www.savethechildren.org/us/about-us/privacy-policy?cid=Email:SFMC:GT_Missed:AAI_Team_Tomorrow_b:120122&smtrctid=36183272
301 Moved Permanently 340 B URL HTTP/1.1 www.savethechildren.org/us/about-us/privacy-policy?cid=Email:SFMC:GT_Missed:AAI_Team_Tomorrow_b:120122&smtrctid=36183272
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6d72fec0b5f9b13d595938a8371a3563
7bbca8b72fe3e4c80bd22a05b3b3c2cd7e25adbe
2bc499b2ff7f607efae19925d9aa8fefdac3e7b06f707b39be835932e7af1568
GET /us/about-us/privacy-policy?cid=Email:SFMC:GT_Missed:AAI_Team_Tomorrow_b:120122&smtrctid=36183272 HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
Content-Length: 340
Connection: keep-alive
Cache-Control: max-age=300, no-cache="set-cookie"
Date: Fri, 02 Dec 2022 04:45:01 GMT
Expires: Fri, 02 Dec 2022 04:50:01 GMT
Location: https://www.savethechildren.org/us/about-us/privacy-policy?cid=Email:SFMC:GT_Missed:AAI_Team_Tomorrow_b:120122&smtrctid=36183272
Server: Apache
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: S6rpyT4EqaEylyUMjULa3HYXvid4R8QnQLKEPa9wh9LJ5y7sRoWnEg==
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13269
Expires: Fri, 02 Dec 2022 08:26:10 GMT
Date: Fri, 02 Dec 2022 04:45:01 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2592
Cache-Control: max-age=109763
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:01 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 11:14:24 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11256
Expires: Fri, 02 Dec 2022 07:52:37 GMT
Date: Fri, 02 Dec 2022 04:45:01 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 04:19:50 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1511
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: grQo7pelQbUr/a6vMChgzENdYmks+sKW8rsTlrxfxrsxWHfS2Ri0MTIpytHh1xXhC76BLc2N5hc=
x-amz-request-id: 3Z3ZR0SACY57YW9Q
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 03:46:33 GMT
age: 3508
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 04:45:01 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.7 kB IP
Hash 15529bc82e5fa8c7bd552055f398570a
34828308813c81034a2ba095570b1a12cbf25244
4a2fd1b4ddec3f527a20d8e1c1f5b710c4c4b8aec793c704d29bb70bc4862e11
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 68
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 04:45:01 GMT
Content-Type: application/ocsp-response
Content-Length: 1731
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 01 Dec 2022 19:17:30 GMT
Expires: Fri, 02 Dec 2022 19:17:30 GMT
ETag: "34828308813c81034a2ba095570b1a12cbf25244"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 0325cd9b5b962562ac71019ad3c93d7b
9a708b31aab81edcad305ad2893ee7eecb952030
c666320d0684b81b5765df7e4f0619efbd839bd6f65f9e11da3a13a11ba15a34
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 04:45:01 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 01 Dec 2022 21:25:12 GMT
Expires: Fri, 02 Dec 2022 21:25:12 GMT
ETag: "9a708b31aab81edcad305ad2893ee7eecb952030"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 04:11:15 GMT
cache-control: public,max-age=3600
age: 2026
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
www.savethechildren.org/us/about-us/privacy-policy?cid=Email:SFMC:GT_Missed:AAI_Team_Tomorrow_b:120122&smtrctid=36183272
200 OK 19 kB URL HTTP/2 www.savethechildren.org/us/about-us/privacy-policy?cid=Email:SFMC:GT_Missed:AAI_Team_Tomorrow_b:120122&smtrctid=36183272
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (937), with CRLF, LF line terminators
Hash 825abdab7bad7085ace65dcc4380b343
a3ab2677c1ac803452ae146241cd2318ddd74592
e6c42529d753812a9f7d469eb36dcfd3fa5dcc2c0b6573ed605d21b2c6e12360
GET /us/about-us/privacy-policy?cid=Email:SFMC:GT_Missed:AAI_Team_Tomorrow_b:120122&smtrctid=36183272 HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html;charset=utf-8
content-length: 19275
cache-control: max-age=300, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Fri, 02 Dec 2022 04:45:01 GMT
expires: Fri, 02 Dec 2022 04:50:01 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN, SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: a44pka-X-udRLLxCOnaDJ5HBDSDBtf4bYXdKXXH5M5VbUla0lUfD3A==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2577
Cache-Control: max-age=104684
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:02 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 09:49:46 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
consent.cookiebot.com/uc.js
200 OK 32 kB URL HTTP/2 consent.cookiebot.com/uc.js
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65499)
Hash c8f7ad4768a16672f57131490149c3d0
c943c68aaa059f06744868bb239f06d900d41464
b5a1e40fab60b20e8b25517f6a7e6d27f21af0788959cdf3d52f5b94164cba0c
GET /uc.js HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 22 Nov 2022 07:34:39 GMT
accept-ranges: bytes
etag: "db2e3fe144fed81:0"
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 31718
cache-control: public, max-age=172
expires: Fri, 02 Dec 2022 04:47:54 GMT
date: Fri, 02 Dec 2022 04:45:02 GMT
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/launch-d47d2de11878.min.js
200 OK 100 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/launch-d47d2de11878.min.js
IP
File type ASCII text, with very long lines (32748)
Size 100 kB (100361 bytes)
Hash a83e6af84dbc51780b133d790f532172
088da0b9b62d476df50a3090e0c968b58cfd9371
240483c9f76d4c02f6a424944ea2c454bf474363ddc0d6ffecac1a688c09b45e
GET /a9de570d9caa/b01a1f4bb0c4/launch-d47d2de11878.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "b67d8d43287ac7eda41e18494f183d61:1668713788.777838"
last-modified: Thu, 17 Nov 2022 19:36:28 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 100361
cache-control: max-age=3600
expires: Fri, 02 Dec 2022 05:45:02 GMT
date: Fri, 02 Dec 2022 04:45:02 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/stc-logo.svg
200 OK 4.8 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/stc-logo.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (1449), with CRLF line terminators
Hash 32d1a7a7ee564190d0a650c21e58ccdc
a17f56b30a8f119bb2978e36d395d14d4f2cc376
932257c36331108b640702da4459550e1990dac56630762d4f5a15950305d08d
GET /etc/clientlibs/us/clientlib-site/images/icons/stc-logo.svg HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/about-us/privacy-policy?cid=Email:SFMC:GT_Missed:AAI_Team_Tomorrow_b:120122&smtrctid=36183272
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 4812
accept-ranges: bytes
cache-control: max-age=604800, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Fri, 02 Dec 2022 04:45:02 GMT
etag: "3130-5edae82329a00-gzip"
expires: Fri, 09 Dec 2022 04:45:02 GMT
last-modified: Thu, 17 Nov 2022 18:10:48 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LsMO9QzpphWLe01R4bbdHpk1kVvXoZdE_znL2SFNEWWZuzo4sJShcA==
X-Firefox-Spdy: h2
consent.cookiebot.com/5375074e-402c-46c7-bb0c-98aa16042230/cc.js?renew=false&referer=www.savethechildren.org&dnt=false&init=false
200 OK 156 B URL HTTP/2 consent.cookiebot.com/5375074e-402c-46c7-bb0c-98aa16042230/cc.js?renew=false&referer=www.savethechildren.org&dnt=false&init=false
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF line terminators
Hash 3477de123b1bcca0a96d557218c3c72c
279660604c7c2e9d5be154df57180849efca1e34
9331664c1938651f09a14fb45d0af5fd86a72c2d9aff0bc26193e239ddb38268
GET /5375074e-402c-46c7-bb0c-98aa16042230/cc.js?renew=false&referer=www.savethechildren.org&dnt=false&init=false HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=1
content-type: application/x-javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 156
date: Fri, 02 Dec 2022 04:45:02 GMT
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4fkG858cgjrLT657SeIsYw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4hOGhlabOGGEGlwNpkvx+TjDy5M=
www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/house.svg
200 OK 1.4 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/house.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash c959ef8cd0de375c95ff79a04bca2c87
2b83acbcf4bd4ef4efef614b3f4f50bf1ecf7f0c
953994f08c89a4cefbbd61cf82b3b2bed4e9e80745622fe89e184831c7a67ba3
GET /etc/clientlibs/us/clientlib-site/images/icons/house.svg HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/about-us/privacy-policy?cid=Email:SFMC:GT_Missed:AAI_Team_Tomorrow_b:120122&smtrctid=36183272
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1423
accept-ranges: bytes
cache-control: max-age=604800, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Fri, 02 Dec 2022 04:45:02 GMT
etag: "cd2-5edae822357c0-gzip"
expires: Fri, 09 Dec 2022 04:45:02 GMT
last-modified: Thu, 17 Nov 2022 18:10:47 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZRFht2Ngri5mtNhhKKQVlEB4UNXacV0vr8jA2vmxcDSC9V-RhA4pDg==
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-vendor.98417dd671c9971fd8f4053e024f7acf.css
200 OK 1.3 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-vendor.98417dd671c9971fd8f4053e024f7acf.css
IP
File type ASCII text, with very long lines (4065), with no line terminators
Hash 120fb59e9fd09c13ef8cbc4179f5d30f
e44c183a6bbe6789606f18a41be4b975486f0c34
17b7f5e7ebce4a96aba6457597aaaadbfe9e1e33d06931abe5b12cc843a46297
GET /etc/clientlibs/us/clientlib-vendor.98417dd671c9971fd8f4053e024f7acf.css HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/about-us/privacy-policy?cid=Email:SFMC:GT_Missed:AAI_Team_Tomorrow_b:120122&smtrctid=36183272
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 1297
accept-ranges: bytes
cache-control: max-age=14400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Fri, 02 Dec 2022 04:45:02 GMT
etag: "fe1-5edae7eae5540-gzip"
expires: Fri, 02 Dec 2022 08:45:02 GMT
last-modified: Thu, 17 Nov 2022 18:09:49 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nRfvKs6WhdprUuHaLu4MIm_M093J3QxX9yJTwdx6IoMOHScDryoT6Q==
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-datalayer.8e49d1c8076e9bab47ae8f043e187874.js
200 OK 20 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-datalayer.8e49d1c8076e9bab47ae8f043e187874.js
IP
File type ASCII text, with very long lines (58683), with CRLF line terminators
Hash 81fe2957d3bb87ec1565d171085ac5c5
60386d42678aad57dca839a7fa290666c282b086
2708c5f31b512aa866bb0c3de14b1b71437930626aeddc8a360ffd519b035441
GET /etc/clientlibs/us/clientlib-datalayer.8e49d1c8076e9bab47ae8f043e187874.js HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/about-us/privacy-policy?cid=Email:SFMC:GT_Missed:AAI_Team_Tomorrow_b:120122&smtrctid=36183272
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 20377
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Fri, 02 Dec 2022 04:45:02 GMT
etag: "e982-5edae7c4bfb40-gzip"
expires: Sat, 03 Dec 2022 04:45:02 GMT
last-modified: Thu, 17 Nov 2022 18:09:09 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1Bm4ksRh0yY7eiFqtaCJEuLk73sh9evLhI07tMAglqHCaaAp7qy7_A==
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-site.73c3af2a4179a84f605fe8c064d8c204.js
200 OK 40 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site.73c3af2a4179a84f605fe8c064d8c204.js
IP
File type ASCII text, with very long lines (846)
Hash c8e27a0de39bb90ea12c462d98e69745
51a17da6e3beb528a1dda12dac90d18969a9ada8
4d300145dd532d802430b0eb440b206c0172beae3c38a40fd8f10a743626ad60
GET /etc/clientlibs/us/clientlib-site.73c3af2a4179a84f605fe8c064d8c204.js HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/about-us/privacy-policy?cid=Email:SFMC:GT_Missed:AAI_Team_Tomorrow_b:120122&smtrctid=36183272
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 39575
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Fri, 02 Dec 2022 04:45:02 GMT
etag: "22fd1-5edae7e714c40-gzip"
expires: Sat, 03 Dec 2022 04:45:02 GMT
last-modified: Thu, 17 Nov 2022 18:09:45 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HIOt0MQlVqkBjCFDJdM3_0PuDh6GAlnLKoLZa4r3e2PfHCStuXUQRA==
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
200 OK 12 kB URL HTTP/2 assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
IP
File type ASCII text, with very long lines (32768)
Hash e616df092766c7ab7904619f971a35cc
a960429c42802a43e3ce728fc4d1e8bdab10e606
082ae7647bfdb639846791e5c0ca39b96544dff3aed0c365973c9589cd5b091e
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "d860c16ac938f7d839f0ec158d02d0f0:1644856531.418573"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 12163
expires: Fri, 02 Dec 2022 05:45:02 GMT
date: Fri, 02 Dec 2022 04:45:02 GMT
cache-control: no-cache
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js
200 OK 1.6 kB URL HTTP/2 assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js
IP
File type ASCII text, with very long lines (3155)
Hash e672de61b277fc72de4299829bfbb31c
157a7409922d58a02dad3ba879d04eb2a3ef8f3d
e1a1c2a6f2ed4ffb63ebfda157eaf12c6ee3973be4da649eb63e0402c0d29215
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "2d1382c349d480b6b41574ac0c1af066:1644856531.739514"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1597
expires: Fri, 02 Dec 2022 05:45:02 GMT
date: Fri, 02 Dec 2022 04:45:02 GMT
cache-control: no-cache
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/sign-in.svg
200 OK 407 B URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/sign-in.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (716), with no line terminators
Hash c4032568735cdd1423db03eee92c4e26
7e2ef44dc3831c874f75f70203e785c7fa1a7f88
0a92b7c00e5f3d2799bbdaff381e48f75857fc43b528b147912edaf776e878ad
GET /etc/clientlibs/us/clientlib-site/images/icons/sign-in.svg HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669956300833%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19329%7CvVersion%7C5.4.0; mbox=session#e28081cb4454403784c4f5f3d6250469#1669958162; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 407
accept-ranges: bytes
cache-control: max-age=604800, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 20:59:52 GMT
etag: "2cc-5edae920d7080-gzip"
expires: Tue, 06 Dec 2022 20:59:52 GMT
last-modified: Thu, 17 Nov 2022 18:15:14 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Nrijbqt4_3vIJr5QnTmmWruXrs_YOVJj2glyljUi9VtgGqyxkCy0jg==
age: 200711
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/search.svg
200 OK 3.7 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/search.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (7739), with CRLF line terminators
Hash 9b9a5c463af8fa8d21f7b84016ac9215
f79416af756163adf0b580f70ddb8cbb4c9f692e
f08f0656bba0efe4cc89d39164040f6e52402348209ca88661b20e8da714430b
GET /etc/clientlibs/us/clientlib-site/images/icons/search.svg HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669956300833%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19329%7CvVersion%7C5.4.0; mbox=session#e28081cb4454403784c4f5f3d6250469#1669958162; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3711
accept-ranges: bytes
cache-control: max-age=604800, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 04:10:28 GMT
etag: "1e73-5edae936c6440-gzip"
expires: Tue, 06 Dec 2022 04:10:28 GMT
last-modified: Thu, 17 Nov 2022 18:15:37 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5E7yaJtBlpAqT2sMJ0gMkm8blOenry2VAFDAs2BuB5T-ewGLTamQ9A==
age: 261275
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-site/fonts/lato-normal-bold-latin.woff2
200 OK 23 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/fonts/lato-normal-bold-latin.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22992, version 1.0\012- data
Hash 1efbd38aa76ddae2580fedf378276333
8a49976f2470ba2a1db6144245355d3b889312e4
8d3ca80fa271e94b0c36cf3053b0f806b7a42bb3395b424c99dc0bd218f0ac20
GET /etc/clientlibs/us/clientlib-site/fonts/lato-normal-bold-latin.woff2 HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.savethechildren.org/etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669956300833%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19329%7CvVersion%7C5.4.0; mbox=session#e28081cb4454403784c4f5f3d6250469#1669958162; at_check=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 22992
accept-ranges: bytes
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
last-modified: Thu, 17 Nov 2022 18:10:11 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
date: Fri, 02 Dec 2022 01:30:24 GMT
cache-control: max-age=86400, no-cache="set-cookie"
expires: Sat, 03 Dec 2022 00:12:47 GMT
etag: "59d0-5edae7ffe06c0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wdIaNIjvWWWOsQXxj6xtaA_D-TZqWk5KFKZ2hLYsQJw6m7gu6ZwuGg==
age: 16336
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-site/fonts/lato-normal-latin.woff2
200 OK 24 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/fonts/lato-normal-latin.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23484, version 1.0\012- data
Hash b4d2c4c39853ee244272c04999b230ba
c82e22dde9716c40ba20e6c7ed03a1b66556de15
c3c0d3f472358aac78455515c4800771426770c22698e2486d39fdb5505634e1
GET /etc/clientlibs/us/clientlib-site/fonts/lato-normal-latin.woff2 HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.savethechildren.org/etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669956300833%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19329%7CvVersion%7C5.4.0; mbox=session#e28081cb4454403784c4f5f3d6250469#1669958162; at_check=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 23484
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Thu, 01 Dec 2022 19:49:07 GMT
etag: "5bbc-5edae868c7e40"
expires: Fri, 02 Dec 2022 19:49:07 GMT
last-modified: Thu, 17 Nov 2022 18:12:01 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Yal7EfMMLGLBC4FqSI_K-TMG_jrd1cM5_JzlIIm9F5uppi4qhcrCrA==
age: 32156
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-site/fonts/oswald-medium-latin.woff2
200 OK 16 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/fonts/oswald-medium-latin.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16456, version 1.0\012- data
Hash f721358d93a21f3fb93c95ffbb164e63
4d7fbde181f8e899093b07c2b7b310c8996bf329
e69face5454ec861e4f91a48b1581ed438181b1716135ca578a533b3ac370a36
GET /etc/clientlibs/us/clientlib-site/fonts/oswald-medium-latin.woff2 HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.savethechildren.org/etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669956300833%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19329%7CvVersion%7C5.4.0; mbox=session#e28081cb4454403784c4f5f3d6250469#1669958162; at_check=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 16456
accept-ranges: bytes
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
last-modified: Thu, 17 Nov 2022 18:12:01 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
cache-control: max-age=86400, no-cache="set-cookie"
date: Thu, 01 Dec 2022 19:49:07 GMT
expires: Fri, 02 Dec 2022 19:49:07 GMT
etag: "4048-5edae868c7e40"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qRJRwPYpB9P4lQggSrq2_LYb_ozp8BI7mK28cLAwCIO-_01OIvxbmA==
age: 32156
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-site/fonts/lato-italic-latin.woff2
200 OK 24 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/fonts/lato-italic-latin.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24440, version 1.0\012- data
Hash 117e995c97eab30fb92843616018d1f1
0cdf5ffdbc568f9f4d726f56bca92fe6b601da7a
ccb5febf8ac335a1b768a7a2087fa4362cb3a0a9392e2e451df9d9825e88e5db
GET /etc/clientlibs/us/clientlib-site/fonts/lato-italic-latin.woff2 HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.savethechildren.org/etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669956300833%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19329%7CvVersion%7C5.4.0; mbox=session#e28081cb4454403784c4f5f3d6250469#1669958162; at_check=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 24440
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Thu, 01 Dec 2022 19:49:07 GMT
etag: "5f78-5edae7c1e3480"
expires: Fri, 02 Dec 2022 19:49:07 GMT
last-modified: Thu, 17 Nov 2022 18:09:06 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _Mvs1f0a_EK_Jpf_OCD9ccf_MR53NCuD0qxmmLUipfHCu0a3J7N2Dw==
age: 32156
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8cd876589951719c94a6d49d1494bdbd
01600c8bb95fac543696e509b3e452b90d844572
e03942321526a2303220b1abd51f82f1d4cf80e0dd22a2582cf809b8bd729521
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash b6f6bd19f5a3bedf28d81978c874b564
cf0a80f89e6ce6b74f6067a998009aba65ca8e7b
0a585c37b8fd54f44211656ebd5f2cff82da2fa0248440b97bfa1f903efdb556
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2428
Cache-Control: max-age=93752
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:03 GMT
Etag: "6388448b-1d7"
Expires: Sat, 03 Dec 2022 06:47:35 GMT
Last-Modified: Thu, 01 Dec 2022 06:07:07 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
www.googletagmanager.com/gtm.js?id=GTM-5LXXS3R
200 OK 81 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5LXXS3R
IP
File type ASCII text, with very long lines (16595)
Hash 8cd3711c70b0a0c394eb0f2b26d7c077
57a77d0dadc426df36da7b0597e6d9dbbd156459
3b0453ab9bda9d2216966a991fc71304649a579373a040013e896bdf4246db7e
GET /gtm.js?id=GTM-5LXXS3R HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 04:45:03 GMT
expires: Fri, 02 Dec 2022 04:45:03 GMT
cache-control: private, max-age=900
last-modified: Fri, 02 Dec 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81180
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC2bd87301eb114379b56ad60b1e4c5bc9-source.min.js
200 OK 381 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC2bd87301eb114379b56ad60b1e4c5bc9-source.min.js
IP
File type ASCII text, with very long lines (518)
Hash 701fcf2f73b9b911143cf43128a77d40
d94fec50a5bca1257b6c4193b48bf4cca8929c31
bd6b2b0ec582ff09c2afaab1eb73abbee1ec4cf67dff85b61cd65d936d96e30f
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC2bd87301eb114379b56ad60b1e4c5bc9-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 381
cache-control: max-age=3600
expires: Fri, 02 Dec 2022 05:45:03 GMT
date: Fri, 02 Dec 2022 04:45:03 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1669956301299
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1669956301299
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1669956301299 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.savethechildren.org
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-00fcfd78a.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1669956301299
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=50549405382766276712967542213731215594; Max-Age=15552000; Expires=Wed, 31 May 2023 04:45:03 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: Zna8YKZGSAE=
Content-Length: 0
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8cd876589951719c94a6d49d1494bdbd
01600c8bb95fac543696e509b3e452b90d844572
e03942321526a2303220b1abd51f82f1d4cf80e0dd22a2582cf809b8bd729521
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 49c1c39ac6b0fd2c41287dec872c9cb9
8dae0fd5a3522e2ff42f6958b332178233dda761
b13c191ef9a024aa7c524b240579763c3ad77b53988c415e59b7aeeaf043dc56
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=132844
Date: Fri, 02 Dec 2022 04:45:03 GMT
Etag: "6388ce49-1d7"
Expires: Sat, 03 Dec 2022 17:39:07 GMT
Last-Modified: Thu, 01 Dec 2022 15:54:49 GMT
Server: ECS (dcb/7FA6)
X-Cache: Miss from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: j5lkFJj3NqwCYcBCVx20kEJ6P1kW4ZzVZ0lyXQdCl_nX2eY8Sb9rUg==
Age: 6258
www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/house.svg
304 Not Modified 0 B URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/house.svg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /etc/clientlibs/us/clientlib-site/images/icons/house.svg HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/xml, text/xml, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.savethechildren.org/us/about-us/privacy-policy?cid=Email:SFMC:GT_Missed:AAI_Team_Tomorrow_b:120122&smtrctid=36183272
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669956300833%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19329%7CvVersion%7C5.4.0; mbox=session#e28081cb4454403784c4f5f3d6250469#1669958162; at_check=true; stc-analytics-source=Email|Email|SFMC|GT_Missed|AAI_Team_Tomorrow_b|12/01/2022; stc-session-count=NaN
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Thu, 17 Nov 2022 18:10:47 GMT
If-None-Match: "cd2-5edae822357c0-gzip"
TE: trailers
HTTP/2 304 Not Modified
date: Fri, 02 Dec 2022 04:45:03 GMT
cache-control: max-age=604800, no-cache="set-cookie"
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
etag: "cd2-5edae822357c0-gzip"
expires: Fri, 09 Dec 2022 04:45:02 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: v7ReA2GDwYUlOdCX2qfBxIQmbF5Hj1NaxFLYLpN3d3-NVyFr9KDwNQ==
age: 1
X-Firefox-Spdy: h2
dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1669956301299
200 OK 124 B URL HTTP/1.1 dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1669956301299
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1f6783349ac4177ec3b3845fd520dca6
d84e7a43a8c8ff6f1a568ad6cb4162767f5b32b7
64bc30aa6a9d9e5396bb67c6af32c31f5ca6610641f0bdea10d759281df6adca
GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1669956301299 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.savethechildren.org
Content-Type: application/x-www-form-urlencoded
Referer: https://www.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.savethechildren.org
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v045-0449b668e.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-Error: 172
X-TID: zh3gV3n+RRk=
Content-Length: 124
Connection: keep-alive
cdn.evgnet.com/beacon/savethechildren/production/scripts/evergage.min.js
200 OK 48 kB URL HTTP/2 cdn.evgnet.com/beacon/savethechildren/production/scripts/evergage.min.js
IP
File type ASCII text, with very long lines (594)
Hash c0c4fb146208f93d73f374d37af5dbb1
ce978016af87e86dc4933bf9b9ad642c80b9404d
7eb78a9d2c69b4ce40b8c3c018672fccec2bfe36df747ed2606845b224748ba1
GET /beacon/savethechildren/production/scripts/evergage.min.js HTTP/1.1
Host: cdn.evgnet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 7zmyPS0UdqvUBoLEhEIYi/GVzFpYfjKNrF3oIG1GkiXwKjc2NBEoo62PTqvI33FG6H548RjLU4I=
x-amz-request-id: XM4W94YFSNQZR1VG
x-amz-replication-status: COMPLETED
last-modified: Thu, 01 Dec 2022 13:44:47 GMT
etag: "c0c4fb146208f93d73f374d37af5dbb1"
cache-control: max-age=120
content-encoding: gzip
x-amz-meta-evergage-beacon-ver: 16
x-amz-meta-evergage-sum: ce0eb478979a91d41e52330f5f9481980f5f0e4e
x-amz-version-id: v0gXBSjxX0YJmJwHU3shAaSQkq_qJ_ey
content-type: application/javascript; charset=utf-8
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 04:45:03 GMT
age: 95
x-served-by: cache-iad-kiad7000028-IAD, cache-bma1663-BMA
x-cache: HIT, HIT
x-cache-hits: 26, 1
x-timer: S1669956303.323607,VS0,VE91
vary: Accept-Encoding
timing-allow-origin: *
content-length: 48289
X-Firefox-Spdy: h2
consentcdn.cookiebot.com/sdk/bc-v4.min.html
200 OK 392 B URL HTTP/2 consentcdn.cookiebot.com/sdk/bc-v4.min.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (627), with no line terminators
Hash e7268eccad39bd651697fa793a52cc5c
47299cefa2397b0c1d0c5bf232390a5cf1bcc4d3
907e16c84d35556e4ed841a3511915e6d4bb4e9d68cfca178a740e90b4d80e35
GET /sdk/bc-v4.min.html HTTP/1.1
Host: consentcdn.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "3d08665fa4c7bcf9fa2dcbbc7efe1d0f:1649057029.895163"
last-modified: Mon, 04 Apr 2022 07:23:49 GMT
server: AkamaiNetStorage
x-akamai-transformed: 9 - 0 pmb=mRUM,1
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=29771517
expires: Sat, 11 Nov 2023 18:37:00 GMT
date: Fri, 02 Dec 2022 04:45:03 GMT
content-length: 392
server-timing: cdn-cache; desc=HIT, edge; dur=1
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f4f9a4ca626b0f91fcbbef9167b5c667
727f667d1d2b07f8888661c52eb46fe211b479ee
eeee43cce63216c16b00c54a8e1342ce1c4bec7e4f88c749ed299c9d38759c83
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4448
Cache-Control: max-age=115948
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:03 GMT
Etag: "6388935b-1d7"
Expires: Sat, 03 Dec 2022 12:57:31 GMT
Last-Modified: Thu, 01 Dec 2022 11:43:23 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash f4f9a4ca626b0f91fcbbef9167b5c667
727f667d1d2b07f8888661c52eb46fe211b479ee
eeee43cce63216c16b00c54a8e1342ce1c4bec7e4f88c749ed299c9d38759c83
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4448
Cache-Control: max-age=115948
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:03 GMT
Etag: "6388935b-1d7"
Expires: Sat, 03 Dec 2022 12:57:31 GMT
Last-Modified: Thu, 01 Dec 2022 11:43:23 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2abc298df3bd5d8586672d5e45b165a9
d86d6ef17e23a8f473a16278cea56b5e1c69a5df
ab4408ebed0d62c54eb210e4936050d6207d61affec1a6c41039b525e0ff9568
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AB4408EBED0D62C54EB210E4936050D6207D61AFFEC1A6C41039B525E0FF9568"
Last-Modified: Thu, 01 Dec 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19031
Expires: Fri, 02 Dec 2022 10:02:14 GMT
Date: Fri, 02 Dec 2022 04:45:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8051
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 04:45:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8051
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 04:45:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8051
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 04:45:03 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:47 GMT
age: 25816
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe82fdd03-be1f-4def-adb8-61eefd79def6.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe82fdd03-be1f-4def-adb8-61eefd79def6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e65083422468e512aa73eb68f20b2ec
73884daab5e71e4917637b3679c0bb5a1f0447de
f0d97bb9e3f01bbdbe91ba1f9b6ea0f649c66192383c51fe5c7ca9ac2a38ebdb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe82fdd03-be1f-4def-adb8-61eefd79def6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9719
x-amzn-requestid: c4ba3502-e191-40fa-8ae0-71dc6f733db4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPjhHE8woAMFyKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382e606-70ab0e5523c91e5420efec78;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 04:22:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oBn917CDV6DjSs9TAL2iBU0Rn8_f8ny1rAVXrbI9KML2P7pxusbdjA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 03:43:01 GMT
age: 3722
etag: "73884daab5e71e4917637b3679c0bb5a1f0447de"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 07:15:42 GMT
age: 77361
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F321bfec8-0690-49d3-ba43-a2899f137b6b.jpeg
200 OK 1.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F321bfec8-0690-49d3-ba43-a2899f137b6b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 367a113e3826442861c63ba501d2d67d
764f6910ecc1ee436a70aa83f5bd363c2e500341
5e5cc53aba99e68211c86a2fd83ac4a023d1c82875d60a09d52875ef129cbb71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F321bfec8-0690-49d3-ba43-a2899f137b6b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 1654
x-amzn-requestid: 537d523f-a3fb-4514-bda5-ecc834c1ed39
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgBEFNIAMFTjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891dff-0c12ccea20e953c236ca2b1b;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: IXNpFJsiqPvrg8f-op2tcIVW2qoV7ZPm12wsTTXfYu0369N4Csy8BA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:06:58 GMT
age: 23885
etag: "764f6910ecc1ee436a70aa83f5bd363c2e500341"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd8ad22c2eb1eb91c76970fa449f1bc4
0de97f3a4964038222bd751e043e413113e6db9d
668f805815aede3bc04f8564bd6aefd56029362bb0aa8a794673eb78ab2d4643
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4834
x-amzn-requestid: 63a0b8b5-5cb3-4a1f-aa46-47c84abe726f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQrjEeAIAMF3sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c7e3-0032799009f893ba79f314db;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:02:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bBj-TXtavCuORZ9qBoZeVj-GXeRljAeW-98HY7lTk5_VRSKF4_07VQ==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 04:22:38 GMT
age: 1345
etag: "0de97f3a4964038222bd751e043e413113e6db9d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd78aa69439c995167f32b8a41a1f4f6
d07d6145182f312f3ed86ecf96b4ffa175416fa0
3b08cf3fad31ee0cf3ee25abc2484fb4283543865a42dfc568b14f9856fd3bb5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7722
x-amzn-requestid: 8d7c4800-6c06-43ed-afa1-94840d42f591
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGy2Gr1IAMFWeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e78-429ae3135d47e3b020c4c7a1;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Z8thSamrCRejcAcQEGAp4WpSMzMEvstuZtVpKAjiCH4dyJyf1yihBA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:50:11 GMT
age: 24892
etag: "d07d6145182f312f3ed86ecf96b4ffa175416fa0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 74ace280a2a4602d357a50bc41bd3725
cf96da57c676ec88b49818ce5abf9d693c071f34
bb7561b46d7989dd7fbb7ae6918297e68f9cc0e20076ddc5d669ab76b5fc818b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB7561B46D7989DD7FBB7AE6918297E68F9CC0E20076DDC5D669AB76B5FC818B"
Last-Modified: Thu, 01 Dec 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18818
Expires: Fri, 02 Dec 2022 09:58:41 GMT
Date: Fri, 02 Dec 2022 04:45:03 GMT
Connection: keep-alive
status.geotrust.com/
200 OK 471 B IP
Hash 17247045166a7b789af4e7d2afb0c379
16caf39b63af9efbf006b4ff92d7cba9b3279cc3
9a8c3bf3da08dbfe265c3bbe46d2ade1af95e02d70ae79d69bd2328c4f0bd5b5
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=98163
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:03 GMT
Etag: "63885f42-1d7"
Expires: Sat, 03 Dec 2022 08:01:06 GMT
Last-Modified: Thu, 01 Dec 2022 08:01:06 GMT
Server: nginx
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 17247045166a7b789af4e7d2afb0c379
16caf39b63af9efbf006b4ff92d7cba9b3279cc3
9a8c3bf3da08dbfe265c3bbe46d2ade1af95e02d70ae79d69bd2328c4f0bd5b5
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=98163
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:03 GMT
Etag: "63885f42-1d7"
Expires: Sat, 03 Dec 2022 08:01:06 GMT
Last-Modified: Thu, 01 Dec 2022 08:01:06 GMT
Server: nginx
Content-Length: 471
support.savethechildren.org/site/PixelServer?t=undefined
200 200 43 B URL HTTP/1.1 support.savethechildren.org/site/PixelServer?t=undefined
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /site/PixelServer?t=undefined HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19329%7CvVersion%7C5.4.0; mbox=session#e28081cb4454403784c4f5f3d6250469#1669958162; at_check=true; stc-analytics-source=Email|Email|SFMC|GT_Missed|AAI_Team_Tomorrow_b|12/01/2022; stc-session-count=NaN
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 200
Date: Fri, 02 Dec 2022 04:45:03 GMT
Server: Apache
Cache-Control: no-store
Content-Length: 43
Keep-Alive: timeout=15, max=289
Connection: Keep-Alive
Content-Type: image/gif
support.savethechildren.org/site/SPageNavigator/api_cons_cart.html?pgwrap=n&callback=jQuery2240368145153255377_1669956301409&_=1669956301410
200 200 118 B URL HTTP/1.1 support.savethechildren.org/site/SPageNavigator/api_cons_cart.html?pgwrap=n&callback=jQuery2240368145153255377_1669956301409&_=1669956301410
IP
Hash f3b97dbf9163476ffbb8e8d7d8e741c0
84d300c372d93ca0444668e0442e21de039647ba
77ef3db84b576f5f85e527c09315ade5ce8e272d1ba01e09dab8406f51ab3863
GET /site/SPageNavigator/api_cons_cart.html?pgwrap=n&callback=jQuery2240368145153255377_1669956301409&_=1669956301410 HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19329%7CvVersion%7C5.4.0; mbox=session#e28081cb4454403784c4f5f3d6250469#1669958162; at_check=true; stc-analytics-source=Email|Email|SFMC|GT_Missed|AAI_Team_Tomorrow_b|12/01/2022; stc-session-count=NaN
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 200
Date: Fri, 02 Dec 2022 04:45:04 GMT
Server: Apache
X-Content-Type-Options: nosniff
Cache-Control: no-store
Pragma: no-cache
Set-Cookie: JSESSIONID=368E44B4489A5711D11959E4CCF31AAA.app30058a; Path=/; Secure; HttpOnly
JSESSIONID=368E44B4489A5711D11959E4CCF31AAA.app30058a; Path=/site/
JSESSIONID=368E44B4489A5711D11959E4CCF31AAA.app30058a;Path=/site/CRConsAPI; Secure; SameSite=None
JSESSIONID=368E44B4489A5711D11959E4CCF31AAA.app30058a;Path=/site/CrmRest; Secure; SameSite=None
JSESSIONID=368E44B4489A5711D11959E4CCF31AAA.app30058a;Path=/site/AnonymousLogin; Secure; SameSite=None
JSESSIONID=368E44B4489A5711D11959E4CCF31AAA.app30058a;Path=/site/CRDonationAPI; Secure; SameSite=None
Content-Security-Policy: frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com; report-uri https://support.savethechildren.org/site/XFrameViolation
X-Frame-Options: allow-from 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com
Cteonnt-Length: 111
Keep-Alive: timeout=15, max=155
Connection: Keep-Alive
Content-Type: application/javascript;charset=ISO-8859-1
Content-Encoding: gzip
Content-Length: 118
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 53d399e12b08510e49f1354819368bf6
927baf0d49b02ed6be546cea446392e76eedf6a0
2dd5568ed201ccc06ea31b1ba161b5eb690387a6f74663a0e6d593fc62f11362
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 02 Dec 2022 04:45:04 GMT
Last-Modified: Fri, 02 Dec 2022 03:46:52 GMT
Server: ECS (nyb/1D04)
X-Cache: Miss from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: D3bJUnzWlcgJjdaCTIgZztmDOFu15pLctd0GAcxrPnXRgWslToFUbA==
Age: 3492
collection.decibelinsight.net/i/13874/253647/c.json
200 OK 8.7 kB URL HTTP/1.1 collection.decibelinsight.net/i/13874/253647/c.json
IP
File type JSON data\012- , ASCII text, with very long lines (17334), with no line terminators
Hash 256249ed5ecce08336db4f15812f8bee
449df7cf371b95e0dd64eb27fa35db196042e77e
07462be31e8f48cc31f7e73d73c77572c37c05b345b1d1c3942cbbf9f6231b0c
GET /i/13874/253647/c.json HTTP/1.1
Host: collection.decibelinsight.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 04:45:04 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private, max-age=1800
Set-Cookie: da_lid=-D026035A9A73EA0680FABB99F28514E429|0|0|0; Path=/i/13874/; Domain=.decibelinsight.net; Max-Age=31536000; HttpOnly; SameSite=None; Secure
da_sid=E31530698E33AE9D15ABAA13B0875EEF9A|3|0|3; Path=/i/13874/; Domain=.decibelinsight.net; Max-Age=1800; HttpOnly; SameSite=None; Secure
ETag: W/000072671-184D126FDAE
Timing-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override
Access-Control-Allow-Origin: https://www.savethechildren.org
Access-Control-Allow-Credentials: true
Vary: Origin
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
a.opmnstr.com/app/js/28.7c2ba7ea.min.js
200 OK 40 kB URL HTTP/2 a.opmnstr.com/app/js/28.7c2ba7ea.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (5919)
Hash 6e6840381a987162c858922f03bdd1b0
7301322c6f614ef6af005fe1fcabe46979a4f031
c5aa2222bd4002e276bc0e5f7aecde32eac3e15b8e7d703e25989c3714ed464f
GET /app/js/28.7c2ba7ea.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-1758"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-198
cdn-requestpullsuccess: True
cdn-fileserver: 471
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:26
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: ef206b90078024794a0a59592a2a11b6
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05917f7542a781275c12d43562be1507
1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3
2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 389d550126be9ed882fd1f7c358c2069
851e247de2885445f06fd2a210e86c731e7af623
3a995c803163965672586218e9ae5a71f082d06de7a9efb4264e6728d97c7bf1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 02 Dec 2022 04:45:04 GMT
Etag: "6388af6d-1d7"
Last-Modified: Fri, 02 Dec 2022 04:05:34 GMT
Server: ECS (nyb/1D2B)
X-Cache: Miss from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Uzb2luP5pKObgyWvXm5Mb-Op7t2aZW94NXsea-um2MVOPDsA101oTw==
Age: 2370
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05917f7542a781275c12d43562be1507
1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3
2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nexus.ensighten.com/choozle/10170/Bootstrap.js
200 OK 9.3 kB URL HTTP/2 nexus.ensighten.com/choozle/10170/Bootstrap.js
IP
Hash 67649a2d595afe9ee4c3027cb3de5f8b
dafecc582a52e2cc440aa49e92284ab0f45947f8
8e9d38d6a5530c07d5d8167a85e4ab167fe85f031b337568396e6e7fdf41e108
GET /choozle/10170/Bootstrap.js HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 22 Jul 2022 07:38:37 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 13 Jun 2022 14:49:13 GMT
etag: W/"18ffa018e5b503b5b4ff4b33ae1fb30c"
x-amz-server-side-encryption: AES256
cache-control: max-age=300
x-amz-version-id: fT_tumJdhdhIumBYXlKaiUul3kyT.7tv
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: N9xRBLQVmt_HMnTM80gayCQZ35MkPMcWaCbfZk045o-gIn45J6dEGA==
age: 11480788
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 07dccacbaae4cde7f7462838b48713ec
0548f9fa4b1e71f9598f3cc194164a707da02a68
3afa0f42d32eb05d44bfb52ea97fd67efc2364b9faa8469f9d4c91e2c762cfb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=125504
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:04 GMT
Etag: "6388ca10-1d7"
Expires: Sat, 03 Dec 2022 15:36:48 GMT
Last-Modified: Thu, 01 Dec 2022 15:36:48 GMT
Server: nginx
Content-Length: 471
smetrics.savethechildren.org/id?d_visid_ver=5.4.0&d_fieldgroup=MC&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&ts=1669956302450
200 OK 48 B URL HTTP/2 smetrics.savethechildren.org/id?d_visid_ver=5.4.0&d_fieldgroup=MC&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&ts=1669956302450
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 13f499542a046124ab93557be11e8eaa
f32d226678362eb13eba4d639f47e0cfb2bae4a2
6bc6d8d449b59aaa2f5908aac22336ff7cb6a8fa3a3acb4304d8fecf4d608503
GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&ts=1669956302450 HTTP/1.1
Host: smetrics.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19329%7CvVersion%7C5.4.0; mbox=session#e28081cb4454403784c4f5f3d6250469#1669958162; at_check=true; stc-analytics-source=Email|Email|SFMC|GT_Missed|AAI_Team_Tomorrow_b|12/01/2022; stc-session-count=NaN; _sfid_58d2={%22anonymousId%22:%22a91be08b037aa6d8%22%2C%22consents%22:[]}; _evga_c797={%22uuid%22:%22a91be08b037aa6d8%22}; stc-analytics-sub_source=|||||
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-origin: https://www.savethechildren.org
access-control-allow-credentials: true
date: Fri, 02 Dec 2022 04:45:04 GMT
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19329%7CvVersion%7C5.4.0%7CMCMID%7C90580456540662172421466096858195453816; Path=/; Domain=savethechildren.org; Max-Age=63072000; Expires=Sun, 01 Dec 2024 04:45:45 GMT;
s_ecid=MCMID%7C90580456540662172421466096858195453816; Path=/; Domain=savethechildren.org; Max-Age=63072000; Expires=Sun, 01 Dec 2024 04:45:45 GMT; SameSite=Lax;
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 48
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
collection.decibelinsight.net/i/13874/ws/
101 Switching Protocols 0 B URL HTTP/1.1 collection.decibelinsight.net/i/13874/ws/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /i/13874/ws/ HTTP/1.1
Host: collection.decibelinsight.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.savethechildren.org
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: yma6YWA+H+D48ORMEv8OWQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Fri, 02 Dec 2022 04:45:04 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: q+m1JDsAyyjeuNeBmCJMKiEPnl8=
Sec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover
Sec-WebSocket-Version: 13
Strict-Transport-Security: max-age=31536000
dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&d_mid=90580456540662172421466096858195453816&ts=1669956302916
200 OK 301 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&d_mid=90580456540662172421466096858195453816&ts=1669956302916
IP
File type JSON data\012- , ASCII text, with very long lines (357), with no line terminators
Hash 9802df3bfc73898c42dbe01fef50b4bc
44e54680605e050ca9f8af9088d8e36519cf459e
7635a65f8daa24ac25e10cbf223b8c8290261f372be7542a8c5b3d8994d035d3
GET /id?d_visid_ver=5.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&d_mid=90580456540662172421466096858195453816&ts=1669956302916 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.savethechildren.org
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v045-078a58cff.edge-irl1.demdex.com 2 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=90247635961317549221500364396644419016; Max-Age=15552000; Expires=Wed, 31 May 2023 04:45:04 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: L/rw65nyQk4=
Content-Length: 301
Connection: keep-alive
fonts.gstatic.com/s/notosans/v27/o-0NIpQlx3QUlC5A4PNjFhdVZNyB.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/notosans/v27/o-0NIpQlx3QUlC5A4PNjFhdVZNyB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13104, version 1.0\012- data
Hash e4fcc5fb48fe6a182b3f0ae858982f53
577839a69a2d7125d2bfd1dbc069abd615f2ac7e
efc3c8a0ed2a9f798cae16417b7832147de397ebf1f8fb6cd4462f240605198e
GET /s/notosans/v27/o-0NIpQlx3QUlC5A4PNjFhdVZNyB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13104
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 21:38:29 GMT
expires: Tue, 28 Nov 2023 21:38:29 GMT
cache-control: public, max-age=31536000
age: 284795
last-modified: Mon, 09 May 2022 18:27:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
savethechildren.us-7.evergage.com/api2/event/production?event=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%3D%3D
200 OK 614 B URL HTTP/2 savethechildren.us-7.evergage.com/api2/event/production?event=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%3D%3D
IP
Hash 82cd844d5125d8f59e49596ebc91760c
71bbe5fdfe46cace6e1ff72afa1565c2ed14683e
857755568e18fa01778160d65ca9f1744da1d0884e0669b2267eee673e3ce589
GET /api2/event/production?event=eyJzb3VyY2UiOnsicGFnZVR5cGUiOiJXaG8gV2UgQXJlIFBhZ2UiLCJ1cmwiOiJodHRwczovL3d3dy5zYXZldGhlY2hpbGRyZW4ub3JnL3VzL2Fib3V0LXVzL3ByaXZhY3ktcG9saWN5P2NpZD1FbWFpbDpTRk1DOkdUX01pc3NlZDpBQUlfVGVhbV9Ub21vcnJvd19iOjEyMDEyMiZzbXRyY3RpZD0zNjE4MzI3MiIsInVybFJlZmVycmVyIjoiIiwiY2hhbm5lbCI6IldlYiIsImJlYWNvblZlcnNpb24iOjE2LCJjb25maWdWZXJzaW9uIjoiMjEiLCJjb250ZW50Wm9uZXMiOltdfSwidXNlciI6eyJhbm9ueW1vdXNJZCI6ImE5MWJlMDhiMDM3YWE2ZDgifSwiaW50ZXJhY3Rpb24iOnsibmFtZSI6IlZpZXdlZCBBYm91dCBVcyBQYWdlIn0sInBhZ2VWaWV3Ijp0cnVlLCJjb25zZW50cyI6W10sImFjY291bnQiOnt9LCJfdG9vbHNFdmVudExpbmtJZCI6IjgwMjY1NjQ5NTI4NjE2NjIiLCJleHBsYWluIjp0cnVlfQ%3D%3D HTTP/1.1
Host: savethechildren.us-7.evergage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
content-type: application/json;charset=UTF-8
set-cookie: AWSALB=u/bI/71l0uiwIzX8Hy8xMiPVaPq7tOhIXUUqtDAAVBAasMQSVHXPT9SL8W6lSHyqiCHGiY1sW7S2lSbuMIdhvYJaSnEFjemXY4M2NEQz3MBTyuX4ebVPpW7anyZw; Expires=Fri, 09 Dec 2022 04:45:04 GMT; Path=/
AWSALBCORS=u/bI/71l0uiwIzX8Hy8xMiPVaPq7tOhIXUUqtDAAVBAasMQSVHXPT9SL8W6lSHyqiCHGiY1sW7S2lSbuMIdhvYJaSnEFjemXY4M2NEQz3MBTyuX4ebVPpW7anyZw; Expires=Fri, 09 Dec 2022 04:45:04 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
access-control-allow-credentials: true
x-content-type-options: nosniff
vary: accept-encoding
content-encoding: gzip
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/27.205350b7.min.js
200 OK 1.0 kB URL HTTP/2 a.opmnstr.com/app/js/27.205350b7.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (1207)
Hash afdd67452366169dcea244f2b4acaacb
745809a27a03fbca310f4c7bd5fed0ea64559bed
df788346da37a8a659a3045e76f30be6f1236036673a5fb52c36abdc7e461f71
GET /app/js/27.205350b7.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-4f6"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-168
cdn-requestpullsuccess: True
cdn-fileserver: 505
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: db30cc5835b1c87f111267ca7ebdfbc6
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/notosans/v27/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/notosans/v27/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12684, version 1.0\012- data
Hash 0c235386bcf6af06f67e6c89fd19e434
10720574d4609322023984a761f32f9518c07bc4
c1c30918a861cb6a985ab55d54ad7e861682354197f164cb3b7194f20eed67ac
GET /s/notosans/v27/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12684
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 15:42:35 GMT
expires: Wed, 29 Nov 2023 15:42:35 GMT
cache-control: public, max-age=31536000
age: 219749
last-modified: Mon, 09 May 2022 18:28:04 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12860, version 1.0\012- data
Hash ab21c24efd75543e16e34807ebc6cdec
eb2562f9729079333fbcbbe94868695669dd3301
88f00438d26021a325247c4427898f7c778a22976df9f1a9d9876429778bf265
GET /s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 15:42:34 GMT
expires: Wed, 29 Nov 2023 15:42:34 GMT
cache-control: public, max-age=31536000
age: 219750
last-modified: Mon, 09 May 2022 18:27:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13036, version 1.0\012- data
Hash 0ad032b3d07aaf33b160ac4799dda40f
06b931e0d0bf37f5037d9e66d6feedfddd21c0ba
c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0
GET /s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13036
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:28:49 GMT
expires: Thu, 30 Nov 2023 19:28:49 GMT
cache-control: public, max-age=31536000
age: 119775
last-modified: Wed, 27 Apr 2022 16:04:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
savethechildren.us-7.evergage.com/pr?.top=1002&action=Viewed%20About%20Us%20Page&.tt=834&.ttdns=81&.dt=2086&.lt=2944&.btdns=10&.bv=16&_ak=savethechildren&_ds=production&.scv=21&channel=Web&_r=968981&.anonId=a91be08b037aa6d8&_anon=true
204 No Content 0 B URL HTTP/2 savethechildren.us-7.evergage.com/pr?.top=1002&action=Viewed%20About%20Us%20Page&.tt=834&.ttdns=81&.dt=2086&.lt=2944&.btdns=10&.bv=16&_ak=savethechildren&_ds=production&.scv=21&channel=Web&_r=968981&.anonId=a91be08b037aa6d8&_anon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pr?.top=1002&action=Viewed%20About%20Us%20Page&.tt=834&.ttdns=81&.dt=2086&.lt=2944&.btdns=10&.bv=16&_ak=savethechildren&_ds=production&.scv=21&channel=Web&_r=968981&.anonId=a91be08b037aa6d8&_anon=true HTTP/1.1
Host: savethechildren.us-7.evergage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 0
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: AWSALBCORS=u/bI/71l0uiwIzX8Hy8xMiPVaPq7tOhIXUUqtDAAVBAasMQSVHXPT9SL8W6lSHyqiCHGiY1sW7S2lSbuMIdhvYJaSnEFjemXY4M2NEQz3MBTyuX4ebVPpW7anyZw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 02 Dec 2022 04:45:04 GMT
set-cookie: AWSALB=uqreRmwStO5zcnOqaTdqtFBrqljf9g2BeQGARV61qwQk5pdsQ6R/GIZaFB+IMsrzkiAlOtjIsspJxg+7x9+xpvjjFf5egLTYMTL2EacrnpZpXUvIS4+tDtLEx3kA; Expires=Fri, 09 Dec 2022 04:45:04 GMT; Path=/
AWSALBCORS=uqreRmwStO5zcnOqaTdqtFBrqljf9g2BeQGARV61qwQk5pdsQ6R/GIZaFB+IMsrzkiAlOtjIsspJxg+7x9+xpvjjFf5egLTYMTL2EacrnpZpXUvIS4+tDtLEx3kA; Expires=Fri, 09 Dec 2022 04:45:04 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
x-content-type-options: nosniff
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 06:30:11 GMT
expires: Sat, 25 Nov 2023 06:30:11 GMT
cache-control: public, max-age=31536000
age: 598493
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 6b92fa3d26161bb28a6aa03057053c01
a593ba19430239adaf46334f157b190c7d58fa71
6bf556adb0abf8ed27f02713b09de3585284f3758881e643dd6fdf64444aace8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2097
Cache-Control: max-age=134823
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:04 GMT
Etag: "6388e646-1d7"
Expires: Sat, 03 Dec 2022 18:12:07 GMT
Last-Modified: Thu, 01 Dec 2022 17:37:10 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 315873c315af2be891e63f8b421bae65
5277bb0c4fea2b036c6faf28d66395c96166ffd2
3f6657d352a42f8257409f2ed365a3fb928ac3eb74a34a2c74a433290182cc92
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stc.demdex.net/dest5.html?d_nsid=0
200 OK 2.8 kB URL HTTP/1.1 stc.demdex.net/dest5.html?d_nsid=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Hash ccbdcb1e84c241950763ec4cd516cdfc
55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
GET /dest5.html?d_nsid=0 HTTP/1.1
Host: stc.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: text/html;charset=UTF-8
date: Fri, 2 Dec 2022 04:45:04 GMT
DCS: dcs-prod-irl1-2-v045-00960800d.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Fri, 28 Oct 2022 13:34:30 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: mwkvsW0xS6M=
Content-Length: 2791
Connection: keep-alive
www.google.com/pagead/landing?gcs=G111&rnd=2026206883.1669956302&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy>m=2wgbu05LXXS3R&auid=1908005577.1669956302
302 Found 42 B URL HTTP/2 www.google.com/pagead/landing?gcs=G111&rnd=2026206883.1669956302&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy>m=2wgbu05LXXS3R&auid=1908005577.1669956302
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /pagead/landing?gcs=G111&rnd=2026206883.1669956302&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy>m=2wgbu05LXXS3R&auid=1908005577.1669956302 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 04:45:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&rnd=2026206883.1669956302&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy>m=2wgbu05LXXS3R&auid=1908005577.1669956302
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
nexus.ensighten.com/choozle/10170/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/choozle/10170/code/&publishedOn=Mon%20Jun%2013%2014:49:02%20GMT%202022&ClientID=923&PageID=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272
200 OK 427 B URL HTTP/2 nexus.ensighten.com/choozle/10170/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/choozle/10170/code/&publishedOn=Mon%20Jun%2013%2014:49:02%20GMT%202022&ClientID=923&PageID=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272
IP
File type ASCII text, with very long lines (426)
Hash 846904c76b01ff06da3f4f22e12f98ba
862856989809cab6a913b25a3bd01d8939efd7e2
b32fd23f99edbdeeb02adbc34fa2a491f0eb12d8623cf4b13e0c137f929ab418
GET /choozle/10170/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/choozle/10170/code/&publishedOn=Mon%20Jun%2013%2014:49:02%20GMT%202022&ClientID=923&PageID=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272 HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 427
server: nginx
date: Fri, 02 Dec 2022 04:45:04 GMT
expires: Fri, 02 Dec 2022 04:45:03 GMT
cache-control: no-cache, no-store
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: azkvCrvuOF1DBa5v-lcKfRhigBXeyj-974rxlf1XFZEGnlqN1HxRew==
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/1.12278d6a.min.js
200 OK 5.7 kB URL HTTP/2 a.opmnstr.com/app/js/1.12278d6a.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (11044)
Hash ae203f4a89ed0cc3883a1b03f0f62dc6
614d01fb8ae7c610178d73263a08de21b0ca1566
28d5d399c28f80b197709247cc9304c685778f082b2a9536be0999246a309b16
GET /app/js/1.12278d6a.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-2b60"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-197
cdn-requestpullsuccess: True
cdn-fileserver: 505
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 71d2841f09f3c79ffe18f88dd3a0ad73
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
a.omappapi.com/app/js/webfont/1.5.18/webfont.js
200 OK 25 kB URL HTTP/2 a.omappapi.com/app/js/webfont/1.5.18/webfont.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (1190)
Hash 96617399d9ebe602eea731c777b55af1
eb8b364bfedc243cbc3a0c47d6624ce2e4fbbc65
6476f9d353270b8f41c0d418a16bbe5a7951982f387353a46ea8ba75d8a0537d
GET /app/js/webfont/1.5.18/webfont.js HTTP/1.1
Host: a.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"62ed37ae-40cb"
last-modified: Fri, 05 Aug 2022 15:30:54 GMT
cdn-storageserver: DE-169
cdn-requestpullsuccess: True
cdn-fileserver: 419
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/29/2022 21:15:54
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 9573cec06dfae5cce0bdecf130a05eec
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/11.9da7034c.min.js
200 OK 1.7 kB URL HTTP/2 a.opmnstr.com/app/js/11.9da7034c.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (1941)
Hash 967ef90ae51cc68f551f4dec3b9de91e
f7b6348eb0c1b4d5f6e4a064f2f7d845131c4124
9264beb2409bb55eb74d5cd21d502ec16b4b970f465dbac75932fca7774dbb9e
GET /app/js/11.9da7034c.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"637289e5-7cb"
last-modified: Mon, 14 Nov 2022 18:33:09 GMT
cdn-storageserver: DE-169
cdn-requestpullsuccess: True
cdn-fileserver: 473
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 89906baa20294c75b004b497762d09c5
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/10.0f634e82.min.js
200 OK 8.5 kB URL HTTP/2 a.opmnstr.com/app/js/10.0f634e82.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (25079)
Hash e0a58b867530a13f5dcf69d60814f1e3
70f0d1730185340af8e3d84e55602cef025bd716
20a8dac5879209d7e6eadab0c8f698191a20fe93d9d2cbceed341a154272874c
GET /app/js/10.0f634e82.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-6236"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-165
cdn-requestpullsuccess: True
cdn-fileserver: 512
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/25/2022 21:21:38
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: a30d72a01960d7005fdb476df30dea16
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/0.81ef4a11.min.js
200 OK 2.9 kB URL HTTP/2 a.opmnstr.com/app/js/0.81ef4a11.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (6766)
Hash f20b3596672439a50f2f526585959754
ee4c54d3a1cd3a204b6599493330b134a03a2f9e
b1e86cdc1e6b0e9b5d0ed461e4ea102fe06dc9c78692c7d21d0f872a3aa011b7
GET /app/js/0.81ef4a11.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-1aa8"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-169
cdn-requestpullsuccess: True
cdn-fileserver: 488
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: b2f3a9ae1ac26db380f879b9d5a6b875
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC86ce6cff66df46ad9e1d606658d114be-source.min.js
200 OK 481 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC86ce6cff66df46ad9e1d606658d114be-source.min.js
IP
File type ASCII text, with very long lines (766)
Hash f908c0683d70dd0c0f365aae6456bddf
8c8210e8325b669e24e909eb39e8d15cd2ed13d5
eb47ed8bd5fe794169c846f0cdfc22cb3bc8123f3dc172993098a92a39c8ef6d
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC86ce6cff66df46ad9e1d606658d114be-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 481
cache-control: max-age=3600
expires: Fri, 02 Dec 2022 05:45:04 GMT
date: Fri, 02 Dec 2022 04:45:04 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/9.8520b11d.min.js
200 OK 1.6 kB URL HTTP/2 a.opmnstr.com/app/js/9.8520b11d.min.js
IP
ASN #34989 ServeTheWorld AS
File type HTML document, ASCII text, with very long lines (1607)
Hash 5841271770f1564f2be9099a194724b1
6fa862c7aca78d0da43868438c63f95a9cf1db1d
d4d0b110a2df8a661674a9215825170d68b74dc4de7156f60c9beeae738489c5
GET /app/js/9.8520b11d.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-684"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-198
cdn-requestpullsuccess: True
cdn-fileserver: 505
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:26
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 0afe80af577c12f1065dd5c3dcc3efe7
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC543a5c6ce5a74ab5951bb5d2f65f9cdf-source.min.js
200 OK 516 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC543a5c6ce5a74ab5951bb5d2f65f9cdf-source.min.js
IP
File type ASCII text, with very long lines (800)
Hash 97af42b93e350d6e0668d48b005b8509
cd06aa2d115bd26369bb73f709e68f8e3f4b984d
7d0e9f3495a439aebc46fd7693817c2f7802640a3ae3d4fcefee58ded49f5cc6
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC543a5c6ce5a74ab5951bb5d2f65f9cdf-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 516
cache-control: max-age=3600
expires: Fri, 02 Dec 2022 05:45:04 GMT
date: Fri, 02 Dec 2022 04:45:04 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCf79fc1038c2a4b72bdfd02defa7e8cbc-source.min.js
200 OK 1.1 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCf79fc1038c2a4b72bdfd02defa7e8cbc-source.min.js
IP
File type ASCII text, with very long lines (2504)
Hash 0dba220ac9f45a514e76c2d5f131f78c
cc2d7f45bdd04324885df24dd923f2ac785fd2e5
f6f4c75cd0092381e7765a63ab6cc91747048a32e824c15d335c4352b8e70186
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCf79fc1038c2a4b72bdfd02defa7e8cbc-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1076
cache-control: max-age=3600
expires: Fri, 02 Dec 2022 05:45:04 GMT
date: Fri, 02 Dec 2022 04:45:04 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/20.1ca31d61.min.js
200 OK 2.1 kB URL HTTP/2 a.opmnstr.com/app/js/20.1ca31d61.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (3730)
Hash b703ac347dca55fa9384a3c8d545ee57
662449831ff928365ffd04f03243af09e11edb93
6107e16166176d13a5a2c358b79e8511eff5794e1a4f76924bacf5448cdb5482
GET /app/js/20.1ca31d61.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-eca"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-197
cdn-requestpullsuccess: True
cdn-fileserver: 505
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: cb7ed34c6608f84f1da72ece34162995
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCa0df4cd8b88d4571ba669bc769fb3c9c-source.min.js
200 OK 1.2 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCa0df4cd8b88d4571ba669bc769fb3c9c-source.min.js
IP
File type ASCII text, with very long lines (2720)
Hash 8ed71a478da34299266492cde39a0deb
9b27295eee928bd5708604d8f5ea8247eb021c5f
30958703b08c370389a4b4095f4fd0825c03bf54dfcaede5823bacbce1b62689
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCa0df4cd8b88d4571ba669bc769fb3c9c-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1196
cache-control: max-age=3600
expires: Fri, 02 Dec 2022 05:45:04 GMT
date: Fri, 02 Dec 2022 04:45:04 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC70221449d05c4c009c1482b20cbbc153-source.min.js
200 OK 810 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC70221449d05c4c009c1482b20cbbc153-source.min.js
IP
File type ASCII text, with very long lines (2187)
Hash 86240f58a54795c59ecb7e3e85abd3f6
9988b2fb0fb08d1dc91dc4820a3e5aec972f9182
e850b6036dc74748543a14246c09c99c8a78ebe822ce44e167bfc536efdaad7d
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC70221449d05c4c009c1482b20cbbc153-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 810
cache-control: max-age=3600
expires: Fri, 02 Dec 2022 05:45:04 GMT
date: Fri, 02 Dec 2022 04:45:04 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCeacb79e41c2e4edbaefa7f3947ba2208-source.min.js
200 OK 601 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCeacb79e41c2e4edbaefa7f3947ba2208-source.min.js
IP
File type ASCII text, with very long lines (1190)
Hash 9c1a6fcf38a202994d761c6fbc33889a
89b77c02937f2d338c7dfacd152d32b5f514980a
f9cddee1eeae7be658d49df09d1f95a21055cd2a72b66d2f1554a9a6011b6d86
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCeacb79e41c2e4edbaefa7f3947ba2208-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 601
cache-control: max-age=3600
expires: Fri, 02 Dec 2022 05:45:04 GMT
date: Fri, 02 Dec 2022 04:45:04 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCe1e1b434f35b4ae6b2e3062f395d32e0-source.min.js
200 OK 1.0 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCe1e1b434f35b4ae6b2e3062f395d32e0-source.min.js
IP
File type ASCII text, with very long lines (1950)
Hash 0d35b4c0b823fd1f6fc95726570779c0
ee117f5358203f4fcdf7d620b0b085e5038d00c7
a95e6bc7a7fa7c876725b0d1020f5338516cc46818f848e7a46126a68f3c5df0
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCe1e1b434f35b4ae6b2e3062f395d32e0-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1020
cache-control: max-age=3600
expires: Fri, 02 Dec 2022 05:45:04 GMT
date: Fri, 02 Dec 2022 04:45:04 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC890fe151cf724ae6ab6953052f02d8be-source.min.js
200 OK 837 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC890fe151cf724ae6ab6953052f02d8be-source.min.js
IP
File type ASCII text, with very long lines (1860)
Hash badb96c0a96c04b2f2a43473e614b627
044c957192cffecc1f5a7849896ab9028ecf7e29
85ab9137423ee6515ce893afcd6735cf11cd3914686dbaf4affa79b1653fe0e7
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC890fe151cf724ae6ab6953052f02d8be-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 837
cache-control: max-age=3600
expires: Fri, 02 Dec 2022 05:45:04 GMT
date: Fri, 02 Dec 2022 04:45:04 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a6ad57d839c4b452d7118cf2052f9d35
50afdbe46f04c7611c1a0111bce3a76775e50272
4c5c20573601bde0f5c3567e02d02d74ab22d4ffe12f632e1def1b87dc86ad3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCeabf2b9964bb454bb4f16fe9e5f57862-source.min.js
200 OK 1.4 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCeabf2b9964bb454bb4f16fe9e5f57862-source.min.js
IP
File type HTML document, ASCII text, with very long lines (2422)
Hash e0251ae186910b4797a538175d38ebc6
02083d1d26191cd640ee005e82ff35fb196cb345
310c4e61ff6cbe7981426f3357a7e97bc79824b6201fb9e45f1790c2735a5f91
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCeabf2b9964bb454bb4f16fe9e5f57862-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1364
cache-control: max-age=3600
expires: Fri, 02 Dec 2022 05:45:04 GMT
date: Fri, 02 Dec 2022 04:45:04 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
track.securedvisit.com/js/sv.js
200 OK 25 kB URL HTTP/2 track.securedvisit.com/js/sv.js
IP
Hash 23aff2bf2e73828e53350c46821ad600
008ef82152bfe30e0de22e76e84065b4cb47f87f
5cd75f45eb99c2b7c1045416e28c5e27c043d251e4ae9663ba969a92bb6a30ab
GET /js/sv.js HTTP/1.1
Host: track.securedvisit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.22.0
vary: Accept-Encoding
etag: W/"273cf9801333aefc61a4f311b0692f6a"
last-modified: Fri, 02 Dec 2022 04:45:04 GMT
expires: Fri, 02 Dec 2022 04:45:04 GMT
pragma: no-cache
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, private
content-encoding: gzip
X-Firefox-Spdy: h2
api.omappapi.com/v2/embed/71376?d=savethechildren.org
200 OK 54 kB URL HTTP/2 api.omappapi.com/v2/embed/71376?d=savethechildren.org
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash f562c62ea7aaf8528dc121fb9c080301
5c051f942b4c9aace9eb7748992d31e823b7fd78
01a24df6ac1572b35acce15028c6aa2a67527c1f039bccadb1907f902a980787
GET /v2/embed/71376?d=savethechildren.org HTTP/1.1
Host: api.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Fri, 02 Dec 2022 04:45:03 GMT
access-control-allow-origin: *
access-control-allow-headers: X-CSRF-Token
expires: Fri, 02 Dec 2022 04:43:10 GMT
cache-control: public, max-age=30, stale-while-revalidate=1800
last-modified: Thu, 17 Nov 2022 13:51:00 GMT
etag: W/"a791b80534cbdae4f88ae59a85856be7"
x-optinmonster-account: 80223
access-control-expose-headers: X-OptinMonster-Account, X-User-Agent
x-user-agent: standard--
x-cache-config: 0 0
vary: Accept-Encoding, User-Agent
x-cache-status: HIT
content-encoding: gzip
server: Pagely Gateway/1.5.1
x-cache: Miss from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pYcU_okfIM-n-QUzBvpd-oKB2kX8qhfRK4ZCnlJtdzBr4SFXs7t8ZA==
X-Firefox-Spdy: h2
d1n00d49gkbray.cloudfront.net/js/savethechildren.js
200 OK 26 kB URL HTTP/2 d1n00d49gkbray.cloudfront.net/js/savethechildren.js
IP
Hash 718aed7c7ab879de79aaed7c338df829
832389f671eb6af2b03c3a8d21e3ded358d5de9c
60bdf637e31d3f3e464afdbd0d5477c4211a3218ad8d7523e5581ed743a144fd
GET /js/savethechildren.js HTTP/1.1
Host: d1n00d49gkbray.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Nov 2022 16:14:06 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: Vunt1U7oJIkDTN.qZ_uCtPtrw_Dgk_SZ
server: AmazonS3
content-encoding: gzip
date: Fri, 02 Dec 2022 04:41:58 GMT
etag: W/"2c1c4c57b5a059d7a103cd92f18e8960"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qHplTt0MMgwxgHfI4vHJQplT0gaPqk12FmOdYLvXitndGbvcCCX0eQ==
age: 2888
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49a9684674e0f1b3974c6427c5354fe4
c201e61bcda9cc91369f0c57f8236fcdd3db26c6
27b8d50242836a45aca1fcd0cb58e7f685011c1f93b57d0e3ea9a02400f8d801
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8509ebe718900e761b8b11566c5d7e9a
b810f6d4230f43e343b92187f34ff263498b1665
06814ecab018e8b136e277a82bb1491bde7edb2b95172bedfbade31fa874e7d6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=122253
Date: Fri, 02 Dec 2022 04:45:05 GMT
Etag: "6388b39e-1d7"
Expires: Sat, 03 Dec 2022 14:42:38 GMT
Last-Modified: Thu, 01 Dec 2022 14:01:02 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: KxurpY1m8anENI78FekC1jxVWW26HIipTYCXLIdbeJr2sis4PsmWEw==
Age: 2496
googleads.g.doubleclick.net/pagead/landing?gcs=G111&rnd=2026206883.1669956302&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy>m=2wgbu05LXXS3R&auid=1908005577.1669956302
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/landing?gcs=G111&rnd=2026206883.1669956302&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy>m=2wgbu05LXXS3R&auid=1908005577.1669956302
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/landing?gcs=G111&rnd=2026206883.1669956302&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy>m=2wgbu05LXXS3R&auid=1908005577.1669956302 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 04:45:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 02-Dec-2022 05:00:05 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
smetrics.savethechildren.org/b/ss/stcf.prod.us/5.1/JS-2.22.4-LCXS/s53420770079902?AQB=1&ndh=1&pf=1&t=2%2F11%2F2022%204%3A45%3A3%205%200&cid.&userid.&id=90580456540662172421466096858195453816&.userid&.cid&sdid=2231BEC5EE6110E0-009F0591282AF207&mid=90580456540662172421466096858195453816&aamlh=6&ce=Windows-1257&cl=SESSION&pageName=Privacy%20Policy&g=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&cc=USD&server=www.savethechildren.org&v0=Email%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122&events=event79%3D2.013&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&c2=D%3Dg&v2=D%3DpageName&v3=footer-email-signup&c10=D%3Dv95&v12=Email%7CEmail%7CSFMC%7CGT_Missed%7CAAI_Team_Tomorrow_b%7C12%2F01%2F2022&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Homepage&v27=New&c28=D%3Dv28&v28=footer-email-signup-SSJHKJZWLRETVJQDJIBK&c29=D%3Dv36&v36=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy&v42=di-253647-E31530698E33AE9D15ABAA13B0875EEF9A&c49=D%3Dv49&v49=year%3D2022%20%7C%20month%3DDecember%20%7C%20date%3D01%20%7C%20day%3DThursday%20%7C%20time%3D11%3A45%3A03%20PM&c51=D%3Dv51&v51=privacy-policy&v52=D%3Dg&c53=D%3Dv53&v53=about-us&c54=D%3Dv54&v54=Privacy%20Policy&c55=D%3Dv27&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v95=2.013&v110=Launch&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1
200 OK 43 B URL HTTP/2 smetrics.savethechildren.org/b/ss/stcf.prod.us/5.1/JS-2.22.4-LCXS/s53420770079902?AQB=1&ndh=1&pf=1&t=2%2F11%2F2022%204%3A45%3A3%205%200&cid.&userid.&id=90580456540662172421466096858195453816&.userid&.cid&sdid=2231BEC5EE6110E0-009F0591282AF207&mid=90580456540662172421466096858195453816&aamlh=6&ce=Windows-1257&cl=SESSION&pageName=Privacy%20Policy&g=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&cc=USD&server=www.savethechildren.org&v0=Email%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122&events=event79%3D2.013&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&c2=D%3Dg&v2=D%3DpageName&v3=footer-email-signup&c10=D%3Dv95&v12=Email%7CEmail%7CSFMC%7CGT_Missed%7CAAI_Team_Tomorrow_b%7C12%2F01%2F2022&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Homepage&v27=New&c28=D%3Dv28&v28=footer-email-signup-SSJHKJZWLRETVJQDJIBK&c29=D%3Dv36&v36=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy&v42=di-253647-E31530698E33AE9D15ABAA13B0875EEF9A&c49=D%3Dv49&v49=year%3D2022%20%7C%20month%3DDecember%20%7C%20date%3D01%20%7C%20day%3DThursday%20%7C%20time%3D11%3A45%3A03%20PM&c51=D%3Dv51&v51=privacy-policy&v52=D%3Dg&c53=D%3Dv53&v53=about-us&c54=D%3Dv54&v54=Privacy%20Policy&c55=D%3Dv27&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v95=2.013&v110=Launch&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1
IP
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/stcf.prod.us/5.1/JS-2.22.4-LCXS/s53420770079902?AQB=1&ndh=1&pf=1&t=2%2F11%2F2022%204%3A45%3A3%205%200&cid.&userid.&id=90580456540662172421466096858195453816&.userid&.cid&sdid=2231BEC5EE6110E0-009F0591282AF207&mid=90580456540662172421466096858195453816&aamlh=6&ce=Windows-1257&cl=SESSION&pageName=Privacy%20Policy&g=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&cc=USD&server=www.savethechildren.org&v0=Email%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122&events=event79%3D2.013&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&c2=D%3Dg&v2=D%3DpageName&v3=footer-email-signup&c10=D%3Dv95&v12=Email%7CEmail%7CSFMC%7CGT_Missed%7CAAI_Team_Tomorrow_b%7C12%2F01%2F2022&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Homepage&v27=New&c28=D%3Dv28&v28=footer-email-signup-SSJHKJZWLRETVJQDJIBK&c29=D%3Dv36&v36=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy&v42=di-253647-E31530698E33AE9D15ABAA13B0875EEF9A&c49=D%3Dv49&v49=year%3D2022%20%7C%20month%3DDecember%20%7C%20date%3D01%20%7C%20day%3DThursday%20%7C%20time%3D11%3A45%3A03%20PM&c51=D%3Dv51&v51=privacy-policy&v52=D%3Dg&c53=D%3Dv53&v53=about-us&c54=D%3Dv54&v54=Privacy%20Policy&c55=D%3Dv27&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v95=2.013&v110=Launch&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1 HTTP/1.1
Host: smetrics.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19329%7CMCMID%7C90580456540662172421466096858195453816%7CMCAID%7CNONE%7CMCOPTOUT-1669963502s%7CNONE%7CMCAAMLH-1670561103%7C6%7CMCAAMB-1670561103%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C5.4.0; mbox=session#e28081cb4454403784c4f5f3d6250469#1669958164|PC#e28081cb4454403784c4f5f3d6250469.37_0#1733201104; at_check=true; stc-analytics-source=Email|Email|SFMC|GT_Missed|AAI_Team_Tomorrow_b|12/01/2022; stc-session-count=NaN; _sfid_58d2={%22anonymousId%22:%22a91be08b037aa6d8%22%2C%22consents%22:[]}; _evga_c797={%22uuid%22:%22a91be08b037aa6d8%22}; stc-analytics-sub_source=|||||; _gcl_au=1.1.1908005577.1669956302; da_sid=E31530698E33AE9D15ABAA13B0875EEF9A|3|0|3; da_lid=D026035A9A73EA0680FABB99F28514E429|0|0|0; da_intState=; s_ecid=MCMID%7C90580456540662172421466096858195453816; AMCVS_6B0E659F56A9E70D7F000101%40AdobeOrg=1; s_ppv=Privacy%2520Policy%2C8%2C8%2C939%2C1%2C12; s_ips=939; s_tp=11325; s_nr30=1669956303384-New; s_cc=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Fri, 02 Dec 2022 04:45:05 GMT
expires: Thu, 01 Dec 2022 04:45:05 GMT
last-modified: Sat, 03 Dec 2022 04:45:05 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_ecid=MCMID%7C90580456540662172421466096858195453816; Path=/; Domain=savethechildren.org;
etag: 3586203859240583168-4619378516347418897
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
nexus.ensighten.com/choozle/10170/code/07285131fb793c9edbc1a300e9502bf5.js?conditionId0=4927691&conditionId1=4871227&conditionId2=4872711
200 OK 12 kB URL HTTP/2 nexus.ensighten.com/choozle/10170/code/07285131fb793c9edbc1a300e9502bf5.js?conditionId0=4927691&conditionId1=4871227&conditionId2=4872711
IP
File type Unicode text, UTF-8 text, with very long lines (39149)
Hash 7eaf102bd2e6aa77fdd91fe8e04bfbd3
af5f921e3957201d1a257576ac925ca4a1c46cfa
bc56ae0b746743cd97e8f1aaac831fe9b14aaf8688919a7a625c245e24c5518b
GET /choozle/10170/code/07285131fb793c9edbc1a300e9502bf5.js?conditionId0=4927691&conditionId1=4871227&conditionId2=4872711 HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Sun, 18 Sep 2022 05:40:22 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 13 Jun 2022 14:49:13 GMT
etag: W/"c6e0d9cd7e124dd83def90c29c5a679e"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: yWQcOchPsepRFc6ofkFJ9kbwERYN9jZj
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eP3T3kdlJAWxP46JRtE58R2FUhccsntjnUv-Hsrm8J7C31iQmlP3Pg==
age: 6476683
X-Firefox-Spdy: h2
cm.everesttech.net/cm/dd?d_uuid=90247635961317549221500364396644419016
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/dd?d_uuid=90247635961317549221500364396644419016
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/dd?d_uuid=90247635961317549221500364396644419016 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Fri, 02 Dec 2022 04:45:05 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~Y4mC0QAAAOI5YAN-; Domain=.everesttech.net; Expires=Sat, 02-Dec-2023 04:45:05 GMT; Path=/
everest_session_v2=Y4mC0QAAAOI5YQN-; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://dpm.demdex.net/ibs:dpid=411&dpuuid=Y4mC0QAAAOI5YAN-
Server: AMO-cookiemap/1.1
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash e0b8153d5f7410e28d7e34c86cb60d11
5a2e7925eba981b424dfeee7d84a1cb4d2522710
a4b988472ba5fdec3101e88a6e76359ecd028c78d0cc486eb9f2bef3774ebc0d
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 04:45:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 01 Dec 2022 19:33:36 GMT
Expires: Fri, 02 Dec 2022 19:33:36 GMT
ETag: "5a2e7925eba981b424dfeee7d84a1cb4d2522710"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49a9684674e0f1b3974c6427c5354fe4
c201e61bcda9cc91369f0c57f8236fcdd3db26c6
27b8d50242836a45aca1fcd0cb58e7f685011c1f93b57d0e3ea9a02400f8d801
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.opmnstr.com/app/js/4.f2ffe9e7.min.js
200 OK 6.5 kB URL HTTP/2 a.opmnstr.com/app/js/4.f2ffe9e7.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (20291)
Hash 62c69c3d762e9dc15fec12ac22cb0b49
e3d6227e5c631e0e0797947a8337a521d650ad1b
d3e15c90d3b29e52540b51748284437b36de0f6b66ca851e89c184303380baf5
GET /app/js/4.f2ffe9e7.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"637289e2-4f7e"
last-modified: Mon, 14 Nov 2022 18:33:06 GMT
cdn-storageserver: DE-164
cdn-requestpullsuccess: True
cdn-fileserver: 459
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/25/2022 21:21:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 2f5e98904380590b7632698f91305bf0
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash fe00a8d45f578269a68305d6cba6c515
fb532e5a130b9070b30ad314e1f02595a50c4591
b6e850b4ae47b9c742230f745a34bff04872735638807aa29e873aa1db7b7943
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1875
Cache-Control: max-age=114049
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:05 GMT
Etag: "638895ff-139"
Expires: Sat, 03 Dec 2022 12:25:54 GMT
Last-Modified: Thu, 01 Dec 2022 11:54:39 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 313
smetrics.savethechildren.org/b/ss/stcf.prod.us/5.1/JS-2.22.4-LCXS/s59538627939685?AQB=1&ndh=1&pf=1&t=2%2F11%2F2022%204%3A45%3A3%205%200&cid.&userid.&id=90580456540662172421466096858195453816&.userid&.cid&mid=90580456540662172421466096858195453816&aamlh=6&ce=Windows-1257&cl=SESSION&pageName=Privacy%20Policy&g=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&cc=USD&events=event37&c2=D%3Dg&v2=D%3DpageName&v3=footer-email-signup&c10=D%3Dv95&v12=Email%7CEmail%7CSFMC%7CGT_Missed%7CAAI_Team_Tomorrow_b%7C12%2F01%2F2022&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Homepage&c28=D%3Dv28&v28=footer-email-signup-SSJHKJZWLRETVJQDJIBK&c29=D%3Dv36&c34=D%3Dv84&v36=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy&v42=di-253647-E31530698E33AE9D15ABAA13B0875EEF9A&c51=D%3Dv51&v51=privacy-policy&v52=D%3Dg&v53=about-us&v54=Privacy%20Policy&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v84=Panel%7CEnewsletter%20Signup%7CRegion%202%20of%202%7C%7CAnonymous&v95=2.013&v110=Launch&pe=lnk_o&pev2=impression&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1
200 OK 43 B URL HTTP/2 smetrics.savethechildren.org/b/ss/stcf.prod.us/5.1/JS-2.22.4-LCXS/s59538627939685?AQB=1&ndh=1&pf=1&t=2%2F11%2F2022%204%3A45%3A3%205%200&cid.&userid.&id=90580456540662172421466096858195453816&.userid&.cid&mid=90580456540662172421466096858195453816&aamlh=6&ce=Windows-1257&cl=SESSION&pageName=Privacy%20Policy&g=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&cc=USD&events=event37&c2=D%3Dg&v2=D%3DpageName&v3=footer-email-signup&c10=D%3Dv95&v12=Email%7CEmail%7CSFMC%7CGT_Missed%7CAAI_Team_Tomorrow_b%7C12%2F01%2F2022&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Homepage&c28=D%3Dv28&v28=footer-email-signup-SSJHKJZWLRETVJQDJIBK&c29=D%3Dv36&c34=D%3Dv84&v36=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy&v42=di-253647-E31530698E33AE9D15ABAA13B0875EEF9A&c51=D%3Dv51&v51=privacy-policy&v52=D%3Dg&v53=about-us&v54=Privacy%20Policy&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v84=Panel%7CEnewsletter%20Signup%7CRegion%202%20of%202%7C%7CAnonymous&v95=2.013&v110=Launch&pe=lnk_o&pev2=impression&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1
IP
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/stcf.prod.us/5.1/JS-2.22.4-LCXS/s59538627939685?AQB=1&ndh=1&pf=1&t=2%2F11%2F2022%204%3A45%3A3%205%200&cid.&userid.&id=90580456540662172421466096858195453816&.userid&.cid&mid=90580456540662172421466096858195453816&aamlh=6&ce=Windows-1257&cl=SESSION&pageName=Privacy%20Policy&g=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&cc=USD&events=event37&c2=D%3Dg&v2=D%3DpageName&v3=footer-email-signup&c10=D%3Dv95&v12=Email%7CEmail%7CSFMC%7CGT_Missed%7CAAI_Team_Tomorrow_b%7C12%2F01%2F2022&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Homepage&c28=D%3Dv28&v28=footer-email-signup-SSJHKJZWLRETVJQDJIBK&c29=D%3Dv36&c34=D%3Dv84&v36=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy&v42=di-253647-E31530698E33AE9D15ABAA13B0875EEF9A&c51=D%3Dv51&v51=privacy-policy&v52=D%3Dg&v53=about-us&v54=Privacy%20Policy&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v84=Panel%7CEnewsletter%20Signup%7CRegion%202%20of%202%7C%7CAnonymous&v95=2.013&v110=Launch&pe=lnk_o&pev2=impression&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1 HTTP/1.1
Host: smetrics.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19329%7CMCMID%7C90580456540662172421466096858195453816%7CMCAID%7CNONE%7CMCOPTOUT-1669963503s%7CNONE%7CMCAAMLH-1670561103%7C6%7CMCAAMB-1670561103%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CMCCIDH%7C-304196813%7CvVersion%7C5.4.0; mbox=session#e28081cb4454403784c4f5f3d6250469#1669958164|PC#e28081cb4454403784c4f5f3d6250469.37_0#1733201104; at_check=true; stc-analytics-source=Email|Email|SFMC|GT_Missed|AAI_Team_Tomorrow_b|12/01/2022; stc-session-count=NaN; _sfid_58d2={%22anonymousId%22:%22a91be08b037aa6d8%22%2C%22consents%22:[]}; _evga_c797={%22uuid%22:%22a91be08b037aa6d8%22}; stc-analytics-sub_source=|||||; _gcl_au=1.1.1908005577.1669956302; da_sid=E31530698E33AE9D15ABAA13B0875EEF9A|3|0|3; da_lid=D026035A9A73EA0680FABB99F28514E429|0|0|0; da_intState=; s_ecid=MCMID%7C90580456540662172421466096858195453816; AMCVS_6B0E659F56A9E70D7F000101%40AdobeOrg=1; s_ppv=Privacy%2520Policy%2C8%2C8%2C939%2C1%2C12; s_ips=939; s_tp=11325; s_nr30=1669956303384-New; s_cc=true; _uetsid=161d611071fc11eda393c3f2b37714da; _uetvid=161d7e7071fc11ed86963fb6f73e0e3a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Fri, 02 Dec 2022 04:45:05 GMT
expires: Thu, 01 Dec 2022 04:45:05 GMT
last-modified: Sat, 03 Dec 2022 04:45:05 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_ecid=MCMID%7C90580456540662172421466096858195453816; Path=/; Domain=savethechildren.org;
etag: 3586203859173638144-4619768881674336639
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 0b414e130c818d917fe2d85ca706808c
582c06dfca93b3c792770ec16184781ff7af049b
22265244cefa0457a1372dffdbd16dd5e50db2f3147d83f56d9123e4516bf2e5
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 04:45:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 01 Dec 2022 20:52:17 GMT
Expires: Fri, 02 Dec 2022 20:52:17 GMT
ETag: "582c06dfca93b3c792770ec16184781ff7af049b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
t.co/i/adsct?bci=3&eci=2&event_id=85ffb572-9258-42d1-8fc6-dc363cbb0946&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=e82563c7-1310-4a0d-8d0a-157038249731&tw_document_href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=85ffb572-9258-42d1-8fc6-dc363cbb0946&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=e82563c7-1310-4a0d-8d0a-157038249731&tw_document_href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=85ffb572-9258-42d1-8fc6-dc363cbb0946&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=e82563c7-1310-4a0d-8d0a-157038249731&tw_document_href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=356b756c-6d27-4a34-a651-73aaf01766a4; Max-Age=63072000; Expires=Sun, 01 Dec 2024 04:45:05 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: b003232741b0d0fb
strict-transport-security: max-age=0
x-response-time: 104
x-connection-hash: c103dac75f3bd5a32fd8236fa1d8515c88182cd0778731f8a060551ddf3c82dc
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash e0b8153d5f7410e28d7e34c86cb60d11
5a2e7925eba981b424dfeee7d84a1cb4d2522710
a4b988472ba5fdec3101e88a6e76359ecd028c78d0cc486eb9f2bef3774ebc0d
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 04:45:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 01 Dec 2022 19:33:36 GMT
Expires: Fri, 02 Dec 2022 19:33:36 GMT
ETag: "5a2e7925eba981b424dfeee7d84a1cb4d2522710"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=282604974078068160
302 Found 0 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=282604974078068160
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=282604974078068160 HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Fri, 02 Dec 2022 04:45:05 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: TBE2VH7N9GZQC1W9AAB7
Set-Cookie: ad-id=A3vsCkEmLkDtoj8ltxKMpYg|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2023 04:45:05 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=282604974078068160&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
tags.wdsvc.net/controller.js?id=100229
302 Found 0 B URL HTTP/1.1 tags.wdsvc.net/controller.js?id=100229
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /controller.js?id=100229 HTTP/1.1
Host: tags.wdsvc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: private, no-cache
location: https://tags.wdsvc.net/container.js?id=100229&v=4.10&t=1669956305380
Set-Cookie: _wdTest=accept; Domain=.wdsvc.net; Path=/; Max-Age=30; SameSite=none; secure; HttpOnly
wds_random=2022-12-02T04:45:05.379Z~2022-12-02T04:45:05.379Z|2995182159131095|40|; expires=Mon, 01 Dec 2025 04:45:05 GMT; domain=.wdsvc.net;path=/;SameSite=none; secure; HttpOnly
Date: Fri, 02 Dec 2022 04:45:05 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
ocsp.digicert.com/
200 OK 471 B IP
Hash 41fede90cf5cd2a924136e919c668153
74734fb2a2961303cd047fbcb52dd01117fb0e34
324eed1bad8a1c8aebe4712ed2c32beacf194dba5065b046b9fcff87306059fe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3720
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:05 GMT
Last-Modified: Fri, 02 Dec 2022 03:43:06 GMT
Server: ECS (amb/6B7B)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0957dd84685f39c3a4421ebfa953f1b8
152533e71340ccf1d22e045eda04f5ade1350d69
ae1df5f2c39797696dd6a183c268237106e33a55869443e97d9055e3c1a2fb37
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 02 Dec 2022 04:45:05 GMT
Last-Modified: Fri, 02 Dec 2022 04:41:49 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DW4dFgIaS7XXP0y1yngcWbL99eKsSAM98VFSc_ndqciyeynCyE0-Kg==
Age: 196
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash e2a1671bcf52ee924d5b1a78374cea7e
fe03277189efedc6a7f6c733b430550061e9d036
937dc2c0054454f3cc12297ba542311d918bc3605039a0bbace1c79c0b973286
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 02 Dec 2022 04:45:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 01 Dec 2022 22:14:25 GMT
Expires: Fri, 02 Dec 2022 22:14:25 GMT
ETag: "fe03277189efedc6a7f6c733b430550061e9d036"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 53ebd0d4b9ede359adb0d6b8d6ae3c39
0200a4ebed557808bcccd3e5d0fe625513ad2ebe
e352b67003ad44e6f4fc3f23621fea03354e4a82b1f2d1820ce7bc554ecc7792
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 04:45:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 06 Dec 2022 01:14:45 GMT
ETag: "0200a4ebed557808bcccd3e5d0fe625513ad2ebe"
Last-Modified: Fri, 02 Dec 2022 01:14:46 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2056
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7731693d2d55b4f1-OSL
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 53ebd0d4b9ede359adb0d6b8d6ae3c39
0200a4ebed557808bcccd3e5d0fe625513ad2ebe
e352b67003ad44e6f4fc3f23621fea03354e4a82b1f2d1820ce7bc554ecc7792
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 04:45:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 06 Dec 2022 01:14:45 GMT
ETag: "0200a4ebed557808bcccd3e5d0fe625513ad2ebe"
Last-Modified: Fri, 02 Dec 2022 01:14:46 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2056
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7731693d2921b524-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 41b8355cb36043a801948bdf05c09603
864cc683136c19c3db12c02ea1cba9541930acad
0772bf6364ba2b00e95320d02bf751f8bcd1b16deb18ae381353072cb6120e45
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 02 Dec 2022 04:45:05 GMT
Last-Modified: Fri, 02 Dec 2022 04:04:15 GMT
Server: ECS (nyb/1D15)
X-Cache: Miss from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bG5o5hN9cqv5rRO2y0X4kfoj333NXVuQXRD8ge5NIb36_gaPYvZ7Yw==
Age: 2450
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=282604974078068160&dcc=t
200 OK 65 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=282604974078068160&dcc=t
IP
File type HTML document, ASCII text
Hash 22fdf49482d8200e8f305bbe262eff14
f254bd4053267c2cf46675613e689016d8b7f775
115d83ece49fd1c5769409aab9d78572eed86cd38a0556b4cdeeac82c83091d3
GET /iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=282604974078068160&dcc=t HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Fri, 02 Dec 2022 04:45:05 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 65
Connection: keep-alive
x-amz-rid: 5EBQ4PGNZ30A97D8GPSV
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
insight.adsrvr.org/tags/f35s4e0/n4od8ve/iframe
303 See Other 183 B URL HTTP/2 insight.adsrvr.org/tags/f35s4e0/n4od8ve/iframe
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 4b7baa44a9cb0b8ff32d59e257be92f6
fb817d04f1093d20bcd5e6ab21a4d2f383aa6457
53456e8469debdb17dc2a874d2efbb238f4afec996ead18581dfcfe154ec5ce1
GET /tags/f35s4e0/n4od8ve/iframe HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 303 See Other
date: Fri, 02 Dec 2022 04:45:05 GMT
content-type: text/html; charset=UTF-8
content-length: 183
location: https://d1eoo1tco6rr5e.cloudfront.net/f35s4e0/n4od8ve/iframe
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
insight.adsrvr.org/tags/f35s4e0/qa0mevt/iframe
303 See Other 183 B URL HTTP/2 insight.adsrvr.org/tags/f35s4e0/qa0mevt/iframe
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 9996833ba4873a6a2b2ae4fa08891598
ad2582c24fd6f2ff473b251542508e6a4f34f100
db2d6dec0779bc0e1721031b88f6383a99b2516d62b7aafc69d3333467271110
GET /tags/f35s4e0/qa0mevt/iframe HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 303 See Other
date: Fri, 02 Dec 2022 04:45:05 GMT
content-type: text/html; charset=UTF-8
content-length: 183
location: https://d1eoo1tco6rr5e.cloudfront.net/f35s4e0/qa0mevt/iframe
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
w.usabilla.com/0b7d56c9da02.js?lv=1
200 OK 11 kB URL HTTP/2 w.usabilla.com/0b7d56c9da02.js?lv=1
IP
File type ASCII text, with very long lines (632)
Hash 73fc8d950234220b51b523f8d71808bd
a360a9276a2d7f9b5317ef17b325004128b27e72
72d488725f26a1bcb8b2468b7a97c7abd6d8c74ed9e4ac71de149a4f87be6964
GET /0b7d56c9da02.js?lv=1 HTTP/1.1
Host: w.usabilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:05 GMT
content-type: text/javascript
content-length: 10748
cache-control: public,max-age=0
content-encoding: gzip
etag: "f13085756416467a0a5f92ece874d15e"
pragma: no-cache
x-widget-server: 2.1
X-Firefox-Spdy: h2
tr2.smarterhq.io/app1/SmarterHandler.ashx?r=844175946&i=fyl6dahrce-1092&cb=_smtr.postprocess&cu=true&bv=2.7.14&utc=0&ctid=36183272&pt=5&href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&hostn=www.savethechildren.org&pathn=%2Fus%2Fabout-us%2Fprivacy-policy
200 OK 295 B URL HTTP/2 tr2.smarterhq.io/app1/SmarterHandler.ashx?r=844175946&i=fyl6dahrce-1092&cb=_smtr.postprocess&cu=true&bv=2.7.14&utc=0&ctid=36183272&pt=5&href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&hostn=www.savethechildren.org&pathn=%2Fus%2Fabout-us%2Fprivacy-policy
IP
File type ASCII text, with no line terminators
Hash 18952a8dd41b7917189a3bb0705359cc
6d92952093a80677054306c261dff9b81d45abeb
3db1c20e97a162461fe4163c3f353b9c4bd3a2aac983cd45a82d5511bc1096de
GET /app1/SmarterHandler.ashx?r=844175946&i=fyl6dahrce-1092&cb=_smtr.postprocess&cu=true&bv=2.7.14&utc=0&ctid=36183272&pt=5&href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&hostn=www.savethechildren.org&pathn=%2Fus%2Fabout-us%2Fprivacy-policy HTTP/1.1
Host: tr2.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:05 GMT
content-type: text/javascript
content-length: 295
server: Kestrel
cache-control: no-store,no-cache
pragma: no-cache
X-Firefox-Spdy: h2
d1eoo1tco6rr5e.cloudfront.net/f35s4e0/qa0mevt/iframe
200 OK 138 B URL HTTP/1.1 d1eoo1tco6rr5e.cloudfront.net/f35s4e0/qa0mevt/iframe
IP
File type ASCII text, with CRLF line terminators
Hash d6f3ec45e4993f46db4a53dc1f01b599
2c7a74dce73d73c8435847d43c20d47c6ea53a1d
d9479c1288cf240cf605993ef0fcda98d749b6b7fb8e4ee584be29ed1856aca3
GET /f35s4e0/qa0mevt/iframe HTTP/1.1
Host: d1eoo1tco6rr5e.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Last-Modified: Sat, 02 Oct 2021 00:02:02 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 01 Dec 2022 07:42:12 GMT
Cache-Control: max-age=86400
ETag: "d6f3ec45e4993f46db4a53dc1f01b599"
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3FJmc3Q0XF3e2JK6zwaM3jZ8V9JyKsNp7TzfeBTeGoO66FwfGXN6pg==
Age: 75774
d1eoo1tco6rr5e.cloudfront.net/f35s4e0/n4od8ve/iframe
200 OK 132 B URL HTTP/1.1 d1eoo1tco6rr5e.cloudfront.net/f35s4e0/n4od8ve/iframe
IP
File type ASCII text, with CRLF line terminators
Hash bc0416914b6a26dae5dfd258e572b291
75809bf17bb8d45f5f829b7b625ded35e506d2af
50bb9c8f4af577f3289f597f2441f177967721b438fd1737b937ef69f4a58062
GET /f35s4e0/n4od8ve/iframe HTTP/1.1
Host: d1eoo1tco6rr5e.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 132
Connection: keep-alive
Last-Modified: Sat, 02 Oct 2021 00:02:02 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 02 Dec 2022 04:45:05 GMT
Cache-Control: max-age=86400
ETag: "bc0416914b6a26dae5dfd258e572b291"
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FIJA6DLILj85k-HDNz9X-HUHeQ6PGiZdw59rEJAR4U61u2f4I6flMQ==
Age: 22874
tags.wdsvc.net/container.js?id=100229&v=4.10&t=1669956305380
200 OK 27 kB URL HTTP/1.1 tags.wdsvc.net/container.js?id=100229&v=4.10&t=1669956305380
IP
File type ASCII text, with very long lines (27353), with no line terminators
Hash 5d2d3a4c43016db3b28364e55b4b01c6
6b5761bd5bc7a8a4f28c572ee522f37a290afa8e
3bfba8a64454b75c3de3aa4ee4cde112495f3f91cbeaaf00ea15f7fd94ba4841
GET /container.js?id=100229&v=4.10&t=1669956305380 HTTP/1.1
Host: tags.wdsvc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Cookie: _wdTest=accept; wds_random=2022-12-02T04:45:05.379Z~2022-12-02T04:45:05.379Z|2995182159131095|40|
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-length: 27353
Expires: Mon, 3 Jan 2005 13:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Set-Cookie: wds_random=2022-12-02T04:45:05.379Z~2022-12-02T04:45:05.379Z|2995182159131095|40|; expires=Mon, 01 Dec 2025 04:45:05 GMT; domain=.wdsvc.net;path=/; SameSite=none; secure; HttpOnly
Date: Fri, 02 Dec 2022 04:45:05 GMT
Connection: keep-alive
Keep-Alive: timeout=5
d6tizftlrpuof.cloudfront.net/themes/production/save-the-children-usa-button-18e985c8f1327aa5b0db2be1ab660ba6.png
200 OK 9.2 kB URL HTTP/1.1 d6tizftlrpuof.cloudfront.net/themes/production/save-the-children-usa-button-18e985c8f1327aa5b0db2be1ab660ba6.png
IP
File type PNG image data, 159 x 523, 8-bit/color RGB, non-interlaced\012- data
Hash 18e985c8f1327aa5b0db2be1ab660ba6
40b959e93c2a7521f3ac03bdc6952d3316bfa8f8
9fbb05adcdc2317148fbaaf7c56be51c9246d351c9ae5235eb09dcd0ee0da552
GET /themes/production/save-the-children-usa-button-18e985c8f1327aa5b0db2be1ab660ba6.png HTTP/1.1
Host: d6tizftlrpuof.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 9208
Connection: keep-alive
Date: Thu, 17 Nov 2022 19:43:21 GMT
Last-Modified: Tue, 08 Nov 2022 16:00:18 GMT
ETag: "18e985c8f1327aa5b0db2be1ab660ba6"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=315360000, no-transform, public
x-amz-version-id: UUIaS9R3j_VdIQipfTJ5dnr2koEgl3_W
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: o_jdk2pDFLn4DBCn-D4hb50-GVe-RQKQv8t4ORnX6o7VRpTEDaSf0A==
Age: 1242105
tr2.smarterhq.io/app1/smtr1x1.gif?r=1302617168&action=crm&i=fyl6dahrce-1092&modalc=638055531055165761%5E0184d127-026c-4066-8bfa-bfb993b43ead%5E0184d127-026c-45b9-84b9-76d73f056ad1%5E0%5E91.90.42.154&dwId=90580456540662172421466096858195453816&bv=2.7.14
200 OK 43 B URL HTTP/2 tr2.smarterhq.io/app1/smtr1x1.gif?r=1302617168&action=crm&i=fyl6dahrce-1092&modalc=638055531055165761%5E0184d127-026c-4066-8bfa-bfb993b43ead%5E0184d127-026c-45b9-84b9-76d73f056ad1%5E0%5E91.90.42.154&dwId=90580456540662172421466096858195453816&bv=2.7.14
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /app1/smtr1x1.gif?r=1302617168&action=crm&i=fyl6dahrce-1092&modalc=638055531055165761%5E0184d127-026c-4066-8bfa-bfb993b43ead%5E0184d127-026c-45b9-84b9-76d73f056ad1%5E0%5E91.90.42.154&dwId=90580456540662172421466096858195453816&bv=2.7.14 HTTP/1.1
Host: tr2.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:05 GMT
content-type: image/gif
content-length: 43
server: Kestrel
cache-control: no-store,no-cache
pragma: no-cache
X-Firefox-Spdy: h2
tr2.smarterhq.io/app1/SmarterHandler.ashx?r=1191859578&i=fyl6dahrce-1092&cb=_smtr.postprocess&bv=2.7.14&utc=0&ctid=36183272&pt=5&href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&hostn=www.savethechildren.org&pathn=%2Fus%2Fabout-us%2Fprivacy-policy&modalc=638055531055165761^0184d127-026c-4066-8bfa-bfb993b43ead^0184d127-026c-45b9-84b9-76d73f056ad1^0^91.90.42.154
200 OK 295 B URL HTTP/2 tr2.smarterhq.io/app1/SmarterHandler.ashx?r=1191859578&i=fyl6dahrce-1092&cb=_smtr.postprocess&bv=2.7.14&utc=0&ctid=36183272&pt=5&href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&hostn=www.savethechildren.org&pathn=%2Fus%2Fabout-us%2Fprivacy-policy&modalc=638055531055165761^0184d127-026c-4066-8bfa-bfb993b43ead^0184d127-026c-45b9-84b9-76d73f056ad1^0^91.90.42.154
IP
File type ASCII text, with no line terminators
Hash 4ce39c76cf3040ace2627825a88896f4
f1d4728b6558578331c8c59118ed256394d626aa
4ad6f4b7abbfc8a758fb03264617ff02c3baf6b27714ec331b145b5738d03647
GET /app1/SmarterHandler.ashx?r=1191859578&i=fyl6dahrce-1092&cb=_smtr.postprocess&bv=2.7.14&utc=0&ctid=36183272&pt=5&href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&hostn=www.savethechildren.org&pathn=%2Fus%2Fabout-us%2Fprivacy-policy&modalc=638055531055165761^0184d127-026c-4066-8bfa-bfb993b43ead^0184d127-026c-45b9-84b9-76d73f056ad1^0^91.90.42.154 HTTP/1.1
Host: tr2.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:05 GMT
content-type: text/javascript
content-length: 295
server: Kestrel
cache-control: no-store,no-cache
pragma: no-cache
X-Firefox-Spdy: h2
tags.wdsvc.net/tpc-eval/?lid=184d1270249-tags6-aa41a30a1f1d7
200 OK 21 B URL HTTP/1.1 tags.wdsvc.net/tpc-eval/?lid=184d1270249-tags6-aa41a30a1f1d7
IP
File type ASCII text, with no line terminators
Hash 003a8361d4dd772481d7141c6ffe7ca5
1edd2f58fba4ac9191493fb71a5d2c2407e34c56
b0e70b299ab9c122ad93531fa8e5309833baecd53dd55c992c538f8b33bfa22d
GET /tpc-eval/?lid=184d1270249-tags6-aa41a30a1f1d7 HTTP/1.1
Host: tags.wdsvc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: _wdTest=accept; wds_random=2022-12-02T04:45:05.379Z~2022-12-02T04:45:05.379Z|2995182159131095|40|
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-length: 21
Expires: Mon, 3 Jan 2005 13:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Date: Fri, 02 Dec 2022 04:45:05 GMT
Connection: keep-alive
Keep-Alive: timeout=5
app.leadsrx.com/visitor.js
200 OK 19 kB URL HTTP/2 app.leadsrx.com/visitor.js
IP
File type ASCII text, with very long lines (18735), with no line terminators
Hash 0a4109c065352458bee4e9cc98e1fbce
1d44e1811ea9409f12e88fc42c8a734d3316293b
6b5116bd2cb4809c6634b99a9b1ea0a0aeda596a94817682a0e4811e35eccc58
GET /visitor.js HTTP/1.1
Host: app.leadsrx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:05 GMT
content-type: application/javascript
content-length: 18735
server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
last-modified: Thu, 01 Dec 2022 18:14:43 GMT
etag: "492f-5eec83209d0b6"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash ea4c0e0ab811f65f5ff773ec687c7f6b
8fd72e42a6212a5f7d45e369134751bba7219f62
12207bb36053632d9a01d5afbe2e448c3845fbad88954b3ba631d362cc065df9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 04:45:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 02:54:24 GMT
Expires: Wed, 07 Dec 2022 02:54:23 GMT
Etag: "8fd72e42a6212a5f7d45e369134751bba7219f62"
Cache-Control: max-age=424756,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 773169415a43b509-OSL
44.238.122.172/is
200 OK 32 B IP
File type ASCII text, with no line terminators
Hash 84ea2bc938aa25cb486a6024e22c5731
b73009a856d8f93ddfb3f1b9c9823ca605c670a6
b083abdb63017269718a30d78cdb194a817e77b450c69fc4102aabea06477d01
Analyzer Verdict Alert quad9 Sinkholed
GET /is HTTP/1.1
Host: 44.238.122.172
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Origin: https://www.savethechildren.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:45:05 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
insight.adsrvr.org/track/pxl/?adv=f35s4e0&ct=0:n4od8ve&fmt=3
200 OK 2.0 kB URL HTTP/2 insight.adsrvr.org/track/pxl/?adv=f35s4e0&ct=0:n4od8ve&fmt=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 7c7ed475671cb13f622c81582024c5ae
17d4e45713caf96fbb585b50fc5b746513950292
44074ea67c6eeaf8a0844fc2038287b1d896c55d8af13be556d75c3707362202
GET /track/pxl/?adv=f35s4e0&ct=0:n4od8ve&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d1eoo1tco6rr5e.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:05 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
dpm.demdex.net/ibs:dpid=411&dpuuid=Y4mC0QAAAOI5YAN-
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=411&dpuuid=Y4mC0QAAAOI5YAN-
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=411&dpuuid=Y4mC0QAAAOI5YAN- HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-07303b075.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y4mC0QAAAOI5YAN-
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=49129409591936459001605009970194416813; Max-Age=15552000; Expires=Wed, 31 May 2023 04:45:06 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: YWTAlIYrT0g=
Content-Length: 0
Connection: keep-alive
bat.bing.com/action/0?ti=5439503&Ver=2&mid=20688d05-f443-4b49-8a31-ba2df9d22671&sid=161d611071fc11eda393c3f2b37714da&vid=161d7e7071fc11ed86963fb6f73e0e3a&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Privacy%20Policy%20%7C%20Save%20the%20Children&kw=save%20the%20children,%20children,%20humanitarian%20aid&p=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&r=<=2944&evt=pageLoad&sv=1&rn=703318
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=5439503&Ver=2&mid=20688d05-f443-4b49-8a31-ba2df9d22671&sid=161d611071fc11eda393c3f2b37714da&vid=161d7e7071fc11ed86963fb6f73e0e3a&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Privacy%20Policy%20%7C%20Save%20the%20Children&kw=save%20the%20children,%20children,%20humanitarian%20aid&p=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&r=<=2944&evt=pageLoad&sv=1&rn=703318
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5439503&Ver=2&mid=20688d05-f443-4b49-8a31-ba2df9d22671&sid=161d611071fc11eda393c3f2b37714da&vid=161d7e7071fc11ed86963fb6f73e0e3a&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Privacy%20Policy%20%7C%20Save%20the%20Children&kw=save%20the%20children,%20children,%20humanitarian%20aid&p=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&r=<=2944&evt=pageLoad&sv=1&rn=703318 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=39F7EF5C15856B08126FFD3214706ACA; domain=.bing.com; expires=Wed, 27-Dec-2023 04:45:06 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 95CC7935DD06498A8EEDD5A6DB2E544F Ref B: OSL30EDGE0105 Ref C: 2022-12-02T04:45:06Z
date: Fri, 02 Dec 2022 04:45:05 GMT
X-Firefox-Spdy: h2
onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184d127-026c-4066-8bfa-bfb993b43ead&sessionId=0184d127-026c-45b9-84b9-76d73f056ad1&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&callback=_smtr.postprocess&r=283712527&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272
200 OK 4.7 kB URL HTTP/2 onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184d127-026c-4066-8bfa-bfb993b43ead&sessionId=0184d127-026c-45b9-84b9-76d73f056ad1&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&callback=_smtr.postprocess&r=283712527&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272
IP
Hash fc48de50fb95616ae4675ad295007c92
fe82b1109ef8e5a1f1cd20b654a86e210ff41b22
eaa36761e605bab25bd744cafa3ba7dc835e55959bcfa62984535d2fbe1a5ccd
GET /api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184d127-026c-4066-8bfa-bfb993b43ead&sessionId=0184d127-026c-45b9-84b9-76d73f056ad1&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&callback=_smtr.postprocess&r=283712527&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272 HTTP/1.1
Host: onsiteshq.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:06 GMT
content-type: text/plain; charset=utf-8
server: Kestrel
x-request-id: 0HMMBQCC6R7V7:000001D8
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a11a991958dbd78dfb3392214590ef38
c5fb54ce1ad1c51598623b66827af482c565e0d5
01d67dc39941deea93712fa87453fd27679357916ab856358e0bda7a63b2624d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3486
Cache-Control: max-age=158174
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:06 GMT
Etag: "63893c12-1d7"
Expires: Sun, 04 Dec 2022 00:41:20 GMT
Last-Modified: Thu, 01 Dec 2022 23:43:14 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 313 B IP
Hash b107b05d618b22da172fe6404e9b166a
dacbaaae26c8227a9e6f284caa6753e01acdf4d1
ef6a76d9c730d4450182d3e13294f58e4dcb882b073d15decf9f07132d9de01b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2062
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:06 GMT
Last-Modified: Fri, 02 Dec 2022 04:10:44 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 313
s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2
302 Found 0 B URL HTTP/1.1 s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2 HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Fri, 02 Dec 2022 04:45:06 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: F3Q85PDNNT6M2MV7G1QC
Set-Cookie: ad-id=A73TNppYbkeEk28TYoMpQ18|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2023 04:45:06 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
bat.bing.com/p/action/5439503.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/5439503.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/5439503.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=2935F1F7182F6C28237CE39919DA6DC3; domain=.bing.com; expires=Wed, 27-Dec-2023 04:45:06 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 99BB4D87D8114D07B7E40E9BF0EEA349 Ref B: OSL30EDGE0105 Ref C: 2022-12-02T04:45:06Z
date: Fri, 02 Dec 2022 04:45:05 GMT
X-Firefox-Spdy: h2
onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184d127-026c-4066-8bfa-bfb993b43ead&sessionId=0184d127-026c-45b9-84b9-76d73f056ad1&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&callback=_smtr.postprocess&r=135702489&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272
200 OK 28 kB URL HTTP/2 onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184d127-026c-4066-8bfa-bfb993b43ead&sessionId=0184d127-026c-45b9-84b9-76d73f056ad1&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&callback=_smtr.postprocess&r=135702489&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272
IP
Hash 7bf85948b6e0f0901d7b38a7bfc43e8f
fefae3fa0565980c5a7a060ca2e6229225b002eb
ba11c6147c9cb69b84b4783688ea37be181575123a1e1f2ad68173a522ce54b0
GET /api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184d127-026c-4066-8bfa-bfb993b43ead&sessionId=0184d127-026c-45b9-84b9-76d73f056ad1&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&callback=_smtr.postprocess&r=135702489&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272 HTTP/1.1
Host: onsiteshq.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:06 GMT
content-type: text/plain; charset=utf-8
server: Kestrel
x-request-id: 0HMMBQCC6QNRS:000004EC
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a11a991958dbd78dfb3392214590ef38
c5fb54ce1ad1c51598623b66827af482c565e0d5
01d67dc39941deea93712fa87453fd27679357916ab856358e0bda7a63b2624d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3486
Cache-Control: max-age=158174
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:06 GMT
Etag: "63893c12-1d7"
Expires: Sun, 04 Dec 2022 00:41:20 GMT
Last-Modified: Thu, 01 Dec 2022 23:43:14 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash bb0b231d82f3e27bc7b72abd02ce18e9
6b16f172595bf6e7a182fe4748457af0dacb4714
5278ff012f97eaa35ad47c13c1356cc0d36cb8737eabe757894c5aa58f24aa30
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2632
Cache-Control: max-age=148315
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:06 GMT
Etag: "638918e5-1d7"
Expires: Sat, 03 Dec 2022 21:57:01 GMT
Last-Modified: Thu, 01 Dec 2022 21:13:09 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=85ffb572-9258-42d1-8fc6-dc363cbb0946&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=e82563c7-1310-4a0d-8d0a-157038249731&tw_document_href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=85ffb572-9258-42d1-8fc6-dc363cbb0946&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=e82563c7-1310-4a0d-8d0a-157038249731&tw_document_href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=85ffb572-9258-42d1-8fc6-dc363cbb0946&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=e82563c7-1310-4a0d-8d0a-157038249731&tw_document_href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:05 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_PzZ1y0eWZHS72F4/dOZEsw=="; Max-Age=63072000; Expires=Sun, 01 Dec 2024 04:45:06 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 44d78ad5feed3286
strict-transport-security: max-age=631138519
x-response-time: 108
x-connection-hash: b4b408953d43c3a3286a883e360fcfab1e79abd8416d1d38f5a604ad27813410
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash bb0b231d82f3e27bc7b72abd02ce18e9
6b16f172595bf6e7a182fe4748457af0dacb4714
5278ff012f97eaa35ad47c13c1356cc0d36cb8737eabe757894c5aa58f24aa30
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2629
Cache-Control: max-age=148312
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:06 GMT
Etag: "638918e5-1d7"
Expires: Sat, 03 Dec 2022 21:56:58 GMT
Last-Modified: Thu, 01 Dec 2022 21:13:09 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
tr.outbrain.com/cachedClickId?marketerId=00569da938e06cb48f6f60ece5ae3d324c
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00569da938e06cb48f6f60ece5ae3d324c
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=00569da938e06cb48f6f60ece5ae3d324c HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 04:45:06 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: a4baf5804b6ca227df32b55136a421f4
content-encoding: gzip
tr.outbrain.com/unifiedPixel?marketerId=00569da938e06cb48f6f60ece5ae3d324c&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&optOut=false&bust=02779691172412856&referrer=
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00569da938e06cb48f6f60ece5ae3d324c&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&optOut=false&bust=02779691172412856&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=00569da938e06cb48f6f60ece5ae3d324c&apiObjVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&optOut=false&bust=02779691172412856&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 04:45:06 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: 681a9c206715ea2f757bd17a560a6320
content-encoding: gzip
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y4mC0QAAAOI5YAN-
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y4mC0QAAAOI5YAN-
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y4mC0QAAAOI5YAN- HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v045-0ed41892e.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: Ti1vaLF1RYU=
Content-Length: 59
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 59ccaf5f1bf1101f3d43ae777be4f6a9
2740c2403e005eac512a829e64de6a03a65fcbb6
1c6da1c071531cd11b32e943b42798202de1a80882e067773ed4d6147094587f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/1069852215/?random=1669956303684&cv=11&fst=1669953600000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&tiba=Privacy%20Policy%20%7C%20Save%20the%20Children&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=272479929&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1069852215/?random=1669956303684&cv=11&fst=1669953600000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&tiba=Privacy%20Policy%20%7C%20Save%20the%20Children&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=272479929&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1069852215/?random=1669956303684&cv=11&fst=1669953600000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&tiba=Privacy%20Policy%20%7C%20Save%20the%20Children&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=272479929&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 04:45:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/4092132/domain/savethechildren.org/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/4092132/domain/savethechildren.org/token
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /partner/4092132/domain/savethechildren.org/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.savethechildren.org/
Origin: https://www.savethechildren.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Fri, 02 Dec 2022 02:42:30 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MMFpTyebu0Xd0LeENMKyQPKEikAwkIPKFmDXV6u8ilyQevQIxRyhjw==
age: 7356
X-Firefox-Spdy: h2
s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2&dcc=t
200 OK 43 B URL HTTP/1.1 s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2&dcc=t
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6851dbf491ae442da3314f19e8aff085
ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
GET /iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2&dcc=t HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Fri, 02 Dec 2022 04:45:06 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
x-amz-rid: 128APRG4VWY54TX1DV41
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 59ccaf5f1bf1101f3d43ae777be4f6a9
2740c2403e005eac512a829e64de6a03a65fcbb6
1c6da1c071531cd11b32e943b42798202de1a80882e067773ed4d6147094587f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:45:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
px.ads.linkedin.com/collect?v=2&fmt=js&pid=4092132&time=1669956304911&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=4092132&time=1669956304911&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=4092132&time=1669956304911&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4092132%26time%3D1669956304911%26url%3Dhttps%253A%252F%252Fwww.savethechildren.org%252Fus%252Fabout-us%252Fprivacy-policy%253Fcid%253DEmail%253ASFMC%253AGT_Missed%253AAAI_Team_Tomorrow_b%253A120122%2526smtrctid%253D36183272%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQI4Bz_J0iGTowAAAYTRJwg2D6TKUjB5i9bsXFv2J3ptXEDRyoEF1QuYkJvUdDq_DtjSIGfm14l6zA; Max-Age=2592000; Expires=Sun, 01 Jan 2023 04:45:07 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQKnZnTW_2y8-AAAAYTRJwg2AHsOj86N81lr5oUQXzr8Knn1oEq5j_vjmg6fnzBD-yLPI6lXrK_sefxOFyJO1A; Max-Age=2592000; Expires=Sun, 01 Jan 2023 04:45:07 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&01b2803d-fe69-4837-87de-d56ecfa23fbe"; domain=.linkedin.com; Path=/; Secure; Expires=Sat, 02-Dec-2023 04:45:06 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2383:u=1:x=1:i=1669956307:t=1670042707:v=2:sig=AQFXI7ETUY21tNtwLlRusHrjSohFisza"; Expires=Sat, 03 Dec 2022 04:45:07 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXu0QB37oOqJnAmrH0i9g==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 376BABE3E7A040B28406CF23D97AF099 Ref B: OSL30EDGE0509 Ref C: 2022-12-02T04:45:06Z
date: Fri, 02 Dec 2022 04:45:07 GMT
content-length: 0
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/4092132/domain/savethechildren.org/token
200 OK 62 B URL HTTP/2 cdn.linkedin.oribi.io/partner/4092132/domain/savethechildren.org/token
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d39abb34da93ec5faa48669ac4788977
cc2627a86b99e91540251b6fb7e17a9b1faa1ee7
b329d16bd7e06de93beac4a9e4d67b8be6d1c944b7b8e398b929460f73b7c4ce
GET /partner/4092132/domain/savethechildren.org/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Fri, 02 Dec 2022 04:06:45 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: va_64pJZDwZgGc3WBmNrKGmkEWgkT5eQJ_Gi4NKks0YOH2tCysnZ9Q==
age: 2301
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4092132%26time%3D1669956304911%26url%3Dhttps%253A%252F%252Fwww.savethechildren.org%252Fus%252Fabout-us%252Fprivacy-policy%253Fcid%253DEmail%253ASFMC%253AGT_Missed%253AAAI_Team_Tomorrow_b%253A120122%2526smtrctid%253D36183272%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4092132%26time%3D1669956304911%26url%3Dhttps%253A%252F%252Fwww.savethechildren.org%252Fus%252Fabout-us%252Fprivacy-policy%253Fcid%253DEmail%253ASFMC%253AGT_Missed%253AAAI_Team_Tomorrow_b%253A120122%2526smtrctid%253D36183272%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4092132%26time%3D1669956304911%26url%3Dhttps%253A%252F%252Fwww.savethechildren.org%252Fus%252Fabout-us%252Fprivacy-policy%253Fcid%253DEmail%253ASFMC%253AGT_Missed%253AAAI_Team_Tomorrow_b%253A120122%2526smtrctid%253D36183272%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=4092132&time=1669956304911&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&13f42e00-1b77-42dc-8b7b-f07bca7083eb"; Domain=.linkedin.com; Expires=Sat, 02-Dec-2023 04:45:07 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20221202044507a99f839f-b435-444a-8dd1-68dbdc4ef3a2AQHisbmK3JX5bvvla0wMW_FbXf4lVu91"; Domain=.www.linkedin.com; Expires=Sat, 02-Dec-2023 04:45:07 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2Njk5NTYzMDc7MjswMjFNzD+/+mmdn+H45R4IIElxokD+0f7sXgCD+9YXkTxHug==; Domain=.linkedin.com; Expires=Wed, 31 May 2023 04:45:07 GMT; Path=/; Secure; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2427:u=1:x=1:i=1669956307:t=1670042707:v=2:sig=AQHuYSAB6KidmGuLgmvCNROBjhfwD2bb"; Expires=Sat, 03 Dec 2022 04:45:07 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/status linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' teams.microsoft.com client.learningapp.microsoft.com onyx.www.linkedin.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXu0QB9Zvn8mXPa8hGWIA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 7340B078B772419B8FAA1843020C4070 Ref B: OSL30EDGE0509 Ref C: 2022-12-02T04:45:07Z
date: Fri, 02 Dec 2022 04:45:07 GMT
content-length: 0
X-Firefox-Spdy: h2
app.leadsrx.com/visitor.php?acctTag=yqahgl42094&tz=0&ref=&u=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&t=Privacy%20Policy%20%7C%20Save%20the%20Children&lc=null&anon=0&vin=null
200 OK 105 B URL HTTP/2 app.leadsrx.com/visitor.php?acctTag=yqahgl42094&tz=0&ref=&u=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&t=Privacy%20Policy%20%7C%20Save%20the%20Children&lc=null&anon=0&vin=null
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 315536e7ddd22b5bec27a1002bd68859
273000a10fbcba551de4b9d60bcea323cfb9d4e6
8660e5ca24dd9656a023c191ad7e12261f8b955f2797eb1a9ff6da780a021a82
GET /visitor.php?acctTag=yqahgl42094&tz=0&ref=&u=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&t=Privacy%20Policy%20%7C%20Save%20the%20Children&lc=null&anon=0&vin=null HTTP/1.1
Host: app.leadsrx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:07 GMT
content-type: text/html; charset=utf-8
content-length: 105
server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
x-powered-by: PHP/5.6.40
access-control-allow-origin: https://www.savethechildren.org
access-control-allow-credentials: true
set-cookie: _lab=730893475; expires=Sat, 02-Dec-2023 04:45:06 GMT; Max-Age=31535999; path=/; samesite=none; domain=.leadsrx.com; secure
_lab_lastTouch=direct; expires=Sat, 02-Dec-2023 04:45:06 GMT; Max-Age=31535999; path=/; samesite=none; domain=.leadsrx.com; secure
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=4092132&time=1669956304911&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=4092132&time=1669956304911&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=4092132&time=1669956304911&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&19e8113c-cd07-46c8-8933-f91ff715c9e9"; domain=.linkedin.com; Path=/; Secure; Expires=Sat, 02-Dec-2023 04:45:07 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2383:u=1:x=1:i=1669956307:t=1670042707:v=2:sig=AQFXI7ETUY21tNtwLlRusHrjSohFisza"; Expires=Sat, 03 Dec 2022 04:45:07 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXu0QCDi1J8q5CrSKLpgA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: AD1E55A48EDB4D39BDE0AD1F71812EAF Ref B: OSL30EDGE0509 Ref C: 2022-12-02T04:45:07Z
date: Fri, 02 Dec 2022 04:45:07 GMT
content-length: 0
X-Firefox-Spdy: h2
tags.wdsvc.net/post-log?v=4.10&t=1669956305481
200 OK 0 B URL HTTP/1.1 tags.wdsvc.net/post-log?v=4.10&t=1669956305481
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /post-log?v=4.10&t=1669956305481 HTTP/1.1
Host: tags.wdsvc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 748
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: _wdTest=accept; wds_random=2022-12-02T04:45:05.379Z~2022-12-02T04:45:05.379Z|2995182159131095|40|
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: https://www.savethechildren.org
Access-Control-Allow-Credentials: true
Content-Type: text/html
Content-length: 0
Set-Cookie: wds_random=2022-12-02T04:45:05.379Z~2022-12-02T04:45:05.379Z|2995182159131095|40|; expires=Mon, 01 Dec 2025 04:45:07 GMT; domain=.wdsvc.net;path=/; SameSite=none; secure; HttpOnly
Date: Fri, 02 Dec 2022 04:45:07 GMT
Connection: keep-alive
Keep-Alive: timeout=5
gs.mountain.com/gs
200 OK 144 B IP
File type ASCII text, with no line terminators
Hash 4ad71da24451a800465f30316b7e2fa8
1f649917df2cd57bb34d998f886df32490efdc75
5ce6e1900c2bf0172a7776bed3cd6dfc441905fcf08a24964bf635c6657bfa5a
GET /gs HTTP/1.1
Host: gs.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: guid=18511e2f-71fc-11ed-b47f-aba8202baf1c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:45:07 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
insight.adsrvr.org/track/evnt/?adv=0ugbyxx&ct=0:8hrabaq&fmt=3&td1=184d1270249-tags6-aa41a30a1f1d7
200 OK 70 B URL HTTP/2 insight.adsrvr.org/track/evnt/?adv=0ugbyxx&ct=0:8hrabaq&fmt=3&td1=184d1270249-tags6-aa41a30a1f1d7
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/evnt/?adv=0ugbyxx&ct=0:8hrabaq&fmt=3&td1=184d1270249-tags6-aa41a30a1f1d7 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:07 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=18511e2f-71fc-11ed-b47f-aba8202baf1c&gdpr=&gdpr_consent=
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=18511e2f-71fc-11ed-b47f-aba8202baf1c&gdpr=&gdpr_consent=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=18511e2f-71fc-11ed-b47f-aba8202baf1c&gdpr=&gdpr_consent= HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:08 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/conv/?adv=0ugbyxx&ct=0:v28zupp&fmt=3&orderid=&vf=&v=&td1=184d1270249-tags6-aa41a30a1f1d7
200 OK 183 B URL HTTP/2 insight.adsrvr.org/track/conv/?adv=0ugbyxx&ct=0:v28zupp&fmt=3&orderid=&vf=&v=&td1=184d1270249-tags6-aa41a30a1f1d7
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 118702701164d24175698f7f29a900ca
c398567eb82a8d3bb2fff7f8b94465c9cb5a0150
3a9f6ea0c221902035576ff89f6e0be8853b6f5a677aa2d8da13d771265daeaf
GET /track/conv/?adv=0ugbyxx&ct=0:v28zupp&fmt=3&orderid=&vf=&v=&td1=184d1270249-tags6-aa41a30a1f1d7 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:07 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 25c68d8b1fae82820f93efca500fd848
45cf5e1a54ee491497ffe08a8e39fe97ba3c8a48
f0ec6b6f6ba0a931c9b71f5bc7ad1e5b89c8e4d8b7441f35eeebfba418d0e588
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6882
x-amzn-requestid: 6b5f15a5-c15b-46bf-9fd5-5d013d37a0eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGfrG3WIAMFc9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891dfd-6038ca700dfb4489230c2683;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2O6x-8-ESFDtlhcjVyGxEXCZcLbbfhsCVQeX02lbNMupPWmM-fKuLA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:47:56 GMT
age: 25034
etag: "45cf5e1a54ee491497ffe08a8e39fe97ba3c8a48"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=a6t02yu&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&upid=xvch1ck&upv=1.1.0
200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=a6t02yu&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&upid=xvch1ck&upv=1.1.0
IP
GET /track/up?adv=a6t02yu&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&upid=xvch1ck&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:06 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-vendor.bc53619a30a8a7c6837e22da221815bf.js
200 OK 0 B URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-vendor.bc53619a30a8a7c6837e22da221815bf.js
IP
GET /etc/clientlibs/us/clientlib-vendor.bc53619a30a8a7c6837e22da221815bf.js HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/about-us/privacy-policy?cid=Email:SFMC:GT_Missed:AAI_Team_Tomorrow_b:120122&smtrctid=36183272
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Fri, 02 Dec 2022 04:45:02 GMT
etag: "4dcfb-5edae7c1e3480-gzip"
expires: Sat, 03 Dec 2022 04:45:02 GMT
last-modified: Thu, 17 Nov 2022 18:09:06 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sDEb0YcA0muYfNPpRYz3JQV-lw5G6DMvhNAvSQserwBft5_juMkzWQ==
X-Firefox-Spdy: h2
nexus.ensighten.com/choozle/10170/code/0954ce0040a8fc5aeab3289dc26bb80c.js?conditionId0=421905
200 OK 0 B URL HTTP/2 nexus.ensighten.com/choozle/10170/code/0954ce0040a8fc5aeab3289dc26bb80c.js?conditionId0=421905
IP
GET /choozle/10170/code/0954ce0040a8fc5aeab3289dc26bb80c.js?conditionId0=421905 HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 22 Jul 2022 07:38:38 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 13 Jun 2022 14:49:13 GMT
etag: W/"c4e2839424f981629cf0fe2178ff9ef7"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: jmpzjXQT9NQsQ8wKHWAp4CLwVbc46grs
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WfapFyG9BXHVHfpdNlxSQX3_6KPcumdPwO_N92nX8wn12Tt2YABDUw==
age: 11480787
X-Firefox-Spdy: h2
px.mountain.com/st?ga_tracking_id=UA-85748307-2&ga_client_id=1780624319.1669956305&shpt=Privacy%20Policy%20%7C%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-85748307-2%22%2C%22ga_client_id%22%3A%221780624319.1669956305%22%2C%22shpt%22%3A%22Privacy%20Policy%20%7C%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%221780624319.1669956305%22%2C%22dcm_gid%22%3A%22344874544.1669956305%22%2C%22mntnis%22%3A%22FZoIgLrTmwuMvaTlrR1GYAtpWvYGi3ae%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=1780624319.1669956305&dcm_gid=344874544.1669956305&dxver=4.0.0&shaid=32293&plh=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&term=value&shadditional=googletagmanager%3Dtrue&cb=1669956307202143&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1669956307888
200 OK 0 B URL HTTP/1.1 px.mountain.com/st?ga_tracking_id=UA-85748307-2&ga_client_id=1780624319.1669956305&shpt=Privacy%20Policy%20%7C%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-85748307-2%22%2C%22ga_client_id%22%3A%221780624319.1669956305%22%2C%22shpt%22%3A%22Privacy%20Policy%20%7C%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%221780624319.1669956305%22%2C%22dcm_gid%22%3A%22344874544.1669956305%22%2C%22mntnis%22%3A%22FZoIgLrTmwuMvaTlrR1GYAtpWvYGi3ae%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=1780624319.1669956305&dcm_gid=344874544.1669956305&dxver=4.0.0&shaid=32293&plh=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&term=value&shadditional=googletagmanager%3Dtrue&cb=1669956307202143&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1669956307888
IP
GET /st?ga_tracking_id=UA-85748307-2&ga_client_id=1780624319.1669956305&shpt=Privacy%20Policy%20%7C%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-85748307-2%22%2C%22ga_client_id%22%3A%221780624319.1669956305%22%2C%22shpt%22%3A%22Privacy%20Policy%20%7C%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%221780624319.1669956305%22%2C%22dcm_gid%22%3A%22344874544.1669956305%22%2C%22mntnis%22%3A%22FZoIgLrTmwuMvaTlrR1GYAtpWvYGi3ae%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=1780624319.1669956305&dcm_gid=344874544.1669956305&dxver=4.0.0&shaid=32293&plh=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&term=value&shadditional=googletagmanager%3Dtrue&cb=1669956307202143&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1669956307888 HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: guid=18511e2f-71fc-11ed-b47f-aba8202baf1c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:45:08 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: tt=H4sIAAAAAAAAAKtWKlOyMtJRMjYysjSON7IwtlCyMjQzs7Q0NTM2sDC1NNNR8guKh8qaWxorWRkgi4DVG9QCACDQek9GAAAA;Domain=px.mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
rt="MzIyOTM6MTY2OTk1NjMwOA==";Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
guid=18511e2f-71fc-11ed-b47f-aba8202baf1c;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
connection: close
onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184d127-026c-4066-8bfa-bfb993b43ead&sessionId=0184d127-026c-45b9-84b9-76d73f056ad1&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&callback=_smtr.postprocess&r=426345551&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272
200 OK 0 B URL HTTP/2 onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184d127-026c-4066-8bfa-bfb993b43ead&sessionId=0184d127-026c-45b9-84b9-76d73f056ad1&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&callback=_smtr.postprocess&r=426345551&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272
IP
GET /api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184d127-026c-4066-8bfa-bfb993b43ead&sessionId=0184d127-026c-45b9-84b9-76d73f056ad1&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&callback=_smtr.postprocess&r=426345551&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272 HTTP/1.1
Host: onsiteshq.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:06 GMT
content-type: text/plain; charset=utf-8
server: Kestrel
x-request-id: 0HMMBQCC6QDUE:00000515
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/api.min.js
200 OK 0 B URL HTTP/2 a.opmnstr.com/app/js/api.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/api.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:03 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"6378026b-13ef5"
last-modified: Fri, 18 Nov 2022 22:08:43 GMT
cdn-storageserver: DE-198
cdn-requestpullsuccess: True
cdn-fileserver: 492
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/25/2022 21:21:37
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: fd7144c4cf454f136d27887e69ce8df4
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
a.omappapi.com/app/js/api.min.css
200 OK 0 B URL HTTP/2 a.omappapi.com/app/js/api.min.css
IP
ASN #34989 ServeTheWorld AS
GET /app/js/api.min.css HTTP/1.1
Host: a.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:03 GMT
content-type: text/css
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"6378026e-464c"
last-modified: Fri, 18 Nov 2022 22:08:46 GMT
cdn-storageserver: DE-164
cdn-requestpullsuccess: True
cdn-fileserver: 296
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:26
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: e986c0b3b85114b7642bace9ab601d94
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
dx.mountain.com/spx?dxver=4.0.0&shaid=32293&tdr=&plh=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&cb=1254636938036535&term=value
200 0 B URL HTTP/1.1 dx.mountain.com/spx?dxver=4.0.0&shaid=32293&tdr=&plh=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&cb=1254636938036535&term=value
IP
GET /spx?dxver=4.0.0&shaid=32293&tdr=&plh=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fabout-us%2Fprivacy-policy%3Fcid%3DEmail%3ASFMC%3AGT_Missed%3AAAI_Team_Tomorrow_b%3A120122%26smtrctid%3D36183272&cb=1254636938036535&term=value HTTP/1.1
Host: dx.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Fri, 02 Dec 2022 04:45:04 GMT
connection: close
a.opmnstr.com/app/js/22.7f83f3f7.min.js
200 OK 0 B URL HTTP/2 a.opmnstr.com/app/js/22.7f83f3f7.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/22.7f83f3f7.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-613"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-197
cdn-requestpullsuccess: True
cdn-fileserver: 506
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/29/2022 21:15:50
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 5354e887135d3a5e10e1f3a73bb05dd8
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
insight.adsrvr.org/track/pxl/?adv=f35s4e0&ct=0:qa0mevt&fmt=3
200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/pxl/?adv=f35s4e0&ct=0:qa0mevt&fmt=3
IP
GET /track/pxl/?adv=f35s4e0&ct=0:qa0mevt&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d1eoo1tco6rr5e.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:05 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css
200 OK 0 B URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css
IP
GET /etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/about-us/privacy-policy?cid=Email:SFMC:GT_Missed:AAI_Team_Tomorrow_b:120122&smtrctid=36183272
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
accept-ranges: bytes
cache-control: max-age=14400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Fri, 02 Dec 2022 04:45:02 GMT
etag: "7c50e-5edae7efaa080-gzip"
expires: Fri, 02 Dec 2022 08:45:02 GMT
last-modified: Thu, 17 Nov 2022 18:09:54 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BJjAhS5Kh1scWxpKDefmggngq7paVTKTWGzbVp7s9n95B1ZRJ4zj6A==
X-Firefox-Spdy: h2
www.dgtrx.com/scripts/sdk/everflow.js
200 OK 0 B URL HTTP/2 www.dgtrx.com/scripts/sdk/everflow.js
IP
GET /scripts/sdk/everflow.js HTTP/1.1
Host: www.dgtrx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 04:45:05 GMT
content-type: text/javascript
cache-control: max-age=14400
vary: Origin
x-eflow-request-id: a4e74f24-a40a-4482-a90d-aaf7860ab631
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/16.53ab7a19.min.js
200 OK 0 B URL HTTP/2 a.opmnstr.com/app/js/16.53ab7a19.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/16.53ab7a19.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-354"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-169
cdn-requestpullsuccess: True
cdn-fileserver: 492
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/25/2022 21:21:34
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: beaf58d90b425a342e73a7ea05eb8008
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
insight.adsrvr.org/track/conv/?adv=0ugbyxx&ct=0:rlc0tuy&fmt=3&orderid=&vf=&v=&td1=184d1270249-tags6-aa41a30a1f1d7
200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/conv/?adv=0ugbyxx&ct=0:rlc0tuy&fmt=3&orderid=&vf=&v=&td1=184d1270249-tags6-aa41a30a1f1d7
IP
GET /track/conv/?adv=0ugbyxx&ct=0:rlc0tuy&fmt=3&orderid=&vf=&v=&td1=184d1270249-tags6-aa41a30a1f1d7 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:07 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
cdn.decibelinsight.net/i/13874/253647/di.js
200 OK 0 B URL HTTP/2 cdn.decibelinsight.net/i/13874/253647/di.js
IP
GET /i/13874/253647/di.js HTTP/1.1
Host: cdn.decibelinsight.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
server: nginx
date: Fri, 02 Dec 2022 04:45:03 GMT
cache-control: private, max-age=5400
etag: W/000094979-184BF8AC850
timing-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
content-encoding: gzip
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xoqFleZvrwsRQYqIUZJkrjjC_tiL8Vp6RQIJQ3tD0RB9EJoQUS5kjA==
X-Firefox-Spdy: h2
www.youtube.com/iframe_api
200 OK 0 B URL HTTP/2 www.youtube.com/iframe_api
IP
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Fri, 02 Dec 2022 04:45:05 GMT
date: Fri, 02 Dec 2022 04:45:05 GMT
cache-control: private, max-age=0
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=ryn6YNCY7WA; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=bJZKz7HxfHM; Domain=.youtube.com; Expires=Wed, 31-May-2023 04:45:05 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+710; expires=Sun, 01-Dec-2024 04:45:05 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/5.cadaa863.min.js
200 OK 0 B URL HTTP/2 a.opmnstr.com/app/js/5.cadaa863.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/5.cadaa863.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 04:45:04 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"6373fca9-2509"
last-modified: Tue, 15 Nov 2022 20:55:05 GMT
cdn-storageserver: DE-197
cdn-requestpullsuccess: True
cdn-fileserver: 489
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: c64857a0f92e0cfb1061c2690f153ce9
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
143.204.55.49
3.122.3.198
54.77.60.152
23.36.77.32
104.18.32.68
104.84.152.233
13.36.218.177
93.184.220.29