r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d4e95d0d8982bcd07804baf6fc88231c
5027abda0875bd2529dd4d6691784c74da71a9ee
373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14605
Expires: Thu, 02 Feb 2023 14:23:31 GMT
Date: Thu, 02 Feb 2023 10:20:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12884
Expires: Thu, 02 Feb 2023 13:54:50 GMT
Date: Thu, 02 Feb 2023 10:20:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a76feabb767086ae0fa54e0ffbf763f
3655d78994a1e9838340669462728b67c8c12e54
bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6378
Expires: Thu, 02 Feb 2023 12:06:24 GMT
Date: Thu, 02 Feb 2023 10:20:06 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 02 Feb 2023 09:36:05 GMT
content-type: application/json
age: 2641
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: O5sR9kibqKGvtv4I0tq58AlpBhoOvs9qkNx32txdiseNCk5Reu7GUyvhrEi4RWuVbGNSMENILAc=
x-amz-request-id: SZ2Z838CF8ERB28F
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 02 Feb 2023 09:51:56 GMT
age: 1690
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 10:20:06 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.sfmariposakids.com/donate.html
301 Moved Permanently 414 B URL HTTP/1.1 www.sfmariposakids.com/donate.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 963c4c1f541b37efc473cd9668fdfcae
6082b9d4b343cd9512af7f3ef8d022e615b7073b
487a59e046f52ebaa8bfe2348fe2db7f0a48c623d32d628da72d59163a2d4d6a
GET /donate.html HTTP/1.1
Host: www.sfmariposakids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 02 Feb 2023 10:20:06 GMT
Server: Apache
Set-Cookie: is_mobile=0; path=/; domain=www.sfmariposakids.com
Vary: X-W-SSL,User-Agent
Location: https://www.sfmariposakids.com/donate.html
X-Host: blu93.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 414
Keep-Alive: timeout=10, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 02 Feb 2023 09:30:30 GMT
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
age: 2976
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20271
Expires: Thu, 02 Feb 2023 15:57:58 GMT
Date: Thu, 02 Feb 2023 10:20:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 996e6863d73c7d754d5e9780d5773987
0221a118f2db323d20713b539559b41871e83577
0399322d495adb39c13487d156515deb0af2e6e00f5540ebb055e340c02f2e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0399322D495ADB39C13487D156515DEB0AF2E6E00F5540EBB055E340C02F2E00"
Last-Modified: Wed, 01 Feb 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21587
Expires: Thu, 02 Feb 2023 16:19:54 GMT
Date: Thu, 02 Feb 2023 10:20:07 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2W2TiElqVPqApnqDAcgc5w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 46NlRHk9WoCLDZN6HdpVz0TMn8c=
www.sfmariposakids.com/donate.html
200 OK 16 kB URL HTTP/1.1 www.sfmariposakids.com/donate.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (43107)
Hash ce76d4a372222a478cb3adc7fbc30713
a1c3ff9d4eac9f2b0e70270035ae39a6cae3e50b
0d6b3eb9b87f551b4b2bf5d00e4b84383b26ddf38023164e3b02ba02c2cd9187
GET /donate.html HTTP/1.1
Host: www.sfmariposakids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 10:20:07 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=www.sfmariposakids.com
language=en; expires=Thu, 16-Feb-2023 10:20:07 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"2ba2be68ca85073f7b47b68017918e77-gzip"
Content-Encoding: gzip
X-Host: blu121.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 16227
Keep-Alive: timeout=10, max=28
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
cdn2.editmysite.com/fonts/Karla/font.css?2
200 OK 322 B URL HTTP/2 cdn2.editmysite.com/fonts/Karla/font.css?2
IP
Hash d71cf3f7d1a0aeba7d9f9af0aec9eeef
0df230495adb47cd3d83ae78d6fd695f826b55e5
da2980fa5103aadeafa7f1d903e44567f97d612ce52e17e4f03074ae4c7bccb6
GET /fonts/Karla/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 30 Jan 2023 22:13:09 GMT
etag: "63d840f5-6ae"
expires: Tue, 14 Feb 2023 12:50:25 GMT
cache-control: max-age=1209600
x-host: blu68.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:07 GMT
age: 163783
x-served-by: cache-sjc10062-SJC, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 18, 7
x-timer: S1675333208.585692,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 322
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Open_Sans/font.css?2
200 OK 367 B URL HTTP/2 cdn2.editmysite.com/fonts/Open_Sans/font.css?2
IP
Hash 52e94ffb1c814650bab35433c3034ac7
b42d636ac9b71805f751612208ddb34e93a6538d
fe0f821828a4b146e9b0aba7f9a4956a0caa14a2ac72541ced5ee1d2ed376462
GET /fonts/Open_Sans/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 26 Jan 2023 15:48:07 GMT
etag: "63d2a0b7-a2a"
expires: Mon, 13 Feb 2023 12:08:39 GMT
cache-control: max-age=1209600
x-host: grn99.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:07 GMT
age: 252688
x-served-by: cache-sjc10081-SJC, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 43, 1182
x-timer: S1675333208.587717,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 367
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Roboto/font.css?2
200 OK 366 B URL HTTP/2 cdn2.editmysite.com/fonts/Roboto/font.css?2
IP
Hash ba2db81c32601a480e96b58f590f1c0c
b78d1a152ee9c81d4aedadaf1bfbd8b05af5a1bd
0034dbc1fed209004e62d11bed894afa55df825bbc27c8357a3a1bbcd28f9e57
GET /fonts/Roboto/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 19 Jan 2023 21:10:51 GMT
etag: "63c9b1db-a18"
expires: Mon, 06 Feb 2023 13:17:47 GMT
cache-control: max-age=1209600
x-host: blu93.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:07 GMT
age: 853340
x-served-by: cache-sjc10039-SJC, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 744, 166
x-timer: S1675333208.588786,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 366
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1675210024&
200 OK 33 kB URL HTTP/2 cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1675210024&
IP
File type ASCII text, with very long lines (65024)
Hash db51c112ec84c20205d2bb0c609b12bb
95145a5ca01c0c404f9143b25f22b93a15e7fa3f
2136f467e2f6295a5978f160521626ee3b2295ed3611e5a6750869dfe37c236e
GET /js/lang/en/stl.js?buildTime=1675210024& HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Mon, 30 Jan 2023 22:15:39 GMT
etag: "63d8418b-2c2a4"
expires: Wed, 15 Feb 2023 00:09:51 GMT
cache-control: max-age=1209600
x-host: grn154.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:07 GMT
age: 123016
x-served-by: cache-sjc10044-SJC, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 22, 139
x-timer: S1675333208.588977,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 32827
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Roboto_Mono/font.css?2
200 OK 327 B URL HTTP/2 cdn2.editmysite.com/fonts/Roboto_Mono/font.css?2
IP
Hash f0d5d643779807e4187f0af101fae391
75c8d0032e2aeb7afc83d557a3ce4964c89b4df7
fdc218fa2a1143e9de7ad29321d78ca1fb16a205a3b07ce81b3948a457ae97e8
GET /fonts/Roboto_Mono/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 26 Jan 2023 15:48:07 GMT
etag: "63d2a0b7-6c7"
expires: Mon, 13 Feb 2023 12:29:05 GMT
cache-control: max-age=1209600
x-host: grn67.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:07 GMT
age: 251461
x-served-by: cache-sjc10030-SJC, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 530, 2
x-timer: S1675333208.594574,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 327
X-Firefox-Spdy: h2
cdn2.editmysite.com/fonts/Oswald/font.css?2
200 OK 300 B URL HTTP/2 cdn2.editmysite.com/fonts/Oswald/font.css?2
IP
Hash b4e1fa8edbbb593aefc47d16b3254da7
f9b4e2c9b0df700a2a892be0c0853f92211a5656
ddb677f162840a44ef4cdf085c35379f76e5b88162205a32cdf584acd826b1c3
GET /fonts/Oswald/font.css?2 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Thu, 26 Jan 2023 15:48:07 GMT
etag: "63d2a0b7-4f0"
expires: Fri, 10 Feb 2023 10:28:23 GMT
cache-control: max-age=1209600
x-host: grn139.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:07 GMT
age: 517903
x-served-by: cache-sjc10054-SJC, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 15, 5
x-timer: S1675333208.594573,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 300
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main-commerce-browse.js?buildTime=1675210024
200 OK 17 kB URL HTTP/2 cdn2.editmysite.com/js/site/main-commerce-browse.js?buildTime=1675210024
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32049)
Hash 15eaf839ff82242f8d02b1f60c073760
ed5886bbb71827073b52523683a95f0a051f8c40
c484962adc762a7df4929e867d53141cebf339cc60e1c611b3b7bfa61e1aea7d
GET /js/site/main-commerce-browse.js?buildTime=1675210024 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Mon, 30 Jan 2023 22:17:06 GMT
etag: "63d841e2-f92d"
expires: Wed, 15 Feb 2023 00:09:51 GMT
cache-control: max-age=1209600
x-host: blu40.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:07 GMT
age: 123015
x-served-by: cache-sjc10032-SJC, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 60, 3
x-timer: S1675333208.594626,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 16977
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/social-icons.css?buildtime=1675210024
200 OK 1.6 kB URL HTTP/2 cdn2.editmysite.com/css/social-icons.css?buildtime=1675210024
IP
File type ASCII text, with very long lines (13080)
Hash 818f44a5b644bce7147b30aa32688343
686be3de1b746185d326379eff31cf245beb84e0
82b9a9f5271f0f38bcd5678b63e95ef37b50ab0d192c9599228d3a190c92f13d
GET /css/social-icons.css?buildtime=1675210024 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 30 Jan 2023 22:16:43 GMT
etag: W/"63d841cb-3319"
expires: Wed, 15 Feb 2023 00:09:52 GMT
cache-control: max-age=1209600
x-host: grn98.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:07 GMT
age: 123016
x-served-by: cache-sjc10068-SJC, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 66, 142
x-timer: S1675333208.600556,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1639
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/commerce-core.js?buildTime=1675210024
200 OK 17 kB URL HTTP/2 cdn2.editmysite.com/js/site/commerce-core.js?buildTime=1675210024
IP
File type ASCII text, with very long lines (32011)
Hash e32a0ae988b9f1c9de6f0f70bfa0ffbd
c2e9ad2d183fa12c63df33521a919ad9eb0b44cb
fb4389e623d2a4a9b1d7be60bb37b99e71294a39fbfee8f7d9db5f68f67d0ec8
GET /js/site/commerce-core.js?buildTime=1675210024 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Mon, 30 Jan 2023 22:17:06 GMT
etag: "63d841e2-f57e"
expires: Wed, 15 Feb 2023 00:09:51 GMT
cache-control: max-age=1209600
x-host: blu103.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:07 GMT
age: 123015
x-served-by: cache-sjc10052-SJC, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 78, 3
x-timer: S1675333208.590076,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17388
X-Firefox-Spdy: h2
cdn2.editmysite.com/css/sites.css?buildTime=1675210024
200 OK 30 kB URL HTTP/2 cdn2.editmysite.com/css/sites.css?buildTime=1675210024
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d10158b22b553f723d99dc78eaee6390
80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
GET /css/sites.css?buildTime=1675210024 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css
last-modified: Mon, 30 Jan 2023 22:16:43 GMT
etag: W/"63d841cb-347ac"
expires: Wed, 15 Feb 2023 00:09:51 GMT
cache-control: max-age=1209600
x-host: blu121.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:07 GMT
age: 123016
x-served-by: cache-sjc10066-SJC, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 57, 231
x-timer: S1675333208.594547,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29746
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1675210024
200 OK 159 kB URL HTTP/2 cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1675210024
IP
File type ASCII text, with very long lines (32007)
Size 159 kB (158939 bytes)
Hash a37c49a899f5bdffb83845807fb2eb12
c78a51cd35cbc54cfeadd9c7edd24e523a62ab23
e7d5d644d6d55333a7bdbef73944899b2a834c89b8811779d684359360cba9e2
GET /js/site/main-customer-accounts-site.js?buildTime=1675210024 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Mon, 30 Jan 2023 22:17:06 GMT
etag: "63d841e2-82537"
expires: Wed, 15 Feb 2023 00:09:51 GMT
cache-control: max-age=1209600
x-host: grn63.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:07 GMT
age: 123016
x-served-by: cache-sjc10058-SJC, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 48, 1
x-timer: S1675333208.594593,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 158939
X-Firefox-Spdy: h2
www.sfmariposakids.com/files/theme/MutationObserver.js
200 OK 6.8 kB URL HTTP/1.1 www.sfmariposakids.com/files/theme/MutationObserver.js
IP
Hash a502a64ac17dab318a72b5c6f667e5d6
9b623c5cdc2c288649ff13504131ea2c382e700d
b0d53c00940847c4638accf26f204ef4569affa4a686ebcc5d3cc87d1697aa9d
GET /files/theme/MutationObserver.js HTTP/1.1
Host: www.sfmariposakids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/donate.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 10:20:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 17 May 2022 14:16:26 GMT
x-rgw-object-type: Normal
ETag: W/"e52201e96af18dd02c85eb627c843491"
x-amz-request-id: tx000000000000001cb3a61-00628495b0-b9fbc20-sfo1
X-Storage-Bucket: z3974
X-Storage-Object: 397452d9f6a2ea6a2135b45c9e40139c68ac6661f3bab4413e7299586ccb408a
X-Host: blu74.sf2p.intern.weebly.net
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2751084b42dd111d0a7f28241a77201b
680a9ac2f4cf451c9a8449c4df3587595ed9cc4c
1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 10:20:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-162531910-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-162531910-1
IP
File type ASCII text, with very long lines (1759)
Hash 6a14d8a975d40cd8b332fec23ed8e159
8db48f180219ead24becf77aeb1c0723f8a86aa5
20accf478b18e476a5533ce98adc6a49a8e3f04ba60a74e794846b9793e7e7ad
GET /gtag/js?id=UA-162531910-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 02 Feb 2023 10:20:07 GMT
expires: Thu, 02 Feb 2023 10:20:07 GMT
cache-control: private, max-age=900
last-modified: Thu, 02 Feb 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43951
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
js.stripe.com/v3/
200 OK 118 kB IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 118 kB (118227 bytes)
Hash 3a8488221604a0f3c855702f45d4e3f6
9d66f47fe7365c4dc694cb18515a034c3a29f2f1
7b27d83f4ce00f92c9a2c9d116fef967594750752ebcf0e60758938adc849229
GET /v3/ HTTP/1.1
Host: js.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 01 Feb 2023 19:58:35 GMT
etag: "fb347ad0f1a7c0b62fe0d5ea9e83c76a"
cache-control: max-age=60
content-type: text/javascript; charset=utf-8
strict-transport-security: max-age=31556926; includeSubDomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
server: Fastly
content-encoding: br
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:07 GMT
via: 1.1 varnish
age: 48
x-request-id: 0348d99a-fd1d-482a-b554-2146c2141323
x-served-by: cache-bma1622-BMA
x-cache: HIT
x-cache-hits: 6
vary: Accept-Encoding
timing-allow-origin: *
content-length: 118227
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2751084b42dd111d0a7f28241a77201b
680a9ac2f4cf451c9a8449c4df3587595ed9cc4c
1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 10:20:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.sfmariposakids.com/files/main_style.css?1675267786
200 OK 7.2 kB URL HTTP/1.1 www.sfmariposakids.com/files/main_style.css?1675267786
IP
File type assembler source, ASCII text, with very long lines (815)
Hash 175f5047d73d1e31dc305850335c91e9
53f6b9e201d2f5158a6cbc4fd07c6dd8c02dfbe9
aae5d905bf8049c2b538b482ab9aeb79705b8b2e0bba4e86d261fc0605af8cbc
GET /files/main_style.css?1675267786 HTTP/1.1
Host: www.sfmariposakids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/donate.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 10:20:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: blu48.sf2p.intern.weebly.net
Content-Encoding: gzip
www.sfmariposakids.com/files/theme/jquery.pxuMenu.js?1631129850
200 OK 3.7 kB URL HTTP/1.1 www.sfmariposakids.com/files/theme/jquery.pxuMenu.js?1631129850
IP
File type HTML document, ASCII text
Hash ac373d716afe4270df40f60417b0f418
aba148148c771bb66b0b4aeab6eac8eb40352745
f75570c56743e8c705cb06f5f1f9b1f8f2cc13119f5e2acda2f3bb8d987de94a
GET /files/theme/jquery.pxuMenu.js?1631129850 HTTP/1.1
Host: www.sfmariposakids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/donate.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 10:20:08 GMT
Content-Type: application/javascript
Content-Length: 3697
Connection: keep-alive
Last-Modified: Mon, 25 Apr 2022 13:50:18 GMT
x-rgw-object-type: Normal
ETag: "ac373d716afe4270df40f60417b0f418"
x-amz-request-id: tx000000000000001d7ccea-006284a5f7-b9fbc77-sfo1
X-Storage-Bucket: zf755
X-Storage-Object: f75570c56743e8c705cb06f5f1f9b1f8f2cc13119f5e2acda2f3bb8d987de94a
X-Host: blu74.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.sfmariposakids.com/files/theme/plugins.js?1631129850
200 OK 16 kB URL HTTP/1.1 www.sfmariposakids.com/files/theme/plugins.js?1631129850
IP
Hash 43e6b0bb6eb6524188831a282f7656d7
44e73fe367fc1fb8efee7eefac557b7d76ef0f44
9001fcfe93ceab40de4bb3535fc61335318c56d4440b53070cac27a26fef42bb
GET /files/theme/plugins.js?1631129850 HTTP/1.1
Host: www.sfmariposakids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/donate.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 10:20:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 24 Apr 2022 01:56:38 GMT
x-rgw-object-type: Normal
ETag: W/"2b8d85f1ea01d2c3e8b962eac8d76a5c"
x-amz-request-id: tx000000000000001ae94c4-006284793b-b9fbc20-sfo1
X-Storage-Bucket: zb635
X-Storage-Object: b6353ca52760aba4e7547ae9861db68158dc2af0f4febece55e5c775ee4449f5
X-Host: blu147.sf2p.intern.weebly.net
Content-Encoding: gzip
www.sfmariposakids.com/files/theme/jquery.trend.js?1631129850
200 OK 3.8 kB URL HTTP/1.1 www.sfmariposakids.com/files/theme/jquery.trend.js?1631129850
IP
Hash 4beccebe0a060b2b2c43de5c2d4512ef
250a779dd017877b9f360b264cf072d9e87974ff
446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738
GET /files/theme/jquery.trend.js?1631129850 HTTP/1.1
Host: www.sfmariposakids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/donate.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 10:20:08 GMT
Content-Type: application/javascript
Content-Length: 3775
Connection: keep-alive
Last-Modified: Thu, 10 Feb 2022 08:22:06 GMT
x-rgw-object-type: Normal
ETag: "4beccebe0a060b2b2c43de5c2d4512ef"
x-amz-request-id: tx000000000000001b11728-0062847b79-b9fbc20-sfo1
X-Storage-Bucket: z446f
X-Storage-Object: 446f48f512ecc0b771af3c21a3036de3a1c5740d1e6bdbb61448834326d0c738
X-Host: grn24.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.sfmariposakids.com/files/theme/jquery.revealer.js?1631129850
200 OK 2.8 kB URL HTTP/1.1 www.sfmariposakids.com/files/theme/jquery.revealer.js?1631129850
IP
Hash c22ab67199a33d876512504cda4ff55b
36e96eae4644b6028532974fe5186a072792cb37
c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311
GET /files/theme/jquery.revealer.js?1631129850 HTTP/1.1
Host: www.sfmariposakids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/donate.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 10:20:08 GMT
Content-Type: application/javascript
Content-Length: 2828
Connection: keep-alive
Last-Modified: Tue, 26 Oct 2021 13:57:33 GMT
x-rgw-object-type: Normal
ETag: "c22ab67199a33d876512504cda4ff55b"
x-amz-request-id: tx000000000000001e5af42-006284ac15-b9fbc64-sfo1
X-Storage-Bucket: zc4cd
X-Storage-Object: c4cd233d3d6b0f184e99d5017e521b4c6f9106d3e546864a8ba516189b934311
X-Host: grn24.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.sfmariposakids.com/files/theme/custom-1.js?1631129850
200 OK 4.1 kB URL HTTP/1.1 www.sfmariposakids.com/files/theme/custom-1.js?1631129850
IP
Hash 7960b13ef773e1c8965d668d5b212834
35f276ab77c975720b8cfa8eeb0ca8cc297725ed
1f897564d4aacb23ab3203c848e47b42417156d404d065c1e81d6c3bca0cccc4
GET /files/theme/custom-1.js?1631129850 HTTP/1.1
Host: www.sfmariposakids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/donate.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 10:20:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 03 Dec 2021 02:31:47 GMT
x-rgw-object-type: Normal
ETag: W/"beb222c03c3fdd6af710530b7df1c408"
x-amz-request-id: tx000000000000001c43519-0062848690-b9fbc29-sfo1
X-Storage-Bucket: z6fce
X-Storage-Object: 6fceda9df3549c1857609bca8bb9bd132aaef3ec76adeb82b0a62c698cae0011
X-Host: blu39.sf2p.intern.weebly.net
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c42daf1acac12f0ad69d68fa0721ad15
07fc216f164bf99de8651edb2742b762cbebb216
d57dc2c5340d6ba0af2b37cc9c7e6efe95a2f015aa54e89efbdeb9cab40fd6e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D57DC2C5340D6BA0AF2B37CC9C7E6EFE95A2F015AA54E89EFBDEB9CAB40FD6E7"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6935
Expires: Thu, 02 Feb 2023 12:15:43 GMT
Date: Thu, 02 Feb 2023 10:20:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14217
Expires: Thu, 02 Feb 2023 14:17:05 GMT
Date: Thu, 02 Feb 2023 10:20:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14217
Expires: Thu, 02 Feb 2023 14:17:05 GMT
Date: Thu, 02 Feb 2023 10:20:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14217
Expires: Thu, 02 Feb 2023 14:17:05 GMT
Date: Thu, 02 Feb 2023 10:20:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14217
Expires: Thu, 02 Feb 2023 14:17:05 GMT
Date: Thu, 02 Feb 2023 10:20:08 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 91987222-d376-4099-a4e9-5f877b5212be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLzO2FSDIAMFktg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ce325e-281a7e062ee3039d42ae8f83;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 07:08:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: SEH32iK4aCkxhxQyu3fSlW8uVM1Oj5hwnl2U09k_THEOdAqdEeVMJw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:03:43 GMT
age: 44185
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4f8260f-0039-4dd4-be49-93afef573ecb.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4f8260f-0039-4dd4-be49-93afef573ecb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3c56d08c13f357f91a14309b48d75e88
739ff0319e25b99fbf69b6a1c12159d4dda7549b
7f2a2004b2b587a18e99bae5ef216de0a0a12f4ab8e7c817df8eb8aa41f4be73
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4f8260f-0039-4dd4-be49-93afef573ecb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5011
x-amzn-requestid: 0760d4c6-1e6b-4e68-8c90-37229f8110e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc5JE0AIAMFn8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb6d-43fb25a727dd969b6219bd6f;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zQlfIcpWrJw9N6I7WNmV5feaR9QNy3FUSCOJQeyAnYS0oEH12dtzqg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 21:59:35 GMT
age: 44433
etag: "739ff0319e25b99fbf69b6a1c12159d4dda7549b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F601fd155-b928-42c6-bfb0-f3599f52fdf5.jpeg
200 OK 2.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F601fd155-b928-42c6-bfb0-f3599f52fdf5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5a1ddd54f3c344b36a26476a33ccfe20
3cc3a77f6a59cafed25fa0882e13644f4eebef50
65cef0476175fca421fef73419440b82dcb763879b79385f2cacc43f42b3237b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F601fd155-b928-42c6-bfb0-f3599f52fdf5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2530
x-amzn-requestid: 3ce99c09-61b5-4a51-97ec-c40c443238ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: freplHVZoAMFz5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dade3d-605687635e0a740e49ff78b9;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:48:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Hs72kBEkTiVNiWczvw7UONt_cbyvWuU_erpoJHQS8z1s1M601xIdug==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 21:57:28 GMT
age: 44560
etag: "3cc3a77f6a59cafed25fa0882e13644f4eebef50"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b0e15d-e5be-4197-a382-bf7332128068.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b0e15d-e5be-4197-a382-bf7332128068.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash df4a4906103a8f409c066b1cded71384
22847e3926db3e3d5f6b529297a4abe8b377c3a6
84a14b73b2cc7f4641eaa5539cbee0a109ae2b05cf88d06797a2b00c8d4f0c43
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b0e15d-e5be-4197-a382-bf7332128068.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9221
x-amzn-requestid: 209c2ad4-7a1f-4867-bf98-4ca8621111a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdTBFv5IAMFgqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadc13-1627a9d603c69f7760ad013b;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kAkcQOKAvuq3k-X081MLCqon-cnQJqGryVeE0fwX0a7bcXgJlySIvg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:21:38 GMT
age: 43110
etag: "22847e3926db3e3d5f6b529297a4abe8b377c3a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23ac16a6-b0c6-4c81-9bd1-78ee332bf49a.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23ac16a6-b0c6-4c81-9bd1-78ee332bf49a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ceb09fa3caa0fcda4a6314141e2d019
d08f43956f6859e4c2385231bb5506262257445f
a2100701c69f86920b14714b19ec14db9ebfd91000f0ec2397b8f27d981bc1ee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23ac16a6-b0c6-4c81-9bd1-78ee332bf49a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14593
x-amzn-requestid: 796fc590-5a08-4765-b861-e5f707e4d7f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdLoFHQoAMFaAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadbe3-3f93635c337e77e453bba394;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:38:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gYo5IyA5mM2B5nw6O2QkkZ6-go2CzG8Nwb_pWSixGplAl7LsbmWUiQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 21:55:43 GMT
age: 44665
etag: "d08f43956f6859e4c2385231bb5506262257445f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe18f9e12-0986-423b-911d-6271bb996db4.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe18f9e12-0986-423b-911d-6271bb996db4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7c823f1d6bf1c50d58eb263b85e6e37c
a7b74d11494fb3254df907e5cc1eead070d84617
b2706961eb756383e0988dfdb501dc424aea59697aedd1e4a6c294c314a31935
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe18f9e12-0986-423b-911d-6271bb996db4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5356
x-amzn-requestid: fef22c83-35a4-4990-9008-af5853f838d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc5BEB6oAMFczg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb6c-68d3017555c069bc3107d150;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: i697kJpdT4ZPeMLWIftWf16pWCic0-v4tL4GDKfVfTZLo-E4-3FwDQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:21:38 GMT
age: 43110
etag: "a7b74d11494fb3254df907e5cc1eead070d84617"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
app.multilanguage.xyz/media/snippets/multilanguage_17288.js
200 OK 48 kB URL HTTP/2 app.multilanguage.xyz/media/snippets/multilanguage_17288.js
IP
ASN #394380 LEASEWEB-USA-DAL
File type ASCII text, with very long lines (63070)
Hash 0ef48bc6f547c4e85d31355829c5f484
c525664eecbc67433dca943b23cb469bf4406e85
640e86aa69f20760bf942dd1a29831e5e7502ca7850404ee33fd9a70f14421b4
GET /media/snippets/multilanguage_17288.js HTTP/1.1
Host: app.multilanguage.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 10:20:08 GMT
content-type: application/javascript
content-length: 48379
last-modified: Tue, 01 Nov 2022 21:34:41 GMT
etag: "31e27-5ec6f7de7718e-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
cache-control: max-age=600, public
expires: Thu, 02 Feb 2023 10:30:08 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.sfmariposakids.com/uploads/1/6/2/2/16226598/mk-logo-transparent.png
200 OK 16 kB URL HTTP/1.1 www.sfmariposakids.com/uploads/1/6/2/2/16226598/mk-logo-transparent.png
IP
File type PNG image data, 187 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 8ea5696f4c249a16ae1f96c208a9f765
ba72ca0caf458374f289801d054f748608d7147b
e95eb1adeb65a3b0bebfec04a29bb011974a1a11766de2fa9d974028db285a07
GET /uploads/1/6/2/2/16226598/mk-logo-transparent.png HTTP/1.1
Host: www.sfmariposakids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/donate.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 10:20:09 GMT
Content-Type: image/png
Content-Length: 15726
Connection: keep-alive
Last-Modified: Fri, 22 Apr 2022 13:59:26 GMT
x-rgw-object-type: Normal
ETag: "8ea5696f4c249a16ae1f96c208a9f765"
x-amz-request-id: tx00000000000005a193059-0063bb67f3-c699baa-sfo1
X-Storage-Bucket: ze95e
X-Storage-Object: e95eb1adeb65a3b0bebfec04a29bb011974a1a11766de2fa9d974028db285a07
X-Host: blu80.sf2p.intern.weebly.net
Accept-Ranges: bytes
www.sfmariposakids.com/uploads/1/6/2/2/16226598/guidestar-gold-logo_orig.png
200 OK 7.4 kB URL HTTP/1.1 www.sfmariposakids.com/uploads/1/6/2/2/16226598/guidestar-gold-logo_orig.png
IP
File type PNG image data, 225 x 225, 8-bit colormap, non-interlaced\012- data
Hash 378d84d607d4dd8bd40f105f1160077e
b6983033e51f99adeef2b9297df766c67a2bf7a8
7318fd699cf80668117d6412006ba47772b8dbbe27b705f787bda98a16025ce5
GET /uploads/1/6/2/2/16226598/guidestar-gold-logo_orig.png HTTP/1.1
Host: www.sfmariposakids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/donate.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 10:20:09 GMT
Content-Type: image/png
Content-Length: 7367
Connection: keep-alive
Last-Modified: Sun, 11 Jul 2021 19:18:41 GMT
x-rgw-object-type: Normal
ETag: "378d84d607d4dd8bd40f105f1160077e"
x-amz-request-id: tx00000000000006cf91bbb-0063db8e59-c695612-sfo1
X-Storage-Bucket: z7318
X-Storage-Object: 7318fd699cf80668117d6412006ba47772b8dbbe27b705f787bda98a16025ce5
X-Host: blu71.sf2p.intern.weebly.net
Accept-Ranges: bytes
js.stripe.com/v3/m-outer-93afeeb17bc37e711759584dbfc50d47.html
200 OK 122 B URL HTTP/2 js.stripe.com/v3/m-outer-93afeeb17bc37e711759584dbfc50d47.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 0fb49bf445ceac1dcb1b6c5d284a57a1
8988f3ceef20a494a419e595e8d802a0dc663c7a
5e0d98b9fefc9f5ccf02b5ac4f4e4de3fe727a1ac97a4cd778efd58062afd5e8
GET /v3/m-outer-93afeeb17bc37e711759584dbfc50d47.html HTTP/1.1
Host: js.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 13 Nov 2022 20:03:40 GMT
etag: "93afeeb17bc37e711759584dbfc50d47"
cache-control: max-age=31536000
content-type: text/html; charset=utf-8
content-security-policy: base-uri 'none'; connect-src 'self' https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src https://m.stripe.network; img-src https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; report-uri https://q.stripe.com/csp-report
content-security-policy-report-only: base-uri 'none'; connect-src 'self' https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src https://m.stripe.network; img-src https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; report-uri https://q.stripe.com/csp-report
strict-transport-security: max-age=31556926; includeSubDomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
server: Fastly
content-encoding: br
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:09 GMT
via: 1.1 varnish
age: 6963284
x-request-id: 45e1b9b4-3bba-499f-9a3e-3ae2b15f2eda
x-served-by: cache-bma1622-BMA
x-cache: HIT
x-cache-hits: 233480
vary: Accept-Encoding
timing-allow-origin: *
content-length: 122
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 409458e71bceee1f2503bdaff34e714a
f6fc65e4bc80a147e88985046cccedb0e8df5a7f
850d8a2b5d95ae00fc6eb59b227d4e4f012dfcc1f401e7bece7465cab5564a74
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=133867
Date: Thu, 02 Feb 2023 10:20:09 GMT
Etag: "63daf644-1d7"
Expires: Fri, 03 Feb 2023 23:31:16 GMT
Last-Modified: Wed, 01 Feb 2023 23:31:16 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RjgnOJ8F9YQhsx1GtT80pbK-QMdyOvzZw8Bpyu1Biwou6U_MwmfwoQ==
js.stripe.com/v3/fingerprinted/js/m-outer-8cb24ab2d649fd36a488d04d8c457933.js
200 OK 332 B URL HTTP/2 js.stripe.com/v3/fingerprinted/js/m-outer-8cb24ab2d649fd36a488d04d8c457933.js
IP
File type ASCII text, with very long lines (526)
Hash ada7d17b721f065b91d249c998f2967e
1c686ed2c2218a3889b7d9a9b1acdf851b0bf563
12125f2ad96bb800b475309dcc276eeddffd6db095e29fe1f8514b3f8c7e544a
GET /v3/fingerprinted/js/m-outer-8cb24ab2d649fd36a488d04d8c457933.js HTTP/1.1
Host: js.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.stripe.com/v3/m-outer-93afeeb17bc37e711759584dbfc50d47.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 13 Nov 2022 20:03:40 GMT
etag: "f8f6a4584135f737b26927596ce6e0a7"
cache-control: max-age=31536000
content-type: text/javascript; charset=utf-8
strict-transport-security: max-age=31556926; includeSubDomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
server: Fastly
content-encoding: br
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:09 GMT
via: 1.1 varnish
age: 6963285
x-request-id: 5568d7c9-3b94-437e-953b-4c2e4e12fa44
x-served-by: cache-bma1622-BMA
x-cache: HIT
x-cache-hits: 193370
vary: Accept-Encoding
timing-allow-origin: *
content-length: 332
X-Firefox-Spdy: h2
app.multilanguage.xyz/static/img/icon.png
200 OK 6.8 kB URL HTTP/2 app.multilanguage.xyz/static/img/icon.png
IP
ASN #394380 LEASEWEB-USA-DAL
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash ddb5268336ba1104e0640c36c573ce50
c1d17fa5e041d8e9a5362c131cb513389f3380f6
a1cbe2c8e2c6d846f1540cacbdcdfbe1ae9f1ba681e0bb5e8d04ce643026ea3f
GET /static/img/icon.png HTTP/1.1
Host: app.multilanguage.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 10:20:09 GMT
content-type: image/png
content-length: 6751
last-modified: Mon, 03 Jan 2022 16:54:35 GMT
etag: "1a5f-5d4b060187bbd"
accept-ranges: bytes
cache-control: max-age=2628000, public
expires: Sat, 04 Mar 2023 10:20:09 GMT
access-control-allow-origin: *
vary: User-Agent
X-Firefox-Spdy: h2
m.stripe.network/inner.html
200 OK 930 B URL HTTP/2 m.stripe.network/inner.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (930), with no line terminators
Hash fc2e029628f163bb59adc6fa5a31161c
0f4547ae510d1bf36e3630d41bdab29d64c03d64
a5f27af9c0c6f37979ebafcac22eb3a613841a3d4e728f4577baf94e64d42f35
GET /inner.html HTTP/1.1
Host: m.stripe.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.stripe.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 930
last-modified: Thu, 17 Mar 2022 19:03:12 GMT
accept-ranges: bytes
server: Cloudfront
x-content-type-options: nosniff
strict-transport-security: max-age=31556926; includeSubDomains; preload
content-security-policy: base-uri 'none'; connect-src https://m.stripe.network https://m.stripe.com; default-src 'none'; font-src https://m.stripe.network https://fonts.gstatic.com; form-action 'none'; frame-src https://m.stripe.network https://js.stripe.com; img-src https://m.stripe.network https://m.stripe.com https://b.stripecdn.com; script-src https://m.stripe.network 'sha256-e/Jqu4k9Gk1ZCWO6StAsfhF3i7qgIwfuitaD1g9DyvE='; style-src https://m.stripe.network; report-uri https://q.stripe.com/csp-report
date: Thu, 02 Feb 2023 10:16:34 GMT
cache-control: max-age=300, public
etag: "fc2e029628f163bb59adc6fa5a31161c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZeDyRyiUWB2L5Y-uejX0WeVcJgE-9jvhIk9lRwb8IBec_X3cURPzIA==
age: 216
X-Firefox-Spdy: h2
app.multilanguage.xyz/static/data/require_labels.json
200 OK 28 B URL HTTP/2 app.multilanguage.xyz/static/data/require_labels.json
IP
ASN #394380 LEASEWEB-USA-DAL
File type JSON data\012- , ASCII text, with no line terminators
Hash 1f2924403425a5fc40854a9c939ffd50
b9131f33bc9b368c746d00f50f94f159ed493384
826fde36e9310e2dcc0c3bb58ccc4767324f62b02605d7e338c774e3170277e2
GET /static/data/require_labels.json HTTP/1.1
Host: app.multilanguage.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.sfmariposakids.com
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 10:20:09 GMT
content-type: application/json
content-length: 28
last-modified: Wed, 11 May 2022 17:57:30 GMT
etag: "1c-5dec02ccb2f93"
accept-ranges: bytes
cache-control: max-age=600
expires: Thu, 02 Feb 2023 10:30:09 GMT
access-control-allow-origin: *
vary: User-Agent
X-Firefox-Spdy: h2
www.sfmariposakids.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
200 OK 348 B URL HTTP/1.1 www.sfmariposakids.com/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]
IP
File type JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Hash a944dd688c99d2901d6719be713271c0
4f5454d5d434829baf46671638610791758725d9
adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49
POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1
Host: www.sfmariposakids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: https://www.sfmariposakids.com
Connection: keep-alive
Referer: https://www.sfmariposakids.com/donate.html
Cookie: is_mobile=0; language=en; _snow_ses.ecb7=*; _snow_id.ecb7=43941d77-01d1-4b6e-9bfb-f67a509030b2.1675333235.1.1675333235.1675333235.1b7c5398-590b-46fa-9417-f1790885f6ce
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 10:20:09 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu74.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=28
Connection: Keep-Alive
Content-Type: application/json
www.sfmariposakids.com/ajax/api/JsonRPC/Commerce/?Commerce[Checkout::getMiniCart]
200 OK 2.7 kB URL HTTP/1.1 www.sfmariposakids.com/ajax/api/JsonRPC/Commerce/?Commerce[Checkout::getMiniCart]
IP
File type JSON data\012- HTML document text\012- HTML document, ASCII text, with very long lines (2727), with no line terminators
Hash ee247796d81009b16755a08e1fccb50c
b8334605d84d96b35bcad7f3f76b103d77db4f2a
fa250a1e6ce652ad2686b5a91f82df1272c04ac8731165ae636746e9f11c3e5a
POST /ajax/api/JsonRPC/Commerce/?Commerce[Checkout::getMiniCart] HTTP/1.1
Host: www.sfmariposakids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 69
Origin: https://www.sfmariposakids.com
Connection: keep-alive
Referer: https://www.sfmariposakids.com/donate.html
Cookie: is_mobile=0; language=en; _snow_ses.ecb7=*; _snow_id.ecb7=43941d77-01d1-4b6e-9bfb-f67a509030b2.1675333235.1.1675333235.1675333235.1b7c5398-590b-46fa-9417-f1790885f6ce
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 10:20:09 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
X-Host: blu44.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 2727
Keep-Alive: timeout=10, max=67
Connection: Keep-Alive
Content-Type: application/json
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash eb02417858986aaa4b8748f83c9386b0
5366f97ad99927e67e2d96f10125377b34215b94
26fbbcb076d0e79b5afe5aeda69dac1617d5c1fe7b7101ab69039cae79850d24
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=116916
Date: Thu, 02 Feb 2023 10:20:09 GMT
Etag: "63daa4b1-1d7"
Expires: Fri, 03 Feb 2023 18:48:45 GMT
Last-Modified: Wed, 01 Feb 2023 17:43:13 GMT
Server: ECS (nyb/1D14)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -YvLWe2bzNZseBzzFfvleEVhwXcOrV4Lhh05DH97fWTTuN0DcufWJQ==
Age: 3932
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash eb02417858986aaa4b8748f83c9386b0
5366f97ad99927e67e2d96f10125377b34215b94
26fbbcb076d0e79b5afe5aeda69dac1617d5c1fe7b7101ab69039cae79850d24
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=116886
Date: Thu, 02 Feb 2023 10:20:09 GMT
Etag: "63daa4b1-1d7"
Expires: Fri, 03 Feb 2023 18:48:15 GMT
Last-Modified: Wed, 01 Feb 2023 17:43:13 GMT
Server: ECS (nyb/1D19)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0-608QEmUy5PE4aDOW6bq8cRQ2WiTx3OSDRTOBjYW-slzyHrMzAPaw==
Age: 3902
www.sfmariposakids.com/uploads/1/6/2/2/16226598/background-images/853317587.jpg
200 OK 166 kB URL HTTP/1.1 www.sfmariposakids.com/uploads/1/6/2/2/16226598/background-images/853317587.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1076x609, components 3\012- data
Size 166 kB (165583 bytes)
Hash 823a3063236c023213b046a9f34f255b
7d3fe2823f8d6d2b12a470941987f0a63f1c6270
874718079a30d41072178813ff7bf01971e42de9759611071dfb3e8cdd91f891
GET /uploads/1/6/2/2/16226598/background-images/853317587.jpg HTTP/1.1
Host: www.sfmariposakids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/donate.html
Cookie: is_mobile=0; language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 10:20:09 GMT
Content-Type: image/jpeg
Content-Length: 165583
Connection: keep-alive
Last-Modified: Thu, 21 Oct 2021 15:57:52 GMT
x-rgw-object-type: Normal
ETag: "823a3063236c023213b046a9f34f255b"
x-amz-request-id: tx00000000000006c7c8e07-0063db8e59-c699baa-sfo1
X-Storage-Bucket: z8747
X-Storage-Object: 874718079a30d41072178813ff7bf01971e42de9759611071dfb3e8cdd91f891
X-Host: grn28.sf2p.intern.weebly.net
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash bb7d23f59c46fa5bce46104f0b3bf81e
41a8a2cb9f26417ee40364a5e6b03dd01b6e18b8
b604dec0d52b2948957ecec3bfea0cfaf6776a8339112848d9882ac214ca6e58
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5964
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 10:20:10 GMT
Last-Modified: Thu, 02 Feb 2023 08:40:46 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 02 Feb 2023 09:44:08 GMT
expires: Thu, 02 Feb 2023 11:44:08 GMT
cache-control: public, max-age=7200
age: 2162
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.sfmariposakids.com/
Origin: https://www.sfmariposakids.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 10:20:10 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://www.sfmariposakids.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2
ssl.google-analytics.com/ga.js
200 OK 17 kB URL HTTP/2 ssl.google-analytics.com/ga.js
IP
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Thu, 02 Feb 2023 08:41:16 GMT
expires: Thu, 02 Feb 2023 10:41:16 GMT
cache-control: public, max-age=7200
age: 5934
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.sfmariposakids.com/favicon.ico
200 OK 17 kB URL HTTP/1.1 www.sfmariposakids.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel\012- data
Hash e5a55507c35cdd60e8ca5966164b0a1e
bcf2b0d91a58ebcf11bf833b81360e27e81661f2
e73cd1533036243aaa18035ea297ac0bc864b28fe9538cc8a60ba331cc48a9fb
GET /favicon.ico HTTP/1.1
Host: www.sfmariposakids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/donate.html
Cookie: is_mobile=0; language=en; _snow_ses.ecb7=*; _snow_id.ecb7=43941d77-01d1-4b6e-9bfb-f67a509030b2.1675333235.1.1675333235.1675333235.1b7c5398-590b-46fa-9417-f1790885f6ce
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 10:20:10 GMT
Content-Type: image/x-icon
Content-Length: 16958
Connection: keep-alive
Last-Modified: Fri, 07 Oct 2022 19:53:53 GMT
x-rgw-object-type: Normal
ETag: "e5a55507c35cdd60e8ca5966164b0a1e"
x-amz-request-id: tx0000000000000647fbeba-0063cf05c5-c6aed46-sfo1
X-Storage-Bucket: ze73c
X-Storage-Object: e73cd1533036243aaa18035ea297ac0bc864b28fe9538cc8a60ba331cc48a9fb
X-Host: blu80.sf2p.intern.weebly.net
Accept-Ranges: bytes
ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 ec.editmysite.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: ec.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1803
Origin: https://www.sfmariposakids.com
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 10:20:10 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=e93acee1-34f9-4ef0-bc78-d791a3f24680; Expires=Fri, 02 Feb 2024 10:20:10 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.sfmariposakids.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
m.stripe.com/6
200 OK 156 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a452b9e09746737292ea38972d5bf452
0b65ceaecc538d4a02b9f954f3863762878d1fc7
ee0ca8ff7ae101030a3f580f205514d0264d106db6df61b083c45040ab4f0c7b
POST /6 HTTP/1.1
Host: m.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2368
Origin: https://m.stripe.network
Connection: keep-alive
Referer: https://m.stripe.network/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 10:20:10 GMT
content-length: 156
set-cookie: m=fac00afe-6aaf-4021-8822-5954a743ac43043ecc;Expires=Sat, 01-Feb-2025 10:20:10 GMT;Secure;HttpOnly; SameSite=None
x-content-type-options: nosniff
x-stripe-bg-intended-route-color: blue
access-control-allow-origin: https://m.stripe.network
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
strict-transport-security: max-age=31556926; includeSubDomains; preload
content-type: application/json;charset=utf-8
X-Firefox-Spdy: h2
secure.givelively.org/assets/frontend/sentry_default_template_view-417c0d41f17d0493ae755e67ae836ebe48f86db101fe2bde144987d92c99ef9e.js
200 OK 5.3 kB URL HTTP/2 secure.givelively.org/assets/frontend/sentry_default_template_view-417c0d41f17d0493ae755e67ae836ebe48f86db101fe2bde144987d92c99ef9e.js
IP
File type ASCII text, with very long lines (16611), with no line terminators
Hash 49ced2ddf4e12b1193ecf734b590356a
ab599bd5691c8112381db58cb3e121999e14324a
18332235f011f3e23eb0351d43082460d3e72a56f1f95deffb2842db5ae8000e
GET /assets/frontend/sentry_default_template_view-417c0d41f17d0493ae755e67ae836ebe48f86db101fe2bde144987d92c99ef9e.js HTTP/1.1
Host: secure.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.givelively.org/donate/the-kids-co-op-inc?ref=sd_widget&widget_url=https%3A%2F%2Fwww.sfmariposakids.com%2Fdonate.html&referrer_url=&show_donate_now_button=false&show_v1_form=true
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 5260
server: Cowboy
last-modified: Tue, 31 Jan 2023 21:37:53 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur, 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
date: Thu, 02 Feb 2023 10:20:10 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PZrEtnDJxOf_Q0dYnZd_8wZ8NmXCbecwmaTjEp9JhezYR8RtXVtEow==
age: 41657
X-Firefox-Spdy: h2
secure.givelively.org/assets/frontend/default_template_donation_container-0bd69eb3a26f5de9b070eba01f19e85246b67e13e11f9cb4ce7724f17b7d548a.js
200 OK 370 kB URL HTTP/2 secure.givelively.org/assets/frontend/default_template_donation_container-0bd69eb3a26f5de9b070eba01f19e85246b67e13e11f9cb4ce7724f17b7d548a.js
IP
File type ASCII text, with very long lines (32761)
Size 370 kB (370134 bytes)
Hash 9c6335614e1a5ef9724fd23d83f555a4
4fa534296040ec0469d028f2eba0d783137fc764
b66955a1e28499af01a9f038447c330eb2da4cdc6b7cfc0c9cb57e07b08315f5
GET /assets/frontend/default_template_donation_container-0bd69eb3a26f5de9b070eba01f19e85246b67e13e11f9cb4ce7724f17b7d548a.js HTTP/1.1
Host: secure.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.givelively.org/donate/the-kids-co-op-inc?ref=sd_widget&widget_url=https%3A%2F%2Fwww.sfmariposakids.com%2Fdonate.html&referrer_url=&show_donate_now_button=false&show_v1_form=true
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 370134
server: Cowboy
last-modified: Tue, 31 Jan 2023 21:37:53 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur, 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
date: Thu, 02 Feb 2023 10:20:10 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9LjAU_hGBOS8E4P51aXsle5pq1vhUPIikflzP04RZMxAoer5MNfv7g==
age: 25248
X-Firefox-Spdy: h2
secure.givelively.org/assets/frontend/smart_donations_app-72fbc4949e72539ab13be5259f90f5c3843ab8b83ce55f70c555579db3aae4e9.js
200 OK 272 kB URL HTTP/2 secure.givelively.org/assets/frontend/smart_donations_app-72fbc4949e72539ab13be5259f90f5c3843ab8b83ce55f70c555579db3aae4e9.js
IP
File type ASCII text, with very long lines (32754)
Size 272 kB (271760 bytes)
Hash dc0e5fa0e873d677b1c5690927e614ba
53179177437d039b9a23968623fc49701060a6b9
f9528a8041d7f468ecc813e008e6638017c794d134d2cbf87fd57bd90a55d0ba
GET /assets/frontend/smart_donations_app-72fbc4949e72539ab13be5259f90f5c3843ab8b83ce55f70c555579db3aae4e9.js HTTP/1.1
Host: secure.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.givelively.org/donate/the-kids-co-op-inc?ref=sd_widget&widget_url=https%3A%2F%2Fwww.sfmariposakids.com%2Fdonate.html&referrer_url=&show_donate_now_button=false&show_v1_form=true
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 271760
server: Cowboy
last-modified: Tue, 31 Jan 2023 21:37:54 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur, 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
date: Thu, 02 Feb 2023 10:20:10 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: auiuvepU1uaMZbYV77Sr7kCu48P2ZdBSQc9X-qnclFE3oFCjDNT1KA==
age: 42135
X-Firefox-Spdy: h2
secure.givelively.org/assets/frontend/progress_meter_app-ffec3fc33e09011c756cf6c13451c59530054479efb7101f535bf74fc99dff0c.js
200 OK 77 kB URL HTTP/2 secure.givelively.org/assets/frontend/progress_meter_app-ffec3fc33e09011c756cf6c13451c59530054479efb7101f535bf74fc99dff0c.js
IP
File type ASCII text, with very long lines (32760)
Hash f020ecb5683cd13c3d4fb6bd85058ea2
2dd5e47cda33e8fb3a545c07b615523e61e73ecc
6accc34d7b6458c86020e0853d2bdcd59c83624ce7da4f0e0885ac491687e856
GET /assets/frontend/progress_meter_app-ffec3fc33e09011c756cf6c13451c59530054479efb7101f535bf74fc99dff0c.js HTTP/1.1
Host: secure.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.givelively.org/donate/the-kids-co-op-inc?ref=sd_widget&widget_url=https%3A%2F%2Fwww.sfmariposakids.com%2Fdonate.html&referrer_url=&show_donate_now_button=false&show_v1_form=true
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 77305
server: Cowboy
last-modified: Tue, 31 Jan 2023 21:37:53 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur, 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
date: Thu, 02 Feb 2023 10:20:10 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ucc1d0s8CstJ9Cy2SBgAJEPN7KNzelPHIgOc4u2EjnVX_--HyeNbIA==
age: 42134
X-Firefox-Spdy: h2
secure.givelively.org/assets/v2/application-00157cebe33ec546e89e7c00bbaf64088b8849a0476de250a4699e7bce547483.css
200 OK 36 kB URL HTTP/2 secure.givelively.org/assets/v2/application-00157cebe33ec546e89e7c00bbaf64088b8849a0476de250a4699e7bce547483.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65323)
Hash 5e2923c246bfe42832da55b96f5ae879
8bf3e9ac603250818383852ccf1255253f221a08
18c5a4e4cd0f8820ddaafbe9c0b8c3cd30f99a865e45343dbcc78ab0ac1b1f37
GET /assets/v2/application-00157cebe33ec546e89e7c00bbaf64088b8849a0476de250a4699e7bce547483.css HTTP/1.1
Host: secure.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.givelively.org/donate/the-kids-co-op-inc?ref=sd_widget&widget_url=https%3A%2F%2Fwww.sfmariposakids.com%2Fdonate.html&referrer_url=&show_donate_now_button=false&show_v1_form=true
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 35534
server: Cowboy
last-modified: Wed, 07 Dec 2022 13:57:30 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur, 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
date: Thu, 02 Feb 2023 10:20:10 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fSBmdeVnbJnTyVmnv2DxAvTSwg-8KcFHLl9w6wkuW15PBWzvysws7g==
age: 41657
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash de49044c9365e16fec3a6d361cb94728
2b7b69c16de6fda1ae5206f92fe781ee07bd182a
6e76887b036544a5da3918116a180876c094cc3b31676abce8d5b7b716b00c30
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 10:20:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
secure.givelively.org/donate/the-kids-co-op-inc?ref=sd_widget&widget_url=https%3A%2F%2Fwww.sfmariposakids.com%2Fdonate.html&referrer_url=&show_donate_now_button=false&show_v1_form=true
200 OK 38 kB URL HTTP/2 secure.givelively.org/donate/the-kids-co-op-inc?ref=sd_widget&widget_url=https%3A%2F%2Fwww.sfmariposakids.com%2Fdonate.html&referrer_url=&show_donate_now_button=false&show_v1_form=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32760), with CRLF, LF line terminators
Hash 73cf517da42ddb53ab5c6d0c4d13d67c
de3cb334f31ce6d0f71b36f20423430169cc8484
a60feb733dbaba5c2f78bbf7499693c7ba7b207ace3117076c5daa92c2d13b7e
GET /donate/the-kids-co-op-inc?ref=sd_widget&widget_url=https%3A%2F%2Fwww.sfmariposakids.com%2Fdonate.html&referrer_url=&show_donate_now_button=false&show_v1_form=true HTTP/1.1
Host: secure.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
server: Cowboy
date: Thu, 02 Feb 2023 10:20:10 GMT
referrer-policy: origin-when-cross-origin
link: <https://secure.givelively.org/assets/frontend/sentry_default_template_view-417c0d41f17d0493ae755e67ae836ebe48f86db101fe2bde144987d92c99ef9e.js>; rel=preload; as=script; nopush,<https://secure.givelively.org/assets/frontend/default_template_donation_container-0bd69eb3a26f5de9b070eba01f19e85246b67e13e11f9cb4ce7724f17b7d548a.js>; rel=preload; as=script; nopush,<https://secure.givelively.org/assets/v2/application-00157cebe33ec546e89e7c00bbaf64088b8849a0476de250a4699e7bce547483.css>; rel=preload; as=style; nopush,<https://use.fontawesome.com/releases/v5.5.0/css/all.css>; rel=preload; as=style; nopush,<https://secure.givelively.org/assets/v2/application-f2130f2be26dc6bcebeaeaea147d116f2158a4d94b1fa30083d6ab343b20217b.js>; rel=preload; as=script; nopush,<https://js.stripe.com/v3/>; rel=preload; as=script; nopush,<https://cdnjs.cloudflare.com/ajax/libs/iframe-resizer/3.6.3/iframeResizer.contentWindow.min.js>; rel=preload; as=script; nopush,<https://maps.googleapis.com/maps/api/js?key=AIzaSyDn7Z0DbkWJFqEs5NdeekLXvZ6a-JDGCsY&libraries=places>; rel=preload; as=script; nopush,<https://secure.givelively.org/assets/frontend/initialize-16fb4ae1f36a162ba8c1ea58cee4d06cfbad963afa657fa851f702a687f5e488.js>; rel=preload; as=script; nopush,<https://secure.givelively.org/assets/frontend/progress_meter_app-ffec3fc33e09011c756cf6c13451c59530054479efb7101f535bf74fc99dff0c.js>; rel=preload; as=script; nopush,<https://secure.givelively.org/assets/frontend/smart_donations_app-72fbc4949e72539ab13be5259f90f5c3843ab8b83ce55f70c555579db3aae4e9.js>; rel=preload; as=script; nopush,<https://secure.givelively.org/assets/frontend/heap-911ec92d73318c40906664ca5f941962b45773406868c28c8d24a1afdd9de952.js>; rel=preload; as=script; nopush,<https://secure.givelively.org/assets/frontend/application-58c046fc2591b13c4d965b9eb05a95343932bdfcf73f76fa0172f92ac2c4d3d6.js>; rel=preload; as=script; nopush,<https://secure.givelively.org/assets/frontend/global_store-11810724c27a411bd444b2bb996d18496f399761300cbb36477d9fc3fb086357.js>; rel=preload; as=script; nopush
etag: W/"7db870f34e4be661a00c21896896c734"
cache-control: max-age=0, private, must-revalidate
set-cookie: _give-lively_session=IqowF%2BGYKmHjt1fd30x8LhaXd3uv%2F200zsf4A2WrT%2FFAoBsS%2BibFTQs19UeJR6PPTP6kCssmo6XftQYSAE5U%2BR2Mg%2FjOYQl%2B9cHhSXSMQNcWNP54G1ghUQ9P%2FQI32TGIahnY%2BxM%2BYRAWISzSZgg6Ea4%2BOLZgiZsPWN8T3oiaJLOcveb7DPb2VhSCt04gZfTV1pbTlxJUHyecMVNjq5xDbj6OpAo89c0Wp3NlJgafADgtAu6ZsGqQIXHezC%2FMZWeVuKcBQsFYCSh7UeQeImIs5pkjVfJQp%2B8A1iNwfg%3D%3D--TDm1r6s64mI%2BARd5--Fz9sJWErwT%2B%2B%2FUqNtMjtvw%3D%3D; domain=.givelively.org; path=/; secure; HttpOnly; SameSite=Lax
x-request-id: 94a19825-f462-4e73-b4e2-720a5302f77a
vary: Accept-Encoding, Origin
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur, 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-cache: Miss from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PU3GoJ5B_imaYoZ6NoigTtXd-uEMmfbN4GULdfNVzNPQX75THOsymw==
X-Firefox-Spdy: h2
secure.givelively.org/assets/v2/application-f2130f2be26dc6bcebeaeaea147d116f2158a4d94b1fa30083d6ab343b20217b.js
200 OK 140 kB URL HTTP/2 secure.givelively.org/assets/v2/application-f2130f2be26dc6bcebeaeaea147d116f2158a4d94b1fa30083d6ab343b20217b.js
IP
File type ASCII text, with very long lines (32768)
Size 140 kB (139456 bytes)
Hash 3501a7b88d31c1794f65c5946015f2bd
0923baf43d50484dcbf55b8a0519290cc5a747ac
02a124ed52e7daf04533296c30d6e502b3baa3ffe4511790860c045df287bc11
GET /assets/v2/application-f2130f2be26dc6bcebeaeaea147d116f2158a4d94b1fa30083d6ab343b20217b.js HTTP/1.1
Host: secure.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.givelively.org/donate/the-kids-co-op-inc?ref=sd_widget&widget_url=https%3A%2F%2Fwww.sfmariposakids.com%2Fdonate.html&referrer_url=&show_donate_now_button=false&show_v1_form=true
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 139456
server: Cowboy
last-modified: Tue, 31 Jan 2023 22:30:50 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur, 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
date: Thu, 02 Feb 2023 10:20:10 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RJYt69P3yhEW4czw_rEYUpkZPE417ntiCLHTns3rwPugZwTHWbBUqw==
age: 13492
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/iframe-resizer/3.6.3/iframeResizer.contentWindow.min.js
200 OK 4.7 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/iframe-resizer/3.6.3/iframeResizer.contentWindow.min.js
IP
File type ASCII text, with very long lines (13993)
Hash 8010ef85462356f37d5e8e87bd95b757
1c24aadc9ab3c103128a06e692584853ceb682ac
01880689d4d3895c910b3920187e9f6f5899aa22b76aaa604dc2458780cf26c0
GET /ajax/libs/iframe-resizer/3.6.3/iframeResizer.contentWindow.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.givelively.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 10:20:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 4677
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e9f-3830"
last-modified: Mon, 04 May 2020 16:11:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2395394
expires: Tue, 23 Jan 2024 10:20:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WJ8LwTSrAgMHDMIXOFqJFggTCLqHzgRHAqbLKbWTbvUhgVMs4IGpM9CGa0EeBORnMzUgczLpiI7LXhJ5JGNlVAGSk3268H5NklCv28uGxJMUx%2F6eu4mjfljqBqIGe4r6INMraP%2Fo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7932315719550b31-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
secure.givelively.org/assets/frontend/heap-911ec92d73318c40906664ca5f941962b45773406868c28c8d24a1afdd9de952.js
200 OK 674 B URL HTTP/2 secure.givelively.org/assets/frontend/heap-911ec92d73318c40906664ca5f941962b45773406868c28c8d24a1afdd9de952.js
IP
File type ASCII text, with very long lines (1287), with no line terminators
Hash d017badb1e9fffa30145b04370105895
25a47da8cf66ac474b6bd1781d400c83ef5db888
08cf184d6b468de59bbc89114cb4ef14c31577d820b775e61bf04ef7cd1abcf0
GET /assets/frontend/heap-911ec92d73318c40906664ca5f941962b45773406868c28c8d24a1afdd9de952.js HTTP/1.1
Host: secure.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.givelively.org/donate/the-kids-co-op-inc?ref=sd_widget&widget_url=https%3A%2F%2Fwww.sfmariposakids.com%2Fdonate.html&referrer_url=&show_donate_now_button=false&show_v1_form=true
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 674
server: Cowboy
last-modified: Tue, 31 Jan 2023 21:37:53 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur, 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
date: Thu, 02 Feb 2023 10:20:10 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Th1lwvA0HBmv3x5w2axmeYSyz_sYOGgWEZvGnfwe3GzvSrlgkV0AIg==
age: 42134
X-Firefox-Spdy: h2
secure.givelively.org/assets/frontend/initialize-16fb4ae1f36a162ba8c1ea58cee4d06cfbad963afa657fa851f702a687f5e488.js
200 OK 64 kB URL HTTP/2 secure.givelively.org/assets/frontend/initialize-16fb4ae1f36a162ba8c1ea58cee4d06cfbad963afa657fa851f702a687f5e488.js
IP
File type ASCII text, with very long lines (32763)
Hash a7b595bdeaec60cc23cbbcc6097bc623
da04b952424119828a53ce7c5057c097a75b8bf0
92cb532e1b2edcb90420370a482dabc833c51469e9975a928e90b422f73e3ee8
GET /assets/frontend/initialize-16fb4ae1f36a162ba8c1ea58cee4d06cfbad963afa657fa851f702a687f5e488.js HTTP/1.1
Host: secure.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.givelively.org/donate/the-kids-co-op-inc?ref=sd_widget&widget_url=https%3A%2F%2Fwww.sfmariposakids.com%2Fdonate.html&referrer_url=&show_donate_now_button=false&show_v1_form=true
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 63596
server: Cowboy
last-modified: Tue, 31 Jan 2023 22:30:50 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur, 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
date: Thu, 02 Feb 2023 10:20:10 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: K_JmarnH3Qu4dr_bOSYsizA_IkELhwnxoFIBpUNcnfSt3eJtFobkuw==
age: 28740
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/js?key=AIzaSyDn7Z0DbkWJFqEs5NdeekLXvZ6a-JDGCsY&libraries=places
200 OK 56 kB URL HTTP/2 maps.googleapis.com/maps/api/js?key=AIzaSyDn7Z0DbkWJFqEs5NdeekLXvZ6a-JDGCsY&libraries=places
IP
File type ASCII text, with very long lines (2460)
Hash 9815ddfb298e68d8139d90e41a533d52
0c328415ee99a0ffb6cc4a5009848658ba9943f1
3f140f7de52da75615ca027f7bc886faccf03201a12eb8762de92711816e4239
GET /maps/api/js?key=AIzaSyDn7Z0DbkWJFqEs5NdeekLXvZ6a-JDGCsY&libraries=places HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.givelively.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Thu, 02 Feb 2023 10:20:10 GMT
expires: Thu, 02 Feb 2023 10:50:10 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 55705
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=29
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
secure.givelively.org/spinner.gif
200 OK 4.9 kB URL HTTP/2 secure.givelively.org/spinner.gif
IP
File type GIF image data, version 89a, 100 x 100\012- data
Hash 560c7fd7b91c5e5507137a54f1fdbfe8
a88b10ae2a3b38b8b7adaff0a7470f258a975da0
b860f153027662f049f2b3c85112e8f94baf10132a9d72b8ac998cfad4e03d54
GET /spinner.gif HTTP/1.1
Host: secure.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 4918
date: Thu, 02 Feb 2023 10:20:11 GMT
last-modified: Wed, 07 Oct 2020 21:59:43 GMT
etag: "560c7fd7b91c5e5507137a54f1fdbfe8"
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zTpwx6cfpLoqZStleDWLYAbGhzwJGQM0UUlrLX8xf6YuPLQFhsRg4w==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash de49044c9365e16fec3a6d361cb94728
2b7b69c16de6fda1ae5206f92fe781ee07bd182a
6e76887b036544a5da3918116a180876c094cc3b31676abce8d5b7b716b00c30
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 10:20:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
images.givelively.org/logos/powered-by-give-lively@2x.png
200 OK 14 kB URL HTTP/2 images.givelively.org/logos/powered-by-give-lively@2x.png
IP
File type PNG image data, 284 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 40a4ae9699fe72179a146fccb5133aef
dd07d16914400968ea83c1ee5f51939d08527934
840ee62c133c553ff018a6b00f5b5d6836c37a0205f1be2f82b12d4f02b9cb01
GET /logos/powered-by-give-lively@2x.png HTTP/1.1
Host: images.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.givelively.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 13947
last-modified: Thu, 17 Sep 2020 21:22:11 GMT
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Feb 2023 10:20:10 GMT
etag: "40a4ae9699fe72179a146fccb5133aef"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fz8kssiXAOsRR1_apEQM8Qhc0JZ4lhdRd8LoU1YOYjqZUncn6gZhAA==
age: 21553
X-Firefox-Spdy: h2
js.datadome.co/tags.js
200 OK 43 kB IP
File type ASCII text, with very long lines (65432)
Hash 75fee8645619b669e05eed0d332fb9ee
af9095cc20ce8f8d14052e87efb9de31fe43e803
e0f62f765af751d53cd8b045736f95f2d417c2ee9919c40a4ead1b0d6520f92e
GET /tags.js HTTP/1.1
Host: js.datadome.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.givelively.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 42836
date: Thu, 02 Feb 2023 10:11:21 GMT
server: Apache
strict-transport-security: max-age=15768000
last-modified: Wed, 01 Feb 2023 11:10:44 GMT
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=3600, public
expires: Thu, 02 Feb 2023 11:11:21 GMT
access-control-allow-origin: *
etag: "33404-5f3a17fded07d-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GDiKMQAkc59jpFE1qX-irdvIbtgMzNgSnRBFGU6eRPnfX3DUhseyzg==
age: 529
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
200 OK 23 B URL HTTP/2 maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
IP
File type JSON data\012- , ASCII text
Hash e3981ca10169a319d5aa062bf43a5fa1
2c6ed584767b65688ce99b1ebe1a3b7448a67421
8b0b8749aba12de93f3cf5d86f9fac9d6de7cac400a17473718f182a34ebb7e9
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.givelively.org
Connection: keep-alive
Referer: https://secure.givelively.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 02 Feb 2023 10:20:11 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://secure.givelively.org
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sentry.io/api/2530294/envelope/?sentry_key=ff1501bc43514145a38d52d0feb24672&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.30.0
200 OK 2 B URL HTTP/1.1 sentry.io/api/2530294/envelope/?sentry_key=ff1501bc43514145a38d52d0feb24672&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.30.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/2530294/envelope/?sentry_key=ff1501bc43514145a38d52d0feb24672&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.30.0 HTTP/1.1
Host: sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.givelively.org/
Content-Type: text/plain;charset=UTF-8
Origin: https://secure.givelively.org
Content-Length: 461
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 10:20:11 GMT
Content-Type: application/json
Content-Length: 2
Connection: keep-alive
access-control-allow-origin: https://secure.givelively.org
access-control-expose-headers: x-sentry-error, x-sentry-rate-limits, retry-after
vary: Origin
x-envoy-upstream-service-time: 1
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
sentry.io/api/2530294/envelope/?sentry_key=ff1501bc43514145a38d52d0feb24672&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.30.0
200 OK 2 B URL HTTP/1.1 sentry.io/api/2530294/envelope/?sentry_key=ff1501bc43514145a38d52d0feb24672&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.30.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/2530294/envelope/?sentry_key=ff1501bc43514145a38d52d0feb24672&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.30.0 HTTP/1.1
Host: sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.givelively.org/
Content-Type: text/plain;charset=UTF-8
Origin: https://secure.givelively.org
Content-Length: 466
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 10:20:11 GMT
Content-Type: application/json
Content-Length: 2
Connection: keep-alive
access-control-allow-origin: https://secure.givelively.org
access-control-expose-headers: x-sentry-error, x-sentry-rate-limits, retry-after
vary: Origin
x-envoy-upstream-service-time: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
m.stripe.network/out-4.5.42.js
200 OK 386 kB URL HTTP/2 m.stripe.network/out-4.5.42.js
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Size 386 kB (385818 bytes)
Hash 4368ddea8a18ad38a63794c032a532d9
31addf7da80c74ccb7392a9a745666b978aa2b6b
88f12e5fa6afcacbbf32842d340958241692d8c7abff70630db4abea1030098e
GET /out-4.5.42.js HTTP/1.1
Host: m.stripe.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.stripe.network/inner.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
last-modified: Thu, 17 Mar 2022 19:03:12 GMT
server: Cloudfront
x-content-type-options: nosniff
strict-transport-security: max-age=31556926; includeSubDomains; preload
content-encoding: br
date: Thu, 02 Feb 2023 10:15:54 GMT
cache-control: max-age=300, public
etag: W/"21df7244385e5c0bdf32da01d0dad6c0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: b3_Z4p6-DS_TEMRwMCKX4hZiQuqPXLVNkwnTqQjxwNfONB7656-2Gg==
age: 256
X-Firefox-Spdy: h2
secure.givelively.org/double_the_donation_api_key/fc0330a1-5df8-46ae-ba37-1dec64d9fac6
200 OK 212 B URL HTTP/2 secure.givelively.org/double_the_donation_api_key/fc0330a1-5df8-46ae-ba37-1dec64d9fac6
IP
Hash 953688e2b0deda405e3d1ee5f4a5b049
6aed6700358f65cfa9c6e9392e120177411ce24e
356de739f74416173699b10e3b3b75b5d6394bfc53d3b42853b628bd9da16720
GET /double_the_donation_api_key/fc0330a1-5df8-46ae-ba37-1dec64d9fac6 HTTP/1.1
Host: secure.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.givelively.org/donate/the-kids-co-op-inc?ref=sd_widget&widget_url=https%3A%2F%2Fwww.sfmariposakids.com%2Fdonate.html&referrer_url=&show_donate_now_button=false&show_v1_form=true
sentry-trace: aa582a67bc534fb29dd1297563d5869c-9172550b7f5c541c-0
baggage: undefined
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: Cowboy
date: Thu, 02 Feb 2023 10:20:11 GMT
referrer-policy: origin-when-cross-origin
vary: Accept, Accept-Encoding, Origin
etag: W/"8a7305d249a357d579e420be378edc28"
cache-control: max-age=0, private, must-revalidate
x-request-id: f17a30e3-29b9-4f6b-9d2c-1460304e5a16
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur, 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-cache: Miss from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NTjB7-BChwEwTby1pYjTwWk5AaZiAVJAZSYU8dy36RI_X_2t_rZPQA==
X-Firefox-Spdy: h2
js.stripe.com/v3/fingerprinted/js/shared-b45dbb4369bee7dae6e57b3176415614.js
200 OK 69 kB URL HTTP/2 js.stripe.com/v3/fingerprinted/js/shared-b45dbb4369bee7dae6e57b3176415614.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash a927d9afd54c1ee465ebda2153cd9037
9892fec9ab652314ac34d199c8de3e362e99b131
c5fc0420fa80ca9cff3ddae333bb604a10e5ee3cb8c2faa25c50d855ed58c498
GET /v3/fingerprinted/js/shared-b45dbb4369bee7dae6e57b3176415614.js HTTP/1.1
Host: js.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.stripe.com/v3/controller-ac9bd0b70130006c09a7e09f8847e3ab.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 01 Feb 2023 19:34:31 GMT
etag: "5a67cb7d2bbd274b1db7327f38cf3688"
cache-control: max-age=31536000
content-type: text/javascript; charset=utf-8
strict-transport-security: max-age=31556926; includeSubDomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
server: Fastly
content-encoding: br
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:12 GMT
via: 1.1 varnish
age: 53036
x-request-id: 9b80267a-1e4b-4524-b384-a2f2137ff319
x-served-by: cache-bma1622-BMA
x-cache: HIT
x-cache-hits: 2204
vary: Accept-Encoding
timing-allow-origin: *
content-length: 68580
X-Firefox-Spdy: h2
js.stripe.com/v3/fingerprinted/js/controller-6032a0c1f80b3b0e4569cda649e76be3.js
200 OK 114 kB URL HTTP/2 js.stripe.com/v3/fingerprinted/js/controller-6032a0c1f80b3b0e4569cda649e76be3.js
IP
File type Unicode text, UTF-8 text, with very long lines (62385), with no line terminators
Size 114 kB (114369 bytes)
Hash fe406058b43cd54c157a0c4da792a018
0f41125cc3ae1999aa3d09e24971c9ad9597f144
7283bf941129546201c2971dffabbb4cc90bde7a31dacb6f78b8d2eafeaaee22
GET /v3/fingerprinted/js/controller-6032a0c1f80b3b0e4569cda649e76be3.js HTTP/1.1
Host: js.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.stripe.com/v3/controller-ac9bd0b70130006c09a7e09f8847e3ab.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 01 Feb 2023 19:34:29 GMT
etag: "947762ccf6dce6763894ebc86f1e0e44"
cache-control: max-age=31536000
content-type: text/javascript; charset=utf-8
strict-transport-security: max-age=31556926; includeSubDomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
server: Fastly
content-encoding: br
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:12 GMT
via: 1.1 varnish
age: 53036
x-request-id: 26854f18-8712-4578-bc22-91bdb3943b76
x-served-by: cache-bma1622-BMA
x-cache: HIT
x-cache-hits: 2184
vary: Accept-Encoding
timing-allow-origin: *
content-length: 114369
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1263a80e4bed64529b9e8ca61ccea9b8
97356de87ac091a56de8bb5485ce99712408d62b
f174c72446dbd9a2d0f1b6f74f02bec21d15d8da763b976d7bb9e598e786a7ee
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 10:20:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
images.givelively.org/nonprofits/fc0330a1-5df8-46ae-ba37-1dec64d9fac6/logos/the-kids-co-op-inc_processed_c311a76e8ea564c614de142d435de27259dfb25f2e14764403c0bfab8ad1a3b3_logo.png
200 OK 35 kB URL HTTP/2 images.givelively.org/nonprofits/fc0330a1-5df8-46ae-ba37-1dec64d9fac6/logos/the-kids-co-op-inc_processed_c311a76e8ea564c614de142d435de27259dfb25f2e14764403c0bfab8ad1a3b3_logo.png
IP
File type PNG image data, 645 x 345, 8-bit/color RGBA, non-interlaced\012- data
Hash 0fa80b2934078d63ce1a622e554552f0
7aaf23ec615438f26fa5ae0479bfdd16123d04fd
245dafdc312eb78751bdc96d2401c5aa64ceb0b62f38b6130682ee3d111d1e8a
GET /nonprofits/fc0330a1-5df8-46ae-ba37-1dec64d9fac6/logos/the-kids-co-op-inc_processed_c311a76e8ea564c614de142d435de27259dfb25f2e14764403c0bfab8ad1a3b3_logo.png HTTP/1.1
Host: images.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.givelively.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 34777
date: Thu, 02 Feb 2023 10:20:13 GMT
last-modified: Tue, 26 Apr 2022 17:48:08 GMT
etag: "0fa80b2934078d63ce1a622e554552f0"
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UvlZum3cKA95pSfzeu2jy3VhhqUh5mty7L2IPGSpgzAXftF7UsP7pA==
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1429)
Hash 2354fa28c58e16af89e7da6224aeca93
6bd3430a81730ed77c5d53f5406ddb40306ecabd
dc35ae752b7be035bd3a3bd4ae205e41afce5fa8f88e1bfe0e9524610df10f3b
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.givelively.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20950
date: Thu, 02 Feb 2023 10:20:12 GMT
expires: Thu, 02 Feb 2023 10:20:12 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "03884666a30c671f"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
js.stripe.com/v3/.deploy_status_henson.json
200 OK 296 B URL HTTP/2 js.stripe.com/v3/.deploy_status_henson.json
IP
File type JSON data\012- , ASCII text, with very long lines (474), with no line terminators
Hash db0a086d2411b8680fa433b27b0d0636
88162d3298c765aea5b4cb3a56836809c46382be
07551a1fd0a7e13a30f63b979db4df5217f4ba5ba14a60f3cb340827cf571dba
GET /v3/.deploy_status_henson.json HTTP/1.1
Host: js.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://js.stripe.com/v3/controller-ac9bd0b70130006c09a7e09f8847e3ab.html
Content-Type: application/x-www-form-urlencoded
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 01 Feb 2023 19:59:22 GMT
etag: "c1b1ca86abc0cfb60f9d1c9bdd3894d2"
cache-control: max-age=60
content-type: application/json
access-control-allow-origin: *
server: Fastly
content-encoding: br
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:12 GMT
via: 1.1 varnish
age: 53
x-request-id: 395ae2ab-16d4-4899-a0dd-05b7075b9c43
x-served-by: cache-bma1622-BMA
x-cache: HIT
x-cache-hits: 12
vary: Accept-Encoding
strict-transport-security: max-age=31556926; includeSubDomains; preload
timing-allow-origin: *
content-length: 296
X-Firefox-Spdy: h2
secure.givelively.org/users/current?view=donation
204 No Content 0 B URL HTTP/2 secure.givelively.org/users/current?view=donation
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /users/current?view=donation HTTP/1.1
Host: secure.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.givelively.org/donate/the-kids-co-op-inc?ref=sd_widget&widget_url=https%3A%2F%2Fwww.sfmariposakids.com%2Fdonate.html&referrer_url=&show_donate_now_button=false&show_v1_form=true
x-datadome-clientid: .keep
sentry-trace: aa582a67bc534fb29dd1297563d5869c-aee10ab5897f6570-0, aa582a67bc534fb29dd1297563d5869c-b8812f0da0119675-0
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: Cowboy
date: Thu, 02 Feb 2023 10:20:11 GMT
referrer-policy: origin-when-cross-origin
cache-control: no-cache
x-request-id: 85145d8c-1369-4ca3-bb3e-d38f8f6ccb75
strict-transport-security: max-age=63072000; includeSubDomains
vary: Origin
via: 1.1 vegur, 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-cache: Miss from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZsDrnDyEtlYy6J8YG2P405Rm6mzxV22dVzONMX5owiVIawBZeNwK6A==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d06fd066caf4dfa1e21a722a5c468158
acb765577662906ae8e11242bed487ce1051db28
4b45760de269e60345d43ff2da6c5803722f7c052edd0a9f5258ce69b2ffa32f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 10:20:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
script.hotjar.com/modules.4b160a4831adaf5337e6.js
200 OK 68 kB URL HTTP/2 script.hotjar.com/modules.4b160a4831adaf5337e6.js
IP
File type Unicode text, UTF-8 text, with very long lines (48602)
Hash 3315b6999637291711ab85ba678211fa
d1bba723aa49e6276dfdb0f1313a9bf0b64be153
b3bd4f702044ae91c9227ce2d5c8411d3fec3abb82c9c1b7a9b69d2011c520e5
GET /modules.4b160a4831adaf5337e6.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.givelively.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68316
date: Mon, 30 Jan 2023 16:06:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "3315b6999637291711ab85ba678211fa"
last-modified: Mon, 30 Jan 2023 16:05:37 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bFvzbuaMJn539HhLG3W4GMO3UDiQAngXSYRZsR9dRmEg4pSB-toqAQ==
age: 238446
X-Firefox-Spdy: h2
m.stripe.com/6
200 OK 156 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e121f146a31fcabb6eff825507cae2f5
545cf505334602fec3e92aa82fae7b531d1ca1f0
e88736f9ec8d02c3d50e400736b55883861fa75d0eae9114e53070083c1648b5
POST /6 HTTP/1.1
Host: m.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1804
Origin: https://m.stripe.network
Connection: keep-alive
Referer: https://m.stripe.network/
Cookie: m=fac00afe-6aaf-4021-8822-5954a743ac43043ecc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 10:20:12 GMT
content-length: 156
set-cookie: m=fac00afe-6aaf-4021-8822-5954a743ac43043ecc;Expires=Sat, 01-Feb-2025 10:20:12 GMT;Secure;HttpOnly; SameSite=None
x-content-type-options: nosniff
x-stripe-bg-intended-route-color: blue
access-control-allow-origin: https://m.stripe.network
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
strict-transport-security: max-age=31556926; includeSubDomains; preload
content-type: application/json;charset=utf-8
X-Firefox-Spdy: h2
vars.hotjar.com/box-2722367854ce9702c28ea74c51e2a23f.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-2722367854ce9702c28ea74c51e2a23f.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash 8665e233ef6caaf010ca89793f27b6f8
5c593fa5f33e55b3081308b43e6e801b56c047f7
435a3ca7c1c49cbfac193647d056e46217e5c3f9c65c354974ad7acdfb8925ac
GET /box-2722367854ce9702c28ea74c51e2a23f.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.givelively.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Mon, 30 Jan 2023 16:06:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "8665e233ef6caaf010ca89793f27b6f8"
last-modified: Mon, 30 Jan 2023 16:05:37 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HwY3RbkJ-WRQZp0akVQS6jBfN1wDH3cvPH5LFH-kTLwJJPtaJAmFcg==
age: 238446
X-Firefox-Spdy: h2
api-js.datadome.co/js/
200 OK 236 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash cbb03ce8809ef94b46d494697eb5f42f
c422326c50d65d0bfadd826f7fa1655568870a56
2f9a1365a770977f242eb9a109cde10177b02e328fb61f1271e1802304fda1cb
POST /js/ HTTP/1.1
Host: api-js.datadome.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 3464
Origin: https://secure.givelively.org
Connection: keep-alive
Referer: https://secure.givelively.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 10:20:12 GMT
content-type: application/json;charset=utf-8
content-length: 236
server: DataDome
access-control-allow-origin: *
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 4d11f0a2d89790c2b9249460a1cbf943
f7f27c90d3fd550b3582616f84f19419e45957f4
960c22a587524f285ee97bcb1de505d66d7e7d501c13d2a233a76171fb82122b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2491
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 10:20:12 GMT
Last-Modified: Thu, 02 Feb 2023 09:38:41 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 4d11f0a2d89790c2b9249460a1cbf943
f7f27c90d3fd550b3582616f84f19419e45957f4
960c22a587524f285ee97bcb1de505d66d7e7d501c13d2a233a76171fb82122b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2491
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 10:20:12 GMT
Last-Modified: Thu, 02 Feb 2023 09:38:41 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 4d11f0a2d89790c2b9249460a1cbf943
f7f27c90d3fd550b3582616f84f19419e45957f4
960c22a587524f285ee97bcb1de505d66d7e7d501c13d2a233a76171fb82122b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2491
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 10:20:12 GMT
Last-Modified: Thu, 02 Feb 2023 09:38:41 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
r.stripe.com/0
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /0 HTTP/1.1
Host: r.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://js.stripe.com/
Content-Type: application/x-www-form-urlencoded
Origin: https://js.stripe.com
Content-Length: 549
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 10:20:12 GMT
content-length: 0
access-control-allow-origin: https://js.stripe.com
access-control-allow-credentials: true
x-stripe-bg-intended-route-color: blue
content-type: text/plain
X-Firefox-Spdy: h2
r.stripe.com/0
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /0 HTTP/1.1
Host: r.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://js.stripe.com/
Content-Type: application/x-www-form-urlencoded
Origin: https://js.stripe.com
Content-Length: 567
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 10:20:12 GMT
content-length: 0
access-control-allow-origin: https://js.stripe.com
access-control-allow-credentials: true
x-stripe-bg-intended-route-color: blue
content-type: text/plain
X-Firefox-Spdy: h2
r.stripe.com/0
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /0 HTTP/1.1
Host: r.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://js.stripe.com/
Content-Type: application/x-www-form-urlencoded
Origin: https://js.stripe.com
Content-Length: 656
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 10:20:12 GMT
content-length: 0
access-control-allow-origin: https://js.stripe.com
access-control-allow-credentials: true
x-stripe-bg-intended-route-color: blue
content-type: text/plain
X-Firefox-Spdy: h2
r.stripe.com/0
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /0 HTTP/1.1
Host: r.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://js.stripe.com/
Content-Type: application/x-www-form-urlencoded
Origin: https://js.stripe.com
Content-Length: 920
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 10:20:12 GMT
content-length: 0
access-control-allow-origin: https://js.stripe.com
access-control-allow-credentials: true
x-stripe-bg-intended-route-color: blue
content-type: text/plain
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-1561839.js?sv=6
200 OK 4.9 kB URL HTTP/2 static.hotjar.com/c/hotjar-1561839.js?sv=6
IP
File type HTML document, ASCII text, with very long lines (7535)
Hash 203c661a83d8cf57294b089c2014de25
aa3fb5b43bb30e3f0a0eed92e5f21ed3f0752603
dd7966c509ec933ed5d2881e05dc99af765ba4dd22d39ec235a9bb149bfb7412
GET /c/hotjar-1561839.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.givelively.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Thu, 02 Feb 2023 10:20:12 GMT
cache-control: max-age=60
etag: W/d9b6dbaac8da4a706b71a795fc26ede8
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2rUK0jKyt6vFEKYDwXLEyYUA6xWWTrtPeAd3FBp9xtfuSrdzF3VM6A==
X-Firefox-Spdy: h2
secure.givelively.org/assets/frontend/application-58c046fc2591b13c4d965b9eb05a95343932bdfcf73f76fa0172f92ac2c4d3d6.js
200 OK 0 B URL HTTP/2 secure.givelively.org/assets/frontend/application-58c046fc2591b13c4d965b9eb05a95343932bdfcf73f76fa0172f92ac2c4d3d6.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/frontend/application-58c046fc2591b13c4d965b9eb05a95343932bdfcf73f76fa0172f92ac2c4d3d6.js HTTP/1.1
Host: secure.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.givelively.org/donate/the-kids-co-op-inc?ref=sd_widget&widget_url=https%3A%2F%2Fwww.sfmariposakids.com%2Fdonate.html&referrer_url=&show_donate_now_button=false&show_v1_form=true
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 84275
server: Cowboy
last-modified: Tue, 31 Jan 2023 21:37:53 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur, 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
date: Thu, 02 Feb 2023 10:20:10 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MqHGR2s0JUaxQfimMrVN7spGTvtvOXFka8TRCkDD91cfFSDxPFtkYQ==
age: 42137
X-Firefox-Spdy: h2
r.stripe.com/0
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /0 HTTP/1.1
Host: r.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://js.stripe.com/
Content-Type: application/x-www-form-urlencoded
Origin: https://js.stripe.com
Content-Length: 1106
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 10:20:13 GMT
content-length: 0
access-control-allow-origin: https://js.stripe.com
access-control-allow-credentials: true
x-stripe-bg-intended-route-color: blue
content-type: text/plain
X-Firefox-Spdy: h2
r.stripe.com/0
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /0 HTTP/1.1
Host: r.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://js.stripe.com/
Content-Type: application/x-www-form-urlencoded
Origin: https://js.stripe.com
Content-Length: 696
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 10:20:13 GMT
content-length: 0
access-control-allow-origin: https://js.stripe.com
access-control-allow-credentials: true
x-stripe-bg-intended-route-color: blue
content-type: text/plain
X-Firefox-Spdy: h2
r.stripe.com/0
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /0 HTTP/1.1
Host: r.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://js.stripe.com/
Content-Type: application/x-www-form-urlencoded
Origin: https://js.stripe.com
Content-Length: 596
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 10:20:13 GMT
content-length: 0
access-control-allow-origin: https://js.stripe.com
access-control-allow-credentials: true
x-stripe-bg-intended-route-color: blue
content-type: text/plain
X-Firefox-Spdy: h2
r.stripe.com/0
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /0 HTTP/1.1
Host: r.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://js.stripe.com/
Content-Type: application/x-www-form-urlencoded
Origin: https://js.stripe.com
Content-Length: 611
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 10:20:13 GMT
content-length: 0
access-control-allow-origin: https://js.stripe.com
access-control-allow-credentials: true
x-stripe-bg-intended-route-color: blue
content-type: text/plain
X-Firefox-Spdy: h2
app.multilanguage.xyz/snippet/send_labels
200 OK 12 B URL HTTP/2 app.multilanguage.xyz/snippet/send_labels
IP
ASN #394380 LEASEWEB-USA-DAL
File type JSON data\012- , ASCII text, with no line terminators
Hash fb50bf98d7d4137b4b4604ae138bc57c
9463df0cbfa20eb19a5b7d1fa0b99cf9a0cbf56f
6bc0da1f42f96fc37b8bd7ed20ba57606d2a0da5cda2b135c7854fbdc985b8a3
POST /snippet/send_labels HTTP/1.1
Host: app.multilanguage.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 562
Origin: https://www.sfmariposakids.com
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 10:20:15 GMT
content-type: text/html; charset=utf-8
content-length: 12
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin-allow-popups
vary: Origin, Cookie
access-control-allow-origin: *
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc092e5e-3a14-4d43-9814-99fd9d49d6c8.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc092e5e-3a14-4d43-9814-99fd9d49d6c8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 41c44051cc3b4c69924df66048e7566b
5c6a12595c3f6005fec4baa84b16575951e72178
72dff70bcb417c088aba013a486e1dbabe099b40fb718a283f1ba220b142b848
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc092e5e-3a14-4d43-9814-99fd9d49d6c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7450
x-amzn-requestid: 1b3ef150-9b12-4b8b-94e6-0d6debbd24ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdTDFmPoAMF-UQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadc13-0fea883b0ce1a1b933dc2be8;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qON7fRZ1XPCkl7ldiGagd0UcPynLKMzysXr8LZSRvS1ily9cN5w_wA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:22:55 GMT
age: 43040
etag: "5c6a12595c3f6005fec4baa84b16575951e72178"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/jquery-1.8.3.min.js
200 OK 0 B URL HTTP/2 cdn2.editmysite.com/js/jquery-1.8.3.min.js
IP
GET /js/jquery-1.8.3.min.js HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Mon, 23 Jan 2023 20:34:08 GMT
etag: "63ceef40-16dc4"
expires: Tue, 07 Feb 2023 23:08:14 GMT
cache-control: max-age=1209600
x-host: grn42.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:07 GMT
age: 731513
x-served-by: cache-sjc10032-SJC, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 29, 6259
x-timer: S1675333208.589009,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33467
X-Firefox-Spdy: h2
cdn2.editmysite.com/js/site/main.js?buildTime=1675210024
200 OK 0 B URL HTTP/2 cdn2.editmysite.com/js/site/main.js?buildTime=1675210024
IP
GET /js/site/main.js?buildTime=1675210024 HTTP/1.1
Host: cdn2.editmysite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Mon, 30 Jan 2023 22:17:06 GMT
etag: "63d841e2-74804"
expires: Wed, 15 Feb 2023 00:09:51 GMT
cache-control: max-age=1209600
x-host: blu125.sf2p.intern.weebly.net
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 10:20:07 GMT
age: 123016
x-served-by: cache-sjc10059-SJC, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 55, 2
x-timer: S1675333208.589135,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 146400
X-Firefox-Spdy: h2
js.captcha-display.com/xhr_tag.js
200 OK 0 B URL HTTP/2 js.captcha-display.com/xhr_tag.js
IP
GET /xhr_tag.js HTTP/1.1
Host: js.captcha-display.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.givelively.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
server: Apache
last-modified: Tue, 31 Jan 2023 14:42:31 GMT
content-encoding: gzip
date: Thu, 02 Feb 2023 09:43:09 GMT
etag: W/"2a7c-5f3905775a2cc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CdtVLsfBOgmrEHB0RaxpLxdTGN6tjyXNYIChxsgfv4yKMArXs7tUdQ==
age: 2228
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-1561839.js?sv=7
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-1561839.js?sv=7
IP
GET /c/hotjar-1561839.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.givelively.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Thu, 02 Feb 2023 10:20:12 GMT
cache-control: max-age=60
etag: W/d9b6dbaac8da4a706b71a795fc26ede8
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7jYTrLZzOhscXj7YMB6PNC3BYCCFnRbb9N-N7UEw8ETnRVli5qOsYA==
X-Firefox-Spdy: h2
secure.givelively.org/widgets/branded_donation/the-kids-co-op-inc.js
200 OK 0 B URL HTTP/2 secure.givelively.org/widgets/branded_donation/the-kids-co-op-inc.js
IP
GET /widgets/branded_donation/the-kids-co-op-inc.js HTTP/1.1
Host: secure.givelively.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sfmariposakids.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
server: Cowboy
date: Thu, 02 Feb 2023 10:20:09 GMT
referrer-policy: origin-when-cross-origin
etag: W/"68bf24af7688c65a1b625a67f9fc90c1"
cache-control: max-age=0, private, must-revalidate
x-request-id: 5eef978f-cd8b-47a5-9ae5-f37df5df9a93
vary: Accept-Encoding, Origin
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
via: 1.1 vegur, 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-cache: Miss from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UoFxXQ4iHUrFS1-Ss31_WaD1kloHtUDwmaQ-EN2CODxmjXWYYHhfWA==
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.5.0/css/all.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.5.0/css/all.css
IP
GET /releases/v5.5.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.givelively.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 10:20:10 GMT
content-type: text/css
x-amz-id-2: l1vHsRdFiApjX3BgXENbtpYqlvUvgq9/4sSV3WaU0zkWIjBvDXc0/Tgecf/RcdnGDFO5hPOpyYk=
x-amz-request-id: BVYRMGXKFHKFTYKM
last-modified: Wed, 30 Jun 2021 15:43:32 GMT
etag: W/"1cc6c92172d124fbd305ba3d8e263333"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 2103798
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ll5E23dM3QQiDHjOTF2DZItfhVakBfRRVZmuEcRfM5BNTWw%2FrJ9xD%2FvSsRbs8%2FnpIbklqxnvt9o4TmxTJ%2BBd8liW9ydSLakU%2BuYgS7cIqiKM1vkvAiBgVlnU2LLTCTc8RpUepxfG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79323157ced24072-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
199.34.228.151
104.17.25.14
93.184.220.29
23.36.77.32
13.49.139.43