POST obseu.seaskydvd.com/mon
200 OK 0 B IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerZeroSSL
Subject*.seaskydvd.com
Fingerprint05:53:23:76:9D:A8:A2:5D:64:89:60:32:6A:A8:21:06:4A:59:24:C3
ValiditySun, 30 Mar 2025 00:00:00 GMT - Sat, 28 Jun 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1763
Origin: https://cp3699.olikonnre.org
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/
Cookie: cg_uuid=ba110cd11344e5248c421ad4c848c693
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://cp3699.olikonnre.org
content-type: application/json
date: Mon, 31 Mar 2025 12:01:14 GMT
content-length: 0
X-Firefox-Spdy: h2
POST obseu.seaskydvd.com/mon
200 OK 0 B IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerZeroSSL
Subject*.seaskydvd.com
Fingerprint05:53:23:76:9D:A8:A2:5D:64:89:60:32:6A:A8:21:06:4A:59:24:C3
ValiditySun, 30 Mar 2025 00:00:00 GMT - Sat, 28 Jun 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1766
Origin: https://cp3699.olikonnre.org
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/
Cookie: cg_uuid=ba110cd11344e5248c421ad4c848c693
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://cp3699.olikonnre.org
content-type: application/json
date: Mon, 31 Mar 2025 12:01:21 GMT
content-length: 0
X-Firefox-Spdy: h2
GET cp3699.olikonnre.org/favicon.ico
200 OK 0 B URL GET cp3699.olikonnre.org/favicon.ico
IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerLet's Encrypt
Subjectcp3699.olikonnre.org
FingerprintF3:69:DA:F2:AC:58:DB:5C:8F:F0:6C:12:BE:5E:40:35:8F:94:7F:4E
ValiditySat, 01 Mar 2025 07:51:45 GMT - Fri, 30 May 2025 07:51:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: cp3699.olikonnre.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":50559"; ma=2592000
content-type: image/x-icon
date: Mon, 31 Mar 2025 12:01:10 GMT
etag: "670f7248-0"
last-modified: Wed, 16 Oct 2024 07:59:04 GMT
server: Caddy, nginx
content-length: 0
X-Firefox-Spdy: h2
GET syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fcp3699.olikonnre.org%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.oCN6HPxk2JLIMtNM_b9BzGUmHij60Cq-WNW0GXsNnBC60xD4x9Q97w.qVNRjaWeQ7G4rUkk3OflGw.-ruGaTaxztjQuzjq9Gf_AQNTAn0kCD-sfWfTzi1mKsn-VOv-2lahetmkaOpr2whx1b-HnidasNQAg5TXHlLgLvkzr3WxFjymVH6vLgEJSn3sdM4_NjSYGEE_4GcnIFUg7FsFCdh1nbzQAViBo0bx3Wb2JSIQI8OAzv5Whl8HynNrYiPtQXK1fKWVcUOwRjEUyL-4WwQeetWTpTC_LFgl3dlmewCgY1YWZhauUjg2Do9oZWY9I96nkX2v80iWf6ucuZhsAN7x-vlhIPlGN6Lo2qvKGuMV7DElYOUSszy4pVQuP-abtbTMXw0hLSEGGVa0E4mbpFD_NKcU2lsQQWSYrzxoQICsNRVJUNQVsUj9JVsIEIyb1eB3j0XRq1vPGwM0B-J0SwVbZncQHrKpVpQvW_Mk8nuJoGCGDFv-Wk0cSfwMzpE5IMt8EZRlpN7t7mfhxGkuCRzRSPVbdiTTv9gmQ0mlMDlMtDMvIRMChMYBtnvbb2pclXPv_AIpa0ZuliOluHxwty71ZUGESuXYr0Bbo13R8U4e8ZfKYfcm4wW0sqJPDsdUzsYK87ZKbci8Yl3c43wb7zSK1SgybmOo_n6E-GtuOLb4d6Ybckpel1UkroIP2oNORDuzpcxuYBFFVDY9.AD6LiWo6TDkvQcp7jjvZfw&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=311743422470968&num=0&output=afd_ads&domain_name=cp3699.olikonnre.org&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1743422470969&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=740324255&rurl=https%3A%2F%2Fcp3699.olikonnre.org%2FBin%2FScreenConnect.WindowsClient.exe
200 OK 16 kB URL GET syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fcp3699.olikonnre.org%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.oCN6HPxk2JLIMtNM_b9BzGUmHij60Cq-WNW0GXsNnBC60xD4x9Q97w.qVNRjaWeQ7G4rUkk3OflGw.-ruGaTaxztjQuzjq9Gf_AQNTAn0kCD-sfWfTzi1mKsn-VOv-2lahetmkaOpr2whx1b-HnidasNQAg5TXHlLgLvkzr3WxFjymVH6vLgEJSn3sdM4_NjSYGEE_4GcnIFUg7FsFCdh1nbzQAViBo0bx3Wb2JSIQI8OAzv5Whl8HynNrYiPtQXK1fKWVcUOwRjEUyL-4WwQeetWTpTC_LFgl3dlmewCgY1YWZhauUjg2Do9oZWY9I96nkX2v80iWf6ucuZhsAN7x-vlhIPlGN6Lo2qvKGuMV7DElYOUSszy4pVQuP-abtbTMXw0hLSEGGVa0E4mbpFD_NKcU2lsQQWSYrzxoQICsNRVJUNQVsUj9JVsIEIyb1eB3j0XRq1vPGwM0B-J0SwVbZncQHrKpVpQvW_Mk8nuJoGCGDFv-Wk0cSfwMzpE5IMt8EZRlpN7t7mfhxGkuCRzRSPVbdiTTv9gmQ0mlMDlMtDMvIRMChMYBtnvbb2pclXPv_AIpa0ZuliOluHxwty71ZUGESuXYr0Bbo13R8U4e8ZfKYfcm4wW0sqJPDsdUzsYK87ZKbci8Yl3c43wb7zSK1SgybmOo_n6E-GtuOLb4d6Ybckpel1UkroIP2oNORDuzpcxuYBFFVDY9.AD6LiWo6TDkvQcp7jjvZfw&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=311743422470968&num=0&output=afd_ads&domain_name=cp3699.olikonnre.org&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1743422470969&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=740324255&rurl=https%3A%2F%2Fcp3699.olikonnre.org%2FBin%2FScreenConnect.WindowsClient.exe
IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint47:7F:1D:15:F5:CA:9E:50:B7:5D:F0:5E:E9:66:E5:02:F8:3D:AD:E6
ValidityMon, 10 Mar 2025 08:39:05 GMT - Mon, 02 Jun 2025 08:39:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fcp3699.olikonnre.org%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.oCN6HPxk2JLIMtNM_b9BzGUmHij60Cq-WNW0GXsNnBC60xD4x9Q97w.qVNRjaWeQ7G4rUkk3OflGw.-ruGaTaxztjQuzjq9Gf_AQNTAn0kCD-sfWfTzi1mKsn-VOv-2lahetmkaOpr2whx1b-HnidasNQAg5TXHlLgLvkzr3WxFjymVH6vLgEJSn3sdM4_NjSYGEE_4GcnIFUg7FsFCdh1nbzQAViBo0bx3Wb2JSIQI8OAzv5Whl8HynNrYiPtQXK1fKWVcUOwRjEUyL-4WwQeetWTpTC_LFgl3dlmewCgY1YWZhauUjg2Do9oZWY9I96nkX2v80iWf6ucuZhsAN7x-vlhIPlGN6Lo2qvKGuMV7DElYOUSszy4pVQuP-abtbTMXw0hLSEGGVa0E4mbpFD_NKcU2lsQQWSYrzxoQICsNRVJUNQVsUj9JVsIEIyb1eB3j0XRq1vPGwM0B-J0SwVbZncQHrKpVpQvW_Mk8nuJoGCGDFv-Wk0cSfwMzpE5IMt8EZRlpN7t7mfhxGkuCRzRSPVbdiTTv9gmQ0mlMDlMtDMvIRMChMYBtnvbb2pclXPv_AIpa0ZuliOluHxwty71ZUGESuXYr0Bbo13R8U4e8ZfKYfcm4wW0sqJPDsdUzsYK87ZKbci8Yl3c43wb7zSK1SgybmOo_n6E-GtuOLb4d6Ybckpel1UkroIP2oNORDuzpcxuYBFFVDY9.AD6LiWo6TDkvQcp7jjvZfw&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=311743422470968&num=0&output=afd_ads&domain_name=cp3699.olikonnre.org&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1743422470969&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=740324255&rurl=https%3A%2F%2Fcp3699.olikonnre.org%2FBin%2FScreenConnect.WindowsClient.exe HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Mon, 31 Mar 2025 12:01:11 GMT
expires: Mon, 31 Mar 2025 12:01:11 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-DynXpR-upQOpQMmrqKwCvQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3533
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET obseu.seaskydvd.com/ct?id=80705&url=https%3A%2F%2Fcp3699.olikonnre.org%2FBin%2FScreenConnect.WindowsClient.exe&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=db3ae61becb69a939f83741d4de0f1ef5ee75145&tsf=0&tsfmi=&tsfu=&cb=1743422471310&hl=2&op=0&ag=2881387774&rand=135610621062826020218228220201007919790152119656621900182520170010181757758602451018215&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=W1siZWYiLDc2MzNdLFsiYWJuY2giLDEyXSxbLTQ3LCJVVEMsZW4tVVMsbGF0bixncmVnb3J5Il0sWy02LCJ7XCJ3XCI6W1wiMFwiLFwidGNibG9ja1wiLFwic2VhcmNoYm94QmxvY2tcIixcImdldFhNTGh0dHBcIixcImFqYXhRdWVyeVwiLFwiYWpheEJhY2tmaWxsXCIsXCJsb2FkRmVlZFwiLFwieG1sSHR0cFwiLFwibHNcIixcImdldExvYWRGZWVkQXJndW1lbnRzXCIsXCJfX2N0Y2dfY3RfODA3MDVfZXhlY1wiLFwiTm90aWZ5UGFpbnRFdmVudFwiXSxcIm5cIjpbXSxcImRcIjpbXX0iXSxbLTcsIi0iXSxbLTYwLCItIl0sWy02MywiLSJdLFstNjUsIi0iXSxbLTY3LCItIl0sWy03MiwiRXhVPSJdLFstMTcsIjQ4Il0sWy0zLCJbXCJpbnRlcm5hbC1wZGYtdmlld2VyXCIsXCJpbnRlcm5hbC1wZGYtdmlld2VyXCIsXCJpbnRlcm5hbC1wZGYtdmlld2VyXCIsXCJpbnRlcm5hbC1wZGYtdmlld2VyXCIsXCJpbnRlcm5hbC1wZGYtdmlld2VyXCJdIl0sWy01MCwiLSJdLFstNTEsIi0iXSxbLTU2LCJsYW5kc2NhcGUtcHJpbWFyeSJdLFstNjgsIi0iXSxbLTIwLCItIl0sWy00OCwiMCwwIl0sWy0xMCwiLSJdLFstMTQsIi0iXSxbLTE1LCItIl0sWy0yNywiLSJdLFstMzUsIlsxNzQzNDIyNDcwODE0LDBdIl0sWy02NiwiLSJdLFstMTMsIi0iXSxbLTI4LCJlbi1VUyxlbiJdLFstMzAsIltcInZcIiwwXSJdLFstMzcsIi0iXSxbLTQxLCItIl0sWy00NSwiNzUyLDAsMCw3MTksMCwwLDc2MSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwIl0sWy0xOSwiWzAsMCwwLDAsMCwwLDEsMjQsMjQsXCItXCIsMTI4MCwxMDI0LDEyODAsMTAyNCwxMjgwLDEwMjQsMTI4MCwxMDI0LDAsMCwwLDAsXCItXCIsXCItXCIsMTI4MCwxMDI0LG51bGxdIl0sWy0yNCwiW10iXSxbLTM0LCItIl0sWy0yLCIxMSxJc045bkduV2JBWUFJeE5mUWFPcUdFMENGQVFzY0cwMEluaE9iWUJBS1lVT3pRTzZFWDAyMEltR0xjdTYydXJkUC9jMmQycE5tVlpBd2YzLy84ejc5R3JIYTFXdTNPbVhQUHZlIl0sWy0zOSwiW1wiMjAxMDAxMDFcIiwyLFwiR2Vja29cIixcIk5ldHNjYXBlXCIsXCJNb3ppbGxhXCIsXCIyMDE4MTAwMTAwMDAwMFwiLG51bGwsZmFsc2UsbnVsbCxmYWxzZSxudWxsLDUsdHJ1ZSxmYWxzZSxudWxsLDAsZmFsc2UsZmFsc2VdIl0sWy05LCItIl0sWy01OSwiLSJdLFstNDQsIjAsNSwwLDUiXSxbLTU4LCItIl0sWy02MSwiLSJdLFstNjQsIi0iXSxbLTExLCJ7XCJ0XCI6XCJcIixcIm1cIjpbXX0iXSxbLTI5LCItIl0sWy0zMiwiMCJdLFstNDMsIjAwMDAwMDAxMDAwMDAwMDAwMDExMTAwMTAwMDAwMTAwMDAwMDAwMCJdLFstNSwiLSJdLFstNTUsIjAiXSxbLTgsIi0iXSxbLTU3LCJTM2xSVFUxSlNnTVdGbHhNVmxzWFNseFlTbEpBWFU5ZEYxcFdWQlpLUVVrV1VCWUxDdzFmQVF3S0NRdFlXQXRiRDF4YUNnbFlXRm9BV0FFTVhWZ0xXbHRmQUJkVFNnTUlBdzhMREFzS0ZRNElBQlpORjF4QlNWWkxUVW9XQlhsUlRVMUpTZ01XRmx4TVZsc1hTbHhZU2xKQVhVOWRGMXBXVkJaS1FVa1dVQllMQ3cxZkFRd0tDUXRZV0F0YkQxeGFDZ2xZV0ZvQVdBRU1YVmdMV2x0ZkFCZFRTZ01JQXc4TERnZ0FGVXBjVFcxUVZGeFdURTBaVVZoWFhWVmNTeE1PQ0FBV1RSZGNRVWxXUzAxS0ZnVjVVVTFOU1VvREZoWmNURlpiRjBwY1dFcFNRRjFQWFJkYVZsUVdTa0ZKRmxBV0N3c05Yd0VNQ2drTFdGZ0xXdzljV2c9PSJdLFstNjIsIjU4Il0sWy03MSwiYTAxMDAxMDExMDAxMDAxMDEwMDAxMDEwMDExMDExMDAwMDAwMTAiXSxbLTEyLCJcIjFcIiJdLFstMjEsIi0iXSxbLTQyLCI4ODMzOTkwMTYiXSxbLTU0LCJ7XCJoXCI6W1wiMzI5OTcyODQ1MlwiLFwiODIyODIzMTE5XCIsXCJfM1wiLFwiMjYzOTIyMjQ2OFwiXSxcImRcIjpbXSxcImJcIjpbXCJfMFwiLFwiMjY0NjAzODgyXCJdLFwic1wiOjF9Il0sWy02OSwiTGludXggeDg2XzY0fHx8NDh8LXwtIl0sWy03MCwiLSJdLFsxMiwie1wiY3R4XCI6XCJ3ZWJnbFwiLFwidlwiOlwibWVzYVwiLFwiclwiOlwibGx2bXBpcGVcIixcInNsdlwiOlwid2ViZ2wgZ2xzbCBlcyAxLjBcIixcImd2ZXJcIjpcIndlYmdsIDEuMFwiLFwiZ3ZlblwiOlwibW96aWxsYVwiLFwiYmVuXCI6OTksXCJ3Z2xcIjoxLFwiZ3JlblwiOlwibGx2bXBpcGVcIixcInNlZlwiOjQ5NDE5NTA0MyxcInNlY1wiOlwiXCJ9Il0sWyJibmNoIiw1NzNdLFstMTgsIlsxLDAsMCwwXSJdLFstMjMsIisiXSxbLTI1LCItIl0sWy0yNiwiLSJdLFstMzEsImZhbHNlIl0sWy0xLCJMaW51eCB4ODZfNjQiXSxbLTM2LCJbXCI1LzRcIixcIjUvNFwiXSJdLFstMzgsImksLTEsLTEsMzEsMCwyLDAsMCwyMTMsNjMsLTEsMCwsNTk4LDEyMDIsMTIwMSJdLFstNDAsIjM3Il0sWy00LCItIl0sWy00NiwiMCJdLFstNTMsIjAwMSJdLFstMTYsIjAiXSxbLTIyLCJbXCJuXCIsXCJuXCJdIl0sWy0zMywiLSJdLFstNDksIi0iXSxbLTUyLCItIl0sWyJkZGIiLCIwLDExLDAsMCwwLDMsMCwwLDAsMSwwLDAsMCwwLDEsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwwLDMsMCwwLDAsMCwwLDAsMSw0LDUxLDEsMTYsMCwxLDAsMCwwLDAsMSwwLDAsMCwyLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMSJdLFsiY2IiLCIxLDAsMCwwLDAsMCwwLDAsMSw1LDEzLDEsMTAzLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwxLDAsMCwwLDAsMSwwLDEsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDIsMCwxLDAsMiJdXQ%3D%3D&dep=0&pre=0&sdd=&cri=Bt1lNloswJ&pto=1219&ver=64&gac=-&mei=&ap=&fe=1&duid=1.1743422471.JHjwIxKOBLk5RXoO&suid=1.1743422471.TlhcuSTSeNcHh91N&tuid=1.1743422471.EN0zRY9dco8dn7LR&fbc=->m=-&it=9%2C497%2C54&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D
200 OK 3.5 kB URL GET obseu.seaskydvd.com/ct?id=80705&url=https%3A%2F%2Fcp3699.olikonnre.org%2FBin%2FScreenConnect.WindowsClient.exe&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=db3ae61becb69a939f83741d4de0f1ef5ee75145&tsf=0&tsfmi=&tsfu=&cb=1743422471310&hl=2&op=0&ag=2881387774&rand=135610621062826020218228220201007919790152119656621900182520170010181757758602451018215&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=&cri=Bt1lNloswJ&pto=1219&ver=64&gac=-&mei=&ap=&fe=1&duid=1.1743422471.JHjwIxKOBLk5RXoO&suid=1.1743422471.TlhcuSTSeNcHh91N&tuid=1.1743422471.EN0zRY9dco8dn7LR&fbc=->m=-&it=9%2C497%2C54&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D
IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerZeroSSL
Subject*.seaskydvd.com
Fingerprint05:53:23:76:9D:A8:A2:5D:64:89:60:32:6A:A8:21:06:4A:59:24:C3
ValiditySun, 30 Mar 2025 00:00:00 GMT - Sat, 28 Jun 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3545), with no line terminators
Hash 64e769b5feb26b6bf4c6d9fdec589406
dc414c18fea3a4126c15360cf8d0d4d290750111
9965cbb315580b3d767bb46e0d5560c3f1e478eef5f9bd1987ede781ae95ead1
GET /ct?id=80705&url=https%3A%2F%2Fcp3699.olikonnre.org%2FBin%2FScreenConnect.WindowsClient.exe&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=db3ae61becb69a939f83741d4de0f1ef5ee75145&tsf=0&tsfmi=&tsfu=&cb=1743422471310&hl=2&op=0&ag=2881387774&rand=135610621062826020218228220201007919790152119656621900182520170010181757758602451018215&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=&cri=Bt1lNloswJ&pto=1219&ver=64&gac=-&mei=&ap=&fe=1&duid=1.1743422471.JHjwIxKOBLk5RXoO&suid=1.1743422471.TlhcuSTSeNcHh91N&tuid=1.1743422471.EN0zRY9dco8dn7LR&fbc=->m=-&it=9%2C497%2C54&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Mon, 31 Mar 2025 12:01:11 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=ba110cd11344e5248c421ad4c848c693; Max-Age=29030400; Path=/; Expires=Mon, 02 Mar 2026 12:01:11 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: https://cp3699.olikonnre.org
content-length: 1206
X-Firefox-Spdy: h2
GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=fmufd1t0bnvu&cd_fexp=72717107&aqid=B4TqZ6zYB_WnxdwP5JTyiQE&psid=5837883959&pbt=bs&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=740324255&csala=5%7C0%7C363%7C83%7C167&lle=0&ifv=1&hpt=1
204 No Content 0 B URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=fmufd1t0bnvu&cd_fexp=72717107&aqid=B4TqZ6zYB_WnxdwP5JTyiQE&psid=5837883959&pbt=bs&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=740324255&csala=5%7C0%7C363%7C83%7C167&lle=0&ifv=1&hpt=1
IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint47:7F:1D:15:F5:CA:9E:50:B7:5D:F0:5E:E9:66:E5:02:F8:3D:AD:E6
ValidityMon, 10 Mar 2025 08:39:05 GMT - Mon, 02 Jun 2025 08:39:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=fmufd1t0bnvu&cd_fexp=72717107&aqid=B4TqZ6zYB_WnxdwP5JTyiQE&psid=5837883959&pbt=bs&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=740324255&csala=5%7C0%7C363%7C83%7C167&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-u52-PWU3lsxfMiUQXtrl5Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Mon, 31 Mar 2025 12:01:13 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST obseu.seaskydvd.com/mon
200 OK 0 B IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerZeroSSL
Subject*.seaskydvd.com
Fingerprint05:53:23:76:9D:A8:A2:5D:64:89:60:32:6A:A8:21:06:4A:59:24:C3
ValiditySun, 30 Mar 2025 00:00:00 GMT - Sat, 28 Jun 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1766
Origin: https://cp3699.olikonnre.org
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/
Cookie: cg_uuid=ba110cd11344e5248c421ad4c848c693
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://cp3699.olikonnre.org
content-type: application/json
date: Mon, 31 Mar 2025 12:01:26 GMT
content-length: 0
X-Firefox-Spdy: h2
GET www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
200 OK 144 kB URL GET www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint2F:CC:05:C5:14:C4:CD:A4:26:05:31:F9:67:40:7C:D3:39:74:34:0C
ValidityMon, 10 Mar 2025 08:37:46 GMT - Mon, 02 Jun 2025 08:37:45 GMT
File type JavaScript source, ASCII text, with very long lines (1831)
Size 144 kB (144128 bytes)
Hash 4c7e880c2aefa6029d37243d98154abe
1c1907176debe4f203a6033184ab8755b11e8fad
12d2eb6f0e3265d35c62ccfbbdc8539cc77baf957ffd3b27aee100ebcfc42231
GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Mon, 31 Mar 2025 12:01:10 GMT
expires: Mon, 31 Mar 2025 12:01:10 GMT
cache-control: private, max-age=3600
etag: "15473499877488930535"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
200 OK 11 kB URL GET d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62
ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File type PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Hash 0cb2e5165dc9324eb462199f04e1ffa9
9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8
67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
date: Mon, 31 Mar 2025 11:05:04 GMT
accept-ranges: bytes
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
etag: "czzekhpxmtxd8rz"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RUoBhJYrM1EqwT6X1tOoRe6VXF_NlnRMoiz5vI9UCvKttCSHqd156w==
age: 3366
X-Firefox-Spdy: h2
GET obseu.seaskydvd.com/tracker/tc_imp.gif?e=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&cri=Bt1lNloswJ&ts=205&cb=1743422471516
200 OK 43 B URL GET obseu.seaskydvd.com/tracker/tc_imp.gif?e=37dfbd8ee84e00126eedc337e8438d9c9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f671bd38288077f6b1aff7b7300d23edd66cf57340722c206040c3d005795b8624c77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c281275040df6dd2d677d52a5f91f7b8aaff02d90b20d7a4e7fa3f3f19ccd71bbcfc248b5038e523d65cceb92a9e471d280f061856b4a95b98a260709a4216cae991d7ab184a22fd058a104e79a478018d4bd269a2756c5db728d3be38db6addabca7074daf71e2e4bd6a2268e5863dd4aa17fb10541dc5090f97dad08681ec8233d927dcdeedd92bbf323b35c4206bb8b9d10067d0a82bfb4fa7844ed62ff933025b53c831af1ddbd7ee27f8c776871dedcf849b448848626af355561c3c4f73c8af68b8079b8e8927a9986ef1953ed987eebe33cfbce44b6d7b8bff5549d7f7511a0eb4a2a231f549c6b309b1a457e66eaa238841c80681fa4f9b4372baeaeb322d35721e38174e55f6f38607d103b4594f4329f8b453de98180ef6a4debabc6fc0f1e5fc86fba7ed4f5321fa458eaa446d8b447906d465596d71f079af6a04c5eac07f9767d62197b62acdb911847d0f254d1e6e47d999b0c936695484194291d0ddb9b2ce540480cac527d1b63b00a7a06e676c9bf9862933ab35c61ac64ef1358913c5c914fcb936e0998cd5995906b3b86826e112c5d8cef86ec465356817887a0715e8f74d85fe15d4989ccc57c9858537093659cb43ab4fc83cbbd53ac93a177f46461f6dfd48ccc16547b304adbbe7779d965f86746fbd452d68ce948e590baa28aad0728f50685f14ae312e9ebd833d894534998410bdcd9da2d150d05c493055af22674096930d5fa62ea7a3833f85d3f01c023ff13b320205d3050fa5cabb5a039a6170d08b951e8a87f8dd5322a622e2513f44c64f3f6d8493164b8ed6e0d6e6ae01a37eff28c72f9fca5e98f1ea727496c6329ec1ede99dad81df3e14ddba6600d6&cri=Bt1lNloswJ&ts=205&cb=1743422471516
IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerZeroSSL
Subject*.seaskydvd.com
Fingerprint05:53:23:76:9D:A8:A2:5D:64:89:60:32:6A:A8:21:06:4A:59:24:C3
ValiditySun, 30 Mar 2025 00:00:00 GMT - Sat, 28 Jun 2025 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=Bt1lNloswJ&ts=205&cb=1743422471516 HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/
Cookie: cg_uuid=ba110cd11344e5248c421ad4c848c693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Mon, 31 Mar 2025 12:01:11 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
200 OK 200 B URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP
Requested by https://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fcp3699.olikonnre.org%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.oCN6HPxk2JLIMtNM_b9BzGUmHij60Cq-WNW0GXsNnBC60xD4x9Q97w.qVNRjaWeQ7G4rUkk3OflGw.-ruGaTaxztjQuzjq9Gf_AQNTAn0kCD-sfWfTzi1mKsn-VOv-2lahetmkaOpr2whx1b-HnidasNQAg5TXHlLgLvkzr3WxFjymVH6vLgEJSn3sdM4_NjSYGEE_4GcnIFUg7FsFCdh1nbzQAViBo0bx3Wb2JSIQI8OAzv5Whl8HynNrYiPtQXK1fKWVcUOwRjEUyL-4WwQeetWTpTC_LFgl3dlmewCgY1YWZhauUjg2Do9oZWY9I96nkX2v80iWf6ucuZhsAN7x-vlhIPlGN6Lo2qvKGuMV7DElYOUSszy4pVQuP-abtbTMXw0hLSEGGVa0E4mbpFD_NKcU2lsQQWSYrzxoQICsNRVJUNQVsUj9JVsIEIyb1eB3j0XRq1vPGwM0B-J0SwVbZncQHrKpVpQvW_Mk8nuJoGCGDFv-Wk0cSfwMzpE5IMt8EZRlpN7t7mfhxGkuCRzRSPVbdiTTv9gmQ0mlMDlMtDMvIRMChMYBtnvbb2pclXPv_AIpa0ZuliOluHxwty71ZUGESuXYr0Bbo13R8U4e8ZfKYfcm4wW0sqJPDsdUzsYK87ZKbci8Yl3c43wb7zSK1SgybmOo_n6E-GtuOLb4d6Ybckpel1UkroIP2oNORDuzpcxuYBFFVDY9.AD6LiWo6TDkvQcp7jjvZfw&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=311743422470968&num=0&output=afd_ads&domain_name=cp3699.olikonnre.org&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1743422470969&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=740324255&rurl=https%3A%2F%2Fcp3699.olikonnre.org%2FBin%2FScreenConnect.WindowsClient.exe
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
Fingerprint76:FD:48:21:91:D7:93:F0:95:A3:DA:6B:29:ED:D2:2A:3F:D2:DD:38
ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
File type SVG Scalable Vector Graphics image
Hash 592bbd56abac313ab322bc38f7027496
ecc40e55421cbfc9cc24e256c999a497b84d997f
fe3a1073d51df0f353dfa771acde9ea020e215a74edf7b24775e50282b6d6eda
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 30 Mar 2025 15:14:40 GMT
expires: Mon, 31 Mar 2025 14:14:40 GMT
cache-control: public, max-age=82800
age: 74791
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
200 OK 17 kB URL User Request GET cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
IP
Certificate IssuerLet's Encrypt
Subjectcp3699.olikonnre.org
FingerprintF3:69:DA:F2:AC:58:DB:5C:8F:F0:6C:12:BE:5E:40:35:8F:94:7F:4E
ValiditySat, 01 Mar 2025 07:51:45 GMT - Fri, 30 May 2025 07:51:44 GMT
File type HTML document, ASCII text, with very long lines (9126)
Hash 3ad2b683f443900301c043f6f45303fa
48522ac75727e8f15f9c5b396c7f7fb4655f8afe
e46a4d1b7f669587bfd0df824096199292364d8b81e1ad51a4ab5ec6d73e2f40
GET /Bin/ScreenConnect.WindowsClient.exe HTTP/1.1
Host: cp3699.olikonnre.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":50559"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Mon, 31 Mar 2025 12:01:10 GMT
server: Caddy, nginx
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_T6jfqaoFXZ1GiTlOUrgYGuQiZys7TUq9UILSKNP5p6FJPYFx9FRIcp9TolwqaF2EoTHT2io1T6T3zeYavPd04Q==
x-buckets: bucket102,bucket077
x-domain: olikonnre.org
x-language: norwegian
x-pcrew-blocked-reason: hosting network
x-pcrew-ip-organization: Blix Solutions
x-subdomain: cp3699
x-template: tpl_CleanPeppermintBlack_twoclick
X-Firefox-Spdy: h2
GET euob.seaskydvd.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js
200 OK 111 kB URL GET euob.seaskydvd.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js
IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerAmazon
Subject*.seaskydvd.com
Fingerprint5D:E2:D2:FB:0A:F9:91:11:96:63:07:24:64:47:1E:C8:64:72:1A:12
ValidityTue, 18 Jun 2024 00:00:00 GMT - Fri, 18 Jul 2025 23:59:59 GMT
Size 111 kB (110656 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1
Host: euob.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 40486
content-encoding: gzip
server: Caddy
date: Mon, 31 Mar 2025 00:51:27 GMT
cache-control: max-age=43200
expires: Mon, 31 Mar 2025 12:50:39 GMT
etag: "1b040-lc2lyWGzIUlOC9YMwtG/iZ50mKw"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QNl7oQJMADKWwx4etH-R7ab6Szipx-ZC-SgDE3EnhkvrX3H0KAbwgw==
age: 40231
X-Firefox-Spdy: h2
GET cp3699.olikonnre.org/munin/a/ls?t=67ea8406&token=db3ae61becb69a939f83741d4de0f1ef5ee75145
201 Created 0 B URL GET cp3699.olikonnre.org/munin/a/ls?t=67ea8406&token=db3ae61becb69a939f83741d4de0f1ef5ee75145
IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerLet's Encrypt
Subjectcp3699.olikonnre.org
FingerprintF3:69:DA:F2:AC:58:DB:5C:8F:F0:6C:12:BE:5E:40:35:8F:94:7F:4E
ValiditySat, 01 Mar 2025 07:51:45 GMT - Fri, 30 May 2025 07:51:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/ls?t=67ea8406&token=db3ae61becb69a939f83741d4de0f1ef5ee75145 HTTP/1.1
Host: cp3699.olikonnre.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 201 Created
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin:
access-control-max-age: 86400
alt-svc: h3=":50559"; ma=2592000
charset: utf-8
content-type: text/javascript;charset=UTF-8
date: Mon, 31 Mar 2025 12:01:10 GMT
server: Caddy, nginx
status: 201 Created
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_LyyPrr5rwYGfc1pfYZsFv6zBNlMxCO/3ftt0Krvjff53iL8P/B7iiR4AkqdOLvhyYmySrDQWwGkZ4M455QSqtw==
x-log-success: 67ea84066adfe6a45e0213a1
content-length: 0
X-Firefox-Spdy: h2
GET cp3699.olikonnre.org/munin/a/tr/answercheck/yes?domain=olikonnre.org&caf=1&toggle=answercheck&answer=yes&uid=MTc0MzQyMjQ3MC4zNTk0OjU4OTQ5YzZmOWM2YWY5YTI5OGZjZDQ0NGYxNGRmODI0ZmI0YTU1ODdjOTcxOWViMjY1ZWI5MDU3MmU2NzczY2Y6NjdlYTg0MDY1N2MxNw%3D%3D
200 OK 0 B URL GET cp3699.olikonnre.org/munin/a/tr/answercheck/yes?domain=olikonnre.org&caf=1&toggle=answercheck&answer=yes&uid=MTc0MzQyMjQ3MC4zNTk0OjU4OTQ5YzZmOWM2YWY5YTI5OGZjZDQ0NGYxNGRmODI0ZmI0YTU1ODdjOTcxOWViMjY1ZWI5MDU3MmU2NzczY2Y6NjdlYTg0MDY1N2MxNw%3D%3D
IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerLet's Encrypt
Subjectcp3699.olikonnre.org
FingerprintF3:69:DA:F2:AC:58:DB:5C:8F:F0:6C:12:BE:5E:40:35:8F:94:7F:4E
ValiditySat, 01 Mar 2025 07:51:45 GMT - Fri, 30 May 2025 07:51:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/tr/answercheck/yes?domain=olikonnre.org&caf=1&toggle=answercheck&answer=yes&uid=MTc0MzQyMjQ3MC4zNTk0OjU4OTQ5YzZmOWM2YWY5YTI5OGZjZDQ0NGYxNGRmODI0ZmI0YTU1ODdjOTcxOWViMjY1ZWI5MDU3MmU2NzczY2Y6NjdlYTg0MDY1N2MxNw%3D%3D HTTP/1.1
Host: cp3699.olikonnre.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Cookie: _cq_duid=1.1743422471.JHjwIxKOBLk5RXoO; _cq_suid=1.1743422471.TlhcuSTSeNcHh91N
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50559"; ma=2592000
content-type: text/html; charset=UTF-8
date: Mon, 31 Mar 2025 12:01:11 GMT
server: Caddy, nginx
x-custom-track: answercheck
content-length: 0
X-Firefox-Spdy: h2
GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
200 OK 391 B URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
IP
Requested by https://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fcp3699.olikonnre.org%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.oCN6HPxk2JLIMtNM_b9BzGUmHij60Cq-WNW0GXsNnBC60xD4x9Q97w.qVNRjaWeQ7G4rUkk3OflGw.-ruGaTaxztjQuzjq9Gf_AQNTAn0kCD-sfWfTzi1mKsn-VOv-2lahetmkaOpr2whx1b-HnidasNQAg5TXHlLgLvkzr3WxFjymVH6vLgEJSn3sdM4_NjSYGEE_4GcnIFUg7FsFCdh1nbzQAViBo0bx3Wb2JSIQI8OAzv5Whl8HynNrYiPtQXK1fKWVcUOwRjEUyL-4WwQeetWTpTC_LFgl3dlmewCgY1YWZhauUjg2Do9oZWY9I96nkX2v80iWf6ucuZhsAN7x-vlhIPlGN6Lo2qvKGuMV7DElYOUSszy4pVQuP-abtbTMXw0hLSEGGVa0E4mbpFD_NKcU2lsQQWSYrzxoQICsNRVJUNQVsUj9JVsIEIyb1eB3j0XRq1vPGwM0B-J0SwVbZncQHrKpVpQvW_Mk8nuJoGCGDFv-Wk0cSfwMzpE5IMt8EZRlpN7t7mfhxGkuCRzRSPVbdiTTv9gmQ0mlMDlMtDMvIRMChMYBtnvbb2pclXPv_AIpa0ZuliOluHxwty71ZUGESuXYr0Bbo13R8U4e8ZfKYfcm4wW0sqJPDsdUzsYK87ZKbci8Yl3c43wb7zSK1SgybmOo_n6E-GtuOLb4d6Ybckpel1UkroIP2oNORDuzpcxuYBFFVDY9.AD6LiWo6TDkvQcp7jjvZfw&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=311743422470968&num=0&output=afd_ads&domain_name=cp3699.olikonnre.org&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1743422470969&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=740324255&rurl=https%3A%2F%2Fcp3699.olikonnre.org%2FBin%2FScreenConnect.WindowsClient.exe
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
Fingerprint76:FD:48:21:91:D7:93:F0:95:A3:DA:6B:29:ED:D2:2A:3F:D2:DD:38
ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
File type SVG Scalable Vector Graphics image
Hash 249bb4c6a37dfa60d6ecf838cada5020
4e56099d13b015804f79d1182f66982bc6e4662b
a2cebc2af2fd29cbee1ed7860ef5b12088b85259918d8bf2f2aaa99b915fa3f4
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 30 Mar 2025 14:55:27 GMT
expires: Mon, 31 Mar 2025 13:55:27 GMT
cache-control: public, max-age=82800
age: 75944
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST obseu.seaskydvd.com/mon
200 OK 0 B IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerZeroSSL
Subject*.seaskydvd.com
Fingerprint05:53:23:76:9D:A8:A2:5D:64:89:60:32:6A:A8:21:06:4A:59:24:C3
ValiditySun, 30 Mar 2025 00:00:00 GMT - Sat, 28 Jun 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2549
Origin: https://cp3699.olikonnre.org
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/
Cookie: cg_uuid=ba110cd11344e5248c421ad4c848c693
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://cp3699.olikonnre.org
content-type: application/json
date: Mon, 31 Mar 2025 12:01:12 GMT
content-length: 0
X-Firefox-Spdy: h2
GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=bgjbbkfdtcz1&cd_fexp=72717107&aqid=B4TqZ6zYB_WnxdwP5JTyiQE&psid=5837883959&pbt=bv&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=740324255&csala=5%7C0%7C363%7C83%7C167&lle=0&ifv=1&hpt=1
204 No Content 0 B URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=bgjbbkfdtcz1&cd_fexp=72717107&aqid=B4TqZ6zYB_WnxdwP5JTyiQE&psid=5837883959&pbt=bv&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=740324255&csala=5%7C0%7C363%7C83%7C167&lle=0&ifv=1&hpt=1
IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint47:7F:1D:15:F5:CA:9E:50:B7:5D:F0:5E:E9:66:E5:02:F8:3D:AD:E6
ValidityMon, 10 Mar 2025 08:39:05 GMT - Mon, 02 Jun 2025 08:39:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=bgjbbkfdtcz1&cd_fexp=72717107&aqid=B4TqZ6zYB_WnxdwP5JTyiQE&psid=5837883959&pbt=bv&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=740324255&csala=5%7C0%7C363%7C83%7C167&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-LJhouykejMXfcp46agejhw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Mon, 31 Mar 2025 12:01:13 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST obseu.seaskydvd.com/mon
200 OK 0 B IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerZeroSSL
Subject*.seaskydvd.com
Fingerprint05:53:23:76:9D:A8:A2:5D:64:89:60:32:6A:A8:21:06:4A:59:24:C3
ValiditySun, 30 Mar 2025 00:00:00 GMT - Sat, 28 Jun 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1763
Origin: https://cp3699.olikonnre.org
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/
Cookie: cg_uuid=ba110cd11344e5248c421ad4c848c693
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://cp3699.olikonnre.org
content-type: application/json
date: Mon, 31 Mar 2025 12:01:16 GMT
content-length: 0
X-Firefox-Spdy: h2
GET cp3699.olikonnre.org/munin/a/tr/browserjs?domain=olikonnre.org&toggle=browserjs&uid=MTc0MzQyMjQ3MC4zNTk0OjU4OTQ5YzZmOWM2YWY5YTI5OGZjZDQ0NGYxNGRmODI0ZmI0YTU1ODdjOTcxOWViMjY1ZWI5MDU3MmU2NzczY2Y6NjdlYTg0MDY1N2MxNw%3D%3D
200 OK 0 B URL GET cp3699.olikonnre.org/munin/a/tr/browserjs?domain=olikonnre.org&toggle=browserjs&uid=MTc0MzQyMjQ3MC4zNTk0OjU4OTQ5YzZmOWM2YWY5YTI5OGZjZDQ0NGYxNGRmODI0ZmI0YTU1ODdjOTcxOWViMjY1ZWI5MDU3MmU2NzczY2Y6NjdlYTg0MDY1N2MxNw%3D%3D
IP
Requested by https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Certificate IssuerLet's Encrypt
Subjectcp3699.olikonnre.org
FingerprintF3:69:DA:F2:AC:58:DB:5C:8F:F0:6C:12:BE:5E:40:35:8F:94:7F:4E
ValiditySat, 01 Mar 2025 07:51:45 GMT - Fri, 30 May 2025 07:51:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/tr/browserjs?domain=olikonnre.org&toggle=browserjs&uid=MTc0MzQyMjQ3MC4zNTk0OjU4OTQ5YzZmOWM2YWY5YTI5OGZjZDQ0NGYxNGRmODI0ZmI0YTU1ODdjOTcxOWViMjY1ZWI5MDU3MmU2NzczY2Y6NjdlYTg0MDY1N2MxNw%3D%3D HTTP/1.1
Host: cp3699.olikonnre.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cp3699.olikonnre.org/Bin/ScreenConnect.WindowsClient.exe
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50559"; ma=2592000
content-type: text/html; charset=UTF-8
date: Mon, 31 Mar 2025 12:01:10 GMT
server: Caddy, nginx
x-custom-track: browserjs
content-length: 0
X-Firefox-Spdy: h2
GET syndicatedsearch.goog/adsense/domains/caf.js
200 OK 144 kB URL GET syndicatedsearch.goog/adsense/domains/caf.js
IP
Requested by https://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fcp3699.olikonnre.org%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.oCN6HPxk2JLIMtNM_b9BzGUmHij60Cq-WNW0GXsNnBC60xD4x9Q97w.qVNRjaWeQ7G4rUkk3OflGw.-ruGaTaxztjQuzjq9Gf_AQNTAn0kCD-sfWfTzi1mKsn-VOv-2lahetmkaOpr2whx1b-HnidasNQAg5TXHlLgLvkzr3WxFjymVH6vLgEJSn3sdM4_NjSYGEE_4GcnIFUg7FsFCdh1nbzQAViBo0bx3Wb2JSIQI8OAzv5Whl8HynNrYiPtQXK1fKWVcUOwRjEUyL-4WwQeetWTpTC_LFgl3dlmewCgY1YWZhauUjg2Do9oZWY9I96nkX2v80iWf6ucuZhsAN7x-vlhIPlGN6Lo2qvKGuMV7DElYOUSszy4pVQuP-abtbTMXw0hLSEGGVa0E4mbpFD_NKcU2lsQQWSYrzxoQICsNRVJUNQVsUj9JVsIEIyb1eB3j0XRq1vPGwM0B-J0SwVbZncQHrKpVpQvW_Mk8nuJoGCGDFv-Wk0cSfwMzpE5IMt8EZRlpN7t7mfhxGkuCRzRSPVbdiTTv9gmQ0mlMDlMtDMvIRMChMYBtnvbb2pclXPv_AIpa0ZuliOluHxwty71ZUGESuXYr0Bbo13R8U4e8ZfKYfcm4wW0sqJPDsdUzsYK87ZKbci8Yl3c43wb7zSK1SgybmOo_n6E-GtuOLb4d6Ybckpel1UkroIP2oNORDuzpcxuYBFFVDY9.AD6LiWo6TDkvQcp7jjvZfw&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=311743422470968&num=0&output=afd_ads&domain_name=cp3699.olikonnre.org&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1743422470969&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=740324255&rurl=https%3A%2F%2Fcp3699.olikonnre.org%2FBin%2FScreenConnect.WindowsClient.exe
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint47:7F:1D:15:F5:CA:9E:50:B7:5D:F0:5E:E9:66:E5:02:F8:3D:AD:E6
ValidityMon, 10 Mar 2025 08:39:05 GMT - Mon, 02 Jun 2025 08:39:04 GMT
File type JavaScript source, ASCII text, with very long lines (1831)
Size 144 kB (144144 bytes)
Hash a57de17e53ded0525f4e6e21eb6bce7b
d7f17afc9fb051437d044a9bdb78eb11f43cc741
28dcefc8e2d516b62a71b7d54a93f5525b061212918abdde68be17a2d46ae66b
GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Mon, 31 Mar 2025 12:01:11 GMT
expires: Mon, 31 Mar 2025 12:01:11 GMT
cache-control: private, max-age=3600
etag: "776173769604924913"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
15.197.130.221
54.75.69.192