When closing connection to proxy (attackers view) connection spits out "Connection to haas-app.nic.cz closed."