r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2615
Expires: Thu, 01 Dec 2022 19:56:01 GMT
Date: Thu, 01 Dec 2022 19:12:26 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1231
Cache-Control: max-age=142757
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:12:26 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 10:51:43 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 18:18:08 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3258
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15400
Expires: Thu, 01 Dec 2022 23:29:06 GMT
Date: Thu, 01 Dec 2022 19:12:26 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: k8/lQLyho0fGrRFXXm/2dZFgyOjUtlWeNYf2QjN8J3TjByO5kfzI2BlJHfdG++jF7Jetn9UcOtg=
x-amz-request-id: T281502XSSNXNK5Y
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 18:45:46 GMT
age: 1600
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash a6480d9d2f7432e34f7af0a5bcf04c72
1b79d9c6254710718ff770bf4caa17bb567b0486
0277b6aff5aefe44b1e3e8dd6b41d7fb480e9f51dfcc5e6f3a996e145955a686
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 01 Dec 2022 19:12:27 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 01 Dec 2022 18:44:18 GMT
Expires: Fri, 02 Dec 2022 18:44:18 GMT
ETag: "1b79d9c6254710718ff770bf4caa17bb567b0486"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 19:12:26 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 19:11:15 GMT
cache-control: public,max-age=3600
age: 72
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ablink.marketing.gofundme.com/ls/click?upn=RMPebqdS1-2FiZxqhIY6hvI-2FO7-2FjHnHsNoF3ontzgQqHFWm3qt7ZPmv1rHcoy3Q9TMAzHiCH0PMX3cjwvLaOYFOL0EVhuQioz7pEicXRVafyPZaoxSu5WL7j-2BxCCvZK8w3L2VkkyR-2FuPZiy71t4gGwabB5pFKcuppcbeD9WbqER0-2FYUX0VklGTL4Ro2nmEqd2C6XPdQvk2krs47OvNR-2FAVnqzSR7H2DV5-2FT5YpMHhzoCk-3Dc93H_BnpNc4sCPkBNdIsXhUY1O9kR36U9429PGT1CBvAT-2BV-2F58PaSTSd5XxSDAjbfRasePW2xfREF1JaKGIyivSWHX-2BdyHljyblcUE3pL89O92pSGoQARgpbzljmID3LZ9vRFitCj4FoQTiH1vIzlBk-2FTrBaRBvGBLfjzdUxeudCumA-2B1X0oCpGX0iX75NRfStCPJ9O-2BY-2BD0j-2BkTqUtAmbLNZXFvjR1BhrC1oxqayTNVF53kcSVXHEzKGtnken-2Bpt7Q14LlivdEx1cETJ6sB-2BnFg6eCDkgOc1mnBbzvZfq8HG8raltVSL1JD7-2BmbuPB2DKbBkGLMqFJwBADStYKReFz0HVTKl1wRyytzgMj-2Bq3R2QYvNqiZDBbARG9fuKmSjg3Mp2n1ajKPuLCKRBoYyh-2BhIZKg30yaSvwdDQ5HdMUN8Ky1la3hE6cQUlyLsd07zAl7Byv4lRl7M2Qx3QeyTagq-2B2jd5Xo7cae2ZYRYzP7aqINIP5Lv-2F7t3hXoFyoSWFSXYodpbO0Dyjwt0m2nHOpS0Dyd8Gj37M5WG8Z7MKzGGMoXGV2XRWCUleQxkJmwQb-2FvHz1pd6-2BgCqNysFibTzet3OYstNCvw3FEP1JkTo8N579yDD5P9i0mRm1jaoOkpZOZAaE38HP9NSGj2VYhKG0zzAzzO0DQvk-2BcKhFL-2BNMOdgGJMQ-3D
54.230.111.59302 Found 193 B URL HTTP/2 ablink.marketing.gofundme.com/ls/click?upn=RMPebqdS1-2FiZxqhIY6hvI-2FO7-2FjHnHsNoF3ontzgQqHFWm3qt7ZPmv1rHcoy3Q9TMAzHiCH0PMX3cjwvLaOYFOL0EVhuQioz7pEicXRVafyPZaoxSu5WL7j-2BxCCvZK8w3L2VkkyR-2FuPZiy71t4gGwabB5pFKcuppcbeD9WbqER0-2FYUX0VklGTL4Ro2nmEqd2C6XPdQvk2krs47OvNR-2FAVnqzSR7H2DV5-2FT5YpMHhzoCk-3Dc93H_BnpNc4sCPkBNdIsXhUY1O9kR36U9429PGT1CBvAT-2BV-2F58PaSTSd5XxSDAjbfRasePW2xfREF1JaKGIyivSWHX-2BdyHljyblcUE3pL89O92pSGoQARgpbzljmID3LZ9vRFitCj4FoQTiH1vIzlBk-2FTrBaRBvGBLfjzdUxeudCumA-2B1X0oCpGX0iX75NRfStCPJ9O-2BY-2BD0j-2BkTqUtAmbLNZXFvjR1BhrC1oxqayTNVF53kcSVXHEzKGtnken-2Bpt7Q14LlivdEx1cETJ6sB-2BnFg6eCDkgOc1mnBbzvZfq8HG8raltVSL1JD7-2BmbuPB2DKbBkGLMqFJwBADStYKReFz0HVTKl1wRyytzgMj-2Bq3R2QYvNqiZDBbARG9fuKmSjg3Mp2n1ajKPuLCKRBoYyh-2BhIZKg30yaSvwdDQ5HdMUN8Ky1la3hE6cQUlyLsd07zAl7Byv4lRl7M2Qx3QeyTagq-2B2jd5Xo7cae2ZYRYzP7aqINIP5Lv-2F7t3hXoFyoSWFSXYodpbO0Dyjwt0m2nHOpS0Dyd8Gj37M5WG8Z7MKzGGMoXGV2XRWCUleQxkJmwQb-2FvHz1pd6-2BgCqNysFibTzet3OYstNCvw3FEP1JkTo8N579yDD5P9i0mRm1jaoOkpZOZAaE38HP9NSGj2VYhKG0zzAzzO0DQvk-2BcKhFL-2BNMOdgGJMQ-3D
IP 54.230.111.59:0
File type HTML document, ASCII text
Hash 231cf342dbea00230c3df176b232a786
a46ffb8feff3525e645eaf7a3b631159c5f04f85
3a6cb4062816718e6962c94e62356c18135bb1685a2ed1900c6534ff85f226cc
GET /ls/click?upn=RMPebqdS1-2FiZxqhIY6hvI-2FO7-2FjHnHsNoF3ontzgQqHFWm3qt7ZPmv1rHcoy3Q9TMAzHiCH0PMX3cjwvLaOYFOL0EVhuQioz7pEicXRVafyPZaoxSu5WL7j-2BxCCvZK8w3L2VkkyR-2FuPZiy71t4gGwabB5pFKcuppcbeD9WbqER0-2FYUX0VklGTL4Ro2nmEqd2C6XPdQvk2krs47OvNR-2FAVnqzSR7H2DV5-2FT5YpMHhzoCk-3Dc93H_BnpNc4sCPkBNdIsXhUY1O9kR36U9429PGT1CBvAT-2BV-2F58PaSTSd5XxSDAjbfRasePW2xfREF1JaKGIyivSWHX-2BdyHljyblcUE3pL89O92pSGoQARgpbzljmID3LZ9vRFitCj4FoQTiH1vIzlBk-2FTrBaRBvGBLfjzdUxeudCumA-2B1X0oCpGX0iX75NRfStCPJ9O-2BY-2BD0j-2BkTqUtAmbLNZXFvjR1BhrC1oxqayTNVF53kcSVXHEzKGtnken-2Bpt7Q14LlivdEx1cETJ6sB-2BnFg6eCDkgOc1mnBbzvZfq8HG8raltVSL1JD7-2BmbuPB2DKbBkGLMqFJwBADStYKReFz0HVTKl1wRyytzgMj-2Bq3R2QYvNqiZDBbARG9fuKmSjg3Mp2n1ajKPuLCKRBoYyh-2BhIZKg30yaSvwdDQ5HdMUN8Ky1la3hE6cQUlyLsd07zAl7Byv4lRl7M2Qx3QeyTagq-2B2jd5Xo7cae2ZYRYzP7aqINIP5Lv-2F7t3hXoFyoSWFSXYodpbO0Dyjwt0m2nHOpS0Dyd8Gj37M5WG8Z7MKzGGMoXGV2XRWCUleQxkJmwQb-2FvHz1pd6-2BgCqNysFibTzet3OYstNCvw3FEP1JkTo8N579yDD5P9i0mRm1jaoOkpZOZAaE38HP9NSGj2VYhKG0zzAzzO0DQvk-2BcKhFL-2BNMOdgGJMQ-3D HTTP/1.1
Host: ablink.marketing.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 193
location: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
server: nginx
date: Thu, 01 Dec 2022 19:12:27 GMT
x-robots-tag: noindex, nofollow
x-cache: Miss from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: U4WFPPrilsgAY25HKUUmtKz34u6PC72aXcnt4AEJpU7qQ2Uisz2R9A==
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1223
Cache-Control: max-age=137685
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 19:12:27 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 09:27:12 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
54.191.251.76101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.191.251.76:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZfSTyltgXy9UNOHwPseYYQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 6ByGdNw1OkiGZnfNV5AFj1KJ1lo=
www.gofundme.com/fonts/CircularXXWeb-Bold.woff2
143.204.55.38200 OK 74 kB URL HTTP/2 www.gofundme.com/fonts/CircularXXWeb-Bold.woff2
IP 143.204.55.38:0
File type Web Open Font Format (Version 2), TrueType, length 74059, version 5.0\012- data
Hash 0796c564b3ca9bbf97c065949d757d6c
fe46e35f0343a42d72b3eb2740c0f35fdf4641f8
7387021408574afb13687c47d583f43c70cf9511d5dfd772be64f8ec975895a8
GET /fonts/CircularXXWeb-Bold.woff2 HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 74059
date: Tue, 29 Nov 2022 19:40:27 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
last-modified: Tue, 23 Nov 2021 21:37:34 GMT
etag: "0796c564b3ca9bbf97c065949d757d6c"
x-amz-server-side-encryption: AES256
cache-control: public, immutable, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nZtGf5WpSHIdLDhD6Huyi5WPHwcoGLZaOMP0Q93QgHEm4h17m3qVAA==
age: 171120
X-Firefox-Spdy: h2
www.gofundme.com/fonts/CircularXXWeb-Medium.woff2
143.204.55.38200 OK 71 kB URL HTTP/2 www.gofundme.com/fonts/CircularXXWeb-Medium.woff2
IP 143.204.55.38:0
File type Web Open Font Format (Version 2), TrueType, length 71047, version 5.0\012- data
Hash 1aa173431ed07f680fc5387062a690e7
5ed68cb0b81d9967a958232721e43056969745ff
8fe6acb606204bb51fd9130bca281a23ad25aafaf98e912bca79323adbb14c67
GET /fonts/CircularXXWeb-Medium.woff2 HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 71047
last-modified: Wed, 08 Jun 2022 20:42:18 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 30 Nov 2022 19:51:03 GMT
etag: "1aa173431ed07f680fc5387062a690e7"
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LaSVAkzXwIvFsyQvzsv2VyK0uCaJUFLjLTpqYveHLflYVO5HtoqUCg==
age: 84085
vary: Origin
X-Firefox-Spdy: h2
www.gofundme.com/fonts/CircularXXWeb-Regular.woff2
143.204.55.38200 OK 70 kB URL HTTP/2 www.gofundme.com/fonts/CircularXXWeb-Regular.woff2
IP 143.204.55.38:0
File type Web Open Font Format (Version 2), TrueType, length 70287, version 5.0\012- data
Hash c65bc20b5c2102386f484979b51049a6
da82f3cc41eed0ada31e28428c6e1ebdefce1bad
52ae61c0720ae779b166ba75eb15923913725a390383be86868c33bfc191c1fe
GET /fonts/CircularXXWeb-Regular.woff2 HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 70287
date: Tue, 29 Nov 2022 19:40:27 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
last-modified: Tue, 23 Nov 2021 21:37:13 GMT
etag: "c65bc20b5c2102386f484979b51049a6"
x-amz-server-side-encryption: AES256
cache-control: public, immutable, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xa_kGFPm3qqZphU01s_J2Y5FZMBqFWNviiRXvJdVt46trMcom8sSqQ==
age: 171120
X-Firefox-Spdy: h2
www.gofundme.com/partnerassets/causes/flex-causes-avatar-4.png
143.204.55.38200 OK 42 kB URL HTTP/2 www.gofundme.com/partnerassets/causes/flex-causes-avatar-4.png
IP 143.204.55.38:0
File type PNG image data, 168 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash c58ebdaf2a57df18646d28a48f144360
032ad6f8cc88ea1db0642b46361d9ca3612a6dfc
1d6072af386779ecda25d58d00d86de8a0268f0c7ceab8caa1a2dcd092c51df2
GET /partnerassets/causes/flex-causes-avatar-4.png HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 41709
date: Thu, 01 Dec 2022 15:21:50 GMT
last-modified: Tue, 01 Nov 2022 22:19:15 GMT
etag: "c58ebdaf2a57df18646d28a48f144360"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bCA8wIoti2bL-79cfsutMu21nXAUGoR3izh617OKgZsnZL-50_sdyg==
age: 13838
X-Firefox-Spdy: h2
www.gofundme.com/partner-assets/_next/static/NVy_1sCRP46Syz7YGKk_0/_ssgManifest.js
143.204.55.38200 OK 111 B URL HTTP/2 www.gofundme.com/partner-assets/_next/static/NVy_1sCRP46Syz7YGKk_0/_ssgManifest.js
IP 143.204.55.38:0
File type ASCII text, with no line terminators
Hash 1b12e518c91e304205d46182bb92f1cd
7fc75e37a7ae91b3d5a848061f44028e3c4c2a06
ff5c0e66ff6655de95203ebec0adf07c0a3049a06008adf044bf4e0675282fea
GET /partner-assets/_next/static/NVy_1sCRP46Syz7YGKk_0/_ssgManifest.js HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 111
date: Thu, 01 Dec 2022 15:21:48 GMT
server: nginx
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 01:18:10 GMT
etag: W/"6f-184cb43347a"
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lupguZENuafCzjxiuKYizidsNbXi1asQLi_9DI0aPN9YoEx1LpR8ZA==
age: 13839
X-Firefox-Spdy: h2
www.gofundme.com/partnerassets/causes/flex-causes-avatar-2.png
143.204.55.38200 OK 15 kB URL HTTP/2 www.gofundme.com/partnerassets/causes/flex-causes-avatar-2.png
IP 143.204.55.38:0
File type PNG image data, 86 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash c12e8e204f37e7d86078937cab543792
88ea9ceb3be238acbb10ee3da6abe1c41b4ab63f
6cf3641e4d76f8241eb6fbb6af1888884ffb1dc4d30bb86d3fa8cf4801fd2fdb
GET /partnerassets/causes/flex-causes-avatar-2.png HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 14899
date: Thu, 01 Dec 2022 15:21:50 GMT
last-modified: Fri, 28 Oct 2022 18:34:53 GMT
etag: "c12e8e204f37e7d86078937cab543792"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WHp5MpWKMZL4kLbXtPaAYJ-WJeMkjGstLTxpEntqUgiW70N4-Hlmtw==
age: 13838
X-Firefox-Spdy: h2
www.gofundme.com/partnerassets/causes/flex-causes-story-3.png
143.204.55.38200 OK 781 B URL HTTP/2 www.gofundme.com/partnerassets/causes/flex-causes-story-3.png
IP 143.204.55.38:0
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash fe809124631b39b603741492a284346b
00d26b10da71455afa2f4313ec6f67607c21e93b
f6a12d40994c449024cda661040b45bd7d512390b45b46e55be0aeb2a8065ed5
GET /partnerassets/causes/flex-causes-story-3.png HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 781
date: Thu, 01 Dec 2022 15:21:51 GMT
last-modified: Tue, 01 Nov 2022 22:12:11 GMT
etag: "fe809124631b39b603741492a284346b"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XYsJY733_hwNqSDD1kqgcdLpsgVtplopC3EtQSnRIBjRc6x94Oj6Bw==
age: 13837
X-Firefox-Spdy: h2
www.gofundme.com/partnerassets/causes/flex-causes-story-5.png
143.204.55.38200 OK 30 kB URL HTTP/2 www.gofundme.com/partnerassets/causes/flex-causes-story-5.png
IP 143.204.55.38:0
File type PNG image data, 147 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash e0977249b10ef550814ba51a0a598da0
107c29513efeccced2bc39b1d2e91e5775267b6f
c3d4ed8f47e94222de899ff7849bd4cd086562a66cbfe5eec4da7a149488873d
GET /partnerassets/causes/flex-causes-story-5.png HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 29759
date: Thu, 01 Dec 2022 15:21:51 GMT
last-modified: Tue, 01 Nov 2022 21:57:30 GMT
etag: "e0977249b10ef550814ba51a0a598da0"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XnFB69X7BDwPXngy79inv-rDUDnwVhNkqQ09C1iztoHl8hNgDRuGJQ==
age: 13837
X-Firefox-Spdy: h2
www.gofundme.com/partnerassets/causes/flex-causes-story-6.png
143.204.55.38200 OK 4.1 kB URL HTTP/2 www.gofundme.com/partnerassets/causes/flex-causes-story-6.png
IP 143.204.55.38:0
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 1de43cc01a0801879f46e8f4e542a818
f69e24e45b56c62e5bd19b3b6304144451f28403
08316e9f5642e9757629b1000ffb4dbb8a9fd24edba79dbf138da3de4c25bcc0
GET /partnerassets/causes/flex-causes-story-6.png HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4143
date: Thu, 01 Dec 2022 15:21:51 GMT
last-modified: Tue, 01 Nov 2022 22:00:48 GMT
etag: "1de43cc01a0801879f46e8f4e542a818"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: jZl4iYA_PDWAbjDmbKaZrQ7QUTEL_yOPJNtYU0QYd4RwqTCkKiVzoQ==
age: 13837
X-Firefox-Spdy: h2
www.gofundme.com/partnerassets/causes/flex-causes-donees.png
143.204.55.38200 OK 3.2 kB URL HTTP/2 www.gofundme.com/partnerassets/causes/flex-causes-donees.png
IP 143.204.55.38:0
File type PNG image data, 80 x 69, 8-bit/color RGBA, non-interlaced\012- data
Hash d8b7f8747dbcd96b7eea387ce605b2d3
930432a1f7d862d8eb8c76a241432d39b4bd5f96
c184f58fa7dc79ae3df324e2e477a741027eecb38f342375ee9d8300192b3920
GET /partnerassets/causes/flex-causes-donees.png HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 3239
date: Thu, 01 Dec 2022 15:21:51 GMT
last-modified: Tue, 11 Oct 2022 15:27:27 GMT
etag: "d8b7f8747dbcd96b7eea387ce605b2d3"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DTHHA4NK55RcdO0G8bXRomX334C8b7xX49U0TaoBILyZ8Yc0CBRn4Q==
age: 13837
X-Firefox-Spdy: h2
www.gofundme.com/partnerassets/causes/flex-causes-tax.png
143.204.55.38200 OK 2.7 kB URL HTTP/2 www.gofundme.com/partnerassets/causes/flex-causes-tax.png
IP 143.204.55.38:0
File type PNG image data, 64 x 81, 8-bit/color RGBA, non-interlaced\012- data
Hash 4f6b26792c09d01bd10289a7aa66d5ea
2d5e9df87b4faa9ba568f3a99ade9fe80c037cbf
469f72bbd12c92b8efcb1eba6bd8f316c921f0b13f4e76bd0654d7bd45564cf4
GET /partnerassets/causes/flex-causes-tax.png HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2749
date: Thu, 01 Dec 2022 15:21:51 GMT
last-modified: Tue, 11 Oct 2022 15:27:30 GMT
etag: "4f6b26792c09d01bd10289a7aa66d5ea"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WjCZau6n_0w6xQo2tmWABavAVLpjrtn0U_Fl-1Jz5CT1gG0exBWC4A==
age: 13837
X-Firefox-Spdy: h2
www.gofundme.com/partnerassets/causes/flex-causes-story-2.png
143.204.55.38200 OK 43 kB URL HTTP/2 www.gofundme.com/partnerassets/causes/flex-causes-story-2.png
IP 143.204.55.38:0
File type PNG image data, 147 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash 669809acbde406bb02f88d9d9aac55cd
114687eecf22775650bb5e53178c6c7c3d362ceb
1e2f621ac56439b54b9a490f2f445105840afd8f8e150a2e3ebec67ae41c7918
GET /partnerassets/causes/flex-causes-story-2.png HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 43124
date: Thu, 01 Dec 2022 15:21:51 GMT
last-modified: Tue, 01 Nov 2022 21:57:28 GMT
etag: "669809acbde406bb02f88d9d9aac55cd"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: i_FyRn0i6pCRP-vE7e2M7ZCtGr87n6V54H8aC0gEvb-M1hTAPIaqYA==
age: 13837
X-Firefox-Spdy: h2
www.gofundme.com/partnerassets/causes/flex-causes-story-4.png
143.204.55.38200 OK 42 kB URL HTTP/2 www.gofundme.com/partnerassets/causes/flex-causes-story-4.png
IP 143.204.55.38:0
File type PNG image data, 147 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash 86ca62b2cf1f35352e2dadc11677233d
9a5c4dc7ca9f0a6e5a14bb4803f950bde55c6607
58085e6d86f5efd18d0b5228e5d9a2820b67432daec662ec8157a07daff7cce1
GET /partnerassets/causes/flex-causes-story-4.png HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 42534
date: Thu, 01 Dec 2022 15:21:51 GMT
last-modified: Tue, 01 Nov 2022 21:57:29 GMT
etag: "86ca62b2cf1f35352e2dadc11677233d"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Q9jWTeZcwCZy23vDHAry270JYLBz2-AyxVd7XHO79XGkOeA4uA7ZCA==
age: 13837
X-Firefox-Spdy: h2
www.gofundme.com/partnerassets/causes/flex-causes-how-collage.png
143.204.55.38200 OK 441 kB URL HTTP/2 www.gofundme.com/partnerassets/causes/flex-causes-how-collage.png
IP 143.204.55.38:0
File type PNG image data, 849 x 705, 8-bit/color RGBA, non-interlaced\012- data
Size 441 kB (441303 bytes)
Hash 639af8ff9441498661902a9af9c4f263
5572f0c533738e0243052b1cc5a083092ea6b260
65af237c18c1535bf189784d7d79485ef68276cb4912548b9881ee1a8e492af1
GET /partnerassets/causes/flex-causes-how-collage.png HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 441303
date: Thu, 01 Dec 2022 15:21:51 GMT
last-modified: Tue, 11 Oct 2022 15:27:31 GMT
etag: "639af8ff9441498661902a9af9c4f263"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dxMqF_1ocXmMq78knKI_xAgZqdwUSiTTJ_m797CCmbpBnMhquQF72A==
age: 13837
X-Firefox-Spdy: h2
www.gofundme.com/partnerassets/causes/flex-causes-avatar-1.png
143.204.55.38200 OK 13 kB URL HTTP/2 www.gofundme.com/partnerassets/causes/flex-causes-avatar-1.png
IP 143.204.55.38:0
File type PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash 6458e201213ad40a533221a13f5d3643
ff6aa50bb198be7d6f0843e9a568590cd36fc0f0
22bfe4a0e6ce74f5f06c2ca4401d0620be323cd9a854a74301a62f29c39402fa
GET /partnerassets/causes/flex-causes-avatar-1.png HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 12867
date: Thu, 01 Dec 2022 15:21:50 GMT
last-modified: Fri, 28 Oct 2022 18:34:53 GMT
etag: "6458e201213ad40a533221a13f5d3643"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0z3tkzAebsWMW1KfBRhug9eUiQfe4UZ5KmxpRNDeGXYALaNZGOjZjA==
age: 13838
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221669921742494%22
34.102.187.140200 OK 22 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221669921742494%22
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (21675), with no line terminators
Hash 105323505367ab8896038ed0a2dac1b1
8f055261149778773079a90a0502ab708d851e86
0ba7e90e548a1fde7c1522f0e16935d5eec354e313265241a89931d7608321af
GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221669921742494%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 21675
via: 1.1 google
date: Thu, 01 Dec 2022 19:11:58 GMT
cache-control: public,max-age=3600
last-modified: Thu, 01 Dec 2022 19:09:02 GMT
content-type: application/json
age: 30
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1669921742494&_since=%221669753108374%22
34.102.187.140200 OK 892 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1669921742494&_since=%221669753108374%22
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (892), with no line terminators
Hash 6413630abce99ef893806d46822d627c
6b518222aec62dbfdf7bd542558c8b99799c6689
4f342e1991b204279bfce596cb55cad5865e3ec1b43c7f282ffe0e2abfae624f
GET /v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1669921742494&_since=%221669753108374%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 892
via: 1.1 google
date: Thu, 01 Dec 2022 19:11:58 GMT
cache-control: public,max-age=3600
last-modified: Thu, 01 Dec 2022 19:09:02 GMT
content-type: application/json
age: 30
alt-svc: clear
X-Firefox-Spdy: h2
www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
143.204.55.38200 OK 28 kB URL HTTP/2 www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
IP 143.204.55.38:0
Hash 6661c8afed813410c030529a0d4eec2b
726971895cca1b3c5efe61e0b4a6dda7cf0e98f1
870e15cdbf4dd4e8eade60457513af88d188715ed362191b7be190b07c9afd42
GET /funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Thu, 01 Dec 2022 19:12:27 GMT
server: nginx
x-nextjs-cache: HIT
x-powered-by: Next.js
etag: "12dqmpf3wmm1f1o"
cache-control: s-maxage=31536000, stale-while-revalidate
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
x-cache: Miss from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 08hoxT3_10YAkRMXqY08DL2O1d5UbGgkMcHiDfFbNHCoZojCCBwWMA==
X-Firefox-Spdy: h2
gateway.gofundme.com/web-gateway/v1/feed/identity
54.230.111.116200 OK 92 B URL HTTP/2 gateway.gofundme.com/web-gateway/v1/feed/identity
IP 54.230.111.116:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 4a00451ecab4c8bba1375cc546909e57
e054402867408a517dd5bd9e744897ad1c0a9d12
0334e1b3e9f063495cf247e4e203deaa9e6a6aec5214447467945a6cc0b2ceb7
GET /web-gateway/v1/feed/identity HTTP/1.1
Host: gateway.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.gofundme.com
Connection: keep-alive
Referer: https://www.gofundme.com/
Cookie: gdid=4ab32ec2-2213-4880-a907-cec346f7e6fc; amp_dec4ad=4ab32ec2-2213-4880-a907-cec346f7e6fc...1gj7hlf1e.1gj7hlf1e.0.1.1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/json
content-length: 92
date: Thu, 01 Dec 2022 19:11:37 GMT
server: nginx
cache-control: max-age=0, s-maxage=60, public
allow: GET, HEAD, OPTIONS
gfm-request-id: cff1f7ec87754325b5e48bb4c5591484
gfm-server-request-id: cff1f7ec87754325b5e48bb4c5591484
gfm-parent-request-id: 0c3623b3-7627-483f-b167-70fd04c9656e
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: same-origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.gofundme.com
access-control-expose-headers: GFM-Request-Id, GFM-Server-Request-Id, GFM-Parent-Request-Id
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rJuszA3PYkJQ90GZ5uPrJX9BeLQnO0JBn6BjmXu7LG8Y0N4Bt38OSw==
age: 51
X-Firefox-Spdy: h2
gateway.gofundme.com/web-gateway/v1/feed/essentials-fund/updates
54.230.111.116200 OK 4.7 kB URL HTTP/2 gateway.gofundme.com/web-gateway/v1/feed/essentials-fund/updates
IP 54.230.111.116:0
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (4693), with no line terminators
Hash 9085dc758700835fb90142e82f3b50b3
a69d62e5f0d3359ce5b4f6ab9bd30915dfbdea22
3237ca761fef61d3d1f1f5a48bb1533b2f269e627ea285022fab7c297b149e79
GET /web-gateway/v1/feed/essentials-fund/updates HTTP/1.1
Host: gateway.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.gofundme.com
Connection: keep-alive
Referer: https://www.gofundme.com/
Cookie: gdid=4ab32ec2-2213-4880-a907-cec346f7e6fc; amp_dec4ad=4ab32ec2-2213-4880-a907-cec346f7e6fc...1gj7hlf1e.1gj7hlf1e.0.1.1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/json
content-length: 4705
date: Thu, 01 Dec 2022 19:12:28 GMT
server: nginx
cache-control: max-age=0, s-maxage=60, public
allow: GET, HEAD, OPTIONS
gfm-request-id: fa06ff18b6754ac4af02ce62bb0c0836
gfm-server-request-id: fa06ff18b6754ac4af02ce62bb0c0836
gfm-parent-request-id:
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: same-origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.gofundme.com
access-control-expose-headers: GFM-Request-Id, GFM-Server-Request-Id, GFM-Parent-Request-Id
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
vary: Accept-Encoding,Origin
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aF-TBJmspCAeoK0Vcld-XtxP8yw3UgNuaBk_SQdZ8QCWyCkcTioAMw==
X-Firefox-Spdy: h2
gateway.gofundme.com/web-gateway/v1/feed/essentials-fund/campaign
54.230.111.116200 OK 12 kB URL HTTP/2 gateway.gofundme.com/web-gateway/v1/feed/essentials-fund/campaign
IP 54.230.111.116:0
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (12134), with no line terminators
Hash 391f28bf449606bf910b8cf317c5ac9b
0cb0174cae7b05ecfdb4d0abaf3fd21a33072fcc
1d731d07fb30c1b01a44a48d9fcfb719387397bd7b6213fed3916e310022fb0c
GET /web-gateway/v1/feed/essentials-fund/campaign HTTP/1.1
Host: gateway.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.gofundme.com
Connection: keep-alive
Referer: https://www.gofundme.com/
Cookie: gdid=4ab32ec2-2213-4880-a907-cec346f7e6fc; amp_dec4ad=4ab32ec2-2213-4880-a907-cec346f7e6fc...1gj7hlf1e.1gj7hlf1e.0.1.1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/json
content-length: 12143
date: Thu, 01 Dec 2022 19:12:28 GMT
server: nginx
cache-control: max-age=0, s-maxage=300, public
allow: GET, HEAD, OPTIONS
gfm-request-id: c8866aa6749b41c590b0f839ea9fedab
gfm-server-request-id: c8866aa6749b41c590b0f839ea9fedab
gfm-parent-request-id:
x-frame-options: DENY
access-control-allow-credentials: true
access-control-allow-origin: https://www.gofundme.com
access-control-expose-headers: GFM-Request-Id, GFM-Server-Request-Id, GFM-Parent-Request-Id
x-content-type-options: nosniff
referrer-policy: same-origin
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
vary: Accept-Encoding,Origin
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KZShuxvPXL73A_VsVlFlVW7W6zf35fU_SAGC9D-NuW2Zhjgl-YlvuA==
X-Firefox-Spdy: h2
ocsp.comodoca.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash f15e471c24424484b2bebcd675bd294c
78fbec83f71c32557a78b0e09df2888e77155eed
955e56f58c5c1d1fb224cc75775957a49e5bc8328d22219031d9bbc1191f8af0
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 19:12:28 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 03:38:20 GMT
Expires: Wed, 07 Dec 2022 03:38:19 GMT
Etag: "78fbec83f71c32557a78b0e09df2888e77155eed"
Cache-Control: max-age=602536,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 39
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772e227299efb524-OSL
ocsp.comodoca.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash f15e471c24424484b2bebcd675bd294c
78fbec83f71c32557a78b0e09df2888e77155eed
955e56f58c5c1d1fb224cc75775957a49e5bc8328d22219031d9bbc1191f8af0
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 19:12:28 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 03:38:20 GMT
Expires: Wed, 07 Dec 2022 03:38:19 GMT
Etag: "78fbec83f71c32557a78b0e09df2888e77155eed"
Cache-Control: max-age=602536,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 39
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772e2272aa09b524-OSL
d25oniaj7o2jcw.cloudfront.net/img-play-store-v2.png
54.230.245.158200 OK 2.4 kB URL HTTP/2 d25oniaj7o2jcw.cloudfront.net/img-play-store-v2.png
IP 54.230.245.158:0
File type PNG image data, 135 x 40, 8-bit colormap, non-interlaced\012- data
Hash 384efc06da98c453647054474b8564c0
7bbc18ffe6267b53cdd1468914617491fdd84e50
b4bd7c114d8e81bcbe723b82e1d5f5ad334b39431d930f92d21289e59ac36050
GET /img-play-store-v2.png HTTP/1.1
Host: d25oniaj7o2jcw.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 2360
date: Mon, 04 Jul 2022 00:08:29 GMT
last-modified: Wed, 02 Dec 2020 08:31:57 GMT
etag: "384efc06da98c453647054474b8564c0"
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UyrHXrcVaa0YXNeBaOsYovwgPckQ0gZtxoLJL9dbM0Rl8wofLVKS5g==
age: 13028640
X-Firefox-Spdy: h2
d25oniaj7o2jcw.cloudfront.net/img-app-store-v2.png
54.230.245.158200 OK 1.5 kB URL HTTP/2 d25oniaj7o2jcw.cloudfront.net/img-app-store-v2.png
IP 54.230.245.158:0
File type PNG image data, 120 x 40, 8-bit colormap, non-interlaced\012- data
Hash 42dc6da3e0995b5d56ac1821a8c5d8fc
4b95975948a25175b0ca330ebdbf394a6bbb1879
26fe0357914167f81e0e85031759d49a8ca2b6346a608e9700fb5e6d53b2ed33
GET /img-app-store-v2.png HTTP/1.1
Host: d25oniaj7o2jcw.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1539
date: Fri, 15 Jul 2022 03:00:39 GMT
last-modified: Wed, 02 Dec 2020 08:31:56 GMT
etag: "42dc6da3e0995b5d56ac1821a8c5d8fc"
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OjDot1oXWRQqmjneF4SyOndjasbOSQ13xenoC6QKoAijWk3pglO90w==
age: 12067910
X-Firefox-Spdy: h2
vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
143.204.55.118200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
IP 143.204.55.118:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash e0652b84b7b3b650769c759fc520c3f8
0b55d6e28613350c7f41b88f19e726e6751ad03b
94b4c240f83065223dcacdd3f8b69cb229d0616edc3e2041eef3e270d859fc3d
GET /box-5e66f98b4ee957db209dc6f63e3d59dd.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Wed, 23 Nov 2022 13:10:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "e0652b84b7b3b650769c759fc520c3f8"
last-modified: Wed, 23 Nov 2022 13:09:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: X824ncqwCDEPiKL35E89gCRb87NtpvuADatmIdvdtIXrroYQJ6bbTA==
age: 712942
X-Firefox-Spdy: h2
script.hotjar.com/modules.90de377b639fd5b933d2.js
143.204.55.68200 OK 68 kB URL HTTP/2 script.hotjar.com/modules.90de377b639fd5b933d2.js
IP 143.204.55.68:0
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash 8766036825574dfbddbfc197bd098f6b
3c6087743e1b23d7f071f66d65bec1fdb143a2c2
89c7cf4e7103f90d1cc059e02ac95e97a976de4867e6215945fa6046b04db0b8
GET /modules.90de377b639fd5b933d2.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68504
date: Thu, 01 Dec 2022 13:37:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "8766036825574dfbddbfc197bd098f6b"
last-modified: Thu, 01 Dec 2022 13:36:28 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mhOcTajKPU9t5wsiD4Q7WftRwy1SZFAE63zNvKnIe7cs8-eGRdGnUQ==
age: 20122
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2894
Expires: Thu, 01 Dec 2022 20:00:42 GMT
Date: Thu, 01 Dec 2022 19:12:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2894
Expires: Thu, 01 Dec 2022 20:00:42 GMT
Date: Thu, 01 Dec 2022 19:12:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2894
Expires: Thu, 01 Dec 2022 20:00:42 GMT
Date: Thu, 01 Dec 2022 19:12:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2894
Expires: Thu, 01 Dec 2022 20:00:42 GMT
Date: Thu, 01 Dec 2022 19:12:28 GMT
Connection: keep-alive
api.amplitude.com/
44.238.28.0200 OK 0 B IP 44.238.28.0:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: api.amplitude.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: cross-origin-resource-policy
Referer: https://www.gofundme.com/
Origin: https://www.gofundme.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 19:12:28 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: cross-origin-resource-policy
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 820cf89fcab8380adff42982c9fb11ed
84241ddddbbfd7de30118307fb1a62800d0a4cb3
0d051495f06ac84de934283b40cbfee7a042d32153a73486dd7c017430e882d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12898
x-amzn-requestid: 9b594c3c-6b8c-4589-8fcb-b3d7518b46f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cQZBNFxToAMF_9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63833ba1-767f510d72eef86d0cc892df;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 10:27:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gsn5uUFEzDZDOMPTvW9UQxtccvRfJKUM4eJ8U99jvUGzNIKkF9SzeA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:49:20 GMT
age: 76988
etag: "84241ddddbbfd7de30118307fb1a62800d0a4cb3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d2dd5a4bcfd47db8f38544bf39ce3031
fa2217bae05b7beca2e12597eaad835298276b82
3266004f5e73af5359b71622eea31f1e28abb4bbc443b5f9e481b5a8b2e9249e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4762
x-amzn-requestid: b7c0e28a-de0d-443d-8bf4-900a964bf110
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7uSFcMoAMF2CQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830cc1-7abade3a670201cf1906b79f;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:07:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gZSkafSw8cXo9AChLOTVJW7r_hHLW8kaHlA-ED2_zFJwuUk1uS3VRw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 13:29:36 GMT
age: 20572
etag: "fa2217bae05b7beca2e12597eaad835298276b82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.gofundme.com/partnerassets/causes/flex-causes-story-1.png
143.204.55.38200 OK 12 kB URL HTTP/2 www.gofundme.com/partnerassets/causes/flex-causes-story-1.png
IP 143.204.55.38:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash acffcb88ce68b2d70c9c046a7b5a4aa8
cd016e6c0bf5c6eef06e933c9a5257ff4fca9bc1
692d782ac1d812de6dadbcfe46034b6b5d8bbd586e56beedd96dc4d65445dd4c
GET /partnerassets/causes/flex-causes-story-1.png HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 41505
date: Thu, 01 Dec 2022 15:21:51 GMT
last-modified: Tue, 01 Nov 2022 21:57:30 GMT
etag: "586ac059bbdbec34136bbd074bd6351e"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1XE8PsFkfGacGHtSnhw6jCRLDBdMH8jnoxL-hkoHLmu47KcXDJzChA==
age: 13837
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb53953-3f6b-43ee-95d9-fb65d133745f.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb53953-3f6b-43ee-95d9-fb65d133745f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 328ce221bcf3442f88d09373193ff594
63bfa2ea925aa2c188c664a7bf7af7b0e5417e60
21d5b5ec267430dba91b17f89a557aca5cd2a21535da18eb02ec69ed0e1b7371
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb53953-3f6b-43ee-95d9-fb65d133745f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13411
x-amzn-requestid: 17fcc4e1-76c1-4eca-9235-c1a513bca24a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbz80FCQoAMFs1A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cd1e-26da4f265d74215f31425eb9;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:37:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MttRByNp1C1ZeFFicFVa0w3XRyXJnUycPy2Izk8hzGEgXGdDqD3L3A==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:48:17 GMT
age: 77051
etag: "63bfa2ea925aa2c188c664a7bf7af7b0e5417e60"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.gofundme.com/partner-assets/_next/static/images/circle-flags-b4add853dea4cf115ce2101ce5a4488b.svg
143.204.55.38200 OK 14 kB URL HTTP/2 www.gofundme.com/partner-assets/_next/static/images/circle-flags-b4add853dea4cf115ce2101ce5a4488b.svg
IP 143.204.55.38:0
Hash 57800420b1a7eebdd774c0c2758ff6de
b9c2984436fd451c0e7fbf5bd30a1f75dda8b847
c91c71ac6e6c1282f927e674b4f5bd0ac271b805d73bcca5f1cfb4f538aac731
GET /partner-assets/_next/static/images/circle-flags-b4add853dea4cf115ce2101ce5a4488b.svg HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Cookie: gdid=4ab32ec2-2213-4880-a907-cec346f7e6fc; amp_dec4ad=4ab32ec2-2213-4880-a907-cec346f7e6fc...1gj7hlf1e.1gj7hlf1e.0.1.1; _ALGOLIA=anonymous-a3d11f5e-77e6-4015-8966-eec41794bbd9; amp_dec4ad_gofundme.com=4ab32ec2-2213-4880-a907-cec346f7e6fc...1gj7hlf1e.1gj7hlf6c.1.3.4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
server: nginx
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 01:18:10 GMT
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
date: Thu, 01 Dec 2022 19:12:28 GMT
cache-control: public, max-age=0
etag: W/"3f79-184cb43347a"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eDsLwnOCpMDsF0Uv1tzHs2mRT57Kv761_gx7vlEdJpqOHfpZJ5z50Q==
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg
34.120.237.76200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ffd12f9c423ffc627d9e3b3145944fe4
5cf9a7a784952e1bb0cbe499104f1774b1269d08
a25f1b752d9af599aefd73073c105853130f1759905269de3d582d2eb35fe167
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16038
x-amzn-requestid: 9d34c42b-ba0c-498f-8f99-d4ab527ffa89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbzMdHXNIAMFgaw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cbe9-376846f31dc9b995797cbd18;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:32:25 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DngCuOTO9fQAwWe_ip6EtBcgruigZN6Bl1_v5BHM2dsWlhqCXCL3gg==
via: 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:45:33 GMT
age: 77215
etag: "5cf9a7a784952e1bb0cbe499104f1774b1269d08"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.gofundme.com/partner-assets/_next/static/css/2cf9c4938d580303.css
143.204.55.38200 OK 11 kB URL HTTP/2 www.gofundme.com/partner-assets/_next/static/css/2cf9c4938d580303.css
IP 143.204.55.38:0
File type Unicode text, UTF-8 text, with very long lines (63687), with no line terminators
Hash c0ed9a104f01dd8f012845de75cc91a7
a4fcb76f3282e74fe6b6199b23d0012f1176c2aa
8bbf5fdd4f0dcfdb407ddf65e14899fb31b295f1db9fac3c3603a4921010d6a9
GET /partner-assets/_next/static/css/2cf9c4938d580303.css HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
date: Thu, 01 Dec 2022 15:21:48 GMT
server: nginx
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 01:18:10 GMT
etag: W/"f8c9-184cb43347a"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zntrET4Kg5E_Hy9IjvkcMe6YgfDN2tH3bIWbsLXw3U_B6tl3bN2itg==
age: 13839
X-Firefox-Spdy: h2
api.amplitude.com/
44.238.28.0200 OK 7 B IP 44.238.28.0:0
File type ASCII text, with no line terminators
Hash 260ca9dd8a4577fc00b7bd5810298076
53a5687cb26dc41f2ab4033e97e13adefd3740d6
aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
POST / HTTP/1.1
Host: api.amplitude.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Cross-Origin-Resource-Policy: cross-origin
Content-Length: 1469
Origin: https://www.gofundme.com
Connection: keep-alive
Referer: https://www.gofundme.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 19:12:29 GMT
content-type: text/html;charset=utf-8
content-length: 7
access-control-allow-origin: *
access-control-allow-methods: GET, POST
trace-id: Root=1-6388fc9c-0ab4c50a53ec17b51a55c3de
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
www.gofundme.com/partner-assets/_next/static/chunks/882-2977418845f72269.js
143.204.55.38200 OK 4.2 kB URL HTTP/2 www.gofundme.com/partner-assets/_next/static/chunks/882-2977418845f72269.js
IP 143.204.55.38:0
Hash 8b57d7c32a05e96c98805938cd1fd4b3
d809ae5acaddf2674fb096f2d55918212a50e2d6
e38e6ffca46c6c868a955ab86b773aef9d7036b79c2709868c34b9c9a9e2af67
GET /partner-assets/_next/static/chunks/882-2977418845f72269.js HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Thu, 01 Dec 2022 15:21:48 GMT
server: nginx
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 01:18:10 GMT
etag: W/"499b-184cb43347a"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9a6JEGmUBuBwXSL0sqabtY8h8DBJewNsccFdmGfcJiGHdA_BeiI0-Q==
age: 13839
X-Firefox-Spdy: h2
www.gofundme.com/favicon.ico
143.204.55.38200 OK 15 kB URL HTTP/2 www.gofundme.com/favicon.ico
IP 143.204.55.38:0
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash f47c9ae99fe8c7b1191754787e47bd45
0deb70dcc5e09aef8a66b16a2d837cfb08733f62
0e369f3f5bc39bcc464df17cee9a381a36af1c7a5fca734b57fadf43d160efc5
GET /favicon.ico HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Cookie: gdid=4ab32ec2-2213-4880-a907-cec346f7e6fc; amp_dec4ad=4ab32ec2-2213-4880-a907-cec346f7e6fc...1gj7hlf1e.1gj7hlf1e.0.1.1; _ALGOLIA=anonymous-a3d11f5e-77e6-4015-8966-eec41794bbd9; amp_dec4ad_gofundme.com=4ab32ec2-2213-4880-a907-cec346f7e6fc...1gj7hlf1e.1gj7hlf6c.1.3.4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 15086
date: Thu, 01 Dec 2022 19:12:29 GMT
server: nginx
last-modified: Thu, 01 Dec 2022 18:34:18 GMT
etag: "6388f3aa-3aee"
x-server: ip-10-50-194-151.ec2.internal
expires: Sat, 31 Dec 2022 19:12:29 GMT
cache-control: max-age=2592000, public
accept-ranges: bytes
content-security-policy: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: Miss from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JO3Zb5qCz1DPLWkS3ZJAxPCQgyH5DbvNJLNtuBYFOUv6rjbnSJdtqw==
X-Firefox-Spdy: h2
api.amplitude.com/
44.238.28.0200 OK 7 B IP 44.238.28.0:0
File type ASCII text, with no line terminators
Hash 260ca9dd8a4577fc00b7bd5810298076
53a5687cb26dc41f2ab4033e97e13adefd3740d6
aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
POST / HTTP/1.1
Host: api.amplitude.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Cross-Origin-Resource-Policy: cross-origin
Content-Length: 6031
Origin: https://www.gofundme.com
Connection: keep-alive
Referer: https://www.gofundme.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 19:12:29 GMT
content-type: text/html;charset=utf-8
content-length: 7
access-control-allow-origin: *
access-control-allow-methods: GET, POST
trace-id: Root=1-6388fc9d-186090ee7b6df2ab35b1d5fe
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/2940228/visit-data?sv=6
34.254.47.228200 OK 0 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/2940228/visit-data?sv=6
IP 34.254.47.228:0
POST /api/v2/client/sites/2940228/visit-data?sv=6 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 130
Origin: https://www.gofundme.com
Connection: keep-alive
Referer: https://www.gofundme.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 19:12:29 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
www.gofundme.com/partner-assets/_next/static/chunks/framework-21e3f028c1d5b784.js
143.204.55.38200 OK 0 B URL HTTP/2 www.gofundme.com/partner-assets/_next/static/chunks/framework-21e3f028c1d5b784.js
IP 143.204.55.38:0
GET /partner-assets/_next/static/chunks/framework-21e3f028c1d5b784.js HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Thu, 01 Dec 2022 15:21:48 GMT
server: nginx
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 01:18:10 GMT
etag: W/"22aea-184cb43347a"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EGFEoYYPKQJI7UIId4SL1dxuULzMVxOW1_C84Nt3tGa93J-b1xBiFg==
age: 13839
X-Firefox-Spdy: h2
www.gofundme.com/partner-assets/_next/static/css/4d7ce8e12461fcfc.css
143.204.55.38200 OK 0 B URL HTTP/2 www.gofundme.com/partner-assets/_next/static/css/4d7ce8e12461fcfc.css
IP 143.204.55.38:0
GET /partner-assets/_next/static/css/4d7ce8e12461fcfc.css HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
date: Thu, 01 Dec 2022 15:21:48 GMT
server: nginx
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 01:18:10 GMT
etag: W/"9057-184cb43347a"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: X5-C0cXxMC50kAtHGJXBL7auQLwXW2DTjTRyRx1eoPw2G2Bj8o2g6g==
age: 13839
X-Firefox-Spdy: h2
www.gofundme.com/partner-assets/_next/static/chunks/727-6fd8a669f5528275.js
143.204.55.38200 OK 0 B URL HTTP/2 www.gofundme.com/partner-assets/_next/static/chunks/727-6fd8a669f5528275.js
IP 143.204.55.38:0
GET /partner-assets/_next/static/chunks/727-6fd8a669f5528275.js HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Thu, 01 Dec 2022 15:21:48 GMT
server: nginx
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 01:18:10 GMT
etag: W/"12a027-184cb43347a"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: G2bXlE3bZvjBDUEvx5ETBnjsQqmClKSFlOJgCui7BnYMiIX99r2BGw==
age: 13839
X-Firefox-Spdy: h2
www.gofundme.com/partner-assets/_next/static/images/action-icons-9645f6597c00bf86c32ee777223af9ed.svg
143.204.55.38200 OK 0 B URL HTTP/2 www.gofundme.com/partner-assets/_next/static/images/action-icons-9645f6597c00bf86c32ee777223af9ed.svg
IP 143.204.55.38:0
GET /partner-assets/_next/static/images/action-icons-9645f6597c00bf86c32ee777223af9ed.svg HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
server: nginx
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 01:18:10 GMT
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
date: Thu, 01 Dec 2022 19:12:27 GMT
cache-control: public, max-age=0
etag: W/"9d9c-184cb43347a"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TQovR8u9-jEwVtMKsTUMSTQqN8ukq9JKXXBJXQITq57UrOJCezl90w==
X-Firefox-Spdy: h2
www.gofundme.com/partner-assets/_next/static/chunks/webpack-3577c55229cd4283.js
143.204.55.38200 OK 0 B URL HTTP/2 www.gofundme.com/partner-assets/_next/static/chunks/webpack-3577c55229cd4283.js
IP 143.204.55.38:0
GET /partner-assets/_next/static/chunks/webpack-3577c55229cd4283.js HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Thu, 01 Dec 2022 15:21:48 GMT
server: nginx
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 01:18:10 GMT
etag: W/"104a-184cb43347a"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qja9DiAPPWG5A7Rdl7oDCnyOkW3_IauIAXFkCMB8JLtgYFFGqPgRNg==
age: 13839
X-Firefox-Spdy: h2
www.gofundme.com/partner-assets/_next/static/chunks/main-4f78051b057b2e5b.js
143.204.55.38200 OK 0 B URL HTTP/2 www.gofundme.com/partner-assets/_next/static/chunks/main-4f78051b057b2e5b.js
IP 143.204.55.38:0
GET /partner-assets/_next/static/chunks/main-4f78051b057b2e5b.js HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Thu, 01 Dec 2022 15:21:48 GMT
server: nginx
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 01:18:10 GMT
etag: W/"22a40-184cb43347a"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kxTG_rfx1_MVkn7-Gz0nRJyz_FUlpiz3r5YxhV_oQLHMomFFbvYmKw==
age: 13839
X-Firefox-Spdy: h2
www.gofundme.com/partner-assets/_next/static/NVy_1sCRP46Syz7YGKk_0/_buildManifest.js
143.204.55.38200 OK 0 B URL HTTP/2 www.gofundme.com/partner-assets/_next/static/NVy_1sCRP46Syz7YGKk_0/_buildManifest.js
IP 143.204.55.38:0
GET /partner-assets/_next/static/NVy_1sCRP46Syz7YGKk_0/_buildManifest.js HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Thu, 01 Dec 2022 15:21:48 GMT
server: nginx
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 01:18:10 GMT
etag: W/"6f7-184cb43347a"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OkaCQ9OE4sbdp-1x20uk_Hh7k6ON5VYk24zaIdMj_1hwZrndycQtOQ==
age: 13839
X-Firefox-Spdy: h2
www.gofundme.com/partner-assets/_next/static/chunks/pages/causes/%5BcauseSlug%5D-49f2f3dd473cf66b.js
143.204.55.38200 OK 0 B URL HTTP/2 www.gofundme.com/partner-assets/_next/static/chunks/pages/causes/%5BcauseSlug%5D-49f2f3dd473cf66b.js
IP 143.204.55.38:0
GET /partner-assets/_next/static/chunks/pages/causes/%5BcauseSlug%5D-49f2f3dd473cf66b.js HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Thu, 01 Dec 2022 15:21:48 GMT
server: nginx
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 01:18:10 GMT
etag: W/"fe5d-184cb43347a"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nZU2EKmo3167n8a4PKqA53yY5WYxdVFpTntAKDndhnk7ri3j_NhC0A==
age: 13839
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-2940228.js?sv=6
143.204.55.84200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-2940228.js?sv=6
IP 143.204.55.84:0
GET /c/hotjar-2940228.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Thu, 01 Dec 2022 19:12:24 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/9dc53868db64eb4fe99b309336a5c009
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wZzMV8xNIU_ZPnbgTotpIqwp8ShVjX9JHj5bAYhsIbMxc2vWhz20oA==
age: 4
X-Firefox-Spdy: h2
www.gofundme.com/partner-assets/_next/static/chunks/75fc9c18-f867984200eea3b9.js
143.204.55.38200 OK 0 B URL HTTP/2 www.gofundme.com/partner-assets/_next/static/chunks/75fc9c18-f867984200eea3b9.js
IP 143.204.55.38:0
GET /partner-assets/_next/static/chunks/75fc9c18-f867984200eea3b9.js HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Thu, 01 Dec 2022 15:21:48 GMT
server: nginx
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 01:18:10 GMT
etag: W/"15238-184cb43347a"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dyysIjJXNXzCMvKBn0cV28PwAvi65_gviqOCrMRYDlXgMfju7iQDJQ==
age: 13839
X-Firefox-Spdy: h2
www.gofundme.com/partner-assets/_next/static/chunks/pages/_app-42ae7f6540df66f9.js
143.204.55.38200 OK 0 B URL HTTP/2 www.gofundme.com/partner-assets/_next/static/chunks/pages/_app-42ae7f6540df66f9.js
IP 143.204.55.38:0
GET /partner-assets/_next/static/chunks/pages/_app-42ae7f6540df66f9.js HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Thu, 01 Dec 2022 15:21:48 GMT
server: nginx
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 01:18:10 GMT
etag: W/"efd47-184cb43347a"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dHk_3qQS5l4mlfs-TugtYyrELvs8BZ-_HRsrEWNTbEYz4lKPPEbVCA==
age: 13839
X-Firefox-Spdy: h2
www.gofundme.com/partner-assets/_next/static/images/information-icons-8e28469525490b24db5532ee63323d3f.svg
143.204.55.38200 OK 0 B URL HTTP/2 www.gofundme.com/partner-assets/_next/static/images/information-icons-8e28469525490b24db5532ee63323d3f.svg
IP 143.204.55.38:0
GET /partner-assets/_next/static/images/information-icons-8e28469525490b24db5532ee63323d3f.svg HTTP/1.1
Host: www.gofundme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gofundme.com/funds/essentials?utm_source=email&utm_medium=marketing_c&utm_content=annoucement&utm_campaign=120122_gfm_essentials__mobile_ot2_qoute
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
server: nginx
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 01:18:10 GMT
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
content-security-policy-report-only: frame-ancestors gofundme.com *.gofundme.com *.hopin.com;
date: Thu, 01 Dec 2022 19:12:27 GMT
cache-control: public, max-age=0
etag: W/"9653-184cb43347a"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UPlclyly8z5fuSsLgtAMRQprYWFMh1yr8Kb0TbDgELDuLjhutgpLlw==
X-Firefox-Spdy: h2