r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 20d267853e48ef7d476459ed67da5d97
06d1bd08efd69c0e93486d3c423fa2640f372d29
24323cd45ca2ed01c63f908233d9b2ad5bb6f63394884c45bf6abb0221d0edd6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "24323CD45CA2ED01C63F908233D9B2AD5BB6F63394884C45BF6ABB0221D0EDD6"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2670
Expires: Fri, 20 Jan 2023 20:29:14 GMT
Date: Fri, 20 Jan 2023 19:44:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b36ef73c20dffb6bc10194bbd2d0dcfa
a67a4023dc8b4944debaeb92f3ba0f1402c079a6
05a7a4d832cf9e593ca44efea309edcbd80734583bada15fda3e740612eff991
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "05A7A4D832CF9E593CA44EFEA309EDCBD80734583BADA15FDA3E740612EFF991"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6969
Expires: Fri, 20 Jan 2023 21:40:53 GMT
Date: Fri, 20 Jan 2023 19:44:44 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 20 Jan 2023 19:34:37 GMT
content-type: application/json
age: 607
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7afaa97fbfa9baa1485c892eac8e114d
8c17c707c218e28ac14197ce8e5eef873207a732
59db16baacb452453dbf44fc2a24f25ab09c4dbaec3a9271fda84230d8f11925
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59DB16BAACB452453DBF44FC2A24F25AB09C4DBAEC3A9271FDA84230D8F11925"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13194
Expires: Fri, 20 Jan 2023 23:24:38 GMT
Date: Fri, 20 Jan 2023 19:44:44 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 2Y4dusb+YcWvy5qVvdf6VzyU2VZnRFSXI8UuPJf1QFQbXz/NK5g2J1LAN71iCSGBDrG7qwIip24=
x-amz-request-id: 2D96C9GHJV41SV79
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 20 Jan 2023 18:46:28 GMT
age: 3496
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 19:44:44 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
support.savethechildren.org/site/SPageNavigator/supporter_center.html
302 302 0 B URL HTTP/1.1 support.savethechildren.org/site/SPageNavigator/supporter_center.html
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /site/SPageNavigator/supporter_center.html HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 302
Date: Fri, 20 Jan 2023 19:44:44 GMT
Server: Apache
X-Content-Type-Options: nosniff
Cache-Control: no-store
Pragma: no-cache
Set-Cookie: JSESSIONID=7100EFD4DCD66BEB5E03C3D56B45E6DC.app30124b; Path=/; HttpOnly
JSESSIONID=7100EFD4DCD66BEB5E03C3D56B45E6DC.app30124b; Path=/
JSESSIONID=7100EFD4DCD66BEB5E03C3D56B45E6DC.app30124b;Path=/site/CRConsAPI; Secure; SameSite=None
JSESSIONID=7100EFD4DCD66BEB5E03C3D56B45E6DC.app30124b;Path=/site/CrmRest; Secure; SameSite=None
JSESSIONID=7100EFD4DCD66BEB5E03C3D56B45E6DC.app30124b;Path=/site/AnonymousLogin; Secure; SameSite=None
JSESSIONID=7100EFD4DCD66BEB5E03C3D56B45E6DC.app30124b;Path=/site/CRDonationAPI; Secure; SameSite=None
Location: https://support.savethechildren.org/site/SPageNavigator/supporter_center.html;jsessionid=00000000.app30124b?NONCE_TOKEN=83EFC651A328234A9C3A12FADF2DB1D4
Content-Length: 0
Keep-Alive: timeout=15, max=403
Connection: Keep-Alive
Content-Type: text/html
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 20 Jan 2023 18:48:58 GMT
age: 3347
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 66c4afda5881a3c713074e662a0ed6f2
0a738b909bb576cfeb3c401f4fab3b33e0b06793
2a394c7dd0ff32577e61c55b8614fca451fb41d3ddb25750e07c310ca52c6eea
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6037
Cache-Control: max-age=149955
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:45 GMT
Etag: "63ca7e5b-1d7"
Expires: Sun, 22 Jan 2023 13:24:00 GMT
Last-Modified: Fri, 20 Jan 2023 11:43:23 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 46bc7a69a761a423f929b4fbb75474f0
06105c639c402479fd4c60a34556d6dbaf44ed53
05a171839bbd1e21f52c36a53003aaa73a463caf7c48c03f25e327ef6e56f645
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6511
Cache-Control: max-age=137091
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:45 GMT
Etag: "63ca4a41-1d7"
Expires: Sun, 22 Jan 2023 09:49:36 GMT
Last-Modified: Fri, 20 Jan 2023 08:01:05 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash bdb8a13dfce39d6e151a9ef185a772a1
037a680510f9dbce3c7cc3c0f9115fd587dbcd1d
98c8b7f269b9aad73b73fd946788ebfd7a4d7afbdd5347b56c67f73b947f5ff6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6570
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:45 GMT
Last-Modified: Fri, 20 Jan 2023 17:55:15 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.5/jquery.fancybox.min.css
200 OK 955 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.5/jquery.fancybox.min.css
IP
File type ASCII text, with very long lines (3885), with no line terminators
Hash 254cb13c6249ee8b9472c24687430bce
b8a63a6e9a1c8a4b459b3406c488063656895e9e
35b2fbdb02a628e43ff25273c788262646b73374101214e88fc8ce83026295c8
GET /ajax/libs/fancybox/2.1.5/jquery.fancybox.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:45 GMT
content-type: text/css; charset=utf-8
content-length: 955
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e58-f2d"
last-modified: Mon, 04 May 2020 16:10:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 700064
expires: Wed, 10 Jan 2024 19:44:45 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T44NBDKQVkqmhonyEh8u9QXO3HS5zsYmME1I1dRU2zlUgPA02%2BEJP4iyRuqrbu0zy3Hxt7ut%2BH%2Fn3Yxfa%2BZDqhkHRC8l%2Fz9jSrT8acXLX3Dh0omnjVGmNBaGBUjokwDKNP1hWPzd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 78ca4e7d0b2fb4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
support.savethechildren.org/site/SPageNavigator/supporter_center.html;jsessionid=00000000.app30124b?NONCE_TOKEN=83EFC651A328234A9C3A12FADF2DB1D4
200 200 33 kB URL HTTP/1.1 support.savethechildren.org/site/SPageNavigator/supporter_center.html;jsessionid=00000000.app30124b?NONCE_TOKEN=83EFC651A328234A9C3A12FADF2DB1D4
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (463), with CRLF, LF line terminators
Hash aab2d6a75334bc2d94f1a935e3df3c18
8ab7aa4d036d3f82d1c64cb79065185d6155c17d
4bcdd4e823c9602c53577e782d20f2bae70ce84b5e6723c22b5f2af4e3ef75b7
GET /site/SPageNavigator/supporter_center.html;jsessionid=00000000.app30124b?NONCE_TOKEN=83EFC651A328234A9C3A12FADF2DB1D4 HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 200
Date: Fri, 20 Jan 2023 19:44:45 GMT
Server: Apache
X-Content-Type-Options: nosniff
Cache-Control: no-store
Pragma: no-cache
Set-Cookie: JSESSIONID=7100EFD4DCD66BEB5E03C3D56B45E6DC.app30124b; Path=/site/
JSESSIONID=7100EFD4DCD66BEB5E03C3D56B45E6DC.app30124b;Path=/site/CRConsAPI; Secure; SameSite=None
JSESSIONID=7100EFD4DCD66BEB5E03C3D56B45E6DC.app30124b;Path=/site/CrmRest; Secure; SameSite=None
JSESSIONID=7100EFD4DCD66BEB5E03C3D56B45E6DC.app30124b;Path=/site/AnonymousLogin; Secure; SameSite=None
JSESSIONID=7100EFD4DCD66BEB5E03C3D56B45E6DC.app30124b;Path=/site/CRDonationAPI; Secure; SameSite=None
Content-Security-Policy: frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com; report-uri https://support.savethechildren.org/site/XFrameViolation
X-Frame-Options: allow-from 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com
Keep-Alive: timeout=15, max=486
Connection: Keep-Alive
Content-Type: text/html;charset=ISO-8859-1
Content-Encoding: gzip
Transfer-Encoding: chunked
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RInXp2nIRN10Ok2hcs4Zfw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: r/p8gnrVjazwZqukKYjZwV6FzcI=
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/launch-d47d2de11878.min.js
200 OK 101 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/launch-d47d2de11878.min.js
IP
File type ASCII text, with very long lines (32763)
Size 101 kB (100761 bytes)
Hash 2bf37c2f394ccc84286fe8c8e09a5123
074a1cf531d060aa09be63fa656c16a4df07abd2
f0f06de1210774e2c187fb7cf0cca9ec2c564a6d6f9fed13c291937ab5f64be7
GET /a9de570d9caa/b01a1f4bb0c4/launch-d47d2de11878.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "c03e3956c60159180e45c51a02d8400b:1674054363.413675"
last-modified: Wed, 18 Jan 2023 15:06:03 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Fri, 20 Jan 2023 20:44:45 GMT
date: Fri, 20 Jan 2023 19:44:45 GMT
content-length: 100761
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
consent.cookiebot.com/uc.js
200 OK 32 kB URL HTTP/2 consent.cookiebot.com/uc.js
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65499)
Hash bcb0990b8f32cca6714e6f3cd74058e3
989727df20e7b504aee42e0535b7d6af4819d191
16db11e4514fb3eca008d083b39d4e29b2e886f9c858e0328171bfcc78ebd7fd
GET /uc.js HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 10 Jan 2023 10:00:26 GMT
accept-ranges: bytes
etag: "019a65cda24d91:0"
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 32026
cache-control: public, max-age=991
expires: Fri, 20 Jan 2023 20:01:16 GMT
date: Fri, 20 Jan 2023 19:44:45 GMT
X-Firefox-Spdy: h2
support.savethechildren.org/yui3/yui/yui-min.js
200 OK 6.4 kB URL HTTP/1.1 support.savethechildren.org/yui3/yui/yui-min.js
IP
File type ASCII text, with very long lines (6015)
Hash c0c48d57a5e70c1fde91a0471f5cc5de
8286cd80b65a64f87ffda65622325b2c2a59a2e5
4289fdf32abf858b3bdde0c0cc0b2c07328132d75dfabcbfd40fda57f9d0c340
GET /yui3/yui/yui-min.js HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/site/SPageNavigator/supporter_center.html;jsessionid=00000000.app30124b?NONCE_TOKEN=83EFC651A328234A9C3A12FADF2DB1D4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Age: 1
Date: Fri, 20 Jan 2023 19:44:45 GMT
Cache-Control: private
Connection: Keep-Alive
Via: NS-CACHE-10.0: 32
ETag: "3baa-487aa3880d540"
Server: Apache
Last-Modified: Fri, 28 May 2010 16:44:29 GMT
Accept-Ranges: bytes
ntCoent-Length: 15274
Keep-Alive: timeout=15, max=484
Content-Type: application/x-javascript
Content-Encoding: gzip
Content-Length: 6402
cdn.ywxi.net/js/1.js
200 OK 4.6 kB IP
File type ASCII text, with very long lines (580)
Hash fb198a6e53713741e93e1d896b3303d9
80a1cff8ab33300cc864d46f6642d4da9d9f3941
ccae6b4bd93f2006fb65be2cd63f340dba5b1a791b3614dedb4496d30850b877
GET /js/1.js HTTP/1.1
Host: cdn.ywxi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 4567
date: Fri, 20 Jan 2023 19:10:34 GMT
server: Apache
content-security-policy-report-only: report-uri https://52723791ca12811bfedec52ea4c44290.report-uri.com/r/d/csp/reportOnly; default-src 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; script-src-elem * 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-elem * 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; img-src * data:; font-src * data:; connect-src *; media-src * blob:; object-src 'none'; frame-src *; frame-ancestors *; form-action 'self'
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
expires: Fri, 20 Jan 2023 20:10:33 GMT
access-control-allow-origin: *
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZfpEB4v8MdA91w_yGLv5ID3W_ekTZGmis9dXIP_vqstYFduJ7FLZeQ==
age: 2051
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.7 kB IP
Hash 6ba7c8ce58a782310e13223a89354f82
03546291da9001290c1acfa017fcf37b769fa1fd
dd981d1498e862ab3f03a910caa49d11f5141fae33aa10dd12aaa8b40f1e6f72
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 68
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 20 Jan 2023 19:44:45 GMT
Content-Type: application/ocsp-response
Content-Length: 1731
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 19 Jan 2023 20:10:12 GMT
Expires: Fri, 20 Jan 2023 20:10:12 GMT
ETag: "03546291da9001290c1acfa017fcf37b769fa1fd"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
support.savethechildren.org/js/convio/modules.js?version=2.9.1
200 OK 2.7 kB URL HTTP/1.1 support.savethechildren.org/js/convio/modules.js?version=2.9.1
IP
File type ASCII text, with very long lines (15208)
Hash e5b266e4a166affda11f141279240817
62b17f6f589e1b8aa15f6b6c0d0aae4aebd727f1
a17576ff30a8a610c0c1d3eee9f6756385857de2bffd75aa718902661132362c
GET /js/convio/modules.js?version=2.9.1 HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/site/SPageNavigator/supporter_center.html;jsessionid=00000000.app30124b?NONCE_TOKEN=83EFC651A328234A9C3A12FADF2DB1D4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Age: 1
Date: Fri, 20 Jan 2023 19:44:45 GMT
Cache-Control: private
Connection: Keep-Alive
Via: NS-CACHE-10.0: 32
ETag: "3bb8-5bc0f7aebec8b"
Server: Apache
Last-Modified: Wed, 24 Feb 2021 06:52:36 GMT
Accept-Ranges: bytes
ntCoent-Length: 15288
Keep-Alive: timeout=15, max=457
Content-Type: application/x-javascript
Content-Encoding: gzip
Content-Length: 2729
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash cb1f1459970a51af46a082f4ca2adcf9
04ac1dd5637a3aa75d905f4b74d607e53be700bf
b2fd85ed1d8e547025f914b7c8adb615721efcc56442b828118f24c57c8e2269
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 20 Jan 2023 19:44:45 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 19 Jan 2023 22:33:14 GMT
Expires: Fri, 20 Jan 2023 22:33:14 GMT
ETag: "04ac1dd5637a3aa75d905f4b74d607e53be700bf"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.savethechildren.org/content/dam/usa/images/annual-report/2021/2021-annual-report-pie-chart-footer-version.png
200 OK 11 kB URL HTTP/2 www.savethechildren.org/content/dam/usa/images/annual-report/2021/2021-annual-report-pie-chart-footer-version.png
IP
File type PNG image data, 190 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 26c3a518a7adb10b371b23c176448ec2
0b2d4a5462ad22d6405116c5638eb54e320fef70
bc85cf5f10d70323bf7937c06033985d302910fe5733c2116646030ec5ecf8c4
GET /content/dam/usa/images/annual-report/2021/2021-annual-report-pie-chart-footer-version.png HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 11442
accept-ranges: bytes
cache-control: max-age=86400, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
date: Fri, 20 Jan 2023 10:10:51 GMT
etag: "2eff-5f2a6bc3a7aa2-gzip"
expires: Sat, 21 Jan 2023 10:10:51 GMT
last-modified: Fri, 20 Jan 2023 00:00:19 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AoWx7fn1zVMsnrmOACC1U7wXMC6jw8cCxTkydXwU4TjB2MXoMOantg==
age: 34434
X-Firefox-Spdy: h2
support.savethechildren.org/css/CustomStyle.css
200 OK 0 B URL HTTP/1.1 support.savethechildren.org/css/CustomStyle.css
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /css/CustomStyle.css HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/site/SPageNavigator/supporter_center.html;jsessionid=00000000.app30124b?NONCE_TOKEN=83EFC651A328234A9C3A12FADF2DB1D4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Age: 1
Date: Fri, 20 Jan 2023 19:44:46 GMT
Connection: Keep-Alive
Via: NS-CACHE-10.0: 32
ETag: "0-52db69fe8c594"
Server: Apache
Last-Modified: Thu, 10 Mar 2016 19:14:33 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=15, max=480
Content-Type: text/css
support.savethechildren.org/css/CustomWysiwygStyle.css
200 OK 0 B URL HTTP/1.1 support.savethechildren.org/css/CustomWysiwygStyle.css
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /css/CustomWysiwygStyle.css HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/site/SPageNavigator/supporter_center.html;jsessionid=00000000.app30124b?NONCE_TOKEN=83EFC651A328234A9C3A12FADF2DB1D4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Age: 1
Date: Fri, 20 Jan 2023 19:44:46 GMT
Connection: Keep-Alive
Via: NS-CACHE-10.0: 32
ETag: "0-52db69fe3c365"
Server: Apache
Last-Modified: Thu, 10 Mar 2016 19:14:33 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=15, max=455
Content-Type: text/css
support.savethechildren.org/js/utils.js
200 OK 9.9 kB URL HTTP/1.1 support.savethechildren.org/js/utils.js
IP
File type ASCII text, with very long lines (742)
Hash cc9922571b60406b01c047c58df2bd95
9a7ee4b82b438c042f786616f777c680f7af6d2b
b81f470884fef5a6a2f4064e9699dee279d3636b6ca95b5898f294d2ce5481b8
GET /js/utils.js HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/site/SPageNavigator/supporter_center.html;jsessionid=00000000.app30124b?NONCE_TOKEN=83EFC651A328234A9C3A12FADF2DB1D4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Age: 1
Date: Fri, 20 Jan 2023 19:44:46 GMT
Cache-Control: private
Connection: Keep-Alive
Via: NS-CACHE-10.0: 32
ETag: "7f46-540ecf2687f1e"
Server: Apache
Last-Modified: Thu, 10 Nov 2016 07:01:46 GMT
Accept-Ranges: bytes
ntCoent-Length: 32582
Keep-Alive: timeout=15, max=482
Content-Type: application/x-javascript
Content-Encoding: gzip
Content-Length: 9855
support.savethechildren.org/js/obs_comp_rollup.js
200 OK 2.5 kB URL HTTP/1.1 support.savethechildren.org/js/obs_comp_rollup.js
IP
File type ASCII text, with very long lines (468)
Hash ab049dcc5cc722b3ff57d4ccaedee382
3a512b318aac6003ff72c961a5f9d719addba37a
c55f0cb4e06ba990df106ffa19da9f5088999f16220da678d1c1a1f95acc25da
GET /js/obs_comp_rollup.js HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/site/SPageNavigator/supporter_center.html;jsessionid=00000000.app30124b?NONCE_TOKEN=83EFC651A328234A9C3A12FADF2DB1D4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Age: 1
Date: Fri, 20 Jan 2023 19:44:46 GMT
Cache-Control: private
Connection: Keep-Alive
Via: NS-CACHE-10.0: 32
ETag: "2936-4b863d94fc780"
Server: Apache
Last-Modified: Tue, 07 Feb 2012 18:21:34 GMT
Accept-Ranges: bytes
ntCoent-Length: 10550
Keep-Alive: timeout=15, max=210
Content-Type: application/x-javascript
Content-Encoding: gzip
Content-Length: 2548
support.savethechildren.org/css/themes/default.css
200 OK 1.3 kB URL HTTP/1.1 support.savethechildren.org/css/themes/default.css
IP
Hash 9ebf44ea98377b5a08aa678397cf29b4
b1d90aa8d66f837c2d49612e12909c2442072e9d
23eda782ab1145be0e8c7550de846527132897a978bcd3054a76321adad6e236
GET /css/themes/default.css HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/site/SPageNavigator/supporter_center.html;jsessionid=00000000.app30124b?NONCE_TOKEN=83EFC651A328234A9C3A12FADF2DB1D4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Age: 1
Date: Fri, 20 Jan 2023 19:44:46 GMT
Cache-Control: private
Connection: Keep-Alive
Via: NS-CACHE-10.0: 32
ETag: "11df-4e246affca1c0"
Server: Apache
Last-Modified: Wed, 24 Jul 2013 19:12:15 GMT
Accept-Ranges: bytes
ntCoent-Length: 4575
Keep-Alive: timeout=15, max=421
Content-Type: text/css
Content-Encoding: gzip
Content-Length: 1256
support.savethechildren.org/css/themes/alphacube.css
200 OK 748 B URL HTTP/1.1 support.savethechildren.org/css/themes/alphacube.css
IP
Hash 2826be28aa8a76f086ad3beddf8381db
a60cc7dc66ef2dba4b178fc816c3920da959f274
59926fb5c85b5156338fdc0fe62891815d459a1103e8b6602349ba9db448b9a5
GET /css/themes/alphacube.css HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/site/SPageNavigator/supporter_center.html;jsessionid=00000000.app30124b?NONCE_TOKEN=83EFC651A328234A9C3A12FADF2DB1D4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Age: 1
Date: Fri, 20 Jan 2023 19:44:46 GMT
Cache-Control: private
Connection: Keep-Alive
Via: NS-CACHE-10.0: 32
ETag: "a58-479c5ef879140"
Server: Apache
Last-Modified: Wed, 02 Dec 2009 21:55:41 GMT
Accept-Ranges: bytes
Cteonnt-Length: 2648
Keep-Alive: timeout=15, max=460
Content-Type: text/css
Content-Encoding: gzip
Content-Length: 748
support.savethechildren.org/css/UserGlobalStyle.css
200 OK 6.9 kB URL HTTP/1.1 support.savethechildren.org/css/UserGlobalStyle.css
IP
File type ASCII text, with very long lines (22960)
Hash 1ff6d4f8e3260180f802c3a4fdd07c38
3505f8fa1a39361460fbeefeddcbdaeaccb1db02
abde2a5541eaa5a5441aa116485f7f4536117480fed8ae7ef943ab7768c8b4a0
GET /css/UserGlobalStyle.css HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/site/SPageNavigator/supporter_center.html;jsessionid=00000000.app30124b?NONCE_TOKEN=83EFC651A328234A9C3A12FADF2DB1D4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Age: 1
Date: Fri, 20 Jan 2023 19:44:46 GMT
Cache-Control: private
Connection: Keep-Alive
Via: NS-CACHE-10.0: 32
ETag: "5dce-5849dc4339500"
Server: Apache
Last-Modified: Thu, 21 Mar 2019 17:07:00 GMT
Accept-Ranges: bytes
ntCoent-Length: 24014
Keep-Alive: timeout=15, max=421
Content-Type: text/css
Content-Encoding: gzip
Content-Length: 6878
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
200 OK 12 kB URL HTTP/2 assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
IP
File type ASCII text, with very long lines (32768)
Hash e616df092766c7ab7904619f971a35cc
a960429c42802a43e3ce728fc4d1e8bdab10e606
082ae7647bfdb639846791e5c0ca39b96544dff3aed0c365973c9589cd5b091e
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "d860c16ac938f7d839f0ec158d02d0f0:1644856531.418573"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 12163
expires: Fri, 20 Jan 2023 20:44:46 GMT
date: Fri, 20 Jan 2023 19:44:46 GMT
cache-control: no-cache
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js
200 OK 1.6 kB URL HTTP/2 assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js
IP
File type ASCII text, with very long lines (3155)
Hash e672de61b277fc72de4299829bfbb31c
157a7409922d58a02dad3ba879d04eb2a3ef8f3d
e1a1c2a6f2ed4ffb63ebfda157eaf12c6ee3973be4da649eb63e0402c0d29215
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "2d1382c349d480b6b41574ac0c1af066:1644856531.739514"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1597
expires: Fri, 20 Jan 2023 20:44:46 GMT
date: Fri, 20 Jan 2023 19:44:46 GMT
cache-control: no-cache
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC2bd87301eb114379b56ad60b1e4c5bc9-source.min.js
200 OK 379 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC2bd87301eb114379b56ad60b1e4c5bc9-source.min.js
IP
File type ASCII text, with very long lines (518)
Hash 614aa3c0e2336a96adb794255b3f599a
df3d08667710a144a19f7b2a76e7c86dabc2f03b
01aa7bbf7a605205b9037174504e5a2ab06f77e855412229291197ba7a875d99
GET /a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC2bd87301eb114379b56ad60b1e4c5bc9-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "123f8250dd943fe5091528c32c2134eb:1674054365.089145"
last-modified: Wed, 18 Jan 2023 15:06:05 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 379
cache-control: max-age=3600
expires: Fri, 20 Jan 2023 20:44:46 GMT
date: Fri, 20 Jan 2023 19:44:46 GMT
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 61162a42e6bf5415f3d80ceac5e25ad2
2c2a987ab75a008682a5defd50d20be737912b23
4260bef1cd37c1f0372c9a5aae4ca0a6564c6473f68a4f4181ed83ed3d6b2d48
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 61162a42e6bf5415f3d80ceac5e25ad2
2c2a987ab75a008682a5defd50d20be737912b23
4260bef1cd37c1f0372c9a5aae4ca0a6564c6473f68a4f4181ed83ed3d6b2d48
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e6d21eff1927f7a74984663b16cfe21a
b747f7d42cdf7cfea6900348cd257066b2634222
a4343acb5bda29aa0d6d64bbefd6bc07a1c5e0166646171be74f4a1d266e3c92
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lato/v20/S6u9w4BMUTPHh6UVSwiPGQ3q5d0.woff2
200 OK 14 kB URL HTTP/2 fonts.gstatic.com/s/lato/v20/S6u9w4BMUTPHh6UVSwiPGQ3q5d0.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14176, version 1.0\012- data
Hash c8dcbaf22349dba5061d93607ca9b37c
548040e31d6eef3d621157a3b3ae5b0be5618460
9baad10e85c5be8d5697086479983b6b477197103bf8f0f11817b1bdfb9a7451
GET /s/lato/v20/S6u9w4BMUTPHh6UVSwiPGQ3q5d0.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://dx2eq2oh924g4.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14176
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jan 2023 10:16:09 GMT
expires: Fri, 19 Jan 2024 10:16:09 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 10 Aug 2021 00:18:59 GMT
content-type: font/woff2
age: 120517
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v20/S6uyw4BMUTPHjx4wXiWtFCc.woff2
200 OK 14 kB URL HTTP/2 fonts.gstatic.com/s/lato/v20/S6uyw4BMUTPHjx4wXiWtFCc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14044, version 1.0\012- data
Hash 129179c4eeb1d784d3d3ad95e0b35905
f75444b5ef6205ee4301d632adf17e28985b0840
036d841b132c14046e26d8f2da1bc634c6ad34885ed1295660694a91c98933a6
GET /s/lato/v20/S6uyw4BMUTPHjx4wXiWtFCc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://dx2eq2oh924g4.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14044
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 20 Jan 2023 02:10:37 GMT
expires: Sat, 20 Jan 2024 02:10:37 GMT
cache-control: public, max-age=31536000
age: 63249
last-modified: Tue, 10 Aug 2021 00:19:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/oswald/v40/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYjMdZwl.woff2
200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v40/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYjMdZwl.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17720, version 1.0\012- data
Hash f25428be2078a780f584e977765cb2fa
63b08035a39f17610a04de671c1d56e33bddf627
29ebdbb570753623b8ed9a6d19f4c79fb42b2481c21cb4141eb055b7d177e79a
GET /s/oswald/v40/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYjMdZwl.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://dx2eq2oh924g4.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17720
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jan 2023 13:09:19 GMT
expires: Wed, 17 Jan 2024 13:09:19 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 10 Aug 2021 00:17:45 GMT
content-type: font/woff2
age: 282927
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 61162a42e6bf5415f3d80ceac5e25ad2
2c2a987ab75a008682a5defd50d20be737912b23
4260bef1cd37c1f0372c9a5aae4ca0a6564c6473f68a4f4181ed83ed3d6b2d48
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.evgnet.com/beacon/savethechildren/production/scripts/evergage.min.js
200 OK 48 kB URL HTTP/2 cdn.evgnet.com/beacon/savethechildren/production/scripts/evergage.min.js
IP
File type ASCII text, with very long lines (579)
Hash 8417bbfac9f9fc1ca54a14b9935250a2
8ed02d96f86efedb82bb4b5ffc98d4c1a150edbc
dc1d670f066c5dbccb887a8c0b844ad02617e9ca3334247c07afbfb68105cffe
GET /beacon/savethechildren/production/scripts/evergage.min.js HTTP/1.1
Host: cdn.evgnet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: LIAOO1Vob3ehCnQi+GZshwgogx5QlwaWG8kLM4u24u1BBZkPemNaemVK9UiD0tpHuXW4092LeUg=
x-amz-request-id: 4Q6MGX9ZPDTAJP1M
x-amz-replication-status: COMPLETED
last-modified: Tue, 17 Jan 2023 18:32:04 GMT
etag: "8417bbfac9f9fc1ca54a14b9935250a2"
cache-control: max-age=120
content-encoding: gzip
x-amz-meta-evergage-beacon-ver: 16
x-amz-meta-evergage-sum: c6eeef07c08ef528f59065415217aa0d8f944bff
x-amz-version-id: MqQlJGa6RHSakNEl6D1E3.eZzapta1Rx
content-type: application/javascript; charset=utf-8
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 20 Jan 2023 19:44:46 GMT
age: 6
x-served-by: cache-iad-kiad7000028-IAD, cache-bma1633-BMA
x-cache: HIT, HIT
x-cache-hits: 17, 1
x-timer: S1674243887.579902,VS0,VE91
vary: Accept-Encoding
timing-allow-origin: *
content-length: 48515
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/css/stc-styles.css?t=2022-11-17
200 OK 103 kB URL HTTP/2 dx2eq2oh924g4.cloudfront.net/css/stc-styles.css?t=2022-11-17
IP
Size 103 kB (102580 bytes)
Hash 2db92941d0f84f7d3cb51cc6d4bb1623
1ff8e55678c95531ff23939a5fb296ce94b88884
bf5a9af785290edba7b469cf3d6c93799652271fe9ce43ec5d99c4fa22b82748
GET /css/stc-styles.css?t=2022-11-17 HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Wed, 18 Jan 2023 20:28:28 GMT
last-modified: Wed, 18 Jan 2023 20:03:51 GMT
etag: W/"3683b4a6231a38868a2c6928c353b2e7"
cache-control: max-age=604801
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xponGQS7YB_ZsE1gKvKq6y2gTl_b--QtShIjN5qmykKTzM2IgunaIA==
age: 170177
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5797
Expires: Fri, 20 Jan 2023 21:21:23 GMT
Date: Fri, 20 Jan 2023 19:44:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5797
Expires: Fri, 20 Jan 2023 21:21:23 GMT
Date: Fri, 20 Jan 2023 19:44:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89055b1f42119cc1e7a33ce2fc364e76
20550fd56bf49a8aa30e18a923be22cda3f2ba7b
7698e9bb59f46011dbd3b6b74fc5784ac60d64c9d8403e8fe3aa18a60c17393d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7698E9BB59F46011DBD3B6B74FC5784AC60D64C9D8403E8FE3AA18A60C17393D"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5797
Expires: Fri, 20 Jan 2023 21:21:23 GMT
Date: Fri, 20 Jan 2023 19:44:46 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa19e2681-f167-4577-b7db-9afc7bd1ccf2.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa19e2681-f167-4577-b7db-9afc7bd1ccf2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d3af2d51fb89ef0261ba025d76169261
9b3f4e3f63b64030624e02ad6ab8ef43a676dd66
c3d5a6f829dc59db8ed27a92fcfc6d387633bb43388e2c19d68b89356a13b1cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa19e2681-f167-4577-b7db-9afc7bd1ccf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13812
x-amzn-requestid: 7e3de1bc-a850-4a6e-891c-094996ee4a76
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fAmw2HldoAMF-Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c9b805-5443ffce123461b44b9815b2;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 21:37:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: EUm5z7VSHRCILWZmLR5u_EuVtfVDerCwgAO7R19fDJZqYmsPa6Vz3Q==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 22:02:03 GMT
etag: "9b3f4e3f63b64030624e02ad6ab8ef43a676dd66"
content-type: image/jpeg
age: 78163
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbb60a79-f6ba-46cb-8679-5da65b53c107.webp
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbb60a79-f6ba-46cb-8679-5da65b53c107.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3638dc76d0638625ac9a31c038df3a44
deff1903d591273a96d538ae77988d8a080e228c
8382af3843ebeca8e5c13fdd60f7fb92b479915416f36686fce40566fd87ce68
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbb60a79-f6ba-46cb-8679-5da65b53c107.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10867
x-amzn-requestid: 8d882e21-d4c5-49ac-b76a-198cec065377
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fAnVTEfpoAMFgJA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c9b8ee-6579537e6a82269f4bc99395;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 21:41:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: U9KuaPBC5u3bWYidHridxyj8GEYB79yig6zD9FxGCGwXh6zvs7QokA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 22:01:55 GMT
age: 78171
etag: "deff1903d591273a96d538ae77988d8a080e228c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F035e7b24-d861-44e8-ac81-1dcc5e3a0e2a.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F035e7b24-d861-44e8-ac81-1dcc5e3a0e2a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6889019ec9c1155e9e4b4eeb6a86760d
59c6f3a313efba4a67a63c9ae725db8d17c08c03
378510ecdbbb2b6248391195eace1dc3120d18b6f13e52033a3e88024592cac4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F035e7b24-d861-44e8-ac81-1dcc5e3a0e2a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5588
x-amzn-requestid: c9d6f09b-2cd9-4137-9369-0295836e06e0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fAnT0FkNIAMF7Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c9b8e5-5c6360c025826ed06525c67e;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 21:40:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YDM_osYMROfqJk1OPZCo05eNDlcbqMjPkc0AvggHtzmOiDY12BS78Q==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 22:02:01 GMT
age: 78165
etag: "59c6f3a313efba4a67a63c9ae725db8d17c08c03"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1122c75-908d-4e51-8a61-b64f7ab77c76.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1122c75-908d-4e51-8a61-b64f7ab77c76.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f5195ac5d83278bed049661c0d1aaa4a
74b3e81e1dfc9f0a50aa936ba02b357c0df3aa9e
30af8f591b2d4f7c8de7d52ea53bb170ca426ef0550001c7802a7f993a6344df
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1122c75-908d-4e51-8a61-b64f7ab77c76.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7111
x-amzn-requestid: d9b5e6b0-3995-4c70-be84-0b1b457b7143
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fAmRlHtkIAMFiGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c9b73d-37d253ee68fe1b7e483097dd;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 21:33:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 86-hgCgiYN-PYLZgXJO79kM9Vm6DIiRixaz-kQZFaY0m5481x8GWlw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 22:04:16 GMT
etag: "74b3e81e1dfc9f0a50aa936ba02b357c0df3aa9e"
content-type: image/jpeg
age: 78030
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03285c30-851a-4892-8ad6-994296dfce51.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03285c30-851a-4892-8ad6-994296dfce51.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1eff6cdee4c98a6f806c5b417b12cdf2
4b4b817055dc2c0699c6e01d85841638e63d9c0e
2f2fdd1e829e4175e8cf915794ffc16e24dac72ab425448cd0ac5165b1b87b2f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03285c30-851a-4892-8ad6-994296dfce51.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5351
x-amzn-requestid: 86ba43bc-0b0f-40ba-9015-463371baf673
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3foQFg_IAMFSZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c61301-0c1461622a361a5d0ab35cbb;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6KG0FqyN4ShRqE3cdV81X749Tlas0mf5W7Elvt5WOMZ1BHc3LXXU1g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 20 Jan 2023 07:21:11 GMT
age: 44615
etag: "4b4b817055dc2c0699c6e01d85841638e63d9c0e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0c09209-bc9e-43f8-ace4-c90a39c75c63.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0c09209-bc9e-43f8-ace4-c90a39c75c63.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5553b06c7dde4dc377f9f4e65bc8ace7
9dca5486485416d1aef199be08a50abd717addc7
33a5d1a21738218e0a6fe16d79045bd390af2e84073330a0a94c03812e1ba3ba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0c09209-bc9e-43f8-ace4-c90a39c75c63.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: 70710215-b8fd-44eb-8b50-f0948f98366c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fAmQWFNvoAMF3ZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c9b735-19e7e3865ce991cb5447f0f2;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 21:33:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Fc9dIiT5QQaTowAA6lp8ffJl4Niq3i_iVe54lYhAV52kJ8Q98EMJqQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 19 Jan 2023 21:58:19 GMT
age: 78387
etag: "9dca5486485416d1aef199be08a50abd717addc7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
support.savethechildren.org/site/SPageNavigator/login.html?nexturl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4
200 200 13 kB URL HTTP/1.1 support.savethechildren.org/site/SPageNavigator/login.html?nexturl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (771), with CRLF, LF line terminators
Hash 0bf88d82524226cf0d57a1d2cce6a02a
176e6c7be535b976b0423d3be3174563e17d52fa
479c627a67503440a4af7d5cbc5aa0eece25f03689b2764aa46c548e797bbda0
GET /site/SPageNavigator/login.html?nexturl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4 HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/site/SPageNavigator/supporter_center.html;jsessionid=00000000.app30124b?NONCE_TOKEN=83EFC651A328234A9C3A12FADF2DB1D4
Cookie: JSESSIONID=7100EFD4DCD66BEB5E03C3D56B45E6DC.app30124b; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19378%7CvVersion%7C5.4.0; mbox=session#3845cd241a094928bb935242f4be0232#1674245746; at_check=true
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 200
Date: Fri, 20 Jan 2023 19:44:47 GMT
Server: Apache
X-Content-Type-Options: nosniff
Cache-Control: no-store
Pragma: no-cache
Content-Security-Policy: frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com; report-uri https://support.savethechildren.org/site/XFrameViolation
X-Frame-Options: allow-from 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com
Keep-Alive: timeout=15, max=252
Connection: Keep-Alive
Content-Type: text/html;charset=ISO-8859-1
Content-Encoding: gzip
Transfer-Encoding: chunked
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
304 Not Modified 0 B URL HTTP/2 assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Mon, 14 Feb 2022 16:35:31 GMT
If-None-Match: "d860c16ac938f7d839f0ec158d02d0f0:1644856531.418573"
TE: trailers
HTTP/2 304 Not Modified
content-type: application/x-javascript
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
etag: "d860c16ac938f7d839f0ec158d02d0f0:1644856531.418573"
expires: Fri, 20 Jan 2023 20:44:47 GMT
date: Fri, 20 Jan 2023 19:44:47 GMT
cache-control: no-cache
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js
304 Not Modified 0 B URL HTTP/2 assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_ActivityMap.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Mon, 14 Feb 2022 16:35:31 GMT
If-None-Match: "2d1382c349d480b6b41574ac0c1af066:1644856531.739514"
TE: trailers
HTTP/2 304 Not Modified
content-type: application/x-javascript
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
etag: "2d1382c349d480b6b41574ac0c1af066:1644856531.739514"
expires: Fri, 20 Jan 2023 20:44:47 GMT
date: Fri, 20 Jan 2023 19:44:47 GMT
cache-control: no-cache
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
www.savethechildren.org/content/dam/usa/images/annual-report/2021/2021-annual-report-pie-chart-footer-version.png
304 Not Modified 0 B URL HTTP/2 www.savethechildren.org/content/dam/usa/images/annual-report/2021/2021-annual-report-pie-chart-footer-version.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /content/dam/usa/images/annual-report/2021/2021-annual-report-pie-chart-footer-version.png HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19378%7CvVersion%7C5.4.0; mbox=session#3845cd241a094928bb935242f4be0232#1674245747; at_check=true; _sfid_58d2={%22anonymousId%22:%22ab2b5d189a28fe69%22}; _evga_c797={%22uuid%22:%22ab2b5d189a28fe69%22}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Fri, 20 Jan 2023 00:00:19 GMT
If-None-Match: "2eff-5f2a6bc3a7aa2-gzip"
TE: trailers
HTTP/2 304 Not Modified
date: Fri, 20 Jan 2023 19:44:47 GMT
cache-control: max-age=86400, no-cache="set-cookie"
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com
etag: "2eff-5f2a6bc3a7aa2-gzip"
expires: Sat, 21 Jan 2023 10:10:51 GMT
server: Apache
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rtFwl-Ch8gpngs3lBVJEIrh3yShADPFmM_HTR-yuknLYYAfZ8PnNpg==
age: 34436
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v20/S6u8w4BMUTPHjxsAXC-qNiXg7Q.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/lato/v20/S6u8w4BMUTPHjxsAXC-qNiXg7Q.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14864, version 1.0\012- data
Hash 39f3863d4eb52624b5938903040114b6
db000838c364730489cb4c4941b464df44a3e432
fe4bbdad1d6dff75cde79f8afc07f29502bd4708cb0ce5f552083c3d81ba8382
GET /s/lato/v20/S6u8w4BMUTPHjxsAXC-qNiXg7Q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://dx2eq2oh924g4.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14864
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 19 Jan 2023 13:07:44 GMT
expires: Fri, 19 Jan 2024 13:07:44 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 10 Aug 2021 00:19:08 GMT
content-type: font/woff2
age: 110223
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c97e1bd01d20629851b1393a019b667a
2971fef471c737756d1944d4a3e08bcea03f7f45
0e2a26afd66f587a4ce3202a865aa7b40e67bdee3b7892773822c8a80acf81ba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2056
Cache-Control: max-age=125784
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:47 GMT
Etag: "63ca2f7f-1d7"
Expires: Sun, 22 Jan 2023 06:41:11 GMT
Last-Modified: Fri, 20 Jan 2023 06:06:55 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bccd1fe14275d3bb56418297e502cd10
cdf19d2a4099ada369589fc7aa7021f9b30302aa
801e8b57b77806d98fe23b8421a8fdba9f1138827cc320cb5dcc986161aa7ca4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1674243886736
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1674243886736
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1674243886736 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://support.savethechildren.org
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-00fcfd78a.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1674243886736
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=15297166139489164341436147685858805933; Max-Age=15552000; Expires=Wed, 19 Jul 2023 19:44:47 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: akWKhpXTQQM=
Content-Length: 0
Connection: keep-alive
consentcdn.cookiebot.com/sdk/bc-v4.min.html
200 OK 392 B URL HTTP/2 consentcdn.cookiebot.com/sdk/bc-v4.min.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (627), with no line terminators
Hash e7268eccad39bd651697fa793a52cc5c
47299cefa2397b0c1d0c5bf232390a5cf1bcc4d3
907e16c84d35556e4ed841a3511915e6d4bb4e9d68cfca178a740e90b4d80e35
GET /sdk/bc-v4.min.html HTTP/1.1
Host: consentcdn.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "3d08665fa4c7bcf9fa2dcbbc7efe1d0f:1649057029.895163"
last-modified: Mon, 04 Apr 2022 07:23:49 GMT
server: AkamaiNetStorage
x-akamai-transformed: 9 - 0 pmb=mRUM,1
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=29771517
expires: Sun, 31 Dec 2023 09:36:44 GMT
date: Fri, 20 Jan 2023 19:44:47 GMT
content-length: 392
server-timing: cdn-cache; desc=HIT, edge; dur=1
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-MFG5K96
200 OK 86 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MFG5K96
IP
File type ASCII text, with very long lines (23484)
Hash af9b25818971602d6490e4bbef64a57f
4ebaedc369d90488e4954db54623a58bae4a9022
94a2082eddaeb784cce99c41d023bf8b5c26ee1477f3bb46aaa2952ba9c2db59
GET /gtm.js?id=GTM-MFG5K96 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 20 Jan 2023 19:44:47 GMT
expires: Fri, 20 Jan 2023 19:44:47 GMT
cache-control: private, max-age=900
last-modified: Fri, 20 Jan 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85727
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 647d9d61629adff30a87b3e631fa587f
3651dba5d71dadc1bf4068f95734f51efa76a578
a2d15a40f5689feb036e802df1f9dab2510499c4c4528217608f6d6b74159e76
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 20 Jan 2023 19:44:47 GMT
Last-Modified: Fri, 20 Jan 2023 18:48:28 GMT
Server: ECS (nyb/1D1B)
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VXVsLx1A16S82wRGP41AOX6R4Yub1iEiABjWIdgTG6xUo910lOvppg==
Age: 3379
consent.cookiebot.com/398fa4c9-90ea-4dbe-b61c-52e460fbedac/cc.js?renew=false&referer=support.savethechildren.org&dnt=false&init=false
200 OK 156 B URL HTTP/2 consent.cookiebot.com/398fa4c9-90ea-4dbe-b61c-52e460fbedac/cc.js?renew=false&referer=support.savethechildren.org&dnt=false&init=false
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF line terminators
Hash 3477de123b1bcca0a96d557218c3c72c
279660604c7c2e9d5be154df57180849efca1e34
9331664c1938651f09a14fb45d0af5fd86a72c2d9aff0bc26193e239ddb38268
GET /398fa4c9-90ea-4dbe-b61c-52e460fbedac/cc.js?renew=false&referer=support.savethechildren.org&dnt=false&init=false HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=1
content-type: application/x-javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 156
date: Fri, 20 Jan 2023 19:44:47 GMT
X-Firefox-Spdy: h2
support.savethechildren.org/images/card_visa_cvv.png
200 OK 3.0 kB URL HTTP/1.1 support.savethechildren.org/images/card_visa_cvv.png
IP
File type PNG image data, 208 x 98, 8-bit colormap, non-interlaced\012- data
Hash a7b352699252abfad031de7ae1638be0
6904c6c086c757547156eb40d08193e40328f6ca
a0e2f66644877655cd362b939852cb71181baecf71fd3dc2a1df419030809a3c
GET /images/card_visa_cvv.png HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/site/SPageNavigator/login.html?nexturl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19378%7CvVersion%7C5.4.0; mbox=session#3845cd241a094928bb935242f4be0232#1674245746; at_check=true; _sfid_58d2={%22anonymousId%22:%22ab2b5d189a28fe69%22}; _evga_c797={%22uuid%22:%22ab2b5d189a28fe69%22}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Age: 58
Date: Fri, 20 Jan 2023 19:43:50 GMT
Connection: Keep-Alive
Via: NS-CACHE-10.0: 32
ETag: "bc1-53d307f185651"
Server: Apache
Last-Modified: Fri, 23 Sep 2016 17:56:23 GMT
Accept-Ranges: bytes
Content-Length: 3009
Keep-Alive: timeout=15, max=179
Content-Type: image/png
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0d8d55791acc6bce29e4599c25afe522
596f02869a51de3f6d522585be0b1b841f880fbe
64c7b6f660a100f085af77eff4848a75239200c8af93382650c3defa1bfd2829
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 11368cb0c5766131240f5fb1ef4f64bc
9c18ea58f5ebb07ccf04b38d503b2f9fcce06568
025073347118d1623b90a5ef934a3edfe5140a038140279b91a39833cbec0a43
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 20 Jan 2023 19:44:47 GMT
Last-Modified: Fri, 20 Jan 2023 19:11:15 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mgR7ozLnGfRVCiHPlUv0oLeKqdSJkG6aMlDtARHnfTsw2-4sFJ1e1w==
Age: 2012
dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1674243886736
200 OK 124 B URL HTTP/1.1 dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1674243886736
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1f6783349ac4177ec3b3845fd520dca6
d84e7a43a8c8ff6f1a568ad6cb4162767f5b32b7
64bc30aa6a9d9e5396bb67c6af32c31f5ca6610641f0bdea10d759281df6adca
GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&ts=1674243886736 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://support.savethechildren.org
Content-Type: application/x-www-form-urlencoded
Referer: https://support.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://support.savethechildren.org
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-2-v045-0eab94181.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-Error: 172
X-TID: kZEYg0cyRY8=
Content-Length: 124
Connection: keep-alive
support.savethechildren.org/site/PixelServer?t=undefined
200 200 43 B URL HTTP/1.1 support.savethechildren.org/site/PixelServer?t=undefined
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /site/PixelServer?t=undefined HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/site/SPageNavigator/login.html?nexturl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4
Cookie: JSESSIONID=7100EFD4DCD66BEB5E03C3D56B45E6DC.app30124b; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19378%7CvVersion%7C5.4.0; mbox=session#3845cd241a094928bb935242f4be0232#1674245747; at_check=true; _sfid_58d2={%22anonymousId%22:%22ab2b5d189a28fe69%22}; _evga_c797={%22uuid%22:%22ab2b5d189a28fe69%22}; stc-analytics-source=Web|Direct||||1/20/2023; stc-session-count=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 200
Date: Fri, 20 Jan 2023 19:44:47 GMT
Server: Apache
Cache-Control: no-store
Content-Length: 43
Keep-Alive: timeout=15, max=448
Connection: Keep-Alive
Content-Type: image/gif
support.savethechildren.org/images/card_amex_cvv.png
200 OK 3.6 kB URL HTTP/1.1 support.savethechildren.org/images/card_amex_cvv.png
IP
File type PNG image data, 208 x 98, 8-bit colormap, non-interlaced\012- data
Hash 643e3b4a8b0af1acab51ce7c94b96a90
7da16675128835836579242036e055967ce87742
9f1452b78e9dda47be12aca96738dea2114ade0fd9fe474ee3af364c0fcf766e
GET /images/card_amex_cvv.png HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/site/SPageNavigator/login.html?nexturl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19378%7CvVersion%7C5.4.0; mbox=session#3845cd241a094928bb935242f4be0232#1674245746; at_check=true; _sfid_58d2={%22anonymousId%22:%22ab2b5d189a28fe69%22}; _evga_c797={%22uuid%22:%22ab2b5d189a28fe69%22}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Age: 58
Date: Fri, 20 Jan 2023 19:43:50 GMT
Connection: Keep-Alive
Via: NS-CACHE-10.0: 32
ETag: "dec-53d307f081aa0"
Server: Apache
Last-Modified: Fri, 23 Sep 2016 17:56:22 GMT
Accept-Ranges: bytes
Content-Length: 3564
Keep-Alive: timeout=15, max=178
Content-Type: image/png
savethechildren.us-7.evergage.com/pr?.top=501&.dt=2163&.bv=16&_ak=savethechildren&_ds=production&.scv=21&channel=Web&_r=295007&.anonId=ab2b5d189a28fe69&_anon=true
204 No Content 0 B URL HTTP/2 savethechildren.us-7.evergage.com/pr?.top=501&.dt=2163&.bv=16&_ak=savethechildren&_ds=production&.scv=21&channel=Web&_r=295007&.anonId=ab2b5d189a28fe69&_anon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pr?.top=501&.dt=2163&.bv=16&_ak=savethechildren&_ds=production&.scv=21&channel=Web&_r=295007&.anonId=ab2b5d189a28fe69&_anon=true HTTP/1.1
Host: savethechildren.us-7.evergage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 0
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 20 Jan 2023 19:44:48 GMT
set-cookie: AWSALB=0g6xJ+m16zWGVPtC0X6Vk3T8YosIXud2/q3ONlKQJTel8A5rjxy5YNaKJHSxYLlg53dRJOna3k429wInIvWiJBAi5OaHnQXfdVsANsAQbIAnXAjmq+yXlM7OIbfj; Expires=Fri, 27 Jan 2023 19:44:48 GMT; Path=/
AWSALBCORS=0g6xJ+m16zWGVPtC0X6Vk3T8YosIXud2/q3ONlKQJTel8A5rjxy5YNaKJHSxYLlg53dRJOna3k429wInIvWiJBAi5OaHnQXfdVsANsAQbIAnXAjmq+yXlM7OIbfj; Expires=Fri, 27 Jan 2023 19:44:48 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dcc930ab361b77cc93ea46e9594b8215
850720fc987b30c574033105850d8f02a2583f35
3f5559ca3ab3111c6b069fec5891be6d6271173125f56f6d9e10480312a4f5a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3F5559CA3AB3111C6B069FEC5891BE6D6271173125F56F6D9E10480312A4F5A5"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16922
Expires: Sat, 21 Jan 2023 00:26:50 GMT
Date: Fri, 20 Jan 2023 19:44:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4fbeb240c6fef0a3d9e4b15f4f711556
196f31ef1c3e4dd3735aee9ba33db076f25400c5
7f868a79d819bc45a09f3fc0aa4dc3f5508f3dd89513e157f834c9ab2d836ebc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7F868A79D819BC45A09F3FC0AA4DC3F5508F3DD89513E157F834C9AB2D836EBC"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7319
Expires: Fri, 20 Jan 2023 21:46:47 GMT
Date: Fri, 20 Jan 2023 19:44:48 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 68658308710638a48579e383f84442fa
65c8b1943407a982264ddeed982b86fee61dc92d
4d627705de8e57450dba6a6093292a4f5dd5d3029fc8da88ac9ac21a97818dff
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=88381
Date: Fri, 20 Jan 2023 19:44:48 GMT
Etag: "63c99087-1d7"
Expires: Sat, 21 Jan 2023 20:17:49 GMT
Last-Modified: Thu, 19 Jan 2023 18:48:39 GMT
Server: ECS (bsa/EB17)
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: CT-vJOJyFr-BShYkX-auHUXldccpN9fhHsOFhil4Sqo47BMin5ijOw==
Age: 5350
cdn.decibelinsight.net/i/13874/253647/di.js
200 OK 79 kB URL HTTP/2 cdn.decibelinsight.net/i/13874/253647/di.js
IP
Hash 4bc930ae8c5ae7b3774361c728a124e4
34d9132ac9aebd262d7fb8d14637bbaccdd8345d
92d96f68400bfdda74317220507230ee695d9e6666770b6ee92948961ca13a3a
GET /i/13874/253647/di.js HTTP/1.1
Host: cdn.decibelinsight.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
server: nginx
date: Fri, 20 Jan 2023 19:44:47 GMT
cache-control: private, max-age=5400
etag: W/000130009-185C3F725EF
timing-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
content-encoding: gzip
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xCeXpBnsblhvA3MaCW-ghraNpW_-1yq8ce_Csm_pa0fGbfgrE2VNEQ==
X-Firefox-Spdy: h2
s3-us-west-2.amazonaws.com/mfesecure-public/host/support.savethechildren.org/client.json?source=jsmain
200 OK 176 B URL HTTP/1.1 s3-us-west-2.amazonaws.com/mfesecure-public/host/support.savethechildren.org/client.json?source=jsmain
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash bf42a865932fbe19ffc574cbbb46eafa
6847504e9f747cffa331d1fec7aa6b10d8d853b7
14e12f04477cd2e2f28a9e9ae4cbffe5de23be988db620c7ac7811fd39e01bc0
GET /mfesecure-public/host/support.savethechildren.org/client.json?source=jsmain HTTP/1.1
Host: s3-us-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: bFPGxu+bVYTk15e+KX2zVpwxyFeCsmFUiV28AHioytiYckdvxvSca1Wq7TvDlnrldNY+pWhvk4k=
x-amz-request-id: P2NQZJ9XS2TW85YC
Date: Fri, 20 Jan 2023 19:44:49 GMT
Access-Control-Allow-Origin: https://support.savethechildren.org
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Expose-Headers: Access-Control-Allow-Origin
Access-Control-Max-Age: 60
Access-Control-Allow-Credentials: true
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-replication-status: COMPLETED
Last-Modified: Tue, 17 Jan 2023 01:10:13 GMT
ETag: "bf42a865932fbe19ffc574cbbb46eafa"
x-amz-server-side-encryption: AES256
Cache-Control: public, max-age=60
Content-Encoding: gzip
x-amz-version-id: FJEaAYFvah96e4t_UU5I5R15wz6xaWCL
Accept-Ranges: bytes
Content-Type: application/json
Server: AmazonS3
Content-Length: 176
s3-us-west-2.amazonaws.com/mfesecure-public/host/support.savethechildren.org/client.json?source=jsinline
200 OK 176 B URL HTTP/1.1 s3-us-west-2.amazonaws.com/mfesecure-public/host/support.savethechildren.org/client.json?source=jsinline
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash bf42a865932fbe19ffc574cbbb46eafa
6847504e9f747cffa331d1fec7aa6b10d8d853b7
14e12f04477cd2e2f28a9e9ae4cbffe5de23be988db620c7ac7811fd39e01bc0
GET /mfesecure-public/host/support.savethechildren.org/client.json?source=jsinline HTTP/1.1
Host: s3-us-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: L+Qg5zuH/kdFi+4Q204PHF7d3v3EG1EOoPS4cquz9xECVoSYnRLQHL70wavGgbf1yYaCs7d2zVo=
x-amz-request-id: P2NKH84XAVRX6FHK
Date: Fri, 20 Jan 2023 19:44:49 GMT
Access-Control-Allow-Origin: https://support.savethechildren.org
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Expose-Headers: Access-Control-Allow-Origin
Access-Control-Max-Age: 60
Access-Control-Allow-Credentials: true
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-replication-status: COMPLETED
Last-Modified: Tue, 17 Jan 2023 01:10:13 GMT
ETag: "bf42a865932fbe19ffc574cbbb46eafa"
x-amz-server-side-encryption: AES256
Cache-Control: public, max-age=60
Content-Encoding: gzip
x-amz-version-id: FJEaAYFvah96e4t_UU5I5R15wz6xaWCL
Accept-Ranges: bytes
Content-Type: application/json
Server: AmazonS3
Content-Length: 176
dx2eq2oh924g4.cloudfront.net/images/logos/charity-navigator-logo.png
200 OK 27 kB URL HTTP/2 dx2eq2oh924g4.cloudfront.net/images/logos/charity-navigator-logo.png
IP
File type PNG image data, 238 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash a81ba267b17fa69211abc6ccfd93cb72
f6693e1d36fbc58db319fc0af16b873ece050181
ddaf05992cd382691c8644163c876c5ace24a4900478efdbe1ba7354af4f60cf
GET /images/logos/charity-navigator-logo.png HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 26644
date: Wed, 18 Jan 2023 20:04:27 GMT
last-modified: Wed, 18 Jan 2023 20:03:53 GMT
etag: "a81ba267b17fa69211abc6ccfd93cb72"
cache-control: max-age=604801
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pPJA2A7SLKwzeaM485WNSGNX-3NMEBvw4568uwNpQnhkcy7nEvD5rQ==
age: 171622
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/images/icons/facebook-initial.svg
200 OK 892 B URL HTTP/2 dx2eq2oh924g4.cloudfront.net/images/icons/facebook-initial.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 84abfea728af630e24ad9307d952dea1
ce2fb1bb3cac5891de70ffd43114670ab54d1f54
099a89edb65f4cd9501d6c1a11ef5f6b26ec28713c76a01629a42612f7c4908d
GET /images/icons/facebook-initial.svg HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 892
date: Wed, 18 Jan 2023 20:04:27 GMT
last-modified: Wed, 18 Jan 2023 20:03:52 GMT
etag: "84abfea728af630e24ad9307d952dea1"
cache-control: max-age=604801
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Lsc3aotBbmUylfMHCbXjWJUBg0xaOD3_Cs5yuQB7bXrmiaUadSFmVQ==
age: 171622
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/images/logos/charity-watch-logo.png
200 OK 12 kB URL HTTP/2 dx2eq2oh924g4.cloudfront.net/images/logos/charity-watch-logo.png
IP
File type PNG image data, 153 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash ed6930c5740c723587f4167c5323fae5
9ecafaf33fd5cb95f467eed21fac52f5e939b92d
60cbe4e17fb6a2a02d3db7fa5126fb6a9adb26e054117a79d16aca4a2036610a
GET /images/logos/charity-watch-logo.png HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 12543
date: Thu, 19 Jan 2023 01:18:53 GMT
last-modified: Wed, 18 Jan 2023 20:03:53 GMT
etag: "ed6930c5740c723587f4167c5323fae5"
cache-control: max-age=604801
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: azrboXjWnKCWhWRBAtvDtszaERemvr40LJ8YPGsp6uSWfCtCAI08Tg==
age: 152756
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/images/icons/linkedin.svg
200 OK 636 B URL HTTP/2 dx2eq2oh924g4.cloudfront.net/images/icons/linkedin.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash a93daa155228edfd9002b35cd6938b38
86477bfebd4e978caa3a17b9719cccf506551c15
f16f5e7a39830113f7119db6ee715eec682e3c879cc0ae5aeab6d2204153a9a8
GET /images/icons/linkedin.svg HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 636
date: Wed, 18 Jan 2023 20:04:27 GMT
last-modified: Wed, 18 Jan 2023 20:03:52 GMT
etag: "a93daa155228edfd9002b35cd6938b38"
cache-control: max-age=604801
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FNvVd1_0c37ulTysGsb5OdAog5zGLVDsRdSef6kweA7RjODcDns0Vw==
age: 171622
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/images/bgs/sign-in-form-chalk.jpg
200 OK 441 kB URL HTTP/2 dx2eq2oh924g4.cloudfront.net/images/bgs/sign-in-form-chalk.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1700x1513, components 3\012- data
Size 441 kB (440959 bytes)
Hash 97f5cd5760e77161f5f4e3b20bed9e7f
ed406d95936d0f4aaeee7a4041148f24018ed6e6
c84f59ada8be87515dda2bd504edbfb2ae519b000de3de2faab42d13649eb6eb
GET /images/bgs/sign-in-form-chalk.jpg HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 440959
date: Thu, 19 Jan 2023 05:12:48 GMT
last-modified: Thu, 20 Dec 2018 16:28:01 GMT
etag: "97f5cd5760e77161f5f4e3b20bed9e7f"
cache-control: max-age=604801
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uQBJTr0UPiz7AMjkIm7yJEKOPXJTtddVqgvNBpS44_efVxCva5oupQ==
age: 138721
X-Firefox-Spdy: h2
cdn.ywxi.net/meter/support.savethechildren.org/205.svg?ts=1673917812274&l=en-US
200 OK 7.4 kB URL HTTP/2 cdn.ywxi.net/meter/support.savethechildren.org/205.svg?ts=1673917812274&l=en-US
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8293)
Hash 37a617864abee25b08f3035aecec7f62
0e3531831347c04fcf40b617abd3799ed189d67d
a3b583ead61843c69ad57615c823497e06795f83c8c519e229d4cc7c7eb16c25
GET /meter/support.savethechildren.org/205.svg?ts=1673917812274&l=en-US HTTP/1.1
Host: cdn.ywxi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 7400
date: Fri, 20 Jan 2023 19:23:49 GMT
server: Apache
content-security-policy-report-only: report-uri https://52723791ca12811bfedec52ea4c44290.report-uri.com/r/d/csp/reportOnly; default-src 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; script-src-elem * 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-elem * 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; img-src * data:; font-src * data:; connect-src *; media-src * blob:; object-src 'none'; frame-src *; frame-ancestors *; form-action 'self'
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
cache-control: public
expires: Fri, 20 Jan 2023 20:23:49 GMT
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eD6P75nXljACYWIsJIZ2BSrMZI_Ah1dHC1dcjhFYWUs_W7YvEH45BQ==
age: 1259
X-Firefox-Spdy: h2
a.omappapi.com/app/js/api.min.css
200 OK 2.6 kB URL HTTP/2 a.omappapi.com/app/js/api.min.css
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (17996), with no line terminators
Hash 7b7204187f924699e74c4659f594a46c
fab5f0ddb9495c25e28aa63033901a5e2962722a
77a5fddc66e86bdd1c9954a80f455e8b766fc836123204cb42a7a5e30e6875a5
GET /app/js/api.min.css HTTP/1.1
Host: a.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:48 GMT
content-type: text/css
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"63bed0c8-464c"
last-modified: Wed, 11 Jan 2023 15:07:52 GMT
cdn-storageserver: DE-199
cdn-requestpullsuccess: True
cdn-fileserver: 522
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 01/11/2023 15:08:21
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: e5bc7f98205f46503dbfc02765125d0f
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
api.omappapi.com/v3/geolocate/json
200 OK 471 B URL HTTP/2 api.omappapi.com/v3/geolocate/json
IP
File type JSON data\012- , ASCII text, with very long lines (471), with no line terminators
Hash 9fff4ffa66fd681f84a9d832492a89d6
1488dc26fcd95bc344a8cb4a9a398ddb508d83bd
5f0a906a730e5996601743dea353406d4d424889a1916e2c47a43a27ef9d74af
GET /v3/geolocate/json HTTP/1.1
Host: api.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 471
date: Fri, 20 Jan 2023 19:44:54 GMT
x-ratelimit-limit: 1000
x-ratelimit-remaining: 999
x-ratelimit-reset: 1674243954
x-user-agent: standard--
x-cache-config: 0 0
x-cache-status: BYPASS
x-pagely-debug: mainblock
access-control-allow-origin: *
server: Pagely Gateway/1.5.1
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dsgzsnzGSN1iQbj9HfoMhCsKuVPxxvpnXu16I8rMtfgg6Ei7c-dVVA==
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/images/icons/instagram.svg
200 OK 1.4 kB URL HTTP/2 dx2eq2oh924g4.cloudfront.net/images/icons/instagram.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2065)
Hash fc728d42fca66fb25e5d34e04eb27612
462d2bdf7dab3e15d099eede1c9dfe72785fff6c
c8d2cc309c4729e9508f8a3efa5dc13ebfecf5a38e7f391414bc67b40123c5b4
GET /images/icons/instagram.svg HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 18 Jan 2023 20:04:27 GMT
last-modified: Wed, 18 Jan 2023 20:03:52 GMT
etag: W/"e9d1fdc0855751a3a7717a44d56fcd90"
cache-control: max-age=604801
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Icu2kGpOMU-qIyVDcmS04-YeMiqRusrlio4ahvBu_7P2qX18O7_wig==
age: 171622
X-Firefox-Spdy: h2
support.savethechildren.org/favicon.ico
200 OK 4.2 kB URL HTTP/1.1 support.savethechildren.org/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash 925690ba9cbbcabab6b172c2ef30b000
2a6066e48e7be7543c3653fed3b195f21fe3169f
a929fc5d76c18aa575f003b48d582d211c5f3b62d3bcd2238d71a3ca5bf3a5d3
GET /favicon.ico HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/site/SPageNavigator/login.html?nexturl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19378%7CvVersion%7C5.4.0; mbox=session#3845cd241a094928bb935242f4be0232#1674245747; at_check=true; _sfid_58d2={%22anonymousId%22:%22ab2b5d189a28fe69%22%2C%22consents%22:[]}; _evga_c797={%22uuid%22:%22ab2b5d189a28fe69%22}; stc-analytics-source=Web|Direct||||1/20/2023; stc-session-count=0; CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cmethod:%27implied%27%2Cver:1%2Cutc:1674243887105%2Cregion:%27NO%27}; _omappvp=hpBzxxNtu7K5wwNf6sewEUKLdL9JMEf9KwwUQQ20hBRP2AVN0XVd6l31nxOgXilUtsVIVZftbY5SzFVAekY9IVLC8NWME8Bz; _omappvs=1674243887459; stc-analytics-sub_source=|||||
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Age: 204
Date: Fri, 20 Jan 2023 19:41:25 GMT
Connection: Keep-Alive
Via: NS-CACHE-10.0: 32
ETag: "103e-5b21c57e5334b"
Server: Apache
Last-Modified: Tue, 20 Oct 2020 16:01:27 GMT
Accept-Ranges: bytes
Content-Length: 4158
Keep-Alive: timeout=15, max=481
Content-Type: image/ico
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1b222e79622d6ee10d29baccfd6da43f
426a2c4b595f89a2ac530100196dc206006afe8b
82bd4c9f2335feffd1f480d6a6802a876fc76e7c7d327da4faa50e399e98ebf9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 20 Jan 2023 19:44:48 GMT
Last-Modified: Fri, 20 Jan 2023 18:59:12 GMT
Server: ECS (nyb/1D05)
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mxUduND4QJBIxH1CVDHjbDUpoZvU4-jpNmrNfEj01v4wEqFuWp27VA==
Age: 2736
savethechildren.us-7.evergage.com/api2/event/production?event=eyJzb3VyY2UiOnsicGFnZVR5cGUiOiJUZWFtcmFpc2VyIExvZ2luIEZvcm0iLCJ1cmwiOiJodHRwczovL3N1cHBvcnQuc2F2ZXRoZWNoaWxkcmVuLm9yZy9zaXRlL1NQYWdlTmF2aWdhdG9yL2xvZ2luLmh0bWw%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%3D%3D
200 OK 9.7 kB URL HTTP/2 savethechildren.us-7.evergage.com/api2/event/production?event=eyJzb3VyY2UiOnsicGFnZVR5cGUiOiJUZWFtcmFpc2VyIExvZ2luIEZvcm0iLCJ1cmwiOiJodHRwczovL3N1cHBvcnQuc2F2ZXRoZWNoaWxkcmVuLm9yZy9zaXRlL1NQYWdlTmF2aWdhdG9yL2xvZ2luLmh0bWw%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%3D%3D
IP
File type JSON data\012- SVG XML document\012- SVG XML document\012- exported SGML document, ASCII text, with very long lines (579)
Hash 97265c7d5930d24060d8f711391afa2e
6c361377adcf6023b0f7daf7a515199a94ad4829
1f2ab09d748fafde24292ede9e0660466fc8b31306fd4bd4bd80af3fac838256
GET /api2/event/production?event=eyJzb3VyY2UiOnsicGFnZVR5cGUiOiJUZWFtcmFpc2VyIExvZ2luIEZvcm0iLCJ1cmwiOiJodHRwczovL3N1cHBvcnQuc2F2ZXRoZWNoaWxkcmVuLm9yZy9zaXRlL1NQYWdlTmF2aWdhdG9yL2xvZ2luLmh0bWw%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%3D%3D HTTP/1.1
Host: savethechildren.us-7.evergage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:48 GMT
content-type: application/json;charset=UTF-8
set-cookie: AWSALB=77MvIFLsaps6iX99Xrn5oIbWBp0oRyZQa3uekycRRbjaaEeMgAzZA92yubFuL/inj8XXREnZ3qJWBjkoWQpOrutnO/gopx9A8nPa9XXfpwxd9aEBQu/fgGE2Vba7; Expires=Fri, 27 Jan 2023 19:44:48 GMT; Path=/
AWSALBCORS=77MvIFLsaps6iX99Xrn5oIbWBp0oRyZQa3uekycRRbjaaEeMgAzZA92yubFuL/inj8XXREnZ3qJWBjkoWQpOrutnO/gopx9A8nPa9XXfpwxd9aEBQu/fgGE2Vba7; Expires=Fri, 27 Jan 2023 19:44:48 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
access-control-allow-credentials: true
x-content-type-options: nosniff
vary: accept-encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 47f707f0a5f6e7655c349096355dfba1
d28f5bc7efc3d6f7c39ca9b0698b42dddfcdf533
3865b792b19f13f964a44f10e421b98b809a15d590065b303f0adae63b7a34dc
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 20 Jan 2023 19:44:49 GMT
Last-Modified: Fri, 20 Jan 2023 18:37:19 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lsrjBHzuQ_lScYwgFUEwXYFPvF4QPuDeCt4KEX4j5tU0lPVH98OJeQ==
Age: 4050
support.savethechildren.org/site/CRSurveyAPI;jsessionid=00000000.app30124b
200 200 4.1 kB URL HTTP/1.1 support.savethechildren.org/site/CRSurveyAPI;jsessionid=00000000.app30124b
IP
File type ASCII text, with very long lines (17027)
Hash ccc4bd4eb2de7cae7efb1bb8bcc813a9
db5de0fac17997614e18a6756492dcc553da4697
d7241c49417e4619f35dc1a90601d2ac583f0838d945e6e7237b14b554d758a7
POST /site/CRSurveyAPI;jsessionid=00000000.app30124b HTTP/1.1
Host: support.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 313
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/site/SPageNavigator/login.html?nexturl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4
Cookie: JSESSIONID=7100EFD4DCD66BEB5E03C3D56B45E6DC.app30124b; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19378%7CvVersion%7C5.4.0; mbox=session#3845cd241a094928bb935242f4be0232#1674245747; at_check=true; _sfid_58d2={%22anonymousId%22:%22ab2b5d189a28fe69%22%2C%22consents%22:[]}; _evga_c797={%22uuid%22:%22ab2b5d189a28fe69%22}; stc-analytics-source=Web|Direct||||1/20/2023; stc-session-count=0; CookieConsent={stamp:%27-1%27%2Cnecessary:true%2Cpreferences:true%2Cstatistics:true%2Cmarketing:true%2Cmethod:%27implied%27%2Cver:1%2Cutc:1674243887105%2Cregion:%27NO%27}; _omappvp=hpBzxxNtu7K5wwNf6sewEUKLdL9JMEf9KwwUQQ20hBRP2AVN0XVd6l31nxOgXilUtsVIVZftbY5SzFVAekY9IVLC8NWME8Bz; _omappvs=1674243887459; stc-analytics-sub_source=|||||
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 200
Date: Fri, 20 Jan 2023 19:44:49 GMT
Server: Apache
X-Robots-Tag: noindex, nofollow
X-Content-Type-Options: nosniff
Cache-Control: no-store
Pragma: no-cache
Content-Security-Policy: frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com; report-uri https://support.savethechildren.org/site/XFrameViolation
X-Frame-Options: allow-from 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com
Access-Control-Allow-Origin: https://support.savethechildren.org
Access-Control-Allow-Credentials: true
Keep-Alive: timeout=15, max=500
Connection: Keep-Alive
Content-Type: text/plain;charset=UTF-8
Content-Encoding: gzip
Transfer-Encoding: chunked
ocsp.digicert.com/
200 OK 471 B IP
Hash 6a3dac61accda7ee5859fca7e0961592
3f1042a5eb26b4568118a695c7dcb7a65947a16a
6ac02a20508dd1c0121fc54a7cb1fb94e323b4409c5363846290f6b3f2f65535
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=157916
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:49 GMT
Etag: "63cab50d-1d7"
Expires: Sun, 22 Jan 2023 15:36:45 GMT
Last-Modified: Fri, 20 Jan 2023 15:36:45 GMT
Server: nginx
Content-Length: 471
smetrics.savethechildren.org/id?d_visid_ver=5.4.0&d_fieldgroup=MC&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&ts=1674243887933
200 OK 48 B URL HTTP/2 smetrics.savethechildren.org/id?d_visid_ver=5.4.0&d_fieldgroup=MC&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&ts=1674243887933
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash af4e20df9a578a47d9d8bd2ea62e88fa
4c16a1c0c30f317d347da806a47c6376417d5a8b
1409f27a59bb50cca29bcfe2ae2afcab48061f94407608899a940323bdd0126b
GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&ts=1674243887933 HTTP/1.1
Host: smetrics.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19378%7CvVersion%7C5.4.0; mbox=session#3845cd241a094928bb935242f4be0232#1674245747; at_check=true; _sfid_58d2={%22anonymousId%22:%22ab2b5d189a28fe69%22%2C%22consents%22:[]}; _evga_c797={%22uuid%22:%22ab2b5d189a28fe69%22}; stc-analytics-source=Web|Direct||||1/20/2023; stc-session-count=0; stc-analytics-sub_source=|||||; _gcl_au=1.1.881483664.1674243888
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-origin: https://support.savethechildren.org
access-control-allow-credentials: true
date: Fri, 20 Jan 2023 19:44:49 GMT
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19378%7CvVersion%7C5.4.0%7CMCMID%7C04684273842535973070097840255777269655; Path=/; Domain=savethechildren.org; Max-Age=63072000; Expires=Sun, 19 Jan 2025 19:44:44 GMT;
s_ecid=MCMID%7C04684273842535973070097840255777269655; Path=/; Domain=savethechildren.org; Max-Age=63072000; Expires=Sun, 19 Jan 2025 19:44:44 GMT; SameSite=Lax;
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 48
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c82333f9a33a309c15d05fd11805df12
8dd5f20229a08900fd7f795e151f8caa9558ddfc
2c5c18efa4a58c40cc49553daf6fe206ed70fe17bd948cd5c09144a49db85401
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/landing?gcs=G111&rnd=1265022894.1674243888&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html>m=2wg1i0MFG5K96&auid=881483664.1674243888
302 Found 42 B URL HTTP/2 www.google.com/pagead/landing?gcs=G111&rnd=1265022894.1674243888&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html>m=2wg1i0MFG5K96&auid=881483664.1674243888
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /pagead/landing?gcs=G111&rnd=1265022894.1674243888&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html>m=2wg1i0MFG5K96&auid=881483664.1674243888 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:44:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&rnd=1265022894.1674243888&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html>m=2wg1i0MFG5K96&auid=881483664.1674243888
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a16b4b7be19ebcafa8448b403aa56cdc
cc2450e2301c6380a452a5d4744fb9fc07b73dea
2740da6c7331cfd931e53e1cf9c8131f7e9ed21c96d3e63470e8bc75e7ea76a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dx2eq2oh924g4.cloudfront.net/images/logos/bbb-logo.svg
200 OK 2.2 kB URL HTTP/2 dx2eq2oh924g4.cloudfront.net/images/logos/bbb-logo.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (542)
Hash 17d877965e91f108776199cb6931f1f9
db1f23d0fab0de8cd8a3243041ee69abc5d38ff7
572725eee83d5913ced8e5bcdbffdda53133ffda9de3993bc678049fe92ab4a9
GET /images/logos/bbb-logo.svg HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 18 Jan 2023 20:04:27 GMT
last-modified: Wed, 18 Jan 2023 20:03:53 GMT
etag: W/"c609e558a124b00f02921f903af5251a"
cache-control: max-age=604801
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7n4YYBeFINj-8-PSJY7r8em8nClw9EBY6FAsYKS7TyIzVNKhuuoUNg==
age: 171622
X-Firefox-Spdy: h2
amplify.outbrain.com/cp/obtp.js
200 OK 5.8 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (17561), with no line terminators
Hash b43447dd37106fcc40b346827db88b5a
e3dbab703597ab4925c322fb69223c154af6e562
af0301cae6ac0ba6951df76e4ca71c27640615f4616c2c253fa9594dc55a499f
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "2d345c50788c648f6791bfb0c43fa704:1674121676.657107"
Last-Modified: Thu, 19 Jan 2023 09:42:41 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Fri, 20 Jan 2023 20:04:49 GMT
Date: Fri, 20 Jan 2023 19:44:49 GMT
Content-Length: 5798
Connection: keep-alive
nexus.ensighten.com/choozle/10170/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/choozle/10170/code/&publishedOn=Mon%20Jun%2013%2014:49:02%20GMT%202022&ClientID=923&PageID=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4
200 OK 427 B URL HTTP/2 nexus.ensighten.com/choozle/10170/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/choozle/10170/code/&publishedOn=Mon%20Jun%2013%2014:49:02%20GMT%202022&ClientID=923&PageID=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4
IP
File type ASCII text, with very long lines (426)
Hash 6c6d38f2f9984b923da6f3e48d395f51
f912e436d63a300ef5874da5ab39e68b676c274c
8e962810805a2b0b5eea3ecea4a55183936a5be6dc79415ed51ac9c684d4c88c
GET /choozle/10170/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/choozle/10170/code/&publishedOn=Mon%20Jun%2013%2014:49:02%20GMT%202022&ClientID=923&PageID=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4 HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 427
server: nginx
date: Fri, 20 Jan 2023 19:44:49 GMT
expires: Fri, 20 Jan 2023 19:44:48 GMT
cache-control: no-cache, no-store
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: M50E1tUICM8qdLrg8cWVj1y-Iu2bklVfJ1qAkHfgaaQTN-o5iZwq8w==
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Fri, 20 Jan 2023 19:44:49 GMT
x-served-by: cache-iad-kiad7000089-IAD, cache-hel1410022-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&d_mid=04684273842535973070097840255777269655&ts=1674243888740
200 OK 300 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&d_mid=04684273842535973070097840255777269655&ts=1674243888740
IP
File type JSON data\012- , ASCII text, with very long lines (357), with no line terminators
Hash 1808823039b68c30742549408cf8741c
aa173c1a851be13f36eeefc4fe3376e48568b1ad
e0b259f9e5ca91f041641468f5d2b0bcb64ddf0a746aaa93fad2882b27fa7660
GET /id?d_visid_ver=5.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&d_mid=04684273842535973070097840255777269655&ts=1674243888740 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://support.savethechildren.org
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v045-0a888e68a.edge-irl1.demdex.com 3 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=04354264748825243630130986034400478503; Max-Age=15552000; Expires=Wed, 19 Jul 2023 19:44:49 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: 99rRKVfYTw0=
Content-Length: 300
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 071edf406c3e287843fdf4e61ceb9ff7
99cf4c0cb373feeecbdf97df42c8066551f89dfe
127371c4c4a3345b44dfbf97fb93b506d2daf0c0ecfb39317eefd695c8c59d69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/landing?gcs=G111&rnd=1265022894.1674243888&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html>m=2wg1i0MFG5K96&auid=881483664.1674243888
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/landing?gcs=G111&rnd=1265022894.1674243888&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html>m=2wg1i0MFG5K96&auid=881483664.1674243888
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/landing?gcs=G111&rnd=1265022894.1674243888&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html>m=2wg1i0MFG5K96&auid=881483664.1674243888 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://support.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:44:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 20-Jan-2023 19:59:49 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 47ad1d1329132246c1f93db9a06b8837
06154e0530e7906f5d374cb347fbbac8ba7f69d1
850722442b264b4cca21c93325b00a67c790f4d2cfd3c07320eb03625f8d7e21
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4883
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:49 GMT
Last-Modified: Fri, 20 Jan 2023 18:23:26 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 313
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 071edf406c3e287843fdf4e61ceb9ff7
99cf4c0cb373feeecbdf97df42c8066551f89dfe
127371c4c4a3345b44dfbf97fb93b506d2daf0c0ecfb39317eefd695c8c59d69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 21f593f11c32aff4957fd4d77d11f3d5
a422955c002eaa17c5a69509a72d1e9c72557180
5f102dde7868e590da5686d3395bc6b42300de75dd80586f795e0483965d601b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 725
Cache-Control: max-age=165863
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:49 GMT
Etag: "63cad143-1d7"
Expires: Sun, 22 Jan 2023 17:49:12 GMT
Last-Modified: Fri, 20 Jan 2023 17:37:07 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
stc.demdex.net/dest5.html?d_nsid=0
200 OK 2.8 kB URL HTTP/1.1 stc.demdex.net/dest5.html?d_nsid=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Hash ccbdcb1e84c241950763ec4cd516cdfc
55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
GET /dest5.html?d_nsid=0 HTTP/1.1
Host: stc.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: text/html;charset=UTF-8
date: Fri, 20 Jan 2023 19:44:49 GMT
DCS: dcs-prod-irl1-1-v045-048420acf.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Fri, 28 Oct 2022 11:02:57 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: 6Qz43OJERLQ=
Content-Length: 2791
Connection: keep-alive
t.co/i/adsct?bci=3&eci=2&event_id=486b54fc-29b1-498d-ae83-269100364d64&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a8f6742f-cbb9-46d6-b3b1-f9f81a5e49fa&tw_document_href=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=486b54fc-29b1-498d-ae83-269100364d64&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a8f6742f-cbb9-46d6-b3b1-f9f81a5e49fa&tw_document_href=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=486b54fc-29b1-498d-ae83-269100364d64&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a8f6742f-cbb9-46d6-b3b1-f9f81a5e49fa&tw_document_href=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:48 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=3be8d03d-5e13-4217-b52c-efdc90a46b17; Max-Age=63072000; Expires=Sun, 19 Jan 2025 19:44:49 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: c3a71b0c65e87610
strict-transport-security: max-age=0
x-response-time: 109
x-connection-hash: 62f0da6b013ed6f3c91d40d85db9d5cc8f8fdcb3a393c1e3cd34f8b9c7f6e108
X-Firefox-Spdy: h2
savethechildrenfeder.tt.omtrdc.net/rest/v1/delivery?client=savethechildrenfeder&sessionId=3845cd241a094928bb935242f4be0232&version=2.9.0
200 OK 1.8 kB URL HTTP/2 savethechildrenfeder.tt.omtrdc.net/rest/v1/delivery?client=savethechildrenfeder&sessionId=3845cd241a094928bb935242f4be0232&version=2.9.0
IP
File type JSON data\012- , ASCII text, with very long lines (3166)
Hash 151f4e88a90dd43b9c538da0a567b5d4
0cde9a452d541966a9c78d85f8ded333e2be1c42
5822ba6fcd2bc3880bd10e2142fa404d77bb147cd0b52d34d846536b02807716
POST /rest/v1/delivery?client=savethechildrenfeder&sessionId=3845cd241a094928bb935242f4be0232&version=2.9.0 HTTP/1.1
Host: savethechildrenfeder.tt.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1296
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:49 GMT
content-type: application/json;charset=UTF-8
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
access-control-allow-origin: https://support.savethechildren.org
access-control-allow-credentials: true
x-request-id: b3f1d97c3179209122eec3d085d0f844
timing-allow-origin: *
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List
content-encoding: gzip
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/images/icons/twitter.svg
200 OK 4.2 kB URL HTTP/2 dx2eq2oh924g4.cloudfront.net/images/icons/twitter.svg
IP
Hash 9e5251da5ef16e7e6ec73abae5ed7e39
a0d3bde9e816416c00f7722a432ba92d6ff23570
331e871996f6c281cb420bbeb28b25ca1a04cbd4eb8b8f8001bbf1ebc6237799
GET /images/icons/twitter.svg HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 18 Jan 2023 20:06:03 GMT
last-modified: Wed, 18 Jan 2023 20:03:53 GMT
etag: W/"6694ce1d25e04a635544f4ebb5b6a707"
cache-control: max-age=604801
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4uq6r4TZ1yI34Y5YIq-Pe3v6CzlBKH96xsiG-zJC55W92UCOXtylYQ==
age: 171525
X-Firefox-Spdy: h2
dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&d_mid=04684273842535973070097840255777269655&d_blob=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&d_cid_ic=userid%0104684273842535973070097840255777269655&ts=1674243889025
200 OK 301 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&d_mid=04684273842535973070097840255777269655&d_blob=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&d_cid_ic=userid%0104684273842535973070097840255777269655&ts=1674243889025
IP
File type JSON data\012- , ASCII text, with very long lines (357), with no line terminators
Hash ea00bc1eec2d4d5d7a26f8d37d60328f
04b9d8f6200edfad1b70bf8c4d50e798dd334c88
e22643389e7c2f68ef990bfd1495ab9afc412fbd6caddae63e3666b0bc5f1518
GET /id?d_visid_ver=5.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=6B0E659F56A9E70D7F000101%40AdobeOrg&d_nsid=0&d_mid=04684273842535973070097840255777269655&d_blob=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&d_cid_ic=userid%0104684273842535973070097840255777269655&ts=1674243889025 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://support.savethechildren.org
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v045-093556e0f.edge-irl1.demdex.com 4 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=49889593795163132360085508634840886102; Max-Age=15552000; Expires=Wed, 19 Jul 2023 19:44:49 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-Error: 300
X-TID: zda/QhT+QLw=
Content-Length: 301
Connection: keep-alive
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC85e990005f5d4576a8167cf1a1a6c1b4-source.min.js
200 OK 708 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC85e990005f5d4576a8167cf1a1a6c1b4-source.min.js
IP
File type ASCII text, with very long lines (1501)
Hash 72a9284785685c00829b14d689adde9f
7f9f79ea81322fc381363d1d67e1a5bb42775985
eb5d7cb9a9e55b0510e26f0d573c50155ed5895383537d162a8a6110e98a375a
GET /a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC85e990005f5d4576a8167cf1a1a6c1b4-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "123f8250dd943fe5091528c32c2134eb:1674054365.089145"
last-modified: Wed, 18 Jan 2023 15:06:05 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 708
cache-control: max-age=3600
expires: Fri, 20 Jan 2023 20:44:49 GMT
date: Fri, 20 Jan 2023 19:44:49 GMT
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RCfc1bafc7dd23416bbee79cc22c704e2f-source.min.js
200 OK 632 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RCfc1bafc7dd23416bbee79cc22c704e2f-source.min.js
IP
File type ASCII text, with very long lines (1177)
Hash 47cc4d05755dee8d108b86f0962dc3bb
24c87870f6ab80d57d019f3d32c56b46075b92cb
b6007b496612f77996cef22bf43697f48f00e76dc90fe91d0f7a634156861151
GET /a9de570d9caa/b01a1f4bb0c4/a845522509f0/RCfc1bafc7dd23416bbee79cc22c704e2f-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "123f8250dd943fe5091528c32c2134eb:1674054365.089145"
last-modified: Wed, 18 Jan 2023 15:06:05 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 632
cache-control: max-age=3600
expires: Fri, 20 Jan 2023 20:44:49 GMT
date: Fri, 20 Jan 2023 19:44:49 GMT
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC86ce6cff66df46ad9e1d606658d114be-source.min.js
200 OK 481 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC86ce6cff66df46ad9e1d606658d114be-source.min.js
IP
File type ASCII text, with very long lines (766)
Hash e063beb3be2e7074943470239c486767
a09af5a9fd68bc3383ab5b989b2397e4371f9867
186cfce912d5b349de557756ee8e37e6bd49919be8d38a8b69a1dfb02be00e8b
GET /a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC86ce6cff66df46ad9e1d606658d114be-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "123f8250dd943fe5091528c32c2134eb:1674054365.089145"
last-modified: Wed, 18 Jan 2023 15:06:05 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 481
cache-control: max-age=3600
expires: Fri, 20 Jan 2023 20:44:49 GMT
date: Fri, 20 Jan 2023 19:44:49 GMT
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC29e9ca088d454b16a61689b7b7827234-source.min.js
200 OK 782 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC29e9ca088d454b16a61689b7b7827234-source.min.js
IP
File type ASCII text, with very long lines (1403)
Hash 91822663c690273d5a3b1aa597978df8
32252d63bc82f606b38156ba1bc2e886e92766b2
62ca4471d75d73172aecd4a70a6458c6252e5f35171f5342447a68e799aafd57
GET /a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC29e9ca088d454b16a61689b7b7827234-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "123f8250dd943fe5091528c32c2134eb:1674054365.089145"
last-modified: Wed, 18 Jan 2023 15:06:05 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 782
cache-control: max-age=3600
expires: Fri, 20 Jan 2023 20:44:49 GMT
date: Fri, 20 Jan 2023 19:44:49 GMT
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC543a5c6ce5a74ab5951bb5d2f65f9cdf-source.min.js
200 OK 517 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC543a5c6ce5a74ab5951bb5d2f65f9cdf-source.min.js
IP
File type ASCII text, with very long lines (800)
Hash 4255180f1cf575d74491822c8bad6444
8e53889c692ce85c11c671e83fb10537eca489f1
0135191d2b7aeabec4d8a9f7398399491bf2a9c72b58fd507fdd20e291426912
GET /a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC543a5c6ce5a74ab5951bb5d2f65f9cdf-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "123f8250dd943fe5091528c32c2134eb:1674054365.089145"
last-modified: Wed, 18 Jan 2023 15:06:05 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 517
cache-control: max-age=3600
expires: Fri, 20 Jan 2023 20:44:49 GMT
date: Fri, 20 Jan 2023 19:44:49 GMT
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RCf79fc1038c2a4b72bdfd02defa7e8cbc-source.min.js
200 OK 1.1 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RCf79fc1038c2a4b72bdfd02defa7e8cbc-source.min.js
IP
File type ASCII text, with very long lines (2504)
Hash cbafe238a9cf66667e9bf0a0f4e2c11b
e40b000596004e63765e79ba8f5fd1cb01a66bf6
2710b6dbf2705f2fb431f428893b7432cb852e01b3714ffb058e332c43385968
GET /a9de570d9caa/b01a1f4bb0c4/a845522509f0/RCf79fc1038c2a4b72bdfd02defa7e8cbc-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "123f8250dd943fe5091528c32c2134eb:1674054365.089145"
last-modified: Wed, 18 Jan 2023 15:06:05 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1079
cache-control: max-age=3600
expires: Fri, 20 Jan 2023 20:44:49 GMT
date: Fri, 20 Jan 2023 19:44:49 GMT
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RCa0df4cd8b88d4571ba669bc769fb3c9c-source.min.js
200 OK 1.2 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RCa0df4cd8b88d4571ba669bc769fb3c9c-source.min.js
IP
File type ASCII text, with very long lines (2720)
Hash 8e06b5d842820300cd9fd95b34802bc2
58b7a984ada07812a70090fe429cafd11e6daab3
c2026c07517b49c38512c99b0d03f3ccf322b8fa3aa89ef22548b25d4e4b9617
GET /a9de570d9caa/b01a1f4bb0c4/a845522509f0/RCa0df4cd8b88d4571ba669bc769fb3c9c-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "123f8250dd943fe5091528c32c2134eb:1674054365.089145"
last-modified: Wed, 18 Jan 2023 15:06:05 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1196
cache-control: max-age=3600
expires: Fri, 20 Jan 2023 20:44:49 GMT
date: Fri, 20 Jan 2023 19:44:49 GMT
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC70221449d05c4c009c1482b20cbbc153-source.min.js
200 OK 811 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC70221449d05c4c009c1482b20cbbc153-source.min.js
IP
File type ASCII text, with very long lines (2187)
Hash 8be41215724cf8ff82669935a1fdff60
f967950f9742975d8052a39287064754561eca99
13382e8263b2b6a1c7130075fa2c1babe95823637a3a795aaa6fb1e9ff51d5ef
GET /a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC70221449d05c4c009c1482b20cbbc153-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "123f8250dd943fe5091528c32c2134eb:1674054365.089145"
last-modified: Wed, 18 Jan 2023 15:06:05 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 811
cache-control: max-age=3600
expires: Fri, 20 Jan 2023 20:44:49 GMT
date: Fri, 20 Jan 2023 19:44:49 GMT
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RCeacb79e41c2e4edbaefa7f3947ba2208-source.min.js
200 OK 602 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RCeacb79e41c2e4edbaefa7f3947ba2208-source.min.js
IP
File type ASCII text, with very long lines (1190)
Hash efa3869ad80b24a65e66be8d721840db
cb009ef1dbfcf44c511fe9e9fed3a96bfdb849e3
e4feca5379e7be10e939c83bc50df6f88635080615e91d871d80285954608f1c
GET /a9de570d9caa/b01a1f4bb0c4/a845522509f0/RCeacb79e41c2e4edbaefa7f3947ba2208-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "123f8250dd943fe5091528c32c2134eb:1674054365.089145"
last-modified: Wed, 18 Jan 2023 15:06:05 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 602
cache-control: max-age=3600
expires: Fri, 20 Jan 2023 20:44:49 GMT
date: Fri, 20 Jan 2023 19:44:49 GMT
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RCe1e1b434f35b4ae6b2e3062f395d32e0-source.min.js
200 OK 1.0 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RCe1e1b434f35b4ae6b2e3062f395d32e0-source.min.js
IP
File type ASCII text, with very long lines (1950)
Hash a5842f117faf76c86538922181d0a00a
2b0552eef25fd29c874b9ba742eac74f21f06f71
1eec30d89c1dd8cd75995035dda2536e06b0945b7996b5c0d6127a28a9288615
GET /a9de570d9caa/b01a1f4bb0c4/a845522509f0/RCe1e1b434f35b4ae6b2e3062f395d32e0-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "123f8250dd943fe5091528c32c2134eb:1674054365.089145"
last-modified: Wed, 18 Jan 2023 15:06:05 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1020
cache-control: max-age=3600
expires: Fri, 20 Jan 2023 20:44:49 GMT
date: Fri, 20 Jan 2023 19:44:49 GMT
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC890fe151cf724ae6ab6953052f02d8be-source.min.js
200 OK 838 B URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC890fe151cf724ae6ab6953052f02d8be-source.min.js
IP
File type ASCII text, with very long lines (1860)
Hash 1f492b4747f0a71c0814bd36693eb54d
7a92b14c774ff18fb8d94545b2f9fd6092cfaaf8
2b70a88e2cb0dfe836af879203fb6b983172aa8cbe2c652de5b6425ecf8d2a57
GET /a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC890fe151cf724ae6ab6953052f02d8be-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "123f8250dd943fe5091528c32c2134eb:1674054365.089145"
last-modified: Wed, 18 Jan 2023 15:06:05 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 838
cache-control: max-age=3600
expires: Fri, 20 Jan 2023 20:44:49 GMT
date: Fri, 20 Jan 2023 19:44:49 GMT
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC4e6fbd16532046dea5800addad491d30-source.min.js
200 OK 1.4 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC4e6fbd16532046dea5800addad491d30-source.min.js
IP
File type HTML document, ASCII text, with very long lines (2437)
Hash 377655ffec8889fc4a06630856c61ca4
077fb2a017379ea1ee0e76b2a3f651ec231f9e95
1765e96540a1352ec038ea16f1d61f84240b707e0442de5af090dc7ea7164d88
GET /a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC4e6fbd16532046dea5800addad491d30-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "123f8250dd943fe5091528c32c2134eb:1674054365.089145"
last-modified: Wed, 18 Jan 2023 15:06:05 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1375
cache-control: max-age=3600
expires: Fri, 20 Jan 2023 20:44:49 GMT
date: Fri, 20 Jan 2023 19:44:49 GMT
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC7f38ff66ba7e49efbce1968da730cce3-source.min.js
200 OK 1.4 kB URL HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC7f38ff66ba7e49efbce1968da730cce3-source.min.js
IP
File type ASCII text, with very long lines (3039)
Hash c01294c6b6dd45f38c851210ffe855b0
15d02aec4cdced9ec9a7d7f168f5fd2ca2a60c38
51175b04b3286f09ad42a7237a35b48270aed24f3f0e5abcd93b09be4c102063
GET /a9de570d9caa/b01a1f4bb0c4/a845522509f0/RC7f38ff66ba7e49efbce1968da730cce3-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "123f8250dd943fe5091528c32c2134eb:1674054365.089145"
last-modified: Wed, 18 Jan 2023 15:06:05 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1363
cache-control: max-age=3600
expires: Fri, 20 Jan 2023 20:44:49 GMT
date: Fri, 20 Jan 2023 19:44:49 GMT
access-control-allow-origin: https://support.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 85bdc0d2a69de6ebf1bbb1de33259080
28c2e522b07cb8f2963f26d034ec3e87e0368e4c
dec8d2a17484758c1725ef18a398e6ed0a6528f5ce63aa064f7573462c966a77
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5205
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:49 GMT
Last-Modified: Fri, 20 Jan 2023 18:18:04 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 313
a.opmnstr.com/app/js/1.ac125fd8.min.js
200 OK 47 kB URL HTTP/2 a.opmnstr.com/app/js/1.ac125fd8.min.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (5856)
Hash a00e7aa16e9c541035d0f0792420d364
02c4d77ba71c4494e5588afd721b44106091e7ab
1e7c3ea092c179884ce3d6287474e8d4db32b26703d11991a7a86a81bbde0cf7
GET /app/js/1.ac125fd8.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:48 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"6399f971-171f"
last-modified: Wed, 14 Dec 2022 16:27:29 GMT
cdn-storageserver: DE-169
cdn-requestpullsuccess: True
cdn-fileserver: 370
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 01/03/2023 16:50:33
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: d8f18e66986e73a0ca095a0871d40ac8
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
smetrics.savethechildren.org/b/ss/stcf.prod.us/5.1/JS-2.22.4-LCXS/s26081293369576?AQB=1&ndh=1&pf=1&t=20%2F0%2F2023%2019%3A44%3A49%205%200&cid.&userid.&id=04684273842535973070097840255777269655&.userid&.cid&sdid=457693A062A70C12-1D61FF7A69DA4DB3&mid=04684273842535973070097840255777269655&aamlh=6&ce=Windows-1257&cl=SESSION&pageName=Sign%20In%20%2F%20Sign%20Up&g=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid&r=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&cc=USD&server=support.savethechildren.org&events=event79%3D1.279&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&c2=D%3Dg&v2=D%3DpageName&v3=form--login&c10=D%3Dv95&v12=Web%7CDirect%7C%7C%7C%7C1%2F20%2F2023&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Sign%20In%20%2F%20Register%20Page&v27=New&c28=D%3Dv28&v28=form--login&c29=D%3Dv36&v36=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html&v42=di-253647-EE6DDA948E32AE8BE915AA13B186CE453C&c49=D%3Dv49&v49=year%3D2023%20%7C%20month%3DJanuary%20%7C%20date%3D20%20%7C%20day%3DFriday%20%7C%20time%3D2%3A44%3A49%20PM&c51=D%3Dv51&v51=Sign%20In%20%2F%20Sign%20Up&v52=D%3Dg&c53=D%3Dv53&v53=Supporter%20Center&c54=D%3Dv54&v54=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&c55=D%3Dv27&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v95=1.279&v110=Launch&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1
200 OK 43 B URL HTTP/2 smetrics.savethechildren.org/b/ss/stcf.prod.us/5.1/JS-2.22.4-LCXS/s26081293369576?AQB=1&ndh=1&pf=1&t=20%2F0%2F2023%2019%3A44%3A49%205%200&cid.&userid.&id=04684273842535973070097840255777269655&.userid&.cid&sdid=457693A062A70C12-1D61FF7A69DA4DB3&mid=04684273842535973070097840255777269655&aamlh=6&ce=Windows-1257&cl=SESSION&pageName=Sign%20In%20%2F%20Sign%20Up&g=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid&r=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&cc=USD&server=support.savethechildren.org&events=event79%3D1.279&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&c2=D%3Dg&v2=D%3DpageName&v3=form--login&c10=D%3Dv95&v12=Web%7CDirect%7C%7C%7C%7C1%2F20%2F2023&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Sign%20In%20%2F%20Register%20Page&v27=New&c28=D%3Dv28&v28=form--login&c29=D%3Dv36&v36=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html&v42=di-253647-EE6DDA948E32AE8BE915AA13B186CE453C&c49=D%3Dv49&v49=year%3D2023%20%7C%20month%3DJanuary%20%7C%20date%3D20%20%7C%20day%3DFriday%20%7C%20time%3D2%3A44%3A49%20PM&c51=D%3Dv51&v51=Sign%20In%20%2F%20Sign%20Up&v52=D%3Dg&c53=D%3Dv53&v53=Supporter%20Center&c54=D%3Dv54&v54=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&c55=D%3Dv27&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v95=1.279&v110=Launch&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1
IP
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/stcf.prod.us/5.1/JS-2.22.4-LCXS/s26081293369576?AQB=1&ndh=1&pf=1&t=20%2F0%2F2023%2019%3A44%3A49%205%200&cid.&userid.&id=04684273842535973070097840255777269655&.userid&.cid&sdid=457693A062A70C12-1D61FF7A69DA4DB3&mid=04684273842535973070097840255777269655&aamlh=6&ce=Windows-1257&cl=SESSION&pageName=Sign%20In%20%2F%20Sign%20Up&g=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid&r=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&cc=USD&server=support.savethechildren.org&events=event79%3D1.279&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&c2=D%3Dg&v2=D%3DpageName&v3=form--login&c10=D%3Dv95&v12=Web%7CDirect%7C%7C%7C%7C1%2F20%2F2023&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Sign%20In%20%2F%20Register%20Page&v27=New&c28=D%3Dv28&v28=form--login&c29=D%3Dv36&v36=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html&v42=di-253647-EE6DDA948E32AE8BE915AA13B186CE453C&c49=D%3Dv49&v49=year%3D2023%20%7C%20month%3DJanuary%20%7C%20date%3D20%20%7C%20day%3DFriday%20%7C%20time%3D2%3A44%3A49%20PM&c51=D%3Dv51&v51=Sign%20In%20%2F%20Sign%20Up&v52=D%3Dg&c53=D%3Dv53&v53=Supporter%20Center&c54=D%3Dv54&v54=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&c55=D%3Dv27&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v95=1.279&v110=Launch&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1 HTTP/1.1
Host: smetrics.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Cookie: AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=1176715910%7CMCIDTS%7C19378%7CvVersion%7C5.4.0%7CMCMID%7C04684273842535973070097840255777269655%7CMCAID%7CNONE%7CMCOPTOUT-1674251089s%7CNONE%7CMCAAMLH-1674848689%7C6%7CMCAAMB-1674848689%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI%7CMCCIDH%7C-1034553705; mbox=session#3845cd241a094928bb935242f4be0232#1674245750|PC#3845cd241a094928bb935242f4be0232.37_0#1737488689; at_check=true; _sfid_58d2={%22anonymousId%22:%22ab2b5d189a28fe69%22%2C%22consents%22:[]}; _evga_c797={%22uuid%22:%22ab2b5d189a28fe69%22}; stc-analytics-source=Web|Direct||||1/20/2023; stc-session-count=0; stc-analytics-sub_source=|||||; _gcl_au=1.1.881483664.1674243888; da_sid=EE6DDA948E32AE8BE915AA13B186CE453C|3|0|3; da_lid=DD5EE9A79A72EA107C44BB99F384844E8F|0|0|0; da_intState=; s_ecid=MCMID%7C04684273842535973070097840255777269655; AMCVS_6B0E659F56A9E70D7F000101%40AdobeOrg=1; s_ppv=Sign%2520In%2520%2F%2520Sign%2520Up%2C85%2C85%2C1182%2C1%2C1; s_ips=1182; s_tp=1396; s_nr30=1674243889202-New; s_cc=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Fri, 20 Jan 2023 19:44:49 GMT
expires: Thu, 19 Jan 2023 19:44:49 GMT
last-modified: Sat, 21 Jan 2023 19:44:49 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_ecid=MCMID%7C04684273842535973070097840255777269655; Path=/; Domain=savethechildren.org;
etag: 3595411375039086592-4619726671860212870
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
pt.ispot.tv/v2/TC-4134-1.gif?app=web&type=visit
200 OK 43 B URL HTTP/2 pt.ispot.tv/v2/TC-4134-1.gif?app=web&type=visit
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 29ba9031be4bed78916face2e9c5f7fc
5bb4f538d932f769d6872470147221e18b9265ba
0227e0e4dea130eb6f3163aa3ab03720dce83a0e219c282189b03bc5b8a727e3
GET /v2/TC-4134-1.gif?app=web&type=visit HTTP/1.1
Host: pt.ispot.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
accept-ranges: bytes
date: Fri, 20 Jan 2023 19:44:49 GMT
set-cookie: pt=v2:c3cfc09c607fb070fb24dc603e86d00374a6571ca3d1e829e594f5444042524c|294d233fc2c8f6dde0916d8a56c7b2d101fe74353aace9a589814bcec2148130; Domain=ispot.tv; Path=/; Expires=Sun, 19 Jan 2025 19:44:49 GMT; SameSite=None; Secure
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3f15586e94ffc46bba47e48181ed7100
ca8c1b409432f4a0573968231ec684e7b033c170
93383379ff6821f1f0caea460efc5a3dd12f4d62dd98e3f4447f82e930335002
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 20 Jan 2023 19:44:49 GMT
Last-Modified: Fri, 20 Jan 2023 19:05:00 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: CSL9UlG-5ut04XjWKZ1rGDtHKR0mGxptWMOGxsT6j0zpZjSlqTnZ5g==
Age: 2390
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=486b54fc-29b1-498d-ae83-269100364d64&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a8f6742f-cbb9-46d6-b3b1-f9f81a5e49fa&tw_document_href=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=486b54fc-29b1-498d-ae83-269100364d64&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a8f6742f-cbb9-46d6-b3b1-f9f81a5e49fa&tw_document_href=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=486b54fc-29b1-498d-ae83-269100364d64&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a8f6742f-cbb9-46d6-b3b1-f9f81a5e49fa&tw_document_href=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvjd8&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:49 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_pZn/Xqtw6PrYyQjT+kNwmw=="; Max-Age=63072000; Expires=Sun, 19 Jan 2025 19:44:49 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: e005bcd94b076d0f
strict-transport-security: max-age=631138519
x-response-time: 105
x-connection-hash: cfd33ab2a046d9faa151e9f27e922d04e7dbcae56b7d46b6ae736c5e78fe25a9
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 7a285b7e43ec91ba229d185192a2bcb3
0d602743fe7cb9d04c9368a14387fd5d68781c59
08d35dc32534580d8e3105f4596fbd9a939f595514dc1de5e964eb1ac91a2550
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 20 Jan 2023 19:44:49 GMT
Content-Type: application/ocsp-response
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 19 Jan 2023 22:50:15 GMT
Expires: Fri, 20 Jan 2023 22:50:15 GMT
ETag: "0d602743fe7cb9d04c9368a14387fd5d68781c59"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
cm.everesttech.net/cm/dd?d_uuid=04354264748825243630130986034400478503
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/dd?d_uuid=04354264748825243630130986034400478503
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/dd?d_uuid=04354264748825243630130986034400478503 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Fri, 20 Jan 2023 19:44:50 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~Y8rvMgAAAJJOXwN-; Domain=.everesttech.net; Expires=Sat, 20-Jan-2024 19:44:50 GMT; Path=/
everest_session_v2=Y8rvMgAAAJJOYAN-; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://dpm.demdex.net/ibs:dpid=411&dpuuid=Y8rvMgAAAJJOXwN-
Server: AMO-cookiemap/1.1
analytics.tiktok.com/i18n/pixel/events.js?sdkid=CDCLPP3C77U6290RJ8C0&lib=ttq
200 OK 1.1 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=CDCLPP3C77U6290RJ8C0&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2302)
Hash 52e73c7cff68ad3ee473490d49a9e059
e8cdbdd31317eb4659359c7289d8882bad0a6170
b7a294c74523f499e24fec6c14392368a42b3939d3481dd1c3dfdc25adfc91fd
GET /i18n/pixel/events.js?sdkid=CDCLPP3C77U6290RJ8C0&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20230120194450005D1DAD04DF39187427
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60787dee798e7afc9c5500f386c65d6ca1b99c1758b18c30df296d4f930acb5206c1505105396012c8d7c7019e4b5c896f50129f3b1db2c9992562addcc1582b478fcad27c12691da358012c00c3da083d
content-encoding: gzip
expires: Fri, 20 Jan 2023 19:44:50 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 20 Jan 2023 19:44:50 GMT
content-length: 1136
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2KbWidyEgOvW4uTrrhJzlD48h3W; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=3, cdn-cache; desc=MISS, edge; dur=1, origin; dur=101
x-origin-response-time: 101,23.36.79.28
x-akamai-request-id: 10b40412
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=undefined
200 OK 35 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=undefined
IP
File type ASCII text, with no line terminators
Hash 75c843c7b717e7b722777907475c67a3
983d1c9a05b315288039b9d4694ce3b402259240
1d348f9f803c95305f63def9d75fd50e79e54a375e1a4a888edbbea366845580
GET /cachedClickId?marketerId=undefined HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 20 Jan 2023 19:44:50 GMT
Content-Type: application/javascript
Content-Length: 35
X-TraceId: 33df3fe7dca7fcb395962443bbc3667d
tr.outbrain.com/unifiedPixel?marketerId=00569da938e06cb48f6f60ece5ae3d324c&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&cht=ccpa&optOut=false&bust=05413142927669183&referrer=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4
200 OK 53 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00569da938e06cb48f6f60ece5ae3d324c&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&cht=ccpa&optOut=false&bust=05413142927669183&referrer=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 414bd2a5161db03fdd910327b42c6daa
65d4cf50496813c5f1a34eddd5c50dc67d44ff47
b51f3497b0a65f1e1e87e75f5e7e823d871c23bcf76a5ee4101783c8f939e553
GET /unifiedPixel?marketerId=00569da938e06cb48f6f60ece5ae3d324c&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&cht=ccpa&optOut=false&bust=05413142927669183&referrer=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 20 Jan 2023 19:44:50 GMT
Content-Type: image/gif;
Content-Length: 53
Cache-Control: no-cache
X-TraceId: a0b4bea1e031922aecd57a2adc97196d
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 5b77806f66eea0b1db84cc6bfa1eb662
8c1bf83bfab08503a54849a97bb4cc678485856b
45bd4bb926588ac5f3148ed953548cbd5d8ee571ccb12d43b9d8d64b35c4582a
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 20 Jan 2023 19:44:49 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 20 Jan 2023 04:43:52 GMT
Expires: Sat, 21 Jan 2023 04:43:52 GMT
ETag: "8c1bf83bfab08503a54849a97bb4cc678485856b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=651505451678280100
302 Found 0 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=651505451678280100
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=651505451678280100 HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Fri, 20 Jan 2023 19:44:50 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: MJR5HCVHD8KYX5HJHNZ4
Set-Cookie: ad-id=A0OZbGuQgkSWrw6dM0DRv5M|t; Domain=.amazon-adsystem.com; Expires=Sun, 01-Oct-2023 19:44:50 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=651505451678280100&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMA.js
200 OK 69 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MWE2YWY2YTgzMA.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21891)
Hash 09e9bdc02bd94387901641c0b3a1f8f0
7bf30498ae27e11f7fc60b438b090f15b67ca113
d8f79f755ae4e42d98623589e5e6420342ce199553a3b7b7713caaaec65117e9
GET /i18n/pixel/static/main.MWE2YWY2YTgzMA.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Cookie: _ttp=2KbWidyEgOvW4uTrrhJzlD48h3W
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 2023011217582238FCAA3D419588756972
x-tt-trace-host: 01e57b2566233939c0b7a614d728f3c137bda4b6e8ffed077a25e96861feda11fa551f058721a274fc4605886b55ca626730a56b385a942b4129028dfc561d0b618d751524aad0a4ae27ef533e55d2e8e40a3ad2aaa7ba995375ace641e8e6ae3a
content-encoding: gzip
date: Fri, 20 Jan 2023 19:44:50 GMT
content-length: 68605
x-cache: TCP_MEM_HIT from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=4
x-akamai-request-id: 10b40597
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 7a285b7e43ec91ba229d185192a2bcb3
0d602743fe7cb9d04c9368a14387fd5d68781c59
08d35dc32534580d8e3105f4596fbd9a939f595514dc1de5e964eb1ac91a2550
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 20 Jan 2023 19:44:49 GMT
Content-Type: application/ocsp-response
Content-Length: 1846
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 19 Jan 2023 22:50:15 GMT
Expires: Fri, 20 Jan 2023 22:50:15 GMT
ETag: "0d602743fe7cb9d04c9368a14387fd5d68781c59"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_c4832.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 85bd96a56a6a7f09e3e7dadc7980152e
37590c595abeb315046a293a9e53632ae2128ac4
c27be18eef006f48310fb2b0c456d6bcb1f3b0298dcb6e580724923323cb48a7
GET /i18n/pixel/static/identify_c4832.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Cookie: _ttp=2KbWidyEgOvW4uTrrhJzlD48h3W
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20230112175825D19F86481431D6BBCCFF
x-tt-trace-host: 012b38305f60bfa8a9f04bdd846fde846b507e69fff233d9a114d447ebe9f93c0f827e6bc0806bd5a24cf0439744099e1e4bba0637571d8edb56c6009f69fe5018b8e38bd5b93708ee64c377fa97874d18ceefbea8a477a7fa2bec40c3b56c69b1
content-encoding: gzip
date: Fri, 20 Jan 2023 19:44:50 GMT
content-length: 30917
x-cache: TCP_MEM_HIT from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 10b4065a
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 3bcb536fd1b5251b42e3867cc205f37f
d36b3baf04dba78f6a304dae83c65ea7c5e69d3d
54345ed325271c5d4a950079d589e37d0b5151c8e662fc3f9f9af8ed6c9796f8
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Jan 2023 19:44:50 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 24 Jan 2023 18:01:26 GMT
ETag: "d36b3baf04dba78f6a304dae83c65ea7c5e69d3d"
Last-Modified: Fri, 20 Jan 2023 18:01:27 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 105
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ca4e9a69300afe-OSL
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 3bcb536fd1b5251b42e3867cc205f37f
d36b3baf04dba78f6a304dae83c65ea7c5e69d3d
54345ed325271c5d4a950079d589e37d0b5151c8e662fc3f9f9af8ed6c9796f8
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Jan 2023 19:44:50 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 24 Jan 2023 18:01:26 GMT
ETag: "d36b3baf04dba78f6a304dae83c65ea7c5e69d3d"
Last-Modified: Fri, 20 Jan 2023 18:01:27 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 105
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78ca4e9a6fedb506-OSL
w.usabilla.com/0b7d56c9da02.js?lv=1
200 OK 11 kB URL HTTP/2 w.usabilla.com/0b7d56c9da02.js?lv=1
IP
File type ASCII text, with very long lines (2339)
Hash dc3648c0ed02025c1af65a57e0ee249e
eeb3bd8436818cad8ff9efbedecbbdee69d90dbe
67ecc5b1a6babcc2a9adb18caa9b979d12184e997f6ae558efe371b5d8a9aeb1
GET /0b7d56c9da02.js?lv=1 HTTP/1.1
Host: w.usabilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:50 GMT
content-type: text/javascript
content-length: 11113
cache-control: public,max-age=0
content-encoding: gzip
etag: "8b79752892dfb3f9099dbdbd9454a8c8"
pragma: no-cache
x-widget-server: 2.1
X-Firefox-Spdy: h2
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=651505451678280100&dcc=t
200 OK 65 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=651505451678280100&dcc=t
IP
File type HTML document, ASCII text
Hash 22fdf49482d8200e8f305bbe262eff14
f254bd4053267c2cf46675613e689016d8b7f775
115d83ece49fd1c5769409aab9d78572eed86cd38a0556b4cdeeac82c83091d3
GET /iu3?d=generic&ex-fargs=%3Fid%3D7b5e267f-6cf6-c436-4330-cc79e3ea1453%26type%3D4%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D2536428905417%3Bp%3D7B5E267F-6CF6-C436-4330-CC79E3EA1453&cb=651505451678280100&dcc=t HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://support.savethechildren.org/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Fri, 20 Jan 2023 19:44:50 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 65
Connection: keep-alive
x-amz-rid: PS741S1DG2DY47ZTDA69
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash a512d725fd2def3670a12334e3a39706
5b688085634f1aed6c53682e107676110d725e3e
28d05ea4b58004ae2ca6e68676bd725741462b0321829151cc98981cdeae7a26
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 20 Jan 2023 19:44:49 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 20 Jan 2023 04:15:20 GMT
Expires: Sat, 21 Jan 2023 04:15:20 GMT
ETag: "5b688085634f1aed6c53682e107676110d725e3e"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
insight.adsrvr.org/tags/f35s4e0/n4od8ve/iframe
303 See Other 183 B URL HTTP/2 insight.adsrvr.org/tags/f35s4e0/n4od8ve/iframe
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 4b7baa44a9cb0b8ff32d59e257be92f6
fb817d04f1093d20bcd5e6ab21a4d2f383aa6457
53456e8469debdb17dc2a874d2efbb238f4afec996ead18581dfcfe154ec5ce1
GET /tags/f35s4e0/n4od8ve/iframe HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 303 See Other
date: Fri, 20 Jan 2023 19:44:50 GMT
content-type: text/html; charset=UTF-8
content-length: 183
location: https://d1eoo1tco6rr5e.cloudfront.net/f35s4e0/n4od8ve/iframe
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
insight.adsrvr.org/tags/f35s4e0/qa0mevt/iframe
303 See Other 183 B URL HTTP/2 insight.adsrvr.org/tags/f35s4e0/qa0mevt/iframe
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 9996833ba4873a6a2b2ae4fa08891598
ad2582c24fd6f2ff473b251542508e6a4f34f100
db2d6dec0779bc0e1721031b88f6383a99b2516d62b7aafc69d3333467271110
GET /tags/f35s4e0/qa0mevt/iframe HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 303 See Other
date: Fri, 20 Jan 2023 19:44:50 GMT
content-type: text/html; charset=UTF-8
content-length: 183
location: https://d1eoo1tco6rr5e.cloudfront.net/f35s4e0/qa0mevt/iframe
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
tags.wdsvc.net/controller.js?id=100229
302 Found 0 B URL HTTP/1.1 tags.wdsvc.net/controller.js?id=100229
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /controller.js?id=100229 HTTP/1.1
Host: tags.wdsvc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: private, no-cache
location: https://tags.wdsvc.net/container.js?id=100229&v=4.10&t=1674243890317
Set-Cookie: _wdTest=accept; Domain=.wdsvc.net; Path=/; Max-Age=30; SameSite=none; secure; HttpOnly
wds_random=2023-01-20T19:44:50.317Z~2023-01-20T19:44:50.317Z|2995182159131095|40|; expires=Mon, 19 Jan 2026 19:44:50 GMT; domain=.wdsvc.net;path=/;SameSite=none; secure; HttpOnly
OPTOUT=No Opt-Out Privacy Signal Detected; Expires=Thu, 20 Jan 2022 19:44:50 GMT; SameSite=None; Secure
Date: Fri, 20 Jan 2023 19:44:50 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
d1eoo1tco6rr5e.cloudfront.net/f35s4e0/n4od8ve/iframe
200 OK 132 B URL HTTP/1.1 d1eoo1tco6rr5e.cloudfront.net/f35s4e0/n4od8ve/iframe
IP
File type ASCII text, with CRLF line terminators
Hash bc0416914b6a26dae5dfd258e572b291
75809bf17bb8d45f5f829b7b625ded35e506d2af
50bb9c8f4af577f3289f597f2441f177967721b438fd1737b937ef69f4a58062
GET /f35s4e0/n4od8ve/iframe HTTP/1.1
Host: d1eoo1tco6rr5e.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://support.savethechildren.org/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 132
Connection: keep-alive
Last-Modified: Sat, 02 Oct 2021 00:02:02 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 20 Jan 2023 08:21:02 GMT
Cache-Control: max-age=86400
ETag: "bc0416914b6a26dae5dfd258e572b291"
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: l91dXRMxP8eGXQ3vKyoSxgHskVYi35W0DYc54j35438Q0S39ZjxXHQ==
Age: 41029
d1eoo1tco6rr5e.cloudfront.net/f35s4e0/qa0mevt/iframe
200 OK 138 B URL HTTP/1.1 d1eoo1tco6rr5e.cloudfront.net/f35s4e0/qa0mevt/iframe
IP
File type ASCII text, with CRLF line terminators
Hash d6f3ec45e4993f46db4a53dc1f01b599
2c7a74dce73d73c8435847d43c20d47c6ea53a1d
d9479c1288cf240cf605993ef0fcda98d749b6b7fb8e4ee584be29ed1856aca3
GET /f35s4e0/qa0mevt/iframe HTTP/1.1
Host: d1eoo1tco6rr5e.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://support.savethechildren.org/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Last-Modified: Sat, 02 Oct 2021 00:02:02 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 20 Jan 2023 15:41:58 GMT
Cache-Control: max-age=86400
ETag: "d6f3ec45e4993f46db4a53dc1f01b599"
X-Cache: Hit from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wyYN0pRjZEDRrdha-U_pQWW8bekL09GIn7HsV0O6PNa1_XGi7JtrQQ==
Age: 14573
ocsp.digicert.com/
200 OK 471 B IP
Hash a52ece8687026e456569f4870d3962d0
2c86dde3996ab55ff0208eba270290df1f049ece
f276974728ee4a3ae115af00359df8744129c828e865bfabb66ff744b57a87b5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:50 GMT
Etag: "63caa14b-1d7"
Server: ECS (amb/6B84)
Content-Length: 471
d6tizftlrpuof.cloudfront.net/themes/production/save-the-children-usa-button-18e985c8f1327aa5b0db2be1ab660ba6.png
200 OK 9.2 kB URL HTTP/1.1 d6tizftlrpuof.cloudfront.net/themes/production/save-the-children-usa-button-18e985c8f1327aa5b0db2be1ab660ba6.png
IP
File type PNG image data, 159 x 523, 8-bit/color RGB, non-interlaced\012- data
Hash 18e985c8f1327aa5b0db2be1ab660ba6
40b959e93c2a7521f3ac03bdc6952d3316bfa8f8
9fbb05adcdc2317148fbaaf7c56be51c9246d351c9ae5235eb09dcd0ee0da552
GET /themes/production/save-the-children-usa-button-18e985c8f1327aa5b0db2be1ab660ba6.png HTTP/1.1
Host: d6tizftlrpuof.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 9208
Connection: keep-alive
Date: Thu, 17 Nov 2022 19:43:21 GMT
Last-Modified: Tue, 08 Nov 2022 16:00:18 GMT
ETag: "18e985c8f1327aa5b0db2be1ab660ba6"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=315360000, no-transform, public
x-amz-version-id: UUIaS9R3j_VdIQipfTJ5dnr2koEgl3_W
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: b1M5PyN3L6NXapJu1Bgju5uCvha9MwMzRAykx8JbYCcnGeoWZWTFXQ==
Age: 5529690
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1140
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/
Cookie: _ttp=2KbWidyEgOvW4uTrrhJzlD48h3W
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20230120194450E745D691E7D8A0516EB8
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60787dee798e7afc9c5500f386c65d6ca1197c7a24f18ebfcb4efb1f877a557ab1bea0f57babcb40c90ec8db51adbe04aa5fa8a4d893ba88fe50b0a404b42441baa06e39de0fc2eb58b91aa3f206bbcb05
expires: Fri, 20 Jan 2023 19:44:50 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 20 Jan 2023 19:44:50 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=51, cdn-cache; desc=MISS, edge; dur=8, origin; dur=150
x-origin-response-time: 150,23.36.79.28
x-akamai-request-id: 10b406eb
X-Firefox-Spdy: h2
nexus.ensighten.com/choozle/10170/code/0954ce0040a8fc5aeab3289dc26bb80c.js?conditionId0=421905
200 OK 4.4 kB URL HTTP/2 nexus.ensighten.com/choozle/10170/code/0954ce0040a8fc5aeab3289dc26bb80c.js?conditionId0=421905
IP
File type CSV text\012- , ASCII text, with very long lines (15115)
Hash 384d4423a962f4b7c3695d7f7b2b22c6
4af6461a83df80a0fd0db32a8f64855e7797b994
4607624af08503ae098fed1347dc394b6d4da8a98945b8d1451b4fbe6c09905f
GET /choozle/10170/code/0954ce0040a8fc5aeab3289dc26bb80c.js?conditionId0=421905 HTTP/1.1
Host: nexus.ensighten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
date: Fri, 22 Jul 2022 07:38:38 GMT
x-amz-replication-status: COMPLETED
last-modified: Mon, 13 Jun 2022 14:49:13 GMT
etag: W/"c4e2839424f981629cf0fe2178ff9ef7"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: jmpzjXQT9NQsQ8wKHWAp4CLwVbc46grs
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DUOUFn3es9gH5sYwS5yRv55R-1TS6T_WA2-7ElswGq8Fq_t1VRWwXw==
age: 15768372
X-Firefox-Spdy: h2
tags.wdsvc.net/container.js?id=100229&v=4.10&t=1674243890317
200 OK 27 kB URL HTTP/1.1 tags.wdsvc.net/container.js?id=100229&v=4.10&t=1674243890317
IP
File type ASCII text, with very long lines (27353), with no line terminators
Hash 162344c24b8c2c7e59014515ef2429d5
3afa27fb26e330ec3309e933c0524c65961d0b77
c613c38bfe651afc420f3851552b9afc084a203e97d0958018f1df42512a093a
GET /container.js?id=100229&v=4.10&t=1674243890317 HTTP/1.1
Host: tags.wdsvc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://support.savethechildren.org/
Connection: keep-alive
Cookie: _wdTest=accept; wds_random=2023-01-20T19:44:50.317Z~2023-01-20T19:44:50.317Z|2995182159131095|40|
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-length: 27353
Expires: Mon, 3 Jan 2005 13:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Set-Cookie: wds_random=2023-01-20T19:44:50.317Z~2023-01-20T19:44:50.317Z|2995182159131095|40|; expires=Mon, 19 Jan 2026 19:44:50 GMT; domain=.wdsvc.net;path=/; SameSite=none; secure; HttpOnly
Date: Fri, 20 Jan 2023 19:44:50 GMT
Connection: keep-alive
Keep-Alive: timeout=5
app.leadsrx.com/visitor.js
200 OK 19 kB URL HTTP/2 app.leadsrx.com/visitor.js
IP
File type ASCII text, with very long lines (18735), with no line terminators
Hash 0a4109c065352458bee4e9cc98e1fbce
1d44e1811ea9409f12e88fc42c8a734d3316293b
6b5116bd2cb4809c6634b99a9b1ea0a0aeda596a94817682a0e4811e35eccc58
GET /visitor.js HTTP/1.1
Host: app.leadsrx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:50 GMT
content-type: application/javascript
content-length: 18735
server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
last-modified: Fri, 20 Jan 2023 14:43:54 GMT
etag: "492f-5f2b31423d77c"
accept-ranges: bytes
X-Firefox-Spdy: h2
tags.wdsvc.net/tpc-eval/?lid=185d0b65d4c-tags4-aa41a30a1f1d7
200 OK 21 B URL HTTP/1.1 tags.wdsvc.net/tpc-eval/?lid=185d0b65d4c-tags4-aa41a30a1f1d7
IP
File type ASCII text, with no line terminators
Hash 003a8361d4dd772481d7141c6ffe7ca5
1edd2f58fba4ac9191493fb71a5d2c2407e34c56
b0e70b299ab9c122ad93531fa8e5309833baecd53dd55c992c538f8b33bfa22d
GET /tpc-eval/?lid=185d0b65d4c-tags4-aa41a30a1f1d7 HTTP/1.1
Host: tags.wdsvc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Cookie: _wdTest=accept; wds_random=2023-01-20T19:44:50.317Z~2023-01-20T19:44:50.317Z|2995182159131095|40|
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-length: 21
Expires: Mon, 3 Jan 2005 13:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Date: Fri, 20 Jan 2023 19:44:50 GMT
Connection: keep-alive
Keep-Alive: timeout=5
app.leadsrx.com/visitor.php?acctTag=yqahgl42094&tz=0&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&u=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&t=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&lc=null&anon=0&vin=null
200 OK 73 B URL HTTP/2 app.leadsrx.com/visitor.php?acctTag=yqahgl42094&tz=0&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&u=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&t=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&lc=null&anon=0&vin=null
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4055308cef6c060e48be9116f466f55c
8031c14e281f8213c14ca2fce833b5928a11679e
191d4cfe259a79476cf2d6cd73900e4789e5ab7ffd39868890ae220e04fa9426
GET /visitor.php?acctTag=yqahgl42094&tz=0&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&u=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&t=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&lc=null&anon=0&vin=null HTTP/1.1
Host: app.leadsrx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:50 GMT
content-type: text/html; charset=utf-8
content-length: 73
server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
x-powered-by: PHP/5.6.40
access-control-allow-origin: https://support.savethechildren.org
access-control-allow-credentials: true
X-Firefox-Spdy: h2
dpm.demdex.net/ibs:dpid=411&dpuuid=Y8rvMgAAAJJOXwN-
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=411&dpuuid=Y8rvMgAAAJJOXwN-
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=411&dpuuid=Y8rvMgAAAJJOXwN- HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://support.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v045-0e1730cee.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y8rvMgAAAJJOXwN-
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=12744173208388443180725165584879417830; Max-Age=15552000; Expires=Wed, 19 Jul 2023 19:44:51 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: eIhNjUXnQlc=
Content-Length: 0
Connection: keep-alive
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13351)
Hash 74f72658f6efd10c4c286ab07cd5e452
9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=32441
date: Fri, 20 Jan 2023 19:44:51 GMT
content-length: 4777
x-cdn: AKAM
X-Firefox-Spdy: h2
js.adsrvr.org/up_loader.1.1.0.js
200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP
File type ASCII text, with very long lines (4593), with no line terminators
Hash fc322cd537acbe09a494306a9191124a
757cca3916c8efd2ded11be90b3e8a790b5b73dc
2406d172868e70c8fa25558401afc349b30abae39e0090ed0d11d7367692d170
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Fri, 20 Jan 2023 06:03:06 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Jj_o3fqzYL6iso9IHUGydKeBIZK5owEY1it8dBJ_blGUxR14okKUCA==
Age: 49305
ocsp.digicert.com/
200 OK 471 B IP
Hash f76685480cc0a396abec56b2bacff3d5
6fc14273e16deb512063bcde6d936d3f331c1b28
96318b41cd34b22f88213f7f246780d3aeb476536c22566ef3f450aac93d1271
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3163
Cache-Control: max-age=109261
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:51 GMT
Etag: "63c9eaa5-1d7"
Expires: Sun, 22 Jan 2023 02:05:52 GMT
Last-Modified: Fri, 20 Jan 2023 01:13:09 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Fri, 20 Jan 2023 17:45:20 GMT
expires: Fri, 20 Jan 2023 19:45:20 GMT
cache-control: public, max-age=7200
age: 7171
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39124), with no line terminators
Hash d925a898de26295fdebfc90203ef46fa
77dd3f5893b76530e08058d50e8f9aef017e80c7
8f4a413fec7e48f5ac290f4596fef33b6396e7fb31080ec0203a5ec817d140c8
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11460
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 05 Dec 2022 17:15:50 GMT
accept-ranges: bytes
etag: "027e538cd8d91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 874FD3B8DFC44F1E8D3BD8D577182346 Ref B: OSL30EDGE0307 Ref C: 2023-01-20T19:44:51Z
date: Fri, 20 Jan 2023 19:44:50 GMT
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 9ba458c0d3060a442f3094daf58ec05d
fc35d487d0dd81e6855f1b02367b755609d9608d
17087257ea25c2232c025f338b9f3153d35c3d953cb382b7b6e01728a643bc0b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: UneZnDxMh6e8qSw7sTTcX6/h+JVxXZDgYePUeQjSKpkETeoGudkXxZOTqcbTy0uAfVPfDCv4Gb8cOcJnAamVsA==
content-length: 27859
x-fb-trip-id: 1904183273
date: Fri, 20 Jan 2023 19:44:51 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2
302 Found 0 B URL HTTP/1.1 s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2 HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Fri, 20 Jan 2023 19:44:51 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: 1RVRKNBMC9WJZCEXKJK0
Set-Cookie: ad-id=A_Le84GEjkr7uHoi5g87NB0|t; Domain=.amazon-adsystem.com; Expires=Sun, 01-Oct-2023 19:44:51 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
ocsp.digicert.com/
200 OK 471 B IP
Hash f76685480cc0a396abec56b2bacff3d5
6fc14273e16deb512063bcde6d936d3f331c1b28
96318b41cd34b22f88213f7f246780d3aeb476536c22566ef3f450aac93d1271
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3163
Cache-Control: max-age=109261
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:51 GMT
Etag: "63c9eaa5-1d7"
Expires: Sun, 22 Jan 2023 02:05:52 GMT
Last-Modified: Fri, 20 Jan 2023 01:13:09 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 471 B IP
Hash ab4de9a0330e6a3569f6e31e12f6c450
3c48e7e25facf89133141cbb2c875acae96d97f3
fde2df7684c606a9faa8dd1646298819983a60c744d87d8e87b97747ea39980d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Jan 2023 19:44:51 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 18 Jan 2023 02:54:27 GMT
Expires: Wed, 25 Jan 2023 02:54:26 GMT
Etag: "3c48e7e25facf89133141cbb2c875acae96d97f3"
Cache-Control: max-age=370774,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78ca4e9e8b67b512-OSL
44.238.122.172/is
200 OK 32 B IP
File type ASCII text, with no line terminators
Hash d65d091eb3d9378646bca8fa873899d8
056bbf9c71498437c1106347720bef9a199fb591
51c86b6c790c8e2382259ceb1ada9e3c28d3f37e097599079f76fa0476813eb2
Analyzer Verdict Alert quad9 Sinkholed
GET /is HTTP/1.1
Host: 44.238.122.172
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://support.savethechildren.org/
Origin: https://support.savethechildren.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 19:44:51 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 76067b8816d1fc8c66197c9a94f10287
90cdf94e777716e821ac06f46f4a394c6ec963bd
2356a39a9eaf489b832409e120a6556e4c5c70a35b1ca49a3687aa1739aaec59
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 20 Jan 2023 19:44:51 GMT
Etag: "63c9907c-1d7"
Server: ECS (dcb/7F82)
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Nk8X83Tif_d0Ql-ADx4hTTT6IUtcPlSqgjzGM-toQkYSpsJV1qXDMA==
insight.adsrvr.org/track/pxl/?adv=f35s4e0&ct=0:n4od8ve&fmt=3
200 OK 26 kB URL HTTP/2 insight.adsrvr.org/track/pxl/?adv=f35s4e0&ct=0:n4od8ve&fmt=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d43908e06f8eb55468ac166659adf226
da480a209304acbe3c7957f3d3f7d9fcb9ddbc55
dc29970c86392d117faf722d10462ddc46d9811cc783bac8f49a4c8c4dbe3b7a
GET /track/pxl/?adv=f35s4e0&ct=0:n4od8ve&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d1eoo1tco6rr5e.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:50 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 536d61ebdc4e6de930f3377289c89c8f
b4c7a0dbae9001a857fa4d70d3bb49689eb2cab9
c74c73969b59d47c73fac585ef2398c5ac1a561a38a88cfd75c719e44ab11723
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 20 Jan 2023 19:44:51 GMT
Last-Modified: Fri, 20 Jan 2023 18:49:17 GMT
Server: ECS (bsa/EB11)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _ACZS8CDq50MXxO62CbuIMSJEuXmM9XOpLHsfjfUNmzNYkytRn1Z-w==
Age: 3334
tr2.smarterhq.io/app1/SmarterHandler.ashx?r=1193538418&i=fyl6dahrce-1092&cb=_smtr.postprocess&cu=true&bv=2.7.14&utc=0&pt=5&href=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&hostn=support.savethechildren.org&pathn=%2Fsite%2Fspagenavigator%2Flogin.html
200 OK 295 B URL HTTP/2 tr2.smarterhq.io/app1/SmarterHandler.ashx?r=1193538418&i=fyl6dahrce-1092&cb=_smtr.postprocess&cu=true&bv=2.7.14&utc=0&pt=5&href=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&hostn=support.savethechildren.org&pathn=%2Fsite%2Fspagenavigator%2Flogin.html
IP
File type ASCII text, with no line terminators
Hash ba80f3e6581c2e6012c91b95e4ea485c
f0cf1dff4450feda1a2754c391fc413ddf2d3dd8
819b5b070011bc67c9da561ec14cd1fd5326e49e159c75fb9a57b6c870583d31
GET /app1/SmarterHandler.ashx?r=1193538418&i=fyl6dahrce-1092&cb=_smtr.postprocess&cu=true&bv=2.7.14&utc=0&pt=5&href=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&hostn=support.savethechildren.org&pathn=%2Fsite%2Fspagenavigator%2Flogin.html HTTP/1.1
Host: tr2.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:51 GMT
content-type: text/javascript
content-length: 295
server: Kestrel
cache-control: no-store,no-cache
pragma: no-cache
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=a6t02yu&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&upid=xvch1ck&upv=1.1.0
200 OK 2 B URL HTTP/2 insight.adsrvr.org/track/up?adv=a6t02yu&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&upid=xvch1ck&upv=1.1.0
IP
File type ASCII text, with no line terminators
Hash 38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
GET /track/up?adv=a6t02yu&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&upid=xvch1ck&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:51 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y8rvMgAAAJJOXwN-
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y8rvMgAAAJJOXwN-
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y8rvMgAAAJJOXwN- HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://support.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-2-v045-0df7a788e.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: CFqbCeg2T5o=
Content-Length: 59
Connection: keep-alive
bat.bing.com/action/0?ti=5439503&Ver=2&mid=e73c4d47-35a8-47f0-bbce-d814eeae7706&sid=e71797d098fa11ed86c819e0aed0a102&vid=e717db6098fa11edac125f7c81400425&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&p=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&r=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4<=2195&evt=pageLoad&sv=1&rn=678932
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=5439503&Ver=2&mid=e73c4d47-35a8-47f0-bbce-d814eeae7706&sid=e71797d098fa11ed86c819e0aed0a102&vid=e717db6098fa11edac125f7c81400425&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&p=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&r=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4<=2195&evt=pageLoad&sv=1&rn=678932
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5439503&Ver=2&mid=e73c4d47-35a8-47f0-bbce-d814eeae7706&sid=e71797d098fa11ed86c819e0aed0a102&vid=e717db6098fa11edac125f7c81400425&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&p=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&r=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4<=2195&evt=pageLoad&sv=1&rn=678932 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=1FB07C255511623603E56EBA544663DF; domain=.bing.com; expires=Wed, 14-Feb-2024 19:44:51 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 30FE92466C914FA3BB483B2E63B4BE54 Ref B: OSL30EDGE0307 Ref C: 2023-01-20T19:44:51Z
date: Fri, 20 Jan 2023 19:44:50 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 287bdd180d0b6ff8f9a00e27cd61726e
ff9a567f1b0e6bb978737d402e69caad3d28e948
13a27537608da3260641b048e0e19292b4125186f2c6b05fcf6b6f307ec95630
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/1069852215/?random=1674243889453&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2oa1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&tiba=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3966402884&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1069852215/?random=1674243889453&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2oa1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&tiba=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3966402884&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1069852215/?random=1674243889453&cv=11&fst=1674241200000&bg=ffffff&guid=ON&async=1>m=2oa1i0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&tiba=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3966402884&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 20 Jan 2023 19:44:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2&dcc=t
200 OK 43 B URL HTTP/1.1 s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2&dcc=t
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6851dbf491ae442da3314f19e8aff085
ecfec27263608c4ae7cd4f8e0cebb1b061df2ac3
c21e2c1246fe45a6750ae6208db2b5965ff6ed63eb80d2ecec3be9c83813428e
GET /iui3?d=forester-did&ex-fargs=%3Fid%3D35707a8f-2b39-c482-69de-13a5cbb7cbf2%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.savethechildren.org/&ex-hargs=v%3D1.0%3Bc%3D585550389931295878%3Bp%3D35707A8F-2B39-C482-69DE-13A5CBB7CBF2&dcc=t HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://support.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Fri, 20 Jan 2023 19:44:51 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
x-amz-rid: SC5YQ2R3342G6M967X3G
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
bat.bing.com/p/action/5439503.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/5439503.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/5439503.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 40CEE39C1D0B4050BF3C4B84A66B33B5 Ref B: OSL30EDGE0307 Ref C: 2023-01-20T19:44:51Z
date: Fri, 20 Jan 2023 19:44:50 GMT
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=4092132&time=1674243890429&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=4092132&time=1674243890429&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=4092132&time=1674243890429&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4092132%26time%3D1674243890429%26url%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Flogin.html%253Fnexturl%253Dhttps%25253A%25252F%25252Fsupport.savethechildren.org%25252Fsite%25252FSPageNavigator%25252Fsupporter_center.html%25253Bjsessionid%25253D00000000.app30124b%25253FNONCE_TOKEN%25253D83EFC651A328234A9C3A12FADF2DB1D4%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQLBQrybQeLjZQAAAYXQtmIKu2ONBqWBd1qfvKrZY5ZWWGu6UZPByDyJwAplmD6n12xTonbV7vPv5w; Max-Age=2592000; Expires=Sun, 19 Feb 2023 19:44:51 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQLghpgd2mvU0gAAAYXQtmIKYRloBTYibcvQIZIoJhvNW1xlsodPdo9Ao3vB6FeQBAo3Ns98L0Lso1QH7XwLug; Max-Age=2592000; Expires=Sun, 19 Feb 2023 19:44:51 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&8caf6496-95d3-4c29-828a-d0acf94f9059"; domain=.linkedin.com; Path=/; Secure; Expires=Sat, 20-Jan-2024 19:44:51 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2473:u=1:x=1:i=1674243891:t=1674330291:v=2:sig=AQGbRKofTEXMoih56yixLNxDfvDjvnqL"; Expires=Sat, 21 Jan 2023 19:44:51 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXyt0hutRd3EgydblJxgw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 70AF0B922BBB484A92E348EC529A5F9B Ref B: OSL30EDGE0421 Ref C: 2023-01-20T19:44:51Z
date: Fri, 20 Jan 2023 19:44:51 GMT
content-length: 0
X-Firefox-Spdy: h2
tr2.smarterhq.io/app1/smtr1x1.gif?r=711198072&action=crm&i=fyl6dahrce-1092&modalc=638098406916112365%5E0185d0b6-619b-46fe-bc85-3bab1ac145c1%5E0185d0b6-619b-45d6-ad7a-d020020f4e03%5E0%5E91.90.42.154&dwId=04684273842535973070097840255777269655&bv=2.7.14
200 OK 43 B URL HTTP/2 tr2.smarterhq.io/app1/smtr1x1.gif?r=711198072&action=crm&i=fyl6dahrce-1092&modalc=638098406916112365%5E0185d0b6-619b-46fe-bc85-3bab1ac145c1%5E0185d0b6-619b-45d6-ad7a-d020020f4e03%5E0%5E91.90.42.154&dwId=04684273842535973070097840255777269655&bv=2.7.14
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /app1/smtr1x1.gif?r=711198072&action=crm&i=fyl6dahrce-1092&modalc=638098406916112365%5E0185d0b6-619b-46fe-bc85-3bab1ac145c1%5E0185d0b6-619b-45d6-ad7a-d020020f4e03%5E0%5E91.90.42.154&dwId=04684273842535973070097840255777269655&bv=2.7.14 HTTP/1.1
Host: tr2.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:51 GMT
content-type: image/gif
content-length: 43
server: Kestrel
cache-control: no-store,no-cache
pragma: no-cache
X-Firefox-Spdy: h2
tr2.smarterhq.io/app1/SmarterHandler.ashx?r=1953035537&i=fyl6dahrce-1092&cb=_smtr.postprocess&bv=2.7.14&utc=0&pt=5&href=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&hostn=support.savethechildren.org&pathn=%2Fsite%2Fspagenavigator%2Flogin.html&modalc=638098406916112365^0185d0b6-619b-46fe-bc85-3bab1ac145c1^0185d0b6-619b-45d6-ad7a-d020020f4e03^0^91.90.42.154
200 OK 294 B URL HTTP/2 tr2.smarterhq.io/app1/SmarterHandler.ashx?r=1953035537&i=fyl6dahrce-1092&cb=_smtr.postprocess&bv=2.7.14&utc=0&pt=5&href=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&hostn=support.savethechildren.org&pathn=%2Fsite%2Fspagenavigator%2Flogin.html&modalc=638098406916112365^0185d0b6-619b-46fe-bc85-3bab1ac145c1^0185d0b6-619b-45d6-ad7a-d020020f4e03^0^91.90.42.154
IP
File type ASCII text, with no line terminators
Hash 4b30469390c6f503cb748dab7eaf4e40
379dc48c9017d1093da3e745eb67a39071c70679
137d7c84c8cf48d67ea7b8b91b5dee5c0b72a28002885d65b0f1041362068e6e
GET /app1/SmarterHandler.ashx?r=1953035537&i=fyl6dahrce-1092&cb=_smtr.postprocess&bv=2.7.14&utc=0&pt=5&href=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&hostn=support.savethechildren.org&pathn=%2Fsite%2Fspagenavigator%2Flogin.html&modalc=638098406916112365^0185d0b6-619b-46fe-bc85-3bab1ac145c1^0185d0b6-619b-45d6-ad7a-d020020f4e03^0^91.90.42.154 HTTP/1.1
Host: tr2.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:51 GMT
content-type: text/javascript
content-length: 294
server: Kestrel
cache-control: no-store,no-cache
pragma: no-cache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c232c19f3fc429b50b4b21d042ea2d1
232ff9e14ff2bd70e2c058c139e3694cc8c45f25
dfdf4248506d908ca817562e74c64bdb1a192c61c6d1f2f2f66db045bc1e3575
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Jan 2023 19:44:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
px.mountain.com/st?ga_tracking_id=UA-85748307-2&ga_client_id=726245059.1674243890&shpt=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-85748307-2%22%2C%22ga_client_id%22%3A%22726245059.1674243890%22%2C%22shpt%22%3A%22Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%22726245059.1674243890%22%2C%22dcm_gid%22%3A%221787192880.1674243890%22%2C%22mntnis%22%3A%22DvQF%2B4XUYoaEoX4bfJ1h9A9VE6VZH0GU%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=726245059.1674243890&dcm_gid=1787192880.1674243890&dxver=4.0.0&shaid=32293&tdr=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&plh=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&cb=41615439238193010&term=value&shadditional=googletagmanager%3Dtrue
200 OK 1.3 kB URL HTTP/1.1 px.mountain.com/st?ga_tracking_id=UA-85748307-2&ga_client_id=726245059.1674243890&shpt=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-85748307-2%22%2C%22ga_client_id%22%3A%22726245059.1674243890%22%2C%22shpt%22%3A%22Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%22726245059.1674243890%22%2C%22dcm_gid%22%3A%221787192880.1674243890%22%2C%22mntnis%22%3A%22DvQF%2B4XUYoaEoX4bfJ1h9A9VE6VZH0GU%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=726245059.1674243890&dcm_gid=1787192880.1674243890&dxver=4.0.0&shaid=32293&tdr=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&plh=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&cb=41615439238193010&term=value&shadditional=googletagmanager%3Dtrue
IP
File type ASCII text, with very long lines (2639)
Hash 0c65dc193a80a0c298f3dd49059e458d
6b91f5ec46deaf8cf9dea46b33cd1188658fd7de
b9c367275cf833808e5f5abbf24f074b3a04b50136c33d40b3a18a8eb7cf4d3d
GET /st?ga_tracking_id=UA-85748307-2&ga_client_id=726245059.1674243890&shpt=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-85748307-2%22%2C%22ga_client_id%22%3A%22726245059.1674243890%22%2C%22shpt%22%3A%22Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%22726245059.1674243890%22%2C%22dcm_gid%22%3A%221787192880.1674243890%22%2C%22mntnis%22%3A%22DvQF%2B4XUYoaEoX4bfJ1h9A9VE6VZH0GU%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=726245059.1674243890&dcm_gid=1787192880.1674243890&dxver=4.0.0&shaid=32293&tdr=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&plh=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&cb=41615439238193010&term=value&shadditional=googletagmanager%3Dtrue HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 19:44:52 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=e80f0e85-98fa-11ed-8a9d-ddca5f8d3ee6;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
transfer-encoding: chunked
www.facebook.com/tr/?id=175734969458030&ev=PageView&dl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&rl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&if=false&ts=1674243891175&sw=1280&sh=1024&v=2.9.94&r=stable&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%222690107274549883%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22USD%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22476958242912126%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22USD%22%7D%7D%7D&par[2]=%7B%22extractorID%22%3A%221151582051705481%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[3]=%7B%22extractorID%22%3A%22554416668662072%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[4]=%7B%22extractorID%22%3A%22512804019569006%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1674243891174.226722516&it=1674243890482&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=175734969458030&ev=PageView&dl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&rl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&if=false&ts=1674243891175&sw=1280&sh=1024&v=2.9.94&r=stable&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%222690107274549883%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22USD%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22476958242912126%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22USD%22%7D%7D%7D&par[2]=%7B%22extractorID%22%3A%221151582051705481%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[3]=%7B%22extractorID%22%3A%22554416668662072%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[4]=%7B%22extractorID%22%3A%22512804019569006%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1674243891174.226722516&it=1674243890482&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=175734969458030&ev=PageView&dl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&rl=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&if=false&ts=1674243891175&sw=1280&sh=1024&v=2.9.94&r=stable&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%222690107274549883%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22USD%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22476958242912126%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22USD%22%7D%7D%7D&par[2]=%7B%22extractorID%22%3A%221151582051705481%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[3]=%7B%22extractorID%22%3A%22554416668662072%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[4]=%7B%22extractorID%22%3A%22512804019569006%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1674243891174.226722516&it=1674243890482&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 20 Jan 2023 19:44:52 GMT
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4092132%26time%3D1674243890429%26url%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Flogin.html%253Fnexturl%253Dhttps%25253A%25252F%25252Fsupport.savethechildren.org%25252Fsite%25252FSPageNavigator%25252Fsupporter_center.html%25253Bjsessionid%25253D00000000.app30124b%25253FNONCE_TOKEN%25253D83EFC651A328234A9C3A12FADF2DB1D4%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4092132%26time%3D1674243890429%26url%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Flogin.html%253Fnexturl%253Dhttps%25253A%25252F%25252Fsupport.savethechildren.org%25252Fsite%25252FSPageNavigator%25252Fsupporter_center.html%25253Bjsessionid%25253D00000000.app30124b%25253FNONCE_TOKEN%25253D83EFC651A328234A9C3A12FADF2DB1D4%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4092132%26time%3D1674243890429%26url%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Flogin.html%253Fnexturl%253Dhttps%25253A%25252F%25252Fsupport.savethechildren.org%25252Fsite%25252FSPageNavigator%25252Fsupporter_center.html%25253Bjsessionid%25253D00000000.app30124b%25253FNONCE_TOKEN%25253D83EFC651A328234A9C3A12FADF2DB1D4%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://support.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=4092132&time=1674243890429&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&e79e9eda-37a8-4ec2-8b28-a58b871ee492"; Domain=.linkedin.com; Expires=Sat, 20-Jan-2024 19:44:52 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20230120194452be3f4b43-aec8-472f-83e7-5543ee2b8c8aAQFgmVzyu2eQ0HGpe8h07YLJtnxjlASQ"; Domain=.www.linkedin.com; Expires=Sat, 20-Jan-2024 19:44:52 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzQyNDM4OTI7MjswMjGW5YsbeCDaZClIgWDezQtAz1rWyZ9eX24NuaYjqcNeQQ==; Domain=.linkedin.com; Expires=Wed, 19 Jul 2023 19:44:52 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2473:u=1:x=1:i=1674243892:t=1674330292:v=2:sig=AQGGjLefdq1kdVdNfZWGELMSGwvnMHsv"; Expires=Sat, 21 Jan 2023 19:44:52 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXyt0h5uj+edzCtH73fng==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 87448A6209834EFA98B61168853DA0E4 Ref B: OSL30EDGE0421 Ref C: 2023-01-20T19:44:52Z
date: Fri, 20 Jan 2023 19:44:52 GMT
content-length: 0
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=4092132&time=1674243890429&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=4092132&time=1674243890429&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=4092132&time=1674243890429&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://support.savethechildren.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&0421b39b-ea3c-4074-85d9-606c7b219a7d"; domain=.linkedin.com; Path=/; Secure; Expires=Sat, 20-Jan-2024 19:44:52 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2473:u=1:x=1:i=1674243892:t=1674330292:v=2:sig=AQGGjLefdq1kdVdNfZWGELMSGwvnMHsv"; Expires=Sat, 21 Jan 2023 19:44:52 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXyt0h7rGMXBmt8CJEfBQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 118BA724996447CDB0F5A912AFDB8F68 Ref B: OSL30EDGE0421 Ref C: 2023-01-20T19:44:52Z
date: Fri, 20 Jan 2023 19:44:52 GMT
content-length: 0
X-Firefox-Spdy: h2
insight.adsrvr.org/track/pxl/?adv=f35s4e0&ct=0:qa0mevt&fmt=3
200 OK 70 B URL HTTP/2 insight.adsrvr.org/track/pxl/?adv=f35s4e0&ct=0:qa0mevt&fmt=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/pxl/?adv=f35s4e0&ct=0:qa0mevt&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d1eoo1tco6rr5e.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:50 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
gs.mountain.com/gs
200 OK 144 B IP
File type ASCII text, with no line terminators
Hash eb6d1334cfd7139dcc8df52d5514253c
f4ef0029cb3211f8c426b8f3bfa6721035f74f0e
e13b1bc2cf8a231d5b913509cd60791d54b8ae7d513faa04d5b0a196a3eefc90
GET /gs HTTP/1.1
Host: gs.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Cookie: guid=e80f0e85-98fa-11ed-8a9d-ddca5f8d3ee6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 19:44:52 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
insight.adsrvr.org/track/evnt/?adv=0ugbyxx&ct=0:8hrabaq&fmt=3&td1=185d0b65d4c-tags4-aa41a30a1f1d7
200 OK 70 B URL HTTP/2 insight.adsrvr.org/track/evnt/?adv=0ugbyxx&ct=0:8hrabaq&fmt=3&td1=185d0b65d4c-tags4-aa41a30a1f1d7
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/evnt/?adv=0ugbyxx&ct=0:8hrabaq&fmt=3&td1=185d0b65d4c-tags4-aa41a30a1f1d7 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:52 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/conv/?adv=0ugbyxx&ct=0:rlc0tuy&fmt=3&orderid=&vf=&v=&td1=185d0b65d4c-tags4-aa41a30a1f1d7
200 OK 113 B URL HTTP/2 insight.adsrvr.org/track/conv/?adv=0ugbyxx&ct=0:rlc0tuy&fmt=3&orderid=&vf=&v=&td1=185d0b65d4c-tags4-aa41a30a1f1d7
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b3ce02f5f663bdd4ac9b92661b13eb14
f7d968fb3507095ab03fb3ef59cd7b291282d5bd
2320800d32f53ef4a1accb20ff424d5638f9a067bc77132187929409e26a89d3
GET /track/conv/?adv=0ugbyxx&ct=0:rlc0tuy&fmt=3&orderid=&vf=&v=&td1=185d0b65d4c-tags4-aa41a30a1f1d7 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:52 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
px.mountain.com/st?ga_tracking_id=UA-85748307-2&ga_client_id=726245059.1674243890&shpt=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-85748307-2%22%2C%22ga_client_id%22%3A%22726245059.1674243890%22%2C%22shpt%22%3A%22Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%22726245059.1674243890%22%2C%22dcm_gid%22%3A%221787192880.1674243890%22%2C%22mntnis%22%3A%22DvQF%2B4XUYoaEoX4bfJ1h9A9VE6VZH0GU%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=726245059.1674243890&dcm_gid=1787192880.1674243890&dxver=4.0.0&shaid=32293&tdr=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&plh=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&term=value&shadditional=googletagmanager%3Dtrue&cb=167424389209052&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1674243892822
200 OK 1.4 kB URL HTTP/1.1 px.mountain.com/st?ga_tracking_id=UA-85748307-2&ga_client_id=726245059.1674243890&shpt=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-85748307-2%22%2C%22ga_client_id%22%3A%22726245059.1674243890%22%2C%22shpt%22%3A%22Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%22726245059.1674243890%22%2C%22dcm_gid%22%3A%221787192880.1674243890%22%2C%22mntnis%22%3A%22DvQF%2B4XUYoaEoX4bfJ1h9A9VE6VZH0GU%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=726245059.1674243890&dcm_gid=1787192880.1674243890&dxver=4.0.0&shaid=32293&tdr=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&plh=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&term=value&shadditional=googletagmanager%3Dtrue&cb=167424389209052&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1674243892822
IP
File type ASCII text, with very long lines (6033), with no line terminators
Hash ac725fd27a0236076aebbf530fc10d39
3c1d39e8f525a7d436b468dfb09c927bd4301924
a2992791ca0e1d17ed760e6c256a987945ea531fa915c794bff3e823fb49b98b
GET /st?ga_tracking_id=UA-85748307-2&ga_client_id=726245059.1674243890&shpt=Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-85748307-2%22%2C%22ga_client_id%22%3A%22726245059.1674243890%22%2C%22shpt%22%3A%22Sign%20In%20%2F%20Sign%20Up%20-%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%22726245059.1674243890%22%2C%22dcm_gid%22%3A%221787192880.1674243890%22%2C%22mntnis%22%3A%22DvQF%2B4XUYoaEoX4bfJ1h9A9VE6VZH0GU%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=726245059.1674243890&dcm_gid=1787192880.1674243890&dxver=4.0.0&shaid=32293&tdr=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Fsupporter_center.html%3Bjsessionid%3D00000000.app30124b%3FNONCE_TOKEN%3D83EFC651A328234A9C3A12FADF2DB1D4&plh=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&term=value&shadditional=googletagmanager%3Dtrue&cb=167424389209052&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1674243892822 HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Cookie: guid=e80f0e85-98fa-11ed-8a9d-ddca5f8d3ee6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Fri, 20 Jan 2023 19:44:53 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: tt=H4sIAAAAAAAAAKtWKlOyMtJRMjYysjSON7IwtlCyMjQzNzEyMbawNDY1MtdR8guKh8qaWxorWRkgi4DVG9QCAJxNhMxGAAAA;Domain=px.mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
rt="MzIyOTM6MTY3NDI0Mzg5Mw==";Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
guid=e80f0e85-98fa-11ed-8a9d-ddca5f8d3ee6;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 14
server: istio-envoy
connection: close
transfer-encoding: chunked
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72cb731e-e923-4be7-9dd2-8274ec9adc4f.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72cb731e-e923-4be7-9dd2-8274ec9adc4f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 865f3b7fce94742b22851118e29491a2
24d8d638eb39f3ff6a6a8f2337d77f3852a99dba
1b3bb3b03e787aa7b1f60f61c4adf6463a3586399d47c5ec5a2aec7b0aaa03ba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72cb731e-e923-4be7-9dd2-8274ec9adc4f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11675
x-amzn-requestid: 718b88d6-5f97-42b0-8e9d-1cd6e646690a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e7UihGrpIAMFehw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c79adc-03cdafe06c8871bb63cbbd6a;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 07:08:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ARzXtlV41pRcNijtEI0YObkrDQA63q4DZLg2w4yz5W1CsBsvQJ7zaQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Fri, 20 Jan 2023 07:16:50 GMT
age: 44883
etag: "24d8d638eb39f3ff6a6a8f2337d77f3852a99dba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=e80f0e85-98fa-11ed-8a9d-ddca5f8d3ee6&gdpr=&gdpr_consent=
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=e80f0e85-98fa-11ed-8a9d-ddca5f8d3ee6&gdpr=&gdpr_consent=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=e80f0e85-98fa-11ed-8a9d-ddca5f8d3ee6&gdpr=&gdpr_consent= HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:54 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/js/stc-site-alerts.js
200 OK 0 B URL HTTP/2 dx2eq2oh924g4.cloudfront.net/js/stc-site-alerts.js
IP
GET /js/stc-site-alerts.js HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 18 Jan 2023 20:04:25 GMT
last-modified: Wed, 18 Jan 2023 20:03:54 GMT
etag: W/"06252872c155a997e31697629d76f31a"
cache-control: max-age=604801
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0xoBN3q7B7RbOeOXt_1HWGrXbKCBC2Wj8Kv9W1_eG7oE3HYEIiE04Q==
age: 171621
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/js/stc-scripts.js?cache=2022-11-17
200 OK 0 B URL HTTP/2 dx2eq2oh924g4.cloudfront.net/js/stc-scripts.js?cache=2022-11-17
IP
GET /js/stc-scripts.js?cache=2022-11-17 HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 19 Jan 2023 00:23:23 GMT
last-modified: Wed, 18 Jan 2023 20:03:54 GMT
etag: W/"e123688d068f8ba2bca9ec4b5bcad3e5"
cache-control: max-age=604801
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: R5H5WsYagm9Vg1gwl0xQtahPQ5L4K5ifbCAJn_GNPkXtr1RWdajkpA==
age: 156083
X-Firefox-Spdy: h2
a.omappapi.com/app/js/webfont/1.5.18/webfont.js
200 OK 0 B URL HTTP/2 a.omappapi.com/app/js/webfont/1.5.18/webfont.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/webfont/1.5.18/webfont.js HTTP/1.1
Host: a.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:48 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"62ed37ae-40cb"
last-modified: Fri, 05 Aug 2022 15:30:54 GMT
cdn-storageserver: DE-168
cdn-requestpullsuccess: True
cdn-fileserver: 419
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 01/03/2023 16:50:33
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 1d8f20f9647b8e9f4592fb961f4e3175
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/27.ac2a9c16.min.js
200 OK 0 B URL HTTP/2 a.opmnstr.com/app/js/27.ac2a9c16.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/27.ac2a9c16.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:48 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"6399f96c-4f5"
last-modified: Wed, 14 Dec 2022 16:27:24 GMT
cdn-storageserver: DE-51
cdn-requestpullsuccess: True
cdn-fileserver: 325
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 01/03/2023 16:50:33
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: d54d8a3815a5cf02d11b6c5af90a4ed2
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/js/stc-member-center.js?cache=2022-12-15
200 OK 0 B URL HTTP/2 dx2eq2oh924g4.cloudfront.net/js/stc-member-center.js?cache=2022-12-15
IP
GET /js/stc-member-center.js?cache=2022-12-15 HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 19 Jan 2023 05:15:10 GMT
last-modified: Wed, 18 Jan 2023 20:03:54 GMT
etag: W/"7cd00d041f5686e81c6d10b397135f16"
cache-control: max-age=604801
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xbR2-UNjL1Hr5ddSvMZtPXZLCfzSUcLuEPJKlCu53KgsBSXc7SqobQ==
age: 138576
X-Firefox-Spdy: h2
track.securedvisit.com/js/sv.js
200 OK 0 B URL HTTP/2 track.securedvisit.com/js/sv.js
IP
GET /js/sv.js HTTP/1.1
Host: track.securedvisit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:49 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.22.0
vary: Accept-Encoding
etag: W/"273cf9801333aefc61a4f311b0692f6a"
last-modified: Fri, 20 Jan 2023 19:44:49 GMT
expires: Fri, 20 Jan 2023 19:44:49 GMT
pragma: no-cache
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, private
content-encoding: gzip
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/js/stc-analytics-data-layer.js?t=2022-12-14
200 OK 0 B URL HTTP/2 dx2eq2oh924g4.cloudfront.net/js/stc-analytics-data-layer.js?t=2022-12-14
IP
GET /js/stc-analytics-data-layer.js?t=2022-12-14 HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 18 Jan 2023 20:04:25 GMT
last-modified: Wed, 14 Dec 2022 19:07:36 GMT
etag: W/"28167e9768aa7c9046fe9c1f941af450"
cache-control: max-age=604801
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Vtigj2Q6P4SKCOK773ylkshVVH0TbWn8_JDpeb10RBb-Z0jbST7gcA==
age: 171621
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/images/icons/search.svg
200 OK 0 B URL HTTP/2 dx2eq2oh924g4.cloudfront.net/images/icons/search.svg
IP
GET /images/icons/search.svg HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dx2eq2oh924g4.cloudfront.net/css/stc-styles.css?t=2022-11-17
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 19 Jan 2023 00:23:24 GMT
last-modified: Wed, 18 Jan 2023 20:03:53 GMT
etag: W/"742bce95001d295e07e54ba4481eacb9"
cache-control: max-age=604801
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dfzlSrtjD7sUW8OjHw0Wv1AF9SJNjHyRJrV1CX2y8DGbsoKZPfEEqA==
age: 156083
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/5.c7ff1c6f.min.js
200 OK 0 B URL HTTP/2 a.opmnstr.com/app/js/5.c7ff1c6f.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/5.c7ff1c6f.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:48 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"6399f974-3efd"
last-modified: Wed, 14 Dec 2022 16:27:32 GMT
cdn-storageserver: DE-199
cdn-requestpullsuccess: True
cdn-fileserver: 420
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 01/10/2023 19:35:42
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: ed303a78646903d1ef48b0f543f5de17
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/9.4e528b17.min.js
200 OK 0 B URL HTTP/2 a.opmnstr.com/app/js/9.4e528b17.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/9.4e528b17.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:48 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"6399f96c-687"
last-modified: Wed, 14 Dec 2022 16:27:24 GMT
cdn-storageserver: DE-197
cdn-requestpullsuccess: True
cdn-fileserver: 420
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 01/10/2023 19:35:47
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 68c9c20ae42e0ba3d28abe7c88467c2e
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0185d0b6-619b-46fe-bc85-3bab1ac145c1&sessionId=0185d0b6-619b-45d6-ad7a-d020020f4e03&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&callback=_smtr.postprocess&r=1417224564&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=false&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4
200 OK 0 B URL HTTP/2 onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0185d0b6-619b-46fe-bc85-3bab1ac145c1&sessionId=0185d0b6-619b-45d6-ad7a-d020020f4e03&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&callback=_smtr.postprocess&r=1417224564&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=false&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4
IP
GET /api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0185d0b6-619b-46fe-bc85-3bab1ac145c1&sessionId=0185d0b6-619b-45d6-ad7a-d020020f4e03&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&callback=_smtr.postprocess&r=1417224564&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=false&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4 HTTP/1.1
Host: onsiteshq.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:52 GMT
content-type: text/plain; charset=utf-8
server: Kestrel
x-request-id: 0HMMBQC6VJ945:0000008A
X-Firefox-Spdy: h2
onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0185d0b6-619b-46fe-bc85-3bab1ac145c1&sessionId=0185d0b6-619b-45d6-ad7a-d020020f4e03&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&callback=_smtr.postprocess&r=1629519049&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=false&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4
200 OK 0 B URL HTTP/2 onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0185d0b6-619b-46fe-bc85-3bab1ac145c1&sessionId=0185d0b6-619b-45d6-ad7a-d020020f4e03&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&callback=_smtr.postprocess&r=1629519049&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=false&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4
IP
GET /api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0185d0b6-619b-46fe-bc85-3bab1ac145c1&sessionId=0185d0b6-619b-45d6-ad7a-d020020f4e03&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&callback=_smtr.postprocess&r=1629519049&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=false&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4 HTTP/1.1
Host: onsiteshq.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:52 GMT
content-type: text/plain; charset=utf-8
server: Kestrel
x-request-id: 0HMMBQC6VJT74:000004EF
X-Firefox-Spdy: h2
insight.adsrvr.org/track/evnt/?adv=0ugbyxx&ct=0:l703v0i&fmt=3&td1=185d0b65d4c-tags4-aa41a30a1f1d7
200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/evnt/?adv=0ugbyxx&ct=0:l703v0i&fmt=3&td1=185d0b65d4c-tags4-aa41a30a1f1d7
IP
GET /track/evnt/?adv=0ugbyxx&ct=0:l703v0i&fmt=3&td1=185d0b65d4c-tags4-aa41a30a1f1d7 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:52 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
insight.adsrvr.org/track/conv/?adv=0ugbyxx&ct=0:v28zupp&fmt=3&orderid=&vf=&v=&td1=185d0b65d4c-tags4-aa41a30a1f1d7
200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/conv/?adv=0ugbyxx&ct=0:v28zupp&fmt=3&orderid=&vf=&v=&td1=185d0b65d4c-tags4-aa41a30a1f1d7
IP
GET /track/conv/?adv=0ugbyxx&ct=0:v28zupp&fmt=3&orderid=&vf=&v=&td1=185d0b65d4c-tags4-aa41a30a1f1d7 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:52 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
www.dgtrx.com/scripts/sdk/everflow.js
200 OK 0 B URL HTTP/2 www.dgtrx.com/scripts/sdk/everflow.js
IP
GET /scripts/sdk/everflow.js HTTP/1.1
Host: www.dgtrx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jan 2023 19:44:50 GMT
content-type: text/javascript
cache-control: max-age=14400
vary: Origin
x-eflow-request-id: f063f596-ac48-40df-8738-b920240a5c51
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.omappapi.com/v2/embed/71376?d=support.savethechildren.org
200 OK 0 B URL HTTP/2 api.omappapi.com/v2/embed/71376?d=support.savethechildren.org
IP
GET /v2/embed/71376?d=support.savethechildren.org HTTP/1.1
Host: api.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Fri, 20 Jan 2023 19:44:53 GMT
access-control-allow-origin: *
access-control-allow-headers: X-CSRF-Token
expires: Fri, 20 Jan 2023 19:25:24 GMT
cache-control: public, max-age=30, stale-while-revalidate=1800
last-modified: Thu, 19 Aug 2021 16:16:48 GMT
etag: W/"603edebe0227f08d179d982c63e36159"
x-optinmonster-account: 80223
access-control-expose-headers: X-OptinMonster-Account, X-User-Agent
x-user-agent: standard--
x-cache-config: 0 0
vary: Accept-Encoding, User-Agent
x-cache-status: HIT
content-encoding: gzip
server: Pagely Gateway/1.5.1
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0B6Jt_T_aVA_eJ72L1BQEuKiVfnjwAkWhqbstDeLTGob6kw8afTLLQ==
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/images/icons/snapchat.svg
200 OK 0 B URL HTTP/2 dx2eq2oh924g4.cloudfront.net/images/icons/snapchat.svg
IP
GET /images/icons/snapchat.svg HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 18 Jan 2023 20:04:27 GMT
last-modified: Wed, 18 Jan 2023 20:03:53 GMT
etag: W/"bfc12b886350f98f48b09f6dfb8f8144"
cache-control: max-age=604801
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nqWxBVAYDVs3eNO-rC86YgZCrR3Y_eP2YxIXDFqd7eECDwHkFvQBaA==
age: 171622
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/api.min.js
200 OK 0 B URL HTTP/2 a.opmnstr.com/app/js/api.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/api.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:48 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"240964319001f2c34f9d5186e5c74374"
last-modified: Wed, 11 Jan 2023 15:06:38 GMT
perma-cache: MISS
x-amz-id-2: EJ3Coxht+rT1uqV1xojPwudScATKuRftQIhTT/AxCT7LErUz8Owa6tqTJfCiFPQeH06hKmMETxQ=
x-amz-request-id: Q3TRAQS3EGX9HXAY
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 01/11/2023 15:06:46
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 6201817eb96945c99de140b97eeca4c0
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/29.2a9adb6e.min.js
200 OK 0 B URL HTTP/2 a.opmnstr.com/app/js/29.2a9adb6e.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/29.2a9adb6e.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:48 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"6399f96f-adf"
last-modified: Wed, 14 Dec 2022 16:27:27 GMT
cdn-storageserver: DE-169
cdn-requestpullsuccess: True
cdn-fileserver: 420
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 01/03/2023 16:50:33
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: e1972447a0fce936a6b7110746d9709b
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0185d0b6-619b-46fe-bc85-3bab1ac145c1&sessionId=0185d0b6-619b-45d6-ad7a-d020020f4e03&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&callback=_smtr.postprocess&r=813624897&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=false&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4
200 OK 0 B URL HTTP/2 onsiteshq.smarterhq.io/api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0185d0b6-619b-46fe-bc85-3bab1ac145c1&sessionId=0185d0b6-619b-45d6-ad7a-d020020f4e03&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&callback=_smtr.postprocess&r=813624897&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=false&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4
IP
GET /api/v3/onsite/?instanceId=fyl6dahrce-1092&loiId=0185d0b6-619b-46fe-bc85-3bab1ac145c1&sessionId=0185d0b6-619b-45d6-ad7a-d020020f4e03&url=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4&callback=_smtr.postprocess&r=813624897&isNewVisitor=true&accountId=228&isEmailProvided=false&espSubIdProvided=false&ref=https%3A%2F%2Fsupport.savethechildren.org%2Fsite%2FSPageNavigator%2Flogin.html%3Fnexturl%3Dhttps%253A%252F%252Fsupport.savethechildren.org%252Fsite%252FSPageNavigator%252Fsupporter_center.html%253Bjsessionid%253D00000000.app30124b%253FNONCE_TOKEN%253D83EFC651A328234A9C3A12FADF2DB1D4 HTTP/1.1
Host: onsiteshq.smarterhq.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:52 GMT
content-type: text/plain; charset=utf-8
server: Kestrel
x-request-id: 0HMMBQCC8KDPI:00000146
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/js/stc-login.js?cache=2022-09-27
200 OK 0 B URL HTTP/2 dx2eq2oh924g4.cloudfront.net/js/stc-login.js?cache=2022-09-27
IP
GET /js/stc-login.js?cache=2022-09-27 HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 18 Jan 2023 21:32:26 GMT
last-modified: Wed, 18 Jan 2023 20:03:54 GMT
etag: W/"2133bc078abc185a54de62989099ab0b"
cache-control: max-age=604801
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7IElt5H8vzhG0IOf7x7unmHW_VO3JJZ2nHSixkhuB-xQK8alxwKqoQ==
age: 166342
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/images/logos/stc-logo.svg
200 OK 0 B URL HTTP/2 dx2eq2oh924g4.cloudfront.net/images/logos/stc-logo.svg
IP
GET /images/logos/stc-logo.svg HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Wed, 18 Jan 2023 20:04:25 GMT
last-modified: Wed, 18 Jan 2023 20:03:53 GMT
etag: W/"6c75d80a387556bec1fafca484ed608e"
cache-control: max-age=604801
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AXhXNKa2axBmleeZS6X2T94aWwZCEMn8GptD5Ad7DfH2OC4hTCLL5A==
age: 171624
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/34.01aeaad3.min.js
200 OK 0 B URL HTTP/2 a.opmnstr.com/app/js/34.01aeaad3.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/34.01aeaad3.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:48 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"6399f971-203b"
last-modified: Wed, 14 Dec 2022 16:27:29 GMT
cdn-storageserver: DE-167
cdn-requestpullsuccess: True
cdn-fileserver: 336
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 01/03/2023 16:50:33
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: a82efde94b53664e03512b3f5f571a85
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
a.opmnstr.com/app/js/10.df2f61d8.min.js
200 OK 0 B URL HTTP/2 a.opmnstr.com/app/js/10.df2f61d8.min.js
IP
ASN #34989 ServeTheWorld AS
GET /app/js/10.df2f61d8.min.js HTTP/1.1
Host: a.opmnstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:48 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"e3638f4a747f5f94dbafe4587bc1d751"
last-modified: Wed, 11 Jan 2023 15:06:38 GMT
perma-cache: MISS
x-amz-id-2: 6Z7DmTXs0dCAFXL83apZ92jkL77jD+Zt4RXWaq1KeRcz/D6sUAa9Dpuhu2EHioPTbVCyP52RmGk=
x-amz-request-id: GBA2S833MYB42M7K
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 01/11/2023 15:06:48
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 38634089a8ae76f08ced3092488429bf
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/4092132/domain/support.savethechildren.org/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/4092132/domain/support.savethechildren.org/token
IP
GET /partner/4092132/domain/support.savethechildren.org/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://support.savethechildren.org
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Fri, 20 Jan 2023 19:06:13 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bECIr1wDO5E6-98oj4JJMbQh36ikZQvfBWaERaRaDBqQZCZ_q2rJqw==
age: 2318
X-Firefox-Spdy: h2
insight.adsrvr.org/track/evnt/?adv=tl1i3bn&ct=0:kr1qq9a&fmt=3
200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/evnt/?adv=tl1i3bn&ct=0:kr1qq9a&fmt=3
IP
GET /track/evnt/?adv=tl1i3bn&ct=0:kr1qq9a&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://support.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 20 Jan 2023 19:44:54 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
74.123.154.123
194.242.11.186
93.184.220.29
13.37.25.97
104.17.24.14
104.84.152.64
52.213.193.212
151.101.244.157