X-Cache: HIT
Content-Length: 471
POST / HTTP/1.1

Host: ocsp.digicert.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Cache-Control: max-age=514334
Date: Wed, 11 Jan 2017 04:56:20 GMT
Etag: &quot;58758694-1d7&quot;
Expires: Tue, 17 Jan 2017 16:56:20 GMT
Last-Modified: Wed, 11 Jan 2017 01:12:52 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471
GET /tr/?id=175734969458030&ev=PageView&dl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&rl=&if=false&ts=1484110578108&v=2.5.1 HTTP/1.1

Host: www.facebook.com
GET /tr/?id=175734969458030&amp;ev=PageView&amp;dl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;rl=&amp;if=false&amp;ts=1484110578108&amp;v=2.5.1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm
 157.240.3.35
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Wed, 11 Jan 2017 04:56:20 GMT
Expires: Wed, 11 Jan 2017 04:56:20 GMT
Last-Modified: Fri, 21 Dec 2012 00:00:01 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Set-Cookie: fr=0Jx8CZ5OHxJDkdhPt..BYdbr0...1.0.BYdbr0.; expires=Tuesday, 11-Apr-2017 04:56:20 GMT; path=/; domain=.facebook.com
Server: proxygen
Connection: keep-alive
Content-Length: 44
GET /wi/ytc.js HTTP/1.1

Host: s.yimg.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 87.248.118.23
HTTP/1.1 200 OK
Content-Type: application/javascript
Date: Wed, 11 Jan 2017 04:56:20 GMT
P3P: policyref=&quot;https://policies.yahoo.com/w3c/p3p.xml&quot;, CP=&quot;CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV&quot;
Last-Modified: Wed, 09 Dec 2015 23:18:35 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3553
Age: 0
Via: http/1.1 spdc0033.pbp.bf1.yahoo.com (ApacheTrafficServer), https/1.1 e22.ycpi.deb.yahoo.com (ApacheTrafficServer [cMsSf ])
Server: ATS
Connection: keep-alive
POST / HTTP/1.1

Host: ocsp.comodoca.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2017 04:56:20 GMT
Server: Apache
Last-Modified: Mon, 09 Jan 2017 16:59:26 GMT
Expires: Fri, 13 Jan 2017 16:59:26 GMT
Etag: CBD12B3AD5BC8492C2487BA2C41C7B06FF3205A7
Cache-Control: max-age=215585,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp31
Content-Length: 471
Connection: close
POST / HTTP/1.1

Host: ocsp.comodoca.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2017 04:56:20 GMT
Server: Apache
Last-Modified: Wed, 11 Jan 2017 03:27:08 GMT
Expires: Sun, 15 Jan 2017 03:27:08 GMT
Etag: F23EE6DC0DBB57B7E03A7F01AC1C317414B17BCD
Cache-Control: max-age=339647,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp31
Content-Length: 727
Connection: close
GET /sp.pl?a=10000&jsonp=YAHOO.ywa.I13N.handleJSONResponse&d=Wed%2C%2011%20Jan%202017%2004%3A56%3A20%20GMT&n=-1&.yp=10007818&f=http%3A%2F%2F5547516.fls.doubleclick.net%2Factivityi%3Bsrc%3D5547516%3Btype%3Dstcge0%3Bcat%3Dstcho0%3Bord%3D750565514453%3B~oref%3Dhttp%253A%252F%252Fwww.savethechildren.org%252Fsite%252Fc.8rKLIXMGIpI4E%252Fb.6115947%252Fk.B143%252FOfficial_USA_Site.htm%3F&e=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&enc=UTF-8&isIframe=1 HTTP/1.1

Host: sp.analytics.yahoo.com
GET /sp.pl?a=10000&amp;jsonp=YAHOO.ywa.I13N.handleJSONResponse&amp;d=Wed%2C%2011%20Jan%202017%2004%3A56%3A20%20GMT&amp;n=-1&amp;.yp=10007818&amp;f=http%3A%2F%2F5547516.fls.doubleclick.net%2Factivityi%3Bsrc%3D5547516%3Btype%3Dstcge0%3Bcat%3Dstcho0%3Bord%3D750565514453%3B~oref%3Dhttp%253A%252F%252Fwww.savethechildren.org%252Fsite%252Fc.8rKLIXMGIpI4E%252Fb.6115947%252Fk.B143%252FOfficial_USA_Site.htm%3F&amp;e=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;enc=UTF-8&amp;isIframe=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: B=8anin31c7benj&amp;b=3&amp;s=oa
 98.139.225.35
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Date: Wed, 11 Jan 2017 04:56:20 GMT
Expires: Wed, 11 Jan 2017 04:56:20 GMT
Pragma: no-cache
Cache-Control: no-cache, private, must-revalidate
Accept-Ranges: bytes
Content-Length: 0
Server: ATS
Age: 0
Connection: keep-alive
Via: http/1.1 spdc0006.pbp.bf1.yahoo.com (ApacheTrafficServer)
POST / HTTP/1.1

Host: ocsp.usertrust.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 11 Jan 2017 04:56:20 GMT
Server: Apache
Last-Modified: Wed, 11 Jan 2017 03:27:08 GMT
Expires: Sun, 15 Jan 2017 03:27:08 GMT
Etag: 37838F6AC16C1ECD6CB14E09FC6BD5ACDAA4D6E3
Cache-Control: max-age=339647,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp31
Content-Length: 471
Connection: close
GET /red/usync?pid=11197&puid=31cc32d7-fdfb-4782-9e91-4b9909cc4e03 HTTP/1.1

Host: su.addthis.com
GET /red/usync?pid=11197&amp;puid=31cc32d7-fdfb-4782-9e91-4b9909cc4e03 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 104.16.26.235
HTTP/1.1 204 No Content
Content-Type: image/png;charset=UTF-8
Date: Wed, 11 Jan 2017 04:56:20 GMT
Connection: keep-alive
Set-Cookie: uid=5875baf41a69157e;Path=/;Domain=.addthis.com;Expires=Fri, 11-Jan-2019 04:56:20 GMT um=2KZ*0NP3bn_vJ7wFWhiVA9P4U3;Path=/;Domain=.addthis.com;Expires=Fri, 11-Jan-2019 04:56:20 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;NON ADM OUR DEV IND COM STA&quot;
Cache-Control: max-age=0, no-cache, no-store, no-transform
Pragma: no-cache
Server: cloudflare-nginx
CF-RAY: 31f5c8196fe942a9-OSL
GET /sync?dsp_id=17&user_group=1&expires=10&user_id=31cc32d7-fdfb-4782-9e91-4b9909cc4e03 HTTP/1.1

Host: x.bidswitch.net
GET /sync?dsp_id=17&amp;user_group=1&amp;expires=10&amp;user_id=31cc32d7-fdfb-4782-9e91-4b9909cc4e03 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: tuuid=4d8eb657-8947-4eaa-8e5e-bfa3fdd5d0ea; tuuid_last_update=1484110579; c=1484110579
 52.58.229.22
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.7.10
Date: Wed, 11 Jan 2017 04:56:21 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Location: //cm.g.doubleclick.net/pixel?google_nid=bdsw&amp;google_cm=1&amp;google_hm=TY62V4lHTqqOXr-j_dXQ6g==
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
GET /tr/?id=1866633740221545&ev=PageView&dl=http%3A%2F%2F5547516.fls.doubleclick.net%2Factivityi%3Bsrc%3D5547516%3Btype%3Dstcge0%3Bcat%3Dstcho0%3Bord%3D750565514453%3B~oref%3Dhttp%253A%252F%252Fwww.savethechildren.org%252Fsite%252Fc.8rKLIXMGIpI4E%252Fb.6115947%252Fk.B143%252FOfficial_USA_Site.htm%3F&rl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&if=true&ts=1484110580513&v=2.5.1 HTTP/1.1

Host: www.facebook.com
GET /tr/?id=1866633740221545&amp;ev=PageView&amp;dl=http%3A%2F%2F5547516.fls.doubleclick.net%2Factivityi%3Bsrc%3D5547516%3Btype%3Dstcge0%3Bcat%3Dstcho0%3Bord%3D750565514453%3B~oref%3Dhttp%253A%252F%252Fwww.savethechildren.org%252Fsite%252Fc.8rKLIXMGIpI4E%252Fb.6115947%252Fk.B143%252FOfficial_USA_Site.htm%3F&amp;rl=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm&amp;if=true&amp;ts=1484110580513&amp;v=2.5.1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
 157.240.3.35
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Wed, 11 Jan 2017 04:56:21 GMT
Expires: Wed, 11 Jan 2017 04:56:21 GMT
Last-Modified: Fri, 21 Dec 2012 00:00:01 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Set-Cookie: fr=0N5YgYlv5R0788y8a..BYdbr1...1.0.BYdbr1.; expires=Tuesday, 11-Apr-2017 04:56:21 GMT; path=/; domain=.facebook.com
Server: proxygen
Connection: keep-alive
Content-Length: 44
GET /pixel?google_nid=bdsw&google_cm=1&google_hm=TY62V4lHTqqOXr-j_dXQ6g== HTTP/1.1

Host: cm.g.doubleclick.net
GET /pixel?google_nid=bdsw&amp;google_cm=1&amp;google_hm=TY62V4lHTqqOXr-j_dXQ6g== HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: id=22a08509030e0016||t=1484110579|et=730|cs=002213fd480c6ddcb722141304; IDE=AHWqTUnSppCY4xcxhhtqUGfKKlxpkP8IVEoyJs-RVY5aCKy8WxxC1V3CUQ
 108.177.14.154
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
P3P: policyref=&quot;https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Location: https://x.bidswitch.net/google_sync_status?ssp_name=google&amp;google_gid=CAESEI7NekgbFZRFHhXvXcX3MP4&amp;google_cver=1
Date: Wed, 11 Jan 2017 04:56:21 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 316
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
GET /google_sync_status?ssp_name=google&google_gid=CAESEI7NekgbFZRFHhXvXcX3MP4&google_cver=1 HTTP/1.1

Host: x.bidswitch.net
GET /google_sync_status?ssp_name=google&amp;google_gid=CAESEI7NekgbFZRFHhXvXcX3MP4&amp;google_cver=1 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://5547516.fls.doubleclick.net/activityi;src=5547516;type=stcge0;cat=stcho0;ord=750565514453;~oref=http%3A%2F%2Fwww.savethechildren.org%2Fsite%2Fc.8rKLIXMGIpI4E%2Fb.6115947%2Fk.B143%2FOfficial_USA_Site.htm?
Cookie: tuuid=4d8eb657-8947-4eaa-8e5e-bfa3fdd5d0ea; tuuid_last_update=1484110579; c=1484110579
 52.58.229.22
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.7.10
Date: Wed, 11 Jan 2017 04:56:21 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
P3P: CP=&quot;NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA&quot;
GET /s/at?site=10052&page=6115947 HTTP/1.1

Host: link.savethechildren.csengage2.net
GET /s/at?site=10052&amp;page=6115947 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.savethechildren.org/site/c.8rKLIXMGIpI4E/b.6115947/k.B143/Official_USA_Site.htm