r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2d2e7649ce9e9ba6fc8b68aa89352e3c
0153d1d3d830a457043e16bb40d48a0b9ddef4b8
8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10922
Expires: Tue, 29 Nov 2022 04:35:00 GMT
Date: Tue, 29 Nov 2022 01:32:58 GMT
Connection: keep-alive
www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
301 Moved Permanently 360 B URL HTTP/1.1 www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash cd1261ec845ca5ca11ac074c43d3a3c5
f838ffbf866de18c6acc470cf508d057d058f505
f144d2466706576b6e06209ccfe3cfdeccc71ccad8b7b77dcfe21daa78239fc3
GET /us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253 HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
Content-Length: 360
Connection: keep-alive
Cache-Control: max-age=300, no-cache="set-cookie"
Date: Tue, 29 Nov 2022 01:32:58 GMT
Expires: Tue, 29 Nov 2022 01:37:58 GMT
Location: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Server: Apache
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jI0p2ZnSAwosMUdIfNR4qDmYGSYyyHSQW_5a1OEAIXJDg-VHLPA_Ew==
ocsp.digicert.com/
200 OK 471 B IP
Hash 9408cc0694fcbea57966c3a3ba906092
fddcee1fdcf3209298e41a4b1b5560357fa165f0
6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1306
Cache-Control: max-age=120009
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:32:58 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 10:53:07 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13212
Expires: Tue, 29 Nov 2022 05:13:10 GMT
Date: Tue, 29 Nov 2022 01:32:58 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 01:19:34 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 804
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: DzoroHa9kbDXyB7EpF7jFREHTLtAsvZCbpE8BwyTQUpS7SyA2EiFkTj4yu2fyt+aDWgUmovVQdI=
x-amz-request-id: SEBMYFWCDJ4G5SJM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 00:42:18 GMT
age: 3040
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 01:32:58 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.7 kB IP
Hash c510879d181412dbaaf829c42a115869
6114e7222276ae8030b02a292df5445e58cc9e7d
94666c6e6223cce237dab51a9602b03192c177107c9bfb3a96766f245c82a437
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 68
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 29 Nov 2022 01:32:58 GMT
Content-Type: application/ocsp-response
Content-Length: 1731
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 28 Nov 2022 19:14:01 GMT
Expires: Tue, 29 Nov 2022 19:14:01 GMT
ETag: "6114e7222276ae8030b02a292df5445e58cc9e7d"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 01:11:12 GMT
cache-control: public,max-age=3600
age: 1307
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2800
Cache-Control: max-age=116436
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:32:59 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 09:53:35 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
200 OK 15 kB URL HTTP/2 www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1168), with CRLF, LF line terminators
Hash e26dc1354023a910093c712b3f54cc39
e9713e16278daad70e9472838a97e9b9712bca4e
b303bc6d84989e821d61514b4dae6a275b7820ac5aea87ccdd617f98027067c1
GET /us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253 HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html;charset=utf-8
content-length: 14622
cache-control: max-age=300, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:32:58 GMT
expires: Tue, 29 Nov 2022 01:37:58 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN, SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JaET8O9XlITlc_M0BXLUkOYZ0xkFzjeljVajCoSYbNFvDf7awM5vBQ==
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0oFBcON02sVGH4+HrxtOag==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Uj0SWshIgBfe+8IW8HEwKdrFBmo=
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/launch-d47d2de11878.min.js
200 OK 100 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/launch-d47d2de11878.min.js
IP
File type ASCII text, with very long lines (32748)
Size 100 kB (100361 bytes)
Hash a83e6af84dbc51780b133d790f532172
088da0b9b62d476df50a3090e0c968b58cfd9371
240483c9f76d4c02f6a424944ea2c454bf474363ddc0d6ffecac1a688c09b45e
GET /a9de570d9caa/b01a1f4bb0c4/launch-d47d2de11878.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "b67d8d43287ac7eda41e18494f183d61:1668713788.777838"
last-modified: Thu, 17 Nov 2022 19:36:28 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 100361
cache-control: max-age=3600
expires: Tue, 29 Nov 2022 02:32:59 GMT
date: Tue, 29 Nov 2022 01:32:59 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
consent.cookiebot.com/uc.js
200 OK 32 kB URL HTTP/2 consent.cookiebot.com/uc.js
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65499)
Hash c8f7ad4768a16672f57131490149c3d0
c943c68aaa059f06744868bb239f06d900d41464
b5a1e40fab60b20e8b25517f6a7e6d27f21af0788959cdf3d52f5b94164cba0c
GET /uc.js HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 22 Nov 2022 07:34:39 GMT
accept-ranges: bytes
etag: "db2e3fe144fed81:0"
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 31718
cache-control: public, max-age=961
expires: Tue, 29 Nov 2022 01:49:00 GMT
date: Tue, 29 Nov 2022 01:32:59 GMT
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-vendor.98417dd671c9971fd8f4053e024f7acf.css
200 OK 1.3 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-vendor.98417dd671c9971fd8f4053e024f7acf.css
IP
File type ASCII text, with very long lines (4065), with no line terminators
Hash 120fb59e9fd09c13ef8cbc4179f5d30f
e44c183a6bbe6789606f18a41be4b975486f0c34
17b7f5e7ebce4a96aba6457597aaaadbfe9e1e33d06931abe5b12cc843a46297
GET /etc/clientlibs/us/clientlib-vendor.98417dd671c9971fd8f4053e024f7acf.css HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 1297
accept-ranges: bytes
cache-control: max-age=14400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:32:59 GMT
etag: "fe1-5edae7eae5540-gzip"
expires: Tue, 29 Nov 2022 05:32:59 GMT
last-modified: Thu, 17 Nov 2022 18:09:49 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tLpDGFF8G6hO6KyP7WVM9HhPDcQXVNePXTV7zdWcmkOU874MvuPcBA==
X-Firefox-Spdy: h2
consent.cookiebot.com/5375074e-402c-46c7-bb0c-98aa16042230/cc.js?renew=false&referer=www.savethechildren.org&dnt=false&init=false
200 OK 156 B URL HTTP/2 consent.cookiebot.com/5375074e-402c-46c7-bb0c-98aa16042230/cc.js?renew=false&referer=www.savethechildren.org&dnt=false&init=false
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF line terminators
Hash 3477de123b1bcca0a96d557218c3c72c
279660604c7c2e9d5be154df57180849efca1e34
9331664c1938651f09a14fb45d0af5fd86a72c2d9aff0bc26193e239ddb38268
GET /5375074e-402c-46c7-bb0c-98aa16042230/cc.js?renew=false&referer=www.savethechildren.org&dnt=false&init=false HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=1
content-type: application/x-javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 156
date: Tue, 29 Nov 2022 01:32:59 GMT
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-site.73c3af2a4179a84f605fe8c064d8c204.js
200 OK 40 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site.73c3af2a4179a84f605fe8c064d8c204.js
IP
File type ASCII text, with very long lines (846)
Hash c8e27a0de39bb90ea12c462d98e69745
51a17da6e3beb528a1dda12dac90d18969a9ada8
4d300145dd532d802430b0eb440b206c0172beae3c38a40fd8f10a743626ad60
GET /etc/clientlibs/us/clientlib-site.73c3af2a4179a84f605fe8c064d8c204.js HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 39575
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:32:59 GMT
etag: "22fd1-5edae7e714c40-gzip"
expires: Wed, 30 Nov 2022 01:32:59 GMT
last-modified: Thu, 17 Nov 2022 18:09:45 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RrVFDBSkkdcGI89ln_2jEsEbghiE0Zh4INEsGRciQBXerhL94rkrQA==
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/stc-logo.svg
200 OK 4.8 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/stc-logo.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (1449), with CRLF line terminators
Hash 32d1a7a7ee564190d0a650c21e58ccdc
a17f56b30a8f119bb2978e36d395d14d4f2cc376
932257c36331108b640702da4459550e1990dac56630762d4f5a15950305d08d
GET /etc/clientlibs/us/clientlib-site/images/icons/stc-logo.svg HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 4812
accept-ranges: bytes
cache-control: max-age=604800, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:32:59 GMT
etag: "3130-5edae83730940-gzip"
expires: Tue, 06 Dec 2022 01:32:59 GMT
last-modified: Thu, 17 Nov 2022 18:11:09 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UpTgEpzdaD18dHZb9n4jgWBtyEVkdx0QHrVhSoOIW_zsCythuXOgTw==
X-Firefox-Spdy: h2
www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/livehero4.jpg/_jcr_content/renditions/cq5dam.webp_thumbnail.1536.1536.webp
200 OK 34 kB URL HTTP/2 www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/livehero4.jpg/_jcr_content/renditions/cq5dam.webp_thumbnail.1536.1536.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x695, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d1ab6a646272c004e2e66f4037dd6cfd
206fb128aaa9f33b495b22d21edeefbf98c90cd3
6b911a8266bfc28eff6217b02ea6da76a0217673702b28cfa16fea6e9d779c32
GET /content/dam/usa/images/lps/2022/ilro/livehero4.jpg/_jcr_content/renditions/cq5dam.webp_thumbnail.1536.1536.webp HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 33818
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:32:59 GMT
etag: "83fe-5ee914e35c271-gzip"
expires: Wed, 30 Nov 2022 01:32:59 GMT
last-modified: Tue, 29 Nov 2022 00:45:33 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MJZ1uZPCAZrvjIihAdonFiSBbyQCTMkulxGW4IcoyELaHCTowjzwUA==
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-datalayer.8e49d1c8076e9bab47ae8f043e187874.js
200 OK 20 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-datalayer.8e49d1c8076e9bab47ae8f043e187874.js
IP
File type ASCII text, with very long lines (58683), with CRLF line terminators
Hash 81fe2957d3bb87ec1565d171085ac5c5
60386d42678aad57dca839a7fa290666c282b086
2708c5f31b512aa866bb0c3de14b1b71437930626aeddc8a360ffd519b035441
GET /etc/clientlibs/us/clientlib-datalayer.8e49d1c8076e9bab47ae8f043e187874.js HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 20377
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:33:00 GMT
etag: "e982-5edae7f286740-gzip"
expires: Wed, 30 Nov 2022 01:33:00 GMT
last-modified: Thu, 17 Nov 2022 18:09:57 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XoUK52JR8OjGNAW_ShJyRZJgCxSNiFiV_jUzEI7sdkrc6Z7W51z9pQ==
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/house.svg
200 OK 1.4 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/house.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash c959ef8cd0de375c95ff79a04bca2c87
2b83acbcf4bd4ef4efef614b3f4f50bf1ecf7f0c
953994f08c89a4cefbbd61cf82b3b2bed4e9e80745622fe89e184831c7a67ba3
GET /etc/clientlibs/us/clientlib-site/images/icons/house.svg HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1423
accept-ranges: bytes
cache-control: max-age=604800, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:33:00 GMT
etag: "cd2-5edae822357c0-gzip"
expires: Tue, 06 Dec 2022 01:33:00 GMT
last-modified: Thu, 17 Nov 2022 18:10:47 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tkVQ97S7oyh5UtEyMiWkBlwcI8gPgHMc7ywiwHojZWOrJESDfgocgg==
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
200 OK 12 kB URL HTTP/2 assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
IP
File type ASCII text, with very long lines (32768)
Hash e616df092766c7ab7904619f971a35cc
a960429c42802a43e3ce728fc4d1e8bdab10e606
082ae7647bfdb639846791e5c0ca39b96544dff3aed0c365973c9589cd5b091e
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "d860c16ac938f7d839f0ec158d02d0f0:1644856531.418573"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 12163
expires: Tue, 29 Nov 2022 02:33:00 GMT
date: Tue, 29 Nov 2022 01:33:00 GMT
cache-control: no-cache
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js
200 OK 1.6 kB URL HTTP/2 assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js
IP
File type ASCII text, with very long lines (3155)
Hash e672de61b277fc72de4299829bfbb31c
157a7409922d58a02dad3ba879d04eb2a3ef8f3d
e1a1c2a6f2ed4ffb63ebfda157eaf12c6ee3973be4da649eb63e0402c0d29215
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "2d1382c349d480b6b41574ac0c1af066:1644856531.739514"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1597
expires: Tue, 29 Nov 2022 02:33:00 GMT
date: Tue, 29 Nov 2022 01:33:00 GMT
cache-control: no-cache
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/sign-in.svg
200 OK 407 B URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/sign-in.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (716), with no line terminators
Hash c4032568735cdd1423db03eee92c4e26
7e2ef44dc3831c874f75f70203e785c7fa1a7f88
0a92b7c00e5f3d2799bbdaff381e48f75857fc43b528b147912edaf776e878ad
GET /etc/clientlibs/us/clientlib-site/images/icons/sign-in.svg HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669685579233%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 407
accept-ranges: bytes
cache-control: max-age=604800, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 22 Nov 2022 20:58:09 GMT
etag: "2cc-5edae868c7e40-gzip"
expires: Tue, 29 Nov 2022 20:58:09 GMT
last-modified: Thu, 17 Nov 2022 18:12:01 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: G3FAdvjEKGnpap8GplRsyJnD4kbiGDH2GNOoFQ9Xb-K52USuE1EbOw==
age: 534891
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-vendor.bc53619a30a8a7c6837e22da221815bf.js
200 OK 108 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-vendor.bc53619a30a8a7c6837e22da221815bf.js
IP
File type ASCII text, with very long lines (571)
Size 108 kB (108108 bytes)
Hash b5c921f664d6d156891d3982659aa450
c5c29a091e9ef6b611cd7d6196ef8c61108b82fa
832f9981af9fc76a08e42b628632928aefee55ef15730e9d2b7e08a6514ca82c
GET /etc/clientlibs/us/clientlib-vendor.bc53619a30a8a7c6837e22da221815bf.js HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:33:00 GMT
etag: "4dcfb-5edae82141580-gzip"
expires: Wed, 30 Nov 2022 01:33:00 GMT
last-modified: Thu, 17 Nov 2022 18:10:46 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2pBFGWBlfRYD4PGNdk6eluasSFOLsRocF-jTuVyTP8k1UecVPfFL_g==
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-site/fonts/lato-normal-bold-latin.woff2
200 OK 23 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/fonts/lato-normal-bold-latin.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22992, version 1.0\012- data
Hash 1efbd38aa76ddae2580fedf378276333
8a49976f2470ba2a1db6144245355d3b889312e4
8d3ca80fa271e94b0c36cf3053b0f806b7a42bb3395b424c99dc0bd218f0ac20
GET /etc/clientlibs/us/clientlib-site/fonts/lato-normal-bold-latin.woff2 HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.savethechildren.org/etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669685579233%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 22992
accept-ranges: bytes
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
last-modified: Thu, 17 Nov 2022 18:09:06 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
cache-control: max-age=86400, no-cache="set-cookie"
date: Mon, 28 Nov 2022 19:26:35 GMT
expires: Tue, 29 Nov 2022 19:26:35 GMT
etag: "59d0-5edae7c1e3480"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: okwE3r6AJKzdr99HvGdTm-i9f87SJYvv-CCUDzGgPfjqxFj5TGUl9A==
age: 21985
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-site/fonts/oswald-medium-latin.woff2
200 OK 16 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/fonts/oswald-medium-latin.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16456, version 1.0\012- data
Hash f721358d93a21f3fb93c95ffbb164e63
4d7fbde181f8e899093b07c2b7b310c8996bf329
e69face5454ec861e4f91a48b1581ed438181b1716135ca578a533b3ac370a36
GET /etc/clientlibs/us/clientlib-site/fonts/oswald-medium-latin.woff2 HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.savethechildren.org/etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669685579233%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 16456
accept-ranges: bytes
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
last-modified: Thu, 17 Nov 2022 18:12:01 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
cache-control: max-age=86400, no-cache="set-cookie"
date: Mon, 28 Nov 2022 19:26:36 GMT
expires: Tue, 29 Nov 2022 19:26:36 GMT
etag: "4048-5edae868c7e40"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: b4XPq3IeExNYAnNWhUsQeA4ZqV7d_N-70enOYTIzA_V4-7CJlNWxgg==
age: 21984
X-Firefox-Spdy: h2
cdn.decibelinsight.net/i/13874/253647/di.js
200 OK 102 kB URL HTTP/2 cdn.decibelinsight.net/i/13874/253647/di.js
IP
Size 102 kB (102126 bytes)
Hash edef2bc0a966163778b02a1af988bf7b
441bbf92cb218a1c1199e7e1bddd94b197491a28
b581bf617f14f14b6c6cfc710ec88f13766dcb775808bc31071b24011684271b
GET /i/13874/253647/di.js HTTP/1.1
Host: cdn.decibelinsight.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
server: nginx
date: Tue, 29 Nov 2022 01:33:00 GMT
cache-control: private, max-age=5400
etag: W/000075254-184A3FA87DE
timing-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
content-encoding: gzip
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F3t-RI9UQfSZvpcJfcOu3y4uttiz2k5VqHM53IMClr_nfN5icKLN_g==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 04a1e174fccea9e65be21b0c9746de94
a62527b64c568170053ef10f12f479c61848a6a8
b14de7ab62003f342cb84b98caa3bd291bf24d9cefdad1571edfd94aa0a483da
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4911
Cache-Control: max-age=107750
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:00 GMT
Etag: "63845003-1d7"
Expires: Wed, 30 Nov 2022 07:28:50 GMT
Last-Modified: Mon, 28 Nov 2022 06:06:59 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.savethechildren.org/etc/clientlibs/us/clientlib-site/fonts/lato-italic-latin.woff2
200 OK 24 kB URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/fonts/lato-italic-latin.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24440, version 1.0\012- data
Hash 117e995c97eab30fb92843616018d1f1
0cdf5ffdbc568f9f4d726f56bca92fe6b601da7a
ccb5febf8ac335a1b768a7a2087fa4362cb3a0a9392e2e451df9d9825e88e5db
GET /etc/clientlibs/us/clientlib-site/fonts/lato-italic-latin.woff2 HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.savethechildren.org/etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669685579233%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 24440
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Mon, 28 Nov 2022 19:26:34 GMT
etag: "5f78-5edae868c7e40"
expires: Tue, 29 Nov 2022 19:26:34 GMT
last-modified: Thu, 17 Nov 2022 18:12:01 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PaU94uKvtpM99ZJO4JHPgAKtTsjnNYi2Xr-AxZA32w6wcYyniTLCLQ==
age: 21986
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7207a5076b63fb5f39b9436ced9fb18f
cdd84ecfe85882601e81f11783d9f63b30084de3
6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1669685579653
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1669685579653
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1669685579653 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.savethechildren.org
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-0314701ba.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1669685579653
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=28995259866194448104583020432297860573; Max-Age=15552000; Expires=Sun, 28 May 2023 01:33:00 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: 0iytQHT6TvU=
Content-Length: 0
Connection: keep-alive
www.googletagmanager.com/gtm.js?id=GTM-5LXXS3R
200 OK 81 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-5LXXS3R
IP
File type ASCII text, with very long lines (16595)
Hash 5b74d6997bfb055f8a47240df43a59dc
d6889a3396a4b2a92f74bb660e935ed3396d0898
9c59a1dd2f5a0ec09748c494783a8dd2570bc8d5ed403121a2c59a6d58835778
GET /gtm.js?id=GTM-5LXXS3R HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 01:33:00 GMT
expires: Tue, 29 Nov 2022 01:33:00 GMT
cache-control: private, max-age=900
last-modified: Tue, 29 Nov 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81213
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC2bd87301eb114379b56ad60b1e4c5bc9-source.min.js
200 OK 381 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC2bd87301eb114379b56ad60b1e4c5bc9-source.min.js
IP
File type ASCII text, with very long lines (518)
Hash 701fcf2f73b9b911143cf43128a77d40
d94fec50a5bca1257b6c4193b48bf4cca8929c31
bd6b2b0ec582ff09c2afaab1eb73abbee1ec4cf67dff85b61cd65d936d96e30f
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC2bd87301eb114379b56ad60b1e4c5bc9-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 381
cache-control: max-age=3600
expires: Tue, 29 Nov 2022 02:33:00 GMT
date: Tue, 29 Nov 2022 01:33:00 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/connect.svg
200 OK 2.3 kB URL HTTP/2 www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/connect.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4585)
Hash 141b26ee2d25b797ebcdeb7f7214bd4e
33a40be492fd95eb7770f4e074841465f55bcee2
4e8b0cddf4a3236ff0c9af167c777c9303e28ea08d1645b65d2eae232daac7cb
GET /content/dam/usa/images/lps/2022/ilro/connect.svg HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669685579233%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 2282
accept-ranges: bytes
cache-control: max-age=604800, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:33:00 GMT
etag: "1372-5ee90ad956bf1-gzip"
expires: Tue, 06 Dec 2022 01:33:00 GMT
last-modified: Tue, 29 Nov 2022 00:00:38 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qnQqbagf5zyBnkxcd-3jiAVd62Sy-gpIVQCVxTHFQMS_84nWJxI14w==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7207a5076b63fb5f39b9436ced9fb18f
cdd84ecfe85882601e81f11783d9f63b30084de3
6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/house.svg
304 Not Modified 0 B URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/house.svg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /etc/clientlibs/us/clientlib-site/images/icons/house.svg HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/xml, text/xml, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669685579233%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true; stc-analytics-source=Email|Email|SFMC|BF_GT_Preview|Non_Donors_a|11/25/2022; stc-session-count=NaN
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Thu, 17 Nov 2022 18:10:47 GMT
If-None-Match: "cd2-5edae822357c0-gzip"
TE: trailers
HTTP/2 304 Not Modified
date: Tue, 29 Nov 2022 01:33:00 GMT
cache-control: max-age=604800, no-cache="set-cookie"
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
etag: "cd2-5edae822357c0-gzip"
expires: Tue, 06 Dec 2022 01:33:00 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZTeNjqi-2M_nB_WeI6-Jefdi6k7R-4nDy2sttiS0XRK5Hl1RIVYVlQ==
X-Firefox-Spdy: h2
www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/logoTeamTomorrow.svg
200 OK 45 kB URL HTTP/2 www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/logoTeamTomorrow.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (58747)
Hash ab7368897679752bf060123db173ce52
04f2c1b8878be9b1fd1fb974a5ffa5ca24ecc9e4
252eb90eed10653d7d54da955624d0d8754590b38bca082fd9982efba533a309
GET /content/dam/usa/images/lps/2022/ilro/logoTeamTomorrow.svg HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669685579233%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 45184
accept-ranges: bytes
cache-control: max-age=604800, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:33:00 GMT
etag: "e6fb-5ee90bd5ac365-gzip"
expires: Tue, 06 Dec 2022 01:33:00 GMT
last-modified: Tue, 29 Nov 2022 00:05:03 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dC0BvnleLpvvEB_mTkFBspsgmwxwTg19Xv_q8v1qyEmdVqcHqkT02Q==
X-Firefox-Spdy: h2
www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/sustainability2X.png/_jcr_content/renditions/cq5dam.webp_thumbnail.768.768.webp
200 OK 64 kB URL HTTP/2 www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/sustainability2X.png/_jcr_content/renditions/cq5dam.webp_thumbnail.768.768.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 949c9bec59a3b9f3ad35ab2fb4359b36
e0ce24748cf2d4ad1c71b131a3d3559ae97245d1
f925ab51c0732dfc13ecc64369a758e9a97ee175a3e37451127cdce4f6313ee4
GET /content/dam/usa/images/lps/2022/ilro/sustainability2X.png/_jcr_content/renditions/cq5dam.webp_thumbnail.768.768.webp HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669685579233%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 63762
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:33:00 GMT
etag: "f8f6-5ee90ca7cd015-gzip"
expires: Wed, 30 Nov 2022 01:33:00 GMT
last-modified: Tue, 29 Nov 2022 00:08:43 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LCSyJkA0VT0-REcghZ6hN9GJYnNFQnADZ5CC63rd-yJkboXYjTP-xA==
X-Firefox-Spdy: h2
dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1669685579653
200 OK 124 B URL HTTP/1.1 dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1669685579653
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1f6783349ac4177ec3b3845fd520dca6
d84e7a43a8c8ff6f1a568ad6cb4162767f5b32b7
64bc30aa6a9d9e5396bb67c6af32c31f5ca6610641f0bdea10d759281df6adca
GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1669685579653 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.savethechildren.org
Content-Type: application/x-www-form-urlencoded
Referer: https://www.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.savethechildren.org
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-2-v045-0cfa310b8.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-Error: 172
X-TID: o6t7XZRIS58=
Content-Length: 124
Connection: keep-alive
cdn.evgnet.com/beacon/savethechildren/production/scripts/evergage.min.js
200 OK 48 kB URL HTTP/2 cdn.evgnet.com/beacon/savethechildren/production/scripts/evergage.min.js
IP
File type ASCII text, with very long lines (594)
Hash c0c4fb146208f93d73f374d37af5dbb1
ce978016af87e86dc4933bf9b9ad642c80b9404d
7eb78a9d2c69b4ce40b8c3c018672fccec2bfe36df747ed2606845b224748ba1
GET /beacon/savethechildren/production/scripts/evergage.min.js HTTP/1.1
Host: cdn.evgnet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 1I1yLmWT05ihnwdOhV+uAZqw8rzzb4Z84HE6PV3eLI+CIYHq0IVBoOilf4sdyQZRyQo0TCD1AjPt4HN4AO92iQ==
x-amz-request-id: D2A0661N6P6SMFMM
x-amz-replication-status: COMPLETED
last-modified: Mon, 28 Nov 2022 16:38:38 GMT
etag: "c0c4fb146208f93d73f374d37af5dbb1"
cache-control: max-age=120
content-encoding: gzip
x-amz-meta-evergage-beacon-ver: 16
x-amz-meta-evergage-sum: ce0eb478979a91d41e52330f5f9481980f5f0e4e
x-amz-version-id: rDhq8cFZ5PYgETW0IAiWEpS2jdrhCfwu
content-type: application/javascript; charset=utf-8
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 29 Nov 2022 01:33:00 GMT
age: 51
x-served-by: cache-iad-kiad7000028-IAD, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 28, 1
x-timer: S1669685581.775339,VS0,VE1
vary: Accept-Encoding
timing-allow-origin: *
content-length: 48289
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/donate.svg
200 OK 1.9 kB URL HTTP/2 www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/donate.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3558)
Hash ac5d7f70c99b9908850403c70c5580da
dcc23cff43e2ed3c5006df18bf783145ec09bcbe
70fabd184064845add318d2de9c3f3e13e0a21c4cc2db703ee9e42d7206c8349
GET /content/dam/usa/images/lps/2022/ilro/donate.svg HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669685579233%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1864
accept-ranges: bytes
cache-control: max-age=604800, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:33:00 GMT
etag: "f69-5ee90ad969ca2-gzip"
expires: Tue, 06 Dec 2022 01:33:00 GMT
last-modified: Tue, 29 Nov 2022 00:00:38 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2nVISQD5srF05pD-RZhVwbqGArR-_3BM82ufuTi74D7RvGShomiw8g==
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:46:16 GMT
expires: Fri, 24 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 359204
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/peace2X.png/_jcr_content/renditions/cq5dam.webp_thumbnail.768.768.webp
200 OK 88 kB URL HTTP/2 www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/peace2X.png/_jcr_content/renditions/cq5dam.webp_thumbnail.768.768.webp
IP
Hash f2e88bd9b32178581936d5421dac6fa0
530681d946b4782289dcf4aa4743e4074315a6c3
bbeeb9ba478c42a311a4578dd7b2f85e5a016f553146ff8da081f6e4e92f33d7
GET /content/dam/usa/images/lps/2022/ilro/peace2X.png/_jcr_content/renditions/cq5dam.webp_thumbnail.768.768.webp HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669685579233%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/webp
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:33:00 GMT
etag: "11d2c-5ee910c91999a-gzip"
expires: Wed, 30 Nov 2022 01:33:00 GMT
last-modified: Tue, 29 Nov 2022 00:27:12 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2XiGJYSyJNgdCYStky7oqJDhmpXlkpUzY8p9BIfr45UZZRvpIetuqw==
X-Firefox-Spdy: h2
www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/choose.svg
200 OK 2.1 kB URL HTTP/2 www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/choose.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1181)
Hash 3813d7e026f39604f41b9bcc359ea72d
b818b467f4d7aae36b202c267618d100d57a3412
3aa375f75a2df1c5bbb496d9c3548a8229d973a2e4c3b084bde56c8a8853d972
GET /content/dam/usa/images/lps/2022/ilro/choose.svg HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669685579233%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 2077
accept-ranges: bytes
cache-control: max-age=604800, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:33:00 GMT
etag: "1236-5ee919b7a6c76-gzip"
expires: Tue, 06 Dec 2022 01:33:00 GMT
last-modified: Tue, 29 Nov 2022 01:07:09 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7AEZY4s3KY6yCQIAKmXrtKId2nKhVOPWVuMI8a0-8WjqUd8vPSE8aw==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9556
Expires: Tue, 29 Nov 2022 04:12:16 GMT
Date: Tue, 29 Nov 2022 01:33:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9556
Expires: Tue, 29 Nov 2022 04:12:16 GMT
Date: Tue, 29 Nov 2022 01:33:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9556
Expires: Tue, 29 Nov 2022 04:12:16 GMT
Date: Tue, 29 Nov 2022 01:33:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9556
Expires: Tue, 29 Nov 2022 04:12:16 GMT
Date: Tue, 29 Nov 2022 01:33:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9556
Expires: Tue, 29 Nov 2022 04:12:16 GMT
Date: Tue, 29 Nov 2022 01:33:00 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb99c22d6-3187-4d40-8281-7980c7988464.webp
200 OK 3.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb99c22d6-3187-4d40-8281-7980c7988464.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06723cdab42df9b5334f540a8c7ebc60
3bbc44cb84a37ce6a067db4301dd81647a77c29f
9f6f064b16044c510650635690c61003fb2f6439021a2e681431136f5e7a08b3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb99c22d6-3187-4d40-8281-7980c7988464.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3905
x-amzn-requestid: bf50db76-dd95-44fc-abbe-1a26a5559ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMFcYHE6IAMFmpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638182b5-50b6d010058c6cb75c05c6de;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 03:06:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 73Fr-7-mRcw9_OVt8Wdi4pjFBHkqi_vBa-zgLtbHKEx1ay9s8wDSgQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 06:26:11 GMT
age: 68809
etag: "3bbc44cb84a37ce6a067db4301dd81647a77c29f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1ee10f9-36dd-4ca4-986e-a80758149640.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1ee10f9-36dd-4ca4-986e-a80758149640.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 516776052e5e906ea9f42d25bae5cc85
be4c4d01fc67218e26a3e9d27a2f708e639c9d4b
28e70e38cfad65ad8a7a68ab1dc78747c7013a87b854fc35b163cc5765cd0570
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1ee10f9-36dd-4ca4-986e-a80758149640.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8460
x-amzn-requestid: 51416479-3854-4f1a-9d86-35e104c57f6a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnkHuZIAMF-_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852963-180b323d4a45fa2f29f9b1fc;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3MKambAjrBl64HI6hBuOtNJi3Tj6gxtwH_lOfk0WNX15UnCrAJbNig==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:48:54 GMT
age: 13446
etag: "be4c4d01fc67218e26a3e9d27a2f708e639c9d4b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d574c4db20a68295dbd06cb08f5990b
433061bbb226048765a711deca3026ee3e52372f
8cc1a4d18e242f8bfc8ab94637f635b73554b903462c29b06d0ec67872542afb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9203
x-amzn-requestid: 8cba52d6-3c1c-495c-bb9d-3ba6f0adc7e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cHcHmGmQoAMF6dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fa6fd-73abfa592ff223061401af9a;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 17:16:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UmhWm03jrsV8dFagrzIA0E-8eL8dykoO5kw3cYOBd172dCGqNdAX-Q==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 03:31:58 GMT
age: 79262
etag: "433061bbb226048765a711deca3026ee3e52372f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69f1b665-d8ee-457c-8f1d-e696be0cdbf6.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69f1b665-d8ee-457c-8f1d-e696be0cdbf6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c808183085a429c53515508678fc7ab2
6567069d9f5199205ba1ca7a937fcb0a52f95d06
c7ca95730cbc97d7c243e05b23520166faefcd2dfe90f36f70fad1f7e4537e4c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69f1b665-d8ee-457c-8f1d-e696be0cdbf6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9162
x-amzn-requestid: f7fb3b99-6f1c-4ab3-9547-a337d54e8c9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVjI8E9poAMFaQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63854bd2-0679b83d1aa3b7c71aa6bf1c;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 00:01:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RAAJeCuVxs-hpp4wMmcBEmqPf71bUMueBvhwLaYTixj9IiIGNp0ZIQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 00:28:27 GMT
age: 3873
etag: "6567069d9f5199205ba1ca7a937fcb0a52f95d06"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.youtube.com/embed/bG3am1_ty4U?rel=0&enablejsapi=1&controls=1&modestbranding=1&showinfo=1&start=0&iv_load_policy=1
200 OK 8.8 kB URL HTTP/2 www.youtube.com/embed/bG3am1_ty4U?rel=0&enablejsapi=1&controls=1&modestbranding=1&showinfo=1&start=0&iv_load_policy=1
IP
Hash 7e44c46db2ac9917110dc47aa38fdc85
b5b245c90705ad80c31d457c0d7c96709ca31e96
5024225a583b188860eaf21f7196c06cef8b2e89389ae4b1df6e314399f3b2ae
GET /embed/bG3am1_ty4U?rel=0&enablejsapi=1&controls=1&modestbranding=1&showinfo=1&start=0&iv_load_policy=1 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 29 Nov 2022 01:33:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=0EkgdEIp4AY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=JxzJ-Tro89o; Domain=.youtube.com; Expires=Sun, 28-May-2023 01:33:00 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+753; expires=Thu, 28-Nov-2024 01:33:00 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa7a7fb1-8e53-47cc-bd1c-80ab0e8ecd59.jpeg
200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa7a7fb1-8e53-47cc-bd1c-80ab0e8ecd59.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b421b66a29c15df61049ef5d5f34bc2
f3c1297885fa2fd37557222d5490dfb0afed19ef
3c88aecb898378f0d070fe9e9733ac42b89b57349e8e9f51ffb0508b88821980
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa7a7fb1-8e53-47cc-bd1c-80ab0e8ecd59.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3711
x-amzn-requestid: e9825e7e-0fa7-4165-9b59-f554a4bf1d6b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b_dkuFKToAMF1OA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637c761e-7ebc3c3b480cdd94059616b7;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 07:11:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TQQiAdJwsSxsS2C-3y_SNOHPtiuPMKcfu-4Db4zlOjbHsTfRnHWl8Q==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 08:00:12 GMT
age: 63168
etag: "f3c1297885fa2fd37557222d5490dfb0afed19ef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d6e2be555d55d272711d589eb5e01165
ecc7643d23c834de4c22974de35738b01b9811e1
d72187965410e6790f2916575018dea4acea7e219d8b5d0a1fc3627026022f0e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6273
Cache-Control: max-age=129295
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:01 GMT
Etag: "63849edb-1d7"
Expires: Wed, 30 Nov 2022 13:27:56 GMT
Last-Modified: Mon, 28 Nov 2022 11:43:23 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash d6e2be555d55d272711d589eb5e01165
ecc7643d23c834de4c22974de35738b01b9811e1
d72187965410e6790f2916575018dea4acea7e219d8b5d0a1fc3627026022f0e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6273
Cache-Control: max-age=129295
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:01 GMT
Etag: "63849edb-1d7"
Expires: Wed, 30 Nov 2022 13:27:56 GMT
Last-Modified: Mon, 28 Nov 2022 11:43:23 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c4de7d2ce0b5402e6aa6ed9066d22672
7afa3b9c0c67a7376e3d181f50a7cf93258920a9
0613803a30b9deb159dd2d9e264591bee7bfd972a7655ed78f6bbb494b0b4cd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0613803A30B9DEB159DD2D9E264591BEE7BFD972A7655ED78F6BBB494B0B4CD8"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12576
Expires: Tue, 29 Nov 2022 05:02:37 GMT
Date: Tue, 29 Nov 2022 01:33:01 GMT
Connection: keep-alive
status.geotrust.com/
200 OK 471 B IP
Hash 292a8fd97e1d73fdec5de19093204688
bb9adb12d7dcc055bba5f46cdd3c64b152f5be07
ef1476952285770495de358dabcef65aee78453327bbbf394fb816ef5aea5bd7
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2279
Cache-Control: max-age=111974
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:01 GMT
Etag: "63846acc-1d7"
Expires: Wed, 30 Nov 2022 08:39:15 GMT
Last-Modified: Mon, 28 Nov 2022 08:01:16 GMT
Server: ECS (amb/6BAC)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash de4ed6b8f21aff584550ba9e86566ade
9b4bc11622fe55792c7346b8e520577df88bf7a5
4f967644dcedde159f73ded6141c02c2dc03403e4fa546cd845b51da747df550
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4F967644DCEDDE159F73DED6141C02C2DC03403E4FA546CD845B51DA747DF550"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2396
Expires: Tue, 29 Nov 2022 02:12:57 GMT
Date: Tue, 29 Nov 2022 01:33:01 GMT
Connection: keep-alive
status.geotrust.com/
200 OK 471 B IP
Hash 292a8fd97e1d73fdec5de19093204688
bb9adb12d7dcc055bba5f46cdd3c64b152f5be07
ef1476952285770495de358dabcef65aee78453327bbbf394fb816ef5aea5bd7
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=109695
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:01 GMT
Etag: "63846acc-1d7"
Expires: Wed, 30 Nov 2022 08:01:16 GMT
Last-Modified: Mon, 28 Nov 2022 08:01:16 GMT
Server: nginx
Content-Length: 471
support.savethechildren.org/site/SPageNavigator/api_cons_cart.html?pgwrap=n&callback=jQuery22405436148255773677_1669685579797&_=1669685579798
200 200 116 B URL HTTP/1.1 support.savethechildren.org/site/SPageNavigator/api_cons_cart.html?pgwrap=n&callback=jQuery22405436148255773677_1669685579797&_=1669685579798
IP
Hash 0089c21866b7a786d45cc751bbcdb479
da72ed9fb398582e2e6b81fcea856ef0fc170481
bd53762e49861b722387c0f17ba91c2b890859043d7101f4b9b3564251882d72
GET /site/SPageNavigator/api_cons_cart.html?pgwrap=n&callback=jQuery22405436148255773677_1669685579797&_=1669685579798 HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true; stc-analytics-source=Email|Email|SFMC|BF_GT_Preview|Non_Donors_a|11/25/2022; stc-session-count=NaN
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 200
Date: Tue, 29 Nov 2022 01:33:01 GMT
Server: Apache
X-Content-Type-Options: nosniff
Cache-Control: no-store
Pragma: no-cache
Set-Cookie: JSESSIONID=DC0EFE93CD2952DA4DE707ADB02E3821.app30058a; Path=/; Secure; HttpOnly
JSESSIONID=DC0EFE93CD2952DA4DE707ADB02E3821.app30058a; Path=/site/
JSESSIONID=DC0EFE93CD2952DA4DE707ADB02E3821.app30058a;Path=/site/CRConsAPI; Secure; SameSite=None
JSESSIONID=DC0EFE93CD2952DA4DE707ADB02E3821.app30058a;Path=/site/CrmRest; Secure; SameSite=None
JSESSIONID=DC0EFE93CD2952DA4DE707ADB02E3821.app30058a;Path=/site/AnonymousLogin; Secure; SameSite=None
JSESSIONID=DC0EFE93CD2952DA4DE707ADB02E3821.app30058a;Path=/site/CRDonationAPI; Secure; SameSite=None
Content-Security-Policy: frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com; report-uri https://support.savethechildren.org/site/XFrameViolation
X-Frame-Options: allow-from 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com
Cteonnt-Length: 112
Keep-Alive: timeout=15, max=319
Connection: Keep-Alive
Content-Type: application/javascript;charset=ISO-8859-1
Content-Encoding: gzip
Content-Length: 116
support.savethechildren.org/site/PixelServer?t=undefined
200 200 43 B URL HTTP/1.1 support.savethechildren.org/site/PixelServer?t=undefined
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /site/PixelServer?t=undefined HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true; stc-analytics-source=Email|Email|SFMC|BF_GT_Preview|Non_Donors_a|11/25/2022; stc-session-count=NaN
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 200
Date: Tue, 29 Nov 2022 01:33:01 GMT
Server: Apache
Cache-Control: no-store
Content-Length: 43
Keep-Alive: timeout=15, max=451
Connection: Keep-Alive
Content-Type: image/gif
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0a6a7f5e755738b86d1728cd8a08f4df
12c3e647652456ab7a4e7453a589577a61029372
a5b6f65501a3096e50b2a78547741f376c3c868892812d7b15fbac07ceaa2a1b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=89617
Date: Tue, 29 Nov 2022 01:33:01 GMT
Etag: "638406e5-1d7"
Expires: Wed, 30 Nov 2022 02:26:38 GMT
Last-Modified: Mon, 28 Nov 2022 00:55:01 GMT
Server: ECS (nyb/1D34)
X-Cache: Miss from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: TLetXDRuSJ_jdecqKpIUIddum9qWsJEqdAUZDiqgs1geNSqlSSz6tQ==
Age: 5497
api.omappapi.com/v2/embed/71376?d=savethechildren.org
200 OK 49 kB URL HTTP/2 api.omappapi.com/v2/embed/71376?d=savethechildren.org
IP
Hash 2db148acc430ef724b1540609649bdd1
fefcb6672247d123b184e40deb8f6333f28a65ab
77a2fb6860b9aaa30a349e618378f5856c1c2370cc8b2a1c0bcf97a8d6c256d6
GET /v2/embed/71376?d=savethechildren.org HTTP/1.1
Host: api.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Tue, 29 Nov 2022 01:32:58 GMT
access-control-allow-origin: *
access-control-allow-headers: X-CSRF-Token
expires: Tue, 29 Nov 2022 01:12:24 GMT
cache-control: public, max-age=30, stale-while-revalidate=1800
last-modified: Thu, 17 Nov 2022 13:51:00 GMT
etag: W/"a791b80534cbdae4f88ae59a85856be7"
x-optinmonster-account: 80223
access-control-expose-headers: X-OptinMonster-Account, X-User-Agent
x-user-agent: standard--
x-cache-config: 0 0
vary: Accept-Encoding, User-Agent
x-cache-status: HIT
content-encoding: gzip
server: Pagely Gateway/1.5.1
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 10nHMYP0C-FswpncaOtr-jD58WITs1qhpZ_0WMSgxWy8bZG8PGQKlg==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 01:30:21 GMT
expires: Tue, 29 Nov 2022 01:45:21 GMT
cache-control: public, max-age=900
age: 160
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Tue, 29 Nov 2022 01:33:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30462b52571c91f089bed4de98462a46
7e2b322ea5b8f97b2fa76751bcffe2a420f872eb
c5403dfefa9d043ac501963ff09a6d3d70e21f6e6a1b9728183a3490060a4bfc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 29 Nov 2022 01:33:01 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0fe20d41a043db700a84924cd9793f3
c0da481fef6cd00558f6e68b074acb34bef8292f
03caeb65ab9e22f6d6fe0d344d327950d20ee9ed144e2da0e5e062943a03fc56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.savethechildren.org/favicon.ico
200 OK 675 B URL HTTP/2 www.savethechildren.org/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 16f6e953459120b0eeddf01a229cef1b
c148f6a031e531653d1db45645ad4621efea56ac
ce998e52a91b2c558bb1e58a942a581bda63b6e7f97b57dc71a737aa12ce42bf
GET /favicon.ico HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669685579233%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true; stc-analytics-source=Email|Email|SFMC|BF_GT_Preview|Non_Donors_a|11/25/2022; stc-session-count=NaN; _sfid_58d2={%22anonymousId%22:%22fe140b40407b8540%22%2C%22consents%22:[]}; _evga_c797={%22uuid%22:%22fe140b40407b8540%22}; _omappvp=1CFiDk1d3pknemsW9diYfvBHMqqdPzTKGzoeCTGaCCjgApc5SGu7JcqZwMMI8PA0K3t1AQfsFCNk3xRfgRetWZyHwtbufRu7; _omappvs=1669685580380; stc-analytics-sub_source=|||||
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 675
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:33:01 GMT
etag: "103e-5edae7fa27940-gzip"
expires: Wed, 30 Nov 2022 01:33:01 GMT
last-modified: Thu, 17 Nov 2022 18:10:05 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZpNjr6y62XGqyFtntMrOH7NJu7PsZLIpXHfIA1ODF86z2PrZGXyyFg==
X-Firefox-Spdy: h2
www.google.com/js/th/ayf-ZXn06Q-bf2kvL7HvZn-6GmgIdMcaNWCzb_-s5mI.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/ayf-ZXn06Q-bf2kvL7HvZn-6GmgIdMcaNWCzb_-s5mI.js
IP
File type ASCII text, with very long lines (35786)
Hash ab1d51e6cf1d842260dab25a4332649c
0c814f9168dff9647a797787c2109a568904fedb
4b4e6a92912d486accd192aec1f4ba5ffee3658019c01e98199976a192941f09
GET /js/th/ayf-ZXn06Q-bf2kvL7HvZn-6GmgIdMcaNWCzb_-s5mI.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14218
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 18:40:04 GMT
expires: Wed, 22 Nov 2023 18:40:04 GMT
cache-control: public, max-age=31536000
age: 543177
last-modified: Thu, 03 Nov 2022 10:00:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 63e17186da297abe1c1555fe7b752579
ab86ce33ee42713d7d8f1f2353cf86cd0c99b8c1
6635bdf8c6b7df17c696e1366b49c4b9c413c95f4494665ed5d36b28269f718a
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 29 Nov 2022 01:33:01 GMT
server: ESF
cache-control: private
content-length: 30588
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2734f94ccee461103a4c42296934948d
57af4a7dfbc298f14e47d9cf98c1a33c8f9078ae
e067ad8019cd032e033758f033c9eaa9e8dd7250a79b7c750f24cdc055a3ec87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/bG3am1_ty4U/maxresdefault.webp
200 OK 71 kB URL HTTP/2 i.ytimg.com/vi_webp/bG3am1_ty4U/maxresdefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cd243e7657ff0f88b93387c98dc7a584
b469df76449cc2ce6ebf81ff7aea76d62a416979
c38175de5ceece295439a4f847c8b180e3dee5a8bebc6e3578a7268fcbacb432
GET /vi_webp/bG3am1_ty4U/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 70868
date: Tue, 29 Nov 2022 01:33:01 GMT
expires: Tue, 29 Nov 2022 03:33:01 GMT
cache-control: public, max-age=7200
etag: "1661868906"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5011c3ae54f0ee02e53eee57d47da352
ad893bb5928ff835231652809cc9af62d5219f0a
d840efa1d29eff50fc07c0c31315c004f60db98e7da8c8a232e40e3595bba0a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ncIXa6u-4KcSnvBNjP8uq8uKVT0Wj1wpSYrDpEdH-AzedNfxc3NK7duHo8SWnWGded26TCN0Jt0=s68-c-k-c0x00ffffff-no-rj
200 OK 2.2 kB URL HTTP/2 yt3.ggpht.com/ncIXa6u-4KcSnvBNjP8uq8uKVT0Wj1wpSYrDpEdH-AzedNfxc3NK7duHo8SWnWGded26TCN0Jt0=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash 54d4484ea595edde8ec19759d87f2a91
39ecc8a2f7aef4fb0de155f153e658b26425d317
d4268511e0c9723d4500b21241eaf1fbe44bddf27fc788c745ec7fa48eab1c8b
GET /ncIXa6u-4KcSnvBNjP8uq8uKVT0Wj1wpSYrDpEdH-AzedNfxc3NK7duHo8SWnWGded26TCN0Jt0=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2231
x-xss-protection: 0
date: Tue, 29 Nov 2022 00:48:59 GMT
expires: Sun, 06 Nov 2022 02:54:54 GMT
cache-control: public, max-age=86400, no-transform
age: 2642
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2734f94ccee461103a4c42296934948d
57af4a7dfbc298f14e47d9cf98c1a33c8f9078ae
e067ad8019cd032e033758f033c9eaa9e8dd7250a79b7c750f24cdc055a3ec87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5011c3ae54f0ee02e53eee57d47da352
ad893bb5928ff835231652809cc9af62d5219f0a
d840efa1d29eff50fc07c0c31315c004f60db98e7da8c8a232e40e3595bba0a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 29 Nov 2022 01:33:02 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fc15fe19647a4179d7f18223ab519db5
19a9795f349079c1e70636ea386b18b85a1e3fbd
1867cce2a6020afdb0c0cd6fe878b00f62f02dcbb1908ac8f12f325caaaa88e9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:02 GMT
Etag: "6383840e-1d7"
Server: ECS (amb/6B97)
Content-Length: 471
a.opmnstr.com/app/js/5.cadaa863.min.js
200 OK 3.6 kB URL HTTP/2 a.opmnstr.com/app/js/5.cadaa863.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (9420)
Hash ac030beb3cbef9796408e22b64f5cba2
d1e7dd31dd34ac7e2ea83343f59e6af600736f73
d9dd47670da76991914ee37f733a06304259ac7dae093172928a34203f0a0316
GET /app/js/5.cadaa863.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:01 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"6373fca9-2509"
last-modified: Tue, 15 Nov 2022 20:55:05 GMT
cdn-storageserver: DE-197
cdn-requestpullsuccess: True
cdn-fileserver: 489
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 5cccd81e155e8c9827096987e4cbaf89
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
smetrics.savethechildren.org/id?d_visid_ver=5.4.0&d_fieldgroup=MC&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&ts=1669685581183
200 OK 48 B URL HTTP/2 smetrics.savethechildren.org/id?d_visid_ver=5.4.0&d_fieldgroup=MC&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&ts=1669685581183
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5af354117910f8005b66f31b4bb8173b
ffac4154d575715e6c7ca4416eb5fb1c29207325
a86254d0d905b964600506bdea8fba32cd3f58a1175d87d7e8ccff6c2056f7c6
GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&ts=1669685581183 HTTP/1.1
Host: smetrics.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true; stc-analytics-source=Email|Email|SFMC|BF_GT_Preview|Non_Donors_a|11/25/2022; stc-session-count=NaN; _sfid_58d2={%22anonymousId%22:%22fe140b40407b8540%22%2C%22consents%22:[]}; _evga_c797={%22uuid%22:%22fe140b40407b8540%22}; stc-analytics-sub_source=|||||
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-origin: https://www.savethechildren.org
access-control-allow-credentials: true
date: Tue, 29 Nov 2022 01:33:02 GMT
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0%7CMCMID%7C73129340718868235532968733370560506841; Path=/; Domain=savethechildren.org; Max-Age=63072000; Expires=Thu, 28 Nov 2024 01:33:33 GMT;
s_ecid=MCMID%7C73129340718868235532968733370560506841; Path=/; Domain=savethechildren.org; Max-Age=63072000; Expires=Thu, 28 Nov 2024 01:33:33 GMT; SameSite=Lax;
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 48
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/20.1ca31d61.min.js
200 OK 3.0 kB URL HTTP/2 a.opmnstr.com/app/js/20.1ca31d61.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (3730)
Hash f33f65f90e32b7595563d22cd86dac4f
51166c89896ea593641d43c7ec3376b7bfbc28e0
e4819b8a3184f336959eb3e1314ce5b739e02b612539c84412ceb2b7dad1f353
GET /app/js/20.1ca31d61.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-eca"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-197
cdn-requestpullsuccess: True
cdn-fileserver: 505
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: aa08ea011bc5e5578bf7565d279beb02
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
a.omappapi.com/users/0aa36367c604/images/3912172d247e1585156961-SCUS_Horizontal_PREFERREDVERSION.png
200 OK 38 kB URL HTTP/2 a.omappapi.com/users/0aa36367c604/images/3912172d247e1585156961-SCUS_Horizontal_PREFERREDVERSION.png
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image\012- data
Hash 39986a6c845620bc7861a723356bd1c6
45ab4a94bd237da06b143b38c1b74e37a6951f9f
9f13dd59cccf1ef692ebedbbac7d4eb8c92f6a6aaa675f28e82ca3df9a7bd76d
GET /users/0aa36367c604/images/3912172d247e1585156961-SCUS_Horizontal_PREFERREDVERSION.png HTTP/1.1
Host: a.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:02 GMT
content-type: image/webp
content-length: 37534
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "60afe507-929e"
last-modified: Thu, 27 May 2021 18:29:27 GMT
cdn-storageserver: DE-51
cdn-requestpullsuccess: True
cdn-fileserver: 100
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/25/2022 17:58:10
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 94ff396e45e4df6d02ef33259e06d102
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c1412b889ca581c49898e472324b06e1
512a1d61cee1fcfc1d19ddb5baec58eafd35f07e
555bd4d087e423f5c62edf79b57929cfe32926eb30c6277946545fa974f9e3fa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4528
Cache-Control: max-age=148776
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:02 GMT
Etag: "6384f1c6-1d7"
Expires: Wed, 30 Nov 2022 18:52:38 GMT
Last-Modified: Mon, 28 Nov 2022 17:37:10 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
a.opmnstr.com/app/js/21.400ddc65.min.js
200 OK 10 kB URL HTTP/2 a.opmnstr.com/app/js/21.400ddc65.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (3159)
Hash 5530a7c6764df5b15372b03f7d32c7bf
baa4cd3ff7c9aeb8212c220bf5865331f570cdf1
e37aa4748156a7e6eeecf980cd86edb256e3f369483e272b68e2257099cb62ea
GET /app/js/21.400ddc65.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-c8f"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-199
cdn-requestpullsuccess: True
cdn-fileserver: 506
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:27
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 2d65a5d9fe4cf6ac9b7fcc26662bb654
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Noto+Sans:500,700,400%7CSource+Sans+Pro:800,400%7CMontserrat:500,400
200 OK 14 kB URL HTTP/2 fonts.googleapis.com/css?family=Noto+Sans:500,700,400%7CSource+Sans+Pro:800,400%7CMontserrat:500,400
IP
Hash 5503ff9c0604bbf4794c42e11995cd1e
2dccfbd7cabca029fe999b823307b4d4e116f03a
730b808266f0465c7733cc776b84ea3b8f57433ee787b94bd5baf047bea2178e
GET /css?family=Noto+Sans:500,700,400%7CSource+Sans+Pro:800,400%7CMontserrat:500,400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 29 Nov 2022 01:33:02 GMT
date: Tue, 29 Nov 2022 01:33:02 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/notosans/v27/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/notosans/v27/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12684, version 1.0\012- data
Hash 0c235386bcf6af06f67e6c89fd19e434
10720574d4609322023984a761f32f9518c07bc4
c1c30918a861cb6a985ab55d54ad7e861682354197f164cb3b7194f20eed67ac
GET /s/notosans/v27/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12684
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:23:34 GMT
expires: Fri, 24 Nov 2023 21:23:34 GMT
cache-control: public, max-age=31536000
age: 360568
last-modified: Mon, 09 May 2022 18:28:04 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12860, version 1.0\012- data
Hash ab21c24efd75543e16e34807ebc6cdec
eb2562f9729079333fbcbbe94868695669dd3301
88f00438d26021a325247c4427898f7c778a22976df9f1a9d9876429778bf265
GET /s/notosans/v27/o-0IIpQlx3QUlC5A4PNr5TRA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 21:03:13 GMT
expires: Tue, 28 Nov 2023 21:03:13 GMT
cache-control: public, max-age=31536000
age: 16189
last-modified: Mon, 09 May 2022 18:27:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13036, version 1.0\012- data
Hash 0ad032b3d07aaf33b160ac4799dda40f
06b931e0d0bf37f5037d9e66d6feedfddd21c0ba
c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0
GET /s/sourcesanspro/v21/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13036
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:26:57 GMT
expires: Thu, 23 Nov 2023 19:26:57 GMT
cache-control: public, max-age=31536000
age: 453965
last-modified: Wed, 27 Apr 2022 16:04:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 16:40:18 GMT
expires: Fri, 24 Nov 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 377564
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 499154bce56c2ec202bb9ccdb60dc0e5
952ef94fe7220a2bd7aa3735147095a198a6498e
85c4deec1a252b7d127f971df9219b47017602969b3760c414f4cf43739764e6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=132242
Date: Tue, 29 Nov 2022 01:33:02 GMT
Etag: "6384baf0-1d7"
Expires: Wed, 30 Nov 2022 14:17:04 GMT
Last-Modified: Mon, 28 Nov 2022 13:43:12 GMT
Server: ECS (bsa/EB15)
X-Cache: Miss from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: J2uAVxBu4_WOq-hEHIFNtYdjQ4mnovMx2cA6heuzoZNEUwtNIXS_jg==
Age: 2033
nexus.ensighten.com/choozle/10170/Bootstrap.js
200 OK 16 kB URL HTTP/2 nexus.ensighten.com/choozle/10170/Bootstrap.js
IP
Hash 216abe249167a8a25f92952775b6fa51
b9a0a01266bce12d9a0b3758f4e207d5f18f11b0
4ad99554cbe8724651a711aaa997564c767fef24b335ede12fae83b6603bab80
GET /choozle/10170/Bootstrap.js HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 22 Jul 2022 07:38:37 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 13 Jun 2022 14:49:13 GMT
etag: W/"18ffa018e5b503b5b4ff4b33ae1fb30c"
x-amz-server-side-encryption: AES256
cache-control: max-age=300
x-amz-version-id: fT_tumJdhdhIumBYXlKaiUul3kyT.7tv
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SWwS_wOxWLWxssuIANaWmPoPAqqpKH_Z-LQOG8o-2j9-giL-fsa4Eg==
age: 11210066
X-Firefox-Spdy: h2
api.omappapi.com/v3/geolocate/json
200 OK 471 B URL HTTP/2 api.omappapi.com/v3/geolocate/json
IP
File type JSON data\012- , ASCII text, with very long lines (471), with no line terminators
Hash 9fff4ffa66fd681f84a9d832492a89d6
1488dc26fcd95bc344a8cb4a9a398ddb508d83bd
5f0a906a730e5996601743dea353406d4d424889a1916e2c47a43a27ef9d74af
GET /v3/geolocate/json HTTP/1.1
Host: api.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 471
date: Tue, 29 Nov 2022 01:32:59 GMT
x-ratelimit-limit: 1000
x-ratelimit-remaining: 999
x-ratelimit-reset: 1669685639
x-user-agent: standard--
x-cache-config: 0 0
x-cache-status: BYPASS
x-pagely-debug: mainblock
access-control-allow-origin: *
server: Pagely Gateway/1.5.1
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FaQ_tZD9d0yCc7PUVMBxuAZSzso2JBTxQH81v0_f35p6XRHUTq3ASQ==
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCb36da39812024952b27cbb37fe487ff2-source.min.js
200 OK 1.5 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCb36da39812024952b27cbb37fe487ff2-source.min.js
IP
File type ASCII text, with very long lines (3166)
Hash 8f03cc48b1e46331fa3dd6171b06a95b
907bc891f17522c9f8a76bc300b95c419437ab68
ed0aca994c809ee5e08a857884e581b125a5e0f0ac6cbb6c36406b143a7d100f
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCb36da39812024952b27cbb37fe487ff2-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1463
cache-control: max-age=3600
expires: Tue, 29 Nov 2022 02:33:02 GMT
date: Tue, 29 Nov 2022 01:33:02 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC85e990005f5d4576a8167cf1a1a6c1b4-source.min.js
200 OK 710 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC85e990005f5d4576a8167cf1a1a6c1b4-source.min.js
IP
File type ASCII text, with very long lines (1501)
Hash 8630fcab47ca8d3c25aab39f7bb67a39
ffe54163aca47a6054692e4c980363ed6c6d47c6
526cc3dbf135d2bcf48e4984b0c04e7eda2041b06e4945685a8a66c8df0d2a9a
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC85e990005f5d4576a8167cf1a1a6c1b4-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 710
cache-control: max-age=3600
expires: Tue, 29 Nov 2022 02:33:02 GMT
date: Tue, 29 Nov 2022 01:33:02 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC6f334b10b26f458fb9594f438b46577a-source.min.js
200 OK 1.1 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC6f334b10b26f458fb9594f438b46577a-source.min.js
IP
File type ASCII text, with very long lines (2296)
Hash 3a23dc2cea9a1ea9efeea7d48dd92b45
0f18e5f8ab077775ed8ae7acac3fcab64acf9c41
f2846e3c463659c5a5ff97890cc1b6da527685bc4f887984c71ced1350fc0a2b
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC6f334b10b26f458fb9594f438b46577a-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1060
cache-control: max-age=3600
expires: Tue, 29 Nov 2022 02:33:02 GMT
date: Tue, 29 Nov 2022 01:33:02 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/10.0f634e82.min.js
200 OK 9.0 kB URL HTTP/2 a.opmnstr.com/app/js/10.0f634e82.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (25079)
Hash 4b13892f729fbd393a41a363232a2fb6
9c61a2e7cbb2486606cec32f962a4c369c451d77
66062bedfd5ddb26c90914b03d324f73b74428845b327c622c50f401145a603c
GET /app/js/10.0f634e82.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-6236"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-165
cdn-requestpullsuccess: True
cdn-fileserver: 512
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/25/2022 21:21:38
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: b466c668dbfdd35e670a5635266f999e
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/9.8520b11d.min.js
200 OK 1.3 kB URL HTTP/2 a.opmnstr.com/app/js/9.8520b11d.min.js
IP
ASN #34989 ServeTheWorld AS
File type HTML document, ASCII text, with very long lines (1607)
Hash 28f6948b5daaa50ea75ec3ba6e46b8a3
00bc36c35af5175eeee1007d0aa307b60c9894b5
4ca2648a2c51059f614d79ee99164f5c71f5fccbef57d836a6b02911c4526ccc
GET /app/js/9.8520b11d.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-684"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-198
cdn-requestpullsuccess: True
cdn-fileserver: 505
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:26
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 6eab39e478ace54888dabc459ec4eb50
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC29e9ca088d454b16a61689b7b7827234-source.min.js
200 OK 782 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC29e9ca088d454b16a61689b7b7827234-source.min.js
IP
File type ASCII text, with very long lines (1403)
Hash 2bd92f35f079880350b751c9274e62dd
31c278a136934d59bb678cb7ea5aa4c489dc8a5a
994c647a81363a1444010dc57ab4e58721bc2401b1b55f53796ee980ec100f43
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC29e9ca088d454b16a61689b7b7827234-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 782
cache-control: max-age=3600
expires: Tue, 29 Nov 2022 02:33:02 GMT
date: Tue, 29 Nov 2022 01:33:02 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC543a5c6ce5a74ab5951bb5d2f65f9cdf-source.min.js
200 OK 516 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC543a5c6ce5a74ab5951bb5d2f65f9cdf-source.min.js
IP
File type ASCII text, with very long lines (800)
Hash 97af42b93e350d6e0668d48b005b8509
cd06aa2d115bd26369bb73f709e68f8e3f4b984d
7d0e9f3495a439aebc46fd7693817c2f7802640a3ae3d4fcefee58ded49f5cc6
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC543a5c6ce5a74ab5951bb5d2f65f9cdf-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 516
cache-control: max-age=3600
expires: Tue, 29 Nov 2022 02:33:02 GMT
date: Tue, 29 Nov 2022 01:33:02 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCf79fc1038c2a4b72bdfd02defa7e8cbc-source.min.js
200 OK 1.1 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCf79fc1038c2a4b72bdfd02defa7e8cbc-source.min.js
IP
File type ASCII text, with very long lines (2504)
Hash 0dba220ac9f45a514e76c2d5f131f78c
cc2d7f45bdd04324885df24dd923f2ac785fd2e5
f6f4c75cd0092381e7765a63ab6cc91747048a32e824c15d335c4352b8e70186
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCf79fc1038c2a4b72bdfd02defa7e8cbc-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1076
cache-control: max-age=3600
expires: Tue, 29 Nov 2022 02:33:02 GMT
date: Tue, 29 Nov 2022 01:33:02 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/27.205350b7.min.js
200 OK 1.7 kB URL HTTP/2 a.opmnstr.com/app/js/27.205350b7.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (1207)
Hash 83928c33bd8cd9e92d79c8daf0adde2d
756bc1f1d052da73585829e00afe167b7209808b
6e5c3185ccb4ac8fc904cadda270db39a239d7e366b0d86307547aa12008bc1f
GET /app/js/27.205350b7.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-4f6"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-168
cdn-requestpullsuccess: True
cdn-fileserver: 505
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: b405c6eef25eab5d022b4616f8cdbc35
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/1.12278d6a.min.js
200 OK 4.0 kB URL HTTP/2 a.opmnstr.com/app/js/1.12278d6a.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (11044)
Hash 5d7a504255de076e9016333fee423c84
16c8e3ca1c9bf45c8026504edede4cbf47e73878
c579bea2ebfaf4d64c2a0047295f24c526854aee7e3de0d468ac8e5f86424a1d
GET /app/js/1.12278d6a.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-2b60"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-197
cdn-requestpullsuccess: True
cdn-fileserver: 505
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 746040628daf3c3130e3f05aa4896f5a
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCeacb79e41c2e4edbaefa7f3947ba2208-source.min.js
200 OK 601 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCeacb79e41c2e4edbaefa7f3947ba2208-source.min.js
IP
File type ASCII text, with very long lines (1190)
Hash 9c1a6fcf38a202994d761c6fbc33889a
89b77c02937f2d338c7dfacd152d32b5f514980a
f9cddee1eeae7be658d49df09d1f95a21055cd2a72b66d2f1554a9a6011b6d86
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCeacb79e41c2e4edbaefa7f3947ba2208-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 601
cache-control: max-age=3600
expires: Tue, 29 Nov 2022 02:33:02 GMT
date: Tue, 29 Nov 2022 01:33:02 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/22.7f83f3f7.min.js
200 OK 1.8 kB URL HTTP/2 a.opmnstr.com/app/js/22.7f83f3f7.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (1495)
Hash 376908a96e9dbf6e2f9f678a18bae630
26bec82c36474069d5340293e3a9e8e9fde557ee
cfd42519393b79078173e0d9a34ca7839fdbac32f9159db2b5af50982c8b3ce7
GET /app/js/22.7f83f3f7.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63729c0b-613"
last-modified: Mon, 14 Nov 2022 19:50:35 GMT
cdn-storageserver: DE-199
cdn-requestpullsuccess: True
cdn-fileserver: 506
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:25
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: bb871a2cb12fc4a005e13affc8bb8597
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC890fe151cf724ae6ab6953052f02d8be-source.min.js
200 OK 837 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC890fe151cf724ae6ab6953052f02d8be-source.min.js
IP
File type ASCII text, with very long lines (1860)
Hash badb96c0a96c04b2f2a43473e614b627
044c957192cffecc1f5a7849896ab9028ecf7e29
85ab9137423ee6515ce893afcd6735cf11cd3914686dbaf4affa79b1653fe0e7
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RC890fe151cf724ae6ab6953052f02d8be-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 837
cache-control: max-age=3600
expires: Tue, 29 Nov 2022 02:33:02 GMT
date: Tue, 29 Nov 2022 01:33:02 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCeabf2b9964bb454bb4f16fe9e5f57862-source.min.js
200 OK 1.4 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCeabf2b9964bb454bb4f16fe9e5f57862-source.min.js
IP
File type HTML document, ASCII text, with very long lines (2422)
Hash e0251ae186910b4797a538175d38ebc6
02083d1d26191cd640ee005e82ff35fb196cb345
310c4e61ff6cbe7981426f3357a7e97bc79824b6201fb9e45f1790c2735a5f91
GET /a9de570d9caa/b01a1f4bb0c4/020c179fec37/RCeabf2b9964bb454bb4f16fe9e5f57862-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "1fc078b964841bf28376eea49513c4fe:1668713789.694932"
last-modified: Thu, 17 Nov 2022 19:36:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1364
cache-control: max-age=3600
expires: Tue, 29 Nov 2022 02:33:02 GMT
date: Tue, 29 Nov 2022 01:33:02 GMT
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
collection.decibelinsight.net/i/13874/ws/
101 Switching Protocols 0 B URL HTTP/1.1 collection.decibelinsight.net/i/13874/ws/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /i/13874/ws/ HTTP/1.1
Host: collection.decibelinsight.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.savethechildren.org
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MOkQSH8caYO8DjWXUoDylg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Tue, 29 Nov 2022 01:33:02 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: xYh2X7rCHFEO1Thla7NdOR/qdXc=
Sec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover
Sec-WebSocket-Version: 13
Strict-Transport-Security: max-age=31536000
dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&d_mid=73129340718868235532968733370560506841&d_blob=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&d_cid_ic=userid%0173129340718868235532968733370560506841&ts=1669685581796
200 OK 299 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&d_mid=73129340718868235532968733370560506841&d_blob=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&d_cid_ic=userid%0173129340718868235532968733370560506841&ts=1669685581796
IP
File type JSON data\012- , ASCII text, with very long lines (357), with no line terminators
Hash d568633648f80bde4316ac2673e3a23d
14ec55c8c91967d13ae78299441533bef22225a7
fd0bc7122a2c8a8d52b2590194a785beede980a6d4c783d034b303a06b9d9567
GET /id?d_visid_ver=5.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&d_mid=73129340718868235532968733370560506841&d_blob=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&d_cid_ic=userid%0173129340718868235532968733370560506841&ts=1669685581796 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.savethechildren.org
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v045-028e6f909.edge-irl1.demdex.com 1 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=90999275418458700404074727619373576820; Max-Age=15552000; Expires=Sun, 28 May 2023 01:33:02 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-Error: 300
X-TID: 9vI5YI3WRgQ=
Content-Length: 299
Connection: keep-alive
amplify.outbrain.com/cp/obtp.js
200 OK 5.3 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (16574), with no line terminators
Hash 5cdda5ed80a4ee13f700ae502f7cd4ec
0e6aa932abf3c56561a686aa3e8d069aaa3ca228
d54fc3e1792330cc768902f861f0a79ecffbfd23b8db14f354e8fcefd1c831c1
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "fe80c55f1e1387116ff9765261ed192c:1669645506.686439"
Last-Modified: Mon, 28 Nov 2022 14:22:05 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Tue, 29 Nov 2022 01:53:02 GMT
Date: Tue, 29 Nov 2022 01:33:02 GMT
Content-Length: 5269
Connection: keep-alive
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Tue, 29 Nov 2022 01:33:02 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-bma1655-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
track.securedvisit.com/js/sv.js
200 OK 69 kB URL HTTP/2 track.securedvisit.com/js/sv.js
IP
Hash 234c9b8b5b0147ab9bbebb7fef28a648
431445ec6edcf62a3e4e0f82aa204d7a4512fc23
a4b2ffa597495c5b75e15b469f0b1e4fc4a98787a6f893797d0ccf4e24da4a38
GET /js/sv.js HTTP/1.1
Host: track.securedvisit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:02 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.22.0
vary: Accept-Encoding
etag: W/"273cf9801333aefc61a4f311b0692f6a"
last-modified: Tue, 29 Nov 2022 01:33:02 GMT
expires: Tue, 29 Nov 2022 01:33:02 GMT
pragma: no-cache
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, private
content-encoding: gzip
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39007), with no line terminators
Hash 22e2e3226eb5ada04929a2e43307eeda
04615fa88f80567974bdeb0f103ca5909746ebd7
41feebdfb0b03cd7fee2eb886adef6f3f1f85d3f14215e9a388d2a50e42efb9b
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11421
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 09 Nov 2022 21:23:50 GMT
accept-ranges: bytes
etag: "077538f81f4d81:0"
vary: Accept-Encoding
set-cookie: MUID=13598C79EA986125374F9E12EBCF60AC; domain=.bing.com; expires=Sun, 24-Dec-2023 01:33:02 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C88880A8F322474784F5F267E64194BE Ref B: OSL30EDGE0411 Ref C: 2022-11-29T01:33:02Z
date: Tue, 29 Nov 2022 01:33:02 GMT
X-Firefox-Spdy: h2
nexus.ensighten.com/choozle/10170/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/choozle/10170/code/&publishedOn=Mon%20Jun%2013%2014:49:02%20GMT%202022&ClientID=923&PageID=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253
200 OK 427 B URL HTTP/2 nexus.ensighten.com/choozle/10170/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/choozle/10170/code/&publishedOn=Mon%20Jun%2013%2014:49:02%20GMT%202022&ClientID=923&PageID=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253
IP
File type ASCII text, with very long lines (426)
Hash 7cdb7a6039b327f9b16b3d0eaf7ce237
3b052a59db9d45a351360bbb18ac0adc8114cac4
730cbe59557c7545003ec98680295bd04c57fd8acfa6b41c0d9654a4739d05b1
GET /choozle/10170/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/choozle/10170/code/&publishedOn=Mon%20Jun%2013%2014:49:02%20GMT%202022&ClientID=923&PageID=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253 HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 427
server: nginx
date: Tue, 29 Nov 2022 01:33:02 GMT
expires: Tue, 29 Nov 2022 01:33:01 GMT
cache-control: no-cache, no-store
x-cache: Miss from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SRsG4CTDXb5bJ3j6qaMHX-WinLzu64wlE6IP11b4cYjm8ck-Ripp4A==
X-Firefox-Spdy: h2
smetrics.savethechildren.org/b/ss/stcf.prod.us/5.1/JS-2.22.4-LCXS/s0904517485735?AQB=1&ndh=1&pf=1&t=29%2F10%2F2022%201%3A33%3A1%202%200&cid.&userid.&id=73129340718868235532968733370560506841&.userid&.cid&sdid=2769A7A6DA5A0ACB-758C3351AD08E6B8&mid=73129340718868235532968733370560506841&aamlh=6&ce=Windows-1257&cl=SESSION&pageName=Join%20Team%20Tomorrow&g=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&cc=USD&server=www.savethechildren.org&v0=Email%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522&events=event79%3D2.61&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&c2=D%3Dg&v2=D%3DpageName&v3=footer-email-signup&c10=D%3Dv95&v12=Email%7CEmail%7CSFMC%7CBF_GT_Preview%7CNon_Donors_a%7C11%2F25%2F2022&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Homepage&v27=New&c28=D%3Dv28&v28=footer-email-signup-QUVYO7ZR5JFUUR3MXEDX&c29=D%3Dv36&v36=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow&v42=di-253647-8EBBC6568E39AE90E892AA13B0977C0810&c49=D%3Dv49&v49=year%3D2022%20%7C%20month%3DNovember%20%7C%20date%3D28%20%7C%20day%3DMonday%20%7C%20time%3D8%3A33%3A01%20PM&c51=D%3Dv51&v51=team-tomorrow&v52=D%3Dg&c53=D%3Dv53&v53=donate-monthly-childrens-charity&c54=D%3Dv54&v54=Join%20Team%20Tomorrow&c55=D%3Dv27&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v95=2.61&v110=Launch&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1
200 OK 43 B URL HTTP/2 smetrics.savethechildren.org/b/ss/stcf.prod.us/5.1/JS-2.22.4-LCXS/s0904517485735?AQB=1&ndh=1&pf=1&t=29%2F10%2F2022%201%3A33%3A1%202%200&cid.&userid.&id=73129340718868235532968733370560506841&.userid&.cid&sdid=2769A7A6DA5A0ACB-758C3351AD08E6B8&mid=73129340718868235532968733370560506841&aamlh=6&ce=Windows-1257&cl=SESSION&pageName=Join%20Team%20Tomorrow&g=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&cc=USD&server=www.savethechildren.org&v0=Email%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522&events=event79%3D2.61&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&c2=D%3Dg&v2=D%3DpageName&v3=footer-email-signup&c10=D%3Dv95&v12=Email%7CEmail%7CSFMC%7CBF_GT_Preview%7CNon_Donors_a%7C11%2F25%2F2022&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Homepage&v27=New&c28=D%3Dv28&v28=footer-email-signup-QUVYO7ZR5JFUUR3MXEDX&c29=D%3Dv36&v36=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow&v42=di-253647-8EBBC6568E39AE90E892AA13B0977C0810&c49=D%3Dv49&v49=year%3D2022%20%7C%20month%3DNovember%20%7C%20date%3D28%20%7C%20day%3DMonday%20%7C%20time%3D8%3A33%3A01%20PM&c51=D%3Dv51&v51=team-tomorrow&v52=D%3Dg&c53=D%3Dv53&v53=donate-monthly-childrens-charity&c54=D%3Dv54&v54=Join%20Team%20Tomorrow&c55=D%3Dv27&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v95=2.61&v110=Launch&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1
IP
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/stcf.prod.us/5.1/JS-2.22.4-LCXS/s0904517485735?AQB=1&ndh=1&pf=1&t=29%2F10%2F2022%201%3A33%3A1%202%200&cid.&userid.&id=73129340718868235532968733370560506841&.userid&.cid&sdid=2769A7A6DA5A0ACB-758C3351AD08E6B8&mid=73129340718868235532968733370560506841&aamlh=6&ce=Windows-1257&cl=SESSION&pageName=Join%20Team%20Tomorrow&g=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&cc=USD&server=www.savethechildren.org&v0=Email%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522&events=event79%3D2.61&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&c2=D%3Dg&v2=D%3DpageName&v3=footer-email-signup&c10=D%3Dv95&v12=Email%7CEmail%7CSFMC%7CBF_GT_Preview%7CNon_Donors_a%7C11%2F25%2F2022&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Homepage&v27=New&c28=D%3Dv28&v28=footer-email-signup-QUVYO7ZR5JFUUR3MXEDX&c29=D%3Dv36&v36=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow&v42=di-253647-8EBBC6568E39AE90E892AA13B0977C0810&c49=D%3Dv49&v49=year%3D2022%20%7C%20month%3DNovember%20%7C%20date%3D28%20%7C%20day%3DMonday%20%7C%20time%3D8%3A33%3A01%20PM&c51=D%3Dv51&v51=team-tomorrow&v52=D%3Dg&c53=D%3Dv53&v53=donate-monthly-childrens-charity&c54=D%3Dv54&v54=Join%20Team%20Tomorrow&c55=D%3Dv27&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v95=2.61&v110=Launch&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1 HTTP/1.1
Host: smetrics.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CMCMID%7C73129340718868235532968733370560506841%7CMCAID%7CNONE%7CMCOPTOUT-1669692781s%7CNONE%7CMCAAMLH-1670290381%7C6%7CMCAAMB-1670290381%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687442|PC#4a83929b65174632bbf80d02abb8b625.37_0#1732930382; at_check=true; stc-analytics-source=Email|Email|SFMC|BF_GT_Preview|Non_Donors_a|11/25/2022; stc-session-count=NaN; _sfid_58d2={%22anonymousId%22:%22fe140b40407b8540%22%2C%22consents%22:[]}; _evga_c797={%22uuid%22:%22fe140b40407b8540%22}; stc-analytics-sub_source=|||||; _gcl_au=1.1.796663428.1669685581; s_ecid=MCMID%7C73129340718868235532968733370560506841; AMCVS_6B0E659F56A9E70D7F000101%40AdobeOrg=1; da_sid=8EBBC6568E39AE90E892AA13B0977C0810|3|0|3; da_lid=BD88F5659A79EA0B7DC3BB99F2953603A3|0|0|0; da_intState=; s_ppv=Join%2520Team%2520Tomorrow%2C17%2C17%2C939%2C1%2C5; s_ips=939; s_tp=5413; s_nr30=1669685581958-New; s_cc=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Tue, 29 Nov 2022 01:33:02 GMT
expires: Mon, 28 Nov 2022 01:33:02 GMT
last-modified: Wed, 30 Nov 2022 01:33:02 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_ecid=MCMID%7C73129340718868235532968733370560506841; Path=/; Domain=savethechildren.org;
etag: 3585622485223997440-4619622127525966786
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
pt.ispot.tv/v2/TC-4134-1.gif?app=web&type=visit
200 OK 43 B URL HTTP/2 pt.ispot.tv/v2/TC-4134-1.gif?app=web&type=visit
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 29ba9031be4bed78916face2e9c5f7fc
5bb4f538d932f769d6872470147221e18b9265ba
0227e0e4dea130eb6f3163aa3ab03720dce83a0e219c282189b03bc5b8a727e3
GET /v2/TC-4134-1.gif?app=web&type=visit HTTP/1.1
Host: pt.ispot.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
accept-ranges: bytes
date: Tue, 29 Nov 2022 01:33:02 GMT
set-cookie: pt=v2:5c2aedfe10adbc7fa0d39ce7a89e0e7722b8f7091f60696818cd3b860e840615|294d233fc2c8f6dde0916d8a56c7b2d101fe74353aace9a589814bcec2148130; Domain=ispot.tv; Path=/; Expires=Thu, 28 Nov 2024 01:33:02 GMT; SameSite=None; Secure
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 62ff4429643e45013b14f3e5871c1a4a
3f13256d19f8a48a42026f2c35885c0e33372a96
54f7f5e089cd46ec372945a25814cd7ce7919fe9733da8933a75684115c42f29
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 29 Nov 2022 01:33:02 GMT
Content-Type: application/ocsp-response
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 28 Nov 2022 19:29:36 GMT
Expires: Tue, 29 Nov 2022 19:29:36 GMT
ETag: "3f13256d19f8a48a42026f2c35885c0e33372a96"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3abfda95da9161a7940e489ba957e237
ddedb2266b851ea1e32ea00962e126b99d7709e4
7bddacb5331afb1e017c6a1e3cfaec6812354693597686f07328c2186200a538
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=132314
Date: Tue, 29 Nov 2022 01:33:02 GMT
Etag: "6384bf1f-1d7"
Expires: Wed, 30 Nov 2022 14:18:16 GMT
Last-Modified: Mon, 28 Nov 2022 14:01:03 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tNaktxbZI9sWnhqEREErXiEZYW-vuAA1dxoNJ3BgbANRNdttguP3vA==
Age: 1033
cm.everesttech.net/cm/dd?d_uuid=73470608126974612973006660100887103849
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/dd?d_uuid=73470608126974612973006660100887103849
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/dd?d_uuid=73470608126974612973006660100887103849 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Tue, 29 Nov 2022 01:33:02 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~Y4VhTgAAABx9MgNn; Domain=.everesttech.net; Expires=Wed, 29-Nov-2023 01:33:02 GMT; Path=/
everest_session_v2=Y4VhTgAAABx9MwNn; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://dpm.demdex.net/ibs:dpid=411&dpuuid=Y4VhTgAAABx9MgNn
Server: AMO-cookiemap/1.1
smetrics.savethechildren.org/b/ss/stcf.prod.us/5.1/JS-2.22.4-LCXS/s08152479504491?AQB=1&ndh=1&pf=1&t=29%2F10%2F2022%201%3A33%3A1%202%200&cid.&userid.&id=73129340718868235532968733370560506841&.userid&.cid&mid=73129340718868235532968733370560506841&aamlh=6&ce=Windows-1257&cl=SESSION&pageName=Join%20Team%20Tomorrow&g=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&cc=USD&events=event37&c2=D%3Dg&v2=D%3DpageName&v3=footer-email-signup&c10=D%3Dv95&v12=Email%7CEmail%7CSFMC%7CBF_GT_Preview%7CNon_Donors_a%7C11%2F25%2F2022&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Homepage&c28=D%3Dv28&v28=footer-email-signup-QUVYO7ZR5JFUUR3MXEDX&c29=D%3Dv36&c34=D%3Dv84&v36=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow&v42=di-253647-8EBBC6568E39AE90E892AA13B0977C0810&c51=D%3Dv51&v51=team-tomorrow&v52=D%3Dg&v53=donate-monthly-childrens-charity&v54=Join%20Team%20Tomorrow&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v84=Panel%7CEnewsletter%20Signup%7CRegion%207%20of%207%7C%7CAnonymous&v95=2.61&v110=Launch&pe=lnk_o&pev2=impression&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1
200 OK 43 B URL HTTP/2 smetrics.savethechildren.org/b/ss/stcf.prod.us/5.1/JS-2.22.4-LCXS/s08152479504491?AQB=1&ndh=1&pf=1&t=29%2F10%2F2022%201%3A33%3A1%202%200&cid.&userid.&id=73129340718868235532968733370560506841&.userid&.cid&mid=73129340718868235532968733370560506841&aamlh=6&ce=Windows-1257&cl=SESSION&pageName=Join%20Team%20Tomorrow&g=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&cc=USD&events=event37&c2=D%3Dg&v2=D%3DpageName&v3=footer-email-signup&c10=D%3Dv95&v12=Email%7CEmail%7CSFMC%7CBF_GT_Preview%7CNon_Donors_a%7C11%2F25%2F2022&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Homepage&c28=D%3Dv28&v28=footer-email-signup-QUVYO7ZR5JFUUR3MXEDX&c29=D%3Dv36&c34=D%3Dv84&v36=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow&v42=di-253647-8EBBC6568E39AE90E892AA13B0977C0810&c51=D%3Dv51&v51=team-tomorrow&v52=D%3Dg&v53=donate-monthly-childrens-charity&v54=Join%20Team%20Tomorrow&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v84=Panel%7CEnewsletter%20Signup%7CRegion%207%20of%207%7C%7CAnonymous&v95=2.61&v110=Launch&pe=lnk_o&pev2=impression&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1
IP
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/stcf.prod.us/5.1/JS-2.22.4-LCXS/s08152479504491?AQB=1&ndh=1&pf=1&t=29%2F10%2F2022%201%3A33%3A1%202%200&cid.&userid.&id=73129340718868235532968733370560506841&.userid&.cid&mid=73129340718868235532968733370560506841&aamlh=6&ce=Windows-1257&cl=SESSION&pageName=Join%20Team%20Tomorrow&g=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&cc=USD&events=event37&c2=D%3Dg&v2=D%3DpageName&v3=footer-email-signup&c10=D%3Dv95&v12=Email%7CEmail%7CSFMC%7CBF_GT_Preview%7CNon_Donors_a%7C11%2F25%2F2022&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Homepage&c28=D%3Dv28&v28=footer-email-signup-QUVYO7ZR5JFUUR3MXEDX&c29=D%3Dv36&c34=D%3Dv84&v36=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow&v42=di-253647-8EBBC6568E39AE90E892AA13B0977C0810&c51=D%3Dv51&v51=team-tomorrow&v52=D%3Dg&v53=donate-monthly-childrens-charity&v54=Join%20Team%20Tomorrow&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v84=Panel%7CEnewsletter%20Signup%7CRegion%207%20of%207%7C%7CAnonymous&v95=2.61&v110=Launch&pe=lnk_o&pev2=impression&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1 HTTP/1.1
Host: smetrics.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CMCMID%7C73129340718868235532968733370560506841%7CMCAID%7CNONE%7CMCOPTOUT-1669692781s%7CNONE%7CMCAAMLH-1670290381%7C6%7CMCAAMB-1670290381%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CMCCIDH%7C-87197698%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687442|PC#4a83929b65174632bbf80d02abb8b625.37_0#1732930382; at_check=true; stc-analytics-source=Email|Email|SFMC|BF_GT_Preview|Non_Donors_a|11/25/2022; stc-session-count=NaN; _sfid_58d2={%22anonymousId%22:%22fe140b40407b8540%22%2C%22consents%22:[]}; _evga_c797={%22uuid%22:%22fe140b40407b8540%22}; stc-analytics-sub_source=|||||; _gcl_au=1.1.796663428.1669685581; s_ecid=MCMID%7C73129340718868235532968733370560506841; AMCVS_6B0E659F56A9E70D7F000101%40AdobeOrg=1; da_sid=8EBBC6568E39AE90E892AA13B0977C0810|3|0|3; da_lid=BD88F5659A79EA0B7DC3BB99F2953603A3|0|0|0; da_intState=; s_ppv=Join%2520Team%2520Tomorrow%2C17%2C17%2C939%2C1%2C5; s_ips=939; s_tp=5413; s_nr30=1669685581968-New; s_cc=true; _uetsid=c38e51c06f8511edbc1b612a9a218e12; _uetvid=c38eab106f8511ed8cce797c37abbd52
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Tue, 29 Nov 2022 01:33:02 GMT
expires: Mon, 28 Nov 2022 01:33:02 GMT
last-modified: Wed, 30 Nov 2022 01:33:02 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_ecid=MCMID%7C73129340718868235532968733370560506841; Path=/; Domain=savethechildren.org;
etag: 3585622485585592320-4619639219575771901
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 6bfdd2750c64bfae58d9f728f9798f96
217bd499743d68340fc140e56878a8750767b289
d564ea29bbc355fe665c1fed0a7cb5b0034b7253dd1c8c6620874e88b9019a46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5838
Cache-Control: max-age=129543
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:02 GMT
Etag: "6384a187-138"
Expires: Wed, 30 Nov 2022 13:32:05 GMT
Last-Modified: Mon, 28 Nov 2022 11:54:47 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 312
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 52beb7547d56a7872c8b2ba41a8ba96b
e2a92074d3690aeb096589a1cb41cc09869e2d46
cda3bb062135821a3061ffc803299a66d19994c62fafe9eefea77166e110d337
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 29 Nov 2022 01:33:02 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 28 Nov 2022 20:46:05 GMT
Expires: Tue, 29 Nov 2022 20:46:05 GMT
ETag: "e2a92074d3690aeb096589a1cb41cc09869e2d46"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 62ff4429643e45013b14f3e5871c1a4a
3f13256d19f8a48a42026f2c35885c0e33372a96
54f7f5e089cd46ec372945a25814cd7ce7919fe9733da8933a75684115c42f29
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 29 Nov 2022 01:33:02 GMT
Content-Type: application/ocsp-response
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 28 Nov 2022 19:29:36 GMT
Expires: Tue, 29 Nov 2022 19:29:36 GMT
ETag: "3f13256d19f8a48a42026f2c35885c0e33372a96"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
t.co/i/adsct?bci=3&eci=2&event_id=8d9f284e-ec74-4590-996c-adde587156cb&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=1589766a-ca57-41da-884e-2dc1172870b7&tw_document_href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=8d9f284e-ec74-4590-996c-adde587156cb&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=1589766a-ca57-41da-884e-2dc1172870b7&tw_document_href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=8d9f284e-ec74-4590-996c-adde587156cb&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=1589766a-ca57-41da-884e-2dc1172870b7&tw_document_href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:02 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=9f1f9e58-bceb-431b-bd3c-81d63ef2043f; Max-Age=63072000; Expires=Thu, 28 Nov 2024 01:33:02 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: efe6acf6e8778db5
strict-transport-security: max-age=0
x-response-time: 108
x-connection-hash: 84b1af592cb11b0904bf2f86d8bff4304a7c0b6d574badb685eb763a2dcd9773
X-Firefox-Spdy: h2
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=217836965344497380
302 Found 0 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=217836965344497380
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=217836965344497380 HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Tue, 29 Nov 2022 01:33:02 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: CXZHJA4PCMAP9AB5PRMM
Set-Cookie: ad-id=A38Mronns0LIl7AGYWi9Vbo|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2023 01:33:02 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=217836965344497380&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4a930f217366d257d35c8aa1552bb583
f3df449c8856c81c8eb5edcd57e7899bad6e029c
8195ac6b1e3f832567823b797201ecf2805b4d5659cc4cfd8839d0d3d3b4b621
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=170040
Date: Tue, 29 Nov 2022 01:33:02 GMT
Etag: "63853f0d-1d7"
Expires: Thu, 01 Dec 2022 00:47:02 GMT
Last-Modified: Mon, 28 Nov 2022 23:06:53 GMT
Server: ECS (bsa/EB15)
X-Cache: Miss from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: eRhJmYfts_S8e9jORaSFNohZwLU4jzhlTz7L3YI1SnGW9TjEY-gWhw==
Age: 6010
ocsp.digicert.com/
200 OK 471 B IP
Hash b62c6114c4d6ee96fc0909a8984bb0b0
2549fdb41dc42ebe486068bd7bce7a0dd5952cef
594f03bc6a1adadfba8412465d6b95387091b14f2572a6d8d96c69739b4f0635
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=131967
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:03 GMT
Etag: "6384c1ce-1d7"
Expires: Wed, 30 Nov 2022 14:12:30 GMT
Last-Modified: Mon, 28 Nov 2022 14:12:30 GMT
Server: nginx
Content-Length: 471
tags.wdsvc.net/controller.js?id=100229
302 Found 0 B URL HTTP/1.1 tags.wdsvc.net/controller.js?id=100229
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /controller.js?id=100229 HTTP/1.1
Host: tags.wdsvc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: private, no-cache
location: https://tags.wdsvc.net/container.js?id=100229&v=4.10&t=1669685583030
Set-Cookie: _wdTest=accept; Domain=.wdsvc.net; Path=/; Max-Age=30; SameSite=none; secure; HttpOnly
wds_random=2022-11-29T01:33:03.030Z~2022-11-29T01:33:03.030Z|2995182159131095|40|; expires=Fri, 28 Nov 2025 01:33:03 GMT; domain=.wdsvc.net;path=/;SameSite=none; secure; HttpOnly
Date: Tue, 29 Nov 2022 01:33:03 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash b5388a8fb62d25c07f47897a153802eb
9f84f1b57f1275ec1def921879c03672c832607c
7fd30fc5fd5dcf1a9b3c4e71ad559b686da88937e141e14cc6e9f78fc880ba22
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 29 Nov 2022 01:33:02 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 28 Nov 2022 22:04:53 GMT
Expires: Tue, 29 Nov 2022 22:04:53 GMT
ETag: "9f84f1b57f1275ec1def921879c03672c832607c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
w.usabilla.com/0b7d56c9da02.js?lv=1
200 OK 11 kB URL HTTP/2 w.usabilla.com/0b7d56c9da02.js?lv=1
IP
File type ASCII text, with very long lines (632)
Hash 5b10c5e97afc68693ffdfc76b81710fa
50254c0882748a86ebca82c070d8a098ff15b7e7
27f8d4aa1ee610542bcec3888af95eec283652efaaf51cee625e602b4dbc1728
GET /0b7d56c9da02.js?lv=1 HTTP/1.1
Host: w.usabilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:03 GMT
content-type: text/javascript
content-length: 10750
cache-control: public,max-age=0
content-encoding: gzip
etag: "f13085756416467a0a5f92ece874d15e"
pragma: no-cache
x-widget-server: 2.1
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2ecf462024902c612270893e97951c27
e989df0c0767b09bb0316db511b47b496a95401c
8cca9d2bad98b138736223b1486aa65a9919437dade87ae3222c856f1e269cb8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=150410
Date: Tue, 29 Nov 2022 01:33:03 GMT
Etag: "6384fa1b-1d7"
Expires: Wed, 30 Nov 2022 19:19:53 GMT
Last-Modified: Mon, 28 Nov 2022 18:12:43 GMT
Server: ECS (nyb/1D35)
X-Cache: Miss from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: OpXhcOEGEsCKZdmgdQvkgCUQx81Co_7B3AzkpSVgoapnrssf_JP3hw==
Age: 4030
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=217836965344497380&dcc=t
200 OK 65 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=217836965344497380&dcc=t
IP
File type HTML document, ASCII text
Hash 22fdf49482d8200e8f305bbe262eff14
f254bd4053267c2cf46675613e689016d8b7f775
115d83ece49fd1c5769409aab9d78572eed86cd38a0556b4cdeeac82c83091d3
GET /iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=217836965344497380&dcc=t HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Tue, 29 Nov 2022 01:33:03 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 65
Connection: keep-alive
x-amz-rid: 8BDAWTXNQS1BD9ECQB8V
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
d6tizftlrpuof.cloudfront.net/themes/production/save-the-children-usa-button-18e985c8f1327aa5b0db2be1ab660ba6.png
200 OK 9.2 kB URL HTTP/1.1 d6tizftlrpuof.cloudfront.net/themes/production/save-the-children-usa-button-18e985c8f1327aa5b0db2be1ab660ba6.png
IP
File type PNG image data, 159 x 523, 8-bit/color RGB, non-interlaced\012- data
Hash 18e985c8f1327aa5b0db2be1ab660ba6
40b959e93c2a7521f3ac03bdc6952d3316bfa8f8
9fbb05adcdc2317148fbaaf7c56be51c9246d351c9ae5235eb09dcd0ee0da552
GET /themes/production/save-the-children-usa-button-18e985c8f1327aa5b0db2be1ab660ba6.png HTTP/1.1
Host: d6tizftlrpuof.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 9208
Connection: keep-alive
Date: Thu, 17 Nov 2022 19:43:21 GMT
Last-Modified: Tue, 08 Nov 2022 16:00:18 GMT
ETag: "18e985c8f1327aa5b0db2be1ab660ba6"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=315360000, no-transform, public
x-amz-version-id: UUIaS9R3j_VdIQipfTJ5dnr2koEgl3_W
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _PmhUqGh8p2SiMVQ0Vz0QjR5fERZDf32-lz_Ba454VQ6Kvj67JANZA==
Age: 971383
tr2.smarterhq.io/app1/SmarterHandler.ashx?r=390064998&i=fyl6dahrce-1092&cb=_smtr.postprocess&cu=true&bv=2.7.14&utc=0&ctid=29998253&pt=5&href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&hostn=www.savethechildren.org&pathn=%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow
200 OK 295 B URL HTTP/2 tr2.smarterhq.io/app1/SmarterHandler.ashx?r=390064998&i=fyl6dahrce-1092&cb=_smtr.postprocess&cu=true&bv=2.7.14&utc=0&ctid=29998253&pt=5&href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&hostn=www.savethechildren.org&pathn=%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow
IP
File type ASCII text, with no line terminators
Hash 2869141063599a59b731b2bfb289a7d7
3dba80bd79226961793f170aa623b132ffe41e0b
b2347baf4548d31f58a5a385b5017d8eace8a4165b157952f2c4c8855cb39efd
GET /app1/SmarterHandler.ashx?r=390064998&i=fyl6dahrce-1092&cb=_smtr.postprocess&cu=true&bv=2.7.14&utc=0&ctid=29998253&pt=5&href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&hostn=www.savethechildren.org&pathn=%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow HTTP/1.1
Host: tr2.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:03 GMT
content-type: text/javascript
content-length: 295
server: Kestrel
cache-control: no-store,no-cache
pragma: no-cache
X-Firefox-Spdy: h2
tags.wdsvc.net/container.js?id=100229&v=4.10&t=1669685583030
200 OK 27 kB URL HTTP/1.1 tags.wdsvc.net/container.js?id=100229&v=4.10&t=1669685583030
IP
File type ASCII text, with very long lines (27353), with no line terminators
Hash def5bc584b92a66c59064b6af1839a12
8387fec0cd1541b67921a3234aceb0c27a067a0b
8f4effde7a4a04ea3f1c3f1e4cb01a7e9b71b3d7b41b73fac63e8962a3fd2c57
GET /container.js?id=100229&v=4.10&t=1669685583030 HTTP/1.1
Host: tags.wdsvc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Cookie: _wdTest=accept; wds_random=2022-11-29T01:33:03.030Z~2022-11-29T01:33:03.030Z|2995182159131095|40|
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-length: 27353
Expires: Mon, 3 Jan 2005 13:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Set-Cookie: wds_random=2022-11-29T01:33:03.030Z~2022-11-29T01:33:03.030Z|2995182159131095|40|; expires=Fri, 28 Nov 2025 01:33:03 GMT; domain=.wdsvc.net;path=/; SameSite=none; secure; HttpOnly
Date: Tue, 29 Nov 2022 01:33:03 GMT
Connection: keep-alive
Keep-Alive: timeout=5
tr2.smarterhq.io/app1/smtr1x1.gif?r=1695708635&action=crm&i=fyl6dahrce-1092&modalc=638052823832064581%5E0184c104-1d66-4f8e-9053-33390055a4c9%5E0184c104-1d66-4492-98a3-a00b4807c303%5E0%5E91.90.42.154&dwId=73129340718868235532968733370560506841&bv=2.7.14
200 OK 43 B URL HTTP/2 tr2.smarterhq.io/app1/smtr1x1.gif?r=1695708635&action=crm&i=fyl6dahrce-1092&modalc=638052823832064581%5E0184c104-1d66-4f8e-9053-33390055a4c9%5E0184c104-1d66-4492-98a3-a00b4807c303%5E0%5E91.90.42.154&dwId=73129340718868235532968733370560506841&bv=2.7.14
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /app1/smtr1x1.gif?r=1695708635&action=crm&i=fyl6dahrce-1092&modalc=638052823832064581%5E0184c104-1d66-4f8e-9053-33390055a4c9%5E0184c104-1d66-4492-98a3-a00b4807c303%5E0%5E91.90.42.154&dwId=73129340718868235532968733370560506841&bv=2.7.14 HTTP/1.1
Host: tr2.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:03 GMT
content-type: image/gif
content-length: 43
server: Kestrel
cache-control: no-store,no-cache
pragma: no-cache
X-Firefox-Spdy: h2
tr2.smarterhq.io/app1/SmarterHandler.ashx?r=1590000639&i=fyl6dahrce-1092&cb=_smtr.postprocess&bv=2.7.14&utc=0&ctid=29998253&pt=5&href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&hostn=www.savethechildren.org&pathn=%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow&modalc=638052823832064581^0184c104-1d66-4f8e-9053-33390055a4c9^0184c104-1d66-4492-98a3-a00b4807c303^0^91.90.42.154
200 OK 295 B URL HTTP/2 tr2.smarterhq.io/app1/SmarterHandler.ashx?r=1590000639&i=fyl6dahrce-1092&cb=_smtr.postprocess&bv=2.7.14&utc=0&ctid=29998253&pt=5&href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&hostn=www.savethechildren.org&pathn=%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow&modalc=638052823832064581^0184c104-1d66-4f8e-9053-33390055a4c9^0184c104-1d66-4492-98a3-a00b4807c303^0^91.90.42.154
IP
File type ASCII text, with no line terminators
Hash 09422f4c13075debcfb792fb09c55cfd
78566c1fb2cefc3563cc71c2870ede7ce148fce2
a4bee27a179f236fb0136151277cb62262d6aac161424d5fcdbf909a89a5a3c3
GET /app1/SmarterHandler.ashx?r=1590000639&i=fyl6dahrce-1092&cb=_smtr.postprocess&bv=2.7.14&utc=0&ctid=29998253&pt=5&href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&hostn=www.savethechildren.org&pathn=%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow&modalc=638052823832064581^0184c104-1d66-4f8e-9053-33390055a4c9^0184c104-1d66-4492-98a3-a00b4807c303^0^91.90.42.154 HTTP/1.1
Host: tr2.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:03 GMT
content-type: text/javascript
content-length: 295
server: Kestrel
cache-control: no-store,no-cache
pragma: no-cache
X-Firefox-Spdy: h2
tags.wdsvc.net/tpc-eval/?lid=184c1041d21-tags5-aa41a30a1f1d7
200 OK 21 B URL HTTP/1.1 tags.wdsvc.net/tpc-eval/?lid=184c1041d21-tags5-aa41a30a1f1d7
IP
File type ASCII text, with no line terminators
Hash 003a8361d4dd772481d7141c6ffe7ca5
1edd2f58fba4ac9191493fb71a5d2c2407e34c56
b0e70b299ab9c122ad93531fa8e5309833baecd53dd55c992c538f8b33bfa22d
GET /tpc-eval/?lid=184c1041d21-tags5-aa41a30a1f1d7 HTTP/1.1
Host: tags.wdsvc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: _wdTest=accept; wds_random=2022-11-29T01:33:03.030Z~2022-11-29T01:33:03.030Z|2995182159131095|40|
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-length: 21
Expires: Mon, 3 Jan 2005 13:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Date: Tue, 29 Nov 2022 01:33:03 GMT
Connection: keep-alive
Keep-Alive: timeout=5
app.leadsrx.com/visitor.js
200 OK 19 kB URL HTTP/2 app.leadsrx.com/visitor.js
IP
File type ASCII text, with very long lines (18735), with no line terminators
Hash 0a4109c065352458bee4e9cc98e1fbce
1d44e1811ea9409f12e88fc42c8a734d3316293b
6b5116bd2cb4809c6634b99a9b1ea0a0aeda596a94817682a0e4811e35eccc58
GET /visitor.js HTTP/1.1
Host: app.leadsrx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:03 GMT
content-type: application/javascript
content-length: 18735
server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
last-modified: Tue, 29 Nov 2022 00:22:55 GMT
etag: "492f-5ee90fd44fa92"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 793a2cca052957f4c74714f4e661031b
fd11181924413f96af9a184eb26587e6f09fc025
5262aed081462db2d15f87f554ee7c2965a720e5f94f1dbfd011f8d529cbc69d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 01:33:03 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 23:26:23 GMT
Expires: Mon, 05 Dec 2022 23:26:22 GMT
Etag: "fd11181924413f96af9a184eb26587e6f09fc025"
Cache-Control: max-age=596598,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771797d25bb6b515-OSL
onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184c104-1d66-4f8e-9053-33390055a4c9&sessionId=0184c104-1d66-4492-98a3-a00b4807c303&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&callback=_smtr.postprocess&r=339034287&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253
200 OK 54 kB URL HTTP/2 onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184c104-1d66-4f8e-9053-33390055a4c9&sessionId=0184c104-1d66-4492-98a3-a00b4807c303&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&callback=_smtr.postprocess&r=339034287&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253
IP
Hash 930f60be654ca509387ba037e02ba311
59119f48d46394d81b15837199ce9df9393cb751
f6648598efa986723b2d19145ecb3e8581079a51863776a0f86b549d3993fbe9
GET /api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184c104-1d66-4f8e-9053-33390055a4c9&sessionId=0184c104-1d66-4492-98a3-a00b4807c303&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&callback=_smtr.postprocess&r=339034287&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253 HTTP/1.1
Host: onsiteshq.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:03 GMT
content-type: text/plain; charset=utf-8
server: Kestrel
x-request-id: 0HMMBQC6TM9EN:000031B1
X-Firefox-Spdy: h2
100.20.58.101/is
200 OK 32 B IP
File type ASCII text, with no line terminators
Hash 49b11a4e940fe66a34afd097311337f3
5864dd9fbf085a245240bc1b8b1adb5dae1fe8b8
95d231f78756564ea9911be9847fff068fcd87c1f1ce2c953af3bf9a3a3d0a77
Analyzer Verdict Alert quad9 Sinkholed
GET /is HTTP/1.1
Host: 100.20.58.101
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Origin: https://www.savethechildren.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 29 Nov 2022 01:33:03 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184c104-1d66-4f8e-9053-33390055a4c9&sessionId=0184c104-1d66-4492-98a3-a00b4807c303&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&callback=_smtr.postprocess&r=578909760&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253
200 OK 4.7 kB URL HTTP/2 onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184c104-1d66-4f8e-9053-33390055a4c9&sessionId=0184c104-1d66-4492-98a3-a00b4807c303&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&callback=_smtr.postprocess&r=578909760&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253
IP
Hash fc48de50fb95616ae4675ad295007c92
fe82b1109ef8e5a1f1cd20b654a86e210ff41b22
eaa36761e605bab25bd744cafa3ba7dc835e55959bcfa62984535d2fbe1a5ccd
GET /api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184c104-1d66-4f8e-9053-33390055a4c9&sessionId=0184c104-1d66-4492-98a3-a00b4807c303&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&callback=_smtr.postprocess&r=578909760&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253 HTTP/1.1
Host: onsiteshq.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:03 GMT
content-type: text/plain; charset=utf-8
server: Kestrel
x-request-id: 0HMMBQC6TMT0O:000005A9
X-Firefox-Spdy: h2
dpm.demdex.net/ibs:dpid=411&dpuuid=Y4VhTgAAABx9MgNn
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=411&dpuuid=Y4VhTgAAABx9MgNn
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=411&dpuuid=Y4VhTgAAABx9MgNn HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-00d737c39.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y4VhTgAAABx9MgNn
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=88532153908855609392367488751071881693; Max-Age=15552000; Expires=Sun, 28 May 2023 01:33:04 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: TUVOVSlPQPo=
Content-Length: 0
Connection: keep-alive
bat.bing.com/action/0?ti=5439503&Ver=2&mid=57ed3f51-349d-47e9-a80b-e106ce1d7b76&sid=c38e51c06f8511edbc1b612a9a218e12&vid=c38eab106f8511ed8cce797c37abbd52&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Join%20Team%20Tomorrow%20%7C%20Save%20the%20Children&p=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&r=<=3869&evt=pageLoad&sv=1&rn=917962
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=5439503&Ver=2&mid=57ed3f51-349d-47e9-a80b-e106ce1d7b76&sid=c38e51c06f8511edbc1b612a9a218e12&vid=c38eab106f8511ed8cce797c37abbd52&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Join%20Team%20Tomorrow%20%7C%20Save%20the%20Children&p=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&r=<=3869&evt=pageLoad&sv=1&rn=917962
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5439503&Ver=2&mid=57ed3f51-349d-47e9-a80b-e106ce1d7b76&sid=c38e51c06f8511edbc1b612a9a218e12&vid=c38eab106f8511ed8cce797c37abbd52&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Join%20Team%20Tomorrow%20%7C%20Save%20the%20Children&p=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&r=<=3869&evt=pageLoad&sv=1&rn=917962 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=25380FE4D2EF6D31287E1D8FD3B86CE9; domain=.bing.com; expires=Sun, 24-Dec-2023 01:33:04 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F3F7FEF4DCF2446088F490DE710207E8 Ref B: OSL30EDGE0411 Ref C: 2022-11-29T01:33:04Z
date: Tue, 29 Nov 2022 01:33:04 GMT
X-Firefox-Spdy: h2
js.adsrvr.org/up_loader.1.1.0.js
200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8dc722d27824e60548fd25752623cd07
33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Mon, 28 Nov 2022 23:31:36 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: svDzhBLFlzoqqCrE0iN0XAKrlb94qqstiQlRoyvgFrw6-JGycVlS0A==
Age: 7289
ocsp.digicert.com/
200 OK 471 B IP
Hash af25abbc1f9776cf78b07837dbea38a0
1883049bac2e92f8b3107f6435f00b83d8f4c117
663a6d77de7e3c835bcbb4b567eb28053755bf50ddab14b3f668367a85efdf17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 417
Cache-Control: max-age=121980
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:04 GMT
Etag: "6384992b-1d7"
Expires: Wed, 30 Nov 2022 11:26:04 GMT
Last-Modified: Mon, 28 Nov 2022 11:19:07 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 29 Nov 2022 00:41:08 GMT
expires: Tue, 29 Nov 2022 02:41:08 GMT
cache-control: public, max-age=7200
age: 3116
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184c104-1d66-4f8e-9053-33390055a4c9&sessionId=0184c104-1d66-4492-98a3-a00b4807c303&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&callback=_smtr.postprocess&r=1899674759&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253
200 OK 28 kB URL HTTP/2 onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184c104-1d66-4f8e-9053-33390055a4c9&sessionId=0184c104-1d66-4492-98a3-a00b4807c303&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&callback=_smtr.postprocess&r=1899674759&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253
IP
Hash 7bf85948b6e0f0901d7b38a7bfc43e8f
fefae3fa0565980c5a7a060ca2e6229225b002eb
ba11c6147c9cb69b84b4783688ea37be181575123a1e1f2ad68173a522ce54b0
GET /api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0184c104-1d66-4f8e-9053-33390055a4c9&sessionId=0184c104-1d66-4492-98a3-a00b4807c303&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&callback=_smtr.postprocess&r=1899674759&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=true&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253 HTTP/1.1
Host: onsiteshq.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:03 GMT
content-type: text/plain; charset=utf-8
server: Kestrel
x-request-id: 0HMMBQC6TMJOG:00004208
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash aeecd8b886dda8d959c5774bc06b974a
3420c3a2928b4d5bc2cb32a2cbf70d18f2cc64f2
34f3e4ecf70e0269c6b732cfe169093b366a3d8dc3fb91f253a8af5fbe8cc1da
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4761
Cache-Control: max-age=169499
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:04 GMT
Etag: "638541d2-139"
Expires: Thu, 01 Dec 2022 00:38:03 GMT
Last-Modified: Mon, 28 Nov 2022 23:18:42 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 471 B IP
Hash af25abbc1f9776cf78b07837dbea38a0
1883049bac2e92f8b3107f6435f00b83d8f4c117
663a6d77de7e3c835bcbb4b567eb28053755bf50ddab14b3f668367a85efdf17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 417
Cache-Control: max-age=121980
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:04 GMT
Etag: "6384992b-1d7"
Expires: Wed, 30 Nov 2022 11:26:04 GMT
Last-Modified: Mon, 28 Nov 2022 11:19:07 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.dgtrx.com/scripts/sdk/everflow.js
200 OK 18 kB URL HTTP/2 www.dgtrx.com/scripts/sdk/everflow.js
IP
File type Unicode text, UTF-8 text, with very long lines (59111)
Hash 31f03b5ed54b119768fffa9f1f6f543a
183263b0a4d049cdbc552d9865e3a70325725c6e
89ea64d0c5e82ecc0dcb1271a9d648334308eb0ef4c2ea0157ff51567808cf01
GET /scripts/sdk/everflow.js HTTP/1.1
Host: www.dgtrx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 01:33:02 GMT
content-type: text/javascript
cache-control: max-age=14400
vary: Origin
x-eflow-request-id: a65908f3-7d6d-4a04-a8f0-921c9e9395d9
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=8d9f284e-ec74-4590-996c-adde587156cb&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=1589766a-ca57-41da-884e-2dc1172870b7&tw_document_href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=8d9f284e-ec74-4590-996c-adde587156cb&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=1589766a-ca57-41da-884e-2dc1172870b7&tw_document_href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=8d9f284e-ec74-4590-996c-adde587156cb&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=1589766a-ca57-41da-884e-2dc1172870b7&tw_document_href=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:03 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_o1auJydaNouz0T/QxPDmBQ=="; Max-Age=63072000; Expires=Thu, 28 Nov 2024 01:33:04 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: bd10495f90d2b1ce
strict-transport-security: max-age=631138519
x-response-time: 104
x-connection-hash: b869c0307071fabd3f9d77884e0e4ded8cca5590ea8ed99ea9513a9ccb6e6f8a
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=00569da938e06cb48f6f60ece5ae3d324c
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00569da938e06cb48f6f60ece5ae3d324c
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=00569da938e06cb48f6f60ece5ae3d324c HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 01:33:04 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 2fd1d03feac0dfc7bb12440d9dd1e657
content-encoding: gzip
d1n00d49gkbray.cloudfront.net/js/savethechildren.js
200 OK 29 kB URL HTTP/2 d1n00d49gkbray.cloudfront.net/js/savethechildren.js
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash f801ff41d8784a2cae8631897adfbadc
55eecc7caa8c5d65ce222e77a4f47d278596a766
447c8451e1b816d4234d9e93b344bec51d5f1dd1653313b5e9a9942c459caaf5
GET /js/savethechildren.js HTTP/1.1
Host: d1n00d49gkbray.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Nov 2022 16:14:06 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: Vunt1U7oJIkDTN.qZ_uCtPtrw_Dgk_SZ
server: AmazonS3
content-encoding: gzip
date: Mon, 28 Nov 2022 02:09:46 GMT
etag: W/"2c1c4c57b5a059d7a103cd92f18e8960"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PIuy9ML_29M_vnIzJ9MNZ4_iARMq8uQOowyuTbDGAMzJhH9b9UtucQ==
age: 84196
X-Firefox-Spdy: h2
insight.adsrvr.org/tags/f35s4e0/qa0mevt/iframe
303 See Other 183 B URL HTTP/2 insight.adsrvr.org/tags/f35s4e0/qa0mevt/iframe
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 9996833ba4873a6a2b2ae4fa08891598
ad2582c24fd6f2ff473b251542508e6a4f34f100
db2d6dec0779bc0e1721031b88f6383a99b2516d62b7aafc69d3333467271110
GET /tags/f35s4e0/qa0mevt/iframe HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 303 See Other
date: Tue, 29 Nov 2022 01:33:04 GMT
content-type: text/html; charset=UTF-8
content-length: 183
location: https://d1eoo1tco6rr5e.cloudfront.net/f35s4e0/qa0mevt/iframe
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
insight.adsrvr.org/tags/f35s4e0/n4od8ve/iframe
303 See Other 183 B URL HTTP/2 insight.adsrvr.org/tags/f35s4e0/n4od8ve/iframe
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 4b7baa44a9cb0b8ff32d59e257be92f6
fb817d04f1093d20bcd5e6ab21a4d2f383aa6457
53456e8469debdb17dc2a874d2efbb238f4afec996ead18581dfcfe154ec5ce1
GET /tags/f35s4e0/n4od8ve/iframe HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 303 See Other
date: Tue, 29 Nov 2022 01:33:04 GMT
content-type: text/html; charset=UTF-8
content-length: 183
location: https://d1eoo1tco6rr5e.cloudfront.net/f35s4e0/n4od8ve/iframe
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
d1eoo1tco6rr5e.cloudfront.net/f35s4e0/qa0mevt/iframe
200 OK 138 B URL HTTP/1.1 d1eoo1tco6rr5e.cloudfront.net/f35s4e0/qa0mevt/iframe
IP
File type ASCII text, with CRLF line terminators
Hash d6f3ec45e4993f46db4a53dc1f01b599
2c7a74dce73d73c8435847d43c20d47c6ea53a1d
d9479c1288cf240cf605993ef0fcda98d749b6b7fb8e4ee584be29ed1856aca3
GET /f35s4e0/qa0mevt/iframe HTTP/1.1
Host: d1eoo1tco6rr5e.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Date: Mon, 28 Nov 2022 06:51:38 GMT
Last-Modified: Sat, 02 Oct 2021 00:02:02 GMT
ETag: "d6f3ec45e4993f46db4a53dc1f01b599"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=86400
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: NTm8Fic5nfUtQrgL47_ejiRpmpyzAg4uOzTyc9k86Hum6HnGX8IO6A==
Age: 67287
d1eoo1tco6rr5e.cloudfront.net/f35s4e0/n4od8ve/iframe
200 OK 132 B URL HTTP/1.1 d1eoo1tco6rr5e.cloudfront.net/f35s4e0/n4od8ve/iframe
IP
File type ASCII text, with CRLF line terminators
Hash bc0416914b6a26dae5dfd258e572b291
75809bf17bb8d45f5f829b7b625ded35e506d2af
50bb9c8f4af577f3289f597f2441f177967721b438fd1737b937ef69f4a58062
GET /f35s4e0/n4od8ve/iframe HTTP/1.1
Host: d1eoo1tco6rr5e.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 132
Connection: keep-alive
Last-Modified: Sat, 02 Oct 2021 00:02:02 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 28 Nov 2022 22:45:31 GMT
Cache-Control: max-age=86400
ETag: "bc0416914b6a26dae5dfd258e572b291"
X-Cache: Hit from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: clfY1eO8e1kad6pRkrykozWJOiy-nF-WhJ_mqEOcBN61eVDZgDtIZA==
Age: 12991
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y4VhTgAAABx9MgNn
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y4VhTgAAABx9MgNn
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y4VhTgAAABx9MgNn HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v045-06d6ad95b.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: vidC/rWRS8o=
Content-Length: 59
Connection: keep-alive
cdn.linkedin.oribi.io/partner/4092132/domain/savethechildren.org/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/4092132/domain/savethechildren.org/token
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /partner/4092132/domain/savethechildren.org/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.savethechildren.org/
Origin: https://www.savethechildren.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Mon, 28 Nov 2022 02:30:54 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qFS8T-p_l-kk7EJ4L_rpItzmoqhcldGkyShrPE94utKzeykIrNdkrQ==
age: 82930
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 879cba431d8b6f2717a750acd5ca7156
1d4eb23583d48dd6801a104aa20046b34acd0efe
31223aada310e8d8e3fa41e22ee23019a07b362b3b062ccdc10600c22071bd78
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2
302 Found 0 B URL HTTP/1.1 s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2 HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Tue, 29 Nov 2022 01:33:04 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: HHZ7M5GHF4XPB5YGBBZ0
Set-Cookie: ad-id=A1x9qq5X706Ot2nj4_Nno8s|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2023 01:33:04 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
www.google.no/pagead/1p-user-list/1069852215/?random=1669685582189&cv=11&fst=1669683600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&tiba=Join%20Team%20Tomorrow%20%7C%20Save%20the%20Children&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2841316674&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1069852215/?random=1669685582189&cv=11&fst=1669683600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&tiba=Join%20Team%20Tomorrow%20%7C%20Save%20the%20Children&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2841316674&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1069852215/?random=1669685582189&cv=11&fst=1669683600000&bg=ffffff&guid=ON&async=1>m=2oab90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&tiba=Join%20Team%20Tomorrow%20%7C%20Save%20the%20Children&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2841316674&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 29 Nov 2022 01:33:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 798c6088f000b3a2464e23a92271c24d
2a53b3d3bd4a9104c79595f664276db5b32b9bad
dcccfc9bb4da634286d08301fcf23be3ae26bb429b35349fb72dde530fdb3ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 01:33:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2&dcc=t
200 OK 43 B URL HTTP/1.1 s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2&dcc=t
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6851dbf491ae442da3314f19e8aff085
ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
GET /iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2&dcc=t HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Tue, 29 Nov 2022 01:33:04 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
x-amz-rid: WD25ATVRYQ6XV83DEY0S
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
px.ads.linkedin.com/collect?v=2&fmt=js&pid=4092132&time=1669685583453&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=4092132&time=1669685583453&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=4092132&time=1669685583453&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4092132%26time%3D1669685583453%26url%3Dhttps%253A%252F%252Fwww.savethechildren.org%252Fus%252Fdonate-monthly-childrens-charity%252Fteam-tomorrow%253Fcid%253DEmail%253ASFMC%253ABF_GT_Preview%253ANon_Donors_a%253A112522%2526smtrctid%253D29998253%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQL9fyKWidATtAAAAYTBBCNSSlnpPWRGw6WRs2DKhDC9l3vf6cjg1gBURECEnDY__C3LTxxCcnPMCg; Max-Age=2592000; Expires=Thu, 29 Dec 2022 01:33:04 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQLC1gYpWgQMHgAAAYTBBCNStu-ZmUJKSnXCV0CmfaGlG9AhxlnH7EZHUYfbc7EaCcZiSQ-Rz-id3RciGIlaZg; Max-Age=2592000; Expires=Thu, 29 Dec 2022 01:33:04 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&ebbb6e1d-2ffd-41dd-895d-a75bf85b44f4"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 29-Nov-2023 01:33:04 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2378:u=1:x=1:i=1669685584:t=1669771984:v=2:sig=AQEeyMX1N_1f1G-jt31EBdbVSba4oCw3"; Expires=Wed, 30 Nov 2022 01:33:04 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXukfgpq/QBDZf08RvwEA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: BC46DC179ECF45AA909C160D2450AF22 Ref B: OSL30EDGE0113 Ref C: 2022-11-29T01:33:04Z
date: Tue, 29 Nov 2022 01:33:04 GMT
content-length: 0
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=175734969458030&ev=PageView&dl=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&rl=&if=false&ts=1669685584076&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%222690107274549883%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22USD%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22476958242912126%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22USD%22%7D%7D%7D&par[2]=%7B%22extractorID%22%3A%221151582051705481%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[3]=%7B%22extractorID%22%3A%22554416668662072%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[4]=%7B%22extractorID%22%3A%22512804019569006%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1669685584075.1219714796&it=1669685583490&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=175734969458030&ev=PageView&dl=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&rl=&if=false&ts=1669685584076&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%222690107274549883%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22USD%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22476958242912126%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22USD%22%7D%7D%7D&par[2]=%7B%22extractorID%22%3A%221151582051705481%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[3]=%7B%22extractorID%22%3A%22554416668662072%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[4]=%7B%22extractorID%22%3A%22512804019569006%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1669685584075.1219714796&it=1669685583490&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=175734969458030&ev=PageView&dl=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&rl=&if=false&ts=1669685584076&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%222690107274549883%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22USD%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22476958242912126%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22USD%22%7D%7D%7D&par[2]=%7B%22extractorID%22%3A%221151582051705481%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[3]=%7B%22extractorID%22%3A%22554416668662072%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[4]=%7B%22extractorID%22%3A%22512804019569006%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1669685584075.1219714796&it=1669685583490&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 29 Nov 2022 01:33:05 GMT
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4092132%26time%3D1669685583453%26url%3Dhttps%253A%252F%252Fwww.savethechildren.org%252Fus%252Fdonate-monthly-childrens-charity%252Fteam-tomorrow%253Fcid%253DEmail%253ASFMC%253ABF_GT_Preview%253ANon_Donors_a%253A112522%2526smtrctid%253D29998253%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4092132%26time%3D1669685583453%26url%3Dhttps%253A%252F%252Fwww.savethechildren.org%252Fus%252Fdonate-monthly-childrens-charity%252Fteam-tomorrow%253Fcid%253DEmail%253ASFMC%253ABF_GT_Preview%253ANon_Donors_a%253A112522%2526smtrctid%253D29998253%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4092132%26time%3D1669685583453%26url%3Dhttps%253A%252F%252Fwww.savethechildren.org%252Fus%252Fdonate-monthly-childrens-charity%252Fteam-tomorrow%253Fcid%253DEmail%253ASFMC%253ABF_GT_Preview%253ANon_Donors_a%253A112522%2526smtrctid%253D29998253%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=4092132&time=1669685583453&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&53e45d15-afb6-4579-86de-a013f213db13"; Domain=.linkedin.com; Expires=Wed, 29-Nov-2023 01:33:05 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20221129013305b4dc6df8-ef89-4f10-8722-31443b369427AQHo3LkuOzD6LvKo2-GT2vvroQZyfqTG"; Domain=.www.linkedin.com; Expires=Wed, 29-Nov-2023 01:33:05 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2Njk2ODU1ODU7MjswMjHhSBTFVhavoUS0yyqk5vaebbklGfAHMbdhX7eE143YEg==; Domain=.linkedin.com; Expires=Sun, 28 May 2023 01:33:05 GMT; Path=/; Secure; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2378:u=1:x=1:i=1669685585:t=1669771985:v=2:sig=AQFpFj91tiZZeLR8y6iah4ahwxZnJ2So"; Expires=Wed, 30 Nov 2022 01:33:05 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/status linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXukfgv8kCTQ4tvGtjR9Q==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 237A622DD5CE4A13B48E4B4EAA95D6EF Ref B: OSL30EDGE0113 Ref C: 2022-11-29T01:33:05Z
date: Tue, 29 Nov 2022 01:33:04 GMT
content-length: 0
X-Firefox-Spdy: h2
app.leadsrx.com/visitor.php?acctTag=yqahgl42094&tz=0&ref=&u=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&t=Join%20Team%20Tomorrow%20%7C%20Save%20the%20Children&lc=null&anon=0&vin=null
200 OK 105 B URL HTTP/2 app.leadsrx.com/visitor.php?acctTag=yqahgl42094&tz=0&ref=&u=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&t=Join%20Team%20Tomorrow%20%7C%20Save%20the%20Children&lc=null&anon=0&vin=null
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 049fbd566eb7dda832cab760337410bc
427fc865a1d1f176a577a9fa0ffae53ae1d7679e
b42cee4e1c87e8770c2e43a367d8bfa0b44940fce23eebc6d645d7dcf251761a
GET /visitor.php?acctTag=yqahgl42094&tz=0&ref=&u=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&t=Join%20Team%20Tomorrow%20%7C%20Save%20the%20Children&lc=null&anon=0&vin=null HTTP/1.1
Host: app.leadsrx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:05 GMT
content-type: text/html; charset=utf-8
content-length: 105
server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
x-powered-by: PHP/5.6.40
access-control-allow-origin: https://www.savethechildren.org
access-control-allow-credentials: true
set-cookie: _lab=716137036; expires=Wed, 29-Nov-2023 01:33:03 GMT; Max-Age=31535998; path=/; samesite=none; domain=.leadsrx.com; secure
_lab_lastTouch=direct; expires=Wed, 29-Nov-2023 01:33:03 GMT; Max-Age=31535998; path=/; samesite=none; domain=.leadsrx.com; secure
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/4092132/domain/savethechildren.org/token
200 OK 62 B URL HTTP/2 cdn.linkedin.oribi.io/partner/4092132/domain/savethechildren.org/token
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d39abb34da93ec5faa48669ac4788977
cc2627a86b99e91540251b6fb7e17a9b1faa1ee7
b329d16bd7e06de93beac4a9e4d67b8be6d1c944b7b8e398b929460f73b7c4ce
GET /partner/4092132/domain/savethechildren.org/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Tue, 29 Nov 2022 01:10:34 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -V2xauxeXF8SCoqeJIIQVfXk4CKR-TiQJbmadvovYqg2gsFJLOUcJg==
age: 1350
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=4092132&time=1669685583453&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=4092132&time=1669685583453&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=4092132&time=1669685583453&url=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&dd8506ef-52f3-4322-8d14-76f23c4ddc31"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 29-Nov-2023 01:33:05 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2436:u=1:x=1:i=1669685585:t=1669771985:v=2:sig=AQFkiLih8CWLLqppwd_O4ePvjjUqOBlM"; Expires=Wed, 30 Nov 2022 01:33:05 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXukfg3wMoUx3Ddelp9RQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: BA7CD86A931A4038BFADFA77D21895EF Ref B: OSL30EDGE0113 Ref C: 2022-11-29T01:33:05Z
date: Tue, 29 Nov 2022 01:33:05 GMT
content-length: 0
X-Firefox-Spdy: h2
gs.mountain.com/gs
200 OK 144 B IP
File type ASCII text, with no line terminators
Hash 996f3bddfbf6c32bc6c654c718fbad67
30e3540817dc88d5d27351c628a373c05df9046a
b69a202a3a9d31dce21cd5513296c5a9c1f23d8da46ea93bcb3bc97b7b343f2a
GET /gs HTTP/1.1
Host: gs.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Cookie: guid=c54e2607-6f85-11ed-b64d-17047b61a564
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 29 Nov 2022 01:33:05 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
insight.adsrvr.org/track/conv/?adv=0ugbyxx&ct=0:v28zupp&fmt=3&orderid=&vf=&v=&td1=184c1041d21-tags5-aa41a30a1f1d7
200 OK 1.5 kB URL HTTP/2 insight.adsrvr.org/track/conv/?adv=0ugbyxx&ct=0:v28zupp&fmt=3&orderid=&vf=&v=&td1=184c1041d21-tags5-aa41a30a1f1d7
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 8af2a4fbf3d1ce5a6520cf59962e16f5
96e11914bd88ecc3f1babd932e5010bd07f0996b
7dadc411f5766e953a8027775edaf059dae1c916141076eff53439fb937b180e
GET /track/conv/?adv=0ugbyxx&ct=0:v28zupp&fmt=3&orderid=&vf=&v=&td1=184c1041d21-tags5-aa41a30a1f1d7 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:05 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/conv/?adv=0ugbyxx&ct=0:rlc0tuy&fmt=3&orderid=&vf=&v=&td1=184c1041d21-tags5-aa41a30a1f1d7
200 OK 113 B URL HTTP/2 insight.adsrvr.org/track/conv/?adv=0ugbyxx&ct=0:rlc0tuy&fmt=3&orderid=&vf=&v=&td1=184c1041d21-tags5-aa41a30a1f1d7
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b3ce02f5f663bdd4ac9b92661b13eb14
f7d968fb3507095ab03fb3ef59cd7b291282d5bd
2320800d32f53ef4a1accb20ff424d5638f9a067bc77132187929409e26a89d3
GET /track/conv/?adv=0ugbyxx&ct=0:rlc0tuy&fmt=3&orderid=&vf=&v=&td1=184c1041d21-tags5-aa41a30a1f1d7 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:05 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=a6t02yu&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&upid=xvch1ck&upv=1.1.0
200 OK 9.4 kB URL HTTP/2 insight.adsrvr.org/track/up?adv=a6t02yu&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&upid=xvch1ck&upv=1.1.0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6c4dcacdd6c2b9ca411baf2404cbc86e
bdbb1a96049c01b8347025eda7ec728fb0604a21
a350363a358f1206372a30005db84e4385a00faa7865e9cf332fbe5d9803ef81
GET /track/up?adv=a6t02yu&ref=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&upid=xvch1ck&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:04 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css
200 OK 0 B URL HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css
IP
GET /etc/clientlibs/us/clientlib-all.4662329425da70bee1fb713b41fc56f4.css HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
accept-ranges: bytes
cache-control: max-age=14400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:33:00 GMT
etag: "7c50e-5edae7c1e3480-gzip"
expires: Tue, 29 Nov 2022 05:33:00 GMT
last-modified: Thu, 17 Nov 2022 18:09:06 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: N_F7l0cxhn2nOTK_iD6os9wZTfS2mCscBT-PVPHlhPapbeZh2nv6kw==
X-Firefox-Spdy: h2
a.omappapi.com/app/js/webfont/1.5.18/webfont.js
200 OK 0 B URL HTTP/2 a.omappapi.com/app/js/webfont/1.5.18/webfont.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/webfont/1.5.18/webfont.js HTTP/1.1
Host: a.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"62ed37ae-40cb"
last-modified: Fri, 05 Aug 2022 15:30:54 GMT
cdn-storageserver: DE-164
cdn-requestpullsuccess: True
cdn-fileserver: 419
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/21/2022 23:02:26
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 6c286abf3087ef603202fe8ce543ced8
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
savethechildren.us-7.evergage.com/api2/event/production?event=eyJzb3VyY2UiOnsicGFnZVR5cGUiOiJKb2luIFRlYW0gVG9tb3Jyb3cgUGFnZSIsInVybCI6Imh0dHBzOi8vd3d3LnNhdmV0aGVjaGlsZHJlbi5vcmcvdXMvZG9uYXRlLW1vbnRobHktY2hpbGRyZW5zLWNoYXJpdHkvdGVhbS10b21vcnJvdz9jaWQ9RW1haWw6U0ZNQzpCRl9HVF9QcmV2aWV3Ok5vbl9Eb25vcnNfYToxMTI1MjImc210cmN0aWQ9Mjk5OTgyNTMiLCJ1cmxSZWZlcnJlciI6IiIsImNoYW5uZWwiOiJXZWIiLCJiZWFjb25WZXJzaW9uIjoxNiwiY29uZmlnVmVyc2lvbiI6IjIxIiwiY29udGVudFpvbmVzIjpbXX0sInVzZXIiOnsiYW5vbnltb3VzSWQiOiJmZTE0MGI0MDQwN2I4NTQwIn0sImludGVyYWN0aW9uIjp7Im5hbWUiOiJWaWV3ZWQgSm9pbiBUZWFtIFRvbW9ycm93IFBhZ2UifSwicGFnZVZpZXciOnRydWUsImNvbnNlbnRzIjpbXSwiYWNjb3VudCI6e30sIl90b29sc0V2ZW50TGlua0lkIjoiNzg3NDYwNjMwMDY0NTE4NyIsImV4cGxhaW4iOnRydWV9
200 OK 0 B URL HTTP/2 savethechildren.us-7.evergage.com/api2/event/production?event=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
IP
GET /api2/event/production?event=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 HTTP/1.1
Host: savethechildren.us-7.evergage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.savethechildren.org
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:01 GMT
content-type: application/json;charset=UTF-8
set-cookie: AWSALB=v8ctCFtDDG5wYYDIUQ6V46ZDkV3/sG4yfliz9TtnAa7IR3xYbvb3pDo1cjF4DcRtJfQ2/jHu/v3hjVm4qdur1YSI6qazFhUXUHKgLL7qtJbAfrw3kaS0VDuXUvhq; Expires=Tue, 06 Dec 2022 01:33:01 GMT; Path=/
AWSALBCORS=v8ctCFtDDG5wYYDIUQ6V46ZDkV3/sG4yfliz9TtnAa7IR3xYbvb3pDo1cjF4DcRtJfQ2/jHu/v3hjVm4qdur1YSI6qazFhUXUHKgLL7qtJbAfrw3kaS0VDuXUvhq; Expires=Tue, 06 Dec 2022 01:33:01 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: https://www.savethechildren.org
timing-allow-origin: *
access-control-allow-credentials: true
x-content-type-options: nosniff
vary: accept-encoding
content-encoding: gzip
X-Firefox-Spdy: h2
nexus.ensighten.com/choozle/10170/code/07285131fb793c9edbc1a300e9502bf5.js?conditionId0=4927691&conditionId1=4871227&conditionId2=4872711
200 OK 0 B URL HTTP/2 nexus.ensighten.com/choozle/10170/code/07285131fb793c9edbc1a300e9502bf5.js?conditionId0=4927691&conditionId1=4871227&conditionId2=4872711
IP
GET /choozle/10170/code/07285131fb793c9edbc1a300e9502bf5.js?conditionId0=4927691&conditionId1=4871227&conditionId2=4872711 HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Sun, 18 Sep 2022 05:40:22 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 13 Jun 2022 14:49:13 GMT
etag: W/"c6e0d9cd7e124dd83def90c29c5a679e"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: yWQcOchPsepRFc6ofkFJ9kbwERYN9jZj
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ny9O8JsLSEkPCf-iZ8eFQiCpgWWenvuodH0Nvx9OUQuxq8IhJFEZmw==
age: 6205963
X-Firefox-Spdy: h2
www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/Empowerment.png/_jcr_content/renditions/original.img.png
200 OK 0 B URL HTTP/2 www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/Empowerment.png/_jcr_content/renditions/original.img.png
IP
GET /content/dam/usa/images/lps/2022/ilro/Empowerment.png/_jcr_content/renditions/original.img.png HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669685579233%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:33:00 GMT
etag: "9077e3-5ee90ada9039d-gzip"
expires: Wed, 30 Nov 2022 01:33:00 GMT
last-modified: Tue, 29 Nov 2022 00:00:39 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: crBKBTtZdxMgFyEIzg-O0au85mI0F4cYUQotveEX7lOY6b5jHp0d5w==
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/4.f2ffe9e7.min.js
200 OK 0 B URL HTTP/2 a.opmnstr.com/app/js/4.f2ffe9e7.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/4.f2ffe9e7.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:02 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"637289e2-4f7e"
last-modified: Mon, 14 Nov 2022 18:33:06 GMT
cdn-storageserver: DE-164
cdn-requestpullsuccess: True
cdn-fileserver: 459
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/25/2022 21:21:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 6cdfbb4bfb4f8afac851897802ebc184
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/api.min.js
200 OK 0 B URL HTTP/2 a.opmnstr.com/app/js/api.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/api.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:01 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"6378026b-13ef5"
last-modified: Fri, 18 Nov 2022 22:08:43 GMT
cdn-storageserver: DE-198
cdn-requestpullsuccess: True
cdn-fileserver: 492
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/25/2022 21:21:37
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: b3cd484b3ce85c45ce85e48f22f53f16
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/Equality.png/_jcr_content/renditions/original.img.png
200 OK 0 B URL HTTP/2 www.savethechildren.org/content/dam/usa/images/lps/2022/ilro/Equality.png/_jcr_content/renditions/original.img.png
IP
GET /content/dam/usa/images/lps/2022/ilro/Equality.png/_jcr_content/renditions/original.img.png HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/us/donate-monthly-childrens-charity/team-tomorrow?cid=Email:SFMC:BF_GT_Preview:Non_Donors_a:112522&smtrctid=29998253
Cookie: CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cver:1%2Cutc:1669685579233%2Cregion:%27NO%27}; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19326%7CvVersion%7C5.4.0; mbox=session#4a83929b65174632bbf80d02abb8b625#1669687440; at_check=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Tue, 29 Nov 2022 01:33:00 GMT
etag: "91c6ff-5ee90ada7ea71-gzip"
expires: Wed, 30 Nov 2022 01:33:00 GMT
last-modified: Tue, 29 Nov 2022 00:00:39 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: X_A3PUlDcph3MvePQtfV-mD7D5ew-kf-8OIKD3s6kaUGK5OIgimbNQ==
X-Firefox-Spdy: h2
insight.adsrvr.org/track/pxl/?adv=f35s4e0&ct=0:n4od8ve&fmt=3
200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/pxl/?adv=f35s4e0&ct=0:n4od8ve&fmt=3
IP
GET /track/pxl/?adv=f35s4e0&ct=0:n4od8ve&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d1eoo1tco6rr5e.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:04 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/evnt/?adv=0ugbyxx&ct=0:8hrabaq&fmt=3&td1=184c1041d21-tags5-aa41a30a1f1d7
200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/evnt/?adv=0ugbyxx&ct=0:8hrabaq&fmt=3&td1=184c1041d21-tags5-aa41a30a1f1d7
IP
GET /track/evnt/?adv=0ugbyxx&ct=0:8hrabaq&fmt=3&td1=184c1041d21-tags5-aa41a30a1f1d7 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:05 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/pxl/?adv=f35s4e0&ct=0:qa0mevt&fmt=3
200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/pxl/?adv=f35s4e0&ct=0:qa0mevt&fmt=3
IP
GET /track/pxl/?adv=f35s4e0&ct=0:qa0mevt&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d1eoo1tco6rr5e.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 01:33:04 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
px.mountain.com/st?ga_tracking_id=UA-85748307-2&ga_client_id=1144994530.1669685583&shpt=Join%20Team%20Tomorrow%20%7C%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-85748307-2%22%2C%22ga_client_id%22%3A%221144994530.1669685583%22%2C%22shpt%22%3A%22Join%20Team%20Tomorrow%20%7C%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%221144994530.1669685583%22%2C%22dcm_gid%22%3A%22903780614.1669685583%22%2C%22mntnis%22%3A%22h1VTp6X8zKoJLT8ry2YPmXeVdf1ifr6u%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A9%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=1144994530.1669685583&dcm_gid=903780614.1669685583&dxver=4.0.0&shaid=32293&plh=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&cb=89550841191772580&term=value&shadditional=googletagmanager%3Dtrue
200 OK 0 B URL HTTP/1.1 px.mountain.com/st?ga_tracking_id=UA-85748307-2&ga_client_id=1144994530.1669685583&shpt=Join%20Team%20Tomorrow%20%7C%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-85748307-2%22%2C%22ga_client_id%22%3A%221144994530.1669685583%22%2C%22shpt%22%3A%22Join%20Team%20Tomorrow%20%7C%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%221144994530.1669685583%22%2C%22dcm_gid%22%3A%22903780614.1669685583%22%2C%22mntnis%22%3A%22h1VTp6X8zKoJLT8ry2YPmXeVdf1ifr6u%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A9%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=1144994530.1669685583&dcm_gid=903780614.1669685583&dxver=4.0.0&shaid=32293&plh=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&cb=89550841191772580&term=value&shadditional=googletagmanager%3Dtrue
IP
GET /st?ga_tracking_id=UA-85748307-2&ga_client_id=1144994530.1669685583&shpt=Join%20Team%20Tomorrow%20%7C%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-85748307-2%22%2C%22ga_client_id%22%3A%221144994530.1669685583%22%2C%22shpt%22%3A%22Join%20Team%20Tomorrow%20%7C%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%221144994530.1669685583%22%2C%22dcm_gid%22%3A%22903780614.1669685583%22%2C%22mntnis%22%3A%22h1VTp6X8zKoJLT8ry2YPmXeVdf1ifr6u%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A9%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=1144994530.1669685583&dcm_gid=903780614.1669685583&dxver=4.0.0&shaid=32293&plh=https%3A%2F%2Fwww.savethechildren.org%2Fus%2Fdonate-monthly-childrens-charity%2Fteam-tomorrow%3Fcid%3DEmail%3ASFMC%3ABF_GT_Preview%3ANon_Donors_a%3A112522%26smtrctid%3D29998253&cb=89550841191772580&term=value&shadditional=googletagmanager%3Dtrue HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 29 Nov 2022 01:33:04 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=c54e2607-6f85-11ed-b64d-17047b61a564;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
connection: close
nexus.ensighten.com/choozle/10170/code/0954ce0040a8fc5aeab3289dc26bb80c.js?conditionId0=421905
200 OK 0 B URL HTTP/2 nexus.ensighten.com/choozle/10170/code/0954ce0040a8fc5aeab3289dc26bb80c.js?conditionId0=421905
IP
GET /choozle/10170/code/0954ce0040a8fc5aeab3289dc26bb80c.js?conditionId0=421905 HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 22 Jul 2022 07:38:38 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 13 Jun 2022 14:49:13 GMT
etag: W/"c4e2839424f981629cf0fe2178ff9ef7"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: jmpzjXQT9NQsQ8wKHWAp4CLwVbc46grs
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8mFY7vfiI2myz7a4GiRvor8XMVFjgpd8P6_GOaVRhmyzRnpJXBAcVQ==
age: 11210067
X-Firefox-Spdy: h2
143.204.55.49
34.242.195.231
104.18.32.68
194.242.11.186
31.13.72.36
93.184.220.29
15.188.95.229