click.alerts.savethechildren.org/?qs=1464fd29878f4d268ade0766a6de753d80774d8c6fa8baa1c2fc00d1f53bf56aa4b400afd26d2315dd3d61260b73b7f1f2267eb15b152159805a6f669e90bf66
128.245.145.225302 Found 298 B URL User Request GET HTTP/1.1 click.alerts.savethechildren.org/?qs=1464fd29878f4d268ade0766a6de753d80774d8c6fa8baa1c2fc00d1f53bf56aa4b400afd26d2315dd3d61260b73b7f1f2267eb15b152159805a6f669e90bf66
IP 128.245.145.225:443
Certificate IssuerDigiCert Inc
Subjectclick.alerts.savethechildren.org
Fingerprint1F:9F:A0:17:45:56:0B:57:32:18:80:B3:53:72:62:45:D6:ED:0D:AB
ValiditySun, 14 May 2023 00:00:00 GMT - Thu, 13 Jun 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash b2d5d4c8a91dbe8e6cc3975435f46617
502a7331188c6d35db96caf46d726aed740818ca
c54bbb04163e8beafb55052e9b00f2d9ee3bc35577bfc5e1b5b0698ca3b1d9f7
GET /?qs=1464fd29878f4d268ade0766a6de753d80774d8c6fa8baa1c2fc00d1f53bf56aa4b400afd26d2315dd3d61260b73b7f1f2267eb15b152159805a6f669e90bf66 HTTP/1.1
Host: click.alerts.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Date: Tue, 05 Dec 2023 13:52:23 GMT
Connection: close
Content-Length: 298
cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
128.245.132.77200 OK 3.4 kB URL User Request GET HTTP/1.1 cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
IP 128.245.132.77:443
Certificate IssuerDigiCert Inc
Subjectcloud.alerts.savethechildren.org
FingerprintE2:0D:37:2C:4C:32:C7:0B:82:2C:87:A4:4F:8E:B0:CE:E2:00:C1:19
ValidityMon, 04 Sep 2023 00:00:00 GMT - Fri, 04 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 146ff95ffe1841698312a0cfa6898f10
5c848dbc9f0e10dbef16b58017cdcf322fef8ebe
053945772c6ddc8a1bd8be18a67818b8b1f9efc912669aa24409ccc8755b890c
GET /preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291|| HTTP/1.1
Host: cloud.alerts.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Date: Tue, 05 Dec 2023 13:52:24 GMT
Connection: close
Content-Length: 3353
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/launch-d47d2de11878.min.js
2.18.172.233200 OK 105 kB URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/launch-d47d2de11878.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (32761)
Size 105 kB (105137 bytes)
Hash 2a5d35e77c33d158ed1269fac6dbbb04
1b5b38bf19d9499f8487b55ec76f18527a63a633
df884044c86808bf30916cf519c59bfb9b16174de4097188053d338ead81952f
GET /a9de570d9caa/b01a1f4bb0c4/launch-d47d2de11878.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "2a5d35e77c33d158ed1269fac6dbbb04:1699559964.600648"
last-modified: Thu, 09 Nov 2023 19:59:24 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:25 GMT
date: Tue, 05 Dec 2023 13:52:25 GMT
content-length: 105137
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/stc-logo.svg
104.18.5.221200 OK 4.8 kB URL GET HTTP/2 www.savethechildren.org/etc/clientlibs/us/clientlib-site/images/icons/stc-logo.svg
IP 104.18.5.221:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerGoogle Trust Services LLC
Subjectwww.savethechildren.org
FingerprintF4:CA:31:1C:D6:50:0A:73:8D:33:4A:D7:A0:7B:F4:1F:E7:79:56:89
ValiditySat, 14 Oct 2023 21:57:20 GMT - Fri, 12 Jan 2024 22:55:19 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (1449), with CRLF line terminators
Hash 109d5b5308c94c9676222830273aa4d1
b6cb7bfbd379e9a0212375325244af0d087cd21b
c5a36be2e59121b1b9d48afb6bc5b9492f9e7e6f214943f887607dca45ca0324
GET /etc/clientlibs/us/clientlib-site/images/icons/stc-logo.svg HTTP/1.1
Host: www.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 13:52:25 GMT
content-type: image/svg+xml
content-length: 4812
cache-control: max-age=604800, no-cache="set-cookie"
content-encoding: gzip
content-security-policy: frame-ancestors 'self' stc.marketing.adobe.com https://cloud.alerts.savethechildren.org https://savethechildren.us-7.evergage.com
etag: "3130-609c2069509c0-gzip"
expires: Thu, 07 Dec 2023 05:00:38 GMT
last-modified: Fri, 10 Nov 2023 01:13:19 GMT
strict-transport-security: max-age=63072000;
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nq4qRCTGaTlv0ybi62yQqDlS9jVvD99ocTe7_gL2ohA2h84rkz3ofQ==
cf-cache-status: MISS
accept-ranges: bytes
set-cookie: __cf_bm=WIRcTUJ8HRwLTNths4k_UHXb1F8r285jQlScE3dvwZE-1701784345-0-AUWE00aFZzwu8V0/skqdqWcnyPesgViVrudYJ2KhhnGg60A2rQzv1gC2AyvjxkQIFmX5LKzMTovBljDHLNpumBY=; path=/; expires=Tue, 05-Dec-23 14:22:25 GMT; domain=.savethechildren.org; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 830cc4ff5e0bb529-OSL
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EPef068a8d6dd34a43866d9a80cc98baab/AppMeasurement.min.js
2.18.172.233200 OK 13 kB URL GET HTTP/2 assets.adobedtm.com/extensions/EPef068a8d6dd34a43866d9a80cc98baab/AppMeasurement.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (32730)
Hash 208eb534ea01036a4fca64e6715ccf3f
90c85649634ff5a627023668b2e10fa01cf30315
6c789117a5f69b39293256e6899288c8317358589e20c6d08278223f948cd2cf
GET /extensions/EPef068a8d6dd34a43866d9a80cc98baab/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "208eb534ea01036a4fca64e6715ccf3f:1694496806.451282"
last-modified: Tue, 12 Sep 2023 05:33:26 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 12687
expires: Tue, 05 Dec 2023 14:52:25 GMT
date: Tue, 05 Dec 2023 13:52:25 GMT
cache-control: no-cache
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EPef068a8d6dd34a43866d9a80cc98baab/AppMeasurement_Module_ActivityMap.min.js
2.18.172.233200 OK 1.6 kB URL GET HTTP/2 assets.adobedtm.com/extensions/EPef068a8d6dd34a43866d9a80cc98baab/AppMeasurement_Module_ActivityMap.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (3138)
Hash f1e098a5dd836ea5fc9726c429c8d71d
9b9371eb2d68b1e71063cf9f848baa07347511ca
bc0bfc50d3ff4175132b7da1ef0adf7761ded5cb2782e55edb1948da3480abd8
GET /extensions/EPef068a8d6dd34a43866d9a80cc98baab/AppMeasurement_Module_ActivityMap.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "f1e098a5dd836ea5fc9726c429c8d71d:1694496806.740373"
last-modified: Tue, 12 Sep 2023 05:33:26 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1597
expires: Tue, 05 Dec 2023 14:52:25 GMT
date: Tue, 05 Dec 2023 13:52:25 GMT
cache-control: no-cache
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn.decibelinsight.net/i/13874/253647/di.js
54.230.111.68200 OK 81 kB URL GET HTTP/2 cdn.decibelinsight.net/i/13874/253647/di.js
IP 54.230.111.68:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerAmazon
Subject*.decibelinsight.net
Fingerprint78:AF:08:CA:CB:95:CB:AE:88:43:3F:16:62:E6:EC:69:57:CB:0D:FD
ValidityTue, 28 Feb 2023 00:00:00 GMT - Mon, 12 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (32040)
Hash 0f358debd687b4917e4c4d15daeaa4a2
acf56a46e231748bbb07df98787ab69cd33f7171
2bef48e25870d0be0f273d35ad8a4f24c670be258da1b165c772ca139331f62e
GET /i/13874/253647/di.js HTTP/1.1
Host: cdn.decibelinsight.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
server: nginx
date: Tue, 05 Dec 2023 13:52:25 GMT
cache-control: private, max-age=5400
etag: W/000079838-18C3A405441
timing-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
content-encoding: gzip
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
alt-svc: h3=":443"; ma=86400
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: u4FK582BniEukzVoAYFcobAeHKRUoEPOMHWShz03k1T1zx5OrRW7XA==
X-Firefox-Spdy: h2
fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs18NvsUZiZQ.woff2
216.58.211.3200 OK 13 kB URL GET HTTP/2 fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs18NvsUZiZQ.woff2
IP 216.58.211.3:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 12808, version 1.0\012- data
Hash 19cedc9fa126ec320571c1cfe9f06955
647422a8abb7a90122b8170bfc3bba28496b6d1c
201dc695ba7ad24f5b671ffbb0074bcf1880605ab9bbf91a380465b6fe760988
GET /s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs18NvsUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cloud.alerts.savethechildren.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12808
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 00:33:24 GMT
expires: Fri, 29 Nov 2024 00:33:24 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 15 Aug 2023 18:38:40 GMT
content-type: font/woff2
age: 479941
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.evgnet.com/beacon/savethechildren/production/scripts/evergage.min.js
151.101.128.114200 OK 50 kB URL GET HTTP/2 cdn.evgnet.com/beacon/savethechildren/production/scripts/evergage.min.js
IP 151.101.128.114:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectcdn.evergage.com
FingerprintEE:3F:A8:CD:D0:BC:7A:41:2D:D6:AD:84:EE:B6:0A:8B:33:32:49:30
ValidityMon, 06 Mar 2023 00:00:00 GMT - Mon, 04 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (584)
Hash 233536f87d90fbcc292c7a403be7d478
564e2619a8785bd4a2583d87731d85592f9011a1
1acb85ca4dce9fc31b0efd3cad0a8364404cfea7d5f8925a83c435fa95ba8fc5
GET /beacon/savethechildren/production/scripts/evergage.min.js HTTP/1.1
Host: cdn.evgnet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: Mbj1iASMycVQCE8y1ahoEIQBf3ye68Pxp/qdS0lsmzQ68kws7YXHojgUu/2t6mRoK6SbtTaHMLA=
x-amz-request-id: AN9Q387F94NMZXFF
x-amz-replication-status: COMPLETED
last-modified: Thu, 19 Oct 2023 20:17:49 GMT
etag: "1f322c3160985d328c7e6fa4906bb71a"
x-amz-server-side-encryption: AES256
cache-control: max-age=120
content-encoding: gzip
x-amz-meta-evergage-beacon-ver: 16
x-amz-meta-evergage-sum: 564e2619a8785bd4a2583d87731d85592f9011a1
x-amz-version-id: NoSdik6oiyZX_CpfkPH46x7fAdb443j6
content-type: application/javascript; charset=utf-8
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 05 Dec 2023 13:52:26 GMT
age: 62
x-served-by: cache-iad-kiad7000028-IAD, cache-bma1630-BMA
x-cache: HIT, HIT
x-cache-hits: 874858, 1
x-timer: S1701784346.018622,VS0,VE1
vary: Accept-Encoding
timing-allow-origin: *
content-length: 49985
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
216.58.211.3200 OK 24 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
IP 216.58.211.3:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cloud.alerts.savethechildren.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:00:51 GMT
expires: Fri, 29 Nov 2024 04:00:51 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
age: 467495
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
image.alerts.savethechildren.org/lib/fe39117371640479701570/m/1/dc3f90c7-977f-47b1-aa4f-6da02912d306.jpg
23.36.79.24200 OK 132 kB URL GET HTTP/1.1 image.alerts.savethechildren.org/lib/fe39117371640479701570/m/1/dc3f90c7-977f-47b1-aa4f-6da02912d306.jpg
IP 23.36.79.24:443
ASN #20940 Akamai International B.V.
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectsan-20-s12.tlsprovisioning.exacttarget.com
Fingerprint4A:97:2C:AE:6E:84:8A:5C:49:7C:0B:85:39:7C:E9:B1:B8:8F:A2:4F
ValidityMon, 24 Apr 2023 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, description=Summary , manufacturer=Canon, model=Canon EOS 450D, orientation=upper-left, xresolution=5310, yresolution=5318, resolutionunit=2, software=Photos 1.5, datetime=2016:09:15 19:54:59, copyright=Sacha Myers/Save the Children], baseline, precision 8, 1200x800, components 3\012- data
Size 132 kB (131838 bytes)
Hash db21acbd494f40d464346bb58caebfed
41536b5faa251ba559a41d513a836470eb355657
23c859119c753d940d35cab688e80ac1dfcf296a1fc931ebcb0db347554582f2
GET /lib/fe39117371640479701570/m/1/dc3f90c7-977f-47b1-aa4f-6da02912d306.jpg HTTP/1.1
Host: image.alerts.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/jpeg
ETag: "db21acbd494f40d464346bb58caebfed:1666020981.385291"
Last-Modified: Mon, 17 Oct 2022 15:36:21 GMT
Server: AkamaiNetStorage
Content-Length: 131838
Cache-Control: max-age=600, s-maxage=600, must-revalidate
Date: Tue, 05 Dec 2023 13:52:26 GMT
Connection: keep-alive
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCcec04a55f0b5424f941b1e0a7d2e9c97-source.min.js
2.18.172.233200 OK 710 B URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCcec04a55f0b5424f941b1e0a7d2e9c97-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (1501)
Hash de8d47dcd8dd151f15c6b940475380f7
76a4ebb26f0a2d961f5d4dde646c552fcc3c0297
26aeced2c0c5c2494de7ecf6f34dced947c0f0a09ad7dbc95d3e7259d9e83f59
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCcec04a55f0b5424f941b1e0a7d2e9c97-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:26 GMT
date: Tue, 05 Dec 2023 13:52:26 GMT
content-length: 710
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
smetrics.savethechildren.org/id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&mid=86225313732895855649207816874424258264&ts=1701784352268
104.18.4.221200 OK 48 B URL GET HTTP/2 smetrics.savethechildren.org/id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&mid=86225313732895855649207816874424258264&ts=1701784352268
IP 104.18.4.221:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerGoogle Trust Services LLC
Subjectsmetrics.savethechildren.org
Fingerprint91:EF:B5:E6:FF:8D:EC:60:2E:DB:24:74:48:33:47:1D:6C:5D:51:E3
ValiditySat, 14 Oct 2023 21:22:25 GMT - Fri, 12 Jan 2024 22:21:21 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash bed9828c7b6fdc73f189c832801eec5b
a7cc664810d22ca16d07f1ec35db328d01d0ba7c
b6cd0f5bd107e9a51f8f48cfad9b725583fd481e51fb31f60d455a68c4b73d34
GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&mid=86225313732895855649207816874424258264&ts=1701784352268 HTTP/1.1
Host: smetrics.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://cloud.alerts.savethechildren.org
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Cookie: __cf_bm=WIRcTUJ8HRwLTNths4k_UHXb1F8r285jQlScE3dvwZE-1701784345-0-AUWE00aFZzwu8V0/skqdqWcnyPesgViVrudYJ2KhhnGg60A2rQzv1gC2AyvjxkQIFmX5LKzMTovBljDHLNpumBY=; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=179643557%7CMCIDTS%7C19697%7CMCMID%7C86225313732895855649207816874424258264%7CvVersion%7C5.5.0; mbox=session#df1e8a49d7b04a798fc8919fc15b27a1#1701786212; at_check=true; stc-analytics-source=Email|Email|SFMC|Full_Circle|New_Leads|12/04/2023; _sfid_58d2={%22anonymousId%22:%228916f6d7f17ad8e8%22%2C%22consents%22:[]}; _evga_c797={%22uuid%22:%228916f6d7f17ad8e8%22}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 13:52:26 GMT
content-type: application/x-javascript;charset=utf-8
content-length: 48
access-control-allow-origin: https://cloud.alerts.savethechildren.org
access-control-allow-credentials: true
p3p: CP="This is not a P3P policy"
set-cookie: s_ecid=MCMID%7C86225313732895855649207816874424258264; Path=/; Domain=savethechildren.org; Max-Age=63072000; Expires=Thu, 04 Dec 2025 13:52:52 GMT; SameSite=Lax;
vary: Origin
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 830cc5051cb556bf-OSL
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCe1e1b434f35b4ae6b2e3062f395d32e0-source.min.js
2.18.172.233200 OK 1.0 kB URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCe1e1b434f35b4ae6b2e3062f395d32e0-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (1950)
Hash fe70c8daa3726b3f59ff2f9d248c6106
c6c3b962b82c148328e62a64684b1b0053831342
9355e5567b9b1a7561cc029d870bff1d2bbb62b3be783cd771b8e3abb5a480a3
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCe1e1b434f35b4ae6b2e3062f395d32e0-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:26 GMT
date: Tue, 05 Dec 2023 13:52:26 GMT
content-length: 1020
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC9cf82a7bcb94435a84654cf509932b30-source.min.js
2.18.172.233200 OK 1.1 kB URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC9cf82a7bcb94435a84654cf509932b30-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (2504)
Hash cfb292d055e392ca071e96b2167e8323
46c02f83a84c00ded77e8a19f2e4ea25c4154a1c
a84b430ddaa0055b310a41a6db0035ff5661bdf55457a0e01f892407c01bc6db
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC9cf82a7bcb94435a84654cf509932b30-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:26 GMT
date: Tue, 05 Dec 2023 13:52:26 GMT
content-length: 1081
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCa936c8bc0c884f37b4bee03803944967-source.min.js
2.18.172.233200 OK 812 B URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCa936c8bc0c884f37b4bee03803944967-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (2187)
Hash 8fa43507053b40fe0466dd50ed086979
7816101c18982af04feb42a728349450075d295a
a9d3fa9472296b9f06d8dcb199a1998ca96d94cfb3ebea503239122e99bd2e76
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCa936c8bc0c884f37b4bee03803944967-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:26 GMT
date: Tue, 05 Dec 2023 13:52:26 GMT
content-length: 812
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC3ae644eba48547f8b14b54e6417b9e7b-source.min.js
2.18.172.233200 OK 918 B URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC3ae644eba48547f8b14b54e6417b9e7b-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (1603)
Hash 96e27a4426aab615267c10ff2e3093a0
e60e91fb7925c840d01eabb10c8de407e4c056ac
538f30a9103916352c29f6c7d8df08ef6168491c5e1ebaa19efab48655ac77ec
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC3ae644eba48547f8b14b54e6417b9e7b-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:26 GMT
date: Tue, 05 Dec 2023 13:52:26 GMT
content-length: 918
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC4b86a5f57ebd489bb42aa833d1001bc8-source.min.js
2.18.172.233200 OK 633 B URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC4b86a5f57ebd489bb42aa833d1001bc8-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (1177)
Hash 5934745232fd9cfe579a85300f3e7f3d
3a4ad5b81f86892a11521f87e67d0f465170a995
66464c95036b7b2837c7387d621b0b0a76430416e6d1b191e932386b5e5c7ce9
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC4b86a5f57ebd489bb42aa833d1001bc8-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:26 GMT
date: Tue, 05 Dec 2023 13:52:26 GMT
content-length: 633
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCd5bea5cb86364265b586363d1ecd4cc9-source.min.js
2.18.172.233200 OK 602 B URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCd5bea5cb86364265b586363d1ecd4cc9-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (1190)
Hash ff1a8d79cade5e597ef8c22ed0a000da
ea9da230045b9ad53ba4d2561e59676ebcf8963b
1b7d48f4bbf488d01253924405cab0b2429d2246780bd2dd1ed4e496bfcb3224
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCd5bea5cb86364265b586363d1ecd4cc9-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:26 GMT
date: Tue, 05 Dec 2023 13:52:26 GMT
content-length: 602
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCdf97c21987224be8af27283b54dab3fa-source.min.js
2.18.172.233200 OK 781 B URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCdf97c21987224be8af27283b54dab3fa-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (1403)
Hash 59cd88f609133907fef99f81a9c3d226
b9f8bb42dba5c449e7f34be15f41449245a74bc5
a953e8d3d765ce0697c383e11351eca6678d008ce09c217553724431dc42729b
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCdf97c21987224be8af27283b54dab3fa-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:26 GMT
date: Tue, 05 Dec 2023 13:52:26 GMT
content-length: 781
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC9b9cd218371a443eac992e2f3091d149-source.min.js
2.18.172.233200 OK 1.4 kB URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC9b9cd218371a443eac992e2f3091d149-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (2437)
Hash 89ea11f3fbc55e9ee0e9c35c14efaaba
8be56410e364197d242786b59957896a53d68acb
c9f57a23b2d2eb2bb809010bc1a3cd766f7c91a1f6135d52d5eab7677421deef
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC9b9cd218371a443eac992e2f3091d149-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:26 GMT
date: Tue, 05 Dec 2023 13:52:26 GMT
content-length: 1376
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC628a438f987b4b52a268147c54cb3c55-source.min.js
2.18.172.233200 OK 1.2 kB URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC628a438f987b4b52a268147c54cb3c55-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (2720)
Hash 7562f0090e0db5ea02e875850039d50f
1a6db483bd386ffcaa9b4d5342b83e19248eb7eb
e702618f3641f5e75caae7a991fccf3769874a50a8884795efabd5de34e014f0
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC628a438f987b4b52a268147c54cb3c55-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:26 GMT
date: Tue, 05 Dec 2023 13:52:26 GMT
content-length: 1195
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC645c252e8442484da121878a5b8b0391-source.min.js
2.18.172.233200 OK 481 B URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC645c252e8442484da121878a5b8b0391-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (766)
Hash a5c6c1776d98aac864fcda0979938779
340a6bd7c5dca66370a0d1a8926e178491f82466
22eb9e0e57333b094c9f48a7c63bbf13b704b8d406240eca0579d269cd1a5042
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC645c252e8442484da121878a5b8b0391-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:26 GMT
date: Tue, 05 Dec 2023 13:52:26 GMT
content-length: 481
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCa60d1ea7407b4de5a2a3ab3b5233ede3-source.min.js
2.18.172.233200 OK 1.1 kB URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCa60d1ea7407b4de5a2a3ab3b5233ede3-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (2296)
Hash 5819ad66234648d15d0428ba84072050
de68836c800c6f6cc032fa73e846d398981e2bb6
49266e0333b5dc45aca0b55030384e73e2ce24b047e220099a073753fac5e323
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCa60d1ea7407b4de5a2a3ab3b5233ede3-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:26 GMT
date: Tue, 05 Dec 2023 13:52:26 GMT
content-length: 1056
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
collection.decibelinsight.net/i/13874/253647/c.json
130.61.120.2200 OK 9.7 kB URL GET HTTP/2 collection.decibelinsight.net/i/13874/253647/c.json
IP 130.61.120.2:443
ASN #31898 ORACLE-BMC-31898
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subject*.decibelinsight.net
Fingerprint38:6E:C6:F4:5C:F9:C0:0A:23:3D:77:98:7E:34:BD:CD:18:BC:CC:A6
ValidityTue, 28 Nov 2023 00:00:00 GMT - Wed, 27 Nov 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (27640)
Hash d621a1b0b46fa96d09be9f7bb6aff1e7
c21b57e9d621f2c02750f208212bb0865b9d5580
66ab8aa39e20573e4077a3c5afa9ee118125e71d44a038e7bcba3710dad4f80e
GET /i/13874/253647/c.json HTTP/1.1
Host: collection.decibelinsight.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cloud.alerts.savethechildren.org
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 13:52:26 GMT
content-type: application/json
cache-control: private, max-age=1800
etag: W/000130028-18C3A405FA2
timing-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, X-HTTP-Method-Override
access-control-allow-origin: https://cloud.alerts.savethechildren.org
access-control-allow-credentials: true
vary: Origin
strict-transport-security: max-age=31536000
alt-svc: h3=":443"; ma=2592000, h2=":443"; ma=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCd283f12b004f41f58788fb8429c5c7e1-source.min.js
2.18.172.233200 OK 1.4 kB URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCd283f12b004f41f58788fb8429c5c7e1-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (3039)
Hash a11525e51788cc6430504e9d55431a1b
89add864313f174c3baa73d39f0b9420d6fa173b
02d9c4262c2ca583d80fdd64968d83c782c2aaeb3d3ebf9f2d2b82db86d82393
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RCd283f12b004f41f58788fb8429c5c7e1-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:26 GMT
date: Tue, 05 Dec 2023 13:52:26 GMT
content-length: 1365
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC8a763fee6e174d30aaaa09f276fb9b84-source.min.js
2.18.172.233200 OK 837 B URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC8a763fee6e174d30aaaa09f276fb9b84-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (1860)
Hash d5b8ae43ca7e1ee69a0ed6524dfa96b4
ea50419118b40c7877ea7a0676f17d8ef495c52d
2106d68708f0ed5fd0224f9b0905a262f7f3bb721d5e818470436208ae21fb6f
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC8a763fee6e174d30aaaa09f276fb9b84-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:26 GMT
date: Tue, 05 Dec 2023 13:52:26 GMT
content-length: 837
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
www.redditstatic.com/ads/pixel.js
151.101.193.140200 OK 7.4 kB URL GET HTTP/2 www.redditstatic.com/ads/pixel.js
IP 151.101.193.140:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectwww.redditstatic.com
Fingerprint5B:10:93:15:D0:06:B8:27:DD:C8:15:7C:8A:49:4B:AD:06:D3:8E:15
ValidityFri, 25 Aug 2023 00:00:00 GMT - Wed, 21 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (23776)
Hash 78b6c68984a6ce5b3fcac1c6a9cad00c
02e1d366a17506cea8adfe5a15949aca89719a02
e803e774c7b59fe74f71ed93acaa875cf9a99947ff8ed7615cd0c93c1667250f
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Thu, 15 Jun 2023 20:49:59 GMT
etag: "4a205643a240cb95fa82289d62b5af7e"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 05 Dec 2023 13:52:26 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7409
X-Firefox-Spdy: h2
pt.ispot.tv/v2/TC-4134-1.gif?app=web&type=visit
151.101.194.132200 OK 43 B URL GET HTTP/2 pt.ispot.tv/v2/TC-4134-1.gif?app=web&type=visit
IP 151.101.194.132:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerLet's Encrypt
Subject*.ispot.tv
Fingerprint99:E3:78:C5:40:08:FF:0B:4B:6B:A5:29:BC:F4:0A:D6:3F:FC:60:F3
ValidityFri, 10 Nov 2023 12:11:30 GMT - Thu, 08 Feb 2024 12:11:29 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 29ba9031be4bed78916face2e9c5f7fc
5bb4f538d932f769d6872470147221e18b9265ba
0227e0e4dea130eb6f3163aa3ab03720dce83a0e219c282189b03bc5b8a727e3
GET /v2/TC-4134-1.gif?app=web&type=visit HTTP/1.1
Host: pt.ispot.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
accept-ranges: bytes
date: Tue, 05 Dec 2023 13:52:26 GMT
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=DC-11620455
142.250.74.168200 OK 68 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=DC-11620455
IP 142.250.74.168:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3026)
Hash e8cb68b59e62a431b06bbe23f77c48ab
1d1acce8be0d11e81d37d661a2a0b29679806408
eb9125c695ea60806c38615ff3cd726df6ce5f70eb703405fdf5817c27afc31f
GET /gtag/js?id=DC-11620455 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 13:52:26 GMT
expires: Tue, 05 Dec 2023 13:52:26 GMT
cache-control: private, max-age=900
last-modified: Tue, 05 Dec 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 67509
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
192.124.249.22 2.1 kB IP 192.124.249.22:0
Hash d978f5dff9a52bbed1d3305e146deb56
8856f5cccce380cea0defa2489491272d346b475
0270b0ff0c1eabe7c9fdcbbcd7a64dc3b83fb40621e44659c7061f34cc797555
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 05 Dec 2023 13:52:26 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 05 Dec 2023 11:17:06 GMT
Expires: Wed, 06 Dec 2023 11:17:06 GMT
ETag: "8856f5cccce380cea0defa2489491272d346b475"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
smetrics.savethechildren.org/b/ss/stcf.prod.us/5.1/JS-2.25.0-LDQM/s26460286553361?AQB=1&ndh=1&pf=1&t=5%2F11%2F2023%2013%3A52%3A32%202%200&cid.&userid.&id=86225313732895855649207816874424258264&.userid&.cid&sdid=4861F5EEC88550A3-3AB6CCE15847AA68&mid=86225313732895855649207816874424258264&ce=Windows-1257&cl=SESSION&pageName=Email%20Preference%20Center&g=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3Fcid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&cc=USD&server=cloud.alerts.savethechildren.org&v0=Email%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423&events=event79%3D2.353&c2=D%3Dg&v2=D%3DpageName&c10=D%3Dv95&v12=Email%7CEmail%7CSFMC%7CFull_Circle%7CNew_Leads%7C12%2F04%2F2023&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Email%20Preference%20Center%20Page&v27=New&c28=D%3Dv28&c29=D%3Dv36&v36=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter&c49=D%3Dv49&v49=year%3D2023%20%7C%20month%3DDecember%20%7C%20date%3D05%20%7C%20day%3DTuesday%20%7C%20time%3D8%3A52%3A32%20AM&c51=D%3Dv51&v52=D%3Dg&c53=D%3Dv53&c54=D%3Dv54&v54=Email%20Preference%20Center&c55=D%3Dv27&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v95=2.353&v110=Launch&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=1024&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1
104.18.4.221200 OK 43 B URL GET HTTP/2 smetrics.savethechildren.org/b/ss/stcf.prod.us/5.1/JS-2.25.0-LDQM/s26460286553361?AQB=1&ndh=1&pf=1&t=5%2F11%2F2023%2013%3A52%3A32%202%200&cid.&userid.&id=86225313732895855649207816874424258264&.userid&.cid&sdid=4861F5EEC88550A3-3AB6CCE15847AA68&mid=86225313732895855649207816874424258264&ce=Windows-1257&cl=SESSION&pageName=Email%20Preference%20Center&g=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3Fcid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&cc=USD&server=cloud.alerts.savethechildren.org&v0=Email%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423&events=event79%3D2.353&c2=D%3Dg&v2=D%3DpageName&c10=D%3Dv95&v12=Email%7CEmail%7CSFMC%7CFull_Circle%7CNew_Leads%7C12%2F04%2F2023&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Email%20Preference%20Center%20Page&v27=New&c28=D%3Dv28&c29=D%3Dv36&v36=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter&c49=D%3Dv49&v49=year%3D2023%20%7C%20month%3DDecember%20%7C%20date%3D05%20%7C%20day%3DTuesday%20%7C%20time%3D8%3A52%3A32%20AM&c51=D%3Dv51&v52=D%3Dg&c53=D%3Dv53&c54=D%3Dv54&v54=Email%20Preference%20Center&c55=D%3Dv27&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v95=2.353&v110=Launch&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=1024&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1
IP 104.18.4.221:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerGoogle Trust Services LLC
Subjectsmetrics.savethechildren.org
Fingerprint91:EF:B5:E6:FF:8D:EC:60:2E:DB:24:74:48:33:47:1D:6C:5D:51:E3
ValiditySat, 14 Oct 2023 21:22:25 GMT - Fri, 12 Jan 2024 22:21:21 GMT
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/stcf.prod.us/5.1/JS-2.25.0-LDQM/s26460286553361?AQB=1&ndh=1&pf=1&t=5%2F11%2F2023%2013%3A52%3A32%202%200&cid.&userid.&id=86225313732895855649207816874424258264&.userid&.cid&sdid=4861F5EEC88550A3-3AB6CCE15847AA68&mid=86225313732895855649207816874424258264&ce=Windows-1257&cl=SESSION&pageName=Email%20Preference%20Center&g=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3Fcid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&cc=USD&server=cloud.alerts.savethechildren.org&v0=Email%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423&events=event79%3D2.353&c2=D%3Dg&v2=D%3DpageName&c10=D%3Dv95&v12=Email%7CEmail%7CSFMC%7CFull_Circle%7CNew_Leads%7C12%2F04%2F2023&v14=D%3Dmid&c15=D%3Dv3&c16=D%3Dv16&v16=none&v26=Email%20Preference%20Center%20Page&v27=New&c28=D%3Dv28&c29=D%3Dv36&v36=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter&c49=D%3Dv49&v49=year%3D2023%20%7C%20month%3DDecember%20%7C%20date%3D05%20%7C%20day%3DTuesday%20%7C%20time%3D8%3A52%3A32%20AM&c51=D%3Dv51&v52=D%3Dg&c53=D%3Dv53&c54=D%3Dv54&v54=Email%20Preference%20Center&c55=D%3Dv27&c58=D%3Dv26&c59=D%3Dv59&c61=D%3Dv61&v61=us&c62=D%3Dv62&v62=en&v80=false&v81=false&v82=false&v83=false&v95=2.353&v110=Launch&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=1024&mcorgid=6B0E659F56A9E70D7F000101%40AdobeOrg&AQE=1 HTTP/1.1
Host: smetrics.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Cookie: __cf_bm=WIRcTUJ8HRwLTNths4k_UHXb1F8r285jQlScE3dvwZE-1701784345-0-AUWE00aFZzwu8V0/skqdqWcnyPesgViVrudYJ2KhhnGg60A2rQzv1gC2AyvjxkQIFmX5LKzMTovBljDHLNpumBY=; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=179643557%7CMCIDTS%7C19697%7CMCMID%7C86225313732895855649207816874424258264%7CMCAID%7CNONE%7CMCOPTOUT-1701791552s%7CNONE%7CvVersion%7C5.5.0; mbox=session#df1e8a49d7b04a798fc8919fc15b27a1#1701786213; at_check=true; stc-analytics-source=Email|Email|SFMC|Full_Circle|New_Leads|12/04/2023; _sfid_58d2={%22anonymousId%22:%228916f6d7f17ad8e8%22%2C%22consents%22:[]}; _evga_c797={%22uuid%22:%228916f6d7f17ad8e8%22}; stc-analytics-sub_source=86225313732895855649207816874424258264|||||; s_ppv=Email%2520Preference%2520Center%2C72%2C72%2C1024%2C1%2C1; s_ips=1024; s_tp=1413; s_ecid=MCMID%7C86225313732895855649207816874424258264; AMCVS_6B0E659F56A9E70D7F000101%40AdobeOrg=1; s_nr30=1701784352651-New; s_cc=true; _rdt_uuid=1701784352735.c97ea018-9c69-419b-8cb8-d56e010e54f4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 13:52:26 GMT
content-type: image/gif;charset=utf-8
content-length: 43
access-control-allow-origin: *
expires: Mon, 04 Dec 2023 13:52:26 GMT
last-modified: Wed, 06 Dec 2023 13:52:26 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
set-cookie: s_ecid=MCMID%7C86225313732895855649207816874424258264; Path=/; Domain=savethechildren.org;
etag: 3654554057420177408-4617909583911679908
vary: *
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 830cc507f88756bf-OSL
X-Firefox-Spdy: h2
w.usabilla.com/0b7d56c9da02.js?lv=1
18.200.80.72200 OK 11 kB URL GET HTTP/2 w.usabilla.com/0b7d56c9da02.js?lv=1
IP 18.200.80.72:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerAmazon
Subjectw.usabilla.com
Fingerprint41:79:87:89:8A:97:A4:3B:1B:24:73:F3:45:C3:62:AB:E7:46:9D:33
ValidityThu, 09 Feb 2023 00:00:00 GMT - Fri, 09 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (2574)
Hash 6026042d8a41a34efda3a8ae50c5f6d1
1f8d0e72eb494ccf5858e83f66effed7f5cc4a5e
1305e342d97a3128936b574586e0bc440bf8b48c182a15e2f975c67e1bd3d827
GET /0b7d56c9da02.js?lv=1 HTTP/1.1
Host: w.usabilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 13:52:27 GMT
content-type: text/javascript
content-length: 11230
cache-control: public,max-age=0
content-encoding: gzip
etag: "bf2f321ad14f031cbd539fc6049f955a"
pragma: no-cache
x-widget-server: 2.1
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-85748307-2&l=dataLayer&cx=c
142.250.74.168200 OK 69 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=UA-85748307-2&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash bf51b48237c9a038f2fcbce84692054f
5b43cca622951c7e65d77d8be5dbb939f9fdbe05
a5b92e14f66359575a237f84035feb024eb6fbcb903dd51719b326ab8b328e4c
GET /gtag/js?id=UA-85748307-2&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 13:52:27 GMT
expires: Tue, 05 Dec 2023 13:52:27 GMT
cache-control: private, max-age=900
last-modified: Tue, 05 Dec 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69049
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=AW-1069852215&l=dataLayer&cx=c
142.250.74.168200 OK 78 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=AW-1069852215&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash 6fb2f9c90bc61bf48b175f1396982b35
e66c809e7019aedb4ee03c48200fbdffde5ce52b
4bc23563f15dce0d651055036f16bd78f38d34b667f0e01a0260cabad06197bf
GET /gtag/js?id=AW-1069852215&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 13:52:27 GMT
expires: Tue, 05 Dec 2023 13:52:27 GMT
cache-control: private, max-age=900
last-modified: Tue, 05 Dec 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77806
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
d6tizftlrpuof.cloudfront.net/themes/production/save-the-children-usa-button-18e985c8f1327aa5b0db2be1ab660ba6.png
54.230.241.142200 OK 9.2 kB URL GET HTTP/1.1 d6tizftlrpuof.cloudfront.net/themes/production/save-the-children-usa-button-18e985c8f1327aa5b0db2be1ab660ba6.png
IP 54.230.241.142:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type PNG image data, 159 x 523, 8-bit/color RGB, non-interlaced\012- data
Hash 18e985c8f1327aa5b0db2be1ab660ba6
40b959e93c2a7521f3ac03bdc6952d3316bfa8f8
9fbb05adcdc2317148fbaaf7c56be51c9246d351c9ae5235eb09dcd0ee0da552
GET /themes/production/save-the-children-usa-button-18e985c8f1327aa5b0db2be1ab660ba6.png HTTP/1.1
Host: d6tizftlrpuof.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 9208
Connection: keep-alive
Date: Sun, 17 Sep 2023 18:54:51 GMT
Last-Modified: Tue, 22 Nov 2022 20:42:35 GMT
ETag: "18e985c8f1327aa5b0db2be1ab660ba6"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=315360000, no-transform, public
x-amz-version-id: C7qFiPh6IstNmFvA1Lz9dqUcbPEB482T
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hui1lN4_XnRVpnH4D8NCndb6a1TRG-r0PpIlByrlSo1wgRBlqpFHbA==
Age: 6807457
www.googletagmanager.com/gtag/js?id=G-KG696PWF7Y&l=dataLayer&cx=c
142.250.74.168200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-KG696PWF7Y&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash 175f9c0dd8a213a21f91c1dee68f22ee
486b55fd1792958b6aff3c0ad1593635c677654f
5d6ac9549547dcba3f0f5adf10b39f81fc07e66f2dc2ebacef9b41d145a8d975
GET /gtag/js?id=G-KG696PWF7Y&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 13:52:27 GMT
expires: Tue, 05 Dec 2023 13:52:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81216
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
status.geotrust.com/
192.229.221.95 279 B IP 192.229.221.95:0
Hash 66050d8c9282bc2b3d1e3356fb9053a0
fe0a602d1bffc60c200d862d972be595c7b13f77
ac904dd6705056c192f4818a5c9b4091c693f5cd4f26a226699a6b6641043eae
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1793
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Tue, 05 Dec 2023 13:52:27 GMT
Last-Modified: Tue, 05 Dec 2023 13:22:35 GMT
Server: ECAcc (amb/6AB4)
X-Cache: HIT
Content-Length: 279
dx.mountain.com/spx?dxver=4.0.0&shaid=32293&tdr=&plh=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3FsfmcEmail%3DJames.Ogilvie-Battersby%40saint-gobain.com%26cid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&cb=26392157687852424&term=value
52.7.151.245200 OK 4.3 kB URL GET HTTP/1.1 dx.mountain.com/spx?dxver=4.0.0&shaid=32293&tdr=&plh=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3FsfmcEmail%3DJames.Ogilvie-Battersby%40saint-gobain.com%26cid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&cb=26392157687852424&term=value
IP 52.7.151.245:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerGoDaddy.com, Inc.
Subject*.mountain.com
Fingerprint60:38:AB:C1:29:01:0A:9E:70:DF:E1:A9:65:7C:E4:4D:66:48:51:62
ValidityMon, 12 Jun 2023 16:30:05 GMT - Sun, 23 Jun 2024 07:06:21 GMT
File type ASCII text, with very long lines (15804), with no line terminators
Hash 293f6f791547b93eb40c765c352bb953
4d083ade8127a820673469d2c20f5508ee2b9597
334a0cb16fbe5c63978260609a8aa6bd40b1f30dbf3a32325e318d29c9f5dd81
GET /spx?dxver=4.0.0&shaid=32293&tdr=&plh=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3FsfmcEmail%3DJames.Ogilvie-Battersby%40saint-gobain.com%26cid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&cb=26392157687852424&term=value HTTP/1.1
Host: dx.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Tue, 05 Dec 2023 13:52:26 GMT
x-envoy-upstream-service-time: 2
be: spx-prod
server: istio-envoy
transfer-encoding: chunked
tags.wdsvc.net/controller.js?id=100229
52.200.54.195200 OK 57 B URL GET HTTP/1.1 tags.wdsvc.net/controller.js?id=100229
IP 52.200.54.195:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerGoDaddy.com, Inc.
Subjecttags.wdsvc.net
Fingerprint17:16:5C:DB:44:26:27:6F:C3:7F:3C:A7:69:C6:07:13:4D:22:12:B7
ValidityWed, 18 Oct 2023 19:38:36 GMT - Fri, 01 Nov 2024 14:43:34 GMT
File type ASCII text, with no line terminators
Hash e42c9f81368790f767c24d702fd34307
77d9bfff9816719da08e1ce8e908b504be1cc63d
c114a644eeec8496a374cfbce8d4ba03100b6b753b86a19e765090ba5d55a7cd
GET /controller.js?id=100229 HTTP/1.1
Host: tags.wdsvc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Set-Cookie: OPTOUT=Opt-Out Privacy Signal DNT Detected; No Data Collection; Expires=Thu, 05 Dec 2024 13:52:27 GMT; SameSite=None; Secure
_wdTest=accept; Domain=.wdsvc.net; Path=/; Expires=Mon, 05 Dec 2022 13:52:27 GMT; SameSite=none; secure; HttpOnly
wds_random=opt-out; Expires=Mon, 05 Dec 2022 13:52:27 GMT; SameSite=none; secure; HttpOnly
Date: Tue, 05 Dec 2023 13:52:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
www.dgtrx.com/scripts/sdk/everflow.js
34.98.72.238200 OK 19 kB URL GET HTTP/2 www.dgtrx.com/scripts/sdk/everflow.js
IP 34.98.72.238:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerStarfield Technologies, Inc.
Subjectvfr12trk.com
Fingerprint22:77:6B:59:DA:45:2E:DE:A4:48:8B:9B:AE:A3:46:88:31:0D:9B:6A
ValidityFri, 03 Nov 2023 21:29:00 GMT - Wed, 04 Dec 2024 21:29:00 GMT
File type Unicode text, UTF-8 text, with very long lines (61224)
Hash 40bd0afe40ba8ef8ebc02934c52b1eee
20a3de6b6e14b1d527bbaa72230d62c724eadb4b
9de918597664672b57a169fe12e0b775f45ba43d20ccb082c2d9f065160dcd4f
GET /scripts/sdk/everflow.js HTTP/1.1
Host: www.dgtrx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 13:52:27 GMT
content-type: text/javascript
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
cache-control: max-age=14400
vary: Origin
x-eflow-request-id: f232d1a7-a8ea-417b-ab38-3245456204ca
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bat.bing.com/bat.js
204.79.197.200200 OK 13 kB IP 204.79.197.200:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
File type Unicode text, UTF-8 text, with very long lines (46103), with no line terminators
Hash 7f75f159026f3a2c8cccda487b43157b
021cf5c854db063cd79bf0394c24eb994e095640
5e319852607809336b2534ffeb96f6933f26994dd040f535302c84f59cc0a214
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 13175
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 10 Nov 2023 20:09:55 GMT
accept-ranges: bytes
etag: "80abcdf1114da1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 132E7EB265954EAA9F2B799C361E5E6C Ref B: OSL30EDGE0417 Ref C: 2023-12-05T13:52:27Z
date: Tue, 05 Dec 2023 13:52:26 GMT
X-Firefox-Spdy: h2
app.leadsrx.com/visitor.js
34.214.221.133200 OK 19 kB URL GET HTTP/2 app.leadsrx.com/visitor.js
IP 34.214.221.133:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subject*.leadsrx.com
FingerprintA4:5F:5E:E1:0B:E1:A7:EA:53:96:FE:95:1B:BD:69:AE:EC:3D:88:95
ValidityTue, 02 May 2023 00:00:00 GMT - Sat, 01 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (18735), with no line terminators
Hash 0a4109c065352458bee4e9cc98e1fbce
1d44e1811ea9409f12e88fc42c8a734d3316293b
6b5116bd2cb4809c6634b99a9b1ea0a0aeda596a94817682a0e4811e35eccc58
GET /visitor.js HTTP/1.1
Host: app.leadsrx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 13:52:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 18735
server: nginx/1.20.1
last-modified: Mon, 04 Dec 2023 17:44:42 GMT
etag: "656e100a-492f"
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=5439503&Ver=2&mid=8dd6df37-376c-45b9-bfcd-9472fda85992&sid=8a561070937511ee88bf099d188c9435&vid=8a561d30937511ee9925b12ebe839227&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Email%20Preference%20Center%20%7C%20Save%20the%20Children&p=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3FsfmcEmail%3DJames.Ogilvie-Battersby%40saint-gobain.com%26cid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&r=<=2824&evt=pageLoad&sv=1&rn=496207
204.79.197.200204 No Content 0 B URL GET HTTP/2 bat.bing.com/action/0?ti=5439503&Ver=2&mid=8dd6df37-376c-45b9-bfcd-9472fda85992&sid=8a561070937511ee88bf099d188c9435&vid=8a561d30937511ee9925b12ebe839227&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Email%20Preference%20Center%20%7C%20Save%20the%20Children&p=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3FsfmcEmail%3DJames.Ogilvie-Battersby%40saint-gobain.com%26cid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&r=<=2824&evt=pageLoad&sv=1&rn=496207
IP 204.79.197.200:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5439503&Ver=2&mid=8dd6df37-376c-45b9-bfcd-9472fda85992&sid=8a561070937511ee88bf099d188c9435&vid=8a561d30937511ee9925b12ebe839227&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Email%20Preference%20Center%20%7C%20Save%20the%20Children&p=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3FsfmcEmail%3DJames.Ogilvie-Battersby%40saint-gobain.com%26cid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&r=<=2824&evt=pageLoad&sv=1&rn=496207 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=1F2F0785F219628A240E145BF34E63FD; domain=.bing.com; expires=Sun, 29-Dec-2024 13:52:28 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1F1DE67116364BD199ACC743D3B71FE1 Ref B: OSL30EDGE0417 Ref C: 2023-12-05T13:52:27Z
date: Tue, 05 Dec 2023 13:52:27 GMT
X-Firefox-Spdy: h2
cloud.alerts.savethechildren.org/favicon.ico
128.245.132.77404 Not Found 1.2 kB URL GET HTTP/1.1 cloud.alerts.savethechildren.org/favicon.ico
IP 128.245.132.77:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectcloud.alerts.savethechildren.org
FingerprintE2:0D:37:2C:4C:32:C7:0B:82:2C:87:A4:4F:8E:B0:CE:E2:00:C1:19
ValidityMon, 04 Sep 2023 00:00:00 GMT - Fri, 04 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 5343c1a8b203c162a3bf3870d9f50fd4
04b5b886c20d88b57eea6d8ff882624a4ac1e51d
dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f
GET /favicon.ico HTTP/1.1
Host: cloud.alerts.savethechildren.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Cookie: __cf_bm=WIRcTUJ8HRwLTNths4k_UHXb1F8r285jQlScE3dvwZE-1701784345-0-AUWE00aFZzwu8V0/skqdqWcnyPesgViVrudYJ2KhhnGg60A2rQzv1gC2AyvjxkQIFmX5LKzMTovBljDHLNpumBY=; AMCV_6B0E659F56A9E70D7F000101%40AdobeOrg=179643557%7CMCIDTS%7C19697%7CMCMID%7C86225313732895855649207816874424258264%7CMCAID%7CNONE%7CMCOPTOUT-1701791552s%7CNONE%7CvVersion%7C5.5.0; mbox=session#df1e8a49d7b04a798fc8919fc15b27a1#1701786213; at_check=true; stc-analytics-source=Email|Email|SFMC|Full_Circle|New_Leads|12/04/2023; _sfid_58d2={%22anonymousId%22:%228916f6d7f17ad8e8%22%2C%22consents%22:[]}; _evga_c797={%22uuid%22:%228916f6d7f17ad8e8%22}; stc-analytics-sub_source=86225313732895855649207816874424258264|||||; s_ppv=Email%2520Preference%2520Center%2C72%2C72%2C1024%2C1%2C1; s_ips=1024; s_tp=1413; s_ecid=MCMID%7C86225313732895855649207816874424258264; AMCVS_6B0E659F56A9E70D7F000101%40AdobeOrg=1; s_nr30=1701784352651-New; s_cc=true; _rdt_uuid=1701784352735.c97ea018-9c69-419b-8cb8-d56e010e54f4; _gcl_au=1.1.1379066039.1701784353; _ga_KG696PWF7Y=GS1.1.1701784353.1.0.1701784353.0.0.0; _ga=GA1.1.941472799.1701784353
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Cache-Control: private
Content-Type: text/html
X-Cache-Status: CACHED
Date: Tue, 05 Dec 2023 13:52:27 GMT
Connection: close
Content-Length: 1245
bat.bing.com/p/action/5439503.js
204.79.197.200204 No Content 0 B URL GET HTTP/2 bat.bing.com/p/action/5439503.js
IP 204.79.197.200:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/5439503.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6F6F3A3EF4FD47A2BAAB9156628BC73B Ref B: OSL30EDGE0417 Ref C: 2023-12-05T13:52:27Z
date: Tue, 05 Dec 2023 13:52:27 GMT
X-Firefox-Spdy: h2
18.210.229.244/is
18.210.229.244200 OK 32 B IP 18.210.229.244:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerSectigo Limited
Subject18.210.229.244
Fingerprint1A:C5:81:F4:D0:6A:5C:CF:48:D1:5D:51:C5:07:75:25:D3:99:4D:EC
ValidityMon, 13 Feb 2023 00:00:00 GMT - Tue, 13 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash c762918bc42bcf98e053c13910df8005
51506cb9e94cd22b12d1443037ea7306a86d2ae7
04a61184c035cadfffaca8f02e0c88f5a0cef5a410a9aa8546790282398a16a2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /is HTTP/1.1
Host: 18.210.229.244
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloud.alerts.savethechildren.org/
Origin: https://cloud.alerts.savethechildren.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Tue, 05 Dec 2023 13:52:28 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 2
server: istio-envoy
connection: close
app.leadsrx.com/visitor.php?acctTag=yqahgl42094&tz=0&ref=&u=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3FsfmcEmail%3DJames.Ogilvie-Battersby%40saint-gobain.com%26cid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&t=Email%20Preference%20Center%20%7C%20Save%20the%20Children&lc=null&anon=0&vin=null
34.214.221.133200 OK 1.3 kB URL GET HTTP/2 app.leadsrx.com/visitor.php?acctTag=yqahgl42094&tz=0&ref=&u=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3FsfmcEmail%3DJames.Ogilvie-Battersby%40saint-gobain.com%26cid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&t=Email%20Preference%20Center%20%7C%20Save%20the%20Children&lc=null&anon=0&vin=null
IP 34.214.221.133:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subject*.leadsrx.com
FingerprintA4:5F:5E:E1:0B:E1:A7:EA:53:96:FE:95:1B:BD:69:AE:EC:3D:88:95
ValidityTue, 02 May 2023 00:00:00 GMT - Sat, 01 Jun 2024 23:59:59 GMT
Hash 00956855ec2a15ecc572fe6ac922ca1e
e10d7911992e6baf930773791ea145797f6366ee
2afabc08dac9ca29631a9e01e5ec3a28fa12816153648d9ca35ed49b9e247549
GET /visitor.php?acctTag=yqahgl42094&tz=0&ref=&u=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3FsfmcEmail%3DJames.Ogilvie-Battersby%40saint-gobain.com%26cid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&t=Email%20Preference%20Center%20%7C%20Save%20the%20Children&lc=null&anon=0&vin=null HTTP/1.1
Host: app.leadsrx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://cloud.alerts.savethechildren.org
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 13:52:27 GMT
content-type: text/html; charset=utf-8
server: nginx/1.20.1
x-powered-by: PHP/5.6.40
access-control-allow-origin: https://cloud.alerts.savethechildren.org
access-control-allow-credentials: true
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
192.124.249.24 2.1 kB IP 192.124.249.24:0
Hash d978f5dff9a52bbed1d3305e146deb56
8856f5cccce380cea0defa2489491272d346b475
0270b0ff0c1eabe7c9fdcbbcd7a64dc3b83fb40621e44659c7061f34cc797555
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 05 Dec 2023 13:52:28 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 05 Dec 2023 11:17:06 GMT
Expires: Wed, 06 Dec 2023 11:17:06 GMT
ETag: "8856f5cccce380cea0defa2489491272d346b475"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
gs.mountain.com/gs
35.81.162.201200 OK 144 B IP 35.81.162.201:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerGoDaddy.com, Inc.
Subject*.mountain.com
Fingerprint60:38:AB:C1:29:01:0A:9E:70:DF:E1:A9:65:7C:E4:4D:66:48:51:62
ValidityMon, 12 Jun 2023 16:30:05 GMT - Sun, 23 Jun 2024 07:06:21 GMT
File type ASCII text, with no line terminators
Hash df0274d1d64d2ea1f496d7d3f47f076d
930ce6faaa29459cb0d1ebd051d1c1a4be5df82b
13b68ea92a534ac5127170b77b6968188c7ce09c3db7b5e3e6cee91687ea0c02
GET /gs HTTP/1.1
Host: gs.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Cookie: guid=878b8b3d-9375-11ee-ae80-09feaeb9f8ed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Tue, 05 Dec 2023 13:52:29 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 2
server: istio-envoy
connection: close
px.mountain.com/st?ga_tracking_id=G-3Q74QDHYNS&ga_client_id=941472799.1701784353&shpt=Email%20Preference%20Center%20%7C%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22G-3Q74QDHYNS%22%2C%22ga_client_id%22%3A%22941472799.1701784353%22%2C%22shpt%22%3A%22Email%20Preference%20Center%20%7C%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%221701784353.1%22%2C%22mntnis%22%3A%22ciFMMu8%2FSCFuU6MKAMXz7psQxb3UNdT9%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A9%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%7D&dcm_cid=1701784353.1&available_ga=%5B%7B%22id%22%3A%22G-KG696PWF7Y%22%2C%22sess_id%22%3A%221701784353%22%7D%2C%7B%22id%22%3A%22UA-85748307-2%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=G-3Q74QDHYNS&dxver=4.0.0&shaid=32293&plh=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3FsfmcEmail%3DJames.Ogilvie-Battersby%40saint-gobain.com%26cid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&term=value&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue&cb=1701784348959666&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1701784349721
34.210.219.79200 OK 1.4 kB URL GET HTTP/1.1 px.mountain.com/st?ga_tracking_id=G-3Q74QDHYNS&ga_client_id=941472799.1701784353&shpt=Email%20Preference%20Center%20%7C%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22G-3Q74QDHYNS%22%2C%22ga_client_id%22%3A%22941472799.1701784353%22%2C%22shpt%22%3A%22Email%20Preference%20Center%20%7C%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%221701784353.1%22%2C%22mntnis%22%3A%22ciFMMu8%2FSCFuU6MKAMXz7psQxb3UNdT9%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A9%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%7D&dcm_cid=1701784353.1&available_ga=%5B%7B%22id%22%3A%22G-KG696PWF7Y%22%2C%22sess_id%22%3A%221701784353%22%7D%2C%7B%22id%22%3A%22UA-85748307-2%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=G-3Q74QDHYNS&dxver=4.0.0&shaid=32293&plh=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3FsfmcEmail%3DJames.Ogilvie-Battersby%40saint-gobain.com%26cid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&term=value&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue&cb=1701784348959666&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1701784349721
IP 34.210.219.79:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerGoDaddy.com, Inc.
Subject*.mountain.com
Fingerprint60:38:AB:C1:29:01:0A:9E:70:DF:E1:A9:65:7C:E4:4D:66:48:51:62
ValidityMon, 12 Jun 2023 16:30:05 GMT - Sun, 23 Jun 2024 07:06:21 GMT
File type ASCII text, with very long lines (5301), with no line terminators
Hash 7d789b2e77e7d8737a38ae0113551fbb
b493a3b6ace2cf262150faa71402759b9d270310
fb0eafb7e0e92ea4aec573278283c1be3e97ae2667ba00c927a73ef3a6914982
GET /st?ga_tracking_id=G-3Q74QDHYNS&ga_client_id=941472799.1701784353&shpt=Email%20Preference%20Center%20%7C%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22G-3Q74QDHYNS%22%2C%22ga_client_id%22%3A%22941472799.1701784353%22%2C%22shpt%22%3A%22Email%20Preference%20Center%20%7C%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%221701784353.1%22%2C%22mntnis%22%3A%22ciFMMu8%2FSCFuU6MKAMXz7psQxb3UNdT9%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A9%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%7D&dcm_cid=1701784353.1&available_ga=%5B%7B%22id%22%3A%22G-KG696PWF7Y%22%2C%22sess_id%22%3A%221701784353%22%7D%2C%7B%22id%22%3A%22UA-85748307-2%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=G-3Q74QDHYNS&dxver=4.0.0&shaid=32293&plh=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3FsfmcEmail%3DJames.Ogilvie-Battersby%40saint-gobain.com%26cid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&term=value&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue&cb=1701784348959666&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1701784349721 HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Cookie: guid=878b8b3d-9375-11ee-ae80-09feaeb9f8ed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Tue, 05 Dec 2023 13:52:30 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: tt=H4sIAAAAAAAAAKtWKlOyMtJRMjYysjSON7IwtlCyMjQ3MDS3MDE2NTAxs9RR8guKh8qaWxorWRkgi4DVG9QCAE0YcWtGAAAA;Domain=px.mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
rt="MzIyOTM6MTcwMTc4NDM1MA==";Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
guid=878b8b3d-9375-11ee-ae80-09feaeb9f8ed;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 19
server: istio-envoy
connection: close
transfer-encoding: chunked
dx2eq2oh924g4.cloudfront.net/js/stc-vendor-aem.js
54.230.241.224200 OK 319 kB URL GET HTTP/2 dx2eq2oh924g4.cloudfront.net/js/stc-vendor-aem.js
IP 54.230.241.224:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Size 319 kB (319205 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/stc-vendor-aem.js HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 30 Nov 2023 23:22:55 GMT
last-modified: Thu, 30 Nov 2023 22:55:02 GMT
etag: W/"0b696d954a4ad419326dd241c364e7ef"
x-amz-server-side-encryption: AES256
cache-control: max-age=604801
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HVVEDc046lglF_x5bQzXrfrl_ZuKky43Toump8EkzsnUVqlUTuAFYQ==
age: 397771
X-Firefox-Spdy: h2
dx2eq2oh924g4.cloudfront.net/js/stc-analytics-data-layer.js
54.230.241.224200 OK 38 kB URL GET HTTP/2 dx2eq2oh924g4.cloudfront.net/js/stc-analytics-data-layer.js
IP 54.230.241.224:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (37248)
Hash 1798d833bb8cca7fe4df6452ea8645dc
6064187215b2dfb2b7a7c2ec4f2d4724bfbe926b
ca569704b6be03b29c3592e26fb1c6b18a4d18022fc78bb201690037706fdfa9
GET /js/stc-analytics-data-layer.js HTTP/1.1
Host: dx2eq2oh924g4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 30 Nov 2023 23:22:55 GMT
last-modified: Thu, 02 Mar 2023 16:37:32 GMT
etag: W/"1798d833bb8cca7fe4df6452ea8645dc"
x-amz-server-side-encryption: AES256
cache-control: max-age=604801
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 462YFn3EYJKRRNkg33is85_964mNaNXxl4kALVvL65me4dYpqNZ0ag==
age: 397771
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC2bd87301eb114379b56ad60b1e4c5bc9-source.min.js
2.18.172.233200 OK 665 B URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC2bd87301eb114379b56ad60b1e4c5bc9-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (684), with no line terminators
Hash 83c830cf1dd10c4fccd7e4d70941b990
2dacc7818d6658cf4c2cdd7ce86585c49dc0da55
10f8325fbd61637d50d9ab0f4d41666bf575d5e87afa1880b4818b0aa4efa087
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC2bd87301eb114379b56ad60b1e4c5bc9-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:25 GMT
date: Tue, 05 Dec 2023 13:52:25 GMT
content-length: 378
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC4e90bdfdfd164b63ba5f4eacb15f168e-source.min.js
2.18.172.233200 OK 947 B URL GET HTTP/2 assets.adobedtm.com/a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC4e90bdfdfd164b63ba5f4eacb15f168e-source.min.js
IP 2.18.172.233:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (990), with no line terminators
Hash 3cffd06fd5c82c24b20e83b41cbff16a
1042ea78575268c86cebea0b3f11172c6542f4ea
627664d5651af5456e6d8c4e1db6e1ea91bb1ea5de4b6ea036b84b795cd08e57
GET /a9de570d9caa/b01a1f4bb0c4/ea82b2fe0814/RC4e90bdfdfd164b63ba5f4eacb15f168e-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "252a0685667d75f706f7ad6305aaf74d:1699559965.281264"
last-modified: Thu, 09 Nov 2023 19:59:25 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Tue, 05 Dec 2023 14:52:26 GMT
date: Tue, 05 Dec 2023 13:52:26 GMT
content-length: 515
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
X-Firefox-Spdy: h2
savethechildren.us-7.evergage.com/pr?.top=900&action=Default%20Page%20Type&.tt=806&.ttdns=3&.dt=2369&.lt=2824&.btdns=18&.bv=16&_ak=savethechildren&_ds=production&.scv=36&channel=Web&_r=363820&.anonId=8916f6d7f17ad8e8&_anon=true
44.228.124.45204 No Content 0 B URL POST HTTP/2 savethechildren.us-7.evergage.com/pr?.top=900&action=Default%20Page%20Type&.tt=806&.ttdns=3&.dt=2369&.lt=2824&.btdns=18&.bv=16&_ak=savethechildren&_ds=production&.scv=36&channel=Web&_r=363820&.anonId=8916f6d7f17ad8e8&_anon=true
IP 44.228.124.45:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerAmazon
Subject*.us-7.evergage.com
FingerprintFC:5D:A7:A6:00:77:1C:8A:75:2A:C6:E2:60:C7:BD:46:61:26:07:C6
ValidityTue, 01 Aug 2023 00:00:00 GMT - Thu, 29 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pr?.top=900&action=Default%20Page%20Type&.tt=806&.ttdns=3&.dt=2369&.lt=2824&.btdns=18&.bv=16&_ak=savethechildren&_ds=production&.scv=36&channel=Web&_r=363820&.anonId=8916f6d7f17ad8e8&_anon=true HTTP/1.1
Host: savethechildren.us-7.evergage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 0
Origin: https://cloud.alerts.savethechildren.org
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Cookie: AWSALBTGCORS=0d71ae7fmFeJaXuDZ9x9OoHxM6w25Hue28/miLzYX1qHO9oV2zOP9mLDtv3j3WTEG5v5sNx/WTqydQ5G5clh617l8j86ZrjtPp9Z7vd3S+yKZ/Z68aFfhS2fjslB7iPBJQyyIJG91TjwUrJ5wIXooxjTVhlNv29wyoPtcwm8bSaqTiyQhYM=; AWSALBCORS=HQhCkn8Pe5c97eVetrqkrvFfiOd05cLLnt7LyrSPUIj9wRx/kau83ZaGpqgDTRvzZLF9nWO+djBT+1bBqKyvsIMJmazW1H3XaGOMCwsCsAsGJPRWwf5HxWp9rjab
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 05 Dec 2023 13:52:27 GMT
set-cookie: AWSALBTG=nkau9tsFemyFKuGOwgZaa6kp+Zuyx3gHVp8KaIN0TP6oGjI1PLj/95ycT5TV8rcur4kWYuAuIS1ZGnEh4KVow4jTFuilmJkJ+Y2McyrehmFEbKxnJqr8ZcwdjttuksUxe782c5NZPq78Aa0lITVuGgLOgoQtJ+lLfPKjLC9n4ZEMclYKrbo=; Expires=Tue, 12 Dec 2023 13:52:27 GMT; Path=/
AWSALBTGCORS=nkau9tsFemyFKuGOwgZaa6kp+Zuyx3gHVp8KaIN0TP6oGjI1PLj/95ycT5TV8rcur4kWYuAuIS1ZGnEh4KVow4jTFuilmJkJ+Y2McyrehmFEbKxnJqr8ZcwdjttuksUxe782c5NZPq78Aa0lITVuGgLOgoQtJ+lLfPKjLC9n4ZEMclYKrbo=; Expires=Tue, 12 Dec 2023 13:52:27 GMT; Path=/; SameSite=None; Secure
AWSALB=FYmRtpeMKUgSH/9wm83YfzHaC7KoPQWcVsIQmGK7jmEuHSj+5csoLzf9sTZeA3pLN4137mhEtrc2C50+/rwjofsFbFFRtUmkRl5bGBssvIZOviKnBUswT4ihHQVU; Expires=Tue, 12 Dec 2023 13:52:27 GMT; Path=/
AWSALBCORS=FYmRtpeMKUgSH/9wm83YfzHaC7KoPQWcVsIQmGK7jmEuHSj+5csoLzf9sTZeA3pLN4137mhEtrc2C50+/rwjofsFbFFRtUmkRl5bGBssvIZOviKnBUswT4ihHQVU; Expires=Tue, 12 Dec 2023 13:52:27 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
x-content-type-options: nosniff
X-Firefox-Spdy: h2
savethechildren.us-7.evergage.com/api2/event/production?event=eyJzb3VyY2UiOnsicGFnZVR5cGUiOiJEZWZhdWx0IFBhZ2UgVHlwZSIsInVybCI6Imh0dHBzOi8vY2xvdWQuYWxlcnRzLnNhdmV0aGVjaGlsZHJlbi5vcmcvcHJlZmVyZW5jZWNlbnRlcj9zZm1jRW1haWw9SmFtZXMuT2dpbHZpZS1CYXR0ZXJzYnlAc2FpbnQtZ29iYWluLmNvbSZjaWQ9RW1haWw6U0ZNQzpGdWxsX0NpcmNsZTpOZXdfTGVhZHM6MTIwNDIzJnNfc3Vic3JjPXx8fDExMzI5MXx8IiwidXJsUmVmZXJyZXIiOiIiLCJjaGFubmVsIjoiV2ViIiwiYmVhY29uVmVyc2lvbiI6MTYsImNvbmZpZ1ZlcnNpb24iOiIzNiIsImNvbnRlbnRab25lcyI6WyJnbG9iYWxfcG9wdXAiLCJnbG9iYWxfaW5mb2JhciIsImdsb2JhbF9zbGlkZWluIiwiZW1haWxfb3B0X2luIl19LCJ1c2VyIjp7ImFub255bW91c0lkIjoiODkxNmY2ZDdmMTdhZDhlOCJ9LCJpbnRlcmFjdGlvbiI6eyJuYW1lIjoiRGVmYXVsdCBQYWdlIFR5cGUifSwicGFnZVZpZXciOnRydWUsImNvbnNlbnRzIjpbXSwiYWNjb3VudCI6e30sIl90b29sc0V2ZW50TGlua0lkIjoiMzYxNTMxNjg2MTE1NTM5IiwiZXhwbGFpbiI6dHJ1ZX0%3D
44.228.124.45200 OK 137 B URL GET HTTP/2 savethechildren.us-7.evergage.com/api2/event/production?event=eyJzb3VyY2UiOnsicGFnZVR5cGUiOiJEZWZhdWx0IFBhZ2UgVHlwZSIsInVybCI6Imh0dHBzOi8vY2xvdWQuYWxlcnRzLnNhdmV0aGVjaGlsZHJlbi5vcmcvcHJlZmVyZW5jZWNlbnRlcj9zZm1jRW1haWw9SmFtZXMuT2dpbHZpZS1CYXR0ZXJzYnlAc2FpbnQtZ29iYWluLmNvbSZjaWQ9RW1haWw6U0ZNQzpGdWxsX0NpcmNsZTpOZXdfTGVhZHM6MTIwNDIzJnNfc3Vic3JjPXx8fDExMzI5MXx8IiwidXJsUmVmZXJyZXIiOiIiLCJjaGFubmVsIjoiV2ViIiwiYmVhY29uVmVyc2lvbiI6MTYsImNvbmZpZ1ZlcnNpb24iOiIzNiIsImNvbnRlbnRab25lcyI6WyJnbG9iYWxfcG9wdXAiLCJnbG9iYWxfaW5mb2JhciIsImdsb2JhbF9zbGlkZWluIiwiZW1haWxfb3B0X2luIl19LCJ1c2VyIjp7ImFub255bW91c0lkIjoiODkxNmY2ZDdmMTdhZDhlOCJ9LCJpbnRlcmFjdGlvbiI6eyJuYW1lIjoiRGVmYXVsdCBQYWdlIFR5cGUifSwicGFnZVZpZXciOnRydWUsImNvbnNlbnRzIjpbXSwiYWNjb3VudCI6e30sIl90b29sc0V2ZW50TGlua0lkIjoiMzYxNTMxNjg2MTE1NTM5IiwiZXhwbGFpbiI6dHJ1ZX0%3D
IP 44.228.124.45:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerAmazon
Subject*.us-7.evergage.com
FingerprintFC:5D:A7:A6:00:77:1C:8A:75:2A:C6:E2:60:C7:BD:46:61:26:07:C6
ValidityTue, 01 Aug 2023 00:00:00 GMT - Thu, 29 Aug 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 7dec162d8504b36342bca685e935817b
f48b22bbeebeda226dafe21f2a514f34ba9a3cec
7dbe18c09bf48152bb2e49a61d56589135e6abf827b70641fd427b5fb93bb631
GET /api2/event/production?event=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%3D HTTP/1.1
Host: savethechildren.us-7.evergage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cloud.alerts.savethechildren.org
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 13:52:26 GMT
content-type: application/json;charset=UTF-8
set-cookie: AWSALBTG=0d71ae7fmFeJaXuDZ9x9OoHxM6w25Hue28/miLzYX1qHO9oV2zOP9mLDtv3j3WTEG5v5sNx/WTqydQ5G5clh617l8j86ZrjtPp9Z7vd3S+yKZ/Z68aFfhS2fjslB7iPBJQyyIJG91TjwUrJ5wIXooxjTVhlNv29wyoPtcwm8bSaqTiyQhYM=; Expires=Tue, 12 Dec 2023 13:52:26 GMT; Path=/
AWSALBTGCORS=0d71ae7fmFeJaXuDZ9x9OoHxM6w25Hue28/miLzYX1qHO9oV2zOP9mLDtv3j3WTEG5v5sNx/WTqydQ5G5clh617l8j86ZrjtPp9Z7vd3S+yKZ/Z68aFfhS2fjslB7iPBJQyyIJG91TjwUrJ5wIXooxjTVhlNv29wyoPtcwm8bSaqTiyQhYM=; Expires=Tue, 12 Dec 2023 13:52:26 GMT; Path=/; SameSite=None; Secure
AWSALB=HQhCkn8Pe5c97eVetrqkrvFfiOd05cLLnt7LyrSPUIj9wRx/kau83ZaGpqgDTRvzZLF9nWO+djBT+1bBqKyvsIMJmazW1H3XaGOMCwsCsAsGJPRWwf5HxWp9rjab; Expires=Tue, 12 Dec 2023 13:52:26 GMT; Path=/
AWSALBCORS=HQhCkn8Pe5c97eVetrqkrvFfiOd05cLLnt7LyrSPUIj9wRx/kau83ZaGpqgDTRvzZLF9nWO+djBT+1bBqKyvsIMJmazW1H3XaGOMCwsCsAsGJPRWwf5HxWp9rjab; Expires=Tue, 12 Dec 2023 13:52:26 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: https://cloud.alerts.savethechildren.org
timing-allow-origin: *
cache-control: no-cache, no-store
access-control-allow-credentials: true
x-content-type-options: nosniff
vary: accept-encoding
content-encoding: gzip
X-Firefox-Spdy: h2
px.mountain.com/st?ga_tracking_id=G-3Q74QDHYNS&ga_client_id=941472799.1701784353&shpt=Email%20Preference%20Center%20%7C%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22G-3Q74QDHYNS%22%2C%22ga_client_id%22%3A%22941472799.1701784353%22%2C%22shpt%22%3A%22Email%20Preference%20Center%20%7C%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%221701784353.1%22%2C%22mntnis%22%3A%22ciFMMu8%2FSCFuU6MKAMXz7psQxb3UNdT9%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A9%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%7D&dcm_cid=1701784353.1&available_ga=%5B%7B%22id%22%3A%22G-KG696PWF7Y%22%2C%22sess_id%22%3A%221701784353%22%7D%2C%7B%22id%22%3A%22UA-85748307-2%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=G-3Q74QDHYNS&dxver=4.0.0&shaid=32293&plh=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3FsfmcEmail%3DJames.Ogilvie-Battersby%40saint-gobain.com%26cid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&cb=26392157687852424&term=value&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue
52.89.99.220200 OK 2.3 kB URL GET HTTP/1.1 px.mountain.com/st?ga_tracking_id=G-3Q74QDHYNS&ga_client_id=941472799.1701784353&shpt=Email%20Preference%20Center%20%7C%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22G-3Q74QDHYNS%22%2C%22ga_client_id%22%3A%22941472799.1701784353%22%2C%22shpt%22%3A%22Email%20Preference%20Center%20%7C%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%221701784353.1%22%2C%22mntnis%22%3A%22ciFMMu8%2FSCFuU6MKAMXz7psQxb3UNdT9%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A9%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%7D&dcm_cid=1701784353.1&available_ga=%5B%7B%22id%22%3A%22G-KG696PWF7Y%22%2C%22sess_id%22%3A%221701784353%22%7D%2C%7B%22id%22%3A%22UA-85748307-2%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=G-3Q74QDHYNS&dxver=4.0.0&shaid=32293&plh=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3FsfmcEmail%3DJames.Ogilvie-Battersby%40saint-gobain.com%26cid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&cb=26392157687852424&term=value&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue
IP 52.89.99.220:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerGoDaddy.com, Inc.
Subject*.mountain.com
Fingerprint60:38:AB:C1:29:01:0A:9E:70:DF:E1:A9:65:7C:E4:4D:66:48:51:62
ValidityMon, 12 Jun 2023 16:30:05 GMT - Sun, 23 Jun 2024 07:06:21 GMT
File type ASCII text, with very long lines (2325), with no line terminators
Hash 6a47e9f4f6b02d520a930952785af1ea
18bdf21ee43cb2429be517e2433f4e8133b22a93
2493fc7eafe6bb3b14eed02488ea72ffe8bacbf706b3c58b2100ba87d7489cb4
GET /st?ga_tracking_id=G-3Q74QDHYNS&ga_client_id=941472799.1701784353&shpt=Email%20Preference%20Center%20%7C%20Save%20the%20Children&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22G-3Q74QDHYNS%22%2C%22ga_client_id%22%3A%22941472799.1701784353%22%2C%22shpt%22%3A%22Email%20Preference%20Center%20%7C%20Save%20the%20Children%22%2C%22dcm_cid%22%3A%221701784353.1%22%2C%22mntnis%22%3A%22ciFMMu8%2FSCFuU6MKAMXz7psQxb3UNdT9%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A9%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%7D&dcm_cid=1701784353.1&available_ga=%5B%7B%22id%22%3A%22G-KG696PWF7Y%22%2C%22sess_id%22%3A%221701784353%22%7D%2C%7B%22id%22%3A%22UA-85748307-2%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=G-3Q74QDHYNS&dxver=4.0.0&shaid=32293&plh=https%3A%2F%2Fcloud.alerts.savethechildren.org%2Fpreferencecenter%3FsfmcEmail%3DJames.Ogilvie-Battersby%40saint-gobain.com%26cid%3DEmail%3ASFMC%3AFull_Circle%3ANew_Leads%3A120423%26s_subsrc%3D%7C%7C%7C113291%7C%7C&cb=26392157687852424&term=value&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Tue, 05 Dec 2023 13:52:28 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=878b8b3d-9375-11ee-ae80-09feaeb9f8ed;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 0
server: istio-envoy
connection: close
transfer-encoding: chunked
fonts.googleapis.com/css2?family=Lato&family=Oswald:wght@500&display=swap
142.250.74.106200 OK 2.6 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Lato&family=Oswald:wght@500&display=swap
IP 142.250.74.106:443
Requested by https://cloud.alerts.savethechildren.org/preferencecenter?sfmcEmail=James.Ogilvie-Battersby@saint-gobain.com&cid=Email:SFMC:Full_Circle:New_Leads:120423&s_subsrc=|||113291||
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (2674), with no line terminators
Hash a54ee48ee6a36dc1d2c99d4b6f9a8bfb
88b9049a45b7e4345b1885588d5854997ed3d600
f2ed8f8bb62ce8e768cc118ba27b8e01db80256bf7aeeb4d1327de012b883410
GET /css2?family=Lato&family=Oswald:wght@500&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud.alerts.savethechildren.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 05 Dec 2023 13:52:25 GMT
date: Tue, 05 Dec 2023 13:52:25 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2