url3201.kadonation.com/ss/c/sai9Ec0qwt7dj29SJ-4eM5-A6MTbTOEi5bbH1OtXhCbkKoR6RYqEAJGdFCLbBQjH/3ta/oSoMVn9uT2aF15db6M6hFg/h4/hfXZYgRb_L_oQgQE09RUDbvplIudx7gGxx4yvXjyppI
301 Moved Permanently 0 B URL HTTP/1.1 url3201.kadonation.com/ss/c/sai9Ec0qwt7dj29SJ-4eM5-A6MTbTOEi5bbH1OtXhCbkKoR6RYqEAJGdFCLbBQjH/3ta/oSoMVn9uT2aF15db6M6hFg/h4/hfXZYgRb_L_oQgQE09RUDbvplIudx7gGxx4yvXjyppI
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ss/c/sai9Ec0qwt7dj29SJ-4eM5-A6MTbTOEi5bbH1OtXhCbkKoR6RYqEAJGdFCLbBQjH/3ta/oSoMVn9uT2aF15db6M6hFg/h4/hfXZYgRb_L_oQgQE09RUDbvplIudx7gGxx4yvXjyppI HTTP/1.1
Host: url3201.kadonation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 30 Jan 2023 14:11:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 30 Jan 2023 15:11:58 GMT
Location: https://url3201.kadonation.com/ss/c/sai9Ec0qwt7dj29SJ-4eM5-A6MTbTOEi5bbH1OtXhCbkKoR6RYqEAJGdFCLbBQjH/3ta/oSoMVn9uT2aF15db6M6hFg/h4/hfXZYgRb_L_oQgQE09RUDbvplIudx7gGxx4yvXjyppI
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jH44%2F2683ps96R%2FvCZKgI%2FSIg353qCZeo%2Fl4%2BbFAwkUdXtZRfXWHe9eUkkqibCA%2BlVX3LaARl8tIaO7lQer7EKUFox5el2DwWUbdP9f59P094N0SBst15draoq7FU66RV3n8EHTvtms%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791accc1b867b51b-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c35c3ec659d3a26ea97e68d787bb043
d97e3672244efec5b7814f2d8a734cd1a9387854
4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14223
Expires: Mon, 30 Jan 2023 18:09:01 GMT
Date: Mon, 30 Jan 2023 14:11:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10317
Expires: Mon, 30 Jan 2023 17:03:55 GMT
Date: Mon, 30 Jan 2023 14:11:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 09ee4b0fe6cf4ca5ed31b24452338d00
7e62b6e20f0d4737f4a8d94f9818a0883027839e
56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9459
Expires: Mon, 30 Jan 2023 16:49:37 GMT
Date: Mon, 30 Jan 2023 14:11:58 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 13:35:43 GMT
content-type: application/json
age: 2175
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 14IdemjQ0FXe4i89CETVXkFY1ey1BHO0n8knPYr4A70OTZo/HKndkhwRPhKFjgRd5NuGJWwEOhg=
x-amz-request-id: FT713APDMV3NQVDF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 13:50:45 GMT
age: 1273
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 14:11:58 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash bd9b1277a3fe53832055b83c2c423a01
1b494b6c2d7e160da799982f245586078459101c
6632cdcc0ff3a96f271ad4c5d346425af69c257aa4e20233f048c27f4c10f88d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "6632CDCC0FF3A96F271AD4C5D346425AF69C257AA4E20233F048C27F4C10F88D"
Last-Modified: Mon, 30 Jan 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 30 Jan 2023 20:11:58 GMT
Date: Mon, 30 Jan 2023 14:11:58 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 13:41:41 GMT
age: 1818
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9090
Expires: Mon, 30 Jan 2023 16:43:29 GMT
Date: Mon, 30 Jan 2023 14:11:59 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: eDdXzh3GiRTVKNnj9ivyrg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: QxXxhkFZswqw1rsl1Eh8eGJs538=
ocsp.digicert.com/
200 OK 471 B IP
Hash a799f16f5814e9202997f27a519a0cb7
9dfad3ebb76e2568bc18d46f4c1db821f1bb2078
c4816ebee8f96749a264ab12d309a93741bda208a0461e213ceea13d61864038
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1803
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:00 GMT
Last-Modified: Mon, 30 Jan 2023 13:41:57 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
200 OK 6.1 kB URL HTTP/2 widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Hash 5add60196e5f96a414fb4b9586764e5d
633f471b3c2fcedeef9cad90cb5bf56f5fe55588
5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Mon, 30 Jan 2023 04:04:59 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5H3Q_2DPO8MWzAJkLKCC6LuEQVxkDk0pzdV0fK6mntgf_cvuFdJD1Q==
age: 36422
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75bf326700e29b1b06e57fb96ee2b064
4f979f28905b65637a058cd44be6c25bb51a42e4
385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d18iujfd941xgj.cloudfront.net/assets/site/css/site.css?id=2a7c6ab86203d71d99cc
200 OK 71 kB URL HTTP/2 d18iujfd941xgj.cloudfront.net/assets/site/css/site.css?id=2a7c6ab86203d71d99cc
IP
File type Unicode text, UTF-8 text, with very long lines (65516)
Hash 2a7c6ab86203d71d99cc54e097e066af
e4c11faa90f1e0d42beb314c9c2ed6afcbe2723a
57ec8145615d131e426126d673857492168173f00d3ec217afa7133aa9cb5686
GET /assets/site/css/site.css?id=2a7c6ab86203d71d99cc HTTP/1.1
Host: d18iujfd941xgj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-length: 71026
date: Tue, 24 Jan 2023 10:04:38 GMT
last-modified: Tue, 24 Jan 2023 10:03:25 GMT
etag: "2a7c6ab86203d71d99cc54e097e066af"
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zYXme2Bnh7rRBP-cG8b4klA0MbrNarwoMdUYxv1eKgJ1fPc89olrBw==
age: 533243
vary: Origin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75bf326700e29b1b06e57fb96ee2b064
4f979f28905b65637a058cd44be6c25bb51a42e4
385f7a9c4112c4d674264d02229719e7f82e7039e681db8aaa6685ebab2be0c1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d18iujfd941xgj.cloudfront.net/assets/site/js/manifest.js?id=26e96264f47d97e6ef7f
200 OK 1.4 kB URL HTTP/2 d18iujfd941xgj.cloudfront.net/assets/site/js/manifest.js?id=26e96264f47d97e6ef7f
IP
File type ASCII text, with very long lines (1443), with no line terminators
Hash 26e96264f47d97e6ef7ff09d9ab7b6de
b1732d1de2b0c76a7fa97e44d6b98727bc3ed264
0afc17eec1c7b5f08cc5b89252179c17cafdfa95877d04c6d832bbef4af8815d
GET /assets/site/js/manifest.js?id=26e96264f47d97e6ef7f HTTP/1.1
Host: d18iujfd941xgj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 1443
date: Wed, 18 Jan 2023 11:42:17 GMT
last-modified: Tue, 17 Jan 2023 13:33:00 GMT
etag: "26e96264f47d97e6ef7ff09d9ab7b6de"
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iENQWKosQQKDlaWWuXhdggWGSmbm6lR5Wg7deR4n7wux-Elc2ltw-w==
age: 1045784
vary: Origin
X-Firefox-Spdy: h2
d18iujfd941xgj.cloudfront.net/assets/site/js/imports.js?id=ddc52d5644b2df79e2ef
200 OK 2.9 kB URL HTTP/2 d18iujfd941xgj.cloudfront.net/assets/site/js/imports.js?id=ddc52d5644b2df79e2ef
IP
File type ASCII text, with very long lines (2929), with no line terminators
Hash ddc52d5644b2df79e2ef75e1c43f8b28
e81ca42e3feda53f8b9bd95abb6a00350543deb3
41452a8547ad3e1714de9b9a558afe698885b836a1f4a108ad76e000e47b1e10
GET /assets/site/js/imports.js?id=ddc52d5644b2df79e2ef HTTP/1.1
Host: d18iujfd941xgj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 2929
date: Thu, 05 Jan 2023 05:04:17 GMT
last-modified: Thu, 29 Dec 2022 11:39:37 GMT
etag: "ddc52d5644b2df79e2ef75e1c43f8b28"
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DrpSUN4MUEjzcLYm_xwsK14CjL5Bd5FuD_oCIC4L8H5YNNAG0atW6g==
age: 2192864
vary: Origin
X-Firefox-Spdy: h2
d18iujfd941xgj.cloudfront.net/assets/site/js/kadonation.js?id=022f859897e226d02074
200 OK 7.9 kB URL HTTP/2 d18iujfd941xgj.cloudfront.net/assets/site/js/kadonation.js?id=022f859897e226d02074
IP
File type Unicode text, UTF-8 text, with very long lines (7907), with no line terminators
Hash 26e6e8c04ca7110d732f4fc9adf43c4b
f951349b32b148fe35a136cd38efb62dc7f16631
25f86efdaadbdd0bcb5a3bcb951e408b759445efa4d9513c92adca4161beee17
GET /assets/site/js/kadonation.js?id=022f859897e226d02074 HTTP/1.1
Host: d18iujfd941xgj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 7911
date: Tue, 24 Jan 2023 03:50:44 GMT
last-modified: Mon, 23 Jan 2023 10:30:03 GMT
etag: "26e6e8c04ca7110d732f4fc9adf43c4b"
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: p13wTawfblmRVL-fe4eTcDPiZWfGQqNsLclyINjh4SvG21vtEKWbCw==
age: 555677
vary: Origin
X-Firefox-Spdy: h2
d18iujfd941xgj.cloudfront.net/assets/site/js/kadonation-vue.js?id=e7c1b8ae376046a4e0dd
200 OK 1.0 MB URL HTTP/2 d18iujfd941xgj.cloudfront.net/assets/site/js/kadonation-vue.js?id=e7c1b8ae376046a4e0dd
IP
File type Unicode text, UTF-8 text, with very long lines (65474), with no line terminators
Size 1.0 MB (1042464 bytes)
Hash e7c1b8ae376046a4e0dd4ee246feaba5
3fce956b471498538946bf2c5575261f26f56d9e
529e4016f546cc7e1796f648a07a3a30a8d421d50801990891039d6b10a0a89d
GET /assets/site/js/kadonation-vue.js?id=e7c1b8ae376046a4e0dd HTTP/1.1
Host: d18iujfd941xgj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 1042464
date: Wed, 25 Jan 2023 04:23:00 GMT
last-modified: Wed, 25 Jan 2023 04:07:05 GMT
etag: "e7c1b8ae376046a4e0dd4ee246feaba5"
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JpOG_XW2mOGDvoOhBNkZBgfd0IXHP6CrmPskKF48ZsQylM0Jdg-iDA==
age: 467341
vary: Origin
X-Firefox-Spdy: h2
d18iujfd941xgj.cloudfront.net/assets/site/js/vendor.js?id=d95853a6ede6de7b5bd1
200 OK 2.4 MB URL HTTP/2 d18iujfd941xgj.cloudfront.net/assets/site/js/vendor.js?id=d95853a6ede6de7b5bd1
IP
File type Unicode text, UTF-8 text, with very long lines (65154)
Size 2.4 MB (2411424 bytes)
Hash d95853a6ede6de7b5bd1303a5c53fdde
8007041ee09e32eb55069e80fe020ea058e70628
2b5d7779cc327c77b17654039c1affb687c9424f7fd2e65af927c558a3366b60
GET /assets/site/js/vendor.js?id=d95853a6ede6de7b5bd1 HTTP/1.1
Host: d18iujfd941xgj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 2411424
date: Thu, 19 Jan 2023 06:36:22 GMT
last-modified: Wed, 18 Jan 2023 15:46:34 GMT
etag: "d95853a6ede6de7b5bd1303a5c53fdde"
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AV_ZXf_IuYpn7rMZ7cxRIQj2RynkoXA4moNXAU11jNLEkXc9ilsHoA==
age: 977739
vary: Origin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db3290a85d0ba4da27406ae9636aa618
4c69da45eddd66a1e26fce5562fc45eda7005309
19db4d0cc84bff9586883a5fa69c426af0b5fc1c2760ee7c259b0307c8afa6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db3290a85d0ba4da27406ae9636aa618
4c69da45eddd66a1e26fce5562fc45eda7005309
19db4d0cc84bff9586883a5fa69c426af0b5fc1c2760ee7c259b0307c8afa6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d18iujfd941xgj.cloudfront.net/assets/fonts/silka/silka-semibold-webfont.woff2
200 OK 28 kB URL HTTP/2 d18iujfd941xgj.cloudfront.net/assets/fonts/silka/silka-semibold-webfont.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 28072, version 1.0\012- data
Hash 56f7292614c26375c4cb455dda8a7a8f
1086059ca9f9639877f3e871c70ee8fa4db06dd5
d6f2c3743a7fbb82fcd518a547e80e2935f2b1d983cae98dd2b627d59de1c558
GET /assets/fonts/silka/silka-semibold-webfont.woff2 HTTP/1.1
Host: d18iujfd941xgj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.kadonation.com
Connection: keep-alive
Referer: https://d18iujfd941xgj.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 28072
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Fri, 04 Feb 2022 15:29:42 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 30 Jan 2023 09:17:15 GMT
etag: "56f7292614c26375c4cb455dda8a7a8f"
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NuigJiWQZMJypL5rl78B9temKlTqCPX0Vs0ep96PqTXK9YH8kOrErw==
age: 17686
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.kadonation.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 18:52:41 GMT
expires: Tue, 23 Jan 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 587959
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db3290a85d0ba4da27406ae9636aa618
4c69da45eddd66a1e26fce5562fc45eda7005309
19db4d0cc84bff9586883a5fa69c426af0b5fc1c2760ee7c259b0307c8afa6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleoptimize.com/optimize.js?id=OPT-N85XZPH
200 OK 46 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-N85XZPH
IP
File type ASCII text, with very long lines (1759)
Hash 56636c1632f02937bf158be9a0b1831c
596c7674919090e5dafc796e1980bd134d01a4cf
487a85ce209a91c6d0a328fb258bfc9f3e9ab8e1122b455040b5450eaad7de50
GET /optimize.js?id=OPT-N85XZPH HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 30 Jan 2023 14:12:00 GMT
expires: Mon, 30 Jan 2023 14:12:00 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45606
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
consent.cookiebot.com/uc.js?cbid=c9cb64e5-d5af-49d5-8923-7cc3ddf23a52
200 OK 32 kB URL HTTP/2 consent.cookiebot.com/uc.js?cbid=c9cb64e5-d5af-49d5-8923-7cc3ddf23a52
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65499)
Hash ca644678e367fcf964fc01f3a24169aa
a526eb8a30c057085dafe6fa23933c27ec9d9a6d
4c88b848076a643a03a0ef09d8407497845b890c5cae1de62025e79248f2168e
GET /uc.js?cbid=c9cb64e5-d5af-49d5-8923-7cc3ddf23a52 HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Sun, 29 Jan 2023 10:39:43 GMT
accept-ranges: bytes
etag: "f51f6bffcd33d91:0"
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 32026
cache-control: public, max-age=141
expires: Mon, 30 Jan 2023 14:14:21 GMT
date: Mon, 30 Jan 2023 14:12:00 GMT
X-Firefox-Spdy: h2
pageimprove.io/
200 OK 4.0 kB IP
File type HTML document, ASCII text, with very long lines (13129), with no line terminators
Hash b12aa1c9b20b3769555a6b3c1fa8e37d
8c1c6bdbcd64729a14712b2d8ea7c3fb02325401
1cbd0b8ec8db95a127c1e32f6a2ec6d81e8e2d94a41a36221b9b2cec1d02a79c
GET / HTTP/1.1
Host: pageimprove.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.kadonation.com
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduZmJ1noFOlY7e3hhb58YhjPqPBzkaZ6hZojMwXcwJ5A13Slvp2dEyG9LS8xaYEF3WAjZOMOVgFiMybDgrLuQJ8YGV2pKZH
vary: X-Goog-Allowed-Resources,Accept-Encoding
x-goog-generation: 1667404295218204
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 4010
x-goog-meta-goog-reserved-file-mtime: 1667402460
content-encoding: gzip
x-goog-hash: crc32c=6aIWEA==, md5=sSqhybILN2lVWms8H6jjfQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 4010
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Mon, 30 Jan 2023 13:13:41 GMT
expires: Mon, 30 Jan 2023 14:13:41 GMT
cache-control: public, max-age=3600
age: 3499
last-modified: Wed, 02 Nov 2022 15:51:35 GMT
etag: "b12aa1c9b20b3769555a6b3c1fa8e37d"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2827
Expires: Mon, 30 Jan 2023 14:59:07 GMT
Date: Mon, 30 Jan 2023 14:12:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2827
Expires: Mon, 30 Jan 2023 14:59:07 GMT
Date: Mon, 30 Jan 2023 14:12:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2827
Expires: Mon, 30 Jan 2023 14:59:07 GMT
Date: Mon, 30 Jan 2023 14:12:00 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 131eb343c5abd61939457d69bd371348
ffb2035cf64fc83f01db5c6f26ffa264b6aac95b
8486eb9dc6325018f8721bc6f37408f260b6e652b145280f2d778d860d3ec2d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7538
x-amzn-requestid: 8bec493a-9c81-4cfd-b6e9-66f4f3d55cb7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fOOJQEZSoAMFb1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf2a3b-5f0c9f3e4cac1ba26c802050;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 00:45:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3uybP14DBtrEK8ieNWHaQfz3Zl_JMl0_L9CGZgcusTjVCFIIaTpwIQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 00:23:18 GMT
age: 49722
etag: "ffb2035cf64fc83f01db5c6f26ffa264b6aac95b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/H5qLb6VObFs
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/H5qLb6VObFs
IP
Hash f1e1f0f31939470662c7ac73403870f2
82495c09c17f80d93bd840d19f80a902ca4d466f
a426dabf731694608a45b57fbc14165873b9b4bbbdb4b9b62b38f077b1e5cc73
POST /s/gts1d4/H5qLb6VObFs HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:00 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.zdassets.com/ekr/snippet.js?key=2ed5d2a5-d4f5-408f-a5c2-8890d860b783
200 OK 15 kB URL HTTP/2 static.zdassets.com/ekr/snippet.js?key=2ed5d2a5-d4f5-408f-a5c2-8890d860b783
IP
File type ASCII text, with very long lines (23416), with no line terminators
Hash 75f4e9a15618aae39a0955d307b12631
9011f9e1111ad9e46097ed4f6eb1881a5186f127
390b2cd30be60b9dc8ac05bb7f5f1a1b036a9dcd400caa111f72ba39619941e1
GET /ekr/snippet.js?key=2ed5d2a5-d4f5-408f-a5c2-8890d860b783 HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:00 GMT
content-type: application/javascript
x-amz-id-2: VYKORFZEK8ncQjbBiiAK6oiTYdRdkzwPfaxRM/jinB20cI8N0LqXAF6x6uRMZJVhRKA1YH5Ltb2qBhbqYLdq5g==
x-amz-request-id: EBZ4ZRD66V3TGNXR
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: TCAqq4sghBBBAAXd3MLZ8Fy8XIds..vO
cf-cache-status: HIT
age: 25
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BdwEy1AyvE1bmQhAh01UIrJxj2K5xtkM2cIYqgeICPeYxETSmWaO5RR5UL5nPvgdtUzGd84frJWQfOtgs0NkxEUGlSvYTPr%2FTOBkRnOTKNululqmrGO2KLuu8HEO8X7Gh3LOh9I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 791accd1bf37b515-OSL
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51aa950d5eed7b90cab6632107092edc
e4388ced02e5576867e77547496dec1ac2338ef7
588830e5f725e8e56270565e40f817f2658b0ee7c0425d138e5f65a17ff40483
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9457
x-amzn-requestid: 7c48e5ca-2128-43da-ba83-fd91568af1ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkBOGHVoAMFQtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6d4-1b850ffd543f51f92dec3894;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: soTFEnYjNcti77h3FpnztwzR7ypv68NbyoI6DxS0NhU412ykFsWAgA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:00:38 GMT
age: 58282
etag: "e4388ced02e5576867e77547496dec1ac2338ef7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5190c0bdc6abe0ee258e9f8c20ddaf51
d60f280f8a742480527dbc32d08f321f972d4fcf
874b38a04aa3736e65aaef72da2cc2efceb208618267107a495bdfe51ec58e58
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55e9b24d-3c7c-46d8-89b7-084483cc3d1d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12507
x-amzn-requestid: 85c9adcd-b997-48ca-bbfb-ccdeaf3e8cfb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhklyFaJoAMFqKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7be-2bcdd8c353d8429d2b1e95f6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UDJKl99GiUxTW_EgWFDjLaJZbKFhfaJR-XRLsbQphwHuCXczDlxrDA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:54:37 GMT
age: 58643
etag: "d60f280f8a742480527dbc32d08f321f972d4fcf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65c02d8a1b0d6a210cb2a649c5c67469
027dbc7a104c922904f067ed15d696c363c11774
89d5443a1d313c632d09a583ef602aa4645a16986076387329f434262d15b0a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10997
x-amzn-requestid: a6fac0ab-1acf-4808-8785-3b4ec5e32edf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj30FX7IAMFa5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e698-005109ec2e76529e793678d6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: skGKI_MWvDwpAbGibUcr8wTlimgoPU9ZYhEHltd3uhdJZ_GoNznVAA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:53:08 GMT
age: 58732
etag: "027dbc7a104c922904f067ed15d696c363c11774"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
consentcdn.cookiebot.com/sdk/bc-v4.min.html
200 OK 392 B URL HTTP/2 consentcdn.cookiebot.com/sdk/bc-v4.min.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (627), with no line terminators
Hash e7268eccad39bd651697fa793a52cc5c
47299cefa2397b0c1d0c5bf232390a5cf1bcc4d3
907e16c84d35556e4ed841a3511915e6d4bb4e9d68cfca178a740e90b4d80e35
Analyzer Verdict Alert phishtank Other
GET /sdk/bc-v4.min.html HTTP/1.1
Host: consentcdn.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "3d08665fa4c7bcf9fa2dcbbc7efe1d0f:1649057029.895163"
last-modified: Mon, 04 Apr 2022 07:23:49 GMT
server: AkamaiNetStorage
x-akamai-transformed: 9 - 0 pmb=mRUM,1
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=29771517
expires: Wed, 10 Jan 2024 04:03:58 GMT
date: Mon, 30 Jan 2023 14:12:01 GMT
content-length: 392
server-timing: cdn-cache; desc=HIT, edge; dur=1
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4225b4acb382cb54f4c9c1870b5a5278
9ebb5f34cb2993feaff6363ad24a888c5c02869e
977e55ca0b5905651db2d50b0fc890e6ed2821d4386f7bccd4f177940b8f5432
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "977E55CA0B5905651DB2D50B0FC890E6ED2821D4386F7BCCD4F177940B8F5432"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6012
Expires: Mon, 30 Jan 2023 15:52:13 GMT
Date: Mon, 30 Jan 2023 14:12:01 GMT
Connection: keep-alive
widget.trustpilot.com/trustboxes/5419b6ffb0d04a076446a9af/index.html?templateId=5419b6ffb0d04a076446a9af&businessunitId=58c6b5ca0000ff00059e646d
200 OK 2.1 kB URL HTTP/2 widget.trustpilot.com/trustboxes/5419b6ffb0d04a076446a9af/index.html?templateId=5419b6ffb0d04a076446a9af&businessunitId=58c6b5ca0000ff00059e646d
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6826)
Hash 1307e3fd5846bacc989c2fd05996f010
3fd96ecea8c4a91980939fe1e1efe9ec0f47eebc
39f14c526d9f43a24b5c1e219e7ee63500f90b39517d18085573dcf73eb33d87
GET /trustboxes/5419b6ffb0d04a076446a9af/index.html?templateId=5419b6ffb0d04a076446a9af&businessunitId=58c6b5ca0000ff00059e646d HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 2144
last-modified: Tue, 04 Oct 2022 10:34:09 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Mon, 30 Jan 2023 03:44:18 GMT
cache-control: max-age=86400
etag: "1307e3fd5846bacc989c2fd05996f010"
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hqNtm9c7oP0fXqK3B0Iy1GlyIPyWgrXFd_bZoWn65kXLnNl_QrZ5aQ==
age: 37664
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/5419b6ffb0d04a076446a9af/main.js
200 OK 17 kB URL HTTP/2 widget.trustpilot.com/trustboxes/5419b6ffb0d04a076446a9af/main.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (55452)
Hash 93d7d7afc794dd57add6ab0e6cb1e7a5
f3192d2eb299e4111ac69821274555c54d34dd5e
07125f97b71d0a4b48f6ff11db9e9cbaa6ee1bd510ee795cb05353a3cd087f84
GET /trustboxes/5419b6ffb0d04a076446a9af/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b6ffb0d04a076446a9af/index.html?templateId=5419b6ffb0d04a076446a9af&businessunitId=58c6b5ca0000ff00059e646d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 17072
last-modified: Tue, 04 Oct 2022 10:34:10 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Mon, 30 Jan 2023 05:47:29 GMT
cache-control: max-age=86400
etag: "93d7d7afc794dd57add6ab0e6cb1e7a5"
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7ZW4NZw6fhw0BxN518RlUhY2qM321Fp7q-seXqbBsOrbPHhShoqecg==
age: 30277
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b10db14d71c2e1a869dfc58ece4cbc64
f1f47b2b98de6da0f67d4d7fe4da50036f259ada
22e9565fd96c176abdf430af5c371ab75a4532260a9a394936cab584fcca3189
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 14:12:01 GMT
Last-Modified: Mon, 30 Jan 2023 13:28:39 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KpDaHZMAYFQLq-EW0zyXtglajv1rV_yGWAEPxA_DQ8KJ7ywXZV7hlg==
Age: 2602
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b10db14d71c2e1a869dfc58ece4cbc64
f1f47b2b98de6da0f67d4d7fe4da50036f259ada
22e9565fd96c176abdf430af5c371ab75a4532260a9a394936cab584fcca3189
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=158256
Date: Mon, 30 Jan 2023 14:12:01 GMT
Etag: "63d785cd-1d7"
Expires: Wed, 01 Feb 2023 10:09:37 GMT
Last-Modified: Mon, 30 Jan 2023 08:54:37 GMT
Server: ECS (nyb/1D19)
X-Cache: Miss from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ZnEL6dy-V7nIZcryl608gtRetpJT5mSnNQwLqwX_b-jr4yXYrpUcDA==
Age: 4500
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b10db14d71c2e1a869dfc58ece4cbc64
f1f47b2b98de6da0f67d4d7fe4da50036f259ada
22e9565fd96c176abdf430af5c371ab75a4532260a9a394936cab584fcca3189
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 14:12:01 GMT
Last-Modified: Mon, 30 Jan 2023 13:17:17 GMT
Server: ECS (nyb/1D0D)
X-Cache: Miss from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: NZsxYOdbCzTuRi1W5p_2RNDStd8z_vnNsz1sAzN65I_PtiMnLFzdCg==
Age: 3284
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b10db14d71c2e1a869dfc58ece4cbc64
f1f47b2b98de6da0f67d4d7fe4da50036f259ada
22e9565fd96c176abdf430af5c371ab75a4532260a9a394936cab584fcca3189
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 14:12:01 GMT
Last-Modified: Mon, 30 Jan 2023 13:14:44 GMT
Server: ECS (bsa/EB16)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wHPqHmeGDWSD6uz3MfdAsnV5nWXAH5E91G0Hj9ljy9SCYThvSyx5_g==
Age: 3437
widget.trustpilot.com/trustbox-data/5419b6ffb0d04a076446a9af?businessUnitId=58c6b5ca0000ff00059e646d&locale=nl-BE
200 OK 428 B URL HTTP/2 widget.trustpilot.com/trustbox-data/5419b6ffb0d04a076446a9af?businessUnitId=58c6b5ca0000ff00059e646d&locale=nl-BE
IP
File type JSON data\012- , ASCII text, with very long lines (933), with no line terminators
Hash 33719f6a80a4609f7569bd78d66bbdb1
22726733aad19d4092d2dd44625894279a8bd447
1c465631986a26c5b9767a2980975649532823452431198064ec2bf116692a11
GET /trustbox-data/5419b6ffb0d04a076446a9af?businessUnitId=58c6b5ca0000ff00059e646d&locale=nl-BE HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b6ffb0d04a076446a9af/index.html?templateId=5419b6ffb0d04a076446a9af&businessunitId=58c6b5ca0000ff00059e646d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 428
content-encoding: gzip
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public,max-age=1800
date: Mon, 30 Jan 2023 13:45:20 GMT
etag: "b986ab91fcf9a6948d26349af4933a0c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MCD3vq3lkl2ktV9KsBmb0P-LkV4vE1jMWvv_qzK1PUo3qK5zqVvamQ==
age: 1600
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b10db14d71c2e1a869dfc58ece4cbc64
f1f47b2b98de6da0f67d4d7fe4da50036f259ada
22e9565fd96c176abdf430af5c371ab75a4532260a9a394936cab584fcca3189
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 14:12:01 GMT
Last-Modified: Mon, 30 Jan 2023 13:14:44 GMT
Server: ECS (bsa/EB16)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: TdUTqtdzppYpNsjsh-d9xTifumAzuFaP-btVZhjzoN_cZyHe5nfXqg==
Age: 3437
ocsp.digicert.com/
200 OK 280 B IP
Hash 4edb1aa7fc18cd4fb330b2a606cb45f5
2421042c4290319713bc5dcccccba1f768bfcc82
5dfd29fec5c9b36fab0224a9f423fff0031dd1346e3b2ecac6534bd9bb9182c2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3097
Cache-Control: max-age=148611
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:01 GMT
Etag: "63d7659b-118"
Expires: Wed, 01 Feb 2023 07:28:52 GMT
Last-Modified: Mon, 30 Jan 2023 06:37:15 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 279 B IP
Hash d3911d82faf5f97f23419c9b8ffdbba5
537c0af70c35a9f784ebdf35a36368c31e6abcfd
acbb032534a853463f424198d24ba8b883ff8159617e1214257a1f5aa8dd4da5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4098
Cache-Control: max-age=135935
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:01 GMT
Etag: "63d7302e-117"
Expires: Wed, 01 Feb 2023 03:57:36 GMT
Last-Modified: Mon, 30 Jan 2023 02:49:18 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
kadonation-com.s3-eu-west-1.amazonaws.com/occasions/BIRTHDAY.svg
200 OK 983 B URL HTTP/1.1 kadonation-com.s3-eu-west-1.amazonaws.com/occasions/BIRTHDAY.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (983), with no line terminators
Hash 60963d27ed31f9da4c1f3d4aa3d64da2
073855045669c53ab7f44a625721cfc97ab4310f
c51765083ce58a907a2558ebacc8d5f53132e98925a7b2f77393d9f4b3bfa0a4
GET /occasions/BIRTHDAY.svg HTTP/1.1
Host: kadonation-com.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: e/qwDxD2PzgkZXR9XAQUTf2+9ZMiU0PhbTZkrwA0REdkLO2aNrElT/hmuyGucKk0mNZse/MGiMs=
x-amz-request-id: B5JH0K7SYZF6M89C
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 17 Feb 2020 12:43:09 GMT
ETag: "60963d27ed31f9da4c1f3d4aa3d64da2"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 983
kadonation-com.s3-eu-west-1.amazonaws.com/occasions/HOUSEWARMING.svg
200 OK 588 B URL HTTP/1.1 kadonation-com.s3-eu-west-1.amazonaws.com/occasions/HOUSEWARMING.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (588), with no line terminators
Hash d54e57c4f4d0127a1a0a88ed74c039a8
fc71c6a66277d4749e2bd517fedb7650f54694db
a2e7fcb6cf1f2d286a02c0524cc31c7e435d757a496278095ab388545c8ddc84
GET /occasions/HOUSEWARMING.svg HTTP/1.1
Host: kadonation-com.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: XkoA5y3dde/402KGC2Co/DMQlKo5yi/NhLQ08z4diWpQGEGxNWpGIBAWjUs0fdFszaQV7zCizOI=
x-amz-request-id: B5JV88C6GQDHM3X7
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 17 Feb 2020 12:43:13 GMT
ETag: "d54e57c4f4d0127a1a0a88ed74c039a8"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 588
kadonation-com.s3-eu-west-1.amazonaws.com/occasions/MARRIAGE.svg
200 OK 939 B URL HTTP/1.1 kadonation-com.s3-eu-west-1.amazonaws.com/occasions/MARRIAGE.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (939), with no line terminators
Hash b4ea435d2e45d49b9e8b28a53cefc1d7
edfd9861bb318068c1c36084064de96cbf6745ae
0cc82f106bbc64278c303e7cc8a326d05ce9169b99d5ac7303cde760b7bae619
GET /occasions/MARRIAGE.svg HTTP/1.1
Host: kadonation-com.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: zq8yG6D5Gc9B1juhvE3jKsEmTvped3xwrku5kGb2MSUeXGqDXGxKUDCTjH3ksYTQu9OYAfiG5/c=
x-amz-request-id: B5JVSG6P2203WKJC
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 17 Feb 2020 12:51:56 GMT
ETag: "b4ea435d2e45d49b9e8b28a53cefc1d7"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 939
kadonation-com.s3-eu-west-1.amazonaws.com/occasions/GOODBYE-COLLEAGUE.svg
200 OK 1.3 kB URL HTTP/1.1 kadonation-com.s3-eu-west-1.amazonaws.com/occasions/GOODBYE-COLLEAGUE.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1333), with no line terminators
Hash 06af943e77f29abc8e1c7e06afe98343
8b9f0f0c0eac3a08d9a176ae4dcd23ff930d1819
7c7143a1d43e0c23aa4ea354bf9527fc50f0b9e4f631e3e931efeee5eb3d837f
GET /occasions/GOODBYE-COLLEAGUE.svg HTTP/1.1
Host: kadonation-com.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 4Pxn73QPkC/1wvbz3j+YtMtJmGJEmMzUS76zYO01HTbaHN/lY6w1Nfm3rSveU+u/JeU7cF6LAJU=
x-amz-request-id: B5JGE0YPHNQJVME9
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 17 Feb 2020 12:43:12 GMT
ETag: "06af943e77f29abc8e1c7e06afe98343"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 1333
kadonation-com.s3-eu-west-1.amazonaws.com/occasions/BIRTH.svg
200 OK 720 B URL HTTP/1.1 kadonation-com.s3-eu-west-1.amazonaws.com/occasions/BIRTH.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (720), with no line terminators
Hash 33ed44c89a59d404c3f1139f5ae1e5b0
eb88435b558b11c12dadccceb52332be4fa6ca09
01b2f33b2f9480e02a2841dd514a6b529233eccc00dd896538face4056a62ba6
GET /occasions/BIRTH.svg HTTP/1.1
Host: kadonation-com.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 7+ZJIJOI+mZ5s87Wdp+n6Llv3eL0mhGEp4hkfOWr95ZKhslYcGWcF9OTWXXs3whzOH7Kkl5fC1U=
x-amz-request-id: B5JYTH35V70PVVZH
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 17 Feb 2020 12:43:09 GMT
ETag: "33ed44c89a59d404c3f1139f5ae1e5b0"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 720
kadonation-com.s3-eu-west-1.amazonaws.com/occasions/THANKYOU.svg
200 OK 722 B URL HTTP/1.1 kadonation-com.s3-eu-west-1.amazonaws.com/occasions/THANKYOU.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (722), with no line terminators
Hash b1507b727f22a9bd3b453778c358f153
4ba269411b6a0e981bbe5cf93c7b133f072135ba
cb4ecf7c1ce115304429254d887ce03ab1b3f2e518e21d5c16aa223878e57bc2
GET /occasions/THANKYOU.svg HTTP/1.1
Host: kadonation-com.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: nkWrtC4kTtQZn5IdrU753SxVLXSeBrCji1gjWHQhhgA+MdCqI9rWZNfYNzF2gYGm6V2q09dNGRY=
x-amz-request-id: B5JW2TV54BTRQ0BF
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 17 Feb 2020 12:51:58 GMT
ETag: "b1507b727f22a9bd3b453778c358f153"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 722
kadonation-com.s3-eu-west-1.amazonaws.com/occasions/GOODBYE-TRAVEL.svg
200 OK 956 B URL HTTP/1.1 kadonation-com.s3-eu-west-1.amazonaws.com/occasions/GOODBYE-TRAVEL.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (956), with no line terminators
Hash ad8156d611afdd5eb311e6522771758a
f26a377a4b7db82ffa6a403cfbf9bb6a848bd487
d57a724026991e8512261e2580b10f8af11c98b1a989926ebcc5138feafb8dfb
GET /occasions/GOODBYE-TRAVEL.svg HTTP/1.1
Host: kadonation-com.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: d2VBmQ/9grMKAUsKN1QuYxVHdLTud/F7Yp62olYlTo5+H98x+I4U277z8e/8WatuDJ7/nxX2dRY=
x-amz-request-id: B5JZP87NJ5GBXZM7
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 17 Feb 2020 12:43:12 GMT
ETag: "ad8156d611afdd5eb311e6522771758a"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 956
kadonation-com.s3-eu-west-1.amazonaws.com/occasions/RETIREMENT.svg
200 OK 828 B URL HTTP/1.1 kadonation-com.s3-eu-west-1.amazonaws.com/occasions/RETIREMENT.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (828), with no line terminators
Hash 3a301d7e0b87f47e9040c46f270a325a
07cd1ca72ae9d0cf69eff941adaa93740c7beee6
b3c2ac6ed5cae5a47ad03604ce7e5a41050992c896840b1751ed76f0c85bcc3a
GET /occasions/RETIREMENT.svg HTTP/1.1
Host: kadonation-com.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: OJgBGntoFXOc5cfoKs4lfGykuLiVNgpTa4fMIKgaiDd96v7hxCBU2FdfaKZMb//4sTjkSn4Hdkc=
x-amz-request-id: B5JYKRMGZJWB0BAX
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 17 Feb 2020 12:51:57 GMT
ETag: "3a301d7e0b87f47e9040c46f270a325a"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 828
js.hs-scripts.com/2246161.js
200 OK 2.2 kB URL HTTP/2 js.hs-scripts.com/2246161.js
IP
File type ASCII text, with very long lines (502)
Hash 6349b9b51f44f03faa827b4b1b29cd31
b705bae693646c7fa93fae167c24a1dbfec55ca8
53f900f4111fbe7bcf39dc7289a8d4f9c3aaacbab88638fb64e10afe8bfe0973
GET /2246161.js HTTP/1.1
Host: js.hs-scripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:01 GMT
content-type: application/javascript;charset=utf-8
x-trace: 2B6CD4FB62CAFB0BF6091916D04A7C60538C786B3F000000000000000000
cache-control: public, max-age=60
vary: origin, Accept-Encoding
x-hubspot-correlation-id: 9cb57daf-ad59-40e8-9cb4-55d83e44eb36
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-origin: https://app.kadonation.com
last-modified: Mon, 30 Jan 2023 14:09:56 GMT
cf-cache-status: EXPIRED
expires: Mon, 30 Jan 2023 14:13:01 GMT
server: cloudflare
cf-ray: 791accd15b3fb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
kadonation-com.s3-eu-west-1.amazonaws.com/occasions/SECRETARY-DAY.svg
200 OK 790 B URL HTTP/1.1 kadonation-com.s3-eu-west-1.amazonaws.com/occasions/SECRETARY-DAY.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c59312e507a5d54eef42d1229c3676a2
2140d80ed8b6f52dc295ff5a84b07c6e6b94e845
00626bc978f8232509870b44b13e175ee0b5a62b2db4ada7bf26605ee95a1e55
GET /occasions/SECRETARY-DAY.svg HTTP/1.1
Host: kadonation-com.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 6fbMn7PawpCDfSTNtbrQKZNhBSWG45Odz1TMep6PBqmhjL7dim0wZHBJMQm/grrgZYo1Kb436Gc=
x-amz-request-id: B5JJ7FZ0KHGVCTPX
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 30 Mar 2020 08:18:37 GMT
ETag: "c59312e507a5d54eef42d1229c3676a2"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 790
kadonation-com.s3-eu-west-1.amazonaws.com/occasions/COMMUNION.svg
200 OK 621 B URL HTTP/1.1 kadonation-com.s3-eu-west-1.amazonaws.com/occasions/COMMUNION.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (621), with no line terminators
Hash c337fa0f25ecbe969473590b2ee62f22
3f09d6003f05fc019349df35735f5a13d06eb993
1ed812598e8eae8deab77005a9fcf24440ae972084f17dcd21c2c4a88804e860
GET /occasions/COMMUNION.svg HTTP/1.1
Host: kadonation-com.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: dw2k47OMw5ZRSN+hKGz1ynruHJ9egKZuw8WkKlepyrj6D3aih+gp+jvlQWLRVxJDNr9vqbSM5IM=
x-amz-request-id: B5JVNB6ARM8SF0QS
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 17 Feb 2020 12:43:09 GMT
ETag: "c337fa0f25ecbe969473590b2ee62f22"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 621
kadonation-com.s3-eu-west-1.amazonaws.com/occasions/GRADUATION.svg
200 OK 1.2 kB URL HTTP/1.1 kadonation-com.s3-eu-west-1.amazonaws.com/occasions/GRADUATION.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 17770bc34bd65c6c21012b9cebf1751a
b08a278b7a6764f038425de2ecb92dc46eaa2020
ad6772a0bef809b06579c2be8c717dd5f8f806884390e097369bb0508f108a2e
GET /occasions/GRADUATION.svg HTTP/1.1
Host: kadonation-com.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: NY5z9kwniiyYnlcOhPpMfE8T/HiLgheyzRxhP2BLEH1XDbYO723qT0vLieImIhOYmD/R1qs4Z1Q=
x-amz-request-id: B5JS4KYSZ8SXCVYV
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 17 Feb 2020 12:43:12 GMT
ETag: "17770bc34bd65c6c21012b9cebf1751a"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 1248
kadonation-com.s3-eu-west-1.amazonaws.com/occasions/April2019/06P8kqqbiAV8OUQYZ3C9.png
200 OK 3.4 kB URL HTTP/1.1 kadonation-com.s3-eu-west-1.amazonaws.com/occasions/April2019/06P8kqqbiAV8OUQYZ3C9.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 87b4c256495a002e9339260f76d102b1
43264dc2e0102e035995b73219e08ea7adf66ea4
470ef8248ee8ac22c24c55cbd68eaf741a2b60de2a0438dd26ed72f9fc812913
GET /occasions/April2019/06P8kqqbiAV8OUQYZ3C9.png HTTP/1.1
Host: kadonation-com.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: aUerBl6mZGEsLoWaiHa6I3oUeeetcsg+HaUgPBCtFbNj77anawbgeWEao9hrdb2BXisOtXezEBk=
x-amz-request-id: B5JJJNEJND84WRN2
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Sun, 16 Feb 2020 15:54:29 GMT
ETag: "87b4c256495a002e9339260f76d102b1"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3357
kadonation-com.s3-eu-west-1.amazonaws.com/occasions/OTHERS.svg
200 OK 1.4 kB URL HTTP/1.1 kadonation-com.s3-eu-west-1.amazonaws.com/occasions/OTHERS.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 15beb758c4246e5c78545762f400c8fa
ad607cc5c608f7f69ca898b5ff199e83b374458c
81992bc031c61b454dc19b135bf0eb275af474c251a9f98c242aaa5fee27ee0f
GET /occasions/OTHERS.svg HTTP/1.1
Host: kadonation-com.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 163Wlxery8+HSiOhjNEK+Na35LvO60SUsGnCBCETVODEsJ9HYzLUdQHWSH6no4nkTi8veTYpDns=
x-amz-request-id: B5JMEZ7YNHGV92Z2
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 17 Feb 2020 12:51:57 GMT
ETag: "15beb758c4246e5c78545762f400c8fa"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 1436
widget.trustpilot.com/stats/TrustboxImpression?locale=nl-BE&styleHeight=47&styleWidth=260px&theme=light&url=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=58c6b5ca0000ff00059e646d&widgetId=5419b6ffb0d04a076446a9af
204 No Content 0 B URL HTTP/2 widget.trustpilot.com/stats/TrustboxImpression?locale=nl-BE&styleHeight=47&styleWidth=260px&theme=light&url=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=58c6b5ca0000ff00059e646d&widgetId=5419b6ffb0d04a076446a9af
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats/TrustboxImpression?locale=nl-BE&styleHeight=47&styleWidth=260px&theme=light&url=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=58c6b5ca0000ff00059e646d&widgetId=5419b6ffb0d04a076446a9af HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b6ffb0d04a076446a9af/index.html?templateId=5419b6ffb0d04a076446a9af&businessunitId=58c6b5ca0000ff00059e646d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Mon, 30 Jan 2023 14:12:01 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dD5UyH1pyOk53OwJK3J2QwT00QMLA4Vt1XerbhOY4XINTG90JWy7fQ==
X-Firefox-Spdy: h2
consent.cookiebot.com/c9cb64e5-d5af-49d5-8923-7cc3ddf23a52/cc.js?renew=false&referer=app.kadonation.com&dnt=false&init=false
200 OK 55 kB URL HTTP/2 consent.cookiebot.com/c9cb64e5-d5af-49d5-8923-7cc3ddf23a52/cc.js?renew=false&referer=app.kadonation.com&dnt=false&init=false
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65499)
Hash 8009b8ffaa79467c8a1918e4e39c942c
e00382ca88d6aaef35d425a30b0948a46dc4830e
6a1f4543fe8238b420f7506d54a4ce8096475474056de4b7897e2df0b573d5e4
GET /c9cb64e5-d5af-49d5-8923-7cc3ddf23a52/cc.js?renew=false&referer=app.kadonation.com&dnt=false&init=false HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=1200
content-type: application/x-javascript; charset=utf-8
content-encoding: gzip
last-modified: Mon, 30 Jan 2023 14:12:01 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 54656
date: Mon, 30 Jan 2023 14:12:01 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 67e24b3dbc7c8c0764b67080207f02ac
5d1f44be7fccbf42c867b41d6422cb8165a33455
bc48e04e4a8a2a100beb06977b1c0f0200d8628c47e0c11a7c66a1850ad834d4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4487
Cache-Control: max-age=101356
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:02 GMT
Etag: "63d6a797-117"
Expires: Tue, 31 Jan 2023 18:21:18 GMT
Last-Modified: Sun, 29 Jan 2023 17:06:31 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
api.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=2246161
200 OK 432 B URL HTTP/2 api.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=2246161
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 68e9f39b6d3e686216cc3fd82c65351f
880a562f987c5c3f69d73a75b107381684e558b7
4bc2a05b06494d26b7ab481d892a2a3fd52f2cffce556f7f00cf5a5058a82711
GET /hs-script-loader-public/v1/config/pixels-and-events/json?portalId=2246161 HTTP/1.1
Host: api.hubapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.kadonation.com
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:02 GMT
content-type: application/json;charset=utf-8
cf-ray: 791accd8b967b50f-OSL
access-control-allow-origin: https://app.kadonation.com
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: origin, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-max-age: 180
x-hubspot-correlation-id: 40a6f478-06b7-4fb6-9c92-ef9f13db064e
x-trace: 2B485911C4EBE80A94D8650026B195E75AE495C241000000000000000000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UdYbVvPymI4l76b60phJHPsLGFxmJEKZBCVMTMW0HrVU8eqrooJUzFC3FvFV8qrXZzt8UAVjYFOLdVhYKMNwDnpOGsnT8UWkvVdADk6jZx7Hb4iVoDdVUEBSy5eOh%2BYy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d18iujfd941xgj.cloudfront.net/assets/global/logo/kdn-logo-blue.svg
200 OK 19 kB URL HTTP/2 d18iujfd941xgj.cloudfront.net/assets/global/logo/kdn-logo-blue.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (18711), with no line terminators
Hash 5db6815ed81d79e882568f9a2092122c
475fd1a0cdaada9ab5ff08f838d456f577bcdc1b
7df5247d28a4379e01d74b16b7f338c2e871686b6294c72a839cdb943230dd18
GET /assets/global/logo/kdn-logo-blue.svg HTTP/1.1
Host: d18iujfd941xgj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 18711
last-modified: Tue, 10 Jan 2023 05:32:54 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 29 Jan 2023 20:39:54 GMT
etag: "5db6815ed81d79e882568f9a2092122c"
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gEtEje_rwOepDLMM7_bXFKHiECIeEeCg-R27yKLeL1215lQjGgrq4w==
age: 63129
vary: Origin
X-Firefox-Spdy: h2
d18iujfd941xgj.cloudfront.net/assets/site/images/security/Verified.png
200 OK 58 kB URL HTTP/2 d18iujfd941xgj.cloudfront.net/assets/site/images/security/Verified.png
IP
File type PNG image data, 1024 x 398, 8-bit/color RGBA, non-interlaced\012- data
Hash 399f97eb8dccb179de0f30010c201046
74db401d7a1b9cf8e94140e9b0a0feb9e50ea649
62683b4fe17665f5d53e793cdeaef12495de5904fc10dcd24bb58b74a50676f4
GET /assets/site/images/security/Verified.png HTTP/1.1
Host: d18iujfd941xgj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 57516
last-modified: Fri, 12 Feb 2021 13:04:46 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 29 Jan 2023 20:39:54 GMT
etag: "399f97eb8dccb179de0f30010c201046"
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lpzsvDFakPDtLcIqAjeyky7TXWq8qAchlUVKuvnShDAfHOG-DMrwjA==
age: 63129
vary: Origin
X-Firefox-Spdy: h2
d18iujfd941xgj.cloudfront.net/assets/site/images/security/trust-ecommerce.png
200 OK 407 kB URL HTTP/2 d18iujfd941xgj.cloudfront.net/assets/site/images/security/trust-ecommerce.png
IP
File type PNG image data, 4242 x 3439, 8-bit/color RGBA, non-interlaced\012- data
Size 407 kB (406984 bytes)
Hash 1b04980a4bd10731326b2bb059d5b53e
7ac5f9d1bf867c4c422ef94990a4de6405439049
a65e6d332b30831dea6c3e6a2fc41a7e60596f245b0b46438766c4c66abbd5c9
GET /assets/site/images/security/trust-ecommerce.png HTTP/1.1
Host: d18iujfd941xgj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 406984
last-modified: Fri, 12 Feb 2021 13:04:45 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 29 Jan 2023 20:39:54 GMT
etag: "1b04980a4bd10731326b2bb059d5b53e"
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FmxfQxmkZbh32MrnJoKowGnhLtp1acSbqEW1vqjFE6ALYJa3UwtWwg==
age: 63129
vary: Origin
X-Firefox-Spdy: h2
d18iujfd941xgj.cloudfront.net/assets/global/favicon/android-icon-192x192.png
200 OK 12 kB URL HTTP/2 d18iujfd941xgj.cloudfront.net/assets/global/favicon/android-icon-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 171307402882dd090a526328b59c982b
2404f4ed72d9a565081882e16cca73c3fa7321b4
b41ac99e3d1f26af9b80ccc6ac4b5b9a7b5158acedd35c436325d511c626525f
GET /assets/global/favicon/android-icon-192x192.png HTTP/1.1
Host: d18iujfd941xgj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 11509
last-modified: Fri, 17 Jan 2020 10:09:01 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 30 Jan 2023 13:30:21 GMT
etag: "171307402882dd090a526328b59c982b"
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AuXcNLEXl9tqs4svIuq72F8JHhiqnAWS4Mj1JIgw2ChIuDQlFq31-A==
age: 2502
vary: Origin
X-Firefox-Spdy: h2
js.hsadspixel.net/fb.js
200 OK 3.3 kB IP
File type ASCII text, with very long lines (5775)
Hash 2d5deb21923180679eeeadc7c38b7bdb
25e36041d745eec38e2580588ab9f3bb8e76f3a6
e6c718c9075e7fd0fe42ef7497cb24709f06d15f9c84d071bc6dcd2f6cd20055
GET /fb.js HTTP/1.1
Host: js.hsadspixel.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:01 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Fri, 20 Jan 2023 04:29:49 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: SDrNOl8ziD8gAW.Yx4_m5h0e_hjF8Ssn
etag: W/"c400e8c1e05d683a64923854807562fd"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 736ad67f05a9a5a8fd5ed8cba30196f4.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: cAOyvhvbcDlArSTQe3mZmyqXggqsjMsPTwu3i4sM8BA8wia3h_NkVQ==
cache-control: max-age=600
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=adsscriptloaderstatic/static-1.316/bundles/pixels-release.js&cfRay=78c93fd85d44d987-IAD
x-hs-target-asset: adsscriptloaderstatic/static-1.316/bundles/pixels-release.js
x-hs-cache-status: HIT
cache-tag: staticjsapp-AdsScriptLoaderCloudflare-web-prod,staticjsapp-prod
cf-cache-status: HIT
age: 358
server: cloudflare
cf-ray: 791accd60f8db509-OSL
content-encoding: br
X-Firefox-Spdy: h2
d18iujfd941xgj.cloudfront.net/assets/global/logo/kdn-logo-white.svg
200 OK 19 kB URL HTTP/2 d18iujfd941xgj.cloudfront.net/assets/global/logo/kdn-logo-white.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (18711), with no line terminators
Hash 4ae456e2b918392d0b01dbaa990fc1b8
e4d9311b3b3d1c6b2a4efffdd9cde230db844f69
b96a9087c9d2b842b7ba6e4d21f83c735ea536d8f6bd5b18a28ceee1ac149ae8
GET /assets/global/logo/kdn-logo-white.svg HTTP/1.1
Host: d18iujfd941xgj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 18711
last-modified: Tue, 10 Jan 2023 05:32:54 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 29 Jan 2023 20:25:33 GMT
etag: "4ae456e2b918392d0b01dbaa990fc1b8"
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EL2qHtuS0xgBPV4tc85SGn6o-az_NYivCNZcebvIh7iCJO-pPmBoqg==
age: 63990
vary: Origin
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13351)
Hash 74f72658f6efd10c4c286ab07cd5e452
9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=59810
date: Mon, 30 Jan 2023 14:12:02 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 274699acd9fbd4d15b36cde4b6d3a769
78247182606a10110492ab33999c6ec0dad56d79
5186d76b115187f8f08a88dffb3104bce268e941a58c88c164ed0b3c03597b2a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2965
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 30 Jan 2023 13:22:37 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 471 B IP
Hash c239475b53a2314c43c5922ef55e73f8
e30168fe4daa7e6ebe19591863e7175bf9ad784d
2f985a21771f800b54258c8b1e70a38c9249ef7b9bf2ec61e01d5717c2e204d4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4261
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 30 Jan 2023 13:01:01 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash c239475b53a2314c43c5922ef55e73f8
e30168fe4daa7e6ebe19591863e7175bf9ad784d
2f985a21771f800b54258c8b1e70a38c9249ef7b9bf2ec61e01d5717c2e204d4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5803
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 30 Jan 2023 12:35:19 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Mon, 30 Jan 2023 13:46:59 GMT
expires: Mon, 30 Jan 2023 15:46:59 GMT
cache-control: public, max-age=7200
age: 1503
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 541db4f3f0ba067bfb58cdac34cb86f4
20e6883f068568888ce37c6b9ef8f5d12be257c0
83898f3b2da2a11996d2eb3a5115ef301255030fdf231b8bf7971916769bc7be
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: F3I16l+S9ghOmD1tYT7Iih44IYa3JBXGlKZnTcp/nLONFZsw12nmtd82Dj0sPf8Z7t58Mm0jTtdWpXdgfZuZrQ==
priority: u=3,i
content-length: 27815
x-fb-trip-id: 1679558926
date: Mon, 30 Jan 2023 14:12:02 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash e051517526fe4e2e86ea7d5312dca2a7
0f80336ca5756ab17ea76ddca5a1f51dcc6ed75f
8486e6a2a03472887f30e4d2e008859a068c77a227879881cc666a243ab748f9
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 946d842e943454296910fdb378bdf044
etag: "a25756371aa0779da771a7d14df05ea6"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 30 Jan 2023 14:24:44 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: 4FFRdSb+Ti6G6n1TEtyipw==
x-fb-debug: uMmLQlxx0kIKMztH6R81rn1vY9a/Pj3w2iN5Kjo/X+ryNDerGrmvAd8zBlplkHIs7CD2i9x+YMJP0kY+iXOQSw==
priority: u=3,i
content-length: 1688
x-fb-trip-id: 1679558926
date: Mon, 30 Jan 2023 14:12:02 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c239475b53a2314c43c5922ef55e73f8
e30168fe4daa7e6ebe19591863e7175bf9ad784d
2f985a21771f800b54258c8b1e70a38c9249ef7b9bf2ec61e01d5717c2e204d4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4261
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:02 GMT
Last-Modified: Mon, 30 Jan 2023 13:01:01 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/sdk.js?hash=bb54719d5d69474456acc12a66565418
200 OK 87 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=bb54719d5d69474456acc12a66565418
IP
File type ASCII text, with very long lines (13192)
Hash 7e0caa52081f09ca3878c1efe5551d72
e6d16b4e1ce706ab550361883606bb5b60493101
80bbda2938765c11ef48f85f2d52330822f53e60c47bc0b5d2c691b3247c0ecf
GET /en_US/sdk.js?hash=bb54719d5d69474456acc12a66565418 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.kadonation.com
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 6d807c6d226acb97dd16defb8e63387e
etag: "9212508d72f40b90e5ac013b2b82ef91"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 30 Jan 2024 14:03:26 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: fgyqUggfCco4eMHv5VUdcg==
x-fb-debug: G9oCDuGXAoAVhjQaQwc8hBYODpoT6/vSdf8HqO5Zi1rZpnwdbcEdPiAQ/jAumvjIAXMD+QfsjtvqX5h4yR/VFA==
content-length: 86953
x-fb-trip-id: 1679558926
date: Mon, 30 Jan 2023 14:12:02 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=96810&time=1675087934705&url=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=96810&time=1675087934705&url=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=96810&time=1675087934705&url=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D96810%26time%3D1675087934705%26url%3Dhttps%253A%252F%252Fapp.kadonation.com%252Fen%252Fgroup-gift%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQIbNnhsxvNJNAAAAYYDBUZG5rjw0yz9Auhrl0t0e1ygTDmyIAzcLtVYXhLQ66NbKZfiEuJGHkMChQ; Max-Age=2592000; Expires=Wed, 01 Mar 2023 14:12:02 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQJM6oilWDBioAAAAYYDBUZGLheQlHClIwodmy02OhrmqVVGBieUXoWGokRypjO2R1HFRQuP0oqQ-DbEon0skQ; Max-Age=2592000; Expires=Wed, 01 Mar 2023 14:12:02 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&e28e1bd8-b150-48ca-8849-9f052973eadd"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 30-Jan-2024 14:12:02 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2423:u=1:x=1:i=1675087922:t=1675174322:v=2:sig=AQEPo0VgoBLHI4gmR5vo07MvSfSRsByu"; Expires=Tue, 31 Jan 2023 14:12:02 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXze8yaaDp7tZ741oK00A==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 1CA72639F2464C5BB1DEF49DDB769DC3 Ref B: OSL30EDGE0519 Ref C: 2023-01-30T14:12:02Z
date: Mon, 30 Jan 2023 14:12:02 GMT
content-length: 0
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1505077273138827&ev=PageView&dl=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&rl=&if=false&ts=1675087935200&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1675087935199.1150986042&it=1675087934785&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=1505077273138827&ev=PageView&dl=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&rl=&if=false&ts=1675087935200&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1675087935199.1150986042&it=1675087934785&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1505077273138827&ev=PageView&dl=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&rl=&if=false&ts=1675087935200&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1675087935199.1150986042&it=1675087934785&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 30 Jan 2023 14:12:03 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=508392095937930&ev=fb_page_view&dl=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&rl=&if=false&ts=1675087935159&sw=1280&sh=1024&at=
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=508392095937930&ev=fb_page_view&dl=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&rl=&if=false&ts=1675087935159&sw=1280&sh=1024&at=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=508392095937930&ev=fb_page_view&dl=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&rl=&if=false&ts=1675087935159&sw=1280&sh=1024&at= HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Mon, 30 Jan 2023 14:12:03 GMT
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D96810%26time%3D1675087934705%26url%3Dhttps%253A%252F%252Fapp.kadonation.com%252Fen%252Fgroup-gift%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D96810%26time%3D1675087934705%26url%3Dhttps%253A%252F%252Fapp.kadonation.com%252Fen%252Fgroup-gift%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D96810%26time%3D1675087934705%26url%3Dhttps%253A%252F%252Fapp.kadonation.com%252Fen%252Fgroup-gift%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app.kadonation.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=96810&time=1675087934705&url=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&1165862f-6353-4955-83d6-178bf4592f41"; Domain=.linkedin.com; Expires=Tue, 30-Jan-2024 14:12:03 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202301301412034809d577-f98d-43b9-83bc-dec95f304d8fAQHHUulKAZWviaXqv4bg3OOX1hXKBg8r"; Domain=.www.linkedin.com; Expires=Tue, 30-Jan-2024 14:12:03 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzUwODc5MjM7MjswMjHFYWVDss7iHbL893YadxOaakAjxoTAKofOBG6INoc6Qw==; Domain=.linkedin.com; Expires=Sat, 29 Jul 2023 14:12:03 GMT; Path=/; Secure; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2451:u=1:x=1:i=1675087923:t=1675174323:v=2:sig=AQGurV0NfikYupHKwqYCr5wXEUQjLldG"; Expires=Tue, 31 Jan 2023 14:12:03 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXze8yfCkdwJ4WoQfCXCQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 43D00A854F3B42FDAFC879231B3C0C5D Ref B: OSL30EDGE0519 Ref C: 2023-01-30T14:12:02Z
date: Mon, 30 Jan 2023 14:12:02 GMT
content-length: 0
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=96810&time=1675087934705&url=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=96810&time=1675087934705&url=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=96810&time=1675087934705&url=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app.kadonation.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&870d7db4-6ba4-46b5-8569-16dc63b123b0"; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 30-Jan-2024 14:12:03 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2423:u=1:x=1:i=1675087923:t=1675174323:v=2:sig=AQGyi0ujM45WvmnQG0EvNaqKtGJZeWSW"; Expires=Tue, 31 Jan 2023 14:12:03 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXze8yh6/BCyO+EoCOiLg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F236927718C5453B90E7F5FDE9D26EE7 Ref B: OSL30EDGE0519 Ref C: 2023-01-30T14:12:03Z
date: Mon, 30 Jan 2023 14:12:02 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 77c23d231a0e697285af8bf66f744bb8
4d7a4b6c9b3429bf89a69f2d970de9e595033608
90f66df143f8681516430cecb7f0d23e32d8da705e7411ad8987c6abd2b338bb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3207
Cache-Control: max-age=102651
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:03 GMT
Etag: "63d6b1a7-118"
Expires: Tue, 31 Jan 2023 18:42:54 GMT
Last-Modified: Sun, 29 Jan 2023 17:49:27 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 280
js-agent.newrelic.com/859.95d4308d-1222.js
200 OK 3.0 kB URL HTTP/2 js-agent.newrelic.com/859.95d4308d-1222.js
IP
File type ASCII text, with very long lines (6657), with no line terminators
Hash 364ac85aef21ab784eeec8f55116dff7
82089547d57defc88e114832b7eb9919a8876e31
255295be519de9a2d1040b1c547c25756b63310e2d7234bcf252ed41d5278c0b
GET /859.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: PAOkWJ6WiOdnSUVZHZQv79Edy7uPwU81uM9fUJQx6T8UpQupKV3O9whnAR+3HGoYTBPmehtRe7k=
x-amz-request-id: WFN4FJZ1XN6DZ8EG
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "b087387593417c0b63259918da3584e3"
x-amz-version-id: GtNmis6Y3zB4SbtciuRtabFzp3T7wBIy
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Jan 2023 14:12:03 GMT
via: 1.1 varnish
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 5061
x-timer: S1675087924.622704,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2975
X-Firefox-Spdy: h2
track.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=504767505&v=1.1&a=2246161&pu=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&t=The+easiest+way+to+collect+money+for+a+group+gift%2C+gift+card%2C+or+crowdfunding+campaign+%7C+Kadonation.com&cts=1675087935690&vi=da566b09c60865d6bed6b24790bd28c4&nc=true&u=260687186.da566b09c60865d6bed6b24790bd28c4.1675087935688.1675087935688.1675087935688.1&b=260687186.1.1675087935688&cc=15
200 OK 45 B URL HTTP/2 track.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=504767505&v=1.1&a=2246161&pu=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&t=The+easiest+way+to+collect+money+for+a+group+gift%2C+gift+card%2C+or+crowdfunding+campaign+%7C+Kadonation.com&cts=1675087935690&vi=da566b09c60865d6bed6b24790bd28c4&nc=true&u=260687186.da566b09c60865d6bed6b24790bd28c4.1675087935688.1675087935688.1675087935688.1&b=260687186.1.1675087935688&cc=15
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c8817d472077ebfc04593c1fa019d32d
e1e86f41c86c7b9cd2e8b76c6a925a1a3e7e3247
dc111a70984a9eda00752b06277113029ef288f1125c31eff2477413e15e8aa4
GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=504767505&v=1.1&a=2246161&pu=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&t=The+easiest+way+to+collect+money+for+a+group+gift%2C+gift+card%2C+or+crowdfunding+campaign+%7C+Kadonation.com&cts=1675087935690&vi=da566b09c60865d6bed6b24790bd28c4&nc=true&u=260687186.da566b09c60865d6bed6b24790bd28c4.1675087935688.1675087935688.1675087935688.1&b=260687186.1.1675087935688&cc=15 HTTP/1.1
Host: track.hubspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:03 GMT
content-type: image/gif
content-length: 45
cf-ray: 791acce28efbb4f3-OSL
cache-control: no-cache, no-store, no-transform
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: origin, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: false
p3p: CP="NOI CUR ADM OUR NOR STA NID"
x-hubspot-correlation-id: 0fa368e5-be75-4b8a-9375-d6a89ab58027
x-robots-tag: none
set-cookie: __cf_bm=kjyjHWDmD8tlclERx6XDSMNUKk5NOPjxG2NbIZ.a6Dk-1675087923-0-AcxRapMylMUaJgzJrkrCPBm0DWyWQ6uu83xCKBE79WvQjc/dzmvM0n6g5WgUaWSZn7P7ic0BeL/NstUrc89rNX0=; path=/; expires=Mon, 30-Jan-23 14:42:03 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
__cf_bm=A5aq_N8W2QjCEPTXkD3nWIiXHdHcSRudO2IxZPhFv6Y-1675087923-0-AUZ34PjDX3WUYcsTYxFltj0EpQUZot0IMS2hyxZbdgJvV0xXpWKe/PEgGoGPT6S3szvsKMRpOaogJP+09temmBY=; path=/; expires=Mon, 30-Jan-23 14:42:03 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A8Ya%2BH7HVWOF8t7bTmz0tCPhnKWny05ZHSGXCMYeTzokjrIVZcCo%2FeRXRddQMkdNMN1LA%2FFkXctHAeJWyGvttsDdIH2moMDE0j8aon15AK6ooyBeOVKw6GdujjOv1ve%2FsDyv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 77c23d231a0e697285af8bf66f744bb8
4d7a4b6c9b3429bf89a69f2d970de9e595033608
90f66df143f8681516430cecb7f0d23e32d8da705e7411ad8987c6abd2b338bb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3207
Cache-Control: max-age=102651
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:03 GMT
Etag: "63d6b1a7-118"
Expires: Tue, 31 Jan 2023 18:42:54 GMT
Last-Modified: Sun, 29 Jan 2023 17:49:27 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 280
js-agent.newrelic.com/569.95d4308d-1222.js
200 OK 3.2 kB URL HTTP/2 js-agent.newrelic.com/569.95d4308d-1222.js
IP
File type ASCII text, with very long lines (7513), with no line terminators
Hash 8d0953404ce6fdf0926ef6bf37d7e041
8cec9d9883f8b7720721bb33bffb4afe45193b1d
83966eef1899edd421692b78cda8df58dfb9b0b2b27a7485183c5b4cb44a336d
GET /569.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: v+E2uK5EOShfz1aeDzYcwNWitGv9mKnF6hMwgfWjfoR/qfIZPK6AF+v3z+by8JUQg3fSUYcltK4=
x-amz-request-id: WFNFJ5TESSHD3FE6
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "e97726ab932639fed09971b1d682788c"
x-amz-version-id: umZj.yHws5JPiBHG1j096ELWHEKx7rh0
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Jan 2023 14:12:03 GMT
via: 1.1 varnish
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 5036
x-timer: S1675087924.761476,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3173
X-Firefox-Spdy: h2
js-agent.newrelic.com/620.95d4308d-1222.js
200 OK 1.3 kB URL HTTP/2 js-agent.newrelic.com/620.95d4308d-1222.js
IP
File type ASCII text, with very long lines (2989), with no line terminators
Hash 7094c3f93699a846fe91edd766391f01
25e8c79409acc2bb73a728c0768e1eda66019255
85eb01219e8aaa7c7968aa175c2421454f99615ae66350b15c60465f4616826f
GET /620.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: QggJtv+14rx8wEd4C6ZTDmmxUSe6+8jiYhTGnWcIRu6DC5pRiaL5fPRx8/lgChduQ7GqRSlO6xY=
x-amz-request-id: WFN5FXFSJTZYM7K6
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "ca9b029ff66dd9146273984d16e20abc"
x-amz-version-id: HYguQMwVKEHCmodKuQRUzW1qxlElK9Xr
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Jan 2023 14:12:03 GMT
via: 1.1 varnish
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 5031
x-timer: S1675087924.761637,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1342
X-Firefox-Spdy: h2
js-agent.newrelic.com/457.95d4308d-1222.js
200 OK 2.0 kB URL HTTP/2 js-agent.newrelic.com/457.95d4308d-1222.js
IP
File type ASCII text, with very long lines (4809), with no line terminators
Hash 09c0cca8d2a9fd69f1892a1c2d1319b9
b46f4fe3b0adc98785d22a092818b74145a91cc0
593022809e272793157f8280bae176bfa74a02f9f9a6d3269384e2dd434be046
GET /457.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 6YLQBRWWkaavoi6QR5dS+9cRhXVrpaQK5v3G9/iqQ5oKPUxxFI0Uv2tN9ar51sQUG2xwVmTWBnY=
x-amz-request-id: WFN1Z9NXJZGF8XE5
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "c16abc7fa2e34cbb7baf3e290120ad5a"
x-amz-version-id: qROfxBD9CF8WXmbywdhvCmImuu9HvRNA
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Jan 2023 14:12:03 GMT
via: 1.1 varnish
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 5026
x-timer: S1675087924.761884,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1953
X-Firefox-Spdy: h2
js-agent.newrelic.com/41.95d4308d-1222.js
200 OK 439 B URL HTTP/2 js-agent.newrelic.com/41.95d4308d-1222.js
IP
File type ASCII text, with very long lines (828), with no line terminators
Hash 46946da829a2257cd8bdeb75bc6f8ff9
bfb81d0ebb2c5a2c0fe666f6a9c4c09cc5a545b3
50e164f0b5274f88ecc28c833729663593b3380aed5a4ac3a06d29106332a544
GET /41.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 2TG7kVMnt5x5EwbcjDgF/pAaH/jmgGXStlMFEbvOUPNYaRTe14pFRmwb0VQGFJQN7uXfEncHoqkNLs4TYWl92Q==
x-amz-request-id: MFEHG5GPGK6ZYQVP
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "29dd8aef66100e4c69e07fd60fc88b12"
x-amz-version-id: 6FOFyXAonMoqJqLGEMhx7HWIp32cv4MT
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Jan 2023 14:12:03 GMT
via: 1.1 varnish
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 5025
x-timer: S1675087924.762047,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 439
X-Firefox-Spdy: h2
js-agent.newrelic.com/244.95d4308d-1222.js
200 OK 2.6 kB URL HTTP/2 js-agent.newrelic.com/244.95d4308d-1222.js
IP
File type ASCII text, with very long lines (6871), with no line terminators
Hash f3fa38d9e10cf246f158644ebd64b342
c2730a8b130475b903b30148ea5cf79eb7de1873
6aea0ff08f0ed145b42d52f81d167df30a300f3da22b687fa2de3be48df1badb
GET /244.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: HqAuLbtc4kLXjp/HM/sZyPqsDbRk1eMZXQl1gAv0l9/yRrGf//JiuVcahDTT5bis4NqiPxfG4OQ=
x-amz-request-id: D866GB1QGPTYVJ4R
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "a24fd7e602a6b44ab4c03cab69c843c6"
x-amz-version-id: wm7C04ehQ1WMJgMW5R_.Vg0x6NJINoji
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Jan 2023 14:12:03 GMT
via: 1.1 varnish
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 3046
x-timer: S1675087924.762194,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2607
X-Firefox-Spdy: h2
diffuser-cdn.app-us1.com/diffuser/diffuser.js
200 OK 6.2 kB URL HTTP/2 diffuser-cdn.app-us1.com/diffuser/diffuser.js
IP
File type ASCII text, with very long lines (26254), with no line terminators
Hash f114b3599a4bbdd9f28d69d0c4d4d24c
a995abb84a4ee03dcb28472240ce583c41aa16ce
35f6768464b3b568a18bd2d05a3c6d1aacee87da1db74f9d80f0b28a160b067c
GET /diffuser/diffuser.js HTTP/1.1
Host: diffuser-cdn.app-us1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:01 GMT
content-type: application/javascript
last-modified: Thu, 21 Oct 2021 17:42:06 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
cache-control: public, max-age=300
etag: W/"4d482a43613d3966f353ec9d97452e0c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ddf05588239a53ffcc4f78bf3b76aac4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: sCYVe7QzQN-Z21TJriJfx73OXUWjIpkRFGlKaQ5OGjoofuNYUJz1gA==
cf-cache-status: HIT
age: 226
server: cloudflare
cf-ray: 791accd4ea2bfac0-OSL
X-Firefox-Spdy: h2
js-agent.newrelic.com/736.95d4308d-1222.js
200 OK 2.1 kB URL HTTP/2 js-agent.newrelic.com/736.95d4308d-1222.js
IP
File type ASCII text, with very long lines (4688), with no line terminators
Hash a0dd1bd64e5912ed2b69ab00c181333c
9f4001e3f6c7fd3105972022cde6a67638ba8083
2ea47cc022696e899accbc531bbb7e3abc01f1598cedaa9f23e071d47ee510a0
GET /736.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: wZ5lT7Qk1E9hmsxWDncLcs+Ic+aBtWHWGPUcVxaeVym/k+6uixaPTXfOiP+keWUZ+GKP0xL2SDo=
x-amz-request-id: MFESCF9VXQC5P35J
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "def1dc24974c16a4e78c08e349b92860"
x-amz-version-id: i.8rfLhEckzO44oBXwNAK9an0lbXu.5p
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Jan 2023 14:12:03 GMT
via: 1.1 varnish
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 3042
x-timer: S1675087924.762352,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2132
X-Firefox-Spdy: h2
js-agent.newrelic.com/885.95d4308d-1222.js
200 OK 5.9 kB URL HTTP/2 js-agent.newrelic.com/885.95d4308d-1222.js
IP
File type ASCII text, with very long lines (16348), with no line terminators
Hash 2414f7dbfd0e2cb3d826fc02a8b608dc
550db9b7abbcd2e5a0d4ab9c414933e1a0bd36fc
8239519b8bff793ad186f4ab9017f8a6ed34edc1df3361958075077ee7677b3d
GET /885.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: iuZsFv406u1sMvs0ma20vGvuMApZWTFFZj+faC5P7Ry157RP7v+m+H8/pYueXH7fkGpYpHbtGFk=
x-amz-request-id: 99ZMGE3ZKMAWH9CW
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "fb9bb822463bccec4200657d3ae33dc0"
x-amz-version-id: PKmhKUoshrjILDxYc6QEKM_sGJ.F4FNB
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Jan 2023 14:12:03 GMT
via: 1.1 varnish
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 1942
x-timer: S1675087924.762744,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 5930
X-Firefox-Spdy: h2
js-agent.newrelic.com/466.95d4308d-1222.js
200 OK 2.8 kB URL HTTP/2 js-agent.newrelic.com/466.95d4308d-1222.js
IP
File type ASCII text, with very long lines (6842), with no line terminators
Hash 0545743760ba9995e8efbe879105162f
889887ac56edaf2cfe41752ec0893a9ac5d23db0
91a431e85d69e797b8a8817bb15aee94a9fbe38355a6890f75e8947a55386ee0
GET /466.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Y3xfvlvSw36CE9GOKklvJeG0iBkCsl/ss+e4vNwZhrKvjIdjtQLayCw3yQPVxbIyEllIzLdCgUw=
x-amz-request-id: MFEHC9QF926X2AZG
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "2b339e4b3b0435de10496ee00de8446a"
x-amz-version-id: joCLqMlafBXUuB094SKQ5Jhlrbz7F.ON
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Mon, 30 Jan 2023 14:12:03 GMT
via: 1.1 varnish
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 3049
x-timer: S1675087924.762811,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2760
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 1b190f4a7634be9e81f71cb29fd5d30e
dcce347d0dea5eb5e0a067f927bf2a3d8e0abfda
d16a8fc973fd7e57a6507833998b8c011f2e6c7a26481d4d4c235ad00871b53b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:03 GMT
Server: ECS (amb/6BA6)
Content-Length: 279
ocsp.digicert.com/
200 OK 471 B IP
Hash beb16650bce2223a67aeb61c9ea8e633
426d4e2adb46faa8b8221d87990f4f39cdfe4b4b
a751856a7939fa33377be4c4fcbbddb367f6852257ebe6c2b7ec6f11cbe2026a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4812
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:03 GMT
Last-Modified: Mon, 30 Jan 2023 12:51:51 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
bam.eu01.nr-data.net/1/NRJS-5e1d8a803052be52b28?a=448258852&v=1222.PROD&to=MhBSZQoZW0UAUBdfWAtacVIMEVpYTlQGQhoWAVFDDFVSRA5GExtQDBNE&rst=5551&ck=0&s=ee585792f1783119&ref=https://app.kadonation.com/en/group-gift&ap=146&be=1685&fe=3422&dc=1505&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1675087930575,%22n%22:0,%22f%22:1452,%22dn%22:1452,%22dne%22:1452,%22c%22:1452,%22s%22:1452,%22ce%22:1452,%22rq%22:1455,%22rp%22:1654,%22rpe%22:1658,%22dl%22:1662,%22di%22:3103,%22ds%22:3190,%22de%22:3207,%22dc%22:5106,%22l%22:5106,%22le%22:5126%7D,%22navigation%22:%7B%7D%7D&fcp=2367&at=HldRE0IDSEs%3D&jsonp=NREUM.setToken
200 OK 77 B URL HTTP/1.1 bam.eu01.nr-data.net/1/NRJS-5e1d8a803052be52b28?a=448258852&v=1222.PROD&to=MhBSZQoZW0UAUBdfWAtacVIMEVpYTlQGQhoWAVFDDFVSRA5GExtQDBNE&rst=5551&ck=0&s=ee585792f1783119&ref=https://app.kadonation.com/en/group-gift&ap=146&be=1685&fe=3422&dc=1505&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1675087930575,%22n%22:0,%22f%22:1452,%22dn%22:1452,%22dne%22:1452,%22c%22:1452,%22s%22:1452,%22ce%22:1452,%22rq%22:1455,%22rp%22:1654,%22rpe%22:1658,%22dl%22:1662,%22di%22:3103,%22ds%22:3190,%22de%22:3207,%22dc%22:5106,%22l%22:5106,%22le%22:5126%7D,%22navigation%22:%7B%7D%7D&fcp=2367&at=HldRE0IDSEs%3D&jsonp=NREUM.setToken
IP
ASN #206998 New Relic International Limited
File type ASCII text, with no line terminators
Hash f1442f5831dbbe0210da2d7a4180d6b8
2ade23c6c7a001c66f0c0a9a101ec152747b434e
c6acf9fb2ecc1b144c51bd0337bbf1c26db3df2f649ac2da5c56db20d93eb3ef
GET /1/NRJS-5e1d8a803052be52b28?a=448258852&v=1222.PROD&to=MhBSZQoZW0UAUBdfWAtacVIMEVpYTlQGQhoWAVFDDFVSRA5GExtQDBNE&rst=5551&ck=0&s=ee585792f1783119&ref=https://app.kadonation.com/en/group-gift&ap=146&be=1685&fe=3422&dc=1505&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1675087930575,%22n%22:0,%22f%22:1452,%22dn%22:1452,%22dne%22:1452,%22c%22:1452,%22s%22:1452,%22ce%22:1452,%22rq%22:1455,%22rp%22:1654,%22rpe%22:1658,%22dl%22:1662,%22di%22:3103,%22ds%22:3190,%22de%22:3207,%22dc%22:5106,%22l%22:5106,%22le%22:5126%7D,%22navigation%22:%7B%7D%7D&fcp=2367&at=HldRE0IDSEs%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.eu01.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 14:12:04 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 791acce4aefc0a37-ARN
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
cross-origin-resource-policy: cross-origin
x-envoy-upstream-service-time: 19
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nVPaGYIZXML3hrOkpMFjvpY0XQAkDJkhZ1ZYEUYdRvHg%2Fvgk4vZQVzKktYcqnGm09WAqda3s8jqW3l61BHD77iRj7EaDHDZj1FHTZoJD5k%2F5WlPAiqMIp7aVoAEOYwpFdcL5voKO"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
region1.google-analytics.com/g/collect?v=2&tid=G-BQ2LFCDET1>m=2oe1p0&_p=1242633282&gcs=G100&cid=569088267.1675087936&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675087933&sct=1&seg=0&dl=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&dt=The%20easiest%20way%20to%20collect%20money%20for%20a%20group%20gift%2C%20gift%20card%2C%20or%20crowdfunding%20campaign%20%7C%20Kadonation.com&en=page_view&_fv=1&_nsi=1&_ss=1&_c=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-BQ2LFCDET1>m=2oe1p0&_p=1242633282&gcs=G100&cid=569088267.1675087936&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675087933&sct=1&seg=0&dl=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&dt=The%20easiest%20way%20to%20collect%20money%20for%20a%20group%20gift%2C%20gift%20card%2C%20or%20crowdfunding%20campaign%20%7C%20Kadonation.com&en=page_view&_fv=1&_nsi=1&_ss=1&_c=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BQ2LFCDET1>m=2oe1p0&_p=1242633282&gcs=G100&cid=569088267.1675087936&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675087933&sct=1&seg=0&dl=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift&dt=The%20easiest%20way%20to%20collect%20money%20for%20a%20group%20gift%2C%20gift%20card%2C%20or%20crowdfunding%20campaign%20%7C%20Kadonation.com&en=page_view&_fv=1&_nsi=1&_ss=1&_c=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.kadonation.com
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://app.kadonation.com
date: Mon, 30 Jan 2023 14:12:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9eba61fbe87bc53d60d0fdd1ba6adb4
8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07
9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/landing?gcs=G100&gcd=G100&rnd=755972070.1675087936&url=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift>m=2wg1p0KV6ZR33
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pagead/landing?gcs=G100&gcd=G100&rnd=755972070.1675087936&url=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift>m=2wg1p0KV6ZR33
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /pagead/landing?gcs=G100&gcd=G100&rnd=755972070.1675087936&url=https%3A%2F%2Fapp.kadonation.com%2Fen%2Fgroup-gift>m=2wg1p0KV6ZR33 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.kadonation.com
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 30 Jan 2023 14:12:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9eba61fbe87bc53d60d0fdd1ba6adb4
8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07
9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 14:12:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bam.eu01.nr-data.net/events/1/NRJS-5e1d8a803052be52b28?a=448258852&v=1222.PROD&to=MhBSZQoZW0UAUBdfWAtacVIMEVpYTlQGQhoWAVFDDFVSRA5GExtQDBNE&rst=5832&ck=0&s=ee585792f1783119&ref=https://app.kadonation.com/en/group-gift
200 OK 24 B URL HTTP/1.1 bam.eu01.nr-data.net/events/1/NRJS-5e1d8a803052be52b28?a=448258852&v=1222.PROD&to=MhBSZQoZW0UAUBdfWAtacVIMEVpYTlQGQhoWAVFDDFVSRA5GExtQDBNE&rst=5832&ck=0&s=ee585792f1783119&ref=https://app.kadonation.com/en/group-gift
IP
ASN #206998 New Relic International Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bc32ed98d624acb4008f986349a20d26
2d3df8c11d2168ce2c27e0937421d11d85016361
0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/NRJS-5e1d8a803052be52b28?a=448258852&v=1222.PROD&to=MhBSZQoZW0UAUBdfWAtacVIMEVpYTlQGQhoWAVFDDFVSRA5GExtQDBNE&rst=5832&ck=0&s=ee585792f1783119&ref=https://app.kadonation.com/en/group-gift HTTP/1.1
Host: bam.eu01.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 640
Origin: https://app.kadonation.com
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 14:12:04 GMT
Content-Type: image/gif
Content-Length: 24
Connection: keep-alive
CF-Ray: 791acce58ff30a37-ARN
Access-Control-Allow-Origin: https://app.kadonation.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
x-envoy-upstream-service-time: 0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vz%2Bdy4i6Yi0mIPPy4Mk8DlZTiiNM2k2LG%2FPM0zwP2KSXgSoZCRH%2FCGrSUtQ9JSeestLOOBGp%2Fg7LnIIRoN0tjYJW9pzsIXyzI9WRNOMRItArP%2BKumqtfbUiZ9bzGiXPPL5g9pw68"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
kadonation.zendesk.com/embeddable/config
200 OK 198 kB URL HTTP/2 kadonation.zendesk.com/embeddable/config
IP
File type JSON data\012- , ASCII text, with very long lines (960), with no line terminators
Size 198 kB (198407 bytes)
Hash 866b0498f90bd32426ae0ab2f554daa2
a94736db5d32fd582c3dc8c2186aae81ee5cdec5
a5872fc09954db79328409e08a9f0b6e1612098309e8f196dff5b11cdffbddfb
GET /embeddable/config HTTP/1.1
Host: kadonation.zendesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app.kadonation.com/
Origin: https://app.kadonation.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:04 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers:
access-control-max-age: 7200
cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600
x-zendesk-origin-server: embeddable-app-server-55866f4ccc-pf7hw
x-request-id: 791acce46ff1b500-ARN
x-runtime: 0.002196
vary: Origin, Accept-Encoding
x-cached: MISS
last-modified: Mon, 30 Jan 2023 14:10:01 GMT
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GgmtOogitmr54lnXlDyGJTl%2F3npiliOxztPQ67Cwqt35bg9Tj1KHOHKzk5rZHPMbX5nd2dBSQHHgNp7NSCh5ZXlry7jKlzUGLvo8l4xDJsgKICG%2FOwmpqrNAWh68Qwiv6ab6BLwwJsQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=a5a2be157cdbab6e15fe9df1412125fa639bca0e-1675087924; path=/; domain=.kadonation.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 791acce46ff1b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2a608d3e4d0a9371ceca220bb4c61f96
f3c034a7f79d8faa1b53fc3d49c2caa4b39aae2c
5a8af729e49ef3106b0ed570fab983dd254db4e3bef232133b0d700a47b329c9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 30 Jan 2023 14:12:04 GMT
Last-Modified: Mon, 30 Jan 2023 12:22:12 GMT
Server: ECS (bsa/EB22)
X-Cache: Miss from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: F_HKOLF4a9LdoCdAABvgsWrD-sO1ACuFYJ5XbvYZ7Tp8wuuFau7vEQ==
Age: 6592
widget-mediator.zopim.com/s/W/ws/D8rRjn6W9ucVq0Of/c/1675087937025
101 Switching Protocols 0 B URL HTTP/1.1 widget-mediator.zopim.com/s/W/ws/D8rRjn6W9ucVq0Of/c/1675087937025
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/W/ws/D8rRjn6W9ucVq0Of/c/1675087937025 HTTP/1.1
Host: widget-mediator.zopim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://app.kadonation.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1hFS8g7FPNipY714tX2fqA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Mon, 30 Jan 2023 14:12:04 GMT
Connection: upgrade
Set-Cookie: AWSALB=Q8+wtCBkMYnJ57C17J8ZjsNqvyqKloqF3anHHkXOUMoYcnLltBxBiEOV5Iufz9pu3lAd4NFANAf4pMEqESrnNkmItcf/7xfZ1ic5GQloLX5BCL8Sl2ZOztjLDdM/; Expires=Mon, 06 Feb 2023 14:12:04 GMT; Path=/
AWSALBCORS=Q8+wtCBkMYnJ57C17J8ZjsNqvyqKloqF3anHHkXOUMoYcnLltBxBiEOV5Iufz9pu3lAd4NFANAf4pMEqESrnNkmItcf/7xfZ1ic5GQloLX5BCL8Sl2ZOztjLDdM/; Expires=Mon, 06 Feb 2023 14:12:04 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: sdcTI1tadki6rpqwrr6ATj96UsE=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
static.zdassets.com/web_widget/latest/classic/web-widget-5324-3789e01.js
200 OK 188 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-5324-3789e01.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 188 kB (188082 bytes)
Hash ae1b5e36cf6cd203d691953a1819a4ac
6834d594720f6b263974821d37262dd39c806546
dd86b970b5537d673ba2c1e2cd5d69967a55a6a6b6ce9d1e947c82ae9d7820f6
GET /web_widget/latest/classic/web-widget-5324-3789e01.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:04 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: 5iEbvRNjpo2HmT4W8W8hFe7XYYzerZGVBZIzH0czqdD7jh+Yk56/4A4Nv4FXTOQ5ijvn38d10mg=
x-amz-request-id: NQRPZ93Y070WT5KM
x-amz-replication-status: COMPLETED
last-modified: Tue, 24 Jan 2023 07:06:01 GMT
etag: W/"a0d9b904197466a0a807d792b0b139b6"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Wed, 24 Jan 2024 07:06:00 GMT
x-amz-version-id: wdUhzTP_PBU4zLulSlUyuH.2qRiLFsd2
cf-cache-status: HIT
age: 311950
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ydynmsp6yAe3A8vevUv0nVxqqXklMe4OT7zYOWgb47Z2qeSethcp5dBdXR7FQ8JIDXyjs65ngMB7usmsq5Iy%2FQh1fA%2F%2F87Uc3H%2FgYCSeeaLX%2FQvPRuWUXdc9RgnUlZ5sJZFQR48%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 791acce6bd48b515-OSL
content-encoding: br
X-Firefox-Spdy: h2
pageimprove.io/s/bfd571cd-8b67-40a1-a73e-cbbe0abe772d/app.kadonation.com/en/group-gift/0.json?version=1.0.0
502 Bad Gateway 332 B URL HTTP/2 pageimprove.io/s/bfd571cd-8b67-40a1-a73e-cbbe0abe772d/app.kadonation.com/en/group-gift/0.json?version=1.0.0
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 47151679e6193060d77a7d92cbe4658c
39f7d591e7b410617149e5275de9cbfef57ebe1f
8128514a9917b6dcdf20f7ee24d6b00a27b2a6aa0f971acb988f358f25ac4005
GET /s/bfd571cd-8b67-40a1-a73e-cbbe0abe772d/app.kadonation.com/en/group-gift/0.json?version=1.0.0 HTTP/1.1
Host: pageimprove.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.kadonation.com
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 502 Bad Gateway
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 332
date: Mon, 30 Jan 2023 14:12:07 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
url3201.kadonation.com/ss/c/sai9Ec0qwt7dj29SJ-4eM5-A6MTbTOEi5bbH1OtXhCbkKoR6RYqEAJGdFCLbBQjH/3ta/oSoMVn9uT2aF15db6M6hFg/h4/hfXZYgRb_L_oQgQE09RUDbvplIudx7gGxx4yvXjyppI
302 Found 0 B URL HTTP/2 url3201.kadonation.com/ss/c/sai9Ec0qwt7dj29SJ-4eM5-A6MTbTOEi5bbH1OtXhCbkKoR6RYqEAJGdFCLbBQjH/3ta/oSoMVn9uT2aF15db6M6hFg/h4/hfXZYgRb_L_oQgQE09RUDbvplIudx7gGxx4yvXjyppI
IP
GET /ss/c/sai9Ec0qwt7dj29SJ-4eM5-A6MTbTOEi5bbH1OtXhCbkKoR6RYqEAJGdFCLbBQjH/3ta/oSoMVn9uT2aF15db6M6hFg/h4/hfXZYgRb_L_oQgQE09RUDbvplIudx7gGxx4yvXjyppI HTTP/1.1
Host: url3201.kadonation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Mon, 30 Jan 2023 14:11:59 GMT
content-type: text/html; charset=utf-8
location: https://app.kadonation.com
x-robots-tag: noindex, nofollow
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3IqBl47QhBF%2B7nrzDvAHCmOmC6toWlratvWS7V10DIm56T2vUpGlpc1i50b1YUkTPMdPrc3oImdBVtjepkaLKioeZ6cD0KQhbVSPbQmFtey0Zj6TwU7rF57PFT52hneEkqpH%2F0Oh6%2Bc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791accc4ace7fac4-OSL
X-Firefox-Spdy: h2
kit.fontawesome.com/6a089aeec8.js
200 OK 0 B URL HTTP/2 kit.fontawesome.com/6a089aeec8.js
IP
GET /6a089aeec8.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.kadonation.com
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:00 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: FzjfkrfMZxYv5DXFKOTB
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 791acccc5c2fb50c-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/96810/domain/app.kadonation.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/96810/domain/app.kadonation.com/token
IP
GET /partner/96810/domain/app.kadonation.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.kadonation.com
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Mon, 30 Jan 2023 12:11:18 GMT
access-control-allow-origin: *
cache-control: public, max-age=13542
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 92gp9cFIyR8ebbW1rqLVYN952foJAYJmfCORxxQM_xtD-AQjmXaFBw==
age: 7244
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-3789e01.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-3789e01.js
IP
GET /web_widget/latest/classic/web-widget-chat-incoming-message-notification-3789e01.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:05 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: bWjsovKjRCekYYLQbkX5CJqj4I4RdaBrb2p4amftObEwQibIuAVIZZCi5lDVCSxXoyuK2wNuGfo=
x-amz-request-id: XZJWHCF5Q7CG9GTG
x-amz-replication-status: COMPLETED
last-modified: Tue, 24 Jan 2023 07:06:01 GMT
etag: W/"659635f5ad1b6653645380f46aa42236"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Wed, 24 Jan 2024 07:06:00 GMT
x-amz-version-id: PTkQfFoeUt2llEzxwBYnSfB39O35UzsZ
cf-cache-status: HIT
age: 311949
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=loGU4i29bSpMuFGEv75e9bi3a986aYhi5oLrzOKVf7dhMjpeLwlcC9tx%2FM4MmtNSlh7ClSeJxgMt59UIq3U0P3EQmFARx76xPegAnqj46vdBAsUZT2QwxsR3tPInhWqE37dZniU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 791accec98b0b515-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/1523716,96810/domain/app.kadonation.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/1523716,96810/domain/app.kadonation.com/token
IP
GET /partner/1523716,96810/domain/app.kadonation.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.kadonation.com
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Mon, 30 Jan 2023 12:13:37 GMT
access-control-allow-origin: *
cache-control: public, max-age=39570
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3jfGrCCk_8bnUcUWCzITnnMvgxlGKtJ-yYP_0AP2PNw6zbh3DGWmOA==
age: 7106
X-Firefox-Spdy: h2
app.kadonation.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 0 B URL HTTP/2 app.kadonation.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: app.kadonation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app.kadonation.com/en/group-gift
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IkowRndzMjZTcmZ4R2hxRm12cktGL0E9PSIsInZhbHVlIjoiY1lyUC9wNlBLNlF1WXltb2RIeUJVbHJSOE5uRjR5dDhoUGRFRGFlREdqYmlVU1BoMEtvRU5QaVc5cHgzZXJQOU1qZmZkMno2a3o0am9mYllvTlE4SE1vMndNd1hQS2ZteTJmdmYzNkdUZlJqSSsxT3l1MTBLNXducWQvVVNFYjAiLCJtYWMiOiJlZmI3Mjc1ZWViODQ1ZDNlNjRlOGU1YTg5MWVkNzJlNDBhNTExZDAwMzllNWEyNWFhODgxZDEzMzEwY2M0ZGU1IiwidGFnIjoiIn0%3D; kadonation_session=eyJpdiI6IjhrbXpBWlFLaU5GNXpQSlhjL1VBWGc9PSIsInZhbHVlIjoidjVGekJCMjJnWTgwZ0FiWGdXQmt5eUhHcHZ5d0FOWVhoN0xBTW9MNzlUa05aKzJHa2pZakpGR2Y2dVhWeDZLMjJJS2R6UzkwTXg1UmNHaUZIWGJrY2VBNVdyTUJXOUVGaWRGNmIySFZCTmtyeFNqWE9MMytTSlZvMG0yalVPWlIiLCJtYWMiOiIyZDBiYjdhYmE5ZjYwZTg0ZmQzMDEyMTI5MmFkNDNkODRlMzQ2NGNhYjUwOTU4ZGYwOWZkZGVlYWU2OGZkZGE0IiwidGFnIjoiIn0%3D; homeUrl=eyJpdiI6ImhQLy9MWmE3MFpDb3ppdTA0azV5cVE9PSIsInZhbHVlIjoiVFFTQVcxbnp2cFVVTWVab0lMQ09YbTZKTE1rNTV5bWFFSHQ0Z3UydG4ydFNXbUhoVHVFcVpMZkkraGNCOFpGNHdLMFRSNVFuQ1dkSkVxTVd2WWRPUzRIRjVQVkNkeFpMcy91ZHF6aXlBbVRkTFM5OXQvNTJHNSs3Tk9Ka3BhWkIiLCJtYWMiOiJhNzAzMzE1N2U1ZmNlMjMwNGJjNzRmNDNmYWNkOTdlMGY1NzY0NTIwZTY4ZDI2MTYxMDg3NDY2MGIzMTI2ZTlmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:00 GMT
content-type: application/javascript
last-modified: Mon, 23 Jan 2023 11:05:52 GMT
etag: W/"63ce6a10-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OSFFiVHzKAE3XSvpMjUKGtgyZymiyIIcOeAHzUz6j%2F9xjlcx92tUWsplphT1wapeoqFVcf3b9WhXMse%2FxF%2F3ZZm1wVe0MJuseM2BMGbVqQMwu%2BpFfd%2FofVIPqBFILBqDbw4aBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791acccd4c47fac4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 01 Feb 2023 14:12:00 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
ekr.zdassets.com/compose/2ed5d2a5-d4f5-408f-a5c2-8890d860b783
200 OK 0 B URL HTTP/2 ekr.zdassets.com/compose/2ed5d2a5-d4f5-408f-a5c2-8890d860b783
IP
GET /compose/2ed5d2a5-d4f5-408f-a5c2-8890d860b783 HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.kadonation.com
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:01 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cdn-cache-control: max-age=60
cache-control: max-age=600, public, stale-while-revalidate=600, stale-if-error=21600
etag: W/"d89838cc1c6a152c40c7589be259ddd8"
x-request-id: 78ff70b09bed991a-ARN, 78ff70b09bed991a-ARN
x-runtime: 0.002693
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fsUKG9kzgzhkKflzpbmwRfAyDbQ7BJyX04y%2FElj2clq%2BxcZUBCMHFda%2BAlEnynBveg%2B%2B5C77AxFjwkjrPSTmzUm44P8BwTEapuE57bYgaYVs1BWLK3sRXjLMg2kdSoMyLS8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 791accd5ed4db4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2
d18iujfd941xgj.cloudfront.net/assets/site/images/groupgift-steps.webp
200 OK 0 B URL HTTP/2 d18iujfd941xgj.cloudfront.net/assets/site/images/groupgift-steps.webp
IP
GET /assets/site/images/groupgift-steps.webp HTTP/1.1
Host: d18iujfd941xgj.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 186770
last-modified: Tue, 10 Jan 2023 11:16:01 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 29 Jan 2023 21:31:09 GMT
etag: "446418ffe33be4e3aca520bea6f40965"
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hIZyFC2rMfrz1-PBQwuF8LRdn4ReSQMy9Oqi6JBYp5MJQN494iUwig==
age: 60054
vary: Origin
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/web-widget-framework-59b8a859ce8a473d961c.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/web-widget-framework-59b8a859ce8a473d961c.js
IP
GET /web_widget/latest/web-widget-framework-59b8a859ce8a473d961c.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:03 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: eqi5IJQsZltOEPYX18LZfa9yHAtGFvEXQO7zmTiGIn0VvD4F0CwBVgdFmBuHSbbKdhbjAWDPQGE=
x-amz-request-id: JT3WC3ZCPKE9H3EG
x-amz-replication-status: COMPLETED
last-modified: Tue, 24 Jan 2023 07:03:21 GMT
etag: W/"6337d08bfec6eec8c5e9f218e1ca6471"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Wed, 24 Jan 2024 07:03:19 GMT
x-amz-version-id: .eV5Z5rLMQLzZziY1JqjOEi.7xRQkb6M
cf-cache-status: HIT
age: 311950
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ADhk2uYBsgSFiHmiDc3uD%2BgnnA028pcNfJEm5688KRT3rCykG%2FoNSHasvTSz8iPfn%2FUKopnFT5UKE75%2FBbUWu0PrrQz8NbA0Tgl6uemf5HfFHMxIrMSDyJ4ND6zQQBaKgjZFyLg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 791acce1bc49b515-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,400i,600,700|Raleway:700,800&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,400i,600,700|Raleway:700,800&display=swap
IP
GET /css?family=Open+Sans:400,400i,600,700|Raleway:700,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 30 Jan 2023 14:12:00 GMT
date: Mon, 30 Jan 2023 14:12:00 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/96810/domain/app.kadonation.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/96810/domain/app.kadonation.com/token
IP
GET /partner/96810/domain/app.kadonation.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.kadonation.com
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Mon, 30 Jan 2023 12:11:18 GMT
access-control-allow-origin: *
cache-control: public, max-age=13542
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NhNngiUqw__mGDBY5e18vxoKQPRyP6D0KQ6fDwkKy6rvfRxhEvJ6bg==
age: 7244
X-Firefox-Spdy: h2
js.hs-analytics.net/analytics/1675087800000/2246161.js
200 OK 0 B URL HTTP/2 js.hs-analytics.net/analytics/1675087800000/2246161.js
IP
GET /analytics/1675087800000/2246161.js HTTP/1.1
Host: js.hs-analytics.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:02 GMT
content-type: text/javascript
x-amz-id-2: i/JLO7LLMTSmSZLNfxyF6u5Vw6s1R6TKZ54Nf184OVuhMsHNf414sGsqvV0nIhWpbvUo6BL66/k=
x-amz-request-id: YE6106JBS46561N4
last-modified: Thu, 19 Jan 2023 15:06:30 GMT
etag: W/"268583dd1965e55dcba2233aa2fb6609"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: null
access-control-allow-credentials: false
vary: origin, Accept-Encoding
expires: Mon, 30 Jan 2023 14:17:02 GMT
cf-cache-status: MISS
server: cloudflare
cf-ray: 791accdae869b503-OSL
content-encoding: br
X-Firefox-Spdy: h2
app.kadonation.com/
302 Found 0 B IP
GET / HTTP/1.1
Host: app.kadonation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 302 Found
date: Mon, 30 Jan 2023 14:11:59 GMT
content-type: text/html; charset=UTF-8
location: https://app.kadonation.com/en
vary: Accept-Language
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6IlFCMmx4YmZmRmljU1FHeWkvclpHaFE9PSIsInZhbHVlIjoicUdOb3dDcXpXaVdPV0VuSXI1azdKSkZVMmhOUU82MW54cHplMDVVRWEwb3JrNDFWNmhFVVd6OEVjWC84K1k2TVRQK3owekJqc203VTE0bW92ZjJyQ1hEbzJsYzVCbnZBZnp6clZLY3lPcGNjTzA4UkJCT1pPNFltRjVDL015dkQiLCJtYWMiOiJkYzExOTRhZWQ0MzNmMzFmNDM4NmFhOTk3NTViNjEyNjM5MzAwYWE2Nzk3NmY2Y2JhMDkyNDk5MjNhMDAyMjQ5IiwidGFnIjoiIn0%3D; expires=Wed, 01-Feb-2023 14:11:59 GMT; Max-Age=172800; path=/; secure
kadonation_session=eyJpdiI6IlVlM0lockRQcTh6Rlc2Z1Raa2ZsbkE9PSIsInZhbHVlIjoiclBVdU5IcEQwckZvSXdHZGpQdnlveEsxdHFjNVFsYTVzY1Y3bXFhdHFnQ3krWWNVYWpDbEg5cU16U3ZhZlZ4Rm1nU1cvbXRhN1NuNks1U0dTSVVCOVRrUm5ic1NXbUdTZVR2UDJUNGdDaXJDWmpuaUtCUGpUUm5OcGFUSm9lVloiLCJtYWMiOiI0NWUxOWU0ZTAwYmMwMDlmMDBkMmQzYjNiZTkzMTlkZjUxZWZiYWYxNzgxZDdkZWNiOTcwZDcxYzk1NTdjY2MwIiwidGFnIjoiIn0%3D; expires=Wed, 01-Feb-2023 14:11:59 GMT; Max-Age=172800; path=/; secure; httponly
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: ALLOW FROM https://kadonation-bancontact-dev.firebaseapp.com
strict-transport-security: max-age=63072000; includeSubdomains;
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kaXaB%2B4HncQXUfqZqp8lO8jtQsCJI6m%2B%2BJAdpqQPs4yviU0A0r%2FCCLlvp66YonyW4tBsjhr5OWoesiE%2BHJA4aft5TGPJR1vEoBxZBp83Cc%2BfknrKvti1YHX5ZycypoP5YzH4uA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791accc7dfa5fac4-OSL
X-Firefox-Spdy: h2
unpkg.com/micromodal@0.3.2/dist/micromodal.min.js
200 OK 0 B URL HTTP/2 unpkg.com/micromodal@0.3.2/dist/micromodal.min.js
IP
GET /micromodal@0.3.2/dist/micromodal.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:00 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Mon, 12 Mar 2018 14:18:02 GMT
etag: W/"154b-n3dCyO9apYwkviqmMdpnSalw07E"
via: 1.1 fly.io
fly-request-id: 01GDX66G0E36Y1MZH8K7NMN5MW-fra
cf-cache-status: HIT
age: 10882252
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 791acccf6ff9fab4-OSL
content-encoding: br
X-Firefox-Spdy: h2
js.hs-banner.com/v2/2246161/banner.js
200 OK 0 B URL HTTP/2 js.hs-banner.com/v2/2246161/banner.js
IP
GET /v2/2246161/banner.js HTTP/1.1
Host: js.hs-banner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.kadonation.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 14:12:01 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: r5ot9iaUY+IlEOJHWMjlBbElDLK55QJLdsytDJM2a8ltSfPeHW+gtkgbqWFlg/iW6prz32q9/mM=
x-amz-request-id: BHMZNGYVPXEPHVT4
last-modified: Thu, 26 Jan 2023 16:52:20 GMT
etag: W/"592d117fb81810f7a967f7dec85a60fc"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: 7gPxZfYvXZfKpTb2mIvdqQODehngbmzn
access-control-allow-origin: https://app.kadonation.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timing
access-control-allow-credentials: true
access-control-max-age: 604800
timing-allow-origin: *
vary: origin, Accept-Encoding
expires: Mon, 30 Jan 2023 14:17:01 GMT
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 791accd60bc6b51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
104.26.10.202
157.240.205.11
23.36.76.226
93.184.220.29
52.218.84.115
104.17.146.91
2.22.31.170
3.124.14.98