Chla.org - Secure1.chla.org

Age:          1
Date: Mon, 26 Jan 2026 14:56:22 GMT
Connection: Keep-Alive
Via: NS-CACHE-10.0: 101
ETag: "KXBMFPEJKDTXRPZXY"
Server: Apache
Location: http://connect.chla.org/
Content-Length: 208
Content-Type: text/html; charset=iso-8859-1

HTTP/1.1 301 Moved Permanently
Age:          1
Date: Mon, 26 Jan 2026 14:56:23 GMT
Connection: Keep-Alive
Via: NS-CACHE-10.0: 101
ETag: "KXBMFPEJKDWRNTYXY"
Server: Apache
Location: http://connect.chla.org/site/PageServer
Content-Length: 247
Content-Type: text/html; charset=iso-8859-1

HTTP/1.1 302 302
Date: Mon, 26 Jan 2026 14:56:23 GMT
Server: Apache
X-Content-Type-Options: nosniff
Cache-Control: no-store
Pragma: no-cache
Set-Cookie: JSESSIONID=8EBC1518FD2179AB54ECA47D6655A070.app20112a; Path=/; HttpOnly
Set-Cookie: JSESSIONID=8EBC1518FD2179AB54ECA47D6655A070.app20112a; Path=/
Set-Cookie: JSESSIONID=8EBC1518FD2179AB54ECA47D6655A070.app20112a;Path=/site/CRConsAPI; Secure; SameSite=None;
Set-Cookie: JSESSIONID=8EBC1518FD2179AB54ECA47D6655A070.app20112a;Path=/site/CrmRest; Secure; SameSite=None;
Set-Cookie: JSESSIONID=8EBC1518FD2179AB54ECA47D6655A070.app20112a;Path=/site/AnonymousLogin; Secure; SameSite=None;
Set-Cookie: JSESSIONID=8EBC1518FD2179AB54ECA47D6655A070.app20112a;Path=/site/CRDonationAPI; Secure; SameSite=None;
Content-Security-Policy: frame-ancestors 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com ad.ipredictive.com; report-uri http://connect.chla.org/site/XFrameViolation
Content-Security-Policy: frame-src 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com ad.ipredictive.com *.chla.org *.convio.net *.blackbaud.com *.widen.net  chla.org convio.net blackbaud.com widen.net; report-uri http://connect.chla.org/site/XFrameViolation
X-Frame-Options: allow-from 'self' *.facebook.com *.salesforce.com *.convio.net *.google.com *.force.com facebook.com salesforce.com convio.net google.com force.com ad.ipredictive.com
Location: http://www.chla.org/ways-help
Content-Length: 0
Content-Type: text/html

HTTP/1.1 403 Forbidden
Date: Mon, 26 Jan 2026 14:56:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server-timing: chlray;desc="9c40db52cf833647"
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 9c40db52cf833647-FRA
Content-Encoding: gzip