GET sk5.gazandur.org/click?key=01c2c5988d64a43d1b92&tid=egpbp67768ee1000c5f88&pubid=205336
172.67.134.83307 Temporary Redirect 0 B URL User Request GET HTTP/2 sk5.gazandur.org/click?key=01c2c5988d64a43d1b92&tid=egpbp67768ee1000c5f88&pubid=205336
IP 172.67.134.83:443
Certificate IssuerGoogle Trust Services
Subjectgazandur.org
FingerprintC4:0A:97:CD:0F:0F:BE:F4:84:D3:01:F2:82:47:08:C8:94:19:9F:07
ValidityMon, 30 Dec 2024 11:28:58 GMT - Sun, 30 Mar 2025 12:27:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?key=01c2c5988d64a43d1b92&tid=egpbp67768ee1000c5f88&pubid=205336 HTTP/1.1
Host: sk5.gazandur.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Thu, 02 Jan 2025 13:05:56 GMT
content-length: 0
location: https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
set-cookie: uclick=nLmKx1oNMN41g+qgbmCYt+EgxaaIBVbXmXJ6221SwI25idTWE5n9TcW5HOd6xSjjnPKh4Jg=; Max-Age=31536000; SameSite=Lax
bcid=ctr8ud2ke1bc739vp4k0; Max-Age=31536000; SameSite=Lax
cid=ctr8ud2ke1bc739vp4k0; Max-Age=31536000; SameSite=Lax
x-request-id: 1ca3277a-f36c-46c0-ba2f-ff7189bfc3c5
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8msA2gX%2BXQLxs9woFqojRUzoz6LWIpb2da2d9oggVbjHUbns5OTrHTYivpNBoOZW%2B9LQG%2BhC52DePym%2BkLZto1KjB97%2FAJ6ZNqt84Hs7FOXmpl35lsaAgI46VXIEPXbJR7Hz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8fbaf6a52b3d56a4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5726&min_rtt=478&rtt_var=10460&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3200&recv_bytes=1168&delivery_rate=5815261&cwnd=254&unsent_bytes=0&cid=be7dd5e6a9c6f9fd&ts=113&x=0"
X-Firefox-Spdy: h2
GET cdn-dimi.akamaized.net/landings/289792/1721030789/css/reset.min.css?1721030789
95.101.11.40200 OK 500 B URL GET HTTP/1.1 cdn-dimi.akamaized.net/landings/289792/1721030789/css/reset.min.css?1721030789
IP 95.101.11.40:443
ASN #20940 Akamai International B.V.
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A
ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File type ASCII text, with very long lines (889), with no line terminators
Hash a6e2c73e414e9bd299246c7167875997
49062f35c6baa5736f1573a7e835ce69856d34e9
6eadf6f70e95202e93d361064fe6a76e6f96bf7904cbbb527128b1e63c09bb55
GET /landings/289792/1721030789/css/reset.min.css?1721030789 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oenlk.calltogetprize.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: xUlIujJtz0ZuxUeZwDk/V01eavep9GXANZJW/XH1Mf7Jcu0CBVTIH+pVMxFQahhVEY5RUMRpKzo=
x-amz-request-id: 92TFP29ZVP3QZN98
Last-Modified: Mon, 15 Jul 2024 09:10:13 GMT
ETag: "a6e2c73e414e9bd299246c7167875997"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 02 Jan 2025 13:05:56 GMT
Content-Length: 500
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
GET cdn-dimi.akamaized.net/landings/289792/1721030789/css/general.css?1721030789
95.101.11.40200 OK 1.5 kB URL GET HTTP/1.1 cdn-dimi.akamaized.net/landings/289792/1721030789/css/general.css?1721030789
IP 95.101.11.40:443
ASN #20940 Akamai International B.V.
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A
ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
Hash 125ef0a496fe13cf8d16f3787ed5f669
04aa408d6c33288ba6df024398d2471f2f10d11f
e4a438ed0e118957cb1509cdd2de84be145bcd37c0dd980f35e9a47e096af652
GET /landings/289792/1721030789/css/general.css?1721030789 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oenlk.calltogetprize.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: lEeB7tBEMxtkPlc4rJlqHWRzOkJpc/KOaA791r2ocvHQT51ZG+Ny1z58BXLr3SGQEm+ThFPW40Y=
x-amz-request-id: 92T72PR2T8K68N00
Last-Modified: Mon, 15 Jul 2024 09:10:13 GMT
ETag: "125ef0a496fe13cf8d16f3787ed5f669"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 02 Jan 2025 13:05:56 GMT
Content-Length: 1486
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
GET cdn-dimi.akamaized.net/landings/289792/1721030789/js/jquery.min.js?1721030789
95.101.11.40200 OK 30 kB URL GET HTTP/1.1 cdn-dimi.akamaized.net/landings/289792/1721030789/js/jquery.min.js?1721030789
IP 95.101.11.40:443
ASN #20940 Akamai International B.V.
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A
ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /landings/289792/1721030789/js/jquery.min.js?1721030789 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oenlk.calltogetprize.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: lstyc1PDeWkSdgSu1p441l5dOqfCUsa31IqUOM2/5uAlNtljEs4IjU2Y4NclrFJpcm8xN5oI24CFeEXmjedmpw==
x-amz-request-id: 92T9DB5TNPAKNABJ
Last-Modified: Mon, 15 Jul 2024 09:10:13 GMT
ETag: "a09e13ee94d51c524b7e2a728c7d4039"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 02 Jan 2025 13:05:56 GMT
Content-Length: 30351
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
GET cdn-dimi.akamaized.net/landings/289792/1721030789/js/translates.js?1721030789
95.101.11.40200 OK 7.1 kB URL GET HTTP/1.1 cdn-dimi.akamaized.net/landings/289792/1721030789/js/translates.js?1721030789
IP 95.101.11.40:443
ASN #20940 Akamai International B.V.
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A
ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators
Hash 12e126cad96ab5c8a4bd91a1c3ae0d5f
c6262e8ddbe30eab3f2f3b9973348391df02a541
229e25afc4be62a9395df26660dc23179120d3a40f563a209226fd2e3f004828
GET /landings/289792/1721030789/js/translates.js?1721030789 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oenlk.calltogetprize.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: gfNFmNKJ4dvK7IACRGAoP/BbtMzaHCzwl20g9bB3FgAOLzhR1Vx6QX02UiOdvTqhKoLXtct8dPI=
x-amz-request-id: 92T79TRR4Q5NKNXE
Last-Modified: Mon, 15 Jul 2024 09:10:13 GMT
ETag: "12e126cad96ab5c8a4bd91a1c3ae0d5f"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 02 Jan 2025 13:05:56 GMT
Content-Length: 7096
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
GET cdn-dimi.akamaized.net/landings/289792/1721030789/images/video.mp4
95.101.11.40206 Partial Content 8.7 kB URL GET HTTP/1.1 cdn-dimi.akamaized.net/landings/289792/1721030789/images/video.mp4
IP 95.101.11.40:443
ASN #20940 Akamai International B.V.
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A
ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
Hash 679725c381210b983275a3301e5c7e42
78d041524c224d9700a1b3188775b7cbf951f1c8
5404f71c46775172727c84e577314014381c2f1daeff82ee641c6cd2da031dec
GET /landings/289792/1721030789/images/video.mp4 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=3997696-
DNT: 1
Connection: keep-alive
Referer: https://oenlk.calltogetprize.net/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
x-amz-id-2: iRRkV2GjXPVURnFvZNREdsThuy0E7OaXQpAA6tCqKSFocCfeu044cRYzDeQnCQ7XcKuAdf5AnyI=
x-amz-request-id: S70VSJ19279R77DW
Last-Modified: Mon, 15 Jul 2024 09:10:13 GMT
ETag: "bf54ba29dff65b5f5d2eb2d5e87fa1c2"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: video/mp4
Server: AmazonS3
Date: Thu, 02 Jan 2025 13:05:57 GMT
Content-Range: bytes 3997696-4006361/4006362
Content-Length: 8666
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
GET fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2
142.250.74.67200 OK 7.9 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2
IP 142.250.74.67:443
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF
ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oenlk.calltogetprize.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Dec 2024 04:15:23 GMT
expires: Sun, 28 Dec 2025 04:15:23 GMT
cache-control: public, max-age=31536000
age: 463834
last-modified: Wed, 04 Dec 2024 06:53:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
142.250.74.42200 OK 8.5 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP 142.250.74.42:443
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint30:E5:7E:29:A5:A1:81:DB:C8:A8:49:80:67:40:12:AB:30:C0:34:8D
ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File type gzip compressed data, max compression
Hash 8cfc55c8a8784413c55f788837aa447b
9949fb8be46951951f90e1c3fafe61f8e738c919
9bd67cdb6e02ce795db59a5fe045defd25eb58564f4ef052f40f2c096f170f14
GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn-dimi.akamaized.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 Jan 2025 13:05:57 GMT
date: Thu, 02 Jan 2025 13:05:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn-dimi.akamaized.net/landings/289792/1721030789/images/video.mp4
95.101.11.40206 Partial Content 8.7 kB URL GET HTTP/1.1 cdn-dimi.akamaized.net/landings/289792/1721030789/images/video.mp4
IP 95.101.11.40:443
ASN #20940 Akamai International B.V.
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A
ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
Hash 679725c381210b983275a3301e5c7e42
78d041524c224d9700a1b3188775b7cbf951f1c8
5404f71c46775172727c84e577314014381c2f1daeff82ee641c6cd2da031dec
GET /landings/289792/1721030789/images/video.mp4 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=3997696-
DNT: 1
Connection: keep-alive
Referer: https://oenlk.calltogetprize.net/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
x-amz-id-2: iRRkV2GjXPVURnFvZNREdsThuy0E7OaXQpAA6tCqKSFocCfeu044cRYzDeQnCQ7XcKuAdf5AnyI=
x-amz-request-id: S70VSJ19279R77DW
Last-Modified: Mon, 15 Jul 2024 09:10:13 GMT
ETag: "bf54ba29dff65b5f5d2eb2d5e87fa1c2"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: video/mp4
Server: AmazonS3
Date: Thu, 02 Jan 2025 13:05:57 GMT
Content-Range: bytes 3997696-4006361/4006362
Content-Length: 8666
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
GET cdn-dimi.akamaized.net/landings/289792/1721030789/images/video.mp4
95.101.11.40206 Partial Content 8.7 kB URL GET HTTP/1.1 cdn-dimi.akamaized.net/landings/289792/1721030789/images/video.mp4
IP 95.101.11.40:443
ASN #20940 Akamai International B.V.
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A
ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
Hash 679725c381210b983275a3301e5c7e42
78d041524c224d9700a1b3188775b7cbf951f1c8
5404f71c46775172727c84e577314014381c2f1daeff82ee641c6cd2da031dec
GET /landings/289792/1721030789/images/video.mp4 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=3997696-
DNT: 1
Connection: keep-alive
Referer: https://oenlk.calltogetprize.net/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
x-amz-id-2: iRRkV2GjXPVURnFvZNREdsThuy0E7OaXQpAA6tCqKSFocCfeu044cRYzDeQnCQ7XcKuAdf5AnyI=
x-amz-request-id: S70VSJ19279R77DW
Last-Modified: Mon, 15 Jul 2024 09:10:13 GMT
ETag: "bf54ba29dff65b5f5d2eb2d5e87fa1c2"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: video/mp4
Server: AmazonS3
Date: Thu, 02 Jan 2025 13:05:57 GMT
Content-Range: bytes 3997696-4006361/4006362
Content-Length: 8666
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
GET cdnjs.cloudflare.com/ajax/libs/firebase/8.2.2/firebase-app.min.js
104.17.25.14200 OK 5.8 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/firebase/8.2.2/firebase-app.min.js
IP 104.17.25.14:443
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint64:3F:50:40:E0:BD:89:CB:A9:C8:BE:E5:74:F6:9E:D6:2E:1A:32:02
ValidityTue, 26 Nov 2024 07:25:18 GMT - Mon, 24 Feb 2025 07:25:17 GMT
File type JavaScript source, ASCII text, with very long lines (19780), with no line terminators
Hash 5e2898beab1505a629bf1254fbdf9ed8
f17ac22f600d694ae4341c4da46576e3fec0e6f4
00d770fea1249b4be3f55a037a9edd20c1fe55bda8ab1e4b6251e56cd74cd05b
GET /ajax/libs/firebase/8.2.2/firebase-app.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oenlk.calltogetprize.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 02 Jan 2025 13:05:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 5762
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5ff7ae08-4d44"
last-modified: Fri, 08 Jan 2021 00:57:44 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1163887
expires: Tue, 23 Dec 2025 13:05:57 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7PQ2sNjQI82XlQ9AllGtjJjZ9Kh557CRB2Bpi2XydeQJePppWGG1ZahqE5rJ62Nj7hrYqHj7WZ7KLAxKAxARZq9E6dqEVwUpoxY3a%2FEv3yIy949W6M7VEll%2BleL%2FGsFUyOSmyhD4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8fbaf6ae7e6cb505-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn-dimi.akamaized.net/images/favicon.ico
95.101.11.11200 OK 4.1 kB URL GET HTTP/1.1 cdn-dimi.akamaized.net/images/favicon.ico
IP 95.101.11.11:443
ASN #20940 Akamai International B.V.
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A
ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Hash 4cdf3256cd7b8ec3917adb79d6bf457e
bc615337e9223183a126c8fb649774866fb53e69
fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /images/favicon.ico HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oenlk.calltogetprize.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 2GM1RH+Oo7JIRLs/OPfJSrmls1pwWkrIufazLdJT5aWuDbgNABEKJmW/8rLlCMaF9QlDE8aTJ9E=
x-amz-request-id: Y5JJFAEXP3X803ZN
Last-Modified: Wed, 07 Nov 2018 08:41:38 GMT
ETag: "4cdf3256cd7b8ec3917adb79d6bf457e"
Accept-Ranges: bytes
Content-Type: image/x-icon
Server: AmazonS3
Content-Length: 4103
Date: Thu, 02 Jan 2025 13:05:57 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
GET www.gstatic.com/firebasejs/8.2.2/firebase-messaging.js
142.250.74.99200 OK 11 kB URL GET HTTP/2 www.gstatic.com/firebasejs/8.2.2/firebase-messaging.js
IP 142.250.74.99:443
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF
ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File type JavaScript source, ASCII text, with very long lines (40719)
Hash b183329c90af8d64337b925c208e7a14
9f5a49eab81c119d28416ba96f0390fdbc5a4565
8e494f1321a6b31f3f2c5b67d5ed2242260adae69ac403bf87daba0aa6f0d9cf
GET /firebasejs/8.2.2/firebase-messaging.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oenlk.calltogetprize.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 10840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Dec 2024 16:25:22 GMT
expires: Sat, 27 Dec 2025 16:25:22 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 07 Jan 2021 21:51:17 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 506435
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn-dimi.akamaized.net/landings/289792/1721030789/images/video.mp4
95.101.11.40206 Partial Content 1.8 MB URL GET HTTP/1.1 cdn-dimi.akamaized.net/landings/289792/1721030789/images/video.mp4
IP 95.101.11.40:443
ASN #20940 Akamai International B.V.
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A
ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Size 1.8 MB (1843102 bytes)
Hash a160e394cdcc0c2e0d4ce94c9aaa26f8
a5c1340c4f59a6edb250bf481f18699f16edcda6
833e3bd167063974bd458ce6eca3bc29cacfd5a0b524a403a039ce837da53690
GET /landings/289792/1721030789/images/video.mp4 HTTP/1.1
Host: cdn-dimi.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://oenlk.calltogetprize.net/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
x-amz-id-2: iRRkV2GjXPVURnFvZNREdsThuy0E7OaXQpAA6tCqKSFocCfeu044cRYzDeQnCQ7XcKuAdf5AnyI=
x-amz-request-id: S70VSJ19279R77DW
Last-Modified: Mon, 15 Jul 2024 09:10:13 GMT
ETag: "bf54ba29dff65b5f5d2eb2d5e87fa1c2"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: video/mp4
Server: AmazonS3
Date: Thu, 02 Jan 2025 13:05:57 GMT
Content-Range: bytes 0-4006361/4006362
Content-Length: 4006362
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
GET oenlk.calltogetprize.net/js/pushjs/1.0.0/subscriber.js
52.19.101.114200 OK 14 kB URL GET HTTP/2 oenlk.calltogetprize.net/js/pushjs/1.0.0/subscriber.js
IP 52.19.101.114:443
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerLet's Encrypt
Subject*.calltogetprize.net
Fingerprint37:53:F4:10:4C:CB:63:E9:05:F9:CC:1E:9B:B2:2D:97:AC:6D:32:42
ValiditySat, 09 Nov 2024 23:32:20 GMT - Fri, 07 Feb 2025 23:32:19 GMT
File type JavaScript source, ASCII text, with very long lines (599)
Hash ac569ffc0beb63e3e3aa9bc96f034b00
cd26d911112f00087a6dd8c4a92fb858ec2d3bbd
197fbcbda196254842164e91f2f0873c08a569189262d335f82d05235f33cd23
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/pushjs/1.0.0/subscriber.js HTTP/1.1
Host: oenlk.calltogetprize.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oenlk.calltogetprize.net/?s1=45431&s2=2042599&s3=&s5=backuser&click_id=&iexpp=1&j1=1&utm_source=da57dc555e50572d&=undefined&ban=tg
Cookie: unique_id=6776628d000eb6a8; unique_id2=67768f34000432a9; 67768f34000432a9_c=1; ref_token=37032_114941_45431; 67768f34000432a9_sl=[289792]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 02 Jan 2025 13:05:57 GMT
content-type: application/javascript
expires: Thu, 09 Jan 2025 13:05:57 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
GET oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
52.19.101.114200 OK 32 kB URL User Request GET HTTP/2 oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
IP 52.19.101.114:443
Certificate IssuerLet's Encrypt
Subject*.calltogetprize.net
Fingerprint37:53:F4:10:4C:CB:63:E9:05:F9:CC:1E:9B:B2:2D:97:AC:6D:32:42
ValiditySat, 09 Nov 2024 23:32:20 GMT - Fri, 07 Feb 2025 23:32:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599 HTTP/1.1
Host: oenlk.calltogetprize.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 02 Jan 2025 13:05:56 GMT
content-type: text/html; charset=utf-8
set-cookie: unique_id=6776628d000eb6a8; Path=/; Expires=Mon, 03 Mar 2025 13:05:56 GMT; Secure; SameSite=None
unique_id2=67768f34000432a9; Path=/; Expires=Wed, 02 Apr 2025 13:05:56 GMT; Secure; SameSite=None
67768f34000432a9_c=1; Path=/; Expires=Wed, 02 Apr 2025 13:05:56 GMT; Secure; SameSite=None
ref_token=37032_114941_45431; Path=/; Expires=Sat, 01 Feb 2025 13:05:56 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Thu, 02 Jan 2025 13:05:56 GMT; Secure; SameSite=None
67768f34000432a9_sl=[289792]; Path=/; Expires=Thu, 16 Jan 2025 13:05:56 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
GET oenlk.calltogetprize.net/js/pushjs/1.0.0/utils.js
52.19.101.114200 OK 7.1 kB URL GET HTTP/2 oenlk.calltogetprize.net/js/pushjs/1.0.0/utils.js
IP 52.19.101.114:443
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerLet's Encrypt
Subject*.calltogetprize.net
Fingerprint37:53:F4:10:4C:CB:63:E9:05:F9:CC:1E:9B:B2:2D:97:AC:6D:32:42
ValiditySat, 09 Nov 2024 23:32:20 GMT - Fri, 07 Feb 2025 23:32:19 GMT
File type JavaScript source, ASCII text, with very long lines (7334), with no line terminators
Hash 7df62062a027cd25d5a179c520f38668
0ddaa8cd9090908d987e0299cef74fbf7f118738
cdf93aff990bae251f609ef00d7d2bdbb56a35f003c7184ba067b5948629faa3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/pushjs/1.0.0/utils.js HTTP/1.1
Host: oenlk.calltogetprize.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oenlk.calltogetprize.net/?s1=45431&s2=2042599&s3=&s5=backuser&click_id=&iexpp=1&j1=1&utm_source=da57dc555e50572d&=undefined&ban=tg
Cookie: unique_id=6776628d000eb6a8; unique_id2=67768f34000432a9; 67768f34000432a9_c=1; ref_token=37032_114941_45431; 67768f34000432a9_sl=[289792]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 02 Jan 2025 13:05:57 GMT
content-type: application/javascript
expires: Thu, 09 Jan 2025 13:05:57 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
142.250.74.67200 OK 7.8 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP 142.250.74.67:443
Requested by https://oenlk.calltogetprize.net/?utm_source=da57dc555e50572d&&ban=tg&j1=1&s1=45431&s2=2042599
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF
ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oenlk.calltogetprize.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Dec 2024 22:57:31 GMT
expires: Sat, 27 Dec 2025 22:57:31 GMT
cache-control: public, max-age=31536000
age: 482906
last-modified: Wed, 04 Dec 2024 06:53:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2