account.worldvision.org/login?state=hKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw&client=xQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_&protocol=oauth2&scope=openid%20email%20profile%20offline_access&audience=https://donate.worldvision.org&response_mode=query&response_type=code&redirect_uri=https://donate.worldvision.org/api/wvus/auth/verify?redirect_to=aHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI=&nonce=053d8f5b15dce9ed55c309bcbe95de0c
104.16.185.248301 Moved Permanently 0 B URL HTTP/1.1 account.worldvision.org/login?state=hKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw&client=xQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_&protocol=oauth2&scope=openid%20email%20profile%20offline_access&audience=https://donate.worldvision.org&response_mode=query&response_type=code&redirect_uri=https://donate.worldvision.org/api/wvus/auth/verify?redirect_to=aHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI=&nonce=053d8f5b15dce9ed55c309bcbe95de0c
IP 104.16.185.248:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /login?state=hKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw&client=xQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_&protocol=oauth2&scope=openid%20email%20profile%20offline_access&audience=https://donate.worldvision.org&response_mode=query&response_type=code&redirect_uri=https://donate.worldvision.org/api/wvus/auth/verify?redirect_to=aHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI=&nonce=053d8f5b15dce9ed55c309bcbe95de0c HTTP/1.1
Host: account.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 07 Feb 2023 19:00:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 07 Feb 2023 20:00:54 GMT
Location: https://account.worldvision.org/login?state=hKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw&client=xQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_&protocol=oauth2&scope=openid%20email%20profile%20offline_access&audience=https://donate.worldvision.org&response_mode=query&response_type=code&redirect_uri=https://donate.worldvision.org/api/wvus/auth/verify?redirect_to=aHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI=&nonce=053d8f5b15dce9ed55c309bcbe95de0c
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 795e5eff6dccb515-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20270
Expires: Wed, 08 Feb 2023 00:38:44 GMT
Date: Tue, 07 Feb 2023 19:00:54 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dca68db7aea32f6683ce8d542c078f04
19c495238df74fca680e21f18627ff94de5dd2e5
35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18276
Expires: Wed, 08 Feb 2023 00:05:30 GMT
Date: Tue, 07 Feb 2023 19:00:54 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14850
Expires: Tue, 07 Feb 2023 23:08:24 GMT
Date: Tue, 07 Feb 2023 19:00:54 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Feb 2023 18:36:32 GMT
content-type: application/json
age: 1462
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: A/lEg2ARwcP3+DuXEe5XTmOLemzvGDgKCh0hXpod6J8aDCNfFK7iiNT7WSGWXVyvkKlwULc+3+8=
x-amz-request-id: VGFKNTWJHQFH4A0W
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Feb 2023 18:45:40 GMT
age: 914
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash f6aa950a95b359c6ecde27920f1bb897
6d648897cd51e81b6381f684c4cfde2e09eaa88f
93e329f0a59a4e9649588d523d2b550c6fcb206dd6ebfd3b2339b299dbf8173f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:54 GMT
Server: ECS (amb/6BB4)
Content-Length: 278
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 19:00:54 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash f6aa950a95b359c6ecde27920f1bb897
6d648897cd51e81b6381f684c4cfde2e09eaa88f
93e329f0a59a4e9649588d523d2b550c6fcb206dd6ebfd3b2339b299dbf8173f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:55 GMT
Last-Modified: Tue, 07 Feb 2023 19:00:54 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 325a8a10ce2837a8c6820e30572d181c
195d6189f0f10fcb301fce3af4c27028bbcb9eaa
2f1a0e948582fa64266617acc77e9beb71c5031d9cffe1bed1393a554f259810
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8d5417d247d259e3c0186136b83d9f75
49fbcf99a352669aee2559579ef73fa60f46d38d
3c013921158ec27e44d5e80a5108557de80a27f38089ac3a52c6c1cf5636f585
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 325a8a10ce2837a8c6820e30572d181c
195d6189f0f10fcb301fce3af4c27028bbcb9eaa
2f1a0e948582fa64266617acc77e9beb71c5031d9cffe1bed1393a554f259810
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8d5417d247d259e3c0186136b83d9f75
49fbcf99a352669aee2559579ef73fa60f46d38d
3c013921158ec27e44d5e80a5108557de80a27f38089ac3a52c6c1cf5636f585
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 848f775f02452b944aa079b08a2250b2
52698a6686eae701b919932e94dc12929ba0ab8e
0b052dc47670eced4338c69f3e84c83095d4e16636c62f6746ea2252c0273525
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4855
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:55 GMT
Last-Modified: Tue, 07 Feb 2023 17:40:00 GMT
Server: ECS (amb/6B81)
X-Cache: HIT
Content-Length: 279
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
142.250.74.138200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP 142.250.74.138:0
File type ASCII text, with very long lines (32077)
Hash fd2b58574f9637ba7ef639267349d848
6eda5ea93f549ceb5693f6f1c038893fa56a510d
75627d4b97e5e6294a8f88f5eeaf9b616696dc8600db9701c47ef05f067880ec
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 05 Feb 2023 03:22:46 GMT
expires: Mon, 05 Feb 2024 03:22:46 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 229089
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googleoptimize.com/optimize.js?id=OPT-MW6JW56
142.250.74.174200 OK 48 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-MW6JW56
IP 142.250.74.174:0
File type ASCII text, with very long lines (1870)
Hash 910c6db3802ed10ca3b44eb91fe8b66c
45521c0b78824586a2b24763c8a69b25fdc5d736
7444378f48288df816894b5d17b2ac6419bde632d27e3549b18e32ea0afe55da
GET /optimize.js?id=OPT-MW6JW56 HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 Feb 2023 19:00:55 GMT
expires: Tue, 07 Feb 2023 19:00:55 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 47795
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4683
Expires: Tue, 07 Feb 2023 20:18:58 GMT
Date: Tue, 07 Feb 2023 19:00:55 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 325a8a10ce2837a8c6820e30572d181c
195d6189f0f10fcb301fce3af4c27028bbcb9eaa
2f1a0e948582fa64266617acc77e9beb71c5031d9cffe1bed1393a554f259810
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-557BVL>m_auth=z_BBVCAVGzAqGVi0DUM1BQ>m_preview=env-7>m_cookies_win=x
142.250.74.168200 OK 116 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-557BVL>m_auth=z_BBVCAVGzAqGVi0DUM1BQ>m_preview=env-7>m_cookies_win=x
IP 142.250.74.168:0
File type ASCII text, with very long lines (58066)
Size 116 kB (116385 bytes)
Hash ec3137b2dfd26a439fee5ec065de7166
5c3984b388e47e1200d3579a57849bf9c7ea7d9d
69444884ba937228f8b3a843c961e0db3553503f2b23494df5d097f09576b661
GET /gtm.js?id=GTM-557BVL>m_auth=z_BBVCAVGzAqGVi0DUM1BQ>m_preview=env-7>m_cookies_win=x HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: *
date: Tue, 07 Feb 2023 19:00:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 116385
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 325a8a10ce2837a8c6820e30572d181c
195d6189f0f10fcb301fce3af4c27028bbcb9eaa
2f1a0e948582fa64266617acc77e9beb71c5031d9cffe1bed1393a554f259810
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8d5417d247d259e3c0186136b83d9f75
49fbcf99a352669aee2559579ef73fa60f46d38d
3c013921158ec27e44d5e80a5108557de80a27f38089ac3a52c6c1cf5636f585
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8d5417d247d259e3c0186136b83d9f75
49fbcf99a352669aee2559579ef73fa60f46d38d
3c013921158ec27e44d5e80a5108557de80a27f38089ac3a52c6c1cf5636f585
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash 2da214d9336dca3dfb66b7ded496b46e
bc82d3e948f0e549e6e58fd203e70752e6722997
2c0c80544d37c02fa8e86917b577ee53ac9069d14d138071bd085c75bb80f91c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=162735
Date: Tue, 07 Feb 2023 19:00:55 GMT
Etag: "63e27896-1d7"
Expires: Thu, 09 Feb 2023 16:13:10 GMT
Last-Modified: Tue, 07 Feb 2023 16:13:10 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QpeBb2rjsKdLYNrQCxtHJKWhjuFV3h66xzyQEPjjuPbzQsjtgy2BbA==
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 1ed5588b31b6bd145035d80a2498a315
a71b792961419b0075de022a5d72ef4962fa1384
2212e3a029b0735535902c44483d6070a6f1187ed7acdfb320349a1de2e1d7cb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:55 GMT
Server: ECS (amb/6B81)
Content-Length: 279
donate.worldvision.org/wp-content/themes/wvecomm/vendor/wvus/swing/dist/css/swing.min.css
104.22.8.53200 OK 37 kB URL HTTP/2 donate.worldvision.org/wp-content/themes/wvecomm/vendor/wvus/swing/dist/css/swing.min.css
IP 104.22.8.53:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash d38ab9fba4fe29b4700134e3cab1d218
53dcf96f9ba3d8144d62c4e7d0d30c9d4a2e7c0c
ec36f11def15fddad37eb030a77ac19119b8180fb1d8bcfe7e0ae06cb1107e17
GET /wp-content/themes/wvecomm/vendor/wvus/swing/dist/css/swing.min.css HTTP/1.1
Host: donate.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 19:00:55 GMT
content-type: text/css
content-length: 36681
cache-control: max-age=31622400
content-encoding: gzip
etag: W/"63e18382-2e09e"
expires: Wed, 07 Feb 2024 22:50:35 GMT
last-modified: Mon, 06 Feb 2023 22:47:30 GMT
x-pantheon-styx-hostname: styx-fe3-a-78b86bbbd4-vzwbm
x-styx-req-id: aae6fa02-a670-11ed-9694-0eacb3754b7f
x-served-by: cache-chi-klot8100036-CHI, cache-bma1643-BMA
x-cache: HIT, HIT
x-cache-hits: 19, 1
x-timer: S1675796456.515547,VS0,VE12
vary: Accept-Encoding
age: 72621
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 795e5f06b91fb50f-OSL
X-Firefox-Spdy: h2
push.services.mozilla.com/
44.227.59.33101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.227.59.33:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: iLloSUzZEpFZmv3wk61p3g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8SVEWAgdPK0Wul/B9RUA7PHC+P4=
datalayerjs.z13.web.core.windows.net/v1.4.2/auth0.bundle.js?ver=1.4.2
20.60.135.193200 OK 3.3 kB URL HTTP/1.1 datalayerjs.z13.web.core.windows.net/v1.4.2/auth0.bundle.js?ver=1.4.2
IP 20.60.135.193:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (3271)
Hash 67c6ed93d5ca6115fd46c15a538f7242
6d968d6306dfc39edf1618840d8695be7be1d2e3
36cd42ef731867f8163e3fef4af94bc3be8f5484564e2eba2e3598ea48c06267
GET /v1.4.2/auth0.bundle.js?ver=1.4.2 HTTP/1.1
Host: datalayerjs.z13.web.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 3312
Content-Type: application/javascript
Content-MD5: Z8btk9XKYRX9RsFaU49yQg==
Last-Modified: Mon, 07 Nov 2022 21:19:33 GMT
Accept-Ranges: bytes
ETag: "0x8DAC105C3CA5614"
Vary: Origin
Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: ff757c67-f01e-0021-5e26-3bd4fd000000
x-ms-version: 2018-03-28
Date: Tue, 07 Feb 2023 19:00:55 GMT
js.adsrvr.org/up_loader.1.1.0.js
54.230.241.118200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP 54.230.241.118:0
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8dc722d27824e60548fd25752623cd07
33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 07 Feb 2023 07:31:39 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -wdPZH2UNHx_Al82WPT288iDCqMdVxrOR5Kzy_rL9x_RshpFMRt_vw==
Age: 41357
platform.twitter.com/oct.js
93.184.220.66301 Moved Permanently 0 B URL HTTP/1.1 platform.twitter.com/oct.js
IP 93.184.220.66:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /oct.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Date: Tue, 07 Feb 2023 19:00:55 GMT
Location: https://static.ads-twitter.com/oct.js
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F709)
Server-Timing: x-cache;desc= ,x-tw-cdn;desc=VZ
x-tw-cdn: VZ
Content-Length: 0
bc.worldvision.org/script.js
54.230.111.69200 OK 40 kB URL HTTP/2 bc.worldvision.org/script.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (14591)
Hash 11604c952c5d137b5b90346b643b1d0e
b0644cd8968e4b8eb4cde029aef3da3d792d567c
67b871fe2f785e2c28d717fbaeae62938461359b0ec83860ddb1d70903aa1f3b
GET /script.js HTTP/1.1
Host: bc.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 39886
date: Tue, 07 Feb 2023 19:00:55 GMT
set-cookie: AWSALB=SYE9RRfvL0+0sQYRJmBEvYknbcgN4XQE3rIPf4AkluZcnPZnCBRu02SygenaF2w0jRcHFt2TYIKhOOZKjGxx8233HypCI1SBEhPqlo78WHTLTDHlszI65zRi/A18; Expires=Tue, 14 Feb 2023 19:00:55 GMT; Path=/
AWSALBCORS=SYE9RRfvL0+0sQYRJmBEvYknbcgN4XQE3rIPf4AkluZcnPZnCBRu02SygenaF2w0jRcHFt2TYIKhOOZKjGxx8233HypCI1SBEhPqlo78WHTLTDHlszI65zRi/A18; Expires=Tue, 14 Feb 2023 19:00:55 GMT; Path=/; SameSite=None; Secure
server: -
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
p3p: policyref="", CP="DSP"
expires: Tue, 07 Feb 2023 19:10:55 GMT
last-modified: Tue, 07 Feb 2023 19:00:16 GMT
cache-control: public, no-cache="Set-Cookie", max-age=600
content-encoding: gzip
etag: 94fc486a8833b78708cc3a50ca6e4003
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Jcn1QWWdrL8LBXZM9au4fiMelm1H2rWeE72kyzsWVgXzLbrgUafnXQ==
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-VCJEX7GSMS>m=45je3260&_p=1158933531&cid=1486086217.1675796506&ul=en-us&sr=1280x1024&uaW=1&_s=1&dl=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&sid=1675796506&sct=1&seg=0&dt=Login%20%7C%20World%20Vision&en=page_view&_fv=1&_nsi=1&_ss=1&ep.previous_page_name=&ep.hit_timestamp=2023-02-07T19%3A01%3A46.332%2B00%3A00&ep.event=page_view
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-VCJEX7GSMS>m=45je3260&_p=1158933531&cid=1486086217.1675796506&ul=en-us&sr=1280x1024&uaW=1&_s=1&dl=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&sid=1675796506&sct=1&seg=0&dt=Login%20%7C%20World%20Vision&en=page_view&_fv=1&_nsi=1&_ss=1&ep.previous_page_name=&ep.hit_timestamp=2023-02-07T19%3A01%3A46.332%2B00%3A00&ep.event=page_view
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-VCJEX7GSMS>m=45je3260&_p=1158933531&cid=1486086217.1675796506&ul=en-us&sr=1280x1024&uaW=1&_s=1&dl=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&sid=1675796506&sct=1&seg=0&dt=Login%20%7C%20World%20Vision&en=page_view&_fv=1&_nsi=1&_ss=1&ep.previous_page_name=&ep.hit_timestamp=2023-02-07T19%3A01%3A46.332%2B00%3A00&ep.event=page_view HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: null
date: Tue, 07 Feb 2023 19:00:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
23.36.76.210200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP 23.36.76.210:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13351)
Hash 74f72658f6efd10c4c286ab07cd5e452
9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=51256
date: Tue, 07 Feb 2023 19:00:56 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.14200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.14:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Tue, 07 Feb 2023 17:45:20 GMT
expires: Tue, 07 Feb 2023 19:45:20 GMT
cache-control: public, max-age=7200
age: 4536
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.ads-twitter.com/oct.js
151.101.244.157200 OK 15 kB URL HTTP/2 static.ads-twitter.com/oct.js
IP 151.101.244.157:0
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /oct.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Tue, 07 Feb 2023 19:00:56 GMT
x-served-by: cache-iad-kiad7000092-IAD, cache-hel1410028-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
bc.worldvision.org/DG/DEFAULT/rest/rpc/631?referer=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&bcsessionid=&bctempid=&overruleReferrer=&time=2023-02-07T19%3A01%3A46%2B00%3A00&ts=1675796506884
54.230.111.69200 OK 6.2 kB URL HTTP/2 bc.worldvision.org/DG/DEFAULT/rest/rpc/631?referer=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&bcsessionid=&bctempid=&overruleReferrer=&time=2023-02-07T19%3A01%3A46%2B00%3A00&ts=1675796506884
IP 54.230.111.69:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (30143), with no line terminators
Hash cf3c5495c755b5a1b6cce6ad0bc527d7
d3f184c538a8195b8acc4284430d470896675e2e
802dd7e0d5bbc62d16098963cb6f86ca57ddac036ec9195da8b565e0e9a88459
POST /DG/DEFAULT/rest/rpc/631?referer=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&bcsessionid=&bctempid=&overruleReferrer=&time=2023-02-07T19%3A01%3A46%2B00%3A00&ts=1675796506884 HTTP/1.1
Host: bc.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1282
Origin: https://account.worldvision.org
Connection: keep-alive
Cookie: _gcl_au=1.1.1236419608.1675796506; _ga_VCJEX7GSMS=GS1.1.1675796506.1.0.1675796506.0.0.0; _ga=GA1.1.1486086217.1675796506; AWSALB=SYE9RRfvL0+0sQYRJmBEvYknbcgN4XQE3rIPf4AkluZcnPZnCBRu02SygenaF2w0jRcHFt2TYIKhOOZKjGxx8233HypCI1SBEhPqlo78WHTLTDHlszI65zRi/A18; AWSALBCORS=SYE9RRfvL0+0sQYRJmBEvYknbcgN4XQE3rIPf4AkluZcnPZnCBRu02SygenaF2w0jRcHFt2TYIKhOOZKjGxx8233HypCI1SBEhPqlo78WHTLTDHlszI65zRi/A18
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 6183
date: Tue, 07 Feb 2023 19:00:56 GMT
set-cookie: AWSALB=mEyxKhwdHJ57PNGKlMLxQVbzXpoC+DsRjB6nBthwI9Nn8TSMl6NJ+C3R8f6XdB9vmQDai5LOKiF66Eby6bNjdjmukP/HzvPmeUsPEoLAcffEMvmw+SZUN3X8SM79; Expires=Tue, 14 Feb 2023 19:00:56 GMT; Path=/
AWSALBCORS=mEyxKhwdHJ57PNGKlMLxQVbzXpoC+DsRjB6nBthwI9Nn8TSMl6NJ+C3R8f6XdB9vmQDai5LOKiF66Eby6bNjdjmukP/HzvPmeUsPEoLAcffEMvmw+SZUN3X8SM79; Expires=Tue, 14 Feb 2023 19:00:56 GMT; Path=/; SameSite=None; Secure
BCTempID=4ab35957-363f-4b4d-948c-ec0846480b78;Path=/DG/DEFAULT;Expires=Tue, 07-Feb-2023 19:10:56 GMT;Secure;SameSite=None
BCReferrerOverrule="";Version=1;Path=/;Expires=Thu, 01-Jan-1970 00:00:00 GMT;Max-Age=0;Secure;HttpOnly;SameSite=None
server: -
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
p3p: policyref="", CP="DSP"
access-control-allow-origin: https://account.worldvision.org
access-control-allow-credentials: true
accept-ch: sec-ch-ua-platform-version
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: m1Iu05yKjWs_7BkPL5peHHK3XgvdbEmO3dpgNlkasa-qiEJVDnR94g==
X-Firefox-Spdy: h2
donate.worldvision.org/wp-content/themes/wvecomm/assets/favicons/favicon.ico
104.22.8.53200 OK 1.6 kB URL HTTP/2 donate.worldvision.org/wp-content/themes/wvecomm/assets/favicons/favicon.ico
IP 104.22.8.53:0
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash dafb32ea6e1d08cd4377dbd79f0be030
5c1392fba0a89b5a64aa1c633ea190a6d3bb5b53
457c552d4d4d38ca7d8438bbf97d28d2e26df7b24f7776f875b0440caf2c71cc
GET /wp-content/themes/wvecomm/assets/favicons/favicon.ico HTTP/1.1
Host: donate.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _gcl_au=1.1.1236419608.1675796506; _ga_VCJEX7GSMS=GS1.1.1675796506.1.0.1675796506.0.0.0; _ga=GA1.1.1486086217.1675796506
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 19:00:56 GMT
content-type: image/x-icon
content-length: 1600
cache-control: max-age=31622400
etag: "63e1835d-3aee"
expires: Thu, 08 Feb 2024 15:48:50 GMT
last-modified: Mon, 06 Feb 2023 22:46:53 GMT
x-pantheon-styx-hostname: styx-fe3-a-76d7f68c7-f2h26
x-styx-req-id: ea4d4549-a6fe-11ed-85b9-c68fa17cfd10
content-encoding: gzip
x-served-by: cache-chi-kigq8000133-CHI, cache-bma1643-BMA
x-cache: HIT, MISS
x-cache-hits: 1, 0
x-timer: S1675796456.299424,VS0,VE104
vary: Accept-Encoding
age: 11526
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 795e5f0bc95db50f-OSL
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 5e8c3b7e459be18022a1b1b5a0fd2efc
7f08c0311a0de4d3840ef80505b7491c7dbfb81e
b923e8a292eec4cf74f4e55484fca7426a8b98f8ad4b5eb75d5a5098d966968e
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 07 Feb 2023 19:00:56 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 07 Feb 2023 04:35:38 GMT
Expires: Wed, 08 Feb 2023 04:35:38 GMT
ETag: "7f08c0311a0de4d3840ef80505b7491c7dbfb81e"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
bc.worldvision.org/plugin/plugin/ab81d04c188a1c52fd945c852f8f4ea3
54.230.111.69200 OK 28 kB URL HTTP/2 bc.worldvision.org/plugin/plugin/ab81d04c188a1c52fd945c852f8f4ea3
IP 54.230.111.69:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 53c8cd1309f59fe740053bec776733db
b2772ac2a5950159545e6fbb443d72eae20011d8
cbd4a901f901026bf53575adad4380f09b5e677ac1705d2760700f411c347ebc
GET /plugin/plugin/ab81d04c188a1c52fd945c852f8f4ea3 HTTP/1.1
Host: bc.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _gcl_au=1.1.1236419608.1675796506; _ga_VCJEX7GSMS=GS1.1.1675796506.1.0.1675796506.0.0.0; _ga=GA1.2.1486086217.1675796506; AWSALB=mEyxKhwdHJ57PNGKlMLxQVbzXpoC+DsRjB6nBthwI9Nn8TSMl6NJ+C3R8f6XdB9vmQDai5LOKiF66Eby6bNjdjmukP/HzvPmeUsPEoLAcffEMvmw+SZUN3X8SM79; AWSALBCORS=mEyxKhwdHJ57PNGKlMLxQVbzXpoC+DsRjB6nBthwI9Nn8TSMl6NJ+C3R8f6XdB9vmQDai5LOKiF66Eby6bNjdjmukP/HzvPmeUsPEoLAcffEMvmw+SZUN3X8SM79; _gid=GA1.2.2009281210.1675796507
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 27795
date: Sun, 15 Jan 2023 01:29:07 GMT
server: -
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
p3p: policyref="", CP="DSP"
cache-control: public, no-cache="Set-Cookie", max-age=31536000
etag: ab81d04c188a1c52fd945c852f8f4ea3
expires: Mon, 15 Jan 2024 01:29:07 GMT
last-modified: Sat, 14 Jan 2023 01:29:07 GMT
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uBBoWimhoVO7qyuGYOqF-IsY1bCUJi0mmy1cKqfzM8DByGewPJrrWg==
age: 2050309
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash 54d649dc77722e12f2c9d165fbcf6608
e92dff115a46cd6f4dbab7cac74429aaa2d9c9ff
a9721eb4f4df631abe0bd13017c77d2384747f33e89c199bc7cd3d1109b37772
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5065
Cache-Control: max-age=157707
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:56 GMT
Etag: "63e2512a-139"
Expires: Thu, 09 Feb 2023 14:49:23 GMT
Last-Modified: Tue, 07 Feb 2023 13:24:58 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 313
bc.worldvision.org/plugin/library/840bb966930390e0b9053724d3bbb639
54.230.111.69200 OK 93 kB URL HTTP/2 bc.worldvision.org/plugin/library/840bb966930390e0b9053724d3bbb639
IP 54.230.111.69:0
File type Unicode text, UTF-8 text, with very long lines (25706)
Hash 28d6fa1f7688e490a093834526a50f67
fc18cc19837da9ca3e18c7b51723181c0f35151f
7e444b8f8d431b09250d4eb10e02d8464d44afe7c80feb894ea19ec52804339b
GET /plugin/library/840bb966930390e0b9053724d3bbb639 HTTP/1.1
Host: bc.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _gcl_au=1.1.1236419608.1675796506; _ga_VCJEX7GSMS=GS1.1.1675796506.1.0.1675796506.0.0.0; _ga=GA1.2.1486086217.1675796506; AWSALB=mEyxKhwdHJ57PNGKlMLxQVbzXpoC+DsRjB6nBthwI9Nn8TSMl6NJ+C3R8f6XdB9vmQDai5LOKiF66Eby6bNjdjmukP/HzvPmeUsPEoLAcffEMvmw+SZUN3X8SM79; AWSALBCORS=mEyxKhwdHJ57PNGKlMLxQVbzXpoC+DsRjB6nBthwI9Nn8TSMl6NJ+C3R8f6XdB9vmQDai5LOKiF66Eby6bNjdjmukP/HzvPmeUsPEoLAcffEMvmw+SZUN3X8SM79; _gid=GA1.2.2009281210.1675796507
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 92779
date: Thu, 02 Feb 2023 23:22:34 GMT
server: -
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
p3p: policyref="", CP="DSP"
cache-control: public, no-cache="Set-Cookie", max-age=31536000
etag: 840bb966930390e0b9053724d3bbb639
expires: Fri, 02 Feb 2024 23:22:34 GMT
last-modified: Wed, 01 Feb 2023 23:22:34 GMT
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S7YttQkgOFF3tqFHmW7RQ3iXvWy87dJZz4GvKqHXAXSJD7Jh2NLfAA==
age: 416302
X-Firefox-Spdy: h2
dx.mountain.com/spx?dxver=4.0.0&shaid=33060&tdr=&plh=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&cb=91970523209872210term=value
35.83.209.52200 OK 4.5 kB URL HTTP/1.1 dx.mountain.com/spx?dxver=4.0.0&shaid=33060&tdr=&plh=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&cb=91970523209872210term=value
IP 35.83.209.52:0
File type ASCII text, with very long lines (15999), with no line terminators
Hash 752131a7f769c4322825c575c3ceba6e
6977a60431ebc75a3baec9e52706596360afa522
da2a393c94dee311904998b0adf8f75a2786a9b81886ad0b303abb16ca81b703
GET /spx?dxver=4.0.0&shaid=33060&tdr=&plh=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&cb=91970523209872210term=value HTTP/1.1
Host: dx.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Tue, 07 Feb 2023 19:00:56 GMT
x-envoy-upstream-service-time: 3
server: istio-envoy
connection: close
transfer-encoding: chunked
t.co/i/adsct?bci=1&eci=1&event_id=86f64295-bcfc-49c4-979a-19181ab86d27&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=6874ac94-20ca-4326-9206-4c0ac9a81833&tw_document_href=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=l4e9n&type=javascript&version=2.3.29
104.244.42.69200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=1&eci=1&event_id=86f64295-bcfc-49c4-979a-19181ab86d27&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=6874ac94-20ca-4326-9206-4c0ac9a81833&tw_document_href=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=l4e9n&type=javascript&version=2.3.29
IP 104.244.42.69:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=1&eci=1&event_id=86f64295-bcfc-49c4-979a-19181ab86d27&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=6874ac94-20ca-4326-9206-4c0ac9a81833&tw_document_href=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=l4e9n&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 19:00:55 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=4e99ddf1-d18e-4362-89ec-904fc521f478; Max-Age=63072000; Expires=Thu, 06 Feb 2025 19:00:56 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: dc2f4f0d5270c50c
strict-transport-security: max-age=0
x-response-time: 112
x-connection-hash: 0459735f53c1d046a6a11009e9e08f5647456f8ef18914b75cc2a4635773cfe7
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
87.248.119.251200 OK 74 kB IP 87.248.119.251:0
ASN #203220 Yahoo! UK Services Limited
Hash 84a4495d8f78ccdb2a9f2ce5e9140d5d
b9b31d4f698cd57cf3146993353a7ca78105355e
1d60dba90d3e68e21c9c9632654e2f0834874e294bdf40d01595aff1609003f0
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: vhKj53kkUsT2rT14a1OG4NumhVwbVeitlGDxN3Kc3lWPm5uNfTw+mlSLDIEvvmP1b1Ud+ojqXWM=
x-amz-request-id: QAN79GEP6Z20M0HP
date: Tue, 07 Feb 2023 19:00:50 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 7
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash 1695f3a9265230bf47957c3e7b6b7cae
95bd5103b9b72bc64e5384727c2b73d1d5c63bbd
86f2fdae49e829d66d62a1054c38bdc7e549169bc351dd6cb8b6a09bfa4a9753
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2013
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:56 GMT
Last-Modified: Tue, 07 Feb 2023 18:27:23 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 313
bc.worldvision.org/DG/DEFAULT/rest/rpc/631?referer=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&bcsessionid=&bctempid=4ab35957-363f-4b4d-948c-ec0846480b78&overruleReferrer=&time=2023-02-07T19%3A01%3A47%2B00%3A00&ts=1675796507395
54.230.111.69200 OK 1.1 kB URL HTTP/2 bc.worldvision.org/DG/DEFAULT/rest/rpc/631?referer=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&bcsessionid=&bctempid=4ab35957-363f-4b4d-948c-ec0846480b78&overruleReferrer=&time=2023-02-07T19%3A01%3A47%2B00%3A00&ts=1675796507395
IP 54.230.111.69:0
File type JSON data\012- , ASCII text, with very long lines (2134), with no line terminators
Hash e8ad959d9e13bf63b5d16451e90f366b
a0d8bfe2472ea62e1d9d35844250c82c036bca4a
cd6d7cae62e1e0f71164b91cfcb46caacae0220bb3e2fbe418edd6609f178189
POST /DG/DEFAULT/rest/rpc/631?referer=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&bcsessionid=&bctempid=4ab35957-363f-4b4d-948c-ec0846480b78&overruleReferrer=&time=2023-02-07T19%3A01%3A47%2B00%3A00&ts=1675796507395 HTTP/1.1
Host: bc.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1239
Origin: https://account.worldvision.org
Connection: keep-alive
Cookie: BCTempID=4ab35957-363f-4b4d-948c-ec0846480b78; _gcl_au=1.1.1236419608.1675796506; _ga_VCJEX7GSMS=GS1.1.1675796506.1.0.1675796506.0.0.0; _ga=GA1.2.1486086217.1675796506; AWSALB=mEyxKhwdHJ57PNGKlMLxQVbzXpoC+DsRjB6nBthwI9Nn8TSMl6NJ+C3R8f6XdB9vmQDai5LOKiF66Eby6bNjdjmukP/HzvPmeUsPEoLAcffEMvmw+SZUN3X8SM79; AWSALBCORS=mEyxKhwdHJ57PNGKlMLxQVbzXpoC+DsRjB6nBthwI9Nn8TSMl6NJ+C3R8f6XdB9vmQDai5LOKiF66Eby6bNjdjmukP/HzvPmeUsPEoLAcffEMvmw+SZUN3X8SM79; _gid=GA1.2.2009281210.1675796507
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 1077
date: Tue, 07 Feb 2023 19:00:56 GMT
set-cookie: AWSALB=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; Expires=Tue, 14 Feb 2023 19:00:56 GMT; Path=/
AWSALBCORS=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; Expires=Tue, 14 Feb 2023 19:00:56 GMT; Path=/; SameSite=None; Secure
BCSessionID=4ab35957-363f-4b4d-948c-ec0846480b78;Path=/DG/DEFAULT;Expires=Wed, 13-Mar-2024 19:00:56 GMT;Secure;SameSite=None
BCTempID="";Version=1;Path=/DG/DEFAULT;Expires=Thu, 01-Jan-1970 00:00:00 GMT;Max-Age=0;Secure;SameSite=None
server: -
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
p3p: policyref="", CP="DSP"
access-control-allow-origin: https://account.worldvision.org
access-control-allow-credentials: true
accept-ch: sec-ch-ua-platform-version
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ECCrEhIp36FwI1GB8QeOu_mYEoJHKpyOfDr78mJ7lkhPJ8AEVH6jiw==
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3204
Expires: Tue, 07 Feb 2023 19:54:20 GMT
Date: Tue, 07 Feb 2023 19:00:56 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3204
Expires: Tue, 07 Feb 2023 19:54:20 GMT
Date: Tue, 07 Feb 2023 19:00:56 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3204
Expires: Tue, 07 Feb 2023 19:54:20 GMT
Date: Tue, 07 Feb 2023 19:00:56 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a24cf7b2db6d65c3fe5daf78b3309ced
a3653a9a7baea412808dd91572ff21e1a505c26f
f55ee98bab5ce53d6acc1cac7f54f089b42d5f2ffbe750d869c4f4a7bc26f715
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13230
x-amzn-requestid: 8171829a-cf6d-4c33-99a1-f3cef7cd4475
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiTH8GoAMFYLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-1597a0f06ef3db2534a101aa;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MmO3oxbCoPs-WdN8SL9AuudkfErRRcTp6mkr2LRIfS6YPVe6UGBDFQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 01:47:23 GMT
age: 62013
etag: "a3653a9a7baea412808dd91572ff21e1a505c26f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75b0935816ca54d5d20a9fffa5531e0d
bd8374980c16b7d5a28e55b8bef2215713b1ebb2
4ab6f49d22d029681754b617001f93467d63035acdaf12905c2314cab77991af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13390
x-amzn-requestid: e7653b49-3160-42e3-8292-8ae32604f775
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpc8KEoPoAMFrUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da0eb4-68fd76a95ffa656318bedff6;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 07:03:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KaitXsesZ9mJducJ54ChzQGfb-2-hEN4W_QojGMKXYEji4xsjNdWCA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 18:44:41 GMT
age: 975
etag: "bd8374980c16b7d5a28e55b8bef2215713b1ebb2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 7ec32dff957003dae195c36ca9e3bd6c
6761a20819b0d5a48216d74782e3ea752af7257a
953a3a2d35250df7b506b42f7d1d8813301dd1f9f9bcc30d2d100bd0788e4c76
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ba57757-8c86-4311-801e-5e416095984a.jpeg
34.120.237.76200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ba57757-8c86-4311-801e-5e416095984a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7d8c3ebd17a435401c7f9fe3b8f842be
f2106be148fea23bf961fcdb69ea4cb127aa5f3e
ee708e68414539c75ddc077e0be7b75a86fd4fc9b6c1ddd1da86d0b9aca35558
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ba57757-8c86-4311-801e-5e416095984a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4442
x-amzn-requestid: 1bb3d1b3-ff58-4b0d-9a2b-c25797530c5d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiQG1JoAMFRtg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-1bb478453ececa9613e7e4a2;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9U-7wtL1xaLoE87hXcnrcTp-LCseI5ne10812N_9F_arqyi703w7Ng==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:50:11 GMT
age: 76245
etag: "f2106be148fea23bf961fcdb69ea4cb127aa5f3e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09b3928-4257-4aee-9978-7c13c20b5a23.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09b3928-4257-4aee-9978-7c13c20b5a23.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92008e687831334af1cdbf4b8a57579f
e6ff750f12836637adf5b253d64c2102fdf3c180
39af3e630e0271b54139849c1b596efbdc69a23ce943e5330341d49f77798c7c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd09b3928-4257-4aee-9978-7c13c20b5a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7183
x-amzn-requestid: 02695a8d-2ab8-4d77-bfbe-f99418d8ef00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f78YOGsyoAMF5wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e17434-2614cef4059e7fd5009cb46d;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:42:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5wy_7Z30HRIcZufSPCTKu9UoJD1o_NDlhuyL5bvidDwbqC_3p99yYA==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:44:57 GMT
age: 76559
etag: "e6ff750f12836637adf5b253d64c2102fdf3c180"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
34.120.237.76200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eedb4de12585c70ddb5b8f94fe6a59e2
83c9437e71a0a03b3e8ff652155a85eafa76cdda
d4493a30f62e9ad224b3595ba3af8a322e2d4a3d9238a1847973f962bdcc0c82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4227
x-amzn-requestid: b45f2ab7-0102-4542-9514-54fb93a0e27f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77sTH4jIAMFnsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1731b-4a24bcb1102e58543cd81343;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: V_4NzIAVBOZMjf_YIM3bowFdlP1y4peI5JI-jO105s3NVjmyYnC0Tg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:48:48 GMT
age: 76328
etag: "83c9437e71a0a03b3e8ff652155a85eafa76cdda"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c86a61b-07c3-45f6-b564-e556eb788d04.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c86a61b-07c3-45f6-b564-e556eb788d04.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 59419fb1cf4689bed183d0e9a6aed782
47d4a4bb26fafff0c6aebfe3dc7ddfa4970f8e9a
e6009407bd61bee1ae16ec30ea5914be77c56ee65dfb30595b10a1cedc6798c9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c86a61b-07c3-45f6-b564-e556eb788d04.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12682
x-amzn-requestid: d858d90a-b1ca-401c-8e00-8ccd9c0a7504
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f78mUEsfIAMFreg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1748e-2783de3e3de9c520246bf06e;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:43:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: eq8Kle9uYWJ3vmaJD50r-oaTb_O2ObQgLNlTcYn9XQoHCyAO3isqyQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:44:49 GMT
age: 76567
etag: "47d4a4bb26fafff0c6aebfe3dc7ddfa4970f8e9a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 7ec32dff957003dae195c36ca9e3bd6c
6761a20819b0d5a48216d74782e3ea752af7257a
953a3a2d35250df7b506b42f7d1d8813301dd1f9f9bcc30d2d100bd0788e4c76
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-81492135-1&cid=1486086217.1675796506&jid=1411523068&gjid=336620056&_gid=2009281210.1675796507&_u=aDDAAEAiAAAAACAAI~&z=1091911723
64.233.162.156200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-81492135-1&cid=1486086217.1675796506&jid=1411523068&gjid=336620056&_gid=2009281210.1675796507&_u=aDDAAEAiAAAAACAAI~&z=1091911723
IP 64.233.162.156:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-81492135-1&cid=1486086217.1675796506&jid=1411523068&gjid=336620056&_gid=2009281210.1675796507&_u=aDDAAEAiAAAAACAAI~&z=1091911723 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://account.worldvision.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://account.worldvision.org
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 07 Feb 2023 19:00:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-91191700-18&cid=1486086217.1675796506&jid=242988339&gjid=1214771422&_gid=2009281210.1675796507&_u=aDDAAEAjAAAAACAEK~&z=520504403
64.233.162.156200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-91191700-18&cid=1486086217.1675796506&jid=242988339&gjid=1214771422&_gid=2009281210.1675796507&_u=aDDAAEAjAAAAACAEK~&z=520504403
IP 64.233.162.156:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-91191700-18&cid=1486086217.1675796506&jid=242988339&gjid=1214771422&_gid=2009281210.1675796507&_u=aDDAAEAjAAAAACAEK~&z=520504403 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://account.worldvision.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://account.worldvision.org
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 07 Feb 2023 19:00:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bc.worldvision.org/gallery/listener_interest_ranker/1.4.5/frontend/src/js/stopwords.js
54.230.111.69200 OK 2.3 kB URL HTTP/2 bc.worldvision.org/gallery/listener_interest_ranker/1.4.5/frontend/src/js/stopwords.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (6770), with no line terminators
Hash 7fd23fb0a4ad5cba6126342cf3e012bc
95bccd80ff4bb1fbec560dc661fb02bc62cda2a8
1c537d8f69942d0c69130589c824207f1df137b0251a72810597e9bb74871e9a
GET /gallery/listener_interest_ranker/1.4.5/frontend/src/js/stopwords.js HTTP/1.1
Host: bc.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _gcl_au=1.1.1236419608.1675796506; _ga_VCJEX7GSMS=GS1.1.1675796506.1.0.1675796506.0.0.0; _ga=GA1.2.1486086217.1675796506; AWSALB=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; AWSALBCORS=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; _gid=GA1.2.2009281210.1675796507; _gat_UA-81492135-1=1; _gat_UA-91191700-18=1; _hjSessionUser_167107=eyJpZCI6ImY0YjdkYjNiLTQ5ZWYtNTEzNC1hODNiLTcxMTcyMWQ1NzBjNyIsImNyZWF0ZWQiOjE2NzU3OTY1MDc4MTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_167107=eyJpZCI6IjljNTIxNTFiLTcyYTQtNGI1ZC1hMmQxLTdlMmM0NTNiNGEwZSIsImNyZWF0ZWQiOjE2NzU3OTY1MDc4MzQsImluU2FtcGxlIjp0cnVlfQ==; _hjAbsoluteSessionInProgress=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 2295
date: Tue, 07 Feb 2023 01:00:47 GMT
server: -
last-modified: Mon, 07 Mar 2022 12:35:38 GMT
etag: "1a72-5d9a01a041840-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 09 Mar 2023 01:00:47 GMT
content-encoding: gzip
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hKl4SYclwDjc3481CN8CLgvatuQTtnDD8mNP8KkplkQiIZyE6fw4Kg==
age: 64810
X-Firefox-Spdy: h2
bc.worldvision.org/gallery/listener_interest_ranker/1.4.5/frontend/src/js/reservedterms.js
54.230.111.69200 OK 155 B URL HTTP/2 bc.worldvision.org/gallery/listener_interest_ranker/1.4.5/frontend/src/js/reservedterms.js
IP 54.230.111.69:0
File type ASCII text, with no line terminators
Hash f24f546d4a2349aee5bca53ac7e46760
2cb576f83b0f456c5f4e04fec45ee7b53bd4cc22
ade652d199fdd3efbefae136f4b3f32d68def3e1174b6a91b7a250741a9ad589
GET /gallery/listener_interest_ranker/1.4.5/frontend/src/js/reservedterms.js HTTP/1.1
Host: bc.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _gcl_au=1.1.1236419608.1675796506; _ga_VCJEX7GSMS=GS1.1.1675796506.1.0.1675796506.0.0.0; _ga=GA1.2.1486086217.1675796506; AWSALB=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; AWSALBCORS=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; _gid=GA1.2.2009281210.1675796507; _gat_UA-81492135-1=1; _gat_UA-91191700-18=1; _hjSessionUser_167107=eyJpZCI6ImY0YjdkYjNiLTQ5ZWYtNTEzNC1hODNiLTcxMTcyMWQ1NzBjNyIsImNyZWF0ZWQiOjE2NzU3OTY1MDc4MTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_167107=eyJpZCI6IjljNTIxNTFiLTcyYTQtNGI1ZC1hMmQxLTdlMmM0NTNiNGEwZSIsImNyZWF0ZWQiOjE2NzU3OTY1MDc4MzQsImluU2FtcGxlIjp0cnVlfQ==; _hjAbsoluteSessionInProgress=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 155
date: Fri, 20 Jan 2023 02:50:49 GMT
server: -
last-modified: Mon, 07 Mar 2022 12:35:37 GMT
etag: "f3-5d9a01a037048-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 19 Feb 2023 02:50:49 GMT
content-encoding: gzip
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7Yjc1UNI6xMmBlCxMxfp4GZzhoZRJvmSqb8fNVV9WusdKg-o5HEgjw==
age: 1613408
X-Firefox-Spdy: h2
bc.worldvision.org/gallery/listener_interest_ranker/1.4.5/frontend/src/js/textrank.js
54.230.111.69200 OK 681 B URL HTTP/2 bc.worldvision.org/gallery/listener_interest_ranker/1.4.5/frontend/src/js/textrank.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (1463), with no line terminators
Hash 94647c3597d7e98aef767f4f77127f72
98edbacc70ec3b7d10a4dfdf47973f41db63340e
46bcb413caed95f31356b78a4841ebd607b5f3352a5162d872999fc8af3d6939
GET /gallery/listener_interest_ranker/1.4.5/frontend/src/js/textrank.js HTTP/1.1
Host: bc.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _gcl_au=1.1.1236419608.1675796506; _ga_VCJEX7GSMS=GS1.1.1675796506.1.0.1675796506.0.0.0; _ga=GA1.2.1486086217.1675796506; AWSALB=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; AWSALBCORS=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; _gid=GA1.2.2009281210.1675796507; _gat_UA-81492135-1=1; _gat_UA-91191700-18=1; _hjSessionUser_167107=eyJpZCI6ImY0YjdkYjNiLTQ5ZWYtNTEzNC1hODNiLTcxMTcyMWQ1NzBjNyIsImNyZWF0ZWQiOjE2NzU3OTY1MDc4MTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_167107=eyJpZCI6IjljNTIxNTFiLTcyYTQtNGI1ZC1hMmQxLTdlMmM0NTNiNGEwZSIsImNyZWF0ZWQiOjE2NzU3OTY1MDc4MzQsImluU2FtcGxlIjp0cnVlfQ==; _hjAbsoluteSessionInProgress=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 681
date: Sat, 21 Jan 2023 11:43:35 GMT
server: -
last-modified: Mon, 07 Mar 2022 12:35:38 GMT
etag: "5b7-5d9a01a044720-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 20 Feb 2023 11:43:35 GMT
content-encoding: gzip
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sM4zLrhl4q7CM9vE_iME3BXaEpGyFdZgdjzUzGaSJJv0m_l_R49vhw==
age: 1495042
X-Firefox-Spdy: h2
bc.worldvision.org/gallery/listener_interest_ranker/1.4.5/frontend/src/js/stemmer.js
54.230.111.69200 OK 816 B URL HTTP/2 bc.worldvision.org/gallery/listener_interest_ranker/1.4.5/frontend/src/js/stemmer.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (2167), with no line terminators
Hash 3398307f2b645567956dcaa2ff041ff0
6d4681262a827f8a503783642a979cb12ab342e1
701179a1919f20216490a19fb602561bed5cad6e36262a6edc9a833c593a645b
GET /gallery/listener_interest_ranker/1.4.5/frontend/src/js/stemmer.js HTTP/1.1
Host: bc.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _gcl_au=1.1.1236419608.1675796506; _ga_VCJEX7GSMS=GS1.1.1675796506.1.0.1675796506.0.0.0; _ga=GA1.2.1486086217.1675796506; AWSALB=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; AWSALBCORS=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; _gid=GA1.2.2009281210.1675796507; _gat_UA-81492135-1=1; _gat_UA-91191700-18=1; _hjSessionUser_167107=eyJpZCI6ImY0YjdkYjNiLTQ5ZWYtNTEzNC1hODNiLTcxMTcyMWQ1NzBjNyIsImNyZWF0ZWQiOjE2NzU3OTY1MDc4MTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_167107=eyJpZCI6IjljNTIxNTFiLTcyYTQtNGI1ZC1hMmQxLTdlMmM0NTNiNGEwZSIsImNyZWF0ZWQiOjE2NzU3OTY1MDc4MzQsImluU2FtcGxlIjp0cnVlfQ==; _hjAbsoluteSessionInProgress=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 816
date: Mon, 23 Jan 2023 06:49:57 GMT
server: -
last-modified: Mon, 07 Mar 2022 12:35:37 GMT
etag: "877-5d9a01a039f28-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Wed, 22 Feb 2023 06:49:57 GMT
content-encoding: gzip
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: z032tKXum7j0dKUP_HY7zkT4HdoFKB57tXECnfD94KKCNTVdwVzo3g==
age: 1339860
X-Firefox-Spdy: h2
bc.worldvision.org/gallery/listener_interest_ranker/1.4.5/frontend/src/lib/compromise.js
54.230.111.69200 OK 84 kB URL HTTP/2 bc.worldvision.org/gallery/listener_interest_ranker/1.4.5/frontend/src/lib/compromise.js
IP 54.230.111.69:0
Hash 658e4f751f3976da9f093857014ba5f1
255a6c021c0d55576c757e985e71ed7cd6ba339b
8d8fd69a15a3339f70043327feb6a4829ff0bd45dbc2358030bb1aa1477f202f
GET /gallery/listener_interest_ranker/1.4.5/frontend/src/lib/compromise.js HTTP/1.1
Host: bc.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _gcl_au=1.1.1236419608.1675796506; _ga_VCJEX7GSMS=GS1.1.1675796506.1.0.1675796506.0.0.0; _ga=GA1.2.1486086217.1675796506; AWSALB=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; AWSALBCORS=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; _gid=GA1.2.2009281210.1675796507; _gat_UA-81492135-1=1; _gat_UA-91191700-18=1; _hjSessionUser_167107=eyJpZCI6ImY0YjdkYjNiLTQ5ZWYtNTEzNC1hODNiLTcxMTcyMWQ1NzBjNyIsImNyZWF0ZWQiOjE2NzU3OTY1MDc4MTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_167107=eyJpZCI6IjljNTIxNTFiLTcyYTQtNGI1ZC1hMmQxLTdlMmM0NTNiNGEwZSIsImNyZWF0ZWQiOjE2NzU3OTY1MDc4MzQsImluU2FtcGxlIjp0cnVlfQ==; _hjAbsoluteSessionInProgress=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Sun, 15 Jan 2023 02:30:47 GMT
server: -
last-modified: Mon, 07 Mar 2022 12:35:38 GMT
etag: "3cd94-5d9a01a051a10-gzip"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Tue, 14 Feb 2023 02:30:47 GMT
content-encoding: gzip
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -yHxPn5kDRbh0q4Qgj_iEhMcLcn_izFMjmbreae5jkCMFUgCOAjSNQ==
age: 2046610
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10174170.json
87.248.119.251200 OK 22 B URL HTTP/2 s.yimg.com/wi/config/10174170.json
IP 87.248.119.251:0
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash 14293ad9ad0ffaf9f7a3acf1b0793b66
718dea6b65b9516e5e33fac53451056397deb255
73a1b438b0221511fb3dde18e019f5ab045811b2248d25d424e40980c683a9dc
GET /wi/config/10174170.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.worldvision.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: T6QX4KZMGA2ZSNG5
x-amz-id-2: ubVirA3INsDghANOd0uhvpGVyTtXDaQ6pSNcgynhaSsbcpxjAZBSYLVoI7/embLYLkb+Ge98PmQAxnqnyTeRejjfzxC3zITkolCea8bzyG8=
content-type: application/json
date: Tue, 07 Feb 2023 19:00:56 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
age: 3
content-encoding: gzip
content-length: 22
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=1&eci=1&event_id=86f64295-bcfc-49c4-979a-19181ab86d27&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=6874ac94-20ca-4326-9206-4c0ac9a81833&tw_document_href=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=l4e9n&type=javascript&version=2.3.29
104.244.42.195200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=1&eci=1&event_id=86f64295-bcfc-49c4-979a-19181ab86d27&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=6874ac94-20ca-4326-9206-4c0ac9a81833&tw_document_href=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=l4e9n&type=javascript&version=2.3.29
IP 104.244.42.195:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=1&eci=1&event_id=86f64295-bcfc-49c4-979a-19181ab86d27&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=6874ac94-20ca-4326-9206-4c0ac9a81833&tw_document_href=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=l4e9n&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 19:00:56 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_kfPuNgpGUtwhlEMVa9qdtg=="; Max-Age=63072000; Expires=Thu, 06 Feb 2025 19:00:56 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 4466b8b5f873a9d2
strict-transport-security: max-age=631138519
x-response-time: 107
x-connection-hash: 0e522fd46031a9b74f4c8da6beac45ac6a283da11a0e4b64d74cb36571a9afcf
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 14faac06dccd7b988ebeca011ed1ff90
d4d279098f88dfec4c56e571dee115b80e36980f
bef6793d905f74e8f3035d971aaa16a81d0aad1a2db26117b57cf4a3c0b27101
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 19:00:57 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 06 Feb 2023 03:37:45 GMT
Expires: Mon, 13 Feb 2023 03:37:44 GMT
Etag: "d4d279098f88dfec4c56e571dee115b80e36980f"
Cache-Control: max-age=462406,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795e5f100ad80b65-OSL
35.85.84.151/is
35.85.84.151200 OK 32 B IP 35.85.84.151:0
File type ASCII text, with no line terminators
Hash 1e7437f33ef99a2f3a9d87fed8ac0d43
f90a4fcafe9fe63631291b20b3f3a8303912bcaa
a7c5141835ff9ca08a85d2616d371ae5d78b91c8469be3dccbbb524c25981a53
Analyzer Verdict Alert quad9 Sinkholed
GET /is HTTP/1.1
Host: 35.85.84.151
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.worldvision.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 07 Feb 2023 19:00:57 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
bc.worldvision.org/DG/DEFAULT/rest/rpc/631?referer=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&bcsessionid=4ab35957-363f-4b4d-948c-ec0846480b78&bctempid=&overruleReferrer=&time=2023-02-07T19%3A01%3A47%2B00%3A00&ts=1675796507908
54.230.111.69200 OK 168 B URL HTTP/2 bc.worldvision.org/DG/DEFAULT/rest/rpc/631?referer=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&bcsessionid=4ab35957-363f-4b4d-948c-ec0846480b78&bctempid=&overruleReferrer=&time=2023-02-07T19%3A01%3A47%2B00%3A00&ts=1675796507908
IP 54.230.111.69:0
File type JSON data\012- , ASCII text, with no line terminators
Hash d974c5259fd419c62d46d72245baab95
b8657e39224e7b157be9a801fe01c7cc9db0c237
8a1d7c8d045b82cfd0e1da9077b4d06c4c16c47ce8dd722331168d3652067613
POST /DG/DEFAULT/rest/rpc/631?referer=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&bcsessionid=4ab35957-363f-4b4d-948c-ec0846480b78&bctempid=&overruleReferrer=&time=2023-02-07T19%3A01%3A47%2B00%3A00&ts=1675796507908 HTTP/1.1
Host: bc.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 109
Origin: https://account.worldvision.org
Connection: keep-alive
Cookie: BCSessionID=4ab35957-363f-4b4d-948c-ec0846480b78; _gcl_au=1.1.1236419608.1675796506; _ga_VCJEX7GSMS=GS1.1.1675796506.1.0.1675796506.0.0.0; _ga=GA1.2.1486086217.1675796506; AWSALB=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; AWSALBCORS=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; _gid=GA1.2.2009281210.1675796507; _gat_UA-81492135-1=1; _gat_UA-91191700-18=1; _hjSessionUser_167107=eyJpZCI6ImY0YjdkYjNiLTQ5ZWYtNTEzNC1hODNiLTcxMTcyMWQ1NzBjNyIsImNyZWF0ZWQiOjE2NzU3OTY1MDc4MTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_167107=eyJpZCI6IjljNTIxNTFiLTcyYTQtNGI1ZC1hMmQxLTdlMmM0NTNiNGEwZSIsImNyZWF0ZWQiOjE2NzU3OTY1MDc4MzQsImluU2FtcGxlIjp0cnVlfQ==; _hjAbsoluteSessionInProgress=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 168
date: Tue, 07 Feb 2023 19:00:57 GMT
set-cookie: AWSALB=7pF270HNzUZ3CSR87tN53xZ3MRCBiqjjGGuyCmLOAR3djEEcLMH80R+CvZKIzd78C2P6ACQ2Mf/byozONzTm3/YTO7eIsCceZhuYtOi0N1m2nlW4nYBxDaiEZ7VH; Expires=Tue, 14 Feb 2023 19:00:57 GMT; Path=/
AWSALBCORS=7pF270HNzUZ3CSR87tN53xZ3MRCBiqjjGGuyCmLOAR3djEEcLMH80R+CvZKIzd78C2P6ACQ2Mf/byozONzTm3/YTO7eIsCceZhuYtOi0N1m2nlW4nYBxDaiEZ7VH; Expires=Tue, 14 Feb 2023 19:00:57 GMT; Path=/; SameSite=None; Secure
server: -
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
p3p: policyref="", CP="DSP"
access-control-allow-origin: https://account.worldvision.org
access-control-allow-credentials: true
accept-ch: sec-ch-ua-platform-version
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Arl-yk539Y1S2eW45R3GhuXy8pKHemiWbCM0V3gwP4nSbA2uoEyNQQ==
X-Firefox-Spdy: h2
bc.worldvision.org/DG/DEFAULT/rest/rpc/631?referer=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&bcsessionid=4ab35957-363f-4b4d-948c-ec0846480b78&bctempid=&overruleReferrer=&time=2023-02-07T19%3A01%3A47%2B00%3A00&ts=1675796507907
54.230.111.69200 OK 179 B URL HTTP/2 bc.worldvision.org/DG/DEFAULT/rest/rpc/631?referer=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&bcsessionid=4ab35957-363f-4b4d-948c-ec0846480b78&bctempid=&overruleReferrer=&time=2023-02-07T19%3A01%3A47%2B00%3A00&ts=1675796507907
IP 54.230.111.69:0
File type JSON data\012- , ASCII text, with very long lines (377), with no line terminators
Hash 1df917a3e04084ccf052db5e74376228
8253cdfa87e29aa29063c5edcf1ae88b84ff0b5c
d9ee00a3c986d2bb5fb6d076e1d9f16057f195d1a94eacf7ab04dbb7279578ac
POST /DG/DEFAULT/rest/rpc/631?referer=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&bcsessionid=4ab35957-363f-4b4d-948c-ec0846480b78&bctempid=&overruleReferrer=&time=2023-02-07T19%3A01%3A47%2B00%3A00&ts=1675796507907 HTTP/1.1
Host: bc.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 3216
Origin: https://account.worldvision.org
Connection: keep-alive
Cookie: BCSessionID=4ab35957-363f-4b4d-948c-ec0846480b78; _gcl_au=1.1.1236419608.1675796506; _ga_VCJEX7GSMS=GS1.1.1675796506.1.0.1675796506.0.0.0; _ga=GA1.2.1486086217.1675796506; AWSALB=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; AWSALBCORS=p/b+3X3CEfpfqJJPj6Khqb7H+U/m+h1G7LjwvtQ9lbpxbl/eoP7pJDhs+bL9lNyM1C1baVXo7r6fIs8LfclryRfOs733xE1ScF0w3QlBJYILxz2ajujpgXWGK1wt; _gid=GA1.2.2009281210.1675796507; _gat_UA-81492135-1=1; _gat_UA-91191700-18=1; _hjSessionUser_167107=eyJpZCI6ImY0YjdkYjNiLTQ5ZWYtNTEzNC1hODNiLTcxMTcyMWQ1NzBjNyIsImNyZWF0ZWQiOjE2NzU3OTY1MDc4MTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_167107=eyJpZCI6IjljNTIxNTFiLTcyYTQtNGI1ZC1hMmQxLTdlMmM0NTNiNGEwZSIsImNyZWF0ZWQiOjE2NzU3OTY1MDc4MzQsImluU2FtcGxlIjp0cnVlfQ==; _hjAbsoluteSessionInProgress=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 179
date: Tue, 07 Feb 2023 19:00:57 GMT
set-cookie: AWSALB=1ZAaYAPkLafIKgExRulbCLnRolwnnY5Medz9xpTz3l7TLFiqkO+6m0kJLkUAyFw06rwDvQLsGM0RXleB0LJzSLDA87M3jlrxx2InfY4q3bRt75V2u5U2oJQTsW2K; Expires=Tue, 14 Feb 2023 19:00:57 GMT; Path=/
AWSALBCORS=1ZAaYAPkLafIKgExRulbCLnRolwnnY5Medz9xpTz3l7TLFiqkO+6m0kJLkUAyFw06rwDvQLsGM0RXleB0LJzSLDA87M3jlrxx2InfY4q3bRt75V2u5U2oJQTsW2K; Expires=Tue, 14 Feb 2023 19:00:57 GMT; Path=/; SameSite=None; Secure
server: -
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
p3p: policyref="", CP="DSP"
access-control-allow-origin: https://account.worldvision.org
access-control-allow-credentials: true
accept-ch: sec-ch-ua-platform-version
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wwXSemAr5SVxoImY9HrQU9aue7zksyHVbn7IK41jSU8-F04wlGBdsg==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 5bcb9125c18e4ed3562ceb950dc6eaad
a6c6944804b772de3a487723e3e866c0219de230
94947430d745a6648a2e87f163bf474b4fd4513519360bf4bfecfabc141e5ff1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 2ccbef7dcf1b1d32956833f5127c1ad5
af220576c82f064130ee7bfa3ea966d033e51707
f6eceec81f5b6deb7005fa9f3855ecb54e4bd6b3159c705decf0921e3a49067d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-81492135-1&cid=1486086217.1675796506&jid=1411523068&_u=aDDAAEAiAAAAACAAI~&z=561176632
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-81492135-1&cid=1486086217.1675796506&jid=1411523068&_u=aDDAAEAiAAAAACAAI~&z=561176632
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-81492135-1&cid=1486086217.1675796506&jid=1411523068&_u=aDDAAEAiAAAAACAAI~&z=561176632 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 07 Feb 2023 19:00:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-81492135-1&cid=1486086217.1675796506&jid=1411523068&_u=aDDAAEAiAAAAACAAI~&z=561176632
216.58.207.228200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-81492135-1&cid=1486086217.1675796506&jid=1411523068&_u=aDDAAEAiAAAAACAAI~&z=561176632
IP 216.58.207.228:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-81492135-1&cid=1486086217.1675796506&jid=1411523068&_u=aDDAAEAiAAAAACAAI~&z=561176632 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 07 Feb 2023 19:00:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 2ccbef7dcf1b1d32956833f5127c1ad5
af220576c82f064130ee7bfa3ea966d033e51707
f6eceec81f5b6deb7005fa9f3855ecb54e4bd6b3159c705decf0921e3a49067d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash ed3f32fef9b843f5511bb882c0a38358
a1a60921f7cb6ab14b645c77bb7d77c20b8201ef
9a4b9e269aa66258c1d9b10fb1af899a3e669de3e244dcfd843a0bce87646f8e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:00:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sp.analytics.yahoo.com/sp.pl?a=10000&d=Tue%2C%2007%20Feb%202023%2019%3A01%3A48%20GMT&n=0&b=Login%20%7C%20World%20Vision&.yp=10174170&f=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&enc=UTF-8&yv=1.13.0&tagmgr=gtm
212.82.100.181200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Tue%2C%2007%20Feb%202023%2019%3A01%3A48%20GMT&n=0&b=Login%20%7C%20World%20Vision&.yp=10174170&f=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP 212.82.100.181:0
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Tue%2C%2007%20Feb%202023%2019%3A01%3A48%20GMT&n=0&b=Login%20%7C%20World%20Vision&.yp=10174170&f=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 19:00:57 GMT
expires: Tue, 07 Feb 2023 19:00:57 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBOmf4mMCEPTySuBDIxrr5xnDrTdb-fMFEgEBAQHx42PsYwAAAAAA_eMAAA&S=AQAAAmSD5EN0Q8MBqUf_Q7KXfO8; Expires=Thu, 8 Feb 2024 01:00:57 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash 4fd6e0bd7e9b54c999d0baf0823070e0
f332ecee79963e261a1ed0689eab2c37a16bf6c0
22369489168e0c03390368af25665e66efe6030c3e17870b97a0b72b9855e163
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 07 Feb 2023 19:00:57 GMT
Last-Modified: Tue, 07 Feb 2023 17:55:02 GMT
Server: ECS (bsa/EB11)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oavE9HCa6Rf-69StNIsnJASR381TMnqXuphlCBSXj1GY8oeSSVdZAg==
Age: 3955
px.mountain.com/st?ga_tracking_id=UA-81492135-1&ga_client_id=1486086217.1675796506&shpt=Login%20%7C%20World%20Vision&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-81492135-1%22%2C%22ga_client_id%22%3A%221486086217.1675796506%22%2C%22shpt%22%3A%22Login%20%7C%20World%20Vision%22%2C%22dcm_cid%22%3A%221675796506.1%22%2C%22dcm_gid%22%3A%222009281210.1675796507%22%2C%22mntnis%22%3A%22VLiPQ%2F54terY75ZCrYnDEznp9iIkEqWv%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A7%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1675796506.1&dcm_gid=2009281210.1675796507&dxver=4.0.0&shaid=33060&plh=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&cb=91970523209872210term%3Dvalue&shadditional=mntn_audience%3Dlogged_in%2Cgoogletagmanager%3Dtrue%2Cga4%3Dtrue
35.85.106.161200 OK 1.5 kB URL HTTP/1.1 px.mountain.com/st?ga_tracking_id=UA-81492135-1&ga_client_id=1486086217.1675796506&shpt=Login%20%7C%20World%20Vision&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-81492135-1%22%2C%22ga_client_id%22%3A%221486086217.1675796506%22%2C%22shpt%22%3A%22Login%20%7C%20World%20Vision%22%2C%22dcm_cid%22%3A%221675796506.1%22%2C%22dcm_gid%22%3A%222009281210.1675796507%22%2C%22mntnis%22%3A%22VLiPQ%2F54terY75ZCrYnDEznp9iIkEqWv%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A7%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1675796506.1&dcm_gid=2009281210.1675796507&dxver=4.0.0&shaid=33060&plh=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&cb=91970523209872210term%3Dvalue&shadditional=mntn_audience%3Dlogged_in%2Cgoogletagmanager%3Dtrue%2Cga4%3Dtrue
IP 35.85.106.161:0
File type ASCII text, with very long lines (2598)
Hash 6eded946ff86a3a1a91ee889177e3c22
b44b001e4594cd508436fc81d52d28d2ccdf5baf
ac73d77aab6c1ae6565d630130491d3362f965e17049457ee9722c292231ffc0
GET /st?ga_tracking_id=UA-81492135-1&ga_client_id=1486086217.1675796506&shpt=Login%20%7C%20World%20Vision&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-81492135-1%22%2C%22ga_client_id%22%3A%221486086217.1675796506%22%2C%22shpt%22%3A%22Login%20%7C%20World%20Vision%22%2C%22dcm_cid%22%3A%221675796506.1%22%2C%22dcm_gid%22%3A%222009281210.1675796507%22%2C%22mntnis%22%3A%22VLiPQ%2F54terY75ZCrYnDEznp9iIkEqWv%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A7%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1675796506.1&dcm_gid=2009281210.1675796507&dxver=4.0.0&shaid=33060&plh=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&cb=91970523209872210term%3Dvalue&shadditional=mntn_audience%3Dlogged_in%2Cgoogletagmanager%3Dtrue%2Cga4%3Dtrue HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 07 Feb 2023 19:00:58 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=c18c940a-a719-11ed-9d53-cd55aff2109e;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
transfer-encoding: chunked
gs.mountain.com/gs
52.12.117.226200 OK 144 B IP 52.12.117.226:0
File type ASCII text, with no line terminators
Hash 1bf3526272fe850d0aedc759c8ff02a9
0e058fd9ab1f7cde2b37e8095f8484f9e78098ee
c0797c25080709d553d54280459f296eb20e474d104d6c8c3a9b9963bf910fa6
GET /gs HTTP/1.1
Host: gs.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: guid=c18c940a-a719-11ed-9d53-cd55aff2109e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 07 Feb 2023 19:00:58 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
px.mountain.com/st?ga_tracking_id=UA-81492135-1&ga_client_id=1486086217.1675796506&shpt=Login%20%7C%20World%20Vision&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-81492135-1%22%2C%22ga_client_id%22%3A%221486086217.1675796506%22%2C%22shpt%22%3A%22Login%20%7C%20World%20Vision%22%2C%22dcm_cid%22%3A%221675796506.1%22%2C%22dcm_gid%22%3A%222009281210.1675796507%22%2C%22mntnis%22%3A%22VLiPQ%2F54terY75ZCrYnDEznp9iIkEqWv%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A7%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1675796506.1&dcm_gid=2009281210.1675796507&dxver=4.0.0&shaid=33060&plh=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&shadditional=mntn_audience%3Dlogged_in%2Cgoogletagmanager%3Dtrue%2Cga4%3Dtrue&cb=1675796458159694&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1675796458885
35.85.106.161200 OK 1.6 kB URL HTTP/1.1 px.mountain.com/st?ga_tracking_id=UA-81492135-1&ga_client_id=1486086217.1675796506&shpt=Login%20%7C%20World%20Vision&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-81492135-1%22%2C%22ga_client_id%22%3A%221486086217.1675796506%22%2C%22shpt%22%3A%22Login%20%7C%20World%20Vision%22%2C%22dcm_cid%22%3A%221675796506.1%22%2C%22dcm_gid%22%3A%222009281210.1675796507%22%2C%22mntnis%22%3A%22VLiPQ%2F54terY75ZCrYnDEznp9iIkEqWv%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A7%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1675796506.1&dcm_gid=2009281210.1675796507&dxver=4.0.0&shaid=33060&plh=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&shadditional=mntn_audience%3Dlogged_in%2Cgoogletagmanager%3Dtrue%2Cga4%3Dtrue&cb=1675796458159694&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1675796458885
IP 35.85.106.161:0
File type ASCII text, with very long lines (5951), with no line terminators
Hash 3879d54e1942a7cb0b26ffb0ebf3258a
45793b3fd7d788c46c68b6632ed6ec1261e5b8ca
f016b2cdd1e6b323dffb1344cd381e47c797fb2d1bfb992a02017d2bd4d6b3c0
GET /st?ga_tracking_id=UA-81492135-1&ga_client_id=1486086217.1675796506&shpt=Login%20%7C%20World%20Vision&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-81492135-1%22%2C%22ga_client_id%22%3A%221486086217.1675796506%22%2C%22shpt%22%3A%22Login%20%7C%20World%20Vision%22%2C%22dcm_cid%22%3A%221675796506.1%22%2C%22dcm_gid%22%3A%222009281210.1675796507%22%2C%22mntnis%22%3A%22VLiPQ%2F54terY75ZCrYnDEznp9iIkEqWv%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A7%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1675796506.1&dcm_gid=2009281210.1675796507&dxver=4.0.0&shaid=33060&plh=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&shadditional=mntn_audience%3Dlogged_in%2Cgoogletagmanager%3Dtrue%2Cga4%3Dtrue&cb=1675796458159694&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1675796458885 HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: guid=c18c940a-a719-11ed-9d53-cd55aff2109e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 07 Feb 2023 19:00:59 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: tt="H4sIAAAAAAAAAKtW8guKNzY2MDOIN7IwtlCyMtBRKlOyMtJRQhY0NDM3Nbc0MzG1NLW01EHSYm5pDNRSCwDc5PbxRgAAAA==";Domain=px.mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
rt="MzMwNjA6MTY3NTc5NjQ1OQ==";Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
guid=c18c940a-a719-11ed-9d53-cd55aff2109e;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 14
server: istio-envoy
connection: close
transfer-encoding: chunked
match.adsrvr.org/track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=c18c940a-a719-11ed-9d53-cd55aff2109e&gdpr=&gdpr_consent=
3.33.220.150200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=c18c940a-a719-11ed-9d53-cd55aff2109e&gdpr=&gdpr_consent=
IP 3.33.220.150:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=c18c940a-a719-11ed-9d53-cd55aff2109e&gdpr=&gdpr_consent= HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 19:00:59 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/167107/visit-data?sv=7
34.248.143.191200 OK 95 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/167107/visit-data?sv=7
IP 34.248.143.191:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 039d32f7359c34eee13f02bae640eff7
7550a24e404da6c533fa8597113eec17a6d55f4c
1874a3ed03bfe4289ca3a8cc3c495a498033ddb248a6fbdcdce02e70065eca54
POST /api/v2/client/sites/167107/visit-data?sv=7 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 146
Origin: https://account.worldvision.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 19:00:57 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 1d0f7de49fce42894547b92020ad06a8
6dfc7ab65e8fc5c89b1bc006ee5781fdb81d6c88
fd8bed83369b8c643a82d2737f871dc937653c19c93fd9086c05ab696b5b5a51
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3887
Cache-Control: max-age=144618
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:01:00 GMT
Etag: "63e222a7-116"
Expires: Thu, 09 Feb 2023 11:11:18 GMT
Last-Modified: Tue, 07 Feb 2023 10:06:31 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 278
bat.bing.com/bat.js
204.79.197.200200 OK 12 kB IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39395), with no line terminators
Hash 4f378a725368a42971cd69e29f75db89
2a1cdf193b346d9281c6e04a9b3775e7fc1ae11e
6a2a9d238501343cb3f25e0f54f4ecc4ec2c4e0fa6b228cc72dc3fff90502078
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11552
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 23 Jan 2023 19:59:24 GMT
accept-ranges: bytes
etag: "076bc30652fd91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5896A30957E84D948ABF5B2A5755AF47 Ref B: OSL30EDGE0113 Ref C: 2023-02-07T19:01:00Z
date: Tue, 07 Feb 2023 19:01:00 GMT
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=2b16cgk&ref=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&upid=tsseoa0&upv=1.1.0
3.33.220.150200 OK 4.1 kB URL HTTP/2 insight.adsrvr.org/track/up?adv=2b16cgk&ref=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&upid=tsseoa0&upv=1.1.0
IP 3.33.220.150:0
File type gzip compressed data, from Unix\012- data
Hash 8f67ee22d3d83bb734399c21a1f50b5c
8073d1970a4a36c6168aa6c5072cf667ad9d24f9
aaef2d4eefef3951e3e6f45a4aa1ff4588732f69fe8206821edbf31b9cdbd9b2
GET /track/up?adv=2b16cgk&ref=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&upid=tsseoa0&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 19:00:59 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
s.pinimg.com/ct/core.js
23.38.200.197200 OK 1.1 kB IP 23.38.200.197:0
File type ASCII text, with very long lines (1146), with no line terminators
Hash c6d6a50397529cc18b52f26bd31b2fa4
760f7d17bd0ebf89522a0b73afc0489480df703d
d9f424ac0748fdd72673852c67d612efb1c8e17855fe862a6cdd1c44da75e9d2
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "c6d6a50397529cc18b52f26bd31b2fa4"
cache-control: max-age=7200
accept-ranges: bytes
content-type: application/javascript
content-length: 1146
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
script.crazyegg.com/pages/versioned/common-scripts/2e2da7d3b3b2d712690eb56715b4f237.js
104.19.147.8200 OK 27 kB URL HTTP/2 script.crazyegg.com/pages/versioned/common-scripts/2e2da7d3b3b2d712690eb56715b4f237.js
IP 104.19.147.8:0
File type ASCII text, with very long lines (63889)
Hash 8c269a3051c6b4f1e949395d3c0f5ae9
f41642c95cb4add411815b00e0043aca0c423a3b
e188af07ab9cf1111775ac173b258f12086c2cb77581db6116e23839b4bad90d
GET /pages/versioned/common-scripts/2e2da7d3b3b2d712690eb56715b4f237.js HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 19:01:00 GMT
content-type: text/javascript
content-length: 26903
cache-control: public, max-age=31536000, s-maxage=31536000
timing-allow-origin: *
last-modified: Sun, 29 Jan 2023 09:50:22 GMT
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 349154
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 795e5f250f640b39-OSL
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=5152330&tm=gtm002&Ver=2&mid=962a434e-7569-4c5d-913e-0736448578bf&sid=e113d980a71911eda8f139d3d700f5da&vid=e113e9f0a71911ed8b85f90c01818465&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Login%20%7C%20World%20Vision&p=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&r=<=5669&evt=pageLoad&sv=1&rn=535346
204.79.197.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=5152330&tm=gtm002&Ver=2&mid=962a434e-7569-4c5d-913e-0736448578bf&sid=e113d980a71911eda8f139d3d700f5da&vid=e113e9f0a71911ed8b85f90c01818465&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Login%20%7C%20World%20Vision&p=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&r=<=5669&evt=pageLoad&sv=1&rn=535346
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5152330&tm=gtm002&Ver=2&mid=962a434e-7569-4c5d-913e-0736448578bf&sid=e113d980a71911eda8f139d3d700f5da&vid=e113e9f0a71911ed8b85f90c01818465&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Login%20%7C%20World%20Vision&p=https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c&r=<=5669&evt=pageLoad&sv=1&rn=535346 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=220555B0DA6A6EA60A864701DB9F6F4F; domain=.bing.com; expires=Sun, 03-Mar-2024 19:01:00 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F6146CCEF8234C68AF8116C22719995D Ref B: OSL30EDGE0113 Ref C: 2023-02-07T19:01:00Z
date: Tue, 07 Feb 2023 19:01:00 GMT
X-Firefox-Spdy: h2
bat.bing.com/p/action/5152330.js
204.79.197.200204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/5152330.js
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/5152330.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6B9F6B63BDA7453A9C27A509A9565452 Ref B: OSL30EDGE0113 Ref C: 2023-02-07T19:01:00Z
date: Tue, 07 Feb 2023 19:01:00 GMT
X-Firefox-Spdy: h2
s.pinimg.com/ct/lib/main.e9706407.js
23.38.200.197200 OK 20 kB URL HTTP/2 s.pinimg.com/ct/lib/main.e9706407.js
IP 23.38.200.197:0
File type ASCII text, with very long lines (57032), with no line terminators
Hash 5083cb997261c90ff4b9f3a6f4677979
3d1af8b92cdefd875021369d9d9bd9ae1be2df39
8c931e99ae9a7d71f740f234aec64f503c42a55101210f81b3c5c3ce64a2d91a
GET /ct/lib/main.e9706407.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "5083cb997261c90ff4b9f3a6f4677979"
content-encoding: gzip
accept-ranges: bytes
content-type: application/javascript
content-length: 19689
cache-control: max-age=1209600
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
script.crazyegg.com/pages/data-scripts/0035/0472/sampling/account.worldvision.org.json?t=465499
104.19.147.8200 OK 151 B URL HTTP/2 script.crazyegg.com/pages/data-scripts/0035/0472/sampling/account.worldvision.org.json?t=465499
IP 104.19.147.8:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 331ff1b5f085c23f89815fe3a6473f41
a493540fa223ed2f4803a47aedc64ead269f1227
2c727d5f0838e41eb6e2b55e27bf78d1efc5cd032ccdc25971601172d6b17741
GET /pages/data-scripts/0035/0472/sampling/account.worldvision.org.json?t=465499 HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.worldvision.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 19:01:00 GMT
content-type: application/json
content-length: 151
access-control-expose-headers: CE-Version
ce-version: 11.5.22
cache-control: public, max-age=300, s-maxage=1209600
timing-allow-origin: *
last-modified: Tue, 07 Feb 2023 19:01:00 GMT
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: EXPIRED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 795e5f25590cb50f-OSL
X-Firefox-Spdy: h2
ct.pinterest.com/user/?tid=2618857961492&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1675796511366&dep=2%2CPAGE_LOAD
2.18.172.195200 OK 375 B URL HTTP/2 ct.pinterest.com/user/?tid=2618857961492&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1675796511366&dep=2%2CPAGE_LOAD
IP 2.18.172.195:0
File type JSON data\012- , ASCII text, with very long lines (539), with no line terminators
Hash f23754c0cabb23c00d00ec7cd0708b27
8b2826c766d44ba22ab77c66ba8b3389e3c1d482
1a26de1b3b0d3dbc8d54d94feeeb6ac92d05fbbe3132e2a2167caec156ac7796
GET /user/?tid=2618857961492&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1675796511366&dep=2%2CPAGE_LOAD HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.worldvision.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU5HVTNORGN3TTJRdE1HVmpOaTAwT1RBMExXRTBZamt0WmpObU9UWmlOVFE0WlRRNQ
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://account.worldvision.org
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 375
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 5652250938471351
date: Tue, 07 Feb 2023 19:01:00 GMT
vary: Accept-Encoding
akamai-grn: 0.540a655f.1675796460.2d6242d6
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
ct.pinterest.com/ct.html
2.18.172.195200 OK 323 B IP 2.18.172.195:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (565), with no line terminators
Hash b49b45b63051915a8c657060651eb07f
acaddf8021f220d0e4d30e7c8b3d8330ff781af9
4b00fbca5db49c6e4b29a0c873c43671880bcea1b7b3007655183382a318c2dc
GET /ct.html HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=86400
content-type: text/html; charset=utf-8
content-encoding: gzip
content-length: 323
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 1212770013243492
date: Tue, 07 Feb 2023 19:01:00 GMT
vary: Accept-Encoding
akamai-grn: 0.540a655f.1675796460.2d62430f
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
assets-tracking.crazyegg.com/healthcheck
54.230.111.63200 OK 19 B URL HTTP/2 assets-tracking.crazyegg.com/healthcheck
IP 54.230.111.63:0
File type JSON data\012- , ASCII text
Hash d06f04fccf68d0b228a5923187ce1afd
5de9df9fdd66a91eed06e31981553d4ab9ccf490
830e67bda2532cd5880ee86e3b33e69721082f8458bb0df0cd4edbb1577fd375
GET /healthcheck HTTP/1.1
Host: assets-tracking.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.worldvision.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 19
date: Tue, 17 Jan 2023 03:56:02 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: Access-Control-Allow-Origin
access-control-max-age: 31536000
last-modified: Fri, 08 Jul 2022 22:25:51 GMT
etag: "d06f04fccf68d0b228a5923187ce1afd"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: a7pWti9gn3xE31xiPEuYNWootapPbqAqmdSkem3iFOYk5wOcN7Xopw==
age: 1868699
X-Firefox-Spdy: h2
pagestates-tracking.crazyegg.com/healthcheck
54.230.111.22200 OK 19 B URL HTTP/2 pagestates-tracking.crazyegg.com/healthcheck
IP 54.230.111.22:0
File type JSON data\012- , ASCII text
Hash d06f04fccf68d0b228a5923187ce1afd
5de9df9fdd66a91eed06e31981553d4ab9ccf490
830e67bda2532cd5880ee86e3b33e69721082f8458bb0df0cd4edbb1577fd375
GET /healthcheck HTTP/1.1
Host: pagestates-tracking.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.worldvision.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 19
date: Mon, 23 Jan 2023 11:43:55 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: Access-Control-Allow-Origin
access-control-max-age: 31536000
last-modified: Fri, 08 Jul 2022 22:25:51 GMT
etag: "d06f04fccf68d0b228a5923187ce1afd"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XSWTmByq-SPDOzbmM6DyU0zu6kzs3COlbk5LuhZydedpzzkoB_SUKQ==
age: 1322226
X-Firefox-Spdy: h2
ct.pinterest.com/user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2618857961492&cb=1675796511368&dep=5%2CEVENT_TAGS_ABSENT
2.18.172.195200 OK 375 B URL HTTP/2 ct.pinterest.com/user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2618857961492&cb=1675796511368&dep=5%2CEVENT_TAGS_ABSENT
IP 2.18.172.195:0
File type JSON data\012- , ASCII text, with very long lines (539), with no line terminators
Hash f23754c0cabb23c00d00ec7cd0708b27
8b2826c766d44ba22ab77c66ba8b3389e3c1d482
1a26de1b3b0d3dbc8d54d94feeeb6ac92d05fbbe3132e2a2167caec156ac7796
GET /user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2618857961492&cb=1675796511368&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.worldvision.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPVptUm1ZbUZtT0RFdE1tRTFZaTAwT1dKakxXSmhNekl0T0dGbU5tWmtaRGhtWmpWaw
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://account.worldvision.org
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 375
x-envoy-upstream-service-time: 0
referrer-policy: origin
x-pinterest-rid: 1271751455542279
date: Tue, 07 Feb 2023 19:01:00 GMT
vary: Accept-Encoding
akamai-grn: 0.540a655f.1675796460.2d62431c
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?tid=2618857961492&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22e9706407%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1675796511368
2.18.172.195200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?tid=2618857961492&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22e9706407%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1675796511368
IP 2.18.172.195:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2618857961492&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22e9706407%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1675796511368 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 9219596218014727
date: Tue, 07 Feb 2023 19:01:00 GMT
akamai-grn: 0.540a655f.1675796460.2d62431d
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2618857961492&cb=1675796511518&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%2C%22pin_unauth%22%3A%22dWlkPU5HVTNORGN3TTJRdE1HVmpOaTAwT1RBMExXRTBZamt0WmpObU9UWmlOVFE0WlRRNQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22e9706407%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
2.18.172.195200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2618857961492&cb=1675796511518&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%2C%22pin_unauth%22%3A%22dWlkPU5HVTNORGN3TTJRdE1HVmpOaTAwT1RBMExXRTBZamt0WmpObU9UWmlOVFE0WlRRNQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22e9706407%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
IP 2.18.172.195:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2618857961492&cb=1675796511518&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%2C%22pin_unauth%22%3A%22dWlkPU5HVTNORGN3TTJRdE1HVmpOaTAwT1RBMExXRTBZamt0WmpObU9UWmlOVFE0WlRRNQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Faccount.worldvision.org%2Flogin%3Fstate%3DhKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw%26client%3DxQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_%26protocol%3Doauth2%26scope%3Dopenid%2520email%2520profile%2520offline_access%26audience%3Dhttps%3A%2F%2Fdonate.worldvision.org%26response_mode%3Dquery%26response_type%3Dcode%26redirect_uri%3Dhttps%3A%2F%2Fdonate.worldvision.org%2Fapi%2Fwvus%2Fauth%2Fverify%3Fredirect_to%3DaHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI%3D%26nonce%3D053d8f5b15dce9ed55c309bcbe95de0c%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22e9706407%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 3
referrer-policy: origin
x-pinterest-rid: 5206132292920952
date: Tue, 07 Feb 2023 19:01:00 GMT
set-cookie: _pinterest_ct_ua="TWc9PSZTZGRGeUovaXRaOGxrbTlyVDZjSXJWa3dLSE5sVnd6VjVZZVNyUU1rQUhVYnJzUStwQWd2cmFQRnp0eVhqckFUNWRkTEttaXM4U2FUUGRYK1VYbm1JcC9sQkxoNnBndHpDUmFVR0JQTjhTMD0meEJtV0UxVk0rUEJtTC9wUDBCTlVOeHl5TXdBPQ=="; Expires=Wed, 07 Feb 2024 19:01:00 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None
akamai-grn: 0.540a655f.1675796460.2d6243ce
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.110:0
Hash 1b1adca513a3cea3ed7a2c897af393ac
2abac37397b7b2a6cbf25959f2569e27e4767e09
18f42f5b8efab3901b5ae5ef3ca78202f5a1e0b3bde5ded2967c3f77fbdc2832
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=163621
Date: Tue, 07 Feb 2023 19:01:00 GMT
Etag: "63e2690b-1d7"
Expires: Thu, 09 Feb 2023 16:28:01 GMT
Last-Modified: Tue, 07 Feb 2023 15:06:51 GMT
Server: ECS (bsa/EB15)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: kvOMZCa2z075y4LU4-kSfKUVN_nV0QBuHHOHGyEo_Mh-LBtfshJDMg==
Age: 4870
tracking.crazyegg.com/clock?t=1675796511508&tk=da82ffe0edae2db8afa7ceab4f601231&s=183208&p=%2Flogin&u=350472&v=87b8f89bf115f4dbeac78ad996c35833a97cfa43
52.212.178.69200 OK 26 B URL HTTP/2 tracking.crazyegg.com/clock?t=1675796511508&tk=da82ffe0edae2db8afa7ceab4f601231&s=183208&p=%2Flogin&u=350472&v=87b8f89bf115f4dbeac78ad996c35833a97cfa43
IP 52.212.178.69:0
File type ASCII text, with no line terminators
Hash 978b875fe386a8ca4943744ea120c17c
3fdcca17183419792e3ae8763acc59190216e0fd
d2c734f49ad254fb425518f6ce6e121bb15fb5c1973018180b8e13b76541b097
GET /clock?t=1675796511508&tk=da82ffe0edae2db8afa7ceab4f601231&s=183208&p=%2Flogin&u=350472&v=87b8f89bf115f4dbeac78ad996c35833a97cfa43 HTTP/1.1
Host: tracking.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.worldvision.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: awselb/2.0
date: Tue, 07 Feb 2023 19:01:00 GMT
content-type: text/plain
content-length: 26
cache-control: no-store
access-control-allow-origin: *
X-Firefox-Spdy: h2
wvuslogin.blob.core.windows.net/$web/login_bundle.js
20.150.78.68200 OK 610 kB URL HTTP/1.1 wvuslogin.blob.core.windows.net/$web/login_bundle.js
IP 20.150.78.68:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (65465)
Size 610 kB (610204 bytes)
Hash eee9766514c8bdcc9669c2e38d52b21d
6a31715fe297685e38a156e679b00d62c0fda395
615b97b882686a38baea7a412a60dd0d9b45a28c70c18a54d05c2ca3fdcb25b0
GET /$web/login_bundle.js HTTP/1.1
Host: wvuslogin.blob.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 610204
Content-Type: application/javascript
Content-MD5: 7ul2ZRTIvcyWacLjjVKyHQ==
Last-Modified: Tue, 15 Mar 2022 16:39:00 GMT
ETag: 0x8DA06A24EC70D60
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: c6929b6e-501e-0068-6f26-3b8ec2000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Tue, 07 Feb 2023 19:00:59 GMT
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 3f3962ef574ee0069c41f7cbcabd1ef3
c4b6aefa8563432c5e5901488c38ae7da3c83fd7
9518b917cc6f0b1724d687d6aac4d8c1851d46949eeb4926acdb26a84728fdc0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:01:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 3f3962ef574ee0069c41f7cbcabd1ef3
c4b6aefa8563432c5e5901488c38ae7da3c83fd7
9518b917cc6f0b1724d687d6aac4d8c1851d46949eeb4926acdb26a84728fdc0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:01:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
142.250.74.35200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://account.worldvision.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 04:29:08 GMT
expires: Wed, 07 Feb 2024 04:29:08 GMT
cache-control: public, max-age=31536000
age: 52313
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
142.250.74.35200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://account.worldvision.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 05 Feb 2023 10:25:03 GMT
expires: Mon, 05 Feb 2024 10:25:03 GMT
cache-control: public, max-age=31536000
age: 203758
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 3f3962ef574ee0069c41f7cbcabd1ef3
c4b6aefa8563432c5e5901488c38ae7da3c83fd7
9518b917cc6f0b1724d687d6aac4d8c1851d46949eeb4926acdb26a84728fdc0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 19:01:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
wvusstatic.com/wvus_assets/fonts/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0
104.22.16.227200 OK 77 kB URL HTTP/2 wvusstatic.com/wvus_assets/fonts/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 104.22.16.227:0
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wvus_assets/fonts/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: wvusstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://account.worldvision.org
Connection: keep-alive
Referer: https://wvusstatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 19:01:01 GMT
content-type: binary/octet-stream
content-length: 77160
x-amz-id-2: jo8VTxZxcP8q026s2MVv1RDcU25OOcJsjLKTEQ6FCy+m0OVVn/UpGF814vzs47ibfK6yNR2gPdM=
x-amz-request-id: M735QX8WT9G1QBKQ
access-control-allow-origin: https://account.worldvision.org
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Tue, 23 Jul 2019 18:54:49 GMT
x-amz-version-id: null
etag: "af7ae505a9eed503f8b8e6982036873e"
cache-control: max-age=1382400
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 795e5f2dae611c02-OSL
X-Firefox-Spdy: h2
insight.adsrvr.org/track/pxl/?adv=2b16cgk&ct=0:kes4211&fmt=3>mcb=1453529469
3.33.220.150200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/pxl/?adv=2b16cgk&ct=0:kes4211&fmt=3>mcb=1453529469
IP 3.33.220.150:0
GET /track/pxl/?adv=2b16cgk&ct=0:kes4211&fmt=3>mcb=1453529469 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Feb 2023 19:01:00 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
account.worldvision.org/login?state=hKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw&client=xQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_&protocol=oauth2&scope=openid%20email%20profile%20offline_access&audience=https://donate.worldvision.org&response_mode=query&response_type=code&redirect_uri=https://donate.worldvision.org/api/wvus/auth/verify?redirect_to=aHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI=&nonce=053d8f5b15dce9ed55c309bcbe95de0c
104.16.185.248200 OK 0 B URL HTTP/2 account.worldvision.org/login?state=hKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw&client=xQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_&protocol=oauth2&scope=openid%20email%20profile%20offline_access&audience=https://donate.worldvision.org&response_mode=query&response_type=code&redirect_uri=https://donate.worldvision.org/api/wvus/auth/verify?redirect_to=aHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI=&nonce=053d8f5b15dce9ed55c309bcbe95de0c
IP 104.16.185.248:0
GET /login?state=hKFo2SBMZUtHVDNLMVpXTEk4OE1IZTd4ZkNNZFlmZzR5NGJNZaFupWxvZ2luo3RpZNkgbi1WX2x0QWc4S2JyWEwwdzVDdzRlbzItQmJXdlNOUUKjY2lk2SB4UUs0Wm9BZDJQd1Z2UWZmWFA2TE9wX0RSLUV5eFc5Xw&client=xQK4ZoAd2PwVvQffXP6LOp_DR-EyxW9_&protocol=oauth2&scope=openid%20email%20profile%20offline_access&audience=https://donate.worldvision.org&response_mode=query&response_type=code&redirect_uri=https://donate.worldvision.org/api/wvus/auth/verify?redirect_to=aHR0cHM6Ly9teS53b3JsZHZpc2lvbi5vcmcvZ2l2aW5nP2dpdmluZy15ZWFyPTIwMjI=&nonce=053d8f5b15dce9ed55c309bcbe95de0c HTTP/1.1
Host: account.worldvision.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 07 Feb 2023 19:00:54 GMT
content-type: text/html; charset=utf-8
cf-ray: 795e5f01aacab4ed-OSL
cache-control: no-store, max-age=0, no-transform
etag: W/"1fc0-k/OlLvBSM5WmJ9dXXQlFNcbeM9A"
strict-transport-security: max-age=31536000
vary: Accept-Encoding
cf-cache-status: DYNAMIC
ot-baggage-auth0-request-id: 795e5f01aacab4ed
ot-tracer-sampled: true
ot-tracer-spanid: 275231800e53ff71
ot-tracer-traceid: 06c1c144612c10b6
pragma: no-cache
referrer-policy: same-origin
set-cookie: did=s%3Av0%3Abf97c8d0-a719-11ed-9277-1142d138622a.8tWRqZp6TCTM%2FcDvEr5PdWJ28S8t3y%2BT88IQdx%2F%2FkBs; Max-Age=31557600; Path=/; Expires=Thu, 08 Feb 2024 01:00:54 GMT; HttpOnly; Secure; SameSite=None
_csrf=abks08O2Wb9DXJqhg7WWJ7zi; Max-Age=864000; Path=/usernamepassword/login; HttpOnly; Secure
auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQMaNr1EtiEQqOUxxJmiI-bEfgj6DsDtV6ZWNK_ew_nvybPR2-7z08fUVPz72WS20-NYkyoPFm8nVPz1ujJsIqH-mY29va2llg6dleHBpcmVz1__TtzgAY-aUZq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.%2BMWpSgwZCLeNZHRHwJsqRr9c6wALVzG6TuV8C%2Fj4ztM; Path=/; Expires=Fri, 10 Feb 2023 19:00:54 GMT; HttpOnly; Secure; SameSite=None
did_compat=s%3Av0%3Abf97c8d0-a719-11ed-9277-1142d138622a.8tWRqZp6TCTM%2FcDvEr5PdWJ28S8t3y%2BT88IQdx%2F%2FkBs; Max-Age=31557600; Path=/; Expires=Thu, 08 Feb 2024 01:00:54 GMT; HttpOnly; Secure
auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQMaNr1EtiEQqOUxxJmiI-bEfgj6DsDtV6ZWNK_ew_nvybPR2-7z08fUVPz72WS20-NYkyoPFm8nVPz1ujJsIqH-mY29va2llg6dleHBpcmVz1__TtzgAY-aUZq5vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.%2BMWpSgwZCLeNZHRHwJsqRr9c6wALVzG6TuV8C%2Fj4ztM; Path=/; Expires=Fri, 10 Feb 2023 19:00:54 GMT; HttpOnly; Secure
traceparent: 00-000000000000000006c1c144612c10b6-275231800e53ff71-01
tracestate: auth0-request-id=795e5f01aacab4ed,auth0=true
x-auth0-requestid: b0bb1376a5cc607a4120
x-content-type-options: nosniff
x-ratelimit-limit: 300
x-ratelimit-remaining: 299
x-ratelimit-reset: 1675796455
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
wvusstatic.com/wvus_assets/fonts/fontawesome/css/font-awesome.css
104.22.16.227200 OK 0 B URL HTTP/2 wvusstatic.com/wvus_assets/fonts/fontawesome/css/font-awesome.css
IP 104.22.16.227:0
GET /wvus_assets/fonts/fontawesome/css/font-awesome.css HTTP/1.1
Host: wvusstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 19:00:55 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=37414
etag: W/"c495654869785bc3df60216616814ad1"
last-modified: Tue, 23 Jul 2019 18:54:49 GMT
x-amz-id-2: 3B7lUtLg6S7Si0MfMUbgMvpibvXKSYiqCrtvOGcZh2UrQzCSxJ6s0zI3x8M4TQNuhCAWdrLaUbk=
x-amz-request-id: PVCH0N9GZTVNVR94
x-amz-version-id: null
cache-control: max-age=1382400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 795e5f056eb9b523-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-167107.js?sv=7
54.230.111.113200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-167107.js?sv=7
IP 54.230.111.113:0
GET /c/hotjar-167107.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Tue, 07 Feb 2023 19:00:44 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
etag: W/f0b3629f921f664ded5bf701337cd0da
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7A63aNjP-kTpsgPYzH4t5mfBy-_na9M5S-zi6HuKc5g876ocVOI8rA==
age: 12
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/1713316/domain/account.worldvision.org/token
54.230.111.42200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/1713316/domain/account.worldvision.org/token
IP 54.230.111.42:0
GET /partner/1713316/domain/account.worldvision.org/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://account.worldvision.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Tue, 07 Feb 2023 19:00:56 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Miss from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: T2aThKWxpjXk8vnFzodXLEiaNafWKdyKHJIapvLnnA6G-aD4Lyqk6g==
X-Firefox-Spdy: h2
insight.adsrvr.org/track/evnt/?adv=3ctyz4n&ct=0:w0qn1il&fmt=3
3.33.220.150200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/evnt/?adv=3ctyz4n&ct=0:w0qn1il&fmt=3
IP 3.33.220.150:0
GET /track/evnt/?adv=3ctyz4n&ct=0:w0qn1il&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 19:00:59 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:400,400i,700,700i|Lora:400,400i
142.250.74.74200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:400,400i,700,700i|Lora:400,400i
IP 142.250.74.74:0
GET /css?family=Lato:400,400i,700,700i|Lora:400,400i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 Feb 2023 19:00:55 GMT
date: Tue, 07 Feb 2023 19:00:55 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2