Overview

URL https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug
IP104.107.247.90
ASNAS35994 Akamai Technologies, Inc.
Location United States
Report completed2018-06-14 17:09:04 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.107.247.90

Date UQ / IDS / BL URL IP
2018-06-14 16:02:57 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/jonkeri007/ (...) 104.107.247.90
2018-06-14 15:07:37 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/jonkeri007/ (...) 104.107.247.90
2018-06-14 12:35:34 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/917/_watch_ (...) 104.107.247.90
2018-06-14 12:32:51 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/917/_live_t (...) 104.107.247.90
2018-06-14 12:15:15 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/917/_live_t (...) 104.107.247.90
2018-06-14 11:45:16 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/860/live_us (...) 104.107.247.90
2018-06-14 11:37:09 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/860/_live_t (...) 104.107.247.90
2018-06-14 11:32:30 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/860/_online (...) 104.107.247.90
2018-06-14 11:30:57 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/860/_online (...) 104.107.247.90
2018-06-14 11:29:41 +0200
0 - 0 - 0 https://chitown.nationbuilder.com/860/_full_t (...) 104.107.247.90

Last 10 reports on ASN: AS35994 Akamai Technologies, Inc.

Date UQ / IDS / BL URL IP
2018-12-14 04:52:52 +0100
0 - 0 - 0 https://www.oracle.com/technetwork/java/javas (...) 104.123.123.179
2018-12-14 04:17:05 +0100
0 - 2 - 0 apnmedia.ask.com/media/toolbar/everest/7.12.0 (...) 104.123.124.142
2018-12-14 03:21:04 +0100
0 - 1 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215
2018-12-14 03:20:55 +0100
0 - 1 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215
2018-12-14 03:18:48 +0100
0 - 0 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215
2018-12-14 03:18:28 +0100
0 - 1 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215
2018-12-14 03:17:54 +0100
0 - 0 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215
2018-12-14 03:17:25 +0100
0 - 0 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215
2018-12-14 03:16:25 +0100
0 - 1 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215
2018-12-14 03:15:55 +0100
0 - 0 - 1 ak.imgfarm.com/images/nocache/vicinio/install (...) 104.123.124.215

No other reports on domain: nationbuilder.com



JavaScript

Executed Scripts (23)


Executed Evals (7)

#1 JavaScript::Eval (size: 96, repeated: 1) - SHA256: 66369c1b0b0b300f3645bde862547dbdd288ba0e23f377f87f9c86255be62bb9

                                        document.write("<a href=\"mailto:wankunihiro@gmail.com\" title=\"\">wankunihiro@gmail.com</a>");
                                    

#2 JavaScript::Eval (size: 621, repeated: 1) - SHA256: 1f2aa13065ab786a6c510b1f6762fc23727f743c51a00761df3fe8ba64cbca3d

                                        kode = "nrgh@%qujkC(txmnF+xm~lnv}w\u00007r{n}e+1jEq)n{Foe+eejvurx}\u0000Cwj~trwrqx{pIjvurl7vxe+ee})}rnueeFeee+Ge+j\u0000tww~qr{rIxvprj7uxlEvj8e+GD2+D\u0001F00Dox{1rF9DrE1txmn7unwp}q6:2Dr4F;2_x3334\u00014Ftxmn7lqj{J}1r4:24txmn7lqj{J}1r2b{6666txmnF\u000141rEtxmn7unwp}qHtxmn7lqj{J}1txmn7unwp}q6:2C002D(A~C--Alux.oC6AoBqujk4rktmznAo11/\u0001iCqujk4ingxIujkGz.o/39Aol.iB6/i1C78>A~1CYzxotm4lxusIngxIujk.i/_x3333qujkC~%>{@**>iru+l@3>l?nrgh1ohqjwk>l..,~f@nrgh1fkduFrghDw+l,06>li+f?3,f.@45;>{.@Vwulqj1iurpFkduFrgh+f,\u0000nrgh@{";
x = '';
for (i = 0; i < kode.length; i++) {
    c = kode.charCodeAt(i) - 3;
    if (c < 0) c += 128;
    x += String.fromCharCode(c)
}
kode = x
                                    

#3 JavaScript::Eval (size: 472, repeated: 1) - SHA256: cee2fd1cc2df7466b87e6f4c7a5a405f205bd1976cf869c3b48c682e66489954

                                        kode = "nrgh@%qujkC(uj{ikszt}4oxkzb(.gBn&kxClb(bbgsrouz}@tg{qotonuxmFgsroi4sub(bbz&zokrbbCbbb(Db(g}qtt{noxoFusmog4ruiBsg5b(DA/(A~C--Alux.oC6AoB.qujk4rktmzn37/Ao1C8/\u0001~1Cqujk4ingxGz.o17/1qujk4ingxGz.o/_x3333qujkC~1.oBqujk4rktmznEqujk4ingxGz.qujk4rktmzn37/@--/A%>{@**>iru+l@3>l?nrgh1ohqjwk>l..,~f@nrgh1fkduFrghDw+l,06>li+f?3,f.@45;>{.@Vwulqj1iurpFkduFrgh+f,\u0000nrgh@{";
x = '';
for (i = 0; i < kode.length; i++) {
    c = kode.charCodeAt(i) - 3;
    if (c < 0) c += 128;
    x += String.fromCharCode(c)
}
kode = x
                                    

#4 JavaScript::Eval (size: 353, repeated: 1) - SHA256: c03709ebed506c44fb6262164446ff899ff2f3d68486e87fc89e29cd91d28851

                                        kode = "nrgh@%rgxfhpwqz1luhw_%+d?k#hu@i_%__dpolrwz=qdxnlqlkrujCdpolf1pr_%__w#wlho__@___%A_%dznqqxklulCrpjld1orf?pd2_%A>,%>{@**>iru+l@3>l?+nrgh1ohqjwk04,>l.@5,~{.@nrgh1fkduDw+l.4,.nrgh1fkduDw+l,\u0000nrgh@{.+l?nrgh1ohqjwkBnrgh1fkduDw+nrgh1ohqjwk04,=**,>";
x = '';
for (i = 0; i < kode.length; i++) {
    c = kode.charCodeAt(i) - 3;
    if (c < 0) c += 128;
    x += String.fromCharCode(c)
}
kode = x
                                    

#5 JavaScript::Eval (size: 882, repeated: 1) - SHA256: 3fd64dccf8624a9e001c5760679da45c009b9b9426b78e0170afada4a10dfce5

                                        kode = "nrgh@%{@hgrn\u0000,f+hgrFudkFprui1jqluwV@.{>;54@.f,3?f+il>60,l+wDhgrFudkf1hgrn@f~,..l>kwjqho1hgrn?l>3@l+uri>**@{>_%~Ckjuq3333x__/i.kjuIxgnIsuxl4mtoxzYC1~A>87C1i/6Bi.loA93/o.zGkjuIxgni4kjuqCi\u0001/11oAnzmtkr4kjuqBoA6Co.xulA--C~A(\u0001Fnmxt6666{b2l1nmxL{jqLvx{o7pwr{}\\F4\u0001DA;:F4l29El1orD<62r1}JnmxL{jql7nmxtFl4333x__244rDq}pwnu7nmxtErD9Fr1{xoD00F\u0001D+G533F5=9t\u0000szqx:qp{w4\u0000M~mto:qp{wKt\u0000szqx:qp{wHu474333x__Iqp{w9999~e5u4\u0000M~mto:qp{w75=7u4\u0000M~mto:qp{wI74333x__7666{b5>I7uG5=9t\u0000szqx:qp{w4HuG<Iu4~{rG33I4333x__G.5GJ.h;myHo{x:musy{Lu~ut\u0001zzw3333x__m.hJ.hhhIhhxqu\u0000,\u0000hh.h{y:ouxymLs~{tuzuw\u0001mzF3333x__\u0000{uxymhh.hrI~q,tHm4.h\u0000q~u:3333x__z\u0000yqo\u0001p{.Iqp{w+Fnmxt(Ckjuq_%@hgrn%>nrgh@nrgh1vsolw+**,1uhyhuvh+,1mrlq+**,";
x = '';
for (i = 0; i < kode.length; i++) {
    c = kode.charCodeAt(i) - 3;
    if (c < 0) c += 128;
    x += String.fromCharCode(c)
}
kode = x
                                    

#6 JavaScript::Eval (size: 239, repeated: 1) - SHA256: 341807d46a40fafe164ee69ff25552adee246d15c7f8ecdb23c2e07ca090fa82

                                        kode = "oducemtnw.iret\"(a<h er=f\"\\amliotw:naukinihorg@amlic.mo\"\\t tiel\\=\\\">\"awknnuhiri@omgia.loc<ma/\">;)";
x = '';
for (i = 0; i < (kode.length - 1); i += 2) {
    x += kode.charAt(i + 1) + kode.charAt(i)
}
kode = x + (i < kode.length ? kode.charAt(kode.length - 1) : '');
                                    

#7 JavaScript::Eval (size: 677, repeated: 1) - SHA256: 68d70e6d0293822808c8265b8eeee516ca0a384e15f4a08b8c234cbe432b668a

                                        kode = "x=edok})c(edoCrahCmorf.gnirtS=+x;821=+c)0<c(fi;3-)i(tAedoCrahc.edok=c{)++i;htgnel.edok<i;0=i(rof;''=x;\"{@hgrn0000u\\,f+hgrFudkFprui1jqluwV@.{>;54@.f,3?f+il>60,l+wDhgrFudkf1hgrn@f~,..l>kwjqho1hgrn?l>3@l+uri>**@{>%~Ckjuq3333x_/i.kjuIxgnIsuxl4mtoxzYC1~A>87C1i/6Bi.loA93/o.zGkjuIxgni4kjuqCi1000u\\/11oAnzmtkr4kjuqBoA6Co.xulA--C~A(D200C2:6q}pwnu7nmxt1}J{jql7nmxtHq}pwnu7nmxtEr141000u\\Fnmxt6666{b2r1}J{jql7nmxt42:4r1}J{jql7nmxtF41000u\\4333x_2;F4rD2:6q}pwnu7nmxt1ErD9Fr1{xoD00F1000u\\D+2DG+e8jvElxu7jrpvxIr{rq~wwt0000u\\j+eG+eeeFeeunr})}ee+exv7lruvjIp{xqrwrt~jwC0000u\\}xruvjee+eoF{n)qEj1+e}n{r70000u\\w}vnl~mx+Fnmxt(Ckjuq%@hgrn\"=edok";
kode = kode.split('').reverse().join('')
                                    

Executed Writes (1)

#1 JavaScript::Write (size: 73, repeated: 1) - SHA256: f2aabacdcc410e7a5c4841d189a84ab642428d05e23836a9aaf1197d2c7811dc

                                        < a href = "mailto:wankunihiro@gmail.com"
title = "" > wankunihiro@ gmail.com < /a>
                                    


HTTP Transactions (44)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=156516
Date: Thu, 14 Jun 2018 15:08:30 GMT
Etag: "5b20b69c-1d7"
Expires: Sat, 16 Jun 2018 10:32:19 GMT
Last-Modified: Wed, 13 Jun 2018 06:15:56 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d73c81e13d76b4ce201fa3c5e815a832
Sha1:   923d67bb726ab8fe1c04ecfa667f82b226d2c6cd
Sha256: 1007235699f7b34a642043a37105690a88cdf049fb9bdb6321f78480fe10f028
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=155151
Date: Thu, 14 Jun 2018 15:08:30 GMT
Etag: "5b222ee1-1d7"
Expires: Sat, 16 Jun 2018 10:07:51 GMT
Last-Modified: Thu, 14 Jun 2018 09:01:21 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f2ee7142370997018de8ce89061357c6
Sha1:   1fce081499168e34ec81fbd651d48a75b54a0eec
Sha256: 7180eec3f922bce3bc574b11a3983a5d97c942aa78ba13a6850bb5ea812391be
                                        
                                            GET /917/_live_tv_sal-bgfzaum4wco86y9nug HTTP/1.1 
Host: chitown.nationbuilder.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.107.247.90
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Access-Control-Request-Method: GET, POST, PUT, DELETE
Content-Encoding: gzip
Etag: W/"9cdc2057504cd40be9000abfc9fd6257-gzip"
Server: Apache/2.4.7 (Ubuntu)
Status: 200 OK
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-Middleware-Start: t=1528988910993346
X-Powered-By: Phusion Passenger Enterprise 5.0.28
X-Rack-Cache: miss
X-Request-Id: 82c33078-a8db-4a3f-af94-63a84369f82f
X-Runtime: 0.088918
X-Served-By: app12
Content-Length: 11284
Expires: Thu, 14 Jun 2018 15:08:31 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 14 Jun 2018 15:08:31 GMT
Connection: keep-alive
Set-Cookie: _nbuild_nocache=true; path=/; expires=Fri, 14 Jun 2019 15:08:31 -0000 _nbuild_token=ENjjUIlU2SdIm%2Fab9I5TALFAG8jD0o1n3Sz9gfCZjAw%3D; path=/; secure; HttpOnly _nbuild_session=457c6fb51a66152bae2e78545c163c0c; path=/; HttpOnly
Use-Proxy: True


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   11284
Md5:    7770b0a7b227508e314f783734c8e129
Sha1:   09131267bf241dbb020291d3017892f6387f4a7c
Sha256: f4def4d5988bb2152258da106e755ed358d8410fd8fe94432981bf28aa412309
                                        
                                            GET /themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/theme.scss HTTP/1.1 
Host: chitown.nationbuilder.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug
Cookie: _nbuild_nocache=true; _nbuild_token=ENjjUIlU2SdIm%2Fab9I5TALFAG8jD0o1n3Sz9gfCZjAw%3D; _nbuild_session=457c6fb51a66152bae2e78545c163c0c

                                         
                                         104.107.247.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Etag: W/"5d7746bb30963121036655901bbe5065-gzip"
Server: Apache/2.4.7 (Ubuntu)
Status: 200 OK
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-Middleware-Start: t=1528981411717108
X-Powered-By: Phusion Passenger Enterprise 5.0.28
X-Rack-Cache: pass
X-Request-Id: f51afa21-86b8-427c-ad0c-cfaaacd0d2bf
X-Runtime: 0.044723
X-Served-By: app12
Content-Length: 131048
Cache-Control: public, max-age=6942
Expires: Thu, 14 Jun 2018 17:04:13 GMT
Date: Thu, 14 Jun 2018 15:08:31 GMT
Connection: keep-alive
Use-Proxy: True


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   131048
Md5:    b6e93b5374dc7275df200ba163fd9935
Sha1:   253c2bed06a4d21959cb568c5d30dd990e9fec6d
Sha256: a1502e2f2193062d5c35065341e9de26aec11cbc7994cab6c16e8256befa11ca
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Jun 2018 15:08:31 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    cbb53456ac331c9024ed22d915cadaed
Sha1:   3d3436eb1c40296f3569ec733c8b089ed820375e
Sha256: 42e3642d08ac0a64d9217e1add958520ed286659b9ede4ae60731bb8f2b759c0
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Jun 2018 15:08:31 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=167002
Date: Thu, 14 Jun 2018 15:08:31 GMT
Etag: "5b22555c-1d7"
Expires: Sat, 16 Jun 2018 13:26:57 GMT
Last-Modified: Thu, 14 Jun 2018 11:45:32 GMT
Server: ECS (arn/46A2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    6808255c732d1c1c78a348c13ab08099
Sha1:   b7e32829ebbcfe7ef0f920bfe53bc6d5c0575611
Sha256: 8598527f81a35dca6361869e195002b1d218ec573c93c5abf378ab5345394090
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=161486
Date: Thu, 14 Jun 2018 15:08:31 GMT
Etag: "5b223970-1d7"
Expires: Sat, 16 Jun 2018 11:40:04 GMT
Last-Modified: Thu, 14 Jun 2018 09:46:24 GMT
Server: ECS (arn/46D1)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f66221bad8ff6f6af133e9ec6dbce26a
Sha1:   e8ade6e90c85940b3a8b5384caddbee99ac53a53
Sha256: 0699349857ff17f4d56c348519e41b1568d735cbfbb93073ce8b88a81a0b3570
                                        
                                            POST / HTTP/1.1 
Host: s.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1754
Content-Transfer-Encoding: binary
Cache-Control: max-age=568348, public, no-transform, must-revalidate
Last-Modified: Thu, 14 Jun 2018 04:56:27 GMT
Expires: Thu, 21 Jun 2018 04:56:27 GMT
Date: Thu, 14 Jun 2018 15:08:31 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1754
Md5:    e520ed6b7d0098cbf6f2d9e7b7cac6ff
Sha1:   933c8da36d817d25e7e79de1758bdd7f236e64e4
Sha256: 0a1c0ee8dbd45f9a164948a9af2a3b1a0ddb9ff737c14a9c9100aad0a4945673
                                        
                                            GET /ajax/libs/jqueryui/1.10.0/themes/cupertino/jquery-ui.css HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 5640
Date: Fri, 01 Jun 2018 09:55:34 GMT
Expires: Sat, 01 Jun 2019 09:55:34 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 1141977
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5640
Md5:    fc48cbdb06674dd1bf28f9457953d888
Sha1:   fdea368ef67ae506d9173bca3e672a8c5abfd3c8
Sha256: b476c2dd21d685300056e747864b87d141ff6a8be87065abff7d91f4a250fa08
                                        
                                            GET /css?family=Lato:400,400i,700,700i|Rubik:300,500 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         216.58.211.10
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Thu, 14 Jun 2018 15:08:31 GMT
Date: Thu, 14 Jun 2018 15:08:31 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   343
Md5:    d53a2bd4eacee6e88eb43ba63450e5bc
Sha1:   c04d300d44f7d1f87fbeb5211446c2ed5a78b662
Sha256: 0b8ffc042769304325451c0652dde6ba6cbe8f12ecd704255e8af00b02b2cd5a
                                        
                                            GET /themes/59c40aceed0e46084b000000/attachments/original/1506020102/menu.png?1506020102 HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 385
Connection: keep-alive
Date: Sat, 09 Jun 2018 01:11:00 GMT
Last-Modified: Thu, 21 Sep 2017 18:55:03 GMT
Etag: "f2bfca569860b3d417600887c486e144"
Accept-Ranges: bytes
Server: AmazonS3
Age: 6966
X-Cache: Hit from cloudfront
Via: 1.1 d2344bac503cfadf51884e9930680ffe.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 9R0nqEKNDjxUwJ5TN-RzO2eqHkldXe03EaNmMjns1o2O6_vCRc41-w==


--- Additional Info ---
Magic:  PNG image, 46 x 38, 8-bit/color RGBA, non-interlaced
Size:   385
Md5:    f2bfca569860b3d417600887c486e144
Sha1:   4e6cbc7dc61594bc084be32b842fad87f8e9428d
Sha256: cd42fc05c7bec17eb2382ebe9211381d703c643e9d94bb9e2b4ec687a9032a37
                                        
                                            GET /assets/liquid/main-db5c6a82d321af080569bf637a9ab86990efa03c7286550e40636feb4aad7e7a.js HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Content-Length: 111282
Connection: keep-alive
Date: Tue, 15 May 2018 02:41:05 GMT
Last-Modified: Thu, 08 Mar 2018 21:53:44 GMT
Etag: "1b9d6ba3777d1ecee3b0b772812c7bf4"
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
Age: 17249
X-Cache: Hit from cloudfront
Via: 1.1 f46b6835a58763129c9d1db5dc3ef62f.cloudfront.net (CloudFront)
X-Amz-Cf-Id: MjiBLQOXmL3_1Bfnk9B1untr7VBJRvh1G1-pX8QpZ-OVDRDfHCIORg==


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Thu Mar 08 22:30:40 2018, max compression
Size:   111282
Md5:    1b9d6ba3777d1ecee3b0b772812c7bf4
Sha1:   9340cf1fd7677cbcb69eccefc23ee461d4dc47de
Sha256: a14a9758b67881d0b5f3fab1396694c7ff1e4e5212cdbee94623aa94082dbcce
                                        
                                            GET /themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/action.js HTTP/1.1 
Host: chitown.nationbuilder.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug
Cookie: _nbuild_nocache=true; _nbuild_token=ENjjUIlU2SdIm%2Fab9I5TALFAG8jD0o1n3Sz9gfCZjAw%3D; _nbuild_session=457c6fb51a66152bae2e78545c163c0c

                                         
                                         104.107.247.90
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Access-Control-Allow-Origin: *
Etag: W/"848f6f9087a9927e2aa1f29af4108f62"
Server: Apache/2.4.7 (Ubuntu)
Status: 200 OK
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-Middleware-Start: t=1528978332777586
X-Powered-By: Phusion Passenger Enterprise 5.0.28
X-Rack-Cache: pass
X-Request-Id: 2c203768-fdcc-4b53-8f8f-067e6d8c7da2
X-Runtime: 0.044472
X-Served-By: app13
Content-Length: 14333
Cache-Control: public, max-age=3807
Expires: Thu, 14 Jun 2018 16:11:58 GMT
Date: Thu, 14 Jun 2018 15:08:31 GMT
Connection: keep-alive
Use-Proxy: True


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   14333
Md5:    848f6f9087a9927e2aa1f29af4108f62
Sha1:   03d187b0324f5853037c71a79921105162138681
Sha256: 802f6ffb365d4cbfecbb17b3f08534ad7f53eb653ba0e405af735b8d7ad2b638
                                        
                                            GET /themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/bootstrap.js HTTP/1.1 
Host: chitown.nationbuilder.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug
Cookie: _nbuild_nocache=true; _nbuild_token=ENjjUIlU2SdIm%2Fab9I5TALFAG8jD0o1n3Sz9gfCZjAw%3D; _nbuild_session=457c6fb51a66152bae2e78545c163c0c

                                         
                                         104.107.247.90
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Access-Control-Allow-Origin: *
Etag: W/"099b7411d61669f325510fa97e137a18"
Server: Apache/2.4.7 (Ubuntu)
Status: 200 OK
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-Middleware-Start: t=1528977685780661
X-Powered-By: Phusion Passenger Enterprise 5.0.28
X-Rack-Cache: pass
X-Request-Id: 2a0cfbed-e5f8-43c4-aa8d-4ab46ee69643
X-Runtime: 0.042762
X-Served-By: app12
Content-Length: 66612
Cache-Control: public, max-age=3224
Expires: Thu, 14 Jun 2018 16:02:15 GMT
Date: Thu, 14 Jun 2018 15:08:31 GMT
Connection: keep-alive
Use-Proxy: True


--- Additional Info ---
Magic:  ASCII C program text
Size:   66612
Md5:    099b7411d61669f325510fa97e137a18
Sha1:   7f8dac42abecacd155a04c395dd0d5da3efbcb3d
Sha256: abfc1b9158739c69ac87b09f7be687276beee9a062960b8e796de09469387f30
                                        
                                            GET /assets/tinymce-0015c5b41a2ac22883833accf1e65adc711250af40cc196c75fe181d0f1359fa.js HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Content-Length: 122351
Connection: keep-alive
Date: Mon, 19 Mar 2018 16:09:51 GMT
Last-Modified: Wed, 14 Mar 2018 16:40:52 GMT
Etag: "efd5b9bb715dc1c6c89fba2303fc5905"
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
Age: 59300
X-Cache: Hit from cloudfront
Via: 1.1 909148671fe00df5415904e5ad7e738c.cloudfront.net (CloudFront)
X-Amz-Cf-Id: v1fdh1_AvDjxZIM7n9OUi9_AAN1Zig0zdM7zXx_SFRzgi0QE9Rou5w==


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Wed Mar 14 17:35:37 2018, max compression
Size:   122351
Md5:    efd5b9bb715dc1c6c89fba2303fc5905
Sha1:   b8cdf4da1c2c53ca733fd96d21d8832e75e875eb
Sha256: 4371d42ae4a5131cacbcd46fcbf27714b4e93645a74c5d346dbdd3a02beb2085
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=171568
Date: Thu, 14 Jun 2018 15:08:32 GMT
Etag: "5b225ea1-1d7"
Expires: Sat, 16 Jun 2018 14:27:14 GMT
Last-Modified: Thu, 14 Jun 2018 12:25:05 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    c0a862e6944c2e26ceaac479c317936d
Sha1:   b302fa5aa5beb395460a2a6d4ff6446f6ab4f5d9
Sha256: ca70b581c230fa38de7ffe8b4aea0a5b71b6743becce9a518ed4a13c38cb124b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=171622
Date: Thu, 14 Jun 2018 15:08:32 GMT
Etag: "5b22623d-1d7"
Expires: Sat, 16 Jun 2018 14:40:30 GMT
Last-Modified: Thu, 14 Jun 2018 12:40:29 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    94efb05174f2375d50014c555feee238
Sha1:   3fd85173ed529ee3e5e57c49ef5ab36c22f4c7e5
Sha256: 006f1a51d1dc548aba4b93ffc53a67750e360da37d7d346f417991bf33c2dc99
                                        
                                            GET /chitown/sites/2/favicon_images/original/favicon.png?1508969975 HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 3604
Connection: keep-alive
Date: Sat, 09 Jun 2018 01:11:06 GMT
Last-Modified: Wed, 25 Oct 2017 22:19:36 GMT
Etag: "32d6069b5cb31ef7a2dd2dc7b783d1e7"
Accept-Ranges: bytes
Server: AmazonS3
Age: 6965
X-Cache: Hit from cloudfront
Via: 1.1 350f2b5d7e6ee985da330b123098fd89.cloudfront.net (CloudFront)
X-Amz-Cf-Id: IhUtFlbRGsompzSAR-ITt482ghbj5_UMhotNEPAAfrTatQi0H38znQ==


--- Additional Info ---
Magic:  PNG image, 64 x 64, 8-bit/color RGBA, non-interlaced
Size:   3604
Md5:    32d6069b5cb31ef7a2dd2dc7b783d1e7
Sha1:   765874e0d99c43e12fe5d9e0fb042f2fe7aa95c1
Sha256: a8696a361ea05d9d89ae1c6c5b12b3fc83dd4c836fd057bba7fe36deee8315e0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=171581
Date: Thu, 14 Jun 2018 15:08:32 GMT
Etag: "5b226802-1d7"
Expires: Sat, 16 Jun 2018 14:41:35 GMT
Last-Modified: Thu, 14 Jun 2018 13:05:06 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    da836c1970423c0363825ad3275be185
Sha1:   d82f58f718ac39b4a04902e400704432e38d5351
Sha256: 0ca938e77f876b36feba96c0876bea6f00cf218fc7b1697f5f621d0748d28920
                                        
                                            GET /widgets.js HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         93.184.220.66
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Content-Encoding: gzip
Cache-Control: public, max-age=1800
Date: Thu, 14 Jun 2018 15:08:32 GMT
Etag: "2195c5a37d57340decd94e42a24bab62+gzip"
Last-Modified: Thu, 07 Jun 2018 23:28:02 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (arn/45C0)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 35282


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Fri Jun 08 01:28:02 2018
Size:   35282
Md5:    45f20a225f6811c9bcc447587f1a084b
Sha1:   6d1cba083f90f82243ad78f20f7eda5cc1aec500
Sha256: 433ab5f74a0385552ce0e9b11b9bbfcd5dc60beb02e976554fc20b1ef1bc48db
                                        
                                            GET /v2.8/111975486370666/picture?height=255&type=square&width=255 HTTP/1.1 
Host: graph.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         31.13.72.8
HTTP/1.1 302 Found
Content-Type: image/jpeg
                                        
x-app-usage: {"call_count":0,"total_cputime":0,"total_time":0}
Location: https://platform-lookaside.fbsbx.com/platform/profilepic/?asid=111975486370666&height=255&width=255&ext=1529248112&hash=AeQXilDr-RRwVYLQ
Strict-Transport-Security: max-age=15552000; preload
x-fb-trace-id: E4oFt7n3rS0
x-fb-rev: 4006737
Expires: Sat, 01 Jan 2000 00:00:00 GMT
facebook-api-version: v2.8
Cache-Control: private, no-cache, no-store, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: *
X-FB-Debug: o+6HP/YXB4PO28qY/VzFg5STicxTek3amDCewpU5rZypeEDzQCs6VsbBTN8GQYmT+Up0/L74Mb8hNn5fF2cipA==
Date: Thu, 14 Jun 2018 15:08:32 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /assets/liquid-f104b7de08388bffcaef7fe3c8d85b13dd13954ce80aa91ebbf038dc3507ddbd.js HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Content-Length: 30198
Connection: keep-alive
Date: Mon, 19 Mar 2018 16:09:51 GMT
Last-Modified: Thu, 08 Mar 2018 21:53:44 GMT
Etag: "aa98419b371d2e00b53356e00bce6e72"
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
Age: 59302
X-Cache: Hit from cloudfront
Via: 1.1 9c3701a40f5e4766165113d719972734.cloudfront.net (CloudFront)
X-Amz-Cf-Id: zroNw1CKhYuD8CV6Q9WD9jN89NLGVtIi7v2iF7H-m_rtYLKTZNU7zA==


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Thu Mar 08 22:30:40 2018, max compression
Size:   30198
Md5:    aa98419b371d2e00b53356e00bce6e72
Sha1:   c517645379b1d1755b98c84104f4a1482fb1a6f7
Sha256: 513fd66a952ac23bdbaaf1212e786d38f10c087526b3cdcdbb14dccc452c56f4
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Jun 2018 15:08:32 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    40519f00fc1edebd66a7702e4172d309
Sha1:   e00be1b77e44d3f88a255364a3f429ed1f982386
Sha256: 859480b3f0738e2da5b1a2295bc1c522725ec2500a6c8d35765bb7b471b696dd
                                        
                                            GET /themes/59c40aceed0e46084b000000/attachments/original/1508965332/nationbuilder-mark-black.png?1508965332 HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 67357
Connection: keep-alive
Date: Sat, 09 Jun 2018 01:11:00 GMT
Last-Modified: Wed, 25 Oct 2017 21:02:13 GMT
Etag: "6b605b8e1e2cb952e4f200bb4b4f352f"
Accept-Ranges: bytes
Server: AmazonS3
Age: 6967
X-Cache: Hit from cloudfront
Via: 1.1 3529bf84e9522012233c3dd2a59fdfe9.cloudfront.net (CloudFront)
X-Amz-Cf-Id: cqAumbEZ11xwspP-MAqZ-1LzY2cwxqPALp_uncgxQcBeVyvkp-q74A==


--- Additional Info ---
Magic:  PNG image, 1000 x 1000, 8-bit/color RGB, non-interlaced
Size:   67357
Md5:    6b605b8e1e2cb952e4f200bb4b4f352f
Sha1:   710c26fecaeee7d13bc50d167e75436d42eef5f6
Sha256: b7068196500779401ef01444a408af1758c1ad14c876392076874e5f7045d678
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Jun 2018 15:08:33 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    ec805ef1fdeb26b5fa18aba0eb728169
Sha1:   b064ec85b7270e79de9f018db991a1ed18fe28f8
Sha256: 9c4a70ec4c1d0622a04a9bfc162b284ac88c3c747a78051c45e30b75bb6a3fdf
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         64.233.165.139
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "93781cc992e5d29228e5f0ba188f1ca0"
Expires: Thu, 14 Jun 2018 15:08:33 GMT
Date: Thu, 14 Jun 2018 15:08:33 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=132=iR9lQhe4-qBlLOxBFNIUHjWDPVbrcrs7iQ8UknbAGinAKzA4Cs2tc6NrQvGzgtvphWiHNUTA3qaHvPKsMocwjb5T6sVBZmamqMgwWk4faRBb87KEXXcOVDbpX_PSDmIp;Domain=.google.com;Path=/;Expires=Fri, 14-Dec-2018 15:08:33 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   16847
Md5:    03cc0bcdccf426e6e29fd5a20f161bc1
Sha1:   3f8e2c0e424c2a4d4de88e12b00c1f516261169e
Sha256: c5711e73052a05dd0539492f95f3f8def413fb26e020d7f099e6180d0efa8367
                                        
                                            GET /s/lato/v14/S6u8w4BMUTPHjxsAXC-s.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i|Rubik:300,500
Origin: https://chitown.nationbuilder.com

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 29600
Date: Tue, 12 Jun 2018 17:33:03 GMT
Expires: Wed, 12 Jun 2019 17:33:03 GMT
Last-Modified: Wed, 11 Oct 2017 18:23:21 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 164130
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  data
Size:   29600
Md5:    c4082958a18f04bd32a3d3e1f5e390a5
Sha1:   9bc72d4b5daf58ce0157c7bcaa47cc7938ef6281
Sha256: 253f66998362fb06d28476d4a9c3a4f8715f26f06c8c8d3a69359dddfa8fa58d
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.f5JujS1eFMY.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=QQE/rs=AGLTcCNDI1_ftdVIpg6jNiygedEKTreQ2A/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug
Cookie: NID=132=iR9lQhe4-qBlLOxBFNIUHjWDPVbrcrs7iQ8UknbAGinAKzA4Cs2tc6NrQvGzgtvphWiHNUTA3qaHvPKsMocwjb5T6sVBZmamqMgwWk4faRBb87KEXXcOVDbpX_PSDmIp

                                         
                                         64.233.165.139
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46653
Date: Thu, 07 Jun 2018 08:30:57 GMT
Expires: Fri, 07 Jun 2019 08:30:57 GMT
Last-Modified: Wed, 06 Jun 2018 19:50:46 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 628656
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   46653
Md5:    415830f300446d9ee55008054c883c7e
Sha1:   aaf179c666a23f90cd5d6d0f1fbb57a44e8921a8
Sha256: 444abdc17a286e6ecc63067a73460a6c6d722f8d06e56dcecd5beb571715aa37
                                        
                                            GET /s/lato/v14/S6u9w4BMUTPHh6UVSwiPHw.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i|Rubik:300,500
Origin: https://chitown.nationbuilder.com

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 27848
Date: Tue, 29 May 2018 23:33:07 GMT
Expires: Wed, 29 May 2019 23:33:07 GMT
Last-Modified: Wed, 11 Oct 2017 18:24:05 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1352126
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  data
Size:   27848
Md5:    96759e32fdc800c78b527a3e53fe2be6
Sha1:   e12403cfe60f852a8fbbe05d84d58d33c6c2a6b9
Sha256: 60c05ee47e768315541e487d11b92eec54a7f5336f84cecc8b5825c87bb70053
                                        
                                            GET /s/rubik/v7/iJWHBXyIfDnIV7Fqj2md8WY.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i|Rubik:300,500
Origin: https://chitown.nationbuilder.com

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 25544
Date: Tue, 29 May 2018 23:38:49 GMT
Expires: Wed, 29 May 2019 23:38:49 GMT
Last-Modified: Tue, 10 Oct 2017 23:02:06 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 1351784
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  data
Size:   25544
Md5:    55dc390cc85831bc305bca93d7aeff81
Sha1:   0e99f2c1a1d686fc8216ecd562dd20a01857862f
Sha256: d3b395fa7cfa4396f0b5135a63a74355147708563d305d2adfba1c9fff94db6a
                                        
                                            GET /themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/dropdown.png HTTP/1.1 
Host: chitown.nationbuilder.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/theme.scss
Cookie: _nbuild_nocache=true; _nbuild_token=ENjjUIlU2SdIm%2Fab9I5TALFAG8jD0o1n3Sz9gfCZjAw%3D; _nbuild_session=457c6fb51a66152bae2e78545c163c0c

                                         
                                         104.107.247.90
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Location: https://d3n8a8pro7vhmx.cloudfront.net/themes/59c40aceed0e46084b000000/attachments/original/1506020096/dropdown.png?1506020096
Server: Apache/2.4.7 (Ubuntu)
Status: 301 Moved Permanently
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-Middleware-Start: t=1528980876085747
X-Powered-By: Phusion Passenger Enterprise 5.0.28
X-Rack-Cache: pass
X-Request-Id: 6aa49781-4550-464e-be85-8158a29b6fff
X-Runtime: 0.031044
X-Served-By: app14
Content-Length: 191
Use-Proxy: True, True
Cache-Control: public, max-age=6361
Expires: Thu, 14 Jun 2018 16:54:34 GMT
Date: Thu, 14 Jun 2018 15:08:33 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   191
Md5:    bff1ca82308ec87e779ed79b17fc380a
Sha1:   e2e94d308983ec61ba3edef762b16497ed550a57
Sha256: af2f826ae79196e45f1b38d4a6cd1977dbda39b23db72c72e265f94079071550
                                        
                                            GET /v2.8/111975486370666/picture?height=255&type=square&width=255 HTTP/1.1 
Host: graph.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         31.13.72.8
HTTP/1.1 302 Found
Content-Type: image/jpeg
                                        
x-app-usage: {"call_count":0,"total_cputime":0,"total_time":0}
Location: https://platform-lookaside.fbsbx.com/platform/profilepic/?asid=111975486370666&height=255&width=255&ext=1529248113&hash=AeS2t19fRWnyjQgq
Strict-Transport-Security: max-age=15552000; preload
x-fb-trace-id: FhhiDATvvom
x-fb-rev: 4006737
Expires: Sat, 01 Jan 2000 00:00:00 GMT
facebook-api-version: v2.8
Cache-Control: private, no-cache, no-store, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: *
X-FB-Debug: Mv6tZ7DeVyO56g4O+dVfptOhc18fhqVlkdwwLwn2yPK7dGMVG1+Nt5938iu7NXkB3OWNtzAwyIzqNUwVZ2AQlA==
Date: Thu, 14 Jun 2018 15:08:33 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /themes/59c40aceed0e46084b000000/attachments/original/1506020096/dropdown.png?1506020096 HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/theme.scss

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 547
Connection: keep-alive
Date: Wed, 13 Jun 2018 13:11:22 GMT
Last-Modified: Thu, 21 Sep 2017 18:54:57 GMT
Etag: "be1b625e35d73bc9244c5f0bb3c62b08"
Accept-Ranges: bytes
Server: AmazonS3
Age: 6968
X-Cache: Hit from cloudfront
Via: 1.1 d2344bac503cfadf51884e9930680ffe.cloudfront.net (CloudFront)
X-Amz-Cf-Id: -QJwHNYPlivddI2uyRQVQb6JfugXGZLkFUEtla-J2e81sLfCFwY2Pw==


--- Additional Info ---
Magic:  PNG image, 18 x 38, 8-bit/color RGBA, non-interlaced
Size:   547
Md5:    be1b625e35d73bc9244c5f0bb3c62b08
Sha1:   b49a55537f2c702c094e543ca809ee31c6d67a1c
Sha256: ce022deb3103c3ec9f6ae86455d0a3b1416004bce778a59f6cfd77d857da8043
                                        
                                            GET /s/lato/v14/S6uyw4BMUTPHjx4wWA.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i|Rubik:300,500
Origin: https://chitown.nationbuilder.com

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 28412
Date: Tue, 12 Jun 2018 17:33:03 GMT
Expires: Wed, 12 Jun 2019 17:33:03 GMT
Last-Modified: Wed, 11 Oct 2017 18:23:15 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 164131
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  data
Size:   28412
Md5:    62fb51e9e645f63599238881b9de15dd
Sha1:   82b144e3c8b4ff40aeca34ddf7bc35985311b90e
Sha256: 5aeb07f9980663c2501c9620371e11ae7aa6e320d94dd753d0ef56d8308c74b3
                                        
                                            GET /en_US/sdk.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: 4dd705581b0154a45a7c9ef271be9624
Etag: "530d763ba42f23181ea06c785470ea27"
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
X-XSS-Protection: 0
X-Frame-Options: DENY
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Thu, 14 Jun 2018 15:26:18 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: FZ/5/vUt6mS1qsSYCnPcng==
X-FB-Debug: usXmYtvRcIgu1siPwJ/pUPTm4sKlJYAdxjoVN4vc0FqTeVcRBG0uDc9Rt03EnaTRvNH/uhRzFja6qRqQ8rGdPA==
Date: Thu, 14 Jun 2018 15:08:34 GMT
Connection: keep-alive
Content-Length: 65419


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   65419
Md5:    159ff9fef52dea64b5aac4980a73dc9e
Sha1:   7ee503f1d4cc1f4e897b45690b9705eb4a0e9e5f
Sha256: adf15dc1939bce15a26b2787d6f60cb15e1c42f75974a59af990b2eba9368325
                                        
                                            GET /platform/profilepic/?asid=111975486370666&height=255&width=255&ext=1529248113&hash=AeS2t19fRWnyjQgq HTTP/1.1 
Host: platform-lookaside.fbsbx.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 04 Nov 2014 18:31:29 GMT
X-Unified-Storage-Connection-Used: 1
Expires: Tue, 19 Jun 2018 18:39:55 GMT
Cache-Control: max-age=1209600, no-transform
Date: Thu, 14 Jun 2018 15:08:34 GMT
Access-Control-Allow-Origin: *
Content-Disposition: attachment
Connection: keep-alive
Content-Length: 3938


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   3938
Md5:    91175383bbbdae71d4d5b7d14b0e8470
Sha1:   a5d630578e63bd079bf0b0ae48956145a87cca2d
Sha256: 5845f20aa45fbf825c138e5eed66ff6cb76e2eb22c5e316540810c8373770612
                                        
                                            GET /themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/check.png HTTP/1.1 
Host: chitown.nationbuilder.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/theme.scss
Cookie: _nbuild_nocache=true; _nbuild_token=ENjjUIlU2SdIm%2Fab9I5TALFAG8jD0o1n3Sz9gfCZjAw%3D; _nbuild_session=457c6fb51a66152bae2e78545c163c0c

                                         
                                         104.107.247.90
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Location: https://d3n8a8pro7vhmx.cloudfront.net/themes/59c40aceed0e46084b000000/attachments/original/1506020093/check.png?1506020093
Server: Apache/2.4.7 (Ubuntu)
Status: 301 Moved Permanently
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-Middleware-Start: t=1528978828493636
X-Powered-By: Phusion Passenger Enterprise 5.0.28
X-Rack-Cache: pass
X-Request-Id: fea62a49-3a3e-4843-8b99-ccf1ce01b0da
X-Runtime: 0.043793
X-Served-By: app10
Content-Length: 188
Use-Proxy: True, True
Cache-Control: public, max-age=4314
Expires: Thu, 14 Jun 2018 16:20:27 GMT
Date: Thu, 14 Jun 2018 15:08:33 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   188
Md5:    024b57135f5c05ba196399833e18eaaa
Sha1:   4df38a567b58b8d6a3cc8c5866bf70cf6087cf50
Sha256: 8bd554a0a837d441812dca5cdce5a19cb0f61e5afee874592224109ad18b4329
                                        
                                            GET /s/rubik/v7/iJWHBXyIfDnIV7Eyjmmd8WY.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,400i,700,700i|Rubik:300,500
Origin: https://chitown.nationbuilder.com

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 27964
Date: Tue, 05 Jun 2018 16:28:06 GMT
Expires: Wed, 05 Jun 2019 16:28:06 GMT
Last-Modified: Tue, 10 Oct 2017 23:02:16 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 772828
Alt-Svc: quic=":443"; ma=2592000; v="43,42,41,39,35"


--- Additional Info ---
Magic:  data
Size:   27964
Md5:    614d1a190ad1c106c587dbce2b24b26f
Sha1:   213a79b31f89d85ccb1c638d869494cf2e339c86
Sha256: 0e9f7ff2e837d33168d48b6dffae4833c85c9a0f1d431235cf3fa492734d3a29
                                        
                                            GET /chitown/sites/2/favicon_images/original/favicon.png?1508969975 HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
If-Modified-Since: Wed, 25 Oct 2017 22:19:36 GMT
If-None-Match: "32d6069b5cb31ef7a2dd2dc7b783d1e7"

                                         
                                         54.192.98.114
HTTP/1.1 304 Not Modified
                                        
Connection: keep-alive
Date: Thu, 14 Jun 2018 15:08:34 GMT
Etag: "32d6069b5cb31ef7a2dd2dc7b783d1e7"
Server: AmazonS3
Age: 6967
X-Cache: Hit from cloudfront
Via: 1.1 f46b6835a58763129c9d1db5dc3ef62f.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 8-dmIzeZg-ZX4xIxjjr0IIkXI7p4WEr8Ladn8P-xnj46Dph1VIxFSQ==


--- Additional Info ---
                                        
                                            GET /platform/profilepic/?asid=111975486370666&height=255&width=255&ext=1529248112&hash=AeQXilDr-RRwVYLQ HTTP/1.1 
Host: platform-lookaside.fbsbx.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Tue, 04 Nov 2014 18:31:29 GMT
X-Unified-Storage-Connection-Used: 1
Expires: Tue, 19 Jun 2018 18:39:55 GMT
Cache-Control: max-age=1209600, no-transform
Date: Thu, 14 Jun 2018 15:08:34 GMT
Access-Control-Allow-Origin: *
Content-Disposition: attachment
Connection: keep-alive
Content-Length: 3938


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   3938
Md5:    91175383bbbdae71d4d5b7d14b0e8470
Sha1:   a5d630578e63bd079bf0b0ae48956145a87cca2d
Sha256: 5845f20aa45fbf825c138e5eed66ff6cb76e2eb22c5e316540810c8373770612
                                        
                                            GET /themes/59c40aceed0e46084b000000/attachments/original/1506020093/check.png?1506020093 HTTP/1.1 
Host: d3n8a8pro7vhmx.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/themes/2/59c40aceed0e46084b000000/0/attachments/15060201981524854654/default/theme.scss

                                         
                                         54.192.98.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 567
Connection: keep-alive
Date: Wed, 13 Jun 2018 13:11:22 GMT
Last-Modified: Thu, 21 Sep 2017 18:54:54 GMT
Etag: "885bdbd21e7efdb021317b6152aee2f4"
Accept-Ranges: bytes
Server: AmazonS3
Age: 6969
X-Cache: Hit from cloudfront
Via: 1.1 909148671fe00df5415904e5ad7e738c.cloudfront.net (CloudFront)
X-Amz-Cf-Id: XAuU42pGE2Fr2LSXrcazg6coQZgtL5EAQbVXY7LNOIwz9pvFqQA9Lw==


--- Additional Info ---
Magic:  PNG image, 22 x 18, 8-bit/color RGBA, non-interlaced
Size:   567
Md5:    885bdbd21e7efdb021317b6152aee2f4
Sha1:   517bc326b50e129358d9cd5b5430f5a9896c5fc8
Sha256: 02dc30f3a30162d4dd626de6848864b8b920e554317fd9fbcdfa23a60bbd2210
                                        
                                            GET /connect/xd_arbiter/r/mAiQUwlReIP.js?version=42 HTTP/1.1 
Host: staticxx.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Tue, 11 Jun 2019 21:47:40 GMT
Cache-Control: public,max-age=31536000,immutable
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-XSS-Protection: 0
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: 8BgFa6T1OXKJvBfvHYsHxpPta+eLppK06foeRDB6jh/wKcZGRCdPN5J8lU9xMQL1Du32KiKvj/Iswui+AnGzvA==
Date: Thu, 14 Jun 2018 15:08:34 GMT
Connection: keep-alive
Content-Length: 13660


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13660
Md5:    896ccc50166dda2927d41a75ae8e349d
Sha1:   e80de653f6b333b62dd21a0d6fe16b68fd7d74d8
Sha256: f9826e8307908816e0557d369b463d7f3f51f4caa300068ad3bec6bd653767b1
                                        
                                            GET /connect/ping?client_id=126739610711965&domain=chitown.nationbuilder.com&origin=1&redirect_uri=https%3A%2F%2Fstaticxx.facebook.com%2Fconnect%2Fxd_arbiter%2Fr%2FmAiQUwlReIP.js%3Fversion%3D42%23cb%3Df54e594139382a%26domain%3Dchitown.nationbuilder.com%26origin%3Dhttps%253A%252F%252Fchitown.nationbuilder.com%252Ff2a356e29b3a6%26relation%3Dparent&response_type=token%2Csigned_request%2Ccode&sdk=joey&version=v2.8 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://chitown.nationbuilder.com/917/_live_tv_sal-bgfzaum4wco86y9nug

                                         
                                         31.13.72.38
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-XSS-Protection: 0
Pragma: no-cache
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Cache-Control: private, no-cache, no-store, must-revalidate
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
X-FB-Debug: K6BBuBUuarhpnkJnpEcENhv2pH+7f0pWC+XdOJUppRPc7WZEZS3GcDkowIDYEeG2b5fuyjvPxgvNkNmPwCrK/g==
Date: Thu, 14 Jun 2018 15:08:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   171
Md5:    580e297fdf32d0bcbbd7190a67edb5af
Sha1:   23dc730b6b8cb2939f1e847f5bfdf925bf17c76a
Sha256: 262b144a029a9790a1268c0a0762e0150414c989252e6898b44e8a05c23a7b2b