www.unrefugees.org/
301 Moved Permanently 150 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 4fd00a591a79e56c59ecf3755fce4567
958ba891c12355cd7a6d79a1504c8a8de0bf8da2
4692338469ef7a7dd718cc6fcb891e122141a145a722e1340ca58a039b426eb3
GET / HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 30 Jan 2023 00:04:29 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 150
Connection: keep-alive
Set-Cookie: AWSALB=GJOqr3YMnAeI8bTuGC6Olc6yAYVor9XFnnuP43OIlAwavrCJq7omizsMeR1N5wksF3EsWjdnyiAcHK9APerT3n9e2iEe3mZpSrsXEsBTrYBD7qHyfQo/O0vcboth; Expires=Mon, 06 Feb 2023 00:04:29 GMT; Path=/
AWSALBCORS=GJOqr3YMnAeI8bTuGC6Olc6yAYVor9XFnnuP43OIlAwavrCJq7omizsMeR1N5wksF3EsWjdnyiAcHK9APerT3n9e2iEe3mZpSrsXEsBTrYBD7qHyfQo/O0vcboth; Expires=Mon, 06 Feb 2023 00:04:29 GMT; Path=/; SameSite=None
Location: https://www.unrefugees.org/
Server: Microsoft-IIS/10.0
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4369
Expires: Mon, 30 Jan 2023 01:17:18 GMT
Date: Mon, 30 Jan 2023 00:04:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3163
Expires: Mon, 30 Jan 2023 00:57:12 GMT
Date: Mon, 30 Jan 2023 00:04:29 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 29 Jan 2023 23:35:38 GMT
content-type: application/json
age: 1731
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 03092d1a1bc7ac91ee342a1a7ab2a562
52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a
03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21213
Expires: Mon, 30 Jan 2023 05:58:02 GMT
Date: Mon, 30 Jan 2023 00:04:29 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +P9hQt3A25YtSU4O9iKJxnJTFgYSkG3aCXZYsgmamnAFM86n1ZK8t7GAce2d+X63OYhsqQDsSAMf5UMJg3Uw+g==
x-amz-request-id: 4GNS6ZAX44D4JDXC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 29 Jan 2023 23:21:34 GMT
age: 2575
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 00:04:29 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3a7fa32e0b4e6b7d424c1c9da4a4069c
77dcef4f0b479f3422409888db0d794124ec9548
c9d0e9cf5f389d3b657f5db5475c002b0c606cca13d80c495031334c2d5f0679
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 00:04:30 GMT
Etag: "63d5aeab-1d7"
Server: ECS (dcb/7EEC)
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3vYauhyaRhmD00pSgX6BORnbZR_acpegEq3yV32lGGQkasWWHYNh5A==
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 29 Jan 2023 23:41:41 GMT
age: 1369
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5239
Expires: Mon, 30 Jan 2023 01:31:49 GMT
Date: Mon, 30 Jan 2023 00:04:30 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZINsp7KAUkL/+40dglDAjg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: bTUD4TrklcCq6xAFzwyMv7ZTnas=
www.unrefugees.org/
200 OK 14 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10613), with CRLF, LF line terminators, with overstriking
Hash 893e8eb5a78a671955a8d17a74184679
b65952c96b0f8027966497477c97d6d297493edc
9d84996ecfec08805ebd6eaab9f2d735771dd7dd777ca467c0222b45e9780fd7
GET / HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:30 GMT
content-type: text/html; charset=utf-8
content-length: 14219
set-cookie: AWSALB=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB; Expires=Mon, 06 Feb 2023 00:04:30 GMT; Path=/
AWSALBCORS=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB; Expires=Mon, 06 Feb 2023 00:04:30 GMT; Path=/; SameSite=None; Secure
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.4.1.min.js
200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.4.1.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 9abb42735168ac9e960b770179b642aa
11475bf8c7244af7a820108b7762e7a3f95aa52c
df53c09a6546b3d23dc0b2d0d92c39808c5663a75f4bf1f8d035fd11b7c81243
GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.unrefugees.org
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-encoding: gzip
content-length: 30638
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15851"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1675037071.dop012.sk1.t,1675037071.cds240.sk1.hn,1675037071.cds201.sk1.c
X-Firefox-Spdy: h2
use.typekit.net/hrp3szy.css
200 OK 1.0 kB URL HTTP/2 use.typekit.net/hrp3szy.css
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (516)
Hash 04b254b88f854b39b98f652263fc5ce1
4385045a882944a0108a42a71c85c3fbe29f8900
d133f46609443f2db88ed8b796deaabc7731eae3720a4a3e62c201ceb97b6ec7
GET /hrp3szy.css HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 1032
date: Mon, 30 Jan 2023 00:04:31 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b67335a8e235eacf68e4b7f98cc5dc40
887a9b34cf2ba9371bbe8c93e362c174668cf812
1ad2f6328af6d819acd85f4e4646afcafd945e17e555d5eeb54244db83cd48fa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash ebba17c36b014990b7f8a296c0e2fc88
ad9aa380621fb69a2df4167c642c2e83d8b630fe
a332bf533aa8b41b74f1c252efdb7d681c5a003a49781fa507eb0ee34a4fe5b6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 863
Cache-Control: max-age=91755
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:31 GMT
Etag: "63d5c99b-1d7"
Expires: Tue, 31 Jan 2023 01:33:46 GMT
Last-Modified: Sun, 29 Jan 2023 01:19:23 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
www.google.com/recaptcha/api.js
200 OK 556 B URL HTTP/2 www.google.com/recaptcha/api.js
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash f678bcfbe98b4039961065c12543bfd0
31a000bba532f910d036c24c795ef3636450e4c3
1dabb56e42c7b0a90264a0e7d8884e4111eed0e1b6321cab5f6e26440d63da8d
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Mon, 30 Jan 2023 00:04:31 GMT
date: Mon, 30 Jan 2023 00:04:31 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 556
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.paypal.com/sdk/js?client-id=AXR8B71wtnEZHnlsTiphl1IRoxz4ZCoV5P4_FBhZeyaRBbGZXlD1_VE1c9hd2asTUQGyWBo7nyZo-_Mi&vault=true
200 OK 94 kB URL HTTP/2 www.paypal.com/sdk/js?client-id=AXR8B71wtnEZHnlsTiphl1IRoxz4ZCoV5P4_FBhZeyaRBbGZXlD1_VE1c9hd2asTUQGyWBo7nyZo-_Mi&vault=true
IP
File type ASCII text, with very long lines (65472)
Hash e10f17c41d1120a2c79373af115cecca
4442810f3a77aef144bc60e3b4399bf74ce53086
f0ff7668c69d481d96ab4a1366acc1a2bd67468e33609cc4aab6d39588e8393b
GET /sdk/js?client-id=AXR8B71wtnEZHnlsTiphl1IRoxz4ZCoV5P4_FBhZeyaRBbGZXlD1_VE1c9hd2asTUQGyWBo7nyZo-_Mi&vault=true HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600, s-maxage=10800
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-35bxc0CIk8zteUrjWAFX68W/z6EVIhQ/F3l6yUiOeCtMHZLB' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-35bxc0CIk8zteUrjWAFX68W/z6EVIhQ/F3l6yUiOeCtMHZLB' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/javascript; charset=utf-8
etag: W/"1711b-REKBDzp3rvFEvGDjtDmb90zlMIY"
p3p: true
paypal-debug-id: f4417624a1e66
traceparent: 00-0000000000000000000f4417624a1e66-f871c0b0d38cb1d0-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 30 Jan 2023 00:04:31 GMT
age: 9016
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220096-HHN, cache-bma1657-BMA
x-cache: MISS, HIT
x-cache-hits: 0, 1
x-timer: S1675037071.436237,VS0,VE2
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f4417624a1e66-e9b2a6d3eee0f6cf-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 94491
X-Firefox-Spdy: h2
www.unrefugees.org/css/plyr.css
200 OK 5.9 kB URL HTTP/2 www.unrefugees.org/css/plyr.css
IP
File type ASCII text, with very long lines (24799), with no line terminators
Hash e25aa254c702d304b62be34615aa75cc
3a1e760326f58a329f8e42112bbb71e426b5641c
c390a0ad376cf241cb875d8299d7ae1583a6894b2c3d3d165924180ea6e82d4d
GET /css/plyr.css HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Cookie: AWSALB=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB; AWSALBCORS=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-type: text/css
content-length: 5867
set-cookie: AWSALB=9PVM8cc2/XPH0m6fi0UPiLEphFZmXsf22S9PPtCGzJ/OjKf9NwiFh/X3mzrV3Ovit4D55NUltlTf89bYaj9tSbbCQFOw4rJdSbRMq4DzwBbjtTK5+ldyTOSJmYPq; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBCORS=9PVM8cc2/XPH0m6fi0UPiLEphFZmXsf22S9PPtCGzJ/OjKf9NwiFh/X3mzrV3Ovit4D55NUltlTf89bYaj9tSbbCQFOw4rJdSbRMq4DzwBbjtTK5+ldyTOSJmYPq; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
content-encoding: gzip
last-modified: Thu, 10 Nov 2022 12:33:04 GMT
accept-ranges: bytes
etag: "040b940f5d81:0"
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.unrefugees.org/media/1021/hope-icon.png?width=91&height=68
200 OK 2.0 kB URL HTTP/2 www.unrefugees.org/media/1021/hope-icon.png?width=91&height=68
IP
File type PNG image data, 91 x 68, 8-bit/color RGBA, non-interlaced\012- data
Hash f9b152bbfbbd7f55174ca667c69b2f95
78c24cf1f64ca6cff529cb6182c6e9a1d5754547
86676e0b7e76439cde650b38e8253721e0a5f04591f31df1fb47019004e47e71
GET /media/1021/hope-icon.png?width=91&height=68 HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB; AWSALBCORS=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-type: image/png
content-length: 2026
set-cookie: AWSALB=wWBV67YQcCJV5Uqdv/F1y+jdokhLX/HJX6PAwGDpzxhMDaEp4dbKpc+s7CXubUeJ8QJoJUwJNMGvNXypPk412fu5Jg3/O+PVh8yJV1T/h0HIb4TM88SpfmqoifEa; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBCORS=wWBV67YQcCJV5Uqdv/F1y+jdokhLX/HJX6PAwGDpzxhMDaEp4dbKpc+s7CXubUeJ8QJoJUwJNMGvNXypPk412fu5Jg3/O+PVh8yJV1T/h0HIb4TM88SpfmqoifEa; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
cache-control: public, must-revalidate, max-age=604800
expires: Mon, 06 Feb 2023 00:04:31 GMT
last-modified: Thu, 17 Nov 2022 09:25:32 GMT
accept-ranges: bytes
etag: "cb45b8a66fad81:0"
vary: Accept-Encoding
imageprocessedby: ImageProcessor/2.9.1.225 - ImageProcessor.Web/4.12.1.216
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 576323e2ad415033f1fad5bf1e1d8009
90799cace053fde33ae7df731367c79f58fa3b6c
c1f4a2b29282f7d67b8e6c638c96182702fceaa0b055700411cb0fe9d3a20c07
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 00:04:31 GMT
Last-Modified: Sun, 29 Jan 2023 23:20:23 GMT
Server: ECS (nyb/1D0B)
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: cM38sRXlCqbFRb5RD9jr98VBbn2T20NdwDgING6Fd02FhMn5zcXjrw==
Age: 2648
www.unrefugees.org/media/1003/help-icon.png?width=68&height=69
200 OK 805 B URL HTTP/2 www.unrefugees.org/media/1003/help-icon.png?width=68&height=69
IP
File type PNG image data, 68 x 69, 8-bit colormap, non-interlaced\012- data
Hash 5513b173692f77f27fe910a291be8256
18b7aa091b3be3ba1891a1a3c66e9dafc2a2ba5d
96e4f1d7234effd4b613f0a94bbed6093d9bbd71e662a8664354596d5a7ad9a0
GET /media/1003/help-icon.png?width=68&height=69 HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB; AWSALBCORS=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-type: image/png
content-length: 805
set-cookie: AWSALB=/GHOh5R56pTcamwhSW3UjuFqM6Ech++13VyYcPANo2akukB9n0pKigEUdS8pB+rEHFrRr5JN2AaIk3YdyQD3EfcTOI0d9rkD+o/C2GcDc7CrD9EnKQenD7/Svn/p; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBCORS=/GHOh5R56pTcamwhSW3UjuFqM6Ech++13VyYcPANo2akukB9n0pKigEUdS8pB+rEHFrRr5JN2AaIk3YdyQD3EfcTOI0d9rkD+o/C2GcDc7CrD9EnKQenD7/Svn/p; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
cache-control: public, must-revalidate, max-age=604800
expires: Mon, 06 Feb 2023 00:04:31 GMT
last-modified: Thu, 17 Nov 2022 09:25:31 GMT
accept-ranges: bytes
etag: "4d7df8a66fad81:0"
vary: Accept-Encoding
imageprocessedby: ImageProcessor/2.9.1.225 - ImageProcessor.Web/4.12.1.216
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1141ae65ad448fb3438690d5042af728
aa8b236bb1099c9440bfe3e98530939623250c03
e55eeaf5cd454042706c3e2d7d2b0211e91087b430cb5bae6b9e030392f57b4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.unrefugees.org/img/unhcr-visibility-horizontal-white-cmyk-v2016.svg
200 OK 12 kB URL HTTP/2 www.unrefugees.org/img/unhcr-visibility-horizontal-white-cmyk-v2016.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (12265), with no line terminators
Hash 589ecfd0bcfdf4d702240ce70983f8fe
4d289ec6fc007930030ea58a0768db039e41c0dd
6bfbae61daf6218548d35bd824d5299e6f0517f156050c302ddd83fa0e8abdc8
GET /img/unhcr-visibility-horizontal-white-cmyk-v2016.svg HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB; AWSALBCORS=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-type: image/svg+xml
content-length: 12265
set-cookie: AWSALB=BLPYaEwxED2R7cEi1lixDg18kkr8p3k5rGrNJ3Rd6XRnS23zf+SJMdmnUJarV/ljzvNso5CBYyLCFPxBuKKAzvEXfkknV4gR/GcW2wakI3EW36IBvnd/JGTew1PZ; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBCORS=BLPYaEwxED2R7cEi1lixDg18kkr8p3k5rGrNJ3Rd6XRnS23zf+SJMdmnUJarV/ljzvNso5CBYyLCFPxBuKKAzvEXfkknV4gR/GcW2wakI3EW36IBvnd/JGTew1PZ; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
cache-control: no-cache
last-modified: Thu, 10 Nov 2022 12:33:04 GMT
accept-ranges: bytes
etag: "040b940f5d81:0"
X-Firefox-Spdy: h2
p.typekit.net/p.css?s=1&k=hrp3szy&ht=tk&f=139.140.171.173.174.175.176.15701.15703.15705.15708&a=1630018&app=typekit&e=css
200 OK 5 B URL HTTP/2 p.typekit.net/p.css?s=1&k=hrp3szy&ht=tk&f=139.140.171.173.174.175.176.15701.15703.15705.15708&a=1630018&app=typekit&e=css
IP
ASN #20940 Akamai International B.V.
Hash 83d24d4b43cc7eef2b61e66c95f3d158
f0cafc285ee23bb6c28c5166f305493c4331c84d
1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
GET /p.css?s=1&k=hrp3szy&ht=tk&f=139.140.171.173.174.175.176.15701.15703.15705.15708&a=1630018&app=typekit&e=css HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/css
content-length: 5
last-modified: Thu, 28 Jul 2022 22:24:50 GMT
etag: "62e30cb2-5"
cache-control: public, max-age=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Mon, 30 Jan 2023 00:04:31 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.unrefugees.org/img/search-icon-white.png
200 OK 1.5 kB URL HTTP/2 www.unrefugees.org/img/search-icon-white.png
IP
File type PNG image data, 34 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash 799989474245d817e252ae409682a467
a0b56aef6f7826f42a6a493e8060ff6454ddcd3c
cc41b89e82e346d38089fb2b430ff6c1864aa655f0c5003abc35d45d8b7bb1f0
GET /img/search-icon-white.png HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB; AWSALBCORS=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-type: image/png
content-length: 1477
set-cookie: AWSALB=+blGKj+uNmM6HR/7aGYzbzbN14FfuvJno7Ofa7pVyR+WOJrgLs/CySqdvUJfDIkutLc/qctGwHIa+plpz3AfjD7rd1HXkztSThLHSwuAt+pw6lBm4N4/y5XheNJj; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBCORS=+blGKj+uNmM6HR/7aGYzbzbN14FfuvJno7Ofa7pVyR+WOJrgLs/CySqdvUJfDIkutLc/qctGwHIa+plpz3AfjD7rd1HXkztSThLHSwuAt+pw6lBm4N4/y5XheNJj; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
cache-control: no-cache
last-modified: Thu, 10 Nov 2022 12:33:06 GMT
accept-ranges: bytes
etag: "06d3c950f5d81:0"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 291471246d4f399cd6697564363ae9b7
a09157edc8e21898575590cd3d3bfcd258091b84
38a850c0a76bd052e857d6772c5c4b565eded5378c797960775ccf9bf81aff79
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 00:04:31 GMT
Last-Modified: Sun, 29 Jan 2023 23:01:35 GMT
Server: ECS (nyb/1D08)
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: DFyDeBsEsGhFx7UT7u36lDTeSrsH4aF-w3dnKGWdxfuFS-VOg7oWiw==
Age: 3776
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 291471246d4f399cd6697564363ae9b7
a09157edc8e21898575590cd3d3bfcd258091b84
38a850c0a76bd052e857d6772c5c4b565eded5378c797960775ccf9bf81aff79
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 00:04:31 GMT
Last-Modified: Sun, 29 Jan 2023 22:33:42 GMT
Server: ECS (nyb/1D05)
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Hn3xYP9hB5D579QHzK6EpRWsFINe5qtFem7VxgGVsfDEZUHWGKKtJA==
Age: 5449
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 291471246d4f399cd6697564363ae9b7
a09157edc8e21898575590cd3d3bfcd258091b84
38a850c0a76bd052e857d6772c5c4b565eded5378c797960775ccf9bf81aff79
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 00:04:31 GMT
Etag: "63d68e4b-1d7"
Last-Modified: Sun, 29 Jan 2023 23:50:26 GMT
Server: ECS (nyb/1D0F)
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ldrhueDRiehKW8-Wzfwg6fSJFlnAM-HZz7Mef6gge4DL24GX7SkvxQ==
Age: 846
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 291471246d4f399cd6697564363ae9b7
a09157edc8e21898575590cd3d3bfcd258091b84
38a850c0a76bd052e857d6772c5c4b565eded5378c797960775ccf9bf81aff79
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=146063
Date: Mon, 30 Jan 2023 00:04:31 GMT
Etag: "63d68e4b-1d7"
Expires: Tue, 31 Jan 2023 16:38:54 GMT
Last-Modified: Sun, 29 Jan 2023 15:18:35 GMT
Server: ECS (bsa/EB15)
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: OTQLMgj3TesZMu_XK6r-C0I2BjN3YP318WEoFXITP75lO0OkaSP2Kw==
Age: 4819
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d12e9ff2f182d3ce52d59d589ab5a61d
1d39c5eed0a766cbee2fe1f0729eab7472f56d7f
e675272e9b74782eb09ee52be90da7a92ba0cbe71fccba9bd8c4416e4817b13b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4647326.fls.doubleclick.net/activityi;src=4647326;type=unrefcms;cat=unrefhp;ord=2583881660730;gtm=2wg1p0;auiddc=824047590.1675037081;~oref=https%3A%2F%2Fwww.unrefugees.org%2F?
200 OK 232 B URL HTTP/2 4647326.fls.doubleclick.net/activityi;src=4647326;type=unrefcms;cat=unrefhp;ord=2583881660730;gtm=2wg1p0;auiddc=824047590.1675037081;~oref=https%3A%2F%2Fwww.unrefugees.org%2F?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (451), with no line terminators
Hash f9778f1b22a570d144cc514de37a584d
87a64bb84dd076ab32fb42cb720806a65ce58c44
1ee9aa97c437a46ac62c03e10814d34e49c243c501e8e272471d5de82baf9b78
GET /activityi;src=4647326;type=unrefcms;cat=unrefhp;ord=2583881660730;gtm=2wg1p0;auiddc=824047590.1675037081;~oref=https%3A%2F%2Fwww.unrefugees.org%2F? HTTP/1.1
Host: 4647326.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 00:04:31 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 232
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 30-Jan-2023 00:19:31 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/TbSSCK_lgiI
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/TbSSCK_lgiI
IP
Hash 913a05c86b1e22248ae2c21c879d8432
3a1fef0273deb41c902f596b02306035b57c1c0f
0a7745463a234a8532087626aa022f48fdccb373672ba45a5111600bb8784f35
POST /s/gts1d4/TbSSCK_lgiI HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:31 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d12e9ff2f182d3ce52d59d589ab5a61d
1d39c5eed0a766cbee2fe1f0729eab7472f56d7f
e675272e9b74782eb09ee52be90da7a92ba0cbe71fccba9bd8c4416e4817b13b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.unrefugees.org/media/1029/kid.png
200 OK 47 kB URL HTTP/2 www.unrefugees.org/media/1029/kid.png
IP
File type PNG image data, 154 x 154, 8-bit/color RGB, non-interlaced\012- data
Hash ce75f90bd0a7c523c4e953a47ccdb052
1aa4485e15d0c67d84c356c4f0dae23e2ec8bc08
6e999e3af5a4c58ac36f37d566a9c23f9ff35d83a0240c66bf9deab84012fa47
GET /media/1029/kid.png HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB; AWSALBCORS=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-type: image/png
content-length: 46864
set-cookie: AWSALB=hUIs1tARZpuA3yDBZGPgPrWS4Qn5TJD3XG3JcarJE1/PLkQvdlAjeEnMX/v1Gz863Px5tmlMgZ2/8UIZni6bwT4iDMUxgPs8lLeI8Sg+Pr8anyAXRBMcXzVTOB/Q; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBCORS=hUIs1tARZpuA3yDBZGPgPrWS4Qn5TJD3XG3JcarJE1/PLkQvdlAjeEnMX/v1Gz863Px5tmlMgZ2/8UIZni6bwT4iDMUxgPs8lLeI8Sg+Pr8anyAXRBMcXzVTOB/Q; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
cache-control: no-cache
last-modified: Tue, 30 May 2017 15:19:28 GMT
accept-ranges: bytes
etag: "e11c842158d9d21:0"
X-Firefox-Spdy: h2
www.unrefugees.org/img/unhcr-visibility-horizontal-blue-cmyk-v2016.svg
200 OK 12 kB URL HTTP/2 www.unrefugees.org/img/unhcr-visibility-horizontal-blue-cmyk-v2016.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (12267), with no line terminators
Hash e2c31e589985c6c3dab41cf627244301
b1a41b866b1b4e9c74ca22484f8f8e816be3e0cc
e9027cbc9f2efbff37e09740f41c16a1ffd89eae8f1555f6a5955d3198d9c31d
GET /img/unhcr-visibility-horizontal-blue-cmyk-v2016.svg HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB; AWSALBCORS=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-type: image/svg+xml
content-length: 12267
set-cookie: AWSALB=ZeIkoR0f+RwNsn3+60bDZ0HxYwbXRMBlvbImdHGz0z80wpOxXVXJT1zWY/kWYu2PF5MDHMiZXcMlFrzhBAf2+Cu93hhUCh6kKU0NOv+aO84IV2Da1BcbZCm+pWmt; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBCORS=ZeIkoR0f+RwNsn3+60bDZ0HxYwbXRMBlvbImdHGz0z80wpOxXVXJT1zWY/kWYu2PF5MDHMiZXcMlFrzhBAf2+Cu93hhUCh6kKU0NOv+aO84IV2Da1BcbZCm+pWmt; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
cache-control: no-cache
last-modified: Thu, 10 Nov 2022 12:33:06 GMT
accept-ranges: bytes
etag: "06d3c950f5d81:0"
X-Firefox-Spdy: h2
www.unrefugees.org/media/1020/home-icon.png?width=78&height=68
200 OK 1.7 kB URL HTTP/2 www.unrefugees.org/media/1020/home-icon.png?width=78&height=68
IP
File type PNG image data, 78 x 68, 8-bit/color RGBA, non-interlaced\012- data
Hash 576f80f1ecfb8df028990e7794b84205
3bb8df3b4b2b29ef04c8d13a07901e5ce2d948d6
08f21734b96d6d8a292253fa181ec4e9de141bd58435d0dc2ca330f1893d9713
GET /media/1020/home-icon.png?width=78&height=68 HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB; AWSALBCORS=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-type: image/png
content-length: 1739
set-cookie: AWSALB=Rx1SjgFiQKybQoQ83Nny9mE0OhEfgwFfeQddj1IooYRaHjimwGnQyHSpXaC3RJilumg/s64vEjqCJOEDhYgCXEQ/cTMfWCCWJnpqdrJDofGAbs3e4JAw4zZDEL4k; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBCORS=Rx1SjgFiQKybQoQ83Nny9mE0OhEfgwFfeQddj1IooYRaHjimwGnQyHSpXaC3RJilumg/s64vEjqCJOEDhYgCXEQ/cTMfWCCWJnpqdrJDofGAbs3e4JAw4zZDEL4k; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
cache-control: public, must-revalidate, max-age=604800
expires: Mon, 06 Feb 2023 00:04:31 GMT
last-modified: Thu, 17 Nov 2022 09:25:31 GMT
accept-ranges: bytes
etag: "7863128a66fad81:0"
vary: Accept-Encoding
imageprocessedby: ImageProcessor/2.9.1.225 - ImageProcessor.Web/4.12.1.216
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1141ae65ad448fb3438690d5042af728
aa8b236bb1099c9440bfe3e98530939623250c03
e55eeaf5cd454042706c3e2d7d2b0211e91087b430cb5bae6b9e030392f57b4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c8d80453856930560f9745f6af726e82
1f54837ecb610737a20f1d8d5041258837c072ff
95293bbfec27fbbd09a78cab71ecf733660c13f92b8f29891bb6f41a58d95147
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127030
Date: Mon, 30 Jan 2023 00:04:31 GMT
Etag: "63d65610-1d7"
Expires: Tue, 31 Jan 2023 11:21:41 GMT
Last-Modified: Sun, 29 Jan 2023 11:18:40 GMT
Server: ECS (nyb/1D35)
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ep_eLI6qFwgsiRuMIgp6zYtDP8V7sRtCXm5136B8Z164rpYz88ZFrw==
Age: 181
adservice.google.com/ddm/fls/i/src=4647326;type=unrefcms;cat=unrefhp;ord=2583881660730;gtm=2wg1p0;auiddc=824047590.1675037081;~oref=https%3A%2F%2Fwww.unrefugees.org%2F
200 OK 233 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=4647326;type=unrefcms;cat=unrefhp;ord=2583881660730;gtm=2wg1p0;auiddc=824047590.1675037081;~oref=https%3A%2F%2Fwww.unrefugees.org%2F
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (450), with no line terminators
Hash 4f48967cd8414976189bbe64dde17125
4f9d071428a311bb0a47b4c33a3d199c475289c0
b049fdd84b6f3548719af8708ac35043f81c29a2365c7cf5ddc63dcbfe7303fd
GET /ddm/fls/i/src=4647326;type=unrefcms;cat=unrefhp;ord=2583881660730;gtm=2wg1p0;auiddc=824047590.1675037081;~oref=https%3A%2F%2Fwww.unrefugees.org%2F HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4647326.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 00:04:31 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 233
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
js.ipredictive.com/adelphic_universal_pixel.js
200 OK 2.1 kB URL HTTP/2 js.ipredictive.com/adelphic_universal_pixel.js
IP
File type ASCII text, with very long lines (2108), with no line terminators
Hash 83b469155694c51d4c5581028a6788bc
6cb12a0d70ac39d971c2ebd57fbbf8fdccd61bd9
aa4f6cfbf87befc125843523e2dfe029009376cb8f5d590cffbc1bb267dd69ce
GET /adelphic_universal_pixel.js HTTP/1.1
Host: js.ipredictive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 2108
last-modified: Fri, 30 Sep 2022 15:42:59 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 29 Jan 2023 23:28:30 GMT
etag: "83b469155694c51d4c5581028a6788bc"
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Whj5-jgQad4Jyla0C07yuHNzB3U3WwjYbEOh51zjG2VffUB-u3OzaA==
age: 2239
X-Firefox-Spdy: h2
event.mrtnsvr.com/?adv=17114&cb=1111862763&ref=https%3A%2F%2Fwww.unrefugees.org%2F>mcb=1053873473
302 Found 0 B URL HTTP/2 event.mrtnsvr.com/?adv=17114&cb=1111862763&ref=https%3A%2F%2Fwww.unrefugees.org%2F>mcb=1053873473
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?adv=17114&cb=1111862763&ref=https%3A%2F%2Fwww.unrefugees.org%2F>mcb=1053873473 HTTP/1.1
Host: event.mrtnsvr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
access-control-allow-origin: *
content-type:
location: https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=HOCTIHbtp
set-cookie: userId=HOCTIHbtp; Domain=mrtnsvr.com; Expires=Wed, 31 Jan 2024 00:04:31 GMT; Secure; SameSite=None
vary: Origin
date: Mon, 30 Jan 2023 00:04:31 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16546
Expires: Mon, 30 Jan 2023 04:40:17 GMT
Date: Mon, 30 Jan 2023 00:04:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16546
Expires: Mon, 30 Jan 2023 04:40:17 GMT
Date: Mon, 30 Jan 2023 00:04:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16546
Expires: Mon, 30 Jan 2023 04:40:17 GMT
Date: Mon, 30 Jan 2023 00:04:31 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a369a4445d1fccf2ce045c3c4c3f3d67
d6f618e6150a4f9ac6eb5df4a503141a635605a2
d62c7913686c10d4c4b8d691d533256534da77cecc9fcf3f8aa885380dcc148b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 1aa09057e76efd10960c6440ce1fd2e3
6f86c22fe9bdcfaf50d8330f4d6dda326091ea80
d03ee62896eb4f826b92ed355aacca37877a9dbc8865896bfd91e4dab8f206e5
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 30 Jan 2023 00:04:31 GMT
Content-Type: application/ocsp-response
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 29 Jan 2023 07:45:54 GMT
Expires: Mon, 30 Jan 2023 07:45:54 GMT
ETag: "6f86c22fe9bdcfaf50d8330f4d6dda326091ea80"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa29141be-cb17-4a1d-a64f-9b3d296461f2.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa29141be-cb17-4a1d-a64f-9b3d296461f2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 546f1cb9f94ea553ae884a6f50c6bd3d
fd08d9841bcd8864aaf2e5d93ca61b31246b6db5
5aba48ac6c65e371c6c1aeee43f97670f196d3a3933b9f5812a67be90b7dbdfa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa29141be-cb17-4a1d-a64f-9b3d296461f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5764
x-amzn-requestid: 33ebf979-ba40-451e-bbdb-3ee4a9dc07ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhksyGRVoAMF5UQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7eb-55fcbb4d6d88dbf758409801;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: X3lzViVGoynSgoeenp6EIU2E3FMSRlKNGOy73pIOAASV11hOk2B4UA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:11:27 GMT
age: 6784
etag: "fd08d9841bcd8864aaf2e5d93ca61b31246b6db5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/TbSSCK_lgiI
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/TbSSCK_lgiI
IP
Hash 913a05c86b1e22248ae2c21c879d8432
3a1fef0273deb41c902f596b02306035b57c1c0f
0a7745463a234a8532087626aa022f48fdccb373672ba45a5111600bb8784f35
POST /s/gts1d4/TbSSCK_lgiI HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:31 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b7a437-43da-4218-a8ea-3aa936541e3f.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b7a437-43da-4218-a8ea-3aa936541e3f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f0729af7c574710c33356c8c3c7757d6
aec801b4158398d2d3222e7247532a1b0ba446e3
057d2ed0960c8d83dda10de975594b21ddeaaf8dcc07a106f3b3c121afb90e57
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b7a437-43da-4218-a8ea-3aa936541e3f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8159
x-amzn-requestid: 52245e9a-4ea7-470c-ad88-1051471fc543
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fbvBxGv2oAMFfLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4920b-6b6d100e11edfa5307b67933;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 03:10:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Qgh4eyT_OHA_N3vH7o37gjmjUpRyJMXzG3pyvKH8pnxjWxu8ykXIRw==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 03:56:29 GMT
age: 72482
etag: "aec801b4158398d2d3222e7247532a1b0ba446e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=4647326;type=unrefcms;cat=unrefhp;ord=2583881660730;gtm=2wg1p0;auiddc=824047590.1675037081;~oref=https%3A%2F%2Fwww.unrefugees.org%2F
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=4647326;type=unrefcms;cat=unrefhp;ord=2583881660730;gtm=2wg1p0;auiddc=824047590.1675037081;~oref=https%3A%2F%2Fwww.unrefugees.org%2F
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=4647326;type=unrefcms;cat=unrefhp;ord=2583881660730;gtm=2wg1p0;auiddc=824047590.1675037081;~oref=https%3A%2F%2Fwww.unrefugees.org%2F HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 00:04:31 GMT
expires: Mon, 30 Jan 2023 00:04:31 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc895bb6-fa1f-4972-a2f8-5ce71b0c72c0.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc895bb6-fa1f-4972-a2f8-5ce71b0c72c0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6d200552d23c85c199558b79cc24348f
8cc20b9ce98eeacd5b826268da24955a82e78a01
09b05ae6f75b5141401ddc49014e0eb2eac0856ba3b5020bc85f4a9a64d3d2a6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc895bb6-fa1f-4972-a2f8-5ce71b0c72c0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9700
x-amzn-requestid: 9f944a46-7e39-44c3-a640-3c7e9b778bca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkoEEkJIAMFs0w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7cd-4b29196f5bd1b2fb04e6363f;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Jdh2u-xrCjqq1SKWL7hCTqrlGRjbytuxecJS-cwiXb5FQypGKYbFzg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:55:35 GMT
age: 7736
etag: "8cc20b9ce98eeacd5b826268da24955a82e78a01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: f644ca78-a07a-43d1-96e4-95bcdecff7fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGLfFtOIAMFp7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf83e2-202ca7160544acd24259bd5d;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xRwqrWS66l4qJfg2HnGphN1dbrIUod9XKW3zTk_-Km9AQRPyV2UqWg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 20:46:17 GMT
age: 11894
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80079413-a219-4943-96b4-3e14e10bb5ba.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80079413-a219-4943-96b4-3e14e10bb5ba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 36ff8d0c9899da25e80edbb858b164de
3e2491c5465f3c427a11c32bdfee27767559bb3f
b060501c6d82e97bd4826a62b790d58cd9d7ece8e1590267bc9b48033f3ce9b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80079413-a219-4943-96b4-3e14e10bb5ba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7223
x-amzn-requestid: b05a1db9-29e2-42d0-9eca-9a0f462c87c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj3IHtpIAMFUkw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e693-7e13d93143b5e666313a4b8f;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: y8z-TFrhe0-x-KHZd2pIVITumrB18bqIzK_vX9em0eEpt3U8i0sozA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:53:07 GMT
age: 7884
etag: "3e2491c5465f3c427a11c32bdfee27767559bb3f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7aae2b2c-8949-4749-8a9b-24d6a82a5b50.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7aae2b2c-8949-4749-8a9b-24d6a82a5b50.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 435598df0723ba8070784ee6a8d6de8b
0dab67801b42d738a5074ec3f0489f04c5e6552c
05339073fff5fe4213a38505242c577f579aba68d5c249e8bac10b03d379a2dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7aae2b2c-8949-4749-8a9b-24d6a82a5b50.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10616
x-amzn-requestid: 809aadb4-f948-41a5-82bc-84a520a5689a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEtEZIIAMFreQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-2c659eae4d513b433aa749e3;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pzTV9rIn345DR4kpnePsLi7muCptJ5Ivrs25Yanl_z6A5nsxaiXyNw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:52:09 GMT
age: 7942
etag: "0dab67801b42d738a5074ec3f0489f04c5e6552c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.unrefugees.org/css/index.css?v=4
200 OK 63 kB URL HTTP/2 www.unrefugees.org/css/index.css?v=4
IP
File type ASCII text, with very long lines (574), with CRLF line terminators
Hash a5905eb6240651622ed5a921a5737e7c
5421caa40311d58a8e244ef8d493fe39fdb8046d
015ef9e160124171c0df75d33588463d80ca33874bc8975d8d374a672a4ff27e
GET /css/index.css?v=4 HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Cookie: AWSALB=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB; AWSALBCORS=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-type: text/css
content-length: 63228
set-cookie: AWSALB=9QKAXfPcy9U3OOT3XFzQHztjN3Lz0MioxbCo/w5TFp0k91xCBNf4jQmQ1e17ZgWQrbhj/fCPU4CpX+JWV/RX8Wz6A2o01maVt2+sIgFHBlwURQU9OwmkztRD+QG+; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBCORS=9QKAXfPcy9U3OOT3XFzQHztjN3Lz0MioxbCo/w5TFp0k91xCBNf4jQmQ1e17ZgWQrbhj/fCPU4CpX+JWV/RX8Wz6A2o01maVt2+sIgFHBlwURQU9OwmkztRD+QG+; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
content-encoding: gzip
last-modified: Tue, 24 Jan 2023 10:41:56 GMT
accept-ranges: bytes
etag: "072967ae02fd91:0"
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a369a4445d1fccf2ce045c3c4c3f3d67
d6f618e6150a4f9ac6eb5df4a503141a635605a2
d62c7913686c10d4c4b8d691d533256534da77cecc9fcf3f8aa885380dcc148b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 781fb1f28fc0df09f024930b6aa94511
ff8d49958c45b25da53074b0bc35c8897e857c2a
2b808bdb902334996ecddeb1baf33df2d89147719e37cdffb89f13a495c865a1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 00:04:32 GMT
Last-Modified: Sun, 29 Jan 2023 23:08:14 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sN88QuwQURggGjY1odFmflYs2tNE-gWr1h0kOiYxkoaavR5LjuknJw==
Age: 3378
collector-3219.tvsquared.com/tv2track.js
200 OK 8.5 kB URL HTTP/1.1 collector-3219.tvsquared.com/tv2track.js
IP
File type ASCII text, with very long lines (1162)
Hash 4570d278025b2469017ba48b7229ac50
87675c32ba22b0b3883104968696a1df144a34ac
0dec000d7ea29ad1354b34ecb7ccc88809782255d6800829d7448b4c0e4d35a5
GET /tv2track.js HTTP/1.1
Host: collector-3219.tvsquared.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Encoding: gzip
Content-Type: application/javascript
Date: Mon, 30 Jan 2023 00:04:32 GMT
ETag: "639c42c0-2133"
Expires: Mon, 30 Jan 2023 00:14:32 GMT
Last-Modified: Fri, 16 Dec 2022 10:04:48 GMT
Server: nginx
X-Robots-Tag: noindex
Content-Length: 8499
Connection: keep-alive
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 1aa09057e76efd10960c6440ce1fd2e3
6f86c22fe9bdcfaf50d8330f4d6dda326091ea80
d03ee62896eb4f826b92ed355aacca37877a9dbc8865896bfd91e4dab8f206e5
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 30 Jan 2023 00:04:32 GMT
Content-Type: application/ocsp-response
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 29 Jan 2023 07:45:54 GMT
Expires: Mon, 30 Jan 2023 07:45:54 GMT
ETag: "6f86c22fe9bdcfaf50d8330f4d6dda326091ea80"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75bf326700e29b1b06e57fb96ee2b064
4f979f28905b65637a058cd44be6c25bb51a42e4
385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75bf326700e29b1b06e57fb96ee2b064
4f979f28905b65637a058cd44be6c25bb51a42e4
385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.unrefugees.org/media/fuijwi40/eoy-hero-rf1200933x1440.jpg
200 OK 90 kB URL HTTP/2 www.unrefugees.org/media/fuijwi40/eoy-hero-rf1200933x1440.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=UNHCR / Houssam Hariri], baseline, precision 8, 1440x550, components 3\012- data
Hash 1a3bab2995d72b089f916b47e8857ce6
6fd5cb9f782f03f047495fd8c6ff8d8d86f2f7f2
2156470496eab99cc20a4c0f087e8b16bcc8d5f98aac6fda33f95acee1373393
GET /media/fuijwi40/eoy-hero-rf1200933x1440.jpg HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Cookie: AWSALB=Rx1SjgFiQKybQoQ83Nny9mE0OhEfgwFfeQddj1IooYRaHjimwGnQyHSpXaC3RJilumg/s64vEjqCJOEDhYgCXEQ/cTMfWCCWJnpqdrJDofGAbs3e4JAw4zZDEL4k; AWSALBCORS=Rx1SjgFiQKybQoQ83Nny9mE0OhEfgwFfeQddj1IooYRaHjimwGnQyHSpXaC3RJilumg/s64vEjqCJOEDhYgCXEQ/cTMfWCCWJnpqdrJDofGAbs3e4JAw4zZDEL4k; _gcl_au=1.1.824047590.1675037081; _ga_P9YZZV758Y=GS1.1.1675037081.1.0.1675037081.60.0.0; _ga=GA1.1.1461089143.1675037081
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:32 GMT
content-type: image/jpeg
content-length: 90436
set-cookie: AWSALB=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/
AWSALBCORS=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/; SameSite=None; Secure
cache-control: no-cache
last-modified: Fri, 02 Dec 2022 15:09:48 GMT
accept-ranges: bytes
etag: "2a47c1e606d91:0"
X-Firefox-Spdy: h2
collector-3219.tvsquared.com/tv2track.php?action_name=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&idsite=TV-63728109-1&rec=1&r=888508&h=0&m=4&s=41&url=https%3A%2F%2Fwww.unrefugees.org%2F&_id=ea29e868dcbdc79f&_idts=1675037082&_idvc=0&_idn=1&_viewts=&cookie=1&res=1280x1024>_ms=971
200 OK 42 B URL HTTP/1.1 collector-3219.tvsquared.com/tv2track.php?action_name=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&idsite=TV-63728109-1&rec=1&r=888508&h=0&m=4&s=41&url=https%3A%2F%2Fwww.unrefugees.org%2F&_id=ea29e868dcbdc79f&_idts=1675037082&_idvc=0&_idn=1&_viewts=&cookie=1&res=1280x1024>_ms=971
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 00657dd79637a8daf5e6196ca17f1887
3e064855d1fe7c6eac52981a646ec5840ba7efb5
f0c71e3da5b3fcab3c66af1cf0cdbf262c97b9330b7b37116f1ae2ab18bdc660
GET /tv2track.php?action_name=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&idsite=TV-63728109-1&rec=1&r=888508&h=0&m=4&s=41&url=https%3A%2F%2Fwww.unrefugees.org%2F&_id=ea29e868dcbdc79f&_idts=1675037082&_idvc=0&_idn=1&_viewts=&cookie=1&res=1280x1024>_ms=971 HTTP/1.1
Host: collector-3219.tvsquared.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Mon, 30 Jan 2023 00:04:32 GMT
P3p: CP='OTI DSP COR NID STP UNI OTPa OUR'
Request-Id: 8c0103a8-5441-4c06-ab3a-48cfd24c2bee
Server: nginx
Content-Length: 42
Connection: keep-alive
use.typekit.net/af/180254/00000000000000000001522c/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
200 OK 46 kB URL HTTP/2 use.typekit.net/af/180254/00000000000000000001522c/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 46404, version 1.0\012- data
Hash 99c0faff718ccc006ec5d8d1e362b3f4
cbc536df2796deb56f11cd0ad39c11d26fd11b92
38c9c1413e17c7a5ee87095bdb4cad0da069451ee937cb801c8f37f2c734644f
GET /af/180254/00000000000000000001522c/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.unrefugees.org
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 46404
etag: "d8f0e75543cc417069e2148d573e1b3687264d73"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 30 Jan 2023 00:04:32 GMT
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Kalam|Lato&display=swap
200 OK 20 kB URL HTTP/2 fonts.googleapis.com/css?family=Kalam|Lato&display=swap
IP
Hash 498b46bf625de207aa01c2b6cf649d15
a4f055594b66d99b9a190dccba3eb1f38d084d20
6d875fe1b9f074a0e5e1f51dbbd121c7816ad3862c5f1d18c1022c2694863864
GET /css?family=Kalam|Lato&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 30 Jan 2023 00:04:32 GMT
date: Mon, 30 Jan 2023 00:04:32 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
use.typekit.net/af/8e11d4/00000000000000003b9b038c/27/l?subset_id=2&fvd=n6&v=3
200 OK 20 kB URL HTTP/2 use.typekit.net/af/8e11d4/00000000000000003b9b038c/27/l?subset_id=2&fvd=n6&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 19600, version 1.0\012- data
Hash f3279450bf0f026512b65928921b5a21
559351097af9a45ddaf808d059d680494f12e8c7
62c0466b6e78094d8bb9b9fb50f13f3eb39e3be88dce7663ecfbcabde18b64bc
GET /af/8e11d4/00000000000000003b9b038c/27/l?subset_id=2&fvd=n6&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.unrefugees.org
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 19600
etag: "50fb462bb968fa8996b7f205254cfa92e534ea41"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 30 Jan 2023 00:04:32 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/219c30/00000000000000003b9b0389/27/l?subset_id=2&fvd=n4&v=3
200 OK 19 kB URL HTTP/2 use.typekit.net/af/219c30/00000000000000003b9b0389/27/l?subset_id=2&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 19160, version 1.0\012- data
Hash d93076c550d41b9b922c1740ebe5aec8
b8e1729d07df86cf58e63566395f27ad913d5557
50bfd91bb65762023b74efba030d3212fef8f6261707ba8edb9e4b28d13bb5ed
GET /af/219c30/00000000000000003b9b0389/27/l?subset_id=2&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.unrefugees.org
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 19160
etag: "7c243ed5f8437a6687e49316f96967fcfd3feb05"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 30 Jan 2023 00:04:32 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/220823/000000000000000000015231/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
200 OK 46 kB URL HTTP/2 use.typekit.net/af/220823/000000000000000000015231/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 46076, version 1.0\012- data
Hash 45954e79e42c0cf65d3fa93c8ac1c87c
5bdb9ede3de7329800d2861cb64459118fa21b02
73ef385046533349dbdb6264bfdb814819b44a3a7ddeedf7611db7d55f567c7c
GET /af/220823/000000000000000000015231/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.unrefugees.org
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 46076
etag: "25d9000ed11ad93413dd9fab416a1870c8ae46cd"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Mon, 30 Jan 2023 00:04:32 GMT
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-P9YZZV758Y>m=2oe1p0&_p=283442191&_gaz=1&cid=1461089143.1675037081&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675037081&sct=1&seg=0&dl=https%3A%2F%2Fwww.unrefugees.org%2F&dt=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-P9YZZV758Y>m=2oe1p0&_p=283442191&_gaz=1&cid=1461089143.1675037081&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675037081&sct=1&seg=0&dl=https%3A%2F%2Fwww.unrefugees.org%2F&dt=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-P9YZZV758Y>m=2oe1p0&_p=283442191&_gaz=1&cid=1461089143.1675037081&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675037081&sct=1&seg=0&dl=https%3A%2F%2Fwww.unrefugees.org%2F&dt=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.unrefugees.org
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.unrefugees.org
date: Mon, 30 Jan 2023 00:04:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.tfaforms.com/js/FA__DOMContentLoadedEventDispatcher.js
200 OK 591 B URL HTTP/2 www.tfaforms.com/js/FA__DOMContentLoadedEventDispatcher.js
IP
Hash 15fc8b6df6d76478fe97c5c9b0884996
613cd845b1eaf23663e65d98d61d6b75d94036dc
07e47a3a5194dd04385e88ba809bd18abd7e7f6d105a1a370c5def02a4d00342
GET /js/FA__DOMContentLoadedEventDispatcher.js HTTP/1.1
Host: www.tfaforms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-type: application/javascript
set-cookie: AWSALBTG=YsnaErgV8EFCnNIL4RvJ9UxYljjmVyDmwjdEVcdKnYjjbwoORhEQJF/PqCuCaNByKipnLBVrkehVmrshvLT0Vl0xUzabWCCpGuQLAQLMLBvdIlwkxbuBhVLJMakiC/1WSduK54bCzVT22F6OnBFF9nnB1DQilyfYT8iaFb39gOJ2; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBTGCORS=YsnaErgV8EFCnNIL4RvJ9UxYljjmVyDmwjdEVcdKnYjjbwoORhEQJF/PqCuCaNByKipnLBVrkehVmrshvLT0Vl0xUzabWCCpGuQLAQLMLBvdIlwkxbuBhVLJMakiC/1WSduK54bCzVT22F6OnBFF9nnB1DQilyfYT8iaFb39gOJ2; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
AWSALB=dtYKzdUrwfGdotorsNMIkUSH2vMggNHWHSMlOUf0+81cc3tkVrxiCEs8llDQsoSbNziXJvGH6c+oXPifU46/Ce75KIWtfK3N6x+GehCcMTTmtkES4L+OJYRJioQr; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBCORS=dtYKzdUrwfGdotorsNMIkUSH2vMggNHWHSMlOUf0+81cc3tkVrxiCEs8llDQsoSbNziXJvGH6c+oXPifU46/Ce75KIWtfK3N6x+GehCcMTTmtkES4L+OJYRJioQr; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
server: nginx
last-modified: Wed, 25 Jan 2023 00:11:15 GMT
etag: W/"63d073a3-85"
x-fa-app: ecs-156-27
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-P9YZZV758Y&cid=1461089143.1675037081>m=2oe1p0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-P9YZZV758Y&cid=1461089143.1675037081>m=2oe1p0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-P9YZZV758Y&cid=1461089143.1675037081>m=2oe1p0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.unrefugees.org
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.unrefugees.org
date: Mon, 30 Jan 2023 00:04:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.unrefugees.org/media/3292/cash-assistance_rf110467__1200x600.jpg
200 OK 36 kB URL HTTP/2 www.unrefugees.org/media/3292/cash-assistance_rf110467__1200x600.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=\302\251 UNHCR/Sebastian Rich], baseline, precision 8, 1200x600, components 3\012- data
Hash f7a6a5fe957ca7ca0151d86cfda065e4
9330f48e848c6c8959eb37c17de4c73a12707775
bb7ae1c4a852bbcaf95cf4fbf9a6a4fe490aae2f92d7aa3e47762b9157ea67aa
GET /media/3292/cash-assistance_rf110467__1200x600.jpg HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; AWSALBCORS=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; _gcl_au=1.1.824047590.1675037081; _ga_P9YZZV758Y=GS1.1.1675037081.1.0.1675037081.60.0.0; _ga=GA1.1.1461089143.1675037081; _tq_id.TV-63728109-1.cc0b=ea29e868dcbdc79f.1675037082.0.1675037082..
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:32 GMT
content-type: image/jpeg
content-length: 36313
set-cookie: AWSALB=FXlClzFap9/sOe+fW/WMDg9nxUK1ooYuCyNQkPkkiWvrBbjabeN0rQSiYOzRimmywoDiqsAL36tSfIG+ledSz+/S9VC95+u7Hf2utfxOisMvCsVuGuVeWEb71f67; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/
AWSALBCORS=FXlClzFap9/sOe+fW/WMDg9nxUK1ooYuCyNQkPkkiWvrBbjabeN0rQSiYOzRimmywoDiqsAL36tSfIG+ledSz+/S9VC95+u7Hf2utfxOisMvCsVuGuVeWEb71f67; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/; SameSite=None; Secure
cache-control: no-cache
last-modified: Tue, 06 Aug 2019 17:33:14 GMT
accept-ranges: bytes
etag: "7045be67d4cd51:0"
X-Firefox-Spdy: h2
www.unrefugees.org/media/1734/rf294876-1200x1200.jpg
200 OK 127 kB URL HTTP/2 www.unrefugees.org/media/1734/rf294876-1200x1200.jpg
IP
File type JPEG image data, baseline, precision 8, 1200x1200, components 3\012- data
Size 127 kB (126966 bytes)
Hash 89785ebdf4415bc89001663c2d490271
57ed274e7817871db352cb268db98d7fa42c6431
974bbcde9b2a24d0afc97b45967991edc77a5db2e3a3de635a439d9a74f5e98f
GET /media/1734/rf294876-1200x1200.jpg HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; AWSALBCORS=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; _gcl_au=1.1.824047590.1675037081; _ga_P9YZZV758Y=GS1.1.1675037081.1.0.1675037081.60.0.0; _ga=GA1.1.1461089143.1675037081; _tq_id.TV-63728109-1.cc0b=ea29e868dcbdc79f.1675037082.0.1675037082..
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:32 GMT
content-type: image/jpeg
content-length: 126966
set-cookie: AWSALB=+OQ1rN0U3Ecx2gfs3v2HbNYFvIBUObAwtWThS2M1q/FC6F6moUq9K/aDflW1kk7XJCsUvFcZJkOInABXgOC1hT5ClToUTB9CBVret24Qn6YNOoBa6eCVeX4FWXGm; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/
AWSALBCORS=+OQ1rN0U3Ecx2gfs3v2HbNYFvIBUObAwtWThS2M1q/FC6F6moUq9K/aDflW1kk7XJCsUvFcZJkOInABXgOC1hT5ClToUTB9CBVret24Qn6YNOoBa6eCVeX4FWXGm; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/; SameSite=None; Secure
cache-control: no-cache
last-modified: Wed, 27 Sep 2017 11:20:57 GMT
accept-ranges: bytes
etag: "478381b08237d31:0"
X-Firefox-Spdy: h2
www.unrefugees.org/media/1953/unhcr-innovation-rf110365-1200x1200.jpg
200 OK 107 kB URL HTTP/2 www.unrefugees.org/media/1953/unhcr-innovation-rf110365-1200x1200.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=13, description=UNHCR staff process new refugees using the new iris scanning technology at the UNHCR first registration point in Amman Jordan., manufacturer=NIKON CORPORATION, model=NIKON D800, orientation=upper-left, xresolution=330, yresolution=338, resolutionunit=2, software=Ver.1.01 , datetime=2017-10-18T19:29:37-04:00], baseline, precision 8, 1200x1200, components 3\012- data
Size 107 kB (107143 bytes)
Hash 0166c7d23197611e472e35df6b3f41bd
09875c2bb82739f5a33997497fe8788255678633
d5ce31b0fd3a4db6853d139bc58df72f45f6ad8c19c79ce314644f881ce8df8e
GET /media/1953/unhcr-innovation-rf110365-1200x1200.jpg HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; AWSALBCORS=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; _gcl_au=1.1.824047590.1675037081; _ga_P9YZZV758Y=GS1.1.1675037081.1.0.1675037081.60.0.0; _ga=GA1.1.1461089143.1675037081; _tq_id.TV-63728109-1.cc0b=ea29e868dcbdc79f.1675037082.0.1675037082..
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:32 GMT
content-type: image/jpeg
content-length: 107143
set-cookie: AWSALB=qwBGbCuz4JoWXfE9p6Gc4czAXZJ3mjMV3zAjzN9i2KNg3/ptMkFLSQx9tU3zjHU5bM4DQrKebUM+ALjlkiM3HhBVojJCv0qcZ6jAiddoYWNX8LgTsizOH69Hxz30; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/
AWSALBCORS=qwBGbCuz4JoWXfE9p6Gc4czAXZJ3mjMV3zAjzN9i2KNg3/ptMkFLSQx9tU3zjHU5bM4DQrKebUM+ALjlkiM3HhBVojJCv0qcZ6jAiddoYWNX8LgTsizOH69Hxz30; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/; SameSite=None; Secure
cache-control: no-cache
last-modified: Wed, 18 Oct 2017 15:29:59 GMT
accept-ranges: bytes
etag: "699f4bf52548d31:0"
X-Firefox-Spdy: h2
www.unrefugees.org/img/search-icon.png
200 OK 714 B URL HTTP/2 www.unrefugees.org/img/search-icon.png
IP
File type PNG image data, 34 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash e1ebd767caa00d3b958ed09216769ad3
7f9616b696838f72557191491e7760b888b6abaf
ba53ecfcecf61b004dd8d7bde6fcaef65c5d630bad678e83c62ef3b3c420657d
GET /img/search-icon.png HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/css/index.css?v=4
Cookie: AWSALB=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; AWSALBCORS=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; _gcl_au=1.1.824047590.1675037081; _ga_P9YZZV758Y=GS1.1.1675037081.1.0.1675037081.60.0.0; _ga=GA1.1.1461089143.1675037081; _tq_id.TV-63728109-1.cc0b=ea29e868dcbdc79f.1675037082.0.1675037082..
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:32 GMT
content-type: image/png
content-length: 714
set-cookie: AWSALB=7unCV9SMXzmZqzoMDbLM97UFXyObO/KPBuVqJ7hdbsbaArot/MMezxmobYBCdXnqfXT/kV9UnGzKVh8y9xwQ/jdk4YP5AgYy0f3GaCvVkBDtfT2FHVipkF3UMpHr; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/
AWSALBCORS=7unCV9SMXzmZqzoMDbLM97UFXyObO/KPBuVqJ7hdbsbaArot/MMezxmobYBCdXnqfXT/kV9UnGzKVh8y9xwQ/jdk4YP5AgYy0f3GaCvVkBDtfT2FHVipkF3UMpHr; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/; SameSite=None; Secure
cache-control: no-cache
last-modified: Thu, 10 Nov 2022 12:33:06 GMT
accept-ranges: bytes
etag: "06d3c950f5d81:0"
X-Firefox-Spdy: h2
www.unrefugees.org/media/1534/yemen-rf246329-1440x700-v2.jpg
200 OK 121 kB URL HTTP/2 www.unrefugees.org/media/1534/yemen-rf246329-1440x700-v2.jpg
IP
File type JPEG image data, baseline, precision 8, 1440x700, components 3\012- data
Size 121 kB (121275 bytes)
Hash 740bd2a4460c2984b6f16024685027bd
dfc4eaae98e6f3cba2c6ad01f8d85a0a46e245d6
f719bc32e6c6891beaccbc6509641e5f8161ab32bb7c3090dee2072ffa8e22c2
GET /media/1534/yemen-rf246329-1440x700-v2.jpg HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; AWSALBCORS=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; _gcl_au=1.1.824047590.1675037081; _ga_P9YZZV758Y=GS1.1.1675037081.1.0.1675037081.60.0.0; _ga=GA1.1.1461089143.1675037081; _tq_id.TV-63728109-1.cc0b=ea29e868dcbdc79f.1675037082.0.1675037082..
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:32 GMT
content-type: image/jpeg
content-length: 121275
set-cookie: AWSALB=0y2i8UDZ5zlHUT/Ld4dBqntT3nWTnfZCKSHE6QaFOKf8n9ODkUEkfMrkKfUW3KFDyqBZY7ioQg+/Hides50aQn+H3wzrQh0U97YbojSsKxIMf/QzhRh0BwnjLEKT; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/
AWSALBCORS=0y2i8UDZ5zlHUT/Ld4dBqntT3nWTnfZCKSHE6QaFOKf8n9ODkUEkfMrkKfUW3KFDyqBZY7ioQg+/Hides50aQn+H3wzrQh0U97YbojSsKxIMf/QzhRh0BwnjLEKT; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/; SameSite=None; Secure
cache-control: no-cache
last-modified: Thu, 24 Aug 2017 11:14:33 GMT
accept-ranges: bytes
etag: "94ee729ca1cd31:0"
X-Firefox-Spdy: h2
www.unrefugees.org/font/fontello.woff2?47325548
200 OK 4.3 kB URL HTTP/2 www.unrefugees.org/font/fontello.woff2?47325548
IP
File type Web Open Font Format (Version 2), TrueType, length 4328, version 1.0\012- data
Hash 206d6733cb8854f1cc02bc6829ce04c8
fc21c147ee81f2354cf1b0348dea4d58c8fddeb9
fd8c794bb43e5220596bc1c5d50f865268cd2655c86f0d3175875d7e1c3afcc6
GET /font/fontello.woff2?47325548 HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.unrefugees.org/css/index.css?v=4
Cookie: AWSALB=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; AWSALBCORS=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; _gcl_au=1.1.824047590.1675037081; _ga_P9YZZV758Y=GS1.1.1675037081.1.0.1675037081.60.0.0; _ga=GA1.1.1461089143.1675037081; _tq_id.TV-63728109-1.cc0b=ea29e868dcbdc79f.1675037082.0.1675037082..
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:32 GMT
content-type: application/x-font-woff2
content-length: 4328
set-cookie: AWSALB=catjqcGnAD8DPPEU8XcI0TNnveZwyGWGxvQZYE7b+jUI26kApio6MJCci/k94yNCq5NwMwV20kZP6hvIWLFjRAUewOJiIOzeZTelfiWK8A8ojcnhsU+APsW3pfa+; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/
AWSALBCORS=catjqcGnAD8DPPEU8XcI0TNnveZwyGWGxvQZYE7b+jUI26kApio6MJCci/k94yNCq5NwMwV20kZP6hvIWLFjRAUewOJiIOzeZTelfiWK8A8ojcnhsU+APsW3pfa+; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/; SameSite=None; Secure
last-modified: Wed, 17 May 2017 10:53:35 GMT
accept-ranges: bytes
etag: "bc6dfed4fbced21:0"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9eba61fbe87bc53d60d0fdd1ba6adb4
8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07
9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.unrefugees.org/media/1730/rf297199-1200x1200.jpg
200 OK 81 kB URL HTTP/2 www.unrefugees.org/media/1730/rf297199-1200x1200.jpg
IP
File type JPEG image data, baseline, precision 8, 1200x1200, components 3\012- data
Hash 4bc835f46426e5b13a906254ce20e888
0b9f8429f767258c7b6d8a6d0a2769f81dd8da0e
f7d583ab492d692f32365a861acac4b6c3cc0d1b31d692c4d42bcf5f2a6c2e44
GET /media/1730/rf297199-1200x1200.jpg HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; AWSALBCORS=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; _gcl_au=1.1.824047590.1675037081; _ga_P9YZZV758Y=GS1.1.1675037081.1.0.1675037081.60.0.0; _ga=GA1.1.1461089143.1675037081; _tq_id.TV-63728109-1.cc0b=ea29e868dcbdc79f.1675037082.0.1675037082..
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:32 GMT
content-type: image/jpeg
content-length: 81211
set-cookie: AWSALB=l832uS+aNGTWDtioqUQXqa1I2cigmIE3J90nCx3Mdwt9mOhnnaXnv2O5rAO2Kb1fE0GDSFaGbjhhC9ts5SUjETbNHZi1kbCNb4E97K3QtI3KMS5ubAx4RoQ5Wcgg; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/
AWSALBCORS=l832uS+aNGTWDtioqUQXqa1I2cigmIE3J90nCx3Mdwt9mOhnnaXnv2O5rAO2Kb1fE0GDSFaGbjhhC9ts5SUjETbNHZi1kbCNb4E97K3QtI3KMS5ubAx4RoQ5Wcgg; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/; SameSite=None; Secure
cache-control: no-cache
last-modified: Wed, 27 Sep 2017 11:20:48 GMT
accept-ranges: bytes
etag: "54c334ab8237d31:0"
X-Firefox-Spdy: h2
www.unrefugees.org/media/f3genxaz/grandi-ukraine-list.png
200 OK 556 kB URL HTTP/2 www.unrefugees.org/media/f3genxaz/grandi-ukraine-list.png
IP
File type PNG image data, 620 x 468, 8-bit/color RGBA, non-interlaced\012- data
Size 556 kB (555696 bytes)
Hash aa52601f50c37c8ec7e41dd08deb72ce
3c46a33dc54f51f70c7fca65e6e8e5b65c39f17b
29d2a17556813d1d6127f7fbd6b9dfaffd98dd7e6a3b4908682795b0ed531e7c
GET /media/f3genxaz/grandi-ukraine-list.png HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; AWSALBCORS=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; _gcl_au=1.1.824047590.1675037081; _ga_P9YZZV758Y=GS1.1.1675037081.1.0.1675037081.60.0.0; _ga=GA1.1.1461089143.1675037081; _tq_id.TV-63728109-1.cc0b=ea29e868dcbdc79f.1675037082.0.1675037082..
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:32 GMT
content-type: image/png
content-length: 555696
set-cookie: AWSALB=ppNXMw/uD6wqHAAK/i37Xl5II2EX8B4DJDZmfyy4qr+b8OTUbLyyI0NErtNOygEKASPTjoZ4Fl+gzo2pJRiRbI9kMAA1PcKN64bTVZOC2E995i4S8S1urw9mOE8M; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/
AWSALBCORS=ppNXMw/uD6wqHAAK/i37Xl5II2EX8B4DJDZmfyy4qr+b8OTUbLyyI0NErtNOygEKASPTjoZ4Fl+gzo2pJRiRbI9kMAA1PcKN64bTVZOC2E995i4S8S1urw9mOE8M; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/; SameSite=None; Secure
cache-control: no-cache
last-modified: Fri, 27 Jan 2023 14:56:23 GMT
accept-ranges: bytes
etag: "ca8ef1855f32d91:0"
X-Firefox-Spdy: h2
www.unrefugees.org/media/o3gmdw5x/1-1.png
200 OK 516 kB URL HTTP/2 www.unrefugees.org/media/o3gmdw5x/1-1.png
IP
File type PNG image data, 620 x 468, 8-bit/color RGBA, non-interlaced\012- data
Size 516 kB (516120 bytes)
Hash 7bf92a772224ed3adf60a9160797bdcb
e769508fec1f0025c377a354e6f5f33978cec6d6
05ac6d3017c3495f30129595c9c0fc578b44b0980ed786f1fde74403394b98f9
GET /media/o3gmdw5x/1-1.png HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; AWSALBCORS=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; _gcl_au=1.1.824047590.1675037081; _ga_P9YZZV758Y=GS1.1.1675037081.1.0.1675037081.60.0.0; _ga=GA1.1.1461089143.1675037081; _tq_id.TV-63728109-1.cc0b=ea29e868dcbdc79f.1675037082.0.1675037082..
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:32 GMT
content-type: image/png
content-length: 516120
set-cookie: AWSALB=RHYNID9oqTTGBbPmuHnDgmrwvXoYXoMtWXu5P9obF3z5q++pSRmF5CZLt2v2RStexvxQR/2Jkr+w7Zr0rZ8uyRK8Bh5uKHl2+R4EUViNDZPfRWvwJW2SLqN4vnVY; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/
AWSALBCORS=RHYNID9oqTTGBbPmuHnDgmrwvXoYXoMtWXu5P9obF3z5q++pSRmF5CZLt2v2RStexvxQR/2Jkr+w7Zr0rZ8uyRK8Bh5uKHl2+R4EUViNDZPfRWvwJW2SLqN4vnVY; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/; SameSite=None; Secure
cache-control: no-cache
last-modified: Tue, 24 Jan 2023 16:39:19 GMT
accept-ranges: bytes
etag: "fa7ba0671230d91:0"
X-Firefox-Spdy: h2
www.unrefugees.org/media/ofuhxbp3/5-crises-list-image.png
200 OK 376 kB URL HTTP/2 www.unrefugees.org/media/ofuhxbp3/5-crises-list-image.png
IP
File type PNG image data, 620 x 468, 8-bit/color RGBA, non-interlaced\012- data
Size 376 kB (376521 bytes)
Hash 86ab9ca056ee8e496cfaaafd3bea27d3
0ce793aea9f3198f3efc0e7a3d39225272b21693
d61b2994ade2c93e7ad601b845127d324b8f5b3d21527498053cefa00ac277eb
GET /media/ofuhxbp3/5-crises-list-image.png HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; AWSALBCORS=rk8XhSkAbN5OLZ2jYUV3sSlmbnP+ymkv9ns2nssL4lt7lRy40C4QI2qFy7yYzK6FyCe8jdeFxFhDwobkkTq7Uki2pdHZA7iwzCu1/AulFN9ZRF6Jfjw1hvg8RCg2; _gcl_au=1.1.824047590.1675037081; _ga_P9YZZV758Y=GS1.1.1675037081.1.0.1675037081.60.0.0; _ga=GA1.1.1461089143.1675037081; _tq_id.TV-63728109-1.cc0b=ea29e868dcbdc79f.1675037082.0.1675037082..
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:32 GMT
content-type: image/png
content-length: 376521
set-cookie: AWSALB=8GCmCHQGR3QWT2avkRorIq8Uo0rrBNFiB0ufoa7O/nafE85JVQV5SiCbKYyxz3H51vn5w+Wu7H0UlpF25y8tpiYcDh/IMSsRf9DzxIezIY3x90kEAd08GVWrhjQq; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/
AWSALBCORS=8GCmCHQGR3QWT2avkRorIq8Uo0rrBNFiB0ufoa7O/nafE85JVQV5SiCbKYyxz3H51vn5w+Wu7H0UlpF25y8tpiYcDh/IMSsRf9DzxIezIY3x90kEAd08GVWrhjQq; Expires=Mon, 06 Feb 2023 00:04:32 GMT; Path=/; SameSite=None; Secure
cache-control: no-cache
last-modified: Fri, 27 Jan 2023 17:30:32 GMT
accept-ranges: bytes
etag: "8e688de7532d91:0"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5733923ee6f211669593679a8d8405af
57e6889b3d754105d27988768a5290c34c917c3c
a146918e014ccb6c06add9aeab62ef151890efe37368cd6fb7dfec723d0da7f4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=104223
Date: Mon, 30 Jan 2023 00:04:32 GMT
Etag: "63d5fc04-1d7"
Expires: Tue, 31 Jan 2023 05:01:35 GMT
Last-Modified: Sun, 29 Jan 2023 04:54:28 GMT
Server: ECS (nyb/1DCD)
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: jCR5gtfHIkEsSYYmvbajlc8CDfjx4jvWdWf_1Z_kcNH6wM5dmoNeKg==
Age: 427
cdn.logrocket.io/logger-1.min.js
200 OK 164 kB URL HTTP/2 cdn.logrocket.io/logger-1.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 164 kB (163616 bytes)
Hash 89df9e366b225f561b05a6172d83a41e
6812f2a32ec47155893cccc89af0da8139be5bc0
b5b06953511e914c045d88010878da9ec04185d3ad8d7a052eb5120a70694708
GET /logger-1.min.js HTTP/1.1
Host: cdn.logrocket.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:32 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=300
cross-origin-resource-policy: cross-origin
etag: W/"ec0c5d7fa89855eeb021d37009bda77d7fd638091d3463aac944ccbca0c6ce36"
last-modified: Fri, 27 Jan 2023 22:49:18 GMT
strict-transport-security: max-age=31556926
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674860035.626336,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t32w%2BlQXLkaAAywWRdweLvqJqxaHF02h6bIqHb4hlNOjc5HXxeHE5RwN01DQEJh9boFdKJU2aGmIcjwO6I7ob6aZpdoUe699DDS%2FcRGIzJTKvnV933wQqtpyE4WHPKClwG%2F0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7915f3672d83b4f7-OSL
content-encoding: br
X-Firefox-Spdy: h2
w.usabilla.com/fa5b33ed7c80.js?lv=1
200 OK 11 kB URL HTTP/2 w.usabilla.com/fa5b33ed7c80.js?lv=1
IP
File type ASCII text, with very long lines (2150)
Hash f7fa317e326380485eb43028dae7c0b0
dac6c20f8eaf3aaec43a4624890d4e6e23a5947f
02c5e192d3fc9a96746d6c222bc30d139c8a72c10d897bbf25f52eef43a97c28
GET /fa5b33ed7c80.js?lv=1 HTTP/1.1
Host: w.usabilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:32 GMT
content-type: text/javascript
content-length: 11224
cache-control: public,max-age=0
content-encoding: gzip
etag: "328d42701f247ddd3937d8946c9a2c8b"
pragma: no-cache
x-widget-server: 2.1
X-Firefox-Spdy: h2
c1.rfihub.net/js/tc.min.js
200 OK 6.2 kB URL HTTP/2 c1.rfihub.net/js/tc.min.js
IP
File type C source, ASCII text, with very long lines (19497)
Hash ab5a2e3f2414c0a2b622e48c0b6da2fd
1a894787bde6cbf9b58d47b8f4245607420112ad
a5ef19cf7ca85f760c462ed2f228430c8d0a6d9daf3aa34894a5c42113cfdb8f
GET /js/tc.min.js HTTP/1.1
Host: c1.rfihub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6162
date: Sun, 29 Jan 2023 23:28:42 GMT
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
cache-control: public, max-age=3600
expires: Mon, 30 Jan 2023 00:28:42 GMT
last-modified: Sun, 29 Jan 2023 23:28:32 GMT
content-encoding: gzip
server: Jetty(9.3.29.v20201019)
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nbLOWovUs3DjJWR3l-qiF7JwgTxHmsKdINMTWDJAibhaZKdgDGs38A==
age: 2151
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sun, 29 Jan 2023 23:46:59 GMT
expires: Mon, 30 Jan 2023 01:46:59 GMT
cache-control: public, max-age=7200
age: 1054
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39395), with no line terminators
Hash 4f378a725368a42971cd69e29f75db89
2a1cdf193b346d9281c6e04a9b3775e7fc1ae11e
6a2a9d238501343cb3f25e0f54f4ecc4ec2c4e0fa6b228cc72dc3fff90502078
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11552
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 23 Jan 2023 19:59:24 GMT
accept-ranges: bytes
etag: "076bc30652fd91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 94D3CA566CFF407B84A60C2CA7BBCF18 Ref B: OSL30EDGE0408 Ref C: 2023-01-30T00:04:33Z
date: Mon, 30 Jan 2023 00:04:32 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 294f77504cc97247871cf49a273e41ec
52a26abf56054cead2bf81c4cc2ec7adfa32ba99
b6eaed632b4b483ce8d9209bed97bf474e7807900c995928e0e9fc8cd8aaa30b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5856
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:33 GMT
Last-Modified: Sun, 29 Jan 2023 22:26:57 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
ad.doubleclick.net/ddm/activity/src=4269937;type=invmedia;cat=unhcr0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1?
302 Found 0 B URL HTTP/2 ad.doubleclick.net/ddm/activity/src=4269937;type=invmedia;cat=unhcr0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/activity/src=4269937;type=invmedia;cat=unhcr0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1? HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 00:04:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=4269937;type=invmedia;cat=unhcr0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1;~oref=https://www.unrefugees.org/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 30-Jan-2023 00:19:33 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db3290a85d0ba4da27406ae9636aa618
4c69da45eddd66a1e26fce5562fc45eda7005309
19db4d0cc84bff9586883a5fa69c426af0b5fc1c2760ee7c259b0307c8afa6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 14681339fc16ac120967600c85c37d96
589ed56dc45067e35e26a667ad3d9a12d0f61884
c7a020eb97f372e9325a03c89aa4d97d023f8583ea94af56ae1ffc2363ab8547
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5719
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:33 GMT
Last-Modified: Sun, 29 Jan 2023 22:29:14 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
googleads.g.doubleclick.net/pagead/viewthroughconversion/957115417/?random=1675037081192&cv=11&fst=1675037081192&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.unrefugees.org%2F&tiba=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&auid=824047590.1675037081&rfmt=3&fmt=4
200 OK 920 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/957115417/?random=1675037081192&cv=11&fst=1675037081192&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.unrefugees.org%2F&tiba=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&auid=824047590.1675037081&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (1943), with no line terminators
Hash 542e16fd665fe88b92204a948603a15a
29e9950910348c6998359fe2ddbe914714abc266
f98deda9a2db68126ee93e3381469d2bc6b480fed05b3542896e85266e86a536
GET /pagead/viewthroughconversion/957115417/?random=1675037081192&cv=11&fst=1675037081192&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.unrefugees.org%2F&tiba=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&auid=824047590.1675037081&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 00:04:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 920
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 30-Jan-2023 00:19:33 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-P9YZZV758Y&cid=1461089143.1675037081>m=2oe1p0&aip=1&z=2100351464
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-P9YZZV758Y&cid=1461089143.1675037081>m=2oe1p0&aip=1&z=2100351464
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-P9YZZV758Y&cid=1461089143.1675037081>m=2oe1p0&aip=1&z=2100351464 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 00:04:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/10934040069/?random=1675037081210&cv=11&fst=1675037081210&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&label=H-81CJ38i88DEIXs4N0o&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.unrefugees.org%2F&tiba=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&value=0&bttype=purchase&auid=824047590.1675037081&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10934040069/?random=1675037081210&cv=11&fst=1675037081210&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&label=H-81CJ38i88DEIXs4N0o&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.unrefugees.org%2F&tiba=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&value=0&bttype=purchase&auid=824047590.1675037081&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/10934040069/?random=1675037081210&cv=11&fst=1675037081210&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&label=H-81CJ38i88DEIXs4N0o&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.unrefugees.org%2F&tiba=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&value=0&bttype=purchase&auid=824047590.1675037081&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 00:04:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 30-Jan-2023 00:19:33 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/10934040069/?random=1675037081210&cv=11&fst=1675037081210&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&label=H-81CJ38i88DEIXs4N0o&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.unrefugees.org%2F&tiba=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&value=0&bttype=purchase&auid=824047590.1675037081&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/10934040069/?random=1675037081210&cv=11&fst=1675037081210&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&label=H-81CJ38i88DEIXs4N0o&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.unrefugees.org%2F&tiba=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&value=0&bttype=purchase&auid=824047590.1675037081&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/10934040069/?random=1675037081210&cv=11&fst=1675037081210&bg=ffffff&guid=ON&async=1>m=2wg1p0&u_w=1280&u_h=1024&label=H-81CJ38i88DEIXs4N0o&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.unrefugees.org%2F&tiba=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&value=0&bttype=purchase&auid=824047590.1675037081&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 00:04:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e839d271be56bca014e4c2f17abc2f61
0e97fd179b6640654ab0d8d089fd1daad58cbd24
c1aa2df4973fcaf73e2d6c20d39da281488fffac1b3e4052bdeebca7a632abb4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4573
Cache-Control: max-age=155915
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:33 GMT
Etag: "63d6b5bf-1d7"
Expires: Tue, 31 Jan 2023 19:23:08 GMT
Last-Modified: Sun, 29 Jan 2023 18:06:55 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=HOCTIHbtp
302 Found 0 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=HOCTIHbtp
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /idsync/ex/receive?partner_id=3203&partner_device_id=HOCTIHbtp HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 30 Jan 2023 00:04:33 GMT
strict-transport-security: max-age=31536000
access-control-allow-origin: *
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1675037073123;Expires=Fri, 31 Mar 2023 00:04:33 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=2440e514-74ab-4a60-9165-301b55bd20ba;Expires=Fri, 31 Mar 2023 00:04:33 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3203&partner_device_id=HOCTIHbtp
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.unrefugees.org/favicon.ico?v=4
200 OK 1.1 kB URL HTTP/2 www.unrefugees.org/favicon.ico?v=4
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 076b0bdc7a27d31fb826f5f632c7b003
4298fcdddb77195d7e1f9c7c060f086e3e795d8c
b2d58ec04378eec775fc2294235a59fb37ba751608993c06e936ad4a90f6eac2
GET /favicon.ico?v=4 HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=RHYNID9oqTTGBbPmuHnDgmrwvXoYXoMtWXu5P9obF3z5q++pSRmF5CZLt2v2RStexvxQR/2Jkr+w7Zr0rZ8uyRK8Bh5uKHl2+R4EUViNDZPfRWvwJW2SLqN4vnVY; AWSALBCORS=RHYNID9oqTTGBbPmuHnDgmrwvXoYXoMtWXu5P9obF3z5q++pSRmF5CZLt2v2RStexvxQR/2Jkr+w7Zr0rZ8uyRK8Bh5uKHl2+R4EUViNDZPfRWvwJW2SLqN4vnVY; _gcl_au=1.1.824047590.1675037081; _ga_P9YZZV758Y=GS1.1.1675037081.1.0.1675037081.60.0.0; _ga=GA1.1.1461089143.1675037081; _tq_id.TV-63728109-1.cc0b=ea29e868dcbdc79f.1675037082.0.1675037082..; _lr_tabs_-0o0tmf%2Fdonation-form-review={%22sessionID%22:0%2C%22recordingID%22:%225-0f2299af-c1ff-4cb0-8196-c7eb4e21e007%22%2C%22lastActivity%22:1675037082289}; _lr_hb_-0o0tmf%2Fdonation-form-review={%22heartbeat%22:1675037082289}; _lr_uf_-0o0tmf=ed1fa9bb-3d23-46d3-9f80-c43436a5250e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:33 GMT
content-type: image/x-icon
content-length: 1136
set-cookie: AWSALB=d4OmXj82+yX3VnVS3iXtyDryUf59sWWrKWbHzgd9KaD0UQ09oxAQn8tYhzwTmqpP9382xyeLJNIRpuYAwvG4SGgzmZQL876AfB+i3L0k7pCr8Nem/q+BEfBp/p3P; Expires=Mon, 06 Feb 2023 00:04:33 GMT; Path=/
AWSALBCORS=d4OmXj82+yX3VnVS3iXtyDryUf59sWWrKWbHzgd9KaD0UQ09oxAQn8tYhzwTmqpP9382xyeLJNIRpuYAwvG4SGgzmZQL876AfB+i3L0k7pCr8Nem/q+BEfBp/p3P; Expires=Mon, 06 Feb 2023 00:04:33 GMT; Path=/; SameSite=None; Secure
last-modified: Tue, 31 Oct 2017 10:25:39 GMT
accept-ranges: bytes
etag: "d9cb20993252d31:0"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 541db4f3f0ba067bfb58cdac34cb86f4
20e6883f068568888ce37c6b9ef8f5d12be257c0
83898f3b2da2a11996d2eb3a5115ef301255030fdf231b8bf7971916769bc7be
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: HYT/vp1dypOWJToFA4RG837YKLGmu7P2+/UZ9jcx2rqTFGnaE/HQm1paneM5y2L/BVpbrdv/DkGGI6Adxs2AdA==
content-length: 27815
x-fb-trip-id: 1904183273
date: Mon, 30 Jan 2023 00:04:33 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js
200 OK 164 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js
IP
File type ASCII text, with very long lines (771)
Size 164 kB (163774 bytes)
Hash 57c909ab73fc27ec24f737bbf1cb1de8
89b2c02e9e7a9a764518fca545d3eec2044fd6d9
7e407e2b00bb7c238c71d96472f7ab030de4e610b1048f0f77b25cb85c2d166b
GET /recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.unrefugees.org
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 17:09:34 GMT
expires: Tue, 23 Jan 2024 17:09:34 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 23 Jan 2023 01:02:00 GMT
content-type: text/javascript
age: 543299
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 224c8cf29cc17891aed221b568944626
c781815e336ed98a2db32d16164fdf9d76a0d698
98ea33c3800e0750a252e74e2232edcadfa920d9ea03ac301c4b41713c1edb15
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 00:04:33 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 14:15:46 GMT
Expires: Sat, 04 Feb 2023 14:15:45 GMT
Etag: "c781815e336ed98a2db32d16164fdf9d76a0d698"
Cache-Control: max-age=482471,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7915f36b4b54b50c-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 294f77504cc97247871cf49a273e41ec
52a26abf56054cead2bf81c4cc2ec7adfa32ba99
b6eaed632b4b483ce8d9209bed97bf474e7807900c995928e0e9fc8cd8aaa30b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5856
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:33 GMT
Last-Modified: Sun, 29 Jan 2023 22:26:57 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 14681339fc16ac120967600c85c37d96
589ed56dc45067e35e26a667ad3d9a12d0f61884
c7a020eb97f372e9325a03c89aa4d97d023f8583ea94af56ae1ffc2363ab8547
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5719
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:33 GMT
Last-Modified: Sun, 29 Jan 2023 22:29:14 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db3290a85d0ba4da27406ae9636aa618
4c69da45eddd66a1e26fce5562fc45eda7005309
19db4d0cc84bff9586883a5fa69c426af0b5fc1c2760ee7c259b0307c8afa6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.tfaforms.com/wForms/3.11/js/wforms.js?v=1675037070
200 OK 67 kB URL HTTP/2 www.tfaforms.com/wForms/3.11/js/wforms.js?v=1675037070
IP
Hash db37085ef6c42158b3479a103d83d88b
64c6959444cfea442eabc2a0a2efe52d649f0332
e129ebd103b2a20d3308e630b99992d9c3b94c52e904fb2bd9995ba9bcfe3326
GET /wForms/3.11/js/wforms.js?v=1675037070 HTTP/1.1
Host: www.tfaforms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-type: application/javascript
set-cookie: AWSALBTG=K1KD1vGIkXJM+Fw0LFfHznbZjbDoOnbjHSmOARiKFgFdEUaCdCzKU+rXH3+x+GcDZZ+ADG+WTomyE1a92cWjzHuPmrM19hhqz56/iAtVkxxUvTUYm7xcjviKlDsFnYA2b6gWrRbBv9Qjf7nwblyYh6jpVwWgWzWD17PWLXJt/atv; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBTGCORS=K1KD1vGIkXJM+Fw0LFfHznbZjbDoOnbjHSmOARiKFgFdEUaCdCzKU+rXH3+x+GcDZZ+ADG+WTomyE1a92cWjzHuPmrM19hhqz56/iAtVkxxUvTUYm7xcjviKlDsFnYA2b6gWrRbBv9Qjf7nwblyYh6jpVwWgWzWD17PWLXJt/atv; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
AWSALB=wFm8oMNwE/fnOGoYl/uLIXb0S5kUZMT6n0MDq54+ZruUdU03pFk9EYcTEHuj3yrQ5QowbrVuwojH/ftcR+EzvJV9GoY0F03I79KxUwM9n5er42A8oN+4wKWRl7cl; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBCORS=wFm8oMNwE/fnOGoYl/uLIXb0S5kUZMT6n0MDq54+ZruUdU03pFk9EYcTEHuj3yrQ5QowbrVuwojH/ftcR+EzvJV9GoY0F03I79KxUwM9n5er42A8oN+4wKWRl7cl; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
server: nginx
last-modified: Wed, 25 Jan 2023 00:35:12 GMT
etag: W/"63d07940-3580f"
x-fa-app: ecs-133-120
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
www.unrefugees.org/scripts/lib/project.min.js?v=5
200 OK 728 kB URL HTTP/2 www.unrefugees.org/scripts/lib/project.min.js?v=5
IP
Size 728 kB (727729 bytes)
Hash 37226331a8a3ac1b0427baf3c021faa7
05dacdb484b77100892570b8c3b8725e86312011
74a109c76a00de489843557d79c0ee04511edb6995b6e37a12bb50f0f49f424f
GET /scripts/lib/project.min.js?v=5 HTTP/1.1
Host: www.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Cookie: AWSALB=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB; AWSALBCORS=qRVFnaZW+G7JsywvimWfNWN61z/JLCCcsR70qiW6BknoPtcdgeC5QfwKKhp7ZwxfNEuB9CEler89nYYxlNe19sNvnrPDyM3O36qR1YF7yux6rdrFltWXkxp8eoJB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-type: application/javascript
set-cookie: AWSALB=6IRVr1Kx5ba5J1ARbGkc2clZx/Iieniuf2unf29lIEoOmT3bwijbvssQLQVao2NJXbLWgiM7m/b868slcVMi5kjinU6hrZSqj+XnX3Yv6uBzhngPEBX0NRdaIbbP; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBCORS=6IRVr1Kx5ba5J1ARbGkc2clZx/Iieniuf2unf29lIEoOmT3bwijbvssQLQVao2NJXbLWgiM7m/b868slcVMi5kjinU6hrZSqj+XnX3Yv6uBzhngPEBX0NRdaIbbP; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
content-encoding: gzip
last-modified: Mon, 21 Nov 2022 20:05:45 GMT
accept-ranges: bytes
etag: "682d5ba4e4fdd81:0"
vary: Accept-Encoding
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10095779.json
200 OK 46 B URL HTTP/2 s.yimg.com/wi/config/10095779.json
IP
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash ca96ec3516187adbafe0fb0d4f2e4932
1843c878e29d38aa6b337748f45dc27c84c03256
81f701abbdb3dcd7318338357add41af96a3b776549dc928c4703cf1cf9f2ffe
GET /wi/config/10095779.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.unrefugees.org
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: R6IwOcefKlviS9/wkTDvxQST/lgXhPcXOphYHzxleUiyg3qiY8O2mo8q7RK6Lf8ptcThSYNFkHo=
x-amz-request-id: Z3Q3EWFVSGTJDP07
date: Sun, 29 Jan 2023 17:34:56 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Wed, 14 Sep 2022 20:58:25 GMT
x-amz-expiration: expiry-date="Fri, 20 Oct 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "ca96ec3516187adbafe0fb0d4f2e4932"
x-amz-server-side-encryption: AES256
x-amz-version-id: AO6OvHycU6oPxWJjvTRCjyjUvfXH8wEk
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 23378
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/p/src=4269937;type=invmedia;cat=unhcr0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1;~oref=https://www.unrefugees.org/
200 OK 42 B URL HTTP/2 adservice.google.no/ddm/fls/p/src=4269937;type=invmedia;cat=unhcr0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1;~oref=https://www.unrefugees.org/
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ddm/fls/p/src=4269937;type=invmedia;cat=unhcr0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1;~oref=https://www.unrefugees.org/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 00:04:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=5612726&tm=gtm002&Ver=2&mid=d12bedaf-5bd8-4d16-b1ab-cd7d2c548d1e&sid=b2a41ab0a03111edaf21193eb7edf3b6&vid=b2a40de0a03111ed98f0f5df60c21e27&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=How%20to%20Help%20Refugees%20%E2%80%94%20Aid,%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&kw=Home&p=https%3A%2F%2Fwww.unrefugees.org%2F&r=<=3268&evt=pageLoad&sv=1&rn=239376
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=5612726&tm=gtm002&Ver=2&mid=d12bedaf-5bd8-4d16-b1ab-cd7d2c548d1e&sid=b2a41ab0a03111edaf21193eb7edf3b6&vid=b2a40de0a03111ed98f0f5df60c21e27&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=How%20to%20Help%20Refugees%20%E2%80%94%20Aid,%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&kw=Home&p=https%3A%2F%2Fwww.unrefugees.org%2F&r=<=3268&evt=pageLoad&sv=1&rn=239376
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5612726&tm=gtm002&Ver=2&mid=d12bedaf-5bd8-4d16-b1ab-cd7d2c548d1e&sid=b2a41ab0a03111edaf21193eb7edf3b6&vid=b2a40de0a03111ed98f0f5df60c21e27&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=How%20to%20Help%20Refugees%20%E2%80%94%20Aid,%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&kw=Home&p=https%3A%2F%2Fwww.unrefugees.org%2F&r=<=3268&evt=pageLoad&sv=1&rn=239376 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=0A7957F372FB693E0841455A73AC6811; domain=.bing.com; expires=Sat, 24-Feb-2024 00:04:33 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6A7A6A58230148C688C6B63B897D7969 Ref B: OSL30EDGE0408 Ref C: 2023-01-30T00:04:33Z
date: Mon, 30 Jan 2023 00:04:33 GMT
X-Firefox-Spdy: h2
bat.bing.com/p/action/5612726.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/5612726.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/5612726.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 12FE4A24BDB444C3A8B69FDAD5CB9939 Ref B: OSL30EDGE0408 Ref C: 2023-01-30T00:04:33Z
date: Mon, 30 Jan 2023 00:04:33 GMT
X-Firefox-Spdy: h2
pixel.quantserve.com/pixel;r=1292612292;labels=_fp.event.Homepage;rf=0;a=p-SLcBYqRUU3yLq;url=https%3A%2F%2Fwww.unrefugees.org%2F;uht=2;fpan=1;fpa=P0-2085890685-1675037082858;pbc=;ns=0;ce=1;qjs=1;qv=8508733c-20230116145555;cm=;gdpr=0;ref=;d=unrefugees.org;dst=0;et=1675037083056;tzo=0;ogl=title.How%20to%20Help%20Refugees%20%E2%80%94%20Aid%252C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR%2Ctype.website%2Curl.https%3A%2F%2Fwww%252Eunrefugees%252Eorg%2F%2Cimage.https%3A%2F%2Fwww%252Eunrefugees%252Eorg%2Fmedia%2F1884%2Fusa-for-unhcr-helping-refugees-rf237115-12%2Cdescription.USA%20for%20UNHCR%20helps%20to%20save%252C%20protect%20and%20rebuild%20the%20lives%20of%20millions%20of%20refuge;ses=2efea9bc-5684-449a-9359-3a171a9a02ef
200 OK 7.4 kB URL HTTP/2 pixel.quantserve.com/pixel;r=1292612292;labels=_fp.event.Homepage;rf=0;a=p-SLcBYqRUU3yLq;url=https%3A%2F%2Fwww.unrefugees.org%2F;uht=2;fpan=1;fpa=P0-2085890685-1675037082858;pbc=;ns=0;ce=1;qjs=1;qv=8508733c-20230116145555;cm=;gdpr=0;ref=;d=unrefugees.org;dst=0;et=1675037083056;tzo=0;ogl=title.How%20to%20Help%20Refugees%20%E2%80%94%20Aid%252C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR%2Ctype.website%2Curl.https%3A%2F%2Fwww%252Eunrefugees%252Eorg%2F%2Cimage.https%3A%2F%2Fwww%252Eunrefugees%252Eorg%2Fmedia%2F1884%2Fusa-for-unhcr-helping-refugees-rf237115-12%2Cdescription.USA%20for%20UNHCR%20helps%20to%20save%252C%20protect%20and%20rebuild%20the%20lives%20of%20millions%20of%20refuge;ses=2efea9bc-5684-449a-9359-3a171a9a02ef
IP
File type gzip compressed data, max compression\012- data
Hash 062b3b180105164cfe1a8a3aab80814f
50e0f178c0074fd11c79bf750c8e5c306f521342
ea491c0fe918f6c480e38d85a6ab1faab8ab8ffc2df9bdc1678a57fd7b5f7c45
GET /pixel;r=1292612292;labels=_fp.event.Homepage;rf=0;a=p-SLcBYqRUU3yLq;url=https%3A%2F%2Fwww.unrefugees.org%2F;uht=2;fpan=1;fpa=P0-2085890685-1675037082858;pbc=;ns=0;ce=1;qjs=1;qv=8508733c-20230116145555;cm=;gdpr=0;ref=;d=unrefugees.org;dst=0;et=1675037083056;tzo=0;ogl=title.How%20to%20Help%20Refugees%20%E2%80%94%20Aid%252C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR%2Ctype.website%2Curl.https%3A%2F%2Fwww%252Eunrefugees%252Eorg%2F%2Cimage.https%3A%2F%2Fwww%252Eunrefugees%252Eorg%2Fmedia%2F1884%2Fusa-for-unhcr-helping-refugees-rf237115-12%2Cdescription.USA%20for%20UNHCR%20helps%20to%20save%252C%20protect%20and%20rebuild%20the%20lives%20of%20millions%20of%20refuge;ses=2efea9bc-5684-449a-9359-3a171a9a02ef HTTP/1.1
Host: pixel.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:33 GMT
content-type: image/gif
content-length: 35
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: mc=63d70991-917db-9dec2-41b08; expires=Fri, 01-Mar-2024 00:04:33 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fd924701c80ae285eaf8c36e3fa5e471
baecc0d5af879497f0faac94db26cb64f7a65f9f
1dd5b45f1c0ba704a93ef8458149f01ff79d89fe6f587e1a9bdb4a338057b7d5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5586
Cache-Control: max-age=117343
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:33 GMT
Etag: "63d61b1e-1d7"
Expires: Tue, 31 Jan 2023 08:40:16 GMT
Last-Modified: Sun, 29 Jan 2023 07:07:10 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
r.turn.com/r/beacon?b2=2ktLc5k8nNM07yj6GA-Hrn8gtUS_nFcwtDx5qaA26AoeU_Oup029YVIprkeGvqSpoIUReErvK66MTKJfORKOtg&cid=
200 OK 43 B URL HTTP/2 r.turn.com/r/beacon?b2=2ktLc5k8nNM07yj6GA-Hrn8gtUS_nFcwtDx5qaA26AoeU_Oup029YVIprkeGvqSpoIUReErvK66MTKJfORKOtg&cid=
IP
ASN #56396 Amobee EMEA Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash 13e1c7a2184e36d7ae519e99b1aa226f
355ccad4eac39838e1cc76fd0b670fd2ea1e5aa3
48a33ca9f42b91902d57ad8ac52e1ce32b92c8c10c732f2dbb6fe960ebfd9438
GET /r/beacon?b2=2ktLc5k8nNM07yj6GA-Hrn8gtUS_nFcwtDx5qaA26AoeU_Oup029YVIprkeGvqSpoIUReErvK66MTKJfORKOtg&cid= HTTP/1.1
Host: r.turn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=3010691838577849406; Domain=.turn.com; Expires=Sat, 29-Jul-2023 00:04:33 GMT; Path=/; Secure; SameSite=None
content-type: image/gif
content-length: 43
date: Mon, 30 Jan 2023 00:04:33 GMT
X-Firefox-Spdy: h2
live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210823383233782&referrer=https%3A%2F%2Fwww.unrefugees.org%2F
302 Found 661 B URL HTTP/2 live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210823383233782&referrer=https%3A%2F%2Fwww.unrefugees.org%2F
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (575)
Hash 8788cc206ec26016fdbf6d99c29c3737
07c692c83840498a0282dad17da604d595229337
c9cb5651c1a9d1b61b5d2dc6ef38e425c6a88e5978dd17e938334ee56f77ea91
GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210823383233782&referrer=https%3A%2F%2Fwww.unrefugees.org%2F HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 661
location: https://p.rfihub.com/cm?pub=39342&in=0&userid=30e0b735-f0ab-4632-830a-51acee29dc98%3A1675037073.6557739&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D30e0b735-f0ab-4632-830a-51acee29dc98%253A1675037073.6557739
date: Mon, 30 Jan 2023 00:04:33 GMT
set-cookie: zync-uuid=30e0b735-f0ab-4632-830a-51acee29dc98:1675037073.6557739; Domain=rezync.com; Expires=Fri, 28 Jul 2023 16:04:33 GMT; Path=/; SameSite=None; Secure
sd-session-id=.eJwNykEOgyAQQNG7zFqagXEY5DIGcZqQVtqIbmq8e9n85CX_gvmr-5aq1gPisZ86QH6XrgbxglZ-m74gAtvROovBEQXqkeDgHqBpa-VT57L2h1BxEWLzxLSY0ZMzgTAZtimrumnNU4jWCyMJCj08swhNcP8BpVUlig.Y9cJkQ.Eol4K2cJwSRw-BsoG59_OFQymgk; Expires=Sat, 29 Jul 2023 00:04:33 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
server: lighttpd/1.4.59
x-cache: Miss from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Puc1oegNo_wvXqohencVT_UT9NAH3jH8gk1e7Edz5iAx3s_7syRjBw==
X-Firefox-Spdy: h2
contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5141210823383233782
200 OK 45 B URL HTTP/2 contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5141210823383233782
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash 99cceceaed4d575484b69ddaf9ed66a7
1e3a3b15296b585833a22d987a387aa58aa1642d
832f63f4187160c195b04f1911c2e623a75e805f4b23abb9b0bea214b4283a43
GET /cksync.php?cs=3&type=rkt&ovsid=5141210823383233782 HTTP/1.1
Host: contextual.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
content-length: 45
content-type: image/gif
set-cookie: visitor-id=3180386733580271000V10; Expires=Tue, 30 Jan 2024 00:04:33 GMT; domain=.media.net; Path=/;
data-rk=5141210823383233782~~3;Expires=Mon, 29 Jan 2024 00:04:33 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=31536000
x-mnet-hl2: E
expires: Mon, 30 Jan 2023 00:04:33 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 30 Jan 2023 00:04:33 GMT
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyMzM4MzIzMzc4Mg==&forward=
302 Found 369 B URL HTTP/2 cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyMzM4MzIzMzc4Mg==&forward=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash ffe1ce8ac295bf85ae0fbb5323f755f4
9384b9bcee1c54bbc8e2cb4fd0538d867acf7725
786299f9abcc2b5294d09ab9c5ef9990ae96207b8fba447c4d533fe2a178f2bd
GET /pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyMzM4MzIzMzc4Mg==&forward= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyMzM4MzIzMzc4Mg==&forward=&google_tc=
date: Mon, 30 Jan 2023 00:04:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 369
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 30-Jan-2023 00:19:33 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 82a65e7a7687217623690ee4f79659df
b389b2458dcef3b66b38bb7577b070ac3a33e31c
42a809cf445fd86b5f2b3db14e79ba7b138e8ec4d4e647f6c5f1260f2284f9a5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 00:04:33 GMT
Last-Modified: Sun, 29 Jan 2023 22:50:37 GMT
Server: ECS (nyb/1D1A)
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: f5LXrR_A3NzaReg71XnpzyZiJFk0eSZEi8uCI-WSzbhCIyba0_k8bQ==
Age: 4436
ocsp.digicert.com/
200 OK 471 B IP
Hash d234f496b541c096e00e63c80d7a62ad
e4e37fe3bc81161b93d2494e5ef826896d8248e7
a39b69a3d3f963e2be2085e3f3ca24f25bbf7e21a672d45a038ab2daa091ece4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5808
Cache-Control: max-age=113948
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:33 GMT
Etag: "63d60cfe-1d7"
Expires: Tue, 31 Jan 2023 07:43:41 GMT
Last-Modified: Sun, 29 Jan 2023 06:06:54 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2030%20Jan%202023%2000%3A04%3A43%20GMT&n=0&b=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&.yp=10095779&f=https%3A%2F%2Fwww.unrefugees.org%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2030%20Jan%202023%2000%3A04%3A43%20GMT&n=0&b=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&.yp=10095779&f=https%3A%2F%2Fwww.unrefugees.org%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Mon%2C%2030%20Jan%202023%2000%3A04%3A43%20GMT&n=0&b=How%20to%20Help%20Refugees%20%E2%80%94%20Aid%2C%20Relief%20and%20Donations%20%7C%20USA%20for%20UNHCR&.yp=10095779&f=https%3A%2F%2Fwww.unrefugees.org%2F&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:33 GMT
expires: Mon, 30 Jan 2023 00:04:33 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBJEJ12MCEGBemSEMxFZbJJ9_grvQ4lkFEgEBAQFb2GPgYwAAAAAA_eMAAA&S=AQAAAvmynnJRaaon9zEXqxtsgLM; Expires=Tue, 30 Jan 2024 06:04:33 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyMzM4MzIzMzc4Mg==&forward=&google_tc=
302 Found 269 B URL HTTP/2 cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyMzM4MzIzMzc4Mg==&forward=&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 2ac1f21e70e438c7e2193d02ee7e9be0
f9a11bb626bad146751fc166f96b91f6aeae7eab
de4a04a623ca095cd229a54edeb3120d9dc94d227198b75cb9a0a69677ed7c85
GET /pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgyMzM4MzIzMzc4Mg==&forward=&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20826429p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
date: Mon, 30 Jan 2023 00:04:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 269
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash b5f5b4d6925248fc5513627cdf20721c
e78e624ac5e8923182a20fdd14b7ff9a517aee33
2ee7c29e2c31431671a8ad8381b521b191c546e2f0e1549da1bd23bf3701ba0f
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 866
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:33 GMT
Last-Modified: Sun, 29 Jan 2023 23:50:07 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
www.facebook.com/tr/?id=363860773806760&ev=PageView&dl=https%3A%2F%2Fwww.unrefugees.org%2F&rl=&if=false&ts=1675037083283&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1675037083277.115522111&eid=ob3_plugin-set_7d96dca142f5f30e82919b1a7e9c91b7902f178af7701f15d5dcd6b2de44cfd5&it=1675037082871&coo=false&exp=b3&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=363860773806760&ev=PageView&dl=https%3A%2F%2Fwww.unrefugees.org%2F&rl=&if=false&ts=1675037083283&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1675037083277.115522111&eid=ob3_plugin-set_7d96dca142f5f30e82919b1a7e9c91b7902f178af7701f15d5dcd6b2de44cfd5&it=1675037082871&coo=false&exp=b3&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=363860773806760&ev=PageView&dl=https%3A%2F%2Fwww.unrefugees.org%2F&rl=&if=false&ts=1675037083283&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1675037083277.115522111&eid=ob3_plugin-set_7d96dca142f5f30e82919b1a7e9c91b7902f178af7701f15d5dcd6b2de44cfd5&it=1675037082871&coo=false&exp=b3&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.unrefugees.org
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin: https://www.unrefugees.org
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 30 Jan 2023 00:04:33 GMT
X-Firefox-Spdy: h2
ib.adnxs.com/setuid?entity=18&code=5141210823383233782
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/setuid?entity=18&code=5141210823383233782
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?entity=18&code=5141210823383233782 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Mon, 30 Jan 2023 00:04:33 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5141210823383233782
AN-X-Request-Uuid: 2df90e92-8fb0-41b8-aaa5-dcea9b13848f
Set-Cookie: uuid2=6384371169433938308; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 30-Apr-2023 00:04:33 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1004.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
p.rfihub.com/cm?pub=24472&in=1
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=24472&in=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=24472&in=1 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 302 Found
Date: Mon, 30 Jan 2023 00:04:33 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0sDA1tTQ3MjM0MjA1NTM3MxbiM9T1yShL9dAt8Y3yqUwCAHcGEb0lAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 24 Feb 2024 00:04:33 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0sDA1tTQ3MjM0MjA1NTM3MxbiM9T1yShL9dAt8Y3yqUwCAHcGEb0lAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_7vFwmtoZm5qYGxuYG5sYWkBAJTL9q4QAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 24 Feb 2024 00:04:33 GMT; Secure; SameSite=None
Location: https://ps.eyeota.net/match?uid=5108559726120556763&bid=omt9pi0
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
dpm.demdex.net/ibs:dpid=1121&dpuuid=5141210823383233782&redir=
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=1121&dpuuid=5141210823383233782&redir=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=1121&dpuuid=5141210823383233782&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-0314701ba.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5141210823383233782&redir=
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=16221321051700786691871634260163853250; Max-Age=15552000; Expires=Sat, 29 Jul 2023 00:04:33 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: E/JNDH2WSU8=
Content-Length: 0
Connection: keep-alive
ocsp.digicert.com/
200 OK 727 B IP
Hash b0d603ecf88c956393f22d047f5de30c
3d3dbbb6b62a4c701116001edf9299e017f3a706
05dc7449118606080683f5dd6d92191327678d7d51a9a0edd260f6e61c95f7e7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3826
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:33 GMT
Last-Modified: Sun, 29 Jan 2023 23:00:47 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 727
x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5141210823383233782
200 OK 43 B URL HTTP/2 x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5141210823383233782
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /e/rocketfuel_sync?na_exid=5141210823383233782 HTTP/1.1
Host: x.dlx.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
expires: Mon, 30 Jan 2023 00:04:33 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 30 Jan 2023 00:04:33 GMT
strict-transport-security: max-age=2628000
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 6.0 kB IP
ASN #203220 Yahoo! UK Services Limited
Hash 1d702ed7806f190885b844829bea8ca8
4b03944b03999036d654f90bcbfe61a36e0c0a56
91236290a9e373f8d6ca33bd4ad916c2ae1bc16194e6df43388a4ecf673e08ed
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: U6MkGA6ZHsM/gyzNAxhpMA2GuasNhw8R1Gc0kPs1/I1dukVMzaiKuEfEPCbdGePBqh/h8AoXD/w=
x-amz-request-id: TXMJ752J5G6AYD5Y
date: Mon, 30 Jan 2023 00:04:32 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 2
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
p.rfihub.com/cm?pub=39342&in=0&userid=30e0b735-f0ab-4632-830a-51acee29dc98%3A1675037073.6557739&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D30e0b735-f0ab-4632-830a-51acee29dc98%253A1675037073.6557739
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=39342&in=0&userid=30e0b735-f0ab-4632-830a-51acee29dc98%3A1675037073.6557739&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D30e0b735-f0ab-4632-830a-51acee29dc98%253A1675037073.6557739
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=39342&in=0&userid=30e0b735-f0ab-4632-830a-51acee29dc98%3A1675037073.6557739&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3D30e0b735-f0ab-4632-830a-51acee29dc98%253A1675037073.6557739 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20826429p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Mon, 30 Jan 2023 00:04:33 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: rud=H4sIAAAAAAAA_-MSNjU0MDcxNrYwMjMyMbQwNzE0MRDiM9RNjC8KDwx0LywtKU4BAHdH9OglAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 24 Feb 2024 00:04:33 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MDcxNrYwMjMyMbQwNzE0MRDiM9RNjC8KDwx0LywtKU4BAHdH9OglAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
euds=H4sIAAAAAAAA_wXB0RWAIAwDwB_XqS8Q21C3AayDOLl33yGisES3F3PZFew2iGne5q7q-ewcdws5KIhnuEvMH06ScXw6AAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_0XIsRGAIBAEwAqMqOOdg_M53m4AsSBDqzV0w32SiIUhut3ow47KYo3o5rnPtUpcM9qZqxwUxL26S4w3bX-G4wOyBEp-SgAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 24 Feb 2024 00:04:33 GMT; Secure; SameSite=None
Location: https://idsync.rlcdn.com/501709.gif?partner_uid=30e0b735-f0ab-4632-830a-51acee29dc98%3A1675037073.6557739
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5141210823383233782
200 OK 43 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5141210823383233782
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /adscores/g.pixel?sid=9212192898&rf=5141210823383233782 HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:34 GMT
content-type: image/gif
content-length: 43
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash d4c6d91277c36923a697e6ef24b19e5f
87f3e8240ec15c1341c2df8f5dd8ea08adec5231
02e92e343ad282001f6268ae88725cde72b71c303dece6b488d3d0a6237a873b
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 818
Cache-Control: max-age=87727
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:34 GMT
Etag: "63d5ba0f-1d7"
Expires: Tue, 31 Jan 2023 00:26:41 GMT
Last-Modified: Sun, 29 Jan 2023 00:13:03 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5141210823383233782
200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5141210823383233782
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D18%26code%3D5141210823383233782 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20826429p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Mon, 30 Jan 2023 00:04:33 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 2752a64e-d784-4cb3-84b1-5e8e9b213191
Set-Cookie: anj=dTM7k!M4/YErk#WF']wIg2GTzktIf1!]tbPl1MNu::wpAk`W=ii+fWPdX>FcdEKm5B<V_CW>#woVkq*^9Rkfl9RrTq*ENIx; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 30-Apr-2023 00:04:33 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1004.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 813ceb91c2cf40e014cbbbcfe89986d1
b546a22c3b9b860232dbb0a6629347ed8cb0fcef
8d88bcfbe151bc3ea1e73ba37a5784d41447c8b33868c8bad183a86ec9e3a965
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 30 Jan 2023 00:04:33 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 29 Jan 2023 03:21:15 GMT
Expires: Mon, 30 Jan 2023 03:21:15 GMT
ETag: "b546a22c3b9b860232dbb0a6629347ed8cb0fcef"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
rules.quantcount.com/rules-p-SLcBYqRUU3yLq.js
200 OK 898 B URL HTTP/2 rules.quantcount.com/rules-p-SLcBYqRUU3yLq.js
IP
Hash 5e397cd1643c986f7b722e3384cc597a
1dbc1a30983c88a2308a63b7b016f42c4de6af69
723f629856ff55f5d9bf478b393b60941319f44e8a7b841d0f12af9c35bf889b
GET /rules-p-SLcBYqRUU3yLq.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 13 Oct 2022 22:22:26 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
date: Sun, 29 Jan 2023 23:55:57 GMT
cache-control: max-age=3600
etag: W/"291bda9609975bc4fbca3a725bc18ab7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s5ulC6TzJerz77gJDOQ46GUfgKYANuOOgwMfT1rVTeJBvhXN0vGHFQ==
age: 1081
X-Firefox-Spdy: h2
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5141210823383233782&redir=
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5141210823383233782&redir=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5141210823383233782&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20826429p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-2-v045-0b398da67.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: gLNKVUJySWs=
Content-Length: 59
Connection: keep-alive
sync.search.spotxchange.com/partner?adv_id=7180&uid=5141210823383233782&img=1
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5141210823383233782&img=1
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=7180&uid=5141210823383233782&img=1 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 30 Jan 2023 00:04:34 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=ad579a02-a031-11ed-bb07-14d534130106; expires=Mon, 27-Feb-2023 00:04:34 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=7180&uid=5141210823383233782&img=1&__user_check__=1&sync_id=ad579a66-a031-11ed-bb07-14d534130106
X-fe: 57
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 799143249f77ca1827308acbb8dcfee4
0fee8738f4f30929a293bbaf3a3a943573cc47af
a8e14a93a08fc9f741cf3f45cbdf6c194870cbe17ff9904caed7747dedbaa754
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 30 Jan 2023 00:04:33 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 29 Jan 2023 21:26:40 GMT
Expires: Mon, 30 Jan 2023 21:26:40 GMT
ETag: "0fee8738f4f30929a293bbaf3a3a943573cc47af"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5141210823383233782&forward=
302 Found 0 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5141210823383233782&forward=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=57&external_user_id=5141210823383233782&forward= HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Mon, 30 Jan 2023 00:04:34 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /rum?cm_dsp_id=57&external_user_id=5141210823383233782&forward=&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=Y9cJkoaMbOOlwa9mw.kYCwAA; Path=/; Domain=casalemedia.com; Expires=Tue, 30 Jan 2024 00:04:34 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=703; Path=/; Domain=casalemedia.com; Expires=Sun, 30 Apr 2023 00:04:34 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=703; Path=/; Domain=casalemedia.com; Expires=Sun, 30 Apr 2023 00:04:34 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://pay.google.com/
Origin: https://pay.google.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-origin: https://pay.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Mon, 30 Jan 2023 00:04:34 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+390; expires=Wed, 29-Jan-2025 00:04:34 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 30 Jan 2023 00:04:34 GMT
cache-control: private
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://pay.google.com/
Origin: https://pay.google.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pay.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Mon, 30 Jan 2023 00:04:34 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+518; expires=Wed, 29-Jan-2025 00:04:34 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 30 Jan 2023 00:04:34 GMT
cache-control: private
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://pay.google.com/
Origin: https://pay.google.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pay.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Mon, 30 Jan 2023 00:04:34 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+416; expires=Wed, 29-Jan-2025 00:04:34 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 30 Jan 2023 00:04:34 GMT
cache-control: private
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 8ef1dbe04ff3834735b0659e7ae82c62
56d86283c8861f679162e92c70bbea59f819b8dc
a41623bee3b144f94362b7351bf88236e4291f113068361be33209f550fb3373
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 00:04:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 01:42:55 GMT
Expires: Sun, 05 Feb 2023 01:42:54 GMT
Etag: "56d86283c8861f679162e92c70bbea59f819b8dc"
Cache-Control: max-age=523699,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7915f36f9de5b50c-OSL
sync-tm.everesttech.net/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D
302 Found 0 B URL HTTP/2 sync-tm.everesttech.net/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: CP="NOI DSP COR LAW PSAo PSDo IVAo IVDo OUR BUS UNI DEM"
access-control-allow-origin: *
set-cookie: everest_g_v2=g_surferid~Y9cJkgADLhuQbwA_; Path=/; Domain=.everesttech.net; Expires=Tue, 30-Jan-2024 00:04:34 GMT; Max-Age=31536000
location: https://sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y9cJkgADLhuQbwA_
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Mon, 30 Jan 2023 00:04:34 GMT
via: 1.1 varnish
x-served-by: cache-bma1679-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675037074.003238,VS0,VE92
cache-control: no-cache
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://pay.google.com/
Origin: https://pay.google.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-origin: https://pay.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Mon, 30 Jan 2023 00:04:34 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+946; expires=Wed, 29-Jan-2025 00:04:34 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 30 Jan 2023 00:04:34 GMT
cache-control: private
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3556e7d3a89fbee31c4f13c9f490fb6a
59f7004c73d982a0eb7beb37f41a7f16209d7ce3
17e4c16273df1791d8c30da97d77ad75696474c2345530f0fc06a48d9069fd2a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3390
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:34 GMT
Last-Modified: Sun, 29 Jan 2023 23:08:04 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
sync.search.spotxchange.com/partner?adv_id=7180&uid=5141210823383233782&img=1&__user_check__=1&sync_id=ad579a66-a031-11ed-bb07-14d534130106
200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5141210823383233782&img=1&__user_check__=1&sync_id=ad579a66-a031-11ed-bb07-14d534130106
IP
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=7180&uid=5141210823383233782&img=1&__user_check__=1&sync_id=ad579a66-a031-11ed-bb07-14d534130106 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20826429p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Jan 2023 00:04:34 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=ad5f01b0-a031-11ed-91cd-153cf9b00206; expires=Mon, 27-Feb-2023 00:04:34 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 122
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
play.google.com/log?format=json&hasfast=true
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay.google.com/
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1517
Origin: https://pay.google.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-origin: https://pay.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Mon, 30 Jan 2023 00:04:34 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+761; expires=Wed, 29-Jan-2025 00:04:34 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 30 Jan 2023 00:04:34 GMT
X-Firefox-Spdy: h2
e1.emxdgt.com/put?d=d16&uid=5141210823383233782
204 No Content 0 B URL HTTP/2 e1.emxdgt.com/put?d=d16&uid=5141210823383233782
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /put?d=d16&uid=5141210823383233782 HTTP/1.1
Host: e1.emxdgt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html
date: Mon, 30 Jan 2023 00:04:33 GMT
content-length: 0
X-Firefox-Spdy: h2
sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y9cJkgADLhuQbwA_
200 OK 85 B URL HTTP/2 sync-tm.everesttech.net/ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y9cJkgADLhuQbwA_
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 5bec6606b8392065f9da9898ca6f7b14
73ac5b01b5e3293fb792179626e7f8369cdb944d
acccc501aa6afa3cfac15e8ddccf1561deed2ed08c2f7d652abbdbe9aa71609a
GET /ct/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D21653%26userid%3D%24%7BTM_USER_ID%7D&_test=Y9cJkgADLhuQbwA_ HTTP/1.1
Host: sync-tm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20826429p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: Jetty(9.4.35.v20201120)
accept-ranges: bytes
date: Mon, 30 Jan 2023 00:04:34 GMT
via: 1.1 varnish
age: 101
x-served-by: cache-bma1679-BMA
x-cache: HIT
x-cache-hits: 108
x-timer: S1675037074.117897,VS0,VE0
cache-control: no-cache
pragma: no-cache
content-length: 85
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://pay.google.com/
Origin: https://pay.google.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-origin: https://pay.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Mon, 30 Jan 2023 00:04:34 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+774; expires=Wed, 29-Jan-2025 00:04:34 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 30 Jan 2023 00:04:34 GMT
cache-control: private
X-Firefox-Spdy: h2
d6tizftlrpuof.cloudfront.net/themes/production/unhcr-button-ca8fba580979f02c2694fa49ed8ef52a.png
200 OK 1.8 kB URL HTTP/1.1 d6tizftlrpuof.cloudfront.net/themes/production/unhcr-button-ca8fba580979f02c2694fa49ed8ef52a.png
IP
File type PNG image data, 90 x 280, 8-bit colormap, non-interlaced\012- data
Hash ca8fba580979f02c2694fa49ed8ef52a
eb61670ff48ce4023d5b96b5c14aeaff8f511fd6
90b232dae4b3477832ee21493d7558ace8cf6e9b8bc97f9c552f301da013f1da
GET /themes/production/unhcr-button-ca8fba580979f02c2694fa49ed8ef52a.png HTTP/1.1
Host: d6tizftlrpuof.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1768
Connection: keep-alive
Date: Sat, 07 May 2022 16:53:39 GMT
Last-Modified: Tue, 05 Feb 2019 19:50:28 GMT
ETag: "ca8fba580979f02c2694fa49ed8ef52a"
Cache-Control: max-age=315360000, no-transform, public
x-amz-version-id: .SrcatzoiMfoqGSBwRAbfAVYaagZkb9i
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: a6mNPSXj88cCt37suHrx6903q4wcSHYea7qtzmqlPTyBT0Zhqtlx6g==
Age: 23094656
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://pay.google.com/
Origin: https://pay.google.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-origin: https://pay.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Mon, 30 Jan 2023 00:04:34 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+837; expires=Wed, 29-Jan-2025 00:04:34 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 30 Jan 2023 00:04:34 GMT
cache-control: private
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash b5f5b4d6925248fc5513627cdf20721c
e78e624ac5e8923182a20fdd14b7ff9a517aee33
2ee7c29e2c31431671a8ad8381b521b191c546e2f0e1549da1bd23bf3701ba0f
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 867
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:34 GMT
Last-Modified: Sun, 29 Jan 2023 23:50:07 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay.google.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 678
Origin: https://pay.google.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pay.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Mon, 30 Jan 2023 00:04:34 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+311; expires=Wed, 29-Jan-2025 00:04:34 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 30 Jan 2023 00:04:34 GMT
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay.google.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 673
Origin: https://pay.google.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pay.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Mon, 30 Jan 2023 00:04:34 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+550; expires=Wed, 29-Jan-2025 00:04:34 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 30 Jan 2023 00:04:34 GMT
X-Firefox-Spdy: h2
idsync.rlcdn.com/360947.gif?partner_uid=5141210823383233782
200 OK 42 B URL HTTP/2 idsync.rlcdn.com/360947.gif?partner_uid=5141210823383233782
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /360947.gif?partner_uid=5141210823383233782 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: image/gif
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: rlas3=8vofv62Prv1E/Zse+V1yllJv9c3uFJSJZ6dShklB5bc=; Path=/; Domain=rlcdn.com; Expires=Tue, 30 Jan 2024 00:04:34 GMT; Secure; SameSite=None
pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Fri, 31 Mar 2023 00:04:34 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Mon, 30 Jan 2023 00:04:34 GMT
content-length: 42
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
idsync.rlcdn.com/501709.gif?partner_uid=30e0b735-f0ab-4632-830a-51acee29dc98%3A1675037073.6557739
307 Temporary Redirect 0 B URL HTTP/2 idsync.rlcdn.com/501709.gif?partner_uid=30e0b735-f0ab-4632-830a-51acee29dc98%3A1675037073.6557739
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /501709.gif?partner_uid=30e0b735-f0ab-4632-830a-51acee29dc98%3A1675037073.6557739 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20826429p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 307 Temporary Redirect
cache-control: no-cache, no-store
location: https://idsync.rlcdn.com/1000.gif?memo=CM3PHhJBCj0IARAFGjczMGUwYjczNS1mMGFiLTQ2MzItODMwYS01MWFjZWUyOWRjOTg6MTY3NTAzNzA3My42NTU3NzM5EAAaDQiSk9yeBhIFCOgHEABCAEoA
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Fri, 31 Mar 2023 00:04:34 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Mon, 30 Jan 2023 00:04:34 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5141210823383233782
204 No Content 0 B URL HTTP/2 beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5141210823383233782
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch.gif?partner_id=rfuel&partner_user_id=5141210823383233782 HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 30 Jan 2023 00:04:34 GMT
set-cookie: _kuid_=PWTugGKz; Expires=Sat, 29-Jul-23 00:04:34 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n007-dub-prod.krxd.net
x-request-time: D=29 t=1675037074
X-Firefox-Spdy: h2
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5141210823383233782&forward=&C=1
200 OK 43 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5141210823383233782&forward=&C=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=57&external_user_id=5141210823383233782&forward=&C=1 HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20826429p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 00:04:34 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
Pragma: no-cache
Content-Length: 43
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay.google.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 677
Origin: https://pay.google.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pay.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Mon, 30 Jan 2023 00:04:34 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+454; expires=Wed, 29-Jan-2025 00:04:34 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 30 Jan 2023 00:04:34 GMT
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay.google.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 673
Origin: https://pay.google.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pay.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Mon, 30 Jan 2023 00:04:34 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+297; expires=Wed, 29-Jan-2025 00:04:34 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 30 Jan 2023 00:04:34 GMT
X-Firefox-Spdy: h2
a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
200 OK 42 B URL HTTP/1.1 a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash accba0b69f352b4c9440f05891b015c5
9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
GET /cm?pub=445&in=0&forward=&google_error=3 HTTP/1.1
Host: a.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20826429p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 00:04:34 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: ruds=H4sIAAAAAAAA_-MSNjU0NjY2sjQ1MjEwNTUwNjE1tBDiM9QNjwwwKtF1LHU1MDUEAO7mLT0lAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
eud=H4sIAAAAAAAA_-NicjUO4jU0Mzc1MDY3MDcxNLEAADeTYHoTAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 24 Feb 2024 00:04:34 GMT; Secure; SameSite=None
euds=H4sIAAAAAAAA_-NicjUGAEAxo38EAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0NjY2sjQ1MjEwNTUwNjE1tBDiM9QNjwwwKtF1LHU1MDUEAO7mLT0lAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 24 Feb 2024 00:04:34 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: image/gif
Content-Length: 42
Server: Jetty(9.3.29.v20201019)
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay.google.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 707
Origin: https://pay.google.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pay.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Mon, 30 Jan 2023 00:04:34 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+432; expires=Wed, 29-Jan-2025 00:04:34 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 30 Jan 2023 00:04:34 GMT
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 472 B IP
Hash fb0c2f49d8e08a71cb4230295f8a51db
36f4811435eb46f5e03e8e7ba5ad987f8f4f63a0
6bd7ae5e8ad67dabf77278542ff528f8cf2bceb1bbad102fb5f5985ae01523cd
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 00:04:34 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 21:01:06 GMT
Expires: Sat, 04 Feb 2023 21:01:05 GMT
Etag: "36f4811435eb46f5e03e8e7ba5ad987f8f4f63a0"
Cache-Control: max-age=600879,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 547
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7915f3718887b4f9-OSL
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay.google.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 671
Origin: https://pay.google.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://pay.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Mon, 30 Jan 2023 00:04:34 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+038; expires=Wed, 29-Jan-2025 00:04:34 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 30 Jan 2023 00:04:34 GMT
X-Firefox-Spdy: h2
idsync.rlcdn.com/1000.gif?memo=CM3PHhJBCj0IARAFGjczMGUwYjczNS1mMGFiLTQ2MzItODMwYS01MWFjZWUyOWRjOTg6MTY3NTAzNzA3My42NTU3NzM5EAAaDQiSk9yeBhIFCOgHEABCAEoA
307 Temporary Redirect 0 B URL HTTP/2 idsync.rlcdn.com/1000.gif?memo=CM3PHhJBCj0IARAFGjczMGUwYjczNS1mMGFiLTQ2MzItODMwYS01MWFjZWUyOWRjOTg6MTY3NTAzNzA3My42NTU3NzM5EAAaDQiSk9yeBhIFCOgHEABCAEoA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1000.gif?memo=CM3PHhJBCj0IARAFGjczMGUwYjczNS1mMGFiLTQ2MzItODMwYS01MWFjZWUyOWRjOTg6MTY3NTAzNzA3My42NTU3NzM5EAAaDQiSk9yeBhIFCOgHEABCAEoA HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20826429p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 307 Temporary Redirect
cache-control: no-cache, no-store
location: https://cm.g.doubleclick.net/pixel?google_nid=epsilon&google_cm
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: pxrc=CJKT3J4GEgUI6AcQABIGCLrqARAA; Path=/; Domain=rlcdn.com; Expires=Fri, 31 Mar 2023 00:04:34 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Mon, 30 Jan 2023 00:04:34 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ps.eyeota.net/match?uid=5108559726120556763&bid=omt9pi0
200 OK 0 B URL HTTP/1.1 ps.eyeota.net/match?uid=5108559726120556763&bid=omt9pi0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?uid=5108559726120556763&bid=omt9pi0 HTTP/1.1
Host: ps.eyeota.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20826429p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Set-Cookie: SERVERID=23988~DM; Domain=eyeota.net; Path=/; Expires=Mon, 30 Jan 2023 00:14:34 GMT; Secure; SameSite=None;
P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml"
Content-Length: 0
Date: Mon, 30 Jan 2023 00:04:34 GMT
ocsp.sectigo.com/
200 OK 471 B IP
Hash 8ef1dbe04ff3834735b0659e7ae82c62
56d86283c8861f679162e92c70bbea59f819b8dc
a41623bee3b144f94362b7351bf88236e4291f113068361be33209f550fb3373
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 00:04:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 01:42:55 GMT
Expires: Sun, 05 Feb 2023 01:42:54 GMT
Etag: "56d86283c8861f679162e92c70bbea59f819b8dc"
Cache-Control: max-age=523699,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7915f371bf54b50c-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f36fe5538c88c41b546190f7299c46db
4711c61e57cb94ca2cc2021dc3e15dcbf5a94d53
41bdced4c69efa13d4adbdd0e8421f10f5c704f8824399933b0a78aa2f85a8c2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=153597
Date: Mon, 30 Jan 2023 00:04:34 GMT
Etag: "63d6a927-1d7"
Expires: Tue, 31 Jan 2023 18:44:31 GMT
Last-Modified: Sun, 29 Jan 2023 17:13:11 GMT
Server: ECS (nyb/1D08)
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oUvwZa98FX5Uw3MnP29YYAu_m05dhfH1pwtxEtslj9viHdS3IP7AEg==
Age: 5480
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5c00a6b71849e1f63887d38333830003
274723ffd4a062e1997a213ceeeab8a56ac83141
5e15ea6950fd4aa51af37519ac391c2c95cfd74ded6ac6e35432ccf68c70cb23
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 00:04:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 01:56:49 GMT
Expires: Sat, 04 Feb 2023 01:56:48 GMT
Etag: "274723ffd4a062e1997a213ceeeab8a56ac83141"
Cache-Control: max-age=438133,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7915f3711eb81bfa-OSL
x.bidswitch.net/sync?dsp_id=119&user_id=5141210823383233782&expires=30
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=119&user_id=5141210823383233782&expires=30
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=119&user_id=5141210823383233782&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 30 Jan 2023 00:04:34 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5141210823383233782&expires=30
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=f77ddff4-3cee-4523-a082-c1fa98a221d4; path=/; expires=Tue, 30-Jan-2024 00:04:34 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675037074; path=/; expires=Tue, 30-Jan-2024 00:04:34 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1675037074; path=/; expires=Tue, 30-Jan-2024 00:04:34 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675037074; path=/; expires=Tue, 30-Jan-2024 00:04:34 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5141210823383233782&expires=30
200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5141210823383233782&expires=30
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=119&user_id=5141210823383233782&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20826429p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:34 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8725287398de72ea6c7bb7035f7491c
dfe1433561a2bb63e4bd2ebc3d60cdef27a3228f
4e69d00cd218073f8d2e10da568491bcd69583247cb14c39cf8db25edcc8146f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4E69D00CD218073F8D2E10DA568491BCD69583247CB14C39CF8DB25EDCC8146F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21595
Expires: Mon, 30 Jan 2023 06:04:29 GMT
Date: Mon, 30 Jan 2023 00:04:34 GMT
Connection: keep-alive
www.sandbox.paypal.com/xoplatform/logger/api/logger
200 OK 14 kB URL HTTP/2 www.sandbox.paypal.com/xoplatform/logger/api/logger
IP
Hash 6018852213971f780ab464a5dd063e88
aa484581d19f5c207dd2f23b250aa40b04d1d20e
eac7e5216bf104a086ac9e97eb0f0081102638fad201527fbe3b35b874a7dab9
OPTIONS /xoplatform/logger/api/logger HTTP/1.1
Host: www.sandbox.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.unrefugees.org/
Origin: https://www.unrefugees.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.unrefugees.org
cache-control: max-age=0, no-cache, no-store, must-revalidate
paypal-debug-id: 2451f1861569f
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Mon, 30 Jan 2023 08:50:30 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.cn; Path=/; Expires=Tue, 30 Jan 2024 00:04:34 GMT; Secure
x-pp-s=eyJ0IjoiMTY3NTAzNzA3NDI3MSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.cn; Path=/; HttpOnly; Secure
tsrce=loggernodeweb; Domain=.paypal.com; Path=/; Expires=Thu, 02 Feb 2023 00:04:34 GMT; HttpOnly; Secure; SameSite=None
ts=vreXpYrS%3D1769731474%26vteXpYrS%3D1675038874%26vr%3Dfffd634f1850a6022c9d2fdef9a009cc%26vt%3Dfffd634f1850a6022c9d2fdef9a009cb%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Thu, 29 Jan 2026 00:04:34 GMT; HttpOnly; Secure
ts_c=vr%3Dfffd634f1850a6022c9d2fdef9a009cc%26vt%3Dfffd634f1850a6022c9d2fdef9a009cb; Path=/; Domain=paypal.com; Expires=Thu, 29 Jan 2026 00:04:34 GMT; Secure
x-cdn=fastly:BMA; Domain=paypal.com; Path=/; Secure
x-content-type-options: nosniff
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Mon, 30 Jan 2023 00:04:34 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-fra-eddf8230121-FRA, cache-bma1658-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1675037074.172918,VS0,VE179
vary: accept-encoding
server-timing: content-encoding;desc=br
X-Firefox-Spdy: h2
lyibja.unrefugees.org/events
200 OK 0 B URL HTTP/2 lyibja.unrefugees.org/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /events HTTP/1.1
Host: lyibja.unrefugees.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.unrefugees.org/
Content-Type: text/plain;charset=UTF-8
Content-Length: 327
Origin: https://www.unrefugees.org
Connection: keep-alive
Cookie: _gcl_au=1.1.824047590.1675037081; _ga_P9YZZV758Y=GS1.1.1675037081.1.0.1675037081.60.0.0; _ga=GA1.2.1461089143.1675037081; _gid=GA1.2.1357195934.1675037083; _dc_gtm_UA-3754388-9UA-3754388-9=1; _dc_gtm_UA-1473340-18=1; _dc_gtm_UA-3754388-9=1; _uetsid=b2a41ab0a03111edaf21193eb7edf3b6; _uetvid=b2a40de0a03111ed98f0f5df60c21e27; __qca=P0-2085890685-1675037082858; _fbp=fb.1.1675037083277.115522111
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:34 GMT
content-length: 0
vary: origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.unrefugees.org
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cf109322ef7fde96caf40f6195ee071b
d7f5dd63a402c4fe3c483274a893f44b6b76befb
56fa47af9f2b40d219c9944ecf12984cefbc26bbd8f77d95f8fd4580bf8e606f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2344
Cache-Control: max-age=170957
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 00:04:34 GMT
Etag: "63d6f937-1d7"
Expires: Tue, 31 Jan 2023 23:33:51 GMT
Last-Modified: Sun, 29 Jan 2023 22:54:47 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
bam.nr-data.net/1/cf888b8b66?a=357730915&v=1216.487a282&to=ZFNSZUsADUJYWxFRC10ZfWd6TjFUV1wASilFVXNeVxURXlVUAEpLfllURFUEM1BeXQ%3D%3D&rst=5333&ck=1&ref=https://www.unrefugees.org/&ap=616&be=2002&fe=4723&dc=3264&perf=%7B%22timing%22:%7B%22of%22:1675037078745,%22n%22:0,%22f%22:421,%22dn%22:425,%22dne%22:425,%22c%22:425,%22s%22:605,%22ce%22:1001,%22rq%22:1002,%22rp%22:1971,%22rpe%22:1973,%22dl%22:1986,%22di%22:3261,%22ds%22:3263,%22de%22:3268,%22dc%22:4722,%22l%22:4722,%22le%22:4745%7D,%22navigation%22:%7B%7D%7D&fcp=2757&jsonp=NREUM.setToken
200 OK 77 B URL HTTP/1.1 bam.nr-data.net/1/cf888b8b66?a=357730915&v=1216.487a282&to=ZFNSZUsADUJYWxFRC10ZfWd6TjFUV1wASilFVXNeVxURXlVUAEpLfllURFUEM1BeXQ%3D%3D&rst=5333&ck=1&ref=https://www.unrefugees.org/&ap=616&be=2002&fe=4723&dc=3264&perf=%7B%22timing%22:%7B%22of%22:1675037078745,%22n%22:0,%22f%22:421,%22dn%22:425,%22dne%22:425,%22c%22:425,%22s%22:605,%22ce%22:1001,%22rq%22:1002,%22rp%22:1971,%22rpe%22:1973,%22dl%22:1986,%22di%22:3261,%22ds%22:3263,%22de%22:3268,%22dc%22:4722,%22l%22:4722,%22le%22:4745%7D,%22navigation%22:%7B%7D%7D&fcp=2757&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash f1442f5831dbbe0210da2d7a4180d6b8
2ade23c6c7a001c66f0c0a9a101ec152747b434e
c6acf9fb2ecc1b144c51bd0337bbf1c26db3df2f649ac2da5c56db20d93eb3ef
GET /1/cf888b8b66?a=357730915&v=1216.487a282&to=ZFNSZUsADUJYWxFRC10ZfWd6TjFUV1wASilFVXNeVxURXlVUAEpLfllURFUEM1BeXQ%3D%3D&rst=5333&ck=1&ref=https://www.unrefugees.org/&ap=616&be=2002&fe=4723&dc=3264&perf=%7B%22timing%22:%7B%22of%22:1675037078745,%22n%22:0,%22f%22:421,%22dn%22:425,%22dne%22:425,%22c%22:425,%22s%22:605,%22ce%22:1001,%22rq%22:1002,%22rp%22:1971,%22rpe%22:1973,%22dl%22:1986,%22di%22:3261,%22ds%22:3263,%22de%22:3268,%22dc%22:4722,%22l%22:4722,%22le%22:4745%7D,%22navigation%22:%7B%7D%7D&fcp=2757&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 00:04:35 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 7915f374fb900b49-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=36263304582a0838; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6dee606ca43f3e0f5dcb9ec8229e7bc5
3a3e2b914481f6d6775d8e136a5636bd2702cb22
cd17661f7dc37ba33e2762b3aa210e9c8eeeda229eb84adea85bb9239c6a4e20
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CD17661F7DC37BA33E2762B3AA210E9C8EEEDA229EB84ADEA85BB9239C6A4E20"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13686
Expires: Mon, 30 Jan 2023 03:52:42 GMT
Date: Mon, 30 Jan 2023 00:04:36 GMT
Connection: keep-alive
r.logrocket.io/i?a=0o0tmf%2Fdonation-form-review&r=5-0f2299af-c1ff-4cb0-8196-c7eb4e21e007&t=5252aaaf-99ec-4568-98b1-1a80c15f833f&s=0&rs=0%2Cu&u=728c0c2c-3a77-4612-9418-bfe51e196de7
201 Created 146 B URL HTTP/2 r.logrocket.io/i?a=0o0tmf%2Fdonation-form-review&r=5-0f2299af-c1ff-4cb0-8196-c7eb4e21e007&t=5252aaaf-99ec-4568-98b1-1a80c15f833f&s=0&rs=0%2Cu&u=728c0c2c-3a77-4612-9418-bfe51e196de7
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ceef0da5dbc9f034abda0a56a1cd9213
21912efd2b8cf95da5d3e7eed9f83d3276462101
ab7a476aa34b4ff99a57eb42693b4f8b83c1d27f9aebfdee48c835c69bedb7b4
POST /i?a=0o0tmf%2Fdonation-form-review&r=5-0f2299af-c1ff-4cb0-8196-c7eb4e21e007&t=5252aaaf-99ec-4568-98b1-1a80c15f833f&s=0&rs=0%2Cu&u=728c0c2c-3a77-4612-9418-bfe51e196de7 HTTP/1.1
Host: r.logrocket.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 54470
Origin: https://www.unrefugees.org
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 201 Created
date: Mon, 30 Jan 2023 00:04:36 GMT
content-type: application/json; charset=utf-8
content-length: 146
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
etag: W/"92-IZEu/SuM+V2l0+fu2fg9MnZGIQE"
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,X-Csrftoken,If-Modified-Since,Cache-Control,Content-Type,Authorization,Accept,Origin,X-Logrocket-Url,X-Logrocket-Ignore,X-Logrocket-Secret,X-LogRocket-ClickHouse-Override,X-LogRocket-ClickHouse-Enabled-Queries
access-control-max-age: 1728000
X-Firefox-Spdy: h2
www.sandbox.paypal.com/xoplatform/logger/api/logger
200 OK 0 B URL HTTP/2 www.sandbox.paypal.com/xoplatform/logger/api/logger
IP
POST /xoplatform/logger/api/logger HTTP/1.1
Host: www.sandbox.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1487
Origin: https://www.unrefugees.org
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://www.unrefugees.org
cache-control: max-age=0, no-cache, no-store, must-revalidate
etag: W/W/"3e9-nJ1zfUw4aWfyURsRJ2srBCnEAvc"
paypal-debug-id: f5d55ada1a8db
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.cn; Path=/; Expires=Tue, 30 Jan 2024 00:04:34 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Mon, 30 Jan 2023 08:50:30 GMT; HttpOnly; Secure
tsrce=loggernodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Thu, 02 Feb 2023 00:04:33 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY3NTAzNzA3NDQ2MyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.cn; Path=/; HttpOnly; Secure
ts=vreXpYrS%3D1769731474%26vteXpYrS%3D1675038874%26vr%3Dfffd640b1850a6022c62cc87f99484b6%26vt%3Dfffd640b1850a6022c62cc87f99484b5%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Thu, 29 Jan 2026 00:04:34 GMT; HttpOnly; Secure
ts_c=vr%3Dfffd640b1850a6022c62cc87f99484b6%26vt%3Dfffd640b1850a6022c62cc87f99484b5; Path=/; Domain=paypal.com; Expires=Thu, 29 Jan 2026 00:04:34 GMT; Secure
x-cdn=fastly:BMA; Domain=paypal.com; Path=/; Secure
x-content-type-options: nosniff
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Mon, 30 Jan 2023 00:04:34 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-fra-eddf8230106-FRA, cache-bma1658-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1675037074.364526,VS0,VE178
vary: Accept-Encoding
server-timing: content-encoding;desc=br
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-XT4L
200 OK 0 B URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-XT4L
IP
GET /gtm.js?id=GTM-XT4L HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 30 Jan 2023 00:04:31 GMT
expires: Mon, 30 Jan 2023 00:04:31 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 99183
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
partners.tremorhub.com/sync?UIRF=5141210823383233782&r=SpZEjX96J6Ap
200 OK 0 B URL HTTP/2 partners.tremorhub.com/sync?UIRF=5141210823383233782&r=SpZEjX96J6Ap
IP
GET /sync?UIRF=5141210823383233782&r=SpZEjX96J6Ap HTTP/1.1
Host: partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20826429p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:34 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
cdn.plyr.io/3.5.2/plyr.js
200 OK 0 B URL HTTP/2 cdn.plyr.io/3.5.2/plyr.js
IP
GET /3.5.2/plyr.js HTTP/1.1
Host: cdn.plyr.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-type: application/javascript; charset=utf-8
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=113855
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Range, Date, Cache-Control, Content-Type, Accept, Origin, Accept
etag: W/"26d009457000af80d7306229fc132b15"
last-modified: Sun, 24 Feb 2019 01:08:29 GMT
vary: Accept-Encoding
via: 1.1 varnish, 1.1 varnish
x-amz-id-2: g5Zw5juyF5+eWCAAD8VCO8u/YQH9aXFTFpTAcM9yNOU1XdiUecNLGL6yZDyeChKbFcrfqBoerr8=
x-amz-request-id: 1SZM2ZPSPZWPZDBV
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-served-by: cache-iad-kjyo7100169-IAD, cache-yyz4538-YYZ
x-timer: S1673325104.125221,VS0,VE20
cf-cache-status: HIT
age: 837794
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m8erTTJ4eJ4g%2BQ9D08hDzwVEwSCx%2FoK2kWf2fzpZ0q8hnCdPlH%2BL1tjYtDL7a%2BXZxa%2BcwcAP3%2BmUBaQXyXeqP%2B6sgFo645X44NsfzXs7rOrrdenWKRHSZTVpAeTD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7915f3603b4fb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.tp88trk.com/scripts/sdk/everflow.js
200 OK 0 B URL HTTP/2 www.tp88trk.com/scripts/sdk/everflow.js
IP
GET /scripts/sdk/everflow.js HTTP/1.1
Host: www.tp88trk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 00:04:32 GMT
content-type: text/javascript
cache-control: max-age=14400
vary: Origin
x-eflow-request-id: 4a0775d5-f91a-4eb1-8df7-0d828fe6ad49
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pay.google.com/gp/p/js/pay.js
200 OK 0 B URL HTTP/2 pay.google.com/gp/p/js/pay.js
IP
GET /gp/p/js/pay.js HTTP/1.1
Host: pay.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
expires: Mon, 30 Jan 2023 00:04:33 GMT
date: Mon, 30 Jan 2023 00:04:33 GMT
cache-control: private, max-age=600
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
strict-transport-security: max-age=31536000
content-security-policy: require-trusted-types-for 'script';report-uri /_/InstantbuyFrontendHttp/cspreport, script-src 'nonce-uALXGqltf2Bk0dCiGz-AWA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/InstantbuyFrontendHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/InstantbuyFrontendHttp/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=511=mfuLnjzBJHLmrXd47t-9Vxi7F71dE0yFaFo5qE4DsS_-FFOAGxBKooDweEVjortu5BhFMAv21yk4K4a-ncqr2lQULe9aN-CFq8NqkrXUSaQ98Dzb5_LMuTliC-7JpjGmBl6nf6fUbAAVZhtZNLntNwbMf4ENAu9wDzLS3XRe2cA; expires=Tue, 01-Aug-2023 00:04:33 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.tfaforms.com/js/iframe_message_helper_internal.js?v=2
200 OK 0 B URL HTTP/2 www.tfaforms.com/js/iframe_message_helper_internal.js?v=2
IP
GET /js/iframe_message_helper_internal.js?v=2 HTTP/1.1
Host: www.tfaforms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-type: application/javascript
set-cookie: AWSALBTG=8QLeg4x+xx5SZiurU7v2e0SN35CvDxYOdL+s28S3cAkPuo4hA+vBHB1rYP3VHfSHfdF9WDZEMJ8ZUz/qNpoM3gxuHN3MZkHLmtsIvNFd7FCPdATCdIjSaFDerJqTBWA2lqKtGay5bSrfCzMF1P9+d1wXhgfaZ0IYvTbX0HMaS9+P; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBTGCORS=8QLeg4x+xx5SZiurU7v2e0SN35CvDxYOdL+s28S3cAkPuo4hA+vBHB1rYP3VHfSHfdF9WDZEMJ8ZUz/qNpoM3gxuHN3MZkHLmtsIvNFd7FCPdATCdIjSaFDerJqTBWA2lqKtGay5bSrfCzMF1P9+d1wXhgfaZ0IYvTbX0HMaS9+P; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
AWSALB=04J7OuhTcm6dRnm1rBn5lo5c48iipV+aw0pH9rTebLh/FMvL9gD8m2XMDENIEhqobkLYGxXTp8GruIM2ZSmsj6Y463QbhsZWtyIkry+er9dcDNtZjpaDJlCOTq2C; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBCORS=04J7OuhTcm6dRnm1rBn5lo5c48iipV+aw0pH9rTebLh/FMvL9gD8m2XMDENIEhqobkLYGxXTp8GruIM2ZSmsj6Y463QbhsZWtyIkry+er9dcDNtZjpaDJlCOTq2C; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
server: nginx
last-modified: Wed, 25 Jan 2023 00:11:15 GMT
etag: W/"63d073a3-531d"
x-fa-app: ecs-145-68
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
static-na.payments-amazon.com/checkout.js
200 OK 0 B URL HTTP/2 static-na.payments-amazon.com/checkout.js
IP
GET /checkout.js HTTP/1.1
Host: static-na.payments-amazon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 15 Dec 2022 07:34:15 GMT
x-amz-version-id: xlb81hzJLNo3eishFzB.H8Ch4xacHxWJ
server: AmazonS3
content-encoding: gzip
date: Sun, 29 Jan 2023 23:56:54 GMT
cache-control: max-age=1200,public
etag: W/"87766c1d73e6c37088fb08c61e1efaed"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kZwDCUTxzpeOCTPXU51zayy4z0-gnPq_MuTNFhQHoOse8-jRtfooHQ==
age: 473
X-Firefox-Spdy: h2
www.tfaforms.com/wForms/3.11/js/localization-en_US.js?v=1675037070
200 OK 0 B URL HTTP/2 www.tfaforms.com/wForms/3.11/js/localization-en_US.js?v=1675037070
IP
GET /wForms/3.11/js/localization-en_US.js?v=1675037070 HTTP/1.1
Host: www.tfaforms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:31 GMT
content-type: application/javascript
set-cookie: AWSALBTG=FpNgdetvidGHAyHz1lFFuOzi8wYWprC/Oh4GS9zEdyYUknueCxREZRZx58xedB7Mg1DyB0R2rNkpU90/SYcn2T4cswZKj/bEInvw3IFXF2rt+ngWeZH0x4xZe9TJMfaeAcQap+/zN0Dsoa0R7X+quoLoK2fFNPlljNaQ9pvPGvfG; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBTGCORS=FpNgdetvidGHAyHz1lFFuOzi8wYWprC/Oh4GS9zEdyYUknueCxREZRZx58xedB7Mg1DyB0R2rNkpU90/SYcn2T4cswZKj/bEInvw3IFXF2rt+ngWeZH0x4xZe9TJMfaeAcQap+/zN0Dsoa0R7X+quoLoK2fFNPlljNaQ9pvPGvfG; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
AWSALB=5DDT+WCVgtcubwakj/rrZj6OADqtPNf5rdTbdI9XNBvRv8KMYBfVMyF6/AKLvBBhAMcQQpfbrLdZsva4GaWwOHntLQ8WLaKlliQ+utPgIRJBznVxZB9urwqHmKvk; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/
AWSALBCORS=5DDT+WCVgtcubwakj/rrZj6OADqtPNf5rdTbdI9XNBvRv8KMYBfVMyF6/AKLvBBhAMcQQpfbrLdZsva4GaWwOHntLQ8WLaKlliQ+utPgIRJBznVxZB9urwqHmKvk; Expires=Mon, 06 Feb 2023 00:04:31 GMT; Path=/; SameSite=None; Secure
server: nginx
last-modified: Wed, 25 Jan 2023 00:35:24 GMT
etag: W/"63d0794c-1a0b"
x-fa-app: ecs-144-72
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
secure.quantserve.com/aquant.js?a=p-SLcBYqRUU3yLq
200 OK 0 B URL HTTP/2 secure.quantserve.com/aquant.js?a=p-SLcBYqRUU3yLq
IP
GET /aquant.js?a=p-SLcBYqRUU3yLq HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.unrefugees.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 00:04:33 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "OVi4z6W4qM+KoQEZlRgh5w=="
expires: Mon, 06 Feb 2023 00:04:33 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
44.240.76.72
212.82.100.181
91.228.74.166
185.80.36.245
23.36.76.186
185.94.180.126
188.114.97.1
18.158.8.202
31.13.72.12
157.240.205.35
104.18.32.68