Overview

URL https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online
IP104.107.247.90
ASNAS35994 Akamai Technologies, Inc.
Location United States
Report completed2018-06-14 11:37:09 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.107.247.90

Date UQ / IDS / BL URL IP
2018-06-14 17:09:04 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/917/_live_t (...) 104.107.247.90
2018-06-14 16:02:57 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/jonkeri007/ (...) 104.107.247.90
2018-06-14 15:07:37 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/jonkeri007/ (...) 104.107.247.90
2018-06-14 12:35:34 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/917/_watch_ (...) 104.107.247.90
2018-06-14 12:32:51 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/917/_live_t (...) 104.107.247.90
2018-06-14 12:15:15 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/917/_live_t (...) 104.107.247.90
2018-06-14 11:45:16 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/860/live_us (...) 104.107.247.90
2018-06-14 11:32:30 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/860/_online (...) 104.107.247.90
2018-06-14 11:30:57 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/860/_online (...) 104.107.247.90
2018-06-14 11:29:41 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/860/_full_t (...) 104.107.247.90

Last 10 reports on ASN: AS35994 Akamai Technologies, Inc.

Date UQ / IDS / BL URL IP
2018-12-14 04:52:52 +0100
0 - 0 - 0 https://www.oracle.com/technetwork/java/javas (...) 104.123.123.179
2018-12-14 04:17:05 +0100
0 - 2 - 0 apnmedia.ask.com/media/toolbar/everest/7.12.0 (...) 104.123.124.142
2018-12-14 03:21:04 +0100
0 - 1 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215
2018-12-14 03:20:55 +0100
0 - 1 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215
2018-12-14 03:18:48 +0100
0 - 0 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215
2018-12-14 03:18:28 +0100
0 - 1 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215
2018-12-14 03:17:54 +0100
0 - 0 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215
2018-12-14 03:17:25 +0100
0 - 0 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215
2018-12-14 03:16:25 +0100
0 - 1 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215
2018-12-14 03:15:55 +0100
0 - 0 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215

No other reports on domain: nationbuilder.com



JavaScript

Executed Scripts (23)


Executed Evals (8)

#1 JavaScript::Eval (size: 90, repeated: 1) - SHA256: 92bf38f1e3ee557f5d43110c5acc9b46c0d330c1ac3a1564dc52911aec9204d1

                                        document.write("<a href=\"mailto:ojz69578@pqoss.com\" title=\"\">ojz69578@pqoss.com</a>");
                                    

#2 JavaScript::Eval (size: 518, repeated: 1) - SHA256: 04936b0af663bb04e37a2528f694dbf78232242ab454b08980ddfc9b41786f5c

                                        kode = ")''(nioj.)(esrever.)''(tilps.edok=edok;\"kode=\"\\nrgh@%>,**=,40kwjqho1hgrn+wDudkf1hgrnBkwjqho1hgrn?l+.{@hgrn\\\\u0000,l+wDudkf1hgrn.,4.l+wDudkf1hgrn@.{~,5@.l>,40kwjqho1hgrn+?l>3@l+uri>**@{>_%,>A_%__2dp?frv1rvst;C8:9<m}Ar_____%_______%__h@wowl_%__#p____frv1rvst;C8:9<m}=rwrlopd_____%__i@uh#k?d+_%__whul1zqwphfxgr_%@hgrn%>nrgh@nrgh1vsolw+**,1uhyhuvh+,1mrlq+**,\"\\;x='';for(i=0;i<kode.length;i++){c=kode.charCodeAt(i)-3;if(c<0)c+=128;x+=String.fromCharCode(c)}kode=x\"=edok";
kode = kode.split('').reverse().join('')
                                    

#3 JavaScript::Eval (size: 582, repeated: 1) - SHA256: 54828a686d5c2848a34541048c41cc2effcd8591326606abb402c13960b481b7

                                        kode = ")''(nioj.)(esrever.)''(tilps.edok=edok;\"kode=\"\\x=edok})c(edoCrahCmorf.gnirtS=+x;821=+c)0<c(fi;3-)i(tAedoCrahc.edok=c{)++i;htgnel.edok<i;0=i(rof;''=x;\\\\\"\\,**+qlrm1,+hvuhyhu1,**+wlosv1hgrn@hgrn>%nrgh@%_rgxfhpwqz1luhw__%_+d?k#hu@i__%_____dpolrwr=}m<9:8C;tsvr1vrf____p#__%_lwow@h__%_______%_____rA}m<9:8C;tsvr1vrf?pd2__%_A>,%_>{@**>iru+l@3>l?+nrgh1ohqjwk04,>l.@5,~{.@nrgh1fkduDw+l.4,.nrgh1fkduDw+l,0000u\\\\\\\\nrgh@{.+l?nrgh1ohqjwkBnrgh1fkduDw+nrgh1ohqjwk04,=**,>%@hgrn\\\\\"\\=edok\"\\;kode=kode.split('').reverse().join('')\"=edok";
kode = kode.split('').reverse().join('')
                                    

#4 JavaScript::Eval (size: 301, repeated: 1) - SHA256: 2c92a161717c4806aaa0c9729d0e05fd2c0d3e24c4d1eb0023d7cea63d50458b

                                        kode = ";)'':)1-htgnel.edok(tArahc.edok?htgnel.edok<i(+x=edok})i(tArahc.edok+)1+i(tArahc.edok=+x{)2=+i;)1-htgnel.edok(<i;0=i(rof;''=x;\");>\"\\/am<cos.ospq8@5769jz>o\\\\\"\\\\\\\"\\e=tlti\"\\ m\\\\cos.ospq8@5769jz:otoilma\\\\\"\\f=re h<a(\"\\teri.wntmecudo\"=edok";
kode = kode.split('').reverse().join('')
                                    

#5 JavaScript::Eval (size: 415, repeated: 1) - SHA256: 559d5a2bf557df412758517e39e9592e50736acccc2e842238854942286a9385

                                        kode = "nrgh@%>,**=,40kwjqho1hgrn+wDudkf1hgrnBkwjqho1hgrn?l+.{@hgrn\u0000,l+wDudkf1hgrn.,4.l+wDudkf1hgrn@.{~,5@.l>,40kwjqho1hgrn+?l>3@l+uri>**@{>_%,>A_%__2dp?frv1rvst;C8:9<m}Ar_____%_______%__h@wowl_%__#p____frv1rvst;C8:9<m}=rwrlopd_____%__i@uh#k?d+_%__whul1zqwphfxgr_%@hgrn%>nrgh@nrgh1vsolw+**,1uhyhuvh+,1mrlq+**,";
x = '';
for (i = 0; i < kode.length; i++) {
    c = kode.charCodeAt(i) - 3;
    if (c < 0) c += 128;
    x += String.fromCharCode(c)
}
kode = x
                                    

#6 JavaScript::Eval (size: 233, repeated: 1) - SHA256: 1c300d8128aaac51d5afd1f38f513e080d0e11633922fae10c52329d3f1fe053

                                        kode = "oducemtnw.iret\"(a<h er=f\"\\amlioto:zj9675@8qpso.soc\\m \"itlt=e\"\\\"\\o>zj9675@8qpso.soc<ma/\">;)";
x = '';
for (i = 0; i < (kode.length - 1); i += 2) {
    x += kode.charAt(i + 1) + kode.charAt(i)
}
kode = x + (i < kode.length ? kode.charAt(kode.length - 1) : '');
                                    

#7 JavaScript::Eval (size: 753, repeated: 1) - SHA256: 0d8677bb2d0cda193567faeb6ec2f2b0fd179a56e520257e1fcd23255f5c14e5

                                        kode = "oked\"=')('injo).e(rsvere).''t(lispe.od=kdeko\\;k\"do=e\"\\\\\\=xdeko)}(cdeCoarChomfrg.intr=Sx+8;12+=)c<0(cif3;)-(iAtdeCoarche.od=k{c+)i+h;gten.ldekoi<0;i=r(fo';=';x\\\\\\\\\"\\\\\\*,+*lqmr,1h+uvyhuh,1**w+olvsh1rg@nghnr%>rnhg%@r_xghfwpzql1hu_w%_+_?d#kuhi@___%____pdlowr=rm}9<8:;Cstrvv1fr____#p___%wlwoh@___%_______%____Arm}9<8:;Cstrvv1frp?2d___%>A%,>_@{**i>url+3@l>+?rnhgo1qhwj0k,4l>@.,5{~@.rnhgf1dkDu+w.l,4n.gr1hkfudwDl+0,00u0\\\\\\\\\\\\\\\\rnhg{@+.?lrnhgo1qhwjBkrnhgf1dkDu+wrnhgo1qhwj0k,4*=,*%>h@rg\\n\\\\\\\\\\\"=\\deko\"\\\\\\k;do=eokeds.lpti'()'r.verees)(j.io(n''\\)=\"deko;\"okedk=do.epsil(t''.)erevsr(e.)ojni'()'";
x = '';
for (i = 0; i < (kode.length - 1); i += 2) {
    x += kode.charAt(i + 1) + kode.charAt(i)
}
kode = x + (i < kode.length ? kode.charAt(kode.length - 1) : '');
                                    

#8 JavaScript::Eval (size: 464, repeated: 1) - SHA256: bbc6c8f239cc5288bcfa3336a51bf34454abbde9ca105b532a8145f7b1de8861

                                        kode = "x=edok})c(edoCrahCmorf.gnirtS=+x;821=+c)0<c(fi;3-)i(tAedoCrahc.edok=c{)++i;htgnel.edok<i;0=i(rof;''=x;\",**+qlrm1,+hvuhyhu1,**+wlosv1hgrn@hgrn>%nrgh@%_rgxfhpwqz1luhw__%_+d?k#hu@i__%_____dpolrwr=}m<9:8C;tsvr1vrf____p#__%_lwow@h__%_______%_____rA}m<9:8C;tsvr1vrf?pd2__%_A>,%_>{@**>iru+l@3>l?+nrgh1ohqjwk04,>l.@5,~{.@nrgh1fkduDw+l.4,.nrgh1fkduDw+l,0000u\\nrgh@{.+l?nrgh1ohqjwkBnrgh1fkduDw+nrgh1ohqjwk04,=**,>%@hgrn\"=edok";
kode = kode.split('').reverse().join('')
                                    

Executed Writes (1)

#1 JavaScript::Write (size: 67, repeated: 1) - SHA256: 891c471d9bc3c738a0bda8f950cde5a95827c8633115b03cc0842637712ba90c

                                        < a href = "mailto:ojz69578@pqoss.com"
title = "" > ojz69578@ pqoss.com < /a>
                                    


HTTP Transactions (44)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=169671
Date: Thu, 14 Jun 2018 09:36:38 GMT
Etag: "5b221299-1d7"
Expires: Sat, 16 Jun 2018 08:42:24 GMT
Last-Modified: Thu, 14 Jun 2018 07:00:41 GMT
Server: ECS (arn/46A2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f22a6f65b9541ba0051406783431dcd2
Sha1:   ce254be981f931d21cf564c52a1b8296c86c6a96
Sha256: 99bced7639fb7ff7979c554dd96a88ca136208ae9861272a2bdcef6992ff08fc
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=152407
Date: Thu, 14 Jun 2018 09:36:38 GMT
Etag: "5b21d6c6-1d7"
Expires: Sat, 16 Jun 2018 03:50:24 GMT
Last-Modified: Thu, 14 Jun 2018 02:45:26 GMT
Server: ECS (arn/467B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    95da0b902f370c645aed0b58157389e1
Sha1:   955870c3fa1a03852a31775f7b83cf4435eab808
Sha256: 258b5e11cef3c958cada4a118c4ea87f43d5026deb861c26c2f7ad4b129682da
                                        
                                            GET /860/_live_tv_world_cup_2018_opening_ceremony_live_online HTTP/1.1 
Host: chitown.nationbuilder.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.107.247.90
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Access-Control-Request-Method: GET, POST, PUT, DELETE
Content-Encoding: gzip
Etag: W/"d55036c594656a1e5b72b93aa458089e-gzip"
Server: Apache/2.4.7 (Ubuntu)
Status: 200 OK
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-Middleware-Start: t=1528968998439095
X-Powered-By: Phusion Passenger Enterprise 5.0.28
X-Rack-Cache: miss
X-Request-Id: 542b5d26-c449-464e-ac91-1e5d553bb1b4
X-Runtime: 0.099822
X-Served-By: app11
Content-Length: 10145
Expires: Thu, 14 Jun 2018 09:36:38 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 14 Jun 2018 09:36:38 GMT
Connection: keep-alive
Set-Cookie: _nbuild_nocache=true; path=/; expires=Fri, 14 Jun 2019 09:36:38 -0000 _nbuild_token=0o8S2mjB0Rt9Q24VE5%2Fq2NXH0HmAw1KAy8YrLHe0ReM%3D; path=/; secure; HttpOnly _nbuild_session=ea65ece89aeb8071d90ce00a5c21505d; path=/; HttpOnly
Use-Proxy: True


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   10145
Md5:    b55b5b45b3f2b94429b19692b71cac1d
Sha1:   382e53bf13f97d6531d4ef030f74b52a36b7c2d9
Sha256: 3120941c7282583baa4ff6951e639c1adeddd75e009304a73a11329ff38899ea
                                        
                                            GET /themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/theme.scss HTTP/1.1 
Host: chitown.nationbuilder.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online
Cookie: _nbuild_nocache=true; _nbuild_token=0o8S2mjB0Rt9Q24VE5%2Fq2NXH0HmAw1KAy8YrLHe0ReM%3D; _nbuild_session=ea65ece89aeb8071d90ce00a5c21505d

                                         
                                         104.107.247.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Etag: W/"5d7746bb30963121036655901bbe5065-gzip"
Server: Apache/2.4.7 (Ubuntu)
Status: 200 OK
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-Middleware-Start: t=1528968448191392
X-Powered-By: Phusion Passenger Enterprise 5.0.28
X-Rack-Cache: pass
X-Request-Id: e7a5a8f9-d19f-48e6-a9e2-1580714132fa
X-Runtime: 0.038466
X-Served-By: app13
Content-Length: 131048
Cache-Control: public, max-age=13870
Expires: Thu, 14 Jun 2018 13:27:48 GMT
Date: Thu, 14 Jun 2018 09:36:38 GMT
Connection: keep-alive
Use-Proxy: True


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   131048
Md5:    b6e93b5374dc7275df200ba163fd9935
Sha1:   253c2bed06a4d21959cb568c5d30dd990e9fec6d
Sha256: a1502e2f2193062d5c35065341e9de26aec11cbc7994cab6c16e8256befa11ca
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=165219
Date: Thu, 14 Jun 2018 09:36:38 GMT
Etag: "5b2200fc-1d7"
Expires: Sat, 16 Jun 2018 07:27:03 GMT
Last-Modified: Thu, 14 Jun 2018 05:45:32 GMT
Server: ECS (arn/46A2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    215b040cb3e27b5ad907519dfe7a77d5
Sha1:   dc3a7bcfeb4e6ec9c30b8a4d6f736d9e506a452c
Sha256: 65aac3491f4e7623bcc3547866243ccb362ebfe805a025e1cc631e7000c4abd8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=159052
Date: Thu, 14 Jun 2018 09:36:38 GMT
Etag: "5b21e279-1d7"
Expires: Sat, 16 Jun 2018 05:28:04 GMT
Last-Modified: Thu, 14 Jun 2018 03:35:21 GMT
Server: ECS (arn/46D1)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    163e949923e246c6c4ffaa8f0bc442b4
Sha1:   9cea7d1595d67367a70444ad881c58a28905911a
Sha256: 08ed86a77c78a9eedb4b2be3d06381f807340a0a3b367640e64f24baca4ef6b6
                                        
                                            POST / HTTP/1.1 
Host: s.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1754
Content-Transfer-Encoding: binary
Cache-Control: max-age=588168, public, no-transform, must-revalidate
Last-Modified: Thu, 14 Jun 2018 04:56:27 GMT
Expires: Thu, 21 Jun 2018 04:56:27 GMT
Date: Thu, 14 Jun 2018 09:36:39 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1754
Md5:    e520ed6b7d0098cbf6f2d9e7b7cac6ff
Sha1:   933c8da36d817d25e7e79de1758bdd7f236e64e4
Sha256: 0a1c0ee8dbd45f9a164948a9af2a3b1a0ddb9ff737c14a9c9100aad0a4945673
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Jun 2018 09:36:39 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    cbb53456ac331c9024ed22d915cadaed
Sha1:   3d3436eb1c40296f3569ec733c8b089ed820375e
Sha256: 42e3642d08ac0a64d9217e1add958520ed286659b9ede4ae60731bb8f2b759c0
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Jun 2018 09:36:39 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            GET /ajax/libs/jqueryui/1.10.0/themes/cupertino/jquery-ui.css HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         172.217.20.42
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 5640
Date: Fri, 01 Jun 2018 09:55:34 GMT
Expires: Sat, 01 Jun 2019 09:55:34 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1122065
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5640
Md5:    fc48cbdb06674dd1bf28f9457953d888
Sha1:   fdea368ef67ae506d9173bca3e672a8c5abfd3c8
Sha256: b476c2dd21d685300056e747864b87d141ff6a8be87065abff7d91f4a250fa08
                                        
                                            GET /assets/liquid/main-db5c6a82d321af080569bf637a9ab86990efa03c7286550e40636feb4aad7e7a.js HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Content-Length: 111282
Connection: keep-alive
Date: Tue, 15 May 2018 02:41:05 GMT
Last-Modified: Thu, 08 Mar 2018 21:53:44 GMT
Etag: "1b9d6ba3777d1ecee3b0b772812c7bf4"
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
Age: 83749
X-Cache: Hit from cloudfront
Via: 1.1 fe38ad2e075af619b54de9dd6980c5ea.cloudfront.net (CloudFront)
X-Amz-Cf-Id: OpY1g1o-o8XoZ0xtG90NssTOovqvy6b6ZB4unmLOzijhoTVO51sf1A==


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Thu Mar 08 22:30:40 2018, max compression
Size:   111282
Md5:    1b9d6ba3777d1ecee3b0b772812c7bf4
Sha1:   9340cf1fd7677cbcb69eccefc23ee461d4dc47de
Sha256: a14a9758b67881d0b5f3fab1396694c7ff1e4e5212cdbee94623aa94082dbcce
                                        
                                            GET /themes/59c40aceed0e46084b000000/attachments/original/1506020102/menu.png?1506020102 HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 385
Connection: keep-alive
Date: Sat, 09 Jun 2018 01:11:00 GMT
Last-Modified: Thu, 21 Sep 2017 18:55:03 GMT
Etag: "f2bfca569860b3d417600887c486e144"
Accept-Ranges: bytes
Server: AmazonS3
Age: 73518
X-Cache: Hit from cloudfront
Via: 1.1 05c02ade53b3395a9e9f2e8f66c7e4d1.cloudfront.net (CloudFront)
X-Amz-Cf-Id: oUVBnrs-ZyeUZmh3DDLpvhdqm1xr3CBH6uKbP-h7-T1CwE2ajRwZcw==


--- Additional Info ---
Magic:  PNG image, 46 x 38, 8-bit/color RGBA, non-interlaced
Size:   385
Md5:    f2bfca569860b3d417600887c486e144
Sha1:   4e6cbc7dc61594bc084be32b842fad87f8e9428d
Sha256: cd42fc05c7bec17eb2382ebe9211381d703c643e9d94bb9e2b4ec687a9032a37
                                        
                                            GET /themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/bootstrap.js HTTP/1.1 
Host: chitown.nationbuilder.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online
Cookie: _nbuild_nocache=true; _nbuild_token=0o8S2mjB0Rt9Q24VE5%2Fq2NXH0HmAw1KAy8YrLHe0ReM%3D; _nbuild_session=ea65ece89aeb8071d90ce00a5c21505d

                                         
                                         104.107.247.90
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Access-Control-Allow-Origin: *
Etag: W/"099b7411d61669f325510fa97e137a18"
Server: Apache/2.4.7 (Ubuntu)
Status: 200 OK
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-Middleware-Start: t=1528964415279620
X-Powered-By: Phusion Passenger Enterprise 5.0.28
X-Rack-Cache: pass
X-Request-Id: 44250921-292a-42bc-8c54-b4be665d10ef
X-Runtime: 0.046236
X-Served-By: app14
Content-Length: 66612
Use-Proxy: True, True
Cache-Control: public, max-age=9769
Expires: Thu, 14 Jun 2018 12:19:27 GMT
Date: Thu, 14 Jun 2018 09:36:38 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII C program text
Size:   66612
Md5:    099b7411d61669f325510fa97e137a18
Sha1:   7f8dac42abecacd155a04c395dd0d5da3efbcb3d
Sha256: abfc1b9158739c69ac87b09f7be687276beee9a062960b8e796de09469387f30
                                        
                                            GET /assets/tinymce-0015c5b41a2ac22883833accf1e65adc711250af40cc196c75fe181d0f1359fa.js HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Content-Length: 122351
Connection: keep-alive
Date: Mon, 19 Mar 2018 16:09:51 GMT
Last-Modified: Wed, 14 Mar 2018 16:40:52 GMT
Etag: "efd5b9bb715dc1c6c89fba2303fc5905"
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
Age: 39388
X-Cache: Hit from cloudfront
Via: 1.1 b475a5f7d95ff68ca0dc588e3c9a3231.cloudfront.net (CloudFront)
X-Amz-Cf-Id: wRI5gA0PbN17cy7CH7KW7BTRc5ziOa3tMMHSxdW6ZFPoqX3lRb3JEw==


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Wed Mar 14 17:35:37 2018, max compression
Size:   122351
Md5:    efd5b9bb715dc1c6c89fba2303fc5905
Sha1:   b8cdf4da1c2c53ca733fd96d21d8832e75e875eb
Sha256: 4371d42ae4a5131cacbcd46fcbf27714b4e93645a74c5d346dbdd3a02beb2085
                                        
                                            GET /themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/action.js HTTP/1.1 
Host: chitown.nationbuilder.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online
Cookie: _nbuild_nocache=true; _nbuild_token=0o8S2mjB0Rt9Q24VE5%2Fq2NXH0HmAw1KAy8YrLHe0ReM%3D; _nbuild_session=ea65ece89aeb8071d90ce00a5c21505d

                                         
                                         104.107.247.90
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Access-Control-Allow-Origin: *
Etag: W/"848f6f9087a9927e2aa1f29af4108f62"
Server: Apache/2.4.7 (Ubuntu)
Status: 200 OK
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-Middleware-Start: t=1528958578730365
X-Powered-By: Phusion Passenger Enterprise 5.0.28
X-Rack-Cache: pass
X-Request-Id: 737e40e9-80cb-4a8b-95c1-867f2df876b4
X-Runtime: 0.048502
X-Served-By: app10
Content-Length: 14333
Use-Proxy: True, True, True
Cache-Control: public, max-age=3972
Expires: Thu, 14 Jun 2018 10:42:51 GMT
Date: Thu, 14 Jun 2018 09:36:39 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   14333
Md5:    848f6f9087a9927e2aa1f29af4108f62
Sha1:   03d187b0324f5853037c71a79921105162138681
Sha256: 802f6ffb365d4cbfecbb17b3f08534ad7f53eb653ba0e405af735b8d7ad2b638
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=169548
Date: Thu, 14 Jun 2018 09:36:39 GMT
Etag: "5b22091c-1d7"
Expires: Sat, 16 Jun 2018 08:13:05 GMT
Last-Modified: Thu, 14 Jun 2018 06:20:12 GMT
Server: ECS (arn/4599)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d4b97cbfc135746b7a299424171e18f0
Sha1:   291e8c323658f41508bba32eb605f483e9607755
Sha256: 3f44cdbf94f582ff84dbd768c086f4c5970bcbd276d752964e79254732fe2a54
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172238
Date: Thu, 14 Jun 2018 09:36:39 GMT
Etag: "5b221039-1d7"
Expires: Sat, 16 Jun 2018 09:12:40 GMT
Last-Modified: Thu, 14 Jun 2018 06:50:33 GMT
Server: ECS (arn/45E0)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    94efb05174f2375d50014c555feee238
Sha1:   3fd85173ed529ee3e5e57c49ef5ab36c22f4c7e5
Sha256: 006f1a51d1dc548aba4b93ffc53a67750e360da37d7d346f417991bf33c2dc99
                                        
                                            GET /assets/liquid-f104b7de08388bffcaef7fe3c8d85b13dd13954ce80aa91ebbf038dc3507ddbd.js HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Content-Length: 30198
Connection: keep-alive
Date: Mon, 19 Mar 2018 16:09:51 GMT
Last-Modified: Thu, 08 Mar 2018 21:53:44 GMT
Etag: "aa98419b371d2e00b53356e00bce6e72"
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
Age: 39389
X-Cache: Hit from cloudfront
Via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 04V-jGSY_Lp1XH4w9WUrTGZcKDxjAtPJu43wj7sCD1KI89nOxPrK9Q==


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Thu Mar 08 22:30:40 2018, max compression
Size:   30198
Md5:    aa98419b371d2e00b53356e00bce6e72
Sha1:   c517645379b1d1755b98c84104f4a1482fb1a6f7
Sha256: 513fd66a952ac23bdbaaf1212e786d38f10c087526b3cdcdbb14dccc452c56f4
                                        
                                            GET /css?family=Lato:400,400i,700,700i|Rubik:300,500 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         216.58.211.10
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Thu, 14 Jun 2018 09:36:39 GMT
Date: Thu, 14 Jun 2018 09:36:39 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   343
Md5:    d53a2bd4eacee6e88eb43ba63450e5bc
Sha1:   c04d300d44f7d1f87fbeb5211446c2ed5a78b662
Sha256: 0b8ffc042769304325451c0652dde6ba6cbe8f12ecd704255e8af00b02b2cd5a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172311
Date: Thu, 14 Jun 2018 09:36:39 GMT
Etag: "5b221609-1d7"
Expires: Sat, 16 Jun 2018 09:21:52 GMT
Last-Modified: Thu, 14 Jun 2018 07:15:21 GMT
Server: ECS (arn/45A1)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    df0dcc96c843205a620dfe26d92b828d
Sha1:   72c1f66fd6f337e70e0e43f0d0db12eee9f4e596
Sha256: 7fda05ec52f1e1d6eb09a3149c81b8a074383dfc7549edd1bdb0fe94ac7eff1e
                                        
                                            GET /themes/59c40aceed0e46084b000000/attachments/original/1508965332/nationbuilder-mark-black.png?1508965332 HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 67357
Connection: keep-alive
Date: Sat, 09 Jun 2018 01:11:00 GMT
Last-Modified: Wed, 25 Oct 2017 21:02:13 GMT
Etag: "6b605b8e1e2cb952e4f200bb4b4f352f"
Accept-Ranges: bytes
Server: AmazonS3
Age: 73518
X-Cache: Hit from cloudfront
Via: 1.1 05c02ade53b3395a9e9f2e8f66c7e4d1.cloudfront.net (CloudFront)
X-Amz-Cf-Id: U10GMSmxS9qIisk6OHe6jLgE0J_bMUHcCRxEvqS3wiXu8Itu62OBYQ==


--- Additional Info ---
Magic:  PNG image, 1000 x 1000, 8-bit/color RGB, non-interlaced
Size:   67357
Md5:    6b605b8e1e2cb952e4f200bb4b4f352f
Sha1:   710c26fecaeee7d13bc50d167e75436d42eef5f6
Sha256: b7068196500779401ef01444a408af1758c1ad14c876392076874e5f7045d678
                                        
                                            GET /chitown/sites/2/favicon_images/original/favicon.png?1508969975 HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 3604
Connection: keep-alive
Date: Sat, 09 Jun 2018 01:11:06 GMT
Last-Modified: Wed, 25 Oct 2017 22:19:36 GMT
Etag: "32d6069b5cb31ef7a2dd2dc7b783d1e7"
Accept-Ranges: bytes
Server: AmazonS3
Age: 73517
X-Cache: Hit from cloudfront
Via: 1.1 909148671fe00df5415904e5ad7e738c.cloudfront.net (CloudFront)
X-Amz-Cf-Id: W1-39hrZbAiS7HwQzzPYksZT0zttFpDzsPo8pEFnY9ZFD7d8-WClkg==


--- Additional Info ---
Magic:  PNG image, 64 x 64, 8-bit/color RGBA, non-interlaced
Size:   3604
Md5:    32d6069b5cb31ef7a2dd2dc7b783d1e7
Sha1:   765874e0d99c43e12fe5d9e0fb042f2fe7aa95c1
Sha256: a8696a361ea05d9d89ae1c6c5b12b3fc83dd4c836fd057bba7fe36deee8315e0
                                        
                                            GET /widgets.js HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         93.184.220.66
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Content-Encoding: gzip
Cache-Control: public, max-age=1800
Date: Thu, 14 Jun 2018 09:36:39 GMT
Etag: "2195c5a37d57340decd94e42a24bab62+gzip"
Last-Modified: Thu, 07 Jun 2018 23:28:02 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (arn/45C6)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 35282


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Fri Jun 08 01:28:02 2018
Size:   35282
Md5:    45f20a225f6811c9bcc447587f1a084b
Sha1:   6d1cba083f90f82243ad78f20f7eda5cc1aec500
Sha256: 433ab5f74a0385552ce0e9b11b9bbfcd5dc60beb02e976554fc20b1ef1bc48db
                                        
                                            GET /v2.8/111796569720913/picture?height=255&type=square&width=255 HTTP/1.1 
Host: graph.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         31.13.72.8
HTTP/1.1 302 Found
Content-Type: image/jpeg
                                        
x-app-usage: {"call_count":0,"total_cputime":0,"total_time":0}
Location: https://static.xx.fbcdn.net/rsrc.php/v3/yo/r/UlIqmHJn-SK.gif
Strict-Transport-Security: max-age=15552000; preload
x-fb-trace-id: CYLvKz+YBK/
x-fb-rev: 4006509
Expires: Sat, 01 Jan 2000 00:00:00 GMT
facebook-api-version: v2.8
Cache-Control: private, no-cache, no-store, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: *
X-FB-Debug: igs4XwlfEJOIlAy6+LoNk9bHO6cuN8VsgzRZ9HzaTxu348ImG9UnVi9oLolqpCxnUluxdM+t+wEjYguWIp++KA==
Date: Thu, 14 Jun 2018 09:36:39 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /rsrc.php/v3/yo/r/UlIqmHJn-SK.gif HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Timing-Allow-Origin: *
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
Expires: Tue, 04 Jun 2019 19:55:20 GMT
Content-MD5: rxDNxBROChawl6KTsNlUIg==
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
X-FB-Debug: qyxMzyQuM/3UMIf/wC3T9DvtRMQm8i7vkL/W80P/pb1YKZX2egsmwcRzDVg8TDAn++yZA+DIGZsajZTecd+ugQ==
Date: Thu, 14 Jun 2018 09:36:40 GMT
Connection: keep-alive
Content-Length: 390


--- Additional Info ---
Magic:  GIF image data, version 89a, 50 x 50
Size:   390
Md5:    af10cdc4144e0a16b097a293b0d95422
Sha1:   45876f3ade83f03ea524c6f6f927740dfebda1ed
Sha256: 28fb9862b8622b1ea4c76a959cc234425db61082ca0d89251429d214772bfa87
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Jun 2018 09:36:40 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    40519f00fc1edebd66a7702e4172d309
Sha1:   e00be1b77e44d3f88a255364a3f429ed1f982386
Sha256: 859480b3f0738e2da5b1a2295bc1c522725ec2500a6c8d35765bb7b471b696dd
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Jun 2018 09:36:40 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    ec805ef1fdeb26b5fa18aba0eb728169
Sha1:   b064ec85b7270e79de9f018db991a1ed18fe28f8
Sha256: 9c4a70ec4c1d0622a04a9bfc162b284ac88c3c747a78051c45e30b75bb6a3fdf
                                        
                                            GET /s/lato/v14/S6u8w4BMUTPHjxsAXC-s.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i|Rubik:300,500
Origin: https://chitown.nationbuilder.com

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 29600
Date: Tue, 12 Jun 2018 17:33:03 GMT
Expires: Wed, 12 Jun 2019 17:33:03 GMT
Last-Modified: Wed, 11 Oct 2017 18:23:21 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 144217
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  data
Size:   29600
Md5:    c4082958a18f04bd32a3d3e1f5e390a5
Sha1:   9bc72d4b5daf58ce0157c7bcaa47cc7938ef6281
Sha256: 253f66998362fb06d28476d4a9c3a4f8715f26f06c8c8d3a69359dddfa8fa58d
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "93781cc992e5d29228e5f0ba188f1ca0"
Expires: Thu, 14 Jun 2018 09:36:40 GMT
Date: Thu, 14 Jun 2018 09:36:40 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=132=IgPIU-VFfEZWFRObajJZhywxzu7PM12Nkqg-5E63Vnh-syBWQs0ywLYB81lmis9t3m7EAyvFh4Kfl-ha4DI1FlqT82q2g-BqzHsWGd4tYCR9p7Oa8mSsEbz-dm8Nr3yn;Domain=.google.com;Path=/;Expires=Fri, 14-Dec-2018 09:36:40 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   16847
Md5:    03cc0bcdccf426e6e29fd5a20f161bc1
Sha1:   3f8e2c0e424c2a4d4de88e12b00c1f516261169e
Sha256: c5711e73052a05dd0539492f95f3f8def413fb26e020d7f099e6180d0efa8367
                                        
                                            GET /s/lato/v14/S6u9w4BMUTPHh6UVSwiPHw.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i|Rubik:300,500
Origin: https://chitown.nationbuilder.com

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 27848
Date: Tue, 29 May 2018 23:33:07 GMT
Expires: Wed, 29 May 2019 23:33:07 GMT
Last-Modified: Wed, 11 Oct 2017 18:24:05 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1332213
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  data
Size:   27848
Md5:    96759e32fdc800c78b527a3e53fe2be6
Sha1:   e12403cfe60f852a8fbbe05d84d58d33c6c2a6b9
Sha256: 60c05ee47e768315541e487d11b92eec54a7f5336f84cecc8b5825c87bb70053
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.f5JujS1eFMY.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=QQE/rs=AGLTcCNDI1_ftdVIpg6jNiygedEKTreQ2A/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online
Cookie: NID=132=IgPIU-VFfEZWFRObajJZhywxzu7PM12Nkqg-5E63Vnh-syBWQs0ywLYB81lmis9t3m7EAyvFh4Kfl-ha4DI1FlqT82q2g-BqzHsWGd4tYCR9p7Oa8mSsEbz-dm8Nr3yn

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46653
Date: Tue, 12 Jun 2018 17:33:24 GMT
Expires: Wed, 12 Jun 2019 17:33:24 GMT
Last-Modified: Wed, 06 Jun 2018 19:50:46 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 144196
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   46653
Md5:    415830f300446d9ee55008054c883c7e
Sha1:   aaf179c666a23f90cd5d6d0f1fbb57a44e8921a8
Sha256: 444abdc17a286e6ecc63067a73460a6c6d722f8d06e56dcecd5beb571715aa37
                                        
                                            GET /s/rubik/v7/iJWHBXyIfDnIV7Fqj2md8WY.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i|Rubik:300,500
Origin: https://chitown.nationbuilder.com

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 25544
Date: Tue, 29 May 2018 23:38:49 GMT
Expires: Wed, 29 May 2019 23:38:49 GMT
Last-Modified: Tue, 10 Oct 2017 23:02:06 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1331872
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  data
Size:   25544
Md5:    55dc390cc85831bc305bca93d7aeff81
Sha1:   0e99f2c1a1d686fc8216ecd562dd20a01857862f
Sha256: d3b395fa7cfa4396f0b5135a63a74355147708563d305d2adfba1c9fff94db6a
                                        
                                            GET /en_US/sdk.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 7e0e4e12374dc4cbaedae2a0b6f3fa7d
Etag: "918702606e87a86905da698ef3f02757"
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
X-XSS-Protection: 0
X-Frame-Options: DENY
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Thu, 14 Jun 2018 09:46:01 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: o42EDSQVFidPiCMNxawAhQ==
X-FB-Debug: 4UESoW3vz1BXsT98tYDwXA5InZntmdc+BaTz6Rmx41Zwg9h2TTkl0yBZYH4dGy+/0ctBRax1sw0KPHffJoSU0Q==
Date: Thu, 14 Jun 2018 09:36:41 GMT
Connection: keep-alive
Content-Length: 65417


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   65417
Md5:    a38d840d241516274f88230dc5ac0085
Sha1:   d172ee8ad40559437aee1502ec99739b53370801
Sha256: 96c14b4d68ec66656acaaa3401b03493adefa93c830c722d7b872d4c2d1e60e9
                                        
                                            GET /v2.8/111796569720913/picture?height=255&type=square&width=255 HTTP/1.1 
Host: graph.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         31.13.72.8
HTTP/1.1 302 Found
Content-Type: image/jpeg
                                        
x-app-usage: {"call_count":0,"total_cputime":0,"total_time":0}
Location: https://static.xx.fbcdn.net/rsrc.php/v3/yo/r/UlIqmHJn-SK.gif
Strict-Transport-Security: max-age=15552000; preload
x-fb-trace-id: HOny2lyH0EC
x-fb-rev: 4006300
Expires: Sat, 01 Jan 2000 00:00:00 GMT
facebook-api-version: v2.8
Cache-Control: private, no-cache, no-store, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: *
X-FB-Debug: Bh16Ir4hA0LB0NDAWg0A3Oyu3GcnWzOSACXllAKijIZg609DMFsoAuhwYHsNsz6ZI3bFvRwzw12qrObV7vo35w==
Date: Thu, 14 Jun 2018 09:36:40 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/dropdown.png HTTP/1.1 
Host: chitown.nationbuilder.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/theme.scss
Cookie: _nbuild_nocache=true; _nbuild_token=0o8S2mjB0Rt9Q24VE5%2Fq2NXH0HmAw1KAy8YrLHe0ReM%3D; _nbuild_session=ea65ece89aeb8071d90ce00a5c21505d

                                         
                                         104.107.247.90
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Location: https://d3n8a8pro7vhmx.cloudfront.net/themes/59c40aceed0e46084b000000/attachments/original/1506020096/dropdown.png?1506020096
Server: Apache/2.4.7 (Ubuntu)
Status: 301 Moved Permanently
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-Middleware-Start: t=1528959915272009
X-Powered-By: Phusion Passenger Enterprise 5.0.28
X-Rack-Cache: pass
X-Request-Id: 75a261f9-dcba-4f1c-8bb5-09e04a350ad3
X-Runtime: 0.045344
X-Served-By: app13
Content-Length: 191
Use-Proxy: True, True, True
Cache-Control: public, max-age=5323
Expires: Thu, 14 Jun 2018 11:05:23 GMT
Date: Thu, 14 Jun 2018 09:36:40 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   191
Md5:    bff1ca82308ec87e779ed79b17fc380a
Sha1:   e2e94d308983ec61ba3edef762b16497ed550a57
Sha256: af2f826ae79196e45f1b38d4a6cd1977dbda39b23db72c72e265f94079071550
                                        
                                            GET /themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/check.png HTTP/1.1 
Host: chitown.nationbuilder.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/theme.scss
Cookie: _nbuild_nocache=true; _nbuild_token=0o8S2mjB0Rt9Q24VE5%2Fq2NXH0HmAw1KAy8YrLHe0ReM%3D; _nbuild_session=ea65ece89aeb8071d90ce00a5c21505d

                                         
                                         104.107.247.90
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Location: https://d3n8a8pro7vhmx.cloudfront.net/themes/59c40aceed0e46084b000000/attachments/original/1506020093/check.png?1506020093
Server: Apache/2.4.7 (Ubuntu)
Status: 301 Moved Permanently
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-Middleware-Start: t=1528958582040687
X-Powered-By: Phusion Passenger Enterprise 5.0.28
X-Rack-Cache: pass
X-Request-Id: c9f6e0a9-41b7-4a98-9976-693a015ddb44
X-Runtime: 0.044098
X-Served-By: app13
Content-Length: 188
Use-Proxy: True, True, True
Cache-Control: public, max-age=3982
Expires: Thu, 14 Jun 2018 10:43:02 GMT
Date: Thu, 14 Jun 2018 09:36:40 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   188
Md5:    024b57135f5c05ba196399833e18eaaa
Sha1:   4df38a567b58b8d6a3cc8c5866bf70cf6087cf50
Sha256: 8bd554a0a837d441812dca5cdce5a19cb0f61e5afee874592224109ad18b4329
                                        
                                            GET /themes/59c40aceed0e46084b000000/attachments/original/1506020096/dropdown.png?1506020096 HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/theme.scss

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 547
Connection: keep-alive
Date: Wed, 13 Jun 2018 13:11:22 GMT
Last-Modified: Thu, 21 Sep 2017 18:54:57 GMT
Etag: "be1b625e35d73bc9244c5f0bb3c62b08"
Accept-Ranges: bytes
Server: AmazonS3
Age: 73520
X-Cache: Hit from cloudfront
Via: 1.1 fe38ad2e075af619b54de9dd6980c5ea.cloudfront.net (CloudFront)
X-Amz-Cf-Id: AvJJwlQGb1w88dAumhC1iMyzcIr2cBK-D-BxuGdCwCsUBYV4kfWPuQ==


--- Additional Info ---
Magic:  PNG image, 18 x 38, 8-bit/color RGBA, non-interlaced
Size:   547
Md5:    be1b625e35d73bc9244c5f0bb3c62b08
Sha1:   b49a55537f2c702c094e543ca809ee31c6d67a1c
Sha256: ce022deb3103c3ec9f6ae86455d0a3b1416004bce778a59f6cfd77d857da8043
                                        
                                            GET /themes/59c40aceed0e46084b000000/attachments/original/1506020093/check.png?1506020093 HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/theme.scss

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 567
Connection: keep-alive
Date: Wed, 13 Jun 2018 13:11:22 GMT
Last-Modified: Thu, 21 Sep 2017 18:54:54 GMT
Etag: "885bdbd21e7efdb021317b6152aee2f4"
Accept-Ranges: bytes
Server: AmazonS3
Age: 73520
X-Cache: Hit from cloudfront
Via: 1.1 05c02ade53b3395a9e9f2e8f66c7e4d1.cloudfront.net (CloudFront)
X-Amz-Cf-Id: ybTNBr3Xz2O1CkPn9QUqKQwvKqLwbZ6gFihnQMpYRvJauEWgc0RgAQ==


--- Additional Info ---
Magic:  PNG image, 22 x 18, 8-bit/color RGBA, non-interlaced
Size:   567
Md5:    885bdbd21e7efdb021317b6152aee2f4
Sha1:   517bc326b50e129358d9cd5b5430f5a9896c5fc8
Sha256: 02dc30f3a30162d4dd626de6848864b8b920e554317fd9fbcdfa23a60bbd2210
                                        
                                            GET /s/rubik/v7/iJWHBXyIfDnIV7Eyjmmd8WY.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i|Rubik:300,500
Origin: https://chitown.nationbuilder.com

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 27964
Date: Tue, 05 Jun 2018 16:28:06 GMT
Expires: Wed, 05 Jun 2019 16:28:06 GMT
Last-Modified: Tue, 10 Oct 2017 23:02:16 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 752915
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  data
Size:   27964
Md5:    614d1a190ad1c106c587dbce2b24b26f
Sha1:   213a79b31f89d85ccb1c638d869494cf2e339c86
Sha256: 0e9f7ff2e837d33168d48b6dffae4833c85c9a0f1d431235cf3fa492734d3a29
                                        
                                            GET /s/lato/v14/S6uyw4BMUTPHjx4wWA.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i|Rubik:300,500
Origin: https://chitown.nationbuilder.com

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 28412
Date: Tue, 12 Jun 2018 17:33:03 GMT
Expires: Wed, 12 Jun 2019 17:33:03 GMT
Last-Modified: Wed, 11 Oct 2017 18:23:15 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 144218
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  data
Size:   28412
Md5:    62fb51e9e645f63599238881b9de15dd
Sha1:   82b144e3c8b4ff40aeca34ddf7bc35985311b90e
Sha256: 5aeb07f9980663c2501c9620371e11ae7aa6e320d94dd753d0ef56d8308c74b3
                                        
                                            GET /connect/xd_arbiter/r/mAiQUwlReIP.js?version=42 HTTP/1.1 
Host: staticxx.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Fri, 14 Jun 2019 04:28:48 GMT
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
Cache-Control: public,max-age=31536000,immutable
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: jXg52yaSdktIkriJaOUFYgBzXSp7DuVoC5QoOvVzQOiXiiLPFUytM289iG/c5bkqEpAiZ/tFpUOT/l/BoJnUaA==
Date: Thu, 14 Jun 2018 09:36:41 GMT
Connection: keep-alive
Content-Length: 13662


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13662
Md5:    bdc30e480970721ecb126745cd3eb3a7
Sha1:   a68d85723e5db25aa84cd27615cf4c2add8d0d66
Sha256: 579cbb44f50419749ae44afe0d36cfe0b622783215f05c4562888f092f9bfb51
                                        
                                            GET /connect/ping?client_id=126739610711965&domain=chitown.nationbuilder.com&origin=1&redirect_uri=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FmAiQUwlReIP.js%3Fversion%3D42%23cb%3Df1129ade38c3fde%26domain%3Dchitown.nationbuilder.com%26origin%3Dhttps%253A%252F%252Fchitown.nationbuilder.com%252Ff1f1a3d63561ec2%26relation%3Dparent&response_type=token%2Csigned_request%2Ccode&sdk=joey&version=v2.8 HTTP/1.1 
Host: web.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         31.13.72.40
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
X-XSS-Protection: 0
Pragma: no-cache
Location: https://www.facebook.com/connect/ping?client_id=126739610711965&domain=chitown.nationbuilder.com&origin=1&redirect_uri=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FmAiQUwlReIP.js%3Fversion%3D42%23cb%3Df1129ade38c3fde%26domain%3Dchitown.nationbuilder.com%26origin%3Dhttps%253A%252F%252Fchitown.nationbuilder.com%252Ff1f1a3d63561ec2%26relation%3Dparent&response_type=token%2Csigned_request%2Ccode&sdk=joey&version=v2.8&_rdc=1&_rdr
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self' https://*.facebook.com;style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' https://*.facebook.com;
Cache-Control: private, no-cache, no-store, must-revalidate
X-FB-ZR-Redirect: 02|1529055401|FzBFAiBqYv-z7tgsXYgIqkuZP-ZQnSTBvBD8ipiGMcDJnyOWJAIhAOaWPzXPXEeJBrdIAiJo4XtqJIWlLvbAdNwky9Gi_6J0
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Expires: Sat, 01 Jan 2000 00:00:00 GMT
X-FB-Debug: uEnblznNmIqfjy5Vxw2H21jNRAY8/opCuduwtQQ/0pIYNcEnEXyIj8wbFE/LljSj1B6PioMeN+xXWNUmKUKyeQ==
Date: Thu, 14 Jun 2018 09:36:41 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /chitown/sites/2/favicon_images/original/favicon.png?1508969975 HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
If-Modified-Since: Wed, 25 Oct 2017 22:19:36 GMT
If-None-Match: "32d6069b5cb31ef7a2dd2dc7b783d1e7"

                                         
                                         54.192.98.114
HTTP/1.1 304 Not Modified
                                        
Connection: keep-alive
Date: Thu, 14 Jun 2018 09:36:41 GMT
Etag: "32d6069b5cb31ef7a2dd2dc7b783d1e7"
Server: AmazonS3
Age: 73519
X-Cache: Hit from cloudfront
Via: 1.1 b475a5f7d95ff68ca0dc588e3c9a3231.cloudfront.net (CloudFront)
X-Amz-Cf-Id: JUzGPu9IRDCCvCI_50uzpIiRjjrItI_7FuoOACICdBSxtNYRRgsBXg==


--- Additional Info ---
                                        
                                            GET /connect/ping?client_id=126739610711965&domain=chitown.nationbuilder.com&origin=1&redirect_uri=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FmAiQUwlReIP.js%3Fversion%3D42%23cb%3Df1129ade38c3fde%26domain%3Dchitown.nationbuilder.com%26origin%3Dhttps%253A%252F%252Fchitown.nationbuilder.com%252Ff1f1a3d63561ec2%26relation%3Dparent&response_type=token%2Csigned_request%2Ccode&sdk=joey&version=v2.8&_rdc=1&_rdr HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/860/_live_tv_world_cup_2018_opening_ceremony_live_online

                                         
                                         31.13.72.38
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-XSS-Protection: 0
Pragma: no-cache
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Cache-Control: private, no-cache, no-store, must-revalidate
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: 4iNEELeIu0Xvdt+/4U/Y/NsOJ2mOlPRCWMeoFW/7K+qmk1zBXqxfKeqC9Uz/JjGsEblzaov5saA+WId1WQJYRg==
Date: Thu, 14 Jun 2018 09:36:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   171
Md5:    580e297fdf32d0bcbbd7190a67edb5af
Sha1:   23dc730b6b8cb2939f1e847f5bfdf925bf17c76a
Sha256: 262b144a029a9790a1268c0a0762e0150414c989252e6898b44e8a05c23a7b2b